Function at 0x14004c7d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x1405ec140]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_inet_ntoa
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
mov eax, dword [rcx + rdx]
cmp dword [0x1408955c0], eax
jg 0x14004c8ad
mov rdx, qword [0x1408955d8]
mov rax, qword [rdx + 8]
mov rcx, rdx
cmp byte [rax + 0x19], 0
jne 0x14004c858
nop
cmp qword [rax + 0x20], rsi
jae 0x14004c84c
mov rax, qword [rax + 0x10]
jmp 0x14004c852
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14004c840
cmp byte [rcx + 0x19], 0
jne 0x14004c864
cmp rsi, qword [rcx + 0x20]
jae 0x14004c867
mov rcx, rdx
cmp rcx, rdx
lea rax, [0x1408955c8]
je 0x14004c877
lea rax, [rcx + 0x28]
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.1403ff380
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140013cd0
nop
lea rcx, [0x1408955c0]
call fcn.1403ff4b8
cmp dword [0x1408955c0], 0xffffffff
jne 0x14004c82b
mov qword [rsp + 0x70], reloc.WS2_32.dll_select
mov qword [rsp + 0x78], 1
xor r15d, r15d
mov dword [rbp - 0x80], r15d
mov dword [rbp - 0x7c], 0x46a246a1
mov qword [rbp - 0x78], reloc.WS2_32.dll_send
mov qword [rbp - 0x70], 1
mov dword [rbp - 0x68], 1
mov dword [rbp - 0x64], 0x46a246a1
mov qword [rbp - 0x60], 0x2a
mov qword [rbp - 0x58], 1
mov dword [rbp - 0x50], 2
mov dword [rbp - 0x4c], 0x46a246a1
mov qword [rbp - 0x48], getservbyport
mov dword [rbp - 0x40], 1
mov qword [rbp - 0x3c], 1
mov dword [rbp - 0x34], 0x6db26db1
mov qword [rbp - 0x30], getservbyport
mov dword [rbp - 0x28], 1
mov dword [rbp - 0x24], 1
mov dword [rbp - 0x20], 1
mov dword [rbp - 0x1c], 0x6db26db1
mov qword [rbp - 0x18], 0x3f
mov dword [rbp - 0x10], 1
mov dword [rbp - 0xc], 1
mov dword [rbp - 8], 2
mov dword [rbp - 4], 0x6db26db1
mov qword [rbp], 0x18
mov dword [rbp + 8], 1
mov qword [rbp + 0xc], 2
mov dword [rbp + 0x14], 0x94c294c1
mov qword [rbp + 0x18], 0x19
mov dword [rbp + 0x20], 1
mov dword [rbp + 0x24], 2
mov dword [rbp + 0x28], 1
mov dword [rbp + 0x2c], 0x94c294c1
mov qword [rbp + 0x30], 0x24
mov dword [rbp + 0x38], 1
mov dword [rbp + 0x3c], 2
mov dword [rbp + 0x40], 2
mov dword [rbp + 0x44], 0x94c294c1
mov qword [rbp + 0x48], 0x2bb39a
mov qword [rbp + 0x50], 2
mov dword [rbp + 0x58], r15d
mov dword [rbp + 0x5c], 0x4d174d16
mov qword [rbp + 0x60], 0x29339a
mov qword [rbp + 0x68], 2
mov dword [rbp + 0x70], 1
mov dword [rbp + 0x74], 0x4d174d16
mov qword [rbp + 0x78], 0x8319a
mov qword [rbp + 0x80], 2
mov dword [rbp + 0x88], 2
mov dword [rbp + 0x8c], 0x4d174d16
mov qword [rbp + 0x90], 0x37751a
mov dword [rbp + 0x98], 2
mov qword [rbp + 0x9c], 1
mov dword [rbp + 0xa4], 0x74277426
mov qword [rbp + 0xa8], 0x34f51a
mov dword [rbp + 0xb0], 2
mov dword [rbp + 0xb4], 1
mov dword [rbp + 0xb8], 1
mov dword [rbp + 0xbc], 0x74277426
mov qword [rbp + 0xc0], 0x1d351a
mov dword [rbp + 0xc8], 2
mov dword [rbp + 0xcc], 1
mov dword [rbp + 0xd0], 2
mov dword [rbp + 0xd4], 0x74277426
mov qword [rbp + 0xd8], 0x2cca
mov qword [rbp + 0xe0], 3
mov dword [rbp + 0xe8], r15d
mov dword [rbp + 0xec], 0x4e1b4e1a
mov qword [rbp + 0xf0], 0x116bc7
mov qword [rbp + 0xf8], 3
mov dword [rbp + 0x100], 1
mov dword [rbp + 0x104], 0x4e1b4e1a
mov qword [rbp + 0x108], 0x6847
mov qword [rbp + 0x110], 3
mov dword [rbp + 0x118], 2
mov dword [rbp + 0x11c], 0x4e1b4e1a
mov qword [rbp + 0x120], 0x53ca
mov dword [rbp + 0x128], 3
mov qword [rbp + 0x12c], 1
mov dword [rbp + 0x134], 0x752b752a
mov qword [rbp + 0x138], 0x504a
mov dword [rbp + 0x140], 3
mov dword [rbp + 0x144], 1
mov dword [rbp + 0x148], 1
mov dword [rbp + 0x14c], 0x752b752a
mov qword [rbp + 0x150], 0x524a
mov dword [rbp + 0x158], 3
mov dword [rbp + 0x15c], 1
mov dword [rbp + 0x160], 2
mov dword [rbp + 0x164], 0x752b752a
mov qword [rbp + 0x168], 0x39ca
mov dword [rbp + 0x170], 3
mov qword [rbp + 0x174], 2
mov dword [rbp + 0x17c], 0x9c3b9c3a
mov qword [rbp + 0x180], 0x1742ca
mov dword [rbp + 0x188], 3
mov dword [rbp + 0x18c], 2
mov dword [rbp + 0x190], 1
mov dword [rbp + 0x194], 0x9c3b9c3a
mov qword [rbp + 0x198], 0x1d84ca
mov dword [rbp + 0x1a0], 3
mov dword [rbp + 0x1a4], 2
mov dword [rbp + 0x1a8], 2
mov dword [rbp + 0x1ac], 0x9c3b9c3a
mov qword [rbp + 0x1b0], 0x121
mov qword [rbp + 0x1b8], 4
mov dword [rbp + 0x1c0], r15d
mov dword [rbp + 0x1c4], 0x2410240f
mov qword [rbp + 0x1c8], 0x629f
mov qword [rbp + 0x1d0], 4
mov dword [rbp + 0x1d8], 1
mov dword [rbp + 0x1dc], 0x2410240f
mov qword [rbp + 0x1e0], 0x59a0
mov qword [rbp + 0x1e8], 4
mov dword [rbp + 0x1f0], 2
mov dword [rbp + 0x1f4], 0x2410240f
mov qword [rbp + 0x1f8], 0x1032
mov qword [rbp + 0x200], 8
mov dword [rbp + 0x208], r15d
mov dword [rbp + 0x20c], 0x87098708
mov qword [rbp + 0x210], 0x1a9a
mov qword [rbp + 0x218], 8
mov dword [rbp + 0x220], 1
mov dword [rbp + 0x224], 0x87098708
mov qword [rbp + 0x228], 0x2fb0
mov qword [rbp + 0x230], 8
mov dword [rbp + 0x238], 2
mov dword [rbp + 0x23c], 0x87098708
mov qword [rbp + 0x240], 0x5a
mov qword [rbp + 0x248], 5
mov dword [rbp + 0x250], r15d
mov dword [rbp + 0x254], 0x4a264a25
mov qword [rbp + 0x258], 0x5b
mov qword [rbp + 0x260], 5
mov dword [rbp + 0x268], 1
mov dword [rbp + 0x26c], 0x4a264a25
mov qword [rbp + 0x270], WSAGetLastError
mov qword [rbp + 0x278], 5
mov dword [rbp + 0x280], 2
mov dword [rbp + 0x284], 0x4a264a25
mov qword [rbp + 0x288], 0x54
mov dword [rbp + 0x290], 5
mov qword [rbp + 0x294], 1
mov dword [rbp + 0x29c], 0x70d270d1
mov qword [rbp + 0x2a0], 0x55
mov dword [rbp + 0x2a8], 5
mov dword [rbp + 0x2ac], 1
mov dword [rbp + 0x2b0], 1
mov dword [rbp + 0x2b4], 0x70d270d1
mov qword [rbp + 0x2b8], reloc.WS2_32.dll_WSASetLastError
mov dword [rbp + 0x2c0], 5
mov dword [rbp + 0x2c4], 1
mov dword [rbp + 0x2c8], 2
mov dword [rbp + 0x2cc], 0x70d270d1
mov qword [rbp + 0x2d0], 0x424200
mov qword [rbp + 0x2d8], 0xa
mov dword [rbp + 0x2e0], r15d
mov dword [rbp + 0x2e4], 0x49c249c1
mov qword [rbp + 0x2e8], 0x424201
mov qword [rbp + 0x2f0], 0xa
mov dword [rbp + 0x2f8], 2
mov dword [rbp + 0x2fc], 0x49c249c1
mov qword [rbp + 0x300], 0x424210
mov dword [rbp + 0x308], 0xa
mov qword [rbp + 0x30c], 1
mov dword [rbp + 0x314], 0x70d270d1
mov qword [rbp + 0x318], 0x424211
mov dword [rbp + 0x320], 0xa
mov dword [rbp + 0x324], 1
mov dword [rbp + 0x328], 2
mov dword [rbp + 0x32c], 0x70d270d1
mov qword [rbp + 0x330], 0x424220
mov dword [rbp + 0x338], 0xa
mov qword [rbp + 0x33c], 2
mov dword [rbp + 0x344], 0x97e297e1
mov qword [rbp + 0x348], 0x424221
mov dword [rbp + 0x350], 0xa
mov dword [rbp + 0x354], 2
mov dword [rbp + 0x358], 2
mov dword [rbp + 0x35c], 0x97e297e1
lea ecx, [r15 + 0x38]
call fcn.1403ff3a0
mov r14, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov rdi, rax
mov qword [0x1408955d8], rax
lea rbx, [rsp + 0x70]
movabs r13, 0x492492492492492
lea r12, [0x1408955d8]
nop dword [rax]
nop word [rax + rax]
mov r9, rbx
mov r8, r14
lea rdx, [rsp + 0x58]
call fcn.14004d360
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movsd xmm0, qword [rax + 0x10]
movsd qword [rsp + 0x50], xmm0
cmp byte [rsp + 0x50], 0
jne 0x14004d064
cmp qword [0x1408955e0], r13
je 0x14004c8a7
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r15
mov ecx, reloc.WS2_32.dll_getservbyport
call fcn.1403ff3a0
nop
movups xmm0, xmmword [rbx]
movups xmmword [rax + 0x20], xmm0
movsd xmm1, qword [rbx + 0x10]
movsd qword [rax + 0x30], xmm1
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], 0
mov qword [rsp + 0x38], r15
movups xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x20], xmm0
mov r8, rax
lea rdx, [rsp + 0x20]
mov rcx, r12
call fcn.1400145b0
mov rdi, qword [0x1408955d8]
add rbx, 0x18
lea rax, [rbp + 0x360]
cmp rbx, rax
jne 0x14004cfd0
lea rcx, [0x140439550]
call fcn.1403ff758
nop
lea rcx, [0x1408955c0]
call fcn.1403ff44c
jmp 0x14004c82b