Function at 0x14010abb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
xor edi, edi
call fcn.1400fc974
movsx r9d, al
call fcn.1400fc970
movsx ecx, al
imul r9d, ecx
call fcn.1400fc980
movsx r10d, al
lea edx, [r9 + r9*4]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r10d
lea eax, [rax + rdx*2]
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp + 0x67], xmm1
imul ecx, r9d, 7
movsx eax, byte [reloc.WS2_32.dll_htons]
add ecx, r10d
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14010ac9c
call fcn.1400fc978
movsx edx, al
movsx eax, byte [0x14055e028]
imul edx, eax
add edx, edx
call fcn.1400fc984
movsx ecx, al
sub edx, ecx
call fcn.1400fc97c
movsx ecx, al
add edx, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, edx
jne 0x14010ad06
lea ecx, [r9 + r10]
movsx eax, byte [reloc.WS2_32.dll_htons]
lea ecx, [rcx + r9*8]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x14010acfb
lea ecx, [r9 + r10]
movsx eax, byte [reloc.WS2_32.dll_htons]
lea ecx, [rcx + r9*2]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp + 0x67]
cvttsd2si eax, xmm0
jmp 0x14010acfe
mov eax, dword [rbp + 0x67]
cmp edi, eax
jge 0x14010aee5
mov dword [rbp - 0x19], 0xaec6b497
mov dword [rbp - 0x15], 0xd3dba9d3
mov dword [rbp - 0x11], 0xd5a389ad
mov dword [rbp - 0xd], 0x8ea3d9a0
mov byte [rbp - 9], 0x48
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], eax
mov byte [rbp + 0x14], al
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov rdx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
mov r8b, byte [rbp + rax - 0x19]
sub dl, 0x74
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax - 0x19], cl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 0x2e
jb 0x14010ad41
xorps xmm0, xmm0
movups xmmword [rbp + 0x37], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x47], xmm1
lea rax, [rbp - 0x19]
or rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x14010ad9b
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x37]
call fcn.140038c20
mov dword [rbp - 0x19], 0x3934203b
mov dword [rbp - 0x15], 0x69693d25
mov dword [rbp - 0x11], 0x27263966
mov byte [rbp - 0xd], 0x50
xor eax, eax
mov qword [rbp - 0xc], rax
mov word [rbp - 4], ax
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov rdx, qword [rbp + 0x67]
mov rax, qword [rbp + 0x67]
mov r8b, byte [rbp + rax - 0x19]
sub dl, 0x36
mov al, dl
and al, r8b
mov ecx, 0x3d
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov rax, qword [rbp + 0x67]
mov byte [rbp + rax - 0x19], cl
mov rax, qword [rbp + 0x67]
inc rax
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
cmp rax, 0x17
jb 0x14010addc
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
lea rax, [rbp - 0x19]
inc rbx
cmp byte [rax + rbx], dil
jne 0x14010ae2f
mov r8, rbx
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0x17]
call fcn.140038c20
lea rdx, [rbp + 0x37]
lea rcx, [rbp + 0x17]
call fcn.1400b2ff4
xor ecx, ecx
call rax
mov rbx, rax
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x14010ae93
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010ae8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010aed6
call fcn.140165c30
movdqa xmm0, xmmword [0x140202190]
movdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x17], dil
mov rdx, qword [rbp + 0x4f]
cmp rdx, 0xf
jbe 0x14010aee2
inc rdx
mov rcx, qword [rbp + 0x37]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14010aedd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14010aedd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140165c30
mov rax, rbx
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret