Function at 0x1401ca3f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov ebp, r8d
mov r12, rdx
mov rbx, rcx
mov rcx, qword [rcx + 0x50]
mov rdx, qword [rbx + 0x58]
cmp rcx, 0x1238
je 0x1401ca43f
test rdx, rdx
je 0x1401ca432
mov rdi, rdx
xor eax, eax
rep stosb byte [rdi], al
mov rcx, rdx
call fcn.1401c9300
mov ecx, 0x1238
call fcn.1401c9290
mov rdx, rax
mov qword [rbx + 0x58], rdx
mov qword [rbx + 0x50], 0x1238
mov qword [rbx + 0x48], 0
mov r15d, ebp
shr r15d, 2
lea eax, [r15 + 6]
mov dword [rbx + 0x18], eax
lea r14d, [rax*4 + 4]
mov rcx, qword [rbx + 0x30]
mov rdx, qword [rbx + 0x38]
cmp rcx, r14
je 0x1401ca49c
test rdx, rdx
je 0x1401ca48a
mov rdi, rdx
xor eax, eax
rep stosd dword [rdi], eax
mov rcx, rdx
call fcn.1401c9280
xor r8d, r8d
mov rdx, r14
lea rcx, [rbx + 0x20]
call fcn.140017e20
mov rdx, rax
mov qword [rbx + 0x38], rdx
mov qword [rbx + 0x30], r14
movabs rax, 0x3fffffffffffffff
mov qword [rbx + 0x28], rax
mov rdi, rdx
movzx eax, byte [0x140374dfc]
test al, al
jne 0x1401ca4cc
call fcn.1401dc5d0
movzx eax, byte [0x140374dfc]
cmp byte [0x140374e02], 0
je 0x1401ca518
test al, al
jne 0x1401ca4de
call fcn.1401dc5d0
cmp byte [0x140374dff], 0
je 0x1401ca518
mov rdx, rbp
mov r8, rdi
mov rcx, r12
call fcn.1401dd100
lea rcx, [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 0x40]
test al, al
jne 0x1401caeb2
mov edx, dword [rbx + 0x18]
mov rcx, qword [rbx + 0x38]
call fcn.1401dd090
jmp 0x1401caeb2
mov r14, rbp
and r14, 0xfffffffffffffffc
test ebp, ebp
je 0x1401ca583
test rdi, rdi
jne 0x1401ca535
call fcn.1401f30f0
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1401ca57e
test r12, r12
je 0x1401ca54f
cmp r14, rbp
jb 0x1401ca54f
mov r8, rbp
mov rdx, r12
mov rcx, rdi
call fcn.1401e14e0
jmp 0x1401ca583
mov r8, r14
xor edx, edx
mov rcx, rdi
call fcn.1401e1b90
test r12, r12
jne 0x1401ca56e
call fcn.1401f30f0
mov dword [rax], reloc.WS2_32.dll_shutdown
jmp 0x1401ca57e
cmp r14, rbp
jae 0x1401ca583
call fcn.1401f30f0
mov dword [rax], 0x22
call fcn.1401ee15c
mov r8, r14
sub r8, rbp
lea rcx, [rdi + rbp]
xor edx, edx
call fcn.1401e1b90
lea r9, [rbp + 3]
and r9, 0xfffffffffffffffc
mov r8, rdi
mov rdx, rdi
mov ecx, 1
call fcn.1401b3be0
lea eax, [r15 - 1]
lea r11, [rax*4]
mov edx, dword [r11 + rdi]
mov eax, edx
shr eax, 0x10
movzx ecx, al
lea r9, [0x140000000]
movzx r8d, byte [rcx + r9 + 0x318770]
shl r8d, 8
mov eax, edx
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r9 + 0x318770]
xor r8d, eax
shl r8d, 8
movzx eax, dl
movzx eax, byte [rax + r9 + 0x318770]
xor r8d, eax
shl r8d, 8
mov eax, edx
shr rax, 0x18
movzx eax, byte [rax + r9 + 0x318770]
xor r8d, eax
xor r8d, dword [rdi]
xor r8d, dword [0x140318970]
lea r9, [r14 + rdi]
mov dword [r9], r8d
lea r10, [0x140318974]
xor r8d, dword [rdi + 4]
lea eax, [r15 + 1]
lea r12, [rax*4]
mov dword [r12 + rdi], r8d
xor r8d, dword [rdi + 8]
lea eax, [r15 + 2]
lea r13, [rax*4]
mov dword [rdi + r13], r8d
lea eax, [r15 + 3]
lea r15, [rax*4]
xor r8d, dword [rdi + 0xc]
mov dword [r15 + rdi], r8d
mov rsi, qword [rbx + 0x38]
mov rax, qword [rbx + 0x30]
lea rcx, [rsi + rax*4]
lea rax, [rdi + 0x10]
add rax, r14
cmp rax, rcx
je 0x1401ca73e
cmp ebp, 0x18
jne 0x1401ca817
mov eax, dword [rdi + 0x24]
xor eax, dword [rdi + 0x10]
mov dword [rdi + 0x28], eax
xor eax, dword [rdi + 0x14]
mov dword [rdi + 0x2c], eax
lea rsi, [0x140000000]
mov rdi, r9
mov edx, dword [r11 + r9]
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx r8d, byte [rcx + rsi + 0x318770]
shl r8d, 8
mov eax, edx
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x318770]
xor r8d, eax
shl r8d, 8
movzx eax, dl
movzx eax, byte [rax + rsi + 0x318770]
xor r8d, eax
shl r8d, 8
mov eax, edx
shr rax, 0x18
movzx eax, byte [rax + rsi + 0x318770]
xor r8d, eax
xor r8d, dword [r10]
xor r8d, dword [r9]
add r9, r14
mov dword [r9], r8d
add r10, 4
xor r8d, dword [rdi + 4]
mov dword [r12 + rdi], r8d
xor r8d, dword [rdi + 8]
mov dword [rdi + r13], r8d
xor r8d, dword [rdi + 0xc]
mov dword [r15 + rdi], r8d
mov rsi, qword [rbx + 0x38]
mov rax, qword [rbx + 0x30]
lea rcx, [rsi + rax*4]
lea rax, [r14 + 0x10]
add rax, rdi
cmp rax, rcx
jne 0x1401ca685
lea rcx, [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 0x40]
test al, al
je 0x1401ca89e
movzx eax, byte [0x140374de0]
test al, al
jne 0x1401ca7e1
xor ebp, ebp
mov r10d, ebp
lea r11, [0x140000000]
nop dword [rax + rax]
movzx edi, byte [r10 + r11 + 0x318770]
lea r8d, [rdi + rdi]
mov edx, edi
shr edx, 7
imul r9d, edx, 0x1b000000
mov eax, r8d
shl eax, 0x18
xor r9, rax
mov eax, edi
shl eax, 8
or eax, edi
shl eax, 8
or r9, rax
imul ecx, edx, 0x11b
xor rcx, rdi
mov eax, r8d
xor rcx, rax
or rcx, r9
shl rcx, 0x20
or rcx, r9
mov qword [r11 + r10*8 + 0x373dd0], rcx
inc r10
cmp r10, 0x100
jl 0x1401ca770
mov qword [0x1403745d8], rbp
mov qword [0x1403745d0], rbp
mov byte [0x140374de0], 1
mov r9d, reloc.WS2_32.dll_recv
mov r8, rsi
mov rdx, rsi
lea ecx, [r9 - 0xf]
call fcn.1401b3be0
mov eax, dword [rbx + 0x18]
shl eax, 2
lea rdx, [rsi + rax*4]
mov r9d, reloc.WS2_32.dll_recv
mov r8, rdx
lea ecx, [r9 - 0xf]
call fcn.1401b3be0
jmp 0x1401cae7e
cmp ebp, 0x20
jne 0x1401ca69d
mov edx, dword [rdi + 0x2c]
mov eax, edx
shr rax, 0x18
lea rsi, [0x140000000]
movzx r8d, byte [rax + rsi + 0x318770]
shl r8d, 8
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x318770]
xor r8d, eax
shl r8d, 8
mov eax, edx
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x318770]
xor r8d, eax
shl r8d, 8
movzx eax, dl
movzx eax, byte [rax + rsi + 0x318770]
xor r8d, eax
xor r8d, dword [rdi + 0x10]
mov dword [rdi + 0x30], r8d
xor r8d, dword [rdi + 0x14]
mov dword [rdi + 0x34], r8d
xor r8d, dword [rdi + 0x18]
mov dword [rdi + 0x38], r8d
xor r8d, dword [rdi + 0x1c]
mov dword [rdi + 0x3c], r8d
jmp 0x1401ca6a4
movzx eax, byte [0x140374de1]
test al, al
jne 0x1401ca8ae
call fcn.1401c9690
mov ebp, 4
mov eax, dword [rbx + 0x18]
lea r11d, [rax*4 - 4]
lea r12, [0x140000000]
cmp r11d, ebp
jbe 0x1401cac4d
lea r14d, [r11 + 2]
lea r15d, [rbp + 2]
nop word [rax + rax]
mov eax, ebp
lea r10, [rsi + rax*4]
mov edi, dword [r10]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov r9d, dword [r12 + rdx*8 + 0x3745e4]
xor r9d, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor r9d, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor r9d, dword [r12 + rcx*8 + 0x3745e3]
lea r8, [rsi + r11*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r10], edx
mov dword [r8], r9d
lea eax, [r15 - 1]
lea r10, [rsi + rax*4]
mov edi, dword [r10]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov r9d, dword [r12 + rdx*8 + 0x3745e4]
xor r9d, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor r9d, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor r9d, dword [r12 + rcx*8 + 0x3745e3]
lea eax, [r14 - 1]
lea r8, [rsi + rax*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r10], edx
mov dword [r8], r9d
mov eax, r15d
lea r10, [rsi + rax*4]
mov edi, dword [r10]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov r9d, dword [r12 + rdx*8 + 0x3745e4]
xor r9d, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor r9d, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor r9d, dword [r12 + rcx*8 + 0x3745e3]
lea r8, [rsi + r14*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r10], edx
mov dword [r8], r9d
lea eax, [r15 + 1]
lea r10, [rsi + rax*4]
mov edi, dword [r10]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov r9d, dword [r12 + rdx*8 + 0x3745e4]
xor r9d, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor r9d, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor r9d, dword [r12 + rcx*8 + 0x3745e3]
lea eax, [r14 + 1]
lea r8, [rsi + rax*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r10], edx
mov dword [r8], r9d
add ebp, 4
add r15d, 4
add r11d, 0xfffffffc
lea r14d, [r14 - 4]
cmp ebp, r11d
jb 0x1401ca8e0
mov eax, ebp
lea r8, [rsi + rax*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r8], edx
lea eax, [rbp + 1]
lea r8, [rsi + rax*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r8], edx
lea eax, [rbp + 2]
lea r8, [rsi + rax*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r8], edx
lea eax, [rbp + 3]
lea r8, [rsi + rax*4]
mov edi, dword [r8]
mov eax, edi
shr rax, 0x18
movzx edx, byte [rax + r12 + 0x318770]
mov eax, edi
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
mov edx, dword [r12 + rdx*8 + 0x3745e4]
xor edx, dword [r12 + rax*8 + 0x3745e1]
mov eax, edi
shr eax, 8
movzx ecx, al
movzx eax, byte [rcx + r12 + 0x318770]
xor edx, dword [r12 + rax*8 + 0x3745e2]
movzx eax, dil
movzx ecx, byte [rax + r12 + 0x318770]
xor edx, dword [r12 + rcx*8 + 0x3745e3]
mov dword [r8], edx
mov edx, dword [rsi]
bswap edx
mov eax, dword [rbx + 0x18]
shl eax, 2
mov ecx, dword [rsi + rax*4]
bswap ecx
mov dword [rsi], ecx
mov eax, dword [rbx + 0x18]
shl eax, 2
mov dword [rsi + rax*4], edx
mov edx, dword [rsi + 4]
bswap edx
mov eax, dword [rbx + 0x18]
lea eax, [rax*4 + 1]
mov eax, dword [rsi + rax*4]
bswap eax
mov dword [rsi + 4], eax
mov eax, dword [rbx + 0x18]
lea eax, [rax*4 + 1]
mov dword [rsi + rax*4], edx
mov edx, dword [rsi + 8]
bswap edx
mov eax, dword [rbx + 0x18]
lea eax, [rax*4 + 2]
mov eax, dword [rsi + rax*4]
bswap eax
mov dword [rsi + 8], eax
mov eax, dword [rbx + 0x18]
lea eax, [rax*4 + 2]
mov dword [rsi + rax*4], edx
mov edx, dword [rsi + 0xc]
bswap edx
mov eax, dword [rbx + 0x18]
lea eax, [rax*4 + 3]
mov eax, dword [rsi + rax*4]
bswap eax
mov dword [rsi + 0xc], eax
mov eax, dword [rbx + 0x18]
lea eax, [rax*4 + 3]
mov dword [rsi + rax*4], edx
cmp byte [0x140374dfc], 0
jne 0x1401cae8c
call fcn.1401dc5d0
cmp byte [0x140374e02], 0
je 0x1401caeb2
lea rdx, [rsi + 0x10]
mov r9d, dword [rbx + 0x18]
shl r9d, 4
sub r9d, 0x10
mov r8, rdx
mov ecx, 1
call fcn.1401b3be0
mov rbx, qword [rsp + 0x78]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret