Function at 0x14004f2ab
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x693d0ed1
pushf
not eax
add eax, 0xb88775a8
xor eax, 0xb88b51d6
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xef149c45
xor eax, 0xfb79c329
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xc7839d87
xor eax, 0xb0487330
rol eax, 0xa
popf
pushf
not eax
add eax, 0xcd5b4822
xor eax, 0xfe962db3
rol eax, 0xb3
popf
cmp eax, 0x29
jne 0x14004f30e
popf
pop rax
jmp 0x140050b8e
cmp eax, 0
jne 0x14004f31d
popf
pop rax
jmp 0x14004f60b
cmp eax, 3
jne 0x14004f32c
popf
pop rax
jmp 0x14004f7e3
cmp eax, 1
jne 0x14004f33b
popf
pop rax
jmp 0x14004f6d5
cmp eax, 0xd
jne 0x14004f34a
popf
pop rax
jmp 0x14004fdab
cmp eax, 0x1a
jne 0x14004f359
popf
pop rax
jmp 0x1400504c2
cmp eax, 0xe
jne 0x14004f368
popf
pop rax
jmp 0x14004fe66
cmp eax, 0x31
jne 0x14004f377
popf
pop rax
jmp 0x140051009
cmp eax, 0x19
jne 0x14004f386
popf
pop rax
jmp 0x140050460
cmp eax, 8
jne 0x14004f395
popf
pop rax
jmp 0x14004fb10
cmp eax, 0x2a
jne 0x14004f3a4
popf
pop rax
jmp 0x140050c26
cmp eax, 0x17
jne 0x14004f3b3
popf
pop rax
jmp 0x140050392
cmp eax, 0x1c
jne 0x14004f3c2
popf
pop rax
jmp 0x14005056e
cmp eax, 0x2e
jne 0x14004f3d1
popf
pop rax
jmp 0x140050e5c
cmp eax, 0x18
jne 0x14004f3e0
popf
pop rax
jmp 0x140050401
cmp eax, 0x2b
jne 0x14004f3ef
popf
pop rax
jmp 0x140050ccc
cmp eax, 0x1b
jne 0x14004f3fe
popf
pop rax
jmp 0x140050511
cmp eax, 0x2d
jne 0x14004f40d
popf
pop rax
jmp 0x140050df3
cmp eax, 0x23
jne 0x14004f41c
popf
pop rax
jmp 0x140050912
cmp eax, 0x25
jne 0x14004f42b
popf
pop rax
jmp 0x1400509cc
cmp eax, 0x32
jne 0x14004f43a
popf
pop rax
jmp 0x14005106c
cmp eax, 0x13
jne 0x14004f449
popf
pop rax
jmp 0x14005011d
cmp eax, 0x33
jne 0x14004f458
popf
pop rax
jmp 0x1400510c7
cmp eax, 0x24
jne 0x14004f467
popf
pop rax
jmp 0x140050982
cmp eax, 0x1e
jne 0x14004f476
popf
pop rax
jmp 0x14005062b
cmp eax, 0xc
jne 0x14004f485
popf
pop rax
jmp 0x14004fcfd
cmp eax, 0x26
jne 0x14004f494
popf
pop rax
jmp 0x140050a6e
cmp eax, 0x27
jne 0x14004f4a3
popf
pop rax
jmp 0x140050ad0
cmp eax, 0x30
jne 0x14004f4b2
popf
pop rax
jmp 0x140050fbe
cmp eax, 0x10
jne 0x14004f4c1
popf
pop rax
jmp 0x14004ffa2
cmp eax, 0x2c
jne 0x14004f4d0
popf
pop rax
jmp 0x140050d83
cmp eax, 9
jne 0x14004f4df
popf
pop rax
jmp 0x14004fb98
cmp eax, 4
jne 0x14004f4ee
popf
pop rax
jmp 0x14004f8a8
cmp eax, 0x16
jne 0x14004f4fd
popf
pop rax
jmp 0x14005032f
cmp eax, 0x28
jne 0x14004f50c
popf
pop rax
jmp 0x140050b36
cmp eax, 0xa
jne 0x14004f51b
popf
pop rax
jmp 0x14004fc2a
cmp eax, 0x22
jne 0x14004f52a
popf
pop rax
jmp 0x1400508b5
cmp eax, 0x14
jne 0x14004f539
popf
pop rax
jmp 0x1400501d5
cmp eax, 7
jne 0x14004f548
popf
pop rax
jmp 0x14004fa5e
cmp eax, 5
jne 0x14004f557
popf
pop rax
jmp 0x14004f963
cmp eax, 2
jne 0x14004f566
popf
pop rax
jmp 0x14004f753
cmp eax, 0x20
jne 0x14004f575
popf
pop rax
jmp 0x140050769
cmp eax, 0x1d
jne 0x14004f584
popf
pop rax
jmp 0x1400505c0
cmp eax, 0x11
jne 0x14004f593
popf
pop rax
jmp 0x14005004a
cmp eax, 6
jne 0x14004f5a2
popf
pop rax
jmp 0x14004fa0a
cmp eax, 0x2f
jne 0x14004f5b1
popf
pop rax
jmp 0x140050f1a
cmp eax, 0x12
jne 0x14004f5c0
popf
pop rax
jmp 0x1400500e6
cmp eax, 0x21
jne 0x14004f5cf
popf
pop rax
jmp 0x14005080d
cmp eax, 0x1f
jne 0x14004f5de
popf
pop rax
jmp 0x1400506d5
cmp eax, 0xb
jne 0x14004f5ed
popf
pop rax
jmp 0x14004fc77
cmp eax, 0xf
jne 0x14004f5fc
popf
pop rax
jmp 0x14004fefe
cmp eax, 0x15
jne 0x14004f60b
popf
pop rax
jmp 0x14005026f
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x14004f68f
push rax
pushf
mov eax, 0xf4a826fa
pushf
not eax
add eax, 0xfc77eb65
xor eax, 0x89d40d72
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x8c878879
xor eax, 0xba6adcbb
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xbacb6748
xor eax, 0xe44fe32f
rol eax, 0x13
popf
pushf
not eax
add eax, 0xd485849e
xor eax, 0xbfc83479
rol eax, 0xd9
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x275ea80b
pushf
not eax
add eax, 0xdecb628a
xor eax, 0xc8a3fb75
rol eax, 0x11
popf
pushf
not eax
add eax, 0xc8f5188a
xor eax, 0xae0a5b15
rol eax, 0x97
popf
pushf
not eax
add eax, 0x9f975257
xor eax, 0xa046e835
rol eax, 0x2f
popf
jmp 0x14004f2ff
test rdx, rdx
jne 0x14004f720
push rax
pushf
mov eax, 0xa65f50dd
pushf
not eax
add eax, 0xe4f93c0e
xor eax, 0x8ba72fa9
rol eax, 0x45
popf
pushf
not eax
add eax, 0x9a076251
xor eax, 0xfa19c842
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xb755046b
xor eax, 0xcc53fdaa
rol eax, 0xbc
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x61043566
pushf
not eax
add eax, 0xab408f19
xor eax, 0xa1ea17fb
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xed91ea57
xor eax, 0xf67e57dc
rol eax, 0xe9
popf
jmp 0x14004f2ff
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140057e38
or eax, 0xffffffff
jmp 0x1400510c7
mov rax, r15
lea rcx, [0x18d8136df]
pushf
sub rcx, 0x4d7f50df
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x14004f862
push rax
pushf
mov eax, 0x275352ed
pushf
not eax
add eax, 0xdd2df59e
xor eax, 0xd105ec75
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xbf752778
xor eax, 0x90127707
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x862b63c3
xor eax, 0xa704bb11
rol eax, 0xc4
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xe5c82495
pushf
not eax
add eax, 0xe8a81c26
xor eax, 0xb6cc32df
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x97aeee8f
xor eax, 0xbdbf8c04
rol eax, 0x87
popf
pushf
not eax
add eax, 0xad5371fe
xor eax, 0x8f545cdb
rol eax, 0x93
popf
jmp 0x14004f2ff
mov eax, r14d
not eax
test al, 1
je 0x14004f90a
push rax
pushf
mov eax, 0xe95bac94
pushf
not eax
add eax, 0xdc470b9a
xor eax, 0x9d922bcc
rol eax, 0x36
popf
pushf
not eax
add eax, 0xea368047
xor eax, 0xdef75b6d
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x8ba69b22
xor eax, 0x86666547
rol eax, 6
popf
pushf
not eax
add eax, 0xad31c940
xor eax, 0x809b2e7b
rol eax, 0
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xc317d617
pushf
not eax
add eax, 0xc92c008a
xor eax, 0xcf746961
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xed2e058d
xor eax, 0xf2809125
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xfb33db07
xor eax, 0x8c68bbb4
rol eax, 0x15
popf
pushf
not eax
add eax, 0xb2608fb5
xor eax, 0xcb4cfe09
rol eax, 0x45
popf
jmp 0x14004f2ff
test byte [rcx + r13*8 + 0x38], 0x20
je 0x14004f9c4
push rax
pushf
mov eax, 0xcf6262d8
pushf
not eax
add eax, 0xbb885728
xor eax, 0x99bf5949
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xeb001b1d
xor eax, 0x9a5da24b
rol eax, 0x32
popf
pushf
not eax
add eax, 0xf7d3df92
xor eax, 0xeb18af7c
rol eax, 0x11
popf
pushf
not eax
add eax, 0xcc15ef60
xor eax, 0x96c48638
rol eax, 0x18
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x80689ab8
pushf
not eax
add eax, 0xf1e0a672
xor eax, 0xa06802cf
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xea3f0582
xor eax, 0x8a17bb17
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xcded37f8
xor eax, 0xbb2a3073
rol eax, 0xac
popf
jmp 0x14004f2ff
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.1400630e1
push rax
pushf
mov eax, 0x645a42fe
pushf
not eax
add eax, 0x82e952e9
xor eax, 0x9b48f9ca
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xfd341827
xor eax, 0x83fb6ddc
rol eax, 0x66
popf
pushf
not eax
add eax, 0xaab39bea
xor eax, 0xc4966c4e
rol eax, 0xe7
popf
jmp 0x14004f2ff
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.140037cad
lea rdx, [0x18e083602]
pushf
sub rdx, 0x4e065002
popf
test eax, eax
je 0x14004fab7
push rax
pushf
mov eax, 0x9ec47a65
pushf
not eax
add eax, 0xbe961ba0
xor eax, 0xab40e2b9
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xccd73fed
xor eax, 0xebe81b9c
rol eax, 0x12
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x63681d61
pushf
not eax
add eax, 0xba02be54
xor eax, 0xf854a08c
rol eax, 0xda
popf
pushf
not eax
add eax, 0x85804a78
xor eax, 0xacd370d3
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x9d985d9b
xor eax, 0xc52f0d86
rol eax, 0xf9
popf
pushf
not eax
add eax, 0x93f37465
xor eax, 0xd3777f28
rol eax, 0x23
popf
jmp 0x14004f2ff
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x14004fb52
push rax
pushf
mov eax, 0x45b6d2e9
pushf
not eax
add eax, 0x99c38195
xor eax, 0xe4c60ef2
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xdac4e171
xor eax, 0xadab8d65
rol eax, 0x68
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xf530c662
pushf
not eax
add eax, 0xa3bd869d
xor eax, 0xd7bfd31a
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xa7ee6aa9
xor eax, 0x9b1951c5
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xc842cd58
xor eax, 0xe2148d07
rol eax, 0x46
popf
jmp 0x14004f2ff
cmp byte [rbx + 0x28], dil
jne 0x14004fbd1
push rax
pushf
mov eax, 0x8ba40cd
pushf
not eax
add eax, 0x8abdc5b3
xor eax, 0xfc18e686
rol eax, 0x45
popf
pushf
not eax
add eax, 0xaa35b660
xor eax, 0xe78969f0
rol eax, 0x2b
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x8451cb46
pushf
not eax
add eax, 0x832d7681
xor eax, 0xa1da4f68
rol eax, 0x30
popf
pushf
not eax
add eax, 0xd1751534
xor eax, 0x8a6b3f4b
rol eax, 0x31
popf
pushf
not eax
add eax, 0xdfd65003
xor eax, 0xd90ade02
rol eax, 0x37
popf
pushf
not eax
add eax, 0xa6f6102b
xor eax, 0xe66b1b7b
rol eax, 0x47
popf
jmp 0x14004f2ff
mov rcx, rbx
call fcn.140070073
lea rdx, [0x192604849]
pushf
sub rdx, 0x525e6249
popf
push rax
pushf
mov eax, 0xc4747626
pushf
not eax
add eax, 0xa80c1cee
xor eax, 0xddbcd3cb
rol eax, 0xa
popf
pushf
not eax
add eax, 0xa8927c84
xor eax, 0xfabe5d8b
rol eax, 0x57
popf
jmp 0x14004f2ff
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x14004fcb7
push rax
pushf
mov eax, 0xe38603e6
pushf
not eax
add eax, 0xd6b38891
xor eax, 0x8bd6e88c
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xecc5008b
xor eax, 0xface29be
rol eax, 0xbb
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x5f380c5c
pushf
not eax
add eax, 0x99bdae99
xor eax, 0x85354909
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xbb570bc6
xor eax, 0xd1a45b3b
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xa3a1d38e
xor eax, 0xab0b91b9
rol eax, 0x5d
popf
jmp 0x14004f2ff
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x14004fd52
push rax
pushf
mov eax, 0x7a19c4d1
pushf
not eax
add eax, 0x85123c4f
xor eax, 0xf496672e
rol eax, 0xff
popf
pushf
not eax
add eax, 0xca4f6570
xor eax, 0xc238e5cc
rol eax, 0x32
popf
pushf
not eax
add eax, 0xd2d8afa5
xor eax, 0xf0b0bf22
rol eax, 0x36
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x2b7121c0
pushf
not eax
add eax, 0x98c5eadc
xor eax, 0x90936ed9
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xd09ab059
xor eax, 0xce051b85
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xa27f5ca0
xor eax, 0xb9e36134
rol eax, 0xcd
popf
pushf
not eax
add eax, 0x90dd1503
xor eax, 0xf5f380e4
rol eax, 0x80
popf
jmp 0x14004f2ff
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x14004fdb9
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x14004fe0d
push rax
pushf
mov eax, 0xbbcb58d5
pushf
not eax
add eax, 0x9504a1a6
xor eax, 0x81fcac89
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xe32f640f
xor eax, 0xa04dbddf
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x8ee80399
xor eax, 0x80eb67da
rol eax, 0xa3
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x45a629ac
pushf
not eax
add eax, 0xa269408f
xor eax, 0x8a99219b
rol eax, 0x50
popf
pushf
not eax
add eax, 0xad7889a7
xor eax, 0x87558fad
rol eax, 0x95
popf
pushf
not eax
add eax, 0xdb2d2d00
xor eax, 0x829baed6
rol eax, 0x80
popf
pushf
not eax
add eax, 0x88be1839
xor eax, 0xcc48906a
rol eax, 0xd9
popf
jmp 0x14004f2ff
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x14004feb8
push rax
pushf
mov eax, 0x12ee267d
pushf
not eax
add eax, 0xaa1a34ec
xor eax, 0x81aea4d1
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xe67a9b25
xor eax, 0xba209cf9
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x9fb0a853
xor eax, 0xf007df89
rol eax, 0x4f
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xcf2e9125
pushf
not eax
add eax, 0xdeae05f5
xor eax, 0xb0537f70
rol eax, 0x77
popf
pushf
not eax
add eax, 0x8b5509ed
xor eax, 0xd63794d1
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xa57353ee
xor eax, 0xf1893caf
rol eax, 0x60
popf
jmp 0x14004f2ff
sub ecx, 1
je 0x14004ff49
push rax
pushf
mov eax, 0x914cbc24
pushf
not eax
add eax, 0xa95d2470
xor eax, 0xdfbd0442
rol eax, 0x67
popf
pushf
not eax
add eax, 0xa6dbc79f
xor eax, 0xaaa9da77
rol eax, 0x63
popf
pushf
not eax
add eax, 0xbc928169
xor eax, 0xe831bb25
rol eax, 0x1f
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x6798777b
pushf
not eax
add eax, 0x83012b5c
xor eax, 0xd878d970
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xa789667e
xor eax, 0xb7c20589
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xfb481e2e
xor eax, 0xb766930a
rol eax, 0x47
popf
pushf
not eax
add eax, 0x9870731d
xor eax, 0xf801abec
rol eax, 0xbc
popf
jmp 0x14004f2ff
cmp ecx, 1
jne 0x14004fff1
push rax
pushf
mov eax, 0xfcc30436
pushf
not eax
add eax, 0x917b5906
xor eax, 0xc40222eb
rol eax, 0xab
popf
pushf
not eax
add eax, 0x9e5eb5e6
xor eax, 0xda25748a
rol eax, 0x70
popf
pushf
not eax
add eax, 0xe0b9e984
xor eax, 0xf88bd8fb
rol eax, 0x8e
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xc9565e8b
pushf
not eax
add eax, 0xa143d27e
xor eax, 0x8a844dbb
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x811c89bc
xor eax, 0xb9a3e5b6
rol eax, 0x37
popf
pushf
not eax
add eax, 0x9813b18e
xor eax, 0xfe5fc757
rol eax, 0x47
popf
pushf
not eax
add eax, 0x9548f6c8
xor eax, 0x8ad6b8a1
rol eax, 0xd
popf
jmp 0x14004f2ff
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x1400500b3
push rax
pushf
mov eax, 0x34cbd1d0
pushf
not eax
add eax, 0xc092a2e5
xor eax, 0xe77a3dbf
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x8ef1d23b
xor eax, 0xbc0903a1
rol eax, 2
popf
pushf
not eax
add eax, 0x91a95266
xor eax, 0xfe22ca29
rol eax, 0xef
popf
pushf
not eax
add eax, 0xb858a19c
xor eax, 0x828a19a5
rol eax, 4
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xb79aaa70
pushf
not eax
add eax, 0xc9c06237
xor eax, 0xb64d734b
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x88af98b1
xor eax, 0xfc668a6a
rol eax, 0x97
popf
jmp 0x14004f2ff
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0xca86bde5
pushf
not eax
add eax, 0xa7be5fbd
xor eax, 0xd7b568dc
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x9ccb6fdf
xor eax, 0xb7a743b4
rol eax, 0xa7
popf
jmp 0x14004f2ff
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.14008a958
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x14005018f
push rax
pushf
mov eax, 0xac130420
pushf
not eax
add eax, 0xd94a4452
xor eax, 0xd22e826c
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xe8384b0f
xor eax, 0xb101a4bd
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xda06d119
xor eax, 0x8ad58b62
rol eax, 0x93
popf
pushf
not eax
add eax, 0xaadcd6c8
xor eax, 0xfd0c3a11
rol eax, 0xb7
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x36d9516
pushf
not eax
add eax, 0xbebc8074
xor eax, 0xeb02495a
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xe3fe4d8d
xor eax, 0x8be5fff7
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xa8128b19
xor eax, 0xc382c139
rol eax, 0x12
popf
jmp 0x14004f2ff
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x140050216
push rax
pushf
mov eax, 0x3b868d10
pushf
not eax
add eax, 0xa58f6020
xor eax, 0x915cb7ad
rol eax, 0xec
popf
pushf
not eax
add eax, 0xe69455b1
xor eax, 0xa04a71fb
rol eax, 0x76
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x9209c7b1
pushf
not eax
add eax, 0xcd2e3ba6
xor eax, 0xdad1ed01
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x9a5ffc6a
xor eax, 0xd06b26f3
rol eax, 0x70
popf
pushf
not eax
add eax, 0xeacb34e3
xor eax, 0x9186a8c3
rol eax, 0x72
popf
pushf
not eax
add eax, 0xa24d8be5
xor eax, 0xb6be3b2d
rol eax, 0xe
popf
jmp 0x14004f2ff
mov ecx, 0xe389fd56
pushf
not ecx
add ecx, 0xe45c06db
xor ecx, 0x908be797
rol ecx, 0x69
popf
pushf
not ecx
add ecx, 0x9d30e27c
xor ecx, 0xf7fd69d3
rol ecx, 0x68
popf
pushf
not ecx
add ecx, 0xd8758541
xor ecx, 0xac4b19e9
rol ecx, 0xcb
popf
pushf
not ecx
add ecx, 0xd5a1fa55
xor ecx, 0x8b7b9e3d
rol ecx, 0xe8
popf
call fcn.14008a958
mov ecx, 0xc2f4c763
pushf
not ecx
add ecx, 0xe1d7c284
xor ecx, 0xbe8faff8
rol ecx, 0x2b
popf
pushf
not ecx
add ecx, 0xdb44f127
xor ecx, 0x991b81d1
rol ecx, 0x7d
popf
pushf
not ecx
add ecx, 0xed39e171
xor ecx, 0xa381163e
rol ecx, 0x80
popf
pushf
not ecx
add ecx, 0xca18a2e2
xor ecx, 0x9690b555
rol ecx, 0x14
popf
cmp ax, cx
jne 0x140050460
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x140050337
inc edi
push rax
pushf
mov eax, 0x8ed239e6
pushf
not eax
add eax, 0xf792427c
xor eax, 0x920ede4e
rol eax, 8
popf
pushf
not eax
add eax, 0xe6f28ed5
xor eax, 0xb27b90d8
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xca976be6
xor eax, 0x8d2b157c
rol eax, 0
popf
pushf
not eax
add eax, 0xc9b8b4d4
xor eax, 0xa118dfda
rol eax, 0xcb
popf
jmp 0x14004f2ff
add r15, 2
cmp r15, r12
jae 0x1400503ce
push rax
pushf
mov eax, 0xbb801f0
pushf
not eax
add eax, 0xd9e13dc8
xor eax, 0x8773c6cc
rol eax, 0x70
popf
pushf
not eax
add eax, 0xfc0ab4ee
xor eax, 0xfe2f6b93
rol eax, 0xed
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x6f785604
pushf
not eax
add eax, 0x831cf212
xor eax, 0xf448e766
rol eax, 0xe
popf
pushf
not eax
add eax, 0xe96d453c
xor eax, 0xa2924b40
rol eax, 0xc6
popf
jmp 0x14004f2ff
jmp 0x14005011d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x68c9386a
pushf
not eax
add eax, 0xa37bbca2
xor eax, 0xb177397e
rol eax, 0x57
popf
pushf
not eax
add eax, 0xcf481d78
xor eax, 0xdc607ba0
rol eax, 0x97
popf
pushf
not eax
add eax, 0xbe80856c
xor eax, 0x96d9c383
rol eax, 8
popf
pushf
not eax
add eax, 0xdeff7aa1
xor eax, 0x84a7b1e9
rol eax, 0x8a
popf
jmp 0x14004f2ff
mov r12, qword [rbp - 0x18]
jmp 0x140050ad3
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.14000f118
push rax
pushf
mov eax, 0x2e75c7d9
pushf
not eax
add eax, 0x81d92195
xor eax, 0xcfafd2d3
rol eax, 0xef
popf
pushf
not eax
add eax, 0xc66eb6e9
xor eax, 0x8430017e
rol eax, 0xe4
popf
pushf
not eax
add eax, 0xeae81c4b
xor eax, 0xa241608a
rol eax, 0xb8
popf
jmp 0x14004f2ff
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x140050ad8
lea rdx, [0x198adab12]
pushf
sub rdx, 0x58abc512
popf
push rax
pushf
mov eax, 0x94c595d4
pushf
not eax
add eax, 0xd187aa47
xor eax, 0x93b89f3a
rol eax, 0x83
popf
pushf
not eax
add eax, 0x99cc86f1
xor eax, 0xa6930831
rol eax, 0x35
popf
pushf
not eax
add eax, 0xf6608326
xor eax, 0xd4989195
rol eax, 0x69
popf
pushf
not eax
add eax, 0xb2557451
xor eax, 0xf74ccae1
rol eax, 6
popf
jmp 0x14004f2ff
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x14005068f
push rax
pushf
mov eax, 0xfe678169
pushf
not eax
add eax, 0xfe0e4e34
xor eax, 0xf16ff4ab
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xa1823137
xor eax, 0xc60eaccc
rol eax, 5
popf
pushf
not eax
add eax, 0xa637c6e4
xor eax, 0xe3b783ee
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd7c2ee8e
xor eax, 0xa799a118
rol eax, 0xb7
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xe59cc64f
pushf
not eax
add eax, 0xb13b64eb
xor eax, 0xffe2bb11
rol eax, 0x36
popf
pushf
not eax
add eax, 0x8814b01f
xor eax, 0xf938b5e1
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xda4ad62b
xor eax, 0x8afd18b8
rol eax, 0x99
popf
jmp 0x14004f2ff
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x140050736
push rax
pushf
mov eax, 0x1e4cd237
pushf
not eax
add eax, 0x8267bd53
xor eax, 0xa1e398cb
rol eax, 0xed
popf
pushf
not eax
add eax, 0xcab14b54
xor eax, 0xa6f2f769
rol eax, 5
popf
pushf
not eax
add eax, 0x94f08088
xor eax, 0xc4e74462
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xdef557ef
xor eax, 0xaad42730
rol eax, 0xd9
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xf0e80eda
pushf
not eax
add eax, 0xa0c0edae
xor eax, 0xd292160a
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xe3d2eee3
xor eax, 0x8d803cac
rol eax, 0x4a
popf
jmp 0x14004f2ff
sub ecx, 1
je 0x1400507c7
push rax
pushf
mov eax, 0x98ffb51b
pushf
not eax
add eax, 0xf550eb1a
xor eax, 0xcccfa38e
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xe06555f4
xor eax, 0xa4716a95
rol eax, 0x88
popf
pushf
not eax
add eax, 0x801255e6
xor eax, 0xb1c360b0
rol eax, 0xa
popf
pushf
not eax
add eax, 0x939ad790
xor eax, 0xf28bcd46
rol eax, 0xd5
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xfaf31520
pushf
not eax
add eax, 0xca8c31aa
xor eax, 0xd026d8af
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xf8ee5af9
xor eax, 0xe0b33778
rol eax, 0xef
popf
pushf
not eax
add eax, 0xd7d14cb6
xor eax, 0x9f945c49
rol eax, 0x85
popf
jmp 0x14004f2ff
cmp ecx, 1
jne 0x14005085c
push rax
pushf
mov eax, 0x2c084ace
pushf
not eax
add eax, 0xba5028c2
xor eax, 0xccb554fb
rol eax, 0x5a
popf
pushf
not eax
add eax, 0x89b35051
xor eax, 0x85640833
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xb8b254ca
xor eax, 0xdd2b3802
rol eax, 0x5e
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x96c452c6
pushf
not eax
add eax, 0x8aa10d8a
xor eax, 0x8cd6657e
rol eax, 0x56
popf
pushf
not eax
add eax, 0xb79041d8
xor eax, 0xb5ccdbd2
rol eax, 0xb
popf
pushf
not eax
add eax, 0x851b6b13
xor eax, 0xb32314dd
rol eax, 0x56
popf
pushf
not eax
add eax, 0xcd015a32
xor eax, 0xc7362601
rol eax, 0x6a
popf
jmp 0x14004f2ff
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.14004d0c7
jmp 0x14005056e
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.14006b3ff
jmp 0x14005056e
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140039706
jmp 0x14005056e
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x1400509ea
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140050a27
push rax
pushf
mov eax, 0xabc38f5f
pushf
not eax
add eax, 0x8812024f
xor eax, 0xc0b945dc
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xd90b7dca
xor eax, 0xfba51a2b
rol eax, 0x2a
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xc8532416
pushf
not eax
add eax, 0xd4fa5cf5
xor eax, 0xc60a7942
rol eax, 0x71
popf
pushf
not eax
add eax, 0x99d99107
xor eax, 0xf5a7d895
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xc360077c
xor eax, 0xa99ee94c
rol eax, 0x1b
popf
jmp 0x14004f2ff
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x62d64664
pushf
not eax
add eax, 0xc9afe935
xor eax, 0xc97d46ed
rol eax, 0x18
popf
pushf
not eax
add eax, 0xc92bce25
xor eax, 0xcba3ea79
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xce64e3ac
xor eax, 0xbd3f44d8
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xf4655174
xor eax, 0xc414859d
rol eax, 0x53
popf
jmp 0x14004f2ff
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0x8e8dea1e
pushf
not eax
add eax, 0xa1b6acf2
xor eax, 0xfd2c149c
rol eax, 0x78
popf
pushf
not eax
add eax, 0xc847dad6
xor eax, 0xf153e5c8
rol eax, 0xdf
popf
pushf
not eax
add eax, 0xace27c9c
xor eax, 0xc4d7fa2d
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xbd60a2a8
xor eax, 0xb0341809
rol eax, 0xa6
popf
jmp 0x14004f2ff
lea rdx, [0x1b0762d42]
pushf
sub rdx, 0x70744742
popf
push rax
pushf
mov eax, 0xc1636bcb
pushf
not eax
add eax, 0x929334c0
xor eax, 0xe2b73819
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x969de2a5
xor eax, 0xfdad21db
rol eax, 0x65
popf
pushf
not eax
add eax, 0x8dcab1de
xor eax, 0xb49d2036
rol eax, 0xb5
popf
jmp 0x14004f2ff
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x140050be0
push rax
pushf
mov eax, 0x69b5d0e8
pushf
not eax
add eax, 0xcfea4474
xor eax, 0xb64bb9f7
rol eax, 0x24
popf
pushf
not eax
add eax, 0xdc07959d
xor eax, 0xa8119d25
rol eax, 0x67
popf
pushf
not eax
add eax, 0x9bdd01d6
xor eax, 0x8e8c8c97
rol eax, 0xee
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x48d4208c
pushf
not eax
add eax, 0x8e941ff8
xor eax, 0xd61168e3
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x8273f386
xor eax, 0x88b091a1
rol eax, 0x60
popf
pushf
not eax
add eax, 0xba82226a
xor eax, 0xff7895a7
rol eax, 0x95
popf
jmp 0x14004f2ff
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x140050c73
push rax
pushf
mov eax, 0x9cf5a728
pushf
not eax
add eax, 0x8f3f2678
xor eax, 0xddac6cb8
rol eax, 0x33
popf
pushf
not eax
add eax, 0xe7f5bbb1
xor eax, 0xf02beeab
rol eax, 0x53
popf
pushf
not eax
add eax, 0xad2c4d05
xor eax, 0x9c0e8c53
rol eax, 0xa1
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x72875f1a
pushf
not eax
add eax, 0xd736d957
xor eax, 0xb17a572e
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x8f5165c8
xor eax, 0xeaf113d9
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd3eb8d86
xor eax, 0xe48cbb81
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xe43344db
xor eax, 0xc76ae26e
rol eax, 0x62
popf
jmp 0x14004f2ff
cmp eax, 5
jne 0x140050d2a
push rax
pushf
mov eax, 0x23accad8
pushf
not eax
add eax, 0x8b098055
xor eax, 0xe353541b
rol eax, 0x97
popf
pushf
not eax
add eax, 0xe9edbbe0
xor eax, 0x90b217c3
rol eax, 0x86
popf
pushf
not eax
add eax, 0xef927b48
xor eax, 0x90b79978
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xc8f87df1
xor eax, 0xedcfa0c4
rol eax, 0x32
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0xc9a72655
pushf
not eax
add eax, 0xa0827b46
xor eax, 0x90c98cb9
rol eax, 0x78
popf
pushf
not eax
add eax, 0xb8582a6c
xor eax, 0xd8ecf6b3
rol eax, 0x44
popf
pushf
not eax
add eax, 0xd7f86879
xor eax, 0x85682b4a
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xcd4e3ebb
xor eax, 0xd1a1f996
rol eax, 0x19
popf
jmp 0x14004f2ff
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x14004f782
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.14005870b
jmp 0x14004f782
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x140050ec1
push rax
pushf
mov eax, 0x8e51c35f
pushf
not eax
add eax, 0x83353537
xor eax, 0xb37eb5ce
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xe642eb2c
xor eax, 0xe0d19c87
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xa350f187
xor eax, 0xb93eda84
rol eax, 0x13
popf
pushf
not eax
add eax, 0x9b49b598
xor eax, 0xe17ef125
rol eax, 0xb1
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x11f17a52
pushf
not eax
add eax, 0xc020f069
xor eax, 0xe218ecd6
rol eax, 0x8b
popf
pushf
not eax
add eax, 0xc841dfd7
xor eax, 0xb2ab9133
rol eax, 0xb2
popf
pushf
not eax
add eax, 0xaff93c6d
xor eax, 0x8907dbbe
rol eax, 0x12
popf
pushf
not eax
add eax, 0xe6e8fddc
xor eax, 0xab911e45
rol eax, 0x60
popf
jmp 0x14004f2ff
cmp byte [rsi], 0x1a
je 0x140050f65
push rax
pushf
mov eax, 0xf84d2156
pushf
not eax
add eax, 0xcdb3d76e
xor eax, 0x8bc064d9
rol eax, 0x32
popf
pushf
not eax
add eax, 0xf9e61554
xor eax, 0x93f47432
rol eax, 0x89
popf
pushf
not eax
add eax, 0x86afface
xor eax, 0xd4d28653
rol eax, 0xd7
popf
jmp 0x14004f2ff
push rax
pushf
mov eax, 0x838bb82f
pushf
not eax
add eax, 0x98c10076
xor eax, 0xb7d96b94
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xa4ce4567
xor eax, 0xabf7bfea
rol eax, 0x84
popf
pushf
not eax
add eax, 0xc68f5c8e
xor eax, 0xd1f4517b
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x902b0099
xor eax, 0x81d24467
rol eax, 0xaf
popf
jmp 0x14004f2ff
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x14004f782
mov eax, dword [rbp - 0x2c]
sub eax, edi
jmp 0x1400510c7
xor eax, eax
push rax
pushf
mov eax, 0xd74ce501
pushf
not eax
add eax, 0xd3f7fcec
xor eax, 0xd72df96c
rol eax, 0x85
popf
pushf
not eax
add eax, 0x9c2bfbd7
xor eax, 0xa52cb022
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xb8b2b068
xor eax, 0x95fb07b8
rol eax, 0xd
popf
pushf
not eax
add eax, 0xdb54eb85
xor eax, 0xe8034e3e
rol eax, 0x8c
popf
jmp 0x14004f2ff
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret