Function at 0x1402e5e80
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push r12
push r15
sub rsp, 0x68
mov rax, qword [rcx + 0x180]
mov rbx, rcx
mov rcx, qword [rcx + 0x38]
mov rsi, r9
mov qword [rsp + 0x38], rax
add rcx, r9
movabs rax, 0xfffffffe0
mov r12, r8
mov r15, rdx
cmp rcx, rax
ja 0x1402e61df
cmp rcx, r9
jb 0x1402e61df
mov qword [rsp + 0x98], rbp
xor ebp, ebp
mov qword [rsp + 0x50], r14
mov r14d, dword [rbx + 0x170]
mov qword [rsp + 0x60], rdi
lea rdi, [rbx + 0x40]
mov qword [rbx + 0x38], rcx
mov dword [rsp + 0x90], r14d
cmp dword [rbx + 0x174], ebp
je 0x1402e5f3c
test r9, r9
jne 0x1402e5f17
lea rdx, [rbx + 0x60]
mov rcx, rdi
call fcn.1402e6610
xor eax, eax
mov dword [rbx + 0x174], ebp
jmp 0x1402e61c2
movups xmm0, xmmword [rdi]
mov r14d, reloc.WS2_32.dll_recv
mov dword [rsp + 0x90], r14d
movups xmmword [rbx + 0x188], xmm0
mov qword [rdi], rbp
mov qword [rbx + 0x48], rbp
mov dword [rbx + 0x174], ebp
movzx eax, byte [rbx + 0xd]
lea r8, [rbx + 0x188]
mov qword [rsp + 0x58], r13
mov ebp, r14d
movzx r13d, byte [rbx + 0xc]
shl r13d, 8
or r13d, eax
movzx eax, byte [rbx + 0xe]
shl r13d, 8
or r13d, eax
movzx eax, byte [rbx + 0xf]
shl r13d, 8
or r13d, eax
and ebp, 0xf
mov dword [rsp + 0x30], ebp
je 0x1402e5fe2
nop word [rax + rax]
test rsi, rsi
je 0x1402e61b4
movzx ecx, byte [r15]
dec rsi
mov eax, r14d
inc r15
inc r14d
mov byte [rax + rbx + 0x188], cl
xor cl, byte [rbp + rbx + 0x10]
mov byte [r12], cl
inc r12
inc ebp
and ebp, 0xf
jne 0x1402e5f80
lea rdi, [rbx + 0x40]
mov r9d, r14d
mov rcx, rdi
lea r8, [rbx + 0x188]
lea rdx, [rbx + 0x60]
call fcn.1402e6780
xor r14d, r14d
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x90], r14d
lea r8, [rbx + 0x188]
lea rax, [rbx + 0x60]
mov rcx, rdi
mov rdx, rax
cmp rsi, 0x10
jb 0x1402e6014
test r14d, r14d
je 0x1402e6014
mov r9d, r14d
call fcn.1402e6780
xor r14d, r14d
lea rax, [rbx + 0x60]
mov dword [rsp + 0x90], r14d
mov rdx, rax
mov rcx, rdi
cmp rsi, 0xc00
jb 0x1402e60e7
mov r14, qword [rsp + 0x38]
mov rbp, rax
mov qword [rsp + 0x48], rax
movabs rax, 0xaaaaaaaaaaaaaaab
mul rsi
mov qword [rsp + 0x40], rdi
mov rdi, rdx
shr rdi, 0xb
imul rax, rdi, 0xfffffffffffff400
add rsi, rax
mov qword [rsp + 0xa8], rsi
mov rsi, qword [rsp + 0x40]
nop
mov r9d, 0xc00
mov r8, r15
mov rdx, rbp
mov rcx, rsi
call fcn.1402e6780
mov r9, r14
mov qword [rsp + 0x20], rbx
mov r8d, 0xc0
mov rdx, r12
mov rcx, r15
call qword [rsp + 0xb0]
add r13d, 0xc0
add r12, 0xc00
mov eax, r13d
mov byte [rbx + 0xf], r13b
shr eax, 0x18
add r15, 0xc00
mov byte [rbx + 0xc], al
mov eax, r13d
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r13d
shr eax, 8
mov byte [rbx + 0xe], al
sub rdi, 1
jne 0x1402e6060
mov rsi, qword [rsp + 0xa8]
mov ebp, dword [rsp + 0x30]
mov r14d, dword [rsp + 0x90]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
mov rax, rsi
and rax, 0xfffffffffffffff0
mov qword [rsp + 0xa8], rax
je 0x1402e6157
mov rdi, rax
mov r9, rax
mov r8, r15
shr rdi, 4
call fcn.1402e6780
mov r9, qword [rsp + 0x38]
mov r8, rdi
mov rdx, r12
mov qword [rsp + 0x20], rbx
mov rcx, r15
call qword [rsp + 0xb0]
add r13d, edi
mov eax, r13d
mov byte [rbx + 0xf], r13b
shr eax, 0x18
mov byte [rbx + 0xc], al
mov eax, r13d
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r13d
shr eax, 8
mov byte [rbx + 0xe], al
mov rax, qword [rsp + 0xa8]
add r12, rax
add r15, rax
sub rsi, rax
test rsi, rsi
je 0x1402e61b4
mov r8, qword [rsp + 0x38]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call qword [rbx + 0x178]
inc r13d
mov eax, r13d
mov byte [rbx + 0xf], r13b
shr eax, 0x18
mov byte [rbx + 0xc], al
mov eax, r13d
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r13d
shr eax, 8
mov byte [rbx + 0xe], al
mov edx, ebp
inc ebp
mov eax, r14d
inc r14d
movzx ecx, byte [r15 + rdx]
mov byte [rax + rbx + 0x188], cl
xor cl, byte [rbx + rdx + 0x10]
mov byte [r12 + rdx], cl
sub rsi, 1
jne 0x1402e6190
mov r13, qword [rsp + 0x58]
xor eax, eax
mov dword [rbx + 0x170], r14d
mov rdi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x98]
mov r14, qword [rsp + 0x50]
add rsp, 0x68
pop r15
pop r12
pop rsi
pop rbx
ret
mov eax, 0xffffffff
add rsp, 0x68
pop r15
pop r12
pop rsi
pop rbx
ret