Function at 0x180052380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov r13, rcx
xor esi, esi
mov dword [rbp + 0xa0], esi
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x68], rbx
mov byte [rbp - 0x80], sil
mov qword [rbp - 0x70], select
xor eax, eax
mov qword [rbp - 0x80], rax
mov dword [rbp - 0x78], eax
mov word [rbp - 0x74], ax
lea rdx, [rbp - 0x80]
mov byte [rbp + 0x98], 3
movzx eax, byte [rbp + 0x98]
lea rdi, [0x1800f07c0]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xc], al
mov byte [rbp + 0x98], 0x22
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xb], al
mov byte [rbp + 0x98], 0x2c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xa], al
mov byte [rbp + 0x98], 7
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 9], al
mov byte [rbp + 0x98], 0x3f
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 8], al
mov byte [rbp + 0x98], 3
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 7], al
mov byte [rbp + 0x98], 3
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 6], al
mov byte [rbp + 0x98], 0x50
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 5], al
mov byte [rbp + 0x98], 8
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 4], al
mov byte [rbp + 0x98], 0x5c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 3], al
mov byte [rbp + 0x98], 3
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 2], al
mov byte [rbp + 0x98], 0x50
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 1], al
mov byte [rbp + 0x98], 0x8b
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx], al
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rbx
mov byte [rbp - 0x60], sil
lea ecx, [rsi + 0x20]
call fcn.18008a528
mov qword [rbp - 0x50], select
mov qword [rbp - 0x48], 0x1f
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
mov word [rax + 0x10], cx
mov qword [rbp - 0x60], rax
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r8, rax
mov byte [rbp + 0x98], 3
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 0x10], al
mov byte [rbp + 0x98], 0x22
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 0xf], al
mov byte [rbp + 0x98], 0x2c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 0xe], al
mov byte [rbp + 0x98], 7
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 0xd], al
mov byte [rbp + 0x98], 0x88
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 0xc], al
mov byte [rbp + 0x98], 0x9c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 0xb], al
mov byte [rbp + 0x98], 0x5c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 0xa], al
mov byte [rbp + 0x98], 0x8f
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 9], al
mov byte [rbp + 0x98], 0x9c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 8], al
mov byte [rbp + 0x98], 0x5c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 7], al
mov byte [rbp + 0x98], 0x88
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 6], al
mov byte [rbp + 0x98], 0xa
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 5], al
mov byte [rbp + 0x98], 0xad
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 4], al
mov byte [rbp + 0x98], 0x5c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 3], al
mov byte [rbp + 0x98], 0xe4
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 2], al
mov byte [rbp + 0x98], 0x5c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8 + 1], al
mov byte [rbp + 0x98], 0x9c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [r8], al
mov qword [rbp - 0x40], rsi
movdqa xmm0, xmmword [0x180102460]
movdqa xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], cl
xor r8d, r8d
mov edx, ebx
lea rcx, [rbp - 0x40]
call fcn.18000e960
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
mov byte [rbp + 0x98], 3
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xe], al
mov byte [rbp + 0x98], 0x22
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xd], al
mov byte [rbp + 0x98], 0x2c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xc], al
mov byte [rbp + 0x98], 7
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xb], al
mov byte [rbp + 0x98], 0x9c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 0xa], al
mov byte [rbp + 0x98], 0x5c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 9], al
mov byte [rbp + 0x98], 0xf9
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 8], al
mov byte [rbp + 0x98], 0x3f
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 7], al
mov byte [rbp + 0x98], 0xad
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 6], al
mov byte [rbp + 0x98], 0x3f
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 5], al
mov byte [rbp + 0x98], 0x22
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 4], al
mov byte [rbp + 0x98], 0x5c
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 3], al
mov byte [rbp + 0x98], 0xa
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 2], al
mov byte [rbp + 0x98], 0x50
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx + 1], al
mov byte [rbp + 0x98], 0x88
movzx eax, byte [rbp + 0x98]
movzx eax, byte [rax + rdi]
mov byte [rdx], al
lea r14, [rbp - 0x80]
mov esi, dword [rbp + 0xa0]
nop dword [rax]
nop word [rax + rax]
lea rax, [rsp + 0x50]
mov qword [rbp + 0xa8], rax
mov rdi, qword [r14 + 0x10]
mov r15, r14
cmp qword [r14 + 0x18], 0x10
jb 0x18005283d
mov r15, qword [r14]
call fcn.180088ad4
mov r12d, eax
xor ebx, ebx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], bx
or esi, 4
mov dword [rbp + 0xa0], esi
test rdi, rdi
je 0x1800528ec
cmp rdi, 0x7fffffff
ja 0x180052bd4
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, edi
mov rdx, r15
mov ecx, eax
call fcn.180088afc
mov rbx, rax
mov qword [rbp + 0x98], rax
shr rax, 0x20
test eax, eax
jne 0x180052bc8
xor r8d, r8d
movsxd rdx, ebx
lea rcx, [rsp + 0x50]
call fcn.18002b2b0
lea r9, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae r9, qword [rsp + 0x50]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, r15
mov ecx, r12d
call fcn.180088afc
mov qword [rbp + 0x98], rax
shr rax, 0x20
test eax, eax
jne 0x180052bbc
xor ebx, ebx
and esi, 0xfffffffb
or esi, 3
mov rdx, r13
lea rcx, [rbp + 0x28]
call fcn.18002b530
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x28]
call fcn.180028370
mov rdx, rax
lea rcx, [rbp]
call fcn.18002b530
or esi, 8
lea rcx, [rbp + 0x28]
call fcn.1800287c0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180052968
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180052963
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180052bda
call fcn.18008a564
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], bx
mov dword [rsp + 0x70], ebx
lea r12, [0x180118f20]
mov qword [rsp + 0x78], r12
lea r8, [rsp + 0x70]
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.180029330
mov ecx, dword [rax]
test ecx, ecx
je 0x180052b4f
mov dword [rsp + 0x70], ebx
mov qword [rsp + 0x78], r12
cmp ecx, 1
je 0x180052b56
lea rdx, [rbp]
lea rcx, [rbp - 0x20]
call fcn.18005b270
nop
cmp byte [rbp - 8], 0
jne 0x1800529d2
jmp 0x180052b56
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbx
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.18002b230
mov rdi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x48]
mov byte [rdi + rax], 2
inc rax
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp]
call fcn.1800285b0
nop
movzx ebx, word [rsp + 0x60]
mov rdx, qword [rsp + 0x38]
sub rdx, rdi
add rdx, 2
lea rcx, [rsp + 0x30]
call fcn.18002b230
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x48]
mov word [rdx + rax], bx
add rax, 2
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x38]
sub rcx, rdx
mov rdx, qword [rsp + 0x60]
add rdx, rcx
lea rcx, [rsp + 0x30]
call fcn.18002b230
lea rdx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae rdx, qword [rsp + 0x50]
mov r15, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x48]
lea rcx, [r15 + rbx]
mov r8, qword [rsp + 0x60]
call fcn.18008c6d0
add rbx, qword [rsp + 0x60]
mov qword [rsp + 0x48], rbx
mov r8, qword [rsp + 0x68]
cmp r8, 0x10
jb 0x180052ab0
inc r8
mov rdx, qword [rsp + 0x50]
call fcn.18000cb90
mov rdi, qword [rbp - 0x18]
sub rdi, qword [rbp - 0x20]
mov rdx, qword [rsp + 0x38]
sub rdx, r15
add rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.18002b230
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x30]
add rcx, rbx
mov r8, rdi
mov rdx, qword [rbp - 0x20]
call fcn.18008c6d0
add rbx, rdi
mov qword [rsp + 0x48], rbx
xor r9d, r9d
lea r8, [rsp + 0x30]
mov dl, inet_ntoa
lea rcx, [0x180118fd0]
call fcn.180059d90
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x180052b3e
mov rdx, qword [rsp + 0x40]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180052b38
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180052ba7
call fcn.18008a564
nop
cmp byte [rbp - 8], 0
je 0x180052b56
lea rcx, [rbp - 0x20]
call fcn.18002c060
jmp 0x180052b56
cmp dword [rsp + 0x70], 0
jne 0x180052bad
lea rcx, [rbp]
call fcn.1800287c0
add r14, 0x20
lea rax, [rbp - 0x20]
cmp r14, rax
jne 0x180052820
lea r9, [fcn.18000c740]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rbp - 0x80]
call fcn.18008a928
nop
xor al, al
mov rbx, qword [rsp + 0x190]
add rsp, 0x150
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180090f98
nop
lea r8, [rbp]
lea rdx, [rsp + 0x70]
call fcn.18002e930
nop
mov ecx, dword [rbp + 0x9c]
call fcn.180028190
int3
mov ecx, dword [rbp + 0x9c]
call fcn.180028190
int3
call fcn.180027ee0
nop
call fcn.180090f98
int3