Function at 0x1400b34d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x290]
sub rsp, 0x390
mov rax, qword [0x1402bf070]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov rdi, rdx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov rax, qword [rdx + 0xf8]
test rax, rax
jne 0x1400b3534
call fcn.1400b1b70
mov rax, qword [rdi + 0xf8]
test rax, rax
je 0x1400b3f6b
mov dword [rbp + 0x200], 0x2d0078
mov dword [rbp + 0x204], 0x6f006e
mov dword [rbp + 0x208], 0x2d0073
mov dword [rbp + 0x20c], 0x6f0074
mov dword [rbp + 0x210], 0x65006b
mov dword [rbp + 0x214], WSASetLastError
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r15w
lea rax, [rbp + 0x200]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp word [rax + r8*2], r15w
jne 0x1400b35a4
lea rdx, [rbp + 0x200]
lea rcx, [rsp + 0x48]
call fcn.14005bc50
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x28]
call fcn.1400b51f0
mov dword [rsp + 0x30], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
cmovae rdx, qword [rbp + 0x28]
mov qword [rbp + 0x170], r15
movdqa xmm0, xmmword [0x1402a24c0]
movdqa xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], 0
mov r8, rsi
inc r8
cmp byte [rdx + r8], 0
jne 0x1400b3605
lea rcx, [rbp + 0x170]
call fcn.140061990
nop
lea rdx, [rdi + 0x40]
lea rcx, [rbp + 0x190]
call fcn.140061070
nop
lea rax, [rbp + 0x170]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x78], rax
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x1c0]
call fcn.1400b3fe0
nop
lea r9, [fcn.140070260]
mov edx, 0x40
lea r8d, [rdx - 0x3f]
lea rcx, [rbp + 0x170]
call fcn.1400ba794
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x1400b36ac
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b36a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fa1
call fcn.1400b9f90
mov byte [rbp + 0x28], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x1400b36f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b36ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fa7
call fcn.1400b9f90
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r15w
mov dword [rbp + 0x230], 0x7b002f
mov dword [rbp + 0x234], 0x2f007d
mov dword [rbp + 0x238], 0x7d007b
mov dword [rbp + 0x23c], 0x75003f
mov dword [rbp + 0x240], 0x6c0070
mov dword [rbp + 0x244], 0x61006f
mov dword [rbp + 0x248], 0x430064
mov dword [rbp + 0x24c], 0x6e006f
mov dword [rbp + 0x250], 0x650074
mov dword [rbp + 0x254], 0x740078
mov dword [rbp + 0x258], 0x7d007b
mov dword [rbp + 0x25c], 0x760026
mov dword [rbp + 0x260], 0x720065
mov dword [rbp + 0x264], 0x690073
mov dword [rbp + 0x268], 0x6e006f
mov dword [rbp + 0x26c], 0x31003d
mov dword [rbp + 0x270], 0x30002e
mov word [rbp + 0x274], r15w
mov dword [rbp + 0x218], 0x630026
mov dword [rbp + 0x21c], 0x6e006f
mov dword [rbp + 0x220], 0x650074
mov dword [rbp + 0x224], 0x740078
mov dword [rbp + 0x228], 0x7b003d
mov dword [rbp + 0x22c], 0x7d
cmp qword [rdi + 0xb0], 0
jne 0x1400b383b
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], select
mov byte [rbp - 0x58], 0
xor r8d, r8d
lea rdx, [0x14029de83]
lea rcx, [rbp - 0x58]
call fcn.140061990
lea r14, [rbp - 0x58]
mov dword [rsp + 0x30], reloc.COMCTL32.dll_InitCommonControls
mov ebx, 0x91
jmp 0x1400b3950
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], r15w
lea rax, [rbp + 0x218]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400b3860
lea rdx, [rbp + 0x218]
lea rcx, [rbp - 0x78]
call fcn.14005bc50
nop
mov dword [rsp + 0x30], reloc.WS2_32.dll_select
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 8]
call fcn.1400b51f0
nop
mov dword [rsp + 0x30], 0x36
mov qword [rbp + 0xc0], reloc.WS2_32.dll_ntohl
lea rcx, [rbp + 0xd0]
mov qword [rbp + 0xc8], rcx
lea rcx, [rdi + 0xa0]
cmp qword [rdi + 0xb8], 0x10
jb 0x1400b38cb
mov rcx, qword [rdi + 0xa0]
mov rax, qword [rdi + 0xb0]
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0x80], reloc.WS2_32.dll_ntohl
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x88], rax
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rax, qword [rbp + 8]
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x98], rax
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x48]
call fcn.140064800
lea r14, [rbp + 0x48]
mov dword [rsp + 0x30], 0x7e
mov ebx, 0xfe
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r15w
lea rax, [rbp + 0x230]
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x1400b3972
lea rdx, [rbp + 0x230]
lea rcx, [rsp + 0x68]
call fcn.14005bc50
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x18]
call fcn.1400b51f0
mov dword [rsp + 0x30], ebx
mov qword [rbp + 0x100], 0x39ce
lea rax, [rbp + 0x110]
mov qword [rbp + 0x108], rax
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1400b39c7
mov rdx, qword [rdi]
mov rax, qword [rdi + 0x10]
mov qword [rbp + 0x110], rdx
mov qword [rbp + 0x118], rax
lea rdx, [rdi + 0x20]
cmp qword [rdi + 0x38], 0x10
jb 0x1400b39e8
mov rdx, qword [rdi + 0x20]
mov rax, qword [rdi + 0x30]
mov qword [rbp + 0x120], rdx
mov qword [rbp + 0x128], rax
mov rcx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x1400b3a07
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0x138], rax
mov qword [rbp + 0xa0], 0x39ce
lea rax, [rbp + 0x110]
mov qword [rbp + 0xa8], rax
lea rax, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rax, qword [rbp - 0x18]
movaps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp - 8]
mov qword [rbp + 0xb8], rax
lea r8, [rbp + 0x150]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x1d0]
call fcn.140064800
bts ebx, 8
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1400b3abe
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3ab9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fad
call fcn.1400b9f90
mov qword [rbp - 8], r15
mov qword [rbp], select
mov byte [rbp - 0x18], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x1400b3b0f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3b0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fb3
call fcn.1400b9f90
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r15w
test bl, 8
je 0x1400b3b79
and ebx, 0xfffffff7
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x1400b3b69
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3b64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fb9
call fcn.1400b9f90
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], select
mov byte [rbp + 0x48], 0
test bl, 4
je 0x1400b3bd0
and ebx, 0xfffffffb
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1400b3bc0
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3bbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fbf
call fcn.1400b9f90
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x20], select
mov byte [rbp + 8], 0
test bl, 2
je 0x1400b3c2d
and ebx, 0xfffffffd
mov dword [rsp + 0x30], ebx
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x1400b3c1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3c17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fc5
call fcn.1400b9f90
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], r15w
test bl, 1
je 0x1400b3c7d
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400b3c6d
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3c68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fcb
call fcn.1400b9f90
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], select
mov byte [rbp - 0x58], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x38]
mov qword [rbp + 0x160], rax
lea rax, [rsp + 0x38]
mov qword [rbp + 0x168], rax
lfence
mov ecx, 0x60
call fcn.1400b9fa8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x38], rax
movzx r8d, byte [rsp + 0x34]
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x38]
call fcn.14007e720
nop
lea r9, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae r9, qword [rbp + 0x1d0]
lea r8, [rdi + 0xe8]
cmp qword [r8 + 0x18], 0x10
jb 0x1400b3d0c
mov r8, qword [r8]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x1b0]
lea rcx, reloc.WS2_32.dll_ioctlsocket
call fcn.1400b4650
nop
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x1400b3edb
cmp dword [rcx + 0x20], 0xc8
jne 0x1400b3edb
add rcx, 0x38
cmp qword [rcx + 0x18], 0x10
jb 0x1400b3d55
mov rcx, qword [rcx]
test rcx, rcx
je 0x1400b3edb
mov rdx, rsi
inc rdx
cmp byte [rcx + rdx], 0
jne 0x1400b3d61
inc rdx
call fcn.1400b7010
mov rbx, rax
test rax, rax
je 0x1400b3edb
cmp byte [rax + 0x18], 0x40
jne 0x1400b3ed3
mov dword [rbp + 0x1f0], 0x66006f
mov dword [rbp + 0x1f4], 0x730066
mov dword [rbp + 0x1f8], 0x740065
mov word [rbp + 0x1fc], r15w
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], r15w
lea rax, [rbp + 0x1f0]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400b3dd0
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp - 0x38]
call fcn.14005bc50
nop
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0xe0]
call fcn.1400b51f0
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0x10
cmovae rdx, qword [rbp + 0xe0]
mov r8d, 1
mov rcx, rbx
call fcn.1400b7850
mov r14, rax
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x1400b3e66
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3e60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fd1
call fcn.1400b9f90
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x1400b3ea6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3ea1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3fd7
call fcn.1400b9f90
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], r15w
test r14, r14
je 0x1400b3ed3
mov eax, dword [r14 + 0x28]
mov dword [rdi + 0xc0], eax
mov rcx, rbx
call fcn.1400b6b10
mov dil, 1
jmp 0x1400b3ede
mov rcx, rbx
call fcn.1400b6b10
xor dil, dil
mov rcx, qword [rbp + 0x1b8]
test rcx, rcx
je 0x1400b3f1d
mov eax, esi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400b3f1d
mov rbx, qword [rbp + 0x1b8]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x1400b3f1d
mov rcx, qword [rbp + 0x1b8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0x10
jb 0x1400b3f5b
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400b3f55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400b3f9b
call fcn.1400b9f90
nop
lea rcx, [rbp + 0x1c0]
call fcn.140078f40
movzx eax, dil
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.1400b9f70
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
nop
call fcn.1401e40b0
int3