Function at 0x18000ae30
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x440]
sub rsp, 0x540
mov rax, qword [0x1801491e0]
xor rax, rsp
mov qword [rbp + 0x430], rax
mov r15, rcx
mov qword [rbp - 0x68], rcx
xor r12d, r12d
mov dword [rsp + 0x70], r12d
movdqa xmm0, xmmword [0x18012ec30]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x7b657935
mov word [rbp - 0x74], 0x100
mov ecx, r12d
nop
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 0x14
jb 0x18000ae90
mov byte [rbp - 0x73], r12b
mov qword [rbp - 0x50], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], r12b
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x50]
call fcn.18003a430
mov dword [rsp + 0x70], 6
movdqa xmm0, xmmword [0x18012ec90]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x66783268
mov word [rsp + 0x64], 0x7a
mov byte [rsp + 0x66], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x18000af00
mov byte [rsp + 0x66], 0
mov qword [rbp - 0x30], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x30]
call fcn.18003a430
mov dword [rsp + 0x70], reloc.WLDAP32.dll_Ordinal_30
mov dword [rsp + 0x20], 0x3e3b3d69
mov word [rsp + 0x24], Ordinal_60
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000af60
mov byte [rsp + 0x26], 0
mov qword [rbp - 0x10], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x10]
call fcn.18003a430
mov dword [rsp + 0x70], 0x7e
mov dword [rsp + 0x28], 0x1003c3a
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000afc0
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x10], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x10]
call fcn.18003a430
mov dword [rsp + 0x70], 0x1fe
movdqa xmm0, xmmword [0x18012e350]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000b030
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x30], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.18003a430
mov dword [rsp + 0x70], 0x7fe
movdqa xmm0, xmmword [0x18012f150]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000b0b0
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x50], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.18003a430
mov dword [rsp + 0x70], 0x1ffe
mov dword [rsp + 0x20], 0x383d3e69
mov word [rsp + 0x24], 0x3f
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000b110
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x70], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x70]
call fcn.18003a430
mov dword [rsp + 0x70], 0x7ffe
mov dword [rsp + 0x28], 0x1003c39
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000b170
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x90], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0x90], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x90]
call fcn.18003a430
mov dword [rsp + 0x70], 0x1fffe
movdqa xmm0, xmmword [0x18012e390]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000b1f0
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0xb0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0xc0], xmm0
mov byte [rbp + 0xb0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.18003a430
mov dword [rsp + 0x70], 0x7fffe
movdqa xmm0, xmmword [0x18012f190]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000b270
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0xd0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0xe0], xmm0
mov byte [rbp + 0xd0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xd0]
call fcn.18003a430
mov dword [rsp + 0x70], 0x1ffffe
mov dword [rsp + 0x20], 0x363c3e69
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000b2e0
mov byte [rsp + 0x26], 0
mov qword [rbp + 0xf0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xf0]
call fcn.18003a430
mov dword [rsp + 0x70], 0x7ffffe
mov dword [rsp + 0x28], 0x1003c38
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000b340
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x110], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x110], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x110]
call fcn.18003a430
mov dword [rsp + 0x70], 0x1fffffe
movdqa xmm0, xmmword [0x18012e360]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000b3c0
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x130], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x130]
call fcn.18003a430
mov dword [rsp + 0x70], 0x7fffffe
movdqa xmm0, xmmword [0x18012f160]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000b440
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x150], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x150]
call fcn.18003a430
mov dword [rsp + 0x70], 0x1ffffffe
mov dword [rsp + 0x20], 0x393e3e69
mov word [rsp + 0x24], 0x3d
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000b4b0
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x170], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x170]
call fcn.18003a430
mov dword [rsp + 0x70], 0x7ffffffe
mov dword [rsp + 0x28], 0x1003c3f
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000b510
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x190], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x1a0], xmm0
mov byte [rbp + 0x190], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x190]
call fcn.18003a430
mov dword [rsp + 0x70], 0xfffffffe
movdqa xmm0, xmmword [0x18012e330]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000b590
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x1b0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1b0]
call fcn.18003a430
nop
movdqa xmm0, xmmword [0x18012f130]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000b610
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x1d0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1d0]
call fcn.18003a430
nop
mov dword [rsp + 0x20], 0x3a383e69
mov word [rsp + 0x24], Ordinal_60
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000b680
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x1f0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x1f0]
call fcn.18003a430
nop
mov dword [rsp + 0x28], 0x1003c3e
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000b6e0
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x210], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x210]
call fcn.18003a430
nop
movdqa xmm0, xmmword [0x18012e380]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000b760
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x230], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x230]
call fcn.18003a430
nop
movdqa xmm0, xmmword [str.MekBOs___IPyt]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000b7e0
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x250], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x260], xmm0
mov byte [rbp + 0x250], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x250]
call fcn.18003a430
nop
mov dword [rsp + 0x20], 0x3f3b3e69
mov word [rsp + 0x24], 0x3d
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000b850
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x270], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x280], xmm0
mov byte [rbp + 0x270], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x270]
call fcn.18003a430
nop
mov dword [rsp + 0x28], 0x1003c3d
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000b8b0
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x290], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x290], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x290]
call fcn.18003a430
nop
movdqa xmm0, xmmword [0x18012e3a0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000b930
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x2b0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x2c0], xmm0
mov byte [rbp + 0x2b0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x2b0]
call fcn.18003a430
nop
movdqa xmm0, xmmword [str.MekBOs____IPyt]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000b9b0
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x2d0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x2e0], xmm0
mov byte [rbp + 0x2d0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x2d0]
call fcn.18003a430
nop
mov dword [rsp + 0x20], 0x373b3e69
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000ba20
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x2f0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x300], xmm0
mov byte [rbp + 0x2f0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x2f0]
call fcn.18003a430
nop
mov dword [rsp + 0x28], 0x1003c3c
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000ba80
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x310], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x320], xmm0
mov byte [rbp + 0x310], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x310]
call fcn.18003a430
nop
movdqa xmm0, xmmword [0x18012e370]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000bb00
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x330], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x340], xmm0
mov byte [rbp + 0x330], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x330]
call fcn.18003a430
nop
movdqa xmm0, xmmword [str.MekBOs__IPyt]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000bb80
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x350], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x360], xmm0
mov byte [rbp + 0x350], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x350]
call fcn.18003a430
nop
mov dword [rsp + 0x20], 0x3e353e69
mov word [rsp + 0x24], 0x3d
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000bbf0
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x370], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x380], xmm0
mov byte [rbp + 0x370], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x370]
call fcn.18003a430
nop
mov dword [rsp + 0x28], 0x1003c33
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000bc50
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x390], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x3a0], xmm0
mov byte [rbp + 0x390], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x390]
call fcn.18003a430
nop
movdqa xmm0, xmmword [0x18012e340]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x7b7e7369
mov dword [rsp + 0x64], 0x470f536c
mov dword [rsp + 0x68], 0x100415b
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000bcd0
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x3b0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x3c0], xmm0
mov byte [rbp + 0x3b0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x3b0]
call fcn.18003a430
nop
movdqa xmm0, xmmword [0x18012f140]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x7d726e4b
mov dword [rsp + 0x44], 0xc52537a
mov dword [rsp + 0x48], 0x405c46
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000bd50
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x3d0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x3e0], xmm0
mov byte [rbp + 0x3d0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3d0]
call fcn.18003a430
nop
mov dword [rsp + 0x20], 0x3a343e69
mov word [rsp + 0x24], Ordinal_60
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000bdc0
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x3f0], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x400], xmm0
mov byte [rbp + 0x3f0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x3f0]
call fcn.18003a430
nop
mov dword [rsp + 0x28], 0x1003c32
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx + 0xb]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000be20
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x410], r12
movdqa xmm0, xmmword [0x18012d200]
movdqa xmmword [rbp + 0x420], xmm0
mov byte [rbp + 0x410], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x410]
call fcn.18003a430
nop
mov edi, r12d
nop
mov ebx, r12d
movsxd r14, edi
lea rsi, [r14*4]
nop
movsxd rax, ebx
add rax, rsi
shl rax, 5
lea rdx, [rbp - 0x50]
add rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1800387c0
mov rcx, rax
call fcn.18000aca0
test al, al
jne 0x18000bebb
inc ebx
cmp ebx, 2
jl 0x18000be80
inc edi
cmp edi, 9
jge 0x18000bf43
jmp 0x18000be70
shl r14, 7
lea rdx, [rbp + 0x10]
add rdx, r14
lea rcx, [0x180173990]
cmp rcx, rdx
je 0x18000bee5
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x18000bee0
mov rdx, qword [rdx]
call fcn.18003a430
lea rdx, [rbp - 0x10]
add rdx, r14
mov rcx, r15
call fcn.1800387c0
mov dword [rsp + 0x70], 0xffffffff
lea r9, [fcn.18000c620]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 4]
lea rcx, [rbp - 0x50]
call fcn.18010a860
mov rax, r15
mov rcx, qword [rbp + 0x430]
xor rcx, rsp
call fcn.18010a550
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x617f7e4e
mov word [rsp + 0x24], 0x7d
mov byte [rsp + 0x26], 1
lea rcx, [rsp + 0x20]
call fcn.18000c010
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180038780
mov rbx, rax
movdqa xmm0, xmmword [0x18012e960]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x53786a72
mov dword [rsp + 0x44], 0x4d53503f
mov dword [rsp + 0x48], 0x55564140
mov word [rsp + 0x4c], 9
mov byte [rsp + 0x4e], 1
lea rcx, [rsp + 0x30]
call fcn.18000bfe0
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.180038780
nop
mov rdx, rbx
mov rcx, rax
call fcn.18000abd0
int3