Function at 0x140001010
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended
Get file attributes
Get hostname
Impersonate user

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x2b8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x220], xmm6
mov qword [rbp + 0x218], 0xfffffffffffffffe
mov r15, rdx
mov r13d, ecx
mov eax, dword [0x14002ac80]
mov ecx, dword [0x14002ac84]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete bl
cmp ecx, 0xa
setl al
or al, bl
cmp r13d, 4
jg 0x140001082
test al, al
jne 0x14000112b
nop word cs:[rax + rax]
nop dword [rax + rax]
jmp 0x140001080
test al, al
je 0x1400010e3
xorps xmm0, xmm0
movaps xmmword [rbp + 0x60], xmm0
movaps xmmword [rbp + 0x50], xmm0
lea rsi, [rbp + 0x50]
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x28], 0xf
lea r8, section..data
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rdx, qword [r15 + 8]
mov rcx, rsi
call fcn.140010864
mov ebx, dword [0x14002ac80]
mov ecx, dword [0x14002ac84]
lea edx, [rbx - 1]
imul edx, ebx
and edx, 1
cmp ecx, 0xa
jl 0x140001127
test edx, edx
je 0x140001127
xorps xmm0, xmm0
movaps xmmword [rbp + 0x60], xmm0
movaps xmmword [rbp + 0x50], xmm0
lea rsi, [rbp + 0x50]
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x28], 0xf
lea r8, section..data
xor ecx, ecx
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rdx, qword [r15 + 8]
mov rcx, rsi
call fcn.140010864
jmp 0x140001086
test eax, eax
je 0x140001142
cmp ecx, 0xa
jl 0x140001c59
test edx, edx
je 0x140001c59
nop dword [rax]
jmp 0x140001140
lea rcx, [rbp + 0xb8]
call fcn.140003790
lea r12, [rbp + 0x98]
mov rcx, r12
call fcn.140003790
mov rdx, qword [r15 + 0x10]
lea rcx, [rbp + 0x78]
call fcn.140003a10
xor ebx, ebx
lea rcx, [rbp + 0x78]
mov dx, 0x5c
xor r8d, r8d
call fcn.1400044f0
cmp rax, 0xffffffffffffffff
je 0x1400019ef
mov r14, rax
mov eax, dword [0x14002ac88]
mov ecx, dword [0x14002ac8c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov eax, 0xd92ac0de
mov ebx, 0x76a42179
cmove ebx, eax
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl ebx, eax
mov eax, 0xeed38a68
mov rcx, qword [rbp + 0x88]
mov edi, 0x59c06002
cmp eax, 0x59c06001
jg 0x140001210
cmp eax, 0xd92ac0de
je 0x140001230
cmp eax, 0xeed38a68
jne 0x1400011d0
movzx edx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov eax, 0x76a42179
cmovne eax, edi
test dl, dl
cmovne eax, edi
jmp 0x1400011d0
cmp eax, 0x59c06002
je 0x140001225
cmp eax, 0x76a42179
jne 0x1400011d0
mov eax, 0x59c06002
jmp 0x1400011d0
mov qword [rbp + 0xe8], rcx
mov eax, ebx
jmp 0x1400011d0
mov rax, qword [rbp + 0xe8]
xor ebx, ebx
test r14, r14
je 0x1400019ef
add rax, 0xffffffffffffffff
cmp r14, rax
je 0x1400019ef
mov dword [rbp + 0x1bc], r13d
lea rcx, [rbp + 0x78]
lea rdi, [rbp + 0xe8]
mov rdx, rdi
xor r8d, r8d
mov r9, r14
call fcn.1400046b0
mov eax, dword [0x14002ac90]
mov ecx, dword [0x14002ac94]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov edx, 0x8900671b
mov eax, 0xaa85cf84
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl eax, edx
mov edx, 0x867127a3
mov ecx, 0x43ec9f3c
lea r13, [rbp + 0xb8]
nop word cs:[rax + rax]
cmp edx, 0xaa85cf83
jg 0x1400012e0
cmp edx, 0x867127a3
je 0x1400012f4
cmp edx, 0x8900671b
jne 0x1400012c0
jmp 0x140001318
cmp edx, 0xaa85cf84
je 0x140001311
cmp edx, 0x43ec9f3c
jne 0x1400012c0
mov edx, eax
jmp 0x1400012c0
movzx ebx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov edx, 0xaa85cf84
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x1400012c0
mov edx, 0x43ec9f3c
jmp 0x1400012c0
mov qword [rbp + 0x1c0], rdi
mov eax, 0x44e44e1
mov esi, 0xea39b124
jmp 0x140001340
mov rcx, r13
mov rdx, rdi
call fcn.140009650
mov eax, 0xea39b124
nop dword [rax + rax]
cmp eax, 0xe0ce04cd
je 0x14000132b
cmp eax, 0xea39b124
je 0x140001369
cmp eax, 0x44e44e1
jne 0x140001340
mov rax, qword [rbp + 0x1c0]
cmp rax, r13
mov eax, 0xe0ce04cd
cmove eax, esi
jmp 0x140001340
lea rcx, [rbp + 0xe8]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
nop word cs:[rax + rax]
nop
cmp edx, 0x179fc2dc
jg 0x140001400
cmp edx, 0xc655f67e
je 0x14000141b
cmp edx, 0xab4f85e
jne 0x1400013c0
movzx ebx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x1400013c0
cmp edx, 0x179fc2dd
je 0x140001414
cmp edx, 0x47373f2c
jne 0x1400013c0
mov edx, eax
jmp 0x1400013c0
mov edx, 0x47373f2c
jmp 0x1400013c0
add r14, 1
lea rcx, [rbp + 0x78]
lea r13, [rbp + 0xe8]
mov rdx, r13
mov r8, r14
mov r9, 0xffffffffffffffff
call fcn.1400046b0
cmp dword [0x14002aca0], 0xa
jl 0x14000145c
mov eax, dword [0x14002aca4]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x1400016d9
jmp 0x14000145c
mov eax, dword [0x14002ac90]
mov ecx, dword [0x14002ac94]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov edx, 0x8900671b
mov eax, 0xaa85cf84
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl eax, edx
mov edx, 0x867127a3
mov ecx, 0x43ec9f3c
nop dword [rax]
cmp edx, 0xaa85cf83
jg 0x1400014c0
cmp edx, 0x867127a3
je 0x1400014d4
cmp edx, 0x8900671b
jne 0x1400014a0
jmp 0x1400014f8
cmp edx, 0xaa85cf84
je 0x1400014f1
cmp edx, 0x43ec9f3c
jne 0x1400014a0
mov edx, eax
jmp 0x1400014a0
movzx ebx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov edx, 0xaa85cf84
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x1400014a0
mov edx, 0x43ec9f3c
jmp 0x1400014a0
mov qword [rbp + 0x1c0], r13
mov eax, 0x44e44e1
mov esi, 0xea39b124
jmp 0x140001520
mov rcx, r12
mov rdx, r13
call fcn.140009650
mov eax, 0xea39b124
nop dword [rax + rax]
cmp eax, 0xe0ce04cd
je 0x14000150b
cmp eax, 0xea39b124
je 0x140001549
cmp eax, 0x44e44e1
jne 0x140001520
mov rax, qword [rbp + 0x1c0]
cmp rax, r12
mov eax, 0xe0ce04cd
cmove eax, esi
jmp 0x140001520
lea rcx, [rbp + 0xe8]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
nop word cs:[rax + rax]
nop
cmp edx, 0x179fc2dc
jg 0x1400015e0
cmp edx, 0xc655f67e
je 0x1400015fb
cmp edx, 0xab4f85e
jne 0x1400015a0
movzx ebx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x1400015a0
cmp edx, 0x179fc2dd
je 0x1400015f4
cmp edx, 0x47373f2c
jne 0x1400015a0
mov edx, eax
jmp 0x1400015a0
mov edx, 0x47373f2c
jmp 0x1400015a0
mov eax, dword [0x14002aca8]
mov r8d, dword [0x14002acac]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov eax, 0xc34b6254
mov ebx, 0x3555b170
cmove ebx, eax
cmp r8d, 0xa
setl byte [rbp + 0x1c0]
cmovl ebx, eax
mov eax, 0x9c8d40e
mov rsi, qword [rbp + 0xc8]
mov edi, 0x7ed8c93f
nop word cs:[rax + rax]
nop
cmp eax, 0x3555b16f
jg 0x140001690
cmp eax, 0xc34b6254
je 0x1400016b0
cmp eax, 0x9c8d40e
jne 0x140001650
movzx ecx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov eax, 0x3555b170
cmovne eax, edi
test cl, cl
cmovne eax, edi
jmp 0x140001650
cmp eax, 0x3555b170
je 0x1400016a9
cmp eax, 0x7ed8c93f
jne 0x140001650
mov qword [rbp + 0xe8], rsi
mov eax, ebx
jmp 0x140001650
mov eax, 0x7ed8c93f
jmp 0x140001650
mov rax, qword [rbp + 0xe8]
cmp dword [0x14002aca0], 0xa
jl 0x14000193c
mov ecx, dword [0x14002aca4]
lea edi, [rcx - 1]
imul edi, ecx
and edi, 1
je 0x14000193c
mov eax, dword [0x14002ac90]
mov ecx, dword [0x14002ac94]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov edx, 0x8900671b
mov eax, 0xaa85cf84
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl eax, edx
mov edx, 0x867127a3
mov ecx, 0x43ec9f3c
jmp 0x140001740
movzx ebx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov edx, 0xaa85cf84
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
nop word cs:[rax + rax]
cmp edx, 0xaa85cf83
jg 0x140001760
cmp edx, 0x867127a3
je 0x14000171b
cmp edx, 0x8900671b
jne 0x140001740
jmp 0x14000177b
cmp edx, 0xaa85cf84
je 0x140001774
cmp edx, 0x43ec9f3c
jne 0x140001740
mov edx, eax
jmp 0x140001740
mov edx, 0x43ec9f3c
jmp 0x140001740
mov qword [rbp + 0x1c0], r13
mov eax, 0x44e44e1
mov esi, 0xea39b124
jmp 0x1400017a0
mov rcx, r12
mov rdx, r13
call fcn.140009650
mov eax, 0xea39b124
nop
cmp eax, 0xe0ce04cd
je 0x14000178e
cmp eax, 0xea39b124
je 0x1400017c9
cmp eax, 0x44e44e1
jne 0x1400017a0
mov rax, qword [rbp + 0x1c0]
cmp rax, r12
mov eax, 0xe0ce04cd
cmove eax, esi
jmp 0x1400017a0
lea rcx, [rbp + 0xe8]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
nop word cs:[rax + rax]
nop
cmp edx, 0x179fc2dc
jg 0x140001860
cmp edx, 0xc655f67e
je 0x14000187b
cmp edx, 0xab4f85e
jne 0x140001820
movzx ebx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140001820
cmp edx, 0x179fc2dd
je 0x140001874
cmp edx, 0x47373f2c
jne 0x140001820
mov edx, eax
jmp 0x140001820
mov edx, 0x47373f2c
jmp 0x140001820
mov eax, dword [0x14002aca8]
mov ecx, dword [0x14002acac]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov eax, 0xc34b6254
mov ebx, 0x3555b170
cmove ebx, eax
cmp ecx, 0xa
setl byte [rbp + 0x1c0]
cmovl ebx, eax
mov eax, 0x9c8d40e
mov rcx, qword [rbp + 0xc8]
mov edi, 0x7ed8c93f
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x3555b16f
jg 0x140001910
cmp eax, 0xc34b6254
je 0x140001930
cmp eax, 0x9c8d40e
jne 0x1400018d0
movzx edx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov eax, 0x3555b170
cmovne eax, edi
test dl, dl
cmovne eax, edi
jmp 0x1400018d0
cmp eax, 0x3555b170
je 0x140001929
cmp eax, 0x7ed8c93f
jne 0x1400018d0
mov qword [rbp + 0xe8], rcx
mov eax, ebx
jmp 0x1400018d0
mov eax, 0x7ed8c93f
jmp 0x1400018d0
mov rax, qword [rbp + 0xe8]
jmp 0x14000145c
test rax, rax
mov r13d, dword [rbp + 0x1bc]
je 0x1400019ed
test dl, 1
sete byte [rbp + 0x1e0]
cmp r8d, 0xa
setl byte [rbp + 0x1c0]
mov eax, 0x9c8d40e
mov rcx, qword [rbp + 0xa8]
mov edi, 0x7ed8c93f
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0x3555b16f
jg 0x1400019c0
cmp eax, 0xc34b6254
je 0x1400019e0
cmp eax, 0x9c8d40e
jne 0x140001980
movzx edx, byte [rbp + 0x1e0]
cmp byte [rbp + 0x1c0], 0
mov eax, 0x3555b170
cmovne eax, edi
test dl, dl
cmovne eax, edi
jmp 0x140001980
cmp eax, 0x3555b170
je 0x1400019d9
cmp eax, 0x7ed8c93f
jne 0x140001980
mov qword [rbp + 0xe8], rcx
mov eax, ebx
jmp 0x140001980
mov eax, 0x7ed8c93f
jmp 0x140001980
cmp qword [rbp + 0xe8], 0
setne bl
jmp 0x1400019ef
xor ebx, ebx
lea rcx, [rbp + 0x78]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1c0]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0xe8]
cmovl eax, edx
mov edx, 0xab4f85e
mov edi, 0x47373f2c
nop dword [rax + rax]
cmp edx, 0x179fc2dc
jg 0x140001a80
cmp edx, 0xc655f67e
je 0x140001a9b
cmp edx, 0xab4f85e
jne 0x140001a40
movzx ecx, byte [rbp + 0x1c0]
cmp byte [rbp + 0xe8], 0
mov edx, 0x179fc2dd
cmovne edx, edi
test cl, cl
cmovne edx, edi
jmp 0x140001a40
cmp edx, 0x179fc2dd
je 0x140001a94
cmp edx, 0x47373f2c
jne 0x140001a40
mov edx, eax
jmp 0x140001a40
mov edx, 0x47373f2c
jmp 0x140001a40
test bl, bl
je 0x140001ad6
mov rdx, qword [r15 + 0x18]
lea rcx, [rbp + 0x1c0]
call fcn.140003a10
cmp dword [0x14002ac84], 0xa
jl 0x140001c76
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140001c9a
jmp 0x140001c76
lea rcx, str._WZe_be
call fcn.140003bb0
lea rcx, [rbp + 0x98]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1c0]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0xe8]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
nop
cmp edx, 0x179fc2dc
jg 0x140001b70
cmp edx, 0xc655f67e
je 0x140001b8b
cmp edx, 0xab4f85e
jne 0x140001b30
movzx ebx, byte [rbp + 0x1c0]
cmp byte [rbp + 0xe8], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140001b30
cmp edx, 0x179fc2dd
je 0x140001b84
cmp edx, 0x47373f2c
jne 0x140001b30
mov edx, eax
jmp 0x140001b30
mov edx, 0x47373f2c
jmp 0x140001b30
lea rcx, [rbp + 0xb8]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x98]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0xe8]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
nop word [rax + rax]
cmp edx, 0x179fc2dc
jg 0x140001c20
cmp edx, 0xc655f67e
je 0x140001c3b
cmp edx, 0xab4f85e
jne 0x140001be0
movzx ebx, byte [rbp + 0x98]
cmp byte [rbp + 0xe8], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140001be0
cmp edx, 0x179fc2dd
je 0x140001c34
cmp edx, 0x47373f2c
jne 0x140001be0
mov edx, eax
jmp 0x140001be0
mov edx, 0x47373f2c
jmp 0x140001be0
mov eax, dword [0x14002ac80]
mov ecx, dword [0x14002ac84]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
cmp ecx, 0xa
jge 0x140001134
xor eax, eax
movaps xmm6, xmmword [rbp + 0x220]
add rsp, 0x2b8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, qword [r15 + 0x20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp dword [0x14002ac84], 0xa
jl 0x140001ca6
mov ecx, dword [0x14002ac80]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x140001ca6
mov rcx, qword [r15 + 0x20]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x140001c76
test al, 0x10
jne 0x140001da1
lea rcx, [rbp + 0x1e0]
call fcn.140003790
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rsi, qword [r15 + 0x20]
mov ecx, dword [0x14002acb0]
mov edx, dword [0x14002acb4]
lea ebx, [rcx - 1]
imul ebx, ecx
test bl, 1
sete byte [rbp + 0x178]
cmp edx, 0xa
setl byte [rbp + 0x198]
mov rbx, rax
mov eax, 0xe449cbac
mov r14d, 0x135b5d78
mov r12d, 0xe93b2798
nop
cmp eax, 0xe93b2797
jg 0x140001d40
cmp eax, 0xa1ec9b1c
je 0x140001d8c
cmp eax, 0xe449cbac
jne 0x140001d00
movzx ecx, byte [rbp + 0x178]
cmp byte [rbp + 0x198], 0
mov eax, 0xa1ec9b1c
cmovne eax, r14d
test cl, cl
cmovne eax, r14d
jmp 0x140001d00
cmp eax, 0xe93b2798
je 0x140001e5b
cmp eax, 0x135b5d78
jne 0x140001d00
mov rcx, rbx
mov rdx, rsi
call fcn.14000c9e0
mov qword [rbp + 0xe8], rax
mov eax, dword [0x14002acb0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa1ec9b1c
cmove eax, r12d
cmp dword [0x14002acb4], 0xa
cmovl eax, r12d
jmp 0x140001d00
mov rcx, rbx
mov rdx, rsi
call fcn.14000c9e0
mov eax, 0x135b5d78
jmp 0x140001d00
lea rcx, [0x14002a030]
call fcn.140003bb0
lea rcx, [rbp + 0x1c0]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x1e0]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0xe8]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
nop dword [rax]
cmp edx, 0x179fc2dc
jg 0x140001e40
cmp edx, 0xc655f67e
je 0x140001ae2
cmp edx, 0xab4f85e
jne 0x140001e00
movzx ebx, byte [rbp + 0x1e0]
cmp byte [rbp + 0xe8], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140001e00
cmp edx, 0x179fc2dd
je 0x140001e54
cmp edx, 0x47373f2c
jne 0x140001e00
mov edx, eax
jmp 0x140001e00
mov edx, 0x47373f2c
jmp 0x140001e00
mov rax, qword [rbp + 0xe8]
test rax, rax
je 0x140001e92
cmp dword [0x14002ac84], 0xa
jl 0x140002252
mov ecx, dword [0x14002ac80]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x140002252
nop dword [rax]
jmp 0x140001e90
mov dword [rbp + 0x1bc], r13d
mov r13d, 4
lea r14, [rbp + 0xe8]
mov esi, 0xc655f67e
mov ebx, 0x47373f2c
jmp 0x140001eb6
add r13d, 1
cmp dword [0x14002ac84], 0xa
jl 0x140001ed4
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140002240
cmp r13d, dword [rbp + 0x1bc]
jge 0x14000226b
mov eax, r13d
mov r12, qword [r15 + rax*8]
lea rcx, [rbp + 0x178]
lea rdx, [rbp + 0x1e0]
lea r8, [0x140023e7a]
call fcn.140003d80
cmp dword [0x14002ac84], 0xa
jl 0x140001f20
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140002250
lea rcx, [rbp + 0x178]
mov rdx, r12
call fcn.140008090
lea rdi, [rbp + 0x198]
mov rcx, rdi
mov rdx, rax
call fcn.1400081e0
mov rcx, rdi
lea rdx, [0x140023e7e]
call fcn.140008090
mov rcx, r14
mov rdx, rax
call fcn.1400081e0
mov eax, dword [0x14002ac90]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp + 0x200]
mov ecx, dword [0x14002ac94]
mov eax, 0xaa85cf84
mov edx, 0x8900671b
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x210]
cmovl eax, edx
mov ecx, 0x867127a3
nop word cs:[rax + rax]
cmp ecx, 0xaa85cf83
jg 0x140001fc0
cmp ecx, 0x867127a3
je 0x140001fd4
cmp ecx, 0x8900671b
jne 0x140001fa0
jmp 0x140001ffd
cmp ecx, 0xaa85cf84
je 0x140001ff6
cmp ecx, 0x43ec9f3c
jne 0x140001fa0
mov ecx, eax
jmp 0x140001fa0
movzx edx, byte [rbp + 0x200]
cmp byte [rbp + 0x210], 0
mov ecx, 0xaa85cf84
