Function at 0x14019185a
Capabilities:
Check for debugger via api
Hash data using murmur3

Disassembly:
push rax
pushf
mov eax, 0xe29f1b74
pushf
not eax
add eax, 0x9708d8b2
xor eax, 0x91509df2
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xd32850d9
xor eax, 0xc171fe4e
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa3f02d91
xor eax, 0xd77f5fca
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x97eaef8f
xor eax, 0x88c3cc29
rol eax, 0x94
popf
cmp eax, 4
jne 0x1401918bd
popf
pop rax
jmp 0x1401923ae
cmp eax, 0
jne 0x1401918cc
popf
pop rax
jmp 0x1401919bc
cmp eax, 3
jne 0x1401918db
popf
pop rax
jmp 0x140191ea3
cmp eax, 1
jne 0x1401918ea
popf
pop rax
jmp 0x140191a87
cmp eax, 0xd
jne 0x1401918f9
popf
pop rax
jmp 0x1401940d9
cmp eax, 7
jne 0x140191908
popf
pop rax
jmp 0x14019345d
cmp eax, 0xe
jne 0x140191917
popf
pop rax
jmp 0x140194199
cmp eax, 0xb
jne 0x140191926
popf
pop rax
jmp 0x140193f11
cmp eax, 0xc
jne 0x140191935
popf
pop rax
jmp 0x14019408b
cmp eax, 8
jne 0x140191944
popf
pop rax
jmp 0x140193ba5
cmp eax, 0x10
jne 0x140191953
popf
pop rax
jmp 0x1401942db
cmp eax, 2
jne 0x140191962
popf
pop rax
jmp 0x140191ae8
cmp eax, 9
jne 0x140191971
popf
pop rax
jmp 0x140193e2f
cmp eax, 0xa
jne 0x140191980
popf
pop rax
jmp 0x140193ed6
cmp eax, 6
jne 0x14019198f
popf
pop rax
jmp 0x1401933c3
cmp eax, 0x11
jne 0x14019199e
popf
pop rax
jmp 0x140194810
cmp eax, 5
jne 0x1401919ad
popf
pop rax
jmp 0x140192d64
cmp eax, 0xf
jne 0x1401919bc
popf
pop rax
jmp 0x1401941d4
push rdi
sub rsp, 0x650
mov qword [rsp + 0x108], 0
mov dword [rsp + 0x48], 0
jmp 0x1401919da
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x50], 0
jmp 0x1401919f2
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x140191a55
push rax
pushf
mov eax, 0xa1904f52
pushf
not eax
add eax, 0xd5e56afd
xor eax, 0xbef40bd3
rol eax, 0x39
popf
pushf
not eax
add eax, 0xf86a9b28
xor eax, 0x87439f94
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x851ffd86
xor eax, 0xe705358c
rol eax, 0x51
popf
pushf
not eax
add eax, 0xdcfb573f
xor eax, 0xad2bb799
rol eax, 0x59
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0x3e3a752d
pushf
not eax
add eax, 0xba20bf42
xor eax, 0xef6dc3e6
rol eax, 1
popf
pushf
not eax
add eax, 0xfb8176df
xor eax, 0xd26a60f9
rol eax, 0xd8
popf
jmp 0x1401918ae
mov dword [rsp + 0x48], 1
push rax
pushf
mov eax, 0x4ca6b763
pushf
not eax
add eax, 0xdccd358a
xor eax, 0xeb9e729b
rol eax, 0x78
popf
pushf
not eax
add eax, 0x818fb117
xor eax, 0xed347034
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xaac4e28e
xor eax, 0x80b729ac
rol eax, 0x61
popf
pushf
not eax
add eax, 0xd58c5083
xor eax, 0xf7f49eb1
rol eax, 0xaf
popf
jmp 0x1401918ae
lea rax, [rsp + 0x30]
mov rdi, rax
xor eax, eax
mov ecx, 0x6d52ae05
pushf
not ecx
add ecx, 0xfe2246fe
xor ecx, 0x911d2e6e
rol ecx, 0xf2
popf
pushf
not ecx
add ecx, 0xbbd9fb40
xor ecx, 0xe180f3f5
rol ecx, 0xf0
popf
rep stosb byte [rdi], al
lea rax, [rsp + 0x31]
mov rdi, rax
xor eax, eax
mov ecx, 0x9da7b679
pushf
not ecx
add ecx, 0x9f30e68d
xor ecx, 0xf7fd91ee
rol ecx, 0xcf
popf
pushf
not ecx
add ecx, 0xe123c37b
xor ecx, 0xc7e3160d
rol ecx, 0x10
popf
pushf
not ecx
add ecx, 0xd20c4d9f
xor ecx, 0xa2751915
rol ecx, 0xaf
popf
pushf
not ecx
add ecx, 0xecb61e57
xor ecx, 0xf454f571
rol ecx, 0x47
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x30]
mov byte [rsp + 0xe8], al
movzx eax, byte [rsp + 0x31]
mov byte [rsp + 0xf0], al
movabs rax, 0x14e8f69f50cc9ae0
pushf
not rax
add rax, 0x43bda18c
xor rax, 0x6c66dcdf
rol rax, 0x5a
popf
pushf
not rax
add rax, 0x4595a37d
xor rax, 0x65b296c7
rol rax, 0xde
popf
pushf
not rax
add rax, 0x5a783106
xor rax, 0x4920d753
rol rax, 0xcd
popf
pushf
not rax
add rax, 0x47e5e9e0
xor rax, 0x49b3b098
rol rax, 0x84
popf
mov qword [rsp + 0x160], rax
movabs rax, 0x2bf3aec2d55d7662
pushf
not rax
add rax, 0x4f2f89b9
xor rax, 0x5e093998
rol rax, 0xf9
popf
pushf
not rax
add rax, 0x7bdee328
xor rax, 0x40b34b85
rol rax, 0xb
popf
pushf
not rax
add rax, 0x57a76ec7
xor rax, 0x796d4cc9
rol rax, 0x33
popf
pushf
not rax
add rax, 0x4b880df0
xor rax, 0x565d0167
rol rax, 0xfc
popf
mov qword [rsp + 0x168], rax
movabs rax, 0x11f67784bacc25ff
pushf
not rax
add rax, 0x6eb780db
xor rax, 0x61d9b601
rol rax, 0xf5
popf
pushf
not rax
add rax, 0x5ad25e4e
xor rax, 0x7d0f3db2
rol rax, 0x1b
popf
pushf
not rax
add rax, 0x7825a37d
xor rax, 0x7a46a959
rol rax, 0xa5
popf
mov qword [rsp + 0x2d0], rax
movabs rax, 0x3b447e3dd5376f38
pushf
not rax
add rax, 0x661a96ca
xor rax, 0x4dad8954
rol rax, 0x93
popf
pushf
not rax
add rax, 0x6b33bb9a
xor rax, 0x51823482
rol rax, 0xd
popf
pushf
not rax
add rax, 0x67a7418e
xor rax, 0x6c0ac875
rol rax, 9
popf
pushf
not rax
add rax, 0x4026f9bf
xor rax, 0x506edbe7
rol rax, 0xd6
popf
mov qword [rsp + 0x2d8], rax
lea rax, [rsp + 0x32]
mov rdi, rax
xor eax, eax
mov ecx, 0x3d996e67
pushf
not ecx
add ecx, 0xa51972a5
xor ecx, 0xee10d1c9
rol ecx, 0xf9
popf
pushf
not ecx
add ecx, 0xd8b3142d
xor ecx, 0xe7697af5
rol ecx, 0x31
popf
pushf
not ecx
add ecx, 0xcd4214a1
xor ecx, 0xbd5a02b3
rol ecx, 8
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x32]
mov byte [rsp + 0xf8], al
movdqa xmm0, xmmword [rsp + 0x2d0]
movdqa xmmword [rsp + 0x5c0], xmm0
movdqa xmm0, xmmword [rsp + 0x160]
movdqa xmmword [rsp + 0x5b0], xmm0
movdqa xmm0, xmmword [rsp + 0x5b0]
pxor xmm0, xmmword [rsp + 0x5c0]
movdqa xmmword [rsp + 0x580], xmm0
movdqa xmm0, xmmword [rsp + 0x580]
movdqa xmmword [rsp + 0x160], xmm0
lea rax, [rsp + 0x160]
mov rcx, rax
jmp 0x140191dfa
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsp + 0x108], rax
cmp qword [rsp + 0x108], 0
jne 0x140191e5d
push rax
pushf
mov eax, 0x86dbe56a
pushf
not eax
add eax, 0x98734ff8
xor eax, 0x9c2ded85
rol eax, 0xed
popf
pushf
not eax
add eax, 0x8a82635b
xor eax, 0xcd72628a
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xd7e3b753
xor eax, 0xf94950ed
rol eax, 0x83
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0x2e89cf99
pushf
not eax
add eax, 0x9828a28a
xor eax, 0xbbba95fd
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xf629fae9
xor eax, 0xfb79ed29
rol eax, 0x40
popf
pushf
not eax
add eax, 0xb1c69d91
xor eax, 0x872b9551
rol eax, 0x97
popf
jmp 0x1401918ae
lea rax, [rsp + 0x33]
mov rdi, rax
xor eax, eax
mov ecx, 0x105e803c
pushf
not ecx
add ecx, 0xf40814b4
xor ecx, 0xdd7473b3
rol ecx, 0x15
popf
pushf
not ecx
add ecx, 0xfdaa82c4
xor ecx, 0xe1f6eb2a
rol ecx, 0xbc
popf
pushf
not ecx
add ecx, 0x87284fdb
xor ecx, 0x88db0b18
rol ecx, 0x83
popf
rep stosb byte [rdi], al
lea rax, [rsp + 0x34]
mov rdi, rax
xor eax, eax
mov ecx, 0xc0f34878
pushf
not ecx
add ecx, 0xe6290dae
xor ecx, 0xb8cd43cd
rol ecx, 0x7d
popf
pushf
not ecx
add ecx, 0x87f83451
xor ecx, 0xc2659db3
rol ecx, 0x19
popf
pushf
not ecx
add ecx, 0x84f459cb
xor ecx, 0xe08c546f
rol ecx, 0xec
popf
pushf
not ecx
add ecx, 0xad6a920b
xor ecx, 0xee28721a
rol ecx, 0xf7
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x33]
mov byte [rsp + 0x58], al
movzx eax, byte [rsp + 0x34]
mov byte [rsp + 0x60], al
movabs rax, 0xaae68546a02cc7e6
pushf
not rax
add rax, 0x730aec3d
xor rax, 0x76e60df0
rol rax, 0xac
popf
pushf
not rax
add rax, 0x7f49a1df
xor rax, 0x62f04a4e
rol rax, 0x85
popf
mov qword [rsp + 0x1a0], rax
movabs rax, 0x7e1840e3da10ba38
pushf
not rax
add rax, 0x600027ea
xor rax, 0x45812af6
rol rax, 0x46
popf
pushf
not rax
add rax, 0x79d83649
xor rax, 0x6b27cab4
rol rax, 0xc1
popf
pushf
not rax
add rax, 0x78eca5ca
xor rax, 0x4e0baace
rol rax, 0xa4
popf
mov qword [rsp + 0x1a8], rax
movabs rax, 0xc60dda19f48f1f30
pushf
not rax
add rax, 0x5cf3a521
xor rax, 0x412ac0a3
rol rax, 0xbd
popf
pushf
not rax
add rax, 0x7118c511
xor rax, 0x4966b49b
rol rax, 0x4c
popf
pushf
not rax
add rax, 0x42743cdf
xor rax, 0x47978fab
rol rax, 0x64
popf
mov qword [rsp + 0x1b0], rax
movabs rax, 0x23fe32d44ece0257
pushf
not rax
add rax, 0x5d65265e
xor rax, 0x485137cd
rol rax, 0xca
popf
pushf
not rax
add rax, 0x5fd193b2
xor rax, 0x73bd0394
rol rax, 5
popf
pushf
not rax
add rax, 0x69589c2c
xor rax, 0x410f1a4b
rol rax, 0x61
popf
pushf
not rax
add rax, 0x6e397747
xor rax, 0x7b1d5d94
rol rax, 0x16
popf
mov qword [rsp + 0x1b8], rax
movabs rax, 0x465938cb0a37a7cc
pushf
not rax
add rax, 0x560b0b05
xor rax, 0x7e134850
rol rax, 0x65
popf
pushf
not rax
add rax, 0x795fbd3e
xor rax, 0x45c1071d
rol rax, 0xeb
popf
pushf
not rax
add rax, 0x72dacf75
xor rax, 0x7f3b35c9
rol rax, 0xf2
popf
pushf
not rax
add rax, 0x6656542f
xor rax, 0x69aefc26
rol rax, 0x52
popf
mov qword [rsp + 0x2e0], rax
movabs rax, 0xdd731241f7f2f51d
pushf
not rax
add rax, 0x455126f3
xor rax, 0x4f8ddafa
rol rax, 0x7b
popf
pushf
not rax
add rax, 0x46b499df
xor rax, 0x5eedbbda
rol rax, 0x62
popf
pushf
not rax
add rax, 0x7dfe793a
xor rax, 0x673fd417
rol rax, 0x3f
popf
pushf
not rax
add rax, 0x4d6576ec
xor rax, 0x705c242c
rol rax, 0x87
popf
mov qword [rsp + 0x2e8], rax
movabs rax, 0xbc8fa85e07b064a5
pushf
not rax
add rax, 0x7954dd66
xor rax, 0x427cc309
rol rax, 0x60
popf
pushf
not rax
add rax, 0x58c9c3bf
xor rax, 0x5118cbe8
rol rax, 0xf3
popf
pushf
not rax
add rax, 0x62b63d00
xor rax, 0x497f17d0
rol rax, 0xd6
popf
pushf
not rax
add rax, 0x42d59150
xor rax, 0x735d4003
rol rax, 0xff
popf
mov qword [rsp + 0x2f0], rax
movabs rax, 0x8fea4d082b7053b0
pushf
not rax
add rax, 0x6695681f
xor rax, 0x7bec9295
rol rax, 0x13
popf
pushf
not rax
add rax, 0x71b0647a
xor rax, 0x7452334f
rol rax, 0x23
popf
mov qword [rsp + 0x2f8], rax
lea rax, [rsp + 0x35]
mov rdi, rax
xor eax, eax
mov ecx, 0x125acb7c
pushf
not ecx
add ecx, 0xc90794f0
xor ecx, 0x84bd593e
rol ecx, 0x57
popf
pushf
not ecx
add ecx, 0x8c3c2959
xor ecx, 0xa9f9bb87
rol ecx, 0xd9
popf
pushf
not ecx
add ecx, 0xbecae18c
xor ecx, 0x8f322455
rol ecx, 0x95
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x35]
mov byte [rsp + 0x68], al
movdqa xmm0, xmmword [rsp + 0x2e0]
movdqa xmmword [rsp + 0x5d0], xmm0
movdqa xmm0, xmmword [rsp + 0x1a0]
movdqa xmmword [rsp + 0x5a0], xmm0
movdqa xmm0, xmmword [rsp + 0x5a0]
pxor xmm0, xmmword [rsp + 0x5d0]
movdqa xmmword [rsp + 0x5f0], xmm0
movdqa xmm0, xmmword [rsp + 0x5f0]
movdqa xmmword [rsp + 0x1a0], xmm0
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x2f0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x610], xmm0
mov rax, qword [rsp + 0x120]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x600], xmm0
movdqa xmm0, xmmword [rsp + 0x600]
pxor xmm0, xmmword [rsp + 0x610]
movdqa xmmword [rsp + 0x620], xmm0
mov rax, qword [rsp + 0x120]
movdqa xmm0, xmmword [rsp + 0x620]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x1a0]
mov rcx, rax
call fcn.14028e65d
xor eax, eax
jmp 0x140194812
lea rax, [rsp + 0x36]
mov rdi, rax
xor eax, eax
mov ecx, 0xb3e4d1ee
pushf
not ecx
add ecx, 0xa821cb98
xor ecx, 0xe3c9493a
rol ecx, 0x51
popf
pushf
not ecx
add ecx, 0xfcb7d318
xor ecx, 0xc155be8c
rol ecx, 0x88
popf
pushf
not ecx
add ecx, 0x879954b2
xor ecx, 0xc37bb45f
rol ecx, 0x7d
popf
rep stosb byte [rdi], al
lea rax, [rsp + 0x37]
mov rdi, rax
xor eax, eax
mov ecx, 0x62c4c787
pushf
not ecx
add ecx, 0xe3aae21e
xor ecx, 0xac754572
rol ecx, 0xd5
popf
pushf
not ecx
add ecx, 0xbcd804e7
xor ecx, 0xd1ac9169
rol ecx, 0x4d
popf
pushf
not ecx
add ecx, 0x8a6ee578
xor ecx, 0x8f67fd44
rol ecx, 0x1b
popf
pushf
not ecx
add ecx, 0xbb95af3e
xor ecx, 0xda8a546a
rol ecx, 0x5b
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x36]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x37]
mov byte [rsp + 0x78], al
movabs rax, 0x4199b43900c6661
pushf
not rax
add rax, 0x574275dd
xor rax, 0x441b05ee
rol rax, 0x51
popf
pushf
not rax
add rax, 0x403c9f31
xor rax, 0x7de341e2
rol rax, 0xc6
popf
mov qword [rsp + 0x1c0], rax
movabs rax, 0xb3ade2066f54eb3b
pushf
not rax
add rax, 0x788b1f73
xor rax, 0x42035baf
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x5cb8e827
xor rax, 0x43a15f6c
rol rax, 0x81
popf
pushf
not rax
add rax, 0x78be26f9
xor rax, 0x5ba90ccc
rol rax, 0x1c
popf
mov qword [rsp + 0x1c8], rax
movabs rax, 0x26ae0fb4e8b0862a
pushf
not rax
add rax, 0x45a319ea
xor rax, 0x41d14805
rol rax, 0x1c
popf
pushf
not rax
add rax, 0x7188dd7d
xor rax, 0x6e313fe4
rol rax, 0xc
popf
pushf
not rax
add rax, 0x60c8964a
xor rax, 0x6ba01809
rol rax, 0x59
popf
pushf
not rax
add rax, 0x631dc90b
xor rax, 0x5e302408
rol rax, 0x37
popf
mov qword [rsp + 0x1d0], rax
movabs rax, 0x64238ddaad56ae87
pushf
not rax
add rax, 0x592a8a30
xor rax, 0x425b2577
rol rax, 0xf1
popf
pushf
not rax
add rax, 0x651d655c
xor rax, 0x4cce53fb
rol rax, 0x1f
popf
pushf
not rax
add rax, 0x6d89f5ea
xor rax, 0x7e9e5b58
rol rax, 0xd7
popf
pushf
not rax
add rax, 0x547c2e10
xor rax, 0x4480fbd1
rol rax, 0x80
popf
mov qword [rsp + 0x1d8], rax
movabs rax, 0x3f6c7201c32a7e21
pushf
not rax
add rax, 0x6dd17e9b
xor rax, 0x6e9e1b53
rol rax, 0xbd
popf
pushf
not rax
add rax, 0x624c01b2
xor rax, 0x7aa25223
rol rax, 0xf
popf
pushf
not rax
add rax, 0x5a813e0e
xor rax, 0x52e77551
rol rax, 0x75
popf
mov qword [rsp + 0x2b0], rax
movabs rax, 0x20c119baa5155398
pushf
not rax
add rax, 0x6830ea24
xor rax, 0x6e8ae4b7
rol rax, 0xa2
popf
pushf
not rax
add rax, 0x5f1b13f7
xor rax, 0x5a3bea04
rol rax, 0xdd
popf
pushf
not rax
add rax, 0x45e5aa4a
xor rax, 0x53071b6f
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x622f1845
xor rax, 0x558478d2
rol rax, 0x8b
popf
mov qword [rsp + 0x2b8], rax
movabs rax, 0x3b7da2da009bf3
pushf
not rax
add rax, 0x7d078d05
xor rax, 0x6f1e9fc1
rol rax, 0x23
popf
pushf
not rax
add rax, 0x4b4b4634
xor rax, 0x77cc7d38
rol rax, 0xaf
popf
mov qword [rsp + 0x2c0], rax
movabs rax, 0x7dd29ccc1123277a
pushf
not rax
add rax, 0x7bc5c695
xor rax, 0x4d7dbaea
rol rax, 0xe7
popf
pushf
not rax
add rax, 0x5ba6092a
xor rax, 0x727ddfcc
rol rax, 0xae
popf
mov qword [rsp + 0x2c8], rax
lea rax, [rsp + 0x38]
mov rdi, rax
xor eax, eax
mov ecx, 0xeab7525
pushf
not ecx
add ecx, 0xea1f28ab
xor ecx, 0xff2f6b6c
rol ecx, 0xd9
popf
pushf
not ecx
add ecx, 0x859e9cfe
xor ecx, 0xd7744214
rol ecx, 0x58
popf
pushf
not ecx
add ecx, 0xff79d5f2
xor ecx, 0xa715b650
rol ecx, 0xf7
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x38]
mov byte [rsp + 0x80], al
movdqa xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x370], xmm0
movdqa xmm0, xmmword [rsp + 0x1c0]
movdqa xmmword [rsp + 0x630], xmm0
movdqa xmm0, xmmword [rsp + 0x630]
pxor xmm0, xmmword [rsp + 0x370]
movdqa xmmword [rsp + 0x380], xmm0
movdqa xmm0, xmmword [rsp + 0x380]
movdqa xmmword [rsp + 0x1c0], xmm0
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x2c0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x3a0], xmm0
mov rax, qword [rsp + 0x128]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x390], xmm0
movdqa xmm0, xmmword [rsp + 0x390]
pxor xmm0, xmmword [rsp + 0x3a0]
movdqa xmmword [rsp + 0x3b0], xmm0
mov rax, qword [rsp + 0x128]
movdqa xmm0, xmmword [rsp + 0x3b0]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x1c0]
mov rdx, rax
mov rcx, qword [rsp + 0x108]
jmp 0x140192858
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401403a0], rax
lea rax, [rsp + 0x39]
mov rdi, rax
xor eax, eax
mov ecx, 0x65dba077
pushf
not ecx
add ecx, 0xbec58469
xor ecx, 0xa7992e09
rol ecx, 0xd2
popf
pushf
not ecx
add ecx, 0x8dc5193d
xor ecx, 0xa254ee21
rol ecx, 0x3a
popf
pushf
not ecx
add ecx, 0xec639ec8
xor ecx, 0x8884cef2
rol ecx, 0x35
popf
rep stosb byte [rdi], al
lea rax, [rsp + 0x3a]
mov rdi, rax
xor eax, eax
mov ecx, 0x2cddc32d
pushf
not ecx
add ecx, 0xd8b79af3
xor ecx, 0x97cc844f
rol ecx, 0x29
popf
pushf
not ecx
add ecx, 0xe56d9db6
xor ecx, 0xeaf350b3
rol ecx, 0xdf
popf
pushf
not ecx
add ecx, 0x8578adfd
xor ecx, 0xdd5dc135
rol ecx, 0x61
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x39]
mov byte [rsp + 0x88], al
movzx eax, byte [rsp + 0x3a]
mov byte [rsp + 0x90], al
movabs rax, 0x3165d069e3a559e
pushf
not rax
add rax, 0x59a65345
xor rax, 0x6fedf11a
rol rax, 0xe0
popf
pushf
not rax
add rax, 0x4d35f4a4
xor rax, 0x4b3b2d79
rol rax, 0x27
popf
mov qword [rsp + 0x1e0], rax
movabs rax, 0xf01c74298331c901
pushf
not rax
add rax, 0x7a5de327
xor rax, 0x718fcacc
rol rax, 0x6f
popf
pushf
not rax
add rax, 0x5843ebee
xor rax, 0x44343017
rol rax, 0xf9
popf
mov qword [rsp + 0x1e8], rax
movabs rax, 0x25469ba79a79206a
pushf
not rax
add rax, 0x76fb1351
xor rax, 0x469522f8
rol rax, 0xff
popf
pushf
not rax
add rax, 0x6a203564
xor rax, 0x56b71361
rol rax, 0x7f
popf
mov qword [rsp + 0x1f0], rax
movabs rax, 0xadb524f3de07c49e
pushf
not rax
add rax, 0x717fd42a
xor rax, 0x40e862ed
rol rax, 0x59
popf
pushf
not rax
add rax, 0x6478e458
xor rax, 0x4ee8d69b
rol rax, 0x98
popf
pushf
not rax
add rax, 0x4cdc8177
xor rax, 0x5042366b
rol rax, 0xcc
popf
mov qword [rsp + 0x1f8], rax
movabs rax, 0xf0c9478e7c38ec3c
pushf
not rax
add rax, 0x7c214224
xor rax, 0x5e8e6d03
rol rax, 0xb0
popf
pushf
not rax
add rax, 0x7ba3b0f3
xor rax, 0x6be7cc64
rol rax, 0xf8
popf
mov qword [rsp + 0x300], rax
movabs rax, 0x7fa3259293dde9ee
pushf
not rax
add rax, 0x4d6df114
xor rax, 0x5d85fef2
rol rax, 0x25
popf
pushf
not rax
add rax, 0x7818dbe3
xor rax, 0x5343a8e5
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x45d30648
xor rax, 0x5a5658af
rol rax, 0x39
popf
mov qword [rsp + 0x308], rax
movabs rax, 0xdc26e6896e35e289
pushf
not rax
add rax, 0x403e4df6
xor rax, 0x7beeb8ba
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x6345b0f2
xor rax, 0x48a6f68f
rol rax, 0x3d
popf
pushf
not rax
add rax, 0x514ec9ab
xor rax, 0x68e8f96d
rol rax, 0x6b
popf
pushf
not rax
add rax, 0x4b347a68
xor rax, 0x63266783
rol rax, 0x54
popf
mov qword [rsp + 0x310], rax
movabs rax, 0x206e236fc3ce5c4c
pushf
not rax
add rax, 0x5e287cf5
xor rax, 0x71198ba2
rol rax, 0x1c
popf
pushf
not rax
add rax, 0x64dfb960
xor rax, 0x5007ee28
rol rax, 0x99
popf
pushf
not rax
add rax, 0x591d996a
xor rax, 0x7adfbc2d
rol rax, 0x27
popf
pushf
not rax
add rax, 0x4c35e62a
xor rax, 0x48e43342
rol rax, 0xba
popf
mov qword [rsp + 0x318], rax
lea rax, [rsp + 0x3b]
mov rdi, rax
xor eax, eax
mov ecx, 0xfb3de069
pushf
not ecx
add ecx, 0xe6ef2eb3
xor ecx, 0xd791bc0a
rol ecx, 0x67
popf
pushf
not ecx
add ecx, 0x9cb62750
xor ecx, 0x8c3d0db1
rol ecx, 0xd5
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x3b]
mov byte [rsp + 0x98], al
movdqa xmm0, xmmword [rsp + 0x300]
movdqa xmmword [rsp + 0x3d0], xmm0
movdqa xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x3c0], xmm0
movdqa xmm0, xmmword [rsp + 0x3c0]
pxor xmm0, xmmword [rsp + 0x3d0]
movdqa xmmword [rsp + 0x3e0], xmm0
movdqa xmm0, xmmword [rsp + 0x3e0]
movdqa xmmword [rsp + 0x1e0], xmm0
lea rax, [rsp + 0x1f0]
mov qword [rsp + 0x130], rax
lea rax, [rsp + 0x310]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x400], xmm0
mov rax, qword [rsp + 0x130]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x3f0], xmm0
movdqa xmm0, xmmword [rsp + 0x3f0]
pxor xmm0, xmmword [rsp + 0x400]
movdqa xmmword [rsp + 0x410], xmm0
mov rax, qword [rsp + 0x130]
movdqa xmm0, xmmword [rsp + 0x410]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x1e0]
mov rdx, rax
mov rcx, qword [rsp + 0x108]
jmp 0x140192cbd
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401403a8], rax
cmp qword [0x1401403a0], 0
jne 0x140192d0b
push rax
pushf
mov eax, 0x1558d630
pushf
not eax
add eax, 0x9a252d2b
xor eax, 0xf0ca086c
rol eax, 0x54
popf
pushf
not eax
add eax, 0x883e0b8e
xor eax, 0x9ed66b28
rol eax, 0x13
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0xd6621221
pushf
not eax
add eax, 0x81b0313d
xor eax, 0xdab8c7a7
rol eax, 0x94
popf
pushf
not eax
add eax, 0xd2607c99
xor eax, 0xc3d2d371
rol eax, 0x18
popf
pushf
not eax
add eax, 0xcc5b1506
xor eax, 0xe6c4ace4
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xad668748
xor eax, 0x8638647a
rol eax, 0x40
popf
jmp 0x1401918ae
lea rax, [rsp + 0x3c]
mov rdi, rax
xor eax, eax
mov ecx, 0x29408a0
pushf
not ecx
add ecx, 0x9ec23505
xor ecx, 0x95dea38f
rol ecx, 0x77
popf
pushf
not ecx
add ecx, 0x84668bce
xor ecx, 0x9ea82dd5
rol ecx, 0xe
popf
pushf
not ecx
add ecx, 0xcb627e6b
xor ecx, 0xa49cff13
rol ecx, 0x49
popf
pushf
not ecx
add ecx, 0x9f534a53
xor ecx, 0xfec8b254
rol ecx, 0x27
popf
rep stosb byte [rdi], al
lea rax, [rsp + 0x3d]
mov rdi, rax
xor eax, eax
mov ecx, 0x6a4e470a
pushf
not ecx
add ecx, 0x84b98e26
xor ecx, 0xa3f54fd9
rol ecx, 0x4a
popf
pushf
not ecx
add ecx, 0xc260bc84
xor ecx, 0x80d61e60
rol ecx, 0xe1
popf
pushf
not ecx
add ecx, 0xa71796a8
xor ecx, 0xf1e0420f
rol ecx, 0xfe
popf
pushf
not ecx
add ecx, 0xf5330035
xor ecx, 0xfd0ee30c
rol ecx, 0xee
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x3c]
mov byte [rsp + 0xa0], al
movzx eax, byte [rsp + 0x3d]
mov byte [rsp + 0xa8], al
movabs rax, 0xa966fbef2f3ac3de
pushf
not rax
add rax, 0x42cedd60
xor rax, 0x797a0894
rol rax, 0x84
popf
pushf
not rax
add rax, 0x4e7f6963
xor rax, 0x432edc90
rol rax, 0xf8
popf
mov qword [rsp + 0x220], rax
movabs rax, 0x71cf99bac65396d3
pushf
not rax
add rax, 0x6e6c7a30
xor rax, 0x5f8484b2
rol rax, 0xf4
popf
pushf
not rax
add rax, 0x4279d34b
xor rax, 0x46cab592
rol rax, 0xc1
popf
mov qword [rsp + 0x228], rax
movabs rax, 0xb9a076924ceddb1d
pushf
not rax
add rax, 0x69d57966
xor rax, 0x5ea0a180
rol rax, 0x4c
popf
pushf
not rax
add rax, 0x68eb3fb7
xor rax, 0x673589de
rol rax, 0xbb
popf
pushf
not rax
add rax, 0x5d1094cd
xor rax, 0x7012ee82
rol rax, 0x6e
popf
mov qword [rsp + 0x230], rax
movabs rax, 0xbaacb305b2f56b8b
pushf
not rax
add rax, 0x6c5765a6
xor rax, 0x4c988ad6
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x4723f820
xor rax, 0x42a7bd22
rol rax, 0xa6
popf
pushf
not rax
add rax, 0x75cdb67f
xor rax, 0x756481f1
rol rax, 0x69
popf
pushf
not rax
add rax, 0x68dd90ae
xor rax, 0x527cf3a5
rol rax, 0x7f
popf
mov qword [rsp + 0x238], rax
movabs rax, 0x3f1637ac4dfdf959
pushf
not rax
add rax, 0x7b19f1b9
xor rax, 0x621f5d9f
rol rax, 0x28
popf
pushf
not rax
add rax, 0x4fff9706
xor rax, 0x646f4bde
rol rax, 0xe0
popf
pushf
not rax
add rax, 0x7f6f284d
xor rax, 0x4335bf3e
rol rax, 0xc0
popf
mov qword [rsp + 0x240], rax
movabs rax, 0xd3f374345e44d5fa
pushf
not rax
add rax, 0x59016420
xor rax, 0x51e01f8b
rol rax, 0x93
popf
