Function at 0x140116670
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
push rbp
push rdi
push r14
lea rbp, [rax - 0x2d8]
sub rsp, 0x3c0
mov qword [rbp - 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x20], rsi
mov rbx, rdx
mov rdi, rcx
xor r14d, r14d
mov dword [rbp - 0x60], r14d
mov dword [rsp + 0x46], 0x38376138
mov dword [rsp + 0x41], 0x30383962
mov word [rsp + 0x31], 0x3435
mov dword [rsp + 0x34], 0x33373264
mov dword [rsp + 0x3d], 0x38336666
mov dword [rsp + 0x4b], 0x30343363
mov word [rsp + 0x4f], 0x64
mov dword [rsp + 0x38], 0x63323337
mov byte [rsp + 0x30], gethostname
mov byte [rsp + 0x4a], 0x63
mov byte [rsp + 0x3c], 0x34
mov byte [rsp + 0x33], 0x61
mov byte [rsp + 0x45], 0x62
lea rcx, [rbp - 0x30]
call section..sk1i88
nop
mov qword [rsp + 0x70], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x68], r14
mov byte [rsp + 0x58], r14b
cmp byte [rsp + 0x30], r14b
jne 0x140116726
mov r8d, r14d
jmp 0x14011673a
lea rax, [rsp + 0x30]
or r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140116730
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x58]
call fcn.14001c360
nop
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x70], r14
mov byte [rbp - 0x80], 0
xor r8d, r8d
lea rdx, [0x14015b600]
lea rcx, [rbp - 0x80]
call fcn.14001c360
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x30]
call section..viyuez
nop
mov rax, qword [rsp + 0x70]
cmp rax, 0x10
jb 0x1401167d8
inc rax
mov rcx, qword [rsp + 0x58]
cmp rax, 0x1000
jb 0x1401167d3
test cl, 0x1f
je 0x1401167a6
call fcn.1400a5694
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1401167b5
call fcn.1400a5694
int3
sub rcx, rax
cmp rcx, 8
jae 0x1401167c4
call fcn.1400a5694
int3
cmp rcx, 0x27
jbe 0x1401167d0
call fcn.1400a5694
int3
mov rcx, rax
call fcn.14006dab0
mov word [rbp - 0x30], 0
mov rcx, qword [rbx + 0x10]
add rcx, 0x10
call fcn.14006e344
mov rsi, rax
mov dword [rbp + 0x2f0], r14d
cmp qword [rbx + 0x18], 0x10
jb 0x140116801
mov rdx, qword [rbx]
jmp 0x140116804
mov rdx, rbx
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8d, dword [rbx + 0x10]
lea rcx, [rbp - 0x30]
call fcn.1400ff170
lea rax, vtable.Base64Coder.0
mov qword [rsp + 0x58], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov r8d, dword [rbp + 0x2f0]
mov rdx, rsi
lea rcx, [rsp + 0x58]
call fcn.1400186f0
lea rdx, [rbp - 0x58]
lea rcx, [rsp + 0x58]
call fcn.140105330
nop
mov qword [rbp - 0x68], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x70], r14
mov byte [rbp - 0x80], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x80]
call fcn.14001c490
lea rdx, [rbp - 0x80]
mov rcx, rdi
call fcn.140116960
mov rcx, rsi
call fcn.14006dab8
nop
mov rax, qword [rbp - 0x40]
cmp rax, 0x10
jb 0x1401168ec
inc rax
mov rcx, qword [rbp - 0x58]
cmp rax, 0x1000
jb 0x1401168e7
test cl, 0x1f
je 0x1401168ba
call fcn.1400a5694
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1401168c9
call fcn.1400a5694
int3
sub rcx, rax
cmp rcx, 8
jae 0x1401168d8
call fcn.1400a5694
int3
cmp rcx, 0x27
jbe 0x1401168e4
call fcn.1400a5694
int3
mov rcx, rax
call fcn.14006dab0
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x48], r14
mov byte [rbp - 0x58], 0
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14011690b
call fcn.14006dab8
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14011691b
call fcn.14006dab8
nop
lea rcx, [rbp + 0x90]
call fcn.14001b510
lea rcx, [rbp + 0x70]
call fcn.14001b510
nop
mov rcx, rbx
call fcn.14001b510
mov rax, rdi
lea r11, [rsp + 0x3c0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret