Function at 0x18009a500
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
push r13
mov eax, 0x58
call fcn.18017e6d0
sub rsp, rax
mov rax, qword [rcx + 0x180]
mov rdi, rcx
mov rsi, r9
mov qword [rsp + 0x38], rax
mov rax, qword [rcx + 0x38]
mov r13, r8
lea rcx, [r9 + rax]
movabs rax, 0xfffffffe0
mov rbp, rdx
cmp rcx, rax
ja 0x18009a879
cmp rcx, r9
jb 0x18009a879
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x50], r12
mov r12d, dword [rdi + 0x170]
xor ebx, ebx
mov qword [rdi + 0x38], rcx
mov dword [rsp + 0x80], r12d
cmp dword [rdi + 0x174], ebx
je 0x18009a5ca
test r9, r9
jne 0x18009a598
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
call fcn.180099240
mov dword [rdi + 0x174], ebx
xor eax, eax
jmp 0x18009a862
mov rax, qword [rdi + 0x40]
mov r12d, reloc.WS2_32.dll_recv
mov dword [rdi + 0x174], ebx
mov qword [rdi + 0x188], rax
mov rax, qword [rdi + 0x48]
mov qword [rdi + 0x40], rbx
mov qword [rdi + 0x48], rbx
mov dword [rsp + 0x80], r12d
mov qword [rdi + 0x190], rax
movzx eax, byte [rdi + 0xd]
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r15
movzx r15d, byte [rdi + 0xc]
mov r14d, r12d
shl r15d, 8
or r15d, eax
movzx eax, byte [rdi + 0xe]
shl r15d, 8
or r15d, eax
movzx eax, byte [rdi + 0xf]
shl r15d, 8
or r15d, eax
and r14d, 0xf
mov dword [rsp + 0x30], r14d
je 0x18009a676
movsxd r8, r12d
nop dword [rax + rax]
test rsi, rsi
je 0x18009a64c
movzx edx, byte [rbp]
inc r13
inc r12d
mov byte [r8 + rdi + 0x188], dl
movzx ecx, byte [r14 + rdi + 0x10]
inc r8
xor cl, dl
inc rbp
dec rsi
mov byte [r13 - 1], cl
inc r14d
and r14d, 0xf
mov dword [rsp + 0x30], r14d
jne 0x18009a610
jmp 0x18009a655
test r14d, r14d
jne 0x18009a84f
lea r8, [rdi + 0x188]
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
mov r9d, r12d
call fcn.180099380
mov r12d, ebx
mov dword [rsp + 0x80], ebx
cmp rsi, 0x10
jb 0x18009a6a2
test r12d, r12d
je 0x18009a6a2
lea r8, [rdi + 0x188]
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
mov r9d, r12d
call fcn.180099380
mov r12d, ebx
mov dword [rsp + 0x80], ebx
cmp rsi, 0xc00
jb 0x18009a75f
mov r12, qword [rsp + 0x38]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rsi
mov rbx, rdx
shr rbx, 0xb
mov rax, rbx
imul rax, rax, 0xfffffffffffff400
add rsi, rax
mov qword [rsp + 0x98], rsi
nop dword [rax]
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
mov r9d, 0xc00
mov r8, rbp
call fcn.180099380
mov r9, r12
mov r8d, 0xc0
mov rdx, r13
mov rcx, rbp
mov qword [rsp + 0x20], rdi
call qword [rsp + 0xa0]
add r15d, 0xc0
add r13, 0xc00
mov eax, r15d
add rbp, 0xc00
mov byte [rdi + 0xf], r15b
shr eax, 0x18
mov byte [rdi + 0xc], al
mov eax, r15d
shr eax, 0x10
mov byte [rdi + 0xd], al
mov eax, r15d
shr eax, 8
dec rbx
mov byte [rdi + 0xe], al
jne 0x18009a6e0
mov rsi, qword [rsp + 0x98]
mov r12d, dword [rsp + 0x80]
mov r14d, dword [rsp + 0x30]
mov rax, rsi
and rax, 0xfffffffffffffff0
mov qword [rsp + 0x98], rax
je 0x18009a7d7
mov rbx, rax
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
mov r9, rax
mov r8, rbp
shr rbx, 4
call fcn.180099380
mov r9, qword [rsp + 0x38]
mov r8, rbx
mov rdx, r13
mov rcx, rbp
mov qword [rsp + 0x20], rdi
call qword [rsp + 0xa0]
add r15d, ebx
mov eax, r15d
mov byte [rdi + 0xf], r15b
shr eax, 0x18
mov byte [rdi + 0xc], al
mov eax, r15d
shr eax, 0x10
mov byte [rdi + 0xd], al
mov eax, r15d
shr eax, 8
mov byte [rdi + 0xe], al
mov rax, qword [rsp + 0x98]
add r13, rax
add rbp, rax
sub rsi, rax
test rsi, rsi
je 0x18009a84f
mov r8, qword [rsp + 0x38]
lea rdx, [rdi + 0x10]
mov rcx, rdi
call qword [rdi + 0x178]
inc r15d
movsxd rcx, r12d
mov eax, r15d
sub rbp, rdi
sub r13, rdi
shr eax, 0x18
mov byte [rdi + 0xf], r15b
lea r8, [rcx + rdi + 0x188]
mov byte [rdi + 0xc], al
mov eax, r15d
shr eax, 0x10
mov byte [rdi + 0xd], al
mov eax, r15d
shr eax, 8
add r12d, esi
mov byte [rdi + 0xe], al
movsxd rax, r14d
lea rdx, [rax + rdi + 0x10]
nop dword [rax]
movzx ecx, byte [rdx + rbp - 0x10]
inc rdx
inc r8
mov byte [r8 - 1], cl
movzx eax, byte [rdx - 1]
xor al, cl
dec rsi
mov byte [r13 + rdx - 0x11], al
jne 0x18009a830
mov r14, qword [rsp + 0x48]
mov r15, qword [rsp + 0x40]
mov dword [rdi + 0x170], r12d
xor eax, eax
mov rbx, qword [rsp + 0x88]
mov r12, qword [rsp + 0x50]
add rsp, 0x58
pop r13
pop rdi
pop rsi
pop rbp
ret
or eax, 0xffffffff
add rsp, 0x58
pop r13
pop rdi
pop rsi
pop rbp
ret