Function at 0x140066820
Capabilities:
Generate random numbers via winapi
Get disk size
Get memory capacity

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
mov qword [rsp + 8], rcx
push rbp
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x140117240]
xor rax, rsp
mov qword [rbp + 0xf0], rax
lea rcx, [rsp + 0x40]
call fcn.140069090
lea rcx, [rbp + 0x70]
mov qword [rbp + 0x70], 0
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x70]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400668a6
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400668b7
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x71]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400668f1
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066902
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x72]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006693c
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006694d
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x73]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066987
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066998
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x74]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400669d2
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400669e3
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x75]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066a1d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066a2e
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x76]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066a68
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066a79
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x77]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066ab3
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066ac4
lea rcx, [rsp + 0x40]
call fcn.140068be0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rcx, 5
mov ebx, eax
and ecx, 0xf
mov dword [rsp + 0x30], eax
lea rdx, [rdx + rcx*4]
movzx eax, al
mov ecx, dword [rdx]
shl ecx, 8
or ecx, eax
shr ebx, 8
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066b0b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066b1c
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
shl ecx, 8
movzx eax, bl
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066b55
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066b66
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066ba1
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066bb2
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066bed
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066bfe
lea rcx, [rsp + 0x40]
call fcn.140068be0
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rcx, 5
mov ebx, eax
and ecx, 0xf
mov dword [rsp + 0x30], eax
lea rdx, [rdx + rcx*4]
movzx eax, al
mov ecx, dword [rdx]
shl ecx, 8
or ecx, eax
shr ebx, 8
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066c45
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066c56
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
shl ecx, 8
movzx eax, bl
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066c8f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066ca0
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066cdb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066cec
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066d27
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066d38
lea rcx, [rsp + 0x40]
call fcn.140068be0
xorps xmm0, xmm0
mov dword [rbp + 0xb0], 0x40
xor eax, eax
lea rcx, [rbp + 0xb0]
movups xmmword [rbp + 0xb4], xmm0
mov qword [rbp + 0xe4], rax
movups xmmword [rbp + 0xc4], xmm0
mov dword [rbp + 0xec], eax
movups xmmword [rbp + 0xd4], xmm0
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x140067260
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc0]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066dbb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066dcc
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc1]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066e09
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066e1a
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc2]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066e57
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066e68
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc3]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066ea5
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066eb6
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc4]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066ef3
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066f04
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc5]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066f41
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066f52
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc6]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066f8f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066fa0
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc7]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140066fdd
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140066ff0
lea rcx, [rsp + 0x40]
call fcn.140068be0
nop
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd0]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006702d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006703e
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd1]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006707b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006708c
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd2]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400670c9
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400670da
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd3]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067117
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067128
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd4]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067165
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067176
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd5]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400671b3
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400671c4
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd6]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067201
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067212
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd7]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006724f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067260
lea rcx, [rsp + 0x40]
call fcn.140068be0
xor r9d, r9d
lea rdx, [rbp + 0x78]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x1400674d2
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x78]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400672b4
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400672c5
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x79]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400672ff
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067310
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7a]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006734a
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006735b
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7b]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067395
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400673a6
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7c]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400673e0
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400673f1
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7d]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006742b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006743c
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7e]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067476
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067487
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7f]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400674c1
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400674d2
lea rcx, [rsp + 0x40]
call fcn.140068be0
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
test eax, eax
je 0x140067c68
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x84]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067532
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067543
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x85]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067580
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067591
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x86]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400675ce
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400675df
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x87]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006761c
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067630
lea rcx, [rsp + 0x40]
call fcn.140068be0
nop dword [rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x80]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006766d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006767e
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x81]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400676bb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400676cc
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x82]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067709
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006771a
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x83]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067757
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067770
lea rcx, [rsp + 0x40]
call fcn.140068be0
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8c]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400677ad
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400677be
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8d]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400677fb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006780c
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8e]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067849
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006785a
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8f]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067897
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400678b0
lea rcx, [rsp + 0x40]
call fcn.140068be0
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x88]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400678ed
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400678fe
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x89]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006793b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006794c
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8a]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067989
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006799a
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8b]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400679d7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400679f0
lea rcx, [rsp + 0x40]
call fcn.140068be0
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x94]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067a2d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067a3e
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x95]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067a7b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067a8c
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x96]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067ac9
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067ada
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x97]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067b17
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067b30
lea rcx, [rsp + 0x40]
call fcn.140068be0
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x90]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067b6d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067b7e
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x91]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067bbb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067bcc
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x92]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067c09
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067c1a
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x93]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067c57
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067c68
lea rcx, [rsp + 0x40]
call fcn.140068be0
lea rcx, [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x140067eed
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x98]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067cba
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067ccb
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x99]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067d08
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067d19
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9a]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067d56
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067d67
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9b]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067da4
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067db5
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9c]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067df2
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067e03
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9d]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067e40
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067e51
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9e]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067e8e
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067e9f
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9f]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067edc
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067eed
lea rcx, [rsp + 0x40]
call fcn.140068be0
rdtsc
mov rcx, qword [rsp + 0x40]
shr rcx, 5
and ecx, 0xf
shl rdx, 0x20
or rax, rdx
lea rdx, [rsp + 0x68]
lea rdx, [rdx + rcx*4]
mov qword [rsp + 0x30], rax
mov ecx, dword [rdx]
movzx eax, al
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067f33
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067f44
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x31]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067f7f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067f90
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140067fcb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140067fdc
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140068017
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140068028
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x34]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140068063
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140068074
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x35]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400680af
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400680c0
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x36]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400680fb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006810c
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x37]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov ebx, dword [rsp + 0x40]
add ebx, 8
mov dword [rsp + 0x40], ebx
jne 0x140068147
inc dword [rsp + 0x44]
xor ebx, ebx
mov dword [rsp + 0x40], ebx
test ebx, 0x1ff
jne 0x14006815d
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov ebx, dword [rsp + 0x40]
mov r9d, 1
mov dword [rsp + 0x20], 0xf0000040
lea r8, str.Microsoft_Base_Cryptographic_Provider_v1.0
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x140068425
mov rcx, qword [rbp + 0xa0]
lea r8, [rsp + 0x30]
mov edx, 8
mov qword [rsp + 0x30], 0
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
je 0x140068416
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x30]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400681ec
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400681fd
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x31]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140068238
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140068249
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140068284
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140068295
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400682d0
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400682e1
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x34]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006831c
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x14006832d
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x35]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x140068368
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140068379
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x36]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400683b4
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400683c5
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x37]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov ebx, dword [rsp + 0x40]
add ebx, 8
mov dword [rsp + 0x40], ebx
jne 0x140068400
inc dword [rsp + 0x44]
xor ebx, ebx
mov dword [rsp + 0x40], ebx
test ebx, 0x1ff
jne 0x140068416
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov ebx, dword [rsp + 0x40]
mov rcx, qword [rbp + 0xa0]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov edi, dword [rsp + 0x44]
lea rcx, [rsp + 0x68]
mov eax, ebx
shr rax, 5
and eax, 0xf
lea rcx, [rcx + rax*4]
mov eax, dword [rcx]
shl eax, 8
bts eax, 7
mov dword [rcx], eax
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x14006845d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x140068472
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov eax, dword [rsp + 0x40]
and eax, 0x1ff
cmp eax, 0x1c0
je 0x1400684c9
nop
mov rax, qword [rsp + 0x40]
shr rax, 5
and eax, 0xf
shl dword [rsp + rax*4 + 0x68], 8
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400684a8
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400684bd
lea rcx, [rsp + 0x40]
call fcn.140068be0
mov eax, dword [rsp + 0x40]
and eax, 0x1ff
cmp eax, 0x1c0
jne 0x140068480
lea rcx, [rsp + 0x40]
mov dword [rbp - 0x60], edi
mov dword [rbp - 0x5c], ebx
call fcn.140068be0
mov r8, qword [rbp + 0x110]
mov ecx, dword [rsp + 0x48]
mov eax, ecx
shr eax, 0x18
mov byte [r8], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 1], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 2], al
mov byte [r8 + 3], cl
mov ecx, dword [rsp + 0x4c]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 4], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 5], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 6], al
mov byte [r8 + 7], cl
mov ecx, dword [rsp + 0x50]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 8], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 9], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0xa], al
mov byte [r8 + 0xb], cl
mov ecx, dword [rsp + 0x54]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0xc], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0xd], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0xe], al
mov byte [r8 + 0xf], cl
mov ecx, dword [rsp + 0x58]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0x10], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0x11], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0x12], al
mov byte [r8 + 0x13], cl
mov ecx, dword [rsp + 0x5c]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0x14], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0x15], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0x16], al
mov byte [r8 + 0x17], cl
mov ecx, dword [rsp + 0x60]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0x18], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0x19], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0x1a], al
mov edx, dword [rsp + 0x64]
mov rax, r8
mov byte [r8 + 0x1b], cl
mov ecx, edx
shr ecx, 0x18
mov byte [r8 + 0x1c], cl
mov ecx, edx
shr ecx, 0x10
mov byte [r8 + 0x1d], cl
mov ecx, edx
shr ecx, 8
mov byte [r8 + 0x1e], cl
mov byte [r8 + 0x1f], dl
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.1400827b0
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret