Function at 0x1401b7010
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
push r14
mov eax, 0x58
call fcn.140319d20
sub rsp, rax
mov rax, qword [rcx + 0x180]
mov rbx, rcx
mov qword [rsp + 0x30], rax
mov r14, r9
mov rax, qword [rcx + 0x188]
mov rsi, r8
mov rcx, qword [rcx + 0x38]
mov rdi, rdx
mov qword [rsp + 0x28], rax
add rcx, r9
movabs rax, 0xfffffffe0
cmp rcx, rax
ja 0x1401b7380
cmp rcx, r9
jb 0x1401b7380
mov qword [rsp + 0x50], r12
mov r12d, dword [rbx + 0x178]
mov qword [rsp + 0x40], r15
xor r15d, r15d
mov qword [rsp + 0x88], rbp
mov qword [rsp + 0x48], r13
lea r13, [rbx + 0x40]
mov qword [rbx + 0x38], rcx
mov dword [rsp + 0x80], r12d
cmp dword [rbx + 0x17c], r15d
je 0x1401b710b
test r9, r9
jne 0x1401b70e0
lea rdx, [rbx + 0x60]
mov rcx, r13
call qword [rbx + 0x170]
mov dword [rbx + 0x17c], r15d
mov r13, qword [rsp + 0x48]
xor eax, eax
mov rbp, qword [rsp + 0x88]
mov r12, qword [rsp + 0x50]
mov r15, qword [rsp + 0x40]
add rsp, 0x58
pop r14
pop rdi
pop rsi
pop rbx
ret
movups xmm0, xmmword [r13]
lea rax, [rbx + 0xc]
mov r12d, reloc.WS2_32.dll_recv
movups xmmword [rbx + 0x190], xmm0
mov qword [r13], r15
mov qword [rbx + 0x48], r15
mov ebp, dword [rax]
bswap ebp
mov dword [rbx + 0x17c], r15d
jmp 0x1401b7184
mov ebp, dword [rbx + 0xc]
lea rax, [rbx + 0xc]
mov r15d, r12d
lea r8, [rbx + 0x190]
and r15d, 0xf
bswap ebp
mov dword [rsp + 0x20], r15d
je 0x1401b7198
nop dword [rax]
test r14, r14
je 0x1401b7374
movzx ecx, byte [rdi]
dec r14
mov eax, r12d
inc rdi
inc r12d
mov byte [rax + rbx + 0x190], cl
xor cl, byte [r15 + rbx + 0x10]
mov byte [rsi], cl
inc rsi
inc r15d
and r15d, 0xf
jne 0x1401b7130
lea r13, [rbx + 0x40]
mov r9d, r12d
mov rcx, r13
lea r8, [rbx + 0x190]
lea rdx, [rbx + 0x60]
call qword [rbx + 0x168]
xor r12d, r12d
lea rax, [rbx + 0xc]
mov dword [rsp + 0x80], r12d
lea r8, [rbx + 0x190]
mov dword [rsp + 0x20], r15d
lea rcx, [rbx + 0x60]
cmp r14, 0x10
jb 0x1401b71c5
test r12d, r12d
je 0x1401b71c5
mov rdx, rcx
mov r9d, r12d
mov rcx, r13
call qword [rbx + 0x168]
xor r12d, r12d
lea rax, [rbx + 0xc]
mov dword [rsp + 0x80], r12d
cmp r14, 0xc00
jb 0x1401b728c
movabs rax, 0xaaaaaaaaaaaaaaab
mul r14
shr rdx, 0xb
imul rax, rdx, 0xfffffffffffff400
mov qword [rsp + 0x38], rdx
add r14, rax
mov qword [rsp + 0x98], r14
lea r14, [rbx + 0x40]
nop
mov r9d, 0xc00
lea rdx, [rbx + 0x60]
mov r8, rdi
mov rcx, r14
call qword [rbx + 0x168]
mov r14, qword [rsp + 0x30]
mov r13d, 0xc0
mov r8, qword [rsp + 0x28]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call r14
inc ebp
mov eax, ebp
bswap eax
mov dword [rbx + 0xc], eax
mov rax, qword [rbx + 0x10]
xor rax, qword [rdi]
mov qword [rsi], rax
mov rax, qword [rdi + 8]
add rdi, 0x10
xor rax, qword [rbx + 0x18]
mov qword [rsi + 8], rax
add rsi, 0x10
sub r13, 1
jne 0x1401b7221
sub qword [rsp + 0x38], 1
lea r14, [rbx + 0x40]
jne 0x1401b7200
mov r15d, dword [rsp + 0x20]
lea rax, [rbx + 0xc]
mov r12d, dword [rsp + 0x80]
mov qword [rsp + 0x38], r14
mov r13, qword [rsp + 0x38]
mov r14, qword [rsp + 0x98]
mov r9, r14
lea rcx, [rbx + 0x60]
and r9, 0xfffffffffffffff0
je 0x1401b7328
mov rdx, rcx
mov r8, rdi
mov rcx, r13
call qword [rbx + 0x168]
lea r13, [rbx + 0xc]
cmp r14, 0x10
jb 0x1401b732b
mov r13, r14
shr r13, 4
imul rax, r13, 0xfffffffffffffff0
add r14, rax
mov qword [rsp + 0x98], r14
mov r14, qword [rsp + 0x30]
mov r8, qword [rsp + 0x28]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call r14
inc ebp
mov eax, ebp
bswap eax
mov dword [rbx + 0xc], eax
mov rax, qword [rbx + 0x10]
xor rax, qword [rdi]
mov qword [rsi], rax
mov rax, qword [rdi + 8]
add rdi, 0x10
xor rax, qword [rbx + 0x18]
mov qword [rsi + 8], rax
add rsi, 0x10
sub r13, 1
jne 0x1401b72d1
mov r14, qword [rsp + 0x98]
lea r13, [rbx + 0xc]
mov r15d, dword [rsp + 0x20]
mov r12d, dword [rsp + 0x80]
jmp 0x1401b732b
mov r13, rax
test r14, r14
je 0x1401b7374
mov r8, qword [rsp + 0x28]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call qword [rsp + gethostbyaddr]
inc ebp
bswap ebp
mov dword [r13], ebp
nop dword [rax + rax]
mov edx, r15d
inc r15d
mov eax, r12d
inc r12d
movzx ecx, byte [rdx + rdi]
mov byte [rax + rbx + 0x190], cl
xor cl, byte [rdx + rbx + 0x10]
mov byte [rdx + rsi], cl
sub r14, 1
jne 0x1401b7350
mov dword [rbx + 0x178], r12d
jmp 0x1401b70bd
mov eax, 0xffffffff
add rsp, 0x58
pop r14
pop rdi
pop rsi
pop rbx
ret