Function at 0x18001b550
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3a0]
sub rsp, 0x4a0
mov rax, qword [0x180189e48]
xor rax, rsp
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x90], r9
mov r15, r8
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x20], rdx
mov rbx, rcx
mov qword [rbp - 0x40], rcx
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x400]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x408]
mov qword [rbp - 0x28], rax
mov r13, qword [rbp + 0x410]
mov r12, qword [rbp + 0x418]
xor edi, edi
mov dword [rsp + 0x40], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movdqa xmm0, xmmword [0x18016c450]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
lea rcx, [rbp + 0x108]
call fcn.1800de010
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rax
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.1800e1c10
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x98], xmm0
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
xor edx, edx
lea rcx, [rbp + 0x98]
call fcn.1800e1c10
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x138], xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rax
xor edx, edx
lea rcx, [rbp + 0x138]
call fcn.1800e1c10
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rax
xor edx, edx
lea rcx, [rbp + 0x160]
call fcn.1800e1c10
nop
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x190]
call fcn.1800f4bb0
lea edx, [rdi + 1]
lea rcx, [rbp + 0x190]
call fcn.18001e7e0
nop
mov dword [rbp + 0x285], 0x384654
mov word [rbp + 0x280], 0x6d65
mov word [rbp + 0x283], 0x5574
mov byte [rbp + 0x282], 0x69
mov dl, 1
lea rcx, [rbp - 0x68]
call fcn.1800e1d60
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
lea rax, [rbp + 0x280]
mov rsi, 0xffffffffffffffff
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x18001b732
movabs r14, 0x7fffffffffffffff
cmp rdi, r14
ja 0x18001c0fc
mov eax, 0x16
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x18001b782
mov qword [rsp + 0x30], rdi
mov r8, rdi
lea rdx, [rbp + 0x280]
lea rcx, [rsp + 0x20]
call fcn.1800f4f70
mov byte [rsp + rdi + 0x20], 0
jmp 0x18001b7d8
mov r15, rdi
or r15, 0xf
cmp r15, r14
jbe 0x18001b793
mov r15, r14
jmp 0x18001b79a
cmp r15, rax
cmovb r15, rax
lea rdx, [r15 + 1]
lea rcx, [rsp + 0x20]
call fcn.180007230
mov rbx, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r15
mov r8, rdi
lea rdx, [rbp + 0x280]
mov rcx, rax
call fcn.1800f4f70
mov byte [rbx + rdi], 0
mov rbx, qword [rbp - 0x40]
mov r15, qword [rbp - 0x38]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x108]
call fcn.1800de260
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.1800e1f90
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x18001b833
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b82e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c102
call fcn.1800f2580
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], 0
lea rcx, [rbp - 0x68]
call fcn.1800e1f40
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
movups xmmword [rbp + 0x320], xmm0
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
movups xmmword [rbp + 0x380], xmm0
mov dword [rbp + 0x306], 0x5f796157
mov word [rbp + 0x2fe], 0x654d
mov word [rbp + 0x2fb], 0x7261
mov dword [rbp + 0x301], 0x6e69465f
mov byte [rbp + 0x305], 0x64
mov dword [rbp + 0x2f0], 0x61447055
mov dword [rbp + 0x2f4], 0x58456174
mov word [rbp + 0x30b], 0x64
mov word [rbp + 0x2f8], 0x5345
mov byte [rbp + 0x30a], 0x25
mov byte [rbp + 0x300], 0x6d
mov byte [rbp + 0x2fd], 0x65
mov byte [rbp + 0x2fa], 0x68
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x310]
call sym.dll.dll_sprintf
mov dword [rbp + 0x2c4], 0x796157
mov word [rbp + 0x2c1], 0x6e69
mov byte [rbp + 0x2c0], 0x46
mov byte [rbp + 0x2c3], 0x64
mov word [rbp + 0x2ad], 0x65
mov dword [rbp + 0x2a8], 0x6f4d7a73
mov byte [rbp + 0x2ac], 0x64
mov dword [rbp + 0x2bc], 0x746172
mov word [rbp + 0x2b9], 0x537a
mov byte [rbp + 0x2b8], 0x73
mov byte [rbp + 0x2bb], 0x74
mov word [rbp + 0x291], 0x457a
mov word [rbp + 0x294], 0x64
mov byte [rbp + 0x290], 0x73
mov byte [rbp + 0x293], 0x6e
mov dword [rbp + 0x2ca], 0x4970614d
mov word [rbp + 0x2c8], 0x7a73
mov word [rbp + 0x2ce], 0x64
mov dword [rbp + 0x2e4], 0x4e657261
mov word [rbp + 0x2e1], 0x537a
mov word [rbp + 0x2e9], 0x656d
mov byte [rbp + 0x2eb], 0
mov byte [rbp + 0x2e0], 0x73
mov byte [rbp + 0x2e3], 0x68
mov byte [rbp + 0x2e8], 0x61
mov word [rbp + 0x2a3], 0x6e69
mov word [rbp + 0x2a0], 0x7a73
mov word [rbp + 0x2a5], 0x65
mov byte [rbp + 0x2a2], 0x4c
mov word [rbp + 0x2d5], 0x696d
mov word [rbp + 0x2d8], 0x67
mov word [rbp + 0x2d0], 0x7a73
mov byte [rbp + 0x2d7], 0x6e
mov word [rbp + 0x2d3], 0x6977
mov byte [rbp + 0x2d2], 0x53
mov dword [rbp + 0x29a], 0x6f666e49
mov word [rbp + 0x298], 0x7a73
mov byte [rbp + 0x29e], 0
mov word [rbp + 0x2b3], 0x7079
mov word [rbp + 0x2b0], 0x7a73
mov word [rbp + 0x2b5], 0x65
mov byte [rbp + 0x2b2], 0x54
lea rdx, [rbp + 0x2c0]
lea rcx, [rsp + 0x48]
call fcn.1800e1b40
nop
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0xc0]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1800e1f90
nop
lea rcx, [rsp + 0x48]
call fcn.1800e1f40
lea rcx, [rsp + 0x70]
cmp byte [rbx + 0x105d], 0
je 0x18001baf7
lea rdx, [0x18016975c]
call fcn.1800e1b40
nop
lea rdx, [0x180169758]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e1f90
nop
jmp 0x18001bb97
cmp byte [rbx + 0xb64], 0
je 0x18001bb30
lea rdx, [0x180169768]
call fcn.1800e1b40
nop
lea rdx, [0x180169758]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e1f90
nop
jmp 0x18001bb97
cmp byte [rbx + 0x105c], 0
je 0x18001bb69
lea rdx, [0x180169778]
call fcn.1800e1b40
nop
lea rdx, [0x180169758]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e1f90
nop
jmp 0x18001bb97
lea rdx, [0x180169788]
call fcn.1800e1b40
nop
lea rdx, [0x180169758]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e1f90
nop
lea rcx, [rsp + 0x70]
call fcn.1800e1f40
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1800e1b40
nop
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e1f90
nop
lea rcx, [rsp + 0x70]
call fcn.1800e1f40
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x68]
call fcn.1800e1b40
nop
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.1800e1f90
nop
lea rcx, [rbp - 0x68]
call fcn.1800e1f40
mov rdx, qword [rbp - 0x28]
lea rcx, [rbp + 0x18]
call fcn.1800e1b40
nop
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rbp + 0x18]
call fcn.1800e1f90
nop
lea rcx, [rbp + 0x18]
call fcn.1800e1f40
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x40]
call fcn.1800e1b40
nop
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rbp + 0x40]
call fcn.1800e1f90
nop
lea rcx, [rbp + 0x40]
call fcn.1800e1f40
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x68]
call fcn.1800e1b40
nop
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rbp + 0x68]
call fcn.1800e1f90
nop
lea rcx, [rbp + 0x68]
call fcn.1800e1f40
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov rdi, rsi
inc rdi
cmp byte [r12 + rdi], bl
jne 0x18001bcd3
cmp rdi, r14
ja 0x18001c108
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x18001bd0f
mov qword [rsp + 0x30], rdi
mov r8, rdi
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800f4f70
mov byte [rsp + rdi + 0x20], bl
jmp 0x18001bd61
mov r15, rdi
or r15, 0xf
cmp r15, r14
jbe 0x18001bd20
mov r15, r14
jmp 0x18001bd2d
cmp r15, 0x16
mov eax, 0x16
cmovb r15, rax
lea rdx, [r15 + 1]
lea rcx, [rsp + 0x20]
call fcn.180007230
mov rbx, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r15
mov r8, rdi
mov rdx, r12
mov rcx, rax
call fcn.1800f4f70
mov byte [rbx + rdi], 0
xor ebx, ebx
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.180058390
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1800e1a70
nop
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rbp - 0x18]
call fcn.1800e1f90
nop
lea rcx, [rbp - 0x18]
call fcn.1800e1f40
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18001bde5
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bde0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c10e
call fcn.1800f2580
movdqa xmm0, xmmword [0x18016c450]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x18001be35
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001be30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c114
call fcn.1800f2580
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
nop word [rax + rax]
inc rsi
cmp byte [rsi + r13], 0
jne 0x18001be60
cmp rsi, r14
ja 0x18001c11a
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
cmp rsi, 0x10
jae 0x18001be9e
mov qword [rsp + 0x58], rsi
mov r8, rsi
mov rdx, r13
lea rcx, [rsp + 0x48]
call fcn.1800f4f70
mov byte [rsp + rsi + 0x48], 0
jmp 0x18001beee
mov rax, rsi
or rax, 0xf
cmp rax, r14
ja 0x18001beba
mov r14, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r14, rax
lea rdx, [r14 + 1]
lea rcx, [rsp + 0x48]
call fcn.180007230
mov rbx, rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], r14
mov r8, rsi
mov rdx, r13
mov rcx, rax
call fcn.1800f4f70
mov byte [rbx + rsi], 0
xor ebx, ebx
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.180058390
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1800e1a70
nop
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x98]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rbp - 0x18]
call fcn.1800e1f90
nop
lea rcx, [rbp - 0x18]
call fcn.1800e1f40
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18001bf6f
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bf6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c120
call fcn.1800f2580
movdqa xmm0, xmmword [0x18016c450]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18001bfbd
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bfb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c0f6
call fcn.1800f2580
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0xc0]
call fcn.1800e2500
mov rcx, rax
lea rdx, [rbp + 0x98]
call fcn.1800e1fb0
mov qword [rbp + 0x90], rbx
lea rcx, [rbp + 0x108]
call fcn.1800de680
mov rbx, rax
mov qword [rbp + 0x90], rax
mov rax, qword [rax]
lea r8, [rbp + 0x190]
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdi, qword [rbp - 0x20]
mov rdx, rdi
lea rcx, [rbp + 0x198]
call fcn.18001f430
mov eax, 2
mov dword [rsp + 0x40], eax
and eax, 0xfffffffd
mov dword [rsp + 0x40], eax
or eax, 1
mov dword [rsp + 0x40], eax
test rbx, rbx
je 0x18001c064
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
lea rcx, [rbp + 0x190]
call fcn.18001c130
nop
lea rcx, [rbp + 0x160]
call fcn.1800e1f40
nop
lea rcx, [rbp + 0x138]
call fcn.1800e1f40
nop
lea rcx, [rbp + 0x98]
call fcn.1800e1f40
nop
lea rcx, [rbp + 0xc0]
call fcn.1800e1f40
nop
lea rcx, [rbp + 0x108]
call fcn.1800de230
nop
movdqa xmm0, xmmword [0x18016c450]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rax, rdi
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.1800f21e0
mov rbx, qword [rsp + 0x4e0]
add rsp, 0x4a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800f9714
nop
call fcn.180006f40
int3
call fcn.1800f9714
nop
call fcn.180006f40
nop
call fcn.1800f9714
nop
call fcn.1800f9714
int3
call fcn.180006f40
nop
call fcn.1800f9714
int3