Function at 0x1400f42e2
Capabilities:
Authenticate hmac
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x9360e79c
pushf
not eax
add eax, 0x8f065410
xor eax, 0xfc804247
rol eax, 0x74
popf
pushf
not eax
add eax, 0xda517d3c
xor eax, 0xf7110ae9
rol eax, 0xd
popf
cmp eax, 0x29
jne 0x1400f431f
popf
pop rax
jmp 0x1400f5a07
cmp eax, 0
jne 0x1400f432e
popf
pop rax
jmp 0x1400f461c
cmp eax, 3
jne 0x1400f433d
popf
pop rax
jmp 0x1400f4807
cmp eax, 1
jne 0x1400f434c
popf
pop rax
jmp 0x1400f46d3
cmp eax, 0xd
jne 0x1400f435b
popf
pop rax
jmp 0x1400f4da9
cmp eax, 0x1a
jne 0x1400f436a
popf
pop rax
jmp 0x1400f53d3
cmp eax, 0xe
jne 0x1400f4379
popf
pop rax
jmp 0x1400f4e51
cmp eax, 0x31
jne 0x1400f4388
popf
pop rax
jmp 0x1400f5e36
cmp eax, 0x19
jne 0x1400f4397
popf
pop rax
jmp 0x1400f5397
cmp eax, 8
jne 0x1400f43a6
popf
pop rax
jmp 0x1400f4ae8
cmp eax, 0x2a
jne 0x1400f43b5
popf
pop rax
jmp 0x1400f5a9f
cmp eax, 0x17
jne 0x1400f43c4
popf
pop rax
jmp 0x1400f52dc
cmp eax, 0x1c
jne 0x1400f43d3
popf
pop rax
jmp 0x1400f5459
cmp eax, 0x2e
jne 0x1400f43e2
popf
pop rax
jmp 0x1400f5c63
cmp eax, 0x18
jne 0x1400f43f1
popf
pop rax
jmp 0x1400f535e
cmp eax, 0x2b
jne 0x1400f4400
popf
pop rax
jmp 0x1400f5b32
cmp eax, 0x1b
jne 0x1400f440f
popf
pop rax
jmp 0x1400f540f
cmp eax, 0x2d
jne 0x1400f441e
popf
pop rax
jmp 0x1400f5c0d
cmp eax, 0x23
jne 0x1400f442d
popf
pop rax
jmp 0x1400f57b1
cmp eax, 0x25
jne 0x1400f443c
popf
pop rax
jmp 0x1400f5858
cmp eax, 0x32
jne 0x1400f444b
popf
pop rax
jmp 0x1400f5e70
cmp eax, 0x13
jne 0x1400f445a
popf
pop rax
jmp 0x1400f50df
cmp eax, 0x33
jne 0x1400f4469
popf
pop rax
jmp 0x1400f5eb8
cmp eax, 0x24
jne 0x1400f4478
popf
pop rax
jmp 0x1400f580e
cmp eax, 0x1e
jne 0x1400f4487
popf
pop rax
jmp 0x1400f5503
cmp eax, 0xc
jne 0x1400f4496
popf
pop rax
jmp 0x1400f4d0e
cmp eax, 0x26
jne 0x1400f44a5
popf
pop rax
jmp 0x1400f58fa
cmp eax, 0x27
jne 0x1400f44b4
popf
pop rax
jmp 0x1400f595c
cmp eax, 0x30
jne 0x1400f44c3
popf
pop rax
jmp 0x1400f5dc5
cmp eax, 0x10
jne 0x1400f44d2
popf
pop rax
jmp 0x1400f4f3f
cmp eax, 0x2c
jne 0x1400f44e1
popf
pop rax
jmp 0x1400f5bc3
cmp eax, 9
jne 0x1400f44f0
popf
pop rax
jmp 0x1400f4b5d
cmp eax, 4
jne 0x1400f44ff
popf
pop rax
jmp 0x1400f48a6
cmp eax, 0x16
jne 0x1400f450e
popf
pop rax
jmp 0x1400f529f
cmp eax, 0x28
jne 0x1400f451d
popf
pop rax
jmp 0x1400f59af
cmp eax, 0xa
jne 0x1400f452c
popf
pop rax
jmp 0x1400f4c15
cmp eax, 0x22
jne 0x1400f453b
popf
pop rax
jmp 0x1400f5754
cmp eax, 0x14
jne 0x1400f454a
popf
pop rax
jmp 0x1400f5171
cmp eax, 7
jne 0x1400f4559
popf
pop rax
jmp 0x1400f4a36
cmp eax, 5
jne 0x1400f4568
popf
pop rax
jmp 0x1400f493b
cmp eax, 2
jne 0x1400f4577
popf
pop rax
jmp 0x1400f478a
cmp eax, 0x20
jne 0x1400f4586
popf
pop rax
jmp 0x1400f561b
cmp eax, 0x1d
jne 0x1400f4595
popf
pop rax
jmp 0x1400f54ab
cmp eax, 0x11
jne 0x1400f45a4
popf
pop rax
jmp 0x1400f4ff9
cmp eax, 6
jne 0x1400f45b3
popf
pop rax
jmp 0x1400f49f5
cmp eax, 0x2f
jne 0x1400f45c2
popf
pop rax
jmp 0x1400f5d21
cmp eax, 0x12
jne 0x1400f45d1
popf
pop rax
jmp 0x1400f5095
cmp eax, 0x21
jne 0x1400f45e0
popf
pop rax
jmp 0x1400f56bf
cmp eax, 0x1f
jne 0x1400f45ef
popf
pop rax
jmp 0x1400f559a
cmp eax, 0xb
jne 0x1400f45fe
popf
pop rax
jmp 0x1400f4c62
cmp eax, 0xf
jne 0x1400f460d
popf
pop rax
jmp 0x1400f4ec3
cmp eax, 0x15
jne 0x1400f461c
popf
pop rax
jmp 0x1400f521e
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x1400f467a
push rax
pushf
mov eax, 0xebc1d1ab
pushf
not eax
add eax, 0x8fadf730
xor eax, 0xfb4f4daa
rol eax, 2
popf
pushf
not eax
add eax, 0xf742505f
xor eax, 0x94b4aba5
rol eax, 0x56
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x454764e
pushf
not eax
add eax, 0xc7aa45ee
xor eax, 0x87b1a95f
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xb6c01b04
xor eax, 0xf7f88c50
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x8d59bbe1
xor eax, 0xa20e669e
rol eax, 0x59
popf
pushf
not eax
add eax, 0xf928158b
xor eax, 0x85e23f7f
rol eax, 0xe6
popf
jmp 0x1400f4310
test rdx, rdx
jne 0x1400f4731
push rax
pushf
mov eax, 0xe7717576
pushf
not eax
add eax, 0x82c3abf4
xor eax, 0xa118ab56
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xe56fe3c5
xor eax, 0xb50434ee
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xb79e6bce
xor eax, 0xf71309a0
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xec824663
xor eax, 0xfad1bbd7
rol eax, 0x76
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x2b74adbb
pushf
not eax
add eax, 0xc037b218
xor eax, 0xe85f2a42
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xf29ef54b
xor eax, 0x8d1835e4
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xbc69b7e2
xor eax, 0x95fe73e8
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xe8673831
xor eax, 0xa1ea6b4d
rol eax, 0x60
popf
jmp 0x1400f4310
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140114c44
or eax, 0xffffffff
jmp 0x1400f5eb8
mov rax, r15
lea rcx, [0x1b5763c12]
pushf
sub rcx, 0x75709492
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x1400f4873
push rax
pushf
mov eax, 0xc0d2ac45
pushf
not eax
add eax, 0xcbaaf898
xor eax, 0xe8166cd9
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xe6f1da12
xor eax, 0xb766a18b
rol eax, 0x60
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xea8d1c3f
pushf
not eax
add eax, 0xebb5a123
xor eax, 0x9c6aacde
rol eax, 0x96
popf
pushf
not eax
add eax, 0xe4361663
xor eax, 0x84cec5d8
rol eax, 0x84
popf
jmp 0x1400f4310
mov eax, r14d
not eax
test al, 1
je 0x1400f48f5
push rax
pushf
mov eax, 0xd38061db
pushf
not eax
add eax, 0xbbc0d012
xor eax, 0xd8c0b47c
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x910b8d2e
xor eax, 0xbaf123aa
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xaeffb307
xor eax, 0xff31321e
rol eax, 0xaa
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x7d81fc9c
pushf
not eax
add eax, 0xe2dd7265
xor eax, 0xbece2fe1
rol eax, 0x10
popf
pushf
not eax
add eax, 0x9ffe8bd6
xor eax, 0xba62c044
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xd25ee55b
xor eax, 0x927149d9
rol eax, 0x3a
popf
jmp 0x1400f4310
test byte [rcx + r13*8 + 0x38], 0x20
je 0x1400f499c
push rax
pushf
mov eax, 0xea7c1d62
pushf
not eax
add eax, 0xe7b563ae
xor eax, 0x9712fae3
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x88d69cf5
xor eax, 0xca87c9f1
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xb35fccc0
xor eax, 0xd1a459da
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xa7cb49fe
xor eax, 0xdc495d7f
rol eax, 0x69
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x1df1c6e2
pushf
not eax
add eax, 0xbbb84222
xor eax, 0x9c75f3e0
rol eax, 0x66
popf
pushf
not eax
add eax, 0xdb47a564
xor eax, 0xf6b9c2cb
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xcc90d6b0
xor eax, 0xf79a66f4
rol eax, 0x80
popf
pushf
not eax
add eax, 0xf1bf6a5a
xor eax, 0xc8d78c6c
rol eax, 0xa0
popf
jmp 0x1400f4310
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.140149873
push rax
pushf
mov eax, 0x7323bc9a
pushf
not eax
add eax, 0xe4dbef7a
xor eax, 0xd65e621b
rol eax, 0x28
popf
pushf
not eax
add eax, 0xb998d3ac
xor eax, 0xd3480804
rol eax, 0x38
popf
jmp 0x1400f4310
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.1400a5551
lea rdx, [0x18498ce89]
pushf
sub rdx, 0x44932709
popf
test eax, eax
je 0x1400f4a8f
push rax
pushf
mov eax, 0x18f45d26
pushf
not eax
add eax, 0x9052bc87
xor eax, 0xbe8c8a1b
rol eax, 0x45
popf
pushf
not eax
add eax, 0xd78427a3
xor eax, 0x9d297839
rol eax, 0x7f
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xff335c29
pushf
not eax
add eax, 0xeafd75be
xor eax, 0xf129f7d0
rol eax, 3
popf
pushf
not eax
add eax, 0x8f61d7be
xor eax, 0xc00afbde
rol eax, 0x19
popf
pushf
not eax
add eax, 0xfaf00e61
xor eax, 0xb9e49e86
rol eax, 0x48
popf
pushf
not eax
add eax, 0xa85bdc31
xor eax, 0x8bf83966
rol eax, 0x2a
popf
jmp 0x1400f4310
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x1400f4b2a
push rax
pushf
mov eax, 0x907c2153
pushf
not eax
add eax, 0x864fd69b
xor eax, 0x950694a8
rol eax, 0x21
popf
pushf
not eax
add eax, 0xa60e0284
xor eax, 0xe4673ea5
rol eax, 0x11
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xa72f03
pushf
not eax
add eax, 0xaee47198
xor eax, 0x9631bf82
rol eax, 0xba
popf
pushf
not eax
add eax, 0xfb998970
xor eax, 0xa2b9549b
rol eax, 0xdc
popf
jmp 0x1400f4310
cmp byte [rbx + 0x28], dil
jne 0x1400f4bbc
push rax
pushf
mov eax, 0x78b63379
pushf
not eax
add eax, 0xabefa77c
xor eax, 0xad9b5bad
rol eax, 0x24
popf
pushf
not eax
add eax, 0xbbad7470
xor eax, 0xce24b194
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc9362d20
xor eax, 0xff85c8f1
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x8c70801a
xor eax, 0x8d931a3a
rol eax, 0x36
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xa4938397
pushf
not eax
add eax, 0xd5450891
xor eax, 0xb9b85d5e
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xc9882524
xor eax, 0xd8662542
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xf8d53e75
xor eax, 0x924abf03
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xd6f7fc24
xor eax, 0xd34bd1d2
rol eax, 0x45
popf
jmp 0x1400f4310
mov rcx, rbx
call fcn.140168ec0
lea rdx, [0x1ac5e9f19]
pushf
sub rdx, 0x6c58f799
popf
push rax
pushf
mov eax, 0xbaf477d3
pushf
not eax
add eax, 0xe9e20b5b
xor eax, 0xe17d0506
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xfeaa972f
xor eax, 0xf542ca35
rol eax, 0xb4
popf
jmp 0x1400f4310
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x1400f4cb5
push rax
pushf
mov eax, 0x9f01b5f7
pushf
not eax
add eax, 0xdcc82344
xor eax, 0xc220b2ed
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x82eb644c
xor eax, 0xa333e14e
rol eax, 0x92
popf
pushf
not eax
add eax, 0xae8df08a
xor eax, 0xfa89d976
rol eax, 0x65
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x1beda512
pushf
not eax
add eax, 0xe9b042fb
xor eax, 0x82661496
rol eax, 9
popf
pushf
not eax
add eax, 0x8a3f6f68
xor eax, 0x91c3f0bf
rol eax, 0x61
popf
pushf
not eax
add eax, 0xa1e55274
xor eax, 0xfe1f05c3
rol eax, 0xc7
popf
pushf
not eax
add eax, 0x90ae27fb
xor eax, 0x840a37fb
rol eax, 0x16
popf
jmp 0x1400f4310
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x1400f4d63
push rax
pushf
mov eax, 0x8d935e83
pushf
not eax
add eax, 0xc03fcbc0
xor eax, 0xcbfdef20
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x8c8849ac
xor eax, 0xfeee585b
rol eax, 0xac
popf
pushf
not eax
add eax, 0xea13f6ed
xor eax, 0x96500f3d
rol eax, 4
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xfd07240
pushf
not eax
add eax, 0xb7031b20
xor eax, 0x9a993178
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xe7d685e5
xor eax, 0xf16fd1a7
rol eax, 8
popf
pushf
not eax
add eax, 0xf1de8d69
xor eax, 0xb1441ea9
rol eax, 0xf5
popf
jmp 0x1400f4310
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x1400f4db7
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1400f4df8
push rax
pushf
mov eax, 0x52fd9047
pushf
not eax
add eax, 0x8f1194cd
xor eax, 0x8beb12af
rol eax, 0x68
popf
pushf
not eax
add eax, 0x886fc043
xor eax, 0xb159958b
rol eax, 0x86
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x2f4e4389
pushf
not eax
add eax, 0xbfd96e6c
xor eax, 0xc8523a07
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc855a1b4
xor eax, 0xfb47387f
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xb7145d9c
xor eax, 0x9c27c6e4
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xa7a4e4ce
xor eax, 0x9e8abca8
rol eax, 0x4e
popf
jmp 0x1400f4310
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x1400f4e90
push rax
pushf
mov eax, 0x576644bb
pushf
not eax
add eax, 0xc89d804b
xor eax, 0xa4713a05
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xa52a03cf
xor eax, 0x82f9f778
rol eax, 0x45
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xe11bf853
pushf
not eax
add eax, 0x83258977
xor eax, 0xa21b9773
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa3785534
xor eax, 0xe3135531
rol eax, 3
popf
jmp 0x1400f4310
sub ecx, 1
je 0x1400f4f0d
push rax
pushf
mov eax, 0x75c543e0
pushf
not eax
add eax, 0xfaa9ec0b
xor eax, 0xb367a08a
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xf3c7c77a
xor eax, 0x89fd69dd
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xb72eedfa
xor eax, 0xe0fec4b2
rol eax, 1
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x44555100
pushf
not eax
add eax, 0xfe5144e7
xor eax, 0xbe9e68e1
rol eax, 1
popf
pushf
not eax
add eax, 0x9caaea78
xor eax, 0x8d57b469
rol eax, 0xed
popf
jmp 0x1400f4310
cmp ecx, 1
jne 0x1400f4fa0
push rax
pushf
mov eax, 0xb2a094af
pushf
not eax
add eax, 0xe6f4d958
xor eax, 0xea4b6efb
rol eax, 1
popf
pushf
not eax
add eax, 0xc0da63dd
xor eax, 0xfb029a81
rol eax, 0xa
popf
pushf
not eax
add eax, 0xdaf90d08
xor eax, 0xce6631d4
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x9d8e1406
xor eax, 0xb01f73bf
rol eax, 0x71
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xe6e84fb6
pushf
not eax
add eax, 0xf1a18824
xor eax, 0x89bcb54f
rol eax, 0x65
popf
pushf
not eax
add eax, 0x8a50dd94
xor eax, 0xfbfcf50c
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xe14531cb
xor eax, 0xbf53e5ba
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xd2091e3f
xor eax, 0xc47e8a38
rol eax, 0x73
popf
jmp 0x1400f4310
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x1400f5062
push rax
pushf
mov eax, 0xb0adb948
pushf
not eax
add eax, 0x8d21d365
xor eax, 0xedbf0812
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xfd9f4266
xor eax, 0xc79c57d9
rol eax, 0x30
popf
pushf
not eax
add eax, 0x8c6c3c58
xor eax, 0xc1584a7a
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xabd1992b
xor eax, 0xb50dd37d
rol eax, 0x6c
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xcf30440e
pushf
not eax
add eax, 0xc9929b55
xor eax, 0xe2e44d84
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xceb5a4a9
xor eax, 0xf2538c3d
rol eax, 0xc7
popf
jmp 0x1400f4310
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0x85a80344
pushf
not eax
add eax, 0x877ff012
xor eax, 0x86b88775
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xa96e387d
xor eax, 0xc8ad8878
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x9a0bb343
xor eax, 0xcbf8dcf5
rol eax, 0x4c
popf
jmp 0x1400f4310
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.1401cccaa
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x1400f513e
push rax
pushf
mov eax, 0xb826adbd
pushf
not eax
add eax, 0x8a2195ae
xor eax, 0xd4b80d92
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x94c8fdcc
xor eax, 0xf60ae66d
rol eax, 0x34
popf
pushf
not eax
add eax, 0x98ca7f16
xor eax, 0xca20b361
rol eax, 0x2c
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xf272e10a
pushf
not eax
add eax, 0xde7d799b
xor eax, 0xd39fa685
rol eax, 0x26
popf
pushf
not eax
add eax, 0x89d099cc
xor eax, 0xe481147a
rol eax, 0x82
popf
jmp 0x1400f4310
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x1400f51c5
push rax
pushf
mov eax, 0xfc2612f4
pushf
not eax
add eax, 0x9c963191
xor eax, 0xb56690ca
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xd6500d65
xor eax, 0xbaee5e6a
rol eax, 0x82
popf
pushf
not eax
add eax, 0xf5ed8673
xor eax, 0xfc413690
rol eax, 0x9a
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x38e90f47
pushf
not eax
add eax, 0x90f20dcd
xor eax, 0xc460f592
rol eax, 0xab
popf
pushf
not eax
add eax, 0x9db36853
xor eax, 0xae308c12
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xb1f7b86b
xor eax, 0xde8303f4
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xfd9e2329
xor eax, 0xe32a7cbc
rol eax, 0xb3
popf
jmp 0x1400f4310
mov ecx, 0x68083436
pushf
not ecx
add ecx, 0x8717fecf
xor ecx, 0xb3dd7f59
rol ecx, 0xb2
popf
pushf
not ecx
add ecx, 0xfb64ec8e
xor ecx, 0xba44dccc
rol ecx, 0xc7
popf
pushf
not ecx
add ecx, 0xe7920369
xor ecx, 0xda19bb99
rol ecx, 0x31
popf
call fcn.1401cccaa
mov ecx, 0x8cd8586d
pushf
not ecx
add ecx, 0xd7b450db
xor ecx, 0xafa69a8c
rol ecx, 0x5f
popf
pushf
not ecx
add ecx, 0x96ed8b1d
xor ecx, 0xa42eedac
rol ecx, 0x36
popf
cmp ax, cx
jne 0x1400f5397
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x1400f52a7
inc edi
push rax
pushf
mov eax, 0x6aecfed0
pushf
not eax
add eax, 0xd83ff327
xor eax, 0xaaa0dabf
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xf387cb5e
xor eax, 0x8f29f7c5
rol eax, 0xe1
popf
jmp 0x1400f4310
add r15, 2
cmp r15, r12
jae 0x1400f532b
push rax
pushf
mov eax, 0x7295910c
pushf
not eax
add eax, 0xc826bc0b
xor eax, 0xa843e7f7
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x98e13b53
xor eax, 0x80e58112
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x9e41a14f
xor eax, 0xa3c45ab5
rol eax, 0x6d
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xd01232c3
pushf
not eax
add eax, 0xdbdef807
xor eax, 0xb7931359
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xf99b0b5b
xor eax, 0xdd9eab84
rol eax, 0x6b
popf
jmp 0x1400f4310
jmp 0x1400f50df
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x15008cd4
pushf
not eax
add eax, 0x9932b064
xor eax, 0xcf40f3e6
rol eax, 0x91
popf
pushf
not eax
add eax, 0xc3847ba7
xor eax, 0xa2b1e4c7
rol eax, 0x62
popf
jmp 0x1400f4310
mov r12, qword [rbp - 0x18]
jmp 0x1400f595f
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.14002ff8c
push rax
pushf
mov eax, 0x7f4da9a
pushf
not eax
add eax, 0xf3a250ac
xor eax, 0xc5aae9bf
rol eax, 0x44
popf
pushf
not eax
add eax, 0xbbc4f384
xor eax, 0xdb4af899
rol eax, 0xbf
popf
jmp 0x1400f4310
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1400f5964
lea rdx, [0x19a7161dc]
pushf
sub rdx, 0x5a6bba5c
popf
push rax
pushf
mov eax, 0x66675437
pushf
not eax
add eax, 0xedb7209c
xor eax, 0xa107112f
rol eax, 0x14
popf
pushf
not eax
add eax, 0xc3e11e70
xor eax, 0xc82ff0fa
rol eax, 0xc
popf
pushf
not eax
add eax, 0xd4501d1f
xor eax, 0xbf829aae
rol eax, 0x4f
popf
jmp 0x1400f4310
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x1400f5567
push rax
pushf
mov eax, 0x4820df9f
pushf
not eax
add eax, 0xeece4f03
xor eax, 0xbbb10c74
rol eax, 0x95
popf
pushf
not eax
add eax, 0xeba274d0
xor eax, 0x91e96ae1
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc6801d37
xor eax, 0x9a8ea235
rol eax, 0x46
popf
pushf
not eax
add eax, 0xe02a85fb
xor eax, 0xf6761dad
rol eax, 0x31
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x6bd7cb0c
pushf
not eax
add eax, 0xab64be6e
xor eax, 0x90348028
rol eax, 0x66
popf
pushf
not eax
add eax, 0x965515e7
xor eax, 0xaa68437b
rol eax, 0x4c
popf
jmp 0x1400f4310
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x1400f55e8
push rax
pushf
mov eax, 0x957d9860
pushf
not eax
add eax, 0xe8db8192
xor eax, 0xea2a6a5f
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x8a4ff800
xor eax, 0xa983dea3
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xf8fb3a62
xor eax, 0xdf7f2cea
rol eax, 0x3e
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xa737b973
pushf
not eax
add eax, 0xd2c583e8
xor eax, 0xd8b7233c
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xd8967b85
xor eax, 0xfef157b8
rol eax, 9
popf
jmp 0x1400f4310
sub ecx, 1
je 0x1400f5679
push rax
pushf
mov eax, 0x474e8303
pushf
not eax
add eax, 0xe643c958
xor eax, 0xff503a18
rol eax, 0x34
popf
pushf
not eax
add eax, 0xe350e603
xor eax, 0x94ebd560
rol eax, 0x61
popf
pushf
not eax
add eax, 0x8a1a7785
xor eax, 0xca0e1d7c
rol eax, 0x65
popf
pushf
not eax
add eax, 0xc3bfb516
xor eax, 0xdaeb22de
rol eax, 0xec
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x58219628
pushf
not eax
add eax, 0xc3c6f77a
xor eax, 0xaba8d7be
rol eax, 0x55
popf
pushf
not eax
add eax, 0xd5c3797f
xor eax, 0x92a9d795
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xe551540f
xor eax, 0x8bdbabf7
rol eax, 0x30
popf
jmp 0x1400f4310
cmp ecx, 1
jne 0x1400f5721
push rax
pushf
mov eax, 0x58ec8100
pushf
not eax
add eax, 0xce428ebe
xor eax, 0xdf77dea7
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x8be60072
xor eax, 0x95e608f9
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xb69a0397
xor eax, 0xaf5fed70
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xefe435e8
xor eax, 0xc6543f3d
rol eax, 8
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xda5a6295
pushf
not eax
add eax, 0xe01ac063
xor eax, 0xd4861179
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xe9f55263
xor eax, 0xc9522c09
rol eax, 0x25
popf
jmp 0x1400f4310
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1400e6bd3
jmp 0x1400f5459
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140161044
jmp 0x1400f5459
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1400adcc1
jmp 0x1400f5459
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x1400f5876
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400f58b3
push rax
pushf
mov eax, 0x89a3de51
pushf
not eax
add eax, 0xa1598aa0
xor eax, 0xf52f4e52
rol eax, 0x31
popf
pushf
not eax
add eax, 0xc22bfc75
xor eax, 0xfdf237a7
rol eax, 0x9e
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x79996f41
pushf
not eax
add eax, 0xb1aeea8a
xor eax, 0x9ed0f757
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xb94f09be
xor eax, 0xad81b64a
rol eax, 0xba
popf
pushf
not eax
add eax, 0xaeacbde3
xor eax, 0xa84ff4ca
rol eax, 0x65
popf
jmp 0x1400f4310
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x4357de7
pushf
not eax
add eax, 0xcc74f7e3
xor eax, 0xeac1715b
rol eax, 0x59
popf
pushf
not eax
add eax, 0xe3df5879
xor eax, 0xa87b9504
rol eax, 0x58
popf
pushf
not eax
add eax, 0xc03d0ea9
xor eax, 0x8a90c04c
rol eax, 0xac
popf
pushf
not eax
add eax, 0xa0c05026
xor eax, 0x86e712ab
rol eax, 0xcb
popf
jmp 0x1400f4310
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0xc76edf09
pushf
not eax
add eax, 0xe5c369ae
xor eax, 0xf8dbba4f
rol eax, 0x19
popf
pushf
not eax
add eax, 0xd9a4a20a
xor eax, 0xd7f58f12
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xf43b2a7d
xor eax, 0xc585a379
rol eax, 0xdc
popf
jmp 0x1400f4310
lea rdx, [0x1b195ae8d]
pushf
sub rdx, 0x7190070d
popf
push rax
pushf
mov eax, 0x3c25fc8
pushf
not eax
add eax, 0xa08c49aa
xor eax, 0xc6e427f1
rol eax, 0x65
popf
pushf
not eax
add eax, 0x8fe9f2d6
xor eax, 0xddeb5e50
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x86c01019
xor eax, 0xb2007ca4
rol eax, 0xb5
popf
jmp 0x1400f4310
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x1400f5a59
push rax
pushf
mov eax, 0xa0d2858d
pushf
not eax
add eax, 0xcc893617
xor eax, 0x89c92d94
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x98ae7e61
xor eax, 0xfb515b6a
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xef2f9b83
xor eax, 0xed6430b9
rol eax, 0xd7
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x11f0eb2
pushf
not eax
add eax, 0x876417de
xor eax, 0x989b9609
rol eax, 0xe
popf
pushf
not eax
add eax, 0xffbb2f99
xor eax, 0x86f5e7d1
rol eax, 0x55
popf
pushf
not eax
add eax, 0xd98c7a38
xor eax, 0xf3725949
rol eax, 3
popf
jmp 0x1400f4310
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x1400f5aff
push rax
pushf
mov eax, 0x5ea9d9e
pushf
not eax
add eax, 0xf550cd24
xor eax, 0xe95af159
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xe372c1c5
xor eax, 0xf836a138
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xfda7d34e
xor eax, 0xed01cbca
rol eax, 0x27
popf
pushf
not eax
add eax, 0xaf720517
xor eax, 0xccd5ff26
rol eax, 0x97
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x9c435a56
pushf
not eax
add eax, 0x9099198b
xor eax, 0xea1983e5
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa7cb5115
xor eax, 0xb4866fe4
rol eax, 0xf6
popf
jmp 0x1400f4310
cmp eax, 5
jne 0x1400f5b6a
push rax
pushf
mov eax, 0xd5363139
pushf
not eax
add eax, 0xea22d17e
xor eax, 0xe2418826
rol eax, 7
popf
pushf
not eax
add eax, 0xdb3ae7cb
xor eax, 0x84feb64f
rol eax, 0x8f
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x8eb3a27d
pushf
not eax
add eax, 0xd757568c
xor eax, 0xf4876260
rol eax, 0x95
popf
pushf
not eax
add eax, 0xcc4b29b0
xor eax, 0x8e0f1bd9
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xd0f981db
xor eax, 0x9141d236
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xc4d13273
xor eax, 0x96590b37
rol eax, 0x33
popf
jmp 0x1400f4310
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x1400f47b9
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.140117324
jmp 0x1400f47b9
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x1400f5cc8
push rax
pushf
mov eax, 0xd02165d0
pushf
not eax
add eax, 0xde47251a
xor eax, 0xcf48385c
rol eax, 0x23
popf
pushf
not eax
add eax, 0xa5f96e0a
xor eax, 0x8f6b9545
rol eax, 0x83
popf
pushf
not eax
add eax, 0xd784b5a7
xor eax, 0xa3f591b9
rol eax, 0xe2
popf
pushf
not eax
add eax, 0xd4b9e73d
xor eax, 0xa5d1500e
rol eax, 0x7c
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0xd76aeb95
pushf
not eax
add eax, 0x87011856
xor eax, 0xb235ed77
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xbcf94ac3
xor eax, 0xabf408c2
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xb42c4bfc
xor eax, 0xc2bc63b7
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x9fd3f362
xor eax, 0xfd5cf7ef
rol eax, 0x99
popf
jmp 0x1400f4310
cmp byte [rsi], 0x1a
je 0x1400f5d7f
push rax
pushf
mov eax, 0x75ce0d27
pushf
not eax
add eax, 0xa84bd700
xor eax, 0x9f870a25
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xae20cd37
xor eax, 0xdb11920b
rol eax, 0x36
popf
pushf
not eax
add eax, 0xe29acd79
xor eax, 0xd3e41a3a
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xc37bb903
xor eax, 0x83762a76
rol eax, 0xbd
popf
jmp 0x1400f4310
push rax
pushf
mov eax, 0x9d92b740
pushf
not eax
add eax, 0xb2a27e4c
xor eax, 0xa635f718
rol eax, 0x38
popf
pushf
not eax
add eax, 0xb7a06f2e
xor eax, 0xbc1af662
rol eax, 0x29
popf
pushf
not eax
add eax, 0xb52a7ac9
xor eax, 0xc5a5f489
rol eax, 0x76
popf
jmp 0x1400f4310
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x1400f47b9
mov eax, dword [rbp - 0x2c]
sub eax, edi
jmp 0x1400f5eb8
xor eax, eax
push rax
pushf
mov eax, 0x53ba8875
pushf
not eax
add eax, 0x81e2e68f
xor eax, 0xbd0d416d
rol eax, 6
popf
pushf
not eax
add eax, 0xcbfe329d
xor eax, 0xb1f72bf4
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xcc235b66
xor eax, 0x9c37c4fd
rol eax, 0x6f
popf
jmp 0x1400f4310
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret