Function at 0x140039f60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x4d0]
sub rsp, 0x5d0
mov rax, qword [0x140120140]
xor rax, rsp
mov qword [rbp + 0x4c0], rax
mov r15, rdx
mov r14, rcx
mov qword [rbp + 0xd0], rcx
mov qword [rbp - 8], rdx
xor r12d, r12d
mov dword [rsp + 0x60], r12d
xor edx, edx
mov r8d, 0x138
lea rcx, [rbp + 0xe0]
call fcn.1400b0170
mov dword [rsp + 0x40], 0x73696844
mov dword [rsp + 0x44], 0x2a736962
mov dword [rsp + 0x48], 0x62777e53
mov byte [rsp + 0x4c], 7
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov r9d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x80], r9
mov byte [rsp + 0x68], r12b
mov dword [rsp + 0x60], 1
mov eax, reloc.WS2_32.dll_listen
mov qword [rsp + 0x78], rax
xor r8d, r8d
mov qword [rsp + 0x68], r8
mov dword [rsp + 0x70], r8d
mov word [rsp + 0x74], r8w
mov ecx, r12d
nop dword [rax + rax]
cmp rcx, 0xd
jae 0x14003a5e8
movzx edx, byte [rsp + rcx + 0x40]
xor dl, 7
cmp rax, rcx
jbe 0x14003a5e2
lea rax, [rsp + 0x68]
cmp r9, 0x10
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xd
jge 0x14003a064
mov r9, qword [rbp - 0x80]
mov rax, qword [rsp + 0x78]
mov r8, qword [rsp + 0x68]
jmp 0x14003a020
lea rsi, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rsi, qword [rsp + 0x68]
movdqa xmm0, xmmword [0x14010c280]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x50], 9
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x78], 0
mov dword [rsp + 0x60], 3
mov byte [rsp + 0x20], 0
mov r9d, reloc.WS2_32.dll_recvfrom
xor r8d, r8d
mov edx, r9d
lea rcx, [rbp - 0x78]
call fcn.140032670
mov rcx, r12
cmp rcx, 0x11
jae 0x14003a630
movzx edx, byte [rsp + rcx + 0x40]
xor dl, 9
cmp qword [rbp - 0x68], rcx
jbe 0x14003a62a
lea rax, [rbp - 0x78]
cmp qword [rbp - 0x60], 0x10
cmovae rax, qword [rbp - 0x78]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x11
jl 0x14003a0c7
lea rdi, [rbp - 0x78]
cmp qword [rbp - 0x60], 0x10
cmovae rdi, qword [rbp - 0x78]
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x60], xmm1
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rsi + r8], 0
jne 0x14003a120
mov rdx, rsi
lea rcx, [rbp + 0x50]
call fcn.1400324e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x80], xmm1
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x14003a150
mov rdx, rdi
lea rcx, [rbp + 0x70]
call fcn.1400324e0
nop
mov word [rsp + 0x30], 0x6a12
movzx eax, word [rsp + 0x30]
mov word [rsp + 0x30], ax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov r8d, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x40], r8
mov byte [rbp - 0x58], 0
mov dword [rsp + 0x60], 7
mov eax, 2
mov qword [rbp - 0x48], rax
xor ecx, ecx
mov word [rbp - 0x58], cx
mov byte [rbp - 0x56], cl
mov rcx, r12
nop word [rax + rax]
cmp rcx, 2
jae 0x14003a624
movzx edx, byte [rsp + rcx + 0x30]
xor dl, 0x6a
cmp rax, rcx
jbe 0x14003a61e
lea rax, [rbp - 0x58]
cmp r8, 0x10
cmovae rax, qword [rbp - 0x58]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 2
jge 0x14003a1ee
mov r8, qword [rbp - 0x40]
mov rax, qword [rbp - 0x48]
jmp 0x14003a1b0
lea rdi, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rdi, qword [rbp - 0x58]
lea rdx, [rbp - 0x28]
mov rcx, qword [0x140143bb8]
call fcn.140049b20
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xa0], xmm1
inc rbx
cmp byte [rdi + rbx], 0
jne 0x14003a224
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp + 0x90]
call fcn.1400324e0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc0], xmm1
movups xmm0, xmmword [rsi]
movaps xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rbp + 0xc0], xmm1
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
lea rax, [rbp + 0x50]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x38]
call fcn.1400439b0
mov rdi, rax
mov rdx, r14
lea rcx, [rbp]
call fcn.140031ea0
nop
lea rax, [rbp]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140039bf0
mov rbx, rax
xor edx, edx
mov r8d, 0x298
lea rcx, [rbp + 0x220]
call fcn.1400b0170
lea rcx, [rbp + 0x220]
call fcn.14004ae80
nop
mov rdx, rbx
lea rcx, [rbp + 0x220]
call fcn.14004bd40
mov rdx, rdi
lea rcx, [rbp + 0x220]
call fcn.14004bc50
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x220]
call fcn.14004b6d0
mov dword [rsp + 0x60], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x220]
call fcn.1400463a0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x14003a370
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a36b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a5ee
call fcn.1400ab620
movdqa xmm0, xmmword [0x14010bce0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
lea r9, [fcn.140031e00]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rbp]
call fcn.1400ab300
nop
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x38]
call fcn.1400460c0
nop
lea r9, [fcn.14003a640]
mov edx, 0x40
lea r8d, [rdx - 0x3e]
lea rcx, [rbp + 0x50]
call fcn.1400ab300
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14003a3fe
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a3f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a5f4
call fcn.1400ab620
movdqa xmm0, xmmword [0x14010bce0]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14003a44b
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a445
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a5fa
call fcn.1400ab620
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x14003a487
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a481
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a600
call fcn.1400ab620
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x14003a4c3
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a4be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a606
call fcn.1400ab620
cmp dword [rbp + 0xf0], 0xc8
jne 0x14003a547
lea rdx, [rbp + 0xf8]
lea rcx, [rbp - 0x78]
call fcn.140031ea0
mov rbx, rax
mov qword [rsp + 0x60], rax
mov rcx, qword [r15 + 0x38]
test rcx, rcx
je 0x14003a60c
mov rax, qword [rcx]
mov rdx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14003a538
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14003a533
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003a612
mov rcx, r8
call fcn.1400ab620
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
lea rcx, [rbp + 0xe0]
call fcn.14003a700
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14003a58e
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14003a589
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003a618
mov rcx, r8
call fcn.1400ab620
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r14], 0
mov rcx, qword [r15 + 0x38]
test rcx, rcx
je 0x14003a5b7
mov rax, qword [rcx]
cmp rcx, r15
setne dl
call qword [rax + 0x20]
mov qword [r15 + 0x38], r12
mov rcx, qword [rbp + 0x4c0]
xor rcx, rsp
call fcn.1400aad70
lea r11, [rsp + 0x5d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140032360
nop
call fcn.140032240
nop
call fcn.1400be748
nop
call fcn.1400be748
nop
call fcn.1400be748
nop
call fcn.1400be748
nop
call fcn.1400be748
nop
call fcn.1400ac18c
nop
call fcn.1400be748
nop
call fcn.1400be748
nop
call fcn.140032360
int3
call fcn.140032240
nop
call fcn.140032360
int3
call fcn.140032240
int3