Function at 0x1402af205
Capabilities:
Contain obfuscated stackstrings
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0x6aff8ddc
pushf
not eax
add eax, 0xdec786db
xor eax, 0x9b2b9c05
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xd4fb4578
xor eax, 0xb3a2e5c8
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xe44389b7
xor eax, 0xb222cd01
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xf1307e65
xor eax, 0xa2c38e4d
rol eax, 0xfd
popf
cmp eax, 0x29
jne 0x1402af268
popf
pop rax
jmp 0x1402b0bd8
cmp eax, 0
jne 0x1402af277
popf
pop rax
jmp 0x1402af574
cmp eax, 3
jne 0x1402af286
popf
pop rax
jmp 0x1402af78b
cmp eax, 1
jne 0x1402af295
popf
pop rax
jmp 0x1402af691
cmp eax, 0xd
jne 0x1402af2a4
popf
pop rax
jmp 0x1402afcde
cmp eax, 0x1a
jne 0x1402af2b3
popf
pop rax
jmp 0x1402b0353
cmp eax, 0xe
jne 0x1402af2c2
popf
pop rax
jmp 0x1402afdd7
cmp eax, 0x31
jne 0x1402af2d1
popf
pop rax
jmp 0x1402b0f3f
cmp eax, 0x19
jne 0x1402af2e0
popf
pop rax
jmp 0x1402b02e3
cmp eax, 8
jne 0x1402af2ef
popf
pop rax
jmp 0x1402af9bb
cmp eax, 0x2a
jne 0x1402af2fe
popf
pop rax
jmp 0x1402b0c24
cmp eax, 0x17
jne 0x1402af30d
popf
pop rax
jmp 0x1402b01ef
cmp eax, 0x1c
jne 0x1402af31c
popf
pop rax
jmp 0x1402b0416
cmp eax, 0x2e
jne 0x1402af32b
popf
pop rax
jmp 0x1402b0e4d
cmp eax, 0x18
jne 0x1402af33a
popf
pop rax
jmp 0x1402b025e
cmp eax, 0x2b
jne 0x1402af349
popf
pop rax
jmp 0x1402b0cb9
cmp eax, 0x1b
jne 0x1402af358
popf
pop rax
jmp 0x1402b03b8
cmp eax, 0x2d
jne 0x1402af367
popf
pop rax
jmp 0x1402b0df1
cmp eax, 0x23
jne 0x1402af376
popf
pop rax
jmp 0x1402b088f
cmp eax, 0x25
jne 0x1402af385
popf
pop rax
jmp 0x1402b09bc
cmp eax, 0x32
jne 0x1402af394
popf
pop rax
jmp 0x1402b0f8b
cmp eax, 0x13
jne 0x1402af3a3
popf
pop rax
jmp 0x1402b0029
cmp eax, 0x33
jne 0x1402af3b2
popf
pop rax
jmp 0x1402b0fd7
cmp eax, 0x24
jne 0x1402af3c1
popf
pop rax
jmp 0x1402b092a
cmp eax, 0x1e
jne 0x1402af3d0
popf
pop rax
jmp 0x1402b0558
cmp eax, 0xc
jne 0x1402af3df
popf
pop rax
jmp 0x1402afc36
cmp eax, 0x26
jne 0x1402af3ee
popf
pop rax
jmp 0x1402b09f4
cmp eax, 0x27
jne 0x1402af3fd
popf
pop rax
jmp 0x1402b0a88
cmp eax, 0x30
jne 0x1402af40c
popf
pop rax
jmp 0x1402b0f06
cmp eax, 0x10
jne 0x1402af41b
popf
pop rax
jmp 0x1402aff29
cmp eax, 0x2c
jne 0x1402af42a
popf
pop rax
jmp 0x1402b0d63
cmp eax, 9
jne 0x1402af439
popf
pop rax
jmp 0x1402afaaa
cmp eax, 4
jne 0x1402af448
popf
pop rax
jmp 0x1402af7fa
cmp eax, 0x16
jne 0x1402af457
popf
pop rax
jmp 0x1402b01af
cmp eax, 0x28
jne 0x1402af466
popf
pop rax
jmp 0x1402b0b4a
cmp eax, 0xa
jne 0x1402af475
popf
pop rax
jmp 0x1402afb33
cmp eax, 0x22
jne 0x1402af484
popf
pop rax
jmp 0x1402b074b
cmp eax, 0x14
jne 0x1402af493
popf
pop rax
jmp 0x1402b00ac
cmp eax, 7
jne 0x1402af4a2
popf
pop rax
jmp 0x1402af913
cmp eax, 0x34
jne 0x1402af4b1
popf
pop rax
jmp 0x1402b1023
cmp eax, 2
jne 0x1402af4c0
popf
pop rax
jmp 0x1402af6c8
cmp eax, 0x20
jne 0x1402af4cf
popf
pop rax
jmp 0x1402b0653
cmp eax, 0x1d
jne 0x1402af4de
popf
pop rax
jmp 0x1402b04ab
cmp eax, 0x11
jne 0x1402af4ed
popf
pop rax
jmp 0x1402affa8
cmp eax, 6
jne 0x1402af4fc
popf
pop rax
jmp 0x1402af8a2
cmp eax, 0x2f
jne 0x1402af50b
popf
pop rax
jmp 0x1402b0e98
cmp eax, 0x12
jne 0x1402af51a
popf
pop rax
jmp 0x1402afff1
cmp eax, 0x21
jne 0x1402af529
popf
pop rax
jmp 0x1402b06b6
cmp eax, 0x1f
jne 0x1402af538
popf
pop rax
jmp 0x1402b0617
cmp eax, 0xb
jne 0x1402af547
popf
pop rax
jmp 0x1402afbd8
cmp eax, 0xf
jne 0x1402af556
popf
pop rax
jmp 0x1402afe7f
cmp eax, 0x15
jne 0x1402af565
popf
pop rax
jmp 0x1402b0125
cmp eax, 5
jne 0x1402af574
popf
pop rax
jmp 0x1402af890
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1c0
mov rax, qword [0x14023c9c0]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov rbx, rcx
mov qword [rbp - 0x60], rcx
xor r12d, r12d
xor ecx, ecx
call fcn.1402c0c09
mov r14, rax
lea r13d, [r12 + 0xf]
mov r15d, 0x7f04c0c0
pushf
not r15d
add r15d, 0xe4f67bbd
xor r15d, 0xf3a71a8a
rol r15d, 0xf5
popf
pushf
not r15d
add r15d, 0xde69ca25
xor r15d, 0xcb96ff50
rol r15d, 0x32
popf
test rax, rax
je 0x1402af65e
push rax
pushf
mov eax, 0xec997baa
pushf
not eax
add eax, 0xfbe126d8
xor eax, 0x87af6504
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd17e9002
xor eax, 0x9fc70009
rol eax, 0xd
popf
pushf
not eax
add eax, 0xe2f43426
xor eax, 0xf0f232e6
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x904bd53c
xor eax, 0xeae44b81
rol eax, 0xeb
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xd6ddb00c
pushf
not eax
add eax, 0xfa20ec77
xor eax, 0x9d9ac38a
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xa6011545
xor eax, 0xd6020f49
rol eax, 0xe1
popf
jmp 0x1402af259
or rsi, 0xffffffffffffffff
push rax
pushf
mov eax, 0xec919b6e
pushf
not eax
add eax, 0xb8ebc8d8
xor eax, 0x802947f3
rol eax, 0xda
popf
pushf
not eax
add eax, 0xfbc31454
xor eax, 0x921146a9
rol eax, 0xea
popf
jmp 0x1402af259
mov r8d, 0xd76ca104
pushf
not r8d
add r8d, 0xdd4463ce
xor r8d, 0xf941d43b
rol r8d, 0x99
popf
pushf
not r8d
add r8d, 0x9ffb6eba
xor r8d, 0x84dee065
rol r8d, 0x71
popf
pushf
not r8d
add r8d, 0xd8fb7068
xor r8d, 0xf7266e6d
rol r8d, 0x87
popf
pushf
not r8d
add r8d, 0x963948dd
xor r8d, 0x8efae72a
rol r8d, 0xd4
popf
lea rdx, [rbp - 0x50]
mov rcx, r14
call fcn.1402b7f8e
lea rcx, [rbp - 0x50]
mov rax, rsi
push rax
pushf
mov eax, 0xa9998fec
pushf
not eax
add eax, 0xe4a53009
xor eax, 0xe94a28ae
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x8f8dd758
xor eax, 0x83ad8408
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xbcea852c
xor eax, 0xce14bced
rol eax, 0x6f
popf
jmp 0x1402af259
inc rax
cmp byte [rcx + rax], r12b
jne 0x1402af7c7
push rax
pushf
mov eax, 0x44b5a8a3
pushf
not eax
add eax, 0xd1928d1c
xor eax, 0x9b75bca6
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xaaf1d506
xor eax, 0xfd35a5b3
rol eax, 0xa8
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x27addaf0
pushf
not eax
add eax, 0x8685184a
xor eax, 0xe1152d17
rol eax, 0x12
popf
pushf
not eax
add eax, 0xebb0955b
xor eax, 0xaa769652
rol eax, 0xb0
popf
jmp 0x1402af259
lea r15, [rbp - 0x50]
push rax
not rax
sub r15, rax
pop rax
sub r15, 1
lea rdi, [rbp - 0x50]
lea rax, [rbp - 0x50]
cmp rax, r15
je 0x1402af85d
push rax
pushf
mov eax, 0xcd1d2dad
pushf
not eax
add eax, 0xa7c5172f
xor eax, 0xccfafb0f
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xfa4571cd
xor eax, 0xd4616307
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xd6e354a8
xor eax, 0x983f5e68
rol eax, 0xdb
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x664b255e
pushf
not eax
add eax, 0xcbdc2fe2
xor eax, 0xb8ce8293
rol eax, 0xae
popf
pushf
not eax
add eax, 0x95408280
xor eax, 0xb33c4be8
rol eax, 0xdb
popf
jmp 0x1402af259
movsx ecx, byte [rdi]
call fcn.14008f964
mov byte [rdi], al
inc rdi
cmp rdi, r15
jne 0x1402af890
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
lea rax, [rbp - 0x50]
mov r8, rsi
push rax
pushf
mov eax, 0x12e1a0dc
pushf
not eax
add eax, 0xa848d987
xor eax, 0xb5099221
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xc70d3764
xor eax, 0xa52055d4
rol eax, 0x36
popf
pushf
not eax
add eax, 0xa3dd5855
xor eax, 0x9be2ddee
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x84d45014
xor eax, 0xaa53f07b
rol eax, 1
popf
jmp 0x1402af259
inc r8
cmp byte [rax + r8], r12b
jne 0x1402af975
push rax
pushf
mov eax, 0xf3050607
pushf
not eax
add eax, 0x99f1a560
xor eax, 0x98334bd4
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xb4ef18d0
xor eax, 0xa8cf028e
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x8109640f
xor eax, 0x9413c6d2
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xd4d9af5a
xor eax, 0xf34b087d
rol eax, 0x80
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xbbba3e03
pushf
not eax
add eax, 0xafbde285
xor eax, 0xa3fd86ab
rol eax, 9
popf
pushf
not eax
add eax, 0xf8d94455
xor eax, 0xedda4aec
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xdb7dd635
xor eax, 0x87da83f0
rol eax, 0x8f
popf
jmp 0x1402af259
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x20]
call fcn.1400030c0
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.1400055c4
mov rdi, rax
mov rdx, qword [rsp + 0x38]
mov r15d, 0x2ae409a0
pushf
not r15d
add r15d, 0xede7a488
xor r15d, 0xddfdb3e5
rol r15d, 0x5f
popf
pushf
not r15d
add r15d, 0xe51e85c3
xor r15d, 0xd5977141
rol r15d, 0x59
popf
cmp rdx, r13
jbe 0x1402afa51
push rax
pushf
mov eax, 0xc4caf7c4
pushf
not eax
add eax, 0xd193bb85
xor eax, 0xf644fd95
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x8d6e52dc
xor eax, 0x92e28486
rol eax, 0xf4
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x9d86dd80
pushf
not eax
add eax, 0xa527f267
xor eax, 0xe479343f
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xaa7be923
xor eax, 0xc7394c50
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xbccd903f
xor eax, 0xb15415d2
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xc01620ac
xor eax, 0x91b4d862
rol eax, 0xa9
popf
jmp 0x1402af259
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, r15
jb 0x1402afaed
push rax
pushf
mov eax, 0x88c4e0ea
pushf
not eax
add eax, 0xb8325816
xor eax, 0xa47fdc34
rol eax, 0x84
popf
pushf
not eax
add eax, 0x84b3f93c
xor eax, 0xd3895343
rol eax, 0xd7
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x35ec2f93
pushf
not eax
add eax, 0xa8c6925e
xor eax, 0xa55430c3
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xcbc31621
xor eax, 0xed5e486b
rol eax, 0x85
popf
pushf
not eax
add eax, 0x9812e21f
xor eax, 0xa79b27c7
rol eax, 0x5a
popf
jmp 0x1402af259
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1402afba5
push rax
pushf
mov eax, 0xac8cef83
pushf
not eax
add eax, 0xa5cd7d34
xor eax, 0xf62e801a
rol eax, 0x21
popf
pushf
not eax
add eax, 0xf16bd0c4
xor eax, 0x984a7fcb
rol eax, 0x98
popf
pushf
not eax
add eax, 0x9c5220b7
xor eax, 0x929bbe32
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xbbd6f69c
xor eax, 0x8688854c
rol eax, 0x3b
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x2a6ca9a3
pushf
not eax
add eax, 0xc4b5dc6f
xor eax, 0xdeb5838b
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xd5f0f9d2
xor eax, 0xcd5723a9
rol eax, 0x53
popf
jmp 0x1402af259
call fcn.14008842c
push rax
pushf
mov eax, 0x3c7e2ad
pushf
not eax
add eax, 0xfa9cd2d4
xor eax, 0x94b3a756
rol eax, 0x44
popf
pushf
not eax
add eax, 0xf8d91843
xor eax, 0xb4eb2ab6
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x86567cf4
xor eax, 0xa4c3c3ba
rol eax, 0x38
popf
pushf
not eax
add eax, 0xbc092d48
xor eax, 0xe84e1f75
rol eax, 0xdd
popf
jmp 0x1402af259
cmp rdi, rsi
jne 0x1402afc85
push rax
pushf
mov eax, 0xc9e155a7
pushf
not eax
add eax, 0xc7e64f3c
xor eax, 0xef9d42d7
rol eax, 8
popf
pushf
not eax
add eax, 0xcb0c2de2
xor eax, 0xf2b862f3
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xd3441a7c
xor eax, 0x970591e3
rol eax, 0x1f
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x1e3999c1
pushf
not eax
add eax, 0xbc7c65a5
xor eax, 0xf4bde73d
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xcc76e06b
xor eax, 0x81479bd2
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x81a6517f
xor eax, 0x98b609f7
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xac499cbc
xor eax, 0x97f84efd
rol eax, 0x69
popf
jmp 0x1402af259
mov edx, 0x209aab3b
pushf
not edx
add edx, 0x825ceaf3
xor edx, 0xc13995be
rol edx, 0x6a
popf
pushf
not edx
add edx, 0xa98a2f56
xor edx, 0xe3656240
rol edx, 0x13
popf
pushf
not edx
add edx, 0xdb824d1e
xor edx, 0x86ef8062
rol edx, 0x3a
popf
mov rcx, r14
jmp 0x1402afd26
call qword [sym.imp.USER32.dll_GetWindow]
mov r14, rax
test rax, rax
jne 0x1402afd91
push rax
pushf
mov eax, 0xb887bd48
pushf
not eax
add eax, 0xd4e19c05
xor eax, 0x995bd6b2
rol eax, 0x72
popf
pushf
not eax
add eax, 0x8ee4ebec
xor eax, 0x8a153054
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xef575faa
xor eax, 0xd1c907fd
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xa81f32a7
xor eax, 0x9beeae12
rol eax, 0xf4
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x392ca1cb
pushf
not eax
add eax, 0xb3512be5
xor eax, 0xf3803aa1
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf24ba5d5
xor eax, 0xbbc5a986
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x88c3abfc
xor eax, 0x9c1c85e3
rol eax, 0xfb
popf
jmp 0x1402af259
mov rdx, qword [rbx + 0x18]
cmp rdx, r13
jbe 0x1402afe39
push rax
pushf
mov eax, 0xe2804b95
pushf
not eax
add eax, 0xa00e1215
xor eax, 0xc727ab40
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xc189c548
xor eax, 0x893ee39e
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xd0fe13cf
xor eax, 0xc349fb84
rol eax, 0xa
popf
pushf
not eax
add eax, 0xe1981918
xor eax, 0x856c1b9c
rol eax, 0x8c
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xcd35ad2c
pushf
not eax
add eax, 0xcad5e801
xor eax, 0x8d6cedd4
rol eax, 0x51
popf
pushf
not eax
add eax, 0xf00d33e2
xor eax, 0x8c8d9824
rol eax, 0xef
popf
pushf
not eax
add eax, 0xdaa32c85
xor eax, 0xf56cc724
rol eax, 0x5b
popf
jmp 0x1402af259
inc rdx
mov rcx, qword [rbx]
cmp rdx, r15
jb 0x1402afed0
push rax
pushf
mov eax, 0x3ec3a747
pushf
not eax
add eax, 0x851b96d4
xor eax, 0xc26916d3
rol eax, 0x31
popf
pushf
not eax
add eax, 0xa3a2e6bd
xor eax, 0x9b48da9d
rol eax, 0x60
popf
pushf
not eax
add eax, 0xdbe09045
xor eax, 0xb0358b22
rol eax, 0x5d
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xdf18c2bf
pushf
not eax
add eax, 0xcc87ef1b
xor eax, 0x87da1ef9
rol eax, 0x19
popf
pushf
not eax
add eax, 0xbed55081
xor eax, 0xd30bf670
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xda786698
xor eax, 0x84253c0d
rol eax, 0xff
popf
pushf
not eax
add eax, 0xa4cfa070
xor eax, 0xa6a7b9d5
rol eax, 0x45
popf
jmp 0x1402af259
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1402aff75
push rax
pushf
mov eax, 0xa09ceb85
pushf
not eax
add eax, 0xceacc40f
xor eax, 0xf90ac325
rol eax, 0x75
popf
pushf
not eax
add eax, 0x85ba7f76
xor eax, 0x901f9eda
rol eax, 0x41
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x35bf5e64
pushf
not eax
add eax, 0xab51d67c
xor eax, 0x9fdee96e
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xef1b3aa4
xor eax, 0x90a6877f
rol eax, 0xb3
popf
jmp 0x1402af259
mov rcx, r8
push rax
pushf
mov eax, 0xc778a8f5
pushf
not eax
add eax, 0x876470ae
xor eax, 0xb5a750a2
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x9b21128a
xor eax, 0xfa6aa707
rol eax, 0x54
popf
pushf
not eax
add eax, 0xfc887420
xor eax, 0xcf2569db
rol eax, 2
popf
jmp 0x1402af259
call fcn.14008842c
push rax
pushf
mov eax, 0x5656d6be
pushf
not eax
add eax, 0xbe68ab1a
xor eax, 0xa6ee8349
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xfc4b91a6
xor eax, 0xeae411fa
rol eax, 0xe5
popf
jmp 0x1402af259
xor al, al
mov byte [rbx], r12b
mov qword [rbx + 0x18], r13
mov qword [rbx + 0x10], r12
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.140088190
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [0x14024cc41], 1
movdqa xmm0, xmmword [0x1402262a0]
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x2e0428
mov rcx, r12
push rax
pushf
mov eax, 0x4c3fd3d
pushf
not eax
add eax, 0xbec99fff
xor eax, 0xbab7cc7f
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xe27c996c
xor eax, 0xda4ebf94
rol eax, 0x17
popf
pushf
not eax
add eax, 0xe88977a4
xor eax, 0xc2efe1b4
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xc106c58c
xor eax, 0xfae7659a
rol eax, 0xa9
popf
jmp 0x1402af259
mov al, byte [rsp + 0x20]
xor byte [rsp + rcx + 0x21], al
inc rcx
cmp rcx, 0x12
jb 0x1402b0169
push rax
pushf
mov eax, 0xa5d42cfe
pushf
not eax
add eax, 0x8742e1a4
xor eax, 0xcdb56ce6
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xaea50b84
xor eax, 0xa3319c22
rol eax, 0xab
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x528db7db
pushf
not eax
add eax, 0xa0fe728f
xor eax, 0xf19b0260
rol eax, 3
popf
pushf
not eax
add eax, 0xcf503c2a
xor eax, 0x9b80bae6
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf43fbfe8
xor eax, 0xd78bb152
rol eax, 0x56
popf
jmp 0x1402af259
mov byte [rsp + 0x33], r12b
lea rax, [rsp + 0x21]
mov rdi, rsi
push rax
pushf
mov eax, 0x108ddb9b
pushf
not eax
add eax, 0xf4c85a67
xor eax, 0x81040ba7
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xa6a738e9
xor eax, 0xe0535a12
rol eax, 0x39
popf
jmp 0x1402af259
inc rdi
cmp byte [rax + rdi], r12b
jne 0x1402b022b
push rax
pushf
mov eax, 0x79236af7
pushf
not eax
add eax, 0x8ab86177
xor eax, 0xf69815ff
rol eax, 0xed
popf
pushf
not eax
add eax, 0x931fa66b
xor eax, 0xf69f8989
rol eax, 0x2f
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xd1f81d08
pushf
not eax
add eax, 0x9e6c1ae1
xor eax, 0xc4f85f60
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xad9a0a3e
xor eax, 0xa4b15c3b
rol eax, 0x47
popf
jmp 0x1402af259
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rdi, rax
ja 0x1402b029d
push rax
pushf
mov eax, 0x219445ad
pushf
not eax
add eax, 0xeef899a7
xor eax, 0xb9ea7688
rol eax, 5
popf
pushf
not eax
add eax, 0x83ccb4b1
xor eax, 0xf20805a2
rol eax, 0xbb
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x6397e3fb
pushf
not eax
add eax, 0xc5f1c1d0
xor eax, 0x8b42ceaa
rol eax, 8
popf
pushf
not eax
add eax, 0x80c593d3
xor eax, 0xe6f06555
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf23bbae1
xor eax, 0xbb0b5292
rol eax, 0x2c
popf
jmp 0x1402af259
lea r14, [0x18249c878]
pushf
sub r14, 0x4225bdf0
popf
cmp rax, r13
cmova r14, qword [0x140240a88]
mov qword [0x140240a98], rdi
mov r8, rdi
lea rdx, [rsp + 0x21]
mov rcx, r14
call fcn.140146140
mov byte [r14 + rdi], r12b
jmp 0x1402b03b8
lea r9, [rsp + 0x21]
mov rdx, rdi
lea rcx, [0x19774953d]
pushf
sub rcx, 0x57508ab5
popf
call fcn.1400032cc
push rax
pushf
mov eax, 0x98a72546
pushf
not eax
add eax, 0xeaacd439
xor eax, 0xb5d2e615
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xafe910a7
xor eax, 0x9c840e14
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xae9b2591
xor eax, 0xc385d33c
rol eax, 0x12
popf
jmp 0x1402af259
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rbp - 0x50]
mov r8, rsi
push rax
pushf
mov eax, 0xaedd0516
pushf
not eax
add eax, 0xbf2f4112
xor eax, 0xe5ff41c1
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xda68ef00
xor eax, 0xe94d3c85
rol eax, 0x19
popf
pushf
not eax
add eax, 0x8375e850
xor eax, 0x998486f6
rol eax, 0x31
popf
jmp 0x1402af259
inc r8
cmp byte [rax + r8], r12b
jne 0x1402b0452
push rax
pushf
mov eax, 0xce0883a3
pushf
not eax
add eax, 0xdecdebe4
xor eax, 0xc7a8003d
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xf78dc8f3
xor eax, 0xfc9eee22
rol eax, 0xaa
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x8cd8b32d
pushf
not eax
add eax, 0xbe739a03
xor eax, 0x9108bcc9
rol eax, 0x27
popf
pushf
not eax
add eax, 0x96ea9513
xor eax, 0xe11bd905
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xf164d162
xor eax, 0xd79573c8
rol eax, 0x69
popf
pushf
not eax
add eax, 0xc853bfe9
xor eax, 0x9d42d3bc
rol eax, 0x55
popf
jmp 0x1402af259
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x60]
call fcn.1400030c0
nop
mov cl, 0x83
pushf
not cl
add cl, 0x85
xor cl, 0xe6
rol cl, 0x1a
popf
pushf
not cl
add cl, 0x8a
xor cl, 0xcf
rol cl, 0x99
popf
pushf
not cl
add cl, 0x31
xor cl, 0x7c
rol cl, 0x1a
popf
pushf
not cl
add cl, 0x39
xor cl, 0x44
rol cl, 0x12
popf
mov dword [rsp + 0x20], 0x7a6b712a
mov dword [rsp + 0x24], 0x777d757a
mov word [rsp + 0x28], 0xa
mov rax, r12
push rax
pushf
mov eax, 0xd816913b
pushf
not eax
add eax, 0xd75581b1
xor eax, 0xda8ce77e
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x97dd32f2
xor eax, 0x81c2c573
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf749893d
xor eax, 0xbbdd7bdb
rol eax, 0xef
popf
jmp 0x1402af259
xor byte [rsp + rax + 0x21], cl
inc rax
cmp rax, 8
jae 0x1402b05be
push rax
pushf
mov eax, 0x70446861
pushf
not eax
add eax, 0xf0c3005f
xor eax, 0xfec2423b
rol eax, 0x53
popf
pushf
not eax
add eax, 0x8e65f09a
xor eax, 0xb6414eb4
rol eax, 0x53
popf
pushf
not eax
add eax, 0x8e936478
xor eax, 0xac88879f
rol eax, 0x37
popf
pushf
not eax
add eax, 0xa73f1ecf
xor eax, 0xf09a76b3
rol eax, 0x32
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xd4b685ab
pushf
not eax
add eax, 0x89d3b6a1
xor eax, 0x9881fd99
rol eax, 0x21
popf
pushf
not eax
add eax, 0xca175d15
xor eax, 0x9bfedcdc
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xd65e125d
xor eax, 0xbe624d54
rol eax, 0xda
popf
pushf
not eax
add eax, 0xd0acf8e5
xor eax, 0xa3dc2887
rol eax, 0x15
popf
jmp 0x1402af259
mov cl, byte [rsp + 0x20]
jmp 0x1402b0558
mov byte [rsp + 0x29], r12b
lea rax, [rsp + 0x21]
push rax
pushf
mov eax, 0x8edd5287
pushf
not eax
add eax, 0xd041cec2
xor eax, 0xb89037cd
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xbbccc17a
xor eax, 0xe2d8a9d3
rol eax, 0x74
popf
pushf
not eax
add eax, 0x991e7964
xor eax, 0x99365b8d
rol eax, 0x68
popf
pushf
not eax
add eax, 0x89905b87
xor eax, 0xcf12453e
rol eax, 0xff
popf
jmp 0x1402af259
inc rsi
cmp byte [rax + rsi], r12b
jne 0x1402b06f2
push rax
pushf
mov eax, 0xfb587bea
pushf
not eax
add eax, 0xe9275bdb
xor eax, 0xa967c00e
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xe89218e5
xor eax, 0xa8d18f92
rol eax, 0x4f
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x45d91ce8
pushf
not eax
add eax, 0x8a4d0e72
xor eax, 0xfd9a33e7
rol eax, 0x11
popf
pushf
not eax
add eax, 0x82233bf4
xor eax, 0xbd330919
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xb539394c
xor eax, 0xa855e21f
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xb3376feb
xor eax, 0xe01183af
rol eax, 3
popf
jmp 0x1402af259
mov r9, rsi
lea r8, [rsp + 0x21]
xor edx, edx
lea rcx, [rsp + 0x60]
call fcn.1400034b4
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r13
mov byte [rax], r12b
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.1402c8845
nop
mov edx, 0xd5246453
pushf
not edx
add edx, 0xd0da122e
xor edx, 0x835c6940
rol edx, 5
popf
pushf
not edx
add edx, 0xc78dab82
xor edx, 0xaa451832
rol edx, 0x4d
popf
mov rcx, rax
call fcn.1402cd709
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, r13
jbe 0x1402b0836
push rax
pushf
mov eax, 0x7d2085ba
pushf
not eax
add eax, 0xd0b0d8a5
xor eax, 0xff4e4c5a
rol eax, 0x37
popf
pushf
not eax
add eax, 0x8c119748
xor eax, 0x9ad188de
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xcd6ea311
xor eax, 0xfa097bf1
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x9c36862b
xor eax, 0xf8220d79
rol eax, 0xf5
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x700ca2ad
pushf
not eax
add eax, 0xe5e187cd
xor eax, 0xfce2f43e
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xd1fd85d0
xor eax, 0x99249abc
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc51a0d4b
xor eax, 0xbb0a5728
rol eax, 0x96
popf
pushf
not eax
add eax, 0xaec4690f
xor eax, 0x8864d0f7
rol eax, 0x86
popf
jmp 0x1402af259
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r15
jb 0x1402b08f7
push rax
pushf
mov eax, 0x7168fd81
pushf
not eax
add eax, 0x85252d6f
xor eax, 0xd9e7c07a
rol eax, 0x14
popf
pushf
not eax
add eax, 0x9582f373
xor eax, 0xf02dbc2e
rol eax, 0x73
popf
pushf
not eax
add eax, 0x99ccc03b
xor eax, 0x89105f09
rol eax, 0xb
popf
pushf
not eax
add eax, 0x8f56b884
xor eax, 0xd7482454
rol eax, 0xa6
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xcf1016ba
pushf
not eax
add eax, 0xf1d97cd3
xor eax, 0xbf9e1e66
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x958f3dac
xor eax, 0xa40602fd
rol eax, 0x2e
popf
jmp 0x1402af259
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1402b0976
push rax
pushf
mov eax, 0x6faf5e08
pushf
not eax
add eax, 0x83568c23
xor eax, 0xf4dd2a1a
rol eax, 0x41
popf
pushf
not eax
add eax, 0xcbe3f6c9
xor eax, 0xfcefec97
rol eax, 0x1c
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xdf6ada6d
pushf
not eax
add eax, 0xd60fc432
xor eax, 0xa33511c9
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xd9762998
xor eax, 0x8e7f3222
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xc06fb16d
xor eax, 0xa6da41d7
rol eax, 0x13
popf
jmp 0x1402af259
call fcn.14008842c
push rax
pushf
mov eax, 0x36f2f27b
pushf
not eax
add eax, 0xe658ab9c
xor eax, 0xe4664706
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xd0c651a4
xor eax, 0xd12b2c22
rol eax, 0xae
popf
jmp 0x1402af259
movdqa xmm0, xmmword [0x140225e60]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], r12b
mov rdx, qword [rsp + 0x78]
cmp rdx, r13
jbe 0x1402b0a55
push rax
pushf
mov eax, 0x8526804e
pushf
not eax
add eax, 0x82bbc874
xor eax, 0xda31770d
rol eax, 0x70
popf
pushf
not eax
add eax, 0xb436a02e
xor eax, 0xbd41c3c3
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x935fb356
xor eax, 0xe83e747b
rol eax, 0xa1
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xa3dffd92
pushf
not eax
add eax, 0xee45f17e
xor eax, 0xc9fa202c
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x82373180
xor eax, 0xa15a3c8e
rol eax, 0xf1
popf
jmp 0x1402af259
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r15
jb 0x1402b0af1
push rax
pushf
mov eax, 0x32228622
pushf
not eax
add eax, 0x9b5cb799
xor eax, 0xa719e4fb
rol eax, 6
popf
pushf
not eax
add eax, 0xe6af96a8
xor eax, 0x804d56eb
rol eax, 0x38
popf
pushf
not eax
add eax, 0xdb90654a
xor eax, 0xb0be10ff
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb14cc50a
xor eax, 0xbe5f98d8
rol eax, 0x6c
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x4ba6b3d4
pushf
not eax
add eax, 0xc736e464
xor eax, 0x97601721
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xdaab734d
xor eax, 0xe04e0701
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x8947c391
xor eax, 0xd953b415
rol eax, 0x99
popf
pushf
not eax
add eax, 0x8a5a0a1f
xor eax, 0xff540d98
rol eax, 0x44
popf
jmp 0x1402af259
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1402b0b92
push rax
pushf
mov eax, 0xd784e805
pushf
not eax
add eax, 0xdb23aec5
xor eax, 0xb588edf7
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xa59b37ec
xor eax, 0xdd6fef35
rol eax, 0xa7
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xceadfde5
pushf
not eax
add eax, 0xbdabd929
xor eax, 0x9fdd9a38
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe52112c2
xor eax, 0xe45ecb0a
rol eax, 0x24
popf
pushf
not eax
add eax, 0xbbc6e330
xor eax, 0xdcb39a87
rol eax, 0xf6
popf
jmp 0x1402af259
call fcn.14008842c
nop
push rax
pushf
mov eax, 0x5112b860
pushf
not eax
add eax, 0xfd3c2697
xor eax, 0xf872c51c
rol eax, 0x64
popf
pushf
not eax
add eax, 0x9d91d571
xor eax, 0xcb93e243
rol eax, 0x28
popf
pushf
not eax
add eax, 0xc239deaf
xor eax, 0xd5795612
rol eax, 0xa6
popf
jmp 0x1402af259
mov rdx, qword [rbx + 0x18]
cmp rdx, r13
jbe 0x1402b0c86
push rax
pushf
mov eax, 0x7c62e7d5
pushf
not eax
add eax, 0xbe4ac194
xor eax, 0x90b1159d
rol eax, 0x39
popf
pushf
not eax
add eax, 0x9338c6cb
xor eax, 0xcae57c5e
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xc7d6bf2a
xor eax, 0xc3470672
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xaff2502f
xor eax, 0xe2d2d117
rol eax, 0xf
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xaf37e047
pushf
not eax
add eax, 0x80886ff6
xor eax, 0xe0c901c2
rol eax, 0x89
popf
pushf
not eax
add eax, 0xfc9b2ead
xor eax, 0xc97e5731
rol eax, 0x1d
popf
jmp 0x1402af259
inc rdx
mov rcx, qword [rbx]
cmp rdx, r15
jb 0x1402b0d0a
push rax
pushf
mov eax, 0xe9c82da3
pushf
not eax
add eax, 0xf47b5c19
xor eax, 0xa1922de0
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xcdef1523
xor eax, 0xe3b56d89
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xe9f715fb
xor eax, 0xd77fc96a
rol eax, 0x19
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0xf343c9ee
pushf
not eax
add eax, 0xaf8c0ce0
xor eax, 0xa03ac353
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xf382608c
xor eax, 0x8cd0bdb0
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x82ed00a5
xor eax, 0xfdba0729
rol eax, 0xae
popf
pushf
not eax
add eax, 0xb41b6f05
xor eax, 0xa01699aa
rol eax, 0x5f
popf
jmp 0x1402af259
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1402b0dab
push rax
pushf
mov eax, 0x40d05963
pushf
not eax
add eax, 0xf8416a4f
xor eax, 0xccfe548b
rol eax, 0x87
popf
pushf
not eax
add eax, 0x8cfaead6
xor eax, 0xc558bab5
rol eax, 0x60
popf
jmp 0x1402af259
push rax
pushf
mov eax, 0x179af99e
pushf
not eax
add eax, 0xd7f419ea
xor eax, 0xfb7d23bb
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xf4aee760
xor eax, 0xf792146d
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc442946c
xor eax, 0xea9a004a
rol eax, 0xe4
popf
jmp 0x1402af259
mov rcx, r8
push rax
pushf
mov eax, 0xc3890d74
pushf
not eax
add eax, 0xe35a25ad
xor eax, 0xee0331e8
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x877521c4
xor eax, 0xb6277285
rol eax, 0x28
popf
pushf
not eax
add eax, 0xf116bf82
xor eax, 0xd8bb84eb
rol eax, 0x31
popf
pushf
not eax
add eax, 0xe8a221e0
xor eax, 0xdc230ec6
rol eax, 0x11
popf
jmp 0x1402af259
call fcn.14008842c
push rax
pushf
mov eax, 0xa7198101
pushf
not eax
add eax, 0xb26e4ccb
xor eax, 0x9a6b153b
rol eax, 0
popf
pushf
not eax
add eax, 0xf1a7122c
xor eax, 0xc2cc9a1d
rol eax, 0x55
popf
pushf
not eax
add eax, 0xb870010b
xor eax, 0xebdbab94
rol eax, 0x85
popf
jmp 0x1402af259
mov al, 0xac
pushf
not al
add al, 0x50
xor al, 0xaf
rol al, 0x7f
popf
pushf
not al
add al, 0xa4
xor al, 0x1c
rol al, 0x37
popf
pushf
not al
add al, 0x70
xor al, 0x20
rol al, 0x1a
popf
pushf
not al
add al, 0xfb
xor al, 0xac
rol al, 0x6c
popf
jmp 0x1402b002b
call fcn.14008f708
int3
call fcn.14008f708
nop
push rax
pushf
mov eax, 0x518db8e0
pushf
not eax
add eax, 0xa409a032
xor eax, 0xf3c4be76
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xcb8e8526
xor eax, 0xb773278a
rol eax, 0x38
popf
pushf
not eax
add eax, 0xd8b2b604
xor eax, 0xb88cb45b
rol eax, 0xeb
popf
jmp 0x1402af259
call fcn.14008f708
nop
push rax
pushf
mov eax, 0xfcc05a67
pushf
not eax
add eax, 0x890225fb
xor eax, 0xba01b6fe
rol eax, 0x16
popf
pushf
not eax
add eax, 0xc41a5e41
xor eax, 0xb30622e6
rol eax, 0xac
popf
pushf
not eax
add eax, 0xbb8eb5c8
xor eax, 0x94c2380a
rol eax, 0xc5
popf
jmp 0x1402af259
call fcn.14008f708
nop
push rax
pushf
mov eax, 0x4fe911c6
pushf
not eax
add eax, 0xb691f9c0
xor eax, 0xc9c403d5
rol eax, 0x88
popf
pushf
not eax
add eax, 0xfc9fa193
xor eax, 0xe0e4f66f
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xf20f2bf7
xor eax, 0xd9306c99
rol eax, 0x3f
popf
jmp 0x1402af259
call fcn.14008f708
int3