Function at 0x140113620
Capabilities:
Authenticate hmac

Disassembly:
push rax
pushf
mov eax, 0x825a56dc
pushf
not eax
add eax, 0x9678aa48
xor eax, 0xfd46b071
rol eax, 0x20
popf
pushf
not eax
add eax, 0xe8929cfe
xor eax, 0xff39b9e3
rol eax, 0xa8
popf
cmp eax, 0x29
jne 0x14011365d
popf
pop rax
jmp 0x140114f5a
cmp eax, 0
jne 0x14011366c
popf
pop rax
jmp 0x1401138c4
cmp eax, 3
jne 0x14011367b
popf
pop rax
jmp 0x140113b61
cmp eax, 1
jne 0x14011368a
popf
pop rax
jmp 0x140113a09
cmp eax, 0xd
jne 0x140113699
popf
pop rax
jmp 0x1401141da
cmp eax, 0x1a
jne 0x1401136a8
popf
pop rax
jmp 0x1401147c0
cmp eax, 0xe
jne 0x1401136b7
popf
pop rax
jmp 0x140114238
cmp eax, 0xb
jne 0x1401136c6
popf
pop rax
jmp 0x140114031
cmp eax, 0x19
jne 0x1401136d5
popf
pop rax
jmp 0x1401146fa
cmp eax, 8
jne 0x1401136e4
popf
pop rax
jmp 0x140113ed1
cmp eax, 0x1d
jne 0x1401136f3
popf
pop rax
jmp 0x1401148ff
cmp eax, 0x17
jne 0x140113702
popf
pop rax
jmp 0x14011461d
cmp eax, 0x1c
jne 0x140113711
popf
pop rax
jmp 0x1401148c1
cmp eax, 0x12
jne 0x140113720
popf
pop rax
jmp 0x14011442f
cmp eax, 0x18
jne 0x14011372f
popf
pop rax
jmp 0x1401146aa
cmp eax, 0x11
jne 0x14011373e
popf
pop rax
jmp 0x140114374
cmp eax, 0x1b
jne 0x14011374d
popf
pop rax
jmp 0x140114823
cmp eax, 0x21
jne 0x14011375c
popf
pop rax
jmp 0x140114abb
cmp eax, 0x23
jne 0x14011376b
popf
pop rax
jmp 0x140114b9d
cmp eax, 0x25
jne 0x14011377a
popf
pop rax
jmp 0x140114d05
cmp eax, 0xf
jne 0x140113789
popf
pop rax
jmp 0x14011428d
cmp eax, 0x13
jne 0x140113798
popf
pop rax
jmp 0x140114469
cmp eax, 0x15
jne 0x1401137a7
popf
pop rax
jmp 0x140114516
cmp eax, 0x24
jne 0x1401137b6
popf
pop rax
jmp 0x140114c60
cmp eax, 0x1e
jne 0x1401137c5
popf
pop rax
jmp 0x14011499c
cmp eax, 0xc
jne 0x1401137d4
popf
pop rax
jmp 0x1401140ed
cmp eax, 0x26
jne 0x1401137e3
popf
pop rax
jmp 0x140114dbd
cmp eax, 0x27
jne 0x1401137f2
popf
pop rax
jmp 0x140114e4d
cmp eax, 0x1f
jne 0x140113801
popf
pop rax
jmp 0x140114a54
cmp eax, 0x10
jne 0x140113810
popf
pop rax
jmp 0x14011431e
cmp eax, 6
jne 0x14011381f
popf
pop rax
jmp 0x140113dd3
cmp eax, 9
jne 0x14011382e
popf
pop rax
jmp 0x140113f07
cmp eax, 4
jne 0x14011383d
popf
pop rax
jmp 0x140113c0d
cmp eax, 0x16
jne 0x14011384c
popf
pop rax
jmp 0x1401145ba
cmp eax, 0x28
jne 0x14011385b
popf
pop rax
jmp 0x140114edf
cmp eax, 0xa
jne 0x14011386a
popf
pop rax
jmp 0x140113f9c
cmp eax, 0x22
jne 0x140113879
popf
pop rax
jmp 0x140114b60
cmp eax, 0x14
jne 0x140113888
popf
pop rax
jmp 0x1401144a1
cmp eax, 7
jne 0x140113897
popf
pop rax
jmp 0x140113e91
cmp eax, 5
jne 0x1401138a6
popf
pop rax
jmp 0x140113d31
cmp eax, 2
jne 0x1401138b5
popf
pop rax
jmp 0x140113aa2
cmp eax, 0x20
jne 0x1401138c4
popf
pop rax
jmp 0x140114ab7
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, rcx
mov qword [rbp - 0x40], rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r13, [0x1b845eb6c]
pushf
sub r13, 0x783e5dcc
popf
mov qword [rbp - 0x38], r13
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea r12, [0x181655a65]
pushf
sub r12, 0x415dcbe5
popf
mov qword [rbp - 0x10], r12
mov byte [rbp + 0x3c], al
mov dword [rbp + 0x40], 7
call fcn.1400eed4e
mov rcx, rax
test rax, rax
je 0x1401139c3
push rax
pushf
mov eax, 0x10417e9a
pushf
not eax
add eax, 0xc4c72a46
xor eax, 0xeaef0947
rol eax, 0x32
popf
pushf
not eax
add eax, 0x8881aa9d
xor eax, 0xbe54ee4d
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xbc6a36ea
xor eax, 0x95747cd5
rol eax, 0xf2
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x7615f8fb
pushf
not eax
add eax, 0x9c6273ce
xor eax, 0xcd9cdd9f
rol eax, 0x38
popf
pushf
not eax
add eax, 0xa3a8d296
xor eax, 0x931c5e6c
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xfd47cfd7
xor eax, 0xd0ddb9cd
rol eax, 0x61
popf
jmp 0x14011364e
mov rax, qword [rax]
jmp 0x140113a0d
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x48], rax
call fcn.1400eed4e
mov rcx, rax
test rax, rax
je 0x140113a5c
push rax
pushf
mov eax, 0xa6975eb9
pushf
not eax
add eax, 0x8d97c05c
xor eax, 0x8d2f7b48
rol eax, 0xac
popf
pushf
not eax
add eax, 0xe2111fcb
xor eax, 0xf0e27928
rol eax, 0xaa
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x8ab2bc4
pushf
not eax
add eax, 0xc510962d
xor eax, 0xacef414f
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x9c4733e8
xor eax, 0x94a1d71a
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xc3e9434d
xor eax, 0xb5d823b6
rol eax, 0x4a
popf
jmp 0x14011364e
mov rax, qword [rax]
jmp 0x140113aa6
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x50], rax
call fcn.1400eed4e
mov rcx, rax
test rax, rax
je 0x140113b1b
push rax
pushf
mov eax, 0x6b2581ab
pushf
not eax
add eax, 0x8392026a
xor eax, 0xb5e0c756
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xebbad3bd
xor eax, 0xb3bf5dc7
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xdfd9ab16
xor eax, 0x9476a7b8
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x9d82bc36
xor eax, 0xc4d052ca
rol eax, 0x6f
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xc12f1cc2
pushf
not eax
add eax, 0xf09eed46
xor eax, 0x85fe67b5
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe8cbcadb
xor eax, 0x922e41e2
rol eax, 0x92
popf
pushf
not eax
add eax, 0x990b701a
xor eax, 0x9893f29e
rol eax, 0x40
popf
jmp 0x14011364e
mov rax, qword [rax]
jmp 0x140113b65
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x58], rax
call fcn.1400eed4e
mov rcx, rax
test rax, rax
je 0x140113bda
push rax
pushf
mov eax, 0x47dbc079
pushf
not eax
add eax, 0x9e8750ec
xor eax, 0x966b953d
rol eax, 0x39
popf
pushf
not eax
add eax, 0xbbf7e66c
xor eax, 0x92928edf
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xd975ee2c
xor eax, 0xbbbfa8a7
rol eax, 0xef
popf
pushf
not eax
add eax, 0xba81e4b2
xor eax, 0x83613511
rol eax, 0xe3
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x9e6ab51d
pushf
not eax
add eax, 0xbb64503f
xor eax, 0xcfc21ad0
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb3ae286c
xor eax, 0xabb4db7d
rol eax, 0x4f
popf
jmp 0x14011364e
mov rax, qword [rax]
jmp 0x140113c11
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x60], rax
jmp 0x140113c1d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x40]
mov edx, 0x3222139a
pushf
not edx
add edx, 0xd1919982
xor edx, 0xd296d25d
rol edx, 0xe2
popf
pushf
not edx
add edx, 0xe0935781
xor edx, 0xdf5780d5
rol edx, 0x72
popf
pushf
not edx
add edx, 0xc8d23c3e
xor edx, 0xa33a2389
rol edx, 0x51
popf
pushf
not edx
add edx, 0x9726eb50
xor edx, 0x956c61eb
rol edx, 0x6a
popf
mov rcx, rax
jmp 0x140113c84
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140113ceb
push rax
pushf
mov eax, 0xb2d10759
pushf
not eax
add eax, 0xdb4bbcad
xor eax, 0xc44d15db
rol eax, 0x32
popf
pushf
not eax
add eax, 0x9abce24f
xor eax, 0xb1399933
rol eax, 0x72
popf
pushf
not eax
add eax, 0x8bd92b7c
xor eax, 0xb84fc119
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x810127ea
xor eax, 0xc456d741
rol eax, 0x2b
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x3e1a21c7
pushf
not eax
add eax, 0xa51d90f9
xor eax, 0xf5091ab9
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xd774665d
xor eax, 0xa19e3227
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xf1629665
xor eax, 0xd46d4d2e
rol eax, 0x4a
popf
jmp 0x14011364e
lea rcx, [rbp - 0x38]
mov rax, qword [rbp - 0x38]
jmp 0x140113d3a
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.140107087
test al, al
je 0x140113d8d
push rax
pushf
mov eax, 0x38c913a8
pushf
not eax
add eax, 0x9f1246d5
xor eax, 0xa1d8c421
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xa415fba3
xor eax, 0xc34d001c
rol eax, 9
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xe0e84a6
pushf
not eax
add eax, 0x825a272b
xor eax, 0xfdabefdd
rol eax, 0x54
popf
pushf
not eax
add eax, 0xb65b6e03
xor eax, 0xef29a938
rol eax, 0x61
popf
pushf
not eax
add eax, 0xf80e5289
xor eax, 0xd83724fc
rol eax, 0x15
popf
jmp 0x14011364e
lea rcx, [rbp - 0x10]
call fcn.14010a0dc
mov rdi, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rbx, [r15 - 1]
test rdi, rdi
jne 0x140113e4b
push rax
pushf
mov eax, 0xca2cbc37
pushf
not eax
add eax, 0x88d92b26
xor eax, 0xc7ef27dd
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xa548ca91
xor eax, 0x8fbad594
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xd86d0bce
xor eax, 0xa53b119f
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xddcb631b
xor eax, 0x9f2b63a8
rol eax, 0xb7
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x5111b0df
pushf
not eax
add eax, 0xb991aca0
xor eax, 0xf1ce9394
rol eax, 0x86
popf
pushf
not eax
add eax, 0xe38c65d5
xor eax, 0x9dcf4245
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa29e79fe
xor eax, 0xd16dbb4e
rol eax, 0x52
popf
jmp 0x14011364e
mov eax, r15d
mov qword [rsp + 0x30], rax
jmp 0x140114374
mov rax, rbx
push rax
pushf
mov eax, 0x6f123486
pushf
not eax
add eax, 0x90918ebb
xor eax, 0xd38c5b71
rol eax, 0x95
popf
pushf
not eax
add eax, 0xdd44d255
xor eax, 0xb6c673f4
rol eax, 0x4a
popf
jmp 0x14011364e
inc rax
cmp byte [rdi + rax], 0
jne 0x140113f69
push rax
pushf
mov eax, 0xf4a881fe
pushf
not eax
add eax, 0xd17295fd
xor eax, 0xe97a1b87
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xfc2fc94d
xor eax, 0x9fe94f17
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x8f15cbbe
xor eax, 0xd963e0b6
rol eax, 4
popf
pushf
not eax
add eax, 0x91a92796
xor eax, 0xc922c622
rol eax, 0xf5
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x9d869721
pushf
not eax
add eax, 0x9c78211c
xor eax, 0xd96b1d3e
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x93fc9a7b
xor eax, 0x835e302e
rol eax, 0
popf
jmp 0x14011364e
add eax, 1
js 0x140113feb
push rax
pushf
mov eax, 0x3bb61225
pushf
not eax
add eax, 0xd21c1129
xor eax, 0x9a862161
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xf9e94886
xor eax, 0xa7301256
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xfcb28d56
xor eax, 0xa1eadfed
rol eax, 0x6f
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xdb941b77
pushf
not eax
add eax, 0xd6158dee
xor eax, 0x8c63bc0e
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xe24b9156
xor eax, 0xea45aef3
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa4aa5ff8
xor eax, 0xe9103e88
rol eax, 0xe2
popf
jmp 0x14011364e
movsxd r14, eax
cmp eax, 0x80
jle 0x140114094
push rax
pushf
mov eax, 0x7cf2e9ef
pushf
not eax
add eax, 0xab85e6e3
xor eax, 0xa562a0cc
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xfa41cb6f
xor eax, 0xdd210562
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xadc15395
xor eax, 0xe0be2e52
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x8f1d1d70
xor eax, 0x991e3326
rol eax, 0x6e
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xad9a6929
pushf
not eax
add eax, 0xc65a10aa
xor eax, 0xf7cfcb82
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xde5cb753
xor eax, 0xa00b9b30
rol eax, 0xca
popf
pushf
not eax
add eax, 0x91472584
xor eax, 0x84f5f9f5
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xce3ec768
xor eax, 0xd44662a0
rol eax, 0xa2
popf
jmp 0x14011364e
mov edx, 0xb3be4331
pushf
not edx
add edx, 0xd5f57774
xor edx, 0x92efd21e
rol edx, 0xde
popf
pushf
not edx
add edx, 0xdb691859
xor edx, 0xf32a6840
rol edx, 0x39
popf
pushf
not edx
add edx, 0xa4cd8423
xor edx, 0x813961a0
rol edx, 0x1c
popf
pushf
not edx
add edx, 0xe0470030
xor edx, 0x8e14bcfe
rol edx, 0x31
popf
mov rcx, r14
jmp 0x14011414a
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x30], rax
mov rcx, rax
test rax, rax
je 0x1401141a7
push rax
pushf
mov eax, 0x39692cde
pushf
not eax
add eax, 0x998c51de
xor eax, 0xe9635b59
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xc38fabde
xor eax, 0xdcaf62df
rol eax, 0x30
popf
pushf
not eax
add eax, 0xa14678a6
xor eax, 0xd4cf0381
rol eax, 0x14
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x953afea7
pushf
not eax
add eax, 0x81d7fea5
xor eax, 0xc42c914d
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd41d31fb
xor eax, 0xd192224f
rol eax, 0x7a
popf
jmp 0x14011364e
jmp 0x14011428d
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x38]
push rax
pushf
mov eax, 0x4b73f136
pushf
not eax
add eax, 0x9ae1c78b
xor eax, 0x97d4eef4
rol eax, 0x36
popf
pushf
not eax
add eax, 0xd6f9498a
xor eax, 0xada38be2
rol eax, 0x36
popf
pushf
not eax
add eax, 0xc4a31b85
xor eax, 0x8e62b360
rol eax, 0x14
popf
jmp 0x14011364e
test r14, r14
je 0x1401142c5
push rax
pushf
mov eax, 0x13f49d54
pushf
not eax
add eax, 0xe70eb4af
xor eax, 0xaced569e
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xe0f24b10
xor eax, 0xe20a9280
rol eax, 0x95
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x5e792b62
pushf
not eax
add eax, 0x8d51c542
xor eax, 0x9e2cf25a
rol eax, 0x88
popf
pushf
not eax
add eax, 0x909d80c1
xor eax, 0xd29742bf
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x91d11d78
xor eax, 0xdf747ea0
rol eax, 0xac
popf
pushf
not eax
add eax, 0xe79884eb
xor eax, 0xc235add6
rol eax, 0xb9
popf
jmp 0x14011364e
mov r8, r14
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
push rax
pushf
mov eax, 0xdf49a3a9
pushf
not eax
add eax, 0xafbb00ab
xor eax, 0xf78aa877
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xd83cf14a
xor eax, 0xa005b450
rol eax, 0xee
popf
pushf
not eax
add eax, 0x897acfdf
xor eax, 0x8d503fc8
rol eax, 0xc4
popf
jmp 0x14011364e
mov rdx, rax
mov rcx, rsi
call fcn.1400d9b3d
nop
lea rax, [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x1401143e8
push rax
pushf
mov eax, 0x6de58dce
pushf
not eax
add eax, 0xe8f718fd
xor eax, 0xa30fd016
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe083e48a
xor eax, 0x8f0701be
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xa2a109a0
xor eax, 0x9977f2cd
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xd3e2db02
xor eax, 0xae09be7c
rol eax, 0xcf
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xb2816f50
pushf
not eax
add eax, 0xecb692f2
xor eax, 0x9f82ca5f
rol eax, 0xab
popf
pushf
not eax
add eax, 0xf298ca2d
xor eax, 0x87411fe5
rol eax, 0x47
popf
pushf
not eax
add eax, 0x9345f118
xor eax, 0xbe6063bc
rol eax, 0x64
popf
jmp 0x14011364e
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0x36e6c64b
pushf
not eax
add eax, 0x8996a159
xor eax, 0x9070d861
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xe0eb0e59
xor eax, 0xdab802dc
rol eax, 9
popf
jmp 0x14011364e
jmp 0x140114516
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0xb798a9b2
pushf
not eax
add eax, 0xdc1ba927
xor eax, 0xde6d159b
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xf2a43888
xor eax, 0xa3410b1b
rol eax, 0x75
popf
pushf
not eax
add eax, 0xa3386f22
xor eax, 0xae9f9715
rol eax, 0x69
popf
pushf
not eax
add eax, 0xc0918ba0
xor eax, 0x853d46ce
rol eax, 0x9d
popf
jmp 0x14011364e
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
mov qword [rbp - 0x10], r12
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140114561
push rax
pushf
mov eax, 0x7353217c
pushf
not eax
add eax, 0xdad9361f
xor eax, 0xf9ccf2e5
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xf5c8b46e
xor eax, 0x86e26ccf
rol eax, 0x27
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xd4369b47
pushf
not eax
add eax, 0xc610c27f
xor eax, 0xe75d854c
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x8b7815e3
xor eax, 0xc1c022d2
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xd9e8367c
xor eax, 0xcdb84763
rol eax, 0x87
popf
pushf
not eax
add eax, 0xdea4dac1
xor eax, 0xadd45157
rol eax, 0xfa
popf
jmp 0x14011364e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401145c1
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x491b46fe
pushf
not eax
add eax, 0x94b48b10
xor eax, 0xb618e8f4
rol eax, 0x28
popf
pushf
not eax
add eax, 0xebd2af9d
xor eax, 0xe352fee5
rol eax, 5
popf
pushf
not eax
add eax, 0xc51119d2
xor eax, 0x8a44e255
rol eax, 0x63
popf
pushf
not eax
add eax, 0x8fca5fea
xor eax, 0xac56f941
rol eax, 0xf3
popf
jmp 0x14011364e
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140114677
push rax
pushf
mov eax, 0x89006f8e
pushf
not eax
add eax, 0xe57d8768
xor eax, 0xdaa81e56
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xf4a2d938
xor eax, 0xa5b3c599
rol eax, 0x27
popf
pushf
not eax
add eax, 0xb785502c
xor eax, 0xfe121611
rol eax, 0xd9
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x51c892f1
pushf
not eax
add eax, 0xd312f756
xor eax, 0xc0c4bf73
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9f110b36
xor eax, 0xe656febc
rol eax, 0xa3
popf
jmp 0x14011364e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401146b1
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x9754c3e0
pushf
not eax
add eax, 0xb32a977a
xor eax, 0xdbb05cfc
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xb05b1f5e
xor eax, 0xfb67c770
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xcfd243f7
xor eax, 0xb520a60a
rol eax, 0xe4
popf
jmp 0x14011364e
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140114767
push rax
pushf
mov eax, 0xa57ca250
pushf
not eax
add eax, 0x829c02b3
xor eax, 0xe818a257
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe19cd131
xor eax, 0x941ffaeb
rol eax, 0x92
popf
pushf
not eax
add eax, 0xff0acf19
xor eax, 0xe9f24106
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xea8b44d5
xor eax, 0xa24de2d8
rol eax, 0x82
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xad5bc046
pushf
not eax
add eax, 0x883f5fc4
xor eax, 0xbedeea15
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x9b13f316
xor eax, 0xbc650c60
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x84468891
xor eax, 0xfce4eaeb
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xda418056
xor eax, 0xf4403e26
rol eax, 0xf
popf
jmp 0x14011364e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401147c7
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xbcc9ef2f
pushf
not eax
add eax, 0x8fba58bb
xor eax, 0xb0d94ef2
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xf2ea3ad8
xor eax, 0xc4ea60eb
rol eax, 0x54
popf
pushf
not eax
add eax, 0x9f04a7de
xor eax, 0xa266108e
rol eax, 0x28
popf
pushf
not eax
add eax, 0xc489b8a7
xor eax, 0x9ad428f2
rol eax, 0x69
popf
jmp 0x14011364e
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x140114868
push rax
pushf
mov eax, 0xf329b7d7
pushf
not eax
add eax, 0xb5cf6160
xor eax, 0xd8b9f3e9
rol eax, 0x71
popf
pushf
not eax
add eax, 0xa338788a
xor eax, 0xe9764451
rol eax, 0x4a
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x8f7129c8
pushf
not eax
add eax, 0xd81de14a
xor eax, 0xc64a55a1
rol eax, 0xea
popf
pushf
not eax
add eax, 0xc199fd6e
xor eax, 0xda7da755
rol eax, 0x40
popf
pushf
not eax
add eax, 0xfeffeb36
xor eax, 0x95d21f37
rol eax, 0xec
popf
pushf
not eax
add eax, 0x8a68fa64
xor eax, 0x914960ef
rol eax, 0xa5
popf
jmp 0x14011364e
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401148c8
call qword [rax + reloc.WS2_32.dll_htonl]
nop
push rax
pushf
mov eax, 0xf067a92a
pushf
not eax
add eax, 0xd6101994
xor eax, 0x818b63a6
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xa5bfc55c
xor eax, 0xd1f0613f
rol eax, 0x22
popf
jmp 0x14011364e
mov rdx, qword [rbp - 0x28]
test rdx, rdx
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x38], r13
je 0x140114943
push rax
pushf
mov eax, 0xfdcc64f8
pushf
not eax
add eax, 0x87f37987
xor eax, 0xa7badf49
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x9469f979
xor eax, 0xb92e61ed
rol eax, 0x82
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0xe0a985d5
pushf
not eax
add eax, 0x8b3220d9
xor eax, 0x96361a4d
rol eax, 0x44
popf
pushf
not eax
add eax, 0xfa0ac492
xor eax, 0xc6886583
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xb16562c0
xor eax, 0xb3c78498
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xd0613b71
xor eax, 0xa5555a11
rol eax, 0x10
popf
jmp 0x14011364e
test rcx, rcx
je 0x1401149fa
push rax
pushf
mov eax, 0xcd12e2a
pushf
not eax
add eax, 0xb50775d2
xor eax, 0xcd8763ac
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x9149d959
xor eax, 0x8eefa336
rol eax, 0xf
popf
pushf
not eax
add eax, 0xf6f3a79e
xor eax, 0xbdd4c68e
rol eax, 0x76
popf
pushf
not eax
add eax, 0xc1dae31a
xor eax, 0xc84c170f
rol eax, 0xd2
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x7f472f4e
pushf
not eax
add eax, 0xf0ad77ae
xor eax, 0x8b2d5d1d
rol eax, 0
popf
pushf
not eax
add eax, 0x92170dc2
xor eax, 0xd4490699
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xb4192128
xor eax, 0x9fac9977
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x89123628
xor eax, 0x8a175771
rol eax, 0x9e
popf
jmp 0x14011364e
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rbp - 0x30]
push rax
pushf
mov eax, 0x924d3038
pushf
not eax
add eax, 0xf37f840d
xor eax, 0x81adce93
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xccd85461
xor eax, 0xbd5c0a13
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x909ae6c8
xor eax, 0xe6dca083
rol eax, 0xda
popf
pushf
not eax
add eax, 0x84805c27
xor eax, 0xf383f3c9
rol eax, 0xb5
popf
jmp 0x14011364e
mov qword [rbp - 0x28], r15
test rcx, rcx
je 0x140114b06
push rax
pushf
mov eax, 0x20d7ce7e
pushf
not eax
add eax, 0xe6e69e7f
xor eax, 0xe461f7ae
rol eax, 0x67
popf
pushf
not eax
add eax, 0xa8ca937f
xor eax, 0xf65d121d
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd65a77cd
xor eax, 0xcde3bcc7
rol eax, 0x80
popf
jmp 0x14011364e
push rax
pushf
mov eax, 0x2996b19
pushf
not eax
add eax, 0xddcb2c94
xor eax, 0xab6211ee
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xad923c19
xor eax, 0x9b6c1298
rol eax, 5
popf
pushf
not eax
add eax, 0x97139ae9
xor eax, 0xd9028467
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xb3907018
xor eax, 0xb6abb9f2
rol eax, 0x2f
popf
jmp 0x14011364e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x30], r15
push rax
pushf
mov eax, 0xa7aa9f2e
pushf
not eax
add eax, 0x8c119dba
xor eax, 0xb2c3a135
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xa39608f9
xor eax, 0xf79e3e07
rol eax, 0
popf
jmp 0x14011364e
mov edx, 0xe2456795
pushf
not edx
add edx, 0x947ac447
xor edx, 0xd827488e
rol edx, 0x18
popf
pushf
not edx
add edx, 0xd38b6044
xor edx, 0xbdd3d581
rol edx, 0xe7
popf
pushf
not edx
add edx, 0xa11c897c
xor edx, 0xa6ceb267
rol edx, 0x8b
popf
mov rcx, qword [rbp - 0x20]
call fcn.1400c3e2b
mov rax, rsi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400e25c8
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x1ff57e92
pushf
not ecx
add ecx, 0xeb94987e
xor ecx, 0xdaedfd1c
rol ecx, 0x85
popf
pushf
not ecx
add ecx, 0xb2f5bc89
xor ecx, 0xaca93f62
rol ecx, 0xf0
popf
pushf
not ecx
add ecx, 0x8894b6e2
xor ecx, 0xb7c5c3d3
rol ecx, 0xe9
popf
pushf
not ecx
add ecx, 0xff43de58
xor ecx, 0xdaa9b7b3
rol ecx, 0x97
popf
call fcn.1400ea6b9
int3
mov ecx, 0x595f2fb6
pushf
not ecx
add ecx, 0xb91ec489
xor ecx, 0xc6c9bf4c
rol ecx, 0xbf
popf
pushf
not ecx
add ecx, 0x82b4366d
xor ecx, 0xa5bf2a3a
rol ecx, 0xca
popf
pushf
not ecx
add ecx, 0xe02bea00
xor ecx, 0xac77c8a4
rol ecx, 2
popf
pushf
not ecx
add ecx, 0xe3c004ca
xor ecx, 0x81e51861
rol ecx, 0x83
popf
call fcn.1400ea6b9
nop
push rax
pushf
mov eax, 0x9dd46656
pushf
not eax
add eax, 0x9c0a2ff4
xor eax, 0xc51fb76b
rol eax, 0x26
popf
pushf
not eax
add eax, 0xa546bfe7
xor eax, 0xbf32130a
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xda5b413e
xor eax, 0xa4e6e067
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xd14c4752
xor eax, 0x94e1996d
rol eax, 0x77
popf
jmp 0x14011364e
mov ecx, 0x24b994b7
pushf
not ecx
add ecx, 0x82906606
xor ecx, 0xe446c974
rol ecx, 0x55
popf
pushf
not ecx
add ecx, 0xc3dd03a3
xor ecx, 0x95fa7ea3
rol ecx, 0x8d
popf
pushf
not ecx
add ecx, 0xd7faeb8a
xor ecx, 0xe793661a
rol ecx, 0x28
popf
call fcn.1400ea6b9
nop
push rax
pushf
mov eax, 0x2da2d3c4
pushf
not eax
add eax, 0xacb94634
xor eax, 0xf711fc0a
rol eax, 0x61
popf
pushf
not eax
add eax, 0xef3a7019
xor eax, 0xd7c5bed2
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xce8d8303
xor eax, 0xd64609e6
rol eax, 0x5c
popf
jmp 0x14011364e
mov ecx, 0xa7a4aee3
pushf
not ecx
add ecx, 0xda088efb
xor ecx, 0xfc6ba53b
rol ecx, 0x4d
popf
pushf
not ecx
add ecx, 0xf35241dd
xor ecx, 0xfe53ed87
rol ecx, 0x83
popf
pushf
not ecx
add ecx, 0x95ff0d05
xor ecx, 0x870bc86f
rol ecx, 0xd5
popf
pushf
not ecx
add ecx, 0xabe0b69a
xor ecx, 0xa2c394bc
rol ecx, 0xb
popf
call fcn.1400ea6b9
nop
push rax
pushf
mov eax, 0xa4a1655
pushf
not eax
add eax, 0x91a4e7b5
xor eax, 0xac67fcb4
rol eax, 0xce
popf
pushf
not eax
add eax, 0xdde910d3
xor eax, 0x92ce4603
rol eax, 0xe
popf
jmp 0x14011364e
mov ecx, 0xcb04b520
pushf
not ecx
add ecx, 0xa717a25a
xor ecx, 0x96e20aa3
rol ecx, 0x1b
popf
pushf
not ecx
add ecx, 0xad24b209
xor ecx, 0xdadd2bac
rol ecx, 0x1a
popf
call fcn.1400ea6b9
nop
push rax
pushf
mov eax, 0x6ec74e84
pushf
not eax
add eax, 0xe7072d73
xor eax, 0xa9bc9184
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xe388bd24
xor eax, 0x98d8daf7
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x97aafa8b
xor eax, 0xd0d3a6b4
rol eax, 0xf
popf
jmp 0x14011364e
mov ecx, 0x423d3f09
pushf
not ecx
add ecx, 0xbaf87cc9
xor ecx, 0xe9a676a7
rol ecx, 0xd8
popf
pushf
not ecx
add ecx, 0xe0404900
xor ecx, 0xb8b53d99
rol ecx, 0x1c
popf
pushf
not ecx
add ecx, 0x9bc34a92
xor ecx, 0xd5d1a82f
rol ecx, 0x26
popf
call fcn.1400ea6b9
int3