Function at 0x180062b51
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rax
pushf
mov eax, 0xb8c91159
pushf
not eax
add eax, 0xa6a7c3fa
xor eax, 0xc0bcc539
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xce1d34c1
xor eax, 0x99c81d3e
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb2c5b365
xor eax, 0x91a304f6
rol eax, 0x53
popf
cmp eax, 4
jne 0x180062ba1
popf
pop rax
jmp 0x180062ffd
cmp eax, 0
jne 0x180062bb0
popf
pop rax
jmp 0x180062c55
cmp eax, 3
jne 0x180062bbf
popf
pop rax
jmp 0x180062e85
cmp eax, 1
jne 0x180062bce
popf
pop rax
jmp 0x180062d72
cmp eax, 0xa
jne 0x180062bdd
popf
pop rax
jmp 0x18006344e
cmp eax, 7
jne 0x180062bec
popf
pop rax
jmp 0x1800632af
cmp eax, 6
jne 0x180062bfb
popf
pop rax
jmp 0x1800631bf
cmp eax, 0xb
jne 0x180062c0a
popf
pop rax
jmp 0x18006348b
cmp eax, 0xc
jne 0x180062c19
popf
pop rax
jmp 0x1800634c0
cmp eax, 8
jne 0x180062c28
popf
pop rax
jmp 0x180063355
cmp eax, 5
jne 0x180062c37
popf
pop rax
jmp 0x1800630b5
cmp eax, 2
jne 0x180062c46
popf
pop rax
jmp 0x180062de5
cmp eax, 9
jne 0x180062c55
popf
pop rax
jmp 0x1800633fb
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
jmp 0x180062c6d
call qword [0x18001e9f8]
xor edx, edx
mov ecx, 0xb3f497de
pushf
not ecx
add ecx, 0x9d60ce08
xor ecx, 0x83c0a34b
rol ecx, 0x52
popf
pushf
not ecx
add ecx, 0xc700d936
xor ecx, 0x8107f71d
rol ecx, 0xf6
popf
pushf
not ecx
add ecx, 0xaf2bc280
xor ecx, 0xb575fa2d
rol ecx, 0xbd
popf
pushf
not ecx
add ecx, 0xd102a7b0
xor ecx, 0xcd40ac22
rol ecx, 0x74
popf
mov r8d, eax
jmp 0x180062cd2
call qword [0x18001eab8]
xor edi, edi
mov rbx, rax
test rax, rax
je 0x180062d3f
push rax
pushf
mov eax, 0xb7ec5abb
pushf
not eax
add eax, 0x92f1f603
xor eax, 0xe7d48adb
rol eax, 0x28
popf
pushf
not eax
add eax, 0x8b1c2d33
xor eax, 0xb4eeb677
rol eax, 0x54
popf
pushf
not eax
add eax, 0xd58d4855
xor eax, 0x99b836b6
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xd377d0cb
xor eax, 0xfa2de702
rol eax, 0x9a
popf
jmp 0x180062b92
push rax
pushf
mov eax, 0xa112768f
pushf
not eax
add eax, 0xd51c5ad4
xor eax, 0xcfa34650
rol eax, 0x33
popf
pushf
not eax
add eax, 0x90cb1d2b
xor eax, 0x80238fd5
rol eax, 0xd4
popf
jmp 0x180062b92
mov byte [rbp - 9], reloc.WS2_32.dll_WSACleanup
mov edx, edi
mov byte [rbp - 8], 0x7a
mov byte [rbp - 7], 0x6a
mov byte [rbp - 6], WSAStartup
mov byte [rbp - 5], WSAStartup
mov byte [rbp - 4], 0x34
mov byte [rbp - 3], 0x6a
mov byte [rbp - 2], WSAStartup
mov byte [rbp - 1], WSAStartup
mov byte [rbp], dil
mov al, byte [rbp - 9]
push rax
pushf
mov eax, 0xf89754d8
pushf
not eax
add eax, 0xa2e77754
xor eax, 0x8e79ac34
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xa690d3ac
xor eax, 0xac6192e5
rol eax, 0x33
popf
pushf
not eax
add eax, 0xd3cf5abd
xor eax, 0xe0c1d9d0
rol eax, 0xb3
popf
jmp 0x180062b92
movsx ecx, byte [rbp + rdx - 9]
sub ecx, 6
mov byte [rbp + rdx - 9], cl
inc rdx
cmp rdx, 9
jb 0x180062e3f
push rax
pushf
mov eax, 0xdb1e34cb
pushf
not eax
add eax, 0xe442f381
xor eax, 0xdc66cda1
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xc0e0691d
xor eax, 0x90f0c7a7
rol eax, 0xac
popf
pushf
not eax
add eax, 0xf08594eb
xor eax, 0xb13ed99d
rol eax, 1
popf
jmp 0x180062b92
push rax
pushf
mov eax, 0x39c1ed33
pushf
not eax
add eax, 0xe4bd3f2a
xor eax, 0xb17fdc95
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xe9c3ffa2
xor eax, 0xc278055b
rol eax, 0x13
popf
pushf
not eax
add eax, 0x928f5d72
xor eax, 0xc3b222fd
rol eax, 0x2d
popf
jmp 0x180062b92
lea rcx, [rbp - 9]
jmp 0x180062e8a
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r8, rax
mov dword [rbp + 3], 0x4b
mov ecx, dword [rbp + 3]
xor ecx, 0x5a
mov byte [rbp + 7], cl
mov ecx, dword [rbp + 3]
inc cl
xor ecx, 0x77
mov byte [rbp + 8], cl
mov ecx, dword [rbp + 3]
add cl, 2
xor ecx, 0x51
mov byte [rbp + 9], cl
mov eax, dword [rbp + 3]
add al, 3
xor eax, 0x75
mov byte [rbp + 0xa], al
mov eax, dword [rbp + 3]
add al, 4
xor eax, 0x65
mov byte [rbp + 0xb], al
mov eax, dword [rbp + 3]
add al, 5
xor eax, 0x72
mov byte [rbp + 0xc], al
mov eax, dword [rbp + 3]
add al, 6
xor eax, 0x79
mov byte [rbp + 0xd], al
mov eax, dword [rbp + 3]
add al, 7
xor eax, 0x49
mov byte [rbp + 0xe], al
mov eax, dword [rbp + 3]
add al, 8
xor eax, 0x6e
mov byte [rbp + 0xf], al
mov eax, dword [rbp + 3]
add al, 9
xor eax, 0x66
mov byte [rbp + 0x10], al
mov eax, dword [rbp + 3]
add al, 0xa
xor eax, 0x6f
mov byte [rbp + 0x11], al
mov eax, dword [rbp + 3]
add al, 0xb
xor eax, 0x72
mov byte [rbp + 0x12], al
mov eax, dword [rbp + 3]
add al, 0xc
xor eax, 0x6d
mov byte [rbp + 0x13], al
mov eax, dword [rbp + 3]
add al, 0xd
xor eax, 0x61
mov byte [rbp + 0x14], al
mov eax, dword [rbp + 3]
add al, 0xe
xor eax, 0x74
mov byte [rbp + 0x15], al
mov eax, dword [rbp + 3]
add al, 0xf
xor eax, 0x69
mov byte [rbp + 0x16], al
mov eax, dword [rbp + 3]
add al, 0x10
xor eax, 0x6f
mov byte [rbp + 0x17], al
mov eax, dword [rbp + 3]
add al, 0x11
xor eax, 0x6e
mov byte [rbp + 0x18], al
mov eax, dword [rbp + 3]
add al, 0x12
xor eax, 0x50
mov byte [rbp + 0x19], al
mov eax, dword [rbp + 3]
add al, 0x13
xor eax, 0x72
mov rdx, rdi
mov byte [rbp + 0x1a], al
mov eax, dword [rbp + 3]
add al, 0x14
xor eax, 0x6f
mov byte [rbp + 0x1b], al
mov eax, dword [rbp + 3]
add al, 0x15
xor eax, 0x63
mov byte [rbp + 0x1c], al
mov eax, dword [rbp + 3]
add al, 0x16
xor eax, 0x65
mov byte [rbp + 0x1d], al
mov eax, dword [rbp + 3]
add al, 0x17
xor eax, 0x73
mov byte [rbp + 0x1e], al
mov eax, dword [rbp + 3]
add al, 0x18
xor eax, 0x73
mov byte [rbp + 0x1f], al
xor eax, eax
mov byte [rbp + 0x20], al
mov al, byte [rbp + 7]
push rax
pushf
mov eax, 0xb4da73e
pushf
not eax
add eax, 0xb1467b7f
xor eax, 0x87c3db10
rol eax, 0x39
popf
pushf
not eax
add eax, 0xde47063e
xor eax, 0xc463d461
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xe61cbcaf
xor eax, 0x94fcfc16
rol eax, 0x99
popf
jmp 0x180062b92
movsx eax, byte [rbp + rdx + 7]
mov ecx, dword [rbp + 3]
add cl, dl
xor ecx, eax
mov byte [rbp + rdx + 7], cl
inc rdx
cmp rdx, 0x19
jb 0x18006305c
push rax
pushf
mov eax, 0xdaad3956
pushf
not eax
add eax, 0x88cc9b48
xor eax, 0xed6ad18b
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x851887ac
xor eax, 0xae5ec9eb
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xf34bc6a7
xor eax, 0x9e56dbe8
rol eax, 0x7a
popf
jmp 0x180062b92
push rax
pushf
mov eax, 0x790f77a1
pushf
not eax
add eax, 0x9370c052
xor eax, 0xfab3420c
rol eax, 0x11
popf
pushf
not eax
add eax, 0xb353c3ba
xor eax, 0xad25e574
rol eax, 0x28
popf
pushf
not eax
add eax, 0xd89b3f90
xor eax, 0x9e885924
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xba8b871c
xor eax, 0xcd7298fa
rol eax, 0
popf
jmp 0x180062b92
lea rdx, [rbp + 7]
mov byte [rbp + 0x20], dil
mov rcx, r8
jmp 0x1800630c1
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r9d, 0xee97ee2a
pushf
not r9d
add r9d, 0x9fdad27f
xor r9d, 0xb377e7e4
rol r9d, 0xce
popf
pushf
not r9d
add r9d, 0xe8e22b08
xor r9d, 0xf259512c
rol r9d, 0
popf
pushf
not r9d
add r9d, 0xece3ab6e
xor r9d, 0x9a008fd9
rol r9d, 0
popf
pushf
not r9d
add r9d, 0xdef458c2
xor r9d, 0xd1bf9833
rol r9d, 0xbe
popf
mov qword [rsp + 0x20], rdi
lea r8, [rbp + 0x27]
xor edx, edx
mov rcx, rbx
jmp 0x180063140
call rax
test eax, eax
js 0x180063179
push rax
pushf
mov eax, 0x1470b84b
pushf
not eax
add eax, 0xe1d602fd
xor eax, 0xfd6dd632
rol eax, 0xff
popf
pushf
not eax
add eax, 0x8955bf64
xor eax, 0xf1517142
rol eax, 0xbc
popf
jmp 0x180062b92
push rax
pushf
mov eax, 0x289f1cc7
pushf
not eax
add eax, 0xac96ac95
xor eax, 0xd32b8b01
rol eax, 0x70
popf
pushf
not eax
add eax, 0x8aa03b70
xor eax, 0xfd4a8345
rol eax, 0x14
popf
pushf
not eax
add eax, 0xd08e3f37
xor eax, 0x9326b5a0
rol eax, 0xe4
popf
jmp 0x180062b92
mov edx, dword [rbp + 0x2f]
lea rax, [rbp + 0x6f]
add edx, 0xbc
mov qword [rbp + 0x6f], rdi
mov r9d, 0x83922096
pushf
not r9d
add r9d, 0xe32e44c1
xor r9d, 0x8193b8ed
rol r9d, 0xa4
popf
pushf
not r9d
add r9d, 0xdca82368
xor r9d, 0xfb8e56ea
rol r9d, 0xac
popf
mov word [rbp + 0x67], di
lea r8, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov rcx, rbx
jmp 0x180063219
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x180063269
push rax
pushf
mov eax, 0x411a2e38
pushf
not eax
add eax, 0x8552803b
xor eax, 0x98a378eb
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xa84e0415
xor eax, 0xc8d5b4ac
rol eax, 0xed
popf
pushf
not eax
add eax, 0x846c048e
xor eax, 0xef289000
rol eax, 0xa4
popf
jmp 0x180062b92
push rax
pushf
mov eax, 0x28b71cf6
pushf
not eax
add eax, 0xbda7af0d
xor eax, 0xd1683f72
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x8b95379a
xor eax, 0xe1e03510
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x82a8a219
xor eax, 0xaa3ad52f
rol eax, 0xa9
popf
jmp 0x180062b92
cmp qword [rbp + 0x6f], 2
jne 0x1800632fc
push rax
pushf
mov eax, 0xe4bd81f0
pushf
not eax
add eax, 0x95866a1a
xor eax, 0xedfd9407
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xac34266d
xor eax, 0xab93c03f
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xd03dad93
xor eax, 0x9aaae68e
rol eax, 0x7a
popf
jmp 0x180062b92
push rax
pushf
mov eax, 0x91d89cea
pushf
not eax
add eax, 0xca45aa17
xor eax, 0xce4f4310
rol eax, 0x74
popf
pushf
not eax
add eax, 0x993fc25c
xor eax, 0xabc1c1ae
rol eax, 0xca
popf
pushf
not eax
add eax, 0x9e39dbbb
xor eax, 0x917663ba
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xecec55ff
xor eax, 0xf854cbd5
rol eax, 0x10
popf
jmp 0x180062b92
cmp word [rbp + 0x67], 0x70
jne 0x1800633b5
push rax
pushf
mov eax, 0xb8d1c743
pushf
not eax
add eax, 0xabb1bfe0
xor eax, 0xb725ea90
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xcd47f66e
xor eax, 0xfe183b9d
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xc9c6c09d
xor eax, 0xe5423c98
rol eax, 0x35
popf
pushf
not eax
add eax, 0xfe716a11
xor eax, 0xc36bc624
rol eax, 0xb7
popf
jmp 0x180062b92
push rax
pushf
mov eax, 0xa555e281
pushf
not eax
add eax, 0xf89c5447
xor eax, 0xcefe470f
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc899423a
xor eax, 0xbd462728
rol eax, 0x96
popf
pushf
not eax
add eax, 0xcc042046
xor eax, 0xc5079f5a
rol eax, 0x2e
popf
jmp 0x180062b92
mov eax, 0xc1381e1e
pushf
not eax
add eax, 0xc10aceef
xor eax, 0xe74cb5fe
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xbb2b6187
xor eax, 0xd78eaf59
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xf7a9ab63
xor eax, 0xf3a2639f
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x915c1454
xor eax, 0xf08d1d40
rol eax, 0x37
popf
jmp 0x1800634c0
mov rcx, rbx
jmp 0x180063452
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x86d2fdcd
pushf
not eax
add eax, 0xa45bc9d9
xor eax, 0xd059ce4c
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xbe2a2e51
xor eax, 0xdc41ad2d
rol eax, 8
popf
jmp 0x180062b92
xor eax, eax
push rax
pushf
mov eax, 0x226b4042
pushf
not eax
add eax, 0x99c423c2
xor eax, 0x855668b3
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x9b2e6d0e
xor eax, 0xa7fde96b
rol eax, 0x50
popf
jmp 0x180062b92
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret