Function at 0x180050b70
Capabilities:
Encode data using xor
Get number of processors

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
xor ebx, ebx
mov dword [rbp + 0x67], ebx
cmp byte [0x180210780], bl
je 0x180050bb2
mov rax, qword [0x180210788]
test rax, rax
je 0x180050bcb
cmp dword [rax + 0x14], ebx
jl 0x180050bcb
mov rax, qword [rax]
mov rcx, qword [rax]
mov rax, qword [rcx]
jmp 0x180050bce
mov rax, qword [0x180210790]
test rax, rax
je 0x180050bcb
cmp dword [rax + 0xc], ebx
jl 0x180050bcb
mov rax, qword [rax]
mov rax, qword [rax]
jmp 0x180050bce
mov rax, rbx
mov r14, qword [rax]
mov qword [rbp + 0x77], r14
mov dword [rbp + 0x6f], ebx
mov rsi, qword [rbp + 0x67]
mov r13, qword [rbp + 0x67]
mov rcx, qword [r14]
test rcx, rcx
je 0x180050ef7
mov rax, qword gs:[0x60]
mov rdx, qword [rax + 0x10]
movsxd rax, dword [rdx + 0x3c]
cmp rcx, rdx
jbe 0x180050ef7
mov eax, dword [rax + rdx + 0x50]
add rax, rdx
cmp rcx, rax
jae 0x180050ef7
cmp byte [rcx], 0xe9
jne 0x180050c48
movsxd r14, dword [rcx + 1]
add r14, 5
add r14, rcx
mov rax, qword gs:[0x60]
mov rdx, qword [rax + 0x10]
movsxd rax, dword [rdx + 0x3c]
cmp r14, rdx
jbe 0x180050c48
mov eax, dword [rax + rdx + 0x50]
add rax, rdx
cmp r14, rax
jb 0x180050c4b
mov r14, rcx
mov dword [rbp - 0x39], 0xf7
mov dword [rbp - 0x35], 0xffffffff
mov eax, dword [0x180210774]
mov dword [rbp - 0x31], eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x2d], xmm0
mov qword [rbp - 0x1d], 4
mov dword [rbp - 0x15], ebx
movdqu xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov ecx, 0x28
call fcn.1800b5540
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x51], rax
lea rdi, [rax + 0x28]
mov qword [rbp - 0x49], rdi
mov r8d, 0x28
lea rdx, [rbp - 0x39]
mov rcx, rax
call fcn.1800dd020
mov qword [rbp - 0x51], rdi
mov r15d, dword [rbp + 0x67]
or r15d, 1
mov dword [rbp + 0x67], r15d
mov r10, qword [rbp - 0x59]
sub rdi, r10
sar rdi, 2
mov r12d, 0x400
sub r12, rdi
je 0x180050e28
mov edx, ebx
mov r11, rbx
mov r9d, ebx
test rdi, rdi
je 0x180050d11
mov rax, rbx
nop dword [rax]
nop dword [rax + rax]
mov r8d, dword [r10 + rax*4]
lea eax, [rdx + r9]
movzx eax, byte [rax + r14]
cmp eax, r8d
je 0x180050d08
cmp r8d, 0xffffffff
jne 0x180050d5d
inc edx
mov eax, edx
cmp rax, rdi
jb 0x180050cf0
lea rax, [r11 + r14]
mov r14, qword [rbp + 0x77]
test rax, rax
je 0x180050e2c
mov rcx, qword [r14]
cmp byte [rcx], 0xe9
jne 0x180050d7a
movsxd rdi, dword [rcx + 1]
add rdi, 5
add rdi, rcx
mov rax, qword gs:[0x60]
mov rdx, qword [rax + 0x10]
movsxd rax, dword [rdx + 0x3c]
cmp rdi, rdx
jbe 0x180050d76
mov eax, dword [rax + rdx + 0x50]
add rax, rdx
cmp rdi, rax
jae 0x180050d76
mov r15d, dword [rbp + 0x67]
jmp 0x180050d7d
inc r9d
inc r11
movsxd rax, r9d
cmp rax, r12
jae 0x180050e28
mov edx, ebx
jmp 0x180050ce1
mov r15d, dword [rbp + 0x67]
mov rdi, rcx
mov dword [rbp - 0x11], 0xf7
mov dword [rbp - 0xd], 0xffffffff
mov eax, dword [0x180210774]
mov dword [rbp - 9], eax
xorps xmm0, xmm0
movdqu xmmword [rbp - 5], xmm0
mov dword [rbp + 0xb], ebx
mov qword [rbp + 0xf], 0x40
mov ecx, 0x28
call fcn.1800b5540
mov rsi, rax
lea r13, [rax + 0x28]
mov r8d, 0x28
lea rdx, [rbp - 0x11]
mov rcx, rax
call fcn.1800dd020
or r15d, 2
mov dword [rbp + 0x67], r15d
mov r10, rbx
mov r9d, ebx
mov eax, ebx
mov rcx, rbx
nop dword [rax]
mov r8d, dword [rsi + rcx*4]
lea ecx, [rax + r9]
movzx ecx, byte [rcx + rdi]
cmp ecx, r8d
je 0x180050df7
cmp r8d, 0xffffffff
jne 0x180050e13
inc eax
mov ecx, eax
cmp rcx, 0xa
jb 0x180050de0
lea rax, [r10 + rdi]
test rax, rax
je 0x180050e22
mov dil, 1
mov r10, qword [rbp - 0x59]
jmp 0x180050e2f
inc r9d
inc r10
cmp r9d, 0x3f6
jb 0x180050dd8
mov r10, qword [rbp - 0x59]
jmp 0x180050e2c
mov r14, qword [rbp + 0x77]
xor dil, dil
test r15b, 2
je 0x180050e88
and r15d, 0xfffffffd
mov dword [rbp + 0x67], r15d
test rsi, rsi
je 0x180050e88
sub r13, rsi
sar r13, 2
lea rdx, [r13*4]
cmp rdx, 0x1000
jb 0x180050e76
add rdx, 0x27
mov rcx, qword [rsi - 8]
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x1800511c4
mov rsi, rcx
mov rcx, rsi
call fcn.1800b5538
mov rsi, rbx
mov r13, rbx
mov r10, qword [rbp - 0x59]
test r15b, 1
je 0x180050ed3
and r15d, 0xfffffffe
mov dword [rbp + 0x67], r15d
test r10, r10
je 0x180050ed3
mov rdx, qword [rbp - 0x49]
sub rdx, r10
and rdx, 0xfffffffffffffffc
mov rax, r10
cmp rdx, 0x1000
jb 0x180050ecb
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800511be
mov rcx, r10
call fcn.1800b5538
test dil, dil
jne 0x180050fc5
mov eax, dword [rbp + 0x6f]
inc eax
mov dword [rbp + 0x6f], eax
add r14, 8
mov qword [rbp + 0x77], r14
cmp eax, 0x150
jl 0x180050be0
movups xmm0, xmmword [str.sPWPED__]
movaps xmmword [rbp - 0x59], xmm0
movsd xmm0, qword [0x1800ee200]
movsd qword [rbp - 0x49], xmm0
mov eax, dword [0x1800ee208]
mov dword [rbp - 0x41], eax
lea rcx, [rbp - 0x59]
call fcn.180057b70
mov r9, rax
test rax, rax
je 0x180050f9f
mov r8d, ebx
mov r10, rbx
nop
movsxd rdx, r8d
add rdx, r9
cmp byte [rdx], 0xc3
jne 0x180050f66
mov rcx, rdx
and ecx, 0xf
mov rax, rdx
sub rax, rcx
cmp byte [rax + 0x10], 0x40
jne 0x180050f66
movzx ecx, byte [rdx - 1]
lea eax, [rcx - 0x58]
cmp al, 7
jbe 0x180050fd5
cmp byte [rdx - 2], 0x41
jne 0x180050f66
sub cl, 0x58
cmp cl, 7
jbe 0x180050fd5
movsxd rcx, r8d
add rcx, r9
test cl, 0xf
jne 0x180050f90
cmp byte [r10 + r9], 0x40
jne 0x180050f90
movzx eax, byte [r9 + r10 + 1]
sub al, 0x50
cmp al, 7
ja 0x180050f90
movzx eax, byte [r9 + r10 + 2]
sub al, 0x50
cmp al, 7
jbe 0x180050fec
inc r8d
inc r10
cmp r8d, 0xffff
jl 0x180050f30
mov r8, rbx
cmp byte [0x180210780], 0
je 0x180051002
mov rax, qword [0x180210788]
test rax, rax
je 0x180051027
cmp dword [rax + 0x14], 0
jge 0x180050ff4
mov r10, rbx
mov r10, qword [rbx]
jmp 0x18005102f
movsxd rax, dword [rbp + 0x6f]
mov qword [0x180210b90], rax
jmp 0x1800511aa
movsxd r8, r8d
add r8, r9
mov rax, r8
and eax, 0xf
je 0x180050fa2
sub r8, rax
add r8, 0x10
jmp 0x180050fa2
movsxd r8, r8d
add r8, r9
jmp 0x180050fa2
mov rax, qword [rax]
mov rcx, qword [rax]
mov r10, qword [rcx]
mov r10, qword [r10]
jmp 0x18005102f
mov rax, qword [0x180210790]
test rax, rax
je 0x180051027
cmp dword [rax + 0xc], 0
jge 0x18005101c
mov r10, rbx
mov r10, qword [rbx]
jmp 0x18005102f
mov rax, qword [rax]
mov r10, qword [rax]
mov r10, qword [r10]
jmp 0x18005102f
mov r1pe_dos_header, qword [0]
mov eax, dword [0x1800ee7f8]
mov dword [rbp - 0x61], eax
movsd xmm0, qword [str.bA_VSDKLRI_]
movzx eax, byte [0x1800ee7fc]
movsd qword [rbp - 0x69], xmm0
mov byte [rbp - 0x5d], al
cmp dword [0x180111088], 2
jl 0x18005115c
movdqa xmm4, xmmword [0x1800fde60]
movdqa xmm2, xmmword [0x1800fdbc0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1800fdc20]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fdd30]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1800fdd60]
movd xmm0, dword [str.bA_VSDKLRI_]
xorps xmm2, xmm0
movd dword [rbp - 0x69], xmm2
movdqa xmm3, xmmword [0x1800fdbe0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1800fdc20]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800fdd30]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1800fdd60]
movd xmm0, dword [rbp - 0x65]
xorps xmm2, xmm0
movd dword [rbp - 0x65], xmm2
mov ebx, 8
movsxd rax, ebx
lea r9, [rbp - 0x69]
add r9, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, bl
sub al, cl
add al, 0x32
xor byte [r9], al
inc ebx
lea r9, [r9 + 1]
cmp ebx, 0xd
jl 0x180051170
mov rdx, r10
lea rcx, [rbp - 0x69]
call fcn.18004e6a0
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800bc39c
nop
call fcn.1800bc39c
nop
int3