Function at 0x140164b36
Capabilities:
Hash data using murmur3
Parse credit card information
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x9b44f2be
pushf
not eax
add eax, 0xf57dd87b
xor eax, 0x92920005
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x96eb6d89
xor eax, 0x90c3dcf1
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xee61c3c0
xor eax, 0xdb8423b9
rol eax, 0x27
popf
cmp eax, 0x29
jne 0x140164b86
popf
pop rax
jmp 0x140166590
cmp eax, 0
jne 0x140164b95
popf
pop rax
jmp 0x140164f28
cmp eax, 3
jne 0x140164ba4
popf
pop rax
jmp 0x140165148
cmp eax, 1
jne 0x140164bb3
popf
pop rax
jmp 0x140165041
cmp eax, 0xd
jne 0x140164bc2
popf
pop rax
jmp 0x1401656be
cmp eax, 0x1a
jne 0x140164bd1
popf
pop rax
jmp 0x140165de4
cmp eax, 0xe
jne 0x140164be0
popf
pop rax
jmp 0x140165742
cmp eax, 0x31
jne 0x140164bef
popf
pop rax
jmp 0x140166a31
cmp eax, 0x19
jne 0x140164bfe
popf
pop rax
jmp 0x140165d0b
cmp eax, 8
jne 0x140164c0d
popf
pop rax
jmp 0x1401654ab
cmp eax, 0x2a
jne 0x140164c1c
popf
pop rax
jmp 0x140166634
cmp eax, 0x17
jne 0x140164c2b
popf
pop rax
jmp 0x140165c14
cmp eax, 0x1c
jne 0x140164c3a
popf
pop rax
jmp 0x140165f25
cmp eax, 0x2e
jne 0x140164c49
popf
pop rax
jmp 0x1401667e2
cmp eax, 0x18
jne 0x140164c58
popf
pop rax
jmp 0x140165ca1
cmp eax, 0x2b
jne 0x140164c67
popf
pop rax
jmp 0x1401666d6
cmp eax, 0x1b
jne 0x140164c76
popf
pop rax
jmp 0x140165e83
cmp eax, 0x2d
jne 0x140164c85
popf
pop rax
jmp 0x14016673b
cmp eax, 0x23
jne 0x140164c94
popf
pop rax
jmp 0x140166263
cmp eax, 0x25
jne 0x140164ca3
popf
pop rax
jmp 0x14016639b
cmp eax, 0x32
jne 0x140164cb2
popf
pop rax
jmp 0x140166af0
cmp eax, 0x13
jne 0x140164cc1
popf
pop rax
jmp 0x140165a88
cmp eax, 0x33
jne 0x140164cd0
popf
pop rax
jmp 0x140166b89
cmp eax, 0x24
jne 0x140164cdf
popf
pop rax
jmp 0x1401662e4
cmp eax, 0x1e
jne 0x140164cee
popf
pop rax
jmp 0x140165f97
cmp eax, 0xc
jne 0x140164cfd
popf
pop rax
jmp 0x14016563d
cmp eax, 0x26
jne 0x140164d0c
popf
pop rax
jmp 0x140166450
cmp eax, 0x27
jne 0x140164d1b
popf
pop rax
jmp 0x14016649d
cmp eax, 0x30
jne 0x140164d2a
popf
pop rax
jmp 0x140166940
cmp eax, 0x10
jne 0x140164d39
popf
pop rax
jmp 0x140165862
cmp eax, 0x37
jne 0x140164d48
popf
pop rax
jmp 0x140166da9
cmp eax, 9
jne 0x140164d57
popf
pop rax
jmp 0x14016553c
cmp eax, 0x39
jne 0x140164d66
popf
pop rax
jmp 0x140166eea
cmp eax, 0x16
jne 0x140164d75
popf
pop rax
jmp 0x140165bb8
cmp eax, 0x3b
jne 0x140164d84
popf
pop rax
jmp 0x140166f82
cmp eax, 0xa
jne 0x140164d93
popf
pop rax
jmp 0x1401655b8
cmp eax, 0x36
jne 0x140164da2
popf
pop rax
jmp 0x140166d26
cmp eax, 0x14
jne 0x140164db1
popf
pop rax
jmp 0x140165b19
cmp eax, 7
jne 0x140164dc0
popf
pop rax
jmp 0x1401653ef
cmp eax, 0x3d
jne 0x140164dcf
popf
pop rax
jmp 0x14016702b
cmp eax, 2
jne 0x140164dde
popf
pop rax
jmp 0x140165099
cmp eax, 0x20
jne 0x140164ded
popf
pop rax
jmp 0x140166103
cmp eax, 0x1d
jne 0x140164dfc
popf
pop rax
jmp 0x140165f5f
cmp eax, 0x11
jne 0x140164e0b
popf
pop rax
jmp 0x140165949
cmp eax, 0x35
jne 0x140164e1a
popf
pop rax
jmp 0x140166cf1
cmp eax, 0x3a
jne 0x140164e29
popf
pop rax
jmp 0x140166f37
cmp eax, 0x12
jne 0x140164e38
popf
pop rax
jmp 0x1401659f3
cmp eax, 0x21
jne 0x140164e47
popf
pop rax
jmp 0x1401661a5
cmp eax, 0x38
jne 0x140164e56
popf
pop rax
jmp 0x140166e48
cmp eax, 0xb
jne 0x140164e65
popf
pop rax
jmp 0x140165605
cmp eax, 0xf
jne 0x140164e74
popf
pop rax
jmp 0x14016578b
cmp eax, 0x15
jne 0x140164e83
popf
pop rax
jmp 0x140165b7a
cmp eax, 5
jne 0x140164e92
popf
pop rax
jmp 0x140165313
cmp eax, 6
jne 0x140164ea1
popf
pop rax
jmp 0x1401653af
cmp eax, 0x22
jne 0x140164eb0
popf
pop rax
jmp 0x140166205
cmp eax, 0x3c
jne 0x140164ebf
popf
pop rax
jmp 0x140166fe3
cmp eax, 0x1f
jne 0x140164ece
popf
pop rax
jmp 0x140166051
cmp eax, 4
jne 0x140164edd
popf
pop rax
jmp 0x1401651d5
cmp eax, 0x2f
jne 0x140164eec
popf
pop rax
jmp 0x1401668e4
cmp eax, 0x28
jne 0x140164efb
popf
pop rax
jmp 0x1401664fb
cmp eax, 0x3e
jne 0x140164f0a
popf
pop rax
jmp 0x14016708d
cmp eax, 0x34
jne 0x140164f19
popf
pop rax
jmp 0x140166c32
cmp eax, 0x2c
jne 0x140164f28
popf
pop rax
jmp 0x140166736
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov r14, rdx
mov rdi, rcx
xor r15d, r15d
mov dword [rbp + 0x77], r15d
lea rdx, [0x1b9d436b5]
pushf
sub rdx, 0x79d1166d
popf
lea rcx, [rbp - 0x69]
call fcn.140092704
mov qword [rbp + 0x77], r15
jmp 0x140164f73
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x77]
lea edx, [r15 + 0x28]
jmp 0x140164f85
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x140164fe8
push rax
pushf
mov eax, 0x1a3cdf34
pushf
not eax
add eax, 0x9f86b4f1
xor eax, 0xed57a211
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa3c48759
xor eax, 0x9bf76430
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x916c2a41
xor eax, 0xd4c7b6c9
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xc11533a5
xor eax, 0x8af322d5
rol eax, 0xca
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xcd250500
pushf
not eax
add eax, 0x927635f9
xor eax, 0x91e14e77
rol eax, 0xda
popf
pushf
not eax
add eax, 0x8d842a62
xor eax, 0x923e629e
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xc8070651
xor eax, 0x92f6dfeb
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xd610c7b3
xor eax, 0xb33c075a
rol eax, 0x71
popf
jmp 0x140164b77
mov bl, 0x9c
pushf
not bl
add bl, 0x18
xor bl, 0xe3
rol bl, 0x4e
popf
pushf
not bl
add bl, 0xab
xor bl, 4
rol bl, 0xd1
popf
jmp 0x1401653ef
mov qword [rbp + 0x7f], r15
lea rdx, [rbp - 0x69]
cmp qword [rbp - 0x51], 7
cmova rdx, qword [rbp - 0x69]
lea r8, [rbp + 0x7f]
xor ecx, ecx
jmp 0x1401650b2
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
jne 0x140165102
push rax
pushf
mov eax, 0xea58fc6
pushf
not eax
add eax, 0xbc531299
xor eax, 0x9fb97cad
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xc816396f
xor eax, 0xcfe31e47
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xb94e3115
xor eax, 0xc4afb598
rol eax, 0x2f
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x75e015df
pushf
not eax
add eax, 0xb32ab2be
xor eax, 0xb3a1148e
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x886e35e3
xor eax, 0xca33ccaa
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xbe284b38
xor eax, 0xbdd57014
rol eax, 0x5c
popf
jmp 0x140164b77
mov bl, 0xbf
pushf
not bl
add bl, 0xf6
xor bl, 0x2b
rol bl, 0xb8
popf
pushf
not bl
add bl, 0x29
xor bl, 0xe4
rol bl, 0xa
popf
pushf
not bl
add bl, 0x10
xor bl, 0x70
rol bl, 0x43
popf
jmp 0x1401653ef
mov dword [rbp - 0x79], 1
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x75], rax
mov dword [rbp - 0x6d], 2
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
mov r9d, 0xd67f5eb1
pushf
not r9d
add r9d, 0xd1237d23
xor r9d, 0x83edb794
rol r9d, 0x42
popf
pushf
not r9d
add r9d, 0xcfdd7dc5
xor r9d, 0xfaffd287
rol r9d, 0x23
popf
pushf
not r9d
add r9d, 0xdf89e520
xor r9d, 0xe295755e
rol r9d, 0xda
popf
pushf
not r9d
add r9d, 0xdc125903
xor r9d, 0xd51305da
rol r9d, 0xa3
popf
lea r8, [rbp - 0x79]
xor edx, edx
mov rcx, qword [rbp + 0x77]
jmp 0x14016526a
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
test eax, eax
jne 0x1401652cd
push rax
pushf
mov eax, 0xd0cd056d
pushf
not eax
add eax, 0xcce4f069
xor eax, 0xf736e497
rol eax, 0x31
popf
pushf
not eax
add eax, 0xdd3fa337
xor eax, 0xa3eba4be
rol eax, 0x79
popf
pushf
not eax
add eax, 0x83a10510
xor eax, 0xf591ea73
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xed3d54f6
xor eax, 0xac63d18d
rol eax, 0x82
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x314c664e
pushf
not eax
add eax, 0x9b1e322c
xor eax, 0x8de1771d
rol eax, 0x57
popf
pushf
not eax
add eax, 0xfdcceeb8
xor eax, 0xa7a23329
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xb25ed0fd
xor eax, 0xcc2e9604
rol eax, 0xb
popf
jmp 0x140164b77
mov bl, 0x98
pushf
not bl
add bl, 0x71
xor bl, 0x7f
rol bl, 0xb6
popf
pushf
not bl
add bl, 0x45
xor bl, 0xf5
rol bl, 0xce
popf
pushf
not bl
add bl, 0x3f
xor bl, 0x1d
rol bl, 0x67
popf
pushf
not bl
add bl, 0x64
xor bl, 0x18
rol bl, 0x2e
popf
jmp 0x1401653ef
mov rcx, qword [rbp + 0x77]
jmp 0x1401653b4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
push rax
pushf
mov eax, 0xcb37995
pushf
not eax
add eax, 0xfa0a6677
xor eax, 0xc8cbb633
rol eax, 0xd3
popf
pushf
not eax
add eax, 0x958ac0e5
xor eax, 0xbee593fa
rol eax, 0x2e
popf
jmp 0x140164b77
mov rdx, qword [rbp - 0x51]
cmp rdx, 7
jbe 0x140165452
push rax
pushf
mov eax, 0xb76e0e09
pushf
not eax
add eax, 0x859b27b7
xor eax, 0xdce0441f
rol eax, 0xde
popf
pushf
not eax
add eax, 0xe4b6fadb
xor eax, 0x915dd272
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xd1e3ab64
xor eax, 0x918d9a77
rol eax, 0x44
popf
pushf
not eax
add eax, 0xcd5d3360
xor eax, 0xd46274d3
rol eax, 0x8d
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xf72d7707
pushf
not eax
add eax, 0xc99fec78
xor eax, 0xf9929d55
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc09155ae
xor eax, 0xdc4ba912
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xdb409beb
xor eax, 0xec6ec9a9
rol eax, 0x65
popf
pushf
not eax
add eax, 0xfd33802f
xor eax, 0x82c681d5
rol eax, 0x5a
popf
jmp 0x140164b77
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401654f6
push rax
pushf
mov eax, 0x8a51bf3c
pushf
not eax
add eax, 0x827d59ac
xor eax, 0xbfa708be
rol eax, 0xca
popf
pushf
not eax
add eax, 0xb29e104e
xor eax, 0xc052cb2d
rol eax, 0x42
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xc85259ba
pushf
not eax
add eax, 0xa7e62e62
xor eax, 0x8f5f96be
rol eax, 0x14
popf
pushf
not eax
add eax, 0x986c30b5
xor eax, 0xaaaf68ae
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xcccb15d5
xor eax, 0xa710a798
rol eax, 0xd0
popf
jmp 0x140164b77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140165584
push rax
pushf
mov eax, 0xfb4a7df0
pushf
not eax
add eax, 0xc1d15b0d
xor eax, 0xf2ffd6d1
rol eax, 0
popf
pushf
not eax
add eax, 0xc88a7283
xor eax, 0x9e1166b5
rol eax, 0x28
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xda5c806d
pushf
not eax
add eax, 0x8e6adf97
xor eax, 0xac71bda3
rol eax, 0
popf
pushf
not eax
add eax, 0xfa83aacd
xor eax, 0x8203c843
rol eax, 0xa3
popf
jmp 0x140164b77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0x3ba296f4
pushf
not eax
add eax, 0xa2967caf
xor eax, 0xed915b23
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xb8fe4678
xor eax, 0x8b734c21
rol eax, 0xde
popf
jmp 0x140164b77
test bl, bl
jne 0x140165678
push rax
pushf
mov eax, 0x1cd1cfd6
pushf
not eax
add eax, 0x890f85cd
xor eax, 0x981d6498
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xf7c620f9
xor eax, 0x83651a6d
rol eax, 0x6a
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xc3f67698
pushf
not eax
add eax, 0x95aca1b5
xor eax, 0xaf6ec13b
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xfabe13be
xor eax, 0x9ecf11a0
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf2dc401b
xor eax, 0xe48aaef1
rol eax, 0x2c
popf
jmp 0x140164b77
mov rbx, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0xf
jbe 0x1401656fc
push rax
pushf
mov eax, 0x305b7068
pushf
not eax
add eax, 0xb9166403
xor eax, 0xfed9c44a
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa4298cc0
xor eax, 0xeba5d9a6
rol eax, 0x88
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x735ce180
pushf
not eax
add eax, 0xe6478d26
xor eax, 0xb7a17c0b
rol eax, 0xc
popf
pushf
not eax
add eax, 0xe8ce207e
xor eax, 0x89ed64d1
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xe0ee89f8
xor eax, 0x9666c4e2
rol eax, 0xc5
popf
jmp 0x140164b77
mov rdi, qword [rdi]
push rax
pushf
mov eax, 0xe60f4181
pushf
not eax
add eax, 0xf294ca4f
xor eax, 0xe79342c1
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xe215d281
xor eax, 0xd55c48c3
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xdd67c3cc
xor eax, 0xf97c874e
rol eax, 0xf8
popf
jmp 0x140164b77
call fcn.1401629d4
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x71], rbx
lea r8, [rbp - 0x79]
mov edx, eax
lea rcx, [rbp + 0x17]
call fcn.1400aedad
mov dword [rbp + 0x77], 3
mov dword [rbp - 0x79], r15d
lea rax, [0x1b469007c]
pushf
sub rax, 0x74650fac
popf
mov qword [rbp - 0x71], rax
lea r8, [rbp - 0x79]
lea rdx, [rbp + 0x17]
lea rcx, [rbp - 0x69]
call fcn.1400a30c7
mov dword [rbp + 0x77], 7
cmp dword [rbp - 0x79], 0
jne 0x14016582f
push rax
pushf
mov eax, 0x5b0f8eb9
pushf
not eax
add eax, 0xf0b86d2e
xor eax, 0xa3113fe4
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf8e50d28
xor eax, 0x8e68e213
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xe35e325b
xor eax, 0x9194eec0
rol eax, 0xee
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xc1a360ce
pushf
not eax
add eax, 0xf1f73c61
xor eax, 0xaaa07458
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x8c0f8476
xor eax, 0xe2605679
rol eax, 0x79
popf
jmp 0x140164b77
lea rax, [rbp - 0x69]
cmp qword [rbp - 0x51], 7
cmova rax, qword [rbp - 0x69]
mov qword [rbp - 0x79], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x71], rax
call fcn.1401629d4
movaps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x79], xmm0
lea r8, [rbp - 0x79]
mov edx, eax
lea rcx, [rbp - 0x49]
call fcn.1400ed244
mov dword [rbp + 0x77], 0x3f
lea r12, [0x18cdcf90e]
pushf
sub r12, 0x4cd9d89a
popf
mov rcx, r12
call fcn.1400690ef
mov rsi, rax
mov r8, qword [rbp - 0x39]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
sub rax, r8
cmp rsi, rax
ja 0x140165916
push rax
pushf
mov eax, 0xe363e567
pushf
not eax
add eax, 0xa5cf0260
xor eax, 0xb2b2959f
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xb2bd5e45
xor eax, 0xeb3c186a
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x8e1ae8db
xor eax, 0x8d64a7dd
rol eax, 0x45
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xc0b17f84
pushf
not eax
add eax, 0xe5740016
xor eax, 0xdd0fb3b1
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xb00cea75
xor eax, 0xb32650e5
rol eax, 0x64
popf
jmp 0x140164b77
lea rax, [rsi + r8]
mov qword [rbp - 0x39], rax
lea rbx, [rbp - 0x49]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x49]
lea rax, [rsi + r12]
cmp rax, rbx
jbe 0x14016599a
push rax
pushf
mov eax, 0x5ec3dc2a
pushf
not eax
add eax, 0x8bca991d
xor eax, 0xcc0c2d71
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xf999e3af
xor eax, 0xd69221bd
rol eax, 0x9f
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x99865645
pushf
not eax
add eax, 0xe3a5a12e
xor eax, 0xe1f53f7f
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xc1eabcfd
xor eax, 0x909de5e5
rol eax, 0x63
popf
pushf
not eax
add eax, 0xb07536aa
xor eax, 0xfda123fd
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xde99d6e9
xor eax, 0xa79b0ccf
rol eax, 0xe1
popf
jmp 0x140164b77
lea rax, [rbx + r8]
cmp r12, rax
ja 0x140165a42
push rax
pushf
mov eax, 0xfc619afa
pushf
not eax
add eax, 0xdb76ef81
xor eax, 0xfada2916
rol eax, 0x48
popf
pushf
not eax
add eax, 0x82f63a21
xor eax, 0xf48774c3
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x8622ecd8
xor eax, 0xcaae0bb8
rol eax, 0x26
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x533d5b58
pushf
not eax
add eax, 0xcfc4e0ee
xor eax, 0xc867fe86
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xd349dba8
xor eax, 0x864cd892
rol eax, 0x33
popf
pushf
not eax
add eax, 0x964df5d8
xor eax, 0xf4173c2d
rol eax, 0x3c
popf
jmp 0x140164b77
cmp rbx, r12
ja 0x140165ad3
push rax
pushf
mov eax, 0xfd660326
pushf
not eax
add eax, 0xea2b05c6
xor eax, 0xb620d11a
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xe71e3672
xor eax, 0xa93c1c76
rol eax, 0xb
popf
pushf
not eax
add eax, 0x9caa8dbf
xor eax, 0xc5033729
rol eax, 0x71
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x887149dc
pushf
not eax
add eax, 0xec0df923
xor eax, 0xd232db5d
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x8e11487b
xor eax, 0xee02423d
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd1929fb6
xor eax, 0xc2ab8a9f
rol eax, 0x5b
popf
jmp 0x140164b77
mov rdi, r15
jmp 0x140165c14
mov rdi, rbx
sub rdi, r12
jmp 0x140165c14
mov rdi, rsi
push rax
pushf
mov eax, 0xb5d0631b
pushf
not eax
add eax, 0xdba34c12
xor eax, 0xcc9cc3b7
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xb6d781cb
xor eax, 0xb12894d7
rol eax, 0x60
popf
pushf
not eax
add eax, 0xddea5222
xor eax, 0x9bb1a287
rol eax, 0xba
popf
pushf
not eax
add eax, 0xe7e66ff6
xor eax, 0xf2728d36
rol eax, 0x18
popf
jmp 0x140164b77
lea rcx, [rbx + rsi]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8, rsi
sub r8, rdi
lea rdx, [rdi + rsi]
push r12
not r12
sub rdx, r12
pop r12
sub rdx, 1
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x49]
jmp 0x140165d0b
mov qword [rsp + 0x28], rsi
mov rdx, rsi
lea rcx, [rbp - 0x49]
call fcn.140151d86
push rax
pushf
mov eax, 0xe688fbb9
pushf
not eax
add eax, 0x9d3f7429
xor eax, 0xb6002d1d
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xf76530f8
xor eax, 0x80d01448
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x9db4c286
xor eax, 0xf5e4c89b
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x8560ef3d
xor eax, 0xa7eb070d
rol eax, 0xd2
popf
jmp 0x140164b77
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x19], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x29], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x19], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rbp + 0x77], 0x7f
mov rdx, r14
lea rcx, [rbp - 0x29]
call fcn.1400f7a74
movzx ebx, al
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140165db1
push rax
pushf
mov eax, 0x4e9fc4dc
pushf
not eax
add eax, 0x98f9342f
xor eax, 0xe926d731
rol eax, 0x90
popf
pushf
not eax
add eax, 0xa3d96398
xor eax, 0xb9d47f1d
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe26fc763
xor eax, 0xdf2ef106
rol eax, 0x70
popf
pushf
not eax
add eax, 0xa8af9f7e
xor eax, 0xf050bd4f
rol eax, 0x9f
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x1e29f597
pushf
not eax
add eax, 0x844490c0
xor eax, 0x9d4dafd6
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xcf16267f
xor eax, 0xe360b32f
rol eax, 0x87
popf
jmp 0x140164b77
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140165e3d
push rax
pushf
mov eax, 0x10e0bbf5
pushf
not eax
add eax, 0x93301510
xor eax, 0xea290187
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xf9cb5685
xor eax, 0xa74cea53
rol eax, 0x31
popf
pushf
not eax
add eax, 0xdd548709
xor eax, 0xdb2fc61f
rol eax, 0x5e
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x2a4339a2
pushf
not eax
add eax, 0xeacb6f30
xor eax, 0xf2b9be1c
rol eax, 0xce
popf
pushf
not eax
add eax, 0x95c36881
xor eax, 0x929efa8c
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xc9ed19d2
xor eax, 0xe76c12a4
rol eax, 0x7d
popf
jmp 0x140164b77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140165ede
push rax
pushf
mov eax, 0x15f62c94
pushf
not eax
add eax, 0xea5a7f47
xor eax, 0xec35a1ee
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xd318c362
xor eax, 0xa91cd21f
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xbfa6a804
xor eax, 0xce097389
rol eax, 0xe4
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x922a9b4
pushf
not eax
add eax, 0x9a083cb1
xor eax, 0xf1a762df
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xc8c03bd8
xor eax, 0xf7e36e8a
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa913021c
xor eax, 0xdbb76681
rol eax, 0xd7
popf
jmp 0x140164b77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0x7aad2eec
pushf
not eax
add eax, 0xa8f250c4
xor eax, 0xd713b7b5
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xe7c6e2a0
xor eax, 0xf4af17e8
rol eax, 0x83
popf
jmp 0x140164b77
movdqa xmm0, xmmword [0x1400366d0]
movdqu xmmword [rbp - 0x19], xmm0
mov byte [rbp - 0x29], 0
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x140165ff8
push rax
pushf
mov eax, 0x640cd58a
pushf
not eax
add eax, 0xddf8ecab
xor eax, 0x87b4e5e8
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xe91a5832
xor eax, 0xef0ed875
rol eax, 0x33
popf
pushf
not eax
add eax, 0xed071b6c
xor eax, 0xb7410453
rol eax, 0xb3
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x5494d938
pushf
not eax
add eax, 0x8774806a
xor eax, 0xb4434265
rol eax, 0x95
popf
pushf
not eax
add eax, 0xfdf3a4a0
xor eax, 0xf008439e
rol eax, 0x25
popf
pushf
not eax
add eax, 0xa7547c88
xor eax, 0x9d9418f3
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc37e068c
xor eax, 0x86cca686
rol eax, 0x78
popf
jmp 0x140164b77
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401660aa
push rax
pushf
mov eax, 0x9b02c7f0
pushf
not eax
add eax, 0xcd66a19a
xor eax, 0xd19f1691
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x9bbb3ca5
xor eax, 0xd885602f
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x92a7622d
xor eax, 0xbe07bd46
rol eax, 0xd8
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xf8d6c68c
pushf
not eax
add eax, 0x9eab1302
xor eax, 0xe1394f37
rol eax, 0x45
popf
pushf
not eax
add eax, 0x9c935596
xor eax, 0x952ed373
rol eax, 8
popf
pushf
not eax
add eax, 0x8084e2fa
xor eax, 0xdffbd742
rol eax, 0x99
popf
pushf
not eax
add eax, 0x87b6a687
xor eax, 0xeaff2b9f
rol eax, 0x6b
popf
jmp 0x140164b77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140166171
push rax
pushf
mov eax, 0xc7daf047
pushf
not eax
add eax, 0xddf9ea21
xor eax, 0x93009c44
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xd3cd935d
xor eax, 0xbe5ad22c
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xe72b0194
xor eax, 0xceeb73cf
rol eax, 0x24
popf
pushf
not eax
add eax, 0xe3654c64
xor eax, 0xbd17c49e
rol eax, 0xb6
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xce1c4547
pushf
not eax
add eax, 0xd28cadf1
xor eax, 0xa57fb50c
rol eax, 0xac
popf
pushf
not eax
add eax, 0xc912f49d
xor eax, 0xca289a8c
rol eax, 0xd
popf
jmp 0x140164b77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0xf1f7455e
pushf
not eax
add eax, 0xb83d379c
xor eax, 0xa4cc86fe
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xfad5399b
xor eax, 0xf9031a92
rol eax, 0xac
popf
pushf
not eax
add eax, 0x98461c0a
xor eax, 0xf9557a70
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xe8b69333
xor eax, 0xc98d0bff
rol eax, 0xd7
popf
jmp 0x140164b77
movdqa xmm0, xmmword [0x1400366d0]
movdqu xmmword [rbp - 0x39], xmm0
mov byte [rbp - 0x49], 0
mov rdx, qword [rbp - 0x51]
cmp rdx, 7
jbe 0x1401662b1
push rax
pushf
mov eax, 0x3a841a48
pushf
not eax
add eax, 0xa301ce58
xor eax, 0xfc5b57f7
rol eax, 0x32
popf
pushf
not eax
add eax, 0x8c3aa9b0
xor eax, 0xb4585914
rol eax, 0x87
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xf0a2cb9f
pushf
not eax
add eax, 0xb85e3542
xor eax, 0xe50ee8c0
rol eax, 0xf
popf
pushf
not eax
add eax, 0x84fcfc68
xor eax, 0xc44bea4d
rol eax, 0x5d
popf
jmp 0x140164b77
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140166355
push rax
pushf
mov eax, 0xa41599b4
pushf
not eax
add eax, 0xbdcad998
xor eax, 0xc905a836
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xf8250a2d
xor eax, 0x869d499b
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xe587f8e4
xor eax, 0xbf08e6e6
rol eax, 0x35
popf
pushf
not eax
add eax, 0xbf34d19f
xor eax, 0xbb25fb28
rol eax, 0x2e
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x3248bcaf
pushf
not eax
add eax, 0x9cc58c0e
xor eax, 0xb2093a38
rol eax, 0x12
popf
pushf
not eax
add eax, 0xe8044ea5
xor eax, 0xd32a0e75
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x91574b8d
xor eax, 0xd9d468d4
rol eax, 0xea
popf
jmp 0x140164b77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140166409
push rax
pushf
mov eax, 0x455ac0c7
pushf
not eax
add eax, 0xe2372c38
xor eax, 0xac767d46
rol eax, 0x49
popf
pushf
not eax
add eax, 0xde370ca3
xor eax, 0xfe063230
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xed1c4bb2
xor eax, 0x8fc078c4
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xd5bb1a64
xor eax, 0xed2bb5b4
rol eax, 0xf6
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xf2252663
pushf
not eax
add eax, 0xfd6e24ed
xor eax, 0x9b790756
rol eax, 0x44
popf
pushf
not eax
add eax, 0x8f5b4f8e
xor eax, 0xbd5c0138
rol eax, 0x25
popf
pushf
not eax
add eax, 0xeab1b85b
xor eax, 0xb95ba2d4
rol eax, 0x4b
popf
jmp 0x140164b77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0xb39c9766
pushf
not eax
add eax, 0xb76da05a
xor eax, 0xb408267a
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xd479bca0
xor eax, 0xd59b9fe2
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x89c9fc54
xor eax, 0x9aa45755
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xde44d60b
xor eax, 0xdbfeaefe
rol eax, 0xe1
popf
jmp 0x140164b77
movdqa xmm0, xmmword [0x1400366c0]
movdqu xmmword [rbp - 0x59], xmm0
mov word [rbp - 0x69], r15w
mov rdx, qword [rbp + 0x2f]
cmp rdx, 7
jbe 0x14016654a
push rax
pushf
mov eax, 0xfed6876a
pushf
not eax
add eax, 0xfbd26718
xor eax, 0xec2688d5
rol eax, 5
popf
pushf
not eax
add eax, 0xaa66a5f6
xor eax, 0x8ebbbcb3
rol eax, 0x3a
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x39588df8
pushf
not eax
add eax, 0xe5ac45e3
xor eax, 0xa7a5d728
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xbfcd3060
xor eax, 0xa49ea9c0
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xd011254d
xor eax, 0xc338fd9f
rol eax, 0x57
popf
jmp 0x140164b77
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401665ee
push rax
pushf
mov eax, 0x7433df44
pushf
not eax
add eax, 0x82be3c00
xor eax, 0x8c68d275
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xe7a6778e
xor eax, 0x8c61dd31
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x90ad23ab
xor eax, 0xd039c522
rol eax, 0x1a
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x6948575e
pushf
not eax
add eax, 0x8141f45f
xor eax, 0xd79346fb
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xfdc8a4b1
xor eax, 0x927defdc
rol eax, 0x93
popf
pushf
not eax
add eax, 0xd75dc513
xor eax, 0x8ef833d8
rol eax, 0xd4
popf
jmp 0x140164b77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14016668f
push rax
pushf
mov eax, 0x3402be2a
pushf
not eax
add eax, 0x87c5407b
xor eax, 0x9f1e74bb
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xf9d8b287
xor eax, 0x84b7b148
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xaf2c76b6
xor eax, 0x95bf219b
rol eax, 0xdc
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x5a8f2aec
pushf
not eax
add eax, 0xe879a3da
xor eax, 0x80277253
rol eax, 3
popf
pushf
not eax
add eax, 0x8b4d7bd1
xor eax, 0x9416a788
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xc9005011
xor eax, 0xb7e0bfc3
rol eax, 0xf5
popf
jmp 0x140164b77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
test bl, bl
je 0x140166789
push rax
pushf
mov eax, 0xbd69194a
pushf
not eax
add eax, 0xbf9cdb70
xor eax, 0xfd577145
rol eax, 0x30
popf
pushf
not eax
add eax, 0xbf455685
xor eax, 0x98594e66
rol eax, 0x18
popf
pushf
not eax
add eax, 0xded8d372
xor eax, 0x9847f658
rol eax, 0xd4
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x4f5fdc96
pushf
not eax
add eax, 0xc2e55cb5
xor eax, 0xa9ef2634
rol eax, 0x54
popf
pushf
not eax
add eax, 0xa492c911
xor eax, 0xf85dbcd1
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xe04abdea
xor eax, 0xd758263f
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xc199d21b
xor eax, 0xfef1b287
rol eax, 0x55
popf
jmp 0x140164b77
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
lea rcx, [0x1bf6d47f1]
pushf
sub rcx, 0x7f6a2771
popf
call fcn.1400690ef
mov r8, rax
lea rdx, [0x18564b94a]
pushf
sub rdx, 0x456198ca
popf
lea rcx, [rbp - 9]
call fcn.1400edcc3
nop
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x14016688b
push rax
pushf
mov eax, 0x93fe7fea
pushf
not eax
add eax, 0xf9779d24
xor eax, 0xca0caa35
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x83b6b741
xor eax, 0xea2bde6b
rol eax, 0x51
popf
pushf
not eax
add eax, 0x92e7f21e
xor eax, 0xf777be14
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xe7691331
xor eax, 0xcc232624
rol eax, 0xba
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xd1ec43b3
pushf
not eax
add eax, 0xcd4bb045
xor eax, 0xdc5c0860
rol eax, 0x94
popf
pushf
not eax
add eax, 0x8e6ca12e
xor eax, 0xed91ef30
rol eax, 0x58
popf
pushf
not eax
add eax, 0x95d4d91c
xor eax, 0xcd30034b
rol eax, 0x39
popf
pushf
not eax
add eax, 0x882fd236
xor eax, 0xaa296e19
rol eax, 0x88
popf
jmp 0x140164b77
mov r14, qword [r14]
push rax
pushf
mov eax, 0xad3f70e4
pushf
not eax
add eax, 0x87b89bd2
xor eax, 0x83fe3748
rol eax, 0x65
popf
pushf
not eax
add eax, 0xb47a6c1d
xor eax, 0xc0a8daa3
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd59a406b
xor eax, 0xb2ce58da
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xb3ec6787
xor eax, 0xb490ea8f
rol eax, 0xa8
popf
jmp 0x140164b77
mov rdx, r14
lea rcx, [rbp - 9]
call fcn.14011ee46
mov edx, 0x3a110d0b
pushf
not edx
add edx, 0xeb9201f5
xor edx, 0xf5cb6212
rol edx, 0xce
popf
pushf
not edx
add edx, 0xb71f3f95
xor edx, 0xd1646e82
rol edx, 0xb0
popf
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400403c0], eax
jle 0x1401669eb
push rax
pushf
mov eax, 0xabc2b0c5
pushf
not eax
add eax, 0xe12b0937
xor eax, 0xd8ca2354
rol eax, 0x25
popf
pushf
not eax
add eax, 0xf671f71e
xor eax, 0x83c59a2d
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc30739d0
xor eax, 0x9180254f
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xadcf4074
xor eax, 0xf6cceed6
rol eax, 0x6a
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x4ab7de5d
pushf
not eax
add eax, 0xe83334c0
xor eax, 0xc2bc085a
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xd700025b
xor eax, 0xd23e7cde
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xf36683b9
xor eax, 0x9ad2baf4
rol eax, 0xa8
popf
jmp 0x140164b77
lea rcx, [0x1b07b3639]
pushf
sub rcx, 0x70773279
popf
call fcn.14015ea45
cmp dword [0x1400403c0], 0xffffffff
jne 0x140166aaa
push rax
pushf
mov eax, 0x81066902
pushf
not eax
add eax, 0xcebfa61a
xor eax, 0xe8564a7c
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe16bb371
xor eax, 0x972ac77d
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x9b22f558
xor eax, 0xea8e1ef7
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xfea64f73
xor eax, 0xb5e5dffa
rol eax, 0x42
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x7927fa89
pushf
not eax
add eax, 0xb8dd9fab
xor eax, 0x8000a935
rol eax, 0x67
popf
pushf
not eax
add eax, 0xb3e1a3f6
xor eax, 0xd7091b40
rol eax, 0xff
popf
pushf
not eax
add eax, 0xcff8e07c
xor eax, 0xcbff9f10
rol eax, 0xac
popf
jmp 0x140164b77
lea rcx, [0x1b36116b0]
pushf
sub rcx, 0x735dfaa8
popf
jmp 0x140166b03
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x1bd4d37d7]
pushf
sub rdx, 0x7d4a171f
popf
jmp 0x140166b1f
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400402b8], rax
lea rcx, [0x199f9567d]
pushf
sub rcx, 0x59f552bd
popf
call fcn.14014b515
push rax
pushf
mov eax, 0xe5d511b8
pushf
not eax
add eax, 0x9a0d3cb4
xor eax, 0xe68a06c5
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xde0ffa25
xor eax, 0xa7dbfb48
rol eax, 0x60
popf
pushf
not eax
add eax, 0x90681c58
xor eax, 0xfa09397f
rol eax, 0xd8
popf
jmp 0x140164b77
cmp qword [0x1400402b8], 0
je 0x140166bec
push rax
pushf
mov eax, 0x750e203a
pushf
not eax
add eax, 0xccb4e130
xor eax, 0x8eaed5a2
rol eax, 6
popf
pushf
not eax
add eax, 0xdf18a0c1
xor eax, 0xc1b78aaf
rol eax, 0x67
popf
pushf
not eax
add eax, 0xe92b6ec7
xor eax, 0x8ab94341
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xeab78be0
xor eax, 0xff957d90
rol eax, 0xb3
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x849e40b0
pushf
not eax
add eax, 0xa73957a6
xor eax, 0x98c9f235
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xa621cf16
xor eax, 0xa4e758f5
rol eax, 0x22
popf
pushf
not eax
add eax, 0xde18d5db
xor eax, 0xbe9427fe
rol eax, 0xb2
popf
jmp 0x140164b77
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
lea rcx, [rbp - 0x79]
jmp 0x140166c45
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 0x92
pushf
not r8b
add r8b, 0xc5
xor r8b, 0xed
rol r8b, 0x7d
popf
pushf
not r8b
add r8b, 0x88
xor r8b, 0x4c
rol r8b, 0xe3
popf
pushf
not r8b
add r8b, 0xa2
xor r8b, 0x93
rol r8b, 5
popf
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x29]
jmp 0x140166c90
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
mov rax, qword [0x1400402b8]
lea rcx, [rbp - 0x29]
jmp 0x140166ca2
call rax
test eax, eax
sete bl
jmp 0x140166d26
xor bl, bl
push rax
pushf
mov eax, 0x2107224
pushf
not eax
add eax, 0xc3706f4e
xor eax, 0xe995d9a5
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xf6840b20
xor eax, 0xcd29da7c
rol eax, 0xee
popf
jmp 0x140164b77
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140166d63
push rax
pushf
mov eax, 0x72a50d93
pushf
not eax
add eax, 0xa2e73c30
xor eax, 0xeb25877b
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xa047eeae
xor eax, 0xb2941966
rol eax, 0x1e
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0x41271f67
pushf
not eax
add eax, 0xd9e0e406
xor eax, 0x9922975e
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x955fac6d
xor eax, 0x884b79f0
rol eax, 0x28
popf
pushf
not eax
add eax, 0xd845c929
xor eax, 0xf9246d0e
rol eax, 0x84
popf
jmp 0x140164b77
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140166def
push rax
pushf
mov eax, 0xf03605d6
pushf
not eax
add eax, 0xab573b29
xor eax, 0xd4e0001a
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xf956b24d
xor eax, 0xc1761790
rol eax, 0xc0
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xd4596337
pushf
not eax
add eax, 0xff83db82
xor eax, 0xff31d0c5
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x950fafdf
xor eax, 0xc917b416
rol eax, 0x31
popf
pushf
not eax
add eax, 0xdc8d39f2
xor eax, 0xfc7411c0
rol eax, 4
popf
pushf
not eax
add eax, 0xf15fc792
xor eax, 0xc70d8fed
rol eax, 0x50
popf
jmp 0x140164b77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140166e90
push rax
pushf
mov eax, 0x8f0f1b40
pushf
not eax
add eax, 0xe61b5065
xor eax, 0xdcdc0ee2
rol eax, 0x72
popf
pushf
not eax
add eax, 0x9f949255
xor eax, 0xb07bab14
rol eax, 0xd5
popf
jmp 0x140164b77
push rax
pushf
mov eax, 0xc915505b
pushf
not eax
add eax, 0xb433a4cc
xor eax, 0xf940866f
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x95beab14
xor eax, 0x9787e410
rol eax, 0xec
popf
pushf
not eax
add eax, 0xc275655d
xor eax, 0xd94ba3f6
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xd4aef8fe
xor eax, 0xe3a19740
rol eax, 0xf2
popf
jmp 0x140164b77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0xac9a10d4
pushf
not eax
add eax, 0xc4872761
xor eax, 0xf3b003f2
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xb044fb1d
xor eax, 0x86ecd7bd
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xa1d80f68
xor eax, 0x80e3c33c
rol eax, 0x23
popf
jmp 0x140164b77
movzx eax, bl
jmp 0x14016702b
xor al, al
push rax
pushf
mov eax, 0xaf3bb1e
pushf
not eax
add eax, 0x8e0a5f42
xor eax, 0xf32b2614
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x9b9c09aa
xor eax, 0xfb128880
rol eax, 0x69
popf
pushf
not eax
add eax, 0xa9fc3c66
xor eax, 0xf615a170
rol eax, 3
popf
jmp 0x140164b77
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
lea r8, [rbp + 0x17]
lea rdx, [rbp - 0x79]
lea rcx, [0x1ae33de07]
pushf
sub rcx, 0x6e30be4f
popf
call fcn.140179152
int3