Function at 0x1401b82d0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd8
mov rax, qword [0x1402dac00]
xor rax, rsp
mov qword [rsp + 0xc0], rax
mov r15, r9
mov rbp, r8
mov rsi, rdx
mov r14, rcx
mov rax, qword [rcx]
call qword [rax + 0xf8]
lea r12, [rax + 8]
mov rdi, qword [rax]
mov r9, r15
mov r8, rbp
mov rdx, rsi
mov rcx, rax
call qword [rdi + Ordinal_50]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + Ordinal_41]
mov edi, eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + Ordinal_41]
cmp eax, 0x10
jne 0x1401b898c
cmp byte [0x1402e4cac], 0
jne 0x1401b834e
call fcn.1401c5590
mov rax, qword [r15]
mov r10, qword [rax + 8]
mov ebx, 0x10000
lea r9, [rsp + 0x20]
lea r8, vtable.type_info.0
lea rdx, str.TableSize
mov rcx, r15
cmp byte [0x1402e4cb3], 0
je 0x1401b8385
call r10
lea ecx, [rdi*8]
jmp 0x1401b83b1
call r10
test al, al
je 0x1401b839a
mov ecx, 0x800
cmp dword [rsp + 0x20], ebx
cmovge ecx, ebx
jmp 0x1401b83b1
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x100]
mov ecx, 0x800
cmp eax, 1
cmove ecx, ebx
mov dword [rsp + 0x20], ecx
lea eax, [rcx + rdi*2]
add edi, eax
mov esi, edi
mov rbx, qword [r14 + 0x30]
mov r15, qword [r14 + 0x28]
xor ebp, ebp
mov qword [rsp + 0x30], rbp
cmp r15, rsi
je 0x1401b8417
test edi, edi
je 0x1401b83de
mov ecx, esi
call fcn.1401b7200
mov rbp, rax
mov r8, r15
cmp rsi, r15
cmovb r8, rsi
test rbx, rbx
je 0x1401b8414
test rbp, rbp
je 0x1401b8402
test r8, r8
je 0x1401b8402
mov rdx, rbx
mov rcx, rbp
call fcn.14023fcb0
mov rdi, rbx
xor eax, eax
mov rcx, r15
rep stosb byte [rdi], al
mov rcx, rbx
call fcn.1401b7280
mov rbx, rbp
mov qword [r14 + 0x30], rbx
mov qword [r14 + 0x28], rsi
mov qword [r14 + 0x20], 0xffffffffffffffff
lea r13, [rbx + 0x30]
lea rdi, [rbx + 0x20]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov rax, qword [r12]
mov r9, rdi
xor r8d, r8d
mov rdx, rdi
mov rcx, r12
call qword [rax + reloc.WLDAP32.dll_Ordinal_32]
cmp byte [0x1402e4cac], 0
jne 0x1401b8456
call fcn.1401c5590
cmp byte [0x1402e4cb3], 0
je 0x1401b8474
mov r8d, dword [rsp + 0x20]
mov rdx, r13
mov rcx, rdi
call fcn.1401c7d20
jmp 0x1401b8968
xor r12d, r12d
mov r11d, r12d
test rdi, rdi
je 0x1401b8482
mov r11, qword [rdi]
bswap r11
add rdi, 8
mov r10, r12
je 0x1401b8491
mov r10, qword [rdi]
bswap r10
cmp dword [rsp + 0x20], 0x10000
jne 0x1401b8650
mov edi, r12d
movabs r8, 0xe100000000000000
nop
mov eax, edi
and eax, 7
mov ecx, listen
sub ecx, eax
mov edx, 1
shl rdx, cl
mov eax, edi
shr eax, 3
shl eax, 0xc
movsxd rcx, eax
lea rax, [rdx + r13]
add rcx, rax
mov rax, r11
bswap rax
je 0x1401b84e1
mov qword [rcx], rax
add rcx, 8
mov rax, r10
bswap rax
je 0x1401b84f0
mov qword [rcx], rax
mov edx, r10d
