Function at 0x140018c70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov rax, qword [0x140158280]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov dword [0x140166ed4], 0x706863
mov dword [0x140166f30], 0x706569
mov word [0x140166f19], 0x666f
mov dword [0x140166f21], 0x4f5353
mov dword [0x140166f1c], 0x65726177
mov byte [0x140166f18], 0x53
mov byte [0x140166f1b], 0x74
mov byte [0x140166f20], 0x5c
mov word [0x140166f28], 0x2d53
mov dword [0x140166f2b], 0x302d312d
mov byte [0x140166f2f], 0
mov byte [0x140166f2a], 0x31
mov byte [rbp + 0xa0], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rbp + 0xa1]
call fcn.140071640
mov r8d, 0x104
lea rdx, [rbp + 0xa0]
xor ecx, ecx
call fcn.140035330
mov byte [rbp - 0x70], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rbp - 0x6f]
call fcn.140071640
lea rcx, [rbp + 0xa0]
call fcn.140036210
mov r8, rax
mov edx, 0x104
lea rcx, [rbp - 0x70]
call fcn.140072b14
lea rcx, [rbp - 0x70]
call fcn.1400362e0
call fcn.140016610
mov rdx, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x140018da0
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
lea rcx, [rbp - 0x70]
lea rax, [rbp - 0x70]
mov r13d, 1
or rsi, 0xffffffffffffffff
test rax, 0xffffffffffff0000
jne 0x140018dfb
movzx edi, cx
xor edx, edx
mov ecx, edi
call fcn.14000f2d0
test rax, rax
je 0x140018edb
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14001a150
mov rbx, qword [rsp + 0x30]
jmp 0x140018edb
lea rax, [rbp - 0x70]
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x140018e02
test edi, edi
jne 0x140018e6a
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140018edb
cmp dword [rdx + 0x10], 0
jge 0x140018e46
cmp dword [rbx - 0xc], 0
jge 0x140018e37
mov ecx, 0x80070057
call fcn.14000f440
int3
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x140018edb
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140018e56
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
jmp 0x140018edb
mov r15d, dword [rbx - 0x10]
lea r14, [rbp - 0x70]
sub r14, rbx
test edi, edi
jns 0x140018e84
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, r13d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140018ea4
mov edx, edi
lea rcx, [rsp + 0x30]
call fcn.14001ba70
mov rbx, qword [rsp + 0x30]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
cmp r14, r15
movsxd r15, edi
mov r9, r15
ja 0x140018ec1
lea r8, [r14 + rbx]
call fcn.140072b90
jmp 0x140018eca
lea r8, [rbp - 0x70]
call fcn.1400707c4
cmp edi, dword [rbx - 0xc]
jg 0x1400194c8
mov dword [rbx - 0x10], edi
mov byte [r15 + rbx], 0
lea rdi, [rbx - 0x18]
mov r14, qword [0x140166f48]
add r14, 0xffffffffffffffe8
cmp rdi, r14
je 0x140018f3f
cmp dword [r14 + 0x10], 0
jl 0x140018f2b
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x140018f2b
mov rcx, rdi
call fcn.140012a20
mov rbx, rax
lock add dword [r14 + 0x10], 0xffffffff
jg 0x140018f1e
mov rcx, qword [r14]
mov r8, qword [rcx]
mov rdx, r14
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rbx + 0x18]
mov qword [0x140166f48], rax
jmp 0x140018f3f
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
lea rcx, [0x140166f48]
call fcn.140024eb0
nop
lock add dword [rdi + 0x10], 0xffffffff
jg 0x140018f52
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [0x140166f48]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x140166f50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140018fbb
cmp dword [rbx + 0x10], 0
jl 0x140018fa4
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140018fa4
call fcn.140012a20
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140018f97
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [0x140166f50], rax
jmp 0x140018fb4
mov r8d, dword [rdx - 0x10]
lea rcx, [0x140166f50]
call fcn.140024eb0
mov rdx, qword [0x140166f48]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x140166f58]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140019016
cmp dword [rbx + 0x10], 0
jl 0x140019006
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140019006
call fcn.140012a20
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140018ff9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [0x140166f58], rax
jmp 0x140019016
mov r8d, dword [rdx - 0x10]
lea rcx, [0x140166f58]
call fcn.140024eb0
mov dword [rsp + 0x77], 0x5c7365
mov word [rsp + 0x68], 0x746e
mov dword [rsp + 0x58], 0x54535953
mov word [rsp + 0x6b], 0x6c6f
mov dword [rsp + 0x63], 0x43746e65
mov word [rsp + 0x75], 0x6369
mov dword [rsp + 0x5e], 0x7275435c
mov dword [rsp + 0x6e], 0x735c7465
mov byte [rsp + 0x6a], WSAStartup
mov word [rsp + 0x72], 0x7265
mov word [rsp + 0x5c], 0x4d45
mov byte [rsp + 0x6d], 0x53
mov byte [rsp + 0x74], 0x76
mov byte [rsp + 0x67], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x62], WSAStartup
mov dword [rbp - 0x80], 0x6365535c
mov word [rbp - 0x7b], 0x6972
mov word [rbp - 0x78], 0x79
mov byte [rbp - 0x79], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x7c], 0x75
call fcn.140016610
mov rdx, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x1400190b4
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
lea rax, [rsp + 0x58]
lea r12, [rsp + 0x58]
shr r12, 0x10
test r12, r12
jne 0x140019103
movzx ebx, ax
xor edx, edx
mov ecx, ebx
call fcn.14000f2d0
test rax, rax
je 0x1400191eb
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.14001a150
jmp 0x1400191eb
lea rax, [rsp + 0x58]
mov rdi, rsi
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140019110
test edi, edi
jne 0x140019178
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x1400191eb
cmp dword [rdx + 0x10], 0
jge 0x140019154
cmp dword [rbx - 0xc], 0
jge 0x140019145
mov ecx, 0x80070057
call fcn.14000f440
int3
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x1400191eb
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140019164
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x28], rax
jmp 0x1400191eb
mov r15d, dword [rbx - 0x10]
lea r14, [rsp + 0x58]
sub r14, rbx
test edi, edi
jns 0x140019193
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, r13d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x1400191b3
mov edx, edi
lea rcx, [rsp + 0x28]
call fcn.14001ba70
mov rbx, qword [rsp + 0x28]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
cmp r14, r15
movsxd r15, edi
mov r9, r15
ja 0x1400191d0
lea r8, [r14 + rbx]
call fcn.140072b90
jmp 0x1400191da
lea r8, [rsp + 0x58]
call fcn.1400707c4
cmp edi, dword [rbx - 0xc]
jg 0x1400194bd
mov dword [rbx - 0x10], edi
mov byte [r15 + rbx], 0
lea r8, [0x140166f48]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.14000e870
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x140166f60]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140019261
cmp dword [rbx + 0x10], 0
jl 0x140019250
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140019250
call fcn.140012a20
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140019243
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [0x140166f60], rax
jmp 0x140019261
mov r8d, dword [rdx - 0x10]
lea rcx, [0x140166f60]
call fcn.140024eb0
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001927b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140019294
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.140016610
mov rdx, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x1400192b3
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
lea rax, [rsp + 0x58]
test r12, r12
jne 0x1400192f9
movzx ebx, ax
xor edx, edx
mov ecx, ebx
call fcn.14000f2d0
test rax, rax
je 0x1400193db
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14001a150
jmp 0x1400193db
lea rax, [rsp + 0x58]
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x140019301
test edi, edi
jne 0x140019369
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x1400193db
cmp dword [rdx + 0x10], 0
jge 0x140019345
cmp dword [rbx - 0xc], 0
jge 0x140019336
mov ecx, 0x80070057
call fcn.14000f440
int3
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x1400193db
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140019355
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x20], rax
jmp 0x1400193db
mov r15d, dword [rbx - 0x10]
lea r14, [rsp + 0x58]
sub r14, rbx
test edi, edi
jns 0x140019384
mov ecx, 0x80070057
call fcn.14000f440
int3
sub r13d, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, r13d
jge 0x1400193a3
mov edx, edi
lea rcx, [rsp + 0x20]
call fcn.14001ba70
mov rbx, qword [rsp + 0x20]
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
cmp r14, r15
movsxd r15, edi
mov r9, r15
ja 0x1400193c0
lea r8, [r14 + rbx]
call fcn.140072b90
jmp 0x1400193ca
lea r8, [rsp + 0x58]
call fcn.1400707c4
cmp edi, dword [rbx - 0xc]
jg 0x1400194b2
mov dword [rbx - 0x10], edi
mov byte [r15 + rbx], 0
lea r8, [0x140166f48]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x38]
call fcn.14000e870
nop
lea r8, [rbp - 0x80]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14000e9f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [0x140166f68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140019463
cmp dword [rbx + 0x10], 0
jl 0x140019452
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140019452
call fcn.140012a20
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140019445
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [0x140166f68], rax
jmp 0x140019463
mov r8d, dword [rdx - 0x10]
lea rcx, [0x140166f68]
call fcn.140024eb0
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14001947d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140019497
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400194d3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x1400194d3
mov ecx, 0x80070057
call fcn.14000f440
nop
mov ecx, 0x80070057
call fcn.14000f440
nop
mov ecx, 0x80070057
call fcn.14000f440
nop
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.14006ed70
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret