Function at 0x1800713a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rbx, r9
mov rsi, r8
mov r15, rdx
xor edi, edi
mov r14, r8
mov byte [rsp + 0x4b], 0x2f
mov byte [rsp + 0x4c], 0x35
mov byte [rsp + 0x4d], 0x31
mov byte [rsp + 0x4e], 0x63
mov byte [rsp + 0x4f], 0x62
mov byte [rsp + 0x50], 0x79
mov byte [rsp + 0x51], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x52], 0x77
mov byte [rsp + 0x53], 0x63
mov byte [rsp + 0x54], 0x7a
mov byte [rsp + 0x55], 0x31
mov byte [rsp + 0x56], 0x30
mov byte [rsp + 0x57], 0x2f
mov byte [rsp + 0x58], 0x62
mov byte [rsp + 0x59], 0x32
mov byte [rsp + 0x5a], 0x34
mov byte [rsp + 0x5b], 0x64
mov byte [rsp + 0x5c], 0x46
mov byte [rsp + 0x5d], 0x30
mov byte [rsp + 0x5e], 0x63
mov byte [rsp + 0x5f], 0x7a
mov byte [rsp + 0x60], 0x31
mov byte [rsp + 0x61], 0x2f
mov byte [rsp + 0x62], 0x62
mov byte [rsp + 0x63], 0x63
mov byte [rsp + 0x64], 0x6b
mov byte [rsp + 0x65], 0x68
mov byte [rsp + 0x66], 0x69
mov byte [rsp + 0x67], 0x6a
mov byte [rsp + 0x68], 0x6b
mov byte [rsp + 0x69], WSASetLastError
mov byte [rsp + 0x6a], WSASetLastError
mov byte [rsp + 0x6b], 0x7f
mov byte [rsp + 0x6c], 0x64
mov byte [rsp + 0x6d], 0x31
mov byte [rsp + 0x6e], 0x30
mov byte [rsp + 0x6f], 0x2f
mov byte [rsp + 0x70], 0x63
mov byte [rsp + 0x71], 0x64
mov byte [rsp + 0x72], 0x35
mov byte [rsp + 0x73], 0x31
mov byte [rsp + 0x74], 0x30
mov byte [rsp + 0x75], dil
movzx eax, byte [rsp + 0x4b]
mov ecx, edi
nop word [rax + rax]
movzx eax, byte [rsp + rcx + 0x4b]
sub al, 7
mov byte [rsp + rcx + 0x4b], al
inc rcx
cmp rcx, 0x2a
jb 0x1800714c0
mov r8d, 0x500
lea rdx, [rsp + 0x4b]
lea rcx, [rbp + 0x80]
call fcn.18006feb0
nop
mov r13, 0xffffffffffffffff
test rbx, rbx
je 0x180071b67
nop dword [rax]
mov r8d, 0x40
lea rdx, [rbp + 0xb0]
mov rcx, r14
call fcn.18007ad20
mov r12, rax
test rax, rax
je 0x180071b67
mov qword [rbp + 0x10], rdi
mov byte [rbp + 0x18], 0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x30], xmm1
mov qword [rbp + 0x40], rdi
mov byte [rbp + 0x48], 0
movdqa xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x60], 0
mov qword [rbp + 0x68], rdi
mov qword [rbp + 0x70], rdi
mov byte [rbp + 0x78], 0
lea rcx, [rbp + 0xb0]
mov rax, r13
inc rax
cmp byte [rcx + rax], 0
jne 0x180071560
lea rdi, [rbp + 0xb0]
add rdi, rax
mov rdx, qword [rbp + 0x80]
test rdx, rdx
je 0x180071ae1
xor sil, sil
mov ecx, dword [rdx + 0x28]
mov dword [rsp + 0x38], 0
mov eax, dword [rdx + 0x20]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x88]
mov r8, rdi
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0xf0]
call fcn.18006fcb0
nop
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xf0]
call fcn.18006e720
test al, al
jne 0x18007167a
lea rax, [rbp + 0xb0]
cmp rax, rdi
je 0x1800716a2
mov eax, dword [rbp + 0x1ac]
btr eax, 0xd
bts eax, 8
mov dword [rbp + 0x1ac], eax
xor r9d, r9d
mov r8, rdi
lea rdx, [rbp + 0xb1]
lea rcx, [rbp + 0xf0]
call fcn.180078ad0
mov rbx, rax
cmp rax, rdi
je 0x18007165c
nop
mov qword [rbp + 0x198], rbx
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xf0]
call fcn.18006e720
test al, al
jne 0x18007167a
lea rdx, [rbx + 1]
xor r9d, r9d
mov r8, rdi
lea rcx, [rbp + 0xf0]
call fcn.180078ad0
mov rbx, rax
cmp rax, rdi
jne 0x180071620
mov qword [rbp + 0x198], rdi
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xf0]
call fcn.18006e720
test al, al
je 0x1800716a2
mov sil, 1
lea rax, [rbp + 0xb0]
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0xb0]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0xb0]
cmp rax, qword [rbp + 0x40]
setne byte [rbp + 0x48]
mov rcx, qword [rbp + 0x170]
test rcx, rcx
je 0x1800716fd
mov rdx, qword [rbp + 0x180]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800716e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071c13
call fcn.18009168c
xor eax, eax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x180], rax
lea rcx, [rbp + 0x130]
call fcn.180070310
lea rcx, [rbp + 0xf0]
call fcn.180070310
test sil, sil
je 0x180071ad3
mov rcx, qword [rbp + 0x28]
mov rdi, qword [rbp + 0x20]
sub rcx, rdi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov rbx, rdx
sar rbx, 2
mov rax, rbx
shr rax, 0x3f
add rbx, rax
cmp rbx, 1
lea rax, [rbp + 0x68]
jbe 0x180071755
lea rax, [rdi + 0x18]
cmp byte [rax + 0x10], 0
je 0x180071760
movups xmm1, xmmword [rax]
jmp 0x180071763
xorps xmm1, xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xor ecx, ecx
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rcx
movq rdx, xmm1
psrldq xmm1, 8
movq r8, xmm1
cmp rdx, r8
jne 0x180071799
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], cl
jmp 0x1800717a7
sub r8, rdx
lea rcx, [rbp - 0x20]
call fcn.18000a67c
xor ecx, ecx
cmp rbx, 2
lea rax, [rbp + 0x68]
jbe 0x1800717b5
lea rax, [rdi + 0x30]
cmp byte [rax + 0x10], 0
je 0x1800717c0
movups xmm1, xmmword [rax]
jmp 0x1800717c3
xorps xmm1, xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rcx
movq rdx, xmm1
psrldq xmm1, 8
movq r8, xmm1
cmp rdx, r8
jne 0x1800717f9
mov qword [rbp - 0x30], rcx
mov esi, 0xf
mov qword [rbp - 0x28], rsi
mov byte [rbp - 0x40], 0
jmp 0x18007180b
sub r8, rdx
lea rcx, [rbp - 0x40]
call fcn.18000a67c
mov rsi, qword [rbp - 0x28]
xor ecx, ecx
cmp rbx, 3
lea rax, [rbp + 0x68]
jbe 0x180071819
lea rax, [rdi + 0x48]
cmp byte [rax + 0x10], 0
je 0x180071824
movups xmm1, xmmword [rax]
jmp 0x180071827
xorps xmm1, xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rcx
movq rdx, xmm1
psrldq xmm1, 8
movq r8, xmm1
cmp rdx, r8
jne 0x18007185c
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
jmp 0x18007186a
sub r8, rdx
lea rcx, [rbp - 0x80]
call fcn.18000a67c
xor ecx, ecx
cmp rbx, 4
lea rax, [rbp + 0x68]
jbe 0x180071878
lea rax, [rdi + 0x60]
cmp byte [rax + 0x10], 0
je 0x180071883
movups xmm1, xmmword [rax]
jmp 0x180071886
xorps xmm1, xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x48], rcx
movq rdx, xmm1
psrldq xmm1, 8
movq r8, xmm1
cmp rdx, r8
jne 0x1800718b7
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
jmp 0x1800718c3
sub r8, rdx
lea rcx, [rbp - 0x60]
call fcn.18000a67c
lea rbx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rbx, qword [rbp - 0x80]
mov edx, 0x78
mov rcx, rbx
call sub.msvcrt.dll_strchr
lea rdx, [0x1800a7b00]
test rax, rax
lea rax, [0x1800a7b04]
cmove rdx, rax
lea r8, [rsp + 0x78]
mov rcx, rbx
call fcn.180016bc8
movsxd rcx, dword [rsp + 0x78]
lea rax, [rbp - 0x40]
cmp rsi, 0x10
cmovae rax, qword [rbp - 0x40]
mov rdx, rcx
neg rdx
cmp byte [rax], 0x2d
cmovne rdx, rcx
sub rdx, r15
add rdx, r14
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r8, qword [rbp - 0x60]
lea r9, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae r9, qword [rbp - 0x20]
mov byte [rsp + 0x40], 0x28
mov byte [rsp + 0x41], 0x76
mov byte [rsp + 0x42], 0x23
mov byte [rsp + 0x43], 0x28
mov byte [rsp + 0x44], 0x2e
mov byte [rsp + 0x45], WSASetLastError
mov byte [rsp + 0x46], WSASetLastError
mov byte [rsp + 0x47], 0x67
mov byte [rsp + 0x48], 0x28
mov byte [rsp + 0x49], 0x76
mov byte [rsp + 0x4a], 0
movzx eax, byte [rsp + 0x40]
xor edi, edi
mov eax, edi
movzx ecx, byte [rsp + rax + 0x40]
sub cl, 3
mov byte [rsp + rax + 0x40], cl
inc rax
cmp rax, 0xa
jb 0x180071981
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
lea r8, [rsp + 0x40]
mov edx, 0x40
lea rcx, [rbp + 0xb0]
call fcn.18003f3ec
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1800719f1
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800719ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071c19
call fcn.18009168c
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], dil
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x180071a3c
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180071a37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071c1f
call fcn.18009168c
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x180071a88
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180071a82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071c25
call fcn.18009168c
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x180071ac3
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180071abe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071c07
call fcn.18009168c
mov rbx, qword [rbp + 0x238]
mov rsi, qword [rbp + 0x230]
jmp 0x180071ae3
mov rbx, qword [rbp + 0x238]
mov rsi, qword [rbp + 0x230]
xor edi, edi
lea rdx, [rbp + 0xb0]
mov rcx, r15
call fcn.18007a9e0
add r15, rax
add r14, r12
mov r8, qword [rbp + 0x20]
test r8, r8
je 0x180071b58
mov rcx, qword [rbp + 0x30]
sub rcx, r8
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x180071b50
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180071c0d
mov rcx, r8
call fcn.18009168c
mov rax, r14
sub rax, rsi
cmp rax, rbx
jb 0x180071500
sub r15, qword [rbp + 0x228]
mov rax, qword [rbp + 0x80]
test rax, rax
je 0x180071bbc
lock xadd dword [rax + 0x2c], r13d
cmp r13d, 1
jne 0x180071bbc
mov rbx, qword [rbp + 0x80]
test rbx, rbx
je 0x180071bbc
nop dword [rax]
nop word [rax + rax]
mov rcx, rbx
lea rax, [rbx + 0x10]
mov rbx, qword [rax]
mov qword [rax], rdi
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
test rbx, rbx
jne 0x180071ba0
mov qword [rbp + 0x80], rdi
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x180071be9
mov r8, qword [rcx]
call qword [r8 + 0x10]
test rax, rax
je 0x180071be9
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
mov rax, r15
mov rbx, qword [rsp + 0x320]
add rsp, 0x2e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180095520
nop
call fcn.180095520
nop
call fcn.180095520
nop
call fcn.180095520
nop
call fcn.180095520
nop
call fcn.180095520
int3