Function at 0x1400ebabc
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov r14, rcx
xor r15d, r15d
lea rcx, [rbp + 0x20]
call fcn.1400ea8d8
nop
mov rsi, qword [rbp + 0x20]
mov rbx, rsi
mov rdi, qword [rbp + 0x28]
cmp rsi, rdi
je 0x1400ebb10
mov rcx, rbx
call fcn.1400eb64c
sub rbx, 0xffffffffffffff80
cmp rbx, rdi
jne 0x1400ebaff
mov al, 0x4c
mov dword [rsp + 0x40], 0x3b004c
mov dword [rsp + 0x44], 0x220025
mov dword [rsp + 0x48], 0x2f003f
mov dword [rsp + 0x4c], 0x62003c
mov dword [rsp + 0x50], 0x340038
mov dword [rsp + 0x54], Ordinal_60
mov rcx, r15
movsx eax, al
xor word [rsp + rcx*2 + 0x42], ax
inc rcx
cmp rcx, 0xa
jae 0x1400ebb5c
mov al, byte [rsp + 0x40]
jmp 0x1400ebb45
mov word [rsp + 0x56], r15w
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r15w
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x60]
call fcn.140002cdc
nop
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.140002d5c
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x1400ebbdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebbd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec0e6
call fcn.140173310
movdqa xmm0, xmmword [0x1401f5cd0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x8081a0b
mov word [rsp + 0x54], WSAStartup
mov rcx, r15
mov al, byte [rsp + 0x40]
xor byte [rsp + rcx + 0x41], al
inc rcx
cmp rcx, 0x14
jb 0x1400ebbfb
mov byte [rsp + 0x55], r15b
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x70], r15
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x68], r13
mov byte [rbp - 0x80], r15b
lea rdx, [rsp + 0x41]
lea rcx, [rbp - 0x80]
call fcn.140005250
nop
cmp rsi, rdi
je 0x1400ec032
lea rbx, [rsi + 0x38]
lea rdx, reloc.WS2_32.dll_htons
mov rcx, qword [rbx - 0x28]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 1
jb 0x1400ec0e0
lea r8, [rbx - 0x38]
mov r9, r8
cmp qword [rbx - 0x20], 0x10
jb 0x1400ebc76
mov r9, qword [r8]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
mov dl, byte [rbp + 0x98]
lea rcx, [rbp + 0x38]
call fcn.14002fb6c
nop
lea rdx, [rbx - 0x18]
cmp qword [rbx], 0x10
jb 0x1400ebca6
mov rdx, qword [rdx]
mov r8, qword [rbx - 8]
lea rcx, [rbp + 0x38]
call fcn.1400052c0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r13
mov byte [rax], r15b
mov r8d, 1
lea rdx, reloc.WS2_32.dll_htons
lea rcx, [rsp + 0x60]
call fcn.1400052c0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r13
mov byte [rax], r15b
lea rdx, [rbx + 8]
cmp qword [rbx + 0x20], 0x10
jb 0x1400ebd29
mov rdx, qword [rdx]
mov r8, qword [rbx + 0x18]
lea rcx, [rbp - 0x20]
call fcn.1400052c0
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r13
mov byte [rax], r15b
mov r8d, 1
lea rdx, reloc.WS2_32.dll_htons
lea rcx, [rbp - 0x40]
call fcn.1400052c0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r13
mov byte [rax], r15b
lea rdx, [rbx + 0x28]
cmp qword [rbx + 0x40], 0x10
jb 0x1400ebda6
mov rdx, qword [rdx]
mov r8, qword [rbx + 0x38]
lea rcx, [rbp - 0x60]
call fcn.1400052c0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r13
mov byte [rax], r15b
mov r8d, 1
lea rdx, [0x1401e5cd4]
lea rcx, [rsp + 0x40]
call fcn.1400052c0
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r13
mov byte [rax], r15b
lea rdx, [rbp]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp - 0x80]
call fcn.1400052c0
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1400ebe79
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebe73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec0f2
call fcn.140173310
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400ebeb6
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebeb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec0f8
call fcn.140173310
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x40], r15b
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1400ebf00
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebefb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec0fe
call fcn.140173310
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r13
mov byte [rbp - 0x60], r15b
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400ebf47
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebf42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec104
call fcn.140173310
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r13
mov byte [rbp - 0x40], r15b
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400ebf8e
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebf89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec10a
call fcn.140173310
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r13
mov byte [rbp - 0x20], r15b
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1400ebfd7
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebfd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec110
call fcn.140173310
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r13
mov byte [rsp + 0x60], r15b
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x1400ec021
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ec01c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec116
call fcn.140173310
sub rbx, 0xffffffffffffff80
lea rax, [rbx - 0x38]
cmp rax, rdi
jne 0x1400ebc43
sub rdi, rsi
sar rdi, 7
test rdi, rdi
je 0x1400ec06f
mov qword [rbp], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
mov rdx, r14
lea rcx, [rbp]
call fcn.140003f34
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp]
call fcn.140059680
nop
lea rcx, [rbp]
call fcn.14000299c
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1400ec0a6
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ec0a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ec0ec
call fcn.140173310
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r13
mov byte [rbp - 0x80], r15b
lea rcx, [rbp + 0x20]
call fcn.14004a5d0
nop
mov rcx, r14
call fcn.14000299c
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.140002ca0
nop
call fcn.14018273c
int3
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
int3