Function at 0x1401d7900
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
mov eax, 0x3b8
call fcn.140224ed0
sub rsp, rax
mov rax, qword [0x1402f3010]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x320]
mov edi, 0x40
mov r14, qword [rbp + 0x330]
xor ebx, ebx
mov qword [rsp + 0x68], rax
mov r15, r8
mov rax, qword [rbp + 0x338]
mov rsi, rcx
mov qword [rbp - 0x70], rax
lea r13d, [rdi - 0x38]
mov qword [rsp + 0x60], r9
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x78], Ordinal_46
mov byte [rsp + 0x20], 1
cmp r14, 0x100000
jae 0x1401d82f1
lea rdx, [0x140240150]
call fcn.1400b85d0
test eax, eax
je 0x1401d79d2
lea rcx, [rbp - 0x20]
call fcn.140094e70
test eax, eax
jle 0x1401d82f1
mov ecx, gethostbyaddr
mov byte [rsp + 0x20], bl
mov qword [rbp - 0x78], rcx
lea rax, [0x1401d8320]
lea r12, [0x140094eb0]
lea r15d, [rdi - 0x30]
jmp 0x1401d7afa
lea rdx, str.SHA1
mov rcx, rsi
call fcn.1400b85d0
test eax, eax
je 0x1401d7a0f
lea rcx, [rbp - 0x20]
call fcn.140122a90
test eax, eax
jle 0x1401d82f1
lea rax, [0x1401d83a0]
mov r15d, reloc.WS2_32.dll_sendto
lea r12, [0x140122ae0]
jmp 0x1401d7af5
lea rdx, str.SHA2_224
mov rcx, rsi
call fcn.1400b85d0
test eax, eax
je 0x1401d7a4c
lea rcx, [rbp - 0x20]
call fcn.140122dd0
test eax, eax
jle 0x1401d82f1
lea rax, [0x1401d8430]
mov r15d, Ordinal_33
lea r12, [0x1401232e0]
jmp 0x1401d7af5
lea rdx, str.SHA2_256
mov rcx, rsi
call fcn.1400b85d0
test eax, eax
je 0x1401d7a86
lea rcx, [rbp - 0x20]
call fcn.140123280
test eax, eax
jle 0x1401d82f1
lea rax, [0x1401d8430]
mov r15d, reloc.WLDAP32.dll_Ordinal_32
lea r12, [0x1401232e0]
jmp 0x1401d7af5
lea rdx, str.SHA2_384
mov rcx, rsi
call fcn.1400b85d0
test eax, eax
je 0x1401d7ab2
lea rcx, [rbp - 0x20]
call fcn.140123450
test eax, eax
jle 0x1401d82f1
mov r15d, gethostbyaddr
jmp 0x1401d7add
lea rdx, str.SHA2_512
mov rcx, rsi
call fcn.1400b85d0
test eax, eax
je 0x1401d82e9
lea rcx, [rbp - 0x20]
call fcn.140123df0
test eax, eax
jle 0x1401d82f1
mov r15, rdi
mov r13d, reloc.WS2_32.dll_recv
lea r12, [0x140123e80]
lea rax, [0x1401d8510]
lea edi, [r13 + 0x70]
mov ecx, Ordinal_41
movzx r10d, byte [rbp + 0x348]
mov esi, reloc.WS2_32.dll_listen
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], rsi
test r10b, r10b
je 0x1401d7b3b
mov rsi, qword [rbp + 0x340]
mov r8d, 2
add rsi, 0xb
add rsi, rcx
mov qword [rsp + 0x70], rsi
jmp 0x1401d7b4e
lea rax, [rdi + 0xff]
xor edx, edx
add rax, r15
div rdi
lea r8, [rax + 1]
xor edx, edx
mov qword [rsp + 0x58], r8
lea rax, [r14 - 1]
mov rcx, rsi
mov r14, qword [rbp + 0x328]
sub rcx, r15
add rcx, r13
add r14, rsi
add rcx, rdi
add rax, rcx
div rdi
xor edx, edx
mov r9, rax
mov rax, r14
div rdi
mov qword [rsp + 0x50], rdx
xor edx, edx
mov qword [rbp - 0x68], rax
lea rax, [r14 + r13]
div rdi
mov qword [rbp - 0x60], rax
xor eax, eax
mov ecx, eax
test r10b, r10b
setne cl
lea rdx, [rcx + r8]
mov rcx, r9
sub rcx, r8
cmp r9, rdx
jbe 0x1401d7bb9
mov rbx, rcx
imul rbx, rdi
cmp r9, rdx
cmovbe rcx, rax
lea r14, [r14*8]
mov qword [rbp - 0x80], rcx
test r10b, r10b
jne 0x1401d7c93
mov r8, rdi
lea rcx, [rbp + 0x110]
xor edx, edx
lea r14, [r14 + rdi*8]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp + 0x340]
cmp rax, 0x80
ja 0x1401d82f1
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x110]
mov r8, rax
call sub.VCRUNTIME140.dll_memcpy
movdqa xmm2, xmmword [str.6666666666666666_algorithm_id]
xor eax, eax
nop word [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x1401d7c20
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x20]
call r12
mov rax, r14
lea rcx, [rbp + 0xc0]
shr rax, 0x10
mov r12, r14
mov qword [rsp + 0x38], rax
xor edx, edx
mov rax, r14
shr r12, 0x18
shr rax, 8
mov qword [rsp + 0x30], rax
cmp byte [rsp + 0x20], dl
je 0x1401d7cf6
lea r8, [r13 - 4]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xbd], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xbe], al
mov byte [rbp + r13 + 0xbc], r12b
mov byte [rbp + r13 + 0xbf], r14b
jmp 0x1401d7d28
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xba], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xb9], al
mov byte [rbp + r13 + 0xbb], r12b
mov byte [rbp + r13 + 0xb8], r14b
test rbx, rbx
je 0x1401d7e5e
cmp byte [rbp + 0x348], 0
je 0x1401d7dda
cmp rsi, rdi
jbe 0x1401d82f1
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
mov r14, qword [rsp + 0x28]
mov r12, rsi
sub r12, rdi
call r14
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x190]
add rdx, rdi
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x190]
mov r8, rdi
add rcx, r12
sub r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r14
xor edx, edx
mov rax, rbx
div rdi
dec rax
cmp rax, 1
jbe 0x1401d7e5e
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x28]
sub r14, r12
add r14, rdi
lea r12, [rax - 1]
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x1401d7dc6
jmp 0x1401d7e59
mov rcx, qword [rsp + 0x60]
lea r8, [rdi - 0xd]
mov r14, qword [rsp + 0x68]
mov rdx, r14
mov eax, dword [rcx + 8]
movsd xmm0, qword [rcx]
mov dword [rbp + 0x198], eax
movzx eax, byte [rcx + 0xc]
lea rcx, [rbp + 0x19d]
mov byte [rbp + 0x19c], al
movsd qword [rbp + 0x190], xmm0
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r12
xor edx, edx
mov rax, rbx
div rdi
cmp rax, 1
jbe 0x1401d7e5e
mov rsi, qword [rsp + 0x28]
lea r12, [rax - 1]
add r14, 0xfffffffffffffff3
add r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x1401d7e47
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x80]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rbp - 0x40], rax
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
cmp rcx, rax
ja 0x1401d815e
mov rax, qword [rsp + 0x50]
movaps xmmword [rsp + 0x3a0], xmm6
lea rdx, [rax + 1]
shr rax, 0x3f
mov qword [rbp - 0x58], rax
mov rax, rdi
sub rax, r13
shr rdx, 0x3f
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rdi
add rax, r13
lea r13, [rbp + 0xc0]
add rax, r13
mov qword [rbp - 0x48], rax
xor r13d, r13d
nop dword [rax]
nop word [rax + rax]
mov r12, qword [rsp + 0x60]
mov r9, r13
mov r15, qword [rsp + 0x68]
mov rax, rcx
xor rax, qword [rbp - 0x68]
lea r11, [rax - 1]
not rax
shr rax, 0x3f
shr r11, 0x3f
and r11b, al
mov rax, rcx
xor rax, qword [rbp - 0x60]
neg r11b
lea r14, [rax - 1]
not rax
shr rax, 0x3f
shr r14, 0x3f
and r14b, al
neg r14b
movsx eax, r14b
movzx r13d, r14b
not r13b
or r13b, r11b
movd xmm6, eax
punpcklbw xmm6, xmm6
punpcklwd xmm6, xmm6
pshufd xmm6, xmm6, 0
xor r8b, r8b
cmp rbx, rsi
jae 0x1401d7f63
movzx r8d, byte [r12 + rbx]
jmp 0x1401d7f7d
mov rax, qword [rbp + 0x330]
add rax, rsi
cmp rbx, rax
jae 0x1401d7f7d
mov rax, r15
sub rax, rsi
movzx r8d, byte [rax + rbx]
mov rax, qword [rbp - 0x58]
mov r10, r9
mov rsi, qword [rsp + 0x70]
sub r10, rdx
mov rcx, r10
mov rdx, r9
shr rcx, 0x3f
inc rbx
xor cl, al
shr rdx, 0x3f
xor al, dl
or cl, al
movzx eax, r11b
xor cl, dl
dec cl
movzx ecx, cl
and ecx, eax
mov dword [rsp + 0x38], ecx
not ecx
