Function at 0x1400627e0
Capabilities:
Delete file
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
movaps xmmword [rsp + 0xe0], xmm6
mov rax, qword [0x1402b3440]
xor rax, rsp
mov qword [rbp + 7], rax
mov r13, r8
mov r12, rdx
mov qword [rbp - 0x61], rcx
xor r14d, r14d
movups xmm0, xmmword [str.q_thaYCYUNQM__]
movups xmmword [rsp + 0x48], xmm0
movsd xmm0, qword [0x1402919b0]
movsd qword [rbp - 0x71], xmm0
movzx eax, word [0x1402919b8]
mov word [rbp - 0x69], ax
cmp byte [0x1402919b9], r14b
je 0x1400629e3
mov r8d, r14d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14006299d
movdqa xmm5, xmmword [0x140292f80]
movdqa xmm4, xmmword [0x140293040]
movdqa xmm6, xmmword [0x140292fb0]
movdqa xmm0, xmmword [str.22222222222222228888888888888888_t]
movdqa xmmword [rbp - 0x59], xmm0
lea rcx, [rbp - 0x7d]
mov edx, dword [rbp - 0x59]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140293010]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140293010]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140062890
cmp r8d, 0x1a
jge 0x1400629e3
movsxd rax, r8d
lea r9, [rsp + 0x48]
add r9, rax
nop dword [rax + rax]
mov eax, 0x8d3dcb09
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3a
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x1a
jl 0x1400629b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], r14
mov qword [rbp - 1], r14
lea rax, [rsp + 0x48]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r14b
jne 0x140062a01
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x19]
call fcn.140067610
nop
mov rsi, qword [rbp - 9]
lea rdi, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rdi, qword [rbp - 0x19]
call fcn.1401fdc1c
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], rsi
lea r8, [rbp - 0x59]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.14005daf0
nop
lea rcx, [rsp + 0x48]
call fcn.14005e570
movzx edi, al
mov rdx, qword [rbp - 0x69]
cmp rdx, 7
jbe 0x140062a9a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062a95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062a95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fe3d4
movabs rsi, 0x7fffffffffffffff
test dil, dil
je 0x140062ca4
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rdx, qword [rbp - 0x19]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rbp - 0x71], r14
mov qword [rbp - 0x69], r14
nop dword [rax + rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140062ad0
mov r8, rbx
lea rcx, [rsp + 0x48]
call fcn.140067610
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x59]
call fcn.14005e670
cmp qword [rax + 0x18], 0xf
jbe 0x140062afe
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov ebx, eax
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x140062b47
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062b42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062b42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fe3d4
lea rcx, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rcx, qword [rbp - 0x19]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea edx, [rbx + 1]
lea rcx, [rbp - 0x39]
call fcn.14005bf70
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rbp - 0x71], r14
mov qword [rbp - 0x69], r14
mov rdi, qword [rbp - 9]
lea r15, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova r15, qword [rbp - 0x19]
cmp rdi, rsi
ja 0x140062ede
mov qword [rbp - 0x69], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x140062bb7
mov qword [rbp - 0x71], rdi
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x48], xmm0
jmp 0x140062c51
mov rbx, rdi
or rbx, 0xf
cmp rbx, rsi
jbe 0x140062bf2
mov rbx, rsi
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1401fe150
mov rcx, rax
test rax, rax
je 0x140062c1a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140062c30
mov eax, reloc.WS2_32.dll_shutdown
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140062c21
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140062ed8
jmp 0x140062bd4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140062c2d
call fcn.1401fe150
jmp 0x140062c30
mov rax, r14
mov qword [rsp + 0x48], rax
mov qword [rbp - 0x71], rdi
mov qword [rbp - 0x69], rbx
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x40]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140066e80
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x140062d56
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062d51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062d51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movzx eax, word [0x140291880]
mov word [rsp + 0x40], ax
cmp byte [0x140291881], 0
je 0x140062cc3
mov byte [rsp + 0x40], Ordinal_50
xor byte [rsp + 0x41], 0x33
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x71], xmm1
lea rax, [rsp + 0x40]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140062ce0
mov r8, rbx
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140067610
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x39]
call fcn.140064d20
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140066e80
nop
mov rdx, qword [rbp - 0x69]
cmp rdx, 0xf
jbe 0x140062d56
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062d51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062d51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fe3d4
mov r15, qword [rbp - 0x61]
mov rax, qword [r12 + 0x10]
mov rcx, qword [r13 + 0x10]
sub rsi, rax
cmp rsi, rcx
jb 0x140062ed2
cmp qword [r12 + 0x18], 0xf
jbe 0x140062d7b
mov r12, qword [r12]
cmp qword [r13 + 0x18], 0xf
jbe 0x140062d86
mov r13, qword [r13]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
mov r9, r12
lea rcx, [rsp + 0x48]
call fcn.140068e80
lea rdx, [rsp + 0x48]
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rbp - 0x69]
cmp rsi, 0xf
cmova rdx, rbx
movabs r9, 0xcbf29ce484222325
mov rcx, r14
mov r8, qword [rbp - 0x71]
test r8, r8
je 0x140062df3
movabs r10, 0x100000001b3
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140062de0
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x59]
lea rcx, [r15 + 0x138]
call fcn.140072470
mov rdi, qword [rax + 8]
test rdi, rdi
jne 0x140062e18
mov rdi, qword [r15 + 0x140]
cmp rsi, 0xf
jbe 0x140062e52
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140062e4a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062e4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1401fe3d4
mov rax, r15
cmp rdi, qword [rax + 0x140]
je 0x140062e62
mov r14, qword [rdi + 0x30]
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140062ea0
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140062e9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140062e9b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fe3d4
mov rax, r14
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1401fe130
mov rbx, qword [rsp + 0x148]
movaps xmm6, xmmword [rsp + 0xe0]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14005bf50
nop
call fcn.14005beb0
int3
call fcn.14005bf50
int3