Function at 0x180009c70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x398]
sub rsp, 0x460
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r8, rdx
mov r13, rcx
mov byte [rsp + 0x36], 0x49
mov byte [rsp + 0x37], 0x4b
mov byte [rsp + 0x38], 0x50
mov byte [rsp + 0x39], 0x51
mov byte [rsp + 0x3a], 0x4d
mov byte [rsp + 0x3b], 0x5e
mov byte [rsp + 0x3c], 0x4d
mov byte [rsp + 0x3d], 0x55
mov byte [rsp + 0x3e], 0x4d
mov byte [rsp + 0x3f], 0x56
mov byte [rsp + 0x40], 0x5c
mov byte [rsp + 0x41], 0x5b
xor r12d, r12d
mov byte [rsp + 0x42], r12b
mov al, byte [rsp + 0x36]
mov ecx, r12d
mov al, byte [rsp + rcx + 0x36]
sub al, 8
mov byte [rsp + rcx + 0x36], al
inc rcx
cmp rcx, 0xc
jb 0x180009ce9
lea rdx, [rsp + 0x36]
mov rcx, r8
call fcn.180066224
mov rsi, rax
test rax, rax
je 0x18000a2f2
xor edx, edx
mov rcx, rax
call fcn.180066110
mov r15d, 1
jmp 0x18000a2e6
mov rdx, rdi
mov rcx, rsi
call fcn.180066224
mov rbx, rax
test rax, rax
je 0x18000a2d8
mov byte [rbp + 0x3b0], 0x7b
mov byte [rbp + 0x3b1], WSACleanup
mov byte [rbp + 0x3b2], 0x7a
mov byte [rbp + 0x3b3], WSACleanup
mov byte [rbp + 0x3b4], r12b
mov cl, byte [rbp + 0x3b0]
mov rcx, r12
mov al, byte [rbp + rcx + 0x3b0]
sub al, 0xd
mov byte [rbp + rcx + 0x3b0], al
inc rcx
cmp rcx, 4
jb 0x180009d6d
mov r9d, 0x80
lea r8, [rbp + 0x1c0]
lea rdx, [rbp + 0x3b0]
mov rcx, rbx
call fcn.180006ebc
mov byte [rbp + 0x3b8], WSASetLastError
mov byte [rbp + 0x3b9], WSASetLastError
mov byte [rbp + 0x3ba], 0x79
mov byte [rbp + 0x3bb], 0x69
mov byte [rbp + 0x3bc], r12b
mov al, byte [rbp + 0x3b8]
mov rcx, r12
mov al, byte [rbp + rcx + 0x3b8]
sub al, 6
mov byte [rbp + rcx + 0x3b8], al
inc rcx
cmp rcx, 4
jb 0x180009dce
mov r9d, 0x100
lea r8, [rbp + 0x240]
lea rdx, [rbp + 0x3b8]
mov rcx, rbx
call fcn.180006ebc
mov byte [rsp + 0x20], 0x6b
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], WSACleanup
mov byte [rsp + 0x23], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x24], r12b
mov al, byte [rsp + 0x20]
mov rcx, r12
mov al, byte [rsp + rcx + 0x20]
sub al, 2
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 4
jb 0x180009e23
mov r9d, 0x80
lea r8, [rbp + 0xc0]
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.180006ebc
mov byte [rsp + 0x2c], WSASetLastError
mov byte [rsp + 0x2d], 0x67
mov byte [rsp + 0x2e], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x2f], WSACleanup
mov byte [rsp + 0x30], 0x63
mov byte [rsp + 0x31], 0x6b
mov byte [rsp + 0x32], 0x76
mov byte [rsp + 0x33], 0x65
mov byte [rsp + 0x34], 0x7d
mov byte [rsp + 0x35], r12b
mov al, byte [rsp + 0x2c]
mov rcx, r12
mov al, byte [rsp + rcx + 0x2c]
sub al, 4
mov byte [rsp + rcx + 0x2c], al
inc rcx
cmp rcx, 9
jb 0x180009e89
mov r9d, 0x80
lea r8, [rbp + 0x140]
lea rdx, [rsp + 0x2c]
mov rcx, rbx
call fcn.180006ebc
mov byte [rsp + 0x25], WSACleanup
mov byte [rsp + 0x26], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x27], WSASetLastError
mov byte [rsp + 0x28], WSASetLastError
mov byte [rsp + 0x29], WSAStartup
mov byte [rsp + 0x2a], 0x78
mov byte [rsp + 0x2b], r12b
mov al, byte [rsp + 0x25]
mov rcx, r12
mov al, byte [rsp + rcx + 0x25]
sub al, 0xa
mov byte [rsp + rcx + 0x25], al
inc rcx
cmp rcx, 6
jb 0x180009ee0
xor r8d, r8d
lea rdx, [rsp + 0x25]
mov rcx, rbx
call fcn.180006f84
mov r14b, al
mov byte [rsp + 0x43], 0x7c
mov byte [rsp + 0x44], 0x7e
mov byte [rsp + 0x45], 0x7b
mov byte [rsp + 0x46], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x47], 0x7e
mov byte [rsp + 0x48], WSACleanup
mov byte [rsp + 0x49], 0x7f
mov byte [rsp + 0x4a], 0x7f
mov byte [rsp + 0x4b], 0x6b
mov byte [rsp + 0x4c], 0x79
mov byte [rsp + 0x4d], 0x75
mov byte [rsp + 0x4e], 0x7a
mov byte [rsp + 0x4f], r12b
mov cl, byte [rsp + 0x43]
mov rcx, r12
mov al, byte [rsp + rcx + 0x43]
sub al, 0xc
mov byte [rsp + rcx + 0x43], al
inc rcx
cmp rcx, 0xc
jb 0x180009f4e
movsd xmm2, qword [0x1800d22b0]
lea rdx, [rsp + 0x43]
mov rcx, rbx
call fcn.180006f44
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
mov byte [rsp + 0x50], 0x7d
mov byte [rsp + 0x51], 0x7f
mov byte [rsp + 0x52], 0x7c
mov byte [rsp + 0x53], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x54], 0x7f
mov byte [rsp + 0x55], WSACleanup
mov byte [rsp + 0x56], 0x80
mov byte [rsp + 0x57], 0x80
mov byte [rsp + 0x58], WSASetLastError
mov byte [rsp + 0x59], 0x7a
mov byte [rsp + 0x5a], WSASetLastError
mov byte [rsp + 0x5b], 0x85
mov byte [rsp + 0x5c], r12b
mov al, byte [rsp + 0x50]
mov rcx, r12
mov al, byte [rsp + rcx + 0x50]
sub al, 0xd
mov byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x180009fc5
movsd xmm2, qword [0x1800d22b0]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.180006f44
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.180052638
nop
lea rax, [rbp + 0x1c0]
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a00f
test r8, r8
je 0x18000a16a
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
lea rdx, [rbp + 0x1c0]
lea rcx, [rsp + 0x60]
call fcn.18000f2e8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
lea rax, [rbp + 0x240]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a05e
lea rdx, [rbp + 0x240]
lea rcx, [rbp - 0x80]
call fcn.18000f2e8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
lea rax, [rbp + 0xc0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a091
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.18000f2e8
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r12
lea rax, [rbp + 0x140]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a0c4
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x40]
call fcn.18000f2e8
mov byte [rbp - 0x20], r14b
movss dword [rbp - 0x1c], xmm7
movss dword [rbp - 0x18], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0xa0]
call fcn.18000ecb0
mov rbx, qword [rax]
lea rdx, [rsp + 0x60]
lea rcx, [rbx + 0x30]
call fcn.18000d6a0
lea rcx, [rbx + 0x50]
lea rdx, [rbp - 0x80]
call fcn.18000d6a0
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x60]
call fcn.18000d6a0
lea rcx, [rbx + 0x90]
lea rdx, [rbp - 0x40]
call fcn.18000d6a0
mov al, byte [rbp - 0x20]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp - 0x1c]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp - 0x18]
movss dword [rbx + 0xb8], xmm1
lea rcx, [rsp + 0x60]
jmp 0x18000a29b
lea r9, [0x1800b88d8]
mov r8, rbx
lea rdx, [rbp + 0x10]
mov rcx, r13
call fcn.180009b84
nop
lea r9, [0x1800b88e0]
mov r8, rbx
lea rdx, [rbp + 0x30]
mov rcx, r13
call fcn.180009b84
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r12
lea rax, [rbp + 0xc0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a1b1
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x50]
call fcn.18000f2e8
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r12
lea rax, [rbp + 0x140]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a1ea
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x70]
call fcn.18000f2e8
mov byte [rbp + 0x90], r14b
movss dword [rbp + 0x94], xmm7
movss dword [rbp + 0x98], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0xb0]
call fcn.18000ecb0
mov rbx, qword [rax]
lea rdx, [rbp + 0x10]
lea rcx, [rbx + 0x30]
call fcn.18000d6a0
lea rcx, [rbx + 0x50]
lea rdx, [rbp + 0x30]
call fcn.18000d6a0
lea rcx, [rbx + 0x70]
lea rdx, [rbp + 0x50]
call fcn.18000d6a0
lea rcx, [rbx + 0x90]
lea rdx, [rbp + 0x70]
call fcn.18000d6a0
mov al, byte [rbp + 0x90]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp + 0x94]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp + 0x98]
movss dword [rbx + 0xb8], xmm1
lea rcx, [rbp + 0x10]
call fcn.18000a320
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18000a2d8
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a2d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a317
call fcn.18008ced4
mov edx, r15d
mov rcx, rsi
call fcn.180066110
inc r15d
test rax, rax
mov rdi, rax
jne 0x180009d2a
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1800911e0
int3