Function at 0x1400b1e80
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xe0
mov rax, qword [0x140185640]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov rax, qword [rcx]
xor edi, edi
mov rbp, qword [rcx + 8]
mov r12, rax
mov rsi, qword [rcx + 0x10]
mov r8d, edi
mov r14, qword [rcx + 0x18]
mov r15, qword [rcx + 0x20]
mov r13, qword [rcx + 0x28]
mov qword [rsp + 0x38], rax
mov rax, qword [rcx + 0x30]
mov r10, rax
mov qword [rsp + 8], rax
mov rax, qword [rcx + 0x38]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x40], rcx
mov qword [rsp], rdi
jmp 0x1400b1f05
mov r10, qword [rsp + 8]
mov r11, r10
lea ebx, [rdi*8]
xor r11, r13
mov eax, ebx
add rdx, rax
and r11, r15
xor r11, r10
mov r10, r12
ror r10, 0x1c
movzx eax, byte [rdx]
movzx r9d, byte [rdx + 1]
shl rax, 8
or r9, rax
movzx eax, byte [rdx + 2]
shl r9, 8
or r9, rax
movzx eax, byte [rdx + 3]
shl r9, 8
or r9, rax
movzx eax, byte [rdx + 4]
shl r9, 8
or r9, rax
movzx eax, byte [rdx + 5]
shl r9, 8
or r9, rax
movzx eax, byte [rdx + 6]
shl r9, 8
or r9, rax
movzx eax, byte [rdx + 7]
shl r9, 8
mov rdx, r15
or r9, rax
ror rdx, 0xe
mov qword [rsp + r8 + 0x50], r9
mov rax, r15
ror rax, 0x12
mov r8, r15
xor rdx, rax
ror r8, 0x29
mov rax, qword [rsp]
xor rdx, r8
add r11, rdx
mov r8, r12
ror r8, 0x22
lea rdx, [0x1400c3560]
add r11, qword [rax + rdx]
mov rdx, rbp
add r11, r9
xor rdx, r12
add r11, qword [rsp + 0x10]
and rdx, rsi
add r14, r11
mov qword [rsp + 0x10], r13
mov rax, rbp
mov r9, r12
and rax, r12
ror r9, 0x27
xor rdx, rax
xor r9, r8
mov r8, qword [rsp + 0x18]
xor r9, r10
mov r10, qword [rsp + 8]
mov qword [rsp + 8], r15
mov r15, rsi
mov rsi, r12
lea rax, [r11 + r9]
mov r11, r13
add rax, rdx
mov r13, r14
mov r14, rbp
mov rbp, rax
lea eax, [rbx + 8]
mov edx, eax
movzx r9d, byte [rax + r8 + 1]
movzx eax, byte [rax + r8]
shl rax, 8
or r9, rax
movzx eax, byte [rdx + r8 + 2]
shl r9, 8
or r9, rax
shl r9, 8
movzx eax, byte [rdx + r8 + 3]
mov r12, rbp
xor r11, qword [rsp + 8]
or r9, rax
movzx eax, byte [rdx + r8 + 4]
and r11, r13
xor r11, qword [rsp + 0x10]
add edi, 2
mov rbx, qword [rsp]
shl r9, 8
or r9, rax
ror r12, 0x27
movzx eax, byte [rdx + r8 + 5]
shl r9, 8
or r9, rax
movzx eax, byte [rdx + r8 + 6]
shl r9, 8
or r9, rax
movzx eax, byte [rdx + r8 + 7]
shl r9, 8
mov rdx, r13
or r9, rax
ror rdx, 0xe
mov rax, r13
mov qword [rsp + rbx + 0x58], r9
ror rax, 0x12
mov r8, r13
xor rdx, rax
ror r8, 0x29
xor rdx, r8
lea rax, [0x1400c3560]
add r11, rdx
mov r8, rbp
add r11, qword [rbx + rax + 8]
mov rdx, rsi
xor rdx, rbp
ror r8, 0x22
xor r12, r8
and rdx, r14
add rbx, 0x10
add r11, r9
add r11, r10
mov qword [rsp], rbx
mov r10, rbp
mov rax, rsi
ror r10, 0x1c
and rax, rbp
xor r12, r10
xor rdx, rax
add r12, r11
add r15, r11
add r12, rdx
mov r8, rbx
mov rdx, qword [rsp + 0x18]
cmp edi, 0x10
jb 0x1400b1f00
mov r10d, reloc.WS2_32.dll_recvfrom
mov qword [rsp + 0x28], r14
lea rax, [0x1400c35e0]
mov qword [rsp], r10
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov qword [rsp + 0x30], 0x20
nop dword [rax]
lea rax, [r10 - 3]
and eax, 0xf
lea r14, [rsp + 0x50]
mov rsi, qword [rsp + rax*8 + 0x50]
mov rax, r10
and eax, 0xf
mov r11, rsi
mov r9, qword [r14 + rax*8]
lea r14, [r14 + rax*8]
ror r11, 0x3d
lea rax, [r10 - 1]
and eax, 0xf
lea r10, [rsp + 0x50]
lea r10, [r10 + rax*8]
mov rdx, r9
mov rax, qword [rsp]
mov r8, r9
add rax, 0xfffffffffffffff8
ror rdx, 8
and eax, 0xf
shr r9, 7
xor r9, rdx
ror r8, 1
xor r9, r8
mov rdi, rsi
shr rsi, 6
mov rdx, r15
mov rbx, qword [rsp + rax*8 + 0x50]
xor rsi, r11
add rbx, r9
ror rdx, 0x12
ror rdi, 0x13
mov r11, r15
ror r11, 0xe
xor rsi, rdi
mov rdi, qword [rsp + 8]
xor r11, rdx
add rbx, rsi
mov qword [rsp + 8], r15
add rbx, qword [r10]
mov r8, r15
ror r8, 0x29
mov rdx, rbp
xor r11, r8
mov qword [r10], rbx
xor rdx, r12
mov rax, rdi
xor rax, r13
and rdx, rcx
and rax, r15
mov r8, r12
xor rax, rdi
ror r8, 0x22
add rax, rbx
mov r9, r12
mov rbx, qword [rsp + 0x28]
add r11, rax
mov rax, qword [rsp + 0x20]
mov r10, r12
ror r9, 0x27
mov r15, rcx
ror r10, 0x1c
xor r9, r8
xor r9, r10
mov qword [rsp + 0x28], rbp
add r11, qword [rax]
mov rsi, rdi
add r11, qword [rsp + 0x10]
mov rax, rbp
and rax, r12
mov qword [rsp + 0x10], r13
xor rdx, rax
add rbx, r11
mov r13, rbx
mov rcx, r12
lea rax, [r11 + r9]
add rax, rdx
mov rdx, qword [rsp]
mov rbp, rax
lea rax, [rdx - 2]
and eax, 0xf
mov rbx, qword [rsp + rax*8 + 0x50]
mov r12, rbp
lea rax, [rdx + 1]
ror r12, 0x27
add rdx, 0xfffffffffffffff9
and eax, 0xf
and edx, 0xf
mov r10, rbx
ror r10, 0x3d
mov r11, rbx
ror r11, 0x13
mov r9, qword [rsp + rax*8 + 0x50]
mov rdi, qword [rsp + rdx*8 + 0x50]
mov rax, r9
ror rax, 8
mov r8, r9
ror r8, 1
mov rdx, r13
ror rdx, 0xe
shr rbx, 6
xor rbx, r10
shr r9, 7
xor rbx, r11
xor r9, rax
mov r11, qword [rsp + 0x10]
xor r9, r8
add rdi, r9
mov rax, r13
ror rax, 0x12
add rdi, rbx
add rdi, qword [r14]
xor rdx, rax
mov rax, qword [rsp + 0x20]
mov r8, r13
mov rbx, qword [rsp + 0x28]
mov r10, rbp
add qword [rsp + 0x20], 0x10
ror r8, 0x29
xor rdx, r8
ror r10, 0x1c
mov qword [r14], rdi
mov r8, rbp
mov r14, qword [rsp + 8]
xor r11, r14
ror r8, 0x22
and r11, r13
xor r12, r8
xor r11, qword [rsp + 0x10]
xor r12, r10
mov r10, qword [rsp]
add r11, rdx
add r11, qword [rax + 8]
add r10, 2
add r11, rdi
mov qword [rsp], r10
add r11, rsi
mov rdx, rcx
xor rdx, rbp
add r12, r11
and rdx, rbx
mov rax, rcx
and rax, rbp
add r15, r11
xor rdx, rax
add r12, rdx
sub qword [rsp + 0x30], 1
jne 0x1400b2130
mov rax, qword [rsp + 0x38]
add rax, r12
mov qword [rsp + 0x18], rcx
mov rcx, qword [rsp + 0x40]
add qword [rcx + 8], rbp
add qword [rcx + 0x18], rbx
add qword [rcx + 0x20], r15
add qword [rcx + 0x28], r13
add qword [rcx + 0x30], r14
mov qword [rcx], rax
mov rax, qword [rsp + 0x18]
add qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x10]
add qword [rcx + 0x38], rax
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.1400b2d40
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret