Function at 0x1405e145b
Capabilities:
Parse credit card information
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0xd2278f6d
pushf
not eax
add eax, 0xbd3f708b
xor eax, 0xba7cd05e
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x92b0bfae
xor eax, 0xefda5d27
rol eax, 0x3b
popf
cmp eax, 0x29
jne 0x1405e1498
popf
pop rax
jmp 0x1405e3143
cmp eax, 0
jne 0x1405e14a7
popf
pop rax
jmp 0x1405e1867
cmp eax, 0x3f
jne 0x1405e14b6
popf
pop rax
jmp 0x1405e3e7e
cmp eax, 1
jne 0x1405e14c5
popf
pop rax
jmp 0x1405e197b
cmp eax, 0xd
jne 0x1405e14d4
popf
pop rax
jmp 0x1405e21c0
cmp eax, 0x1a
jne 0x1405e14e3
popf
pop rax
jmp 0x1405e291e
cmp eax, 0xe
jne 0x1405e14f2
popf
pop rax
jmp 0x1405e2264
cmp eax, 0x31
jne 0x1405e1501
popf
pop rax
jmp 0x1405e3655
cmp eax, 0x40
jne 0x1405e1510
popf
pop rax
jmp 0x1405e3efc
cmp eax, 8
jne 0x1405e151f
popf
pop rax
jmp 0x1405e1e79
cmp eax, 0x2a
jne 0x1405e152e
popf
pop rax
jmp 0x1405e31eb
cmp eax, 0x17
jne 0x1405e153d
popf
pop rax
jmp 0x1405e27cd
cmp eax, 0x1c
jne 0x1405e154c
popf
pop rax
jmp 0x1405e2a5b
cmp eax, 0x2e
jne 0x1405e155b
popf
pop rax
jmp 0x1405e3427
cmp eax, 0x18
jne 0x1405e156a
popf
pop rax
jmp 0x1405e2829
cmp eax, 0x2b
jne 0x1405e1579
popf
pop rax
jmp 0x1405e326f
cmp eax, 0x1b
jne 0x1405e1588
popf
pop rax
jmp 0x1405e295b
cmp eax, 0x2d
jne 0x1405e1597
popf
pop rax
jmp 0x1405e3348
cmp eax, 0x23
jne 0x1405e15a6
popf
pop rax
jmp 0x1405e2e06
cmp eax, 0x25
jne 0x1405e15b5
popf
pop rax
jmp 0x1405e2ec0
cmp eax, 0x32
jne 0x1405e15c4
popf
pop rax
jmp 0x1405e37e2
cmp eax, 0x13
jne 0x1405e15d3
popf
pop rax
jmp 0x1405e25b9
cmp eax, 0x33
jne 0x1405e15e2
popf
pop rax
jmp 0x1405e388d
cmp eax, 0x24
jne 0x1405e15f1
popf
pop rax
jmp 0x1405e2e69
cmp eax, 0x1e
jne 0x1405e1600
popf
pop rax
jmp 0x1405e2b96
cmp eax, 0xc
jne 0x1405e160f
popf
pop rax
jmp 0x1405e2139
cmp eax, 0x26
jne 0x1405e161e
popf
pop rax
jmp 0x1405e2f7a
cmp eax, 0x27
jne 0x1405e162d
popf
pop rax
jmp 0x1405e3019
cmp eax, 0x30
jne 0x1405e163c
popf
pop rax
jmp 0x1405e35c0
cmp eax, 0x10
jne 0x1405e164b
popf
pop rax
jmp 0x1405e236d
cmp eax, 0x37
jne 0x1405e165a
popf
pop rax
jmp 0x1405e3ac6
cmp eax, 9
jne 0x1405e1669
popf
pop rax
jmp 0x1405e1f04
cmp eax, 0x39
jne 0x1405e1678
popf
pop rax
jmp 0x1405e3c30
cmp eax, 0x16
jne 0x1405e1687
popf
pop rax
jmp 0x1405e278c
cmp eax, 0x3b
jne 0x1405e1696
popf
pop rax
jmp 0x1405e3d79
cmp eax, 0xa
jne 0x1405e16a5
popf
pop rax
jmp 0x1405e1fec
cmp eax, 0x36
jne 0x1405e16b4
popf
pop rax
jmp 0x1405e3a21
cmp eax, 0x14
jne 0x1405e16c3
popf
pop rax
jmp 0x1405e2662
cmp eax, 7
jne 0x1405e16d2
popf
pop rax
jmp 0x1405e1de4
cmp eax, 0x3d
jne 0x1405e16e1
popf
pop rax
jmp 0x1405e3de9
cmp eax, 2
jne 0x1405e16f0
popf
pop rax
jmp 0x1405e1a4b
cmp eax, 0x20
jne 0x1405e16ff
popf
pop rax
jmp 0x1405e2cc7
cmp eax, 0x41
jne 0x1405e170e
popf
pop rax
jmp 0x1405e3f3f
cmp eax, 0x11
jne 0x1405e171d
popf
pop rax
jmp 0x1405e244e
cmp eax, 0x35
jne 0x1405e172c
popf
pop rax
jmp 0x1405e39c2
cmp eax, 0x3a
jne 0x1405e173b
popf
pop rax
jmp 0x1405e3cb8
cmp eax, 0x12
jne 0x1405e174a
popf
pop rax
jmp 0x1405e2554
cmp eax, 0x21
jne 0x1405e1759
popf
pop rax
jmp 0x1405e2d13
cmp eax, 0x38
jne 0x1405e1768
popf
pop rax
jmp 0x1405e3b10
cmp eax, 0xb
jne 0x1405e1777
popf
pop rax
jmp 0x1405e20ce
cmp eax, 0xf
jne 0x1405e1786
popf
pop rax
jmp 0x1405e22fe
cmp eax, 0x15
jne 0x1405e1795
popf
pop rax
jmp 0x1405e271f
cmp eax, 5
jne 0x1405e17a4
popf
pop rax
jmp 0x1405e1cd7
cmp eax, 6
jne 0x1405e17b3
popf
pop rax
jmp 0x1405e1d84
cmp eax, 0x22
jne 0x1405e17c2
popf
pop rax
jmp 0x1405e2d83
cmp eax, 0x3c
jne 0x1405e17d1
popf
pop rax
jmp 0x1405e3dae
cmp eax, 0x1f
jne 0x1405e17e0
popf
pop rax
jmp 0x1405e2c35
cmp eax, 4
jne 0x1405e17ef
popf
pop rax
jmp 0x1405e1bb5
cmp eax, 0x2f
jne 0x1405e17fe
popf
pop rax
jmp 0x1405e34f8
cmp eax, 0x28
jne 0x1405e180d
popf
pop rax
jmp 0x1405e30d4
cmp eax, 0x3e
jne 0x1405e181c
popf
pop rax
jmp 0x1405e3e1e
cmp eax, 0x34
jne 0x1405e182b
popf
pop rax
jmp 0x1405e3940
cmp eax, 0x2c
jne 0x1405e183a
popf
pop rax
jmp 0x1405e330a
cmp eax, 3
jne 0x1405e1849
popf
pop rax
jmp 0x1405e1ae0
cmp eax, 0x19
jne 0x1405e1858
popf
pop rax
jmp 0x1405e2877
cmp eax, 0x1d
jne 0x1405e1867
popf
pop rax
jmp 0x1405e2b0b
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xd0
mov rax, qword [0x14004b080]
xor rax, rsp
mov qword [rbp - 9], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x61], rax
xor r12d, r12d
mov qword [rbp - 0x29], r12
mov qword [rbp - 0x19], r12
mov rdi, qword [0x14059a730]
mov qword [rbp - 0x69], rdi
mov eax, 0x7edc9629
pushf
not eax
add eax, 0xb3e01251
xor eax, 0xd911844b
rol eax, 0x78
popf
pushf
not eax
add eax, 0xb23aa7b0
xor eax, 0xa56d2dfb
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x9bbc37e9
xor eax, 0xf9b9fd3d
rol eax, 0x46
popf
cmp word [0x14004bce0], ax
jne 0x1405e1948
push rax
pushf
mov eax, 0xf8c75944
pushf
not eax
add eax, 0xf187217c
xor eax, 0xc49ef009
rol eax, 0x80
popf
pushf
not eax
add eax, 0xc48e7e88
xor eax, 0x98009995
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc0adfa4f
xor eax, 0xe52bec93
rol eax, 0x23
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x5c0572a8
pushf
not eax
add eax, 0xf114046d
xor eax, 0xe117954c
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe1e60859
xor eax, 0xaf15bfd1
rol eax, 0xca
popf
jmp 0x1405e1489
movsxd r15, dword [0x14004bd1c]
lea rax, [0x1944863db]
pushf
sub rax, 0x5443a6fb
popf
push rax
not rax
sub r15, rax
pop rax
sub r15, 1
cmp dword [r15], 0x4550
jne 0x1405e1a05
push rax
pushf
mov eax, 0x77769ada
pushf
not eax
add eax, 0xf8149a7b
xor eax, 0xa4dc2334
rol eax, 0x96
popf
pushf
not eax
add eax, 0xc1053b91
xor eax, 0xa84c1c59
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xe5730556
xor eax, 0xa849d9da
rol eax, 2
popf
pushf
not eax
add eax, 0xf319c3b2
xor eax, 0xd682b1da
rol eax, 0x5a
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x9fa60601
pushf
not eax
add eax, 0xc7244e66
xor eax, 0xa2a9632b
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xde8b4c21
xor eax, 0xa77ea03b
rol eax, 5
popf
pushf
not eax
add eax, 0xd079b710
xor eax, 0xf2e8445e
rol eax, 0x73
popf
jmp 0x1405e1489
test r15, r15
je 0x1405e1aad
push rax
pushf
mov eax, 0x7e643755
pushf
not eax
add eax, 0x89805f2c
xor eax, 0xd5a918a0
rol eax, 0x75
popf
pushf
not eax
add eax, 0xfc3bfe9d
xor eax, 0xa327d343
rol eax, 9
popf
pushf
not eax
add eax, 0xf02c9751
xor eax, 0xfd1ef471
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x9b18dac2
xor eax, 0xcde9ebff
rol eax, 0x29
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xb7db5f24
pushf
not eax
add eax, 0xe8073a3d
xor eax, 0x88e07abf
rol eax, 6
popf
pushf
not eax
add eax, 0xeb5b5305
xor eax, 0xb872eeb6
rol eax, 0x5b
popf
jmp 0x1405e1489
mov eax, 0xb95727df
pushf
not eax
add eax, 0xbfa7def0
xor eax, 0xe305f74e
rol eax, 0x85
popf
pushf
not eax
add eax, 0x84da9739
xor eax, 0xbb59d9cb
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xa5180670
xor eax, 0x872fc288
rol eax, 0x19
popf
pushf
not eax
add eax, 0x9d462b92
xor eax, 0xfe62a8ec
rol eax, 0x8f
popf
cmp word [r15 + 0x18], ax
jne 0x1405e1b82
push rax
pushf
mov eax, 0xceb20745
pushf
not eax
add eax, 0xe7cf87d0
xor eax, 0x8b9aab3f
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xe9becbaf
xor eax, 0xb7177d0a
rol eax, 0x41
popf
pushf
not eax
add eax, 0x85a1de7d
xor eax, 0xb2845dc1
rol eax, 0x84
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xd4a73dbb
pushf
not eax
add eax, 0xa3d186ec
xor eax, 0xbf0f56f5
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xaec4f814
xor eax, 0x87c2a614
rol eax, 0xa4
popf
jmp 0x1405e1489
mov r13d, dword [r15 + 0x50]
mov edx, r13d
xor ecx, ecx
mov r9d, 0x2cc836d5
pushf
not r9d
add r9d, 0xce8edca2
xor r9d, 0xda5a3232
rol r9d, 0x93
popf
pushf
not r9d
add r9d, 0xa3b68c86
xor r9d, 0xf3c2afa1
rol r9d, 0xe6
popf
mov r8d, 0xb33802d6
pushf
not r8d
add r8d, 0xd28d4208
xor r8d, 0xfafe40b7
rol r8d, 0xa1
popf
pushf
not r8d
add r8d, 0xaf258d5b
xor r8d, 0xdec9e218
rol r8d, 0x63
popf
pushf
not r8d
add r8d, 0xe33fd3bb
xor r8d, 0xfb047091
rol r8d, 0x65
popf
jmp 0x1405e1c48
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
mov qword [rbp - 0x71], rax
test rax, rax
je 0x1405e1ca4
push rax
pushf
mov eax, 0x80ef2f89
pushf
not eax
add eax, 0xdb69e909
xor eax, 0xa5136bbe
rol eax, 0x97
popf
pushf
not eax
add eax, 0xc00709f8
xor eax, 0xab29f8fa
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x941d33eb
xor eax, 0xdc4c6330
rol eax, 0x90
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x444031f9
pushf
not eax
add eax, 0x84f141ce
xor eax, 0xa54f888c
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xef96062f
xor eax, 0x8bfe0c6b
rol eax, 0xff
popf
jmp 0x1405e1489
movzx ecx, word [r15 + 0x14]
mov eax, dword [rcx + r15 + 0x24]
mov dword [rsp + 0x44], eax
sub r13d, eax
mov dword [rbp - 0x55], r13d
mov qword [rbp - 0x79], r12
mov eax, dword [rbp + 0x67]
cmp eax, 1
jne 0x1405e1d2b
push rax
pushf
mov eax, 0xb391b819
pushf
not eax
add eax, 0xc24d6f97
xor eax, 0x8f7f8e0e
rol eax, 0xf
popf
pushf
not eax
add eax, 0xf144baf0
xor eax, 0xb48afa0d
rol eax, 0x84
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x2e63e9b5
pushf
not eax
add eax, 0xd2d8aaef
xor eax, 0xa425bcff
rol eax, 0x72
popf
pushf
not eax
add eax, 0xdb7255b7
xor eax, 0xbff5069f
rol eax, 0x31
popf
pushf
not eax
add eax, 0x82052867
xor eax, 0xf23a9d07
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xb515f1df
xor eax, 0xe99131db
rol eax, 0xd8
popf
jmp 0x1405e1489
mov r12d, r13d
lea r8, [rbp - 0x79]
mov edx, r13d
mov rcx, rdi
call fcn.1406889d3
mov r14, rax
jmp 0x1405e2ec0
cmp eax, 2
jne 0x1405e1e46
push rax
pushf
mov eax, 0x784a15d7
pushf
not eax
add eax, 0x8b4570de
xor eax, 0xbbfa47b1
rol eax, 0x94
popf
pushf
not eax
add eax, 0xf17a8941
xor eax, 0x9e5ca6ff
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xbb491dcc
xor eax, 0xed6e31c6
rol eax, 0x45
popf
pushf
not eax
add eax, 0xfad07d32
xor eax, 0xfe7707f1
rol eax, 0x2f
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xf45fec2e
pushf
not eax
add eax, 0xe865c7c2
xor eax, 0xd3a71c68
rol eax, 0x17
popf
pushf
not eax
add eax, 0x841070ce
xor eax, 0x867c9c4a
rol eax, 0xdb
popf
jmp 0x1405e1489
mov qword [rsp + 0x48], r12
cmp qword [0x14059a750], r12
jne 0x1405e1ed1
push rax
pushf
mov eax, 0x9b2369ae
pushf
not eax
add eax, 0xf1c92aa8
xor eax, 0xbcca3105
rol eax, 0x63
popf
pushf
not eax
add eax, 0x9f5cc308
xor eax, 0x8f502821
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xcc7fc070
xor eax, 0xf88fa427
rol eax, 0xea
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x34752983
pushf
not eax
add eax, 0x992165ff
xor eax, 0xa9ab4622
rol eax, 0x55
popf
pushf
not eax
add eax, 0xdf20170a
xor eax, 0x93fc761a
rol eax, 0xef
popf
jmp 0x1405e1489
lea rax, [0x1bcf9349f]
pushf
sub rax, 0x7cf57b8f
popf
mov qword [rsp + 0x20], rax
lea r9, [0x197b03079]
pushf
sub r9, 0x57ac7741
popf
mov r8, qword [0x14059a728]
lea rdx, [0x18fdc0c7e]
pushf
sub rdx, 0x4fd8531e
popf
mov rcx, rdi
call fcn.140686845
mov rsi, rax
mov qword [0x14059a750], rax
test rax, rax
je 0x1405e1f93
push rax
pushf
mov eax, 0x5021f99c
pushf
not eax
add eax, 0xe8cf3051
xor eax, 0x9cdf1e35
rol eax, 0x47
popf
pushf
not eax
add eax, 0xf1184a6b
xor eax, 0xb80109e8
rol eax, 0x11
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xe2d8b203
pushf
not eax
add eax, 0x96e559d3
xor eax, 0xe6478bca
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x82a44426
xor eax, 0xe2d8f84f
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xcc5b0825
xor eax, 0xbc227fcb
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xfed9925e
xor eax, 0x9c850e7f
rol eax, 0x6e
popf
jmp 0x1405e1489
mov dword [rbp - 0x59], r12d
lea r8, [rax + 1]
mov r9d, 0x204b60ce
pushf
not r9d
add r9d, 0xdb24cf5b
xor r9d, 0xf36b3793
rol r9d, 0xbc
popf
pushf
not r9d
add r9d, 0xa1d51eee
xor r9d, 0xa92c5426
rol r9d, 8
popf
pushf
not r9d
add r9d, 0xe3bd7417
xor r9d, 0xce0ffe12
rol r9d, 0xd8
popf
lea rdx, [rbp - 0x59]
mov rcx, rdi
call fcn.1405c9230
test al, al
jne 0x1405e209b
push rax
pushf
mov eax, 0x39689b1e
pushf
not eax
add eax, 0xc4056b6c
xor eax, 0x8f2a699d
rol eax, 0x99
popf
pushf
not eax
add eax, 0xda64070d
xor eax, 0xd2ef5d7d
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xb9bf19be
xor eax, 0xd74c1562
rol eax, 0xf4
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x2ac62483
pushf
not eax
add eax, 0xacd269e2
xor eax, 0xcffa611a
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x9d62dbaa
xor eax, 0x8c2bc318
rol eax, 0x54
popf
jmp 0x1405e1489
mov qword [0x14059a750], r12
mov r14, r12
mov r12d, r13d
jmp 0x1405e2ec0
movsxd rcx, dword [rbp - 0x59]
add rcx, 5
push rsi
not rsi
sub rcx, rsi
pop rsi
sub rcx, 1
mov qword [0x14059a750], rcx
je 0x1405e218d
push rax
pushf
mov eax, 0x24dd5e
pushf
not eax
add eax, 0x904bed55
xor eax, 0xa2f83c8e
rol eax, 0x30
popf
pushf
not eax
add eax, 0xe6f2c8d1
xor eax, 0xb5fa95f1
rol eax, 0x89
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xd5dbd57c
pushf
not eax
add eax, 0xa5f9f832
xor eax, 0x93aa7a07
rol eax, 0x66
popf
pushf
not eax
add eax, 0xb5814d1f
xor eax, 0xc86b2b0e
rol eax, 0xd9
popf
jmp 0x1405e1489
mov r9d, r13d
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.14060cb72
test al, al
je 0x1405e220b
push rax
pushf
mov eax, 0xb480b0f9
pushf
not eax
add eax, 0x88b0e706
xor eax, 0xdbce87d4
rol eax, 0x69
popf
pushf
not eax
add eax, 0x8122fab8
xor eax, 0x83bf4ae8
rol eax, 0x7d
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x91e2cfd3
pushf
not eax
add eax, 0xfc33da83
xor eax, 0x80d5da4b
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xc83bdb33
xor eax, 0xbadc28cd
rol eax, 0x85
popf
pushf
not eax
add eax, 0xffbc0843
xor eax, 0xac702eb6
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x9405274c
xor eax, 0xce9ab149
rol eax, 0xee
popf
jmp 0x1405e1489
mov r14, qword [rsp + 0x48]
test r14, r14
je 0x1405e22a5
push rax
pushf
mov eax, 0x711b3c3a
pushf
not eax
add eax, 0xf21f6172
xor eax, 0xf3ad3e72
rol eax, 0x86
popf
pushf
not eax
add eax, 0x89763668
xor eax, 0xe32f650b
rol eax, 6
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x6a3c615f
pushf
not eax
add eax, 0xcf1c7b80
xor eax, 0xcf0b835b
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xca5208fc
xor eax, 0xee8013c2
rol eax, 0x10
popf
pushf
not eax
add eax, 0x9132f381
xor eax, 0x9fdba8a4
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xdbe89987
xor eax, 0xb4941c2c
rol eax, 0xf8
popf
jmp 0x1405e1489
cmp qword [0x14059a6a0], r12
jne 0x1405e233a
push rax
pushf
mov eax, 0xd1d670c9
pushf
not eax
add eax, 0xa030800a
xor eax, 0x9e6d82f5
rol eax, 0x52
popf
pushf
not eax
add eax, 0xb6effc5b
xor eax, 0x805abb7c
rol eax, 0xce
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xdbd0837d
pushf
not eax
add eax, 0xa9f1ebc4
xor eax, 0xbe599c4c
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xc564cbc1
xor eax, 0xadc4783d
rol eax, 0x66
popf
jmp 0x1405e1489
lea rax, [0x186ad115b]
pushf
sub rax, 0x46a957c3
popf
mov qword [rsp + 0x20], rax
lea r9, [0x1bc2e03e0]
pushf
sub r9, 0x7c2a4a28
popf
mov r8, qword [0x14059a728]
lea rdx, [0x1a487909a]
pushf
sub rdx, 0x6483d816
popf
mov rcx, rdi
call fcn.140686845
mov qword [0x14059a6a0], rax
test rax, rax
je 0x1405e23f5
push rax
pushf
mov eax, 0x9d1c441
pushf
not eax
add eax, 0xdb8a6e55
xor eax, 0xcd87599a
rol eax, 0xce
popf
pushf
not eax
add eax, 0xd8e75264
xor eax, 0xdc050a44
rol eax, 0x1c
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x6f5a996
pushf
not eax
add eax, 0x9f5cd5d0
xor eax, 0xe60f5050
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x8891add0
xor eax, 0xfd41b90a
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xa025c5a9
xor eax, 0xa3f9a9d0
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x98e62f4d
xor eax, 0x802a9e86
rol eax, 0xf9
popf
jmp 0x1405e1489
lea rsi, [rax + 0xc]
mov qword [0x14059a6a0], rsi
mov dword [rbp - 0x59], r12d
lea r8, [rsi + 1]
mov r9d, 0x24f5ab1a
pushf
not r9d
add r9d, 0xe97a7d56
xor r9d, 0xbd8c362a
rol r9d, 0xdc
popf
pushf
not r9d
add r9d, 0xd19a3df5
xor r9d, 0xbe41017b
rol r9d, 8
popf
pushf
not r9d
add r9d, 0xe93f92bc
xor r9d, 0xa494bcbb
rol r9d, 0x4c
popf
pushf
not r9d
add r9d, 0xd4209b37
xor r9d, 0x8cbbdaf6
rol r9d, 0x50
popf
lea rdx, [rbp - 0x59]
mov rcx, rdi
call fcn.1405c9230
test al, al
jne 0x1405e250e
push rax
pushf
mov eax, 0x776266d5
pushf
not eax
add eax, 0x8e7f5dad
xor eax, 0xa68f83a7
rol eax, 0x97
popf
pushf
not eax
add eax, 0xaebbf1dc
xor eax, 0xf6632805
rol eax, 0x3f
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xb732f99a
pushf
not eax
add eax, 0xbb16bd07
xor eax, 0xbb783473
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xb6dc112a
xor eax, 0xc0adb685
rol eax, 0x57
popf
pushf
not eax
add eax, 0x89c7c803
xor eax, 0xc4eaeb38
rol eax, 0xab
popf
jmp 0x1405e1489
mov qword [0x14059a6a0], r12
jmp 0x1405e278c
movsxd rcx, dword [rbp - 0x59]
add rcx, 5
push rsi
not rsi
sub rcx, rsi
pop rsi
sub rcx, 1
mov qword [0x14059a6a0], rcx
je 0x1405e262f
push rax
pushf
mov eax, 0xbb30792f
pushf
not eax
add eax, 0xfd553d87
xor eax, 0xd79ea266
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xe099b8f3
xor eax, 0xf4612360
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x994c86ff
xor eax, 0xce064202
rol eax, 6
popf
pushf
not eax
add eax, 0x8552a54e
xor eax, 0xfe58345b
rol eax, 0xca
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x5a08ed8e
pushf
not eax
add eax, 0xd3969328
xor eax, 0x8bf52ffc
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xde162891
xor eax, 0xfbb490c7
rol eax, 0x6e
popf
jmp 0x1405e1489
mov byte [rsp + 0x40], r12b
mov dword [rsp + 0x20], r13d
mov r9, r14
lea rdx, [rsp + 0x40]
mov rcx, rdi
call fcn.140656c14
test al, al
je 0x1405e26d9
push rax
pushf
mov eax, 0xb5619ac4
pushf
not eax
add eax, 0xcadf3720
xor eax, 0x94d83fd0
rol eax, 0x64
popf
pushf
not eax
add eax, 0xeb3374df
xor eax, 0xd61d909d
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9b913688
xor eax, 0xe6c4ff52
rol eax, 0x52
popf
pushf
not eax
add eax, 0x948ebf7f
xor eax, 0x9d4b7187
rol eax, 0xa9
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x465d36a8
pushf
not eax
add eax, 0xf01794d8
xor eax, 0x9a8b20d5
rol eax, 9
popf
pushf
not eax
add eax, 0xf65a90c2
xor eax, 0xb827da5e
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xcb2877af
xor eax, 0xc5518122
rol eax, 0xa
popf
jmp 0x1405e1489
cmp byte [rsp + 0x40], r12b
jne 0x1405e2759
push rax
pushf
mov eax, 0xc26df532
pushf
not eax
add eax, 0xa07285b9
xor eax, 0xe19f759b
rol eax, 0xce
popf
pushf
not eax
add eax, 0xc9e276f0
xor eax, 0xd02b2709
rol eax, 0xcd
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x62bf8d17
pushf
not eax
add eax, 0xee8e999a
xor eax, 0xc2d9f378
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xb1717df0
xor eax, 0xb17234cd
rol eax, 6
popf
jmp 0x1405e1489
mov r8d, r13d
mov rdx, r14
mov rcx, rdi
call fcn.1406d3d68
push rax
pushf
mov eax, 0xf14b9f65
pushf
not eax
add eax, 0xba61a749
xor eax, 0xafcf31ac
rol eax, 0x41
popf
pushf
not eax
add eax, 0x904aa326
xor eax, 0xc2203687
rol eax, 0xad
popf
jmp 0x1405e1489
mov r14, r12
push rax
pushf
mov eax, 0xe5c08ff7
pushf
not eax
add eax, 0x9e627ee9
xor eax, 0xa023456d
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xdbea37cb
xor eax, 0x94f95c27
rol eax, 0x39
popf
pushf
not eax
add eax, 0xa75c2073
xor eax, 0xb2e3f991
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x86fe260b
xor eax, 0xa0c43c65
rol eax, 0xc2
popf
jmp 0x1405e1489
mov r12d, r13d
jmp 0x1405e2ec0
mov r12d, r13d
test r13d, r13d
jne 0x1405e28d8
push rax
pushf
mov eax, 0x5a5a5cf1
pushf
not eax
add eax, 0xad852f5e
xor eax, 0xc4f101ee
rol eax, 0x33
popf
pushf
not eax
add eax, 0xab65ec6f
xor eax, 0xaa89c2f0
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x9aa55ca1
xor eax, 0xc6d160b2
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xff247eeb
xor eax, 0xfb66c5bb
rol eax, 0xe4
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xe0862b23
pushf
not eax
add eax, 0xc8c35b7a
xor eax, 0xdde9395e
rol eax, 0x59
popf
pushf
not eax
add eax, 0xc5b47d95
xor eax, 0xfc234f27
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x9f594c02
xor eax, 0xf7237eaf
rol eax, 0x49
popf
jmp 0x1405e1489
xor eax, eax
mov r14d, eax
jmp 0x1405e2ec0
mov edx, 0xd86d7a97
pushf
not edx
add edx, 0xf37731f4
xor edx, 0x8023222c
rol edx, 0x21
popf
pushf
not edx
add edx, 0xf71f248e
xor edx, 0x98c828e4
rol edx, 0xd4
popf
pushf
not edx
add edx, 0x85354347
xor edx, 0xf1ef1d3d
rol edx, 0x41
popf
pushf
not edx
add edx, 0x9ccea6e2
xor edx, 0x9a4ceab0
rol edx, 0xff
popf
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14059a7a0], eax
jle 0x1405e2a15
push rax
pushf
mov eax, 0x6a500cec
pushf
not eax
add eax, 0x87178414
xor eax, 0x8c30cd06
rol eax, 0x50
popf
pushf
not eax
add eax, 0xa9c1fc10
xor eax, 0xc3326b63
rol eax, 0x75
popf
pushf
not eax
add eax, 0xf6d20643
xor eax, 0xe76c7302
rol eax, 0x7a
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xd62cd861
pushf
not eax
add eax, 0xa6fa9e18
xor eax, 0xa0c5a1e3
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xd9350951
xor eax, 0xec592329
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xe216a83a
xor eax, 0x940cf435
rol eax, 0x2f
popf
jmp 0x1405e1489
lea rcx, [0x1b3793570]
pushf
sub rcx, 0x731f8dd0
popf
call fcn.1406c6f56
cmp dword [0x14059a7a0], 0xffffffff
jne 0x1405e2ac5
push rax
pushf
mov eax, 0x4082e445
pushf
not eax
add eax, 0x81e3e289
xor eax, 0x82fd82c0
rol eax, 0x93
popf
pushf
not eax
add eax, 0xba1354d6
xor eax, 0xe88ad9f6
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xc3e82720
xor eax, 0xc861ffc0
rol eax, 0x95
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x85cd3c79
pushf
not eax
add eax, 0x9c9bbe08
xor eax, 0xb622aa44
rol eax, 0x62
popf
pushf
not eax
add eax, 0xc36a370a
xor eax, 0xc3fff718
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x96aa9b83
xor eax, 0xd38aaa4b
rol eax, 0x60
popf
jmp 0x1405e1489
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x41], xmm1
mov r8d, 0x83e74326
pushf
not r8d
add r8d, 0xbbbce802
xor r8d, 0xb0d3625b
rol r8d, 0xbe
popf
pushf
not r8d
add r8d, 0xbb8b728e
xor r8d, 0x99c9c5ad
rol r8d, 0x3a
popf
lea rdx, [0x18d41b405]
pushf
sub rdx, 0x4d3df9a5
popf
lea rcx, [rbp - 0x51]
call fcn.140658bf6
nop
lea r8, [rbp - 0x51]
mov rdx, qword [0x14059a728]
mov rcx, rdi
call fcn.140618d3f
mov qword [0x14059a890], rax
mov rdx, qword [rbp - 0x39]
cmp rdx, 0xf
jbe 0x1405e2d13
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1405e2c02
push rax
pushf
mov eax, 0xdd145083
pushf
not eax
add eax, 0xf8a436a0
xor eax, 0x81fb7336
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x94ec0c3c
xor eax, 0xad666e98
rol eax, 0xe
popf
pushf
not eax
add eax, 0xb6cc2ac6
xor eax, 0x80a12805
rol eax, 0x17
popf
pushf
not eax
add eax, 0xad903be4
xor eax, 0xaf6d1364
rol eax, 0xeb
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x8cd1a1c4
pushf
not eax
add eax, 0x882af722
xor eax, 0xb87e5bff
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xa845d5a9
xor eax, 0xae21a338
rol eax, 0xa9
popf
jmp 0x1405e1489
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1405e2c81
push rax
pushf
mov eax, 0x1e0474b4
pushf
not eax
add eax, 0xf38ce867
xor eax, 0xa839ec82
rol eax, 0x63
popf
pushf
not eax
add eax, 0x88e40e36
xor eax, 0x9b5f14b2
rol eax, 0x52
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x5f012993
pushf
not eax
add eax, 0xe54782aa
xor eax, 0x88544d5c
rol eax, 0x37
popf
pushf
not eax
add eax, 0xeea944c1
xor eax, 0xa060c0c9
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd5f67b0a
xor eax, 0x87cedf0e
rol eax, 0xd2
popf
jmp 0x1405e1489
call fcn.14061c765
nop
push rax
pushf
mov eax, 0x351b3bf9
pushf
not eax
add eax, 0xa522a5c2
xor eax, 0xd07d7c81
rol eax, 0x88
popf
pushf
not eax
add eax, 0xc90be75e
xor eax, 0xdeb8c965
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x87083793
xor eax, 0xee035247
rol eax, 0x24
popf
jmp 0x1405e1489
lea rcx, [0x1bce36299]
pushf
sub rcx, 0x7c89baf9
popf
call fcn.1406ac724
push rax
pushf
mov eax, 0x59ce4466
pushf
not eax
add eax, 0xc73d44b0
xor eax, 0xe5fe9439
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xb35d0da6
xor eax, 0x9a357eae
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xa291798e
xor eax, 0xf10502e8
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xdbdf320d
xor eax, 0x9117385e
rol eax, 0x12
popf
jmp 0x1405e1489
cmp qword [0x14059a890], 0
jne 0x1405e2dc0
push rax
pushf
mov eax, 0x46111dde
pushf
not eax
add eax, 0xbe25a5b8
xor eax, 0xf849eae5
rol eax, 3
popf
pushf
not eax
add eax, 0x856251f3
xor eax, 0x8255e80e
rol eax, 0xd0
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xe48514cc
pushf
not eax
add eax, 0xc68f7657
xor eax, 0x867cc6e5
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xf7b449b6
xor eax, 0x8bc73f57
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x9fde9f97
xor eax, 0x83d322d9
rol eax, 0xfb
popf
jmp 0x1405e1489
xor eax, eax
mov r14d, eax
jmp 0x1405e2ec0
xor esi, esi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x20], r12
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.1406a70ba
mov r14, qword [rsp + 0x48]
test al, al
cmove r14, rsi
push rax
pushf
mov eax, 0x137e424c
pushf
not eax
add eax, 0xd182b810
xor eax, 0xd1667eee
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xfc6ab51b
xor eax, 0x9a5f8eeb
rol eax, 0xda
popf
jmp 0x1405e1489
mov rcx, rbx
test r14, r14
jne 0x1405e2f21
push rax
pushf
mov eax, 0xa3eaf0ab
pushf
not eax
add eax, 0xcda42774
xor eax, 0xd11d491b
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x804ba052
xor eax, 0xdcd9fd49
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf32111d9
xor eax, 0xeb458726
rol eax, 0x77
popf
pushf
not eax
add eax, 0x9c754a80
xor eax, 0xb20fcdd9
rol eax, 0xae
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x565af4f8
pushf
not eax
add eax, 0x9c886540
xor eax, 0x83d8752c
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x816b9a5a
xor eax, 0x82a8c6f2
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x83f1df35
xor eax, 0xadd92335
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xd5f1ff2a
xor eax, 0x81b5e116
rol eax, 0x3b
popf
jmp 0x1405e1489
xor edx, edx
mov r8d, 0xd6886cc5
pushf
not r8d
add r8d, 0xf635f028
xor r8d, 0xf7065dbf
rol r8d, 0x7c
popf
pushf
not r8d
add r8d, 0x9b321573
xor r8d, 0xbca55785
rol r8d, 0x5e
popf
jmp 0x1405e2fb5
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x1405e3de9
mov r8d, dword [r15 + 0x54]
lea rdx, [0x1892d0a08]
pushf
sub rdx, 0x49284d28
popf
call fcn.14002ec30
movzx ebx, word [r15 + 0x14]
add rbx, 0x28
xor ecx, ecx
mov esi, ecx
cmp cx, word [r15 + 6]
jae 0x1405e30a1
push rax
pushf
mov eax, 0x7f6840b3
pushf
not eax
add eax, 0xe908d90c
xor eax, 0xc21f39f1
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xd5bb2dc1
xor eax, 0x8d8dfb48
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xf6c828c2
xor eax, 0xb9861410
rol eax, 0x39
popf
pushf
not eax
add eax, 0xb47d0afb
xor eax, 0xa7d142bd
rol eax, 0x3f
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x34e44788
pushf
not eax
add eax, 0x9c452112
xor eax, 0xb4deeabc
rol eax, 0x52
popf
pushf
not eax
add eax, 0xbef3ca8e
xor eax, 0xf20afb95
rol eax, 0xb1
popf
jmp 0x1405e1489
push r15
not r15
sub rbx, r15
pop r15
sub rbx, 1
mov r12, qword [rbp - 0x71]
lea r13, [0x1b633a170]
pushf
sub r13, 0x762ee490
popf
nop dword [rax + rax]
push rax
pushf
mov eax, 0x33ee427d
pushf
not eax
add eax, 0x979bdcbe
xor eax, 0xdaa1073a
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xae8209ce
xor eax, 0xb7941f4d
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x896fd9fb
xor eax, 0xbf757047
rol eax, 0xb9
popf
jmp 0x1405e1489
test dword [rbx + 0x14], 0x80
ja 0x1405e3192
push rax
pushf
mov eax, 0x91d980f0
pushf
not eax
add eax, 0xcb8bfec6
xor eax, 0x801560d7
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xd08ce597
xor eax, 0xa0f5b479
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x880b160a
xor eax, 0xf2d1459f
rol eax, 0x94
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xf64d0914
pushf
not eax
add eax, 0xe2e84cc7
xor eax, 0x96877449
rol eax, 0x98
popf
pushf
not eax
add eax, 0xd0060115
xor eax, 0xb6716460
rol eax, 0xa
popf
pushf
not eax
add eax, 0x9808a75a
xor eax, 0xf63d0491
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xb321c120
xor eax, 0xfa0b1534
rol eax, 0x27
popf
jmp 0x1405e1489
mov r8d, dword [rbx]
mov edx, dword [rbx + 4]
push r13
not r13
sub rdx, r13
pop r13
sub rdx, 1
mov ecx, dword [rbx - 4]
push r12
not r12
sub rcx, r12
pop r12
sub rcx, 1
call fcn.14002ec30
push rax
pushf
mov eax, 0x78dd724e
pushf
not eax
add eax, 0xf61ae2ab
xor eax, 0xf18a3c11
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xaee37838
xor eax, 0xec297b6b
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xda2283d2
xor eax, 0x85ec162f
rol eax, 0
popf
pushf
not eax
add eax, 0x8e0d3a63
xor eax, 0xc39300ac
rol eax, 0xa7
popf
jmp 0x1405e1489
inc esi
add rbx, 0x28
movzx eax, word [r15 + 6]
cmp esi, eax
jl 0x1405e32b1
push rax
pushf
mov eax, 0xec5b7deb
pushf
not eax
add eax, 0xd459c291
xor eax, 0xcd2ab519
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x8ebb701e
xor eax, 0x88101c57
rol eax, 0x49
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x91f247ba
pushf
not eax
add eax, 0x892d2048
xor eax, 0xefd0d4d6
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xce459fbe
xor eax, 0xf0184cb3
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xb87dacb3
xor eax, 0xbd44382a
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xbfe604d2
xor eax, 0xaecc343b
rol eax, 0xd3
popf
jmp 0x1405e1489
mov r13d, dword [rbp - 0x55]
mov r12d, r13d
mov rdi, qword [rbp - 0x69]
push rax
pushf
mov eax, 0x7533cb7d
pushf
not eax
add eax, 0xf22101ed
xor eax, 0xec5a4e91
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xdf3acb4c
xor eax, 0xb923dc2c
rol eax, 0x26
popf
jmp 0x1405e1489
mov rsi, r14
mov eax, dword [rsp + 0x44]
sub r14, rax
mov rbx, r14
sub rbx, qword [r15 + 0x30]
mov rdx, qword [rbp - 0x71]
lea rcx, [rbp - 0x51]
call fcn.14069e153
mov rdx, rbx
mov rcx, rax
call fcn.1406a23a1
mov rdx, r14
mov rbx, qword [rbp - 0x71]
mov rcx, rbx
call fcn.1405eab75
test al, al
je 0x1405e33ce
push rax
pushf
mov eax, 0xef615534
pushf
not eax
add eax, 0xf664771e
xor eax, 0xf5da5018
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xe3b1b226
xor eax, 0xd0141809
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xf6143c6e
xor eax, 0x82275230
rol eax, 0x47
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x247c6147
pushf
not eax
add eax, 0xaa6b42fb
xor eax, 0x86a03555
rol eax, 0x91
popf
pushf
not eax
add eax, 0x969d238c
xor eax, 0x9f32043d
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x9b539bde
xor eax, 0xc75e1e6a
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x896fa399
xor eax, 0xa45a53e3
rol eax, 0xea
popf
jmp 0x1405e1489
mov rdx, rbx
lea rcx, [rbp - 0x51]
call fcn.140641ac4
mov rdx, rax
mov rcx, rdi
call fcn.1406afb2d
test al, al
je 0x1405e349f
push rax
pushf
mov eax, 0xe21821d2
pushf
not eax
add eax, 0xf426eb68
xor eax, 0xc08a3a89
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xec853835
xor eax, 0xaf086188
rol eax, 0xea
popf
pushf
not eax
add eax, 0xe41b56de
xor eax, 0xe217f712
rol eax, 0x17
popf
pushf
not eax
add eax, 0xcd4e3874
xor eax, 0xe85235e5
rol eax, 0x92
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xdde6ac71
pushf
not eax
add eax, 0xafe1db8e
xor eax, 0xa61a6f49
rol eax, 0x55
popf
pushf
not eax
add eax, 0xb276893b
xor eax, 0xa8c2b902
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x9d6e1a81
xor eax, 0xe1b7bbde
rol eax, 0x86
popf
pushf
not eax
add eax, 0xbc97b8a3
xor eax, 0xe5aec29d
rol eax, 0xf9
popf
jmp 0x1405e1489
mov eax, dword [rsp + 0x44]
push rbx
not rbx
sub rax, rbx
pop rbx
sub rax, 1
je 0x1405e3567
push rax
pushf
mov eax, 0x6f1b085e
pushf
not eax
add eax, 0xa6247f12
xor eax, 0xae1ec50c
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x9d18c94d
xor eax, 0x99c99338
rol eax, 0x53
popf
pushf
not eax
add eax, 0xeaaaec86
xor eax, 0xf76a0767
rol eax, 0x28
popf
pushf
not eax
add eax, 0x8e394468
xor eax, 0xf3106595
rol eax, 0xd0
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xe4e266d1
pushf
not eax
add eax, 0x9a0a939a
xor eax, 0x95871443
rol eax, 0x70
popf
pushf
not eax
add eax, 0x954f1fb1
xor eax, 0xa3d385a0
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xf5bc8ec4
xor eax, 0xbaec11cb
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xb4ed8ff4
xor eax, 0xef1c62b6
rol eax, 0x60
popf
jmp 0x1405e1489
test r12, r12
je 0x1405e3622
push rax
pushf
mov eax, 0xdf539c0e
pushf
not eax
add eax, 0xaf6dc43e
xor eax, 0xd32c0e07
rol eax, 0x99
popf
pushf
not eax
add eax, 0xe3ced924
xor eax, 0xa96e3187
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x8db45225
xor eax, 0xb3a91227
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xb8ffa696
xor eax, 0xa5b89f8f
rol eax, 0x36
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xe9c23b87
pushf
not eax
add eax, 0xb6312f0b
xor eax, 0xecb50bac
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xf63fd200
xor eax, 0x963409c9
rol eax, 0xe7
popf
jmp 0x1405e1489
xor ecx, ecx
mov qword [rbp - 0x49], rcx
mov qword [rbp - 0x51], 0x33
mov qword [rbp - 0x41], rax
mov qword [rbp - 0x39], rsi
mov qword [rbp - 0x31], r12
mov dword [rbp - 0x55], ecx
mov qword [rsp + 0x38], rcx
lea rax, [rbp - 0x55]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rcx
mov r9d, 0x3294bf0c
pushf
not r9d
add r9d, 0xf36e23f9
xor r9d, 0xfa709730
rol r9d, 0xe3
popf
pushf
not r9d
add r9d, 0xf1ad1574
xor r9d, 0x9e22eba5
rol r9d, 0x3b
popf
pushf
not r9d
add r9d, 0x837c51a1
xor r9d, 0xc76840b7
rol r9d, 0x59
popf
lea r8, [rbp - 0x51]
mov edx, 0xada90acc
pushf
not edx
add edx, 0xa5c526b5
xor edx, 0x87794f96
rol edx, 0xd1
popf
pushf
not edx
add edx, 0xa3a2dd63
xor edx, 0xf1b58cf9
rol edx, 0xf8
popf
pushf
not edx
add edx, 0x89de4ad6
xor edx, 0xaef33d03
rol edx, 0xf8
popf
mov rcx, rdi
jmp 0x1405e3726
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1405e3789
push rax
pushf
mov eax, 0x816ca350
pushf
not eax
add eax, 0xba39cf84
xor eax, 0xb2b12cd7
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc50e3b5d
xor eax, 0x8a46224a
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xf3872fd6
xor eax, 0xa00601bc
rol eax, 0xef
popf
pushf
not eax
add eax, 0xc7415d1a
xor eax, 0xdf812c84
rol eax, 0xe6
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x393cff07
pushf
not eax
add eax, 0xc03f2904
xor eax, 0x8aa94378
rol eax, 0x31
popf
pushf
not eax
add eax, 0xf879b78e
xor eax, 0xbf417c42
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xefec5355
xor eax, 0xf4a4c881
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xf817de46
xor eax, 0xfcd9bbda
rol eax, 0xc3
popf
jmp 0x1405e1489
mov r15d, dword [r15 + 0x28]
push r14
not r14
sub r15, r14
pop r14
sub r15, 1
mov r14, qword [rbp - 0x79]
mov qword [rsp + 0x20], r14
mov r9, r12
mov r8, rsi
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x19]
call fcn.1400067b0
test al, al
je 0x1405e3847
push rax
pushf
mov eax, 0x433d5245
pushf
not eax
add eax, 0xf554996d
xor eax, 0x8007ebb1
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x913b9529
xor eax, 0x86723234
rol eax, 0x80
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x7d0702a8
pushf
not eax
add eax, 0xc1c77dbc
xor eax, 0xc938a17a
rol eax, 4
popf
pushf
not eax
add eax, 0x9f3fce42
xor eax, 0xd425282d
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x8ba46273
xor eax, 0xb5b3d500
rol eax, 0x89
popf
jmp 0x1405e1489
xor eax, eax
mov dword [rsp + 0x44], eax
mov rax, qword [rbp - 0x29]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x19]
mov r8, r15
lea rdx, [rsp + 0x44]
mov rcx, rdi
call fcn.14061ed4a
test al, al
je 0x1405e38e7
push rax
pushf
mov eax, 0x8b6ff991
pushf
not eax
add eax, 0xb24ee36f
xor eax, 0xf1f4ea19
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xddc2f580
xor eax, 0xceaf95d7
rol eax, 0x7a
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0xc6864db9
pushf
not eax
add eax, 0xaeb0e9f8
xor eax, 0x97338afd
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xc001cd35
xor eax, 0xb31f31dd
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x98b7bfb6
xor eax, 0x85e2561a
rol eax, 4
popf
pushf
not eax
add eax, 0x9bb9b11d
xor eax, 0xde81ba3b
rol eax, 0xc9
popf
jmp 0x1405e1489
mov rax, qword [rbp - 0x61]
test rax, rax
je 0x1405e397c
push rax
pushf
mov eax, 0xda4966f3
pushf
not eax
add eax, 0xb3fd3181
xor eax, 0xecab4a85
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x9c0d1961
xor eax, 0x838d1c6b
rol eax, 0x5a
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x70755994
pushf
not eax
add eax, 0xcd7f13c6
xor eax, 0xfe1b2253
rol eax, 8
popf
pushf
not eax
add eax, 0x98ef946e
xor eax, 0x80b39ace
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb07d1d25
xor eax, 0x9fa087c5
rol eax, 0x25
popf
jmp 0x1405e1489
mov ecx, dword [rsp + 0x44]
mov dword [rax], ecx
push rax
pushf
mov eax, 0x3591734d
pushf
not eax
add eax, 0xe34b0996
xor eax, 0x95be6a0d
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xf8d52143
xor eax, 0xe6b59247
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xee2e28c7
xor eax, 0xea4f93d1
rol eax, 0x75
popf
pushf
not eax
add eax, 0xae188653
xor eax, 0x85c88edb
rol eax, 0xc1
popf
jmp 0x1405e1489
xor edx, edx
mov r8d, 0x72dd45bd
pushf
not r8d
add r8d, 0xd861bc55
xor r8d, 0xbb3ea366
rol r8d, 0x45
popf
pushf
not r8d
add r8d, 0xc4129bd0
xor r8d, 0xacb7dd94
rol r8d, 0xb1
popf
mov rcx, rbx
jmp 0x1405e3a5f
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, rsi
jmp 0x1405e3e1e
mov r14, qword [rbp - 0x79]
push rax
pushf
mov eax, 0x14dbc856
pushf
not eax
add eax, 0xd4096369
xor eax, 0x91046c61
rol eax, 0xea
popf
pushf
not eax
add eax, 0xec9e2964
xor eax, 0xf96831a3
rol eax, 0x67
popf
pushf
not eax
add eax, 0xaec12587
xor eax, 0xda8aa1c8
rol eax, 0x1e
popf
jmp 0x1405e1489
xor edx, edx
mov r8d, 0xc7899e53
pushf
not r8d
add r8d, 0xc8619b52
xor r8d, 0xffcd2e0d
rol r8d, 0x34
popf
pushf
not r8d
add r8d, 0x8df3dadb
xor r8d, 0x9e3813a5
rol r8d, 0xb8
popf
pushf
not r8d
add r8d, 0xe8c206f7
xor r8d, 0xe13e95f4
rol r8d, 0x7a
popf
pushf
not r8d
add r8d, 0xb3ba0323
xor r8d, 0xd1b50366
rol r8d, 0x91
popf
mov rcx, rbx
jmp 0x1405e3b80
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, dword [rbp + 0x67]
mov rdx, rsi
cmp eax, 1
jne 0x1405e3bd7
push rax
pushf
mov eax, 0x447e0723
pushf
not eax
add eax, 0xf1943bfb
xor eax, 0xa046a284
rol eax, 0x44
popf
pushf
not eax
add eax, 0xdbf2a3ab
xor eax, 0xbc763e62
rol eax, 0xca
popf
pushf
not eax
add eax, 0x9b8e6750
xor eax, 0x8f8e0466
rol eax, 4
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x764dcf6a
pushf
not eax
add eax, 0x83bddfed
xor eax, 0xa76b25f0
rol eax, 0x18
popf
pushf
not eax
add eax, 0xecde7049
xor eax, 0xcde00e87
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x84101a05
xor eax, 0xddb6d778
rol eax, 0xea
popf
pushf
not eax
add eax, 0xe1b15ec1
xor eax, 0x94c44d6a
rol eax, 0x19
popf
jmp 0x1405e1489
mov r8, r14
mov rcx, rdi
call fcn.1405ed127
test al, al
je 0x1405e3c85
push rax
pushf
mov eax, 0x1cebc59d
pushf
not eax
add eax, 0x839ee5c0
xor eax, 0xf85cafe9
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xa63e4d04
xor eax, 0xe3f4c768
rol eax, 0x36
popf
pushf
not eax
add eax, 0x9af7a683
xor eax, 0x87d0d190
rol eax, 0xf2
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x234d3598
pushf
not eax
add eax, 0xb092a8d8
xor eax, 0xd01655b6
rol eax, 0x92
popf
pushf
not eax
add eax, 0x8eb32381
xor eax, 0xf48db0b4
rol eax, 0x99
popf
jmp 0x1405e1489
mov rdx, r14
mov rcx, rdi
call fcn.14069efba
test al, al
je 0x1405e3d20
push rax
pushf
mov eax, 0xe0ece224
pushf
not eax
add eax, 0x8247cc9f
xor eax, 0xc8cb2f4a
rol eax, 0
popf
pushf
not eax
add eax, 0xc8d7bc86
xor eax, 0xc22c8e89
rol eax, 0xc
popf
pushf
not eax
add eax, 0xb6610ff0
xor eax, 0xd635ca31
rol eax, 0x74
popf
pushf
not eax
add eax, 0x9538e9ab
xor eax, 0xa4ac5a42
rol eax, 0x67
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x839f458e
pushf
not eax
add eax, 0xa208d186
xor eax, 0xd3f1785b
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd8309582
xor eax, 0xe98f475f
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xa74dea22
xor eax, 0x8dde8339
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x894dd346
xor eax, 0xb384ac24
rol eax, 0xea
popf
jmp 0x1405e1489
mov rdx, r14
push rax
pushf
mov eax, 0x234ca8c4
pushf
not eax
add eax, 0xe47f106b
xor eax, 0xf273b95a
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xadefe655
xor eax, 0xeff77fcf
rol eax, 1
popf
jmp 0x1405e1489
mov rcx, rdi
call fcn.1405ae942
push rax
pushf
mov eax, 0xaded64a1
pushf
not eax
add eax, 0xc31f2360
xor eax, 0xff283762
rol eax, 0x78
popf
pushf
not eax
add eax, 0xac77cfa3
xor eax, 0xcf8dcc19
rol eax, 0xb7
popf
jmp 0x1405e1489
xor eax, eax
push rax
pushf
mov eax, 0xda19d249
pushf
not eax
add eax, 0x933d2f66
xor eax, 0x8f83c34a
rol eax, 0xb
popf
pushf
not eax
add eax, 0xdbfa1074
xor eax, 0xc8075ebe
rol eax, 0x69
popf
jmp 0x1405e1489
mov rcx, qword [rbp - 9]
xor rcx, rsp
call fcn.14066b1de
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp eax, 2
jne 0x1405e3eb6
push rax
pushf
mov eax, 0x62ea68d6
pushf
not eax
add eax, 0xdde92bad
xor eax, 0xe9a8f8c5
rol eax, 0x73
popf
pushf
not eax
add eax, 0xc0c8c22b
xor eax, 0xb02c2779
rol eax, 0x88
popf
jmp 0x1405e1489
push rax
pushf
mov eax, 0x54504e34
pushf
not eax
add eax, 0x9e803b60
xor eax, 0x81a35cdb
rol eax, 0x24
popf
pushf
not eax
add eax, 0xbd9472e0
xor eax, 0x9441f156
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xbad4be30
xor eax, 0x9050791b
rol eax, 0x49
popf
jmp 0x1405e1489
mov r8d, r13d
mov rcx, rdi
call fcn.1406d3d68
jmp 0x1405e3de9
call fcn.140605b0c
nop
push rax
pushf
mov eax, 0x5d645ee9
pushf
not eax
add eax, 0x9dd9e11d
xor eax, 0xfe405a73
rol eax, 0x67
popf
pushf
not eax
add eax, 0xeabf6b6b
xor eax, 0xcfd34b0b
rol eax, 0xe1
popf
cmp eax, 2
jne 0x1405e3f82
popf
pop rax
jmp 0x1405e4055
cmp eax, 0
jne 0x1405e3f91
popf
pop rax
jmp 0x1405e3fa0
cmp eax, 1
jne 0x1405e3fa0
popf
pop rax
jmp 0x1405e4050
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx]
test rcx, rcx
je 0x1405e3ff7
push rax
pushf
mov eax, 0x588aadc4
pushf
not eax
add eax, 0xf2074a75
xor eax, 0xabc4d051
rol eax, 0x10
popf
pushf
not eax
add eax, 0x8a7d7a38
xor eax, 0x89e41773
rol eax, 0x46
popf
pushf
not eax
add eax, 0xa6f51248
xor eax, 0x88e50f1a
rol eax, 0x6e
popf
jmp 0x1405e3f73
push rax
pushf
mov eax, 0xbd9da0eb
pushf
not eax
add eax, 0xb1726017
xor eax, 0xb9fb94b9
rol eax, 0x74
popf
pushf
not eax
add eax, 0xfae6fcd0
xor eax, 0xc9740ae8
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf829ebd6
xor eax, 0xdd51e5d1
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xdd656623
xor eax, 0xd09d5750
rol eax, 0xb0
popf
jmp 0x1405e3f73
call fcn.14069ab68
mov qword [rbx], 0
add rsp, 0x20
pop rbx
ret