Function at 0x1800fe5e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], r9
push rbp
push rbx
push rdi
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x180b60468]
vmovaps xmmword [rsp + 0x60], xmm6
vmovaps xmmword [rsp + 0x50], xmm7
vmovaps xmmword [rsp + 0x40], xmm8
mov rcx, qword [rax + 0x270]
test rcx, rcx
je 0x1800fec4e
cmp rcx, qword [0x180b5ef08]
je 0x1800fec4e
mov rax, qword [rax + 0x1a0]
call rax
test rax, rax
je 0x1800fec4e
mov rcx, qword [0x180b60468]
movzx edx, word [0x180247404]
mov r8, qword [rcx + 0x1a8]
mov ecx, dword [str.CXTORJ9]
mov dword [rbp + 0x38], ecx
movzx ecx, byte [reloc.WS2_32.dll_gethostname]
xor byte [rbp + 0x39], 0x34
xor cl, 0x39
xor byte [rbp + 0x3a], 0x35
xor byte [rbp + 0x3b], 0x36
mov word [rbp + 0x3c], dx
xor dl, 0x37
xor byte [rbp + 0x3d], 0x38
mov byte [rbp + 0x3e], cl
mov rcx, rax
mov byte [rbp + 0x3c], dl
lea rdx, [rbp + 0x38]
mov byte [rbp + 0x38], reloc.WS2_32.dll_WSASetLastError
call r8
test rax, rax
je 0x1800fec4e
mov rcx, qword [0x180b60468]
xor edx, edx
mov r8, qword [rcx + 0xe8]
mov rcx, rax
call r8
mov rbx, rax
test rax, rax
je 0x1800fec4e
mov rcx, qword [0x180b60468]
lea rdx, [rbp + 0x38]
mov r8, qword [rcx + 0x208]
mov ecx, dword [0x180247424]
mov dword [rbp + 0x38], ecx
movzx ecx, word [0x180247428]
xor byte [rbp + 0x39], 0x34
xor byte [rbp + 0x3a], 0x35
xor byte [rbp + 0x3b], 0x36
mov word [rbp + 0x3c], cx
xor cl, 0x37
xor byte [rbp + 0x3d], 0x38
mov byte [rbp + 0x3c], cl
mov rcx, rax
mov byte [rbp + 0x38], 0x61
call r8
test eax, eax
je 0x1800fec4e
mov rax, qword [0x180b60468]
lea rdx, [rbp + 0x38]
mov rcx, rbx
mov r8, qword [rax + 0x50]
mov eax, dword [0x180247424]
mov dword [rbp + 0x38], eax
movzx eax, word [0x180247428]
xor byte [rbp + 0x39], 0x34
xor byte [rbp + 0x3a], 0x35
xor byte [rbp + 0x3b], 0x36
mov word [rbp + 0x3c], ax
xor al, 0x37
xor byte [rbp + 0x3d], 0x38
mov byte [rbp + 0x3c], al
mov byte [rbp + 0x38], 0x61
call r8
mov rbx, rax
test rax, rax
je 0x1800fec4e
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
mov rcx, qword [0x180b60468]
vmovsd xmm0, qword [str.RFPXVl_J_]
mov rax, qword [rcx + 0x208]
movzx ecx, word [0x180247410]
mov word [rbp - 0x48], cx
vmovsd qword [rbp - 0x50], xmm0
je 0x1800fe7a8
xor byte [rbp - 0x4f], 0x34
xor byte [rbp - 0x4e], 0x35
xor byte [rbp - 0x4d], 0x36
xor byte [rbp - 0x4c], 0x37
xor byte [rbp - 0x4b], 0x38
xor byte [rbp - 0x4a], 0x39
xor byte [rbp - 0x49], 0x3a
xor byte [rbp - 0x48], 0x3b
xor byte [rbp - 0x47], 0x3c
mov byte [rbp - 0x50], 0x61
lea rdx, [rbp - 0x50]
mov rcx, rbx
call rax
test eax, eax
je 0x1800fec4e
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
mov rax, qword [0x180b60468]
vmovsd xmm0, qword [str.RFPXVl_J_]
mov r8, qword [rax + 0x50]
movzx eax, word [0x180247410]
mov word [rbp - 0x48], ax
vmovsd qword [rbp - 0x50], xmm0
je 0x1800fe80d
xor byte [rbp - 0x4f], 0x34
xor byte [rbp - 0x4e], 0x35
xor byte [rbp - 0x4d], 0x36
xor byte [rbp - 0x4c], 0x37
xor byte [rbp - 0x4b], 0x38
xor byte [rbp - 0x4a], 0x39
xor byte [rbp - 0x49], 0x3a
xor byte [rbp - 0x48], 0x3b
xor byte [rbp - 0x47], 0x3c
mov byte [rbp - 0x50], 0x61
lea rdx, [rbp - 0x50]
mov rcx, rbx
call r8
mov rdi, rax
test rax, rax
je 0x1800fec4e
cmp byte [0x180247423], 0
mov ebx, 8
mov rcx, qword [0x180b60468]
vmovsd xmm0, qword [str.Q__XSQW_ySE_RFPXV8]
mov r10, qword [rcx + 0x208]
mov ecx, dword [0x180247420]
mov dword [rbp - 0x38], ecx
vmovsd qword [rbp - 0x40], xmm0
je 0x1800fe94a
vmovdqu xmm5, xmmword [0x1802493c0]
vmovdqu xmm6, xmmword [0x1802498c0]
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, 4
vpsrld xmm1, xmm4, 0x1f
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x180249420]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm0, xmm3, xmmword [0x180249360]
vpaddb xmm2, xmm0, xmmword [0x180249580]
vmovdqu xmm5, xmmword [0x180249400]
vmovd xmm0, dword [str.Q__XSQW_ySE_RFPXV8]
vpxor xmm1, xmm2, xmm0
vmovd dword [rbp - 0x40], xmm1
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, 4
vpsrld xmm1, xmm4, 0x1f
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x180249420]
vmovd xmm1, dword [rbp - 0x3c]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm0, xmm3, xmmword [0x180249360]
vpaddb xmm2, xmm0, xmmword [0x180249580]
vpxor xmm0, xmm2, xmm1
vmovd dword [rbp - 0x3c], xmm0
mov r8d, ebx
lea r9, [rbp - 0x38]
nop dword [rax]
mov eax, 0x51eb851f
lea r9, [r9 + 1]
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x33
xor byte [r9 - 1], al
cmp r8d, 0xc
jl 0x1800fe920
lea rdx, [rbp - 0x40]
mov rcx, rdi
call r10
test eax, eax
je 0x1800fec4e
cmp byte [0x180247423], 0
mov rax, qword [0x180b60468]
vmovsd xmm0, qword [str.Q__XSQW_ySE_RFPXV8]
mov r9, qword [rax + 0x50]
mov eax, dword [0x180247420]
mov dword [rbp - 0x38], eax
vmovsd qword [rbp - 0x40], xmm0
je 0x1800fea77
vmovdqu xmm5, xmmword [0x1802493c0]
vmovdqu xmm7, xmmword [0x1802498c0]
mov eax, dword [0x180249580]
lea r8, [rbp - 0x38]
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm7
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm7
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, 4
vpsrld xmm1, xmm4, 0x1f
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x180249420]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x180249360]
vmovdqu xmm5, xmmword [0x180249400]
vmovd xmm0, eax
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [str.Q__XSQW_ySE_RFPXV8]
vpxor xmm1, xmm1, xmm0
vmovd dword [rbp - 0x40], xmm1
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm7
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, 4
vpsrld xmm1, xmm4, 0x1f
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x180249420]
vmovd xmm1, dword [rbp - 0x3c]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x180249360]
vmovd xmm0, eax
vpaddb xmm2, xmm4, xmm0
vpxor xmm0, xmm2, xmm1
vmovd dword [rbp - 0x3c], xmm0
mov eax, 0x51eb851f
lea r8, [r8 + 1]
mul ebx
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, bl
inc ebx
sub al, cl
add al, 0x33
xor byte [r8 - 1], al
cmp ebx, 0xc
jl 0x1800fea51
lea rdx, [rbp - 0x40]
mov rcx, rdi
call r9
mov rbx, rax
test rax, rax
je 0x1800fec4e
mov rcx, qword [0x180b60468]
xor dil, dil
mov rdx, qword [rcx + 0xf0]
mov rcx, rax
call rdx
cmp eax, 2
jne 0x1800fec48
mov rcx, qword [0x180b60468]
xor edx, edx
mov qword [rsp + 0x90], rsi
mov r8, qword [rcx + 0xf8]
mov rcx, rbx
call r8
mov rcx, qword [0x180b60468]
mov edx, 1
mov rsi, rax
mov r8, qword [rcx + 0xf8]
mov rcx, rbx
call r8
mov rbx, rax
test rsi, rsi
je 0x1800fec40
test rax, rax
je 0x1800fec40
mov rcx, qword [0x180b60468]
lea rdx, [0x180238804]
mov qword [rsp + 0x98], r14
mov r8, qword [rcx + 0x50]
mov rcx, rsi
call r8
mov rcx, qword [0x180b60468]
lea rdx, [0x1802387ec]
mov r14, rax
mov r8, qword [rcx + 0x50]
mov rcx, rsi
call r8
mov rcx, qword [0x180b60468]
mov rsi, rax
mov r8, qword [rcx + 0xe0]
mov rcx, r14
call r8
mov rcx, qword [0x180b60468]
vcvtsd2ss xmm1, xmm0, xmm0
vmovss dword [0x18091b9a8], xmm1
mov r8, qword [rcx + 0xe0]
mov rcx, rsi
call r8
mov rax, qword [0x180b60468]
lea rdx, [0x180238804]
vcvtsd2ss xmm1, xmm0, xmm0
vmovss dword [0x18091b998], xmm1
mov rcx, rbx
mov r8, qword [rax + 0x50]
call r8
mov rcx, qword [0x180b60468]
lea rdx, [0x1802387ec]
mov rdi, rax
mov r8, qword [rcx + 0x50]
mov rcx, rbx
call r8
mov rcx, qword [0x180b60468]
mov rbx, rax
mov rdx, qword [rcx + 0xe0]
mov rcx, rdi
call rdx
mov rcx, qword [0x180b60468]
vcvtsd2ss xmm1, xmm0, xmm0
vmovss dword [0x18091b9ac], xmm1
mov rdx, qword [rcx + 0xe0]
mov rcx, rbx
call rdx
vcvtsd2ss xmm1, xmm0, xmm0
vmovss dword [0x18091b994], xmm1
test r14, r14
je 0x1800febff
mov rax, qword [0x180b60468]
mov rcx, r14
call qword [rax + 0x40]
mov r14, qword [rsp + 0x98]
test rsi, rsi
je 0x1800fec19
mov rax, qword [0x180b60468]
mov rcx, rsi
call qword [rax + 0x40]
test rdi, rdi
je 0x1800fec2b
mov rax, qword [0x180b60468]
mov rcx, rdi
call qword [rax + 0x40]
test rbx, rbx
je 0x1800fec3d
mov rax, qword [0x180b60468]
mov rcx, rbx
call qword [rax + 0x40]
mov dil, 1
mov rsi, qword [rsp + 0x90]
movzx eax, dil
jmp 0x1800fec50
xor al, al
vmovaps xmm6, xmmword [rsp + 0x60]
vmovaps xmm7, xmmword [rsp + 0x50]
vmovaps xmm8, xmmword [rsp + 0x40]
add rsp, 0x70
pop rdi
pop rbx
pop rbp
ret