Function at 0x14011296c
Capabilities:
Contain obfuscated stackstrings
Hash data using sha256
Hash data with md5

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x24e0]
mov eax, 0x25e0
call fcn.140085fb0
sub rsp, rax
mov rax, qword [0x14016a100]
xor rax, rsp
mov qword [rbp + 0x24d0], rax
mov rbx, rcx
mov qword [rsp + 0x30], rcx
mov rax, qword [0x14016e610]
xor esi, esi
cmp dword [rax - 0x10], esi
jne 0x140112e1f
mov edi, 0x1000
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x4d0]
call fcn.140087ba0
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x14d0]
call fcn.140087ba0
mov dword [rbp + 0xb4], 0x740073
lea edx, [rsi + 0x6e]
mov dword [rbp + 0xaa], 0x67006e
mov dword [rbp + 0xae], 0x490073
mov dword [rbp + 0x96], 0x77006f
mov dword [rbp + 0xbc], 0x65006c
mov dword [rbp + 0xc0], WSACleanup
mov dword [rbp + 0x9a], 0x650073
mov dword [rbp + 0xb8], 0x6c0061
mov dword [rbp + 0xa4], 0x740074
mov word [rbp + 0xb2], dx
mov dword [rbp + 0x92], 0x720062
lea ecx, [rsi + 0x72]
mov dword [rbp + 0xa0], 0x650053
lea eax, [rsi + 0x69]
mov word [rbp + 0xa8], ax
mov word [rbp + 0x9e], cx
lea eax, [rsi + 0x5f]
mov word [rbp + 0x90], ax
lea rdx, [rbp + 0x90]
lea rcx, [rsp + 0x28]
call fcn.14001630c
nop
lea rdx, [0x14014c214]
lea rcx, [rsp + 0x30]
call fcn.14001630c
nop
lea rcx, [rsp + 0x58]
call fcn.1400feee4
nop
lea rcx, [rsp + 0x50]
call fcn.140113cb4
nop
lea rcx, [rsp + 0x48]
call fcn.1400f74a4
nop
lea rcx, [rsp + 0x40]
call fcn.1400fe434
nop
lea rcx, [rsp + 0x38]
call fcn.14010e298
nop
mov r8, qword [rsp + 0x30]
mov edi, 0x800
mov edx, edi
lea rcx, [rbp + 0x4d0]
call fcn.1400b37f4
mov r8, qword [rsp + 0x58]
mov edx, edi
lea rcx, [rbp + 0x4d0]
call fcn.1400b38e4
mov r8, qword [rsp + 0x50]
mov edx, edi
lea rcx, [rbp + 0x4d0]
call fcn.1400b38e4
mov r8, qword [rsp + 0x48]
mov edx, edi
lea rcx, [rbp + 0x4d0]
call fcn.1400b38e4
mov r8, qword [rsp + 0x28]
mov edx, edi
lea rcx, [rbp + 0x4d0]
call fcn.1400b38e4
mov r8, qword [rsp + 0x38]
mov edx, edi
lea rcx, [rbp + 0x14d0]
call fcn.1400b38e4
mov r8, qword [rsp + 0x40]
mov edx, edi
lea rcx, [rbp + 0x14d0]
call fcn.1400b38e4
mov r8, qword [rsp + 0x28]
mov edx, edi
lea rcx, [rbp + 0x14d0]
call fcn.1400b38e4
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x78], rsi
mov dword [rbp - 0x30], 0x6a09e667
mov dword [rbp - 0x2c], 0xbb67ae85
mov dword [rbp - 0x28], 0x3c6ef372
mov dword [rbp - 0x24], 0xa54ff53a
mov dword [rbp - 0x20], 0x510e527f
mov dword [rbp - 0x1c], 0x9b05688c
mov dword [rbp - 0x18], 0x1f83d9ab
mov dword [rbp - 0x14], 0x5be0cd19
mov edx, edi
lea rcx, [rbp + 0x4d0]
call fcn.1400b24dc
lea r9, [rax + rax]
lea r8, [rbp + 0x4d0]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x80]
call fcn.1400f5668
nop
mov edx, edi
lea rcx, [rbp + 0x14d0]
call fcn.1400b24dc
lea r9, [rax + rax]
lea r8, [rbp + 0x14d0]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400f5668
nop
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140112c0b
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x60]
call fcn.14000b9cc
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140112c30
inc rdx
mov rcx, qword [rbp - 0x10]
call fcn.14000d368
mov edi, 0x400
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0xd0]
call fcn.140087ba0
mov word [rsp + 0x21], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x20], Ordinal_41
lea r9, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae r9, qword [rsp + 0x60]
lea r8, [rsp + 0x20]
mov edx, edi
lea rcx, [rbp + 0xd0]
call fcn.1400131a8
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rsi
mov dword [rbp + 0x80], 0x67452301
mov dword [rbp + 0x84], 0xefcdab89
mov dword [rbp + 0x88], 0x98badcfe
mov dword [rbp + 0x8c], 0x10325476
mov r8d, edi
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x30]
call fcn.1400fe360
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400f6cb0
nop
cmp qword [rax + 0x18], 0x10
jb 0x140112cd1
mov rax, qword [rax]
or rdi, 0xffffffffffffffff
test rax, rax
jne 0x140112cde
mov ecx, esi
jmp 0x140112cea
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], sil
jne 0x140112ce1
mov r8d, ecx
mov rdx, rax
lea rcx, [0x14016e610]
call fcn.140014694
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140112d14
inc rdx
mov rcx, qword [rbp + 0x10]
call fcn.14000d368
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140112d2c
inc rdx
mov rcx, qword [rsp + 0x60]
call fcn.14000d368
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], sil
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140112d5f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140112d7f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140112d9f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140112dbf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140112ddf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140112dff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140112e1f
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.WS2_32.dll_htonl + 8]
mov rcx, qword [0x14016e610]
add rcx, 0xffffffffffffffe8
call fcn.140013434
add rax, 0x18
mov qword [rbx], rax
mov rax, rbx
mov rcx, qword [rbp + 0x24d0]
xor rcx, rsp
call fcn.140085010
lea r11, [rsp + 0x25e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret