Function at 0x1400047c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
xor r12d, r12d
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov r15, rcx
mov qword [rbp - 0x29], r12
mov r14, r8
mov qword [rbp - 0x19], r12
mov rsi, rdx
lea ecx, [r12 + 3]
call fcn.140011110
call fcn.140010e40
mov r13, rax
test rax, rax
je 0x140004c8e
cmp qword [rsi + 0x18], 0x10
mov rcx, rsi
mov rbx, qword [rsi + 0x10]
mov qword [rbp - 0x49], r12
mov word [rbp - 0x49], 0x3f
mov qword [rbp - 0x31], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x39], 1
jb 0x140004846
mov rcx, qword [rsi]
cmp rbx, 0xe
ja 0x1400048ba
lea rax, [rbx + 1]
mov qword [rbp - 0x39], rax
lea r12, [rbx + rcx]
lea rax, [rbp - 0x49]
cmp r12, rax
jbe 0x140004880
lea rax, [rbp - 0x48]
cmp rcx, rax
ja 0x140004880
lea rax, [rbp - 0x49]
cmp rax, rcx
ja 0x140004877
xor edi, edi
jmp 0x140004883
lea rdi, [rbp - 0x49]
sub rdi, rcx
jmp 0x140004883
mov rdi, rbx
movzx eax, word [rbp - 0x49]
mov rdx, rcx
lea rcx, [rbp - 0x49]
mov word [rbp + rbx - 0x49], ax
mov r8, rdi
call fcn.140068630
lea rcx, [rbp - 0x49]
sub rbx, rdi
add rcx, rdi
lea rdx, [r12 + rdi]
mov r8, rbx
call fcn.140068630
lea rax, [rbp - 0x49]
xor r12d, r12d
jmp 0x1400048d0
mov qword [rsp + 0x28], rbx
mov rdx, rbx
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x49]
call fcn.14000e640
movups xmm0, xmmword [rax]
mov rdx, r14
movups xmmword [rbp + 0x17], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x27], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
cmp qword [r14 + 0x18], 0x10
jb 0x1400048fb
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
lea rcx, [rbp + 0x17]
call fcn.1400093b0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 7], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x140004961
mov rcx, qword [rbp + 0x17]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000495c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e2a
call fcn.140066554
mov rdx, qword [rbp - 0x31]
mov qword [rbp + 0x27], r12
mov qword [rbp + 0x2f], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x17], 0
cmp rdx, 0x10
jb 0x1400049ac
mov rcx, qword [rbp - 0x49]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400049a7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e2a
call fcn.140066554
cmp qword [rbp + 0xf], 0x10
lea r8, [rbp - 9]
mov edx, 0x2712
mov rcx, r13
cmovae r8, qword [rbp - 9]
call fcn.140013e90
lea rdx, str.Content_Type:_application_json__charsetUTF_8
xor ecx, ecx
call fcn.140011240
xor r8d, r8d
mov rcx, r13
mov rdi, rax
lea edx, [r8 + 0x51]
call fcn.140013e90
mov edx, Ordinal_45
mov rcx, r13
lea r8d, [rdx - 0x2a]
call fcn.140013e90
lea r8, str.EnAgent
mov edx, 0x2722
mov rcx, r13
call fcn.140013e90
mov edx, 0x44
mov rcx, r13
lea r8d, [rdx - 0x12]
call fcn.140013e90
mov edx, Ordinal_217
mov r8d, 1
mov rcx, r13
call fcn.140013e90
lea r8, [0x140004460]
mov edx, 0x4e2b
mov rcx, r13
call fcn.140013e90
lea r8, [rbp - 0x29]
mov edx, 0x2711
mov rcx, r13
call fcn.140013e90
mov r8, rdi
mov edx, 0x2727
mov rcx, r13
call fcn.140013e90
mov rcx, r13
call fcn.140010f20
mov rcx, rdi
mov ebx, eax
call fcn.1400112e0
mov rcx, r13
call fcn.140010e20
test ebx, ebx
je 0x140004c53
xor eax, eax
mov dword [rbp + 0x7f], 0xeaf6f1e7
mov byte [rbp + 0x85], al
mov edx, r12d
mov word [rbp + 0x83], 0xf4f4
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x7f]
add rcx, rax
lea eax, [rdx - 0x7e]
inc edx
xor byte [rcx], al
cmp edx, 6
jb 0x140004ab0
mov byte [rbp + 0x85], 0
lea rax, [rbp + 0x7f]
mov qword [r15], r12
mov r8, 0xffffffffffffffff
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140004af0
lea rdx, [rbp + 0x7f]
mov rcx, r15
call fcn.14000ab70
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x140004b41
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b3c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e1e
call fcn.140066554
mov rdx, qword [rbp - 0x11]
mov qword [rbp + 7], r12
mov qword [rbp + reloc.WS2_32.dll_ntohs], 0xf
mov byte [rbp - 9], 0
cmp rdx, 0x10
jb 0x140004b8c
mov rcx, qword [rbp - 0x29]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b87
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e1e
call fcn.140066554
mov rdx, qword [rsi + 0x18]
mov qword [rbp - 0x19], r12
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x29], 0
cmp rdx, 0x10
jb 0x140004bd6
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x140004bd1
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004e1e
mov rcx, r8
call fcn.140066554
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140004c1f
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x140004c1a
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004e1e
mov rcx, r8
call fcn.140066554
lea r11, [rsp + 0xb0]
mov byte [r14], 0
mov rbx, qword [r11 + 0x30]
mov rax, r15
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov qword [r14 + 0x10], r12
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x140004c8e
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c89
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e1e
call fcn.140066554
call fcn.1400110b0
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 9]
call fcn.140004490
mov rdx, rax
lea rcx, [rbp + 0x17]
call fcn.140004650
mov rdx, rax
mov rcx, r15
call fcn.140004700
mov rdx, qword [rbp + 0x2f]
cmp rdx, 8
jb 0x140004cf7
mov rcx, qword [rbp + 0x17]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cf2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e24
call fcn.140066554
mov rdx, qword [rbp + 0xf]
mov qword [rbp + 0x27], r12
mov qword [rbp + 0x2f], 7
mov word [rbp + 0x17], r12w
cmp rdx, 0x10
jb 0x140004d43
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d3e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e24
call fcn.140066554
mov rdx, qword [rbp - 0x11]
mov qword [rbp + 7], r12
mov qword [rbp + reloc.WS2_32.dll_ntohs], 0xf
mov byte [rbp - 9], 0
cmp rdx, 0x10
jb 0x140004d8e
mov rcx, qword [rbp - 0x29]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d89
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e24
call fcn.140066554
mov rdx, qword [rsi + 0x18]
mov qword [rbp - 0x19], r12
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x29], 0
cmp rdx, 0x10
jb 0x140004dd4
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x140004dcf
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004e24
mov rcx, r8
call fcn.140066554
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140004c1f
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x140004c1a
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004e24
jmp 0x140004c17
call fcn.140072d5c
int3
call fcn.140072d5c
int3
call fcn.140072d5c
int3