Function at 0x14003f8ac
Capabilities:
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x42aa89a8
pushf
not eax
add eax, 0xbabdd1d1
xor eax, 0xa038d919
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xba09747d
xor eax, 0xfca23d4c
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xdc6d8726
xor eax, 0xaa74b308
rol eax, 0xca
popf
cmp eax, 0x29
jne 0x14003f8fc
popf
pop rax
jmp 0x14004105e
cmp eax, 0
jne 0x14003f90b
popf
pop rax
jmp 0x14003fbae
cmp eax, 3
jne 0x14003f91a
popf
pop rax
jmp 0x14003fd81
cmp eax, 1
jne 0x14003f929
popf
pop rax
jmp 0x14003fc78
cmp eax, 0xd
jne 0x14003f938
popf
pop rax
jmp 0x14004036c
cmp eax, 0x1a
jne 0x14003f947
popf
pop rax
jmp 0x140040960
cmp eax, 0xe
jne 0x14003f956
popf
pop rax
jmp 0x1400403f2
cmp eax, 0xb
jne 0x14003f965
popf
pop rax
jmp 0x1400401f8
cmp eax, 0x19
jne 0x14003f974
popf
pop rax
jmp 0x1400408de
cmp eax, 8
jne 0x14003f983
popf
pop rax
jmp 0x140040038
cmp eax, 0x2a
jne 0x14003f992
popf
pop rax
jmp 0x1400410e1
cmp eax, 0x17
jne 0x14003f9a1
popf
pop rax
jmp 0x14004080e
cmp eax, 0x1c
jne 0x14003f9b0
popf
pop rax
jmp 0x140040a96
cmp eax, 0x2e
jne 0x14003f9bf
popf
pop rax
jmp 0x1400412b3
cmp eax, 0x18
jne 0x14003f9ce
popf
pop rax
jmp 0x140040879
cmp eax, 0x2b
jne 0x14003f9dd
popf
pop rax
jmp 0x140041184
cmp eax, 0x1b
jne 0x14003f9ec
popf
pop rax
jmp 0x1400409e0
cmp eax, 0x2d
jne 0x14003f9fb
popf
pop rax
jmp 0x140041258
cmp eax, 0x23
jne 0x14003fa0a
popf
pop rax
jmp 0x140040d78
cmp eax, 0x25
jne 0x14003fa19
popf
pop rax
jmp 0x140040e86
cmp eax, 0xf
jne 0x14003fa28
popf
pop rax
jmp 0x14004046c
cmp eax, 0x13
jne 0x14003fa37
popf
pop rax
jmp 0x140040674
cmp eax, 0x15
jne 0x14003fa46
popf
pop rax
jmp 0x140040781
cmp eax, 0x24
jne 0x14003fa55
popf
pop rax
jmp 0x140040ddb
cmp eax, 0x1e
jne 0x14003fa64
popf
pop rax
jmp 0x140040b84
cmp eax, 0xc
jne 0x14003fa73
popf
pop rax
jmp 0x1400402b1
cmp eax, 0x26
jne 0x14003fa82
popf
pop rax
jmp 0x140040f19
cmp eax, 0x27
jne 0x14003fa91
popf
pop rax
jmp 0x140040fbd
cmp eax, 0x1f
jne 0x14003faa0
popf
pop rax
jmp 0x140040be1
cmp eax, 0x10
jne 0x14003faaf
popf
pop rax
jmp 0x1400404b5
cmp eax, 0x2c
jne 0x14003fabe
popf
pop rax
jmp 0x1400411f5
cmp eax, 9
jne 0x14003facd
popf
pop rax
jmp 0x1400400be
cmp eax, 4
jne 0x14003fadc
popf
pop rax
jmp 0x14003fe54
cmp eax, 0x16
jne 0x14003faeb
popf
pop rax
jmp 0x1400407cd
cmp eax, 0x28
jne 0x14003fafa
popf
pop rax
jmp 0x14004100b
cmp eax, 0xa
jne 0x14003fb09
popf
pop rax
jmp 0x14004014c
cmp eax, 0x22
jne 0x14003fb18
popf
pop rax
jmp 0x140040d2f
cmp eax, 0x14
jne 0x14003fb27
popf
pop rax
jmp 0x1400406d5
cmp eax, 7
jne 0x14003fb36
popf
pop rax
jmp 0x14003ff98
cmp eax, 5
jne 0x14003fb45
popf
pop rax
jmp 0x14003fed6
cmp eax, 2
jne 0x14003fb54
popf
pop rax
jmp 0x14003fd09
cmp eax, 0x20
jne 0x14003fb63
popf
pop rax
jmp 0x140040c2b
cmp eax, 0x1d
jne 0x14003fb72
popf
pop rax
jmp 0x140040b27
cmp eax, 0x11
jne 0x14003fb81
popf
pop rax
jmp 0x14004055a
cmp eax, 6
jne 0x14003fb90
popf
pop rax
jmp 0x14003ff57
cmp eax, 0x21
jne 0x14003fb9f
popf
pop rax
jmp 0x140040ce0
cmp eax, 0x12
jne 0x14003fbae
popf
pop rax
jmp 0x1400405f2
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xor ebx, ebx
mov r14d, r8d
movsxd r12, ecx
mov rdi, rdx
test r8d, r8d
je 0x14003fc32
push rax
pushf
mov eax, 0x63edf9e6
pushf
not eax
add eax, 0x94b214c4
xor eax, 0xde786c93
rol eax, 0x50
popf
pushf
not eax
add eax, 0xa6e68cc2
xor eax, 0xc5d1d298
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xb3d0f589
xor eax, 0xc14f07a6
rol eax, 0xcc
popf
pushf
not eax
add eax, 0xf41d9650
xor eax, 0xd8a999c2
rol eax, 0x27
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x2672e4a0
pushf
not eax
add eax, 0xdb0c704b
xor eax, 0xeca6bced
rol eax, 0xff
popf
pushf
not eax
add eax, 0xdb779adb
xor eax, 0x84d7ee30
rol eax, 0x22
popf
pushf
not eax
add eax, 0x8ffa2ef2
xor eax, 0xe459ead3
rol eax, 0xcb
popf
jmp 0x14003f8ed
test rdx, rdx
jne 0x14003fcd6
push rax
pushf
mov eax, 0x549863be
pushf
not eax
add eax, 0x90d856d2
xor eax, 0xb00f861e
rol eax, 0x66
popf
pushf
not eax
add eax, 0x88ac39e4
xor eax, 0xe5934947
rol eax, 0xdb
popf
pushf
not eax
add eax, 0xea9cfab2
xor eax, 0xcdb20a50
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x96ae2214
xor eax, 0xdd560892
rol eax, 0xa
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x55f8bb56
pushf
not eax
add eax, 0xa2210de2
xor eax, 0xd1e769c2
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xb2829abb
xor eax, 0xc89b3187
rol eax, 0x24
popf
jmp 0x14003f8ed
call fcn.1400734ec
mov dword [rax], ebx
call fcn.14003f6a0
mov dword [rax], 0x16
call fcn.140050cbd
or eax, 0xffffffff
jmp 0x1400412b3
mov rax, r12
lea rcx, [0x1bff44313]
pushf
sub rcx, 0x7ff2ac93
popf
and eax, 0x3f
mov r13, r12
sar r13, 6
lea r15, [rax + rax*8]
mov rcx, qword [rcx + r13*8]
movsx esi, byte [rcx + r15*8 + 0x39]
lea eax, [rsi - 1]
cmp al, 1
ja 0x14003fdfb
push rax
pushf
mov eax, 0x72a09eef
pushf
not eax
add eax, 0xcfa92c54
xor eax, 0xedaf24c4
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf19e94be
xor eax, 0xe8ecb2ab
rol eax, 0x9e
popf
pushf
not eax
add eax, 0xcb241a6d
xor eax, 0x92bc644e
rol eax, 0x85
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0xa2a23d32
pushf
not eax
add eax, 0xfbbf2d25
xor eax, 0xac8d9941
rol eax, 0xde
popf
pushf
not eax
add eax, 0xca08a678
xor eax, 0xfe644f47
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xb560bc6a
xor eax, 0xf0ad5b41
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xe3af7006
xor eax, 0x9619b329
rol eax, 0x3b
popf
jmp 0x14003f8ed
mov eax, r14d
not eax
test al, 1
je 0x14003fea3
push rax
pushf
mov eax, 0x29b6d7dd
pushf
not eax
add eax, 0xc88e0e1f
xor eax, 0xff0c69a8
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x92ba7fa9
xor eax, 0xb3825429
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xa8882366
xor eax, 0xb8f7e5f2
rol eax, 0xde
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x63a5ce60
pushf
not eax
add eax, 0xec43ee70
xor eax, 0xb20f618d
rol eax, 0x44
popf
pushf
not eax
add eax, 0xa080079b
xor eax, 0xf76bed77
rol eax, 0x18
popf
jmp 0x14003f8ed
test byte [rcx + r15*8 + 0x38], 0x20
je 0x14003ff11
push rax
pushf
mov eax, 0xe9c907f3
pushf
not eax
add eax, 0xce9cb702
xor eax, 0xe573770b
rol eax, 0x96
popf
pushf
not eax
add eax, 0xf754f4b9
xor eax, 0xf0148c82
rol eax, 0xe8
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x37681918
pushf
not eax
add eax, 0xc86d2b52
xor eax, 0xf0bcfd09
rol eax, 0x94
popf
pushf
not eax
add eax, 0xc8400d74
xor eax, 0x952a5932
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x9658efe0
xor eax, 0xc65405d6
rol eax, 0xbc
popf
jmp 0x14003f8ed
xor edx, edx
mov ecx, r12d
lea r8d, [rdx + 2]
call fcn.140044600
push rax
pushf
mov eax, 0x483c970a
pushf
not eax
add eax, 0xf97bc2e5
xor eax, 0x9193dbed
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xa7f239fb
xor eax, 0xc33c9bf4
rol eax, 0xb
popf
jmp 0x14003f8ed
mov ecx, r12d
mov qword [rbp - 0x20], rbx
call fcn.14002bdf0
test eax, eax
je 0x14003ffdf
push rax
pushf
mov eax, 0x87e8a78c
pushf
not eax
add eax, 0xc55fc434
xor eax, 0xe193c12d
rol eax, 0x43
popf
pushf
not eax
add eax, 0xdc0b7c6f
xor eax, 0xf0e49018
rol eax, 0xc9
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x6cac9039
pushf
not eax
add eax, 0xa804a6c3
xor eax, 0xfb3be3a3
rol eax, 0x57
popf
pushf
not eax
add eax, 0x8a4a6008
xor eax, 0xc908be4f
rol eax, 0x64
popf
pushf
not eax
add eax, 0xa11147ca
xor eax, 0x928fdede
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x9801deab
xor eax, 0xf9877d69
rol eax, 0x31
popf
jmp 0x14003f8ed
lea rax, [0x1a67794b5]
pushf
sub rax, 0x6675fe35
popf
mov rax, qword [rax + r13*8]
cmp byte [rax + r15*8 + 0x38], bl
jge 0x14004008b
push rax
pushf
mov eax, 0x4e5a60d1
pushf
not eax
add eax, 0xfab725e7
xor eax, 0xf22f3248
rol eax, 0x7c
popf
pushf
not eax
add eax, 0xca520d77
xor eax, 0xf46ace13
rol eax, 0x1f
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0xfef92fcb
pushf
not eax
add eax, 0x9d233f85
xor eax, 0x86ae36d9
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xcf417df1
xor eax, 0xc2f92140
rol eax, 0x92
popf
jmp 0x14003f8ed
call fcn.14002ceb5
mov rcx, qword [rax + 0x90]
cmp qword [rcx + 0x138], rbx
jne 0x140040106
push rax
pushf
mov eax, 0xf495aabb
pushf
not eax
add eax, 0xc5fb3063
xor eax, 0xb6dd3899
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x9719cc2e
xor eax, 0xad868e68
rol eax, 0xcc
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x4d9eb174
pushf
not eax
add eax, 0xdfa5f678
xor eax, 0xcd418af0
rol eax, 0xc
popf
pushf
not eax
add eax, 0xf5031e68
xor eax, 0xf0d5b7d3
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xf1eac921
xor eax, 0xee321623
rol eax, 0x6f
popf
jmp 0x14003f8ed
lea rax, [0x1b7a4e624]
pushf
sub rax, 0x77a34fa4
popf
mov rax, qword [rax + r13*8]
cmp byte [rax + r15*8 + 0x39], bl
je 0x1400401c5
push rax
pushf
mov eax, 0x40b8bdb0
pushf
not eax
add eax, 0xde454085
xor eax, 0x969568fc
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xbebf94a8
xor eax, 0x8173b34f
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xac95991e
xor eax, 0xfec47fb6
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x93e61f7b
xor eax, 0xcf76808f
rol eax, 0x20
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x51bde930
pushf
not eax
add eax, 0xcf8eae1c
xor eax, 0xc6f6e24b
rol eax, 0x36
popf
pushf
not eax
add eax, 0x836e9a70
xor eax, 0xbf3fd0e6
rol eax, 0x46
popf
jmp 0x14003f8ed
lea rax, [0x189d5a1b5]
pushf
sub rax, 0x49d40b35
popf
mov rcx, qword [rax + r13*8]
lea rdx, [rbp - 0x10]
mov rcx, qword [rcx + r15*8 + 0x28]
jmp 0x140040217
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x14004026b
push rax
pushf
mov eax, 0xef74453c
pushf
not eax
add eax, 0x9a9d04db
xor eax, 0xb9d97830
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xf0ed2a70
xor eax, 0xe11adf64
rol eax, 0x40
popf
pushf
not eax
add eax, 0xb343d5f2
xor eax, 0xacd53bf9
rol eax, 0x40
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x326be3d9
pushf
not eax
add eax, 0xc92781f3
xor eax, 0xca0eded8
rol eax, 0x66
popf
pushf
not eax
add eax, 0x805cc3eb
xor eax, 0x9e995118
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xbf7e64b9
xor eax, 0xe62238dc
rol eax, 0xfb
popf
jmp 0x14003f8ed
test sil, sil
je 0x140040313
push rax
pushf
mov eax, 0x9d40e339
pushf
not eax
add eax, 0xa61d2fb5
xor eax, 0xbeb9ce9f
rol eax, 0xf4
popf
pushf
not eax
add eax, 0xc1191851
xor eax, 0xbea3d6f9
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x807b3b8e
xor eax, 0xc7b7b85b
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xcb0c4518
xor eax, 0xdb56c5a0
rol eax, 4
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x7a6c012b
pushf
not eax
add eax, 0xf6968a38
xor eax, 0xe6ecd297
rol eax, 0
popf
pushf
not eax
add eax, 0xa77a6a5b
xor eax, 0x9125c40c
rol eax, 0x6f
popf
pushf
not eax
add eax, 0xd5a05c05
xor eax, 0x91fe230c
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xffb56e5b
xor eax, 0xf3695894
rol eax, 0x30
popf
jmp 0x14003f8ed
dec sil
cmp sil, 1
ja 0x1400403bf
push rax
pushf
mov eax, 0x6223f90b
pushf
not eax
add eax, 0xac83dee1
xor eax, 0xd79c90b8
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xbcf35c19
xor eax, 0xb68a1144
rol eax, 0x66
popf
pushf
not eax
add eax, 0xe0ffc706
xor eax, 0xf4c08316
rol eax, 0x56
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0xdd8f1339
pushf
not eax
add eax, 0xd4c4b39c
xor eax, 0xdfe2caf0
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xd64f2f6b
xor eax, 0x8c8bd1c0
rol eax, 0xad
popf
jmp 0x14003f8ed
lea r12, [rdi + r14]
mov qword [rbp - 0x30], rbx
mov r14, rdi
cmp rdi, r12
jae 0x140040439
push rax
pushf
mov eax, 0x1c996abe
pushf
not eax
add eax, 0x89fd62c4
xor eax, 0xa06271db
rol eax, 0x3d
popf
pushf
not eax
add eax, 0x9d934de1
xor eax, 0xc3f302a5
rol eax, 0xf7
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x29ea93ef
pushf
not eax
add eax, 0xfea18391
xor eax, 0xd2cc9ea7
rol eax, 0x3f
popf
pushf
not eax
add eax, 0xce25c705
xor eax, 0x8ce88e81
rol eax, 0xc7
popf
jmp 0x14003f8ed
mov esi, dword [rbp - 0x2c]
push rax
pushf
mov eax, 0xc7d4f34d
pushf
not eax
add eax, 0xdb449172
xor eax, 0xdd2d685b
rol eax, 0xbf
popf
pushf
not eax
add eax, 0x9752e690
xor eax, 0xd999969e
rol eax, 0x64
popf
pushf
not eax
add eax, 0x8d2f51b1
xor eax, 0xf29f70ca
rol eax, 0x3a
popf
jmp 0x14003f8ed
movzx eax, word [r14]
movzx ecx, ax
mov word [rbp - 0x10], ax
call fcn.14006defe
movzx ecx, word [rbp - 0x10]
cmp ax, cx
jne 0x140040514
push rax
pushf
mov eax, 0x9dcf332d
pushf
not eax
add eax, 0xd1dccc6b
xor eax, 0xac0faa1f
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x8b371d94
xor eax, 0x9974a295
rol eax, 0xae
popf
pushf
not eax
add eax, 0x85533596
xor eax, 0xf8bfd685
rol eax, 0x92
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x23b8a54d
pushf
not eax
add eax, 0xf2e398f3
xor eax, 0xb79b9666
rol eax, 0x29
popf
pushf
not eax
add eax, 0xce952299
xor eax, 0xec80c9af
rol eax, 7
popf
pushf
not eax
add eax, 0x839165ea
xor eax, 0xdeeaa1a6
rol eax, 0x73
popf
jmp 0x14003f8ed
add esi, 2
mov dword [rbp - 0x2c], esi
cmp cx, 0xa
jne 0x1400405bf
push rax
pushf
mov eax, 0x9670fbc4
pushf
not eax
add eax, 0xa3f86ec3
xor eax, 0x8b8a2e0b
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xf6b2a020
xor eax, 0xb9b6e70a
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x8ee794bb
xor eax, 0x97c77e3d
rol eax, 0x18
popf
pushf
not eax
add eax, 0xae388e16
xor eax, 0xb90ec37e
rol eax, 0x7e
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x66415868
pushf
not eax
add eax, 0xaf1530c4
xor eax, 0x9276d203
rol eax, 0xeb
popf
pushf
not eax
add eax, 0xf2129b36
xor eax, 0xc9bf7460
rol eax, 0x95
popf
jmp 0x14003f8ed
mov ecx, 0xcc240494
pushf
not ecx
add ecx, 0xb88f381d
xor ecx, 0xba121872
rol ecx, 0x32
popf
pushf
not ecx
add ecx, 0x8582fbc7
xor ecx, 0xd599bbe2
rol ecx, 0x17
popf
call fcn.14006defe
mov ecx, 0xae17fafd
pushf
not ecx
add ecx, 0xe0664415
xor ecx, 0x8a81d39f
rol ecx, 0x23
popf
pushf
not ecx
add ecx, 0xeab82d02
xor ecx, 0xee153391
rol ecx, 0xf2
popf
pushf
not ecx
add ecx, 0xbd95e39b
xor ecx, 0xc0debae1
rol ecx, 0xe4
popf
cmp ax, cx
jne 0x1400407cd
jmp 0x140040674
inc esi
mov dword [rbp - 0x2c], esi
jmp 0x14004067a
inc ebx
push rax
pushf
mov eax, 0xaab59d83
pushf
not eax
add eax, 0xed5b7c53
xor eax, 0x98956885
rol eax, 0x56
popf
pushf
not eax
add eax, 0xc20406bd
xor eax, 0xa65118a9
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x957ddae7
xor eax, 0xab60b938
rol eax, 0x20
popf
pushf
not eax
add eax, 0xbf919142
xor eax, 0xd88761e1
rol eax, 0xe7
popf
jmp 0x14003f8ed
add r14, 2
cmp r14, r12
jae 0x14004073b
push rax
pushf
mov eax, 0x6d2722ba
pushf
not eax
add eax, 0xdde94c95
xor eax, 0x96c6fb2c
rol eax, 0xf4
popf
pushf
not eax
add eax, 0x952f3209
xor eax, 0x8f25ab9c
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xf2aedc83
xor eax, 0x96bf1e6d
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xd9aee889
xor eax, 0xc15c5aa3
rol eax, 0x78
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0xade4dfa8
pushf
not eax
add eax, 0xd530b23d
xor eax, 0xbb696619
rol eax, 0x21
popf
pushf
not eax
add eax, 0xa3e3b91f
xor eax, 0xb2f4b075
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf5f2aea8
xor eax, 0x9b3250f1
rol eax, 0x52
popf
jmp 0x14003f8ed
jmp 0x1400404b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
jmp 0x140040d78
mov r9d, r14d
lea rcx, [rbp - 0x30]
mov r8, rdi
mov edx, r12d
call fcn.14000ac50
push rax
pushf
mov eax, 0x82d0de0f
pushf
not eax
add eax, 0xee81af40
xor eax, 0xa404ff51
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xc758a0a7
xor eax, 0xf3f358d5
rol eax, 0x43
popf
pushf
not eax
add eax, 0xd695dbfd
xor eax, 0xec75eb49
rol eax, 0x45
popf
pushf
not eax
add eax, 0xbf01fca3
xor eax, 0xe561b09a
rol eax, 0x28
popf
jmp 0x14003f8ed
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
jmp 0x140040d7d
lea rax, [0x19a2b3397]
pushf
sub rax, 0x5a299d17
popf
mov rcx, qword [rax + r13*8]
cmp byte [rcx + r15*8 + 0x38], bl
jge 0x14004092d
push rax
pushf
mov eax, 0x5277cb72
pushf
not eax
add eax, 0xb9004c8c
xor eax, 0xfdf147b4
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x87d43236
xor eax, 0xd17c4b1b
rol eax, 0x90
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x9644f52d
pushf
not eax
add eax, 0xac181a2f
xor eax, 0xfbeffd58
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xa509a1cb
xor eax, 0xb6ccc171
rol eax, 0x7a
popf
jmp 0x14003f8ed
mov ecx, esi
test sil, sil
je 0x1400409ad
push rax
pushf
mov eax, 0xa33f49fc
pushf
not eax
add eax, 0xb72da6f4
xor eax, 0xa73010a6
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xc33a1659
xor eax, 0xcfb928dc
rol eax, 0x79
popf
pushf
not eax
add eax, 0xdb62bc22
xor eax, 0x97ece323
rol eax, 0xc1
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0xaec4c992
pushf
not eax
add eax, 0x9bee6057
xor eax, 0xb9dacec4
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xcebcd62c
xor eax, 0xc41e6bd3
rol eax, 0x9d
popf
jmp 0x14003f8ed
sub ecx, 1
je 0x140040a3d
push rax
pushf
mov eax, 0xb870dfbc
pushf
not eax
add eax, 0xd6fe9202
xor eax, 0xf0fc24ff
rol eax, 1
popf
pushf
not eax
add eax, 0xf518f9d8
xor eax, 0xc649e51b
rol eax, 0x83
popf
pushf
not eax
add eax, 0xe8063b8e
xor eax, 0xe11590cc
rol eax, 0xa5
popf
pushf
not eax
add eax, 0x8d230c2d
xor eax, 0xe6fd1dca
rol eax, 0x51
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x6097bd44
pushf
not eax
add eax, 0x835d7297
xor eax, 0xa3d07d07
rol eax, 5
popf
pushf
not eax
add eax, 0x96b25448
xor eax, 0xfcb2923f
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xdefb096b
xor eax, 0xdba25a1b
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xabb5936f
xor eax, 0x845a1376
rol eax, 0x1d
popf
jmp 0x14003f8ed
cmp ecx, 1
jne 0x140040ace
push rax
pushf
mov eax, 0x42cb6ae8
pushf
not eax
add eax, 0xe27343c3
xor eax, 0xe58c478f
rol eax, 0x44
popf
pushf
not eax
add eax, 0x8fa2f04c
xor eax, 0xece88ef4
rol eax, 0x16
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0xdf33e1fd
pushf
not eax
add eax, 0xb4eb2ef7
xor eax, 0x9ceff0aa
rol eax, 0x9d
popf
pushf
not eax
add eax, 0xd6aeca76
xor eax, 0xdffee5fc
rol eax, 0x88
popf
pushf
not eax
add eax, 0xddea0854
xor eax, 0x9f4a8ca0
rol eax, 0xe2
popf
pushf
not eax
add eax, 0x8a6d7c73
xor eax, 0x820b8c6b
rol eax, 0xaa
popf
jmp 0x14003f8ed
mov r9d, r14d
lea rcx, [rbp - 0x30]
mov r8, rdi
mov edx, r12d
call fcn.14003d042
jmp 0x140040879
mov r9d, r14d
lea rcx, [rbp - 0x30]
mov r8, rdi
mov edx, r12d
call fcn.1400575d9
jmp 0x140040879
mov r9d, r14d
lea rcx, [rbp - 0x30]
mov r8, rdi
mov edx, r12d
call fcn.14002d963
jmp 0x140040879
mov rcx, qword [rcx + r15*8 + 0x28]
lea r9, [rbp - 0x2c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rdi
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], eax
jmp 0x140040c49
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140040c86
push rax
pushf
mov eax, 0xa851aa67
pushf
not eax
add eax, 0x84b2fd02
xor eax, 0x8f2a1d18
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x883f2708
xor eax, 0xda997f46
rol eax, 0x86
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x8f8139d2
pushf
not eax
add eax, 0xce308a9b
xor eax, 0xd18145bd
rol eax, 0xf7
popf
pushf
not eax
add eax, 0x9213e4c1
xor eax, 0xb244d67d
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xd16fbaa6
xor eax, 0xd5da6090
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xc4bc55da
xor eax, 0xf2065356
rol eax, 0xeb
popf
jmp 0x14003f8ed
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x30], eax
push rax
pushf
mov eax, 0xb81f825c
pushf
not eax
add eax, 0xcdb753f1
xor eax, 0xd4b1d35b
rol eax, 0x85
popf
pushf
not eax
add eax, 0x98cce8a7
xor eax, 0x9f771665
rol eax, 0xa0
popf
pushf
not eax
add eax, 0xa510aaf2
xor eax, 0xb9951262
rol eax, 0xff
popf
jmp 0x14003f8ed
mov ebx, dword [rbp - 0x28]
push rax
pushf
mov eax, 0x4fcdc674
pushf
not eax
add eax, 0x93c49061
xor eax, 0xf22a1df5
rol eax, 0x98
popf
pushf
not eax
add eax, 0xeadc1a06
xor eax, 0xd9fabba1
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xcfa27129
xor eax, 0x8ff32f0e
rol eax, 0x8e
popf
jmp 0x14003f8ed
movsd xmm0, qword [rbp - 0x30]
movsd qword [rbp - 0x20], xmm0
push rax
pushf
mov eax, 0xf4273b09
pushf
not eax
add eax, 0xbeb4d857
xor eax, 0x8fd689e0
rol eax, 0x76
popf
pushf
not eax
add eax, 0x83e1de34
xor eax, 0xb6ec2544
rol eax, 0xac
popf
pushf
not eax
add eax, 0xbd3cd47c
xor eax, 0xae40ec55
rol eax, 0x57
popf
pushf
not eax
add eax, 0xd335474f
xor eax, 0xf28699e3
rol eax, 0xc2
popf
jmp 0x14003f8ed
mov rax, qword [rbp - 0x20]
shr rax, 0x20
test eax, eax
jne 0x140040e2d
push rax
pushf
mov eax, 0xef276425
pushf
not eax
add eax, 0xf504f429
xor eax, 0xcfc4e72b
rol eax, 0x84
popf
pushf
not eax
add eax, 0xe211564a
xor eax, 0xa99bb2cd
rol eax, 0x59
popf
pushf
not eax
add eax, 0xf9db3968
xor eax, 0x8c0774c5
rol eax, 0xe6
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x52486dbd
pushf
not eax
add eax, 0xb2e30a62
xor eax, 0x95628f1b
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xef1d2617
xor eax, 0xa86fe6bb
rol eax, 0x31
popf
pushf
not eax
add eax, 0xa2381f30
xor eax, 0xc4ff2ca8
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xc5b22c70
xor eax, 0xb3f94e02
rol eax, 0xc9
popf
jmp 0x14003f8ed
mov eax, dword [rbp - 0x20]
test eax, eax
je 0x140040ee6
push rax
pushf
mov eax, 0x2e14fe59
pushf
not eax
add eax, 0xd1ee61cf
xor eax, 0xeec4c558
rol eax, 0xc0
popf
pushf
not eax
add eax, 0xf3fb1ddd
xor eax, 0xb1d80322
rol eax, 0x71
popf
pushf
not eax
add eax, 0xc671adb2
xor eax, 0xbae027a0
rol eax, 0x48
popf
pushf
not eax
add eax, 0x9066ac49
xor eax, 0xd90ea479
rol eax, 0xbe
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x952659fc
pushf
not eax
add eax, 0xb8a63c56
xor eax, 0xb4af686c
rol eax, 0x9b
popf
pushf
not eax
add eax, 0xe77b3a9c
xor eax, 0x9ebcb64a
rol eax, 0x66
popf
jmp 0x14003f8ed
cmp eax, 5
jne 0x140040f77
push rax
pushf
mov eax, 0xf88b1bd8
pushf
not eax
add eax, 0xc6d86559
xor eax, 0xbdddedda
rol eax, 0xff
popf
pushf
not eax
add eax, 0xadd569c7
xor eax, 0x90aa36a4
rol eax, 0x18
popf
pushf
not eax
add eax, 0xd2dceddb
xor eax, 0xb61ee39c
rol eax, 0x82
popf
pushf
not eax
add eax, 0xa4763cf7
xor eax, 0xd8dba86b
rol eax, 0xa2
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x6e87f486
pushf
not eax
add eax, 0xfa6551fe
xor eax, 0x9fb18084
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x870b39f2
xor eax, 0xe3e86791
rol eax, 0x6c
popf
pushf
not eax
add eax, 0xa62c39e4
xor eax, 0xaae309ab
rol eax, 0x3e
popf
jmp 0x14003f8ed
call fcn.14003f6a0
mov dword [rax], 9
call fcn.1400734ec
mov dword [rax], 5
jmp 0x14003fd20
mov ecx, dword [rbp - 0x20]
call fcn.14004255f
jmp 0x14003fd20
lea rax, [0x1ace57d48]
pushf
sub rax, 0x6ce3e6c8
popf
mov rax, qword [rax + r13*8]
test byte [rax + r15*8 + 0x38], 0x40
je 0x1400410ae
push rax
pushf
mov eax, 0xd6872655
pushf
not eax
add eax, 0x860923ac
xor eax, 0xf3e712ef
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xb4ac2e49
xor eax, 0xee2832b3
rol eax, 0x51
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0xf7828422
pushf
not eax
add eax, 0xc1e70e24
xor eax, 0xcfeabdd2
rol eax, 0x87
popf
pushf
not eax
add eax, 0x9f55f022
xor eax, 0xd896069f
rol eax, 0x8e
popf
jmp 0x14003f8ed
cmp byte [rdi], 0x1a
je 0x14004113f
push rax
pushf
mov eax, 0xb94aa9ee
pushf
not eax
add eax, 0x8ba0e281
xor eax, 0xba650885
rol eax, 2
popf
pushf
not eax
add eax, 0xcbf3027a
xor eax, 0x9822475c
rol eax, 0x94
popf
pushf
not eax
add eax, 0xd30dd8ac
xor eax, 0xda125812
rol eax, 0x10
popf
pushf
not eax
add eax, 0xbef63793
xor eax, 0xc4bc9282
rol eax, 0x6a
popf
jmp 0x14003f8ed
push rax
pushf
mov eax, 0x40650a3b
pushf
not eax
add eax, 0x9fcf186c
xor eax, 0x8c3c6e1a
rol eax, 1
popf
pushf
not eax
add eax, 0xc192ad89
xor eax, 0xe3e9e37a
rol eax, 0x9a
popf
pushf
not eax
add eax, 0xb66be8cf
xor eax, 0x8e33b895
rol eax, 0xae
popf
jmp 0x14003f8ed
call fcn.14003f6a0
mov dword [rax], 0x1c
call fcn.1400734ec
and dword [rax], 0
jmp 0x14003fd20
mov eax, dword [rbp - 0x1c]
sub eax, ebx
jmp 0x1400412b3
xor eax, eax
push rax
pushf
mov eax, 0x95421834
pushf
not eax
add eax, 0xcf78d58c
xor eax, 0x8a476a72
rol eax, 0x96
popf
pushf
not eax
add eax, 0xeed25c6f
xor eax, 0xc02a6579
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x8f72eb73
xor eax, 0xc499d813
rol eax, 0xdd
popf
pushf
not eax
add eax, 0xc39a3c3f
xor eax, 0xefbd1d24
rol eax, 0xc5
popf
jmp 0x14003f8ed
mov rbx, qword [rsp + 0xb8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret