Function at 0x140398270
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
mov eax, 0x3b8
call fcn.1404881b0
sub rsp, rax
mov rax, qword [0x1405e3440]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x320]
mov edi, 0x40
mov r14, qword [rbp + 0x330]
xor ebx, ebx
mov qword [rsp + 0x68], rax
mov r15, r8
mov rax, qword [rbp + 0x338]
mov rsi, rcx
mov qword [rbp - 0x70], rax
lea r13d, [rdi - 0x38]
mov qword [rsp + 0x60], r9
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x78], Ordinal_46
mov byte [rsp + 0x20], 1
cmp r14, 0x100000
jae 0x140398c69
lea rdx, [0x1404b9f44]
call fcn.140225420
test eax, eax
je 0x140398342
lea rcx, [rbp - 0x20]
call fcn.14022e0e0
test eax, eax
jle 0x140398c69
mov ecx, gethostbyaddr
mov byte [rsp + 0x20], bl
mov qword [rbp - 0x78], rcx
lea rax, [0x140398c90]
lea r12, [0x14022e120]
lea r15d, [rdi - 0x30]
jmp 0x14039846a
lea rdx, str.SHA1
mov rcx, rsi
call fcn.140225420
test eax, eax
je 0x14039837f
lea rcx, [rbp - 0x20]
call fcn.14022e410
test eax, eax
jle 0x140398c69
lea rax, [0x140398d10]
mov r15d, reloc.WS2_32.dll_sendto
lea r12, [0x14022e460]
jmp 0x140398465
lea rdx, str.SHA2_224
mov rcx, rsi
call fcn.140225420
test eax, eax
je 0x1403983bc
lea rcx, [rbp - 0x20]
call fcn.14022e760
test eax, eax
jle 0x140398c69
lea rax, [0x140398da0]
mov r15d, Ordinal_30
lea r12, [0x14022ec30]
jmp 0x140398465
lea rdx, str.SHA2_256
mov rcx, rsi
call fcn.140225420
test eax, eax
je 0x1403983f6
lea rcx, [rbp - 0x20]
call fcn.14022ebd0
test eax, eax
jle 0x140398c69
lea rax, [0x140398da0]
mov r15d, reloc.WLDAP32.dll_Ordinal_32
lea r12, [0x14022ec30]
jmp 0x140398465
lea rdx, str.SHA2_384
mov rcx, rsi
call fcn.140225420
test eax, eax
je 0x140398422
lea rcx, [rbp - 0x20]
call fcn.14022ee10
test eax, eax
jle 0x140398c69
mov r15d, gethostbyaddr
jmp 0x14039844d
lea rdx, str.SHA2_512
mov rcx, rsi
call fcn.140225420
test eax, eax
je 0x140398c61
lea rcx, [rbp - 0x20]
call fcn.14022f7c0
test eax, eax
jle 0x140398c69
mov r15, rdi
mov r13d, reloc.WS2_32.dll_recv
lea r12, [0x14022f850]
lea rax, [0x140398e80]
lea edi, [r13 + 0x70]
mov ecx, Ordinal_41
movzx r10d, byte [rbp + 0x348]
mov esi, reloc.WS2_32.dll_listen
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], rsi
test r10b, r10b
je 0x1403984ab
mov rsi, qword [rbp + 0x340]
mov r8d, 2
add rsi, 0xb
add rsi, rcx
mov qword [rsp + 0x70], rsi
jmp 0x1403984be
lea rax, [rdi + 0xff]
xor edx, edx
add rax, r15
div rdi
lea r8, [rax + 1]
xor edx, edx
mov qword [rsp + 0x58], r8
dec r14
mov rax, rsi
sub rax, r15
add rax, r13
add rax, rdi
add rax, r14
mov r14, qword [rbp + 0x328]
div rdi
xor edx, edx
add r14, rsi
mov r9, rax
mov rax, r14
div rdi
mov qword [rsp + 0x50], rdx
xor edx, edx
mov qword [rbp - 0x68], rax
lea rax, [r14 + r13]
div rdi
mov qword [rbp - 0x60], rax
xor eax, eax
mov ecx, eax
test r10b, r10b
setne cl
lea rdx, [rcx + r8]
mov rcx, r9
sub rcx, r8
cmp r9, rdx
jbe 0x140398528
mov rbx, rcx
imul rbx, rdi
cmp r9, rdx
cmovbe rcx, rax
lea r14, [r14*8]
mov qword [rbp - 0x80], rcx
test r10b, r10b
jne 0x14039860b
mov r8, rdi
lea rcx, [rbp + 0x110]
xor edx, edx
lea r14, [r14 + rdi*8]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp + 0x340]
cmp rax, 0x80
ja 0x140398c69
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x110]
mov r8, rax
call sub.VCRUNTIME140.dll_memcpy
movdqa xmm2, xmmword [str.6666666666666666_]
xor eax, eax
nop word [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x110], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x120]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x140], xmm1
