Function at 0x1401b7000
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push r12
push r15
mov eax, 0x68
call fcn.1401e62f0
sub rsp, rax
mov rax, qword [rcx + 0x180]
mov rbx, rcx
mov rcx, qword [rcx + 0x38]
mov rsi, r9
mov qword [rsp + 0x48], rax
add rcx, r9
movabs rax, 0xfffffffe0
mov r15, r8
mov r12, rdx
cmp rcx, rax
ja 0x1401b738e
cmp rcx, r9
jb 0x1401b738e
mov qword [rsp + 0x98], rbp
mov ebp, dword [rbx + 0x170]
mov qword [rsp + 0x50], r14
xor r14d, r14d
mov qword [rsp + 0x60], rdi
lea rdi, [rbx + 0x40]
mov qword [rbx + 0x38], rcx
mov dword [rsp + 0x90], ebp
cmp dword [rbx + 0x174], r14d
je 0x1401b70c5
test r9, r9
jne 0x1401b70a1
lea rdx, [rbx + 0x60]
mov rcx, rdi
call fcn.1401b7b00
xor eax, eax
mov dword [rbx + 0x174], r14d
jmp 0x1401b7371
movups xmm0, xmmword [rdi]
mov ebp, reloc.WS2_32.dll_recv
mov dword [rsp + 0x90], ebp
movups xmmword [rbx + 0x188], xmm0
mov qword [rdi], r14
mov qword [rbx + 0x48], r14
mov dword [rbx + 0x174], r14d
movzx eax, byte [rbx + 0xd]
lea r8, [rbx + 0x188]
mov qword [rsp + 0x58], r13
mov r14d, ebp
movzx r13d, byte [rbx + 0xc]
shl r13d, 8
or r13d, eax
movzx eax, byte [rbx + 0xe]
shl r13d, 8
or r13d, eax
movzx eax, byte [rbx + 0xf]
shl r13d, 8
or r13d, eax
and r14d, 0xf
mov dword [rsp + 0x30], r14d
je 0x1401b7167
test rsi, rsi
je 0x1401b7364
movzx ecx, byte [r14 + rbx + 0x10]
dec rsi
xor cl, byte [r12]
inc r12
mov byte [r15], cl
inc r15
mov eax, ebp
inc ebp
inc r14d
mov byte [rax + rbx + 0x188], cl
and r14d, 0xf
jne 0x1401b7105
lea rdi, [rbx + 0x40]
mov r9d, ebp
mov rcx, rdi
lea r8, [rbx + 0x188]
lea rdx, [rbx + 0x60]
call fcn.1401b7940
xor ebp, ebp
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x90], ebp
lea r8, [rbx + 0x188]
mov qword [rsp + 0x40], rdi
lea rax, [rbx + 0x60]
mov qword [rsp + 0x38], rax
cmp rsi, 0x10
jb 0x1401b71ae
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rdi
test ebp, ebp
je 0x1401b71ae
mov r9d, ebp
mov rdx, rax
mov rcx, rdi
call fcn.1401b7940
xor ebp, ebp
mov qword [rsp + 0x40], rdi
lea rax, [rbx + 0x60]
mov dword [rsp + 0x90], ebp
mov qword [rsp + 0x38], rax
mov r10, qword [rsp + 0xb0]
cmp rsi, 0xc00
jb 0x1401b7283
mov rbp, qword [rsp + 0x48]
mov qword [rsp + 0x38], rax
movabs rax, 0xaaaaaaaaaaaaaaab
mov r14, qword [rsp + 0x38]
mul rsi
mov qword [rsp + 0x40], rdi
mov rdi, rdx
shr rdi, 0xb
imul rax, rdi, 0xfffffffffffff400
add rsi, rax
mov qword [rsp + 0xa8], rsi
mov rsi, qword [rsp + 0x40]
mov r9, rbp
mov qword [rsp + 0x20], rbx
mov r8d, 0xc0
mov rdx, r15
mov rcx, r12
call r10
add r13d, 0xc0
mov r9d, 0xc00
mov eax, r13d
mov byte [rbx + 0xf], r13b
shr eax, 0x18
mov r8, r15
mov byte [rbx + 0xc], al
mov rdx, r14
mov eax, r13d
mov rcx, rsi
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r13d
shr eax, 8
mov byte [rbx + 0xe], al
call fcn.1401b7940
mov r10, qword [rsp + 0xb0]
add r15, 0xc00
add r12, 0xc00
sub rdi, 1
jne 0x1401b7202
mov rsi, qword [rsp + 0xa8]
mov ebp, dword [rsp + 0x90]
mov r14d, dword [rsp + 0x30]
mov rax, rsi
and rax, 0xfffffffffffffff0
mov qword [rsp + 0xa8], rax
je 0x1401b72f9
mov r9, qword [rsp + 0x48]
mov rdi, rax
shr rdi, 4
mov rdx, r15
mov r8, rdi
mov qword [rsp + 0x20], rbx
mov rcx, r12
call r10
mov rdx, qword [rsp + 0x38]
add r13d, edi
mov rdi, qword [rsp + 0xa8]
mov eax, r13d
mov rcx, qword [rsp + 0x40]
mov r9, rdi
shr eax, 0x18
mov r8, r15
mov byte [rbx + 0xc], al
add r12, rdi
mov eax, r13d
mov byte [rbx + 0xf], r13b
shr eax, 0x10
sub rsi, rdi
mov byte [rbx + 0xd], al
mov eax, r13d
shr eax, 8
mov byte [rbx + 0xe], al
call fcn.1401b7940
add r15, rdi
test rsi, rsi
je 0x1401b7364
mov r8, qword [rsp + 0x48]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call qword [rbx + 0x178]
inc r13d
mov eax, r13d
mov byte [rbx + 0xf], r13b
shr eax, 0x18
mov byte [rbx + 0xc], al
mov eax, r13d
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, r13d
shr eax, 8
mov byte [rbx + 0xe], al
nop dword [rax]
nop word [rax + rax]
mov eax, r14d
inc r14d
movzx ecx, byte [r12 + rax]
xor cl, byte [rbx + rax + 0x10]
mov byte [r15 + rax], cl
mov eax, ebp
inc ebp
mov byte [rax + rbx + 0x188], cl
sub rsi, 1
jne 0x1401b7340
mov r13, qword [rsp + 0x58]
xor eax, eax
mov dword [rbx + 0x170], ebp
mov rdi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x98]
mov r14, qword [rsp + 0x50]
add rsp, 0x68
pop r15
pop r12
pop rsi
pop rbx
ret
mov eax, 0xffffffff
add rsp, 0x68
pop r15
pop r12
pop rsi
pop rbx
ret