Function at 0x14002d540
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x178]
sub rsp, 0x278
mov rax, qword [0x1400cc020]
xor rax, rsp
mov qword [rbp + 0x150], rax
movsxd rax, r9d
mov r10, r8
mov r14, rdx
lea r9, [rbp + 0x10]
lea r8, [rsp + 0x70]
mov rsi, rcx
xor r13b, r13b
lea r12, [rdx + rax*8]
mov rdx, r10
mov qword [r12 + 0x200], 0xffffffffffffffff
call fcn.14002df00
mov edi, eax
test eax, eax
jne 0x14002dada
movzx ecx, word [rbp - 0x80]
mov qword [rsp + 0x270], rbx
sub ecx, 1
je 0x14002d632
cmp ecx, 1
jne 0x14002d5de
lea r9d, [rax + 0x2e]
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x7c]
lea ecx, [rax + 2]
call fcn.140050830
test rax, rax
je 0x14002d5de
movzx ecx, word [rbp - 0x7e]
call fcn.14002bf80
jmp 0x14002d658
mov byte [rbp + 0x18], r13b
call fcn.14006ac68
mov dword [rax], 0x273f
call fcn.14006ac68
mov ebx, dword [rax]
call fcn.14006ac68
lea rdx, [rbp + 0x50]
mov ecx, ebx
mov rdi, rax
call fcn.14004ff60
mov r8d, dword [rdi]
lea rdx, str.sa_addr_inet_ntop___failed_with_errno__d:__s
mov r9, rax
mov rcx, rsi
call fcn.14002b570
mov r8, qword [rbp + 0x10]
mov rdx, r14
mov rcx, rsi
call fcn.14002ddc0
xor eax, eax
jmp 0x14002dad2
cmp dword [rsp + 0x7c], 2
jle 0x14002d654
lea r9, [rbp - 0x7e]
mov edx, 0x2e
lea r8, [0x1400bc640]
lea rcx, [rbp + 0x18]
call fcn.14003c990
jmp 0x14002d658
mov byte [rbp + 0x18], r13b
cmp dword [rsp + 0x70], 2
mov rbx, qword [rbp + 0x10]
mov qword [rsp + 0x268], r15
jne 0x14002d6d7
cmp dword [rsp + 0x74], 1
jne 0x14002d6d7
mov r15b, 1
cmp byte [rsi + 0xa7b], r13b
je 0x14002d6da
mov dword [rsp + 0x50], 1
call fcn.140024690
test rax, rax
je 0x14002d6da
lea rdx, [rbp]
mov dword [rbp + 7], 0x74706f
mov rcx, rax
mov dword [rbp], 0x73746573
mov word [rbp + 4], 0x636f
mov byte [rbp + 6], 0x6b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002d6da
mov edx, 6
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x50]
mov rcx, rbx
lea r8d, [rdx - 5]
call rax
jmp 0x14002d6da
xor r15b, r15b
mov eax, dword [0x1400ce978]
mov dword [rsp + 0x50], 0x4020
mov dword [rsp + 0x54], 0
mov dword [rbp + 0x10], 4
test eax, eax
jne 0x14002d72c
xor edx, edx
mov dword [rsp + 0x20], 3
lea ecx, [rax + 6]
call fcn.14003ce80
test al, al
je 0x14002d720
mov dword [0x1400ce978], 2
jmp 0x14002d7e6
mov dword [0x1400ce978], 1
jmp 0x14002d735
cmp eax, 2
je 0x14002d7e6
call fcn.140024690
test rax, rax
je 0x14002d795
lea rdx, [rbp]
mov dword [rbp], 0x73746567
mov rcx, rax
mov dword [rbp + 4], 0x6f6b636f
mov word [rbp + 8], 0x7470
mov byte [rbp + 0xa], r13b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002d795
lea rcx, [rbp + 0x10]
mov edx, 0xffff
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x54]
mov rcx, rbx
mov r8d, 0x1001
call rax
test eax, eax
jne 0x14002d795
mov eax, dword [rsp + 0x50]
cmp dword [rsp + 0x54], eax
jg 0x14002d7e6
call fcn.140024690
test rax, rax
je 0x14002d7e6
lea rdx, [rbp]
mov dword [rbp + 7], 0x74706f
mov rcx, rax
mov dword [rbp], 0x73746573
mov word [rbp + 4], 0x636f
mov byte [rbp + 6], 0x6b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002d7e6
lea r9, [rsp + 0x50]
mov dword [rsp + 0x20], 4
mov edx, 0xffff
mov r8d, 0x1001
mov rcx, rbx
call rax
test r15b, r15b
je 0x14002d8f7
cmp byte [rsi + 0xa83], r13b
je 0x14002d8f7
mov dword [rsp + 0x50], 1
call fcn.140024690
test rax, rax
je 0x14002d8f7
lea rdx, [rbp]
mov dword [rbp + 7], 0x74706f
mov rcx, rax
mov dword [rbp], 0x73746573
mov word [rbp + 4], 0x636f
mov byte [rbp + 6], 0x6b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002d8f7
lea r9, [rsp + 0x50]
mov dword [rsp + 0x20], 4
mov edx, 0xffff
mov r8d, 8
mov rcx, rbx
call rax
test eax, eax
js 0x14002d8f7
mov eax, dword [rsi + 0xa08]
btr eax, 0x1f
mov dword [rsp + 0x58], 1
imul eax, eax, 0x3e8
mov dword [rsp + 0x5c], eax
imul eax, dword [rsi + 0xa0c], 0x3e8
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x60], eax
call fcn.140024690
test rax, rax
je 0x14002d8f7
lea rdx, [rbp]
mov dword [rbp + 2], 0x636f4941
mov rcx, rax
mov word [rbp], 0x5357
mov word [rbp + 7], 0x6c
mov byte [rbp + 6], 0x74
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002d8f7
xor edx, edx
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x40], rdx
lea r8, [rsp + 0x58]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rcx
mov rcx, rbx
mov dword [rsp + 0x28], edx
lea r9d, [rdx + 0xc]
mov qword [rsp + 0x20], rdx
mov edx, 0x98000004
call rax
cmp qword [rsi + 0x280], 0
je 0x14002d95c
mov rax, qword [rsi + 0xd8]
test rax, rax
jne 0x14002d919
mov rax, qword [rsi + 0xd0]
test rax, rax
je 0x14002d920
mov byte [rax + 0x182], 1
mov rcx, qword [rsi + 0x288]
xor r8d, r8d
mov rdx, rbx
call qword [rsi + 0x280]
mov ecx, eax
mov rax, qword [rsi + 0xd8]
test rax, rax
jne 0x14002d94d
mov rax, qword [rsi + 0xd0]
test rax, rax
je 0x14002d954
mov byte [rax + 0x182], r13b
cmp ecx, 2
jne 0x14002d99a
mov r13b, 1
cmp dword [rsp + 0x70], 2
jne 0x14002d9b6
mov r8d, 2
mov rdx, rbx
mov rcx, rsi
call fcn.14002c1e0
mov edi, eax
test eax, eax
je 0x14002d9b6
mov r8, rbx
mov rdx, r14
mov rcx, rsi
call fcn.14002ddc0
mov eax, 7
cmp edi, 1
cmove edi, eax
mov eax, edi
jmp 0x14002daca
test ecx, ecx
je 0x14002d95c
mov r8, rbx
mov rdx, r14
mov rcx, rsi
call fcn.14002ddc0
mov eax, 0x2a
jmp 0x14002daca
mov edx, 1
mov rcx, rbx
call fcn.140050920
lea rcx, [rsp + 0x58]
call fcn.14004fc40
cmp dword [r14 + 0x3e4], 1
movups xmm0, xmmword [rax]
movups xmmword [r14 + 0x3e8], xmm0
jle 0x14002da0c
mov rdx, qword [r14 + 0x3f8]
mov r8d, 3
mov rcx, rsi
call fcn.14002aef0
mov rdx, qword [r14 + 0x400]
mov r8d, 4
mov rcx, rsi
call fcn.14002aef0
test r13b, r13b
jne 0x14002dac0
cmp dword [r14 + 0x88], 4
je 0x14002dac0
cmp byte [r14 + 0x3d9], r13b
jne 0x14002da7c
mov r15d, dword [rsp + 0x7c]
call fcn.140024690
test rax, rax
je 0x14002da7c
lea rdx, [rbp + 0x10]
mov dword [rbp + 0x10], 0x6e6e6f63
mov rcx, rax
mov dword [rbp + 0x14], 0x746365
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002da7c
mov r8d, r15d
lea rdx, [rbp - 0x80]
mov rcx, rbx
call rax
cmp eax, 0xffffffff
je 0x14002da7c
test edi, edi
jne 0x14002dabc
mov qword [r12 + 0x200], rbx
mov eax, edi
jmp 0x14002daca
call fcn.14002b460
mov edx, eax
sub edx, 0xb
je 0x14002dab2
sub edx, 0x2728
je 0x14002dab2
cmp edx, 1
je 0x14002dab2
mov r8, rbx
mov dword [rsi + 0xd34], eax
mov rdx, r14
mov rcx, rsi
call fcn.14002ddc0
mov edi, 7
mov eax, edi
jmp 0x14002daca
xor edi, edi
mov qword [r12 + 0x200], rbx
mov eax, edi
jmp 0x14002daca
mov qword [r12 + 0x200], rbx
xor eax, eax
mov r15, qword [rsp + 0x268]
mov rbx, qword [rsp + 0x270]
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140060fb0
add rsp, 0x278
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret