Function at 0x1400596f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
mov byte [rsp + 8], cl
sub rsp, 0x1a8
mov dword [rsp + 0x34], 0x455
mov dword [rsp + 0x28], 0x34b
mov dword [rsp + 0x54], 0x288
mov dword [rsp + 0x3c], 0x308
mov dword [rsp + 0x2c], 0x15e
mov byte [rsp + 0x24], 0xd1
mov dword [rsp + 0x30], 0x348
mov dword [rsp + 0x44], 0xe1
mov dword [rsp + 0x40], 0x21c
mov dword [rsp + 0x38], 0x3d1
mov byte [rsp + 0x21], 0xd0
mov dword [rsp + 0x48], 0x38e
mov byte [rsp + 0x23], 0x82
mov byte [rsp + 0x22], 0x17
mov byte [rsp + 0x20], 0xd1
movzx eax, byte [0x140074c5c]
and eax, dword [rsp + 0x44]
movzx ecx, byte [0x140074b8f]
or ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
cmp dword [0x140074c4c], 0
je 0x1400597c0
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c89]
mov edx, dword [rsp + 0x3c]
shl edx, cl
mov ecx, edx
or eax, ecx
test eax, eax
je 0x1400597c0
mov dword [rsp + 0x80], 1
jmp 0x1400597cb
mov dword [rsp + 0x80], 0
mov eax, dword [rsp + 0x80]
mov dword [0x140074c68], eax
cmp dword [rsp + 0x3c], 0
jne 0x1400597ec
movsx eax, byte [rsp + 0x21]
cmp eax, dword [0x140074c80]
je 0x140059862
mov eax, dword [rsp + 0x2c]
cmp dword [0x140074a6c], eax
jne 0x140059805
mov dword [rsp + 0x84], 1
jmp 0x140059810
mov dword [rsp + 0x84], 0
movzx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x22]
and eax, ecx
mov ecx, dword [rsp + 0x84]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x140059843
movsx eax, byte [0x140074c5e]
test eax, eax
je 0x140059843
mov dword [rsp + 0x88], 1
jmp 0x14005984e
mov dword [rsp + 0x88], 0
movzx eax, byte [0x140074b8e]
and eax, dword [rsp + 0x88]
mov byte [0x140074b8e], al
movzx eax, byte [0x140074c8b]
test eax, eax
je 0x140059881
cmp dword [rsp + 0x34], 0
je 0x140059881
mov dword [rsp + 0x8c], 1
jmp 0x14005988c
mov dword [rsp + 0x8c], 0
movsx eax, byte [0x140074c6e]
add eax, dword [rsp + 0x8c]
mov byte [0x140074c6e], al
movzx eax, byte [rsp + 0x23]
cmp dword [rsp + 0x34], eax
jne 0x1400598b8
mov dword [rsp + 0x90], 1
jmp 0x1400598c3
mov dword [rsp + 0x90], 0
movsx eax, byte [0x140074c90]
xor eax, dword [rsp + 0x90]
mov byte [0x140074c6d], al
movsx eax, byte [0x140074a63]
xor eax, dword [rsp + 0x30]
movsx ecx, byte [0x140074c90]
or ecx, eax
mov eax, ecx
mov byte [0x140074c90], al
movzx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c3c]
add ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c64]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c64], eax
movzx eax, byte [rsp + 0x24]
movzx ecx, al
mov eax, dword [0x140074c50]
shl eax, cl
mov ecx, dword [rsp + 0x34]
shr eax, cl
movsx ecx, byte [rsp + 0x21]
and eax, ecx
test eax, eax
je 0x14005994f
movsx eax, byte [0x140074a63]
test eax, eax
je 0x14005994f
mov dword [rsp + 0x94], 1
jmp 0x14005995a
mov dword [rsp + 0x94], 0
movzx eax, byte [0x140074c5f]
xor eax, dword [rsp + 0x94]
mov byte [0x140074c5f], al
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movzx eax, byte [rsp + 0x22]
test eax, eax
jne 0x140059984
cmp dword [rsp + 0x30], 0
je 0x1400599d9
cmp dword [0x140074c68], 0
jne 0x1400599b7
cmp dword [rsp + 0x34], 0
je 0x1400599aa
movsx eax, byte [rsp + 0x21]
movzx ecx, byte [rsp + 0x22]
sub eax, ecx
add eax, dword [0x140074c68]
test eax, eax
jne 0x1400599b7
mov dword [rsp + 0x98], 0
jmp 0x1400599c2
mov dword [rsp + 0x98], 1
mov eax, dword [rsp + 0x98]
mov ecx, dword [0x140074c38]
add ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
movzx eax, byte [0x140074c5c]
movsx ecx, byte [rsp + 0x21]
mov edx, dword [rsp + 0x48]
add edx, ecx
mov ecx, edx
or ecx, dword [rsp + 0x3c]
cmp eax, ecx
jne 0x140059a02
mov dword [rsp + 0x9c], 1
jmp 0x140059a0d
mov dword [rsp + 0x9c], 0
movsx eax, byte [0x140074c6f]
add eax, dword [rsp + 0x9c]
mov byte [0x140074c6f], al
cmp dword [0x140074c48], 0
jne 0x140059a42
cmp dword [rsp + 0x3c], 0
je 0x140059a3b
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x28], eax
je 0x140059a42
mov byte [rsp + 0x4c], 0
jmp 0x140059a47
mov byte [rsp + 0x4c], 1
movzx eax, byte [rsp + 0x4c]
mov byte [0x140074c90], al
movzx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c4c]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov dword [rsp + 0x28], eax
movzx eax, byte [0x140074b8f]
mov ecx, dword [rsp + 0x54]
mov edx, dword [rsp + 0x34]
sub edx, ecx
mov ecx, edx
mov dword [rsp + 0x168], ecx
mov edx, dword [rsp + 0x44]
movzx ecx, dl
mov edx, dword [rsp + 0x168]
shr edx, cl
mov ecx, edx
or eax, ecx
mov byte [0x140074c6d], al
mov dword [rsp + 0x60], 0xc6
mov dword [rsp + 0x60], 0xc
jmp 0x140059abf
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0x3f6
jae 0x140059e42
movzx eax, byte [0x140074b8f]
cmp dword [rsp + 0x40], eax
jae 0x140059ae7
mov dword [rsp + 0xa0], 1
jmp 0x140059af2
mov dword [rsp + 0xa0], 0
mov eax, dword [rsp + 0xa0]
cmp dword [rsp + 0x34], eax
je 0x140059d81
movzx eax, byte [rsp + 0x23]
mov ecx, dword [0x140074c38]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x28]
cmp eax, dword [rsp + 0x2c]
jne 0x140059b29
mov dword [rsp + 0xa4], 1
jmp 0x140059b34
mov dword [rsp + 0xa4], 0
movsx eax, byte [0x140074c5d]
mov ecx, dword [rsp + 0xa4]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [rsp + 0x2c]
shl eax, cl
cmp dword [rsp + 0x44], eax
jne 0x140059b6c
mov dword [rsp + 0xa8], 1
jmp 0x140059b77
mov dword [rsp + 0xa8], 0
movzx eax, byte [0x140074c6d]
xor eax, dword [rsp + 0xa8]
movsx ecx, byte [0x140074c5e]
or eax, ecx
movzx ecx, byte [0x140074c5c]
or ecx, eax
mov eax, ecx
mov byte [0x140074c5c], al
mov eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c28]
sub ecx, eax
mov eax, ecx
test eax, eax
jne 0x140059bd9
mov eax, dword [0x140074c50]
movzx ecx, al
mov eax, dword [rsp + 0x28]
shr eax, cl
mov ecx, dword [rsp + 0x38]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x140059bd9
mov dword [rsp + 0xac], 0
jmp 0x140059be4
mov dword [rsp + 0xac], 1
mov eax, dword [rsp + 0xac]
mov ecx, dword [0x140074c74]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
movsx eax, byte [rsp + 0x21]
cmp eax, dword [rsp + 0x48]
jne 0x140059c13
mov dword [rsp + 0xb0], 1
jmp 0x140059c1e
mov dword [rsp + 0xb0], 0
movsx eax, byte [0x140074a63]
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0xb0]
and edx, ecx
mov ecx, edx
or eax, ecx
mov ecx, dword [0x140074c2c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
cmp dword [0x140074c74], 0
jne 0x140059c65
movzx eax, byte [rsp + 0x24]
test eax, eax
jne 0x140059c65
mov dword [rsp + 0xb4], 0
jmp 0x140059c70
mov dword [rsp + 0xb4], 1
movzx eax, byte [0x140074c8b]
xor eax, dword [rsp + 0xb4]
mov byte [0x140074c8b], al
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 5
div ecx
mov eax, edx
mov ecx, dword [0x140074c4c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x48]
mov ecx, dword [0x140074c30]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x140059cda
cmp dword [rsp + 0x28], 0
je 0x140059cda
mov eax, dword [0x140074a68]
movzx ecx, al
mov eax, dword [rsp + 0x40]
shr eax, cl
test eax, eax
je 0x140059cda
mov dword [rsp + 0xb8], 1
jmp 0x140059ce5
mov dword [rsp + 0xb8], 0
movzx eax, byte [0x140074b8e]
add eax, dword [rsp + 0xb8]
mov byte [0x140074b8e], al
movzx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
xor eax, dword [rsp + 0x48]
cmp dword [0x140074c28], eax
jne 0x140059d1e
mov dword [rsp + 0xbc], 1
jmp 0x140059d29
mov dword [rsp + 0xbc], 0
mov eax, dword [rsp + 0xbc]
mov ecx, dword [0x140074c28]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
movzx eax, byte [0x140074c8a]
test eax, eax
je 0x140059d5f
cmp dword [rsp + 0x2c], 0
je 0x140059d5f
mov dword [rsp + 0xc0], 1
jmp 0x140059d6a
mov dword [rsp + 0xc0], 0
mov eax, dword [rsp + 0xc0]
mov ecx, dword [0x140074c50]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movsx eax, byte [0x140074c90]
movzx ecx, byte [rsp + 0x24]
movzx edx, byte [rsp + 0x22]
sub ecx, edx
and eax, ecx
test eax, eax
jne 0x140059db9
movsx eax, byte [rsp + 0x21]
movzx ecx, byte [0x140074c8a]
xor eax, ecx
test eax, eax
jne 0x140059db9
mov dword [rsp + 0xc4], 0
jmp 0x140059dc4
mov dword [rsp + 0xc4], 1
mov eax, dword [rsp + 0xc4]
mov ecx, dword [0x140074c38]
add ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
movzx eax, byte [0x140074c8a]
or eax, dword [rsp + 0x2c]
mov dword [0x140074c80], eax
movsx eax, byte [0x140074c6c]
movzx ecx, byte [rsp + 0x22]
xor eax, ecx
test eax, eax
je 0x140059e05
cmp dword [rsp + 0x3c], 0
jne 0x140059e25
movsx eax, byte [0x140074c6c]
mov ecx, dword [rsp + 0x2c]
xor ecx, eax
mov eax, ecx
test eax, eax
jne 0x140059e25
mov dword [rsp + 0xc8], 0
jmp 0x140059e30
mov dword [rsp + 0xc8], 1
mov eax, dword [rsp + 0xc8]
mov dword [0x140074c70], eax
jmp 0x140059ab5
mov dword [rsp + 0x68], 0xffffff48
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x16c], eax
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x16c], 0
je 0x140059fc4
mov eax, dword [rsp + 0x44]
cmp dword [rsp + 0x44], eax
je 0x140059f8a
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [0x140074c64]
sar eax, cl
test eax, eax
je 0x140059ea2
cmp dword [rsp + 0x38], 0
je 0x140059ea2
mov dword [rsp + 0xcc], 1
jmp 0x140059ead
mov dword [rsp + 0xcc], 0
movzx eax, byte [0x140074c6d]
add eax, dword [rsp + 0xcc]
mov byte [0x140074c6d], al
mov eax, dword [rsp + 0x34]
movzx ecx, al
mov eax, dword [0x140074c68]
sar eax, cl
test eax, eax
jne 0x140059ef7
movzx eax, byte [rsp + 0x23]
add eax, dword [rsp + 0x34]
movzx ecx, byte [0x140074c8a]
xor eax, ecx
test eax, eax
jne 0x140059ef7
mov dword [rsp + 0xd0], 0
jmp 0x140059f02
mov dword [rsp + 0xd0], 1
mov eax, dword [rsp + 0xd0]
mov dword [0x140074c4c], eax
movsx eax, byte [0x140074c5e]
and eax, dword [rsp + 0x30]
mov byte [0x140074c89], al
cmp dword [0x140074c60], 0
je 0x140059f6b
mov eax, dword [rsp + 0x28]
cmp dword [rsp + 0x48], eax
jne 0x140059f40
mov dword [rsp + 0xd4], 1
jmp 0x140059f4b
mov dword [rsp + 0xd4], 0
mov eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0xd4]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x140059f6b
mov dword [rsp + 0xd8], 1
jmp 0x140059f76
mov dword [rsp + 0xd8], 0
movzx eax, byte [0x140074c5f]
add eax, dword [rsp + 0xd8]
mov byte [0x140074c5f], al
mov eax, dword [0x140074c2c]
imul eax, dword [rsp + 0x30]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov dword [rsp + 0x54], eax
movsx eax, byte [0x140074c6c]
imul eax, dword [rsp + 0x30]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov dword [rsp + 0x54], eax
jmp 0x140059e4a
mov dword [rsp + 0x6c], 0xffffffb1
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x170], eax
mov eax, dword [rsp + 0x6c]
inc eax
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x170], 0
je 0x14005a03e
cmp dword [0x140074a64], 0
je 0x14005a01a
movzx eax, byte [rsp + 0x22]
test eax, eax
jne 0x14005a00d
movzx eax, byte [rsp + 0x24]
test eax, eax
je 0x14005a01a
cmp dword [rsp + 0x54], 0
je 0x14005a01a
mov dword [rsp + 0xdc], 1
jmp 0x14005a025
mov dword [rsp + 0xdc], 0
mov eax, dword [rsp + 0xdc]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
jmp 0x140059fcc
movsx eax, byte [0x140074a63]
imul eax, dword [rsp + 0x3c]
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov dword [rsp + 0x54], eax
cmp dword [0x140074c84], 0
je 0x14005a0a6
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x3c], eax
jne 0x14005a07a
mov dword [rsp + 0xe0], 1
jmp 0x14005a085
mov dword [rsp + 0xe0], 0
movsx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0xe0]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x14005a0a6
mov dword [rsp + 0xe4], 1
jmp 0x14005a0b1
mov dword [rsp + 0xe4], 0
mov eax, dword [rsp + 0xe4]
mov dword [0x140074a68], eax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [rsp + 0x70], 0x39
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x174], eax
mov eax, dword [rsp + 0x70]
dec eax
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x174], 0
je 0x14005a163
cmp dword [0x140074c84], 0
jne 0x14005a13c
mov eax, dword [rsp + 0x38]
cmp dword [rsp + 0x30], eax
jne 0x14005a10b
mov dword [rsp + 0xe8], 1
jmp 0x14005a116
mov dword [rsp + 0xe8], 0
movzx eax, byte [rsp + 0x20]
xor eax, dword [rsp + 0xe8]
movsx ecx, byte [0x140074c6f]
or eax, ecx
test eax, eax
jne 0x14005a13c
mov dword [rsp + 0xec], 0
jmp 0x14005a147
mov dword [rsp + 0xec], 1
mov eax, dword [rsp + 0xec]
mov ecx, dword [0x140074c68]
and ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
jmp 0x14005a0cc
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [0x140074a64]
shl eax, cl
test eax, eax
je 0x14005a184
cmp dword [rsp + 0x3c], 0
je 0x14005a184
mov byte [rsp + 0x4d], 1
jmp 0x14005a189
mov byte [rsp + 0x4d], 0
movzx eax, byte [rsp + 0x4d]
mov byte [0x140074b8f], al
movzx eax, byte [0x140074b8f]
cmp eax, dword [rsp + 0x38]
je 0x14005a29a
mov eax, dword [0x140074c70]
cmp dword [rsp + 0x28], eax
jne 0x14005a29a
mov eax, dword [rsp + 0x30]
cmp dword [0x140074c4c], eax
jne 0x14005a1ce
mov dword [rsp + 0xf0], 1
jmp 0x14005a1d9
mov dword [rsp + 0xf0], 0
mov eax, dword [rsp + 0xf0]
mov dword [0x140074c54], eax
mov eax, dword [rsp + 0x28]
mov ecx, dword [0x140074c3c]
sub ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x23]
add eax, ecx
test eax, eax
jne 0x14005a21b
movzx eax, byte [rsp + 0x24]
add eax, dword [0x140074c84]
test eax, eax
jne 0x14005a21b
mov dword [rsp + 0xf4], 0
jmp 0x14005a226
mov dword [rsp + 0xf4], 1
mov eax, dword [rsp + 0xf4]
mov ecx, dword [0x140074a6c]
add ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
mov eax, dword [rsp + 0x2c]
movzx ecx, al
mov eax, dword [0x140074c3c]
shr eax, cl
mov ecx, dword [0x140074a6c]
add ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x2c]
add ecx, eax
mov eax, ecx
cmp dword [0x140074c68], eax
je 0x14005a28a
mov eax, dword [0x140074c84]
movzx ecx, al
mov eax, dword [rsp + 0x28]
shl eax, cl
test eax, eax
jne 0x14005a28a
mov byte [rsp + 0x4e], 0
jmp 0x14005a28f
mov byte [rsp + 0x4e], 1
movzx eax, byte [rsp + 0x4e]
mov byte [0x140074c88], al
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c3c]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 5
div ecx
mov eax, edx
mov dword [rsp + 0x30], eax
mov eax, dword [0x140074c38]
imul eax, dword [rsp + 0x2c]
xor edx, edx
mov ecx, 5
div ecx
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_IsThreadAFiber]
mov dword [rsp + 0x74], 0x9c
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x178], eax
mov eax, dword [rsp + 0x74]
dec eax
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x178], 0
je 0x14005a4d6
movsx eax, byte [0x140074a62]
sub eax, dword [rsp + 0x34]
sub eax, dword [rsp + 0x40]
mov byte [0x140074c5c], al
cmp dword [0x140074c64], 0
je 0x14005a334
cmp dword [rsp + 0x2c], 0
je 0x14005a334
mov dword [rsp + 0xf8], 1
jmp 0x14005a33f
mov dword [rsp + 0xf8], 0
mov eax, dword [rsp + 0xf8]
mov ecx, dword [0x140074c2c]
or ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
xor edx, edx
mov eax, dword [rsp + 0x3c]
mov ecx, 3
div ecx
mov ecx, dword [0x140074c38]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
movzx eax, byte [0x140074c6d]
mov dword [rsp + 0x17c], eax
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 4
div ecx
mov eax, edx
mov ecx, dword [rsp + 0x17c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
movsx eax, byte [0x140074c6c]
movzx ecx, byte [rsp + 0x20]
shl eax, cl
mov ecx, dword [0x140074a68]
or ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
xor edx, edx
mov eax, dword [rsp + 0x28]
mov ecx, 5
div ecx
mov ecx, dword [0x140074c60]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
movsx eax, byte [rsp + 0x21]
movsx ecx, byte [0x140074a63]
cmp eax, ecx
jge 0x14005a3f3
mov dword [rsp + 0xfc], 1
jmp 0x14005a3fe
mov dword [rsp + 0xfc], 0
mov eax, dword [rsp + 0xfc]
cmp dword [rsp + 0x34], eax
je 0x14005a426
xor edx, edx
mov eax, dword [rsp + 0x40]
mov ecx, 5
div ecx
mov ecx, dword [0x140074c34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov eax, dword [0x140074c3c]
cmp dword [rsp + 0x38], eax
jne 0x14005a43f
mov dword [rsp + 0x100], 1
jmp 0x14005a44a
mov dword [rsp + 0x100], 0
movsx eax, byte [0x140074c6f]
movzx ecx, byte [rsp + 0x20]
mov edx, dword [rsp + 0x38]
shr edx, cl
mov ecx, edx
and eax, ecx
or eax, dword [rsp + 0x100]
mov ecx, dword [0x140074c34]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
movsx eax, byte [0x140074c5e]
movsx ecx, byte [rsp + 0x21]
imul eax, ecx
cdq
mov ecx, 5
idiv ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x34]
movzx ecx, al
mov eax, dword [0x140074c84]
shr eax, cl
mov ecx, dword [0x140074c4c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
movzx eax, byte [rsp + 0x23]
movzx ecx, al
mov eax, dword [0x140074c3c]
shl eax, cl
mov ecx, dword [0x140074c34]
and ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
jmp 0x14005a2df
mov dword [rsp + 0x78], 0xfffffdd6
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x180], eax
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x180], 0
je 0x14005a63b
cmp dword [rsp + 0x34], 0
jne 0x14005a513
cmp dword [rsp + 0x30], 0
je 0x14005a5bc
movsx eax, byte [0x140074c6f]
movzx ecx, byte [rsp + 0x22]
mov dword [rsp + 0x184], ecx
movzx edx, byte [rsp + 0x20]
movzx ecx, dl
mov edx, dword [rsp + 0x2c]
shl edx, cl
mov ecx, edx
mov edx, dword [rsp + 0x184]
or edx, ecx
mov ecx, edx
shl eax, cl
mov ecx, dword [0x140074a68]
and ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
movzx eax, byte [0x140074c89]
movzx ecx, byte [rsp + 0x24]
mov dword [rsp + 0x188], ecx
mov edx, dword [rsp + 0x40]
movzx ecx, dl
mov edx, dword [rsp + 0x188]
shl edx, cl
mov ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c50]
mov edx, dword [rsp + 0x30]
shl edx, cl
mov ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c84]
or ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
movzx eax, byte [0x140074c5c]
sub eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x38]
shl eax, cl
movzx ecx, byte [0x140074b8f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
mov eax, dword [rsp + 0x54]
cmp dword [rsp + 0x38], eax
jne 0x14005a5d3
mov dword [rsp + 0x104], 1
jmp 0x14005a5de
mov dword [rsp + 0x104], 0
mov eax, dword [rsp + 0x104]
mov ecx, dword [0x140074c84]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074a68]
add ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
mov eax, dword [0x140074c38]
imul eax, dword [rsp + 0x30]
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov dword [rsp + 0x40], eax
movzx eax, byte [0x140074b8e]
movsx ecx, byte [rsp + 0x21]
shl eax, cl
mov ecx, dword [0x140074c34]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
jmp 0x14005a4de
movzx eax, byte [rsp + 0x22]
cmp eax, dword [rsp + 0x28]
ja 0x14005a64f
cmp dword [0x140074c70], 0
je 0x14005a6c2
movzx eax, byte [rsp + 0x20]
cmp eax, dword [rsp + 0x54]
jne 0x14005a667
mov dword [rsp + 0x108], 1
jmp 0x14005a672
mov dword [rsp + 0x108], 0
movsx eax, byte [0x140074c6f]
or eax, dword [rsp + 0x108]
test eax, eax
je 0x14005a6a3
mov eax, dword [0x140074a68]
mov ecx, dword [rsp + 0x30]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x14005a6a3
mov dword [rsp + 0x10c], 1
jmp 0x14005a6ae
mov dword [rsp + 0x10c], 0
movsx eax, byte [0x140074a62]
add eax, dword [rsp + 0x10c]
mov byte [0x140074a62], al
mov eax, dword [rsp + 0x34]
movzx ecx, al
mov eax, dword [0x140074c3c]
shl eax, cl
test eax, eax
je 0x14005a6fb
cmp dword [rsp + 0x48], 0
je 0x14005a6fb
mov eax, dword [0x140074a64]
mov ecx, dword [rsp + 0x30]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x14005a6fb
mov dword [rsp + 0x110], 1
jmp 0x14005a706
mov dword [rsp + 0x110], 0
movzx eax, byte [0x140074b8e]
add eax, dword [rsp + 0x110]
mov byte [0x140074b8e], al
mov eax, dword [rsp + 0x34]
mov ecx, dword [0x140074a64]
and ecx, eax
mov eax, ecx
test eax, eax
jne 0x14005a752
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x48]
sub ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074b8f]
and eax, ecx
test eax, eax
jne 0x14005a752
mov dword [rsp + 0x114], 0
jmp 0x14005a75d
mov dword [rsp + 0x114], 1
movsx eax, byte [0x140074c5e]
and eax, dword [rsp + 0x114]
mov byte [0x140074c5e], al
movzx eax, byte [0x140074b8f]
movzx ecx, byte [rsp + 0x23]
movzx edx, byte [rsp + 0x23]
xor ecx, edx
or ecx, dword [rsp + 0x2c]
sub eax, ecx
mov dword [0x140074c4c], eax
movzx eax, byte [0x140074c6d]
movzx ecx, byte [rsp + 0x22]
add eax, ecx
movzx ecx, byte [rsp + 0x24]
add eax, ecx
mov ecx, dword [0x140074c30]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
movzx eax, byte [0x140074b8f]
movsx ecx, byte [rsp + 0x21]
mov edx, dword [rsp + 0x48]
shl edx, cl
mov ecx, edx
mov edx, dword [rsp + 0x40]
and edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14005a7dc
mov byte [rsp + 0x4f], 1
jmp 0x14005a7e1
mov byte [rsp + 0x4f], 0
movzx eax, byte [rsp + 0x4f]
mov byte [0x140074b8f], al
movsx eax, byte [0x140074c5e]
add eax, dword [rsp + 0x28]
test eax, eax
je 0x14005a820
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
mov ecx, dword [0x140074c70]
sar eax, cl
test eax, eax
je 0x14005a820
mov dword [rsp + 0x118], 1
jmp 0x14005a82b
mov dword [rsp + 0x118], 0
movzx eax, byte [0x140074c6d]
add eax, dword [rsp + 0x118]
mov byte [0x140074c6d], al
cmp dword [0x140074c64], 0
jne 0x14005a874
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x28]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x54]
shr eax, cl
movsx ecx, byte [0x140074c5e]
and eax, ecx
test eax, eax
jne 0x14005a874
mov dword [rsp + 0x11c], 0
jmp 0x14005a87f
mov dword [rsp + 0x11c], 1
movzx eax, byte [0x140074b8f]
or eax, dword [rsp + 0x11c]
mov byte [0x140074b8f], al
mov dword [rsp + 0x7c], 0xffffffd3
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x18c], eax
mov eax, dword [rsp + 0x7c]
inc eax
mov dword [rsp + 0x7c], eax
cmp dword [rsp + 0x18c], 0
je 0x14005a92a
mov eax, dword [rsp + 0x3c]
cmp dword [0x140074c3c], eax
jne 0x14005a8d3
mov dword [rsp + 0x120], 1
jmp 0x14005a8de
mov dword [rsp + 0x120], 0
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
sub eax, dword [0x140074c70]
cmp dword [rsp + 0x120], eax
jne 0x14005a906
mov dword [rsp + 0x124], 1
jmp 0x14005a911
mov dword [rsp + 0x124], 0
movsx eax, byte [0x140074c90]
sub eax, dword [rsp + 0x124]
mov byte [0x140074c90], al
jmp 0x14005a89b
cmp dword [0x140074c50], 0
je 0x14005a95f
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x14005a95f
mov eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
xor eax, dword [0x140074c4c]
test eax, eax
je 0x14005a95f
mov dword [rsp + 0x128], 1
jmp 0x14005a96a
mov dword [rsp + 0x128], 0
movsx eax, byte [0x140074c5d]
or eax, dword [rsp + 0x128]
mov byte [0x140074c5d], al
mov eax, dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [0x140074c38]
sar eax, cl
movzx ecx, byte [rsp + 0x20]
mov edx, dword [rsp + 0x28]
sub edx, ecx
mov ecx, edx
shl eax, cl
mov ecx, dword [0x140074c34]
sar eax, cl
movsx ecx, byte [0x140074a63]
add ecx, eax
mov eax, ecx
mov byte [0x140074a63], al
movzx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c48]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c74]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
xor edx, edx
mov eax, dword [rsp + 0x40]
mov ecx, 4
div ecx
mov eax, edx
mov ecx, dword [0x140074c68]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x44], eax
mov eax, 0x83
mov word [rsp + 0x58], ax
movsx eax, word [rsp + 0x58]
mov dword [rsp + 0x190], eax
movzx eax, word [rsp + 0x58]
dec ax
mov word [rsp + 0x58], ax
cmp dword [rsp + 0x190], 0
je 0x14005aa65
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
test eax, eax
je 0x14005aa44
movzx eax, byte [rsp + 0x24]
test eax, eax
je 0x14005aa44
mov dword [rsp + 0x12c], 1
jmp 0x14005aa4f
mov dword [rsp + 0x12c], 0
movzx eax, byte [0x140074b8e]
add eax, dword [rsp + 0x12c]
mov byte [0x140074c6f], al
jmp 0x14005a9fb
movzx eax, byte [rsp + 0x23]
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [0x140074a68]
shr eax, cl
mov ecx, dword [0x140074c4c]
or ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
movzx eax, byte [0x140074b8e]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
test eax, eax
jne 0x14005aaad
cmp dword [rsp + 0x30], 0
jne 0x14005aaad
mov byte [rsp + 0x50], 0
jmp 0x14005aab2
mov byte [rsp + 0x50], 1
movzx eax, byte [rsp + 0x50]
mov byte [0x140074c5f], al
mov eax, dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [0x140074c80]
shr eax, cl
mov ecx, dword [0x140074c60]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [0x140074a64]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c48], eax
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c38]
imul ecx, eax
mov eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x28], eax
movsx eax, byte [rsp + 0x21]
cmp dword [0x140074c54], eax
jae 0x14005ab27
mov dword [rsp + 0x134], 1
jmp 0x14005ab32
mov dword [rsp + 0x134], 0
movzx eax, byte [rsp + 0x24]
cmp eax, dword [0x140074c74]
je 0x14005ab4c
mov dword [rsp + 0x130], 1
jmp 0x14005ab57
mov dword [rsp + 0x130], 0
mov eax, dword [rsp + 0x130]
cmp dword [rsp + 0x134], eax
jge 0x14005abdd
movsx eax, byte [rsp + 0x21]
test eax, eax
je 0x14005abdd
mov eax, dword [0x140074c50]
cmp dword [rsp + 0x40], eax
jne 0x14005ab89
mov dword [rsp + 0x138], 1
jmp 0x14005ab94
mov dword [rsp + 0x138], 0
mov eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x38]
add ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [0x140074c68]
sar eax, cl
and eax, dword [rsp + 0x138]
mov ecx, dword [0x140074c74]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
movzx eax, byte [0x140074c5c]
imul eax, dword [rsp + 0x3c]
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov dword [rsp + 0x2c], eax
mov eax, 0xdf
mov word [rsp + 0x5c], ax
movsx eax, word [rsp + 0x5c]
mov dword [rsp + 0x194], eax
movzx eax, word [rsp + 0x5c]
dec ax
mov word [rsp + 0x5c], ax
cmp dword [rsp + 0x194], 0
je 0x14005ac4d
movsx eax, byte [0x140074c6c]
test eax, eax
je 0x14005ac2c
mov eax, dword [rsp + 0x28]
cmp dword [rsp + 0x44], eax
jne 0x14005ac2c
mov dword [rsp + 0x13c], 1
jmp 0x14005ac37
mov dword [rsp + 0x13c], 0
movzx eax, byte [0x140074c8b]
sub eax, dword [rsp + 0x13c]
mov byte [0x140074c8b], al
jmp 0x14005abe7
movsx eax, byte [0x140074a62]
and eax, dword [rsp + 0x3c]
mov dword [0x140074c64], eax
movzx eax, byte [0x140074b8f]
mov dword [rsp + 0x198], eax
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 3
div ecx
mov ecx, dword [rsp + 0x198]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
movsx eax, byte [0x140074a63]
imul eax, dword [rsp + 0x2c]
xor edx, edx
mov ecx, 5
div ecx
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x30], eax
jne 0x14005acb8
mov dword [rsp + 0x140], 1
jmp 0x14005acc3
mov dword [rsp + 0x140], 0
mov eax, dword [rsp + 0x140]
mov ecx, dword [0x140074c4c]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074a64]
or ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
movsx eax, byte [0x140074a63]
test eax, eax
jne 0x14005ad17
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074c6f]
mov edx, dword [rsp + 0x3c]
add edx, ecx
mov ecx, edx
and eax, ecx
test eax, eax
jne 0x14005ad17
mov byte [rsp + 0x51], 0
jmp 0x14005ad1c
mov byte [rsp + 0x51], 1
movzx eax, byte [rsp + 0x51]
mov byte [0x140074b8f], al
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c54]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 5
div ecx
mov eax, edx
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c2c]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c34]
add ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
cmp dword [0x140074c54], 0
jne 0x14005ad95
movsx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x44]
and ecx, eax
mov eax, ecx
test eax, eax
jne 0x14005ad95
movsx eax, byte [rsp + 0x21]
test eax, eax
jne 0x14005ad95
mov byte [rsp + 0x52], 0
jmp 0x14005ad9a
mov byte [rsp + 0x52], 1
movzx eax, byte [rsp + 0x52]
mov byte [0x140074b8f], al
mov dword [rsp + 0x64], 0xce
mov dword [rsp + 0x64], 0xe
jmp 0x14005adc1
mov eax, dword [rsp + 0x64]
inc eax
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0x142
jge 0x14005b087
movzx eax, byte [rsp + 0x24]
cmp dword [0x140074c64], eax
je 0x14005ade9
mov dword [rsp + 0x148], 1
jmp 0x14005adf4
mov dword [rsp + 0x148], 0
movzx eax, byte [rsp + 0x23]
test eax, eax
je 0x14005ae15
movsx eax, byte [0x140074c6e]
test eax, eax
je 0x14005ae15
mov dword [rsp + 0x144], 1
jmp 0x14005ae20
mov dword [rsp + 0x144], 0
mov eax, dword [rsp + 0x144]
cmp dword [rsp + 0x148], eax
je 0x14005af9e
movsx eax, byte [0x140074a63]
test eax, eax
jne 0x14005ae66
movzx eax, byte [rsp + 0x23]
test eax, eax
jne 0x14005ae66
movzx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov eax, ecx
test eax, eax
jne 0x14005ae66
mov dword [rsp + 0x14c], 0
jmp 0x14005ae71
mov dword [rsp + 0x14c], 1
mov eax, dword [rsp + 0x14c]
mov ecx, dword [0x140074c30]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
mov eax, dword [0x140074c28]
imul eax, dword [rsp + 0x28]
xor edx, edx
mov ecx, 5
div ecx
mov dword [rsp + 0x30], eax
movsx eax, byte [0x140074c5e]
test eax, eax
jne 0x14005aebf
cmp dword [rsp + 0x3c], 0
jne 0x14005aebf
mov dword [rsp + 0x150], 0
jmp 0x14005aeca
mov dword [rsp + 0x150], 1
movzx eax, byte [0x140074b8e]
sub eax, dword [rsp + 0x150]
mov byte [0x140074b8e], al
movsx eax, byte [0x140074c5e]
or eax, dword [rsp + 0x3c]
test eax, eax
jne 0x14005af03
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x14005af03
mov dword [rsp + 0x154], 0
jmp 0x14005af0e
mov dword [rsp + 0x154], 1
mov eax, dword [rsp + 0x154]
mov ecx, dword [0x140074a68]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
movsx eax, byte [0x140074c6e]
movzx ecx, byte [rsp + 0x20]
or eax, ecx
test eax, eax
jne 0x14005af4d
movzx eax, byte [rsp + 0x24]
test eax, eax
jne 0x14005af4d
mov dword [rsp + 0x158], 0
jmp 0x14005af58
mov dword [rsp + 0x158], 1
mov eax, dword [rsp + 0x158]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
movzx eax, byte [0x140074c5c]
mov dword [rsp + 0x19c], eax
movzx ecx, byte [rsp + 0x24]
mov eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x19c]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
cmp dword [0x140074c54], 0
jne 0x14005afc4
movzx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x20]
add eax, ecx
test eax, eax
jne 0x14005afc4
mov dword [rsp + 0x15c], 0
jmp 0x14005afcf
mov dword [rsp + 0x15c], 1
mov eax, dword [rsp + 0x15c]
mov ecx, dword [0x140074c54]
or ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
cmp dword [0x140074c50], 0
je 0x14005b013
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x48]
and ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x20]
or eax, ecx
test eax, eax
je 0x14005b013
mov dword [rsp + 0x160], 1
jmp 0x14005b01e
mov dword [rsp + 0x160], 0
mov eax, dword [rsp + 0x160]
mov ecx, dword [0x140074c84]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
movsx eax, byte [0x140074c5d]
test eax, eax
je 0x14005b063
movzx eax, byte [rsp + 0x23]
test eax, eax
jne 0x14005b056
movsx eax, byte [rsp + 0x21]
add eax, dword [rsp + 0x44]
test eax, eax
je 0x14005b063
mov dword [rsp + 0x164], 1
jmp 0x14005b06e
mov dword [rsp + 0x164], 0
movzx eax, byte [0x140074c5f]
add eax, dword [rsp + 0x164]
mov byte [0x140074c5f], al
jmp 0x14005adb7
call qword [sym.imp.ADVAPI32.dll_RegDisablePredefinedCacheEx]
movzx edx, byte [0x140074a63]
movzx ecx, byte [0x140074c68]
call fcn.1400582f0
mov eax, dword [rsp + 0x40]
add rsp, 0x1a8
ret