Function at 0x1401d6f00
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
mov eax, 0x58
call fcn.1402563a0
sub rsp, rax
mov rax, qword [rcx + 0x178]
mov rbx, rcx
mov rdi, r9
mov qword [rsp + 0x30], rax
mov rax, qword [rcx + 0x180]
mov rbp, r8
mov qword [rsp + 0x28], rax
mov rax, qword [rcx + 0x38]
mov rsi, rdx
lea rcx, [r9 + rax]
movabs rax, 0xfffffffe0
cmp rcx, rax
ja 0x1401d72f4
cmp rcx, r9
jb 0x1401d72f4
mov qword [rsp + 0x50], r13
mov r13d, dword [rbx + 0x170]
mov qword [rsp + 0x48], r14
xor r14d, r14d
mov qword [rbx + 0x38], rcx
mov dword [rsp + 0x80], r13d
cmp dword [rbx + 0x174], r14d
je 0x1401d6fd6
test r9, r9
jne 0x1401d6fa3
lea rdx, [rbx + 0x60]
lea rcx, [rbx + 0x40]
call fcn.1401d63d0
mov dword [rbx + 0x174], r14d
xor eax, eax
jmp 0x1401d72e1
mov rax, qword [rbx + 0x40]
mov r13d, reloc.WS2_32.dll_recv
mov dword [rbx + 0x174], r14d
mov qword [rbx + 0x188], rax
mov rax, qword [rbx + 0x48]
mov qword [rbx + 0x40], r14
mov qword [rbx + 0x48], r14
mov dword [rsp + 0x80], r13d
mov qword [rbx + 0x190], rax
movzx eax, byte [rbx + 0xd]
mov qword [rsp + 0x88], r12
movzx r12d, byte [rbx + 0xc]
shl r12d, 8
mov qword [rsp + 0x40], r15
mov r15d, r13d
or r12d, eax
movzx eax, byte [rbx + 0xe]
shl r12d, 8
or r12d, eax
movzx eax, byte [rbx + 0xf]
shl r12d, 8
or r12d, eax
and r15d, 0xf
mov dword [rsp + 0x20], r15d
je 0x1401d7085
movsxd r8, r13d
nop word [rax + rax]
test rdi, rdi
je 0x1401d705a
movzx edx, byte [rsi]
inc rbp
inc r13d
mov byte [r8 + rbx + 0x188], dl
movzx ecx, byte [r15 + rbx + 0x10]
inc r8
xor cl, dl
inc rsi
dec rdi
mov byte [rbp - 1], cl
inc r15d
and r15d, 0xf
mov dword [rsp + 0x20], r15d
jne 0x1401d7020
jmp 0x1401d7063
test r15d, r15d
jne 0x1401d72cb
lea r8, [rbx + 0x188]
lea rdx, [rbx + 0x60]
lea rcx, [rbx + 0x40]
mov r9d, r13d
call fcn.1401d6510
mov r13d, r14d
mov dword [rsp + 0x80], r14d
cmp rdi, 0x10
jb 0x1401d70b2
test r13d, r13d
je 0x1401d70b2
lea r8, [rbx + 0x188]
lea rdx, [rbx + 0x60]
lea rcx, [rbx + 0x40]
mov r9d, r13d
call fcn.1401d6510
mov r13d, r14d
mov dword [rsp + 0x80], r14d
cmp rdi, 0xc00
jb 0x1401d71a3
mov r13, qword [rsp + 0x28]
movabs rax, 0xaaaaaaaaaaaaaaab
lea rcx, [rbx + 0x60]
mul rdi
mov r15, rdx
lea r10, [rbx + 0x40]
shr r15, 0xb
mov rax, r15
mov qword [rsp + 0x38], r15
imul rax, rax, 0xfffffffffffff400
add rdi, rax
mov qword [rsp + 0x98], rdi
mov rdi, qword [rsp + 0x30]
nop
mov rdx, rcx
mov r9d, 0xc00
mov r8, rsi
mov rcx, r10
call fcn.1401d6510
mov r14d, 0xc0
nop word [rax + rax]
lea rdx, [rbx + 0x10]
mov r8, r13
mov rcx, rbx
call rdi
inc r12d
add rbp, 0x10
mov byte [rbx + 0xf], r12b
mov eax, r12d
add rsi, 0x10
shr eax, 0x18
mov byte [rbx + 0xc], al
mov eax, r12d
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r12d
shr eax, 8
mov byte [rbx + 0xe], al
mov rax, qword [rbx + 0x10]
xor rax, qword [rsi - 0x10]
mov qword [rbp - 0x10], rax
mov rax, qword [rsi - 8]
xor rax, qword [rbx + 0x18]
dec r14
mov qword [rbp - 8], rax
jne 0x1401d7120
mov r15, qword [rsp + 0x38]
lea rcx, [rbx + 0x60]
lea r10, [rbx + 0x40]
dec r15
mov qword [rsp + 0x38], r15
jne 0x1401d7100
mov rdi, qword [rsp + 0x98]
mov r13d, dword [rsp + 0x80]
mov r15d, dword [rsp + 0x20]
mov r9, rdi
and r9, 0xfffffffffffffff0
je 0x1401d7258
lea rdx, [rbx + 0x60]
lea rcx, [rbx + 0x40]
mov r8, rsi
call fcn.1401d6510
cmp rdi, 0x10
jb 0x1401d7258
mov r13, qword [rsp + 0x28]
mov r14, rdi
shr r14, 4
mov rax, r14
imul rax, rax, 0xfffffffffffffff0
add rdi, rax
mov qword [rsp + 0x98], rdi
mov rdi, qword [rsp + 0x30]
nop dword [rax]
lea rdx, [rbx + 0x10]
mov r8, r13
mov rcx, rbx
call rdi
inc r12d
add rbp, 0x10
mov byte [rbx + 0xf], r12b
mov eax, r12d
add rsi, 0x10
shr eax, 0x18
mov byte [rbx + 0xc], al
mov eax, r12d
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r12d
shr eax, 8
mov byte [rbx + 0xe], al
mov rax, qword [rbx + 0x10]
xor rax, qword [rsi - 0x10]
mov qword [rbp - 0x10], rax
mov rax, qword [rsi - 8]
xor rax, qword [rbx + 0x18]
dec r14
mov qword [rbp - 8], rax
jne 0x1401d71f0
mov rdi, qword [rsp + 0x98]
mov r13d, dword [rsp + 0x80]
mov r15d, dword [rsp + 0x20]
test rdi, rdi
je 0x1401d72cb
mov r8, qword [rsp + 0x28]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call qword [rsp + gethostbyaddr]
inc r12d
movsxd rcx, r13d
mov eax, r12d
sub rsi, rbx
sub rbp, rbx
shr eax, 0x18
mov byte [rbx + 0xf], r12b
lea r8, [rcx + rbx + 0x188]
mov byte [rbx + 0xc], al
mov eax, r12d
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r12d
shr eax, 8
add r13d, edi
mov byte [rbx + 0xe], al
movsxd rax, r15d
lea rdx, [rax + rbx + 0x10]
nop dword [rax + rax]
movzx eax, byte [rsi + rdx - 0x10]
inc rdx
inc r8
mov byte [r8 - 1], al
xor al, byte [rdx - 1]
dec rdi
mov byte [rdx + rbp - 0x11], al
jne 0x1401d72b0
mov r12, qword [rsp + 0x88]
mov r15, qword [rsp + 0x40]
mov dword [rbx + 0x170], r13d
xor eax, eax
mov r13, qword [rsp + 0x50]
mov r14, qword [rsp + 0x48]
add rsp, 0x58
pop rdi
pop rsi
pop rbp
pop rbx
ret
or eax, 0xffffffff
add rsp, 0x58
pop rdi
pop rsi
pop rbp
pop rbx
ret