Function at 0x1400f33ec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov rax, qword [0x14055c7c0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r14, rcx
xor r12d, r12d
mov dword [rbp - 0x79], r12d
mov dword [rbp - 0x69], 0xc6c1d4e2
mov dword [rbp - 0x65], 0xcfe2d0c9
mov dword [rbp - 0x61], 0xafabacba
mov byte [rbp - 0x5d], 0xcc
xor eax, eax
mov dword [rbp - 0x5c], eax
mov word [rbp - 0x58], ax
mov byte [rbp - 0x56], al
mov qword [rbp + 0x27], r12
mov rax, qword [rbp + 0x27]
lea esi, [r12 + 1]
mov rcx, qword [rbp + 0x27]
mov rax, qword [rbp + 0x27]
movzx edx, byte [rbp + rax - 0x69]
movabs rax, 0x71de99ff0e904b38
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x78
mov rax, qword [rbp + 0x27]
mov byte [rbp + rax - 0x69], r8b
mov rax, qword [rbp + 0x27]
add rax, rsi
mov qword [rbp + 0x27], rax
mov rax, qword [rbp + 0x27]
cmp rax, 0x14
jb 0x1400f3459
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
lea rax, [rbp - 0x69]
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x1400f34bf
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x19]
call fcn.140038c20
nop
mov dword [rbp - 0x69], 0x552a5e5b
mov dword [rbp - 0x65], 0x6d69515d
mov dword [rbp - 0x61], 0x4f4c4590
mov byte [rbp - 0x5d], 0xa2
xor eax, eax
mov word [rbp - 0x5c], ax
mov byte [rbp - 0x5a], al
mov qword [rbp - 0x79], r12
mov rax, qword [rbp - 0x79]
mov rcx, qword [rbp - 0x79]
mov rax, qword [rbp - 0x79]
movzx edx, byte [rbp + rax - 0x69]
movabs rax, 0x6d7c5ee1b0debb67
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2f
mov rax, qword [rbp - 0x79]
mov byte [rbp + rax - 0x69], r8b
mov rax, qword [rbp - 0x79]
add rax, rsi
mov qword [rbp - 0x79], rax
mov rax, qword [rbp - 0x79]
cmp rax, 0x10
jb 0x1400f3500
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x39], xmm1
lea rax, [rbp - 0x69]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x1400f3562
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x49]
call fcn.140038c20
nop
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x49]
call fcn.1400ae614
mov rcx, r14
call rax
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x1400f35ca
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f35c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f35c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140165c30
movdqa xmm0, xmmword [0x140202190]
movdqu xmmword [rbp - 0x39], xmm0
mov byte [rbp - 0x49], r12b
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x1400f3621
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3614
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f3614
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140165c30
movdqa xmm0, xmmword [0x140202190]
movdqu xmmword [rbp - 9], xmm0
mov byte [rbp - 0x19], r12b
call fcn.1400fc974
movsx ebx, al
call fcn.1400fc970
movsx ecx, al
imul ebx, ecx
call fcn.1400fc980
movsx r15d, al
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r15d
lea eax, [rax + rbx*8]
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400f3ad2
mov dword [rbp - 0x49], 0x48382e4f
mov dword [rbp - 0x45], 0x523c263a
mov dword [rbp - 0x41], 0x4737313f
mov dword [rbp - 0x3d], 0x38332732
mov word [rbp - 0x39], 0xa53a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x37], xmm0
mov qword [rbp - 0x27], rax
mov dword [rbp - 0x1f], eax
mov qword [rbp - 0x79], r12
mov rax, qword [rbp - 0x79]
mov rcx, qword [rbp - 0x79]
mov rax, qword [rbp - 0x79]
movzx edx, byte [rbp + rax - 0x49]
movabs rax, 0x2f3cb2a4dd0afe9
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x5f
mov rax, qword [rbp - 0x79]
mov byte [rbp + rax - 0x49], r8b
mov rax, qword [rbp - 0x79]
add rax, rsi
mov qword [rbp - 0x79], rax
mov rax, qword [rbp - 0x79]
cmp rax, 0x2e
jb 0x1400f36a7
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
lea rax, [rbp - 0x49]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x1400f3709
lea rdx, [rbp - 0x49]
lea rcx, [rbp + 7]
call fcn.140038c20
nop
mov dword [rbp - 0x79], esi
mov dword [rbp - 0x49], 0xede8e4e3
mov dword [rbp - 0x45], 0x2525e1e9
mov dword [rbp - 0x41], 0xe7e6ed26
mov byte [rbp - 0x3d], Ordinal_45
xorps xmm0, xmm0
movups xmmword [rbp - 0x3c], xmm0
mov qword [rbp - 0x69], r12
mov rax, qword [rbp - 0x69]
mov rcx, qword [rbp - 0x69]
mov rax, qword [rbp - 0x69]
movzx edx, byte [rbp + rax - 0x49]
movabs rax, 0x93bf021ab8df05d4
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x34
mov rax, qword [rbp - 0x69]
mov byte [rbp + rax - 0x49], r8b
mov rax, qword [rbp - 0x69]
add rax, rsi
mov qword [rbp - 0x69], rax
mov rax, qword [rbp - 0x69]
cmp rax, 0x1d
jb 0x1400f374b
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
lea rax, [rbp - 0x49]
inc rdi
cmp byte [rax + rdi], r12b
jne 0x1400f37aa
mov r8, rdi
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x19]
call fcn.140038c20
nop
mov dword [rbp - 0x79], 3
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x19]
call fcn.140089714
lea rdx, [rbp + 0x27]
mov rcx, r14
call rax
mov rcx, r12
test eax, eax
setne cl
xorps xmm2, xmm2
cvtsi2sd xmm2, rcx
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x69], xmm1
imul r13d, ebx, 7
add r13d, r15d
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r13d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400f3880
call fcn.1400fc978
movsx edx, al
movsx eax, byte [0x14055e028]
imul edx, eax
add edx, edx
call fcn.1400fc984
movsx ecx, al
sub edx, ecx
call fcn.1400fc97c
movsx ecx, al
add edx, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, edx
je 0x1400f3880
lea r14d, [rbx + rbx*8]
jmp 0x1400f38e1
lea r14d, [rbx + rbx*8]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r14d
add eax, r15d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400f38de
lea ecx, [rbx + r15]
movsx eax, byte [reloc.WS2_32.dll_htons]
lea ecx, [rcx + rbx*2]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x69]
cvttsd2si esi, xmm0
jmp 0x1400f38e1
mov esi, dword [rbp + 0x27]
lea r12d, [r15 + rbx*2]
add r12d, ebx
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r12d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
mov edi, eax
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub edi, ecx
imul edi, esi
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x1400f3949
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3944
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f3944
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140165c30
movdqa xmm0, xmmword [0x140202190]
movdqu xmmword [rbp - 9], xmm0
xor esi, esi
mov byte [rbp - 0x19], sil
mov dword [rbp - 0x79], esi
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x1400f39a5
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3998
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f3998
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140165c30
movdqa xmm0, xmmword [0x140202190]
movdqu xmmword [rbp + 0x17], xmm0
mov byte [rbp + 7], sil
test edi, edi
je 0x1400f3acf
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r15d
lea eax, [rax + rbx*4]
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x69], xmm1
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r13d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400f3a61
call fcn.1400fc978
movsx edx, al
movsx eax, byte [0x14055e028]
imul edx, eax
add edx, edx
call fcn.1400fc984
movsx ecx, al
sub edx, ecx
call fcn.1400fc97c
movsx ecx, al
add edx, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, edx
jne 0x1400f3ac0
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r15d
add eax, r14d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400f3ab5
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r12d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x69]
cvttsd2si eax, xmm0
jmp 0x1400f3ab8
mov eax, dword [rbp + 0x27]
xor r12d, r12d
cmp r12d, eax
jge 0x1400f3ad2
cmp dword [rbp + 0x27], 0x103
sete al
jmp 0x1400f3c26
xor r12d, r12d
lea edx, [rbx + rbx*4]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r15d
lea eax, [rax + rdx*2]
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x69], xmm1
imul ecx, ebx, 7
movsx eax, byte [reloc.WS2_32.dll_htons]
add ecx, r15d
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400f3b89
call fcn.1400fc978
movsx edx, al
movsx eax, byte [0x14055e028]
imul edx, eax
add edx, edx
call fcn.1400fc984
movsx ecx, al
sub edx, ecx
call fcn.1400fc97c
movsx ecx, al
add edx, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, edx
jne 0x1400f3c24
call fcn.1400fc974
movsx edx, al
call fcn.1400fc970
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*8]
call fcn.1400fc980
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.WS2_32.dll_htons]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400f3c1c
call fcn.1400fc974
movsx edx, al
call fcn.1400fc970
movsx ecx, al
imul edx, ecx
lea r9d, [rdx + rdx*2]
call fcn.1400fc980
movsx eax, al
add eax, r9d
movsx ecx, byte [reloc.WS2_32.dll_htons]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x69]
cvttsd2si eax, xmm0
jmp 0x1400f3c1f
mov eax, dword [rbp + 0x27]
cmp r12d, eax
jge 0x1400f3c26
xor al, al
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140165ad0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret