Function at 0x180009bac
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x308]
sub rsp, 0x3d0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r8, rdx
mov r13, rcx
mov byte [rsp + 0x20], 0x4d
mov byte [rsp + 0x21], 0x4f
mov byte [rsp + 0x22], 0x54
mov byte [rsp + 0x23], 0x55
mov byte [rsp + 0x24], 0x51
mov byte [rsp + 0x25], 0x62
mov byte [rsp + 0x26], 0x51
mov byte [rsp + 0x27], 0x59
mov byte [rsp + 0x28], 0x51
mov byte [rsp + 0x29], 0x5a
mov byte [rsp + 0x2a], 0x60
mov byte [rsp + 0x2b], 0x5f
xor r12d, r12d
mov byte [rsp + 0x2c], r12b
mov al, byte [rsp + 0x20]
mov ecx, r12d
mov al, byte [rsp + rcx + 0x20]
sub al, 0xc
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x180009c25
lea rdx, [rsp + 0x20]
mov rcx, r8
call fcn.18006e340
mov rsi, rax
test rax, rax
je 0x18000a204
xor edx, edx
mov rcx, rax
call fcn.18006e22c
mov r15d, 1
jmp 0x18000a1f8
mov rdx, rdi
mov rcx, rsi
call fcn.18006e340
mov rbx, rax
test rax, rax
je 0x18000a1ea
mov byte [rbp + 0x320], 0x7b
mov byte [rbp + 0x321], WSACleanup
mov byte [rbp + 0x322], 0x7a
mov byte [rbp + 0x323], WSACleanup
mov byte [rbp + 0x324], r12b
mov cl, byte [rbp + 0x320]
mov rcx, r12
mov al, byte [rbp + rcx + 0x320]
sub al, 0xd
mov byte [rbp + rcx + 0x320], al
inc rcx
cmp rcx, 4
jb 0x180009ca9
mov r9d, 0x80
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x320]
mov rcx, rbx
call fcn.180006e5c
mov byte [rbp + 0x328], WSASetLastError
mov byte [rbp + 0x329], WSASetLastError
mov byte [rbp + 0x32a], 0x7a
mov byte [rbp + 0x32b], WSASetLastError
mov byte [rbp + 0x32c], r12b
mov al, byte [rbp + 0x328]
mov rcx, r12
mov al, byte [rbp + rcx + 0x328]
sub al, 7
mov byte [rbp + rcx + 0x328], al
inc rcx
cmp rcx, 4
jb 0x180009d0a
mov r9d, 0x100
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x328]
mov rcx, rbx
call fcn.180006e5c
mov byte [rsp + 0x2d], 0x6b
mov byte [rsp + 0x2e], 0x65
mov byte [rsp + 0x2f], WSACleanup
mov byte [rsp + 0x30], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x31], r12b
mov al, byte [rsp + 0x2d]
mov rcx, r12
mov al, byte [rsp + rcx + 0x2d]
sub al, 2
mov byte [rsp + rcx + 0x2d], al
inc rcx
cmp rcx, 4
jb 0x180009d5f
mov r9d, 0x80
lea r8, [rbp + 0x30]
lea rdx, [rsp + 0x2d]
mov rcx, rbx
call fcn.180006e5c
mov byte [rsp + 0x20], 0x75
mov byte [rsp + 0x21], WSASetLastError
mov byte [rsp + 0x22], 0x7b
mov byte [rsp + 0x23], 0x7a
mov byte [rsp + 0x24], 0x6b
mov byte [rsp + 0x25], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x26], 0x7e
mov byte [rsp + 0x27], WSASetLastError
mov byte [rsp + 0x28], 0x85
mov byte [rsp + 0x29], r12b
mov al, byte [rsp + 0x20]
mov rcx, r12
mov al, byte [rsp + rcx + 0x20]
sub al, 0xc
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 9
jb 0x180009dc2
mov r9d, 0x80
lea r8, [rbp + 0xb0]
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.180006e5c
mov byte [rsp + 0x32], WSASetLastError
mov byte [rsp + 0x33], WSASetLastError
mov byte [rsp + 0x34], 0x69
mov byte [rsp + 0x35], 0x69
mov byte [rsp + 0x36], 0x6a
mov byte [rsp + 0x37], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x38], r12b
mov al, byte [rsp + 0x32]
mov rcx, r12
mov al, byte [rsp + rcx + 0x32]
sub al, 5
mov byte [rsp + rcx + 0x32], al
inc rcx
cmp rcx, 6
jb 0x180009e19
xor r8d, r8d
lea rdx, [rsp + 0x32]
mov rcx, rbx
call fcn.180006f24
mov r14b, al
mov byte [rsp + 0x39], 0x7b
mov byte [rsp + 0x3a], 0x7d
mov byte [rsp + 0x3b], 0x7a
mov byte [rsp + 0x3c], WSACleanup
mov byte [rsp + 0x3d], 0x7d
mov byte [rsp + 0x3e], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x3f], 0x7e
mov byte [rsp + 0x40], 0x7e
mov byte [rsp + 0x41], 0x6a
mov byte [rsp + 0x42], 0x78
mov byte [rsp + 0x43], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x44], 0x79
mov byte [rsp + 0x45], r12b
mov cl, byte [rsp + 0x39]
mov rcx, r12
mov al, byte [rsp + rcx + 0x39]
sub al, 0xb
mov byte [rsp + rcx + 0x39], al
inc rcx
cmp rcx, 0xc
jb 0x180009e87
movsd xmm2, qword [0x1800da258]
lea rdx, [rsp + 0x39]
mov rcx, rbx
call fcn.180006ee4
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
mov byte [rsp + 0x46], 0x7c
mov byte [rsp + 0x47], 0x7e
mov byte [rsp + 0x48], 0x7b
mov byte [rsp + 0x49], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x4a], 0x7e
mov byte [rsp + 0x4b], WSACleanup
mov byte [rsp + 0x4c], 0x7f
mov byte [rsp + 0x4d], 0x7f
mov byte [rsp + 0x4e], 0x6b
mov byte [rsp + 0x4f], 0x79
mov byte [rsp + 0x50], WSASetLastError
mov byte [rsp + 0x51], 0x84
mov byte [rsp + 0x52], r12b
mov al, byte [rsp + 0x46]
mov rcx, r12
mov al, byte [rsp + rcx + 0x46]
sub al, 0xc
mov byte [rsp + rcx + 0x46], al
inc rcx
cmp rcx, 0xc
jb 0x180009efe
movsd xmm2, qword [0x1800da258]
lea rdx, [rsp + 0x46]
mov rcx, rbx
call fcn.180006ee4
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.180052b50
nop
lea rax, [rbp + 0x130]
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009f48
test r8, r8
je 0x18000a098
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x58]
call fcn.18000f140
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
lea rax, [rbp + 0x1b0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009f98
lea rdx, [rbp + 0x1b0]
lea rcx, [rsp + 0x78]
call fcn.18000f140
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009fc9
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.18000f140
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rax, [rbp + 0xb0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x180009ff9
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x48]
call fcn.18000f140
mov byte [rbp - 0x28], r14b
movss dword [rbp - 0x24], xmm7
movss dword [rbp - 0x20], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x18]
lea rdx, [rbp + 8]
call fcn.18000eb44
mov rbx, qword [rax]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x30]
call fcn.18000d7ac
lea rcx, [rbx + 0x50]
lea rdx, [rsp + 0x78]
call fcn.18000d7ac
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x68]
call fcn.18000d7ac
lea rcx, [rbx + 0x90]
lea rdx, [rbp - 0x48]
call fcn.18000d7ac
mov al, byte [rbp - 0x28]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp - 0x24]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp - 0x20]
movss dword [rbx + 0xb8], xmm1
jmp 0x18000a1a8
lea r9, [0x1800c08c8]
mov r8, rbx
lea rdx, [rsp + 0x58]
mov rcx, r13
call fcn.180009ac0
nop
lea r9, [0x1800c08d0]
mov r8, rbx
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.180009ac0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a0de
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.18000f140
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rax, [rbp + 0xb0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a10e
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x48]
call fcn.18000f140
mov byte [rbp - 0x28], r14b
movss dword [rbp - 0x24], xmm7
movss dword [rbp - 0x20], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x18]
lea rdx, [rbp + 0x18]
call fcn.18000eb44
mov rbx, qword [rax]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x30]
call fcn.18000d7ac
lea rcx, [rbx + 0x50]
lea rdx, [rsp + 0x78]
call fcn.18000d7ac
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x68]
call fcn.18000d7ac
lea rcx, [rbx + 0x90]
lea rdx, [rbp - 0x48]
call fcn.18000d7ac
mov al, byte [rbp - 0x28]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp - 0x24]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp - 0x20]
movss dword [rbx + 0xb8], xmm1
lea rcx, [rsp + 0x58]
call fcn.18000a230
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x18000a1ea
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a1e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a229
call fcn.180095310
mov edx, r15d
mov rcx, rsi
call fcn.18006e22c
inc r15d
test rax, rax
mov rdi, rax
jne 0x180009c66
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180099730
int3