Function at 0x1800a4da0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov rax, qword [0x18050e060]
xor rax, rsp
mov qword [rbp + 0x1b0], rax
mov rdi, r8
mov rsi, rdx
mov r12, rcx
mov qword [rbp + 0x130], rdx
mov qword [rbp + 0x138], r8
xor ebx, ebx
call fcn.1800a6d40
lea rcx, [rbp + 0x170]
call fcn.1800b3960
nop
mov dword [rsp + 0x58], 0x4159420a
mov dword [rsp + 0x5c], 0x575b4355
mov word [rsp + 0x60], 9
mov byte [rsp + 0x62], 1
mov dword [rsp + 0x50], 0x424f430a
mov dword [rsp + 0x54], 0x1000c55
mov dword [rsp + 0x38], 0x8c9b8eda
mov dword [rsp + 0x3c], 0x6d6d6873
mov dword [rsp + 0x40], 0x3b616d
mov byte [rsp + 0x44], 1
mov dword [rsp + 0x48], 0x4659450a
mov dword [rsp + 0x4c], 0x1000c54
mov dword [rsp + 0x30], 0x5c4f5d0a
mov dword [rsp + 0x34], 0x1000c43
mov dword [rsp + 0x68], 0x4a5d580a
mov dword [rsp + 0x6c], 0x5e535f42
mov dword [rsp + 0x70], 0x1000851
mov dword [rbp - 0x68], 0x4a5e5458
mov dword [rbp - 0x64], 0x545d5d0d
mov dword [rbp - 0x60], 0x1005b5d
lea r8, [rsp + 0x68]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0xf0]
call fcn.1800a5900
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1800a4eb4
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.1800476f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x30]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xc0]
call fcn.1800a4b80
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x1800a4f01
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.1800476f0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0xa0]
call fcn.1800a4b80
nop
lea rdx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
cmovae rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
mov rcx, rax
call fcn.1800476f0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x60]
call fcn.1800a5a20
nop
lea rdx, [r12 + 0x278]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1800a4fb7
mov rdx, qword [rdx]
mov rcx, rax
call fcn.1800476f0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.1800a4b80
nop
mov rdx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1800a4fff
mov rdx, qword [r12]
mov r8, qword [r12 + 0x10]
mov rcx, rax
call fcn.1800476f0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x78]
lea rcx, [rbp]
call fcn.1800a4c60
nop
lea rdx, [r12 + 0x20]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1800a5052
mov rdx, qword [rdx]
mov rcx, rax
call fcn.1800476f0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x160], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1800a50bc
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a50b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a50b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x1800a510d
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5107
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5107
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x1800a514b
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5146
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5146
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1800a519b
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5195
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5195
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x1800a51d9
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a51d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a51d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x1800a522f
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5229
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5229
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x1800a5273
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a526e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a526e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp + 0xb0], xmm0
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1800a52c9
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a52c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a52c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x1800a530d
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5308
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5308
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1800a5363
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a535d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a535d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x1800a53a7
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a53a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a53a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
lea rax, [rbp - 0x20]
mov qword [rbp + 0xe0], rax
lea rdx, [r12 + 0xa0]
lea rcx, [rbp - 0x20]
call fcn.1800475d0
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x40]
mov qword [rbp + 0xe8], rax
lea rdx, [r12 + 0x80]
lea rcx, [rbp - 0x40]
call fcn.1800475d0
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], rbx
lea r13, [rbp + 0x150]
mov r15, qword [rbp + 0x150]
cmp qword [rbp + 0x168], 0x10
cmovae r13, r15
movabs rbx, 0x7fffffffffffffff
mov r14, qword [rbp + 0x160]
cmp r14, rbx
ja 0x1800a58f2
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
cmp r14, 0x10
jae 0x1800a5463
mov qword [rbp - 0x78], r14
movups xmm0, xmmword [r13]
movups xmmword [rsp + 0x78], xmm0
jmp 0x1800a54fb
mov rax, r14
or rax, 0xf
cmp rax, rbx
jbe 0x1800a549b
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1801021fc
mov rcx, rax
test rax, rax
je 0x1800a54c6
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800a54db
mov rbx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800a54cd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800a58f8
jmp 0x1800a547d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1800a54d9
call fcn.1801021fc
jmp 0x1800a54db
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], rbx
lea r8, [r14 + 1]
mov rdx, r13
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 0x48]
mov r9, qword [rbp - 0x58]
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x190]
call fcn.1800a69b0
nop
call fcn.1800a6d40
xor r13d, r13d
mov qword [rbp + 0x128], r13
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x140]
call fcn.1800a8460
nop
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x38]
call fcn.1800a7440
mov rdx, rax
mov rcx, r12
call fcn.1800a3730
movzx edx, byte [rbp + 0x140]
test dl, dl
jne 0x1800a558b
mov byte [rbp + 0x140], 1
mov dl, 1
lea rcx, [rbp - 0x58]
call fcn.1800a7ff0
mov rbx, qword [rbp - 0x58]
mov qword [rbp + 0x148], rbx
movzx edx, byte [rbp + 0x140]
jmp 0x1800a5592
mov rbx, qword [rbp + 0x148]
cmp dl, 1
jne 0x1800a563d
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 7
lea rdx, str.success
lea rcx, [rsp + 0x78]
call fcn.18004bd00
nop
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1800af5e0
mov r14, qword [rax]
add r14, 0x40
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x1800a561b
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5616
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5616
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rbx, qword [rbp + 0x148]
movzx edx, byte [rbp + 0x140]
jmp 0x1800a5641
mov r14, qword [rbp - 0x50]
lea rax, [r14 + 8]
cmp byte [r14], 4
cmovne rax, r13
cmp byte [rax], 0
je 0x1800a573d
test dl, dl
jne 0x1800a567e
mov byte [rbp + 0x140], 1
mov dl, 1
lea rcx, [rbp - 0x58]
call fcn.1800a7ff0
mov rbx, qword [rbp - 0x58]
mov qword [rbp + 0x148], rbx
movzx edx, byte [rbp + 0x140]
cmp dl, 1
jne 0x1800a571a
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 4
lea rdx, str.info
lea rcx, [rsp + 0x78]
call fcn.18004bd00
nop
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x68]
mov rcx, rbx
call fcn.1800af5e0
mov rbx, qword [rax]
add rbx, 0x40
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x1800a5706
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5701
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5701
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
jmp 0x1800a571e
mov rbx, qword [rbp - 0x50]
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.1800a7440
mov rdx, rax
mov rcx, r12
call fcn.1800a2f30
movzx edx, byte [rbp + 0x140]
lea rcx, [rbp + 0x148]
call fcn.1800a7a30
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x1800a578e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5789
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5789
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
movdqa xmm0, xmmword [0x1804f9d90]
movdqu xmmword [rbp + 0x1a0], xmm0
mov byte [rbp + 0x190], 0
mov rax, qword [rbp + 0x168]
cmp rax, 0x10
jb 0x1800a57e7
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1800a57de
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a57de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.180101e04
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1800a582c
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800a5826
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800a5826
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180101e04
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x1800a5866
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800a5861
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800a58e4
mov rcx, r8
call fcn.180101e04
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x1800a58ab
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1800a58a6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800a58eb
mov rcx, r8
call fcn.180101e04
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rcx, qword [rbp + 0x1b0]
xor rcx, rsp
call fcn.1801017e0
mov rbx, qword [rsp + 0x318]
add rsp, 0x2c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180031980
int3
call fcn.180031960
int3