mov edi, 0x43ec9f3c
cmovne ecx, edi
test dl, dl
cmovne ecx, edi
jmp 0x140001fa0
mov ecx, 0x43ec9f3c
jmp 0x140001fa0
mov qword [rbp + 0x210], r14
mov eax, 0x44e44e1
jmp 0x140002020
lea rcx, [rbp + 0x1e0]
mov rdx, r14
call fcn.140009650
mov eax, 0xea39b124
nop
cmp eax, 0xe0ce04cd
je 0x14000200b
cmp eax, 0xea39b124
je 0x140002055
cmp eax, 0x44e44e1
jne 0x140002020
mov rax, qword [rbp + 0x210]
lea rcx, [rbp + 0x1e0]
cmp rax, rcx
mov eax, 0xe0ce04cd
mov ecx, 0xea39b124
cmove eax, ecx
jmp 0x140002020
mov rcx, r14
call fcn.140007310
mov eax, dword [0x14002ac98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp + 0x200]
mov ecx, dword [0x14002ac9c]
mov eax, 0x179fc2dd
cmove eax, esi
cmp ecx, 0xa
setl byte [rbp + 0x210]
cmovl eax, esi
mov ecx, 0xab4f85e
nop word cs:[rax + rax]
nop dword [rax]
cmp ecx, 0x179fc2dc
jg 0x1400020e0
cmp ecx, 0xc655f67e
je 0x1400020fb
cmp ecx, 0xab4f85e
jne 0x1400020a0
movzx edx, byte [rbp + 0x200]
cmp byte [rbp + 0x210], 0
mov ecx, 0x179fc2dd
cmovne ecx, ebx
test dl, dl
cmovne ecx, ebx
jmp 0x1400020a0
cmp ecx, 0x179fc2dd
je 0x1400020f4
cmp ecx, 0x47373f2c
jne 0x1400020a0
mov ecx, eax
jmp 0x1400020a0
mov ecx, 0x47373f2c
jmp 0x1400020a0
lea rcx, [rbp + 0x198]
call fcn.140007310
mov eax, dword [0x14002ac98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp + 0x200]
mov ecx, dword [0x14002ac9c]
mov eax, 0x179fc2dd
cmove eax, esi
cmp ecx, 0xa
setl byte [rbp + 0x210]
cmovl eax, esi
mov ecx, 0xab4f85e
nop dword [rax]
cmp ecx, 0x179fc2dc
jg 0x140002180
cmp ecx, 0xc655f67e
je 0x14000219b
cmp ecx, 0xab4f85e
jne 0x140002140
movzx edx, byte [rbp + 0x200]
cmp byte [rbp + 0x210], 0
mov ecx, 0x179fc2dd
cmovne ecx, ebx
test dl, dl
cmovne ecx, ebx
jmp 0x140002140
cmp ecx, 0x179fc2dd
je 0x140002194
cmp ecx, 0x47373f2c
jne 0x140002140
mov ecx, eax
jmp 0x140002140
mov ecx, 0x47373f2c
jmp 0x140002140
lea rcx, [rbp + 0x178]
call fcn.140007310
mov eax, dword [0x14002ac98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp + 0x200]
mov ecx, dword [0x14002ac9c]
mov eax, 0x179fc2dd
cmove eax, esi
cmp ecx, 0xa
setl byte [rbp + 0x210]
cmovl eax, esi
mov ecx, 0xab4f85e
nop dword [rax]
cmp ecx, 0x179fc2dc
jg 0x140002220
cmp ecx, 0xc655f67e
je 0x140001eb2
cmp ecx, 0xab4f85e
jne 0x1400021e0
movzx edx, byte [rbp + 0x200]
cmp byte [rbp + 0x210], 0
mov ecx, 0x179fc2dd
cmovne ecx, ebx
test dl, dl
cmovne ecx, ebx
jmp 0x1400021e0
cmp ecx, 0x179fc2dd
je 0x140002234
cmp ecx, 0x47373f2c
jne 0x1400021e0
mov ecx, eax
jmp 0x1400021e0
mov ecx, 0x47373f2c
jmp 0x1400021e0
jmp 0x140002240
jmp 0x140002250
lea rdx, [rax - 2]
cmp word [rax - 2], 0x22
cmovne rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.140007870
mov eax, dword [0x14002aca8]
mov ecx, dword [0x14002acac]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x178]
mov eax, 0xc34b6254
mov ebx, 0x3555b170
cmove ebx, eax
cmp ecx, 0xa
setl byte [rbp + 0x198]
cmovl ebx, eax
mov eax, 0x9c8d40e
mov rcx, qword [rbp + 0x1f0]
mov edi, 0x7ed8c93f
lea rsi, [rbp + 0xb8]
nop dword [rax]
cmp eax, 0x3555b16f
jg 0x140002300
cmp eax, 0xc34b6254
je 0x140002320
cmp eax, 0x9c8d40e
jne 0x1400022c0
movzx edx, byte [rbp + 0x178]
cmp byte [rbp + 0x198], 0
mov eax, 0x3555b170
cmovne eax, edi
test dl, dl
cmovne eax, edi
jmp 0x1400022c0
cmp eax, 0x3555b170
je 0x140002319
cmp eax, 0x7ed8c93f
jne 0x1400022c0
mov qword [rbp + 0xe8], rcx
mov eax, ebx
jmp 0x1400022c0
mov eax, 0x7ed8c93f
jmp 0x1400022c0
cmp qword [rbp + 0xe8], 0
je 0x140002532
mov eax, dword [0x14002acb8]
mov ecx, dword [0x14002acbc]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x178]
mov edx, 0xc5dd791e
mov eax, 0x466b3164
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x198]
cmovl eax, edx
mov edx, 0x94b8b2ed
mov ecx, 0x1d2416df
nop
cmp edx, 0x1d2416de
jg 0x140002390
cmp edx, 0x94b8b2ed
je 0x1400023a7
cmp edx, 0xc5dd791e
jne 0x140002370
jmp 0x1400023d3
cmp edx, 0x1d2416df
je 0x1400023c4
cmp edx, 0x466b3164
jne 0x140002370
mov edx, 0x1d2416df
jmp 0x140002370
movzx ebx, byte [rbp + 0x178]
cmp byte [rbp + 0x198], 0
mov edx, 0x466b3164
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140002370
mov qword [rbp + 0xe8], 1
mov edx, eax
jmp 0x140002370
mov r9, qword [rbp + 0xe8]
mov rdx, qword [rbp + 0xc8]
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x198], rsi
mov rcx, qword [rbp + 0x198]
mov qword [rbp + 0xe8], rcx
cmp rax, 7
mov eax, 0xc1074812
mov ebx, 0xd1d2ab17
cmova ebx, eax
mov eax, 0x46a0c61
jmp 0x140002430
mov rax, qword [rbp + 0x198]
mov rcx, qword [rax]
mov eax, 0xd1d2ab17
nop word cs:[rax + rax]
nop
cmp eax, 0xc1074812
je 0x140002415
cmp eax, 0xd1d2ab17
je 0x140002450
cmp eax, 0x46a0c61
jne 0x140002430
mov rcx, qword [rbp + 0xe8]
mov eax, ebx
jmp 0x140002430
lea r8, [0x140023e76]
call fcn.140009910
test al, al
je 0x140002512
mov dword [rbp + 0xe8], 0
lea rdx, [rbp + 0xe8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x140002512
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6f
jne 0x140002512
mov eax, dword [rbp + 0xe8]
lea rcx, [rax + rax]
xor edi, edi
cmp rax, 1
sbb rdi, rdi
or rdi, rcx
mov rcx, rdi
call fcn.14000a7d8
mov rsi, rax
mov word [rax], 0
mov rcx, rax
add rcx, 2
add rdi, 0xfffffffffffffffe
xor edx, edx
mov r8, rdi
call fcn.14000c850
lea rdx, [rbp + 0xe8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0xb8]
mov rdx, rsi
call fcn.140007870
mov rcx, rsi
call fcn.14000a7a4
cmp dword [0x14002ac84], 0xa
jl 0x140002512
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140002512
jmp 0x140002510
cmp dword [0x14002ac84], 0xa
jl 0x140002559
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140002559
nop dword [rax]
jmp 0x140002530
cmp dword [0x14002ac84], 0xa
jl 0x140002d2c
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140002d52
jmp 0x140002d2c
call qword [sym.imp.SHELL32.dll_IsUserAnAdmin]
mov ecx, dword [0x14002ac80]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete dl
cmp dword [0x14002ac84], 0xa
setl cl
or cl, dl
test eax, eax
je 0x1400025c2
test cl, cl
je 0x1400025c0
lea rcx, [rbp + 0x30]
lea rdx, [rbp + 0x1e0]
call fcn.1400042b0
cmp dword [0x14002ac84], 0xa
jl 0x1400025cf
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400025cf
nop
jmp 0x1400025b0
jmp 0x1400025c0
test cl, cl
jne 0x140002d60
jmp 0x140002d86
lea r12, [rbp - 0x10]
lea rdx, [rbp + 0x1c0]
mov rcx, r12
call fcn.1400042b0
lea rsi, [rbp + 0x10]
lea rdx, [rbp + 0xb8]
mov rcx, rsi
call fcn.1400042b0
cmp dword [0x14002ac84], 0xa
jl 0x140002612
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140002612
nop
jmp 0x140002610
lea rdi, [rbp - 0x30]
lea rdx, [rbp + 0x98]
mov rcx, rdi
call fcn.1400042b0
lea rax, [rbp + 0x170]
mov qword [rbp + 0xe0], rax
mov rcx, qword [rbp + 0xe0]
mov qword [rbp + 0x170], 0
lea rcx, [rbp + 0xe8]
mov qword [rbp + 0x168], rcx
mov rcx, qword [rbp + 0x168]
lea rcx, [rbp + 0x198]
mov qword [rbp + 0x160], rcx
mov rcx, qword [rbp + 0x160]
mov rcx, qword [rbp + 0x168]
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm0
mov qword [rcx + 0x60], 0
mov dword [rbp + 0xe8], 0x68
mov rcx, qword [rbp + 0x160]
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
mov qword [rbp + 0x210], r12
mov rcx, qword [rbp + 0x210]
mov qword [rbp + 0x178], rcx
cmp qword [rbp + 8], 7
mov edx, 0xc1074812
mov ecx, 0xd1d2ab17
cmova ecx, edx
mov edx, 0x46a0c61
jmp 0x1400026f1
mov rdx, qword [rbp + 0x210]
mov r8, qword [rdx]
mov edx, 0xd1d2ab17
cmp edx, 0xc1074812
je 0x1400026e2
cmp edx, 0xd1d2ab17
je 0x140002714
cmp edx, 0x46a0c61
jne 0x1400026f1
mov r8, qword [rbp + 0x178]
mov edx, ecx
jmp 0x1400026f1
mov qword [rbp + 0x210], rsi
mov rcx, qword [rbp + 0x210]
mov qword [rbp + 0x178], rcx
cmp qword [rbp + 0x28], 7
mov ecx, 0xc1074812
mov ebx, 0xd1d2ab17
cmova ebx, ecx
mov ecx, 0x46a0c61
jmp 0x140002751
mov rcx, qword [rbp + 0x210]
mov rdx, qword [rcx]
mov ecx, 0xd1d2ab17
cmp ecx, 0xc1074812
je 0x140002742
