3.1.4.1.1.3 Obfuscation Algorithm

Based on the XorMagic flag in the Flags field that is passed in the RPC_HEADER_EXT structure, as specified in section 2.2.2.1, of the extended buffer, the payload data specified in section 3.1.4.1.1.1.1 and section 3.1.4.1.1.1.2 is obfuscated to obscure any easily readable messaging data being transmitted between the client and server across the network. This is not intended as a security feature. If a client requests to have secure communications with the server, it MUST use RPC-level packet encryption.

The algorithm used to obscure data is straightforward and simple. Every byte of the data to be obfuscated has the XOR operator applied with the value 0xA5.