Function at 0x140016b00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov r15, r9
mov r14, r8
mov rsi, rdx
mov rdi, rcx
mov ebx, 0x28
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140016b3d
mov rcx, qword [rcx]
nop dword [rax]
test r8, r8
jne 0x140016b55
lea rdx, [0x1402c17ee]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140016b88
mov eax, 0x42
cmp byte [0x1402fadfc], 0
cmovne ebx, eax
cmp byte [0x1402fadfd], 0
je 0x140016b70
add ebx, 0x1a
cmp byte [0x1402fadfe], 0
je 0x140016b7c
add ebx, 0x1a
cmp byte [0x1402fae3c], 0
je 0x140016b88
add ebx, 0x1a
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mov rax, qword [0x1402fa668]
or dword [rax + 0x47d0], 2
mov dword [rax + 0x47f0], 0x43200000
movss dword [rax + 0x47f4], xmm0
mov dword [rax + 0x47d8], 1
mov ebx, 0x3e
mov eax, 0x3a
cmp byte [reloc.WS2_32.dll_accept], 0
cmovne ebx, eax
mov rcx, qword [0x1402fb018]
call fcn.140078af0
mov dword [rbp - 0x60], 0x6d6f4267
mov dword [rbp - 0x5c], 0x6e492062
mov word [rbp - 0x58], 0x6f66
mov byte [rbp - 0x56], 0
mov r8d, ebx
xor edx, edx
lea rcx, [rbp - 0x5f]
call fcn.1400760c0
mov dword [rbp + 0x20], 0x432f0000
mov dword [rbp + 0x24], 0x43110000
mov dword [rbp - 0x50], 0x6d6f422f
mov dword [rbp - 0x4c], 0x6e492062
mov word [rbp - 0x48], 0x6f66
mov byte [rbp - 0x46], 0
xor r9d, r9d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x4f]
call fcn.140073400
mov r8, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140016c46
mov rcx, qword [rdi]
test r8, r8
jne 0x140016c5f
lea rdx, [0x1402c17ee]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140017136
movss xmm0, dword [0x1402ce10c]
ucomiss xmm0, dword [rsi]
je 0x140017136
cmp byte [0x1402fadfc], 0
je 0x140016d5e
mov dword [rbp - 0x60], 0x6d6f421c
mov dword [rbp - 0x5c], 0x74695362
mov word [rbp - 0x58], 0x65
mov rcx, qword [0x1402fa668]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016cca
cmp dword [rcx + 0x10], 2
jne 0x140016cc5
cmp dword [rcx + 4], 0
je 0x140016cda
call fcn.1400a27c0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp - 0x5f]
call fcn.1400a1ec0
mov dword [rbp + 0x20], 0x74695322
mov word [rbp + 0x24], 0x65
lea rcx, [rbp + 0x21]
call fcn.1400a3780
call fcn.1400a24a0
cmp qword [rdi + 0x18], 0xf
jbe 0x140016cff
mov rdi, qword [rdi]
mov r8, rdi
mov edx, 0x64
lea rcx, [0x1402fb7e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x1402fb7e0]
nop dword [rax + rax]
call fcn.1400a3780
mov rcx, qword [0x1402fa668]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016d5e
cmp dword [rcx + 0x10], 1
jne 0x140016d59
cmp dword [rcx + 4], 0
je 0x140016d5e
call fcn.1400a27c0
cmp byte [0x1402fadfd], 0
je 0x140016e76
mov dword ds:[rbp + 0x20], 0x6d69543a
mov word [rbp + 0x24], 0x7265
mov byte [rbp + 0x26], 0
mov rcx, qword [0x1402fa668]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016db6
cmp dword [rcx + 0x10], 2
jne 0x140016db1
cmp dword [rcx + 4], 0
je 0x140016dc6
call fcn.1400a27c0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp + 0x21]
call fcn.1400a1ec0
mov dword ds:[rbp + 0x20], 0x6d695443
mov word [rbp + 0x24], 0x7265
mov byte [rbp + 0x26], 0
lea rcx, [rbp + 0x21]
call fcn.1400a3780
call fcn.1400a24a0
mov dword ds:[rbp + 0x20], 1
lea r8, [rbp + 0x20]
mov rdx, rsi
lea rcx, [rbp - 0x20]
call fcn.140016700
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140016e10
mov rax, qword [rax]
mov r8, rax
mov edx, 0x64
lea rcx, [0x1402fb7e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x1402fb7e0]
call fcn.1400a3780
nop
lea rcx, [rbp - 0x20]
call fcn.140003d00
mov rcx, qword [0x1402fa668]
mov rax, qword ds:[rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016e76
cmp dword [rcx + 0x10], 1
jne 0x140016e71
cmp dword [rcx + 4], 0
je 0x140016e76
call fcn.1400a27c0
mov rbx, 0xffffffffffffffff
cmp byte [0x1402fadfe], 0
je 0x140016fd6
mov dword [rbp - 0x60], 0x66654475
mov dword [rbp - 0x5c], 0x6e697375
mov word [rbp - 0x58], 0x67
mov rcx, qword [0x1402fa668]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016ed7
cmp dword [rcx + 0x10], 2
jne 0x140016ed2
cmp dword [rcx + 4], 0
je 0x140016ee7
call fcn.1400a27c0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp - 0x5f]
call fcn.1400a1ec0
mov dword ds:[rbp - 0x60], 0x6665442d
mov dword [rbp - 0x5c], 0x6e697375
mov word [rbp - 0x58], 0x67
lea rcx, [rbp - 0x5f]
call fcn.1400a3780
call fcn.1400a24a0
cmp byte [r14], 0
je 0x140016f23
mov dword [rbp + 0x20], 0x75727420
mov word [rbp + 0x24], 0x65
lea rdx, [rbp + 0x21]
jmp 0x140016f38
mov dword [rbp - 0x60], 0x6c616661
mov word [rbp - 0x5c], 0x6573
mov byte [rbp - 0x5a], 0
lea rdx, [rbp - 0x5f]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140016f50
lea rcx, ds:[rbp - 0x40]
call fcn.140007560
nop
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r8, qword [rbp - 0x40]
mov edx, 0x64
lea rcx, [0x1402fb7e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x1402fb7e0]
call fcn.1400a3780
nop
lea rcx, [rbp - 0x40]
call fcn.140003d00
mov rcx, qword [0x1402fa668]
mov rax, qword ds:[rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016fd6
cmp dword [rcx + 0x10], 1
jne 0x140016fd1
cmp dword [rcx + 4], 0
je 0x140016fd6
call fcn.1400a27c0
cmp byte [0x1402fae3c], 0
nop dword [rax]
je 0x140017136
mov dword [rbp - 0x60], 0x70784558
mov dword [rbp - 0x5c], 0x69736f6c
mov word [rbp - 0x58], 0x6e6f
mov byte [rbp - 0x56], 0
mov rcx, qword [0x1402fa668]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140017037
cmp dword [rcx + 0x10], 2
jne 0x140017032
cmp dword [rcx + 4], 0
je 0x140017047
call fcn.1400a27c0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp - 0x5f]
call fcn.1400a1ec0
mov dword [rbp - 0x50], 0x70784509
mov dword [rbp - 0x4c], 0x69736f6c
mov word [rbp - 0x48], 0x6e6f
mov byte [rbp - 0x46], 0
lea rcx, [rbp - 0x4f]
call fcn.1400a3780
call fcn.1400a24a0
cmp byte [r15], 0
je 0x140017086
mov dword [rbp + 0x20], 0x75727405
mov word [rbp + 0x24], 0x65
lea rdx, [rbp + 0x21]
jmp 0x14001709b
mov dword [rbp - 0x60], 0x6c616609
mov word [rbp - 0x5c], 0x6573
mov byte [rbp - 0x5a], 0
lea rdx, [rbp - 0x5f]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
nop word [rax + rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1400170b0
mov r8, rbx
lea rcx, [rbp - 0x40]
call fcn.140007560
nop
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r8, qword [rbp - 0x40]
mov edx, 0x64
lea rcx, [0x1402fb7e0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x1402fb7e0]
call fcn.1400a3780
nop
lea rcx, [rbp - 0x40]
call fcn.140003d00
mov rcx, qword [0x1402fa668]
mov rax, qword ds:[rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140017136
cmp dword [rcx + 0x10], 1
jne 0x140017131
cmp dword [rcx + 4], 0
je 0x140017136
call fcn.1400a27c0
call fcn.1400734c0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
jmp fcn.1400783a0