Function at 0x1400a2bc0
Capabilities:
Generate random numbers via winapi
Get disk size
Get memory capacity

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
mov qword [rsp + 8], rcx
push rbp
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x140241cc0]
xor rax, rsp
mov qword [rbp + 0xf0], rax
lea rcx, [rsp + 0x40]
call fcn.1400a7b00
lea rcx, [rbp + 0x70]
mov qword [rbp + 0x70], 0
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x70]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2c46
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2c57
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x71]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2c91
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2ca2
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x72]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2cdc
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2ced
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x73]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2d27
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2d38
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x74]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2d72
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2d83
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x75]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2dbd
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2dce
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x76]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2e08
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2e19
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x77]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2e53
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2e64
lea rcx, [rsp + 0x40]
call fcn.1400a7650
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rcx, 5
mov ebx, eax
and ecx, 0xf
mov dword [rsp + 0x30], eax
lea rdx, [rdx + rcx*4]
movzx eax, al
mov ecx, dword [rdx]
shl ecx, 8
or ecx, eax
shr ebx, 8
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2eab
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2ebc
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
shl ecx, 8
movzx eax, bl
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2ef5
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2f06
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2f41
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2f52
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2f8d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2f9e
lea rcx, [rsp + 0x40]
call fcn.1400a7650
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rcx, 5
mov ebx, eax
and ecx, 0xf
mov dword [rsp + 0x30], eax
lea rdx, [rdx + rcx*4]
movzx eax, al
mov ecx, dword [rdx]
shl ecx, 8
or ecx, eax
shr ebx, 8
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a2fe5
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a2ff6
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
shl ecx, 8
movzx eax, bl
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a302f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3040
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a307b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a308c
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a30c7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a30d8
lea rcx, [rsp + 0x40]
call fcn.1400a7650
xorps xmm0, xmm0
mov dword [rbp + 0xb0], 0x40
xor eax, eax
lea rcx, [rbp + 0xb0]
movups xmmword [rbp + 0xb4], xmm0
mov qword [rbp + 0xe4], rax
movups xmmword [rbp + 0xc4], xmm0
mov dword [rbp + 0xec], eax
movups xmmword [rbp + 0xd4], xmm0
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x1400a3600
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc0]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a315b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a316c
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc1]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a31a9
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a31ba
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc2]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a31f7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3208
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc3]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3245
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3256
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc4]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3293
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a32a4
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc5]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a32e1
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a32f2
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc6]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a332f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3340
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xc7]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a337d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3390
lea rcx, [rsp + 0x40]
call fcn.1400a7650
nop
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd0]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a33cd
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a33de
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd1]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a341b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a342c
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd2]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3469
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a347a
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd3]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a34b7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a34c8
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd4]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3505
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3516
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd5]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3553
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3564
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd6]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a35a1
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a35b2
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0xd7]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a35ef
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3600
lea rcx, [rsp + 0x40]
call fcn.1400a7650
xor r9d, r9d
lea rdx, [rbp + 0x78]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x1400a3872
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x78]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3654
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3665
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x79]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a369f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a36b0
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7a]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a36ea
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a36fb
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7b]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3735
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3746
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7c]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3780
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3791
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7d]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a37cb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a37dc
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7e]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3816
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3827
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x7f]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3861
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3872
lea rcx, [rsp + 0x40]
call fcn.1400a7650
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetSystemTimes]
test eax, eax
je 0x1400a4008
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x84]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a38d2
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a38e3
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x85]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3920
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3931
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x86]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a396e
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a397f
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x87]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a39bc
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a39d0
lea rcx, [rsp + 0x40]
call fcn.1400a7650
nop dword [rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x80]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3a0d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3a1e
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x81]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3a5b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3a6c
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x82]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3aa9
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3aba
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x83]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3af7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3b10
lea rcx, [rsp + 0x40]
call fcn.1400a7650
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8c]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3b4d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3b5e
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8d]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3b9b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3bac
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8e]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3be9
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3bfa
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8f]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3c37
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3c50
lea rcx, [rsp + 0x40]
call fcn.1400a7650
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x88]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3c8d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3c9e
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x89]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3cdb
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3cec
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8a]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3d29
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3d3a
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x8b]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3d77
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3d90
lea rcx, [rsp + 0x40]
call fcn.1400a7650
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x94]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3dcd
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3dde
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x95]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3e1b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3e2c
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x96]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3e69
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3e7a
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x97]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3eb7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3ed0
lea rcx, [rsp + 0x40]
call fcn.1400a7650
nop dword [rax + rax]
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x90]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3f0d
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3f1e
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x91]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3f5b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3f6c
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x92]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3fa9
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a3fba
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x93]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a3ff7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4008
lea rcx, [rsp + 0x40]
call fcn.1400a7650
lea rcx, [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
je 0x1400a428d
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x98]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a405a
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a406b
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x99]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a40a8
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a40b9
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9a]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a40f6
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4107
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9b]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4144
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4155
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9c]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4192
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a41a3
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9d]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a41e0
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a41f1
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9e]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a422e
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a423f
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rbp + 0x9f]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a427c
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a428d
lea rcx, [rsp + 0x40]
call fcn.1400a7650
rdtsc
mov rcx, qword [rsp + 0x40]
shr rcx, 5
and ecx, 0xf
shl rdx, 0x20
or rax, rdx
lea rdx, [rsp + 0x68]
lea rdx, [rdx + rcx*4]
mov qword [rsp + 0x30], rax
mov ecx, dword [rdx]
movzx eax, al
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a42d3
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a42e4
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x31]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a431f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4330
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a436b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a437c
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a43b7
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a43c8
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x34]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4403
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4414
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x35]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a444f
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4460
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x36]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a449b
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a44ac
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x37]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov ebx, dword [rsp + 0x40]
add ebx, 8
mov dword [rsp + 0x40], ebx
jne 0x1400a44e7
inc dword [rsp + 0x44]
xor ebx, ebx
mov dword [rsp + 0x40], ebx
test ebx, 0x1ff
jne 0x1400a44fd
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov ebx, dword [rsp + 0x40]
mov r9d, 1
mov dword [rsp + 0x20], 0xf0000040
lea r8, str.Microsoft_Base_Cryptographic_Provider_v1.0
xor edx, edx
lea rcx, [rbp + 0xa0]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x1400a47c5
mov rcx, qword [rbp + 0xa0]
lea r8, [rsp + 0x30]
mov edx, 8
mov qword [rsp + 0x30], 0
call qword [sym.imp.ADVAPI32.dll_CryptGenRandom]
test eax, eax
je 0x1400a47b6
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x30]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a458c
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a459d
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x31]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a45d8
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a45e9
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x32]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4624
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4635
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x33]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4670
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4681
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x34]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a46bc
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a46cd
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x35]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4708
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4719
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x36]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4754
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4765
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov rax, qword [rsp + 0x40]
lea rdx, [rsp + 0x68]
shr rax, 5
and eax, 0xf
mov ecx, dword [rdx + rax*4]
lea rdx, [rdx + rax*4]
movzx eax, byte [rsp + 0x37]
shl ecx, 8
or ecx, eax
mov dword [rdx], ecx
mov ebx, dword [rsp + 0x40]
add ebx, 8
mov dword [rsp + 0x40], ebx
jne 0x1400a47a0
inc dword [rsp + 0x44]
xor ebx, ebx
mov dword [rsp + 0x40], ebx
test ebx, 0x1ff
jne 0x1400a47b6
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov ebx, dword [rsp + 0x40]
mov rcx, qword [rbp + 0xa0]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov edi, dword [rsp + 0x44]
lea rcx, [rsp + 0x68]
mov eax, ebx
shr rax, 5
and eax, 0xf
lea rcx, [rcx + rax*4]
mov eax, dword [rcx]
shl eax, 8
bts eax, 7
mov dword [rcx], eax
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a47fd
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a4812
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov eax, dword [rsp + 0x40]
and eax, 0x1ff
cmp eax, 0x1c0
je 0x1400a4869
nop
mov rax, qword [rsp + 0x40]
shr rax, 5
and eax, 0xf
shl dword [rsp + rax*4 + 0x68], 8
mov eax, dword [rsp + 0x40]
add eax, 8
mov dword [rsp + 0x40], eax
jne 0x1400a4848
inc dword [rsp + 0x44]
xor eax, eax
mov dword [rsp + 0x40], eax
test eax, 0x1ff
jne 0x1400a485d
lea rcx, [rsp + 0x40]
call fcn.1400a7650
mov eax, dword [rsp + 0x40]
and eax, 0x1ff
cmp eax, 0x1c0
jne 0x1400a4820
lea rcx, [rsp + 0x40]
mov dword [rbp - 0x60], edi
mov dword [rbp - 0x5c], ebx
call fcn.1400a7650
mov r8, qword [rbp + 0x110]
mov ecx, dword [rsp + 0x48]
mov eax, ecx
shr eax, 0x18
mov byte [r8], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 1], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 2], al
mov byte [r8 + 3], cl
mov ecx, dword [rsp + 0x4c]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 4], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 5], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 6], al
mov byte [r8 + 7], cl
mov ecx, dword [rsp + 0x50]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 8], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 9], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0xa], al
mov byte [r8 + 0xb], cl
mov ecx, dword [rsp + 0x54]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0xc], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0xd], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0xe], al
mov byte [r8 + 0xf], cl
mov ecx, dword [rsp + 0x58]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0x10], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0x11], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0x12], al
mov byte [r8 + 0x13], cl
mov ecx, dword [rsp + 0x5c]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0x14], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0x15], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0x16], al
mov byte [r8 + 0x17], cl
mov ecx, dword [rsp + 0x60]
mov eax, ecx
shr eax, 0x18
mov byte [r8 + 0x18], al
mov eax, ecx
shr eax, 0x10
mov byte [r8 + 0x19], al
mov eax, ecx
shr eax, 8
mov byte [r8 + 0x1a], al
mov edx, dword [rsp + 0x64]
mov rax, r8
mov byte [r8 + 0x1b], cl
mov ecx, edx
shr ecx, 0x18
mov byte [r8 + 0x1c], cl
mov ecx, edx
shr ecx, 0x10
mov byte [r8 + 0x1d], cl
mov ecx, edx
shr ecx, 8
mov byte [r8 + 0x1e], cl
mov byte [r8 + 0x1f], dl
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.140144310
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret