Function at 0x1402f438c
Capabilities:
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x662bba97
pushf
not eax
add eax, 0x90d43c3b
xor eax, 0xd6a7334a
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xab966b6b
xor eax, 0x9b29ec39
rol eax, 0x68
popf
pushf
not eax
add eax, 0xa6b36604
xor eax, 0x875dbe42
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xcd7963b7
xor eax, 0xc109fd8e
rol eax, 0x6f
popf
cmp eax, 4
jne 0x1402f43ef
popf
pop rax
jmp 0x1402f4bf9
cmp eax, 0
jne 0x1402f43fe
popf
pop rax
jmp 0x1402f4476
cmp eax, 3
jne 0x1402f440d
popf
pop rax
jmp 0x1402f4b34
cmp eax, 1
jne 0x1402f441c
popf
pop rax
jmp 0x1402f47d0
cmp eax, 5
jne 0x1402f442b
popf
pop rax
jmp 0x1402f4c94
cmp eax, 7
jne 0x1402f443a
popf
pop rax
jmp 0x1402f4eb7
cmp eax, 6
jne 0x1402f4449
popf
pop rax
jmp 0x1402f4d57
cmp eax, 2
jne 0x1402f4458
popf
pop rax
jmp 0x1402f4893
cmp eax, 9
jne 0x1402f4467
popf
pop rax
jmp 0x1402f4f89
cmp eax, 8
jne 0x1402f4476
popf
pop rax
jmp 0x1402f4f3c
mov rax, rsp
push rbp
push r14
mov rbp, rsp
sub rsp, 0x68
mov qword [rax + 8], rbx
mov cl, 0x81
pushf
not cl
add cl, 0x7d
xor cl, 0x79
rol cl, 0x64
popf
pushf
not cl
add cl, 0x42
xor cl, 0x5c
rol cl, 0x3e
popf
mov qword [rax + 0x10], rsi
xor cl, 0x22
mov qword [rax + 0x18], rdi
mov dl, 0x26
pushf
not dl
add dl, 0x61
xor dl, 0x6a
rol dl, 0xf1
popf
pushf
not dl
add dl, 0x2a
xor dl, 0x58
rol dl, 0x26
popf
pushf
not dl
add dl, 0xad
xor dl, 0xe9
rol dl, 0x5a
popf
mov dil, 0xd0
pushf
not dil
add dil, 0x25
xor dil, 0x70
rol dil, 0xad
popf
pushf
not dil
add dil, 0x63
xor dil, 0xd6
rol dil, 0x9d
popf
pushf
not dil
add dil, 0x14
xor dil, 0x2b
rol dil, 0x46
popf
mov byte [rbp - 0x46], cl
movzx esi, dil
mov byte [rbp - 0x48], 0x22
mov al, 0x8b
pushf
not al
add al, 1
xor al, 0xdd
rol al, 0x95
popf
pushf
not al
add al, 0x17
xor al, 0x74
rol al, 0x4c
popf
lea rcx, [rbp - 0x47]
mov r8b, 0xf4
pushf
not r8b
add r8b, 0xf2
xor r8b, 0xcb
rol r8b, 0xd7
popf
pushf
not r8b
add r8b, 0x2c
xor r8b, 0xfb
rol r8b, 0x80
popf
pushf
not r8b
add r8b, 0xd7
xor r8b, 0x1a
rol r8b, 0xdd
popf
pushf
not r8b
add r8b, 0xbf
xor r8b, 0x8a
rol r8b, 0x3b
popf
mov r9b, 0xc8
pushf
not r9b
add r9b, 0x8e
xor r9b, 0x1b
rol r9b, 0x62
popf
pushf
not r9b
add r9b, 0xa3
xor r9b, 0x59
rol r9b, 0x78
popf
pushf
not r9b
add r9b, 0x52
xor r9b, 0x97
rol r9b, 0xe2
popf
mov r10b, 0xa0
pushf
not r10b
add r10b, 0x5f
xor r10b, 0xdd
rol r10b, 0x49
popf
pushf
not r10b
add r10b, 0x95
xor r10b, 0x4e
rol r10b, 0xad
popf
mov r11b, 0x9d
pushf
not r11b
add r11b, 7
xor r11b, 0xe4
rol r11b, 0xfe
popf
pushf
not r11b
add r11b, 0x9e
xor r11b, 0xe1
rol r11b, 0x6f
popf
pushf
not r11b
add r11b, 0xf
xor r11b, 0x96
rol r11b, 0x31
popf
pushf
not r11b
add r11b, 1
xor r11b, 0x10
rol r11b, 0x13
popf
xor al, 0x22
xor dl, 0x22
xor r8b, 0x22
mov byte [rbp - 0x47], al
xor r9b, 0x22
mov byte [rbp - 0x45], dl
xor r10b, 0x22
mov byte [rbp - 0x44], r8b
xor r11b, 0x22
mov byte [rbp - 0x43], r9b
mov bl, 0x6d
pushf
not bl
add bl, 2
xor bl, 0x15
rol bl, 0xe3
popf
pushf
not bl
add bl, 0xc7
xor bl, 0x5e
rol bl, 0x65
popf
pushf
not bl
add bl, 0xe8
xor bl, 0xb
rol bl, 0x51
popf
pushf
not bl
add bl, 0x28
xor bl, 0x95
rol bl, 0x2d
popf
mov byte [rbp - 0x42], r10b
xor sil, 0x22
mov byte [rbp - 0x41], r11b
xor r14d, r14d
mov byte [rbp - 0x3e], sil
xor bl, 0x22
mov byte [rbp - 0x3d], r14b
xor dil, 0x22
mov byte [rbp - 0x40], bl
mov byte [rbp - 0x3f], dil
jmp 0x1402f46d2
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rax, qword gs:[0x58]
mov r14d, 0xb607062a
pushf
not r14d
add r14d, 0xa6b7882d
xor r14d, 0xae51b77b
rol r14d, 0x86
popf
pushf
not r14d
add r14d, 0xa252b355
xor r14d, 0xd9723183
rol r14d, 0x56
popf
pushf
not r14d
add r14d, 0xfe06f9ff
xor r14d, 0x9e7a1c27
rol r14d, 0xe1
popf
add r14, qword [rax]
mov eax, dword [r14]
cmp dword [0x14012dab8], eax
jle 0x1402f4777
push rax
pushf
mov eax, 0xa710846f
pushf
not eax
add eax, 0xfcdeafbf
xor eax, 0xb1afb2cf
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xa0f0a9e9
xor eax, 0x82aa9050
rol eax, 0xc4
popf
jmp 0x1402f43e0
push rax
pushf
mov eax, 0xe4d22925
pushf
not eax
add eax, 0xd3b9777c
xor eax, 0xd17808b6
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xb87476aa
xor eax, 0xed630bfb
rol eax, 0x36
popf
pushf
not eax
add eax, 0xb13f922b
xor eax, 0x9199cc69
rol eax, 0xa
popf
pushf
not eax
add eax, 0xfb030ae8
xor eax, 0xf6fd796a
rol eax, 0x62
popf
jmp 0x1402f43e0
lea rcx, [0x183532abe]
pushf
sub rcx, 0x43405006
popf
call fcn.14037c65e
cmp dword [0x14012dab8], 0xffffffff
jne 0x1402f484d
push rax
pushf
mov eax, 0x195db64
pushf
not eax
add eax, 0x828a6b39
xor eax, 0xed7878dc
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x800995fd
xor eax, 0xed87ce0b
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xafc3a0bd
xor eax, 0xdd87366c
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xd5bb9d1d
xor eax, 0x91be9ba5
rol eax, 0x86
popf
jmp 0x1402f43e0
push rax
pushf
mov eax, 0x1b145087
pushf
not eax
add eax, 0xe63cf8da
xor eax, 0x82a5962d
rol eax, 0x73
popf
pushf
not eax
add eax, 0xc0a1a664
xor eax, 0xd418e420
rol eax, 0xab
popf
pushf
not eax
add eax, 0xad65418e
xor eax, 0xaf7610c8
rol eax, 0x13
popf
jmp 0x1402f43e0
mov cl, 0xa8
pushf
not cl
add cl, 0x89
xor cl, 0x81
rol cl, 0xd6
popf
pushf
not cl
add cl, 0xed
xor cl, 0x96
rol cl, 1
popf
pushf
not cl
add cl, 8
xor cl, 0x1e
rol cl, 0xce
popf
pushf
not cl
add cl, 0xa0
xor cl, 0x8a
rol cl, 0xfd
popf
mov qword [rsp + 0x60], r15
xor cl, 0x33
mov byte [rbp - 0x48], 0x33
mov dil, 0x28
pushf
not dil
add dil, 0xfe
xor dil, 0xc4
rol dil, 0x70
popf
pushf
not dil
add dil, 0x1e
xor dil, 0x9a
rol dil, 0x5f
popf
pushf
not dil
add dil, 0xd7
xor dil, 0xd5
rol dil, 0x48
popf
pushf
not dil
add dil, 0x16
xor dil, 9
rol dil, 0x77
popf
mov byte [rbp - 0x46], cl
movzx esi, dil
lea rcx, [rbp - 0x47]
mov al, 0x39
pushf
not al
add al, 0x67
xor al, 0xff
rol al, 0xe6
popf
pushf
not al
add al, 0x53
xor al, 0xd8
rol al, 0xe1
popf
pushf
not al
add al, 0x2b
xor al, 0x16
rol al, 0x67
popf
mov dl, 0x1c
pushf
not dl
add dl, 0xac
xor dl, 0xd8
rol dl, 0x27
popf
pushf
not dl
add dl, 0x3c
xor dl, 0x45
rol dl, 0x4c
popf
xor r8b, r8b
mov r9b, socket
pushf
not r9b
add r9b, 0x4c
xor r9b, 0xcf
rol r9b, 0xb4
popf
pushf
not r9b
add r9b, 0xe5
xor r9b, 0x61
rol r9b, 0x4b
popf
pushf
not r9b
add r9b, 0x4d
xor r9b, 0x6b
rol r9b, 0xd2
popf
mov r10b, 0xad
pushf
not r10b
add r10b, 0xdf
xor r10b, 0x99
rol r10b, 0x9c
popf
pushf
not r10b
add r10b, 0xd1
xor r10b, 0x55
rol r10b, 0x91
popf
pushf
not r10b
add r10b, 0xcd
xor r10b, 0xac
rol r10b, 0xd5
popf
pushf
not r10b
add r10b, 0x89
xor r10b, 0xcb
rol r10b, 0x17
popf
mov r11b, 0x93
pushf
not r11b
add r11b, 0x4b
xor r11b, 0x78
rol r11b, 0x38
popf
pushf
not r11b
add r11b, 0xd4
xor r11b, 0xa
rol r11b, 0xfe
popf
pushf
not r11b
add r11b, 0x8b
xor r11b, 0x89
rol r11b, 0x99
popf
xor al, 0x33
xor dl, 0x33
xor r8b, 0x33
mov byte [rbp - 0x47], al
xor r9b, 0x33
mov byte [rbp - 0x45], dl
xor r10b, 0x33
mov byte [rbp - 0x44], r8b
xor r11b, 0x33
mov byte [rbp - 0x43], r9b
mov bl, 0x55
pushf
not bl
add bl, 0x51
xor bl, 0xa0
rol bl, 0x7f
popf
pushf
not bl
add bl, 0x32
xor bl, 0xd9
rol bl, 0x3e
popf
mov byte [rbp - 0x42], r10b
xor sil, 0x33
mov byte [rbp - 0x41], r11b
xor r15d, r15d
mov byte [rbp - 0x3e], sil
xor bl, 0x33
mov byte [rbp - 0x3d], r15b
xor dil, 0x33
mov byte [rbp - 0x40], bl
mov byte [rbp - 0x3f], dil
jmp 0x1402f4ab2
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, [0x1bf2ce65e]
pushf
sub rcx, 0x7f1a0ba6
popf
mov qword [0x14012daa8], rax
call fcn.14033dd06
mov r15, qword [rsp + 0x60]
push rax
pushf
mov eax, 0xb8a04fc5
pushf
not eax
add eax, 0xfcd8fa1d
xor eax, 0xf2c2d98a
rol eax, 0x10
popf
pushf
not eax
add eax, 0x9cfe3289
xor eax, 0x904ba958
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x942116e7
xor eax, 0x9f906187
rol eax, 0x53
popf
pushf
not eax
add eax, 0xf88f483a
xor eax, 0xa824bafb
rol eax, 0x91
popf
jmp 0x1402f43e0
cmp qword [0x14012daa8], 0
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x80]
je 0x1402f4bb3
push rax
pushf
mov eax, 0x85b8d5fe
pushf
not eax
add eax, 0xfac9dfce
xor eax, 0xc4b93423
rol eax, 0x43
popf
pushf
not eax
add eax, 0xf35689f0
xor eax, 0xf8ba49ae
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x9408ddb5
xor eax, 0xfa32a46d
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe811cf64
xor eax, 0xb000c4d7
rol eax, 0x88
popf
jmp 0x1402f43e0
push rax
pushf
mov eax, 0xecae0997
pushf
not eax
add eax, 0x9f3fdb12
xor eax, 0x94df9a9c
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb9d21b34
xor eax, 0xa5be1ec0
rol eax, 0x66
popf
pushf
not eax
add eax, 0x9920e29f
xor eax, 0xb8d347fe
rol eax, 0x12
popf
jmp 0x1402f43e0
mov eax, dword [r14]
cmp dword [0x14012dabc], eax
jle 0x1402f4c3b
push rax
pushf
mov eax, 0x21f92e1b
pushf
not eax
add eax, 0x9d1307e0
xor eax, 0xa5f1c438
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xf5063735
xor eax, 0x818a96bf
rol eax, 0xc1
popf
jmp 0x1402f43e0
push rax
pushf
mov eax, 0x64fe9455
pushf
not eax
add eax, 0xb490f566
xor eax, 0xe3db39fb
rol eax, 0x47
popf
pushf
not eax
add eax, 0xab165ad2
xor eax, 0x9936f884
rol eax, 0x97
popf
pushf
not eax
add eax, 0xd4038afa
xor eax, 0x8136b58e
rol eax, 0xef
popf
pushf
not eax
add eax, 0xf35aeee3
xor eax, 0xdbe86440
rol eax, 0xe3
popf
jmp 0x1402f43e0
lea rcx, [0x1ac46fabf]
pushf
sub rcx, 0x6c342003
popf
call fcn.14037c65e
cmp dword [0x14012dabc], 0xffffffff
jne 0x1402f4cfe
push rax
pushf
mov eax, 0xcae8720f
pushf
not eax
add eax, 0xd3120510
xor eax, 0x921352d9
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xf8690834
xor eax, 0xb9ad188a
rol eax, 0xef
popf
pushf
not eax
add eax, 0xf0fcac13
xor eax, 0x945a51ac
rol eax, 0x92
popf
jmp 0x1402f43e0
push rax
pushf
mov eax, 0xa78b8cf
pushf
not eax
add eax, 0xcd67a5d3
xor eax, 0xf6207f69
rol eax, 0x50
popf
pushf
not eax
add eax, 0x97519a35
xor eax, 0x8087eabd
rol eax, 0x29
popf
pushf
not eax
add eax, 0xaaebf6e4
xor eax, 0xbcdf734b
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xee7c11c4
xor eax, 0xa1ebbc88
rol eax, 0x1d
popf
jmp 0x1402f43e0
movdqa xmm1, xmmword [0x1400ff540]
mov r8b, 0xc2
pushf
not r8b
add r8b, 0xf7
xor r8b, 0xad
rol r8b, 0x40
popf
pushf
not r8b
add r8b, 0x2b
xor r8b, 0x16
rol r8b, 0x8b
popf
pushf
not r8b
add r8b, 0xa5
xor r8b, 0xaa
rol r8b, 0xa7
popf
movdqa xmm2, xmmword [0x1400ff5a0]
movdqa xmm0, xmm1
movd edx, xmm1
mov rcx, qword [0x14012daa8]
movdqu xmmword [rbp - 0x28], xmm2
xor byte [rbp - 0x27], dl
xor r8b, dl
xor byte [rbp - 0x26], dl
xor byte [rbp - 0x25], dl
xor byte [rbp - 0x24], dl
xor byte [rbp - 0x23], dl
xor byte [rbp - 0x22], dl
xor byte [rbp - 0x21], dl
xor byte [rbp - 0x20], dl
xor byte [rbp - 0x1f], dl
xor byte [rbp - 0x1e], dl
xor byte [rbp - 0x1d], dl
xor byte [rbp - 0x1c], dl
xor byte [rbp - 0x1b], dl
xor byte [rbp - 0x1a], dl
xor byte [rbp - 0x19], dl
movdqu xmmword [rbp - 0x38], xmm1
xor byte [rbp - 0x36], dl
xor byte [rbp - 0x35], dl
xor byte [rbp - 0x34], dl
xor byte [rbp - 0x33], dl
xor byte [rbp - 0x32], dl
xor byte [rbp - 0x31], dl
xor byte [rbp - 0x30], dl
xor byte [rbp - 0x2f], dl
xor byte [rbp - 0x2e], dl
xor byte [rbp - 0x2d], dl
xor byte [rbp - 0x2c], dl
xor byte [rbp - 0x2b], dl
xor byte [rbp - 0x2a], dl
xor byte [rbp - 0x29], dl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp - 0x18], r8b
mov byte [rbp - 0x17], 0
xor al, dl
mov byte [rbp - 0x37], al
movd eax, xmm2
xor al, dl
lea rdx, [rbp - 0x37]
mov byte [rbp - 0x28], al
jmp 0x1402f4e3a
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x19b892473]
pushf
sub rcx, 0x5b7649b7
popf
mov qword [0x14012daa0], rax
call fcn.14033dd06
push rax
pushf
mov eax, 0x7e132e06
pushf
not eax
add eax, 0xc2edcc72
xor eax, 0xf0055b69
rol eax, 0x10
popf
pushf
not eax
add eax, 0xe95077ff
xor eax, 0x8f5c2422
rol eax, 0x95
popf
pushf
not eax
add eax, 0xd8d548e7
xor eax, 0x8abfd5bb
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x9ad0474e
xor eax, 0xdd00cdc5
rol eax, 0x33
popf
jmp 0x1402f43e0
mov rax, qword [0x14012daa0]
test rax, rax
je 0x1402f4ef6
push rax
pushf
mov eax, 0xf5a06a2c
pushf
not eax
add eax, 0xb6a24bb6
xor eax, 0xe34e419f
rol eax, 0x57
popf
pushf
not eax
add eax, 0xdb2434fe
xor eax, 0xd0130d2f
rol eax, 0x22
popf
jmp 0x1402f43e0
push rax
pushf
mov eax, 0x4642894f
pushf
not eax
add eax, 0x80f8ed2a
xor eax, 0xdd5107dd
rol eax, 0x20
popf
pushf
not eax
add eax, 0x97dce335
xor eax, 0x9480be19
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x8e9bae8c
xor eax, 0xa0920cb2
rol eax, 0xa2
popf
jmp 0x1402f43e0
mov qword [0x14012d908], rax
mov eax, 0xd8c9e890
pushf
not eax
add eax, 0xf9c9f086
xor eax, 0x8945921d
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xba0249bb
xor eax, 0xe2313330
rol eax, 0xec
popf
pushf
not eax
add eax, 0xd9c53b70
xor eax, 0xc6e18300
rol eax, 0xb8
popf
add rsp, 0x68
pop r14
pop rbp
ret
xor eax, eax
add rsp, 0x68
pop r14
pop rbp
ret