Function at 0x140004200
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x218]
sub rsp, 0x2e0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x1400d6060]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov rsi, r8
mov rdi, rdx
mov r13, rcx
mov qword [rbp + 0x130], rdx
mov qword [rbp + 0x138], r8
xor ebx, ebx
call fcn.140005170
lea rcx, [rbp + 0x150]
call fcn.1400612f0
nop
mov dword [rsp + 0x58], 0x6d756e26
mov dword [rsp + 0x5c], 0x636f7761
mov word [rsp + 0x60], gethostname
mov byte [rsp + 0x62], 1
mov dword [rsp + 0x40], 0x6e636f26
mov dword [rsp + 0x44], 0x1003861
mov dword [rsp + 0x48], 0x70677226
mov dword [rsp + 0x4c], 0x69696c77
mov dword [rsp + 0x50], 0x376d61
mov byte [rsp + 0x54], 1
mov dword [rsp + 0x38], 0x6a756926
mov dword [rsp + 0x3c], 0x1003860
mov dword [rsp + 0x30], 0x70637126
mov dword [rsp + 0x34], 0x1003877
mov dword [rsp + 0x68], 0x66717426
mov dword [rsp + 0x6c], 0x6a676b76
mov dword [rsp + 0x70], 0x100346d
mov dword [rsp + 0x78], 0x66727874
mov dword [rsp + 0x7c], 0x60696939
mov dword [rbp - 0x80], 0x1006761
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xf0]
call fcn.140004be0
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140004320
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.1400057c0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0xc8]
call fcn.140003f20
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x14000436d
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.1400057c0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x38]
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0xa8]
call fcn.140003f20
nop
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae rdx, qword [rbp + 0x150]
mov r8, qword [rbp + 0x160]
mov rcx, rax
call fcn.1400057c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x48]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x68]
call fcn.140004d00
nop
lea rdx, [r13 + 0x260]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140004422
mov rdx, qword [rdx]
mov rcx, rax
call fcn.1400057c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x28]
call fcn.140003f20
nop
mov rdx, r13
cmp qword [r13 + 0x18], 0x10
jb 0x140004469
mov rdx, qword [r13]
mov r8, qword [r13 + 0x10]
mov rcx, rax
call fcn.1400057c0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 8]
call fcn.140004000
nop
lea rdx, [r13 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400044b8
mov rdx, qword [rdx]
mov rcx, rax
call fcn.1400057c0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x190], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1a0], xmm6
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x140004522
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000451d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000451d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
movdqa xmm0, xmmword [0x1400c79b0]
movdqu xmmword [rbp + 0x18], xmm0
mov byte [rbp + 8], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140004572
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000456c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000456c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x1400045b0
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
movdqa xmm0, xmmword [0x1400c79b0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x140004600
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400045fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x140004641
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000463c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000463c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
movdqa xmm0, xmmword [0x1400c79b0]
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140004697
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004691
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004691
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x1400046db
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400046d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
movdqa xmm0, xmmword [0x1400c79b0]
movdqu xmmword [rbp + 0xb8], xmm0
mov byte [rbp + 0xa8], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140004731
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000472b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000472b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140004775
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004770
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004770
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
movdqa xmm0, xmmword [0x1400c79b0]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1400047cb
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400047c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400047c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x14000480f
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000480a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000480a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
movdqa xmm0, xmmword [0x1400c79b0]
movdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
lea rax, [rbp - 0x18]
mov qword [rbp + 0xe8], rax
lea rdx, [r13 + 0xa0]
lea rcx, [rbp - 0x18]
call fcn.1400058e0
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x38]
mov qword [rbp - 0x58], rax
lea rdx, [r13 + 0x80]
lea rcx, [rbp - 0x38]
call fcn.1400058e0
mov qword [rbp - 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], rbx
lea r12, [rbp + 0x190]
movq r15, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rax, xmm0
mov qword [rbp - 0x50], rax
cmp rax, 0x10
cmovae r12, r15
movabs rbx, 0x7fffffffffffffff
movq r14, xmm6
cmp r14, rbx
ja 0x140004bd0
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
cmp r14, 0x10
jae 0x1400048ce
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x78], xmm0
jmp 0x140004962
mov rax, r14
or rax, 0xf
cmp rax, rbx
jbe 0x140004906
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400af2f4
mov rcx, rax
test rax, rax
je 0x140004931
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140004946
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004938
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004bd6
jmp 0x1400048e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140004944
call fcn.1400af2f4
jmp 0x140004946
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], rbx
lea r8, [r14 + 1]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov r9, qword [rbp - 0x48]
mov r8, qword [rbp - 0x40]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x170]
call fcn.140004de0
nop
call fcn.140005170
xor ebx, ebx
mov qword [rbp + 0x128], rbx
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x140]
call fcn.140006d90
nop
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x48]
call fcn.140005520
mov rdx, rax
mov rcx, r13
call fcn.140002b00
lea rdx, str.success
lea rcx, [rbp + 0x140]
call fcn.1400069f0
lea rdx, [rax + 8]
cmp byte [rax], 4
cmovne rdx, rbx
cmp byte [rdx], bl
je 0x140004a0e
lea rdx, str.info
lea rcx, [rbp + 0x140]
call fcn.1400069f0
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140005520
mov rdx, rax
mov rcx, r13
call fcn.1400021f0
nop
movzx edx, byte [rbp + 0x140]
lea rcx, [rbp + 0x148]
call fcn.140005f50
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x140004a66
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004a61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
movdqa xmm0, xmmword [0x1400c79b0]
movdqu xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x140004abb
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x140004ab2
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004ab2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400af208
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x140004b00
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004afa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004afa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400af208
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140004b3a
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140004b35
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004bc2
mov rcx, r8
call fcn.1400af208
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140004b7f
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140004b7a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004bc9
mov rcx, r8
call fcn.1400af208
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.1400af1e0
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400014a0
int3
call fcn.140001400
int3