Function at 0x500eee
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
jmp 0x500f33
call 0x5016bc
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x80000301
push 0
push 8
push 1
mov ebx, 0x1bc
call fcn.005290a0
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x500f7b
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000301
push 0
push 0x34
push 1
mov ebx, 0x1bc
call fcn.005290a0
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x500fb4
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 8
push 1
mov ebx, 0x1bc
call fcn.005290a0
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x500fed
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push ecx
mov eax, dword fs:[0x18]
add eax, 0x100
mov ecx, dword [eax]
mov dword [ebp - 4], ecx
add eax, 4
mov ecx, dword [eax]
mov dword [ebp - 8], ecx
pop ecx
push 0x6d87a4
call fcn.00501724
push dword [ebp - 4]
push 0x6d87a8
call fcn.0050176a
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x20], eax
jne 0x50103b
push 0x6d87ac
call fcn.00501724
push dword [ebp - 8]
push 0x6d87b0
call fcn.0050176a
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x20], eax
jne 0x501061
push 0x6d87ac
call fcn.00501724
fild dword [0x6d87ac]
fstp qword [ebp - 0x20]
fld qword [ebp - 0x20]
fild dword [0x6d87a4]
fstp qword [ebp - 0x28]
fdiv qword [ebp - 0x28]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fsub qword [0x6d7987]
fcomp qword [0x6d798f]
fnstsw ax
test ah, 0x41
jne 0x5010a0
mov eax, 1
cmp eax, 2
jne 0x501096
push ecx
push esi
push edi
pushfd
cld
mov esi, dword fs:[0x18]
mov edi, dword [ebp - 0x10]
cmp dword [edi], 1
jne 0x5010bc
mov ecx, dword [edi + 4]
add edi, 8
rep movsb byte es:[edi], byte [esi]
popfd
pop edi
pop esi
pop ecx
call fcn.005017b1
push 0x80000101
push 0
push eax
push 1
mov ebx, 0x198
call fcn.005289d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 0x10]
mov ecx, 2
call fcn.004f1606
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x501108
push ebx
call fcn.0052828b
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x50111c
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
call fcn.00501813
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x10]
mov ecx, 2
call fcn.004f1606
add esp, 8
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x50114e
push ebx
call fcn.0052828b
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x501162
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
call fcn.00501906
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x10]
mov ecx, 2
call fcn.004f1606
add esp, 8
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x501194
push ebx
call fcn.0052828b
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x5011a8
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
call fcn.00501ab2
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x198
call fcn.005289d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 0x10]
mov ecx, 2
call fcn.004f1606
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x5011f4
push ebx
call fcn.0052828b
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x501208
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
call fcn.00501afe
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x198
call fcn.005289d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push dword [ebp - 0x10]
mov ecx, 2
call fcn.004f1606
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x501254
push ebx
call fcn.0052828b
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x501268
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
call fcn.00501b4d
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
push dword [ebp - 0x10]
mov ecx, 2
call fcn.004f1606
add esp, 8
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x50129a
push ebx
call fcn.0052828b
add esp, 4
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x5012ae
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push esi
push ebx
push edi
push edx
push ecx
mov esi, dword fs:[0x18]
add esi, 0x100
test esi, esi
jle 0x5012fb
mov ebx, dword [ebp - 0x14]
cmp dword [ebx], 1
jne 0x5012fb
cmp dword [ebx + 4], 8
jne 0x5012fb
add ebx, 8
mov edi, 8
cld
xor eax, eax
lodsb al, byte [esi]
mov dl, al
mov eax, edi
mov cl, 4
div cl
mov cl, ah
add cl, 0x9f
xor dl, cl
mov cl, ah
rol dl, cl
mov byte [ebx], dl
inc ebx
dec edi
jne 0x5012df
pop ecx
pop edx
pop edi
pop ebx
pop esi
push 0x80000301
push 0
push 1
push 1
mov ebx, 0x9d4
call fcn.00528760
add esp, 0x10
push 0x80000101
push 0
push eax
push 1
mov ebx, 0x198
call fcn.005289d0
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x80000301
push 0
push 2
push 1
mov ebx, 0x9d4
call fcn.00528760
add esp, 0x10
push 0x80000101
push 0
push eax
push 1
mov ebx, 0x198
call fcn.005289d0
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x80000301
push 0
push 5
push 1
mov ebx, 0x9d4
call fcn.00528760
add esp, 0x10
push 0x80000101
push 0
push eax
push 1
mov ebx, 0x198
call fcn.005289d0
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 6
push 1
mov ebx, 0x9d4
call fcn.00528760
add esp, 0x10
push 0x80000101
push 0
push eax
push 1
mov ebx, 0x198
call fcn.005289d0
add esp, 0x10
mov dword [ebp - 0x38], eax
push dword [ebp - 0x10]
push dword [ebp - 0x38]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push dword [ebp - 0x20]
push dword [ebp - 0x14]
mov ecx, 6
call fcn.004f1606
add esp, 0x18
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x50141e
push ebx
call fcn.0052828b
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x50142e
push ebx
call fcn.0052828b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x50143e
push ebx
call fcn.0052828b
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x50144e
push ebx
call fcn.0052828b
add esp, 4
lea eax, [ebp - 0x3c]
push eax
call fcn.00501d8a
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x50146a
push ebx
call fcn.0052828b
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x50147e
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x501495
mov eax, 0x6d763e
push eax
push 1
mov ebx, 0x194
call fcn.005290d0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x1bc
call fcn.005290a0
add esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x5014d9
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push 0x80000301
push 0
push 8
push 1
mov ebx, 0x1bc
call fcn.005290a0
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x501512
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov eax, dword fs:[0x18]
mov dword [eax + 0x110], 0
call fcn.0050214a
lea eax, [ebp - 0x18]
push eax
call fcn.00502d2d
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x50154b
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x501562
mov eax, 0x6d7646
push eax
push 1
mov ebx, 0x130
call fcn.00529480
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x184
call fcn.00529440
add esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x5015a6
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push eax
push ecx
push edi
push esi
push edx
mov edi, dword [ebp - 0xc]
cmp dword [edi], 1
jne 0x501618
cmp dword [edi + 4], 0x14
jne 0x501618
add edi, 8
mov esi, edi
mov eax, dword fs:[0x18]
add eax, 0x110
mov ecx, dword [edi]
mov dword [eax], ecx
mov edx, ecx
add edi, 8
mov ecx, dword [edi]
add eax, 8
mov dword [eax], ecx
xor edx, ecx
add edi, 4
mov ecx, dword [edi]
add eax, 4
mov dword [eax], ecx
add edi, 4
mov ecx, dword [edi]
add eax, 4
mov dword [eax], ecx
add esi, 4
mov edi, dword fs:[0x30]
add edi, 0x138
mov eax, dword [edi]
lock cmpxchg dword [edi], edx
jne 0x501605
mov edx, dword [esi]
add edi, 4
mov eax, dword [edi]
lock cmpxchg dword [edi], edx
jne 0x501612
pop edx
pop esi
pop edi
pop ecx
pop eax
push 0x80000301
push 0
push 0x14
push 1
mov ebx, 0x1bc
call fcn.005290a0
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x501652
push ebx
call fcn.0052828b
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
call fcn.005034d9
mov dword fs:[0x108], 1
xor eax, eax
jmp 0x501678
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x501688
push ebx
call fcn.0052828b
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x501698
push ebx
call fcn.0052828b
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x5016a8
push ebx
call fcn.0052828b
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x5016b8
push ebx
call fcn.0052828b
add esp, 4
mov esp, ebp
pop ebp
ret