mov rcx, r11
shl rcx, 0x3f
mov rax, r10
shr rax, 1
mov r10, rcx
or r10, rax
and dl, 1
neg dl
sbb rcx, rcx
and rcx, r8
mov rax, r11
shr rax, 1
mov r11, rcx
xor r11, rax
inc edi
cmp edi, 0x80
jl 0x1401b84b0
mov rbp, r13
mov qword [rsp + 0x28], reloc.WS2_32.dll_recv
nop dword [rax]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
cmp byte [0x1402e4cac], 0
jne 0x1401b8555
call fcn.1401c5590
cmp byte [0x1402e4cad], 0
je 0x1401b85b7
mov r14d, 2
cmp r14d, 1
jle 0x1401b85a9
mov eax, r14d
shl eax, 4
movsxd rbx, eax
sub rbx, r13
add rbx, rbp
add rbx, r13
lea rdi, [rbp + 0x10]
add eax, 0x10
movsxd r15, eax
add r15, 0xfffffffffffffff0
lea esi, [r14 - 1]
nop
lea rcx, [r15 + rdi]
mov r8, rdi
mov rdx, rbx
call fcn.1401c7f10
add rdi, 0x10
sub rsi, 1
jne 0x1401b8590
add r14d, r14d
cmp r14d, 0x80
jle 0x1401b8564
jmp 0x1401b8631
mov r11d, 2
mov r9d, r11d
cmp r9, 1
jle 0x1401b8622
lea rdx, [r9 + r12]
shl rdx, 4
lea rax, [rdx + 0x18]
add rax, r13
mov r8, r9
neg r8
add r8, r8
mov rcx, r9
shl rcx, 4
mov r10, 0xfffffffffffffff8
sub r10, rcx
lea rdi, [r9 - 1]
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [r10 + rax]
xor rcx, qword [rdx + r13]
mov qword [rax - 8], rcx
mov rcx, qword [rax + r8*8]
xor rcx, qword [rdx + r13 + 8]
mov qword [rax], rcx
lea rax, [rax + 0x10]
sub rdi, 1
jne 0x1401b8600
add r11d, r11d
add r9, r9
cmp r11d, 0x80
jle 0x1401b85c0
add rbp, 0x1000
add r12, 0x100
sub qword [rsp + 0x28], 1
jne 0x1401b8540
jmp 0x1401b8968
movzx eax, byte [0x1402e4ac0]
test al, al
jne 0x1401b86de
mov dword [0x1402e48c0], 0xc2010000
mov esi, 0x1c2
mov r8d, 2
lea r14, [0x1402e48c0]
lea rbp, [0x1402e48c2]
add si, si
mov eax, r8d
lea rbx, [r14 + rax*2]
movzx eax, si
ror ax, 8
mov word [rbx], ax
mov edi, 1
cmp r8d, edi
jbe 0x1401b86cb
mov r9, rbp
nop dword [rax]
nop word [rax + rax]
movzx edx, word [rbx]
xor dx, word [r9]
lea eax, [rdi + r8]
mov word [r14 + rax*2], dx
inc edi
lea r9, [r9 + 2]
cmp edi, r8d
jb 0x1401b86b0
add r8d, r8d
cmp r8d, 0x80
jbe 0x1401b8682
mov byte [0x1402e4ac0], 1
mov edi, r12d
movabs r8, 0xe100000000000000
nop dword [rax + rax]
mov ecx, edi
and ecx, 0x1f
cmp ecx, 4
jae 0x1401b8740
mov eax, 7
sub eax, ecx
mov edx, 1
movzx ecx, al
shl rdx, cl
mov eax, edi
shr eax, 5
shl eax, 8
movsxd rcx, eax
add rdx, 0x400
add rdx, r13
mov rax, r11
bswap rax
add rdx, rcx
je 0x1401b872f
mov qword [rdx], rax
add rdx, 8
mov rax, r10
bswap rax
je 0x1401b8783
mov qword [rdx], rax
jmp 0x1401b8783
cmp ecx, 8
jae 0x1401b8783
mov eax, listen
sub eax, ecx
mov edx, 1
movzx ecx, al
shl rdx, cl
mov eax, edi
shr eax, 5
shl eax, 8
movsxd rcx, eax
lea rax, [rdx + r13]
add rcx, rax
mov rax, r11
bswap rax
je 0x1401b8774
mov qword [rcx], rax
add rcx, 8
mov rax, r10
bswap rax
je 0x1401b8783
mov qword [rcx], rax
mov edx, r10d
mov rcx, r11
shl rcx, 0x3f
mov rax, r10
shr rax, 1
mov r10, rcx
or r10, rax
and dl, 1
neg dl
sbb rcx, rcx
and rcx, r8
mov rax, r11
shr rax, 1
mov r11, rcx
xor r11, rax
inc edi
cmp edi, 0x68
jl 0x1401b86f0
mov r15, r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x38], 4
mov edx, reloc.WS2_32.dll_recv
xorps xmm0, xmm0
movups xmmword [r15 + r13], xmm0
movups xmmword [r15 + r13 + 0x400], xmm0
cmp byte [0x1402e4cac], 0
jne 0x1401b87f5
call fcn.1401c5590
mov edx, reloc.WS2_32.dll_recv
cmp byte [0x1402e4cad], 0
je 0x1401b888b
mov esi, 2
cmp esi, 1
jle 0x1401b8875
mov ecx, esi
shl ecx, 4
movsxd rbp, ecx
add rbp, r15
add rbp, r13
lea eax, [rcx + 0x10]
movsxd rcx, eax
lea rdi, [r15 + rcx]
add rdi, r13
mov r14d, 0x410
sub r14, rcx
mov r15, rdx
sub r15, rcx
lea ebx, [rsi - 1]
nop dword [rax]
lea r8, [r15 + rdi]
mov rdx, rbp
mov rcx, rdi
call fcn.1401c7f10
lea r8, [r14 + rdi]
lea rcx, [rdi + 0x400]
lea rdx, [rbp + 0x400]
call fcn.1401c7f10
add rdi, 0x10
sub rbx, 1
jne 0x1401b8840
mov r15, qword [rsp + 0x28]
add esi, esi
cmp esi, 8
mov edx, reloc.WS2_32.dll_recv
jle 0x1401b8807
mov r12, qword [rsp + 0x30]
jmp 0x1401b8942
mov r14d, 2
mov r8d, r14d
cmp r8, 1
jle 0x1401b8932
lea rdi, [r12 + r8]
shl rdi, 4
lea rdx, [r8 + 0x40]
add rdx, r12
add rdx, rdx
lea rcx, [rdi + 0x18]
add rcx, r13
mov r10, r8
neg r10
add r10, r10
mov r11d, 0x40
sub r11, r8
add r11, r11
mov rax, r8
shl rax, 4
mov rbx, 0xfffffffffffffff8
sub rbx, rax
mov esi, 0x3f8
sub rsi, rax
lea r9, [r8 - 1]
nop dword [rax]
mov rax, qword [rbx + rcx]
xor rax, qword [rdi + r13]
mov qword [rcx - 8], rax
mov rax, qword [rcx + r10*8]
xor rax, qword [rdi + r13 + 8]
mov qword [rcx], rax
mov rax, qword [rsi + rcx]
xor rax, qword [r13 + rdx*8]
mov qword [rcx + 0x3f8], rax
mov rax, qword [rcx + r11*8]
xor rax, qword [r13 + rdx*8 + 8]
mov qword [rcx + 0x400], rax
lea rcx, [rcx + 0x10]
sub r9, 1
jne 0x1401b88f0
add r14d, r14d
add r8, r8
cmp r14d, 8
jle 0x1401b8894
add r15, 0x100
mov qword [rsp + 0x28], r15
add r12, 0x10
mov qword [rsp + 0x30], r12
sub qword [rsp + 0x38], 1
mov edx, reloc.WS2_32.dll_recv
jne 0x1401b87d1
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.1401ebf40
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
lea rcx, [r14 + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
call qword [rax + reloc.WS2_32.dll_recv]
nop
lea r8, str.:_block_size_of_underlying_block_cipher_is_not_16
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140037cb0
nop
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.1400035c0
lea rdx, [0x1402d7d60]
lea rcx, [rsp + 0x80]
call fcn.1401ee960
int3