Function at 0x140029330
Capabilities:
Attach user process memory
Find process by pid

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0xf8
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x48], r9
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x30], rcx
mov rax, qword [0x14004e090]
xor rax, rbp
mov qword [rbp + 0x70], rax
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor edx, edx
sub edx, 1
add edx, 0
xor r8d, r8d
sub r8d, edx
mov edx, ecx
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [rbp - 0x22], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [rbp - 0x21], al
mov dword [rbp - 0x28], 0xaad5e7a0
mov eax, dword [rbp - 0x28]
mov dword [rbp - 0x4c], eax
sub eax, 0x8140fb6d
je 0x14002e3f8
jmp 0x1400293be
mov eax, dword [rbp - 0x4c]
sub eax, 0x84554a35
je 0x14002e17e
jmp 0x1400293d1
mov eax, dword [rbp - 0x4c]
sub eax, 0x88066b49
je 0x14002e0f0
jmp 0x1400293e4
mov eax, dword [rbp - 0x4c]
sub eax, 0x886ea109
je 0x14002c938
jmp 0x1400293f7
mov eax, dword [rbp - 0x4c]
sub eax, 0x8fc724e4
je 0x14002c688
jmp 0x14002940a
mov eax, dword [rbp - 0x4c]
sub eax, 0x902067f0
je 0x14002e93b
jmp 0x14002941d
mov eax, dword [rbp - 0x4c]
sub eax, 0x970aa15f
je 0x14002e71e
jmp 0x140029430
mov eax, dword [rbp - 0x4c]
sub eax, 0x9b043909
je 0x140029b38
jmp 0x140029443
mov eax, dword [rbp - 0x4c]
sub eax, 0x9b34c9e2
je 0x14002a632
jmp 0x140029456
mov eax, dword [rbp - 0x4c]
sub eax, 0x9f2d6b33
je 0x14002e5b6
jmp 0x140029469
mov eax, dword [rbp - 0x4c]
sub eax, 0xa063e2c9
je 0x14002b279
jmp 0x14002947c
mov eax, dword [rbp - 0x4c]
sub eax, 0xa29fe040
je 0x14002ab7f
jmp 0x14002948f
mov eax, dword [rbp - 0x4c]
sub eax, 0xa4a57b11
je 0x14002d04a
jmp 0x1400294a2
mov eax, dword [rbp - 0x4c]
sub eax, 0xa5313710
je 0x14002c67c
jmp 0x1400294b5
mov eax, dword [rbp - 0x4c]
sub eax, 0xa646735a
je 0x14002ad87
jmp 0x1400294c8
mov eax, dword [rbp - 0x4c]
sub eax, 0xa694b73e
je 0x14002e0fc
jmp 0x1400294db
mov eax, dword [rbp - 0x4c]
sub eax, 0xaad5e7a0
je 0x140029ad0
jmp 0x1400294ee
mov eax, dword [rbp - 0x4c]
sub eax, 0xac186a15
je 0x14002bfb2
jmp 0x140029501
mov eax, dword [rbp - 0x4c]
sub eax, 0xacdaee6a
je 0x14002e38b
jmp 0x140029514
mov eax, dword [rbp - 0x4c]
sub eax, 0xae48c547
je 0x14002a581
jmp 0x140029527
mov eax, dword [rbp - 0x4c]
sub eax, 0xb071851c
je 0x14002ba53
jmp 0x14002953a
mov eax, dword [rbp - 0x4c]
sub eax, 0xb1649d95
je 0x14002b776
jmp 0x14002954d
mov eax, dword [rbp - 0x4c]
sub eax, 0xb21ee65d
je 0x14002b42e
jmp 0x140029560
mov eax, dword [rbp - 0x4c]
sub eax, 0xb79ff81d
je 0x14002e916
jmp 0x140029573
mov eax, dword [rbp - 0x4c]
sub eax, 0xb9ac1933
je 0x14002dc59
jmp 0x140029586
mov eax, dword [rbp - 0x4c]
sub eax, 0xbd97dc61
je 0x14002a24f
jmp 0x140029599
mov eax, dword [rbp - 0x4c]
sub eax, 0xc11c0474
je 0x14002d902
jmp 0x1400295ac
mov eax, dword [rbp - 0x4c]
sub eax, 0xc148182d
je 0x14002e43f
jmp 0x1400295bf
mov eax, dword [rbp - 0x4c]
sub eax, 0xc6de2812
je 0x14002e22b
jmp 0x1400295d2
mov eax, dword [rbp - 0x4c]
sub eax, 0xc7b98284
je 0x14002e316
jmp 0x1400295e5
mov eax, dword [rbp - 0x4c]
sub eax, 0xcd8e29b4
je 0x14002c72e
jmp 0x1400295f8
mov eax, dword [rbp - 0x4c]
sub eax, 0xce2c93fe
je 0x14002c953
jmp 0x14002960b
mov eax, dword [rbp - 0x4c]
sub eax, 0xcfb11cd2
je 0x14002b681
jmp 0x14002961e
mov eax, dword [rbp - 0x4c]
sub eax, 0xcfc46a17
je 0x14002e816
jmp 0x140029631
mov eax, dword [rbp - 0x4c]
sub eax, 0xd18e1da8
je 0x14002cd18
jmp 0x140029644
mov eax, dword [rbp - 0x4c]
sub eax, 0xd43e43db
je 0x14002e8de
jmp 0x140029657
mov eax, dword [rbp - 0x4c]
sub eax, 0xd5d58a20
je 0x14002df75
jmp 0x14002966a
mov eax, dword [rbp - 0x4c]
sub eax, 0xdc73d055
je 0x14002e3d4
jmp 0x14002967d
mov eax, dword [rbp - 0x4c]
sub eax, 0xe2b076e2
je 0x14002a26a
jmp 0x140029690
mov eax, dword [rbp - 0x4c]
sub eax, 0xe31ee10b
je 0x14002aff5
jmp 0x1400296a3
mov eax, dword [rbp - 0x4c]
sub eax, 0xe3473c75
je 0x14002d4b5
jmp 0x1400296b6
mov eax, dword [rbp - 0x4c]
sub eax, 0xe9bebfab
je 0x14002dafa
jmp 0x1400296c9
mov eax, dword [rbp - 0x4c]
sub eax, 0xebcf7706
je 0x14002d712
jmp 0x1400296dc
mov eax, dword [rbp - 0x4c]
sub eax, 0xef926673
je 0x14002b9c0
jmp 0x1400296ef
mov eax, dword [rbp - 0x4c]
sub eax, 0xf1e309a1
je 0x14002e337
jmp 0x140029702
mov eax, dword [rbp - 0x4c]
sub eax, 0xf2ddf94e
je 0x14002dd1f
jmp 0x140029715
mov eax, dword [rbp - 0x4c]
sub eax, 0xf5a3dec7
je 0x14002a814
jmp 0x140029728
mov eax, dword [rbp - 0x4c]
sub eax, 0xf5c8dca1
je 0x14002e378
jmp 0x14002973b
mov eax, dword [rbp - 0x4c]
sub eax, 0xfa0a7cd7
je 0x14002a723
jmp 0x14002974e
mov eax, dword [rbp - 0x4c]
sub eax, 0xfa22bfae
je 0x14002d02f
jmp 0x140029761
mov eax, dword [rbp - 0x4c]
sub eax, 0xfbe8d358
je 0x14002b9b4
jmp 0x140029774
mov eax, dword [rbp - 0x4c]
sub eax, 0xfdbd766d
je 0x14002e57a
jmp 0x140029787
mov eax, dword [rbp - 0x4c]
sub eax, 0xfde78b11
je 0x14002e347
jmp 0x14002979a
mov eax, dword [rbp - 0x4c]
sub eax, 0xfe3dc664
je 0x14002e8bd
jmp 0x1400297ad
mov eax, dword [rbp - 0x4c]
sub eax, 0x358d0c
je 0x14002d841
jmp 0x1400297c0
mov eax, dword [rbp - 0x4c]
sub eax, 0x17a7e6e
je 0x14002cc73
jmp 0x1400297d3
mov eax, dword [rbp - 0x4c]
sub eax, 0x42ac80c
je 0x14002a59c
jmp 0x1400297e6
mov eax, dword [rbp - 0x4c]
sub eax, 0xcde0a7b
je 0x14002c4d9
jmp 0x1400297f9
mov eax, dword [rbp - 0x4c]
sub eax, 0x11315ba6
je 0x14002c9fd
jmp 0x14002980c
mov eax, dword [rbp - 0x4c]
sub eax, 0x117821ee
je 0x14002d286
jmp 0x14002981f
mov eax, dword [rbp - 0x4c]
sub eax, 0x156232c3
je 0x14002bca3
jmp 0x140029832
mov eax, dword [rbp - 0x4c]
sub eax, 0x161a58ef
je 0x14002bebb
jmp 0x140029845
mov eax, dword [rbp - 0x4c]
sub eax, 0x1cbf7e29
je 0x14002c4be
jmp 0x140029858
mov eax, dword [rbp - 0x4c]
sub eax, 0x217490f3
je 0x14002db98
jmp 0x14002986b
mov eax, dword [rbp - 0x4c]
sub eax, 0x25135054
je 0x14002aade
mov r9b, byte [rbp - 0x22]
mov r8b, byte [rbp - 0x21]
mov al, r9b
xor al, 0xff
mov dl, r8b
xor dl, 0xff
mov cl, 1
xor cl, 0
or al, dl
or cl, 0
xor al, 0xff
and al, cl
mov cl, r9b
xor cl, 0xff
and cl, 1
mov r10b, 1
xor r10b, 1
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0xff
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x35716b7b
mov ecx, 0x9b043909
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x38]
mov r9, qword [rbp - 0x40]
mov r11, qword [rbp - 0x48]
mov eax, 0x10
mov qword [rbp - 0x60], rax
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov rdx, rsp
mov qword [rbp - 0x20], rdx
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov rdx, rsp
mov qword [rbp - 0x18], rdx
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov rdx, rsp
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp - 0x10], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp - 0x58], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, rsp
mov qword [rbp - 8], rax
mov eax, 0x60
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 8], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x10], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x18], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x20], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x28], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x30], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x38], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x40], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x48], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r10, rsp
mov qword [rbp + 0x50], r10
call sub.ntoskrnl.exe___chkstk
sub rsp, rax
mov rax, qword [rbp - 0x58]
mov r10, rsp
mov qword [rbp + 0x58], r10
mov r10, qword [rbp - 0x18]
mov qword [r10], r11
mov qword [rdx], r9
mov rdx, qword [rbp - 0x10]
mov qword [rdx], r8
mov qword [rax], rcx
mov rcx, qword [rax]
mov rdx, qword [rbp + 8]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_PsLookupProcessByProcessId]
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
cmp dword [rax], 0
setge al
and al, 1
mov byte [rbp + 0x63], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, 0xbb6b0f8f
add edx, 0
sub edx, 1
sub edx, 0xbb6b0f8f
xor r8d, r8d
sub r8d, edx
mov edx, ecx
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r10b
cmp eax, 0xa
setl r8b
mov cl, r10b
xor cl, 0xff
and cl, 0
mov dl, 1
xor dl, 0
mov r9b, r10b
and r9b, dl
mov al, 1
xor al, 1
and al, 0
and dl, 1
or cl, r9b
or al, dl
xor cl, al
mov dl, r8b
xor dl, 0xff
and dl, 0
mov r9b, 1
xor r9b, 0
mov r11b, r8b
and r11b, r9b
mov al, 1
xor al, 1
and al, 0
and r9b, 1
or dl, r11b
or al, r9b
xor dl, al
mov al, 1
xor al, 0
and al, 1
mov r11b, 1
xor r11b, 1
mov bl, r11b
and bl, 0
mov r9b, 1
xor r9b, 1
and r9b, 0xff
and r11b, 1
or al, bl
or r9b, r11b
xor al, r9b
mov r9b, cl
xor r9b, 0xff
mov bl, 1
xor bl, 0
mov r11b, 1
xor r11b, 0
or r9b, bl
or r11b, 0
xor r9b, 0xff
and r9b, r11b
xor r10b, 0xff
mov bl, al
xor bl, 0xff
mov r11b, 1
xor r11b, 0
or r10b, bl
or r11b, 0
xor r10b, 0xff
and r10b, r11b
mov r14b, dl
xor r14b, 0xff
mov bl, 1
xor bl, 0
mov r11b, 1
xor r11b, 1
or r14b, bl
or r11b, 1
xor r14b, 0xff
and r14b, r11b
mov r11b, al
xor r11b, 0xff
mov dil, r8b
xor dil, r11b
and dil, r8b
mov r8b, r9b
and r8b, r10b
xor r9b, r10b
or r8b, r9b
mov r10b, r14b
xor r10b, 0xff
mov bl, dil
xor bl, 0xff
mov r11b, 1
xor r11b, 0
mov r9b, r10b
and r9b, 0
and r14b, r11b
mov sil, bl
and sil, 0
and dil, r11b
or r9b, r14b
or sil, dil
xor r9b, sil
or r10b, bl
xor r10b, 0xff
or r11b, 0
and r10b, r11b
or r9b, r10b
mov r10b, r8b
xor r10b, 0xff
mov r11b, r9b
and r11b, r10b
xor r9b, 0xff
and r8b, r9b
or r11b, r8b
mov r8b, cl
and r8b, dl
xor cl, dl
or r8b, cl
mov r10b, r8b
xor r10b, 0xff
and r10b, 0
mov dl, 1
xor dl, 0
and r8b, dl
mov cl, 1
xor cl, 1
and cl, 0
and dl, 1
or r10b, r8b
or cl, dl
xor r10b, cl
mov cl, al
and cl, 0
xor al, 0
or cl, al
xor r10b, 0xff
xor cl, 0xff
mov al, 1
xor al, 0
or r10b, cl
or al, 0
xor r10b, 0xff
and r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x35716b7b
mov ecx, 0x5083c340
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x64]
mov eax, 0x42ac80c
mov ecx, 0xe2b076e2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x29b4da70
add edx, 0x9759284b
add edx, 0x29b4da70
xor r8d, r8d
sub r8d, 1
add edx, r8d
sub edx, 0xac020c4f
sub edx, 0x9759284b
add edx, 0xac020c4f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl cl
mov r11b, dl
xor r11b, 0xff
mov r8b, cl
xor r8b, 0xff
mov al, 1
xor al, 1
or r11b, r8b
or al, 1
xor r11b, 0xff
and r11b, al
mov r10b, dl
xor r10b, 0xff
and r10b, 1
mov r8b, 1
xor r8b, 1
and dl, r8b
mov al, cl
xor al, 0xff
and al, 0xff
and cl, r8b
or r10b, dl
or al, cl
xor r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf1e309a1
mov ecx, 0x6fb82e2b
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x65]
mov eax, 0x42ac80c
mov ecx, 0x4c1c9c70
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x77e4c26
sub edx, 0xcb3eefaf
add edx, 0x77e4c26
sub edx, 0xde8f8f39
sub edx, 1
add edx, 0xde8f8f39
sub edx, 0x2eecf9b8
add edx, 0xcb3eefaf
add edx, 0x2eecf9b8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl r8b
mov cl, r8b
xor cl, 0xff
mov al, dl
xor al, cl
and al, dl
mov r9b, dl
xor r9b, 0xff
mov cl, r8b
and cl, r9b
xor r8b, 0xff
and dl, r8b
or cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfde78b11
mov ecx, 0x9b34c9e2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 8]
cmp dword [rax], 0
setge al
and al, 1
mov byte [rbp + 0x66], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
add edx, 0xb30bb3e5
sub edx, 0x78c305b2
sub edx, 0xb30bb3e5
sub edx, 0x781e2c96
sub edx, 1
add edx, 0x781e2c96
xor r8d, r8d
sub r8d, 0x78c305b2
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl cl
mov r11b, dl
xor r11b, 0xff
mov r8b, cl
xor r8b, 0xff
mov al, 1
xor al, 1
or r11b, r8b
or al, 1
xor r11b, 0xff
and r11b, al
mov r10b, dl
xor r10b, 0xff
and r10b, 0
mov r8b, 1
xor r8b, 0
and dl, r8b
mov al, cl
xor al, 0xff
and al, 0
and cl, r8b
or r10b, dl
or al, cl
xor r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfde78b11
mov ecx, 0xfa0a7cd7
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x66]
mov eax, 0x2f254fcd
mov ecx, 0x4e571480
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ObfDereferenceObject]
add rsp, 0x20
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, 0x56f1e11
mov edx, ecx
sub edx, r8d
add edx, 0xf8aa53c6
sub edx, 1
sub edx, 0xf8aa53c6
xor r8d, r8d
sub r8d, 0x56f1e11
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl r8b
mov cl, r8b
xor cl, 0xff
mov al, dl
xor al, cl
and al, dl
mov r9b, dl
xor r9b, 0xff
mov cl, r8b
and cl, r9b
xor r8b, 0xff
and dl, r8b
or cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6d0cbd2f
mov ecx, 0x3c0bbfa2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dword [rbp - 0x28], 0xa694b73e
jmp 0x14002e946
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ObfDereferenceObject]
add rsp, 0x20
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_PsGetProcessExitStatus]
add rsp, 0x20
cmp eax, 0x103
setne al
and al, 1
mov byte [rbp + 0x67], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, 0x2a25380d
mov edx, ecx
sub edx, r8d
sub edx, 0xe5681595
sub edx, 1
add edx, 0xe5681595
xor r8d, r8d
sub r8d, 0x2a25380d
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r10b
cmp eax, 0xa
setl dl
mov al, r10b
xor al, 0xff
and al, 0
mov r8b, 1
xor r8b, 0
mov r9b, r10b
and r9b, r8b
mov cl, 1
xor cl, 1
and cl, 0
and r8b, 1
or al, r9b
or cl, r8b
xor al, cl
mov cl, dl
xor cl, 0xff
and cl, 0
mov r9b, 1
xor r9b, 0
mov r11b, dl
and r11b, r9b
mov r8b, 1
xor r8b, 1
and r8b, 0
and r9b, 1
or cl, r11b
or r8b, r9b
xor cl, r8b
mov bl, 1
xor bl, 1
and bl, 1
mov r8b, 1
xor r8b, 1
and r8b, 1
or bl, r8b
mov r8b, al
xor r8b, 0xff
mov r11b, 1
xor r11b, 1
mov r9b, 1
xor r9b, 1
or r8b, r11b
or r9b, 1
xor r8b, 0xff
and r8b, r9b
mov r11b, bl
xor r11b, 0xff
mov r9b, r10b
xor r9b, r11b
and r9b, r10b
mov r10b, 1
xor r10b, 1
mov r14b, cl
xor r14b, r10b
and r14b, cl
mov r10b, bl
xor r10b, 0xff
mov dil, dl
xor dil, r10b
and dil, dl
mov dl, r8b
and dl, r9b
xor r8b, r9b
or dl, r8b
mov r9b, r14b
xor r9b, 0xff
mov r11b, dil
xor r11b, 0xff
mov r10b, 1
xor r10b, 0
mov r8b, r9b
and r8b, 0
and r14b, r10b
mov sil, r11b
and sil, 0
and dil, r10b
or r8b, r14b
or sil, dil
xor r8b, sil
or r9b, r11b
xor r9b, 0xff
or r10b, 0
and r9b, r10b
or r8b, r9b
mov r9b, dl
xor r9b, 0xff
mov r11b, r8b
and r11b, r9b
xor r8b, 0xff
and dl, r8b
or r11b, dl
mov r8b, al
and r8b, cl
xor al, cl
or r8b, al
mov al, r8b
xor al, 0xff
and al, 0
mov dl, 1
xor dl, 0
and r8b, dl
mov cl, 1
xor cl, 1
and cl, 0
and dl, 1
or al, r8b
or cl, dl
xor al, cl
mov dl, 1
xor dl, 1
mov r9b, bl
xor r9b, 0xff
mov r8b, 1
xor r8b, 0
mov cl, dl
and cl, 0
mov sil, r8b
and sil, 1
mov r10b, r9b
and r10b, 0
and bl, r8b
or cl, sil
or r10b, bl
xor cl, r10b
or dl, r9b
xor dl, 0xff
or r8b, 0
and dl, r8b
or cl, dl
xor cl, 0xff
mov r10b, al
xor r10b, cl
and r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xacdaee6a
mov ecx, 0xe31ee10b
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x67]
mov eax, 0x5fafb211
mov ecx, 0x69cb7e4a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
add edx, 0xd04a206
sub edx, 0x2ce0e2ba
sub edx, 0xd04a206
sub edx, 0xadfce98c
sub edx, 1
add edx, 0xadfce98c
xor r8d, r8d
sub r8d, 0x2ce0e2ba
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl cl
mov al, cl
xor al, 0xff
mov r11b, dl
xor r11b, al
and r11b, dl
mov r10b, dl
xor r10b, 0xff
and r10b, 0
mov r8b, 1
xor r8b, 0
and dl, r8b
mov al, cl
xor al, 0xff
and al, 0
and cl, r8b
or r10b, dl
or al, cl
xor r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4de729e5
mov ecx, 0x53cac727
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x10]
sub rsp, 0x20
call fcn.140027b20
add rsp, 0x20
cmp al, 0
setne al
and al, 1
mov byte [rbp + 0x68], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x21f2d3bc
sub edx, 0xee1eb3cd
add edx, 0x21f2d3bc
add edx, 0xf345858
sub edx, 1
sub edx, 0xf345858
xor r8d, r8d
sub r8d, 0xee1eb3cd
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl dl
mov sil, r9b
xor sil, 0xff
and sil, 0
mov cl, 1
xor cl, 0
mov r8b, r9b
and r8b, cl
mov al, 1
xor al, 1
and al, 0
and cl, 1
or sil, r8b
or al, cl
xor sil, al
mov r10b, dl
xor r10b, 0xff
and r10b, 1
mov cl, 1
xor cl, 1
mov r8b, dl
and r8b, cl
mov al, 1
xor al, 1
and al, 0xff
and cl, 1
or r10b, r8b
or al, cl
xor r10b, al
mov bl, 1
xor bl, 1
and bl, 0
mov cl, 1
xor cl, 0
mov r8b, cl
and r8b, 1
mov al, 1
xor al, 1
and al, 0
and cl, 1
or bl, r8b
or al, cl
xor bl, al
mov al, 1
xor al, 1
mov cl, sil
xor cl, al
and cl, sil
xor r9b, 0xff
mov r8b, bl
xor r8b, 0xff
mov al, 1
xor al, 1
or r9b, r8b
or al, 1
xor r9b, 0xff
and r9b, al
mov r8b, 1
xor r8b, 1
mov al, r10b
xor al, r8b
and al, r10b
mov r11b, bl
xor r11b, 0xff
mov r8b, dl
xor r8b, r11b
and r8b, dl
mov dl, cl
and dl, r9b
xor cl, r9b
or dl, cl
mov cl, al
and cl, r8b
xor al, r8b
or cl, al
mov r11b, dl
xor r11b, 0xff
and r11b, 1
mov r8b, 1
xor r8b, 1
and dl, r8b
mov al, cl
xor al, 0xff
and al, 0xff
and cl, r8b
or r11b, dl
or al, cl
xor r11b, al
mov cl, sil
xor cl, 0xff
mov r8b, r10b
xor r8b, 0xff
mov dl, 1
xor dl, 0
mov al, cl
and al, 0
and sil, dl
mov r9b, r8b
and r9b, 0
and r10b, dl
or al, sil
or r9b, r10b
xor al, r9b
or cl, r8b
xor cl, 0xff
or dl, 0
and cl, dl
or al, cl
mov r10b, al
xor r10b, 0xff
and r10b, 1
mov cl, 1
xor cl, 1
and al, cl
or r10b, al
mov al, 1
xor al, 1
mov r8b, bl
xor r8b, 0xff
mov dl, 1
xor dl, 0
mov cl, al
and cl, 0
mov sil, dl
and sil, 1
mov r9b, r8b
and r9b, 0
and bl, dl
or cl, sil
or r9b, bl
xor cl, r9b
or al, r8b
xor al, 0xff
or dl, 0
and al, dl
or cl, al
xor r10b, 0xff
xor cl, 0xff
mov al, 1
xor al, 0
or r10b, cl
or al, 0
xor r10b, 0xff
and r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdc73d055
mov ecx, 0xcfb11cd2
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x68]
mov eax, 0x39306300
mov ecx, 0xef926673
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x1afb757f
sub edx, 0x61d3b97e
add edx, 0x1afb757f
sub edx, 0xa35caea0
sub edx, 1
add edx, 0xa35caea0
sub edx, 0x282dfd9d
add edx, 0x61d3b97e
add edx, 0x282dfd9d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl dil
mov al, dl
xor al, 0xff
and al, 1
mov r8b, 1
xor r8b, 1
mov r9b, dl
and r9b, r8b
mov cl, 1
xor cl, 1
and cl, 0xff
and r8b, 1
or al, r9b
or cl, r8b
xor al, cl
mov cl, dil
xor cl, 0xff
and cl, 1
mov r9b, 1
xor r9b, 1
mov r8b, dil
and r8b, r9b
or cl, r8b
mov bl, 1
xor bl, 1
and bl, 1
mov r8b, 1
xor r8b, 1
and r8b, 1
or bl, r8b
mov r8b, al
xor r8b, 0xff
mov r10b, 1
xor r10b, 1
mov r9b, 1
xor r9b, 1
or r8b, r10b
or r9b, 1
xor r8b, 0xff
and r8b, r9b
mov r10b, bl
xor r10b, 0xff
mov r9b, dl
xor r9b, r10b
and r9b, dl
mov dl, 1
xor dl, 1
mov r14b, cl
xor r14b, dl
and r14b, cl
xor dil, 0xff
mov r10b, bl
xor r10b, 0xff
mov dl, 1
xor dl, 1
or dil, r10b
or dl, 1
xor dil, 0xff
and dil, dl
mov dl, r8b
and dl, r9b
xor r8b, r9b
or dl, r8b
mov r9b, r14b
xor r9b, 0xff
mov r11b, dil
xor r11b, 0xff
mov r10b, 1
xor r10b, 0
mov r8b, r9b
and r8b, 0
and r14b, r10b
mov sil, r11b
and sil, 0
and dil, r10b
or r8b, r14b
or sil, dil
xor r8b, sil
or r9b, r11b
xor r9b, 0xff
or r10b, 0
and r9b, r10b
or r8b, r9b
mov r9b, dl
xor r9b, 0xff
mov r11b, r8b
and r11b, r9b
xor r8b, 0xff
and dl, r8b
or r11b, dl
mov r8b, al
and r8b, cl
xor al, cl
or r8b, al
mov al, r8b
xor al, 0xff
and al, 1
mov dl, 1
xor dl, 1
and r8b, dl
mov cl, 1
xor cl, 1
and cl, 0xff
and dl, 1
or al, r8b
or cl, dl
xor al, cl
mov dl, 1
xor dl, 1
mov r9b, bl
xor r9b, 0xff
mov r8b, 1
xor r8b, 1
mov cl, dl
and cl, 0xff
mov sil, r8b
and sil, 1
mov r10b, r9b
and r10b, 0xff
and bl, r8b
or cl, sil
or r10b, bl
xor cl, r10b
or dl, r9b
xor dl, 0xff
or r8b, 1
and dl, r8b
or cl, dl
xor cl, 0xff
mov r10b, al
xor r10b, cl
and r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8140fb6d
mov ecx, 0xfbe8d358
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dword [rbp - 0x28], 0xa694b73e
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, ecx
xor edx, edx
sub edx, 0x9574a414
add r8d, edx
xor edx, edx
sub edx, r8d
add edx, 0xbe677c6b
sub edx, 1
sub edx, 0xbe677c6b
xor r8d, r8d
sub r8d, 0x9574a414
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl r8b
mov cl, r8b
xor cl, 0xff
mov al, dl
xor al, cl
and al, dl
mov r9b, dl
xor r9b, 0xff
mov cl, r8b
and cl, r9b
xor r8b, 0xff
and dl, r8b
or cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2ea41869
mov ecx, 0xb071851c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 0x18]
mov rdx, qword [rax]
mov ecx, 1
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x18]
mov qword [rax], rcx
mov rax, qword [rbp + 0x18]
cmp qword [rax], 0
setne al
and al, 1
mov byte [rbp + 0x69], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0xb092bec4
sub edx, 0x371da330
add edx, 0xb092bec4
xor r8d, r8d
sub r8d, 1
add edx, r8d
xor r8d, r8d
sub r8d, 0x371da330
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl cl
mov dl, r9b
xor dl, 0xff
and dl, 1
mov r8b, 1
xor r8b, 1
mov al, r9b
and al, r8b
or dl, al
mov r8b, cl
xor r8b, 0xff
and r8b, 1
mov r10b, 1
xor r10b, 1
mov r11b, cl
and r11b, r10b
mov al, 1
xor al, 1
and al, 0xff
and r10b, 1
or r8b, r11b
or al, r10b
xor r8b, al
mov al, 1
xor al, 1
and al, 1
mov r10b, 1
xor r10b, 1
and r10b, 1
or al, r10b
mov r15b, dl
xor r15b, 0xff
mov r11b, 1
xor r11b, 1
mov r10b, 1
xor r10b, 0
or r15b, r11b
or r10b, 0
xor r15b, 0xff
and r15b, r10b
mov r10b, al
xor r10b, 0xff
mov sil, r9b
xor sil, r10b
and sil, r9b
mov r9b, 1
xor r9b, 1
mov r14b, r8b
xor r14b, r9b
and r14b, r8b
mov r9b, al
xor r9b, 0xff
mov dil, cl
xor dil, r9b
and dil, cl
mov r9b, r15b
xor r9b, 0xff
mov r11b, sil
xor r11b, 0xff
mov r10b, 1
xor r10b, 0
mov cl, r9b
and cl, 0
and r15b, r10b
mov bl, r11b
and bl, 0
and sil, r10b
or cl, r15b
or bl, sil
xor cl, bl
or r9b, r11b
xor r9b, 0xff
or r10b, 0
and r9b, r10b
or cl, r9b
mov r10b, r14b
xor r10b, 0xff
mov bl, dil
xor bl, 0xff
mov r11b, 1
xor r11b, 0
mov r9b, r10b
and r9b, 0
and r14b, r11b
mov sil, bl
and sil, 0
and dil, r11b
or r9b, r14b
or sil, dil
xor r9b, sil
or r10b, bl
xor r10b, 0xff
or r11b, 0
and r10b, r11b
or r9b, r10b
mov r10b, cl
xor r10b, 0xff
mov r11b, r9b
and r11b, r10b
xor r9b, 0xff
and cl, r9b
or r11b, cl
mov cl, dl
and cl, r8b
xor dl, r8b
or cl, dl
mov r10b, cl
xor r10b, 0xff
and r10b, 1
mov dl, 1
xor dl, 1
and cl, dl
or r10b, cl
mov cl, al
and cl, 1
xor al, 1
or cl, al
xor r10b, 0xff
xor cl, 0xff
mov al, 1
xor al, 0
or r10b, cl
or al, 0
xor r10b, 0xff
and r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2ea41869
mov ecx, 0x156232c3
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x69]
mov eax, 0x4f1f7159
mov ecx, 0xac186a15
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, ecx
xor edx, edx
sub edx, 0xdff22fae
add r8d, edx
xor edx, edx
sub edx, r8d
xor r8d, r8d
sub r8d, 1
add edx, r8d
sub edx, 0xf9635b1
sub edx, 0xdff22fae
add edx, 0xf9635b1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl cl
mov r11b, dl
xor r11b, 0xff
mov r8b, cl
xor r8b, 0xff
mov al, 1
xor al, 0
or r11b, r8b
or al, 0
xor r11b, 0xff
and r11b, al
mov r10b, dl
xor r10b, 0xff
and r10b, 0
mov r8b, 1
xor r8b, 0
and dl, r8b
mov al, cl
xor al, 0xff
and al, 0
and cl, r8b
or r10b, dl
or al, cl
xor r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc148182d
mov ecx, 0x32d01f39
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov eax, dword [0x14004e0fc]
mov ecx, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, eax
xor edx, edx
sub edx, 0x1a666dd4
add r8d, edx
xor edx, edx
sub edx, r8d
sub edx, 0x31aea8a6
sub edx, 1
add edx, 0x31aea8a6
sub edx, 0xf6306f39
sub edx, 0x1a666dd4
add edx, 0xf6306f39
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl r9b
mov sil, al
xor sil, 0xff
and sil, 1
mov dl, 1
xor dl, 1
mov cl, al
and cl, dl
or sil, cl
mov bl, r9b
xor bl, 0xff
and bl, 1
mov dl, 1
xor dl, 1
mov cl, r9b
and cl, dl
or bl, cl
mov cl, 1
xor cl, 1
and cl, 1
mov dl, 1
xor dl, 1
and dl, 1
or cl, dl
mov dl, 1
xor dl, 1
mov r15b, sil
xor r15b, dl
and r15b, sil
mov dl, cl
xor dl, 0xff
mov r14b, al
xor r14b, dl
and r14b, al
mov dl, 1
xor dl, 1
mov al, bl
xor al, dl
and al, bl
xor r9b, 0xff
mov r8b, cl
xor r8b, 0xff
mov dl, 1
xor dl, 1
or r9b, r8b
or dl, 1
xor r9b, 0xff
and r9b, dl
mov r8b, r15b
xor r8b, 0xff
mov r11b, r14b
xor r11b, 0xff
mov r10b, 1
xor r10b, 1
mov dl, r8b
and dl, 0xff
and r15b, r10b
mov dil, r11b
and dil, 0xff
and r14b, r10b
or dl, r15b
or dil, r14b
xor dl, dil
or r8b, r11b
xor r8b, 0xff
or r10b, 1
and r8b, r10b
or dl, r8b
mov r8b, al
and r8b, r9b
xor al, r9b
or r8b, al
mov r9b, dl
xor r9b, 0xff
mov al, r8b
and al, r9b
xor r8b, 0xff
and dl, r8b
or al, dl
mov dl, sil
xor dl, 0xff
mov r9b, bl
xor r9b, 0xff
mov r8b, 1
xor r8b, 1
mov r10b, dl
and r10b, 0xff
and sil, r8b
mov r11b, r9b
and r11b, 0xff
and bl, r8b
or r10b, sil
or r11b, bl
xor r10b, r11b
or dl, r9b
xor dl, 0xff
or r8b, 1
and dl, r8b
or r10b, dl
mov dl, r10b
xor dl, 0xff
and dl, 1
mov r9b, 1
xor r9b, 1
and r10b, r9b
mov r8b, 1
xor r8b, 1
and r8b, 0xff
and r9b, 1
or dl, r10b
or r8b, r9b
xor dl, r8b
mov r8b, cl
and r8b, 1
xor cl, 1
or r8b, cl
xor r8b, 0xff
mov cl, dl
xor cl, r8b
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x73879365
mov ecx, 0x3e0d5176
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x6a]
mov eax, 0xcde0a7b
mov ecx, 0x8fc724e4
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x2d691c66
add edx, 0xf67007dc
add edx, 0x2d691c66
xor r8d, r8d
sub r8d, 1
add edx, r8d
xor r8d, r8d
sub r8d, 0xf67007dc
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl r8b
mov cl, r8b
xor cl, 0xff
mov al, r9b
xor al, cl
and al, r9b
mov cl, r9b
xor cl, 0xff
and cl, 1
mov r10b, 1
xor r10b, 1
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0xff
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfdbd766d
mov ecx, 0x449381ef
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dword [rbp - 0x28], 0xa694b73e
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov r8d, 0x4d7b6bcf
add r8d, 0
sub r8d, 1
sub r8d, 0x4d7b6bcf
mov edx, ecx
add edx, 0xf545650b
add edx, r8d
sub edx, 0xf545650b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl r8b
mov al, r9b
xor al, 0xff
mov dl, r8b
xor dl, 0xff
mov cl, 1
xor cl, 1
or al, dl
or cl, 1
xor al, 0xff
and al, cl
mov cl, r9b
xor cl, 0xff
and cl, 0
mov r10b, 1
xor r10b, 0
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9f2d6b33
mov ecx, 0xcd8e29b4
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14002e950
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14002ede0
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14002fee0
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.140032d60
add rsp, 0x20
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
xor edx, edx
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax]
mov edx, eax
movabs rax, 0xb7b7d2ebf85c0cdd
sub rcx, rax
movabs rax, 0x5f20cf804d3c7090
sub rcx, rax
movabs rax, 0xb7b7d2ebf85c0cdd
add rcx, rax
xor eax, eax
sub rax, rdx
sub rcx, rax
movabs rax, 0xae3becfcde82ca10
add rcx, rax
movabs rax, 0x5f20cf804d3c7090
add rcx, rax
movabs rax, 0xae3becfcde82ca10
sub rcx, rax
movabs rax, 0xa15b6d4a66dd10e1
add rax, 0
sub rax, 0x100
movabs rdx, 0xa15b6d4a66dd10e1
sub rax, rdx
movabs rdx, 0x58946a6708268f9d
sub rcx, rdx
sub rcx, rax
movabs rax, 0x58946a6708268f9d
add rcx, rax
mov rax, qword [rbp + 0x30]
mov qword [rax], rcx
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14000f0d0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x38]
mov qword [rax], rcx
mov rax, qword [rbp + 0x38]
cmp qword [rax], 0
setne al
and al, 1
mov byte [rbp + 0x6b], al
mov eax, dword [0x14004e0fc]
mov ecx, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, 1
add r8d, 0
mov edx, eax
add edx, 0x82b1bc11
add edx, r8d
sub edx, 0x82b1bc11
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov r11b, al
xor r11b, 0xff
mov r8b, cl
xor r8b, 0xff
mov dl, 1
xor dl, 1
or r11b, r8b
or dl, 1
xor r11b, 0xff
and r11b, dl
mov dl, al
xor dl, 0xff
mov r10b, cl
and r10b, dl
xor cl, 0xff
and al, cl
or r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9f2d6b33
mov ecx, 0x886ea109
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x6b]
mov eax, 0xce2c93fe
mov ecx, 0x17a7e6e
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x685b2652
add edx, 0x3b62a2f7
add edx, 0x685b2652
add edx, 0x9057a50f
sub edx, 1
sub edx, 0x9057a50f
add edx, 0x8888c60
sub edx, 0x3b62a2f7
sub edx, 0x8888c60
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl r8b
mov cl, r8b
xor cl, 0xff
mov al, r9b
xor al, cl
and al, r9b
mov cl, r9b
xor cl, 0xff
and cl, 1
mov r10b, 1
xor r10b, 1
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0xff
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f16bc24
mov ecx, 0x11315ba6
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
add edx, 0xc97dd4f
sub edx, 0xdd59c27
sub edx, 0xc97dd4f
add edx, 0xeacccd50
sub edx, 1
sub edx, 0xeacccd50
add edx, 0xe997e651
add edx, 0xdd59c27
sub edx, 0xe997e651
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r8b
cmp eax, 0xa
setl dil
mov cl, r8b
xor cl, 0xff
and cl, 1
mov dl, 1
xor dl, 1
mov r9b, r8b
and r9b, dl
mov al, 1
xor al, 1
and al, 0xff
and dl, 1
or cl, r9b
or al, dl
xor cl, al
mov dl, dil
xor dl, 0xff
and dl, 0
mov r9b, 1
xor r9b, 0
mov r10b, dil
and r10b, r9b
mov al, 1
xor al, 1
and al, 0
and r9b, 1
or dl, r10b
or al, r9b
xor dl, al
mov bl, 1
xor bl, 1
and bl, 1
mov al, 1
xor al, 1
and al, 1
or bl, al
mov al, cl
xor al, 0xff
mov r10b, 1
xor r10b, 1
mov r9b, 1
xor r9b, 1
or al, r10b
or r9b, 1
xor al, 0xff
and al, r9b
xor r8b, 0xff
mov r10b, bl
xor r10b, 0xff
mov r9b, 1
xor r9b, 0
or r8b, r10b
or r9b, 0
xor r8b, 0xff
and r8b, r9b
mov r14b, dl
xor r14b, 0xff
mov r10b, 1
xor r10b, 1
mov r9b, 1
xor r9b, 0
or r14b, r10b
or r9b, 0
xor r14b, 0xff
and r14b, r9b
xor dil, 0xff
mov r10b, bl
xor r10b, 0xff
mov r9b, 1
xor r9b, 1
or dil, r10b
or r9b, 1
xor dil, 0xff
and dil, r9b
mov r9b, al
and r9b, r8b
xor al, r8b
or r9b, al
mov al, r14b
xor al, 0xff
mov r11b, dil
xor r11b, 0xff
mov r10b, 1
xor r10b, 0
mov r8b, al
and r8b, 0
and r14b, r10b
mov sil, r11b
and sil, 0
and dil, r10b
or r8b, r14b
or sil, dil
xor r8b, sil
or al, r11b
xor al, 0xff
or r10b, 0
and al, r10b
or r8b, al
mov r11b, r9b
xor r11b, 0xff
and r11b, 1
mov r10b, 1
xor r10b, 1
and r9b, r10b
mov al, r8b
xor al, 0xff
and al, 0xff
and r8b, r10b
or r11b, r9b
or al, r8b
xor r11b, al
mov al, cl
and al, dl
xor cl, dl
or al, cl
mov r10b, al
xor r10b, 0xff
and r10b, 1
mov cl, 1
xor cl, 1
and al, cl
or r10b, al
mov al, 1
xor al, 1
mov r8b, bl
xor r8b, 0xff
mov dl, 1
xor dl, 0
mov cl, al
and cl, 0
mov sil, dl
and sil, 1
mov r9b, r8b
and r9b, 0
and bl, dl
or cl, sil
or r9b, bl
xor cl, r9b
or al, r8b
xor al, 0xff
or dl, 0
and al, dl
or cl, al
xor r10b, 0xff
xor cl, 0xff
mov al, 1
xor al, 0
or r10b, cl
or al, 0
xor r10b, 0xff
and r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6f16bc24
mov ecx, 0x6a87f398
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x498e5ee2
add edx, 0xc05fb02f
add edx, 0x498e5ee2
xor r8d, r8d
sub r8d, 1
add edx, r8d
sub edx, 0x64b72a9b
sub edx, 0xc05fb02f
add edx, 0x64b72a9b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl r8b
mov cl, r8b
xor cl, 0xff
mov al, r9b
xor al, cl
and al, r9b
mov cl, r9b
xor cl, 0xff
and cl, 0
mov r10b, 1
xor r10b, 0
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x970aa15f
mov ecx, 0xd18e1da8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.140035dd0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x40]
mov qword [rax], rcx
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x48]
mov qword [rax], rcx
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
movsxd rdx, dword [rax + 0x3c]
movabs rax, 0x8647c1923b337cdf
sub rcx, rax
movabs rax, 0x244cb5afbf175aff
add rcx, rax
movabs rax, 0x8647c1923b337cdf
add rcx, rax
xor eax, eax
sub rax, rdx
sub rcx, rax
xor eax, eax
movabs rdx, 0x244cb5afbf175aff
sub rax, rdx
add rcx, rax
mov rax, qword [rbp + 0x50]
mov qword [rax], rcx
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x50]
mov rax, qword [rax]
mov eax, dword [rax + 0x54]
mov r8d, eax
xor edx, edx
sub rsp, 0x20
call fcn.14004ca80
add rsp, 0x20
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax]
xor eax, eax
mov edx, eax
sub rsp, 0x20
call fcn.140010720
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
cmp dword [rax], 0
setge al
and al, 1
mov byte [rbp + 0x6c], al
mov eax, dword [0x14004e0fc]
mov ecx, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, 0x5b9a3e02
mov edx, eax
add edx, r8d
add edx, 0x3dc8a02a
sub edx, 1
sub edx, 0x3dc8a02a
xor r8d, r8d
sub r8d, edx
xor edx, edx
sub edx, 0x5b9a3e02
add r8d, edx
xor edx, edx
sub edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl dil
mov sil, al
xor sil, 0xff
and sil, 1
mov dl, 1
xor dl, 1
mov cl, al
and cl, dl
or sil, cl
mov bl, dil
xor bl, 0xff
and bl, 1
mov dl, 1
xor dl, 1
mov cl, dil
and cl, dl
or bl, cl
mov dl, 1
xor dl, 1
and dl, 1
mov cl, 1
xor cl, 1
and cl, 1
or dl, cl
mov r15b, sil
xor r15b, 0xff
mov r8b, 1
xor r8b, 1
mov cl, 1
xor cl, 1
or r15b, r8b
or cl, 1
xor r15b, 0xff
and r15b, cl
mov cl, dl
xor cl, 0xff
mov r11b, al
xor r11b, cl
and r11b, al
mov r14b, bl
xor r14b, 0xff
mov cl, 1
xor cl, 1
mov al, 1
xor al, 1
or r14b, cl
or al, 1
xor r14b, 0xff
and r14b, al
xor dil, 0xff
mov cl, dl
xor cl, 0xff
mov al, 1
xor al, 1
or dil, cl
or al, 1
xor dil, 0xff
and dil, al
mov al, r15b
xor al, 0xff
mov r8b, r11b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov r9b, al
and r9b, 0xff
and r15b, cl
mov r10b, r8b
and r10b, 0xff
and r11b, cl
or r9b, r15b
or r10b, r11b
xor r9b, r10b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or r9b, al
mov al, r14b
xor al, 0xff
mov r10b, dil
xor r10b, 0xff
mov cl, 1
xor cl, 1
mov r8b, al
and r8b, 0xff
and r14b, cl
mov r11b, r10b
and r11b, 0xff
and dil, cl
or r8b, r14b
or r11b, dil
xor r8b, r11b
or al, r10b
xor al, 0xff
or cl, 1
and al, cl
or r8b, al
mov al, r9b
xor al, 0xff
and al, 1
mov r10b, 1
xor r10b, 1
and r9b, r10b
mov cl, r8b
xor cl, 0xff
and cl, 0xff
and r8b, r10b
or al, r9b
or cl, r8b
xor al, cl
mov cl, sil
xor cl, 0xff
mov r9b, bl
xor r9b, 0xff
mov r8b, 1
xor r8b, 0
mov r10b, cl
and r10b, 0
and sil, r8b
mov r11b, r9b
and r11b, 0
and bl, r8b
or r10b, sil
or r11b, bl
xor r10b, r11b
or cl, r9b
xor cl, 0xff
or r8b, 0
and cl, r8b
or r10b, cl
mov cl, r10b
xor cl, 0xff
and cl, 0
mov r9b, 1
xor r9b, 0
and r10b, r9b
mov r8b, 1
xor r8b, 1
and r8b, 0
and r9b, 1
or cl, r10b
or r8b, r9b
xor cl, r8b
mov r8b, dl
and r8b, 1
xor dl, 1
or r8b, dl
xor cl, 0xff
xor r8b, 0xff
mov dl, 1
xor dl, 1
or cl, r8b
or dl, 1
xor cl, 0xff
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x970aa15f
mov ecx, 0xfa22bfae
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x6c]
mov eax, 0xd5d58a20
mov ecx, 0xa4a57b11
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, 0x853d59a4
mov edx, ecx
sub edx, r8d
xor r8d, r8d
sub r8d, 1
add edx, r8d
add edx, 0xa7e27652
sub edx, 0x853d59a4
sub edx, 0xa7e27652
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete sil
cmp eax, 0xa
setl cl
mov dl, sil
xor dl, 0xff
and dl, 1
mov r8b, 1
xor r8b, 1
mov r9b, sil
and r9b, r8b
mov al, 1
xor al, 1
and al, 0xff
and r8b, 1
or dl, r9b
or al, r8b
xor dl, al
mov r8b, cl
xor r8b, 0xff
and r8b, 1
mov r9b, 1
xor r9b, 1
mov r10b, cl
and r10b, r9b
mov al, 1
xor al, 1
and al, 0xff
and r9b, 1
or r8b, r10b
or al, r9b
xor r8b, al
mov al, 1
xor al, 0
and al, 1
mov r9b, 1
xor r9b, 1
and r9b, 0
or al, r9b
mov r9b, 1
xor r9b, 0
mov r15b, dl
xor r15b, r9b
and r15b, dl
xor sil, 0xff
mov r10b, al
xor r10b, 0xff
mov r9b, 1
xor r9b, 1
or sil, r10b
or r9b, 1
xor sil, 0xff
and sil, r9b
mov r14b, r8b
xor r14b, 0xff
mov r10b, 1
xor r10b, 0
mov r9b, 1
xor r9b, 1
or r14b, r10b
or r9b, 1
xor r14b, 0xff
and r14b, r9b
mov r9b, al
xor r9b, 0xff
mov dil, cl
xor dil, r9b
and dil, cl
mov r9b, r15b
xor r9b, 0xff
mov r11b, sil
xor r11b, 0xff
mov r10b, 1
xor r10b, 0
mov cl, r9b
and cl, 0
and r15b, r10b
mov bl, r11b
and bl, 0
and sil, r10b
or cl, r15b
or bl, sil
xor cl, bl
or r9b, r11b
xor r9b, 0xff
or r10b, 0
and r9b, r10b
or cl, r9b
mov r10b, r14b
xor r10b, 0xff
mov bl, dil
xor bl, 0xff
mov r11b, 1
xor r11b, 1
mov r9b, r10b
and r9b, 0xff
and r14b, r11b
mov sil, bl
and sil, 0xff
and dil, r11b
or r9b, r14b
or sil, dil
xor r9b, sil
or r10b, bl
xor r10b, 0xff
or r11b, 1
and r10b, r11b
or r9b, r10b
mov r10b, cl
xor r10b, 0xff
mov r11b, r9b
and r11b, r10b
xor r9b, 0xff
and cl, r9b
or r11b, cl
mov cl, dl
and cl, r8b
xor dl, r8b
or cl, dl
mov r10b, cl
xor r10b, 0xff
and r10b, 1
mov dl, 1
xor dl, 1
and cl, dl
or r10b, cl
mov cl, al
and cl, 0
xor al, 0
or cl, al
xor r10b, 0xff
xor cl, 0xff
mov al, 1
xor al, 0
or r10b, cl
or al, 0
xor r10b, 0xff
and r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcfc46a17
mov ecx, 0x117821ee
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14001f570
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x58]
mov qword [rax], rcx
mov rax, qword [rbp + 0x58]
cmp qword [rax], 0
setne al
and al, 1
mov byte [rbp + 0x6d], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor r9d, r9d
sub r9d, 0x471f1440
sub r9d, 1
add r9d, 0x471f1440
xor r8d, r8d
sub r8d, ecx
xor edx, edx
sub edx, r9d
add r8d, edx
xor edx, edx
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r14b
cmp eax, 0xa
setl r10b
mov cl, r14b
xor cl, 0xff
and cl, 1
mov dl, 1
xor dl, 1
mov r8b, r14b
and r8b, dl
mov al, 1
xor al, 1
and al, 0xff
and dl, 1
or cl, r8b
or al, dl
xor cl, al
mov dl, r10b
xor dl, 0xff
and dl, 1
mov r8b, 1
xor r8b, 1
mov r9b, r10b
and r9b, r8b
mov al, 1
xor al, 1
and al, 0xff
and r8b, 1
or dl, r9b
or al, r8b
xor dl, al
mov bl, 1
xor bl, 0
and bl, 1
mov al, 1
xor al, 1
and al, 0
or bl, al
mov al, 1
xor al, 0
mov r15b, cl
xor r15b, al
and r15b, cl
xor r14b, 0xff
mov r8b, bl
xor r8b, 0xff
mov al, 1
xor al, 1
or r14b, r8b
or al, 1
xor r14b, 0xff
and r14b, al
mov r8b, 1
xor r8b, 0
mov al, dl
xor al, r8b
and al, dl
xor r10b, 0xff
mov r9b, bl
xor r9b, 0xff
mov r8b, 1
xor r8b, 1
or r10b, r9b
or r8b, 1
xor r10b, 0xff
and r10b, r8b
mov r9b, r15b
xor r9b, 0xff
mov sil, r14b
xor sil, 0xff
mov r11b, 1
xor r11b, 0
mov r8b, r9b
and r8b, 0
and r15b, r11b
mov dil, sil
and dil, 0
and r14b, r11b
or r8b, r15b
or dil, r14b
xor r8b, dil
or r9b, sil
xor r9b, 0xff
or r11b, 0
and r9b, r11b
or r8b, r9b
mov r9b, al
and r9b, r10b
xor al, r10b
or r9b, al
mov r10b, r8b
xor r10b, 0xff
mov al, r9b
and al, r10b
xor r9b, 0xff
and r8b, r9b
or al, r8b
mov r9b, cl
and r9b, dl
xor cl, dl
or r9b, cl
mov dl, r9b
xor dl, 0xff
and dl, 0
mov r8b, 1
xor r8b, 0
and r9b, r8b
mov cl, 1
xor cl, 1
and cl, 0
and r8b, 1
or dl, r9b
or cl, r8b
xor dl, cl
mov cl, 1
xor cl, 0
mov r10b, bl
xor r10b, 0xff
mov r9b, 1
xor r9b, 0
mov r8b, cl
and r8b, 0
mov sil, r9b
and sil, 0
mov r11b, r10b
and r11b, 0
and bl, r9b
or r8b, sil
or r11b, bl
xor r8b, r11b
or cl, r10b
xor cl, 0xff
or r9b, 0
and cl, r9b
or r8b, cl
xor r8b, 0xff
mov cl, dl
xor cl, r8b
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcfc46a17
mov ecx, 0xe3473c75
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x6d]
mov eax, 0xb9ac1933
mov ecx, 0x27a59e2a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp + 0x20]
mov rax, qword [rax]
mov qword [0x14004e040], rax
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov qword [0x14004e052], rax
mov rax, qword [rbp + 0x58]
mov rax, qword [rax]
mov rax, qword [rax + 0x168]
mov dword [0x14004e07e], eax
mov rax, qword [rbp + 0x58]
mov rax, qword [rax]
mov rax, qword [rax + 0x168]
shr rax, 0x20
mov dword [0x14004e086], eax
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
lea rdx, str.PPSQRUTVWAPAQARASATAUAVAW
mov r8d, 0x7b
sub rsp, 0x20
call fcn.14004cb80
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov rax, qword [rax]
mov rax, qword [rax + 0x168]
mov rcx, qword [sym.imp.ntoskrnl.exe_MmUserProbeAddress]
cmp rax, qword [rcx]
setb al
and al, 1
mov byte [rbp + 0x6e], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov r8d, 0x76f102b5
add r8d, 0
sub r8d, 1
sub r8d, 0x76f102b5
mov edx, ecx
add edx, 0x7eb0a84d
add edx, r8d
sub edx, 0x7eb0a84d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl r8b
mov al, r9b
xor al, 0xff
mov dl, r8b
xor dl, 0xff
mov cl, 1
xor cl, 1
or al, dl
or cl, 1
xor al, 0xff
and al, cl
mov cl, r9b
xor cl, 0xff
and cl, 1
mov r10b, 1
xor r10b, 1
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0xff
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2e61e8db
mov ecx, 0x358d0c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dl, byte [rbp + 0x6e]
mov eax, 0xe9bebfab
mov ecx, 0x29d0a857
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x58]
mov rax, qword [rax]
mov qword [rax + 0x168], rcx
mov eax, dword [0x14004e0fc]
mov ecx, dword [0x14004e0f8]
mov edx, eax
sub edx, 0x122c5e79
sub edx, 0x1b616fc1
add edx, 0x122c5e79
xor r8d, r8d
sub r8d, 1
add edx, r8d
add edx, 0x2e0d2a06
add edx, 0x1b616fc1
sub edx, 0x2e0d2a06
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl r10b
mov cl, al
xor cl, 0xff
and cl, 1
mov r8b, 1
xor r8b, 1
mov dl, al
and dl, r8b
or cl, dl
mov r8b, r10b
xor r8b, 0xff
and r8b, 0
mov r9b, 1
xor r9b, 0
mov r11b, r10b
and r11b, r9b
mov dl, 1
xor dl, 1
and dl, 0
and r9b, 1
or r8b, r11b
or dl, r9b
xor r8b, dl
mov bl, 1
xor bl, 1
and bl, 0
mov r9b, 1
xor r9b, 0
mov r11b, r9b
and r11b, 1
mov dl, 1
xor dl, 1
and dl, 0
and r9b, 1
or bl, r11b
or dl, r9b
xor bl, dl
mov dl, 1
xor dl, 1
mov r9b, cl
xor r9b, dl
and r9b, cl
mov dl, bl
xor dl, 0xff
mov r11b, al
xor r11b, dl
and r11b, al
mov al, r8b
xor al, 0xff
mov sil, 1
xor sil, 1
mov dl, 1
xor dl, 1
or al, sil
or dl, 1
xor al, 0xff
and al, dl
xor r10b, 0xff
mov sil, bl
xor sil, 0xff
mov dl, 1
xor dl, 1
or r10b, sil
or dl, 1
xor r10b, 0xff
and r10b, dl
mov dl, r9b
and dl, r11b
xor r9b, r11b
or dl, r9b
mov r9b, al
and r9b, r10b
xor al, r10b
or r9b, al
mov r10b, dl
xor r10b, 0xff
mov al, r9b
and al, r10b
xor r9b, 0xff
and dl, r9b
or al, dl
mov dl, cl
and dl, r8b
xor cl, r8b
or dl, cl
mov cl, dl
xor cl, 0xff
and cl, 1
mov r8b, 1
xor r8b, 1
and dl, r8b
or cl, dl
mov dl, 1
xor dl, 1
mov r10b, bl
xor r10b, 0xff
mov r9b, 1
xor r9b, 1
mov r8b, dl
and r8b, 0xff
mov sil, r9b
and sil, 1
mov r11b, r10b
and r11b, 0xff
and bl, r9b
or r8b, sil
or r11b, bl
xor r8b, r11b
or dl, r10b
xor dl, 0xff
or r9b, 1
and dl, r9b
or r8b, dl
xor cl, 0xff
xor r8b, 0xff
mov dl, 1
xor dl, 0
or cl, r8b
or dl, 0
xor cl, 0xff
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfe3dc664
mov ecx, 0x455232cc
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor r9d, r9d
sub r9d, 1
add r9d, 0
xor r8d, r8d
sub r8d, ecx
xor edx, edx
sub edx, r9d
add r8d, edx
xor edx, edx
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl r8b
mov al, r9b
xor al, 0xff
mov dl, r8b
xor dl, 0xff
mov cl, 1
xor cl, 1
or al, dl
or cl, 1
xor al, 0xff
and al, cl
mov cl, r9b
xor cl, 0xff
and cl, 1
mov r10b, 1
xor r10b, 1
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0xff
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd43e43db
mov ecx, 0x217490f3
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x2c5c1d9
add edx, 0xf14c052f
add edx, 0x2c5c1d9
sub edx, 0x8dc157b2
sub edx, 1
add edx, 0x8dc157b2
sub edx, 0x8ff85478
sub edx, 0xf14c052f
add edx, 0x8ff85478
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r9b
cmp eax, 0xa
setl r8b
mov al, r9b
xor al, 0xff
mov dl, r8b
xor dl, 0xff
mov cl, 1
xor cl, 0
or al, dl
or cl, 0
xor al, 0xff
and al, cl
mov cl, r9b
xor cl, 0xff
and cl, 0
mov r10b, 1
xor r10b, 0
and r9b, r10b
mov dl, r8b
xor dl, 0xff
and dl, 0
and r8b, r10b
or cl, r9b
or dl, r8b
xor cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd43e43db
mov ecx, 0x7430c5f8
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov eax, dword [0x14004e0fc]
mov ecx, dword [0x14004e0f8]
xor r8d, r8d
sub r8d, eax
xor edx, edx
sub edx, 0xfcba2c7c
add r8d, edx
xor edx, edx
sub edx, r8d
sub edx, 0x43b145e7
sub edx, 1
add edx, 0x43b145e7
sub edx, 0x48b6db3c
sub edx, 0xfcba2c7c
add edx, 0x48b6db3c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, cl
xor dl, 0xff
mov r11b, al
xor r11b, dl
and r11b, al
mov dl, al
xor dl, 0xff
mov r10b, cl
and r10b, dl
xor cl, 0xff
and al, cl
or r10b, al
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x77e0eb34
mov ecx, 0xf2ddf94e
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax]
xor eax, eax
mov edx, eax
sub rsp, 0x20
call fcn.140016d70
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x891f2c72
add edx, 0x5d37e322
add edx, 0x891f2c72
xor r8d, r8d
sub r8d, 1
add edx, r8d
add edx, 0x4e9526e1
sub edx, 0x5d37e322
sub edx, 0x4e9526e1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
cmp eax, 0xa
setl dl
mov sil, cl
xor sil, 0xff
and sil, 1
mov r8b, 1
xor r8b, 1
mov r9b, cl
and r9b, r8b
mov al, 1
xor al, 1
and al, 0xff
and r8b, 1
or sil, r9b
or al, r8b
xor sil, al
mov r11b, dl
xor r11b, 0xff
and r11b, 1
mov r8b, 1
xor r8b, 1
mov al, dl
and al, r8b
or r11b, al
mov bl, 1
xor bl, 1
and bl, 1
mov al, 1
xor al, 1
and al, 1
or bl, al
mov r8b, 1
xor r8b, 1
mov al, sil
xor al, r8b
and al, sil
xor cl, 0xff
mov r9b, bl
xor r9b, 0xff
mov r8b, 1
xor r8b, 0
or cl, r9b
or r8b, 0
xor cl, 0xff
and cl, r8b
mov r8b, 1
xor r8b, 1
mov r14b, r11b
xor r14b, r8b
and r14b, r11b
mov r8b, bl
xor r8b, 0xff
mov dil, dl
xor dil, r8b
and dil, dl
mov r8b, al
and r8b, cl
xor al, cl
or r8b, al
mov al, r14b
xor al, 0xff
mov r9b, dil
xor r9b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r14b, cl
mov r10b, r9b
and r10b, 0xff
and dil, cl
or dl, r14b
or r10b, dil
xor dl, r10b
or al, r9b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov al, r8b
xor al, 0xff
and al, 1
mov r9b, 1
xor r9b, 1
and r8b, r9b
mov cl, dl
xor cl, 0xff
and cl, 0xff
and dl, r9b
or al, r8b
or cl, dl
xor al, cl
mov cl, sil
xor cl, 0xff
mov r8b, r11b
xor r8b, 0xff
mov dl, 1
xor dl, 1
mov r9b, cl
and r9b, 0xff
and sil, dl
mov r10b, r8b
and r10b, 0xff
and r11b, dl
or r9b, sil
or r10b, r11b
xor r9b, r10b
or cl, r8b
xor cl, 0xff
or dl, 1
and cl, dl
or r9b, cl
mov dl, r9b
xor dl, 0xff
and dl, 0
mov r8b, 1
xor r8b, 0
and r9b, r8b
mov cl, 1
xor cl, 1
and cl, 0
and r8b, 1
or dl, r9b
or cl, r8b
xor dl, cl
mov cl, 1
xor cl, 1
mov r10b, bl
xor r10b, 0xff
mov r9b, 1
xor r9b, 1
mov r8b, cl
and r8b, 0xff
mov sil, r9b
and sil, 1
mov r11b, r10b
and r11b, 0xff
and bl, r9b
or r8b, sil
or r11b, bl
xor r8b, r11b
or cl, r10b
xor cl, 0xff
or r9b, 1
and cl, r9b
or r8b, cl
xor r8b, 0xff
mov cl, dl
xor cl, r8b
and cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x77e0eb34
mov ecx, 0x339299e1
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
sub edx, 0x4d460073
sub edx, 0xc318f8f
add edx, 0x4d460073
xor r8d, r8d
sub r8d, 1
add edx, r8d
add edx, 0x9f672a39
add edx, 0xc318f8f
sub edx, 0x9f672a39
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl r8b
mov al, dl
xor al, 0xff
mov r9b, r8b
xor r9b, 0xff
mov cl, 1
xor cl, 1
or al, r9b
or cl, 1
xor al, 0xff
and al, cl
mov r9b, dl
xor r9b, 0xff
mov cl, r8b
and cl, r9b
xor r8b, 0xff
and dl, r8b
or cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb79ff81d
mov ecx, 0x71acd393
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov dword [rbp - 0x28], 0xa694b73e
jmp 0x14002e946
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
xor edx, edx
sub edx, 1
add edx, 0
xor r8d, r8d
sub r8d, edx
mov edx, ecx
sub edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl r8b
mov al, dl
xor al, 0xff
mov r9b, r8b
xor r9b, 0xff
mov cl, 1
xor cl, 0
or al, r9b
or cl, 0
xor al, 0xff
and al, cl
mov r9b, dl
xor r9b, 0xff
mov cl, r8b
and cl, r9b
xor r8b, 0xff
and dl, r8b
or cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x902067f0
mov ecx, 0x84554a35
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov al, byte [rax]
mov byte [rbp + 0x6f], al
mov ecx, dword [0x14004e0fc]
mov eax, dword [0x14004e0f8]
mov edx, ecx
add edx, 0x9d0e7421
add edx, 0xa6434317
sub edx, 0x9d0e7421
sub edx, 0x9677b56c
sub edx, 1
add edx, 0x9677b56c
add edx, 0xd6d7df96
sub edx, 0xa6434317
sub edx, 0xd6d7df96
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete dl
cmp eax, 0xa
setl r8b
mov al, dl
xor al, 0xff
mov r9b, r8b
xor r9b, 0xff
mov cl, 1
xor cl, 1
or al, r9b
or cl, 1
xor al, 0xff
and al, cl
mov r9b, dl
xor r9b, 0xff
mov cl, r8b
and cl, r9b
xor r8b, 0xff
and dl, r8b
or cl, dl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x902067f0
mov ecx, 0xc6de2812
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x28], eax
jmp 0x14002e946
mov al, byte [rbp + 0x6f]
mov byte [rbp - 0x61], al
mov rcx, qword [rbp + 0x70]
xor rcx, rbp
sub rsp, 0x20
call fcn.14004c990
mov al, byte [rbp - 0x61]
lea rsp, [rbp + 0x78]
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
add rsp, 0x20
mov dword [rbp - 0x28], 0x7b16a5b7
jmp 0x14002e946
mov rax, qword [rbp - 0x18]
mov dword [rbp - 0x28], 0x6fb82e2b
jmp 0x14002e946
mov rax, qword [rbp - 8]
mov dword [rbp - 0x28], 0x9b34c9e2
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov dword [rbp - 0x28], 0x25135054
jmp 0x14002e946
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ObfDereferenceObject]
add rsp, 0x20
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_PsGetProcessExitStatus]
add rsp, 0x20
mov dword [rbp - 0x28], 0xa646735a
jmp 0x14002e946
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x10]
sub rsp, 0x20
call fcn.140027b20
add rsp, 0x20
mov dword [rbp - 0x28], 0xb21ee65d
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov dword [rbp - 0x28], 0xb1649d95
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov dword [rbp - 0x28], 0x161a58ef
jmp 0x14002e946
mov rcx, qword [rbp]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_KeUnstackDetachProcess]
add rsp, 0x20
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
xor edx, edx
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
add rsp, 0x20
mov rax, qword [rbp - 0x20]
mov byte [rax], 0
mov dword [rbp - 0x28], 0x449381ef
jmp 0x14002e946
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14002e950
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax]
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14002ede0
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14002fee0
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.140032d60
add rsp, 0x20
mov rax, qword [rbp + 0x18]
mov rcx, qword [rax]
xor edx, edx
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x10]
mov eax, dword [rax]
mov edx, eax
xor eax, eax
sub rax, rcx
xor ecx, ecx
movabs r8, 0xa4f358e2f01894ce
sub rcx, r8
add rax, rcx
xor ecx, ecx
sub rcx, rax
xor eax, eax
sub rax, rdx
sub rcx, rax
movabs rax, 0xa51e4ab95128c9ee
add rcx, rax
movabs rax, 0xa4f358e2f01894ce
sub rcx, rax
movabs rax, 0xa51e4ab95128c9ee
sub rcx, rax
xor eax, eax
sub rax, rcx
add rax, 0
movabs rcx, 0x60a01996ae8463df
add rcx, 0
sub rcx, 0x100
movabs rdx, 0x60a01996ae8463df
sub rcx, rdx
movabs rdx, 0x16e2f137558e5154
add rax, rdx
add rax, rcx
movabs rcx, 0x16e2f137558e5154
sub rax, rcx
xor ecx, ecx
sub rcx, rax
add rcx, 0
mov rax, qword [rbp + 0x30]
mov qword [rax], rcx
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14000f0d0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x38]
mov qword [rax], rcx
mov rax, qword [rbp + 0x38]
mov dword [rbp - 0x28], 0xcd8e29b4
jmp 0x14002e946
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.140035dd0
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x40]
mov qword [rax], rcx
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x48]
mov qword [rax], rcx
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
movsxd rax, dword [rax + 0x3c]
xor edx, edx
sub rdx, rcx
xor ecx, ecx
movabs r8, 0x17f935166e63c560
sub rcx, r8
add rdx, rcx
xor ecx, ecx
sub rcx, rdx
movabs rdx, 0x4fa37495104e645d
sub rcx, rdx
add rcx, rax
movabs rax, 0x4fa37495104e645d
add rcx, rax
movabs rax, 0x57c09fa58ea56296
add rcx, rax
movabs rax, 0x17f935166e63c560
sub rcx, rax
movabs rax, 0x57c09fa58ea56296
sub rcx, rax
mov rax, qword [rbp + 0x50]
mov qword [rax], rcx
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x50]
mov rax, qword [rax]
mov eax, dword [rax + 0x54]
mov r8d, eax
xor edx, edx
sub rsp, 0x20
call fcn.14004ca80
add rsp, 0x20
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax]
xor eax, eax
mov edx, eax
sub rsp, 0x20
call fcn.140010720
add rsp, 0x20
mov ecx, eax
mov rax, qword [rbp - 8]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
mov dword [rbp - 0x28], 0xd18e1da8
jmp 0x14002e946
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.14001f570
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x58]
mov qword [rax], rcx
mov rax, qword [rbp + 0x58]
mov dword [rbp - 0x28], 0x117821ee
jmp 0x14002e946
mov rax, qword [rbp + 0x30]
mov rcx, qword [rax]
mov rax, qword [rbp + 0x58]
mov rax, qword [rax]
mov qword [rax + 0x168], rcx
mov dword [rbp - 0x28], 0xc11c0474
jmp 0x14002e946
mov dword [rbp - 0x28], 0x217490f3
jmp 0x14002e946
mov rcx, qword [rbp]
sub rsp, 0x20
call qword [sym.imp.ntoskrnl.exe_KeUnstackDetachProcess]
add rsp, 0x20
mov rax, qword [rbp - 0x20]
mov byte [rax], 1
mov dword [rbp - 0x28], 0x71acd393
jmp 0x14002e946
mov rax, qword [rbp - 0x20]
mov dword [rbp - 0x28], 0x84554a35
jmp 0x1400293a8