Function at 0x140066a20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xd0]
sub rsp, 0x1d0
mov qword [rsp + 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x220], rbx
mov rax, qword [0x14009d810]
xor rax, rsp
mov qword [rbp + 0xc0], rax
mov r12, rdx
mov qword [rsp + 0x58], rdx
mov r13, rcx
mov qword [rsp + 0x40], rcx
xor r14b, r14b
lea rcx, str.x__b_
mov rax, qword [str.x__b_]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x30], rax
mov word [rbp - 0x64], 0x2f3a
mov dword [rbp - 0x5b], 0x706870
mov word [rbp - 0x67], 0x7474
mov word [rbp - 0x5e], 0x6574
mov byte [rbp - 0x65], reloc.WS2_32.dll_WSASetLastError
mov word [rbp - 0x61], 0x7325
mov byte [rbp - 0x68], 0x68
mov byte [rbp - 0x62], Ordinal_50
mov byte [rbp - 0x5c], reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp - 0x5f], Ordinal_50
lea rcx, [rsp + 0x60]
call fcn.140004560
nop
mov r8, qword [rax]
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140005810
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
or rsi, 0xffffffffffffffff
lock add dword [rdx + 0x10], esi
jg 0x140066af6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], 0
mov byte [rsp + 0x70], 0
xor edi, edi
mov rbx, qword [rsp + 0x30]
nop word [rax + rax]
mov byte [rbp - 0x50], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rbp - 0x4f]
call fcn.1400467a0
mov edx, 0x104
lea rcx, [rbp - 0x50]
call fcn.14006a300
lea r8, [rsp + 0x70]
mov rdx, rbx
call fcn.1400752a0
test al, al
jne 0x140066b66
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 3
jl 0x140066b20
lea rbx, [rsp + 0x70]
cmp qword [rbp - 0x78], 0x10
cmovae rbx, qword [rsp + 0x70]
lea rcx, str.x__b_
mov rax, qword [str.x__b_]
call qword [rax + Ordinal_26]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x28], rdi
test rbx, rbx
je 0x140066bcd
test rbx, 0xffffffffffff0000
jne 0x140066bbf
movzx ebx, bx
mov ecx, ebx
call fcn.140005b20
test rax, rax
je 0x140066be4
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.140005c70
jmp 0x140066bdf
mov rax, rsi
inc rax
cmp byte [rbx + rax], 0
jne 0x140066bc2
jmp 0x140066bcf
xor eax, eax
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x28]
call fcn.140005e30
mov rdi, qword [rsp + 0x28]
lea rcx, str.x__b_
mov rax, qword [str.x__b_]
call qword [rax + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
mov eax, dword [rdi - 0x10]
cmp eax, 8
jl 0x140066d24
test eax, eax
jns 0x140066c19
mov ecx, 0x80070057
call fcn.140006270
int3
cmp byte [rdi], 0x7c
jne 0x140066d24
cmp eax, 4
jge 0x140066c32
mov ecx, 0x80070057
call fcn.140006270
int3
cmp byte [rdi + 4], 0x7c
jne 0x140066d24
cmp eax, 7
jge 0x140066c4c
mov ecx, 0x80070057
call fcn.140006270
int3
cmp byte [rdi + 7], 0x7c
jne 0x140066d24
mov r9d, 3
lea r8d, [r9 - 2]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x28]
call fcn.140004e00
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140066cc4
cmp dword [rbx + 0x10], 0
jl 0x140066cb5
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140066cb5
call fcn.140005fc0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140066caa
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x140066cc4
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140005e30
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140066cdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r9d, 2
lea r8d, [r9 + 3]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x28]
call fcn.140004e00
nop
mov rdx, rax
mov rcx, r12
call fcn.140005380
nop
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140066d1c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r14b, 1
jmp 0x140066eaa
lea rcx, [rsp + 0x48]
call fcn.140066f80
nop
mov r15, qword [rax]
lea rcx, [r15 - 0x18]
lea rdi, [rbx - 0x18]
cmp rcx, rdi
je 0x140066e7c
cmp dword [rdi + 0x10], 0
jl 0x140066d7b
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140066d7b
call fcn.140005fc0
mov rbx, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x140066d6d
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.WS2_32.dll_htonl + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x20], rax
jmp 0x140066e7c
movsxd r14, dword [r15 - 0x10]
test r14d, r14d
jne 0x140066de1
mov r14, qword [rdi]
cmp dword [rdi + 8], 0
je 0x140066e79
cmp dword [rdi + 0x10], 0
jge 0x140066db7
cmp dword [rbx - 0xc], 0
jge 0x140066da8
mov ecx, 0x80070057
call fcn.140006270
int3
mov dword [rbx - 0x10], 0
mov byte [rbx], 0
jmp 0x140066e79
lock add dword [rdi + 0x10], 0xffffffff
jg 0x140066dca
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rsp + 0x20], rax
jmp 0x140066e79
test r15, r15
jne 0x140066df1
mov ecx, 0x80070057
call fcn.140006270
int3
mov r13d, dword [rbx - 0x10]
mov r12, r15
sub r12, rbx
test r14d, r14d
jns 0x140066e0b
mov ecx, 0x80070057
call fcn.140006270
int3
mov ecx, 1
sub ecx, dword [rdi + 0x10]
mov eax, dword [rdi + 0xc]
sub eax, r14d
or eax, ecx
jge 0x140066e2f
mov edx, r14d
lea rcx, [rsp + 0x20]
call fcn.140006160
mov rbx, qword [rsp + 0x20]
mov rdi, r14
movsxd rdx, dword [rbx - 0xc]
mov r9, r14
mov rcx, rbx
cmp r12, r13
ja 0x140066e4c
lea r8, [r12 + rbx]
call fcn.140044ba4
jmp 0x140066e54
mov r8, r15
call fcn.140043e50
cmp r14d, dword [rbx - 0xc]
jg 0x140066e6e
mov dword [rbx - 0x10], r14d
mov byte [rdi + rbx], 0
mov r12, qword [rsp + 0x58]
mov r13, qword [rsp + 0x40]
jmp 0x140066e79
mov ecx, 0x80070057
call fcn.140006270
int3
xor r14b, r14b
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140066e95
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov r8d, 2
lea rdx, [0x140093908]
mov rcx, r12
call fcn.140005e30
mov dword [rbp - 0x6d], 0x73253131
mov word [rbp - 0x70], 0x3638
mov byte [rbp - 0x6e], 0x33
mov byte [rbp - 0x69], 0
mov rbx, qword [rsp + 0x20]
mov r8, rbx
lea rdx, [rbp - 0x70]
mov rcx, r13
call fcn.140005810
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140066ee9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rsp + 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140066f03
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
cmp qword [rbp - 0x78], 0x10
jb 0x140066f14
mov rcx, qword [rsp + 0x70]
call fcn.140042ad8
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], 0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140066f43
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.WS2_32.dll_htonl + 8]
movzx eax, r14b
mov rcx, qword [rbp + 0xc0]
xor rcx, rsp
call fcn.140042af0
mov rbx, qword [rsp + 0x220]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret