Function at 0x1402dd230
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
mov eax, 0x3b8
call fcn.14038ab90
sub rsp, rax
mov rax, qword [0x140535ab8]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x320]
mov edi, 0x40
mov r14, qword [rbp + 0x330]
xor ebx, ebx
mov qword [rsp + 0x68], rax
mov r15, r8
mov rax, qword [rbp + 0x338]
mov rsi, rcx
mov qword [rbp - 0x70], rax
lea r13d, [rdi - 0x38]
mov qword [rsp + 0x60], r9
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x78], 0x28
mov byte [rsp + 0x20], 1
cmp r14, 0x100000
jae 0x1402ddc21
lea rdx, [0x1404220c4]
call fcn.1401b4530
test eax, eax
je 0x1402dd302
lea rcx, [rbp - 0x20]
call fcn.1401ded20
test eax, eax
jle 0x1402ddc21
mov ecx, gethostbyaddr
mov byte [rsp + 0x20], bl
mov qword [rbp - 0x78], rcx
lea rax, [0x1402ddc50]
lea r12, [0x1401ded60]
lea r15d, [rdi - 0x30]
jmp 0x1402dd42a
lea rdx, str.SHA1
mov rcx, rsi
call fcn.1401b4530
test eax, eax
je 0x1402dd33f
lea rcx, [rbp - 0x20]
call fcn.1401b5490
test eax, eax
jle 0x1402ddc21
lea rax, [0x1402ddcd0]
mov r15d, reloc.WS2_32.dll_sendto
lea r12, [0x1401b54e0]
jmp 0x1402dd425
lea rdx, str.SHA2_224
mov rcx, rsi
call fcn.1401b4530
test eax, eax
je 0x1402dd37c
lea rcx, [rbp - 0x20]
call fcn.1401ea590
test eax, eax
jle 0x1402ddc21
lea rax, [0x1402ddd60]
mov r15d, 0x1c
lea r12, [0x1401eaab0]
jmp 0x1402dd425
lea rdx, str.SHA2_256
mov rcx, rsi
call fcn.1401b4530
test eax, eax
je 0x1402dd3b6
lea rcx, [rbp - 0x20]
call fcn.1401eaa50
test eax, eax
jle 0x1402ddc21
lea rax, [0x1402ddd60]
mov r15d, 0x20
lea r12, [0x1401eaab0]
jmp 0x1402dd425
lea rdx, str.SHA2_384
mov rcx, rsi
call fcn.1401b4530
test eax, eax
je 0x1402dd3e2
lea rcx, [rbp - 0x20]
call fcn.1401f6570
test eax, eax
jle 0x1402ddc21
mov r15d, gethostbyaddr
jmp 0x1402dd40d
lea rdx, str.SHA2_512
mov rcx, rsi
call fcn.1401b4530
test eax, eax
je 0x1402ddc19
lea rcx, [rbp - 0x20]
call fcn.1401f6f20
test eax, eax
jle 0x1402ddc21
mov r15, rdi
mov r13d, reloc.WS2_32.dll_recv
lea r12, [0x1401f6fb0]
lea rax, [0x1402dde40]
lea edi, [r13 + 0x70]
mov ecx, 0x28
movzx r10d, byte [rbp + 0x348]
mov esi, reloc.WS2_32.dll_listen
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], rsi
test r10b, r10b
je 0x1402dd46b
mov rsi, qword [rbp + 0x340]
mov r8d, 2
add rsi, 0xb
add rsi, rcx
mov qword [rsp + 0x70], rsi
jmp 0x1402dd47e
lea rax, [rdi + 0xff]
xor edx, edx
add rax, r15
div rdi
lea r8, [rax + 1]
xor edx, edx
mov qword [rsp + 0x58], r8
dec r14
mov rax, rsi
sub rax, r15
add rax, r13
add rax, rdi
add rax, r14
mov r14, qword [rbp + 0x328]
div rdi
xor edx, edx
add r14, rsi
mov r9, rax
mov rax, r14
div rdi
mov rax, r14
mov qword [rsp + 0x50], rdx
xor edx, edx
div rdi
xor edx, edx
mov qword [rbp - 0x68], rax
lea rax, [r14 + r13]
div rdi
mov qword [rbp - 0x60], rax
xor eax, eax
mov ecx, eax
test r10b, r10b
setne cl
lea rdx, [rcx + r8]
mov rcx, r9
sub rcx, r8
cmp r9, rdx
jbe 0x1402dd4f0
mov rbx, rcx
imul rbx, rdi
cmp r9, rdx
cmovbe rcx, rax
lea r14, [r14*8]
mov qword [rbp - 0x80], rcx
test r10b, r10b
jne 0x1402dd5c3
mov r8, rdi
lea rcx, [rbp + 0x110]
xor edx, edx
lea r14, [r14 + rdi*8]
call fcn.14038d2f0
mov rax, qword [rbp + 0x340]
cmp rax, 0x80
ja 0x1402ddc21
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x110]
mov r8, rax
call fcn.14038cc40
movdqa xmm2, xmmword [str.6666666666666666jjjjjjjjjjjjjjjj_]
xor eax, eax
nop
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x1402dd550
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x20]
call r12
mov rax, r14
lea rcx, [rbp + 0xc0]
shr rax, 0x10
mov r12, r14
mov qword [rsp + 0x38], rax
xor edx, edx
mov rax, r14
shr r12, 0x18
shr rax, 8
mov qword [rsp + 0x30], rax
cmp byte [rsp + 0x20], dl
je 0x1402dd626
lea r8, [r13 - 4]
call fcn.14038d2f0
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xbd], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xbe], al
mov byte [rbp + r13 + 0xbc], r12b
mov byte [rbp + r13 + 0xbf], r14b
jmp 0x1402dd658
mov r8, r13
call fcn.14038d2f0
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xba], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xb9], al
mov byte [rbp + r13 + 0xbb], r12b
mov byte [rbp + r13 + 0xb8], r14b
test rbx, rbx
je 0x1402dd78e
cmp byte [rbp + 0x348], 0
je 0x1402dd70a
cmp rsi, rdi
jbe 0x1402ddc21
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
mov r14, qword [rsp + 0x28]
mov r12, rsi
sub r12, rdi
call r14
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x190]
add rdx, rdi
mov r8, r12
call fcn.14038cc40
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x190]
mov r8, rdi
add rcx, r12
sub r8, r12
call fcn.14038cc40
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r14
xor edx, edx
mov rax, rbx
div rdi
dec rax
cmp rax, 1
jbe 0x1402dd78e
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x28]
sub r14, r12
add r14, rdi
lea r12, [rax - 1]
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x1402dd6f6
jmp 0x1402dd789
mov rcx, qword [rsp + 0x60]
lea r8, [rdi - 0xd]
mov r14, qword [rsp + 0x68]
mov rdx, r14
mov eax, dword [rcx + 8]
movsd xmm0, qword [rcx]
mov dword [rbp + 0x198], eax
movzx eax, byte [rcx + 0xc]
lea rcx, [rbp + 0x19d]
mov byte [rbp + 0x19c], al
movsd qword [rbp + 0x190], xmm0
call fcn.14038cc40
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r12
xor edx, edx
mov rax, rbx
div rdi
cmp rax, 1
jbe 0x1402dd78e
mov rsi, qword [rsp + 0x28]
lea r12, [rax - 1]
add r14, 0xfffffffffffffff3
add r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x1402dd777
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x80]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rbp - 0x40], rax
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
cmp rcx, rax
ja 0x1402dda91
mov rax, qword [rsp + 0x50]
movaps xmmword [rsp + 0x3a0], xmm6
lea rdx, [rax + 1]
shr rax, 0x3f
mov qword [rbp - 0x58], rax
mov rax, rdi
sub rax, r13
shr rdx, 0x3f
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rdi
add rax, r13
lea r13, [rbp + 0xc0]
add rax, r13
mov qword [rbp - 0x48], rax
xor r13d, r13d
nop dword [rax]
nop word [rax + rax]
mov r12, qword [rsp + 0x60]
mov r9, r13
mov r15, qword [rsp + 0x68]
mov rax, rcx
xor rax, qword [rbp - 0x68]
lea r11, [rax - 1]
not rax
shr rax, 0x3f
shr r11, 0x3f
and r11b, al
mov rax, rcx
xor rax, qword [rbp - 0x60]
neg r11b
lea r14, [rax - 1]
not rax
shr rax, 0x3f
shr r14, 0x3f
and r14b, al
neg r14b
movsx eax, r14b
movzx r13d, r14b
not r13b
or r13b, r11b
movd xmm6, eax
punpcklbw xmm6, xmm6
punpcklwd xmm6, xmm6
pshufd xmm6, xmm6, 0
xor r8b, r8b
cmp rbx, rsi
jae 0x1402dd893
movzx r8d, byte [r12 + rbx]
jmp 0x1402dd8ad
mov rax, qword [rbp + 0x330]
add rax, rsi
cmp rbx, rax
jae 0x1402dd8ad
mov rax, r15
sub rax, rsi
movzx r8d, byte [rax + rbx]
mov rax, qword [rbp - 0x58]
mov r10, r9
mov rsi, qword [rsp + 0x70]
sub r10, rdx
mov rcx, r10
mov rdx, r9
shr rcx, 0x3f
inc rbx
xor cl, al
shr rdx, 0x3f
xor al, dl
or cl, al
movzx eax, r11b
xor cl, dl
dec cl
movzx ecx, cl
and ecx, eax
