Function at 0x1401258d0
Capabilities:
Parse pe header
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0xe976f204
pushf
not eax
add eax, 0x47b8d15
xor eax, 0x6644ca01
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xbd79c7f
xor eax, 0x94f1094
rol eax, 0x98
popf
cmp eax, 0x22
jne 0x14012590d
popf
pop rax
jmp 0x140126eec
cmp eax, 0x25
jne 0x14012591c
popf
pop rax
jmp 0x140126fdd
cmp eax, 0x19
jne 0x14012592b
popf
pop rax
jmp 0x140126aab
cmp eax, 0x29
jne 0x14012593a
popf
pop rax
jmp 0x14012719f
cmp eax, 0x12
jne 0x140125949
popf
pop rax
jmp 0x140126685
cmp eax, 0x2d
jne 0x140125958
popf
pop rax
jmp 0x1401273cb
cmp eax, 0x1e
jne 0x140125967
popf
pop rax
jmp 0x140126c76
cmp eax, 0x14
jne 0x140125976
popf
pop rax
jmp 0x14012679a
cmp eax, 1
jne 0x140125985
popf
pop rax
jmp 0x140125cc1
cmp eax, 0x31
jne 0x140125994
popf
pop rax
jmp 0x1401275ce
cmp eax, 0x33
jne 0x1401259a3
popf
pop rax
jmp 0x140127657
cmp eax, 0x2a
jne 0x1401259b2
popf
pop rax
jmp 0x140127237
cmp eax, 3
jne 0x1401259c1
popf
pop rax
jmp 0x140125dbc
cmp eax, 0xf
jne 0x1401259d0
popf
pop rax
jmp 0x1401264b0
cmp eax, 8
jne 0x1401259df
popf
pop rax
jmp 0x1401260d6
cmp eax, 0x2c
jne 0x1401259ee
popf
pop rax
jmp 0x14012735b
cmp eax, 7
jne 0x1401259fd
popf
pop rax
jmp 0x140126037
cmp eax, 0
jne 0x140125a0c
popf
pop rax
jmp 0x140125c0a
cmp eax, 2
jne 0x140125a1b
popf
pop rax
jmp 0x140125d52
cmp eax, 0x1d
jne 0x140125a2a
popf
pop rax
jmp 0x140126c0b
cmp eax, 0xd
jne 0x140125a39
popf
pop rax
jmp 0x140126383
cmp eax, 0x21
jne 0x140125a48
popf
pop rax
jmp 0x140126e7d
cmp eax, 0x30
jne 0x140125a57
popf
pop rax
jmp 0x140127583
cmp eax, 0x26
jne 0x140125a66
popf
pop rax
jmp 0x14012707f
cmp eax, 0x13
jne 0x140125a75
popf
pop rax
jmp 0x1401266cf
cmp eax, 4
jne 0x140125a84
popf
pop rax
jmp 0x140125ea7
cmp eax, 0x1f
jne 0x140125a93
popf
pop rax
jmp 0x140126d32
cmp eax, 0xa
jne 0x140125aa2
popf
pop rax
jmp 0x140126203
cmp eax, 0x11
jne 0x140125ab1
popf
pop rax
jmp 0x1401265e9
cmp eax, 0x24
jne 0x140125ac0
popf
pop rax
jmp 0x140126f80
cmp eax, 0x16
jne 0x140125acf
popf
pop rax
jmp 0x14012698d
cmp eax, 6
jne 0x140125ade
popf
pop rax
jmp 0x140125fd0
cmp eax, 0x20
jne 0x140125aed
popf
pop rax
jmp 0x140126dc6
cmp eax, 0x2b
jne 0x140125afc
popf
pop rax
jmp 0x1401272ca
cmp eax, 0x27
jne 0x140125b0b
popf
pop rax
jmp 0x1401270e1
cmp eax, 5
jne 0x140125b1a
popf
pop rax
jmp 0x140125f16
cmp eax, 0xb
jne 0x140125b29
popf
pop rax
jmp 0x140126262
cmp eax, 0x18
jne 0x140125b38
popf
pop rax
jmp 0x140126a5f
cmp eax, 0xc
jne 0x140125b47
popf
pop rax
jmp 0x1401262fb
cmp eax, 0x2f
jne 0x140125b56
popf
pop rax
jmp 0x1401274f2
cmp eax, 0x17
jne 0x140125b65
popf
pop rax
jmp 0x1401269dd
cmp eax, 9
jne 0x140125b74
popf
pop rax
jmp 0x140126197
cmp eax, 0x15
jne 0x140125b83
popf
pop rax
jmp 0x140126834
cmp eax, 0x1b
jne 0x140125b92
popf
pop rax
jmp 0x140126b36
cmp eax, 0xe
jne 0x140125ba1
popf
pop rax
jmp 0x14012643e
cmp eax, 0x2e
jne 0x140125bb0
popf
pop rax
jmp 0x140127434
cmp eax, 0x23
jne 0x140125bbf
popf
pop rax
jmp 0x140126f36
cmp eax, 0x10
jne 0x140125bce
popf
pop rax
jmp 0x140126554
cmp eax, 0x1a
jne 0x140125bdd
popf
pop rax
jmp 0x140126afa
cmp eax, 0x1c
jne 0x140125bec
popf
pop rax
jmp 0x140126ba6
cmp eax, 0x32
jne 0x140125bfb
popf
pop rax
jmp 0x14012760f
cmp eax, 0x28
jne 0x140125c0a
popf
pop rax
jmp 0x140127147
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x78
xor edi, edi
mov r14d, r8d
movsxd r15, ecx
mov rbx, r9
mov rsi, rdx
test r8d, r8d
je 0x140125c8e
push rax
pushf
mov eax, 0x6899ccc0
pushf
not eax
add eax, 0xfd7e0da
xor eax, 0x7c53cc7c
rol eax, 0x65
popf
pushf
not eax
add eax, 0x1c4125cf
xor eax, 0x19362889
rol eax, 0x4c
popf
pushf
not eax
add eax, 0x24406ca0
xor eax, 0x1c9d778b
rol eax, 0x19
popf
pushf
not eax
add eax, 0x74f137f7
xor eax, 0x1675c099
rol eax, 0x5c
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xa7396dde
pushf
not eax
add eax, 0x3520c29a
xor eax, 0x6992faca
rol eax, 0x87
popf
pushf
not eax
add eax, 0x546c3311
xor eax, 0x5994fa18
rol eax, 0xc3
popf
jmp 0x1401258fe
test rdx, rdx
jne 0x140125d1f
push rax
pushf
mov eax, 0xbe705275
pushf
not eax
add eax, 0x405c24dc
xor eax, 0x6106acf6
rol eax, 0x12
popf
pushf
not eax
add eax, 0x2bdedf44
xor eax, 0x44d91aad
rol eax, 0x26
popf
pushf
not eax
add eax, 0x76da8814
xor eax, 0x7bf1add
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x74f9b4dd
xor eax, 0x53048ef0
rol eax, 0x61
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xe148a24e
pushf
not eax
add eax, 0x43a26ae8
xor eax, 0x673f69dc
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x7600a1f8
xor eax, 0x40f6790c
rol eax, 0xfa
popf
jmp 0x1401258fe
mov byte [r9 + 0x38], 1
xor r8d, r8d
mov dword [r9 + 0x34], edi
xor edx, edx
mov byte [r9 + 0x30], 1
xor ecx, ecx
mov dword [r9 + 0x2c], 0x16
xor r9d, r9d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.14011685a
or eax, 0xffffffff
jmp 0x140127657
mov rax, r15
lea rcx, [0x1823cd58b]
pushf
sub rcx, 0x4238ab5b
popf
and eax, 0x3f
mov r12, r15
sar r12, 6
mov qword [rbp - 0x18], r12
lea r13, [rax + rax*8]
mov rcx, qword [rcx + r12*8]
mov al, byte [rcx + r13*8 + 0x39]
mov byte [rbp - 0x48], al
dec al
cmp al, 1
ja 0x140125e4e
push rax
pushf
mov eax, 0x6e15b1a7
pushf
not eax
add eax, 0x692a8892
xor eax, 0x4000d076
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x71fdf743
xor eax, 0x2786bdf4
rol eax, 0xf
popf
pushf
not eax
add eax, 0x306e91e5
xor eax, 0x1c856eb
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x4d3c6bdd
xor eax, 0x7c0eaa0d
rol eax, 0x3e
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x68fbc518
pushf
not eax
add eax, 0x204ea0bb
xor eax, 0x5bd7cf67
rol eax, 0xb6
popf
pushf
not eax
add eax, 0x6018330
xor eax, 0x5805a6ee
rol eax, 0xd8
popf
pushf
not eax
add eax, 0x2a9e3109
xor eax, 0x29695b6
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x222e1ccf
xor eax, 0x3a4f383e
rol eax, 0xea
popf
jmp 0x1401258fe
mov eax, r14d
not eax
test al, 1
je 0x140125ee3
push rax
pushf
mov eax, 0xd044e179
pushf
not eax
add eax, 0x55ffec26
xor eax, 0x555813b3
rol eax, 0x12
popf
pushf
not eax
add eax, 0x6cb0fd47
xor eax, 0x971b9ba
rol eax, 0x6a
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xa44b4aae
pushf
not eax
add eax, 0x1a60fa79
xor eax, 0x6db233bb
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x5b0e2985
xor eax, 0x67808610
rol eax, 0x12
popf
jmp 0x1401258fe
test byte [rcx + r13*8 + 0x38], 0x20
je 0x140125f77
push rax
pushf
mov eax, 0x68942411
pushf
not eax
add eax, 0x64e1072b
xor eax, 0x51a1e441
rol eax, 0xe7
popf
pushf
not eax
add eax, 0x2086dc29
xor eax, 0x2732bb67
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x7055986e
xor eax, 0x10ae5c61
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x5173a10
xor eax, 0x28e6f06f
rol eax, 0x9c
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x8ddc76b7
pushf
not eax
add eax, 0x7d3f43a8
xor eax, 0x1f59b119
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x36fb88e5
xor eax, 0x174f737c
rol eax, 0x77
popf
pushf
not eax
add eax, 0x1ef7586b
xor eax, 0x5f3d7482
rol eax, 0x70
popf
pushf
not eax
add eax, 0x207362d3
xor eax, 0x5df7cf57
rol eax, 0xb7
popf
jmp 0x1401258fe
xor edx, edx
mov ecx, r15d
lea r8d, [rdx + 2]
call fcn.140122341
push rax
pushf
mov eax, 0x4345eff4
pushf
not eax
add eax, 0x6b72fb0e
xor eax, 0x1d84f905
rol eax, 0x61
popf
pushf
not eax
add eax, 0xce36e3a
xor eax, 0x18237d
rol eax, 0x4f
popf
pushf
not eax
add eax, 0x7cb43b6f
xor eax, 0x7b2a929c
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x474ad86d
xor eax, 0x67d35890
rol eax, 0x72
popf
jmp 0x1401258fe
mov ecx, r15d
mov qword [rbp - 0x30], rdi
call fcn.1401596f5
lea rdx, [0x1a546a252]
pushf
sub rdx, 0x65427822
popf
test eax, eax
je 0x1401260a3
push rax
pushf
mov eax, 0xf7f9e49b
pushf
not eax
add eax, 0x3afe2b71
xor eax, 0x182d3bda
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x4cd248b8
xor eax, 0x5b313c30
rol eax, 0xef
popf
pushf
not eax
add eax, 0x5d69da8f
xor eax, 0x9f03064
rol eax, 9
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xc3ffd1fe
pushf
not eax
add eax, 0x366f7548
xor eax, 0x6200caa0
rol eax, 0x91
popf
pushf
not eax
add eax, 0x5e607ed7
xor eax, 0x4a8e5dfb
rol eax, 0x83
popf
jmp 0x1401258fe
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x38], dil
jge 0x14012613e
push rax
pushf
mov eax, 0xeeebdcd4
pushf
not eax
add eax, 0xa9728ee
xor eax, 0x416686e4
rol eax, 0x5b
popf
pushf
not eax
add eax, 0x4b576208
xor eax, 0x1e756758
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x14a48ae5
xor eax, 0x3559fc7b
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x16477935
xor eax, 0x60d190bc
rol eax, 0x43
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x10b4954d
pushf
not eax
add eax, 0x55bd13d6
xor eax, 0x6ad3b29c
rol eax, 0x1a
popf
pushf
not eax
add eax, 0x14df7bbd
xor eax, 0x795fff3d
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x485275eb
xor eax, 0x2123d513
rol eax, 0x63
popf
pushf
not eax
add eax, 0x10e17c87
xor eax, 0x5eb2dfc2
rol eax, 0x64
popf
jmp 0x1401258fe
cmp byte [rbx + 0x28], dil
jne 0x1401261d0
push rax
pushf
mov eax, 0xa4ab0800
pushf
not eax
add eax, 0x4baff1a8
xor eax, 0x3a9d754f
rol eax, 0x78
popf
pushf
not eax
add eax, 0x2866f3f5
xor eax, 0x3fc95a52
rol eax, 0xe0
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x2db96594
pushf
not eax
add eax, 0x3223c5d5
xor eax, 0x7fea9128
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x265c2d41
xor eax, 0x22808b52
rol eax, 0x6f
popf
jmp 0x1401258fe
mov rcx, rbx
call fcn.1400e1398
lea rdx, [0x1aee1c0c6]
pushf
sub rdx, 0x6edd9696
popf
push rax
pushf
mov eax, 0x729f307a
pushf
not eax
add eax, 0x38670248
xor eax, 0x567d4007
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x1734e8fd
xor eax, 0x7cfa5761
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xc5312b7
xor eax, 0x13e1521e
rol eax, 1
popf
jmp 0x1401258fe
mov rax, qword [rbx + 0x18]
cmp qword [rax + 0x138], rdi
jne 0x1401262c8
push rax
pushf
mov eax, 0x3478604e
pushf
not eax
add eax, 0x3189816
xor eax, 0x68d88dc1
rol eax, 0x70
popf
pushf
not eax
add eax, 0x1d36c418
xor eax, 0x39407b2c
rol eax, 0x57
popf
pushf
not eax
add eax, 0x71b6b3ad
xor eax, 0x141dbb14
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x676c1728
xor eax, 0x623dfbe4
rol eax, 0x71
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x69635164
pushf
not eax
add eax, 0x6018ead0
xor eax, 0x4025c03
rol eax, 0x38
popf
pushf
not eax
add eax, 0x6d4b6f08
xor eax, 0x4458b741
rol eax, 0xc2
popf
jmp 0x1401258fe
mov rax, qword [rdx + r12*8]
cmp byte [rax + r13*8 + 0x39], dil
je 0x140126350
push rax
pushf
mov eax, 0x3388c79
pushf
not eax
add eax, 0x40641a57
xor eax, 0x1fffd852
rol eax, 0x3a
popf
pushf
not eax
add eax, 0x107511e7
xor eax, 0x5bc00ac7
rol eax, 0x73
popf
pushf
not eax
add eax, 0x67e0658f
xor eax, 0x154c2440
rol eax, 0x6d
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xa976c4c8
pushf
not eax
add eax, 0x386bb4e9
xor eax, 0x676a38f3
rol eax, 0x16
popf
pushf
not eax
add eax, 0x60b8ef95
xor eax, 0x287e87e2
rol eax, 0xab
popf
jmp 0x1401258fe
mov rcx, qword [rdx + r12*8]
lea rdx, [rbp - 0x20]
mov rcx, qword [rcx + r13*8 + 0x28]
jmp 0x140126391
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
je 0x1401263e5
push rax
pushf
mov eax, 0xdab9cd4e
pushf
not eax
add eax, 0x57c19a64
xor eax, 0x2a4fadbf
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x6f853e06
xor eax, 0x5024875
rol eax, 0x19
popf
pushf
not eax
add eax, 0x6073f115
xor eax, 0x5f1d8bf6
rol eax, 0xdd
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xff0237bd
pushf
not eax
add eax, 0x3367927b
xor eax, 0xb1b7c0f
rol eax, 0x90
popf
pushf
not eax
add eax, 0x62172fe
xor eax, 0x29fba5d2
rol eax, 0xff
popf
pushf
not eax
add eax, 0x2f3a8dca
xor eax, 0x7827d777
rol eax, 7
popf
pushf
not eax
add eax, 0x3a7fc11c
xor eax, 0x49f53ef6
rol eax, 0xaa
popf
jmp 0x1401258fe
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x14012647d
push rax
pushf
mov eax, 0x55491fa1
pushf
not eax
add eax, 0x68878444
xor eax, 0xaf90a30
rol eax, 0xbd
popf
pushf
not eax
add eax, 0x6ad752c7
xor eax, 0x279da4f4
rol eax, 0x72
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xe785b9dd
pushf
not eax
add eax, 0x4ca0078c
xor eax, 0xe4f4d83
rol eax, 0x35
popf
pushf
not eax
add eax, 0x4203d581
xor eax, 0x27566ae0
rol eax, 0xc8
popf
jmp 0x1401258fe
sub ecx, 1
je 0x1401264fb
push rax
pushf
mov eax, 0xab7ccb14
pushf
not eax
add eax, 0x103e3159
xor eax, 0x6499789c
rol eax, 0x53
popf
pushf
not eax
add eax, 0x63fedd29
xor eax, 0x6abd2cff
rol eax, 0xe3
popf
pushf
not eax
add eax, 0x4400fd75
xor eax, 0x7f148bc
rol eax, 0xf0
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x495daf5d
pushf
not eax
add eax, 0x71b56c4f
xor eax, 0x402a1486
rol eax, 0x60
popf
pushf
not eax
add eax, 0x7b891158
xor eax, 0x22157bd3
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x1c3f503b
xor eax, 0x45a7515e
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x475f2ecd
xor eax, 0x4acd15c6
rol eax, 0x2f
popf
jmp 0x1401258fe
cmp ecx, 1
jne 0x140126590
push rax
pushf
mov eax, 0xc87bd544
pushf
not eax
add eax, 0x6cb3307
xor eax, 0x186f9fc2
rol eax, 0x87
popf
pushf
not eax
add eax, 0x2672bca2
xor eax, 0x1611348e
rol eax, 0x15
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x6605d3ed
pushf
not eax
add eax, 0x4bf175cd
xor eax, 0x4e6a57d3
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x40cfe5d8
xor eax, 0x59b7016f
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x2cd53004
xor eax, 0x353204c
rol eax, 0x4e
popf
pushf
not eax
add eax, 0x1cd138b2
xor eax, 0x3ac241a5
rol eax, 0x90
popf
jmp 0x1401258fe
lea r12, [rsi + r14]
mov qword [rbp - 0x40], rdi
mov r15, rsi
cmp rsi, r12
jae 0x14012662c
push rax
pushf
mov eax, 0x1a18d53c
pushf
not eax
add eax, 0x12aa49f2
xor eax, 0x2c7e45a5
rol eax, 0x44
popf
pushf
not eax
add eax, 0x6ef32a7f
xor eax, 0x20241971
rol eax, 0x4f
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x35a46696
pushf
not eax
add eax, 0x62a0084c
xor eax, 0x2c51fc0f
rol eax, 0x31
popf
pushf
not eax
add eax, 0x1c6801f4
xor eax, 0x7a6b457f
rol eax, 0xee
popf
pushf
not eax
add eax, 0x7dc45352
xor eax, 0x477b68f0
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x391d1e8e
xor eax, 0x6063656b
rol eax, 0x2c
popf
jmp 0x1401258fe
mov r14d, dword [rbp - 0x3c]
push rax
pushf
mov eax, 0x21f5ce53
pushf
not eax
add eax, 0x7d8f108
xor eax, 0x186533e9
rol eax, 0x33
popf
pushf
not eax
add eax, 0x539b0b5c
xor eax, 0x628924fe
rol eax, 0x45
popf
pushf
not eax
add eax, 0x77c67faa
xor eax, 0x337e34f4
rol eax, 0x74
popf
jmp 0x1401258fe
movzx eax, word [r15]
movzx ecx, ax
mov word [rbp - 0x48], ax
call fcn.140159d95
movzx ecx, word [rbp - 0x48]
cmp ax, cx
jne 0x140126741
push rax
pushf
mov eax, 0x729a81ba
pushf
not eax
add eax, 0x139648b8
xor eax, 0x7873adce
rol eax, 0x76
popf
pushf
not eax
add eax, 0x338a9239
xor eax, 0x123c669e
rol eax, 0x87
popf
pushf
not eax
add eax, 0x6b6ef02d
xor eax, 0x3001c2e0
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x6049e01e
xor eax, 0x38e7670b
rol eax, 0x38
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x3ae4b441
pushf
not eax
add eax, 0x637763cb
xor eax, 0x699e90ec
rol eax, 0x61
popf
pushf
not eax
add eax, 0x172b5604
xor eax, 0x5c834e93
rol eax, 0xab
popf
pushf
not eax
add eax, 0x5f4d93b0
xor eax, 0x77817ab6
rol eax, 0xcf
popf
pushf
not eax
add eax, 0x5cc8796b
xor eax, 0x70dda6ea
rol eax, 0xe5
popf
jmp 0x1401258fe
add r14d, 2
mov dword [rbp - 0x3c], r14d
cmp cx, 0xa
jne 0x140126801
push rax
pushf
mov eax, 0x7f63d7c5
pushf
not eax
add eax, 0x3067fab
xor eax, 0x4c390922
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x6ef6a5f
xor eax, 0x4b659957
rol eax, 0x8b
popf
pushf
not eax
add eax, 0x3f9977fa
xor eax, 0x706ff299
rol eax, 0x7e
popf
pushf
not eax
add eax, 0x65c14676
xor eax, 0x56121d5c
rol eax, 0x52
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xfb3f57cc
pushf
not eax
add eax, 0x37f6fda8
xor eax, 0x479fa082
rol eax, 0x73
popf
pushf
not eax
add eax, 0x501969fd
xor eax, 0x2ecd90bc
rol eax, 0x69
popf
jmp 0x1401258fe
mov ecx, 0x5f6c6cbb
pushf
not ecx
add ecx, 0x46316680
xor ecx, 0x284f8822
rol ecx, 0x7c
popf
pushf
not ecx
add ecx, 0x1fde88a0
xor ecx, 0x4b5ce006
rol ecx, 0x52
popf
pushf
not ecx
add ecx, 0x563818e
xor ecx, 0xef9ab62
rol ecx, 0xe9
popf
pushf
not ecx
add ecx, 0x2608c695
xor ecx, 0x31a5b037
rol ecx, 0x81
popf
call fcn.140159d95
mov ecx, 0x5587ccce
pushf
not ecx
add ecx, 0x4cd6add5
xor ecx, 0x347b927c
rol ecx, 0x5c
popf
pushf
not ecx
add ecx, 0x6af88bf
xor ecx, 0x698d1790
rol ecx, 0x37
popf
pushf
not ecx
add ecx, 0x42e10f54
xor ecx, 0x37471580
rol ecx, 0xfa
popf
cmp ax, cx
jne 0x140126934
push rax
pushf
mov eax, 0x54895d0c
pushf
not eax
add eax, 0x2680adcc
xor eax, 0x2a4d0063
rol eax, 0x44
popf
pushf
not eax
add eax, 0x203944e3
xor eax, 0x2a5a99d5
rol eax, 0xff
popf
pushf
not eax
add eax, 0x2d2b977b
xor eax, 0x4df4c058
rol eax, 0xb7
popf
pushf
not eax
add eax, 0x422e255c
xor eax, 0x1a8a061b
rol eax, 0x39
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x75db6dc5
pushf
not eax
add eax, 0x4f7300b1
xor eax, 0x18ab5482
rol eax, 0x63
popf
pushf
not eax
add eax, 0xa86997
xor eax, 0xb9dff28
rol eax, 0xc
popf
pushf
not eax
add eax, 0x261153ef
xor eax, 0x72f645ec
rol eax, 0x77
popf
pushf
not eax
add eax, 0x400f051b
xor eax, 0x43213e9a
rol eax, 0x4a
popf
jmp 0x1401258fe
inc r14d
mov dword [rbp - 0x3c], r14d
jmp 0x140126995
inc edi
push rax
pushf
mov eax, 0x7a8f7fec
pushf
not eax
add eax, 0x2f1f3454
xor eax, 0x37c4a6d
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x38d55c50
xor eax, 0x1af60cac
rol eax, 0x57
popf
pushf
not eax
add eax, 0x6a2295f
xor eax, 0x132812b6
rol eax, 0x30
popf
jmp 0x1401258fe
add r15, 2
cmp r15, r12
jae 0x140126a19
push rax
pushf
mov eax, 0xdb42cef4
pushf
not eax
add eax, 0x5abd2a52
xor eax, 0x64fd2977
rol eax, 0xb
popf
pushf
not eax
add eax, 0x6da13776
xor eax, 0x3e0fe699
rol eax, 0xa9
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x5307a64f
pushf
not eax
add eax, 0x2e978227
xor eax, 0x62576274
rol eax, 0xff
popf
pushf
not eax
add eax, 0x1c161051
xor eax, 0x4f3e3eb6
rol eax, 0x54
popf
pushf
not eax
add eax, 0x238b9022
xor eax, 0x46f98ea9
rol eax, 0x51
popf
jmp 0x1401258fe
jmp 0x1401266cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x3bfce29f
pushf
not eax
add eax, 0x89b08e5
xor eax, 0x186aa9cf
rol eax, 5
popf
pushf
not eax
add eax, 0x55a18867
xor eax, 0x52618def
rol eax, 0x5a
popf
pushf
not eax
add eax, 0xb91c7b6
xor eax, 0x4ffc0f4a
rol eax, 0xa7
popf
jmp 0x1401258fe
mov r12, qword [rbp - 0x18]
jmp 0x1401270e4
mov r9d, r14d
mov qword [rsp + 0x20], rbx
mov r8, rsi
lea rcx, [rbp - 0x40]
mov edx, r15d
call fcn.14001c610
push rax
pushf
mov eax, 0xe1e08553
pushf
not eax
add eax, 0x58792d6a
xor eax, 0x29665ba3
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x7ab8988d
xor eax, 0xa1ee91d
rol eax, 0x7d
popf
pushf
not eax
add eax, 0xfb5f141
xor eax, 0x5c75e0c8
rol eax, 0x5d
popf
pushf
not eax
add eax, 0x7647b2aa
xor eax, 0xb4a1da3
rol eax, 0xcc
popf
jmp 0x1401258fe
movsd xmm0, qword [rax]
mov edi, dword [rax + 8]
jmp 0x1401270e9
lea rdx, [0x1bbf78225]
pushf
sub rdx, 0x7bf357f5
popf
push rax
pushf
mov eax, 0xa3ed1056
pushf
not eax
add eax, 0x41f448e1
xor eax, 0x514bca6
rol eax, 0x39
popf
pushf
not eax
add eax, 0x5287554f
xor eax, 0x36767b3c
rol eax, 0xa6
popf
pushf
not eax
add eax, 0x40d9be69
xor eax, 0x3744077d
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x7b69ac0
xor eax, 0x7b3516ba
rol eax, 0x12
popf
jmp 0x1401258fe
mov rcx, qword [rdx + r12*8]
cmp byte [rcx + r13*8 + 0x38], dil
jge 0x140126cd9
push rax
pushf
mov eax, 0x5bf571b1
pushf
not eax
add eax, 0x7d752968
xor eax, 0x64f464ab
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x6fc21de3
xor eax, 0x7bcf1b5f
rol eax, 1
popf
pushf
not eax
add eax, 0x7da16733
xor eax, 0x26b43377
rol eax, 0xa3
popf
pushf
not eax
add eax, 0x3c8bf58d
xor eax, 0x620f2b3e
rol eax, 0x28
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xc9d8b620
pushf
not eax
add eax, 0x3051c750
xor eax, 0x53c42910
rol eax, 0xda
popf
pushf
not eax
add eax, 0x445b0f87
xor eax, 0x7fec38af
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x589ea767
xor eax, 0x5be14fe2
rol eax, 0xbb
popf
pushf
not eax
add eax, 0x4228300c
xor eax, 0x31af1a0
rol eax, 0xd1
popf
jmp 0x1401258fe
movsx ecx, byte [rbp - 0x48]
test ecx, ecx
je 0x140126d6d
push rax
pushf
mov eax, 0x895e37c0
pushf
not eax
add eax, 0x3b801154
xor eax, 0x411ab2be
rol eax, 0x8d
popf
pushf
not eax
add eax, 0x47508dc5
xor eax, 0x59eacf5d
rol eax, 0xe6
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xf0984e57
pushf
not eax
add eax, 0x619a2f77
xor eax, 0x2a21547f
rol eax, 0x1d
popf
pushf
not eax
add eax, 0x3d952ef4
xor eax, 0x5efc6e48
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x43d37f72
xor eax, 0x54171221
rol eax, 0x77
popf
pushf
not eax
add eax, 0x37744a0b
xor eax, 0x3a93c681
rol eax, 0x7f
popf
jmp 0x1401258fe
sub ecx, 1
je 0x140126e24
push rax
pushf
mov eax, 0x2bd6d736
pushf
not eax
add eax, 0x882ed82
xor eax, 0x2823790f
rol eax, 5
popf
pushf
not eax
add eax, 0x3fc79cd1
xor eax, 0x63d43bd5
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x35d92463
xor eax, 0x7ebb370f
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x775b0d19
xor eax, 0x6515a8cf
rol eax, 0xe4
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x12291b9b
pushf
not eax
add eax, 0x23e23d1e
xor eax, 0x3db5f260
rol eax, 0xa4
popf
pushf
not eax
add eax, 0x3d5a544
xor eax, 0x7bc15790
rol eax, 0xeb
popf
pushf
not eax
add eax, 0x1c04cec9
xor eax, 0x5827344c
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x42c9246
xor eax, 0x3f00598f
rol eax, 0x61
popf
jmp 0x1401258fe
cmp ecx, 1
jne 0x140126eb9
push rax
pushf
mov eax, 0x3c5d06d7
pushf
not eax
add eax, 0x30b5906b
xor eax, 0x2b41ec87
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x600ba376
xor eax, 0x301a0d24
rol eax, 0xe8
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xd6708dce
pushf
not eax
add eax, 0x40ebadc9
xor eax, 0x72a47ccd
rol eax, 0
popf
pushf
not eax
add eax, 0x3f2859a2
xor eax, 0x2c08f66a
rol eax, 0xea
popf
jmp 0x1401258fe
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.140123caa
jmp 0x140126ba6
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.14012442d
jmp 0x140126ba6
mov r9d, r14d
lea rcx, [rbp - 0x40]
mov r8, rsi
mov edx, r15d
call fcn.1401235ca
jmp 0x140126ba6
mov rcx, qword [rcx + r13*8 + 0x28]
lea r9, [rbp - 0x3c]
xor eax, eax
mov r8d, r14d
and qword [rsp + 0x20], rax
mov rdx, rsi
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x38], eax
jmp 0x140126ffb
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x140127038
push rax
pushf
mov eax, 0x538e72c2
pushf
not eax
add eax, 0x3be714fd
xor eax, 0x677a743e
rol eax, 0x28
popf
pushf
not eax
add eax, 0x7f3bf836
xor eax, 0x5c6793a6
rol eax, 0xd4
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x347ea5b4
pushf
not eax
add eax, 0x47cc9c03
xor eax, 0x36a40d80
rol eax, 0x24
popf
pushf
not eax
add eax, 0x6575a4dc
xor eax, 0x5930ca0f
rol eax, 0x98
popf
pushf
not eax
add eax, 0x59d3924f
xor eax, 0x6354ad21
rol eax, 0x30
popf
jmp 0x1401258fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x40], eax
push rax
pushf
mov eax, 0x81785026
pushf
not eax
add eax, 0x541f7157
xor eax, 0x45f440
rol eax, 0x62
popf
pushf
not eax
add eax, 0x1813107a
xor eax, 0x75ab0ece
rol eax, 0x6d
popf
pushf
not eax
add eax, 0x13ba5551
xor eax, 0x3ee33577
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x7bc372d0
xor eax, 0x37fb4073
rol eax, 0x98
popf
jmp 0x1401258fe
mov edi, dword [rbp - 0x38]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp - 0x30], xmm0
push rax
pushf
mov eax, 0xd9dfff7
pushf
not eax
add eax, 0xdad5b5a
xor eax, 0x1a5626c2
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x47ca5ad9
xor eax, 0x9c25df3
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x5dc0de43
xor eax, 0xe19ab6b
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x29b6c4ef
xor eax, 0x53ca6f53
rol eax, 0xe1
popf
jmp 0x1401258fe
lea rdx, [0x19264b126]
pushf
sub rdx, 0x526086f6
popf
push rax
pushf
mov eax, 0x9fd1680d
pushf
not eax
add eax, 0x31a56543
xor eax, 0x7dbaf7a2
rol eax, 0x93
popf
pushf
not eax
add eax, 0x4f3efc10
xor eax, 0x3009a74d
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x573d0d19
xor eax, 0x5e906725
rol eax, 0x1c
popf
jmp 0x1401258fe
mov rax, qword [rbp - 0x30]
shr rax, 0x20
test eax, eax
jne 0x140127204
push rax
pushf
mov eax, 0xd7079b1b
pushf
not eax
add eax, 0x1f4e42c5
xor eax, 0x6e51fa60
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x7ddfc3b7
xor eax, 0x2120bf35
rol eax, 0x47
popf
pushf
not eax
add eax, 0x432f2490
xor eax, 0x5764ef55
rol eax, 0xdc
popf
pushf
not eax
add eax, 0x75266f27
xor eax, 0x793694bf
rol eax, 0xfb
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x79f84f90
pushf
not eax
add eax, 0x2e4c6722
xor eax, 0x52a40fe4
rol eax, 0x61
popf
pushf
not eax
add eax, 0xaf3e2d0
xor eax, 0x3d22b1e4
rol eax, 0x90
popf
jmp 0x1401258fe
mov eax, dword [rbp - 0x30]
test eax, eax
je 0x140127271
push rax
pushf
mov eax, 0x3dcddc16
pushf
not eax
add eax, 0x19e6580c
xor eax, 0x4afd1035
rol eax, 0x86
popf
pushf
not eax
add eax, 0x42e3f72f
xor eax, 0x49890703
rol eax, 0x22
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xc8b1e798
pushf
not eax
add eax, 0x22c4c66b
xor eax, 0x730e0d76
rol eax, 9
popf
pushf
not eax
add eax, 0x2f647142
xor eax, 0x1977bfd8
rol eax, 0x78
popf
pushf
not eax
add eax, 0x3af72a82
xor eax, 0x43944904
rol eax, 0xc3
popf
pushf
not eax
add eax, 0x5067a722
xor eax, 0x4b76c1af
rol eax, 0x58
popf
jmp 0x1401258fe
cmp eax, 5
jne 0x140127315
push rax
pushf
mov eax, 0xd88e9a44
pushf
not eax
add eax, 0x4adf5626
xor eax, 0x14382b59
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x18071e3e
xor eax, 0x166e7cfe
rol eax, 0x90
popf
pushf
not eax
add eax, 0xef6016d
xor eax, 0x65d60ee8
rol eax, 0x3f
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x6e855601
pushf
not eax
add eax, 0x164340db
xor eax, 0x2cd791e7
rol eax, 0xad
popf
pushf
not eax
add eax, 0x1a7d187d
xor eax, 0x24209304
rol eax, 2
popf
pushf
not eax
add eax, 0x2d5a5b68
xor eax, 0x2a830b38
rol eax, 0xe7
popf
jmp 0x1401258fe
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 9
mov byte [rbx + 0x38], 1
mov dword [rbx + 0x34], eax
jmp 0x140125d81
mov ecx, dword [rbp - 0x30]
mov rdx, rbx
call fcn.1400e5311
jmp 0x140125d81
mov rax, qword [rdx + r12*8]
test byte [rax + r13*8 + 0x38], 0x40
je 0x140127499
push rax
pushf
mov eax, 0xb0fc7afe
pushf
not eax
add eax, 0x34e73ede
xor eax, 0x375028c3
rol eax, 0x2d
popf
pushf
not eax
add eax, 0x21cbd970
xor eax, 0x82488
rol eax, 0xb9
popf
pushf
not eax
add eax, 0x7e555d17
xor eax, 0x2822301e
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x711f734c
xor eax, 0x33e3c819
rol eax, 0
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0xdeb261d1
pushf
not eax
add eax, 0x4257c378
xor eax, 0x56c8709e
rol eax, 0x50
popf
pushf
not eax
add eax, 0x665fd782
xor eax, 0x7c06e2a2
rol eax, 0xf
popf
pushf
not eax
add eax, 0x27d82b95
xor eax, 0xad67dd2
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xc3dbc02
xor eax, 0x5ed4e12b
rol eax, 0xdf
popf
jmp 0x1401258fe
cmp byte [rsi], 0x1a
je 0x14012752a
push rax
pushf
mov eax, 0x4c426c6b
pushf
not eax
add eax, 0x1c05e841
xor eax, 0x175f8315
rol eax, 0x13
popf
pushf
not eax
add eax, 0x1ece26ff
xor eax, 0x58c7621b
rol eax, 2
popf
jmp 0x1401258fe
push rax
pushf
mov eax, 0x5e7344ae
pushf
not eax
add eax, 0x53f6fee7
xor eax, 0x4b0360cf
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x3a0e2616
xor eax, 0x6efeda8d
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x4fb784a4
xor eax, 0x5c3b9d6f
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x26c1213
xor eax, 0x20df1ce1
rol eax, 0xff
popf
jmp 0x1401258fe
and dword [rbx + 0x34], 0
mov byte [rbx + 0x30], 1
mov dword [rbx + 0x2c], 0x1c
mov byte [rbx + 0x38], 1
jmp 0x140125d81
mov eax, dword [rbp - 0x2c]
push rdi
not edi
add eax, edi
pop rdi
add eax, 1
jmp 0x140127657
xor eax, eax
push rax
pushf
mov eax, 0xadc4769e
pushf
not eax
add eax, 0x5467d850
xor eax, 0x2928ba2b
rol eax, 0x46
popf
pushf
not eax
add eax, 0x4abe7c9b
xor eax, 0x79cb8f51
rol eax, 0x79
popf
pushf
not eax
add eax, 0x6b2e8073
xor eax, 0x1ef2685b
rol eax, 0xdf
popf
jmp 0x1401258fe
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret