Function at 0x1401fb8f0
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x3cc8e05e
pushf
not eax
add eax, 0xc09c773b
xor eax, 0xe468e371
rol eax, 0x77
popf
pushf
not eax
add eax, 0xb659aac3
xor eax, 0xe9e1a52b
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xb76ed455
xor eax, 0xaea1433a
rol eax, 0x8d
popf
cmp eax, 0x29
jne 0x1401fb940
popf
pop rax
jmp 0x1401fd0f0
cmp eax, 0
jne 0x1401fb94f
popf
pop rax
jmp 0x1401fbc2e
cmp eax, 3
jne 0x1401fb95e
popf
pop rax
jmp 0x1401fbdba
cmp eax, 1
jne 0x1401fb96d
popf
pop rax
jmp 0x1401fbcd2
cmp eax, 0xd
jne 0x1401fb97c
popf
pop rax
jmp 0x1401fc350
cmp eax, 0x1a
jne 0x1401fb98b
popf
pop rax
jmp 0x1401fca38
cmp eax, 0xe
jne 0x1401fb99a
popf
pop rax
jmp 0x1401fc41e
cmp eax, 0x31
jne 0x1401fb9a9
popf
pop rax
jmp 0x1401fd4af
cmp eax, 0x19
jne 0x1401fb9b8
popf
pop rax
jmp 0x1401fc9c8
cmp eax, 8
jne 0x1401fb9c7
popf
pop rax
jmp 0x1401fc078
cmp eax, 0x2a
jne 0x1401fb9d6
popf
pop rax
jmp 0x1401fd170
cmp eax, 0x17
jne 0x1401fb9e5
popf
pop rax
jmp 0x1401fc928
cmp eax, 0x1c
jne 0x1401fb9f4
popf
pop rax
jmp 0x1401fcae6
cmp eax, 0x2e
jne 0x1401fba03
popf
pop rax
jmp 0x1401fd339
cmp eax, 0x18
jne 0x1401fba12
popf
pop rax
jmp 0x1401fc987
cmp eax, 0x2b
jne 0x1401fba21
popf
pop rax
jmp 0x1401fd1ee
cmp eax, 0x1b
jne 0x1401fba30
popf
pop rax
jmp 0x1401fca8a
cmp eax, 0x2d
jne 0x1401fba3f
popf
pop rax
jmp 0x1401fd2c7
cmp eax, 0x23
jne 0x1401fba4e
popf
pop rax
jmp 0x1401fce4c
cmp eax, 0x25
jne 0x1401fba5d
popf
pop rax
jmp 0x1401fcf63
cmp eax, 0x32
jne 0x1401fba6c
popf
pop rax
jmp 0x1401fd4e4
cmp eax, 0x13
jne 0x1401fba7b
popf
pop rax
jmp 0x1401fc64e
cmp eax, 0x15
jne 0x1401fba8a
popf
pop rax
jmp 0x1401fc82e
cmp eax, 0x24
jne 0x1401fba99
popf
pop rax
jmp 0x1401fcf01
cmp eax, 0x1e
jne 0x1401fbaa8
popf
pop rax
jmp 0x1401fcc10
cmp eax, 0xc
jne 0x1401fbab7
popf
pop rax
jmp 0x1401fc2b5
cmp eax, 0x26
jne 0x1401fbac6
popf
pop rax
jmp 0x1401fcfac
cmp eax, 0x27
jne 0x1401fbad5
popf
pop rax
jmp 0x1401fcffc
cmp eax, 0x30
jne 0x1401fbae4
popf
pop rax
jmp 0x1401fd462
cmp eax, 0x10
jne 0x1401fbaf3
popf
pop rax
jmp 0x1401fc49a
cmp eax, 0x2c
jne 0x1401fbb02
popf
pop rax
jmp 0x1401fd25e
cmp eax, 9
jne 0x1401fbb11
popf
pop rax
jmp 0x1401fc113
cmp eax, 4
jne 0x1401fbb20
popf
pop rax
jmp 0x1401fbea4
cmp eax, 0x16
jne 0x1401fbb2f
popf
pop rax
jmp 0x1401fc88f
cmp eax, 0x28
jne 0x1401fbb3e
popf
pop rax
jmp 0x1401fd06b
cmp eax, 0xa
jne 0x1401fbb4d
popf
pop rax
jmp 0x1401fc1b8
cmp eax, 0x22
jne 0x1401fbb5c
popf
pop rax
jmp 0x1401fcdef
cmp eax, 0x14
jne 0x1401fbb6b
popf
pop rax
jmp 0x1401fc6e5
cmp eax, 7
jne 0x1401fbb7a
popf
pop rax
jmp 0x1401fbfd5
cmp eax, 5
jne 0x1401fbb89
popf
pop rax
jmp 0x1401fbf13
cmp eax, 2
jne 0x1401fbb98
popf
pop rax
jmp 0x1401fbd50
cmp eax, 0x20
jne 0x1401fbba7
popf
pop rax
jmp 0x1401fcd48
cmp eax, 0x1d
jne 0x1401fbbb6
popf
pop rax
jmp 0x1401fcb90
cmp eax, 0x11
jne 0x1401fbbc5
popf
pop rax
jmp 0x1401fc54d
cmp eax, 6
jne 0x1401fbbd4
popf
pop rax
jmp 0x1401fbf94
cmp eax, 0x2f
jne 0x1401fbbe3
popf
pop rax
jmp 0x1401fd3f1
cmp eax, 0x12
jne 0x1401fbbf2
popf
pop rax
jmp 0x1401fc5a9
cmp eax, 0x21
jne 0x1401fbc01
popf
pop rax
jmp 0x1401fcda5
cmp eax, 0x1f
jne 0x1401fbc10
popf
pop rax
jmp 0x1401fcc8e
cmp eax, 0xb
jne 0x1401fbc1f
popf
pop rax
jmp 0x1401fc21c
cmp eax, 0xf
jne 0x1401fbc2e
popf
pop rax
jmp 0x1401fc48d
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
xor edi, edi
mov r15d, r8d
movsxd r12, ecx
mov rbx, r9
mov r14, rdx
test r8d, r8d
je 0x1401fbc8c
push rax
pushf
mov eax, 0x2533dea4
pushf
not eax
add eax, 0x90b1605c
xor eax, 0xbfdb7b5a
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xb9820f7f
xor eax, 0xcf6e9208
rol eax, 0xca
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xfc875787
pushf
not eax
add eax, 0xa6b10e91
xor eax, 0xb9b2909e
rol eax, 0xd0
popf
pushf
not eax
add eax, 0x92f09d83
xor eax, 0xdefe9529
rol eax, 0x64
popf
pushf
not eax
add eax, 0xfa9349cf
xor eax, 0xc2217ce3
rol eax, 7
popf
jmp 0x1401fb931
test rdx, rdx
jne 0x1401fbd1d
push rax
pushf
mov eax, 0x1ab4bf7c
pushf
not eax
add eax, 0xb777a926
xor eax, 0x82f2ce42
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x90c42426
xor eax, 0xb5ce83dd
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x90f8f38f
xor eax, 0x8b714eec
rol eax, 0xa0
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x8b309f9e
pushf
not eax
add eax, 0xd760c32c
xor eax, 0xcf32cfbe
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xd3cf6a8c
xor eax, 0xfdc99224
rol eax, 0xc4
popf
jmp 0x1401fb931
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], socket
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.140225cc6
or eax, 0xffffffff
jmp 0x1401fd4e4
mov rax, r12
lea rdx, [0x188680d45]
pushf
sub rdx, 0x48576db5
popf
and eax, 0x3f
mov rcx, r12
sar rcx, 6
mov qword [rbp - 0x38], rcx
lea r13, [rax + rax*8]
mov rcx, qword [rdx + rcx*8]
movsx esi, byte [rcx + r13*8 + 0x39]
lea eax, [rsi - 1]
cmp al, 1
ja 0x1401fbe4b
push rax
pushf
mov eax, 0xc902562
pushf
not eax
add eax, 0xeb9870d0
xor eax, 0xcd7afbbd
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xb9a7552d
xor eax, 0x944964bc
rol eax, 0x84
popf
pushf
not eax
add eax, 0xfef2359c
xor eax, 0xfcb08196
rol eax, 0x47
popf
pushf
not eax
add eax, 0xef216475
xor eax, 0x994a4920
rol eax, 0xd9
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x6479fea3
pushf
not eax
add eax, 0xb07de36c
xor eax, 0xf1a2c8e2
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x8d18b9bc
xor eax, 0x986236f9
rol eax, 0x50
popf
pushf
not eax
add eax, 0xc8f51e56
xor eax, 0xe563103d
rol eax, 0x81
popf
pushf
not eax
add eax, 0xdf7e0c49
xor eax, 0xec7a8eb7
rol eax, 0x81
popf
jmp 0x1401fb931
mov eax, r15d
not eax
test al, 1
je 0x1401fbee0
push rax
pushf
mov eax, 0x2ee23df
pushf
not eax
add eax, 0x984bed57
xor eax, 0xfa2e5e3c
rol eax, 0x2c
popf
pushf
not eax
add eax, 0xca4a8304
xor eax, 0x9ad5cc0c
rol eax, 7
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x905cbd6e
pushf
not eax
add eax, 0xbd7a7fa9
xor eax, 0xa401a5a2
rol eax, 0x37
popf
pushf
not eax
add eax, 0xab364869
xor eax, 0xdef1aa35
rol eax, 0xd5
popf
jmp 0x1401fb931
test byte [rcx + r13*8 + 0x38], 0x20
je 0x1401fbf4e
push rax
pushf
mov eax, 0xa848b4c5
pushf
not eax
add eax, 0xc11b1c59
xor eax, 0xfbf75c72
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xc89fe18b
xor eax, 0xe9900861
rol eax, 0x13
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xca7e15f8
pushf
not eax
add eax, 0xa062c328
xor eax, 0xd1d20a85
rol eax, 0x73
popf
pushf
not eax
add eax, 0xd5711553
xor eax, 0xbbd2cc65
rol eax, 9
popf
pushf
not eax
add eax, 0xd0b6ca41
xor eax, 0xd436d9f9
rol eax, 0xe5
popf
jmp 0x1401fb931
xor edx, edx
mov ecx, r12d
lea r8d, [rdx + 2]
call fcn.14026cce9
push rax
pushf
mov eax, 0x29721b09
pushf
not eax
add eax, 0xbad6fc79
xor eax, 0x95a28526
rol eax, 0xde
popf
pushf
not eax
add eax, 0xdd74faba
xor eax, 0x9ca361a7
rol eax, 0x8b
popf
jmp 0x1401fb931
mov ecx, r12d
mov qword [rbp - 0x20], rdi
call fcn.140170d6c
mov rdx, qword [rbp - 0x38]
lea r8, [0x1a7a9c688]
pushf
sub r8, 0x679926f8
popf
test eax, eax
je 0x1401fc045
push rax
pushf
mov eax, 0xb088e445
pushf
not eax
add eax, 0xe3dcbcf0
xor eax, 0xc63e409e
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x9830064f
xor eax, 0xd1d3c008
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xbbed7f5e
xor eax, 0x96bc647c
rol eax, 0xaa
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x3c005181
pushf
not eax
add eax, 0xb7584ba7
xor eax, 0xefde55b9
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xbd9868cd
xor eax, 0x96d9167a
rol eax, 0x35
popf
jmp 0x1401fb931
mov rax, qword [r8 + rdx*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x1401fc0cd
push rax
pushf
mov eax, 0x916ae98e
pushf
not eax
add eax, 0x89596491
xor eax, 0x90b5ea41
rol eax, 0x50
popf
pushf
not eax
add eax, 0xa14f2e03
xor eax, 0xcd9bde1b
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xa75e3e17
xor eax, 0xa4d6a264
rol eax, 0xac
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xb20eaf58
pushf
not eax
add eax, 0xa21b6003
xor eax, 0xab68299b
rol eax, 0x72
popf
pushf
not eax
add eax, 0xd2e052be
xor eax, 0xeb36a66a
rol eax, 0xae
popf
pushf
not eax
add eax, 0xecdfda2e
xor eax, 0xdc0cf8e2
rol eax, 0x93
popf
jmp 0x1401fb931
cmp byte [rbx + 0x28], dil
jne 0x1401fc15f
push rax
pushf
mov eax, 0x8152ea3
pushf
not eax
add eax, 0xaca39b65
xor eax, 0xf793661f
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xdd9501f7
xor eax, 0xc02acb90
rol eax, 0x10
popf
pushf
not eax
add eax, 0xc0ca6489
xor eax, 0x990b6d18
rol eax, 0x2f
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x72b59fd9
pushf
not eax
add eax, 0xb8366d32
xor eax, 0xe0ab0706
rol eax, 0xc
popf
pushf
not eax
add eax, 0xad587c83
xor eax, 0x905be8bf
rol eax, 0xff
popf
pushf
not eax
add eax, 0xd1ef8b2a
xor eax, 0xe5656c09
rol eax, 0x11
popf
pushf
not eax
add eax, 0xe460aa8a
xor eax, 0xa0892241
rol eax, 0xc0
popf
jmp 0x1401fb931
mov rcx, rbx
call fcn.14029c78a
mov rdx, qword [rbp - 0x38]
lea r8, [0x1be757fd0]
pushf
sub r8, 0x7e64e040
popf
push rax
pushf
mov eax, 0x3fdf0228
pushf
not eax
add eax, 0xc719f442
xor eax, 0x9a3c5c91
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xc681c458
xor eax, 0xf02ee878
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xc7020ce8
xor eax, 0xe607ba01
rol eax, 0x67
popf
jmp 0x1401fb931
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x1401fc26f
push rax
pushf
mov eax, 0x7bd7f2b9
pushf
not eax
add eax, 0xb070db6d
xor eax, 0x92f28881
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xa0fba588
xor eax, 0xd8f4fb2e
rol eax, 0xd2
popf
pushf
not eax
add eax, 0x8d227af7
xor eax, 0xdf38e6bb
rol eax, 0x74
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xe3932152
pushf
not eax
add eax, 0xa605f1cb
xor eax, 0xe04a031c
rol eax, 0xde
popf
pushf
not eax
add eax, 0xd168dbbe
xor eax, 0xd17f5ca8
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x89c24c6b
xor eax, 0x8c9cef98
rol eax, 0x74
popf
jmp 0x1401fb931
mov rax, qword [r8 + rdx*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x1401fc31d
push rax
pushf
mov eax, 0x1cc8a077
pushf
not eax
add eax, 0x99e8af7f
xor eax, 0xce0dd107
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xfcfb8814
xor eax, 0x92cc5105
rol eax, 0xff
popf
pushf
not eax
add eax, 0xeaef866b
xor eax, 0xeb15c36e
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xaded9657
xor eax, 0xef2f06ff
rol eax, 0x96
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x227dd9f1
pushf
not eax
add eax, 0x87506701
xor eax, 0x8bba2f74
rol eax, 0xd7
popf
pushf
not eax
add eax, 0xe9536c3d
xor eax, 0xa55bb7eb
rol eax, 0xc9
popf
jmp 0x1401fb931
mov rcx, qword [r8 + rdx*8]
lea rdx, [rbp - 0x10]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x1401fc35e
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1401fc3c5
push rax
pushf
mov eax, 0x6aa44f62
pushf
not eax
add eax, 0xfe1ac147
xor eax, 0xfb3a0add
rol eax, 0x20
popf
pushf
not eax
add eax, 0x86d11837
xor eax, 0xf3671a8c
rol eax, 0x44
popf
pushf
not eax
add eax, 0xeae09d78
xor eax, 0xce707b33
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x9cca0150
xor eax, 0xf07c7c79
rol eax, 0x4c
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x1427a401
pushf
not eax
add eax, 0xd4bcb9f2
xor eax, 0xfb5ff126
rol eax, 0xd0
popf
pushf
not eax
add eax, 0xe65acea6
xor eax, 0xe75e6813
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xf8a43ebe
xor eax, 0xd987cc1a
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xa53847d7
xor eax, 0x8a8ee227
rol eax, 0x76
popf
jmp 0x1401fb931
test sil, sil
je 0x1401fc45a
push rax
pushf
mov eax, 0xd19ec48b
pushf
not eax
add eax, 0xf608dfc5
xor eax, 0x9de1fb96
rol eax, 0xef
popf
pushf
not eax
add eax, 0xb08edf4c
xor eax, 0xde370286
rol eax, 0xc7
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x5a3028b
pushf
not eax
add eax, 0xf2d14b62
xor eax, 0xb20d0a87
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xa4558386
xor eax, 0xd3c119bd
rol eax, 0x37
popf
jmp 0x1401fb931
dec sil
cmp sil, 1
ja 0x1401fcffc
lea r12, [r14 + r15]
mov qword [rbp - 0x30], rdi
mov r15, r14
cmp r14, r12
jae 0x1401fc4f4
push rax
pushf
mov eax, 0x2b57e77f
pushf
not eax
add eax, 0xef15cc1c
xor eax, 0xa882f8d1
rol eax, 0x29
popf
pushf
not eax
add eax, 0xae27e896
xor eax, 0xc971e807
rol eax, 0x21
popf
pushf
not eax
add eax, 0xa306c61d
xor eax, 0xd1897aab
rol eax, 0x4a
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x6aa8fdc8
pushf
not eax
add eax, 0x82b102ef
xor eax, 0xc71383b8
rol eax, 0x39
popf
pushf
not eax
add eax, 0xe219f39c
xor eax, 0xdd3464d7
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x9dc4d005
xor eax, 0xd74ba4d2
rol eax, 0xda
popf
pushf
not eax
add eax, 0xdddb208c
xor eax, 0xc3f29cc2
rol eax, 0x4c
popf
jmp 0x1401fb931
mov esi, dword [rbp - 0x2c]
push rax
pushf
mov eax, 0x73f0cdcd
pushf
not eax
add eax, 0xb4556770
xor eax, 0x94cd1e6a
rol eax, 0x16
popf
pushf
not eax
add eax, 0x9a2ae1a9
xor eax, 0xa6b21d6d
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xa0f6fa15
xor eax, 0xad655942
rol eax, 0xca
popf
pushf
not eax
add eax, 0xfc31133d
xor eax, 0xfbb045a2
rol eax, 0xc8
popf
jmp 0x1401fb931
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x10], ax
call fcn.14031eb0b
movzx ecx, word [rbp - 0x10]
cmp ax, cx
jne 0x1401fc5f5
push rax
pushf
mov eax, 0x63466dd8
pushf
not eax
add eax, 0xf722a7e2
xor eax, 0xc32bb260
rol eax, 0x95
popf
pushf
not eax
add eax, 0xc7e6c1ed
xor eax, 0xbabca63b
rol eax, 0x3a
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x507568bb
pushf
not eax
add eax, 0xcf3bbb05
xor eax, 0x82a88db7
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x83a8c4d1
xor eax, 0xb957aa08
rol eax, 0x98
popf
pushf
not eax
add eax, 0xa364ea6c
xor eax, 0xba354fc4
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xb59326c2
xor eax, 0x83cd01f4
rol eax, 5
popf
jmp 0x1401fb931
add esi, 2
mov dword [rbp - 0x2c], esi
cmp cx, 0xa
jne 0x1401fc69f
push rax
pushf
mov eax, 0xe2063486
pushf
not eax
add eax, 0x855d53ac
xor eax, 0xb82b0737
rol eax, 0x34
popf
pushf
not eax
add eax, 0xdc77c43a
xor eax, 0xfa23da12
rol eax, 0xda
popf
pushf
not eax
add eax, 0x9fbcb5e1
xor eax, 0xf536de8d
rol eax, 1
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x1f03c0b6
pushf
not eax
add eax, 0x9faaa852
xor eax, 0x96ea3d78
rol eax, 0x85
popf
pushf
not eax
add eax, 0xcdcb07e1
xor eax, 0xe9dff837
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xb3075bb5
xor eax, 0xc5170deb
rol eax, 0xda
popf
jmp 0x1401fb931
mov ecx, 0x9adf274c
pushf
not ecx
add ecx, 0xb8d5561f
xor ecx, 0xcf64ff01
rol ecx, 0x3d
popf
pushf
not ecx
add ecx, 0xe9cdac98
xor ecx, 0xacd382b4
rol ecx, 0xc0
popf
pushf
not ecx
add ecx, 0xad64a3b4
xor ecx, 0xceeebc82
rol ecx, 0xdc
popf
pushf
not ecx
add ecx, 0x811af035
xor ecx, 0xfea59a10
rol ecx, 0x1a
popf
call fcn.14031eb0b
mov ecx, 0x703348ad
pushf
not ecx
add ecx, 0xf787bc36
xor ecx, 0xba205907
rol ecx, 0x1f
popf
pushf
not ecx
add ecx, 0xdfd71b72
xor ecx, 0xa284e83a
rol ecx, 0xe0
popf
pushf
not ecx
add ecx, 0xb705d08d
xor ecx, 0xbe4e10c0
rol ecx, 0xa9
popf
pushf
not ecx
add ecx, 0xd91f8e36
xor ecx, 0x8d20155b
rol ecx, 0xcf
popf
cmp ax, cx
jne 0x1401fc7d4
push rax
pushf
mov eax, 0x4028fc5d
pushf
not eax
add eax, 0xd3fe8fb7
xor eax, 0xee02bdfc
rol eax, 7
popf
pushf
not eax
add eax, 0xa59a614b
xor eax, 0xba025e8c
rol eax, 0xd4
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x6a7d7c90
pushf
not eax
add eax, 0xde73bb7f
xor eax, 0xfe7f5306
rol eax, 0x12
popf
pushf
not eax
add eax, 0xb1c7de3c
xor eax, 0xcd3e3119
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xaa18cdb6
xor eax, 0x93ab07a3
rol eax, 0x67
popf
pushf
not eax
add eax, 0xcfb78562
xor eax, 0xe55a96df
rol eax, 0x81
popf
jmp 0x1401fb931
inc esi
mov dword [rbp - 0x2c], esi
jmp 0x1401fc834
inc edi
push rax
pushf
mov eax, 0x324b6de9
pushf
not eax
add eax, 0x8b4959b5
xor eax, 0xc9895739
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x9753b963
xor eax, 0xb129a2ee
rol eax, 0x88
popf
pushf
not eax
add eax, 0x9826fe9e
xor eax, 0x9c1474b3
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xfc0358c0
xor eax, 0xba0f20e4
rol eax, 0x3d
popf
jmp 0x1401fb931
add r15, 2
cmp r15, r12
jae 0x1401fc8f5
push rax
pushf
mov eax, 0x4abe386a
pushf
not eax
add eax, 0xbbd1abaf
xor eax, 0xf2279437
rol eax, 8
popf
pushf
not eax
add eax, 0xdd429530
xor eax, 0xb4c4f2fa
rol eax, 0x60
popf
pushf
not eax
add eax, 0xc04504a8
xor eax, 0xa684759e
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xfc1b9aeb
xor eax, 0xf0a9114c
rol eax, 0xac
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x752ed2ae
pushf
not eax
add eax, 0xddb0d18e
xor eax, 0x9e9e5b91
rol eax, 0xa1
popf
pushf
not eax
add eax, 0xb1f7d425
xor eax, 0xcc388987
rol eax, 0x4a
popf
jmp 0x1401fb931
jmp 0x1401fc5a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1401fcfac
mov r9d, r15d
mov qword [rsp + 0x20], rbx
mov r8, r14
lea rcx, [rbp - 0x30]
mov edx, r12d
call fcn.14005a86c
push rax
pushf
mov eax, 0x40e5bcef
pushf
not eax
add eax, 0xfff31324
xor eax, 0xaf0941be
rol eax, 2
popf
pushf
not eax
add eax, 0x97d20ed8
xor eax, 0x913285d8
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xe3dd3921
xor eax, 0x8b3a1f3b
rol eax, 7
popf
pushf
not eax
add eax, 0xe9242e87
xor eax, 0x9bb8c382
rol eax, 0x84
popf
jmp 0x1401fb931
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1401fcfb1
mov rdx, qword [rbp - 0x38]
lea r8, [0x19370ff27]
pushf
sub r8, 0x53605f97
popf
push rax
pushf
mov eax, 0x978f3849
pushf
not eax
add eax, 0xd8acbfb6
xor eax, 0xba564399
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x90c18c2a
xor eax, 0xe9da89d4
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xab5e8f81
xor eax, 0x8cee71bf
rol eax, 0x3b
popf
jmp 0x1401fb931
mov rcx, qword [r8 + rdx*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x1401fcb4a
push rax
pushf
mov eax, 0xd42466ce
pushf
not eax
add eax, 0x9d0dc25b
xor eax, 0x98aacfbc
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xb04d479b
xor eax, 0x9f8fa061
rol eax, 0x25
popf
pushf
not eax
add eax, 0xa96cd6c9
xor eax, 0xd82bd50e
rol eax, 0x16
popf
pushf
not eax
add eax, 0xc514ddcd
xor eax, 0xb0d9b169
rol eax, 0x92
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xfd15e5b2
pushf
not eax
add eax, 0xd3387eb4
xor eax, 0xf5d5f10c
rol eax, 0x46
popf
pushf
not eax
add eax, 0x8c973f11
xor eax, 0x99e4de63
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xeb6305bf
xor eax, 0xf53451f7
rol eax, 0x43
popf
jmp 0x1401fb931
mov ecx, esi
test sil, sil
je 0x1401fcbca
push rax
pushf
mov eax, 0x3ae0be73
pushf
not eax
add eax, 0xb68ac05c
xor eax, 0xfaa4df1c
rol eax, 0xcd
popf
pushf
not eax
add eax, 0xc91b85f8
xor eax, 0xed3cf5ea
rol eax, 0x5f
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xafb3ba17
pushf
not eax
add eax, 0xf9b23455
xor eax, 0xfe4aa73e
rol eax, 0xf2
popf
pushf
not eax
add eax, 0xf6e23482
xor eax, 0xbbb07986
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf87c510c
xor eax, 0x95b5f8ba
rol eax, 0x65
popf
jmp 0x1401fb931
sub ecx, 1
je 0x1401fcc5b
push rax
pushf
mov eax, 0xc133363b
pushf
not eax
add eax, 0x8ba2f5f4
xor eax, 0xbb02a395
rol eax, 0xa
popf
pushf
not eax
add eax, 0x8ee0e904
xor eax, 0xa60223eb
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xfbf73ad5
xor eax, 0xddeed016
rol eax, 0xc8
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xa3c553dd
pushf
not eax
add eax, 0x84c446db
xor eax, 0xc67feec0
rol eax, 0x56
popf
pushf
not eax
add eax, 0xbb6679d8
xor eax, 0xec1cd998
rol eax, 0x22
popf
jmp 0x1401fb931
cmp ecx, 1
jne 0x1401fccf0
push rax
pushf
mov eax, 0x222843d8
pushf
not eax
add eax, 0xee857a40
xor eax, 0xa00fbde5
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x8874e716
xor eax, 0xe08d69b2
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xc0af2a19
xor eax, 0xc3931233
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x85bcaf80
xor eax, 0xdf6fb600
rol eax, 0x35
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xef6b9c26
pushf
not eax
add eax, 0xa20f6447
xor eax, 0x865177f6
rol eax, 1
popf
pushf
not eax
add eax, 0xefada338
xor eax, 0xdda3d869
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xa439532d
xor eax, 0xd34455e1
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x8c2b3b89
xor eax, 0x9e4de187
rol eax, 8
popf
jmp 0x1401fb931
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.1401e4a7a
jmp 0x1401fca38
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.140291a03
jmp 0x1401fca38
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.140189fcd
jmp 0x1401fca38
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x2c]
xor eax, eax
mov r8d, r15d
and qword [rsp + 0x20], rax
mov rdx, r14
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], eax
jmp 0x1401fce6a
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1401fcea7
push rax
pushf
mov eax, 0x3683b1b7
pushf
not eax
add eax, 0xf6d9e197
xor eax, 0x818f3d54
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xc56081dd
xor eax, 0xfc5c27ce
rol eax, 0xee
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xacadf80f
pushf
not eax
add eax, 0xd3fb3a96
xor eax, 0xc8cfd6bf
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xfc7eac9f
xor eax, 0xde3971c7
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xb162086c
xor eax, 0xcb55c8cb
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xeb2ec753
xor eax, 0x8f33483c
rol eax, 0xbe
popf
jmp 0x1401fb931
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
push rax
pushf
mov eax, 0x601e4294
pushf
not eax
add eax, 0xbf720601
xor eax, 0xe2eda5a8
rol eax, 0x6a
popf
pushf
not eax
add eax, 0xe0ce2b00
xor eax, 0xaf10a26e
rol eax, 0x60
popf
pushf
not eax
add eax, 0xa4091ce4
xor eax, 0xe88dafb8
rol eax, 0x34
popf
pushf
not eax
add eax, 0xcec442fa
xor eax, 0xf279986d
rol eax, 0xf6
popf
jmp 0x1401fb931
mov edi, dword [rbp - 0x28]
push rax
pushf
mov eax, 0xe4e4d8d8
pushf
not eax
add eax, 0xd62f1713
xor eax, 0x940f9443
rol eax, 0x22
popf
pushf
not eax
add eax, 0xc49cec27
xor eax, 0x827c3d95
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xabcd2ada
xor eax, 0x822e8ae4
rol eax, 0xac
popf
jmp 0x1401fb931
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x20], xmm0
push rax
pushf
mov eax, 0x955e06d7
pushf
not eax
add eax, 0x91145ffe
xor eax, 0xc0eaf33a
rol eax, 0x76
popf
pushf
not eax
add eax, 0x8aa5a480
xor eax, 0xf243f0a4
rol eax, 0x78
popf
pushf
not eax
add eax, 0x83529c3b
xor eax, 0x916088fd
rol eax, 0x17
popf
jmp 0x1401fb931
mov rdx, qword [rbp - 0x38]
lea r8, [0x1bff89274]
pushf
sub r8, 0x7fe7f2e4
popf
push rax
pushf
mov eax, 0xeac5c65f
pushf
not eax
add eax, 0xf2d8d98a
xor eax, 0xdd5b3851
rol eax, 0x98
popf
pushf
not eax
add eax, 0xe8a3ba45
xor eax, 0xeda7a7fc
rol eax, 0x32
popf
pushf
not eax
add eax, 0xe58371e8
xor eax, 0xd3b0b5b4
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x91c39ed3
xor eax, 0x979447e6
rol eax, 0xb8
popf
jmp 0x1401fb931
mov rax, qword [rbp - 0x20]
shr rax, 0x20
test eax, eax
jne 0x1401fd0bd
push rax
pushf
mov eax, 0x10fd6d36
pushf
not eax
add eax, 0xa8906b33
xor eax, 0x991d5f7a
rol eax, 0xda
popf
pushf
not eax
add eax, 0xa4ac7d68
xor eax, 0x9bfc50d3
rol eax, 0x21
popf
pushf
not eax
add eax, 0xf98747c8
xor eax, 0xca6a6b0f
rol eax, 0x5e
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xaf7dbc84
pushf
not eax
add eax, 0xe2051948
xor eax, 0xd34f60c9
rol eax, 0x61
popf
pushf
not eax
add eax, 0x977ed215
xor eax, 0xd3ee5aff
rol eax, 0x9c
popf
jmp 0x1401fb931
mov eax, dword [rbp - 0x20]
test eax, eax
je 0x1401fd13d
push rax
pushf
mov eax, 0x97a65db2
pushf
not eax
add eax, 0x805da63f
xor eax, 0xc79fb596
rol eax, 0x44
popf
pushf
not eax
add eax, 0x8ee076de
xor eax, 0xae564284
rol eax, 0x11
popf
pushf
not eax
add eax, 0x9d4bce43
xor eax, 0xe7cd6a35
rol eax, 0xc8
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x5cbc355f
pushf
not eax
add eax, 0xa520d38f
xor eax, 0xd0ce6a7d
rol eax, 0xdc
popf
pushf
not eax
add eax, 0xf1ecc6b5
xor eax, 0xc8d6176f
rol eax, 0x8e
popf
jmp 0x1401fb931
cmp eax, 5
jne 0x1401fd1bb
push rax
pushf
mov eax, 0xbcd94f4
pushf
not eax
add eax, 0x946ac28b
xor eax, 0xff133f71
rol eax, 0xaf
popf
pushf
not eax
add eax, 0x8838b3c5
xor eax, 0xfb331e4b
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xd5d11167
xor eax, 0xf34a374f
rol eax, 0x6b
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x4eca8acb
pushf
not eax
add eax, 0xd75c9c17
xor eax, 0xaefaad3f
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xf4ac4557
xor eax, 0x8befc730
rol eax, 0x19
popf
jmp 0x1401fb931
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x1401fbd7f
mov ecx, dword [rbp - 0x20]
mov rdx, rbx
call fcn.140227379
jmp 0x1401fbd7f
mov rax, qword [r8 + rdx*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x1401fd306
push rax
pushf
mov eax, 0xd5e77268
pushf
not eax
add eax, 0xc8fbf1e0
xor eax, 0xd79e0797
rol eax, 0x98
popf
pushf
not eax
add eax, 0xa7a40830
xor eax, 0xc7237db7
rol eax, 0x2f
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0xf9f6e849
pushf
not eax
add eax, 0x8cf2c057
xor eax, 0xe53609ba
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xbb3925b3
xor eax, 0xff523cf8
rol eax, 0xe0
popf
jmp 0x1401fb931
cmp byte [r14], 0x1a
je 0x1401fd398
push rax
pushf
mov eax, 0x2ca4435e
pushf
not eax
add eax, 0xf1cd92c2
xor eax, 0xe38d5641
rol eax, 0x2d
popf
pushf
not eax
add eax, 0xac8b194a
xor eax, 0xcca2cc03
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xc16ec514
xor eax, 0x9d9e45a7
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xd2a4fdb2
xor eax, 0xea8c7060
rol eax, 0x6a
popf
jmp 0x1401fb931
push rax
pushf
mov eax, 0x6670ddd8
pushf
not eax
add eax, 0xa74680f1
xor eax, 0xd3ccf8f9
rol eax, 0x87
popf
pushf
not eax
add eax, 0xecd8f624
xor eax, 0xbd2bd951
rol eax, 9
popf
pushf
not eax
add eax, 0xf1f6e477
xor eax, 0x8eab4e57
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xffcf753d
xor eax, 0xb9c3c741
rol eax, 0x44
popf
jmp 0x1401fb931
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x1401fbd7f
mov eax, dword [rbp - 0x1c]
sub eax, edi
jmp 0x1401fd4e4
xor eax, eax
push rax
pushf
mov eax, 0xa0114604
pushf
not eax
add eax, 0xb2b72352
xor eax, 0xd3d0a120
rol eax, 5
popf
pushf
not eax
add eax, 0xcf956081
xor eax, 0xa6a5d2c8
rol eax, 0xeb
popf
jmp 0x1401fb931
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret