Function at 0x14018506b
Capabilities:
Authenticate hmac

Disassembly:
push rax
pushf
mov eax, 0xaa9ceb4b
pushf
not eax
add eax, 0xe4c7f0de
xor eax, 0xb485acf6
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xd5873eb0
xor eax, 0xffb2121e
rol eax, 0x3a
popf
cmp eax, 0x29
jne 0x1401850a8
popf
pop rax
jmp 0x140186939
cmp eax, 0
jne 0x1401850b7
popf
pop rax
jmp 0x14018532d
cmp eax, 3
jne 0x1401850c6
popf
pop rax
jmp 0x1401855ca
cmp eax, 1
jne 0x1401850d5
popf
pop rax
jmp 0x14018545f
cmp eax, 0xd
jne 0x1401850e4
popf
pop rax
jmp 0x140185c7a
cmp eax, 0x1a
jne 0x1401850f3
popf
pop rax
jmp 0x1401861f1
cmp eax, 0xe
jne 0x140185102
popf
pop rax
jmp 0x140185cd8
cmp eax, 0xb
jne 0x140185111
popf
pop rax
jmp 0x140185ad1
cmp eax, 0x19
jne 0x140185120
popf
pop rax
jmp 0x140186177
cmp eax, 8
jne 0x14018512f
popf
pop rax
jmp 0x14018594b
cmp eax, 0x2a
jne 0x14018513e
popf
pop rax
jmp 0x1401869b4
cmp eax, 0x17
jne 0x14018514d
popf
pop rax
jmp 0x140186083
cmp eax, 0x1c
jne 0x14018515c
popf
pop rax
jmp 0x1401862bb
cmp eax, 0x12
jne 0x14018516b
popf
pop rax
jmp 0x140185e25
cmp eax, 0x18
jne 0x14018517a
popf
pop rax
jmp 0x14018613a
cmp eax, 0x2b
jne 0x140185189
popf
pop rax
jmp 0x140186a6c
cmp eax, 0x1b
jne 0x140185198
popf
pop rax
jmp 0x14018622e
cmp eax, 0x21
jne 0x1401851a7
popf
pop rax
jmp 0x140186562
cmp eax, 0x23
jne 0x1401851b6
popf
pop rax
jmp 0x14018660f
cmp eax, 0x25
jne 0x1401851c5
popf
pop rax
jmp 0x1401866dd
cmp eax, 0xf
jne 0x1401851d4
popf
pop rax
jmp 0x140185d2d
cmp eax, 0x13
jne 0x1401851e3
popf
pop rax
jmp 0x140185ee1
cmp eax, 0x15
jne 0x1401851f2
popf
pop rax
jmp 0x140185fe9
cmp eax, 0x24
jne 0x140185201
popf
pop rax
jmp 0x1401866a0
cmp eax, 0x1e
jne 0x140185210
popf
pop rax
jmp 0x1401863bc
cmp eax, 0xc
jne 0x14018521f
popf
pop rax
jmp 0x140185b67
cmp eax, 0x26
jne 0x14018522e
popf
pop rax
jmp 0x1401867b3
cmp eax, 0x27
jne 0x14018523d
popf
pop rax
jmp 0x14018682e
cmp eax, 0x1f
jne 0x14018524c
popf
pop rax
jmp 0x1401863fa
cmp eax, 0x10
jne 0x14018525b
popf
pop rax
jmp 0x140185dbe
cmp eax, 6
jne 0x14018526a
popf
pop rax
jmp 0x14018583a
cmp eax, 9
jne 0x140185279
popf
pop rax
jmp 0x1401859a7
cmp eax, 4
jne 0x140185288
popf
pop rax
jmp 0x140185676
cmp eax, 0x16
jne 0x140185297
popf
pop rax
jmp 0x140186021
cmp eax, 0x28
jne 0x1401852a6
popf
pop rax
jmp 0x1401868be
cmp eax, 0xa
jne 0x1401852b5
popf
pop rax
jmp 0x140185a4f
cmp eax, 0x22
jne 0x1401852c4
popf
pop rax
jmp 0x1401865c5
cmp eax, 0x14
jne 0x1401852d3
popf
pop rax
jmp 0x140185f9c
cmp eax, 7
jne 0x1401852e2
popf
pop rax
jmp 0x1401858f8
cmp eax, 5
jne 0x1401852f1
popf
pop rax
jmp 0x140185785
cmp eax, 2
jne 0x140185300
popf
pop rax
jmp 0x1401854f8
cmp eax, 0x20
jne 0x14018530f
popf
pop rax
jmp 0x1401864bd
cmp eax, 0x1d
jne 0x14018531e
popf
pop rax
jmp 0x14018631e
cmp eax, 0x11
jne 0x14018532d
popf
pop rax
jmp 0x140185e14
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140083080]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rdi, rcx
mov qword [rbp - 0x40], rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r13, [0x19f7f2649]
pushf
sub r13, 0x5f77a5b9
popf
mov qword [rbp - 0x38], r13
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea r12, [0x1961bb6dc]
pushf
sub r12, 0x56143584
popf
mov qword [rbp - 0x10], r12
mov byte [rbp + 0x3c], al
mov dword [rbp + 0x40], 7
call fcn.14015d4a7
mov rcx, rax
test rax, rax
je 0x14018542c
push rax
pushf
mov eax, 0xd71db642
pushf
not eax
add eax, 0xf6b49ebd
xor eax, 0xe42a9755
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xcd03df6f
xor eax, 0x84c23946
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xd58e4076
xor eax, 0xad011402
rol eax, 0x9d
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x20be285a
pushf
not eax
add eax, 0xa2629668
xor eax, 0xa2a6f61d
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xf2c899ea
xor eax, 0x927537e5
rol eax, 0xf6
popf
jmp 0x140185099
mov rax, qword [rax]
jmp 0x140185463
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x48], rax
call fcn.14015d4a7
mov rcx, rax
test rax, rax
je 0x1401854b2
push rax
pushf
mov eax, 0x9efdcc14
pushf
not eax
add eax, 0xf027cc22
xor eax, 0xde87e87b
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x9a6e242b
xor eax, 0xbbe6fb30
rol eax, 0xb3
popf
jmp 0x140185099
push rax
pushf
mov eax, 0xe8ce09e2
pushf
not eax
add eax, 0xbc32ab60
xor eax, 0xff5de2a3
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x8e8edf5a
xor eax, 0xa8d436be
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf0e7dee6
xor eax, 0x934f7bba
rol eax, 0x8c
popf
jmp 0x140185099
mov rax, qword [rax]
jmp 0x1401854fc
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x50], rax
call fcn.14015d4a7
mov rcx, rax
test rax, rax
je 0x140185571
push rax
pushf
mov eax, 0x1361188e
pushf
not eax
add eax, 0x96cad55c
xor eax, 0xba1bd582
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd2b0e8fc
xor eax, 0xb814f06d
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x9b784817
xor eax, 0xedaf1291
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xb4a4430a
xor eax, 0x9300d4dc
rol eax, 0x8e
popf
jmp 0x140185099
push rax
pushf
mov eax, 0xecc7c927
pushf
not eax
add eax, 0xc73c5933
xor eax, 0xda453fc3
rol eax, 0x84
popf
pushf
not eax
add eax, 0x9ccde0a6
xor eax, 0xd1bfebd7
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xb3f3b4ae
xor eax, 0xd745a678
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa83b2069
xor eax, 0xb7751018
rol eax, 0x62
popf
jmp 0x140185099
mov rax, qword [rax]
jmp 0x1401855ce
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x58], rax
call fcn.14015d4a7
mov rcx, rax
test rax, rax
je 0x140185630
push rax
pushf
mov eax, 0xfc932a11
pushf
not eax
add eax, 0xe32b36a2
xor eax, 0xe5e8a49c
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xf791df0a
xor eax, 0xa71db6d1
rol eax, 0x99
popf
pushf
not eax
add eax, 0xec698d42
xor eax, 0xe5d573f0
rol eax, 0x82
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x8e82aa51
pushf
not eax
add eax, 0x817f0a3b
xor eax, 0xe8999492
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x8105d833
xor eax, 0xed43e03a
rol eax, 0x76
popf
pushf
not eax
add eax, 0xb712170e
xor eax, 0x9150f20b
rol eax, 0xe8
popf
jmp 0x140185099
mov rax, qword [rax]
jmp 0x14018567a
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x60], rax
jmp 0x140185686
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x40]
mov edx, 0x488601d9
pushf
not edx
add edx, 0xb8b632e5
xor edx, 0xfb600df6
rol edx, 0xe6
popf
pushf
not edx
add edx, 0xee927f0f
xor edx, 0xef7b0b52
rol edx, 0xc3
popf
pushf
not edx
add edx, 0x9f3157f6
xor edx, 0xed6faf7e
rol edx, 0x2a
popf
mov rcx, rax
jmp 0x1401856d8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14018572c
push rax
pushf
mov eax, 0x1f2b1154
pushf
not eax
add eax, 0xf05209c4
xor eax, 0xf3367396
rol eax, 0x17
popf
pushf
not eax
add eax, 0x87f715fd
xor eax, 0xf20e7b6b
rol eax, 0x78
popf
pushf
not eax
add eax, 0x93712381
xor eax, 0xb6f7bb00
rol eax, 0x3f
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x2b1fc8e6
pushf
not eax
add eax, 0xdf725545
xor eax, 0xeb4f2125
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xbcc91cc5
xor eax, 0x947e5381
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xe8e92f12
xor eax, 0xe3fefea1
rol eax, 0x72
popf
pushf
not eax
add eax, 0xc9634293
xor eax, 0xad554980
rol eax, 0x6c
popf
jmp 0x140185099
lea rcx, [rbp - 0x38]
mov rax, qword [rbp - 0x38]
jmp 0x14018578e
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.140179159
test al, al
je 0x1401857f4
push rax
pushf
mov eax, 0x3b4f9178
pushf
not eax
add eax, 0xe3d67e07
xor eax, 0xa494062d
rol eax, 0xae
popf
pushf
not eax
add eax, 0xbf037fdc
xor eax, 0x9d10790f
rol eax, 0x21
popf
pushf
not eax
add eax, 0xf812ab50
xor eax, 0xa57d1f9e
rol eax, 0x84
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x250dd595
pushf
not eax
add eax, 0xae01a66c
xor eax, 0xbe742885
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x995ca810
xor eax, 0xf99e0ae1
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xe2caf9b0
xor eax, 0xcd2714bc
rol eax, 0x7e
popf
jmp 0x140185099
lea rcx, [rbp - 0x10]
call fcn.14017c19b
mov rsi, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rbx, [r15 - 1]
test rsi, rsi
jne 0x14018589f
push rax
pushf
mov eax, 0xed7051ff
pushf
not eax
add eax, 0xfb458847
xor eax, 0xd2350ade
rol eax, 0x17
popf
pushf
not eax
add eax, 0xf231e6fd
xor eax, 0xa4a07d06
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd2b44258
xor eax, 0xd278103c
rol eax, 0x1b
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x4c344935
pushf
not eax
add eax, 0xea5a9b62
xor eax, 0xb0ac4728
rol eax, 0x36
popf
pushf
not eax
add eax, 0xade98297
xor eax, 0xe3c92958
rol eax, 0xde
popf
pushf
not eax
add eax, 0xc135e8ee
xor eax, 0xea7059b5
rol eax, 0x10
popf
pushf
not eax
add eax, 0xac9ba870
xor eax, 0xbd64f16f
rol eax, 0xd0
popf
jmp 0x140185099
mov eax, r15d
mov qword [rsp + 0x30], rax
jmp 0x140185e14
mov rax, rbx
push rax
pushf
mov eax, 0xb055351f
pushf
not eax
add eax, 0xa9a43ed9
xor eax, 0x8ebe6665
rol eax, 0x72
popf
pushf
not eax
add eax, 0xb0112b7c
xor eax, 0xa5843ecc
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xf92f0139
xor eax, 0xf41a4781
rol eax, 0x88
popf
pushf
not eax
add eax, 0xf275ad4d
xor eax, 0xac579093
rol eax, 0xd2
popf
jmp 0x140185099
inc rax
cmp byte [rsi + rax], 0
jne 0x140185a09
push rax
pushf
mov eax, 0x58da8915
pushf
not eax
add eax, 0xabe15fd9
xor eax, 0xccd97409
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x88b044f9
xor eax, 0xad899e40
rol eax, 0xac
popf
pushf
not eax
add eax, 0x8bca3cfa
xor eax, 0x88b5c0c2
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xcba9f09c
xor eax, 0xf9271709
rol eax, 0x1c
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x6a5211bb
pushf
not eax
add eax, 0xb49c1d5b
xor eax, 0xcc8d219c
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xa8e95099
xor eax, 0xfb4e085d
rol eax, 0x31
popf
pushf
not eax
add eax, 0xb850a5fd
xor eax, 0xea25b602
rol eax, 0x64
popf
jmp 0x140185099
add eax, 1
js 0x140185a9e
push rax
pushf
mov eax, 0x97a1723c
pushf
not eax
add eax, 0xa880c3a3
xor eax, 0xec34ef78
rol eax, 0x85
popf
pushf
not eax
add eax, 0xd6f597b3
xor eax, 0x8887612c
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xe3df13f3
xor eax, 0xcfe9adf3
rol eax, 0xc4
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x33304885
pushf
not eax
add eax, 0x928a0a0a
xor eax, 0xac59fd10
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd454b373
xor eax, 0xe11876de
rol eax, 0x4f
popf
jmp 0x140185099
movsxd r14, eax
cmp eax, 0x80
jle 0x140185b21
push rax
pushf
mov eax, 0xb4bfe7c3
pushf
not eax
add eax, 0xb2f385db
xor eax, 0xab16301a
rol eax, 0x93
popf
pushf
not eax
add eax, 0xdfc4ae45
xor eax, 0xa68eaa3b
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xdbaa8314
xor eax, 0x88ebcfec
rol eax, 0x71
popf
jmp 0x140185099
push rax
pushf
mov eax, 0xa6355887
pushf
not eax
add eax, 0xecec6970
xor eax, 0xe5ebc059
rol eax, 0x61
popf
pushf
not eax
add eax, 0xae0bdf7f
xor eax, 0xd121c631
rol eax, 0x76
popf
pushf
not eax
add eax, 0xce96b609
xor eax, 0xc3e9197a
rol eax, 0xdd
popf
jmp 0x140185099
mov edx, 0x2dbe7820
pushf
not edx
add edx, 0xc5acdd87
xor edx, 0xb2b549b1
rol edx, 0x67
popf
pushf
not edx
add edx, 0xcdbcdad0
xor edx, 0xa04a039c
rol edx, 0x9a
popf
pushf
not edx
add edx, 0x9673f1aa
xor edx, 0x996e5519
rol edx, 0xa1
popf
pushf
not edx
add edx, 0x9b8bcc84
xor edx, 0x9952f6a6
rol edx, 0x44
popf
mov rcx, r14
jmp 0x140185bc4
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x30], rax
mov rcx, rax
test rax, rax
je 0x140185c34
push rax
pushf
mov eax, 0x8413f27f
pushf
not eax
add eax, 0xcf769ddf
xor eax, 0xab2fb585
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xabef83b2
xor eax, 0xa936855c
rol eax, 0x75
popf
pushf
not eax
add eax, 0xe5323391
xor eax, 0xfdfdb49e
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xa23d114c
xor eax, 0xee8c94c8
rol eax, 0x30
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x964760f
pushf
not eax
add eax, 0xe52a8060
xor eax, 0xb1fe14da
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xed74e5ee
xor eax, 0xa98a5e31
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xbecb0501
xor eax, 0xd190b248
rol eax, 0x26
popf
jmp 0x140185099
jmp 0x140185d2d
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x38]
push rax
pushf
mov eax, 0x1cf8ae0e
pushf
not eax
add eax, 0x86625f6d
xor eax, 0xbe77f2fa
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xf39ea83e
xor eax, 0xb29a3f22
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xa9b7c938
xor eax, 0xc3c2b8c7
rol eax, 0x64
popf
jmp 0x140185099
test r14, r14
je 0x140185d8b
push rax
pushf
mov eax, 0x5daef678
pushf
not eax
add eax, 0xbe70ea80
xor eax, 0xe17605eb
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xd62d538c
xor eax, 0xc0339099
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xd5f902c1
xor eax, 0xdfbea5ab
rol eax, 0x67
popf
pushf
not eax
add eax, 0xeaaccf95
xor eax, 0xb8f94270
rol eax, 0xff
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x7c71bced
pushf
not eax
add eax, 0x8323df8d
xor eax, 0xf60741e6
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xa0d05b79
xor eax, 0xac35a9bc
rol eax, 0xaa
popf
jmp 0x140185099
mov r8, r14
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x520fcf1
pushf
not eax
add eax, 0xd66dd547
xor eax, 0x95fa5f19
rol eax, 0x81
popf
pushf
not eax
add eax, 0xaa83eb06
xor eax, 0xa39a4831
rol eax, 0xec
popf
pushf
not eax
add eax, 0xe4e75866
xor eax, 0x9ba19035
rol eax, 0x61
popf
jmp 0x140185099
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140185e88
push rax
pushf
mov eax, 0xf7e2ce59
pushf
not eax
add eax, 0xdc881b26
xor eax, 0x863df4aa
rol eax, 0xba
popf
pushf
not eax
add eax, 0x930cd46f
xor eax, 0x8e7ba407
rol eax, 0x24
popf
pushf
not eax
add eax, 0xaceeaa0a
xor eax, 0x8c5651c2
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xcfc04345
xor eax, 0xc8f3a2a3
rol eax, 0x2e
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x904f2700
pushf
not eax
add eax, 0xd22032f0
xor eax, 0xe08df9cd
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xf8b2a51a
xor eax, 0xd7f8f844
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xa05ced2e
xor eax, 0x9b4cc27c
rol eax, 0x82
popf
pushf
not eax
add eax, 0x9c1ad77d
xor eax, 0xf2147be1
rol eax, 0x70
popf
jmp 0x140185099
mov rdx, rax
mov rcx, rdi
call fcn.140142495
nop
lea rax, [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x140185f42
push rax
pushf
mov eax, 0x7d4a5440
pushf
not eax
add eax, 0x8079f6bf
xor eax, 0xdd2de042
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xff26b731
xor eax, 0x85f45378
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xa1cd24be
xor eax, 0xb61f26b1
rol eax, 0x64
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x6c33666e
pushf
not eax
add eax, 0xb5c31654
xor eax, 0xf3855aff
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xd8745530
xor eax, 0x86e4f079
rol eax, 0x19
popf
pushf
not eax
add eax, 0xf1aeb5b9
xor eax, 0x889579e6
rol eax, 0xee
popf
pushf
not eax
add eax, 0x85e9aceb
xor eax, 0xef2e3c19
rol eax, 0x7d
popf
jmp 0x140185099
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0xe1b8183a
pushf
not eax
add eax, 0xf05c6664
xor eax, 0xb1fe22bb
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xda1f0fc5
xor eax, 0xbf8d1c4c
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xd784d950
xor eax, 0xfa2d1a4c
rol eax, 0x86
popf
jmp 0x140185099
jmp 0x140186083
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0xfe7769c3
pushf
not eax
add eax, 0xe9494086
xor eax, 0xab66371d
rol eax, 0x64
popf
pushf
not eax
add eax, 0xb3db2f25
xor eax, 0x92a0b7a3
rol eax, 6
popf
pushf
not eax
add eax, 0x92747779
xor eax, 0xd30ad2ea
rol eax, 0x1e
popf
jmp 0x140185099
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
mov qword [rbp - 0x10], r12
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401860e1
push rax
pushf
mov eax, 0x8c9c507e
pushf
not eax
add eax, 0x82f88484
xor eax, 0xd77bad2e
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xe9a42b53
xor eax, 0xc08dafdc
rol eax, 0x80
popf
pushf
not eax
add eax, 0x8d4fa80e
xor eax, 0xafcc72a9
rol eax, 0xa3
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x2f1f3748
pushf
not eax
add eax, 0xc6859342
xor eax, 0xbdb396cf
rol eax, 0x41
popf
pushf
not eax
add eax, 0x9ae9de4c
xor eax, 0xdd29c477
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xbac605ce
xor eax, 0x9ad2d0a8
rol eax, 0xe
popf
pushf
not eax
add eax, 0xc1e9930c
xor eax, 0xa8dc7cb2
rol eax, 0x57
popf
jmp 0x140185099
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140186141
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xa93dc25a
pushf
not eax
add eax, 0xa0690f05
xor eax, 0xc1186152
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xfcb1691a
xor eax, 0xaff9884d
rol eax, 0x81
popf
jmp 0x140185099
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401861be
push rax
pushf
mov eax, 0x5ccc8423
pushf
not eax
add eax, 0xb615ebd6
xor eax, 0xe7090150
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xe980ec3f
xor eax, 0xbb1ce5d0
rol eax, 0x6a
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x304c8441
pushf
not eax
add eax, 0x8287456b
xor eax, 0xa8ee9695
rol eax, 0x16
popf
pushf
not eax
add eax, 0x897ab765
xor eax, 0xfa3c024c
rol eax, 0xa3
popf
jmp 0x140185099
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401861f8
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x4c61b6fa
pushf
not eax
add eax, 0xcb729a64
xor eax, 0x915f41a2
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xf333683a
xor eax, 0xffc6a955
rol eax, 0x8a
popf
jmp 0x140185099
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140186275
push rax
pushf
mov eax, 0xcd7041f4
pushf
not eax
add eax, 0xc8d17c80
xor eax, 0xb28ff16f
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x83386695
xor eax, 0xba9c88fd
rol eax, 0x8f
popf
jmp 0x140185099
push rax
pushf
mov eax, 0xb22f8a12
pushf
not eax
add eax, 0xeffe2dd7
xor eax, 0x9f98e412
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xe86d7bfd
xor eax, 0xeaede0f0
rol eax, 0x57
popf
pushf
not eax
add eax, 0xbf340ecd
xor eax, 0xf769a6d1
rol eax, 0x58
popf
jmp 0x140185099
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401862c2
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xf3b1ae8e
pushf
not eax
add eax, 0xac5f4e34
xor eax, 0xb2cf243c
rol eax, 0x32
popf
pushf
not eax
add eax, 0xfd19fc2e
xor eax, 0x901e18f9
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xa8a36216
xor eax, 0xa41fcd8e
rol eax, 0x51
popf
pushf
not eax
add eax, 0xe0cd4e9f
xor eax, 0xe94ffa68
rol eax, 0xf1
popf
jmp 0x140185099
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x140186389
push rax
pushf
mov eax, 0xb9622d5e
pushf
not eax
add eax, 0xf6950015
xor eax, 0x921077e1
rol eax, 0x78
popf
pushf
not eax
add eax, 0xe5ab2727
xor eax, 0xa65ec9be
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xbe8209fd
xor eax, 0xab286923
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x98130624
xor eax, 0xadc0e7da
rol eax, 7
popf
jmp 0x140185099
push rax
pushf
mov eax, 0xfe38bd1f
pushf
not eax
add eax, 0x9c4ef157
xor eax, 0xfcd3c7f6
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xfc3e9c2e
xor eax, 0xcca090e7
rol eax, 0xdc
popf
jmp 0x140185099
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401863c3
call qword [rax + reloc.WS2_32.dll_htonl]
nop
push rax
pushf
mov eax, 0x504ba720
pushf
not eax
add eax, 0x874cda13
xor eax, 0xf94c7a31
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc23020c5
xor eax, 0xa3bdb59e
rol eax, 0xfb
popf
jmp 0x140185099
mov rdx, qword [rbp - 0x28]
test rdx, rdx
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x38], r13
je 0x140186464
push rax
pushf
mov eax, 0x97092d50
pushf
not eax
add eax, 0xe41211bc
xor eax, 0xe89c80e6
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xe847fec7
xor eax, 0xe12e9e29
rol eax, 0xad
popf
pushf
not eax
add eax, 0x9fa14f19
xor eax, 0xe9dc7ae2
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xf03094f9
xor eax, 0xdd5a5690
rol eax, 0xfe
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x75d27ac0
pushf
not eax
add eax, 0xe19103d7
xor eax, 0xcd03a453
rol eax, 8
popf
pushf
not eax
add eax, 0xe8221eaf
xor eax, 0xfc680611
rol eax, 0x18
popf
pushf
not eax
add eax, 0xdc5f8c6d
xor eax, 0xeb361561
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x82c71e0a
xor eax, 0xc40c1316
rol eax, 0x5e
popf
jmp 0x140185099
test rcx, rcx
je 0x14018651b
push rax
pushf
mov eax, 0xa915e856
pushf
not eax
add eax, 0xdac5a9b5
xor eax, 0xf628c932
rol eax, 0xff
popf
pushf
not eax
add eax, 0xfb0f5b39
xor eax, 0xfc97d676
rol eax, 0xf
popf
pushf
not eax
add eax, 0xa724956f
xor eax, 0xd199fba2
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xf4a50af2
xor eax, 0xeac53c71
rol eax, 0xe1
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x2273f546
pushf
not eax
add eax, 0x9fb80e26
xor eax, 0xeaf7c682
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xaeac8c95
xor eax, 0x932cea9a
rol eax, 0x80
popf
pushf
not eax
add eax, 0xbe0e9922
xor eax, 0x98c4ccef
rol eax, 0x8d
popf
jmp 0x140185099
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rbp - 0x30]
push rax
pushf
mov eax, 0x38c23129
pushf
not eax
add eax, 0xcf3b958b
xor eax, 0xb95400d8
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc337b345
xor eax, 0xfb032a56
rol eax, 0x18
popf
pushf
not eax
add eax, 0x84490c5e
xor eax, 0xe21bd524
rol eax, 0x29
popf
pushf
not eax
add eax, 0xea67ae40
xor eax, 0xb87097d1
rol eax, 8
popf
jmp 0x140185099
mov qword [rbp - 0x28], r15
push rax
pushf
mov eax, 0xab15937a
pushf
not eax
add eax, 0xf5587221
xor eax, 0xc50b22bf
rol eax, 0x88
popf
pushf
not eax
add eax, 0xaab8f308
xor eax, 0xfb011d37
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x8ff05183
xor eax, 0xb10e2175
rol eax, 0x5a
popf
jmp 0x140185099
test rcx, rcx
je 0x14018666c
push rax
pushf
mov eax, 0x31eebb17
pushf
not eax
add eax, 0xa21e19b9
xor eax, 0x91fb6bc5
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xe271f3f7
xor eax, 0xd713cc9a
rol eax, 0x20
popf
pushf
not eax
add eax, 0xe37f85fb
xor eax, 0x8db718b6
rol eax, 1
popf
pushf
not eax
add eax, 0xb1072cdd
xor eax, 0xbb916d9d
rol eax, 0x54
popf
jmp 0x140185099
push rax
pushf
mov eax, 0x7d375254
pushf
not eax
add eax, 0xe83ba3d9
xor eax, 0xa4cbf63f
rol eax, 0x87
popf
pushf
not eax
add eax, 0x8b151d0c
xor eax, 0xa3413fb0
rol eax, 0x1e
popf
jmp 0x140185099
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x30], r15
push rax
pushf
mov eax, 0x23a209a6
pushf
not eax
add eax, 0xea677f87
xor eax, 0x884816fb
rol eax, 0x91
popf
pushf
not eax
add eax, 0x83ee78d0
xor eax, 0xbdb58bb5
rol eax, 0x54
popf
jmp 0x140185099
mov edx, 0xab33958f
pushf
not edx
add edx, 0xb9a74c3e
xor edx, 0xf0281abf
rol edx, 0xec
popf
pushf
not edx
add edx, 0xee6ae2ac
xor edx, 0xc67bf1de
rol edx, 0xf
popf
pushf
not edx
add edx, 0xd0048f38
xor edx, 0xb678944e
rol edx, 0x14
popf
mov rcx, qword [rbp - 0x20]
call fcn.140135cf8
mov rax, rdi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140150364
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x8faff83
pushf
not ecx
add ecx, 0xed354ca2
xor ecx, 0xee6a9cc8
rol ecx, 0xe4
popf
pushf
not ecx
add ecx, 0x82ff17fd
xor ecx, 0xddfffa33
rol ecx, 0x5f
popf
call fcn.140158d2c
int3
mov ecx, 0x162fc364
pushf
not ecx
add ecx, 0xc2ab9f4f
xor ecx, 0xe2a8f541
rol ecx, 0x80
popf
pushf
not ecx
add ecx, 0x9781abe7
xor ecx, 0xa78b4a01
rol ecx, 0x47
popf
pushf
not ecx
add ecx, 0x917a92db
xor ecx, 0xff1ef6c3
rol ecx, 0x5a
popf
call fcn.140158d2c
nop
push rax
pushf
mov eax, 0x56b8ed72
pushf
not eax
add eax, 0x869e8470
xor eax, 0x8e8d779c
rol eax, 3
popf
pushf
not eax
add eax, 0x9c138601
xor eax, 0x8cb93071
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc9dd3ccb
xor eax, 0xf999ae23
rol eax, 0x64
popf
jmp 0x140185099
mov ecx, 0x5be7eacf
pushf
not ecx
add ecx, 0xf31b514d
xor ecx, 0x8698aa34
rol ecx, 0x44
popf
pushf
not ecx
add ecx, 0xad6e8801
xor ecx, 0x9ab1736f
rol ecx, 0xb3
popf
call fcn.140158d2c
nop
push rax
pushf
mov eax, 0x7cd3c3df
pushf
not eax
add eax, 0xdbb178f7
xor eax, 0x86982f29
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb5137fe1
xor eax, 0x93c4ddf6
rol eax, 0x88
popf
pushf
not eax
add eax, 0xd82cff40
xor eax, 0x88dd5477
rol eax, 0x86
popf
jmp 0x140185099
mov ecx, 0xf6708592
pushf
not ecx
add ecx, 0x84a0a028
xor ecx, 0xd77e7c93
rol ecx, 0x91
popf
pushf
not ecx
add ecx, 0xc0057683
xor ecx, 0xdff8c1e6
rol ecx, 0xa5
popf
call fcn.140158d2c
nop
push rax
pushf
mov eax, 0x8061b1b3
pushf
not eax
add eax, 0x995b159e
xor eax, 0xff8f02a0
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xd92af5e6
xor eax, 0x88331f60
rol eax, 2
popf
pushf
not eax
add eax, 0xcf252597
xor eax, 0xfee84f63
rol eax, 0x1b
popf
jmp 0x140185099
mov ecx, 0xe9ac01fe
pushf
not ecx
add ecx, 0xb8fb1314
xor ecx, 0x9f7b55d5
rol ecx, 0xc8
popf
pushf
not ecx
add ecx, 0xed3a6754
xor ecx, 0xaf4b832b
rol ecx, 0xf0
popf
pushf
not ecx
add ecx, 0xec4c5daf
xor ecx, 0x858ef1cb
rol ecx, 0x4f
popf
pushf
not ecx
add ecx, 0xea050147
xor ecx, 0xa3e75871
rol ecx, 0x65
popf
call fcn.140158d2c
nop
push rax
pushf
mov eax, 0xebda7afa
pushf
not eax
add eax, 0xca14279c
xor eax, 0x8ab99892
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x87decc49
xor eax, 0xf3a6bda2
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x8070e5fa
xor eax, 0xea4cd208
rol eax, 0x28
popf
pushf
not eax
add eax, 0xc398eef1
xor eax, 0x8e33056d
rol eax, 0x1f
popf
jmp 0x140185099
mov ecx, 0xdec342fd
pushf
not ecx
add ecx, 0x8a0a54fc
xor ecx, 0x8bc41ed7
rol ecx, 0xbc
popf
pushf
not ecx
add ecx, 0x90e4f994
xor ecx, 0xbed948a1
rol ecx, 0x70
popf
call fcn.140158d2c
int3