Function at 0x140053efc
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov qword [rax + 8], rcx
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
mov rbx, rcx
xor r14d, r14d
mov qword [rbp + 0x27], r14
mov qword [rbp + 0x37], r14
mov qword [rbp + 0x3f], r14
lea rdx, [0x14021d2e0]
lea rcx, [rbp + 0x27]
call fcn.140005338
nop
mov al, reloc.WLDAP32.dll_Ordinal_41
mov dword [rbp - 0x19], 0x400029
mov dword [rbp - 0x15], 0x5a0047
mov dword [rbp - 0x11], 0x48005d
mov dword [rbp - 0xd], 0x450045
mov dword [rbp - 9], 0x4d004c
lea r8d, [r14 + 7]
mov dword [rbp - 5], 0x5d0007
mov dword [rbp - 1], 0x5d0051
mov word [rbp + 3], r14w
mov ecx, r14d
movsx eax, al
xor word [rbp + rcx*2 - 0x17], ax
inc rcx
cmp rcx, 0xd
jae 0x140053f92
mov al, byte [rbp - 0x19]
jmp 0x140053f7c
mov word [rbp + 3], r14w
mov qword [rbp + 7], r14
mov qword [rbp + 0x17], r14
mov qword [rbp + 0x1f], r8
mov word [rbp + 7], r14w
lea rdx, [rbp - 0x17]
lea rcx, [rbp + 7]
call fcn.140002cdc
nop
cmp qword [rbx + 0x10], r14
jne 0x14005401f
lea rax, [rbp + 7]
cmp rbx, rax
je 0x1400540ac
mov rdi, qword [rbp + 0x17]
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae r9, qword [rbp + 7]
cmp rdi, qword [rbx + 0x18]
ja 0x14005400b
mov rsi, rbx
cmp qword [rbx + 0x18], 8
jb 0x140053fee
mov rsi, qword [rbx]
mov qword [rbx + 0x10], rdi
lea r8, [rdi + rdi]
mov rdx, r9
mov rcx, rsi
call fcn.140175840
mov word [rsi + rdi*2], r14w
jmp 0x1400540ac
mov r8b, byte [rbp + 0x67]
mov rdx, rdi
mov rcx, rbx
call fcn.140003104
jmp 0x1400540ac
mov rcx, qword [rbp + 0x17]
test rcx, rcx
je 0x1400540ac
movabs rax, 0x7ffffffffffffffe
mov rdx, qword [0x140213fb8]
sub rax, rdx
cmp rax, rcx
jb 0x140054270
lea r9, [0x140213fa8]
cmp qword [reloc.WS2_32.dll_getsockopt], 8
cmovae r9, qword [0x140213fa8]
lea rax, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae rax, qword [rbp + 7]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x19]
call fcn.1400033dc
nop
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 8
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rbx
call fcn.140003088
nop
lea rcx, [rbp - 0x19]
call fcn.14000299c
nop
mov esi, 0x1000
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x1400540ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, rsi
jb 0x1400540e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054276
call fcn.140173310
movdqa xmm0, xmmword [0x1401f5950]
movdqu xmmword [rbp - 0x19], xmm0
mov dword [rbp - 9], 0x390e0e0e
mov word [rbp - 5], reloc.WS2_32.dll_gethostname
mov rcx, r14
mov al, byte [rbp - 0x19]
xor byte [rbp + rcx - 0x18], al
inc rcx
cmp rcx, 0x14
jb 0x14005410a
mov byte [rbp - 4], r14b
lea rax, [rbp - 0x18]
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r14b
jne 0x140054129
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x27]
call fcn.1400052c0
mov rdx, 0xffffffff80000001
lea rcx, [rbp + 0x27]
call fcn.140053738
movdqa xmm0, xmmword [0x1401f5d00]
movdqu xmmword [rbp - 0x19], xmm0
mov dword [rbp - 9], 0x444473
mov rcx, r14
mov al, byte [rbp - 0x19]
xor byte [rbp + rcx - 0x18], al
inc rcx
cmp rcx, 0x12
jb 0x140054166
mov byte [rbp - 6], r14b
lea rax, [rbp - 0x18]
inc rdi
cmp byte [rax + rdi], r14b
jne 0x14005417e
mov r8, rdi
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x27]
call fcn.1400052c0
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0x27]
call fcn.140053738
mov qword [rbp + 7], r14
mov qword [rbp + 0x17], r14
mov qword [rbp + 0x1f], r14
mov rdx, rbx
lea rcx, [rbp + 7]
call fcn.140003f34
nop
lea rdx, [rbp + 0x27]
lea rcx, [rbp + 7]
call fcn.140059680
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 8
jb 0x140054207
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, rsi
jb 0x140054201
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005427c
call fcn.140173310
nop
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0x10
jb 0x14005423a
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, rsi
jb 0x140054235
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005426a
call fcn.140173310
mov qword [rbp + 0x37], r14
mov qword [rbp + 0x3f], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x27], r14b
mov rcx, rbx
call fcn.14000299c
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.14018273c
nop
call fcn.140002ca0
nop
call fcn.14018273c
int3
call fcn.14018273c
int3