Function at 0x140099240
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
lea rbp, [rax - 0x3a8]
sub rsp, 0x4a0
mov rbx, rdx
mov dword [rbp - 0x20], 0xc7553e28
mov dword [rbp - 0x1c], 0xfd5c5579
mov dword [rbp - 0x18], 0x616fd36e
mov dword [rbp - 0x14], 0xb924b806
mov dword [rbp - 0x10], 0xf3fbf8d8
mov dword [rbp - 0xc], 0xeb97bf4b
mov dword [rbp - 8], 0x501980c0
mov dword [rbp - 4], 0xf7985c94
mov dword [rbp], 0x26521efd
mov dword [rbp + 4], 0x2d6ea071
mov dword [rbp + 8], 0xaf82bf51
mov dword [rbp + 0xc], 0x64107dde
mov dword [rbp + 0xa0], 0xec76f2e1
mov dword [rbp + 0xa4], 0x394eebc6
mov dword [rbp + 0xa8], 0x976ed4a7
mov dword [rbp + 0xac], 0xe51c3133
mov dword [rbp + 0xb0], 0x9e1ccf02
mov dword [rbp + 0xb4], 0xa2b2c674
mov dword [rbp + 0xb8], 0x8c635c0b
mov dword [rbp + 0xbc], 0x56cb1397
mov dword [rbp + 0xc0], 0xbb18e257
mov dword [rbp + 0xc4], 0x950c2b31
mov dword [rbp + 0xc8], 0xf6fdd192
mov dword [rbp + 0xcc], 0xc271ea37
mov dword [rbp + 0xd0], 0xb028dce7
mov dword [rbp + 0xd4], 0x778f9c8f
mov dword [rbp + 0xd8], 0x1b4adcfd
mov dword [rbp + 0xdc], 0x607c917e
mov dword [rsp + 0x60], 0x66472562
mov dword [rsp + 0x64], 0x3cfff0e
mov dword [rsp + 0x68], 0x3dfe3ba9
mov dword [rsp + 0x6c], 0xafbcfbe5
mov dword [rsp + 0x70], 0xb85b2a21
mov dword [rsp + 0x74], 0x9a5eb9f1
mov dword [rsp + 0x78], 0xe77ee269
mov dword [rsp + 0x7c], 0xcc3fdeca
mov dword [rbp + 0x10], 0xe26958e
mov dword [rbp + 0x14], 0x3c8fbba4
mov dword [rbp + 0x18], 0xf04338ff
mov dword [rbp + 0x1c], 0xc57a6088
mov dword [rbp + 0x20], 0xa639d0e
mov dword [rbp + 0x24], 0x12912532
mov dword [rbp + 0x28], 0x859c0386
mov dword [rbp + 0x2c], 0x5dc97896
mov dword [rbp + 0x30], 0x19d79ef3
mov dword [rbp + 0x34], 0x8fa43b5b
mov dword [rbp + 0x38], 0x46af993e
mov dword [rbp + 0x3c], 0x420b6045
mov dword [rbp + 0x40], 0xb81e49d2
mov dword [rbp + 0x44], 0x3420824d
mov dword [rbp + 0x48], 0x506dcb0b
mov dword [rbp + 0x4c], 0x8ce30497
mov dword [rbp + 0x50], 0x9b425365
mov dword [rbp + 0x54], 0x24640a36
mov dword [rbp + 0x58], 0x3c0c801d
mov dword [rbp + 0x5c], 0x7002ec04
mov dword [rbp + 0x60], 0xce2b8264
mov dword [rbp + 0x64], 0xf0f36f7c
mov dword [rbp + 0x68], 0xa63adfe0
mov dword [rbp + 0x6c], 0xf73d85c0
mov dword [rsp + 0x20], 0xc637a35e
mov dword [rsp + 0x24], 0x307d83dd
mov dword [rsp + 0x28], 0x6a7d17c2
mov dword [rsp + 0x2c], 0x96802580
mov dword [rsp + 0x30], 0x1af64163
mov dword [rsp + 0x34], 0x2b01e745
mov dword [rsp + 0x38], 0x4ef76bca
mov dword [rsp + 0x3c], 0x2374c845
mov dword [rbp + 0xe0], 0xba4ca824
mov dword [rbp + 0xe4], 0x1eb8a1da
mov dword [rbp + 0xe8], 0x9873cdb
mov dword [rbp + 0xec], 0x1663bd0d
mov dword [rbp + 0xf0], 0xfffd03bb
mov dword [rbp + 0xf4], 0x44cbba67
mov dword [rbp + 0xf8], 0x3676ad46
mov dword [rbp + 0xfc], 0xcdd23bdb
mov dword [rbp + 0x100], 0xd54a9891
mov dword [rbp + 0x104], 0x69a9506b
mov dword [rbp + 0x108], 0x1c81c8e9
mov dword [rbp + 0x10c], 0x206254b8
mov dword [rbp + 0x110], 0x3ea208f1
mov dword [rbp + 0x114], 0x2a18ca68
mov dword [rbp + 0x118], 0xc4b7fd2a
mov dword [rbp + 0x11c], 0x17161a99
mov dword [rbp + 0x120], 0x8dda387d
mov dword [rbp + 0x124], 0x89dfa73a
mov dword [rbp + 0x128], 0xb1c65d15
mov dword [rbp + 0x12c], 0x14c45fb9
mov dword [rbp + 0x130], 0x2c570506
mov dword [rbp + 0x134], 0xe1b5bd65
mov dword [rbp + 0x138], 0xb8cf01e4
mov dword [rbp + 0x13c], 0x63c230af
mov dword [rbp + 0x140], 0x8202ebaa
mov dword [rbp + 0x144], 0xae0367d2
mov dword [rbp + 0x148], 0x2c1b1295
mov dword [rbp + 0x14c], 0xc3da6cfa
mov dword [rbp + 0x150], 0x21caece7
mov dword [rbp + 0x154], 0x89b84364
mov dword [rbp + 0x158], 0xa421154
mov dword [rbp + 0x15c], 0xa9f7f150
mov dword [rbp + 0x320], 0xba4ca824
mov dword [rbp + 0x324], 0x1eb8a1da
mov dword [rbp + 0x328], 0x9873cdb
mov dword [rbp + 0x32c], 0x1663bd0d
mov dword [rbp + 0x330], 0xfffd03bb
mov dword [rbp + 0x334], 0x44cbba67
mov dword [rbp + 0x338], 0x3676ad46
mov dword [rbp + 0x33c], 0xcdd23bdb
mov dword [rbp + 0x340], 0x67024241
mov dword [rbp + 0x344], 0x9b7b038f
mov dword [rbp + 0x348], 0xff550cda
mov dword [rbp + 0x34c], 0xab1c8c96
mov dword [rbp + 0x350], 0x52e16b98
mov dword [rbp + 0x354], 0xd0fef8c8
mov dword [rbp + 0x358], 0xec92472f
mov dword [rbp + 0x35c], 0x1d5953a5
mov dword [rbp + 0x360], 0x3a6417c3
mov dword [rbp + 0x364], 0xe1889bb0
mov dword [rbp + 0x368], 0x567921e4
mov dword [rbp + 0x36c], 0x98e16747
mov dword [rbp + 0x370], 0xbe5d4577
mov dword [rbp + 0x374], 0xe09d3948
mov dword [rbp + 0x378], 0x6cea6c4b
mov dword [rbp + 0x37c], 0x17e4e9a7
mov dword [rbp + 0x380], 0x2b410774
mov dword [rbp + 0x384], 0x25babfb9
mov dword [rbp + 0x388], 0x37543153
mov dword [rbp + 0x38c], 0x94872993
mov dword [rbp + 0x390], 0x55873939
mov dword [rbp + 0x394], 0xe450dd5a
mov dword [rbp + 0x398], 0xd072722b
mov dword [rbp + 0x39c], 0xdaea0970
mov dword [rbp + 0x2b0], 0xbcbf3e99
mov dword [rbp + 0x2b4], 0x12cda5ef
mov dword [rbp + 0x2b8], 0xf694993
mov dword [rbp + 0x2bc], 0x865b53a4
mov dword [rbp + 0x2c0], 0x19603c97
mov dword [rbp + 0x2c4], 0x26514016
mov dword [rbp + 0x2c8], 0xe3702c6d
mov dword [rbp + 0x2cc], 0xe1c6f143
mov dword [rbp + 0x2d0], 0x7938f149
mov dword [rbp + 0x2d4], 0xe2ca3fb4
mov dword [rbp + 0x2d8], 0xde459e61
mov dword [rbp + 0x2dc], 0x86f2f52b
mov dword [rbp + 0x2e0], 0x447ee610
mov dword [rbp + 0x2e4], 0xc4ceb780
mov dword [rbp + 0x2e8], 0x7e601b5e
mov dword [rbp + 0x2ec], 0x5c01db17
mov dword [rbp + 0x2f0], 0x3e984023
mov dword [rbp + 0x2f4], 0xec0546db
mov dword [rbp + 0x2f8], 0xffe7189e
mov dword [rbp + 0x2fc], 0x1bf28a8d
mov dword [rbp + 0x300], 0xc38bfee0
mov dword [rbp + 0x304], 0xb5a2ba2b
mov dword [rbp + 0x308], 0x98e7efe
mov dword [rbp + 0x30c], 0x3b5a5294
mov dword [rbp + 0x310], 0xde3b9d88
mov dword [rbp + 0x314], 0xdcbfd222
mov dword [rbp + 0x318], 0x4fd4478
mov dword [rbp + 0x31c], 0x693a4a89
mov dword [rsp + 0x40], 0x50748f45
mov dword [rsp + 0x44], 0xdab3ffbc
mov dword [rsp + 0x48], 0xf4513f71
mov dword [rsp + 0x4c], 0x732bd513
mov dword [rbp + 0x70], 0xa601ab65
mov dword [rbp + 0x74], 0xdf2b8e99
mov dword [rbp + 0x78], 0xbcbec2e1
mov dword [rbp + 0x7c], 0x9ee9e150
mov dword [rbp + 0x80], 0x52989f46
mov dword [rbp + 0x84], 0xdc47af85
mov dword [rbp + 0x88], 0xd5b91c75
mov dword [rbp + 0x8c], 0x81ab0016
mov dword [rbp + 0x90], 0x83b4e620
mov dword [rbp + 0x94], 0x9efeaa13
mov dword [rbp + 0x98], 0xb856c56
mov dword [rbp + 0x9c], 0x5486fe37
mov dword [rbp - 0x80], 0x266cfea7
mov dword [rbp - 0x7c], 0x93815b5e
mov dword [rbp - 0x78], 0x9a083a30
mov dword [rbp - 0x74], 0xef46a239
mov dword [rbp - 0x70], 0x1a07a643
mov dword [rbp - 0x6c], 0x79d3957d
mov dword [rbp - 0x68], 0x54c893fe
mov dword [rbp - 0x64], 0x4b0f629f
mov dword [rbp - 0x60], 0x6b7c72b2
mov dword [rbp - 0x5c], 0xc6a9bc3a
mov dword [rbp - 0x58], 0xd74b0cf6
mov dword [rbp - 0x54], 0xb9709256
mov dword [rbp - 0x50], 0xdaa64fa0
mov dword [rbp - 0x4c], 0xfdc8703d
mov dword [rbp - 0x48], 0x10d8a395
mov dword [rbp - 0x44], 0x3344513
mov dword [rbp + 0x1f0], 0x922534c8
mov dword [rbp + 0x1f4], 0xb490e96b
mov dword [rbp + 0x1f8], 0xec0b3e43
mov dword [rbp + 0x1fc], 0x14afe0db
mov dword [rbp + 0x200], 0x63eda319
mov dword [rbp + 0x204], 0x8b76a661
mov dword [rbp + 0x208], 0x49edb9ff
mov dword [rbp + 0x20c], 0x761a7bf2
mov dword [rbp + 0x210], 0xaa953416
mov dword [rbp + 0x214], 0x707be764
mov dword [rbp + 0x218], 0xb6ecd625
mov dword [rbp + 0x21c], 0xf35efedc
mov dword [rbp + 0x220], 0x72eb9bad
mov dword [rbp + 0x224], 0xb8f5657d
mov dword [rbp + 0x228], 0x2dabe8c5
mov dword [rbp + 0x22c], 0x8c501fd9
mov dword [rbp + 0x230], 0x21ce8d29
mov dword [rbp + 0x234], 0x68085363
mov dword [rbp + 0x238], 0xe607ddc1
mov dword [rbp + 0x23c], 0xde1ee050
mov dword [rbp + 0x240], 0x248b1be1
mov dword [rbp + 0x244], 0x98383fe4
mov dword [rbp + 0x248], 0x6f200801
mov dword [rbp + 0x24c], 0x8e54ae2e
mov dword [rbp + 0x1a0], 0xdf735ab
mov dword [rbp + 0x1a4], 0x3ddd31d1
mov dword [rbp + 0x1a8], 0xe3895e77
mov dword [rbp + 0x1ac], 0xc50e3431
mov dword [rbp + 0x1b0], 0xfe7ada7a
mov dword [rbp + 0x1b4], 0x4d02376c
mov dword [rbp + 0x1b8], 0xb214b726
mov dword [rbp + 0x1bc], 0x3c426fb0
mov dword [rbp + 0x1c0], 0x47511f3
mov dword [rbp + 0x1c4], 0x24e1323d
mov dword [rbp + 0x1c8], 0xebd7e32b
mov dword [rbp + 0x1cc], 0xaeb4f7c8
mov dword [rbp + 0x1d0], 0x87583e8d
mov dword [rbp + 0x1d4], 0x861fbaea
mov dword [rbp + 0x1d8], 0x76e6fce8
mov dword [rbp + 0x1dc], 0xdcd87053
mov dword [rbp + 0x1e0], 0x599b177c
mov dword [rbp + 0x1e4], 0xe1009911
mov dword [rbp + 0x1e8], 0xb0894f60
mov dword [rbp + 0x1ec], 0x277228e7
mov dword [rbp + 0x250], 0xba4ca824
mov dword [rbp + 0x254], 0x1eb8a1da
mov dword [rbp + 0x258], 0x9873cdb
mov dword [rbp + 0x25c], 0x1663bd0d
mov dword [rbp + 0x260], 0xbb449a06
mov dword [rbp + 0x264], 0x84148374
mov dword [rbp + 0x268], 0x4e0ea3f8
mov dword [rbp + 0x26c], 0x648defc4
mov dword [rbp + 0x270], 0xf94a9017
mov dword [rbp + 0x274], 0x50228a72
mov dword [rbp + 0x278], 0x88104689
mov dword [rbp + 0x27c], 0x2b7f1589
mov dword [rbp + 0x280], 0x8d39fa68
mov dword [rbp + 0x284], 0x4c2897f9
mov dword [rbp + 0x288], 0x30ccc125
mov dword [rbp + 0x28c], 0x687f7097
mov dword [rbp + 0x290], 0x84c9a640
mov dword [rbp + 0x294], 0xd521b924
mov dword [rbp + 0x298], 0xae7f09e7
mov dword [rbp + 0x29c], 0x573d5d8f
mov dword [rbp + 0x2a0], 0x41805f2c
mov dword [rbp + 0x2a4], 0xe476bf95
mov dword [rbp + 0x2a8], 0x6130eddd
mov dword [rbp + 0x2ac], 0xe440e7ad
mov dword [rsp + 0x50], 0x89eac9f5
mov dword [rsp + 0x54], 0x6f2e69e1
mov dword [rsp + 0x58], 0xde5200d1
mov dword [rsp + 0x5c], 0x33b07a64
mov dword [rbp + 0x160], 0xba4ca824
mov dword [rbp + 0x164], 0x1eb8a1da
mov dword [rbp + 0x168], 0x9873cdb
mov dword [rbp + 0x16c], 0x1663bd0d
mov dword [rbp + 0x170], 0xbb449a06
mov dword [rbp + 0x174], 0x84148374
mov dword [rbp + 0x178], 0x4e0ea3f8
mov dword [rbp + 0x17c], 0x648defc4
mov dword [rbp + 0x180], 0xa80d4567
mov dword [rbp + 0x184], 0xbd13ef74
mov dword [rbp + 0x188], 0x8a97ebc8
mov dword [rbp + 0x18c], 0x2e633c1c
mov dword [rbp + 0x190], 0xe6a2ee83
mov dword [rbp + 0x194], 0x53628579
mov dword [rbp + 0x198], 0x8b3bfa74
mov dword [rbp + 0x19c], 0xf12be75a
mov dword [rbp - 0x40], 0x26a5d76c
mov dword [rbp - 0x3c], 0xde0a590d
mov dword [rbp - 0x38], 0x26581511
mov dword [rbp - 0x34], 0x3ba4d12b
mov dword [rbp - 0x30], 0x6a443ccd
mov dword [rbp - 0x2c], 0xcec6bf5a
mov dword [rbp - 0x28], 0xbc763da1
mov dword [rbp - 0x24], 0xf83cbe0b
cmp ecx, 0x14
ja case.default.0x140099ccd
mov qword [rax + 8], rsi
lea rdx, [0x140000000]
mov qword [rax + 0x10], rdi
mov eax, ecx
mov ecx, dword [rdx + rax*4 + 0x99e64]
add rcx, rdx
jmp rcx
lea rsi, [rbp - 0x20]
mov edi, 0x30
jmp 0x140099de0
lea rsi, [rbp + 0xa0]
mov edi, 0x40
jmp 0x140099de0
lea rsi, [rsp + 0x60]
jmp 0x140099ddb
lea rsi, [rbp + 0x10]
mov edi, 0x30
jmp 0x140099de0
lea rsi, [rbp + 0x40]
mov edi, 0x30
jmp 0x140099de0
lea rsi, [rsp + 0x20]
mov edi, reloc.WS2_32.dll_recv
jmp 0x140099de0
lea rsi, [rsp + 0x30]
mov edi, reloc.WS2_32.dll_recv
jmp 0x140099de0
lea rsi, [rbp + 0xe0]
mov edi, 0x40
jmp 0x140099de0
lea rsi, [rbp + 0x120]
mov edi, 0x40
jmp 0x140099de0
lea rsi, [rbp + 0x320]
mov edi, pe_nt_image_headers64
jmp 0x140099de0
lea rsi, [rbp + 0x2b0]
mov edi, reloc.WS2_32.dll_WSASetLastError
jmp 0x140099de0
lea rsi, [rsp + 0x40]
mov edi, reloc.WS2_32.dll_recv
jmp 0x140099de0
lea rsi, [rbp + 0x70]
mov edi, 0x30
jmp 0x140099de0
lea rsi, [rbp - 0x80]
jmp 0x140099ddb
lea rsi, [rbp - 0x60]
jmp 0x140099ddb
lea rsi, [rbp + 0x1f0]
mov edi, 0x60
jmp 0x140099de0
lea rsi, [rbp + 0x1a0]
mov edi, 0x50
jmp 0x140099de0
lea rsi, [rbp + 0x250]
mov edi, 0x60
jmp 0x140099de0
lea rsi, [rsp + 0x50]
mov edi, reloc.WS2_32.dll_recv
jmp 0x140099de0
lea rsi, [rbp + 0x160]
mov edi, 0x40
jmp 0x140099de0
lea rsi, [rbp - 0x40]
mov edi, 0x20
mov rdx, rdi
mov rcx, rbx
call fcn.140012b90
mov rcx, qword [rbx]
mov rbx, qword [rbx + 8]
sub rbx, rcx
test rcx, rcx
jne 0x140099e07
call fcn.14006a8a8
mov dword [rax], socket
jmp 0x140099e3d
test rsi, rsi
je 0x140099e1e
cmp rbx, rdi
jb 0x140099e1e
mov r8, rdi
mov rdx, rsi
call fcn.140290ef0
jmp 0x140099e42
mov r8, rbx
xor edx, edx
call fcn.140291590
test rsi, rsi
je 0x140099dfa
cmp rbx, rdi
jae 0x140099e42
call fcn.14006a8a8
mov dword [rax], 0x22
call fcn.1400eabbc
mov rsi, qword [rsp + 0x4b0]
mov rdi, qword [rsp + 0x4b8]
mov rbx, qword [rsp + 0x4c0]
add rsp, 0x4a0
pop rbp
ret