Function at 0x18006ab50
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x1d8]
sub rsp, 0x2d0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x1800a4040]
xor rax, rsp
mov qword [rbp + 0x1b8], rax
mov dword [rsp + 0x6e], 0x31765f
mov dword [rsp + 0x68], 0x65732323
mov word [rsp + 0x6c], 0x666c
mov byte [rsp + 0x72], 0
lea rcx, [rsp + 0x68]
call fcn.180063be0
test al, al
je 0x18006b58c
mov word [rsp + 0x63], 0x66
mov word [rsp + 0x60], 0x6553
mov byte [rsp + 0x62], 0x6c
mov byte [rsp + 0x65], 0
mov rdx, qword [0x1800a5748]
mov rax, qword [rdx + 0x3ed0]
xor ebx, ebx
movss xmm6, dword [0x180093948]
cmp byte [rax + 0xbb], bl
jne 0x18006afba
mov rdi, qword [rdx + 0x4b98]
test rdi, rdi
je 0x18006afba
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.180065a80
test al, al
je 0x18006afb3
movsx rax, word [rdi + 0x70]
imul rcx, rax, 0x2c
add rcx, qword [rdi + 8]
mov ecx, dword [rcx]
call fcn.180030cd0
mov qword [rsp + 0x40], rbx
mov word [rbp + 0x179], 0x68
mov dword [rbp + 0x170], 0x20646441
mov dword [rbp + 0x174], 0x6c616548
mov byte [rbp + 0x178], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x17b], bl
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x170]
call fcn.1800528f0
test al, al
je 0x18006ac97
mov rax, qword [0x1800a56e0]
mov rcx, qword [rax]
test rcx, rcx
je 0x18006ac97
mov rax, qword [rcx + 8]
test rax, rax
je 0x18006ac97
mov dword [rax + 0x280], 0x43480000
mov qword [rsp + 0x40], rbx
mov word [rbp + 0x179], WSAStartup
mov dword [rbp + 0x170], 0x20646441
mov dword [rbp + 0x174], 0x6f6d7241
mov byte [rbp + 0x178], 0x75
mov byte [rbp + 0x17b], bl
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x170]
call fcn.1800528f0
test al, al
je 0x18006ad00
mov rax, qword [0x1800a56e0]
mov rcx, qword [rax]
test rcx, rcx
je 0x18006ad00
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x18006ad00
mov eax, dword [0x180a48468]
mov dword [rax + rdx], 0x42c80000
mov dword [rsp + 0x44], 0x65646f
mov dword [rsp + 0x40], 0x4d646f47
mov byte [rsp + 0x48], bl
lea rdx, [0x180a484f3]
lea rcx, [rsp + 0x40]
call fcn.180053f60
mov word [rsp + 0x4b], 0x65
mov dword [rsp + 0x40], 0x696d6553
mov dword [rsp + 0x44], 0x646f4720
mov word [rsp + 0x48], 0x6f4d
mov byte [rsp + 0x4a], 0x64
mov byte [rsp + 0x4d], bl
lea rdx, [0x180a484f5]
lea rcx, [rsp + 0x40]
call fcn.180053f60
mov dword [rsp + 0x46], 0x656c62
mov dword [rsp + 0x40], 0x69766e49
mov word [rsp + 0x44], 0x6973
mov byte [rsp + 0x4a], bl
lea rdx, [0x180a484f0]
lea rcx, [rsp + 0x40]
call fcn.180053f60
mov dword [rsp + 0x44], 0x534820
mov dword [rsp + 0x40], 0x69746e41
mov byte [rsp + 0x48], bl
lea rdx, [0x180a484f1]
lea rcx, [rsp + 0x40]
call fcn.180053f60
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1800336f0
mov word [rbp + 0x180], 0x3f
mov byte [rbp + 0x182], bl
movdqa xmm0, xmmword [0x180094050]
movups xmmword [rsp + 0x50], xmm0
lea rdx, [rbp + 0x180]
lea rcx, [rsp + 0x50]
call fcn.180051f30
mov rcx, qword [0x1800a5748]
mov r8, qword [rcx + 0x3ed0]
cmp byte [rcx + 0x48ef], bl
je 0x18006ae30
cmp byte [rcx + 0x48ee], bl
jne 0x18006ae30
test byte [rcx + 0x4770], 4
jne 0x18006af4a
mov eax, dword [rcx + 0x48b8]
cmp eax, dword [rcx + 0x476c]
jne 0x18006af4a
test eax, eax
jne 0x18006aefb
jmp 0x18006af4a
mov eax, dword [rcx + 0x4774]
test al, 1
je 0x18006af4a
cmp qword [rcx + 0x3ed8], r8
je 0x18006ae4f
test al, al
jns 0x18006af4a
mov eax, dword [rcx + 0x3f30]
test eax, eax
je 0x18006ae73
cmp eax, dword [rcx + 0x476c]
je 0x18006ae73
cmp byte [rcx + 0x3f3d], bl
jne 0x18006ae73
cmp eax, dword [r8 + 0x7c]
jne 0x18006af4a
mov rdx, qword [rcx + 0x48b0]
test rdx, rdx
je 0x18006aedd
mov rdx, qword [rdx + 0x378]
test rdx, rdx
je 0x18006aedd
cmp byte [rdx + 0xb7], bl
je 0x18006aedd
mov rax, qword [r8 + 0x378]
cmp rdx, rax
je 0x18006aedd
mov r9d, dword [rdx + 0x14]
bt r9d, 0x1b
jb 0x18006aeb1
bt r9d, 0x1a
jae 0x18006aedd
cmp qword [rax + 0x378], rdx
je 0x18006aedd
nop word [rax + rax]
cmp rax, rdx
je 0x18006aedd
mov rax, qword [rax + 0x370]
test rax, rax
jne 0x18006aec0
test dword [rcx + 0x4770], 0x100
je 0x18006af4a
test byte [rcx + 0x4770], 4
jne 0x18006af4a
mov eax, dword [r8 + 0x7c]
cmp dword [rcx + 0x476c], eax
jne 0x18006aefb
cmp byte [r8 + 0xb8], bl
jne 0x18006af4a
mov dword [rbp + 0x1ae], 0x2e756f
movdqa xmm0, xmmword [0x180094540]
movdqu xmmword [rbp + 0x188], xmm0
movdqa xmm1, xmmword [0x180093d00]
movdqu xmmword [rbp + 0x198], xmm1
mov dword [rbp + 0x1a8], 0x746f6873
mov word [rbp + 0x1ac], 0x7920
mov byte [rbp + 0x1b2], bl
lea rcx, [rbp + 0x188]
call fcn.180034710
mov word [rbp + 0x198], bx
movdqa xmm0, xmmword [0x180094380]
movdqu xmmword [rbp + 0x188], xmm0
lea rdx, [0x180a484f4]
lea rcx, [rbp + 0x188]
call fcn.180053f60
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], bl
jne 0x18006afba
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x18006afba
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
add rcx, qword [r8 + 8]
test byte [rcx + 4], 8
jne 0x18006afba
dec dword [r9 + 0xf0]
jmp 0x18006afba
mov rdx, qword [0x1800a5748]
mov word [rsp + 0x45], WSAStartup
mov dword [rsp + 0x40], 0x6c636f4e
mov byte [rsp + 0x44], 0x69
mov byte [rsp + 0x47], bl
mov rax, qword [rdx + 0x3ed0]
cmp byte [rax + 0xbb], bl
jne 0x18006b1a1
mov rdi, qword [rdx + 0x4b98]
test rdi, rdi
je 0x18006b1a1
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.180065a80
test al, al
je 0x18006b19a
movsx rax, word [rdi + 0x70]
imul rcx, rax, 0x2c
add rcx, qword [rdi + 8]
mov ecx, dword [rcx]
call fcn.180030cd0
mov word [rbp + 0x175], WSAStartup
mov dword [rbp + 0x170], 0x6c636f4e
mov byte [rbp + 0x174], 0x69
mov byte [rbp + 0x177], bl
lea rdx, [0x180a484f2]
lea rcx, [rbp + 0x170]
call fcn.180053f60
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1800336f0
mov dword [rbp + 0x170], 0x43480000
mov dword [rbp + 0x174], 0x41f00000
mov word [rsp + 0x5d], 0x20
mov dword [rsp + 0x50], 0x6c636f4e
mov dword [rsp + 0x54], 0x4b207069
mov dword [rsp + 0x58], 0x203a7965
mov byte [rsp + 0x5c], 0x20
mov byte [rsp + 0x5f], bl
lea r8, [rbp + 0x170]
lea rdx, [0x180a48720]
lea rcx, [rsp + 0x50]
call fcn.180027610
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1800336f0
mov rdx, qword [0x1800a5748]
or dword [rdx + 0x4758], 1
mov dword [rdx + 0x475c], 0x42c80000
mov word [rsp + 0x5b], 0x64
mov dword [rsp + 0x50], 0x6c636f4e
mov dword [rsp + 0x54], 0x73207069
mov word [rsp + 0x58], 0x6570
mov byte [rsp + 0x5a], 0x65
mov byte [rsp + 0x5d], bl
mov dword [rbp + 0x180], 0x42c80000
mov dword [rbp + 0x170], 0x3f800000
lea rax, str._.3f
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x180]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x170]
mov qword [rsp + 0x20], rax
movss xmm3, dword [0x1800937d0]
lea r8, [0x1800a4228]
mov edx, 8
lea rcx, [rsp + 0x50]
call fcn.1800568f0
mov rdx, qword [0x1800a5748]
mov r9, qword [rdx + 0x3ed0]
cmp byte [r9 + 0xbb], bl
jne 0x18006b1a1
mov r8, qword [rdx + 0x4b98]
test r8, r8
je 0x18006b1a1
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
add rcx, qword [r8 + 8]
test byte [rcx + 4], 8
jne 0x18006b1a1
dec dword [r9 + 0xf0]
jmp 0x18006b1a1
mov rdx, qword [0x1800a5748]
mov word [rbp + 0x177], reloc.WS2_32.dll_WSACleanup
mov dword [rbp + 0x170], 0x656c6554
mov word [rbp + 0x174], 0x6f70
mov byte [rbp + 0x176], WSAStartup
mov byte [rbp + 0x179], bl
mov rax, qword [rdx + 0x3ed0]
cmp byte [rax + 0xbb], bl
jne 0x18006b587
mov rdi, qword [rdx + 0x4b98]
test rdi, rdi
je 0x18006b587
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x170]
mov rcx, rdi
call fcn.180065a80
movzx esi, al
test al, al
je 0x18006b222
movsx rcx, word [rdi + 0x70]
imul rcx, rcx, 0x2c
add rcx, qword [rdi + 8]
mov ecx, dword [rcx]
call fcn.180030cd0
test sil, sil
je 0x18006b587
mov qword [rsp + 0x40], rbx
mov word [rbp + 0x19b], reloc.WS2_32.dll_WSACleanup
movdqa xmm0, xmmword [0x1800945d0]
movdqu xmmword [rbp + 0x188], xmm0
mov word [rbp + 0x198], 0x696f
mov byte [rbp + 0x19a], WSAStartup
mov byte [rbp + 0x19d], bl
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x188]
call fcn.1800528f0
test al, al
je 0x18006b4fc
movdqa xmm0, xmmword [0x180094df0]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [0x180094f00]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [0x180095070]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x180094780]
movdqa xmmword [rbp - 0x50], xmm1
movdqa xmm0, xmmword [0x180094e30]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x180093ac0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x180093d90]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1800942f0]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [0x180094250]
movdqa xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x180093b60]
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmm0, xmmword [0x180093c40]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [0x180094280]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [0x180093bd0]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [0x180094a40]
movdqa xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmmword [0x180094ff0]
movdqa xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x180094c80]
movdqa xmmword [rbp + 0x70], xmm1
movdqa xmm0, xmmword [0x180094cf0]
movdqa xmmword [rbp + 0x80], xmm0
movdqa xmm1, xmmword [0x180094c30]
movdqa xmmword [rbp + 0x90], xmm1
movdqa xmm0, xmmword [0x180094bf0]
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmm1, xmmword [0x180094890]
movdqa xmmword [rbp + 0xb0], xmm1
movdqa xmm0, xmmword [0x180094fe0]
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmm1, xmmword [0x1800946d0]
movdqa xmmword [rbp + 0xd0], xmm1
movdqa xmm0, xmmword [0x1800943a0]
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [0x180094290]
movdqa xmmword [rbp + 0xf0], xmm1
movdqa xmm0, xmmword [0x180094330]
movdqa xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmmword [0x180093c70]
movdqa xmmword [rbp + 0x110], xmm1
movdqa xmm0, xmmword [0x180093cb0]
movdqa xmmword [rbp + 0x120], xmm0
movdqa xmm1, xmmword [0x180093ad0]
movdqa xmmword [rbp + 0x130], xmm1
movdqa xmm0, xmmword [0x180093ae0]
movdqa xmmword [rbp + 0x140], xmm0
movdqa xmm1, xmmword [0x180094f90]
movdqa xmmword [rbp + 0x150], xmm1
mov dword [rbp + 0x160], 0x86878486
mov dword [rbp + 0x164], 0xf7fcf499
mov dword [rbp + 0x168], 0x1009f9e
lea eax, [rbx - 0x54]
xor byte [rbp + rbx - 0x80], al
inc rbx
cmp rbx, 0x1ea
jb 0x18006b446
mov byte [rbp + 0x16b], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x188], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x198], xmm1
lea rax, [rbp - 0x80]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x18006b480
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x188]
call fcn.18000fc50
nop
lea rcx, [rbp + 0x188]
cmp qword [rbp + 0x1a0], 0xf
cmova rcx, qword [rbp + 0x188]
call fcn.18006aaa0
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x18006b4fc
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006b4f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006b4f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800809bc
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.1800336f0
mov dword [rsp + 0x40], 0x43480000
mov dword [rsp + 0x44], 0x41f00000
mov word [rbp + 0x198], 0
movdqa xmm0, xmmword [str.Teleport_Key:___The_aimbot_will_Remove_all_your__9__]
movdqu xmmword [rbp + 0x188], xmm0
lea r8, [rsp + 0x40]
lea rdx, [0x180a48724]
lea rcx, [rbp + 0x188]
call fcn.180027610
mov rdx, qword [0x1800a5748]
mov r8, qword [rdx + 0x3ed0]
cmp byte [r8 + 0xbb], 0
jne 0x18006b587
mov rdx, qword [rdx + 0x4b98]
test rdx, rdx
je 0x18006b587
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x18006b587
dec dword [r8 + 0xf0]
call fcn.180064070
mov rcx, qword [rbp + 0x1b8]
xor rcx, rsp
call fcn.1800804d0
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret