Function at 0x1401363f1
Capabilities:
Authenticate hmac
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x9c11aa95
pushf
not eax
add eax, 0x85c2223a
xor eax, 0xa1afad69
rol eax, 0x41
popf
pushf
not eax
add eax, 0xde0176e4
xor eax, 0x8f8c9fc2
rol eax, 0x75
popf
pushf
not eax
add eax, 0xc08a31bc
xor eax, 0x8df0168a
rol eax, 0x86
popf
pushf
not eax
add eax, 0x92f112da
xor eax, 0xda716c41
rol eax, 0xbe
popf
cmp eax, 0x20
jne 0x140136454
popf
pop rax
jmp 0x140137b6d
cmp eax, 0
jne 0x140136463
popf
pop rax
jmp 0x140136634
cmp eax, 3
jne 0x140136472
popf
pop rax
jmp 0x140136958
cmp eax, 1
jne 0x140136481
popf
pop rax
jmp 0x1401366f2
cmp eax, 0xd
jne 0x140136490
popf
pop rax
jmp 0x140136eab
cmp eax, 0x1a
jne 0x14013649f
popf
pop rax
jmp 0x1401377b8
cmp eax, 0xe
jne 0x1401364ae
popf
pop rax
jmp 0x140136fb8
cmp eax, 0xb
jne 0x1401364bd
popf
pop rax
jmp 0x140136d07
cmp eax, 0x19
jne 0x1401364cc
popf
pop rax
jmp 0x14013772a
cmp eax, 8
jne 0x1401364db
popf
pop rax
jmp 0x140136bf0
cmp eax, 0x1d
jne 0x1401364ea
popf
pop rax
jmp 0x1401379b2
cmp eax, 0x17
jne 0x1401364f9
popf
pop rax
jmp 0x140137597
cmp eax, 0x1c
jne 0x140136508
popf
pop rax
jmp 0x140137956
cmp eax, 0x12
jne 0x140136517
popf
pop rax
jmp 0x140137244
cmp eax, 0x18
jne 0x140136526
popf
pop rax
jmp 0x140137630
cmp eax, 0x11
jne 0x140136535
popf
pop rax
jmp 0x140137198
cmp eax, 0x1b
jne 0x140136544
popf
pop rax
jmp 0x14013786c
cmp eax, 0x16
jne 0x140136553
popf
pop rax
jmp 0x1401374e2
cmp eax, 0xa
jne 0x140136562
popf
pop rax
jmp 0x140136caa
cmp eax, 0x14
jne 0x140136571
popf
pop rax
jmp 0x14013739e
cmp eax, 0xf
jne 0x140136580
popf
pop rax
jmp 0x14013703e
cmp eax, 0x13
jne 0x14013658f
popf
pop rax
jmp 0x1401372d6
cmp eax, 0x15
jne 0x14013659e
popf
pop rax
jmp 0x14013745d
cmp eax, 2
jne 0x1401365ad
popf
pop rax
jmp 0x1401368da
cmp eax, 0x1e
jne 0x1401365bc
popf
pop rax
jmp 0x140137a43
cmp eax, 0xc
jne 0x1401365cb
popf
pop rax
jmp 0x140136df3
cmp eax, 7
jne 0x1401365da
popf
pop rax
jmp 0x140136b34
cmp eax, 5
jne 0x1401365e9
popf
pop rax
jmp 0x1401369fc
cmp eax, 0x1f
jne 0x1401365f8
popf
pop rax
jmp 0x140137b12
cmp eax, 0x10
jne 0x140136607
popf
pop rax
jmp 0x1401370e3
cmp eax, 6
jne 0x140136616
popf
pop rax
jmp 0x140136a5f
cmp eax, 9
jne 0x140136625
popf
pop rax
jmp 0x140136c72
cmp eax, 4
jne 0x140136634
popf
pop rax
jmp 0x1401369ed
mov qword [rsp + 0x20], rbx
push rbp
push rdi
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140103090]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor edx, edx
lea r9, [rbp - 0x18]
mov rdi, rcx
xor r15d, r15d
xor r8d, r8d
mov dword [rbp - 0x18], r15d
mov ebx, r15d
lea ecx, [rdx + 0x40]
jmp 0x14013666c
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1401366ac
push rax
pushf
mov eax, 0x37950fc9
pushf
not eax
add eax, 0xf9c58fdd
xor eax, 0xcb69c51c
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x9464f140
xor eax, 0x890bac30
rol eax, 0x87
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xad78f3b5
pushf
not eax
add eax, 0xfd433cfc
xor eax, 0xb28a1161
rol eax, 0xc
popf
pushf
not eax
add eax, 0xcf4c29a6
xor eax, 0xfea8458e
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xdc1d7263
xor eax, 0xe2626380
rol eax, 0x7a
popf
jmp 0x140136445
xor edx, edx
mov r8d, 0xbffdda35
pushf
not r8d
add r8d, 0xfcca1248
xor r8d, 0xd6dc5b11
rol r8d, 0x39
popf
pushf
not r8d
add r8d, 0xb6679596
xor r8d, 0xa932a3b1
rol r8d, 0x5b
popf
pushf
not r8d
add r8d, 0x9498f9e5
xor r8d, 0xf3e2120b
rol r8d, 0xaf
popf
pushf
not r8d
add r8d, 0xf023122d
xor r8d, 0xd391e650
rol r8d, 0xb2
popf
mov rcx, rbx
jmp 0x140136762
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x18]
xor ecx, ecx
mov r8d, 0xb74cca0c
pushf
not r8d
add r8d, 0x995cff4f
xor r8d, 0xb9a42a1a
rol r8d, 0x7e
popf
pushf
not r8d
add r8d, 0xeb140508
xor r8d, 0xe6f96942
rol r8d, 0x2b
popf
pushf
not r8d
add r8d, 0xd0f5ab82
xor r8d, 0xd45217eb
rol r8d, 0x63
popf
lea r9d, [rcx + 4]
jmp 0x1401367c3
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8d, dword [rbp - 0x18]
lea r9, [rbp - 0x18]
mov rdx, rax
mov ecx, 0xc1da5af0
pushf
not ecx
add ecx, 0x863b5ba9
xor ecx, 0x917e577c
rol ecx, 0x84
popf
pushf
not ecx
add ecx, 0x81374982
xor ecx, 0xdd2e09f9
rol ecx, 0x30
popf
pushf
not ecx
add ecx, 0xbe2fd56a
xor ecx, 0xe969e2fa
rol ecx, 0xaa
popf
mov rbx, rax
jmp 0x14013681c
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x140136882
push rax
pushf
mov eax, 0xb42a81a3
pushf
not eax
add eax, 0xc005bc48
xor eax, 0xca1eb475
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xff2b402e
xor eax, 0xe5e2d307
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xeb53ff42
xor eax, 0xc38671ee
rol eax, 0x39
popf
pushf
not eax
add eax, 0xdf12cd7c
xor eax, 0x8ea9ceed
rol eax, 0xdc
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x55324557
pushf
not eax
add eax, 0xe75e7841
xor eax, 0x8e959601
rol eax, 0x41
popf
pushf
not eax
add eax, 0xb8270ebb
xor eax, 0x921e713a
rol eax, 0x59
popf
pushf
not eax
add eax, 0x9b4349ee
xor eax, 0xf10b5117
rol eax, 1
popf
pushf
not eax
add eax, 0x9b4f4713
xor eax, 0x8a99c7e8
rol eax, 0x8c
popf
jmp 0x140136445
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], r14
test eax, eax
js 0x140136925
push rax
pushf
mov eax, 0x904652cf
pushf
not eax
add eax, 0xe5cdf55e
xor eax, 0x91ebb615
rol eax, 0xef
popf
pushf
not eax
add eax, 0xe934fef8
xor eax, 0xdee704c1
rol eax, 0xb5
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x84f49df1
pushf
not eax
add eax, 0x9eab5a6f
xor eax, 0xb85d09c0
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x807a77b5
xor eax, 0xd1a381c5
rol eax, 0x7d
popf
jmp 0x140136445
test rbx, rbx
je 0x1401369ba
push rax
pushf
mov eax, 0xe278e72e
pushf
not eax
add eax, 0xeff8f93e
xor eax, 0x803bfcac
rol eax, 0x33
popf
pushf
not eax
add eax, 0x8ffb2000
xor eax, 0xa732d0d7
rol eax, 0x33
popf
pushf
not eax
add eax, 0xcb41fb7a
xor eax, 0xc0a803b6
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xf8bc526e
xor eax, 0xf4d475a2
rol eax, 0x34
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xa0eb9701
pushf
not eax
add eax, 0x9fdde653
xor eax, 0xd3aedf1b
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xd76ded47
xor eax, 0xf2eb9ba0
rol eax, 0xfe
popf
jmp 0x140136445
mov esi, r15d
mov r14, r15
cmp qword [rbx], rsi
jbe 0x140136d07
mov rax, r15
nop dword [rax]
push rax
pushf
mov eax, 0x3cf6c11c
pushf
not eax
add eax, 0xd9c2d71e
xor eax, 0xb7d2bbeb
rol eax, 0xba
popf
pushf
not eax
add eax, 0xf6d900ab
xor eax, 0x86cc9639
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xbf93945a
xor eax, 0x9583f3a4
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x8b8c7868
xor eax, 0xadc7a605
rol eax, 0x3c
popf
jmp 0x140136445
lea rax, [rax + rax*4]
movups xmm0, xmmword [rbx + rax*8 + 0x10]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmm0, xmmword [rbx + rax*8 + 0x20]
movups xmmword [rbp - 0x30], xmm0
jmp 0x140136a7a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movups xmm0, xmmword [rbp - 0x50]
mov ecx, eax
psrldq xmm0, 8
movq rax, xmm0
cmp rax, rcx
jne 0x140136adb
push rax
pushf
mov eax, 0x36728b3
pushf
not eax
add eax, 0x82070833
xor eax, 0x95cd2c99
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xad43d207
xor eax, 0xaabb77ff
rol eax, 0x37
popf
pushf
not eax
add eax, 0xd6c91226
xor eax, 0xe07a618e
rol eax, 0xf3
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xc0467693
pushf
not eax
add eax, 0xa0b8c86f
xor eax, 0x8e8ba682
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xf43aac02
xor eax, 0xeec2ec3e
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x886b0433
xor eax, 0x97cd64cc
rol eax, 0x60
popf
pushf
not eax
add eax, 0xe87c4062
xor eax, 0xe0310c1e
rol eax, 0x60
popf
jmp 0x140136445
mov rax, qword [rdi]
cmp qword [rbp - 0x30], rax
je 0x140136b96
push rax
pushf
mov eax, 0x150abc92
pushf
not eax
add eax, 0xae192145
xor eax, 0xd38d070e
rol eax, 0xda
popf
pushf
not eax
add eax, 0xc66715b0
xor eax, 0x8b9c6450
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x8a03f097
xor eax, 0xd6bc40da
rol eax, 0x35
popf
pushf
not eax
add eax, 0x9f9f3a2a
xor eax, 0xde2401d8
rol eax, 0x62
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xbfefb7f5
pushf
not eax
add eax, 0xa31a439d
xor eax, 0xa29d0a54
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xff57ab15
xor eax, 0xd2147f72
rol eax, 0x99
popf
pushf
not eax
add eax, 0xa62835db
xor eax, 0xb61231f0
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x9b36ce3c
xor eax, 0x8aa2e12b
rol eax, 0x54
popf
jmp 0x140136445
inc esi
mov eax, esi
cmp rax, qword [rbx]
jb 0x140136c2c
push rax
pushf
mov eax, 0x5f3c55b2
pushf
not eax
add eax, 0x86e4db5b
xor eax, 0xee466f65
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xc999dcd6
xor eax, 0xdec512e7
rol eax, 0x50
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x6003fe55
pushf
not eax
add eax, 0xaf85e745
xor eax, 0xc549837c
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xb4841d1b
xor eax, 0xa4ae1844
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xf19227b6
xor eax, 0xea0ef23c
rol eax, 0x93
popf
jmp 0x140136445
jmp 0x140137a43
mov r14, qword [rbp - 0x40]
push rax
pushf
mov eax, 0x6d8f5b02
pushf
not eax
add eax, 0xe3c4e30d
xor eax, 0xb1e6cc1f
rol eax, 0x63
popf
pushf
not eax
add eax, 0xdfd94e8b
xor eax, 0xa6bce428
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xb755a10e
xor eax, 0xd75e9014
rol eax, 0x64
popf
pushf
not eax
add eax, 0xa8e0f65d
xor eax, 0xc857ea08
rol eax, 0x28
popf
jmp 0x140136445
xor edx, edx
mov r8d, 0xe2730c48
pushf
not r8d
add r8d, 0xc9178dfd
xor r8d, 0xe9df8f02
rol r8d, 0xb6
popf
pushf
not r8d
add r8d, 0x9fec760d
xor r8d, 0xf2609749
rol r8d, 0x7c
popf
mov rcx, rbx
jmp 0x140136d45
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test r14, r14
je 0x140136dad
push rax
pushf
mov eax, 0x616e2d45
pushf
not eax
add eax, 0xa126e8ea
xor eax, 0xeeb3825f
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xdc6808c8
xor eax, 0x87d0e035
rol eax, 0x32
popf
pushf
not eax
add eax, 0xe50b1556
xor eax, 0xe38848f3
rol eax, 2
popf
pushf
not eax
add eax, 0xef06c3a3
xor eax, 0xe13db2db
rol eax, 0x6c
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x375e8569
pushf
not eax
add eax, 0x965cb923
xor eax, 0xfc3c23e3
rol eax, 0x59
popf
pushf
not eax
add eax, 0xef6f161e
xor eax, 0xd34f77d7
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xe8dc4666
xor eax, 0xfa2daff7
rol eax, 6
popf
jmp 0x140136445
lea rdx, [r14 + 8]
mov qword [rbp - 0x50], r15
mov rcx, rdi
call fcn.140228814
test rax, rax
je 0x140136e52
push rax
pushf
mov eax, 0x599a39f3
pushf
not eax
add eax, 0xf4025f85
xor eax, 0xfbd3b19b
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xbd15ff53
xor eax, 0xdc6e088a
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x90942a9b
xor eax, 0xa8ae2533
rol eax, 5
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xdeb0804c
pushf
not eax
add eax, 0xed84ae23
xor eax, 0xf9926e89
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf602043f
xor eax, 0xc3d4626e
rol eax, 0x73
popf
pushf
not eax
add eax, 0xed503cf8
xor eax, 0xf8bd2bc2
rol eax, 0x99
popf
pushf
not eax
add eax, 0xdd82e8a1
xor eax, 0xd84ace35
rol eax, 0xcf
popf
jmp 0x140136445
lea r9, [rbp - 0x50]
mov r8d, 0x7f35e14b
pushf
not r8d
add r8d, 0xb23434b6
xor r8d, 0xab3e34ba
rol r8d, 0x41
popf
pushf
not r8d
add r8d, 0xfbb3c29c
xor r8d, 0xd4439860
rol r8d, 0x66
popf
pushf
not r8d
add r8d, 0x9dbfffd3
xor r8d, 0xd562249d
rol r8d, 0xe8
popf
pushf
not r8d
add r8d, 0x8c0371d3
xor r8d, 0x84a59b7e
rol r8d, 0xce
popf
mov rdx, rax
mov rcx, rdi
call fcn.1402ea5e0
test eax, eax
je 0x140136f72
push rax
pushf
mov eax, 0xaa709bfc
pushf
not eax
add eax, 0xaeb53d5a
xor eax, 0xe6d6509c
rol eax, 0xed
popf
pushf
not eax
add eax, 0xa467bd95
xor eax, 0x9b911a50
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xa6b08688
xor eax, 0xb1d0ef9a
rol eax, 0xd1
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xb143bdc5
pushf
not eax
add eax, 0xef07a705
xor eax, 0xf1c962aa
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xa294fa9c
xor eax, 0xf2dedf20
rol eax, 0xd
popf
pushf
not eax
add eax, 0xe76dae23
xor eax, 0x93a9cc7c
rol eax, 0x9a
popf
jmp 0x140136445
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x140136ff8
push rax
pushf
mov eax, 0xdc12ec1e
pushf
not eax
add eax, 0xcf1f0b50
xor eax, 0xeed121e8
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xa39cf7f5
xor eax, 0xdaae75fe
rol eax, 0x15
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x77a40071
pushf
not eax
add eax, 0xbcf789a8
xor eax, 0xbeec119d
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xba2d0b3f
xor eax, 0xb7c064d2
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x9ad426f3
xor eax, 0x9bb4ac75
rol eax, 0x69
popf
jmp 0x140136445
add rdx, 8
mov qword [rbp - 0x50], r15
mov rcx, rdi
call fcn.140228814
test rax, rax
je 0x1401370b0
push rax
pushf
mov eax, 0x409fbff9
pushf
not eax
add eax, 0xdc91c2dc
xor eax, 0x8195eb9c
rol eax, 0xab
popf
pushf
not eax
add eax, 0xbfdc2810
xor eax, 0x9b08083d
rol eax, 0x94
popf
pushf
not eax
add eax, 0xb50e3cc8
xor eax, 0xcd2fc348
rol eax, 0xde
popf
pushf
not eax
add eax, 0xdea24c68
xor eax, 0xdc2f7c64
rol eax, 0x33
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x1398c8b0
pushf
not eax
add eax, 0xcbc3e1ac
xor eax, 0xa80e4e92
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x8ec691d0
xor eax, 0xf96cf28f
rol eax, 0x18
popf
jmp 0x140136445
lea r9, [rbp - 0x50]
mov r8d, 0x544ccac5
pushf
not r8d
add r8d, 0xbdc763fb
xor r8d, 0xe37debe0
rol r8d, 0x96
popf
pushf
not r8d
add r8d, 0x94568b3c
xor r8d, 0xdef4195f
rol r8d, 0xb7
popf
mov rdx, rax
mov rcx, rdi
call fcn.1402ea5e0
test eax, eax
je 0x140137165
push rax
pushf
mov eax, 0x94b40121
pushf
not eax
add eax, 0xaf10b8a7
xor eax, 0xe68bb578
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x85e546bf
xor eax, 0xba5516df
rol eax, 0x6b
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x725a35bb
pushf
not eax
add eax, 0xdd8250af
xor eax, 0xc0693288
rol eax, 0x59
popf
pushf
not eax
add eax, 0x994c69b6
xor eax, 0xa1cbe765
rol eax, 0x4f
popf
jmp 0x140136445
mov rdx, qword [rbp - 0x50]
test rdx, rdx
je 0x1401371eb
push rax
pushf
mov eax, 0x659565f4
pushf
not eax
add eax, 0xba15aad3
xor eax, 0xdd89307c
rol eax, 0x47
popf
pushf
not eax
add eax, 0xacf3b482
xor eax, 0xc7978a4c
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x8bb4a9cf
xor eax, 0xfc3e3283
rol eax, 0x51
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xcb23fa2c
pushf
not eax
add eax, 0x91a1f23d
xor eax, 0xb763bdf8
rol eax, 0x24
popf
pushf
not eax
add eax, 0xe6d77aa0
xor eax, 0x9114c1ff
rol eax, 6
popf
pushf
not eax
add eax, 0xaebe6f58
xor eax, 0x9df3a832
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xa89b4f9b
xor eax, 0xfce4b5f4
rol eax, 0x79
popf
jmp 0x140136445
add rdx, 0x28
mov qword [rbp - 0x50], r15
mov rcx, rdi
call fcn.140228814
test rax, rax
je 0x1401372a3
push rax
pushf
mov eax, 0x89b2a45a
pushf
not eax
add eax, 0xe55b87cc
xor eax, 0xf6a268e2
rol eax, 6
popf
pushf
not eax
add eax, 0x92235248
xor eax, 0xe011aca4
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xfce02bec
xor eax, 0xe0c0a972
rol eax, 0x99
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x241f31c8
pushf
not eax
add eax, 0xfa6c576b
xor eax, 0xce61cd15
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc865923c
xor eax, 0x82acd714
rol eax, 0x9a
popf
jmp 0x140136445
lea r9, [rbp - 0x50]
mov r8d, 0x4221ed04
pushf
not r8d
add r8d, 0x867c60fa
xor r8d, 0x8321d547
rol r8d, 0x6f
popf
pushf
not r8d
add r8d, 0x88633064
xor r8d, 0xb5098ca6
rol r8d, 0x35
popf
mov rdx, rax
mov rcx, rdi
call fcn.1402ea5e0
test eax, eax
je 0x140137358
push rax
pushf
mov eax, 0x84ff1fa9
pushf
not eax
add eax, 0xf49dc15e
xor eax, 0xbcd61f53
rol eax, 0x56
popf
pushf
not eax
add eax, 0xaf90d32e
xor eax, 0xf4dc00fe
rol eax, 0x4c
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x41937040
pushf
not eax
add eax, 0xf4541aad
xor eax, 0xb1b5104a
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xdd5d564d
xor eax, 0xf4f6f081
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xb20b2b03
xor eax, 0xe6a5f19d
rol eax, 0x42
popf
jmp 0x140136445
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140137404
push rax
pushf
mov eax, 0xf2c732f7
pushf
not eax
add eax, 0xbab1e668
xor eax, 0x969ed2df
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xc74bea89
xor eax, 0xf9f09cfa
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xd51146d4
xor eax, 0xb1bb7adc
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xc69f48ce
xor eax, 0x8a6ab0ae
rol eax, 0xef
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xad57041e
pushf
not eax
add eax, 0xab326774
xor eax, 0xb7d5deda
rol eax, 0xee
popf
pushf
not eax
add eax, 0xfc145228
xor eax, 0xec534092
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xd35f2544
xor eax, 0xc2468cbb
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xb460a95d
xor eax, 0xe77acfab
rol eax, 0xa2
popf
jmp 0x140136445
lea rsi, [rax + 0x58]
xorps xmm0, xmm0
mov rdx, rsi
mov rcx, rdi
movups xmmword [rbp - 0x50], xmm0
call fcn.140228814
test rax, rax
je 0x1401374af
push rax
pushf
mov eax, 0x292ae1ed
pushf
not eax
add eax, 0xa4393479
xor eax, 0xc16dd917
rol eax, 0x35
popf
pushf
not eax
add eax, 0xaecc3e0d
xor eax, 0x8b34f19b
rol eax, 0x85
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xf10d83b
pushf
not eax
add eax, 0xdfab72ef
xor eax, 0x815e59d2
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xe86b9722
xor eax, 0x8719ae5e
rol eax, 0x96
popf
jmp 0x140136445
lea r9, [rbp - 0x50]
mov r8d, 0x73d79db7
pushf
not r8d
add r8d, 0x8f3321c1
xor r8d, 0xe4405f9f
rol r8d, 0x33
popf
pushf
not r8d
add r8d, 0x94d4318a
xor r8d, 0x981c38ab
rol r8d, 7
popf
mov rdx, rax
mov rcx, rdi
call fcn.1402ea5e0
test eax, eax
je 0x140137564
push rax
pushf
mov eax, 0xcfdde96a
pushf
not eax
add eax, 0xecd0493e
xor eax, 0xe880e1e5
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xbdd98b67
xor eax, 0xf2e0f395
rol eax, 0x36
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x5504a851
pushf
not eax
add eax, 0x804b0e97
xor eax, 0xf0af29f8
rol eax, 0x10
popf
pushf
not eax
add eax, 0xf43ee2b9
xor eax, 0xd88106cf
rol eax, 0xc6
popf
jmp 0x140136445
movzx eax, word [rbp - 0x50]
test ax, ax
je 0x1401375d7
push rax
pushf
mov eax, 0xe4574cb2
pushf
not eax
add eax, 0x839c12f0
xor eax, 0xdf7057e8
rol eax, 0xc
popf
pushf
not eax
add eax, 0xcdadc4cb
xor eax, 0x889070c7
rol eax, 9
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x13b799e3
pushf
not eax
add eax, 0xeadda88c
xor eax, 0xc8bd9d78
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x8911da05
xor eax, 0x9bdfcdb0
rol eax, 0x75
popf
pushf
not eax
add eax, 0xb0f3a71c
xor eax, 0x8d85b9da
rol eax, 0xa
popf
pushf
not eax
add eax, 0xe7269804
xor eax, 0x9cbcae28
rol eax, 0xca
popf
jmp 0x140136445
mov ecx, eax
mov r14d, eax
shr rcx, 1
mov eax, 0xd6096475
pushf
not eax
add eax, 0xd529e2e6
xor eax, 0x8195bf1b
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xad4b4f09
xor eax, 0xff503803
rol eax, 0xf3
popf
inc rcx
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140341faf
lea r8, [r14 + 2]
xor edx, edx
mov rcx, rax
mov rbx, rax
call fcn.140044ca0
mov rdx, qword [rbp - 0x48]
mov rcx, rdi
call fcn.140228814
test rax, rax
je 0x1401376f7
push rax
pushf
mov eax, 0xf6b71caf
pushf
not eax
add eax, 0xddaa748e
xor eax, 0xf98ee09d
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xc1a79d74
xor eax, 0xf96743df
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x9749e2ed
xor eax, 0xc79b4eca
rol eax, 2
popf
pushf
not eax
add eax, 0xdcbfafcc
xor eax, 0xe09fb01e
rol eax, 0xf7
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x52572356
pushf
not eax
add eax, 0xba85c1fa
xor eax, 0xfe6593f4
rol eax, 0x25
popf
pushf
not eax
add eax, 0xed62ea48
xor eax, 0xa4013f5a
rol eax, 0x21
popf
jmp 0x140136445
mov r9, rbx
mov r8d, r14d
mov rdx, rax
mov rcx, rdi
call fcn.1402ea5e0
test eax, eax
je 0x140137785
push rax
pushf
mov eax, 0xfdc39db2
pushf
not eax
add eax, 0xae88ec41
xor eax, 0xb1d58949
rol eax, 0x97
popf
pushf
not eax
add eax, 0xea4bb799
xor eax, 0xa6f0e99f
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x9ce5eea7
xor eax, 0x94aa27fc
rol eax, 0xc6
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x3323a8c5
pushf
not eax
add eax, 0xdb1015cc
xor eax, 0xaa7f5fca
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xbba97da9
xor eax, 0xb31fe442
rol eax, 0x6a
popf
jmp 0x140136445
mov rdx, rsi
mov word [rbp - 0x50], r15w
mov rcx, rdi
call fcn.140228814
test rax, rax
je 0x140137826
push rax
pushf
mov eax, 0x10eddd61
pushf
not eax
add eax, 0x92667ff5
xor eax, 0xb557ce9a
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xb211471f
xor eax, 0xad6db86e
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xc3e23857
xor eax, 0x8ec1fba7
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xa19f39b4
xor eax, 0xf330c865
rol eax, 0x51
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xb32ff14a
pushf
not eax
add eax, 0xb2db5f0f
xor eax, 0x85f69f73
rol eax, 0x52
popf
pushf
not eax
add eax, 0xced7e705
xor eax, 0xa079a36f
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xf18c963b
xor eax, 0xe5b041d5
rol eax, 0xc0
popf
jmp 0x140136445
lea r9, [rbp - 0x50]
mov r8d, 0x307532df
pushf
not r8d
add r8d, 0x877933de
xor r8d, 0xfc4310ca
rol r8d, 0xd6
popf
pushf
not r8d
add r8d, 0xe2497f96
xor r8d, 0xd51eacd1
rol r8d, 0x5c
popf
mov rdx, rax
mov rcx, rdi
call fcn.1402e6bc7
test eax, eax
je 0x1401378fd
push rax
pushf
mov eax, 0x55324b0c
pushf
not eax
add eax, 0x95e3e62b
xor eax, 0xf2e4276b
rol eax, 0x72
popf
pushf
not eax
add eax, 0xcb9868ac
xor eax, 0xab5b39e4
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xedd4a120
xor eax, 0xc42d3608
rol eax, 0x72
popf
jmp 0x140136445
push rax
pushf
mov eax, 0x56cbd6f8
pushf
not eax
add eax, 0xa75c744a
xor eax, 0xc94c5e30
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa93e1c2b
xor eax, 0xb44be86d
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xc3b008d9
xor eax, 0xf8c35c1c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xe740d820
xor eax, 0x81a37a70
rol eax, 0xcb
popf
jmp 0x140136445
mov rcx, rbx
call fcn.1401eb76d
mov al, recv
pushf
not al
add al, 0x4e
xor al, 0x7f
rol al, 0x71
popf
pushf
not al
add al, 0x26
xor al, 0x23
rol al, 0x69
popf
jmp 0x140137b6d
test rbx, rbx
je 0x1401379fd
push rax
pushf
mov eax, 0xe7f2eab7
pushf
not eax
add eax, 0xf60e9911
xor eax, 0x9dc8b396
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xe341868f
xor eax, 0xf9f8183d
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xfa466bef
xor eax, 0xbe49bc16
rol eax, 0x43
popf
jmp 0x140136445
push rax
pushf
mov eax, 0xcc5c14f7
pushf
not eax
add eax, 0x965bb1c6
xor eax, 0xb729fc32
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x9a7863b3
xor eax, 0xf22e4fd6
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x8b8b8d7d
xor eax, 0xfd334324
rol eax, 0xac
popf
jmp 0x140136445
mov r8d, 0xfd8501a8
pushf
not r8d
add r8d, 0xc3244838
xor r8d, 0xacb7cada
rol r8d, 0x88
popf
pushf
not r8d
add r8d, 0xd0812c25
xor r8d, 0x9ee545dc
rol r8d, 0xd5
popf
pushf
not r8d
add r8d, 0xea49ce05
xor r8d, 0xcc5d779b
rol r8d, 0x4d
popf
pushf
not r8d
add r8d, 0xa9065f75
xor r8d, 0xaf7d294d
rol r8d, 0x36
popf
xor edx, edx
mov rcx, rbx
jmp 0x140137ab3
call qword [sym.imp.KERNEL32.dll_VirtualFree]
push rax
pushf
mov eax, 0x5e7f13e2
pushf
not eax
add eax, 0x8ae43710
xor eax, 0x8d8015c5
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xaccbbe95
xor eax, 0x996909d1
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xa96c7d0c
xor eax, 0xcdea95cd
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xf5a4a9b5
xor eax, 0x9204b76e
rol eax, 0x7d
popf
jmp 0x140136445
xor al, al
push rax
pushf
mov eax, 0x383b4bc7
pushf
not eax
add eax, 0xba17d767
xor eax, 0xb2346746
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x99bced39
xor eax, 0x8c953e4e
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xfdb76320
xor eax, 0xc25cb68f
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x9897d037
xor eax, 0xf4ac3202
rol eax, 0
popf
jmp 0x140136445
mov r14, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x98]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14027ae25
mov rbx, qword [rsp + 0xa8]
add rsp, 0x70
pop r15
pop rdi
pop rbp
ret