Function at 0x1401997a0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2b0]
mov eax, 0x3b0
call fcn.14012b0b0
sub rsp, rax
mov rax, qword [0x1403a8088]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x310]
mov r15d, Ordinal_41
mov rdi, qword [rbp + 0x320]
mov r14, r8
mov qword [rsp + 0x58], rax
mov r12, rcx
mov rax, qword [rbp + 0x328]
mov esi, 0x40
mov qword [rbp - 0x80], rax
mov bl, 1
mov qword [rsp + 0x78], r9
mov qword [rbp - 0x68], r8
mov qword [rbp - 0x70], rdx
mov qword [rbp - 0x78], rcx
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x24], 8
cmp rdi, 0x100000
jb 0x140199841
lea r8, str.data_plus_mac_plus_padding_size___1024__1024
mov edx, 0x1c7
lea rcx, [0x1403b53c8]
call fcn.1401c3cb0
mov rcx, r12
mov qword [rsp + 0x3a8], r13
call fcn.1401cc160
mov rcx, rax
call fcn.14022dff0
mov ecx, eax
cmp eax, 0x2a1
jg 0x140199931
cmp eax, 0x2a1
je 0x140199919
cmp eax, 4
je 0x1401998df
cmp eax, esi
je 0x1401998b2
cmp eax, 0x2a0
jne 0x14019993e
lea rcx, [rbp - 0x30]
call fcn.1401e0e00
test eax, eax
jle 0x14019a050
mov ecx, 0x20
lea rax, [0x14019a500]
lea r13, [0x1401e0e70]
lea r10d, [rcx - 0x18]
jmp 0x1401999c4
lea rcx, [rbp - 0x30]
call fcn.1401e08d0
test eax, eax
jle 0x14019a050
mov ecx, reloc.WS2_32.dll_sendto
lea rax, [0x14019a470]
lea r13, [0x1401e0920]
lea r10d, [rcx - 0xc]
jmp 0x1401999c4
lea rcx, [rbp - 0x30]
call fcn.1401c0d10
test eax, eax
jle 0x14019a050
mov ecx, reloc.WS2_32.dll_recv
lea rax, [0x14019a3f0]
mov r15d, gethostbyname
lea r13, [0x1401c0d60]
mov dword [rsp + 0x50], r15d
xor bl, bl
lea r10d, [rcx - 8]
jmp 0x1401999c4
lea rcx, [rbp - 0x30]
call fcn.1401e0fc0
test eax, eax
jle 0x14019a050
mov ecx, gethostbyname
jmp 0x1401999a7
sub ecx, 0x2a2
je 0x140199994
cmp ecx, 1
je 0x14019996a
lea r8, [0x1403b5354]
mov edx, 0x209
lea rcx, [0x1403b53d8]
call fcn.1401c3cb0
test r14, r14
je 0x14019a050
xor r12d, r12d
mov qword [r14], r12
jmp 0x14019a050
lea rcx, [rbp - 0x30]
call fcn.1401e0a70
test eax, eax
jle 0x14019a050
mov ecx, 0x1c
lea rax, [0x14019a500]
lea r13, [0x1401e0e70]
lea r10d, [rcx - 0x14]
jmp 0x1401999c4
lea rcx, [rbp - 0x30]
call fcn.1401e15e0
test eax, eax
jle 0x14019a050
mov ecx, esi
mov r10d, reloc.WS2_32.dll_recv
lea r13, [0x1401e1670]
mov dword [rsp + 0x24], r10d
lea rax, [0x14019a5e0]
lea esi, [r10 + 0x70]
movzx r11d, byte [rbp + 0x338]
mov r14d, reloc.WS2_32.dll_listen
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x2c], r14d
test r11b, r11b
je 0x1401999fd
mov r14d, dword [rbp + 0x330]
add r14d, 0xb
add r14d, r15d
mov dword [rsp + 0x2c], r14d
mov r15d, dword [rbp + 0x318]
test r11b, r11b
mov eax, 2
mov r9d, 6
cmovne r9d, eax
xor edx, edx
sub r15d, ecx
mov dword [rsp + 0x40], r9d
mov eax, edi
add r15d, r14d
sub eax, ecx
xor r12d, r12d
dec eax
mov dword [rsp + 0x30], r12d
add eax, r14d
mov ecx, r12d
add eax, r10d
mov edi, r12d
add eax, esi
div esi
xor edx, edx
mov r8d, eax
mov eax, r15d
div esi
mov dword [rsp + 0x34], edx
xor edx, edx
mov dword [rsp + 0x60], eax
lea eax, [r15 + r10]
div esi
test r11b, r11b
mov dword [rsp + 0x64], eax
setne cl
add ecx, r9d
cmp r8d, ecx
jbe 0x140199a7a
mov edi, r8d
sub edi, r9d
mov dword [rsp + 0x30], edi
imul edi, esi
lea r15d, [r15*8]
test r11b, r11b
jne 0x140199b43
mov r8d, esi
lea rcx, [rbp + 0x100]
xor edx, edx
lea r15d, [r15 + rsi*8]
call fcn.14027b2c0
mov eax, dword [rbp + 0x330]
cmp eax, 0x80
jbe 0x140199acb
lea r8, str.mac_secret_length___sizeof_hmac_pad_
mov edx, 0x271
lea rcx, str.._ssl_s3_cbc.c
call fcn.1401c3cb0
mov eax, dword [rbp + 0x330]
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x100]
mov r8d, eax
call fcn.140278ed0
movdqa xmm2, xmmword [str.6666666666666666jjjjjjjjjjjjjjjj]
mov edx, r12d
nop dword [rax]
mov eax, edx
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
lea eax, [rdx + 0x10]
add edx, 0x20
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
cmp edx, esi
jb 0x140199af0
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x30]
call r13
mov r10d, dword [rsp + 0x24]
xor edx, edx
lea rcx, [rbp + 0xb0]
test bl, bl
je 0x140199b98
lea eax, [r10 - 4]
mov r8d, eax
mov ebx, eax
call fcn.14027b2c0
mov r8d, dword [rsp + 0x24]
mov eax, r15d
shr eax, 0x18
mov edx, r15d
mov byte [rbp + rbx + 0xb0], al
shr edx, 0x10
lea eax, [r8 - 3]
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 2]
mov edx, r15d
shr edx, 8
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 1]
jmp 0x140199bdc
mov r8d, r10d
call fcn.14027b2c0
mov r8d, dword [rsp + 0x24]
mov edx, r15d
shr edx, 0x18
lea eax, [r8 - 5]
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 6]
mov edx, r15d
shr edx, 0x10
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 7]
mov edx, r15d
shr edx, 8
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 8]
mov byte [rbp + rax + 0xb0], r15b
test edi, edi
je 0x140199d1d
cmp byte [rbp + 0x338], r12b
je 0x140199c9c
cmp r14d, esi
jbe 0x14019a050
mov rdx, qword [rsp + 0x78]
lea rcx, [rbp - 0x30]
mov ebx, r14d
sub ebx, esi
call r13
mov edx, esi
lea rcx, [rbp + 0x180]
add rdx, qword [rsp + 0x78]
mov r8d, ebx
mov r13d, ebx
call fcn.140278ed0
mov rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0x180]
mov r8d, esi
add rcx, r13
sub r8d, ebx
call fcn.140278ed0
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x30]
call qword [rsp + gethostname]
xor edx, edx
mov eax, edi
div esi
dec eax
cmp eax, 1
jbe 0x140199d1d
mov r12, qword [rsp + 0x38]
lea r15d, [rax - 1]
mov r14, qword [rsp + 0x58]
mov ebx, esi
nop word [rax + rax]
mov edx, ebx
lea rcx, [rbp - 0x30]
sub rdx, r13
add rdx, r14
call r12
add ebx, esi
sub r15, 1
jne 0x140199c80
xor r12d, r12d
jmp 0x140199d18
mov r15, qword [rsp + 0x78]
lea r8d, [rsi - 0xd]
mov rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0x18d]
mov eax, dword [r15 + 8]
movsd xmm0, qword [r15]
mov dword [rbp + 0x188], eax
movzx eax, byte [r15 + 0xc]
mov byte [rbp + 0x18c], al
movsd qword [rbp + 0x180], xmm0
call fcn.140278ed0
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x30]
call r13
xor edx, edx
mov eax, edi
div esi
cmp eax, 1
jbe 0x140199d1d
mov r14, qword [rsp + 0x58]
lea r15d, [rax - 1]
mov ebx, esi
nop dword [rax]
mov eax, ebx
lea rdx, [r14 - 0xd]
add rdx, rax
lea rcx, [rbp - 0x30]
call r13
add ebx, esi
sub r15, 1
jne 0x140199d00
mov r14d, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x30]
xor eax, eax
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rax
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x6c], eax
cmp ecx, eax
ja 0x140199fb3
mov edx, dword [rsp + 0x34]
mov r8d, edx
shr r8d, 0x1f
movaps xmmword [rsp + 0x390], xmm6
mov dword [rsp + 0x2c], r8d
lea eax, [rdx + 1]
shr eax, 0x1f
mov dword [rsp + 0x40], eax
mov eax, esi
sub eax, dword [rsp + 0x24]
neg edx
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x34], edx
nop
mov eax, ecx
lea rbx, [rbp + 0x200]
xor eax, dword [rsp + 0x60]
mov r10d, r12d
lea r13d, [rax - 1]
not eax
shr eax, 0x1f
shr r13d, 0x1f
and r13b, al
mov eax, ecx
xor eax, dword [rsp + 0x64]
neg r13b
lea r15d, [rax - 1]
not eax
shr eax, 0x1f
shr r15d, 0x1f
and r15b, al
neg r15b
movsx eax, r15b
movd xmm6, eax
movzx eax, r15b
punpcklbw xmm6, xmm6
not al
or al, r13b
punpcklwd xmm6, xmm6
movzx r12d, al
pshufd xmm6, xmm6, 0
nop
xor r11b, r11b
mov eax, edi
cmp edi, r14d
jae 0x140199e11
mov rcx, qword [rsp + 0x78]
jmp 0x140199e2a
mov ecx, r14d
add rcx, qword [rbp + 0x320]
cmp rax, rcx
jae 0x140199e2f
mov rcx, qword [rsp + 0x58]
mov eax, edi
sub eax, r14d
movzx r11d, byte [rax + rcx]
add edx, r10d
mov r9d, r10d
shr r9d, 0x1f
mov ecx, edx
shr ecx, 0x1f
movzx eax, r9b
xor al, r8b
xor cl, r8b
or cl, al
inc edi
xor cl, r9b
movzx eax, r13b
dec cl
movzx r8d, cl
movzx ecx, r9b
and r8d, eax
lea eax, [rdx - 1]
mov edx, dword [rsp + 0x40]
xor cl, dl
shr eax, 0x1f
xor al, dl
or al, cl
movzx ecx, r8b
xor al, r9b
not cl
dec al
and cl, r11b
and al, r13b
and r8b, 0x80
not al
or cl, r8b
and al, cl
and al, r12b
cmp r10d, dword [rsp + 0x68]
jb 0x140199eb6
mov ecx, r10d
movzx r8d, r15b
sub ecx, esi
add ecx, dword [rsp + 0x24]
movzx edx, byte [rbp + rcx + 0xb0]
and dl, r8b
not r8b
and al, r8b
or al, dl
mov r8d, dword [rsp + 0x2c]
inc r10d
mov edx, dword [rsp + 0x34]
mov byte [rbx], al
inc rbx
cmp r10d, esi
jb 0x140199e00
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x30]
call qword [rsp + gethostname]
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x30]
call qword [rsp + 0x48]
mov r13d, dword [rsp + 0x28]
xor r12d, r12d
mov edx, r12d
cmp r13d, 0x20
jb 0x140199f63
mov r8d, r13d
and r8d, 0xffffffe0
nop word [rax + rax]
mov eax, edx
movdqu xmm0, xmmword [rbp + rax + 0xc0]
movdqu xmm1, xmmword [rbp + rax + 0x200]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xc0], xmm1
lea eax, [rdx + 0x10]
add edx, 0x20
movdqu xmm0, xmmword [rbp + rax + 0xc0]
movdqu xmm1, xmmword [rbp + rax + 0x200]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xc0], xmm1
cmp edx, r8d
jb 0x140199f10
cmp edx, r13d
jae 0x140199f8c
mov r8d, r13d
mov ecx, edx
sub r8d, edx
movzx eax, byte [rbp + rcx + 0x200]
lea rcx, [rcx + 1]
and al, r15b
or byte [rbp + rcx + 0xbf], al
sub r8, 1
jne 0x140199f70
mov ecx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x2c]
inc ecx
mov edx, dword [rsp + 0x34]
mov dword [rsp + 0x30], ecx
cmp ecx, dword [rsp + 0x6c]
jbe 0x140199da0
movaps xmm6, xmmword [rsp + 0x390]
jmp 0x140199fb8
mov r13d, dword [rsp + 0x28]
lea rcx, [rbp - 0x60]
call fcn.1401b2770
mov rdx, qword [rbp - 0x78]
lea rcx, [rbp - 0x60]
xor r8d, r8d
mov rdx, qword [rdx]
call fcn.1401b21b0
test eax, eax
jle 0x14019a047
cmp byte [rbp + 0x338], 0
je 0x14019a07b
mov ebx, dword [rsp + 0x50]
lea rcx, [rbp + 0x100]
mov r8d, ebx
mov edx, 0x5c
call fcn.14027b2c0
mov r8d, dword [rbp + 0x330]
lea rcx, [rbp - 0x60]
mov rdx, qword [rbp - 0x80]
call fcn.1401b2410
test eax, eax
jle 0x14019a047
mov r8d, ebx
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x60]
call fcn.1401b2410
test eax, eax
jle 0x14019a047
mov r8d, r13d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.1401b2410
test eax, eax
jg 0x14019a10b
lea rcx, [rbp - 0x60]
call fcn.1401b2430
xor eax, eax
mov r13, qword [rsp + 0x3a8]
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.14012a2b0
add rsp, 0x3b0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movdqa xmm2, xmmword [0x1402c5ee0]
nop dword [rax]
nop word [rax + rax]
mov eax, r12d
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
lea eax, [r12 + 0x10]
add r12d, 0x20
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
cmp r12d, esi
jb 0x14019a090
mov r8d, esi
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x60]
call fcn.1401b2410
test eax, eax
jle 0x14019a047
mov r8d, r13d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.1401b2410
test eax, eax
jle 0x14019a047
mov rdx, qword [rbp - 0x70]
lea r8, [rsp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.1401b2090
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14019a12d
mov eax, dword [rsp + 0x70]
mov qword [rcx], rax
lea rcx, [rbp - 0x60]
call fcn.1401b2430
mov eax, 1
jmp 0x14019a052