Function at 0x1401b6400
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rdi
push r14
push r15
mov eax, 0x68
call fcn.1401e62f0
sub rsp, rax
mov rax, qword [rcx + 0x178]
mov rbx, rcx
mov qword [rsp + 0x30], rax
mov r14, r9
mov rax, qword [rcx + 0x180]
mov r15, r8
mov rcx, qword [rcx + 0x38]
mov rdi, rdx
mov qword [rsp + 0x28], rax
add rcx, r9
movabs rax, 0xfffffffe0
cmp rcx, rax
ja 0x1401b67ef
cmp rcx, r9
jb 0x1401b67ef
mov qword [rsp + 0x98], rbp
mov ebp, dword [rbx + 0x170]
mov qword [rsp + 0x60], rsi
xor esi, esi
mov qword [rsp + 0x58], r12
lea r12, [rbx + 0x40]
mov qword [rbx + 0x38], rcx
mov dword [rsp + 0x90], ebp
cmp dword [rbx + 0x174], esi
je 0x1401b64d0
test r9, r9
jne 0x1401b64aa
lea rdx, [rbx + 0x60]
mov rcx, r12
call fcn.1401b7b00
xor eax, eax
mov dword [rbx + 0x174], esi
jmp 0x1401b67d2
movups xmm0, xmmword [r12]
mov ebp, reloc.WS2_32.dll_recv
mov dword [rsp + 0x90], ebp
movups xmmword [rbx + 0x188], xmm0
mov qword [r12], rsi
mov qword [rbx + 0x48], rsi
mov dword [rbx + 0x174], esi
movzx eax, byte [rbx + 0xd]
lea r8, [rbx + 0x188]
movzx esi, byte [rbx + 0xc]
shl esi, 8
or esi, eax
mov qword [rsp + 0x50], r13
movzx eax, byte [rbx + 0xe]
mov r13d, ebp
shl esi, 8
or esi, eax
movzx eax, byte [rbx + 0xf]
shl esi, 8
or esi, eax
and r13d, 0xf
mov dword [rsp + 0x20], r13d
je 0x1401b6570
nop dword [rax]
test r14, r14
je 0x1401b67c5
movzx ecx, byte [rdi]
dec r14
mov eax, ebp
inc rdi
inc ebp
mov byte [rax + rbx + 0x188], cl
xor cl, byte [r13 + rbx + 0x10]
mov byte [r15], cl
inc r15
inc r13d
and r13d, 0xf
jne 0x1401b6510
lea r12, [rbx + 0x40]
mov r9d, ebp
mov rcx, r12
lea r8, [rbx + 0x188]
lea rdx, [rbx + 0x60]
call fcn.1401b7940
xor ebp, ebp
mov dword [rsp + 0x20], r13d
mov dword [rsp + 0x90], ebp
lea r8, [rbx + 0x188]
lea rax, [rbx + 0x60]
cmp r14, 0x10
jb 0x1401b6595
test ebp, ebp
je 0x1401b6595
mov r9d, ebp
mov rdx, rax
mov rcx, r12
call fcn.1401b7940
xor ebp, ebp
mov dword [rsp + 0x90], ebp
cmp r14, 0xc00
jb 0x1401b6664
movabs rax, 0xaaaaaaaaaaaaaaab
lea r13, [rbx + 0x40]
mul r14
shr rdx, 0xb
imul rax, rdx, 0xfffffffffffff400
mov qword [rsp + 0x48], rdx
add r14, rax
nop word [rax + rax]
mov r9d, 0xc00
lea rdx, [rbx + 0x60]
mov r8, rdi
mov rcx, r13
call fcn.1401b7940
mov r12d, 0xc0
nop dword [rax + rax]
mov r8, qword [rsp + 0x28]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call qword [rsp + gethostbyaddr]
inc esi
mov byte [rbx + 0xf], sil
mov eax, esi
shr eax, 0x18
mov byte [rbx + 0xc], al
mov eax, esi
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, esi
shr eax, 8
mov byte [rbx + 0xe], al
mov rax, qword [rdi]
xor rax, qword [rbx + 0x10]
mov qword [r15], rax
mov rax, qword [rdi + 8]
add rdi, 0x10
xor rax, qword [rbx + 0x18]
mov qword [r15 + 8], rax
add r15, 0x10
sub r12, 1
jne 0x1401b65f0
sub qword [rsp + 0x48], 1
lea r13, [rbx + 0x40]
jne 0x1401b65d0
mov ebp, dword [rsp + 0x90]
mov qword [rsp + 0x48], r13
mov r12, qword [rsp + 0x48]
mov r13d, dword [rsp + 0x20]
mov r9, r14
lea r8, [rbx + 0xf]
mov qword [rsp + 0x48], r8
lea rdx, [rbx + 0xe]
mov qword [rsp + 0x40], rdx
lea rcx, [rbx + 0xd]
mov qword [rsp + 0x38], rcx
lea r10, [rbx + 0x60]
lea rax, [rbx + 0xc]
and r9, 0xfffffffffffffff0
je 0x1401b675f
mov r8, rdi
mov rdx, r10
mov rcx, r12
call fcn.1401b7940
lea rax, [rbx + 0xd]
mov qword [rsp + 0x38], rax
lea rax, [rbx + 0xe]
mov qword [rsp + 0x40], rax
lea rax, [rbx + 0xf]
mov qword [rsp + 0x48], rax
lea r12, [rbx + 0xc]
cmp r14, 0x10
jb 0x1401b6762
mov r12, r14
shr r12, 4
imul rax, r12, 0xfffffffffffffff0
add r14, rax
nop dword [rax]
mov r8, qword [rsp + 0x28]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call qword [rsp + gethostbyaddr]
inc esi
mov byte [rbx + 0xf], sil
mov eax, esi
shr eax, 0x18
mov byte [rbx + 0xc], al
mov eax, esi
shr eax, 0x10
mov byte [rbx + 0xd], al
mov eax, esi
shr eax, 8
mov byte [rbx + 0xe], al
mov rax, qword [rdi]
xor rax, qword [rbx + 0x10]
mov qword [r15], rax
mov rax, qword [rdi + 8]
add rdi, 0x10
xor rax, qword [rbx + 0x18]
mov qword [r15 + 8], rax
add r15, 0x10
sub r12, 1
jne 0x1401b66e0
mov ebp, dword [rsp + 0x90]
lea rax, [rbx + 0xd]
mov r13d, dword [rsp + 0x20]
lea r12, [rbx + 0xc]
mov qword [rsp + 0x38], rax
lea rax, [rbx + 0xe]
mov qword [rsp + 0x40], rax
lea rax, [rbx + 0xf]
mov qword [rsp + 0x48], rax
jmp 0x1401b6762
mov r12, rax
test r14, r14
je 0x1401b67c5
mov r8, qword [rsp + 0x28]
lea rdx, [rbx + 0x10]
mov rcx, rbx
call qword [rsp + gethostbyaddr]
mov rcx, qword [rsp + 0x38]
inc esi
mov eax, esi
shr eax, 0x18
mov byte [r12], al
mov eax, esi
shr eax, 0x10
mov byte [rcx], al
mov eax, esi
mov rcx, qword [rsp + 0x40]
shr eax, 8
mov byte [rcx], al
mov rax, qword [rsp + 0x48]
mov byte [rax], sil
mov edx, r13d
inc r13d
mov eax, ebp
inc ebp
movzx ecx, byte [rdx + rdi]
mov byte [rax + rbx + 0x188], cl
xor cl, byte [rbx + rdx + 0x10]
mov byte [r15 + rdx], cl
sub r14, 1
jne 0x1401b67a2
mov r13, qword [rsp + 0x50]
xor eax, eax
mov dword [rbx + 0x170], ebp
mov r12, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x60]
add rsp, 0x68
pop r15
pop r14
pop rdi
pop rbx
ret
mov eax, 0xffffffff
add rsp, 0x68
pop r15
pop r14
pop rdi
pop rbx
ret