Function at 0x18002aad0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov r15, rcx
mov r14d, 4
xor edi, edi
movabs r13, 0xd993efbb19cfe32d
mov r12d, dword [0x18010bb98]
cmp byte [0x18010a364], dil
je 0x18002ab9e
movdqa xmm6, xmmword [0x1800ebf60]
movdqa xmm7, xmmword [0x1800ec110]
mov rcx, qword gs:[0x58]
mov rcx, qword [rcx + r12*8]
mov eax, dword [r14 + rcx]
cmp dword [0x18010d1dc], eax
jg 0x18002b39a
lea rdx, [0x180105fd0]
cmp byte [0x180105ff1], dil
je 0x18002ab94
mov r8, rdi
nop word [rax + rax]
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rax, r13
shr rax, cl
xor byte [r8 + rdx], al
inc r8
cmp r8, 0x21
jb 0x18002ab70
mov byte [0x180105ff1], dil
mov ecx, 4
call fcn.18006a848
lea rdx, [rsp + 0x48]
mov rcx, r15
call fcn.18001e980
mov rsi, rax
cmp qword [rax + 0x18], 0x10
jb 0x18002abb8
mov rsi, qword [rax]
mov rcx, qword [rax + 0x10]
cmp rcx, 0xc
jb 0x18002ac32
lea r14, [rcx + rsi]
lea r8, [r14 - 0xb]
sub r8, rsi
mov edx, WSAGetLastError
mov rcx, rsi
call fcn.1800a06d0
mov rbx, rax
test rax, rax
je 0x18002ac2c
nop dword [rax]
nop word [rax + rax]
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.navapw32.exe
mov rcx, rbx
call fcn.18009fb20
test eax, eax
je 0x18002ad3d
inc rbx
lea r8, [r14 - 0xb]
sub r8, rbx
mov edx, WSAGetLastError
mov rcx, rbx
call fcn.1800a06d0
mov rbx, rax
test rax, rax
jne 0x18002abf0
mov r14d, 4
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x69]
cmp rdx, 0x10
jb 0x18002ac75
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ac70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b3e7
call fcn.18009d1f4
cmp rbx, 0xffffffffffffffff
je 0x18002ad4b
cmp byte [0x18010a364], dil
je 0x18002ad36
movdqa xmm6, xmmword [0x1800ec9d0]
movdqa xmm7, xmmword [0x1800ec010]
mov dword [rsp + 0x40], 0x37fdd05a
mov dword [rsp + 0x44], 0xd9f697de
mov rcx, qword gs:[0x58]
mov edx, r14d
mov rcx, qword [rcx + r12*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d1e4], eax
jg 0x18002b3ed
lea rdx, [0x1801060d0]
cmp byte [0x1801060f8], dil
je 0x18002ad2c
mov r10d, 1
sub r10, rdx
nop dword [rax]
nop dword [rax + rax]
lea r9, [rdi + rdx]
movzx ecx, dil
and cl, 7
shl cl, 3
mov rax, r13
shr rax, cl
xor byte [r9], al
lea ecx, [r9 + r10]
and cl, 7
shl cl, 3
mov r8, r13
shr r8, cl
xor byte [r9 + 1], r8b
add rdi, 2
cmp rdi, 0x28
jb 0x18002acf0
mov byte [0x1801060f8], 0
mov ecx, 4
call fcn.18006a848
xor al, al
jmp 0x18002b317
sub rbx, rsi
mov r14d, 4
jmp 0x18002ac39
lea rcx, [r15 + 0x28]
lea rdx, [rsp + 0x48]
call fcn.18001df90
cmp qword [rbp - 0x71], rdi
sete bl
mov rdx, qword [rbp - 0x69]
cmp rdx, 0x10
jb 0x18002ad9c
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002ad97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b446
call fcn.18009d1f4
test bl, bl
je 0x18002ae3e
cmp byte [0x18010a364], dil
je 0x18002ae3e
movdqa xmm6, xmmword [0x1800ec9d0]
movdqa xmm7, xmmword [0x1800ec2f0]
movdqa xmm8, xmmword [0x1800ec3a0]
mov dword [rbp - 9], 0x69ef9742
mov dword [rbp - 5], 0xbce08ac9
mov word [rbp - 1], 0x9743
mov rcx, qword gs:[0x58]
mov edx, r14d
mov rcx, qword [rcx + r12*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d1d8], eax
jg 0x18002b44c
lea rdx, [0x180105e70]
cmp byte [0x180105eab], dil
je 0x18002ae34
mov r8, rdi
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rax, r13
shr rax, cl
xor byte [r8 + rdx], al
inc r8
cmp r8, 0x3b
jb 0x18002ae10
mov byte [0x180105eab], dil
mov ecx, 2
call fcn.18006a848
lea rcx, [rbp - 0x39]
call fcn.18001002c
nop
mov rcx, qword [rax]
mov qword [rbp - 0x61], rcx
mov qword [rbp - 0x59], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x49], xmm0
lea rbx, [rax + 8]
mov r14, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x18002ae6d
mov rbx, qword [rbx]
movabs rax, 0x7fffffffffffffff
cmp r14, 0x10
jae 0x18002ae8e
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x41], reloc.WS2_32.dll_ntohs
jmp 0x18002aefe
mov rsi, r14
or rsi, 0xf
cmp rsi, rax
cmova rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x18002aed8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002b4b9
mov rcx, rax
call fcn.18009d1b8
mov rcx, rax
test rax, rax
je 0x18002b4bf
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18002aee7
test rcx, rcx
je 0x18002aee4
call fcn.18009d1b8
jmp 0x18002aee7
mov rax, rdi
mov qword [rbp - 0x59], rax
lea r8, [r14 + 1]
mov rdx, rbx
mov rcx, rax
call fcn.18009fc20
mov qword [rbp - 0x41], rsi
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x69], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x71], 0xa
movsd xmm0, qword [str.Config_aol]
movsd qword [rsp + 0x48], xmm0
movzx eax, word [0x1800eb298]
mov word [rbp - 0x79], ax
mov byte [rbp - 0x77], 0
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x61]
call fcn.18000d6f8
mov rsi, rax
mov rdx, qword [rbp - 0x69]
cmp rdx, 0x10
jb 0x18002af7c
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002af77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b4cb
call fcn.18009d1f4
mov qword [rbp - 0x71], rdi
mov qword [rbp - 0x69], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
mov rax, qword [rsi]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
add rsi, 8
mov r14, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x18002afb5
mov rsi, qword [rsi]
cmp r14, 0x10
jae 0x18002afce
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x40], reloc.WS2_32.dll_ntohs
jmp 0x18002b04a
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18002b022
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18002b4c5
mov rcx, rax
call fcn.18009d1b8
mov rcx, rax
test rax, rax
je 0x18002b4cb
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18002b031
test rcx, rcx
je 0x18002b02e
call fcn.18009d1b8
jmp 0x18002b031
mov rax, rdi
mov qword [rsp + 0x28], rax
lea r8, [r14 + 1]
mov rdx, rsi
mov rcx, rax
call fcn.18009fc20
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], r14
mov rdx, qword [rbp - 0x41]
cmp rdx, 0x10
jb 0x18002b08a
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b085
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b4d1
call fcn.18009d1f4
movdqa xmm0, xmmword [0x1800ebed0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
lea rdx, [rsp + 0x20]
mov rcx, r15
call fcn.18002b4f0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 0x10
jb 0x18002b0e6
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b0e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b4d7
call fcn.18009d1f4
movdqa xmm0, xmmword [0x1800ebed0]
movdqu xmmword [rsp + 0x38], xmm0
mov byte [rsp + 0x28], 0
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x18002b134
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b12f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b4dd
call fcn.18009d1f4
movzx eax, byte [r15 + 0x104]
test al, al
jne 0x18002b2f9
movdqa xmm0, xmmword [0x1800ebeb0]
movdqu xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [0x1800ebed0]
movdqu xmmword [rsp + 0x38], xmm1
mov byte [rsp + 0x28], al
mov ecx, 0x20
call fcn.18009d1b8
movdqa xmm0, xmmword [0x1800ebee0]
movdqu xmmword [rsp + 0x38], xmm0
movups xmm0, xmmword [str.SoftwareNetsetter_aol]
movups xmmword [rax], xmm0
mov ecx, dword [0x1800eb2b0]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x1800eb2b4]
mov word [rax + 0x14], cx
mov byte [rax + 0x16], 0
mov qword [rsp + 0x28], rax
lea r8, [0x1800ea574]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.18000e610
mov rdx, qword [rbp - 0x69]
cmp rdx, 0x10
jb 0x18002b1f6
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b1f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b4e3
call fcn.18009d1f4
nop
lea rdx, [rsp + 0x20]
mov rcx, r15
call fcn.18002b4f0
nop
mov rdx, qword [rsp + 0x40]
cmp rdx, 0x10
jb 0x18002b241
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b23c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002b4e9
call fcn.18009d1f4
movzx eax, byte [r15 + 0x104]
test al, al
jne 0x18002b2f9
cmp byte [0x18010a364], al
je 0x18002b2f9
movdqa xmm6, xmmword [0x1800ec080]
movdqa xmm7, xmmword [str.Yx]
movdqa xmm8, xmmword [0x1800ec760]
mov rcx, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rcx + r12*8]
mov eax, dword [rdx + rcx]
cmp dword [0x18010d1a0], eax
jg 0x18002b347
lea rdx, [0x180106220]
cmp byte [0x180106250], 0
je 0x18002b2ef
mov r10d, 1
sub r10, rdx
lea r8, [rdi + rdx]
movzx ecx, dil
and cl, 7
shl cl, 3
mov rax, r13
shr rax, cl
xor byte [r8], al
lea r9, [r8 + 1]
lea ecx, [r10 + r8]
and cl, 7
shl cl, 3
mov r8, r13
shr r8, cl
xor byte [r9], r8b
add rdi, 2
cmp rdi, 0x30
jb 0x18002b2b0
mov byte [0x180106250], 0
mov ecx, 4
call fcn.18006a848
movzx ecx, word [r15 + 0x100]
call qword [sym.imp.WS2_32.dll_htons]
mov word [r15 + 0x100], ax
movzx eax, byte [r15 + 0x104]
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [0x18010d1a0]
call fcn.18009d704
cmp dword [0x18010d1a0], 0xffffffff
jne 0x18002b297
mov byte [0x180106250], 1
movaps xmmword [0x180106220], xmm6
movaps xmmword [0x180106230], xmm7
movaps xmmword [0x180106240], xmm8
lea rcx, [0x1800cde10]
call fcn.18009d564
lea rcx, [0x18010d1a0]
call fcn.18009d6a4
jmp 0x18002b297
lea rcx, [0x18010d1dc]
call fcn.18009d704
cmp dword [0x18010d1dc], 0xffffffff
jne 0x18002ab52
mov word [0x180105ff0], 0x12d
movaps xmmword [0x180105fd0], xmm6
movaps xmmword [0x180105fe0], xmm7
lea rcx, [0x1800cde80]
call fcn.18009d564
lea rcx, [0x18010d1dc]
call fcn.18009d6a4
jmp 0x18002ab52
call fcn.1800a45b8
int3
lea rcx, [0x18010d1e4]
call fcn.18009d704
cmp dword [0x18010d1e4], 0xffffffff
jne 0x18002accb
mov byte [0x1801060f8], 1
movaps xmmword [0x1801060d0], xmm6
movaps xmmword [0x1801060e0], xmm7
movsd xmm0, qword [rsp + 0x40]
movsd qword [0x1801060f0], xmm0
lea rcx, [0x1800cde60]
call fcn.18009d564
lea rcx, [0x18010d1e4]
call fcn.18009d6a4
jmp 0x18002accb
call fcn.1800a45b8
int3
lea rcx, [0x18010d1d8]
call fcn.18009d704
cmp dword [0x18010d1d8], 0xffffffff
jne 0x18002adfd
mov word [0x180105eaa], 0x1cf
movaps xmmword [0x180105e70], xmm6
movaps xmmword [0x180105e80], xmm7
movaps xmmword [0x180105e90], xmm8
movsd xmm0, qword [rbp - 9]
movsd qword [0x180105ea0], xmm0
movzx eax, word [rbp - 1]
mov word [0x180105ea8], ax
lea rcx, [0x1800cde30]
call fcn.18009d564
lea rcx, [0x18010d1d8]
call fcn.18009d6a4
jmp 0x18002adfd
call fcn.180001df0
nop
call fcn.1800a45b8
nop
call fcn.180001df0
int3
call fcn.1800a45b8
nop
call fcn.1800a45b8
int3
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
nop
call fcn.1800a45b8
int3