pushf
not rax
add rax, 0x4067ebe6
xor rax, 0x78e8742f
rol rax, 0xc9
popf
pushf
not rax
add rax, 0x74a241b0
xor rax, 0x70f5fdce
rol rax, 0x71
popf
mov qword [rsp + 0x248], rax
movabs rax, 0xe6676864eda8e7cf
pushf
not rax
add rax, 0x68ce2060
xor rax, 0x50b0184e
rol rax, 0xd4
popf
pushf
not rax
add rax, 0x6222a614
xor rax, 0x4b073455
rol rax, 0x65
popf
mov qword [rsp + 0x340], rax
movabs rax, 0x921c0fcb6b2d7cdb
pushf
not rax
add rax, 0x713783e0
xor rax, 0x426a50d1
rol rax, 0x38
popf
pushf
not rax
add rax, 0x4924a120
xor rax, 0x44071efe
rol rax, 0x12
popf
mov qword [rsp + 0x348], rax
movabs rax, 0x8a92b7ea0b86d669
pushf
not rax
add rax, 0x4716d27e
xor rax, 0x4ce78045
rol rax, 0xa2
popf
pushf
not rax
add rax, 0x5f55b47a
xor rax, 0x5a3ff3ef
rol rax, 0xe1
popf
mov qword [rsp + 0x350], rax
movabs rax, 0x26c36702d6ce47e7
pushf
not rax
add rax, 0x5fea8849
xor rax, 0x496b4344
rol rax, 0x74
popf
pushf
not rax
add rax, 0x7d1b9b2f
xor rax, 0x6924d251
rol rax, 0x90
popf
mov qword [rsp + 0x358], rax
movabs rax, 0x44002c6d2f4b4b98
pushf
not rax
add rax, 0x77fe23cc
xor rax, 0x459bc378
rol rax, 0xa7
popf
pushf
not rax
add rax, 0x7cbbb8c4
xor rax, 0x6efa28cc
rol rax, 0xb1
popf
mov qword [rsp + 0x360], rax
movabs rax, 0xf119c80b5eb30817
pushf
not rax
add rax, 0x7368417d
xor rax, 0x4571c4dc
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x4fa4f4e0
xor rax, 0x60f33670
rol rax, 0x8e
popf
pushf
not rax
add rax, 0x542fd4bd
xor rax, 0x62fd960f
rol rax, 0x7e
popf
pushf
not rax
add rax, 0x473cfea9
xor rax, 0x724e4b70
rol rax, 0x5a
popf
mov qword [rsp + 0x368], rax
lea rax, [rsp + 0x3e]
mov rdi, rax
xor eax, eax
mov ecx, 0xb981ca0f
pushf
not ecx
add ecx, 0xdf8ef6c1
xor ecx, 0xe551cfcf
rol ecx, 0x53
popf
pushf
not ecx
add ecx, 0xb7c47157
xor ecx, 0x9b4e566f
rol ecx, 0x49
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0xb0], al
movdqa xmm0, xmmword [rsp + 0x340]
movdqa xmmword [rsp + 0x430], xmm0
movdqa xmm0, xmmword [rsp + 0x220]
movdqa xmmword [rsp + 0x420], xmm0
movdqa xmm0, xmmword [rsp + 0x420]
pxor xmm0, xmmword [rsp + 0x430]
movdqa xmmword [rsp + 0x440], xmm0
movdqa xmm0, xmmword [rsp + 0x440]
movdqa xmmword [rsp + 0x220], xmm0
lea rax, [rsp + 0x230]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x350]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x460], xmm0
mov rax, qword [rsp + 0x138]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x450], xmm0
movdqa xmm0, xmmword [rsp + 0x450]
pxor xmm0, xmmword [rsp + 0x460]
movdqa xmmword [rsp + 0x550], xmm0
mov rax, qword [rsp + 0x138]
movdqa xmm0, xmmword [rsp + 0x550]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x240]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x360]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x480], xmm0
mov rax, qword [rsp + 0x140]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x470], xmm0
movdqa xmm0, xmmword [rsp + 0x470]
pxor xmm0, xmmword [rsp + 0x480]
movdqa xmmword [rsp + 0x490], xmm0
mov rax, qword [rsp + 0x140]
movdqa xmm0, xmmword [rsp + 0x490]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x220]
mov rcx, rax
call fcn.14028e65d
xor eax, eax
jmp 0x140194812
cmp qword [0x1401403a8], 0
jne 0x140193417
push rax
pushf
mov eax, 0x822ac7ff
pushf
not eax
add eax, 0xc9a85268
xor eax, 0x8ffc2d75
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xeed91cae
xor eax, 0xed3852bf
rol eax, 0xef
popf
pushf
not eax
add eax, 0xe6cc07dd
xor eax, 0x8c111b6a
rol eax, 0x1f
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0x762fe3a7
pushf
not eax
add eax, 0xd1f8503a
xor eax, 0x93ed5543
rol eax, 0xde
popf
pushf
not eax
add eax, 0x92f90c41
xor eax, 0xabbd035e
rol eax, 0x26
popf
pushf
not eax
add eax, 0x912914dc
xor eax, 0xb8797039
rol eax, 0x29
popf
jmp 0x1401918ae
lea rax, [rsp + 0x3f]
mov rdi, rax
xor eax, eax
mov ecx, 0x7381c2b9
pushf
not ecx
add ecx, 0xe4aaa48f
xor ecx, 0xdd09aa35
rol ecx, 2
popf
pushf
not ecx
add ecx, 0xf52f5b4c
xor ecx, 0xff11fad7
rol ecx, 0xc0
popf
pushf
not ecx
add ecx, 0xf1559c84
xor ecx, 0xb7ab4163
rol ecx, 6
popf
pushf
not ecx
add ecx, 0xf189a6c6
xor ecx, 0xe4e72525
rol ecx, 1
popf
rep stosb byte [rdi], al
lea rax, [rsp + 0x40]
mov rdi, rax
xor eax, eax
mov ecx, 0x32e4a07d
pushf
not ecx
add ecx, 0xbdbff319
xor ecx, 0xe499bcae
rol ecx, 0x7d
popf
pushf
not ecx
add ecx, 0xfcb596ff
xor ecx, 0x863f29c1
rol ecx, 0xdc
popf
pushf
not ecx
add ecx, 0xed8db9de
xor ecx, 0xb3101363
rol ecx, 0xe7
popf
pushf
not ecx
add ecx, 0xe4a3e717
xor ecx, 0xdc5f1025
rol ecx, 0x70
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x3f]
mov byte [rsp + 0xb8], al
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0xc0], al
movabs rax, 0x419f3ca3c0d6fc50
pushf
not rax
add rax, 0x6ee368a3
xor rax, 0x6020c7e0
rol rax, 0x85
popf
pushf
not rax
add rax, 0x72285d71
xor rax, 0x44bcbf5b
rol rax, 0x2d
popf
pushf
not rax
add rax, 0x5187650e
xor rax, 0x7040a96a
rol rax, 0x74
popf
pushf
not rax
add rax, 0x603b3c61
xor rax, 0x559e3f00
rol rax, 0x20
popf
mov qword [rsp + 0x250], rax
movabs rax, 0xa33d595a6cc9b843
pushf
not rax
add rax, 0x4b167b2e
xor rax, 0x4118fb5d
rol rax, 6
popf
pushf
not rax
add rax, 0x7c0b69ba
xor rax, 0x79cf2f3c
rol rax, 0xc5
popf
pushf
not rax
add rax, 0x4298a684
xor rax, 0x77bfd287
rol rax, 0
popf
mov qword [rsp + 0x258], rax
movabs rax, 0x3102fdb135a1e518
pushf
not rax
add rax, 0x408c3b17
xor rax, 0x445ff524
rol rax, 0xfe
popf
pushf
not rax
add rax, 0x65eab103
xor rax, 0x44154269
rol rax, 0x34
popf
pushf
not rax
add rax, 0x685a52d5
xor rax, 0x6a9c73e3
rol rax, 0xe4
popf
pushf
not rax
add rax, 0x6fe7a576
xor rax, 0x5c63852d
rol rax, 0xb6
popf
mov qword [rsp + 0x260], rax
movabs rax, 0x9ac1a4c4a9dffb87
pushf
not rax
add rax, 0x4f8f5101
xor rax, 0x44355a92
rol rax, 0x69
popf
pushf
not rax
add rax, 0x4a936430
xor rax, 0x4fc10562
rol rax, 0x22
popf
mov qword [rsp + 0x268], rax
movabs rax, 0xd8d44ab28abb1be0
pushf
not rax
add rax, 0x58d89918
xor rax, 0x52e8dfcf
rol rax, 0x92
popf
pushf
not rax
add rax, 0x42f6f10b
xor rax, 0x7b140c03
rol rax, 0x19
popf
pushf
not rax
add rax, 0x4accad48
xor rax, 0x6158946d
rol rax, 0xcf
popf
mov qword [rsp + 0x270], rax
movabs rax, 0x44b721603f397db2
pushf
not rax
add rax, 0x4f77ec40
xor rax, 0x410e888a
rol rax, 0x5b
popf
pushf
not rax
add rax, 0x64d3ed87
xor rax, 0x487a9954
rol rax, 0xf2
popf
pushf
not rax
add rax, 0x4106b1b9
xor rax, 0x48ec29e3
rol rax, 0xa0
popf
pushf
not rax
add rax, 0x641fcb11
xor rax, 0x7a6ba660
rol rax, 0xaf
popf
mov qword [rsp + 0x278], rax
movabs rax, 0x582f58dceaae46e1
pushf
not rax
add rax, 0x406ab14b
xor rax, 0x78ba599a
rol rax, 0x53
popf
pushf
not rax
add rax, 0x64033507
xor rax, 0x66cbd659
rol rax, 0xd5
popf
pushf
not rax
add rax, 0x62ed1b1c
xor rax, 0x50ed3bcb
rol rax, 0x11
popf
pushf
not rax
add rax, 0x7289b306
xor rax, 0x506435ff
rol rax, 0xcf
popf
mov qword [rsp + 0x280], rax
movabs rax, 0xf4a9538e6c999512
pushf
not rax
add rax, 0x5c389e15
xor rax, 0x72c9d73d
rol rax, 0xe1
popf
pushf
not rax
add rax, 0x7d53690b
xor rax, 0x6c5afbe1
rol rax, 0x95
popf
mov qword [rsp + 0x288], rax
movabs rax, 0x982a6e9fbff8a5a8
pushf
not rax
add rax, 0x773d4be4
xor rax, 0x5d145837
rol rax, 0x11
popf
pushf
not rax
add rax, 0x6e26c02c
xor rax, 0x7cb75677
rol rax, 0x99
popf
pushf
not rax
add rax, 0x6c0b4946
xor rax, 0x59db8e54
rol rax, 0xf9
popf
pushf
not rax
add rax, 0x68d9ff5c
xor rax, 0x4af377ea
rol rax, 0xdf
popf
mov qword [rsp + 0x290], rax
movabs rax, 0xfb9a8cf0aaef545d
pushf
not rax
add rax, 0x5684ef01
xor rax, 0x52e9805d
rol rax, 6
popf
pushf
not rax
add rax, 0x7e2f6b58
xor rax, 0x731a8c9c
rol rax, 0x5c
popf
pushf
not rax
add rax, 0x708d4c4b
xor rax, 0x40401baf
rol rax, 0x31
popf
pushf
not rax
add rax, 0x4cf8d9af
xor rax, 0x4162bcd5
rol rax, 0x13
popf
mov qword [rsp + 0x298], rax
movabs rax, 0x97835f6446b988d1
pushf
not rax
add rax, 0x4740a397
xor rax, 0x5bcd5147
rol rax, 0x30
popf
pushf
not rax
add rax, 0x6fa5e793
xor rax, 0x699e472d
rol rax, 0x52
popf
pushf
not rax
add rax, 0x7662b3df
xor rax, 0x5ca50e86
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x703b6a84
xor rax, 0x54898879
rol rax, 0x1c
popf
mov qword [rsp + 0x2a0], rax
movabs rax, 0xc2cd734200bf94b4
pushf
not rax
add rax, 0x65426e4a
xor rax, 0x7bbac139
rol rax, 0x79
popf
pushf
not rax
add rax, 0x7fb7f5ce
xor rax, 0x52bbb957
rol rax, 0x61
popf
pushf
not rax
add rax, 0x4a4be6ff
xor rax, 0x55ec8725
rol rax, 0x93
popf
mov qword [rsp + 0x2a8], rax
lea rax, [rsp + 0x41]
mov rdi, rax
xor eax, eax
mov ecx, 0x65f28048
pushf
not ecx
add ecx, 0xe58d0c1a
xor ecx, 0xf1cc0d23
rol ecx, 0xa6
popf
pushf
not ecx
add ecx, 0x9dc68ae4
xor ecx, 0xb9c2b376
rol ecx, 0x65
popf
pushf
not ecx
add ecx, 0xe68d8272
xor ecx, 0xf8eda5f7
rol ecx, 0x91
popf
pushf
not ecx
add ecx, 0xd4809731
xor ecx, 0xd6a7f490
rol ecx, 0xa8
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x41]
mov byte [rsp + 0xc8], al
movdqa xmm0, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0x4b0], xmm0
movdqa xmm0, xmmword [rsp + 0x250]
movdqa xmmword [rsp + 0x4a0], xmm0
movdqa xmm0, xmmword [rsp + 0x4a0]
pxor xmm0, xmmword [rsp + 0x4b0]
movdqa xmmword [rsp + 0x4c0], xmm0
movdqa xmm0, xmmword [rsp + 0x4c0]
movdqa xmmword [rsp + 0x250], xmm0
lea rax, [rsp + 0x260]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x290]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x4e0], xmm0
mov rax, qword [rsp + 0x148]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x4d0], xmm0
movdqa xmm0, xmmword [rsp + 0x4d0]
pxor xmm0, xmmword [rsp + 0x4e0]
movdqa xmmword [rsp + 0x4f0], xmm0
mov rax, qword [rsp + 0x148]
movdqa xmm0, xmmword [rsp + 0x4f0]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x270]
mov qword [rsp + 0x150], rax
lea rax, [rsp + 0x2a0]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x510], xmm0
mov rax, qword [rsp + 0x150]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x500], xmm0
movdqa xmm0, xmmword [rsp + 0x500]
pxor xmm0, xmmword [rsp + 0x510]
movdqa xmmword [rsp + 0x520], xmm0
mov rax, qword [rsp + 0x150]
movdqa xmm0, xmmword [rsp + 0x520]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x250]
mov rcx, rax
call fcn.14028e65d
xor eax, eax
jmp 0x140194812
mov ecx, 0xd360c212
pushf
not ecx
add ecx, 0xa85262ee
xor ecx, 0xdfd84f75
rol ecx, 0x89
popf
pushf
not ecx
add ecx, 0xc7d25b8f
xor ecx, 0xcfce6946
rol ecx, 0x8d
popf
pushf
not ecx
add ecx, 0xd02623c6
xor ecx, 0xddadfa46
rol ecx, 0x68
popf
pushf
not ecx
add ecx, 0xc6f2385d
xor ecx, 0xd33ba77c
rol ecx, 0xf9
popf
jmp 0x140193bff
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x590], rax
mov rax, qword [0x1401403a0]
mov qword [rsp + 0x190], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 0x85f25fc0
pushf
not r9d
add r9d, 0xb008ad58
xor r9d, 0xe5a98ce0
rol r9d, 0xa1
popf
pushf
not r9d
add r9d, 0xd2f633fc
xor r9d, 0xfd8d60ab
rol r9d, 0x9c
popf
pushf
not r9d
add r9d, 0xffe36e1d
xor r9d, 0xf921efd8
rol r9d, 0xbf
popf
pushf
not r9d
add r9d, 0xf95dc618
xor r9d, 0xbb7096aa
rol r9d, 0x31
popf
lea r8, [rsp + 0x50]
mov edx, 0x133874d4
pushf
not edx
add edx, 0xa741dee6
xor edx, 0xcd044fba
rol edx, 0xbc
popf
pushf
not edx
add edx, 0xd1d090ab
xor edx, 0xcd931a2b
rol edx, 0xb0
popf
pushf
not edx
add edx, 0xa478c7f9
xor edx, 0xfff2f64c
rol edx, 0xcf
popf
mov rcx, qword [rsp + 0x110]
jmp 0x140193ce5
call qword [rsp + 0x190]
mov dword [rsp + 0x4c], eax
mov qword [rsp + 0x50], 0
mov rax, qword [0x1401403a0]
mov qword [rsp + 0x170], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 0xf898d87f
pushf
not r9d
add r9d, 0xe6675cbb
xor r9d, 0xaa51308a
rol r9d, 0xcd
popf
pushf
not r9d
add r9d, 0xc4b2bff0
xor r9d, 0xcc1c96fc
rol r9d, 0xca
popf
lea r8, [rsp + 0x50]
mov edx, 0x5848f508
pushf
not edx
add edx, 0xc8e6b613
xor edx, 0x874316ec
rol edx, 0xe2
popf
pushf
not edx
add edx, 0xcbe94acc
xor edx, 0xfba9dfd9
rol edx, 0xe1
popf
pushf
not edx
add edx, 0xe7254441
xor edx, 0x9c64dd12
rol edx, 0x3a
popf
pushf
not edx
add edx, 0xef9e5129
xor edx, 0xff0e710b
rol edx, 0xcc
popf
mov rcx, qword [rsp + 0x110]
jmp 0x140193db4
call qword [rsp + 0x170]
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0xc0000353
je 0x140193dfc
push rax
pushf
mov eax, 0xd6451ddf
pushf
not eax
add eax, 0xdca8a85a
xor eax, 0xe2ca91c4
rol eax, 0x56
popf
pushf
not eax
add eax, 0x95502e42
xor eax, 0xa7d703fb
rol eax, 0xa
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0x2596e7d0
pushf
not eax
add eax, 0x91a4560c
xor eax, 0xaedcc5a7
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xf9cba728
xor eax, 0xa2922404
rol eax, 0x59
popf
jmp 0x1401918ae
cmp qword [rsp + 0x50], 0
je 0x140193e7d
push rax
pushf
mov eax, 0xaed606bc
pushf
not eax
add eax, 0xd78458c4
xor eax, 0xffe0fa39
rol eax, 0x22
popf
pushf
not eax
add eax, 0x8129ba3d
xor eax, 0x9e8aaaa2
rol eax, 0x28
popf
pushf
not eax
add eax, 0xa4ba41b0
xor eax, 0x9f065df2
rol eax, 0x44
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0x8d66d4c1
pushf
not eax
add eax, 0xf11f2170
xor eax, 0xdc31c598
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc44cce97
xor eax, 0xab42abca
rol eax, 0x17
popf
pushf
not eax
add eax, 0xfcd3bb93
xor eax, 0xe44c851d
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xd5238bcc
xor eax, 0xf5bd085f
rol eax, 0xa2
popf
jmp 0x1401918ae
mov dword [rsp + 0x48], 1
push rax
pushf
mov eax, 0x65b7f27d
pushf
not eax
add eax, 0xad7edf4f
xor eax, 0x8f8a2d92
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xbb735fc3
xor eax, 0xd74cff0d
rol eax, 0x7e
popf
jmp 0x1401918ae
mov qword [rsp + 0x50], 1
mov rax, qword [0x1401403a0]
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x20], rax
mov r9d, 0x561594b5
pushf
not r9d
add r9d, 0x923c4e9f
xor r9d, 0x9c32b89c
rol r9d, 0x66
popf
pushf
not r9d
add r9d, 0x9807397c
xor r9d, 0xf6a5934c
rol r9d, 0xdc
popf
pushf
not r9d
add r9d, 0x93cb1825
xor r9d, 0x9d50e32f
rol r9d, 0x4d
popf
lea r8, [rsp + 0x50]
mov edx, 0x18dd653b
pushf
not edx
add edx, 0xdfde8a34
xor edx, 0x84b095a5
rol edx, 0x4c
popf
pushf
not edx
add edx, 0xd3c6a336
xor edx, 0xd04089d8
rol edx, 0xaf
popf
pushf
not edx
add edx, 0xa6d426cb
xor edx, 0xbd42f252
rol edx, 0xe7
popf
mov rcx, qword [rsp + 0x110]
jmp 0x140193fd9
call qword [rsp + 0x178]
mov dword [rsp + 0x4c], eax
cmp qword [rsp + 0x50], 0
jne 0x140194032
push rax
pushf
mov eax, 0xd15cd416
pushf
not eax
add eax, 0x82175e5d
xor eax, 0xa396eee8
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xd4c87b1a
xor eax, 0xd2f513d4
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xc12319ab
xor eax, 0xf05bf601
rol eax, 0xec
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0xdd842175
pushf
not eax
add eax, 0xe60526a5
xor eax, 0xa0dd0256
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x8572a147
xor eax, 0xf17fdf61
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xf37fd655
xor eax, 0xdfecd6b6
rol eax, 0x55
popf
pushf
not eax
add eax, 0xc75599b7
xor eax, 0xf4e9bfa5
rol eax, 0xc8
popf
jmp 0x1401918ae
mov dword [rsp + 0x48], 1
push rax
pushf
mov eax, 0x6304f1fe
pushf
not eax
add eax, 0x9c606801
xor eax, 0xec86dbde
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xc761daab
xor eax, 0xe4df7349
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xafd0e635
xor eax, 0x851a2686
rol eax, 0x5b
popf
jmp 0x1401918ae
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x110]
jmp 0x1401940ea
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
cmp dword [rsp + 0x118], 0
je 0x140194153
push rax
pushf
mov eax, 0x491fa973
pushf
not eax
add eax, 0xd5815ef7
xor eax, 0xb28e235a
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xd56bf5e4
xor eax, 0xc737826b
rol eax, 0x62
popf
pushf
not eax
add eax, 0xc0ac2cbd
xor eax, 0xad9b7f90
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xcc41ac9f
xor eax, 0xeda8d3ea
rol eax, 0xe9
popf
jmp 0x1401918ae
push rax
pushf
mov eax, 0xab4ac01a
pushf
not eax
add eax, 0xe28ed4d9
xor eax, 0x97bb1442
rol eax, 0x11
popf
pushf
not eax
add eax, 0xddc8157d
xor eax, 0xa81777f1
rol eax, 0x48
popf
pushf
not eax
add eax, 0xc7badb57
xor eax, 0xee164c63
rol eax, 0xd9
popf
jmp 0x1401918ae
mov dword [rsp + 0x48], 1
push rax
pushf
mov eax, 0xeea9b36d
pushf
not eax
add eax, 0x83c66930
xor eax, 0xada6e809
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x821e5624
xor eax, 0xdb070a69
rol eax, 0xc2
popf
jmp 0x1401918ae
mov qword [rsp + 0x180], 0
mov rax, qword [0x1401403a8]
mov qword [rsp + 0x188], rax
mov r9d, 0x5c3ca86d
pushf
not r9d
add r9d, 0xe98aa350
xor r9d, 0xe086d991
rol r9d, 0xa2
popf
pushf
not r9d
add r9d, 0x8315e78a
xor r9d, 0xcbe959b4
rol r9d, 0x60
popf
mov r8d, 0xeb8d85d4
pushf
not r8d
add r8d, 0xcd43741f
xor r8d, 0xbcba624c
rol r8d, 0x52
popf
pushf
not r8d
add r8d, 0xe862d30b
xor r8d, 0xf2027bfe
rol r8d, 0xe6
popf
pushf
not r8d
add r8d, 0xc48394b0
xor r8d, 0xaa38b001
rol r8d, 0x6f
popf
pushf
not r8d
add r8d, 0xfddf0fec
xor r8d, 0x81d8c22a
rol r8d, 0x90
popf
lea rdx, [rsp + 0x180]
mov ecx, 0x91885594
pushf
not ecx
add ecx, 0xc685d358
xor ecx, 0xae503ec2
rol ecx, 0xe
popf
pushf
not ecx
add ecx, 0xd4e9d173
xor ecx, 0xe4296ac3
rol ecx, 0xa3
popf
jmp 0x1401942c9
call qword [rsp + 0x188]
cmp dword [rsp + 0x48], 0
je 0x140194810
lea rax, [rsp + 0x42]
mov rdi, rax
xor eax, eax
mov ecx, 0x5a792fe2
pushf
not ecx
add ecx, 0xd2694016
xor ecx, 0x9a639309
rol ecx, 0x56
popf
pushf
not ecx
add ecx, 0xc18f6d58
xor ecx, 0xb2d40877
rol ecx, 0xc2
popf
rep stosb byte [rdi], al
lea rax, [rsp + 0x43]
mov rdi, rax
xor eax, eax
mov ecx, 0x70a6f6a2
pushf
not ecx
add ecx, 0x81d6fbdc
xor ecx, 0x80c0ee24
rol ecx, 0xd8
popf
pushf
not ecx
add ecx, 0xeb4c9b0e
xor ecx, 0xcdbaaa20
rol ecx, 0xff
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x42]
mov byte [rsp + 0xd0], al
movzx eax, byte [rsp + 0x43]
mov byte [rsp + 0xd8], al
movabs rax, 0x52019047a3e44ccb
pushf
not rax
add rax, 0x7c49f62d
xor rax, 0x759554c9
rol rax, 0x5f
popf
pushf
not rax
add rax, 0x50146a8d
xor rax, 0x71c4bd7b
rol rax, 0xfe
popf
pushf
not rax
add rax, 0x6b65a848
xor rax, 0x605dd891
rol rax, 0xa4
popf
pushf
not rax
add rax, 0x7069e3da
xor rax, 0x6695d169
rol rax, 0xf3
popf
mov qword [rsp + 0x200], rax
movabs rax, 0x4b7af63227e4922b
pushf
not rax
add rax, 0x7f3277ab
xor rax, 0x6810f3da
rol rax, 0x92
popf
pushf
not rax
add rax, 0x52bfddef
xor rax, 0x74de0673
rol rax, 0x71
popf
pushf
not rax
add rax, 0x651f13ca
xor rax, 0x64aff5dd
rol rax, 0xa9
popf
mov qword [rsp + 0x208], rax
movabs rax, 0x12df70e82cd691c
pushf
not rax
add rax, 0x62dc4316
xor rax, 0x666b09f4
rol rax, 0xa0
popf
pushf
not rax
add rax, 0x4547745b
xor rax, 0x44c96f78
rol rax, 0xcb
popf
pushf
not rax
add rax, 0x74839064
xor rax, 0x45c63d61
rol rax, 0x2d
popf
mov qword [rsp + 0x210], rax
movabs rax, 0xcf85edc7f5417fd5
pushf
not rax
add rax, 0x77346011
xor rax, 0x4ac6c8c9
rol rax, 0x39
popf
pushf
not rax
add rax, 0x7eecf7ff
xor rax, 0x6fdfbe9b
rol rax, 0xe9
popf
pushf
not rax
add rax, 0x76a314f3
xor rax, 0x448d92d4
rol rax, 0x8a
popf
pushf
not rax
add rax, 0x41549b49
xor rax, 0x4b1f0ca4
rol rax, 0x86
popf
mov qword [rsp + 0x218], rax
movabs rax, 0x9bfdbb9803a779d2
pushf
not rax
add rax, 0x77bc6d3c
xor rax, 0x52961593
rol rax, 0xa9
popf
pushf
not rax
add rax, 0x78fac471
xor rax, 0x6b80184f
rol rax, 0x30
popf
pushf
not rax
add rax, 0x4f393082
xor rax, 0x7d02f485
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x6ba16f44
xor rax, 0x60a3ffc2
rol rax, 3
popf
mov qword [rsp + 0x320], rax
movabs rax, 0x8c41a1dd9b359a44
pushf
not rax
add rax, 0x4c898b3d
xor rax, 0x51548797
rol rax, 0xa
popf
pushf
not rax
add rax, 0x57f83c90
xor rax, 0x589d5997
rol rax, 0xde
popf
pushf
not rax
add rax, 0x4eb74e29
xor rax, 0x5f09615f
rol rax, 0x2a
popf
mov qword [rsp + 0x328], rax
movabs rax, 0x7f820f0789f2a163
pushf
not rax
add rax, 0x7df94278
xor rax, 0x569094b6
rol rax, 0xd5
popf
pushf
not rax
add rax, 0x713a8cd0
xor rax, 0x4a968f34
rol rax, 0x15
popf
mov qword [rsp + 0x330], rax
movabs rax, 0xab8226c381af066e
pushf
not rax
add rax, 0x5e9d8a83
xor rax, 0x4b2ef997
rol rax, 0xd
popf
pushf
not rax
add rax, 0x508cf343
xor rax, 0x765f5728
rol rax, 0x87
popf
mov qword [rsp + 0x338], rax
lea rax, [rsp + 0x44]
mov rdi, rax
xor eax, eax
mov ecx, 0xc1743773
pushf
not ecx
add ecx, 0x91093823
xor ecx, 0xd68f72cb
rol ecx, 0x4d
popf
pushf
not ecx
add ecx, 0xba0d0823
xor ecx, 0xb9fd142e
rol ecx, 0xee
popf
pushf
not ecx
add ecx, 0x870bfaab
xor ecx, 0x834a479b
rol ecx, 0x35
popf
pushf
not ecx
add ecx, 0xeddc4ecf
xor ecx, 0xbdc81b06
rol ecx, 0xbc
popf
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x44]
mov byte [rsp + 0xe0], al
movdqa xmm0, xmmword [rsp + 0x320]
movdqa xmmword [rsp + 0x540], xmm0
movdqa xmm0, xmmword [rsp + 0x200]
movdqa xmmword [rsp + 0x530], xmm0
movdqa xmm0, xmmword [rsp + 0x530]
pxor xmm0, xmmword [rsp + 0x540]
movdqa xmmword [rsp + 0x640], xmm0
movdqa xmm0, xmmword [rsp + 0x640]
movdqa xmmword [rsp + 0x200], xmm0
lea rax, [rsp + 0x210]
mov qword [rsp + 0x158], rax
lea rax, [rsp + 0x330]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x570], xmm0
mov rax, qword [rsp + 0x158]
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x560], xmm0
movdqa xmm0, xmmword [rsp + 0x560]
pxor xmm0, xmmword [rsp + 0x570]
movdqa xmmword [rsp + 0x5e0], xmm0
mov rax, qword [rsp + 0x158]
movdqa xmm0, xmmword [rsp + 0x5e0]
movdqu xmmword [rax], xmm0
lea rax, [rsp + 0x200]
mov rcx, rax
call fcn.14028e65d
xor edx, edx
mov ecx, 0xc202561e
pushf
not ecx
add ecx, 0xcc438cb4
xor ecx, 0x9101a675
rol ecx, 0x8a
popf
pushf
not ecx
add ecx, 0xbe4a485f
xor ecx, 0xe90d62ad
rol ecx, 0xec
popf
pushf
not ecx
add ecx, 0xfcc11621
xor ecx, 0xa24b50fe
rol ecx, 0x85
popf
jmp 0x1401947bb
call qword [sym.imp.KERNEL32.dll_SleepEx]
xor ecx, ecx
jmp 0x1401947c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push rax
pushf
mov eax, 0xd9ab9f51
pushf
not eax
add eax, 0xa7798681
xor eax, 0xab3673a5
rol eax, 0xf
popf
pushf
not eax
add eax, 0x93788437
xor eax, 0xdefc8b13
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xe49f9863
xor eax, 0xa530f012
rol eax, 0xe0
popf
jmp 0x1401918ae
xor eax, eax
add rsp, 0x650
pop rdi
ret