Function at 0x1800b2340
Capabilities:
Encode data using xor
Encrypt data using aes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov r10, rcx
movzx eax, byte [rdx + 1]
movzx r9d, byte [rdx]
lea r11, [r10 + 0x14]
shl r9d, 8
xor r9d, eax
movzx eax, byte [rdx + 2]
shl r9d, 8
xor r9d, eax
movzx eax, byte [rdx + 3]
shl r9d, 8
xor r9d, eax
mov dword [rcx], r9d
movzx eax, byte [rdx + 5]
movzx ecx, byte [rdx + 4]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 6]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 7]
shl ecx, 8
xor ecx, eax
mov dword [r10 + 4], ecx
movzx eax, byte [rdx + 9]
movzx ecx, byte [rdx + 8]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0xa]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0xb]
shl ecx, 8
xor ecx, eax
mov dword [r10 + 8], ecx
movzx eax, byte [rdx + 0xd]
movzx ecx, byte [rdx + 0xc]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0xe]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0xf]
shl ecx, 8
xor ecx, eax
mov dword [r10 + 0xc], ecx
movzx eax, byte [rdx + 0x11]
movzx ecx, byte [rdx + 0x10]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0x12]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0x13]
shl ecx, 8
xor ecx, eax
mov dword [r10 + 0x10], ecx
movzx eax, byte [rdx + 0x15]
movzx ecx, byte [rdx + 0x14]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0x16]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0x17]
shl ecx, 8
xor ecx, eax
mov dword [r11], ecx
movzx eax, byte [rdx + 0x19]
movzx ecx, byte [rdx + 0x18]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0x1a]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0x1b]
shl ecx, 8
xor ecx, eax
mov dword [r10 + 0x18], ecx
movzx ecx, byte [rdx + 0x1c]
shl ecx, 8
movzx eax, byte [rdx + 0x1d]
lea rbx, str.ccccwwww
xor ecx, eax
lea rdi, [0x1801da96c]
movzx eax, byte [rdx + 0x1e]
shl ecx, 8
xor ecx, eax
movzx eax, byte [rdx + 0x1f]
shl ecx, 8
xor ecx, eax
mov edx, ecx
mov dword [r10 + 0x1c], edx
mov eax, ecx
shr rax, 0x10
movzx ecx, al
mov eax, edx
shr rax, 8
mov r8d, dword [rbx + rcx*4]
btc r8d, 0x18
movzx ecx, al
and r8d, 0xff000000
mov eax, dword [rbx + rcx*4]
and eax, 0xff0000
xor r8d, eax
mov eax, edx
shr rax, 0x18
movzx eax, byte [rbx + rax*4]
xor r8d, eax
movzx eax, dl
mov ecx, dword [rbx + rax*4]
and ecx, 0xff00
xor r8d, ecx
xor r8d, r9d
mov dword [r10 + 0x20], r8d
xor r8d, dword [r10 + 4]
mov dword [r10 + 0x24], r8d
xor r8d, dword [r10 + 8]
mov dword [r10 + 0x28], r8d
xor r8d, dword [r10 + 0xc]
mov dword [r10 + 0x2c], r8d
lea r10, [0x1801da954]
nop dword [rax]
mov edx, dword [r11 + 0x18]
mov eax, edx
shr rax, 0x10
movzx ecx, al
mov eax, edx
shr rax, 8
mov r8d, dword [rbx + rcx*4]
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [rbx + rcx*4]
and eax, 0xff00
xor r8d, eax
mov eax, edx
shr rax, 0x18
mov ecx, dword [rbx + rax*4]
and ecx, 0xff000000
movzx eax, dl
xor r8d, ecx
movzx ecx, byte [rbx + rax*4]
mov eax, dword [r11 + 8]
xor r8d, ecx
xor r8d, dword [r11 - 4]
mov ecx, dword [r11 + 4]
mov dword [r11 + 0x1c], r8d
xor r8d, dword [r11]
xor ecx, r8d
mov dword [r11 + 0x20], r8d
xor eax, ecx
mov dword [r11 + 0x24], ecx
mov edx, eax
shr rax, 8
movzx ecx, al
mov eax, edx
shr rax, 0x10
mov dword [r11 + 0x28], edx
mov r8d, dword [rbx + rcx*4]
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [rbx + rcx*4]
and eax, 0xff000000
xor r8d, eax
mov eax, edx
shr rax, 0x18
movzx eax, byte [rbx + rax*4]
xor r8d, eax
movzx eax, dl
mov ecx, dword [rbx + rax*4]
and ecx, 0xff00
xor r8d, ecx
xor r8d, dword [r11 + 0xc]
xor r8d, dword [r10 - 8]
mov dword [r11 + 0x2c], r8d
mov eax, dword [r11 + 0x10]
xor eax, r8d
mov dword [r11 + 0x30], eax
mov ecx, dword [r11 + 0x14]
xor ecx, eax
mov dword [r11 + 0x34], ecx
mov eax, dword [r11 + 0x18]
xor eax, ecx
mov edx, eax
shr rax, 0x10
movzx ecx, al
mov eax, edx
shr rax, 8
mov dword [r11 + 0x38], edx
mov r8d, dword [rbx + rcx*4]
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [rbx + rcx*4]
and eax, 0xff00
xor r8d, eax
mov eax, edx
shr rax, 0x18
mov ecx, dword [rbx + rax*4]
and ecx, 0xff000000
movzx eax, dl
xor r8d, ecx
movzx ecx, byte [rbx + rax*4]
xor r8d, ecx
xor r8d, dword [r11 + 0x1c]
mov ecx, dword [r11 + 0x20]
mov eax, dword [r11 + 0x28]
xor ecx, r8d
mov dword [r11 + 0x40], ecx
xor ecx, dword [r11 + 0x24]
xor eax, ecx
mov dword [r11 + 0x44], ecx
mov edx, eax
shr rax, 8
movzx ecx, al
mov eax, edx
shr rax, 0x10
mov dword [r11 + 0x3c], r8d
mov dword [r11 + 0x48], edx
mov r8d, dword [rbx + rcx*4]
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [rbx + rcx*4]
and eax, 0xff000000
xor r8d, eax
mov eax, edx
shr rax, 0x18
movzx eax, byte [rbx + rax*4]
xor r8d, eax
movzx eax, dl
mov ecx, dword [rbx + rax*4]
and ecx, 0xff00
xor r8d, ecx
xor r8d, dword [r10 - 4]
xor r8d, dword [r11 + 0x2c]
mov dword [r11 + 0x4c], r8d
mov eax, dword [r11 + 0x30]
xor eax, r8d
mov dword [r11 + 0x50], eax
xor eax, dword [r11 + 0x34]
mov dword [r11 + 0x54], eax
xor eax, dword [r11 + 0x38]
mov dword [r11 + 0x58], eax
mov edx, eax
shr rax, 0x10
movzx ecx, al
mov eax, edx
shr rax, 8
mov r8d, dword [rbx + rcx*4]
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [rbx + rcx*4]
and eax, 0xff00
xor r8d, eax
mov eax, edx
shr rax, 0x18
mov ecx, dword [rbx + rax*4]
and ecx, 0xff000000
movzx eax, dl
xor r8d, ecx
movzx ecx, byte [rbx + rax*4]
mov eax, dword [r11 + 0x44]
xor r8d, ecx
xor r8d, dword [r11 + 0x3c]
mov ecx, dword [r11 + 0x40]
xor ecx, r8d
mov dword [r11 + 0x5c], r8d
xor eax, ecx
mov dword [r11 + 0x60], ecx
mov ecx, dword [r11 + 0x48]
xor ecx, eax
mov dword [r11 + 0x64], eax
mov edx, ecx
mov eax, ecx
shr rax, 8
mov dword [r11 + 0x68], ecx
movzx ecx, al
mov eax, edx
shr rax, 0x10
mov r8d, dword [rbx + rcx*4]
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [rbx + rcx*4]
and eax, 0xff000000
xor r8d, eax
mov eax, edx
shr rax, 0x18
lea r11, [r11 + 0x60]
movzx eax, byte [rbx + rax*4]
xor r8d, eax
movzx eax, dl
mov ecx, dword [rbx + rax*4]
and ecx, 0xff00
xor r8d, ecx
xor r8d, dword [r10]
add r10, 0xc
xor r8d, dword [r11 - 0x14]
mov dword [r11 + 0xc], r8d
mov eax, dword [r11 - 0x10]
xor eax, r8d
mov dword [r11 + 0x10], eax
mov ecx, dword [r11 - 0xc]
xor ecx, eax
mov dword [r11 + 0x14], ecx
mov eax, dword [r11 - 8]
xor eax, ecx
mov dword [r11 + 0x18], eax
cmp r10, rdi
jne 0x1800b24f0
mov rbx, qword [rsp + 8]
mov eax, reloc.WS2_32.dll_ntohl
mov rdi, qword [rsp + 0x10]
ret