Function at 0x1800495a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18029d790]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rax, qword [0x180336948]
mov rcx, qword [rax + 0x3ef0]
movss xmm6, dword [rcx + 0x28]
mulss xmm6, dword [0x18027137c]
subss xmm6, dword [0x180271470]
movss dword [rbp + 7], xmm6
mov dword [rbp + 0xb], 0x43b40000
mov cl, 0x1f
mov dword [rbp - 0x39], 0x6c76721f
mov dword [rbp - 0x35], 0x73737a7c
mov dword [rbp - 0x31], 0x707a717e
mov word [rbp - 0x2d], 0x6c6a
xor eax, eax
mov byte [rbp - 0x2b], al
xor esi, esi
nop dword [rax + rax]
xor byte [rbp + rax - 0x38], cl
inc rax
cmp rax, 0xd
jae 0x180049643
movzx ecx, byte [rbp - 0x39]
jmp 0x180049630
mov byte [rbp - 0x2b], sil
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x38]
call fcn.1800502c0
mov ecx, dword [0x180341708]
call fcn.18002caf0
mov rbx, rax
mov ecx, dword [0x18034179c]
call fcn.1800277d0
mov rdi, rax
movdqa xmm0, xmmword [0x180271dd0]
movdqu xmmword [rbp - 0x39], xmm0
mov dword [rbp - 0x29], 0x313036
mov rcx, rsi
nop word [rax + rax]
movzx eax, byte [rbp - 0x39]
xor byte [rbp + rcx - 0x38], al
inc rcx
cmp rcx, 0x12
jb 0x180049690
mov byte [rbp - 0x26], sil
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r15, 0xffffffffffffffff
mov qword [rbp - 1], r15
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800496d0
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], 0
xor r9d, r9d
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp - 0x21]
call fcn.18004d070
mov ecx, dword [0x180341720]
call fcn.1800277d0
movzx ebx, byte [rax]
mov ecx, dword [0x18034172c]
call fcn.1800277d0
mov rdi, rax
mov cl, 0xa
mov dword [rbp - 0x39], 0x676f780a
mov dword [rbp - 0x35], 0x2a6f7c65
mov dword [rbp - 0x31], 0x7a656979
mov word [rbp - 0x2d], reloc.WS2_32.dll_WSAGetLastError
mov rax, rsi
nop word [rax + rax]
xor byte [rbp + rax - 0x38], cl
inc rax
cmp rax, 0xc
jae 0x180049753
movzx ecx, byte [rbp - 0x39]
jmp 0x180049740
mov byte [rbp - 0x2c], 0
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180049770
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], bl
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x21]
call fcn.18004d070
mov ecx, dword [0x180341720]
call fcn.1800277d0
movzx r12d, byte [rax]
mov ecx, dword [0x1803417c0]
call fcn.1800277d0
mov r13, rax
mov byte [rbp - 0x39], 6
mov cl, reloc.WS2_32.dll_WSACleanup
mov dl, 0x63
mov r8b, 0x6b
mov r9b, 0x69
mov r10b, reloc.WS2_32.dll_WSASetLastError
movzx r11d, dl
mov bl, 0x26
mov dil, 0x7c
movzx esi, r9b
movzx r14d, r9b
movzx eax, r8b
xor r15d, r15d
xor cl, 6
mov byte [rbp - 0x38], cl
xor dl, 6
mov byte [rbp - 0x37], dl
xor r8b, 6
mov byte [rbp - 0x36], r8b
xor r9b, 6
mov byte [rbp - 0x35], r9b
xor r10b, 6
mov byte [rbp - 0x34], r10b
xor r11b, 6
mov byte [rbp - 0x33], r11b
xor bl, 6
mov byte [rbp - 0x32], bl
xor dil, 6
mov byte [rbp - 0x31], dil
xor sil, 6
mov byte [rbp - 0x30], sil
xor r14b, 6
mov byte [rbp - 0x2f], r14b
xor al, 6
mov byte [rbp - 0x2e], al
mov byte [rbp - 0x2d], r15b
xor ebx, ebx
mov qword [rbp - 0x21], rbx
mov qword [rbp - 0x11], rbx
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180049853
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], r12b
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp - 0x21]
call fcn.18004d070
mov ecx, dword [0x180341700]
call fcn.180027860
movdqa xmm0, xmmword [0x180272550]
movdqu xmmword [rbp - 0x39], xmm0
xor ecx, ecx
mov byte [rbp - 0x29], cl
mov rdx, rbx
movzx ecx, byte [rbp - 0x39]
xor byte [rbp + rdx - 0x38], cl
inc rdx
cmp rdx, 0xf
jb 0x1800498a1
mov byte [rbp - 0x29], 0
mov dword [rbp + 0xf], __WSAFDIsSet
mov dword [rbp + 7], 0x1e
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 4
lea rcx, [0x18025ff3c]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0xf]
lea r8, [rbp + 7]
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.18004dbc0
mov ecx, dword [0x180341720]
call fcn.1800277d0
movzx r12d, byte [rax]
mov ecx, dword [0x180341798]
call fcn.1800277d0
mov r13, rax
mov byte [rbp - 0x39], 0x23
mov cl, 0x57
mov dl, 0x4b
mov r8b, 0x4a
mov r9b, 0x51
mov r10b, 0x47
mov r11b, 0x53
mov bl, 0x46
movzx edi, r9b
mov sil, 0x50
mov r14b, 0x4c
mov al, 0x4d
xor r15d, r15d
xor cl, 0x23
mov byte [rbp - 0x38], cl
xor dl, 0x23
mov byte [rbp - 0x37], dl
xor r8b, 0x23
mov byte [rbp - 0x36], r8b
xor r9b, 0x23
mov byte [rbp - 0x35], r9b
xor r10b, 0x23
mov byte [rbp - 0x34], r10b
xor r11b, 0x23
mov byte [rbp - 0x33], r11b
xor bl, 0x23
mov byte [rbp - 0x32], bl
xor dil, 0x23
mov byte [rbp - 0x31], dil
xor sil, 0x23
mov byte [rbp - 0x30], sil
xor r14b, 0x23
mov byte [rbp - 0x2f], r14b
xor al, 0x23
mov byte [rbp - 0x2e], al
mov byte [rbp - 0x2d], r15b
xor eax, eax
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r15, 0xffffffffffffffff
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x1800499a5
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], r12b
lea r9, [0x1803416fc]
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp - 0x21]
call fcn.18004d070
mov ecx, dword [0x180341798]
call fcn.1800277d0
cmp byte [rax], 0
je 0x180049adb
mov ecx, dword [0x180341794]
call fcn.180027860
mov rdx, rax
movdqa xmm0, xmmword [0x1802729e0]
movdqu xmmword [rbp - 0x39], xmm0
mov dword [rbp - 0x29], 0x65686772
mov word [rbp - 0x25], 0x63
xor r12d, r12d
mov ecx, r12d
nop dword [rax]
movzx eax, byte [rbp - 0x39]
xor byte [rbp + rcx - 0x38], al
inc rcx
cmp rcx, 0x14
jb 0x180049a20
mov byte [rbp - 0x24], r12b
mov dword [rbp + 7], __WSAFDIsSet
mov dword [rbp + 0xf], 0x1e
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], 4
lea rbx, [0x18025ff3c]
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 7]
lea r8, [rbp + 0xf]
lea rcx, [rbp - 0x38]
call fcn.18004dbc0
mov ecx, dword [0x18034168c]
call fcn.180027860
movdqa xmm0, xmmword [0x1802729d0]
movdqu xmmword [rbp - 0x39], xmm0
xor ecx, ecx
mov byte [rbp - 0x29], cl
mov rdx, r12
nop dword [rax]
movzx ecx, byte [rbp - 0x39]
xor byte [rbp + rdx - 0x38], cl
inc rdx
cmp rdx, 0xf
jb 0x180049a90
mov byte [rbp - 0x29], r12b
mov dword [rbp + 7], __WSAFDIsSet
mov dword [rbp + 0xf], 0x1e
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 7]
lea r8, [rbp + 0xf]
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.18004dbc0
jmp 0x180049ade
xor r12d, r12d
mov ecx, dword [0x180341714]
call fcn.1800277d0
mov r14, rax
mov byte [rbp - 0x39], reloc.WS2_32.dll_recv
mov cl, 0x67
mov dl, 0x71
mov r8b, 0x64
mov r9b, 0x75
mov r10b, 0x62
mov r11b, 0x7d
movzx ebx, dl
movzx edi, r10b
mov sil, 0x7b
xor eax, eax
xor cl, 0x10
mov byte [rbp - 0x38], cl
xor dl, 0x10
mov byte [rbp - 0x37], dl
xor r8b, 0x10
mov byte [rbp - 0x36], r8b
xor r9b, 0x10
mov byte [rbp - 0x35], r9b
xor r10b, 0x10
mov byte [rbp - 0x34], r10b
xor r11b, 0x10
mov byte [rbp - 0x33], r11b
xor bl, 0x10
mov byte [rbp - 0x32], bl
xor dil, 0x10
mov byte [rbp - 0x31], dil
xor sil, 0x10
mov byte [rbp - 0x30], sil
mov byte [rbp - 0x2f], al
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r8, r15
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180049b70
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp - 0x21]
call fcn.18004d070
mov ecx, dword [0x180341688]
call fcn.1800277d0
mov rbx, rax
mov cl, 0x1b
mov dword [rbp - 0x39], 0x627e701b
mov dword [rbp - 0x35], 0x7f757279
mov dword [rbp - 0x31], 0x6872773b
mov word [rbp - 0x2d], reloc.WS2_32.dll_WSAGetLastError
mov rax, r12
nop dword [rax]
xor byte [rbp + rax - 0x38], cl
inc rax
cmp rax, 0xc
jae 0x180049be3
movzx ecx, byte [rbp - 0x39]
jmp 0x180049bd0
mov byte [rbp - 0x2c], 0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180049c00
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 0x21]
call fcn.18004d070
mov ecx, dword [0x180341720]
call fcn.1800277d0
mov r12, rax
mov byte [rbp - 0x39], 0x54
mov cl, 0x27
mov dl, 0x31
mov r8b, gethostname
mov r9b, 0x21
mov r10b, 0x26
movzx r11d, dl
mov bl, reloc.WS2_32.dll_WSACleanup
mov dil, reloc.WS2_32.dll_gethostname
mov sil, 0x3b
mov r14b, 0x30
movzx eax, dl
xor r13d, r13d
xor cl, 0x54
mov byte [rbp - 0x38], cl
xor dl, 0x54
mov byte [rbp - 0x37], dl
xor r8b, 0x54
mov byte [rbp - 0x36], r8b
xor r9b, 0x54
mov byte [rbp - 0x35], r9b
xor r10b, 0x54
mov byte [rbp - 0x34], r10b
xor r11b, 0x54
mov byte [rbp - 0x33], r11b
xor bl, 0x54
mov byte [rbp - 0x32], bl
xor dil, 0x54
mov byte [rbp - 0x31], dil
xor sil, 0x54
mov byte [rbp - 0x30], sil
xor r14b, 0x54
mov byte [rbp - 0x2f], r14b
xor al, 0x54
mov byte [rbp - 0x2e], al
mov byte [rbp - 0x2d], r13b
xor esi, esi
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r8, r15
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180049cd0
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, r12
lea rcx, [rbp - 0x21]
call fcn.18004d070
call fcn.180050940
movss xmm1, dword [0x180271464]
xorps xmm0, xmm0
call fcn.1800855d0
movss dword [rbp + 7], xmm6
mov dword [rbp + 0xb], 0x43b40000
mov byte [rbp - 0x39], 0x34
mov al, 0x59
mov cl, 0x5b
mov dl, 0x42
mov r8b, 0x51
movzx r9d, al
movzx r10d, r8b
mov r11b, 0x5a
mov bl, 0x40
xor edi, edi
xor al, 0x34
mov byte [rbp - 0x38], al
xor cl, 0x34
mov byte [rbp - 0x37], cl
xor dl, 0x34
mov byte [rbp - 0x36], dl
xor r8b, 0x34
mov byte [rbp - 0x35], r8b
xor r9b, 0x34
mov byte [rbp - 0x34], r9b
xor r10b, 0x34
mov byte [rbp - 0x33], r10b
xor r11b, 0x34
mov byte [rbp - 0x32], r11b
xor bl, 0x34
mov byte [rbp - 0x31], bl
mov byte [rbp - 0x30], dil
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x38]
call fcn.1800502c0
mov ecx, dword [0x180341720]
call fcn.1800277d0
movzx ebx, byte [rax]
mov ecx, dword [0x180341750]
call fcn.1800277d0
mov rdi, rax
mov byte [rbp + 7], reloc.WS2_32.dll_WSAStartup
mov cl, reloc.WS2_32.dll_recvfrom
mov dl, 0x1b
mov r8b, 0x1c
mov r9b, 3
xor eax, eax
xor cl, 0x73
mov byte [rbp + 8], cl
xor dl, 0x73
mov byte [rbp + 9], dl
xor r8b, 0x73
mov byte [rbp + 0xa], r8b
xor r9b, 0x73
mov byte [rbp + 0xb], r9b
mov byte [rbp + 0xc], al
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x11], rsi
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp + 8]
mov r8, r15
inc r8
cmp byte [rax + r8], 0
jne 0x180049de5
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], bl
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x21]
call fcn.18004d070
mov ecx, dword [0x180341720]
call fcn.1800277d0
movzx r12d, byte [rax]
mov ecx, dword [0x1803416f0]
call fcn.1800277d0
mov r13, rax
mov byte [rbp - 0x39], 0x32
mov cl, 0x53
mov dl, 0x47
mov r8b, 0x46
mov r9b, 0x5d
mov r10b, reloc.WS2_32.dll_select
mov r11b, 0x41
movzx ebx, r8b
mov dil, 0x40
movzx esi, cl
mov r14b, 0x54
mov al, 0x57
xor r15d, r15d
xor cl, 0x32
mov byte [rbp - 0x38], cl
xor dl, 0x32
mov byte [rbp - 0x37], dl
xor r8b, 0x32
mov byte [rbp - 0x36], r8b
xor r9b, 0x32
mov byte [rbp - 0x35], r9b
xor r10b, 0x32
mov byte [rbp - 0x34], r10b
xor r11b, 0x32
mov byte [rbp - 0x33], r11b
xor bl, 0x32
mov byte [rbp - 0x32], bl
xor dil, 0x32
mov byte [rbp - 0x31], dil
xor sil, 0x32
mov byte [rbp - 0x30], sil
xor r14b, 0x32
mov byte [rbp - 0x2f], r14b
xor al, 0x32
mov byte [rbp - 0x2e], al
mov byte [rbp - 0x2d], r15b
xor eax, eax
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x38]
mov r15, qword [rbp - 1]
inc r15
cmp byte [rax + r15], 0
jne 0x180049ec2
mov r8, r15
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x21]
call fcn.180011ef0
mov byte [rsp + 0x20], r12b
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
lea rcx, [rbp - 0x21]
call fcn.18004d070
call fcn.180050940
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1801a9b50
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret