Function at 0x140125cf7
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x7658e754
pushf
not eax
add eax, 0x48391c8d
xor eax, 0x367011fc
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x77504e52
xor eax, 0x3d6c4520
rol eax, 0x8c
popf
cmp eax, 0x2d
jne 0x140125d34
popf
pop rax
jmp 0x140127723
cmp eax, 0x13
jne 0x140125d43
popf
pop rax
jmp 0x140126b69
cmp eax, 0x19
jne 0x140125d52
popf
pop rax
jmp 0x140126f45
cmp eax, 0x2b
jne 0x140125d61
popf
pop rax
jmp 0x14012765b
cmp eax, 0x18
jne 0x140125d70
popf
pop rax
jmp 0x140126ef9
cmp eax, 6
jne 0x140125d7f
popf
pop rax
jmp 0x14012641d
cmp eax, 0x32
jne 0x140125d8e
popf
pop rax
jmp 0x140127990
cmp eax, 0x2c
jne 0x140125d9d
popf
pop rax
jmp 0x1401276d9
cmp eax, 8
jne 0x140125dac
popf
pop rax
jmp 0x140126510
cmp eax, 0x1c
jne 0x140125dbb
popf
pop rax
jmp 0x14012702d
cmp eax, 9
jne 0x140125dca
popf
pop rax
jmp 0x1401265be
cmp eax, 2
jne 0x140125dd9
popf
pop rax
jmp 0x14012618c
cmp eax, 0x21
jne 0x140125de8
popf
pop rax
jmp 0x14012725a
cmp eax, 0x26
jne 0x140125df7
popf
pop rax
jmp 0x1401274a8
cmp eax, 0x12
jne 0x140125e06
popf
pop rax
jmp 0x140126b0c
cmp eax, 0x22
jne 0x140125e15
popf
pop rax
jmp 0x1401272ef
cmp eax, 0x16
jne 0x140125e24
popf
pop rax
jmp 0x140126dee
cmp eax, 0x24
jne 0x140125e33
popf
pop rax
jmp 0x1401273a9
cmp eax, 0x2f
jne 0x140125e42
popf
pop rax
jmp 0x140127824
cmp eax, 0x1b
jne 0x140125e51
popf
pop rax
jmp 0x140126fbd
cmp eax, 0x31
jne 0x140125e60
popf
pop rax
jmp 0x140127926
cmp eax, 0xe
jne 0x140125e6f
popf
pop rax
jmp 0x1401268c5
cmp eax, 0x28
jne 0x140125e7e
popf
pop rax
jmp 0x140127524
cmp eax, 0x33
jne 0x140125e8d
popf
pop rax
jmp 0x1401279d8
cmp eax, 0x1d
jne 0x140125e9c
popf
pop rax
jmp 0x14012706c
cmp eax, 4
jne 0x140125eab
popf
pop rax
jmp 0x1401262bb
cmp eax, 5
jne 0x140125eba
popf
pop rax
jmp 0x140126376
cmp eax, 0x2e
jne 0x140125ec9
popf
pop rax
jmp 0x140127779
cmp eax, 0x1e
jne 0x140125ed8
popf
pop rax
jmp 0x1401270d7
cmp eax, 0x14
jne 0x140125ee7
popf
pop rax
jmp 0x140126c21
cmp eax, 0x30
jne 0x140125ef6
popf
pop rax
jmp 0x1401278b5
cmp eax, 0xa
jne 0x140125f05
popf
pop rax
jmp 0x14012663d
cmp eax, 0x2a
jne 0x140125f14
popf
pop rax
jmp 0x1401275ee
cmp eax, 0xc
jne 0x140125f23
popf
pop rax
jmp 0x14012675c
cmp eax, 0xf
jne 0x140125f32
popf
pop rax
jmp 0x14012694a
cmp eax, 0
jne 0x140125f41
popf
pop rax
jmp 0x140126031
cmp eax, 0x1f
jne 0x140125f50
popf
pop rax
jmp 0x140127148
cmp eax, 0x10
jne 0x140125f5f
popf
pop rax
jmp 0x1401269db
cmp eax, 0x23
jne 0x140125f6e
popf
pop rax
jmp 0x14012734c
cmp eax, 0x25
jne 0x140125f7d
popf
pop rax
jmp 0x140127419
cmp eax, 3
jne 0x140125f8c
popf
pop rax
jmp 0x14012621c
cmp eax, 0x1a
jne 0x140125f9b
popf
pop rax
jmp 0x140126f81
cmp eax, 0x15
jne 0x140125faa
popf
pop rax
jmp 0x140126cce
cmp eax, 0x17
jne 0x140125fb9
popf
pop rax
jmp 0x140126e51
cmp eax, 0x20
jne 0x140125fc8
popf
pop rax
jmp 0x1401271c9
cmp eax, 0xd
jne 0x140125fd7
popf
pop rax
jmp 0x14012681d
cmp eax, 0x27
jne 0x140125fe6
popf
pop rax
jmp 0x1401274e4
cmp eax, 7
jne 0x140125ff5
popf
pop rax
jmp 0x14012645e
cmp eax, 1
jne 0x140126004
popf
pop rax
jmp 0x1401260d5
cmp eax, 0x11
jne 0x140126013
popf
pop rax
jmp 0x140126a83
cmp eax, 0xb
jne 0x140126022
popf
pop rax
jmp 0x1401266b0
cmp eax, 0x29
jne 0x140126031
popf
pop rax
jmp 0x140127569
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x14012608f
push rax
pushf
mov eax, 0x299e0027
pushf
not eax
add eax, 0x73f34f3c
xor eax, 0x7af11cfb
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x561266ae
xor eax, 0x630a216f
rol eax, 0xef
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x858d32d7
pushf
not eax
add eax, 0x6672158
xor eax, 0x5874be99
rol eax, 8
popf
pushf
not eax
add eax, 0x14611a69
xor eax, 0x1f76209a
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x7838e098
xor eax, 0x759aa2cf
rol eax, 0xd7
popf
jmp 0x140125d25
test rdx, rdx
jne 0x140126133
push rax
pushf
mov eax, 0xfd270246
pushf
not eax
add eax, 0x10ac34d4
xor eax, 0x32556cb4
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x1f7bc9db
xor eax, 0x16c20d98
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x5ffe14a0
xor eax, 0x4a145122
rol eax, 0x48
popf
pushf
not eax
add eax, 0x2df185d8
xor eax, 0x9db6b75
rol eax, 0xb1
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xcb8ba267
pushf
not eax
add eax, 0x399f820b
xor eax, 0x603c86c2
rol eax, 0x93
popf
pushf
not eax
add eax, 0x3e41e3ac
xor eax, 0x865a65b
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x27a86aa0
xor eax, 0x358248b9
rol eax, 0xde
popf
pushf
not eax
add eax, 0x1d8c8586
xor eax, 0x7b50b429
rol eax, 0xc
popf
jmp 0x140125d25
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140116843
or eax, 0xffffffff
jmp 0x1401279d8
mov rax, r15
lea rcx, [0x1bd892e1b]
pushf
sub rcx, 0x7d8503eb
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x140126288
push rax
pushf
mov eax, 0xe03e7c83
pushf
not eax
add eax, 0x72ffcb0e
xor eax, 0x103579e4
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x20e08918
xor eax, 0x1304e8da
rol eax, 0x5b
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x347cfebe
pushf
not eax
add eax, 0x4ed7ba42
xor eax, 0x7aa7354
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x3a2c8cdf
xor eax, 0x16f8151b
rol eax, 0x4d
popf
jmp 0x140125d25
mov eax, r14d
not eax
test al, 1
je 0x14012631d
push rax
pushf
mov eax, 0x70c12b35
pushf
not eax
add eax, 0x5fa0511c
xor eax, 0x31f0480
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x66d5cebd
xor eax, 0x4c4528f5
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x407a4194
xor eax, 0x10fcb18d
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x5c86b596
xor eax, 0x685adbab
rol eax, 0x8e
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x38cf6aaa
pushf
not eax
add eax, 0x4b53a37d
xor eax, 0x7494a05f
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x71ca5e31
xor eax, 0x659dbf92
rol eax, 5
popf
pushf
not eax
add eax, 0x67863427
xor eax, 0x4363437
rol eax, 0x91
popf
pushf
not eax
add eax, 0x7355f1be
xor eax, 0x2183a1d2
rol eax, 0xd2
popf
jmp 0x140125d25
test byte [rcx + r13*8 + 0x38], 0x20
je 0x1401263d7
push rax
pushf
mov eax, 0x8a02ca7e
pushf
not eax
add eax, 0x29f4e7d7
xor eax, 0x502a0817
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x164dfc81
xor eax, 0x56c66823
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x2dad4c51
xor eax, 0x3cef7f6d
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x2a733392
xor eax, 0x35b8986b
rol eax, 0x93
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x1971709e
pushf
not eax
add eax, 0x69237574
xor eax, 0x10a07b85
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x3113ecd3
xor eax, 0x77169d16
rol eax, 0xd
popf
pushf
not eax
add eax, 0x27b9111c
xor eax, 0x6ee335fa
rol eax, 0xee
popf
jmp 0x140125d25
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.1401225b7
push rax
pushf
mov eax, 0x2e4924ea
pushf
not eax
add eax, 0x7d95c050
xor eax, 0x720dfe4b
rol eax, 0x63
popf
pushf
not eax
add eax, 0x460f51e
xor eax, 0x1a52cbac
rol eax, 0x30
popf
jmp 0x140125d25
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.140159adf
lea rdx, [0x1ad56257f]
pushf
sub rdx, 0x6d51fb4f
popf
test eax, eax
je 0x1401264ca
push rax
pushf
mov eax, 0xe00a4f2
pushf
not eax
add eax, 0x1e072aff
xor eax, 0x37f6c678
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x24e6f2c5
xor eax, 0x66ca09d9
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x533328f
xor eax, 0x19919ad8
rol eax, 0xe9
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x71a9ef9d
pushf
not eax
add eax, 0x685e968
xor eax, 0x2d241ef7
rol eax, 0xae
popf
pushf
not eax
add eax, 0x4926b8f8
xor eax, 0x5d21d1f3
rol eax, 0x99
popf
pushf
not eax
add eax, 0x284febcd
xor eax, 0x122b1e95
rol eax, 0x54
popf
jmp 0x140125d25
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x140126578
push rax
pushf
mov eax, 0x247758cb
pushf
not eax
add eax, 0xb5016f0
xor eax, 0xa8b24da
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x55fd0aa2
xor eax, 0x4f651280
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x27bbfc86
xor eax, 0xd43513d
rol eax, 0xda
popf
pushf
not eax
add eax, 0x4dd0be0a
xor eax, 0x4635aaf3
rol eax, 0x3c
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x6f4867a
pushf
not eax
add eax, 0x237b6dcc
xor eax, 0x5d557212
rol eax, 0x25
popf
pushf
not eax
add eax, 0x47edc948
xor eax, 0x6e0cee42
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x6e9e8db4
xor eax, 0x12409a0c
rol eax, 0x6a
popf
jmp 0x140125d25
cmp byte [rbx + 0x28], dil
jne 0x14012660a
push rax
pushf
mov eax, 0x863be45a
pushf
not eax
add eax, 0x5e2dddc4
xor eax, 0x4c7dc439
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x6d4301c2
xor eax, 0x6257f09e
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x5621d8de
xor eax, 0x3ae432e6
rol eax, 0x29
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xd973d186
pushf
not eax
add eax, 0x792d653
xor eax, 0x5101d4d8
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x15b4636e
xor eax, 0xef4d405
rol eax, 0xa9
popf
jmp 0x140125d25
mov rcx, rbx
call fcn.1400e15e8
lea rdx, [0x1a88222bc]
pushf
sub rdx, 0x687df88c
popf
push rax
pushf
mov eax, 0x65485050
pushf
not eax
add eax, 0x7fe085df
xor eax, 0x75a8950a
rol eax, 0x64
popf
pushf
not eax
add eax, 0x5e1d1400
xor eax, 0x62aaa950
rol eax, 0x44
popf
pushf
not eax
add eax, 0x7367fee8
xor eax, 0x6a9bea37
rol eax, 0x47
popf
pushf
not eax
add eax, 0x29e3d595
xor eax, 0x7ec6a51a
rol eax, 0x9e
popf
jmp 0x140125d25
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x140126716
push rax
pushf
mov eax, 0x9bfde577
pushf
not eax
add eax, 0x1650bcc1
xor eax, 0x39e1177b
rol eax, 0x13
popf
pushf
not eax
add eax, 0x1cbc448
xor eax, 0x2b117f39
rol eax, 0x23
popf
pushf
not eax
add eax, 0x55c5906e
xor eax, 0x39c85e58
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xba854d3
xor eax, 0x54d49e5a
rol eax, 0x1d
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x114eda45
pushf
not eax
add eax, 0x62ee8077
xor eax, 0x1cf58553
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x21e118c
xor eax, 0x4a6dc52c
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x1117a91b
xor eax, 0x133e1bec
rol eax, 0xd1
popf
jmp 0x140125d25
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x1401267c4
push rax
pushf
mov eax, 0x2bf4c9ae
pushf
not eax
add eax, 0x1a1c3cdb
xor eax, 0x1db65df2
rol eax, 4
popf
pushf
not eax
add eax, 0x52e2080
xor eax, 0x104e4301
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x6d17046e
xor eax, 0x1ccfc7c3
rol eax, 0x13
popf
pushf
not eax
add eax, 0x66a02651
xor eax, 0x1b7e6efd
rol eax, 0x76
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xa613c1a7
pushf
not eax
add eax, 0x5072ff6e
xor eax, 0x4b80a2ba
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x104b3c5a
xor eax, 0x8b71c7f
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x52b504cb
xor eax, 0x42657e45
rol eax, 0x13
popf
pushf
not eax
add eax, 0x15dd504a
xor eax, 0x25d22de6
rol eax, 0x5f
popf
jmp 0x140125d25
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x14012682b
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x14012686c
push rax
pushf
mov eax, 0x89ee3fd0
pushf
not eax
add eax, 0x4845dd67
xor eax, 0x5d85150b
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x5d55cb5b
xor eax, 0x19063971
rol eax, 0xd4
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x8f078944
pushf
not eax
add eax, 0x15116623
xor eax, 0x6b62bf71
rol eax, 9
popf
pushf
not eax
add eax, 0x5c573beb
xor eax, 0x38edcf66
rol eax, 0xca
popf
pushf
not eax
add eax, 0x379402de
xor eax, 0x3b5f2b3f
rol eax, 0x38
popf
pushf
not eax
add eax, 0x230e982
xor eax, 0x2a9ccd75
rol eax, 0x98
popf
jmp 0x140125d25
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x140126904
push rax
pushf
mov eax, 0x53a0e9e5
pushf
not eax
add eax, 0x5f18c566
xor eax, 0x2d67de6f
rol eax, 0x10
popf
pushf
not eax
add eax, 0x4af70767
xor eax, 0x4507e159
rol eax, 0x40
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x94d855fa
pushf
not eax
add eax, 0x47a5e9a0
xor eax, 0x6807c11f
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x7055eb73
xor eax, 0x59f9b101
rol eax, 0xda
popf
pushf
not eax
add eax, 0x6adddb93
xor eax, 0x3a61d5e6
rol eax, 0xfc
popf
jmp 0x140125d25
sub ecx, 1
je 0x140126982
push rax
pushf
mov eax, 0x34124595
pushf
not eax
add eax, 0x5a98d768
xor eax, 0x47f6a991
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x40cf4c88
xor eax, 0x37498ba6
rol eax, 0xaa
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x2f7ded6d
pushf
not eax
add eax, 0x67fe68d6
xor eax, 0x73d83692
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x2983aefb
xor eax, 0x76bac460
rol eax, 0x63
popf
pushf
not eax
add eax, 0x54b526e3
xor eax, 0x3198f73c
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x67c217c2
xor eax, 0x7ca797e8
rol eax, 0x25
popf
jmp 0x140125d25
cmp ecx, 1
jne 0x140126a2a
push rax
pushf
mov eax, 0x745559a2
pushf
not eax
add eax, 0x5b065d02
xor eax, 0x1e2d7c91
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x705629dd
xor eax, 0x34f47f01
rol eax, 0x19
popf
pushf
not eax
add eax, 0x1ea9a77d
xor eax, 0x3505c04f
rol eax, 0xef
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xef9d859f
pushf
not eax
add eax, 0x233d83a4
xor eax, 0x7d4cfbda
rol eax, 0x14
popf
pushf
not eax
add eax, 0x4963a7bd
xor eax, 0x4d4d3f3c
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x38b152fe
xor eax, 0x645bf4ff
rol eax, 0x22
popf
pushf
not eax
add eax, 0xdbf887a
xor eax, 0x1edc4d66
rol eax, 0x78
popf
jmp 0x140125d25
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x140126ac6
push rax
pushf
mov eax, 0x4448923
pushf
not eax
add eax, 0x2a23a867
xor eax, 0xc3415f9
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x77b32aca
xor eax, 0x4cce031d
rol eax, 0x92
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xf1a68849
pushf
not eax
add eax, 0x617c80f0
xor eax, 0x61b4b609
rol eax, 2
popf
pushf
not eax
add eax, 0x2b39fc58
xor eax, 0x2c5ccff6
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x1183480f
xor eax, 0x2242d494
rol eax, 0x5f
popf
jmp 0x140125d25
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0x4d1e2a72
pushf
not eax
add eax, 0x1937b96f
xor eax, 0x646a1e63
rol eax, 0xce
popf
pushf
not eax
add eax, 0x1067d8e6
xor eax, 0x3c29f7bf
rol eax, 0x74
popf
pushf
not eax
add eax, 0x55ee1d10
xor eax, 0x3f42cc4c
rol eax, 0x81
popf
pushf
not eax
add eax, 0x7fdd8b09
xor eax, 0x7c3ddb0f
rol eax, 0x3e
popf
jmp 0x140125d25
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.14015a134
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x140126bc8
push rax
pushf
mov eax, 0xbe2f883d
pushf
not eax
add eax, 0x2a9d7e06
xor eax, 0x6ca80a7c
rol eax, 0
popf
pushf
not eax
add eax, 0x53571742
xor eax, 0x7f94c9a
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xb127200
xor eax, 0x827c4f4
rol eax, 0xe5
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x8e7468d8
pushf
not eax
add eax, 0x29e033ae
xor eax, 0x61926a52
rol eax, 0x55
popf
pushf
not eax
add eax, 0x791c21eb
xor eax, 0xe619e36
rol eax, 0x25
popf
pushf
not eax
add eax, 0x11cfda1d
xor eax, 0xceaea2d
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x3ca52826
xor eax, 0x4769f4a5
rol eax, 0x18
popf
jmp 0x140125d25
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x140126c88
push rax
pushf
mov eax, 0xaaac21ab
pushf
not eax
add eax, 0x65cf7efb
xor eax, 0x4f27f8e4
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x3c597715
xor eax, 0x98847f5
rol eax, 0xed
popf
pushf
not eax
add eax, 0x357e6059
xor eax, 0x4f6af435
rol eax, 0x20
popf
pushf
not eax
add eax, 0x7f9ab72e
xor eax, 0x503a0190
rol eax, 0xa7
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xfd0f0981
pushf
not eax
add eax, 0x20a0ffa7
xor eax, 0x6c37794d
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x2a8e32a4
xor eax, 0x115abc75
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x734c6d44
xor eax, 0x128d067b
rol eax, 0x92
popf
jmp 0x140125d25
mov ecx, 0xaa1ed9c4
pushf
not ecx
add ecx, 0x349a98c6
xor ecx, 0x396c471f
rol ecx, 0x13
popf
pushf
not ecx
add ecx, 0x144aceb5
xor ecx, 0x3c112595
rol ecx, 0x5e
popf
pushf
not ecx
add ecx, 0x4c207318
xor ecx, 0x304f6f5f
rol ecx, 0x5b
popf
call fcn.14015a134
mov ecx, 0xb5c6df77
pushf
not ecx
add ecx, 0x2a29706a
xor ecx, 0x4378d179
rol ecx, 0xf9
popf
pushf
not ecx
add ecx, 0x1a98f8
xor ecx, 0x55a1f7c8
rol ecx, 0x95
popf
pushf
not ecx
add ecx, 0x4e8a31bb
xor ecx, 0x42f2ae41
rol ecx, 0x90
popf
pushf
not ecx
add ecx, 0x6fd565cf
xor ecx, 0x4b8bd1ce
rol ecx, 0xe7
popf
cmp ax, cx
jne 0x140126dbb
push rax
pushf
mov eax, 0x2bb0dcc9
pushf
not eax
add eax, 0x1c5d8a31
xor eax, 0x202f85c9
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x35a97417
xor eax, 0x7bf2b91d
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xf58f75d
xor eax, 0x4564fa37
rol eax, 0x62
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x57dea768
pushf
not eax
add eax, 0x45b28242
xor eax, 0x2c10b3c1
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x31e3f3f8
xor eax, 0x169b2ddb
rol eax, 0x1f
popf
jmp 0x140125d25
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x140126df6
inc edi
push rax
pushf
mov eax, 0x464c7b15
pushf
not eax
add eax, 0x1e0f0929
xor eax, 0x47aae86c
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xbddd179
xor eax, 0x2ad36e59
rol eax, 0x74
popf
pushf
not eax
add eax, 0x65583e93
xor eax, 0x34d1759
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x73e879a4
xor eax, 0x5896f393
rol eax, 0xf9
popf
jmp 0x140125d25
add r15, 2
cmp r15, r12
jae 0x140126ea0
push rax
pushf
mov eax, 0x2aae8b2d
pushf
not eax
add eax, 0x7dce0faf
xor eax, 0x7dae2351
rol eax, 0x71
popf
pushf
not eax
add eax, 0x73365923
xor eax, 0x5663e618
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x7954cc80
xor eax, 0x2f56aa5
rol eax, 0x4b
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x7d0ba552
pushf
not eax
add eax, 0x130c7530
xor eax, 0x4abedd5f
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x7fa97864
xor eax, 0x73df963
rol eax, 0x42
popf
pushf
not eax
add eax, 0x1ee2a851
xor eax, 0x461f0f65
rol eax, 0x18
popf
pushf
not eax
add eax, 0x1b54e13f
xor eax, 0x6f9c81f6
rol eax, 0x67
popf
jmp 0x140125d25
jmp 0x140126b69
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0xa999642a
pushf
not eax
add eax, 0x68055266
xor eax, 0x176ac0f
rol eax, 0xda
popf
pushf
not eax
add eax, 0x440007e4
xor eax, 0x7100d2db
rol eax, 0x93
popf
jmp 0x140125d25
mov r12, qword [rbp - 0x18]
jmp 0x1401274e7
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.14001c610
push rax
pushf
mov eax, 0xbec4a259
pushf
not eax
add eax, 0x658fb559
xor eax, 0x71f80f6b
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x27471b62
xor eax, 0x3011d696
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xdea6b4
xor eax, 0x6ecb3bdf
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x19460137
xor eax, 0x8934e7e
rol eax, 0x9a
popf
jmp 0x140125d25
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1401274ec
lea rdx, [0x181e5d7be]
pushf
sub rdx, 0x41e1ad8e
popf
push rax
pushf
mov eax, 0xcfd746a4
pushf
not eax
add eax, 0xaa0a3f8
xor eax, 0x9eca55e
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x5e22fad7
xor eax, 0x55ed5150
rol eax, 0x63
popf
pushf
not eax
add eax, 0x7a6269bc
xor eax, 0x7ddce7b5
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x1f040548
xor eax, 0x1bbefb00
rol eax, 0xeb
popf
jmp 0x140125d25
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x140127115
push rax
pushf
mov eax, 0xd3c881ed
pushf
not eax
add eax, 0x9542c83
xor eax, 0x74ce18bf
rol eax, 0x18
popf
pushf
not eax
add eax, 0x471cbb48
xor eax, 0x1cdb75e9
rol eax, 0x1e
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xbece5a0a
pushf
not eax
add eax, 0x6227e0d0
xor eax, 0x7c1942b8
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x1f54ad00
xor eax, 0x36141d44
rol eax, 0xd
popf
jmp 0x140125d25
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x140127183
push rax
pushf
mov eax, 0x80f0d86a
pushf
not eax
add eax, 0x27c4c42c
xor eax, 0x3788b44a
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x6dc42c05
xor eax, 0x16ec4b20
rol eax, 0xbc
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xd10efb7b
pushf
not eax
add eax, 0x39d938ca
xor eax, 0x417dda12
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x67e3a730
xor eax, 0x41d1d478
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x17966f3a
xor eax, 0x783e5ccf
rol eax, 0xdf
popf
jmp 0x140125d25
sub ecx, 1
je 0x140127214
push rax
pushf
mov eax, 0x1d877ca1
pushf
not eax
add eax, 0x1f2261f6
xor eax, 0x72229796
rol eax, 8
popf
pushf
not eax
add eax, 0x671e5189
xor eax, 0x70a97041
rol eax, 0x11
popf
pushf
not eax
add eax, 0x4743fc06
xor eax, 0x489a4840
rol eax, 0x5a
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xfcf2fc
pushf
not eax
add eax, 0x43cca13c
xor eax, 0x5214a9e9
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x7e7ad2b8
xor eax, 0x2ca75415
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x505aac44
xor eax, 0x24bf7b2e
rol eax, 0x7a
popf
jmp 0x140125d25
cmp ecx, 1
jne 0x1401272bc
push rax
pushf
mov eax, 0x6648083a
pushf
not eax
add eax, 0x5cee064e
xor eax, 0x2bc51fe5
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x5ed700ea
xor eax, 0x7d06f1f8
rol eax, 0x72
popf
pushf
not eax
add eax, 0x7c8491b4
xor eax, 0x64a99502
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x69f8872a
xor eax, 0x4d796aad
rol eax, 0x95
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x6b66b199
pushf
not eax
add eax, 0x51e39e17
xor eax, 0x5beec69b
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x6e3f55f3
xor eax, 0x4b91a219
rol eax, 0x35
popf
jmp 0x140125d25
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140124024
jmp 0x14012702d
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1401247b6
jmp 0x14012702d
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1401238ac
jmp 0x14012702d
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x140127437
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140127474
push rax
pushf
mov eax, 0xd4344a55
pushf
not eax
add eax, 0x40c426ea
xor eax, 0x2a70cbdb
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x1c733f4
xor eax, 0xd574bff
rol eax, 0xda
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x40af52dd
pushf
not eax
add eax, 0x5fe813d6
xor eax, 0x1e3e7d1c
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x1cea1cf3
xor eax, 0x58b2af2
rol eax, 0xa6
popf
jmp 0x140125d25
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x2822145d
pushf
not eax
add eax, 0x53378265
xor eax, 0x35810838
rol eax, 0x11
popf
pushf
not eax
add eax, 0x59ccd98
xor eax, 0x390d106f
rol eax, 0x31
popf
jmp 0x140125d25
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0x7725537f
pushf
not eax
add eax, 0x449f9819
xor eax, 0x4b2b8d61
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x7512d134
xor eax, 0x3bd14069
rol eax, 0x54
popf
jmp 0x140125d25
lea rdx, [0x1874df415]
pushf
sub rdx, 0x4749c9e5
popf
push rax
pushf
mov eax, 0xb6c580e4
pushf
not eax
add eax, 0x111c540f
xor eax, 0x39bf9465
rol eax, 0x62
popf
pushf
not eax
add eax, 0xdfd2f50
xor eax, 0x7e711212
rol eax, 0x30
popf
jmp 0x140125d25
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x1401275bb
push rax
pushf
mov eax, 0x890df79a
pushf
not eax
add eax, 0x5780100c
xor eax, 0x299282a3
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xe43560b
xor eax, 0x5348efba
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x2ba5dfa3
xor eax, 0x64a87ac2
rol eax, 0xa1
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xc42ecdb6
pushf
not eax
add eax, 0x1bd93538
xor eax, 0x58343741
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x77961ff6
xor eax, 0x4fc6f793
rol eax, 0xa3
popf
jmp 0x140125d25
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x140127628
push rax
pushf
mov eax, 0x8dc66a68
pushf
not eax
add eax, 0x2fab0ee9
xor eax, 0x3f4b3816
rol eax, 0xed
popf
pushf
not eax
add eax, 0x5c36ea25
xor eax, 0x68a43d4f
rol eax, 0x98
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xd78f0946
pushf
not eax
add eax, 0x41475f3f
xor eax, 0x47db5889
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x2cfb0df
xor eax, 0xf36ed82
rol eax, 0xc6
popf
jmp 0x140125d25
cmp eax, 5
jne 0x140127693
push rax
pushf
mov eax, 0x5c786118
pushf
not eax
add eax, 0x2bedc945
xor eax, 0x60bf95d4
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x95c6402
xor eax, 0xa600c19
rol eax, 0x23
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x77b7a882
pushf
not eax
add eax, 0x69c97d19
xor eax, 0x7eace6af
rol eax, 0x39
popf
pushf
not eax
add eax, 0x71d97b14
xor eax, 0x6c23b61d
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x7f6ea279
xor eax, 0xab5b4ce
rol eax, 0x84
popf
jmp 0x140125d25
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x1401261bb
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.1400e5634
jmp 0x1401261bb
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x1401277cb
push rax
pushf
mov eax, 0x6d686dbd
pushf
not eax
add eax, 0x486324bf
xor eax, 0x610dfb5f
rol eax, 0x12
popf
pushf
not eax
add eax, 0x242ff286
xor eax, 0x1512dc9e
rol eax, 0x80
popf
pushf
not eax
add eax, 0x292df840
xor eax, 0x4a461a09
rol eax, 0x6a
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0x70bb99d3
pushf
not eax
add eax, 0x5871447a
xor eax, 0xbdba098
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x53c292aa
xor eax, 0x455d532e
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x6d5978bf
xor eax, 0x35785fc7
rol eax, 0x68
popf
pushf
not eax
add eax, 0x24b455f4
xor eax, 0x18e066c9
rol eax, 0xb9
popf
jmp 0x140125d25
cmp byte [rsi], 0x1a
je 0x14012785c
push rax
pushf
mov eax, 0xf7f7f327
pushf
not eax
add eax, 0x2bd4eff5
xor eax, 0x7f3b9cc3
rol eax, 0x17
popf
pushf
not eax
add eax, 0x5366aa25
xor eax, 0x4c403644
rol eax, 0
popf
jmp 0x140125d25
push rax
pushf
mov eax, 0xcf7971a8
pushf
not eax
add eax, 0x1f0a4cef
xor eax, 0x19fc65dd
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x1bea41f2
xor eax, 0x2f472481
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x3f5c2660
xor eax, 0x33ddab59
rol eax, 0xc5
popf
pushf
not eax
add eax, 0x571adac0
xor eax, 0xea2ce0a
rol eax, 0x45
popf
jmp 0x140125d25
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x1401261bb
mov eax, dword [rbp - 0x2c]
push rdi
not edi
add eax, edi
pop rdi
add eax, 1
jmp 0x1401279d8
xor eax, eax
push rax
pushf
mov eax, 0x7b04015
pushf
not eax
add eax, 0x56caac27
xor eax, 0x14a7b9fb
rol eax, 0x72
popf
pushf
not eax
add eax, 0x6f7b0873
xor eax, 0x3ba416e
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x654fba4
xor eax, 0x63c780c7
rol eax, 0x9f
popf
jmp 0x140125d25
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret