Function at 0x1400166f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rdi
push r14
mov rbp, rsp
sub rsp, 0x50
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rsi
mov rax, qword [0x140158280]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
xor ebx, ebx
mov dword [rbp - 0x28], ebx
test dl, dl
je 0x140016cc9
call fcn.140016610
mov rcx, rax
test rax, rax
setne bl
test ebx, ebx
jne 0x14001674c
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x30], rax
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x14001676f
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ebx, 1
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016791
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], reloc.WS2_32.dll_WSASetLastError
cmp edi, dword [rax - 0xc]
jg 0x140016cbe
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x1400167bd
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x1400167da
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], WSAStartup
cmp edi, dword [rax - 0xc]
jg 0x140016cb3
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016806
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016823
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], reloc.WS2_32.dll_WSAGetLastError
cmp edi, dword [rax - 0xc]
jg 0x140016ca8
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x14001684f
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x14001686c
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], 0x67
cmp edi, dword [rax - 0xc]
jg 0x140016c9d
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016898
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x1400168b5
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], WSAStartup
cmp edi, dword [rax - 0xc]
jg 0x140016c92
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x1400168e1
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x1400168fe
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], reloc.OLEAUT32.dll_VarCyFromUI1
cmp edi, dword [rax - 0xc]
jg 0x140016c87
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x14001692a
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016947
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], WSAGetLastError
cmp edi, dword [rax - 0xc]
jg 0x140016c7c
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016973
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016990
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], 0x69
cmp edi, dword [rax - 0xc]
jg 0x140016c71
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x1400169bc
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x1400169d9
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], WSAGetLastError
cmp edi, dword [rax - 0xc]
jg 0x140016c66
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016a05
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016a22
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], 0x66
cmp edi, dword [rax - 0xc]
jg 0x140016c5b
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016a4e
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016a6b
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], reloc.WS2_32.dll_WSAGetLastError
cmp edi, dword [rax - 0xc]
jg 0x140016c50
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016a97
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016ab4
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], reloc.WS2_32.dll_WSAStartup
cmp edi, dword [rax - 0xc]
jg 0x140016c45
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016ae0
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016afd
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], reloc.WLDAP32.dll_Ordinal_46
cmp edi, dword [rax - 0xc]
jg 0x140016c3a
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016b29
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016b46
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], 0x63
cmp edi, dword [rax - 0xc]
jg 0x140016c2f
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016b72
mov ecx, 0x80070057
call fcn.14000f440
int3
mov edx, ebx
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, edx
jge 0x140016b8f
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], reloc.WS2_32.dll_WSAGetLastError
cmp edi, dword [rax - 0xc]
jg 0x140016c24
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
mov esi, dword [rax - 0x10]
lea edi, [rsi + 1]
test edi, edi
jns 0x140016bbb
mov ecx, 0x80070057
call fcn.14000f440
int3
sub ebx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, edi
or ecx, ebx
jge 0x140016bd6
mov edx, edi
lea rcx, [rbp - 0x30]
call fcn.14001ba70
mov rax, qword [rbp - 0x30]
mov byte [rsi + rax], WSAGetLastError
cmp edi, dword [rax - 0xc]
jg 0x140016c19
mov dword [rax - 0x10], edi
movsxd rcx, edi
mov byte [rcx + rax], 0
lea rbx, [rax - 0x18]
mov rcx, rbx
call fcn.140012a20
add rax, 0x18
mov qword [r14], rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140016cea
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
jmp 0x140016cea
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 0x80070057
call fcn.14000f440
nop
mov dword [rbp - 0x18], 0x616f7373
mov dword [rbp - 0x14], 0x632e6d70
mov word [rbp - 0xf], WSAGetLastError
mov byte [rbp - 0x10], reloc.WS2_32.dll_WSAGetLastError
lea rdx, [rbp - 0x18]
call fcn.14000da00
mov rax, r14
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14006ed70
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x50
pop r14
pop rdi
pop rbp
ret