Function at 0x140007790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x1e8]
sub rsp, 0x2e8
mov rdi, rcx
xor ebx, ebx
mov dword [rbp - 0x38], ebx
call fcn.140012550
mov esi, 1
mov dword [rbp - 0x38], esi
mov dword [rbp - 0x61], 0x2073776f
mov dword [rbp - 0x66], 0x6e69575c
mov dword [rbp - 0x6e], 0x6f726369
mov dword [rbp - 0x77], 0x5754464f
mov dword [rbp - 0x54], 0x72655674
mov dword [rbp - 0x5c], 0x75435c54
mov dword [rbp - 0x72], 0x4d5c4552
mov dword [rbp - 0x4f], 0x6e6f69
mov dword [rbp - 0x58], 0x6e657272
mov byte [rbp - 0x73], 0x41
mov dword [rbp - 0x6a], 0x74666f73
mov byte [rbp - 0x78], 0x53
mov byte [rbp - 0x5d], 0x4e
mov byte [rbp - 0x50], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x62], 0x64
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov r9d, esi
xor r8d, r8d
lea rdx, [rbp - 0x78]
mov rcx, 0xffffffff80000002
call fcn.14002df60
test eax, eax
jne 0x140007aa6
mov dword [rbp + 0x228], esi
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x30]
call fcn.1400abbb0
mov dword [rbp + 0x220], 0x208
mov word [rsp + 0x3b], 0x6572
mov word [rsp + 0x40], 0x7265
mov word [rsp + 0x38], 0x7543
mov word [rsp + 0x3d], 0x746e
mov word [rsp + 0x45], WSACleanup
mov word [rsp + 0x42], 0x6973
mov byte [rsp + 0x3a], WSACleanup
mov byte [rsp + 0x3f], 0x56
mov byte [rsp + 0x44], reloc.WS2_32.dll_WSAGetLastError
lea rax, [rbp + 0x220]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x228]
xor r8d, r8d
lea rdx, [rsp + 0x38]
mov rcx, qword [rbp - 0x40]
call fcn.14002e800
test eax, eax
jne 0x1400078eb
mov word [rbp + 0x218], 0x7325
mov byte [rbp + 0x21a], al
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x218]
mov rcx, rdi
call fcn.140027fe0
mov rcx, rdi
call fcn.140028700
cmp eax, 3
jl 0x140007a9d
xor edx, edx
mov rcx, rdi
call fcn.140012e20
cmp al, 0x36
jne 0x140007a9d
mov edx, 2
mov rcx, rdi
call fcn.140012e20
cmp al, 0x32
je 0x140007934
mov edx, 2
mov rcx, rdi
call fcn.140012e20
cmp al, 0x33
jne 0x140007a9d
mov dword [rbp - 0x48], ebx
mov dword [rbp + 0x218], ebx
xor bl, bl
mov dword [rbp + 0x228], 4
mov dword [rbp + 0x220], 4
mov word [rsp + 0x4a], 0x7272
mov word [rsp + 0x5f], 0x7265
mov dword [rsp + 0x58], 0x4e6e6f69
mov word [rsp + 0x4d], 0x746e
mov word [rsp + 0x48], 0x7543
mov dword [rsp + 0x53], 0x72655672
mov word [rsp + 0x50], 0x6a61
mov word [rsp + 0x5c], 0x6d75
mov byte [rsp + 0x4f], 0x4d
mov byte [rsp + 0x61], bl
mov byte [rsp + 0x5e], 0x62
mov byte [rsp + 0x57], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x4c], 0x65
mov byte [rsp + 0x52], reloc.WS2_32.dll_WSAGetLastError
lea rax, [rbp + 0x220]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x228]
xor r8d, r8d
lea rdx, [rsp + 0x48]
mov rcx, qword [rbp - 0x40]
call fcn.14002e800
movzx ebx, bl
test eax, eax
cmove ebx, esi
mov dword [rbp + 0x228], 4
mov dword [rbp + 0x220], 4
mov dword [rsp + 0x68], 0x72727543
mov dword [rsp + 0x72], 0x6556726f
mov dword [rsp + 0x78], 0x4e6e6f69
mov word [rsp + 0x6d], 0x746e
mov dword [rsp + 0x7e], 0x726562
mov word [rsp + 0x70], 0x6e69
mov byte [rsp + 0x6c], 0x65
mov byte [rsp + 0x6f], 0x4d
mov word [rsp + 0x7c], 0x6d75
mov word [rsp + 0x76], 0x7372
lea rax, [rbp + 0x220]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x218]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x228]
xor r8d, r8d
lea rdx, [rsp + 0x68]
mov rcx, qword [rbp - 0x40]
call fcn.14002e800
test bl, bl
je 0x140007a9d
mov word [rsp + 0x34], 0x64
mov word [rsp + 0x31], 0x2e64
mov byte [rsp + 0x33], 0x25
mov byte [rsp + 0x30], 0x25
mov r9d, dword [rbp + 0x218]
mov r8d, dword [rbp - 0x48]
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.140027fe0
mov rcx, qword [rbp - 0x40]
call fcn.14002fcd0
mov rax, rdi
add rsp, 0x2e8
pop rdi
pop rsi
pop rbx
pop rbp
ret