Function at 0x18003b430
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rax - 0x188]
sub rsp, 0x270
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x180201ac0]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov rdi, rdx
mov rsi, rcx
xor edx, edx
mov r8d, 0x1fd
lea rcx, [rsp + 0x53]
call fcn.180136140
mov word [rsp + 0x50], 0x105
mov byte [rsp + 0x52], 2
mov r8d, 3
lea rdx, [rsp + 0x50]
mov ecx, esi
call fcn.18003a790
cmp eax, 3
je 0x18003b5cf
mov r9d, 2
mov r8d, 0x130
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [str.PH]
mov word [rsp + 0x40], 0x9bbd
mov r8d, dword [0x1804a2b54]
mov rcx, qword gs:[0x58]
mov r9d, 0x76c8
mov rcx, qword [rcx + r8*8]
mov edx, dword [r9 + rcx]
cmp dword [0x1804a3e1c], edx
jle 0x18003b53d
lea rcx, [0x1804a3e1c]
call fcn.1801337d8
cmp dword [0x1804a3e1c], 0xffffffff
jne 0x18003b53d
mov byte [0x1804a3da2], 1
movups xmmword [0x1804a3d90], xmm6
movzx eax, word [rsp + 0x40]
mov word [0x1804a3da0], ax
lea rcx, [0x18016a190]
call fcn.180133c8c
lea rcx, [0x1804a3e1c]
call fcn.180133778
lea rdi, [0x1804a3d90]
cmp byte [0x1804a3da2], 0
je 0x18003b583
xor eax, eax
movabs r9, 0x8909b93f1d0d9b93
nop dword [rax]
movzx ecx, al
and cl, 7
shl cl, 3
mov r8, r9
shr r8, cl
xor byte [rax + rdi], r8b
inc rax
cmp rax, 0x12
jb 0x18003b560
mov byte [0x1804a3da2], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
jmp 0x18003c327
mov r8d, 2
lea rdx, [rsp + 0x50]
mov ecx, esi
call fcn.18003ab80
cmp eax, 2
je 0x18003b700
mov r9d, 2
mov r8d, 0x134
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dff90]
mov r8d, dword [0x1804a2b54]
mov rcx, qword gs:[0x58]
mov r9d, 0x76c8
mov rcx, qword [rcx + r8*8]
mov edx, dword [r9 + rcx]
cmp dword [0x1804a3de4], edx
jle 0x18003b675
lea rcx, [0x1804a3de4]
call fcn.1801337d8
cmp dword [0x1804a3de4], 0xffffffff
jne 0x18003b675
mov word [0x1804a3d50], 0x1c9
movups xmmword [0x1804a3d40], xmm6
lea rcx, [0x18016a170]
call fcn.180133c8c
lea rcx, [0x1804a3de4]
call fcn.180133778
lea rdi, [0x1804a3d40]
cmp byte [0x1804a3d51], 0
je 0x18003b6b4
xor eax, eax
movabs rdx, 0xcf93b3138bad1fc9
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x11
jb 0x18003b691
mov byte [0x1804a3d51], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
jmp 0x18003c327
cmp byte [rsp + 0x50], 5
je 0x18003b845
mov r9d, 2
mov r8d, 0x138
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dff80]
mov dword [rsp + 0x40], 0x81428173
mov word [rsp + 0x44], 0x69c1
mov edx, dword [0x1804a2b54]
mov rax, qword gs:[0x58]
mov r9d, 0x76c8
mov rax, qword [rax + rdx*8]
mov ecx, dword [r9 + rax]
cmp dword [0x1804a3cfc], ecx
jle 0x18003b7b8
lea rcx, [0x1804a3cfc]
call fcn.1801337d8
cmp dword [0x1804a3cfc], 0xffffffff
jne 0x18003b7b8
mov byte [0x1804a3d3e], 1
movups xmmword [0x1804a3d28], xmm6
mov eax, dword [rsp + 0x40]
mov dword [0x1804a3d38], eax
movzx eax, word [rsp + 0x44]
mov word [0x1804a3d3c], ax
lea rcx, [0x18016a150]
call fcn.180133c8c
lea rcx, [0x1804a3cfc]
call fcn.180133778
lea rdi, [0x1804a3d28]
cmp byte [0x1804a3d3e], 0
je 0x18003b803
xor eax, eax
movabs rdx, 0xbba969eff327f753
nop dword [rax]
nop dword [rax + rax]
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x16
jb 0x18003b7e0
mov byte [0x1804a3d3e], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
jmp 0x18003c307
cmp byte [rsp + 0x51], 2
je 0x18003b985
mov r9d, 2
mov r8d, 0x13c
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dfea0]
mov dword [rsp + 0x40], 0x5e2c4ff
mov dword [rsp + 0x44], 0x2fefd467
mov edx, dword [0x1804a2b54]
mov rax, qword gs:[0x58]
mov r9d, 0x76c8
mov rax, qword [rax + rdx*8]
mov ecx, dword [r9 + rax]
cmp dword [0x1804a3d84], ecx
jle 0x18003b8f8
lea rcx, [0x1804a3d84]
call fcn.1801337d8
cmp dword [0x1804a3d84], 0xffffffff
jne 0x18003b8f8
mov word [0x1804a3de0], 0x1df
movups xmmword [0x1804a3dc8], xmm6
movsd xmm0, qword [rsp + 0x40]
movsd qword [0x1804a3dd8], xmm0
lea rcx, [0x18016a130]
call fcn.180133c8c
lea rcx, [0x1804a3d84]
call fcn.180133778
lea rdi, [0x1804a3dc8]
cmp byte [0x1804a3de1], 0
je 0x18003b943
xor eax, eax
movabs rdx, 0x18bbb0f7187a9df
nop dword [rax]
nop dword [rax + rax]
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x19
jb 0x18003b920
mov byte [0x1804a3de1], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
jmp 0x18003c307
mov byte [rsp + 0x50], 1
call fcn.18002bc20
movzx ecx, byte [rax + 0x208]
mov byte [rsp + 0x51], cl
call fcn.18002bc20
lea rbx, [rax + 0x1f8]
cmp qword [rbx + 0x18], 0x10
jb 0x18003b9b0
mov rbx, qword [rbx]
call fcn.18002bc20
mov r8, qword [rax + 0x208]
mov rdx, rbx
lea rcx, [rsp + 0x52]
call fcn.180135a90
call fcn.18002bc20
mov r14d, dword [rax + 0x208]
add r14d, 2
call fcn.18002bc20
movsxd rcx, r14d
movzx eax, byte [rax + 0x228]
mov byte [rsp + rcx + 0x50], al
inc r14d
call fcn.18002bc20
lea rbx, [rax + 0x218]
cmp qword [rbx + 0x18], 0x10
jb 0x18003ba05
mov rbx, qword [rbx]
call fcn.18002bc20
movsxd rcx, r14d
lea rdx, [rsp + 0x50]
add rcx, rdx
mov r8, qword [rax + 0x228]
mov rdx, rbx
call fcn.180135a90
call fcn.18002bc20
mov ebx, dword [rax + 0x228]
add ebx, r14d
mov r8d, ebx
lea rdx, [rsp + 0x50]
mov ecx, esi
call fcn.18003a790
cmp ebx, eax
je 0x18003bb70
mov r9d, 2
mov r8d, 0x148
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dffd0]
mov word [rsp + 0x40], 0x3dc5
mov r8d, dword [0x1804a2b54]
mov rcx, qword gs:[0x58]
mov r9d, 0x76c8
mov rcx, qword [rcx + r8*8]
mov edx, dword [r9 + rcx]
cmp dword [0x1804a3dc4], edx
jle 0x18003bae5
lea rcx, [0x1804a3dc4]
call fcn.1801337d8
cmp dword [0x1804a3dc4], 0xffffffff
jne 0x18003bae5
mov byte [0x1804a3d6a], 1
movups xmmword [0x1804a3d58], xmm6
movzx eax, word [rsp + 0x40]
mov word [0x1804a3d68], ax
lea rcx, [0x18016a110]
call fcn.180133c8c
lea rcx, [0x1804a3dc4]
call fcn.180133778
lea rdi, [0x1804a3d58]
cmp byte [0x1804a3d6a], 0
je 0x18003bb24
xor eax, eax
movabs rdx, 0x99ddbbbd81853deb
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x12
jb 0x18003bb01
mov byte [0x1804a3d6a], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
jmp 0x18003c327
mov r8d, 2
lea rdx, [rsp + 0x50]
mov ecx, esi
call fcn.18003ab80
cmp eax, 2
je 0x18003bcaf
mov r9d, 2
mov r8d, 0x14c
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dff40]
mov r8d, dword [0x1804a2b54]
mov rcx, qword gs:[0x58]
mov r9d, 0x76c8
mov rcx, qword [rcx + r8*8]
mov edx, dword [r9 + rcx]
cmp dword [0x1804a3de8], edx
jle 0x18003bc16
lea rcx, [0x1804a3de8]
call fcn.1801337d8
cmp dword [0x1804a3de8], 0xffffffff
jne 0x18003bc16
mov word [0x1804a3e18], 0x1ed
movups xmmword [0x1804a3e08], xmm6
lea rcx, [0x18016a0f0]
call fcn.180133c8c
lea rcx, [0x1804a3de8]
call fcn.180133778
lea rdi, [0x1804a3e08]
cmp byte [0x1804a3e19], 0
je 0x18003bc63
xor eax, eax
movabs rdx, 0x9b61c343431f89ed
nop dword [rax]
nop word [rax + rax]
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x11
jb 0x18003bc40
mov byte [0x1804a3e19], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
jmp 0x18003c327
cmp byte [rsp + 0x50], 1
je 0x18003bdf6
mov r9d, 2
mov r8d, 0x150
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dff50]
mov dword [rsp + 0x40], 0x6e69c4b9
mov dword [rsp + 0x44], 0xd6f39546
mov word [rsp + 0x48], 0x85bb
mov edx, dword [0x1804a2b54]
mov rax, qword gs:[0x58]
mov r9d, 0x76c8
mov rax, qword [rax + rdx*8]
mov ecx, dword [r9 + rax]
cmp dword [0x1804a3d88], ecx
jle 0x18003bd75
lea rcx, [0x1804a3d88]
call fcn.1801337d8
cmp dword [0x1804a3d88], 0xffffffff
jne 0x18003bd75
mov word [0x1804a3dc2], 0x107
movups xmmword [0x1804a3da8], xmm6
movsd xmm0, qword [rsp + 0x40]
movsd qword [0x1804a3db8], xmm0
movzx eax, word [rsp + 0x48]
mov word [0x1804a3dc0], ax
lea rcx, [0x18016a0c0]
call fcn.180133c8c
lea rcx, [0x1804a3d88]
call fcn.180133778
lea rdi, [0x1804a3da8]
cmp byte [0x1804a3dc3], 0
je 0x18003bdb4
xor eax, eax
movabs rdx, 0xb385b5231d07abc9
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x1b
jb 0x18003bd91
mov byte [0x1804a3dc3], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
jmp 0x18003c307
cmp byte [rsp + 0x51], 0
je 0x18003bf7d
mov r9d, 2
mov r8d, 0x154
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dffa0]
mov dword [rsp + 0x40], 0xab758eb
mov dword [rsp + 0x44], 0xed28f318
mov dword [rsp + 0x48], 0xaac43fa
mov word [rsp + 0x4c], 0xd353
mov edx, dword [0x1804a2b54]
mov rax, qword gs:[0x58]
mov r9d, 0x76c8
mov rax, qword [rax + rdx*8]
mov ecx, dword [r9 + rax]
cmp dword [0x1804a3cf8], ecx
jle 0x18003becc
lea rcx, [0x1804a3cf8]
call fcn.1801337d8
cmp dword [0x1804a3cf8], 0xffffffff
jne 0x18003becc
mov byte [0x1804a3d1e], 1
movups xmmword [0x1804a3d00], xmm6
movsd xmm0, qword [rsp + 0x40]
movsd qword [0x1804a3d10], xmm0
mov eax, dword [rsp + 0x48]
mov dword [0x1804a3d18], eax
movzx eax, word [rsp + 0x4c]
mov word [0x1804a3d1c], ax
lea rcx, [0x18016a090]
call fcn.180133c8c
lea rcx, [0x1804a3cf8]
call fcn.180133778
lea r14, [0x1804a3d00]
cmp byte [0x1804a3d1e], 0
je 0x18003bf3b
xor eax, eax
mov r11d, 1
sub r11, r14
movabs rdi, 0x995bd37d79d9379b
nop dword [rax]
nop word [rax + rax]
lea r10, [rax + r14]
movzx ecx, al
and cl, 7
shl cl, 3
mov r8, rdi
shr r8, cl
xor byte [r10], r8b
lea ecx, [r11 + r10]
and cl, 7
shl cl, 3
mov r8, rdi
shr r8, cl
xor byte [r10 + 1], r8b
add rax, 2
cmp rax, 0x1e
jb 0x18003bf00
mov byte [0x1804a3d1e], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, r14
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
jmp 0x18003c307
mov word [rsp + 0x50], 0x105
mov byte [rsp + 0x52], 0
cmp word [rdi], 2
jne 0x18003bfab
mov byte [rsp + 0x53], 1
mov eax, dword [rdi + 4]
mov dword [rsp + 0x54], eax
movzx eax, word [rdi + 2]
mov word [rsp + 0x58], ax
mov ebx, 0xa
jmp 0x18003bfc7
mov byte [rsp + 0x53], 4
movups xmm0, xmmword [rdi + 8]
movups xmmword [rsp + 0x54], xmm0
movzx eax, word [rdi + 2]
mov word [rsp + 0x64], ax
mov ebx, reloc.WS2_32.dll_shutdown
mov r8d, ebx
lea rdx, [rsp + 0x50]
mov ecx, esi
call fcn.18003a790
cmp ebx, eax
je 0x18003c10f
mov r9d, 2
mov r8d, 0x169
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dfd60]
mov word [rsp + 0x40], 0x8f0b
mov r8d, dword [0x1804a2b54]
mov rcx, qword gs:[0x58]
mov r9d, 0x76c8
mov rcx, qword [rcx + r8*8]
mov edx, dword [r9 + rcx]
cmp dword [0x1804a3d20], edx
jle 0x18003c07a
lea rcx, [0x1804a3d20]
call fcn.1801337d8
cmp dword [0x1804a3d20], 0xffffffff
jne 0x18003c07a
mov byte [0x1804a3e02], 1
movups xmmword [0x1804a3df0], xmm6
movzx eax, word [rsp + 0x40]
mov word [0x1804a3e00], ax
lea rcx, [0x18016a070]
call fcn.180133c8c
lea rcx, [0x1804a3d20]
call fcn.180133778
lea rdi, [0x1804a3df0]
cmp byte [0x1804a3e02], 0
je 0x18003c0c3
xor eax, eax
movabs rdx, 0x73cf27a9b94b8f25
nop word [rax + rax]
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x12
jb 0x18003c0a0
mov byte [0x1804a3e02], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
jmp 0x18003c327
mov r8d, ebx
lea rdx, [rsp + 0x50]
mov ecx, esi
call fcn.18003ab80
cmp ebx, eax
je 0x18003c23f
mov r9d, 2
mov r8d, 0x16d
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
mov rbx, rax
movdqa xmm6, xmmword [0x1801dfd30]
mov r8d, dword [0x1804a2b54]
mov rcx, qword gs:[0x58]
mov r9d, 0x76c8
mov rcx, qword [rcx + r8*8]
mov edx, dword [r9 + rcx]
cmp dword [0x1804a3d54], edx
jle 0x18003c1b1
lea rcx, [0x1804a3d54]
call fcn.1801337d8
cmp dword [0x1804a3d54], 0xffffffff
jne 0x18003c1b1
mov word [0x1804a3d80], 0x139
movups xmmword [0x1804a3d70], xmm6
lea rcx, [0x18016a050]
call fcn.180133c8c
lea rcx, [0x1804a3d54]
call fcn.180133778
lea rdi, [0x1804a3d70]
cmp byte [0x1804a3d81], 0
je 0x18003c1f3
xor eax, eax
movabs rdx, 0x3fe1bd3b95499f39
nop dword [rax]
movzx ecx, al
and cl, 7
shl cl, 3
mov r9, rdx
shr r9, cl
xor byte [rax + rdi], r9b
inc rax
cmp rax, 0x11
jb 0x18003c1d0
mov byte [0x1804a3d81], 0
mov rcx, rbx
call fcn.18007cf90
mov rcx, rax
mov rdx, rdi
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
jmp 0x18003c327
cmp byte [rsp + 0x50], 5
jne 0x18003c2a8
cmp byte [rsp + 0x51], 0
jne 0x18003c2a8
mov r8d, 0x175
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e00
nop
mov rcx, rax
call fcn.18007cf90
mov rcx, rax
lea rdx, str.connect_success__
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
xor eax, eax
jmp 0x18003c32c
mov r9d, 2
mov r8d, 0x171
lea rdx, str.C:UsersAdministratorDesktopDevelopementJenkinsWorkspaceworkspaceNetshield3rdGen_WindowsNetshield3rdGen_Prod_Windows_x64_Releasehookmyfunction.cpp
lea rcx, [rsp + 0x20]
call fcn.180076e30
nop
mov rcx, rax
call fcn.18007cf90
mov rcx, rax
lea rdx, str.socks5_data_format_invalid:_server_disallows_this_connection
call fcn.18002e990
mov rcx, rax
lea rdx, [0x1801df90c]
call fcn.18002e990
mov rcx, rax
mov rdx, rsi
call fcn.18003d500
mov rcx, rax
lea rdx, [0x1801df840]
call fcn.18002e990
nop
lea rcx, [rsp + 0x20]
call fcn.180077220
mov ecx, 0x271d
call qword [sym.imp.WS2_32.dll_WSASetLastError]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.180133630
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret