Function at 0x140086790
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
sub rsp, 0x330
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2a8], 0xfffffffffffffffe
mov rax, qword [rbp + 0x2f0]
mov rax, qword [rbp + 0x2e8]
mov rax, qword [rbp + 0x2e0]
mov qword [rbp + 0x2a0], r9
mov qword [rbp + 0x298], r8
mov qword [rbp + 0x290], rdx
mov qword [rbp + 0x288], rcx
mov rax, qword [rbp + 0x288]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x280], reloc.WS2_32.dll_sendto
movzx eax, word [rax + 0x18]
mov dword [rbp + 0x54], eax
add eax, 0xffffffc4
sub eax, 2
jb 0x140086856
jmp 0x14008680a
mov eax, dword [rbp + 0x54]
sub eax, 0xc023
je 0x140086856
jmp 0x14008681d
mov eax, dword [rbp + 0x54]
sub eax, 0xc027
je 0x140086856
jmp 0x140086830
mov eax, dword [rbp + 0x54]
sub eax, 0xc02b
je 0x140086866
jmp 0x140086843
mov eax, dword [rbp + 0x54]
sub eax, 0xc02f
je 0x140086866
jmp 0x140086871
mov qword [rbp + 0x280], 0x20
jmp 0x140086871
mov qword [rbp + 0x280], 0
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x278], reloc.WS2_32.dll_recv
movzx eax, word [rax + 0x18]
mov dword [rbp + 0x44], eax
sub eax, 0x35
je 0x1400868cc
jmp 0x140086895
mov eax, dword [rbp + 0x44]
sub eax, 0x3d
je 0x1400868cc
jmp 0x1400868a6
mov eax, dword [rbp + 0x44]
sub eax, 0xc00a
je 0x1400868cc
jmp 0x1400868b9
mov eax, dword [rbp + 0x44]
sub eax, 0xc014
jne 0x1400868d7
jmp 0x1400868cc
mov qword [rbp + 0x278], 0x20
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x270], 0
movzx eax, word [rax + 0x18]
or eax, 4
sub eax, 0xc02f
je 0x1400868fd
jmp 0x140086908
mov qword [rbp + 0x270], 4
mov rdx, qword [rbp + 0x48]
add rdx, 0x60
lea rcx, [rbp + 0x230]
call fcn.140004550
jmp 0x140086921
mov rdx, qword [rbp + 0x48]
add rdx, 0x40
lea rcx, [rbp + 0x230]
call fcn.1400046b0
mov qword [rbp + 0x38], rax
jmp 0x14008693e
mov rcx, qword [rbp + 0x48]
lea rdx, [rbp + 0x210]
mov qword [rbp + 0x28], rdx
call fcn.140086520
mov rcx, qword [rbp + 0x280]
mov rax, qword [rbp + 0x278]
add rax, rax
lea rax, [rax + rcx*2]
mov rcx, qword [rbp + 0x270]
lea rax, [rax + rcx*2]
mov qword [rbp + 0x20], rax
mov byte [rbp + 0x1e4], 0xa
mov byte [rbp + 0x1e3], 0x8c
mov byte [rbp + 0x1e2], 0xac
mov byte [rbp + 0x1e1], 0xa5
mov byte [rbp + 0x1e0], 0x7a
mov byte [rbp + 0x1df], 0xd3
mov byte [rbp + 0x1de], 0xaa
mov byte [rbp + 0x1dd], 6
mov byte [rbp + 0x1dc], 0x41
mov byte [rbp + 0x1db], 0x54
mov byte [rbp + 0x1da], 0x4f
mov byte [rbp + 0x1d9], 0x91
mov byte [rbp + 0x1d8], 0xa4
mov dword [rbp + 0x1e5], 0x20352f26
lea rcx, [rbp + 0x1d8]
lea rdx, [rbp + 0x1f0]
mov qword [rbp + 0x18], rdx
call fcn.140064490
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x20]
mov r9, qword [rbp + 0x28]
mov rax, rsp
mov qword [rax + 0x20], rcx
lea rcx, [rbp + 0x250]
mov qword [rbp + 0x30], rcx
call fcn.140087160
mov rcx, qword [rbp + 0x28]
call fcn.140002220
lea rcx, [rbp + 0x230]
call fcn.140002220
mov rcx, qword [rbp + 0x30]
mov r9, qword [rbp + 0x280]
xor eax, eax
mov r8d, eax
lea rdx, [rbp + 0x1b8]
call fcn.1400157d0
jmp 0x140086a4f
mov rcx, qword [rbp + 0x290]
lea rdx, [rbp + 0x1b8]
mov qword [rbp + 0x10], rdx
call fcn.14000ab70
mov rcx, qword [rbp + 0x10]
call fcn.140002220
mov r9, qword [rbp + 0x280]
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0x198]
mov r8, r9
call fcn.1400157d0
jmp 0x140086a91
mov rcx, qword [rbp + 0x298]
lea rdx, [rbp + 0x198]
mov qword [rbp + 8], rdx
call fcn.14000ab70
mov rcx, qword [rbp + 8]
call fcn.140002220
mov r9, qword [rbp + 0x278]
mov r8, qword [rbp + 0x280]
add r8, r8
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0x178]
call fcn.1400157d0
jmp 0x140086ada
mov r9, qword [rbp + 0x278]
mov rax, qword [rbp + 0x280]
lea r8, [r9 + rax*2]
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0x158]
call fcn.1400157d0
jmp 0x140086b04
lea rcx, [rbp + 0x138]
mov qword [rbp], rcx
call fcn.1400023e0
lea rcx, [rbp + 0x178]
mov qword [rbp - 8], rcx
lea rdx, [rbp + 0x130]
call fcn.14005cad0
mov rcx, qword [rbp - 8]
lea rdx, [rbp + 0x128]
call fcn.14005cd70
mov r9, qword [rbp]
mov rdx, qword [rbp + 0x128]
mov r8, qword [rbp + 0x130]
lea rcx, [rbp + 0x140]
call fcn.140087370
jmp 0x140086b5e
mov rcx, qword [rbp + 0x2a0]
lea rdx, [rbp + 0x140]
mov qword [rbp - 0x20], rdx
call fcn.14005abe0
mov rcx, qword [rbp - 0x20]
call fcn.140055060
lea rcx, [rbp + 0x108]
mov qword [rbp - 0x10], rcx
call fcn.1400023e0
lea rcx, [rbp + 0x158]
mov qword [rbp - 0x18], rcx
lea rdx, [rbp + 0x100]
call fcn.14005cad0
mov rcx, qword [rbp - 0x18]
lea rdx, [rbp + 0xf8]
call fcn.14005cd70
mov r9, qword [rbp - 0x10]
mov rdx, qword [rbp + 0xf8]
mov r8, qword [rbp + 0x100]
lea rcx, [rbp + 0x110]
call fcn.140087370
jmp 0x140086bd8
mov rcx, qword [rbp + 0x2e0]
lea rdx, [rbp + 0x110]
mov qword [rbp - 0x28], rdx
call fcn.14005abe0
mov rcx, qword [rbp - 0x28]
call fcn.140055060
mov r9, qword [rbp + 0x270]
mov rcx, qword [rbp + 0x280]
mov rax, qword [rbp + 0x278]
add rax, rax
lea r8, [rax + rcx*2]
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0xd8]
call fcn.1400157d0
jmp 0x140086c2c
mov r9, qword [rbp + 0x270]
mov rcx, qword [rbp + 0x280]
mov rax, qword [rbp + 0x278]
add rax, rax
lea r8, [rax + rcx*2]
add r8, r9
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0xb8]
call fcn.1400157d0
jmp 0x140086c63
lea rcx, [rbp + 0x98]
mov qword [rbp - 0x30], rcx
call fcn.1400023e0
lea rcx, [rbp + 0xd8]
mov qword [rbp - 0x38], rcx
lea rdx, [rbp + 0x90]
call fcn.14005cad0
mov rcx, qword [rbp - 0x38]
lea rdx, [rbp + 0x88]
call fcn.14005cd70
mov r9, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x90]
lea rcx, [rbp + 0xa0]
call fcn.140087370
jmp 0x140086cbd
mov rcx, qword [rbp + 0x2e8]
lea rdx, [rbp + 0xa0]
mov qword [rbp - 0x50], rdx
call fcn.14005abe0
mov rcx, qword [rbp - 0x50]
call fcn.140055060
lea rcx, [rbp + 0x68]
mov qword [rbp - 0x40], rcx
call fcn.1400023e0
lea rcx, [rbp + 0xb8]
mov qword [rbp - 0x48], rcx
lea rdx, [rbp + 0x60]
call fcn.14005cad0
mov rcx, qword [rbp - 0x48]
lea rdx, [rbp + 0x58]
call fcn.14005cd70
mov r9, qword [rbp - 0x40]
mov rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x60]
lea rcx, [rbp + 0x70]
call fcn.140087370
jmp 0x140086d25
mov rcx, qword [rbp + 0x2f0]
lea rdx, [rbp + 0x70]
call fcn.14005abe0
lea rcx, [rbp + 0x70]
call fcn.140055060
lea rcx, [rbp + 0xb8]
call fcn.140002220
lea rcx, [rbp + 0xd8]
call fcn.140002220
lea rcx, [rbp + 0x158]
call fcn.140002220
lea rcx, [rbp + 0x178]
call fcn.140002220
lea rcx, [rbp + 0x250]
call fcn.140002220
nop
add rsp, 0x330
pop rbp
ret