Function at 0x14001e300
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov word [rbp - 0x5d], 0x7974
mov rdi, rdx
mov word [rbp - 0x60], 0x6d45
mov rbx, rcx
mov byte [rbp - 0x5e], 0x70
mov dword [rbp - 0x5b], 0x79656b20
mov byte [rbp - 0x57], 0
mov dword [rbp - 0x45], 0x6c207965
mov dword [rbp - 0x4e], 0x72726f63
mov word [rbp - 0x3e], 0x6874
mov word [rbp - 0x50], 0x6e49
mov dword [rbp - 0x4a], 0x20746365
mov byte [rbp - 0x46], 0x6b
mov word [rbp - 0x41], 0x6e65
mov byte [rbp - 0x3c], 0
mov byte [rbp - 0x3f], 0x67
mov word [rbp - 0x2c], 0x636f
mov word [rbp - 0x2f], 0x6220
mov word [rbp - 0x37], 0x636e
mov dword [rbp - 0x25], 0x687467
mov byte [rbp - 0x38], 0x49
mov dword [rbp - 0x34], 0x63657272
mov word [rbp - 0x27], 0x6e65
mov word [rbp - 0x2a], 0x206b
mov byte [rbp - 0x30], 0x74
mov byte [rbp - 0x28], 0x6c
mov byte [rbp - 0x2d], 0x6c
mov byte [rbp - 0x35], 0x6f
test rdx, rdx
je 0x14001e7c6
mov dword [rcx + 0x3cc], 0x20
mov dword [rcx + 0x3d0], recvfrom
movups xmm0, xmmword [r8]
movdqu xmmword [rcx + 0x3d8], xmm0
movups xmm1, xmmword [r8]
movdqu xmmword [rcx + 0x3f8], xmm1
mov eax, dword [rcx + 0x3cc]
mov ecx, dword [rcx + 0x3d0]
cmp eax, 0x10
je 0x14001e411
cmp eax, 0x18
mov eax, recvfrom
jne 0x14001e429
cmp ecx, 0x20
lea edx, [rax - 2]
cmovne eax, edx
jmp 0x14001e429
cmp ecx, 0x10
jne 0x14001e41b
lea eax, [rcx - 6]
jmp 0x14001e429
mov eax, recvfrom
cmp ecx, 0x18
lea edx, [rax - 2]
cmove eax, edx
mov dword [rbx + 0x3d4], eax
xor r14d, r14d
mov eax, ecx
mov ecx, dword [rbx + 0x3d4]
cdq
and edx, 3
add eax, edx
sar eax, 2
movsxd r13, eax
test ecx, ecx
js 0x14001e476
lea rsi, [rbx + 0xc]
test r13d, r13d
jle 0x14001e464
mov r8, r13
xor edx, edx
shl r8, 2
mov rcx, rsi
call fcn.1400599e0
mov ecx, dword [rbx + 0x3d4]
inc r14d
add rsi, 0x20
cmp r14d, ecx
jle 0x14001e44e
xor r14d, r14d
test ecx, ecx
js 0x14001e4ac
lea rsi, [rbx + 0x1ec]
test r13d, r13d
jle 0x14001e49a
mov r8, r13
xor edx, edx
shl r8, 2
mov rcx, rsi
call fcn.1400599e0
mov ecx, dword [rbx + 0x3d4]
inc r14d
add rsi, 0x20
cmp r14d, ecx
jle 0x14001e484
mov eax, dword [rbx + 0x3cc]
lea r11d, [rcx + 1]
cdq
imul r11d, r13d
and edx, 3
lea r12, [rbx + 0x418]
add eax, edx
mov rdx, r12
sar eax, 2
movsxd r14, eax
test eax, eax
jle 0x14001e50b
mov r8d, r14d
movzx ecx, byte [rdi]
lea rdi, [rdi + 4]
shl ecx, 0x18
mov dword [rdx], ecx
movzx eax, byte [rdi - 3]
shl eax, 0x10
or eax, ecx
mov dword [rdx], eax
movzx ecx, byte [rdi - 2]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
movzx eax, byte [rdi - 1]
or eax, ecx
mov dword [rdx], eax
lea rdx, [rdx + 4]
sub r8, 1
jne 0x14001e4d7
xor r9d, r9d
lea rsi, [0x140000000]
test r14d, r14d
jle 0x14001e56d
xor esi, esi
mov rdi, r12
cmp r9d, r11d
jge 0x14001e675
mov eax, r9d
inc rsi
cdq
inc r9d
idiv r13d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [rdi]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [rdi]
add rdi, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp rsi, r14
jl 0x14001e51f
lea rsi, [0x140000000]
cmp r9d, r11d
jge 0x14001e675
lea rdi, [0x1401564f0]
movsxd rdx, dword [rbx + r14*4 + 0x414]
mov rax, rdx
sar rax, 0x10
movzx ecx, al
movsx eax, byte [rdi]
inc rdi
mov qword [rbp + 0x38], rdi
movsx r8d, byte [rcx + rsi + 0x159610]
xor r8d, eax
mov rax, rdx
sar rax, 8
shl r8d, 8
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x159610]
xor r8d, eax
movzx eax, dl
shl r8d, 8
sar rdx, 0x18
movzx eax, byte [rax + rsi + 0x159610]
xor r8d, eax
movzx eax, dl
shl r8d, 8
movzx eax, byte [rax + rsi + 0x159610]
xor r8d, eax
xor dword [r12], r8d
cmp r14d, 8
je 0x14001e724
cmp r14, 1
jle 0x14001e614
lea rcx, [rbx + 0x41c]
lea rdx, [r14 - 1]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x14001e605
test r14d, r14d
jle 0x14001e66c
mov rdi, r12
xor esi, esi
cmp r9d, r11d
jge 0x14001e675
mov eax, r9d
inc rsi
cdq
inc r9d
idiv r13d
movsxd rcx, eax
movsxd r8, edx
lea rdx, [r8 + rcx*8]
mov ecx, dword [rdi]
mov dword [rbx + rdx*4 + 0xc], ecx
mov ecx, dword [rbx + 0x3d4]
sub ecx, eax
movsxd rax, ecx
lea rcx, [r8 + rax*8]
mov eax, dword [rdi]
add rdi, 4
mov dword [rbx + rcx*4 + 0x1ec], eax
cmp rsi, r14
jl 0x14001e61e
mov rdi, qword [rbp + 0x38]
lea rsi, [0x140000000]
cmp r9d, r11d
jl 0x14001e57d
mov r10d, 1
cmp dword [rbx + 0x3d4], r10d
jle 0x14001e6ff
lea r11, [rbx + 0x20c]
lea r14, [0x140000000]
test r13d, r13d
jle 0x14001e6ef
mov rdi, r11
mov rsi, r13
movsxd r9, dword [rdi]
mov rax, r9
sar rax, 0x18
movzx edx, al
mov rax, r9
sar rax, 0x10
movzx ecx, al
mov rax, r9
sar rax, 8
mov r8d, dword [r14 + rdx*4 + 0x157110]
xor r8d, dword [r14 + rcx*4 + 0x156d10]
movzx ecx, al
movzx eax, r9b
xor r8d, dword [r14 + rcx*4 + 0x156910]
xor r8d, dword [r14 + rax*4 + 0x156510]
mov dword [rdi], r8d
lea rdi, [rdi + 4]
sub rsi, 1
jne 0x14001e69d
inc r10d
add r11, 0x20
cmp r10d, dword [rbx + 0x3d4]
jl 0x14001e692
lea r11, [rsp + 0x80]
mov byte [rbx + 8], 1
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbx + 0x41c]
mov edx, 3
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x14001e730
movsxd r8, dword [rbx + 0x424]
mov rax, r8
sar rax, 0x18
movzx ecx, al
mov rax, r8
sar rax, 0x10
movsx edx, byte [rcx + rsi + 0x159610]
movzx ecx, al
shl edx, 8
movzx eax, byte [rcx + rsi + 0x159610]
xor edx, eax
mov rax, r8
sar rax, 8
shl edx, 8
movzx ecx, al
movzx eax, byte [rcx + rsi + 0x159610]
xor edx, eax
movzx eax, r8b
shl edx, 8
movzx eax, byte [rax + rsi + 0x159610]
xor edx, eax
xor dword [rbx + 0x428], edx
cmp r14, 5
jle 0x14001e614
lea rcx, [rbx + 0x42c]
lea rdx, [r14 - 5]
mov eax, dword [rcx - 4]
xor dword [rcx], eax
lea rcx, [rcx + 4]
sub rdx, 1
jne 0x14001e7b2
jmp 0x14001e619
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.1400080b8
lea rdx, [0x1401724c8]
lea rcx, [rbp - 0x20]
call fcn.140059b70
int3