Function at 0x1400518ac
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov qword [rax + 8], rcx
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x150
mov rdi, rcx
xor r15d, r15d
mov al, 0x37
mov dword [rsp + 0x40], 0x510037
mov dword [rsp + 0x44], 0x45005e
mov dword [rsp + 0x48], 0x510052
mov dword [rsp + 0x4c], 0x4f0058
mov word [rsp + 0x50], r15w
mov ecx, r15d
movsx eax, al
xor word [rsp + rcx*2 + 0x42], ax
inc rcx
cmp rcx, 7
jae 0x140051916
mov al, byte [rsp + 0x40]
jmp 0x1400518ff
mov word [rsp + 0x50], r15w
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0x58]
call fcn.140002cdc
nop
cmp qword [rdi + 0x10], r15
jne 0x1400519b6
lea rax, [rsp + 0x58]
cmp rdi, rax
je 0x140051a47
mov rbx, qword [rsp + 0x68]
lea r9, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae r9, qword [rsp + 0x58]
cmp rbx, qword [rdi + 0x18]
ja 0x14005199f
mov rsi, rdi
cmp qword [rdi + 0x18], 8
jb 0x140051982
mov rsi, qword [rdi]
mov qword [rdi + 0x10], rbx
lea r8, [rbx + rbx]
mov rdx, r9
mov rcx, rsi
call fcn.140175840
mov word [rsi + rbx*2], r15w
jmp 0x140051a47
mov r8b, byte [rbp + 0x80]
mov rdx, rbx
mov rcx, rdi
call fcn.140003104
jmp 0x140051a47
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140051a47
movabs rax, 0x7ffffffffffffffe
mov rdx, qword [0x140213fb8]
sub rax, rdx
cmp rax, rcx
jb 0x140051f12
lea r9, [0x140213fa8]
cmp qword [reloc.WS2_32.dll_getsockopt], 8
cmovae r9, qword [0x140213fa8]
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 8
cmovae rax, qword [rsp + 0x58]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x50]
call fcn.1400033dc
nop
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x40]
mov rcx, rdi
call fcn.140003088
nop
lea rcx, [rbp - 0x50]
call fcn.14000299c
nop
mov r13d, 0x1000
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140051a8b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, r13
jb 0x140051a86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051f18
call fcn.140173310
mov al, 3
mov dword [rsp + 0x78], 0x510003
mov dword [rsp + 0x7c], 0x62006c
mov dword [rbp - 0x80], 0x6a006e
mov dword [rbp - 0x7c], 0x64006d
mov dword [rbp - 0x78], 0x4e005f
mov dword [rbp - 0x74], 0x79006c
mov dword [rbp - 0x70], 0x6f006a
mov dword [rbp - 0x6c], 0x62006f
mov dword [rbp - 0x68], 0x45005f
mov dword [rbp - 0x64], 0x71006a
mov dword [rbp - 0x60], 0x650066
mov dword [rbp - 0x5c], 0x7b006c
mov word [rbp - 0x58], r15w
mov rcx, r15
movsx eax, al
xor word [rsp + rcx*2 + 0x7a], ax
inc rcx
cmp rcx, 0x17
jae 0x140051b02
mov al, byte [rsp + 0x78]
jmp 0x140051aeb
mov word [rbp - 0x58], r15w
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
lea rdx, [rsp + 0x7a]
lea rcx, [rsp + 0x58]
call fcn.140002cdc
nop
mov edx, reloc.WLDAP32.dll_Ordinal_26
lea rcx, [rbp + 0x28]
call fcn.1400ec698
nop
lea rdx, [rbp - 0x50]
mov rcx, rax
call fcn.1400ed994
nop
lea rcx, [rbp + 0x28]
call fcn.14000299c
nop
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x18]
call fcn.14000352c
nop
mov r8, rax
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 8]
call fcn.140003644
nop
lea rcx, [rbp - 0x18]
call fcn.14000299c
nop
lea rcx, [rbp - 0x50]
call fcn.14000299c
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140051bc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, r13
jb 0x140051bc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051f1e
call fcn.140173310
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r15w
mov al, Ordinal_41
mov dword [rsp + 0x40], 0x780028
mov dword [rsp + 0x44], 0x47005a
mov dword [rsp + 0x48], 0x41004e
mov dword [rsp + 0x4c], 0x4d0044
mov dword [rsp + 0x50], 0x5b
mov rcx, r15
movsx eax, al
xor word [rsp + rcx*2 + 0x42], ax
inc rcx
cmp rcx, 8
jae 0x140051c20
mov al, byte [rsp + 0x40]
jmp 0x140051c09
mov word [rsp + 0x52], r15w
mov qword [rbp - 0x18], r15
mov qword [rbp - 8], r15
mov qword [rbp], 7
mov word [rbp - 0x18], r15w
lea rdx, [rsp + 0x42]
lea rcx, [rbp - 0x18]
call fcn.140002cdc
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x50]
call fcn.14000352c
nop
mov r8, rax
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x28]
call fcn.140003644
nop
lea rcx, [rbp - 0x50]
call fcn.14000299c
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov r14, r15
mov qword [rsp + 0x50], r15
lea rcx, [rbp + 0x28]
call fcn.1400ec954
test al, al
jne 0x140051ca2
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
jmp 0x140051daf
xor r8d, r8d
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x58]
call fcn.1400ecc48
nop
mov rsi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x48]
cmp rsi, qword [rsp + 0x60]
je 0x140051d94
mov rcx, rsi
call fcn.1400ecc10
test al, al
je 0x140051d8b
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.1400ed758
nop
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140003f34
nop
cmp rbx, r14
je 0x140051d29
movups xmm0, xmmword [rbp - 0x50]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp - 0x40]
movups xmmword [rbx + 0x10], xmm1
mov edx, 7
mov word [rbp - 0x50], r15w
add rbx, 0x20
mov qword [rsp + 0x48], rbx
jmp 0x140051d48
lea r8, [rbp - 0x50]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.1400311ac
mov r14, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140051d81
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, r13
jb 0x140051d7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051f24
call fcn.140173310
nop
lea rcx, [rsp + 0x78]
call fcn.14000299c
add rsi, 0x20
jmp 0x140051cbe
lea rcx, [rsp + 0x58]
call fcn.1400051c4
mov rax, qword [rsp + 0x40]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], r14
lea rcx, [rbp + 0x28]
call fcn.14000299c
nop
mov rdx, qword [rbp]
cmp rdx, 8
jb 0x140051df5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, r13
jb 0x140051df0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051f2a
call fcn.140173310
mov qword [rbp - 8], r15
mov qword [rbp], 7
mov word [rbp - 0x18], r15w
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.14000359c
lea r8, [rbp - 0x30]
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.14004c8e8
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.14000359c
lea r8, [rbp - 0x30]
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.14004dafc
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.14000359c
lea r8, [rbp - 0x30]
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.140051f30
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.14000359c
lea r8, [rbp - 0x30]
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.14004e8b8
nop
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x140051ede
mov rsi, qword [rbp - 0x28]
cmp rbx, rsi
je 0x140051ea2
mov rcx, rbx
call fcn.14000299c
add rbx, 0x20
cmp rbx, rsi
jne 0x140051e8d
mov rbx, qword [rbp - 0x30]
mov rdx, qword [rbp - 0x20]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, r13
jb 0x140051eca
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140051f0c
mov rcx, rbx
call fcn.140173310
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
lea rcx, [rbp + 8]
call fcn.14000299c
nop
mov rcx, rdi
call fcn.14000299c
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.14018273c
nop
call fcn.140002ca0
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
nop
call fcn.14018273c
int3