Function at 0x1400f2b00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1401e6f00]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rbx, rdx
mov rsi, rcx
mov qword [rbp - 0x18], rdx
xor edi, edi
mov word [rbp - 0x51], reloc.WS2_32.dll_WSAStartup
mov dword [rbp - 0x58], 0x556d756e
mov word [rbp - 0x54], 0x6573
mov byte [rbp - 0x52], WSACleanup
mov byte [rbp - 0x4f], dil
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140007118
nop
cmp byte [rbx], dil
jne 0x1400f2b6e
mov byte [rbx], 1
call fcn.140024954
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x1400f2b82
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14002b278
jmp 0x1400f2b86
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x1400f2b91
mov r8, qword [rax + 8]
jmp 0x1400f2b94
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400f2ba1
mov rdx, qword [r8]
lea rcx, [rsi + 0x158]
mov r8, qword [r8 + 0x10]
call fcn.140008164
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400f2bf0
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f2beb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f2beb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140179794
mov word [rbp - 0x4b], reloc.WS2_32.dll_WSAStartup
mov dword [rbp - 0x58], 0x4f6d756e
mov dword [rbp - 0x54], 0x6e696c6e
mov dword [rbp - 0x50], 0x65735565
mov byte [rbp - 0x4c], WSACleanup
mov byte [rbp - 0x49], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x4a]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140007118
nop
cmp byte [rbx], 0
jne 0x1400f2c3a
mov byte [rbx], 1
call fcn.140024954
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x1400f2c4e
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14002b278
jmp 0x1400f2c52
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x1400f2c5d
mov r8, qword [rax + 8]
jmp 0x1400f2c60
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400f2c6d
mov rdx, qword [r8]
lea rcx, [rsi + 0x178]
mov r8, qword [r8 + 0x10]
call fcn.140008164
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400f2cbc
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f2cb7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f2cb7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140179794
mov dword [rbp - 0x54], 0x737965
mov dword [rbp - 0x58], 0x4b6d756e
mov byte [rbp - 0x50], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140007118
nop
cmp byte [rbx], 0
jne 0x1400f2cf5
mov byte [rbx], 1
call fcn.140024954
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x1400f2d09
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14002b278
jmp 0x1400f2d0d
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x1400f2d18
mov r8, qword [rax + 8]
jmp 0x1400f2d1b
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400f2d28
mov rdx, qword [r8]
lea rcx, [rsi + 0x198]
mov r8, qword [r8 + 0x10]
call fcn.140008164
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400f2d77
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f2d72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f2d72
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140179794
mov dword [rbp - 0x54], 0x6e6f69
mov dword [rbp - 0x58], 0x73726576
mov byte [rbp - 0x50], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140007118
nop
cmp byte [rbx], 0
jne 0x1400f2db0
mov byte [rbx], 1
call fcn.140024954
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x1400f2dc4
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14002b278
jmp 0x1400f2dc8
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x1400f2dd3
mov r8, qword [rax + 8]
jmp 0x1400f2dd6
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400f2de3
mov rdx, qword [r8]
lea rcx, [rsi + 0x1b8]
mov r8, qword [r8 + 0x10]
call fcn.140008164
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400f2e32
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f2e2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f2e2d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140179794
mov word [rbp - 0x48], WSASetLastError
movdqa xmm0, xmmword [0x14019e7a0]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x46], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x47]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140007118
nop
cmp byte [rbx], 0
jne 0x1400f2e70
mov byte [rbx], 1
call fcn.140024954
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x1400f2e84
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14002b278
jmp 0x1400f2e88
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x1400f2e91
mov rdi, qword [rax + 8]
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x1400f2e9e
mov rdx, qword [rdi]
lea rcx, [rsi + 0x1d8]
mov r8, qword [rdi + 0x10]
call fcn.140008164
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400f2eee
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f2ee8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f2ee8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140179794
nop
lea rcx, [rbx + 8]
movzx edx, byte [rbx]
call fcn.140022b7c
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1401794f0
mov rbx, qword [rsp + 0xb0]
add rsp, 0x80
pop rdi
pop rsi
pop rbp
ret