Function at 0x1400edf30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rax - 0x198]
sub rsp, 0x280
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1401de080]
xor rax, rsp
mov qword [rbp + 0x158], rax
mov rsi, r8
mov rdi, rdx
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], r8
xor r14d, r14d
movsd xmm0, qword [str.rmSxJtNxA]
movsd qword [rsp + 0x60], xmm0
movzx ecx, word [0x1401bdc30]
mov word [rsp + 0x68], cx
movzx eax, byte [0x1401bdc32]
mov byte [rsp + 0x60], 0x45
xor byte [rsp + 0x61], 0x38
xor byte [rsp + 0x62], 0x39
xor byte [rsp + 0x63], 0x3a
xor byte [rsp + 0x64], 0x3b
xor byte [rsp + 0x65], 0x3c
xor byte [rsp + 0x66], 0x3d
xor byte [rsp + 0x67], 0x3e
xor cl, 0x3f
mov byte [rsp + 0x68], cl
xor byte [rsp + 0x69], 0x40
xor al, 0x41
mov byte [rsp + 0x6a], al
mov dword [rbp - 0x78], 0x776f2659
mov dword [rbp - 0x74], 0x6972656e
mov word [rbp - 0x70], 0x3d64
mov byte [rbp - 0x6e], r14b
movups xmm0, xmmword [str.VlL_ntZlJ_r]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [0x1401bdf50]
movups xmmword [rbp + 0xf0], xmm1
movzx eax, byte [0x1401bdf60]
mov byte [rbp + 0x100], al
mov ecx, r14d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400ee144
movdqa xmm5, xmmword [0x1401bfcc0]
movdqa xmm4, xmmword [0x1401c02a0]
movdqa xmm6, xmmword [0x1401bfcf0]
movdqa xmm0, xmmword [0x1401bfe00]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rbp + 0xe0]
movdqa xmm7, xmmword [0x1401bfd60]
mov r8d, dword [rsp + 0x40]
nop
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
andps xmm2, xmm7
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
andps xmm3, xmm7
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd xmm0, r8d
paddb xmm3, xmm0
movd xmm0, dword [rdx + 4]
xorps xmm3, xmm0
movd dword [rdx + 4], xmm3
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x20
jl 0x1400ee060
cmp ecx, 0x21
jge 0x1400ee17d
movsxd rax, ecx
lea r8, [rbp + 0xe0]
add r8, rax
mov eax, 0x5397829d
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
sub al, dl
add al, 0x37
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x21
jl 0x1400ee151
mov dword [rsp + 0x70], 0x616e2662
mov dword [rsp + 0x74], 0x3d656d
mov dword [rbp - 0x68], 0x6573263c
mov dword [rbp - 0x64], 0x6f697373
mov dword [rbp - 0x60], 0x3d64696e
mov byte [rbp - 0x5c], 0
mov dword [rsp + 0x78], 0x68632654
mov dword [rsp + 0x7c], 0x656e6e61
mov word [rbp - 0x80], 0x3d6c
mov byte [rbp - 0x7e], 0
movdqa xmm0, xmmword [0x1401c0320]
movdqu xmmword [rbp - 0x18], xmm0
mov dword [rbp - 8], 0x61737365
mov dword [rbp - 4], 0x3d6567
lea rax, [rbp - 0x17]
mov rbx, 0xffffffffffffffff
mov rcx, rbx
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400ee1f0
mov rdx, qword [rdi + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x1400ee936
mov rax, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400ee220
mov rax, qword [rdi]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x17]
lea rcx, [rbp + 0x138]
call fcn.140030760
nop
lea rax, [rsp + 0x79]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ee250
lea rdx, [rsp + 0x79]
lea rcx, [rbp + 0x138]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400ee2a5
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rbp - 0x58]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp - 0x67]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400ee2f5
lea rdx, [rbp - 0x67]
lea rcx, [rbp + 0xa0]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [0x1403ca470]
cmp qword [0x1403ca488], 0xf
cmova rdx, qword [0x1403ca470]
mov r8, qword [0x1403ca480]
lea rcx, [rbp + 0x80]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x71]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ee3b0
lea rdx, [rsp + 0x71]
lea rcx, [rbp + 0x60]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp + 0xe0]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400ee400
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x40]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rbp - 0x77]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400ee450
lea rdx, [rbp - 0x77]
lea rcx, [rbp + 0x20]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rax, [rsp + 0x60]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ee4a0
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.14002ee30
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400ee523
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee51e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee51e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400ee571
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee56c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee56c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400ee5bf
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee5ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee5ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400ee60d
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee608
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee608
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x1400ee661
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee65c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee65c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x1400ee6be
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee6b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee6b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x1400ee715
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee710
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee710
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x58], 0
lea rcx, [rbp + 0x138]
call fcn.14002ed40
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x118]
call fcn.14003f120
nop
mov qword [rbp + 0xd8], r14
lea r8, [rbp + 0xa0]
lea rdx, [rbp + 0x118]
lea rcx, [rsp + 0x40]
call fcn.140045c70
nop
mov dword [rsp + 0x60], 0x6375730c
mov dword [rsp + 0x64], 0x73736563
mov byte [rsp + 0x68], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
lea rax, [rsp + 0x61]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400ee790
mov r8, rbx
lea rdx, [rsp + 0x61]
lea rcx, [rbp - 0x58]
call fcn.14002ff20
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x40]
call fcn.140044330
cmp byte [rax], 4
jne 0x1400ee8ef
cmp byte [rax + 8], 0
je 0x1400ee840
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140044e40
nop
lea rcx, [rbp + 0x118]
call fcn.14002ed40
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x1400ee81b
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee816
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ee88f
call fcn.140177344
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
mov rcx, rdi
call fcn.14002ed40
nop
mov rcx, rsi
call fcn.14002ed40
mov al, 1
jmp 0x1400ee8be
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.140044e40
nop
lea rcx, [rbp + 0x118]
call fcn.14002ed40
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x1400ee89b
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ee896
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ee896
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140177344
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
mov rcx, rdi
call fcn.14002ed40
nop
mov rcx, rsi
call fcn.14002ed40
xor al, al
mov rcx, qword [rbp + 0x158]
xor rcx, rsp
call fcn.140176e00
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
mov rcx, rax
call fcn.1400452b0
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x70]
lea rcx, [rbp + 0x138]
call fcn.140055dc0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0xe0]
call fcn.1400465a0
lea rdx, [0x1401d97f0]
lea rcx, [rbp + 0xe0]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.140028b70
int3