Function at 0x140016217
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x140035fb0
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x470
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xb4
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x498]
mov rax, qword [0x14005b040]
xor rax, rbp
mov qword [rbp + 0x440], rax
lea rcx, [0x140065efe]
call fcn.140017144
mov rax, qword [rbp + 0x470]
mov qword [rax], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 8], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x10], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x18], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x20], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x28], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x30], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x38], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x40], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x48], 0
mov rax, qword [rbp + 0x470]
mov qword [rax + 0x50], 0
mov edx, 0x20
lea rcx, [rbp + 8]
call fcn.1400160e6
lea rcx, [rbp + 0x204]
call fcn.14001682a
mov qword [rbp + 0x438], rax
mov byte [rbp + 0x418], 0x49
mov byte [rbp + 0x419], 0x43
mov byte [rbp + 0x41a], 0x50
mov byte [rbp + 0x41b], 0x4c
mov byte [rbp + 0x41c], 0x43
mov byte [rbp + 0x41d], 0x4a
mov byte [rbp + 0x41e], send
mov byte [rbp + 0x41f], reloc.WS2_32.dll_recv
mov byte [rbp + 0x420], recv
mov byte [rbp + 0x421], 0x42
mov byte [rbp + 0x422], 0x4a
mov byte [rbp + 0x423], 0x4a
lea rax, [rbp + 0x424]
mov r8, rax
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x228]
call fcn.140016771
lea rcx, [rbp + 0x258]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x390]
lea rcx, [rbp + 0x258]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rbp + 0x438]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 8]
call fcn.140016d7f
nop
mov edx, 0x20
lea rcx, [rbp + 0x48]
call fcn.1400160e6
lea rcx, [rbp + 0x284]
call fcn.14001682a
mov qword [rbp + 0x438], rax
mov byte [rbp + 0x3e8], 0x4c
mov byte [rbp + 0x3e9], 0x52
mov byte [rbp + 0x3ea], 0x42
mov byte [rbp + 0x3eb], 0x4a
mov byte [rbp + 0x3ec], 0x4a
mov byte [rbp + 0x3ed], recv
mov byte [rbp + 0x3ee], 0x42
mov byte [rbp + 0x3ef], 0x4a
mov byte [rbp + 0x3f0], 0x4a
lea rax, [rbp + 0x3f1]
mov r8, rax
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp + 0x2a8]
call fcn.140016771
lea rcx, [rbp + 0x2d8]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x3c0]
lea rcx, [rbp + 0x2d8]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_recv
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rbp + 0x438]
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x48]
call fcn.140016d7f
nop
mov r8d, 0xde
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x308]
call fcn.140016fd7
mov qword [rbp + 0x438], rax
mov rcx, qword [rbp + 0x438]
call fcn.140016186
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rbp + 0x470]
mov qword [rcx], rax
lea rcx, [rbp + 0x308]
call fcn.14001630c
mov r8d, 0xde
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x348]
call fcn.140016fd7
mov qword [rbp + 0x438], rax
mov rcx, qword [rbp + 0x438]
call fcn.140016186
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, qword [rbp + 0x470]
mov qword [rcx + 8], rax
lea rcx, [rbp + 0x348]
call fcn.14001630c
mov rax, qword [rbp + 0x470]
cmp qword [rax], 0
je 0x1400362f4
mov rax, qword [rbp + 0x470]
cmp qword [rax + 8], 0
je 0x1400362f4
mov rcx, qword [rbp + 0x470]
call fcn.1400161e0
nop
lea rcx, [rbp + 0x48]
call fcn.140016528
nop
lea rcx, [rbp + 8]
call fcn.140016528
mov rax, qword [rbp + 0x470]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x14004e4d0]
call fcn.140016e4c
mov rax, rdi
mov rcx, qword [rbp + 0x440]
xor rcx, rbp
call fcn.14001687a
lea rsp, [rbp + 0x450]
pop rdi
pop rsi
pop rbp
ret