Function at 0x140001cc7
Capabilities:
Generate random numbers via rtlgenrandom

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x78
lea rbp, [rsp + 0x70]
mov esi, edx
mov rdi, rcx
mov eax, dword [0x140396068]
mov ecx, dword [0x14039606c]
lea edx, [rax + 1]
imul edx, eax
mov eax, edx
not eax
mov r8d, eax
and r8d, 0xfffffffe
and edx, 1
or edx, r8d
xor eax, edx
test eax, edx
sete byte [rbp - 1]
cmp ecx, 0xa
setl byte [rbp - 2]
mov ecx, 0x60403a75
mov r14, qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r13d, 0x3f318667
mov r12d, 0x7f6423ba
mov r15d, 0xb3659a6f
cmp ecx, 0x12de76f
jle 0x140001e0a
cmp ecx, 0x3bda4d58
jle 0x140001ec5
cmp ecx, 0x64ed9416
jg 0x14000206f
cmp ecx, 0x57a1ddb3
jg 0x14000219e
cmp ecx, 0x4ace3271
jg 0x140002499
cmp ecx, 0x3bda4d59
je 0x140002ade
cmp ecx, 0x3ca23225
je 0x140002aec
cmp ecx, 0x3f318667
jne 0x140001d31
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
add rsp, 0x20
mov rax, qword [rbp]
mov rax, qword [rax]
mov r9, qword [rax + 8]
mov rax, qword [rbp]
mov rax, qword [rax]
mov rdx, qword [rax + 0x10]
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
mov r8, qword [rbp - 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
call fcn.14006f5a0
add rsp, 0x10
call fcn.140016988
add rsp, 0x20
mov rcx, qword [rbp]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 8]
inc rcx
xor edx, edx
div rcx
mov rax, qword [rbp]
mov rax, qword [rax]
mov dword [rax + 4], edx
mov ecx, 0x1d5223a6
jmp 0x140001d31
cmp ecx, 0xcc2dee6c
jle 0x14000201d
cmp ecx, 0xec0101b0
jg 0x1400020c0
cmp ecx, 0xd878c608
jg 0x140002221
cmp ecx, 0xd48fa16e
jg 0x14000253c
cmp ecx, 0xcc2dee6d
je 0x140002b5d
cmp ecx, 0xcdc8eeb1
je 0x140002bb9
cmp ecx, 0xd2abc7d4
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
setne al
sete cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
mov r9d, edx
or dl, cl
and cl, r8b
and r9b, al
or r9b, cl
xor r8b, al
xor dl, 1
or dl, r8b
mov eax, edx
xor al, r9b
mov eax, 0xd48fa16f
mov ecx, 0xec0101b1
cmovne eax, ecx
test dl, dl
mov ecx, 0xd48fa16f
jmp 0x140003594
cmp ecx, 0x1aabf5cf
jle 0x140002106
cmp ecx, 0x25d719c2
jg 0x140002266
cmp ecx, 0x1ff20956
jg 0x1400025d3
cmp ecx, 0x1aabf5d0
je 0x140002c14
cmp ecx, 0x1ceba18d
je 0x140002c66
cmp ecx, 0x1d5223a6
jne 0x140001d31
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
add rsp, 0x20
mov rax, qword [rbp]
mov rax, qword [rax]
mov r9, qword [rax + 8]
mov rax, qword [rbp]
mov rax, qword [rax]
mov rdx, qword [rax + 0x10]
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
mov r8, qword [rbp - 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
call fcn.14006f5a0
add rsp, 0x10
call fcn.140016988
add rsp, 0x20
mov rcx, qword [rbp]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 8]
movabs rdx, 0xd769dbfa9b519f78
add rcx, rdx
movabs r8, 0xabd98efe837a5009
sub rcx, r8
sub rcx, rdx
add rcx, r8
inc rcx
xor edx, edx
div rcx
mov rax, qword [rbp]
mov rax, qword [rax]
mov dword [rax + 4], edx
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xee892006
mov edx, eax
and edx, 0x1176dff9
or edx, ecx
xor edx, 0x1176dff8
and eax, 0xfffffffe
or eax, edx
xor eax, 0x512eafe8
cmp eax, 0xaed15017
sete al
cmp dword [0x14039606c], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
test cl, cl
mov ecx, 0xc736fbf5
mov r8d, 0x3f318667
cmovne ecx, r8d
test dl, dl
mov r13d, 0x3f318667
cmove ecx, r8d
test al, al
mov eax, 0xc736fbf5
cmove ecx, eax
jmp 0x140001d31
cmp ecx, 0xa2e8e6dd
jle 0x14000214c
cmp ecx, 0xc2b641a8
jg 0x1400022a0
cmp ecx, 0xb3e985b1
jg 0x140002601
cmp ecx, 0xa2e8e6de
je 0x140002c70
cmp ecx, 0xa8893268
je 0x140002cde
cmp ecx, 0xb3659a6f
jne 0x140001d31
mov ecx, 0x3ca23225
jmp 0x140001d31
cmp ecx, 0x78c90f92
jg 0x140002314
cmp ecx, 0x6fd3b4b6
jg 0x140002689
cmp ecx, 0x64ed9417
je 0x140002d5c
cmp ecx, 0x6860be31
je 0x140002ddd
cmp ecx, 0x6948a68a
jne 0x140001d31
mov rax, qword [rbp - 0x30]
mov qword [rax], 0
mov ecx, 0x1aabf5d0
jmp 0x140001d31
cmp ecx, 0xf7ffb44a
jg 0x140002349
cmp ecx, 0xef1031f1
jg 0x1400026b7
cmp ecx, 0xec0101b1
je 0x140002e51
cmp ecx, 0xeeb45976
je 0x140002ece
cmp ecx, 0xeee83d6f
jne 0x140001d31
mov ecx, 0x1ff20957
jmp 0x140001d31
cmp ecx, 0x9f29c13
jle 0x14000237e
cmp ecx, 0x139c689b
jg 0x1400026e9
cmp ecx, 0x9f29c14
je 0x140002f0c
cmp ecx, 0xb24e288
je 0x140002f33
cmp ecx, 0x1345d971
jne 0x140001d31
mov ecx, 0x83cfef41
jmp 0x140001d31
cmp ecx, 0x8eda4ad4
jle 0x140002406
cmp ecx, 0x9cae4f1a
jg 0x140002782
cmp ecx, 0x8eda4ad5
je 0x140002f3d
cmp ecx, 0x95b8e373
je 0x140002f98
cmp ecx, 0x9b652a00
jne 0x140001d31
cmp byte [rbp - 4], 0
mov ecx, 0x28d705ec
mov eax, 0xa2e8e6de
cmovne ecx, eax
jmp 0x140001d31
cmp ecx, 0x5c0b0ea4
jg 0x1400027bb
cmp ecx, 0x57a1ddb4
je 0x14000302f
cmp ecx, 0x5ba1fb66
je 0x140003051
cmp ecx, 0x5bd1e86f
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x14039606c], 0xa
setl cl
setge dl
xor dl, al
mov r8d, edx
xor r8b, 1
or cl, al
xor cl, 1
or cl, r8b
xor r8b, cl
mov eax, 0xc380be59
mov r8d, 0x5c0b0ea5
cmovne eax, r8d
test cl, cl
mov ecx, 0xc380be59
jmp 0x140002ad1
cmp ecx, 0xe3cd8398
jg 0x1400027e9
cmp ecx, 0xd878c609
je 0x1400030c5
cmp ecx, 0xdd053144
je 0x1400030cf
cmp ecx, 0xe29cdf4e
jne 0x140001d31
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x40]
mov qword [rax], rcx
mov ecx, 0x78c90f93
jmp 0x140001d31
cmp ecx, 0x28d705eb
jg 0x140002817
cmp ecx, 0x25d719c3
je 0x140003120
cmp ecx, 0x2607b20b
je 0x14000312a
cmp ecx, 0x282cee30
jne 0x140001d31
mov ecx, 0xe8ca5395
jmp 0x140001d31
cmp ecx, 0xc66854e7
jg 0x1400028a5
cmp ecx, 0xc2b641a9
je 0x14000318e
cmp ecx, 0xc3571faa
je 0x140003204
cmp ecx, 0xc380be59
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
cmp ecx, 0xffffffff
sete al
cmp dword [0x14039606c], 0xa
setl dl
xor al, dl
mov r8d, eax
mov r9d, 0x81371b35
mov r10d, 0xa8893268
jmp 0x1400031e1
cmp ecx, 0x7ec4672f
jg 0x140002921
cmp ecx, 0x78c90f93
je 0x14000320e
cmp ecx, 0x7928d4d6
je 0x14000328a
cmp ecx, 0x7aee0fd9
je 0x140002f29
jmp 0x140001d31
cmp ecx, 0xfa2fb2a3
jle 0x14000295a
cmp ecx, 0xfa2fb2a4
je 0x140003294
cmp ecx, 0xfcb332f9
je 0x140003309
cmp ecx, 0xff67ffbe
je 0x1400026ad
jmp 0x140001d31
cmp ecx, 0x488c859
jle 0x14000297c
cmp ecx, 0x488c85a
je 0x140003313
cmp ecx, 0x4de783a
je 0x14000338a
cmp ecx, 0x807b0f0
jne 0x140001d31
mov eax, dword [0x140396068]
mov ecx, 0x8c5f42c3
sub ecx, eax
imul ecx, eax
and ecx, 1
sete al
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
and r8b, cl
and al, dl
or al, r8b
or dl, cl
mov r8d, edx
xor r8b, al
test dl, dl
mov ecx, 0xd878c609
mov edx, 0x25d719c3
cmovne ecx, edx
test al, al
cmove ecx, edx
test r8b, r8b
mov eax, 0xd878c609
cmove ecx, eax
jmp 0x140001d31
cmp ecx, 0x83cfef40
jle 0x140002a54
cmp ecx, 0x83cfef41
je 0x140003398
cmp ecx, 0x83fa8121
je 0x1400033fe
cmp ecx, 0x85306549
jne 0x140001d31
mov rax, qword [rbp]
mov rax, qword [rax]
mov ecx, dword [0x140396068]
lea edx, [rcx + 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x14039606c], 0xa
setl r8b
setge r9b
or r9b, dl
xor r8b, cl
mov ecx, r9d
xor cl, r8b
test cl, 1
mov edx, 0xe9e7379b
mov ecx, 0x4de783a
cmovne edx, ecx
test r8b, r8b
mov ecx, edx
mov r8d, 0xe9e7379b
cmovne ecx, r8d
mov qword [rbp - 0x40], rax
test r9b, 1
cmovne ecx, edx
jmp 0x140001d31
cmp ecx, 0x4ace3272
je 0x140003414
cmp ecx, 0x501a5aad
je 0x140003428
cmp ecx, 0x519793b4
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xb8a533a9
and ecx, 0x475acc56
or ecx, edx
xor ecx, 0xb8a533a8
or ecx, eax
xor ecx, 0xffffffff
setne al
sete cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
mov r9d, edx
or dl, cl
and cl, r8b
and r9b, al
or r9b, cl
xor r8b, al
xor dl, 1
or dl, r8b
mov eax, edx
xor al, r9b
test dl, dl
mov ecx, 0xfa2fb2a4
mov edx, 0x4ace3272
cmovne ecx, edx
test r9b, r9b
cmove ecx, edx
test al, al
mov eax, 0xfa2fb2a4
cmove ecx, eax
jmp 0x140001d31
cmp ecx, 0xd48fa16f
je 0x1400034bf
cmp ecx, 0xd5beb05f
je 0x14000351e
cmp ecx, 0xd5e3a048
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x68f41ff8
mov edx, eax
and edx, 0x970be007
or edx, ecx
xor edx, 0x970be006
and eax, 0xfffffffe
or eax, edx
xor eax, 0xc5c8f5aa
xor eax, 0x3a370a55
setne al
sete dl
cmp dword [0x14039606c], 0xa
setge cl
xor dl, cl
or al, cl
mov r8d, edx
xor r8b, al
test al, al
mov ecx, 0x1ff20957
mov eax, 0xeee83d6f
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
test r8b, r8b
mov eax, 0x1ff20957
cmovne ecx, eax
jmp 0x140001d31
cmp ecx, 0x1ff20957
je 0x140003532
cmp ecx, 0x226755f6
je 0x14000359c
cmp ecx, 0x23a1bbc0
jne 0x140001d31
mov ecx, 0x2607b20b
jmp 0x140001d31
cmp ecx, 0xb3e985b2
je 0x1400035a6
cmp ecx, 0xb9bf011b
je 0x140003615
cmp ecx, 0xbe61064c
jne 0x140001d31
mov rax, qword [rbp]
mov ecx, dword [0x140396068]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
sete cl
cmp dword [0x14039606c], 0xa
setl r8b
setge r9b
or r9b, dl
xor r8b, cl
mov edx, r8d
xor dl, r9b
test r8b, r8b
mov ecx, 0xf6c1de49
mov r10d, 0x6184aa48
cmovne ecx, r10d
test r9b, r9b
mov rax, qword [rax]
mov eax, dword [rax + 8]
mov r8d, 0xf6c1de49
cmovne ecx, r8d
mov dword [rbp - 0x38], eax
test dl, dl
cmove ecx, r10d
jmp 0x140001d31
cmp ecx, 0x6fd3b4b7
je 0x140003681
cmp ecx, 0x749348d7
je 0x14000368b
cmp ecx, 0x75939aee
jne 0x140001d31
mov ecx, 0x3bda4d59
jmp 0x140001d31
cmp ecx, 0xef1031f2
je 0x1400036f8
cmp ecx, 0xf0a3fadc
je 0x140003702
cmp ecx, 0xf6c1de49
jne 0x140001d31
mov rax, qword [rbp]
mov ecx, 0xbe61064c
jmp 0x140001d31
cmp ecx, 0x139c689c
je 0x14000370c
cmp ecx, 0x1449c053
je 0x140003716
cmp ecx, 0x18ff69b1
jne 0x140001d31
mov rax, qword [rbp - 0x20]
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x95b3ac5d
and ecx, 0x6a4c53a2
or ecx, edx
xor ecx, 0x95b3ac5c
or ecx, eax
xor ecx, 0xffffffff
setne al
sete cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
mov r9d, r8d
xor r9b, cl
xor dl, al
or r8b, cl
xor r8b, 1
or r8b, dl
mov eax, r8d
xor al, r9b
mov eax, 0x139c689c
mov ecx, 0xf7ffb44b
cmovne eax, ecx
test r8b, r8b
mov ecx, 0x139c689c
jmp 0x140003594
cmp ecx, 0x9cae4f1b
je 0x14000376d
cmp ecx, 0x9f08ee91
je 0x1400037e4
cmp ecx, 0x9fc2cbbb
jne 0x140001d31
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov qword [rbp - 0x50], rax
mov ecx, 0x83fa8121
jmp 0x140001d31
cmp ecx, 0x5c0b0ea5
je 0x1400037fa
cmp ecx, 0x60403a75
je 0x140003804
cmp ecx, 0x6184aa48
jne 0x140001d31
mov ecx, 0x7ec46730
jmp 0x140001d31
cmp ecx, 0xe3cd8399
je 0x140003841
cmp ecx, 0xe8ca5395
je 0x1400038a1
cmp ecx, 0xe9e7379b
jne 0x140001d31
mov ecx, 0xcc2dee6d
jmp 0x140001d31
cmp ecx, 0x28d705ec
je 0x140003985
cmp ecx, 0x2f44edab
je 0x1400039c1
cmp ecx, 0x31d79ae7
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
xor ecx, 0xffffffff
setne al
sete cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
mov r9d, edx
or dl, cl
and cl, r8b
and r9b, al
or r9b, cl
xor r8b, al
xor dl, 1
or dl, r8b
mov eax, edx
xor al, r9b
mov eax, 0x1449c053
mov ecx, 0x7928d4d6
cmovne eax, ecx
test dl, dl
mov ecx, 0x1449c053
jmp 0x140003594
cmp ecx, 0xc66854e8
je 0x140003a24
cmp ecx, 0xc736fbf5
je 0x140003a2e
cmp ecx, 0xc9a250b7
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
xor ecx, 0xffffffff
setne al
sete cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
xor r8b, cl
or dl, al
mov eax, edx
xor al, r8b
mov eax, 0xf9798c34
mov ecx, 0xc3571faa
cmovne eax, ecx
test dl, dl
mov ecx, 0xf9798c34
jmp 0x14000337c
cmp ecx, 0x7ec46730
je 0x140003aa1
cmp ecx, 0x7f6423ba
je 0x140003ade
cmp ecx, 0x7f82eef6
jne 0x140001d31
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
mov qword [rbp - 0x68], rax
mov ecx, 0xf8753784
jmp 0x140001d31
cmp ecx, 0xf7ffb44b
je 0x140003b0c
cmp ecx, 0xf9798c34
jne 0x140003be9
mov ecx, 0xdd053144
jmp 0x140001d31
cmp ecx, 0x12de770
je 0x140003b1a
cmp ecx, 0x1b1daac
jne 0x140001d31
mov eax, 0x10
call fcn.14006cb9c
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov eax, 0x10
call fcn.14006cb9c
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
mov eax, 0x10
call fcn.14006cb9c
sub rsp, rax
mov rax, rsp
mov ecx, dword [0x140396068]
lea edx, [rcx + 1]
imul edx, ecx
mov ecx, edx
not ecx
mov r8d, ecx
and r8d, 0xb115da43
and edx, 0x4eea25bc
or edx, r8d
xor edx, 0xb115da42
or edx, ecx
xor edx, 0xffffffff
sete cl
setne dl
cmp dword [0x14039606c], 0xa
setge r8b
setl r9b
and dl, r9b
and r8b, cl
or r8b, dl
mov edx, r9d
xor dl, cl
or r9b, cl
xor r9b, 1
or r9b, dl
mov ecx, r9d
xor cl, r8b
mov edx, 0xc9a250b7
mov ecx, 0x1ceba18d
cmovne edx, ecx
test r9b, r9b
mov ecx, 0xc9a250b7
cmovne ecx, edx
mov qword [rbp - 0x18], rax
test r8b, r8b
cmove ecx, edx
jmp 0x140001d31
cmp ecx, 0x81371b35
je 0x140003b97
cmp ecx, 0x82f4c0fc
jne 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x331f0a67
and ecx, 0xcce0f598
or ecx, edx
xor ecx, 0xcce0f599
xor eax, ecx
test eax, ecx
setne al
sete dl
cmp dword [0x14039606c], 0xa
setl cl
setge r8b
or cl, dl
xor dl, r8b
xor al, r8b
xor cl, 1
or cl, al
mov eax, edx
xor al, cl
mov eax, 0x57a1ddb4
mov r8d, 0x95b8e373
cmovne eax, r8d
test cl, cl
mov ecx, 0x95b8e373
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
jmp 0x140001d31
mov rax, qword [rbp]
mov ecx, 0x7f82eef6
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xa25975e5
and ecx, 0x5da68a1a
or ecx, edx
xor ecx, 0x5da68a1b
xor eax, ecx
test eax, ecx
sete al
setne cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
mov r9d, r8d
xor r9b, cl
and r9b, r8b
and dl, al
and r8b, cl
or r8b, dl
mov eax, r8d
xor al, r9b
test r8b, r8b
mov ecx, 0xb3659a6f
mov edx, 0xc66854e8
cmovne ecx, edx
test r9b, r9b
cmove ecx, r15d
jmp 0x140003b8d
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
sete al
setne cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and al, r8b
or r8b, cl
and dl, cl
or dl, al
mov eax, r8d
xor al, dl
mov eax, 0x78c90f93
mov ecx, 0xe29cdf4e
cmovne eax, ecx
test dl, dl
mov ecx, eax
mov edx, 0x78c90f93
jmp 0x14000327c
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
setne al
cmp dword [0x14039606c], 0xa
setge cl
mov edx, eax
xor dl, cl
or cl, al
mov eax, edx
xor al, cl
test cl, cl
mov ecx, 0x2f44edab
mov r8d, 0xf0a3fadc
cmovne ecx, r8d
test dl, dl
cmove ecx, r8d
test al, al
mov eax, 0x2f44edab
cmove ecx, eax
jmp 0x140001d31
mov eax, dword [0x140396068]
mov ecx, eax
not ecx
imul ecx, eax
not cl
or cl, 0xfe
cmp cl, 0xff
setne al
cmp dword [0x14039606c], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
test cl, cl
mov ecx, 0x12de770
mov r8d, 0x9cae4f1b
cmovne ecx, r8d
test dl, dl
mov edx, 0x12de770
cmovne ecx, edx
test al, al
cmove ecx, r8d
jmp 0x140001d31
mov ecx, 0x1b1daac
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xcc827b57
mov edx, eax
and edx, 0x337d84a8
or edx, ecx
xor edx, 0x337d84a9
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and al, r8b
or r8b, cl
and dl, cl
or dl, al
mov eax, r8d
xor al, dl
test dl, dl
mov ecx, 0xf6c1de49
mov edx, 0xbe61064c
cmovne ecx, edx
test r8b, r8b
mov r8d, 0xf6c1de49
jmp 0x140003a93
mov rax, qword [rbp - 0x20]
mov eax, dword [rax]
shl eax, 0xb
add eax, 0x1000
and eax, 0xffffe800
mov ecx, dword [0x140396068]
lea edx, [rcx + 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x14039606c], 0xa
setl r8b
setge r9b
and r9b, cl
and dl, r8b
or dl, r9b
mov r9d, r8d
xor r9b, cl
or r8b, cl
xor r8b, 1
or r8b, r9b
mov r9d, r8d
xor r9b, dl
test r8b, r8b
mov ecx, 0x31d79ae7
mov r8d, 0x81371b35
cmovne ecx, r8d
test dl, dl
cmove ecx, r8d
mov dword [rbp - 0x34], eax
test r9b, r9b
mov eax, 0x31d79ae7
cmove ecx, eax
jmp 0x140001d31
mov rax, qword [rbp - 0x28]
mov dword [rax], 1
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x482bd9dc
mov edx, eax
and edx, 0xb7d42623
or edx, ecx
xor edx, 0xb7d42622
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
and cl, r8b
and dl, al
or dl, cl
mov ecx, r8d
xor cl, al
or r8b, al
xor r8b, 1
or r8b, cl
mov eax, r8d
xor al, dl
mov eax, 0x226755f6
mov ecx, 0xd5beb05f
cmovne eax, ecx
test r8b, r8b
mov ecx, 0x226755f6
jmp 0x1400033f1
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
xor ecx, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
mov r9d, r8d
xor r9b, cl
and r9b, r8b
and dl, al
and r8b, cl
or r8b, dl
mov eax, r9d
xor al, r8b
test r8b, r8b
mov ecx, 0x1ceba18d
mov r8d, 0x1b1daac
cmovne ecx, r8d
test r9b, r9b
mov edx, 0x1ceba18d
cmove ecx, edx
test al, al
cmovne ecx, r8d
jmp 0x140001d31
mov rcx, qword [rbp - 0x10]
sub rsp, 0x20
mov edx, 8
call sub.ADVAPI32.dll_SystemFunction036
add rsp, 0x20
mov rax, qword [rbp]
mov rax, qword [rax]
mov r9, qword [rax + 8]
mov rax, qword [rbp]
mov rax, qword [rax]
mov rdx, qword [rax + 0x10]
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
mov r8, qword [rbp - 0x10]
sub rsp, 0x30
mov qword [rsp + 0x20], 0
call fcn.14006f5a0
add rsp, 0x10
call fcn.140016988
add rsp, 0x20
mov rcx, qword [rbp]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 8]
inc rcx
xor edx, edx
div rcx
mov rax, qword [rbp]
mov rax, qword [rax]
mov dword [rax + 4], edx
mov ecx, 0xd48fa16f
jmp 0x140001d31
mov rcx, qword [rbp - 0x48]
sub rsp, 0x20
mov r8d, 0x18
mov edx, 8
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov rcx, qword [rbp]
mov qword [rcx], rax
mov rax, qword [rbp]
cmp qword [rax], 0
mov ecx, 0xc2b641a9
mov eax, 0x6948a68a
cmove ecx, eax
jmp 0x140001d31
mov rax, qword [rbp - 0x60]
mov rcx, qword [rax]
inc rcx
mov rax, qword [rbp - 0x58]
xor edx, edx
div rcx
mov rax, qword [rbp]
mov rax, qword [rax]
mov dword [rax + 4], edx
mov ecx, 0xb3e985b2
jmp 0x140001d31
mov ecx, 0xb9bf011b
jmp 0x140001d31
mov eax, dword [rbp - 0x34]
mov rcx, qword [rbp]
mov rcx, qword [rcx]
mov qword [rcx + 8], rax
mov rax, qword [rbp]
mov r9, qword [rax]
add r9, 8
mov rax, qword [rbp]
mov rdx, qword [rax]
add rdx, 0x10
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x30
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x1000
xor r8d, r8d
call fcn.14006f520
add rsp, 0x30
test eax, eax
setns byte [rbp - 3]
mov ecx, 0xe3cd8399
jmp 0x140001d31
mov rax, qword [rbp - 0x20]
mov dword [rax], esi
mov rax, qword [rbp - 0x18]
mov qword [rax], rdi
sub rsp, 0x20
call r14
add rsp, 0x20
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x59a6c6be
mov edx, eax
and edx, 0xa6593941
or edx, ecx
xor edx, 0xa6593940
and eax, 0xfffffffe
or eax, edx
xor eax, 0x9e3e7260
xor eax, 0x61c18d9f
setne al
sete cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and cl, r8b
and dl, al
or dl, cl
or r8b, al
mov eax, r8d
xor al, dl
test r8b, r8b
mov ecx, 0x282cee30
mov r8d, 0x57a1ddb4
cmovne ecx, r8d
test dl, dl
cmove ecx, r8d
test al, al
mov eax, 0x282cee30
cmove ecx, eax
jmp 0x140001d31
mov rax, qword [rbp - 0x20]
mov dword [rax], esi
mov rax, qword [rbp - 0x18]
mov qword [rax], rdi
sub rsp, 0x20
call r14
add rsp, 0x20
mov ecx, 0x95b8e373
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x971a960f
and ecx, 0x68e569f0
or ecx, edx
xor ecx, 0x971a960e
or ecx, eax
xor ecx, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
and cl, r8b
and dl, al
or dl, cl
mov ecx, r8d
xor cl, al
or r8b, al
xor r8b, 1
or r8b, cl
mov eax, r8d
xor al, dl
mov eax, 0x6860be31
mov ecx, 0xc3571faa
cmovne eax, ecx
test r8b, r8b
mov ecx, 0x6860be31
jmp 0x1400033f1
mov ecx, 0x488c85a
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
or r8b, cl
xor dl, al
mov eax, r8d
xor al, dl
test al, 1
mov eax, 0xcdc8eeb1
mov ecx, 0xf0a3fadc
cmovne eax, ecx
test dl, dl
mov ecx, eax
mov edx, 0xcdc8eeb1
cmovne ecx, edx
test r8b, 1
cmovne ecx, eax
jmp 0x140001d31
mov ecx, 0x807b0f0
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xf7eba173
and ecx, 0x8145e8c
or ecx, edx
xor ecx, 0xf7eba172
or ecx, eax
xor ecx, 0xffffffff
setne al
sete cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and cl, r8b
and dl, al
or dl, cl
or r8b, al
mov eax, r8d
xor al, dl
mov eax, 0x501a5aad
cmovne eax, r12d
test r8b, r8b
mov ecx, 0x501a5aad
jmp 0x1400033f1
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xfd295e53
mov edx, eax
and edx, 0x2d6a1ac
or edx, ecx
xor edx, 0x2d6a1ad
and eax, 0xfffffffe
or eax, edx
xor eax, 0xbccef538
cmp eax, 0x43310ac7
sete al
cmp dword [0x14039606c], 0xa
setl dl
xor al, dl
mov r8d, eax
mov r9d, 0x5c0b0ea5
mov r10d, 0x5bd1e86f
cmovne r9d, r10d
not r8b
test r8b, dl
cmovne r9d, r10d
test al, al
mov ecx, r9d
cmovne ecx, r10d
test r8b, dl
cmove ecx, r9d
jmp 0x140001d31
mov ecx, 0x6860be31
jmp 0x140001d31
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x40]
mov qword [rax], rcx
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x5b057ca7
and ecx, 0xa4fa8358
or ecx, edx
xor ecx, 0xa4fa8359
xor eax, ecx
test eax, ecx
sete al
setne cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and al, r8b
or r8b, cl
and dl, cl
or dl, al
mov eax, r8d
xor al, dl
mov eax, 0xef1031f2
mov ecx, 0xe29cdf4e
cmovne eax, ecx
test dl, dl
mov ecx, eax
mov edx, 0xef1031f2
cmovne ecx, edx
test r8b, r8b
cmovne ecx, eax
jmp 0x140001d31
mov ecx, 0x1449c053
jmp 0x140001d31
mov rax, qword [rbp - 0x28]
mov dword [rax], 1
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x2a1d0e3
and ecx, 0xfd5e2f1c
or ecx, edx
xor ecx, 0x2a1d0e2
or ecx, eax
xor ecx, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and al, r8b
or r8b, cl
and dl, cl
or dl, al
mov eax, r8d
xor al, dl
test dl, dl
mov ecx, 0x4ace3272
mov edx, 0x75939aee
cmovne ecx, edx
test r8b, r8b
mov r8d, 0x4ace3272
jmp 0x140003a93
mov ecx, 0xeeb45976
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x3bef297e
mov edx, eax
and edx, 0xc410d681
or edx, ecx
xor edx, 0xc410d680
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setl dl
xor cl, dl
mov r8d, edx
xor r8b, al
xor cl, 1
or dl, al
xor dl, 1
or dl, cl
mov eax, edx
xor al, r8b
mov eax, 0x85306549
mov ecx, 0x4de783a
cmovne eax, ecx
test dl, dl
mov ecx, 0x85306549
cmovne ecx, eax
test r8b, r8b
cmove ecx, eax
jmp 0x140001d31
mov rax, qword [rbp]
mov ecx, 0x85306549
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
xor ecx, 0xffffffff
setne al
sete cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and cl, r8b
and dl, al
or dl, cl
or r8b, al
mov eax, r8d
xor al, dl
mov eax, 0x5ba1fb66
mov ecx, 0x1345d971
cmovne eax, ecx
test r8b, r8b
mov ecx, 0x5ba1fb66
cmovne ecx, eax
test dl, dl
cmove ecx, eax
jmp 0x140001d31
mov rax, qword [rbp - 0x50]
cmp rax, 0xffffffffffffffff
sete byte [rbp - 4]
mov ecx, 0x9b652a00
jmp 0x140001d31
mov rax, qword [rbp - 0x28]
mov dword [rax], 1
mov ecx, 0xfa2fb2a4
jmp 0x140001d31
mov rax, qword [rbp - 0x10]
mov rbx, qword [rax]
sub rsp, 0x20
call r14
mov rcx, rax
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x31fd5c4e
and ecx, 0xce02a3b1
or ecx, edx
xor ecx, 0x31fd5c4f
or ecx, eax
cmp ecx, 0xffffffff
sete al
cmp dword [0x14039606c], 0xa
setl cl
mov edx, eax
xor dl, cl
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
test cl, cl
mov ecx, 0x7aee0fd9
mov r8d, 0x7f6423ba
cmovne ecx, r8d
test dl, dl
mov r12d, 0x7f6423ba
cmove ecx, r8d
test al, al
mov eax, 0x7aee0fd9
cmove ecx, eax
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
xor ecx, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and al, r8b
or r8b, cl
and dl, cl
or dl, al
mov eax, edx
xor al, r8b
test dl, dl
mov ecx, 0x3f318667
mov edx, 0x1d5223a6
cmovne ecx, edx
test r8b, r8b
cmovne ecx, r13d
jmp 0x140003a97
mov rax, qword [rbp - 0x28]
mov dword [rax], 1
mov ecx, 0x64ed9417
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
xor eax, ecx
test eax, ecx
setne al
sete cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
mov r9d, edx
or dl, cl
and cl, r8b
and r9b, al
or r9b, cl
xor r8b, al
xor dl, 1
or dl, r8b
mov eax, edx
xor al, r9b
mov eax, 0xd2abc7d4
mov ecx, 0xeee83d6f
cmovne eax, ecx
test dl, dl
mov ecx, 0xd2abc7d4
cmovne ecx, eax
jmp 0x140003762
mov ecx, 0x9cae4f1b
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x63511f93
mov edx, eax
and edx, 0x9caee06c
or edx, ecx
xor edx, 0x9caee06d
and eax, 0xfffffffe
or eax, edx
xor eax, 0x4086acfe
xor eax, 0xbf795301
sete al
setne cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
mov r9d, r8d
xor r9b, cl
and r9b, r8b
and dl, al
and r8b, cl
or r8b, dl
mov eax, r9d
xor al, r8b
mov eax, 0x25d719c3
mov edx, 0x807b0f0
jmp 0x140003757
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x9474d88b
mov edx, eax
and edx, 0x6b8b2774
or edx, ecx
xor edx, 0x6b8b2775
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
setne al
sete dl
cmp dword [0x14039606c], 0xa
setge cl
xor dl, cl
or al, cl
mov r8d, edx
xor r8b, al
test al, al
mov ecx, 0x9f08ee91
mov eax, 0xb24e288
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
test r8b, r8b
mov eax, 0x9f08ee91
cmovne ecx, eax
jmp 0x140001d31
mov ecx, 0x8eda4ad5
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xdcfe65ba
and ecx, 0x23019a45
or ecx, edx
xor ecx, 0x23019a44
xor eax, ecx
test eax, ecx
setne al
cmp dword [0x14039606c], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, ecx
xor al, dl
test cl, cl
mov ecx, 0x3ca23225
mov r8d, 0xb3659a6f
cmovne ecx, r8d
test dl, dl
mov r15d, 0xb3659a6f
cmove ecx, r8d
test al, al
mov eax, 0x3ca23225
cmove ecx, eax
jmp 0x140001d31
mov ecx, 0x519793b4
jmp 0x140001d31
mov ecx, 0xcdc8eeb1
jmp 0x140001d31
mov ecx, 0xa8893268
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
mov r9d, r8d
xor r9b, cl
and r9b, r8b
and dl, al
and r8b, cl
or r8b, dl
mov eax, r9d
xor al, r8b
mov eax, 0x7928d4d6
mov edx, 0x6fd3b4b7
cmovne eax, edx
test r8b, r8b
mov ecx, eax
cmovne ecx, edx
test r9b, r9b
cmove ecx, eax
jmp 0x140001d31
mov rax, qword [rbp - 0x28]
mov dword [rax], 1
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xf0b3504
mov edx, eax
and edx, 0xf0f4cafb
or edx, ecx
xor edx, 0xf0f4cafa
and eax, 0xfffffffe
or eax, edx
xor eax, 0x5131bdbe
xor eax, 0xaece4241
setne al
sete dl
cmp dword [0x14039606c], 0xa
setge cl
xor dl, cl
or al, cl
mov ecx, edx
xor cl, al
mov r8d, 0x12de770
mov ecx, 0x749348d7
cmovne r8d, ecx
test al, al
cmovne ecx, r8d
test dl, dl
cmovne ecx, r8d
jmp 0x140001d31
cmp byte [rbp - 3], 0
mov ecx, 0x488c85a
mov eax, 0x9fc2cbbb
cmovne ecx, eax
jmp 0x140001d31
mov ecx, 0x5bd1e86f
jmp 0x140001d31
mov al, byte [rbp - 1]
mov cl, byte [rbp - 2]
mov edx, eax
xor dl, cl
or al, cl
xor al, 1
or al, dl
mov ecx, eax
xor cl, dl
test cl, 1
mov r8d, 0x83cfef41
mov ecx, 0x1345d971
cmovne r8d, ecx
test al, 1
mov ecx, 0x83cfef41
cmovne ecx, r8d
test dl, 1
cmove ecx, r8d
jmp 0x140001d31
mov eax, dword [0x140396068]
lea edx, [rax + 1]
imul edx, eax
test dl, 1
sete al
cmp dword [0x14039606c], 0xa
setl cl
setge r8b
and r8b, al
and dl, cl
or dl, r8b
mov r8d, ecx
xor r8b, al
or cl, al
xor cl, 1
or cl, r8b
mov eax, ecx
xor al, dl
test cl, cl
mov ecx, 0xb9bf011b
mov r8d, 0xb24e288
cmovne ecx, r8d
test dl, dl
cmove ecx, r8d
test al, al
mov eax, 0xb9bf011b
cmove ecx, eax
jmp 0x140001d31
mov eax, 0x10
call fcn.14006cb9c
sub rsp, rax
mov rax, rsp
mov qword [rbp], rax
mov eax, 0x10
call fcn.14006cb9c
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov eax, 0x10
call fcn.14006cb9c
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x20]
mov dword [rax], esi
mov rax, qword [rbp - 0x18]
mov qword [rax], rdi
mov rax, qword [rbp]
sub rsp, 0x20
call r14
add rsp, 0x20
mov ecx, dword [0x140396068]
lea edx, [rcx + 1]
imul edx, ecx
mov ecx, edx
not ecx
and edx, 0xf3375bac
mov r8d, ecx
and r8d, 0xcc8a453
or r8d, edx
xor r8d, 0xcc8a452
and ecx, 0xfffffffe
or ecx, r8d
xor ecx, 0xffffffff
sete cl
setne dl
cmp dword [0x14039606c], 0xa
setl r8b
setge r9b
xor r9b, dl
mov edx, r8d
xor dl, cl
or r8b, cl
xor r8b, 1
or r8b, dl
mov edx, r8d
xor dl, r9b
test r8b, r8b
mov ecx, 0xfcb332f9
mov r8d, 0x82f4c0fc
cmovne ecx, r8d
test r9b, r9b
cmove ecx, r8d
mov qword [rbp - 0x48], rax
test dl, dl
mov eax, 0xfcb332f9
cmove ecx, eax
jmp 0x140001d31
mov rax, qword [rbp - 0x10]
mov rax, qword [rbp]
mov rax, qword [rax]
mov rbx, qword [rax + 8]
sub rsp, 0x20
call r14
mov rcx, rax
mov edx, 8
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
mov rcx, qword [rbp - 0x10]
mov qword [rcx], rax
mov ecx, 0xd5e3a048
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
or ecx, eax
xor ecx, 0xffffffff
setne al
sete cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
xor r8b, cl
or dl, al
mov eax, edx
xor al, r8b
test dl, dl
mov ecx, 0xe8ca5395
mov edx, 0x82f4c0fc
cmovne ecx, edx
test r8b, r8b
cmove ecx, edx
test al, al
mov eax, 0xe8ca5395
cmove ecx, eax
jmp 0x140001d31
mov ecx, 0xff67ffbe
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xa140ebef
and ecx, 0x5ebf1410
or ecx, edx
xor ecx, 0x5ebf1411
xor eax, ecx
test eax, ecx
sete al
setne cl
cmp dword [0x14039606c], 0xa
setl dl
setge r8b
and al, r8b
or r8b, cl
and dl, cl
or dl, al
mov eax, edx
xor al, r8b
test dl, dl
mov ecx, 0xec0101b1
mov edx, 0x23a1bbc0
cmovne ecx, edx
test r8b, r8b
mov r8d, 0xec0101b1
cmovne ecx, r8d
test al, al
cmove ecx, edx
jmp 0x140001d31
mov rax, qword [rbp]
mov rax, qword [rax]
mov rcx, qword [rax + 0x10]
mov edx, dword [rbp - 0x38]
sub rsp, 0x20
call sub.ADVAPI32.dll_SystemFunction036
call fcn.140016988
add rsp, 0x20
mov qword [rbp - 0x58], rax
mov rax, qword [rbp]
mov rax, qword [rax]
add rax, 8
mov qword [rbp - 0x60], rax
mov ecx, 0x9f29c14
jmp 0x140001d31
mov rax, qword [rbp - 0x10]
mov rbx, qword [rax]
sub rsp, 0x20
call r14
mov rcx, rax
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov ecx, 0x501a5aad
jmp 0x140001d31
mov rax, qword [rbp - 0x20]
mov ecx, 0x18ff69b1
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x6861adfb
and ecx, 0x979e5204
or ecx, edx
xor ecx, 0x6861adfa
or ecx, eax
xor ecx, 0xffffffff
sete al
setne cl
cmp dword [0x14039606c], 0xa
setge dl
setl r8b
mov r9d, r8d
xor r9b, cl
and r9b, r8b
and dl, al
and r8b, cl
or r8b, dl
mov eax, r8d
xor al, r9b
test r8b, r8b
mov ecx, 0xd5beb05f
mov edx, 0x64ed9417
cmovne ecx, edx
test r9b, r9b
mov r8d, 0xd5beb05f
cmove ecx, r8d
test al, al
cmovne ecx, edx
jmp 0x140001d31
mov eax, dword [0x140396068]
lea ecx, [rax + 1]
imul ecx, eax
not cl
or cl, 0xfe
cmp cl, 0xff
sete al
cmp dword [0x14039606c], 0xa
setl dl
xor al, dl
mov r8d, eax
not r8b
mov ecx, 0xf7ffb44b
mov r9d, 0x18ff69b1
cmovne ecx, r9d
test r8b, dl
mov edx, 0xf7ffb44b
cmove ecx, edx
cmovne ecx, r9d
test al, al
cmovne ecx, r9d
jmp 0x140001d31
cmp ecx, 0xf8753784
jne 0x140001d31
mov rax, qword [rbp - 0x68]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret