Function at 0x1800b05d9
Capabilities:
Authenticate hmac
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x2159da54
pushf
not eax
add eax, 0xecb7b170
xor eax, 0xcd26b29a
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xd30b19d2
xor eax, 0xa6a1199b
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xc556947d
xor eax, 0xbb093a1f
rol eax, 0xe4
popf
cmp eax, 0x29
jne 0x1800b0629
popf
pop rax
jmp 0x1800b1e20
cmp eax, 0
jne 0x1800b0638
popf
pop rax
jmp 0x1800b0926
cmp eax, 3
jne 0x1800b0647
popf
pop rax
jmp 0x1800b0ad8
cmp eax, 1
jne 0x1800b0656
popf
pop rax
jmp 0x1800b09dd
cmp eax, 0xd
jne 0x1800b0665
popf
pop rax
jmp 0x1800b1054
cmp eax, 0x1a
jne 0x1800b0674
popf
pop rax
jmp 0x1800b171b
cmp eax, 0xe
jne 0x1800b0683
popf
pop rax
jmp 0x1800b1122
cmp eax, 0x31
jne 0x1800b0692
popf
pop rax
jmp 0x1800b2216
cmp eax, 0x19
jne 0x1800b06a1
popf
pop rax
jmp 0x1800b16b9
cmp eax, 8
jne 0x1800b06b0
popf
pop rax
jmp 0x1800b0db9
cmp eax, 0x2a
jne 0x1800b06bf
popf
pop rax
jmp 0x1800b1eb8
cmp eax, 0x17
jne 0x1800b06ce
popf
pop rax
jmp 0x1800b15d8
cmp eax, 0x1c
jne 0x1800b06dd
popf
pop rax
jmp 0x1800b17c7
cmp eax, 0x2e
jne 0x1800b06ec
popf
pop rax
jmp 0x1800b207c
cmp eax, 0x18
jne 0x1800b06fb
popf
pop rax
jmp 0x1800b166d
cmp eax, 0x2b
jne 0x1800b070a
popf
pop rax
jmp 0x1800b1f38
cmp eax, 0x1b
jne 0x1800b0719
popf
pop rax
jmp 0x1800b1757
cmp eax, 0x2d
jne 0x1800b0728
popf
pop rax
jmp 0x1800b2026
cmp eax, 0x23
jne 0x1800b0737
popf
pop rax
jmp 0x1800b1b6b
cmp eax, 0x25
jne 0x1800b0746
popf
pop rax
jmp 0x1800b1c25
cmp eax, 0x32
jne 0x1800b0755
popf
pop rax
jmp 0x1800b2253
cmp eax, 0x13
jne 0x1800b0764
popf
pop rax
jmp 0x1800b13b3
cmp eax, 0x33
jne 0x1800b0773
popf
pop rax
jmp 0x1800b22ae
cmp eax, 0x24
jne 0x1800b0782
popf
pop rax
jmp 0x1800b1bdb
cmp eax, 0x1e
jne 0x1800b0791
popf
pop rax
jmp 0x1800b1884
cmp eax, 0xc
jne 0x1800b07a0
popf
pop rax
jmp 0x1800b0fa6
cmp eax, 0x26
jne 0x1800b07af
popf
pop rax
jmp 0x1800b1ced
cmp eax, 0x27
jne 0x1800b07be
popf
pop rax
jmp 0x1800b1d4f
cmp eax, 0x30
jne 0x1800b07cd
popf
pop rax
jmp 0x1800b21a5
cmp eax, 0x10
jne 0x1800b07dc
popf
pop rax
jmp 0x1800b1238
cmp eax, 0x2c
jne 0x1800b07eb
popf
pop rax
jmp 0x1800b1fdc
cmp eax, 9
jne 0x1800b07fa
popf
pop rax
jmp 0x1800b0e41
cmp eax, 4
jne 0x1800b0809
popf
pop rax
jmp 0x1800b0b9d
cmp eax, 0x16
jne 0x1800b0818
popf
pop rax
jmp 0x1800b1588
cmp eax, 0x28
jne 0x1800b0827
popf
pop rax
jmp 0x1800b1db5
cmp eax, 0xa
jne 0x1800b0836
popf
pop rax
jmp 0x1800b0ed3
cmp eax, 0x22
jne 0x1800b0845
popf
pop rax
jmp 0x1800b1b0e
cmp eax, 0x14
jne 0x1800b0854
popf
pop rax
jmp 0x1800b1458
cmp eax, 7
jne 0x1800b0863
popf
pop rax
jmp 0x1800b0d2d
cmp eax, 5
jne 0x1800b0872
popf
pop rax
jmp 0x1800b0c45
cmp eax, 2
jne 0x1800b0881
popf
pop rax
jmp 0x1800b0a6e
cmp eax, 0x20
jne 0x1800b0890
popf
pop rax
jmp 0x1800b19d5
cmp eax, 0x1d
jne 0x1800b089f
popf
pop rax
jmp 0x1800b182c
cmp eax, 0x11
jne 0x1800b08ae
popf
pop rax
jmp 0x1800b12e0
cmp eax, 6
jne 0x1800b08bd
popf
pop rax
jmp 0x1800b0cc6
cmp eax, 0x2f
jne 0x1800b08cc
popf
pop rax
jmp 0x1800b2114
cmp eax, 0x12
jne 0x1800b08db
popf
pop rax
jmp 0x1800b1369
cmp eax, 0x21
jne 0x1800b08ea
popf
pop rax
jmp 0x1800b1a8c
cmp eax, 0x1f
jne 0x1800b08f9
popf
pop rax
jmp 0x1800b191b
cmp eax, 0xb
jne 0x1800b0908
popf
pop rax
jmp 0x1800b0f20
cmp eax, 0xf
jne 0x1800b0917
popf
pop rax
jmp 0x1800b11a7
cmp eax, 0x15
jne 0x1800b0926
popf
pop rax
jmp 0x1800b14f2
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x1800b09aa
push rax
pushf
mov eax, 0xfb2d9edf
pushf
not eax
add eax, 0xe12149bc
xor eax, 0x945f9140
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x87219bcc
xor eax, 0x9ed2df0f
rol eax, 0x32
popf
pushf
not eax
add eax, 0xdde6cf83
xor eax, 0xf0c8319b
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xfacc5128
xor eax, 0x9a58d68e
rol eax, 0x94
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x54264d7a
pushf
not eax
add eax, 0xf9391abf
xor eax, 0x82c49bff
rol eax, 0x36
popf
pushf
not eax
add eax, 0x95415b2c
xor eax, 0xff776596
rol eax, 0x49
popf
jmp 0x1800b061a
test rdx, rdx
jne 0x1800b0a28
push rax
pushf
mov eax, 0xf0f31563
pushf
not eax
add eax, 0xf6f850e0
xor eax, 0x901dfeb8
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xedd1e172
xor eax, 0x940511e0
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x9a9614fa
xor eax, 0xe5ed93cf
rol eax, 0x1c
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x4608507d
pushf
not eax
add eax, 0xe7f38aa6
xor eax, 0xa1450ba1
rol eax, 0x87
popf
pushf
not eax
add eax, 0x81b819b1
xor eax, 0x911c063f
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xd2fbb834
xor eax, 0xf4ba0eac
rol eax, 0xa9
popf
jmp 0x1800b061a
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.1800c76cf
or eax, 0xffffffff
jmp 0x1800b22ae
mov rax, r15
lea rcx, [0x1fe288c20]
pushf
sub rcx, 0x7e2463b0
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x1800b0b44
push rax
pushf
mov eax, 0x76ee94c4
pushf
not eax
add eax, 0x9c6c6ae3
xor eax, 0x9d653b9d
rol eax, 3
popf
pushf
not eax
add eax, 0xbfb08c2f
xor eax, 0xfea92011
rol eax, 0x8c
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x32a0458c
pushf
not eax
add eax, 0xdc558394
xor eax, 0xaf5f5f7d
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x9e13fe73
xor eax, 0xa8242e33
rol eax, 0x19
popf
pushf
not eax
add eax, 0xead2333d
xor eax, 0xe7b380db
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xaacebe57
xor eax, 0xcb5dfde7
rol eax, 2
popf
jmp 0x1800b061a
mov eax, r14d
not eax
test al, 1
je 0x1800b0bec
push rax
pushf
mov eax, 0x19eeb12f
pushf
not eax
add eax, 0x9c03cfcf
xor eax, 0xd70cb0a7
rol eax, 0x80
popf
pushf
not eax
add eax, 0x97d449d1
xor eax, 0xd8dfd057
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x92d7b35a
xor eax, 0xab0a85b4
rol eax, 0xb8
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x4192d7c0
pushf
not eax
add eax, 0xbf47101f
xor eax, 0xd11bef09
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xb57566d0
xor eax, 0x8ac74d2c
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xc2de0fab
xor eax, 0xd7888e8b
rol eax, 0x96
popf
pushf
not eax
add eax, 0x8210db46
xor eax, 0xf4d393a6
rol eax, 0xac
popf
jmp 0x1800b061a
test byte [rcx + r13*8 + 0x38], 0x20
je 0x1800b0c80
push rax
pushf
mov eax, 0x49a2594d
pushf
not eax
add eax, 0x90e4d8f3
xor eax, 0xf2afb8fa
rol eax, 0x89
popf
pushf
not eax
add eax, 0xa4b995b4
xor eax, 0xc52ad648
rol eax, 0x87
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xf62515b2
pushf
not eax
add eax, 0xb41b242c
xor eax, 0x8ee708af
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xf5338017
xor eax, 0xfea10194
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xbd35026a
xor eax, 0x8693267f
rol eax, 0x99
popf
jmp 0x1800b061a
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.1800e23ea
push rax
pushf
mov eax, 0x10ae0ed8
pushf
not eax
add eax, 0xd42b9325
xor eax, 0xdbe6c60b
rol eax, 0x64
popf
pushf
not eax
add eax, 0xcfde5426
xor eax, 0xda617faf
rol eax, 0x14
popf
pushf
not eax
add eax, 0xf3c94ea2
xor eax, 0xcb098878
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xe68afe80
xor eax, 0xb918f27c
rol eax, 0xe8
popf
jmp 0x1800b061a
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.180070be9
lea rdx, [0x1e1094ca3]
pushf
sub rdx, 0x61052433
popf
test eax, eax
je 0x1800b0d86
push rax
pushf
mov eax, 0x9d2273c2
pushf
not eax
add eax, 0x8763a799
xor eax, 0x8ce02f8b
rol eax, 0x25
popf
pushf
not eax
add eax, 0xa140b056
xor eax, 0xcd1d20a9
rol eax, 0x19
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xe4ab7875
pushf
not eax
add eax, 0x9fca8a14
xor eax, 0xf801b8fd
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x84c89df8
xor eax, 0xda17cd30
rol eax, 0xae
popf
jmp 0x1800b061a
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x1800b0dfb
push rax
pushf
mov eax, 0xc51f6902
pushf
not eax
add eax, 0xe3f20b97
xor eax, 0x96edcb90
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xc23bd621
xor eax, 0x90d2d198
rol eax, 0xe7
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x79994fff
pushf
not eax
add eax, 0xc4e178a1
xor eax, 0xd41fe413
rol eax, 0xec
popf
pushf
not eax
add eax, 0xe3a02023
xor eax, 0xdb877c0e
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xf87004fb
xor eax, 0xbc9d4c58
rol eax, 0xf2
popf
jmp 0x1800b061a
cmp byte [rbx + 0x28], dil
jne 0x1800b0e7a
push rax
pushf
mov eax, 0x53d123b
pushf
not eax
add eax, 0xd33dd09c
xor eax, 0xc8623c59
rol eax, 0x21
popf
pushf
not eax
add eax, 0xd043df37
xor eax, 0xc37edace
rol eax, 0x40
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xbc06742
pushf
not eax
add eax, 0xd62737cc
xor eax, 0x9af5576a
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xd6b980bb
xor eax, 0x8d0d93db
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb381c01b
xor eax, 0xba804968
rol eax, 0x65
popf
pushf
not eax
add eax, 0x9147ca9e
xor eax, 0x8113cbcb
rol eax, 0x5c
popf
jmp 0x1800b061a
mov rcx, rbx
call fcn.1800f9f6e
lea rdx, [0x1dada5ceb]
pushf
sub rdx, 0x5ad6347b
popf
push rax
pushf
mov eax, 0xccd4471b
pushf
not eax
add eax, 0x8e1e791f
xor eax, 0x87616b10
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x9c93234e
xor eax, 0xe701e5eb
rol eax, 0xb8
popf
jmp 0x1800b061a
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x1800b0f73
push rax
pushf
mov eax, 0xbda394c1
pushf
not eax
add eax, 0xdfd44ad4
xor eax, 0xfb61ab01
rol eax, 0x95
popf
pushf
not eax
add eax, 0xf0169261
xor eax, 0xae5d9a26
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xa0ff0570
xor eax, 0xbd85c77e
rol eax, 0x36
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x5e01c429
pushf
not eax
add eax, 0xaccee675
xor eax, 0xc12f2e9f
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xea38777f
xor eax, 0xb51473fb
rol eax, 0x98
popf
jmp 0x1800b061a
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x1800b0ffb
push rax
pushf
mov eax, 0x74874d77
pushf
not eax
add eax, 0xaa533088
xor eax, 0xca974025
rol eax, 0x51
popf
pushf
not eax
add eax, 0xa97aa82d
xor eax, 0xcff2b6ff
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xc35829f6
xor eax, 0xf8e067fd
rol eax, 0xd
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x2b654f0c
pushf
not eax
add eax, 0xf3f1eb4b
xor eax, 0x8b52a17d
rol eax, 0x25
popf
pushf
not eax
add eax, 0xea08c975
xor eax, 0x81cb4f85
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xcac7f01b
xor eax, 0xa3d71c4a
rol eax, 0xad
popf
pushf
not eax
add eax, 0xbc2c5c42
xor eax, 0xcc0ec12f
rol eax, 0xc4
popf
jmp 0x1800b061a
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x1800b1062
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1800b10c9
push rax
pushf
mov eax, 0x9cb14f35
pushf
not eax
add eax, 0xf4e7e84b
xor eax, 0xc6013d43
rol eax, 0x83
popf
pushf
not eax
add eax, 0xa956f945
xor eax, 0xc1f9d16d
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xb03b1070
xor eax, 0xb4b83a2b
rol eax, 0x15
popf
pushf
not eax
add eax, 0x8733f42d
xor eax, 0xcbc66681
rol eax, 0x61
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x5bda88a7
pushf
not eax
add eax, 0xd162249d
xor eax, 0x8b5ff2b8
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xe4d23824
xor eax, 0xab538de6
rol eax, 0x14
popf
pushf
not eax
add eax, 0x9c3aa5b7
xor eax, 0xbc543c8f
rol eax, 0x66
popf
pushf
not eax
add eax, 0xa6567aac
xor eax, 0x97177abe
rol eax, 0x6b
popf
jmp 0x1800b061a
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x1800b1161
push rax
pushf
mov eax, 0x2e5a7649
pushf
not eax
add eax, 0xa34a376e
xor eax, 0xbe863cde
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x8cee1406
xor eax, 0xe0597426
rol eax, 0x2f
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xb3f051c6
pushf
not eax
add eax, 0xcb554c60
xor eax, 0xdb58281c
rol eax, 0x12
popf
pushf
not eax
add eax, 0xf0fa9909
xor eax, 0xf92188f5
rol eax, 0xae
popf
pushf
not eax
add eax, 0xacd724db
xor eax, 0xf49fd4ea
rol eax, 0x55
popf
jmp 0x1800b061a
sub ecx, 1
je 0x1800b1205
push rax
pushf
mov eax, 0x54b79e58
pushf
not eax
add eax, 0x8ddb226c
xor eax, 0x93d8ccc5
rol eax, 0x58
popf
pushf
not eax
add eax, 0x89acd1fa
xor eax, 0xe8c91847
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xc335ef1f
xor eax, 0xeaa70a34
rol eax, 0x95
popf
pushf
not eax
add eax, 0xe9099629
xor eax, 0xdf8e2e47
rol eax, 0x2c
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xe638b27b
pushf
not eax
add eax, 0x85535543
xor eax, 0xf934a245
rol eax, 0x81
popf
pushf
not eax
add eax, 0xf6f152ef
xor eax, 0xa29551ea
rol eax, 5
popf
jmp 0x1800b061a
cmp ecx, 1
jne 0x1800b129a
push rax
pushf
mov eax, 0xd480687e
pushf
not eax
add eax, 0xee5b7bb3
xor eax, 0xfebb0eb7
rol eax, 0x84
popf
pushf
not eax
add eax, 0xfa708ff7
xor eax, 0xc0cafc0b
rol eax, 0xa
popf
pushf
not eax
add eax, 0xdd6631b3
xor eax, 0xa42de3fc
rol eax, 0x26
popf
pushf
not eax
add eax, 0x92de5cee
xor eax, 0x8c3d95b3
rol eax, 0x94
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xbffe79f6
pushf
not eax
add eax, 0xdc0e7011
xor eax, 0xcae9d614
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xed7be7ff
xor eax, 0xf56e0fbd
rol eax, 0xea
popf
pushf
not eax
add eax, 0x8107ef40
xor eax, 0x90a6b7b0
rol eax, 0xd
popf
jmp 0x1800b061a
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x1800b1336
push rax
pushf
mov eax, 0xb262cced
pushf
not eax
add eax, 0xd244f349
xor eax, 0xc6c21b6c
rol eax, 0x78
popf
pushf
not eax
add eax, 0xf339d257
xor eax, 0xaccfd01a
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xbb9d0fd8
xor eax, 0x8d7cde5d
rol eax, 0xe6
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xb6ce3dc0
pushf
not eax
add eax, 0xe789207d
xor eax, 0x9ba72429
rol eax, 0xab
popf
pushf
not eax
add eax, 0xd9166db8
xor eax, 0xeae0605f
rol eax, 0xd4
popf
jmp 0x1800b061a
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0xe39935ca
pushf
not eax
add eax, 0xafac341e
xor eax, 0xff34756d
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xdb617732
xor eax, 0xdce12d19
rol eax, 0x21
popf
pushf
not eax
add eax, 0xcc358e02
xor eax, 0xa74e1b0a
rol eax, 0x71
popf
jmp 0x1800b061a
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.180153eb5
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x1800b1425
push rax
pushf
mov eax, 0x2c52c65d
pushf
not eax
add eax, 0xdac28118
xor eax, 0x8aad2797
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xa56bb722
xor eax, 0xe290cc03
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc507c77d
xor eax, 0x996ebdd2
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x8e8e8342
xor eax, 0xc883ca96
rol eax, 0xc9
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xb50a00d
pushf
not eax
add eax, 0xfcec0535
xor eax, 0xf7c5ffbe
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xeb57f77e
xor eax, 0xe4f938e4
rol eax, 0x56
popf
jmp 0x1800b061a
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x1800b14bf
push rax
pushf
mov eax, 0x6b3b21f3
pushf
not eax
add eax, 0xa5a1bd73
xor eax, 0x9e8ebc1c
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xf7174254
xor eax, 0xb8318b18
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x91bb9318
xor eax, 0xf80ed30c
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xa751e920
xor eax, 0x84e9adfd
rol eax, 0x6d
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xebc9f2b3
pushf
not eax
add eax, 0xf9360941
xor eax, 0xff9412e0
rol eax, 0xce
popf
pushf
not eax
add eax, 0xf04d192d
xor eax, 0xee419c6e
rol eax, 0x2c
popf
jmp 0x1800b061a
mov ecx, 0x213db2d2
pushf
not ecx
add ecx, 0xd0059d48
xor ecx, 0xd844f9a5
rol ecx, 0xf6
popf
pushf
not ecx
add ecx, 0xa7bc1f73
xor ecx, 0xbc75b461
rol ecx, 0x29
popf
pushf
not ecx
add ecx, 0x8ca2b8aa
xor ecx, 0xb50d1ae2
rol ecx, 0xdd
popf
call fcn.180153eb5
mov ecx, 0x7176589c
pushf
not ecx
add ecx, 0xe129c7c9
xor ecx, 0xe35f588f
rol ecx, 0x19
popf
pushf
not ecx
add ecx, 0xec0e2203
xor ecx, 0x9cb9f7aa
rol ecx, 0x74
popf
pushf
not ecx
add ecx, 0xbe79ed8e
xor ecx, 0xdae0e8b2
rol ecx, 0xb1
popf
cmp ax, cx
jne 0x1800b16b9
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x1800b1590
inc edi
push rax
pushf
mov eax, 0x5982838b
pushf
not eax
add eax, 0xa30db460
xor eax, 0xe7df26c6
rol eax, 0x30
popf
pushf
not eax
add eax, 0xefaaa435
xor eax, 0xdae46984
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xfc427275
xor eax, 0xd4a60e71
rol eax, 0x66
popf
jmp 0x1800b061a
add r15, 2
cmp r15, r12
jae 0x1800b1627
push rax
pushf
mov eax, 0xdc97067e
pushf
not eax
add eax, 0xe3be8b1c
xor eax, 0xde125a4c
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xb8d24f27
xor eax, 0xe5e345e2
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x984cd763
xor eax, 0xbbf3c514
rol eax, 0x3a
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x317a56f
pushf
not eax
add eax, 0x866746c7
xor eax, 0xb9de16c5
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xa979483b
xor eax, 0xbacfc937
rol eax, 0x35
popf
pushf
not eax
add eax, 0x9bc380da
xor eax, 0xa52daaaa
rol eax, 0x76
popf
jmp 0x1800b061a
jmp 0x1800b13b3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0xf697b689
pushf
not eax
add eax, 0x8bc74a22
xor eax, 0x903ac740
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x95c868dd
xor eax, 0x8a99fdf9
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xff7a2b59
xor eax, 0xa349f357
rol eax, 6
popf
pushf
not eax
add eax, 0xb33bd12f
xor eax, 0xb8ee02cd
rol eax, 0x28
popf
jmp 0x1800b061a
mov r12, qword [rbp - 0x18]
jmp 0x1800b1d52
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.180021988
push rax
pushf
mov eax, 0x12e7478a
pushf
not eax
add eax, 0x80ae634d
xor eax, 0xf24f1686
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x9edccb7f
xor eax, 0xfe2aaad8
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xee4d701d
xor eax, 0x8fb692c6
rol eax, 0x33
popf
pushf
not eax
add eax, 0xe1126420
xor eax, 0xe39497ec
rol eax, 0x24
popf
jmp 0x1800b061a
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1800b1d57
lea rdx, [0x1f0e17735]
pushf
sub rdx, 0x70dd4ec5
popf
push rax
pushf
mov eax, 0x8279feb1
pushf
not eax
add eax, 0xa8b37a69
xor eax, 0x88d32152
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xe9be0072
xor eax, 0x89339dad
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xd15445d5
xor eax, 0xfc66c153
rol eax, 0x3f
popf
jmp 0x1800b061a
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x1800b18e8
push rax
pushf
mov eax, 0x541aa2b8
pushf
not eax
add eax, 0xee856cd6
xor eax, 0xd163371e
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xb8b586a3
xor eax, 0xce4b21b0
rol eax, 0xad
popf
pushf
not eax
add eax, 0xf6a353dd
xor eax, 0xc1af7667
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xc09eca53
xor eax, 0xa49642c8
rol eax, 0x2c
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x4624db7c
pushf
not eax
add eax, 0x9752eeda
xor eax, 0xf442227f
rol eax, 0x55
popf
pushf
not eax
add eax, 0xf0f6a466
xor eax, 0xcca3a6df
rol eax, 0x54
popf
jmp 0x1800b061a
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x1800b197c
push rax
pushf
mov eax, 0x83f21c42
pushf
not eax
add eax, 0xf1376e44
xor eax, 0xd8fda9b7
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xde75337b
xor eax, 0xa32c7cd8
rol eax, 4
popf
pushf
not eax
add eax, 0xedcb9b65
xor eax, 0xc7b345e7
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xc5fd0264
xor eax, 0x9c16fc1b
rol eax, 0xb1
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x1f9eb809
pushf
not eax
add eax, 0xd051bfed
xor eax, 0xdd569a92
rol eax, 0x40
popf
pushf
not eax
add eax, 0x89cfb7fb
xor eax, 0xa68bad42
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xaaf62819
xor eax, 0xdef96510
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xbbd68cec
xor eax, 0xe799e9f8
rol eax, 0x57
popf
jmp 0x1800b061a
sub ecx, 1
je 0x1800b1a33
push rax
pushf
mov eax, 0x3485a5ed
pushf
not eax
add eax, 0x8e87fd53
xor eax, 0xe37d1892
rol eax, 0x67
popf
pushf
not eax
add eax, 0xb4ddff62
xor eax, 0xed68e2f0
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xded51b63
xor eax, 0x95a6894e
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xd9379fe7
xor eax, 0xe4722dd8
rol eax, 0x23
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x68b52266
pushf
not eax
add eax, 0xdab1cd04
xor eax, 0xbfcac153
rol eax, 0xee
popf
pushf
not eax
add eax, 0xfc57f32d
xor eax, 0x99dd1f70
rol eax, 0x19
popf
pushf
not eax
add eax, 0xd87b47e6
xor eax, 0xea2814d8
rol eax, 0x72
popf
pushf
not eax
add eax, 0x8c1db183
xor eax, 0xc02d66fb
rol eax, 7
popf
jmp 0x1800b061a
cmp ecx, 1
jne 0x1800b1ac8
push rax
pushf
mov eax, 0x7949bf1c
pushf
not eax
add eax, 0x94557ab8
xor eax, 0xde955059
rol eax, 0xd4
popf
pushf
not eax
add eax, 0x87d07ca3
xor eax, 0xcba422f0
rol eax, 0x5f
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x6d6beaf4
pushf
not eax
add eax, 0x8a2ffd67
xor eax, 0xecaeb59e
rol eax, 0x67
popf
pushf
not eax
add eax, 0xa68eb89a
xor eax, 0xc35d3e83
rol eax, 0x48
popf
pushf
not eax
add eax, 0xf3092564
xor eax, 0x8b09a2b1
rol eax, 0x93
popf
jmp 0x1800b061a
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1800a7e80
jmp 0x1800b17c7
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1800f3377
jmp 0x1800b17c7
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.18007684f
jmp 0x1800b17c7
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x1800b1c43
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800b1ca6
push rax
pushf
mov eax, 0x1ef621a8
pushf
not eax
add eax, 0xe9acdaea
xor eax, 0x8a795b74
rol eax, 3
popf
pushf
not eax
add eax, 0xe85334b2
xor eax, 0x97297505
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xe90c1d93
xor eax, 0x9fe426d1
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xb5ff659b
xor eax, 0xf9bee27f
rol eax, 0x48
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xd2351afb
pushf
not eax
add eax, 0xe85e1cd6
xor eax, 0x86f7449b
rol eax, 0xb
popf
pushf
not eax
add eax, 0xc78975a8
xor eax, 0x8111e1b3
rol eax, 8
popf
pushf
not eax
add eax, 0xdfc12aea
xor eax, 0xe1389897
rol eax, 0x24
popf
jmp 0x1800b061a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0xcc49c652
pushf
not eax
add eax, 0x8da350c1
xor eax, 0xab2ab827
rol eax, 0x94
popf
pushf
not eax
add eax, 0xe8dad7bb
xor eax, 0xa4b1f085
rol eax, 0x53
popf
pushf
not eax
add eax, 0xc14389f1
xor eax, 0xde56fd11
rol eax, 0xb
popf
pushf
not eax
add eax, 0x831311fa
xor eax, 0x8f1878f7
rol eax, 0x82
popf
jmp 0x1800b061a
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0x620dfddf
pushf
not eax
add eax, 0xbd2d6f19
xor eax, 0xfa3eadc0
rol eax, 0x17
popf
pushf
not eax
add eax, 0xbf6fdbc6
xor eax, 0x9dde87bd
rol eax, 0x54
popf
pushf
not eax
add eax, 0xa50b5e0e
xor eax, 0xb9934bbf
rol eax, 0x45
popf
pushf
not eax
add eax, 0xb77831e4
xor eax, 0xbcf3e815
rol eax, 0xad
popf
jmp 0x1800b061a
lea rdx, [0x1df0261f7]
pushf
sub rdx, 0x5efe3987
popf
push rax
pushf
mov eax, 0x5f958e58
pushf
not eax
add eax, 0xbc817a83
xor eax, 0xca5a0c6b
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xca5c0d69
xor eax, 0xdf28644b
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x82935ec0
xor eax, 0xfd89b691
rol eax, 0x95
popf
pushf
not eax
add eax, 0xf648a087
xor eax, 0xeba0da0d
rol eax, 0xe4
popf
jmp 0x1800b061a
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x1800b1e5f
push rax
pushf
mov eax, 0xe27dc08e
pushf
not eax
add eax, 0xe970104f
xor eax, 0x8efd00aa
rol eax, 0xef
popf
pushf
not eax
add eax, 0xd1877fe7
xor eax, 0xa9d23bd5
rol eax, 0x22
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xca05211a
pushf
not eax
add eax, 0xe39df67d
xor eax, 0xbe37fd4b
rol eax, 0xae
popf
pushf
not eax
add eax, 0x95c8f24a
xor eax, 0xa2d53efd
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9080de46
xor eax, 0xf651003d
rol eax, 0x66
popf
pushf
not eax
add eax, 0xf8e12992
xor eax, 0xf20f3b59
rol eax, 0x1e
popf
jmp 0x1800b061a
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x1800b1f05
push rax
pushf
mov eax, 0xbb572e44
pushf
not eax
add eax, 0xcb68528e
xor eax, 0xe3de7cad
rol eax, 0x49
popf
pushf
not eax
add eax, 0xffcf44e4
xor eax, 0xc0fc7d74
rol eax, 0xac
popf
pushf
not eax
add eax, 0xbfee02b2
xor eax, 0xaf755393
rol eax, 0xd8
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x612e236d
pushf
not eax
add eax, 0xe1072d8f
xor eax, 0xe49e7dbf
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x8255369c
xor eax, 0xdb834fb4
rol eax, 0x99
popf
jmp 0x1800b061a
cmp eax, 5
jne 0x1800b1f83
push rax
pushf
mov eax, 0x99bd56f2
pushf
not eax
add eax, 0xbe474744
xor eax, 0x8b657033
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xa0305d67
xor eax, 0xe86b1bae
rol eax, 0xf8
popf
pushf
not eax
add eax, 0xc6a31d6c
xor eax, 0xd200c895
rol eax, 0xba
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x32e0eaa5
pushf
not eax
add eax, 0x8f0b3788
xor eax, 0xe9d1f053
rol eax, 0xc4
popf
pushf
not eax
add eax, 0x92545e53
xor eax, 0x936b54ac
rol eax, 0x39
popf
pushf
not eax
add eax, 0x9bfde399
xor eax, 0xf2834fee
rol eax, 0x37
popf
pushf
not eax
add eax, 0xf0d7a308
xor eax, 0xfd0e55ae
rol eax, 0x54
popf
jmp 0x1800b061a
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x1800b0a9d
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.1800c875c
jmp 0x1800b0a9d
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x1800b20bb
push rax
pushf
mov eax, 0xbad14a4c
pushf
not eax
add eax, 0xf030f0e7
xor eax, 0x9fbd727d
rol eax, 0x76
popf
pushf
not eax
add eax, 0xba778b34
xor eax, 0x808cc5fe
rol eax, 0x39
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0xf2c86da5
pushf
not eax
add eax, 0xfa603064
xor eax, 0x8a481253
rol eax, 0xee
popf
pushf
not eax
add eax, 0xb39bcffb
xor eax, 0xfc8aa376
rol eax, 0x20
popf
pushf
not eax
add eax, 0xe22e1217
xor eax, 0xcca0ff31
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xcb722456
xor eax, 0xd730d8df
rol eax, 0xc1
popf
jmp 0x1800b061a
cmp byte [rsi], 0x1a
je 0x1800b2172
push rax
pushf
mov eax, 0xd3837707
pushf
not eax
add eax, 0xb5563e88
xor eax, 0xa2334dfb
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xbaf42f05
xor eax, 0xf574462d
rol eax, 9
popf
pushf
not eax
add eax, 0xd1a831b4
xor eax, 0xa8fd160e
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x8406ce7c
xor eax, 0xe9529175
rol eax, 0xc9
popf
jmp 0x1800b061a
push rax
pushf
mov eax, 0x38aea3a8
pushf
not eax
add eax, 0xd8668422
xor eax, 0xf0b9df3f
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xdeeba73b
xor eax, 0xe1d18f02
rol eax, 0x57
popf
jmp 0x1800b061a
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x1800b0a9d
mov eax, dword [rbp - 0x2c]
sub eax, edi
jmp 0x1800b22ae
xor eax, eax
push rax
pushf
mov eax, 0x9799f801
pushf
not eax
add eax, 0x832364f1
xor eax, 0xcd3e4bab
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xd0808c11
xor eax, 0x91806444
rol eax, 0x81
popf
pushf
not eax
add eax, 0xb8bf373c
xor eax, 0xcb76ef60
rol eax, 0x44
popf
pushf
not eax
add eax, 0xe398def2
xor eax, 0xb6959d57
rol eax, 0x60
popf
jmp 0x1800b061a
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret