Function at 0x1800723c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xa0
movzx ecx, byte [0x180a484f6]
call fcn.180070840
xor r8d, r8d
mov dword [rbp + 0x69], 0x616964
xor edx, edx
mov word [rbp + 0x67], 0x6943
lea rcx, [rbp + 0x67]
mov byte [rbp + 0x6d], 0
call fcn.18002dc10
lea rcx, [rbp + 0x77]
mov word [rbp + 0x7c], reloc.WS2_32.dll_WSAStartup
mov dword [rbp + 0x77], 0x61742323
mov byte [rbp + 0x7b], WSAStartup
mov byte [rbp + 0x7e], 0
call fcn.180063be0
test al, al
je 0x180072fbb
mov rdx, qword [0x1800a5748]
mov qword [rsp + 0x90], rdi
xor edi, edi
mov dword [rbp + 0x67], 0x61754c
mov byte [rbp + 0x6b], 0
mov rax, qword [rdx + 0x3ed0]
mov qword [rsp + 0x98], rbx
cmp byte [rax + 0xbb], dil
jne 0x180072a25
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072a25
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x67]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072a1e
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
lea rcx, [rbp + 0x37]
mov word [rbp + 0x40], 0x61
mov dword [rbp + 0x37], 0x61672323
mov dword [rbp + 0x3b], 0x6c5f656d
mov byte [rbp + 0x3f], 0x75
mov byte [rbp + 0x42], dil
call fcn.180063be0
test al, al
je 0x1800729de
mov rdx, qword [0x1800a5748]
mov word [rbp + 0xe], WSAStartup
mov dword [rbp + 7], 0x63657845
mov word [rbp + 0xb], 0x7475
mov rax, qword [rdx + 0x3ed0]
mov byte [rbp + 0xd], 0x6f
mov byte [rbp + 0x10], dil
cmp byte [rax + 0xbb], dil
jne 0x180072586
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072586
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 7]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x18007257f
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.180069110
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072586
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072586
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072586
dec dword [r9 + 0xf0]
jmp 0x180072586
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov dword [rbp + 0x71], 0x73756e
mov word [rbp + 0x6f], 0x654d
mov byte [rbp + 0x75], dil
cmp byte [rax + 0xbb], dil
jne 0x180072633
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072633
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x6f]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x18007262c
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18006a030
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072633
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072633
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072633
dec dword [r9 + 0xf0]
jmp 0x180072633
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov dword [rbp + 0x1d], 0x736563
mov dword [rbp + 0x17], 0x6f736552
mov word [rbp + 0x1b], 0x7275
mov byte [rbp + 0x21], dil
cmp byte [rax + 0xbb], dil
jne 0x1800726e7
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x1800726e7
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x17]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x1800726e0
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18006ef00
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x1800726e7
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x1800726e7
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x1800726e7
dec dword [r9 + 0xf0]
jmp 0x1800726e7
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp + 0x84], reloc.WS2_32.dll_WSAStartup
mov dword [rbp + 0x7f], 0x6e657645
mov byte [rbp + 0x83], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x86], dil
cmp byte [rax + 0xbb], dil
jne 0x18007292f
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x18007292f
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072928
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
lea rcx, [rbp + 0x27]
mov dword [rbp + 0x2f], 0x706f5f
mov dword [rbp + 0x27], 0x76652323
mov dword [rbp + 0x2b], 0x73746e65
mov byte [rbp + 0x33], dil
call fcn.180063be0
test al, al
je 0x1800728e8
mov rdx, qword [0x1800a5748]
mov word [rbp - 0x14], reloc.WS2_32.dll_WSACleanup
mov dword [rbp - 0x19], 0x65696c43
mov byte [rbp - 0x15], 0x6e
mov rax, qword [rdx + 0x3ed0]
mov byte [rbp - 0x12], dil
cmp byte [rax + 0xbb], dil
jne 0x18007283f
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x18007283f
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072838
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18001a7f0
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x18007283f
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x18007283f
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x18007283f
dec dword [r9 + 0xf0]
jmp 0x18007283f
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp - 0xc], WSAStartup
mov dword [rbp - 0x11], 0x76726553
mov byte [rbp - 0xd], 0x65
mov byte [rbp - 0xa], dil
cmp byte [rax + 0xbb], dil
jne 0x1800728e3
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x1800728e3
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp - 0x11]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x1800728e3
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18001b150
mov rdx, qword [0x1800a5748]
mov r8, qword [rdx + 0x3ed0]
cmp byte [r8 + 0xbb], dil
jne 0x1800728e3
mov rdx, qword [rdx + 0x4b98]
test rdx, rdx
je 0x1800728e3
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x1800728e3
dec dword [r8 + 0xf0]
call fcn.180064070
mov rdx, qword [0x1800a5748]
mov r8, qword [rdx + 0x3ed0]
cmp byte [r8 + 0xbb], dil
jne 0x18007292f
mov r9, qword [rdx + 0x4b98]
test r9, r9
je 0x18007292f
movsx rax, word [r9 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r9 + 8]
test byte [rcx + rax + 4], 8
jne 0x18007292f
dec dword [r8 + 0xf0]
jmp 0x18007292f
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp - 2], reloc.WS2_32.dll_WSAStartup
mov dword [rbp - 9], 0x67697254
mov word [rbp - 5], 0x6567
mov byte [rbp - 3], WSAStartup
mov byte [rbp], dil
cmp byte [rax + 0xbb], dil
jne 0x1800729d9
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x1800729d9
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp - 9]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x1800729d9
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.180070d20
mov rdx, qword [0x1800a5748]
mov r8, qword [rdx + 0x3ed0]
cmp byte [r8 + 0xbb], dil
jne 0x1800729d9
mov rdx, qword [rdx + 0x4b98]
test rdx, rdx
je 0x1800729d9
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x1800729d9
dec dword [r8 + 0xf0]
call fcn.180064070
mov rdx, qword [0x1800a5748]
mov r8, qword [rdx + 0x3ed0]
cmp byte [r8 + 0xbb], dil
jne 0x180072a25
mov r9, qword [rdx + 0x4b98]
test r9, r9
je 0x180072a25
movsx rax, word [r9 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r9 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072a25
dec dword [r8 + 0xf0]
jmp 0x180072a25
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp + 0x74], 0x66
mov dword [rbp + 0x6f], 0x6553794d
mov byte [rbp + 0x73], 0x6c
mov byte [rbp + 0x76], dil
cmp byte [rax + 0xbb], dil
jne 0x180072ad6
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072ad6
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x6f]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072acf
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18006ab50
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072ad6
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072ad6
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072ad6
dec dword [r9 + 0xf0]
jmp 0x180072ad6
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp + 0x84], reloc.WS2_32.dll_WSACleanup
mov dword [rbp + 0x7f], 0x626d6941
mov byte [rbp + 0x83], WSAStartup
mov byte [rbp + 0x86], dil
cmp byte [rax + 0xbb], dil
jne 0x180072b90
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072b90
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x7f]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072b89
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18000e500
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072b90
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072b90
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072b90
dec dword [r9 + 0xf0]
jmp 0x180072b90
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov dword [rbp + 0x2b], 0x736c61
mov dword [rbp + 0x27], 0x75736956
mov byte [rbp + 0x2f], dil
cmp byte [rax + 0xbb], dil
jne 0x180072c3e
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072c3e
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x27]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072c37
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.180075540
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072c3e
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072c3e
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072c3e
dec dword [r9 + 0xf0]
jmp 0x180072c3e
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov dword [rbp - 5], 0x736e6f
mov dword [rbp - 9], 0x70616557
mov byte [rbp - 1], dil
cmp byte [rax + 0xbb], dil
jne 0x180072cec
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072cec
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp - 9]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072ce5
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.180077ec0
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072cec
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072cec
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072cec
dec dword [r9 + 0xf0]
jmp 0x180072cec
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp - 0xc], 0x65
mov dword [rbp - 0x11], 0x696c6e4f
mov byte [rbp - 0xd], 0x6e
mov byte [rbp - 0xa], dil
cmp byte [rax + 0xbb], dil
jne 0x180072d9d
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072d9d
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp - 0x11]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072d96
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18006d030
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072d9d
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072d9d
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072d9d
dec dword [r9 + 0xf0]
jmp 0x180072d9d
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp - 0x14], WSAStartup
mov dword [rbp - 0x19], 0x76726553
mov byte [rbp - 0x15], 0x65
mov byte [rbp - 0x12], dil
cmp byte [rax + 0xbb], dil
jne 0x180072e4e
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072e4e
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp - 0x19]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072e47
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.18006ff00
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072e4e
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072e4e
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072e4e
dec dword [r9 + 0xf0]
jmp 0x180072e4e
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov dword [rbp + 0xb], 0x656c63
mov dword [rbp + 7], 0x69686556
mov byte [rbp + 0xf], dil
cmp byte [rax + 0xbb], dil
jne 0x180072efc
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072efc
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 7]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072ef5
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.180073390
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], dil
jne 0x180072efc
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x180072efc
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x180072efc
dec dword [r9 + 0xf0]
jmp 0x180072efc
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
mov word [rbp + 0x1e], reloc.WS2_32.dll_WSAStartup
mov dword [rbp + 0x17], 0x74746553
mov word [rbp + 0x1b], 0x6e69
mov byte [rbp + 0x1d], 0x67
mov byte [rbp + 0x20], dil
cmp byte [rax + 0xbb], dil
jne 0x180072fa6
mov rbx, qword [rdx + 0x4b98]
test rbx, rbx
je 0x180072fa6
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
lea rdx, [rbp + 0x17]
mov rcx, rbx
call fcn.180065a80
test al, al
je 0x180072fa6
movsx rax, word [rbx + 0x70]
mov rcx, qword [rbx + 8]
imul rdx, rax, 0x2c
mov ecx, dword [rdx + rcx]
call fcn.180030cd0
call fcn.1800700a0
mov rdx, qword [0x1800a5748]
mov r8, qword [rdx + 0x3ed0]
cmp byte [r8 + 0xbb], dil
jne 0x180072fa6
mov rdx, qword [rdx + 0x4b98]
test rdx, rdx
je 0x180072fa6
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x180072fa6
dec dword [r8 + 0xf0]
call fcn.180064070
mov rdi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x98]
add rsp, 0xa0
pop rbp
jmp fcn.18002fe20