Function at 0x14004cc00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
movzx edi, byte [rbp + 0x67]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f], xmm0
mov dword [rbp - 0x39], 0x1bbe19bc
movabs rsi, 0xd75f87cdbc6e3b9c
mov dword [rbp - 0x35], 0x7a20552
movabs r14, 0xcd4db1222d8b582c
mov dword [rbp - 0x31], 0x39901a4
movabs r12, 0x9d1fd7ef3ecf6934
mov dword [rbp - 0x2d], 0xfad0d5d
movabs r15, 0x67e9136688a20884
mov dword [rbp - 0x29], 0xba609a9
mov dword [rbp - 0x25], 0x772a75d9
mov dword [rbp - 0x21], 0x73d071d1
mov dword [rbp - 0x1d], 0x7f2e7d29
mov dword [rbp - 0x19], 0x7b24792a
mov dword [rbp - 0x15], 0x673365c8
mov dword [rbp - 0x11], 0x633a613c
mov dword [rbp - 0xd], 0x6f3c6dc2
mov dword [rbp - 9], 0x6b32693d
mov dword [rbp - 5], 0x5708550c
mov dword [rbp - 1], 0x53075109
mov dword [rbp + 3], 0x5f075d02
mov dword [rbp + 7], 0x5b0a5905
mov dword [rbp + 0xb], 0x471e45e6
mov dword [rbp + 0xf], 0x431041ed
mov dword [rbp + 0x13], 0x4fec4d14
mov dword [rbp + 0x17], 0x4be64918
mov dword [rbp + 0x1b], 0xb7b6b531
nop dword [rax + rax]
call fcn.140004d90
mov rbx, qword [rax]
call fcn.140004da0
mov r8, qword [rax]
xor r11d, r11d
cmp r11, 0x68
jae 0x14004d83c
movzx r10d, byte [rbp + r11 - 0x39]
mov edx, r10d
cmp rbx, r11
ja 0x14004d833
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x14004cd43
lea rcx, [r11 + r14]
movzx eax, dl
and al, cl
movzx edi, r10b
add al, al
sub dil, al
sub dil, 0x34
add dil, cl
jmp 0x14004cd90
je 0x14004d7c3
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14004d743
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14004d711
lea rax, [r8 + 6]
cmp rbx, rax
je 0x14004d6d0
lea rax, [r8 + 7]
cmp rbx, rax
je 0x14004d6af
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14004d68b
nop word [rax + rax]
cmp r8, r11
ja 0x14004d82a
lea rax, [r8 + 0x2a]
cmp rbx, rax
jae 0x14004cdbd
lea rcx, [r11 + rsi]
movzx eax, dl
and al, cl
movzx edi, r10b
add al, al
sub dil, al
sub dil, 0x44
add dil, cl
jmp 0x14004ce00
lea rax, [r8 + 1]
cmp rbx, rax
je 0x14004d640
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14004d61e
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14004d5ff
lea rax, [r8 + 6]
cmp rbx, rax
je 0x14004d5e0
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14004d5c1
nop
lea rax, [r8 + rbx]
cmp rax, r11
jbe 0x14004d345
nop dword [rax]
lea rax, [r8 + 0x1000]
cmp rbx, rax
je 0x14004d326
lea rax, [r8 + 0x61]
cmp rbx, rax
je 0x14004d2fe
lea rax, [r8 + 0x40]
cmp rbx, rax
je 0x14004d2dd
lea rax, [r8 + 0x42]
cmp rbx, rax
je 0x14004d3cd
lea rcx, [r8 + 6]
cmp rbx, rcx
je 0x14004d2be
lea rax, [r8 + 8]
cmp rbx, rax
je 0x14004d2a3
lea rax, [r8 + 9]
cmp rbx, rax
je 0x14004d284
lea rax, [r8 + 0x2a]
cmp rbx, rax
je 0x14004d269
lea rax, [r8 + 1]
cmp rbx, rax
je 0x14004d23b
lea rax, [r8 + 0x3e8]
cmp rbx, rax
je 0x14004ce10
lea r8, [rcx + 0x400]
mov rbx, rcx
lea rax, [r8 + 8]
cmp rcx, rax
jb 0x14004d80a
lea rax, [r8 + 0x5a]
cmp rcx, rax
jb 0x14004d7ed
lea rax, [r8 + 0x2a]
cmp rcx, rax
jb 0x14004d003
lea rax, [r8 + 1]
cmp rcx, rax
jb 0x14004cfe3
lea rcx, [r8 + 0x3e8]
cmp rbx, rcx
jb 0x14004cfc7
lea rax, [r8 + 0x400]
cmp rbx, rax
jb 0x14004d1e7
lea rax, [r8 + 0x20]
cmp rbx, rax
jb 0x14004d19e
lea rax, [r8 + 0x28]
cmp rbx, rax
jb 0x14004d160
lea rax, [r8 + 0x40]
cmp rbx, rax
jb 0x14004d139
lea rax, [r8 + 5]
cmp rbx, rax
jb 0x14004ce10
lea r8, [rcx + 6]
mov rbx, rcx
lea rax, [r8 + 0x400]
cmp rcx, rax
ja 0x14004d10b
lea rax, [r8 + 0x20]
cmp rcx, rax
ja 0x14004d0f0
lea rax, [r8 + 0x28]
cmp rcx, rax
ja 0x14004d0d1
lea rax, [r8 + 4]
cmp rcx, rax
ja 0x14004d0b6
lea rcx, [r8 + 5]
cmp rbx, rcx
ja 0x14004d098
lea rax, [r8 + 6]
cmp rbx, rax
ja 0x14004d086
lea rax, [r8 + 0x41]
cmp rbx, rax
ja 0x14004d065
lea rax, [r8 + 0x5a]
cmp rbx, rax
ja 0x14004d03d
lea rax, [r8 + 0x80]
cmp rbx, rax
ja 0x14004d01e
lea rax, [r8 + 0x200]
cmp rbx, rax
ja 0x14004ce10
mov rbx, rcx
lea r8, [rcx + 0x3e8]
jmp 0x14004ce10
lea edi, [r11 - 0x1c]
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x3c
add dil, r10b
jmp 0x14004ce00
lea ecx, [r11 - 0x74]
mov edi, socket
movzx eax, cl
and al, r10b
sub dil, al
add dil, dil
add dil, cl
add dil, r10b
jmp 0x14004cd90
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x6c
jmp 0x14004cd16
lea ecx, [r11 - 0x20]
movzx r9d, r11b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x20
jmp 0x14004d65e
lea edx, [r11 - 0x78]
mov ecx, 0x24
movzx eax, dl
inc r8
and al, r10b
dec r11
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14004cd03
lea ecx, [r11 + 0x30]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x50
inc r11
jmp 0x14004cd03
lea edx, [r11 - 0x28]
mov ecx, ntohs
movzx r9d, r11b
jmp 0x14004d6dd
lea ecx, [r11 + 0x80]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
add dil, 0x80
jmp 0x14004d727
lea ecx, [r11 + 0x28]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x18
jmp 0x14004d72a
lea edx, [r11 - 0x30]
mov ecx, 0x28
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14004d759
lea ecx, [r11 + 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x48
jmp 0x14004d782
lea edx, [r11 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14004cd03
lea edx, [r11 + 0x44]
mov ecx, reloc.WS2_32.dll_select
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
mov byte [rbp + r11 - 0x39], dil
inc r11
jmp 0x14004cd03
lea ecx, [r11 - 0x14]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x74
cmp r8, 0x2a
jb 0x14004d153
movzx r9d, r11b
lea ecx, [r9 - 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, r10b
lea edi, [rcx*2 - 0x70]
jmp 0x14004d65e
lea ecx, [r11 - 0x6c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0xc
cmp rbx, 0x7a
jae 0x14004d583
lea rax, [r8 + 1]
cmp rbx, rax
jbe 0x14004d4d5
lea edx, [r11 + 0x18]
mov ecx, 0x2c
movzx eax, r10b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r10b
add dil, dl
jmp 0x14004d176
lea edx, [r11 + 0x3c]
mov ecx, 0x2e
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
lea rax, [r8 + rbx]
cmp rax, 0x10
je 0x14004d5a5
lea rax, [r8 + 0x41]
cmp rbx, rax
jbe 0x14004d40f
lea edx, [r11 + 0x7c]
movzx eax, r10b
and al, dl
movzx edi, r10b
add al, al
sub dil, al
sub dil, 0x64
add dil, dl
jmp 0x14004d1b4
lea edx, [r11 - 0x58]
mov ecx, 0x34
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14004cd03
lea ecx, [r11 + 0x50]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x30
jmp 0x14004d782
lea edx, [r11 - 8]
mov ecx, 0x1c
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14004d759
lea ecx, [r11 - 0x60]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x60
jmp 0x14004d72a
lea edx, [r11 + 0x48]
mov ecx, 4
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14004d727
lea ecx, [r11 - 0x68]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x28
inc r11
jmp 0x14004cd03
lea edx, [r11 + 0x40]
mov ecx, 0x20
movzx eax, dl
inc r8
and al, r10b
dec r11
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14004cd03
movzx r9d, r11b
lea ecx, [r9 - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x58
jmp 0x14004d65e
lea rax, [r8 + 0x5a]
cmp rbx, rax
jae 0x14004d369
lea ecx, [r11 + 0x2c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x34
jmp 0x14004d201
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14004d3a0
lea edx, [r11 + 0x38]
mov ecx, 0x3c
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14004cd03
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14004d3c4
lea ecx, [r11 - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x58
jmp 0x14004d759
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14004d3df
movzx r9d, r11b
mov ecx, gethostname
lea edx, [r9 - 0x10]
jmp 0x14004d6dd
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14004d201
mov ecx, 0x1c
movzx r9d, r11b
lea edx, [r9 - 8]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14004d65e
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14004d42a
movzx r9d, r11b
mov ecx, 0x1a
lea edx, [r9 - 0x2c]
jmp 0x14004d64d
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14004d456
movzx r9d, r11b
movzx eax, r10b
movzx edi, r10b
lea edx, [r9 - 0x24]
and al, dl
add al, al
sub dil, al
sub dil, 4
add dil, dl
jmp 0x14004d6ee
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14004d47a
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x6c
jmp 0x14004d727
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x14004d49e
lea ecx, [r11 - 0x1c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x3c
jmp 0x14004d759
lea rax, [r8 + 8]
cmp rbx, rax
jne 0x14004d1b4
lea ecx, [r11 - 0x6c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [r10 + rcx]
sub dil, 0xc
inc r11
jmp 0x14004cd03
jne 0x14004d502
lea ecx, [r11 + 0x70]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + r10]
sub dil, 0x10
inc r11
jmp 0x14004cd03
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14004d52a
lea edx, [r11 - 0x38]
movzx eax, r10b
and al, dl
movzx edi, r10b
add al, al
sub dil, al
sub dil, 0x78
add dil, dl
jmp 0x14004d782
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14004d552
lea edx, [r11 - 0x30]
mov ecx, 0x28
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14004d727
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14004d176
lea ecx, [r11 + 0x80]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
add dil, 0x80
inc r11
jmp 0x14004cd03
movzx edi, byte [rbp + r11 - 0x39]
movzx r9d, r11b
lea edx, [r9 - 0x20]
movzx eax, dl
and al, r10b
add al, al
sub dil, al
sub dil, 0x20
jmp 0x14004d6e8
lea edx, [r11 + 0x38]
mov ecx, 0x3c
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14004d759
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, r10b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r10b
add dil, dl
jmp 0x14004d782
lea edx, [r11 + 4]
movzx eax, r10b
and al, dl
movzx edi, r10b
add al, al
sub dil, al
sub dil, 0x1c
add dil, dl
jmp 0x14004d759
lea edx, [r11 - 0x54]
mov ecx, 0x26
movzx eax, r10b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r10b
add dil, dl
jmp 0x14004d72a
lea ecx, [r11 - 0x5c]
movzx eax, r10b
and al, cl
dec r11
add al, al
sub r10b, al
lea edi, [rcx + r10]
sub dil, 0x7c
inc r11
jmp 0x14004cd03
movzx r9d, r11b
mov ecx, 0x2a
lea edx, [r9 - 0xc]
movzx eax, r10b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r10b
add dil, dl
sub r9b, 0x4c
movzx eax, r10b
and al, r9b
mov ecx, 0xa
sub cl, al
inc r8
add cl, cl
add cl, r10b
add cl, r9b
mov byte [rbp + r11 - 0x39], cl
dec r11
inc r11
jmp 0x14004cd03
lea ecx, [r11 - 0x14]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x74
inc r8
dec r11
inc r11
jmp 0x14004cd03
lea ecx, [r11 - 0x6c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0xc
dec r11
inc r11
jmp 0x14004cd03
movzx r9d, r11b
mov ecx, 0x2e
lea edx, [r9 + 0x3c]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
add r9b, 0xc
movzx eax, r10b
and al, r9b
movzx ecx, dil
add al, al
sub cl, al
sub cl, 0x54
add cl, r10b
add cl, r9b
mov byte [rbp + r11 - 0x39], cl
jmp 0x14004d727
lea ecx, [r11 - 0x1c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x3c
add rbx, r8
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x14004cd03
lea rcx, [r11 + r12]
movzx edi, r10b
and dl, cl
add dl, dl
sub dil, dl
sub dil, 0x6c
add dil, cl
lea edx, [r11 + 0x64]
movzx eax, r10b
and al, dl
inc r8
mov ecx, 0x22
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
movzx eax, cl
mov byte [rbp + r11 - 0x39], al
add rax, r8
sub r11, rax
lea edx, [r11 - 0x70]
movzx eax, r10b
and al, dl
inc rbx
mov ecx, 8
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, rbx
add cl, cl
add cl, r10b
add cl, dl
mov byte [rbp + r11 - 0x39], cl
add r11, rax
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
inc r11
jmp 0x14004cd03
lea rcx, [r11 + r15]
mov eax, 0x32
and dl, cl
sub al, dl
lea edi, [rax + rax]
add dil, r10b
add dil, cl
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
inc r11
jmp 0x14004cd03
sub r11b, 0x24
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edi, [r11 + r10]
sub dil, 4
jmp 0x14004cd00
sub r11b, 0x7c
mov ecx, 0x32
movzx eax, r10b
and al, r11b
sub cl, al
lea edi, [rcx + rcx]
add dil, r10b
add dil, r11b
jmp 0x14004ccf0
lea rcx, [rbp + 0x15f3d57]
jmp 0x14004d840
lea rcx, [rbp + 0x6a9583]
jmp 0x14004d840
lea rcx, [rbp - 0x39]
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0
mov edx, 0xc0000000
mov r8d, 3
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x1401fe610], rax
test rax, rax
je 0x14004d880
cmp rax, 0xffffffffffffffff
setne al
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret