Function at 0x140040da0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140158280]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r13, rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x60], rcx
xor r8d, r8d
mov dword [rbp - 0x78], r8d
movdqa xmm0, xmmword [0x14012b170]
movdqu xmmword [rsp + 0x60], xmm0
mov edi, r8d
mov esi, r8d
mov r14d, r8d
mov r15d, r8d
mov dword [rsp + 0x74], r8d
mov dword [rsp + 0x70], r8d
mov r12d, r8d
xor eax, eax
xor ecx, ecx
cpuid
mov r9d, eax
xor eax, eax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x30], ebx
mov dword [rbp - 0x2c], edx
mov dword [rbp - 0x28], ecx
nop word [rax + rax]
mov eax, r8d
xor ecx, ecx
cpuid
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], edx
cmp r8d, 1
jne 0x140040e9b
mov edi, eax
sar edi, 4
and edi, 0xf
mov esi, eax
sar esi, 8
and esi, 0xf
mov r14d, eax
sar r14d, 0xc
and r14d, 3
mov r15d, eax
sar r15d, 0x10
and r15d, 0xf
sar eax, 0x14
movzx r10d, al
mov dword [rsp + 0x74], r10d
movzx r10d, bl
mov dword [rsp + 0x70], r10d
sar ebx, 8
movzx r12d, bl
shl r12d, 3
inc r8d
cmp r8d, r9d
jbe 0x140040e40
mov eax, 0x80000000
xor ecx, ecx
cpuid
mov r9d, eax
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], ebx
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], edx
xor eax, eax
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov r8d, 0x80000000
cmp r9d, r8d
jb 0x140040f49
nop dword [rax]
mov eax, r8d
xor ecx, ecx
cpuid
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], ebx
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x6c], edx
cmp r8d, 0x80000002
jne 0x140040f1b
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm0
jmp 0x140040f41
cmp r8d, 0x80000003
jne 0x140040f2f
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp], xmm0
jmp 0x140040f41
cmp r8d, 0x80000004
jne 0x140040f41
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp + 0x10], xmm0
inc r8d
cmp r8d, r9d
jbe 0x140040ef0
call fcn.140016610
mov rcx, rax
xor ebx, ebx
mov eax, ebx
test rcx, rcx
setne al
test eax, eax
jne 0x140040f6a
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [r13], rax
mov dword [rbp - 0x78], 1
call fcn.140016610
mov rcx, rax
mov eax, ebx
test rcx, rcx
setne al
test eax, eax
jne 0x140040f9e
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rcx, [rbp - 0x30]
lea rax, [rbp - 0x30]
test rax, 0xffffffffffff0000
jne 0x140040fde
movzx ebx, cx
xor edx, edx
mov ecx, ebx
call fcn.14000f2d0
test rax, rax
je 0x140040fec
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400421a0
jmp 0x140040fec
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x80]
call fcn.140040620
nop
call fcn.140016610
mov rcx, rax
xor eax, eax
test rcx, rcx
setne al
test eax, eax
jne 0x14004100b
mov ecx, 0x80004005
call fcn.14000f440
int3
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x78], rbx
lea rcx, [rbp - 0x10]
lea rax, [rbp - 0x10]
test rax, 0xffffffffffff0000
jne 0x140041054
movzx r13d, cx
xor edx, edx
mov ecx, r13d
call fcn.14000f2d0
test rax, rax
je 0x140041069
mov r8d, r13d
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400421a0
mov rbx, qword [rsp + 0x78]
jmp 0x140041069
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x78]
call fcn.140040620
mov rbx, qword [rsp + 0x78]
jmp 0x14004106d
mov r13, qword [rbp - 0x70]
mov dword [rbp - 0x3e], 0x250064
mov ecx, reloc.OLEAUT32.dll_SafeArrayDestroyDescriptor
mov dword [rbp - 0x52], 0x250073
mov dword [rbp - 0x58], 0x730025
mov dword [rbp - 0x46], 0x250064
mov dword [rbp - 0x3a], 0x250064
mov dword [rbp - 0x42], 0x250064
mov dword [rbp - 0x4a], 0x250064
mov dword [rbp - 0x36], 0x64
mov dword [rbp - 0x4e], 0x250064
mov word [rbp - 0x54], cx
mov dword [rsp + 0x50], r12d
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x48], ecx
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], edi
mov r9, rbx
mov r8, qword [rbp - 0x80]
lea rdx, [rbp - 0x58]
mov rcx, r13
call fcn.140040c00
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140041105
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14004111d
mov rcx, qword [rdx]
mov rbx, qword [rcx]
call qword [rbx + reloc.WS2_32.dll_htonl]
mov rax, r13
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14006ed70
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret