Function at 0x14006f870
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rax - 0x48]
sub rsp, 0x120
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1401351c0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov esi, r9d
movsd qword [rsp + 0x58], xmm2
movaps xmm9, xmm1
mov rdi, qword [rbp + 0x88]
mov qword [rsp + 0x70], rdi
call fcn.14000e330
movss xmm8, dword [rax + 8]
movss xmm10, dword [0x1400de194]
mulss xmm8, xmm10
movss dword [rsp + 0x4c], xmm8
call fcn.14000e330
movss xmm7, dword [rax + 0xc]
mulss xmm7, xmm10
movss dword [rsp + 0x48], xmm7
xorps xmm6, xmm6
xorps xmm1, xmm1
movss dword [rsp + 0x40], xmm1
movss dword [rsp + 0x44], xmm1
movsd xmm11, qword [0x1400e48d0]
mov r14d, reloc.WS2_32.dll_ntohs
mov rax, qword [0x140135a20]
cmp byte [rax + 0xc], 0
je 0x14006fe1c
mov byte [rsp + 0x20], 0xa2
mov byte [rsp + 0x21], 0x6a
mov byte [rsp + 0x22], 0x64
mov byte [rsp + 0x23], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x24], 0x61
mov byte [rsp + 0x25], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x26], Ordinal_41
mov byte [rsp + 0x27], 0x5b
mov byte [rsp + 0x28], WSAGetLastError
mov byte [rsp + 0x29], 0x69
mov byte [rsp + 0x2a], 0x78
mov byte [rsp + 0x2b], 0x65
mov byte [rsp + 0x2c], 0x7d
mov byte [rsp + 0x2d], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x2e], 0x59
mov byte [rsp + 0x2f], 0x68
mov byte [rsp + 0x30], 0x66
mov byte [rsp + 0x31], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x32], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x33], reloc.WS2_32.dll_recv
movzx eax, byte [rsp + 0x20]
xor r9d, r9d
movabs r11, 0xf6c4a187e26724ff
mov r10, r11
lea rax, [rsp + 0x20]
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea rdx, [rsp + 0x20]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, r14d
cmp rcx, r14
cmovae rcx, r14
shl cl, 2
mov rax, r11
shr rax, cl
and al, r14b
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rsp + r9 + 0x20], al
inc r9
cmp r9, 0x14
jb 0x14006f9e0
lea rcx, [rsp + 0x20]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x14006fa27
mov r8, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], r14
jbe 0x14006fa40
mov rcx, qword [rdi]
cmp r8, rax
jne 0x14006fe1c
lea rdx, [rsp + 0x20]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14006fe1c
mov rbx, qword [rbp + 0x70]
movups xmm2, xmmword [rbx]
movsd xmm1, qword [rbx + 0x10]
movaps xmm0, xmm2
unpckhpd xmm0, xmm2
mov rax, qword [rbp + 0x80]
subsd xmm0, qword [rax + 8]
subsd xmm2, qword [rax]
subsd xmm1, qword [rax + 0x10]
mulsd xmm2, xmm2
mulsd xmm0, xmm0
addsd xmm2, xmm0
mulsd xmm1, xmm1
addsd xmm2, xmm1
xorps xmm3, xmm3
cvtsd2ss xmm3, xmm2
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x14006faaf
xorps xmm0, xmm0
sqrtss xmm0, xmm3
jmp 0x14006fab7
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
divsd xmm2, qword [0x1400e47c0]
mov rax, qword [rbp + 0x78]
movups xmm8, xmmword [rax]
movsd xmm6, qword [rax + 0x10]
movups xmm7, xmmword [rbx]
movss xmm0, dword [0x1400e5efc]
andps xmm0, xmmword [0x1400dfc80]
cvtpd2ps xmm2, xmm2
divss xmm2, xmm0
cvtps2pd xmm5, xmm2
movss xmm1, dword [0x1400e5f08]
andps xmm1, xmmword [0x1400dfc80]
mulss xmm1, xmm10
mulss xmm2, dword [0x1400de1b4]
mulss xmm1, xmm2
cvtps2pd xmm0, xmm1
mulsd xmm6, xmm5
movsd xmm1, qword [0x1400e5ed0]
mulsd xmm6, xmm1
addsd xmm6, qword [rbx + 0x10]
addsd xmm0, xmm6
movsd qword [rsp + 0x50], xmm0
movaps xmm2, xmm8
unpckhpd xmm2, xmm8
mulsd xmm2, xmm5
mulsd xmm2, xmm1
movaps xmm0, xmm7
unpckhpd xmm0, xmm7
addsd xmm2, xmm0
movaps xmmword [rsp + 0x60], xmm2
mulsd xmm8, xmm5
mulsd xmm8, xmm1
addsd xmm8, xmm7
movaps xmmword [rsp + 0x20], xmm8
movsd xmm2, qword [0x140135d88]
movsd xmm1, qword [0x1400e5e98]
mulsd xmm2, xmm1
movsd xmm0, qword [0x1400e5ed8]
divsd xmm2, xmm0
movsd xmm7, qword [0x140135d90]
mulsd xmm7, xmm1
divsd xmm7, xmm0
movsd xmm8, qword [0x140135d98]
mulsd xmm8, xmm1
divsd xmm8, xmm0
cvtpd2ps xmm6, xmm2
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
xorps xmm10, xmm10
cvtss2sd xmm10, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
xorps xmm9, xmm9
cvtss2sd xmm9, xmm0
cvtpd2ps xmm6, xmm7
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
xorps xmm7, xmm7
cvtss2sd xmm7, xmm0
movsd qword [rsp + 0x58], xmm7
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
xorps xmm15, xmm15
cvtss2sd xmm15, xmm0
cvtpd2ps xmm6, xmm8
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
xorps xmm8, xmm8
cvtss2sd xmm8, xmm0
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
xorps xmm14, xmm14
cvtss2sd xmm14, xmm0
movaps xmm12, xmm8
mulsd xmm12, xmm10
cvtpd2ps xmm0, xmm10
cvtps2pd xmm4, xmm0
movaps xmm1, xmm7
mulsd xmm1, xmm9
cvtpd2ps xmm0, xmm1
cvtps2pd xmm3, xmm0
movaps xmm2, xmm8
xorps xmm2, xmm11
mulsd xmm2, xmm9
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm2
cvtps2pd xmm13, xmm0
movaps xmm1, xmm7
mulsd xmm1, xmm12
movaps xmm0, xmm14
mulsd xmm0, xmm15
addsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm11, xmm0
movsd xmm5, qword [rsp + 0x50]
subsd xmm5, qword [0x140135d80]
movsd qword [rsp + 0x50], xmm5
movaps xmm2, xmmword [rsp + 0x60]
subsd xmm2, qword [0x140135d78]
movaps xmmword [rsp + 0x60], xmm2
movaps xmm6, xmmword [rsp + 0x20]
subsd xmm6, qword [0x140135d70]
movaps xmmword [rsp + 0x20], xmm6
movaps xmm0, xmm15
mulsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
cvtps2pd xmm1, xmm0
mulsd xmm1, xmm6
mulsd xmm3, xmm2
addsd xmm1, xmm3
movaps xmm0, xmm5
mulsd xmm0, xmm4
addsd xmm1, xmm0
movsd xmm7, qword [0x1400dfd78]
maxsd xmm7, xmm1
mov rbx, qword [0x140135a60]
xorps xmm6, xmm6
cvtsi2ss xmm6, dword [rbx + 0xc]
mulss xmm6, dword [0x1400de194]
movss xmm0, dword [0x140135da0]
mulss xmm0, dword [0x1400e3afc]
divss xmm0, dword [0x1400dfd90]
call sub.api_ms_win_crt_math_l1_1_0.dll_tanf
movaps xmm1, xmm6
divss xmm1, xmm0
cvtps2pd xmm5, xmm1
movaps xmm2, xmm14
mulsd xmm2, xmm10
movaps xmm0, xmm14
mulsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
cvtps2pd xmm4, xmm0
movaps xmm1, xmm8
mulsd xmm1, xmm15
movsd xmm9, qword [rsp + 0x58]
movaps xmm0, xmm9
mulsd xmm0, xmm2
subsd xmm1, xmm0
cvtpd2ps xmm0, xmm1
cvtps2pd xmm3, xmm0
movaps xmm10, xmmword [rsp + 0x60]
mulsd xmm3, xmm10
mulsd xmm8, xmm9
movaps xmm0, xmm15
mulsd xmm0, xmm2
addsd xmm8, xmm0
cvtpd2ps xmm0, xmm8
cvtps2pd xmm1, xmm0
movaps xmm8, xmmword [rsp + 0x20]
mulsd xmm1, xmm8
subsd xmm3, xmm1
mulsd xmm4, qword [rsp + 0x50]
addsd xmm3, xmm4
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [rbx + 0x10]
mulss xmm0, dword [0x1400de194]
cvtps2pd xmm4, xmm0
movaps xmm1, xmm5
mulsd xmm1, xmm3
divsd xmm1, xmm7
subsd xmm4, xmm1
mulsd xmm15, xmm12
mulsd xmm14, xmm9
subsd xmm15, xmm14
cvtpd2ps xmm0, xmm15
cvtps2pd xmm9, xmm0
mulsd xmm9, xmm8
mulsd xmm11, xmm10
addsd xmm9, xmm11
mulsd xmm13, qword [rsp + 0x50]
addsd xmm9, xmm13
mulsd xmm9, xmm5
divsd xmm9, xmm7
cvtps2pd xmm0, xmm6
addsd xmm9, xmm0
xorps xmm6, xmm6
movss xmm7, dword [rsp + 0x48]
movss xmm8, dword [rsp + 0x4c]
movsd xmm11, qword [0x1400e48d0]
jmp 0x14006fe22
movsd xmm4, qword [rsp + 0x58]
xorps xmm3, xmm3
ucomisd xmm9, xmm3
jp 0x14006fe32
je 0x14006feb3
xorps xmm2, xmm2
cvtss2sd xmm2, xmm8
comisd xmm9, xmm2
jbe 0x14006fe7e
movaps xmm0, xmm2
subsd xmm0, xmm9
xorps xmm0, xmm11
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [rsp + 0x40], xmm1
addss xmm1, xmm8
movaps xmm0, xmm8
addss xmm0, xmm8
comiss xmm1, xmm0
jbe 0x14006fe7e
movss dword [rsp + 0x40], xmm6
comisd xmm2, xmm9
jbe 0x14006feb3
subsd xmm9, xmm2
xorps xmm10, xmm10
cvtsd2ss xmm10, xmm9
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm10, xmm0
movaps xmm1, xmm10
addss xmm1, xmm8
comiss xmm6, xmm1
jbe 0x14006feba
movaps xmm10, xmm6
jmp 0x14006feba
movss xmm10, dword [rsp + 0x40]
ucomisd xmm4, xmm3
jp 0x14006fec2
je 0x14006ff36
xorps xmm2, xmm2
cvtss2sd xmm2, xmm7
comisd xmm4, xmm2
jbe 0x14006ff08
movaps xmm0, xmm2
subsd xmm0, xmm4
xorps xmm0, xmm11
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm1, xmm0
movss dword [rsp + 0x44], xmm1
addss xmm1, xmm7
movaps xmm0, xmm7
addss xmm0, xmm7
comiss xmm1, xmm0
jbe 0x14006ff08
movss dword [rsp + 0x44], xmm6
comisd xmm2, xmm4
jbe 0x14006ff36
subsd xmm4, xmm2
cvtpd2ps xmm9, xmm4
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm9, xmm0
movaps xmm1, xmm9
addss xmm1, xmm7
comiss xmm6, xmm1
jbe 0x14006ff3d
movaps xmm9, xmm6
jmp 0x14006ff3d
movss xmm9, dword [rsp + 0x44]
movaps xmm7, xmm10
movss xmm0, dword [0x1400de198]
subss xmm7, xmm0
addss xmm10, xmm0
movaps xmm8, xmm9
subss xmm8, xmm0
addss xmm9, xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x1400e5ef8]
subss xmm10, xmm7
mulss xmm10, xmm0
addss xmm10, xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x1400e5ef8]
subss xmm9, xmm8
mulss xmm9, xmm0
addss xmm9, xmm8
cvttss2si eax, xmm9
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
cvttss2si eax, xmm10
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
call fcn.140001fb0
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14006fffc
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14006fff7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140070062
mov rcx, r8
call fcn.1400d8ddc
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], r14
mov byte [rdi], 0
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.1400d8d80
lea r11, [rsp + 0x120]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3