Function at 0x1406221d5
Capabilities:
Authenticate hmac
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xbbe08cbf
pushf
not eax
add eax, 0x90de5431
xor eax, 0xaf5a4e48
rol eax, 0x55
popf
pushf
not eax
add eax, 0xa513ae89
xor eax, 0xbdfd1abc
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x89d408db
xor eax, 0xcdd276a8
rol eax, 0x2d
popf
cmp eax, 0x29
jne 0x140622225
popf
pop rax
jmp 0x140623a57
cmp eax, 0
jne 0x140622234
popf
pop rax
jmp 0x140622522
cmp eax, 3
jne 0x140622243
popf
pop rax
jmp 0x14062270d
cmp eax, 1
jne 0x140622252
popf
pop rax
jmp 0x1406225c6
cmp eax, 0xd
jne 0x140622261
popf
pop rax
jmp 0x140622d20
cmp eax, 0x1a
jne 0x140622270
popf
pop rax
jmp 0x1406233e2
cmp eax, 0xe
jne 0x14062227f
popf
pop rax
jmp 0x140622da5
cmp eax, 0x31
jne 0x14062228e
popf
pop rax
jmp 0x140623e49
cmp eax, 0x19
jne 0x14062229d
popf
pop rax
jmp 0x14062337b
cmp eax, 8
jne 0x1406222ac
popf
pop rax
jmp 0x140622a12
cmp eax, 0x2a
jne 0x1406222bb
popf
pop rax
jmp 0x140623adc
cmp eax, 0x17
jne 0x1406222ca
popf
pop rax
jmp 0x1406232ad
cmp eax, 0x1c
jne 0x1406222d9
popf
pop rax
jmp 0x14062346b
cmp eax, 0x2e
jne 0x1406222e8
popf
pop rax
jmp 0x140623cd8
cmp eax, 0x18
jne 0x1406222f7
popf
pop rax
jmp 0x140623342
cmp eax, 0x2b
jne 0x140622306
popf
pop rax
jmp 0x140623b94
cmp eax, 0x1b
jne 0x140622315
popf
pop rax
jmp 0x14062342c
cmp eax, 0x2d
jne 0x140622324
popf
pop rax
jmp 0x140623c95
cmp eax, 0x23
jne 0x140622333
popf
pop rax
jmp 0x1406237f2
cmp eax, 0x25
jne 0x140622342
popf
pop rax
jmp 0x140623917
cmp eax, 0x32
jne 0x140622351
popf
pop rax
jmp 0x140623eac
cmp eax, 0x13
jne 0x140622360
popf
pop rax
jmp 0x140623073
cmp eax, 0x33
jne 0x14062236f
popf
pop rax
jmp 0x140623ee1
cmp eax, 0x24
jne 0x14062237e
popf
pop rax
jmp 0x140623862
cmp eax, 0x1e
jne 0x14062238d
popf
pop rax
jmp 0x1406235a4
cmp eax, 0xc
jne 0x14062239c
popf
pop rax
jmp 0x140622c5f
cmp eax, 0x26
jne 0x1406223ab
popf
pop rax
jmp 0x140623979
cmp eax, 0x27
jne 0x1406223ba
popf
pop rax
jmp 0x1406239af
cmp eax, 0x30
jne 0x1406223c9
popf
pop rax
jmp 0x140623dfe
cmp eax, 0x10
jne 0x1406223d8
popf
pop rax
jmp 0x140622ece
cmp eax, 0x2c
jne 0x1406223e7
popf
pop rax
jmp 0x140623c38
cmp eax, 9
jne 0x1406223f6
popf
pop rax
jmp 0x140622aad
cmp eax, 4
jne 0x140622405
popf
pop rax
jmp 0x1406227bb
cmp eax, 0x16
jne 0x140622414
popf
pop rax
jmp 0x14062325d
cmp eax, 0x28
jne 0x140622423
popf
pop rax
jmp 0x1406239ff
cmp eax, 0xa
jne 0x140622432
popf
pop rax
jmp 0x140622b3e
cmp eax, 0x22
jne 0x140622441
popf
pop rax
jmp 0x140623795
cmp eax, 0x14
jne 0x140622450
popf
pop rax
jmp 0x140623118
cmp eax, 7
jne 0x14062245f
popf
pop rax
jmp 0x14062295e
cmp eax, 5
jne 0x14062246e
popf
pop rax
jmp 0x140622876
cmp eax, 2
jne 0x14062247d
popf
pop rax
jmp 0x14062267d
cmp eax, 0x20
jne 0x14062248c
popf
pop rax
jmp 0x1406236b6
cmp eax, 0x1d
jne 0x14062249b
popf
pop rax
jmp 0x1406234d6
cmp eax, 0x11
jne 0x1406224aa
popf
pop rax
jmp 0x140622f76
cmp eax, 6
jne 0x1406224b9
popf
pop rax
jmp 0x14062290a
cmp eax, 0x2f
jne 0x1406224c8
popf
pop rax
jmp 0x140623d5a
cmp eax, 0x12
jne 0x1406224d7
popf
pop rax
jmp 0x140623016
cmp eax, 0x21
jne 0x1406224e6
popf
pop rax
jmp 0x14062374b
cmp eax, 0x1f
jne 0x1406224f5
popf
pop rax
jmp 0x140623625
cmp eax, 0xb
jne 0x140622504
popf
pop rax
jmp 0x140622bb3
cmp eax, 0xf
jne 0x140622513
popf
pop rax
jmp 0x140622e50
cmp eax, 0x15
jne 0x140622522
popf
pop rax
jmp 0x1406231b2
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
xor edi, edi
mov r14d, r8d
movsxd r13, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x140622580
push rax
pushf
mov eax, 0xdbf7319
pushf
not eax
add eax, 0x95aedc99
xor eax, 0xdeda12c4
rol eax, 0x31
popf
pushf
not eax
add eax, 0xa59bdb77
xor eax, 0xae25390c
rol eax, 0x94
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xdd25c7d
pushf
not eax
add eax, 0x9a302599
xor eax, 0xc83e1807
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xb08d9eab
xor eax, 0xbf24ea0e
rol eax, 0x96
popf
pushf
not eax
add eax, 0x9ba33d43
xor eax, 0xad6d6f27
rol eax, 0x36
popf
jmp 0x140622216
test rdx, rdx
jne 0x140622624
push rax
pushf
mov eax, 0x69dfb8ad
pushf
not eax
add eax, 0x8f47c8b4
xor eax, 0xd6888c61
rol eax, 0x68
popf
pushf
not eax
add eax, 0x84e3b8dc
xor eax, 0xb6b9d920
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xafd1af51
xor eax, 0xda47e344
rol eax, 0x31
popf
pushf
not eax
add eax, 0x9c461a40
xor eax, 0xa167484c
rol eax, 0xc8
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xb571ed6b
pushf
not eax
add eax, 0xd5662231
xor eax, 0xc9af7d39
rol eax, 0x8e
popf
pushf
not eax
add eax, 0x87f35efd
xor eax, 0xac585560
rol eax, 0x12
popf
pushf
not eax
add eax, 0xd10f6212
xor eax, 0xd9f3c570
rol eax, 0xab
popf
pushf
not eax
add eax, 0xe52b2629
xor eax, 0xbbaaa460
rol eax, 0xaa
popf
jmp 0x140622216
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140645f13
or eax, 0xffffffff
jmp 0x140623ee1
mov rax, r13
lea rcx, [0x193bb4c8b]
pushf
sub rcx, 0x5361ac5b
popf
and eax, 0x3f
mov r12, r13
sar r12, 6
lea r15, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r15*8 + 0x39]
mov byte [rbp - 0x38], al
dec al
cmp al, 1
ja 0x140622788
push rax
pushf
mov eax, 0x98ba2c7e
pushf
not eax
add eax, 0x8b7f5a2d
xor eax, 0xea69f366
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xfb520363
xor eax, 0x8045b014
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xbd282ced
xor eax, 0x87f6e053
rol eax, 0x3d
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x19b60e69
pushf
not eax
add eax, 0xee1a23f6
xor eax, 0x96f760fa
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x9db3b471
xor eax, 0xf8d716e0
rol eax, 0x92
popf
jmp 0x140622216
mov eax, r14d
not eax
test al, 1
je 0x14062281d
push rax
pushf
mov eax, 0x7fc0de3d
pushf
not eax
add eax, 0xf61a62cb
xor eax, 0xf63d8da5
rol eax, 0x85
popf
pushf
not eax
add eax, 0x9d952573
xor eax, 0xc3715d93
rol eax, 0x99
popf
pushf
not eax
add eax, 0x8a1b76fc
xor eax, 0xd70365cd
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x9e87c678
xor eax, 0xac246a58
rol eax, 0x41
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x70936a63
pushf
not eax
add eax, 0xd7b4152e
xor eax, 0xa6dff82d
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xb7d69f9c
xor eax, 0xc008ba56
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd1e8ed16
xor eax, 0x84cee04a
rol eax, 0xad
popf
pushf
not eax
add eax, 0x9de8ef75
xor eax, 0xc156fb1f
rol eax, 0x76
popf
jmp 0x140622216
test byte [rcx + r15*8 + 0x38], 0x20
je 0x1406228c4
push rax
pushf
mov eax, 0xe4026f7e
pushf
not eax
add eax, 0xdab0a951
xor eax, 0xb22f8cf3
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf80af09d
xor eax, 0xe1428e39
rol eax, 0x85
popf
pushf
not eax
add eax, 0xb60c368c
xor eax, 0xda2b6845
rol eax, 0xaf
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xf476d7be
pushf
not eax
add eax, 0x9f4aedf0
xor eax, 0xeaeab643
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa22df7dc
xor eax, 0xfa68681f
rol eax, 0x82
popf
pushf
not eax
add eax, 0xc93a7bf2
xor eax, 0xc7263ca5
rol eax, 0xc
popf
jmp 0x140622216
xor edx, edx
mov ecx, r13d
lea r8d, [rdx + 2]
call fcn.140664338
push rax
pushf
mov eax, 0xe60d8770
pushf
not eax
add eax, 0xb57e3bdb
xor eax, 0xf61a68e7
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xfcf2ff45
xor eax, 0xdfdf060a
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x85021cf9
xor eax, 0xb17740a0
rol eax, 0xa0
popf
jmp 0x140622216
mov ecx, r13d
mov qword [rbp - 0x20], rdi
call fcn.1405dba98
xor ecx, ecx
lea r8, [0x1bbd05e54]
pushf
sub r8, 0x7b76be24
popf
test eax, eax
je 0x1406229b9
push rax
pushf
mov eax, 0x50ced555
pushf
not eax
add eax, 0xc99601a6
xor eax, 0xd6d597a2
rol eax, 0x27
popf
pushf
not eax
add eax, 0xb1426dd4
xor eax, 0xa7e4757c
rol eax, 0xfb
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x3d7c812f
pushf
not eax
add eax, 0xcc6ca39f
xor eax, 0x9cc2ffb5
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xe36f64f6
xor eax, 0xc2c3b46e
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xd9cdb16b
xor eax, 0xfb244077
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x864f0258
xor eax, 0x8847b4f4
rol eax, 0xef
popf
jmp 0x140622216
mov rax, qword [r8 + r12*8]
cmp byte [rax + r15*8 + 0x38], cl
jge 0x140622a7a
push rax
pushf
mov eax, 0x1127f5f9
pushf
not eax
add eax, 0xe6a1eb27
xor eax, 0xe146b2e3
rol eax, 8
popf
pushf
not eax
add eax, 0xb86d2da6
xor eax, 0xde2bec69
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xb4276882
xor eax, 0xf2c10d30
rol eax, 0x24
popf
pushf
not eax
add eax, 0xc46b3e54
xor eax, 0x8fc927f9
rol eax, 0x17
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x1f036d75
pushf
not eax
add eax, 0xbe1ffdd3
xor eax, 0xcfa3ed89
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xa08cd027
xor eax, 0xf7eb252b
rol eax, 0x16
popf
jmp 0x140622216
cmp byte [rbx + 0x28], cl
jne 0x140622ae5
push rax
pushf
mov eax, 0xcf8a9905
pushf
not eax
add eax, 0xed97c371
xor eax, 0xf004b766
rol eax, 0xad
popf
pushf
not eax
add eax, 0xe8b5720a
xor eax, 0xbf13b448
rol eax, 0x28
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x29b341d
pushf
not eax
add eax, 0xaca2bf77
xor eax, 0xeb4d017e
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xb52a5103
xor eax, 0xdc476627
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xffef8737
xor eax, 0xedb1a45a
rol eax, 0x36
popf
pushf
not eax
add eax, 0xa44e84ce
xor eax, 0xeded8068
rol eax, 0x97
popf
jmp 0x140622216
mov rcx, rbx
call fcn.14067b9dc
xor ecx, ecx
lea r8, [0x1b411e2be]
pushf
sub r8, 0x73b8428e
popf
push rax
pushf
mov eax, 0x8d4b668f
pushf
not eax
add eax, 0xedc9d606
xor eax, 0x9bf3792e
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xfe884fc0
xor eax, 0xb945a74f
rol eax, 0x68
popf
pushf
not eax
add eax, 0xc590da2d
xor eax, 0xd0a41001
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xf7a18d69
xor eax, 0x998e3d34
rol eax, 0xdd
popf
jmp 0x140622216
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rcx
jne 0x140622c19
push rax
pushf
mov eax, 0xd809ea
pushf
not eax
add eax, 0x9a807470
xor eax, 0xaa8ae245
rol eax, 0x57
popf
pushf
not eax
add eax, 0xef3b9b74
xor eax, 0xed392a8b
rol eax, 0x29
popf
pushf
not eax
add eax, 0xdc4b0e7a
xor eax, 0xa6b6d86d
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xc3b9a4a7
xor eax, 0x93f2eea6
rol eax, 0xb4
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xf5ebb285
pushf
not eax
add eax, 0xcafdd83c
xor eax, 0xd9bc7deb
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xa2589b48
xor eax, 0xde188ae5
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x81879f96
xor eax, 0x89a24fcc
rol eax, 6
popf
jmp 0x140622216
mov rax, qword [r8 + r12*8]
cmp byte [rax + r15*8 + 0x39], cl
je 0x140622cc7
push rax
pushf
mov eax, 0xf550d823
pushf
not eax
add eax, 0xb4a111f7
xor eax, 0xa228b91c
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xed19d907
xor eax, 0xbe8e7633
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xb8e20e4a
xor eax, 0xc76099f7
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x8bb31750
xor eax, 0x8b0127ef
rol eax, 0x92
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xb0b2b63f
pushf
not eax
add eax, 0xb6f9df90
xor eax, 0xad42c09a
rol eax, 0x32
popf
pushf
not eax
add eax, 0xd0c3ea8c
xor eax, 0xd9fe7788
rol eax, 0x14
popf
pushf
not eax
add eax, 0x9af70a2d
xor eax, 0xd061b158
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xfdf20c65
xor eax, 0xfc7fbecd
rol eax, 0xad
popf
jmp 0x140622216
mov dword [rbp - 0x10], ecx
lea rdx, [rbp - 0x10]
mov rcx, qword [r8 + r12*8]
mov rcx, qword [rcx + r15*8 + 0x28]
jmp 0x140622d31
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x140622d72
push rax
pushf
mov eax, 0xca3caff3
pushf
not eax
add eax, 0x9c2958f6
xor eax, 0xadb2e9d5
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xb6709e06
xor eax, 0xf9eeef11
rol eax, 0x7f
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xa077b6fa
pushf
not eax
add eax, 0xe476573f
xor eax, 0xfd5d3e79
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xe8edac59
xor eax, 0xcbfbbe64
rol eax, 0x62
popf
jmp 0x140622216
movsx ecx, byte [rbp - 0x38]
test ecx, ecx
je 0x140622e0a
push rax
pushf
mov eax, 0xc9082965
pushf
not eax
add eax, 0xbeff0d7c
xor eax, 0xa223b9bd
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x8694eaea
xor eax, 0xb8c536d0
rol eax, 0xab
popf
pushf
not eax
add eax, 0xc6349dfc
xor eax, 0x99faa981
rol eax, 0xd
popf
pushf
not eax
add eax, 0xafa02371
xor eax, 0xba6275d0
rol eax, 0x28
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xe2d14763
pushf
not eax
add eax, 0xfffbd43a
xor eax, 0xb93157a9
rol eax, 0x60
popf
pushf
not eax
add eax, 0xaee153ae
xor eax, 0xa0ab112d
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xe5af790d
xor eax, 0xee7af734
rol eax, 0xa3
popf
jmp 0x140622216
sub ecx, 1
je 0x140622e88
push rax
pushf
mov eax, 0xf8c8e994
pushf
not eax
add eax, 0xb57d716b
xor eax, 0xfdca6e9c
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xedd95fd3
xor eax, 0xa39753db
rol eax, 0xd0
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xf71687f
pushf
not eax
add eax, 0xb6d036d0
xor eax, 0xe8e891b9
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xdf5085e6
xor eax, 0x8e84c914
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xe361c756
xor eax, 0xf068e5ca
rol eax, 0x83
popf
jmp 0x140622216
cmp ecx, 1
jne 0x140622f30
push rax
pushf
mov eax, 0x1eee6d92
pushf
not eax
add eax, 0xbb6b2e86
xor eax, 0x8c4e1d3d
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xf565bce7
xor eax, 0xd433f00c
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xdd96785f
xor eax, 0xa7730240
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x813fc636
xor eax, 0xb5037df2
rol eax, 0x93
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xbb6216ab
pushf
not eax
add eax, 0xbee5cccd
xor eax, 0xa3052557
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x8576f0e7
xor eax, 0x898b0556
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xb0a4d222
xor eax, 0x97300c03
rol eax, 0xc2
popf
jmp 0x140622216
lea r12, [rsi + r14]
mov qword [rbp - 0x30], rdi
mov r15, rsi
cmp rsi, r12
jae 0x140622fe3
push rax
pushf
mov eax, 0x1e633a82
pushf
not eax
add eax, 0xb0fe3962
xor eax, 0xf5a0ad4e
rol eax, 0x16
popf
pushf
not eax
add eax, 0xa54f2379
xor eax, 0xc475ee29
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x8e5c91a6
xor eax, 0x87f952f9
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xc72aadbd
xor eax, 0xe678b366
rol eax, 0x85
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xac42d6b9
pushf
not eax
add eax, 0xfc6f9770
xor eax, 0xa220ed71
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xe0032638
xor eax, 0x84734bdf
rol eax, 0x5a
popf
jmp 0x140622216
mov r14d, dword [rbp - 0x2c]
push rax
pushf
mov eax, 0x1ca1d88
pushf
not eax
add eax, 0xf070aa35
xor eax, 0xd4bb8da2
rol eax, 0x69
popf
pushf
not eax
add eax, 0xe351cf6b
xor eax, 0x98f69244
rol eax, 0xea
popf
pushf
not eax
add eax, 0xbabf3b46
xor eax, 0xda2adada
rol eax, 0xf1
popf
pushf
not eax
add eax, 0xfa011a07
xor eax, 0xa8b70195
rol eax, 0x7e
popf
jmp 0x140622216
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x38], ax
call fcn.1406c1c6f
movzx ecx, word [rbp - 0x38]
cmp ax, cx
jne 0x1406230d2
push rax
pushf
mov eax, 0x57fca9cd
pushf
not eax
add eax, 0xc8b6c0de
xor eax, 0x8b3c77dc
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xfb762b40
xor eax, 0xf6dc9ef8
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xfffc8ac2
xor eax, 0xba4e2cbd
rol eax, 0xb9
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x270523a2
pushf
not eax
add eax, 0x899380eb
xor eax, 0x8362d318
rol eax, 0x92
popf
pushf
not eax
add eax, 0xebd3dae3
xor eax, 0xbb583cdf
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc8dcc1d0
xor eax, 0xbf1451d2
rol eax, 0x7f
popf
jmp 0x140622216
add r14d, 2
mov dword [rbp - 0x2c], r14d
cmp cx, 0xa
jne 0x14062317f
push rax
pushf
mov eax, 0xcb76d3e4
pushf
not eax
add eax, 0xb3bb811f
xor eax, 0xa0384ac9
rol eax, 0x13
popf
pushf
not eax
add eax, 0xb48385dd
xor eax, 0x9ea005a6
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xa9b057b4
xor eax, 0xbc902c9b
rol eax, 0x60
popf
pushf
not eax
add eax, 0x985d61f4
xor eax, 0xaf073eea
rol eax, 0xc0
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x5332c72a
pushf
not eax
add eax, 0xf94659af
xor eax, 0xc73feb12
rol eax, 0x73
popf
pushf
not eax
add eax, 0xc23be26f
xor eax, 0xdb88d90b
rol eax, 7
popf
jmp 0x140622216
mov ecx, 0x943ede90
pushf
not ecx
add ecx, 0xd5778e05
xor ecx, 0xcd74cd39
rol ecx, 0x85
popf
pushf
not ecx
add ecx, 0xabfde037
xor ecx, 0x815aa7f5
rol ecx, 0xa0
popf
pushf
not ecx
add ecx, 0xba08ead0
xor ecx, 0xc6ddb95f
rol ecx, 0x64
popf
call fcn.1406c1c6f
mov ecx, 0xf687180
pushf
not ecx
add ecx, 0xe22e9f44
xor ecx, 0x818793c9
rol ecx, 0x1c
popf
pushf
not ecx
add ecx, 0x94bd4953
xor ecx, 0x83853730
rol ecx, 0xfd
popf
pushf
not ecx
add ecx, 0x8c492f11
xor ecx, 0x8192a5bd
rol ecx, 0x6f
popf
pushf
not ecx
add ecx, 0xce7aaa9e
xor ecx, 0x973fcaf3
rol ecx, 4
popf
cmp ax, cx
jne 0x14062337b
inc r14d
mov dword [rbp - 0x2c], r14d
jmp 0x140623265
inc edi
push rax
pushf
mov eax, 0x70813ac3
pushf
not eax
add eax, 0xfddf8aed
xor eax, 0xd8504c74
rol eax, 0x48
popf
pushf
not eax
add eax, 0xabf82f31
xor eax, 0x9a652719
rol eax, 0x81
popf
pushf
not eax
add eax, 0xfe079f7f
xor eax, 0xeff9b1fa
rol eax, 0x4c
popf
jmp 0x140622216
add r15, 2
cmp r15, r12
jb 0x1406232e9
push rax
pushf
mov eax, 0xef197f7e
pushf
not eax
add eax, 0xaa807e39
xor eax, 0x82d834da
rol eax, 0xb
popf
pushf
not eax
add eax, 0xe49574dc
xor eax, 0xee43f30e
rol eax, 0x74
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xdcaaafff
pushf
not eax
add eax, 0xb4eba29e
xor eax, 0xcb2d084c
rol eax, 0xc
popf
pushf
not eax
add eax, 0xe98b429a
xor eax, 0xcca4a495
rol eax, 0x57
popf
pushf
not eax
add eax, 0x894b28b5
xor eax, 0xf8d62fb2
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf4412e6a
xor eax, 0xa4068f46
rol eax, 4
popf
jmp 0x140622216
jmp 0x1406239af
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1406239af
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x30]
mov edx, r13d
call fcn.140022330
push rax
pushf
mov eax, 0xd63e1857
pushf
not eax
add eax, 0x9b49d576
xor eax, 0xe476b9dd
rol eax, 0x65
popf
pushf
not eax
add eax, 0xd7e89290
xor eax, 0xa8449a2b
rol eax, 0xd3
popf
jmp 0x140622216
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1406239b4
lea r8, [0x19fee9842]
pushf
sub r8, 0x5f94f812
popf
push rax
pushf
mov eax, 0xb20971e5
pushf
not eax
add eax, 0xf6b21703
xor eax, 0xe036cfca
rol eax, 0x73
popf
pushf
not eax
add eax, 0xb84b0d3e
xor eax, 0xc100dc1f
rol eax, 0x32
popf
pushf
not eax
add eax, 0xd527bda7
xor eax, 0x8113ddd1
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf9be1eaf
xor eax, 0xe2b30298
rol eax, 0x2f
popf
jmp 0x140622216
mov rcx, r13
mov rax, r13
sar rax, 6
and ecx, 0x3f
mov rdx, qword [r8 + rax*8]
lea rcx, [rcx + rcx*8]
cmp byte [rdx + rcx*8 + 0x38], dil
jge 0x14062354b
push rax
pushf
mov eax, 0x7370ce3a
pushf
not eax
add eax, 0xfb54b756
xor eax, 0xd55f3e78
rol eax, 0x25
popf
pushf
not eax
add eax, 0x8f7e9ff1
xor eax, 0xe4045c83
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xc6b8cf34
xor eax, 0xe5f6e4fc
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xafa8fe27
xor eax, 0x80c0b2f9
rol eax, 0xe
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xe981d89e
pushf
not eax
add eax, 0xfa1eb7e4
xor eax, 0x98579a36
rol eax, 0x18
popf
pushf
not eax
add eax, 0xd5035752
xor eax, 0x85e38af4
rol eax, 0x59
popf
pushf
not eax
add eax, 0x9e621149
xor eax, 0xf3a8d0f7
rol eax, 0xde
popf
pushf
not eax
add eax, 0x9c8067e5
xor eax, 0x84bd63f1
rol eax, 0x12
popf
jmp 0x140622216
movsx ecx, byte [rbp - 0x38]
test ecx, ecx
je 0x1406235df
push rax
pushf
mov eax, 0x8113be49
pushf
not eax
add eax, 0x8fa75da0
xor eax, 0x8f6d5d2e
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x848d19c1
xor eax, 0x89bd37b9
rol eax, 0x2f
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x1fac8958
pushf
not eax
add eax, 0x9c7b53ab
xor eax, 0xa0b9d262
rol eax, 0x11
popf
pushf
not eax
add eax, 0xb449bbc5
xor eax, 0xd23dc8ed
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x806ce8d4
xor eax, 0xe4257e99
rol eax, 0x28
popf
jmp 0x140622216
sub ecx, 1
je 0x140623670
push rax
pushf
mov eax, 0x6ffd1f4d
pushf
not eax
add eax, 0x94588a2c
xor eax, 0xe3030abd
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x8064befd
xor eax, 0x9a02f7cf
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xe31dcc07
xor eax, 0x97f5d97a
rol eax, 0xc7
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x7ef0bd80
pushf
not eax
add eax, 0xcfc44ed3
xor eax, 0xdc6721cb
rol eax, 0x11
popf
pushf
not eax
add eax, 0x8f6cdf56
xor eax, 0xa382b27d
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xe6af01e3
xor eax, 0xe0781400
rol eax, 0xa3
popf
jmp 0x140622216
cmp ecx, 1
jne 0x140623705
push rax
pushf
mov eax, 0x972191cd
pushf
not eax
add eax, 0xbb233c54
xor eax, 0xd99ab5c9
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xdcc54827
xor eax, 0xb23d8313
rol eax, 0xc
popf
pushf
not eax
add eax, 0xe91335f2
xor eax, 0xdc6e957f
rol eax, 0x99
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x193f1f21
pushf
not eax
add eax, 0x8b0ca64f
xor eax, 0xd6b504a1
rol eax, 0xae
popf
pushf
not eax
add eax, 0xf1664f92
xor eax, 0xd838bb9b
rol eax, 0x30
popf
pushf
not eax
add eax, 0x8dc62dca
xor eax, 0xef9f6d0e
rol eax, 0x95
popf
jmp 0x140622216
mov r9d, r14d
lea rcx, [rbp - 0x30]
mov r8, rsi
mov edx, r13d
call fcn.14061811b
jmp 0x14062342c
mov r9d, r14d
lea rcx, [rbp - 0x30]
mov r8, rsi
mov edx, r13d
call fcn.14067401e
jmp 0x14062342c
mov r9d, r14d
lea rcx, [rbp - 0x30]
mov r8, rsi
mov edx, r13d
call fcn.1405e4ff6
jmp 0x14062342c
mov rcx, qword [rdx + rcx*8 + 0x28]
lea r9, [rbp - 0x2c]
xor eax, eax
mov rdx, rsi
and qword [rsp + 0x20], rax
mov r8d, r14d
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], eax
jmp 0x140623880
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1406238bd
push rax
pushf
mov eax, 0x291386f1
pushf
not eax
add eax, 0xd73785ea
xor eax, 0xf59fd043
rol eax, 0x54
popf
pushf
not eax
add eax, 0xc21642e2
xor eax, 0xd748871f
rol eax, 0x4d
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x9cfa89e8
pushf
not eax
add eax, 0x80556fa1
xor eax, 0x8860d5d8
rol eax, 0x47
popf
pushf
not eax
add eax, 0xf936b539
xor eax, 0xea5e56a2
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa2652c2d
xor eax, 0xa44c0fe7
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xac200a64
xor eax, 0xa5d79c8c
rol eax, 0x2f
popf
jmp 0x140622216
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
push rax
pushf
mov eax, 0xd1facce8
pushf
not eax
add eax, 0xdf142dda
xor eax, 0x83cbb22d
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xd697e092
xor eax, 0xf7b267db
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xe568932a
xor eax, 0xf4ea793d
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xf95726f7
xor eax, 0xbe3ef990
rol eax, 0x17
popf
jmp 0x140622216
mov edi, dword [rbp - 0x28]
push rax
pushf
mov eax, 0x91f160
pushf
not eax
add eax, 0xda3b3f82
xor eax, 0x92148c23
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xa714ebdb
xor eax, 0xe714a263
rol eax, 0x2a
popf
jmp 0x140622216
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x20], xmm0
push rax
pushf
mov eax, 0x3c56e91b
pushf
not eax
add eax, 0xa0b7e967
xor eax, 0x9e0f8cae
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xc96d8f7e
xor eax, 0xcc2282c4
rol eax, 0x49
popf
pushf
not eax
add eax, 0xfe88efd0
xor eax, 0xb4ceb29d
rol eax, 0xf6
popf
jmp 0x140622216
lea r8, [0x19d56b4c9]
pushf
sub r8, 0x5cfd1499
popf
push rax
pushf
mov eax, 0x78000b1b
pushf
not eax
add eax, 0xbeb97548
xor eax, 0xcb8e4f93
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x87528071
xor eax, 0xcaf8236c
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xb2589f6c
xor eax, 0x93b8a65b
rol eax, 0x45
popf
jmp 0x140622216
mov rax, qword [rbp - 0x20]
shr rax, 0x20
test eax, eax
jne 0x140623a96
push rax
pushf
mov eax, 0x76f892a0
pushf
not eax
add eax, 0xce8ada96
xor eax, 0xe119f241
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xafd2a404
xor eax, 0xdcf8212d
rol eax, 0xf7
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x74ab013f
pushf
not eax
add eax, 0xcdf7f7c0
xor eax, 0xd6b83cfc
rol eax, 0xef
popf
pushf
not eax
add eax, 0xd77fdb9d
xor eax, 0xb249f246
rol eax, 0x63
popf
pushf
not eax
add eax, 0xd0eef50f
xor eax, 0xd0b365e8
rol eax, 0xb1
popf
jmp 0x140622216
mov eax, dword [rbp - 0x20]
test eax, eax
je 0x140623b3c
push rax
pushf
mov eax, 0x12e6a174
pushf
not eax
add eax, 0x99284270
xor eax, 0x9502267f
rol eax, 0x71
popf
pushf
not eax
add eax, 0xd0ab89d6
xor eax, 0xd3e7c726
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xcaf28a3e
xor eax, 0xc4bd4fb8
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xcf9ead3b
xor eax, 0x8636938a
rol eax, 0x20
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x9cce71cf
pushf
not eax
add eax, 0xd242b2e1
xor eax, 0xc65a89ec
rol eax, 1
popf
pushf
not eax
add eax, 0x9c8456d9
xor eax, 0xadd5b35b
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xa8c56823
xor eax, 0xe761a8e4
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x997bf962
xor eax, 0xcc54f0ab
rol eax, 0xa7
popf
jmp 0x140622216
cmp eax, 5
jne 0x140623bdf
push rax
pushf
mov eax, 0x4db326a0
pushf
not eax
add eax, 0xe68c7925
xor eax, 0xf43a5e79
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xdc5b0922
xor eax, 0xf2011b25
rol eax, 0x32
popf
pushf
not eax
add eax, 0xd4a3ad5d
xor eax, 0xb37508c4
rol eax, 0x18
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xbaa5c8cd
pushf
not eax
add eax, 0xbcbb81c3
xor eax, 0x93781b10
rol eax, 0x29
popf
pushf
not eax
add eax, 0xc20d287f
xor eax, 0x9d9d0403
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xbdcc3bf4
xor eax, 0xc01765ec
rol eax, 0xad
popf
pushf
not eax
add eax, 0x98599ac3
xor eax, 0xe0b518f4
rol eax, 0x28
popf
jmp 0x140622216
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x1406226ac
mov ecx, dword [rbp - 0x20]
mov rdx, rbx
call fcn.140647415
jmp 0x1406226ac
mov rcx, r13
mov rax, r13
sar rax, 6
and ecx, 0x3f
mov rax, qword [r8 + rax*8]
lea rcx, [rcx + rcx*8]
test byte [rax + rcx*8 + 0x38], 0x40
je 0x140623d27
push rax
pushf
mov eax, 0x984ffb1e
pushf
not eax
add eax, 0xd8a46746
xor eax, 0xdeccd7af
rol eax, 0x85
popf
pushf
not eax
add eax, 0xab82061c
xor eax, 0xd86a9ec8
rol eax, 0xda
popf
jmp 0x140622216
push rax
pushf
mov eax, 0x1c30bb34
pushf
not eax
add eax, 0xc3bf9523
xor eax, 0xdf910796
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xd010d78d
xor eax, 0xc08cdbbd
rol eax, 0x6d
popf
jmp 0x140622216
cmp byte [rsi], 0x1a
je 0x140623da5
push rax
pushf
mov eax, 0x35e37c60
pushf
not eax
add eax, 0xe884778e
xor eax, 0xc8453d4c
rol eax, 0x11
popf
pushf
not eax
add eax, 0xfcadac35
xor eax, 0xbf623890
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xaf54da5d
xor eax, 0xd01ac948
rol eax, 0xc4
popf
jmp 0x140622216
push rax
pushf
mov eax, 0xa6861a25
pushf
not eax
add eax, 0xa5f7ebe2
xor eax, 0xbbc90b5b
rol eax, 0x49
popf
pushf
not eax
add eax, 0xc91b28fc
xor eax, 0x992cfabf
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xc30f3a79
xor eax, 0xe42880b3
rol eax, 0x74
popf
pushf
not eax
add eax, 0xff3ca4ee
xor eax, 0xc6bd1aa5
rol eax, 0x2e
popf
jmp 0x140622216
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x1406226ac
mov eax, dword [rbp - 0x1c]
sub eax, edi
jmp 0x140623ee1
xor eax, eax
push rax
pushf
mov eax, 0xa9f65b03
pushf
not eax
add eax, 0xa3369896
xor eax, 0xced3361d
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xdd30d421
xor eax, 0xe3743bdd
rol eax, 0xa1
popf
jmp 0x140622216
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret