Function at 0x18009a170
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push r12
push r14
mov eax, 0x68
call fcn.18017e6d0
sub rsp, rax
mov rax, qword [rcx + 0x180]
mov rdi, rcx
mov rsi, r9
mov qword [rsp + 0x38], rax
mov rax, qword [rcx + 0x38]
mov r12, r8
lea rcx, [r9 + rax]
movabs rax, 0xfffffffe0
mov r14, rdx
cmp rcx, rax
ja 0x18009a4e9
cmp rcx, r9
jb 0x18009a4e9
mov qword [rsp + 0x98], rbx
mov qword [rdi + 0x38], rcx
lea rcx, [rdi + 0x170]
mov qword [rsp + 0x60], rbp
mov ebp, dword [rcx]
xor ebx, ebx
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x90], ebp
cmp dword [rdi + 0x174], ebx
je 0x18009a23f
test r9, r9
jne 0x18009a20f
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
call fcn.180099240
mov dword [rdi + 0x174], ebx
xor eax, eax
jmp 0x18009a4d1
mov rax, qword [rdi + 0x40]
mov ebp, reloc.WS2_32.dll_recv
mov dword [rdi + 0x174], ebx
mov qword [rdi + 0x188], rax
mov rax, qword [rdi + 0x48]
mov qword [rdi + 0x40], rbx
mov qword [rdi + 0x48], rbx
mov dword [rsp + 0x90], ebp
mov qword [rdi + 0x190], rax
movzx eax, byte [rdi + 0xd]
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x50], r15
movzx r15d, byte [rdi + 0xc]
mov r13d, ebp
shl r15d, 8
or r15d, eax
movzx eax, byte [rdi + 0xe]
shl r15d, 8
or r15d, eax
movzx eax, byte [rdi + 0xf]
shl r15d, 8
or r15d, eax
and r13d, 0xf
mov dword [rsp + 0x30], r13d
je 0x18009a2e1
movsxd rdx, ebp
test rsi, rsi
je 0x18009a2b8
movzx ecx, byte [r13 + rdi + 0x10]
inc rdx
inc ebp
xor cl, byte [r14]
inc r12
inc r14
mov byte [r12 - 1], cl
dec rsi
mov byte [rdx + rdi + 0x187], cl
inc r13d
and r13d, 0xf
mov dword [rsp + 0x30], r13d
jne 0x18009a280
jmp 0x18009a2c1
test r13d, r13d
jne 0x18009a4be
lea r8, [rdi + 0x188]
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
mov r9d, ebp
call fcn.180099380
mov ebp, ebx
mov dword [rsp + 0x90], ebx
cmp rsi, 0x10
jb 0x18009a30b
test ebp, ebp
je 0x18009a30b
lea r8, [rdi + 0x188]
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
mov r9d, ebp
call fcn.180099380
mov ebp, ebx
mov dword [rsp + 0x90], ebx
mov r10, qword [rsp + 0xb0]
cmp rsi, 0xc00
jb 0x18009a3d2
mov rbp, qword [rsp + 0x38]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rsi
mov rbx, rdx
shr rbx, 0xb
mov rax, rbx
imul rax, rax, 0xfffffffffffff400
add rsi, rax
mov qword [rsp + 0xa8], rsi
nop
mov r9, rbp
mov r8d, 0xc0
mov rdx, r12
mov rcx, r14
mov qword [rsp + 0x20], rdi
call r10
add r15d, 0xc0
lea rdx, [rdi + 0x60]
mov eax, r15d
lea rcx, [rdi + 0x40]
mov r9d, 0xc00
shr eax, 0x18
mov r8, r12
mov byte [rdi + 0xf], r15b
mov byte [rdi + 0xc], al
mov eax, r15d
shr eax, 0x10
mov byte [rdi + 0xd], al
mov eax, r15d
shr eax, 8
mov byte [rdi + 0xe], al
call fcn.180099380
mov r10, qword [rsp + 0xb0]
add r12, 0xc00
add r14, 0xc00
dec rbx
jne 0x18009a350
mov rsi, qword [rsp + 0xa8]
mov ebp, dword [rsp + 0x90]
mov r13d, dword [rsp + 0x30]
mov rax, rsi
and rax, 0xfffffffffffffff0
mov qword [rsp + 0xa8], rax
je 0x18009a446
mov r9, qword [rsp + 0x38]
mov rbx, rax
mov rdx, r12
shr rbx, 4
mov rcx, r14
mov qword [rsp + 0x20], rdi
mov r8, rbx
call r10
add r15d, ebx
mov rbx, qword [rsp + 0xa8]
mov eax, r15d
lea rdx, [rdi + 0x60]
lea rcx, [rdi + 0x40]
shr eax, 0x18
mov r9, rbx
mov r8, r12
mov byte [rdi + 0xc], al
mov eax, r15d
mov byte [rdi + 0xf], r15b
shr eax, 0x10
add r14, rbx
sub rsi, rbx
mov byte [rdi + 0xd], al
mov eax, r15d
shr eax, 8
mov byte [rdi + 0xe], al
call fcn.180099380
add r12, rbx
test rsi, rsi
je 0x18009a4be
mov r8, qword [rsp + 0x38]
lea rdx, [rdi + 0x10]
mov rcx, rdi
call qword [rdi + 0x178]
inc r15d
movsxd rdx, r13d
mov eax, r15d
mov byte [rdi + 0xf], r15b
add rdx, r14
shr eax, 0x18
sub r12, r14
mov byte [rdi + 0xc], al
mov eax, r15d
shr eax, 0x10
mov byte [rdi + 0xd], al
mov eax, r15d
shr eax, 8
mov byte [rdi + 0xe], al
movsxd rax, ebp
lea r8, [rax + rdi + 0x188]
sub rdi, r14
add ebp, esi
nop dword [rax + rax]
movzx ecx, byte [rdi + rdx + 0x10]
movzx eax, byte [rdx]
inc r8
xor ecx, eax
inc rdx
dec rsi
mov byte [r12 + rdx - 1], cl
mov byte [r8 - 1], cl
jne 0x18009a4a0
mov rax, qword [rsp + 0x40]
mov r13, qword [rsp + 0x58]
mov r15, qword [rsp + 0x50]
mov dword [rax], ebp
xor eax, eax
mov rbx, qword [rsp + 0x98]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
pop r14
pop r12
pop rdi
pop rsi
ret
or eax, 0xffffffff
add rsp, 0x68
pop r14
pop r12
pop rdi
pop rsi
ret