Function at 0x140035f40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x4c0]
sub rsp, 0x5c0
mov rax, qword [0x140125350]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
mov r9, rdx
movzx ebx, r8b
mov r10, rcx
xor edx, edx
mov dword [rsp + 0x20], 0x88fcc5c7
mov dword [rsp + 0x24], 0xc242ac8a
mov dword [rsp + 0x28], 0x7721518b
mov dword [rsp + 0x2c], 0x5de73370
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x34], 0x56f734fd
mov dword [rsp + 0x38], 0xdd47b6f7
mov dword [rsp + 0x3c], 0x1100d5b3
mov qword [rsp + 0x40], 0x37434ea3
mov dword [rsp + 0x48], 0x8d500496
mov dword [rsp + 0x4c], 0x1647aaf4
mov dword [rsp + 0x50], 0xe96ed983
mov dword [rsp + 0x54], 0xa9beeb51
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x5c], 0xe319e488
mov dword [rsp + 0x60], 0xda4b9b60
mov dword [rsp + 0x64], 0xde83179a
mov dword [rsp + 0x68], 0xfd319889
mov dword [rsp + 0x6c], 4
mov dword [rsp + 0x70], 0xee9997e
mov dword [rsp + 0x74], 0xec4e220a
mov dword [rsp + 0x78], 0x8d906cad
mov dword [rsp + 0x7c], 0xa9e921eb
mov dword [rbp - 0x80], 3
mov dword [rbp - 0x7c], 0x40d78784
mov dword [rbp - 0x78], 0x3040f762
mov dword [rbp - 0x74], 0x1c21abe
mov dword [rbp - 0x70], 0x180c7e37
mov dword [rbp - 0x6c], 8
mov dword [rbp - 0x68], 0x986ed168
mov dword [rbp - 0x64], 0x3d4a892c
mov dword [rbp - 0x60], 0xee5dc795
mov dword [rbp - 0x5c], 0x3fd74faa
mov dword [rbp - 0x58], 7
mov dword [rbp - 0x54], 0x38a3cdf1
mov dword [rbp - 0x50], 0x8d4f3c0f
mov dword [rbp - 0x4c], 0x3380d9a1
mov dword [rbp - 0x48], 0x72f672e6
mov dword [rbp - 0x44], 9
mov dword [rbp - 0x40], 0x56f3b4bd
mov dword [rbp - 0x3c], 0x524169cf
mov dword [rbp - 0x38], 0xce1da999
mov dword [rbp - 0x34], 0x9dab7249
mov dword [rbp - 0x30], 0xa
mov dword [rbp - 0x2c], 0xc819190
mov dword [rbp - 0x28], 0xd64401f3
mov dword [rbp - 0x24], 0x1b3b5b2
mov dword [rbp - 0x20], 0x84d2e81
mov dword [rbp - 0x1c], listen
mov dword [rbp - 0x18], 0x17eab5d8
mov dword [rbp - 0x14], 0xfc408654
mov dword [rbp - 0x10], 0xe92ac6a0
mov dword [rbp - 0xc], 0x7537eb2a
mov dword [rbp - 8], select
mov dword [rbp - 4], 0xdd38c482
mov dword [rbp], 0xa6463b67
mov dword [rbp + 4], 0xca245f99
mov dword [rbp + 8], 0xcf4d64f4
mov dword [rbp + 0xc], reloc.WSOCK32.dll_listen
mov dword [rbp + 0x10], 0x91881368
mov dword [rbp + 0x14], 0x8a4325c2
mov dword [rbp + 0x18], 0xb004438f
mov dword [rbp + 0x1c], 0xe3f4cb71
mov dword [rbp + 0x20], select
mov dword [rbp + 0x24], 0xf37f0798
mov dword [rbp + 0x28], 0x504e61ad
mov dword [rbp + 0x2c], 0xd051eeaf
mov dword [rbp + 0x30], 0x96e38dce
mov dword [rbp + 0x34], select
mov dword [rbp + 0x38], 0xd8d7cd43
mov dword [rbp + 0x3c], 0xe74e6dc9
mov dword [rbp + 0x40], 0xc57e4a9a
mov dword [rbp + 0x44], 0x6e1beec2
mov dword [rbp + 0x48], reloc.WSOCK32.dll_recv
mov dword [rbp + 0x4c], 0xb0fb7f3
mov dword [rbp + 0x50], 0x1444bc79
mov dword [rbp + 0x54], 0x8963f7bc
mov dword [rbp + 0x58], 0xab9f8e65
mov dword [rbp + 0x5c], reloc.WSOCK32.dll_select
mov dword [rbp + 0x60], 0x5f043eab
mov dword [rbp + 0x64], 0xc54e516b
mov dword [rbp + 0x68], 0xb7ea3093
mov dword [rbp + 0x6c], 0x2ff03608
mov dword [rbp + 0x70], 6
mov dword [rbp + 0x74], 0x90a97cde
mov dword [rbp + 0x78], 0xf4fc666
mov dword [rbp + 0x7c], 0x77e28fb7
mov dword [rbp + 0x80], 0x90e73c4e
mov dword [rbp + 0x84], socket
mov dword [rbp + 0x88], 0x4a4975
mov dword [rbp + 0x8c], 0x514e7c41
mov dword [rbp + 0x90], 0xddfbab9f
mov dword [rbp + 0x94], 0xd4775596
mov dword [rbp + 0x98], select
mov dword [rbp + 0x9c], 0x65747f54
mov dword [rbp + 0xa0], 0xfd408ad9
mov dword [rbp + 0xa4], 0xd2e612ac
mov dword [rbp + 0xa8], 0x1b097b0f
mov dword [rbp + 0xac], 5
mov dword [rbp + 0xb0], 0x2678cd5
mov dword [rbp + 0xb4], 0x824f4ebb
mov dword [rbp + 0xb8], 0x27e5f987
mov dword [rbp + 0xbc], 0xe1bebbfe
mov dword [rbp + 0xc0], reloc.WSOCK32.dll_send
mov dword [rbp + 0xc4], 0xff102672
mov dword [rbp + 0xc8], 0xed4fa3ed
mov dword [rbp + 0xcc], 0x2b7aebe
mov dword [rbp + 0xd0], 0x87120190
mov dword [rbp + 0xd4], reloc.WSOCK32.dll_setsockopt
mov dword [rbp + 0xd8], 0xa1c38ea4
mov dword [rbp + 0xdc], 0xfe40a711
mov dword [rbp + 0xe0], 0x2612e88d
mov dword [rbp + 0xe4], 0x994e4a81
mov dword [rbp + 0xe8], 0x2b
mov dword [rbp + 0xec], 0x61cb5cce
mov dword [rbp + 0xf0], 0x42452829
mov dword [rbp + 0xf4], 0xb398c1b6
mov dword [rbp + 0xf8], 0x3019ba1
mov dword [rbp + 0xfc], 0x2a
mov dword [rbp + 0x100], 0xff2de5f9
mov dword [rbp + 0x104], 0x6d402274
mov dword [rbp + 0x108], 0x9f27adbe
mov dword [rbp + 0x10c], 0x40256c45
mov dword [rbp + 0x110], 0x4b
mov dword [rbp + 0x114], 0xc965e733
mov dword [rbp + 0x118], 0xa7478469
mov dword [rbp + 0x11c], 0xc5d9f68a
mov dword [rbp + 0x120], 0x5fc481ed
mov dword [rbp + 0x124], 0x4c
mov dword [rbp + 0x128], 0xe1617327
mov dword [rbp + 0x12c], 0xe645f964
mov dword [rbp + 0x130], 0x186ea487
mov dword [rbp + 0x134], 0x49939d1b
mov dword [rbp + 0x138], reloc.WSOCK32.dll_getservbyname
mov dword [rbp + 0x13c], 0x929064d7
mov dword [rbp + 0x140], 0x6b4685d1
mov dword [rbp + 0x144], 0x8fb9208b
mov dword [rbp + 0x148], 0xa980fc6f
mov dword [rbp + 0x14c], getservbyname
mov dword [rbp + 0x150], 0xe90d799b
mov dword [rbp + 0x154], 0xe48cf8b
mov dword [rbp + 0x158], 0xf0a56b85
mov dword [rbp + 0x15c], 0x734084f5
mov dword [rbp + 0x160], 0x3b
mov dword [rbp + 0x164], 0xe2c2b60c
mov dword [rbp + 0x168], 0xfc404232
mov dword [rbp + 0x16c], 0xf8175f84
mov dword [rbp + 0x170], 0x7e85fb24
mov dword [rbp + 0x174], 0x19
mov dword [rbp + 0x178], 0xcfb2f7db
mov dword [rbp + 0x17c], 0x7347163b
mov dword [rbp + 0x180], 0x74dda99c
mov dword [rbp + 0x184], 0xbfd691ff
mov dword [rbp + 0x188], socket
mov dword [rbp + 0x18c], 0xd78f4b16
mov dword [rbp + 0x190], 0x864c65c1
mov dword [rbp + 0x194], 0x64449b8e
mov dword [rbp + 0x198], 0x15c0eeb6
mov dword [rbp + 0x19c], 0x1b
mov dword [rbp + 0x1a0], 0x71359c01
mov dword [rbp + 0x1a4], 0xc64e6035
mov dword [rbp + 0x1a8], 0x4f88edbd
mov dword [rbp + 0x1ac], 0xf9b52561
mov dword [rbp + 0x1b0], 0x1a
mov dword [rbp + 0x1b4], 0x304bca53
mov dword [rbp + 0x1b8], 0x4847561e
mov dword [rbp + 0x1bc], 0x4e52acb5
mov dword [rbp + 0x1c0], 0x36499cd5
mov dword [rbp + 0x1c4], 0x45
mov dword [rbp + 0x1c8], 0xafebd714
mov dword [rbp + 0x1cc], 0x7b4cd429
mov dword [rbp + 0x1d0], 0x2818dbb8
mov dword [rbp + 0x1d4], 0xab6ea257
mov dword [rbp + 0x1d8], 0x44
mov dword [rbp + 0x1dc], 0xc8a40aa4
mov dword [rbp + 0x1e0], 0x8e4b5d68
mov dword [rbp + 0x1e4], 0x57a683a8
mov dword [rbp + 0x1e8], 0x14f943aa
mov dword [rbp + 0x1ec], 0x46
mov dword [rbp + 0x1f0], 0x1c3133b0
mov dword [rbp + 0x1f4], 0x8f406de7
mov dword [rbp + 0x1f8], 0xe865c1ac
mov dword [rbp + 0x1fc], 0x838f347f
mov dword [rbp + 0x200], 0x43
mov dword [rbp + 0x204], 0x52e0ced3
mov dword [rbp + 0x208], 0xcc43e518
mov dword [rbp + 0x20c], 0x4e8e5db6
mov dword [rbp + 0x210], 0xba83027
mov dword [rbp + 0x214], 0x42
mov dword [rbp + 0x218], 0x72048194
mov dword [rbp + 0x21c], 0x4a46c274
mov dword [rbp + 0x220], 0xdd8ac09e
mov dword [rbp + 0x224], 0x1008b572
mov dword [rbp + 0x228], 0x41
mov dword [rbp + 0x22c], 0xf0684363
mov dword [rbp + 0x230], 0xaf478168
mov dword [rbp + 0x234], 0x5e6a9e84
mov dword [rbp + 0x238], 0x266887d4
mov dword [rbp + 0x23c], 0x4a
mov dword [rbp + 0x240], 0x45d57bf7
mov dword [rbp + 0x244], 0x5f4b48c4
mov dword [rbp + 0x248], 0xbad0c899
mov dword [rbp + 0x24c], 0x65869602
mov dword [rbp + 0x250], 0x22
mov dword [rbp + 0x254], 0xbfd3addd
mov dword [rbp + 0x258], 0x3b4e8523
mov dword [rbp + 0x25c], 0x932742b2
mov dword [rbp + 0x260], 0xaa9312b8
mov dword [rbp + 0x264], 0x1e
mov dword [rbp + 0x268], 0xb75a8e87
mov dword [rbp + 0x26c], 0x7247c070
mov dword [rbp + 0x270], 0xd2f035ab
mov dword [rbp + 0x274], 0xa48edec6
mov dword [rbp + 0x278], 0x47
mov dword [rbp + 0x27c], 0x343ec8c7
mov dword [rbp + 0x280], 0x50469b51
mov dword [rbp + 0x284], 0xe64b2a8
mov dword [rbp + 0x288], 0xabbf531
mov dword [rbp + 0x28c], 0x1c
mov dword [rbp + 0x290], 0xa64188e0
mov dword [rbp + 0x294], 0xe749b83a
mov dword [rbp + 0x298], 0x55ad3187
mov dword [rbp + 0x29c], 0x7cc81194
mov dword [rbp + 0x2a0], getservbyname
mov dword [rbp + 0x2a4], 0x79b0fad4
mov dword [rbp + 0x2a8], 0x3546092b
mov dword [rbp + 0x2ac], 0xa503d091
mov dword [rbp + 0x2b0], 0x53bbd8dc
mov dword [rbp + 0x2b4], getservbyname
mov dword [rbp + 0x2b8], 0xd89c0207
mov dword [rbp + 0x2bc], 0x98466446
mov dword [rbp + 0x2c0], 0xb243d895
mov dword [rbp + 0x2c4], 0x966566e9
mov dword [rbp + 0x2c8], 0x1f
mov dword [rbp + 0x2cc], 0x22948de3
mov dword [rbp + 0x2d0], 0x304ac76e
mov dword [rbp + 0x2d4], 0x2dbe6ba5
mov dword [rbp + 0x2d8], 0x311dc6f6
mov dword [rbp + 0x2dc], getservbyname
mov dword [rbp + 0x2e0], 0x49dac78f
mov dword [rbp + 0x2e4], 0xcc461a52
mov dword [rbp + 0x2e8], 0x196c98b2
mov dword [rbp + 0x2ec], 0x9270eb7f
mov dword [rbp + 0x2f0], 0x24
mov dword [rbp + 0x2f4], 0xe997e762
mov dword [rbp + 0x2f8], 0x274cacd1
mov dword [rbp + 0x2fc], 0x621ceeab
mov dword [rbp + 0x300], 0x16bd874e
mov dword [rbp + 0x304], 0x2d
mov dword [rbp + 0x308], 0x7b446955
mov dword [rbp + 0x30c], 0xe24f8f6e
mov dword [rbp + 0x310], 0x1dc3de94
mov dword [rbp + 0x314], 0xf7ec11a0
mov dword [rbp + 0x318], reloc.WSOCK32.dll_socket
mov dword [rbp + 0x31c], 0xd8baff00
mov dword [rbp + 0x320], 0xb949cd5c
mov dword [rbp + 0x324], 0x50e21da6
mov dword [rbp + 0x328], 0x5a459dc2
mov dword [rbp + 0x32c], 0x49
mov dword [rbp + 0x330], 0xb4d248b2
mov dword [rbp + 0x334], 0x9445977c
mov dword [rbp + 0x338], 0x134f8ebb
mov dword [rbp + 0x33c], 0x9e806c7e
mov dword [rbp + 0x340], getservbyname
mov dword [rbp + 0x344], 0xc3a3c6c7
mov dword [rbp + 0x348], 0x6e45c7ea
mov dword [rbp + 0x34c], 0x56a6ecbf
mov dword [rbp + 0x350], 0xf3404604
mov dword [rbp + 0x354], 0x2c
mov dword [rbp + 0x358], 0xf6f14bd6
mov dword [rbp + 0x35c], 0x9b40265e
mov dword [rbp + 0x360], 0xc7a7e4ba
mov dword [rbp + 0x364], 0xf1d75095
mov dword [rbp + 0x368], 0x48
mov dword [rbp + 0x36c], 0xe1681c66
mov dword [rbp + 0x370], 0x24d3eb7
mov dword [rbp + 0x374], 0xc1f19b85
mov dword [rbp + 0x378], 0xd1905f50
mov dword [rbp + 0x37c], 0x18
mov dword [rbp + 0x380], 0xcde45b3
mov dword [rbp + 0x384], 0xfd41df2c
mov dword [rbp + 0x388], 0x289b349b
mov dword [rbp + 0x38c], 0x4e416918
mov dword [rbp + 0x390], 0x38
mov dword [rbp + 0x394], 0x5020661c
mov dword [rbp + 0x398], 0x99470afa
mov dword [rbp + 0x39c], 0x93e56bf
mov dword [rbp + 0x3a0], 0x3873001a
mov dword [rbp + 0x3a4], 0x39
mov dword [rbp + 0x3a8], 0x925b176b
mov dword [rbp + 0x3ac], 0x98435e10
mov dword [rbp + 0x3b0], 0x8462d298
mov dword [rbp + 0x3b4], 0x17d31a42
mov dword [rbp + 0x3b8], 0x3c
mov dword [rbp + 0x3bc], 0xcb995359
mov dword [rbp + 0x3c0], 0x7f4c27c3
mov dword [rbp + 0x3c4], 0x7c4a29ba
mov dword [rbp + 0x3c8], 0x8699d3de
mov dword [rbp + 0x3cc], 0x40
mov dword [rbp + 0x3d0], 0xcf9346ad
mov dword [rbp + 0x3d4], 0x5b43fb17
mov dword [rbp + 0x3d8], 0xb5763a85
mov dword [rbp + 0x3dc], 0xda346a38
mov dword [rbp + 0x3e0], 0x3f
mov dword [rbp + 0x3e4], 0xcb2c55d2
mov dword [rbp + 0x3e8], 0x6e4905e1
mov dword [rbp + 0x3ec], 0x6427a784
mov dword [rbp + 0x3f0], 0x47dc807d
mov dword [rbp + 0x3f4], getservbyname
mov dword [rbp + 0x3f8], 0xd79547b8
mov dword [rbp + 0x3fc], 0x9146e2f7
mov dword [rbp + 0x400], 0x9c0256bd
mov dword [rbp + 0x404], 0x31dbe008
mov dword [rbp + 0x408], 0x25
mov dword [rbp + 0x40c], 0x78b17f12
mov dword [rbp + 0x410], 0x8642f02f
mov dword [rbp + 0x414], 0x61913f8a
mov dword [rbp + 0x418], 0x577de8b6
mov dword [rbp + 0x41c], 0x21
mov dword [rbp + 0x420], 0xaf9e3cc1
xor eax, eax
mov dword [rbp + 0x424], 0x2740519f
mov dword [rbp + 0x428], 0x78e2e2bf
mov dword [rbp + 0x42c], 0x8b232d15
mov dword [rbp + 0x430], 0x20
mov dword [rbp + 0x434], 0x1e597d5c
mov qword [rbp + 0x485], rax
mov qword [rbp + 0x48d], rax
mov word [rbp + 0x495], ax
mov byte [rbp + 0x497], al
mov byte [rbp + 0x4a0], al
mov qword [rbp + 0x4a1], rax
mov dword [rbp + 0x4a9], eax
mov word [rbp + 0x4ad], ax
mov byte [rbp + 0x4af], al
mov dword [rbp + 0x438], 0xa14da82e
mov dword [rbp + 0x43c], 0x6147a485
mov dword [rbp + 0x440], 0x50464091
mov dword [rbp + 0x444], 0x1d
mov dword [rbp + 0x448], 0xd3938499
mov dword [rbp + 0x44c], 0x41420f96
mov dword [rbp + 0x450], 0x54770fa5
mov dword [rbp + 0x454], 0x29aa377e
mov dword [rbp + 0x458], getservbyname
mov dword [rbp + 0x45c], 0xbf1d97b7
mov dword [rbp + 0x460], 0x46426721
mov dword [rbp + 0x464], 0xc5123fa3
mov dword [rbp + 0x468], 0xe9eec19
mov dword [rbp + 0x46c], getservbyname
mov dword [rbp + 0x470], 0x4359ca7e
mov dword [rbp + 0x474], 0xc1474e3a
mov dword [rbp + 0x478], 0x76f57ab
mov dword [rbp + 0x47c], 0x628c2848
mov dword [rbp + 0x480], getservbyname
mov byte [rbp + 0x484], dl
test rcx, rcx
je 0x140036cbd
test r9, r9
je 0x140036cbd
mov rdi, qword [rbp + 0x4a0]
mov r11, qword [rbp + 0x4a8]
cmp qword [rsp + 0x20], rdi
jne 0x140036c63
cmp qword [rsp + 0x28], r11
je 0x140036cbd
lea r8, [rsp + 0x30]
test bl, bl
je 0x140036c9a
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [rsp + rcx*4 + 0x20]
cmp rax, qword [r10]
jne 0x140036ca2
mov rax, qword [rsp + rcx*4 + 0x28]
cmp rax, qword [r10 + 8]
jne 0x140036ca2
movsxd rax, edx
lea rcx, [rax + rax*4]
mov eax, dword [rsp + rcx*4 + 0x30]
mov dword [r9], eax
mov al, 1
jmp 0x140036cbf
mov eax, dword [r9]
cmp dword [r8], eax
je 0x140036ce3
inc edx
add r8, 0x14
movsxd rax, edx
lea rcx, [rax + rax*4]
cmp qword [rsp + rcx*4 + 0x20], rdi
jne 0x140036c68
cmp qword [rsp + rcx*4 + 0x28], r11
jne 0x140036c68
xor al, al
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.14008d900
lea r11, [rsp + 0x5c0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
movsxd rax, edx
lea rcx, [rsp + 0x20]
mov edx, reloc.WSOCK32.dll_recv
lea r8, [rax + rax*4]
mov r9d, edx
lea r8, [rcx + r8*4]
mov rcx, r10
call fcn.14008cc4c
mov al, 1
jmp 0x140036cbf