Function at 0x14003d8fc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x2f8]
sub rsp, 0x3f0
mov rax, qword [0x140159cc0]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
mov rbx, rcx
mov edx, dword [0x14046a4a0]
mov rax, qword gs:[0x58]
mov ecx, 8
mov rax, qword [rax + rdx*8]
xor esi, esi
mov eax, dword [rax + rcx]
cmp dword [0x14015c200], eax
jg 0x14003d9c2
mov rdx, qword [0x14015c1f0]
mov rax, qword [rdx + 8]
mov rcx, rdx
jmp 0x14003d975
cmp qword [rax + 0x20], rbx
jae 0x14003d96f
mov rax, qword [rax + 0x10]
jmp 0x14003d975
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], sil
je 0x14003d963
cmp byte [rcx + 0x19], sil
jne 0x14003d987
cmp rbx, qword [rcx + 0x20]
jae 0x14003d98a
mov rcx, rdx
cmp rcx, rdx
lea rax, [0x14015c1e0]
je 0x14003d99a
lea rax, [rcx + 0x28]
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.14011ae70
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
lea rcx, [0x14015c200]
call fcn.14011b178
cmp dword [0x14015c200], 0xffffffff
jne 0x14003d953
mov qword [rsp + 0x30], reloc.WS2_32.dll_select
mov edi, 1
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x44], 0x46a246a1
mov qword [rsp + 0x48], shutdown
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x5c], 0x46a246a1
mov qword [rsp + 0x60], 0x2a
mov qword [rsp + 0x68], rdi
lea r11d, [rdi + 1]
mov dword [rsp + 0x70], r11d
mov dword [rsp + 0x74], 0x46a246a1
mov qword [rsp + 0x78], gethostname
mov dword [rbp - 0x80], edi
mov qword [rbp - 0x7c], rdi
mov dword [rbp - 0x74], 0x6db26db1
mov qword [rbp - 0x70], gethostname
mov dword [rbp - 0x68], edi
mov dword [rbp - 0x64], edi
mov dword [rbp - 0x60], edi
mov dword [rbp - 0x5c], 0x6db26db1
mov qword [rbp - 0x58], 0x3f
mov dword [rbp - 0x50], edi
mov dword [rbp - 0x4c], edi
mov dword [rbp - 0x48], r11d
mov dword [rbp - 0x44], 0x6db26db1
mov qword [rbp - 0x40], 0x18
mov dword [rbp - 0x38], edi
mov qword [rbp - 0x34], r11
mov dword [rbp - 0x2c], 0x94c294c1
mov qword [rbp - 0x28], 0x19
mov dword [rbp - 0x20], edi
mov dword [rbp - 0x1c], r11d
mov dword [rbp - 0x18], edi
mov dword [rbp - 0x14], 0x94c294c1
mov qword [rbp - 0x10], 0x24
mov dword [rbp - 8], edi
mov dword [rbp - 4], r11d
mov dword [rbp], r11d
mov dword [rbp + 4], 0x94c294c1
mov qword [rbp + 8], 0x2bb39a
mov qword [rbp + 0x10], r11
mov dword [rbp + 0x18], esi
mov dword [rbp + 0x1c], 0x4d174d16
mov qword [rbp + 0x20], 0x29339a
mov qword [rbp + 0x28], r11
mov dword [rbp + 0x30], edi
mov dword [rbp + 0x34], 0x4d174d16
mov qword [rbp + 0x38], 0x8319a
mov qword [rbp + 0x40], r11
mov dword [rbp + 0x48], r11d
mov dword [rbp + 0x4c], 0x4d174d16
mov qword [rbp + 0x50], 0x37751a
mov dword [rbp + 0x58], r11d
mov qword [rbp + 0x5c], rdi
mov dword [rbp + 0x64], 0x74277426
mov qword [rbp + 0x68], 0x34f51a
mov dword [rbp + 0x70], r11d
mov dword [rbp + 0x74], edi
mov dword [rbp + 0x78], edi
mov dword [rbp + 0x7c], 0x74277426
mov qword [rbp + 0x80], 0x1d351a
mov dword [rbp + 0x88], r11d
mov dword [rbp + 0x8c], edi
mov dword [rbp + 0x90], r11d
mov dword [rbp + 0x94], 0x74277426
mov qword [rbp + 0x98], 0x2cca
lea edx, [rdi + 2]
mov qword [rbp + 0xa0], rdx
mov dword [rbp + 0xa8], esi
mov dword [rbp + 0xac], 0x4e1b4e1a
mov qword [rbp + 0xb0], 0x116bc7
mov qword [rbp + 0xb8], rdx
mov dword [rbp + 0xc0], edi
mov dword [rbp + 0xc4], 0x4e1b4e1a
mov qword [rbp + 0xc8], 0x6847
mov qword [rbp + 0xd0], rdx
mov dword [rbp + 0xd8], r11d
mov dword [rbp + 0xdc], 0x4e1b4e1a
mov qword [rbp + 0xe0], 0x53ca
mov dword [rbp + 0xe8], edx
mov qword [rbp + 0xec], rdi
mov dword [rbp + 0xf4], 0x752b752a
mov qword [rbp + 0xf8], 0x504a
mov dword [rbp + 0x100], edx
mov dword [rbp + 0x104], edi
mov dword [rbp + 0x108], edi
mov dword [rbp + 0x10c], 0x752b752a
mov qword [rbp + 0x110], 0x524a
mov dword [rbp + 0x118], edx
mov dword [rbp + 0x11c], edi
mov dword [rbp + 0x120], r11d
mov dword [rbp + 0x124], 0x752b752a
mov qword [rbp + 0x128], 0x39ca
mov dword [rbp + 0x130], edx
mov qword [rbp + 0x134], r11
mov dword [rbp + 0x13c], 0x9c3b9c3a
mov qword [rbp + 0x140], 0x1742ca
mov dword [rbp + 0x148], edx
mov dword [rbp + 0x14c], r11d
mov dword [rbp + 0x150], edi
mov dword [rbp + 0x154], 0x9c3b9c3a
mov qword [rbp + 0x158], 0x1d84ca
mov dword [rbp + 0x160], edx
mov dword [rbp + 0x164], r11d
mov dword [rbp + 0x168], r11d
mov dword [rbp + 0x16c], 0x9c3b9c3a
mov qword [rbp + 0x170], 0x1032
mov qword [rbp + 0x178], 7
mov dword [rbp + 0x180], esi
mov dword [rbp + 0x184], 0x87098708
mov qword [rbp + 0x188], 0x1a9a
mov qword [rbp + 0x190], 7
mov dword [rbp + 0x198], edi
mov dword [rbp + 0x19c], 0x87098708
mov qword [rbp + 0x1a0], 0x2fb0
mov qword [rbp + 0x1a8], 7
mov dword [rbp + 0x1b0], r11d
mov dword [rbp + 0x1b4], 0x87098708
mov qword [rbp + 0x1b8], 0x5a
lea edx, [rdi + 3]
mov qword [rbp + 0x1c0], rdx
mov dword [rbp + 0x1c8], esi
mov dword [rbp + 0x1cc], 0x4a264a25
mov qword [rbp + 0x1d0], 0x5b
mov qword [rbp + 0x1d8], rdx
mov dword [rbp + 0x1e0], edi
mov dword [rbp + 0x1e4], 0x4a264a25
mov qword [rbp + 0x1e8], WSASetLastError
mov qword [rbp + 0x1f0], rdx
mov dword [rbp + 0x1f8], r11d
mov dword [rbp + 0x1fc], 0x4a264a25
mov qword [rbp + 0x200], 0x54
mov dword [rbp + 0x208], edx
mov qword [rbp + 0x20c], rdi
mov dword [rbp + 0x214], 0x70d270d1
mov qword [rbp + 0x218], 0x55
mov dword [rbp + 0x220], edx
mov dword [rbp + 0x224], edi
mov dword [rbp + 0x228], edi
mov dword [rbp + 0x22c], 0x70d270d1
mov qword [rbp + 0x230], reloc.WS2_32.dll_WSASetLastError
mov dword [rbp + 0x238], edx
mov dword [rbp + 0x23c], edi
mov dword [rbp + 0x240], r11d
mov dword [rbp + 0x244], 0x70d270d1
mov qword [rbp + 0x248], 0x424200
lea r8d, [rdi + 8]
mov qword [rbp + 0x250], r8
mov dword [rbp + 0x258], esi
mov dword [rbp + 0x25c], 0x49c249c1
mov qword [rbp + 0x260], 0x424201
mov qword [rbp + 0x268], r8
mov dword [rbp + 0x270], r11d
mov dword [rbp + 0x274], 0x49c249c1
mov qword [rbp + 0x278], 0x424210
mov dword [rbp + 0x280], r8d
mov qword [rbp + 0x284], rdi
mov dword [rbp + 0x28c], 0x70d270d1
mov qword [rbp + 0x290], 0x424211
mov dword [rbp + 0x298], r8d
mov dword [rbp + 0x29c], edi
mov dword [rbp + 0x2a0], r11d
mov dword [rbp + 0x2a4], 0x70d270d1
mov qword [rbp + 0x2a8], 0x424220
mov dword [rbp + 0x2b0], r8d
mov qword [rbp + 0x2b4], r11
mov dword [rbp + 0x2bc], 0x97e297e1
mov qword [rbp + 0x2c0], 0x424221
mov dword [rbp + 0x2c8], r8d
mov dword [rbp + 0x2cc], r11d
mov dword [rbp + 0x2d0], r11d
mov dword [rbp + 0x2d4], 0x97e297e1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x2d8]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x20]
lea rcx, [0x14015c1f0]
call fcn.14003d364
lea rcx, [0x14011f4ec]
call fcn.14011b0b8
nop
lea rcx, [0x14015c200]
call fcn.14011b10c
jmp 0x14003d953