Function at 0x1401eb7d5
Capabilities:
Delete file
Encrypt data using speck

Disassembly:
push rax
pushf
mov eax, 0xfa55b4a1
pushf
not eax
add eax, 0xa0773caf
xor eax, 0xe5e1aa19
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc91097d0
xor eax, 0x86881fcb
rol eax, 0xb3
popf
cmp eax, 0x20
jne 0x1401eb812
popf
pop rax
jmp 0x1401ecc54
cmp eax, 0
jne 0x1401eb821
popf
pop rax
jmp 0x1401eba01
cmp eax, 3
jne 0x1401eb830
popf
pop rax
jmp 0x1401ebbe9
cmp eax, 1
jne 0x1401eb83f
popf
pop rax
jmp 0x1401ebada
cmp eax, 0xd
jne 0x1401eb84e
popf
pop rax
jmp 0x1401ec145
cmp eax, 0x1a
jne 0x1401eb85d
popf
pop rax
jmp 0x1401eca27
cmp eax, 0xe
jne 0x1401eb86c
popf
pop rax
jmp 0x1401ec1ec
cmp eax, 0xb
jne 0x1401eb87b
popf
pop rax
jmp 0x1401ec055
cmp eax, 0x19
jne 0x1401eb88a
popf
pop rax
jmp 0x1401ec9c9
cmp eax, 8
jne 0x1401eb899
popf
pop rax
jmp 0x1401ebeb5
cmp eax, 0x1d
jne 0x1401eb8a8
popf
pop rax
jmp 0x1401ecb1b
cmp eax, 0x17
jne 0x1401eb8b7
popf
pop rax
jmp 0x1401ec8bc
cmp eax, 0x1c
jne 0x1401eb8c6
popf
pop rax
jmp 0x1401ecacf
cmp eax, 0x12
jne 0x1401eb8d5
popf
pop rax
jmp 0x1401ec5af
cmp eax, 0x18
jne 0x1401eb8e4
popf
pop rax
jmp 0x1401ec94e
cmp eax, 0x11
jne 0x1401eb8f3
popf
pop rax
jmp 0x1401ec4bb
cmp eax, 0x1b
jne 0x1401eb902
popf
pop rax
jmp 0x1401eca83
cmp eax, 0x21
jne 0x1401eb911
popf
pop rax
jmp 0x1401eccd6
cmp eax, 0xa
jne 0x1401eb920
popf
pop rax
jmp 0x1401ebfd6
cmp eax, 0x14
jne 0x1401eb92f
popf
pop rax
jmp 0x1401ec73e
cmp eax, 0xf
jne 0x1401eb93e
popf
pop rax
jmp 0x1401ec2a3
cmp eax, 0x13
jne 0x1401eb94d
popf
pop rax
jmp 0x1401ec645
cmp eax, 0x15
jne 0x1401eb95c
popf
pop rax
jmp 0x1401ec782
cmp eax, 2
jne 0x1401eb96b
popf
pop rax
jmp 0x1401ebb2d
cmp eax, 0x1e
jne 0x1401eb97a
popf
pop rax
jmp 0x1401ecb54
cmp eax, 0xc
jne 0x1401eb989
popf
pop rax
jmp 0x1401ec0fa
cmp eax, 7
jne 0x1401eb998
popf
pop rax
jmp 0x1401ebe57
cmp eax, 5
jne 0x1401eb9a7
popf
pop rax
jmp 0x1401ebce7
cmp eax, 0x1f
jne 0x1401eb9b6
popf
pop rax
jmp 0x1401ecbe4
cmp eax, 0x10
jne 0x1401eb9c5
popf
pop rax
jmp 0x1401ec461
cmp eax, 6
jne 0x1401eb9d4
popf
pop rax
jmp 0x1401ebd8c
cmp eax, 9
jne 0x1401eb9e3
popf
pop rax
jmp 0x1401ebf23
cmp eax, 4
jne 0x1401eb9f2
popf
pop rax
jmp 0x1401ebc48
cmp eax, 0x16
jne 0x1401eba01
popf
pop rax
jmp 0x1401ec829
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
mov rax, qword [0x140103090]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov rbx, rcx
cmp byte [rcx + 0xa0], 1
je 0x1401eba94
push rax
pushf
mov eax, 0xe9f6376e
pushf
not eax
add eax, 0xc27a1dc1
xor eax, 0x898fd961
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x85d7ea3b
xor eax, 0xf0fac537
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xb23562e6
xor eax, 0xcdadaafa
rol eax, 0x25
popf
pushf
not eax
add eax, 0xeb106286
xor eax, 0xbcc0381d
rol eax, 0x9c
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x7d04246b
pushf
not eax
add eax, 0xc49961c0
xor eax, 0xde2a2691
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xd2b0b11d
xor eax, 0x9b7f374f
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xd369f40e
xor eax, 0xfc33f069
rol eax, 0xa5
popf
jmp 0x1401eb803
call fcn.1401363f1
mov rcx, rbx
call fcn.14026eafd
push rax
pushf
mov eax, 0x81b2d2bc
pushf
not eax
add eax, 0xb7117c18
xor eax, 0xb77d6dc1
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xefd646f6
xor eax, 0xcb46edff
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xa1a59180
xor eax, 0x82594607
rol eax, 0xd0
popf
jmp 0x1401eb803
mov rcx, qword [rbx]
cmp rcx, 0xffffffffffffffff
je 0x1401ebb8f
push rax
pushf
mov eax, 0x1457ca15
pushf
not eax
add eax, 0xfe738f4b
xor eax, 0xecaf1825
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xb386ca8f
xor eax, 0xb8118009
rol eax, 0x72
popf
pushf
not eax
add eax, 0xedcc6757
xor eax, 0x9ade2ce0
rol eax, 5
popf
pushf
not eax
add eax, 0x9b8525c1
xor eax, 0x9cbe684a
rol eax, 0xca
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0xd45fcb9b
pushf
not eax
add eax, 0x94b77db1
xor eax, 0xe61a45ef
rol eax, 0x43
popf
pushf
not eax
add eax, 0xce07fc5a
xor eax, 0x9510248d
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xc8ef5f23
xor eax, 0x97f0ec4e
rol eax, 0x76
popf
pushf
not eax
add eax, 0xfff14c23
xor eax, 0xe4c51056
rol eax, 0xdd
popf
jmp 0x1401eb803
call qword [sym.imp.KERNEL32.dll_CloseHandle]
push rax
pushf
mov eax, 0xc1874c90
pushf
not eax
add eax, 0xae6f4ee1
xor eax, 0xe89d4a9d
rol eax, 0x70
popf
pushf
not eax
add eax, 0xd6cffaf9
xor eax, 0xf906ceeb
rol eax, 0x23
popf
pushf
not eax
add eax, 0xc90c7118
xor eax, 0xafd6a197
rol eax, 0xba
popf
pushf
not eax
add eax, 0xe1e07e80
xor eax, 0xd2e78e4e
rol eax, 0x10
popf
jmp 0x1401eb803
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140309216
nop
mov rdx, rax
mov rcx, rbx
call fcn.14023f7ca
mov esi, eax
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1401ebca1
push rax
pushf
mov eax, 0xf105cd23
pushf
not eax
add eax, 0x874f7c5d
xor eax, 0xfd2ad202
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x8096050e
xor eax, 0xcae44675
rol eax, 0x40
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x723c7006
pushf
not eax
add eax, 0x953e737f
xor eax, 0xca1c7c29
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xe1838421
xor eax, 0xcafc518a
rol eax, 0
popf
pushf
not eax
add eax, 0xee4717c6
xor eax, 0x9f271999
rol eax, 0x29
popf
jmp 0x1401eb803
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401ebd46
push rax
pushf
mov eax, 0xdaf754f0
pushf
not eax
add eax, 0xcbabbdbc
xor eax, 0xe379f2d9
rol eax, 0x64
popf
pushf
not eax
add eax, 0xa0141b94
xor eax, 0x9f82dce6
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xb728b87b
xor eax, 0xf1f41395
rol eax, 0xb9
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0xa9774625
pushf
not eax
add eax, 0xff78fd14
xor eax, 0x91e1669c
rol eax, 0x16
popf
pushf
not eax
add eax, 0x8d953f4c
xor eax, 0xa4ada29f
rol eax, 0x55
popf
pushf
not eax
add eax, 0x89b48f1d
xor eax, 0xd89a0b40
rol eax, 0x37
popf
jmp 0x1401eb803
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401ebdfe
push rax
pushf
mov eax, 0xf438e094
pushf
not eax
add eax, 0xfd552ba8
xor eax, 0xc37eb634
rol eax, 0x71
popf
pushf
not eax
add eax, 0x850b2f26
xor eax, 0xa3abc909
rol eax, 0x25
popf
pushf
not eax
add eax, 0xe1b6ee48
xor eax, 0xba6310ea
rol eax, 0x73
popf
pushf
not eax
add eax, 0xb91b35ba
xor eax, 0xcadb073d
rol eax, 0xa3
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x9e96a0ef
pushf
not eax
add eax, 0xabe38a86
xor eax, 0x97bc304d
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa9208a6e
xor eax, 0xa88dcaaa
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xb4c203ce
xor eax, 0xe62b31c7
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xc980dec4
xor eax, 0xe1d475a7
rol eax, 0x5e
popf
jmp 0x1401eb803
call fcn.1401eb76d
push rax
pushf
mov eax, 0x4498cff7
pushf
not eax
add eax, 0x9c19e867
xor eax, 0xeefdb695
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xe86082dd
xor eax, 0xc80ff46e
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x95dd891f
xor eax, 0xdd92e8c2
rol eax, 6
popf
pushf
not eax
add eax, 0x95e51eae
xor eax, 0xbb9924f2
rol eax, 0xc7
popf
jmp 0x1401eb803
test esi, esi
js 0x1401ebef0
push rax
pushf
mov eax, 0x2b8d75b0
pushf
not eax
add eax, 0xd8433b8e
xor eax, 0x9f2b19c9
rol eax, 0xad
popf
pushf
not eax
add eax, 0xc91ea425
xor eax, 0xad9c1db3
rol eax, 2
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x4804e10
pushf
not eax
add eax, 0x9216f6be
xor eax, 0x9a1ea0e0
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x9489364d
xor eax, 0x8145d44a
rol eax, 0x72
popf
jmp 0x1401eb803
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.140184cc1
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140343966
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x1401ebf90
push rax
pushf
mov eax, 0x5fef7f87
pushf
not eax
add eax, 0x972c5021
xor eax, 0x842644a8
rol eax, 0x31
popf
pushf
not eax
add eax, 0xd2e32a4a
xor eax, 0xf5db7478
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xb6973092
xor eax, 0xde6100bd
rol eax, 0x62
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x2887088d
pushf
not eax
add eax, 0xa41c238d
xor eax, 0xbffa922b
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xc429c8fc
xor eax, 0xc29577ff
rol eax, 0x55
popf
pushf
not eax
add eax, 0xfea9a207
xor eax, 0x955c80e5
rol eax, 0xee
popf
jmp 0x1401eb803
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401ec022
push rax
pushf
mov eax, 0x1172851e
pushf
not eax
add eax, 0xb30d5504
xor eax, 0xddb5cf55
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xa2a12bf7
xor eax, 0x8cbda616
rol eax, 0xae
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x57ff40d1
pushf
not eax
add eax, 0xc9b77333
xor eax, 0x85f718a0
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x96fed132
xor eax, 0xa45eb1ed
rol eax, 0x70
popf
jmp 0x1401eb803
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401ec0b4
push rax
pushf
mov eax, 0xe8f1053b
pushf
not eax
add eax, 0xe2eb6ea7
xor eax, 0xe257c222
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xad768e9b
xor eax, 0x82ecb8fa
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x89a40558
xor eax, 0x8986ca71
rol eax, 0xb0
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0xd0b8b584
pushf
not eax
add eax, 0xef77bd9b
xor eax, 0x956f632e
rol eax, 0x59
popf
pushf
not eax
add eax, 0xae5a28a3
xor eax, 0xd674ddf2
rol eax, 0x70
popf
pushf
not eax
add eax, 0xe962aba5
xor eax, 0x8f23fa6e
rol eax, 0x17
popf
jmp 0x1401eb803
call fcn.1401eb76d
push rax
pushf
mov eax, 0xc34e4678
pushf
not eax
add eax, 0xc042bc1b
xor eax, 0x9ceda9b9
rol eax, 0xee
popf
pushf
not eax
add eax, 0x902a8385
xor eax, 0xfa58ae0a
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xb21a1a04
xor eax, 0xb68c2dee
rol eax, 0x85
popf
jmp 0x1401eb803
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], bx
cmp qword [rbp - 0x78], rbx
jne 0x1401ec1b9
push rax
pushf
mov eax, 0x9681d71f
pushf
not eax
add eax, 0xb8531733
xor eax, 0xeb1e8d39
rol eax, 0xca
popf
pushf
not eax
add eax, 0xd1a6a762
xor eax, 0xe792016c
rol eax, 0x72
popf
pushf
not eax
add eax, 0xbf476106
xor eax, 0xa4eb3872
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xf090d89a
xor eax, 0xed432c58
rol eax, 0xa6
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x613564b3
pushf
not eax
add eax, 0xd28ae0a4
xor eax, 0xb89bfc17
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x9cf9057e
xor eax, 0xb811c1b6
rol eax, 0xfe
popf
jmp 0x1401eb803
mov esi, 0x6a00eb2
pushf
not esi
add esi, 0xaee5cd52
xor esi, 0xffaa4308
rol esi, 0x62
popf
pushf
not esi
add esi, 0xa3fd193d
xor esi, 0x8014fd4d
rol esi, 0x1a
popf
pushf
not esi
add esi, 0x89845857
xor esi, 0xecd7cb47
rol esi, 0x91
popf
pushf
not esi
add esi, 0xb455de86
xor esi, 0xbd163abd
rol esi, 0x37
popf
jmp 0x1401ec8ae
xor edx, edx
mov r8d, 0x9e5abce
pushf
not r8d
add r8d, 0xd195f816
xor r8d, 0xfbeb3220
rol r8d, 0xcc
popf
pushf
not r8d
add r8d, 0xb981dab0
xor r8d, 0x8cdb7d79
rol r8d, 0xf7
popf
pushf
not r8d
add r8d, 0xba713b3e
xor r8d, 0x90e5139a
rol r8d, 0xd5
popf
pushf
not r8d
add r8d, 0xcd4c22b9
xor r8d, 0xb8001087
rol r8d, 0x3d
popf
lea rcx, [rbp - 0x60]
call fcn.140044ca0
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rdx, qword [rsp + 0x78]
lea rcx, [rbp - 0x60]
call fcn.1402d3c2a
nop
call fcn.14026c919
movsxd rcx, eax
movabs rax, 0xd4b4c228d24a5607
pushf
not rax
add rax, 0x45cf8da2
xor rax, 0x66822cea
rol rax, 0x9c
popf
pushf
not rax
add rax, 0x53d543dc
xor rax, 0x64ee135f
rol rax, 0x11
popf
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
push rax
not rax
sub rdx, rax
pop rax
sub rdx, 1
imul rax, rdx, 0x23d6df
sub rcx, rax
add ecx, 0xdd9d
movsxd r14, ecx
mov rcx, r14
call fcn.140341faf
mov rdi, rax
test r14, r14
je 0x1401ec408
push rax
pushf
mov eax, 0xcf9c15f2
pushf
not eax
add eax, 0xab16271e
xor eax, 0xf26d66ff
rol eax, 0x82
popf
pushf
not eax
add eax, 0x8e3095fc
xor eax, 0xac77d63d
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xbbfcb76d
xor eax, 0xcdf48295
rol eax, 0x14
popf
pushf
not eax
add eax, 0xcd0f1c13
xor eax, 0x83a431d8
rol eax, 0xd9
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x2a46a5e9
pushf
not eax
add eax, 0xeb2b3db9
xor eax, 0x80c65038
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xd1b73ba4
xor eax, 0xf74f1328
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xce414cb8
xor eax, 0x8bcfad0a
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xb11c953e
xor eax, 0xa718f7c4
rol eax, 0x19
popf
jmp 0x1401eb803
nop
push rax
pushf
mov eax, 0x2fab7be4
pushf
not eax
add eax, 0x918bcb8c
xor eax, 0xb2f60fac
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x9d8cb70a
xor eax, 0x9e9a1c2a
rol eax, 0x98
popf
pushf
not eax
add eax, 0xb0eacb5b
xor eax, 0xdd8fe1c1
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x9bd8aa6e
xor eax, 0xca6edf2a
rol eax, 0x9c
popf
jmp 0x1401eb803
call fcn.14026c919
mov r9d, eax
mov eax, 0xe819aa44
pushf
not eax
add eax, 0xa12d7c0d
xor eax, 0xca7f2747
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x97872089
xor eax, 0xe1751bcc
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xdf340293
xor eax, 0xf3c94f18
rol eax, 1
popf
imul r9d
push r9
not r9d
sub edx, r9d
pop r9
sub edx, 1
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
push rcx
not ecx
sub edx, ecx
pop rcx
sub edx, 1
imul ecx, edx, 0xff
sub r9d, ecx
mov byte [rbx + rdi], r9b
inc rbx
cmp rbx, r14
jb 0x1401ec57c
push rax
pushf
mov eax, 0xaa67bf5f
pushf
not eax
add eax, 0xb941d913
xor eax, 0xf235b8fc
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xdb07ff1f
xor eax, 0xd9481a91
rol eax, 0x54
popf
pushf
not eax
add eax, 0xb8a845c3
xor eax, 0xfa081d82
rol eax, 0xa9
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x536eeec1
pushf
not eax
add eax, 0xc5924c30
xor eax, 0x87cce72b
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xce877b4f
xor eax, 0xd6a31bf0
rol eax, 0xca
popf
jmp 0x1401eb803
mov r8, r14
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.1402acdc1
lea rcx, [rbp - 0x58]
call fcn.1403608f4
test rax, rax
jne 0x1401ec612
push rax
pushf
mov eax, 0x23167bec
pushf
not eax
add eax, 0xdd434625
xor eax, 0xc96d5f96
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x9e797538
xor eax, 0xa1ff0534
rol eax, 0x18
popf
pushf
not eax
add eax, 0xa3dc1d73
xor eax, 0xbe056314
rol eax, 0x6a
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0xdbe4e486
pushf
not eax
add eax, 0xe3bdb038
xor eax, 0xf76236a7
rol eax, 0x54
popf
pushf
not eax
add eax, 0xa9a0a7f2
xor eax, 0xd83b9c42
rol eax, 0x11
popf
jmp 0x1401eb803
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
mov eax, 0xc207bb3
pushf
not eax
add eax, 0xea9051b8
xor eax, 0xad5b82b2
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xea7eb15e
xor eax, 0x95cb3e29
rol eax, 0x51
popf
mov edx, 0x6b7ec358
pushf
not edx
add edx, 0xfc52c4d7
xor edx, 0xd90bb351
rol edx, 0xff
popf
pushf
not edx
add edx, 0xb71c5e6e
xor edx, 0x922c8556
rol edx, 2
popf
cmp qword [rbp + rcx - 0x18], 0
cmovne eax, edx
or eax, dword [rbp + rcx - 0x50]
and eax, 0x17
mov dword [rbp + rcx - 0x50], eax
and eax, dword [rbp + rcx - 0x4c]
jne 0x1401ec70b
push rax
pushf
mov eax, 0x66a9357a
pushf
not eax
add eax, 0xaa1b6851
xor eax, 0x86bf32ee
rol eax, 0xae
popf
pushf
not eax
add eax, 0xb4554f6d
xor eax, 0xeeaa570f
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x94903592
xor eax, 0xdfb2cb3a
rol eax, 0x11
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0xc5d5c2fd
pushf
not eax
add eax, 0xef7d64d5
xor eax, 0xdcc3702c
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x97792d5a
xor eax, 0xcdd53560
rol eax, 0x41
popf
jmp 0x1401eb803
mov rcx, rdi
call fcn.1401eb76d
nop word [rax + rax]
push rax
pushf
mov eax, 0x5729ab7c
pushf
not eax
add eax, 0xd4468fc9
xor eax, 0xe8b34d59
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xf5dca8b6
xor eax, 0xfe0b4f5b
rol eax, 0xca
popf
jmp 0x1401eb803
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 8
cmovae rcx, qword [rsp + 0x78]
jmp 0x1401ec793
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1401ec7d0
push rax
pushf
mov eax, 0x56f110a2
pushf
not eax
add eax, 0x8f3669ef
xor eax, 0xcaa23dc6
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x9de606a4
xor eax, 0xea2c2d81
rol eax, 0x49
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0xec339af1
pushf
not eax
add eax, 0xa429ce52
xor eax, 0x972122e2
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xe318bfd8
xor eax, 0x8fce965f
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xfef982aa
xor eax, 0xc058af62
rol eax, 0x35
popf
pushf
not eax
add eax, 0xbdebbda0
xor eax, 0xb1a43e84
rol eax, 0x1a
popf
jmp 0x1401eb803
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [0x1b7c32975]
pushf
sub rax, 0x77b40a15
popf
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x58]
call fcn.1402502f1
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [0x18655b39c]
pushf
sub rax, 0x464ec94c
popf
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 0x64], edx
lea rax, [0x1a34b0a52]
pushf
sub rax, 0x63442122
popf
mov qword [rbp + 0x48], rax
lea rcx, [rbp + 0x48]
call fcn.1402e4afa
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x1401eca27
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401ec908
push rax
pushf
mov eax, 0xa05d9b58
pushf
not eax
add eax, 0xb20b9f37
xor eax, 0x8aff4a96
rol eax, 0x78
popf
pushf
not eax
add eax, 0xf59061ee
xor eax, 0xac3510a4
rol eax, 0xd
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x7f5a61b2
pushf
not eax
add eax, 0xa46aaefc
xor eax, 0xb147395b
rol eax, 2
popf
pushf
not eax
add eax, 0xc8b904d6
xor eax, 0xf105ef39
rol eax, 0x60
popf
pushf
not eax
add eax, 0xe8537d0e
xor eax, 0xf1f4a15a
rol eax, 0x64
popf
jmp 0x1401eb803
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401ec996
push rax
pushf
mov eax, 0xe40b78bf
pushf
not eax
add eax, 0xc46a77f2
xor eax, 0x89e2f129
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xfda8ae6b
xor eax, 0xb339aae5
rol eax, 0x84
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x2765d90d
pushf
not eax
add eax, 0xa7c13370
xor eax, 0xf4f9ae0d
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x933ddc30
xor eax, 0xdb838ab8
rol eax, 0x81
popf
jmp 0x1401eb803
call fcn.1401eb76d
push rax
pushf
mov eax, 0x514ef2be
pushf
not eax
add eax, 0xd6e1461a
xor eax, 0xb1fbabad
rol eax, 0x43
popf
pushf
not eax
add eax, 0xd7022e03
xor eax, 0xd1fc042c
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xf77bb8f6
xor eax, 0xdc33afc6
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc9f39d5e
xor eax, 0xd00e1839
rol eax, 0x23
popf
jmp 0x1401eb803
mov eax, esi
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.14027ae25
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1401c2053
int3
call fcn.1401c2053
nop
push rax
pushf
mov eax, 0xa041f8dc
pushf
not eax
add eax, 0xa3212105
xor eax, 0xf0e2f946
rol eax, 0x71
popf
pushf
not eax
add eax, 0xb39a2ea5
xor eax, 0x898c8cdf
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb3d3dd08
xor eax, 0x97f97be4
rol eax, 0x3b
popf
jmp 0x1401eb803
call fcn.1401c2053
nop
push rax
pushf
mov eax, 0xefece304
pushf
not eax
add eax, 0xd7fbddb3
xor eax, 0x83e5c13f
rol eax, 0x16
popf
pushf
not eax
add eax, 0xd3efd425
xor eax, 0xe814d956
rol eax, 0x4a
popf
jmp 0x1401eb803
test al, 4
je 0x1401ecbb1
push rax
pushf
mov eax, 0xd6996a49
pushf
not eax
add eax, 0x9063cb3f
xor eax, 0xc8f4a2f7
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf768b6b7
xor eax, 0xacc21e9a
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xae70a2b4
xor eax, 0xc0766fac
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x91c4d4e2
xor eax, 0xcdad95cb
rol eax, 0xb9
popf
jmp 0x1401eb803
push rax
pushf
mov eax, 0x5d9efcf9
pushf
not eax
add eax, 0x81741d02
xor eax, 0x839be7ad
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xbf2ede4f
xor eax, 0xab7cf4f6
rol eax, 0x81
popf
jmp 0x1401eb803
lea rbx, [0x1a67b35cf]
pushf
sub rbx, 0x66736a17
popf
jmp 0x1401eccd6
test dl, al
lea rbx, [0x197392cf3]
pushf
sub rbx, 0x57316123
popf
lea rax, [0x1a79e5223]
pushf
sub rax, 0x6796863b
popf
cmove rbx, rax
push rax
pushf
mov eax, 0x4c5e3bdc
pushf
not eax
add eax, 0xa3ce69da
xor eax, 0xc6e9dca5
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xfcdcfb3d
xor eax, 0xf9af9743
rol eax, 0x66
popf
pushf
not eax
add eax, 0xff1d6d2b
xor eax, 0xb50a079a
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xe28c3c41
xor eax, 0x98d2357e
rol eax, 0x10
popf
jmp 0x1401eb803
mov edx, 0x9da07aec
pushf
not edx
add edx, 0xaa5e84dd
xor edx, 0xe930905a
rol edx, 0x6c
popf
pushf
not edx
add edx, 0x8101f59f
xor edx, 0x97e74746
rol edx, 0xc9
popf
lea rcx, [rsp + 0x30]
call fcn.14014d78f
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.14026b8d3
lea rdx, [0x1967ed54c]
pushf
sub rdx, 0x566ec564
popf
lea rcx, [rsp + 0x50]
call fcn.14028aacd
int3