Function at 0x140018470
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov qword [rbp - 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x268], rbx
mov rax, qword [0x140158280]
xor rax, rsp
mov qword [rbp + 0x100], rax
movzx ebx, r8b
mov r12, rdx
mov qword [rbp - 0x80], rdx
mov r13, rcx
mov qword [rsp + 0x70], rcx
xor r14b, r14b
call fcn.140016610
mov rcx, rax
xor eax, eax
test rcx, rcx
setne al
test eax, eax
jne 0x1400184e1
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x38], rax
test bl, bl
je 0x14001854d
mov dword [rbp - 0x1b], 0x68702e65
mov word [rbp - 0x23], 0x2f2f
mov word [rbp - 0x1d], 0x6d69
mov dword [rbp - 0x28], 0x70747468
mov word [rbp - 0x20], 0x2f73
mov word [rbp - 0x17], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp - 0x21], reloc.OLEAUT32.dll_SafeArrayDestroyDescriptor
mov byte [rbp - 0x1e], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x24], Ordinal_60
movzx edx, bl
lea rcx, [rsp + 0x60]
call fcn.1400166f0
nop
mov r8, qword [rax]
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x38]
call fcn.140013110
nop
mov rdx, qword [rsp + 0x60]
jmp 0x1400185a4
mov word [rbp - 0x3c], 0x2f3a
mov dword [rbp - 0x33], 0x706870
mov word [rbp - 0x3f], 0x7474
mov word [rbp - 0x36], 0x6574
mov byte [rbp - 0x3d], reloc.WS2_32.dll_WSASetLastError
mov word [rbp - 0x39], 0x7325
mov byte [rbp - 0x40], 0x68
mov byte [rbp - 0x3a], Ordinal_50
mov byte [rbp - 0x34], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp - 0x37], Ordinal_50
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.1400166f0
nop
mov r8, qword [rax]
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x38]
call fcn.140013110
nop
mov rdx, qword [rsp + 0x78]
or rsi, 0xffffffffffffffff
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], esi
jg 0x1400185bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rcx, [rsp + 0x20]
call fcn.14002d950
nop
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x58], 0
mov byte [rbp - 0x68], 0
xor edi, edi
mov rbx, qword [rsp + 0x38]
nop dword [rax]
nop word [rax + rax]
mov byte [rbp - 0x10], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rbp - 0xf]
call fcn.140071640
mov edx, 0x104
lea rcx, [rbp - 0x10]
call fcn.1400145d0
lea r8, [rbp - 0x68]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.14002e1c0
test al, al
jne 0x140018639
mov ecx, 0x1f4
call fcn.140037900
inc edi
cmp edi, 3
jl 0x1400185f0
lea rbx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0x10
cmovae rbx, qword [rbp - 0x68]
call fcn.140016610
mov rcx, rax
xor eax, eax
test rcx, rcx
setne al
test eax, eax
jne 0x140018666
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x30], rdi
test rbx, rbx
je 0x1400186bb
test rbx, 0xffffffffffff0000
jne 0x1400186a6
movzx ebx, bx
xor edx, edx
mov ecx, ebx
call fcn.14000f2d0
test rax, rax
je 0x1400186d2
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14001a150
jmp 0x1400186cd
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [rbx + rax], 0
jne 0x1400186b0
jmp 0x1400186bd
xor eax, eax
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140024eb0
mov rdi, qword [rsp + 0x30]
call fcn.140016610
mov rcx, rax
xor eax, eax
test rcx, rcx
setne al
test eax, eax
jne 0x1400186f1
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x28], rbx
mov eax, dword [rdi - 0x10]
cmp eax, 8
jl 0x14001882f
test eax, eax
jns 0x14001871b
mov ecx, 0x80070057
call fcn.14000f440
int3
cmp byte [rdi], 0x7c
jne 0x14001882f
cmp eax, 4
jge 0x140018734
mov ecx, 0x80070057
call fcn.14000f440
int3
cmp byte [rdi + 4], 0x7c
jne 0x14001882f
cmp eax, 7
jge 0x14001874e
mov ecx, 0x80070057
call fcn.14000f440
int3
cmp byte [rdi + 7], 0x7c
jne 0x14001882f
mov r9d, 3
lea r8d, [r9 - 2]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b100
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400187c9
cmp dword [rbx + 0x10], 0
jl 0x1400187ba
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400187ba
call fcn.140012a20
mov rdi, rax
mov eax, esi
lock xadd dword [rbx + 0x10], eax
dec eax
jg 0x1400187af
mov rcx, qword [rbx]
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x1400187c9
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x28]
call fcn.140024eb0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x1400187e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r9d, 2
lea r8d, [r9 + 3]
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x30]
call fcn.14001b100
nop
mov rdx, rax
mov rcx, r12
call fcn.14000e3a0
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140018827
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r14b, 1
jmp 0x1400189d9
lea rcx, [rsp + 0x58]
call fcn.140018b20
nop
mov r15, qword [rax]
lea rcx, [r15 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x14001898d
cmp dword [rdi + 0x10], 0
jl 0x140018889
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140018889
call fcn.140012a20
mov rbx, rax
mov eax, esi
lock xadd dword [rdi + 0x10], eax
dec eax
jg 0x14001887b
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x28], rax
jmp 0x14001898d
movsxd r14, dword [r15 - 0x10]
test r14d, r14d
jne 0x1400188f3
mov r14, qword [rdi]
cmp dword [rdi + 8], 0
je 0x14001898a
cmp dword [rdi + 0x10], 0
jge 0x1400188c5
cmp dword [rbx - 0xc], 0
jge 0x1400188b6
mov ecx, 0x80070057
call fcn.14000f440
int3
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x14001898a
mov eax, esi
lock xadd dword [rdi + 0x10], eax
dec eax
jg 0x1400188dc
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x28], rax
jmp 0x14001898a
test r15, r15
jne 0x140018903
mov ecx, 0x80070057
call fcn.14000f440
int3
mov r13d, dword [rbx - 0x10]
mov r12, r15
sub r12, rbx
test r14d, r14d
jns 0x14001891d
mov ecx, 0x80070057
call fcn.14000f440
int3
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, r14d
or eax, ecx
jge 0x140018941
mov edx, r14d
lea rcx, [rsp + 0x28]
call fcn.14001ba70
mov rbx, qword [rsp + 0x28]
mov rdi, r14
movsxd rdx, dword [rbx - 0xc]
mov r9, r14
mov rcx, rbx
cmp r12, r13
ja 0x14001895e
lea r8, [r12 + rbx]
call fcn.140072b90
jmp 0x140018966
mov r8, r15
call fcn.1400707c4
cmp r14d, dword [rbx - 0xc]
jg 0x14001897f
mov dword [rbx - 0x10], r14d
mov byte [rdi + rbx], 0
mov r12, qword [rbp - 0x80]
mov r13, qword [rsp + 0x70]
jmp 0x14001898a
mov ecx, 0x80070057
call fcn.14000f440
int3
xor r14b, r14b
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x1400189aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov word [rsp + 0x25], 0x53
mov byte [rsp + 0x24], 0x55
lea rcx, [rsp + 0x24]
mov rax, rsi
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x1400189c0
mov r8d, eax
lea rdx, [rsp + 0x24]
mov rcx, r12
call fcn.140024eb0
lea rcx, [rsp + 0x48]
call fcn.1400176c0
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140012a20
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x40]
call fcn.140013f90
nop
mov dword [rbp - 0x47], 0x732573
mov byte [rbp - 0x48], reloc.OLEAUT32.dll_SafeArrayDestroyDescriptor
mov r9, qword [rsp + 0x28]
mov r8, qword [rsp + 0x40]
lea rdx, [rbp - 0x48]
mov rcx, r13
call fcn.140013110
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140018a4b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140018a69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140018a87
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140018aa5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
cmp qword [rbp - 0x50], 0x10
jb 0x140018ab5
mov rcx, qword [rbp - 0x68]
call fcn.14006e9f4
mov qword [rbp - 0x50], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x58], 0
mov byte [rbp - 0x68], 0
lea rcx, [rsp + 0x20]
call fcn.14002d9e0
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
dec esi
jg 0x140018af0
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.WS2_32.dll_htonl + 8]
movzx eax, r14b
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.14006ed70
mov rbx, qword [rsp + 0x268]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret