Function at 0x140016b60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov r15, r9
mov r14, r8
mov rsi, rdx
mov rdi, rcx
mov ebx, 0x28
mov r8, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x140016b9d
mov rcx, qword [rcx]
nop dword [rax]
test r8, r8
jne 0x140016bb5
lea rdx, [0x1401f3dc6]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140016be8
mov eax, 0x42
cmp byte [0x1402282ac], 0
cmovne ebx, eax
cmp byte [0x1402282ad], 0
je 0x140016bd0
add ebx, 0x1a
cmp byte [0x1402282ae], 0
je 0x140016bdc
add ebx, 0x1a
cmp byte [0x1402282ec], 0
je 0x140016be8
add ebx, 0x1a
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mov rax, qword [0x140227b18]
or dword [rax + 0x47d0], 2
mov dword [rax + 0x47f0], 0x43200000
movss dword [rax + 0x47f4], xmm0
mov dword [rax + 0x47d8], 1
mov ebx, 0x3e
mov eax, 0x3a
cmp byte [reloc.WS2_32.dll_accept], 0
cmovne ebx, eax
mov rcx, qword [0x1402284c8]
call fcn.14007afb0
mov dword [rbp - 0x60], 0x6d6f4238
mov dword [rbp - 0x5c], 0x6e492062
mov word [rbp - 0x58], 0x6f66
mov byte [rbp - 0x56], 0
mov r8d, ebx
xor edx, edx
lea rcx, [rbp - 0x5f]
call fcn.140078580
mov dword [rbp + 0x20], 0x432f0000
mov dword [rbp + 0x24], 0x43110000
mov dword [rbp - 0x50], 0x6d6f422d
mov dword [rbp - 0x4c], 0x6e492062
mov word [rbp - 0x48], 0x6f66
mov byte [rbp - 0x46], 0
xor r9d, r9d
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x4f]
call fcn.1400758c0
mov r8, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140016ca6
mov rcx, qword [rdi]
test r8, r8
jne 0x140016cbf
lea rdx, [0x1401f3dc6]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140017196
movss xmm0, dword [0x14020078c]
ucomiss xmm0, dword [rsi]
je 0x140017196
cmp byte [0x1402282ac], 0
je 0x140016dbe
mov dword [rbp - 0x60], 0x6d6f4232
mov dword [rbp - 0x5c], 0x74695362
mov word [rbp - 0x58], 0x65
mov rcx, qword [0x140227b18]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016d2a
cmp dword [rcx + 0x10], 2
jne 0x140016d25
cmp dword [rcx + 4], 0
je 0x140016d3a
call fcn.1400a4ce0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp - 0x5f]
call fcn.1400a43e0
mov dword [rbp + 0x20], 0x7469530b
mov word [rbp + 0x24], 0x65
lea rcx, [rbp + 0x21]
call fcn.1400a5ca0
call fcn.1400a49c0
cmp qword [rdi + 0x18], 0xf
jbe 0x140016d5f
mov rdi, qword [rdi]
mov r8, rdi
mov edx, 0x64
lea rcx, [0x140228c90]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x140228c90]
nop dword [rax + rax]
call fcn.1400a5ca0
mov rcx, qword [0x140227b18]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016dbe
cmp dword [rcx + 0x10], 1
jne 0x140016db9
cmp dword [rcx + 4], 0
je 0x140016dbe
call fcn.1400a4ce0
cmp byte [0x1402282ad], 0
je 0x140016ed6
mov dword ds:[rbp + 0x20], 0x6d69546e
mov word [rbp + 0x24], 0x7265
mov byte [rbp + 0x26], 0
mov rcx, qword [0x140227b18]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016e16
cmp dword [rcx + 0x10], 2
jne 0x140016e11
cmp dword [rcx + 4], 0
je 0x140016e26
call fcn.1400a4ce0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp + 0x21]
call fcn.1400a43e0
mov dword ds:[rbp + 0x20], 0x6d69542a
mov word [rbp + 0x24], 0x7265
mov byte [rbp + 0x26], 0
lea rcx, [rbp + 0x21]
call fcn.1400a5ca0
call fcn.1400a49c0
mov dword ds:[rbp + 0x20], 1
lea r8, [rbp + 0x20]
mov rdx, rsi
lea rcx, [rbp - 0x20]
call fcn.140016760
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140016e70
mov rax, qword [rax]
mov r8, rax
mov edx, 0x64
lea rcx, [0x140228c90]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x140228c90]
call fcn.1400a5ca0
nop
lea rcx, [rbp - 0x20]
call fcn.140003c40
mov rcx, qword [0x140227b18]
mov rax, qword ds:[rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016ed6
cmp dword [rcx + 0x10], 1
jne 0x140016ed1
cmp dword [rcx + 4], 0
je 0x140016ed6
call fcn.1400a4ce0
mov rbx, 0xffffffffffffffff
cmp byte [0x1402282ae], 0
je 0x140017036
mov dword [rbp - 0x60], 0x66654451
mov dword [rbp - 0x5c], 0x6e697375
mov word [rbp - 0x58], 0x67
mov rcx, qword [0x140227b18]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140016f37
cmp dword [rcx + 0x10], 2
jne 0x140016f32
cmp dword [rcx + 4], 0
je 0x140016f47
call fcn.1400a4ce0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp - 0x5f]
call fcn.1400a43e0
mov dword ds:[rbp - 0x60], 0x66654441
mov dword [rbp - 0x5c], 0x6e697375
mov word [rbp - 0x58], 0x67
lea rcx, [rbp - 0x5f]
call fcn.1400a5ca0
call fcn.1400a49c0
cmp byte [r14], 0
je 0x140016f83
mov dword [rbp + 0x20], 0x75727460
mov word [rbp + 0x24], 0x65
lea rdx, [rbp + 0x21]
jmp 0x140016f98
mov dword [rbp - 0x60], 0x6c616602
mov word [rbp - 0x5c], 0x6573
mov byte [rbp - 0x5a], 0
lea rdx, [rbp - 0x5f]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140016fb0
lea rcx, ds:[rbp - 0x40]
call fcn.1400074e0
nop
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r8, qword [rbp - 0x40]
mov edx, 0x64
lea rcx, [0x140228c90]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x140228c90]
call fcn.1400a5ca0
nop
lea rcx, [rbp - 0x40]
call fcn.140003c40
mov rcx, qword [0x140227b18]
mov rax, qword ds:[rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140017036
cmp dword [rcx + 0x10], 1
jne 0x140017031
cmp dword [rcx + 4], 0
je 0x140017036
call fcn.1400a4ce0
cmp byte [0x1402282ec], 0
nop dword [rax]
je 0x140017196
mov dword [rbp - 0x60], 0x70784545
mov dword [rbp - 0x5c], 0x69736f6c
mov word [rbp - 0x58], 0x6e6f
mov byte [rbp - 0x56], 0
mov rcx, qword [0x140227b18]
mov rax, qword [rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140017097
cmp dword [rcx + 0x10], 2
jne 0x140017092
cmp dword [rcx + 4], 0
je 0x1400170a7
call fcn.1400a4ce0
xor r8d, r8d
lea edx, [r8 + 2]
lea rcx, [rbp - 0x5f]
call fcn.1400a43e0
mov dword [rbp - 0x50], 0x70784548
mov dword [rbp - 0x4c], 0x69736f6c
mov word [rbp - 0x48], 0x6e6f
mov byte [rbp - 0x46], 0
lea rcx, [rbp - 0x4f]
call fcn.1400a5ca0
call fcn.1400a49c0
cmp byte [r15], 0
je 0x1400170e6
mov dword [rbp + 0x20], 0x7572741b
mov word [rbp + 0x24], 0x65
lea rdx, [rbp + 0x21]
jmp 0x1400170fb
mov dword [rbp - 0x60], 0x6c616629
mov word [rbp - 0x5c], 0x6573
mov byte [rbp - 0x5a], 0
lea rdx, [rbp - 0x5f]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
nop word [rax + rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x140017110
mov r8, rbx
lea rcx, [rbp - 0x40]
call fcn.1400074e0
nop
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r8, qword [rbp - 0x40]
mov edx, 0x64
lea rcx, [0x140228c90]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rcx, [0x140228c90]
call fcn.1400a5ca0
nop
lea rcx, [rbp - 0x40]
call fcn.140003c40
mov rcx, qword [0x140227b18]
mov rax, qword ds:[rcx + 0x3ef8]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x3ef8]
mov rcx, qword [rax + 0x1b0]
test rcx, rcx
je 0x140017196
cmp dword [rcx + 0x10], 1
jne 0x140017191
cmp dword [rcx + 4], 0
je 0x140017196
call fcn.1400a4ce0
call fcn.140075980
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
jmp fcn.14007a860