Function at 0x18006b230
Capabilities:
Encode data using xor
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x580
mov rax, qword [0x18029d790]
xor rax, rsp
mov qword [rsp + 0x578], rax
mov rdi, rdx
mov qword [rsp + 0x50], rdx
mov r12, rcx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0xd0], rcx
xor r14d, r14d
mov dword [rsp + 0x88], r14d
call fcn.18006e100
test al, al
jne 0x18006b332
mov byte [rsp + 0x50], 0x3b
mov al, 0x52
mov cl, 0x55
mov dl, 0x4f
mov r8b, 0x5e
mov r9b, 0x49
movzx r10d, cl
movzx r11d, r8b
movzx ebx, dl
xor edi, edi
xor al, 0x3b
mov byte [rsp + 0x51], al
xor cl, 0x3b
mov byte [rsp + 0x52], cl
xor dl, 0x3b
mov byte [rsp + 0x53], dl
xor r8b, 0x3b
mov byte [rsp + 0x54], r8b
xor r9b, 0x3b
mov byte [rsp + 0x55], r9b
xor r10b, 0x3b
mov byte [rsp + 0x56], r10b
xor r11b, 0x3b
mov byte [rsp + 0x57], r11b
xor bl, 0x3b
mov byte [rsp + 0x58], bl
mov byte [rsp + 0x59], dil
mov qword [r12], r14
mov qword [r12 + 0x10], r14
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], dil
lea rax, [rsp + 0x51]
mov r15, 0xffffffffffffffff
inc r15
cmp byte [rax + r15], 0
jne 0x18006b310
mov r8, r15
lea rdx, [rsp + 0x51]
mov rcx, r12
call fcn.180011ef0
mov rax, r12
jmp 0x18006c7db
mov byte [rsp + 0x30], 0x62
mov al, reloc.WS2_32.dll_socket
mov cl, reloc.WS2_32.dll_recvfrom
mov dl, 7
mov r8b, reloc.WS2_32.dll_recv
mov r9b, listen
mov r10b, 3
mov r11b, reloc.WS2_32.dll_ntohs
movzx ebx, dl
xor esi, esi
xor al, 0x62
mov byte [rsp + 0x31], al
xor cl, 0x62
mov byte [rsp + 0x32], cl
xor dl, 0x62
mov byte [rsp + 0x33], dl
xor r8b, 0x62
mov byte [rsp + 0x34], r8b
xor r9b, 0x62
mov byte [rsp + 0x35], r9b
xor r10b, 0x62
mov byte [rsp + 0x36], r10b
xor r11b, 0x62
mov byte [rsp + 0x37], r11b
xor bl, 0x62
mov byte [rsp + 0x38], bl
mov byte [rsp + 0x39], sil
lea rdx, [rsp + 0x31]
mov rcx, rdi
call fcn.180014230
nop
mov qword [rsp + 0x3f0], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x400], xmm0
mov byte [rsp + 0x3f0], sil
mov dword [rsp + 0x88], 4
cmp byte [rax], 3
jne 0x18006c808
mov rdx, qword [rax + 8]
lea rax, [rsp + 0x3f0]
cmp rax, rdx
je 0x18006b402
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18006b3f4
mov rdx, qword [rdx]
lea rcx, [rsp + 0x3f0]
call fcn.180011ef0
nop
mov byte [rsp + 0x30], 0x79
mov al, 9
mov cl, 0x18
mov dl, 0xa
movzx r8d, dl
mov r9b, recv
mov r10b, socket
mov r11b, listen
mov bl, 0x1d
xor esi, esi
xor al, 0x79
mov byte [rsp + 0x31], al
xor cl, 0x79
mov byte [rsp + 0x32], cl
xor dl, 0x79
mov byte [rsp + 0x33], dl
xor r8b, 0x79
mov byte [rsp + 0x34], r8b
xor r9b, 0x79
mov byte [rsp + 0x35], r9b
xor r10b, 0x79
mov byte [rsp + 0x36], r10b
xor r11b, 0x79
mov byte [rsp + 0x37], r11b
xor bl, 0x79
mov byte [rsp + 0x38], bl
mov byte [rsp + 0x39], sil
lea rdx, [rsp + 0x31]
mov rcx, rdi
call fcn.180014230
nop
mov qword [rsp + 0x3d0], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x3e0], xmm0
mov byte [rsp + 0x3d0], sil
mov dword [rsp + 0x88], reloc.WS2_32.dll_select
cmp byte [rax], 3
jne 0x18006c859
mov rdx, qword [rax + 8]
lea rax, [rsp + 0x3d0]
cmp rax, rdx
je 0x18006b4d2
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18006b4c4
mov rdx, qword [rdx]
lea rcx, [rsp + 0x3d0]
call fcn.180011ef0
nop
xor edx, edx
mov r8d, 0x138
lea rcx, [rsp + 0x430]
call fcn.1801ac980
movdqa xmm0, xmmword [0x180271c50]
movdqu xmmword [rsp + 0x390], xmm0
mov dword [rsp + 0x3a0], 0x243e3e24
mov dword [rsp + 0x3a4], 0x3e2322
mov rcx, r14
movzx eax, byte [rsp + 0x390]
xor byte [rsp + rcx + 0x391], al
inc rcx
cmp rcx, 0x16
jb 0x18006b511
mov byte [rsp + 0x3a7], 0
mov qword [rsp + 0x1a0], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x1b0], xmm0
mov byte [rsp + 0x1a0], 0
lea rax, [rsp + 0x391]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x18006b564
lea rdx, [rsp + 0x391]
lea rcx, [rsp + 0x1a0]
call fcn.180011ef0
nop
mov byte [rsp + 0x60], gethostname
movzx eax, byte [0x180260718]
xor al, 0x37
xor ecx, ecx
xor al, 0x37
mov byte [rsp + 0x61], al
mov byte [rsp + 0x62], cl
mov qword [rsp + 0x180], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], cl
lea rax, [rsp + 0x61]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x18006b5c6
lea rdx, [rsp + 0x61]
lea rcx, [rsp + 0x180]
call fcn.180011ef0
nop
movups xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0x260], xmm0
movups xmm1, xmmword [rsp + 0x1b0]
movaps xmmword [rsp + 0x270], xmm1
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x1b0], xmm0
mov byte [rsp + 0x1a0], 0
movups xmm0, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x280], xmm0
movups xmm1, xmmword [rsp + 0x190]
movaps xmmword [rsp + 0x290], xmm1
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], 0
mov byte [rsp + 0x30], 0x43
mov al, 0x2f
mov cl, 0x2c
mov dl, 0x24
mov r8b, 0x2a
mov r9b, 0x2d
xor r10d, r10d
xor al, 0x43
mov byte [rsp + 0x31], al
xor cl, 0x43
mov byte [rsp + 0x32], cl
xor dl, 0x43
mov byte [rsp + 0x33], dl
xor r8b, 0x43
mov byte [rsp + 0x34], r8b
xor r9b, 0x43
mov byte [rsp + 0x35], r9b
mov byte [rsp + 0x36], r10b
mov qword [rsp + 0x160], r14
movdqu xmmword [rsp + 0x170], xmm0
mov byte [rsp + 0x160], r10b
lea rax, [rsp + 0x31]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x18006b6b5
lea rdx, [rsp + 0x31]
lea rcx, [rsp + 0x160]
call fcn.180011ef0
nop
lea rdx, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 0x10
cmovae rdx, qword [rsp + 0x3f0]
mov qword [rsp + 0x140], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x150], xmm0
mov byte [rsp + 0x140], 0
mov r8, r15
inc r8
cmp byte [rdx + r8], 0
jne 0x18006b710
lea rcx, [rsp + 0x140]
call fcn.180011ef0
nop
movups xmm0, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x2a0], xmm0
movups xmm1, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x2b0], xmm1
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x170], xmm0
mov byte [rsp + 0x160], 0
movups xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0x2c0], xmm0
movups xmm1, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x2d0], xmm1
