Function at 0x14004d440
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push rdi
push r15
lea rbp, [rsp - 0x3f]
sub rsp, 0xe8
mov rax, qword [0x140093010]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r15, r8
mov rdi, rdx
mov rsi, rcx
test rdx, rdx
je 0x14004d8ab
test r8, r8
je 0x14004d8ab
lea rax, [rbp + 0xb]
mov qword [rbp + 0x27], rdx
mov qword [rsp + 0x128], rbx
lea r8, [rbp + 0xf]
xor ebx, ebx
mov qword [rbp + 0xf], 0x25
mov qword [rsp + 0x38], rbx
mov edx, 0x80862007
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
lea r9d, [rbx + 0x20]
mov qword [rbp + 0x17], rbx
mov qword [rbp + 0x1f], rbx
mov dword [rbp + 0xb], ebx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x14004d5bb
mov dword [rbp - 0x69], 0xc654c623
mov ecx, 0x3988
mov dword [rbp - 0x65], 0xc65bc627
mov dword [rbp - 0x61], 0xc61cc63a
mov dword [rbp - 0x5d], 0xc613c617
mov dword [rbp - 0x59], 0xc6e5c6e5
mov dword [rbp - 0x55], 0xc6f7c6a2
mov dword [rbp - 0x51], 0xc6a5c6eb
mov dword [rbp - 0x4d], 0xc6f5c6f2
mov dword [rbp - 0x49], 0xc6e7c6e9
mov dword [rbp - 0x45], 0xc6e7c6f9
mov dword [rbp - 0x41], 0xc6f9c6ed
mov dword [rbp - 0x3d], 0xc6afc6eb
mov dword [rbp - 0x39], 0xc6f8c6e6
mov dword [rbp - 0x35], 0xc6e7c6e0
mov dword [rbp - 0x31], 0xc6f4c6e1
mov dword [rbp - 0x2d], 0xc6b7c6fa
mov dword [rbp - 0x29], 0xc6fdc6f9
mov dword [rbp - 0x25], 0xc6e9c6fe
mov dword [rbp - 0x21], 0xc6eec6f9
mov dword [rbp - 0x1d], 0xc6bfc6ed
mov dword [rbp - 0x19], 0xc6d9c690
mov word [rbp - 0x15], bx
mov byte [rbp - 0x13], 1
nop
movzx eax, bx
sub ax, cx
xor word [rbp + rbx*2 - 0x69], ax
inc rbx
cmp rbx, 0x2a
jb 0x14004d570
mov rcx, qword [0x140070250]
lea rdx, [rbp - 0x69]
mov byte [rbp - 0x13], 0
call fcn.140054b30
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140054d10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor al, al
jmp 0x14004d7c0
mov rdi, qword [rbp + 0x1f]
mov qword [rsp + 0xe0], r14
test rdi, rdi
je 0x14004d7e1
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 7]
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x69]
xorps xmm0, xmm0
mov dword [rsp + 0x28], ebx
mov r9d, 0x30
mov qword [rsp + 0x20], rbx
mov edx, 0x80862007
mov qword [rbp - 0x51], rbx
mov rcx, rsi
mov qword [rbp - 0x41], recv
movdqu xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x69], 0x19
mov qword [rbp - 0x49], rdi
mov dword [rbp + 7], ebx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14004d7e1
mov r14, qword [rbp - 0x51]
test r14, r14
je 0x14004d7e1
mov r9d, recv
mov r8, r15
mov rdx, r14
mov rcx, rsi
call fcn.14004d3a0
mov qword [rsp + 0x38], rbx
lea r8, [rbp - 0x69]
movzx r15d, al
mov qword [rbp - 0x49], rbx
lea rax, [rbp + 7]
mov qword [rbp - 0x41], recv
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
mov dword [rsp + 0x28], ebx
mov r9d, 0x30
mov edx, 0x80862007
mov qword [rsp + 0x20], rbx
mov rcx, rsi
mov qword [rbp - 0x69], 0x1a
movdqu xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], r14
mov dword [rbp + 7], ebx
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x14004d7b4
mov dword [rbp - 0x69], 0xc658c623
mov ecx, 0x3988
mov dword [rbp - 0x65], 0xc65bc627
mov dword [rbp - 0x61], 0xc61cc63a
mov dword [rbp - 0x5d], 0xc613c617
mov dword [rbp - 0x59], 0xc6e5c6e5
mov dword [rbp - 0x55], 0xc6f7c6a2
mov dword [rbp - 0x51], 0xc6a5c6eb
mov dword [rbp - 0x4d], 0xc6e9c6f3
mov dword [rbp - 0x49], 0xc6e8c6e5
mov dword [rbp - 0x45], 0xc6abc6fa
mov dword [rbp - 0x41], 0xc6c2c6c5
mov dword [rbp - 0x3d], 0xc6fcc6ae
mov dword [rbp - 0x39], 0xc6f0c6e0
mov dword [rbp - 0x35], 0xc6f6c6f1
mov dword [rbp - 0x31], 0xc6fac6b4
mov dword [rbp - 0x2d], 0xc6b7c6f0
mov dword [rbp - 0x29], 0xc6f1c6e8
mov dword [rbp - 0x25], 0xc6e8c6e3
mov dword [rbp - 0x21], 0xc6fec6f5
mov dword [rbp - 0x1d], 0xc6f3c6ff
mov dword [rbp - 0x19], 0xc6c0c680
mov dword [rbp - 0x15], 0xc6c7c6c6
mov dword [rbp - 0x11], 0xc6c0c6d6
mov dword [rbp - 0xd], 0xc6d4c6d5
mov dword [rbp - 9], 0xc699c688
mov dword [rbp - 5], 0xc6d2
mov byte [rbp - 1], 1
nop dword [rax + rax]
movzx eax, bx
sub ax, cx
xor word [rbp + rbx*2 - 0x69], ax
inc rbx
cmp rbx, 0x33
jb 0x14004d770
mov rcx, qword [0x140070250]
lea rdx, [rbp - 0x69]
mov byte [rbp - 1], 0
call fcn.140054b30
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140054d10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
movzx eax, r15b
mov r14, qword [rsp + 0xe0]
mov rbx, qword [rsp + 0x128]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14006d260
add rsp, 0xe8
pop r15
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp - 0x69], 0xc654c623
mov ecx, 0x3988
mov dword [rbp - 0x65], 0xc65bc627
mov dword [rbp - 0x61], 0xc61cc63a
mov dword [rbp - 0x5d], 0xc613c617
mov dword [rbp - 0x59], 0xc6e5c6e5
mov dword [rbp - 0x55], 0xc6f7c6a2
mov dword [rbp - 0x51], 0xc6a5c6eb
mov dword [rbp - 0x4d], 0xc6e6c6eb
mov dword [rbp - 0x49], 0xc6a9c6f8
mov dword [rbp - 0x45], 0xc6c4c6c3
mov dword [rbp - 0x41], 0xc6fec6ac
mov dword [rbp - 0x3d], 0xc6eec6fe
mov dword [rbp - 0x39], 0xc6f4c6f3
mov dword [rbp - 0x35], 0xc6fcc6b2
mov dword [rbp - 0x31], 0xc6b5c6f2
mov dword [rbp - 0x2d], 0xc6efc6a6
mov word [rbp - 0x29], bx
mov byte [rbp - 0x27], 1
nop
movzx eax, bx
sub ax, cx
xor word [rbp + rbx*2 - 0x69], ax
inc rbx
cmp rbx, 0x20
jb 0x14004d860
mov rcx, qword [0x140070250]
lea rdx, [rbp - 0x69]
mov byte [rbp - 0x27], 0
call fcn.140054b30
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140054d10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor al, al
jmp 0x14004d7b8
xor al, al
jmp 0x14004d7c8