Function at 0x1400ec040
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x1403f20c0]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov rbx, rdx
mov r15, rcx
mov qword [rbp + 0x80], rcx
mov qword [rsp + 0x48], rdx
mov dword [rsp + 0x40], 1
lea rcx, [0x14048d6c2]
call fcn.140289ea0
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov dword [rbp + 0x98], 0x6e676976
mov dword [rbp + 0x9c], 0x5f65726f
mov dword [rbp + 0xa0], 0x726c70
movups xmmword [rsp + 0x58], xmm0
xor esi, esi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
lea rax, [rbp + 0x99]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], sil
jne 0x1400ec0e0
lea rdx, [rbp + 0x99]
lea rcx, [rsp + 0x58]
call fcn.140043b60
nop
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0xc0]
call fcn.14004c430
nop
lea rcx, [rsp + 0x58]
call fcn.14005bde0
lea r13, [r15 + 0x50]
mov qword [r13], rsi
mov qword [r13 + 8], rsi
mov qword [r13 + 0x10], rsi
lea r12, [r15 + 0x68]
xorps xmm0, xmm0
movups xmmword [r12], xmm0
mov qword [r12 + 0x10], rsi
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], 0
mov byte [r15 + 0x89], 1
mov dword [rsp + 0x40], 1
mov eax, dword [rbp + 0xc0]
add eax, 2
cmp eax, 1
jbe 0x1400ec1bd
mov rdx, qword [rbp + 0xc8]
lea rcx, [rbp + 0xc0]
call fcn.14005b5e0
mov rsi, qword [rbp + 0xc8]
xor eax, eax
mov qword [rbp + 0x90], rax
lea r8, [rbp + 0x90]
mov edx, r14d
mov rcx, rsi
call fcn.140046650
movzx edi, al
mov edx, r14d
sub edx, dword [rbp + 0x94]
mov rcx, rsi
call fcn.1400960f0
test dil, dil
jne 0x1400ecd59
xor esi, esi
cmp rbx, 0x400000
jbe 0x1400ecd59
movabs rax, 0xcccccccccccccccc
cmp rbx, rax
je 0x1400ecd59
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
ja 0x1400ecd59
mov rax, qword [0x140466790]
mov edx, dword [rax + 0x5c]
add rdx, rbx
mov qword [rbp + 0x90], rsi
mov r9d, 8
lea r8, [rbp + 0x90]
mov rcx, qword [0x1404667a0]
call fcn.1400ebf90
mov rax, qword [rbp + 0x90]
mov qword [rbp - 0x68], rax
lea rcx, [rax - 0x400001]
movabs rdx, 0x7fffffffffbffffe
cmp rcx, rdx
ja 0x1400ecd59
mov qword [r15], rbx
mov qword [r15 + 8], rax
mov rax, qword [0x140466790]
mov edx, dword [rax + 0x54]
add rdx, rbx
mov qword [rbp + 0xb0], rsi
mov r9d, 8
lea r8, [rbp + 0xb0]
mov rcx, qword [0x1404667a0]
call fcn.1400ebf90
mov rax, qword [rbp + 0xb0]
mov qword [r15 + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
mov dword [rbp + 0x98], 0x6d754810
mov dword [rbp + 0x9c], 0x696f6e61
mov word [rbp + 0xa0], 0x64
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rsi
lea rax, [rbp + 0x99]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec2d3
lea rdx, [rbp + 0x99]
lea rcx, [rbp - 0x20]
call fcn.140043b60
nop
movdqa xmm0, xmmword [0x1403c0740]
movdqu xmmword [rbp + 0x98], xmm0
mov word [rbp + 0xa8], reloc.WS2_32.dll_WSACleanup
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
lea rax, [rbp + 0x99]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec320
lea rdx, [rbp + 0x99]
lea rcx, [rbp]
call fcn.140043b60
nop
mov dword [rbp + 0x90], 0x61654811
mov word [rbp + 0x94], 0x64
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
lea rax, [rbp + 0x91]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec370
lea rdx, [rbp + 0x91]
lea rcx, [rbp + 0x20]
call fcn.140043b60
nop
movdqa xmm0, xmmword [0x1403c0180]
movdqu xmmword [rbp + 0x98], xmm0
mov dword [rbp + 0xa8], 0x544e4941
mov byte [rbp + 0xac], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
lea rax, [rbp + 0x99]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec3c5
lea rdx, [rbp + 0x99]
lea rcx, [rbp + 0x40]
call fcn.140043b60
nop
mov dword [rbp + 0x98], 0x646f421f
mov dword [rbp + 0x9c], 0x66664579
mov dword [rbp + 0xa0], 0x73746365
mov byte [rbp + 0xa4], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], rsi
lea rax, [rbp + 0x99]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec420
lea rdx, [rbp + 0x99]
lea rcx, [rbp + 0x60]
call fcn.140043b60
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov ecx, 0xa0
call fcn.140064230
mov rbx, rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
add rax, 0xa0
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rbp + 0xb0], rax
lea rdi, [rbp - 0x20]
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0x98], rbx
mov qword [rbp + 0xa0], rbx
lea rax, [rsp + 0x58]
mov qword [rbp + 0xa8], rax
nop
mov rdx, rdi
mov rcx, rbx
call fcn.140059850
add rbx, 0x20
mov qword [rbp + 0xa0], rbx
add rdi, 0x20
lea rax, [rbp + 0x80]
cmp rdi, rax
jne 0x1400ec4a0
mov qword [rsp + 0x60], rbx
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x68]
call fcn.1400f47b0
nop
lea rcx, [rsp + 0x58]
call fcn.14005bd40
nop
lea r9, [fcn.140059620]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 5
lea rcx, [rbp - 0x20]
call fcn.140288b74
mov dword [rbp + 0x98], 0x6d754832
mov dword [rbp + 0x9c], 0x696f6e61
mov word [rbp + 0xa0], 0x64
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x99]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec540
lea rdx, [rbp + 0x99]
lea rcx, [rsp + 0x20]
call fcn.140043b60
nop
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xe0]
call fcn.1400f8ca0
mov rbx, qword [rax]
mov rbx, qword [rbx + 0x30]
lea rcx, [rsp + 0x20]
call fcn.14005bde0
lea rax, [rbx - 0x400001]
movabs rdi, 0x7fffffffffbffffe
cmp rax, rdi
ja 0x1400ec59f
mov qword [r15 + 0x18], rbx
movdqa xmm0, xmmword [0x1403c0760]
movdqu xmmword [rbp + 0x98], xmm0
mov word [rbp + 0xa8], reloc.WS2_32.dll_WSACleanup
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x99]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec5d4
lea rdx, [rbp + 0x99]
lea rcx, [rsp + 0x20]
call fcn.140043b60
nop
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xe0]
call fcn.1400f8ca0
mov rbx, qword [rax]
mov rbx, qword [rbx + 0x30]
lea rcx, [rsp + 0x20]
call fcn.14005bde0
lea rax, [rbx - 0x400001]
cmp rax, rdi
ja 0x1400ec629
mov qword [r15 + 0x20], rbx
mov dword [rbp + 0x90], 0x61654841
mov word [rbp + 0x94], 0x64
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x91]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec660
lea rdx, [rbp + 0x91]
lea rcx, [rsp + 0x20]
call fcn.140043b60
nop
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xe0]
call fcn.1400f8ca0
mov rbx, qword [rax]
mov rbx, qword [rbx + 0x30]
lea rcx, [rsp + 0x20]
call fcn.14005bde0
lea rax, [rbx - 0x400001]
cmp rax, rdi
ja 0x1400ec6b5
mov qword [r15 + 0x28], rbx
movdqa xmm0, xmmword [0x1403c0190]
movdqu xmmword [rbp + 0x98], xmm0
mov dword [rbp + 0xa8], 0x544e4941
mov byte [rbp + 0xac], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x99]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec6f2
lea rdx, [rbp + 0x99]
lea rcx, [rsp + 0x20]
call fcn.140043b60
nop
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xe0]
call fcn.1400f8ca0
mov rbx, qword [rax]
mov rbx, qword [rbx + 0x30]
lea rcx, [rsp + 0x20]
call fcn.14005bde0
lea rax, [rbx - 0x400001]
cmp rax, rdi
ja 0x1400ec747
mov qword [r15 + 0x48], rbx
mov dword [rbp + 0x98], 0x646f4236
mov dword [rbp + 0x9c], 0x66664579
mov dword [rbp + 0xa0], 0x73746365
mov byte [rbp + 0xa4], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x99]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec790
lea rdx, [rbp + 0x99]
lea rcx, [rsp + 0x20]
call fcn.140043b60
nop
lea r8, [rsp + 0x20]
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xe0]
call fcn.1400f8ca0
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x30]
mov qword [rbp + 0xb0], rbx
lea rcx, [rsp + 0x20]
call fcn.14005bde0
lea rax, [rbx - 0x400001]
cmp rax, rdi
ja 0x1400ec8c8
mov dword [rbp + 0x90], 0x4f2e4b46
mov byte [rbp + 0x94], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x91]
mov r8, r14
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec820
lea rdx, [rbp + 0x91]
lea rcx, [rsp + 0x20]
call fcn.140043b60
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.1400f4600
mov rcx, qword [rax]
mov qword [r15 + 0x38], rcx
mov dword [rbp + 0x90], 0x6d724175
mov word [rbp + 0x94], 0x726f
mov byte [rbp + 0x96], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0x91]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec890
lea rdx, [rbp + 0x91]
lea rcx, [rsp + 0x20]
call fcn.140043b60
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.1400f4600
mov rcx, qword [rax]
mov qword [r15 + 0x30], rcx
mov dword [rbp + 0xb0], 0x7461445f
mov dword [rbp + 0xb4], 0x6c6f4661
mov dword [rbp + 0xb8], 0x726564
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rsi
lea rax, [rbp + 0xb1]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec902
lea rdx, [rbp + 0xb1]
lea rcx, [rsp + 0x20]
call fcn.140043b60
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x48]
call fcn.1400f4600
mov rbx, rax
mov dword [rbp + 0xb0], 0x666e4967
mov dword [rbp + 0xb4], 0x616d726f
mov dword [rbp + 0xb8], 0x6e6f6974
mov byte [rbp + 0xbc], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rsi
lea rax, [rbp + 0xb1]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec972
lea rdx, [rbp + 0xb1]
lea rcx, [rbp - 0x40]
call fcn.140043b60
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x98]
mov rcx, rbx
call fcn.1400f4600
mov rbx, rax
mov dword [rbp + 0x90], 0x6572433c
mov word [rbp + 0x94], 0x77
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
lea rax, [rbp + 0x91]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400ec9d0
lea rdx, [rbp + 0x91]
lea rcx, [rsp + 0x78]
call fcn.140043b60
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0xb0]
mov rcx, rbx
call fcn.1400f4600
mov rax, qword [rbp + 0xb0]
lea rcx, [rax - 0x400001]
cmp rcx, rdi
ja 0x1400eca16
mov qword [r15 + 0x40], rax
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x48]
cmp byte [0x14046659e], 0
je 0x1400eca35
mov r8, qword [rsp + 0x48]
call fcn.1400f4140
jmp 0x1400eca3a
call fcn.1400f4040
cmp r12, rax
mov rbx, rax
je 0x1400eca6b
mov rcx, r12
call fcn.14005bde0
movups xmm0, xmmword [rbx]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
lea rcx, [rsp + 0x78]
call fcn.14005bde0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov dword [rbp + 0x98], 0x70736573
mov dword [rbp + 0x9c], 0x6d616e5f
mov word [rbp + 0xa0], 0x65
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
lea rax, [rbp + 0x99]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x1400ecab3
lea rdx, [rbp + 0x99]
lea rcx, [rsp + 0x78]
call fcn.140043b60
nop
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x78]
lea rdx, [rbp + 0xd0]
call fcn.14004c430
nop
lea rcx, [rsp + 0x78]
call fcn.14005bde0
mov eax, dword [rbp + 0xd0]
add eax, 2
cmp eax, 1
jbe 0x1400ecb9c
mov rdx, qword [rbp + 0xd8]
lea rcx, [rbp + 0xd0]
call fcn.14005b5e0
mov rbx, qword [rbp + 0xd8]
mov qword [rbp + 0x90], 0
lea r9, [rbp + 0x90]
mov r8d, r14d
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.14004b710
mov dword [rsp + 0x40], 0xf1
mov edx, r14d
sub edx, dword [rbp + 0x94]
mov rcx, rbx
call fcn.1400960f0
nop
mov dword [rsp + 0x40], 0xef
lea rax, [rbp - 0x60]
cmp r12, rax
je 0x1400ecb93
mov rcx, r12
call fcn.14005bde0
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [r12], xmm0
movups xmm1, xmmword [rbp - 0x50]
movups xmmword [r12 + 0x10], xmm1
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x60], 0
lea rcx, [rbp - 0x60]
call fcn.14005bde0
lea rcx, [rsp + 0x48]
call fcn.1400f7280
mov byte [r15 + 0x88], al
mov rcx, qword [r15 + 0x18]
lea rax, [rcx - 0x400001]
cmp rax, rdi
jbe 0x1400ecbc2
xorps xmm0, xmm0
jmp 0x1400ecbd7
mov rax, qword [0x140466790]
mov edx, dword [rax + 0xb4]
add rdx, rcx
call fcn.1400f86a0
movss dword [r15 + 0x8c], xmm0
cmp byte [0x14046659d], 0
jne 0x1400eccd3
cmp byte [0x14046659f], 0
jne 0x1400eccd3
mov dword [rbp + 0x98], 0x6f6c4376
mov dword [rbp + 0x9c], 0x74736573
mov dword [rbp + 0xa0], 0x74726150
mov byte [rbp + 0xa4], 0
movsxd rcx, dword [0x1404664e0]
shl rcx, 5
mov rbx, qword [0x1404672a8]
add rcx, rbx
lea rdx, [rbp + 0x99]
mov rax, r14
nop
inc rax
cmp byte [rdx + rax], 0
jne 0x1400ecc40
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1400ecc57
mov rcx, qword [rcx]
cmp r8, rax
jne 0x1400ecc6c
lea rdx, [rbp + 0x99]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400eccd3
mov dword [rbp + 0x98], 0x6f6c4378
mov dword [rbp + 0x9c], 0x74736573
mov dword [rbp + 0xa0], 0x74726150
mov byte [rbp + 0xa4], 0
movsxd rcx, dword [0x1404665c8]
shl rcx, 5
add rcx, rbx
lea rax, [rbp + 0x99]
inc r14
cmp byte [rax + r14], 0
jne 0x1400ecca6
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1400eccbe
mov rcx, qword [rcx]
cmp r8, r14
jne 0x1400ecd1e
lea rdx, [rbp + 0x99]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400ecd1e
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x68]
call fcn.1400f4be0
mov rbx, rax
cmp r13, rax
je 0x1400ecd13
mov rcx, r13
call fcn.14005b660
mov rax, qword [rbx]
mov qword [r13], rax
mov rax, qword [rbx + 8]
mov qword [r13 + 8], rax
mov rax, qword [rbx + 0x10]
mov qword [r13 + 0x10], rax
mov qword [rbx], rsi
mov qword [rbx + 8], rsi
mov qword [rbx + 0x10], rsi
lea rcx, [rsp + 0x58]
call fcn.14005b660
nop
mov rdx, qword [rbp + 0xd8]
test rdx, rdx
je 0x1400ecd40
cmp dword [rbp + 0xd0], 0xfffffffe
je 0x1400ecd40
lea rcx, [rbp + 0xd0]
call fcn.140044a90
nop
lea rcx, [rbp + 0xf8]
call fcn.140057a70
lea rcx, [rbp + 0xe8]
call fcn.1400f7860
nop
mov rdx, qword [rbp + 0xc8]
test rdx, rdx
je 0x1400ecd7a
cmp dword [rbp + 0xc0], 0xfffffffe
je 0x1400ecd7a
lea rcx, [rbp + 0xc0]
call fcn.140044a90
mov rax, r15
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.1402889f0
mov rbx, qword [rsp + 0x280]
add rsp, 0x230
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret