Function at 0x1400b44e3
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x42065ee4
pushf
not eax
add eax, 0x25de1865
xor eax, 0x41db37d2
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x4eda7861
xor eax, 0x22f0df0c
rol eax, 0x69
popf
pushf
not eax
add eax, 0xd9145da
xor eax, 0x46713f05
rol eax, 0xd4
popf
cmp eax, 0x10
jne 0x1400b4533
popf
pop rax
jmp 0x1400b5167
cmp eax, 0x24
jne 0x1400b4542
popf
pop rax
jmp 0x1400b5a62
cmp eax, 0x1a
jne 0x1400b4551
popf
pop rax
jmp 0x1400b5660
cmp eax, 0xb
jne 0x1400b4560
popf
pop rax
jmp 0x1400b4e4f
cmp eax, 0x12
jne 0x1400b456f
popf
pop rax
jmp 0x1400b5285
cmp eax, 9
jne 0x1400b457e
popf
pop rax
jmp 0x1400b4d4a
cmp eax, 0x2a
jne 0x1400b458d
popf
pop rax
jmp 0x1400b5cf3
cmp eax, 0x2c
jne 0x1400b459c
popf
pop rax
jmp 0x1400b5df1
cmp eax, 0x2e
jne 0x1400b45ab
popf
pop rax
jmp 0x1400b5eb7
cmp eax, 0x28
jne 0x1400b45ba
popf
pop rax
jmp 0x1400b5c03
cmp eax, 0x21
jne 0x1400b45c9
popf
pop rax
jmp 0x1400b5913
cmp eax, 0x2d
jne 0x1400b45d8
popf
pop rax
jmp 0x1400b5e4e
cmp eax, 0x31
jne 0x1400b45e7
popf
pop rax
jmp 0x1400b6005
cmp eax, 4
jne 0x1400b45f6
popf
pop rax
jmp 0x1400b4a5b
cmp eax, 0xf
jne 0x1400b4605
popf
pop rax
jmp 0x1400b50fc
cmp eax, 7
jne 0x1400b4614
popf
pop rax
jmp 0x1400b4bd7
cmp eax, 0x18
jne 0x1400b4623
popf
pop rax
jmp 0x1400b55d8
cmp eax, 0x1b
jne 0x1400b4632
popf
pop rax
jmp 0x1400b56c2
cmp eax, 0x13
jne 0x1400b4641
popf
pop rax
jmp 0x1400b52bc
cmp eax, 0
jne 0x1400b4650
popf
pop rax
jmp 0x1400b4830
cmp eax, 0x27
jne 0x1400b465f
popf
pop rax
jmp 0x1400b5bb0
cmp eax, 2
jne 0x1400b466e
popf
pop rax
jmp 0x1400b493f
cmp eax, 0x1f
jne 0x1400b467d
popf
pop rax
jmp 0x1400b5827
cmp eax, 0xd
jne 0x1400b468c
popf
pop rax
jmp 0x1400b4f96
cmp eax, 3
jne 0x1400b469b
popf
pop rax
jmp 0x1400b49a9
cmp eax, 0x2f
jne 0x1400b46aa
popf
pop rax
jmp 0x1400b5f3c
cmp eax, 0x1c
jne 0x1400b46b9
popf
pop rax
jmp 0x1400b570c
cmp eax, 0xa
jne 0x1400b46c8
popf
pop rax
jmp 0x1400b4ddc
cmp eax, 0x14
jne 0x1400b46d7
popf
pop rax
jmp 0x1400b534e
cmp eax, 1
jne 0x1400b46e6
popf
pop rax
jmp 0x1400b48d4
cmp eax, 0x1d
jne 0x1400b46f5
popf
pop rax
jmp 0x1400b574b
cmp eax, 5
jne 0x1400b4704
popf
pop rax
jmp 0x1400b4add
cmp eax, 0x29
jne 0x1400b4713
popf
pop rax
jmp 0x1400b5c48
cmp eax, 0x15
jne 0x1400b4722
popf
pop rax
jmp 0x1400b53e8
cmp eax, 0x11
jne 0x1400b4731
popf
pop rax
jmp 0x1400b51e9
cmp eax, 0x25
jne 0x1400b4740
popf
pop rax
jmp 0x1400b5abf
cmp eax, 0x23
jne 0x1400b474f
popf
pop rax
jmp 0x1400b5a05
cmp eax, 0x16
jne 0x1400b475e
popf
pop rax
jmp 0x1400b5506
cmp eax, 8
jne 0x1400b476d
popf
pop rax
jmp 0x1400b4c89
cmp eax, 0x2b
jne 0x1400b477c
popf
pop rax
jmp 0x1400b5d60
cmp eax, 0x32
jne 0x1400b478b
popf
pop rax
jmp 0x1400b606f
cmp eax, 0x17
jne 0x1400b479a
popf
pop rax
jmp 0x1400b5543
cmp eax, 0xc
jne 0x1400b47a9
popf
pop rax
jmp 0x1400b4ee8
cmp eax, 0x26
jne 0x1400b47b8
popf
pop rax
jmp 0x1400b5b4e
cmp eax, 0x19
jne 0x1400b47c7
popf
pop rax
jmp 0x1400b5611
cmp eax, 0x22
jne 0x1400b47d6
popf
pop rax
jmp 0x1400b59a8
cmp eax, 0x33
jne 0x1400b47e5
popf
pop rax
jmp 0x1400b60a4
cmp eax, 0x30
jne 0x1400b47f4
popf
pop rax
jmp 0x1400b5fba
cmp eax, 0xe
jne 0x1400b4803
popf
pop rax
jmp 0x1400b5051
cmp eax, 0x1e
jne 0x1400b4812
popf
pop rax
jmp 0x1400b57a3
cmp eax, 6
jne 0x1400b4821
popf
pop rax
jmp 0x1400b4b96
cmp eax, 0x20
jne 0x1400b4830
popf
pop rax
jmp 0x1400b58a8
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x1400b48a1
push rax
pushf
mov eax, 0x7aee6ba9
pushf
not eax
add eax, 0x6e3d16cc
xor eax, 0x3215a66d
rol eax, 0x94
popf
pushf
not eax
add eax, 0x51894772
xor eax, 0x5147f13f
rol eax, 0x15
popf
pushf
not eax
add eax, 0x55ec0010
xor eax, 0x362646b3
rol eax, 0x3e
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x1c4d8a44
pushf
not eax
add eax, 0x5665153b
xor eax, 0x477dd0ea
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x5ea616a5
xor eax, 0x1b16a159
rol eax, 0x56
popf
jmp 0x1400b4524
test rdx, rdx
jne 0x1400b490c
push rax
pushf
mov eax, 0x7ff1437e
pushf
not eax
add eax, 0x5fed0133
xor eax, 0x26b3b554
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x5005ee4d
xor eax, 0x4d4daffa
rol eax, 0x2a
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xfb416a7
pushf
not eax
add eax, 0x4b715b0d
xor eax, 0x605dab03
rol eax, 0x89
popf
pushf
not eax
add eax, 0x292b223c
xor eax, 0x674c5587
rol eax, 0xc0
popf
jmp 0x1400b4524
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140083989
or eax, 0xffffffff
jmp 0x1400b60a4
mov rax, r15
lea rcx, [0x1ad6571ee]
pushf
sub rcx, 0x6d627bde
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x1400b4a28
push rax
pushf
mov eax, 0x6cadba52
pushf
not eax
add eax, 0x75a414d5
xor eax, 0x20b4b482
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x72576b46
xor eax, 0x26598477
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x2b2052ff
xor eax, 0x59f94369
rol eax, 0x27
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x188dc688
pushf
not eax
add eax, 0x50aa3fd8
xor eax, 0x2a58e2f0
rol eax, 0xbe
popf
pushf
not eax
add eax, 0x334d037b
xor eax, 0x6eb1dc8b
rol eax, 0x6f
popf
jmp 0x1400b4524
mov eax, r14d
not eax
test al, 1
je 0x1400b4a97
push rax
pushf
mov eax, 0xb602e5c0
pushf
not eax
add eax, 0x96ec51a
xor eax, 0x470d88a9
rol eax, 0x62
popf
pushf
not eax
add eax, 0x160e30ae
xor eax, 0x6474d0ed
rol eax, 0x63
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x19aa204e
pushf
not eax
add eax, 0x6165063e
xor eax, 0x48fec9d5
rol eax, 0x54
popf
pushf
not eax
add eax, 0x6ec62982
xor eax, 0x2008edd2
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x37f5b5f9
xor eax, 0x1a44103d
rol eax, 0x93
popf
jmp 0x1400b4524
test byte [rcx + r13*8 + 0x38], 0x20
je 0x1400b4b3d
push rax
pushf
mov eax, 0x6dbc4591
pushf
not eax
add eax, 0x2b86abd6
xor eax, 0x182a2a13
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x77e4a7af
xor eax, 0x3dbf31eb
rol eax, 1
popf
pushf
not eax
add eax, 0x7b1c75e8
xor eax, 0x979655b
rol eax, 0x63
popf
pushf
not eax
add eax, 0x4eb6b49c
xor eax, 0x54842e14
rol eax, 0x9e
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xc284bd90
pushf
not eax
add eax, 0x4133f76c
xor eax, 0x55ac3f71
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x78ef175c
xor eax, 0x6c065ae2
rol eax, 0x16
popf
pushf
not eax
add eax, 0x2e96a47a
xor eax, 0x320783a8
rol eax, 0x76
popf
pushf
not eax
add eax, 0x7691676b
xor eax, 0x658012ef
rol eax, 0xf0
popf
jmp 0x1400b4524
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.1400b60b5
push rax
pushf
mov eax, 0xa349de7b
pushf
not eax
add eax, 0x16129ab0
xor eax, 0x616cff3a
rol eax, 0x16
popf
pushf
not eax
add eax, 0x41c88f7e
xor eax, 0x7e43a671
rol eax, 0x3e
popf
jmp 0x1400b4524
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.1400aebb7
lea rdx, [0x19cb5bc75]
pushf
sub rdx, 0x5cb2c665
popf
test eax, eax
je 0x1400b4c43
push rax
pushf
mov eax, 0x6c7190a3
pushf
not eax
add eax, 0x1b9874a6
xor eax, 0x7c2ee562
rol eax, 0x56
popf
pushf
not eax
add eax, 0x6308dfa0
xor eax, 0x76eab698
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x2daa89d3
xor eax, 0x1dff87f3
rol eax, 0x75
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x2873399b
pushf
not eax
add eax, 0xddb4696
xor eax, 0x2d7843f4
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x5f588842
xor eax, 0x75c41a05
rol eax, 4
popf
pushf
not eax
add eax, 0x3d7953b2
xor eax, 0x6fb7a6e8
rol eax, 0xd5
popf
jmp 0x1400b4524
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x1400b4cf1
push rax
pushf
mov eax, 0x285d019a
pushf
not eax
add eax, 0x13c7391a
xor eax, 0x1c85e1e5
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x368fb70e
xor eax, 0x6a7c0365
rol eax, 0x34
popf
pushf
not eax
add eax, 0xebe3474
xor eax, 0x75262152
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x6f18a8fb
xor eax, 0x3dc532bd
rol eax, 0x65
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xf011c714
pushf
not eax
add eax, 0x6efd7095
xor eax, 0x2bb11366
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x24998040
xor eax, 0x74ad1695
rol eax, 0x93
popf
pushf
not eax
add eax, 0x41df9c59
xor eax, 0x8d4c873
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x675b5241
xor eax, 0x6e5fcaae
rol eax, 0x33
popf
jmp 0x1400b4524
cmp byte [rbx + 0x28], dil
jne 0x1400b4da9
push rax
pushf
mov eax, 0xaa7e66b0
pushf
not eax
add eax, 0x45a09184
xor eax, 0x6b77bae7
rol eax, 0x63
popf
pushf
not eax
add eax, 0x3fe58892
xor eax, 0x5d11a56b
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x60630e5c
xor eax, 0xced4b56
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x6ec88608
xor eax, 0x633cb37c
rol eax, 0xec
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x2f3c8d77
pushf
not eax
add eax, 0x40da585b
xor eax, 0x2b01dc8f
rol eax, 0x87
popf
pushf
not eax
add eax, 0x771d5121
xor eax, 0x49121b02
rol eax, 3
popf
jmp 0x1400b4524
mov rcx, rbx
call fcn.14009b380
lea rdx, [0x19d0298f7]
pushf
sub rdx, 0x5cffa2e7
popf
push rax
pushf
mov eax, 0x4a3bc2da
pushf
not eax
add eax, 0x6572df82
xor eax, 0x42ca10c9
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x16a423f5
xor eax, 0x3b94b271
rol eax, 0x78
popf
pushf
not eax
add eax, 0x4366af9c
xor eax, 0x5d908976
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x2bfede7
xor eax, 0x72e21f49
rol eax, 0xe
popf
jmp 0x1400b4524
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x1400b4ea2
push rax
pushf
mov eax, 0x63d94bc9
pushf
not eax
add eax, 0xb970a95
xor eax, 0x78a59a15
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x1246be13
xor eax, 0x2d99fbc1
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x5edc3699
xor eax, 0x56eb0cb6
rol eax, 0xc0
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x41f38aa2
pushf
not eax
add eax, 0x1a9644fc
xor eax, 0x6fe2e149
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x6c6bce0b
xor eax, 0xa76a136
rol eax, 0x82
popf
pushf
not eax
add eax, 0x3bbacf63
xor eax, 0x7377d836
rol eax, 0x80
popf
jmp 0x1400b4524
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x1400b4f50
push rax
pushf
mov eax, 0xfffa5de9
pushf
not eax
add eax, 0x79bad52f
xor eax, 0xd48d0f4
rol eax, 0x99
popf
pushf
not eax
add eax, 0x6038a8c1
xor eax, 0x2a66f2c2
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x47d98520
xor eax, 0x4ef93f74
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x671f6625
xor eax, 0x3084a85
rol eax, 0x30
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x8d0ffe11
pushf
not eax
add eax, 0x61d0915b
xor eax, 0x1df1052e
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x102a4360
xor eax, 0x47169dbd
rol eax, 0x9c
popf
pushf
not eax
add eax, 0x6cc1322d
xor eax, 0x536dcf7b
rol eax, 0x4f
popf
jmp 0x1400b4524
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x1400b4fa4
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1400b4ff8
push rax
pushf
mov eax, 0x5f9cc934
pushf
not eax
add eax, 0x5436f7d6
xor eax, 0x7e38c31e
rol eax, 0x96
popf
pushf
not eax
add eax, 0x2fb04ea6
xor eax, 0x49d148d8
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x3c01b3bd
xor eax, 0x90be6cf
rol eax, 0x75
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x27e6afaa
pushf
not eax
add eax, 0x39f8c081
xor eax, 0x4b386fe1
rol eax, 0x42
popf
pushf
not eax
add eax, 0x46a2ecc4
xor eax, 0x6382d0b3
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x7927d461
xor eax, 0x4e78e52e
rol eax, 0xb
popf
pushf
not eax
add eax, 0x47c6d16
xor eax, 0xbaaf860
rol eax, 0x81
popf
jmp 0x1400b4524
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x1400b50a3
push rax
pushf
mov eax, 0xe3469b8
pushf
not eax
add eax, 0x36cc8ffc
xor eax, 0x23e62868
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x6d7ad7d7
xor eax, 0x6282b91c
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x44a1ac13
xor eax, 0x28358063
rol eax, 0xcc
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x72e3d0f6
pushf
not eax
add eax, 0x65aea8c2
xor eax, 0x1c0b117f
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x47fe9fd4
xor eax, 0x6c710c58
rol eax, 0x36
popf
pushf
not eax
add eax, 0x14658b95
xor eax, 0x474b38d1
rol eax, 0x74
popf
pushf
not eax
add eax, 0x74fccb5b
xor eax, 0x3659af89
rol eax, 0xb6
popf
jmp 0x1400b4524
sub ecx, 1
je 0x1400b5134
push rax
pushf
mov eax, 0xced39e85
pushf
not eax
add eax, 0x71227abe
xor eax, 0x6bd07ce3
rol eax, 0x89
popf
pushf
not eax
add eax, 0x4cd46050
xor eax, 0xf9228bc
rol eax, 0x35
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x6cf24bec
pushf
not eax
add eax, 0x4ccf824c
xor eax, 0x2ccb614
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x7a3b0a81
xor eax, 0x6ab64caf
rol eax, 0x89
popf
jmp 0x1400b4524
cmp ecx, 1
jne 0x1400b51a3
push rax
pushf
mov eax, 0xd9ce00a2
pushf
not eax
add eax, 0x757cfff8
xor eax, 0x72eda3f8
rol eax, 0x28
popf
pushf
not eax
add eax, 0x74fd00cf
xor eax, 0x31a050c5
rol eax, 0x9b
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x71023a48
pushf
not eax
add eax, 0x4702f802
xor eax, 0x11d5617c
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x5615efe0
xor eax, 0x24689f1d
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x3716ffe
xor eax, 0xc8264b
rol eax, 0x9f
popf
jmp 0x1400b4524
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x1400b523f
push rax
pushf
mov eax, 0xcb23aca8
pushf
not eax
add eax, 0x2cd35774
xor eax, 0x2f0dffee
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x6a81ffe2
xor eax, 0x541b5b74
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x7d792583
xor eax, 0x3e655e45
rol eax, 0x9f
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x8c0328b1
pushf
not eax
add eax, 0x6a0aa2db
xor eax, 0x75103701
rol eax, 0x86
popf
pushf
not eax
add eax, 0x15d6e20f
xor eax, 0x272e18fd
rol eax, 0x32
popf
pushf
not eax
add eax, 0x78e08725
xor eax, 0x3c7aaa74
rol eax, 0x80
popf
jmp 0x1400b4524
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0xa9536654
pushf
not eax
add eax, 0x43ecdade
xor eax, 0x5786574b
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xa961d36
xor eax, 0x574e7245
rol eax, 0xf7
popf
jmp 0x1400b4524
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.1400b885b
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x1400b5308
push rax
pushf
mov eax, 0x8e084d16
pushf
not eax
add eax, 0x7f447e14
xor eax, 0x1d3c2eb9
rol eax, 0xd5
popf
pushf
not eax
add eax, 0x1cfd6926
xor eax, 0x5e5fe922
rol eax, 0x69
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xdf711dba
pushf
not eax
add eax, 0x49f34200
xor eax, 0x18589f0
rol eax, 0x10
popf
pushf
not eax
add eax, 0x382df1b1
xor eax, 0x2f7c4706
rol eax, 0xea
popf
pushf
not eax
add eax, 0x53b4b019
xor eax, 0x40ac6184
rol eax, 0xb4
popf
jmp 0x1400b4524
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x1400b53a2
push rax
pushf
mov eax, 0xbd14a01c
pushf
not eax
add eax, 0x2616dace
xor eax, 0x67237df7
rol eax, 0x41
popf
pushf
not eax
add eax, 0xff5c7d2
xor eax, 0x41319e39
rol eax, 0xff
popf
pushf
not eax
add eax, 0x7f4d2fb5
xor eax, 0x275bdbf6
rol eax, 0xcc
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xc83550e5
pushf
not eax
add eax, 0x8b37edc
xor eax, 0x1fa3d062
rol eax, 0xdf
popf
pushf
not eax
add eax, 0x39222719
xor eax, 0x1d05ebb4
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x727d2a4e
xor eax, 0x2f10b6ac
rol eax, 0x96
popf
jmp 0x1400b4524
mov ecx, 0x908a6883
pushf
not ecx
add ecx, 0x8beaf7a
xor ecx, 0x513d898d
rol ecx, 0xd9
popf
pushf
not ecx
add ecx, 0x6af4e80b
xor ecx, 0x74a2ce6c
rol ecx, 0x77
popf
call fcn.1400b885b
mov ecx, 0xd44874e9
pushf
not ecx
add ecx, 0x7c0e2293
xor ecx, 0x352d7a67
rol ecx, 0x6f
popf
pushf
not ecx
add ecx, 0x119534ce
xor ecx, 0x255fd88b
rol ecx, 0x3e
popf
pushf
not ecx
add ecx, 0x3c5d1e05
xor ecx, 0x6d6b4adf
rol ecx, 0xa5
popf
pushf
not ecx
add ecx, 0x35d13d52
xor ecx, 0xc55c367
rol ecx, 0x3e
popf
cmp ax, cx
jne 0x1400b54c0
push rax
pushf
mov eax, 0x1b6feffd
pushf
not eax
add eax, 0x185a8335
xor eax, 0x4959849d
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x28ebdd22
xor eax, 0x6c914c4
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x4a510cc9
xor eax, 0x2dd5517c
rol eax, 0x79
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x290a3b3d
pushf
not eax
add eax, 0x6f04aff2
xor eax, 0x670316b5
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x42ab6b28
xor eax, 0x46b22e47
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x1659f66c
xor eax, 0x7399c567
rol eax, 0x28
popf
jmp 0x1400b4524
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x1400b550e
inc edi
push rax
pushf
mov eax, 0xcba562fc
pushf
not eax
add eax, 0x7bebba86
xor eax, 0x7e540d92
rol eax, 0x45
popf
pushf
not eax
add eax, 0x2ed0aad3
xor eax, 0x6c854959
rol eax, 0xf7
popf
jmp 0x1400b4524
add r15, 2
cmp r15, r12
jae 0x1400b55a5
push rax
pushf
mov eax, 0x4d3a5f30
pushf
not eax
add eax, 0x22741083
xor eax, 0x3cf23888
rol eax, 0x56
popf
pushf
not eax
add eax, 0x5fec6cbb
xor eax, 0xffb0e04
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x7832cd1f
xor eax, 0x18b42f74
rol eax, 0x99
popf
pushf
not eax
add eax, 0x41e7968b
xor eax, 0x18d705ce
rol eax, 0x80
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xdc14167c
pushf
not eax
add eax, 0x55b0ee03
xor eax, 0x39aa811c
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x5f4a1720
xor eax, 0x1b46b1b7
rol eax, 0x84
popf
jmp 0x1400b4524
jmp 0x1400b52bc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x2fd1b576
pushf
not eax
add eax, 0x7de61bd2
xor eax, 0x2adf79cc
rol eax, 0x87
popf
pushf
not eax
add eax, 0x7fced732
xor eax, 0x19b33282
rol eax, 0x29
popf
pushf
not eax
add eax, 0x6f0ce719
xor eax, 0x55d8ed11
rol eax, 0x4b
popf
jmp 0x1400b4524
mov r12, qword [rbp - 0x18]
jmp 0x1400b5bb3
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.140018dd0
push rax
pushf
mov eax, 0xff6c2722
pushf
not eax
add eax, 0x122eaac8
xor eax, 0x70a94f6
rol eax, 0x60
popf
pushf
not eax
add eax, 0x3d630fca
xor eax, 0x279afbf6
rol eax, 0x7b
popf
jmp 0x1400b4524
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1400b5bb8
lea rdx, [0x19954515b]
pushf
sub rdx, 0x59515b4b
popf
push rax
pushf
mov eax, 0xadea185f
pushf
not eax
add eax, 0x40ca819b
xor eax, 0xef1c75
rol eax, 0xef
popf
pushf
not eax
add eax, 0x732ecf71
xor eax, 0x2283bf8c
rol eax, 0x68
popf
pushf
not eax
add eax, 0x4b02e6e
xor eax, 0x3b648d3
rol eax, 0x2b
popf
jmp 0x1400b4524
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x1400b57f4
push rax
pushf
mov eax, 0x17338ef5
pushf
not eax
add eax, 0x55e96705
xor eax, 0x58e3f972
rol eax, 0xc
popf
pushf
not eax
add eax, 0x6f6eb60d
xor eax, 0xfb44dee
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xadd147b
xor eax, 0x31da31e9
rol eax, 0xa4
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x9f8a1c3d
pushf
not eax
add eax, 0x1a089a8d
xor eax, 0xb3e515e
rol eax, 0x70
popf
pushf
not eax
add eax, 0x39373f88
xor eax, 0xa25ced3
rol eax, 0xbe
popf
jmp 0x1400b4524
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x1400b5862
push rax
pushf
mov eax, 0x43511a00
pushf
not eax
add eax, 0x2f624d71
xor eax, 0xdcb9f99
rol eax, 0x28
popf
pushf
not eax
add eax, 0x39e6acd4
xor eax, 0x5f19c2f2
rol eax, 0x50
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x288b4e1d
pushf
not eax
add eax, 0x1afd5542
xor eax, 0x504f186a
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x1cbdbc71
xor eax, 0x6fab584c
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x625844fb
xor eax, 0xc51aab7
rol eax, 0x66
popf
jmp 0x1400b4524
sub ecx, 1
je 0x1400b58e0
push rax
pushf
mov eax, 0xf25fa8af
pushf
not eax
add eax, 0x7691d557
xor eax, 0x7d67eacf
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x89f268a
xor eax, 0x15e319b8
rol eax, 0xf1
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x7ff553ba
pushf
not eax
add eax, 0x2eb71364
xor eax, 0x7023b592
rol eax, 0x35
popf
pushf
not eax
add eax, 0x391c47e0
xor eax, 0x31a06b96
rol eax, 0x62
popf
jmp 0x1400b4524
cmp ecx, 1
jne 0x1400b594f
push rax
pushf
mov eax, 0x5df02c34
pushf
not eax
add eax, 0x2ddcfee1
xor eax, 0x75bf8935
rol eax, 0xb3
popf
pushf
not eax
add eax, 0x4d146044
xor eax, 0x70648da9
rol eax, 0x70
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xcf3810af
pushf
not eax
add eax, 0x1a5b7256
xor eax, 0x35f68de5
rol eax, 0x91
popf
pushf
not eax
add eax, 0x39ceafba
xor eax, 0x5d50632d
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x14cc483b
xor eax, 0x30dca56a
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x72db1161
xor eax, 0x79332e91
rol eax, 0xe3
popf
jmp 0x1400b4524
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1400b2c7c
jmp 0x1400b570c
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1400b3472
jmp 0x1400b570c
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1400b2517
jmp 0x1400b570c
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x1400b5add
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400b5b1a
push rax
pushf
mov eax, 0x83427453
pushf
not eax
add eax, 0x6cfd4104
xor eax, 0xd1ed0c1
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x63bd7818
xor eax, 0x5498573d
rol eax, 0xa2
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x7c7e956c
pushf
not eax
add eax, 0x3cf16816
xor eax, 0xc166053
rol eax, 0x18
popf
pushf
not eax
add eax, 0x35002805
xor eax, 0x4a33c350
rol eax, 0xc4
popf
jmp 0x1400b4524
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x5d26611a
pushf
not eax
add eax, 0x104d71f0
xor eax, 0x7eeb2439
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x1da5423f
xor eax, 0x110af05
rol eax, 0x23
popf
pushf
not eax
add eax, 0x1dc9c84
xor eax, 0x63922c75
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x2cde37c2
xor eax, 0x68bd8bb8
rol eax, 0x22
popf
jmp 0x1400b4524
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0xe105b62f
pushf
not eax
add eax, 0x2def9411
xor eax, 0x1e0aab30
rol eax, 0x8f
popf
pushf
not eax
add eax, 0x7b140aa9
xor eax, 0x686ee2c1
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x170527e6
xor eax, 0x1b994574
rol eax, 0xff
popf
jmp 0x1400b4524
lea rdx, [0x1ac441f45]
pushf
sub rdx, 0x6c412935
popf
push rax
pushf
mov eax, 0x1e33e1b7
pushf
not eax
add eax, 0x38a40386
xor eax, 0x658134d1
rol eax, 0x47
popf
pushf
not eax
add eax, 0x3a2d4bfa
xor eax, 0x41a2beaa
rol eax, 0x9c
popf
jmp 0x1400b4524
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x1400b5c9a
push rax
pushf
mov eax, 0x5ea76f1b
pushf
not eax
add eax, 0x74747530
xor eax, 0x1a76e41a
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x60185b39
xor eax, 0x385aa46c
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x28d36d6a
xor eax, 0x493183fb
rol eax, 0xb
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xeecf8d6d
pushf
not eax
add eax, 0x5a76785f
xor eax, 0x2cf34924
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x7f952b66
xor eax, 0x30255f87
rol eax, 0x35
popf
pushf
not eax
add eax, 0x27c30e3a
xor eax, 0x2a9eb9b9
rol eax, 0x40
popf
pushf
not eax
add eax, 0x1355a3ad
xor eax, 0x5e9d29a5
rol eax, 0xe6
popf
jmp 0x1400b4524
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x1400b5d2d
push rax
pushf
mov eax, 0xd079f261
pushf
not eax
add eax, 0x13107de
xor eax, 0x3f830e6f
rol eax, 0x16
popf
pushf
not eax
add eax, 0x2dae984f
xor eax, 0x68c1cb48
rol eax, 0x30
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0x4a69ec4
pushf
not eax
add eax, 0x46c77df0
xor eax, 0x3c7d776c
rol eax, 0x9a
popf
pushf
not eax
add eax, 0x65d7eae5
xor eax, 0x4c5e7443
rol eax, 0x6a
popf
jmp 0x1400b4524
cmp eax, 5
jne 0x1400b5d98
push rax
pushf
mov eax, 0xc6535401
pushf
not eax
add eax, 0x940dc93
xor eax, 0xcf8c799
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x7f375e05
xor eax, 0x582cb68b
rol eax, 0xa2
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xe7100110
pushf
not eax
add eax, 0x7189d20e
xor eax, 0x33cf6713
rol eax, 0x82
popf
pushf
not eax
add eax, 0x5054b247
xor eax, 0x28009ffe
rol eax, 6
popf
pushf
not eax
add eax, 0x6b73c2b
xor eax, 0x2e4eb9a
rol eax, 0xde
popf
pushf
not eax
add eax, 0x1ddfdc6e
xor eax, 0x733e0f7b
rol eax, 0x41
popf
jmp 0x1400b4524
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x1400b496e
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.14008a8dc
jmp 0x1400b496e
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x1400b5f09
push rax
pushf
mov eax, 0x37cf0646
pushf
not eax
add eax, 0x7f0eaad5
xor eax, 0x2f1dcbd7
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x73e8bd42
xor eax, 0x4e3c7036
rol eax, 0x46
popf
pushf
not eax
add eax, 0x43606c1c
xor eax, 0x2d3dbfc
rol eax, 0x2a
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xea3ecc6e
pushf
not eax
add eax, 0x25c466e5
xor eax, 0x7670bd21
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x5038df32
xor eax, 0x55a53f8b
rol eax, 0x9a
popf
jmp 0x1400b4524
cmp byte [rsi], 0x1a
je 0x1400b5f74
push rax
pushf
mov eax, 0x4287f602
pushf
not eax
add eax, 0x5f9fa3d7
xor eax, 0x1f729881
rol eax, 7
popf
pushf
not eax
add eax, 0x3e8b4ed0
xor eax, 0x6bf0a44e
rol eax, 0xc7
popf
jmp 0x1400b4524
push rax
pushf
mov eax, 0xf3783988
pushf
not eax
add eax, 0x33e7f675
xor eax, 0x669b69b6
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x294d3b54
xor eax, 0x4fa2e492
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x34bb0e0
xor eax, 0x648b0c9
rol eax, 0x38
popf
jmp 0x1400b4524
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x1400b496e
mov eax, dword [rbp - 0x2c]
push rdi
not edi
add eax, edi
pop rdi
add eax, 1
jmp 0x1400b60a4
xor eax, eax
push rax
pushf
mov eax, 0xb5711a30
pushf
not eax
add eax, 0x46d03726
xor eax, 0x6a6d4d52
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x2676317c
xor eax, 0x30080e2c
rol eax, 0xd1
popf
jmp 0x1400b4524
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret