Function at 0x1401161c9
Capabilities:
Authenticate hmac

Disassembly:
push rax
pushf
mov eax, 0xa61e7cb7
pushf
not eax
add eax, 0xc7b4fd21
xor eax, 0xdd179de6
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x97224a13
xor eax, 0xb0acf0c4
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xc4f3d7f6
xor eax, 0xd8802ae4
rol eax, 0x14
popf
pushf
not eax
add eax, 0xb1ff4930
xor eax, 0x9c3d2c3b
rol eax, 5
popf
cmp eax, 0x20
jne 0x14011622c
popf
pop rax
jmp 0x1401173d8
cmp eax, 0
jne 0x14011623b
popf
pop rax
jmp 0x140116439
cmp eax, 3
jne 0x14011624a
popf
pop rax
jmp 0x140116702
cmp eax, 1
jne 0x140116259
popf
pop rax
jmp 0x1401165b2
cmp eax, 0xd
jne 0x140116268
popf
pop rax
jmp 0x140116b7a
cmp eax, 0x1a
jne 0x140116277
popf
pop rax
jmp 0x140117152
cmp eax, 0xe
jne 0x140116286
popf
pop rax
jmp 0x140116bbe
cmp eax, 0xb
jne 0x140116295
popf
pop rax
jmp 0x140116a6d
cmp eax, 0x19
jne 0x1401162a4
popf
pop rax
jmp 0x1401170a1
cmp eax, 8
jne 0x1401162b3
popf
pop rax
jmp 0x140116966
cmp eax, 0x1d
jne 0x1401162c2
popf
pop rax
jmp 0x1401172e5
cmp eax, 0x17
jne 0x1401162d1
popf
pop rax
jmp 0x140116fb1
cmp eax, 0x1c
jne 0x1401162e0
popf
pop rax
jmp 0x140117253
cmp eax, 0x12
jne 0x1401162ef
popf
pop rax
jmp 0x140116d5a
cmp eax, 0x18
jne 0x1401162fe
popf
pop rax
jmp 0x140117051
cmp eax, 0x11
jne 0x14011630d
popf
pop rax
jmp 0x140116cfc
cmp eax, 0x1b
jne 0x14011631c
popf
pop rax
jmp 0x1401171b6
cmp eax, 0x21
jne 0x14011632b
popf
pop rax
jmp 0x14011743b
cmp eax, 0x23
jne 0x14011633a
popf
pop rax
jmp 0x140117589
cmp eax, 0x14
jne 0x140116349
popf
pop rax
jmp 0x140116e71
cmp eax, 0xf
jne 0x140116358
popf
pop rax
jmp 0x140116c41
cmp eax, 0x13
jne 0x140116367
popf
pop rax
jmp 0x140116da9
cmp eax, 0x15
jne 0x140116376
popf
pop rax
jmp 0x140116eae
cmp eax, 0x22
jne 0x140116385
popf
pop rax
jmp 0x1401174fb
cmp eax, 0x1e
jne 0x140116394
popf
pop rax
jmp 0x140117322
cmp eax, 0xc
jne 0x1401163a3
popf
pop rax
jmp 0x140116b11
cmp eax, 7
jne 0x1401163b2
popf
pop rax
jmp 0x1401168d0
cmp eax, 5
jne 0x1401163c1
popf
pop rax
jmp 0x140116793
cmp eax, 0x1f
jne 0x1401163d0
popf
pop rax
jmp 0x14011736c
cmp eax, 0x10
jne 0x1401163df
popf
pop rax
jmp 0x140116cc2
cmp eax, 6
jne 0x1401163ee
popf
pop rax
jmp 0x14011683b
cmp eax, 9
jne 0x1401163fd
popf
pop rax
jmp 0x140116a16
cmp eax, 4
jne 0x14011640c
popf
pop rax
jmp 0x140116755
cmp eax, 0x16
jne 0x14011641b
popf
pop rax
jmp 0x140116f61
cmp eax, 2
jne 0x14011642a
popf
pop rax
jmp 0x140116667
cmp eax, 0xa
jne 0x140116439
popf
pop rax
jmp 0x140116a5e
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140085080]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rdi, rcx
mov qword [rbp - 0x40], rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r12, [0x1961b4dde]
pushf
sub r12, 0x5613b6ce
popf
mov qword [rbp - 0x38], r12
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea rcx, [rbp - 0x10]
call fcn.140096db0
nop
jmp 0x1401164c6
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x40]
mov edx, 0xd525de30
pushf
not edx
add edx, 0xd1b44234
xor edx, 0xd6a87b57
rol edx, 0xf
popf
pushf
not edx
add edx, 0x979483ee
xor edx, 0xfb264cc3
rol edx, 0x37
popf
pushf
not edx
add edx, 0xf0994cc6
xor edx, 0xe39ae7b4
rol edx, 0x1b
popf
mov rcx, rax
jmp 0x140116518
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140116559
push rax
pushf
mov eax, 0x9aec4aaf
pushf
not eax
add eax, 0xa483dba9
xor eax, 0x899c8a34
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xe6a448e6
xor eax, 0xe28e134a
rol eax, 0xc6
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0x47755636
pushf
not eax
add eax, 0xe293cf67
xor eax, 0x89fb4bcd
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf23e073b
xor eax, 0x85a0e7d6
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xd7ec7925
xor eax, 0x84322cf9
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xa5216772
xor eax, 0xb382fa77
rol eax, 0x15
popf
jmp 0x14011621d
lea rcx, [rbp - 0x38]
mov rax, qword [rbp - 0x38]
jmp 0x1401165bb
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.14010b011
test al, al
je 0x140116621
push rax
pushf
mov eax, 0xfc0cd2a
pushf
not eax
add eax, 0xc3d0483d
xor eax, 0x9c063ab0
rol eax, 0x92
popf
pushf
not eax
add eax, 0xbea72c7e
xor eax, 0xcb1f575d
rol eax, 0x29
popf
pushf
not eax
add eax, 0xc0b6c562
xor eax, 0xbf00ba7b
rol eax, 8
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0x6340ad93
pushf
not eax
add eax, 0x851ad456
xor eax, 0xa50c1e26
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xf487d4dc
xor eax, 0xb82dce17
rol eax, 0xd
popf
pushf
not eax
add eax, 0xfb975821
xor eax, 0xdaf050cc
rol eax, 0x23
popf
jmp 0x14011621d
lea rcx, [rbp - 0x10]
call fcn.14010e0e5
mov rsi, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
mov rbx, 0xffffffffffffffff
test rsi, rsi
jne 0x1401166bc
push rax
pushf
mov eax, 0x11f18b64
pushf
not eax
add eax, 0xd911df12
xor eax, 0xb5bc155d
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xa2361a0c
xor eax, 0x9679fd64
rol eax, 0x47
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xda868471
pushf
not eax
add eax, 0xbfadef95
xor eax, 0x95e43e5f
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xc58a262a
xor eax, 0xc7a70ac7
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa4e6bcd9
xor eax, 0x835526f3
rol eax, 0xf5
popf
jmp 0x14011621d
mov eax, r15d
mov qword [rsp + 0x30], rax
jmp 0x140116b7a
mov rax, rbx
nop dword [rax + rax]
push rax
pushf
mov eax, 0x36cd7298
pushf
not eax
add eax, 0x9a4ea7be
xor eax, 0xa7eb2dde
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xe5e68f3d
xor eax, 0xa2c716aa
rol eax, 0xc0
popf
jmp 0x14011621d
inc rax
cmp byte [rsi + rax], 0
jne 0x1401167f5
push rax
pushf
mov eax, 0xd0679a61
pushf
not eax
add eax, 0xf6a74060
xor eax, 0xa562e489
rol eax, 0xae
popf
pushf
not eax
add eax, 0xed638f2e
xor eax, 0x88f4161f
rol eax, 0x95
popf
pushf
not eax
add eax, 0x8b2c1036
xor eax, 0xdd5a9490
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb7c479c7
xor eax, 0xe2cb1e2f
rol eax, 0x8e
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xdc5628bc
pushf
not eax
add eax, 0xd77ab86f
xor eax, 0xae8002f1
rol eax, 0x26
popf
pushf
not eax
add eax, 0xbeea9d7f
xor eax, 0xc9e3623d
rol eax, 0x50
popf
pushf
not eax
add eax, 0xf8401e2a
xor eax, 0xc9ab8805
rol eax, 0xd7
popf
jmp 0x14011621d
add eax, 1
js 0x14011688a
push rax
pushf
mov eax, 0xe7d13782
pushf
not eax
add eax, 0xff11f688
xor eax, 0xc09c857a
rol eax, 0x47
popf
pushf
not eax
add eax, 0xb62f1156
xor eax, 0xc868fb8f
rol eax, 0x87
popf
pushf
not eax
add eax, 0xf915f913
xor eax, 0xbd408692
rol eax, 0xea
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0x57990e0e
pushf
not eax
add eax, 0xb101caee
xor eax, 0xbf9d3968
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xd9a77632
xor eax, 0xc2e12327
rol eax, 0x35
popf
pushf
not eax
add eax, 0xff0b6690
xor eax, 0x92e9c99e
rol eax, 0xdc
popf
jmp 0x14011621d
movsxd r14, eax
cmp eax, 0x80
jle 0x14011690d
push rax
pushf
mov eax, 0x33535ddf
pushf
not eax
add eax, 0xa931e4b8
xor eax, 0xb8497a7d
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xc3941e42
xor eax, 0xdee5b182
rol eax, 0x8c
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xbf9bda98
pushf
not eax
add eax, 0xbc1011f4
xor eax, 0xd0d0b81e
rol eax, 0x46
popf
pushf
not eax
add eax, 0xdcecb547
xor eax, 0xcc9e015d
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xa4d164a7
xor eax, 0xa0c0d7fd
rol eax, 0xee
popf
pushf
not eax
add eax, 0x9090fdc1
xor eax, 0xa4c34f03
rol eax, 0x4c
popf
jmp 0x14011621d
mov edx, 0x87859f77
pushf
not edx
add edx, 0xc2bb925c
xor edx, 0xfa72397a
rol edx, 0xce
popf
pushf
not edx
add edx, 0x90428603
xor edx, 0x9d5addb1
rol edx, 0xd5
popf
mov rcx, r14
jmp 0x140116999
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x30], rax
mov rcx, rax
test rax, rax
je 0x1401169e3
push rax
pushf
mov eax, 0xd39b1a11
pushf
not eax
add eax, 0x9c300fbc
xor eax, 0x8f009c93
rol eax, 0xe
popf
pushf
not eax
add eax, 0xe437e99b
xor eax, 0xc9e997bc
rol eax, 0xe0
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xfad53845
pushf
not eax
add eax, 0x9cd6978e
xor eax, 0xc68e9d75
rol eax, 0x23
popf
pushf
not eax
add eax, 0xe134704b
xor eax, 0xad365e5f
rol eax, 0xe9
popf
jmp 0x14011621d
jmp 0x140116a6d
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x38]
test r14, r14
je 0x140116acb
push rax
pushf
mov eax, 0x96cbed5f
pushf
not eax
add eax, 0xa20abc10
xor eax, 0xfae63735
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xd9e6fd28
xor eax, 0xd1ccdb55
rol eax, 0x49
popf
pushf
not eax
add eax, 0xdf727dc3
xor eax, 0xc600238c
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xf2cfb611
xor eax, 0xbbd8aba4
rol eax, 0x49
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0x3fcb3666
pushf
not eax
add eax, 0xf97b474e
xor eax, 0x9d81e8a0
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xf2c82162
xor eax, 0xee46e711
rol eax, 0x63
popf
pushf
not eax
add eax, 0xe27d0246
xor eax, 0xfa5441cc
rol eax, 0xf1
popf
jmp 0x14011621d
mov r8, r14
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
push rax
pushf
mov eax, 0x4691d2a0
pushf
not eax
add eax, 0xb366bd18
xor eax, 0x9c4b515e
rol eax, 0x32
popf
pushf
not eax
add eax, 0xad0b0417
xor eax, 0xea044ebf
rol eax, 5
popf
pushf
not eax
add eax, 0xa022d2fb
xor eax, 0x8bf57eff
rol eax, 8
popf
pushf
not eax
add eax, 0x83ff0c84
xor eax, 0xce6d61ab
rol eax, 0x92
popf
jmp 0x14011621d
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
mov r8, rbx
push rax
pushf
mov eax, 0xe87687ad
pushf
not eax
add eax, 0xd4f3c0b7
xor eax, 0xf1374db4
rol eax, 0x66
popf
pushf
not eax
add eax, 0xd9120a21
xor eax, 0x8674dade
rol eax, 0xc1
popf
jmp 0x14011621d
inc r8
cmp byte [rax + r8], 0
jne 0x140116c0e
push rax
pushf
mov eax, 0x574de741
pushf
not eax
add eax, 0xc6e2dd8a
xor eax, 0xd1ee797e
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe593560b
xor eax, 0xda50db32
rol eax, 0x64
popf
pushf
not eax
add eax, 0x86dda293
xor eax, 0x9e916379
rol eax, 7
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0x7c95116c
pushf
not eax
add eax, 0x98bd577f
xor eax, 0x95cf49e7
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xb596c5cc
xor eax, 0xa6d1d244
rol eax, 7
popf
jmp 0x14011621d
mov rdx, rax
mov rcx, rdi
call fcn.1400cd7ec
nop
lea rax, [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x140116c8e
push rax
pushf
mov eax, 0xae9dc64d
pushf
not eax
add eax, 0x9073c1a1
xor eax, 0x95a1fca7
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xcf070196
xor eax, 0xaf352fcd
rol eax, 1
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xbaa8760f
pushf
not eax
add eax, 0xb1114008
xor eax, 0xc871acdf
rol eax, 0x66
popf
pushf
not eax
add eax, 0xaa972c2d
xor eax, 0xa43de255
rol eax, 0x21
popf
jmp 0x14011621d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0x48f9a1d9
pushf
not eax
add eax, 0xca5ca971
xor eax, 0x85ffbc1e
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x9fd7a6cc
xor eax, 0x9b3aea52
rol eax, 0xfc
popf
jmp 0x14011621d
jmp 0x140116da9
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0xed7c78e4
pushf
not eax
add eax, 0xa11be1d0
xor eax, 0xc02736fa
rol eax, 0x61
popf
pushf
not eax
add eax, 0x8fff3607
xor eax, 0xa88e79a8
rol eax, 0x1e
popf
jmp 0x14011621d
lea rax, [0x1ae4e0498]
pushf
sub rax, 0x6e466b68
popf
mov rdx, qword [rbp + 0x60]
mov qword [rbp - 0x10], rax
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140116e2b
push rax
pushf
mov eax, 0xb623fce9
pushf
not eax
add eax, 0xb096411f
xor eax, 0xae5fe2f7
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xcd3e1105
xor eax, 0xd98c9152
rol eax, 0x97
popf
pushf
not eax
add eax, 0xa23165bb
xor eax, 0xfdc6f9d5
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xa443d9ee
xor eax, 0xd1453525
rol eax, 0x25
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xa20b955b
pushf
not eax
add eax, 0x82e6606c
xor eax, 0xbeaa7357
rol eax, 0x53
popf
pushf
not eax
add eax, 0xfe55232f
xor eax, 0xc91f8bd3
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xe2d28ad9
xor eax, 0x8431d719
rol eax, 0xbc
popf
jmp 0x14011621d
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140116e78
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xf18801ae
pushf
not eax
add eax, 0x95d9d6f6
xor eax, 0x8ed54fab
rol eax, 0x13
popf
pushf
not eax
add eax, 0xb6c763f4
xor eax, 0xdf660fda
rol eax, 0xe0
popf
jmp 0x14011621d
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140116f08
push rax
pushf
mov eax, 0x3c4f452f
pushf
not eax
add eax, 0xa2950c40
xor eax, 0xf8d5a4cd
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe74fc8a2
xor eax, 0xabbbf799
rol eax, 0xac
popf
pushf
not eax
add eax, 0x89e283f4
xor eax, 0x89d107f1
rol eax, 0x95
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0x316f7f35
pushf
not eax
add eax, 0x8a5a9669
xor eax, 0xae453085
rol eax, 0x26
popf
pushf
not eax
add eax, 0xf989d003
xor eax, 0x9c838aa7
rol eax, 9
popf
pushf
not eax
add eax, 0xc7936c6c
xor eax, 0xb9814108
rol eax, 0x36
popf
pushf
not eax
add eax, 0xa7faaaf2
xor eax, 0xb79c86b8
rol eax, 0xd6
popf
jmp 0x14011621d
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140116f68
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x909896ba
pushf
not eax
add eax, 0xc42c9301
xor eax, 0xe39b5792
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf4bcbb97
xor eax, 0xeabbc72a
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xd416a571
xor eax, 0xced66b6d
rol eax, 0x38
popf
jmp 0x14011621d
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14011700b
push rax
pushf
mov eax, 0xdd0bd882
pushf
not eax
add eax, 0x982f5ef4
xor eax, 0xf090b1f2
rol eax, 0x80
popf
pushf
not eax
add eax, 0xb7a2381b
xor eax, 0xe35b4058
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xe50bba29
xor eax, 0xd813eee4
rol eax, 0xf5
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xd51ed89d
pushf
not eax
add eax, 0xa79af060
xor eax, 0xe4f903e7
rol eax, 0x28
popf
pushf
not eax
add eax, 0xec57b9a8
xor eax, 0x926481d4
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x9635cc9a
xor eax, 0x808f1f72
rol eax, 0xd5
popf
jmp 0x14011621d
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140117058
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xc433eae2
pushf
not eax
add eax, 0xbc956229
xor eax, 0xdeb9871a
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xba9b31e5
xor eax, 0xa81dc3bb
rol eax, 0x14
popf
pushf
not eax
add eax, 0x84d5860c
xor eax, 0xaf781c6d
rol eax, 0xa6
popf
jmp 0x14011621d
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x14011710c
push rax
pushf
mov eax, 0x98ec0c29
pushf
not eax
add eax, 0xa85c1ba3
xor eax, 0xb15841c9
rol eax, 0x80
popf
pushf
not eax
add eax, 0xaef3eb01
xor eax, 0xa170d8a8
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xe0cf4599
xor eax, 0xecf14b49
rol eax, 0x56
popf
pushf
not eax
add eax, 0x9ef3d89d
xor eax, 0x899d2c62
rol eax, 0x57
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xca36e5a3
pushf
not eax
add eax, 0x8b29c1fc
xor eax, 0xb1cc217e
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x8193f550
xor eax, 0xa9cefb51
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xb1e959b5
xor eax, 0xe274423d
rol eax, 0xb
popf
jmp 0x14011621d
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140117159
call qword [rax + reloc.WS2_32.dll_htonl]
nop
push rax
pushf
mov eax, 0x4cc6ea1b
pushf
not eax
add eax, 0xd14b7873
xor eax, 0xba3c9271
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xc5aa52be
xor eax, 0xae21fac1
rol eax, 0x79
popf
pushf
not eax
add eax, 0x800d7f2f
xor eax, 0x81005bc6
rol eax, 0x87
popf
pushf
not eax
add eax, 0x990592d6
xor eax, 0xbd0aec5f
rol eax, 0xb5
popf
jmp 0x14011621d
mov rdx, qword [rbp - 0x28]
test rdx, rdx
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x38], r12
je 0x14011720d
push rax
pushf
mov eax, 0x2d0c07aa
pushf
not eax
add eax, 0xcc8ecac1
xor eax, 0xdb4f568b
rol eax, 0xab
popf
pushf
not eax
add eax, 0xf869673c
xor eax, 0xfb28cbae
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xaae67858
xor eax, 0xfc0a5336
rol eax, 0x60
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xe8f1a027
pushf
not eax
add eax, 0xc26d1d97
xor eax, 0xf5f071cd
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xfc5bf7fc
xor eax, 0xac8bb998
rol eax, 0x51
popf
pushf
not eax
add eax, 0xb3570688
xor eax, 0x9b7286ef
rol eax, 0xf8
popf
jmp 0x14011621d
test rcx, rcx
je 0x14011728b
push rax
pushf
mov eax, 0xba629740
pushf
not eax
add eax, 0xe9773d0b
xor eax, 0x81550146
rol eax, 0x63
popf
pushf
not eax
add eax, 0xc22affc0
xor eax, 0xf01ddb59
rol eax, 0xe3
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0xabed4061
pushf
not eax
add eax, 0xbbb27ad1
xor eax, 0xa1e2a861
rol eax, 0x93
popf
pushf
not eax
add eax, 0xf2d1febc
xor eax, 0xcb0788bb
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xfe9c6b83
xor eax, 0xa3a22c00
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xb52c89a9
xor eax, 0x945e6aca
rol eax, 0x13
popf
jmp 0x14011621d
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rbp - 0x30]
push rax
pushf
mov eax, 0x3daeaaaf
pushf
not eax
add eax, 0xca4d768e
xor eax, 0xfc0d15bc
rol eax, 0x70
popf
pushf
not eax
add eax, 0x81c360ad
xor eax, 0xa3608819
rol eax, 0xb6
popf
jmp 0x14011621d
mov qword [rbp - 0x28], r15
push rax
pushf
mov eax, 0xcad3893f
pushf
not eax
add eax, 0x8aff45d2
xor eax, 0xda4731de
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xaec7e503
xor eax, 0xfc5d217a
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xd9768ca9
xor eax, 0xd39992b9
rol eax, 0xce
popf
jmp 0x14011621d
test rcx, rcx
je 0x1401173a4
push rax
pushf
mov eax, 0xee26ea15
pushf
not eax
add eax, 0xb40bfd07
xor eax, 0xbc67654a
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xc1318989
xor eax, 0xdb272a9b
rol eax, 0xf6
popf
jmp 0x14011621d
push rax
pushf
mov eax, 0x2fbab292
pushf
not eax
add eax, 0x9a43b8a6
xor eax, 0xcdd3ffd4
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xe95189ae
xor eax, 0xfdf252a9
rol eax, 0x5c
popf
jmp 0x14011621d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x30], r15
push rax
pushf
mov eax, 0x97bd6a20
pushf
not eax
add eax, 0x8c9ae05a
xor eax, 0x87955016
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xc6573be0
xor eax, 0xad6dae10
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xe7b2661d
xor eax, 0x84c73123
rol eax, 0x60
popf
pushf
not eax
add eax, 0x9b0643a0
xor eax, 0x91a5e1d9
rol eax, 0xfb
popf
jmp 0x14011621d
mov edx, 0xf08d4736
pushf
not edx
add edx, 0xda0c8c80
xor edx, 0x854ec2fb
rol edx, 0x6a
popf
pushf
not edx
add edx, 0x8364a21f
xor edx, 0xe99e7a67
rol edx, 0x59
popf
pushf
not edx
add edx, 0xed9fa1ee
xor edx, 0xfae072a2
rol edx, 0x55
popf
pushf
not edx
add edx, 0x949adda9
xor edx, 0x8336daf5
rol edx, 0xa7
popf
mov rcx, qword [rbp - 0x20]
call fcn.1400bfce0
mov rax, rdi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400dadee
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0xbdac12ad
pushf
not ecx
add ecx, 0xa1f89b09
xor ecx, 0xf039bb5d
rol ecx, 0xe1
popf
pushf
not ecx
add ecx, 0xb026bd7a
xor ecx, 0x86fc428d
rol ecx, 0x1a
popf
call fcn.1400e0659
int3
mov ecx, 0xaf79774d
pushf
not ecx
add ecx, 0x81d074ac
xor ecx, 0xca50780f
rol ecx, 0x35
popf
pushf
not ecx
add ecx, 0xca4fba1e
xor ecx, 0xdad1dd70
rol ecx, 0x2e
popf
pushf
not ecx
add ecx, 0xbc3d23bb
xor ecx, 0x9e8c5980
rol ecx, 0xf9
popf
pushf
not ecx
add ecx, 0xeb962bf8
xor ecx, 0xfd1ae0fd
rol ecx, 0xc8
popf
call fcn.1400e0659
int3