Function at 0x14005d650
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x140131080]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdi, rdx
mov rsi, rcx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 0x10], rdx
xor r12d, r12d
movdqa xmm0, xmmword [0x14011cc30]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x1005f44
mov ecx, r12d
nop
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x12
jb 0x14005d6a0
mov byte [rbp - 0x2d], 0
lea rcx, [rbp - 0x40]
mov rbx, 0xffffffffffffffff
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x14005d6c2
mov r14, qword [rdx + 0x10]
mov rcx, rdi
mov r15, qword [rdx + 0x18]
cmp r15, 0x10
jb 0x14005d6df
mov rcx, qword [rdx]
cmp r14, rax
jne 0x14005d758
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005d758
movdqa xmm0, xmmword [0x14011d020]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x6a7b7d69
mov word [rbp - 0x2c], 0x100
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x14
jb 0x14005d720
mov byte [rbp - 0x2b], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005d746
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011cc20]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x1005f44
mov rcx, r12
nop
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x12
jb 0x14005d770
mov byte [rbp - 0x2d], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005d790
mov rcx, rdi
cmp r15, 0x10
jb 0x14005d7a5
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005d808
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005d808
mov dword [rbp - 0x40], 0x4c63794c
mov dword [rbp - 0x3c], 0x657160
mov byte [rbp - 0x38], 1
mov rcx, r12
nop
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 7
jb 0x14005d7d0
mov byte [rbp - 0x38], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005d7f6
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011d2d0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x2c2d7077
mov dword [rbp - 0x2c], 0x1006340
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x14005d830
mov byte [rbp - 0x29], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005d850
mov rcx, rdi
cmp r15, 0x10
jb 0x14005d865
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005d8d8
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005d8d8
mov dword [rbp - 0x40], 0x6b7b6343
mov dword [rbp - 0x3c], 0x6070737d
mov word [rbp - 0x38], 0x100
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 8
jb 0x14005d8a0
mov byte [rbp - 0x37], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005d8c6
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011d2d0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x2a2d7077
mov dword [rbp - 0x2c], 0x1006340
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x14005d900
mov byte [rbp - 0x29], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005d920
mov rcx, rdi
cmp r15, 0x10
jb 0x14005d935
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005d9a8
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005d9a8
mov dword [rbp - 0x40], 0x2e7f654a
mov dword [rbp - 0x3c], 0x6170754d
mov word [rbp - 0x38], 0x67
mov byte [rbp - 0x36], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x14005d970
mov byte [rbp - 0x36], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005d996
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011d2d0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x2d2d7077
mov dword [rbp - 0x2c], 0x1006340
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x14005d9d0
mov byte [rbp - 0x29], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005d9f0
mov rcx, rdi
cmp r15, 0x10
jb 0x14005da05
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005da78
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005da78
mov dword [rbp - 0x40], 0x6b7b6343
mov dword [rbp - 0x3c], 0x7978727d
mov word [rbp - 0x38], 0x76
mov byte [rbp - 0x36], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x14005da40
mov byte [rbp - 0x36], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005da66
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011cfd0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x5d422b2b
mov word [rbp - 0x2c], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x14
jb 0x14005daa0
mov byte [rbp - 0x2b], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005dac0
mov rcx, rdi
cmp r15, 0x10
jb 0x14005dad5
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005db34
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005db34
movdqa xmm0, xmmword [0x14011d090]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
mov rcx, r12
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x10
jb 0x14005db00
mov byte [rbp - 0x2f], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005db26
jmp 0x14005df7f
movdqa xmm0, xmmword [0x14011ce90]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x2a2d5d22
mov dword [rbp - 0x2c], 0x55444e40
mov dword [rbp - 0x28], 0x100677c
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x1a
jb 0x14005db60
mov byte [rbp - 0x25], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005db80
mov rcx, rdi
cmp r15, 0x10
jb 0x14005db95
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005dc08
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005dc08
mov dword [rbp - 0x40], 0x676f6346
mov dword [rbp - 0x3c], 0x46317563
mov dword [rbp - 0x38], 0x73676666
mov word [rbp - 0x34], 0x63
mov byte [rbp - 0x32], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xd
jb 0x14005dbd0
mov byte [rbp - 0x32], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005dbf6
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011ce90]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x2f2d504c
mov dword [rbp - 0x2c], 0x55444e40
mov dword [rbp - 0x28], 0x100677c
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x1a
jb 0x14005dc30
mov byte [rbp - 0x25], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005dc50
mov rcx, rdi
cmp r15, 0x10
jb 0x14005dc65
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005dcd8
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005dcd8
mov dword [rbp - 0x40], 0x636c604d
mov dword [rbp - 0x3c], 0x6079646a
mov dword [rbp - 0x38], 0x6470637c
mov word [rbp - 0x34], 0x100
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xc
jb 0x14005dca0
mov byte [rbp - 0x33], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005dcc6
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011ce80]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x58
mov byte [rbp - 0x2e], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x11
jb 0x14005dd00
mov byte [rbp - 0x2e], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005dd20
mov rcx, rdi
cmp r15, 0x10
jb 0x14005dd35
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005dda8
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005dda8
movdqa xmm0, xmmword [0x14011d3c0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x1007d73
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x12
jb 0x14005dd70
mov byte [rbp - 0x2d], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005dd96
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011cf90]
movdqu xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [str.kBNmOBGGQWGKwj]
movdqu xmmword [rbp - 0x30], xmm1
mov byte [rbp - 0x20], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x1f
jb 0x14005ddd0
mov byte [rbp - 0x20], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005ddf0
mov rcx, rdi
cmp r15, 0x10
jb 0x14005de05
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005de68
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005de68
movdqa xmm0, xmmword [str.__Akhwtv_Xlvj]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], 1
mov rcx, r12
nop
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xf
jb 0x14005de30
mov byte [rbp - 0x30], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005de56
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011cfa0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x5d426b7e
mov word [rbp - 0x2c], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x14
jb 0x14005de90
mov byte [rbp - 0x2b], 0
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x14005deb0
mov rcx, rdi
cmp r15, 0x10
jb 0x14005dec5
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14005df35
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14005df35
mov dword [rbp - 0x40], 0x2e7f6d5c
mov dword [rbp - 0x3c], 0x7678605c
mov dword [rbp - 0x38], 0x1006676
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xa
jb 0x14005df00
mov byte [rbp - 0x35], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005df26
lea rdx, [rbp - 0x40]
jmp 0x14005df83
movdqa xmm0, xmmword [0x14011cca0]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x10
jb 0x14005df50
mov byte [rbp - 0x2f], 0
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
lea rax, [rbp - 0x40]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005df76
lea rdx, [rbp - 0x40]
mov r8, rbx
mov rcx, rsi
call fcn.14000a180
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14005dfc5
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14005dfc0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14005dffc
mov rcx, r8
call fcn.1400dffbc
mov byte [rdi], 0
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov rax, rsi
mov qword [rdi + 0x10], r12
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400dff60
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3