Function at 0x180009ba4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3b8]
sub rsp, 0x480
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r8, rdx
mov r13, rcx
mov byte [rsp + 0x36], 0x46
mov byte [rsp + 0x37], 0x48
mov byte [rsp + 0x38], 0x4d
mov byte [rsp + 0x39], 0x4e
mov byte [rsp + 0x3a], 0x4a
mov byte [rsp + 0x3b], 0x5b
mov byte [rsp + 0x3c], 0x4a
mov byte [rsp + 0x3d], 0x52
mov byte [rsp + 0x3e], 0x4a
mov byte [rsp + 0x3f], 0x53
mov byte [rsp + 0x40], 0x59
mov byte [rsp + 0x41], 0x58
xor r12d, r12d
mov byte [rsp + 0x42], r12b
mov al, byte [rsp + 0x36]
mov ecx, r12d
mov al, byte [rsp + rcx + 0x36]
sub al, 5
mov byte [rsp + rcx + 0x36], al
inc rcx
cmp rcx, 0xc
jb 0x180009c1d
lea rdx, [rsp + 0x36]
mov rcx, r8
call fcn.18006db74
mov r14, rax
test rax, rax
je 0x18000a2db
xor edx, edx
mov rcx, rax
call fcn.18006da60
mov r15d, 1
jmp 0x18000a2cf
mov rdx, rdi
mov rcx, r14
call fcn.18006db74
mov rbx, rax
test rax, rax
je 0x18000a2c1
mov byte [rbp + 0x3d0], WSACleanup
mov byte [rbp + 0x3d1], 0x65
mov byte [rbp + 0x3d2], WSACleanup
mov byte [rbp + 0x3d3], 0x69
mov byte [rbp + 0x3d4], r12b
mov cl, byte [rbp + 0x3d0]
mov rcx, r12
mov al, byte [rbp + rcx + 0x3d0]
sub al, 4
mov byte [rbp + rcx + 0x3d0], al
inc rcx
cmp rcx, 4
jb 0x180009ca1
mov r9d, 0x80
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x3d0]
mov rcx, rbx
call fcn.180006ebc
mov byte [rbp + 0x3d8], WSACleanup
mov byte [rbp + 0x3d9], WSACleanup
mov byte [rbp + 0x3da], 0x7d
mov byte [rbp + 0x3db], WSASetLastError
mov byte [rbp + 0x3dc], r12b
mov al, byte [rbp + 0x3d8]
mov rcx, r12
mov al, byte [rbp + rcx + 0x3d8]
sub al, 0xa
mov byte [rbp + rcx + 0x3d8], al
inc rcx
cmp rcx, 4
jb 0x180009d02
mov r9d, 0x100
lea r8, [rbp + 0x260]
lea rdx, [rbp + 0x3d8]
mov rcx, rbx
call fcn.180006ebc
mov byte [rsp + 0x20], WSASetLastError
mov byte [rsp + 0x21], 0x66
mov byte [rsp + 0x22], WSACleanup
mov byte [rsp + 0x23], WSACleanup
mov byte [rsp + 0x24], r12b
mov al, byte [rsp + 0x20]
mov rcx, r12
mov al, byte [rsp + rcx + 0x20]
sub al, 3
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 4
jb 0x180009d57
mov r9d, 0x80
lea r8, [rbp + 0xe0]
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.180006ebc
mov byte [rsp + 0x2c], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x2d], 0x6a
mov byte [rsp + 0x2e], 0x76
mov byte [rsp + 0x2f], 0x75
mov byte [rsp + 0x30], 0x66
mov byte [rsp + 0x31], WSASetLastError
mov byte [rsp + 0x32], 0x79
mov byte [rsp + 0x33], 0x68
mov byte [rsp + 0x34], 0x80
mov byte [rsp + 0x35], r12b
mov al, byte [rsp + 0x2c]
mov rcx, r12
mov al, byte [rsp + rcx + 0x2c]
sub al, 7
mov byte [rsp + rcx + 0x2c], al
inc rcx
cmp rcx, 9
jb 0x180009dbd
mov r9d, 0x80
lea r8, [rbp + 0x160]
lea rdx, [rsp + 0x2c]
mov rcx, rbx
call fcn.180006ebc
mov byte [rsp + 0x25], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x26], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x27], WSASetLastError
mov byte [rsp + 0x28], WSASetLastError
mov byte [rsp + 0x29], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x2a], 0x79
mov byte [rsp + 0x2b], r12b
mov al, byte [rsp + 0x25]
mov rcx, r12
mov al, byte [rsp + rcx + 0x25]
sub al, 0xb
mov byte [rsp + rcx + 0x25], al
inc rcx
cmp rcx, 6
jb 0x180009e14
xor r8d, r8d
lea rdx, [rsp + 0x25]
mov rcx, rbx
call fcn.180006f84
mov sil, al
mov byte [rsp + 0x43], 0x7d
mov byte [rsp + 0x44], 0x7f
mov byte [rsp + 0x45], 0x7c
mov byte [rsp + 0x46], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x47], 0x7f
mov byte [rsp + 0x48], WSACleanup
mov byte [rsp + 0x49], 0x80
mov byte [rsp + 0x4a], 0x80
mov byte [rsp + 0x4b], WSASetLastError
mov byte [rsp + 0x4c], 0x7a
mov byte [rsp + 0x4d], 0x76
mov byte [rsp + 0x4e], 0x7b
mov byte [rsp + 0x4f], r12b
mov cl, byte [rsp + 0x43]
mov rcx, r12
mov al, byte [rsp + rcx + 0x43]
sub al, 0xd
mov byte [rsp + rcx + 0x43], al
inc rcx
cmp rcx, 0xc
jb 0x180009e82
movsd xmm2, qword [0x1800d9000]
lea rdx, [rsp + 0x43]
mov rcx, rbx
call fcn.180006f44
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
mov byte [rsp + 0x50], 0x75
mov byte [rsp + 0x51], 0x77
mov byte [rsp + 0x52], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x53], WSASetLastError
mov byte [rsp + 0x54], 0x77
mov byte [rsp + 0x55], 0x6a
mov byte [rsp + 0x56], 0x78
mov byte [rsp + 0x57], 0x78
mov byte [rsp + 0x58], 0x64
mov byte [rsp + 0x59], WSACleanup
mov byte [rsp + 0x5a], 0x66
mov byte [rsp + 0x5b], 0x7d
mov byte [rsp + 0x5c], r12b
mov al, byte [rsp + 0x50]
mov rcx, r12
mov al, byte [rsp + rcx + 0x50]
sub al, 5
mov byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x180009ef9
movsd xmm2, qword [0x1800d9000]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.180006f44
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
lea rax, [rbp + 0x1e0]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x180009f33
test r8, r8
je 0x18000a109
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp - 0x60]
call fcn.18000f008
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], r12
lea rax, [rbp + 0x260]
or rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x180009f82
lea rdx, [rbp + 0x260]
lea rcx, [rbp - 0x40]
call fcn.18000f008
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
lea rax, [rbp + 0xe0]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x180009fb5
lea rdx, [rbp + 0xe0]
lea rcx, [rbp - 0x20]
call fcn.18000f008
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], r12
lea rax, [rbp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x180009fe8
lea rdx, [rbp + 0x160]
lea rcx, [rbp]
call fcn.18000f008
mov byte [rbp + 0x20], sil
movss dword [rbp + 0x24], xmm7
movss dword [rbp + 0x28], xmm6
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov r8, rbx
inc r8
cmp byte [rdi + r8], r12b
jne 0x18000a024
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.18000f008
nop
lea rcx, [r13 + 0x1b8]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0xc0]
call fcn.18000ea0c
mov rbx, qword [rax]
lea rdx, [rbp - 0x60]
lea rcx, [rbx + 0x30]
call fcn.18000d5d4
lea rcx, [rbx + 0x50]
lea rdx, [rbp - 0x40]
call fcn.18000d5d4
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x20]
call fcn.18000d5d4
lea rcx, [rbx + 0x90]
lea rdx, [rbp]
call fcn.18000d5d4
mov al, byte [rbp + 0x20]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp + 0x24]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp + 0x28]
movss dword [rbx + 0xb8], xmm1
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x18000a0ed
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a0e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a300
call fcn.180093f54
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], r12b
lea rcx, [rbp - 0x60]
jmp 0x18000a2bc
lea r9, [0x1800bf8b0]
mov r8, rbx
lea rdx, [rbp + 0x30]
mov rcx, r13
call fcn.180009ab8
nop
lea r9, [0x1800bf8b8]
mov r8, rbx
lea rdx, [rbp + 0x50]
mov rcx, r13
call fcn.180009ab8
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r12
lea rax, [rbp + 0xe0]
or rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a15a
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x70]
call fcn.18000f008
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], r12
lea rax, [rbp + 0x160]
mov r8, rbx
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a196
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x90]
call fcn.18000f008
mov byte [rbp + 0xb0], sil
movss dword [rbp + 0xb4], xmm7
movss dword [rbp + 0xb8], xmm6
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
mov r8, rbx
inc r8
cmp byte [rdi + r8], r12b
jne 0x18000a1db
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.18000f008
nop
lea rcx, [r13 + 0x1b8]
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0xd0]
call fcn.18000ea0c
mov rbx, qword [rax]
lea rdx, [rbp + 0x30]
lea rcx, [rbx + 0x30]
call fcn.18000d5d4
lea rcx, [rbx + 0x50]
lea rdx, [rbp + 0x50]
call fcn.18000d5d4
lea rcx, [rbx + 0x70]
lea rdx, [rbp + 0x70]
call fcn.18000d5d4
lea rcx, [rbx + 0x90]
lea rdx, [rbp + 0x90]
call fcn.18000d5d4
mov al, byte [rbp + 0xb0]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp + 0xb4]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp + 0xb8]
movss dword [rbx + 0xb8], xmm1
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18000a2a8
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a2a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a306
call fcn.180093f54
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], r12b
lea rcx, [rbp + 0x30]
call fcn.18000a30c
mov edx, r15d
mov rcx, r14
call fcn.18006da60
inc r15d
test rax, rax
mov rdi, rax
jne 0x180009c5e
lea r11, [rsp + 0x480]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180098270
nop
call fcn.180098270
int3