Function at 0x140069020
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
sub rsp, 0x190
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x108], 0xfffffffffffffffe
mov rax, qword [rbp + 0x140]
mov qword [rbp + 0xf8], r9
mov qword [rbp + 0xf0], r8
mov qword [rbp + 0xe8], rdx
mov qword [rbp + 0xe0], rcx
mov rcx, qword [rbp + 0xe0]
mov qword [rbp - 0x28], rcx
mov rdx, qword [rbp + 0xe8]
call fcn.140068b90
test al, 1
jne 0x14006921d
mov byte [rbp + 0xa2], 0x1d
mov byte [rbp + 0xa1], 0x88
mov byte [rbp + 0xa0], 6
mov byte [rbp + 0x9f], 0xd8
mov byte [rbp + 0x9e], 0xb0
mov byte [rbp + 0x9d], 0x84
mov byte [rbp + 0x9c], 0xf3
mov byte [rbp + 0x9b], 0x36
mov byte [rbp + 0x9a], 0xb5
mov byte [rbp + 0x99], 0x59
mov byte [rbp + 0x98], 0xea
mov byte [rbp + 0x97], 0x61
mov byte [rbp + 0x96], 0xcc
mov byte [rbp + 0x95], 0xb0
mov byte [rbp + 0x94], 0x32
mov byte [rbp + 0x93], 0xf1
mov byte [rbp + 0x92], 0x37
mov byte [rbp + 0x91], 0xd3
mov byte [rbp + 0x90], 3
mov byte [rbp + 0x8f], 0x4c
mov byte [rbp + 0x8e], 0xb8
mov byte [rbp + 0x8d], 0x2b
mov byte [rbp + 0x8c], 0x6a
mov byte [rbp + 0x8b], 0xc2
mov byte [rbp + 0x8a], 0x20
mov byte [rbp + 0x89], 0xa6
mov byte [rbp + 0x88], 0x53
mov byte [rbp + 0x87], 0x8d
mov byte [rbp + 0x86], 0xba
mov byte [rbp + 0x85], 0x2f
mov byte [rbp + 0x84], 0xd1
mov byte [rbp + 0x83], 0x3e
mov byte [rbp + 0x82], 0xbf
mov byte [rbp + 0x81], 0xc8
mov byte [rbp + 0x80], 0x53
mov byte [rbp + 0x7f], WSACleanup
mov byte [rbp + 0x7e], 0xa0
mov byte [rbp + 0x7d], recv
mov byte [rbp + 0x7c], 8
mov byte [rbp + 0x7b], 0x7c
mov byte [rbp + 0x7a], 0xad
mov byte [rbp + 0x79], 0xfb
mov byte [rbp + 0x78], 0xd0
mov byte [rbp + 0x77], 0x98
mov byte [rbp + 0x76], 0xd4
mov byte [rbp + 0x75], pe_nt_image_headers64
mov byte [rbp + 0x74], 0x88
mov byte [rbp + 0x73], 0x40
mov byte [rbp + 0x72], 0x92
mov byte [rbp + 0x71], 0xe8
mov byte [rbp + 0x70], 0xd4
mov byte [rbp + 0x6f], 0x48
mov byte [rbp + 0x6e], recv
mov byte [rbp + 0x6d], 0x9d
mov byte [rbp + 0x6c], 0x9f
mov byte [rbp + 0x6b], 0xb0
mov byte [rbp + 0x6a], 0x43
mov byte [rbp + 0x69], 0x3d
mov byte [rbp + 0x68], 0x60
mov dword [rbp + 0xa3], 0x6a46894e
lea rcx, [rbp + 0x68]
lea rdx, [rbp + 0xa8]
mov qword [rbp - 0x30], rdx
call fcn.1400698c0
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp + 0xc8]
call fcn.14004b9c0
jmp 0x140069205
lea rdx, [0x14010f880]
lea rcx, [rbp + 0xc8]
call fcn.14009a84c
jmp 0x1400693fd
mov rcx, qword [rbp + 0xf8]
call fcn.140061330
test al, 1
jne 0x1400692b0
mov rcx, qword [rbp + 0xf8]
call fcn.140064ff0
test al, 1
jne 0x1400692b0
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp + 0xf8]
add rdx, 0xa0
call fcn.14005d910
test al, 1
jne 0x1400692b0
mov rcx, qword [rbp + 0x140]
call fcn.140061330
test al, 1
jne 0x1400692b0
mov rcx, qword [rbp + 0x140]
call fcn.140064ff0
test al, 1
jne 0x1400692b0
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp + 0x140]
add rdx, 0xa0
call fcn.14005d910
test al, 1
jne 0x1400692b0
jmp 0x1400692bc
mov byte [rbp + 0x107], 0
jmp 0x1400693e9
mov rcx, qword [rbp - 0x28]
mov r8, qword [rbp + 0xf0]
lea rdx, [rbp + 0x48]
call fcn.140068f80
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp + 0x140]
add r8, 0xa0
lea rdx, [rbp + 0x28]
call fcn.1400632c0
jmp 0x1400692f0
lea rcx, [rbp + 0x48]
mov qword [rbp - 0x38], rcx
lea rdx, [rbp + 0x28]
mov qword [rbp - 0x40], rdx
call fcn.14005b690
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x38]
add rdx, 0xa0
mov qword [rbp - 0x48], rdx
call fcn.14005e680
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp + 0xf8]
call fcn.14005b690
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x40]
call fcn.14005e680
mov r10, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x28]
mov r9, qword [rbp - 0x38]
mov rdx, qword [rbp + 0xe8]
mov r8, rcx
add r8, 0x60
mov rax, rsp
mov qword [rax + 0x28], r10
mov qword [rax + 0x20], rdx
lea rdx, [rbp - 0x18]
call fcn.1400682d0
jmp 0x14006936d
lea rcx, [rbp - 0x18]
call fcn.140069820
test al, 1
jne 0x140069383
jmp 0x140069396
mov byte [rbp + 0x107], 0
mov dword [rbp - 0x1c], 1
jmp 0x1400693c9
mov rdx, qword [rbp - 0x28]
add rdx, 0xa0
lea rcx, [rbp - 0x18]
call fcn.14005e680
mov rdx, qword [rbp + 0xf8]
lea rcx, [rbp - 0x18]
call fcn.14005d880
and al, 1
mov byte [rbp + 0x107], al
mov dword [rbp - 0x1c], 1
lea rcx, [rbp - 0x18]
call fcn.14003b390
lea rcx, [rbp + 0x28]
call fcn.14003b280
lea rcx, [rbp + 0x48]
call fcn.14003b280
jmp 0x1400693e9
mov al, byte [rbp + 0x107]
and al, 1
movzx eax, al
add rsp, 0x190
pop rbp
ret
int3