Function at 0x1401112d7
Capabilities:
Authenticate hmac

Disassembly:
push rax
pushf
mov eax, 0x290b060e
pushf
not eax
add eax, 0xbb5e06e4
xor eax, 0xb5042a50
rol eax, 0x36
popf
pushf
not eax
add eax, 0x98336f0d
xor eax, 0xc884b2b8
rol eax, 0x32
popf
pushf
not eax
add eax, 0xa80055df
xor eax, 0xf8175c2a
rol eax, 0x93
popf
cmp eax, 0x29
jne 0x140111327
popf
pop rax
jmp 0x140112b60
cmp eax, 0
jne 0x140111336
popf
pop rax
jmp 0x14011158e
cmp eax, 3
jne 0x140111345
popf
pop rax
jmp 0x1401117cb
cmp eax, 1
jne 0x140111354
popf
pop rax
jmp 0x1401116bf
cmp eax, 0xd
jne 0x140111363
popf
pop rax
jmp 0x140111e31
cmp eax, 0x1a
jne 0x140111372
popf
pop rax
jmp 0x1401123dd
cmp eax, 0xe
jne 0x140111381
popf
pop rax
jmp 0x140111e8f
cmp eax, 0xb
jne 0x140111390
popf
pop rax
jmp 0x140111cae
cmp eax, 0x19
jne 0x14011139f
popf
pop rax
jmp 0x14011233d
cmp eax, 8
jne 0x1401113ae
popf
pop rax
jmp 0x140111b4e
cmp eax, 0x1d
jne 0x1401113bd
popf
pop rax
jmp 0x14011252f
cmp eax, 0x17
jne 0x1401113cc
popf
pop rax
jmp 0x14011224d
cmp eax, 0x1c
jne 0x1401113db
popf
pop rax
jmp 0x1401124f1
cmp eax, 0x12
jne 0x1401113ea
popf
pop rax
jmp 0x140112060
cmp eax, 0x18
jne 0x1401113f9
popf
pop rax
jmp 0x1401122ed
cmp eax, 0x11
jne 0x140111408
popf
pop rax
jmp 0x140111fb8
cmp eax, 0x1b
jne 0x140111417
popf
pop rax
jmp 0x140112440
cmp eax, 0x21
jne 0x140111426
popf
pop rax
jmp 0x1401126d8
cmp eax, 0x23
jne 0x140111435
popf
pop rax
jmp 0x1401127ba
cmp eax, 0x25
jne 0x140111444
popf
pop rax
jmp 0x14011290d
cmp eax, 0xf
jne 0x140111453
popf
pop rax
jmp 0x140111ee4
cmp eax, 0x13
jne 0x140111462
popf
pop rax
jmp 0x1401120c0
cmp eax, 0x15
jne 0x140111471
popf
pop rax
jmp 0x14011216c
cmp eax, 0x24
jne 0x140111480
popf
pop rax
jmp 0x140112855
cmp eax, 0x1e
jne 0x14011148f
popf
pop rax
jmp 0x1401125df
cmp eax, 0xc
jne 0x14011149e
popf
pop rax
jmp 0x140111d44
cmp eax, 0x26
jne 0x1401114ad
popf
pop rax
jmp 0x1401129b0
cmp eax, 0x27
jne 0x1401114bc
popf
pop rax
jmp 0x140112a2d
cmp eax, 0x1f
jne 0x1401114cb
popf
pop rax
jmp 0x140112671
cmp eax, 0x10
jne 0x1401114da
popf
pop rax
jmp 0x140111f75
cmp eax, 6
jne 0x1401114e9
popf
pop rax
jmp 0x140111a63
cmp eax, 9
jne 0x1401114f8
popf
pop rax
jmp 0x140111b84
cmp eax, 4
jne 0x140111507
popf
pop rax
jmp 0x14011189d
cmp eax, 0x16
jne 0x140111516
popf
pop rax
jmp 0x140112210
cmp eax, 0x28
jne 0x140111525
popf
pop rax
jmp 0x140112ae5
cmp eax, 0xa
jne 0x140111534
popf
pop rax
jmp 0x140111c06
cmp eax, 0x22
jne 0x140111543
popf
pop rax
jmp 0x140112757
cmp eax, 0x14
jne 0x140111552
popf
pop rax
jmp 0x14011211d
cmp eax, 7
jne 0x140111561
popf
pop rax
jmp 0x140111afb
cmp eax, 5
jne 0x140111570
popf
pop rax
jmp 0x140111988
cmp eax, 2
jne 0x14011157f
popf
pop rax
jmp 0x140111745
cmp eax, 0x20
jne 0x14011158e
popf
pop rax
jmp 0x1401126d4
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, rcx
mov qword [rbp - 0x40], rcx
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp - 0x28], xmm0
lea r13, [0x1aadec90a]
pushf
sub r13, 0x6ad73b7a
popf
mov qword [rbp - 0x38], r13
movdqu xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
lea r12, [0x1bff73a35]
pushf
sub r12, 0x7fefabc5
popf
mov qword [rbp - 0x10], r12
mov byte [rbp + 0x3c], al
mov dword [rbp + 0x40], 7
call fcn.1400ecd10
mov rcx, rax
test rax, rax
je 0x14011167a
push rax
pushf
mov eax, 0x4a089739
pushf
not eax
add eax, 0xde1e5d80
xor eax, 0x963d3838
rol eax, 0x71
popf
pushf
not eax
add eax, 0xca5d8037
xor eax, 0x8d617be5
rol eax, 2
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x746f5052
pushf
not eax
add eax, 0x880fbe9c
xor eax, 0xaadf9ad7
rol eax, 1
popf
pushf
not eax
add eax, 0xa895c6fb
xor eax, 0xfe204d31
rol eax, 0x68
popf
pushf
not eax
add eax, 0x979fbdda
xor eax, 0xe6cf310e
rol eax, 0xeb
popf
jmp 0x140111318
mov rax, qword [rax]
jmp 0x1401116c3
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x48], rax
call fcn.1400ecd10
mov rcx, rax
test rax, rax
je 0x140111712
push rax
pushf
mov eax, 0xefd534d9
pushf
not eax
add eax, 0xfca8cb53
xor eax, 0xe6709571
rol eax, 0x88
popf
pushf
not eax
add eax, 0x86afaa0a
xor eax, 0xe3a8a11f
rol eax, 0xaf
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xfa856398
pushf
not eax
add eax, 0xa7b8bed1
xor eax, 0xb80b848f
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xe328d0c7
xor eax, 0xec29f472
rol eax, 0xa9
popf
jmp 0x140111318
mov rax, qword [rax]
jmp 0x140111749
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x50], rax
call fcn.1400ecd10
mov rcx, rax
test rax, rax
je 0x140111798
push rax
pushf
mov eax, 0x9c588fb6
pushf
not eax
add eax, 0xe3058942
xor eax, 0xea7c965f
rol eax, 0xae
popf
pushf
not eax
add eax, 0xd2fa0754
xor eax, 0x8704dc1f
rol eax, 0xc4
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x277c3cd3
pushf
not eax
add eax, 0xb9a37dd0
xor eax, 0xc3b734c0
rol eax, 0x11
popf
pushf
not eax
add eax, 0x857d641b
xor eax, 0x9704c0fa
rol eax, 0xa
popf
jmp 0x140111318
mov rax, qword [rax]
jmp 0x1401117cf
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x58], rax
call fcn.1400ecd10
mov rcx, rax
test rax, rax
je 0x140111844
push rax
pushf
mov eax, 0x638c4712
pushf
not eax
add eax, 0xdcb93692
xor eax, 0xa30f8dcc
rol eax, 0x74
popf
pushf
not eax
add eax, 0xb6ccaa3b
xor eax, 0xa3984bbf
rol eax, 2
popf
pushf
not eax
add eax, 0xc2195ef6
xor eax, 0xcde76aa2
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xe119809f
xor eax, 0xe38e1949
rol eax, 0x63
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xd7b4eaa8
pushf
not eax
add eax, 0xdf70f11f
xor eax, 0xb6608090
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x9632879d
xor eax, 0xb997ae7b
rol eax, 0xab
popf
pushf
not eax
add eax, 0xe3c50a74
xor eax, 0xb3a43f53
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xff208811
xor eax, 0x83580b18
rol eax, 0xcf
popf
jmp 0x140111318
mov rax, qword [rax]
jmp 0x1401118a1
call qword [rax + Ordinal_26]
add rax, 0x18
mov qword [rbp + 0x60], rax
jmp 0x1401118ad
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rbp - 0x40]
mov edx, 0x6882a9ea
pushf
not edx
add edx, 0xec813c16
xor edx, 0xdfaa9734
rol edx, 0x44
popf
pushf
not edx
add edx, 0xcdca343a
xor edx, 0x9c769909
rol edx, 0x2d
popf
pushf
not edx
add edx, 0xd39aa4b5
xor edx, 0x8b1ce1b3
rol edx, 0x6e
popf
pushf
not edx
add edx, 0xd13c4610
xor edx, 0xcc522a46
rol edx, 0x22
popf
mov rcx, rax
jmp 0x140111914
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140111955
push rax
pushf
mov eax, 0x9f0ddf79
pushf
not eax
add eax, 0x9db5a2b4
xor eax, 0xb569b0d2
rol eax, 0x80
popf
pushf
not eax
add eax, 0xc0df26f2
xor eax, 0xd510b309
rol eax, 0x63
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xee13fcee
pushf
not eax
add eax, 0xf1fec1fc
xor eax, 0xb56f1126
rol eax, 0x69
popf
pushf
not eax
add eax, 0xaf2de44d
xor eax, 0xa3258cdf
rol eax, 0xcd
popf
jmp 0x140111318
lea rcx, [rbp - 0x38]
mov rax, qword [rbp - 0x38]
jmp 0x140111991
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.140104b16
test al, al
je 0x140111a0a
push rax
pushf
mov eax, 0xbf4c951a
pushf
not eax
add eax, 0x8140a3a0
xor eax, 0xbbf446c4
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xbb5f1d08
xor eax, 0xcb1d6704
rol eax, 0xba
popf
pushf
not eax
add eax, 0x96688fb5
xor eax, 0xa5fca1c8
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xff4f0cd5
xor eax, 0xbfd8d673
rol eax, 0x6a
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x92d2816b
pushf
not eax
add eax, 0xe6d3b3ae
xor eax, 0xd50ca6f4
rol eax, 0x88
popf
pushf
not eax
add eax, 0xcda8f393
xor eax, 0xa01fc260
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x950eeab8
xor eax, 0x8e83f781
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xcb19e643
xor eax, 0xe10a59fc
rol eax, 0xdf
popf
jmp 0x140111318
lea rcx, [rbp - 0x10]
call fcn.140107c20
mov rdi, rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rbx, [r15 - 1]
test rdi, rdi
jne 0x140111ac8
push rax
pushf
mov eax, 0x67452e3d
pushf
not eax
add eax, 0xa581897b
xor eax, 0xe417c440
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xadda1b24
xor eax, 0xde3dbb8a
rol eax, 0x27
popf
pushf
not eax
add eax, 0x959ac2f7
xor eax, 0x902eefef
rol eax, 0x11
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xa458d810
pushf
not eax
add eax, 0x9b4eba34
xor eax, 0x824e3520
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc1c202bd
xor eax, 0x92cc41ff
rol eax, 0x3e
popf
jmp 0x140111318
mov eax, r15d
mov qword [rsp + 0x30], rax
jmp 0x140111fb8
mov rax, rbx
push rax
pushf
mov eax, 0xf6da68b2
pushf
not eax
add eax, 0x9ab00231
xor eax, 0xf7031782
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xb3078350
xor eax, 0xc09c3bd1
rol eax, 0xe5
popf
jmp 0x140111318
inc rax
cmp byte [rdi + rax], 0
jne 0x140111bd3
push rax
pushf
mov eax, 0x73302bed
pushf
not eax
add eax, 0xdc680a32
xor eax, 0xa8179162
rol eax, 0x71
popf
pushf
not eax
add eax, 0xf0193856
xor eax, 0xfbdbab3a
rol eax, 0x82
popf
pushf
not eax
add eax, 0x96b17719
xor eax, 0xee71025f
rol eax, 0x21
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x8d6a56c1
pushf
not eax
add eax, 0xad47bd89
xor eax, 0xc8630fbe
rol eax, 0xba
popf
pushf
not eax
add eax, 0xb31c224e
xor eax, 0xcbbf68a8
rol eax, 0x12
popf
jmp 0x140111318
add eax, 1
js 0x140111c68
push rax
pushf
mov eax, 0xe61981df
pushf
not eax
add eax, 0xcf13a05e
xor eax, 0xc502aa18
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xc85d4bac
xor eax, 0xca1a8106
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xff50ea61
xor eax, 0xf87f1b88
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xbc12ed8f
xor eax, 0xae053336
rol eax, 0x4e
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xc1b250f6
pushf
not eax
add eax, 0xf41dc14c
xor eax, 0xa8ca6dbf
rol eax, 0x83
popf
pushf
not eax
add eax, 0xd0d616a2
xor eax, 0x8ef26483
rol eax, 0x13
popf
pushf
not eax
add eax, 0xec3c5f4f
xor eax, 0xcce8b554
rol eax, 0x4d
popf
jmp 0x140111318
movsxd r14, eax
cmp eax, 0x80
jle 0x140111ceb
push rax
pushf
mov eax, 0x273b8c86
pushf
not eax
add eax, 0xb37cbb8c
xor eax, 0xe01e4605
rol eax, 0x31
popf
pushf
not eax
add eax, 0xc0acd970
xor eax, 0xeeac30b1
rol eax, 0x36
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xcbc5567
pushf
not eax
add eax, 0xb98ec289
xor eax, 0xfabe36b2
rol eax, 0xad
popf
pushf
not eax
add eax, 0x934e9201
xor eax, 0x9d859e4e
rol eax, 0x71
popf
pushf
not eax
add eax, 0x8d0c8282
xor eax, 0xf3bad52d
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xfa7e8ec4
xor eax, 0xdb312dfc
rol eax, 0x77
popf
jmp 0x140111318
mov edx, 0xa4024159
pushf
not edx
add edx, 0xb4b4650f
xor edx, 0xe383217d
rol edx, 0xdd
popf
pushf
not edx
add edx, 0xfa2a9b49
xor edx, 0xa1ddef09
rol edx, 0x6f
popf
pushf
not edx
add edx, 0xd1066551
xor edx, 0xca3d2fa7
rol edx, 0xd5
popf
pushf
not edx
add edx, 0x8ee79f6a
xor edx, 0x926e1ba9
rol edx, 0xb7
popf
mov rcx, r14
jmp 0x140111da1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov qword [rsp + 0x30], rax
mov rcx, rax
test rax, rax
je 0x140111deb
push rax
pushf
mov eax, 0xb20b3c06
pushf
not eax
add eax, 0x8af2510e
xor eax, 0xa9eea230
rol eax, 0x64
popf
pushf
not eax
add eax, 0xdda75391
xor eax, 0xcd3fe019
rol eax, 0xae
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xa75b3a83
pushf
not eax
add eax, 0xf345c44d
xor eax, 0x8f05647a
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xa3f68c2f
xor eax, 0x84ed6bbe
rol eax, 0x53
popf
pushf
not eax
add eax, 0xf41579c1
xor eax, 0xfcbb4461
rol eax, 0x5a
popf
jmp 0x140111318
jmp 0x140111ee4
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x38]
push rax
pushf
mov eax, 0x1368134c
pushf
not eax
add eax, 0xb3f77cf4
xor eax, 0x88860d1e
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x83b12dee
xor eax, 0xb38b18d0
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xed2f1db5
xor eax, 0xc762a9aa
rol eax, 0xb9
popf
jmp 0x140111318
test r14, r14
je 0x140111f1c
push rax
pushf
mov eax, 0xf7385f0
pushf
not eax
add eax, 0xbb2fc1fd
xor eax, 0xd39f3bf1
rol eax, 0x58
popf
pushf
not eax
add eax, 0xa3c23f62
xor eax, 0xa64a1d5a
rol eax, 0x3c
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x5425c60d
pushf
not eax
add eax, 0xd6f82f69
xor eax, 0xf3184adb
rol eax, 0x94
popf
pushf
not eax
add eax, 0xc8028119
xor eax, 0x8ee64fd8
rol eax, 0x52
popf
pushf
not eax
add eax, 0xc39ea200
xor eax, 0xdc9173c2
rol eax, 0x97
popf
pushf
not eax
add eax, 0xda50142d
xor eax, 0xb12bd835
rol eax, 0x6a
popf
jmp 0x140111318
mov r8, r14
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x30]
push rax
pushf
mov eax, 0xa9ff03ef
pushf
not eax
add eax, 0xad8ccd40
xor eax, 0xcc2f6b43
rol eax, 0xff
popf
pushf
not eax
add eax, 0xde807ae5
xor eax, 0xf6be29db
rol eax, 0x70
popf
jmp 0x140111318
mov rdx, rax
mov rcx, rsi
call fcn.1400d786b
nop
lea rax, [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
cmp rcx, rax
je 0x140112019
push rax
pushf
mov eax, 0xfc9faae4
pushf
not eax
add eax, 0x9238b24c
xor eax, 0x84eb8bf4
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xb6a871b2
xor eax, 0xc863c31b
rol eax, 0x32
popf
pushf
not eax
add eax, 0x86c14988
xor eax, 0xfaaed904
rol eax, 0xff
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x5580c068
pushf
not eax
add eax, 0x824b4cf8
xor eax, 0x93174fc9
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xd9898be6
xor eax, 0xf7eeb3a4
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xcb9eba2f
xor eax, 0xa48115c9
rol eax, 0xf7
popf
jmp 0x140111318
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
push rax
pushf
mov eax, 0xe0337320
pushf
not eax
add eax, 0xd4ee4081
xor eax, 0xca1b94b5
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xb179d45d
xor eax, 0xeecfa460
rol eax, 0x27
popf
pushf
not eax
add eax, 0xfb481ab6
xor eax, 0x82ccfb34
rol eax, 0x79
popf
pushf
not eax
add eax, 0xda8c0421
xor eax, 0xaf709ee6
rol eax, 0xee
popf
jmp 0x140111318
jmp 0x14011216c
xorps xmm0, xmm0
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0xc41bcef6
pushf
not eax
add eax, 0xdb3adb4e
xor eax, 0xfafd73d8
rol eax, 0x44
popf
pushf
not eax
add eax, 0x94197b98
xor eax, 0x9ff18299
rol eax, 0xc7
popf
jmp 0x140111318
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
mov qword [rbp - 0x10], r12
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401121ca
push rax
pushf
mov eax, 0xe7e51428
pushf
not eax
add eax, 0x96f04730
xor eax, 0xd37a1097
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xe0238098
xor eax, 0xd0714715
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xf7289bf2
xor eax, 0xfcf2f92a
rol eax, 0x86
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xc6a79d6c
pushf
not eax
add eax, 0xc8ca399e
xor eax, 0xa2c78aad
rol eax, 0x55
popf
pushf
not eax
add eax, 0xb683f048
xor eax, 0xe477e653
rol eax, 0x33
popf
pushf
not eax
add eax, 0xfb4cd5b7
xor eax, 0xf39ca0f5
rol eax, 0x45
popf
jmp 0x140111318
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x140112217
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x3c29b358
pushf
not eax
add eax, 0xd713fa9c
xor eax, 0xe65428f5
rol eax, 0x88
popf
pushf
not eax
add eax, 0x9458244e
xor eax, 0xd5ff6dd1
rol eax, 0x10
popf
jmp 0x140111318
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140112294
push rax
pushf
mov eax, 0x3a95478e
pushf
not eax
add eax, 0x875f4560
xor eax, 0xab6ad7c3
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x8b8be351
xor eax, 0xec4eca00
rol eax, 0x48
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x44dcbb1f
pushf
not eax
add eax, 0xe0a6577a
xor eax, 0x820d99eb
rol eax, 0x40
popf
pushf
not eax
add eax, 0xca15b762
xor eax, 0xbfb8d730
rol eax, 0xd
popf
pushf
not eax
add eax, 0xa3bd8859
xor eax, 0xad1d8d00
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xaddc996e
xor eax, 0xedb629fe
rol eax, 0x70
popf
jmp 0x140111318
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401122f4
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0xec9d5546
pushf
not eax
add eax, 0xf3ff0240
xor eax, 0xacf6dbdb
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xcff40335
xor eax, 0xec35df4f
rol eax, 0x25
popf
pushf
not eax
add eax, 0xdd99892d
xor eax, 0xaf8bd637
rol eax, 0xf4
popf
jmp 0x140111318
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1401123aa
push rax
pushf
mov eax, 0x4ec9688e
pushf
not eax
add eax, 0xbf53e961
xor eax, 0xf75d92ed
rol eax, 9
popf
pushf
not eax
add eax, 0xff18ae53
xor eax, 0xa799c4e4
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x87010ba9
xor eax, 0xf059347d
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x85a9463c
xor eax, 0xddb7b9c8
rol eax, 0xa
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x97228115
pushf
not eax
add eax, 0xd0664b2b
xor eax, 0x8f8594a0
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xc65dd4de
xor eax, 0xfa871385
rol eax, 0x99
popf
jmp 0x140111318
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401123e4
call qword [rax + reloc.WS2_32.dll_htonl]
push rax
pushf
mov eax, 0x509d14c
pushf
not eax
add eax, 0xfd0a05a1
xor eax, 0xbed8344b
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x90801eed
xor eax, 0x94f21c53
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xdd4bffc6
xor eax, 0xd81488b8
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xb9d981cd
xor eax, 0xc3e8233e
rol eax, 0x41
popf
jmp 0x140111318
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1401124ab
push rax
pushf
mov eax, 0x2776c15b
pushf
not eax
add eax, 0xd2a0d1e4
xor eax, 0x84f5692c
rol eax, 0xca
popf
pushf
not eax
add eax, 0x8bc69c53
xor eax, 0xc1892111
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc90edd26
xor eax, 0xf442a2c0
rol eax, 0xda
popf
pushf
not eax
add eax, 0xbd6c4b10
xor eax, 0xc9a447cb
rol eax, 0xa
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x436d6920
pushf
not eax
add eax, 0xae647e9f
xor eax, 0xfd06da49
rol eax, 0x46
popf
pushf
not eax
add eax, 0xe7c234c1
xor eax, 0xe6f9d9b2
rol eax, 5
popf
pushf
not eax
add eax, 0xaf783a7f
xor eax, 0xffc04d5d
rol eax, 0xca
popf
jmp 0x140111318
mov rcx, qword [rdx]
mov rax, qword [rcx]
jmp 0x1401124f8
call qword [rax + reloc.WS2_32.dll_htonl]
nop
push rax
pushf
mov eax, 0x13cd749b
pushf
not eax
add eax, 0x99f67d62
xor eax, 0xa42553fc
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xd68b4d7b
xor eax, 0x94ff0e36
rol eax, 0xf5
popf
jmp 0x140111318
mov rdx, qword [rbp - 0x28]
test rdx, rdx
mov rcx, qword [rbp - 0x30]
mov qword [rbp - 0x38], r13
je 0x140112586
push rax
pushf
mov eax, 0x523f7fee
pushf
not eax
add eax, 0xd2437a9f
xor eax, 0xd5a4b81c
rol eax, 0x12
popf
pushf
not eax
add eax, 0xd5525a59
xor eax, 0x9cc14afe
rol eax, 0x47
popf
pushf
not eax
add eax, 0xbfbf5c5a
xor eax, 0x8e7ab9ae
rol eax, 0x2c
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xb1257a9f
pushf
not eax
add eax, 0x839d8f9a
xor eax, 0xe2e9ff1c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xb9bd52d5
xor eax, 0xf836c1c9
rol eax, 0xef
popf
pushf
not eax
add eax, 0x83b2dc1c
xor eax, 0xcc71cfed
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xfbeb41fc
xor eax, 0xa556063a
rol eax, 0x6c
popf
jmp 0x140111318
test rcx, rcx
je 0x140112617
push rax
pushf
mov eax, 0xfdf7d99c
pushf
not eax
add eax, 0xf423e677
xor eax, 0xcf40b4cb
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x98f3ba47
xor eax, 0xe6137681
rol eax, 0x5b
popf
jmp 0x140111318
push rax
pushf
mov eax, 0xbf35495f
pushf
not eax
add eax, 0x8747af5b
xor eax, 0xb9b34d09
rol eax, 0x53
popf
pushf
not eax
add eax, 0xb3d162da
xor eax, 0x928d747e
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xf22aa33b
xor eax, 0xef8923c1
rol eax, 0x45
popf
pushf
not eax
add eax, 0xd7db5c6e
xor eax, 0x855a4b9d
rol eax, 0xdf
popf
jmp 0x140111318
call qword [sym.imp.USERENV.dll_UnloadUserProfile]
mov rcx, qword [rbp - 0x30]
push rax
pushf
mov eax, 0xe77c0c3b
pushf
not eax
add eax, 0xd02d022b
xor eax, 0xde38004e
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xee0621d0
xor eax, 0xb6eb5702
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xdf7efd8a
xor eax, 0x86de1791
rol eax, 0xd
popf
pushf
not eax
add eax, 0xb00fa830
xor eax, 0xa78b280d
rol eax, 0xc
popf
jmp 0x140111318
mov qword [rbp - 0x28], r15
test rcx, rcx
je 0x140112723
push rax
pushf
mov eax, 0xb5f5aef3
pushf
not eax
add eax, 0xd5d125d1
xor eax, 0xe56f9783
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xeb5715f8
xor eax, 0xe33595d1
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xaaf86697
xor eax, 0xde8a9d12
rol eax, 0xf2
popf
jmp 0x140111318
push rax
pushf
mov eax, 0x8fd813b5
pushf
not eax
add eax, 0x95cbb84e
xor eax, 0xd2863d9e
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x929c68a1
xor eax, 0xc278fce6
rol eax, 0x4b
popf
jmp 0x140111318
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp - 0x30], r15
push rax
pushf
mov eax, 0x952485a0
pushf
not eax
add eax, 0xb5e8a646
xor eax, 0xb51645aa
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xe7e17b45
xor eax, 0xa2ef1d64
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xed870fd2
xor eax, 0x806092a3
rol eax, 0x87
popf
pushf
not eax
add eax, 0xd1ed366e
xor eax, 0xc85bc59d
rol eax, 0xc8
popf
jmp 0x140111318
mov edx, 0xc56b43e6
pushf
not edx
add edx, 0xe9ce589b
xor edx, 0xe5fa642a
rol edx, 0x12
popf
pushf
not edx
add edx, 0x85a1cd8e
xor edx, 0xc326c708
rol edx, 0xbe
popf
mov rcx, qword [rbp - 0x20]
call fcn.1400c3067
mov rax, rsi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400e02a0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0xcbefa9ac
pushf
not ecx
add ecx, 0xc89c3a6c
xor ecx, 0x967526cf
rol ecx, 0xe2
popf
pushf
not ecx
add ecx, 0xb112b2a6
xor ecx, 0xed315ea8
rol ecx, 0x21
popf
pushf
not ecx
add ecx, 0xbdedb834
xor ecx, 0x80553df7
rol ecx, 0x6f
popf
pushf
not ecx
add ecx, 0xb5282dc5
xor ecx, 0xe8af7752
rol ecx, 0x4e
popf
call fcn.1400e863f
int3
mov ecx, 0xfdf44b5c
pushf
not ecx
add ecx, 0xe86d3f37
xor ecx, 0xd9f8bd3b
rol ecx, 8
popf
pushf
not ecx
add ecx, 0xed17946d
xor ecx, 0xb30ba94a
rol ecx, 0xc3
popf
pushf
not ecx
add ecx, 0xb2d813f8
xor ecx, 0xb57f43f9
rol ecx, 0x3a
popf
call fcn.1400e863f
nop
push rax
pushf
mov eax, 0xccccd821
pushf
not eax
add eax, 0xf99c1880
xor eax, 0xb184ca21
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xb8a939f1
xor eax, 0xcd40031a
rol eax, 9
popf
pushf
not eax
add eax, 0xd9160faa
xor eax, 0xeafb48b6
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xf8b99ef6
xor eax, 0xb28f9de1
rol eax, 0x38
popf
jmp 0x140111318
mov ecx, 0x9fb0d875
pushf
not ecx
add ecx, 0xe90875b4
xor ecx, 0xec7f63f9
rol ecx, 0x34
popf
pushf
not ecx
add ecx, 0x9097b8c9
xor ecx, 0xcf3f88c8
rol ecx, 0x3d
popf
pushf
not ecx
add ecx, 0xb999c943
xor ecx, 0x8c756ee4
rol ecx, 0x98
popf
call fcn.1400e863f
nop
push rax
pushf
mov eax, 0x46e37e6c
pushf
not eax
add eax, 0xcef6b8fa
xor eax, 0xdcde7773
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xbd7d9adc
xor eax, 0xfb23f11c
rol eax, 0xca
popf
jmp 0x140111318
mov ecx, 0xdf1155ff
pushf
not ecx
add ecx, 0xf90682d3
xor ecx, 0xef03dd35
rol ecx, 0xde
popf
pushf
not ecx
add ecx, 0xae89ad36
xor ecx, 0xf12ffd9d
rol ecx, 0x23
popf
pushf
not ecx
add ecx, 0xec0276c2
xor ecx, 0xcb74d317
rol ecx, 0xb1
popf
pushf
not ecx
add ecx, 0x872ab46b
xor ecx, 0xc8ce933d
rol ecx, 0x16
popf
call fcn.1400e863f
nop
push rax
pushf
mov eax, 0x2da1ced7
pushf
not eax
add eax, 0xeaf8b173
xor eax, 0xd6bb0930
rol eax, 0x46
popf
pushf
not eax
add eax, 0xffcfe06b
xor eax, 0xf71aee72
rol eax, 0x61
popf
pushf
not eax
add eax, 0xc4b34f6f
xor eax, 0x91c586d2
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x83b6c367
xor eax, 0xf7dc44c6
rol eax, 0x81
popf
jmp 0x140111318
mov ecx, 0xb161986f
pushf
not ecx
add ecx, 0x9e590180
xor ecx, 0xe7fb1ff6
rol ecx, 0xd4
popf
pushf
not ecx
add ecx, 0xf198c88d
xor ecx, 0xc33d97c5
rol ecx, 0x30
popf
call fcn.1400e863f
nop
push rax
pushf
mov eax, 0x9ac8cb8a
pushf
not eax
add eax, 0xf6d20ba7
xor eax, 0x89b0870a
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x966153bd
xor eax, 0xfb6379f0
rol eax, 0x78
popf
pushf
not eax
add eax, 0xc90b7745
xor eax, 0xae2b7e5d
rol eax, 0xa6
popf
jmp 0x140111318
mov ecx, 0xbb8e598e
pushf
not ecx
add ecx, 0xaf523df9
xor ecx, 0xfa4a0264
rol ecx, 0x56
popf
pushf
not ecx
add ecx, 0xf5415256
xor ecx, 0x9f3f65d5
rol ecx, 0xd8
popf
pushf
not ecx
add ecx, 0xf10a06b2
xor ecx, 0xbc9dd546
rol ecx, 0xe3
popf
pushf
not ecx
add ecx, 0x87fccb9e
xor ecx, 0x87ca4a93
rol ecx, 0x45
popf
call fcn.1400e863f
int3