Function at 0x140036dac
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rax
pushf
mov eax, 0x3d0b50b6
pushf
not eax
add eax, 0xdd3c4d40
xor eax, 0x8c26da85
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xe1b817b8
xor eax, 0x80f55655
rol eax, 0x94
popf
cmp eax, 4
jne 0x140036de9
popf
pop rax
jmp 0x14003729d
cmp eax, 0
jne 0x140036df8
popf
pop rax
jmp 0x140036f33
cmp eax, 3
jne 0x140036e07
popf
pop rax
jmp 0x1400371ed
cmp eax, 1
jne 0x140036e16
popf
pop rax
jmp 0x14003706c
cmp eax, 0xd
jne 0x140036e25
popf
pop rax
jmp 0x1400378e4
cmp eax, 7
jne 0x140036e34
popf
pop rax
jmp 0x140037487
cmp eax, 0xe
jne 0x140036e43
popf
pop rax
jmp 0x14003796c
cmp eax, 0xb
jne 0x140036e52
popf
pop rax
jmp 0x1400377a1
cmp eax, 0xc
jne 0x140036e61
popf
pop rax
jmp 0x140037838
cmp eax, 8
jne 0x140036e70
popf
pop rax
jmp 0x1400375b1
cmp eax, 0x10
jne 0x140036e7f
popf
pop rax
jmp 0x140037af6
cmp eax, 2
jne 0x140036e8e
popf
pop rax
jmp 0x140037152
cmp eax, 9
jne 0x140036e9d
popf
pop rax
jmp 0x140037614
cmp eax, 0x12
jne 0x140036eac
popf
pop rax
jmp 0x140037c02
cmp eax, 6
jne 0x140036ebb
popf
pop rax
jmp 0x1400373ea
cmp eax, 0x11
jne 0x140036eca
popf
pop rax
jmp 0x140037b56
cmp eax, 5
jne 0x140036ed9
popf
pop rax
jmp 0x14003733a
cmp eax, 0x16
jne 0x140036ee8
popf
pop rax
jmp 0x140037eb4
cmp eax, 0xa
jne 0x140036ef7
popf
pop rax
jmp 0x140037687
cmp eax, 0x14
jne 0x140036f06
popf
pop rax
jmp 0x140037df7
cmp eax, 0xf
jne 0x140036f15
popf
pop rax
jmp 0x140037a21
cmp eax, 0x13
jne 0x140036f24
popf
pop rax
jmp 0x140037ca0
cmp eax, 0x15
jne 0x140036f33
popf
pop rax
jmp 0x140037ea1
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x14001e140]
xor rax, rsp
mov qword [rbp + 0x160], rax
xor edx, edx
lea rcx, [0x1a1edf426]
pushf
sub rcx, 0x61ec3556
popf
mov r8d, 0xf9be0824
pushf
not r8d
add r8d, 0xee218162
xor r8d, 0xe53330fa
rol r8d, 0x9b
popf
pushf
not r8d
add r8d, 0xbec4f56a
xor r8d, 0xc7e81bb4
rol r8d, 0x2e
popf
pushf
not r8d
add r8d, 0xa016ac40
xor r8d, 0xe5d3bae1
rol r8d, 0xc5
popf
pushf
not r8d
add r8d, 0x8d8217be
xor r8d, 0x8655d261
rol r8d, 0x3e
popf
call fcn.14001100a
mov rdi, rax
test rax, rax
jne 0x140037039
push rax
pushf
mov eax, 0xd5fcb48b
pushf
not eax
add eax, 0xdc51e30b
xor eax, 0xa658cef0
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc77c8f68
xor eax, 0xa3d859c1
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd4b02531
xor eax, 0x95ce8e3d
rol eax, 0xf8
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x2c830848
pushf
not eax
add eax, 0xd3040e82
xor eax, 0xcaf91e48
rol eax, 0x16
popf
pushf
not eax
add eax, 0xa46404e0
xor eax, 0x8a08e6d9
rol eax, 0xc9
popf
jmp 0x140036dda
xor edx, edx
lea rcx, [0x188be5b10]
pushf
sub rcx, 0x48bc9be8
popf
mov r8d, 0x6a19d87
pushf
not r8d
add r8d, 0xe0d8d3af
xor r8d, 0xaa7c591e
rol r8d, 0x5a
popf
pushf
not r8d
add r8d, 0xaf9d4b59
xor r8d, 0xc9dc1c9c
rol r8d, 0x83
popf
call fcn.14001100a
mov rdi, rax
test rax, rax
jne 0x1400370f8
push rax
pushf
mov eax, 0xbb2534bf
pushf
not eax
add eax, 0xbb2776d5
xor eax, 0x8efaecee
rol eax, 0x65
popf
pushf
not eax
add eax, 0x86e54bf5
xor eax, 0xa6cf6c83
rol eax, 0x69
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xeae5bbd0
pushf
not eax
add eax, 0xb9606f1a
xor eax, 0xf730f1f2
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xda321a4d
xor eax, 0xfd3a2553
rol eax, 8
popf
pushf
not eax
add eax, 0xbe9b7049
xor eax, 0xcf741801
rol eax, 0x52
popf
pushf
not eax
add eax, 0xd6600cd7
xor eax, 0x89354c6e
rol eax, 0xfa
popf
jmp 0x140036dda
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x140037194
push rax
pushf
mov eax, 0xb5421be
pushf
not eax
add eax, 0xe762102d
xor eax, 0xbfd90e8b
rol eax, 0xae
popf
pushf
not eax
add eax, 0xea63810a
xor eax, 0xb22a2818
rol eax, 0xbe
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x3034f4b9
pushf
not eax
add eax, 0xc832ea5e
xor eax, 0xd817a833
rol eax, 0x60
popf
pushf
not eax
add eax, 0xcb03231d
xor eax, 0x8634e66a
rol eax, 0x21
popf
pushf
not eax
add eax, 0x897aba9b
xor eax, 0x88df35eb
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x97b437fc
xor eax, 0xc33e177c
rol eax, 0xd3
popf
jmp 0x140036dda
xor r8d, r8d
lea rcx, [0x19af0979b]
pushf
sub rcx, 0x5aeed873
popf
xor edx, edx
call fcn.14001100a
mov rdi, rax
test rax, rax
je 0x14003726a
push rax
pushf
mov eax, 0x6642fcee
pushf
not eax
add eax, 0xc90c3b5e
xor eax, 0xa5ed3b42
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xbedfeda1
xor eax, 0xe5d711e2
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xebed2f21
xor eax, 0xf890292d
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x84346d4b
xor eax, 0xff6660dc
rol eax, 0x1a
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x8572eee8
pushf
not eax
add eax, 0xa1655fc2
xor eax, 0xdfe5ea46
rol eax, 0x86
popf
pushf
not eax
add eax, 0xbcfbf9ba
xor eax, 0xb55551c8
rol eax, 0x2a
popf
jmp 0x140036dda
lea rdx, [0x193661450]
pushf
sub rdx, 0x53645508
popf
mov rcx, rdi
jmp 0x1400372b3
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140037307
push rax
pushf
mov eax, 0x5535477c
pushf
not eax
add eax, 0xc2043c06
xor eax, 0xfcd6f5a6
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x850e6098
xor eax, 0xb73429f9
rol eax, 0x62
popf
pushf
not eax
add eax, 0x8ca90319
xor eax, 0xfbabd9ec
rol eax, 0x18
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xf4c301ed
pushf
not eax
add eax, 0xb75b6d21
xor eax, 0xba04edfd
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xc134279a
xor eax, 0x882698a8
rol eax, 0xb7
popf
jmp 0x140036dda
lea rdx, [0x1a84d3814]
pushf
sub rdx, 0x684b78bc
popf
mov rcx, rdi
jmp 0x140037350
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x1400373b7
push rax
pushf
mov eax, 0x42420823
pushf
not eax
add eax, 0xc9491b25
xor eax, 0xc10f79d3
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xc1d86273
xor eax, 0x92fa0bfb
rol eax, 0x75
popf
pushf
not eax
add eax, 0x8067e877
xor eax, 0xee53fd53
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xa8c3d511
xor eax, 0x80452fef
rol eax, 0x4e
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x3b9cf062
pushf
not eax
add eax, 0xe0310272
xor eax, 0x92736359
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xd16a67f2
xor eax, 0xa6a38b0a
rol eax, 0x80
popf
jmp 0x140036dda
lea rdx, [0x19e841009]
pushf
sub rdx, 0x5e825099
popf
mov rcx, rdi
jmp 0x140037400
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
test rax, rax
je 0x140037441
push rax
pushf
mov eax, 0xab60d8b8
pushf
not eax
add eax, 0x90d71dbd
xor eax, 0x9f0892fa
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xbd9b7e09
xor eax, 0xdbf39089
rol eax, 0x87
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x6185ce31
pushf
not eax
add eax, 0xb9dec23a
xor eax, 0xaf2c8738
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xb4fdb268
xor eax, 0xa2f8fca0
rol eax, 0x91
popf
pushf
not eax
add eax, 0xb81c7fde
xor eax, 0x830797ed
rol eax, 0x9a
popf
jmp 0x140036dda
lea rax, [rsp + 0x48]
mov r9d, 0x9dd882d4
pushf
not r9d
add r9d, 0x9594120e
xor r9d, 0xae9cf6c5
rol r9d, 0xe8
popf
pushf
not r9d
add r9d, 0xcdf9aa90
xor r9d, 0x92315ee7
rol r9d, 0x6e
popf
pushf
not r9d
add r9d, 0x863971df
xor r9d, 0xc25f02d3
rol r9d, 0x37
popf
pushf
not r9d
add r9d, 0xd05ca939
xor r9d, 0xc4587825
rol r9d, 0x76
popf
mov qword [rsp + 0x20], rax
lea rdx, [0x187b9de81]
pushf
sub rdx, 0x47b81f01
popf
mov rax, rbx
xor r8d, r8d
mov rcx, 0xffffffff80000002
jmp 0x14003751b
call qword [0x140025020]
test eax, eax
je 0x14003757e
push rax
pushf
mov eax, 0x77c1a473
pushf
not eax
add eax, 0xf14fd140
xor eax, 0xcc7976e1
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xd3dfb21a
xor eax, 0xceb29603
rol eax, 0x50
popf
pushf
not eax
add eax, 0xb37784d7
xor eax, 0x9c631878
rol eax, 0x42
popf
pushf
not eax
add eax, 0x8b3bb88e
xor eax, 0x9580c304
rol eax, 0x56
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xaef49e81
pushf
not eax
add eax, 0xc0a9ef2f
xor eax, 0xbd5867c2
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xab4ffa6d
xor eax, 0xf3723bb9
rol eax, 0xc9
popf
jmp 0x140036dda
mov rcx, rdi
jmp 0x1400375b5
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
push rax
pushf
mov eax, 0xfb34e9b9
pushf
not eax
add eax, 0xc60d90d8
xor eax, 0xc794000f
rol eax, 5
popf
pushf
not eax
add eax, 0xe83786f1
xor eax, 0xa8c87a59
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x97076f10
xor eax, 0xb86b3856
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x9803a2f1
xor eax, 0xd9e5434e
rol eax, 0x9b
popf
jmp 0x140036dda
xor eax, eax
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.1400111ea
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x44]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x40], 0x208
mov qword [rsp + 0x20], rax
lea rdx, [0x1bf0e1ce7]
pushf
sub rdx, 0x7f0c5cd7
popf
mov rax, rsi
xor r8d, r8d
jmp 0x1400376c6
call qword [0x140025020]
mov rcx, qword [rsp + 0x48]
mov ebx, eax
mov rax, r14
jmp 0x1400376d7
call qword [0x140025020]
mov rcx, rdi
jmp 0x1400376e1
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test ebx, ebx
jne 0x140037748
push rax
pushf
mov eax, 0x83345eba
pushf
not eax
add eax, 0xd1589536
xor eax, 0xff652dd1
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x994fd0a9
xor eax, 0xa5c7ff5b
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xbd7c9af1
xor eax, 0x8709a451
rol eax, 0x53
popf
pushf
not eax
add eax, 0xcf61ccc1
xor eax, 0xde763f85
rol eax, 0x95
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x5a68689b
pushf
not eax
add eax, 0xdea1425b
xor eax, 0xc2754b1d
rol eax, 0x60
popf
pushf
not eax
add eax, 0xf9b51442
xor eax, 0xbd448684
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x9cf27430
xor eax, 0x97575bc6
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xe9ae9fbb
xor eax, 0xcccfa0ac
rol eax, 0x95
popf
jmp 0x140036dda
cmp dword [rsp + 0x44], 1
jne 0x1400377df
push rax
pushf
mov eax, 0x610c9a06
pushf
not eax
add eax, 0xfa02a307
xor eax, 0x8ccf19ba
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xa26f8dda
xor eax, 0xe85b5549
rol eax, 0x9b
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x3a24273c
pushf
not eax
add eax, 0xd465c52e
xor eax, 0xeed65ac5
rol eax, 0x17
popf
pushf
not eax
add eax, 0xf69508f7
xor eax, 0xd97a6875
rol eax, 0x76
popf
pushf
not eax
add eax, 0xa9c1e7a3
xor eax, 0xcf0db6c7
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xdef9f01c
xor eax, 0x84a6989d
rol eax, 0x7a
popf
jmp 0x140036dda
mov edx, dword [rsp + 0x40]
test dl, 1
jne 0x14003789e
push rax
pushf
mov eax, 0x1370f9a9
pushf
not eax
add eax, 0xab7145a7
xor eax, 0xa98c497c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x933a72cf
xor eax, 0xf1853d65
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe1b24ac9
xor eax, 0xbb40b87e
rol eax, 0xed
popf
pushf
not eax
add eax, 0xac2b8f73
xor eax, 0xc8504f1d
rol eax, 0x8f
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xb55cfaf1
pushf
not eax
add eax, 0x821647a2
xor eax, 0x84e933b5
rol eax, 0x95
popf
pushf
not eax
add eax, 0x84ed04c8
xor eax, 0xe3954633
rol eax, 0x92
popf
pushf
not eax
add eax, 0xc741a174
xor eax, 0xd5149019
rol eax, 0xf7
popf
jmp 0x140036dda
shr edx, 1
mov r9d, edx
cmp edx, 2
jb 0x140037925
push rax
pushf
mov eax, 0x95693203
pushf
not eax
add eax, 0xee7c39f1
xor eax, 0xae8faca7
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x9efc760b
xor eax, 0xa743cac0
rol eax, 0x6f
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xcc83a351
pushf
not eax
add eax, 0xd4a28b9c
xor eax, 0x9eec566a
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xa231d21a
xor eax, 0xf8fb1beb
rol eax, 0x58
popf
pushf
not eax
add eax, 0x92209628
xor eax, 0x91c05c6a
rol eax, 0x86
popf
jmp 0x140036dda
dec edx
lea r8, [rsp + 0x50]
cmp word [r8 + rdx*2], bx
lea r8, [r8 + rdx*2]
jne 0x1400379c8
push rax
pushf
mov eax, 0x38aa2182
pushf
not eax
add eax, 0xcce2bba3
xor eax, 0xf5e6936b
rol eax, 0x55
popf
pushf
not eax
add eax, 0x8f7fd47b
xor eax, 0xc2733294
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xa8cb3711
xor eax, 0xa3b464e0
rol eax, 0x44
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x4cdb6145
pushf
not eax
add eax, 0xafe5c0c1
xor eax, 0xc46ba5e7
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x9c86694e
xor eax, 0xdd7644e8
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xc4608a51
xor eax, 0x92c35d8b
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd7e1693b
xor eax, 0xf35325b6
rol eax, 0xf9
popf
jmp 0x140036dda
lea eax, [rdx - 1]
mov r10d, 0x1db52e15
pushf
not r10d
add r10d, 0xd61ef666
xor r10d, 0xa0bd1e3a
rol r10d, 0x2d
popf
pushf
not r10d
add r10d, 0xeda5a0fd
xor r10d, 0xb5c4be93
rol r10d, 0x1f
popf
pushf
not r10d
add r10d, 0xccc0bb34
xor r10d, 0xdcf2497b
rol r10d, 0x2c
popf
cmp word [rsp + rax*2 + 0x50], r10w
je 0x140037ab0
push rax
pushf
mov eax, 0x7a23780a
pushf
not eax
add eax, 0xf93cfce3
xor eax, 0xa61fadfc
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xf71a99c6
xor eax, 0xadf3d1d4
rol eax, 0x1e
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x4e1a9738
pushf
not eax
add eax, 0xbaf33460
xor eax, 0xe19ac228
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xb94a7511
xor eax, 0xa2cafe7f
rol eax, 0x52
popf
pushf
not eax
add eax, 0xc8225468
xor eax, 0xce3f5d4d
rol eax, 0xf5
popf
jmp 0x140036dda
mov word [r8], r10w
mov edx, r9d
push rax
pushf
mov eax, 0xa418a51b
pushf
not eax
add eax, 0xf26bb914
xor eax, 0x8cd69415
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x9418369c
xor eax, 0xb6565074
rol eax, 0x24
popf
pushf
not eax
add eax, 0xebdedcfd
xor eax, 0xc0aa0da1
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xdacfecb6
xor eax, 0xb2802171
rol eax, 0xa8
popf
jmp 0x140036dda
mov eax, edx
not eax
cmp eax, 0x18
jb 0x140037bbc
push rax
pushf
mov eax, 0xdad5d546
pushf
not eax
add eax, 0xa20c98fc
xor eax, 0x94ec05ee
rol eax, 0x94
popf
pushf
not eax
add eax, 0x89111bbf
xor eax, 0xf82313e2
rol eax, 0xea
popf
pushf
not eax
add eax, 0xa8b1cfaa
xor eax, 0xb95cf892
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xd2e7c71f
xor eax, 0xda98fdc2
rol eax, 0xd4
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xc98699d5
pushf
not eax
add eax, 0x9ad9cbbe
xor eax, 0xefa6f821
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xc9e9bd55
xor eax, 0xff1f35d3
rol eax, 0x90
popf
pushf
not eax
add eax, 0xba59d817
xor eax, 0xf2470fa2
rol eax, 0x86
popf
jmp 0x140036dda
mov ecx, edx
lea rax, [rcx + 0x17]
cmp rax, 0x104
ja 0x140037c47
push rax
pushf
mov eax, 0xb254f741
pushf
not eax
add eax, 0x8961bafa
xor eax, 0xca6d821c
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa0e1313a
xor eax, 0xecc6ef61
rol eax, 0xc3
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xa9b468b4
pushf
not eax
add eax, 0x82c1b082
xor eax, 0xe688b295
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xdbd48656
xor eax, 0xba772f23
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xdeb5bd85
xor eax, 0xe6eba367
rol eax, 0x11
popf
pushf
not eax
add eax, 0xa7055f28
xor eax, 0xe8090a4a
rol eax, 0x95
popf
jmp 0x140036dda
mov dword [rsp + rcx*2 + 0x50], 0x690062
xor eax, eax
mov dword [rsp + rcx*2 + 0x54], 0x5c006e
xor edx, edx
mov dword [rsp + rcx*2 + 0x58], 0x6d0061
mov r8d, 0xe7aa1bb9
pushf
not r8d
add r8d, 0xbc7a303c
xor r8d, 0x89758140
rol r8d, 0x23
popf
pushf
not r8d
add r8d, 0xc26aebac
xor r8d, 0xfcf280d1
rol r8d, 0xbc
popf
pushf
not r8d
add r8d, 0xb771a0fc
xor r8d, 0xf66ff5f8
rol r8d, 0xfc
popf
pushf
not r8d
add r8d, 0xb398c214
xor r8d, 0xb76d5806
rol r8d, 0x7d
popf
mov dword [rsp + rcx*2 + 0x5c], 0x360064
mov dword [rsp + rcx*2 + 0x60], 0x5c0034
mov dword [rsp + rcx*2 + 0x64], 0x53004d
mov dword [rsp + rcx*2 + 0x68], 0x440050
mov dword [rsp + rcx*2 + 0x6c], 0x310042
mov dword [rsp + rcx*2 + 0x70], 0x300034
mov dword [rsp + rcx*2 + 0x74], 0x44002e
mov dword [rsp + rcx*2 + 0x78], 0x4c004c
mov word [rsp + rcx*2 + 0x7c], ax
lea rcx, [rsp + 0x50]
call fcn.14001100a
mov rbx, rax
test rax, rax
jne 0x140037dc3
push rax
pushf
mov eax, 0x51e90d74
pushf
not eax
add eax, 0xe15a72b4
xor eax, 0xa45b6644
rol eax, 2
popf
pushf
not eax
add eax, 0x8e3c74ad
xor eax, 0xdf606ea5
rol eax, 0x86
popf
pushf
not eax
add eax, 0x870fc06a
xor eax, 0xca19a71a
rol eax, 0xb0
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0xd32f2a99
pushf
not eax
add eax, 0xff59e5ea
xor eax, 0xf2a24971
rol eax, 0xba
popf
pushf
not eax
add eax, 0x827b2ead
xor eax, 0xfb010b84
rol eax, 0x1c
popf
jmp 0x140036dda
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x140037e48
push rax
pushf
mov eax, 0x69131232
pushf
not eax
add eax, 0xb95e82fc
xor eax, 0xb6661ffd
rol eax, 0x87
popf
pushf
not eax
add eax, 0xb9257b74
xor eax, 0xdcf1a84b
rol eax, 0xff
popf
pushf
not eax
add eax, 0x98da889f
xor eax, 0xd98c62a9
rol eax, 0x3c
popf
jmp 0x140036dda
push rax
pushf
mov eax, 0x7f61c23f
pushf
not eax
add eax, 0xd400068c
xor eax, 0xe085c0d4
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xbf84c806
xor eax, 0xd889c5a1
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x811c4945
xor eax, 0xc57f090c
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x915cc709
xor eax, 0xe7b88ce8
rol eax, 0x79
popf
jmp 0x140036dda
xor edx, edx
lea r8d, [rbx + 8]
lea rcx, [rsp + 0x50]
call fcn.14001100a
mov rbx, rax
mov rax, rbx
jmp 0x140037616