mov dword [rsp + 0x30], ecx
mov rcx, r9
mov eax, dword [rsp + 0x30]
and al, r8b
mov r8d, dword [rsp + 0x38]
and r8b, 0x80
or r8b, al
mov rax, qword [rsp + 0x50]
inc rax
sub rcx, rax
movzx eax, dl
xor al, byte [rsp + 0x58]
shr rcx, 0x3f
xor cl, byte [rsp + 0x58]
or cl, al
xor cl, dl
dec cl
and cl, r11b
not cl
and cl, r13b
and r8b, cl
cmp r9, qword [rbp - 0x50]
jb 0x1401d8025
movzx eax, r14b
mov dword [rsp + 0x38], eax
not eax
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x48]
mov ecx, dword [rsp + 0x38]
and cl, byte [r10 + rax]
mov eax, dword [rsp + 0x30]
and r8b, al
or r8b, cl
mov rdx, qword [rsp + 0x50]
lea rax, [rbp + 0x210]
add rax, rdx
inc r9
mov byte [r10 + rax], r8b
cmp r9, rdi
jb 0x1401d7f54
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call r12
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
xor r13d, r13d
mov eax, r13d
cmp r15, 0x40
jb 0x1401d811b
mov rcx, r15
and rcx, 0xffffffffffffffc0
movdqu xmm0, xmmword [rbp + rax + 0xd0]
movdqu xmm1, xmmword [rbp + rax + 0x210]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xd0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xe0]
movdqu xmm1, xmmword [rbp + rax + 0x220]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xe0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xf0]
movdqu xmm1, xmmword [rbp + rax + 0x230]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xf0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x100]
movdqu xmm1, xmmword [rbp + rax + 0x240]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
add rax, 0x40
cmp rax, rcx
jb 0x1401d8082
cmp rax, r15
jae 0x1401d813a
movzx ecx, byte [rbp + rax + 0x210]
and cl, r14b
or byte [rbp + rax + 0xd0], cl
inc rax
cmp rax, r15
jb 0x1401d8120
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
inc rcx
mov qword [rbp - 0x80], rcx
cmp rcx, qword [rbp - 0x40]
jbe 0x1401d7ef0
movaps xmm6, xmmword [rsp + 0x3a0]
jmp 0x1401d8161
xor r13d, r13d
call fcn.1400b9de0
mov rbx, rax
test rax, rax
je 0x1401d82dc
mov rdx, qword [rbp - 0x38]
xor r8d, r8d
mov rcx, rax
call fcn.1400b97a0
test eax, eax
jle 0x1401d82dc
cmp byte [rbp + 0x348], 0
je 0x1401d8209
mov r14, qword [rbp - 0x78]
lea rcx, [rbp + 0x110]
mov r8, r14
mov edx, 0x5c
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbp + 0x340]
mov rcx, rbx
mov rdx, qword [rbp - 0x70]
call fcn.1400b97e0
test eax, eax
jle 0x1401d82dc
mov r8, r14
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1400b97e0
test eax, eax
jle 0x1401d82dc
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1400b97e0
test eax, eax
jg 0x1401d82b1
mov rcx, rbx
call fcn.1400b9d30
mov eax, r13d
jmp 0x1401d82f3
movdqa xmm2, xmmword [str.jjjjjjjjjjjjjjjj_]
mov rax, r13
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x1401d8220
mov r8, rdi
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1400b97e0
test eax, eax
jle 0x1401d82dc
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1400b97e0
test eax, eax
jle 0x1401d82dc
mov rdx, qword [rbp - 0x30]
lea r8, [rsp + 0x78]
mov rcx, rbx
call fcn.1400b9390
test eax, eax
je 0x1401d82d6
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1401d82d6
mov eax, dword [rsp + 0x78]
mov qword [rcx], rax
mov r13d, 1
mov rcx, rbx
call fcn.1400b9d30
mov eax, r13d
jmp 0x1401d82f3
test r15, r15
je 0x1401d82f1
mov qword [r15], rbx
xor eax, eax
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.140087600
add rsp, 0x3b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret