Function at 0x1400620e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x14012d080]
xor rax, rsp
mov qword [rbp - 8], rax
mov rdi, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
lea rsi, [rbp + 0x18]
movabs r14, 0xff00ff00ff00ff00
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rsi
mov rax, qword [rsi]
xor rax, r14
mov qword [rbp - 0x20], rax
xor ebx, ebx
mov qword [rsi], rbx
mov rax, qword [0x140369b08]
test rax, rax
je 0x1400624d2
mov word [rcx + 2], 1
mov dword [rcx + 4], edx
call rax
test rax, rax
jne 0x140062212
cmp word [rdi + 2], 1
jne 0x140062212
mov byte [rbp - 0x50], 4
mov byte [rbp - 0x4f], 0x33
mov byte [rbp - 0x4e], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp - 0x4d], 0x35
mov byte [rbp - 0x4c], Ordinal_45
mov byte [rbp - 0x4b], Ordinal_50
mov byte [rbp - 0x4a], WSAGetLastError
mov byte [rbp - 0x49], Ordinal_41
mov byte [rbp - 0x48], Ordinal_45
mov byte [rbp - 0x47], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp - 0x46], 0x61
mov byte [rbp - 0x45], Ordinal_41
mov byte [rbp - 0x44], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp - 0x43], Ordinal_60
mov byte [rbp - 0x42], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp - 0x41], Ordinal_60
mov byte [rbp - 0x40], 0x34
mov byte [rbp - 0x3f], 0x7f
mov byte [rbp - 0x3e], 0x53
mov byte [rbp - 0x3d], 0x53
movzx eax, byte [rbp - 0x50]
movabs r11, 0xc4adbf5826b64f44
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
nop
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x14
jb 0x1400621d0
lea rcx, [rbp - 0x50]
jmp 0x1400624cd
movzx eax, word [rdi + 2]
cmp byte [rdi], 0
je 0x140062226
test ax, ax
sete al
jmp 0x1400624d4
mov ecx, eax
sub ecx, 2
je 0x140062422
sub ecx, 1
je 0x140062352
cmp ecx, 1
jne 0x1400624d2
mov byte [rbp - 0x50], 0xa9
mov byte [rbp - 0x4f], 0x85
mov byte [rbp - 0x4e], 0x93
mov byte [rbp - 0x4d], Ordinal_143
mov byte [rbp - 0x4c], 0x80
mov byte [rbp - 0x4b], 0x86
mov byte [rbp - 0x4a], 0x86
mov byte [rbp - 0x49], 0xc0
mov byte [rbp - 0x48], 0x80
mov byte [rbp - 0x47], 0x90
mov byte [rbp - 0x46], 0x86
mov byte [rbp - 0x45], 0x82
mov byte [rbp - 0x44], 0x9c
mov byte [rbp - 0x43], Ordinal_143
mov byte [rbp - 0x42], 0x93
mov byte [rbp - 0x41], 0x92
mov byte [rbp - 0x40], Ordinal_211
mov byte [rbp - 0x3f], __WSAFDIsSet
mov byte [rbp - 0x3e], 0x85
mov byte [rbp - 0x3d], 0x9a
mov byte [rbp - 0x3c], Ordinal_143
mov byte [rbp - 0x3b], 0x9e
mov byte [rbp - 0x3a], 0x86
mov byte [rbp - 0x39], 0x99
mov byte [rbp - 0x38], 0x99
mov byte [rbp - 0x37], 0x9b
mov byte [rbp - 0x36], Ordinal_217
mov byte [rbp - 0x35], 0x82
mov byte [rbp - 0x34], 0x60
mov byte [rbp - 0x33], 0x66
mov byte [rbp - 0x32], 0x78
mov byte [rbp - 0x31], Ordinal_45
mov byte [rbp - 0x30], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x2f], 0x64
mov byte [rbp - 0x2e], 0x25
mov byte [rbp - 0x2d], 0x6b
mov byte [rbp - 0x2c], 0x7e
mov byte [rbp - 0x2b], 0x66
mov byte [rbp - 0x2a], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x29], 0x65
mov byte [rbp - 0x28], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x27], Ordinal_45
mov byte [rbp - 0x26], 2
mov byte [rbp - 0x25], cl
movzx eax, byte [rbp - 0x50]
movabs r11, 0xfe95e68ab86483e4
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r8 + r10]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x2c
jb 0x140062310
lea rcx, [rbp - 0x50]
jmp 0x1400624cd
mov byte [rbp - 0x50], 0x93
mov byte [rbp - 0x4f], 0xae
mov byte [rbp - 0x4e], 0xad
mov byte [rbp - 0x4d], 0xb5
mov byte [rbp - 0x4c], 0xb0
mov byte [rbp - 0x4b], 0xa9
mov byte [rbp - 0x4a], 0xba
mov byte [rbp - 0x49], 0xb2
mov byte [rbp - 0x48], 0xe8
mov byte [rbp - 0x47], 0xac
mov byte [rbp - 0x46], 0xbb
mov byte [rbp - 0x45], 0xb8
mov byte [rbp - 0x44], 0xb1
mov byte [rbp - 0x43], 0xb4
mov byte [rbp - 0x42], 0xfc
mov byte [rbp - 0x41], 0xbe
mov byte [rbp - 0x40], 0xb1
mov byte [rbp - 0x3f], 0xb2
mov byte [rbp - 0x3e], 0xb2
mov byte [rbp - 0x3d], 0xa5
mov byte [rbp - 0x3c], 0xa0
mov byte [rbp - 0x3b], 0xb5
mov byte [rbp - 0x3a], 0xf0
mov byte [rbp - 0x39], Ordinal_211
mov byte [rbp - 0x38], Ordinal_217
movzx eax, byte [rbp - 0x50]
movabs r11, 0xd8c0c30662b896c6
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x19
jb 0x1400623e0
lea rcx, [rbp - 0x50]
jmp 0x1400624cd
mov byte [rbp - 0x50], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp - 0x4f], 0xfa
mov byte [rbp - 0x4e], 0xed
mov byte [rbp - 0x4d], 0xf4
mov byte [rbp - 0x4c], Ordinal_200
mov byte [rbp - 0x4b], 0xc0
mov byte [rbp - 0x4a], 0xcd
mov byte [rbp - 0x49], 0x86
mov byte [rbp - 0x48], Ordinal_211
mov byte [rbp - 0x47], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp - 0x46], 0xcd
mov byte [rbp - 0x45], reloc.WLDAP32.dll_Ordinal_200
mov byte [rbp - 0x44], Ordinal_200
mov byte [rbp - 0x43], 0xde
mov byte [rbp - 0x42], 0xda
mov byte [rbp - 0x41], 0x89
mov byte [rbp - 0x40], 0xaa
mov byte [rbp - 0x3f], 0xa4
movzx eax, byte [rbp - 0x50]
movabs r11, 0xc34ac4e55b8aa59c
mov r10, r11
lea rax, [rbp - 0x50]
sub r10, rax
mov r9d, reloc.WS2_32.dll_ntohs
nop dword [rax + rax]
lea r8, [rbp - 0x50]
add r8, rbx
mov rcx, rbx
and ecx, r9d
cmp rcx, r9
cmovae rcx, r9
shl cl, 2
mov rdx, r11
shr rdx, cl
and dl, r9b
lea eax, [r10 + r8]
xor dl, al
movzx eax, byte [r8]
xor dl, al
mov byte [rbp + rbx - 0x50], dl
inc rbx
cmp rbx, 0x12
jb 0x140062490
lea rcx, [rbp - 0x50]
call fcn.140017ec0
xor al, al
mov rcx, qword [rbp - 0x20]
xor rcx, r14
mov qword [rsi], rcx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400f3550
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret