Function at 0x14009a8ac
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov rax, qword [0x1401a9600]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rsi, rcx
xor r13d, r13d
mov dword [rbp - 0x59], r13d
lea r15d, [r13 + 0xa]
mov dword [rbp - 0x49], 0x2629340a
mov dword [rbp - 0x45], 0xf3a0811
mov dword [rbp - 0x41], 0xf030c12
mov byte [rbp - 0x3d], 0xec
xorps xmm0, xmm0
movups xmmword [rbp - 0x3c], xmm0
mov qword [rbp + 0x27], r13
mov rax, qword [rbp + 0x27]
mov rcx, qword [rbp + 0x27]
mov rax, qword [rbp + 0x27]
movzx edx, byte [rbp + rax - 0x49]
movabs rax, 0xec09a7faaf6e519c
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x44
mov rax, qword [rbp + 0x27]
mov byte [rbp + rax - 0x49], r8b
mov rax, qword [rbp + 0x27]
inc rax
mov qword [rbp + 0x27], rax
mov rax, qword [rbp + 0x27]
cmp rax, 0x1d
jb 0x14009a913
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
lea rax, [rbp - 0x49]
or rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x14009a979
lea rdx, [rbp - 0x49]
lea rcx, [rbp + 7]
call fcn.1400380e0
nop
mov dword [rbp - 0x49], 0x717a6e73
mov dword [rbp - 0x45], 0xb1bd7569
mov dword [rbp - 0x41], 0x7f7861bc
mov byte [rbp - 0x3d], 0xca
xor eax, eax
mov dword [rbp - 0x3c], eax
mov byte [rbp - 0x38], al
mov qword [rbp - 0x59], r13
mov rax, qword [rbp - 0x59]
mov rcx, qword [rbp - 0x59]
mov rax, qword [rbp - 0x59]
movzx edx, byte [rbp + rax - 0x49]
movabs rax, 0x186ffe56c8a20161
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x59
mov rax, qword [rbp - 0x59]
mov byte [rbp + rax - 0x49], r8b
mov rax, qword [rbp - 0x59]
inc rax
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
cmp rax, 0x12
jb 0x14009a9b9
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
lea rax, [rbp - 0x49]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x14009aa1b
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x19]
call fcn.1400380e0
nop
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.1400699ec
mov rcx, rsi
call rax
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14009aa83
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009aa7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009aa7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqa xmm0, xmmword [0x140172ff0]
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp - 0x19], r13b
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14009aada
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009aacd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009aacd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqa xmm0, xmmword [0x140172ff0]
movdqu xmmword [rbp + 0x17], xmm0
mov byte [rbp + 7], r13b
call fcn.1400a4578
movsx edi, al
call fcn.1400a4574
movsx ecx, al
imul edi, ecx
call fcn.1400a4584
movsx r14d, al
lea ecx, [rdi + r14]
movsx eax, byte [reloc.WS2_32.dll_htons]
lea ecx, [rcx + rdi*2]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14009af8a
mov dword [rbp - 0x49], 0x3c6c5ebf
mov dword [rbp - 0x45], 0x3a686672
mov dword [rbp - 0x41], 0x4757556f
mov dword [rbp - 0x3d], 0x5453676a
mov word [rbp - 0x39], 0xe952
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x37], xmm0
mov byte [rbp - 0x27], al
mov qword [rbp - 0x59], r13
mov rax, qword [rbp - 0x59]
mov rcx, qword [rbp - 0x59]
mov rax, qword [rbp - 0x59]
movzx edx, byte [rbp + rax - 0x49]
movabs rax, 0x5a9a72bf81b41a7f
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x79
mov rax, qword [rbp - 0x59]
mov byte [rbp + rax - 0x49], r8b
mov rax, qword [rbp - 0x59]
inc rax
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
cmp rax, 0x23
jb 0x14009ab5f
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
lea rax, [rbp - 0x49]
mov r8, rbx
inc r8
cmp byte [rax + r8], r13b
jne 0x14009abc1
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x19]
call fcn.1400380e0
nop
mov dword [rbp - 0x59], 1
mov dword [rbp - 0x49], 0x19222e2b
mov dword [rbp - 0x45], 0xd9dd1511
mov dword [rbp - 0x41], 0x1f1009dc
mov byte [rbp - 0x3d], 0xe2
xor eax, eax
mov dword [rbp - 0x3c], eax
mov byte [rbp - 0x38], al
mov qword [rbp - 0x51], r13
mov rax, qword [rbp - 0x51]
mov rcx, qword [rbp - 0x51]
mov rax, qword [rbp - 0x51]
movzx edx, byte [rbp + rax - 0x49]
movabs rax, 0xe909c831e4c8c91d
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x35
mov rax, qword [rbp - 0x51]
mov byte [rbp + rax - 0x49], r8b
mov rax, qword [rbp - 0x51]
inc rax
mov qword [rbp - 0x51], rax
mov rax, qword [rbp - 0x51]
cmp rax, 0x12
jb 0x14009ac08
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
lea rax, [rbp - 0x49]
inc rbx
cmp byte [rax + rbx], r13b
jne 0x14009ac67
mov r8, rbx
lea rdx, [rbp - 0x49]
lea rcx, [rbp + 7]
call fcn.1400380e0
nop
mov dword [rbp - 0x59], 3
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 7]
call fcn.1400510ac
lea rdx, [rbp + 0x27]
mov rcx, rsi
call rax
mov rcx, r13
test eax, eax
setne cl
xorps xmm2, xmm2
cvtsi2sd xmm2, rcx
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x51], xmm1
lea eax, [rdi + rdi*2]
lea r12d, [r14 + rax*2]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r12d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14009ad41
call fcn.1400a457c
movsx edx, al
movsx eax, byte [0x14022ead4]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.1400a4588
movsx ecx, al
sub r8d, ecx
call fcn.1400a4580
movsx ecx, al
add r8d, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, r8d
je 0x14009ad41
lea esi, [rdi + rdi]
jmp 0x14009ad9c
lea esi, [rdi + rdi]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, esi
add eax, r14d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14009ad98
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r12d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x51]
cvttsd2si r15d, xmm0
jmp 0x14009ad9c
mov r15d, dword [rbp + 0x27]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r14d
lea eax, [rax + rdi*8]
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
mov ebx, eax
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub ebx, ecx
imul ebx, r15d
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14009ae01
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009adfc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009adfc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqa xmm0, xmmword [0x140172ff0]
movdqu xmmword [rbp + 0x17], xmm0
mov byte [rbp + 7], r13b
mov dword [rbp - 0x59], r13d
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14009ae5c
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009ae4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14009ae4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqa xmm0, xmmword [0x140172ff0]
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp - 0x19], r13b
test ebx, ebx
je 0x14009af8a
lea ecx, [rdi + r14]
movsx eax, byte [reloc.WS2_32.dll_htons]
lea ecx, [rcx + rdi*8]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x51], xmm1
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r12d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14009af20
call fcn.1400a457c
movsx edx, al
movsx eax, byte [0x14022ead4]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.1400a4588
movsx ecx, al
sub r8d, ecx
call fcn.1400a4580
movsx ecx, al
add r8d, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, r8d
jne 0x14009af7b
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, esi
add eax, r14d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14009af73
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r12d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x51]
cvttsd2si eax, xmm0
jmp 0x14009af76
mov eax, dword [rbp + 0x27]
cmp r13d, eax
jge 0x14009af8a
cmp dword [rbp + 0x27], 0x103
sete al
jmp 0x14009b0bc
lea ecx, [rdi + r14]
movsx eax, byte [reloc.WS2_32.dll_htons]
lea ecx, [rcx + rdi*4]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x51], xmm1
lea eax, [rdi + rdi*2]
lea r9d, [r14 + rax*2]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r9d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14009b044
call fcn.1400a457c
movsx edx, al
movsx eax, byte [0x14022ead4]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.1400a4588
movsx ecx, al
sub r8d, ecx
call fcn.1400a4580
movsx ecx, al
add r8d, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, r8d
jne 0x14009b0ba
call fcn.1400a4578
movsx edx, al
call fcn.1400a4574
movsx ecx, al
imul edx, ecx
call fcn.1400a4584
movsx ecx, al
lea eax, [rcx + rdx*2]
movsx ecx, byte [reloc.WS2_32.dll_htons]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14009b0b2
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r9d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x51]
cvttsd2si eax, xmm0
jmp 0x14009b0b5
mov eax, dword [rbp + 0x27]
cmp r13d, eax
jge 0x14009b0bc
xor al, al
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140123840
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret