Function at 0x180009b98
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x308]
sub rsp, 0x3d0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r8, rdx
mov r13, rcx
mov byte [rsp + 0x20], 0x43
mov byte [rsp + 0x21], 0x45
mov byte [rsp + 0x22], 0x4a
mov byte [rsp + 0x23], 0x4b
mov byte [rsp + 0x24], 0x47
mov byte [rsp + 0x25], 0x58
mov byte [rsp + 0x26], 0x47
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x47
mov byte [rsp + 0x29], 0x50
mov byte [rsp + 0x2a], 0x56
mov byte [rsp + 0x2b], 0x55
xor r12d, r12d
mov byte [rsp + 0x2c], r12b
mov al, byte [rsp + 0x20]
mov ecx, r12d
mov al, byte [rsp + rcx + 0x20]
sub al, 2
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x180009c11
lea rdx, [rsp + 0x20]
mov rcx, r8
call fcn.1800665e0
mov rsi, rax
test rax, rax
je 0x18000a1f0
xor edx, edx
mov rcx, rax
call fcn.1800664cc
mov r15d, 1
jmp 0x18000a1e4
mov rdx, rdi
mov rcx, rsi
call fcn.1800665e0
mov rbx, rax
test rax, rax
je 0x18000a1d6
mov byte [rbp + 0x320], WSACleanup
mov byte [rbp + 0x321], 0x64
mov byte [rbp + 0x322], reloc.WS2_32.dll_WSASetLastError
mov byte [rbp + 0x323], 0x68
mov byte [rbp + 0x324], r12b
mov cl, byte [rbp + 0x320]
mov rcx, r12
mov al, byte [rbp + rcx + 0x320]
sub al, 3
mov byte [rbp + rcx + 0x320], al
inc rcx
cmp rcx, 4
jb 0x180009c95
mov r9d, 0x80
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x320]
mov rcx, rbx
call fcn.180006d9c
mov byte [rbp + 0x328], WSASetLastError
mov byte [rbp + 0x329], WSAStartup
mov byte [rbp + 0x32a], 0x7b
mov byte [rbp + 0x32b], WSASetLastError
mov byte [rbp + 0x32c], r12b
mov al, byte [rbp + 0x328]
mov rcx, r12
mov al, byte [rbp + rcx + 0x328]
sub al, 8
mov byte [rbp + rcx + 0x328], al
inc rcx
cmp rcx, 4
jb 0x180009cf6
mov r9d, 0x100
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x328]
mov rcx, rbx
call fcn.180006d9c
mov byte [rsp + 0x2d], 0x6b
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], WSACleanup
mov byte [rsp + 0x30], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x31], r12b
mov al, byte [rsp + 0x2d]
mov rcx, r12
mov al, byte [rsp + rcx + 0x2d]
sub al, 2
mov byte [rsp + rcx + 0x2d], al
inc rcx
cmp rcx, 4
jb 0x180009d4b
mov r9d, 0x80
lea r8, [rbp + 0x30]
lea rdx, [rsp + 0x2d]
mov rcx, rbx
call fcn.180006d9c
mov byte [rsp + 0x20], WSACleanup
mov byte [rsp + 0x21], 0x6b
mov byte [rsp + 0x22], 0x77
mov byte [rsp + 0x23], 0x76
mov byte [rsp + 0x24], 0x67
mov byte [rsp + 0x25], WSAStartup
mov byte [rsp + 0x26], 0x7a
mov byte [rsp + 0x27], 0x69
mov byte [rsp + 0x28], 0x81
mov byte [rsp + 0x29], r12b
mov al, byte [rsp + 0x20]
mov rcx, r12
mov al, byte [rsp + rcx + 0x20]
sub al, 8
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 9
jb 0x180009dae
mov r9d, 0x80
lea r8, [rbp + 0xb0]
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.180006d9c
mov byte [rsp + 0x32], 0x6a
mov byte [rsp + 0x33], 0x6b
mov byte [rsp + 0x34], 0x66
mov byte [rsp + 0x35], 0x66
mov byte [rsp + 0x36], 0x67
mov byte [rsp + 0x37], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x38], r12b
mov al, byte [rsp + 0x32]
mov rcx, r12
mov al, byte [rsp + rcx + 0x32]
sub al, 2
mov byte [rsp + rcx + 0x32], al
inc rcx
cmp rcx, 6
jb 0x180009e05
xor r8d, r8d
lea rdx, [rsp + 0x32]
mov rcx, rbx
call fcn.180006e64
mov r14b, al
mov byte [rsp + 0x39], 0x7a
mov byte [rsp + 0x3a], 0x7c
mov byte [rsp + 0x3b], 0x79
mov byte [rsp + 0x3c], WSACleanup
mov byte [rsp + 0x3d], 0x7c
mov byte [rsp + 0x3e], WSAStartup
mov byte [rsp + 0x3f], 0x7d
mov byte [rsp + 0x40], 0x7d
mov byte [rsp + 0x41], 0x69
mov byte [rsp + 0x42], 0x77
mov byte [rsp + 0x43], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x44], 0x78
mov byte [rsp + 0x45], r12b
mov cl, byte [rsp + 0x39]
mov rcx, r12
mov al, byte [rsp + rcx + 0x39]
sub al, 0xa
mov byte [rsp + rcx + 0x39], al
inc rcx
cmp rcx, 0xc
jb 0x180009e73
movsd xmm2, qword [0x1800d2728]
lea rdx, [rsp + 0x39]
mov rcx, rbx
call fcn.180006e24
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
mov byte [rsp + 0x46], 0x7a
mov byte [rsp + 0x47], 0x7c
mov byte [rsp + 0x48], 0x79
mov byte [rsp + 0x49], WSACleanup
mov byte [rsp + 0x4a], 0x7c
mov byte [rsp + 0x4b], WSAStartup
mov byte [rsp + 0x4c], 0x7d
mov byte [rsp + 0x4d], 0x7d
mov byte [rsp + 0x4e], 0x69
mov byte [rsp + 0x4f], 0x77
mov byte [rsp + 0x50], 0x6b
mov byte [rsp + 0x51], 0x82
mov byte [rsp + 0x52], r12b
mov al, byte [rsp + 0x46]
mov rcx, r12
mov al, byte [rsp + rcx + 0x46]
sub al, 0xa
mov byte [rsp + rcx + 0x46], al
inc rcx
cmp rcx, 0xc
jb 0x180009eea
movsd xmm2, qword [0x1800d2728]
lea rdx, [rsp + 0x46]
mov rcx, rbx
call fcn.180006e24
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.1800528a4
nop
lea rax, [rbp + 0x130]
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009f34
test r8, r8
je 0x18000a084
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x58]
call fcn.18000f0f8
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
lea rax, [rbp + 0x1b0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009f84
lea rdx, [rbp + 0x1b0]
lea rcx, [rsp + 0x78]
call fcn.18000f0f8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009fb5
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.18000f0f8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rax, [rbp + 0xb0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009fe5
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x48]
call fcn.18000f0f8
mov byte [rbp - 0x28], r14b
movss dword [rbp - 0x24], xmm7
movss dword [rbp - 0x20], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x18]
lea rdx, [rbp + 8]
call fcn.18000eafc
mov rbx, qword [rax]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x30]
call fcn.18000d764
lea rcx, [rbx + 0x50]
lea rdx, [rsp + 0x78]
call fcn.18000d764
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x68]
call fcn.18000d764
lea rcx, [rbx + 0x90]
lea rdx, [rbp - 0x48]
call fcn.18000d764
mov al, byte [rbp - 0x28]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp - 0x24]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp - 0x20]
movss dword [rbx + 0xb8], xmm1
jmp 0x18000a194
lea r9, [0x1800b88f8]
mov r8, rbx
lea rdx, [rsp + 0x58]
mov rcx, r13
call fcn.180009aac
nop
lea r9, [0x1800b8900]
mov r8, rbx
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.180009aac
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a0ca
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.18000f0f8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rax, [rbp + 0xb0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a0fa
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x48]
call fcn.18000f0f8
mov byte [rbp - 0x28], r14b
movss dword [rbp - 0x24], xmm7
movss dword [rbp - 0x20], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x18]
lea rdx, [rbp + 0x18]
call fcn.18000eafc
mov rbx, qword [rax]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x30]
call fcn.18000d764
lea rcx, [rbx + 0x50]
lea rdx, [rsp + 0x78]
call fcn.18000d764
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x68]
call fcn.18000d764
lea rcx, [rbx + 0x90]
lea rdx, [rbp - 0x48]
call fcn.18000d764
mov al, byte [rbp - 0x28]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp - 0x24]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp - 0x20]
movss dword [rbx + 0xb8], xmm1
lea rcx, [rsp + 0x58]
call fcn.18000a21c
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x18000a1d6
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a1d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a215
call fcn.18008dae0
mov edx, r15d
mov rcx, rsi
call fcn.1800664cc
inc r15d
test rax, rax
mov rdi, rax
jne 0x180009c52
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180091f00
int3