Function at 0x1400d6969
Capabilities:
Parse pe header
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x1e7b3258
pushf
not eax
add eax, 0xeb90b78c
xor eax, 0x94d02bc6
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x8135be3d
xor eax, 0xabcea781
rol eax, 0x95
popf
cmp eax, 0x29
jne 0x1400d69a6
popf
pop rax
jmp 0x1400d81b2
cmp eax, 0
jne 0x1400d69b5
popf
pop rax
jmp 0x1400d6c94
cmp eax, 3
jne 0x1400d69c4
popf
pop rax
jmp 0x1400d6e33
cmp eax, 1
jne 0x1400d69d3
popf
pop rax
jmp 0x1400d6d38
cmp eax, 0xd
jne 0x1400d69e2
popf
pop rax
jmp 0x1400d73b5
cmp eax, 0x1a
jne 0x1400d69f1
popf
pop rax
jmp 0x1400d7a28
cmp eax, 0xe
jne 0x1400d6a00
popf
pop rax
jmp 0x1400d745d
cmp eax, 0x31
jne 0x1400d6a0f
popf
pop rax
jmp 0x1400d8571
cmp eax, 0x19
jne 0x1400d6a1e
popf
pop rax
jmp 0x1400d79de
cmp eax, 8
jne 0x1400d6a2d
popf
pop rax
jmp 0x1400d713c
cmp eax, 0x2a
jne 0x1400d6a3c
popf
pop rax
jmp 0x1400d8232
cmp eax, 0x17
jne 0x1400d6a4b
popf
pop rax
jmp 0x1400d7951
cmp eax, 0x1c
jne 0x1400d6a5a
popf
pop rax
jmp 0x1400d7ae9
cmp eax, 0x2e
jne 0x1400d6a69
popf
pop rax
jmp 0x1400d8421
cmp eax, 0x18
jne 0x1400d6a78
popf
pop rax
jmp 0x1400d798a
cmp eax, 0x2b
jne 0x1400d6a87
popf
pop rax
jmp 0x1400d82d6
cmp eax, 0x1b
jne 0x1400d6a96
popf
pop rax
jmp 0x1400d7a8d
cmp eax, 0x2d
jne 0x1400d6aa5
popf
pop rax
jmp 0x1400d839c
cmp eax, 0x23
jne 0x1400d6ab4
popf
pop rax
jmp 0x1400d7ec2
cmp eax, 0x25
jne 0x1400d6ac3
popf
pop rax
jmp 0x1400d7fec
cmp eax, 0x32
jne 0x1400d6ad2
popf
pop rax
jmp 0x1400d85b9
cmp eax, 0x13
jne 0x1400d6ae1
popf
pop rax
jmp 0x1400d76a0
cmp eax, 0x15
jne 0x1400d6af0
popf
pop rax
jmp 0x1400d7857
cmp eax, 0x24
jne 0x1400d6aff
popf
pop rax
jmp 0x1400d7f9d
cmp eax, 0x1e
jne 0x1400d6b0e
popf
pop rax
jmp 0x1400d7c4c
cmp eax, 0xc
jne 0x1400d6b1d
popf
pop rax
jmp 0x1400d731a
cmp eax, 0x26
jne 0x1400d6b2c
popf
pop rax
jmp 0x1400d8022
cmp eax, 0x27
jne 0x1400d6b3b
popf
pop rax
jmp 0x1400d8085
cmp eax, 0x30
jne 0x1400d6b4a
popf
pop rax
jmp 0x1400d8537
cmp eax, 0x10
jne 0x1400d6b59
popf
pop rax
jmp 0x1400d74ff
cmp eax, 0x2c
jne 0x1400d6b68
popf
pop rax
jmp 0x1400d8333
cmp eax, 9
jne 0x1400d6b77
popf
pop rax
jmp 0x1400d71c4
cmp eax, 4
jne 0x1400d6b86
popf
pop rax
jmp 0x1400d6ee4
cmp eax, 0x16
jne 0x1400d6b95
popf
pop rax
jmp 0x1400d78b8
cmp eax, 0x28
jne 0x1400d6ba4
popf
pop rax
jmp 0x1400d80f4
cmp eax, 0xa
jne 0x1400d6bb3
popf
pop rax
jmp 0x1400d7230
cmp eax, 0x22
jne 0x1400d6bc2
popf
pop rax
jmp 0x1400d7e65
cmp eax, 0x14
jne 0x1400d6bd1
popf
pop rax
jmp 0x1400d7738
cmp eax, 7
jne 0x1400d6be0
popf
pop rax
jmp 0x1400d7086
cmp eax, 5
jne 0x1400d6bef
popf
pop rax
jmp 0x1400d6f79
cmp eax, 2
jne 0x1400d6bfe
popf
pop rax
jmp 0x1400d6db6
cmp eax, 0x20
jne 0x1400d6c0d
popf
pop rax
jmp 0x1400d7d98
cmp eax, 0x1d
jne 0x1400d6c1c
popf
pop rax
jmp 0x1400d7ba6
cmp eax, 0x11
jne 0x1400d6c2b
popf
pop rax
jmp 0x1400d759f
cmp eax, 6
jne 0x1400d6c3a
popf
pop rax
jmp 0x1400d701f
cmp eax, 0x2f
jne 0x1400d6c49
popf
pop rax
jmp 0x1400d84d9
cmp eax, 0x12
jne 0x1400d6c58
popf
pop rax
jmp 0x1400d75e8
cmp eax, 0x21
jne 0x1400d6c67
popf
pop rax
jmp 0x1400d7df5
cmp eax, 0x1f
jne 0x1400d6c76
popf
pop rax
jmp 0x1400d7d03
cmp eax, 0xb
jne 0x1400d6c85
popf
pop rax
jmp 0x1400d7281
cmp eax, 0xf
jne 0x1400d6c94
popf
pop rax
jmp 0x1400d74f2
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
xor edi, edi
mov r15d, r8d
movsxd r12, ecx
mov rbx, r9
mov r14, rdx
test r8d, r8d
je 0x1400d6d05
push rax
pushf
mov eax, 0x7898d239
pushf
not eax
add eax, 0xb503eb3e
xor eax, 0xf19c46c5
rol eax, 0x48
popf
pushf
not eax
add eax, 0x8a127820
xor eax, 0x91235500
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x8a6e97cc
xor eax, 0xc9fc5b61
rol eax, 0x21
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x41aedbb9
pushf
not eax
add eax, 0x9124629e
xor eax, 0xf543a95d
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x96a114df
xor eax, 0xafb80d20
rol eax, 0x38
popf
jmp 0x1400d6997
test rdx, rdx
jne 0x1400d6d83
push rax
pushf
mov eax, 0x52cfab78
pushf
not eax
add eax, 0x8bff8dc4
xor eax, 0xdf53256f
rol eax, 0x29
popf
pushf
not eax
add eax, 0xa0015da0
xor eax, 0xbd63fdf4
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x905aa28a
xor eax, 0xb7d3b151
rol eax, 0x32
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0xe9804cd
pushf
not eax
add eax, 0xb5775122
xor eax, 0xae64a257
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xa07779f7
xor eax, 0x94578a3e
rol eax, 0x10
popf
jmp 0x1400d6997
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], socket
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.1400f0857
or eax, 0xffffffff
jmp 0x1400d85b9
mov rax, r12
lea rdx, [0x19ac4d74e]
pushf
sub rdx, 0x5abffd6e
popf
and eax, 0x3f
mov rcx, r12
sar rcx, 6
mov qword [rbp - 0x38], rcx
lea r13, [rax + rax*8]
mov rcx, qword [rdx + rcx*8]
movsx esi, byte [rcx + r13*8 + 0x39]
lea eax, [rsi - 1]
cmp al, 1
ja 0x1400d6e9e
push rax
pushf
mov eax, 0x8b006962
pushf
not eax
add eax, 0xb5848d34
xor eax, 0xcd163173
rol eax, 0x38
popf
pushf
not eax
add eax, 0x96b9e3e7
xor eax, 0xf3d25194
rol eax, 0x3c
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x7288276d
pushf
not eax
add eax, 0x947b79f5
xor eax, 0xd76dc620
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xf96fb761
xor eax, 0x9155221f
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xa6f4a026
xor eax, 0xe46c5252
rol eax, 3
popf
jmp 0x1400d6997
mov eax, r15d
not eax
test al, 1
je 0x1400d6f33
push rax
pushf
mov eax, 0x7234aece
pushf
not eax
add eax, 0xcbc95732
xor eax, 0x8c71cd0b
rol eax, 0x43
popf
pushf
not eax
add eax, 0x9ace095b
xor eax, 0x976c5240
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x9665c415
xor eax, 0xd41df72c
rol eax, 0x88
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x360d1c0f
pushf
not eax
add eax, 0xa54cbab6
xor eax, 0xd9cca1da
rol eax, 0x1d
popf
pushf
not eax
add eax, 0xddb0e232
xor eax, 0xdc405123
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x99e8f417
xor eax, 0x8d1662bb
rol eax, 0x30
popf
jmp 0x1400d6997
test byte [rcx + r13*8 + 0x38], 0x20
je 0x1400d6fc7
push rax
pushf
mov eax, 0xc27cc89e
pushf
not eax
add eax, 0xd510b5be
xor eax, 0xc2cb6cf0
rol eax, 0x63
popf
pushf
not eax
add eax, 0x9dc6c6b3
xor eax, 0x85e4080b
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xefd3ae67
xor eax, 0xf5fd4273
rol eax, 0x8e
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x4d4e9bcb
pushf
not eax
add eax, 0xb141cfe5
xor eax, 0x9f76562b
rol eax, 0x19
popf
pushf
not eax
add eax, 0xf9ae7c35
xor eax, 0xb69e8630
rol eax, 1
popf
pushf
not eax
add eax, 0xeac40c01
xor eax, 0x80bae85b
rol eax, 0x60
popf
pushf
not eax
add eax, 0xb0f6cc30
xor eax, 0x9003d654
rol eax, 0x2e
popf
jmp 0x1400d6997
xor edx, edx
mov ecx, r12d
lea r8d, [rdx + 2]
call fcn.140124e2f
push rax
pushf
mov eax, 0x818cfc7
pushf
not eax
add eax, 0xc0c914a7
xor eax, 0x8a850b65
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xa5682536
xor eax, 0xa9c3b044
rol eax, 0xc7
popf
pushf
not eax
add eax, 0xc9addc67
xor eax, 0xfa39ce9d
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xb058d774
xor eax, 0xf6e4272a
rol eax, 0x92
popf
jmp 0x1400d6997
mov ecx, r12d
mov qword [rbp - 0x20], rdi
call fcn.14008f34d
mov rdx, qword [rbp - 0x38]
lea r8, [0x19778eff3]
pushf
sub r8, 0x57741613
popf
test eax, eax
je 0x1400d7109
push rax
pushf
mov eax, 0xcd0a4cf3
pushf
not eax
add eax, 0x9baef842
xor eax, 0xfa843419
rol eax, 0xa9
popf
pushf
not eax
add eax, 0xad729c9b
xor eax, 0x98ad0802
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xf206ded1
xor eax, 0xea3f25d2
rol eax, 0x40
popf
pushf
not eax
add eax, 0xe1b2fd26
xor eax, 0xfebc4568
rol eax, 0x94
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x1c5e3b84
pushf
not eax
add eax, 0xefcd3e52
xor eax, 0x9cca4387
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xbd0cdc54
xor eax, 0xa86d91d2
rol eax, 3
popf
jmp 0x1400d6997
mov rax, qword [r8 + rdx*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x1400d717e
push rax
pushf
mov eax, 0x8edfdaac
pushf
not eax
add eax, 0x955f3eba
xor eax, 0xfdd024c3
rol eax, 0x3c
popf
pushf
not eax
add eax, 0x9937e112
xor eax, 0xa07ced05
rol eax, 0xe8
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x6382aaf7
pushf
not eax
add eax, 0xdf6290e0
xor eax, 0xa8e50ad0
rol eax, 0x97
popf
pushf
not eax
add eax, 0x96bb6958
xor eax, 0xe32df9d1
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xe1206445
xor eax, 0x84ee332b
rol eax, 0xe5
popf
jmp 0x1400d6997
cmp byte [rbx + 0x28], dil
jne 0x1400d71fd
push rax
pushf
mov eax, 0xe272432b
pushf
not eax
add eax, 0x9363df9b
xor eax, 0xc4276eb3
rol eax, 0x83
popf
pushf
not eax
add eax, 0x987a027d
xor eax, 0xf1c26ad9
rol eax, 0x5b
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x52e52ff5
pushf
not eax
add eax, 0xeb4c45c2
xor eax, 0xb66ed8be
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf5e04c90
xor eax, 0x9954e61c
rol eax, 0xb6
popf
jmp 0x1400d6997
mov rcx, rbx
call fcn.140140569
mov rdx, qword [rbp - 0x38]
lea r8, [0x1b6853246]
pushf
sub r8, 0x76805866
popf
push rax
pushf
mov eax, 0xcbb2c49
pushf
not eax
add eax, 0xc2919e54
xor eax, 0xb737ec4e
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xfe7f3ac8
xor eax, 0xde632dd5
rol eax, 0x50
popf
jmp 0x1400d6997
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x1400d72c1
push rax
pushf
mov eax, 0x936d04fc
pushf
not eax
add eax, 0xc5585406
xor eax, 0xf8a1bed4
rol eax, 0x18
popf
pushf
not eax
add eax, 0xb70683a7
xor eax, 0xd93d38ad
rol eax, 0x5f
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x695cac1a
pushf
not eax
add eax, 0xf8b4e2c2
xor eax, 0x92b0259c
rol eax, 0x64
popf
pushf
not eax
add eax, 0x8a5fdb1a
xor eax, 0xe04b409d
rol eax, 0x37
popf
pushf
not eax
add eax, 0xedf5abfa
xor eax, 0xb40b5a83
rol eax, 0x25
popf
pushf
not eax
add eax, 0x91367e86
xor eax, 0xa89f0dc7
rol eax, 0xbf
popf
jmp 0x1400d6997
mov rax, qword [r8 + rdx*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x1400d735c
push rax
pushf
mov eax, 0xa6de13e3
pushf
not eax
add eax, 0xfc923117
xor eax, 0xdfb0339c
rol eax, 0xac
popf
pushf
not eax
add eax, 0xdacf168d
xor eax, 0x9ae41dec
rol eax, 0x48
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x52c0db40
pushf
not eax
add eax, 0x85af3cae
xor eax, 0xc6ab59f3
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xde2c6a3b
xor eax, 0xf2659b10
rol eax, 0xd5
popf
pushf
not eax
add eax, 0xb255b5b3
xor eax, 0x93718b46
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xccc6ab7b
xor eax, 0xa2e5470f
rol eax, 0xdd
popf
jmp 0x1400d6997
mov rcx, qword [r8 + rdx*8]
lea rdx, [rbp - 0x10]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x1400d73c3
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1400d7404
push rax
pushf
mov eax, 0x585a88dd
pushf
not eax
add eax, 0xb8281995
xor eax, 0xca599d5b
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x9009b13e
xor eax, 0x8c8e8858
rol eax, 0x1a
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x24436c00
pushf
not eax
add eax, 0x9ce8606a
xor eax, 0xcec672a7
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x8d53add6
xor eax, 0xe4c31ff5
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xe927c9dd
xor eax, 0xb976de86
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xd787e6ed
xor eax, 0x82374cf9
rol eax, 0x4e
popf
jmp 0x1400d6997
test sil, sil
je 0x1400d74bf
push rax
pushf
mov eax, 0x161c6ff5
pushf
not eax
add eax, 0xe1da15c5
xor eax, 0xf1fd9d58
rol eax, 0x26
popf
pushf
not eax
add eax, 0xb6b907c5
xor eax, 0xa3de8fbf
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x9d0842f1
xor eax, 0x8a05c56c
rol eax, 0
popf
pushf
not eax
add eax, 0x9c3d3c03
xor eax, 0xe653c19f
rol eax, 0x39
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x61ecf5a
pushf
not eax
add eax, 0xc647cd2b
xor eax, 0xc122d7ac
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xf4d5d433
xor eax, 0xc155b2ed
rol eax, 6
popf
jmp 0x1400d6997
dec sil
cmp sil, 1
ja 0x1400d8085
lea r12, [r14 + r15]
mov qword [rbp - 0x30], rdi
mov r15, r14
cmp r14, r12
jae 0x1400d756c
push rax
pushf
mov eax, 0xe8a25d19
pushf
not eax
add eax, 0xb3e87a4a
xor eax, 0xcdac7c9e
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xe6582860
xor eax, 0x800c4651
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xe92c7337
xor eax, 0x919c868c
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xc5091da3
xor eax, 0xe02d16be
rol eax, 0xd1
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x749be490
pushf
not eax
add eax, 0xb1628ed1
xor eax, 0x9a84514b
rol eax, 0x30
popf
pushf
not eax
add eax, 0xae14cdfa
xor eax, 0xd30927b5
rol eax, 0xe4
popf
jmp 0x1400d6997
mov esi, dword [rbp - 0x2c]
push rax
pushf
mov eax, 0x687c0331
pushf
not eax
add eax, 0x938d1249
xor eax, 0xbc7e04aa
rol eax, 0xb
popf
pushf
not eax
add eax, 0xb2b8f9dc
xor eax, 0xb13a1d29
rol eax, 0x22
popf
pushf
not eax
add eax, 0xd11a6c99
xor eax, 0xaa962c72
rol eax, 0xe9
popf
jmp 0x1400d6997
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x10], ax
call fcn.1401950b3
movzx ecx, word [rbp - 0x10]
cmp ax, cx
jne 0x1400d7647
push rax
pushf
mov eax, 0x51122eed
pushf
not eax
add eax, 0xc30495b2
xor eax, 0xf61dfe1e
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xe1ddfdbe
xor eax, 0xfa1c3c5c
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xdf72fda8
xor eax, 0x9725c338
rol eax, 0x94
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0xc7536bda
pushf
not eax
add eax, 0xf8bbebae
xor eax, 0xbfc90ead
rol eax, 0x88
popf
pushf
not eax
add eax, 0x90b7f912
xor eax, 0xec2128cc
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xd30eb27b
xor eax, 0xf032e743
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x99d17cba
xor eax, 0x8b8f65d7
rol eax, 0x32
popf
jmp 0x1400d6997
add esi, 2
mov dword [rbp - 0x2c], esi
cmp cx, 0xa
jne 0x1400d76f2
push rax
pushf
mov eax, 0xbc261601
pushf
not eax
add eax, 0x9a071c83
xor eax, 0x9cf0f8ba
rol eax, 0x46
popf
pushf
not eax
add eax, 0xad29494e
xor eax, 0xf568b551
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xedadb830
xor eax, 0xcbdc2477
rol eax, 0xb0
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0xec429619
pushf
not eax
add eax, 0xb6d12da2
xor eax, 0xacf1d058
rol eax, 0xe
popf
pushf
not eax
add eax, 0xc7ad006e
xor eax, 0xeed762ab
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xa5482600
xor eax, 0xc6345bc9
rol eax, 0xf1
popf
jmp 0x1400d6997
mov ecx, 0x1dfc9a60
pushf
not ecx
add ecx, 0x89470baf
xor ecx, 0xb66e7e64
rol ecx, 0xac
popf
pushf
not ecx
add ecx, 0xefd57064
xor ecx, 0xeee2c292
rol ecx, 0xa2
popf
call fcn.1401950b3
mov ecx, 0xab915028
pushf
not ecx
add ecx, 0xae368898
xor ecx, 0xbf98a4aa
rol ecx, 0xfe
popf
pushf
not ecx
add ecx, 0xabd93fa7
xor ecx, 0x956bcd8f
rol ecx, 0x18
popf
pushf
not ecx
add ecx, 0xf40ade22
xor ecx, 0xc9927342
rol ecx, 0xdf
popf
pushf
not ecx
add ecx, 0xccc9945c
xor ecx, 0xb4504cae
rol ecx, 0x5f
popf
cmp ax, cx
jne 0x1400d7810
push rax
pushf
mov eax, 0xa4dfc0a1
pushf
not eax
add eax, 0xc8f9f558
xor eax, 0x89b23a4b
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xa4b8d7c3
xor eax, 0xf2d0edb2
rol eax, 0xc
popf
pushf
not eax
add eax, 0x9767e88f
xor eax, 0xff4949ec
rol eax, 0x99
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x81c34f31
pushf
not eax
add eax, 0xa5c240b6
xor eax, 0xc0dda2b6
rol eax, 0x33
popf
pushf
not eax
add eax, 0xa9924472
xor eax, 0xcd7483ae
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xd51edf17
xor eax, 0xda8f422e
rol eax, 0x1d
popf
jmp 0x1400d6997
inc esi
mov dword [rbp - 0x2c], esi
jmp 0x1400d785d
inc edi
push rax
pushf
mov eax, 0x8cf3d275
pushf
not eax
add eax, 0xa73c8978
xor eax, 0x8a167689
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x94fdec98
xor eax, 0x93050b62
rol eax, 0x20
popf
pushf
not eax
add eax, 0xd1001a70
xor eax, 0x87d1335d
rol eax, 0x51
popf
pushf
not eax
add eax, 0xf3fa07eb
xor eax, 0xe03ab786
rol eax, 0xad
popf
jmp 0x1400d6997
add r15, 2
cmp r15, r12
jae 0x1400d791e
push rax
pushf
mov eax, 0xf74bdbad
pushf
not eax
add eax, 0x9a66bb43
xor eax, 0xf3b848c4
rol eax, 0x16
popf
pushf
not eax
add eax, 0xcff301e2
xor eax, 0xb0198077
rol eax, 0x30
popf
pushf
not eax
add eax, 0x842822ea
xor eax, 0x8440fb9f
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xc8f6e999
xor eax, 0xbb8efc24
rol eax, 6
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x4784e3cd
pushf
not eax
add eax, 0xcabd533a
xor eax, 0x9094683d
rol eax, 0x47
popf
pushf
not eax
add eax, 0xb72161a4
xor eax, 0xe5ddb91a
rol eax, 0xab
popf
jmp 0x1400d6997
jmp 0x1400d75e8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x1400d8022
mov r9d, r15d
mov qword [rsp + 0x20], rbx
mov r8, r14
lea rcx, [rbp - 0x30]
mov edx, r12d
call fcn.140024fac
push rax
pushf
mov eax, 0x7211abf6
pushf
not eax
add eax, 0xc876ce8e
xor eax, 0xb06955a5
rol eax, 0x4f
popf
pushf
not eax
add eax, 0xe4e046eb
xor eax, 0xa94603e4
rol eax, 0xb5
popf
jmp 0x1400d6997
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1400d8027
mov rdx, qword [rbp - 0x38]
lea r8, [0x1ae525c1e]
pushf
sub r8, 0x6e4d823e
popf
push rax
pushf
mov eax, 0xf6149cb6
pushf
not eax
add eax, 0xd0c16ca9
xor eax, 0x9b94b22b
rol eax, 0x16
popf
pushf
not eax
add eax, 0xfd32da88
xor eax, 0xc79168df
rol eax, 0x45
popf
pushf
not eax
add eax, 0xe59deb38
xor eax, 0xab21544f
rol eax, 8
popf
jmp 0x1400d6997
mov rcx, qword [r8 + rdx*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x1400d7b4d
push rax
pushf
mov eax, 0x2f6d48c4
pushf
not eax
add eax, 0xd1f8fbed
xor eax, 0xce7b7674
rol eax, 0x86
popf
pushf
not eax
add eax, 0xff58a120
xor eax, 0xa6703e70
rol eax, 0xdb
popf
pushf
not eax
add eax, 0x8c1b4fcd
xor eax, 0xe46f995e
rol eax, 0x66
popf
pushf
not eax
add eax, 0xe837df57
xor eax, 0xc07481e7
rol eax, 0x1e
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x4a1c226
pushf
not eax
add eax, 0x8834fb9a
xor eax, 0x8e827cd5
rol eax, 0xda
popf
pushf
not eax
add eax, 0xcbf487d1
xor eax, 0xa6b82747
rol eax, 0x78
popf
pushf
not eax
add eax, 0xa3437985
xor eax, 0xc7ef1682
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xed5cdd75
xor eax, 0xcd14ba81
rol eax, 0x26
popf
jmp 0x1400d6997
mov ecx, esi
test sil, sil
je 0x1400d7c06
push rax
pushf
mov eax, 0x327b83e2
pushf
not eax
add eax, 0xa58e13bf
xor eax, 0x9b0ed903
rol eax, 0x28
popf
pushf
not eax
add eax, 0xd4348511
xor eax, 0x86af8de9
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xf8c8e0c3
xor eax, 0xb3597f08
rol eax, 0x26
popf
pushf
not eax
add eax, 0xa5c4f526
xor eax, 0xdbba8e9e
rol eax, 0x4b
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0xc089fdef
pushf
not eax
add eax, 0xdfcf7ec3
xor eax, 0xd19f86c9
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xc08e4e3d
xor eax, 0xb8447289
rol eax, 0x52
popf
pushf
not eax
add eax, 0xfb453da6
xor eax, 0xc96bf459
rol eax, 0x6f
popf
jmp 0x1400d6997
sub ecx, 1
je 0x1400d7caa
push rax
pushf
mov eax, 0xbdf5cd75
pushf
not eax
add eax, 0xd39d61f7
xor eax, 0x9723de7a
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xce4aef17
xor eax, 0xbbb91111
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xad36cb19
xor eax, 0xf717cb9c
rol eax, 0x1c
popf
pushf
not eax
add eax, 0xdb578758
xor eax, 0xb9bff5c7
rol eax, 0x5d
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0xcafce7cb
pushf
not eax
add eax, 0xa440e980
xor eax, 0xe79a34fe
rol eax, 5
popf
pushf
not eax
add eax, 0xd5735e4e
xor eax, 0xc62a7b4c
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xb009f230
xor eax, 0xe27b16f8
rol eax, 0x10
popf
pushf
not eax
add eax, 0xce4b2136
xor eax, 0x9472f508
rol eax, 0x49
popf
jmp 0x1400d6997
cmp ecx, 1
jne 0x1400d7d65
push rax
pushf
mov eax, 0xdd4c8efa
pushf
not eax
add eax, 0xa261341f
xor eax, 0xf2e69856
rol eax, 0x23
popf
pushf
not eax
add eax, 0xf5389968
xor eax, 0xa86049b2
rol eax, 0xce
popf
pushf
not eax
add eax, 0xaeff04a3
xor eax, 0xd7d1e754
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xd3482dd9
xor eax, 0xc6a3e751
rol eax, 0xe7
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x9f2a1e4d
pushf
not eax
add eax, 0x830e1e9d
xor eax, 0xf9f65271
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x8587fed6
xor eax, 0xff036b06
rol eax, 0xbd
popf
jmp 0x1400d6997
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.1400cd9db
jmp 0x1400d7a28
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.1401384a9
jmp 0x1400d7a28
mov r9d, r15d
lea rcx, [rbp - 0x30]
mov r8, r14
mov edx, r12d
call fcn.140096bdd
jmp 0x1400d7a28
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x2c]
xor eax, eax
mov r8d, r15d
and qword [rsp + 0x20], rax
mov rdx, r14
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], eax
jmp 0x1400d7ee0
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1400d7f43
push rax
pushf
mov eax, 0x7f25b8f4
pushf
not eax
add eax, 0x811a8cc7
xor eax, 0xe5059d56
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xc1ab4886
xor eax, 0x999689f0
rol eax, 0x29
popf
pushf
not eax
add eax, 0xb0f37aa9
xor eax, 0xcb8a4316
rol eax, 0xad
popf
pushf
not eax
add eax, 0xb58b612b
xor eax, 0x94608fd8
rol eax, 0x96
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x74c95b22
pushf
not eax
add eax, 0xb70e4008
xor eax, 0xa770a137
rol eax, 0xea
popf
pushf
not eax
add eax, 0xd9bfb04b
xor eax, 0xb9542d5a
rol eax, 0xca
popf
pushf
not eax
add eax, 0x93b80cb1
xor eax, 0x9c2f9c39
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xd944f1c8
xor eax, 0xd33cf90d
rol eax, 0xec
popf
jmp 0x1400d6997
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
push rax
pushf
mov eax, 0x9b862058
pushf
not eax
add eax, 0x9bdae60f
xor eax, 0xd177a787
rol eax, 0xc8
popf
pushf
not eax
add eax, 0xaa62db82
xor eax, 0xd402e7e5
rol eax, 0x32
popf
pushf
not eax
add eax, 0xd4b0c47f
xor eax, 0x9b5b7cd5
rol eax, 0x7b
popf
jmp 0x1400d6997
mov edi, dword [rbp - 0x28]
push rax
pushf
mov eax, 0xedf5a69e
pushf
not eax
add eax, 0xa44f880c
xor eax, 0xac446cd9
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xa9aeaf5c
xor eax, 0xd9445925
rol eax, 0x14
popf
jmp 0x1400d6997
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x20], xmm0
push rax
pushf
mov eax, 0xcd9376ad
pushf
not eax
add eax, 0xf19f2128
xor eax, 0xae4956b0
rol eax, 0xd8
popf
pushf
not eax
add eax, 0xd8bc3221
xor eax, 0x9e7b1c4f
rol eax, 0x25
popf
pushf
not eax
add eax, 0xd0a9d9fa
xor eax, 0xa4193594
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xd8858fac
xor eax, 0x85bcf498
rol eax, 0x42
popf
jmp 0x1400d6997
mov rdx, qword [rbp - 0x38]
lea r8, [0x18c6f3da8]
pushf
sub r8, 0x4c6a63c8
popf
push rax
pushf
mov eax, 0x918bbfd6
pushf
not eax
add eax, 0xef3b5198
xor eax, 0xb657af6c
rol eax, 6
popf
pushf
not eax
add eax, 0xc1c82551
xor eax, 0xbaa97c89
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xf43d9725
xor eax, 0x9d61d799
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xdecc4641
xor eax, 0xbca624eb
rol eax, 0x1d
popf
jmp 0x1400d6997
mov rax, qword [rbp - 0x20]
shr rax, 0x20
test eax, eax
jne 0x1400d8159
push rax
pushf
mov eax, 0x9cf4bcdc
pushf
not eax
add eax, 0x8228eab0
xor eax, 0xd50512f5
rol eax, 0x51
popf
pushf
not eax
add eax, 0xd3e5e1b4
xor eax, 0xa23a5165
rol eax, 0xd3
popf
pushf
not eax
add eax, 0xe6420190
xor eax, 0x990802a0
rol eax, 0x84
popf
pushf
not eax
add eax, 0x8c5cc737
xor eax, 0xb3385f37
rol eax, 0x1b
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0xa85cae84
pushf
not eax
add eax, 0xccce0a11
xor eax, 0xd114fc01
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xbe6fe68b
xor eax, 0xc11cea99
rol eax, 0xa8
popf
pushf
not eax
add eax, 0xcf060a5b
xor eax, 0x972d69bf
rol eax, 0xad
popf
pushf
not eax
add eax, 0x8ab411c1
xor eax, 0x9f45868d
rol eax, 0x3c
popf
jmp 0x1400d6997
mov eax, dword [rbp - 0x20]
test eax, eax
je 0x1400d81ec
push rax
pushf
mov eax, 0x979bdca8
pushf
not eax
add eax, 0xf8862afb
xor eax, 0x980b1236
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xe2d4c640
xor eax, 0xc6a913a0
rol eax, 0x98
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x82c0ba9a
pushf
not eax
add eax, 0xa8bb0194
xor eax, 0xcc88ec39
rol eax, 0x80
popf
pushf
not eax
add eax, 0x907369ab
xor eax, 0xee00f0eb
rol eax, 0x66
popf
pushf
not eax
add eax, 0xf218421b
xor eax, 0xb0d4c1c8
rol eax, 0x2c
popf
jmp 0x1400d6997
cmp eax, 5
jne 0x1400d827d
push rax
pushf
mov eax, 0xe3e2025f
pushf
not eax
add eax, 0xeb9d82cf
xor eax, 0xbc7add6b
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xa4c1c19f
xor eax, 0x9c2608c7
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x920e71e0
xor eax, 0xd99f0274
rol eax, 0x66
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x25c600c0
pushf
not eax
add eax, 0xc21cf710
xor eax, 0xd26f80b1
rol eax, 0xab
popf
pushf
not eax
add eax, 0xb61c9f80
xor eax, 0xf5a99aeb
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xe22d01d3
xor eax, 0x9bae17d7
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x8810ee50
xor eax, 0xdc952ae5
rol eax, 0xae
popf
jmp 0x1400d6997
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x1400d6de5
mov ecx, dword [rbp - 0x20]
mov rdx, rbx
call fcn.1400f1867
jmp 0x1400d6de5
mov rax, qword [r8 + rdx*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x1400d83db
push rax
pushf
mov eax, 0x70253f26
pushf
not eax
add eax, 0xbff0444d
xor eax, 0xa8efe9cb
rol eax, 0x21
popf
pushf
not eax
add eax, 0x9cbf7843
xor eax, 0xce777e67
rol eax, 0x54
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x629db414
pushf
not eax
add eax, 0xe26a4ba8
xor eax, 0xc600b8d7
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xbdaeea31
xor eax, 0x86604eec
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xb6614f90
xor eax, 0x91237b3a
rol eax, 0xde
popf
jmp 0x1400d6997
cmp byte [r14], 0x1a
je 0x1400d8480
push rax
pushf
mov eax, 0x5ca78aaa
pushf
not eax
add eax, 0xfd7968f1
xor eax, 0xf7d9771a
rol eax, 0x4c
popf
pushf
not eax
add eax, 0xde3c2ae1
xor eax, 0xdcba5e93
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x9e77bd57
xor eax, 0xb6c8f2cf
rol eax, 0xef
popf
pushf
not eax
add eax, 0xd894413a
xor eax, 0x9d3f0b16
rol eax, 0x41
popf
jmp 0x1400d6997
push rax
pushf
mov eax, 0x11117777
pushf
not eax
add eax, 0xa321bea7
xor eax, 0x944a8d98
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xaec6df1d
xor eax, 0xb8f530ea
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xd84db67f
xor eax, 0xc2c11265
rol eax, 0x99
popf
pushf
not eax
add eax, 0xe6af3097
xor eax, 0x9be14f8d
rol eax, 4
popf
jmp 0x1400d6997
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x1400d6de5
mov eax, dword [rbp - 0x1c]
sub eax, edi
jmp 0x1400d85b9
xor eax, eax
push rax
pushf
mov eax, 0x356adb1d
pushf
not eax
add eax, 0xea19cd0c
xor eax, 0xfac19293
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc8b29ec4
xor eax, 0x87a68a0e
rol eax, 0x86
popf
pushf
not eax
add eax, 0xa438054c
xor eax, 0xc9e89486
rol eax, 0xa
popf
jmp 0x1400d6997
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret