Function at 0x14001e990
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x188
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov rax, qword [0x14009c688]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x28], 0
lea rcx, [rsp + 0xc0]
call fcn.140001880
nop
lea rcx, [rsp + 0xa0]
call fcn.140001880
nop
mov qword [rsp + 0x30], 0
mov byte [rsp + 0xf0], 0x55
mov byte [rsp + 0xf1], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0xf2], 0x65
mov byte [rsp + 0xf3], WSACleanup
mov byte [rsp + 0xf4], reloc.WLDAP32.dll_Ordinal_45
mov byte [rsp + 0xf5], 0x41
mov byte [rsp + 0xf6], 0x67
mov byte [rsp + 0xf7], 0x65
mov byte [rsp + 0xf8], WSACleanup
mov byte [rsp + 0xf9], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0xfa], Ordinal_60
mov byte [rsp + 0xfb], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xfc], Ordinal_79
mov byte [rsp + 0xfd], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0xfe], 0x7a
mov byte [rsp + 0xff], WSASetLastError
mov byte [rsp + 0x100], WSASetLastError
mov byte [rsp + 0x101], WSASetLastError
mov byte [rsp + 0x102], 0x61
mov byte [rsp + 0x103], Ordinal_50
mov byte [rsp + 0x104], gethostname
mov byte [rsp + 0x105], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x106], Ordinal_50
mov byte [rsp + 0x107], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x108], Ordinal_41
mov byte [rsp + 0x109], 0x57
mov byte [rsp + 0x10a], WSASetLastError
mov byte [rsp + 0x10b], WSACleanup
mov byte [rsp + 0x10c], 0x64
mov byte [rsp + 0x10d], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x10e], 0x77
mov byte [rsp + 0x10f], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x110], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x111], Ordinal_79
mov byte [rsp + 0x112], 0x54
mov byte [rsp + 0x113], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x114], Ordinal_50
mov byte [rsp + 0x115], Ordinal_50
mov byte [rsp + 0x116], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x117], Ordinal_50
mov byte [rsp + 0x118], Ordinal_60
mov byte [rsp + 0x119], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x11a], 0x57
mov byte [rsp + 0x11b], WSASetLastError
mov byte [rsp + 0x11c], WSACleanup
mov byte [rsp + 0x11d], gethostname
mov byte [rsp + 0x11e], gethostname
mov byte [rsp + 0x11f], Ordinal_60
mov byte [rsp + 0x120], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x121], 0x78
mov byte [rsp + 0x122], gethostname
mov byte [rsp + 0x123], gethostname
mov byte [rsp + 0x124], reloc.WLDAP32.dll_Ordinal_41
mov byte [rsp + 0x125], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x126], 0x41
mov byte [rsp + 0x127], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x128], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x129], WSASetLastError
mov byte [rsp + 0x12a], 0x65
mov byte [rsp + 0x12b], 0x57
mov byte [rsp + 0x12c], 0x65
mov byte [rsp + reloc.WLDAP32.dll_Ordinal_301], 0x62
mov byte [rsp + 0x12e], Ordinal_79
mov byte [rsp + 0x12f], WSASetLastError
mov byte [rsp + 0x130], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x131], Ordinal_50
mov byte [rsp + 0x132], gethostname
mov byte [rsp + 0x133], gethostname
mov byte [rsp + 0x134], gethostname
mov byte [rsp + 0x135], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x136], gethostname
mov byte [rsp + 0x137], gethostname
mov byte [rsp + 0x138], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x139], Ordinal_41
mov byte [rsp + 0x13a], Ordinal_79
mov byte [rsp + 0x13b], Ordinal_79
mov byte [rsp + 0x13c], 0x54
mov byte [rsp + 0x13d], Ordinal_79
mov byte [rsp + 0x13e], Ordinal_79
mov byte [rsp + 0x13f], Ordinal_46
mov byte [rsp + 0x140], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x141], WSASetLastError
mov byte [rsp + 0x142], WSASetLastError
mov byte [rsp + 0x143], WSASetLastError
mov byte [rsp + 0x144], 0x65
mov byte [rsp + 0x145], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x146], 0x47
mov byte [rsp + 0x147], 0x65
mov byte [rsp + 0x148], 0x63
mov byte [rsp + 0x149], WSASetLastError
mov byte [rsp + 0x14a], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x14b], reloc.WLDAP32.dll_Ordinal_41
mov byte [rsp + 0x14c], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x14d], 0x43
mov byte [rsp + 0x14e], WSAGetLastError
mov byte [rsp + 0x14f], WSACleanup
mov byte [rsp + 0x150], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x151], WSACleanup
mov byte [rsp + 0x152], 0x65
mov byte [rsp + 0x153], Ordinal_50
mov byte [rsp + 0x154], Ordinal_50
mov byte [rsp + 0x155], Ordinal_50
mov byte [rsp + 0x156], gethostname
mov byte [rsp + 0x157], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x158], Ordinal_50
mov byte [rsp + 0x159], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x15a], Ordinal_50
mov byte [rsp + 0x15b], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x15c], Ordinal_50
mov byte [rsp + 0x15d], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x15e], 0x53
mov byte [rsp + 0x15f], 0x61
mov byte [rsp + 0x160], 0x66
mov byte [rsp + 0x161], 0x61
mov byte [rsp + 0x162], WSACleanup
mov byte [rsp + 0x163], WSASetLastError
mov byte [rsp + 0x164], Ordinal_50
mov byte [rsp + 0x165], gethostname
mov byte [rsp + 0x166], gethostname
mov byte [rsp + 0x167], gethostname
mov byte [rsp + 0x168], reloc.WLDAP32.dll_Ordinal_46
mov byte [rsp + 0x169], gethostname
mov byte [rsp + 0x16a], gethostname
mov byte [rsp + 0x16b], 0
mov byte [rsp + 0xe0], 0x41
mov byte [rsp + 0xe1], 0x63
mov byte [rsp + 0xe2], 0x63
mov byte [rsp + 0xe3], 0x65
mov byte [rsp + 0xe4], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0xe5], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0xe6], Ordinal_60
mov byte [rsp + 0xe7], reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0xe8], Ordinal_46
mov byte [rsp + 0xe9], Ordinal_50
mov byte [rsp + 0xea], Ordinal_46
mov byte [rsp + 0xeb], 0
lea rdx, [rsp + 0xe0]
mov rcx, qword [rsp + 0x30]
call fcn.140023720
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0xf0]
mov rcx, qword [rsp + 0x30]
call fcn.140023720
mov qword [rsp + 0x30], rax
mov ecx, 3
call fcn.1400235c0
call fcn.140023360
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
je 0x14001ef4a
mov r8, qword [rsp + 0x30]
mov edx, 0x2727
mov rcx, qword [rsp + 0x20]
call fcn.140026370
mov rcx, qword [rsp + 0x198]
call fcn.1400094b0
mov r8, rax
mov edx, 0x2712
mov rcx, qword [rsp + 0x20]
call fcn.140026370
lea r8, [0x14001e410]
mov edx, 0x4e2b
mov rcx, qword [rsp + 0x20]
call fcn.140026370
lea r8, [rsp + 0xc0]
mov edx, 0x2711
mov rcx, qword [rsp + 0x20]
call fcn.140026370
mov rcx, qword [rsp + 0x20]
call fcn.1400233d0
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 0
jne 0x14001ef40
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0xc0]
mov rcx, qword [rsp + 0x40]
call fcn.1400098e0
mov qword [rsp + 0x48], rax
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x60]
call fcn.14001e350
mov qword [rsp + 0x50], rax
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0xa0]
call fcn.140009800
lea rcx, [rsp + 0x60]
call fcn.140001780
mov rcx, qword [rsp + 0x20]
call fcn.140023330
call fcn.140023560
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x190]
call fcn.1400017b0
mov eax, dword [rsp + 0x28]
or eax, 1
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0xa0]
call fcn.140001780
nop
lea rcx, [rsp + 0xc0]
call fcn.140001780
nop
mov rcx, qword [rsp + 0x198]
call fcn.140001780
mov rax, qword [rsp + 0x190]
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.14007c450
add rsp, 0x188
ret