add rax, 0x40
cmp rax, rdi
jb 0x140398590
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x20]
call r12
mov rax, r14
lea rcx, [rbp + 0xc0]
shr rax, 0x10
mov r12, r14
mov qword [rsp + 0x38], rax
xor edx, edx
mov rax, r14
shr r12, 0x18
shr rax, 8
mov qword [rsp + 0x30], rax
cmp byte [rsp + 0x20], dl
je 0x14039866e
lea r8, [r13 - 4]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xbd], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xbe], al
mov byte [rbp + r13 + 0xbc], r12b
mov byte [rbp + r13 + 0xbf], r14b
jmp 0x1403986a0
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xba], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xb9], al
mov byte [rbp + r13 + 0xbb], r12b
mov byte [rbp + r13 + 0xb8], r14b
test rbx, rbx
je 0x1403987d8
cmp byte [rbp + 0x348], 0
je 0x140398754
cmp rsi, rdi
jbe 0x140398c69
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
mov r14, qword [rsp + 0x28]
mov r12, rsi
sub r12, rdi
call r14
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x190]
add rdx, rdi
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x190]
mov r8, rdi
add rcx, r12
sub r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r14
xor edx, edx
mov rax, rbx
div rdi
dec rax
cmp rax, 1
jbe 0x1403987d8
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x28]
sub r14, r12
add r14, rdi
lea r12, [rax - 1]
nop
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x140398740
jmp 0x1403987d3
mov rcx, qword [rsp + 0x60]
lea r8, [rdi - 0xd]
mov r14, qword [rsp + 0x68]
mov rdx, r14
mov eax, dword [rcx + 8]
movsd xmm0, qword [rcx]
mov dword [rbp + 0x198], eax
movzx eax, byte [rcx + 0xc]
lea rcx, [rbp + 0x19d]
mov byte [rbp + 0x19c], al
movsd qword [rbp + 0x190], xmm0
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r12
xor edx, edx
mov rax, rbx
div rdi
cmp rax, 1
jbe 0x1403987d8
mov rsi, qword [rsp + 0x28]
lea r12, [rax - 1]
add r14, 0xfffffffffffffff3
add r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x1403987c1
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x80]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rbp - 0x40], rax
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
cmp rcx, rax
ja 0x140398ace
mov rax, qword [rsp + 0x50]
movaps xmmword [rsp + 0x3a0], xmm6
lea rdx, [rax + 1]
shr rax, 0x3f
mov qword [rbp - 0x58], rax
mov rax, rdi
sub rax, r13
shr rdx, 0x3f
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rdi
add rax, r13
lea r13, [rbp + 0xc0]
add rax, r13
mov qword [rbp - 0x48], rax
xor r13d, r13d
nop dword [rax + rax]
mov r12, qword [rsp + 0x60]
mov r9, r13
mov r15, qword [rsp + 0x68]
mov rax, rcx
xor rax, qword [rbp - 0x68]
lea r11, [rax - 1]
not rax
shr rax, 0x3f
shr r11, 0x3f
and r11b, al
mov rax, rcx
xor rax, qword [rbp - 0x60]
neg r11b
lea r14, [rax - 1]
not rax
shr rax, 0x3f
shr r14, 0x3f
and r14b, al
neg r14b
movsx eax, r14b
movzx r13d, r14b
not r13b
or r13b, r11b
movd xmm6, eax
punpcklbw xmm6, xmm6
punpcklwd xmm6, xmm6
pshufd xmm6, xmm6, 0
xor r8b, r8b
cmp rbx, rsi
jae 0x1403988d3
movzx r8d, byte [r12 + rbx]
jmp 0x1403988ed
mov rax, qword [rbp + 0x330]
add rax, rsi
cmp rbx, rax
jae 0x1403988ed
mov rax, r15
sub rax, rsi
movzx r8d, byte [rax + rbx]
mov rax, qword [rbp - 0x58]
mov r10, r9
mov rsi, qword [rsp + 0x70]
sub r10, rdx
mov rcx, r10
mov rdx, r9
shr rcx, 0x3f
inc rbx
xor cl, al
shr rdx, 0x3f
xor al, dl
or cl, al
movzx eax, r11b
xor cl, dl
dec cl
movzx ecx, cl
and ecx, eax
mov dword [rsp + 0x38], ecx
not ecx
mov dword [rsp + 0x30], ecx
mov rcx, r9
mov eax, dword [rsp + 0x30]
and al, r8b
mov r8d, dword [rsp + 0x38]
and r8b, 0x80
or r8b, al
mov rax, qword [rsp + 0x50]
inc rax
sub rcx, rax
movzx eax, dl
xor al, byte [rsp + 0x58]
shr rcx, 0x3f
xor cl, byte [rsp + 0x58]
or cl, al
xor cl, dl
dec cl
and cl, r11b
not cl
and cl, r13b
and r8b, cl
cmp r9, qword [rbp - 0x50]
jb 0x140398998
mov rcx, qword [rbp - 0x48]
movzx eax, r14b
mov dword [rsp + 0x38], eax
not eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x38]
movzx ecx, byte [r10 + rcx]
and cl, al
mov eax, dword [rsp + 0x30]
and r8b, al
or r8b, cl
mov rdx, qword [rsp + 0x50]
lea rax, [rbp + 0x210]
add rax, rdx
inc r9
mov byte [r10 + rax], r8b
cmp r9, rdi
jb 0x1403988c4
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call r12
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
xor r13d, r13d
mov eax, r13d
cmp r15, 0x40
jb 0x140398a86
mov rcx, r15
and rcx, 0xffffffffffffffc0
movdqu xmm0, xmmword [rbp + rax + 0xd0]
movdqu xmm1, xmmword [rbp + rax + 0x210]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0xd0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xe0]
movdqu xmm1, xmmword [rbp + rax + 0x220]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0xe0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xf0]
movdqu xmm1, xmmword [rbp + rax + 0x230]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0xf0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x100]
movdqu xmm1, xmmword [rbp + rax + 0x240]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
add rax, 0x40
cmp rax, rcx
jb 0x1403989f5
cmp rax, r15
jae 0x140398aaa
nop dword [rax + rax]
movzx ecx, byte [rbp + rax + 0x210]
and cl, r14b
or byte [rbp + rax + 0xd0], cl
inc rax
cmp rax, r15
jb 0x140398a90
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
inc rcx
mov qword [rbp - 0x80], rcx
cmp rcx, qword [rbp - 0x40]
jbe 0x140398860
movaps xmm6, xmmword [rsp + 0x3a0]
jmp 0x140398ad1
xor r13d, r13d
call fcn.140215960
mov rbx, rax
test rax, rax
je 0x140398c54
mov rdx, qword [rbp - 0x38]
xor r8d, r8d
mov rcx, rax
call fcn.140214f80
test eax, eax
jle 0x140398c54
cmp byte [rbp + 0x348], 0
je 0x140398b79
mov r14, qword [rbp - 0x78]
lea rcx, [rbp + 0x110]
mov r8, r14
mov edx, 0x5c
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbp + 0x340]
mov rcx, rbx
mov rdx, qword [rbp - 0x70]
call fcn.140214fc0
test eax, eax
jle 0x140398c54
mov r8, r14
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.140214fc0
test eax, eax
jle 0x140398c54
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.140214fc0
test eax, eax
jg 0x140398c29
mov rcx, rbx
call fcn.1402158b0
mov eax, r13d
jmp 0x140398c6b
movdqa xmm2, xmmword [str.jjjjjjjjjjjjjjjj_]
mov rax, r13
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x110], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x120]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x140], xmm1
add rax, 0x40
cmp rax, rdi
jb 0x140398b90
mov r8, rdi
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.140214fc0
test eax, eax
jle 0x140398c54
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.140214fc0
test eax, eax
jle 0x140398c54
mov rdx, qword [rbp - 0x30]
lea r8, [rsp + 0x78]
mov rcx, rbx
call fcn.140214a00
test eax, eax
je 0x140398c4e
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x140398c4e
mov eax, dword [rsp + 0x78]
mov qword [rcx], rax
mov r13d, 1
mov rcx, rbx
call fcn.1402158b0
mov eax, r13d
jmp 0x140398c6b
test r15, r15
je 0x140398c69
mov qword [r15], rbx
xor eax, eax
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.140487ca0
add rsp, 0x3b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret