Function at 0x140107030
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov qword [rbp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x198], rbx
mov r13d, edx
mov r15, rcx
mov dword [rsp + 0x73], 0x74746553
mov word [rsp + 0x66], 0x6f69
mov word [rsp + 0x5f], 0x6e65
mov word [rsp + 0x55], 0x646e
mov dword [rsp + 0x62], 0x73726556
mov dword [rsp + 0x69], 0x746e495c
mov word [rsp + 0x45], 0x7261
mov dword [rsp + 0x6d], 0x656e7265
mov word [rsp + 0x58], 0x7377
mov dword [rsp + 0x77], 0x73676e69
mov dword [rsp + 0x40], 0x74666f53
mov dword [rsp + 0x5b], 0x72727543
mov byte [rsp + 0x44], 0x77
mov dword [rsp + 0x51], 0x69575c74
mov dword [rsp + 0x48], 0x63694d5c
mov word [rsp + 0x71], 0x2074
mov dword [rsp + 0x4d], 0x666f736f
mov byte [rsp + 0x57], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x61], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x68], WSASetLastError
mov byte [rsp + 0x7b], 0
mov byte [rsp + 0x4c], WSACleanup
mov byte [rsp + 0x5a], 0x5c
mov byte [rsp + 0x47], 0x65
mov dword [rsp + 0x20], 0x786f7250
mov word [rsp + 0x26], 0x616e
mov word [rsp + 0x29], 0x656c
mov word [rsp + 0x24], 0x4579
mov byte [rsp + 0x2b], 0
mov byte [rsp + 0x28], 0x62
mov dword [rsp + 0x36], 0x65767265
mov dword [rsp + 0x31], 0x79786f72
mov byte [rsp + 0x35], 0x53
mov word [rsp + 0x3a], WSACleanup
mov byte [rsp + 0x30], 0x50
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
xor ebx, ebx
mov qword [rbp + 0x10], rbx
mov byte [rbp], bl
lea rax, [rsp + 0x40]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], bl
jne 0x140107166
lea rdx, [rsp + 0x40]
lea rcx, [rbp]
call fcn.14001c360
nop
mov rdx, r15
lea rcx, [rbp + 0x20]
call fcn.14001eca0
nop
lea r8, [rbp]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14001ed30
nop
mov rax, qword [rbp + 0x38]
cmp rax, 0x10
jb 0x1401071f2
inc rax
mov rcx, qword [rbp + 0x20]
cmp rax, 0x1000
jb 0x1401071ed
test cl, 0x1f
je 0x1401071c0
call fcn.1400a5694
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1401071cf
call fcn.1400a5694
int3
sub rcx, rax
cmp rcx, 8
jae 0x1401071de
call fcn.1400a5694
int3
cmp rcx, 0x27
jbe 0x1401071ea
call fcn.1400a5694
int3
mov rcx, rax
call fcn.14006dab0
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x30], rbx
mov byte [rbp + 0x20], 0
mov rax, qword [rbp + 0x18]
cmp rax, 0x10
jb 0x140107258
inc rax
mov rcx, qword [rbp]
cmp rax, 0x1000
jb 0x140107253
test cl, 0x1f
je 0x140107226
call fcn.1400a5694
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140107235
call fcn.1400a5694
int3
sub rcx, rax
cmp rcx, 8
jae 0x140107244
call fcn.1400a5694
int3
cmp rcx, 0x27
jbe 0x140107250
call fcn.1400a5694
int3
mov rcx, rax
call fcn.14006dab0
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x10], rbx
mov byte [rbp], 0
lea rax, [rbp - 0x40]
mov qword [rbp + 0xa0], rax
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x30], rbx
mov byte [rbp - 0x40], 0
cmp byte [rsp + 0x20], 0
jne 0x14010728f
mov r8, rbx
jmp 0x1401072aa
lea rax, [rsp + 0x20]
or r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1401072a0
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x40]
call fcn.14001c360
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rdx, qword [rbp - 0x60]
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x10], rbx
mov byte [rbp - 0x20], 0
cmp byte [rdx], 0
jne 0x1401072e1
mov r8, rbx
jmp 0x1401072ef
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1401072e5
lea rcx, [rbp - 0x20]
call fcn.14001c360
nop
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x20]
call fcn.1400f61f0
cmp eax, 1
sete r12b
lea rax, [rbp - 0x20]
mov qword [rbp + 0xa0], rax
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x10], rbx
mov byte [rbp - 0x20], 0
cmp byte [rsp + 0x30], 0
jne 0x140107334
mov r8, rbx
jmp 0x14010734a
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140107340
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.14001c360
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae rdx, qword [rbp - 0x60]
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x30], rbx
mov byte [rbp - 0x40], 0
cmp byte [rdx], 0
jne 0x140107381
mov r8, rbx
jmp 0x14010738f
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140107385
lea rcx, [rbp - 0x40]
call fcn.14001c360
nop
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x40]
lea rcx, [rbp - 0x80]
call fcn.140108460
mov rax, qword [rbp - 0x70]
cmp rax, 5
jb 0x140107444
lea rdi, [rax - 4]
lea rbx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rbx, qword [rbp - 0x80]
lea r14, [0x14015b7c0]
test rdi, rdi
je 0x140107440
mov r8, rdi
mov edx, 0x68
mov rcx, rbx
call fcn.14009be78
mov rsi, rax
test rax, rax
je 0x140107440
xor edx, edx
movzx ecx, byte [rax + rdx]
inc rdx
cmp cl, byte [r14 + rdx - 1]
jne 0x140107408
cmp rdx, 5
jne 0x1401073f0
xor eax, eax
jmp 0x14010740d
sbb eax, eax
or eax, 1
test eax, eax
je 0x140107420
sub rbx, rsi
dec rbx
add rdi, rbx
lea rbx, [rsi + 1]
jmp 0x1401073d1
lea rax, [rbp - 0x80]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
cmovae rax, rcx
sub rsi, rax
mov r14, rsi
mov rax, qword [rbp - 0x70]
jmp 0x140107453
mov rax, qword [rbp - 0x70]
or rsi, 0xffffffffffffffff
or r14, rsi
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x80]
cmp rax, 6
jb 0x1401074f1
lea rdi, [rax - 5]
lea rbx, [rbp - 0x80]
cmp rdx, 0x10
cmovae rbx, rcx
nop dword [rax]
test rdi, rdi
je 0x1401074e9
mov r8, rdi
mov edx, 0x68
mov rcx, rbx
call fcn.14009be78
mov r8, rax
test rax, rax
je 0x1401074e9
xor edx, edx
lea rax, str.https
nop word [rax + rax]
movzx ecx, byte [r8 + rdx]
inc rdx
cmp cl, byte [rax + rdx - 1]
jne 0x1401074b8
cmp rdx, 6
jne 0x1401074a0
xor eax, eax
jmp 0x1401074bd
sbb eax, eax
or eax, 1
test eax, eax
je 0x1401074d0
sub rbx, r8
dec rbx
add rdi, rbx
lea rbx, [r8 + 1]
jmp 0x140107470
lea rax, [rbp - 0x80]
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
cmovae rax, rcx
sub r8, rax
jmp 0x1401074f5
mov rdx, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x80]
or r8, 0xffffffffffffffff
test r12b, r12b
je 0x140107621
cmp r14, 0xffffffffffffffff
jne 0x1401075e7
cmp r8, r14
jne 0x1401075e7
cmp rdx, 0x10
jb 0x140107561
lea rax, [rdx + 1]
cmp rax, 0x1000
jb 0x14010755c
test byte [rbp - 0x80], 0x1f
je 0x14010752f
call fcn.1400a5694
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14010753e
call fcn.1400a5694
int3
sub rcx, rax
cmp rcx, 8
jae 0x14010754d
call fcn.1400a5694
int3
cmp rcx, 0x27
jbe 0x140107559
call fcn.1400a5694
int3
mov rcx, rax
call fcn.14006dab0
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
xor ebx, ebx
mov qword [rbp - 0x70], rbx
mov byte [rbp - 0x80], bl
mov rax, qword [rbp - 0x48]
cmp rax, 0x10
jb 0x1401075c8
inc rax
mov rcx, qword [rbp - 0x60]
cmp rax, 0x1000
jb 0x1401075c3
test cl, 0x1f
je 0x140107596
call fcn.1400a5694
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1401075a5
call fcn.1400a5694
int3
sub rcx, rax
cmp rcx, 8
jae 0x1401075b4
call fcn.1400a5694
int3
cmp rcx, 0x27
jbe 0x1401075c0
call fcn.1400a5694
int3
mov rcx, rax
call fcn.14006dab0
mov qword [rbp - 0x48], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x50], rbx
mov byte [rbp - 0x60], 0
mov rcx, r15
call fcn.14001b510
mov al, 1
jmp 0x140107696
test r13d, r13d
jne 0x140107615
cmp rsi, 0xffffffffffffffff
je 0x140107621
lea rcx, [rbp - 0x80]
call fcn.14001b510
nop
lea rcx, [rbp - 0x60]
call fcn.14001b510
nop
mov rcx, r15
call fcn.14001b510
mov al, 1
jmp 0x140107696
cmp r13d, 1
jne 0x140107621
cmp r8, 0xffffffffffffffff
jmp 0x1401075f0
cmp rdx, 0x10
jb 0x140107671
lea rax, [rdx + 1]
cmp rax, 0x1000
jb 0x14010766c
test byte [rbp - 0x80], 0x1f
je 0x14010763f
call fcn.1400a5694
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14010764e
call fcn.1400a5694
int3
sub rcx, rax
cmp rcx, 8
jae 0x14010765d
call fcn.1400a5694
int3
cmp rcx, 0x27
jbe 0x140107669
call fcn.1400a5694
int3
mov rcx, rax
call fcn.14006dab0
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
xor ebx, ebx
mov qword [rbp - 0x70], rbx
mov byte [rbp - 0x80], bl
lea rcx, [rbp - 0x60]
call fcn.14001b510
nop
mov rcx, r15
call fcn.14001b510
xor al, al
mov rbx, qword [rsp + 0x198]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret