Function at 0x1400040a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x790]
sub rsp, 0x890
mov rax, qword [0x14011df80]
xor rax, rsp
mov qword [rbp + 0x780], rax
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor r15d, r15d
mov qword [rcx + 0x10], 4
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
mov dword [rcx], 0x6d305b1b
mov byte [rcx + 4], r15b
lea rbx, [rcx + 0x20]
mov qword [rsp + 0x30], rbx
movups xmmword [rbp + 0x78], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_connect]
movdqu xmmword [rbp + 0x88], xmm1
mov dword [rbp + 0x78], 0x4b4e4950
mov byte [rbp + 0x7c], r15b
movups xmmword [rbp + 0x120], xmm0
movdqa xmm1, xmmword [0x1400bf350]
movdqa xmmword [rbp + 0x130], xmm1
movsd xmm0, qword [str.e_38_5_206m]
movsd qword [rbp + 0x120], xmm0
movzx eax, word [0x1400be480]
mov word [rbp + 0x128], ax
movzx eax, byte [0x1400be482]
mov byte [rbp + 0x12a], al
mov byte [rbp + 0x12b], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_accept]
movdqa xmmword [rbp + 0x150], xmm1
mov word [rbp + 0x140], Ordinal_45
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x360]
call fcn.140003d80
nop
lea rax, [rbp + 0x380]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x380]
call fcn.140003d80
nop
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x3a0]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_connect]
movdqu xmmword [rbp + 0x68], xmm1
mov dword [rbp + 0x58], 0x45554c42
mov byte [rbp + 0x5c], r15b
movups xmmword [rbp + 0x1a0], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ioctlsocket]
movdqa xmmword [rbp + 0x1b0], xmm1
movsd xmm0, qword [str.e_38_5_33m]
movsd qword [rbp + 0x1a0], xmm0
movzx eax, word [0x1400be490]
mov word [rbp + 0x1a8], ax
mov byte [rbp + 0x1aa], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_accept]
movdqa xmmword [rbp + 0x1d0], xmm1
mov word [rbp + 0x1c0], 0x3f
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x3c0]
call fcn.140003d80
nop
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x3e0]
call fcn.140003d80
nop
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x400]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getpeername]
movdqu xmmword [rbp + 8], xmm1
mov eax, dword [str.GREEN]
mov dword [rbp - 8], eax
movzx eax, byte [0x1400be4a8]
mov byte [rbp - 4], al
mov byte [rbp - 3], r15b
movups xmmword [rbp + 0x160], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ioctlsocket]
movdqa xmmword [rbp + 0x170], xmm1
movsd xmm0, qword [str.e_38_5_82m]
movsd qword [rbp + 0x160], xmm0
movzx eax, word [0x1400be4a0]
mov word [rbp + 0x168], ax
mov byte [rbp + 0x16a], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_accept]
movdqa xmmword [rbp + 0x190], xmm1
mov word [rbp + 0x180], Ordinal_45
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x420]
call fcn.140003d80
nop
lea rax, [rbp + 0x440]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x440]
call fcn.140003d80
nop
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x460]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_closesocket]
movdqu xmmword [rbp - 0x18], xmm1
mov eax, dword [0x1400be4bc]
mov word [rbp - 0x28], ax
movzx eax, byte [0x1400be4be]
mov byte [rbp - 0x26], al
mov byte [rbp - 0x25], r15b
movups xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [0x1400bf350]
movdqa xmmword [rbp + 0xf0], xmm1
movsd xmm0, qword [str.e_38_5_196m]
movsd qword [rbp + 0xe0], xmm0
movzx eax, word [0x1400be4b8]
mov word [rbp + 0xe8], ax
movzx eax, byte [0x1400be4ba]
mov byte [rbp + 0xea], al
mov byte [rbp + 0xeb], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_accept]
movdqa xmmword [rbp + 0x110], xmm1
mov word [rbp + 0x100], reloc.WLDAP32.dll_Ordinal_33
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x480]
call fcn.140003d80
nop
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x4a0]
call fcn.140003d80
nop
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x4c0]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getsockname]
movdqu xmmword [rbp - 0x38], xmm1
mov eax, dword [str.YELLOW]
mov dword [rbp - 0x48], eax
movzx eax, word [0x1400be4d0]
mov word [rbp - 0x44], ax
mov byte [rbp - 0x42], r15b
movups xmmword [rbp + 0xa0], xmm0
movdqa xmm1, xmmword [0x1400bf350]
movdqa xmmword [rbp + 0xb0], xmm1
movsd xmm0, qword [str.e_38_5_226m]
movsd qword [rbp + 0xa0], xmm0
movzx eax, word [0x1400be4c8]
mov word [rbp + 0xa8], ax
movzx eax, byte [0x1400be4ca]
mov byte [rbp + 0xaa], al
mov byte [rbp + 0xab], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_accept]
movdqa xmmword [rbp + 0xd0], xmm1
mov word [rbp + 0xc0], 0x7e
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x4e0]
call fcn.140003d80
nop
lea rax, [rbp + 0x500]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x500]
call fcn.140003d80
nop
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x520]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_connect]
movdqu xmmword [rbp + 0x48], xmm1
mov dword [rbp + 0x38], 0x4e415943
mov byte [rbp + 0x3c], r15b
movups xmmword [rbp + 0x320], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x330], xmm1
mov r8d, 0xa
lea rdx, str.e_38_5_45m
lea rcx, [rbp + 0x320]
call fcn.140002720
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x340], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x350], xmm1
mov r8d, 1
lea rdx, [0x1400be4d4]
lea rcx, [rbp + 0x340]
call fcn.140002720
nop
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x540]
call fcn.140003d80
nop
lea rax, [rbp + 0x560]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x560]
call fcn.140003d80
nop
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x580]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getsockopt]
movdqu xmmword [rsp + 0x48], xmm1
mov rax, qword [str.MAGENTA]
mov dword [rsp + 0x38], eax
movzx eax, word [0x1400be4fc]
mov word [rsp + 0x3c], ax
movzx eax, byte [0x1400be4fe]
mov byte [rsp + 0x3e], al
mov byte [rsp + 0x3f], r15b
movups xmmword [rbp + 0x2e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2f0], xmm1
mov r8d, recv
lea rdx, str.e_38_5_201m
lea rcx, [rbp + 0x2e0]
call fcn.140002720
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x300], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x310], xmm1
mov r8d, 1
lea rdx, [0x1400be4e4]
lea rcx, [rbp + 0x300]
call fcn.140002720
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x5a0]
call fcn.140003d80
nop
lea rax, [rbp + 0x5c0]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x5c0]
call fcn.140003d80
nop
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x5e0]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getsockname]
movdqu xmmword [rbp - 0x58], xmm1
mov eax, dword [str.ORANGE]
mov dword [rbp - 0x68], eax
movzx eax, word [0x1400be518]
mov word [rbp - 0x64], ax
mov byte [rbp - 0x62], r15b
movups xmmword [rbp + 0x2a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2b0], xmm1
mov r8d, recv
lea rdx, str.e_38_5_208m
lea rcx, [rbp + 0x2a0]
call fcn.140002720
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2d0], xmm1
mov r8d, 1
lea rdx, [0x1400be500]
lea rcx, [rbp + 0x2c0]
call fcn.140002720
nop
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x600]
call fcn.140003d80
nop
lea rax, [rbp + 0x620]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x620]
call fcn.140003d80
nop
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x640]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getsockname]
movdqu xmmword [rbp - 0x78], xmm1
mov eax, dword [str.PURPLE]
mov dword [rsp + 0x78], eax
movzx eax, word [0x1400be530]
mov word [rsp + 0x7c], ax
mov byte [rsp + 0x7e], r15b
movups xmmword [rbp + 0x260], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x270], xmm1
mov r8d, 0xa
lea rdx, str.e_38_5_93m
lea rcx, [rbp + 0x260]
call fcn.140002720
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x280], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x290], xmm1
mov r8d, 1
lea rdx, [0x1400be51c]
lea rcx, [rbp + 0x280]
call fcn.140002720
nop
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x660]
call fcn.140003d80
nop
lea rax, [rbp + 0x680]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x680]
call fcn.140003d80
nop
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x6a0]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_connect]
movdqu xmmword [rbp + 0x28], xmm1
mov dword [rbp + 0x18], 0x454d494c
mov byte [rbp + 0x1c], r15b
movups xmmword [rbp + 0x220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x230], xmm1
mov r8d, recv
lea rdx, str.e_38_5_154m
lea rcx, [rbp + 0x220]
call fcn.140002720
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x240], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x250], xmm1
mov r8d, 1
lea rdx, [0x1400be534]
lea rcx, [rbp + 0x240]
call fcn.140002720
nop
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x6c0]
call fcn.140003d80
nop
lea rax, [rbp + 0x6e0]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x6e0]
call fcn.140003d80
nop
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x700]
call fcn.140003d80
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_getpeername]
movdqu xmmword [rsp + 0x68], xmm1
mov eax, dword [str.WHITE]
mov dword [rsp + 0x58], eax
movzx eax, byte [0x1400be558]
mov byte [rsp + 0x5c], al
mov byte [rsp + 0x5d], r15b
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov r8d, 0xa
lea rdx, str.e_38_5_15m
lea rcx, [rbp + 0x1e0]
call fcn.140002720
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x210], xmm1
mov r8d, 1
lea rdx, [0x1400be544]
lea rcx, [rbp + 0x200]
call fcn.140002720
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x720]
call fcn.140003d80
nop
lea rax, [rbp + 0x740]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x740]
call fcn.140003d80
nop
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x760]
call fcn.140003d80
nop
lea r14, [rbp + 0x360]
lea rsi, [rbp + 0x780]
mov dword [rbx], r15d
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov ecx, reloc.WS2_32.dll_WSASetLastError
call fcn.1400b7e80
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbx + 8], rax
lea rcx, [rbx + 0x18]
mov qword [rcx], r15
mov qword [rcx + 8], r15
mov qword [rcx + 0x10], r15
mov qword [rbx + 0x30], 7
mov qword [rbx + 0x38], 8
mov dword [rbx], 0x3f800000
mov r8, qword [rbx + 8]
mov edx, reloc.WS2_32.dll_recv
call fcn.14000d080
nop
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call fcn.140002a30
nop
lea r9, [fcn.140005500]
mov edx, 0x60
mov r8d, recv
lea rcx, [rbp + 0x360]
call fcn.1400b7db0
nop
lea rcx, [rbp + 0x1e0]
call fcn.140005570
nop
mov r8, qword [rsp + 0x70]
cmp r8, 0xf
jbe 0x140004aa6
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x58]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x220]
call fcn.140005570
nop
mov r8, qword [rbp + 0x30]
cmp r8, 0xf
jbe 0x140004acb
mov rdx, qword [rbp + 0x18]
lea rcx, [rbp + 0x18]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x260]
call fcn.140005570
nop
mov r8, qword [rbp - 0x70]
cmp r8, 0xf
jbe 0x140004af2
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x78]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x2a0]
call fcn.140005570
nop
mov r8, qword [rbp - 0x50]
cmp r8, 0xf
jbe 0x140004b17
mov rdx, qword [rbp - 0x68]
lea rcx, [rbp - 0x68]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x2e0]
call fcn.140005570
nop
mov r8, qword [rsp + 0x50]
cmp r8, 0xf
jbe 0x140004b3f
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x320]
call fcn.140005570
nop
mov r8, qword [rbp + 0x50]
cmp r8, 0xf
jbe 0x140004b64
mov rdx, qword [rbp + 0x38]
lea rcx, [rbp + 0x38]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0xa0]
call fcn.140005570
nop
mov r8, qword [rbp - 0x30]
cmp r8, 0xf
jbe 0x140004b89
mov rdx, qword [rbp - 0x48]
lea rcx, [rbp - 0x48]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0xe0]
call fcn.140005570
nop
mov r8, qword [rbp - 0x10]
cmp r8, 0xf
jbe 0x140004bae
mov rdx, qword [rbp - 0x28]
lea rcx, [rbp - 0x28]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x160]
call fcn.140005570
nop
mov r8, qword [rbp + 0x10]
cmp r8, 0xf
jbe 0x140004bd3
mov rdx, qword [rbp - 8]
lea rcx, [rbp - 8]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x1a0]
call fcn.140005570
nop
mov r8, qword [rbp + 0x70]
cmp r8, 0xf
jbe 0x140004bf8
mov rdx, qword [rbp + 0x58]
lea rcx, [rbp + 0x58]
call fcn.14000d1c0
nop
lea rcx, [rbp + 0x120]
call fcn.140005570
nop
mov r8, qword [rbp + 0x90]
cmp r8, 0xf
jbe 0x140004c20
mov rdx, qword [rbp + 0x78]
lea rcx, [rbp + 0x78]
call fcn.14000d1c0
nop
mov rax, rdi
mov rcx, qword [rbp + 0x780]
xor rcx, rsp
call fcn.1400b8220
lea r11, [rsp + 0x890]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret