Function at 0x140001ca0
Capabilities:
Create new key via cryptacquirecontext
Delete file
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt
Get file size
Hash data via wincrypt
Initialize hashing via wincrypt
Read file on windows
Write file on windows

Disassembly:
push rbp
sub rsp, 0x5d0
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x548], 0xfffffffffffffffe
mov qword [rbp + 0xf8], rcx
and r8b, 1
mov byte [rbp + 0x546], r8b
mov qword [rbp + 0x538], rdx
mov rdx, qword [rbp + 0x538]
lea rcx, [rbp + 0x500]
call fcn.1400084c0
jmp 0x140001cec
lea rcx, [rbp + 0x520]
lea rdx, [rbp + 0x500]
call fcn.1400017f0
jmp 0x140001d04
lea rcx, [rbp + 0x520]
call fcn.140007460
cmp rax, 0x20
je 0x140001d30
mov byte [rbp + 0x547], 0
mov dword [rbp + 0x4fc], 1
jmp 0x140002b0e
mov dword [rbp + 0x4ac], 0
movsxd rax, dword [rbp + 0x4ac]
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0x520]
call fcn.140007460
mov rcx, rax
mov rax, qword [rbp + 0xf0]
cmp rax, rcx
jae 0x140001db6
movsxd rdx, dword [rbp + 0x4ac]
lea rcx, [rbp + 0x520]
call fcn.140008560
mov qword [rbp + 0xe8], rax
jmp 0x140001d86
mov rax, qword [rbp + 0xe8]
movzx eax, byte [rax]
mov cx, ax
movsxd rax, dword [rbp + 0x4ac]
mov word [rbp + rax*2 + 0x4b0], cx
mov eax, dword [rbp + 0x4ac]
add eax, 1
mov dword [rbp + 0x4ac], eax
jmp 0x140001d3a
lea rcx, [rbp + 0x480]
mov qword [rbp + 0xe0], rcx
call fcn.140004c50
mov rcx, qword [rbp + 0xf8]
lea rdx, [rbp + 0x478]
call fcn.1400085b0
mov rcx, qword [rbp + 0xf8]
lea rdx, [rbp + 0x470]
call fcn.140008610
mov r9, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0x470]
mov r8, qword [rbp + 0x478]
lea rcx, [rbp + 0x488]
call fcn.140008660
jmp 0x140001e15
lea rcx, [rbp + 0x488]
call fcn.140008750
mov qword [rbp + 0x468], rax
lea rcx, [rbp + 0x448]
call fcn.140008770
test byte [rbp + 0x546], 1
jne 0x140001e84
lea r8, [0x140075c20]
lea rcx, [rbp + 0x428]
lea rdx, [rbp + 0x488]
call fcn.1400087c0
jmp 0x140001e60
lea rcx, [rbp + 0x448]
lea rdx, [rbp + 0x428]
call fcn.1400088b0
lea rcx, [rbp + 0x428]
call fcn.140004f60
jmp 0x140001f5f
mov rcx, qword [rbp + 0xf8]
call fcn.140004f20
mov rcx, qword [rbp + 0xf8]
mov r9, rax
add r9, 0xfffffffffffffffc
xor eax, eax
mov r8d, eax
lea rdx, [rbp + 0x408]
call fcn.140008950
jmp 0x140001eb4
lea rcx, [rbp + 0x448]
mov qword [rbp + 0xd0], rcx
lea rdx, [rbp + 0x408]
mov qword [rbp + 0xc8], rdx
call fcn.1400088b0
mov rcx, qword [rbp + 0xc8]
call fcn.140004f60
lea rcx, [rbp + 0x3e0]
mov qword [rbp + 0xd8], rcx
call fcn.140004c50
mov rcx, qword [rbp + 0xd0]
lea rdx, [rbp + 0x3d8]
call fcn.1400085b0
mov rcx, qword [rbp + 0xd0]
lea rdx, [rbp + 0x3d0]
call fcn.140008610
mov r9, qword [rbp + 0xd8]
mov rdx, qword [rbp + 0x3d0]
mov r8, qword [rbp + 0x3d8]
lea rcx, [rbp + 0x3e8]
call fcn.140008660
jmp 0x140001f40
lea rcx, [rbp + 0x448]
lea rdx, [rbp + 0x3e8]
call fcn.1400088b0
lea rcx, [rbp + 0x3e8]
call fcn.140004f60
lea rcx, [rbp + 0x448]
call fcn.140008750
mov qword [rbp + 0x3c8], rax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, [rbp + 0x4b0]
call rax
mov dword [rbp + 0xc4], eax
jmp 0x140001f8d
mov eax, dword [rbp + 0xc4]
mov dword [rbp + 0x3c4], eax
mov rcx, qword [rbp + 0x468]
mov rax, rsp
mov qword [rax + 0x30], 0
mov dword [rax + 0x28], 0x8000000
mov dword [rax + 0x20], 3
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
mov r9d, edx
mov edx, 0x80000000
mov r8d, 1
call rax
mov qword [rbp + 0xb8], rax
jmp 0x140001fde
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x3b8], rax
mov rax, 0xffffffffffffffff
cmp qword [rbp + 0x3b8], rax
jne 0x14000204d
lea rcx, [0x140075ed0]
lea rdx, str.Input_file_cannot_be_opened
call fcn.1400089d0
mov qword [rbp + 0xb0], rax
jmp 0x14000201f
mov rcx, qword [rbp + 0xb0]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002037
mov byte [rbp + 0x547], 0
mov dword [rbp + 0x4fc], 1
jmp 0x140002af1
mov rcx, qword [rbp + 0x3c8]
mov rax, rsp
mov qword [rax + 0x30], 0
mov dword [rax + 0x28], 0x80
mov dword [rax + 0x20], 2
mov rax, qword [sym.imp.KERNEL32.dll_CreateFileW]
xor r8d, r8d
mov r9d, r8d
mov edx, 0x40000000
call rax
mov qword [rbp + 0xa8], rax
jmp 0x14000208d
mov rax, qword [rbp + 0xa8]
mov qword [rbp + 0x3b0], rax
mov rax, 0xffffffffffffffff
cmp qword [rbp + 0x3b0], rax
jne 0x1400020fc
lea rcx, [0x140075ed0]
lea rdx, str.Output_file_cannot_be_opened
call fcn.1400089d0
mov qword [rbp + 0xa0], rax
jmp 0x1400020ce
mov rcx, qword [rbp + 0xa0]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x1400020e6
mov byte [rbp + 0x547], 0
mov dword [rbp + 0x4fc], 1
jmp 0x140002af1
mov dword [rbp + 0x3ac], 0
movups xmm0, xmmword [0x14005b95c]
movups xmmword [rbp + 0x39c], xmm0
movaps xmm0, xmmword [0x14005b950]
movaps xmmword [rbp + 0x390], xmm0
movaps xmm0, xmmword [0x14005b940]
movaps xmmword [rbp + 0x380], xmm0
movaps xmm0, xmmword [0x14005b930]
movaps xmmword [rbp + 0x370], xmm0
movaps xmm0, xmmword [0x14005b920]
movaps xmmword [rbp + 0x360], xmm0
movaps xmm0, xmmword [0x14005b910]
movaps xmmword [rbp + 0x350], xmm0
movaps xmm0, xmmword [str.Microsoft_Enhanced_RSA_and_AES_Cryptographic_Provider]
movaps xmmword [rbp + 0x340], xmm0
mov rax, rsp
mov dword [rax + 0x20], 0xf0000000
mov rax, qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
xor ecx, ecx
mov edx, ecx
lea rcx, [rbp + 0x338]
lea r8, [rbp + 0x340]
mov r9d, 0x18
call rax
mov dword [rbp + 0x9c], eax
jmp 0x14000219e
mov eax, dword [rbp + 0x9c]
cmp eax, 0
jne 0x140002273
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [rbp + 0x98], eax
jmp 0x1400021c1
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0x3ac], eax
lea rcx, [0x140075ed0]
lea rdx, str.Error_in_CryptAcquireContextW:
call fcn.1400089d0
mov qword [rbp + 0x90], rax
jmp 0x1400021ec
mov edx, dword [rbp + 0x3ac]
lea rcx, [rbp + 0x318]
call fcn.140008d70
jmp 0x140002203
mov rcx, qword [rbp + 0x90]
lea rdx, [rbp + 0x318]
call fcn.140008da0
mov qword [rbp + 0x88], rax
jmp 0x140002222
mov rcx, qword [rbp + 0x88]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x14000223a
lea rcx, [rbp + 0x318]
call fcn.140004f90
mov rcx, qword [rbp + 0x338]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor edx, edx
call rax
jmp 0x14000225d
mov byte [rbp + 0x547], 0
mov dword [rbp + 0x4fc], 1
jmp 0x140002af1
mov rcx, qword [rbp + 0x338]
mov rax, rsp
lea rdx, [rbp + 0x310]
mov qword [rax + 0x20], rdx
mov rax, qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
xor r9d, r9d
mov r8d, r9d
mov edx, 0x800c
call rax
mov dword [rbp + 0x84], eax
jmp 0x1400022a7
mov eax, dword [rbp + 0x84]
cmp eax, 0
jne 0x140002370
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [rbp + 0x80], eax
jmp 0x1400022ca
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x3ac], eax
lea rcx, [0x140075ed0]
lea rdx, str.Error_in_CryptCreateHash:
call fcn.1400089d0
mov qword [rbp + 0x78], rax
jmp 0x1400022f2
mov edx, dword [rbp + 0x3ac]
lea rcx, [rbp + 0x2f0]
call fcn.140008d70
jmp 0x140002309
mov rcx, qword [rbp + 0x78]
lea rdx, [rbp + 0x2f0]
call fcn.140008da0
mov qword [rbp + 0x70], rax
jmp 0x140002322
mov rcx, qword [rbp + 0x70]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002337
lea rcx, [rbp + 0x2f0]
call fcn.140004f90
mov rcx, qword [rbp + 0x338]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor edx, edx
call rax
jmp 0x14000235a
mov byte [rbp + 0x547], 0
mov dword [rbp + 0x4fc], 1
jmp 0x140002af1
mov r8d, dword [rbp + 0x3c4]
mov rcx, qword [rbp + 0x310]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptHashData]
lea rdx, [rbp + 0x4b0]
xor r9d, r9d
call rax
mov dword [rbp + 0x6c], eax
jmp 0x140002399
mov eax, dword [rbp + 0x6c]
cmp eax, 0
jne 0x140002459
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [rbp + 0x68], eax
jmp 0x1400023b6
mov eax, dword [rbp + 0x68]
mov dword [rbp + 0x3ac], eax
lea rcx, [0x140075ed0]
lea rdx, str.Error_in_CryptHashData:
call fcn.1400089d0
mov qword [rbp + 0x60], rax
jmp 0x1400023db
mov edx, dword [rbp + 0x3ac]
lea rcx, [rbp + 0x2d0]
call fcn.140008d70
jmp 0x1400023f2
mov rcx, qword [rbp + 0x60]
lea rdx, [rbp + 0x2d0]
call fcn.140008da0
mov qword [rbp + 0x58], rax
jmp 0x14000240b
mov rcx, qword [rbp + 0x58]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002420
lea rcx, [rbp + 0x2d0]
call fcn.140004f90
mov rcx, qword [rbp + 0x338]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor edx, edx
call rax
jmp 0x140002443
mov byte [rbp + 0x547], 0
mov dword [rbp + 0x4fc], 1
jmp 0x140002af1
mov r8, qword [rbp + 0x310]
mov rcx, qword [rbp + 0x338]
mov rax, rsp
lea rdx, [rbp + 0x2c8]
mov qword [rax + 0x20], rdx
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDeriveKey]
mov edx, 0x6610
xor r9d, r9d
call rax
mov dword [rbp + 0x54], eax
jmp 0x14000248e
mov eax, dword [rbp + 0x54]
cmp eax, 0
jne 0x14000254e
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [rbp + 0x50], eax
jmp 0x1400024ab
mov eax, dword [rbp + 0x50]
mov dword [rbp + 0x3ac], eax
lea rcx, [0x140075ed0]
lea rdx, str.Error_in_CryptDeriveKey:
call fcn.1400089d0
mov qword [rbp + 0x48], rax
jmp 0x1400024d0
mov edx, dword [rbp + 0x3ac]
lea rcx, [rbp + 0x2a8]
call fcn.140008d70
jmp 0x1400024e7
mov rcx, qword [rbp + 0x48]
lea rdx, [rbp + 0x2a8]
call fcn.140008da0
mov qword [rbp + 0x40], rax
jmp 0x140002500
mov rcx, qword [rbp + 0x40]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002515
lea rcx, [rbp + 0x2a8]
call fcn.140004f90
mov rcx, qword [rbp + 0x338]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor edx, edx
call rax
jmp 0x140002538
mov byte [rbp + 0x547], 0
mov dword [rbp + 0x4fc], 1
jmp 0x140002af1
mov dword [rbp + 0x2a4], pe_nt_image_headers64
xorps xmm0, xmm0
movaps xmmword [rbp + 0x20], xmm0
movaps xmmword [rbp + 0x290], xmm0
movaps xmmword [rbp + 0x280], xmm0
movaps xmmword [rbp + 0x270], xmm0
movaps xmmword [rbp + 0x260], xmm0
movaps xmmword [rbp + 0x250], xmm0
movaps xmmword [rbp + 0x240], xmm0
movaps xmmword [rbp + 0x230], xmm0
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x210], xmm0
movaps xmmword [rbp + 0x200], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1c0], xmm0
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x19c], 0
mov dword [rbp + 0x198], 0
mov dword [rbp + 0x194], 0
mov dword [rbp + 0x190], 0
mov rcx, qword [rbp + 0x3b8]
mov rax, qword [sym.imp.KERNEL32.dll_GetFileSize]
xor edx, edx
call rax
mov dword [rbp + 0x3c], eax
jmp 0x140002611
mov eax, dword [rbp + 0x3c]
mov dword [rbp + 0x18c], eax
mov rcx, qword [rbp + 0x3b8]
mov rax, rsp
mov qword [rax + 0x20], 0
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
lea rdx, [rbp + 0x1a0]
mov r8d, pe_nt_image_headers64
lea r9, [rbp + 0x19c]
call rax
mov dword [rbp + 0x1c], eax
jmp 0x140002651
mov eax, dword [rbp + 0x1c]
mov dword [rbp + 0x198], eax
cmp eax, 0
je 0x140002961
xor eax, eax
cmp eax, dword [rbp + 0x19c]
jne 0x140002676
jmp 0x140002961
mov eax, dword [rbp + 0x19c]
add eax, dword [rbp + 0x190]
mov dword [rbp + 0x190], eax
mov eax, dword [rbp + 0x190]
cmp eax, dword [rbp + 0x18c]
jne 0x1400026a4
mov dword [rbp + 0x194], 1
test byte [rbp + 0x546], 1
je 0x14000278c
mov r8d, dword [rbp + 0x194]
mov rcx, qword [rbp + 0x2c8]
mov rax, rsp
lea rdx, [rbp + 0x19c]
mov qword [rax + 0x28], rdx
lea rdx, [rbp + 0x1a0]
mov qword [rax + 0x20], rdx
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDecrypt]
xor r9d, r9d
mov edx, r9d
call rax
mov dword [rbp + 0x18], eax
jmp 0x1400026ef
mov eax, dword [rbp + 0x18]
cmp eax, 0
jne 0x140002787
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [rbp + 0x14], eax
jmp 0x14000270c
mov eax, dword [rbp + 0x14]
mov dword [rbp + 0x3ac], eax
lea rcx, [0x140075ed0]
lea rdx, str.Error_in_CryptDecrypt:
call fcn.1400089d0
mov qword [rbp + 8], rax
jmp 0x140002731
mov edx, dword [rbp + 0x3ac]
lea rcx, [rbp + 0x168]
call fcn.140008d70
jmp 0x140002748
mov rcx, qword [rbp + 8]
lea rdx, [rbp + 0x168]
call fcn.140008da0
mov qword [rbp], rax
jmp 0x140002761
mov rcx, qword [rbp]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002776
lea rcx, [rbp + 0x168]
call fcn.140004f90
jmp 0x140002961
jmp 0x14000286e
mov r8d, dword [rbp + 0x194]
mov rcx, qword [rbp + 0x2c8]
mov rax, rsp
lea rdx, [rbp + 0x19c]
mov qword [rax + 0x28], rdx
lea rdx, [rbp + 0x1a0]
mov qword [rax + 0x20], rdx
mov dword [rax + 0x30], pe_nt_image_headers64
mov rax, qword [sym.imp.ADVAPI32.dll_CryptEncrypt]
xor r9d, r9d
mov edx, r9d
call rax
mov dword [rbp - 4], eax
jmp 0x1400027d1
mov eax, dword [rbp - 4]
cmp eax, 0
jne 0x140002869
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [rbp - 8], eax
jmp 0x1400027ee
mov eax, dword [rbp - 8]
mov dword [rbp + 0x3ac], eax
lea rcx, [0x140075ed0]
lea rdx, str.Error_in_CryptDecrypt:
call fcn.1400089d0
mov qword [rbp - 0x10], rax
jmp 0x140002813
mov edx, dword [rbp + 0x3ac]
lea rcx, [rbp + 0x148]
call fcn.140008d70
jmp 0x14000282a
mov rcx, qword [rbp - 0x10]
lea rdx, [rbp + 0x148]
call fcn.140008da0
mov qword [rbp - 0x18], rax
jmp 0x140002843
mov rcx, qword [rbp - 0x18]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002858
lea rcx, [rbp + 0x148]
call fcn.140004f90
jmp 0x140002961
jmp 0x14000286e
mov dword [rbp + 0x144], 0
mov r8d, dword [rbp + 0x19c]
mov rcx, qword [rbp + 0x3b0]
mov rax, rsp
mov qword [rax + 0x20], 0
mov rax, qword [sym.imp.KERNEL32.dll_WriteFile]
lea rdx, [rbp + 0x1a0]
lea r9, [rbp + 0x144]
call rax
mov dword [rbp - 0x1c], eax
jmp 0x1400028b0
mov eax, dword [rbp - 0x1c]
cmp eax, 0
jne 0x140002948
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov dword [rbp - 0x20], eax
jmp 0x1400028cd
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0x3ac], eax
lea rcx, [0x140075ed0]
lea rdx, str.Error_in_WriteFile:
call fcn.1400089d0
mov qword [rbp - 0x28], rax
jmp 0x1400028f2
mov edx, dword [rbp + 0x3ac]
lea rcx, [rbp + 0x120]
call fcn.140008d70
jmp 0x140002909
mov rcx, qword [rbp - 0x28]
lea rdx, [rbp + 0x120]
call fcn.140008da0
mov qword [rbp - 0x30], rax
jmp 0x140002922
mov rcx, qword [rbp - 0x30]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002937
lea rcx, [rbp + 0x120]
call fcn.140004f90
jmp 0x140002961
lea rcx, [rbp + 0x1a0]
xor edx, edx
mov r8d, pe_nt_image_headers64
call fcn.1400593a0
jmp 0x14000261a
mov rcx, qword [rbp + 0x338]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor edx, edx
call rax
jmp 0x140002978
mov rcx, qword [rbp + 0x2c8]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
call rax
jmp 0x14000298d
mov rcx, qword [rbp + 0x310]
mov rax, qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
call rax
jmp 0x1400029a2
mov rcx, qword [rbp + 0x3b8]
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
jmp 0x1400029b7
mov rcx, qword [rbp + 0x3b0]
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
jmp 0x1400029cc
lea rax, [rbp + 0x520]
mov qword [rbp + 0x118], rax
mov rcx, qword [rbp + 0x118]
lea rdx, [rbp + 0x110]
call fcn.140008de0
mov rcx, qword [rbp + 0x118]
lea rdx, [rbp + 0x108]
call fcn.140008e30
lea rcx, [rbp + 0x110]
lea rdx, [rbp + 0x108]
call fcn.140008e80
test al, 1
jne 0x140002a20
jmp 0x140002a4e
lea rcx, [rbp + 0x110]
call fcn.140008eb0
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov byte [rax], 0
lea rcx, [rbp + 0x110]
call fcn.140008ed0
jmp 0x140002a00
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4e0], xmm0
movaps xmmword [rbp + 0x4d0], xmm0
movaps xmmword [rbp + 0x4c0], xmm0
movaps xmmword [rbp + 0x4b0], xmm0
mov rcx, qword [rbp + 0x468]
mov rax, qword [sym.imp.KERNEL32.dll_DeleteFileW]
call rax
mov dword [rbp - 0x34], eax
jmp 0x140002a85
mov eax, dword [rbp - 0x34]
cmp eax, 0
jne 0x140002ae0
lea rcx, [0x140075ed0]
lea rdx, str.ERROR:_couldnt_delete
call fcn.1400089d0
mov qword [rbp - 0x40], rax
jmp 0x140002aad
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp + 0x468]
call fcn.140008f00
mov qword [rbp - 0x48], rax
jmp 0x140002ac6
mov rcx, qword [rbp - 0x48]
lea rdx, [0x140008d00]
call fcn.140008d50
jmp 0x140002adb
jmp 0x140002ae0
mov byte [rbp + 0x547], 1
mov dword [rbp + 0x4fc], 1
lea rcx, [rbp + 0x448]
call fcn.140004f60
lea rcx, [rbp + 0x488]
call fcn.140004f60
jmp 0x140002b0e
lea rcx, [rbp + 0x520]
call fcn.140007c00
mov rcx, qword [rbp + 0xf8]
call fcn.140004f60
mov al, byte [rbp + 0x547]
and al, 1
movzx eax, al
add rsp, 0x5d0
pop rbp
ret