Function at 0x180030480
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x900
mov qword [rsp + 0x8c8], 0xfffffffffffffffe
mov rax, qword [0x1800c34c8]
xor rax, rsp
mov qword [rsp + 0x8f8], rax
lea rcx, [rsp + 0x420]
call fcn.18002f7c0
nop
xor eax, eax
mov word [rsp + 0x540], ax
lea rdi, [rsp + 0x542]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov r8d, 0x104
lea rdx, [rsp + 0x540]
mov rcx, qword [0x1800c57b8]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rsp + 0x540]
lea rcx, [rsp + 0x448]
call fcn.180015800
mov word [rsp + 0x278], 0
mov word [rsp + 0x270], 0
mov word [rsp + 0x268], 0
mov word [rsp + 0x260], 0
mov word [rsp + 0x258], 0
mov word [rsp + 0x250], 0
mov word [rsp + 0x248], 0
mov word [rsp + 0x240], 0
mov word [rsp + 0x238], 0
mov word [rsp + 0x230], 0
mov word [rsp + 0x228], 0
mov word [rsp + 0x220], 0
mov word [rsp + 0x218], 0
mov word [rsp + 0x210], 0
mov word [rsp + 0x208], 0
mov word [rsp + 0x200], 0
mov word [rsp + 0x1f8], 0
mov word [rsp + 0x1f0], 0
mov word [rsp + 0x1e8], 0
mov word [rsp + 0x1e0], 0
mov word [rsp + 0x1d8], 0
mov word [rsp + 0x1d0], 0
mov word [rsp + 0x1c8], 0
mov word [rsp + 0x1c0], 0
mov word [rsp + 0x1b8], 0
mov word [rsp + 0x1b0], 0
mov word [rsp + 0x1a8], 0
mov word [rsp + 0x1a0], 0
mov word [rsp + 0x198], 0
mov word [rsp + 0x190], 0
mov word [rsp + 0x188], 0
mov word [rsp + 0x180], 0
mov word [rsp + 0x178], 0
mov word [rsp + 0x170], 0
mov word [rsp + 0x168], 0
mov word [rsp + 0x160], 0
mov word [rsp + 0x158], 0
mov word [rsp + 0x150], 0
mov word [rsp + 0x148], 0
mov word [rsp + 0x140], 0
mov word [rsp + 0x138], 0
mov word [rsp + 0x130], 0
mov word [rsp + 0x128], 0
mov word [rsp + 0x120], 0
mov word [rsp + 0x118], 0
mov word [rsp + 0x110], 0
mov word [rsp + 0x108], 0
mov word [rsp + 0x100], 0
mov word [rsp + 0xf8], 0
mov word [rsp + 0xf0], 0
mov word [rsp + 0xe8], 0
mov word [rsp + 0xe0], 0
mov word [rsp + 0xd8], 0
mov word [rsp + 0xd0], 0
mov word [rsp + 0xc8], 0
mov word [rsp + 0xc0], 0
mov word [rsp + 0xb8], 0
mov word [rsp + 0xb0], 0
mov word [rsp + 0xa8], 0
mov word [rsp + 0xa0], 0
mov word [rsp + 0x98], 0
mov word [rsp + 0x90], 0
mov word [rsp + 0x88], WSACleanup
mov word [rsp + 0x80], 0x65
mov word [rsp + 0x78], WSASetLastError
mov word [rsp + 0x70], 0x64
mov word [rsp + 0x68], WSASetLastError
mov word [rsp + 0x60], 0x61
mov word [rsp + 0x58], 0x48
mov word [rsp + 0x50], WSASetLastError
mov word [rsp + 0x48], reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x40], 0x61
mov word [rsp + 0x38], 0x54
mov word [rsp + 0x30], 0x68
mov word [rsp + 0x28], 0x63
mov word [rsp + 0x20], 0x53
mov r9w, Ordinal_79
mov r8w, 0x50
mov dx, 0x54
lea rcx, [rsp + 0x750]
call fcn.18002ebd0
mov qword [rsp + 0x8d0], rax
mov rax, qword [rsp + 0x8d0]
mov qword [rsp + 0x8d8], rax
mov rcx, qword [rsp + 0x8d8]
call fcn.180011f90
mov rdx, rax
lea rcx, [rsp + 0x4c0]
call fcn.180015800
nop
lea rcx, [rsp + 0x750]
call fcn.180011f30
mov word [rsp + 0x278], 0
mov word [rsp + 0x270], 0
mov word [rsp + 0x268], 0
mov word [rsp + 0x260], 0
mov word [rsp + 0x258], 0
mov word [rsp + 0x250], 0
mov word [rsp + 0x248], 0
mov word [rsp + 0x240], 0
mov word [rsp + 0x238], 0
mov word [rsp + 0x230], 0
mov word [rsp + 0x228], 0
mov word [rsp + 0x220], 0
mov word [rsp + 0x218], 0
mov word [rsp + 0x210], 0
mov word [rsp + 0x208], 0
mov word [rsp + 0x200], 0
mov word [rsp + 0x1f8], 0
mov word [rsp + 0x1f0], 0
mov word [rsp + 0x1e8], 0
mov word [rsp + 0x1e0], 0
mov word [rsp + 0x1d8], 0
mov word [rsp + 0x1d0], 0
mov word [rsp + 0x1c8], 0
mov word [rsp + 0x1c0], 0
mov word [rsp + 0x1b8], 0
mov word [rsp + 0x1b0], 0
mov word [rsp + 0x1a8], 0
mov word [rsp + 0x1a0], 0
mov word [rsp + 0x198], 0
mov word [rsp + 0x190], 0
mov word [rsp + 0x188], 0
mov word [rsp + 0x180], 0
mov word [rsp + 0x178], 0
mov word [rsp + 0x170], 0
mov word [rsp + 0x168], 0
mov word [rsp + 0x160], 0
mov word [rsp + 0x158], 0
mov word [rsp + 0x150], 0
mov word [rsp + 0x148], 0
mov word [rsp + 0x140], 0
mov word [rsp + 0x138], 0
mov word [rsp + 0x130], 0
mov word [rsp + 0x128], 0
mov word [rsp + 0x120], 0
mov word [rsp + 0x118], 0
mov word [rsp + 0x110], 0
mov word [rsp + 0x108], WSASetLastError
mov word [rsp + 0x100], 0x63
mov word [rsp + 0xf8], 0x53
mov word [rsp + 0xf0], Ordinal_79
mov word [rsp + 0xe8], 0x50
mov word [rsp + 0xe0], 0x54
mov word [rsp + 0xd8], 0x5c
mov word [rsp + 0xd0], WSASetLastError
mov word [rsp + 0xc8], reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0xc0], WSASetLastError
mov word [rsp + 0xb8], reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0xb0], 0x61
mov word [rsp + 0xa8], 0x63
mov word [rsp + 0xa0], reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x98], Ordinal_79
mov word [rsp + 0x90], 0x5c
mov word [rsp + 0x88], reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x80], 0x77
mov word [rsp + 0x78], reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x70], 0x64
mov word [rsp + 0x68], WSASetLastError
mov word [rsp + 0x60], WSAGetLastError
mov word [rsp + 0x58], 0x57
mov word [rsp + 0x50], 0x5c
mov word [rsp + 0x48], reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0x40], 0x66
mov word [rsp + 0x38], reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x30], reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0x28], reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0x20], WSACleanup
mov r9w, 0x63
mov r8w, 0x69
mov dx, Ordinal_79
lea rcx, [rsp + 0x778]
call fcn.18002ebd0
mov qword [rsp + 0x8e0], rax
mov rax, qword [rsp + 0x8e0]
mov qword [rsp + 0x8e8], rax
mov rcx, qword [rsp + 0x8e8]
call fcn.180011f90
mov rdx, rax
lea rcx, [rsp + 0x4e8]
call fcn.180015800
nop
lea rcx, [rsp + 0x778]
call fcn.180011f30
lea rdx, [0x1800a15d0]
lea rcx, [rsp + 0x470]
call fcn.180015800
lea rdx, [0x1800a1620]
lea rcx, [rsp + 0x498]
call fcn.180015800
lea rax, [rsp + 0x7a0]
mov qword [rsp + 0x8b8], rax
lea rdx, [rsp + 0x420]
mov rcx, qword [rsp + 0x8b8]
call fcn.180026b10
mov qword [rsp + 0x8f0], rax
mov rdx, qword [rsp + 0x8f0]
lea rcx, [rsp + 0x290]
call fcn.180026a90
nop
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0x290]
call fcn.180026c50
mov byte [rsp + 0x8c0], al
lea rcx, [rsp + 0x290]
call fcn.180026bf0
nop
lea rcx, [rsp + 0x420]
call fcn.1800269e0
mov al, byte [rsp + 0x8c0]
mov rcx, qword [rsp + 0x8f8]
xor rcx, rsp
call fcn.18003c690
add rsp, 0x900
pop rdi
ret