Function at 0x140001db0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x14017f840]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor edi, edi
mov dword [rsp + 0x34], WSASetLastError
mov dword [rsp + 0x20], 0x620073
mov dword [rsp + 0x24], 0x650069
mov dword [rsp + 0x28], 0x6c0064
mov dword [rsp + 0x2c], 0x2e006c
mov dword [rsp + 0x30], 0x6c0064
mov byte [rsp + 0x38], dil
lea r8, [rsp + 0x36]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x70]
call fcn.1400052b0
nop
mov dword [rsp + 0x74], WSASetLastError
mov dword [rsp + 0x60], 0x620064
mov dword [rsp + 0x64], 0x680067
mov dword [rsp + 0x68], 0x6c0065
mov dword [rsp + 0x6c], 0x2e0070
mov dword [rsp + 0x70], 0x6c0064
mov byte [rsp + 0x78], dil
lea r8, [rsp + 0x76]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x50]
call fcn.1400052b0
nop
mov dword [rsp + 0x34], WSASetLastError
mov dword [rsp + 0x20], 0x700061
mov dword [rsp + 0x24], 0x5f0069
mov dword [rsp + 0x28], 0x6f006c
mov dword [rsp + 0x2c], 0x2e0067
mov dword [rsp + 0x30], 0x6c0064
mov byte [rsp + 0x38], dil
lea r8, [rsp + 0x36]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x30]
call fcn.1400052b0
nop
mov dword [rsp + 0x40], 0xd54bd545
mov dword [rsp + 0x44], 0xd57bd551
mov dword [rsp + 0x48], 0xd547d552
mov dword [rsp + 0x4c], 0xd54bd553
mov dword [rsp + 0x50], 0xd504d541
mov dword [rsp + 0x54], 0xd540d54f
mov dword [rsp + 0x58], 0xd541
movd xmm1, dword [rsp + 0x40]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmmword [0x140145f10]
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x40], xmm1
movd xmm1, dword [rsp + 0x44]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmmword [0x140145f20]
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x44], xmm1
movd xmm1, dword [rsp + 0x48]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmmword [0x140145f30]
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x48], xmm1
movd xmm1, dword [rsp + 0x4c]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmmword [0x140145f40]
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x4c], xmm1
movdqa xmm2, xmmword [0x140145f50]
movd xmm1, dword [rsp + 0x50]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x50], xmm1
movdqa xmm2, xmmword [0x140145f60]
movd xmm1, dword [rsp + 0x54]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x54], xmm1
mov eax, WSASetLastError
mov word [rsp + 0x58], ax
mov byte [rsp + 0x5c], dil
lea r8, [rsp + 0x5a]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x10]
call fcn.1400052b0
nop
mov dword [rsp + 0x74], WSASetLastError
mov dword [rsp + 0x60], 0x730070
mov dword [rsp + 0x64], 0x6f0074
mov dword [rsp + 0x68], 0x650072
mov dword [rsp + 0x6c], 0x2e0063
mov dword [rsp + 0x70], 0x6c0064
mov byte [rsp + 0x78], dil
lea r8, [rsp + 0x76]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x10]
call fcn.1400052b0
nop
mov dword [rsp + 0x54], WSASetLastError
mov dword [rsp + 0x40], 0x6d0076
mov dword [rsp + 0x44], 0x680063
mov dword [rsp + 0x48], 0x630065
mov dword [rsp + 0x4c], 0x2e006b
mov dword [rsp + 0x50], 0x6c0064
mov byte [rsp + 0x58], dil
lea r8, [rsp + 0x56]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x30]
call fcn.1400052b0
nop
mov dword [rsp + 0x20], 0xd552d556
mov dword [rsp + 0x24], 0xd557d546
mov dword [rsp + 0x28], 0xd55fd555
mov dword [rsp + 0x2c], 0xd54cd509
mov dword [rsp + 0x30], 0xd546d545
mov word [rsp + 0x34], di
movd xmm1, dword [rsp + 0x20]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm1, xmmword [0x140145f10]
pshufd xmm0, xmm1, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x20], xmm1
movd xmm2, dword [rsp + 0x24]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmmword [0x140145f20]
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x24], xmm1
movd xmm2, dword [rsp + 0x28]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmmword [0x140145f30]
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x28], xmm1
movd xmm2, dword [rsp + 0x2c]
xorps xmm0, xmm0
punpcklwd xmm2, xmm0
punpckldq xmm2, xmm0
xorps xmm2, xmmword [0x140145f40]
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x2c], xmm1
movdqa xmm2, xmmword [0x140145f50]
movd xmm1, dword [rsp + 0x30]
xorps xmm0, xmm0
punpcklwd xmm1, xmm0
punpckldq xmm1, xmm0
xorps xmm2, xmm1
pshufd xmm0, xmm2, 0xd8
pshuflw xmm1, xmm0, 0xd8
movd dword [rsp + 0x30], xmm1
mov byte [rsp + 0x36], dil
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x50]
call fcn.1400052b0
nop
lea rbx, [rbp - 0x70]
nop word [rax + rax]
mov rcx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x1400021cd
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
jne 0x1400021e9
inc rdi
add rbx, 0x20
cmp rdi, 7
jl 0x1400021c0
xor bl, bl
jmp 0x1400021eb
mov bl, 1
lea r9, [0x140004ab0]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov r8d, 7
lea rcx, [rbp - 0x70]
call fcn.1400cb384
movzx eax, bl
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400cb320
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret