Function at 0x180179183
Capabilities:
Authenticate hmac
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0x280eeaf7
pushf
not eax
add eax, 0xe22726c0
xor eax, 0xe19669c8
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe3dc900e
xor eax, 0xccf8fb8d
rol eax, 0x9f
popf
cmp eax, 0x20
jne 0x1801791c0
popf
pop rax
jmp 0x18017a67a
cmp eax, 0
jne 0x1801791cf
popf
pop rax
jmp 0x1801793cd
cmp eax, 3
jne 0x1801791de
popf
pop rax
jmp 0x1801795d9
cmp eax, 1
jne 0x1801791ed
popf
pop rax
jmp 0x1801794b2
cmp eax, 0xd
jne 0x1801791fc
popf
pop rax
jmp 0x180179b54
cmp eax, 0x1a
jne 0x18017920b
popf
pop rax
jmp 0x18017a35a
cmp eax, 0xe
jne 0x18017921a
popf
pop rax
jmp 0x180179bfd
cmp eax, 0xb
jne 0x180179229
popf
pop rax
jmp 0x180179a1b
cmp eax, 0x19
jne 0x180179238
popf
pop rax
jmp 0x18017a2eb
cmp eax, 8
jne 0x180179247
popf
pop rax
jmp 0x18017990a
cmp eax, 0x1d
jne 0x180179256
popf
pop rax
jmp 0x18017a544
cmp eax, 0x17
jne 0x180179265
popf
pop rax
jmp 0x18017a122
cmp eax, 0x1c
jne 0x180179274
popf
pop rax
jmp 0x18017a423
cmp eax, 0x12
jne 0x180179283
popf
pop rax
jmp 0x180179dcd
cmp eax, 0x18
jne 0x180179292
popf
pop rax
jmp 0x18017a1b7
cmp eax, 0x11
jne 0x1801792a1
popf
pop rax
jmp 0x180179d95
cmp eax, 0x1b
jne 0x1801792b0
popf
pop rax
jmp 0x18017a3a5
cmp eax, 0x21
jne 0x1801792bf
popf
pop rax
jmp 0x18017a74a
cmp eax, 0x23
jne 0x1801792ce
popf
pop rax
jmp 0x18017a7ff
cmp eax, 0x14
jne 0x1801792dd
popf
pop rax
jmp 0x180179f73
cmp eax, 0xf
jne 0x1801792ec
popf
pop rax
jmp 0x180179c7e
cmp eax, 0x13
jne 0x1801792fb
popf
pop rax
jmp 0x180179e97
cmp eax, 0x15
jne 0x18017930a
popf
pop rax
jmp 0x18017a02e
cmp eax, 0x22
jne 0x180179319
popf
pop rax
jmp 0x18017a7b4
cmp eax, 0x1e
jne 0x180179328
popf
pop rax
jmp 0x18017a5d9
cmp eax, 0xc
jne 0x180179337
popf
pop rax
jmp 0x180179ae0
cmp eax, 7
jne 0x180179346
popf
pop rax
jmp 0x180179813
cmp eax, 5
jne 0x180179355
popf
pop rax
jmp 0x1801796e8
cmp eax, 0x1f
jne 0x180179364
popf
pop rax
jmp 0x18017a637
cmp eax, 0x10
jne 0x180179373
popf
pop rax
jmp 0x180179d00
cmp eax, 6
jne 0x180179382
popf
pop rax
jmp 0x18017977f
cmp eax, 9
jne 0x180179391
popf
pop rax
jmp 0x18017995c
cmp eax, 4
jne 0x1801793a0
popf
pop rax
jmp 0x18017966a
cmp eax, 0x16
jne 0x1801793af
popf
pop rax
jmp 0x18017a0ea
cmp eax, 2
jne 0x1801793be
popf
pop rax
jmp 0x180179506
cmp eax, 0xa
jne 0x1801793cd
popf
pop rax
jmp 0x180179a12
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rdi, rcx
lea rcx, [rsp + 0x20]
jmp 0x1801793e7
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r14, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp rdi, 0x40000000
jbe 0x180179459
push rax
pushf
mov eax, 0x8830405
pushf
not eax
add eax, 0xbf46b015
xor eax, 0xb8262bf2
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xfd9152aa
xor eax, 0xc0679366
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xc7d71da2
xor eax, 0xf50d3cf8
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xfa7c775a
xor eax, 0x954ed478
rol eax, 0xbb
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x2f27ed72
pushf
not eax
add eax, 0xe3b90683
xor eax, 0x8e365f74
rol eax, 0x41
popf
pushf
not eax
add eax, 0xa7ed7642
xor eax, 0x95710511
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xfb35bdfd
xor eax, 0x8f9d7ed5
rol eax, 0xea
popf
pushf
not eax
add eax, 0xb23209b4
xor eax, 0xbb2d5c2d
rol eax, 0x98
popf
jmp 0x1801791b1
lea rax, [rdi - 0x40000000]
cmp r14, rax
cmovb r14, rax
push rax
pushf
mov eax, 0x78dc63bb
pushf
not eax
add eax, 0xd24e95e3
xor eax, 0xe3f7737f
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xc45b3647
xor eax, 0xced9357a
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x975e9108
xor eax, 0xffd92093
rol eax, 0x64
popf
jmp 0x1801791b1
mov rsi, qword [0x180042e20]
lea r15, [rdi + 0x40000000]
cmp rcx, r15
cmovbe r15, rcx
sub r15, 0xfff
test rsi, rsi
je 0x180179580
push rax
pushf
mov eax, 0xe1719e87
pushf
not eax
add eax, 0xc32cfdf3
xor eax, 0xc547dfa3
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf2eafb52
xor eax, 0xf6c62b75
rol eax, 0x59
popf
pushf
not eax
add eax, 0x9694ca1c
xor eax, 0xe770d39a
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x8c295eac
xor eax, 0xbe2d8448
rol eax, 0xd3
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x409de03b
pushf
not eax
add eax, 0xa1ed8403
xor eax, 0xb285572f
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xeb80a56e
xor eax, 0xa62583d9
rol eax, 0x23
popf
pushf
not eax
add eax, 0xd33a521a
xor eax, 0xed1fc99e
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x97ffa92f
xor eax, 0x95e8683d
rol eax, 0x74
popf
jmp 0x1801791b1
cmp rsi, r14
jb 0x180179637
push rax
pushf
mov eax, 0x318e9793
pushf
not eax
add eax, 0xf57e4efd
xor eax, 0x9b7afe3e
rol eax, 0x83
popf
pushf
not eax
add eax, 0x99f996e8
xor eax, 0xf061fa36
rol eax, 0x39
popf
pushf
not eax
add eax, 0xba5b3225
xor eax, 0xadf6fca4
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xd1a4d479
xor eax, 0x82719397
rol eax, 0x11
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xcca9848a
pushf
not eax
add eax, 0xa5848e2a
xor eax, 0x87e152d1
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x9074781b
xor eax, 0xc4bd2cb1
rol eax, 0xcd
popf
jmp 0x1801791b1
cmp rsi, r15
jae 0x1801796a2
push rax
pushf
mov eax, 0x30691a09
pushf
not eax
add eax, 0xf05fbede
xor eax, 0xb06051f1
rol eax, 0x89
popf
pushf
not eax
add eax, 0xc794c78c
xor eax, 0x99af7d6c
rol eax, 0x30
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x9f56faea
pushf
not eax
add eax, 0xbadcd816
xor eax, 0xf26de982
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xd4de9752
xor eax, 0xf5cb1941
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xedd10b0e
xor eax, 0xf09d64ff
rol eax, 0xee
popf
jmp 0x1801791b1
cmp qword [rsi + 8], 0
jne 0x18017974c
push rax
pushf
mov eax, 0xa2b3f4e
pushf
not eax
add eax, 0xe2807244
xor eax, 0xe5449122
rol eax, 0xef
popf
pushf
not eax
add eax, 0x9c6e9d11
xor eax, 0xbfd9ec9c
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x8a2e48c8
xor eax, 0xfad28a64
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xeda7c871
xor eax, 0xa07bde54
rol eax, 0xf4
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x3113e13b
pushf
not eax
add eax, 0xd77924b8
xor eax, 0xb364e43e
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xe7e58d2f
xor eax, 0xc61972ba
rol eax, 0x2e
popf
jmp 0x1801791b1
mov rsi, qword [rsi]
test rsi, rsi
jne 0x1801797e0
push rax
pushf
mov eax, 0x921fd66e
pushf
not eax
add eax, 0x8a61e7e8
xor eax, 0xa479d6f4
rol eax, 0xf1
popf
pushf
not eax
add eax, 0x9a32aefb
xor eax, 0xc7c73a94
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x82f2d080
xor eax, 0xcfcd72cc
rol eax, 0x13
popf
pushf
not eax
add eax, 0xf3126798
xor eax, 0x9f169839
rol eax, 0x93
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x6876b903
pushf
not eax
add eax, 0xda4389b9
xor eax, 0xf1b0b9ad
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xf6526e4d
xor eax, 0xe6f54b3c
rol eax, 0x8c
popf
jmp 0x1801791b1
mov qword [rsp + 0xa0], rbx
mov rbx, rdi
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], r12
mov r12d, 0xb4a6e347
pushf
not r12d
add r12d, 0xb7848bec
xor r12d, 0xeed11aff
rol r12d, 0xb7
popf
pushf
not r12d
add r12d, 0xd5432041
xor r12d, 0xa74c19e7
rol r12d, 0x76
popf
cmp rdi, r14
jb 0x1801798b1
push rax
pushf
mov eax, 0xfc416f84
pushf
not eax
add eax, 0xbf677a2a
xor eax, 0xd022eb17
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xa9d8469a
xor eax, 0xfe4e05da
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x9fb1e76d
xor eax, 0x991a607a
rol eax, 0x22
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xf1e8ffb1
pushf
not eax
add eax, 0xb3cd2c96
xor eax, 0x9c854382
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xc0559a8d
xor eax, 0xb822e01a
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xfd1d3b17
xor eax, 0xdcc564e1
rol eax, 0x94
popf
pushf
not eax
add eax, 0xb2f278f9
xor eax, 0xfd1281eb
rol eax, 0xc3
popf
jmp 0x1801791b1
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x954c30b2
pushf
not eax
add eax, 0xe5007136
xor eax, 0x89b7f67e
rol eax, 0x98
popf
pushf
not eax
add eax, 0x87e4c9a8
xor eax, 0xdb166c21
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xae8a51ca
xor eax, 0x8285fce1
rol eax, 0xa9
popf
jmp 0x1801791b1
mov ebp, dword [rsp + 0x48]
mov rax, rbx
xor edx, edx
div rbp
sub rbx, rdx
sub rbx, rbp
cmp rbx, r14
jb 0x1801799cc
push rax
pushf
mov eax, 0x9e008a97
pushf
not eax
add eax, 0x83882eb8
xor eax, 0xa6636272
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xb867781c
xor eax, 0xd8f9c43c
rol eax, 0x29
popf
pushf
not eax
add eax, 0xffa04794
xor eax, 0xa8bd21cc
rol eax, 0x21
popf
pushf
not eax
add eax, 0x898162c9
xor eax, 0x99318612
rol eax, 0x20
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x60beeb3
pushf
not eax
add eax, 0x99adaaad
xor eax, 0xfc1cdb77
rol eax, 0xae
popf
pushf
not eax
add eax, 0xd3c95be0
xor eax, 0xba206a1b
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x968e85ec
xor eax, 0xd3a3ac0b
rol eax, 0x36
popf
jmp 0x1801791b1
nop word [rax + rax]
mov r8d, 0xc8c5cc1
pushf
not r8d
add r8d, 0xe2f10fc3
xor r8d, 0x83f40579
rol r8d, 0xfd
popf
pushf
not r8d
add r8d, 0xee81db93
xor r8d, 0xe24fc4c3
rol r8d, 0x8d
popf
lea rdx, [rsp + 0x50]
mov rcx, rbx
jmp 0x180179a5c
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x180179aad
push rax
pushf
mov eax, 0x8162fc1b
pushf
not eax
add eax, 0xa40126eb
xor eax, 0x86e29c9e
rol eax, 0x11
popf
pushf
not eax
add eax, 0xcb214076
xor eax, 0xe9f9f90b
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x859529f5
xor eax, 0xc7d50981
rol eax, 0x70
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xa7515a9c
pushf
not eax
add eax, 0xa10d5ade
xor eax, 0xb2b1f844
rol eax, 0x72
popf
pushf
not eax
add eax, 0xd7cba046
xor eax, 0xf7b6840e
rol eax, 0x74
popf
jmp 0x1801791b1
cmp dword [rsp + 0x70], 0x10000
je 0x180179b21
push rax
pushf
mov eax, 0xafd1e2ed
pushf
not eax
add eax, 0xe1bd10dd
xor eax, 0xd716fa02
rol eax, 0x77
popf
pushf
not eax
add eax, 0xdd11acd5
xor eax, 0xe6762de9
rol eax, 0xcd
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x780d9585
pushf
not eax
add eax, 0xd9305869
xor eax, 0xd567b835
rol eax, 0xea
popf
pushf
not eax
add eax, 0xef00c657
xor eax, 0xd9026b85
rol eax, 0x10
popf
jmp 0x1801791b1
mov rbx, qword [rsp + 0x58]
cmp rbx, rbp
jb 0x180179ba4
push rax
pushf
mov eax, 0x38cb2585
pushf
not eax
add eax, 0xb60f203e
xor eax, 0xc19b11af
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x830230ee
xor eax, 0xc6dbc416
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xa38a0c99
xor eax, 0xf99c72fd
rol eax, 0xe9
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xf3c7d2f6
pushf
not eax
add eax, 0xefe13dfc
xor eax, 0xe4249113
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xeed63751
xor eax, 0xef11ce92
rol eax, 0x37
popf
pushf
not eax
add eax, 0x81bd08d2
xor eax, 0xc9db3e9f
rol eax, 0x99
popf
pushf
not eax
add eax, 0xd0a8134b
xor eax, 0xa3753ce5
rol eax, 0xc1
popf
jmp 0x1801791b1
sub rbx, rbp
cmp rbx, r14
jae 0x180179c38
push rax
pushf
mov eax, 0x88dbcdc2
pushf
not eax
add eax, 0xab06d05f
xor eax, 0xf8fd5ad7
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x98b8e15b
xor eax, 0xbde28977
rol eax, 0x7d
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x16a0e664
pushf
not eax
add eax, 0xfa0de701
xor eax, 0xb97a78c6
rol eax, 0x66
popf
pushf
not eax
add eax, 0xa7f0e0ef
xor eax, 0xf1c3e3cd
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xe850752b
xor eax, 0xbca8d2dc
rol eax, 0xa0
popf
jmp 0x1801791b1
test rsi, rsi
jne 0x180179ccd
push rax
pushf
mov eax, 0xe715c8c5
pushf
not eax
add eax, 0xff21e14f
xor eax, 0x864aae02
rol eax, 7
popf
pushf
not eax
add eax, 0x9669c3db
xor eax, 0xb6294362
rol eax, 0xc
popf
pushf
not eax
add eax, 0xa6bd423f
xor eax, 0xb2e6a5ec
rol eax, 0x65
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x2342cb31
pushf
not eax
add eax, 0xe06147ba
xor eax, 0xc01888f0
rol eax, 0x49
popf
pushf
not eax
add eax, 0xdcfd1e3e
xor eax, 0xcf15dd43
rol eax, 0x14
popf
jmp 0x1801791b1
cmp rdi, r15
ja 0x180179d4f
push rax
pushf
mov eax, 0xcd9f7236
pushf
not eax
add eax, 0xae7f0cd5
xor eax, 0x89979cd8
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x96010154
xor eax, 0x9c821ece
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xfa471e50
xor eax, 0x934db747
rol eax, 0x6a
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xa9f8c120
pushf
not eax
add eax, 0xa2ab6401
xor eax, 0xe519e10c
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xf334b1b5
xor eax, 0xadf99169
rol eax, 0xec
popf
pushf
not eax
add eax, 0x97064f60
xor eax, 0x9fe94afd
rol eax, 0x65
popf
jmp 0x1801791b1
nop dword [rax + rax]
push rax
pushf
mov eax, 0x964b03c3
pushf
not eax
add eax, 0xb66f706e
xor eax, 0xc5192183
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xd32d51a9
xor eax, 0xe8c4035f
rol eax, 0x9c
popf
jmp 0x1801791b1
mov ebp, dword [rsp + 0x48]
xor edx, edx
mov rax, rdi
mov ebx, ebp
div rbp
mov eax, ebp
sub rax, rdx
push rdi
not rdi
sub rax, rdi
pop rdi
sub rax, 1
mov rdi, rax
cmp rax, r15
ja 0x180179e51
push rax
pushf
mov eax, 0xdea5f166
pushf
not eax
add eax, 0xecf0965c
xor eax, 0xde5a2f90
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xb41fa9a8
xor eax, 0xdac8e88a
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x8954b8ac
xor eax, 0x82fb720b
rol eax, 0xd
popf
pushf
not eax
add eax, 0xf3dc5e3e
xor eax, 0x970f2e2b
rol eax, 0x55
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x7979eebc
pushf
not eax
add eax, 0xfe1076cb
xor eax, 0x884aa148
rol eax, 0x99
popf
pushf
not eax
add eax, 0x94a15a4a
xor eax, 0xb6df0382
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xf3529dd0
xor eax, 0xdfa68b0a
rol eax, 0xb4
popf
jmp 0x1801791b1
mov r8d, 0x74d39d14
pushf
not r8d
add r8d, 0xc6f259d8
xor r8d, 0x9575c8b6
rol r8d, 0x24
popf
pushf
not r8d
add r8d, 0xffa67f51
xor r8d, 0x88ef3734
rol r8d, 0xbe
popf
lea rdx, [rsp + 0x50]
mov rcx, rdi
jmp 0x180179ed8
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x180179f40
push rax
pushf
mov eax, 0xfcefa517
pushf
not eax
add eax, 0x8ee6dc51
xor eax, 0x930331ce
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd8ed5ffc
xor eax, 0x8769e7ea
rol eax, 0x68
popf
pushf
not eax
add eax, 0xa2140e86
xor eax, 0xf4a8db5f
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc887a9f9
xor eax, 0xfb8f4f65
rol eax, 0xff
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xeb2ef0de
pushf
not eax
add eax, 0xb1634aa2
xor eax, 0xdc72b8b9
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xbb6798e3
xor eax, 0x8c254006
rol eax, 0x35
popf
jmp 0x1801791b1
cmp dword [rsp + 0x70], 0x10000
je 0x180179fd5
push rax
pushf
mov eax, 0x31f4cf58
pushf
not eax
add eax, 0x8bd8e2d4
xor eax, 0xb7ce92d6
rol eax, 1
popf
pushf
not eax
add eax, 0x83542434
xor eax, 0x94b6da9f
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xa570aa19
xor eax, 0xa963a607
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x80b50f99
xor eax, 0xeb98cd56
rol eax, 0x68
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x3d6325bb
pushf
not eax
add eax, 0xaa30920e
xor eax, 0xeac2c411
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xd4fcda75
xor eax, 0x9e94073f
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x86fcc83c
xor eax, 0xe66dda2a
rol eax, 0xae
popf
pushf
not eax
add eax, 0xd3fec143
xor eax, 0x95195389
rol eax, 0x24
popf
jmp 0x1801791b1
xor edx, edx
lea edi, [rbp - 1]
add rdi, qword [rsp + 0x68]
add rdi, qword [rsp + 0x50]
mov rax, rdi
div rbx
sub rdi, rdx
cmp rdi, r15
jbe 0x18017a091
push rax
pushf
mov eax, 0x2795e0b
pushf
not eax
add eax, 0xb3ef4c36
xor eax, 0x8fd12756
rol eax, 0x64
popf
pushf
not eax
add eax, 0xd3b65e5d
xor eax, 0x91a95909
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x8f95054e
xor eax, 0xce55e45e
rol eax, 0xa3
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x8c0c7a4a
pushf
not eax
add eax, 0xe4b44235
xor eax, 0xa9d552d7
rol eax, 0x51
popf
pushf
not eax
add eax, 0x8bef3bde
xor eax, 0xcf0e445a
rol eax, 0x97
popf
pushf
not eax
add eax, 0xda846e99
xor eax, 0xa6deab5e
rol eax, 0xca
popf
pushf
not eax
add eax, 0xb9d170f4
xor eax, 0x8b642036
rol eax, 0x43
popf
jmp 0x1801791b1
jmp 0x18017a7b4
test rbx, rbx
je 0x18017a184
push rax
pushf
mov eax, 0x166e56ff
pushf
not eax
add eax, 0x9a13ac78
xor eax, 0x93f7751d
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x9ec51455
xor eax, 0xe3665023
rol eax, 0x88
popf
pushf
not eax
add eax, 0xc57d3962
xor eax, 0xfcd90c99
rol eax, 0xda
popf
pushf
not eax
add eax, 0xb0edd4eb
xor eax, 0x84fabc99
rol eax, 0x47
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xbb17880a
pushf
not eax
add eax, 0xdff3ecd6
xor eax, 0x9f87d3c9
rol eax, 0xec
popf
pushf
not eax
add eax, 0xe2effa5d
xor eax, 0xe77fcea4
rol eax, 0x22
popf
jmp 0x1801791b1
mov r9d, r12d
mov edx, 0x7f5b7016
pushf
not edx
add edx, 0xa9227b31
xor edx, 0xd03c3322
rol edx, 0x52
popf
pushf
not edx
add edx, 0xb6e5a16c
xor edx, 0xd601b17f
rol edx, 0x61
popf
mov r8d, 0x6e3fb135
pushf
not r8d
add r8d, 0xf1441876
xor r8d, 0xfd5e095a
rol r8d, 0xaf
popf
pushf
not r8d
add r8d, 0x909c830b
xor r8d, 0xf2594349
rol r8d, 0x31
popf
pushf
not r8d
add r8d, 0xfa930503
xor r8d, 0xe169ad56
rol r8d, 0xf1
popf
mov rcx, rbx
jmp 0x18017a23e
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x18017a292
push rax
pushf
mov eax, 0x2ba10a0
pushf
not eax
add eax, 0xb3fb077f
xor eax, 0xe065dc00
rol eax, 0x25
popf
pushf
not eax
add eax, 0xb5ef57be
xor eax, 0xc2c0c67c
rol eax, 0x34
popf
pushf
not eax
add eax, 0x90f1ded3
xor eax, 0x97fca63c
rol eax, 0x63
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x343ba00b
pushf
not eax
add eax, 0xab198041
xor eax, 0x97ed6304
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xe07d8d34
xor eax, 0xb8016219
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x8c00785c
xor eax, 0xb791488c
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xe2db6796
xor eax, 0xfaa2e50c
rol eax, 0x91
popf
jmp 0x1801791b1
cmp rbx, r14
jae 0x18017a327
push rax
pushf
mov eax, 0xfe52fd07
pushf
not eax
add eax, 0xeeb8c51c
xor eax, 0xf38de04d
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xebdaf83a
xor eax, 0xcb5b732e
rol eax, 0xb2
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x12755c57
pushf
not eax
add eax, 0xa746e20f
xor eax, 0x860ad138
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x9c427423
xor eax, 0xb9e70d11
rol eax, 0xd9
popf
jmp 0x1801791b1
jmp 0x180179d00
test rdi, rdi
je 0x18017a3dd
push rax
pushf
mov eax, 0x8b3ff6e7
pushf
not eax
add eax, 0xf624335c
xor eax, 0xfdae45a7
rol eax, 0x38
popf
pushf
not eax
add eax, 0xc6c6a7ce
xor eax, 0xf32f5d53
rol eax, 0xa2
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x6c24803b
pushf
not eax
add eax, 0x9680a246
xor eax, 0xf30924fd
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xa4a46167
xor eax, 0xa25bf32b
rol eax, 0x35
popf
pushf
not eax
add eax, 0xca959e0c
xor eax, 0xeaecff4c
rol eax, 0x4c
popf
jmp 0x1801791b1
mov r9d, r12d
mov edx, 0xe57f98bd
pushf
not edx
add edx, 0xee8eda16
xor edx, 0x9ad0ed80
rol edx, 0x2d
popf
pushf
not edx
add edx, 0x96dbaddd
xor edx, 0xa1409961
rol edx, 0xe3
popf
mov r8d, 0xcc5c14d8
pushf
not r8d
add r8d, 0x8c25e875
xor r8d, 0x9ae97a7b
rol r8d, 0x89
popf
pushf
not r8d
add r8d, 0xe16c2061
xor r8d, 0xefa51439
rol r8d, 0xf0
popf
pushf
not r8d
add r8d, 0xd47ca52b
xor r8d, 0x8e55556d
rol r8d, 0xf9
popf
mov rcx, rdi
jmp 0x18017a4aa
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x18017a4fe
push rax
pushf
mov eax, 0x3ba1874c
pushf
not eax
add eax, 0xc57fb769
xor eax, 0x9683946c
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xdee3b66e
xor eax, 0xdb2229de
rol eax, 0x62
popf
pushf
not eax
add eax, 0xbc8c8fb6
xor eax, 0xd9dc8fee
rol eax, 0xee
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x633aaedd
pushf
not eax
add eax, 0xc61779db
xor eax, 0xf57586ec
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb545f444
xor eax, 0xe0839ba3
rol eax, 0xc
popf
pushf
not eax
add eax, 0xa3964dfe
xor eax, 0x8dbe7b56
rol eax, 0x6c
popf
jmp 0x1801791b1
cmp rdi, r15
jbe 0x18017a593
push rax
pushf
mov eax, 0x1e4ceedd
pushf
not eax
add eax, 0xc6fa93ec
xor eax, 0x915ea81e
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xc3addd7f
xor eax, 0xed6f987c
rol eax, 0x60
popf
pushf
not eax
add eax, 0x9cc6b481
xor eax, 0xf014d708
rol eax, 0xc0
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0x29f9e35d
pushf
not eax
add eax, 0xf0b36a49
xor eax, 0xf3e62863
rol eax, 0x57
popf
pushf
not eax
add eax, 0xbd1fe4be
xor eax, 0xc3e38f33
rol eax, 0x46
popf
pushf
not eax
add eax, 0x8070b883
xor eax, 0x8ec1c314
rol eax, 0x46
popf
jmp 0x1801791b1
jmp 0x18017a7b4
xor edx, edx
lea rcx, [rsi + 0x40]
mov dword [rsi + 0x10], edx
nop dword [rax]
push rax
pushf
mov eax, 0xd59c1cd2
pushf
not eax
add eax, 0x8b981d5b
xor eax, 0x909a7d62
rol eax, 0x11
popf
pushf
not eax
add eax, 0xc47bdc6f
xor eax, 0xc8a7d1a2
rol eax, 0xd7
popf
jmp 0x1801791b1
mov qword [rcx], rdx
mov rax, rcx
mov qword [rsi + 8], rcx
add r12, 0x40
add rcx, 0x40
mov rdx, rax
cmp r12, 0xfc0
jbe 0x18017a6f1
push rax
pushf
mov eax, 0x41023039
pushf
not eax
add eax, 0x90224afb
xor eax, 0x8bf28f0b
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x87f5b9d1
xor eax, 0xc140dfa2
rol eax, 0x93
popf
pushf
not eax
add eax, 0xf617c38b
xor eax, 0xbebcb692
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xc0288def
xor eax, 0xf9d9bb1a
rol eax, 0xc4
popf
jmp 0x1801791b1
push rax
pushf
mov eax, 0xb7e10dee
pushf
not eax
add eax, 0xec52c218
xor eax, 0xf4049eb5
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x80193e69
xor eax, 0xa980a368
rol eax, 0x58
popf
pushf
not eax
add eax, 0xb5d68e07
xor eax, 0xd680922f
rol eax, 0x47
popf
pushf
not eax
add eax, 0xdcc374a3
xor eax, 0xf19245b2
rol eax, 0x92
popf
jmp 0x1801791b1
mov rax, qword [0x180042e20]
mov qword [rsi], rax
mov qword [0x180042e20], rsi
push rax
pushf
mov eax, 0x7268286d
pushf
not eax
add eax, 0xb50d3731
xor eax, 0xb8acaba6
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xc4491030
xor eax, 0xb6e12aea
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x937dad8a
xor eax, 0xbcc41d31
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xb676b036
xor eax, 0xf420ae52
rol eax, 0x55
popf
jmp 0x1801791b1
mov r12, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
push rax
pushf
mov eax, 0xf96b2f45
pushf
not eax
add eax, 0x86047a2c
xor eax, 0xa96c2325
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xa5d4d3e1
xor eax, 0xe3479b7c
rol eax, 0xeb
popf
jmp 0x1801791b1
mov rax, rsi
mov rsi, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r14
pop rdi
ret