Function at 0x18026dca0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
mov eax, 0x3b8
call fcn.1803a1670
sub rsp, rax
mov rax, qword [0x180496d00]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x320]
xor ebx, ebx
mov rdi, qword [rbp + 0x330]
mov r15, r8
mov qword [rsp + 0x60], rax
mov r14, rcx
mov rax, qword [rbp + 0x338]
mov esi, 0x40
mov qword [rbp - 0x70], rax
mov r13d, 8
mov qword [rsp + 0x38], r9
mov qword [rbp - 0x30], r8
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x78], Ordinal_41
mov byte [rsp + 0x20], 1
cmp rdi, 0x100000
jae 0x18026e699
lea rdx, [0x1803b90fc]
call fcn.18023b610
test eax, eax
je 0x18026dd76
lea rcx, [rbp - 0x20]
call fcn.180230760
test eax, eax
jle 0x18026e699
mov ecx, gethostbyaddr
mov byte [rsp + 0x20], bl
mov qword [rbp - 0x78], rcx
lea rax, [0x18026e6c0]
lea r15, [0x1802307a0]
mov r12d, reloc.WS2_32.dll_recv
jmp 0x18026de9f
lea rdx, str.SHA1
mov rcx, r14
call fcn.18023b610
test eax, eax
je 0x18026ddb3
lea rcx, [rbp - 0x20]
call fcn.180274480
test eax, eax
jle 0x18026e699
lea rax, [0x18026e740]
mov r12d, reloc.WS2_32.dll_sendto
lea r15, [0x1802744d0]
jmp 0x18026de9a
lea rdx, str.SHA2_224
mov rcx, r14
call fcn.18023b610
test eax, eax
je 0x18026ddf0
lea rcx, [rbp - 0x20]
call fcn.1802747d0
test eax, eax
jle 0x18026e699
lea rax, [0x18026e7d0]
mov r12d, Ordinal_32
lea r15, [0x180274c90]
jmp 0x18026de9a
lea rdx, str.SHA2_256
mov rcx, r14
call fcn.18023b610
test eax, eax
je 0x18026de2a
lea rcx, [rbp - 0x20]
call fcn.180274c30
test eax, eax
jle 0x18026e699
lea rax, [0x18026e7d0]
mov r12d, reloc.WLDAP32.dll_Ordinal_32
lea r15, [0x180274c90]
jmp 0x18026de9a
lea rdx, str.SHA2_384
mov rcx, r14
call fcn.18023b610
test eax, eax
je 0x18026de56
lea rcx, [rbp - 0x20]
call fcn.180274e70
test eax, eax
jle 0x18026e699
mov r12d, gethostbyaddr
jmp 0x18026de81
lea rdx, str.SHA2_512
mov rcx, r14
call fcn.18023b610
test eax, eax
je 0x18026e691
lea rcx, [rbp - 0x20]
call fcn.180275810
test eax, eax
jle 0x18026e699
mov r12, rsi
mov r13d, reloc.WS2_32.dll_recv
lea r15, [0x1802758a0]
mov esi, 0x80
lea rax, [0x18026e8b0]
mov ecx, Ordinal_41
movzx r10d, byte [rbp + 0x348]
mov r14d, reloc.WS2_32.dll_listen
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x68], r14
test r10b, r10b
je 0x18026dee1
mov r14, qword [rbp + 0x340]
mov r8d, 2
add r14, 0xb
add r14, rcx
mov qword [rsp + 0x68], r14
jmp 0x18026def4
lea rax, [rsi + 0xff]
xor edx, edx
add rax, r12
div rsi
lea r8, [rax + 1]
xor edx, edx
mov qword [rsp + 0x58], r8
dec rdi
mov rax, r14
sub rax, r12
add rax, r13
add rax, rsi
add rax, rdi
mov rdi, qword [rbp + 0x328]
div rsi
xor edx, edx
add rdi, r14
mov r9, rax
mov rax, rdi
div rsi
mov qword [rsp + 0x70], rdx
xor edx, edx
mov qword [rbp - 0x68], rax
lea rax, [rdi + r13]
div rsi
mov qword [rbp - 0x60], rax
xor eax, eax
mov ecx, eax
test r10b, r10b
setne cl
lea rdx, [rcx + r8]
mov rcx, r9
sub rcx, r8
cmp r9, rdx
jbe 0x18026df5e
mov rbx, rcx
imul rbx, rsi
cmp r9, rdx
cmovbe rcx, rax
lea rdi, [rdi*8]
mov qword [rbp - 0x80], rcx
test r10b, r10b
jne 0x18026e02f
mov r8, rsi
lea rcx, [rbp + 0x110]
xor edx, edx
lea rdi, [rdi + rsi*8]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp + 0x340]
cmp rax, 0x80
ja 0x18026e699
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x110]
mov r8, rax
call sub.VCRUNTIME140.dll_memcpy
movdqa xmm2, xmmword [str.6666666666666666crypto_bio_bio_lib.c]
xor eax, eax
nop dword [rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x110], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x120]
xorps xmm0, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm0
movdqu xmm0, xmmword [rbp + rax + 0x130]
xorps xmm0, xmm2
movdqu xmmword [rbp + rax + 0x130], xmm0
movdqu xmm0, xmmword [rbp + rax + 0x140]
xorps xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rsi
jb 0x18026dfc0
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x20]
call r15
mov rax, rdi
lea rcx, [rbp + 0xc0]
shr rax, 0x10
mov r15, rdi
mov qword [rsp + 0x28], rax
xor edx, edx
mov rax, rdi
shr r15, 0x18
shr rax, 8
mov qword [rsp + 0x50], rax
cmp byte [rsp + 0x20], dl
je 0x18026e092
lea r8, [r13 - 4]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x28]
mov byte [rbp + r13 + 0xbd], al
mov rax, qword [rsp + 0x50]
mov byte [rbp + r13 + 0xbe], al
mov byte [rbp + r13 + 0xbc], r15b
mov byte [rbp + r13 + 0xbf], dil
jmp 0x18026e0c4
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x28]
mov byte [rbp + r13 + 0xba], al
mov rax, qword [rsp + 0x50]
mov byte [rbp + r13 + 0xb9], al
mov byte [rbp + r13 + 0xbb], r15b
mov byte [rbp + r13 + 0xb8], dil
test rbx, rbx
je 0x18026e1f8
cmp byte [rbp + 0x348], 0
je 0x18026e175
cmp r14, rsi
jbe 0x18026e699
mov rdx, qword [rsp + 0x38]
lea rcx, [rbp - 0x20]
mov rdi, qword [rsp + 0x30]
mov r15, r14
sub r15, rsi
call rdi
mov rdx, qword [rsp + 0x38]
lea rcx, [rbp + 0x190]
add rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x190]
mov r8, rsi
add rcx, r15
sub r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call rdi
xor edx, edx
mov rax, rbx
div rsi
dec rax
cmp rax, 1
jbe 0x18026e1f8
mov rdi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x30]
sub rdi, r15
add rdi, rsi
lea r15, [rax - 1]
mov rdx, rdi
lea rcx, [rbp - 0x20]
call r14
add rdi, rsi
sub r15, 1
jne 0x18026e160
jmp 0x18026e1f3
mov rdi, qword [rsp + 0x38]
lea r8, [rsi - 0xd]
mov r15, qword [rsp + 0x60]
lea rcx, [rbp + 0x19d]
mov rdx, r15
mov eax, dword [rdi + 8]
movsd xmm0, qword [rdi]
mov dword [rbp + 0x198], eax
movzx eax, byte [rdi + 0xc]
mov byte [rbp + 0x19c], al
movsd qword [rbp + 0x190], xmm0
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call qword [rsp + gethostbyaddr]
xor edx, edx
mov rax, rbx
div rsi
cmp rax, 1
jbe 0x18026e1fd
mov r14, qword [rsp + 0x30]
lea rdi, [r15 - 0xd]
add rdi, rsi
lea r15, [rax - 1]
nop
mov rdx, rdi
lea rcx, [rbp - 0x20]
call r14
add rdi, rsi
sub r15, 1
jne 0x18026e1e0
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x38]
mov rcx, qword [rbp - 0x80]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rbp - 0x48], rax
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
cmp rcx, rax
ja 0x18026e503
mov r8, qword [rsp + 0x70]
mov rdx, r8
movaps xmmword [rsp + 0x3a0], xmm6
shr rdx, 0x3f
mov qword [rsp + 0x50], rdx
lea rax, [r8 + 1]
shr rax, 0x3f
mov qword [rsp + 0x58], rax
mov rax, rsi
sub rax, r13
mov qword [rbp - 0x58], rax
mov rax, r8
sub rax, rsi
add rax, r13
lea rax, [rbp + rax + 0xc0]
mov qword [rbp - 0x50], rax
nop word [rax + rax]
mov rax, rcx
xor r10d, r10d
xor rax, qword [rbp - 0x68]
lea r13, [rax - 1]
not rax
shr rax, 0x3f
shr r13, 0x3f
and r13b, al
mov rax, rcx
xor rax, qword [rbp - 0x60]
neg r13b
lea r15, [rax - 1]
not rax
shr rax, 0x3f
shr r15, 0x3f
and r15b, al
neg r15b
movsx eax, r15b
movzx r12d, r15b
not r12b
or r12b, r13b
movd xmm6, eax
punpcklbw xmm6, xmm6
punpcklwd xmm6, xmm6
pshufd xmm6, xmm6, 0
nop word [rax + rax]
xor r11b, r11b
cmp rbx, r14
jae 0x18026e2ef
movzx r11d, byte [rdi + rbx]
jmp 0x18026e30b
mov rax, qword [rbp + 0x330]
add rax, r14
cmp rbx, rax
jae 0x18026e30b
mov rax, qword [rsp + 0x60]
sub rax, r14
movzx r11d, byte [rax + rbx]
mov r14, qword [rsp + 0x68]
movzx eax, dl
mov rdi, r10
mov r9, r10
sub rdi, r8
inc rbx
mov rcx, rdi
mov r8, r10
shr rcx, 0x3f
xor cl, dl
shr r8, 0x3f
xor al, r8b
or cl, al
movzx eax, r13b
xor cl, r8b
dec cl
movzx ecx, cl
and ecx, eax
mov rax, qword [rsp + 0x70]
mov dword [rsp + 0x28], ecx
inc rax
mov edx, dword [rsp + 0x28]
sub r9, rax
shr r9, 0x3f
not ecx
xor r9b, byte [rsp + 0x58]
and dl, 0x80
mov dword [rsp + 0x28], ecx
movzx eax, r8b
xor al, byte [rsp + 0x58]
mov ecx, dword [rsp + 0x28]
or r9b, al
xor r9b, r8b
and cl, r11b
dec r9b
or cl, dl
and r9b, r13b
not r9b
and r9b, cl
and r9b, r12b
cmp r10, qword [rbp - 0x58]
jb 0x18026e3b9
mov rdx, qword [rbp - 0x50]
movzx eax, r15b
mov dword [rsp + 0x28], eax
not eax
mov ecx, dword [rsp + 0x28]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
and r9b, al
movzx edx, byte [rdi + rdx]
and dl, cl
or r9b, dl
mov r8, qword [rsp + 0x70]
lea rax, [rbp + 0x210]
mov rdx, qword [rsp + 0x50]
add rax, r8
inc r10
mov byte [rdi + rax], r9b
mov rdi, qword [rsp + 0x38]
cmp r10, rsi
jb 0x18026e2e0
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call qword [rsp + gethostbyaddr]
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call qword [rsp + 0x40]
mov r12, qword [rsp + 0x48]
xor r13d, r13d
mov eax, r13d
cmp r12, 0x40
jb 0x18026e4b1
mov rcx, r12
and rcx, 0xffffffffffffffc0
nop dword [rax]
movdqu xmm0, xmmword [rbp + rax + 0xd0]
movdqu xmm1, xmmword [rbp + rax + 0x210]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0xd0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xe0]
movdqu xmm1, xmmword [rbp + rax + 0x220]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0xe0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xf0]
movdqu xmm1, xmmword [rbp + rax + 0x230]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0xf0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x100]
movdqu xmm1, xmmword [rbp + rax + 0x240]
andps xmm1, xmm6
orps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
add rax, 0x40
cmp rax, rcx
jb 0x18026e420
cmp rax, r12
jae 0x18026e4da
nop word [rax + rax]
movzx ecx, byte [rbp + rax + 0x210]
and cl, r15b
or byte [rbp + rax + 0xd0], cl
inc rax
cmp rax, r12
jb 0x18026e4c0
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
inc rcx
mov r8, qword [rsp + 0x70]
mov qword [rbp - 0x80], rcx
cmp rcx, qword [rbp - 0x48]
jbe 0x18026e280
movaps xmm6, xmmword [rsp + 0x3a0]
jmp 0x18026e506
xor r13d, r13d
call fcn.180216a70
mov rbx, rax
test rax, rax
je 0x18026e684
mov rdx, qword [rbp - 0x40]
xor r8d, r8d
mov rcx, rax
call fcn.1802160b0
test eax, eax
jle 0x18026e684
cmp byte [rbp + 0x348], 0
je 0x18026e5ae
mov rdi, qword [rbp - 0x78]
lea rcx, [rbp + 0x110]
mov r8, rdi
mov edx, 0x5c
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbp + 0x340]
mov rcx, rbx
mov rdx, qword [rbp - 0x70]
call fcn.1802160f0
test eax, eax
jle 0x18026e684
mov r8, rdi
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1802160f0
test eax, eax
jle 0x18026e684
mov r8, r12
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1802160f0
test eax, eax
jg 0x18026e659
mov rcx, rbx
call fcn.1802169c0
mov eax, r13d
jmp 0x18026e69b
movdqa xmm2, xmmword [str.jjjjjjjjjjjjjjjjcryptogetenv.c]
mov rax, r13
nop dword [rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x110], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x120]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rbp + rax + 0x140], xmm1
add rax, 0x40
cmp rax, rsi
jb 0x18026e5c0
mov r8, rsi
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1802160f0
test eax, eax
jle 0x18026e684
mov r8, r12
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1802160f0
test eax, eax
jle 0x18026e684
mov rdx, qword [rbp - 0x38]
lea r8, [rsp + 0x78]
mov rcx, rbx
call fcn.180215b30
test eax, eax
je 0x18026e67e
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x18026e67e
mov eax, dword [rsp + 0x78]
mov qword [rcx], rax
mov r13d, 1
mov rcx, rbx
call fcn.1802169c0
mov eax, r13d
jmp 0x18026e69b
test r15, r15
je 0x18026e699
mov qword [r15], rbx
xor eax, eax
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.1803a0e80
add rsp, 0x3b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret