Function at 0x14004ac5f
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x37b5884f
pushf
not eax
add eax, 0xe9fd7b09
xor eax, 0xf264d55a
rol eax, 0x32
popf
pushf
not eax
add eax, 0xc45bc9ba
xor eax, 0xf12bf20c
rol eax, 0xff
popf
pushf
not eax
add eax, 0x9ffe4698
xor eax, 0xb50ba907
rol eax, 0x43
popf
cmp eax, 0x29
jne 0x14004acaf
popf
pop rax
jmp 0x14004c40c
cmp eax, 0
jne 0x14004acbe
popf
pop rax
jmp 0x14004afac
cmp eax, 3
jne 0x14004accd
popf
pop rax
jmp 0x14004b14b
cmp eax, 1
jne 0x14004acdc
popf
pop rax
jmp 0x14004b076
cmp eax, 0xd
jne 0x14004aceb
popf
pop rax
jmp 0x14004b739
cmp eax, 0x1a
jne 0x14004acfa
popf
pop rax
jmp 0x14004bdc5
cmp eax, 0xe
jne 0x14004ad09
popf
pop rax
jmp 0x14004b7ce
cmp eax, 0x31
jne 0x14004ad18
popf
pop rax
jmp 0x14004c861
cmp eax, 0x19
jne 0x14004ad27
popf
pop rax
jmp 0x14004bd89
cmp eax, 8
jne 0x14004ad36
popf
pop rax
jmp 0x14004b42c
cmp eax, 0x2a
jne 0x14004ad45
popf
pop rax
jmp 0x14004c4ca
cmp eax, 0x17
jne 0x14004ad54
popf
pop rax
jmp 0x14004bca8
cmp eax, 0x1c
jne 0x14004ad63
popf
pop rax
jmp 0x14004be4b
cmp eax, 0x2e
jne 0x14004ad72
popf
pop rax
jmp 0x14004c6c7
cmp eax, 0x18
jne 0x14004ad81
popf
pop rax
jmp 0x14004bd3d
cmp eax, 0x2b
jne 0x14004ad90
popf
pop rax
jmp 0x14004c570
cmp eax, 0x1b
jne 0x14004ad9f
popf
pop rax
jmp 0x14004be01
cmp eax, 0x2d
jne 0x14004adae
popf
pop rax
jmp 0x14004c65e
cmp eax, 0x23
jne 0x14004adbd
popf
pop rax
jmp 0x14004c1b6
cmp eax, 0x25
jne 0x14004adcc
popf
pop rax
jmp 0x14004c270
cmp eax, 0x32
jne 0x14004addb
popf
pop rax
jmp 0x14004c89b
cmp eax, 0x13
jne 0x14004adea
popf
pop rax
jmp 0x14004ba85
cmp eax, 0x33
jne 0x14004adf9
popf
pop rax
jmp 0x14004c8d0
cmp eax, 0x24
jne 0x14004ae08
popf
pop rax
jmp 0x14004c213
cmp eax, 0x1e
jne 0x14004ae17
popf
pop rax
jmp 0x14004becf
cmp eax, 0xc
jne 0x14004ae26
popf
pop rax
jmp 0x14004b68b
cmp eax, 0x26
jne 0x14004ae35
popf
pop rax
jmp 0x14004c312
cmp eax, 0x27
jne 0x14004ae44
popf
pop rax
jmp 0x14004c374
cmp eax, 0x30
jne 0x14004ae53
popf
pop rax
jmp 0x14004c803
cmp eax, 0x10
jne 0x14004ae62
popf
pop rax
jmp 0x14004b8f7
cmp eax, 0x2c
jne 0x14004ae71
popf
pop rax
jmp 0x14004c601
cmp eax, 9
jne 0x14004ae80
popf
pop rax
jmp 0x14004b4c7
cmp eax, 4
jne 0x14004ae8f
popf
pop rax
jmp 0x14004b210
cmp eax, 0x16
jne 0x14004ae9e
popf
pop rax
jmp 0x14004bc58
cmp eax, 0x28
jne 0x14004aead
popf
pop rax
jmp 0x14004c3b4
cmp eax, 0xa
jne 0x14004aebc
popf
pop rax
jmp 0x14004b56c
cmp eax, 0x22
jne 0x14004aecb
popf
pop rax
jmp 0x14004c146
cmp eax, 0x14
jne 0x14004aeda
popf
pop rax
jmp 0x14004bb17
cmp eax, 7
jne 0x14004aee9
popf
pop rax
jmp 0x14004b367
cmp eax, 5
jne 0x14004aef8
popf
pop rax
jmp 0x14004b27f
cmp eax, 2
jne 0x14004af07
popf
pop rax
jmp 0x14004b0e1
cmp eax, 0x20
jne 0x14004af16
popf
pop rax
jmp 0x14004c020
cmp eax, 0x1d
jne 0x14004af25
popf
pop rax
jmp 0x14004be8a
cmp eax, 0x11
jne 0x14004af34
popf
pop rax
jmp 0x14004b979
cmp eax, 6
jne 0x14004af43
popf
pop rax
jmp 0x14004b313
cmp eax, 0x2f
jne 0x14004af52
popf
pop rax
jmp 0x14004c74c
cmp eax, 0x12
jne 0x14004af61
popf
pop rax
jmp 0x14004ba3b
cmp eax, 0x21
jne 0x14004af70
popf
pop rax
jmp 0x14004c0b1
cmp eax, 0x1f
jne 0x14004af7f
popf
pop rax
jmp 0x14004bf79
cmp eax, 0xb
jne 0x14004af8e
popf
pop rax
jmp 0x14004b5cc
cmp eax, 0xf
jne 0x14004af9d
popf
pop rax
jmp 0x14004b879
cmp eax, 0x15
jne 0x14004afac
popf
pop rax
jmp 0x14004bbd7
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x14004b01d
push rax
pushf
mov eax, 0x6ca0d86
pushf
not eax
add eax, 0xc9304451
xor eax, 0xb7e719dc
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xe23d53a8
xor eax, 0xc2fd8343
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xbcf02d84
xor eax, 0xeb7f7ef5
rol eax, 0x1d
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x4b2bd121
pushf
not eax
add eax, 0x889e1257
xor eax, 0xe479e48e
rol eax, 0x16
popf
pushf
not eax
add eax, 0xe6674ed7
xor eax, 0xf2713b10
rol eax, 0x74
popf
pushf
not eax
add eax, 0xe7672339
xor eax, 0xb0af1571
rol eax, 0x85
popf
pushf
not eax
add eax, 0xa66cde99
xor eax, 0xceb4160c
rol eax, 0xa
popf
jmp 0x14004aca0
test rdx, rdx
jne 0x14004b0ae
push rax
pushf
mov eax, 0x2aefe0ab
pushf
not eax
add eax, 0xd77da80c
xor eax, 0xf56a74f2
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x896aceb9
xor eax, 0xbb216f1a
rol eax, 0x36
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x2dc7988b
pushf
not eax
add eax, 0x96e8cd3c
xor eax, 0xde179ac9
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xa9b37454
xor eax, 0xe3cc9779
rol eax, 6
popf
jmp 0x14004aca0
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140053354
or eax, 0xffffffff
jmp 0x14004c8d0
mov rax, r15
lea rcx, [0x18baa2c84]
pushf
sub rcx, 0x4ba866a4
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x14004b1dd
push rax
pushf
mov eax, 0xffec1182
pushf
not eax
add eax, 0x8f751608
xor eax, 0xbc20eb47
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x9d1f7ac5
xor eax, 0xdd57d95d
rol eax, 0x96
popf
pushf
not eax
add eax, 0x8891352d
xor eax, 0xae14eaf7
rol eax, 0x34
popf
pushf
not eax
add eax, 0xa1f35c45
xor eax, 0xf20b8e79
rol eax, 0x83
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xcfe279ae
pushf
not eax
add eax, 0xdb0079c2
xor eax, 0x9bbe7c32
rol eax, 0x2c
popf
pushf
not eax
add eax, 0x99cd1dba
xor eax, 0x920104af
rol eax, 0xcf
popf
jmp 0x14004aca0
mov eax, r14d
not eax
test al, 1
je 0x14004b24c
push rax
pushf
mov eax, 0xab0cee68
pushf
not eax
add eax, 0xae02849f
xor eax, 0x95bc0d50
rol eax, 0x97
popf
pushf
not eax
add eax, 0x97c299d0
xor eax, 0xe462f502
rol eax, 0xae
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x7ceb3683
pushf
not eax
add eax, 0xcd82d824
xor eax, 0xb472c842
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xd0aec5bf
xor eax, 0xe344e2da
rol eax, 0xc6
popf
jmp 0x14004aca0
test byte [rcx + r13*8 + 0x38], 0x20
je 0x14004b2cd
push rax
pushf
mov eax, 0xcda3a865
pushf
not eax
add eax, 0xdc3b842a
xor eax, 0xda4f4e51
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xebe7436e
xor eax, 0xa0af4f56
rol eax, 0x69
popf
pushf
not eax
add eax, 0x9f37d4ef
xor eax, 0xc0d4a9b3
rol eax, 0x37
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xd72a16ac
pushf
not eax
add eax, 0xb165e2aa
xor eax, 0xfabfd166
rol eax, 0x29
popf
pushf
not eax
add eax, 0x83ac570c
xor eax, 0xd7570a74
rol eax, 0x71
popf
pushf
not eax
add eax, 0xfe0cf729
xor eax, 0xa88e5ee8
rol eax, 0x32
popf
jmp 0x14004aca0
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.14005d742
push rax
pushf
mov eax, 0x227195f
pushf
not eax
add eax, 0xda284da4
xor eax, 0xbd0a2fa3
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xba2f69dc
xor eax, 0x84076187
rol eax, 0x20
popf
pushf
not eax
add eax, 0xfeafc17f
xor eax, 0xd394dd8d
rol eax, 0xcf
popf
jmp 0x14004aca0
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.140034999
lea rdx, [0x1b87fa9f1]
pushf
sub rdx, 0x787de411
popf
test eax, eax
je 0x14004b3e6
push rax
pushf
mov eax, 0x9c16a7be
pushf
not eax
add eax, 0xbcc34cc2
xor eax, 0xb304faea
rol eax, 0xa
popf
pushf
not eax
add eax, 0x8fc9ff11
xor eax, 0xcd6ad7c5
rol eax, 0x75
popf
pushf
not eax
add eax, 0xe0bed7e5
xor eax, 0x8600169f
rol eax, 0x71
popf
pushf
not eax
add eax, 0x82e378a7
xor eax, 0xb84a04f2
rol eax, 0x14
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xe8ac5417
pushf
not eax
add eax, 0x9bb91a3e
xor eax, 0xd35aa88d
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xd9217ae5
xor eax, 0xe39db901
rol eax, 0x22
popf
pushf
not eax
add eax, 0xb70d7412
xor eax, 0x9ce123d6
rol eax, 0xe4
popf
jmp 0x14004aca0
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x14004b494
push rax
pushf
mov eax, 0xf1b6cfe9
pushf
not eax
add eax, 0xf4705318
xor eax, 0xa71c078d
rol eax, 0x95
popf
pushf
not eax
add eax, 0xaae8e2e7
xor eax, 0x84a5b2d2
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x88988066
xor eax, 0xd7f17ec3
rol eax, 0x49
popf
pushf
not eax
add eax, 0x8279df9a
xor eax, 0xd3e9f2be
rol eax, 0xf4
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xa1efbce3
pushf
not eax
add eax, 0xc59ee349
xor eax, 0xc22f037a
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xec9cf188
xor eax, 0x849ed985
rol eax, 0xc8
popf
jmp 0x14004aca0
cmp byte [rbx + 0x28], dil
jne 0x14004b513
push rax
pushf
mov eax, 0xabe8b47a
pushf
not eax
add eax, 0x8938b153
xor eax, 0xc5d753d5
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xec58f1a2
xor eax, 0xcad3fe2c
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x82b3b7fa
xor eax, 0xfa16042e
rol eax, 0xf7
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x1f507678
pushf
not eax
add eax, 0xeb2fad30
xor eax, 0xa8297309
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xeb99ffe7
xor eax, 0xa5c77bf9
rol eax, 0x78
popf
pushf
not eax
add eax, 0xbb45a64a
xor eax, 0xb888046d
rol eax, 0x22
popf
pushf
not eax
add eax, 0xe49b96f7
xor eax, 0x8afb88e7
rol eax, 0x75
popf
jmp 0x14004aca0
mov rcx, rbx
call fcn.140067bf9
lea rdx, [0x1a2907991]
pushf
sub rdx, 0x628eb3b1
popf
push rax
pushf
mov eax, 0x3b21f452
pushf
not eax
add eax, 0xb5380914
xor eax, 0xe04b82cd
rol eax, 0
popf
pushf
not eax
add eax, 0xbadbe5fb
xor eax, 0xd8ff23db
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x9280dda2
xor eax, 0xba14e91f
rol eax, 0xf9
popf
jmp 0x14004aca0
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x14004b632
push rax
pushf
mov eax, 0x6396d536
pushf
not eax
add eax, 0x84db458c
xor eax, 0x931e1b8e
rol eax, 0x71
popf
pushf
not eax
add eax, 0xa4b6d09e
xor eax, 0xa32e299e
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xfa336915
xor eax, 0xe2699391
rol eax, 0x77
popf
pushf
not eax
add eax, 0x837ac772
xor eax, 0xe14f2765
rol eax, 4
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x77b0fce7
pushf
not eax
add eax, 0x9a37461e
xor eax, 0xd3c1142d
rol eax, 0x56
popf
pushf
not eax
add eax, 0x915164de
xor eax, 0x95a4838b
rol eax, 0x71
popf
pushf
not eax
add eax, 0xed22d536
xor eax, 0x823adf95
rol eax, 0x45
popf
pushf
not eax
add eax, 0xab3125a3
xor eax, 0xe377d6b9
rol eax, 0x97
popf
jmp 0x14004aca0
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x14004b6e0
push rax
pushf
mov eax, 0x19b8193b
pushf
not eax
add eax, 0x90a73013
xor eax, 0xea825d0d
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xa7114c82
xor eax, 0xe7d9e685
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xc49f7dfe
xor eax, 0xcf0163de
rol eax, 0x25
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xfb1b90b4
pushf
not eax
add eax, 0xeb57d7fa
xor eax, 0x869167fb
rol eax, 0xe9
popf
pushf
not eax
add eax, 0xa63618d6
xor eax, 0xd98f0f64
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xb0ef210f
xor eax, 0xf1e00196
rol eax, 0x57
popf
pushf
not eax
add eax, 0xecf6571d
xor eax, 0xf6c29745
rol eax, 0xcf
popf
jmp 0x14004aca0
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x14004b747
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x14004b788
push rax
pushf
mov eax, 0x87774dc1
pushf
not eax
add eax, 0xab0cc396
xor eax, 0xeaf489ae
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x9127f5e3
xor eax, 0xbac0e5ff
rol eax, 0xaf
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xb0b8670c
pushf
not eax
add eax, 0xa4a13344
xor eax, 0xaff31ced
rol eax, 0xcf
popf
pushf
not eax
add eax, 0xbb913754
xor eax, 0xecee0ee1
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x9da9b7f2
xor eax, 0xcdb737d8
rol eax, 0x7c
popf
jmp 0x14004aca0
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x14004b820
push rax
pushf
mov eax, 0x60b58041
pushf
not eax
add eax, 0xa113373d
xor eax, 0x8d3d56c3
rol eax, 0xb
popf
pushf
not eax
add eax, 0x92c37f5e
xor eax, 0xdd01843a
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf6b0c1af
xor eax, 0xf4ca7d38
rol eax, 0x7a
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x31b20681
pushf
not eax
add eax, 0xb9db6423
xor eax, 0xca3be305
rol eax, 0xed
popf
pushf
not eax
add eax, 0xedfaeaf6
xor eax, 0xbddc441c
rol eax, 4
popf
pushf
not eax
add eax, 0xd951ff87
xor eax, 0xe77b0e5f
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd4447e13
xor eax, 0xcfb12493
rol eax, 0xe7
popf
jmp 0x14004aca0
sub ecx, 1
je 0x14004b8b1
push rax
pushf
mov eax, 0x8f6592f9
pushf
not eax
add eax, 0xa150b69f
xor eax, 0xe908ff9c
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb95c6339
xor eax, 0x8065543a
rol eax, 0x9d
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x71371454
pushf
not eax
add eax, 0xe0da1e93
xor eax, 0x9f8a2bf3
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xd1e50f65
xor eax, 0xd0863500
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xd19f981f
xor eax, 0xcee6a077
rol eax, 0x91
popf
jmp 0x14004aca0
cmp ecx, 1
jne 0x14004b946
push rax
pushf
mov eax, 0x47bf581
pushf
not eax
add eax, 0xe1f5a17e
xor eax, 0xa4a48407
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x9ee16a4c
xor eax, 0xe9672798
rol eax, 0xb
popf
pushf
not eax
add eax, 0xe3bd973f
xor eax, 0xeadc34fc
rol eax, 0xc7
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x1ec03b89
pushf
not eax
add eax, 0x86f1e327
xor eax, 0xab17cc81
rol eax, 0x24
popf
pushf
not eax
add eax, 0xe8ddd5c9
xor eax, 0xb65f23fc
rol eax, 0xd0
popf
jmp 0x14004aca0
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x14004b9e2
push rax
pushf
mov eax, 0x4618da52
pushf
not eax
add eax, 0x861a94a2
xor eax, 0x86160685
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xbe066ee5
xor eax, 0xcfd8dd88
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xbd79c848
xor eax, 0x8da4d172
rol eax, 0x28
popf
pushf
not eax
add eax, 0xad946a22
xor eax, 0xde6273e8
rol eax, 0x9c
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xb13aa0b6
pushf
not eax
add eax, 0xa94cda69
xor eax, 0xfd27e268
rol eax, 0x81
popf
pushf
not eax
add eax, 0x92542bf1
xor eax, 0xffe7f7d5
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xad429728
xor eax, 0xfbad986a
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xbd83eed0
xor eax, 0xc9297c5b
rol eax, 0x57
popf
jmp 0x14004aca0
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0x9a70f136
pushf
not eax
add eax, 0xac2811c9
xor eax, 0xa743143f
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x943c7dcf
xor eax, 0x84d76cf1
rol eax, 0x78
popf
pushf
not eax
add eax, 0xea7c794b
xor eax, 0xdd23f18a
rol eax, 0xb4
popf
jmp 0x14004aca0
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.1400838a4
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x14004bad1
push rax
pushf
mov eax, 0x5aad054e
pushf
not eax
add eax, 0x9be520f4
xor eax, 0xc1900618
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xb4f4f741
xor eax, 0xb13d532b
rol eax, 0x78
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xbd7280af
pushf
not eax
add eax, 0xd69d853e
xor eax, 0xf7ff6b31
rol eax, 0xac
popf
pushf
not eax
add eax, 0xee7829cb
xor eax, 0xeb6ad3f3
rol eax, 0xee
popf
pushf
not eax
add eax, 0x8ec6ed84
xor eax, 0xd07d1a7e
rol eax, 0x72
popf
jmp 0x14004aca0
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x14004bb7e
push rax
pushf
mov eax, 0xf96adb88
pushf
not eax
add eax, 0xacd0e4c9
xor eax, 0x8bd2cc19
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xf7a3f168
xor eax, 0xcb806f79
rol eax, 0x37
popf
pushf
not eax
add eax, 0x9e133709
xor eax, 0xb137b029
rol eax, 0x90
popf
pushf
not eax
add eax, 0xc30e1521
xor eax, 0xf2ee5c21
rol eax, 9
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x1144e1ec
pushf
not eax
add eax, 0xdbf59c4f
xor eax, 0xe25c213b
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xe1a534a8
xor eax, 0xf89e6081
rol eax, 0x65
popf
pushf
not eax
add eax, 0xffd91570
xor eax, 0xc53e75cf
rol eax, 0x99
popf
pushf
not eax
add eax, 0xdc5fdcf4
xor eax, 0xfaff0946
rol eax, 0x7e
popf
jmp 0x14004aca0
mov ecx, 0x5c011c5e
pushf
not ecx
add ecx, 0xc57830ae
xor ecx, 0xa25a7553
rol ecx, 0xf9
popf
pushf
not ecx
add ecx, 0xcbb0228d
xor ecx, 0xe49b9c2b
rol ecx, 0xc9
popf
pushf
not ecx
add ecx, 0x877a2743
xor ecx, 0x82c25055
rol ecx, 0xf6
popf
call fcn.1400838a4
mov ecx, 0x279ef76d
pushf
not ecx
add ecx, 0xf5cd0b81
xor ecx, 0xe384a8f5
rol ecx, 0xcb
popf
pushf
not ecx
add ecx, 0xf9b6989a
xor ecx, 0xa3fb672c
rol ecx, 0x4e
popf
cmp ax, cx
jne 0x14004bd89
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x14004bc60
inc edi
push rax
pushf
mov eax, 0xcb750fab
pushf
not eax
add eax, 0xa4b83561
xor eax, 0xd66e8e73
rol eax, 0x23
popf
pushf
not eax
add eax, 0xac450146
xor eax, 0x873b8125
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xc40e76e0
xor eax, 0xa2fcf135
rol eax, 0x82
popf
jmp 0x14004aca0
add r15, 2
cmp r15, r12
jae 0x14004bd0a
push rax
pushf
mov eax, 0x5344d5a0
pushf
not eax
add eax, 0x99f1433d
xor eax, 0xe0a10379
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x88a16a52
xor eax, 0xbbfaedcc
rol eax, 0xff
popf
pushf
not eax
add eax, 0xe85466a7
xor eax, 0x954a3503
rol eax, 0x41
popf
pushf
not eax
add eax, 0xdc599a14
xor eax, 0xb6e5903e
rol eax, 0xe1
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x10854e5e
pushf
not eax
add eax, 0xb5dca901
xor eax, 0xa5198f3d
rol eax, 3
popf
pushf
not eax
add eax, 0x9944ee83
xor eax, 0x8cce418a
rol eax, 8
popf
jmp 0x14004aca0
jmp 0x14004ba85
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x75ad069d
pushf
not eax
add eax, 0x81c40ccc
xor eax, 0xa18e2d0d
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xc1940726
xor eax, 0xf8a870db
rol eax, 0x15
popf
jmp 0x14004aca0
mov r12, qword [rbp - 0x18]
jmp 0x14004c377
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.14000cd28
push rax
pushf
mov eax, 0x4a990fc2
pushf
not eax
add eax, 0xa75032a8
xor eax, 0xa5238e2f
rol eax, 0x60
popf
pushf
not eax
add eax, 0xdcb5fdbf
xor eax, 0xe32650f4
rol eax, 0xb2
popf
jmp 0x14004aca0
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x14004c37c
lea rdx, [0x1b010ff3d]
pushf
sub rdx, 0x700f395d
popf
push rax
pushf
mov eax, 0xb8bd3674
pushf
not eax
add eax, 0xeae5743a
xor eax, 0xfdba3ba8
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xe3403560
xor eax, 0x91a4c17b
rol eax, 0xc5
popf
jmp 0x14004aca0
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x14004bf20
push rax
pushf
mov eax, 0xb8d128e5
pushf
not eax
add eax, 0xaaa9cb01
xor eax, 0xcb018bd5
rol eax, 0x57
popf
pushf
not eax
add eax, 0x8a3067d0
xor eax, 0xf97ef25d
rol eax, 0x50
popf
pushf
not eax
add eax, 0x8dc77ee2
xor eax, 0x87812475
rol eax, 0x6b
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x8064c101
pushf
not eax
add eax, 0xcf8fbb3a
xor eax, 0x95526c4e
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x94dcdb91
xor eax, 0xa31dfccc
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x8bb7560e
xor eax, 0xa5d924d4
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xe645a7d2
xor eax, 0xbf0258f9
rol eax, 0x30
popf
jmp 0x14004aca0
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x14004bfc7
push rax
pushf
mov eax, 0xe3e28647
pushf
not eax
add eax, 0x9d955440
xor eax, 0xb8557317
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xc06f81e3
xor eax, 0xd05aa375
rol eax, 0x97
popf
pushf
not eax
add eax, 0xcc504af4
xor eax, 0xffb7f9a2
rol eax, 0xae
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x3bfa8b38
pushf
not eax
add eax, 0xae920c9b
xor eax, 0xccdfd611
rol eax, 0x55
popf
pushf
not eax
add eax, 0x859e3a10
xor eax, 0x8fecdd88
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xc009a1ad
xor eax, 0x86f0a236
rol eax, 0xab
popf
pushf
not eax
add eax, 0xda6b553f
xor eax, 0xd2f9ecee
rol eax, 0xfb
popf
jmp 0x14004aca0
sub ecx, 1
je 0x14004c058
push rax
pushf
mov eax, 0xb58f5a5b
pushf
not eax
add eax, 0xd30249ed
xor eax, 0xf904e148
rol eax, 0x29
popf
pushf
not eax
add eax, 0xb0f97054
xor eax, 0x86dbbc8b
rol eax, 0x67
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xc834de90
pushf
not eax
add eax, 0x90f0fb31
xor eax, 0xba15e8c3
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xa85f2ccd
xor eax, 0xab7ab0e7
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xfd819675
xor eax, 0xfa6bb439
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xf0d19e53
xor eax, 0xc12c0262
rol eax, 0xc8
popf
jmp 0x14004aca0
cmp ecx, 1
jne 0x14004c113
push rax
pushf
mov eax, 0xb8e3f6ae
pushf
not eax
add eax, 0xdc0d32bb
xor eax, 0xd4255442
rol eax, 0x97
popf
pushf
not eax
add eax, 0xb45a6c11
xor eax, 0x92221f4f
rol eax, 0xae
popf
pushf
not eax
add eax, 0x968eb216
xor eax, 0xc1216afc
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xacd5c4ae
xor eax, 0x8ad31e12
rol eax, 0x5b
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x367efb7f
pushf
not eax
add eax, 0xb37a5f7e
xor eax, 0xdb951612
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xc044ec7d
xor eax, 0xe48e7153
rol eax, 0x30
popf
jmp 0x14004aca0
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140048bb3
jmp 0x14004be4b
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140065aa1
jmp 0x14004be4b
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.14003637e
jmp 0x14004be4b
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x14004c28e
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x14004c2cb
push rax
pushf
mov eax, 0x1570f711
pushf
not eax
add eax, 0xbeeaed8d
xor eax, 0x9087bbcb
rol eax, 0x78
popf
pushf
not eax
add eax, 0x9aee96b3
xor eax, 0xe3349865
rol eax, 0xa
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xe8f9c1fb
pushf
not eax
add eax, 0xb34226d9
xor eax, 0xf252f109
rol eax, 0x85
popf
pushf
not eax
add eax, 0xc97c0f14
xor eax, 0xdeb7d4b3
rol eax, 0xd
popf
pushf
not eax
add eax, 0xecfacc1d
xor eax, 0xfcf2e90d
rol eax, 0x63
popf
jmp 0x14004aca0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x82dd0da0
pushf
not eax
add eax, 0x8e2deddf
xor eax, 0xacbf15c3
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xbd57d59e
xor eax, 0xa0c1e48f
rol eax, 0x62
popf
pushf
not eax
add eax, 0xe968deec
xor eax, 0xc0c883a1
rol eax, 9
popf
pushf
not eax
add eax, 0xeac918b2
xor eax, 0x90868a8d
rol eax, 0x71
popf
jmp 0x14004aca0
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0xee6c6c99
pushf
not eax
add eax, 0x949b5d9b
xor eax, 0x876f91e7
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xa9ae0e3c
xor eax, 0x9fa3070f
rol eax, 0xe3
popf
jmp 0x14004aca0
lea rdx, [0x188fc762b]
pushf
sub rdx, 0x48fab04b
popf
push rax
pushf
mov eax, 0x3cb38566
pushf
not eax
add eax, 0x8c8c9c7a
xor eax, 0xe8bb83e2
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xd68b94d1
xor eax, 0xdfedd0f1
rol eax, 0x15
popf
pushf
not eax
add eax, 0xf007148e
xor eax, 0x9e6d1682
rol eax, 0xdc
popf
jmp 0x14004aca0
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x14004c471
push rax
pushf
mov eax, 0x3337337f
pushf
not eax
add eax, 0x933509c6
xor eax, 0xb876c27d
rol eax, 0x15
popf
pushf
not eax
add eax, 0xbd2d24f6
xor eax, 0x93b0fdaa
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xbcea0b5e
xor eax, 0xadb75d91
rol eax, 0xfe
popf
pushf
not eax
add eax, 0xa0db4c42
xor eax, 0x8fc325cd
rol eax, 0xb6
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0xee094d81
pushf
not eax
add eax, 0xa58d7a7c
xor eax, 0x91cfd106
rol eax, 0x67
popf
pushf
not eax
add eax, 0xba40a6f0
xor eax, 0xf48af94e
rol eax, 0xea
popf
pushf
not eax
add eax, 0xd2de96cd
xor eax, 0xa4a22c6d
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x87aa8b09
xor eax, 0xb4a0e2ff
rol eax, 0x75
popf
jmp 0x14004aca0
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x14004c517
push rax
pushf
mov eax, 0x1b6e6bcb
pushf
not eax
add eax, 0xd36d029b
xor eax, 0xa6fd9328
rol eax, 0xed
popf
pushf
not eax
add eax, 0x97fa0829
xor eax, 0xb56858d4
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xb555bf47
xor eax, 0xfc511e89
rol eax, 0x5a
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x29bdd4ce
pushf
not eax
add eax, 0xb43dfdbd
xor eax, 0xaf1c420b
rol eax, 0x38
popf
pushf
not eax
add eax, 0xa5ecdb36
xor eax, 0xc96f54e4
rol eax, 0xba
popf
pushf
not eax
add eax, 0xbeadf41f
xor eax, 0xfe3414de
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xd12ad2b1
xor eax, 0xadd6545c
rol eax, 0xa2
popf
jmp 0x14004aca0
cmp eax, 5
jne 0x14004c5bb
push rax
pushf
mov eax, 0x865118c0
pushf
not eax
add eax, 0x8720dd72
xor eax, 0xda1b23d6
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xbad578b4
xor eax, 0xa12ec1ba
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x94a578cc
xor eax, 0xad988275
rol eax, 0x47
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x8890df48
pushf
not eax
add eax, 0x89b4c9dc
xor eax, 0xf298aa08
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x97644c0f
xor eax, 0xc95c0045
rol eax, 0x83
popf
pushf
not eax
add eax, 0xf2b37485
xor eax, 0x9db1add3
rol eax, 0x63
popf
jmp 0x14004aca0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x14004b110
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.140053a08
jmp 0x14004b110
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x14004c706
push rax
pushf
mov eax, 0x3ed19dcf
pushf
not eax
add eax, 0xbacf1075
xor eax, 0xaf36a215
rol eax, 0x33
popf
pushf
not eax
add eax, 0xeb361b0f
xor eax, 0xa5af74bb
rol eax, 2
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x945aa55f
pushf
not eax
add eax, 0x93f1c402
xor eax, 0x819e5c65
rol eax, 0x71
popf
pushf
not eax
add eax, 0xf592cc82
xor eax, 0x995fb2b4
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xcaf3a54d
xor eax, 0xb4149a69
rol eax, 0xd6
popf
jmp 0x14004aca0
cmp byte [rsi], 0x1a
je 0x14004c7aa
push rax
pushf
mov eax, 0x1d5d5ade
pushf
not eax
add eax, 0x8ef20de0
xor eax, 0xbf0c3f79
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xa99e98b3
xor eax, 0xf8005e28
rol eax, 0x74
popf
pushf
not eax
add eax, 0xb58580d1
xor eax, 0xe04f97ff
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xa27e7a5e
xor eax, 0xbae8fe43
rol eax, 0x6a
popf
jmp 0x14004aca0
push rax
pushf
mov eax, 0x87918761
pushf
not eax
add eax, 0xd4de9476
xor eax, 0xd544f445
rol eax, 0x21
popf
pushf
not eax
add eax, 0xf2b04d90
xor eax, 0x92c49829
rol eax, 0x78
popf
pushf
not eax
add eax, 0xc6e4b886
xor eax, 0xc1738584
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xf40b6e50
xor eax, 0xd4a24f40
rol eax, 0x82
popf
jmp 0x14004aca0
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x14004b110
mov eax, dword [rbp - 0x2c]
sub eax, edi
jmp 0x14004c8d0
xor eax, eax
push rax
pushf
mov eax, 0x89be45c2
pushf
not eax
add eax, 0xf0b80598
xor eax, 0xac7103e0
rol eax, 0x96
popf
pushf
not eax
add eax, 0x96ac8c10
xor eax, 0xef39e9e0
rol eax, 0x87
popf
jmp 0x14004aca0
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret