Function at 0x140007f70
Capabilities:
Contain obfuscated stackstrings
Hash data with md5

Disassembly:
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x320]
sub rsp, 0x420
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rsp + 0x450], rbx
mov rax, qword [0x1400ee0e8]
xor rax, rsp
mov qword [rbp + 0x318], rax
mov r14, r9
mov rbx, r8
mov rsi, rdx
xor dil, dil
cmp r8, 0x20
ja 0x140007fc2
xor al, al
jmp 0x1400082e1
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
xor r15d, r15d
mov qword [rsp + 0x50], r15
mov byte [rsp + 0x40], r15b
xor r8d, r8d
lea edx, [r15 + 0x20]
lea rcx, [rsp + 0x40]
call fcn.14000a9f0
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rax, qword [rsp + 0x40]
movups xmm0, xmmword [rsi]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_32
lea rax, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rax, qword [rsp + 0x40]
mov byte [rax + 0x20], r15b
lea rcx, [rbp]
call fcn.1400837a0
nop
mov byte [rbp], r15b
mov dword [rbp + 0x2f1], 0x35643964
mov dword [rbp + 0x30a], 0x64343731
mov byte [rbp + 0x2f0], gethostname
mov dword [rbp + 0x2fe], 0x30353239
mov dword [rbp + 0x2f8], 0x35613532
mov dword [rbp + 0x305], 0x32323866
mov word [rbp + 0x2f5], 0x6363
mov word [rbp + 0x2fc], 0x3135
mov word [rbp + 0x30e], 0x3561
mov byte [rbp + 0x310], r15b
mov word [rbp + 0x302], 0x6339
mov byte [rbp + 0x2f7], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x309], gethostname
mov byte [rbp + 0x304], reloc.WLDAP32.dll_Ordinal_50
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x70], r15
mov byte [rbp - 0x80], r15b
lea rax, [rbp + 0x2f0]
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400080d0
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp - 0x80]
call fcn.14000a2b0
nop
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x70], r15
mov byte [rsp + 0x60], 0
xor r8d, r8d
lea rdx, [0x1400daee1]
lea rcx, [rsp + 0x60]
call fcn.14000a2b0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rbp]
call fcn.140083570
nop
mov rax, qword [rbp - 0x68]
cmp rax, 0x10
jb 0x14000817b
inc rax
mov rcx, qword [rbp - 0x80]
cmp rax, 0x1000
jb 0x140008176
test cl, 0x1f
je 0x140008149
call fcn.140058db4
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140008158
call fcn.140058db4
int3
sub rcx, rax
cmp rcx, 8
jae 0x140008167
call fcn.140058db4
int3
cmp rcx, 0x27
jbe 0x140008173
call fcn.140058db4
int3
mov rcx, rax
call fcn.1400518d0
lea rdx, [rbx - 0x20]
mov rcx, r14
call fcn.14000b550
mov dword [rsp + 0x30], r15d
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9, qword [r14]
lea r8d, [rbx - 0x20]
lea rdx, [rsi + 0x20]
lea rcx, [rbp]
call section..xhpt2s
test al, al
je 0x1400082ba
movsxd rdx, dword [rsp + 0x30]
mov rcx, r14
call fcn.14000b550
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
mov dword [rbp - 0x10], 0x67452301
mov dword [rbp - 0xc], 0xefcdab89
mov dword [rbp - 8], 0x98badcfe
mov dword [rbp - 4], 0x10325476
mov rdx, qword [r14]
mov r8, qword [r14 + 8]
sub r8, rdx
lea rcx, [rbp - 0x60]
call fcn.1400ad820
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call section..iopf4q
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x60]
mov rbx, qword [rsp + 0x60]
mov r14, qword [rsp + 0x78]
cmp r14, 0x10
cmovae rcx, rbx
mov rdi, qword [rsp + 0x50]
mov r8, rdi
mov rsi, qword [rsp + 0x70]
cmp rsi, rdi
cmovb r8, rsi
test r8, r8
je 0x14000824e
call fcn.140057810
test eax, eax
jne 0x140008263
cmp rsi, rdi
jae 0x140008258
or eax, 0xffffffff
jmp 0x140008261
mov eax, r15d
cmp rsi, rdi
seta al
test eax, eax
sete dil
cmp r14, 0x10
jb 0x1400082ba
lea rax, [r14 + 1]
cmp rax, 0x1000
jb 0x1400082b1
test bl, 0x1f
je 0x140008284
call fcn.140058db4
int3
mov rax, qword [rbx - 8]
cmp rax, rbx
jb 0x140008293
call fcn.140058db4
int3
sub rbx, rax
cmp rbx, 8
jae 0x1400082a2
call fcn.140058db4
int3
cmp rbx, 0x27
jbe 0x1400082ae
call fcn.140058db4
int3
mov rbx, rax
mov rcx, rbx
call fcn.1400518d0
nop
lea rcx, [rbp + 0xc0]
call fcn.140009920
lea rcx, [rbp + 0xa0]
call fcn.140009920
nop
lea rcx, [rsp + 0x40]
call fcn.140009920
movzx eax, dil
mov rcx, qword [rbp + 0x318]
xor rcx, rsp
call fcn.1400518f0
mov rbx, qword [rsp + 0x450]
add rsp, 0x420
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret