Function at 0x1800233d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xe0
mov rax, qword [0x180065c40]
xor rax, rsp
mov qword [rbp + 0x47], rax
cmp word [rcx + 0x188], 2
mov rbx, rcx
movups xmm0, xmmword [str.0123456789abcdef]
movzx eax, byte [0x180053918]
mov byte [rbp - 0x49], al
movups xmmword [rbp - 0x59], xmm0
je 0x1800236a8
movzx ecx, byte [rcx + 0x19b]
mov eax, ecx
mov byte [rbp - 0x38], 0x2e
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x36], 0x2e
mov byte [rbp - 0x34], 0x2e
mov byte [rbp - 0x32], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x39], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x19a]
mov byte [rbp - 0x37], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x30], 0x2e
mov byte [rbp - 0x2e], 0x2e
mov byte [rbp - 0x2c], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x35], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x199]
mov byte [rbp - 0x33], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x2a], 0x2e
mov byte [rbp - 0x28], 0x2e
mov byte [rbp - 0x26], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x31], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x198]
mov byte [rbp - 0x2f], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x24], 0x2e
mov byte [rbp - 0x22], 0x2e
mov byte [rbp - 0x20], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x2d], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x197]
mov byte [rbp - 0x2b], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x1e], 0x2e
mov byte [rbp - 0x1c], 0x2e
mov byte [rbp - 0x1a], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x29], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x196]
mov byte [rbp - 0x27], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x25], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x195]
mov byte [rbp - 0x23], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x21], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x194]
mov byte [rbp - 0x1f], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x1d], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x193]
mov byte [rbp - 0x1b], al
mov eax, ecx
mov byte [rbp - 0x18], 0x2e
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x16], 0x2e
lea rdx, str.ip6.arpa
mov byte [rbp - 0x14], 0x2e
mov byte [rbp - 0x12], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x19], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x192]
mov byte [rbp - 0x17], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0x10], 0x2e
mov byte [rbp - 0xe], 0x2e
mov byte [rbp - 0xc], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x15], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x191]
mov byte [rbp - 0x13], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 0xa], 0x2e
mov byte [rbp - 8], 0x2e
mov byte [rbp - 6], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0x11], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x190]
mov byte [rbp - 0xf], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp - 4], 0x2e
mov byte [rbp - 2], 0x2e
mov byte [rbp], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 0xd], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x18f]
mov byte [rbp - 0xb], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
mov byte [rbp + 2], 0x2e
mov byte [rbp + 4], 0x2e
mov byte [rbp + 6], 0x2e
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 9], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x18e]
mov byte [rbp - 7], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 5], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x18d]
mov byte [rbp - 3], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp - 1], al
movzx eax, byte [rbp + rcx - 0x59]
movzx ecx, byte [rbx + 0x18c]
mov byte [rbp + 1], al
mov eax, ecx
and eax, 0xf
shr rcx, 4
movzx eax, byte [rbp + rax - 0x59]
mov byte [rbp + 3], al
movzx eax, byte [rbp + rcx - 0x59]
lea rcx, [rbp + 7]
mov byte [rbp + 5], al
call sym.ProxyProtocol.dll_sprintf
jmp 0x1800236e9
mov ecx, dword [rcx + 0x18c]
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, eax
movzx r8d, al
shr ecx, 0x10
mov r10d, eax
movzx edx, cl
mov ecx, eax
shr ecx, 8
shr r10d, 0x18
mov dword [rsp + 0x28], r10d
movzx r9d, cl
lea rcx, [rbp - 0x39]
mov dword [rsp + 0x20], edx
lea rdx, str._u._u._u._u.in_addr.arpa
call sym.ProxyProtocol.dll_sprintf
movzx ecx, word [rbx + 0x188]
lea r8, [rbp - 0x59]
mov dword [rsp + 0x28], 1
lea rdx, [rbp - 0x39]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
call sym.ProxyProtocol.dll_udpresolve
test eax, eax
je 0x18002372f
mov eax, dword [rbx + 0x18c]
cmp eax, dword [rbp - 0x59]
jne 0x18002372f
xor ecx, ecx
mov eax, 3
cmp qword [rbx + 0x118], rcx
cmovne eax, ecx
jmp 0x180023734
mov eax, 3
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.180027290
mov rbx, qword [rsp + 0xf8]
add rsp, 0xe0
pop rbp
ret