Function at 0x1405d3365
Capabilities:
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x536056b4
pushf
not eax
add eax, 0xe50f76b9
xor eax, 0xb5235cf9
rol eax, 4
popf
pushf
not eax
add eax, 0xe9d06930
xor eax, 0x9ab780c6
rol eax, 0x23
popf
pushf
not eax
add eax, 0xb1449059
xor eax, 0xea0c1910
rol eax, 2
popf
pushf
not eax
add eax, 0x97e1712c
xor eax, 0xb2c2076f
rol eax, 0x27
popf
cmp eax, 0x29
jne 0x1405d33c8
popf
pop rax
jmp 0x1405d4c8b
cmp eax, 0
jne 0x1405d33d7
popf
pop rax
jmp 0x1405d366b
cmp eax, 3
jne 0x1405d33e6
popf
pop rax
jmp 0x1405d381b
cmp eax, 1
jne 0x1405d33f5
popf
pop rax
jmp 0x1405d3748
cmp eax, 0xd
jne 0x1405d3404
popf
pop rax
jmp 0x1405d3dbc
cmp eax, 0x1a
jne 0x1405d3413
popf
pop rax
jmp 0x1405d456c
cmp eax, 0xe
jne 0x1405d3422
popf
pop rax
jmp 0x1405d3e73
cmp eax, 0xb
jne 0x1405d3431
popf
pop rax
jmp 0x1405d3d4c
cmp eax, 0x19
jne 0x1405d3440
popf
pop rax
jmp 0x1405d44ea
cmp eax, 8
jne 0x1405d344f
popf
pop rax
jmp 0x1405d3b71
cmp eax, 0x2a
jne 0x1405d345e
popf
pop rax
jmp 0x1405d4ce9
cmp eax, 0x17
jne 0x1405d346d
popf
pop rax
jmp 0x1405d43c7
cmp eax, 0x1c
jne 0x1405d347c
popf
pop rax
jmp 0x1405d4690
cmp eax, 0x12
jne 0x1405d348b
popf
pop rax
jmp 0x1405d40c8
cmp eax, 0x18
jne 0x1405d349a
popf
pop rax
jmp 0x1405d4459
cmp eax, 0x2b
jne 0x1405d34a9
popf
pop rax
jmp 0x1405d4d4b
cmp eax, 0x1b
jne 0x1405d34b8
popf
pop rax
jmp 0x1405d45fd
cmp eax, 0x2d
jne 0x1405d34c7
popf
pop rax
jmp 0x1405d4e24
cmp eax, 0x23
jne 0x1405d34d6
popf
pop rax
jmp 0x1405d4a12
cmp eax, 0x25
jne 0x1405d34e5
popf
pop rax
jmp 0x1405d4a9b
cmp eax, 0xf
jne 0x1405d34f4
popf
pop rax
jmp 0x1405d3f65
cmp eax, 0x13
jne 0x1405d3503
popf
pop rax
jmp 0x1405d4160
cmp eax, 0x15
jne 0x1405d3512
popf
pop rax
jmp 0x1405d42b9
cmp eax, 0x24
jne 0x1405d3521
popf
pop rax
jmp 0x1405d4a4a
cmp eax, 0x1e
jne 0x1405d3530
popf
pop rax
jmp 0x1405d47b3
cmp eax, 0xc
jne 0x1405d353f
popf
pop rax
jmp 0x1405d3d85
cmp eax, 0x26
jne 0x1405d354e
popf
pop rax
jmp 0x1405d4b53
cmp eax, 0x27
jne 0x1405d355d
popf
pop rax
jmp 0x1405d4ba7
cmp eax, 0x1f
jne 0x1405d356c
popf
pop rax
jmp 0x1405d4812
cmp eax, 0x10
jne 0x1405d357b
popf
pop rax
jmp 0x1405d400f
cmp eax, 0x2c
jne 0x1405d358a
popf
pop rax
jmp 0x1405d4dd9
cmp eax, 9
jne 0x1405d3599
popf
pop rax
jmp 0x1405d3c26
cmp eax, 4
jne 0x1405d35a8
popf
pop rax
jmp 0x1405d38d8
cmp eax, 0x16
jne 0x1405d35b7
popf
pop rax
jmp 0x1405d434d
cmp eax, 0x28
jne 0x1405d35c6
popf
pop rax
jmp 0x1405d4be7
cmp eax, 0xa
jne 0x1405d35d5
popf
pop rax
jmp 0x1405d3c8a
cmp eax, 0x22
jne 0x1405d35e4
popf
pop rax
jmp 0x1405d494f
cmp eax, 0x14
jne 0x1405d35f3
popf
pop rax
jmp 0x1405d4235
cmp eax, 7
jne 0x1405d3602
popf
pop rax
jmp 0x1405d3b28
cmp eax, 5
jne 0x1405d3611
popf
pop rax
jmp 0x1405d397d
cmp eax, 2
jne 0x1405d3620
popf
pop rax
jmp 0x1405d37e6
cmp eax, 0x20
jne 0x1405d362f
popf
pop rax
jmp 0x1405d486f
cmp eax, 0x1d
jne 0x1405d363e
popf
pop rax
jmp 0x1405d46f4
cmp eax, 0x11
jne 0x1405d364d
popf
pop rax
jmp 0x1405d406d
cmp eax, 6
jne 0x1405d365c
popf
pop rax
jmp 0x1405d3aa6
cmp eax, 0x21
jne 0x1405d366b
popf
pop rax
jmp 0x1405d4917
push rbp
push r14
push r15
sub rsp, 0x60
lea rbp, [rsp + 0x50]
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rsi
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], r13
mov rax, qword [0x14004b080]
xor rax, rbp
mov qword [rbp], rax
movsxd rdi, r9d
mov rsi, r8
mov r15d, edx
mov r13, rcx
test r9d, r9d
jle 0x1405d36ef
push rax
pushf
mov eax, 0x133b064a
pushf
not eax
add eax, 0x8a03af5c
xor eax, 0x8b89dfd3
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xc7e15cb1
xor eax, 0x825e4bb1
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xba3a57bf
xor eax, 0xa92f86f7
rol eax, 0xea
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xa5201048
pushf
not eax
add eax, 0xdca68c1d
xor eax, 0xfd4d0a66
rol eax, 0x61
popf
pushf
not eax
add eax, 0xda7740d9
xor eax, 0x99d57d5c
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xd3ebf63a
xor eax, 0x89e746ae
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xe4cbf5ee
xor eax, 0xa1b66557
rol eax, 0x29
popf
jmp 0x1405d33b9
mov rdx, rdi
mov rcx, r8
call fcn.1406bd356
cmp eax, edi
lea edi, [rax + 1]
jl 0x1405d378d
push rax
pushf
mov eax, 0xe4da43bf
pushf
not eax
add eax, 0xa8fce214
xor eax, 0xa492e5e3
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x9c12d695
xor eax, 0x8c9bca7e
rol eax, 0xf4
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xa12b9c77
pushf
not eax
add eax, 0x9974e5af
xor eax, 0xebd6da01
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfd9621e5
xor eax, 0xe2a3cdd8
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd3144efb
xor eax, 0xea3dcf07
rol eax, 0x92
popf
pushf
not eax
add eax, 0x9bc95b24
xor eax, 0xde2fc987
rol eax, 0x26
popf
jmp 0x1405d33b9
mov edi, eax
push rax
pushf
mov eax, 0x1db5e335
pushf
not eax
add eax, 0x9e7c8715
xor eax, 0xc6e67c52
rol eax, 0x19
popf
pushf
not eax
add eax, 0xf6543388
xor eax, 0xdbc7e9c8
rol eax, 0x15
popf
jmp 0x1405d33b9
neg dword [rbp + 0x68]
mov r9d, edi
mov ecx, dword [rbp + 0x60]
mov r8, rsi
sbb edx, edx
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
and edx, 8
jmp 0x1405d3838
inc edx
jmp 0x1405d383b
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r14, eax
test eax, eax
je 0x1405d387f
push rax
pushf
mov eax, 0x407e4c3a
pushf
not eax
add eax, 0xa967d200
xor eax, 0xdf07f8d6
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xd0ee9fd1
xor eax, 0x8c00b431
rol eax, 0xf6
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xd606efb0
pushf
not eax
add eax, 0xd45b62aa
xor eax, 0x91d5d8cc
rol eax, 0x20
popf
pushf
not eax
add eax, 0xbc9b1c25
xor eax, 0xcd855576
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xa94b21d3
xor eax, 0x8487a5d8
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xf62dfa96
xor eax, 0xfbb9fbbd
rol eax, 7
popf
jmp 0x1405d33b9
mov rdx, r14
add rdx, rdx
lea rcx, [rdx + 0x10]
cmp rdx, rcx
sbb rdx, rdx
and rdx, rcx
je 0x1405d394a
push rax
pushf
mov eax, 0xf05329db
pushf
not eax
add eax, 0xce1ed4cb
xor eax, 0x802b3fb6
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x9188f86f
xor eax, 0xe691fa41
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xf86186fb
xor eax, 0x981a5beb
rol eax, 0x40
popf
pushf
not eax
add eax, 0x9ea104b9
xor eax, 0xedd44c6d
rol eax, 0xe5
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x8f7eefd0
pushf
not eax
add eax, 0xb53a404c
xor eax, 0x8012fa72
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe97af7ee
xor eax, 0x8010056b
rol eax, 0x75
popf
jmp 0x1405d33b9
movabs rcx, 0x620e841ffdf14e0d
pushf
not rcx
add rcx, 0x677e8fb0
xor rcx, 0x698d792c
rol rcx, 0x12
popf
pushf
not rcx
add rcx, 0x72ca2dff
xor rcx, 0x6e67b4f6
rol rcx, 0x42
popf
pushf
not rcx
add rcx, 0x404a951a
xor rcx, 0x591d7bf3
rol rcx, 0xc3
popf
pushf
not rcx
add rcx, 0x7fb73476
xor rcx, 0x6e085cf0
rol rcx, 0x80
popf
cmp rdx, 0x400
ja 0x1405d3a4d
push rax
pushf
mov eax, 0xd7d4e33e
pushf
not eax
add eax, 0xfe89267c
xor eax, 0x8969c163
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xcfdcdb2d
xor eax, 0xd62db677
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xe852dfee
xor eax, 0xb4127607
rol eax, 0x81
popf
pushf
not eax
add eax, 0xa217c641
xor eax, 0x87abc806
rol eax, 0x3c
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x76b8072b
pushf
not eax
add eax, 0xa53a690f
xor eax, 0x9d85c62c
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc64731d2
xor eax, 0xdde2b4b0
rol eax, 0x89
popf
pushf
not eax
add eax, 0x85e59329
xor eax, 0xb0c0988a
rol eax, 0x26
popf
pushf
not eax
add eax, 0xd2176c4c
xor eax, 0xb7e5d644
rol eax, 0x61
popf
jmp 0x1405d33b9
lea rax, [rdx + 0xf]
cmp rax, rdx
ja 0x1405d3ae2
push rax
pushf
mov eax, 0xfbbcf88e
pushf
not eax
add eax, 0x9bf6bc6a
xor eax, 0xe43afe2c
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xe5d9bc51
xor eax, 0xe20a3e7f
rol eax, 0x88
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x76bd6fe4
pushf
not eax
add eax, 0xcb2eb7fb
xor eax, 0xd06ead3f
rol eax, 2
popf
pushf
not eax
add eax, 0x9ab26819
xor eax, 0xf41d3526
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xdc90ef4d
xor eax, 0xe03123a4
rol eax, 0x9b
popf
jmp 0x1405d33b9
mov rax, rcx
push rax
pushf
mov eax, 0x868f8385
pushf
not eax
add eax, 0xf2ceddc8
xor eax, 0xb4793c83
rol eax, 0x12
popf
pushf
not eax
add eax, 0xf219f656
xor eax, 0xf04fc3b0
rol eax, 0x27
popf
pushf
not eax
add eax, 0x89ac9917
xor eax, 0xdb0952c3
rol eax, 0x90
popf
jmp 0x1405d33b9
and rax, 0xfffffffffffffff0
call fcn.140674ffd
sub rsp, rax
lea rbx, [rsp + 0x50]
test rbx, rbx
je 0x1405d3be0
push rax
pushf
mov eax, 0xce472ee
pushf
not eax
add eax, 0xb1b76d58
xor eax, 0xd6a4ecc9
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xdf8b4fb5
xor eax, 0xeb304e80
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xdf0be416
xor eax, 0xe16cbedb
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xa0940125
xor eax, 0x9049af06
rol eax, 0xfa
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xc9f59a25
pushf
not eax
add eax, 0x8e928dee
xor eax, 0x8345d05e
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x9b9dd1ea
xor eax, 0xf5452efd
rol eax, 5
popf
pushf
not eax
add eax, 0xa209c467
xor eax, 0xe1195322
rol eax, 0x86
popf
jmp 0x1405d33b9
mov dword [rbx], 0xcccc
jmp 0x1405d3d85
mov rcx, rdx
call fcn.1405fca45
mov rbx, rax
test rax, rax
je 0x1405d3cf3
push rax
pushf
mov eax, 0x65fb5b1
pushf
not eax
add eax, 0xbd85d2a9
xor eax, 0xacc5eee4
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xe443f452
xor eax, 0xe8e39dd0
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xa7ac2b05
xor eax, 0xb18e4a4b
rol eax, 0x61
popf
pushf
not eax
add eax, 0xcc5a5ae4
xor eax, 0xbf41b55b
rol eax, 0xe
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xaddb2d5d
pushf
not eax
add eax, 0xa78ba4fd
xor eax, 0x9f58e02a
rol eax, 0x21
popf
pushf
not eax
add eax, 0xce59df11
xor eax, 0xb9bb88c1
rol eax, 0x62
popf
pushf
not eax
add eax, 0x86db75d1
xor eax, 0x91ce2161
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xba9c5d74
xor eax, 0xeb957827
rol eax, 0x50
popf
jmp 0x1405d33b9
mov dword [rax], 0xdddd
push rax
pushf
mov eax, 0x1ed3a17f
pushf
not eax
add eax, 0x86226d90
xor eax, 0xf2327cc9
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xad90f550
xor eax, 0xd0e50fc9
rol eax, 0xa6
popf
jmp 0x1405d33b9
add rbx, 0x10
push rax
pushf
mov eax, 0x4e3d78a0
pushf
not eax
add eax, 0x92a76128
xor eax, 0x89f35ae7
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x9a942bdd
xor eax, 0x975dc115
rol eax, 0x81
popf
jmp 0x1405d33b9
test rbx, rbx
je 0x1405d3e1a
push rax
pushf
mov eax, 0xf583e580
pushf
not eax
add eax, 0x9b422e37
xor eax, 0xf231826b
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe40bcac7
xor eax, 0xac46afc5
rol eax, 0x57
popf
pushf
not eax
add eax, 0xd5a22e01
xor eax, 0xa02a47b6
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xa1f8c548
xor eax, 0xa5b22deb
rol eax, 0xae
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xc0a568a2
pushf
not eax
add eax, 0xa77eac78
xor eax, 0xa20ea6f5
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xcd8536c3
xor eax, 0xfe2f2b14
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xef1498aa
xor eax, 0x8b4fa3e6
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x92c8780f
xor eax, 0x9f801ccc
rol eax, 0xb7
popf
jmp 0x1405d33b9
mov ecx, dword [rbp + 0x60]
mov r9d, edi
mov dword [rsp + 0x28], r14d
mov r8, rsi
mov edx, 0x2dc4d9f3
pushf
not edx
add edx, 0xbfaeba54
xor edx, 0xc05faf72
rol edx, 0x72
popf
pushf
not edx
add edx, 0x9519254b
xor edx, 0xf7d3a206
rol edx, 0xa1
popf
pushf
not edx
add edx, 0xdd7ea852
xor edx, 0xa73c4c0c
rol edx, 0x69
popf
pushf
not edx
add edx, 0xee1b6267
xor edx, 0xfe5484b6
rol edx, 0xe6
popf
mov qword [rsp + 0x20], rbx
jmp 0x1405d3ee0
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor edi, edi
test eax, eax
jne 0x1405d3f32
push rax
pushf
mov eax, 0x239c1691
pushf
not eax
add eax, 0xda36082e
xor eax, 0xe80404c7
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xd6554a75
xor eax, 0x9f571ce5
rol eax, 5
popf
pushf
not eax
add eax, 0xc50dcf16
xor eax, 0xc343cb12
rol eax, 0x4f
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xe0064a95
pushf
not eax
add eax, 0x9e0e6a3d
xor eax, 0xbbb1961b
rol eax, 0xba
popf
pushf
not eax
add eax, 0xd0de8e51
xor eax, 0xe447a82a
rol eax, 0xca
popf
jmp 0x1405d33b9
lea rcx, [rbx - 0x10]
cmp dword [rcx], 0xdddd
jne 0x1405d3fb6
push rax
pushf
mov eax, 0xf80849b7
pushf
not eax
add eax, 0xa4fde39a
xor eax, 0x9a56a102
rol eax, 1
popf
pushf
not eax
add eax, 0xf5621bda
xor eax, 0xb24df36a
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x9d641e1c
xor eax, 0xd03ac4b6
rol eax, 0xee
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xdbc086e9
pushf
not eax
add eax, 0xc9ecc74a
xor eax, 0x904b257a
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x9fb0294e
xor eax, 0x99479180
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xa10ae6b2
xor eax, 0xb329a934
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xd814de43
xor eax, 0xf4ff9c21
rol eax, 0xf2
popf
jmp 0x1405d33b9
call fcn.14069ab68
push rax
pushf
mov eax, 0x4a3361ea
pushf
not eax
add eax, 0xae0e5781
xor eax, 0xfe827363
rol eax, 0x36
popf
pushf
not eax
add eax, 0xf1dd8e20
xor eax, 0x8a87f44a
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc79453c6
xor eax, 0x887313bd
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xa914ee74
xor eax, 0xfb56f3b1
rol eax, 0xc9
popf
jmp 0x1405d33b9
xor eax, eax
mov rcx, qword [rbp]
xor rcx, rbp
call fcn.14066b1de
mov rbx, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x40]
mov r13, qword [rbp + 0x48]
lea rsp, [rbp + 0x10]
pop r15
pop r14
pop rbp
ret
mov qword [rsp + 0x40], rdi
mov r9d, r14d
mov qword [rsp + 0x38], rdi
mov r8, rbx
mov qword [rsp + 0x30], rdi
mov edx, r15d
mov dword [rsp + 0x28], edi
mov rcx, r13
mov qword [rsp + 0x20], rdi
jmp 0x1405d40ed
call qword [sym.imp.KERNEL32.dll_LCMapStringEx]
movsxd rsi, eax
test eax, eax
je 0x1405d412d
push rax
pushf
mov eax, 0xa8bda7a8
pushf
not eax
add eax, 0xadaeef2b
xor eax, 0xbe91f836
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xe0f325e2
xor eax, 0xd4f7da28
rol eax, 0xc0
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xd7469a0b
pushf
not eax
add eax, 0x83323ef4
xor eax, 0xe5941c73
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xb3a3c57a
xor eax, 0xa5240cdd
rol eax, 0x62
popf
jmp 0x1405d33b9
mov edx, 0x62cf5796
pushf
not edx
add edx, 0xf07dffaf
xor edx, 0xf0c2e4e9
rol edx, 0xdb
popf
pushf
not edx
add edx, 0xa87dd83a
xor edx, 0xfe4320de
rol edx, 0x7b
popf
pushf
not edx
add edx, 0xa0f2c949
xor edx, 0xb9dc3ea0
rol edx, 0xcb
popf
test edx, r15d
je 0x1405d41dc
push rax
pushf
mov eax, 0xee133112
pushf
not eax
add eax, 0xc84e8dac
xor eax, 0xd7cbef45
rol eax, 5
popf
pushf
not eax
add eax, 0xa5ee558e
xor eax, 0xedd7da0c
rol eax, 0x89
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xb7652cc3
pushf
not eax
add eax, 0x9114003b
xor eax, 0xeeaeab9f
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xa3d6ebac
xor eax, 0xe1019310
rol eax, 0xae
popf
pushf
not eax
add eax, 0xf6b7d024
xor eax, 0xa7a57158
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xf29ac786
xor eax, 0x8afcf7ac
rol eax, 0xb5
popf
jmp 0x1405d33b9
mov eax, dword [rbp + 0x58]
test eax, eax
je 0x1405d4286
push rax
pushf
mov eax, 0xa45884ab
pushf
not eax
add eax, 0xdff224a9
xor eax, 0xcbf34396
rol eax, 0xad
popf
pushf
not eax
add eax, 0xb2d526e4
xor eax, 0xdd0855bf
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x967139a1
xor eax, 0xbcc40857
rol eax, 0x27
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xb5c29372
pushf
not eax
add eax, 0xfa620159
xor eax, 0x81ab9d36
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb041abaa
xor eax, 0xdf7ed6b9
rol eax, 0xd4
popf
jmp 0x1405d33b9
cmp esi, eax
jg 0x1405d4307
push rax
pushf
mov eax, 0x54054afc
pushf
not eax
add eax, 0xad2b9201
xor eax, 0xec5dbc28
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x8a66f24f
xor eax, 0xcef9e6e0
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xfa51d017
xor eax, 0xb20c6df4
rol eax, 0xe6
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x12555397
pushf
not eax
add eax, 0xe3e10db1
xor eax, 0x8f115ccc
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xbca3b5a4
xor eax, 0xe0b7bd89
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xf43ab80f
xor eax, 0xabdbd528
rol eax, 0xf8
popf
jmp 0x1405d33b9
mov qword [rsp + 0x40], rdi
mov r9d, r14d
mov qword [rsp + 0x38], rdi
mov r8, rbx
mov qword [rsp + 0x30], rdi
mov edx, r15d
mov dword [rsp + 0x28], eax
mov rcx, r13
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
jmp 0x1405d4376
call qword [sym.imp.KERNEL32.dll_LCMapStringEx]
jmp 0x1405d4ce9
mov rcx, rsi
add rcx, rcx
lea rax, [rcx + 0x10]
cmp rcx, rax
sbb rcx, rcx
and rcx, rax
je 0x1405d4426
push rax
pushf
mov eax, 0xf618faff
pushf
not eax
add eax, 0xc0312af8
xor eax, 0xdf9486f7
rol eax, 0x94
popf
pushf
not eax
add eax, 0x878b2536
xor eax, 0xac28cb4e
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xc97954a7
xor eax, 0xf3fd1b7c
rol eax, 0x31
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x125f786
pushf
not eax
add eax, 0x968d2e01
xor eax, 0xa4b3ce7a
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xd042f519
xor eax, 0xe112916f
rol eax, 0x4d
popf
jmp 0x1405d33b9
cmp rcx, rdx
ja 0x1405d44b7
push rax
pushf
mov eax, 0x3da349b3
pushf
not eax
add eax, 0x9334c2af
xor eax, 0xeb3b1b33
rol eax, 0x66
popf
pushf
not eax
add eax, 0xe0d383c4
xor eax, 0x831bd410
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xc7652355
xor eax, 0xc816a7c5
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xaf804b40
xor eax, 0xd910e947
rol eax, 0xef
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x4bdd7b31
pushf
not eax
add eax, 0xfae49d60
xor eax, 0xf75eaa59
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xd92db1cd
xor eax, 0xb4f05066
rol eax, 0x4b
popf
jmp 0x1405d33b9
lea rax, [rcx + 0xf]
cmp rax, rcx
ja 0x1405d4526
push rax
pushf
mov eax, 0xe7a301f6
pushf
not eax
add eax, 0xa1ed614b
xor eax, 0x8db15336
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xb275d3c6
xor eax, 0xda12c21c
rol eax, 0x60
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x726a8faa
pushf
not eax
add eax, 0xf1415c00
xor eax, 0xc74e0e98
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc8edc34b
xor eax, 0xd6178378
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xf0bac08b
xor eax, 0xec51049b
rol eax, 0xc3
popf
jmp 0x1405d33b9
movabs rax, 0xffffd25e30fb8f92
pushf
not rax
add rax, 0x799648b3
xor rax, 0x6e094720
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x52e7543b
xor rax, 0x63a14613
rol rax, 0xc1
popf
push rax
pushf
mov eax, 0x52d2d117
pushf
not eax
add eax, 0xc7bc5a31
xor eax, 0x88299d1f
rol eax, 0x34
popf
pushf
not eax
add eax, 0xfdf92a75
xor eax, 0x9c05e004
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xb0e1029c
xor eax, 0xf9cc2f8c
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xba058678
xor eax, 0xad6fe2f5
rol eax, 0x92
popf
jmp 0x1405d33b9
and rax, 0xfffffffffffffff0
call fcn.140674ffd
sub rsp, rax
lea rdi, [rsp + 0x50]
test rdi, rdi
je 0x1405d465d
push rax
pushf
mov eax, 0xc817d297
pushf
not eax
add eax, 0xfbf75a42
xor eax, 0x9e894f38
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xb6f6b712
xor eax, 0xad61b6c1
rol eax, 0x16
popf
pushf
not eax
add eax, 0xc109a5c1
xor eax, 0x9167662a
rol eax, 0x72
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x21facf43
pushf
not eax
add eax, 0xf720ea56
xor eax, 0xa0b80e33
rol eax, 0xac
popf
pushf
not eax
add eax, 0xc94ea40d
xor eax, 0xe2bc8cb3
rol eax, 0xeb
popf
jmp 0x1405d33b9
mov dword [rdi], 0xcccc
jmp 0x1405d4812
call fcn.1405fca45
mov rdi, rax
test rax, rax
je 0x1405d475a
push rax
pushf
mov eax, 0x98f5d751
pushf
not eax
add eax, 0xd54554cc
xor eax, 0x8ff7bc0d
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xeaeaa4c0
xor eax, 0xe3164bdd
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xc5c81aee
xor eax, 0xb7aee710
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xa2071405
xor eax, 0xc62af8be
rol eax, 0xd6
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x50dba0a8
pushf
not eax
add eax, 0x933611af
xor eax, 0xc2ff2d69
rol eax, 0x40
popf
pushf
not eax
add eax, 0xbb2b3156
xor eax, 0xd7fd581e
rol eax, 0x47
popf
pushf
not eax
add eax, 0x8b33dc06
xor eax, 0xe7d55066
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xefd4915b
xor eax, 0xa7868d60
rol eax, 0xc
popf
jmp 0x1405d33b9
mov dword [rax], 0xdddd
push rax
pushf
mov eax, 0x45ebfd6e
pushf
not eax
add eax, 0xc8f18d40
xor eax, 0x81126034
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x8a43e897
xor eax, 0xc76b0614
rol eax, 0x21
popf
pushf
not eax
add eax, 0xcbeaa9b7
xor eax, 0x8d6e0720
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xda31dbe4
xor eax, 0xd0054f4d
rol eax, 0xd9
popf
jmp 0x1405d33b9
add rdi, 0x10
push rax
pushf
mov eax, 0xf6a49553
pushf
not eax
add eax, 0x94305f3b
xor eax, 0x832ff38a
rol eax, 0x43
popf
pushf
not eax
add eax, 0x9f7a92f4
xor eax, 0x9c609a64
rol eax, 0x31
popf
pushf
not eax
add eax, 0xd2339d67
xor eax, 0xc0df5fba
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x92ff46dc
xor eax, 0xfe7231fd
rol eax, 0xeb
popf
jmp 0x1405d33b9
test rdi, rdi
je 0x1405d48be
push rax
pushf
mov eax, 0xa00f6ddd
pushf
not eax
add eax, 0xadeb6ff0
xor eax, 0xdeaef752
rol eax, 0xad
popf
pushf
not eax
add eax, 0x9245585e
xor eax, 0xe8e33c86
rol eax, 0x50
popf
pushf
not eax
add eax, 0xfd5b0f62
xor eax, 0xb9f133e3
rol eax, 7
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x3d5f68df
pushf
not eax
add eax, 0xda506522
xor eax, 0xe4264db4
rol eax, 0x85
popf
pushf
not eax
add eax, 0xd589dc95
xor eax, 0xd2a269c0
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x8109a204
xor eax, 0xa8d4620d
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe51d703e
xor eax, 0xaec80863
rol eax, 0xa8
popf
jmp 0x1405d33b9
and qword [rsp + 0x40], 0
mov r9d, r14d
and qword [rsp + 0x38], 0
mov r8, rbx
and qword [rsp + 0x30], 0
mov edx, r15d
mov dword [rsp + 0x28], esi
mov rcx, r13
mov qword [rsp + 0x20], rdi
jmp 0x1405d493f
call qword [sym.imp.KERNEL32.dll_LCMapStringEx]
xor ecx, ecx
test eax, eax
jne 0x1405d4a9b
lea rcx, [rdi - 0x10]
mov edi, 0x85bc6b5f
pushf
not edi
add edi, 0xe9d21664
xor edi, 0xc5b7d63a
rol edi, 0x82
popf
pushf
not edi
add edi, 0x84180ec7
xor edi, 0xf053c9cc
rol edi, 0xb4
popf
cmp dword [rcx], edi
jne 0x1405d49cc
push rax
pushf
mov eax, 0x83338497
pushf
not eax
add eax, 0xc5e91c0b
xor eax, 0xb1ab6f8c
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xfa41d110
xor eax, 0xc34ee57c
rol eax, 0x41
popf
pushf
not eax
add eax, 0xd8b9aae4
xor eax, 0xe6a5b289
rol eax, 0xd3
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x5533f186
pushf
not eax
add eax, 0x870be0b0
xor eax, 0xbb4c7eaf
rol eax, 0xab
popf
pushf
not eax
add eax, 0xacd540ee
xor eax, 0x9fcde2a9
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xe550e0b7
xor eax, 0xd5181f78
rol eax, 0x2b
popf
jmp 0x1405d33b9
call fcn.14069ab68
push rax
pushf
mov eax, 0xd51ffe65
pushf
not eax
add eax, 0x8db9ec40
xor eax, 0xa0d277f0
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x8294309f
xor eax, 0xf80c5db8
rol eax, 0x54
popf
jmp 0x1405d33b9
lea rcx, [rbx - 0x10]
cmp dword [rcx], edi
jmp 0x1405d4d4b
mov eax, dword [rbp + 0x58]
xor edx, edx
mov qword [rsp + 0x38], rcx
mov r9d, esi
mov qword [rsp + 0x30], rcx
mov r8, rdi
test eax, eax
jne 0x1405d4b0d
push rax
pushf
mov eax, 0xdfca81bc
pushf
not eax
add eax, 0xfa27b205
xor eax, 0x92a2fa53
rol eax, 0x66
popf
pushf
not eax
add eax, 0xa81a037d
xor eax, 0xd2423180
rol eax, 0x45
popf
pushf
not eax
add eax, 0xff441ae7
xor eax, 0x85db81cb
rol eax, 0x62
popf
pushf
not eax
add eax, 0x9858b1db
xor eax, 0xbb50d8ec
rol eax, 0x20
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xa168c962
pushf
not eax
add eax, 0xcb18bf69
xor eax, 0x984c20be
rol eax, 0x66
popf
pushf
not eax
add eax, 0xd1e815ef
xor eax, 0x815948b6
rol eax, 0x86
popf
pushf
not eax
add eax, 0xfefb990f
xor eax, 0x942dcbd8
rol eax, 0x74
popf
jmp 0x1405d33b9
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
jmp 0x1405d4be7
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x50]
mov qword [rsp + 0x20], rax
push rax
pushf
mov eax, 0x119f3a0c
pushf
not eax
add eax, 0xeba294c8
xor eax, 0xcf4f8b50
rol eax, 0x97
popf
pushf
not eax
add eax, 0xa5ce0173
xor eax, 0xb043598a
rol eax, 0xfc
popf
jmp 0x1405d33b9
mov ecx, dword [rbp + 0x60]
jmp 0x1405d4beb
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea rcx, [rdi - 0x10]
mov esi, eax
cmp dword [rcx], 0xdddd
jne 0x1405d4c58
push rax
pushf
mov eax, 0xdecfe878
pushf
not eax
add eax, 0xb59e5b6e
xor eax, 0x98dde789
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x8e5c1665
xor eax, 0x8f38126a
rol eax, 0x86
popf
pushf
not eax
add eax, 0xb3ab4552
xor eax, 0xdbda479f
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf03194b3
xor eax, 0xf10bfbaf
rol eax, 0xd9
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0xc4f43311
pushf
not eax
add eax, 0xdc677a7e
xor eax, 0xea58251f
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xbd766108
xor eax, 0x8377c9f6
rol eax, 0x1c
popf
jmp 0x1405d33b9
call fcn.14069ab68
push rax
pushf
mov eax, 0x5cb25b03
pushf
not eax
add eax, 0xfc6a1afc
xor eax, 0xbfe89c91
rol eax, 5
popf
pushf
not eax
add eax, 0xf1342552
xor eax, 0xb68bf021
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x917baa35
xor eax, 0x8664373c
rol eax, 0x55
popf
pushf
not eax
add eax, 0x8b8fe649
xor eax, 0xe8f8615e
rol eax, 0xfa
popf
jmp 0x1405d33b9
lea rcx, [rbx - 0x10]
cmp dword [rcx], 0xdddd
push rax
pushf
mov eax, 0x2cbb62a8
pushf
not eax
add eax, 0xfafe26f3
xor eax, 0xca040db8
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xe3060f59
xor eax, 0xb7d93238
rol eax, 1
popf
pushf
not eax
add eax, 0xb9bf3949
xor eax, 0xa505ffb3
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x982eb613
xor eax, 0xff9e2ae0
rol eax, 0x9e
popf
jmp 0x1405d33b9
jne 0x1405d4d93
push rax
pushf
mov eax, 0x3f5615a4
pushf
not eax
add eax, 0x864e3a4c
xor eax, 0xa5b431f7
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x859eb6bc
xor eax, 0xdaa03c5a
rol eax, 0x45
popf
pushf
not eax
add eax, 0xcd53e97d
xor eax, 0xd02c7aeb
rol eax, 0xb3
popf
jmp 0x1405d33b9
push rax
pushf
mov eax, 0x9b37a28a
pushf
not eax
add eax, 0x8dcd970a
xor eax, 0xb332defc
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xc61af69c
xor eax, 0xb5e8897c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf30dd609
xor eax, 0x85f99c03
rol eax, 0xa3
popf
jmp 0x1405d33b9
call fcn.14069ab68
push rax
pushf
mov eax, 0x1f21d43c
pushf
not eax
add eax, 0x9a2d2750
xor eax, 0xb7c49372
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x93eed332
xor eax, 0xa7dcc2cf
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xca1d0de8
xor eax, 0xc44bc6d7
rol eax, 0x64
popf
jmp 0x1405d33b9
mov eax, esi
jmp 0x1405d406f