Function at 0x140158558
Capabilities:
Authenticate hmac
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xa49fcaf6
pushf
not eax
add eax, 0xc74fa35c
xor eax, 0x9362700f
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xc453a389
xor eax, 0xbacd6673
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xe67c806f
xor eax, 0xb9bb7610
rol eax, 0x89
popf
pushf
not eax
add eax, 0xc939e0f0
xor eax, 0xaf73beb4
rol eax, 0x90
popf
cmp eax, 0x29
jne 0x1401585bb
popf
pop rax
jmp 0x140159d42
cmp eax, 0
jne 0x1401585ca
popf
pop rax
jmp 0x1401588b8
cmp eax, 3
jne 0x1401585d9
popf
pop rax
jmp 0x140158a6a
cmp eax, 1
jne 0x1401585e8
popf
pop rax
jmp 0x14015895c
cmp eax, 0xd
jne 0x1401585f7
popf
pop rax
jmp 0x140158ff9
cmp eax, 0x1a
jne 0x140158606
popf
pop rax
jmp 0x14015969c
cmp eax, 0xe
jne 0x140158615
popf
pop rax
jmp 0x14015907b
cmp eax, 0x31
jne 0x140158624
popf
pop rax
jmp 0x14015a15e
cmp eax, 0x19
jne 0x140158633
popf
pop rax
jmp 0x14015964d
cmp eax, 8
jne 0x140158642
popf
pop rax
jmp 0x140158d4b
cmp eax, 0x2a
jne 0x140158651
popf
pop rax
jmp 0x140159dc7
cmp eax, 0x17
jne 0x140158660
popf
pop rax
jmp 0x140159559
cmp eax, 0x1c
jne 0x14015866f
popf
pop rax
jmp 0x140159722
cmp eax, 0x2e
jne 0x14015867e
popf
pop rax
jmp 0x140159f9e
cmp eax, 0x18
jne 0x14015868d
popf
pop rax
jmp 0x1401595ee
cmp eax, 0x2b
jne 0x14015869c
popf
pop rax
jmp 0x140159e5a
cmp eax, 0x1b
jne 0x1401586ab
popf
pop rax
jmp 0x1401596d8
cmp eax, 0x2d
jne 0x1401586ba
popf
pop rax
jmp 0x140159f5b
cmp eax, 0x23
jne 0x1401586c9
popf
pop rax
jmp 0x140159a8d
cmp eax, 0x25
jne 0x1401586d8
popf
pop rax
jmp 0x140159b6d
cmp eax, 0x32
jne 0x1401586e7
popf
pop rax
jmp 0x14015a1c1
cmp eax, 0x13
jne 0x1401586f6
popf
pop rax
jmp 0x140159332
cmp eax, 0x33
jne 0x140158705
popf
pop rax
jmp 0x14015a21c
cmp eax, 0x24
jne 0x140158714
popf
pop rax
jmp 0x140159afd
cmp eax, 0x1e
jne 0x140158723
popf
pop rax
jmp 0x1401597cc
cmp eax, 0xc
jne 0x140158732
popf
pop rax
jmp 0x140158f71
cmp eax, 0x26
jne 0x140158741
popf
pop rax
jmp 0x140159c35
cmp eax, 0x27
jne 0x140158750
popf
pop rax
jmp 0x140159c71
cmp eax, 0x30
jne 0x14015875f
popf
pop rax
jmp 0x14015a113
cmp eax, 0x10
jne 0x14015876e
popf
pop rax
jmp 0x1401591a4
cmp eax, 0x2c
jne 0x14015877d
popf
pop rax
jmp 0x140159efe
cmp eax, 9
jne 0x14015878c
popf
pop rax
jmp 0x140158df9
cmp eax, 4
jne 0x14015879b
popf
pop rax
jmp 0x140158b55
cmp eax, 0x16
jne 0x1401587aa
popf
pop rax
jmp 0x140159509
cmp eax, 0x28
jne 0x1401587b9
popf
pop rax
jmp 0x140159cd7
cmp eax, 0xa
jne 0x1401587c8
popf
pop rax
jmp 0x140158e9e
cmp eax, 0x22
jne 0x1401587d7
popf
pop rax
jmp 0x140159a30
cmp eax, 0x14
jne 0x1401587e6
popf
pop rax
jmp 0x1401593d7
cmp eax, 7
jne 0x1401587f5
popf
pop rax
jmp 0x140158cbf
cmp eax, 5
jne 0x140158804
popf
pop rax
jmp 0x140158bea
cmp eax, 2
jne 0x140158813
popf
pop rax
jmp 0x140158a00
cmp eax, 0x20
jne 0x140158822
popf
pop rax
jmp 0x1401598e4
cmp eax, 0x1d
jne 0x140158831
popf
pop rax
jmp 0x140159774
cmp eax, 0x11
jne 0x140158840
popf
pop rax
jmp 0x140159239
cmp eax, 6
jne 0x14015884f
popf
pop rax
jmp 0x140158c58
cmp eax, 0x2f
jne 0x14015885e
popf
pop rax
jmp 0x14015a05c
cmp eax, 0x12
jne 0x14015886d
popf
pop rax
jmp 0x1401592e8
cmp eax, 0x21
jne 0x14015887c
popf
pop rax
jmp 0x140159988
cmp eax, 0x1f
jne 0x14015888b
popf
pop rax
jmp 0x140159863
cmp eax, 0xb
jne 0x14015889a
popf
pop rax
jmp 0x140158efe
cmp eax, 0xf
jne 0x1401588a9
popf
pop rax
jmp 0x140159113
cmp eax, 0x15
jne 0x1401588b8
popf
pop rax
jmp 0x14015945e
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x140158916
push rax
pushf
mov eax, 0xd60243cc
pushf
not eax
add eax, 0x9a06c9a1
xor eax, 0x8fa876d2
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xf8da3ee9
xor eax, 0xbc19abfd
rol eax, 0x50
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x25b5f268
pushf
not eax
add eax, 0xa916e883
xor eax, 0x89c6b238
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xae69a455
xor eax, 0xa5f4823f
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xcc5881b0
xor eax, 0xc5dd2b64
rol eax, 0x98
popf
jmp 0x1401585ac
test rdx, rdx
jne 0x1401589a7
push rax
pushf
mov eax, 0x49245367
pushf
not eax
add eax, 0xe1b5a401
xor eax, 0xea16c3c1
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x8f607183
xor eax, 0x9149365b
rol eax, 0x30
popf
pushf
not eax
add eax, 0x92023f19
xor eax, 0xe3eba59a
rol eax, 0xc4
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xe8fc5be7
pushf
not eax
add eax, 0xa3ca5ce8
xor eax, 0xb1db1e5b
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xc8b9185b
xor eax, 0xf7f3aa1a
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x85f6d237
xor eax, 0x97d204de
rol eax, 0x49
popf
pushf
not eax
add eax, 0xd3e5216f
xor eax, 0xf9b22185
rol eax, 0xb4
popf
jmp 0x1401585ac
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.1401662d1
or eax, 0xffffffff
jmp 0x14015a21c
mov rax, r15
lea rcx, [0x18db9d8d9]
pushf
sub rcx, 0x4db6bd79
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x140158afc
push rax
pushf
mov eax, 0x5b601554
pushf
not eax
add eax, 0xfe4e3814
xor eax, 0xc591c605
rol eax, 0x74
popf
pushf
not eax
add eax, 0xe4318d9a
xor eax, 0xb9afdeb7
rol eax, 0x75
popf
pushf
not eax
add eax, 0x8574df96
xor eax, 0x8b015abb
rol eax, 0x44
popf
pushf
not eax
add eax, 0xe14803b5
xor eax, 0x9229f73b
rol eax, 0x57
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x90aeb138
pushf
not eax
add eax, 0xb1f7d926
xor eax, 0x944caba6
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xa8e3c352
xor eax, 0xb3b6f538
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xfe6d4d3b
xor eax, 0xf9e236e9
rol eax, 0xba
popf
pushf
not eax
add eax, 0xb080f206
xor eax, 0xe29c9936
rol eax, 0x1c
popf
jmp 0x1401585ac
mov eax, r14d
not eax
test al, 1
je 0x140158bb7
push rax
pushf
mov eax, 0xd21ebaf1
pushf
not eax
add eax, 0x9ae9ad20
xor eax, 0xb6a66000
rol eax, 0x10
popf
pushf
not eax
add eax, 0xc1d0b13e
xor eax, 0x9cfa4549
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xba510ed2
xor eax, 0xfac4697e
rol eax, 0x29
popf
pushf
not eax
add eax, 0xa5f212de
xor eax, 0x89f9a1f5
rol eax, 0xde
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x291f5a51
pushf
not eax
add eax, 0xecd62caf
xor eax, 0xe53ea1f5
rol eax, 0x49
popf
pushf
not eax
add eax, 0xfb8f68ab
xor eax, 0xeba8185d
rol eax, 9
popf
jmp 0x1401585ac
test byte [rcx + r13*8 + 0x38], 0x20
je 0x140158c25
push rax
pushf
mov eax, 0x8ad6f697
pushf
not eax
add eax, 0x99096256
xor eax, 0xab4a50fc
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xd85dc528
xor eax, 0xe0228283
rol eax, 2
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x43effbdb
pushf
not eax
add eax, 0xbd76b18d
xor eax, 0xcb400620
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xa3477dcd
xor eax, 0xf080ca3c
rol eax, 0
popf
jmp 0x1401585ac
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.140174a70
push rax
pushf
mov eax, 0x6a46dd88
pushf
not eax
add eax, 0xdd9bd4ed
xor eax, 0xd46d4c2f
rol eax, 0x62
popf
pushf
not eax
add eax, 0xe9fc644c
xor eax, 0xc58f72b2
rol eax, 0xd6
popf
pushf
not eax
add eax, 0x99a5bec1
xor eax, 0x9f4a9575
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xf1ac6b09
xor eax, 0xb5421574
rol eax, 0x26
popf
jmp 0x1401585ac
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.1401339f0
lea rdx, [0x1aef5120c]
pushf
sub rdx, 0x6ef1f6ac
popf
test eax, eax
je 0x140158d18
push rax
pushf
mov eax, 0x8fe8be76
pushf
not eax
add eax, 0x93725950
xor eax, 0xc3644d2b
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xf70a5772
xor eax, 0x9eec9c71
rol eax, 0x82
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x90d5e30d
pushf
not eax
add eax, 0xf2f2163f
xor eax, 0x80d88016
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xae01338d
xor eax, 0x8e7620c7
rol eax, 0x82
popf
jmp 0x1401585ac
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x140158da0
push rax
pushf
mov eax, 0xfb66369c
pushf
not eax
add eax, 0xd590f036
xor eax, 0xba661a83
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xc7cc633d
xor eax, 0x84fd1d8b
rol eax, 0x23
popf
pushf
not eax
add eax, 0x9910c1c7
xor eax, 0xdc707e01
rol eax, 0x37
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xf7bc759c
pushf
not eax
add eax, 0xfbbd89a4
xor eax, 0xa62d5542
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xa1cf5fdc
xor eax, 0xc4f2280d
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xbad8a2b3
xor eax, 0xe0d5b996
rol eax, 0xa
popf
pushf
not eax
add eax, 0xd05ab15e
xor eax, 0x83a35ac7
rol eax, 0x61
popf
jmp 0x1401585ac
cmp byte [rbx + 0x28], dil
jne 0x140158e58
push rax
pushf
mov eax, 0xcdec8e40
pushf
not eax
add eax, 0xcafdc04b
xor eax, 0xdc7304d6
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xdfb71e32
xor eax, 0xab7a21f2
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x8497e68f
xor eax, 0xd734acd0
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xe845b0f6
xor eax, 0xde226502
rol eax, 0x1e
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x79194eb1
pushf
not eax
add eax, 0x96475161
xor eax, 0xff31e3b2
rol eax, 0x88
popf
pushf
not eax
add eax, 0xefe7a1b8
xor eax, 0xa097b160
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xd9c2912d
xor eax, 0xcd973a23
rol eax, 0xe8
popf
jmp 0x1401585ac
mov rcx, rbx
call fcn.140185b5a
lea rdx, [0x194448376]
pushf
sub rdx, 0x54416816
popf
push rax
pushf
mov eax, 0xe6981aa8
pushf
not eax
add eax, 0xa2b0bdc5
xor eax, 0xdeaa2c67
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xcc647f3b
xor eax, 0x8bc98e58
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xc6e1e51d
xor eax, 0x9cd8f425
rol eax, 0xe1
popf
jmp 0x1401585ac
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x140158f3e
push rax
pushf
mov eax, 0xccf51bc2
pushf
not eax
add eax, 0xf263a734
xor eax, 0xc1228e50
rol eax, 0x93
popf
pushf
not eax
add eax, 0xe46bb6b4
xor eax, 0xbb5c9463
rol eax, 0x3e
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x87792e5a
pushf
not eax
add eax, 0xc7847b35
xor eax, 0xdff479b7
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xaa748990
xor eax, 0xf3f48ca0
rol eax, 0x1f
popf
jmp 0x1401585ac
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x140158fc6
push rax
pushf
mov eax, 0xcc1e4a2c
pushf
not eax
add eax, 0xd57c3f84
xor eax, 0x8b1eaf81
rol eax, 0x96
popf
pushf
not eax
add eax, 0xa6fa1c0a
xor eax, 0xe1ecfa67
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x9a823895
xor eax, 0x94d6adf2
rol eax, 0x41
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x109f85ac
pushf
not eax
add eax, 0xfdaac1a8
xor eax, 0x897f53f2
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xd7db3a47
xor eax, 0xab4b2d45
rol eax, 0x92
popf
jmp 0x1401585ac
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x140159007
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x140159048
push rax
pushf
mov eax, 0x545afca6
pushf
not eax
add eax, 0xd9f36e52
xor eax, 0xcbf3021d
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa5199ecd
xor eax, 0xeafe7797
rol eax, 0x2b
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x84d471fb
pushf
not eax
add eax, 0xb642a2fd
xor eax, 0xf3299387
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xb23c50e1
xor eax, 0x8df82874
rol eax, 0xaf
popf
jmp 0x1401585ac
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x1401590e0
push rax
pushf
mov eax, 0x4a840811
pushf
not eax
add eax, 0xd54f6bb7
xor eax, 0x8a946450
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xdc45a0ab
xor eax, 0xc924bed9
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xb7002501
xor eax, 0xfc6baa2b
rol eax, 0x54
popf
pushf
not eax
add eax, 0xcba539a3
xor eax, 0x8ddaa12e
rol eax, 0x64
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xf17d738a
pushf
not eax
add eax, 0xf35eeaf4
xor eax, 0xd7708bff
rol eax, 0x22
popf
pushf
not eax
add eax, 0xecb80de7
xor eax, 0x91101b8b
rol eax, 0x8b
popf
jmp 0x1401585ac
sub ecx, 1
je 0x14015915e
push rax
pushf
mov eax, 0xe828a4a6
pushf
not eax
add eax, 0x80309e09
xor eax, 0x8f0836c6
rol eax, 0x97
popf
pushf
not eax
add eax, 0xf7c586ef
xor eax, 0xe5d5adc3
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x9dfcfc35
xor eax, 0xd9d0b02e
rol eax, 0xcc
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x386b4c5f
pushf
not eax
add eax, 0xe84e532a
xor eax, 0x92283b3d
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xd695346c
xor eax, 0xb2a3c831
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xee5b7c66
xor eax, 0xd9b1d34e
rol eax, 0x9f
popf
jmp 0x1401585ac
cmp ecx, 1
jne 0x1401591f3
push rax
pushf
mov eax, 0x3f9d7c14
pushf
not eax
add eax, 0xa32ff1ff
xor eax, 0xb22fd688
rol eax, 0x86
popf
pushf
not eax
add eax, 0xaf818945
xor eax, 0x9796f663
rol eax, 0x22
popf
pushf
not eax
add eax, 0xe468d9f1
xor eax, 0x962fbe20
rol eax, 0xe4
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x2e5635ef
pushf
not eax
add eax, 0x9aac4ec3
xor eax, 0x9990a72d
rol eax, 0x58
popf
pushf
not eax
add eax, 0x9b80c668
xor eax, 0xfde52cc7
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xf60f86bb
xor eax, 0xfba19a2d
rol eax, 0x9e
popf
jmp 0x1401585ac
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x14015928f
push rax
pushf
mov eax, 0x1f8f71a3
pushf
not eax
add eax, 0xa02ffc22
xor eax, 0xe8aa25e1
rol eax, 0xa2
popf
pushf
not eax
add eax, 0xafdf6602
xor eax, 0xf9e2305f
rol eax, 0xe
popf
pushf
not eax
add eax, 0x9f7b8dd6
xor eax, 0xf9969040
rol eax, 0xb0
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x5813f2c7
pushf
not eax
add eax, 0xe3ca387e
xor eax, 0x971b1a94
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xcba8c39c
xor eax, 0xecb9c95e
rol eax, 0x76
popf
pushf
not eax
add eax, 0xdc4a0ddf
xor eax, 0xf7206f5d
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd7fdab02
xor eax, 0xb6cb7f42
rol eax, 0x83
popf
jmp 0x1401585ac
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0x837661a1
pushf
not eax
add eax, 0xa6c6080a
xor eax, 0xc98de16b
rol eax, 0x89
popf
pushf
not eax
add eax, 0xb353be37
xor eax, 0xa51007f5
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xd5fb3d91
xor eax, 0xfd16f7a6
rol eax, 0xf
popf
jmp 0x1401585ac
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.1401a69b2
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x140159391
push rax
pushf
mov eax, 0x65421c9f
pushf
not eax
add eax, 0x905771ff
xor eax, 0x8615d3c0
rol eax, 0x25
popf
pushf
not eax
add eax, 0xaa3d1adb
xor eax, 0xec4d42ea
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x92a6aad4
xor eax, 0x82c049c5
rol eax, 0xa1
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x1a2b05e0
pushf
not eax
add eax, 0x92669012
xor eax, 0xb04d4038
rol eax, 0x10
popf
pushf
not eax
add eax, 0xb93f3560
xor eax, 0x82c6d398
rol eax, 4
popf
pushf
not eax
add eax, 0x96fae6b1
xor eax, 0xb7be8b9a
rol eax, 0x36
popf
jmp 0x1401585ac
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x140159418
push rax
pushf
mov eax, 0x445247c8
pushf
not eax
add eax, 0x97de5089
xor eax, 0xa00163f2
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe34b1fbb
xor eax, 0xfc301d55
rol eax, 0x76
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x17c55293
pushf
not eax
add eax, 0xc99c4d14
xor eax, 0x9990221c
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xeed5af54
xor eax, 0xe7cda27a
rol eax, 0x57
popf
pushf
not eax
add eax, 0xf8ca7cc1
xor eax, 0xf6890d7c
rol eax, 0x86
popf
jmp 0x1401585ac
mov ecx, 0xb14305f0
pushf
not ecx
add ecx, 0x9e3acbf2
xor ecx, 0xac01e18b
rol ecx, 0x55
popf
pushf
not ecx
add ecx, 0xe0849bbd
xor ecx, 0xc55151c5
rol ecx, 0x23
popf
pushf
not ecx
add ecx, 0xe8e9d26d
xor ecx, 0xda01c529
rol ecx, 0xee
popf
pushf
not ecx
add ecx, 0xd36d55ca
xor ecx, 0xe802c1ef
rol ecx, 0xa1
popf
call fcn.1401a69b2
mov ecx, 0x25f443a4
pushf
not ecx
add ecx, 0xd1780a5a
xor ecx, 0xda74baaa
rol ecx, 0x70
popf
pushf
not ecx
add ecx, 0xcaa8beb1
xor ecx, 0x8707c333
rol ecx, 0xd5
popf
pushf
not ecx
add ecx, 0xe201e6f1
xor ecx, 0xf0a8b4bf
rol ecx, 0x7b
popf
cmp ax, cx
jne 0x14015964d
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x140159511
inc edi
push rax
pushf
mov eax, 0xa2a20465
pushf
not eax
add eax, 0xd0a22f4f
xor eax, 0xe00c3547
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xbd2c31b2
xor eax, 0x8f2fda89
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x8cf72ed0
xor eax, 0x8f4d1e4b
rol eax, 0x56
popf
jmp 0x1401585ac
add r15, 2
cmp r15, r12
jae 0x140159595
push rax
pushf
mov eax, 0x172f60d6
pushf
not eax
add eax, 0xe2149648
xor eax, 0xc58fa3cb
rol eax, 0x80
popf
pushf
not eax
add eax, 0xa09966d0
xor eax, 0x90aed015
rol eax, 0x4c
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xf640380d
pushf
not eax
add eax, 0xd0bbf637
xor eax, 0x886fa2c9
rol eax, 0xef
popf
pushf
not eax
add eax, 0xda8d52e8
xor eax, 0xbefa6a2b
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xa9340aab
xor eax, 0xb9a68d2f
rol eax, 0x56
popf
pushf
not eax
add eax, 0xbd5dc71e
xor eax, 0x9cb04fea
rol eax, 0x20
popf
jmp 0x1401585ac
jmp 0x140159332
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x20aca816
pushf
not eax
add eax, 0x988aa91e
xor eax, 0x86bc49d0
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x8a86368a
xor eax, 0xc906200d
rol eax, 0x85
popf
pushf
not eax
add eax, 0xd5149629
xor eax, 0xade967b2
rol eax, 0x75
popf
jmp 0x1401585ac
mov r12, qword [rbp - 0x18]
jmp 0x140159c74
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.1400149c8
push rax
pushf
mov eax, 0x9bfba3c0
pushf
not eax
add eax, 0xff6c3266
xor eax, 0xc58559fe
rol eax, 0x1f
popf
pushf
not eax
add eax, 0xb3fc68b0
xor eax, 0xe082fd02
rol eax, 0x53
popf
jmp 0x1401585ac
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x140159c79
lea rdx, [0x1852ba8e4]
pushf
sub rdx, 0x45288d84
popf
push rax
pushf
mov eax, 0x7ae5c353
pushf
not eax
add eax, 0xda721fef
xor eax, 0xd7402a9a
rol eax, 0x98
popf
pushf
not eax
add eax, 0xe24dba5d
xor eax, 0xb33d9cc7
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xa6940eee
xor eax, 0xee00a4f1
rol eax, 0xb3
popf
jmp 0x1401585ac
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x140159830
push rax
pushf
mov eax, 0x3ce2c803
pushf
not eax
add eax, 0xf18ca433
xor eax, 0xa37b0d82
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xe0b991e5
xor eax, 0xa6949900
rol eax, 2
popf
pushf
not eax
add eax, 0xe396a174
xor eax, 0xfd5b68fb
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x9120791b
xor eax, 0x933ac1ca
rol eax, 0xca
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xce4bb028
pushf
not eax
add eax, 0xbf2ce61e
xor eax, 0x9d35dc38
rol eax, 0x50
popf
pushf
not eax
add eax, 0xb30a2b20
xor eax, 0xc93cbddf
rol eax, 0x1e
popf
jmp 0x1401585ac
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x14015989e
push rax
pushf
mov eax, 0x1411d567
pushf
not eax
add eax, 0xf64d6355
xor eax, 0x81180c6d
rol eax, 0xda
popf
pushf
not eax
add eax, 0xf91c8d65
xor eax, 0xf68fff5e
rol eax, 0x8d
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x8b3051af
pushf
not eax
add eax, 0xe7bfc946
xor eax, 0xc802e1e5
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xe7321f3e
xor eax, 0xecf96b68
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xd0b19757
xor eax, 0xaaefb140
rol eax, 0x88
popf
jmp 0x1401585ac
sub ecx, 1
je 0x140159942
push rax
pushf
mov eax, 0x5a714c4a
pushf
not eax
add eax, 0xf06f2805
xor eax, 0xa2f3292d
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf9c484be
xor eax, 0xfae862f2
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x8a99a56d
xor eax, 0x8f3bb6fa
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xae6076ec
xor eax, 0x9af0b873
rol eax, 0xca
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x53edb3de
pushf
not eax
add eax, 0xf2160308
xor eax, 0xbe664b82
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xebb4c7a4
xor eax, 0xf6548543
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xebccca55
xor eax, 0xe4ca6ca2
rol eax, 0xbe
popf
jmp 0x1401585ac
cmp ecx, 1
jne 0x1401599ea
push rax
pushf
mov eax, 0xa8932984
pushf
not eax
add eax, 0xc0e11863
xor eax, 0xe89acbd6
rol eax, 0x44
popf
pushf
not eax
add eax, 0xa25cb941
xor eax, 0xb84a1bbe
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xf8306202
xor eax, 0xb557175d
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xe194503f
xor eax, 0x84234d9e
rol eax, 0x3f
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x9358207d
pushf
not eax
add eax, 0xf9d0fae7
xor eax, 0xc28be9f1
rol eax, 9
popf
pushf
not eax
add eax, 0xdf0f7713
xor eax, 0xb8b83b11
rol eax, 0x71
popf
pushf
not eax
add eax, 0xb228c691
xor eax, 0xb47846d4
rol eax, 0xde
popf
jmp 0x1401585ac
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140153df7
jmp 0x140159722
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.14018092a
jmp 0x140159722
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140137c47
jmp 0x140159722
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x140159b8b
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140159bdb
push rax
pushf
mov eax, 0xc2376c40
pushf
not eax
add eax, 0xb4cfb0e4
xor eax, 0x8bc809a2
rol eax, 0x86
popf
pushf
not eax
add eax, 0xeb24ee4b
xor eax, 0xf280d09c
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xa2d43916
xor eax, 0xc208261b
rol eax, 0x15
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xf0a1b18
pushf
not eax
add eax, 0xde990db3
xor eax, 0x8f6ebcb1
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xc81fc886
xor eax, 0x80e2b636
rol eax, 0x31
popf
pushf
not eax
add eax, 0xcfcf86b2
xor eax, 0xfc7bba8a
rol eax, 0x32
popf
pushf
not eax
add eax, 0x85fbcaa1
xor eax, 0x854bda27
rol eax, 0x34
popf
jmp 0x1401585ac
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x4feee246
pushf
not eax
add eax, 0xe3d76435
xor eax, 0xdc39b8e1
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x89038e45
xor eax, 0xb50f409d
rol eax, 0x1e
popf
jmp 0x1401585ac
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0xeb298f8e
pushf
not eax
add eax, 0x8684a35b
xor eax, 0xd6b08ee3
rol eax, 0x57
popf
pushf
not eax
add eax, 0x9702309c
xor eax, 0xa9ba7a3d
rol eax, 0x23
popf
pushf
not eax
add eax, 0xfb186187
xor eax, 0x9d7827c3
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x86282720
xor eax, 0x9ef95767
rol eax, 9
popf
jmp 0x1401585ac
lea rdx, [0x1a565d8d6]
pushf
sub rdx, 0x6562bd76
popf
push rax
pushf
mov eax, 0x70c2f8e3
pushf
not eax
add eax, 0xc6192731
xor eax, 0x895d9c52
rol eax, 8
popf
pushf
not eax
add eax, 0xb1e86fd4
xor eax, 0x83f264d4
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xa81463aa
xor eax, 0xd6827cd6
rol eax, 0x31
popf
pushf
not eax
add eax, 0xe717d253
xor eax, 0xec9250db
rol eax, 0x3c
popf
jmp 0x1401585ac
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x140159d94
push rax
pushf
mov eax, 0x7befff4f
pushf
not eax
add eax, 0x8bd08e61
xor eax, 0xee2f4825
rol eax, 0xca
popf
pushf
not eax
add eax, 0x8ecc015c
xor eax, 0xdc4fd7cd
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xbe032be8
xor eax, 0xf16424bf
rol eax, 0xbe
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x5684d277
pushf
not eax
add eax, 0xf542ae06
xor eax, 0x8a6b9bfe
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xb8375194
xor eax, 0xe0294efa
rol eax, 4
popf
jmp 0x1401585ac
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x140159e27
push rax
pushf
mov eax, 0x5dd56fb1
pushf
not eax
add eax, 0xc3713583
xor eax, 0xe691f999
rol eax, 0xb5
popf
pushf
not eax
add eax, 0xd5647ff5
xor eax, 0xd2d7e30a
rol eax, 0x13
popf
pushf
not eax
add eax, 0xd6bb4425
xor eax, 0xb7de1c21
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xc149753a
xor eax, 0xfb5f7062
rol eax, 0xa1
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xfbccf46
pushf
not eax
add eax, 0x81b49abf
xor eax, 0xd5289960
rol eax, 0x57
popf
pushf
not eax
add eax, 0xe110b7dc
xor eax, 0xd65e4832
rol eax, 0xac
popf
jmp 0x1401585ac
cmp eax, 5
jne 0x140159eb8
push rax
pushf
mov eax, 0xb368228c
pushf
not eax
add eax, 0xa7fb3464
xor eax, 0xe5a9ffb1
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xf0e3e0ef
xor eax, 0xed48b9c9
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xee4e30a9
xor eax, 0xee55229e
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xdb001c79
xor eax, 0xafe6a480
rol eax, 0xcd
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xcd4f9db3
pushf
not eax
add eax, 0x809759bc
xor eax, 0xc837e518
rol eax, 0
popf
pushf
not eax
add eax, 0x9a5d4a32
xor eax, 0x90ff6365
rol eax, 0x77
popf
pushf
not eax
add eax, 0xf64a5445
xor eax, 0xd40348ab
rol eax, 0xdc
popf
jmp 0x1401585ac
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x140158a2f
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.140166b39
jmp 0x140158a2f
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x14015a003
push rax
pushf
mov eax, 0x7e3c9809
pushf
not eax
add eax, 0xae20bcd2
xor eax, 0xd45072bd
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x88bb18a9
xor eax, 0x8f3cd02d
rol eax, 0x52
popf
pushf
not eax
add eax, 0xc0765fc3
xor eax, 0xe19163d4
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xe55950f7
xor eax, 0xf8af9161
rol eax, 0x63
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0xb8d1adbe
pushf
not eax
add eax, 0xc6ad5b57
xor eax, 0x8a0909df
rol eax, 0x54
popf
pushf
not eax
add eax, 0xdf5c540b
xor eax, 0xfd2a00ff
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xb34fd228
xor eax, 0x8502fd23
rol eax, 0xf0
popf
pushf
not eax
add eax, 0xeff69989
xor eax, 0x9809e8d0
rol eax, 0x43
popf
jmp 0x1401585ac
cmp byte [rsi], 0x1a
je 0x14015a0ba
push rax
pushf
mov eax, 0xebebdb35
pushf
not eax
add eax, 0xdd8265fe
xor eax, 0x8c492705
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xae2cd6f7
xor eax, 0xa6b190f4
rol eax, 0x94
popf
pushf
not eax
add eax, 0x92495310
xor eax, 0x8dbb4aa3
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xabefc094
xor eax, 0x91d00cc5
rol eax, 0xaa
popf
jmp 0x1401585ac
push rax
pushf
mov eax, 0x7804df1c
pushf
not eax
add eax, 0xed1e3ad0
xor eax, 0xec6f2b86
rol eax, 0x12
popf
pushf
not eax
add eax, 0x9da7c928
xor eax, 0x91adef34
rol eax, 0x19
popf
pushf
not eax
add eax, 0xbbcfa447
xor eax, 0xc8d1205a
rol eax, 0x17
popf
pushf
not eax
add eax, 0x8715b50d
xor eax, 0xcd0dc275
rol eax, 0xc0
popf
jmp 0x1401585ac
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x140158a2f
mov eax, dword [rbp - 0x2c]
sub eax, edi
jmp 0x14015a21c
xor eax, eax
push rax
pushf
mov eax, 0xe0800bd9
pushf
not eax
add eax, 0x9ee60c6d
xor eax, 0xd7a3e803
rol eax, 0x49
popf
pushf
not eax
add eax, 0xe267bd7a
xor eax, 0xa95dea26
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x8ff5531c
xor eax, 0xf5e117fd
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x8093c6a9
xor eax, 0xcb145a90
rol eax, 0xa4
popf
jmp 0x1401585ac
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret