Function at 0x140115d78
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x91ca6a65
pushf
not eax
add eax, 0x344da506
xor eax, 0x28ceac9a
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x226520aa
xor eax, 0x4e12b3f8
rol eax, 0xab
popf
cmp eax, 0x2b
jne 0x140115db5
popf
pop rax
jmp 0x140117711
cmp eax, 0x1f
jne 0x140115dc4
popf
pop rax
jmp 0x140117142
cmp eax, 0x11
jne 0x140115dd3
popf
pop rax
jmp 0x140116a92
cmp eax, 4
jne 0x140115de2
popf
pop rax
jmp 0x1401162f0
cmp eax, 0x32
jne 0x140115df1
popf
pop rax
jmp 0x140117a33
cmp eax, 1
jne 0x140115e00
popf
pop rax
jmp 0x140116143
cmp eax, 0x17
jne 0x140115e0f
popf
pop rax
jmp 0x140116e25
cmp eax, 0x24
jne 0x140115e1e
popf
pop rax
jmp 0x1401173c8
cmp eax, 0x22
jne 0x140115e2d
popf
pop rax
jmp 0x1401172fb
cmp eax, 9
jne 0x140115e3c
popf
pop rax
jmp 0x140116619
cmp eax, 0x2c
jne 0x140115e4b
popf
pop rax
jmp 0x14011777c
cmp eax, 0x12
jne 0x140115e5a
popf
pop rax
jmp 0x140116b08
cmp eax, 0x19
jne 0x140115e69
popf
pop rax
jmp 0x140116f06
cmp eax, 0x18
jne 0x140115e78
popf
pop rax
jmp 0x140116eba
cmp eax, 5
jne 0x140115e87
popf
pop rax
jmp 0x1401163ab
cmp eax, 0xb
jne 0x140115e96
popf
pop rax
jmp 0x1401166e5
cmp eax, 0xe
jne 0x140115ea5
popf
pop rax
jmp 0x1401168fa
cmp eax, 2
jne 0x140115eb4
popf
pop rax
jmp 0x1401161d4
cmp eax, 8
jne 0x140115ec3
popf
pop rax
jmp 0x14011656b
cmp eax, 0x29
jne 0x140115ed2
popf
pop rax
jmp 0x1401175c1
cmp eax, 0x25
jne 0x140115ee1
popf
pop rax
jmp 0x140117425
cmp eax, 7
jne 0x140115ef0
popf
pop rax
jmp 0x1401164b9
cmp eax, 0x26
jne 0x140115eff
popf
pop rax
jmp 0x1401174c7
cmp eax, 0x28
jne 0x140115f0e
popf
pop rax
jmp 0x140117569
cmp eax, 0x27
jne 0x140115f1d
popf
pop rax
jmp 0x140117516
cmp eax, 6
jne 0x140115f2c
popf
pop rax
jmp 0x140116465
cmp eax, 0x15
jne 0x140115f3b
popf
pop rax
jmp 0x140116ca4
cmp eax, 0x14
jne 0x140115f4a
popf
pop rax
jmp 0x140116c0a
cmp eax, 0x30
jne 0x140115f59
popf
pop rax
jmp 0x14011796b
cmp eax, 0x13
jne 0x140115f68
popf
pop rax
jmp 0x140116b52
cmp eax, 0xf
jne 0x140115f77
popf
pop rax
jmp 0x14011697f
cmp eax, 0x1a
jne 0x140115f86
popf
pop rax
jmp 0x140116f55
cmp eax, 0x10
jne 0x140115f95
popf
pop rax
jmp 0x140116a10
cmp eax, 0xd
jne 0x140115fa4
popf
pop rax
jmp 0x140116852
cmp eax, 0x2d
jne 0x140115fb3
popf
pop rax
jmp 0x1401177c6
cmp eax, 0x31
jne 0x140115fc2
popf
pop rax
jmp 0x1401179c9
cmp eax, 0x1d
jne 0x140115fd1
popf
pop rax
jmp 0x140117066
cmp eax, 0x21
jne 0x140115fe0
popf
pop rax
jmp 0x140117267
cmp eax, 0x33
jne 0x140115fef
popf
pop rax
jmp 0x140117a7b
cmp eax, 0x23
jne 0x140115ffe
popf
pop rax
jmp 0x140117358
cmp eax, 0x16
jne 0x14011600d
popf
pop rax
jmp 0x140116dd5
cmp eax, 0
jne 0x14011601c
popf
pop rax
jmp 0x1401160b2
cmp eax, 0x1e
jne 0x14011602b
popf
pop rax
jmp 0x1401170ab
cmp eax, 0xc
jne 0x14011603a
popf
pop rax
jmp 0x140116791
cmp eax, 0x2e
jne 0x140116049
popf
pop rax
jmp 0x14011782f
cmp eax, 0x2f
jne 0x140116058
popf
pop rax
jmp 0x1401178da
cmp eax, 0x2a
jne 0x140116067
popf
pop rax
jmp 0x140117658
cmp eax, 0x20
jne 0x140116076
popf
pop rax
jmp 0x1401171c3
cmp eax, 0x1c
jne 0x140116085
popf
pop rax
jmp 0x140117001
cmp eax, 0x1b
jne 0x140116094
popf
pop rax
jmp 0x140116f91
cmp eax, 3
jne 0x1401160a3
popf
pop rax
jmp 0x14011623e
cmp eax, 0xa
jne 0x1401160b2
popf
pop rax
jmp 0x140116698
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x140116110
push rax
pushf
mov eax, 0xb7a5e430
pushf
not eax
add eax, 0x557b95b1
xor eax, 0x474cc542
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x14cb036c
xor eax, 0x41bf1906
rol eax, 0x31
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xf645e9e5
pushf
not eax
add eax, 0x18713cec
xor eax, 0x6bbd1d4c
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x5d611dc6
xor eax, 0x49ce8b6c
rol eax, 2
popf
jmp 0x140115da6
test rdx, rdx
jne 0x14011617b
push rax
pushf
mov eax, 0x79baa579
pushf
not eax
add eax, 0x6e40d60b
xor eax, 0x455987ae
rol eax, 0xee
popf
pushf
not eax
add eax, 0x671021b
xor eax, 0x18a114a3
rol eax, 0x99
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xe75d796f
pushf
not eax
add eax, 0xdb65b08
xor eax, 0x649f7c09
rol eax, 0x46
popf
pushf
not eax
add eax, 0x748edc14
xor eax, 0x77ceb1e0
rol eax, 0x63
popf
pushf
not eax
add eax, 0x495a33aa
xor eax, 0x2ac41dfc
rol eax, 0x87
popf
pushf
not eax
add eax, 0x6a646d06
xor eax, 0x65534ab
rol eax, 0xf1
popf
jmp 0x140115da6
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140106c3b
or eax, 0xffffffff
jmp 0x140117a7b
mov rax, r15
lea rcx, [0x199ef0249]
pushf
sub rcx, 0x59ead819
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x1401162bd
push rax
pushf
mov eax, 0xc3b1e612
pushf
not eax
add eax, 0x3a64f42b
xor eax, 0x3cd22f9c
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x67871b78
xor eax, 0x7789894e
rol eax, 0x68
popf
pushf
not eax
add eax, 0x21f3cb0c
xor eax, 0x43d865d7
rol eax, 0x8a
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xc9d43fa2
pushf
not eax
add eax, 0x3af2cf8b
xor eax, 0x48641dd4
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x5d57c26b
xor eax, 0x1439b1ad
rol eax, 0x16
popf
jmp 0x140115da6
mov eax, r14d
not eax
test al, 1
je 0x140116352
push rax
pushf
mov eax, 0xf0065bca
pushf
not eax
add eax, 0x59b285da
xor eax, 0x8afd8c
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x55bb765d
xor eax, 0xc26a62d
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x470fe324
xor eax, 0x5f16804a
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xade5cd0
xor eax, 0x4480b71e
rol eax, 0x49
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x6bb4c77c
pushf
not eax
add eax, 0x18b8ae99
xor eax, 0x3567b8f2
rol eax, 0x65
popf
pushf
not eax
add eax, 0x65d80c7b
xor eax, 0x7069cf2e
rol eax, 0x75
popf
pushf
not eax
add eax, 0x6c276d73
xor eax, 0xd1c439a
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x4fb1aee2
xor eax, 0x3422a951
rol eax, 0x4a
popf
jmp 0x140115da6
test byte [rcx + r13*8 + 0x38], 0x20
je 0x14011640c
push rax
pushf
mov eax, 0x9b94282
pushf
not eax
add eax, 0x56f8de72
xor eax, 0x47a58cf7
rol eax, 0x93
popf
pushf
not eax
add eax, 0x5f751216
xor eax, 0x2b73f4f0
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x4c21d3f3
xor eax, 0x59eb3923
rol eax, 3
popf
pushf
not eax
add eax, 0x733e7718
xor eax, 0x52d878eb
rol eax, 0x59
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x43a88ae7
pushf
not eax
add eax, 0x71642008
xor eax, 0x17f456f
rol eax, 0x42
popf
pushf
not eax
add eax, 0x5398e88b
xor eax, 0x2b503e81
rol eax, 0x12
popf
pushf
not eax
add eax, 0xf7686d0
xor eax, 0x2ddef6e2
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x7548c65b
xor eax, 0x699b8323
rol eax, 0x8b
popf
jmp 0x140115da6
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.140112765
push rax
pushf
mov eax, 0x9fe2f4d3
pushf
not eax
add eax, 0xe240e39
xor eax, 0x3c136449
rol eax, 2
popf
pushf
not eax
add eax, 0x4457ffc2
xor eax, 0x78a4a4cf
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x488084a0
xor eax, 0x4c631721
rol eax, 0x95
popf
jmp 0x140115da6
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.140149bee
lea rdx, [0x189160c16]
pushf
sub rdx, 0x4911e1e6
popf
test eax, eax
je 0x140116538
push rax
pushf
mov eax, 0x1a4e52b7
pushf
not eax
add eax, 0x38aaaf90
xor eax, 0x24a9028a
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x236e9d01
xor eax, 0x4f0963c0
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x44fdf361
xor eax, 0x21012e04
rol eax, 0x79
popf
pushf
not eax
add eax, 0x58b57667
xor eax, 0x7f89ffbd
rol eax, 0x3a
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x762257b8
pushf
not eax
add eax, 0x32499d5d
xor eax, 0x76cbe29e
rol eax, 0xda
popf
pushf
not eax
add eax, 0x2e08e8dd
xor eax, 0x7edd3640
rol eax, 0xa7
popf
jmp 0x140115da6
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x1401165c0
push rax
pushf
mov eax, 0xa10a6526
pushf
not eax
add eax, 0xfef7c6d
xor eax, 0x28b1aad5
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x3b87f126
xor eax, 0x3d828957
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x6e42327e
xor eax, 0x6d1f50
rol eax, 0x87
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x9d311d9
pushf
not eax
add eax, 0x35bd87af
xor eax, 0x7c5c3f42
rol eax, 0x88
popf
pushf
not eax
add eax, 0x1c0e2edf
xor eax, 0x17241d4e
rol eax, 0x64
popf
pushf
not eax
add eax, 0x55ae0c11
xor eax, 0x59e698e3
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x3ec2f0eb
xor eax, 0x5aebb181
rol eax, 0x50
popf
jmp 0x140115da6
cmp byte [rbx + 0x28], dil
jne 0x140116652
push rax
pushf
mov eax, 0x4687beb4
pushf
not eax
add eax, 0x1480f9d8
xor eax, 0x741ecf95
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x1b8f470e
xor eax, 0x6d1543e0
rol eax, 0x18
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x2c5070c4
pushf
not eax
add eax, 0x28ae7f66
xor eax, 0x5715573d
rol eax, 0xd
popf
pushf
not eax
add eax, 0x4e144c60
xor eax, 0xdc518c0
rol eax, 0x77
popf
pushf
not eax
add eax, 0x4a702f18
xor eax, 0x76f89c40
rol eax, 0x25
popf
jmp 0x140115da6
mov rcx, rbx
call fcn.1400d1dbf
lea rdx, [0x1b7a6f514]
pushf
sub rdx, 0x77a2cae4
popf
push rax
pushf
mov eax, 0xc816f206
pushf
not eax
add eax, 0xde5a306
xor eax, 0x31a64a32
rol eax, 0x36
popf
pushf
not eax
add eax, 0x6d39317
xor eax, 0x5376c8d8
rol eax, 0x74
popf
jmp 0x140115da6
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x14011674b
push rax
pushf
mov eax, 0x789ca50e
pushf
not eax
add eax, 0x5b1da453
xor eax, 0x672ef3e4
rol eax, 0x87
popf
pushf
not eax
add eax, 0x7d133a3b
xor eax, 0x1f677e4b
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x7441550b
xor eax, 0x31828def
rol eax, 0x82
popf
pushf
not eax
add eax, 0x1fc81faa
xor eax, 0x6fb2c326
rol eax, 0x38
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xda1fa7d
pushf
not eax
add eax, 0x29b5cc57
xor eax, 0x5ac10610
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x264502e9
xor eax, 0x5c42b017
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x954e07f
xor eax, 0x2ffe92c2
rol eax, 0x77
popf
jmp 0x140115da6
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x1401167f9
push rax
pushf
mov eax, 0x405720d9
pushf
not eax
add eax, 0x11625e8d
xor eax, 0x4f154e4
rol eax, 0x74
popf
pushf
not eax
add eax, 0x2adaa145
xor eax, 0x2129b975
rol eax, 0x82
popf
pushf
not eax
add eax, 0x14e71cf5
xor eax, 0x2ca9246
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x6ef606da
xor eax, 0x666ad179
rol eax, 0x6c
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x95e7416b
pushf
not eax
add eax, 0xee04f03
xor eax, 0x225e3a81
rol eax, 0x58
popf
pushf
not eax
add eax, 0x79a2a5ab
xor eax, 0x296ed790
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x45a24563
xor eax, 0x1c3ccf2c
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x6909e97b
xor eax, 0x1cb3efdb
rol eax, 0xff
popf
jmp 0x140115da6
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x140116860
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1401168c7
push rax
pushf
mov eax, 0x5403510b
pushf
not eax
add eax, 0xe90646d
xor eax, 0x428de437
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x78111721
xor eax, 0x6d8b91c1
rol eax, 0x76
popf
pushf
not eax
add eax, 0x2b450922
xor eax, 0x5fc5ebec
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x761d6275
xor eax, 0x1825c8e8
rol eax, 0xb0
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x1c0861c6
pushf
not eax
add eax, 0x2914d3f1
xor eax, 0x3653b70c
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x15edff5d
xor eax, 0x6c5f2768
rol eax, 0xe3
popf
jmp 0x140115da6
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x140116939
push rax
pushf
mov eax, 0x78c37cbe
pushf
not eax
add eax, 0x2dc8a27
xor eax, 0x278264b2
rol eax, 0x92
popf
pushf
not eax
add eax, 0x5ac2c15f
xor eax, 0x43580af1
rol eax, 0x64
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xeba54118
pushf
not eax
add eax, 0x526ab9ab
xor eax, 0x6a9f7518
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x3623b40e
xor eax, 0x1b6e2750
rol eax, 0x90
popf
pushf
not eax
add eax, 0x52ff1d06
xor eax, 0x1a5ce3a2
rol eax, 0xc3
popf
jmp 0x140115da6
sub ecx, 1
je 0x1401169ca
push rax
pushf
mov eax, 0x84f2c4a7
pushf
not eax
add eax, 0x4ec47611
xor eax, 0x549ea5be
rol eax, 0x91
popf
pushf
not eax
add eax, 0x16777b45
xor eax, 0x5ce141a6
rol eax, 0x50
popf
pushf
not eax
add eax, 0x6946a5f7
xor eax, 0x684575cd
rol eax, 0x15
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x97bee017
pushf
not eax
add eax, 0x1311b2b5
xor eax, 0x14b4d7ac
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x5759a403
xor eax, 0x7161b65a
rol eax, 0x61
popf
pushf
not eax
add eax, 0x2d503c4b
xor eax, 0x2081e78d
rol eax, 0xf7
popf
jmp 0x140115da6
cmp ecx, 1
jne 0x140116a4c
push rax
pushf
mov eax, 0x720684f1
pushf
not eax
add eax, 0xd2a0b5
xor eax, 0x36f23bf1
rol eax, 0x57
popf
pushf
not eax
add eax, 0x2a8365e8
xor eax, 0x11274e57
rol eax, 0xd9
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xb258d088
pushf
not eax
add eax, 0x314cd01a
xor eax, 0x7d84248c
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x682f6bb9
xor eax, 0xe3cdad2
rol eax, 0x32
popf
pushf
not eax
add eax, 0x6e74763c
xor eax, 0x13f28dc6
rol eax, 0xb2
popf
jmp 0x140115da6
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x140116ad5
push rax
pushf
mov eax, 0xc02374b4
pushf
not eax
add eax, 0x7dbfc3b9
xor eax, 0x21e5d513
rol eax, 0x77
popf
pushf
not eax
add eax, 0xd33ef59
xor eax, 0x165b3ab
rol eax, 0xdc
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xe6420e82
pushf
not eax
add eax, 0x5b500809
xor eax, 0x434caa96
rol eax, 0x6b
popf
pushf
not eax
add eax, 0x2ceac3ee
xor eax, 0x2248423b
rol eax, 0xf0
popf
jmp 0x140115da6
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0x4f192e1a
pushf
not eax
add eax, 0xc64d2cf
xor eax, 0x3e2eee6e
rol eax, 0x45
popf
pushf
not eax
add eax, 0x5c904c2b
xor eax, 0x4e0ea2cf
rol eax, 5
popf
pushf
not eax
add eax, 0x61a27022
xor eax, 0x24982c5d
rol eax, 0xbc
popf
jmp 0x140115da6
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.14014a249
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x140116bc4
push rax
pushf
mov eax, 0x5a750bfb
pushf
not eax
add eax, 0x115ccc80
xor eax, 0xbfb34b3
rol eax, 0x41
popf
pushf
not eax
add eax, 0x3efba69a
xor eax, 0x69e692fb
rol eax, 0x69
popf
pushf
not eax
add eax, 0x6187bc91
xor eax, 0x6061ccdb
rol eax, 4
popf
pushf
not eax
add eax, 0x60a68325
xor eax, 0x2ba9744d
rol eax, 0xf6
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xf1f61c44
pushf
not eax
add eax, 0x632bce7e
xor eax, 0x4624f3c5
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x7557d099
xor eax, 0x74e3351c
rol eax, 0xba
popf
pushf
not eax
add eax, 0x2512356d
xor eax, 0x33449b86
rol eax, 0x32
popf
jmp 0x140115da6
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x140116c71
push rax
pushf
mov eax, 0x73986869
pushf
not eax
add eax, 0x1fb499c1
xor eax, 0x70325763
rol eax, 3
popf
pushf
not eax
add eax, 0x3a90d72a
xor eax, 0x601cc8ed
rol eax, 0x15
popf
pushf
not eax
add eax, 0x28f82bd2
xor eax, 0x2354a6e3
rol eax, 0x64
popf
pushf
not eax
add eax, 0xa60937
xor eax, 0x6f4b34c1
rol eax, 0x48
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x27b64c3b
pushf
not eax
add eax, 0x1c33517e
xor eax, 0x2a4da831
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x292e6fa4
xor eax, 0x735b36e1
rol eax, 0xf2
popf
jmp 0x140115da6
mov ecx, 0xc0504b4d
pushf
not ecx
add ecx, 0x58c547aa
xor ecx, 0x1fa62cf
rol ecx, 0xc6
popf
pushf
not ecx
add ecx, 0x5ffa996
xor ecx, 0x18683bb5
rol ecx, 0x22
popf
pushf
not ecx
add ecx, 0x248a1cad
xor ecx, 0x3bc9204f
rol ecx, 0xa0
popf
call fcn.14014a249
mov ecx, 0x8269b36e
pushf
not ecx
add ecx, 0x79b0aec8
xor ecx, 0x52f5d67e
rol ecx, 0x6e
popf
pushf
not ecx
add ecx, 0xf4494c
xor ecx, 0x55129580
rol ecx, 0xaa
popf
pushf
not ecx
add ecx, 0xbd02310
xor ecx, 0x28a6a6cd
rol ecx, 0xba
popf
cmp ax, cx
jne 0x140116d7c
push rax
pushf
mov eax, 0x1f1bd79
pushf
not eax
add eax, 0x3a9e8fa3
xor eax, 0x5e9603c6
rol eax, 0xdd
popf
pushf
not eax
add eax, 0x3661e76a
xor eax, 0x78814405
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x31f89205
xor eax, 0x53ad887c
rol eax, 0x13
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x1bf73f22
pushf
not eax
add eax, 0x78b73437
xor eax, 0x3776f361
rol eax, 0x81
popf
pushf
not eax
add eax, 0x53c5767c
xor eax, 0x3ec04361
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x43dff845
xor eax, 0x178a2ea2
rol eax, 0x34
popf
pushf
not eax
add eax, 0x126c24b7
xor eax, 0x4601b57e
rol eax, 0x95
popf
jmp 0x140115da6
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x140116ddd
inc edi
push rax
pushf
mov eax, 0xc02a0a64
pushf
not eax
add eax, 0x29915752
xor eax, 0x4475c02e
rol eax, 0x11
popf
pushf
not eax
add eax, 0x779759e1
xor eax, 0x687d8479
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x6db1621c
xor eax, 0x56e3b2a2
rol eax, 0xc4
popf
jmp 0x140115da6
add r15, 2
cmp r15, r12
jae 0x140116e74
push rax
pushf
mov eax, 0xce62d054
pushf
not eax
add eax, 0x3defa56d
xor eax, 0x64407dc3
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x2115ec47
xor eax, 0x25b5dd33
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x2d512d53
xor eax, 0x37deb253
rol eax, 0x1d
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x19116c90
pushf
not eax
add eax, 0x420adfa8
xor eax, 0x630bf4b8
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x4eacf996
xor eax, 0x5ff679c4
rol eax, 0x1b
popf
pushf
not eax
add eax, 0x6db835a9
xor eax, 0x4a416f1d
rol eax, 0x8c
popf
jmp 0x140115da6
jmp 0x140116b52
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0xdc307123
pushf
not eax
add eax, 0x3be40536
xor eax, 0x26fbff29
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x52bebc22
xor eax, 0x1ccef890
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x7a33c52f
xor eax, 0x7cb8e80a
rol eax, 0x4f
popf
jmp 0x140115da6
mov r12, qword [rbp - 0x18]
jmp 0x140117519
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.14001c5a0
push rax
pushf
mov eax, 0xaab5cb6
pushf
not eax
add eax, 0x1e5231ef
xor eax, 0x6d4e688e
rol eax, 0xff
popf
pushf
not eax
add eax, 0x38a167f5
xor eax, 0x3241d315
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x6a14ae8b
xor eax, 0x6de7d175
rol eax, 0x59
popf
pushf
not eax
add eax, 0x54c3e6ec
xor eax, 0x14027288
rol eax, 0xcd
popf
jmp 0x140115da6
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x14011751e
lea rdx, [0x1a0bb08c1]
pushf
sub rdx, 0x60b6de91
popf
push rax
pushf
mov eax, 0xfefc7981
pushf
not eax
add eax, 0x68e9010d
xor eax, 0x5d17e02b
rol eax, 4
popf
pushf
not eax
add eax, 0x578e28f1
xor eax, 0x7ebaeed
rol eax, 0xaf
popf
jmp 0x140115da6
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x1401170e9
push rax
pushf
mov eax, 0x6751dcc3
pushf
not eax
add eax, 0x43209640
xor eax, 0x46e2995c
rol eax, 0x69
popf
pushf
not eax
add eax, 0x79a61344
xor eax, 0x21642209
rol eax, 0x94
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x2dd94bb6
pushf
not eax
add eax, 0xcc564f9
xor eax, 0x74b47408
rol eax, 0x6c
popf
pushf
not eax
add eax, 0x3657659e
xor eax, 0x5f5c9085
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x19631443
xor eax, 0xd0c5be2
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xc29268a
xor eax, 0x3069af9c
rol eax, 0x8d
popf
jmp 0x140115da6
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x14011717d
push rax
pushf
mov eax, 0x24127ff
pushf
not eax
add eax, 0x4b33fc2f
xor eax, 0x16c78ccd
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x10496c51
xor eax, 0x3a10d4c3
rol eax, 0xe6
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xa24e4a72
pushf
not eax
add eax, 0x48a919c6
xor eax, 0x32a27b39
rol eax, 5
popf
pushf
not eax
add eax, 0x37b474d
xor eax, 0x30df090c
rol eax, 0xab
popf
pushf
not eax
add eax, 0x5a391c45
xor eax, 0x7d91699f
rol eax, 0xd
popf
jmp 0x140115da6
sub ecx, 1
je 0x140117221
push rax
pushf
mov eax, 0x8a8100cb
pushf
not eax
add eax, 0x154d0969
xor eax, 0xf315db7
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x7e7cb31b
xor eax, 0x5e043e78
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x5b47e8e2
xor eax, 0x19138b20
rol eax, 0x99
popf
pushf
not eax
add eax, 0x133df141
xor eax, 0x1ff5f590
rol eax, 0x92
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x183372c1
pushf
not eax
add eax, 0x22fb25c7
xor eax, 0x6ec7d1fe
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x7d7a97e0
xor eax, 0x6add7f02
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x58f21c85
xor eax, 0x778d636
rol eax, 0xe3
popf
jmp 0x140115da6
cmp ecx, 1
jne 0x1401172a2
push rax
pushf
mov eax, 0x88a66712
pushf
not eax
add eax, 0x4f7502a3
xor eax, 0x4f4c40ee
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x397629ec
xor eax, 0x6845ce6d
rol eax, 1
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x2a052183
pushf
not eax
add eax, 0x5c3d1946
xor eax, 0x4abae59e
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x59e10a40
xor eax, 0x297f7c6f
rol eax, 6
popf
pushf
not eax
add eax, 0x606f9a93
xor eax, 0x167d67a4
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x3a079963
xor eax, 0x16c1602b
rol eax, 0x2e
popf
jmp 0x140115da6
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140114166
jmp 0x140117001
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140114934
jmp 0x140117001
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140113a4d
jmp 0x140117001
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x140117443
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140117480
push rax
pushf
mov eax, 0xa148bdee
pushf
not eax
add eax, 0x3a65b5e5
xor eax, 0x26b264f0
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x1265453c
xor eax, 0x766f72db
rol eax, 7
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x2bf7b990
pushf
not eax
add eax, 0x1d71ac16
xor eax, 0x4819b4c3
rol eax, 0x30
popf
pushf
not eax
add eax, 0x19960275
xor eax, 0x3fe41906
rol eax, 0x17
popf
pushf
not eax
add eax, 0x42450ad9
xor eax, 0x38ccc530
rol eax, 0x14
popf
jmp 0x140115da6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x649b9499
pushf
not eax
add eax, 0x3ab2c6d7
xor eax, 0x3a2b81e
rol eax, 0x93
popf
pushf
not eax
add eax, 0x334a312b
xor eax, 0x381c4b48
rol eax, 0x87
popf
pushf
not eax
add eax, 0x51d4a7d3
xor eax, 0x35f08c2b
rol eax, 0x1f
popf
jmp 0x140115da6
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0x3abf9b22
pushf
not eax
add eax, 0x277b2ba9
xor eax, 0x38261899
rol eax, 0x54
popf
pushf
not eax
add eax, 0x313cd1a
xor eax, 0x715d493
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x298b27e9
xor eax, 0x26335532
rol eax, 0x5f
popf
jmp 0x140115da6
lea rdx, [0x1ab63b4d9]
pushf
sub rdx, 0x6b5f8aa9
popf
push rax
pushf
mov eax, 0xa9eb08f1
pushf
not eax
add eax, 0x10ee452e
xor eax, 0x337fe60b
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x60e9ded8
xor eax, 0x1ecd63c4
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x31557746
xor eax, 0x21fe8a56
rol eax, 0x9a
popf
jmp 0x140115da6
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x140117625
push rax
pushf
mov eax, 0xa0f9d964
pushf
not eax
add eax, 0x179a64d3
xor eax, 0x3f83c12c
rol eax, 1
popf
pushf
not eax
add eax, 0x173f7a3e
xor eax, 0x606ac104
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x33f220c6
xor eax, 0x591cd0c5
rol eax, 0x41
popf
pushf
not eax
add eax, 0x2f77e31a
xor eax, 0x7e152f85
rol eax, 0x23
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x237debb7
pushf
not eax
add eax, 0x7dc02b08
xor eax, 0x54956ca9
rol eax, 0x89
popf
pushf
not eax
add eax, 0x76cf0324
xor eax, 0x40271107
rol eax, 0xc5
popf
jmp 0x140115da6
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x1401176b8
push rax
pushf
mov eax, 0x7675b16e
pushf
not eax
add eax, 0x2b0db38e
xor eax, 0x31c834cb
rol eax, 0x51
popf
pushf
not eax
add eax, 0x717f125b
xor eax, 0x1acf6fe2
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x3eb97bdd
xor eax, 0x6821276
rol eax, 0x71
popf
pushf
not eax
add eax, 0x5fa6a8c1
xor eax, 0xce1be67
rol eax, 0x3c
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x887b36a5
pushf
not eax
add eax, 0x193b58db
xor eax, 0x3e3a250d
rol eax, 0x39
popf
pushf
not eax
add eax, 0x3cb32e1e
xor eax, 0x43076e76
rol eax, 0x39
popf
pushf
not eax
add eax, 0x6f42fca0
xor eax, 0x3884e45e
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x199f67f9
xor eax, 0x4afa55a6
rol eax, 0x9e
popf
jmp 0x140115da6
cmp eax, 5
jne 0x140117749
push rax
pushf
mov eax, 0xddc3fcb1
pushf
not eax
add eax, 0x1933283f
xor eax, 0x9166d78
rol eax, 0x99
popf
pushf
not eax
add eax, 0x3c35b7d0
xor eax, 0x51d07542
rol eax, 0xb6
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x43d935ea
pushf
not eax
add eax, 0x7e775034
xor eax, 0x3072aab3
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x6decf400
xor eax, 0x156fee3d
rol eax, 0x3e
popf
jmp 0x140115da6
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x140116203
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.1400d5db5
jmp 0x140116203
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x140117894
push rax
pushf
mov eax, 0x7733698
pushf
not eax
add eax, 0x6e74c68a
xor eax, 0x27a3ddc4
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x324350f5
xor eax, 0x77d26901
rol eax, 0x93
popf
pushf
not eax
add eax, 0x42f29c06
xor eax, 0x60c58d45
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x341165dc
xor eax, 0xac399f6
rol eax, 0x6e
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0xdceeb42a
pushf
not eax
add eax, 0xd4744d1
xor eax, 0x477c35ac
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x5b65c62f
xor eax, 0xb6addd7
rol eax, 0x94
popf
pushf
not eax
add eax, 0x38ae201e
xor eax, 0x2091e469
rol eax, 0xee
popf
jmp 0x140115da6
cmp byte [rsi], 0x1a
je 0x140117938
push rax
pushf
mov eax, 0x4548fcaf
pushf
not eax
add eax, 0x3af734c8
xor eax, 0x3c75d244
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x42e23bef
xor eax, 0x5bfb0575
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x17bfcc23
xor eax, 0x39070f00
rol eax, 3
popf
pushf
not eax
add eax, 0x1087803
xor eax, 0x45231389
rol eax, 0x57
popf
jmp 0x140115da6
push rax
pushf
mov eax, 0x153e1014
pushf
not eax
add eax, 0x733a6bf6
xor eax, 0x7617c1c0
rol eax, 0x20
popf
pushf
not eax
add eax, 0x4627b847
xor eax, 0x1a3cd625
rol eax, 0xb6
popf
jmp 0x140115da6
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x140116203
mov eax, dword [rbp - 0x2c]
push rdi
not edi
add eax, edi
pop rdi
add eax, 1
jmp 0x140117a7b
xor eax, eax
push rax
pushf
mov eax, 0x94ee2e56
pushf
not eax
add eax, 0x41c6ed65
xor eax, 0x310ce7d9
rol eax, 0x80
popf
pushf
not eax
add eax, 0x362d4e4f
xor eax, 0x1a83c1d2
rol eax, 0x84
popf
pushf
not eax
add eax, 0x2ef5fdf3
xor eax, 0x142b356
rol eax, 0xde
popf
jmp 0x140115da6
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret