Function at 0x180354e40
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x78
call fcn.180409810
sub rsp, rax
mov rax, qword [0x18056a580]
xor rax, rsp
mov qword [rsp + 0x60], rax
movzx r12d, byte [rcx]
lea r15, [rcx + 0x10]
mov r10, qword [rsp + 0xe0]
mov rdi, r9
mov r9, qword [rcx + 0x30]
mov rbp, r8
mov rax, qword [rcx + 0x28]
mov rsi, rdx
mov qword [rsp + 0x40], r9
mov r14, rcx
mov qword [rsp + 0x38], r10
lea rbx, [rcx + 0x20]
mov byte [rsp + 0x30], r12b
mov qword [rsp + 0x48], rax
test r12b, 0x40
jne 0x180354ec0
mov r8, r9
mov rdx, r15
call rax
inc qword [rbx]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x38]
mov r8d, r12d
xor r13d, r13d
and r8d, 7
mov r12d, reloc.WS2_32.dll_ntohs
sub r12d, r8d
mov byte [r14], r8b
mov dword [rsp + 0x38], r12d
mov ecx, r13d
cmp r12d, 0xf
jae 0x180354f0b
mov edx, r12d
add rdx, r14
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rdx], r13b
lea rdx, [rdx + 1]
or rcx, rax
shl rcx, 8
sub r8, 1
jne 0x180354ef0
lea rbx, [r14 + 0x20]
movzx eax, byte [r14 + 0xf]
or rcx, rax
mov byte [r14 + 0xf], 1
cmp rcx, rdi
je 0x180354f27
mov eax, 0xffffffff
jmp 0x1803551ac
lea rax, [rdi + 0xf]
or rax, 8
shr rax, 3
add qword [rbx], rax
movabs rax, 0x2000000000000000
cmp qword [rbx], rax
jbe 0x180354f4f
mov eax, 0xfffffffe
jmp 0x1803551ac
mov rbx, rdi
shr rbx, 4
test rbx, rbx
je 0x180354fd2
mov qword [rsp + 0x28], r15
mov r8, rbx
mov rdx, rbp
mov qword [rsp + 0x20], r14
mov rcx, rsi
call r10
shl rbx, 4
add rsi, rbx
add rbp, rbx
sub rdi, rbx
je 0x180354fd2
shr rbx, 4
lea r8, [r14 + 0x10]
mov r9, 0xfffffffffffffff8
mov rdx, r13
sub r9, r14
nop word [rax + rax]
movzx eax, byte [r8 - 1]
lea r8, [r8 - 1]
add rdx, rax
movzx ecx, bl
add rdx, rcx
shr rbx, 8
mov byte [r8], dl
lea rax, [r9 + r8]
shr rdx, 8
test rax, rax
je 0x180354fdb
test rbx, rbx
jne 0x180354fa0
test rdx, rdx
jne 0x180354fa0
jmp 0x180354fdb
test rdi, rdi
je 0x180355164
mov edx, r13d
test rdi, rdi
je 0x1803551ca
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rcx + rsi]
inc edx
xor byte [rcx + r14 + 0x10], al
mov rbx, rdi
mov ecx, edx
mov r15, rbp
mov r12, rsi
cmp rcx, rdi
jb 0x180354ff0
mov r8, qword [rsp + 0x40]
lea rcx, [r14 + 0x10]
mov rsi, qword [rsp + 0x48]
mov rdx, rcx
call rsi
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call rsi
mov eax, r13d
mov rsi, r12
cmp rbx, 8
jb 0x180355140
lea ecx, [rdi - 1]
mov edx, ecx
lea r8, [rcx + rbp]
lea rcx, [rsp + 0x50]
add rcx, rdx
cmp rbp, rcx
ja 0x180355061
lea rcx, [rsp + 0x50]
cmp r8, rcx
jae 0x180355140
lea rcx, [rdx + r12]
cmp r15, rcx
ja 0x180355076
mov rsi, r12
cmp r8, r12
jae 0x180355140
mov rsi, r12
cmp rbx, 0x40
jb 0x180355119
mov r8, rbx
mov r9, rbx
and r8d, 0x3f
sub r9, r8
mov r10d, reloc.WLDAP32.dll_Ordinal_32
nop word [rax + rax]
movdqu xmm0, xmmword [rsp + r13 + 0x50]
lea ecx, [r10 - 0x10]
add eax, 0x40
movdqu xmm1, xmmword [r12 + r13]
pxor xmm1, xmm0
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmmword [r15 + r13], xmm1
mov r13d, eax
movdqu xmm1, xmmword [rcx + r12]
pxor xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
mov ecx, r10d
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmm1, xmmword [rcx + r12]
pxor xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
lea ecx, [r10 + 0x10]
add r10d, 0x40
movdqu xmm1, xmmword [rcx + r12]
movdqu xmm0, xmmword [rsp + rcx + 0x50]
pxor xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
cmp r13, r9
jb 0x1803550a0
cmp r8, 8
jb 0x180355140
mov rdx, rdi
and rdx, 0xfffffffffffffff8
mov ecx, eax
movq xmm1, qword [rcx + rsi]
add eax, 8
movq xmm0, qword [rsp + rcx + 0x50]
pxor xmm1, xmm0
movq qword [rcx + rbp], xmm1
mov ecx, eax
cmp rcx, rdx
jb 0x180355122
mov r12d, dword [rsp + 0x38]
lea r15, [r14 + 0x10]
mov edx, eax
cmp rdx, rdi
jae 0x180355164
movzx ecx, byte [rdx + rsi]
inc eax
xor cl, byte [rsp + rdx + 0x50]
mov byte [rdx + rbp], cl
mov edx, eax
cmp rdx, rdi
jb 0x180355150
cmp r12d, 0x10
jae 0x180355180
mov r8d, reloc.WS2_32.dll_recv
mov ecx, r12d
sub r8d, r12d
add rcx, r14
xor edx, edx
call fcn.1804440f0
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
xor qword [r15], rax
mov rax, qword [rsp + 0x58]
xor qword [r14 + 0x18], rax
movzx eax, byte [rsp + 0x30]
mov byte [r14], al
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.180408b20
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rsp + 0x40]
mov rdx, r15
mov rcx, r15
call qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov eax, r13d
jmp 0x180355149