Function at 0x140106900
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rdi
sub rsp, 0x130
mov rax, qword [0x140250340]
xor rax, rsp
mov qword [rsp + 0x128], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov eax, eax
mov qword [0x140333980], rax
lea rdx, [rsp + 0x48]
mov cl, 1
call fcn.140106140
mov dword [rsp + 0x24], eax
cmp dword [rsp + 0x24], 0
jge 0x140106948
xor al, al
jmp 0x140106d60
mov byte [rsp + 0xc0], WSAStartup
mov byte [rsp + 0xc1], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0xc2], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xc3], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0xc4], WSAGetLastError
mov byte [rsp + 0xc5], WSAStartup
mov byte [rsp + 0xc6], WSAStartup
mov byte [rsp + 0xc7], WSAStartup
mov byte [rsp + 0xc8], 0x2e
mov byte [rsp + 0xc9], 0x65
mov byte [rsp + 0xca], 0x78
mov byte [rsp + 0xcb], 0x65
mov byte [rsp + 0xcc], 0
lea rcx, [rsp + 0xc0]
call fcn.1401066a0
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xc0]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WS2_32.dll_listen
rep stosb byte [rdi], al
mov byte [rsp + 0xe8], 0x50
mov byte [rsp + 0xe9], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0xea], 0x4c
mov byte [rsp + 0xeb], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xec], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xed], WSAGetLastError
mov byte [rsp + 0xee], 0x75
mov byte [rsp + 0xef], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0xf0], 0x50
mov byte [rsp + 0xf1], WSAStartup
mov byte [rsp + 0xf2], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xf3], 0x63
mov byte [rsp + 0xf4], 0x65
mov byte [rsp + 0xf5], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0xf6], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0xf7], 0x42
mov byte [rsp + 0xf8], 0x79
mov byte [rsp + 0xf9], 0x50
mov byte [rsp + 0xfa], WSAStartup
mov byte [rsp + 0xfb], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xfc], 0x63
mov byte [rsp + 0xfd], 0x65
mov byte [rsp + 0xfe], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0xff], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x100], 0x49
mov byte [rsp + 0x101], 0x64
mov byte [rsp + 0x102], 0
mov byte [rsp + 0x108], 0x50
mov byte [rsp + 0x109], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x10a], 0x47
mov byte [rsp + 0x10b], 0x65
mov byte [rsp + 0x10c], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x10d], 0x50
mov byte [rsp + 0x10e], WSAStartup
mov byte [rsp + 0x10f], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x110], 0x63
mov byte [rsp + 0x111], 0x65
mov byte [rsp + 0x112], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x113], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x114], 0x53
mov byte [rsp + 0x115], 0x65
mov byte [rsp + 0x116], 0x63
mov byte [rsp + 0x117], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x118], WSAGetLastError
mov byte [rsp + 0x119], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x11a], WSAStartup
mov byte [rsp + 0x11b], 0x42
mov byte [rsp + 0x11c], 0x61
mov byte [rsp + 0x11d], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x11e], 0x65
mov byte [rsp + 0x11f], 0x41
mov byte [rsp + 0x120], 0x64
mov byte [rsp + 0x121], 0x64
mov byte [rsp + 0x122], WSAStartup
mov byte [rsp + 0x123], 0x65
mov byte [rsp + 0x124], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x125], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x126], 0
mov byte [rsp + 0xd0], 0x4d
mov byte [rsp + 0xd1], WSAStartup
mov byte [rsp + 0xd2], 0x43
mov byte [rsp + 0xd3], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xd4], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0xd5], 0x79
mov byte [rsp + 0xd6], 0x56
mov byte [rsp + 0xd7], WSAGetLastError
mov byte [rsp + 0xd8], WSAStartup
mov byte [rsp + 0xd9], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0xda], 0x75
mov byte [rsp + 0xdb], 0x61
mov byte [rsp + 0xdc], WSAStartup
mov byte [rsp + 0xdd], 0x4d
mov byte [rsp + 0xde], 0x65
mov byte [rsp + 0xdf], WSAStartup
mov byte [rsp + 0xe0], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xe1], WSAStartup
mov byte [rsp + 0xe2], 0x79
mov byte [rsp + 0xe3], 0
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0x28]
call fcn.1401063d0
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x28]
call fcn.1401063d0
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0x28]
call fcn.1401063d0
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0xe8]
mov rdi, rax
xor eax, eax
mov ecx, 0x1b
rep stosb byte [rdi], al
lea rax, [rsp + 0x108]
mov rdi, rax
xor eax, eax
mov ecx, 0x1f
rep stosb byte [rdi], al
lea rax, [rsp + 0xd0]
mov rdi, rax
xor eax, eax
mov ecx, setsockopt
rep stosb byte [rdi], al
mov qword [rsp + 0x50], 0
lea rax, [rsp + 0x60]
mov rdi, rax
xor eax, eax
mov ecx, 0x58
rep stosb byte [rdi], al
mov dword [rsp + 0x64], 0x254ee0c
mov dword [rsp + 0x60], 0x2c478584
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x30]
mov qword [rsp + rax + 0x68], rcx
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x38]
mov qword [rsp + rax + 0x68], rcx
mov eax, 8
imul rax, rax, 2
mov rcx, qword [rsp + 0x40]
mov qword [rsp + rax + 0x68], rcx
mov eax, 8
imul rax, rax, 3
lea rcx, [rsp + 0x50]
mov qword [rsp + rax + 0x68], rcx
lea rcx, [rsp + 0x60]
call fcn.1401061c0
cmp qword [rsp + 0x50], 0
je 0x140106d56
mov byte [rsp + 0x20], 1
jmp 0x140106d5b
mov byte [rsp + 0x20], 0
movzx eax, byte [rsp + 0x20]
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1401ea170
add rsp, 0x130
pop rdi
ret