Function at 0x140af7fe0
Capabilities:
Authenticate hmac
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xe299929
pushf
not eax
add eax, 0xac625d43
xor eax, 0xb071892a
rol eax, 0x89
popf
pushf
not eax
add eax, 0x80e03a32
xor eax, 0xee45d3d5
rol eax, 0xa3
popf
cmp eax, 0x29
jne 0x140af801d
popf
pop rax
jmp 0x140af9850
cmp eax, 0
jne 0x140af802c
popf
pop rax
jmp 0x140af830b
cmp eax, 3
jne 0x140af803b
popf
pop rax
jmp 0x140af8509
cmp eax, 1
jne 0x140af804a
popf
pop rax
jmp 0x140af83c2
cmp eax, 0xd
jne 0x140af8059
popf
pop rax
jmp 0x140af8ad8
cmp eax, 0x1a
jne 0x140af8068
popf
pop rax
jmp 0x140af91d0
cmp eax, 0xe
jne 0x140af8077
popf
pop rax
jmp 0x140af8b80
cmp eax, 0x31
jne 0x140af8086
popf
pop rax
jmp 0x140af9bd9
cmp eax, 0x19
jne 0x140af8095
popf
pop rax
jmp 0x140af9160
cmp eax, 8
jne 0x140af80a4
popf
pop rax
jmp 0x140af8826
cmp eax, 0x2a
jne 0x140af80b3
popf
pop rax
jmp 0x140af98e3
cmp eax, 0x17
jne 0x140af80c2
popf
pop rax
jmp 0x140af90d3
cmp eax, 0x1c
jne 0x140af80d1
popf
pop rax
jmp 0x140af9291
cmp eax, 0x2e
jne 0x140af80e0
popf
pop rax
jmp 0x140af9abf
cmp eax, 0x18
jne 0x140af80ef
popf
pop rax
jmp 0x140af910c
cmp eax, 0x2b
jne 0x140af80fe
popf
pop rax
jmp 0x140af9974
cmp eax, 0x1b
jne 0x140af810d
popf
pop rax
jmp 0x140af9235
cmp eax, 0x2d
jne 0x140af811c
popf
pop rax
jmp 0x140af9a14
cmp eax, 0x23
jne 0x140af812b
popf
pop rax
jmp 0x140af9586
cmp eax, 0x25
jne 0x140af813a
popf
pop rax
jmp 0x140af96c3
cmp eax, 0x32
jne 0x140af8149
popf
pop rax
jmp 0x140af9c34
cmp eax, 0x13
jne 0x140af8158
popf
pop rax
jmp 0x140af8e0f
cmp eax, 0x15
jne 0x140af8167
popf
pop rax
jmp 0x140af8fb3
cmp eax, 0x24
jne 0x140af8176
popf
pop rax
jmp 0x140af9661
cmp eax, 0x1e
jne 0x140af8185
popf
pop rax
jmp 0x140af9395
cmp eax, 0xc
jne 0x140af8194
popf
pop rax
jmp 0x140af8a3d
cmp eax, 0x26
jne 0x140af81a3
popf
pop rax
jmp 0x140af970c
cmp eax, 0x27
jne 0x140af81b2
popf
pop rax
jmp 0x140af975c
cmp eax, 0x30
jne 0x140af81c1
popf
pop rax
jmp 0x140af9b9c
cmp eax, 0x10
jne 0x140af81d0
popf
pop rax
jmp 0x140af8c48
cmp eax, 0x2c
jne 0x140af81df
popf
pop rax
jmp 0x140af99be
cmp eax, 9
jne 0x140af81ee
popf
pop rax
jmp 0x140af88ae
cmp eax, 4
jne 0x140af81fd
popf
pop rax
jmp 0x140af85e0
cmp eax, 0x16
jne 0x140af820c
popf
pop rax
jmp 0x140af9014
cmp eax, 0x28
jne 0x140af821b
popf
pop rax
jmp 0x140af97b8
cmp eax, 0xa
jne 0x140af822a
popf
pop rax
jmp 0x140af892d
cmp eax, 0x22
jne 0x140af8239
popf
pop rax
jmp 0x140af953c
cmp eax, 0x14
jne 0x140af8248
popf
pop rax
jmp 0x140af8e81
cmp eax, 7
jne 0x140af8257
popf
pop rax
jmp 0x140af8770
cmp eax, 5
jne 0x140af8266
popf
pop rax
jmp 0x140af869b
cmp eax, 2
jne 0x140af8275
popf
pop rax
jmp 0x140af8479
cmp eax, 0x20
jne 0x140af8284
popf
pop rax
jmp 0x140af9495
cmp eax, 0x1d
jne 0x140af8293
popf
pop rax
jmp 0x140af9302
cmp eax, 0x11
jne 0x140af82a2
popf
pop rax
jmp 0x140af8d0e
cmp eax, 6
jne 0x140af82b1
popf
pop rax
jmp 0x140af8709
cmp eax, 0x2f
jne 0x140af82c0
popf
pop rax
jmp 0x140af9b51
cmp eax, 0x12
jne 0x140af82cf
popf
pop rax
jmp 0x140af8d57
cmp eax, 0x21
jne 0x140af82de
popf
pop rax
jmp 0x140af94f2
cmp eax, 0x1f
jne 0x140af82ed
popf
pop rax
jmp 0x140af9400
cmp eax, 0xb
jne 0x140af82fc
popf
pop rax
jmp 0x140af89a4
cmp eax, 0xf
jne 0x140af830b
popf
pop rax
jmp 0x140af8c3b
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
xor edi, edi
mov r15d, r8d
movsxd r12, ecx
mov rbx, r9
mov r14, rdx
test r8d, r8d
je 0x140af8369
push rax
pushf
mov eax, 0x79dd58ae
pushf
not eax
add eax, 0xfab7f1ec
xor eax, 0xf90ec5de
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x90d593cd
xor eax, 0xedae77fe
rol eax, 0xca
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x67f250d7
pushf
not eax
add eax, 0xd12babb8
xor eax, 0xbe8c64e7
rol eax, 0x37
popf
pushf
not eax
add eax, 0xe7605043
xor eax, 0xa09bb95a
rol eax, 4
popf
pushf
not eax
add eax, 0xb06a61a2
xor eax, 0xb0397808
rol eax, 0x13
popf
pushf
not eax
add eax, 0xef74c2bc
xor eax, 0xbf46b812
rol eax, 3
popf
jmp 0x140af800e
test rdx, rdx
jne 0x140af8420
push rax
pushf
mov eax, 0x94618dc2
pushf
not eax
add eax, 0x92cd855c
xor eax, 0xce4451c0
rol eax, 0xca
popf
pushf
not eax
add eax, 0xc53e9bbc
xor eax, 0xc987330d
rol eax, 0x57
popf
pushf
not eax
add eax, 0xa3e8c55c
xor eax, 0xf4264615
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xbbf478d1
xor eax, 0xa44a9c3d
rol eax, 0x2a
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xaf18f38b
pushf
not eax
add eax, 0x9d3f6c36
xor eax, 0x963b9e4f
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xf051ab21
xor eax, 0xb09d25da
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xb4ac9c1a
xor eax, 0xe10b7d6f
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc9cba01c
xor eax, 0xb28852ab
rol eax, 0xb5
popf
jmp 0x140af800e
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140b03fbe
or eax, 0xffffffff
jmp 0x140af9c34
mov rax, r12
lea rdx, [0x1b7baf7c8]
pushf
sub rdx, 0x7763f268
popf
and eax, 0x3f
mov rcx, r12
sar rcx, 6
mov qword [rbp - 0x38], rcx
lea r13, [rax + rax*8]
mov rcx, qword [rdx + rcx*8]
movsx esi, byte [rcx + r13*8 + 0x39]
lea eax, [rsi - 1]
cmp al, 1
ja 0x140af859a
push rax
pushf
mov eax, 0xa565e644
pushf
not eax
add eax, 0x9a47f645
xor eax, 0xe3548cac
rol eax, 0x12
popf
pushf
not eax
add eax, 0x9e7eaa91
xor eax, 0x8fa4f0d2
rol eax, 0x88
popf
pushf
not eax
add eax, 0xafe8d8cd
xor eax, 0xcd5fd537
rol eax, 0x16
popf
pushf
not eax
add eax, 0xefd453b2
xor eax, 0xa7e23709
rol eax, 0x4e
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x57803537
pushf
not eax
add eax, 0xd8870507
xor eax, 0xb41fa319
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xdd314302
xor eax, 0x874a859e
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xe8ca6d02
xor eax, 0xa0883d9b
rol eax, 0x3f
popf
jmp 0x140af800e
mov eax, r15d
not eax
test al, 1
je 0x140af8642
push rax
pushf
mov eax, 0x196e2854
pushf
not eax
add eax, 0x8c53baa0
xor eax, 0xec34e2d9
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x9a527cb7
xor eax, 0xd178ba8d
rol eax, 0x74
popf
pushf
not eax
add eax, 0xc2ea9ede
xor eax, 0x907d2636
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xac4a6450
xor eax, 0xa41f9ada
rol eax, 0xe2
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x37f8a301
pushf
not eax
add eax, 0xa49442e1
xor eax, 0xdc5a240a
rol eax, 0x69
popf
pushf
not eax
add eax, 0xf1bbf8ce
xor eax, 0xb4fcce9a
rol eax, 0x71
popf
pushf
not eax
add eax, 0x9f6a1d7e
xor eax, 0xff1a137c
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xa9a9db66
xor eax, 0xab2373ae
rol eax, 0xc6
popf
jmp 0x140af800e
test byte [rcx + r13*8 + 0x38], 0x20
je 0x140af86d6
push rax
pushf
mov eax, 0x2ed7b9a0
pushf
not eax
add eax, 0x89112913
xor eax, 0xc77df482
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xbae6ff7d
xor eax, 0xb172b5bd
rol eax, 0xac
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x2e58eefc
pushf
not eax
add eax, 0xdea15728
xor eax, 0xb15979e0
rol eax, 0x84
popf
pushf
not eax
add eax, 0xb287ebd1
xor eax, 0xbd76cf20
rol eax, 0x46
popf
jmp 0x140af800e
xor edx, edx
mov ecx, r12d
lea r8d, [rdx + 2]
call fcn.140b1a34c
push rax
pushf
mov eax, 0x5b1110ac
pushf
not eax
add eax, 0xd4a65a7d
xor eax, 0xd31e01e1
rol eax, 0xab
popf
pushf
not eax
add eax, 0x8829ada5
xor eax, 0xb99f86ec
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x881306bb
xor eax, 0xce79abcb
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xcf982950
xor eax, 0xe826e670
rol eax, 0xce
popf
jmp 0x140af800e
mov ecx, r12d
mov qword [rbp - 0x20], rdi
call fcn.140adb0f7
mov rdx, qword [rbp - 0x38]
lea r8, [0x19c7b985d]
pushf
sub r8, 0x5c2492fd
popf
test eax, eax
je 0x140af87e0
push rax
pushf
mov eax, 0x67263186
pushf
not eax
add eax, 0xcb282ca4
xor eax, 0x8aa0dfd2
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xf1b2bfca
xor eax, 0xe8e715f7
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xf5c579d7
xor eax, 0xd33eede9
rol eax, 0xa3
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xd31dd298
pushf
not eax
add eax, 0x8ca68e75
xor eax, 0xad168abe
rol eax, 0xb
popf
pushf
not eax
add eax, 0x8e744882
xor eax, 0xa7d779ae
rol eax, 0x62
popf
pushf
not eax
add eax, 0xba3d6f59
xor eax, 0xcd443b8c
rol eax, 0x99
popf
jmp 0x140af800e
mov rax, qword [r8 + rdx*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x140af887b
push rax
pushf
mov eax, 0xb8ab0ced
pushf
not eax
add eax, 0xcd52725d
xor eax, 0xedf9bb03
rol eax, 8
popf
pushf
not eax
add eax, 0xdfa80de2
xor eax, 0x8d7d6165
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc5281e47
xor eax, 0xb8bfb2e0
rol eax, 0x1a
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xe747d638
pushf
not eax
add eax, 0xee80bbce
xor eax, 0xfe8acbcf
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xc159cead
xor eax, 0xe84ca130
rol eax, 0x91
popf
jmp 0x140af800e
cmp byte [rbx + 0x28], dil
jne 0x140af88e7
push rax
pushf
mov eax, 0xa7b03ef0
pushf
not eax
add eax, 0x9a6a86c2
xor eax, 0xe17e03f8
rol eax, 0x42
popf
pushf
not eax
add eax, 0xf79ffb4b
xor eax, 0xa88ee826
rol eax, 0x5a
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xcd8f78a0
pushf
not eax
add eax, 0xe63a292f
xor eax, 0x8960c523
rol eax, 0x54
popf
pushf
not eax
add eax, 0x89ea9a2c
xor eax, 0xf46b1dbb
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xd86f1629
xor eax, 0xe31e9672
rol eax, 0xc
popf
jmp 0x140af800e
mov rcx, rbx
call fcn.140b259ce
mov rdx, qword [rbp - 0x38]
lea r8, [0x19a6a08e6]
pushf
sub r8, 0x5a130386
popf
push rax
pushf
mov eax, 0x9808d049
pushf
not eax
add eax, 0xb3836950
xor eax, 0xc376962b
rol eax, 0x83
popf
pushf
not eax
add eax, 0x98480e86
xor eax, 0xd5133772
rol eax, 0x84
popf
pushf
not eax
add eax, 0x9c426bb5
xor eax, 0xb16686b9
rol eax, 0xef
popf
pushf
not eax
add eax, 0xc6177283
xor eax, 0xe42883b6
rol eax, 0x61
popf
jmp 0x140af800e
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x140af89f7
push rax
pushf
mov eax, 0xd3ffedd4
pushf
not eax
add eax, 0xaf112c95
xor eax, 0xe4257c1a
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x83981f9d
xor eax, 0x9530e1fb
rol eax, 7
popf
pushf
not eax
add eax, 0xec1479c3
xor eax, 0xdac306fb
rol eax, 0xb0
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x1dc6cfb9
pushf
not eax
add eax, 0xf4f2d28d
xor eax, 0xd82884f2
rol eax, 0x93
popf
pushf
not eax
add eax, 0xad71c48f
xor eax, 0xd60458b2
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xd8b7fe4b
xor eax, 0x854f8785
rol eax, 0x14
popf
jmp 0x140af800e
mov rax, qword [r8 + rdx*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x140af8aa5
push rax
pushf
mov eax, 0x147b1e1c
pushf
not eax
add eax, 0xbda654e8
xor eax, 0xd35dbd31
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xec235cca
xor eax, 0xde599ab8
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xf6f79a10
xor eax, 0xb1436f42
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xf3db2bed
xor eax, 0xf37e0f8f
rol eax, 0xfd
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xd648f7b3
pushf
not eax
add eax, 0xf0892d23
xor eax, 0xba4319d7
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xebaa1dc0
xor eax, 0xc3a95111
rol eax, 0x7b
popf
jmp 0x140af800e
mov rcx, qword [r8 + rdx*8]
lea rdx, [rbp - 0x10]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x140af8ae6
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x140af8b27
push rax
pushf
mov eax, 0xf164da77
pushf
not eax
add eax, 0xd2e18b9f
xor eax, 0xae731f75
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xde8431ed
xor eax, 0xb6fc5ac4
rol eax, 0xc1
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x7ec687ac
pushf
not eax
add eax, 0xdc2fabe1
xor eax, 0xb26a6aa3
rol eax, 0xd
popf
pushf
not eax
add eax, 0x84c59ba0
xor eax, 0xbddfc29e
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xb3f95bc8
xor eax, 0xcde2e68e
rol eax, 0xf3
popf
pushf
not eax
add eax, 0xe36485bf
xor eax, 0x8abfbc14
rol eax, 5
popf
jmp 0x140af800e
test sil, sil
je 0x140af8be2
push rax
pushf
mov eax, 0x8555755c
pushf
not eax
add eax, 0xab55595c
xor eax, 0xcf2a43ec
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x8b4555c9
xor eax, 0xd8ce8e39
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xa9ab6eee
xor eax, 0x869acc2b
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xb60a0cf3
xor eax, 0x9ba8ab71
rol eax, 0x34
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x3ac0f055
pushf
not eax
add eax, 0xc3ce9318
xor eax, 0x8f70da62
rol eax, 0x86
popf
pushf
not eax
add eax, 0xfc05b155
xor eax, 0xc9282cd0
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x97e1c6c0
xor eax, 0xb3ba7bde
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xc295c4f7
xor eax, 0xdd680522
rol eax, 0x81
popf
jmp 0x140af800e
dec sil
cmp sil, 1
ja 0x140af975c
lea r12, [r14 + r15]
mov qword [rbp - 0x30], rdi
mov r15, r14
cmp r14, r12
jae 0x140af8cb5
push rax
pushf
mov eax, 0xd1f3664c
pushf
not eax
add eax, 0xdd10bfd1
xor eax, 0x87391eea
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xd286f2ca
xor eax, 0xcd70e2a9
rol eax, 0x49
popf
pushf
not eax
add eax, 0xd5606296
xor eax, 0xbc5f1c01
rol eax, 0xc
popf
pushf
not eax
add eax, 0x941e38a3
xor eax, 0xf7e48af3
rol eax, 0xfd
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x3b2a58d4
pushf
not eax
add eax, 0xa25a122b
xor eax, 0xd109aac5
rol eax, 9
popf
pushf
not eax
add eax, 0xe8e3eed7
xor eax, 0xede0bfd9
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x9a6cf581
xor eax, 0xfcb6ef97
rol eax, 0x76
popf
pushf
not eax
add eax, 0x9a8a3a01
xor eax, 0x9b15fc17
rol eax, 0xa2
popf
jmp 0x140af800e
mov esi, dword [rbp - 0x2c]
push rax
pushf
mov eax, 0xa45367ba
pushf
not eax
add eax, 0xf7b49da7
xor eax, 0xcf8e0c3b
rol eax, 0x84
popf
pushf
not eax
add eax, 0xb41bc9e6
xor eax, 0x9b1adf1b
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xa66cd64e
xor eax, 0xe7537892
rol eax, 0x37
popf
jmp 0x140af800e
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x10], ax
call fcn.140b4bb7d
movzx ecx, word [rbp - 0x10]
cmp ax, cx
jne 0x140af8dc9
push rax
pushf
mov eax, 0x928d78d6
pushf
not eax
add eax, 0xc944a5c1
xor eax, 0xf84f3ce6
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xf5b2f96b
xor eax, 0xbda68553
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x8fb8d51a
xor eax, 0x9a44f250
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xc992c2fa
xor eax, 0x9467b763
rol eax, 0x4b
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x3be54f87
pushf
not eax
add eax, 0x96b961fd
xor eax, 0xd076f020
rol eax, 0xad
popf
pushf
not eax
add eax, 0xba5267bf
xor eax, 0xfabb9741
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xf40e75a0
xor eax, 0xcadf6d55
rol eax, 0xe5
popf
jmp 0x140af800e
add esi, 2
mov dword [rbp - 0x2c], esi
cmp cx, 0xa
jne 0x140af8e4e
push rax
pushf
mov eax, 0x27493fdd
pushf
not eax
add eax, 0xf1415ed2
xor eax, 0x85dc2bb5
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xd43f4f71
xor eax, 0xdbd4ccd8
rol eax, 0xa6
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x9d1151b7
pushf
not eax
add eax, 0xd0425e1c
xor eax, 0xf52e0aa7
rol eax, 0x87
popf
pushf
not eax
add eax, 0xce2638e7
xor eax, 0xbe12d703
rol eax, 0xed
popf
jmp 0x140af800e
mov ecx, 0xcaec9d4d
pushf
not ecx
add ecx, 0xd36915e7
xor ecx, 0x8e7ed96f
rol ecx, 0x32
popf
pushf
not ecx
add ecx, 0xaf2605cf
xor ecx, 0xf91072a7
rol ecx, 0x21
popf
pushf
not ecx
add ecx, 0xa0fcd014
xor ecx, 0xe4459178
rol ecx, 0xbe
popf
call fcn.140b4bb7d
mov ecx, 0xf8887e48
pushf
not ecx
add ecx, 0x987c5cb1
xor ecx, 0x8bf4fe4b
rol ecx, 0xdc
popf
pushf
not ecx
add ecx, 0xff96fa12
xor ecx, 0x8972a1f0
rol ecx, 0
popf
pushf
not ecx
add ecx, 0xe7301f76
xor ecx, 0xa006f576
rol ecx, 0xb0
popf
cmp ax, cx
jne 0x140af8f6c
push rax
pushf
mov eax, 0xe05ff1ff
pushf
not eax
add eax, 0xd0b4a334
xor eax, 0xa7b5ddb7
rol eax, 0xed
popf
pushf
not eax
add eax, 0xcf11132d
xor eax, 0xfd1ed30e
rol eax, 0x66
popf
pushf
not eax
add eax, 0xbb86d7b7
xor eax, 0xd383daff
rol eax, 0x59
popf
pushf
not eax
add eax, 0x80030881
xor eax, 0xeb8230db
rol eax, 0xa6
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x91ec9426
pushf
not eax
add eax, 0xa225b8d3
xor eax, 0xef6d305c
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xcce84835
xor eax, 0xfbbc22d6
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xb8468467
xor eax, 0xd663dab7
rol eax, 0xb4
popf
jmp 0x140af800e
inc esi
mov dword [rbp - 0x2c], esi
jmp 0x140af8fb9
inc edi
push rax
pushf
mov eax, 0x72c7265c
pushf
not eax
add eax, 0xfa9c934d
xor eax, 0xd15f9e15
rol eax, 0x29
popf
pushf
not eax
add eax, 0xcb9570de
xor eax, 0x80666e7b
rol eax, 0x38
popf
pushf
not eax
add eax, 0xcff7abb5
xor eax, 0xdba96fec
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xa7e3903c
xor eax, 0xadc01025
rol eax, 0x64
popf
jmp 0x140af800e
add r15, 2
cmp r15, r12
jae 0x140af907a
push rax
pushf
mov eax, 0x6b27e57f
pushf
not eax
add eax, 0x92f524b1
xor eax, 0xecc45807
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xaf6418cf
xor eax, 0xd2e59e4d
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xbe66aeda
xor eax, 0xbea7148d
rol eax, 0xb8
popf
pushf
not eax
add eax, 0x89444d1e
xor eax, 0x96763b4f
rol eax, 0xc1
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x6bcce132
pushf
not eax
add eax, 0xa1b88eb5
xor eax, 0xe748e91c
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf28cff26
xor eax, 0xcaca0c83
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x89b9fcd8
xor eax, 0x8139375f
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x8abfbe52
xor eax, 0xd6e78b1b
rol eax, 0xd9
popf
jmp 0x140af800e
jmp 0x140af8d57
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x140af970c
mov r9d, r15d
mov qword [rsp + 0x20], rbx
mov r8, r14
lea rcx, [rbp - 0x30]
mov edx, r12d
call fcn.140556a20
push rax
pushf
mov eax, 0xacf03bdd
pushf
not eax
add eax, 0xdcff259d
xor eax, 0xf9a7258b
rol eax, 0x46
popf
pushf
not eax
add eax, 0x9055b3cf
xor eax, 0x8738c971
rol eax, 0x54
popf
pushf
not eax
add eax, 0x9c3ddc19
xor eax, 0x816a96a9
rol eax, 0x32
popf
pushf
not eax
add eax, 0xa4499ce4
xor eax, 0xc0dd18bf
rol eax, 0xb7
popf
jmp 0x140af800e
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x140af9711
mov rdx, qword [rbp - 0x38]
lea r8, [0x18279cad8]
pushf
sub r8, 0x4222c578
popf
push rax
pushf
mov eax, 0xf0090b99
pushf
not eax
add eax, 0xb3508266
xor eax, 0xf4e2825c
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xdab76b29
xor eax, 0xaddc83f6
rol eax, 0x87
popf
pushf
not eax
add eax, 0x8c12b9ab
xor eax, 0xef3e5b33
rol eax, 0x73
popf
jmp 0x140af800e
mov rcx, qword [r8 + rdx*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x140af92cf
push rax
pushf
mov eax, 0x7a58a03d
pushf
not eax
add eax, 0xaea2d6c0
xor eax, 0xd2dbe908
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xe1cbb9a2
xor eax, 0x84172aa5
rol eax, 0x89
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xc2225a75
pushf
not eax
add eax, 0xaa4f1482
xor eax, 0xfdaeabdd
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x94ad6b03
xor eax, 0xb2dc5582
rol eax, 0x84
popf
jmp 0x140af800e
mov ecx, esi
test sil, sil
je 0x140af934f
push rax
pushf
mov eax, 0xf76cb846
pushf
not eax
add eax, 0xa1c6baf6
xor eax, 0x95947a97
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa2705991
xor eax, 0xf1991da4
rol eax, 0x7f
popf
pushf
not eax
add eax, 0x84b0378e
xor eax, 0xb8c9dd87
rol eax, 0xf6
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x182fc119
pushf
not eax
add eax, 0xe0fc0cb6
xor eax, 0x9823959a
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xa0c3f037
xor eax, 0xac7d0633
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xa60d0b4e
xor eax, 0xe74f987a
rol eax, 0xc6
popf
jmp 0x140af800e
sub ecx, 1
je 0x140af93cd
push rax
pushf
mov eax, 0x35b7123
pushf
not eax
add eax, 0xaa17e87c
xor eax, 0xadf7b60c
rol eax, 0xff
popf
pushf
not eax
add eax, 0xa00a4ec3
xor eax, 0x95e46e18
rol eax, 0xa9
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xba1bf9ac
pushf
not eax
add eax, 0x93e81369
xor eax, 0x8ee3f0a5
rol eax, 0xee
popf
pushf
not eax
add eax, 0xf984437a
xor eax, 0xfe35edae
rol eax, 0x4d
popf
jmp 0x140af800e
cmp ecx, 1
jne 0x140af9462
push rax
pushf
mov eax, 0x6481d776
pushf
not eax
add eax, 0xcdbb7a9a
xor eax, 0xc4df9f1d
rol eax, 0x92
popf
pushf
not eax
add eax, 0x88d2f0ef
xor eax, 0xac355ee4
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xf3e60d59
xor eax, 0xfb182acf
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xdbe534b8
xor eax, 0xf6dc4515
rol eax, 0xff
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x47a78341
pushf
not eax
add eax, 0xb79014a7
xor eax, 0x91efba41
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xd10c95f3
xor eax, 0x812c2200
rol eax, 0xfd
popf
jmp 0x140af800e
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.140af3832
jmp 0x140af91d0
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.140b23726
jmp 0x140af91d0
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.140adcbdb
jmp 0x140af91d0
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x2c]
xor eax, eax
mov r8d, r15d
and qword [rsp + 0x20], rax
mov rdx, r14
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], eax
jmp 0x140af95a4
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140af9607
push rax
pushf
mov eax, 0xef2f5760
pushf
not eax
add eax, 0xcfa1799e
xor eax, 0xd4df3443
rol eax, 0x75
popf
pushf
not eax
add eax, 0x83b93b05
xor eax, 0xc0ef14a4
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf1149348
xor eax, 0xa7777e55
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xd4899226
xor eax, 0x98411375
rol eax, 0x42
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x7013b2a5
pushf
not eax
add eax, 0xf4f0a33d
xor eax, 0xc219b9df
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xc5e82c02
xor eax, 0xe4ad3f95
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x99689aad
xor eax, 0xe3ac8616
rol eax, 9
popf
pushf
not eax
add eax, 0xd0474c40
xor eax, 0xa7d6ea43
rol eax, 0x46
popf
jmp 0x140af800e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
push rax
pushf
mov eax, 0xb070d4e7
pushf
not eax
add eax, 0xbc1acda7
xor eax, 0xd7338885
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x9dcd83f0
xor eax, 0xe2f259c7
rol eax, 0x76
popf
pushf
not eax
add eax, 0xa341b7d1
xor eax, 0xfd5301a8
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xe110913a
xor eax, 0x8e7893c4
rol eax, 0xc1
popf
jmp 0x140af800e
mov edi, dword [rbp - 0x28]
push rax
pushf
mov eax, 0x25b6b3bd
pushf
not eax
add eax, 0xedc45539
xor eax, 0xd7e6b3bb
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x84c61611
xor eax, 0xed404b80
rol eax, 0xba
popf
pushf
not eax
add eax, 0xdbc22223
xor eax, 0xaafc28df
rol eax, 0xf0
popf
jmp 0x140af800e
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x20], xmm0
push rax
pushf
mov eax, 0xeca98133
pushf
not eax
add eax, 0xcf9c793d
xor eax, 0xb3da04b2
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xc8036d47
xor eax, 0xdeffe629
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xd06ac3cb
xor eax, 0xbfec6df4
rol eax, 0x80
popf
jmp 0x140af800e
mov rdx, qword [rbp - 0x38]
lea r8, [0x186f2e85d]
pushf
sub r8, 0x469be2fd
popf
push rax
pushf
mov eax, 0xb5ed7247
pushf
not eax
add eax, 0xd07d5e60
xor eax, 0x871a7ef0
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xcdf0cb87
xor eax, 0xe81cbb38
rol eax, 0xba
popf
pushf
not eax
add eax, 0x9a7d9c09
xor eax, 0x8b7000f8
rol eax, 0xa0
popf
jmp 0x140af800e
mov rax, qword [rbp - 0x20]
shr rax, 0x20
test eax, eax
jne 0x140af981d
push rax
pushf
mov eax, 0x1bd4cf1f
pushf
not eax
add eax, 0x8359b460
xor eax, 0xe20d322b
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd5d8e7a2
xor eax, 0x88363022
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xad6e8a5a
xor eax, 0xf53b006c
rol eax, 0x59
popf
pushf
not eax
add eax, 0x92f689b1
xor eax, 0xbf16eba5
rol eax, 0xf5
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x76d843e2
pushf
not eax
add eax, 0x97d44021
xor eax, 0xd4781961
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x95d1809a
xor eax, 0x977103ee
rol eax, 0xb0
popf
jmp 0x140af800e
mov eax, dword [rbp - 0x20]
test eax, eax
je 0x140af988a
push rax
pushf
mov eax, 0x69599d4
pushf
not eax
add eax, 0xf3169b50
xor eax, 0xa76fccac
rol eax, 0x61
popf
pushf
not eax
add eax, 0x8a90ba97
xor eax, 0xf2b65ee8
rol eax, 0x13
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x655e61fe
pushf
not eax
add eax, 0xe0a5b061
xor eax, 0xdd7e22e7
rol eax, 0x50
popf
pushf
not eax
add eax, 0x8bc52a75
xor eax, 0xcda07c6b
rol eax, 0xba
popf
pushf
not eax
add eax, 0xc7e1a8ff
xor eax, 0xcf8c0caa
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x804bb160
xor eax, 0xad84e746
rol eax, 0x7e
popf
jmp 0x140af800e
cmp eax, 5
jne 0x140af9941
push rax
pushf
mov eax, 0x749fa3ab
pushf
not eax
add eax, 0xd83053a5
xor eax, 0xeeff85cb
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xf5151e0b
xor eax, 0x861cf63b
rol eax, 0x36
popf
pushf
not eax
add eax, 0xb9edea71
xor eax, 0xf3c958b6
rol eax, 2
popf
pushf
not eax
add eax, 0xe8cf5435
xor eax, 0x9ac69e4d
rol eax, 0x3e
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x2d6d1029
pushf
not eax
add eax, 0xa1d24a5f
xor eax, 0xab654b06
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xee4e8758
xor eax, 0xb50497d7
rol eax, 0xe
popf
jmp 0x140af800e
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x140af84a8
mov ecx, dword [rbp - 0x20]
mov rdx, rbx
call fcn.140b05b11
jmp 0x140af84a8
mov rax, qword [r8 + rdx*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x140af9a66
push rax
pushf
mov eax, 0x6da49caa
pushf
not eax
add eax, 0xa19b1a2b
xor eax, 0xc5115069
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xc6c4f581
xor eax, 0xb6b53d0a
rol eax, 0x51
popf
pushf
not eax
add eax, 0xc17a2f2b
xor eax, 0x933c2fae
rol eax, 0xcf
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0xbf5d34e2
pushf
not eax
add eax, 0xf190dbea
xor eax, 0x9809bbb1
rol eax, 0x47
popf
pushf
not eax
add eax, 0xad18e784
xor eax, 0xbaffee54
rol eax, 0x15
popf
pushf
not eax
add eax, 0x98e08834
xor eax, 0xcf66228f
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xaf5a3bb4
xor eax, 0xf16f7992
rol eax, 0x6d
popf
jmp 0x140af800e
cmp byte [r14], 0x1a
je 0x140af9af8
push rax
pushf
mov eax, 0x19c1be24
pushf
not eax
add eax, 0xf4bca210
xor eax, 0x9ffa9cb5
rol eax, 0xa
popf
pushf
not eax
add eax, 0xc78a777c
xor eax, 0xc58ca067
rol eax, 0x77
popf
jmp 0x140af800e
push rax
pushf
mov eax, 0x71629bf9
pushf
not eax
add eax, 0xceea6345
xor eax, 0xa6114b71
rol eax, 0x37
popf
pushf
not eax
add eax, 0x955f3aaf
xor eax, 0xee9000d9
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xddcebb8a
xor eax, 0xf065765d
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xd30de1e4
xor eax, 0xcb5d271c
rol eax, 0xfa
popf
jmp 0x140af800e
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x140af84a8
mov eax, dword [rbp - 0x1c]
sub eax, edi
jmp 0x140af9c34
xor eax, eax
push rax
pushf
mov eax, 0x283ab6d7
pushf
not eax
add eax, 0xbf4dc4ae
xor eax, 0xddf0a491
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x9d44f839
xor eax, 0xd2567b6f
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xe5b72eb8
xor eax, 0xc56106bc
rol eax, 0x30
popf
pushf
not eax
add eax, 0x926cb6a4
xor eax, 0x8f893f81
rol eax, 0x8a
popf
jmp 0x140af800e
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret