Function at 0x18000efa0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x4c0]
sub rsp, 0x5c0
mov rax, qword [0x1801551e0]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
mov r15, rcx
mov qword [rbp - 0x68], rcx
xor r12d, r12d
mov dword [rsp + 0x70], r12d
movdqa xmm0, xmmword [0x180139650]
movdqu xmmword [rsp + 0x78], xmm0
mov dword [rbp - 0x78], 0x75776b23
mov word [rbp - 0x74], 0x100
mov ecx, r12d
nop
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 0x14
jb 0x18000f000
mov byte [rbp - 0x73], r12b
mov qword [rbp - 0x50], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], r12b
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x50]
call fcn.180040990
mov dword [rsp + 0x70], 6
movdqa xmm0, xmmword [0x180139640]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x686a207e
mov word [rsp + 0x64], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x66], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x15
jb 0x18000f070
mov byte [rsp + 0x66], 0
mov qword [rbp - 0x30], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x30]
call fcn.180040990
mov dword [rsp + 0x70], reloc.WLDAP32.dll_Ordinal_30
mov dword [rsp + 0x20], 0x30c9cf9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000f0d0
mov byte [rsp + 0x26], 0
mov qword [rbp - 0x10], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x10]
call fcn.180040990
mov dword [rsp + 0x70], 0x7e
mov dword [rsp + 0x28], 0x100cecc
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000f130
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x10], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x10]
call fcn.180040990
mov dword [rsp + 0x70], 0x1fe
movdqa xmm0, xmmword [0x180138720]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000f1a0
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x30], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.180040990
mov dword [rsp + 0x70], 0x7fe
movdqa xmm0, xmmword [0x180138d60]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000f220
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x50], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.180040990
mov dword [rsp + 0x70], 0x1ffe
mov dword [rsp + 0x20], 0x36cfcc9f
mov word [rsp + 0x24], Ordinal_50
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000f280
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x70], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x70]
call fcn.180040990
mov dword [rsp + 0x70], 0x7ffe
mov dword [rsp + 0x28], 0x100cecf
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000f2e0
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x90], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0x90], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x90]
call fcn.180040990
mov dword [rsp + 0x70], 0x1fffe
movdqa xmm0, xmmword [0x180138730]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000f360
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0xb0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0xc0], xmm0
mov byte [rbp + 0xb0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.180040990
mov dword [rsp + 0x70], 0x7fffe
movdqa xmm0, xmmword [0x180138d70]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000f3e0
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0xd0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0xe0], xmm0
mov byte [rbp + 0xd0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xd0]
call fcn.180040990
mov dword [rsp + 0x70], 0x1ffffe
mov dword [rsp + 0x20], 0x38cecc9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000f450
mov byte [rsp + 0x26], 0
mov qword [rbp + 0xf0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xf0]
call fcn.180040990
mov dword [rsp + 0x70], 0x7ffffe
mov dword [rsp + 0x28], 0x100cece
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000f4b0
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x110], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x110], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x110]
call fcn.180040990
mov dword [rsp + 0x70], 0x1fffffe
movdqa xmm0, xmmword [0x1801386f0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000f530
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x130], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x130]
call fcn.180040990
mov dword [rsp + 0x70], 0x7fffffe
movdqa xmm0, xmmword [0x180138d30]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000f5b0
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x150], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x160], xmm0
mov byte [rbp + 0x150], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x150]
call fcn.180040990
mov dword [rsp + 0x70], 0x1ffffffe
mov dword [rsp + 0x20], 0x37cccc9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000f620
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x170], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x180], xmm0
mov byte [rbp + 0x170], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x170]
call fcn.180040990
mov dword [rsp + 0x70], 0x7ffffffe
mov dword [rsp + 0x28], 0x100cec9
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000f680
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x190], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x1a0], xmm0
mov byte [rbp + 0x190], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x190]
call fcn.180040990
mov dword [rsp + 0x70], 0xfffffffe
movdqa xmm0, xmmword [0x1801386c0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000f700
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x1b0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x1c0], xmm0
mov byte [rbp + 0x1b0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x1b0]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138d00]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000f780
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x1d0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x1e0], xmm0
mov byte [rbp + 0x1d0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1d0]
call fcn.180040990
nop
mov dword [rsp + 0x20], 0x34cacc9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000f7f0
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x1f0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x200], xmm0
mov byte [rbp + 0x1f0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x1f0]
call fcn.180040990
nop
mov dword [rsp + 0x28], 0x100cec8
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000f850
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x210], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x220], xmm0
mov byte [rbp + 0x210], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x210]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138710]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000f8d0
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x230], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x240], xmm0
mov byte [rbp + 0x230], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x230]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138d50]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000f950
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x250], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x260], xmm0
mov byte [rbp + 0x250], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x250]
call fcn.180040990
nop
mov dword [rsp + 0x20], 0x31c9cc9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000f9c0
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x270], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x280], xmm0
mov byte [rbp + 0x270], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x270]
call fcn.180040990
nop
mov dword [rsp + 0x28], 0x100cecb
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000fa20
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x290], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x2a0], xmm0
mov byte [rbp + 0x290], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x290]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138740]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000faa0
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x2b0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x2c0], xmm0
mov byte [rbp + 0x2b0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x2b0]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138d80]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000fb20
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x2d0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x2e0], xmm0
mov byte [rbp + 0x2d0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x2d0]
call fcn.180040990
nop
mov dword [rsp + 0x20], 0x39c9cc9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000fb90
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x2f0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x300], xmm0
mov byte [rbp + 0x2f0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x2f0]
call fcn.180040990
nop
mov dword [rsp + 0x28], 0x100ceca
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000fbf0
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x310], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x320], xmm0
mov byte [rbp + 0x310], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x310]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138700]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000fc70
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x330], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x340], xmm0
mov byte [rbp + 0x330], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x330]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138d40]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000fcf0
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x350], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x360], xmm0
mov byte [rbp + 0x350], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x350]
call fcn.180040990
nop
mov dword [rsp + 0x20], 0x30c7cc9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000fd60
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x370], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x380], xmm0
mov byte [rbp + 0x370], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x370]
call fcn.180040990
nop
mov dword [rsp + 0x28], 0x100cec5
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000fdc0
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x390], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x3a0], xmm0
mov byte [rbp + 0x390], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x390]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x1801386e0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x18000fe40
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x3b0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x3c0], xmm0
mov byte [rbp + 0x3b0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x3b0]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138d20]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x18000fec0
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x3d0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x3e0], xmm0
mov byte [rbp + 0x3d0], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3d0]
call fcn.180040990
nop
mov dword [rsp + 0x20], 0x34c6cc9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb 0x18000ff30
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x3f0], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x400], xmm0
mov byte [rbp + 0x3f0], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x3f0]
call fcn.180040990
nop
mov dword [rsp + 0x28], 0x100cec4
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 2
jb 0x18000ff90
mov byte [rsp + 0x2b], 0
mov qword [rbp + 0x410], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x420], xmm0
mov byte [rbp + 0x410], 0
mov r8d, 2
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x410]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x1801386d0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x756c617f
mov dword [rsp + 0x64], 0x713d6162
mov dword [rsp + 0x68], 0x100736d
add dword [rcx - 0x75], ecx
int3
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x1a
jb 0x180010010
mov byte [rsp + 0x6b], 0
mov qword [rbp + 0x430], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x440], xmm0
mov byte [rbp + 0x430], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_26
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x430]
call fcn.180040990
nop
movdqa xmm0, xmmword [0x180138d10]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x73607c5d
mov dword [rsp + 0x44], 0x3a606174
mov dword [rsp + 0x48], 0x726e70
mov byte [rsp + 0x4c], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x180010090
mov byte [rsp + 0x4c], 0
mov qword [rbp + 0x450], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x460], xmm0
mov byte [rbp + 0x450], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x450]
call fcn.180040990
nop
mov dword [rsp + 0x20], 0x39cfcd9f
mov word [rsp + 0x24], gethostname
mov byte [rsp + 0x26], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 5
jb case.0x1800e3fcf.34
mov byte [rsp + 0x26], 0
mov qword [rbp + 0x470], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x480], xmm0
mov byte [rbp + 0x470], 0
mov r8d, 5
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x470]
call fcn.180040990
nop
mov dword [rsp + 0x28], 0xcfcecc
mov byte [rsp + 0x2c], 1
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 3]
xor byte [rsp + rcx + 0x28], al
inc rcx
cmp rcx, 3
jb 0x180010160
mov byte [rsp + 0x2c], 0
mov qword [rbp + 0x490], r12
movdqa xmm0, xmmword [0x180136dd0]
movdqa xmmword [rbp + 0x4a0], xmm0
mov byte [rbp + 0x490], 0
mov r8d, 3
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x490]
call fcn.180040990
nop
mov edi, r12d
nop
mov ebx, r12d
movsxd r14, edi
lea rsi, [r14*4]
nop
movsxd rax, ebx
add rax, rsi
shl rax, 5
lea rdx, [rbp - 0x50]
add rdx, rax
lea rcx, [rsp + 0x30]
call fcn.18003ed80
mov rcx, rax
call fcn.18000ee90
test al, al
jne 0x1800101fb
inc ebx
cmp ebx, 2
jl 0x1800101c0
inc edi
cmp edi, 0xa
jge 0x180010283
jmp 0x1800101b0
shl r14, 7
lea rdx, [rbp + 0x10]
add rdx, r14
lea rcx, [0x18017f9b0]
cmp rcx, rdx
je 0x180010225
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x180010220
mov rdx, qword [rdx]
call fcn.180040990
lea rdx, [rbp - 0x10]
add rdx, r14
mov rcx, r15
call fcn.18003ed80
mov dword [rsp + 0x70], 0xffffffff
lea r9, [fcn.180010900]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 8]
lea rcx, [rbp - 0x50]
call fcn.180112b00
mov rax, r15
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.1801127f0
lea r11, [rsp + 0x5c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x6f8d8cb8
mov word [rsp + 0x24], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x26], 1
lea rcx, [rsp + 0x20]
call fcn.180010350
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.18003ed40
mov rbx, rax
movdqa xmm0, xmmword [0x1801381b0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x5d6a7864
mov dword [rsp + 0x44], 0x7b616231
mov dword [rsp + 0x48], 0x6b647376
mov word [rsp + 0x4c], gethostname
mov byte [rsp + 0x4e], 1
lea rcx, [rsp + 0x30]
call fcn.180010320
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.18003ed40
nop
mov rdx, rbx
mov rcx, rax
call fcn.18000edc0
int3