Function at 0x140053738
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xaa0]
sub rsp, 0xba0
mov r15, rdx
mov r14, rcx
xor r12d, r12d
mov al, reloc.WS2_32.dll_send
mov dword [rbp - 0x44], 0x400013
mov dword [rbp - 0x40], 0x55005c
mov dword [rbp - 0x3c], 0x440047
mov dword [rbp - 0x38], 0x410052
mov dword [rbp - 0x34], 0x4f0056
mov dword [rbp - 0x30], 0x7a005e
mov dword [rbp - 0x2c], 0x610070
mov dword [rbp - 0x28], 0x60007c
mov dword [rbp - 0x24], 0x75007c
mov dword [rbp - 0x20], 0x4f0067
mov dword [rbp - 0x1c], 0x7a0044
mov dword [rbp - 0x18], 0x77007d
mov dword [rbp - 0x14], 0x64007c
mov dword [rbp - 0x10], 0x4f0060
mov dword [rbp - 0xc], 0x660050
mov dword [rbp - 8], 0x610061
mov dword [rbp - 4], 0x7d0076
mov dword [rbp], 0x450067
mov dword [rbp + 4], 0x610076
mov dword [rbp + 8], 0x7a0060
mov dword [rbp + 0xc], 0x7d007c
mov dword [rbp + 0x10], 0x46004f
mov dword [rbp + 0x14], 0x7a007d
mov dword [rbp + 0x18], 0x60007d
mov dword [rbp + 0x1c], 0x720067
mov dword [rbp + 0x20], 0x7f007f
mov word [rbp + 0x24], r12w
mov ecx, r12d
movsx eax, al
xor word [rbp + rcx*2 - 0x42], ax
inc rcx
cmp rcx, 0x33
jae 0x140053836
mov al, byte [rbp - 0x44]
jmp 0x140053820
mov word [rbp + 0x24], r12w
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x42]
mov rcx, r15
call fcn.1400e8c14
test eax, eax
jne 0x140053ebc
mov qword [rsp + 0x38], r12
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0x30]
call fcn.1400e8fcc
test eax, eax
jne 0x140053ebc
mov esi, r12d
cmp dword [rbp - 0x60], r12d
je 0x140053eb2
lea edi, [rax + 3]
mov r13d, 0x1000
mov dword [rbp - 0x4c], 0xff
lea r9, [rbp - 0x4c]
lea r8, [rbp + 0xa0]
mov edx, esi
mov rcx, qword [rbp + 0x30]
call fcn.1400e91b4
test eax, eax
jne 0x140053ea7
lea rax, [rbp - 0x42]
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rax + rcx*2], r12w
jne 0x1400538ba
mov eax, dword [rbp - 0x4c]
add eax, 2
add ecx, eax
movsxd rbx, ecx
mov rdx, rbx
lea rcx, [rbp + 0x38]
call fcn.14004f5c8
nop
mov al, 0x5f
mov dword [rbp - 0x5c], 0x7a005f
mov dword [rbp - 0x58], 0x3002c
mov dword [rbp - 0x54], 0x2c007a
mov word [rbp - 0x50], r12w
mov rcx, r12
movsx eax, al
xor word [rbp + rcx*2 - 0x5a], ax
inc rcx
cmp rcx, 5
jae 0x140053911
mov al, byte [rbp - 0x5c]
jmp 0x1400538fb
mov word [rbp - 0x50], r12w
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x42]
lea r8, [rbp - 0x5a]
mov rdx, rbx
mov rbx, qword [rbp + 0x38]
mov rcx, rbx
call fcn.14004d5f4
lea rax, [rbp + 0x28]
mov qword [rsp + 0x20], rax
mov rdx, rbx
mov rcx, r15
call fcn.1400e8c14
test eax, eax
je 0x140053967
test rbx, rbx
je 0x140053ea7
mov rcx, rbx
call fcn.140173310
jmp 0x140053ea7
mov dil, r12b
mov dword [rbp - 0x48], 0x400
mov al, Ordinal_32
mov dword [rsp + 0x60], 0x5b001f
mov dword [rsp + 0x64], 0x6c0076
mov dword [rsp + 0x68], 0x73006f
mov dword [rsp + 0x6c], 0x66007e
mov dword [rsp + 0x70], 0x7e0051
mov dword [rsp + 0x74], 0x7a0072
mov word [rsp + 0x78], r12w
mov rcx, r12
movsx eax, al
xor word [rsp + rcx*2 + 0x62], ax
inc rcx
cmp rcx, 0xb
jae 0x1400539c3
mov al, byte [rsp + 0x60]
jmp 0x1400539ac
mov word [rsp + 0x78], r12w
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x62]
mov rcx, qword [rbp + 0x28]
call fcn.1400e8df8
test eax, eax
jne 0x140053bb9
mov word [rbp + 0xaf0], 0xa7e
mov byte [rbp + 0xaf2], r12b
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x40]
call fcn.1400ddf2c
nop
mov dl, reloc.WLDAP32.dll_Ordinal_35
mov dword [rbp - 0x80], 0x4e426d23
mov dword [rbp - 0x7c], 0x31946
mov rcx, r12
xor byte [rbp + rcx - 0x7f], dl
inc rcx
cmp rcx, 6
jae 0x140053a3a
mov dl, byte [rbp - 0x80]
jmp 0x140053a28
mov byte [rbp - 0x79], r12b
lea rcx, [rbp - 0x7f]
or rdi, 0xffffffffffffffff
mov r9, rdi
inc r9
cmp byte [rcx + r9], r12b
jne 0x140053a49
lea r8, [rbp - 0x7f]
xor edx, edx
mov rcx, rax
call fcn.140046160
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r12b
lea rax, [rbp + 0xaf1]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x140053a99
lea rdx, [rbp + 0xaf1]
lea rcx, [rsp + 0x60]
call fcn.1400052c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rax + 0x18], rdi
mov byte [rax], r12b
lea rdx, [rbp + 0x60]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
mov rcx, r14
call fcn.1400052c0
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140053b37
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, r13
jb 0x140053b31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053ee3
call fcn.140173310
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140053b70
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r13
jb 0x140053b6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053ee9
call fcn.140173310
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x60], r12b
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140053bb6
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, r13
jb 0x140053bb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053eef
call fcn.140173310
mov dil, 1
mov al, reloc.WS2_32.dll_setsockopt
mov dword [rsp + 0x60], 0x510015
mov dword [rsp + 0x64], 0x66007c
mov dword [rsp + 0x68], 0x790065
mov dword [rsp + 0x6c], 0x6c0074
mov dword [rsp + 0x70], 0x700043
mov dword [rsp + 0x74], 0x660067
mov dword [rsp + 0x78], 0x7a007c
mov dword [rsp + 0x7c], 0x7b
mov rcx, r12
movsx eax, al
xor word [rsp + rcx*2 + 0x62], ax
inc rcx
cmp rcx, 0xe
jae 0x140053c15
mov al, byte [rsp + 0x60]
jmp 0x140053bfe
mov word [rsp + 0x7e], r12w
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x62]
mov rcx, qword [rbp + 0x28]
call fcn.1400e8df8
test eax, eax
jne 0x140053e28
mov word [rbp + 0xaf8], 0xa5d
mov byte [rbp + 0xafa], r12b
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x40]
call fcn.1400ddf2c
mov r10, rax
mov cl, reloc.WLDAP32.dll_Ordinal_35
mov dword [rbp - 0x78], 0x51467523
mov dword [rbp - 0x74], 0x4d4c4a50
mov word [rbp - 0x70], 0x319
mov byte [rbp - 0x6e], r12b
mov rax, r12
xor byte [rbp + rax - 0x77], cl
inc rax
cmp rax, 9
jae 0x140053c98
mov cl, byte [rbp - 0x78]
jmp 0x140053c86
mov byte [rbp - 0x6e], r12b
lea rax, [rbp - 0x77]
or rdi, 0xffffffffffffffff
mov r9, rdi
inc r9
cmp byte [rax + r9], r12b
jne 0x140053ca7
lea r8, [rbp - 0x77]
xor edx, edx
mov rcx, r10
call fcn.140046160
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r12b
lea rax, [rbp + 0xaf9]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x140053cf7
lea rdx, [rbp + 0xaf9]
lea rcx, [rsp + 0x60]
call fcn.1400052c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r12b
lea rdx, [rbp + 0x80]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
mov rcx, r14
call fcn.1400052c0
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140053da3
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, r13
jb 0x140053d9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053ef5
call fcn.140173310
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140053ddc
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r13
jb 0x140053dd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053ed7
call fcn.140173310
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], r12b
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140053e31
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, r13
jb 0x140053e21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053edd
call fcn.140173310
jmp 0x140053e31
test dil, dil
je 0x140053e8a
or rdi, 0xffffffffffffffff
mov eax, dword [rbp - 0x60]
dec eax
cmp esi, eax
je 0x140053e8a
mov cl, 0x2b
mov dword [rbp - 0x6d], 0x606062b
mov dword [rbp - 0x69], 0x6060606
mov dword [rbp - 0x65], 0x21060606
mov byte [rbp - 0x61], r12b
mov rax, r12
xor byte [rbp + rax - 0x6c], cl
inc rax
cmp rax, 0xb
jae 0x140053e6a
mov cl, byte [rbp - 0x6d]
jmp 0x140053e58
mov byte [rbp - 0x61], r12b
lea rax, [rbp - 0x6c]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x140053e75
lea rdx, [rbp - 0x6c]
mov rcx, r14
call fcn.1400052c0
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
nop
test rbx, rbx
je 0x140053ea2
mov rcx, rbx
call fcn.140173310
mov edi, 3
inc esi
cmp esi, dword [rbp - 0x60]
jne 0x14005388d
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rbx, qword [rsp + 0xbe0]
add rsp, 0xba0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
int3