Function at 0x18002e415
Capabilities:
Authenticate hmac
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x8f60f5c6
pushf
not eax
add eax, 0xf1ad933d
xor eax, 0x819345ae
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xc1c7de28
xor eax, 0xa8f27a59
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x8e462599
xor eax, 0xb708dd25
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xc9e51512
xor eax, 0x915dd4af
rol eax, 0xfc
popf
cmp eax, 0x20
jne 0x18002e478
popf
pop rax
jmp 0x18002f9c5
cmp eax, 0
jne 0x18002e487
popf
pop rax
jmp 0x18002e685
cmp eax, 3
jne 0x18002e496
popf
pop rax
jmp 0x18002e867
cmp eax, 1
jne 0x18002e4a5
popf
pop rax
jmp 0x18002e753
cmp eax, 0xd
jne 0x18002e4b4
popf
pop rax
jmp 0x18002ee4c
cmp eax, 0x1a
jne 0x18002e4c3
popf
pop rax
jmp 0x18002f6cd
cmp eax, 0xe
jne 0x18002e4d2
popf
pop rax
jmp 0x18002eebc
cmp eax, 0xb
jne 0x18002e4e1
popf
pop rax
jmp 0x18002ec70
cmp eax, 0x19
jne 0x18002e4f0
popf
pop rax
jmp 0x18002f64b
cmp eax, 8
jne 0x18002e4ff
popf
pop rax
jmp 0x18002eb71
cmp eax, 0x1d
jne 0x18002e50e
popf
pop rax
jmp 0x18002f8b5
cmp eax, 0x17
jne 0x18002e51d
popf
pop rax
jmp 0x18002f493
cmp eax, 0x1c
jne 0x18002e52c
popf
pop rax
jmp 0x18002f770
cmp eax, 0x12
jne 0x18002e53b
popf
pop rax
jmp 0x18002f111
cmp eax, 0x18
jne 0x18002e54a
popf
pop rax
jmp 0x18002f528
cmp eax, 0x11
jne 0x18002e559
popf
pop rax
jmp 0x18002f0c6
cmp eax, 0x1b
jne 0x18002e568
popf
pop rax
jmp 0x18002f705
cmp eax, 0x21
jne 0x18002e577
popf
pop rax
jmp 0x18002fa6f
cmp eax, 0x23
jne 0x18002e586
popf
pop rax
jmp 0x18002fafe
cmp eax, 0x14
jne 0x18002e595
popf
pop rax
jmp 0x18002f2d0
cmp eax, 0xf
jne 0x18002e5a4
popf
pop rax
jmp 0x18002ef76
cmp eax, 0x13
jne 0x18002e5b3
popf
pop rax
jmp 0x18002f1db
cmp eax, 0x15
jne 0x18002e5c2
popf
pop rax
jmp 0x18002f38c
cmp eax, 0x22
jne 0x18002e5d1
popf
pop rax
jmp 0x18002fab3
cmp eax, 0x1e
jne 0x18002e5e0
popf
pop rax
jmp 0x18002f937
cmp eax, 0xc
jne 0x18002e5ef
popf
pop rax
jmp 0x18002ed8c
cmp eax, 7
jne 0x18002e5fe
popf
pop rax
jmp 0x18002ea8d
cmp eax, 5
jne 0x18002e60d
popf
pop rax
jmp 0x18002e94f
cmp eax, 0x1f
jne 0x18002e61c
popf
pop rax
jmp 0x18002f982
cmp eax, 0x10
jne 0x18002e62b
popf
pop rax
jmp 0x18002f00b
cmp eax, 6
jne 0x18002e63a
popf
pop rax
jmp 0x18002ea0c
cmp eax, 9
jne 0x18002e649
popf
pop rax
jmp 0x18002ebd7
cmp eax, 4
jne 0x18002e658
popf
pop rax
jmp 0x18002e8d1
cmp eax, 0x16
jne 0x18002e667
popf
pop rax
jmp 0x18002f435
cmp eax, 2
jne 0x18002e676
popf
pop rax
jmp 0x18002e7a7
cmp eax, 0xa
jne 0x18002e685
popf
pop rax
jmp 0x18002ec67
push rsi
push rdi
push r14
push r15
sub rsp, 0x98
mov rax, qword [0x18000a040]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rdi, rcx
lea rcx, [rsp + 0x50]
jmp 0x18002e6ae
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r14, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x60]
cmp rdi, 0x40000000
jbe 0x18002e6fa
push rax
pushf
mov eax, 0xd07c5d78
pushf
not eax
add eax, 0xdaca7c0b
xor eax, 0xe0f3e413
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xc7928533
xor eax, 0xf216982f
rol eax, 0xf5
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xc1c0dd76
pushf
not eax
add eax, 0xb93b1bb1
xor eax, 0xd891a563
rol eax, 6
popf
pushf
not eax
add eax, 0x9c6458ad
xor eax, 0xcc753d4f
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xae19a8f2
xor eax, 0xdcdb5067
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xe09bffa9
xor eax, 0x8f0700f5
rol eax, 0xfa
popf
jmp 0x18002e469
lea rax, [rdi - 0x40000000]
cmp r14, rax
cmovb r14, rax
push rax
pushf
mov eax, 0x54cccd18
pushf
not eax
add eax, 0xea2abc2e
xor eax, 0xf061351f
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xa19aee7c
xor eax, 0xce5f98da
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x91e90811
xor eax, 0xc7d6d676
rol eax, 0xee
popf
jmp 0x18002e469
mov rsi, qword [0x18000aa40]
lea r15, [rdi + 0x40000000]
cmp rcx, r15
cmovbe r15, rcx
sub r15, 0xfff
test rsi, rsi
je 0x18002e80e
push rax
pushf
mov eax, 0x35dcfcb2
pushf
not eax
add eax, 0xe47a4131
xor eax, 0xdef43f5b
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xf55915ed
xor eax, 0xbacf1f2b
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe8f424c9
xor eax, 0x9fccca84
rol eax, 0x37
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xb3a17551
pushf
not eax
add eax, 0xbc642fc8
xor eax, 0xcfcfd9f2
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x86ebab47
xor eax, 0x8cd516a8
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xce4093e7
xor eax, 0xd0352f73
rol eax, 0x62
popf
pushf
not eax
add eax, 0xec630b65
xor eax, 0xd1bcdf74
rol eax, 0x82
popf
jmp 0x18002e469
cmp rsi, r14
jb 0x18002e89f
push rax
pushf
mov eax, 0xa96de076
pushf
not eax
add eax, 0xaa81b805
xor eax, 0xc2a5ae6a
rol eax, 0xca
popf
pushf
not eax
add eax, 0xb96cbfb0
xor eax, 0xdf952ca1
rol eax, 0xe
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x5940b9f3
pushf
not eax
add eax, 0xc184a6a1
xor eax, 0xfe3b2740
rol eax, 1
popf
pushf
not eax
add eax, 0xf247567a
xor eax, 0xc555be92
rol eax, 0xdf
popf
jmp 0x18002e469
cmp rsi, r15
jae 0x18002e91c
push rax
pushf
mov eax, 0x4723897e
pushf
not eax
add eax, 0xfbfaac27
xor eax, 0xaf443141
rol eax, 0x20
popf
pushf
not eax
add eax, 0xbf9fa943
xor eax, 0x98c77f0f
rol eax, 0xce
popf
pushf
not eax
add eax, 0xd2ab6da4
xor eax, 0xd815de21
rol eax, 0xfc
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xee25f2d2
pushf
not eax
add eax, 0x9c892d8f
xor eax, 0x848acfd0
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xef17c251
xor eax, 0x8ec072a5
rol eax, 0x29
popf
jmp 0x18002e469
cmp qword [rsi + 8], 0
jne 0x18002e9b3
push rax
pushf
mov eax, 0x889cf797
pushf
not eax
add eax, 0x866c1a39
xor eax, 0xdf41ab96
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xbe88af77
xor eax, 0xa5d419c1
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xea3047e1
xor eax, 0xb652fa0d
rol eax, 0xa
popf
pushf
not eax
add eax, 0x903a2675
xor eax, 0xf95d8397
rol eax, 0xc7
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x88946fc0
pushf
not eax
add eax, 0xfd9770f3
xor eax, 0x990432a4
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xcc1bb1e7
xor eax, 0xddfbc3a4
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xb813469a
xor eax, 0xe351a07a
rol eax, 0x74
popf
pushf
not eax
add eax, 0xe2f4d6b9
xor eax, 0xe60e1959
rol eax, 0x8e
popf
jmp 0x18002e469
mov rsi, qword [rsi]
test rsi, rsi
jne 0x18002ea5a
push rax
pushf
mov eax, 0x2a6fdc1f
pushf
not eax
add eax, 0xb48587a0
xor eax, 0x80d304ce
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xb24485bf
xor eax, 0xa4189818
rol eax, 0x85
popf
pushf
not eax
add eax, 0x81fd2de2
xor eax, 0xc3242242
rol eax, 0x20
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x9f30dc3d
pushf
not eax
add eax, 0x95b32a5c
xor eax, 0xe6da61de
rol eax, 0x46
popf
pushf
not eax
add eax, 0xf7fef205
xor eax, 0xe1f30100
rol eax, 0x58
popf
jmp 0x18002e469
mov qword [rsp + 0xc8], rbx
mov rbx, rdi
mov qword [rsp + 0xd0], rbp
mov qword [rsp + 0x90], r12
mov r12d, 0xdb1ea911
pushf
not r12d
add r12d, 0x9019dd04
xor r12d, 0xde7d519c
rol r12d, 0x6d
popf
pushf
not r12d
add r12d, 0xbcfeac50
xor r12d, 0xf0a0deff
rol r12d, 0x72
popf
cmp rdi, r14
jb 0x18002eb2b
push rax
pushf
mov eax, 0xbb6ef7b9
pushf
not eax
add eax, 0x9a1dadf2
xor eax, 0xfb059cf5
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xabe0d3ce
xor eax, 0xaee16e0d
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x94357b88
xor eax, 0xaf753eb3
rol eax, 0x2d
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xc4d5ff60
pushf
not eax
add eax, 0xd6516364
xor eax, 0xd0bc9b03
rol eax, 0x32
popf
pushf
not eax
add eax, 0x8d8b686a
xor eax, 0x8ca270ee
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xe9e04823
xor eax, 0x99132739
rol eax, 0x6e
popf
jmp 0x18002e469
nop dword [rax]
nop word [rax + rax]
push rax
pushf
mov eax, 0x5060e637
pushf
not eax
add eax, 0xf2acfb30
xor eax, 0xbe07787b
rol eax, 0x27
popf
pushf
not eax
add eax, 0xc2212c0d
xor eax, 0xc5408f2a
rol eax, 7
popf
pushf
not eax
add eax, 0xe5eebb3c
xor eax, 0xde8d7267
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x94134a0e
xor eax, 0xb0efbdb5
rol eax, 0xc8
popf
jmp 0x18002e469
mov ebp, dword [rsp + 0x78]
mov rax, rbx
xor edx, edx
div rbp
sub rbx, rdx
sub rbx, rbp
cmp rbx, r14
jb 0x18002ec34
push rax
pushf
mov eax, 0x22b0018b
pushf
not eax
add eax, 0xbfdeeec3
xor eax, 0xd129f4f5
rol eax, 7
popf
pushf
not eax
add eax, 0xed004c61
xor eax, 0xd1749107
rol eax, 4
popf
pushf
not eax
add eax, 0xee95ef33
xor eax, 0xce164b5f
rol eax, 4
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xa841dc8b
pushf
not eax
add eax, 0xae275462
xor eax, 0xeb62e169
rol eax, 0x20
popf
pushf
not eax
add eax, 0xbc9b2fed
xor eax, 0xce139955
rol eax, 0x3d
popf
jmp 0x18002e469
nop word [rax + rax]
mov r8d, 0x2ea341f3
pushf
not r8d
add r8d, 0xd6b0a572
xor r8d, 0xaf13a313
rol r8d, 0x7e
popf
pushf
not r8d
add r8d, 0x83f8ed5d
xor r8d, 0xb95fbb05
rol r8d, 0x58
popf
pushf
not r8d
add r8d, 0xff6cc4a3
xor r8d, 0xcde926bf
rol r8d, 0x5a
popf
pushf
not r8d
add r8d, 0xc03d3b48
xor r8d, 0xb25ed984
rol r8d, 0x65
popf
lea rdx, [rsp + 0x20]
mov rcx, rbx
jmp 0x18002ece3
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x18002ed47
push rax
pushf
mov eax, 0xa61e641f
pushf
not eax
add eax, 0x9dd8878c
xor eax, 0xd694b5cb
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa06db3ab
xor eax, 0xe27c89e0
rol eax, 0x34
popf
pushf
not eax
add eax, 0xef745ac2
xor eax, 0xeffd1ec0
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xae708928
xor eax, 0xa27b59c9
rol eax, 0x23
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xd7e3aeee
pushf
not eax
add eax, 0x9ffcc818
xor eax, 0xa40f282a
rol eax, 1
popf
pushf
not eax
add eax, 0x93b98342
xor eax, 0xa282428b
rol eax, 0x40
popf
pushf
not eax
add eax, 0x922c8df7
xor eax, 0xf91d2a41
rol eax, 0xa1
popf
jmp 0x18002e469
cmp dword [rsp + 0x40], 0x10000
je 0x18002edf3
push rax
pushf
mov eax, 0xe40d8b7a
pushf
not eax
add eax, 0x828c5f09
xor eax, 0xc4980f64
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x93fd5b65
xor eax, 0xa37396f8
rol eax, 0xe
popf
pushf
not eax
add eax, 0xd3562a81
xor eax, 0xccf0e5c2
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x9e2eda91
xor eax, 0x8080452e
rol eax, 0x2c
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x731edf7
pushf
not eax
add eax, 0xa27f3057
xor eax, 0x8d2b5605
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xda58c211
xor eax, 0xb543252f
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xc8433154
xor eax, 0xf721d7ce
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xd7239dba
xor eax, 0xd7b6ed97
rol eax, 0x10
popf
jmp 0x18002e469
mov rbx, qword [rsp + 0x28]
cmp rbx, rbp
jb 0x18002ee89
push rax
pushf
mov eax, 0xa80d8d5f
pushf
not eax
add eax, 0xa1f68fca
xor eax, 0x940adcf5
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xa6cf731d
xor eax, 0xb4902366
rol eax, 0xed
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xd154d054
pushf
not eax
add eax, 0x816192f5
xor eax, 0xa2cb43bc
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd9462402
xor eax, 0xd75443ba
rol eax, 0xaa
popf
jmp 0x18002e469
sub rbx, rbp
cmp rbx, r14
jae 0x18002ef1d
push rax
pushf
mov eax, 0xeeb8d46e
pushf
not eax
add eax, 0x98771863
xor eax, 0xc51ecb61
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x9609a07c
xor eax, 0xb0826d30
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x8fde7752
xor eax, 0x82fe5909
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xe7a53371
xor eax, 0xdd1a63a2
rol eax, 0x75
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xff96c903
pushf
not eax
add eax, 0xa11a06fd
xor eax, 0xdcce323a
rol eax, 0xab
popf
pushf
not eax
add eax, 0x97cfed54
xor eax, 0xb009dd88
rol eax, 0x39
popf
pushf
not eax
add eax, 0xd33b8afc
xor eax, 0xc4d088c5
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xfab0b26e
xor eax, 0xe6233fa2
rol eax, 0x71
popf
jmp 0x18002e469
test rsi, rsi
jne 0x18002efc5
push rax
pushf
mov eax, 0xc0b15f3e
pushf
not eax
add eax, 0xcc2384a2
xor eax, 0xf138d679
rol eax, 0xb
popf
pushf
not eax
add eax, 0xd59a6e30
xor eax, 0xac952f3f
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xed8d7bcd
xor eax, 0x937ae4a0
rol eax, 0xe
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x4703d2d5
pushf
not eax
add eax, 0xa8cdd10e
xor eax, 0xb421e510
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x879a57cd
xor eax, 0x9a539766
rol eax, 0x80
popf
pushf
not eax
add eax, 0xc742d814
xor eax, 0xe6f35c55
rol eax, 0x30
popf
jmp 0x18002e469
cmp rdi, r15
ja 0x18002f06d
push rax
pushf
mov eax, 0xae461aaf
pushf
not eax
add eax, 0xbf51f1f8
xor eax, 0x8e120690
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xdd9db519
xor eax, 0xdafaa291
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb29958bd
xor eax, 0xc03e7014
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xb628b116
xor eax, 0xb04c523a
rol eax, 0xf6
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xfced773d
pushf
not eax
add eax, 0xb7abab10
xor eax, 0xe5f69271
rol eax, 0xf
popf
pushf
not eax
add eax, 0xdb679259
xor eax, 0x97ea0519
rol eax, 0xef
popf
pushf
not eax
add eax, 0xefdd1763
xor eax, 0x9bb76bf6
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xd0131a5a
xor eax, 0xb1ddc356
rol eax, 0xfe
popf
jmp 0x18002e469
nop dword [rax + rax]
push rax
pushf
mov eax, 0x1f0b49e8
pushf
not eax
add eax, 0xfb8ed08d
xor eax, 0xa31f7ace
rol eax, 0x52
popf
pushf
not eax
add eax, 0x82d9ece3
xor eax, 0xee779cc5
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x96a86a9d
xor eax, 0xd2ada707
rol eax, 0x45
popf
jmp 0x18002e469
mov ebp, dword [rsp + 0x78]
xor edx, edx
mov rax, rdi
mov ebx, ebp
div rbp
mov eax, ebp
sub rax, rdx
push rdi
not rdi
sub rax, rdi
pop rdi
sub rax, 1
mov rdi, rax
cmp rax, r15
ja 0x18002f195
push rax
pushf
mov eax, 0xd30dd816
pushf
not eax
add eax, 0xd42bc7fa
xor eax, 0x986452f6
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x817384a3
xor eax, 0xc47c4154
rol eax, 0x90
popf
pushf
not eax
add eax, 0xdbe8f291
xor eax, 0xd7193630
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc9cba5b6
xor eax, 0xf53ade9a
rol eax, 0x5d
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xbc9ea389
pushf
not eax
add eax, 0xf17c0b0a
xor eax, 0x86665e8f
rol eax, 0x10
popf
pushf
not eax
add eax, 0x8d3d13f6
xor eax, 0xcf5e593d
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x9970f79b
xor eax, 0xb58a1acc
rol eax, 0xe8
popf
jmp 0x18002e469
mov r8d, 0x503cecf0
pushf
not r8d
add r8d, 0xb5d4c6e1
xor r8d, 0x81d1f702
rol r8d, 0xeb
popf
pushf
not r8d
add r8d, 0xcd92abec
xor r8d, 0xa94e60d5
rol r8d, 5
popf
pushf
not r8d
add r8d, 0x83215a9c
xor r8d, 0xd86ad715
rol r8d, 0x51
popf
lea rdx, [rsp + 0x20]
mov rcx, rdi
jmp 0x18002f235
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x18002f28a
push rax
pushf
mov eax, 0x90eee1f7
pushf
not eax
add eax, 0x956cfc94
xor eax, 0xb1e059ac
rol eax, 0x51
popf
pushf
not eax
add eax, 0xc9ec4c6e
xor eax, 0xdc4b56de
rol eax, 0x43
popf
pushf
not eax
add eax, 0x9db95981
xor eax, 0x9fab8e04
rol eax, 0xb8
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x1e06d414
pushf
not eax
add eax, 0xe7f425ce
xor eax, 0xb3eac111
rol eax, 0x29
popf
pushf
not eax
add eax, 0xc16aa724
xor eax, 0x905511ef
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xe3653b9c
xor eax, 0xbf843a8d
rol eax, 0x15
popf
jmp 0x18002e469
cmp dword [rsp + 0x40], 0x10000
je 0x18002f333
push rax
pushf
mov eax, 0xa2690164
pushf
not eax
add eax, 0xac276f84
xor eax, 0x890e8543
rol eax, 0x24
popf
pushf
not eax
add eax, 0xb22b1674
xor eax, 0xf0b10263
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xacd3ea44
xor eax, 0xbacbdd6f
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xaa95075b
xor eax, 0xccca74eb
rol eax, 0x31
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xca12b432
pushf
not eax
add eax, 0xa84ac0ec
xor eax, 0x9efe16ba
rol eax, 0x34
popf
pushf
not eax
add eax, 0x93863fa5
xor eax, 0x8dbf0dd0
rol eax, 9
popf
pushf
not eax
add eax, 0xcc32b363
xor eax, 0xa0d7ab4d
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xb320e0d5
xor eax, 0xa2879e49
rol eax, 0x6b
popf
jmp 0x18002e469
xor edx, edx
lea edi, [rbp - 1]
add rdi, qword [rsp + 0x38]
add rdi, qword [rsp + 0x20]
mov rax, rdi
div rbx
sub rdi, rdx
cmp rdi, r15
jbe 0x18002f3ef
push rax
pushf
mov eax, 0xf0821732
pushf
not eax
add eax, 0xa8c80daf
xor eax, 0x9279a697
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xd1cf6f48
xor eax, 0xa4a1fee3
rol eax, 0x68
popf
pushf
not eax
add eax, 0x8be867b4
xor eax, 0xf0386ab0
rol eax, 0xa1
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x42fce92d
pushf
not eax
add eax, 0xe704b2c1
xor eax, 0xcc0f2645
rol eax, 0x39
popf
pushf
not eax
add eax, 0xa9c62f34
xor eax, 0xbadb80c6
rol eax, 0x89
popf
pushf
not eax
add eax, 0xbf7e7f53
xor eax, 0xe4435acf
rol eax, 0xc1
popf
jmp 0x18002e469
jmp 0x18002fab3
test rbx, rbx
je 0x18002f4cf
push rax
pushf
mov eax, 0x297ea67b
pushf
not eax
add eax, 0x9b1f8801
xor eax, 0xec824d7c
rol eax, 0x88
popf
pushf
not eax
add eax, 0xedc255c4
xor eax, 0xcb156c26
rol eax, 0x57
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x1a62f3c0
pushf
not eax
add eax, 0x80e70f24
xor eax, 0xc8b8f4bd
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xfc834a2a
xor eax, 0xb9733487
rol eax, 0x45
popf
pushf
not eax
add eax, 0xe8c18a87
xor eax, 0x80a9e52b
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xef8e38ea
xor eax, 0xc8566e78
rol eax, 0x77
popf
jmp 0x18002e469
mov r9d, r12d
mov edx, 0x30b4d831
pushf
not edx
add edx, 0x9ec1e9bd
xor edx, 0xb221251b
rol edx, 0x8b
popf
pushf
not edx
add edx, 0xbca689cc
xor edx, 0xbca8f718
rol edx, 0xe5
popf
pushf
not edx
add edx, 0xe0155bbc
xor edx, 0xeab69d7f
rol edx, 7
popf
mov r8d, 0x50479028
pushf
not r8d
add r8d, 0xbb71bf60
xor r8d, 0x90e28f2e
rol r8d, 0xf2
popf
pushf
not r8d
add r8d, 0xecdd9e3b
xor r8d, 0xd33189c6
rol r8d, 0xab
popf
pushf
not r8d
add r8d, 0xfc00d2e7
xor r8d, 0xdac9dcdc
rol r8d, 0xa8
popf
mov rcx, rbx
jmp 0x18002f5c4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x18002f605
push rax
pushf
mov eax, 0xfd4bd3bb
pushf
not eax
add eax, 0x80d7b3d5
xor eax, 0xecf66b22
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x8fe1ba2a
xor eax, 0x98e9e170
rol eax, 0x22
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xb46545d4
pushf
not eax
add eax, 0xeec5c9a7
xor eax, 0xfd76ebab
rol eax, 0x83
popf
pushf
not eax
add eax, 0xaa1313db
xor eax, 0x903a3844
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xf2b28c07
xor eax, 0xaba75d34
rol eax, 0x3c
popf
jmp 0x18002e469
cmp rbx, r14
jae 0x18002f69a
push rax
pushf
mov eax, 0xbe0e3e5c
pushf
not eax
add eax, 0xfa7605dc
xor eax, 0x961ba420
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xf6ccd548
xor eax, 0xd5a02dcb
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x9c72dcd2
xor eax, 0xf35c1383
rol eax, 0x62
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x81e35bfb
pushf
not eax
add eax, 0xd68180bb
xor eax, 0xe512ab77
rol eax, 0x95
popf
pushf
not eax
add eax, 0xafb6e63d
xor eax, 0xb6a0a6ab
rol eax, 0x77
popf
jmp 0x18002e469
jmp 0x18002f00b
test rdi, rdi
je 0x18002f73d
push rax
pushf
mov eax, 0x952b5d1d
pushf
not eax
add eax, 0x97a72546
xor eax, 0xca8da0a0
rol eax, 0x42
popf
pushf
not eax
add eax, 0xdbadb55f
xor eax, 0xb7d413db
rol eax, 0x5d
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xc7a6635f
pushf
not eax
add eax, 0xa5ce0be2
xor eax, 0xc0914431
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xbeee2d9b
xor eax, 0xa03742c7
rol eax, 0xbc
popf
jmp 0x18002e469
mov r9d, r12d
mov edx, 0x21c758d3
pushf
not edx
add edx, 0xcb8b0276
xor edx, 0xb2a736a8
rol edx, 0xe
popf
pushf
not edx
add edx, 0xf24327d2
xor edx, 0x92b5b3b5
rol edx, 0xc4
popf
pushf
not edx
add edx, 0xe87c42bb
xor edx, 0xbe009fb9
rol edx, 0x27
popf
pushf
not edx
add edx, 0x89a7f23f
xor edx, 0xf3dec3d9
rol edx, 0xe9
popf
mov r8d, 0xa762830b
pushf
not r8d
add r8d, 0xef6546ad
xor r8d, 0xa563a064
rol r8d, 0x36
popf
pushf
not r8d
add r8d, 0xc801a96c
xor r8d, 0xd6865115
rol r8d, 0x4b
popf
mov rcx, rdi
jmp 0x18002f808
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x18002f85c
push rax
pushf
mov eax, 0x368e9592
pushf
not eax
add eax, 0xa81a6648
xor eax, 0xf856c33c
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xb59f4762
xor eax, 0xdcd3fe26
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xbe58d4ff
xor eax, 0xdd7290f7
rol eax, 0xf0
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xefca1d7e
pushf
not eax
add eax, 0xad3ec2c2
xor eax, 0xee77f3db
rol eax, 0xab
popf
pushf
not eax
add eax, 0xb4d2b6e9
xor eax, 0x845990ac
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xc7d3c02e
xor eax, 0x8d1dbf8c
rol eax, 0x62
popf
pushf
not eax
add eax, 0xabfa3267
xor eax, 0x87a00244
rol eax, 0x60
popf
jmp 0x18002e469
cmp rdi, r15
jbe 0x18002f8f1
push rax
pushf
mov eax, 0x1cc6d1f
pushf
not eax
add eax, 0x9476f29f
xor eax, 0x93043c23
rol eax, 0x15
popf
pushf
not eax
add eax, 0xde4e448d
xor eax, 0xbdce0eb5
rol eax, 0xc9
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0x579ff398
pushf
not eax
add eax, 0xd6953e60
xor eax, 0xa814ba79
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xe953ee69
xor eax, 0xd23be592
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xdcd2a6e5
xor eax, 0xe9df4f12
rol eax, 0xac
popf
jmp 0x18002e469
jmp 0x18002fab3
xor edx, edx
lea rcx, [rsi + 0x40]
mov dword [rsi + 0x10], edx
nop dword [rax]
push rax
pushf
mov eax, 0x606c9a8a
pushf
not eax
add eax, 0xee2393cc
xor eax, 0xd21a5584
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xfb1e9e06
xor eax, 0xd025389f
rol eax, 0x93
popf
jmp 0x18002e469
mov qword [rcx], rdx
mov rax, rcx
mov qword [rsi + 8], rcx
add r12, 0x40
add rcx, 0x40
mov rdx, rax
cmp r12, 0xfc0
jbe 0x18002fa29
push rax
pushf
mov eax, 0xd4aff031
pushf
not eax
add eax, 0x9f700d51
xor eax, 0xe44fc90d
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb4bb3bbf
xor eax, 0x8e748057
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xc41b5859
xor eax, 0x96d01a4e
rol eax, 0xc7
popf
jmp 0x18002e469
push rax
pushf
mov eax, 0xf9dfb73e
pushf
not eax
add eax, 0xa6ef12d5
xor eax, 0xaaeac290
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xf2295b3e
xor eax, 0xa6efb602
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xec2c2df9
xor eax, 0xc4a706eb
rol eax, 0xfd
popf
jmp 0x18002e469
mov rax, qword [0x18000aa40]
mov qword [rsi], rax
mov qword [0x18000aa40], rsi
push rax
pushf
mov eax, 0x3832cce2
pushf
not eax
add eax, 0xa3c76be7
xor eax, 0xa2c9d693
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xa96bac3d
xor eax, 0xb260030a
rol eax, 0x6c
popf
jmp 0x18002e469
mov r12, qword [rsp + 0x90]
mov rbp, qword [rsp + 0xd0]
mov rbx, qword [rsp + 0xc8]
push rax
pushf
mov eax, 0x6517f1ba
pushf
not eax
add eax, 0xddcef882
xor eax, 0xf4f8bd14
rol eax, 3
popf
pushf
not eax
add eax, 0xfcabc3ad
xor eax, 0x9a2dedd0
rol eax, 0x1a
popf
jmp 0x18002e469
mov rax, rsi
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.18001de15
add rsp, 0x98
pop r15
pop r14
pop rdi
pop rsi
ret