Function at 0x1400639b6
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings

Disassembly:
push rax
pushf
mov eax, 0x3bed9bae
pushf
not eax
add eax, 0xf3c787b3
xor eax, 0xc68fc333
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x887547bb
xor eax, 0xcdc38346
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xca94c62e
xor eax, 0xb241e292
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xa9de6950
xor eax, 0xe5d76e72
rol eax, 0xe2
popf
cmp eax, 4
jne 0x140063a19
popf
pop rax
jmp 0x140063f00
cmp eax, 0
jne 0x140063a28
popf
pop rax
jmp 0x140063b63
cmp eax, 3
jne 0x140063a37
popf
pop rax
jmp 0x140063e50
cmp eax, 1
jne 0x140063a46
popf
pop rax
jmp 0x140063ca3
cmp eax, 0xd
jne 0x140063a55
popf
pop rax
jmp 0x140064491
cmp eax, 7
jne 0x140063a64
popf
pop rax
jmp 0x1400640fd
cmp eax, 0xe
jne 0x140063a73
popf
pop rax
jmp 0x140064506
cmp eax, 0xb
jne 0x140063a82
popf
pop rax
jmp 0x140064374
cmp eax, 0xc
jne 0x140063a91
popf
pop rax
jmp 0x1400643f8
cmp eax, 8
jne 0x140063aa0
popf
pop rax
jmp 0x1400641f5
cmp eax, 0x10
jne 0x140063aaf
popf
pop rax
jmp 0x140064696
cmp eax, 2
jne 0x140063abe
popf
pop rax
jmp 0x140063da2
cmp eax, 9
jne 0x140063acd
popf
pop rax
jmp 0x140064232
cmp eax, 0x12
jne 0x140063adc
popf
pop rax
jmp 0x140064756
cmp eax, 6
jne 0x140063aeb
popf
pop rax
jmp 0x14006404d
cmp eax, 0x11
jne 0x140063afa
popf
pop rax
jmp 0x1400646d0
cmp eax, 5
jne 0x140063b09
popf
pop rax
jmp 0x140063f8a
cmp eax, 0x16
jne 0x140063b18
popf
pop rax
jmp 0x140064a49
cmp eax, 0xa
jne 0x140063b27
popf
pop rax
jmp 0x140064293
cmp eax, 0x14
jne 0x140063b36
popf
pop rax
jmp 0x14006496b
cmp eax, 0xf
jne 0x140063b45
popf
pop rax
jmp 0x140064595
cmp eax, 0x13
jne 0x140063b54
popf
pop rax
jmp 0x140064807
cmp eax, 0x15
jne 0x140063b63
popf
pop rax
jmp 0x140064a02
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x140034040]
xor rax, rsp
mov qword [rbp + 0x160], rax
xor edx, edx
lea rcx, [0x18cbbfa76]
pushf
sub rcx, 0x4cb90456
popf
mov r8d, 0xb5057d2e
pushf
not r8d
add r8d, 0x836dc010
xor r8d, 0xde2ca63e
rol r8d, 0xab
popf
pushf
not r8d
add r8d, 0xf238861d
xor r8d, 0xcb118d8a
rol r8d, 0x87
popf
call fcn.14001100f
mov rdi, rax
test rax, rax
jne 0x140063c4a
push rax
pushf
mov eax, 0x9ed7af68
pushf
not eax
add eax, 0xaa38e552
xor eax, 0xf3b1aa1f
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x8b4a8b8b
xor eax, 0xa5ce171c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xbc127136
xor eax, 0xf1f43d5d
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xacdcfd5b
xor eax, 0x95baaf8e
rol eax, 0x7b
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x3df5bdac
pushf
not eax
add eax, 0x91376a40
xor eax, 0xe002d20f
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xf85ab075
xor eax, 0xbf0dbcbe
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xeefdb1ae
xor eax, 0xe6a9d7b4
rol eax, 0xe
popf
pushf
not eax
add eax, 0xbe800aab
xor eax, 0xe1f04b88
rol eax, 0xcf
popf
jmp 0x140063a0a
xor edx, edx
lea rcx, [0x18ed40c5f]
pushf
sub rcx, 0x4ed115e7
popf
mov r8d, 0xc69a95e6
pushf
not r8d
add r8d, 0xeac573b3
xor r8d, 0xcc85412f
rol r8d, 0xf5
popf
pushf
not r8d
add r8d, 0xe3dd9047
xor r8d, 0xfcbee9b5
rol r8d, 0x78
popf
pushf
not r8d
add r8d, 0x949e6125
xor r8d, 0xade20291
rol r8d, 0x5c
popf
call fcn.14001100f
mov rdi, rax
test rax, rax
jne 0x140063d6e
push rax
pushf
mov eax, 0xadd99fd2
pushf
not eax
add eax, 0xf192b5e5
xor eax, 0x83a4a014
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xd92aa3a3
xor eax, 0x9b9f1d40
rol eax, 0x22
popf
pushf
not eax
add eax, 0xc0acaf2e
xor eax, 0xf447f095
rol eax, 0x47
popf
pushf
not eax
add eax, 0x92a29bec
xor eax, 0xea150365
rol eax, 0x20
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x3582c684
pushf
not eax
add eax, 0xac15463f
xor eax, 0x84885a34
rol eax, 0x13
popf
pushf
not eax
add eax, 0xac80f020
xor eax, 0xa0095f4e
rol eax, 0x65
popf
jmp 0x140063a0a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x140063e0a
push rax
pushf
mov eax, 0xe9f9b392
pushf
not eax
add eax, 0xaa001f50
xor eax, 0xa0120bc8
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x9e04b154
xor eax, 0xddcf927d
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xe7735327
xor eax, 0xb6b62b20
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xbb09b477
xor eax, 0xf1684d48
rol eax, 0xfd
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x43da766b
pushf
not eax
add eax, 0xf9dacc67
xor eax, 0xfc210a5a
rol eax, 0x61
popf
pushf
not eax
add eax, 0xb3166746
xor eax, 0x98fe654e
rol eax, 0x74
popf
pushf
not eax
add eax, 0xd07f0552
xor eax, 0xfba78275
rol eax, 0xb3
popf
jmp 0x140063a0a
xor r8d, r8d
lea rcx, [0x1821ea61b]
pushf
sub rcx, 0x421bafa3
popf
xor edx, edx
call fcn.14001100f
mov rdi, rax
test rax, rax
je 0x140063ea7
push rax
pushf
mov eax, 0x97a6b787
pushf
not eax
add eax, 0x879739e0
xor eax, 0xf0af9769
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xc0716c32
xor eax, 0x80b341cf
rol eax, 0xca
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x2de92220
pushf
not eax
add eax, 0xc4cbb5e1
xor eax, 0xf54e74ed
rol eax, 0x61
popf
pushf
not eax
add eax, 0xe8d3b6c1
xor eax, 0xfa9ec482
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x833e7704
xor eax, 0xbaf8e176
rol eax, 0x97
popf
pushf
not eax
add eax, 0xc3562b03
xor eax, 0x9bdc8b34
rol eax, 0xd3
popf
jmp 0x140063a0a
lea rdx, [0x1b9c5b38d]
pushf
sub rdx, 0x79c2bcf5
popf
mov rcx, rdi
jmp 0x140063f16
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140063f57
push rax
pushf
mov eax, 0x66472e9b
pushf
not eax
add eax, 0xd4cb0231
xor eax, 0x95551106
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xe7621217
xor eax, 0xf51222bb
rol eax, 0xc5
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xd63a5930
pushf
not eax
add eax, 0xd858d26a
xor eax, 0xe509d84e
rol eax, 0xa
popf
pushf
not eax
add eax, 0x912a99ec
xor eax, 0xa2a4ba4f
rol eax, 4
popf
jmp 0x140063a0a
lea rdx, [0x197b2da4f]
pushf
sub rdx, 0x57afe3a7
popf
mov rcx, rdi
jmp 0x140063fa0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
je 0x140063ff4
push rax
pushf
mov eax, 0xbdf9ed48
pushf
not eax
add eax, 0xecdb7f67
xor eax, 0xa277d7a8
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xfadc9a68
xor eax, 0xc9b03e5c
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x9d0a830f
xor eax, 0xe02fe896
rol eax, 0x24
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x94e8c116
pushf
not eax
add eax, 0xca4a4f8c
xor eax, 0x9b01702f
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xb5bbfe00
xor eax, 0xa07b7eb3
rol eax, 0x63
popf
pushf
not eax
add eax, 0xdf1d8030
xor eax, 0xa905f5bd
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xcf08bc4b
xor eax, 0xf623e781
rol eax, 0x3f
popf
jmp 0x140063a0a
lea rdx, [0x1a6e22c80]
pushf
sub rdx, 0x66df35c0
popf
mov rcx, rdi
jmp 0x140064063
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
test rax, rax
je 0x1400640a4
push rax
pushf
mov eax, 0xff246011
pushf
not eax
add eax, 0xc260a743
xor eax, 0x9fe5fabb
rol eax, 0xea
popf
pushf
not eax
add eax, 0xf1fc354e
xor eax, 0x8b760bda
rol eax, 0x2c
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xa76f18ff
pushf
not eax
add eax, 0xd91de1ee
xor eax, 0x8681a347
rol eax, 0xed
popf
pushf
not eax
add eax, 0x8a8c0cb3
xor eax, 0xcc7f19fc
rol eax, 0xea
popf
pushf
not eax
add eax, 0xc0a47759
xor eax, 0xddb77f29
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xcfcd88de
xor eax, 0xa11c57ab
rol eax, 0x83
popf
jmp 0x140063a0a
lea rax, [rsp + 0x48]
mov r9d, 0xce26987c
pushf
not r9d
add r9d, 0xcf414774
xor r9d, 0xef91365a
rol r9d, 0x37
popf
pushf
not r9d
add r9d, 0xfdae61a1
xor r9d, 0xa6b71b94
rol r9d, 0xba
popf
mov qword [rsp + 0x20], rax
lea rdx, [0x185df0472]
pushf
sub rdx, 0x45dc0da2
popf
mov rax, rbx
xor r8d, r8d
mov rcx, 0xffffffff80000002
jmp 0x14006415f
call qword [0x14003d020]
test eax, eax
je 0x14006419c
push rax
pushf
mov eax, 0xf0564cd8
pushf
not eax
add eax, 0xe0a27166
xor eax, 0xd979ac8f
rol eax, 0x60
popf
pushf
not eax
add eax, 0xece1725d
xor eax, 0xc3abca5a
rol eax, 0xb6
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xf3c28970
pushf
not eax
add eax, 0xa33aeb28
xor eax, 0xa97280c9
rol eax, 0x18
popf
pushf
not eax
add eax, 0xb079afd3
xor eax, 0xc787a096
rol eax, 3
popf
pushf
not eax
add eax, 0x8623ac2e
xor eax, 0x8a802e10
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x9b539ded
xor eax, 0xa8738235
rol eax, 0x9a
popf
jmp 0x140063a0a
mov rcx, rdi
jmp 0x1400641f9
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
push rax
pushf
mov eax, 0x1e38f37d
pushf
not eax
add eax, 0x9221b5a6
xor eax, 0xc29e1012
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xd50f2092
xor eax, 0xb7836a00
rol eax, 0x25
popf
jmp 0x140063a0a
xor eax, eax
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.1400114c9
lea r11, [rsp + 0x270]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x44]
lea rax, [rsp + 0x50]
mov dword [rsp + 0x40], 0x208
mov qword [rsp + 0x20], rax
lea rdx, [0x18da69569]
pushf
sub rdx, 0x4da39e09
popf
mov rax, rsi
xor r8d, r8d
jmp 0x1400642d2
call qword [0x14003d020]
mov rcx, qword [rsp + 0x48]
mov ebx, eax
mov rax, r14
jmp 0x1400642e3
call qword [0x14003d020]
mov rcx, rdi
jmp 0x1400642ed
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
test ebx, ebx
jne 0x140064341
push rax
pushf
mov eax, 0xa4e2c609
pushf
not eax
add eax, 0xaa16e702
xor eax, 0xd1e98b6e
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xbb9ad21a
xor eax, 0xf63d1f65
rol eax, 7
popf
pushf
not eax
add eax, 0xb9307df8
xor eax, 0xd32bab5a
rol eax, 0x1b
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xb9a3c349
pushf
not eax
add eax, 0xe5a3a21d
xor eax, 0xa9f267d0
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xd125272c
xor eax, 0x944996f3
rol eax, 0x86
popf
jmp 0x140063a0a
cmp dword [rsp + 0x44], 1
jne 0x1400643b2
push rax
pushf
mov eax, 0xf596a9d4
pushf
not eax
add eax, 0xc0addf9b
xor eax, 0xe7735adb
rol eax, 0x21
popf
pushf
not eax
add eax, 0x95e5005e
xor eax, 0xfd1c2223
rol eax, 4
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x45af33c4
pushf
not eax
add eax, 0xd3c7ec54
xor eax, 0x9373cc7f
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x8e2ba0c2
xor eax, 0xe1e72f78
rol eax, 0xad
popf
pushf
not eax
add eax, 0xffafff99
xor eax, 0xa3fd3a2a
rol eax, 0x7e
popf
jmp 0x140063a0a
mov edx, dword [rsp + 0x40]
test dl, 1
jne 0x14006445e
push rax
pushf
mov eax, 0x8deb9abe
pushf
not eax
add eax, 0x9303ba6a
xor eax, 0x9ffec193
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x998417d5
xor eax, 0xf92b410b
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xd4ef31d7
xor eax, 0xe74a6495
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x80ec75b2
xor eax, 0x8285cf09
rol eax, 0xf8
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x5b46f75f
pushf
not eax
add eax, 0x8467eb0d
xor eax, 0xe5776480
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xf6a1e9bc
xor eax, 0x838c0af0
rol eax, 0x18
popf
jmp 0x140063a0a
shr edx, 1
mov r9d, edx
cmp edx, 2
jb 0x1400644d2
push rax
pushf
mov eax, 0xac6b5314
pushf
not eax
add eax, 0xf6920068
xor eax, 0xfc3b8d5f
rol eax, 0x48
popf
pushf
not eax
add eax, 0xc6bad720
xor eax, 0xb59aca69
rol eax, 7
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xd9679341
pushf
not eax
add eax, 0xa0769f9e
xor eax, 0xa3118c00
rol eax, 0x36
popf
pushf
not eax
add eax, 0xb7a4340d
xor eax, 0xa0af2c6c
rol eax, 0x2e
popf
jmp 0x140063a0a
dec edx
lea r8, [rsp + 0x50]
cmp word [r8 + rdx*2], bx
lea r8, [r8 + rdx*2]
jne 0x14006454f
push rax
pushf
mov eax, 0x33a08bca
pushf
not eax
add eax, 0xc920d9a1
xor eax, 0xf4436145
rol eax, 0x40
popf
pushf
not eax
add eax, 0xe50acb35
xor eax, 0x83489ea1
rol eax, 0x10
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xfb0792cd
pushf
not eax
add eax, 0x8740cab6
xor eax, 0xfc4f32a0
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8f99d539
xor eax, 0xdae27708
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xca627b89
xor eax, 0xa67f6480
rol eax, 0x62
popf
jmp 0x140063a0a
lea eax, [rdx - 1]
mov r10d, 0xd0a3e7d8
pushf
not r10d
add r10d, 0xf23545f0
xor r10d, 0xeeb648a6
rol r10d, 0x1b
popf
pushf
not r10d
add r10d, 0xe3fe5580
xor r10d, 0xdda76cf5
rol r10d, 0x89
popf
pushf
not r10d
add r10d, 0x83070d34
xor r10d, 0xb5abe132
rol r10d, 0x72
popf
pushf
not r10d
add r10d, 0xf359bb7c
xor r10d, 0xb7138d4d
rol r10d, 3
popf
cmp word [rsp + rax*2 + 0x50], r10w
je 0x140064650
push rax
pushf
mov eax, 0xde53648b
pushf
not eax
add eax, 0xb9688c5d
xor eax, 0xd1dd7844
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x95010133
xor eax, 0xece06f58
rol eax, 0xe
popf
pushf
not eax
add eax, 0xd939fb60
xor eax, 0x985df347
rol eax, 0xa1
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x880d7d8a
pushf
not eax
add eax, 0xa8507e41
xor eax, 0x9159ffac
rol eax, 0x18
popf
pushf
not eax
add eax, 0x8501db3d
xor eax, 0xaff48e1d
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xa28934fe
xor eax, 0x89d4abb1
rol eax, 0xfd
popf
jmp 0x140063a0a
mov word [r8], r10w
mov edx, r9d
push rax
pushf
mov eax, 0x3984c4f8
pushf
not eax
add eax, 0xc9cba687
xor eax, 0xe19b4255
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xa76f8fde
xor eax, 0xcaf837e7
rol eax, 0x18
popf
jmp 0x140063a0a
mov eax, edx
not eax
cmp eax, 0x18
jb 0x140064723
push rax
pushf
mov eax, 0x5aa57f7c
pushf
not eax
add eax, 0xde097b1e
xor eax, 0xa69ed4a7
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf2d05c5b
xor eax, 0xf5557d4b
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xb263ca46
xor eax, 0x9d137bc4
rol eax, 0xb
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xfeb78cc8
pushf
not eax
add eax, 0x81c4be9b
xor eax, 0xd06ebb56
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xd08ec198
xor eax, 0xfeac2083
rol eax, 0x68
popf
jmp 0x140063a0a
mov ecx, edx
lea rax, [rcx + 0x17]
cmp rax, 0x104
ja 0x1400647ae
push rax
pushf
mov eax, 0xcba2018d
pushf
not eax
add eax, 0xc6309a3d
xor eax, 0xea5aace2
rol eax, 0x14
popf
pushf
not eax
add eax, 0xc15cdf99
xor eax, 0x9354b105
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xa5cec5f7
xor eax, 0xe7d2d98e
rol eax, 0xa3
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xe19e7b52
pushf
not eax
add eax, 0xca251828
xor eax, 0xf6ba54c0
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x9c75e782
xor eax, 0xe8932a4d
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xedf2e209
xor eax, 0xb25ce522
rol eax, 0x62
popf
pushf
not eax
add eax, 0xb8f047bd
xor eax, 0x8de57b08
rol eax, 0x57
popf
jmp 0x140063a0a
mov dword [rsp + rcx*2 + 0x50], 0x690062
xor eax, eax
mov dword [rsp + rcx*2 + 0x54], 0x5c006e
xor edx, edx
mov dword [rsp + rcx*2 + 0x58], 0x6d0061
mov r8d, 0x78b0839
pushf
not r8d
add r8d, 0x9e25edda
xor r8d, 0xce5a67b7
rol r8d, 0x5b
popf
pushf
not r8d
add r8d, 0xec641020
xor r8d, 0xb4394d4a
rol r8d, 0x21
popf
pushf
not r8d
add r8d, 0xd474d5b8
xor r8d, 0xcb66532c
rol r8d, 0x12
popf
mov dword [rsp + rcx*2 + 0x5c], 0x360064
mov dword [rsp + rcx*2 + 0x60], 0x5c0034
mov dword [rsp + rcx*2 + 0x64], 0x53004d
mov dword [rsp + rcx*2 + 0x68], 0x440050
mov dword [rsp + rcx*2 + 0x6c], 0x310042
mov dword [rsp + rcx*2 + 0x70], 0x300034
mov dword [rsp + rcx*2 + 0x74], 0x44002e
mov dword [rsp + rcx*2 + 0x78], 0x4c004c
mov word [rsp + rcx*2 + 0x7c], ax
lea rcx, [rsp + 0x50]
call fcn.14001100f
mov rbx, rax
test rax, rax
jne 0x140064924
push rax
pushf
mov eax, 0x156ab7ba
pushf
not eax
add eax, 0xa9887893
xor eax, 0xdfacb916
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x9e76726b
xor eax, 0xad630fde
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xe609f3ee
xor eax, 0xcc4c9de7
rol eax, 0xd
popf
pushf
not eax
add eax, 0xf59c640f
xor eax, 0xf56e67d3
rol eax, 0x6b
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0xb7672065
pushf
not eax
add eax, 0xa7e05e12
xor eax, 0xa3503b0c
rol eax, 0x94
popf
pushf
not eax
add eax, 0xea2100a1
xor eax, 0xf2a288b8
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xefb815b1
xor eax, 0xe1605cdb
rol eax, 0x95
popf
jmp 0x140063a0a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x57
jne 0x1400649a9
push rax
pushf
mov eax, 0xadf56731
pushf
not eax
add eax, 0xc8da1418
xor eax, 0xdf141a67
rol eax, 0x91
popf
pushf
not eax
add eax, 0xb25fdc2b
xor eax, 0xed5c5049
rol eax, 0xe5
popf
jmp 0x140063a0a
push rax
pushf
mov eax, 0x3d6a13ac
pushf
not eax
add eax, 0xd8c8a32c
xor eax, 0xc6649a8b
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xf501a487
xor eax, 0xb9ab5c9f
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x905ffae4
xor eax, 0xc9122963
rol eax, 0x88
popf
pushf
not eax
add eax, 0xb1dd44ab
xor eax, 0xe9babd71
rol eax, 0x6e
popf
jmp 0x140063a0a
xor edx, edx
lea rcx, [rsp + 0x50]
mov r8d, 0xca8218e2
pushf
not r8d
add r8d, 0x843ec27f
xor r8d, 0xa9c4f9c3
rol r8d, 0x76
popf
pushf
not r8d
add r8d, 0xc1d5d536
xor r8d, 0xaa119721
rol r8d, 0xf6
popf
call fcn.14001100f
mov rbx, rax
mov rax, rbx
jmp 0x140064234