Function at 0x180009c64
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x308]
sub rsp, 0x3d0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov r8, rdx
mov r13, rcx
mov byte [rsp + 0x20], 0x4e
mov byte [rsp + 0x21], 0x50
mov byte [rsp + 0x22], 0x55
mov byte [rsp + 0x23], 0x56
mov byte [rsp + 0x24], 0x52
mov byte [rsp + 0x25], 0x63
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 0x5a
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], 0x5b
mov byte [rsp + 0x2a], 0x61
mov byte [rsp + 0x2b], 0x60
xor r12d, r12d
mov byte [rsp + 0x2c], r12b
mov al, byte [rsp + 0x20]
mov ecx, r12d
mov al, byte [rsp + rcx + 0x20]
sub al, 0xd
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x180009cdd
lea rdx, [rsp + 0x20]
mov rcx, r8
call fcn.180066b68
mov rsi, rax
test rax, rax
je 0x18000a2bc
xor edx, edx
mov rcx, rax
call fcn.180066a54
mov r15d, 1
jmp 0x18000a2b0
mov rdx, rdi
mov rcx, rsi
call fcn.180066b68
mov rbx, rax
test rax, rax
je 0x18000a2a2
mov byte [rbp + 0x320], 0x76
mov byte [rbp + 0x321], 0x69
mov byte [rbp + 0x322], 0x75
mov byte [rbp + 0x323], WSAStartup
mov byte [rbp + 0x324], r12b
mov cl, byte [rbp + 0x320]
mov rcx, r12
mov al, byte [rbp + rcx + 0x320]
sub al, 8
mov byte [rbp + rcx + 0x320], al
inc rcx
cmp rcx, 4
jb 0x180009d61
mov r9d, 0x80
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x320]
mov rcx, rbx
call fcn.180006d9c
mov byte [rbp + 0x328], WSASetLastError
mov byte [rbp + 0x329], WSASetLastError
mov byte [rbp + 0x32a], 0x7a
mov byte [rbp + 0x32b], WSASetLastError
mov byte [rbp + 0x32c], r12b
mov al, byte [rbp + 0x328]
mov rcx, r12
mov al, byte [rbp + rcx + 0x328]
sub al, 7
mov byte [rbp + rcx + 0x328], al
inc rcx
cmp rcx, 4
jb 0x180009dc2
mov r9d, 0x100
lea r8, [rbp + 0x1b0]
lea rdx, [rbp + 0x328]
mov rcx, rbx
call fcn.180006d9c
mov byte [rsp + 0x2d], 0x76
mov byte [rsp + 0x2e], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x2f], 0x7c
mov byte [rsp + 0x30], 0x7b
mov byte [rsp + 0x31], r12b
mov al, byte [rsp + 0x2d]
mov rcx, r12
mov al, byte [rsp + rcx + 0x2d]
sub al, 0xd
mov byte [rsp + rcx + 0x2d], al
inc rcx
cmp rcx, 4
jb 0x180009e17
mov r9d, 0x80
lea r8, [rbp + 0x30]
lea rdx, [rsp + 0x2d]
mov rcx, rbx
call fcn.180006d9c
mov byte [rsp + 0x20], WSAStartup
mov byte [rsp + 0x21], 0x69
mov byte [rsp + 0x22], 0x75
mov byte [rsp + 0x23], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x24], 0x65
mov byte [rsp + 0x25], WSASetLastError
mov byte [rsp + 0x26], 0x78
mov byte [rsp + 0x27], 0x67
mov byte [rsp + 0x28], 0x7f
mov byte [rsp + 0x29], r12b
mov al, byte [rsp + 0x20]
mov rcx, r12
mov al, byte [rsp + rcx + 0x20]
sub al, 6
mov byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 9
jb 0x180009e7a
mov r9d, 0x80
lea r8, [rbp + 0xb0]
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.180006d9c
mov byte [rsp + 0x32], WSACleanup
mov byte [rsp + 0x33], WSACleanup
mov byte [rsp + 0x34], WSASetLastError
mov byte [rsp + 0x35], WSASetLastError
mov byte [rsp + 0x36], WSASetLastError
mov byte [rsp + 0x37], 0x77
mov byte [rsp + 0x38], r12b
mov al, byte [rsp + 0x32]
mov rcx, r12
mov al, byte [rsp + rcx + 0x32]
sub al, 9
mov byte [rsp + rcx + 0x32], al
inc rcx
cmp rcx, 6
jb 0x180009ed1
xor r8d, r8d
lea rdx, [rsp + 0x32]
mov rcx, rbx
call fcn.180006e64
mov r14b, al
mov byte [rsp + 0x39], 0x7c
mov byte [rsp + 0x3a], 0x7e
mov byte [rsp + 0x3b], 0x7b
mov byte [rsp + 0x3c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3d], 0x7e
mov byte [rsp + 0x3e], WSACleanup
mov byte [rsp + 0x3f], 0x7f
mov byte [rsp + 0x40], 0x7f
mov byte [rsp + 0x41], 0x6b
mov byte [rsp + 0x42], 0x79
mov byte [rsp + 0x43], 0x75
mov byte [rsp + 0x44], 0x7a
mov byte [rsp + 0x45], r12b
mov cl, byte [rsp + 0x39]
mov rcx, r12
mov al, byte [rsp + rcx + 0x39]
sub al, 0xc
mov byte [rsp + rcx + 0x39], al
inc rcx
cmp rcx, 0xc
jb 0x180009f3f
movsd xmm2, qword [0x1800d3800]
lea rdx, [rsp + 0x39]
mov rcx, rbx
call fcn.180006e24
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
mov byte [rsp + 0x46], 0x79
mov byte [rsp + 0x47], 0x7b
mov byte [rsp + 0x48], 0x78
mov byte [rsp + 0x49], reloc.WS2_32.dll_WSASetLastError
mov byte [rsp + 0x4a], 0x7b
mov byte [rsp + 0x4b], WSASetLastError
mov byte [rsp + 0x4c], 0x7c
mov byte [rsp + 0x4d], 0x7c
mov byte [rsp + 0x4e], 0x68
mov byte [rsp + 0x4f], 0x76
mov byte [rsp + 0x50], 0x6a
mov byte [rsp + 0x51], 0x81
mov byte [rsp + 0x52], r12b
mov al, byte [rsp + 0x46]
mov rcx, r12
mov al, byte [rsp + rcx + 0x46]
sub al, 9
mov byte [rsp + rcx + 0x46], al
inc rcx
cmp rcx, 0xc
jb 0x180009fb6
movsd xmm2, qword [0x1800d3800]
lea rdx, [rsp + 0x46]
mov rcx, rbx
call fcn.180006e24
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.180052da8
nop
lea rax, [rbp + 0x130]
or rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a000
test r8, r8
je 0x18000a150
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
lea rdx, [rbp + 0x130]
lea rcx, [rsp + 0x58]
call fcn.18000f1cc
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
lea rax, [rbp + 0x1b0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a050
lea rdx, [rbp + 0x1b0]
lea rcx, [rsp + 0x78]
call fcn.18000f1cc
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a081
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.18000f1cc
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rax, [rbp + 0xb0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a0b1
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x48]
call fcn.18000f1cc
mov byte [rbp - 0x28], r14b
movss dword [rbp - 0x24], xmm7
movss dword [rbp - 0x20], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x18]
lea rdx, [rbp + 8]
call fcn.18000ebd0
mov rbx, qword [rax]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x30]
call fcn.18000d838
lea rcx, [rbx + 0x50]
lea rdx, [rsp + 0x78]
call fcn.18000d838
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x68]
call fcn.18000d838
lea rcx, [rbx + 0x90]
lea rdx, [rbp - 0x48]
call fcn.18000d838
mov al, byte [rbp - 0x28]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp - 0x24]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp - 0x20]
movss dword [rbx + 0xb8], xmm1
jmp 0x18000a260
lea r9, [0x1800b9910]
mov r8, rbx
lea rdx, [rsp + 0x58]
mov rcx, r13
call fcn.180009b78
nop
lea r9, [0x1800b9918]
mov r8, rbx
lea rdx, [rsp + 0x78]
mov rcx, r13
call fcn.180009b78
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a196
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.18000f1cc
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
lea rax, [rbp + 0xb0]
mov r8, rdi
inc r8
cmp byte [rax + r8], r12b
jne 0x18000a1c6
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x48]
call fcn.18000f1cc
mov byte [rbp - 0x28], r14b
movss dword [rbp - 0x24], xmm7
movss dword [rbp - 0x20], xmm6
lea rcx, [r13 + 0x1f8]
lea r8, [rbp - 0x18]
lea rdx, [rbp + 0x18]
call fcn.18000ebd0
mov rbx, qword [rax]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x30]
call fcn.18000d838
lea rcx, [rbx + 0x50]
lea rdx, [rsp + 0x78]
call fcn.18000d838
lea rcx, [rbx + 0x70]
lea rdx, [rbp - 0x68]
call fcn.18000d838
lea rcx, [rbx + 0x90]
lea rdx, [rbp - 0x48]
call fcn.18000d838
mov al, byte [rbp - 0x28]
mov byte [rbx + 0xb0], al
movss xmm0, dword [rbp - 0x24]
movss dword [rbx + 0xb4], xmm0
movss xmm1, dword [rbp - 0x20]
movss dword [rbx + 0xb8], xmm1
lea rcx, [rsp + 0x58]
call fcn.18000a2e8
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x18000a2a2
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a29d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a2e1
call fcn.18008e004
mov edx, r15d
mov rcx, rsi
call fcn.180066a54
inc r15d
test rax, rax
mov rdi, rax
jne 0x180009d1e
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180092420
int3