Function at 0x140088000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x230], rbx
mov rax, qword [0x1400bfbc8]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r15, rdx
mov r12, rcx
xor r14b, r14b
call fcn.140006ac0
mov rcx, rax
test rax, rax
jne 0x14008805e
mov ecx, 0x80004005
call fcn.140006830
int3
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
lea r13, vtable.ATL::CAtlStringMgr.0
cmp rax, r13
jne 0x14008807b
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
jmp 0x14008807d
call rdx
add rax, 0x18
mov qword [rsp + 0x30], rax
mov dword [rbp - 0x53], 0x68702e65
mov word [rbp - 0x5b], 0x2f2f
mov word [rbp - 0x55], 0x6d69
mov dword [rbp - 0x60], 0x70747468
mov word [rbp - 0x58], 0x2f73
mov word [rbp - 0x4f], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x59], 0x25
mov byte [rbp - 0x56], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x5c], Ordinal_60
lea rcx, [rsp + 0x50]
call fcn.140005530
nop
mov r8, qword [rax]
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x30]
call fcn.140005d80
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
or esi, 0xffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140088114
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x140088111
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140088114
call r8
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x70], 0
mov byte [rbp - 0x80], 0
xor edi, edi
mov rbx, qword [rsp + 0x30]
nop
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp - 0x40]
call fcn.14004d3e0
mov rcx, qword [0x1400c2b28]
mov rax, qword [rcx]
mov r8d, 0x104
lea rdx, [rbp - 0x40]
call qword [rax + 0xa8]
lea r8, [rbp - 0x80]
mov rdx, rbx
call fcn.14008a420
test al, al
jne 0x14008817d
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 3
jl 0x140088130
lea rdi, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdi, qword [rbp - 0x80]
call fcn.140006ac0
mov rcx, rax
test rax, rax
jne 0x1400881a3
mov ecx, 0x80004005
call fcn.140006830
int3
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
cmp rax, r13
jne 0x1400881b9
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
jmp 0x1400881bb
call rdx
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
test rdi, rdi
je 0x1400881fd
test rdi, 0xffffffffffff0000
jne 0x1400881f3
movzx edi, di
mov ecx, edi
call fcn.140005fb0
test rax, rax
je 0x140088214
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.140006100
jmp 0x14008820f
mov rcx, rdi
call fcn.140050890
jmp 0x1400881ff
xor eax, eax
mov r8d, eax
mov rdx, rdi
lea rcx, [rsp + 0x20]
call fcn.140006320
mov rbx, qword [rsp + 0x20]
call fcn.140006ac0
mov rcx, rax
test rax, rax
jne 0x14008822c
mov ecx, 0x80004005
call fcn.140006830
int3
mov rax, qword [rax]
mov rdx, qword [rax + 0x18]
cmp rax, r13
jne 0x140088247
lock inc dword [rcx + 0x20]
lea rax, [rcx + 0x10]
mov rbx, qword [rsp + 0x20]
jmp 0x140088249
call rdx
lea rdi, [rax + 0x18]
mov qword [rsp + 0x28], rdi
mov eax, dword [rbx - 0x10]
cmp eax, 8
jl 0x1400883b2
test eax, eax
jns 0x14008826d
mov ecx, 0x80070057
call fcn.140006830
int3
cmp byte [rbx], 0x7c
jne 0x1400883b2
cmp eax, 4
jge 0x140088286
mov ecx, 0x80070057
call fcn.140006830
int3
cmp byte [rbx + 4], 0x7c
jne 0x1400883b2
cmp eax, 7
jge 0x1400882a0
mov ecx, 0x80070057
call fcn.140006830
int3
cmp byte [rbx + 7], 0x7c
jne 0x1400883b2
mov r9d, 3
lea r8d, [r9 - 2]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x20]
call fcn.1400058e0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x14008830c
cmp dword [rdi + 0x10], 0
jl 0x1400882fd
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400882fd
call fcn.140006510
mov rbx, rax
mov rcx, rdi
call fcn.140006ba0
lea rax, [rbx + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x14008830c
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140006320
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140088348
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x140088345
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140088348
call r8
mov r9d, 2
lea r8d, [r9 + 3]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x20]
call fcn.1400058e0
nop
mov rdx, rax
mov rcx, r15
call fcn.140005b80
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400883aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x1400883a7
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400883aa
call r8
mov r14b, 1
jmp 0x14008848d
lea rcx, [rsp + 0x68]
call fcn.140089070
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140088433
cmp dword [rdi + 0x10], 0
jl 0x140088424
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140088424
call fcn.140006510
mov rbx, rax
mov eax, esi
lock xadd dword [rdi + 0x10], eax
sub eax, 1
jg 0x140088419
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x140088413
mov rcx, qword [rcx + 8]
mov r8, rdi
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140088419
mov rdx, rdi
call r8
lea rax, [rbx + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x140088433
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140006320
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008846f
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x14008846c
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14008846f
call r8
lea rcx, [0x1400a2f08]
call fcn.140050890
mov r8d, eax
lea rdx, [0x1400a2f08]
mov rcx, r15
call fcn.140006320
mov rcx, qword [0x1400c2b28]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
call qword [rax + Ordinal_211]
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140006510
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x40]
call fcn.1400886b0
nop
mov r9, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
lea rdx, [0x1400a2f0c]
mov rcx, r12
call fcn.140005d80
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140088521
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x14008851d
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140088521
call r8
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008855e
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x14008855a
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14008855e
call r8
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14008859b
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x140088597
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14008859b
call r8
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400885d8
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x1400885d4
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400885d8
call r8
nop
mov rax, qword [rbp - 0x68]
cmp rax, 0x10
jb 0x14008862e
inc rax
mov rcx, qword [rbp - 0x80]
cmp rax, 0x1000
jb 0x140088629
test cl, 0x1f
je 0x1400885fc
call fcn.140050420
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14008860b
call fcn.140050420
int3
sub rcx, rax
cmp rcx, 8
jae 0x14008861a
call fcn.140050420
int3
cmp rcx, 0x27
jbe 0x140088626
call fcn.140050420
int3
mov rcx, rax
call fcn.14004bca4
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x70], 0
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x14008867c
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov r8, qword [rax + 8]
cmp rax, r13
jne 0x140088679
mov rcx, qword [rcx + 8]
mov r8, rdx
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14008867c
call r8
movzx eax, r14b
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.14004bcc0
mov rbx, qword [rsp + 0x230]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret