Function at 0x14017ab20
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b8]
mov eax, 0x3b8
call fcn.14011ddf0
sub rsp, rax
mov rax, qword [0x140378098]
xor rax, rsp
mov qword [rbp + 0x290], rax
mov rax, qword [rbp + 0x320]
mov edi, 0x40
mov r14, qword [rbp + 0x330]
xor ebx, ebx
mov qword [rsp + 0x68], rax
mov r15, r8
mov rax, qword [rbp + 0x338]
mov rsi, rcx
mov qword [rbp - 0x70], rax
lea r13d, [rdi - 0x38]
mov qword [rsp + 0x60], r9
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x78], Ordinal_46
mov byte [rsp + 0x20], 1
cmp r14, 0x100000
jae 0x14017b511
lea rdx, [0x1402a80b4]
call fcn.14014afb0
test eax, eax
je 0x14017abf2
lea rcx, [rbp - 0x20]
call fcn.1401433d0
test eax, eax
jle 0x14017b511
mov ecx, gethostbyaddr
mov byte [rsp + 0x20], bl
mov qword [rbp - 0x78], rcx
lea rax, [0x14017b540]
lea r12, [0x140143410]
lea r15d, [rdi - 0x30]
jmp 0x14017ad1a
lea rdx, str.SHA1
mov rcx, rsi
call fcn.14014afb0
test eax, eax
je 0x14017ac2f
lea rcx, [rbp - 0x20]
call fcn.140187570
test eax, eax
jle 0x14017b511
lea rax, [0x14017b5c0]
mov r15d, reloc.WS2_32.dll_sendto
lea r12, [0x1401875c0]
jmp 0x14017ad15
lea rdx, str.SHA2_224
mov rcx, rsi
call fcn.14014afb0
test eax, eax
je 0x14017ac6c
lea rcx, [rbp - 0x20]
call fcn.1401878b0
test eax, eax
jle 0x14017b511
lea rax, [0x14017b650]
mov r15d, Ordinal_32
lea r12, [0x140187dc0]
jmp 0x14017ad15
lea rdx, str.SHA2_256
mov rcx, rsi
call fcn.14014afb0
test eax, eax
je 0x14017aca6
lea rcx, [rbp - 0x20]
call fcn.140187d60
test eax, eax
jle 0x14017b511
lea rax, [0x14017b650]
mov r15d, reloc.WLDAP32.dll_Ordinal_32
lea r12, [0x140187dc0]
jmp 0x14017ad15
lea rdx, str.SHA2_384
mov rcx, rsi
call fcn.14014afb0
test eax, eax
je 0x14017acd2
lea rcx, [rbp - 0x20]
call fcn.140187f30
test eax, eax
jle 0x14017b511
mov r15d, gethostbyaddr
jmp 0x14017acfd
lea rdx, str.SHA2_512
mov rcx, rsi
call fcn.14014afb0
test eax, eax
je 0x14017b509
lea rcx, [rbp - 0x20]
call fcn.1401888d0
test eax, eax
jle 0x14017b511
mov r15, rdi
mov r13d, reloc.WS2_32.dll_recv
lea r12, [0x140188960]
lea rax, [0x14017b730]
lea edi, [r13 + 0x70]
mov ecx, Ordinal_41
movzx r10d, byte [rbp + 0x348]
mov esi, reloc.WS2_32.dll_listen
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], rsi
test r10b, r10b
je 0x14017ad5b
mov rsi, qword [rbp + 0x340]
mov r8d, 2
add rsi, 0xb
add rsi, rcx
mov qword [rsp + 0x70], rsi
jmp 0x14017ad6e
lea rax, [rdi + 0xff]
xor edx, edx
add rax, r15
div rdi
lea r8, [rax + 1]
xor edx, edx
mov qword [rsp + 0x58], r8
lea rax, [r14 - 1]
mov rcx, rsi
mov r14, qword [rbp + 0x328]
sub rcx, r15
add rcx, r13
add r14, rsi
add rcx, rdi
add rax, rcx
div rdi
xor edx, edx
mov r9, rax
mov rax, r14
div rdi
mov qword [rsp + 0x50], rdx
xor edx, edx
mov qword [rbp - 0x68], rax
lea rax, [r14 + r13]
div rdi
mov qword [rbp - 0x60], rax
xor eax, eax
mov ecx, eax
test r10b, r10b
setne cl
lea rdx, [rcx + r8]
mov rcx, r9
sub rcx, r8
cmp r9, rdx
jbe 0x14017add9
mov rbx, rcx
imul rbx, rdi
cmp r9, rdx
cmovbe rcx, rax
lea r14, [r14*8]
mov qword [rbp - 0x80], rcx
test r10b, r10b
jne 0x14017aeb3
mov r8, rdi
lea rcx, [rbp + 0x110]
xor edx, edx
lea r14, [r14 + rdi*8]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbp + 0x340]
cmp rax, 0x80
ja 0x14017b511
mov rdx, qword [rbp - 0x70]
lea rcx, [rbp + 0x110]
mov r8, rax
call sub.VCRUNTIME140.dll_memcpy
movdqa xmm2, xmmword [str.666666666666666600]
xor eax, eax
nop word [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x14017ae40
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 0x20]
call r12
mov rax, r14
lea rcx, [rbp + 0xc0]
shr rax, 0x10
mov r12, r14
mov qword [rsp + 0x38], rax
xor edx, edx
mov rax, r14
shr r12, 0x18
shr rax, 8
mov qword [rsp + 0x30], rax
cmp byte [rsp + 0x20], dl
je 0x14017af16
lea r8, [r13 - 4]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xbd], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xbe], al
mov byte [rbp + r13 + 0xbc], r12b
mov byte [rbp + r13 + 0xbf], r14b
jmp 0x14017af48
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x38]
mov byte [rbp + r13 + 0xba], al
mov rax, qword [rsp + 0x30]
mov byte [rbp + r13 + 0xb9], al
mov byte [rbp + r13 + 0xbb], r12b
mov byte [rbp + r13 + 0xb8], r14b
test rbx, rbx
je 0x14017b07e
cmp byte [rbp + 0x348], 0
je 0x14017affa
cmp rsi, rdi
jbe 0x14017b511
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
mov r14, qword [rsp + 0x28]
mov r12, rsi
sub r12, rdi
call r14
mov rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x190]
add rdx, rdi
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x190]
mov r8, rdi
add rcx, r12
sub r8, r12
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r14
xor edx, edx
mov rax, rbx
div rdi
dec rax
cmp rax, 1
jbe 0x14017b07e
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x28]
sub r14, r12
add r14, rdi
lea r12, [rax - 1]
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x14017afe6
jmp 0x14017b079
mov rcx, qword [rsp + 0x60]
lea r8, [rdi - 0xd]
mov r14, qword [rsp + 0x68]
mov rdx, r14
mov eax, dword [rcx + 8]
movsd xmm0, qword [rcx]
mov dword [rbp + 0x198], eax
movzx eax, byte [rcx + 0xc]
lea rcx, [rbp + 0x19d]
mov byte [rbp + 0x19c], al
movsd qword [rbp + 0x190], xmm0
call sub.VCRUNTIME140.dll_memcpy
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x20]
call r12
xor edx, edx
mov rax, rbx
div rdi
cmp rax, 1
jbe 0x14017b07e
mov rsi, qword [rsp + 0x28]
lea r12, [rax - 1]
add r14, 0xfffffffffffffff3
add r14, rdi
mov rdx, r14
lea rcx, [rbp - 0x20]
call rsi
add r14, rdi
sub r12, 1
jne 0x14017b067
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x80]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x58]
add rax, rcx
mov qword [rbp - 0x40], rax
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
cmp rcx, rax
ja 0x14017b37e
mov rax, qword [rsp + 0x50]
movaps xmmword [rsp + 0x3a0], xmm6
lea rdx, [rax + 1]
shr rax, 0x3f
mov qword [rbp - 0x58], rax
mov rax, rdi
sub rax, r13
shr rdx, 0x3f
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x58], rdx
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rdi
add rax, r13
lea r13, [rbp + 0xc0]
add rax, r13
mov qword [rbp - 0x48], rax
xor r13d, r13d
nop dword [rax]
nop word [rax + rax]
mov r12, qword [rsp + 0x60]
mov r9, r13
mov r15, qword [rsp + 0x68]
mov rax, rcx
xor rax, qword [rbp - 0x68]
lea r11, [rax - 1]
not rax
shr rax, 0x3f
shr r11, 0x3f
and r11b, al
mov rax, rcx
xor rax, qword [rbp - 0x60]
neg r11b
lea r14, [rax - 1]
not rax
shr rax, 0x3f
shr r14, 0x3f
and r14b, al
neg r14b
movsx eax, r14b
movzx r13d, r14b
not r13b
or r13b, r11b
movd xmm6, eax
punpcklbw xmm6, xmm6
punpcklwd xmm6, xmm6
pshufd xmm6, xmm6, 0
xor r8b, r8b
cmp rbx, rsi
jae 0x14017b183
movzx r8d, byte [r12 + rbx]
jmp 0x14017b19d
mov rax, qword [rbp + 0x330]
add rax, rsi
cmp rbx, rax
jae 0x14017b19d
mov rax, r15
sub rax, rsi
movzx r8d, byte [rax + rbx]
mov rax, qword [rbp - 0x58]
mov r10, r9
mov rsi, qword [rsp + 0x70]
sub r10, rdx
mov rcx, r10
mov rdx, r9
shr rcx, 0x3f
inc rbx
xor cl, al
shr rdx, 0x3f
xor al, dl
or cl, al
movzx eax, r11b
xor cl, dl
dec cl
movzx ecx, cl
and ecx, eax
mov dword [rsp + 0x38], ecx
not ecx
mov dword [rsp + 0x30], ecx
mov rcx, r9
mov eax, dword [rsp + 0x30]
and al, r8b
mov r8d, dword [rsp + 0x38]
and r8b, 0x80
or r8b, al
mov rax, qword [rsp + 0x50]
inc rax
sub rcx, rax
movzx eax, dl
xor al, byte [rsp + 0x58]
shr rcx, 0x3f
xor cl, byte [rsp + 0x58]
or cl, al
xor cl, dl
dec cl
and cl, r11b
not cl
and cl, r13b
and r8b, cl
cmp r9, qword [rbp - 0x50]
jb 0x14017b245
movzx eax, r14b
mov dword [rsp + 0x38], eax
not eax
mov dword [rsp + 0x30], eax
mov rax, qword [rbp - 0x48]
mov ecx, dword [rsp + 0x38]
and cl, byte [r10 + rax]
mov eax, dword [rsp + 0x30]
and r8b, al
or r8b, cl
mov rdx, qword [rsp + 0x50]
lea rax, [rbp + 0x210]
add rax, rdx
inc r9
mov byte [r10 + rax], r8b
cmp r9, rdi
jb 0x14017b174
mov r12, qword [rsp + 0x28]
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call r12
lea rdx, [rbp + 0x210]
lea rcx, [rbp - 0x20]
call qword [rsp + 0x40]
mov r15, qword [rsp + 0x48]
xor r13d, r13d
mov eax, r13d
cmp r15, 0x40
jb 0x14017b33b
mov rcx, r15
and rcx, 0xffffffffffffffc0
movdqu xmm0, xmmword [rbp + rax + 0xd0]
movdqu xmm1, xmmword [rbp + rax + 0x210]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xd0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xe0]
movdqu xmm1, xmmword [rbp + rax + 0x220]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xe0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0xf0]
movdqu xmm1, xmmword [rbp + rax + 0x230]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xf0], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x100]
movdqu xmm1, xmmword [rbp + rax + 0x240]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
add rax, 0x40
cmp rax, rcx
jb 0x14017b2a2
cmp rax, r15
jae 0x14017b35a
movzx ecx, byte [rbp + rax + 0x210]
and cl, r14b
or byte [rbp + rax + 0xd0], cl
inc rax
cmp rax, r15
jb 0x14017b340
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
inc rcx
mov qword [rbp - 0x80], rcx
cmp rcx, qword [rbp - 0x40]
jbe 0x14017b110
movaps xmm6, xmmword [rsp + 0x3a0]
jmp 0x14017b381
xor r13d, r13d
call fcn.140129ec0
mov rbx, rax
test rax, rax
je 0x14017b4fc
mov rdx, qword [rbp - 0x38]
xor r8d, r8d
mov rcx, rax
call fcn.140129510
test eax, eax
jle 0x14017b4fc
cmp byte [rbp + 0x348], 0
je 0x14017b429
mov r14, qword [rbp - 0x78]
lea rcx, [rbp + 0x110]
mov r8, r14
mov edx, 0x5c
call sub.VCRUNTIME140.dll_memset
mov r8, qword [rbp + 0x340]
mov rcx, rbx
mov rdx, qword [rbp - 0x70]
call fcn.140129550
test eax, eax
jle 0x14017b4fc
mov r8, r14
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.140129550
test eax, eax
jle 0x14017b4fc
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.140129550
test eax, eax
jg 0x14017b4d1
mov rcx, rbx
call fcn.140129e10
mov eax, r13d
jmp 0x14017b513
movdqa xmm2, xmmword [str.jjjjjjjjjjjjjjjjssl_record_tls_pad.c]
mov rax, r13
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rbp + rax + 0x110]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x110], xmm0
movdqu xmm1, xmmword [rbp + rax + 0x120]
pxor xmm1, xmm2
movdqu xmmword [rbp + rax + 0x120], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x130]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x130], xmm1
movdqu xmm0, xmmword [rbp + rax + 0x140]
pxor xmm0, xmm2
movdqu xmmword [rbp + rax + 0x140], xmm0
add rax, 0x40
cmp rax, rdi
jb 0x14017b440
mov r8, rdi
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.140129550
test eax, eax
jle 0x14017b4fc
mov r8, r15
lea rdx, [rbp + 0xd0]
mov rcx, rbx
call fcn.140129550
test eax, eax
jle 0x14017b4fc
mov rdx, qword [rbp - 0x30]
lea r8, [rsp + 0x78]
mov rcx, rbx
call fcn.140129100
test eax, eax
je 0x14017b4f6
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14017b4f6
mov eax, dword [rsp + 0x78]
mov qword [rcx], rax
mov r13d, 1
mov rcx, rbx
call fcn.140129e10
mov eax, r13d
jmp 0x14017b513
test r15, r15
je 0x14017b511
mov qword [r15], rbx
xor eax, eax
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.14011d660
add rsp, 0x3b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret