Function at 0x18002a6f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
push rdi
push r14
push r15
sub rsp, 0xe90
mov qword [rax - 0xda8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x180067008]
xor rax, rsp
mov qword [rsp + 0xe80], rax
mov r14, rdx
mov qword [rsp + 0xf0], rdx
xor edi, edi
mov dword [rsp + 0xf8], edi
mov dword [rsp + 0xda0], 0x9aee9de4
mov dword [rsp + 0xda4], 0xb5db92ff
mov dword [rsp + 0xda8], 0x8686bcd3
mov r9d, reloc.WS2_32.dll_inet_addr
mov ecx, r9d
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rsp + rcx + 0xd9f]
xor byte [rsp + rcx + 0xda0], al
dec rcx
test rcx, rcx
jg 0x18002a770
movzx r11d, byte [rsp + 0xda0]
xor r11b, 0xb7
mov byte [rsp + 0xda0], r11b
mov dword [rsp + 0xdb0], 0x691d7b14
mov dword [rsp + 0xdb4], 0x680d7f1e
mov dword [rsp + 0xdb8], 0x46294f21
mov word [rsp + 0xdbc], 0x7c7c
mov esi, recv
mov ecx, esi
nop
movzx eax, byte [rsp + rcx + 0xdaf]
xor byte [rsp + rcx + 0xdb0], al
dec rcx
test rcx, rcx
jg 0x18002a7d0
xor byte [rsp + 0xdb0], 0x47
mov dword [rsp + 0xdc0], 0xf093fc8e
mov dword [rsp + 0xdc4], 0xdc95e695
mov dword [rsp + 0xdc8], 0x81bbd4b2
mov byte [rsp + 0xdcc], 0x81
lea r8, [rsp + 0xdcb]
mov r10d, 2
nop word [rax + rax]
movzx ecx, byte [r8]
xor byte [r8 + 1], cl
movzx eax, byte [r8 - 1]
xor al, cl
mov byte [r8], al
movzx eax, byte [r8 - 2]
xor byte [r8 - 1], al
movzx eax, byte [r8 - 3]
xor byte [r8 - 2], al
movzx eax, byte [r8 - 4]
xor byte [r8 - 3], al
movzx eax, byte [r8 - 5]
xor byte [r8 - 4], al
lea r8, [r8 - 6]
sub r10, 1
jne 0x18002a830
xor byte [rsp + 0xdc0], 0xde
mov dword [rsp + 0xe52], 0x203a55
mov word [rsp + 0xe50], 0x5043
mov dword [rsp + 0xe45], 0x203a79
mov dword [rsp + 0xe41], 0x726f6d65
mov byte [rsp + 0xe40], 0x4d
mov dword [rsp + 0xe36], 0x203a70
mov dword [rsp + 0xe32], 0x496c6163
mov word [rsp + 0xe30], 0x6f4c
mov dword [rsp + 0xe5e], 0x203a63
mov word [rsp + 0xe5c], 0x614d
movdqa xmm0, xmmword [0x18005a110]
movdqu xmmword [rsp + 0xe68], xmm0
mov byte [rsp + 0xe78], 0x5c
lea r8, [rsp + 0xe77]
mov r10d, 4
nop word [rax + rax]
movzx eax, byte [r8]
xor byte [r8 + 1], al
xor al, byte [r8 - 1]
mov byte [r8], al
movzx eax, byte [r8 - 2]
xor byte [r8 - 1], al
movzx eax, byte [r8 - 3]
xor byte [r8 - 2], al
lea r8, [r8 - 4]
sub r10, 1
jne 0x18002a910
xor byte [rsp + 0xe68], 0x43
mov dword [rsp + 0xe00], 0xa5d5a6cf
mov dword [rsp + 0xe04], 0x9fd1a8c9
mov dword [rsp + 0xe08], 0xccf693fe
mov word [rsp + 0xe0c], 0xecec
mov rcx, rsi
movzx eax, byte [rsp + rcx + 0xdff]
xor byte [rsp + rcx + 0xe00], al
dec rcx
test rcx, rcx
jg 0x18002a971
xor byte [rsp + 0xe00], 0x8b
mov dword [rsp + 0x60], 0x8de183f6
mov dword [rsp + 0x64], 0x9aff97e4
mov dword [rsp + 0x68], 0xf2f2d2e8
nop dword [rax + rax]
movzx eax, byte [rsp + r9 + 0x5f]
xor byte [rsp + r9 + 0x60], al
dec r9
test r9, r9
jg 0x18002a9b0
mov dword [rsp + 0xdf0], 0x3f4b3856
mov dword [rsp + 0xdf4], 0xa5e325e
mov dword [rsp + 0xdf8], 0x516b0e63
mov word [rsp + 0xdfc], 0x7171
mov rcx, rsi
movzx eax, byte [rsp + rcx + 0xdef]
xor byte [rsp + rcx + 0xdf0], al
dec rcx
test rcx, rcx
jg 0x18002a9f1
xor byte [rsp + 0xdf0], 0x1f
mov qword [rsp + 0x2a0], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x298], rdi
mov byte [rsp + 0x288], 0
test r11b, r11b
jne 0x18002aa36
mov r8, rdi
jmp 0x18002aa4c
lea rax, [rsp + 0xda0]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18002aa42
lea rdx, [rsp + 0xda0]
lea rcx, [rsp + 0x288]
call fcn.1800020b0
nop
mov qword [rsp + 0x240], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x238], rdi
mov byte [rsp + 0x228], 0
cmp byte [rsp + 0xdb0], 0
jne 0x18002aa8d
mov r8, rdi
jmp 0x18002aaaa
lea rax, [rsp + 0xdb0]
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002aaa0
lea rdx, [rsp + 0xdb0]
lea rcx, [rsp + 0x228]
call fcn.1800020b0
nop
mov qword [rsp + 0x260], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x258], rdi
mov byte [rsp + 0x248], 0
cmp byte [rsp + 0xdc0], 0
jne 0x18002aaeb
mov r8, rdi
jmp 0x18002ab0a
lea rax, [rsp + 0xdc0]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18002ab00
lea rdx, [rsp + 0xdc0]
lea rcx, [rsp + 0x248]
call fcn.1800020b0
nop
mov qword [rsp + 0x128], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x120], rdi
mov byte [rsp + 0x110], 0
mov r8d, 2
lea rdx, [0x180059eb8]
lea rcx, [rsp + 0x110]
call fcn.1800020b0
nop
lea rcx, [rsp + 0x20]
call fcn.180008880
nop
mov r8, rax
lea rdx, [rsp + 0xe50]
lea rcx, [rsp + 0x2a8]
call fcn.180006900
nop
mov rax, qword [rsp + 0x38]
cmp rax, 0x10
jb 0x18002abd3
inc rax
mov rcx, qword [rsp + 0x20]
cmp rax, 0x1000
jb 0x18002abce
test cl, 0x1f
je 0x18002aba1
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002abb0
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002abbf
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002abcb
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x40]
call fcn.180008ad0
nop
mov r8, rax
lea rdx, [rsp + 0xe40]
lea rcx, [rsp + 0x2c8]
call fcn.180006900
nop
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
jb 0x18002ac62
inc rax
mov rcx, qword [rsp + 0x40]
cmp rax, 0x1000
jb 0x18002ac5d
test cl, 0x1f
je 0x18002ac30
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002ac3f
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002ac4e
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002ac5a
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x50], rdi
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x20]
call fcn.180008cf0
nop
mov r8, rax
lea rdx, [rsp + 0xe30]
lea rcx, [rsp + 0x2e8]
call fcn.180006900
nop
mov rax, qword [rsp + 0x38]
cmp rax, 0x10
jb 0x18002acf1
inc rax
mov rcx, qword [rsp + 0x20]
cmp rax, 0x1000
jb 0x18002acec
test cl, 0x1f
je 0x18002acbf
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002acce
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002acdd
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002ace9
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x40]
call fcn.180008fa0
nop
mov r8, rax
lea rdx, [rsp + 0xe5c]
lea rcx, [rsp + 0x308]
call fcn.180006900
nop
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
jb 0x18002ad80
inc rax
mov rcx, qword [rsp + 0x40]
cmp rax, 0x1000
jb 0x18002ad7b
test cl, 0x1f
je 0x18002ad4e
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002ad5d
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002ad6c
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002ad78
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x50], rdi
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x20]
call fcn.180007e70
nop
mov r8, rax
lea rdx, [rsp + 0xe68]
lea rcx, [rsp + 0x348]
call fcn.180006900
nop
mov rax, qword [rsp + 0x38]
cmp rax, 0x10
jb 0x18002ae0f
inc rax
mov rcx, qword [rsp + 0x20]
cmp rax, 0x1000
jb 0x18002ae0a
test cl, 0x1f
je 0x18002addd
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002adec
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002adfb
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002ae07
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x20], 0
lea r8, [rsp + 0x348]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x208]
call fcn.180006bb0
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180006b60
nop
lea r8, [rsp + 0x2a8]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.180006b60
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.180006b60
nop
lea r8, [rsp + 0x2c8]
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.180006b60
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.180006b60
nop
lea r8, [rsp + 0x308]
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.180006b60
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.180006b60
nop
lea r8, [rsp + 0x2e8]
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.180006b60
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180006b60
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x288]
call fcn.180006290
nop
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
jb 0x18002af8b
inc rax
mov rcx, qword [rsp + 0x40]
cmp rax, 0x1000
jb 0x18002af86
test cl, 0x1f
je 0x18002af59
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002af68
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002af77
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002af83
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x50], rdi
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x200]
cmp rax, 0x10
jb 0x18002affc
inc rax
mov rcx, qword [rsp + 0x1e8]
cmp rax, 0x1000
jb 0x18002aff7
test cl, 0x1f
je 0x18002afca
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002afd9
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002afe8
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002aff4
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x200], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x1f8], rdi
mov byte [rsp + 0x1e8], 0
mov rax, qword [rsp + 0x1b8]
cmp rax, 0x10
jb 0x18002b076
inc rax
mov rcx, qword [rsp + 0x1a0]
cmp rax, 0x1000
jb 0x18002b071
test cl, 0x1f
je 0x18002b044
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b053
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b062
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b06e
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x1b8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x1b0], rdi
mov byte [rsp + 0x1a0], 0
mov rax, qword [rsp + 0x148]
cmp rax, 0x10
jb 0x18002b0f0
inc rax
mov rcx, qword [rsp + 0x130]
cmp rax, 0x1000
jb 0x18002b0eb
test cl, 0x1f
je 0x18002b0be
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b0cd
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b0dc
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b0e8
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x148], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x140], rdi
mov byte [rsp + 0x130], 0
mov rax, qword [rsp + 0xe8]
cmp rax, 0x10
jb 0x18002b16a
inc rax
mov rcx, qword [rsp + 0xd0]
cmp rax, 0x1000
jb 0x18002b165
test cl, 0x1f
je 0x18002b138
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b147
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b156
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b162
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xe8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xe0], rdi
mov byte [rsp + 0xd0], 0
mov rax, qword [rsp + 0x168]
cmp rax, 0x10
jb 0x18002b1e4
inc rax
mov rcx, qword [rsp + 0x150]
cmp rax, 0x1000
jb 0x18002b1df
test cl, 0x1f
je 0x18002b1b2
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b1c1
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b1d0
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b1dc
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x168], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x160], rdi
mov byte [rsp + 0x150], 0
mov rax, qword [rsp + 0xc8]
cmp rax, 0x10
jb 0x18002b25e
inc rax
mov rcx, qword [rsp + 0xb0]
cmp rax, 0x1000
jb 0x18002b259
test cl, 0x1f
je 0x18002b22c
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b23b
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b24a
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b256
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xc8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xc0], rdi
mov byte [rsp + 0xb0], 0
mov rax, qword [rsp + 0xa8]
cmp rax, 0x10
jb 0x18002b2d8
inc rax
mov rcx, qword [rsp + 0x90]
cmp rax, 0x1000
jb 0x18002b2d3
test cl, 0x1f
je 0x18002b2a6
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b2b5
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b2c4
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b2d0
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], 0
mov rax, qword [rsp + 0x88]
cmp rax, 0x10
jb 0x18002b34f
inc rax
mov rcx, qword [rsp + 0x70]
cmp rax, 0x1000
jb 0x18002b34a
test cl, 0x1f
je 0x18002b31d
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b32c
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b33b
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b347
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rdi
mov byte [rsp + 0x70], 0
mov rax, qword [rsp + 0x220]
cmp rax, 0x10
jb 0x18002b3c6
inc rax
mov rcx, qword [rsp + 0x208]
cmp rax, 0x1000
jb 0x18002b3c1
test cl, 0x1f
je 0x18002b394
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b3a3
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b3b2
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b3be
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
xor eax, eax
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x1c8], rdi
call fcn.18002cc00
mov qword [rsp + 0x1c0], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], rdi
xor eax, eax
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rax
lea rcx, [rsp + 0x1c0]
call fcn.18002e350
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.18002cd00
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x228]
call fcn.180006290
mov r9, qword [rsp + 0x190]
mov rbx, qword [r9]
movabs r15, 0x7fffffffffffffff
movzx eax, word [0x180058944]
nop dword [rax]
cmp rbx, r9
je 0x18002c04b
lea rdx, [rbx + 0x40]
lea r8, [rsp + 0x370]
mov ecx, socket
nop word [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [r8], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r8 + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [r8 + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [r8 + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [r8 + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [r8 + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [r8 + 0x60], xmm0
lea r8, [r8 + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [r8 - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub rcx, 1
jne 0x18002b4a0
movups xmm0, xmmword [rdx]
movups xmmword [r8], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r8 + 0x10], xmm1
mov rcx, qword [rdx + 0x20]
mov qword [r8 + 0x20], rcx
mov ecx, dword [rdx + 0x28]
mov dword [r8 + 0x28], ecx
cmp word [rsp + 0x988], ax
je 0x18002bfef
cmp word [rsp + 0xb94], ax
je 0x18002bfef
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x40], di
cmp word [rsp + 0x578], 0
jne 0x18002b558
mov r8, rdi
jmp 0x18002b56f
lea rax, [rsp + 0x578]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18002b564
lea rdx, [rsp + 0x578]
lea rcx, [rsp + 0x40]
call fcn.180005ff0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x90]
call fcn.180033090
nop
mov r8, rax
lea rdx, [rsp + 0xe00]
lea rcx, [rsp + 0x70]
call fcn.180006900
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x268]
call fcn.180006b60
nop
mov rax, qword [rsp + 0x88]
cmp rax, 0x10
jb 0x18002b61f
inc rax
mov rcx, qword [rsp + 0x70]
cmp rax, 0x1000
jb 0x18002b61a
test cl, 0x1f
je 0x18002b5ed
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b5fc
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b60b
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b617
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rdi
mov byte [rsp + 0x70], 0
mov rax, qword [rsp + 0xa8]
cmp rax, 0x10
jb 0x18002b696
inc rax
mov rcx, qword [rsp + 0x90]
cmp rax, 0x1000
jb 0x18002b691
test cl, 0x1f
je 0x18002b664
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b673
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b682
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b68e
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], 0
mov rax, qword [rsp + 0x58]
cmp rax, 8
jb 0x18002b71a
inc rax
mov rcx, qword [rsp + 0x40]
cmp rax, r15
jbe 0x18002b6d0
call fcn.18003835c
int3
add rax, rax
cmp rax, 0x1000
jb 0x18002b715
test byte [rsp + 0x40], 0x1f
je 0x18002b6e8
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b6f7
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b706
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b712
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x40], di
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rdi
mov word [rsp + 0x20], di
cmp word [rsp + 0x780], 0
jne 0x18002b750
mov r8, rdi
jmp 0x18002b76b
lea rax, [rsp + 0x780]
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18002b760
lea rdx, [rsp + 0x780]
lea rcx, [rsp + 0x20]
call fcn.180005ff0
nop
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x150]
call fcn.180033090
nop
mov r8, rax
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0xb0]
call fcn.18002cca0
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.180006b60
nop
mov rax, qword [rsp + 0xc8]
cmp rax, 0x10
jb 0x18002b821
inc rax
mov rcx, qword [rsp + 0xb0]
cmp rax, 0x1000
jb 0x18002b81c
test cl, 0x1f
je 0x18002b7ef
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b7fe
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b80d
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b819
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xc8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xc0], rdi
mov byte [rsp + 0xb0], 0
mov rax, qword [rsp + 0x168]
cmp rax, 0x10
jb 0x18002b89b
inc rax
mov rcx, qword [rsp + 0x150]
cmp rax, 0x1000
jb 0x18002b896
test cl, 0x1f
je 0x18002b869
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b878
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b887
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b893
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x168], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x160], rdi
mov byte [rsp + 0x150], 0
mov rax, qword [rsp + 0x38]
cmp rax, 8
jb 0x18002b91f
inc rax
mov rcx, qword [rsp + 0x20]
cmp rax, r15
jbe 0x18002b8d5
call fcn.18003835c
int3
add rax, rax
cmp rax, 0x1000
jb 0x18002b91a
test byte [rsp + 0x20], 0x1f
je 0x18002b8ed
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b8fc
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002b90b
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002b917
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rdi
mov word [rsp + 0x20], di
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x40], di
cmp word [rsp + 0x988], 0
jne 0x18002b955
mov r8, rdi
jmp 0x18002b96c
lea rax, [rsp + 0x988]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18002b961
lea rdx, [rsp + 0x988]
lea rcx, [rsp + 0x40]
call fcn.180005ff0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x90]
call fcn.180033090
nop
mov r8, rax
lea rdx, [rsp + 0xdf0]
lea rcx, [rsp + 0x70]
call fcn.180006900
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.180006b60
nop
mov rax, qword [rsp + 0x88]
cmp rax, 0x10
jb 0x18002ba1c
inc rax
mov rcx, qword [rsp + 0x70]
cmp rax, 0x1000
jb 0x18002ba17
test cl, 0x1f
je 0x18002b9ea
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002b9f9
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002ba08
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002ba14
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rdi
mov byte [rsp + 0x70], 0
mov rax, qword [rsp + 0xa8]
cmp rax, 0x10
jb 0x18002ba93
inc rax
mov rcx, qword [rsp + 0x90]
cmp rax, 0x1000
jb 0x18002ba8e
test cl, 0x1f
je 0x18002ba61
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002ba70
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002ba7f
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002ba8b
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], 0
mov rax, qword [rsp + 0x58]
cmp rax, 8
jb 0x18002bb17
inc rax
mov rcx, qword [rsp + 0x40]
cmp rax, r15
jbe 0x18002bacd
call fcn.18003835c
int3
add rax, rax
cmp rax, 0x1000
jb 0x18002bb12
test byte [rsp + 0x40], 0x1f
je 0x18002bae5
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002baf4
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002bb03
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002bb0f
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x58], 7
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x40], di
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rdi
mov word [rsp + 0x20], di
cmp word [rsp + 0xb94], 0
jne 0x18002bb4d
mov r8, rdi
jmp 0x18002bb6b
lea rax, [rsp + 0xb94]
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18002bb60
lea rdx, [rsp + 0xb94]
lea rcx, [rsp + 0x20]
call fcn.180005ff0
nop
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x150]
call fcn.180033090
nop
mov r8, rax
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xb0]
call fcn.18002cca0
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.180006b60
nop
mov rax, qword [rsp + 0xc8]
cmp rax, 0x10
jb 0x18002bc21
inc rax
mov rcx, qword [rsp + 0xb0]
cmp rax, 0x1000
jb 0x18002bc1c
test cl, 0x1f
je 0x18002bbef
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002bbfe
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002bc0d
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002bc19
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xc8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xc0], rdi
mov byte [rsp + 0xb0], 0
mov rax, qword [rsp + 0x168]
cmp rax, 0x10
jb 0x18002bc9b
inc rax
mov rcx, qword [rsp + 0x150]
cmp rax, 0x1000
jb 0x18002bc96
test cl, 0x1f
je 0x18002bc69
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002bc78
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002bc87
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002bc93
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x168], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x160], rdi
mov byte [rsp + 0x150], 0
mov rax, qword [rsp + 0x38]
cmp rax, 8
jb 0x18002bd1f
inc rax
mov rcx, qword [rsp + 0x20]
cmp rax, r15
jbe 0x18002bcd5
call fcn.18003835c
int3
add rax, rax
cmp rax, 0x1000
jb 0x18002bd1a
test byte [rsp + 0x20], 0x1f
je 0x18002bced
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002bcfc
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002bd0b
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002bd17
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x38], 7
mov qword [rsp + 0x30], rdi
mov word [rsp + 0x20], di
lea r8, [rsp + 0x1a0]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x208]
call fcn.180006bb0
nop
lea r8, [rsp + 0x130]
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.180006b60
nop
lea r8, [rsp + 0x1e8]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.180006b60
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180006b60
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x228]
call fcn.180006290
nop
mov rax, qword [rsp + 0x88]
cmp rax, 0x10
jb 0x18002be0b
inc rax
mov rcx, qword [rsp + 0x70]
cmp rax, 0x1000
jb 0x18002be06
test cl, 0x1f
je 0x18002bdd9
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002bde8
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002bdf7
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002be03
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rdi
mov byte [rsp + 0x70], 0
mov rax, qword [rsp + 0xa8]
cmp rax, 0x10
jb 0x18002be82
inc rax
mov rcx, qword [rsp + 0x90]
cmp rax, 0x1000
jb 0x18002be7d
test cl, 0x1f
je 0x18002be50
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002be5f
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002be6e
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002be7a
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xa8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xa0], rdi
mov byte [rsp + 0x90], 0
mov rax, qword [rsp + 0xe8]
cmp rax, 0x10
jb 0x18002befc
inc rax
mov rcx, qword [rsp + 0xd0]
cmp rax, 0x1000
jb 0x18002bef7
test cl, 0x1f
je 0x18002beca
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002bed9
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002bee8
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002bef4
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
mov qword [rsp + 0xe8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xe0], rdi
mov byte [rsp + 0xd0], 0
mov rax, qword [rsp + 0x220]
cmp rax, 0x10
jb 0x18002bf77
inc rax
mov rcx, qword [rsp + 0x208]
cmp rax, 0x1000
jb 0x18002bf71
test cl, 0x1f
je 0x18002bf44
call fcn.18003835c
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002bf53
call fcn.18003835c
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002bf62
call fcn.18003835c
int3
cmp rcx, 0x27
jbe 0x18002bf6e
call fcn.18003835c
int3
mov rcx, rax
call fcn.180033ed0
nop
mov rdx, qword [rsp + 0x148]
cmp rdx, 0x10
jb 0x18002bf9b
inc rdx
mov r8d, 1
mov rcx, qword [rsp + 0x130]
call fcn.180001290
mov qword [rsp + 0x148], reloc.WS2_32.dll_ntohs
xor edx, edx
lea rcx, [rsp + 0x130]
call fcn.1800023d0
nop
lea rcx, [rsp + 0x1e8]
call fcn.180001e50
nop
lea rcx, [rsp + 0x1a0]
call fcn.180001e50
nop
lea rcx, [rsp + 0x268]
call fcn.180001e50
movzx eax, word [0x180058944]
mov r9, qword [rsp + 0x190]
cmp byte [rbx + 0x19], 0
jne 0x18002b480
mov rcx, qword [rbx + 0x10]
cmp byte [rcx + 0x19], 0
jne 0x18002c024
mov rbx, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
jne 0x18002b480
mov rbx, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x18002c013
jmp 0x18002b480
mov rcx, qword [rbx + 8]
cmp byte [rcx + 0x19], 0
jne 0x18002c043
nop
cmp rbx, qword [rcx + 0x10]
jne 0x18002c043
mov rbx, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], 0
je 0x18002c030
mov rbx, rcx
jmp 0x18002b480
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x248]
call fcn.180005f70
lea rcx, [rsp + 0xe10]
call fcn.18002c450
lea rdx, [rsp + 0xe10]
call fcn.18002cfe0
nop
mov dword [rsp + 0xde0], 0x7417780a
mov dword [rsp + 0xde4], 0x5f116211
mov dword [rsp + 0xde8], 0xc36533e
mov word [rsp + 0xdec], 0x2c2c
mov rcx, rsi
nop dword [rax]
movzx eax, byte [rsp + rcx + 0xddf]
xor byte [rsp + rcx + 0xde0], al
dec rcx
test rcx, rcx
jg 0x18002c0b0
xor byte [rsp + 0xde0], 0x5a
mov dword [rsp + 0xdd0], 0x53305f2d
mov dword [rsp + 0xdd4], 0x66364536
mov dword [rsp + 0xdd8], 0x211b7307
mov word [rsp + 0xddc], 0x101
nop word [rax + rax]
movzx eax, byte [rsp + rsi + 0xdcf]
xor byte [rsp + rsi + 0xdd0], al
dec rsi
test rsi, rsi
jg 0x18002c100
xor byte [rsp + 0xdd0], 0x7d
nop
mov rax, qword [rsp + 0xe18]
sub rax, qword [rsp + 0xe10]
sar rax, 6
cmp rdi, rax
jae 0x18002c26f
mov rdx, rdi
lea rcx, [rsp + 0xe10]
call fcn.18002c460
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.1800108c0
nop
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0xde0]
lea rcx, [rsp + 0x70]
call fcn.180006960
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x208]
call fcn.180006b60
nop
lea rcx, [rsp + 0x70]
call fcn.180001e50
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0xdd0]
lea rcx, [rsp + 0x90]
call fcn.180006960
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x268]
call fcn.180006b60
nop
lea rcx, [rsp + 0x90]
call fcn.180001e50
lea r8, [rsp + 0x268]
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0xb0]
call fcn.180006bb0
nop
lea r8, [rsp + 0x110]
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.180006b60
nop
mov rdx, rax
lea rcx, [rsp + 0x248]
call fcn.180005f70
nop
lea rcx, [rsp + 0x70]
call fcn.180001e50
nop
lea rcx, [rsp + 0xb0]
call fcn.180001e50
nop
lea rcx, [rsp + 0x268]
call fcn.180001e50
nop
lea rcx, [rsp + 0x208]
call fcn.180001e50
nop
lea rcx, [rsp + 0x150]
call fcn.18000b3b0
inc rdi
jmp 0x18002c120
lea r8, [rsp + 0x228]
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x268]
call fcn.180006bb0
nop
lea r8, [rsp + 0x248]
mov rdx, rax
lea rcx, [rsp + 0x328]
call fcn.180006b60
nop
lea rcx, [rsp + 0x268]
call fcn.180001e50
lea rdx, [rsp + 0x328]
mov rcx, r14
call fcn.180005f80
lea rcx, [rsp + 0x328]
call fcn.180001e50
nop
lea rcx, [rsp + 0xe10]
call fcn.18002c4a0
nop
lea rcx, [rsp + 0x190]
call fcn.18002c420
nop
lea rcx, [rsp + 0x1c0]
call fcn.18002c3b0
nop
lea rcx, [rsp + 0x348]
call fcn.180001e50
nop
lea rcx, [rsp + 0x308]
call fcn.180001e50
nop
lea rcx, [rsp + 0x2e8]
call fcn.180001e50
nop
lea rcx, [rsp + 0x2c8]
call fcn.180001e50
nop
lea rcx, [rsp + 0x2a8]
call fcn.180001e50
nop
lea rcx, [rsp + 0x110]
call fcn.180001e50
nop
lea rcx, [rsp + 0x248]
call fcn.180001e50
nop
lea rcx, [rsp + 0x228]
call fcn.180001e50
nop
lea rcx, [rsp + 0x288]
call fcn.180001e50
mov rax, r14
jmp 0x18002c385
mov rcx, qword [rsp + 0xe80]
xor rcx, rsp
call fcn.180033e70
lea r11, [rsp + 0xe90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret