Function at 0x140355bd0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
mov eax, 0x3b8
call fcn.140410240
sub rsp, rax
mov rax, qword [0x140542918]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x320]
mov edi, 0x40
mov r14, qword [rbp + 0x330]
xor ebx, ebx
mov qword [rsp + 0x68], rax
mov r15, r8
mov rax, qword [rbp + 0x338]
mov rsi, rcx
mov qword [rbp - 0x70], rax
lea r13d, [rdi - 0x38]
mov qword [rsp + 0x60], r9
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x78], Ordinal_45
mov byte [rsp + 0x20], 1
cmp r14, 0x100000
jae 0x1403565c1
lea rdx, [0x140438cac]
call fcn.1401fe8d0
test eax, eax
je 0x140355ca2
lea rcx, [rbp - 0x20]
call fcn.140207220
test eax, eax
jle 0x1403565c1
mov ecx, gethostbyaddr
mov byte [rsp + 0x20], bl
mov qword [rbp - 0x78], rcx
lea rax, [0x1403565f0]
lea r12, [0x140207260]
lea r15d, [rdi - 0x30]
jmp 0x140355dca
lea rdx, str.SHA1
mov rcx, rsi
call fcn.1401fe8d0
test eax, eax
je 0x140355cdf
lea rcx, [rbp - 0x20]
call fcn.140207540
test eax, eax
jle 0x1403565c1
lea rax, [0x140356670]
mov r15d, reloc.WS2_32.dll_sendto
lea r12, [0x140207590]
jmp 0x140355dc5
lea rdx, str.SHA2_224
mov rcx, rsi
call fcn.1401fe8d0
test eax, eax
je 0x140355d1c
lea rcx, [rbp - 0x20]
call fcn.140207880
test eax, eax
jle 0x1403565c1
lea rax, [0x140356700]
mov r15d, Ordinal_32
lea r12, [0x140207d90]
jmp 0x140355dc5
lea rdx, str.SHA2_256
mov rcx, rsi
call fcn.1401fe8d0
test eax, eax
je 0x140355d56
lea rcx, [rbp - 0x20]
call fcn.140207d30
test eax, eax
jle 0x1403565c1
lea rax, [0x140356700]
mov r15d, reloc.WLDAP32.dll_Ordinal_32
lea r12, [0x140207d90]
jmp 0x140355dc5
lea rdx, str.SHA2_384
mov rcx, rsi
call fcn.1401fe8d0
test eax, eax
je 0x140355d82
lea rcx, [rbp - 0x20]
call fcn.140207f00
test eax, eax
jle 0x1403565c1
mov r15d, gethostbyaddr
jmp 0x140355dad
lea rdx, str.SHA2_512
mov rcx, rsi
call fcn.1401fe8d0
test eax, eax
je 0x1403565b9
lea rcx, [rbp - 0x20]
call fcn.1402088a0
test eax, eax
jle 0x1403565c1
mov r15, rdi
mov r13d, reloc.WS2_32.dll_recv
lea r12, [0x140208930]
lea rax, [0x1403567e0]
lea edi, [r13 + 0x70]
mov ecx, Ordinal_41
movzx r10d, byte [rbp + 0x348]
mov esi, reloc.WS2_32.dll_listen
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], rsi
test r10b, r10b
je 0x140355e0b
mov rsi, qword [rbp + 0x340]
mov r8d, 2
add rsi, 0xb
add rsi, rcx
mov qword [rsp + 0x70], rsi
jmp 0x140355e1e
lea rax, [rdi + 0xff]
xor edx, edx
add rax, r15
div rdi
lea r8, [rax + 1]
xor edx, edx
mov qword [rsp + 0x58], r8
lea rax, [r14 - 1]
mov rcx, rsi
mov r14, qword [rbp + 0x328]
sub rcx, r15
add rcx, r13
add r14, rsi
add rcx, rdi
add rax, rcx
div rdi
xor edx, edx
mov r9, rax
mov rax, r14
div rdi
mov qword [rsp + 0x50], rdx
xor edx, edx
mov qword [rbp - 0x68], rax
lea rax, [r14 + r13]
div rdi
mov qword [rbp - 0x60], rax
xor eax, eax
mov ecx, eax
test r10b, r10b
setne cl
lea rdx, [rcx + r8]
mov rcx, r9
sub rcx, r8
cmp r9, rdx
jbe 0x140355e89
mov rbx, rcx
imul rbx, rdi
cmp r9, rdx
cmovbe rcx, rax
lea r14, [r14*8]
mov qword [rbp - 0x80], rcx
test r10b, r10b
jne 0x140355f63
mov r8, rdi
lea rcx, [rbp + 0x110]
xor edx, edx
lea r14, [r14 + rdi*8]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp + 0x340]
cmp rax, 0x80
ja 0x1403565c1
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x110]
mov r8, rax
call sub.VCRUNTIME140.dll_memcpy
movdqa xmm2, xmmword [str.6666666666666666_]
xor eax, eax
nop word [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x140355ef0
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x20]
call r12
mov rax, r14
lea rcx, [rbp + 0xc0]
shr rax, 0x10
mov r12, r14
mov qword [rsp + 0x38], rax
xor edx, edx
mov rax, r14
shr r12, 0x18
shr rax, 8
mov qword [rsp + 0x30], rax
cmp byte [rsp + 0x20], dl
je 0x140355fc6
lea r8, [r13 - 4]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xbd], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xbe], al
mov byte [rbp + r13 + 0xbc], r12b
mov byte [rbp + r13 + 0xbf], r14b
jmp 0x140355ff8
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xba], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xb9], al
mov byte [rbp + r13 + 0xbb], r12b
mov byte [rbp + r13 + 0xb8], r14b
test rbx, rbx
je 0x14035612e
cmp byte [rbp + 0x348], 0
je 0x1403560aa
cmp rsi, rdi
jbe 0x1403565c1
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
mov r14, qword [rsp + 0x28]
mov r12, rsi
sub r12, rdi
call r14
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x190]
add rdx, rdi
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x190]
mov r8, rdi
add rcx, r12
sub r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r14
xor edx, edx
mov rax, rbx
div rdi
dec rax
cmp rax, 1
jbe 0x14035612e
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x28]
sub r14, r12
add r14, rdi
lea r12, [rax - 1]
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x140356096
jmp 0x140356129
mov rcx, qword [rsp + 0x60]
lea r8, [rdi - 0xd]
mov r14, qword [rsp + 0x68]
mov rdx, r14
mov eax, dword [rcx + 8]
movsd xmm0, qword [rcx]
mov dword [rbp + 0x198], eax
movzx eax, byte [rcx + 0xc]
lea rcx, [rbp + 0x19d]
mov byte [rbp + 0x19c], al
movsd qword [rbp + 0x190], xmm0
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r12
xor edx, edx
mov rax, rbx
div rdi
cmp rax, 1
jbe 0x14035612e
mov rsi, qword [rsp + 0x28]
lea r12, [rax - 1]
add r14, 0xfffffffffffffff3
add r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x140356117
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x80]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rbp - 0x40], rax
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
cmp rcx, rax
ja 0x14035642e
mov rax, qword [rsp + 0x50]
movaps xmmword [rsp + 0x3a0], xmm6
lea rdx, [rax + 1]
shr rax, 0x3f
mov qword [rbp - 0x58], rax
mov rax, rdi
sub rax, r13
shr rdx, 0x3f
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rdi
add rax, r13
lea r13, [rbp + 0xc0]
add rax, r13
mov qword [rbp - 0x48], rax
xor r13d, r13d
nop dword [rax]
nop word [rax + rax]
mov r12, qword [rsp + 0x60]
mov r9, r13
mov r15, qword [rsp + 0x68]
mov rax, rcx
xor rax, qword [rbp - 0x68]
lea r11, [rax - 1]
not rax
shr rax, 0x3f
shr r11, 0x3f
and r11b, al
mov rax, rcx
xor rax, qword [rbp - 0x60]
neg r11b
lea r14, [rax - 1]
not rax
shr rax, 0x3f
shr r14, 0x3f
and r14b, al
neg r14b
movsx eax, r14b
movzx r13d, r14b
not r13b
or r13b, r11b
movd xmm6, eax
punpcklbw xmm6, xmm6
punpcklwd xmm6, xmm6
pshufd xmm6, xmm6, 0
xor r8b, r8b
cmp rbx, rsi
jae 0x140356233
movzx r8d, byte [r12 + rbx]
jmp 0x14035624d
mov rax, qword [rbp + 0x330]
add rax, rsi
cmp rbx, rax
jae 0x14035624d
mov rax, r15
sub rax, rsi
movzx r8d, byte [rax + rbx]
mov rax, qword [rbp - 0x58]
mov r10, r9
mov rsi, qword [rsp + 0x70]
sub r10, rdx
mov rcx, r10
mov rdx, r9
shr rcx, 0x3f
inc rbx
xor cl, al
shr rdx, 0x3f
xor al, dl
or cl, al
movzx eax, r11b
xor cl, dl
dec cl
movzx ecx, cl
and ecx, eax
mov dword [rsp + 0x38], ecx
not ecx
mov dword [rsp + 0x30], ecx
mov rcx, r9
mov eax, dword [rsp + 0x30]
and al, r8b
mov r8d, dword [rsp + 0x38]
and r8b, 0x80
or r8b, al
mov rax, qword [rsp + 0x50]
inc rax
sub rcx, rax
movzx eax, dl
xor al, byte [rsp + 0x58]
shr rcx, 0x3f
xor cl, byte [rsp + 0x58]
or cl, al
xor cl, dl
dec cl
and cl, r11b
not cl
and cl, r13b
and r8b, cl
cmp r9, qword [rbp - 0x50]
jb 0x1403562f5
movzx eax, r14b
mov dword [rsp + 0x38], eax
not eax
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x48]
mov ecx, dword [rsp + 0x38]
and cl, byte [r10 + rax]
mov eax, dword [rsp + 0x30]
and r8b, al
or r8b, cl
mov rdx, qword [rsp + 0x50]
lea rax, [rbp + 0x210]
add rax, rdx
inc r9
mov byte [r10 + rax], r8b
cmp r9, rdi
jb 0x140356224
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call r12
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
xor r13d, r13d
mov eax, r13d
cmp r15, 0x40
jb 0x1403563eb
mov rcx, r15
and rcx, 0xffffffffffffffc0
movdqu xmm0, xmmword [rbp + rax + 0xd0]
movdqu xmm1, xmmword [rbp + rax + 0x210]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xd0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xe0]
movdqu xmm1, xmmword [rbp + rax + 0x220]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xe0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xf0]
movdqu xmm1, xmmword [rbp + rax + 0x230]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xf0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x100]
movdqu xmm1, xmmword [rbp + rax + 0x240]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
add rax, 0x40
cmp rax, rcx
jb 0x140356352
cmp rax, r15
jae 0x14035640a
movzx ecx, byte [rbp + rax + 0x210]
and cl, r14b
or byte [rbp + rax + 0xd0], cl
inc rax
cmp rax, r15
jb 0x1403563f0
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
inc rcx
mov qword [rbp - 0x80], rcx
cmp rcx, qword [rbp - 0x40]
jbe 0x1403561c0
movaps xmm6, xmmword [rsp + 0x3a0]
jmp 0x140356431
xor r13d, r13d
call fcn.1401f0180
mov rbx, rax
test rax, rax
je 0x1403565ac
mov rdx, qword [rbp - 0x38]
xor r8d, r8d
mov rcx, rax
call fcn.1401ef7d0
test eax, eax
jle 0x1403565ac
cmp byte [rbp + 0x348], 0
je 0x1403564d9
mov r14, qword [rbp - 0x78]
lea rcx, [rbp + 0x110]
mov r8, r14
mov edx, 0x5c
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbp + 0x340]
mov rcx, rbx
mov rdx, qword [rbp - 0x70]
call fcn.1401ef810
test eax, eax
jle 0x1403565ac
mov r8, r14
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1401ef810
test eax, eax
jle 0x1403565ac
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1401ef810
test eax, eax
jg 0x140356581
mov rcx, rbx
call fcn.1401f00d0
mov eax, r13d
jmp 0x1403565c3
movdqa xmm2, xmmword [str.jjjjjjjjjjjjjjjj_]
mov rax, r13
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x1403564f0
mov r8, rdi
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1401ef810
test eax, eax
jle 0x1403565ac
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.1401ef810
test eax, eax
jle 0x1403565ac
mov rdx, qword [rbp - 0x30]
lea r8, [rsp + 0x78]
mov rcx, rbx
call fcn.1401ef3c0
test eax, eax
je 0x1403565a6
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1403565a6
mov eax, dword [rsp + 0x78]
mov qword [rcx], rax
mov r13d, 1
mov rcx, rbx
call fcn.1401f00d0
mov eax, r13d
jmp 0x1403565c3
test r15, r15
je 0x1403565c1
mov qword [r15], rbx
xor eax, eax
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14040ff40
add rsp, 0x3b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret