Function at 0x1402b8540
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x78
call fcn.1403983a0
sub rsp, rax
mov r13, qword [rsp + 0xd0]
xor ebp, ebp
mov rax, r13
mov qword [rsp + 0x48], rbp
shl rax, 4
mov rdi, r9
add rax, 6
mov qword [rsp + 0x40], rbp
mov r14, r8
mov r15, rdx
mov r12d, ebp
cmp rax, 0x1555555
ja 0x1402b8d84
mov qword [rsp + 0x70], rbx
lea rdx, [0x1403fc758]
lea rbx, [r13*2]
mov r8d, 0x273
add rbx, r13
shl rbx, 9
lea rcx, [rbx + 0x220]
call fcn.1401f9aa0
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1402b8d7f
imul rcx, r13, 0x21
mov r8d, 0x275
lea rdx, [0x1403fc758]
call fcn.1401f9aa0
mov r12, rax
test rax, rax
je 0x1402b8d7f
lea rcx, [r13*8]
mov r8d, 0x276
lea rdx, [0x1403fc758]
call fcn.1401f9aa0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x1402b8d7f
mov qword [rsp + 0x68], rsi
mov rsi, qword [rsp + 0x40]
and rsi, 0xffffffffffffffc0
mov qword [rsp + 0x30], rbp
add rsi, 0x40
add rbx, rsi
mov qword [rsp + 0x38], rsi
test r13, r13
je 0x1402b8a6f
sub rax, r14
mov qword [rsp + 0x28], rbp
sub rdi, r14
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0xc8], rdi
mov r13, r14
mov rdi, qword [rsp + 0xd8]
mov qword [rsp + 0x50], rax
mov rcx, qword [r13]
call fcn.1401ff410
cmp eax, 0x100
jg 0x1402b8695
mov rcx, qword [r13]
call fcn.1401ff280
test eax, eax
jne 0x1402b8695
mov rsi, qword [r13]
jmp 0x1402b86cc
mov rcx, rdi
call fcn.14027ea40
mov rsi, rax
test rax, rax
je 0x1402b8d7a
mov rax, qword [rsp + 0xb0]
mov r9, rdi
mov rdx, qword [r13]
mov rcx, rsi
mov r8, qword [rax + 0x10]
call fcn.1402c09f0
test eax, eax
je 0x1402b8e0c
mov rax, qword [rsp + 0x48]
mov rcx, rsi
sub rax, r14
mov edi, ebp
mov r14, rbp
mov qword [rax + r13], rsi
call fcn.14022a770
shl eax, 3
test eax, eax
jle 0x1402b879a
mov rsi, qword [rsp + 0x28]
mov r15, qword [rsp + 0x50]
nop word [rax + rax]
mov rcx, qword [r15 + r13]
call fcn.14018da60
mov rcx, rax
mov eax, edi
test edi, edi
jns 0x1402b8715
lea eax, [rdi + 7]
sar eax, 3
add edi, 8
cdqe
add r14, 8
mov rcx, qword [rcx + rax*8]
mov rax, rcx
mov byte [rsi + r12], cl
shr rax, 8
mov byte [rsi + r12 + 1], al
mov rax, rcx
shr rax, 0x10
mov byte [rsi + r12 + 2], al
shr rcx, 0x18
mov byte [rsi + r12 + 3], cl
shr rcx, 8
mov rax, rcx
mov byte [rsi + r12 + 4], cl
shr rax, 8
mov byte [rsi + r12 + 5], al
mov rax, rcx
shr rcx, 0x18
mov byte [rsi + r12 + 7], cl
shr rax, 0x10
mov byte [rsi + r12 + 6], al
add rsi, 8
mov rcx, qword [r15 + r13]
call fcn.14022a770
shl eax, 3
cmp edi, eax
jl 0x1402b8700
mov r15, qword [rsp + 0xb8]
cmp r14, 0x21
jge 0x1402b87b5
mov rcx, qword [rsp + 0x28]
mov r8d, reloc.WLDAP32.dll_Ordinal_33
add rcx, r14
sub r8, r14
add rcx, r12
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rdi, qword [rsp + 0xc8]
mov r8d, 4
mov rcx, rbx
mov rax, qword [rdi + r13]
mov rdx, qword [rax + 0x10]
call fcn.1402bffd0
test eax, eax
je 0x1402b8dd8
mov rax, qword [rdi + r13]
lea rcx, [rbx + 0x20]
mov r8d, 4
mov rdx, qword [rax + 0x18]
call fcn.1402bffd0
test eax, eax
je 0x1402b8dd8
mov rax, qword [rdi + r13]
lea rcx, [rbx + 0x40]
mov r8d, 4
mov rdx, qword [rax + 0x20]
call fcn.1402bffd0
test eax, eax
je 0x1402b8dd8
mov rdi, qword [rsp + 0x20]
mov r8d, 1
mov rcx, rdi
mov rdx, rbx
call fcn.140040e00
mov rdx, rbx
lea rcx, [rbx + 0x60]
call fcn.140041580
mov r8d, 2
lea rdx, [rbx + 0x60]
mov rcx, rdi
call fcn.140040e00
lea rbp, [rbx + 0xc0]
mov r8, rbx
mov rcx, rbp
lea rdx, [rbx + 0x60]
call fcn.1400418c0
mov r8d, 3
mov rdx, rbp
mov rcx, rdi
call fcn.140040e00
lea rdx, [rbx + 0x60]
lea rcx, [rbx + 0x60]
call fcn.140041580
mov r8d, 4
lea rdx, [rbx + 0x60]
mov rcx, rdi
call fcn.140040e00
mov rdx, rbp
mov rcx, rbp
call fcn.140041580
mov r8d, 6
mov rdx, rbp
mov rcx, rdi
call fcn.140040e00
lea rsi, [rbx + 0x120]
mov r8, rbx
mov rcx, rsi
lea rdx, [rbx + 0x60]
call fcn.1400418c0
mov r8d, 5
mov rdx, rsi
mov rcx, rdi
call fcn.140040e00
lea rdi, [rbx + 0x180]
mov r8, rbx
mov rcx, rdi
mov rdx, rbp
call fcn.1400418c0
mov rcx, qword [rsp + 0x20]
mov r8d, 7
mov rdx, rdi
call fcn.140040e00
lea rdx, [rbx + 0x60]
lea rcx, [rbx + 0x60]
call fcn.140041580
mov rcx, qword [rsp + 0x20]
lea rdx, [rbx + 0x60]
mov r8d, 8
call fcn.140040e00
mov rdx, rbp
mov rcx, rbp
call fcn.140041580
mov rcx, qword [rsp + 0x20]
mov r8d, reloc.WS2_32.dll_inet_ntoa
mov rdx, rbp
call fcn.140040e00
mov rdx, rsi
mov rcx, rsi
call fcn.140041580
mov rcx, qword [rsp + 0x20]
mov r8d, 0xa
mov rdx, rsi
call fcn.140040e00
mov rdx, rdi
mov rcx, rdi
call fcn.140041580
mov rcx, qword [rsp + 0x20]
mov r8d, recvfrom
mov rdx, rdi
call fcn.140040e00
mov r8, rbx
mov rdx, rbp
mov rcx, rbp
call fcn.1400418c0
mov rcx, qword [rsp + 0x20]
mov r8d, reloc.WS2_32.dll_listen
mov rdx, rbp
call fcn.140040e00
mov r8, rbx
mov rdx, rsi
mov rcx, rsi
call fcn.1400418c0
mov rdx, rsi
mov r8d, reloc.WS2_32.dll_inet_addr
mov rsi, qword [rsp + 0x20]
mov rcx, rsi
call fcn.140040e00
mov r8, rbx
mov rdx, rdi
mov rcx, rdi
call fcn.1400418c0
mov r8d, reloc.WS2_32.dll_ntohs
mov rdx, rdi
mov rcx, rsi
call fcn.140040e00
mov r8, rbx
lea rdx, [rbx + 0x60]
mov rcx, rbp
call fcn.1400418c0
mov r8d, 9
mov rdx, rbp
mov rcx, rsi
call fcn.140040e00
lea rdx, [rbx + 0x60]
lea rcx, [rbx + 0x60]
call fcn.140041580
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rbx + 0x60]
mov rcx, rsi
call fcn.140040e00
mov rax, qword [rsp + 0x30]
add rsi, 0x600
add qword [rsp + 0x28], 0x21
inc rax
mov rdi, qword [rsp + 0xd8]
add r13, 8
mov ebp, 0
mov r14, qword [rsp + 0xc0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x20], rsi
cmp rax, qword [rsp + 0xd0]
jb 0x1402b8672
mov r13, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0x38]
movzx eax, byte [r12 + 0x1f]
mov edi, 0xff
shr eax, 6
mov rdx, rsi
mov r8d, eax
mov dword [rsp + 0x28], edi
shr r8d, 1
and eax, 1
add r8d, eax
mov rcx, rbx
call fcn.140040e60
movups xmm0, xmmword [rbx]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [r15 + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [r15 + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [r15 + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [r15 + 0x50], xmm1
nop dword [rax]
cmp edi, 0xff
mov rdx, rbp
sete dl
cmp rdx, r13
jae 0x1402b8c36
lea ecx, [rdi - 1]
mov r9d, ecx
lea rsi, [rdx + rdx*2]
shr ecx, 3
and r9d, 7
shl rsi, 9
add rsi, qword [rsp + 0x38]
imul rbp, rdx, 0x21
lea r8d, [rcx + 1]
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x50], r8
sub r13, rdx
mov qword [rsp + 0x30], rcx
nop dword [rax]
lea rax, [r8 + rbp]
movzx r8d, byte [rax + r12]
lea rax, [rcx + r12]
movzx ecx, byte [rax + rbp]
shl r8d, 8
or r8d, ecx
mov ecx, r9d
shr r8d, cl
mov ecx, 0x3f
and r8d, 0x3f
sub ecx, r8d
mov eax, r8d
shr eax, 5
dec eax
mov edx, eax
and eax, r8d
not edx
and ecx, edx
and edx, 1
or ecx, eax
mov eax, ecx
and ecx, 1
shr eax, 1
add eax, ecx
mov rcx, rbx
lea edi, [rdx + rax*2]
mov rdx, rsi
mov r8d, edi
shr r8d, 1
call fcn.140040e60
lea rdx, [rbx + 0x20]
lea rcx, [rbx + 0x80]
call fcn.14003f4c0
mov rax, qword [rbx + 0x20]
and edi, 1
neg rdi
mov r8, rbx
mov rdx, rdi
mov rcx, rdi
and rcx, qword [rbx + 0x80]
not rdx
and rax, rdx
xor rcx, rax
mov rax, rdx
mov qword [rbx + 0x20], rcx
mov rcx, rdi
and rcx, qword [rbx + 0x88]
and rax, qword [rbx + 0x28]
xor rcx, rax
mov rax, rdi
mov qword [rbx + 0x28], rcx
mov rcx, rdx
and rax, qword [rbx + 0x90]
and rcx, qword [rbx + 0x30]
xor rcx, rax
mov qword [rbx + 0x30], rcx
mov rcx, r15
mov rax, qword [rbx + 0x38]
and rdi, qword [rbx + 0x98]
and rax, rdx
xor rdi, rax
mov rdx, r15
mov qword [rbx + 0x38], rdi
call fcn.1400418c0
mov r9d, dword [rsp + 0x20]
lea rbp, [rbp + 0x21]
mov r8, qword [rsp + 0x50]
add rsi, 0x600
mov rcx, qword [rsp + 0x30]
sub r13, 1
jne 0x1402b8b20
mov edi, dword [rsp + 0x28]
xor ebp, ebp
mov r13, qword [rsp + 0xd0]
add edi, 0xfffffffb
mov rdx, r15
mov rcx, r15
mov dword [rsp + 0x28], edi
call fcn.140041580
mov rdx, r15
mov rcx, r15
call fcn.140041580
mov rdx, r15
mov rcx, r15
call fcn.140041580
mov rdx, r15
mov rcx, r15
call fcn.140041580
mov rdx, r15
mov rcx, r15
call fcn.140041580
cmp edi, 5
jae 0x1402b8ad0
test r13, r13
je 0x1402b8d75
mov rsi, qword [rsp + 0x38]
mov rbp, r12
nop
movzx edx, byte [rbp]
mov ecx, 0x3f
and edx, 0x1f
add edx, edx
sub ecx, edx
mov eax, edx
shr eax, 5
dec eax
mov r8d, eax
and eax, edx
not r8d
mov rdx, rsi
and ecx, r8d
and r8d, 1
or ecx, eax
mov eax, ecx
and ecx, 1
shr eax, 1
add eax, ecx
mov rcx, rbx
lea edi, [r8 + rax*2]
mov r8d, edi
shr r8d, 1
call fcn.140040e60
lea rdx, [rbx + 0x20]
lea rcx, [rbx + 0x80]
call fcn.14003f4c0
mov rax, qword [rbx + 0x20]
and edi, 1
neg rdi
mov r8, rbx
mov rdx, rdi
mov rcx, rdi
and rcx, qword [rbx + 0x80]
not rdx
and rax, rdx
xor rcx, rax
mov qword [rbx + 0x20], rcx
mov rcx, rdi
and rcx, qword [rbx + 0x88]
mov rax, qword [rbx + 0x28]
and rax, rdx
xor rcx, rax
mov qword [rbx + 0x28], rcx
mov rcx, qword [rbx + 0x30]
mov rax, qword [rbx + 0x90]
and rcx, rdx
and rax, rdi
xor rcx, rax
mov qword [rbx + 0x30], rcx
mov rcx, qword [rbx + 0x98]
mov rax, qword [rbx + 0x38]
and rcx, rdi
and rax, rdx
mov rdx, r15
xor rcx, rax
mov qword [rbx + 0x38], rcx
mov rcx, r15
call fcn.1400418c0
add rsi, 0x600
lea rbp, [rbp + 0x21]
sub r13, 1
jne 0x1402b8c90
mov ebp, 1
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x40]
lea rdx, [0x1403fc758]
mov r8d, 0x304
call fcn.1401f9b60
mov r8d, 0x305
lea rdx, [0x1403fc758]
mov rcx, r12
call fcn.1401f9b60
mov rcx, qword [rsp + 0x48]
lea rdx, [0x1403fc758]
mov r8d, 0x306
call fcn.1401f9b60
mov eax, ebp
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
call fcn.140226cc0
lea r8, [0x1403fc778]
mov edx, 0x2a2
lea rcx, [0x1403fc758]
call fcn.140226de0
xor r8d, r8d
mov edx, 0x92
mov ecx, reloc.WS2_32.dll_recv
call fcn.140226f40
jmp 0x1402b8d7a
call fcn.140226cc0
lea r8, [0x1403fc778]
mov edx, 0x286
lea rcx, [0x1403fc758]
call fcn.140226de0
xor r8d, r8d
mov edx, 0x80003
mov ecx, reloc.WS2_32.dll_recv
call fcn.140226f40
jmp 0x1402b8d7a