Function at 0x1400057d0
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
push r14
sub rsp, 0xb0
movaps xmmword [r11 - 0x18], xmm6
mov rax, qword [0x14008e180]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rdi, rcx
mov qword [r11 - 0x38], rcx
xor esi, esi
mov dword [r11 - 0x30], esi
mov rcx, qword [rcx + 0x10]
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14000581d
mov rax, qword [rdi]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rcx
call fcn.14006580c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001fe0
nop
lea rcx, [rsp + 0x50]
call fcn.140002b60
movzx ebx, al
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000589b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005896
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140066284
test bl, bl
je 0x14000595b
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400058b0
mov rcx, qword [rdi]
mov qword [rsp + 0x40], rcx
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400058c0
mov qword [rsp + 0x48], rax
call fcn.14006580c
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001fe0
nop
lea rcx, [rsp + 0x50]
cmp qword [rsp + 0x68], 7
cmova rcx, qword [rsp + 0x50]
call fcn.140065cc8
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140005c83
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x14000595b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005955
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005955
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140066284
nop
jmp 0x140005967
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140005974
mov rcx, qword [rdi]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xe
je 0x140005a50
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xe1
je 0x140005a50
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xe2
je 0x140005a50
cmp r14, 0xffffffffffffffff
je 0x140005c06
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x88]
mov r8d, 6
lea rdx, [0x140095a80]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov ebx, eax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rdi + 0x18]
test bl, bl
je 0x140005c0a
cmp rdx, 0xf
jbe 0x140005a49
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140005a44
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005c7c
mov rcx, r8
call fcn.140066284
mov al, 1
jmp 0x140005c3e
movups xmm0, xmmword [0x1400782c8]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [0x1400782d8]
movups xmmword [rsp + 0x60], xmm1
movsd xmm0, qword [0x1400782e8]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [0x1400782f0]
mov dword [rsp + 0x78], eax
mov ecx, esi
cmp dword [0x14008e1d8], 2
jl 0x140005bb4
movdqa xmm4, xmmword [0x140078d40]
movdqa xmm3, xmmword [0x140078e00]
movdqa xmm5, xmmword [0x140078d80]
movdqa xmm0, xmmword [0x140078e10]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x54]
movdqa xmm6, xmmword [0x140078df0]
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
psubb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
psubb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x28
jl 0x140005ad0
cmp ecx, 0x2c
jge 0x140005bed
movsxd rax, ecx
lea r8, [rsp + 0x50]
add r8, rax
nop
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dl
shl al, 3
add dl, al
movzx eax, cl
sub al, dl
sub al, 0x6d
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x2c
jl 0x140005bc0
lea rcx, [rsp + 0x50]
call fcn.1400012c0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
int 0x29
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140005c3c
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140005c37
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005c7c
mov rcx, r8
call fcn.140066284
xor al, al
mov byte [rdi], 0
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rdi + 0x10], rsi
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140066220
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r14
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
shr rdx, 0x20
lea r8, [rsp + 0x50]
call fcn.140002a10
int3