Function at 0x1800aea10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xc0
mov rax, qword [0x1801d01d0]
xor rax, rsp
mov qword [rbp + 0x4f], rax
call fcn.180026c60
mov rax, qword [0x1801eab28]
xor r8d, r8d
mov esi, reloc.WS2_32.dll_ntohs
mov dword [rbp + 0x3b], 0
xor ebx, ebx
mov dword [rbp + 0x17], 0x69796347
mov dword [rbp + 0x1b], 0x6b66666f
mov r9d, esi
mov rcx, qword [rax + 0x3eb0]
movss xmm1, dword [rax + 0x382c]
mov eax, reloc.WS2_32.dll_ntohl
mulss xmm1, dword [0x1801b2028]
mov dword [rbp + 0x1f], 0x7f656f64
movss xmm0, dword [rcx + 0x20]
mov ecx, ebx
mov word [rbp + 0x23], 0xa79
subss xmm0, xmm1
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x29], r8
mov dword [rbp - 0x21], r8d
mov word [rbp - 0x1d], r8w
movss dword [rbp + 0x37], xmm0
mov byte [rbp - 0x1b], r8b
cmp rcx, 0xe
jae 0x1800af2c3
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0xa
cmp rax, rcx
jbe 0x1800af2bd
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0xe
jge 0x1800aeaf6
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800aeab5
cmp qword [rbp - 0x11], 0x10
lea rdx, [rbp - 0x29]
mov r8, qword [rbp + 0x37]
cmovae rdx, qword [rbp - 0x29]
mov qword [rsp + 0xd0], rdi
call fcn.180013c50
lea rcx, [rbp - 0x29]
call fcn.18000d1d0
xor r8d, r8d
mov dword [rbp + 0x37], 0x43524771
mov edi, 0xa
mov dword [rbp + 0x3b], 0x54474b54
mov eax, edi
mov word [rbp + 0x3f], 0x264d
mov qword [rbp - 0x19], rax
mov r9, rsi
mov qword [rbp - 0x11], rsi
mov rcx, rbx
mov qword [rbp - 0x29], r8
mov word [rbp - 0x21], r8w
mov byte [rbp - 0x1f], bl
cmp rcx, rdi
jae 0x1800af33b
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x26
cmp rax, rcx
jbe 0x1800af335
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, rdi
jge 0x1800aeb95
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800aeb56
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
lea rdx, [0x1801d1033]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 0x29]
xor r9d, r9d
xor r8d, r8d
call fcn.1800446b0
lea rcx, [rbp - 0x29]
call fcn.18000d1d0
mov eax, 6
mov dword [rbp + 0x37], 0x3e3b3e0d
mov qword [rbp + 7], rax
mov r8, rbx
mov word [rbp + 0x3b], 0x5f2d
mov r9, rsi
mov qword [rbp - 9], rbx
mov rcx, rbx
mov qword [rbp + 0xf], rsi
nop dword [rax]
cmp rcx, 6
jae 0x1800af32f
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x5f
cmp rax, rcx
jbe 0x1800af329
cmp r9, 0x10
lea rax, [rbp - 9]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 6
jge 0x1800aec31
mov r9, qword [rbp + 0xf]
mov rax, qword [rbp + 7]
mov r8, qword [rbp - 9]
jmp 0x1800aebf0
cmp qword [rbp + 0xf], 0x10
lea rcx, [rbp - 9]
lea rdx, [0x1801d1a7a]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 9]
xor r9d, r9d
xor r8d, r8d
call fcn.1800446b0
lea rcx, [rbp - 9]
call fcn.18000d1d0
movdqa xmm0, xmmword [0x1801b2850]
lea rcx, [rbp - 9]
mov r9d, reloc.WS2_32.dll_sendto
mov dword [rbp + 0x27], 0x7c0b1318
mov edx, r9d
mov qword [rbp - 9], rbx
xor r8d, r8d
mov qword [rbp + 7], rbx
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0xf], rsi
mov byte [rsp + 0x20], bl
call fcn.180015ec0
mov rcx, rbx
cmp rbx, 0x14
jae 0x1800af323
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x7c
cmp qword [rbp + 7], rcx
jbe 0x1800af31d
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp - 9]
cmovae rax, qword [rbp - 9]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x14
jl 0x1800aec9e
cmp qword [rbp + 0xf], 0x10
lea r10, [rbp - 9]
mov rax, rdi
mov dword [rbp + 0x37], 0x38342918
cmovae r10, qword [rbp - 9]
mov r9, rsi
xor r8d, r8d
mov dword [rbp + 0x3b], 0x3c35186c
mov qword [rbp - 0x29], r8
mov rcx, rbx
mov word [rbp - 0x21], r8w
mov word [rbp + 0x3f], 0x4c29
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rax
mov byte [rbp - 0x1f], bl
cmp rcx, rdi
jae 0x1800af317
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x4c
cmp rax, rcx
jbe 0x1800af31d
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, rdi
jge 0x1800aed51
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800aed12
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
mov r8d, ebx
mov rdx, r10
cmovae rcx, qword [rbp - 0x29]
cmp byte [r10], bl
je 0x1800aed8c
nop word [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], bl
jne 0x1800aed77
inc rdx
inc r8d
add rdx, rax
cmp byte [rdx], bl
jne 0x1800aed70
mov dword [rsp + 0x28], 2
lea rdx, [0x1801d1aec]
mov r9, r10
mov dword [rsp + 0x20], r8d
call fcn.1800465a0
lea rcx, [rbp - 0x29]
call fcn.18000d1d0
lea rcx, [rbp - 9]
call fcn.18000d1d0
xor r8d, r8d
mov dword [rbp + 0x37], 0x5a465b6a
mov qword [rbp - 0x29], r8
mov r9, rsi
mov word [rbp - 0x21], r8w
mov rcx, rbx
mov dword [rbp + 0x3b], 0x4048415a
mov word [rbp + 0x3f], 0x295b
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rdi
mov byte [rbp - 0x1f], bl
nop dword [rax + rax]
cmp rcx, 0xa
jae 0x1800af311
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x29
cmp rdi, rcx
jbe 0x1800af30b
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0xa
jge 0x1800aee31
mov r9, qword [rbp - 0x11]
mov rdi, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800aedf0
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
lea r8, [0x1801e3ce0]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 0x29]
lea rdx, [0x1801eaecb]
xor r9d, r9d
call fcn.1800446b0
lea rcx, [rbp - 0x29]
call fcn.18000d1d0
movdqa xmm0, xmmword [0x1801b3840]
lea rcx, [rbp - 9]
mov r9d, reloc.WLDAP32.dll_Ordinal_26
mov dword [rbp + 0x27], 0x7b384a59
mov edx, r9d
mov dword [rbp + 0x2b], 0x545b4a51
xor r8d, r8d
mov word [rbp + 0x2f], 0x385d
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp - 9], rbx
mov qword [rbp + 7], rbx
mov qword [rbp + 0xf], rsi
mov byte [rsp + 0x20], bl
call fcn.180015ec0
mov rcx, rbx
cmp rbx, 0x1a
jae 0x1800af305
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x38
cmp qword [rbp + 7], rcx
jbe 0x1800af2ff
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp - 9]
cmovae rax, qword [rbp - 9]
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0x1a
jl 0x1800aeeaf
cmp qword [rbp + 0xf], 0x10
lea r10, [rbp - 9]
mov rax, rsi
mov dword [rbp + 0x17], 0x44584574
cmovae r10, qword [rbp - 9]
mov r9, rsi
xor r8d, r8d
mov dword [rbp + 0x1b], 0x5e565f44
mov qword [rbp - 0x29], r8
mov rcx, rbx
mov qword [rbp - 0x21], r8
mov dword [rbp + 0x1f], 0x4e631745
mov word [rbp + 0x23], 0x5247
mov byte [rbp + 0x25], gethostname
mov qword [rbp - 0x11], rsi
mov qword [rbp - 0x19], rax
nop word [rax + rax]
cmp rcx, rsi
jae 0x1800af2f9
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x37
cmp rax, rcx
jbe 0x1800af2ff
cmp r9, 0x10
lea rax, [rbp - 0x29]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, rsi
jge 0x1800aef6f
mov r9, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov r8, qword [rbp - 0x29]
jmp 0x1800aef30
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
mov r8d, ebx
mov rdx, r10
cmovae rcx, qword [rbp - 0x29]
cmp byte [r10], bl
je 0x1800aefac
nop dword [rax + rax]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rdx + rax], bl
jne 0x1800aef97
inc rdx
inc r8d
add rdx, rax
cmp byte [rdx], bl
jne 0x1800aef90
mov dword [rsp + 0x28], 3
lea rdx, [0x1801eaeb4]
mov r9, r10
mov dword [rsp + 0x20], r8d
call fcn.1800465a0
lea rcx, [rbp - 0x29]
call fcn.18000d1d0
lea rcx, [rbp - 9]
call fcn.18000d1d0
mov eax, 5
mov dword [rbp + 0x37], 0x100f1c26
mov qword [rbp + 7], rax
mov r8, rbx
mov byte [rbp + 0x3b], 0x75
mov r9, rsi
mov qword [rbp - 9], rbx
mov rcx, rbx
mov qword [rbp + 0xf], rsi
nop
cmp rcx, 5
jae 0x1800af2f3
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x75
cmp rax, rcx
jbe 0x1800af2ed
cmp r9, 0x10
lea rax, [rbp - 9]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 5
jge 0x1800af041
mov r9, qword [rbp + 0xf]
mov rax, qword [rbp + 7]
mov r8, qword [rbp - 9]
jmp 0x1800af000
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp + 0x47]
movss xmm0, dword [0x1801b2174]
lea rcx, [rbp - 9]
cmovae rcx, qword [rbp - 9]
lea rdi, str._.3f
mov qword [rsp + 0x28], rdi
lea r9, [rbp + 0x37]
lea r8, [0x1801e3be8]
movss dword [rbp + 0x47], xmm0
mov edx, 8
mov dword [rbp + 0x37], ebx
mov qword [rsp + 0x20], rax
call fcn.180046d90
lea rcx, [rbp - 9]
call fcn.18000d1d0
movdqa xmm0, xmmword [0x1801b2cd0]
lea rcx, [rbp - 9]
mov r9d, reloc.WS2_32.dll_sendto
mov dword [rbp + 0x27], 0x15435a53
mov edx, r9d
mov qword [rbp - 9], rbx
xor r8d, r8d
mov qword [rbp + 7], rbx
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp + 0xf], rsi
mov byte [rsp + 0x20], bl
call fcn.180015ec0
mov rcx, rbx
cmp rbx, 0x14
jae 0x1800af2e7
movzx edx, byte [rbp + rcx + 0x17]
xor dl, 0x15
cmp qword [rbp + 7], rcx
jbe 0x1800af2e1
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp - 9]
cmovae rax, qword [rbp - 9]
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 0x14
jl 0x1800af0d2
cmp qword [rbp + 0xf], 0x10
lea rcx, [rbp - 9]
lea rdx, [0x1801eae92]
mov byte [rsp + 0x20], bl
cmovae rcx, qword [rbp - 9]
xor r9d, r9d
xor r8d, r8d
call fcn.1800446b0
lea rcx, [rbp - 9]
call fcn.18000d1d0
mov dword [rbp + 0x47], 0x55031a13
mov r8, rbx
mov eax, dword [rbp + 0x47]
mov r9, rsi
mov dword [rbp + 0x37], eax
mov rcx, rbx
mov eax, 4
mov qword [rbp - 9], rbx
mov qword [rbp + 7], rax
mov qword [rbp + 0xf], rsi
nop dword [rax + rax]
cmp rcx, 4
jae 0x1800af2db
movzx edx, byte [rbp + rcx + 0x37]
xor dl, 0x55
cmp rax, rcx
jbe 0x1800af2d5
cmp r9, 0x10
lea rax, [rbp - 9]
cmovae rax, r8
mov byte [rax + rcx], dl
inc rcx
cmp rcx, 4
jge 0x1800af1a1
mov r9, qword [rbp + 0xf]
mov rax, qword [rbp + 7]
mov r8, qword [rbp - 9]
jmp 0x1800af160
cmp qword [rbp + 0xf], 0x10
lea rax, [rbp + 0x37]
movss xmm0, dword [0x1801b2138]
lea rcx, [rbp - 9]
cmovae rcx, qword [rbp - 9]
lea r9, [rbp + 0x47]
mov qword [rsp + 0x28], rdi
lea r8, [0x1801e3ba4]
mov edx, 8
movss dword [rbp + 0x37], xmm0
mov dword [rbp + 0x47], ebx
mov qword [rsp + 0x20], rax
call fcn.180046d90
lea rcx, [rbp - 9]
call fcn.18000d1d0
xor edx, edx
mov dword [rbp + 0x37], 0x5b404b63
mov eax, ntohl
mov qword [rbp - 0x29], rdx
mov qword [rbp - 0x19], rax
mov dword [rbp - 0x21], edx
mov dword [rbp + 0x3b], 0x42414d0e
mov word [rbp + 0x3f], 0x5c41
mov byte [rbp + 0x41], reloc.WLDAP32.dll_Ordinal_46
mov qword [rbp - 0x11], rsi
nop dword [rax]
cmp rbx, 0xb
jae 0x1800af2cf
movzx ecx, byte [rbp + rbx + 0x37]
xor cl, 0x2e
cmp rax, rbx
jbe 0x1800af2c9
cmp rsi, 0x10
lea rax, [rbp - 0x29]
cmovae rax, rdx
mov byte [rax + rbx], cl
inc rbx
cmp rbx, 0xb
jge 0x1800af261
mov rsi, qword [rbp - 0x11]
mov rax, qword [rbp - 0x19]
mov rdx, qword [rbp - 0x29]
jmp 0x1800af220
cmp qword [rbp - 0x11], 0x10
lea rcx, [rbp - 0x29]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x1801e3cf0]
cmovae rcx, qword [rbp - 0x29]
call fcn.18004cea0
lea rcx, [rbp - 0x29]
call fcn.18000d1d0
call fcn.1800145c0
call fcn.180026d90
mov rdi, qword [rsp + 0xd0]
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.1801455c0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
add rcx, 8
jmp 0x1800aea10