Function at 0x18006a030
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
mov rax, qword [0x1800a4040]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor r15d, r15d
xor r9d, r9d
lea r8, [rbp + 0x2f]
xor edx, edx
lea rbx, [0x1800a5778]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
test eax, eax
jne 0x18006a085
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
cmp dword [rbp + 0x2f], r15d
je 0x18006a0dd
mov qword [rbp - 0x69], rbx
mov dword [rbp - 0x61], 4
mov rdx, qword [0x180a484c0]
add rdx, 0xb8
lea rcx, [rbp - 0x31]
call fcn.180072fd0
lea rdx, [rbp - 0x31]
lea rcx, [0x1800be770]
call fcn.18006a9f0
lea rcx, [rbp - 0x31]
call fcn.180010480
nop
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_InitOnceComplete]
test eax, eax
je 0x18006a82f
mov rcx, qword [0x1800a5748]
mov rdx, qword [rcx + 0x3ed0]
movss xmm2, dword [rdx + 0x254]
movaps xmm3, xmm2
subss xmm3, dword [rdx + 0x104]
subss xmm3, dword [0x18009389c]
movss xmm1, dword [rdx + 0x250]
unpcklps xmm1, xmm2
movsd qword [rbp - 0x59], xmm1
cmp qword [rdx + 0x1a8], 0
jne 0x18006a131
cmp qword [rcx + 0x4b30], 0
jne 0x18006a131
movss xmm0, dword [rbp - 0x59]
jmp 0x18006a139
movss xmm0, dword [rdx + 0x220]
subss xmm0, dword [rdx + 0x100]
mulss xmm0, dword [0x180093784]
movss dword [rbp - 0x59], xmm0
movss dword [rbp - 0x55], xmm3
mov word [rbp - 0x4a], 0x31
mov dword [rbp - 0x51], 0x656d2323
mov word [rbp - 0x4d], 0x756e
mov byte [rbp - 0x4b], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x48], 0
xor r8d, r8d
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x51]
call fcn.18002aff0
mov word [rbp - 0x60], reloc.WS2_32.dll_WSAStartup
mov dword [rbp - 0x69], 0x65657246
mov dword [rbp - 0x65], 0x6e654d20
mov byte [rbp - 0x61], 0x75
mov byte [rbp - 0x5e], 0
lea rcx, [rbp - 0x69]
call fcn.18001a4e0
mov rcx, qword [0x1800a5748]
mov rdx, qword [rcx + 0x3ed0]
movss xmm2, dword [rdx + 0x254]
movaps xmm3, xmm2
subss xmm3, dword [rdx + 0x104]
movss xmm1, dword [rdx + 0x250]
unpcklps xmm1, xmm2
movsd qword [rbp - 0x59], xmm1
cmp qword [rdx + 0x1a8], 0
jne 0x18006a1ef
cmp qword [rcx + 0x4b30], 0
jne 0x18006a1ef
movss xmm0, dword [rbp - 0x59]
jmp 0x18006a1f7
movss xmm0, dword [rdx + 0x220]
subss xmm0, dword [rdx + 0x100]
movss dword [rbp - 0x59], xmm0
movss dword [rbp - 0x55], xmm3
mov word [rbp - 0x5e], reloc.WS2_32.dll_WSAStartup
mov dword [rbp - 0x69], 0x72462323
mov dword [rbp - 0x65], 0x4d206565
mov word [rbp - 0x61], 0x6e65
mov byte [rbp - 0x5f], 0x75
mov byte [rbp - 0x5c], 0
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x69]
call fcn.180063680
mov ebx, r15d
mov rax, qword [0x1800be760]
mov r8, qword [0x1800be758]
sub rax, r8
sar rax, 5
test rax, rax
je 0x18006a2ad
mov qword [rbp - 0x59], rbx
mov rdi, r15
nop dword [rax]
cmp dword [0x1800a418c], ebx
sete dl
lea rcx, [rdi + r8]
cmp qword [rcx + 0x18], 0xf
jbe 0x18006a277
mov rcx, qword [rcx]
lea r9, [rbp - 0x59]
call fcn.180063130
test al, al
je 0x18006a28a
mov dword [0x1800a418c], ebx
inc ebx
add rdi, 0x20
mov rcx, qword [0x1800be760]
mov r8, qword [0x1800be758]
sub rcx, r8
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
jb 0x18006a260
call fcn.18002b0a0
call fcn.180033b80
call fcn.18002b0a0
movss xmm1, dword [0x180093948]
xorps xmm0, xmm0
call fcn.1800336f0
mov rdx, qword [0x1800a5748]
mov rcx, qword [rdx + 0x3ed0]
movss xmm2, dword [rcx + 0x254]
movaps xmm3, xmm2
subss xmm3, dword [rcx + 0x104]
subss xmm3, dword [0x18009389c]
movss xmm1, dword [rcx + 0x250]
unpcklps xmm1, xmm2
movsd qword [rbp - 0x59], xmm1
cmp qword [rcx + 0x1a8], 0
jne 0x18006a320
cmp qword [rdx + 0x4b30], 0
jne 0x18006a320
movss xmm0, dword [rbp - 0x59]
jmp 0x18006a328
movss xmm0, dword [rcx + 0x220]
subss xmm0, dword [rcx + 0x100]
movss dword [rbp - 0x59], xmm0
movss dword [rbp - 0x55], xmm3
mov word [rbp - 0x5e], reloc.WS2_32.dll_WSAStartup
mov dword [rbp - 0x69], 0x72702323
mov dword [rbp - 0x65], 0x6d206d65
mov word [rbp - 0x61], 0x6e65
mov byte [rbp - 0x5f], 0x75
mov byte [rbp - 0x5c], 0
xor r8d, r8d
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x69]
call fcn.18002aff0
mov dword [rbp - 0x5f], 0x73756e
mov dword [rbp - 0x69], 0x6d657250
mov dword [rbp - 0x65], 0x206d7569
mov word [rbp - 0x61], 0x654d
mov byte [rbp - 0x5b], 0
lea rcx, [rbp - 0x69]
call fcn.18001a4e0
mov rcx, qword [0x1800a5748]
mov rdx, qword [rcx + 0x3ed0]
movss xmm2, dword [rdx + 0x254]
movaps xmm3, xmm2
subss xmm3, dword [rdx + 0x104]
movss xmm1, dword [rdx + 0x250]
unpcklps xmm1, xmm2
movsd qword [rbp - 0x59], xmm1
cmp qword [rdx + 0x1a8], 0
jne 0x18006a3e0
cmp qword [rcx + 0x4b30], 0
jne 0x18006a3e0
movss xmm0, dword [rbp - 0x59]
jmp 0x18006a3e8
movss xmm0, dword [rdx + 0x220]
subss xmm0, dword [rdx + 0x100]
movss dword [rbp - 0x59], xmm0
movss dword [rbp - 0x55], xmm3
mov word [rbp - 0x5c], 0x75
mov dword [rbp - 0x69], 0x72502323
mov dword [rbp - 0x65], 0x75696d65
mov dword [rbp - 0x61], 0x654d206d
mov byte [rbp - 0x5d], 0x6e
mov byte [rbp - 0x5a], 0
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x69]
call fcn.180063680
mov edi, r15d
mov rax, qword [0x1800be778]
sub rax, qword [0x1800be770]
sar rax, 5
mov rsi, 0xffffffffffffffff
test rax, rax
je 0x18006a617
mov qword [rbp - 0x59], rdi
lea rax, [rbp - 0x31]
mov qword [rbp + 0x2f], rax
mov rbx, r15
nop
cmp dword [0x1800a4188], edi
sete r14b
lea rax, [rbp - 0x31]
mov qword [rbp - 0x41], rax
mov word [rbp - 0x60], 0x39
mov dword [rbp - 0x69], 0x73586644
mov dword [rbp - 0x65], 0x4d583853
mov byte [rbp - 0x61], 0x48
mov byte [rbp - 0x5e], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], r15
lea rax, [rbp - 0x69]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x18006a4a4
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x31]
call fcn.18000fc50
nop
shl rbx, 5
add rbx, qword [0x1800be770]
mov rdx, rbx
lea rcx, [rbp + 0xf]
call fcn.18000f7b0
mov rbx, rax
mov qword [rbp - 0x51], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
mov r8d, 0x1b
lea rdx, [0x1800911d8]
lea rcx, [rbp - 0x11]
call fcn.18000fc50
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x18006a53a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x18006a535
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18006a677
mov rcx, r8
call fcn.1800809bc
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], recv
mov byte [rbx], 0
mov rdx, qword [rbp - 0x19]
cmp rdx, 0xf
jbe 0x18006a584
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006a57f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006a67e
call fcn.1800809bc
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], recv
mov byte [rbp - 0x31], 0
lea rcx, [rbp - 0x11]
cmp qword [rbp + 7], 0xf
cmova rcx, qword [rbp - 0x11]
lea r9, [rbp - 0x59]
movzx edx, r14b
call fcn.180063130
movzx ebx, al
mov rdx, qword [rbp + 7]
cmp rdx, 0xf
jbe 0x18006a5ed
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006a5e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006a67e
call fcn.1800809bc
test bl, bl
je 0x18006a5f7
mov dword [0x1800a4188], edi
inc edi
movsxd rbx, edi
mov rax, qword [0x1800be778]
sub rax, qword [0x1800be770]
sar rax, 5
cmp rbx, rax
jb 0x18006a460
call fcn.18002b0a0
call fcn.180033b80
call fcn.18002b0a0
mov qword [rbp - 0x59], 0
mov dword [rbp - 0x3d], 0x657475
mov dword [rbp - 0x41], 0x63657845
mov byte [rbp - 0x39], 0
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x41]
call fcn.1800528f0
test al, al
je 0x18006a783
cmp dword [0x1800a4188], 0xffffffff
je 0x18006a783
cmp byte [0x1800a575f], 0
jne 0x18006a685
mov byte [0x1800a575e], 1
jmp 0x18006a783
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 8
call fcn.180080610
mov rbx, rax
mov qword [rax], r15
call fcn.18007c940
mov rcx, rax
call fcn.18007ccf0
test rax, rax
je 0x18006a783
mov qword [rbx], rax
movsxd rdx, dword [0x1800a4188]
shl rdx, 5
add rdx, qword [0x1800be770]
lea rcx, [rbp + 0xf]
call fcn.18000f7b0
mov rdx, rax
lea rcx, [rbp - 0x31]
call fcn.180069ba0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x18006a6e0
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
mov qword [rbp - 1], r15
mov qword [rbp + 7], r15
nop
inc rsi
cmp byte [rax + rsi], 0
jne 0x18006a6f0
mov r8, rsi
mov rdx, rax
lea rcx, [rbp - 0x11]
call fcn.18000fc50
xor r8d, r8d
mov dl, 1
lea rcx, [rbp - 0x11]
call fcn.18007dc50
test al, al
je 0x18006a735
mov rcx, qword [rbx]
test rcx, rcx
je 0x18006a735
call fcn.18007d760
test rax, rax
je 0x18006a735
mov rcx, rax
call fcn.18007d7d0
nop
mov rdx, qword [rbp - 0x19]
cmp rdx, 0xf
jbe 0x18006a773
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006a76e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006a76e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800809bc
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], recv
mov byte [rbp - 0x31], 0
mov rax, qword [0x1800a5748]
mov rcx, qword [rax + 0x3ed0]
cmp byte [rcx + 0xbb], 0
jne 0x18006a7e1
movss xmm0, dword [rax + 0x381c]
addss xmm0, dword [rcx + 0x108]
movss dword [rcx + 0x100], xmm0
mov eax, dword [rcx + 0x10c]
mov dword [rcx + 0x104], eax
movsd xmm0, qword [rcx + 0x130]
movsd qword [rcx + 0x128], xmm0
mov eax, dword [rcx + 0x13c]
mov dword [rcx + 0x138], eax
mov byte [rcx + 0x140], 1
mov word [rbp + 0x34], 0x6d
mov dword [rbp + 0x2f], 0x646e6152
mov byte [rbp + 0x33], 0x6f
mov byte [rbp + 0x36], 0
lea rdx, [0x1800a575f]
lea rcx, [rbp + 0x2f]
call fcn.180053f60
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1800804d0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.180080230
int3