Function at 0x1400ca040
Capabilities:
Authenticate hmac
Encrypt data using speck
Get system information on windows
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push rax
pushf
mov eax, 0x8906deaf
pushf
not eax
add eax, 0xe0511663
xor eax, 0xad8bbcba
rol eax, 0xda
popf
pushf
not eax
add eax, 0xffa5903b
xor eax, 0xd7ba8a0e
rol eax, 0xdd
popf
cmp eax, 0x29
jne 0x1400ca07d
popf
pop rax
jmp 0x1400cbc4f
cmp eax, 0
jne 0x1400ca08c
popf
pop rax
jmp 0x1400ca3f2
cmp eax, 3
jne 0x1400ca09b
popf
pop rax
jmp 0x1400ca6aa
cmp eax, 1
jne 0x1400ca0aa
popf
pop rax
jmp 0x1400ca4dc
cmp eax, 0xd
jne 0x1400ca0b9
popf
pop rax
jmp 0x1400cae3e
cmp eax, 0x1a
jne 0x1400ca0c8
popf
pop rax
jmp 0x1400cb53b
cmp eax, 0xe
jne 0x1400ca0d7
popf
pop rax
jmp 0x1400caedd
cmp eax, 0x31
jne 0x1400ca0e6
popf
pop rax
jmp 0x1400cc0ae
cmp eax, 0x19
jne 0x1400ca0f5
popf
pop rax
jmp 0x1400cb4f4
cmp eax, 8
jne 0x1400ca104
popf
pop rax
jmp 0x1400caad1
cmp eax, 0x2a
jne 0x1400ca113
popf
pop rax
jmp 0x1400cbd21
cmp eax, 0x17
jne 0x1400ca122
popf
pop rax
jmp 0x1400cb3aa
cmp eax, 0x1c
jne 0x1400ca131
popf
pop rax
jmp 0x1400cb5fb
cmp eax, 0x2e
jne 0x1400ca140
popf
pop rax
jmp 0x1400cbf45
cmp eax, 0x18
jne 0x1400ca14f
popf
pop rax
jmp 0x1400cb41f
cmp eax, 0x2b
jne 0x1400ca15e
popf
pop rax
jmp 0x1400cbdb2
cmp eax, 0x1b
jne 0x1400ca16d
popf
pop rax
jmp 0x1400cb589
cmp eax, 0x2d
jne 0x1400ca17c
popf
pop rax
jmp 0x1400cbf09
cmp eax, 0x23
jne 0x1400ca18b
popf
pop rax
jmp 0x1400cb980
cmp eax, 0x25
jne 0x1400ca19a
popf
pop rax
jmp 0x1400cbaa0
cmp eax, 0x32
jne 0x1400ca1a9
popf
pop rax
jmp 0x1400cc173
cmp eax, 0x13
jne 0x1400ca1b8
popf
pop rax
jmp 0x1400cb16a
cmp eax, 0x33
jne 0x1400ca1c7
popf
pop rax
jmp 0x1400cc228
cmp eax, 0x24
jne 0x1400ca1d6
popf
pop rax
jmp 0x1400cba1d
cmp eax, 0x1e
jne 0x1400ca1e5
popf
pop rax
jmp 0x1400cb722
cmp eax, 0xc
jne 0x1400ca1f4
popf
pop rax
jmp 0x1400cad54
cmp eax, 0x26
jne 0x1400ca203
popf
pop rax
jmp 0x1400cbb2c
cmp eax, 0x27
jne 0x1400ca212
popf
pop rax
jmp 0x1400cbbe4
cmp eax, 0x30
jne 0x1400ca221
popf
pop rax
jmp 0x1400cbff2
cmp eax, 0x10
jne 0x1400ca230
popf
pop rax
jmp 0x1400cafc4
cmp eax, 0x37
jne 0x1400ca23f
popf
pop rax
jmp 0x1400cc3df
cmp eax, 9
jne 0x1400ca24e
popf
pop rax
jmp 0x1400cab8b
cmp eax, 0x39
jne 0x1400ca25d
popf
pop rax
jmp 0x1400cc4e0
cmp eax, 0x16
jne 0x1400ca26c
popf
pop rax
jmp 0x1400cb30d
cmp eax, 0x3b
jne 0x1400ca27b
popf
pop rax
jmp 0x1400cc57a
cmp eax, 0xa
jne 0x1400ca28a
popf
pop rax
jmp 0x1400cabc9
cmp eax, 0x36
jne 0x1400ca299
popf
pop rax
jmp 0x1400cc366
cmp eax, 0x14
jne 0x1400ca2a8
popf
pop rax
jmp 0x1400cb20f
cmp eax, 7
jne 0x1400ca2b7
popf
pop rax
jmp 0x1400ca996
cmp eax, 0x34
jne 0x1400ca2c6
popf
pop rax
jmp 0x1400cc275
cmp eax, 2
jne 0x1400ca2d5
popf
pop rax
jmp 0x1400ca53b
cmp eax, 0x20
jne 0x1400ca2e4
popf
pop rax
jmp 0x1400cb82a
cmp eax, 0x1d
jne 0x1400ca2f3
popf
pop rax
jmp 0x1400cb68e
cmp eax, 0x11
jne 0x1400ca302
popf
pop rax
jmp 0x1400cb00d
cmp eax, 0x35
jne 0x1400ca311
popf
pop rax
jmp 0x1400cc2c0
cmp eax, 0x3a
jne 0x1400ca320
popf
pop rax
jmp 0x1400cc53e
cmp eax, 0x12
jne 0x1400ca32f
popf
pop rax
jmp 0x1400cb0b8
cmp eax, 0x21
jne 0x1400ca33e
popf
pop rax
jmp 0x1400cb8b6
cmp eax, 0x38
jne 0x1400ca34d
popf
pop rax
jmp 0x1400cc494
cmp eax, 0xb
jne 0x1400ca35c
popf
pop rax
jmp 0x1400cacb6
cmp eax, 0xf
jne 0x1400ca36b
popf
pop rax
jmp 0x1400caf40
cmp eax, 0x15
jne 0x1400ca37a
popf
pop rax
jmp 0x1400cb25a
cmp eax, 5
jne 0x1400ca389
popf
pop rax
jmp 0x1400ca7d7
cmp eax, 6
jne 0x1400ca398
popf
pop rax
jmp 0x1400ca874
cmp eax, 0x22
jne 0x1400ca3a7
popf
pop rax
jmp 0x1400cb935
cmp eax, 0x2c
jne 0x1400ca3b6
popf
pop rax
jmp 0x1400cbdec
cmp eax, 0x1f
jne 0x1400ca3c5
popf
pop rax
jmp 0x1400cb7ba
cmp eax, 4
jne 0x1400ca3d4
popf
pop rax
jmp 0x1400ca764
cmp eax, 0x2f
jne 0x1400ca3e3
popf
pop rax
jmp 0x1400cbf96
cmp eax, 0x28
jne 0x1400ca3f2
popf
pop rax
jmp 0x1400cbc42
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x98
xor r15d, r15d
mov r12d, r15d
mov dword [rbp + 0x67], r15d
lea r9, [rbp + 0x67]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0xb]
jmp 0x1400ca430
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400ca496
push rax
pushf
mov eax, 0x120bf3d2
pushf
not eax
add eax, 0xc61131c9
xor eax, 0xf9ba0f38
rol eax, 0xca
popf
pushf
not eax
add eax, 0x97e8751c
xor eax, 0x85e728d4
rol eax, 0x69
popf
pushf
not eax
add eax, 0xfc3647bd
xor eax, 0xb9f9a44b
rol eax, 0xc
popf
pushf
not eax
add eax, 0xec8c71fd
xor eax, 0xc87926dd
rol eax, 2
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xd51e771e
pushf
not eax
add eax, 0xdfbda5e1
xor eax, 0xfc934efe
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xd61b2f99
xor eax, 0x889850c6
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xb4c8153c
xor eax, 0xacfab624
rol eax, 0xfd
popf
jmp 0x1400ca06e
nop word [rax + rax]
push rax
pushf
mov eax, 0xde1919cb
pushf
not eax
add eax, 0x94f5a45a
xor eax, 0xfa8d6ea1
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xd19bd4bf
xor eax, 0x89dfb12f
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc7d6afad
xor eax, 0x875e9b73
rol eax, 0xe
popf
pushf
not eax
add eax, 0x83e7e195
xor eax, 0xbd863743
rol eax, 0x56
popf
jmp 0x1400ca06e
xor edx, edx
mov r8d, 0xf937b67
pushf
not r8d
add r8d, 0xb3443dc7
xor r8d, 0x82afa65f
rol r8d, 0xd8
popf
pushf
not r8d
add r8d, 0x95d0796c
xor r8d, 0x91af5a07
rol r8d, 0x15
popf
mov rcx, r12
jmp 0x1400ca579
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp + 0x67]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x417b9192
pushf
not r8d
add r8d, 0xeb1bd8fa
xor r8d, 0x8cac960f
rol r8d, 0xa2
popf
pushf
not r8d
add r8d, 0xb8a8f48f
xor r8d, 0xa2486455
rol r8d, 0x1d
popf
pushf
not r8d
add r8d, 0xf87df3f6
xor r8d, 0xb189b60b
rol r8d, 0x48
popf
pushf
not r8d
add r8d, 0xd853b5cc
xor r8d, 0xa8c72095
rol r8d, 0x10
popf
jmp 0x1400ca5f3
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r12, rax
lea r9, [rbp + 0x67]
mov r8d, dword [rbp + 0x67]
mov rdx, rax
mov ecx, 0x4dc6a8f4
pushf
not ecx
add ecx, 0xca5220cd
xor ecx, 0xefed390a
rol ecx, 4
popf
pushf
not ecx
add ecx, 0xd8c3b40a
xor ecx, 0xa25ed0e0
rol ecx, 0x77
popf
jmp 0x1400ca637
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x1400ca677
push rax
pushf
mov eax, 0x3b8de9b0
pushf
not eax
add eax, 0xe4b5a3ff
xor eax, 0xb746b454
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x944dc41c
xor eax, 0xc35aba2b
rol eax, 0x99
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x896256aa
pushf
not eax
add eax, 0xc91092bb
xor eax, 0xc892e812
rol eax, 0x60
popf
pushf
not eax
add eax, 0xe1ca9693
xor eax, 0xea8dc291
rol eax, 0xc1
popf
jmp 0x1400ca06e
test eax, eax
js 0x1400ca70b
push rax
pushf
mov eax, 0xd0a4681a
pushf
not eax
add eax, 0xaa2f8a2d
xor eax, 0xb3b70975
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x8aa7c526
xor eax, 0xe99ebb7b
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xfb3b99b4
xor eax, 0xc1ae7546
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xd43ce0a2
xor eax, 0xdd6b5c53
rol eax, 0xa8
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x533f6f96
pushf
not eax
add eax, 0x92c26ced
xor eax, 0xae847222
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xa36cfe39
xor eax, 0x8840151b
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xb63ded44
xor eax, 0xd1832c12
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x8e55eb26
xor eax, 0xb6630ffa
rol eax, 0x2d
popf
jmp 0x1400ca06e
mov r13d, r15d
cmp dword [r12], r15d
jbe 0x1400ca7a4
push rax
pushf
mov eax, 0x2d0420a0
pushf
not eax
add eax, 0xe6bb36bd
xor eax, 0xa86852c8
rol eax, 0xac
popf
pushf
not eax
add eax, 0xb07df638
xor eax, 0xbc31f51a
rol eax, 0xd2
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xaaf8968d
pushf
not eax
add eax, 0xffec4384
xor eax, 0xe394b24e
rol eax, 0x44
popf
pushf
not eax
add eax, 0xfc34e932
xor eax, 0x848afda6
rol eax, 0xd
popf
jmp 0x1400ca06e
mov esi, 0xa9a64e04
pushf
not esi
add esi, 0xa9cc7cff
xor esi, 0xc513962e
rol esi, 0x6e
popf
pushf
not esi
add esi, 0xe2b0229d
xor esi, 0xc5341dda
rol esi, 0xf5
popf
pushf
not esi
add esi, 0x8d2af3d7
xor esi, 0xfb1dfdf9
rol esi, 0xf6
popf
push rax
pushf
mov eax, 0x440adc84
pushf
not eax
add eax, 0xc0edc4aa
xor eax, 0xd63a336c
rol eax, 0x92
popf
pushf
not eax
add eax, 0xb0e30664
xor eax, 0xd3320da6
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x9d0aa539
xor eax, 0xc9e21ea4
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc573e606
xor eax, 0xdf1a925a
rol eax, 0x45
popf
jmp 0x1400ca06e
mov eax, r13d
imul rcx, rax, 0x128
lea rdi, [rcx + r12]
mov qword [rbp + 0x7f], rdi
movzx ebx, word [rdi + 0x2e]
push rcx
not rcx
sub rbx, rcx
pop rcx
sub rbx, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x11], r15
lea rcx, [rbx + 0x30]
push r12
not r12
sub rcx, r12
pop r12
sub rcx, 1
call fcn.1400690ef
mov r8, rax
lea rdx, [rbx + 0x30]
push r12
not r12
sub rdx, r12
pop r12
sub rdx, 1
lea rcx, [rbp - 0x29]
call fcn.1400edcc3
nop
lea rcx, [rbp - 0x29]
cmp qword [rbp - 0x11], 0xf
cmova rcx, qword [rbp - 0x29]
lea rdx, [0x198a71c0b]
pushf
sub rdx, 0x58a3b73b
popf
jmp 0x1400ca8fc
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x1400ca950
push rax
pushf
mov eax, 0xcd158bf0
pushf
not eax
add eax, 0x9d31ad71
xor eax, 0xeae1a83b
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xe8661437
xor eax, 0x8ea365fe
rol eax, 0x65
popf
pushf
not eax
add eax, 0xd03b5a9d
xor eax, 0xeffeeda0
rol eax, 0xef
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xd5ebe8f2
pushf
not eax
add eax, 0xc72a9dc0
xor eax, 0xbb7ff503
rol eax, 0xba
popf
pushf
not eax
add eax, 0xc9b6e695
xor eax, 0xc8aad875
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xb4081e03
xor eax, 0x94829b8b
rol eax, 0xc3
popf
jmp 0x1400ca06e
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], r15
lea rcx, [rdi + 0x30]
call fcn.1400690ef
mov r8, rax
lea rdx, [rdi + 0x30]
lea rcx, [rbp - 0x49]
call fcn.1400edcc3
nop
lea rcx, [0x185c97140]
pushf
sub rcx, 0x45c651b8
popf
jmp 0x1400ca9d2
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov qword [rbp + 7], r15
mov qword [rbp + 0xf], r15
mov rcx, rax
call fcn.1400690ef
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 9]
call fcn.1400edcc3
nop
lea rcx, [0x18b0eed6b]
pushf
sub rcx, 0x4b0bcdd7
popf
call fcn.1400690ef
mov r8, rax
lea rdx, [0x1a17cb926]
pushf
sub rdx, 0x61799992
popf
lea rcx, [rbp - 9]
call fcn.14011ee46
mov r14, rax
lea rcx, [0x1ade0e7cf]
pushf
sub rcx, 0x6dddc837
popf
call fcn.1400690ef
mov rdi, rax
lea r15, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova r15, qword [rbp - 0x49]
mov rax, qword [rbp - 0x39]
cmp rdi, rax
ja 0x1400caa9e
push rax
pushf
mov eax, 0xb2343ff3
pushf
not eax
add eax, 0xfedc2f3e
xor eax, 0x8df876b1
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xc44bf36c
xor eax, 0xc8c93438
rol eax, 0x69
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x1f210fcf
pushf
not eax
add eax, 0xe0355074
xor eax, 0xe048c480
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa6f02af5
xor eax, 0x85fb229d
rol eax, 0xcf
popf
jmp 0x1400ca06e
sub rax, rdi
test rdi, rdi
jne 0x1400cab32
push rax
pushf
mov eax, 0x8b689166
pushf
not eax
add eax, 0xe27155c5
xor eax, 0x9dd5e5ee
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xbb7a8711
xor eax, 0xb1a88672
rol eax, 0x56
popf
pushf
not eax
add eax, 0xbe689fb7
xor eax, 0xe7b3995b
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xe331f00a
xor eax, 0xb9925837
rol eax, 0xbb
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x45ff8a52
pushf
not eax
add eax, 0x9939c88f
xor eax, 0xd71a445c
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xb1f5cf5f
xor eax, 0xf837903a
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xbc57ba74
xor eax, 0xcd5c2a28
rol eax, 0x81
popf
pushf
not eax
add eax, 0xc644f759
xor eax, 0xf2fce666
rol eax, 0x6e
popf
jmp 0x1400ca06e
xor r15d, r15d
mov ebx, r15d
jmp 0x1400caf40
lea rsi, [rax + r15]
lea r8, [rsi + 1]
sub r8, r15
mov edx, 0xc315efc8
pushf
not edx
add edx, 0xce3a2db1
xor edx, 0xe02f01a2
rol edx, 0x49
popf
pushf
not edx
add edx, 0xef239cce
xor edx, 0xad8a7022
rol edx, 0x1f
popf
pushf
not edx
add edx, 0xd3af29a5
xor edx, 0xdbc5b892
rol edx, 0x33
popf
pushf
not edx
add edx, 0x92121fd0
xor edx, 0xdccc54f1
rol edx, 0xf8
popf
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400cac70
push rax
pushf
mov eax, 0xdb89cee9
pushf
not eax
add eax, 0x8bf21089
xor eax, 0xea47e092
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xbc77045f
xor eax, 0xebf052c7
rol eax, 0x19
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xc914e8e2
pushf
not eax
add eax, 0xc4b3840f
xor eax, 0x83bc3ea2
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x976fd216
xor eax, 0xa2f7d5d8
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x860e9932
xor eax, 0xcd5560db
rol eax, 0xbb
popf
jmp 0x1400ca06e
mov r8, rdi
lea rdx, [0x192554742]
pushf
sub rdx, 0x525227aa
popf
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400cad0e
push rax
pushf
mov eax, 0xafec7c44
pushf
not eax
add eax, 0xec5c9e57
xor eax, 0xb5c85aba
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xd2554a86
xor eax, 0xc343394e
rol eax, 0xb2
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x335ca0aa
pushf
not eax
add eax, 0xc7cca057
xor eax, 0x9ce5aa03
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x8aac5872
xor eax, 0xf876d016
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xbf0a62fc
xor eax, 0x8311f944
rol eax, 0xc7
popf
jmp 0x1400ca06e
inc rbx
lea r8, [rsi + 1]
sub r8, rbx
mov edx, 0x5f32b8f6
pushf
not edx
add edx, 0x9c591574
xor edx, 0x81c805f2
rol edx, 0x9f
popf
pushf
not edx
add edx, 0xb08e68b3
xor edx, 0xc55ad550
rol edx, 0xe8
popf
pushf
not edx
add edx, 0xbb950e45
xor edx, 0xd5a6532d
rol edx, 0xe7
popf
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400cadf8
push rax
pushf
mov eax, 0x7394b70b
pushf
not eax
add eax, 0xb8d18b73
xor eax, 0xbf5b17df
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xf5484eb7
xor eax, 0xecfb9712
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xa1e57aa4
xor eax, 0xe7227c14
rol eax, 0x3c
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x7eed82fe
pushf
not eax
add eax, 0xa4b37a36
xor eax, 0xf4073bbf
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xef27399a
xor eax, 0xa76051f7
rol eax, 0x61
popf
pushf
not eax
add eax, 0x91f8c663
xor eax, 0x9474e363
rol eax, 0x26
popf
jmp 0x1400ca06e
mov esi, 0xd50c24c1
pushf
not esi
add esi, 0xb05e48b7
xor esi, 0xc5010ad9
rol esi, 6
popf
pushf
not esi
add esi, 0xa59caaa4
xor esi, 0x825138ee
rol esi, 0x6c
popf
pushf
not esi
add esi, 0xe75c3d83
xor esi, 0xeb3f22a6
rol esi, 0x95
popf
pushf
not esi
add esi, 0xa939bc94
xor esi, 0xc9af2879
rol esi, 0xfe
popf
push rax
pushf
mov eax, 0xd21a3327
pushf
not eax
add eax, 0xcc518213
xor eax, 0xbaa0ffb5
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xb97712ef
xor eax, 0x9e2b68f3
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x84a766db
xor eax, 0x82e76a27
rol eax, 0xd6
popf
jmp 0x1400ca06e
mov rbx, 0xffffffffffffffff
xor r15d, r15d
push rax
pushf
mov eax, 0x2d220fcc
pushf
not eax
add eax, 0x9cc11289
xor eax, 0xa1fb320a
rol eax, 0x16
popf
pushf
not eax
add eax, 0xdb5cfff5
xor eax, 0xcc790539
rol eax, 0x83
popf
pushf
not eax
add eax, 0xddb4c84b
xor eax, 0xe093f1a6
rol eax, 0x56
popf
pushf
not eax
add eax, 0x8bfb6fe5
xor eax, 0x85af86ae
rol eax, 0x9b
popf
jmp 0x1400ca06e
mov rax, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0xf
jbe 0x1400caf7e
push rax
pushf
mov eax, 0xd70bdb09
pushf
not eax
add eax, 0xbda09a39
xor eax, 0x881d484e
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xb5dce871
xor eax, 0xfe97ecc1
rol eax, 0xc4
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x4b4dd512
pushf
not eax
add eax, 0x8163d8ba
xor eax, 0x849f4d83
rol eax, 0x77
popf
pushf
not eax
add eax, 0xa3aaa270
xor eax, 0xb2b8ff80
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xccf4a1bf
xor eax, 0xc3fa39a4
rol eax, 0x1d
popf
jmp 0x1400ca06e
mov r14, qword [r14]
push rax
pushf
mov eax, 0xb4342c2e
pushf
not eax
add eax, 0xbdd30101
xor eax, 0xb00d7fb3
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xe1895682
xor eax, 0xb36d300e
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x99c2b308
xor eax, 0xdf93c445
rol eax, 0x23
popf
jmp 0x1400ca06e
mov qword [rsp + 0x20], rax
mov r9, r14
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.140095b98
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x1400cb05f
push rax
pushf
mov eax, 0x39cbe413
pushf
not eax
add eax, 0xdecd315f
xor eax, 0xc5960675
rol eax, 0x69
popf
pushf
not eax
add eax, 0xfa2b611d
xor eax, 0xef94e45b
rol eax, 0x67
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x9fef09e2
pushf
not eax
add eax, 0xc95f7a15
xor eax, 0xbe7d7cd8
rol eax, 0x64
popf
pushf
not eax
add eax, 0xfc0bb886
xor eax, 0xf3b6e58a
rol eax, 0x94
popf
pushf
not eax
add eax, 0xbd4fdc39
xor eax, 0xfc2c6ec6
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xcba78aaf
xor eax, 0xb810927f
rol eax, 0x2b
popf
jmp 0x1400ca06e
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cb124
push rax
pushf
mov eax, 0xcd975ad1
pushf
not eax
add eax, 0xac86c129
xor eax, 0xba0ffc8d
rol eax, 0xea
popf
pushf
not eax
add eax, 0xee300289
xor eax, 0x86a87daa
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xd91634fa
xor eax, 0xdfc2cfa5
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xcca4a1dc
xor eax, 0xa035089a
rol eax, 0xe1
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x7b21fced
pushf
not eax
add eax, 0xf418ad46
xor eax, 0xad5ec5dd
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xa89c66ed
xor eax, 0xec78393a
rol eax, 0x51
popf
pushf
not eax
add eax, 0x9a09565a
xor eax, 0xe4ac07e6
rol eax, 7
popf
jmp 0x1400ca06e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cb1c9
push rax
pushf
mov eax, 0x356aba47
pushf
not eax
add eax, 0xe4e694f3
xor eax, 0xaf9d5ec5
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xa8ab0d8a
xor eax, 0xa2cfc383
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xd0e8e0f7
xor eax, 0xaa4dbc28
rol eax, 0x39
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xd2879bf5
pushf
not eax
add eax, 0x941b768a
xor eax, 0xe550f969
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xcea3944b
xor eax, 0xffb39b05
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xf880764d
xor eax, 0xc7bada11
rol eax, 0x19
popf
jmp 0x1400ca06e
call fcn.1400ae516
push rax
pushf
mov eax, 0xa1a2654e
pushf
not eax
add eax, 0xee4411f8
xor eax, 0xd3ea5943
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x9b673c41
xor eax, 0xb5cf9ad4
rol eax, 0xe
popf
pushf
not eax
add eax, 0x8292da50
xor eax, 0x998e4df9
rol eax, 0xfa
popf
jmp 0x1400ca06e
lea rcx, [rbp - 0x49]
cmp qword [rbp - 0x31], 0xf
cmova rcx, qword [rbp - 0x49]
xor edx, edx
lea r8d, [rdx + 1]
jmp 0x1400cb26f
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r11, rax
cmp word [rax], si
jne 0x1400cb2da
push rax
pushf
mov eax, 0xf4b4425b
pushf
not eax
add eax, 0xf8573e82
xor eax, 0x9116902d
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xbccc7c88
xor eax, 0xe1023dcd
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xab01a8bf
xor eax, 0x8e75a6e8
rol eax, 0xed
popf
pushf
not eax
add eax, 0xda9d727c
xor eax, 0xa882c9d7
rol eax, 0x26
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xfad6f6c3
pushf
not eax
add eax, 0xeea2dd49
xor eax, 0xa52c98c2
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x929586af
xor eax, 0xa7de4abe
rol eax, 0x84
popf
jmp 0x1400ca06e
movsxd rcx, dword [rax + 0x3c]
cmp dword [rcx + rax], 0x4550
jne 0x1400cb377
push rax
pushf
mov eax, 0xd5d9b4d1
pushf
not eax
add eax, 0xd88bfaf0
xor eax, 0xf8fe2b98
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xdc3941ed
xor eax, 0x9b04b4a3
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xf2b5724e
xor eax, 0xb2406678
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xa281bd68
xor eax, 0xef947047
rol eax, 0xc3
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x7871e0bc
pushf
not eax
add eax, 0xd0b29677
xor eax, 0x8bd04124
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x86525038
xor eax, 0xe77ebaa3
rol eax, 0x3b
popf
jmp 0x1400ca06e
mov eax, dword [rcx + rax + 0x88]
test eax, eax
je 0x1400cb3ec
push rax
pushf
mov eax, 0x4b1757c
pushf
not eax
add eax, 0xb935efe6
xor eax, 0xea4255ba
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xfb62630c
xor eax, 0x8f899d71
rol eax, 0x7e
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x98a3e49e
pushf
not eax
add eax, 0xddb31c55
xor eax, 0xb9fc753e
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xf360e43c
xor eax, 0xcad11ec7
rol eax, 0x5a
popf
jmp 0x1400ca06e
mov ebx, dword [rax + r11 + 0x1c]
lea rdi, [r11 + rbx]
mov r9d, dword [rax + r11 + 0x20]
push r11
not r11
sub r9, r11
pop r11
sub r9, 1
mov esi, dword [rax + r11 + 0x24]
push r11
not r11
sub rsi, r11
pop r11
sub rsi, 1
mov r10d, r15d
test ebx, ebx
je 0x1400cb4ae
push rax
pushf
mov eax, 0x9fa56942
pushf
not eax
add eax, 0xdfb30e73
xor eax, 0xb24923a4
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xd44cc8d0
xor eax, 0xa4e08a5d
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf3dff6f5
xor eax, 0xb2c704e8
rol eax, 0x41
popf
pushf
not eax
add eax, 0x9aa43a2e
xor eax, 0xe81ea092
rol eax, 0x1f
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x7f25c4f8
pushf
not eax
add eax, 0xf5898f85
xor eax, 0xde8e7be8
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x89747b31
xor eax, 0xbe136cbc
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xb2d6e7ac
xor eax, 0x9e037135
rol eax, 0xae
popf
jmp 0x1400ca06e
nop
push rax
pushf
mov eax, 0xff43b9eb
pushf
not eax
add eax, 0xf8a437b5
xor eax, 0xe14d4936
rol eax, 0x40
popf
pushf
not eax
add eax, 0xb48a9645
xor eax, 0xdad1e8a4
rol eax, 0x52
popf
pushf
not eax
add eax, 0xd61cb99e
xor eax, 0xae911f6b
rol eax, 0x32
popf
jmp 0x1400ca06e
mov r8d, dword [r9]
push r11
not r11
sub r8, r11
pop r11
sub r8, 1
mov rax, qword [rbp + 0x6f]
sub r8, rax
nop dword [rax]
push rax
pushf
mov eax, 0x6ab38a3b
pushf
not eax
add eax, 0x8b0a934b
xor eax, 0xad4ddfc4
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xba349076
xor eax, 0xe37e398d
rol eax, 0x39
popf
jmp 0x1400ca06e
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400cb5c8
push rax
pushf
mov eax, 0x7a7e7dea
pushf
not eax
add eax, 0xd1aa9134
xor eax, 0xa5b42bd2
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x87eead42
xor eax, 0xf32ce87e
rol eax, 0x80
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xf3774cc2
pushf
not eax
add eax, 0xe5c66bbe
xor eax, 0xa77f2920
rol eax, 0xec
popf
pushf
not eax
add eax, 0xbf4bfc54
xor eax, 0x81ce4700
rol eax, 0x47
popf
jmp 0x1400ca06e
inc rax
test ecx, ecx
jne 0x1400cb635
push rax
pushf
mov eax, 0xbd63a94c
pushf
not eax
add eax, 0xcaba31b3
xor eax, 0xc9e361a4
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe002fdc6
xor eax, 0x94a466d9
rol eax, 0x5a
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x6b104398
pushf
not eax
add eax, 0xb23e55a4
xor eax, 0x96fb9a0e
rol eax, 0x65
popf
pushf
not eax
add eax, 0xac1e1ab4
xor eax, 0xfd7d36fc
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xe1ae035c
xor eax, 0xa9ac7725
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x9215d3a5
xor eax, 0xb4515ced
rol eax, 0x3d
popf
jmp 0x1400ca06e
test edx, edx
je 0x1400cb6dc
push rax
pushf
mov eax, 0xcb0fee31
pushf
not eax
add eax, 0x94496cd9
xor eax, 0x8f01bbe9
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xe298a019
xor eax, 0xdc1e7c07
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xad99769b
xor eax, 0xec6fff7c
rol eax, 0xc9
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xecf4493c
pushf
not eax
add eax, 0xf1f45bef
xor eax, 0xe3c31f4c
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xa10855cc
xor eax, 0xd82feccb
rol eax, 0x45
popf
pushf
not eax
add eax, 0xecade385
xor eax, 0xd5b79cba
rol eax, 0x1a
popf
jmp 0x1400ca06e
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x1400cb774
push rax
pushf
mov eax, 0xe3d56813
pushf
not eax
add eax, 0xf07d8bb1
xor eax, 0xf3e55212
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xda0867e8
xor eax, 0xbf845a72
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xac4dbe31
xor eax, 0xfbc54997
rol eax, 0x15
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x9522c5c9
pushf
not eax
add eax, 0x91d1f122
xor eax, 0xda60a8b5
rol eax, 0x49
popf
pushf
not eax
add eax, 0xbdc0ab68
xor eax, 0xb4480c35
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x8717c78b
xor eax, 0xd81452cc
rol eax, 0x4b
popf
jmp 0x1400ca06e
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x1400cb7f7
push rax
pushf
mov eax, 0xc2bda5cc
pushf
not eax
add eax, 0x8691509c
xor eax, 0xba2ff5c9
rol eax, 0x81
popf
pushf
not eax
add eax, 0x9ea76398
xor eax, 0xaaaea5ab
rol eax, 0x60
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xe23d13fd
pushf
not eax
add eax, 0xb11e0b59
xor eax, 0xe46dc82b
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xc5c77a7e
xor eax, 0xc075d6ef
rol eax, 0xdb
popf
jmp 0x1400ca06e
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cb883
push rax
pushf
mov eax, 0x7202bfbf
pushf
not eax
add eax, 0xaa67adfc
xor eax, 0x81d80b4e
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xde313bf3
xor eax, 0xa64eae87
rol eax, 0x21
popf
pushf
not eax
add eax, 0xa8bc2509
xor eax, 0xe2dbcba7
rol eax, 0xe5
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xfe9c4ea2
pushf
not eax
add eax, 0xa2a30f11
xor eax, 0xdc7ec815
rol eax, 0x69
popf
pushf
not eax
add eax, 0xbfe53762
xor eax, 0x8fd44075
rol eax, 0xe3
popf
jmp 0x1400ca06e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cb902
push rax
pushf
mov eax, 0x185d7566
pushf
not eax
add eax, 0xa8ab9eb8
xor eax, 0x977257f0
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xce15b5df
xor eax, 0x8ec42240
rol eax, 0x75
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x98efadf1
pushf
not eax
add eax, 0xb5f19e36
xor eax, 0xf1b8a3a3
rol eax, 0x73
popf
pushf
not eax
add eax, 0x9a33e017
xor eax, 0xfac77a4c
rol eax, 0xd0
popf
jmp 0x1400ca06e
call fcn.1400ae516
push rax
pushf
mov eax, 0x800e667a
pushf
not eax
add eax, 0xf3444b94
xor eax, 0xf8a31482
rol eax, 0xac
popf
pushf
not eax
add eax, 0x806a2d63
xor eax, 0x86e759cb
rol eax, 9
popf
pushf
not eax
add eax, 0xabb0583e
xor eax, 0xbd55931f
rol eax, 0x81
popf
jmp 0x1400ca06e
mov esi, 0xd319f140
pushf
not esi
add esi, 0xea7f1f37
xor esi, 0xc63e16b4
rol esi, 3
popf
pushf
not esi
add esi, 0xe44eae3f
xor esi, 0xbe4ba254
rol esi, 0xaa
popf
pushf
not esi
add esi, 0x98c1a244
xor esi, 0xd7e7aefd
rol esi, 8
popf
push rax
pushf
mov eax, 0x770bf0aa
pushf
not eax
add eax, 0xbb383b5e
xor eax, 0xf2914676
rol eax, 0x35
popf
pushf
not eax
add eax, 0xdce92de3
xor eax, 0x8b83aacd
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x8b4e3ced
xor eax, 0xff164f45
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xb5bed1f3
xor eax, 0xdf884089
rol eax, 6
popf
jmp 0x1400ca06e
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x1400cba5a
push rax
pushf
mov eax, 0xb0a23efc
pushf
not eax
add eax, 0xdb43a89c
xor eax, 0xd123c296
rol eax, 0x70
popf
pushf
not eax
add eax, 0xbfee0068
xor eax, 0x80e404e5
rol eax, 0xe6
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x4713083a
pushf
not eax
add eax, 0xe7feb875
xor eax, 0xd9d478bc
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xb88b69e8
xor eax, 0xbad8163a
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xd01a6d51
xor eax, 0xb4ae1ad8
rol eax, 0xfd
popf
jmp 0x1400ca06e
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cbaf9
push rax
pushf
mov eax, 0x11425851
pushf
not eax
add eax, 0xa0ad74db
xor eax, 0xcf422659
rol eax, 0x31
popf
pushf
not eax
add eax, 0xcfde7223
xor eax, 0xba7d22de
rol eax, 8
popf
pushf
not eax
add eax, 0xa6e7371c
xor eax, 0xe6142832
rol eax, 0x42
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x5d1c1610
pushf
not eax
add eax, 0xc430811b
xor eax, 0x94cda1a9
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xc69a1ad3
xor eax, 0x875c7e0f
rol eax, 0x20
popf
jmp 0x1400ca06e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cbb9e
push rax
pushf
mov eax, 0x43f73ed3
pushf
not eax
add eax, 0xaccfdbb3
xor eax, 0xe774454c
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xd1dd3106
xor eax, 0xf76b4711
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x8f89fb20
xor eax, 0xc2795c40
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xf7f293e5
xor eax, 0xd13780da
rol eax, 0x18
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xcf34e638
pushf
not eax
add eax, 0xf5bdea87
xor eax, 0x820a954d
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x81ab4c3f
xor eax, 0x847d535f
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xdb782db6
xor eax, 0xd6487291
rol eax, 4
popf
jmp 0x1400ca06e
call fcn.1400ae516
push rax
pushf
mov eax, 0x5442419d
pushf
not eax
add eax, 0xee014aaf
xor eax, 0xbad63fe4
rol eax, 0x99
popf
pushf
not eax
add eax, 0xf53e8bf7
xor eax, 0xa16e18e6
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x9d0aa82b
xor eax, 0xe18ecf31
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xc4eedfa5
xor eax, 0xcb76dbc9
rol eax, 0x7f
popf
jmp 0x1400ca06e
inc r13d
cmp r13d, dword [r12]
jb 0x1400ca874
xor edx, edx
mov r8d, 0xc07fd5b3
pushf
not r8d
add r8d, 0xde4f1dff
xor r8d, 0x8e475e2b
rol r8d, 0xc3
popf
pushf
not r8d
add r8d, 0xeedfca94
xor r8d, 0xac08c83e
rol r8d, 0x38
popf
pushf
not r8d
add r8d, 0xec13c0c5
xor r8d, 0xd63fc6e1
rol r8d, 0x2c
popf
pushf
not r8d
add r8d, 0x8abe8649
xor r8d, 0xdbde378e
rol r8d, 0x4c
popf
mov rcx, r12
jmp 0x1400cbcbf
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
sub rbx, r15
mov esi, 0xab5f9195
pushf
not esi
add esi, 0xb9dedb77
xor esi, 0xa2bf2ae9
rol esi, 0x99
popf
pushf
not esi
add esi, 0xa9811917
xor esi, 0x98272cca
rol esi, 0x9f
popf
jmp 0x1400caee4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movsxd rax, r10d
movzx ecx, word [rsi + rax*2]
mov ebx, dword [rdi + rcx*4]
xor edx, edx
mov r8d, 0xa8aceb3
pushf
not r8d
add r8d, 0xcb3ba516
xor r8d, 0xe13a556b
rol r8d, 0xc9
popf
pushf
not r8d
add r8d, 0xfc34816f
xor r8d, 0xfb11070a
rol r8d, 0x1d
popf
pushf
not r8d
add r8d, 0x8dda78f8
xor r8d, 0xf0af4b02
rol r8d, 0x65
popf
pushf
not r8d
add r8d, 0xeba23300
xor r8d, 0x8bea94cc
rol r8d, 0xa0
popf
mov rcx, r12
cmp byte [rbp + 0x77], dl
jne 0x1400cbec3
push rax
pushf
mov eax, 0x617a8b63
pushf
not eax
add eax, 0xff5e52ec
xor eax, 0xa1f33d09
rol eax, 0x29
popf
pushf
not eax
add eax, 0xac9d6ffe
xor eax, 0x8504d86e
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x82bca4a4
xor eax, 0x88487a12
rol eax, 0x24
popf
pushf
not eax
add eax, 0xa6c8137f
xor eax, 0xe281a522
rol eax, 0xd0
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xb50df0ae
pushf
not eax
add eax, 0xe3e817c4
xor eax, 0xb6e9dc43
rol eax, 0x44
popf
pushf
not eax
add eax, 0x86c3fbc7
xor eax, 0xa0bc9fb8
rol eax, 0xff
popf
pushf
not eax
add eax, 0x883992fe
xor eax, 0xb69d2d8b
rol eax, 0xda
popf
jmp 0x1400ca06e
mov rax, qword [rbp + 0x7f]
add rbx, qword [rax + 0x18]
push rax
pushf
mov eax, 0x1ae8b745
pushf
not eax
add eax, 0xd1c433b6
xor eax, 0xfd1a320c
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x858b0730
xor eax, 0xe45c01f7
rol eax, 0xa5
popf
jmp 0x1400ca06e
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x1400cbff2
mov rbx, r15
push rax
pushf
mov eax, 0x3c5b2c92
pushf
not eax
add eax, 0xcf2ed8fc
xor eax, 0xc594381e
rol eax, 0x32
popf
pushf
not eax
add eax, 0xfe53f378
xor eax, 0x95b91759
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xf7d37923
xor eax, 0x916bf5fe
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xb30840dc
xor eax, 0x9a8bc19c
rol eax, 0xb7
popf
jmp 0x1400ca06e
mov rdx, qword [rbp - 0x31]
cmp rdx, 0xf
jbe 0x1400cc055
push rax
pushf
mov eax, 0x33573172
pushf
not eax
add eax, 0xa8a4e026
xor eax, 0x95b17932
rol eax, 0x93
popf
pushf
not eax
add eax, 0xf33bc472
xor eax, 0x867fbfea
rol eax, 0x63
popf
pushf
not eax
add eax, 0xe1b1dfbe
xor eax, 0xf7ae3ea1
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xd16d35d7
xor eax, 0xb0532a4f
rol eax, 0x21
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x59f3944c
pushf
not eax
add eax, 0xaaa4fffa
xor eax, 0xb86bc82a
rol eax, 0x57
popf
pushf
not eax
add eax, 0xff320b41
xor eax, 0x8b9aa89d
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x9a162168
xor eax, 0xd1ffea5d
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xeeedd247
xor eax, 0xc7f81e78
rol eax, 0x87
popf
jmp 0x1400ca06e
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cc11a
push rax
pushf
mov eax, 0xd953ca53
pushf
not eax
add eax, 0xd802dfc1
xor eax, 0xe0c39994
rol eax, 0xef
popf
pushf
not eax
add eax, 0x864f4a7b
xor eax, 0x89530308
rol eax, 0x79
popf
pushf
not eax
add eax, 0xbc9d300f
xor eax, 0xb18bf3ae
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xb459a033
xor eax, 0xbad506d4
rol eax, 0x9a
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xbb21c066
pushf
not eax
add eax, 0x873cdc7a
xor eax, 0xed53c707
rol eax, 0x47
popf
pushf
not eax
add eax, 0x9d2db04b
xor eax, 0x92f584ae
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x9bb33256
xor eax, 0xd83582d2
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xf6179b2e
xor eax, 0xa8fcde97
rol eax, 0xa7
popf
jmp 0x1400ca06e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400cc1e1
push rax
pushf
mov eax, 0x8813fe32
pushf
not eax
add eax, 0xcef0f7e0
xor eax, 0x81e1b068
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xfa3bbc4d
xor eax, 0x80cfd78e
rol eax, 0x58
popf
pushf
not eax
add eax, 0xe8557390
xor eax, 0x8f9658e2
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xfb11a919
xor eax, 0x8aacbf60
rol eax, 0xc0
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xddc965c
pushf
not eax
add eax, 0xc35d3793
xor eax, 0xc86cff15
rol eax, 0x57
popf
pushf
not eax
add eax, 0x8a9d94e5
xor eax, 0xfe0678d0
rol eax, 0x50
popf
pushf
not eax
add eax, 0xcfeb50c6
xor eax, 0xe985a1ed
rol eax, 0xd7
popf
jmp 0x1400ca06e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0x6ccb8669
pushf
not eax
add eax, 0xf1ee47be
xor eax, 0xf941dec7
rol eax, 0x91
popf
pushf
not eax
add eax, 0x9b81184f
xor eax, 0xc5daa154
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x9d572f08
xor eax, 0xcd3f5372
rol eax, 0x23
popf
jmp 0x1400ca06e
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], 0xf
mov byte [rbp - 0x49], 0
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x1400cc333
push rax
pushf
mov eax, 0x9b01974e
pushf
not eax
add eax, 0xc9355cb8
xor eax, 0xf459b3eb
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xcd9f51fe
xor eax, 0xcbcd0e7a
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf9c47d3b
xor eax, 0xfa5609d9
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xcec01712
xor eax, 0xcb2c3a5e
rol eax, 0x4d
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0xb369e84b
pushf
not eax
add eax, 0xf2e7eaf9
xor eax, 0xbb4a7dc8
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xf22a5bdf
xor eax, 0x8c1989e0
rol eax, 0x85
popf
jmp 0x1400ca06e
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400cc3ac
push rax
pushf
mov eax, 0x61d85390
pushf
not eax
add eax, 0xa4c61829
xor eax, 0xdcb93a99
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xa8af79d8
xor eax, 0x8ec959f7
rol eax, 0xb4
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x1f885e2b
pushf
not eax
add eax, 0xdc7b61f7
xor eax, 0x9daf79c5
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xb7b55f31
xor eax, 0xfeddc2ee
rol eax, 0x91
popf
jmp 0x1400ca06e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400cc44d
push rax
pushf
mov eax, 0x3ace9e3
pushf
not eax
add eax, 0xeb613e47
xor eax, 0xf90b12de
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x8827a5c7
xor eax, 0xc23321a7
rol eax, 0x31
popf
pushf
not eax
add eax, 0xdcd22979
xor eax, 0xfde25411
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xde841eb0
xor eax, 0xc72f03a2
rol eax, 0xac
popf
jmp 0x1400ca06e
push rax
pushf
mov eax, 0x65652464
pushf
not eax
add eax, 0xb4acfd46
xor eax, 0x99bc94fe
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xa46a99db
xor eax, 0xb15230c7
rol eax, 0x21
popf
pushf
not eax
add eax, 0xd5115aae
xor eax, 0x8b503b34
rol eax, 0xa3
popf
jmp 0x1400ca06e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ae516
push rax
pushf
mov eax, 0xfad7aa49
pushf
not eax
add eax, 0xf82dc6cf
xor eax, 0x83d8869f
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xa3959f31
xor eax, 0xbce2a5c0
rol eax, 0x10
popf
pushf
not eax
add eax, 0x8fe031ee
xor eax, 0xadc9ffe0
rol eax, 0x12
popf
pushf
not eax
add eax, 0xa82fec83
xor eax, 0xaa8735da
rol eax, 9
popf
jmp 0x1400ca06e
mov rax, rbx
jmp 0x1400cbcc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3