Function at 0x2edd84200
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using chaskey

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
mov rdi, rcx
mov ebx, edx
push r10
subss xmm12, xmm11
push r13
pcmpeqw mm2, mm7
nop
push r8
mulss xmm14, xmm12
emms
mov r8d, 6
push r12
not r13d
neg r13
neg r12d
or r13, r10
push rcx
minps xmm13, xmm14
punpckhbw mm1, mm5
dec rcx
addps xmm11, xmm13
rcpss xmm11, xmm3
pop rcx
nop
movups xmm14, xmm7
psubusw mm5, mm4
nop
pop r12
movhlps xmm5, xmm6
nop
emms
pop r8
emms
nop
pop r13
psrld mm1, 0x2b
pop r10
mov ecx, 0x10
call sub.msvcrt.dll_malloc
mov rcx, rax
push r9
dec r9
push r10
rcpps xmm4, xmm0
push rcx
emms
push r14
dec r10d
pop r14
or r9w, cx
pop rcx
add r10b, r9b
pop r10
ror r9b, 0xd
pop r9
mov edx, pe_nt_image_headers64
call sub.msvcrt.dll_realloc
mov rcx, rax
xor eax, eax
push rdx
addps xmm2, xmm3
psllq mm5, 0x2e
sar dl, 5
push r13
psrld mm0, 0x3b
pmulhuw mm2, mm0
emms
push r11
andnps xmm3, xmm8
sbb r13d, 0x12
push rax
add dl, r11b
pmullw mm0, mm5
pop rax
dec r13
nop
sub r11, 0xb
pop r11
emms
nop
pop r13
psrad mm2, 0x37
nop
pop rdx
xor dword [rcx + rax*4], 0x67
push r12
mov r12, 2
push r12
inc r12
push r10
cmp r10b, r12b
push r8
psrld mm0, 0x14
push r11
psllq mm7, 0x47
push r14
emms
push rbx
nop
pop rbx
sbb r11b, r10b
pop r14
psrld mm2, 0x21
pop r11
psraw mm3, 0x63
pop r8
mulss xmm15, xmm13
pop r10
emms
pop r12
dec r12
jne 0x2edd842ff
pop r12
inc rax
cmp rax, 4
jne 0x2edd842b5
call sub.msvcrt.dll_free
push r8
inc r8
push r13
emms
shr r8, 0xd
pop r13
rcl r8b, 8
pop r8
push r9
psrld mm6, 0x11
emms
push r13
psrad mm7, 0x11
pop r13
psraw mm2, 0x10
rcpps xmm4, xmm8
pop r9
lea rsi, [0x2edd84e60]
lea rbp, [rsp + 0x60]
call sym.BringDouble.dll_SetAboutTabbedOpt
lea r13, [rsi + 0x10]
mov r12, rbp
push r14
emms
nop
rcr r14, 0x13
push rbx
emms
mov r14w, bx
push rax
pcmpgtb mm4, mm3
pop rax
nop
or ebx, r14d
pop rbx
pcmpgtw mm5, mm0
rcl r14d, 0xe
emms
pop r14
call sym.BringDouble.dll_ConnectionsSetupFrom
mov al, byte [rsi]
mov byte [r12], al
cmp r13b, al
jne 0x2edd843f3
push r9
nop
push r11
psrld mm0, 0x55
inc r11
pop r11
comiss xmm11, xmm5
pop r9
jmp 0x2edd84406
push r15
dec r15d
push r14
minps xmm3, xmm14
not r14
pop r14
nop
pop r15
push rbx
dec rbx
push r12
not r12w
shl bx, 0x13
pop r12
nop
pop rbx
mov al, byte [rsi + 0x10]
inc rsi
inc r12
mov byte [r12 + 0xf], al
cmp rsi, r13
jne 0x2edd84398
push rcx
inc ecx
subss xmm9, xmm8
push r15
psraw mm7, 0x59
pop r15
emms
sub rcx, 0xe
pop rcx
call fcn.2edd8413b
movabs rax, 0x6d00710048
mov qword [rsp + 0x50], rax
push r10
rcr r10d, 0x17
push rdx
and dl, r10b
push r14
rcl r10b, 8
pop r14
rcr dx, 0xc
pop rdx
punpcklbw mm5, mm7
pop r10
mov dword [rsp + 0x4a], 0x750030
mov word [rsp + 0x4e], 0
push r10
subss xmm15, xmm3
push r15
sub r15w, r10w
push rcx
rcr rcx, 0x13
push r11
psrlq mm2, 0x19
push r12
emms
pop r12
emms
pop r11
pcmpeqw mm3, mm1
pop rcx
xchg r15w, r10w
pop r15
nop
pop r10
lea rax, [rsp + 0x4a]
lea rsi, [rsp + 0x50]
mov rdx, rax
mov rcx, rsi
mov qword [rsp + 0x28], rax
call sub.msvcrt.dll_wcscmp
test eax, eax
jne 0x2edd844eb
push r13
psrlw mm2, 0x23
psrld mm7, 0x1c
push r8
emms
pop r8
nop
addps xmm11, xmm6
pop r13
jmp 0x2edd84526
push r12
emms
neg r12w
push r9
shr r9d, 7
ror r12d, 0x15
push r14
emms
andnps xmm0, xmm5
push rdx
psrlq mm7, 0x2f
movhlps xmm10, xmm0
pop rdx
psraw mm1, 0x2e
paddusw mm1, mm6
pop r14
psrlw mm5, 0x2e
psllq mm4, 0x3b
pop r9
emms
nop
pop r12
cmp r13, r12
jne 0x2edd84554
push r9
psrlw mm3, 0x43
push r8
pmulhuw mm0, mm7
sar r8w, 3
pop r8
emms
pop r9
jmp 0x2edd8456b
push r10
not r10b
push r13
and r10b, r13b
not r13w
pop r13
subss xmm1, xmm13
pop r10
push r11
shr r11, 0x14
push rbx
nop
nop
pop rbx
packsswb mm6, mm5
pop r11
lea r13, [rsp + 0x70]
test ebx, ebx
je 0x2edd84e1c
push r12
pslld mm2, 0x1a
nop
dec r12d
por mm7, mm1
subps xmm7, xmm6
push r10
psrad mm2, 0x33
movlhps xmm1, xmm9
sar r10b, 0x16
nop
push r13
paddw mm3, mm4
pcmpgtd mm5, mm1
not r12
push rcx
punpcklbw mm7, mm3
ror r13d, 8
push r11
pcmpgtd mm1, mm4
pop r11
mov r12b, r10b
inc r10
pop rcx
nop
shl r12w, 0x17
inc r12d
pop r13
inc r12
movlhps xmm4, xmm15
inc r12
comiss xmm4, xmm6
pop r10
psrld mm0, 0x1f
psllq mm6, 0x3e
nop
psrlq mm7, 0x4a
sar r12, 0xd
pop r12
xor r12d, r12d
push rax
psrlw mm3, 0xc
push r12
nop
push r13
rol r13b, 0x10
push rbx
emms
push r10
xadd r10b, al
push rdx
movhlps xmm11, xmm10
push rcx
comiss xmm12, xmm5
pop rcx
comiss xmm13, xmm14
pop rdx
nop
pop r10
nop
pop rbx
xor ax, r13w
pop r13
emms
pop r12
psrlq mm1, 0x56
pop rax
mov al, byte [r13 + r12]
mov byte [rsi + r12], al
push r13
mov r13, 3
push r14
psrlw mm0, 0x2b
push rdx
emms
push r15
packsswb mm0, mm5
push r9
nop
push r12
maxss xmm10, xmm0
push r13
psrlq mm2, 0x5a
push r8
pmullw mm5, mm0
pop r8
xor r14, rdx
pop r13
sub r12b, r14b
pop r12
psrlq mm4, 4
pop r9
psrld mm5, 0x38
pop r15
addps xmm14, xmm15
pop rdx
psrld mm1, 0xb
pop r14
dec r13
jne 0x2edd84644
pop r13
call fcn.2edd83e6f
inc r12
cmp r12, 0x10
jne 0x2edd845f7
push rax
psrlw mm3, 0x62
push r11
nop
push rdx
movlhps xmm0, xmm5
push r14
dec r11
push rcx
psrld mm7, 0x33
push r13
dec rdx
pop r13
nop
pop rcx
neg r11d
pop r14
shl ax, 0x16
pop rdx
emms
pop r11
nop
pop rax
push r15
psllq mm4, 0x37
psrad mm4, 0x1c
not r15b
push r14
dec r15
psrld mm0, 0x3e
emms
push r13
psrld mm2, 0x21
psraw mm0, 0x34
mov r15w, r13w
pop r13
test r15w, r14w
nop
emms
pop r14
nop
psrld mm6, 0x6b
punpcklwd mm5, mm7
pop r15
xor eax, eax
push rbx
mov rbx, 2
push r9
push r8
pop r8
pop r9
dec rbx
jne 0x2edd84717
pop rbx
mov edx, dword [rsi + rax]
xor edx, dword [rbp + rax]
mov dword [rsi + rax], edx
add rax, 4
cmp rax, 0x10
jne 0x2edd8470f
cmp r13b, 0x30
jne 0x2edd84748
push r9
por mm5, mm1
pop r9
jmp 0x2edd8474d
push r8
nop
pop r8
push rax
emms
pop rax
call fcn.2edd83dd1
mov r12d, 0x10
push rdx
psraw mm1, 0x1b
psraw mm4, 0x5b
neg rdx
dec edx
sbb edx, 0x14
pmaddwd mm5, mm3
punpckhwd mm3, mm4
nop
rcpss xmm3, xmm8
emms
pcmpgtw mm2, mm7
psubsb mm4, mm5
pop rdx
call sym.BringDouble.dll_ClientInitiateDateDeregister
mov eax, dword [rsp + 0x54]
mov edx, dword [rsp + 0x5c]
mov r8d, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x58]
add r8d, eax
add ecx, edx
rol eax, 5
rol edx, 8
xor eax, r8d
rol r8d, 0x10
xor edx, ecx
add ecx, eax
rol eax, 7
add r8d, edx
rol edx, 0xd
xor eax, ecx
xor edx, r8d
rol ecx, 0x10
mov dword [rsp + 0x50], r8d
mov dword [rsp + 0x5c], edx
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x58], ecx
dec r12d
jne 0x2edd8475c
push r12
psrad mm6, 0x12
neg r12w
pslld mm6, 8
emms
nop
push r14
emms
emms
emms
rol r12b, 8
neg r14w
pop r14
neg r12b
rol r12w, 4
punpckhwd mm7, mm1
pcmpeqd mm7, mm0
psraw mm3, 0x62
dec r12d
pop r12
mov edx, 4
mov ecx, 2
call sub.msvcrt.dll_calloc
mov rcx, rax
push r15
nop
push r14
psrlw mm0, 0x5c
emms
pop r14
psrlq mm6, 0x59
pop r15
mov edx, 0x48
call sub.msvcrt.dll_realloc
mov rcx, rax
xor eax, eax
push rax
pmullw mm0, mm3
addss xmm2, xmm14
push r11
addss xmm10, xmm6
psllq mm7, 0x4c
push rbx
dec r11
nop
push r13
ror rax, 0x13
pandn mm3, mm0
push r8
emms
pmaxsw mm2, mm4
pop r8
sbb rbx, 0x17
adc r11d, eax
pop r13
psrlw mm4, 0x66
emms
pop rbx
andps xmm6, xmm14
pminsw mm0, mm7
pop r11
andps xmm2, xmm6
inc rax
pop rax
xor dword [rcx + rax*4], 0x99
cmp r13b, 3
jne 0x2edd848a3
push r13
emms
pop r13
jmp 0x2edd848ab
push r15
psllq mm4, 0x63
pop r15
push r8
psraw mm7, 0x40
pop r8
test rax, rax
jne 0x2edd848bf
mov eax, 1
jmp 0x2edd84843
call sub.msvcrt.dll_free
push r15
nop
push r12
psrlq mm3, 0x24
push r14
emms
push r10
nop
push rbx
emms
push r9
pcmpgtd mm1, mm2
pop r9
emms
pop rbx
nop
pop r10
test r15, r14
pop r14
not r15w
pop r12
pcmpeqd mm0, mm6
pop r15
xor r12d, r12d
cmp r13b, cl
jne 0x2edd84906
push r14
not r14w
pop r14
jmp 0x2edd8490d
push r15
ucomiss xmm7, xmm6
pop r15
push r11
psrad mm5, 0x5e
pop r11
call fcn.2edd83a17
mov eax, dword [rsi + r12]
xor eax, dword [rbp + r12]
mov dword [rsi + r12], eax
add r12, 4
cmp r12, 0x10
jne 0x2edd848f7
mov dword [rsp + 0x45], 0x5d5d534e
mov byte [rsp + 0x49], 0
push r15
shl r15, 0x16
psrlq mm2, 0x3c
xorps xmm4, xmm14
nop
psraw mm2, 0x35
mulps xmm6, xmm2
emms
pop r15
mov dword [rsp + 0x4a], 0x2d5e237a
mov word [rsp + 0x4e], 0x6e
push rcx
psrlw mm1, 0x32
nop
emms
push r13
psraw mm2, 0x40
nop
shl rcx, 0x15
push rax
nop
and cx, ax
push r9
packsswb mm6, mm3
movlhps xmm14, xmm2
pop r9
dec r13
sbb ecx, r13d
emms
pop rax
not rcx
nop
pop r13
andnps xmm0, xmm4
rcpss xmm11, xmm10
pop rcx
lea r12, [rsp + 0x45]
mov rdx, qword [rsp + 0x28]
mov rcx, r12
call sub.msvcrt.dll__mbscmp
test eax, eax
jne 0x2edd84a21
mov rax, r12
lea rdx, [rsp + 0x49]
push r15
psraw mm4, 0x52
subps xmm11, xmm10
emms
push rbx
psllq mm5, 0x20
adc rbx, r15
push r13
andnps xmm7, xmm11
pop r13
psrld mm3, 0xc
pslld mm4, 0x61
pop rbx
mov r15w, 0x14
nop
psrlw mm6, 0x5e
pop r15
xor byte [rax], 0x53
push rax
mov rax, 2
push r14
dec r14
psllq mm4, 0x43
push rbx
pxor mm0, mm4
pop rbx
nop
psllq mm7, 0x29
pop r14
dec rax
jne 0x2edd849fc
pop rax
inc rax
cmp rax, rdx
jne 0x2edd849c0
jmp 0x2edd84a60
cmp r13w, r14w
jne 0x2edd84a3d
push r11
subss xmm6, xmm7
push rdx
emms
psllq mm2, 0x60
pop rdx
psrlq mm5, 0x60
pop r11
jmp 0x2edd84a4c
push r9
nop
push rbx
nop
not r9
pop rbx
psrlq mm6, 0x55
pop r9
push r14
emms
push r12
not r12d
rcl r12w, 0x17
pop r12
emms
pop r14
push r15
not r15d
push r8
nop
xor r15w, r8w
push rax
emms
shr r15, 3
sub eax, 0xc
pop rax
inc r8
pslld mm3, 0x5d
pop r8
mov r15b, 0xc
pop r15
mov r14d, 0x10
cmp ebx, r14d
cmovbe r14, rbx
cmp r13b, al
jne 0x2edd84abd
push r9
nop
push r11
psrld mm0, 0x55
inc r11
pop r11
comiss xmm11, xmm5
pop r9
jmp 0x2edd84ad0
push r15
dec r15d
push r14
minps xmm3, xmm14
not r14
pop r14
nop
pop r15
push rbx
dec rbx
push r12
not r12w
shl bx, 0x13
pop r12
nop
pop rbx
xor r15d, r15d
push rbx
ror bl, 0xf
nop
push rax
pslld mm4, 0x3f
dec ebx
push r8
addps xmm11, xmm14
psrad mm6, 0x37
push r13
punpckhbw mm6, mm1
sar al, 0x13
pop r13
maxps xmm4, xmm2
xadd ax, bx
pop r8
nop
mulss xmm5, xmm8
pop rax
shr rbx, 4
not rbx
pop rbx
mov al, byte [rsi + r15]
xor byte [rdi + r15], al
push r14
emms
nop
rcr r14, 0x13
push rbx
emms
mov r14w, bx
push rax
pcmpgtb mm4, mm3
pop rax
nop
or ebx, r14d
pop rbx
pcmpgtw mm5, mm0
rcl r14d, 0xe
emms
pop r14
call sym.BringDouble.dll_ConnectionsSetupFrom
inc r15
cmp r15d, r14d
jb 0x2edd84ae5
push r9
emms
nop
push r8
nop
nop
push r11
mulps xmm4, xmm12
psraw mm1, 0x51
push rbx
subps xmm12, xmm9
and r9d, ebx
push rcx
emms
minps xmm9, xmm5
pop rcx
psrad mm5, 0x16
nop
pop rbx
adc r9, r8
pmaddwd mm3, mm4
pop r11
xor r9, r8
dec r9d
pop r8
por mm0, mm2
mulps xmm0, xmm1
pop r9
sub ebx, r14d
push rax
rcpss xmm0, xmm7
neg rax
neg ax
not rax
push r15
psrad mm6, 0xa
andnps xmm15, xmm1
psubusw mm3, mm7
nop
pop r15
ucomiss xmm4, xmm11
nop
psubusw mm1, mm2
emms
pop rax
call fcn.2edd83fa7
add rdi, r14
cmp r13b, 5
jne 0x2edd84be1
push r10
inc r10d
pop r10
jmp 0x2edd84be9
push r13
sar r13b, 0xd
pop r13
push r12
pxor mm7, mm4
pop r12
lea rax, [rbp - 0x10]
mov r14, rbp
lea r15, [rsp + 0x48]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x4f]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x4a], 0x7e257e5e
mov word [rsp + 0x4e], 0x77
push r11
nop
emms
movaps xmm8, xmm9
pcmpgtd mm5, mm2
paddw mm1, mm2
andps xmm9, xmm8
nop
pop r11
mov dword [rsp + 0x45], 0x577026
push r15
inc r15d
push r13
pmaddwd mm0, mm1
push r11
test r11w, r13w
push rdx
dec r13d
pop rdx
packsswb mm3, mm1
pop r11
emms
pop r13
paddusw mm7, mm0
pop r15
mov rcx, qword [rsp + 0x28]
mov rdx, r12
call sub.msvcrt.dll__mbscmp
test eax, eax
jne 0x2edd84cce
mov rax, qword [rsp + 0x28]
cmp r13, 0x23
jne 0x2edd84c88
push rdx
ror dl, 0x14
push r9
psubusw mm4, mm6
emms
pop r9
nop
pop rdx
jmp 0x2edd84c98
push r10
pslld mm5, 6
push rbx
emms
paddw mm3, mm0
pop rbx
nop
pop r10
push r15
paddb mm7, mm1
push r14
emms
nop
pop r14
nop
pop r15
xor byte [rax], 0x57
push r14
movhlps xmm14, xmm13
push rbx
cmp ebx, r14d
psrld mm4, 9
pop rbx
andnps xmm14, xmm5
pop r14
inc rax
cmp qword [rsp + 0x38], rax
jne 0x2edd84c71
jmp 0x2edd84d6c
mov rax, r12
push rdx
punpckhbw mm3, mm5
push r8
dec r8d
push rax
pcmpgtd mm2, mm1
push rcx
dec rdx
pop rcx
packssdw mm2, mm5
pop rax
addss xmm8, xmm6
pop r8
paddb mm0, mm6
pop rdx
xor byte [rax], 0x14
push rcx
nop
not cx
pminsw mm3, mm1
dec ecx
paddw mm5, mm1
push r8
rcpps xmm10, xmm5
movaps xmm5, xmm12
subps xmm8, xmm1
emms
push rax
maxps xmm14, xmm4
psubsb mm4, mm2
shl r8d, 0xe
push r10
rol r8d, 7
shl r10d, 0x13
push r13
or r8d, r10d
pop r13
nop
and r10d, r8d
pop r10
psllq mm3, 0x35
addps xmm12, xmm9
psadbw mm5, mm3
pop rax
punpckhbw mm0, mm3
psrld mm3, 0x5d
dec r8d
psrld mm4, 5
pop r8
psrlw mm4, 0x2a
nop
comiss xmm13, xmm0
psrlq mm3, 0x19
nop
pop rcx
inc rax
cmp rax, r15
jne 0x2edd84cd1
cmp r13w, dx
jne 0x2edd84d85
push r8
emms
push rax
xchg r8, rax
cmp rax, r8
pop rax
psrad mm7, 0x69
pop r8
jmp 0x2edd84d9b
push r10
sar r10w, 0x17
push rcx
paddsb mm2, mm3
sbb r10w, cx
pop rcx
mulps xmm14, xmm1
pop r10
push rbx
movhlps xmm13, xmm9
push r15
xorps xmm5, xmm8
emms
pop r15
dec ebx
pop rbx
inc byte [r14 + 0x1f]
jne 0x2edd84dd9
push r12
mov r12, 1
push r15
push r13
pop r13
pop r15
dec r12
jne 0x2edd84dbc
pop r12
dec r14
cmp qword [rsp + 0x30], r14
jne 0x2edd84c0b
push r11
movlhps xmm2, xmm7
rcpps xmm4, xmm14
nop
inc r11
shl r11b, 0x13
push r10
emms
shl r10b, 0x17
pcmpgtw mm7, mm1
shl r11, 0x17
punpckhbw mm4, mm3
pop r10
psllq mm2, 0x4b
pslld mm0, 0x29
ucomiss xmm13, xmm12
dec r11d
sub r11, 0x10
psraw mm1, 0x44
pop r11
jmp 0x2edd8457f
cmp r13, 1
jne 0x2edd84e33
push r9
addps xmm9, xmm1
pop r9
jmp 0x2edd84e3b
push r11
shr r11b, 0x10
pop r11
push r13
paddw mm5, mm1
pop r13
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret