Function at 0x18001b4f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3a0]
sub rsp, 0x4a0
mov rax, qword [0x180189e48]
xor rax, rsp
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x90], r9
mov r15, r8
mov qword [rbp - 0x38], r8
mov qword [rbp - 0x20], rdx
mov rbx, rcx
mov qword [rbp - 0x40], rcx
mov qword [rbp + 0x10], rdx
mov rax, qword [rbp + 0x400]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x408]
mov qword [rbp - 0x28], rax
mov r13, qword [rbp + 0x410]
mov r12, qword [rbp + 0x418]
xor edi, edi
mov dword [rsp + 0x40], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0xe8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf8], xmm1
movdqa xmm0, xmmword [0x18016c440]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x108], xmm0
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
lea rcx, [rbp + 0x108]
call fcn.1800de1d0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xc0], xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rax
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.1800e1dd0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x98], xmm0
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
xor edx, edx
lea rcx, [rbp + 0x98]
call fcn.1800e1dd0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x138], xmm0
movups xmmword [rbp + 0x148], xmm0
mov qword [rbp + 0x158], rax
xor edx, edx
lea rcx, [rbp + 0x138]
call fcn.1800e1dd0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rax
xor edx, edx
lea rcx, [rbp + 0x160]
call fcn.1800e1dd0
nop
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp + 0x190]
call fcn.1800f4d70
lea edx, [rdi + 1]
lea rcx, [rbp + 0x190]
call fcn.18001e780
nop
mov dword [rbp + 0x285], 0x384654
mov word [rbp + 0x280], 0x6d65
mov word [rbp + 0x283], 0x5574
mov byte [rbp + 0x282], 0x69
mov dl, 1
lea rcx, [rbp - 0x68]
call fcn.1800e1f20
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
lea rax, [rbp + 0x280]
mov rsi, 0xffffffffffffffff
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x18001b6d2
movabs r14, 0x7fffffffffffffff
cmp rdi, r14
ja 0x18001c09c
mov eax, 0x16
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x18001b722
mov qword [rsp + 0x30], rdi
mov r8, rdi
lea rdx, [rbp + 0x280]
lea rcx, [rsp + 0x20]
call fcn.1800f5130
mov byte [rsp + rdi + 0x20], 0
jmp 0x18001b778
mov r15, rdi
or r15, 0xf
cmp r15, r14
jbe 0x18001b733
mov r15, r14
jmp 0x18001b73a
cmp r15, rax
cmovb r15, rax
lea rdx, [r15 + 1]
lea rcx, [rsp + 0x20]
call fcn.180007230
mov rbx, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r15
mov r8, rdi
lea rdx, [rbp + 0x280]
mov rcx, rax
call fcn.1800f5130
mov byte [rbx + rdi], 0
mov rbx, qword [rbp - 0x40]
mov r15, qword [rbp - 0x38]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x108]
call fcn.1800de420
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.1800e2150
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x18001b7d3
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001b7ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c0a2
call fcn.1800f2740
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], 0
lea rcx, [rbp - 0x68]
call fcn.1800e2100
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
movups xmmword [rbp + 0x320], xmm0
movups xmmword [rbp + 0x330], xmm0
movups xmmword [rbp + 0x340], xmm0
movups xmmword [rbp + 0x350], xmm0
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
movups xmmword [rbp + 0x380], xmm0
mov dword [rbp + 0x306], 0x5f796157
mov word [rbp + 0x2fe], 0x654d
mov word [rbp + 0x2fb], 0x7261
mov dword [rbp + 0x301], 0x6e69465f
mov byte [rbp + 0x305], 0x64
mov dword [rbp + 0x2f0], 0x61447055
mov dword [rbp + 0x2f4], 0x58456174
mov word [rbp + 0x30b], 0x64
mov word [rbp + 0x2f8], 0x5345
mov byte [rbp + 0x30a], 0x25
mov byte [rbp + 0x300], 0x6d
mov byte [rbp + 0x2fd], 0x65
mov byte [rbp + 0x2fa], 0x68
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
lea rdx, [rbp + 0x2f0]
lea rcx, [rbp + 0x310]
call sym.dll.dll_sprintf
mov dword [rbp + 0x2c4], 0x796157
mov word [rbp + 0x2c1], 0x6e69
mov byte [rbp + 0x2c0], 0x46
mov byte [rbp + 0x2c3], 0x64
mov word [rbp + 0x2ad], 0x65
mov dword [rbp + 0x2a8], 0x6f4d7a73
mov byte [rbp + 0x2ac], 0x64
mov dword [rbp + 0x2bc], 0x746172
mov word [rbp + 0x2b9], 0x537a
mov byte [rbp + 0x2b8], 0x73
mov byte [rbp + 0x2bb], 0x74
mov word [rbp + 0x291], 0x457a
mov word [rbp + 0x294], 0x64
mov byte [rbp + 0x290], 0x73
mov byte [rbp + 0x293], 0x6e
mov dword [rbp + 0x2ca], 0x4970614d
mov word [rbp + 0x2c8], 0x7a73
mov word [rbp + 0x2ce], 0x64
mov dword [rbp + 0x2e4], 0x4e657261
mov word [rbp + 0x2e1], 0x537a
mov word [rbp + 0x2e9], 0x656d
mov byte [rbp + 0x2eb], 0
mov byte [rbp + 0x2e0], 0x73
mov byte [rbp + 0x2e3], 0x68
mov byte [rbp + 0x2e8], 0x61
mov word [rbp + 0x2a3], 0x6e69
mov word [rbp + 0x2a0], 0x7a73
mov word [rbp + 0x2a5], 0x65
mov byte [rbp + 0x2a2], 0x4c
mov word [rbp + 0x2d5], 0x696d
mov word [rbp + 0x2d8], 0x67
mov word [rbp + 0x2d0], 0x7a73
mov byte [rbp + 0x2d7], 0x6e
mov word [rbp + 0x2d3], 0x6977
mov byte [rbp + 0x2d2], 0x53
mov dword [rbp + 0x29a], 0x6f666e49
mov word [rbp + 0x298], 0x7a73
mov byte [rbp + 0x29e], 0
mov word [rbp + 0x2b3], 0x7079
mov word [rbp + 0x2b0], 0x7a73
mov word [rbp + 0x2b5], 0x65
mov byte [rbp + 0x2b2], 0x54
lea rdx, [rbp + 0x2c0]
lea rcx, [rsp + 0x48]
call fcn.1800e1d00
nop
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp + 0xc0]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1800e2150
nop
lea rcx, [rsp + 0x48]
call fcn.1800e2100
lea rcx, [rsp + 0x70]
cmp byte [rbx + 0x105d], 0
je 0x18001ba97
lea rdx, [0x18016974c]
call fcn.1800e1d00
nop
lea rdx, [0x180169748]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e2150
nop
jmp 0x18001bb37
cmp byte [rbx + 0xb64], 0
je 0x18001bad0
lea rdx, [0x180169758]
call fcn.1800e1d00
nop
lea rdx, [0x180169748]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e2150
nop
jmp 0x18001bb37
cmp byte [rbx + 0x105c], 0
je 0x18001bb09
lea rdx, [0x180169768]
call fcn.1800e1d00
nop
lea rdx, [0x180169748]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e2150
nop
jmp 0x18001bb37
lea rdx, [0x180169778]
call fcn.1800e1d00
nop
lea rdx, [0x180169748]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e2150
nop
lea rcx, [rsp + 0x70]
call fcn.1800e2100
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.1800e1d00
nop
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.1800e2150
nop
lea rcx, [rsp + 0x70]
call fcn.1800e2100
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x68]
call fcn.1800e1d00
nop
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.1800e2150
nop
lea rcx, [rbp - 0x68]
call fcn.1800e2100
mov rdx, qword [rbp - 0x28]
lea rcx, [rbp + 0x18]
call fcn.1800e1d00
nop
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rbp + 0x18]
call fcn.1800e2150
nop
lea rcx, [rbp + 0x18]
call fcn.1800e2100
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x40]
call fcn.1800e1d00
nop
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rbp + 0x40]
call fcn.1800e2150
nop
lea rcx, [rbp + 0x40]
call fcn.1800e2100
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x68]
call fcn.1800e1d00
nop
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rbp + 0x68]
call fcn.1800e2150
nop
lea rcx, [rbp + 0x68]
call fcn.1800e2100
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
mov rdi, rsi
inc rdi
cmp byte [r12 + rdi], bl
jne 0x18001bc73
cmp rdi, r14
ja 0x18001c0a8
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x18001bcaf
mov qword [rsp + 0x30], rdi
mov r8, rdi
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.1800f5130
mov byte [rsp + rdi + 0x20], bl
jmp 0x18001bd01
mov r15, rdi
or r15, 0xf
cmp r15, r14
jbe 0x18001bcc0
mov r15, r14
jmp 0x18001bccd
cmp r15, 0x16
mov eax, 0x16
cmovb r15, rax
lea rdx, [r15 + 1]
lea rcx, [rsp + 0x20]
call fcn.180007230
mov rbx, rax
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r15
mov r8, rdi
mov rdx, r12
mov rcx, rax
call fcn.1800f5130
mov byte [rbx + rdi], 0
xor ebx, ebx
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.180058480
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1800e1c30
nop
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rbp - 0x18]
call fcn.1800e2150
nop
lea rcx, [rbp - 0x18]
call fcn.1800e2100
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18001bd85
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bd80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c0ae
call fcn.1800f2740
movdqa xmm0, xmmword [0x18016c440]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x18001bdd5
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bdd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c0b4
call fcn.1800f2740
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
nop word [rax + rax]
inc rsi
cmp byte [rsi + r13], 0
jne 0x18001be00
cmp rsi, r14
ja 0x18001c0ba
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
cmp rsi, 0x10
jae 0x18001be3e
mov qword [rsp + 0x58], rsi
mov r8, rsi
mov rdx, r13
lea rcx, [rsp + 0x48]
call fcn.1800f5130
mov byte [rsp + rsi + 0x48], 0
jmp 0x18001be8e
mov rax, rsi
or rax, 0xf
cmp rax, r14
ja 0x18001be5a
mov r14, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r14, rax
lea rdx, [r14 + 1]
lea rcx, [rsp + 0x48]
call fcn.180007230
mov rbx, rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], r14
mov r8, rsi
mov rdx, r13
mov rcx, rax
call fcn.1800f5130
mov byte [rbx + rsi], 0
xor ebx, ebx
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.180058480
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1800e1c30
nop
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x98]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rbp - 0x18]
call fcn.1800e2150
nop
lea rcx, [rbp - 0x18]
call fcn.1800e2100
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18001bf0f
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bf0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c0c0
call fcn.1800f2740
movdqa xmm0, xmmword [0x18016c440]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18001bf5d
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001bf58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001c096
call fcn.1800f2740
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x48], 0
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0xc0]
call fcn.1800e26c0
mov rcx, rax
lea rdx, [rbp + 0x98]
call fcn.1800e2170
mov qword [rbp + 0x90], rbx
lea rcx, [rbp + 0x108]
call fcn.1800de840
mov rbx, rax
mov qword [rbp + 0x90], rax
mov rax, qword [rax]
lea r8, [rbp + 0x190]
lea rdx, [rbp + 0xc0]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rdi, qword [rbp - 0x20]
mov rdx, rdi
lea rcx, [rbp + 0x198]
call fcn.18001f3d0
mov eax, 2
mov dword [rsp + 0x40], eax
and eax, 0xfffffffd
mov dword [rsp + 0x40], eax
or eax, 1
mov dword [rsp + 0x40], eax
test rbx, rbx
je 0x18001c004
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
nop
lea rcx, [rbp + 0x190]
call fcn.18001c0d0
nop
lea rcx, [rbp + 0x160]
call fcn.1800e2100
nop
lea rcx, [rbp + 0x138]
call fcn.1800e2100
nop
lea rcx, [rbp + 0x98]
call fcn.1800e2100
nop
lea rcx, [rbp + 0xc0]
call fcn.1800e2100
nop
lea rcx, [rbp + 0x108]
call fcn.1800de3f0
nop
movdqa xmm0, xmmword [0x18016c440]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0xe8], 0
mov rax, rdi
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.1800f23a0
mov rbx, qword [rsp + 0x4e0]
add rsp, 0x4a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800f98d4
nop
call fcn.180006f40
int3
call fcn.1800f98d4
nop
call fcn.180006f40
nop
call fcn.1800f98d4
nop
call fcn.1800f98d4
int3
call fcn.180006f40
nop
call fcn.1800f98d4
int3