Function at 0x140081c80
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x280
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140526598]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov r13, rcx
lea rbx, [0x1405272c8]
xor r15d, r15d
lea edi, [r15 + 0x4c]
mov r11d, 0xffff0000
mov r8d, 1
movabs rsi, 0x112e0be826d694b3
mov rax, qword [0x1405272c8]
test rax, rax
je 0x140082507
movzx eax, byte [0x14052cdd8]
test al, al
setne al
test al, al
je 0x140081dea
mov qword [rsp + 0x48], socket
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x48], socket
mov qword [rsp + 0x48], 0x1312d00
nop dword [rax + rax]
call fcn.14034176c
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x48], rax
imul rcx, rax, 0x64
mov qword [rsp + 0x48], rcx
add rcx, 0x1312d00
mov rax, rsi
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x60], rdx
imul rax, rdx, 0x3b9aca00
mov qword [rsp + 0x48], rax
sub rcx, rax
mov qword [rsp + 0x48], rcx
mov dword [rsp + 0x68], ecx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xc0], xmm0
lea rcx, [rbp + 0xc0]
call fcn.140341e78
movzx eax, byte [0x14052cdd8]
test al, al
setne al
test al, al
je 0x140081dc6
mov rax, qword [0x1405272c8]
test rax, rax
jne 0x140081d30
mov rax, qword [0x1405272c8]
test rax, rax
je 0x140082507
mov rcx, r13
call fcn.1400829c0
mov r11d, 0xffff0000
mov r8d, 1
mov r14b, 1
mov byte [rsp + 0x50], r14b
xor eax, eax
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], rax
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x118], rax
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], rax
nop dword [rax]
mov rcx, qword [r13 + 0x15f0]
mov rax, qword [0x1405272c8]
cmp rax, rcx
jne 0x1400824f5
lea r12, [r13 + 0x118]
movzx eax, byte [r12 + 0x14e0]
imul rcx, rax, 0x268
lea rsi, [r12 + 0xff0]
add rsi, rcx
mov qword [rsp + 0x48], rsi
movzx ecx, byte [r13 + 0xca]
mov rdx, r8
shl rdx, cl
movzx ecx, byte [rsi + 2]
mov rax, r8
shl rax, cl
cmp rax, rdx
jne 0x1400824f5
movzx r9d, byte [r12 + 0x14e0]
imul r10, r9, 0x268
mov r8d, dword [r10 + r12 + 0xff0]
mov eax, r8d
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r11d
and ecx, r8d
cmp ecx, 0x6b000000
jne 0x140081ecf
mov edx, 0x20
jmp 0x140081ede
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rdi
imul rax, r9, 0x7f8
add rax, r12
mov ebx, dword [rax + rdx]
mov dword [rbp + 0xd0], ebx
mov r11, qword [r10 + r12 + 0x1010]
mov eax, r8d
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
mov r10d, 0xffff0000
cmove ecx, r10d
and ecx, r8d
cmp ecx, 0x6b000000
jne 0x140081f27
mov edx, 0x20
jmp 0x140081f36
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rdi
imul rcx, r9, 0x7f8
add rcx, r11
add rcx, r12
mov eax, dword [rcx + rdx]
mov dword [rbp + 0xd4], eax
mov eax, r8d
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, r8d
cmp ecx, 0x6b000000
jne 0x140081f74
mov edx, 0x20
jmp 0x140081f83
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rdi
imul rcx, r9, 0x3fc
