Function at 0x1800af490
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
mov rax, qword [0x1801d11f0]
xor rax, rsp
mov qword [rbp + 0x4f], rax
call fcn.1800274a0
mov rax, qword [0x1801ebaf8]
xor r8d, r8d
mov esi, reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x3b], 0
xor ebx, ebx
mov dword [rbp + 0x17], 0x7c6c7652
mov dword [rbp + 0x1b], 0x7e73737a
mov r9d, esi
mov rcx, qword [rax + 0x3eb0]
movss xmm1, dword [rax + 0x382c]
mov eax, reloc.WS2_32.dll_ntohl
mulss xmm1, dword [0x1801b2fe0]
mov dword [rbp + 0x1f], 0x6a707a71
movss xmm0, dword [rcx + 0x20]
mov ecx, ebx
mov word [rbp + 0x23], 0x1f6c
subss xmm0, xmm1
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x29], r8
mov dword [rbp - 0x21], r8d
mov word [rbp - 0x1d], r8w
movss dword [rbp + 0x37], xmm0
mov byte [rbp - 0x1b], r8b
cmp rcx, 0xe
jae 0x1800afd43
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x1f
cmp rax, rcx
jbe 0x1800afd3d
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0xe
jge 0x1800af576
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800af535
cmp qword [rbp - 0x11], 0x10
lea rdx, [rbp - 0x29]
mov r8, qword [rbp + 0x37]
cmovae rdx, qword [rbp - 0x29]
mov qword [rsp + 0xd0], rdi
call fcn.180014490
lea rcx, [rbp - 0x29]
call fcn.18000da30
xor r8d, r8d
mov dword [rbp + 0x37], 0x21302513
mov edi, 0xa
mov dword [rbp + 0x3b], 0x36252936
mov eax, edi
mov word [rbp + 0x3f], 0x442f
mov qword [rbp - 0x19], rax
mov r9, rsi
mov qword [rbp - 0x11], rsi
mov rcx, rbx
mov qword [rbp - 0x29], r8
mov word [rbp - 0x21], r8w
mov byte [rbp - 0x1f], bl
cmp rcx, rdi
jae 0x1800afdbb
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x44
cmp rax, rcx
jbe 0x1800afdb5
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, rdi
jge 0x1800af615
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800af5d6
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
lea rdx, [0x1801d2033]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 0x29]
xor r9d, r9d
xor r8d, r8d
call fcn.180044ef0
lea rcx, [rbp - 0x29]
call fcn.18000da30
mov eax, 6
mov dword [rbp + 0x37], 0x2f2a2f1c
mov qword [rbp + 7], rax
mov r8, rbx
mov word [rbp + 0x3b], 0x4e3c
mov r9, rsi
mov qword [rbp - 9], rbx
mov rcx, rbx
mov qword [rbp + 0xf], rsi
nop dword [rax]
cmp rcx, 6
jae 0x1800afdaf
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x4e
cmp rax, rcx
jbe 0x1800afda9
cmp r9, 0x10
lea rax, [rbp - 9]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 6
jge 0x1800af6b1
mov r9, qword [rbp + 0xf]
mov rax, qword [rbp + 7]
mov r8, qword [rbp - 9]
jmp 0x1800af670
cmp qword [rbp + 0xf], 0x10
lea rcx, [rbp - 9]
lea rdx, [0x1801d2a7a]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 9]
xor r9d, r9d
xor r8d, r8d
call fcn.180044ef0
lea rcx, [rbp - 9]
call fcn.18000da30
movdqa xmm0, xmmword [0x1801b46f0]
lea rcx, [rbp - 9]
mov r9d, reloc.WS2_32.dll_sendto
mov dword [rbp + 0x27], 0x22554d46
mov edx, r9d
mov qword [rbp - 9], rbx
xor r8d, r8d
mov qword [rbp + 7], rbx
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0xf], rsi
mov byte [rsp + 0x20], bl
call fcn.180016700
mov rcx, rbx
cmp rbx, 0x14
jae 0x1800afda3
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x22
cmp qword [rbp + 7], rcx
jbe 0x1800afd9d
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp - 9]
cmovae rax, qword [rbp - 9]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x14
jl 0x1800af71e
cmp qword [rbp + 0xf], 0x10
lea r10, [rbp - 9]
mov rax, rdi
mov dword [rbp + 0x37], 0x707c6150
cmovae r10, qword [rbp - 9]
mov r9, rsi
xor r8d, r8d
mov dword [rbp + 0x3b], 0x747d5024
mov qword [rbp - 0x29], r8
mov rcx, rbx
mov word [rbp - 0x21], r8w
mov word [rbp + 0x3f], 0x461
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rax
mov byte [rbp - 0x1f], bl
cmp rcx, rdi
jae 0x1800afd97
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 4
cmp rax, rcx
jbe 0x1800afd9d
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, rdi
jge 0x1800af7d1
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800af792
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
mov r8d, ebx
mov rdx, r10
cmovae rcx, qword [rbp - 0x29]
cmp byte [r10], bl
je 0x1800af80c
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], bl
jne 0x1800af7f7
inc rdx
inc r8d
add rdx, rax
cmp byte [rdx], bl
jne 0x1800af7f0
mov dword [rsp + 0x28], 2
lea rdx, [0x1801d2abc]
mov r9, r10
mov dword [rsp + 0x20], r8d
call fcn.180046de0
lea rcx, [rbp - 0x29]
call fcn.18000da30
lea rcx, [rbp - 9]
call fcn.18000da30
xor r8d, r8d
mov dword [rbp + 0x37], 0x68746958
mov qword [rbp - 0x29], r8
mov r9, rsi
mov word [rbp - 0x21], r8w
mov rcx, rbx
mov dword [rbp + 0x3b], 0x727a7368
mov word [rbp + 0x3f], 0x1b69
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rdi
mov byte [rbp - 0x1f], bl
nop dword [rax + rax]
cmp rcx, 0xa
jae 0x1800afd91
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x1b
cmp rdi, rcx
jbe 0x1800afd8b
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xa
jge 0x1800af8b1
mov r9, qword [rbp - 0x11]
mov rdi, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800af870
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
lea r8, [0x1801e4c78]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 0x29]
lea rdx, [0x1801ebe8c]
xor r9d, r9d
call fcn.180044ef0
lea rcx, [rbp - 0x29]
call fcn.18000da30
movdqa xmm0, xmmword [0x1801b3a10]
lea rcx, [rbp - 9]
mov r9d, reloc.WLDAP32.dll_Ordinal_26
mov dword [rbp + 0x27], 0x397a081b
mov edx, r9d
mov dword [rbp + 0x2b], 0x16190813
xor r8d, r8d
mov word [rbp + 0x2f], 0x7a1f
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp - 9], rbx
mov qword [rbp + 7], rbx
mov qword [rbp + 0xf], rsi
mov byte [rsp + 0x20], bl
call fcn.180016700
mov rcx, rbx
cmp rbx, 0x1a
jae 0x1800afd85
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x7a
cmp qword [rbp + 7], rcx
jbe 0x1800afd7f
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp - 9]
cmovae rax, qword [rbp - 9]
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0x1a
jl 0x1800af92f
cmp qword [rbp + 0xf], 0x10
lea r10, [rbp - 9]
mov rax, rsi
mov dword [rbp + 0x17], 0x3b273a0b
cmovae r10, qword [rbp - 9]
mov r9, rsi
xor r8d, r8d
mov dword [rbp + 0x1b], 0x2129203b
mov qword [rbp - 0x29], r8
mov rcx, rbx
mov qword [rbp - 0x21], r8
mov dword [rbp + 0x1f], 0x311c683a
mov word [rbp + 0x23], 0x2d38
mov byte [rbp + 0x25], 0x48
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rax
nop word [rax + rax]
cmp rcx, rsi
jae 0x1800afd79
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x48
cmp rax, rcx
jbe 0x1800afd7f
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, rsi
jge 0x1800af9ef
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800af9b0
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
mov r8d, ebx
mov rdx, r10
cmovae rcx, qword [rbp - 0x29]
cmp byte [r10], bl
je 0x1800afa2c
nop dword [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], bl
jne 0x1800afa17
inc rdx
inc r8d
add rdx, rax
cmp byte [rdx], bl
jne 0x1800afa10
mov dword [rsp + 0x28], 3
lea rdx, [0x1801ebbcc]
mov r9, r10
mov dword [rsp + 0x20], r8d
call fcn.180046de0
lea rcx, [rbp - 0x29]
call fcn.18000da30
lea rcx, [rbp - 9]
call fcn.18000da30
mov eax, 5
mov dword [rbp + 0x37], 0x607f6c56
mov qword [rbp + 7], rax
mov r8, rbx
mov byte [rbp + 0x3b], 5
mov r9, rsi
mov qword [rbp - 9], rbx
mov rcx, rbx
mov qword [rbp + 0xf], rsi
nop
cmp rcx, 5
jae 0x1800afd73
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 5
cmp rax, rcx
jbe 0x1800afd6d
cmp r9, 0x10
lea rax, [rbp - 9]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 5
jge 0x1800afac1
mov r9, qword [rbp + 0xf]
mov rax, qword [rbp + 7]
mov r8, qword [rbp - 9]
jmp 0x1800afa80
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp + 0x47]
movss xmm0, dword [0x1801b312c]
lea rcx, [rbp - 9]
cmovae rcx, qword [rbp - 9]
lea rdi, str._.3f
mov qword [rsp + 0x28], rdi
lea r9, [rbp + 0x37]
lea r8, [0x1801e4c98]
movss dword [rbp + 0x47], xmm0
mov edx, 8
mov dword [rbp + 0x37], ebx
mov qword [rsp + 0x20], rax
call fcn.1800475d0
lea rcx, [rbp - 9]
call fcn.18000da30
movdqa xmm0, xmmword [0x1801b4d20]
lea rcx, [rbp - 9]
mov r9d, reloc.WS2_32.dll_sendto
mov dword [rbp + 0x27], 0x44120b02
mov edx, r9d
mov qword [rbp - 9], rbx
xor r8d, r8d
mov qword [rbp + 7], rbx
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0xf], rsi
mov byte [rsp + 0x20], bl
call fcn.180016700
mov rcx, rbx
cmp rbx, 0x14
jae 0x1800afd67
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x44
cmp qword [rbp + 7], rcx
jbe 0x1800afd61
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp - 9]
cmovae rax, qword [rbp - 9]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x14
jl 0x1800afb52
cmp qword [rbp + 0xf], 0x10
lea rcx, [rbp - 9]
lea rdx, [0x1801ebb99]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 9]
xor r9d, r9d
xor r8d, r8d
call fcn.180044ef0
lea rcx, [rbp - 9]
call fcn.18000da30
mov dword [rbp + 0x47], 0x5a0c151c
mov r8, rbx
mov eax, dword [rbp + 0x47]
mov r9, rsi
mov dword [rbp + 0x37], eax
mov rcx, rbx
mov eax, 4
mov qword [rbp - 9], rbx
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rsi
nop dword [rax + rax]
cmp rcx, 4
jae 0x1800afd5b
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x5a
cmp rax, rcx
jbe 0x1800afd55
cmp r9, 0x10
lea rax, [rbp - 9]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 4
jge 0x1800afc21
mov r9, qword [rbp + 0xf]
mov rax, qword [rbp + 7]
mov r8, qword [rbp - 9]
jmp 0x1800afbe0
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp + 0x37]
movss xmm0, dword [0x1801b30f0]
lea rcx, [rbp - 9]
cmovae rcx, qword [rbp - 9]
lea r9, [rbp + 0x47]
mov qword [rsp + 0x28], rdi
lea r8, [0x1801e4ba4]
mov edx, 8
movss dword [rbp + 0x37], xmm0
mov dword [rbp + 0x47], ebx
mov qword [rsp + 0x20], rax
call fcn.1800475d0
lea rcx, [rbp - 9]
call fcn.18000da30
xor edx, edx
mov dword [rbp + 0x37], 0x2a313a12
mov eax, ntohl
mov qword [rbp - 0x29], rdx
mov qword [rbp - 0x19], rax
mov dword [rbp - 0x21], edx
mov dword [rbp + 0x3b], 0x33303c7f
mov word [rbp + 0x3f], 0x2d30
mov byte [rbp + 0x41], 0x5f
mov qword [rbp - 0x11], rsi
nop dword [rax]
cmp rbx, 0xb
jae 0x1800afd4f
movzx ecx, byte [rbp + rbx + 0x37]
xor cl, 0x5f
cmp rax, rbx
jbe 0x1800afd49
cmp rsi, 0x10
lea rax, [rbp - 0x29]
cmovae rax, rdx
mov byte [rax + rbx], cl
inc rbx
cmp rbx, 0xb
jge 0x1800afce1
mov rsi, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov rdx, qword [rbp - 0x29]
jmp 0x1800afca0
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x1801e4d10]
cmovae rcx, qword [rbp - 0x29]
call fcn.18004d6e0
lea rcx, [rbp - 0x29]
call fcn.18000da30
call fcn.180014e00
call fcn.1800275d0
mov rdi, qword [rsp + 0xd0]
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.180146940
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
call fcn.1800c26d0
int3
call fcn.1800c22c0
int3
add rcx, 8
jmp 0x1800af490