cmp ecx, 0xd1d2ab17
je 0x140002774
cmp ecx, 0x46a0c61
jne 0x140002751
mov rdx, qword [rbp + 0x178]
mov ecx, ebx
jmp 0x140002751
mov qword [rbp + 0x210], rdi
mov rcx, qword [rbp + 0x210]
mov qword [rbp + 0x178], rcx
cmp qword [rbp - 0x18], 7
mov ecx, 0xc1074812
mov edi, 0xd1d2ab17
cmova edi, ecx
mov ebx, 0x46a0c61
jmp 0x1400027b1
mov rcx, qword [rbp + 0x210]
mov rcx, qword [rcx]
mov ebx, 0xd1d2ab17
cmp ebx, 0xc1074812
je 0x1400027a2
cmp ebx, 0xd1d2ab17
je 0x1400027d4
cmp ebx, 0x46a0c61
jne 0x1400027b1
mov rcx, qword [rbp + 0x178]
mov ebx, edi
jmp 0x1400027b1
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 3
mov r9d, 9
call qword [sym.imp.ADVAPI32.dll_LogonUserW]
mov dword [rbp + 0x154], eax
mov eax, 0xd8a5ae56
xorps xmm6, xmm6
mov esi, 0x797099ad
mov ebx, 0xe5f8e879
mov r14, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r15d, 0xa0ae70f9
mov r12d, 0xc6c399f7
jmp 0x14000282e
cmp byte [rbp + 0x20f], 0
mov eax, 0x377e9235
mov ecx, 0x5d2b02e1
cmovne eax, ecx
cmp eax, 0xe5f8e878
jg 0x140002873
cmp eax, 0xb1b66850
jle 0x1400028cc
cmp eax, 0xb1b66851
je 0x140002939
cmp eax, 0xc6c399f7
je 0x140002943
cmp eax, 0xd8a5ae56
jne 0x14000282e
cmp dword [rbp + 0x154], 0
mov eax, 0x9073a019
cmove eax, esi
xor edi, edi
xor r13d, r13d
jmp 0x14000282e
cmp eax, 0x377e9234
jle 0x1400028f8
cmp eax, 0x377e9235
je 0x140002986
cmp eax, 0x5d2b02e1
je 0x14000299c
cmp eax, 0x797099ad
jne 0x14000282e
mov dword [rbp + 0x150], edi
mov qword [rbp + 0x200], r13
mov eax, dword [0x14002acc0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1b66851
cmove eax, r12d
cmp dword [0x14002acc4], 0xa
cmovl eax, r12d
jmp 0x14000282e
cmp eax, 0x9073a019
je 0x1400029b0
cmp eax, 0x9d8439e7
jne 0x140002a88
mov rcx, qword [rbp + 0x200]
call fcn.14001081c
mov eax, 0xa0ae70f9
jmp 0x14000282e
cmp eax, 0xe5f8e879
je 0x14000281a
cmp eax, 0x11f7d60f
jne 0x14000282e
mov rcx, qword [rbp + 0x198]
call r14
mov rcx, qword [rbp + 0x1a0]
call r14
mov edi, dword [rbp + 0x1a8]
mov eax, 0x797099ad
mov r13, qword [rbp + 0x158]
jmp 0x14000282e
mov eax, 0xc6c399f7
jmp 0x14000282e
mov rax, qword [rbp + 0x170]
mov qword [rbp + 0xd8], rax
cmp qword [rbp + 0xd8], 0
setne byte [rbp + 0x20f]
mov eax, dword [0x14002acc0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1b66851
cmove eax, ebx
cmp dword [0x14002acc4], 0xa
cmovl eax, ebx
jmp 0x14000282e
cmp qword [rbp + 0x200], 0
mov eax, 0x9d8439e7
cmove eax, r15d
jmp 0x14000282e
mov rcx, qword [rbp + 0xd8]
call r14
mov eax, 0x377e9235
jmp 0x14000282e
lea rax, [rbp + 0x30]
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x178], rax
cmp qword [rbp + 0x48], 7
mov eax, 0xd1d2ab17
mov ecx, 0xc1074812
cmova eax, ecx
mov edx, 0x46a0c61
jmp 0x140002a00
mov rcx, qword [rbp + 0x210]
mov rcx, qword [rcx]
mov edx, 0xd1d2ab17
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp edx, 0xc1074812
je 0x1400029e2
cmp edx, 0xd1d2ab17
je 0x140002a23
cmp edx, 0x46a0c61
jne 0x140002a00
mov rcx, qword [rbp + 0x178]
mov edx, eax
jmp 0x140002a00
call fcn.140010798
mov qword [rbp + 0x158], rax
mov rcx, qword [rbp + 0x170]
mov r9, qword [rbp + 0x158]
lea rax, [rbp + 0x198]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x38], rax
movups xmmword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], 0
xor edi, edi
mov edx, 2
xor r8d, r8d
call qword [sym.imp.ADVAPI32.dll_CreateProcessWithTokenW]
test eax, eax
mov eax, 0x11f7d60f
cmove eax, esi
mov r13, qword [rbp + 0x158]
jmp 0x14000282e
cmp eax, 0xa0ae70f9
jne 0x14000282e
mov rax, qword [rbp + 0x160]
mov rax, qword [rbp + 0x168]
mov rax, qword [rbp + 0xe0]
lea rcx, [rbp - 0x30]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x210]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x178]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
cmp edx, 0x179fc2dc
jg 0x140002b26
cmp edx, 0xc655f67e
je 0x140002b41
cmp edx, 0xab4f85e
jne 0x140002af1
movzx ebx, byte [rbp + 0x210]
cmp byte [rbp + 0x178], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140002af1
cmp edx, 0x179fc2dd
je 0x140002b3a
cmp edx, 0x47373f2c
jne 0x140002af1
mov edx, eax
jmp 0x140002af1
mov edx, 0x47373f2c
jmp 0x140002af1
lea rcx, [rbp + 0x10]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x210]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x178]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
cmp edx, 0x179fc2dc
jg 0x140002bbf
cmp edx, 0xc655f67e
je 0x140002bda
cmp edx, 0xab4f85e
jne 0x140002b8a
movzx ebx, byte [rbp + 0x210]
cmp byte [rbp + 0x178], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140002b8a
cmp edx, 0x179fc2dd
je 0x140002bd3
cmp edx, 0x47373f2c
jne 0x140002b8a
mov edx, eax
jmp 0x140002b8a
mov edx, 0x47373f2c
jmp 0x140002b8a
lea rcx, [rbp - 0x10]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x210]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x178]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
cmp edx, 0x179fc2dc
jg 0x140002c58
cmp edx, 0xc655f67e
je 0x140002c73
cmp edx, 0xab4f85e
jne 0x140002c23
movzx ebx, byte [rbp + 0x210]
cmp byte [rbp + 0x178], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140002c23
cmp edx, 0x179fc2dd
je 0x140002c6c
cmp edx, 0x47373f2c
jne 0x140002c23
mov edx, eax
jmp 0x140002c23
mov edx, 0x47373f2c
jmp 0x140002c23
lea rcx, [rbp + 0x30]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x210]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0x178]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
cmp edx, 0x179fc2dc
jg 0x140002cf1
cmp edx, 0xc655f67e
je 0x140002d0c
cmp edx, 0xab4f85e
jne 0x140002cbc
movzx ebx, byte [rbp + 0x210]
cmp byte [rbp + 0x178], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140002cbc
cmp edx, 0x179fc2dd
je 0x140002d05
cmp edx, 0x47373f2c
jne 0x140002cbc
mov edx, eax
jmp 0x140002cbc
mov edx, 0x47373f2c
jmp 0x140002cbc
cmp dword [rbp + 0x150], 0
je 0x140002d1e
lea rcx, [0x14002a066]
jmp 0x140002d25
lea rcx, [0x14002a073]
call fcn.140003bb0
jmp 0x140002d94
lea rcx, str._WZe_be
call fcn.140003bb0
cmp dword [0x14002ac84], 0xa
jl 0x140002d94
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140002d94
lea rcx, str._WZe_be
call fcn.140003bb0
jmp 0x140002d2c
lea rcx, str.4B2O._f_f_n
call fcn.140003bb0
cmp dword [0x14002ac84], 0xa
jl 0x140002d94
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140002d94
lea rcx, str.4B2O._f_f_n
call fcn.140003bb0
jmp 0x140002d60
cmp dword [0x14002ac84], 0xa
jl 0x140002db2
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140002e7d
lea rcx, [rbp + 0x1e0]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x198]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0xe8]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
nop
cmp edx, 0x179fc2dc
jg 0x140002e40
cmp edx, 0xc655f67e
je 0x140002e5b
cmp edx, 0xab4f85e
jne 0x140002e00
movzx ebx, byte [rbp + 0x198]
cmp byte [rbp + 0xe8], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140002e00
cmp edx, 0x179fc2dd
je 0x140002e54
cmp edx, 0x47373f2c
jne 0x140002e00
mov edx, eax
jmp 0x140002e00
mov edx, 0x47373f2c
jmp 0x140002e00
cmp dword [0x14002ac84], 0xa
jl 0x140001dad
mov eax, dword [0x14002ac80]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140001dad
lea rcx, [rbp + 0x1e0]
call fcn.140007310
mov eax, dword [0x14002ac98]
mov ecx, dword [0x14002ac9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x198]
mov edx, 0xc655f67e
mov eax, 0x179fc2dd
cmove eax, edx
cmp ecx, 0xa
setl byte [rbp + 0xe8]
cmovl eax, edx
mov edx, 0xab4f85e
mov ecx, 0x47373f2c
jmp 0x140002ed0
mov edx, 0x47373f2c
cmp edx, 0x179fc2dc
jg 0x140002f10
cmp edx, 0xc655f67e
je 0x140002db2
cmp edx, 0xab4f85e
jne 0x140002ed0
movzx ebx, byte [rbp + 0x198]
cmp byte [rbp + 0xe8], 0
mov edx, 0x179fc2dd
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x140002ed0
cmp edx, 0x179fc2dd
je 0x140002ecb
cmp edx, 0x47373f2c
jne 0x140002ed0
mov edx, eax
jmp 0x140002ed0