add rcx, r11
lea rax, [r12 + rcx*2]
mov ecx, dword [rax + rdx]
mov dword [rbp + 0xd8], ecx
mov eax, r8d
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, r8d
cmp ecx, 0x6b000000
jne 0x140081fc2
mov edx, 0x20
jmp 0x140081fd1
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rdi
imul rcx, r9, 0x2a8
add rcx, r11
lea rax, [r12 + rcx*2]
add rcx, rax
mov eax, dword [rcx + rdx]
mov dword [rbp + 0xdc], eax
imul rcx, r9, 0x268
mov r8, qword [rcx + r12 + 0x1010]
imul rcx, r9, 0x268
mov edx, dword [rcx + r12 + 0xff0]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x6b000000
jne 0x14008202f
mov edx, 0x20
jmp 0x14008203e
mov edx, 0x27
cmp ecx, 0x6c000000
cmove rdx, rdi
imul rcx, r9, 0x1fe
add rcx, r8
lea rax, [r12 + rcx*4]
mov ecx, dword [rax + rdx]
mov dword [rbp + 0xe0], ecx
mov eax, dword [r13 + 0x1628]
test eax, eax
je 0x14008208d
cmp ebx, eax
jae 0x140082502
cmp qword [r13 + 0xe0], 1
jne 0x14008208d
movzx eax, byte [r12 + 0x14e0]
imul rcx, rax, 0x7f8
mov rax, qword [0x14053aae0]
xor qword [rcx + r12], rax
mov byte [rsp + 0x51], 1
movzx eax, byte [r12 + 0x14e0]
imul rcx, rax, 0x268
mov edx, dword [rcx + r12 + 0xff0]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x6b000000
jne 0x1400820d1
mov r9d, 0x20
jmp 0x1400820e1
mov r9d, 0x27
cmp ecx, 0x6c000000
cmove r9, rdi
movzx eax, byte [r12 + 0x14e0]
imul rcx, rax, 0x268
mov edx, dword [rcx + r12 + 0xff0]
mov eax, edx
and eax, 0xff000000
mov r8d, 0xff000000
cmp eax, 0x63000000
cmove r8d, r10d
and r8d, edx
mov ecx, 4
cmp r8d, 0x6b000000
mov eax, 8
cmove ecx, eax
movzx eax, byte [r12 + 0x14e0]
imul rdi, rax, 0x7f8
lea rax, [r12 + rcx]
add rdi, rax
add rdi, r9
mov edx, dword [rsi]
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x72000000
jne 0x140082316
test r14b, r14b
je 0x1400821da
mov byte [rsp + 0x50], 0
cmp byte [rsi + 0x261], 0
je 0x14008219a
movzx eax, byte [r12 + 0x14e0]
imul rdx, rax, 0x7f8
add rdx, r12
mov r9, rdi
mov r8, qword [rsi + 0x20]
mov rcx, rsi
call fcn.14003cdc0
mov rbx, qword [r13 + 0x1600]
movzx eax, byte [r12 + 0x14e0]
imul r8, rax, 0x7f8
add r8, r12
mov r9, qword [rsi + 0x20]
mov edx, 0x40
lea rcx, [rbp + 0xf0]
call qword [0x1405272e8]
mov rax, qword [rbx]
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call qword [rax + 0x30]
mov edx, 0x8000
cmp dword [r13 + 0x1628], 0
mov eax, 1
cmovne edx, eax
mov rcx, r12
call fcn.140085040
test al, al
je 0x1400824cb
cmp byte [rsi + 0x261], 0
je 0x140082255
movups xmm0, xmmword [rdi]
movaps xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rbp + 0x140], xmm1
movups xmm0, xmmword [rdi + 0x20]
movaps xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rdi + 0x30]
movaps xmmword [rbp + 0x160], xmm1
movzx eax, byte [r12 + 0x14e0]
imul rdx, rax, 0x7f8
add rdx, r12
mov r9, rdi
mov r8, qword [rsi + 0x20]
mov rcx, rsi
call fcn.14003cdc0
mov r15, qword [rsi + 0x20]
movzx eax, byte [r12 + 0x14e0]
mov byte [rsp + 0x40], al
mov rbx, qword [r13 + 0x1600]
mov dword [rsp + 0x58], 0x9fc0
ldmxcsr dword [rsp + 0x58]
xor edi, edi
cmp dword [0x14053b624], 1
je 0x1400822c9
lea r14, [rbx + 0x980]
nop dword [rax]
mov rax, qword [rbx]
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call qword [rax + gethostname]
mov r9d, 0x100
mov r8, r14
mov edx, 0x40
lea rcx, [rbp + 0xf0]
call qword [0x1405272e8]
inc edi
mov eax, dword [0x14053b624]
dec eax
cmp edi, eax
jb 0x140082290
mov rax, qword [rbx]
lea rdx, [rbp + 0xf0]
mov rcx, rbx
call qword [rax + gethostname]
movzx eax, byte [rsp + 0x40]
imul r8, rax, 0x7f8
add r8, r12
mov r9, r15
mov edx, 0x40
lea rcx, [rbp + 0xf0]
call qword [0x1405272e8]
mov rax, qword [rbx]
lea rdx, [r13 + 0x28]
lea r8, [rbp + 0xf0]
mov rcx, rbx
call qword [rax + 0x18]
jmp 0x1400823b4
mov eax, edx
and eax, 0xff000000
mov ecx, 0xff000000
cmp eax, 0x63000000
cmove ecx, r10d
and ecx, edx
cmp ecx, 0x6c000000
je 0x14008238a
mov r14, qword [rsi + 0x78]
mov r15, qword [rsi + 0x20]
movzx eax, byte [r12 + 0x14e0]
imul rsi, rax, 0x7f8
add rsi, r12
mov r8d, dword [r13 + 0xcc]
mov edx, dword [r13 + 0xd4]
mov rcx, qword [rsp + 0x48]
call fcn.1400cd160
mov qword [rsp + 0x20], r14
lea r9, [r13 + 0xe8]
lea r8, [r13 + 0x28]
mov rdx, r15
mov rcx, rsi
call rax
mov rsi, qword [rsp + 0x48]
xor r15d, r15d
jmp 0x14008238f
mov byte [rsp + 0x51], 0
mov edx, 0x8000
cmp dword [r13 + 0x1628], 0
mov eax, 1
cmovne edx, eax
mov rcx, r12
call fcn.140085040
test al, al
je 0x1400824cb
xor r15d, r15d
cmp byte [rsp + 0x51], r15b
je 0x140082486
mov ebx, r15d
lea rdi, [r13 + 0x28]
nop dword [rax]
mov rcx, qword [rdi + 0x18]
mov eax, dword [r13 + 0x1628]
test eax, eax
je 0x140082413
cmp dword [rbp + rbx*4 + 0xd0], eax
jae 0x140082470
prefetchw byte [0x14053aae0]
mov rax, qword [0x14053aae0]
nop word [rax + rax]
mov rdx, rax
xor rdx, rcx
lock cmpxchg qword [0x14053aae0], rdx
jne 0x140082400
jmp 0x140082470
cmp rcx, qword [rsi + 0x80]
jae 0x140082470
lea rax, [rbp + 0x130]
cmp byte [rsi + 0x261], 0
cmove rax, r15
mov r8d, dword [rbp + rbx*4 + 0xd0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9, rdi
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.1400b6f50
nop
mov rcx, rax
call fcn.1400b81f0
nop
mov rcx, qword [rbp - 0x18]
call fcn.140343460
mov rcx, qword [rbp - 0x28]
call fcn.140343460
inc rbx
add rdi, 0x20
cmp rbx, 5
jb 0x1400823d0
add qword [r13 + 8], 5
cmp byte [r13 + 0xd1], 0
movzx r14d, byte [rsp + 0x50]
mov edi, 0x4c
lea rbx, [0x1405272c8]
mov r11d, 0xffff0000
lea r8d, [rdi - 0x4b]
je 0x140081e30
call sub.KERNEL32.dll_SwitchToThread
lea rbx, [0x1405272c8]
mov r11d, 0xffff0000
lea r8d, [rdi - 0x4b]
jmp 0x140081e30
movzx eax, byte [r13 + 0x15f8]
imul rcx, rax, 0x268
add rcx, 0x1108
add rcx, r13
call fcn.1400b80d0
lea rbx, [0x1405272c8]
mov edi, 0x4c
mov rcx, r13
call fcn.1400829c0
jmp 0x140081cd1
call fcn.140075ca0
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.140343400
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret