Function at 0x180179540
Capabilities:
Authenticate hmac
Get system information on windows

Disassembly:
push rax
pushf
mov eax, 0xa46ba098
pushf
not eax
add eax, 0x94b6e324
xor eax, 0xd9dd65bb
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xd2b6f631
xor eax, 0xab86cc9a
rol eax, 0xf8
popf
cmp eax, 0x20
jne 0x18017957d
popf
pop rax
jmp 0x18017aa25
cmp eax, 0
jne 0x18017958c
popf
pop rax
jmp 0x18017978a
cmp eax, 3
jne 0x18017959b
popf
pop rax
jmp 0x18017995d
cmp eax, 1
jne 0x1801795aa
popf
pop rax
jmp 0x180179849
cmp eax, 0xd
jne 0x1801795b9
popf
pop rax
jmp 0x180179f0a
cmp eax, 0x1a
jne 0x1801795c8
popf
pop rax
jmp 0x18017a6f2
cmp eax, 0xe
jne 0x1801795d7
popf
pop rax
jmp 0x180179fb3
cmp eax, 0xb
jne 0x1801795e6
popf
pop rax
jmp 0x180179d92
cmp eax, 0x19
jne 0x1801795f5
popf
pop rax
jmp 0x18017a65d
cmp eax, 8
jne 0x180179604
popf
pop rax
jmp 0x180179ca7
cmp eax, 0x1d
jne 0x180179613
popf
pop rax
jmp 0x18017a902
cmp eax, 0x17
jne 0x180179622
popf
pop rax
jmp 0x18017a49f
cmp eax, 0x1c
jne 0x180179631
popf
pop rax
jmp 0x18017a7bb
cmp eax, 0x12
jne 0x180179640
popf
pop rax
jmp 0x18017a196
cmp eax, 0x18
jne 0x18017964f
popf
pop rax
jmp 0x18017a534
cmp eax, 0x11
jne 0x18017965e
popf
pop rax
jmp 0x18017a15e
cmp eax, 0x1b
jne 0x18017966d
popf
pop rax
jmp 0x18017a73d
cmp eax, 0x21
jne 0x18017967c
popf
pop rax
jmp 0x18017aae2
cmp eax, 0x23
jne 0x18017968b
popf
pop rax
jmp 0x18017ab97
cmp eax, 0x14
jne 0x18017969a
popf
pop rax
jmp 0x18017a329
cmp eax, 0xf
jne 0x1801796a9
popf
pop rax
jmp 0x18017a034
cmp eax, 0x13
jne 0x1801796b8
popf
pop rax
jmp 0x18017a24d
cmp eax, 0x15
jne 0x1801796c7
popf
pop rax
jmp 0x18017a3bf
cmp eax, 0x22
jne 0x1801796d6
popf
pop rax
jmp 0x18017ab39
cmp eax, 0x1e
jne 0x1801796e5
popf
pop rax
jmp 0x18017a984
cmp eax, 0xc
jne 0x1801796f4
popf
pop rax
jmp 0x180179e5d
cmp eax, 7
jne 0x180179703
popf
pop rax
jmp 0x180179bbd
cmp eax, 5
jne 0x180179712
popf
pop rax
jmp 0x180179a92
cmp eax, 0x1f
jne 0x180179721
popf
pop rax
jmp 0x18017a9bc
cmp eax, 0x10
jne 0x180179730
popf
pop rax
jmp 0x18017a0c9
cmp eax, 6
jne 0x18017973f
popf
pop rax
jmp 0x180179b3c
cmp eax, 9
jne 0x18017974e
popf
pop rax
jmp 0x180179ce6
cmp eax, 4
jne 0x18017975d
popf
pop rax
jmp 0x1801799ee
cmp eax, 0x16
jne 0x18017976c
popf
pop rax
jmp 0x18017a441
cmp eax, 2
jne 0x18017977b
popf
pop rax
jmp 0x1801798b0
cmp eax, 0xa
jne 0x18017978a
popf
pop rax
jmp 0x180179d89
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rdi, rcx
lea rcx, [rsp + 0x20]
jmp 0x1801797a4
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov r14, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
cmp rdi, 0x40000000
jbe 0x180179803
push rax
pushf
mov eax, 0x7c367e0d
pushf
not eax
add eax, 0xde32c4ce
xor eax, 0xef8c656f
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x8b4dabdb
xor eax, 0x9985051e
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xb6e8a39f
xor eax, 0x935640de
rol eax, 0xfc
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x88595135
pushf
not eax
add eax, 0xf7590c51
xor eax, 0xe16fff14
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x880db663
xor eax, 0xd68aa41a
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc0aae85f
xor eax, 0x84785f39
rol eax, 0xa0
popf
jmp 0x18017956e
lea rax, [rdi - 0x40000000]
cmp r14, rax
cmovb r14, rax
push rax
pushf
mov eax, 0xf5bb4700
pushf
not eax
add eax, 0x83efb64e
xor eax, 0x914ead5b
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xa947ac23
xor eax, 0xc27ece1e
rol eax, 0x48
popf
pushf
not eax
add eax, 0xfe809f3f
xor eax, 0x8a5d453d
rol eax, 0x16
popf
pushf
not eax
add eax, 0xd2f660a8
xor eax, 0xc9ec087c
rol eax, 0xd1
popf
jmp 0x18017956e
mov rsi, qword [0x180042e40]
lea r15, [rdi + 0x40000000]
cmp rcx, r15
cmovbe r15, rcx
sub r15, 0xfff
test rsi, rsi
je 0x18017992a
push rax
pushf
mov eax, 0xf05fb89a
pushf
not eax
add eax, 0x9f10e1f3
xor eax, 0x89f4eaf9
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xb127b642
xor eax, 0xb6eabf81
rol eax, 0x71
popf
pushf
not eax
add eax, 0x97c95d70
xor eax, 0xfcdc0677
rol eax, 0xca
popf
pushf
not eax
add eax, 0xeb516658
xor eax, 0xb9b918da
rol eax, 0x7e
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x17fa2a70
pushf
not eax
add eax, 0x865c266f
xor eax, 0x82f2098b
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x955d47ae
xor eax, 0xe5f6a81a
rol eax, 0x4f
popf
jmp 0x18017956e
cmp rsi, r14
jb 0x1801799a8
push rax
pushf
mov eax, 0xfe7b4c86
pushf
not eax
add eax, 0xcfddb3cf
xor eax, 0xca38d6d1
rol eax, 0x77
popf
pushf
not eax
add eax, 0x9334c554
xor eax, 0xd5ad09f2
rol eax, 0x51
popf
pushf
not eax
add eax, 0xee8639ef
xor eax, 0xb23413da
rol eax, 0x4c
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xf7c2b582
pushf
not eax
add eax, 0x8a6330b1
xor eax, 0xe7780a1e
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xa674ef66
xor eax, 0x9d1dad72
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xde1e54d6
xor eax, 0xddf1a883
rol eax, 0xcf
popf
jmp 0x18017956e
cmp rsi, r15
jae 0x180179a4c
push rax
pushf
mov eax, 0x16fc780
pushf
not eax
add eax, 0xd6741395
xor eax, 0xf4c19a26
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xd187ab0c
xor eax, 0x90144157
rol eax, 0x54
popf
pushf
not eax
add eax, 0x820b461d
xor eax, 0xa392a8e5
rol eax, 0x74
popf
pushf
not eax
add eax, 0xd50264f8
xor eax, 0x9cc31f13
rol eax, 0x80
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x9da8e679
pushf
not eax
add eax, 0xb30b6e89
xor eax, 0x8058f2d6
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x80fd7cb4
xor eax, 0x98c40564
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xc53f5884
xor eax, 0xcf8432f1
rol eax, 0xf
popf
jmp 0x18017956e
cmp qword [rsi + 8], 0
jne 0x180179af6
push rax
pushf
mov eax, 0x8eed0851
pushf
not eax
add eax, 0xb45653cb
xor eax, 0xfa713e95
rol eax, 0x62
popf
pushf
not eax
add eax, 0xa466da9e
xor eax, 0xfb5c6480
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x9430c184
xor eax, 0xa3e4d19c
rol eax, 0x82
popf
pushf
not eax
add eax, 0xaced0135
xor eax, 0x9ff1e4a1
rol eax, 0xf3
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x8bf1810
pushf
not eax
add eax, 0xf45601ed
xor eax, 0x98be88eb
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xac03cd2c
xor eax, 0xf5bb9f67
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xda0a2010
xor eax, 0xb6797f55
rol eax, 0xcd
popf
jmp 0x18017956e
mov rsi, qword [rsi]
test rsi, rsi
jne 0x180179b77
push rax
pushf
mov eax, 0xecd6eb5e
pushf
not eax
add eax, 0xb590c071
xor eax, 0xdcf0365d
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x8a49b280
xor eax, 0xa7c77616
rol eax, 0x70
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xa8ebd484
pushf
not eax
add eax, 0x99c081c5
xor eax, 0xd8dddd19
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xfc2d67fc
xor eax, 0x9f3bceb4
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf561809c
xor eax, 0xd427e8a1
rol eax, 3
popf
jmp 0x18017956e
mov qword [rsp + 0xa0], rbx
mov rbx, rdi
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0xb0], r12
mov r12d, 0x16930aaa
pushf
not r12d
add r12d, 0xf9cb4b0b
xor r12d, 0xf063debb
rol r12d, 0x2e
popf
pushf
not r12d
add r12d, 0x90b551a8
xor r12d, 0x855af6f1
rol r12d, 0xbd
popf
pushf
not r12d
add r12d, 0x8d99b7c4
xor r12d, 0x87e528ff
rol r12d, 0x7f
popf
cmp rdi, r14
jb 0x180179c61
push rax
pushf
mov eax, 0x51f46f83
pushf
not eax
add eax, 0xefc6acfd
xor eax, 0x8f3c6183
rol eax, 0xff
popf
pushf
not eax
add eax, 0xabeb9d44
xor eax, 0xa2746ec2
rol eax, 0xc1
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x9b28080d
pushf
not eax
add eax, 0xb925bbc5
xor eax, 0xa577cfc2
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xea3bbbac
xor eax, 0x939f6070
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xa06eb7c2
xor eax, 0xf6837465
rol eax, 0x5c
popf
jmp 0x18017956e
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x78f27b09
pushf
not eax
add eax, 0x80d0be53
xor eax, 0xfcc2dcd9
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xd302786b
xor eax, 0xdb29936e
rol eax, 4
popf
jmp 0x18017956e
mov ebp, dword [rsp + 0x48]
mov rax, rbx
xor edx, edx
div rbp
sub rbx, rdx
sub rbx, rbp
cmp rbx, r14
jb 0x180179d43
push rax
pushf
mov eax, 0xc944739e
pushf
not eax
add eax, 0xa876a9cb
xor eax, 0xd3a3ed0b
rol eax, 0x20
popf
pushf
not eax
add eax, 0xe555d007
xor eax, 0xa46eb3e1
rol eax, 3
popf
pushf
not eax
add eax, 0x9f66a693
xor eax, 0xb9fc6c8b
rol eax, 0x7f
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x284fdf6d
pushf
not eax
add eax, 0xf7e2aeb4
xor eax, 0xa090a33b
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xeeab4807
xor eax, 0xd643cb90
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xd644f8ec
xor eax, 0xa56cf24b
rol eax, 0x26
popf
jmp 0x18017956e
nop word [rax + rax]
mov r8d, 0x529464e7
pushf
not r8d
add r8d, 0xc76227a2
xor r8d, 0x8e86d06e
rol r8d, 0x74
popf
pushf
not r8d
add r8d, 0xb679946e
xor r8d, 0xea7c578a
rol r8d, 0x90
popf
pushf
not r8d
add r8d, 0xb130edca
xor r8d, 0xf8e28a74
rol r8d, 0x31
popf
lea rdx, [rsp + 0x50]
mov rcx, rbx
jmp 0x180179dec
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x180179e2a
push rax
pushf
mov eax, 0xdf58eb94
pushf
not eax
add eax, 0xa1745698
xor eax, 0xf018231f
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xd6c294ca
xor eax, 0xa270d1a9
rol eax, 0xae
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x79f19a8
pushf
not eax
add eax, 0xd1179bbf
xor eax, 0xcc573a0b
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x9df165f3
xor eax, 0x9391f238
rol eax, 0x59
popf
jmp 0x18017956e
cmp dword [rsp + 0x70], 0x10000
je 0x180179eb1
push rax
pushf
mov eax, 0xd4aa0a0a
pushf
not eax
add eax, 0xff693d5b
xor eax, 0xa57f2d1b
rol eax, 0x53
popf
pushf
not eax
add eax, 0xd4bd436e
xor eax, 0xb0a54fbf
rol eax, 0x93
popf
pushf
not eax
add eax, 0xe6b02fc7
xor eax, 0x901d99f2
rol eax, 0xfd
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xad1feeb1
pushf
not eax
add eax, 0xdc1d04fc
xor eax, 0xf839123f
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x801d48d3
xor eax, 0xccc1c012
rol eax, 0x36
popf
pushf
not eax
add eax, 0xeab79272
xor eax, 0x96269e8e
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x9d0f3152
xor eax, 0xd50cf493
rol eax, 0xe3
popf
jmp 0x18017956e
mov rbx, qword [rsp + 0x58]
cmp rbx, rbp
jb 0x180179f5a
push rax
pushf
mov eax, 0x124d7c4d
pushf
not eax
add eax, 0xce2f3024
xor eax, 0x92b34435
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x961f95aa
xor eax, 0xccf9bfa0
rol eax, 0x72
popf
pushf
not eax
add eax, 0x8f946458
xor eax, 0xead25a5e
rol eax, 0xf7
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xa6b152d0
pushf
not eax
add eax, 0x991a6f63
xor eax, 0xdf70ecdf
rol eax, 0x50
popf
pushf
not eax
add eax, 0xf7aa8516
xor eax, 0xacf47c85
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xcad3169f
xor eax, 0xc8915af0
rol eax, 0x54
popf
pushf
not eax
add eax, 0xda892591
xor eax, 0xef072707
rol eax, 0x9b
popf
jmp 0x18017956e
sub rbx, rbp
cmp rbx, r14
jae 0x18017a001
push rax
pushf
mov eax, 0xbc83fcc0
pushf
not eax
add eax, 0xc923605d
xor eax, 0xd780ed1f
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xfbc51f60
xor eax, 0xd2f45337
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xe2dd7fa0
xor eax, 0xa9782f84
rol eax, 0x6d
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x34df5b97
pushf
not eax
add eax, 0x8acb177a
xor eax, 0xc469856c
rol eax, 0xba
popf
pushf
not eax
add eax, 0xfbdc19c1
xor eax, 0xc12610c6
rol eax, 0x4c
popf
jmp 0x18017956e
test rsi, rsi
jne 0x18017a070
push rax
pushf
mov eax, 0xfd00713f
pushf
not eax
add eax, 0xb3e81a99
xor eax, 0xf735dbc8
rol eax, 0x51
popf
pushf
not eax
add eax, 0x865d0fc3
xor eax, 0xa13a8c0e
rol eax, 0x20
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x648a6534
pushf
not eax
add eax, 0xb2d740da
xor eax, 0xf82dfa42
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x9e2be409
xor eax, 0x94af9c22
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xcf5b99d4
xor eax, 0xde1bd9eb
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x9152f6ea
xor eax, 0xc5cf8d5c
rol eax, 0x1f
popf
jmp 0x18017956e
cmp rdi, r15
ja 0x18017a105
push rax
pushf
mov eax, 0x97fafb18
pushf
not eax
add eax, 0xa03f522a
xor eax, 0xaf50543b
rol eax, 0x48
popf
pushf
not eax
add eax, 0xc4a0e019
xor eax, 0xb18db571
rol eax, 0x6c
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xf2db169c
pushf
not eax
add eax, 0xb39d57ce
xor eax, 0xe135cec6
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x9717a933
xor eax, 0xb6418af5
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xadbbb6c1
xor eax, 0xcd7484ae
rol eax, 0x27
popf
pushf
not eax
add eax, 0xf652ffd3
xor eax, 0xf458847d
rol eax, 0x89
popf
jmp 0x18017956e
nop dword [rax + rax]
push rax
pushf
mov eax, 0xb7eef4e9
pushf
not eax
add eax, 0xcb3a4f83
xor eax, 0xf4ad2bda
rol eax, 0xef
popf
pushf
not eax
add eax, 0xfdbe4d2f
xor eax, 0xc554593b
rol eax, 0x4e
popf
jmp 0x18017956e
mov ebp, dword [rsp + 0x48]
xor edx, edx
mov rax, rdi
mov ebx, ebp
div rbp
mov eax, ebp
sub rax, rdx
push rdi
not rdi
sub rax, rdi
pop rdi
sub rax, 1
mov rdi, rax
cmp rax, r15
ja 0x18017a21a
push rax
pushf
mov eax, 0x66b01623
pushf
not eax
add eax, 0xd3621084
xor eax, 0xe6383ed2
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x84cd2846
xor eax, 0xf40e2b1d
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xdbe4b881
xor eax, 0xeb8d47ea
rol eax, 6
popf
pushf
not eax
add eax, 0xb6135f1c
xor eax, 0xbe530323
rol eax, 0x69
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xe7b6483
pushf
not eax
add eax, 0x9295726d
xor eax, 0xae6f7a1b
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf7dd6f6f
xor eax, 0xfce834b3
rol eax, 0xec
popf
jmp 0x18017956e
mov r8d, 0xd1fa190f
pushf
not r8d
add r8d, 0xc46a8b3a
xor r8d, 0x943ee599
rol r8d, 0x69
popf
pushf
not r8d
add r8d, 0x8b9cbede
xor r8d, 0xee6d6811
rol r8d, 0xf8
popf
lea rdx, [rsp + 0x50]
mov rcx, rdi
jmp 0x18017a28e
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x18017a2e3
push rax
pushf
mov eax, 0x9510bf48
pushf
not eax
add eax, 0xc6749b2c
xor eax, 0xdaf112ed
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x8f3da249
xor eax, 0xe2bb2e59
rol eax, 0x50
popf
pushf
not eax
add eax, 0xf13fd559
xor eax, 0xec8fbb0a
rol eax, 0x32
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xd4efc768
pushf
not eax
add eax, 0xcfe98e96
xor eax, 0xe51b91db
rol eax, 5
popf
pushf
not eax
add eax, 0x9840a63b
xor eax, 0xc8bd0fd1
rol eax, 0xae
popf
pushf
not eax
add eax, 0xe9493054
xor eax, 0xb71fdf81
rol eax, 0x17
popf
jmp 0x18017956e
cmp dword [rsp + 0x70], 0x10000
je 0x18017a366
push rax
pushf
mov eax, 0xae214b59
pushf
not eax
add eax, 0xf0f72e53
xor eax, 0xa19628d0
rol eax, 0x86
popf
pushf
not eax
add eax, 0xc659e5f2
xor eax, 0xf4375b79
rol eax, 0xc
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xc49f4eab
pushf
not eax
add eax, 0x8fb62e12
xor eax, 0xb64fee84
rol eax, 0x40
popf
pushf
not eax
add eax, 0xa34dadf1
xor eax, 0xdc873c0a
rol eax, 0x43
popf
pushf
not eax
add eax, 0xf11c86fa
xor eax, 0x8e88f89a
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x8724d208
xor eax, 0xd6a4ed7d
rol eax, 0x2d
popf
jmp 0x18017956e
xor edx, edx
lea edi, [rbp - 1]
add rdi, qword [rsp + 0x68]
add rdi, qword [rsp + 0x50]
mov rax, rdi
div rbx
sub rdi, rdx
cmp rdi, r15
jbe 0x18017a40e
push rax
pushf
mov eax, 0x24f56f05
pushf
not eax
add eax, 0xb381db4b
xor eax, 0xcb1a9713
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xbab08dcd
xor eax, 0xe51f2805
rol eax, 1
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xc2670997
pushf
not eax
add eax, 0xb21559b2
xor eax, 0xd2d7d1ea
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xfb82c226
xor eax, 0xf3d382e7
rol eax, 0x98
popf
jmp 0x18017956e
jmp 0x18017ab39
test rbx, rbx
je 0x18017a4db
push rax
pushf
mov eax, 0x67dd15a1
pushf
not eax
add eax, 0x9b4f667f
xor eax, 0xc9422956
rol eax, 0x48
popf
pushf
not eax
add eax, 0xf42f239b
xor eax, 0xc3b591a0
rol eax, 0x5a
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x110446a3
pushf
not eax
add eax, 0xffc5b111
xor eax, 0x904e98d3
rol eax, 0x21
popf
pushf
not eax
add eax, 0xa5876a4f
xor eax, 0xfff1a1ae
rol eax, 0xea
popf
pushf
not eax
add eax, 0x95985f72
xor eax, 0xc8eae113
rol eax, 0x28
popf
pushf
not eax
add eax, 0xc760ef67
xor eax, 0xe2d1ee71
rol eax, 0x26
popf
jmp 0x18017956e
mov r9d, r12d
mov edx, 0x9b4ec32b
pushf
not edx
add edx, 0xcbc68e85
xor edx, 0xe74ab205
rol edx, 0xff
popf
pushf
not edx
add edx, 0xb4794627
xor edx, 0xafc727d2
rol edx, 0x44
popf
pushf
not edx
add edx, 0xf91b9015
xor edx, 0x8740a766
rol edx, 0xa3
popf
mov r8d, 0x950ac63e
pushf
not r8d
add r8d, 0x8e85364f
xor r8d, 0x8271242f
rol r8d, 0x6c
popf
pushf
not r8d
add r8d, 0xec9edc66
xor r8d, 0xa16f36af
rol r8d, 0x53
popf
pushf
not r8d
add r8d, 0xa8b47c9b
xor r8d, 0xa7f04e12
rol r8d, 0xc4
popf
pushf
not r8d
add r8d, 0xc5a08866
xor r8d, 0xc2a9b87a
rol r8d, 0x3d
popf
mov rcx, rbx
jmp 0x18017a5e9
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x18017a62a
push rax
pushf
mov eax, 0x20f71400
pushf
not eax
add eax, 0x8e24d5ec
xor eax, 0xff76cd07
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x8af576f5
xor eax, 0xc1cfcaa6
rol eax, 0x99
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x31f3b1bc
pushf
not eax
add eax, 0x92cc74b6
xor eax, 0xcf66e365
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc0143041
xor eax, 0xda6e3f34
rol eax, 0x2d
popf
jmp 0x18017956e
cmp rbx, r14
jae 0x18017a6bf
push rax
pushf
mov eax, 0x18844aae
pushf
not eax
add eax, 0xc5bf6dac
xor eax, 0xa49e8fa3
rol eax, 0x91
popf
pushf
not eax
add eax, 0xf1f703bf
xor eax, 0xb80603ea
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x94d65742
xor eax, 0xb5ab6d55
rol eax, 0x67
popf
pushf
not eax
add eax, 0xd897b710
xor eax, 0xb3a38835
rol eax, 0xd2
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x6a6a53b3
pushf
not eax
add eax, 0xb601f143
xor eax, 0x90f99836
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa0c31bfd
xor eax, 0xc9677e46
rol eax, 0x68
popf
jmp 0x18017956e
jmp 0x18017a0c9
test rdi, rdi
je 0x18017a775
push rax
pushf
mov eax, 0xa591560a
pushf
not eax
add eax, 0x947597d6
xor eax, 0xc3b78cc3
rol eax, 6
popf
pushf
not eax
add eax, 0xf1037533
xor eax, 0x9c1e3327
rol eax, 0xd1
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x69bff3dd
pushf
not eax
add eax, 0x963f88d1
xor eax, 0xd6f12307
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xc87d2d64
xor eax, 0xf6e3ede1
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x80f60e80
xor eax, 0xdc2b9e50
rol eax, 0xf0
popf
jmp 0x18017956e
mov r9d, r12d
mov edx, 0x65dfb3c6
pushf
not edx
add edx, 0x85392ae9
xor edx, 0xdde6cb0d
rol edx, 0x24
popf
pushf
not edx
add edx, 0xdf89df9d
xor edx, 0xb30e1ca0
rol edx, 0xd5
popf
mov r8d, 0xc4360f50
pushf
not r8d
add r8d, 0xc3025790
xor r8d, 0x9511cf85
rol r8d, 0xd5
popf
pushf
not r8d
add r8d, 0xb55dd8ec
xor r8d, 0xb94332cc
rol r8d, 0xf4
popf
pushf
not r8d
add r8d, 0xa8afedab
xor r8d, 0xa8bf7874
rol r8d, 0x95
popf
mov rcx, rdi
jmp 0x18017a842
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
jne 0x18017a8a9
push rax
pushf
mov eax, 0xdd1a54f
pushf
not eax
add eax, 0xda83fa49
xor eax, 0xd0183c33
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xb0ca41ee
xor eax, 0xddfe2ec9
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xe8038952
xor eax, 0xf4d0a72e
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xa6f8e505
xor eax, 0x8c9aac80
rol eax, 0x13
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xacc139ba
pushf
not eax
add eax, 0x981da874
xor eax, 0x8889a1d2
rol eax, 0xee
popf
pushf
not eax
add eax, 0xe6e9e180
xor eax, 0x8274f2b3
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xe4828dfe
xor eax, 0x8a38ced2
rol eax, 0x20
popf
pushf
not eax
add eax, 0xea01597e
xor eax, 0xc546282a
rol eax, 0xa8
popf
jmp 0x18017956e
cmp rdi, r15
jbe 0x18017a93e
push rax
pushf
mov eax, 0xafd89c62
pushf
not eax
add eax, 0xf29a7b62
xor eax, 0xc6c2f7db
rol eax, 0x68
popf
pushf
not eax
add eax, 0xcd0e293c
xor eax, 0xc9ea04b7
rol eax, 0x31
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0x2ff6aea4
pushf
not eax
add eax, 0xacb289b5
xor eax, 0x84d97a65
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xf58e60c6
xor eax, 0x93d00e44
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xf5aa7c16
xor eax, 0xb552476b
rol eax, 0x53
popf
jmp 0x18017956e
jmp 0x18017ab39
xor edx, edx
lea rcx, [rsi + 0x40]
mov dword [rsi + 0x10], edx
nop dword [rax]
push rax
pushf
mov eax, 0xa2bfc83c
pushf
not eax
add eax, 0xc630a93e
xor eax, 0xb30b93b2
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x81a2f238
xor eax, 0x9dd83178
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xb0bb81c0
xor eax, 0xde854a40
rol eax, 0x43
popf
pushf
not eax
add eax, 0xc16f5ecb
xor eax, 0xadee48c2
rol eax, 0xb5
popf
jmp 0x18017956e
mov qword [rcx], rdx
mov rax, rcx
mov qword [rsi + 8], rcx
add r12, 0x40
add rcx, 0x40
mov rdx, rax
cmp r12, 0xfc0
jbe 0x18017aa9c
push rax
pushf
mov eax, 0x86438e36
pushf
not eax
add eax, 0x9890bbe8
xor eax, 0x894b8d33
rol eax, 0x71
popf
pushf
not eax
add eax, 0xe785fa38
xor eax, 0x882e5b81
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xbe56ec09
xor eax, 0xe1d8e47e
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xf3e401f8
xor eax, 0x93b025c0
rol eax, 0x9f
popf
jmp 0x18017956e
push rax
pushf
mov eax, 0xdf8b8b76
pushf
not eax
add eax, 0xc2931987
xor eax, 0xa5f5fff4
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe2df9431
xor eax, 0xf057ffbd
rol eax, 0x28
popf
pushf
not eax
add eax, 0xbe45dff1
xor eax, 0xd2e09af0
rol eax, 0xae
popf
jmp 0x18017956e
mov rax, qword [0x180042e40]
mov qword [rsi], rax
mov qword [0x180042e40], rsi
push rax
pushf
mov eax, 0x62cefeee
pushf
not eax
add eax, 0xaceef68c
xor eax, 0xbec86a09
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x97ff68a9
xor eax, 0x8b664750
rol eax, 0x29
popf
pushf
not eax
add eax, 0xafbba2f5
xor eax, 0xc3ff95c7
rol eax, 0x75
popf
jmp 0x18017956e
mov r12, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
push rax
pushf
mov eax, 0xa2e91b1c
pushf
not eax
add eax, 0xf6858a11
xor eax, 0x88a87f38
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x93e12b41
xor eax, 0xf0799a88
rol eax, 0x34
popf
pushf
not eax
add eax, 0x94913237
xor eax, 0xc5a0ff85
rol eax, 0x83
popf
jmp 0x18017956e
mov rax, rsi
mov rsi, qword [rsp + 0xb8]
add rsp, 0x80
pop r15
pop r14
pop rdi
ret