Function at 0x140038ab0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
mov rbp, rsp
sub rsp, 0x40
mov rbx, rcx
xor edi, edi
mov dword [rbp - 0x20], edi
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
mov dword [rcx], edi
mov qword [rcx + 8], rdi
mov qword [rcx + 0x10], rdi
mov ecx, Ordinal_26
call fcn.14009f62c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbx + 8], rax
lea rcx, [rbx + 0x18]
mov qword [rcx], rdi
mov qword [rcx + 8], rdi
mov qword [rcx + 0x10], rdi
mov qword [rbx + 0x30], 7
mov qword [rbx + 0x38], 8
mov dword [rbx], 0x3f800000
mov r8, qword [rbx + 8]
mov edx, reloc.WS2_32.dll_recv
call fcn.14003c6a0
nop
mov dword [rbp - 0x20], 1
mov byte [rbp + 0x18], 0x61
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_35
mov byte [rbp + 0x18], 0x62
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_60
mov byte [rbp + 0x18], 0x63
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], recv
mov byte [rbp + 0x18], 0x64
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_30
mov byte [rbp + 0x18], 0x65
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_50
mov byte [rbp + 0x18], 0x66
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_50
mov byte [rbp + 0x18], 0x67
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x18], 0x68
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_41
mov byte [rbp + 0x18], 0x69
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WS2_32.dll_socket
mov byte [rbp + 0x18], 0x6a
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_46
mov byte [rbp + 0x18], 0x6b
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], gethostname
mov byte [rbp + 0x18], WSAGetLastError
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_30
mov byte [rbp + 0x18], WSAGetLastError
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x18], WSAGetLastError
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_45
mov byte [rbp + 0x18], reloc.WS2_32.dll_WSAGetLastError
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_50
mov byte [rbp + 0x18], reloc.WS2_32.dll_WSASetLastError
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + reloc.WS2_32.dll_sendto], 0x14
mov byte [rbp + 0x18], WSAStartup
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_30
mov byte [rbp + 0x18], WSAStartup
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp + 0x18], reloc.WS2_32.dll_WSAStartup
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], send
mov byte [rbp + 0x18], reloc.WS2_32.dll_WSACleanup
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x18], 0x75
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x18], 0x76
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x18], 0x77
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WS2_32.dll_listen
mov byte [rbp + 0x18], 0x78
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WS2_32.dll_recv
mov byte [rbp + 0x18], 0x79
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x18], 0x7a
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_46
mov byte [rbp + 0x18], 0x41
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_143
mov byte [rbp + 0x18], 0x42
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xc0
mov byte [rbp + 0x18], 0x43
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x51
mov byte [rbp + 0x18], 0x44
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x9c
mov byte [rbp + 0x18], 0x45
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_79
mov byte [rbp + 0x18], 0x46
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x77
mov byte [rbp + 0x18], 0x47
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x66
mov byte [rbp + 0x18], 0x48
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], __WSAFDIsSet
mov byte [rbp + 0x18], 0x49
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xa8
mov byte [rbp + 0x18], 0x4a
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x87
mov byte [rbp + 0x18], 0x4b
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xbe
mov byte [rbp + 0x18], Ordinal_79
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], WSAStartup
mov byte [rbp + 0x18], Ordinal_79
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_143
mov byte [rbp + 0x18], Ordinal_79
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xa7
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_79
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], __WSAFDIsSet
mov byte [rbp + 0x18], 0x50
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x79
mov byte [rbp + 0x18], 0x51
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x9b
mov byte [rbp + 0x18], 0x52
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_200
mov byte [rbp + 0x18], 0x53
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xab
mov byte [rbp + 0x18], 0x54
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xb7
mov byte [rbp + 0x18], 0x55
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x99
mov byte [rbp + 0x18], 0x56
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_143
mov byte [rbp + 0x18], 0x57
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xb0
mov byte [rbp + 0x18], 0x58
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xbb
mov byte [rbp + 0x18], 0x59
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x82
mov byte [rbp + 0x18], 0x5a
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xa2
mov byte [rbp + 0x18], Ordinal_50
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x65
mov byte [rbp + 0x18], Ordinal_50
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xcb
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_50
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x18], 0x33
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0x68
mov byte [rbp + 0x18], 0x34
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xb2
mov byte [rbp + 0x18], 0x35
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], 0xa6
mov byte [rbp + 0x18], gethostname
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_211
mov byte [rbp + 0x18], gethostname
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], WSAGetLastError
mov byte [rbp + 0x18], gethostname
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], WSAStartup
mov byte [rbp + 0x18], reloc.WS2_32.dll_gethostname
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], WSAStartup
mov byte [rbp + 0x18], Ordinal_50
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x18], 0x5c
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_217
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_46
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_217
mov byte [rbp + 0x18], Ordinal_60
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_217
mov byte [rbp + 0x18], reloc.WLDAP32.dll_Ordinal_45
lea r8, [rbp + 0x18]
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14003cf20
mov rcx, qword [rax]
mov dword [rcx + 0x14], Ordinal_217
mov rax, rbx
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop rbp
ret