Function at 0x140003890
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov dword [rsp + 8], ecx
mov eax, 0x1638
call fcn.14007ca90
sub rsp, rax
mov rax, qword [0x14009c688]
xor rax, rsp
mov qword [rsp + 0x1628], rax
mov byte [rsp + 0x1588], 0x68
mov byte [rsp + 0x1589], 0x74
mov byte [rsp + 0x158a], 0x74
mov byte [rsp + 0x158b], 0x70
mov byte [rsp + 0x158c], 0x73
mov byte [rsp + 0x158d], 0x3a
mov byte [rsp + 0x158e], 0x2f
mov byte [rsp + 0x158f], 0x2f
mov byte [rsp + 0x1590], 0x77
mov byte [rsp + 0x1591], 0x77
mov byte [rsp + 0x1592], 0x77
mov byte [rsp + 0x1593], 0x2e
mov byte [rsp + 0x1594], 0x62
mov byte [rsp + 0x1595], 0x61
mov byte [rsp + 0x1596], 0x69
mov byte [rsp + 0x1597], 0x64
mov byte [rsp + 0x1598], 0x75
mov byte [rsp + 0x1599], 0x2e
mov byte [rsp + 0x159a], 0x63
mov byte [rsp + 0x159b], 0x6f
mov byte [rsp + 0x159c], 0x6d
mov byte [rsp + 0x159d], 0x2f
mov byte [rsp + 0x159e], 0
mov byte [rsp + 0x15b8], 0x68
mov byte [rsp + 0x15b9], 0x74
mov byte [rsp + 0x15ba], 0x74
mov byte [rsp + 0x15bb], 0x70
mov byte [rsp + 0x15bc], 0x73
mov byte [rsp + 0x15bd], 0x3a
mov byte [rsp + 0x15be], 0x2f
mov byte [rsp + 0x15bf], 0x2f
mov byte [rsp + 0x15c0], 0x77
mov byte [rsp + 0x15c1], 0x77
mov byte [rsp + 0x15c2], 0x77
mov byte [rsp + 0x15c3], 0x2e
mov byte [rsp + 0x15c4], 0x61
mov byte [rsp + 0x15c5], 0x6c
mov byte [rsp + 0x15c6], 0x69
mov byte [rsp + 0x15c7], 0x79
mov byte [rsp + 0x15c8], 0x75
mov byte [rsp + 0x15c9], 0x6e
mov byte [rsp + 0x15ca], 0x2e
mov byte [rsp + 0x15cb], 0x63
mov byte [rsp + 0x15cc], 0x6f
mov byte [rsp + 0x15cd], 0x6d
mov byte [rsp + 0x15ce], 0x2f
mov byte [rsp + 0x15cf], 0
mov byte [rsp + 0x15d0], 0x68
mov byte [rsp + 0x15d1], 0x74
mov byte [rsp + 0x15d2], 0x74
mov byte [rsp + 0x15d3], 0x70
mov byte [rsp + 0x15d4], 0x73
mov byte [rsp + 0x15d5], 0x3a
mov byte [rsp + 0x15d6], 0x2f
mov byte [rsp + 0x15d7], 0x2f
mov byte [rsp + 0x15d8], 0x77
mov byte [rsp + 0x15d9], 0x77
mov byte [rsp + 0x15da], 0x77
mov byte [rsp + 0x15db], 0x2e
mov byte [rsp + 0x15dc], 0x68
mov byte [rsp + 0x15dd], 0x75
mov byte [rsp + 0x15de], 0x61
mov byte [rsp + 0x15df], 0x77
mov byte [rsp + 0x15e0], 0x65
mov byte [rsp + 0x15e1], 0x69
mov byte [rsp + 0x15e2], 0x2e
mov byte [rsp + 0x15e3], 0x63
mov byte [rsp + 0x15e4], 0x6f
mov byte [rsp + 0x15e5], 0x6d
mov byte [rsp + 0x15e6], 0x2f
mov byte [rsp + 0x15e7], 0
mov byte [rsp + 0x15e8], 0x68
mov byte [rsp + 0x15e9], 0x74
mov byte [rsp + 0x15ea], 0x74
mov byte [rsp + 0x15eb], 0x70
mov byte [rsp + 0x15ec], 0x73
mov byte [rsp + 0x15ed], 0x3a
mov byte [rsp + 0x15ee], 0x2f
mov byte [rsp + 0x15ef], 0x2f
mov byte [rsp + 0x15f0], 0x77
mov byte [rsp + 0x15f1], 0x77
mov byte [rsp + 0x15f2], 0x77
mov byte [rsp + 0x15f3], 0x2e
mov byte [rsp + 0x15f4], 0x74
mov byte [rsp + 0x15f5], 0x65
mov byte [rsp + 0x15f6], 0x6e
mov byte [rsp + 0x15f7], 0x63
mov byte [rsp + 0x15f8], 0x65
mov byte [rsp + 0x15f9], 0x6e
mov byte [rsp + 0x15fa], 0x74
mov byte [rsp + 0x15fb], 0x2e
mov byte [rsp + 0x15fc], 0x63
mov byte [rsp + 0x15fd], 0x6f
mov byte [rsp + 0x15fe], 0x6d
mov byte [rsp + 0x15ff], 0x2f
mov byte [rsp + 0x1600], 0
mov byte [rsp + 0x1570], 0x68
mov byte [rsp + 0x1571], 0x74
mov byte [rsp + 0x1572], 0x74
mov byte [rsp + 0x1573], 0x70
mov byte [rsp + 0x1574], 0x73
mov byte [rsp + 0x1575], 0x3a
mov byte [rsp + 0x1576], 0x2f
mov byte [rsp + 0x1577], 0x2f
mov byte [rsp + 0x1578], 0x77
mov byte [rsp + 0x1579], 0x77
mov byte [rsp + 0x157a], 0x77
mov byte [rsp + 0x157b], 0x2e
mov byte [rsp + 0x157c], 0x6d
mov byte [rsp + 0x157d], 0x69
mov byte [rsp + 0x157e], 0x2e
mov byte [rsp + 0x157f], 0x63
mov byte [rsp + 0x1580], 0x6f
mov byte [rsp + 0x1581], 0x6d
mov byte [rsp + 0x1582], 0x2f
mov byte [rsp + 0x1583], 0
mov byte [rsp + 0x28], 0x68
mov byte [rsp + 0x29], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x2a], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x2b], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x2c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x2d], Ordinal_60
mov byte [rsp + 0x2e], Ordinal_50
mov byte [rsp + Ordinal_50], 0x2f
mov byte [rsp + 0x30], 0x77
mov byte [rsp + 0x31], 0x77
mov byte [rsp + 0x32], 0x77
mov byte [rsp + 0x33], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x34], 0x63
mov byte [rsp + 0x35], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x36], 0x64
mov byte [rsp + 0x37], WSASetLastError
mov byte [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x39], WSASetLastError
mov byte [rsp + 0x3a], 0x65
mov byte [rsp + 0x3b], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x3c], Ordinal_50
mov byte [rsp + 0x3d], 0
mov byte [rsp + 0x15a0], 0x68
mov byte [rsp + 0x15a1], 0x74
mov byte [rsp + 0x15a2], 0x74
mov byte [rsp + 0x15a3], 0x70
mov byte [rsp + 0x15a4], 0x73
mov byte [rsp + 0x15a5], 0x3a
mov byte [rsp + 0x15a6], 0x2f
mov byte [rsp + 0x15a7], 0x2f
mov byte [rsp + 0x15a8], 0x6d
mov byte [rsp + 0x15a9], 0x75
mov byte [rsp + 0x15aa], 0x73
mov byte [rsp + 0x15ab], 0x69
mov byte [rsp + 0x15ac], 0x63
mov byte [rsp + 0x15ad], 0x2e
mov byte [rsp + 0x15ae], 0x31
mov byte [rsp + 0x15af], 0x36
mov byte [rsp + 0x15b0], 0x33
mov byte [rsp + 0x15b1], 0x2e
mov byte [rsp + 0x15b2], 0x63
mov byte [rsp + 0x15b3], 0x6f
mov byte [rsp + 0x15b4], 0x6d
mov byte [rsp + 0x15b5], 0x2f
mov byte [rsp + 0x15b6], 0
mov byte [rsp + 0x1608], 0x68
mov byte [rsp + 0x1609], 0x74
mov byte [rsp + 0x160a], 0x74
mov byte [rsp + 0x160b], 0x70
mov byte [rsp + 0x160c], 0x73
mov byte [rsp + 0x160d], 0x3a
mov byte [rsp + 0x160e], 0x2f
mov byte [rsp + 0x160f], 0x2f
mov byte [rsp + 0x1610], 0x77
mov byte [rsp + 0x1611], 0x77
mov byte [rsp + 0x1612], 0x77
mov byte [rsp + 0x1613], 0x2e
mov byte [rsp + 0x1614], 0x69
mov byte [rsp + 0x1615], 0x63
mov byte [rsp + 0x1616], 0x62
mov byte [rsp + 0x1617], 0x63
mov byte [rsp + 0x1618], 0x2e
mov byte [rsp + 0x1619], 0x63
mov byte [rsp + 0x161a], 0x6f
mov byte [rsp + 0x161b], 0x6d
mov byte [rsp + 0x161c], 0x2e
mov byte [rsp + 0x161d], 0x63
mov byte [rsp + 0x161e], 0x6e
mov byte [rsp + 0x161f], 0x2f
mov byte [rsp + 0x1620], 0
mov dword [rsp + 0x24], 0
jmp 0x140003e55
mov eax, dword [rsp + 0x24]
inc eax
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x1640]
cmp dword [rsp + 0x24], eax
jge 0x1400040bd
lea rcx, [rsp + 0x1c8]
call fcn.1400010c0
lea rcx, [rsp + 0x1c8]
call fcn.1400037d0
mov edx, eax
lea rcx, [rsp + 0x1e0]
call fcn.140008b30
mov r8d, 7
mov edx, 1
lea rcx, [rsp + 0x1d0]
call fcn.140008b00
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x1d0]
call fcn.14000bd70
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x20], eax
mov eax, dword [rsp + 0x20]
dec eax
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 6
ja case.default.0x140003ef3
movsxd rax, dword [rsp + 0x20]
lea rcx, [0x140000000]
mov eax, dword [rcx + rax*4 + 0x40dc]
add rax, rcx
jmp rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x1588]
mov rcx, qword [rsp + 0x58]
call fcn.140009890
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x60]
call fcn.14001e460
jmp 0x1400040b8
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x15b8]
mov rcx, qword [rsp + 0x68]
call fcn.140009890
mov qword [rsp + 0x70], rax
mov rcx, qword [rsp + 0x70]
call fcn.14001e460
jmp 0x1400040b8
lea rax, [rsp + 0x108]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x15d0]
mov rcx, qword [rsp + 0x78]
call fcn.140009890
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x80]
call fcn.14001e460
jmp 0x1400040b8
lea rax, [rsp + 0x128]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x15e8]
mov rcx, qword [rsp + 0x88]
call fcn.140009890
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x90]
call fcn.14001e460
jmp 0x1400040b8
lea rax, [rsp + 0x148]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x1570]
mov rcx, qword [rsp + 0x98]
call fcn.140009890
mov qword [rsp + 0xa0], rax
mov rcx, qword [rsp + 0xa0]
call fcn.14001e460
jmp 0x1400040b8
lea rax, [rsp + 0x168]
mov qword [rsp + 0xa8], rax
lea rdx, [rsp + 0x15a0]
mov rcx, qword [rsp + 0xa8]
call fcn.140009890
mov qword [rsp + 0xb0], rax
mov rcx, qword [rsp + 0xb0]
call fcn.14001e460
jmp 0x1400040b8
lea rax, [rsp + 0x188]
mov qword [rsp + 0xb8], rax
lea rdx, [rsp + 0x1608]
mov rcx, qword [rsp + 0xb8]
call fcn.140009890
mov qword [rsp + 0xc0], rax
mov rcx, qword [rsp + 0xc0]
call fcn.14001e460
jmp 0x1400040b8
lea rax, [rsp + 0x1a8]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x1570]
mov rcx, qword [rsp + 0x48]
call fcn.140009890
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x50]
call fcn.14001e460
jmp 0x140003e4b
mov eax, 1
mov rcx, qword [rsp + 0x1628]
xor rcx, rsp
call fcn.14007c450
add rsp, 0x1638
ret