Function at 0x140009340
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x14017b4c0]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov r12, r8
mov rsi, rdx
mov qword [rbp + 8], rdx
xor r13d, r13d
mov dword [rsp + 0x34], r13d
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov ecx, 0x24c
mov eax, dword [rcx + r14]
mov ebx, 0x240
add rbx, r14
test al, 1
jne 0x1400093cd
or eax, 1
mov dword [rcx + r14], eax
mov word [rbx + 7], 0x15f
mov dword [rbx], 0x58560604
mov word [rbx + 4], 0x2281
mov byte [rbx + 6], 0xa3
lea rcx, [0x140110020]
call fcn.1400ce648
nop
cmp byte [rbx + 8], 0
je 0x1400094d1
mov r8, r13
cmp dword [reloc.WS2_32.dll_accept], 5
jl 0x14000949f
movdqa xmm3, xmmword [0x14015ccc0]
movdqa xmm0, xmmword [0x14015cb80]
psllq xmm0, 3
vpsrlvq xmm1, xmm3, xmm0
movdqa xmm2, xmmword [0x14015cbf0]
pshufb xmm1, xmm2
movzx eax, word [rbx]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rbx], ax
movdqa xmm0, xmmword [reloc.WS2_32.dll_bind]
psllq xmm0, 3
vpsrlvq xmm1, xmm3, xmm0
pshufb xmm1, xmm2
movzx eax, word [rbx + 2]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rbx + 2], ax
movdqa xmm0, xmmword [reloc.WS2_32.dll_connect]
psllq xmm0, 3
vpsrlvq xmm1, xmm3, xmm0
pshufb xmm1, xmm2
movzx eax, word [rbx + 4]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rbx + 4], ax
movdqa xmm0, xmmword [reloc.WS2_32.dll_getsockname]
psllq xmm0, 3
vpsrlvq xmm1, xmm3, xmm0
pshufb xmm1, xmm2
movzx eax, word [rbx + 6]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rbx + 6], ax
jmp 0x1400094cd
movabs r9, 0x5fd147e335336b2b
nop dword [rax]
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rdx, r9
shr rdx, cl
xor byte [rbx + r8], dl
inc r8
cmp r8, 8
jb 0x1400094b0
mov byte [rbx + 8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400094f0
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140005120
nop
movdqa xmm0, xmmword [0x14015cd70]
mov word [rbp - 0x48], 0xd230
mov ecx, 0x150
mov eax, dword [rcx + r14]
mov ebx, 0x138
test al, 1
jne 0x14000957a
or eax, 1
mov dword [rcx + r14], eax
lea rcx, [r14 + rbx]
mov byte [rcx + 0x13], 1
lea rax, [rcx + 0x12]
lea rdx, [rbp - 0x46]
cmp rcx, rdx
ja 0x14000955e
lea rdx, [rbp - 0x58]
cmp rax, rdx
jb 0x14000955e
movups xmmword [rcx], xmm0
movzx eax, word [rbp - 0x48]
mov word [rcx + 0x10], ax
mov byte [rcx + 0x12], 0xbb
jmp 0x14000956d
movups xmmword [rcx], xmm0
movzx eax, word [rbp - 0x48]
mov word [rcx + 0x10], ax
mov byte [rcx + 0x12], 0xbb
lea rcx, [0x14010ff60]
call fcn.1400ce648
nop
mov rax, qword gs:[0x58]
mov r15, qword [rax]
lea r11, [rbx + r15]
mov rcx, r11
call fcn.14000d320
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [r11 + r8], 0
jne 0x1400095b0
mov rdx, r11
lea rcx, [rbp + 0x140]
call fcn.140005120
mov ebx, 2
movdqa xmm0, xmmword [0x14015cd00]
movdqa xmm1, xmmword [0x14015cc70]
mov dword [rbp - 0x68], 0x4054444e
mov dword [rbp - 0x64], 0x2cb52b8a
mov word [rbp - 0x60], 0x6b04
mov ecx, 0x238
mov eax, dword [rcx + r15]
mov r14d, 0x1f0
test al, 1
jne 0x14000966c
or eax, 1
mov dword [rcx + r15], eax
lea rcx, [r15 + r14]
mov byte [rcx + 0x2a], 1
lea rax, [rcx + 0x29]
lea rdx, [rbp - 0x5f]
cmp rcx, rdx
ja 0x140009646
lea rdx, [rsp + 0x78]
cmp rax, rdx
jb 0x140009646
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp - 0x68]
movsd qword [rcx + 0x20], xmm0
movzx eax, word [rbp - 0x60]
mov word [rcx + 0x28], ax
jmp 0x14000965f
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp - 0x68]
movsd qword [rcx + 0x20], xmm0
movzx eax, word [rbp - 0x60]
mov word [rcx + 0x28], ax
lea rcx, [0x140110040]
call fcn.1400ce648
nop
lea r11, [r14 + r15]
mov rcx, r11
call fcn.14000cc70
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [r11 + r8], 0
jne 0x140009690
mov rdx, r11
lea rcx, [rbp - 0x40]
call fcn.140005120
nop
lea r9, [rbp + 0x140]
lea r8, [rbp - 0x40]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x180]
call fcn.140012bb0
or ebx, 4
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x180]
movzx edx, byte [rsp + 0x30]
lea rcx, [rbp + 0x160]
call fcn.140012bb0
or ebx, 8
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140009728
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009722
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009c8c
call fcn.1400ce56c
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140009764
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000975e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009c92
call fcn.1400ce56c
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x1400097a6
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009c98
call fcn.1400ce56c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400097e3
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009c9e
call fcn.1400ce56c
movdqa xmm0, xmmword [0x14015cd60]
mov dword [rsp + 0x70], 0x2813b6be
mov word [rsp + 0x74], 0x95b9
mov rax, qword gs:[0x58]
mov r15, qword [rax]
mov ecx, 0x254
mov eax, dword [rcx + r15]
mov r14d, 0x220
test al, 1
jne 0x14000987d
or eax, 1
mov dword [rcx + r15], eax
lea rcx, [r15 + r14]
mov byte [rcx + 0x17], 1
lea rax, [rcx + 0x16]
lea rdx, [rsp + 0x76]
cmp rcx, rdx
ja 0x140009859
lea rdx, [rsp + 0x60]
cmp rax, rdx
jb 0x140009859
movups xmmword [rcx], xmm0
mov eax, dword [rsp + 0x70]
mov dword [rcx + 0x10], eax
movzx eax, word [rsp + 0x74]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], 3
jmp 0x140009870
movups xmmword [rcx], xmm0
mov eax, dword [rsp + 0x70]
mov dword [rcx + 0x10], eax
movzx eax, word [rsp + 0x74]
mov word [rcx + 0x14], ax
mov byte [rcx + 0x16], 3
lea rcx, [0x14010fff0]
call fcn.1400ce648
nop
lea r11, [r14 + r15]
mov rcx, r11
call fcn.14000caf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
nop dword [rax + rax]
inc rdi
cmp byte [r11 + rdi], 0
jne 0x1400098a0
mov r8, rdi
mov rdx, r11
lea rcx, [rbp - 0x40]
call fcn.140005120
nop
mov r8, qword [r12 + 0x10]
cmp qword [r12 + 0x18], 0xf
jbe 0x1400098cb
mov r12, qword [r12]
mov rdx, r12
lea rcx, [rbp - 0x40]
call fcn.14000b4a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
or ebx, 0x10
mov dword [rsp + 0x34], ebx
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
xor ecx, ecx
call fcn.140069a00
mov r14, rax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140009967
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009962
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009ca4
call fcn.1400ce56c
movdqa xmm1, xmmword [0x14015cbe0]
movdqu xmmword [rsp + 0x50], xmm1
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400099bd
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400099b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009caa
call fcn.1400ce56c
movdqa xmm1, xmmword [0x14015cbe0]
movdqu xmmword [rbp - 0x30], xmm1
mov byte [rbp - 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
movdqu xmmword [rbp + 0x190], xmm1
mov byte [rbp + 0x180], 0
call fcn.1400695e0
mov rdi, rax
test rax, rax
je 0x140009c07
lea r8, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
cmova r8, qword [rbp + 0x160]
mov edx, 0x2712
mov rcx, rax
call fcn.14006d130
mov r8, r14
mov edx, 0x2727
mov rcx, rdi
call fcn.14006d130
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
movdqa xmm1, xmmword [0x14015cbe0]
movdqu xmmword [rbp + 0x150], xmm1
mov byte [rbp + 0x140], 0
lea r8, [0x140005490]
mov edx, 0x4e2b
mov rcx, rdi
call fcn.14006d130
lea r8, [rbp + 0x140]
mov edx, 0x2711
mov rcx, rdi
call fcn.14006d130
mov rcx, rdi
call fcn.140069620
mov rcx, rdi
call fcn.1400695d0
mov qword [rbp + 0x48], r13
lea rax, [rbp + 0x10]
mov qword [rbp], rax
mov byte [rsi], 0
lea rcx, [rsi + 8]
xor edx, edx
call fcn.14000d530
nop
or ebx, 0x20
mov dword [rsp + 0x34], ebx
lea rax, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov qword [rbp - 8], r13
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140009ac2
mov rax, qword [rcx]
lea rdx, [rbp - 0x40]
call qword [rax]
mov qword [rbp - 8], rax
lea rcx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rcx, qword [rbp + 0x140]
add rcx, qword [rbp + 0x150]
lea rax, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rax, qword [rbp + 0x140]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rcx
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x50]
call fcn.140016d20
nop
mov r8, rsi
mov rcx, rax
call fcn.140011fe0
nop
lea rcx, [rbp + 0x98]
call fcn.140011e70
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x140009b54
mov rax, qword [rcx]
lea rdx, [rbp + 0x50]
cmp rcx, rdx
setne dl
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
nop
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140009b71
mov rax, qword [rcx]
lea rdx, [rbp + 0x10]
cmp rcx, rdx
setne dl
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
mov qword [rbp + 0x48], r13
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140009bb2
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009bad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009cb0
call fcn.1400ce56c
movdqa xmm0, xmmword [0x14015cbe0]
movdqu xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x140009c53
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009c4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009c86
jmp 0x140009c4e
mov byte [rsi], 0
lea rcx, [rsi + 8]
xor edx, edx
call fcn.14000d530
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x140009c53
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009c4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009c80
call fcn.1400ce56c
mov rax, rsi
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.1400ce1f0
mov rbx, qword [rsp + 0x2f0]
add rsp, 0x2b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400e1a34
int3
call fcn.1400e1a34
nop
call fcn.1400e1a34
nop
call fcn.1400e1a34
nop
call fcn.1400e1a34
nop
call fcn.1400e1a34
nop
call fcn.1400e1a34
nop
call fcn.1400e1a34
nop
call fcn.1400e1a34
int3