Function at 0x14000cc08
Capabilities:
Encode data using xor
Get mac address on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1401567f8]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rbx, rcx
mov qword [rbp - 0x61], rcx
mov qword [rbp - 0x59], rcx
mov dword [rbp - 0x79], 1
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor r13d, r13d
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], setsockopt
mov byte [rcx], r13b
mov dword [rbp - 0x79], 1
mov dword [rbp - 0x41], r13d
lea rdx, [rbp - 0x41]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
mov eax, dword [rbp - 0x41]
test eax, eax
je 0x14000d023
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp - 1], xmm0
mov dword [rbp + 0xf], ecx
mov edi, eax
movdqu xmmword [rbp - 0x19], xmm0
mov esi, r13d
mov qword [rbp - 9], r13
mov r15d, r13d
test eax, eax
je 0x14000cce5
mov ecx, eax
cmp rax, 0x1000
jb 0x14000ccbb
call fcn.14003080c
jmp 0x14000ccc0
call fcn.1400b7b4c
mov r15, rax
mov r14, rax
mov qword [rbp - 0x19], rax
lea rsi, [rax + rdi]
mov qword [rbp - 9], rsi
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.1400ba120
mov qword [rbp - 0x11], rsi
jmp 0x14000cce9
mov r14, qword [rbp - 0x19]
lea rdx, [rbp - 0x41]
mov rcx, r14
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test r15, r15
je 0x14000cfee
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov qword [rbp - 0x69], rax
lea r11, [0x140160648]
mov edx, 4
movzx edi, byte [r15 + 0x19d]
movzx r12d, byte [r15 + 0x19c]
movzx r13d, byte [r15 + 0x19b]
movzx r8d, byte [r15 + 0x19a]
mov dword [rbp - 0x75], r8d
movzx r9d, byte [r15 + 0x199]
mov dword [rbp - 0x71], r9d
movzx r10d, byte [r15 + 0x198]
mov dword [rbp - 0x6d], r10d
movdqa xmm6, xmmword [0x14013e150]
mov dword [rbp - 0x29], 0x7d3b4b5e
mov dword [rbp - 0x25], 0xbba31dd8
mov eax, dword [rdx + rax]
cmp dword [0x1401605b4], eax
jle 0x14000cdd5
lea rcx, [0x1401605b4]
call fcn.1400b77a0
cmp dword [0x1401605b4], 0xffffffff
jne 0x14000cdc2
mov word [0x140160660], 0x17b
movups xmmword [0x140160648], xmm6
movsd xmm0, qword [rbp - 0x29]
movsd qword [0x140160658], xmm0
lea rcx, [0x1400fee8c]
call fcn.1400b7e90
lea rcx, [0x1401605b4]
call fcn.1400b7740
lea r11, [0x140160648]
mov r10d, dword [rbp - 0x6d]
mov r9d, dword [rbp - 0x71]
mov r8d, dword [rbp - 0x75]
cmp byte [0x140160661], 0
je 0x14000ce09
xor edx, edx
mov cl, dl
and cl, 7
shl cl, 3
movabs rax, 0xe3912dfd25097b7b
shr rax, cl
xor byte [rdx + r11], al
inc rdx
cmp rdx, 0x19
jb 0x14000cde0
mov byte [0x140160661], 0
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r8d
mov r8d, r10d
mov rdx, r11
lea rcx, [rbp - 1]
call fcn.140001cc0
lea rax, [rbp - 1]
or rdi, 0xffffffffffffffff
xor r13d, r13d
inc rdi
cmp byte [rax + rdi], r13b
jne 0x14000ce36
cmp rdi, qword [rbx + 0x18]
ja 0x14000ce6b
mov r12, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14000ce52
mov r12, qword [rbx]
mov qword [rbx + 0x10], rdi
mov r8, rdi
lea rdx, [rbp - 1]
mov rcx, r12
call fcn.1400b9a70
mov byte [r12 + rdi], r13b
jmp 0x14000ce7a
lea r9, [rbp - 1]
mov rdx, rdi
mov rcx, rbx
call fcn.14002a7c0
cmp qword [rbx + 0x10], r13
je 0x14000cf88
mov dword [rbp - 0x51], 0xef1f956d
mov dword [rbp - 0x4d], 0xeb53e395
mov dword [rbp - 0x49], 0xef1f956d
mov rax, qword [rbp - 0x69]
mov ecx, 4
mov eax, dword [rcx + rax]
cmp dword [0x140160be8], eax
jle 0x14000cef9
lea rcx, [0x140160be8]
call fcn.1400b77a0
cmp dword [0x140160be8], 0xffffffff
jne 0x14000cef9
mov word [0x140160c9c], 0x1a5
movsd xmm0, qword [rbp - 0x51]
movsd qword [0x140160c90], xmm0
mov eax, dword [rbp - 0x49]
mov dword [0x140160c98], eax
lea rcx, [0x1400fee74]
call fcn.1400b7e90
lea rcx, [0x140160be8]
call fcn.1400b7740
cmp byte [0x140160c9d], r13b
je 0x14000cf38
mov rdx, r13
lea rbx, [0x140160c90]
mov cl, dl
and cl, 7
shl cl, 3
movabs rax, 0xdb63d3a5df2fa55d
shr rax, cl
xor byte [rdx + rbx], al
inc rdx
cmp rdx, 0xd
jb 0x14000cf0c
mov rbx, qword [rbp - 0x61]
mov byte [0x140160c9d], r13b
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x21], r13
or r8, 0xffffffffffffffff
lea rax, [0x140160c90]
inc r8
cmp byte [rax + r8], r13b
jne 0x14000cf52
mov rdx, rax
lea rcx, [rbp - 0x39]
call fcn.14002aaf4
mov r12d, dword [rbp - 0x79]
or r12d, 2
mov dword [rbp - 0x79], r12d
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.1400291ec
test al, al
je 0x14000cf8c
mov dil, 1
jmp 0x14000cf8f
mov r12d, dword [rbp - 0x79]
mov dil, r13b
test r12b, 2
je 0x14000cfd8
and r12d, 0xfffffffd
mov dword [rbp - 0x79], r12d
mov rdx, qword [rbp - 0x21]
cmp rdx, 0x10
jb 0x14000cfd8
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cfd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d05e
call fcn.1400b7640
test dil, dil
jne 0x14000cfee
mov r15, qword [r15]
test r15, r15
je 0x14000cfee
mov rax, qword [rbp - 0x69]
jmp 0x14000cd0f
test r14, r14
je 0x14000d023
sub rsi, r14
mov rax, r14
cmp rsi, 0x1000
jb 0x14000d017
add rsi, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000d058
mov rdx, rsi
mov rcx, r14
call fcn.1400b7640
nop
mov rax, rbx
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400b7620
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400c9b5c
nop
call fcn.1400c9b5c
int3