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x150], xmm0
mov byte [rsp + 0x140], 0
mov byte [rsp + 0x30], 0x46
mov al, 0x36
mov cl, 0x27
mov dl, 0x35
movzx r8d, dl
mov r9b, 0x31
mov r10b, 0x29
mov r11b, 0x34
mov bl, 0x22
xor edi, edi
xor al, 0x46
mov byte [rsp + 0x31], al
xor cl, 0x46
mov byte [rsp + 0x32], cl
xor dl, 0x46
mov byte [rsp + 0x33], dl
xor r8b, 0x46
mov byte [rsp + 0x34], r8b
xor r9b, 0x46
mov byte [rsp + 0x35], r9b
xor r10b, 0x46
mov byte [rsp + 0x36], r10b
xor r11b, 0x46
mov byte [rsp + 0x37], r11b
xor bl, 0x46
mov byte [rsp + 0x38], bl
mov byte [rsp + 0x39], dil
mov qword [rsp + 0x120], r14
movdqu xmmword [rsp + 0x130], xmm0
mov byte [rsp + 0x120], dil
lea rax, [rsp + 0x31]
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18006b820
lea rdx, [rsp + 0x31]
lea rcx, [rsp + 0x120]
call fcn.180011ef0
nop
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 0x10
cmovae rdx, qword [rsp + 0x3d0]
mov qword [rsp + 0x100], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18006b880
lea rcx, [rsp + 0x100]
call fcn.180011ef0
nop
movups xmm0, xmmword [rsp + 0x120]
movaps xmmword [rsp + 0x2e0], xmm0
movups xmm1, xmmword [rsp + 0x130]
movaps xmmword [rsp + 0x2f0], xmm1
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x130], xmm0
mov byte [rsp + 0x120], 0
movups xmm0, xmmword [rsp + 0x100]
movaps xmmword [rsp + 0x300], xmm0
movups xmm1, xmmword [rsp + 0x110]
movaps xmmword [rsp + 0x310], xmm1
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
lea rax, [rsp + 0x260]
mov qword [rsp + 0x3c0], rax
lea rax, [rsp + 0x320]
mov qword [rsp + 0x3c8], rax
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x1c0]
call fcn.18017f510
mov r13, rax
mov byte [rsp + 0x40], 0x6a
mov cl, 0x3f
mov dl, 0x19
mov r8b, reloc.WS2_32.dll_ntohs
mov r9b, 0x18
mov r10b, 0x47
mov r11b, 0x2b
mov bl, reloc.WS2_32.dll_listen
movzx edi, r8b
mov al, 4
mov sil, 0x1e
xor r12d, r12d
xor cl, 0x6a
mov byte [rsp + 0x41], cl
xor dl, 0x6a
mov byte [rsp + 0x42], dl
xor r8b, 0x6a
mov byte [rsp + 0x43], r8b
xor r9b, 0x6a
mov byte [rsp + 0x44], r9b
xor r10b, 0x6a
mov byte [rsp + 0x45], r10b
xor r11b, 0x6a
mov byte [rsp + 0x46], r11b
xor bl, 0x6a
mov byte [rsp + 0x47], bl
xor dil, 0x6a
mov byte [rsp + 0x48], dil
xor al, 0x6a
mov byte [rsp + 0x49], al
xor sil, 0x6a
mov byte [rsp + 0x4a], sil
mov byte [rsp + 0x4b], r12b
movdqa xmm0, xmmword [0x180271df0]
movdqu xmmword [rsp + 0x390], xmm0
xor eax, eax
mov byte [rsp + 0x3a0], al
mov rcx, r14
nop dword [rax + rax]
movzx eax, byte [rsp + 0x390]
xor byte [rsp + rcx + 0x391], al
inc rcx
cmp rcx, 0xf
jb 0x18006b9e0
mov byte [rsp + 0x3a0], r12b
mov qword [rsp + 0x1e0], r14
movdqa xmm0, xmmword [0x180271630]
movdqa xmmword [rsp + 0x1f0], xmm0
mov byte [rsp + 0x1e0], 0
lea rax, [rsp + 0x41]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18006ba30
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x1e0]
call fcn.180011ef0
nop
mov qword [rsp + 0x200], r14
movdqa xmm0, xmmword [0x180271630]
movdqa xmmword [rsp + 0x210], xmm0
mov byte [rsp + 0x200], 0
lea rax, [rsp + 0x391]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18006ba80
lea rdx, [rsp + 0x391]
lea rcx, [rsp + 0x200]
call fcn.180011ef0
nop
mov byte [rsp + 0x40], 0x18
mov al, 0x40
mov cl, 0x5e
mov dl, 0x35
mov r8b, 0x59
mov r9b, 0x68
mov r10b, WSAStartup
movzx r11d, dl
mov bl, 0x53
mov dil, 0x7d
mov sil, 0x61
xor r12d, r12d
xor al, 0x18
mov byte [rsp + 0x41], al
xor cl, 0x18
mov byte [rsp + 0x42], cl
xor dl, 0x18
mov byte [rsp + 0x43], dl
xor r8b, 0x18
mov byte [rsp + 0x44], r8b
xor r9b, 0x18
mov byte [rsp + 0x45], r9b
xor r10b, 0x18
mov byte [rsp + 0x46], r10b
xor r11b, 0x18
mov byte [rsp + 0x47], r11b
xor bl, 0x18
mov byte [rsp + 0x48], bl
xor dil, 0x18
mov byte [rsp + 0x49], dil
xor sil, 0x18
mov byte [rsp + 0x4a], sil
mov byte [rsp + 0x4b], r12b
movdqa xmm0, xmmword [0x180271d30]
movdqu xmmword [rsp + 0x90], xmm0
movdqa xmm1, xmmword [0x180271e60]
movdqu xmmword [rsp + 0xa0], xmm1
mov word [rsp + 0xb0], 4
mov rcx, r14
mov r12, qword [rsp + 0x68]
nop dword [rax]
movzx eax, byte [rsp + 0x90]
xor byte [rsp + rcx + 0x91], al
movzx eax, byte [rsp + 0x90]
xor byte [rsp + rcx + 0x92], al
add rcx, 2
cmp rcx, 0x20
jb 0x18006bb50
mov byte [rsp + 0xb1], 0
mov qword [rsp + 0x220], r14
movdqa xmm0, xmmword [0x180271630]
movdqa xmmword [rsp + 0x230], xmm0
mov byte [rsp + 0x220], 0
lea rax, [rsp + 0x41]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18006bbb0
lea rdx, [rsp + 0x41]
lea rcx, [rsp + 0x220]
call fcn.180011ef0
nop
mov qword [rsp + 0x240], r14
movdqa xmm0, xmmword [0x180271630]
movdqa xmmword [rsp + 0x250], xmm0
mov byte [rsp + 0x240], 0
lea rax, [rsp + 0x91]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18006bc00
lea rdx, [rsp + 0x91]
lea rcx, [rsp + 0x240]
call fcn.180011ef0
nop
lea rax, [rsp + 0x1e0]
mov qword [rsp + 0x390], rax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x398], rax
lea rdx, [rsp + 0x390]
lea rcx, [rsp + 0x70]
call fcn.18006e650
mov rdi, rax
movdqa xmm0, xmmword [0x1802724e0]
movdqu xmmword [rsp + 0x90], xmm0
movdqa xmm1, xmmword [0x180272470]
movdqu xmmword [rsp + 0xa0], xmm1
mov dword [rsp + 0xb0], 0x455d0355
mov dword [rsp + 0xb4], 0x5d4c025d
mov dword [rsp + 0xb8], 0x584c0244
mov word [rsp + 0xbc], 0x4559
xor eax, eax
mov byte [rsp + 0xbe], al
mov rcx, r14
nop
movzx eax, byte [rsp + 0x90]
xor byte [rsp + rcx + 0x91], al
inc rcx
cmp rcx, 0x2d
jb 0x18006bcb0
mov byte [rsp + 0xbe], 0
mov qword [rsp + 0x410], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0x420], xmm0
mov byte [rsp + 0x410], 0
lea rax, [rsp + 0x91]
nop dword [rax]
inc r15
cmp byte [rax + r15], 0
jne 0x18006bd00
mov r8, r15
lea rdx, [rsp + 0x91]
lea rcx, [rsp + 0x410]
call fcn.180011ef0
nop
lea rax, vtable.cpr::StringHolder_class_cpr::Url_.0
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], r14
movdqa xmm0, xmmword [0x180271630]
movdqu xmmword [rsp + 0xf0], xmm0
mov byte [rsp + 0xe0], 0
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x390]
call fcn.18000fb30
mov r9, rax
lea r8, [rsp + 0x430]
lea rdx, [rsp + 0x410]
lea rcx, [rsp + 0x90]
call fcn.180070ec0
mov rbx, rax
lea rax, [rsp + 0xe0]
cmp rax, rbx
je 0x18006bdd0
lea rcx, [rsp + 0xe0]
call fcn.180011d00
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0xe0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0xf0], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
nop dword [rax + rax]
lea rcx, [rsp + 0x90]
call fcn.180011d00
nop
lea rax, vtable.cpr::Url.0
mov qword [rsp + 0xd8], rax
mov r9, r13
mov r8, rdi
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x430]
call fcn.180070a10
nop
lea rcx, [rsp + 0xe0]
call fcn.180011d00
nop
lea r9, [fcn.18000fae0]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rsp + 0x410]
call fcn.1801aa1f8
nop
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x70]
call fcn.180071020
nop
lea r9, [fcn.18006c8b0]
mov edx, 0x40
lea r8d, [rdx - 0x3e]
lea rcx, [rsp + 0x1e0]
call fcn.1801aa1f8
nop
lea rcx, [rsp + 0x1c0]
call fcn.18006c8d0
nop
lea r9, [fcn.18006c8b0]
mov edx, 0x40
lea r8d, [rdx - 0x3d]
lea rcx, [rsp + 0x260]
call fcn.1801aa1f8
nop
lea rcx, [rsp + 0x100]
call fcn.180011d00
nop
lea rcx, [rsp + 0x120]
call fcn.180011d00
nop
lea rcx, [rsp + 0x140]
call fcn.180011d00
nop
lea rcx, [rsp + 0x160]
call fcn.180011d00
nop
lea rcx, [rsp + 0x180]
call fcn.180011d00
nop
lea rcx, [rsp + 0x1a0]
call fcn.180011d00
mov qword [rsp + 0xc8], r14
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x448]
lea rcx, [rsp + 0x3b0]
call fcn.1800149f0
nop
xor r11d, r11d
mov byte [rsp + 0x37], r11b
cmp byte [rsp + 0x3b0], 9
jne 0x18006bfb6
mov byte [rsp + 0x30], 0x52
mov al, 0x34
mov cl, 0x27
mov dl, 0x31
mov r8b, reloc.WS2_32.dll_gethostname
mov r9b, gethostname
mov r10b, 0x36
xor al, 0x52
mov byte [rsp + 0x31], al
xor cl, 0x52
mov byte [rsp + 0x32], cl
xor dl, 0x52
mov byte [rsp + 0x33], dl
xor r8b, 0x52
mov byte [rsp + 0x34], r8b
xor r9b, 0x52
mov byte [rsp + 0x35], r9b
xor r10b, 0x52
mov byte [rsp + 0x36], r10b
lea rdx, [rsp + 0x31]
mov rcx, r12
call fcn.18000faf0
nop
movzx edx, byte [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.180011390
nop
lea rcx, [rsp + 0x430]
call fcn.18006a700
nop
lea rcx, [rsp + 0x3d0]
call fcn.180011d00
nop
lea rcx, [rsp + 0x3f0]
call fcn.180011d00
mov rax, r12
jmp 0x18006c7db
mov byte [rsp + 0x30], 0x41
mov al, 0x24
mov cl, 0x33
movzx edx, cl
mov r8b, 0x2e
movzx r9d, cl
mov r10b, 0x32
xor al, 0x41
mov byte [rsp + 0x31], al
xor cl, 0x41
mov byte [rsp + 0x32], cl
xor dl, 0x41
mov byte [rsp + 0x33], dl
xor r8b, 0x41
mov byte [rsp + 0x34], r8b
xor r9b, 0x41
mov byte [rsp + 0x35], r9b
xor r10b, 0x41
mov byte [rsp + 0x36], r10b
lea rdx, [rsp + 0x31]
lea rcx, [rsp + 0x3b0]
call fcn.180014230
mov rdx, rax
lea rcx, [rsp + 0x3c0]
call fcn.180018260
nop
cmp byte [rsp + 0x3c0], 0
je 0x18006c112
lea rcx, [rsp + 0x3c0]
call fcn.18006f520
mov byte [rsp + 0x50], 0x22
mov cl, 0x4f
mov dl, 0x47
mov r8b, 0x51
movzx r9d, r8b
mov r10b, 0x43
mov r11b, 0x45
movzx ebx, dl
xor edi, edi
xor cl, 0x22
mov byte [rsp + 0x51], cl
xor dl, 0x22
mov byte [rsp + 0x52], dl
xor r8b, 0x22
mov byte [rsp + 0x53], r8b
xor r9b, 0x22
mov byte [rsp + 0x54], r9b
xor r10b, 0x22
mov byte [rsp + 0x55], r10b
xor r11b, 0x22
mov byte [rsp + 0x56], r11b
xor bl, 0x22
mov byte [rsp + 0x57], bl
mov byte [rsp + 0x58], dil
lea rcx, [rsp + 0x51]
mov qword [rsp + 0x68], rcx
lea rdx, [rsp + 0x68]
mov rcx, rax
call fcn.180070ac0
mov rdx, r12
mov rcx, rax
call fcn.180014940
nop
movzx edx, byte [rsp + 0x3c0]
lea rcx, [rsp + 0x3c8]
call fcn.180011390
nop
movzx edx, byte [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.180011390
nop
lea rcx, [rsp + 0x430]
call fcn.18006a700
nop
lea rcx, [rsp + 0x3d0]
call fcn.180011d00
nop
lea rcx, [rsp + 0x3f0]
call fcn.180011d00
mov rax, r12
jmp 0x18006c7db
xor edx, edx
lea rcx, [rsp + 0x3c8]
call fcn.180011390
nop
mov byte [rsp + 0x30], reloc.WS2_32.dll_ntohs
mov al, 0x7c
mov cl, 0x7a
mov dl, 0x6c
movzx r8d, dl
mov r9b, 0x6a
movzx r10d, al
movzx r11d, al
xor ebx, ebx
xor al, 0xf
mov byte [rsp + 0x31], al
xor cl, 0xf
mov byte [rsp + 0x32], cl
xor dl, 0xf
mov byte [rsp + 0x33], dl
xor r8b, 0xf
mov byte [rsp + 0x34], r8b
xor r9b, 0xf
mov byte [rsp + 0x35], r9b
xor r10b, 0xf
mov byte [rsp + 0x36], r10b
xor r11b, 0xf
mov byte [rsp + 0x37], r11b
mov byte [rsp + 0x38], bl
lea rax, [rsp + 0x31]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x3b0]
call fcn.180070ac0
mov rcx, rax
call fcn.180014c80
test al, al
je 0x18006c791
mov byte [rsp + 0x60], 0x43
mov al, 0x36
mov cl, 0x30
mov dl, 0x26
mov r8b, 0x31
xor al, 0x43
mov byte [rsp + 0x61], al
xor cl, 0x43
mov byte [rsp + 0x62], cl
xor dl, 0x43
mov byte [rsp + 0x63], dl
xor r8b, 0x43
mov byte [rsp + 0x64], r8b
mov byte [rsp + 0x65], bl
lea rax, [rsp + 0x61]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x3b0]
call fcn.180070ac0
mov rdx, rax
lea rcx, [rsp + 0x390]
call fcn.180018260
nop
mov byte [rsp + 0x40], recv
mov al, 0x65
mov cl, 0x7f
mov dl, 0x53
mov r8b, WSASetLastError
mov r9b, WSAGetLastError
mov r10b, 0x62
movzx r11d, r10b
mov bl, 0x69
mov dil, 0x68
xor esi, esi
xor al, 0xc
mov byte [rsp + 0x41], al
xor cl, 0xc
mov byte [rsp + 0x42], cl
xor dl, 0xc
mov byte [rsp + 0x43], dl
xor r8b, 0xc
mov byte [rsp + 0x44], r8b
xor r9b, 0xc
mov byte [rsp + 0x45], r9b
xor r10b, 0xc
mov byte [rsp + 0x46], r10b
xor r11b, 0xc
mov byte [rsp + 0x47], r11b
xor bl, 0xc
mov byte [rsp + 0x48], bl
xor dil, 0xc
mov byte [rsp + 0x49], dil
mov byte [rsp + 0x4a], sil
lea rax, [rsp + 0x41]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x390]
call fcn.180070ac0
mov rcx, rax
call fcn.180014c80
test al, al
je 0x18006c337
movdqa xmm0, xmmword [0x180271ea0]
movdqu xmmword [rsp + 0x70], xmm0
xor eax, eax
mov byte [rsp + 0x80], al
movzx eax, byte [rsp + 0x70]
xor byte [rsp + r14 + 0x71], al
inc r14
cmp r14, 0xf
jb 0x18006c2b1
mov byte [rsp + 0x80], sil
lea rdx, [rsp + 0x71]
mov rcx, r12
call fcn.18000faf0
nop
movzx edx, byte [rsp + 0x390]
lea rcx, [rsp + 0x398]
call fcn.180011390
nop
movzx edx, byte [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.180011390
nop
lea rcx, [rsp + 0x430]
call fcn.18006a700
nop
lea rcx, [rsp + 0x3d0]
call fcn.180011d00
nop
lea rcx, [rsp + 0x3f0]
call fcn.180011d00
mov rax, r12
jmp 0x18006c7db
mov byte [rsp + 0x40], 0x7d
mov al, reloc.WS2_32.dll_sendto
mov cl, ntohs
mov dl, 0x22
mov r8b, 0x1c
mov r9b, 0x19
mov r10b, reloc.WS2_32.dll_recv
movzx r11d, al
mov bl, reloc.WS2_32.dll_send
xor al, 0x7d
mov byte [rsp + 0x41], al
xor cl, 0x7d
mov byte [rsp + 0x42], cl
xor dl, 0x7d
mov byte [rsp + 0x43], dl
xor r8b, 0x7d
mov byte [rsp + 0x44], r8b
xor r9b, 0x7d
mov byte [rsp + 0x45], r9b
xor r10b, 0x7d
mov byte [rsp + 0x46], r10b
xor r11b, 0x7d
mov byte [rsp + 0x47], r11b
xor bl, 0x7d
mov byte [rsp + 0x48], bl
mov byte [rsp + 0x49], sil
lea rax, [rsp + 0x41]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x390]
call fcn.180070ac0
mov rcx, rax
call fcn.180014c80
test al, al
jne 0x18006c6dd
mov byte [rsp + 0x30], 0x40
mov al, 0x28
mov dl, 0x37
mov r8b, 0x29
mov r9b, 0x24
xor ecx, ecx
xor al, 0x40
mov byte [rsp + 0x31], al
xor dl, 0x40
mov byte [rsp + 0x32], dl
xor r8b, 0x40
mov byte [rsp + 0x33], r8b
xor r9b, 0x40
mov byte [rsp + 0x34], r9b
mov byte [rsp + 0x35], cl
lea rdx, [rsp + 0x31]
mov rcx, qword [rsp + 0x50]
call fcn.180014230
lea rdx, [rsp + 0x410]
mov rcx, rax
call fcn.180014940
nop
mov byte [rsp + 0x30], 0x25
mov al, 0x4d
mov cl, 0x52
mov dl, 0x4c
mov r8b, 0x41
xor r9d, r9d
xor al, 0x25
mov byte [rsp + 0x31], al
xor cl, 0x25
mov byte [rsp + 0x32], cl
xor dl, 0x25
mov byte [rsp + 0x33], dl
xor r8b, 0x25
mov byte [rsp + 0x34], r8b
mov byte [rsp + 0x35], r9b
lea rax, [rsp + 0x31]
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x390]
call fcn.180070ac0
mov rdx, rax
lea rcx, [rsp + 0x3c0]
call fcn.180018260
nop
cmp byte [rsp + 0x3c0], 0
jne 0x18006c57d
mov byte [rsp + 0x40], 0x45
mov al, 0x2d
mov cl, 0x32
mov dl, 0x2c
mov r8b, 0x21
mov r9b, 0x65
mov r10b, 0x2b
mov r11b, 0x30
mov bl, 0x29
movzx edi, bl
xor esi, esi
xor al, 0x45
mov byte [rsp + 0x41], al
xor cl, 0x45
mov byte [rsp + 0x42], cl
xor dl, 0x45
mov byte [rsp + 0x43], dl
xor r8b, 0x45
mov byte [rsp + 0x44], r8b
xor r9b, 0x45
mov byte [rsp + 0x45], r9b
xor r10b, 0x45
mov byte [rsp + 0x46], r10b
xor r11b, 0x45
mov byte [rsp + 0x47], r11b
xor bl, 0x45
mov byte [rsp + 0x48], bl
xor dil, 0x45
mov byte [rsp + 0x49], dil
mov byte [rsp + 0x4a], sil
lea rdx, [rsp + 0x41]
mov rcx, r12
call fcn.18000faf0
nop
movzx edx, byte [rsp + 0x3c0]
lea rcx, [rsp + 0x3c8]
call fcn.180011390
nop
lea rcx, [rsp + 0x410]
call fcn.180011d00
nop
movzx edx, byte [rsp + 0x390]
lea rcx, [rsp + 0x398]
call fcn.180011390
nop
movzx edx, byte [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.180011390
nop
lea rcx, [rsp + 0x430]
call fcn.18006a700
nop
lea rcx, [rsp + 0x3d0]
call fcn.180011d00
nop
lea rcx, [rsp + 0x3f0]
call fcn.180011d00
mov rax, r12
jmp 0x18006c7db
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x3c0]
call fcn.180014940
lea rdx, [rsp + 0x410]
mov rcx, rax
call fcn.18002cb80
movzx ebx, al
lea rcx, [rsp + 0x1c0]
call fcn.180011d00
test bl, bl
jne 0x18006c6ba
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x3c0]
call fcn.180014940
mov r9, rax
movdqa xmm0, xmmword [0x180271ed0]
movdqu xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x80], 0x757328
nop dword [rax + rax]
movzx eax, byte [rsp + 0x70]
xor byte [rsp + r14 + 0x71], al
inc r14
cmp r14, 0x12
jb 0x18006c5f0
mov byte [rsp + 0x83], 0
lea rax, [rsp + 0x71]
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x410]
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.180070c60
nop
lea rcx, [rsp + 0x1c0]
call fcn.180011d00
nop
movzx edx, byte [rsp + 0x3c0]
lea rcx, [rsp + 0x3c8]
call fcn.180011390
nop
lea rcx, [rsp + 0x410]
call fcn.180011d00
nop
movzx edx, byte [rsp + 0x390]
lea rcx, [rsp + 0x398]
call fcn.180011390
nop
movzx edx, byte [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.180011390
nop
lea rcx, [rsp + 0x430]
call fcn.18006a700
nop
lea rcx, [rsp + 0x3d0]
call fcn.180011d00
nop
lea rcx, [rsp + 0x3f0]
call fcn.180011d00
mov rax, r12
jmp 0x18006c7db
movzx edx, byte [rsp + 0x3c0]
lea rcx, [rsp + 0x3c8]
call fcn.180011390
nop
lea rcx, [rsp + 0x410]
call fcn.180011d00
mov byte [rsp + 0x30], 0x3f
mov al, 0x53
mov cl, 0x50
mov dl, 0x58
movzx r8d, dl
mov r9b, 0x5a
mov r10b, 0x5b
xor r11d, r11d
xor al, 0x3f
mov byte [rsp + 0x31], al
xor cl, 0x3f
mov byte [rsp + 0x32], cl
xor dl, 0x3f
mov byte [rsp + 0x33], dl
xor r8b, 0x3f
mov byte [rsp + 0x34], r8b
xor r9b, 0x3f
mov byte [rsp + 0x35], r9b
xor r10b, 0x3f
mov byte [rsp + 0x36], r10b
mov byte [rsp + 0x37], r11b
lea rdx, [rsp + 0x31]
mov rcx, r12
call fcn.18000faf0
nop
movzx edx, byte [rsp + 0x390]
lea rcx, [rsp + 0x398]
call fcn.180011390
nop
movzx edx, byte [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.180011390
nop
lea rcx, [rsp + 0x430]
call fcn.18006a700
nop
lea rcx, [rsp + 0x3d0]
call fcn.180011d00
nop
lea rcx, [rsp + 0x3f0]
call fcn.180011d00
mov rax, r12
jmp 0x18006c7db
movzx edx, byte [rsp + 0x3b0]
lea rcx, [rsp + 0x3b8]
call fcn.180011390
nop
lea rcx, [rsp + 0x430]
call fcn.18006a700
nop
lea rcx, [rsp + 0x3d0]
call fcn.180011d00
nop
lea rcx, [rsp + 0x3f0]
call fcn.180011d00
nop
jmp 0x18006c7db
mov rcx, qword [rsp + 0x578]
xor rcx, rsp
call fcn.1801a9b50
lea r11, [rsp + 0x580]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rcx, rax
call fcn.1800119e0
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0x1c0]
call fcn.180015200
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x320]
call fcn.1800152d0
lea rdx, [0x18029a650]
lea rcx, [rsp + 0x320]
call fcn.1801acd64
nop
mov rcx, rax
call fcn.1800119e0
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0x90]
call fcn.180015200
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x358]
call fcn.1800152d0
lea rdx, [0x18029a650]
lea rcx, [rsp + 0x358]
call fcn.1801acd64
int3