Function at 0x140078248
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1400a45d0]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov edi, edx
mov word [rbp + 0x12], 0x6556
mov dword [rbp - 0xb], 0x5c657261
mov dword [rbp + 0x17], 0x495c6e6f
mov dword [rbp - 0x10], 0x74666f53
mov word [rbp + 0xc], 0x7275
mov dword [rbp - 3], 0x666f736f
mov dword [rbp + 0x1f], 0x2074656e
mov word [rbp - 6], 0x6369
mov dword [rbp + 7], 0x5c73776f
mov word [rbp + 0x15], 0x6973
mov dword [rbp + 1], 0x69575c74
mov word [rbp + 0x27], 0x6e69
xor r14d, r14d
mov word [rbp + 0x2a], reloc.WS2_32.dll_WSAStartup
mov dword [rbp + 0x23], 0x74746553
mov dword [rbp + 0xe], 0x746e6572
mov byte [rbp + 0x14], WSACleanup
mov byte [rbp + 0x29], 0x67
mov word [rbp + 5], 0x646e
mov word [rbp + 0x1c], 0x6574
mov byte [rbp + 0x1b], WSAGetLastError
mov byte [rbp + 0x1e], WSACleanup
mov byte [rbp - 7], Ordinal_79
mov byte [rbp + 0xb], 0x43
mov byte [rbp - 0xc], 0x77
mov byte [rbp - 4], WSACleanup
mov dword [rbp - 0x20], 0x786f7250
mov word [rbp - 0x19], 0x6261
mov word [rbp - 0x1c], 0x4579
mov word [rbp - 0x16], 0x65
mov byte [rbp - 0x17], WSAGetLastError
mov byte [rbp - 0x1a], WSAGetLastError
mov dword [rbp - 0x2f], 0x79786f72
mov dword [rbp - 0x2a], 0x65767265
mov word [rbp - 0x26], WSACleanup
mov byte [rbp - 0x30], 0x50
mov byte [rbp - 0x2b], 0x53
mov rdx, rcx
lea rcx, [rbp - 0x50]
call fcn.1400064e4
nop
lea r8, [rbp - 0x10]
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140006590
nop
cmp qword [rbp - 0x38], 0x10
jb 0x14007837c
mov rcx, qword [rbp - 0x50]
call fcn.140049668
mov r12d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x40], r14
mov byte [rbp - 0x50], r14b
lea rax, [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r14
mov byte [rsp + 0x20], r14b
or r13, 0xffffffffffffffff
cmp byte [rbp - 0x20], r14b
jne 0x1400783b6
mov r8, r14
jmp 0x1400783c6
lea rax, [rbp - 0x20]
mov r8, r13
inc r8
cmp byte [rax + r8], r14b
jne 0x1400783bd
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x20]
call fcn.14000303c
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r14
mov byte [rsp + 0x40], r14b
cmp byte [rdx], r14b
jne 0x1400783fc
mov r8, r14
jmp 0x140078408
mov r8, r13
inc r8
cmp byte [rdx + r8], r14b
jne 0x1400783ff
lea rcx, [rsp + 0x40]
call fcn.14000303c
nop
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x40]
call fcn.14007815c
cmp eax, 1
sete sil
lea rax, [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r14
mov byte [rsp + 0x20], r14b
cmp byte [rbp - 0x30], r14b
jne 0x14007844d
mov r8, r14
jmp 0x14007845d
lea rax, [rbp - 0x30]
mov r8, r13
inc r8
cmp byte [rax + r8], r14b
jne 0x140078454
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x20]
call fcn.14000303c
nop
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rdx, qword [rbp - 0x70]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x50], r14
mov byte [rsp + 0x40], r14b
cmp byte [rdx], r14b
jne 0x140078493
mov r8, r14
jmp 0x14007849f
mov r8, r13
inc r8
cmp byte [rdx + r8], r14b
jne 0x140078496
lea rcx, [rsp + 0x40]
call fcn.14000303c
nop
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x40]
lea rcx, [rsp + 0x70]
call fcn.140077f84
mov r9d, 5
lea rdx, str.http
lea rcx, [rsp + 0x70]
call fcn.14000413c
mov rbx, rax
mov r9d, 6
lea rdx, str.https
lea rcx, [rsp + 0x70]
call fcn.14000413c
cmp rbx, r13
setne cl
cmp rax, r13
setne al
test sil, sil
je 0x14007854d
test cl, cl
jne 0x14007853a
test al, al
jne 0x14007853a
cmp qword [rbp - 0x78], 0x10
jb 0x140078519
mov rcx, qword [rsp + 0x70]
call fcn.140049668
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r14
mov byte [rsp + 0x70], r14b
cmp qword [rbp - 0x58], 0x10
jb 0x140078536
mov rcx, qword [rbp - 0x70]
call fcn.140049668
mov al, 1
jmp 0x14007857d
test edi, edi
jne 0x140078544
test cl, cl
je 0x14007854d
jmp 0x140078508
cmp edi, 1
jne 0x14007854d
test al, al
jmp 0x140078540
cmp qword [rbp - 0x78], 0x10
jb 0x14007855e
mov rcx, qword [rsp + 0x70]
call fcn.140049668
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r14
mov byte [rsp + 0x70], r14b
cmp qword [rbp - 0x58], 0x10
jb 0x14007857b
mov rcx, qword [rbp - 0x70]
call fcn.140049668
xor al, al
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140049680
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret