Function at 0x14005e5b0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x1404b75f0]
xor rax, rsp
mov qword [rbp + 0x90], rax
movups xmm0, xmmword [0x14033d8c8]
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x14033d8d8]
mov dword [rsp + 0x50], eax
xor r14d, r14d
lea r15d, [r14 + 4]
lea r13d, [r14 + 0x1f]
mov edi, dword [reloc.WS2_32.dll_accept]
cmp byte [0x14033d8db], r14b
je 0x14005e7ac
mov ecx, r14d
cmp edi, 2
jl 0x14005e774
movdqa xmm5, xmmword [0x14048ab70]
movdqa xmm4, xmmword [0x14048afc0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14048ab90]
movd xmm8, r13d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x44]
mov r8d, dword [rsp + 0x20]
nop
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14048ac00]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
pxor xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14048ac00]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
pxor xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x14005e670
cmp ecx, 0x14
jge 0x14005e7ac
movsxd rax, ecx
lea r8, [rsp + 0x40]
add r8, rax
nop
mov eax, 0x51eb851f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x32
movzx eax, cl
sub al, dl
add al, 0x39
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x14
jl 0x14005e780
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x40]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], r14b
jne 0x14005e7d0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140063a80
lea rcx, [rsp + 0x20]
cmp qword [rsp + 0x38], 0x10
cmovae rcx, qword [rsp + 0x20]
call fcn.14026b498
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x14005e83a
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005e835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r13
ja 0x14005ee46
call fcn.14025bc50
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x80]
call fcn.14025e970
lea rcx, [rbp - 0x80]
call fcn.140062fe0
nop
movups xmm0, xmmword [0x14033d8c8]
movups xmmword [rsp + 0x40], xmm0
mov eax, dword [0x14033d8d8]
mov dword [rsp + 0x50], eax
cmp byte [0x14033d8db], 0
je 0x14005ea10
mov r8d, r14d
cmp edi, 2
jl 0x14005e9c7
movdqa xmm5, xmmword [0x14048ab70]
movdqa xmm4, xmmword [0x14048afc0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14048ab90]
movd xmm8, r13d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x44]
mov edx, dword [rsp + 0x20]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14048ac00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14048ac00]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x14005e8c0
cmp r8d, 0x14
jge 0x14005ea10
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x51eb851f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x14
jl 0x14005e9e0
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], 0
lea rax, [rsp + 0x40]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x14005ea30
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140063a80
nop
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 0x10
cmovae rdx, qword [rsp + 0x20]
mov r8d, Ordinal_35
lea rcx, [rbp - 0x78]
call fcn.140063850
mov esi, 6
lea r12d, [rsi - 4]
test rax, rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x80]
je 0x14005ea95
add rcx, rax
mov edx, r15d
cmp qword [rcx + 0x48], 0
cmovne edx, r14d
jmp 0x14005eaa6
add rcx, rax
mov edx, esi
cmp qword [rcx + 0x48], 0
cmovne edx, r12d
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.14005cb10
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x14005eaec
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005eae7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ee4c
call fcn.14025bc50
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx - 0x70], 6
je 0x14005ed45
movups xmm0, xmmword [str.HISO]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [0x14033d880]
movups xmmword [rsp + 0x70], xmm1
psrldq xmm1, 0xf
movd eax, xmm1
test al, al
je 0x14005eca9
mov r8d, r14d
cmp edi, 2
jl 0x14005ec72
movdqa xmm5, xmmword [0x14048ab70]
mov edx, r14d
movdqa xmm4, xmmword [0x14048afc0]
movd xmm6, r15d
movdqa xmm7, xmmword [0x14048ab90]
movd xmm8, r13d
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x64]
mov r8d, dword [rsp + 0x20]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14048ac00]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
pxor xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x14048ac00]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
pxor xmm2, xmm0
movd dword [rcx], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x20
jl 0x14005eb71
jmp 0x14005eca9
lea r9, [rsp + 0x60]
nop word [rax + rax]
mov eax, 0x51eb851f
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x20
jl 0x14005ec80
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
lea rax, [rsp + 0x60]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14005ecc6
mov r8, rbx
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.140063a80
nop
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
lea rcx, [0x1404c0020]
call fcn.140063fa0
mov rcx, rax
call fcn.140064210
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14005ed45
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005ed40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005ee40
call fcn.14025bc50
lea rbx, str.127.0.0.1_______localhost_n::1_____________ip6_localhost_n::1_____________ip4_localhost_n::1_localhost_n::1_ip6_localhost_n::1_ip6_loopback_n_n127.0.0.1_access.tpns.sgp.tencent.com_n127.0.0.1_api.cme.cloud.tencent.com_n127.0.0.1_8ocht3o7wvjs7b9ycn60.ssh.ftp.partner.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_prod.online.ns1.antivirus.vpn.tracker.webproxy.idc.tencent.com_n127.0.0.1_mail.documentos.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_educloud.tencent.com_n127.0.0.1_fm_co.tencent.com_n127.0.0.1__caldavs._tcp.webserver.r02.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_coral.tencent.com_n127.0.0.1_www.ssh.juegos.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_mobilevpn.oa.tencent.com_n127.0.0.1_tour.cloud.tencent.com_n127.0.0.1__imaps._udp.ns1.dragon.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_xingyun.cloud.tencent.com_n127.0.0.1_jtg9e6xg88n.antivirus.cust39.bo.webproxy.idc.tencent.com_n127.0.0.1_insight.cloud.tencent.com_n127.0.0.1_ftp.dragon.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_domain.cloud.tencent.com_n127.0.0.1_antivirus.france.webproxy.idc.tencent.com_n127.0.0.1_z8u71w.ssh.antivirus.pc48.webproxy.idc.tencent.com_n127.0.0.1_live.tencent.com_n127.0.0.1_oz.tencent.com_n127.0.0.1__submission._udp.dragon.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_bff_apaas.tencent.com_n127.0.0.1_ulink.tencent.com_n127.0.0.1_64275mgd5wn2mi9dx.www.prod.pc1.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_me_summit.tencent.com_n127.0.0.1__imap3._udp.ftp.smtp.online.test.vpn.antivirus.update.bo.webproxy.idc.tencent.com_n127.0.0.1_www.school.tencent.com_n127.0.0.1_sz2.tencent.com_n127.0.0.1_webserver.calendar.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1__ldaps._udp.ns1.netmeeting.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_ca_dmc.cloud.tencent.com_n127.0.0.1_tpm.tencent.com_n127.0.0.1_cns.cloud.tencent.com_n127.0.0.1_jobs.tencent.com_n127.0.0.1_ip.tencent.com_n127.0.0.1_conn.wemeet.tencent.com_n127.0.0.1_www.www.webserver.ppp16.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1__imaps._udp.online.prod.ns1.smtp.sms.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_pypi.qta.tencent.com_n127.0.0.1_localhost.ptlogin2.tencent.com_n127.0.0.1_dbs.cloud.tencent.com_n127.0.0.1__submissions._tcp.antivirus.vpn.tracker.webproxy.idc.tencent.com_n127.0.0.1_v7ygawxwokbvn5.smtp.zm.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_ssh.ssh.ns1.smtp.antivirus.gq.webproxy.idc.tencent.com_n127.0.0.1_interview.tencent.com_n127.0.0.1_rtx.tencent.com_n127.0.0.1_yx.tencent.com_n127.0.0.1_aoc.tencent.com_n127.0.0.1_bbs.tencent.com_n127.0.0.1_xiaowei.tencent.com_n127.0.0.1__kftp._udp.patches.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_qqmail.tencent.com_n127.0.0.1_ns1.ns1.kansascity.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_s3kchcto69o8p94k4.prod.apache.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_underwriting.tencent.com_n127.0.0.1_vendor.tencent.com_n127.0.0.1_ioav5_policy.ioa.tencent.com_n127.0.0.1_p5iop9u01_p7rqzxaow.test.ssh.webmail.prod.km.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_tm.tencent.com_n127.0.0.1_works.tencent.com_n127.0.0.1_ios.tencent.com_n127.0.0.1__avatars._tcp.ftp.sacramento.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_relayserver.tencent.com_n127.0.0.1_tenseek.idc.tencent.com_n127.0.0.1_scmp_test.cloud.tencent.com_n127.0.0.1_tss2.cloud.tencent.com_n127.0.0.1_i5izdm5p.ftp.ftp.vantive.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_account.cloud.tencent.com_n127.0.0.1_tj.app.m.tencent.com_n127.0.0.1__msft_gc_ssl._tcp.smtp.sms.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_svn_cd1.tencent.com_n127.0.0.1_mobile.dev.tencent.com_n127.0.0.1_sign.tencent.com_n127.0.0.1_ctsdb.cloud.tencent.com_n127.0.0.1_uwork.m.tencent.com_n127.0.0.1__ldap_admin._tcp.www.ns1.antivirus.vpn.tracker.webproxy.idc.tencent.com_n127.0.0.1_ns1.ftp.ns1.testphp.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_8ficl9te5t4fzfsjk.ftp.online.ns1.juegos.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_3g.tencent.com_n127.0.0.1_smtp.prod.km.antivirus.bo.webproxy.idc.tencent.com_n127.0.0.1_6qqw61ukw5oz86_76m055aw.s
mov edi, 0x142cc7
movzx edx, byte [rbx]
lea rcx, [rbp - 0x80]
call fcn.1400642a0
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x14005ed51
lea rcx, [rbp - 0x78]
call fcn.140063790
test rax, rax
jne 0x14005ed9a
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x80]
add rcx, rax
cmp qword [rcx + 0x48], rdi
cmovne esi, r12d
or esi, dword [rcx + 0x10]
xor r8d, r8d
mov edx, esi
call fcn.14005cb10
nop
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rbp - 0x78]
call fcn.140062d20
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x7c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x28], rax
lea rcx, [rbp + 0x28]
call fcn.14025ae10
nop
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.14025bc30
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14026c818
nop
call fcn.14026c818
nop
call fcn.14026c818
int3