mov dword [rsp + 0x38], ecx
not ecx
mov dword [rsp + 0x30], ecx
mov rcx, r9
mov eax, dword [rsp + 0x30]
and al, r8b
mov r8d, dword [rsp + 0x38]
and r8b, 0x80
or r8b, al
mov rax, qword [rsp + 0x50]
inc rax
sub rcx, rax
movzx eax, dl
xor al, byte [rsp + 0x58]
shr rcx, 0x3f
xor cl, byte [rsp + 0x58]
or cl, al
xor cl, dl
dec cl
and cl, r11b
not cl
and cl, r13b
and r8b, cl
cmp r9, qword [rbp - 0x50]
jb 0x1402dd958
mov rcx, qword [rbp - 0x48]
movzx eax, r14b
mov dword [rsp + 0x38], eax
not eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x38]
movzx ecx, byte [r10 + rcx]
and cl, al
mov eax, dword [rsp + 0x30]
and r8b, al
or r8b, cl
mov rdx, qword [rsp + 0x50]
lea rax, [rbp + 0x210]
add rax, rdx
inc r9
mov byte [r10 + rax], r8b
cmp r9, rdi
jb 0x1402dd884
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call r12
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
xor r13d, r13d
mov eax, r13d
cmp r15, 0x40
jb 0x1402dda4e
mov rcx, r15
and rcx, 0xffffffffffffffc0
movdqu xmm0, xmmword [rbp + rax + 0xd0]
movdqu xmm1, xmmword [rbp + rax + 0x210]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xd0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xe0]
movdqu xmm1, xmmword [rbp + rax + 0x220]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xe0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xf0]
movdqu xmm1, xmmword [rbp + rax + 0x230]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xf0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x100]
movdqu xmm1, xmmword [rbp + rax + 0x240]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
add rax, 0x40
cmp rax, rcx
jb 0x1402dd9b5
cmp rax, r15
jae 0x1402dda6d
movzx ecx, byte [rbp + rax + 0x210]
and cl, r14b
or byte [rbp + rax + 0xd0], cl
inc rax
cmp rax, r15
jb 0x1402dda53
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
inc rcx
mov qword [rbp - 0x80], rcx
cmp rcx, qword [rbp - 0x40]
jbe 0x1402dd820
movaps xmm6, xmmword [rsp + 0x3a0]
jmp 0x1402dda94
xor r13d, r13d
call fcn.1401d1350
mov rbx, rax
test rax, rax
je 0x1402ddc0c
mov rdx, qword [rbp - 0x38]
xor r8d, r8d
mov rcx, rax
call fcn.1401d08b0
test eax, eax
jle 0x1402ddc0c
cmp byte [rbp + 0x348], 0
je 0x1402ddb3c
mov r14, qword [rbp - 0x78]
lea rcx, [rbp + 0x110]
mov r8, r14
mov edx, 0x5c
call fcn.14038d2f0
mov r8, qword [rbp + 0x340]
mov rcx, rbx
mov rdx, qword [rbp - 0x70]
call fcn.1401d08f0
test eax, eax
jle 0x1402ddc0c
mov r8, r14
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1401d08f0
test eax, eax
jle 0x1402ddc0c
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1401d08f0
test eax, eax
jg 0x1402ddbe1
mov rcx, rbx
call fcn.1401d12a0
mov eax, r13d
jmp 0x1402ddc23
movdqa xmm2, xmmword [0x140440220]
mov rax, r13
nop word [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x1402ddb50
mov r8, rdi
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1401d08f0
test eax, eax
jle 0x1402ddc0c
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1401d08f0
test eax, eax
jle 0x1402ddc0c
mov rdx, qword [rbp - 0x30]
lea r8, [rsp + 0x78]
mov rcx, rbx
call fcn.1401d04a0
test eax, eax
je 0x1402ddc06
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1402ddc06
mov eax, dword [rsp + 0x78]
mov qword [rcx], rax
mov r13d, 1
mov rcx, rbx
call fcn.1401d12a0
mov eax, r13d
jmp 0x1402ddc23
test r15, r15
je 0x1402ddc21
mov qword [r15], rbx
xor eax, eax
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14038a8e0
add rsp, 0x3b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret