Function at 0x1800306a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x520
mov qword [rax - 0x3f8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov rax, qword [0x180001b10]
xor rax, rsp
mov qword [rsp + 0x518], rax
xor esi, esi
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
call fcn.1800812b0
test al, al
je 0x1800307e6
mov byte [rsp + 0x490], 0xed
mov byte [rsp + 0x491], 0xef
mov byte [rsp + 0x492], 0xb9
mov byte [rsp + 0x493], 0xb2
mov byte [rsp + 0x494], 0xaf
mov byte [rsp + 0x495], 0xa8
mov qword [rsp + 0x496], 0xdb
mov word [rsp + 0x49e], si
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x4a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x4b0], xmm1
movdqa xmmword [rsp + 0x4c0], xmm0
movdqa xmmword [rsp + 0x4d0], xmm1
movdqa xmmword [rsp + 0x4e0], xmm0
movdqa xmmword [rsp + 0x4f0], xmm1
movdqa xmmword [rsp + 0x500], xmm0
mov r9b, 0xdb
lea r8, [0x1800f9c70]
lea edx, [rsi + 7]
lea rcx, [rsp + 0x490]
call fcn.18005f0b0
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x60], rsi
mov byte [rsp + 0x50], sil
cmp byte [rax], sil
jne 0x1800307b5
mov r8d, esi
jmp 0x1800307ca
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800307c0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.18002fac0
lea rbx, [rsp + 0x50]
mov edi, 1
jmp 0x1800308e5
mov byte [rsp + 0x310], 0xc6
mov byte [rsp + 0x311], 0xc7
mov byte [rsp + 0x312], 0x97
mov byte [rsp + 0x313], 0x9c
mov byte [rsp + 0x314], 0x81
mov byte [rsp + 0x315], 0x86
mov qword [rsp + 0x316], 0xf5
mov word [rsp + 0x31e], 0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x320], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x330], xmm1
movdqa xmmword [rsp + 0x340], xmm0
movdqa xmmword [rsp + 0x350], xmm1
movdqa xmmword [rsp + 0x360], xmm0
movdqa xmmword [rsp + 0x370], xmm1
movdqa xmmword [rsp + 0x380], xmm0
mov r9b, 0xf5
lea r8, [0x1800f9b98]
mov edx, 7
lea rcx, [rsp + 0x310]
call fcn.18005f0b0
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rsi
mov byte [rsp + 0x70], 0
cmp byte [rax], 0
jne 0x1800308c0
mov r8, rsi
jmp 0x1800308ce
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1800308c4
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.18002fac0
lea rbx, [rsp + 0x70]
mov edi, 2
mov dword [rsp + 0x20], edi
mov qword [rsp + 0x250], rsi
mov qword [rsp + 0x258], rsi
mov qword [rsp + 0x258], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x250], rsi
mov byte [rsp + 0x240], 0
cmp qword [rbx + 0x18], 0x10
jae 0x180030939
mov r8, qword [rbx + 0x10]
inc r8
jne 0x180030927
jmp 0x180030937
mov rdx, rbx
lea rcx, [rsp + 0x240]
call fcn.1800b8d70
jmp 0x180030961
lea rax, [rsp + 0x240]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x240]
mov qword [rsp + 0x40], rax
mov rax, qword [rbx]
mov qword [rsp + 0x240], rax
mov qword [rbx], rsi
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x250], rax
mov rax, qword [rbx + 0x18]
mov qword [rsp + 0x258], rax
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x10], rsi
cmp qword [rbx + 0x18], 0x10
jb 0x18003098f
mov rbx, qword [rbx]
mov byte [rbx], 0
test dil, 2
je 0x1800309cd
and edi, 0xfffffffd
mov dword [rsp + 0x20], edi
cmp qword [rsp + 0x88], 0x10
jb 0x1800309b4
mov rcx, qword [rsp + 0x70]
call fcn.1800958e0
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rsi
mov byte [rsp + 0x70], 0
test dil, 1
je 0x1800309ff
and edi, 0xfffffffe
mov dword [rsp + 0x20], edi
cmp qword [rsp + 0x68], 0x10
jb 0x1800309ec
mov rcx, qword [rsp + 0x50]
call fcn.1800958e0
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x60], rsi
mov byte [rsp + 0x50], 0
xor eax, eax
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], rax
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x280], rax
lea rcx, [rsp + 0xf0]
call fcn.180083bb0
mov rbx, rax
mov byte [rsp + 0x290], 0x63
mov byte [rsp + 0x291], 0x65
mov byte [rsp + 0x292], 0x60
mov byte [rsp + 0x293], 0x60
mov byte [rsp + 0x294], 0x7f
mov byte [rsp + 0x295], 0x62
mov byte [rsp + 0x296], 0x64
mov byte [rsp + 0x297], 0x75
mov byte [rsp + 0x298], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x299], 0x4f
mov byte [rsp + 0x29a], WSACleanup
mov byte [rsp + 0x29b], 0x62
mov byte [rsp + 0x29c], 0x7f
mov byte [rsp + 0x29d], 0x67
mov byte [rsp + 0x29e], 0x63
mov byte [rsp + 0x29f], 0x75
mov byte [rsp + 0x2a0], 0x62
mov byte [rsp + 0x2a1], 0x4f
mov byte [rsp + 0x2a2], 0x66
mov byte [rsp + 0x2a3], 0x75
mov byte [rsp + 0x2a4], 0x62
mov byte [rsp + 0x2a5], 0x63
mov byte [rsp + 0x2a6], 0x79
mov byte [rsp + 0x2a7], 0x7f
mov byte [rsp + 0x2a8], 0x7e
mov byte [rsp + 0x2a9], 0x63
mov byte [rsp + 0x2aa], 0x3e
mov byte [rsp + 0x2ab], 0x35
mov byte [rsp + 0x2ac], 0x21
mov byte [rsp + 0x2ad], 0x35
mov byte [rsp + 0x2ae], 0x3e
mov byte [rsp + 0x2af], 0x35
mov byte [rsp + 0x2b0], 0x22
mov byte [rsp + 0x2b1], 0x35
mov qword [rsp + 0x2b2], setsockopt
mov dword [rsp + 0x2ba], 0
mov word [rsp + 0x2be], 0
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x2c0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x2d0], xmm1
movdqa xmmword [rsp + 0x2e0], xmm0
movdqa xmmword [rsp + 0x2f0], xmm1
movdqa xmmword [rsp + 0x300], xmm0
mov r9b, select
lea r8, [0x1800f9c00]
mov edx, 0x23
lea rcx, [rsp + 0x290]
call fcn.18005f0b0
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.18001d6c0
nop
mov rdx, rbx
mov rcx, rax
call fcn.18001d800
mov rcx, rax
lea rdx, [rsp + 0x240]
call fcn.18001d800
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.18001d880
nop
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], rsi
mov byte [rsp + 0x90], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.18002ffe0
nop
mov byte [rsp + 0xb0], 0x2e
cmp qword [rsp + 0xa8], 0x10
jb 0x180030c57
mov rax, qword [rsp + 0x90]
jmp 0x180030c5f
lea rax, [rsp + 0x90]
mov qword [rsp + 0xb8], rax
call fcn.18005f9a0
mov rcx, rax
lea rdx, [rsp + 0x90]
call fcn.180032d10
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.180018600
nop
cmp qword [rsp + 0xa8], 0x10
jb 0x180030ca5
mov rcx, qword [rsp + 0x90]
call fcn.1800958e0
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], rsi
mov byte [rsp + 0x90], 0
cmp qword [rsp + 0x128], 0x10
jb 0x180030cd9
mov rcx, qword [rsp + 0x110]
call fcn.1800958e0
mov qword [rsp + 0x128], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x120], rsi
mov byte [rsp + 0x110], 0
lea rcx, [rsp + 0x140]
call fcn.18001b4f0
nop
cmp qword [rsp + 0x108], 0x10
jb 0x180030d1b
mov rcx, qword [rsp + 0xf0]
call fcn.1800958e0
mov qword [rsp + 0x108], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x100], rsi
mov byte [rsp + 0xf0], 0
mov dword [rsp + 0x38], esi
xor ebx, ebx
mov byte [rsp + 0x410], 0x47
mov byte [rsp + 0x411], 0x43
mov byte [rsp + 0x412], 0x44
mov qword [rsp + 0x413], 0x2a
mov dword [rsp + 0x41b], ebx
mov byte [rsp + 0x41f], bl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x420], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x430], xmm1
movdqa xmmword [rsp + 0x440], xmm0
movdqa xmmword [rsp + 0x450], xmm1
movdqa xmmword [rsp + 0x460], xmm0
movdqa xmmword [rsp + 0x470], xmm1
movdqa xmmword [rsp + 0x480], xmm0
mov r9b, 0x2a
lea r8, [0x1800f9b60]
lea edx, [rbx + 4]
lea rcx, [rsp + 0x410]
call fcn.18005f0b0
movzx r9d, bl
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.180018910
nop
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x260]
call fcn.180033ee0
nop
cmp byte [rax], bl
je 0x180030e08
add rax, 4
jmp 0x180030e0d
lea rax, [rsp + 0x38]
mov edi, dword [rax]
cmp byte [rsp + 0x40], 0
je 0x180030e1b
mov byte [rsp + 0x40], 0
cmp qword [rsp + 0xd8], 0x10
jb 0x180030e33
mov rcx, qword [rsp + 0xc0]
call fcn.1800958e0
mov qword [rsp + 0xd8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xd0], rsi
mov byte [rsp + 0xc0], 0
mov dword [rsp + 0x48], 0xffffffff
xor ebx, ebx
mov byte [rsp + 0x390], 0x29
mov byte [rsp + 0x391], 0x25
mov byte [rsp + 0x392], 0x3c
mov qword [rsp + 0x393], 0x44
mov dword [rsp + 0x39b], ebx
mov byte [rsp + 0x39f], bl
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x3a0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x3b0], xmm1
movdqa xmmword [rsp + 0x3c0], xmm0
movdqa xmmword [rsp + 0x3d0], xmm1
movdqa xmmword [rsp + 0x3e0], xmm0
movdqa xmmword [rsp + 0x3f0], xmm1
movdqa xmmword [rsp + 0x400], xmm0
mov r9b, 0x44
lea r8, [0x1800f9d18]
lea edx, [rbx + 4]
lea rcx, [rsp + 0x390]
call fcn.18005f0b0
movzx r9d, bl
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.180018910
nop
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x260]
call fcn.180033ee0
nop
cmp byte [rax], bl
je 0x180030f24
add rax, 4
jmp 0x180030f29
lea rax, [rsp + 0x48]
mov ebx, dword [rax]
cmp byte [rsp + 0x28], 0
je 0x180030f37
mov byte [rsp + 0x28], 0
lea rcx, [rsp + 0xc0]
call fcn.1800129a0
lea rcx, [rsp + 0x28]
call fcn.180083a20
mov eax, dword [rax + 0xc]
cmp eax, edi
jb 0x180030f9f
cmp eax, ebx
ja 0x180030f9f
lea rcx, [rsp + 0x260]
call fcn.180018760
nop
cmp qword [rsp + 0x258], 0x10
jb 0x180030f7f
mov rcx, qword [rsp + 0x240]
call fcn.1800958e0
mov qword [rsp + 0x258], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x250], rsi
mov byte [rsp + 0x240], 0
mov al, 1
jmp 0x180030ff7
lea rcx, [rsp + 0x260]
call fcn.180018760
nop
cmp qword [rsp + 0x258], 0x10
jb 0x180030fc5
mov rcx, qword [rsp + 0x240]
call fcn.1800958e0
mov qword [rsp + 0x258], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x250], rsi
mov byte [rsp + 0x240], 0
xor edx, edx
mov ecx, 0x2719
call fcn.180032ed0
xor al, al
jmp 0x180030ff7
mov rcx, qword [rsp + 0x518]
xor rcx, rsp
call fcn.1800b8aa0
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret