Function at 0x1400c075f
Capabilities:
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x1d81dfa3
pushf
not eax
add eax, 0xe6dace66
xor eax, 0xf99a015b
rol eax, 0x74
popf
pushf
not eax
add eax, 0x9b8cca09
xor eax, 0xefc47c72
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf1c82ca9
xor eax, 0xf5852594
rol eax, 0x46
popf
pushf
not eax
add eax, 0x96a9c76c
xor eax, 0x8d9fb031
rol eax, 0x87
popf
cmp eax, 0x29
jne 0x1400c07c2
popf
pop rax
jmp 0x1400c208d
cmp eax, 0
jne 0x1400c07d1
popf
pop rax
jmp 0x1400c0a38
cmp eax, 3
jne 0x1400c07e0
popf
pop rax
jmp 0x1400c0c7d
cmp eax, 1
jne 0x1400c07ef
popf
pop rax
jmp 0x1400c0b38
cmp eax, 0xd
jne 0x1400c07fe
popf
pop rax
jmp 0x1400c1363
cmp eax, 0x1a
jne 0x1400c080d
popf
pop rax
jmp 0x1400c18f9
cmp eax, 0xe
jne 0x1400c081c
popf
pop rax
jmp 0x1400c13ae
cmp eax, 0xb
jne 0x1400c082b
popf
pop rax
jmp 0x1400c11cd
cmp eax, 0x19
jne 0x1400c083a
popf
pop rax
jmp 0x1400c18a9
cmp eax, 8
jne 0x1400c0849
popf
pop rax
jmp 0x1400c101b
cmp eax, 0x2a
jne 0x1400c0858
popf
pop rax
jmp 0x1400c2108
cmp eax, 0x17
jne 0x1400c0867
popf
pop rax
jmp 0x1400c17cc
cmp eax, 0x1c
jne 0x1400c0876
popf
pop rax
jmp 0x1400c19d5
cmp eax, 0x12
jne 0x1400c0885
popf
pop rax
jmp 0x1400c152b
cmp eax, 0x18
jne 0x1400c0894
popf
pop rax
jmp 0x1400c181c
cmp eax, 0x11
jne 0x1400c08a3
popf
pop rax
jmp 0x1400c14e6
cmp eax, 0x1b
jne 0x1400c08b2
popf
pop rax
jmp 0x1400c1998
cmp eax, 0x21
jne 0x1400c08c1
popf
pop rax
jmp 0x1400c1bee
cmp eax, 0x23
jne 0x1400c08d0
popf
pop rax
jmp 0x1400c1ccb
cmp eax, 0x25
jne 0x1400c08df
popf
pop rax
jmp 0x1400c1e0e
cmp eax, 0xf
jne 0x1400c08ee
popf
pop rax
jmp 0x1400c1413
cmp eax, 0x13
jne 0x1400c08fd
popf
pop rax
jmp 0x1400c15eb
cmp eax, 0x15
jne 0x1400c090c
popf
pop rax
jmp 0x1400c16a9
cmp eax, 0x24
jne 0x1400c091b
popf
pop rax
jmp 0x1400c1d2f
cmp eax, 0x1e
jne 0x1400c092a
popf
pop rax
jmp 0x1400c1a58
cmp eax, 0xc
jne 0x1400c0939
popf
pop rax
jmp 0x1400c1276
cmp eax, 0x26
jne 0x1400c0948
popf
pop rax
jmp 0x1400c1ec6
cmp eax, 0x27
jne 0x1400c0957
popf
pop rax
jmp 0x1400c1f43
cmp eax, 0x1f
jne 0x1400c0966
popf
pop rax
jmp 0x1400c1af8
cmp eax, 0x10
jne 0x1400c0975
popf
pop rax
jmp 0x1400c1491
cmp eax, 6
jne 0x1400c0984
popf
pop rax
jmp 0x1400c0f1e
cmp eax, 9
jne 0x1400c0993
popf
pop rax
jmp 0x1400c107d
cmp eax, 4
jne 0x1400c09a2
popf
pop rax
jmp 0x1400c0d29
cmp eax, 0x16
jne 0x1400c09b1
popf
pop rax
jmp 0x1400c173a
cmp eax, 0x28
jne 0x1400c09c0
popf
pop rax
jmp 0x1400c1fe8
cmp eax, 0xa
jne 0x1400c09cf
popf
pop rax
jmp 0x1400c1112
cmp eax, 0x22
jne 0x1400c09de
popf
pop rax
jmp 0x1400c1c4c
cmp eax, 0x14
jne 0x1400c09ed
popf
pop rax
jmp 0x1400c164b
cmp eax, 7
jne 0x1400c09fc
popf
pop rax
jmp 0x1400c0fc9
cmp eax, 5
jne 0x1400c0a0b
popf
pop rax
jmp 0x1400c0e3b
cmp eax, 2
jne 0x1400c0a1a
popf
pop rax
jmp 0x1400c0bf7
cmp eax, 0x20
jne 0x1400c0a29
popf
pop rax
jmp 0x1400c1b9d
cmp eax, 0x1d
jne 0x1400c0a38
popf
pop rax
jmp 0x1400c1a4d
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov r15, rdx
xor r12d, r12d
lea r14, [0x1ac3673c2]
pushf
sub r14, 0x6c334fea
popf
mov qword [rsp + 0x20], r14
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x38], r12
lea r13, [0x184bea830]
pushf
sub r13, 0x44bb7b08
popf
mov qword [rsp + 0x50], r13
mov byte [rbp - 0x64], r12b
mov dword [rbp - 0x60], 7
call fcn.140118f64
mov rcx, rax
test rax, rax
je 0x1400c0b05
push rax
pushf
mov eax, 0x17287e1b
pushf
not eax
add eax, 0xe9db3c2a
xor eax, 0xfe687597
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xba068eae
xor eax, 0xebe3eb0f
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xd9bc03b8
xor eax, 0xea3f9dfd
rol eax, 0xc4
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xb1bf8dac
pushf
not eax
add eax, 0xf57710ca
xor eax, 0x922c0c15
rol eax, 0x15
popf
pushf
not eax
add eax, 0xdf4b3ee7
xor eax, 0xb0310b75
rol eax, 0xc7
popf
jmp 0x1400c07b3
mov rax, qword [rax]
jmp 0x1400c0b3c
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
call fcn.140118f64
mov rcx, rax
test rax, rax
je 0x1400c0b9e
push rax
pushf
mov eax, 0xaf96330d
pushf
not eax
add eax, 0xa3aad78a
xor eax, 0xbd3cd31d
rol eax, 0x39
popf
pushf
not eax
add eax, 0xe56ce3aa
xor eax, 0xc85ea13c
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd27b2574
xor eax, 0xd1ad05c9
rol eax, 0x85
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x3913474d
pushf
not eax
add eax, 0xcfcaa66a
xor eax, 0xe8d3ff1d
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xb08d6e38
xor eax, 0xdce969f9
rol eax, 0x29
popf
pushf
not eax
add eax, 0xabd95604
xor eax, 0xd6088df3
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xcd8fe988
xor eax, 0xa7cb391f
rol eax, 0x5f
popf
jmp 0x1400c07b3
mov rax, qword [rax]
jmp 0x1400c0bfb
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
call fcn.140118f64
mov rcx, rax
test rax, rax
je 0x1400c0c4a
push rax
pushf
mov eax, 0xe7b28332
pushf
not eax
add eax, 0x945b4169
xor eax, 0xd26ff7b2
rol eax, 0xda
popf
pushf
not eax
add eax, 0xd46ca66a
xor eax, 0xc271894f
rol eax, 0x3e
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x3c0656f
pushf
not eax
add eax, 0xc52bc26d
xor eax, 0xddff6827
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x959e3a49
xor eax, 0xc4b93ca2
rol eax, 0xd6
popf
jmp 0x1400c07b3
mov rax, qword [rax]
jmp 0x1400c0c81
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
call fcn.140118f64
mov rcx, rax
test rax, rax
je 0x1400c0cd0
push rax
pushf
mov eax, 0xb2abdaf1
pushf
not eax
add eax, 0xaa494d48
xor eax, 0xb13a9b4f
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xf24321a7
xor eax, 0xabd177ac
rol eax, 0x8d
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x8c91c0d3
pushf
not eax
add eax, 0x9296efbe
xor eax, 0xcb23064b
rol eax, 0x85
popf
pushf
not eax
add eax, 0x8212dd78
xor eax, 0x9c749686
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xb9e4d48e
xor eax, 0xe4478419
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa17c7677
xor eax, 0x97102dda
rol eax, 0x88
popf
jmp 0x1400c07b3
mov rax, qword [rax]
jmp 0x1400c0d2d
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
jmp 0x1400c0d39
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp + 0x90]
mov edx, 0x820bd032
pushf
not edx
add edx, 0xb5abc3e9
xor edx, 0xc55fa175
rol edx, 0xa5
popf
pushf
not edx
add edx, 0xf0741bf6
xor edx, 0x912c6ca3
rol edx, 0xc3
popf
pushf
not edx
add edx, 0xb6f5aeb0
xor edx, 0xecca300b
rol edx, 0xb2
popf
mov rcx, rax
jmp 0x1400c0d8e
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400c0df5
push rax
pushf
mov eax, 0x25d7d410
pushf
not eax
add eax, 0x9a64fa69
xor eax, 0xfc6a0c36
rol eax, 0x54
popf
pushf
not eax
add eax, 0xe2ab3817
xor eax, 0xaf7047cc
rol eax, 0x43
popf
pushf
not eax
add eax, 0xc7756696
xor eax, 0xc7c1f856
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x8b133240
xor eax, 0xef082a5b
rol eax, 0x21
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x4f88a82f
pushf
not eax
add eax, 0x8e77b7ff
xor eax, 0xefb92bcf
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x8fd4dff0
xor eax, 0x9e40808c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xe088a978
xor eax, 0xf5cf9d1e
rol eax, 0x42
popf
jmp 0x1400c07b3
lea rcx, [rsp + 0x20]
mov rax, qword [rsp + 0x20]
jmp 0x1400c0e46
call qword [rax + htons]
mov rax, qword [rbp + 0x90]
mov qword [rsp + 0x28], rax
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x20]
call fcn.14015f9da
test al, al
je 0x1400c0ec5
push rax
pushf
mov eax, 0x754cbd73
pushf
not eax
add eax, 0xe2988dff
xor eax, 0xb1854d2a
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xeade2ff0
xor eax, 0xa1ddaf2e
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xba3ae46f
xor eax, 0x8f5ee521
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xae79e6ae
xor eax, 0xac60556d
rol eax, 0x63
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xbcc706b3
pushf
not eax
add eax, 0xac91a832
xor eax, 0x8623e45b
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc68121aa
xor eax, 0xb9689095
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xfec889f2
xor eax, 0x96b797a4
rol eax, 0x82
popf
pushf
not eax
add eax, 0xb989d4f1
xor eax, 0xc313b596
rol eax, 0x6d
popf
jmp 0x1400c07b3
lea rcx, [rsp + 0x50]
call fcn.140160b51
mov rsi, rax
lea rax, [rbp - 0x28]
mov qword [rbp - 0x30], rax
lea rbx, [r12 - 1]
test rsi, rsi
jne 0x1400c0f96
push rax
pushf
mov eax, 0x278ae84f
pushf
not eax
add eax, 0xdacb589a
xor eax, 0xdc04c66f
rol eax, 0xde
popf
pushf
not eax
add eax, 0x86010e54
xor eax, 0xadc7bc52
rol eax, 0x50
popf
pushf
not eax
add eax, 0xd374e367
xor eax, 0xce4e1f5f
rol eax, 0xa
popf
pushf
not eax
add eax, 0xcb8b7516
xor eax, 0x8c7aee33
rol eax, 0x87
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x487d55d2
pushf
not eax
add eax, 0xaca96aa0
xor eax, 0xd2d06808
rol eax, 9
popf
pushf
not eax
add eax, 0x8f4814b8
xor eax, 0x964e994a
rol eax, 0x57
popf
jmp 0x1400c07b3
mov edi, r12d
mov qword [rbp - 0x30], r12
jmp 0x1400c152b
mov rax, rbx
nop word [rax + rax]
push rax
pushf
mov eax, 0xee873b71
pushf
not eax
add eax, 0x94fe2a41
xor eax, 0x8f53897a
rol eax, 0xea
popf
pushf
not eax
add eax, 0xd8083ce7
xor eax, 0xd9653ea1
rol eax, 0xe
popf
pushf
not eax
add eax, 0xf8892e1d
xor eax, 0x8a76240d
rol eax, 0x76
popf
pushf
not eax
add eax, 0xa0728377
xor eax, 0x8b5859dc
rol eax, 0xa2
popf
jmp 0x1400c07b3
inc rax
cmp byte [rsi + rax], 0
jne 0x1400c10cc
push rax
pushf
mov eax, 0xc606b787
pushf
not eax
add eax, 0xb2bb2b8b
xor eax, 0xc8e2a863
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xa9303a64
xor eax, 0xdf7fb417
rol eax, 0x97
popf
pushf
not eax
add eax, 0x9aaf662d
xor eax, 0x888b2820
rol eax, 0x3d
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x4195ca8e
pushf
not eax
add eax, 0xf7146b1f
xor eax, 0xb44bc29f
rol eax, 0x14
popf
pushf
not eax
add eax, 0x88656904
xor eax, 0x8703eb88
rol eax, 0x85
popf
pushf
not eax
add eax, 0xd32cadc7
xor eax, 0xe454e90b
rol eax, 0xc3
popf
jmp 0x1400c07b3
add eax, 1
js 0x1400c1174
push rax
pushf
mov eax, 0x56910f2e
pushf
not eax
add eax, 0xf7bafcf7
xor eax, 0xd2ca83c2
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x9fce4f64
xor eax, 0xce466bd7
rol eax, 0x61
popf
pushf
not eax
add eax, 0xd0775a74
xor eax, 0xeccc2b17
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x95eab9bb
xor eax, 0xba4de0a9
rol eax, 0x35
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xad461173
pushf
not eax
add eax, 0x8fb941ac
xor eax, 0xad9080fd
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xea2e6de3
xor eax, 0xf16bb9f4
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xdf0dc3d2
xor eax, 0xc57f8d01
rol eax, 0x95
popf
pushf
not eax
add eax, 0x8f7dbb54
xor eax, 0xe66ac23c
rol eax, 0xe
popf
jmp 0x1400c07b3
movsxd r14, eax
cmp eax, 0x80
jle 0x1400c1230
push rax
pushf
mov eax, 0x6992e1e1
pushf
not eax
add eax, 0xb31ec788
xor eax, 0x95cf464a
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xf1691247
xor eax, 0x9c8b7f37
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xff5f0fc8
xor eax, 0x995a7e6b
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x8cff5d29
xor eax, 0xbe1dfb9c
rol eax, 0x68
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xf6f241dc
pushf
not eax
add eax, 0xbf007faa
xor eax, 0xb193a47c
rol eax, 0x28
popf
pushf
not eax
add eax, 0xa6dc28b0
xor eax, 0x8e910655
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xca22cb7d
xor eax, 0xb3ea3e45
rol eax, 0xd5
popf
jmp 0x1400c07b3
mov edx, 0x44cb6d6
pushf
not edx
add edx, 0xb8908305
xor edx, 0x99410b01
rol edx, 0xf
popf
pushf
not edx
add edx, 0xea71a7af
xor edx, 0xb2ea342b
rol edx, 0x60
popf
pushf
not edx
add edx, 0xc4ee5021
xor edx, 0x90be3b1a
rol edx, 0x34
popf
mov rcx, r14
jmp 0x1400c12be
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdi, rax
mov qword [rbp - 0x30], rax
mov rcx, rax
test rax, rax
je 0x1400c130a
push rax
pushf
mov eax, 0x861acd4f
pushf
not eax
add eax, 0xfa0c220c
xor eax, 0xe7e687c1
rol eax, 0xba
popf
pushf
not eax
add eax, 0xb4faef7f
xor eax, 0xbea79031
rol eax, 0x70
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x23fdeaaf
pushf
not eax
add eax, 0xe77c674c
xor eax, 0xe7fa20d7
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xd27dae8f
xor eax, 0xffa87702
rol eax, 0x95
popf
pushf
not eax
add eax, 0xd1ce1161
xor eax, 0xb274ca9d
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x822a1ebf
xor eax, 0xbccc1aff
rol eax, 0x3e
popf
jmp 0x1400c07b3
jmp 0x1400c1413
lea rdi, [rbp - 0x28]
mov qword [rbp - 0x30], rdi
lea rcx, [rbp - 0x28]
push rax
pushf
mov eax, 0x1f025908
pushf
not eax
add eax, 0xda4a3ae3
xor eax, 0xf4f5ce66
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xd8ed3ba3
xor eax, 0xedc809d9
rol eax, 0x22
popf
pushf
not eax
add eax, 0xd96b2bc7
xor eax, 0xc098f45a
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x81e3985a
xor eax, 0x80361d1c
rol eax, 0x75
popf
jmp 0x1400c07b3
test r14, r14
je 0x1400c144b
push rax
pushf
mov eax, 0x18e4d999
pushf
not eax
add eax, 0xb209fbc5
xor eax, 0xe9e8fc22
rol eax, 0x28
popf
pushf
not eax
add eax, 0xb050c366
xor eax, 0xe272b9b5
rol eax, 0xfe
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x6a58f12e
pushf
not eax
add eax, 0xf5392689
xor eax, 0xd7c70d13
rol eax, 0x23
popf
pushf
not eax
add eax, 0x88480758
xor eax, 0x87b755e7
rol eax, 0x10
popf
pushf
not eax
add eax, 0xdf0b7167
xor eax, 0xcea958ad
rol eax, 0x4d
popf
jmp 0x1400c07b3
mov r8, r14
mov rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov rdi, qword [rbp - 0x30]
push rax
pushf
mov eax, 0x9e838dae
pushf
not eax
add eax, 0x8eeef6ab
xor eax, 0xf0582586
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xe3a20f9e
xor eax, 0xe1cc9320
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xdd557876
xor eax, 0xe51ff36f
rol eax, 0xb3
popf
jmp 0x1400c07b3
lea r14, [0x18a5fa8eb]
pushf
sub r14, 0x4a5c8513
popf
push rax
pushf
mov eax, 0x844e1981
pushf
not eax
add eax, 0x96f7317f
xor eax, 0x85e5cfdb
rol eax, 0x25
popf
pushf
not eax
add eax, 0x8f4c2c85
xor eax, 0xacb127b2
rol eax, 9
popf
jmp 0x1400c07b3
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], r12
mov rcx, rdi
call fcn.14006921f
mov r8, rax
mov rdx, rdi
mov rcx, r15
call fcn.1400ed668
nop
lea rax, [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
cmp rcx, rax
je 0x1400c15b7
push rax
pushf
mov eax, 0xcaa9f747
pushf
not eax
add eax, 0xb7ab88b3
xor eax, 0x9ce1bb9a
rol eax, 0x95
popf
pushf
not eax
add eax, 0xe570b2cb
xor eax, 0xb7facd28
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xd69e2cc0
xor eax, 0xb73e6abf
rol eax, 0x64
popf
pushf
not eax
add eax, 0xfbaff6e7
xor eax, 0x8004f70e
rol eax, 0xf0
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xdfa38ffd
pushf
not eax
add eax, 0x9d1bc550
xor eax, 0x9e84afc5
rol eax, 0x86
popf
pushf
not eax
add eax, 0xf770b9be
xor eax, 0xa84a13f5
rol eax, 6
popf
jmp 0x1400c07b3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0xf351d377
pushf
not eax
add eax, 0xd6fa170a
xor eax, 0x976c5979
rol eax, 0xff
popf
pushf
not eax
add eax, 0x971b8a0f
xor eax, 0x998ee527
rol eax, 0x64
popf
pushf
not eax
add eax, 0x9284bb08
xor eax, 0xad6b4c8e
rol eax, 0xab
popf
pushf
not eax
add eax, 0xe236ce26
xor eax, 0xdf9961ba
rol eax, 0x7f
popf
jmp 0x1400c07b3
jmp 0x1400c173a
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], r12
lea rcx, [0x185723a24]
pushf
sub rcx, 0x456f1b08
popf
call fcn.14006921f
mov r8, rax
lea rdx, [0x1aea8ab58]
pushf
sub rdx, 0x6ea58c3c
popf
mov rcx, r15
call fcn.1400ed668
nop
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0x6e0b1b9c
pushf
not eax
add eax, 0xb7a11ec6
xor eax, 0xdcafa766
rol eax, 0x23
popf
pushf
not eax
add eax, 0xf8a1bb29
xor eax, 0xf0c9515e
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xe64fc4b8
xor eax, 0x8e8c0b21
rol eax, 0xbe
popf
jmp 0x1400c07b3
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, ebx
mov qword [rsp + 0x50], r13
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400c1799
push rax
pushf
mov eax, 0x31da5f04
pushf
not eax
add eax, 0xbc03dfb5
xor eax, 0x8a6db908
rol eax, 0xce
popf
pushf
not eax
add eax, 0xa20a4a8c
xor eax, 0xe86fba66
rol eax, 0x88
popf
pushf
not eax
add eax, 0x84d1211f
xor eax, 0x90cf04a3
rol eax, 0x4f
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x73b7a800
pushf
not eax
add eax, 0x837b304e
xor eax, 0x99368568
rol eax, 0xee
popf
pushf
not eax
add eax, 0xd771edaa
xor eax, 0x982887ec
rol eax, 0x29
popf
jmp 0x1400c07b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400c17d3
call qword [rax + htons]
push rax
pushf
mov eax, 0xdedcb0fc
pushf
not eax
add eax, 0xf97e4c9f
xor eax, 0xec153add
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xa68b65b8
xor eax, 0xf082fc8e
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x97c89969
xor eax, 0xd41be8af
rol eax, 0xc5
popf
jmp 0x1400c07b3
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400c1876
push rax
pushf
mov eax, 0xadc6e1e4
pushf
not eax
add eax, 0xdedcaac6
xor eax, 0xfd4ac6d2
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xf5581d90
xor eax, 0xac9902b6
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xcaeeba22
xor eax, 0xec304239
rol eax, 0xc7
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x24853efe
pushf
not eax
add eax, 0xb9133fe2
xor eax, 0x8588a1ce
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x977cd5e9
xor eax, 0x8e170db3
rol eax, 0x13
popf
jmp 0x1400c07b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400c18b0
call qword [rax + htons]
push rax
pushf
mov eax, 0xe4706295
pushf
not eax
add eax, 0xb9bfca86
xor eax, 0xe352ac52
rol eax, 0x66
popf
pushf
not eax
add eax, 0xfb0f5e06
xor eax, 0xad6e9f06
rol eax, 0x60
popf
pushf
not eax
add eax, 0xd192da2e
xor eax, 0xf29e4faf
rol eax, 0xd4
popf
jmp 0x1400c07b3
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400c1965
push rax
pushf
mov eax, 0x7573822f
pushf
not eax
add eax, 0x929582b4
xor eax, 0xdb28b8cb
rol eax, 1
popf
pushf
not eax
add eax, 0xd73109f4
xor eax, 0x995d886a
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe2259a1a
xor eax, 0xd162a44e
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xbbf62a13
xor eax, 0xd2013395
rol eax, 0xb1
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x5c173d23
pushf
not eax
add eax, 0xefa15f5a
xor eax, 0xd6107fe6
rol eax, 0x62
popf
pushf
not eax
add eax, 0x855e8e13
xor eax, 0x8ef516d1
rol eax, 0xa5
popf
jmp 0x1400c07b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400c199f
call qword [rax + htons]
push rax
pushf
mov eax, 0xa15fadb8
pushf
not eax
add eax, 0xe32f1d4b
xor eax, 0xfffeb706
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x849ecb1d
xor eax, 0xf82b25ed
rol eax, 0x33
popf
jmp 0x1400c07b3
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400c1a1a
push rax
pushf
mov eax, 0x6280886d
pushf
not eax
add eax, 0xa59d4ae2
xor eax, 0xbfd80090
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xf806a75a
xor eax, 0xabd8565d
rol eax, 0xdc
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xe17f5a1b
pushf
not eax
add eax, 0x887a8944
xor eax, 0xfdbb6aba
rol eax, 0xee
popf
pushf
not eax
add eax, 0xd2f4281d
xor eax, 0xc18f9134
rol eax, 0x7e
popf
jmp 0x1400c07b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1400c1a54
call qword [rax + htons]
nop
mov rdx, qword [rsp + 0x30]
test rdx, rdx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x20], r14
je 0x1400c1ab2
push rax
pushf
mov eax, 0xadd85616
pushf
not eax
add eax, 0xce82a975
xor eax, 0xb149d572
rol eax, 0x90
popf
pushf
not eax
add eax, 0x9c13572e
xor eax, 0xd50eb742
rol eax, 0xad
popf
pushf
not eax
add eax, 0xa1a72130
xor eax, 0x9366092c
rol eax, 0xff
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xedaebcdf
pushf
not eax
add eax, 0xfa324415
xor eax, 0xca80e79a
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xe80814f2
xor eax, 0xff6a18b5
rol eax, 2
popf
pushf
not eax
add eax, 0x8d49aa29
xor eax, 0xca70ba05
rol eax, 0x5d
popf
jmp 0x1400c07b3
test rcx, rcx
je 0x1400c1b56
push rax
pushf
mov eax, 0x78c906d0
pushf
not eax
add eax, 0x88458e2e
xor eax, 0x91a4b346
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xdf9e300e
xor eax, 0xd59e958d
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xb59f81a9
xor eax, 0xdd95647d
rol eax, 0x24
popf
pushf
not eax
add eax, 0xa0824859
xor eax, 0xfb39d3fc
rol eax, 0x18
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0x9b442592
pushf
not eax
add eax, 0x8be663fe
xor eax, 0xb7b3c555
rol eax, 0x90
popf
pushf
not eax
add eax, 0xbd520f43
xor eax, 0x9914802f
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xd907d674
xor eax, 0xc9da424f
rol eax, 0x99
popf
jmp 0x1400c07b3
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rsp + 0x28]
push rax
pushf
mov eax, 0xa75086d9
pushf
not eax
add eax, 0x9b72fc5b
xor eax, 0x8c323553
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xd6fae8f6
xor eax, 0xb04dea18
rol eax, 0x65
popf
pushf
not eax
add eax, 0xfcdcc039
xor eax, 0xa4fa7db3
rol eax, 0x14
popf
jmp 0x1400c07b3
mov qword [rsp + 0x30], r12
push rax
pushf
mov eax, 0x9d7ac088
pushf
not eax
add eax, 0x8542a54d
xor eax, 0xc500492a
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xe5e5c246
xor eax, 0xd1904b1a
rol eax, 0x86
popf
pushf
not eax
add eax, 0xcf2299b9
xor eax, 0xb68573e3
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xa33adf28
xor eax, 0xe4e46197
rol eax, 0x5a
popf
jmp 0x1400c07b3
test rcx, rcx
je 0x1400c1c84
push rax
pushf
mov eax, 0x9b4e22ab
pushf
not eax
add eax, 0x9c262add
xor eax, 0xb0e6ab0e
rol eax, 0x58
popf
pushf
not eax
add eax, 0xc26918ca
xor eax, 0x82b85626
rol eax, 0xb6
popf
jmp 0x1400c07b3
push rax
pushf
mov eax, 0xed551164
pushf
not eax
add eax, 0xe6a1e128
xor eax, 0x9a852ef9
rol eax, 0x74
popf
pushf
not eax
add eax, 0xdf79e826
xor eax, 0xdd927e03
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xf8e5bb1b
xor eax, 0xa0a41efd
rol eax, 0xd7
popf
jmp 0x1400c07b3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x28], r12
push rax
pushf
mov eax, 0xf648894d
pushf
not eax
add eax, 0xa1b4e9c8
xor eax, 0xa879d3e3
rol eax, 0xab
popf
pushf
not eax
add eax, 0xd98569ab
xor eax, 0xadbbd9f8
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xa41eaa17
xor eax, 0x86700073
rol eax, 0xae
popf
pushf
not eax
add eax, 0xf02c6155
xor eax, 0xa248ad41
rol eax, 9
popf
jmp 0x1400c07b3
mov edx, 0xa60bcea2
pushf
not edx
add edx, 0xcd97867b
xor edx, 0xd4f85d3d
rol edx, 0x28
popf
pushf
not edx
add edx, 0xc62a8d1e
xor edx, 0x86c822e5
rol edx, 0x67
popf
pushf
not edx
add edx, 0xc96cb67e
xor edx, 0xbc7eea90
rol edx, 0x6e
popf
pushf
not edx
add edx, 0xa9d6977b
xor edx, 0xe0559b05
rol edx, 0xac
popf
mov rcx, qword [rsp + 0x38]
call fcn.1400ae1e9
mov rax, r15
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0xc4890bc2
pushf
not ecx
add ecx, 0x93bf087c
xor ecx, 0xffd3fa02
rol ecx, 0xf8
popf
pushf
not ecx
add ecx, 0xc369303e
xor ecx, 0xa21f10fe
rol ecx, 0xb1
popf
pushf
not ecx
add ecx, 0xb1602ac8
xor ecx, 0xe26a9472
rol ecx, 0xc
popf
pushf
not ecx
add ecx, 0x84724413
xor ecx, 0x9c51aa7a
rol ecx, 0x45
popf
call fcn.140109b9c
int3
mov ecx, 0x3ce20f32
pushf
not ecx
add ecx, 0xd8a92357
xor ecx, 0xe96d2626
rol ecx, 0xda
popf
pushf
not ecx
add ecx, 0xb16a0f6a
xor ecx, 0xc8af9784
rol ecx, 2
popf
pushf
not ecx
add ecx, 0x97305ee9
xor ecx, 0xd9cc9b93
rol ecx, 0x8a
popf
call fcn.140109b9c
nop
push rax
pushf
mov eax, 0x73f8552f
pushf
not eax
add eax, 0xaafec688
xor eax, 0xadb875f9
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xac9d78ca
xor eax, 0xdf3e765e
rol eax, 0xe0
popf
jmp 0x1400c07b3
mov ecx, 0xaa67909f
pushf
not ecx
add ecx, 0x820f7d86
xor ecx, 0xaf87235a
rol ecx, 0x24
popf
pushf
not ecx
add ecx, 0x9440adb2
xor ecx, 0x902c8b62
rol ecx, 0xbd
popf
pushf
not ecx
add ecx, 0x8c7caee8
xor ecx, 0xbf96694e
rol ecx, 0x8a
popf
pushf
not ecx
add ecx, 0x973f645b
xor ecx, 0xdca4038c
rol ecx, 0x39
popf
call fcn.140109b9c
nop
push rax
pushf
mov eax, 0xcb0e135b
pushf
not eax
add eax, 0x90fd56c6
xor eax, 0xe5e53905
rol eax, 0x23
popf
pushf
not eax
add eax, 0x8e612128
xor eax, 0x86dcfa3e
rol eax, 0x50
popf
pushf
not eax
add eax, 0x8c723e1a
xor eax, 0xd4e23048
rol eax, 0x7b
popf
jmp 0x1400c07b3
mov ecx, 0x5269355f
pushf
not ecx
add ecx, 0xa3403e65
xor ecx, 0xf452803b
rol ecx, 0xa0
popf
pushf
not ecx
add ecx, 0x8aa4c05c
xor ecx, 0xe0a15801
rol ecx, 0x45
popf
pushf
not ecx
add ecx, 0xe2a2bf40
xor ecx, 0xcc37fcdb
rol ecx, 0x8b
popf
pushf
not ecx
add ecx, 0xdabfe06f
xor ecx, 0xc104b137
rol ecx, 0x57
popf
call fcn.140109b9c
nop
push rax
pushf
mov eax, 0x60d7b5f3
pushf
not eax
add eax, 0xc611c967
xor eax, 0x8dd10598
rol eax, 0x57
popf
pushf
not eax
add eax, 0x9d952e60
xor eax, 0xe82fd03a
rol eax, 0xc
popf
pushf
not eax
add eax, 0xd85fcb31
xor eax, 0xe1d0f738
rol eax, 0x38
popf
jmp 0x1400c07b3
mov ecx, 0xc1b530ca
pushf
not ecx
add ecx, 0xdbcad8f5
xor ecx, 0xa619de2f
rol ecx, 0x6f
popf
pushf
not ecx
add ecx, 0xbc51a006
xor ecx, 0x8158c1fe
rol ecx, 0x8e
popf
call fcn.140109b9c
nop
push rax
pushf
mov eax, 0xe9c2edfa
pushf
not eax
add eax, 0x8e00069f
xor eax, 0xc553ee2f
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf663bf65
xor eax, 0x89cfec5c
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x826d8c7b
xor eax, 0xcd20d876
rol eax, 0xd
popf
jmp 0x1400c07b3
mov ecx, 0xaadbd0b7
pushf
not ecx
add ecx, 0x925ed15d
xor ecx, 0xe30ff928
rol ecx, 0xce
popf
pushf
not ecx
add ecx, 0xd2a358e5
xor ecx, 0x91935118
rol ecx, 0xf
popf
pushf
not ecx
add ecx, 0x812bd03c
xor ecx, 0xdd0f4d5a
rol ecx, 0xcb
popf
call fcn.140109b9c
int3