Function at 0x140268e5e
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xc2d6fbc2
pushf
not eax
add eax, 0x8feb0899
xor eax, 0xc6171789
rol eax, 0xe
popf
pushf
not eax
add eax, 0x970900d8
xor eax, 0xd0313e17
rol eax, 0xba
popf
cmp eax, 0x29
jne 0x140268e9b
popf
pop rax
jmp 0x14026a5f8
cmp eax, 0
jne 0x140268eaa
popf
pop rax
jmp 0x140269198
cmp eax, 3
jne 0x140268eb9
popf
pop rax
jmp 0x140269383
cmp eax, 1
jne 0x140268ec8
popf
pop rax
jmp 0x140269262
cmp eax, 0xd
jne 0x140268ed7
popf
pop rax
jmp 0x14026995e
cmp eax, 0x1a
jne 0x140268ee6
popf
pop rax
jmp 0x140269fc4
cmp eax, 0xe
jne 0x140268ef5
popf
pop rax
jmp 0x140269a19
cmp eax, 0x31
jne 0x140268f04
popf
pop rax
jmp 0x14026aa14
cmp eax, 0x19
jne 0x140268f13
popf
pop rax
jmp 0x140269f62
cmp eax, 8
jne 0x140268f22
popf
pop rax
jmp 0x14026968a
cmp eax, 0x2a
jne 0x140268f31
popf
pop rax
jmp 0x14026a6b6
cmp eax, 0x17
jne 0x140268f40
popf
pop rax
jmp 0x140269ea7
cmp eax, 0x1c
jne 0x140268f4f
popf
pop rax
jmp 0x14026a05d
cmp eax, 0x2e
jne 0x140268f5e
popf
pop rax
jmp 0x14026a88d
cmp eax, 0x18
jne 0x140268f6d
popf
pop rax
jmp 0x140269f29
cmp eax, 0x2b
jne 0x140268f7c
popf
pop rax
jmp 0x14026a75c
cmp eax, 0x1b
jne 0x140268f8b
popf
pop rax
jmp 0x14026a000
cmp eax, 0x2d
jne 0x140268f9a
popf
pop rax
jmp 0x14026a837
cmp eax, 0x23
jne 0x140268fa9
popf
pop rax
jmp 0x14026a3c8
cmp eax, 0x25
jne 0x140268fb8
popf
pop rax
jmp 0x14026a45c
cmp eax, 0x32
jne 0x140268fc7
popf
pop rax
jmp 0x14026aa51
cmp eax, 0x13
jne 0x140268fd6
popf
pop rax
jmp 0x140269c71
cmp eax, 0x33
jne 0x140268fe5
popf
pop rax
jmp 0x14026aaab
cmp eax, 0x24
jne 0x140268ff4
popf
pop rax
jmp 0x14026a412
cmp eax, 0x1e
jne 0x140269003
popf
pop rax
jmp 0x14026a107
cmp eax, 0xc
jne 0x140269012
popf
pop rax
jmp 0x1402698c3
cmp eax, 0x26
jne 0x140269021
popf
pop rax
jmp 0x14026a511
cmp eax, 0x27
jne 0x140269030
popf
pop rax
jmp 0x14026a573
cmp eax, 0x30
jne 0x14026903f
popf
pop rax
jmp 0x14026a9c9
cmp eax, 0x10
jne 0x14026904e
popf
pop rax
jmp 0x140269b2f
cmp eax, 0x2c
jne 0x14026905d
popf
pop rax
jmp 0x14026a7ed
cmp eax, 9
jne 0x14026906c
popf
pop rax
jmp 0x14026974b
cmp eax, 4
jne 0x14026907b
popf
pop rax
jmp 0x140269435
cmp eax, 0x16
jne 0x14026908a
popf
pop rax
jmp 0x140269e44
cmp eax, 0x28
jne 0x140269099
popf
pop rax
jmp 0x14026a5b3
cmp eax, 0xa
jne 0x1402690a8
popf
pop rax
jmp 0x1402697f0
cmp eax, 0x22
jne 0x1402690b7
popf
pop rax
jmp 0x14026a37e
cmp eax, 0x14
jne 0x1402690c6
popf
pop rax
jmp 0x140269d03
cmp eax, 7
jne 0x1402690d5
popf
pop rax
jmp 0x1402695b2
cmp eax, 5
jne 0x1402690e4
popf
pop rax
jmp 0x1402694b7
cmp eax, 2
jne 0x1402690f3
popf
pop rax
jmp 0x1402692f3
cmp eax, 0x20
jne 0x140269102
popf
pop rax
jmp 0x14026a245
cmp eax, 0x1d
jne 0x140269111
popf
pop rax
jmp 0x14026a0c2
cmp eax, 0x11
jne 0x140269120
popf
pop rax
jmp 0x140269bb1
cmp eax, 6
jne 0x14026912f
popf
pop rax
jmp 0x14026954b
cmp eax, 0x2f
jne 0x14026913e
popf
pop rax
jmp 0x14026a94b
cmp eax, 0x12
jne 0x14026914d
popf
pop rax
jmp 0x140269c3a
cmp eax, 0x21
jne 0x14026915c
popf
pop rax
jmp 0x14026a2d6
cmp eax, 0x1f
jne 0x14026916b
popf
pop rax
jmp 0x14026a19e
cmp eax, 0xb
jne 0x14026917a
popf
pop rax
jmp 0x140269850
cmp eax, 0xf
jne 0x140269189
popf
pop rax
jmp 0x140269ab1
cmp eax, 0x15
jne 0x140269198
popf
pop rax
jmp 0x140269dc3
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x14026921c
push rax
pushf
mov eax, 0x109b9654
pushf
not eax
add eax, 0xbea09e75
xor eax, 0xd3b29d0d
rol eax, 0x52
popf
pushf
not eax
add eax, 0xe61a8278
xor eax, 0x95b3be11
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa226cb31
xor eax, 0xbf9b45a4
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xbc01b8a7
xor eax, 0x91a3a220
rol eax, 0xcd
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x98696390
pushf
not eax
add eax, 0xd4678a72
xor eax, 0x9fb21d94
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb2711022
xor eax, 0xc28deaf9
rol eax, 0x89
popf
pushf
not eax
add eax, 0x84cdc201
xor eax, 0xa99d3f45
rol eax, 0x2a
popf
jmp 0x140268e8c
test rdx, rdx
jne 0x14026929a
push rax
pushf
mov eax, 0xac91adb3
pushf
not eax
add eax, 0x8280392e
xor eax, 0xfb4ad017
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x917c7408
xor eax, 0xcae521da
rol eax, 0x65
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x2eb91611
pushf
not eax
add eax, 0xf0d9f4c2
xor eax, 0xca96d4ea
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xf643e87f
xor eax, 0xeb9d8cbe
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xc88ff687
xor eax, 0xe1bfd673
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xf2adc119
xor eax, 0xd32e47c6
rol eax, 0xf9
popf
jmp 0x140268e8c
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.1402828f2
or eax, 0xffffffff
jmp 0x14026aaab
mov rax, r15
lea rcx, [0x189c516af]
pushf
sub rcx, 0x49b2f26f
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x1402693ef
push rax
pushf
mov eax, 0x99b8ad5f
pushf
not eax
add eax, 0xd6a51de6
xor eax, 0xe6c1e4fd
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xe0082722
xor eax, 0xf09f70c0
rol eax, 0xbe
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x73aec445
pushf
not eax
add eax, 0xa19652fd
xor eax, 0xedf00048
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xefc055eb
xor eax, 0xe872bb40
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x995a9648
xor eax, 0xa7cd414e
rol eax, 0x77
popf
jmp 0x140268e8c
mov eax, r14d
not eax
test al, 1
je 0x140269484
push rax
pushf
mov eax, 0xef2ce24c
pushf
not eax
add eax, 0xcf57c571
xor eax, 0xa77cd2af
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x8a767782
xor eax, 0x926ed2ae
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x9114bb2d
xor eax, 0xf777ff8d
rol eax, 0x69
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xefe0ce65
pushf
not eax
add eax, 0xb6ef8422
xor eax, 0xea763fcf
rol eax, 0x31
popf
pushf
not eax
add eax, 0xb99a4f3e
xor eax, 0xa4b3f04c
rol eax, 0xb7
popf
jmp 0x140268e8c
test byte [rcx + r13*8 + 0x38], 0x20
je 0x140269505
push rax
pushf
mov eax, 0x8c1e1c0
pushf
not eax
add eax, 0xf641b9be
xor eax, 0x8139ead7
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xb39d61d8
xor eax, 0xc4aba88b
rol eax, 0x71
popf
pushf
not eax
add eax, 0xd140e1e4
xor eax, 0xa157ed33
rol eax, 0xa
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xed1ba8a9
pushf
not eax
add eax, 0x938b2b5f
xor eax, 0xa3ba6e9c
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x88cb956c
xor eax, 0xaa6e2151
rol eax, 0x37
popf
pushf
not eax
add eax, 0xf9234fa4
xor eax, 0xf65b953b
rol eax, 0x4f
popf
jmp 0x140268e8c
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.14029b648
push rax
pushf
mov eax, 0xcc2d3d86
pushf
not eax
add eax, 0xbca24354
xor eax, 0xe3105bf7
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xf4d2c3eb
xor eax, 0x8b2830c0
rol eax, 0x60
popf
pushf
not eax
add eax, 0xa0b0a8b9
xor eax, 0xe57a5397
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xee5dd2f1
xor eax, 0x919c2db7
rol eax, 0x2e
popf
jmp 0x140268e8c
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.140236b09
lea rdx, [0x19c49af2c]
pushf
sub rdx, 0x5c378aec
popf
test eax, eax
je 0x140269631
push rax
pushf
mov eax, 0xd84df54d
pushf
not eax
add eax, 0x998794ae
xor eax, 0xa92779ec
rol eax, 0x81
popf
pushf
not eax
add eax, 0x867f156d
xor eax, 0xb159f880
rol eax, 7
popf
pushf
not eax
add eax, 0xe0ba46d0
xor eax, 0xefe71938
rol eax, 0xae
popf
pushf
not eax
add eax, 0xa53c2b07
xor eax, 0xf3be7c25
rol eax, 0x94
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x1c1d45e0
pushf
not eax
add eax, 0xedd3f906
xor eax, 0xf10f43e5
rol eax, 0x97
popf
pushf
not eax
add eax, 0xbf1d1b3b
xor eax, 0xab13ce2f
rol eax, 0x32
popf
pushf
not eax
add eax, 0xab63ab8c
xor eax, 0xc55922ce
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xa410a072
xor eax, 0xe3e3ad77
rol eax, 0x21
popf
jmp 0x140268e8c
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x1402696f2
push rax
pushf
mov eax, 0xbe2d1604
pushf
not eax
add eax, 0xe2a587f5
xor eax, 0xa7d033a9
rol eax, 0x72
popf
pushf
not eax
add eax, 0xabf66f2b
xor eax, 0xba140ab9
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xc454031c
xor eax, 0xc007ebcb
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xb367dbf6
xor eax, 0x9dc16ae1
rol eax, 0xdc
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xe9b97f09
pushf
not eax
add eax, 0x808cddd8
xor eax, 0x96f616b5
rol eax, 0x41
popf
pushf
not eax
add eax, 0xfcf03823
xor eax, 0xe58dd528
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x87c7a076
xor eax, 0x8a4cbd93
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xdf76eb66
xor eax, 0x834875cf
rol eax, 0x76
popf
jmp 0x140268e8c
cmp byte [rbx + 0x28], dil
jne 0x140269797
push rax
pushf
mov eax, 0xc18226e4
pushf
not eax
add eax, 0xb8174ad5
xor eax, 0x80315ec2
rol eax, 0x24
popf
pushf
not eax
add eax, 0xb5b375f8
xor eax, 0xed6b5dc8
rol eax, 0x45
popf
pushf
not eax
add eax, 0x9e1995fb
xor eax, 0xddd1b2e6
rol eax, 0x2e
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x2ec6b457
pushf
not eax
add eax, 0xdba82338
xor eax, 0xb76164d4
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x93aef8d5
xor eax, 0xd13c1538
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xf073e034
xor eax, 0xcbda6900
rol eax, 0x66
popf
pushf
not eax
add eax, 0xe99d08f0
xor eax, 0x8566b7df
rol eax, 0xef
popf
jmp 0x140268e8c
mov rcx, rbx
call fcn.1402afe83
lea rdx, [0x1b4a8cc08]
pushf
sub rdx, 0x7496a7c8
popf
push rax
pushf
mov eax, 0xa719fd9c
pushf
not eax
add eax, 0x95d5167e
xor eax, 0xac78e1ef
rol eax, 0x86
popf
pushf
not eax
add eax, 0xd907e7d4
xor eax, 0xc9c74a28
rol eax, 0x39
popf
pushf
not eax
add eax, 0xae88b427
xor eax, 0xd7a5164a
rol eax, 0x8b
popf
jmp 0x140268e8c
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x140269890
push rax
pushf
mov eax, 0xbbdd7967
pushf
not eax
add eax, 0xe47d15db
xor eax, 0xc3747a34
rol eax, 0
popf
pushf
not eax
add eax, 0x90e88486
xor eax, 0xa4fc9e5e
rol eax, 0xdd
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x32cbe0e0
pushf
not eax
add eax, 0x8bac9984
xor eax, 0x8f925fdc
rol eax, 0x99
popf
pushf
not eax
add eax, 0x820a6466
xor eax, 0x825bae97
rol eax, 0xd4
popf
jmp 0x140268e8c
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x14026992b
push rax
pushf
mov eax, 0xaeb2a4ea
pushf
not eax
add eax, 0xf565cd5b
xor eax, 0xd7314f9d
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xcea3d65e
xor eax, 0xb0be8e6b
rol eax, 0xd2
popf
pushf
not eax
add eax, 0xfaae50dc
xor eax, 0xa139800f
rol eax, 0x55
popf
pushf
not eax
add eax, 0xede45e9f
xor eax, 0x8146f0bf
rol eax, 0xb9
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xa185d698
pushf
not eax
add eax, 0xd11303c0
xor eax, 0xa1d0d1fd
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xbeb78349
xor eax, 0xc505e68d
rol eax, 0x52
popf
jmp 0x140268e8c
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x14026996c
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1402699d3
push rax
pushf
mov eax, 0x2b8d5abd
pushf
not eax
add eax, 0x9749b6ed
xor eax, 0x8e720c21
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa42fb5af
xor eax, 0xfbfe7b87
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xb3957233
xor eax, 0xbf2f3929
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x96919a4d
xor eax, 0xcd8fb9da
rol eax, 0xd3
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x169c81fd
pushf
not eax
add eax, 0xce430ae8
xor eax, 0xfc02b591
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xecb0758e
xor eax, 0x9a81d064
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xe1145e78
xor eax, 0xd21a9e06
rol eax, 0x6b
popf
jmp 0x140268e8c
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x140269a58
push rax
pushf
mov eax, 0xd3ad559a
pushf
not eax
add eax, 0x83ce8ec9
xor eax, 0xacba2fe8
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xc2ee6222
xor eax, 0xea3836bd
rol eax, 0x39
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xb1097050
pushf
not eax
add eax, 0x8d0c51c1
xor eax, 0xdef5fa84
rol eax, 0xb
popf
pushf
not eax
add eax, 0xb34dd966
xor eax, 0x80adb155
rol eax, 0xba
popf
pushf
not eax
add eax, 0xca7f817b
xor eax, 0x938c657c
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xe96d1e68
xor eax, 0xe6ab2484
rol eax, 0x53
popf
jmp 0x140268e8c
sub ecx, 1
je 0x140269afc
push rax
pushf
mov eax, 0xcc5bf95e
pushf
not eax
add eax, 0x8856ea20
xor eax, 0xef4695bf
rol eax, 0x21
popf
pushf
not eax
add eax, 0x9474fee5
xor eax, 0xdfe8fb80
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xf4d17e72
xor eax, 0xefcadbd8
rol eax, 0xe9
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xdfba024f
pushf
not eax
add eax, 0xa1ba45c8
xor eax, 0xb6d82143
rol eax, 0x78
popf
pushf
not eax
add eax, 0xfeac2f40
xor eax, 0x833756d9
rol eax, 0xa2
popf
jmp 0x140268e8c
cmp ecx, 1
jne 0x140269b6b
push rax
pushf
mov eax, 0xe8211484
pushf
not eax
add eax, 0x83ae0070
xor eax, 0xe72d7869
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x98d621c4
xor eax, 0xbbf5829b
rol eax, 0x85
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xc80e8b1
pushf
not eax
add eax, 0x8fe31c36
xor eax, 0xc79635cd
rol eax, 0x49
popf
pushf
not eax
add eax, 0x9aeacb26
xor eax, 0xff947168
rol eax, 0x17
popf
pushf
not eax
add eax, 0xbc67a352
xor eax, 0xc840fe2d
rol eax, 0xea
popf
jmp 0x140268e8c
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x140269bf4
push rax
pushf
mov eax, 0xdbfacfdf
pushf
not eax
add eax, 0xd7c147ca
xor eax, 0xf250fe49
rol eax, 0x39
popf
pushf
not eax
add eax, 0xcdb0a931
xor eax, 0x8799fc1d
rol eax, 0xb2
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x10363943
pushf
not eax
add eax, 0xb3ef8fdc
xor eax, 0xb7180121
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xcd8f8b37
xor eax, 0xb5c0bc4a
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xe13feae7
xor eax, 0x826c2666
rol eax, 0x83
popf
jmp 0x140268e8c
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0xe175e7ec
pushf
not eax
add eax, 0xa91df8c3
xor eax, 0xd2a0c486
rol eax, 0x89
popf
pushf
not eax
add eax, 0xbb3663cc
xor eax, 0xa98903a1
rol eax, 0x52
popf
jmp 0x140268e8c
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.1402e3ee0
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x140269cd0
push rax
pushf
mov eax, 0xb9860719
pushf
not eax
add eax, 0x8d2135cd
xor eax, 0xd4ced138
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc2405ef4
xor eax, 0x91783e16
rol eax, 0x58
popf
pushf
not eax
add eax, 0xbe948ec8
xor eax, 0xdbee4d31
rol eax, 0xfd
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x17d8c670
pushf
not eax
add eax, 0x94758428
xor eax, 0xccf3daa0
rol eax, 0x52
popf
pushf
not eax
add eax, 0x8170657f
xor eax, 0xe5116bc1
rol eax, 0xb5
popf
jmp 0x140268e8c
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x140269d6a
push rax
pushf
mov eax, 0x2ce90070
pushf
not eax
add eax, 0xa36e0a65
xor eax, 0x953da389
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xbccf4d99
xor eax, 0xb00e4c65
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x879c4df4
xor eax, 0xb1b04c47
rol eax, 0x13
popf
pushf
not eax
add eax, 0xd9c6918d
xor eax, 0xcca29c4b
rol eax, 0x22
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x94df5a40
pushf
not eax
add eax, 0xbe59052b
xor eax, 0xd015f9e5
rol eax, 0x59
popf
pushf
not eax
add eax, 0x8a66eb69
xor eax, 0x9a797d2e
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x970be2f0
xor eax, 0xa28da426
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xb117c3da
xor eax, 0xfcaf8d11
rol eax, 0x1f
popf
jmp 0x140268e8c
mov ecx, 0xbf052fca
pushf
not ecx
add ecx, 0xbf6ca87f
xor ecx, 0x9b8f05c3
rol ecx, 0xaf
popf
pushf
not ecx
add ecx, 0xecbd1164
xor ecx, 0xae014307
rol ecx, 0x5d
popf
call fcn.1402e3ee0
mov ecx, 0x2d183db8
pushf
not ecx
add ecx, 0x8b2bb10a
xor ecx, 0xff946be6
rol ecx, 3
popf
pushf
not ecx
add ecx, 0xcc767239
xor ecx, 0xbbe030b3
rol ecx, 0x42
popf
pushf
not ecx
add ecx, 0x834bfa97
xor ecx, 0x93d5871d
rol ecx, 0xfd
popf
cmp ax, cx
jne 0x140269f62
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x140269e4c
inc edi
push rax
pushf
mov eax, 0x8f087353
pushf
not eax
add eax, 0x9577a0c5
xor eax, 0xd07235f4
rol eax, 0x31
popf
pushf
not eax
add eax, 0xd2cbe3d2
xor eax, 0xf623a2ed
rol eax, 0x88
popf
pushf
not eax
add eax, 0x84f7863d
xor eax, 0xe5385954
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xb7a3d6e2
xor eax, 0x8a71fe3f
rol eax, 0x31
popf
jmp 0x140268e8c
add r15, 2
cmp r15, r12
jae 0x140269ee3
push rax
pushf
mov eax, 0x85a4e529
pushf
not eax
add eax, 0x8c1b6d4a
xor eax, 0xa5b2ad77
rol eax, 0x59
popf
pushf
not eax
add eax, 0xa8402412
xor eax, 0x98f89bc7
rol eax, 0xe6
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xaf77555e
pushf
not eax
add eax, 0xa7807fba
xor eax, 0xe1308496
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xe889bf64
xor eax, 0xb5d9ead8
rol eax, 0x11
popf
pushf
not eax
add eax, 0xe049f3b7
xor eax, 0xf28764e3
rol eax, 0x92
popf
jmp 0x140268e8c
jmp 0x140269c71
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0xa4a6672e
pushf
not eax
add eax, 0xeb0fb50e
xor eax, 0xc79cfdcb
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xae20ff54
xor eax, 0xaa47d2ba
rol eax, 0xec
popf
pushf
not eax
add eax, 0xba1088f3
xor eax, 0xfafd7c97
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x8ffbe215
xor eax, 0xdfcfc99f
rol eax, 0x70
popf
jmp 0x140268e8c
mov r12, qword [rbp - 0x18]
jmp 0x14026a576
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.14010260c
push rax
pushf
mov eax, 0x53452897
pushf
not eax
add eax, 0xdb385ad9
xor eax, 0xaefcd377
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xa3ff8cef
xor eax, 0xc381fd15
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xc643dc1f
xor eax, 0x8a055983
rol eax, 0x12
popf
jmp 0x140268e8c
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x14026a57b
lea rdx, [0x1aaac590e]
pushf
sub rdx, 0x6a9a34ce
popf
push rax
pushf
mov eax, 0x3fd62836
pushf
not eax
add eax, 0xb8e39b22
xor eax, 0xd67e325e
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x81db0e36
xor eax, 0xd31d4133
rol eax, 0xe6
popf
jmp 0x140268e8c
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x14026a145
push rax
pushf
mov eax, 0xf4642fcd
pushf
not eax
add eax, 0xea40cfa3
xor eax, 0xfde17786
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xa3ca7db1
xor eax, 0x82d22464
rol eax, 0x95
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xf0ae3ddb
pushf
not eax
add eax, 0x8cc1a832
xor eax, 0xab2576db
rol eax, 7
popf
pushf
not eax
add eax, 0x8f62a48e
xor eax, 0xf8c48537
rol eax, 0x85
popf
pushf
not eax
add eax, 0x8486b073
xor eax, 0x8dea97c3
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xa6a8b0ca
xor eax, 0x8668ac23
rol eax, 2
popf
jmp 0x140268e8c
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x14026a1ff
push rax
pushf
mov eax, 0x49a7de6c
pushf
not eax
add eax, 0xed5f95de
xor eax, 0xcbfebbee
rol eax, 4
popf
pushf
not eax
add eax, 0xf2144b9a
xor eax, 0xca4fd08d
rol eax, 0x24
popf
pushf
not eax
add eax, 0xa3f05c25
xor eax, 0x9512905e
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xb7356c5c
xor eax, 0x9aa6f602
rol eax, 0x29
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xded7d995
pushf
not eax
add eax, 0xe1cf11b5
xor eax, 0xd9292d4c
rol eax, 0x66
popf
pushf
not eax
add eax, 0x88ef4f43
xor eax, 0x85412d8a
rol eax, 0x48
popf
pushf
not eax
add eax, 0xffbec933
xor eax, 0xd6e3831e
rol eax, 0xf3
popf
jmp 0x140268e8c
sub ecx, 1
je 0x14026a290
push rax
pushf
mov eax, 0xac42a50a
pushf
not eax
add eax, 0xb08eca61
xor eax, 0x8d4e2e3f
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xf408225b
xor eax, 0xf7be0709
rol eax, 0x95
popf
pushf
not eax
add eax, 0xbbc77266
xor eax, 0xaa9a8232
rol eax, 0x98
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x4da6ccc5
pushf
not eax
add eax, 0xba6f3f88
xor eax, 0xbd988528
rol eax, 0x76
popf
pushf
not eax
add eax, 0xf1d35096
xor eax, 0x8c2b7bd8
rol eax, 0x79
popf
pushf
not eax
add eax, 0xe4bd9a12
xor eax, 0xe3c51f02
rol eax, 0xb4
popf
jmp 0x140268e8c
cmp ecx, 1
jne 0x14026a325
push rax
pushf
mov eax, 0xe23c763d
pushf
not eax
add eax, 0xf4113101
xor eax, 0xec83897e
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xcf0284f3
xor eax, 0xaee44cdd
rol eax, 0x79
popf
pushf
not eax
add eax, 0xc726e137
xor eax, 0xb22842fb
rol eax, 0xa7
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xa9d95a0c
pushf
not eax
add eax, 0x8e8e9fd0
xor eax, 0xb721da5c
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xfd216c44
xor eax, 0xc10c05e6
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xfd7ba147
xor eax, 0x81118208
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xb0d9e824
xor eax, 0xd5e12d5c
rol eax, 0x6e
popf
jmp 0x140268e8c
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140264aec
jmp 0x14026a05d
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1402a8539
jmp 0x14026a05d
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.14023c0a6
jmp 0x14026a05d
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x14026a47a
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14026a4b7
push rax
pushf
mov eax, 0x764bd01d
pushf
not eax
add eax, 0x9d1e3fa4
xor eax, 0x9b93f0b9
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xe0bb3f4d
xor eax, 0xebb4c2d6
rol eax, 0x5e
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x2e326c40
pushf
not eax
add eax, 0xb9bb1fd6
xor eax, 0xd7928a8d
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xe66c9828
xor eax, 0xfdf8904d
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xe01c0607
xor eax, 0xecc5c32d
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xa6920ad5
xor eax, 0xd24bc831
rol eax, 0xfe
popf
jmp 0x140268e8c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x8b866349
pushf
not eax
add eax, 0xac73a57b
xor eax, 0xfaf01c32
rol eax, 0x47
popf
pushf
not eax
add eax, 0x8e6d50af
xor eax, 0xe4aee375
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xd4cdcb81
xor eax, 0xcd79a12c
rol eax, 0
popf
pushf
not eax
add eax, 0xca966aaa
xor eax, 0xda0b8ddc
rol eax, 0xc2
popf
jmp 0x140268e8c
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0x596015f
pushf
not eax
add eax, 0xe87c1c37
xor eax, 0x962f3925
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xcad190b9
xor eax, 0xe5e6be71
rol eax, 0x95
popf
jmp 0x140268e8c
lea rdx, [0x19adadf8d]
pushf
sub rdx, 0x5ac8bb4d
popf
push rax
pushf
mov eax, 0xc835eb77
pushf
not eax
add eax, 0xc0d1815b
xor eax, 0xd5142e23
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xcd06d4ed
xor eax, 0xb63ef725
rol eax, 0x60
popf
jmp 0x140268e8c
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x14026a65d
push rax
pushf
mov eax, 0x48463afc
pushf
not eax
add eax, 0xcd2521a8
xor eax, 0xa3d014c8
rol eax, 0xce
popf
pushf
not eax
add eax, 0x80f403af
xor eax, 0x84f25a49
rol eax, 0x69
popf
pushf
not eax
add eax, 0x842c2ba1
xor eax, 0xf361c4d7
rol eax, 0x93
popf
pushf
not eax
add eax, 0xebe23fce
xor eax, 0xcd96afa4
rol eax, 0xd2
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x5c428671
pushf
not eax
add eax, 0xaea39ad2
xor eax, 0xea5b5ef6
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xcbb268bb
xor eax, 0xfac88802
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xcbd3ee86
xor eax, 0xdd151754
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xa7e3b1f3
xor eax, 0xff053c07
rol eax, 0xf5
popf
jmp 0x140268e8c
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x14026a716
push rax
pushf
mov eax, 0x5b5befc1
pushf
not eax
add eax, 0x83c38e3a
xor eax, 0x8b0ec547
rol eax, 0x31
popf
pushf
not eax
add eax, 0xde88415c
xor eax, 0xaf2de049
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xcbab9f0d
xor eax, 0xb65b97ed
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xce8f8b0e
xor eax, 0x932160b1
rol eax, 0x3b
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xd01d8e70
pushf
not eax
add eax, 0xf68dccb0
xor eax, 0xccab4dda
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xbc578c9d
xor eax, 0xc0c47c82
rol eax, 0x48
popf
pushf
not eax
add eax, 0x8732b49b
xor eax, 0xa6d064b6
rol eax, 0xe6
popf
jmp 0x140268e8c
cmp eax, 5
jne 0x14026a7ba
push rax
pushf
mov eax, 0x15165050
pushf
not eax
add eax, 0x8b79c590
xor eax, 0xf3ed97ff
rol eax, 0x15
popf
pushf
not eax
add eax, 0xc98fe0c1
xor eax, 0xb7844f7a
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xc2abc6ce
xor eax, 0xc8355a22
rol eax, 0xde
popf
pushf
not eax
add eax, 0x9ac0e46f
xor eax, 0xe4469392
rol eax, 0xbb
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x297f1215
pushf
not eax
add eax, 0xcfc9421d
xor eax, 0x89ecfeb9
rol eax, 0x56
popf
pushf
not eax
add eax, 0x941a5220
xor eax, 0xe4a3686c
rol eax, 0x30
popf
jmp 0x140268e8c
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x140269322
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.14028377a
jmp 0x140269322
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x14026a8f2
push rax
pushf
mov eax, 0x6e3c5588
pushf
not eax
add eax, 0xcb78dea3
xor eax, 0xa904f863
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x9584ccc3
xor eax, 0xb2527bd7
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x80ef5fd8
xor eax, 0xdf3f23bc
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xc31a6725
xor eax, 0xb46b1624
rol eax, 0xf
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0xed2ba453
pushf
not eax
add eax, 0x8fa88664
xor eax, 0xffebc900
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xef262c9b
xor eax, 0xf89f9821
rol eax, 0x77
popf
pushf
not eax
add eax, 0xb38e5563
xor eax, 0x94bc42db
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9f13e0f1
xor eax, 0xd29593df
rol eax, 0x68
popf
jmp 0x140268e8c
cmp byte [rsi], 0x1a
je 0x14026a983
push rax
pushf
mov eax, 0xc484d8a1
pushf
not eax
add eax, 0x9d752547
xor eax, 0xed2d18a3
rol eax, 0x83
popf
pushf
not eax
add eax, 0x9e61c3f2
xor eax, 0x8f7723c0
rol eax, 7
popf
jmp 0x140268e8c
push rax
pushf
mov eax, 0x2116ad84
pushf
not eax
add eax, 0xcb2d0868
xor eax, 0xb612a2bd
rol eax, 0x16
popf
pushf
not eax
add eax, 0xfd0ba192
xor eax, 0x92d3b04d
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x9fb42c36
xor eax, 0xabf973ac
rol eax, 0x81
popf
jmp 0x140268e8c
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x140269322
mov eax, dword [rbp - 0x2c]
sub eax, edi
jmp 0x14026aaab
xor eax, eax
push rax
pushf
mov eax, 0xb0ddb0e8
pushf
not eax
add eax, 0xff054c09
xor eax, 0xd245dea5
rol eax, 0xae
popf
pushf
not eax
add eax, 0xf7b26c44
xor eax, 0x8228a841
rol eax, 1
popf
pushf
not eax
add eax, 0xeffc5985
xor eax, 0xf99e8485
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xba8e2397
xor eax, 0x8d99cc41
rol eax, 0x1d
popf
jmp 0x140268e8c
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret