Function at 0x140048fe0
Capabilities:
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov byte [rsp + 0x18], r8b
mov byte [rsp + 0x10], dl
mov dword [rsp + 8], ecx
sub rsp, 0x1c8
mov dword [rsp + 0x40], 0x20
mov dword [rsp + 0x48], 0x28
mov dword [rsp + 0x44], 0x71
mov dword [rsp + 0x2c], 0xb8
mov dword [rsp + 0x4c], 0xaf
mov byte [rsp + 0x21], 0x75
mov dword [rsp + 0x3c], 4
mov dword [rsp + 0x38], 0x6f
mov dword [rsp + 0x28], 0x75
mov dword [rsp + 0x34], 0x73
mov dword [rsp + 0x30], 0x1d
mov byte [rsp + 0x20], 0x34
mov dword [rsp + 0x24], 0x10
cmp dword [0x140074c50], 0
jne 0x140049081
movzx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x34]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
je 0x140049081
mov dword [rsp + 0x8c], 0
jmp 0x14004908c
mov dword [rsp + 0x8c], 1
mov eax, dword [rsp + 0x8c]
mov ecx, dword [0x140074c64]
add ecx, eax
mov eax, ecx
mov dword [0x140074c64], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [0x140074c54]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074a68]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
mov eax, dword [rsp + 0x3c]
mov ecx, dword [0x140074c68]
and ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c5f]
and ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
mov dword [rsp + 0x5c], 0x93
mov dword [rsp + 0x5c], 0x25c
jmp 0x1400490fc
mov eax, dword [rsp + 0x5c]
dec eax
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0x20
jbe 0x1400492ac
movsx eax, byte [0x140074c6e]
cmp eax, dword [rsp + 0x48]
je 0x140049146
movzx eax, byte [rsp + 0x20]
cmp eax, dword [0x140074c48]
je 0x14004912e
mov dword [rsp + 0x90], 1
jmp 0x140049139
mov dword [rsp + 0x90], 0
mov eax, dword [rsp + 0x28]
cmp dword [rsp + 0x90], eax
je 0x140049161
xor edx, edx
mov eax, dword [rsp + 0x30]
mov ecx, 3
div ecx
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4c], eax
movsx eax, byte [0x140074c5e]
mov ecx, dword [rsp + 0x34]
shl eax, cl
mov ecx, dword [0x140074a68]
sub ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
movsx eax, byte [0x140074c6f]
sub eax, dword [rsp + 0x48]
test eax, eax
je 0x1400491a1
cmp dword [rsp + 0x28], 0
je 0x1400491a1
mov dword [rsp + 0x94], 1
jmp 0x1400491ac
mov dword [rsp + 0x94], 0
mov eax, dword [rsp + 0x94]
mov dword [0x140074c80], eax
movsx eax, byte [0x140074c6c]
test eax, eax
je 0x1400491d8
cmp dword [rsp + 0x28], 0
je 0x1400491d8
mov dword [rsp + 0x98], 1
jmp 0x1400491e3
mov dword [rsp + 0x98], 0
movzx eax, byte [0x140074b8f]
or eax, dword [rsp + 0x98]
mov byte [0x140074b8f], al
movzx eax, byte [0x140074c5c]
and eax, dword [rsp + 0x40]
xor eax, dword [rsp + 0x2c]
movzx ecx, byte [rsp + 0x20]
mov dword [rsp + 0x180], ecx
movsx edx, byte [0x140074c90]
movzx ecx, dl
mov edx, dword [rsp + 0x180]
sar edx, cl
mov ecx, edx
or eax, ecx
movzx ecx, byte [0x140074b8f]
and ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
cmp dword [0x140074c60], 0
je 0x14004926a
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x3c]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x28]
sub eax, dword [0x140074c34]
test eax, eax
je 0x14004926a
mov dword [rsp + 0x9c], 1
jmp 0x140049275
mov dword [rsp + 0x9c], 0
movsx eax, byte [0x140074c5e]
sub eax, dword [rsp + 0x9c]
mov byte [0x140074c5e], al
mov eax, dword [rsp + 0x48]
mov ecx, dword [0x140074c50]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c80]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
jmp 0x1400490f2
mov dword [rsp + 0x60], 0xbf
mov dword [rsp + 0x60], 0x10
jmp 0x1400492c8
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0x18a
jae 0x140049313
xor edx, edx
mov eax, dword [rsp + 0x3c]
mov ecx, 5
div ecx
mov eax, edx
mov ecx, dword [0x140074c64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
movsx eax, byte [0x140074c6c]
mov ecx, dword [rsp + 0x38]
sar eax, cl
or eax, dword [rsp + 0x2c]
movzx ecx, byte [0x140074c5c]
and ecx, eax
mov eax, ecx
mov byte [0x140074c5c], al
jmp 0x1400492be
movsx eax, byte [rsp + 0x21]
movzx ecx, byte [0x140074c8b]
imul ecx, ecx, 7
add eax, ecx
cdq
mov ecx, 6
idiv ecx
mov eax, edx
mov dword [rsp + 0x184], eax
mov eax, dword [rsp + 0x184]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0
je 0x14004936d
cmp dword [rsp + 0x64], 1
je 0x1400493dc
cmp dword [rsp + 0x64], 2
je 0x140049452
cmp dword [rsp + 0x64], 3
je 0x1400494a5
jmp 0x1400494e3
mov eax, dword [rsp + 0x44]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c30]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
movzx eax, byte [rsp + 0x20]
movsx ecx, byte [rsp + 0x21]
sub ecx, dword [rsp + 0x44]
cmp eax, ecx
jne 0x1400493aa
mov dword [rsp + 0xa0], 1
jmp 0x1400493b5
mov dword [rsp + 0xa0], 0
mov eax, dword [rsp + 0xa0]
movzx ecx, al
mov eax, dword [0x140074c50]
shl eax, cl
mov ecx, dword [0x140074a64]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
jmp 0x1400494e3
mov eax, dword [0x140074c84]
imul eax, dword [rsp + 0x30]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov dword [rsp + 0x30], eax
movsx eax, byte [0x140074c90]
or eax, dword [rsp + 0x38]
test eax, eax
jne 0x14004942b
cmp dword [rsp + 0x40], 0
je 0x14004941e
mov eax, dword [0x140074c28]
mov ecx, dword [rsp + 0x28]
and ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004942b
mov dword [rsp + 0xa4], 0
jmp 0x140049436
mov dword [rsp + 0xa4], 1
mov eax, dword [rsp + 0xa4]
mov ecx, dword [0x140074a68]
and ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
jmp 0x1400494e3
cmp dword [0x140074c64], 0
je 0x140049481
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x28]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x140049481
movsx eax, byte [rsp + 0x21]
test eax, eax
je 0x140049481
mov dword [rsp + 0xa8], 1
jmp 0x14004948c
mov dword [rsp + 0xa8], 0
mov eax, dword [rsp + 0xa8]
mov ecx, dword [0x140074c74]
and ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
jmp 0x1400494e3
movzx eax, byte [0x140074c5c]
test eax, eax
jne 0x1400494cb
cmp dword [rsp + 0x24], 0
je 0x1400494be
cmp dword [rsp + 0x44], 0
jne 0x1400494cb
mov dword [rsp + 0xac], 0
jmp 0x1400494d6
mov dword [rsp + 0xac], 1
mov eax, dword [rsp + 0xac]
mov dword [0x140074a6c], eax
mov eax, dword [rsp + 0x44]
cmp dword [rsp + 0x44], eax
je 0x14004958c
movzx eax, byte [0x140074c8b]
movsx ecx, byte [rsp + 0x21]
add ecx, dword [rsp + 0x48]
shl eax, cl
movzx ecx, byte [0x140074c89]
add ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
mov eax, dword [0x140074c4c]
imul eax, dword [rsp + 0x38]
xor edx, edx
mov ecx, 4
div ecx
mov byte [rsp + 0x21], al
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c8c]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c90], al
cmp dword [0x140074c48], 0
je 0x140049551
cmp dword [rsp + 0x30], 0
jne 0x14004955f
cmp dword [rsp + 0x2c], 0
jne 0x14004955f
mov byte [rsp + 0x50], 0
jmp 0x140049564
mov byte [rsp + 0x50], 1
movzx eax, byte [rsp + 0x50]
mov byte [0x140074c88], al
movsx eax, byte [0x140074c5d]
mov ecx, dword [rsp + 0x30]
shl eax, cl
mov ecx, dword [0x140074c4c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
movzx eax, byte [0x140074c6d]
sub eax, dword [rsp + 0x30]
movzx ecx, byte [rsp + 0x20]
shr eax, cl
movzx ecx, byte [0x140074b8f]
sub ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
movsx eax, byte [0x140074a63]
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x24]
sub edx, ecx
mov ecx, edx
movzx edx, byte [rsp + 0x20]
and ecx, edx
xor eax, ecx
movsx ecx, byte [0x140074c6e]
xor eax, ecx
mov ecx, dword [0x140074c80]
add ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
call qword [sym.imp.KERNEL32.dll_GetConsoleAliasExesLengthA]
imul eax, dword [0x140074c3c], 7
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 8
div ecx
mov eax, edx
mov dword [rsp + 0x188], eax
mov eax, dword [rsp + 0x188]
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x68], 0
je 0x14004963f
cmp dword [rsp + 0x68], 1
je 0x140049679
cmp dword [rsp + 0x68], 2
je 0x1400496e3
cmp dword [rsp + 0x68], 3
je 0x140049702
jmp 0x14004975a
mov eax, dword [0x140074c38]
imul eax, dword [rsp + 0x34]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov dword [rsp + 0x2c], eax
movzx eax, byte [rsp + 0x20]
cdq
mov ecx, 5
idiv ecx
mov ecx, dword [0x140074c2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x24], eax
jmp 0x14004975a
movsx eax, byte [rsp + 0x21]
movsx ecx, byte [rsp + 0x21]
mov edx, dword [rsp + 0x40]
sub edx, ecx
mov ecx, edx
cmp eax, ecx
jne 0x14004969c
mov dword [rsp + 0xb0], 1
jmp 0x1400496a7
mov dword [rsp + 0xb0], 0
movzx eax, byte [0x140074c6d]
sub eax, dword [rsp + 0xb0]
movsx ecx, byte [0x140074c6e]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c6e], al
movzx eax, byte [0x140074c8b]
xor eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c68]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
jmp 0x14004975a
movsx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c74]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov dword [rsp + 0x28], eax
jmp 0x14004975a
mov eax, dword [rsp + 0x28]
cmp dword [0x140074c2c], eax
jne 0x14004971b
mov dword [rsp + 0xb4], 1
jmp 0x140049726
mov dword [rsp + 0xb4], 0
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0xb4]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c89]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c74]
or ecx, eax
mov eax, ecx
mov byte [0x140074b8e], al
movzx eax, byte [rsp + 0x20]
movsx ecx, byte [0x140074c90]
imul ecx, ecx, 5
add eax, ecx
cdq
and eax, 1
xor eax, edx
sub eax, edx
mov dword [rsp + 0x18c], eax
mov eax, dword [rsp + 0x18c]
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x6c], 0
je 0x1400497ae
cmp dword [rsp + 0x6c], 1
je 0x1400497fe
cmp dword [rsp + 0x6c], 2
je 0x14004985b
cmp dword [rsp + 0x6c], 3
je 0x14004988f
jmp 0x1400498d7
mov eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x3c]
and ecx, eax
mov eax, ecx
or eax, dword [rsp + 0x2c]
movzx ecx, al
mov eax, dword [0x140074c80]
shr eax, cl
mov ecx, dword [0x140074c3c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c3c], eax
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [0x140074c80]
shl eax, cl
movsx ecx, byte [0x140074c6f]
or ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
jmp 0x1400498d7
movzx eax, byte [0x140074c5c]
test eax, eax
je 0x140049837
mov eax, dword [rsp + 0x2c]
movzx ecx, al
mov eax, dword [rsp + 0x28]
shr eax, cl
movsx ecx, byte [rsp + 0x21]
shr eax, cl
movsx ecx, byte [0x140074c6f]
or eax, ecx
test eax, eax
je 0x140049837
mov dword [rsp + 0xb8], 1
jmp 0x140049842
mov dword [rsp + 0xb8], 0
mov eax, dword [rsp + 0xb8]
mov ecx, dword [0x140074c30]
and ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
jmp 0x1400498d7
movzx eax, byte [0x140074c89]
cmp eax, dword [rsp + 0x38]
jne 0x140049875
mov dword [rsp + 0xbc], 1
jmp 0x140049880
mov dword [rsp + 0xbc], 0
mov eax, dword [rsp + 0xbc]
mov dword [0x140074c50], eax
jmp 0x1400498d7
movzx eax, byte [0x140074c5c]
add eax, dword [rsp + 0x3c]
movzx ecx, byte [0x140074b8e]
sub ecx, eax
mov eax, ecx
mov byte [0x140074b8e], al
movsx eax, byte [0x140074c5e]
mov dword [rsp + 0x190], eax
xor edx, edx
mov eax, dword [rsp + 0x30]
mov ecx, 3
div ecx
mov eax, edx
mov ecx, dword [rsp + 0x190]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
mov dword [rsp + 0x80], 0xffffffa6
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x194], eax
mov eax, dword [rsp + 0x80]
inc eax
mov dword [rsp + 0x80], eax
cmp dword [rsp + 0x194], 0
je 0x140049940
mov eax, dword [rsp + 0x24]
movzx ecx, al
mov eax, dword [0x140074c80]
shr eax, cl
mov ecx, dword [rsp + 0x38]
mov edx, dword [rsp + 0x4c]
shl edx, cl
mov ecx, edx
and eax, ecx
or eax, dword [0x140074c80]
movzx ecx, byte [0x140074c5f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
jmp 0x1400498e2
movzx eax, byte [0x140074c5f]
or eax, dword [rsp + 0x3c]
mov dword [0x140074c2c], eax
cmp dword [rsp + 0x3c], 0
jne 0x140049975
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x140049975
mov dword [rsp + 0xc0], 0
jmp 0x140049980
mov dword [rsp + 0xc0], 1
movsx eax, byte [0x140074a63]
add eax, dword [rsp + 0xc0]
mov ecx, dword [0x140074c48]
or ecx, eax
mov eax, ecx
mov dword [0x140074c48], eax
movzx eax, byte [0x140074c5c]
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x24]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x1400499bc
mov byte [rsp + 0x51], 1
jmp 0x1400499c1
mov byte [rsp + 0x51], 0
movzx eax, byte [rsp + 0x51]
mov byte [0x140074c6e], al
mov eax, dword [rsp + 0x44]
cmp dword [0x140074c34], eax
je 0x1400499e5
mov dword [rsp + 0xc8], 1
jmp 0x1400499f0
mov dword [rsp + 0xc8], 0
movzx eax, byte [0x140074c88]
cmp dword [rsp + 0x3c], eax
jbe 0x140049a0a
mov dword [rsp + 0xc4], 1
jmp 0x140049a15
mov dword [rsp + 0xc4], 0
mov eax, dword [rsp + 0xc4]
cmp dword [rsp + 0xc8], eax
je 0x140049a32
mov dword [rsp + 0xcc], 1
jmp 0x140049a3d
mov dword [rsp + 0xcc], 0
mov eax, dword [rsp + 0x48]
cmp dword [rsp + 0xcc], eax
jne 0x140049a98
cmp dword [0x140074c4c], 0
je 0x140049a6a
cmp dword [rsp + 0x48], 0
je 0x140049a6a
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x3c]
sub ecx, eax
mov eax, ecx
test eax, eax
jne 0x140049a80
cmp dword [0x140074c4c], 0
jne 0x140049a80
mov dword [rsp + 0xd0], 0
jmp 0x140049a8b
mov dword [rsp + 0xd0], 1
mov eax, dword [rsp + 0xd0]
mov dword [0x140074c84], eax
mov eax, dword [rsp + 0x24]
movzx ecx, al
mov eax, dword [rsp + 0x28]
shr eax, cl
mov ecx, dword [rsp + 0x44]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c8c]
sub ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c88]
and ecx, eax
mov eax, ecx
mov byte [0x140074c88], al
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x48]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074a6c]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c28]
mov edx, dword [rsp + 0x24]
shl edx, cl
mov ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c60]
or ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [0x140074c48]
xor ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074a62]
sub ecx, eax
mov eax, ecx
mov byte [0x140074a62], al
mov eax, 0xb7
mov word [rsp + 0x58], ax
mov eax, 0x232
mov word [rsp + 0x58], ax
jmp 0x140049b40
movzx eax, word [rsp + 0x58]
dec ax
mov word [rsp + 0x58], ax
movsx eax, word [rsp + 0x58]
cmp eax, 0xe
jle 0x140049b6f
movzx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x24]
mov edx, dword [rsp + 0x2c]
shl edx, cl
mov ecx, edx
xor eax, ecx
mov ecx, dword [0x140074c68]
add ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
jmp 0x140049b33
mov eax, dword [rsp + 0x28]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
test eax, eax
jne 0x140049b95
cmp dword [rsp + 0x2c], 0
jne 0x140049b95
mov dword [rsp + 0xd4], 0
jmp 0x140049ba0
mov dword [rsp + 0xd4], 1
mov eax, dword [rsp + 0xd4]
mov dword [0x140074c74], eax
imul eax, dword [0x140074c54], 5
mov ecx, dword [rsp + 0x28]
add ecx, eax
mov eax, ecx
xor eax, eax
mov dword [rsp + 0x198], eax
mov eax, dword [rsp + 0x198]
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0
je 0x140049bfd
cmp dword [rsp + 0x70], 1
je 0x140049c6b
cmp dword [rsp + 0x70], 2
je 0x140049c9d
cmp dword [rsp + 0x70], 3
je 0x140049d32
jmp 0x140049d60
mov eax, dword [rsp + 0x24]
movzx ecx, al
mov eax, dword [0x140074c80]
shr eax, cl
cmp eax, dword [rsp + 0x28]
jne 0x140049c1f
mov dword [rsp + 0xd8], 1
jmp 0x140049c2a
mov dword [rsp + 0xd8], 0
mov eax, dword [rsp + 0x3c]
cmp dword [rsp + 0xd8], eax
jne 0x140049c44
mov dword [rsp + 0xdc], 1
jmp 0x140049c4f
mov dword [rsp + 0xdc], 0
mov eax, dword [0x140074c54]
mov ecx, dword [rsp + 0xdc]
or ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
jmp 0x140049d9b
movsx eax, byte [0x140074c6f]
and eax, dword [rsp + 0x40]
test eax, eax
je 0x140049c88
cmp dword [rsp + 0x3c], 0
je 0x140049c88
mov byte [rsp + 0x52], 1
jmp 0x140049c8d
mov byte [rsp + 0x52], 0
movzx eax, byte [rsp + 0x52]
mov byte [0x140074c89], al
jmp 0x140049d9b
movsx eax, byte [0x140074c5d]
test eax, eax
jne 0x140049cce
movsx eax, byte [rsp + 0x21]
sub eax, dword [rsp + 0x38]
add eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c84]
shr eax, cl
test eax, eax
jne 0x140049cce
mov dword [rsp + 0xe0], 0
jmp 0x140049cd9
mov dword [rsp + 0xe0], 1
mov eax, dword [rsp + 0xe0]
mov dword [0x140074c28], eax
movzx eax, byte [0x140074c89]
test eax, eax
jne 0x140049d11
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [rsp + 0x38]
shl eax, cl
cmp eax, dword [rsp + 0x40]
je 0x140049d11
mov dword [rsp + 0xe4], 0
jmp 0x140049d1c
mov dword [rsp + 0xe4], 1
movzx eax, byte [0x140074c5c]
or eax, dword [rsp + 0xe4]
mov byte [0x140074c5c], al
jmp 0x140049d9b
movzx eax, byte [0x140074c5f]
mov dword [rsp + 0x19c], eax
mov eax, dword [rsp + 0x40]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x19c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
jmp 0x140049d9b
movzx eax, byte [0x140074c88]
cmp eax, dword [rsp + 0x30]
jne 0x140049d7a
mov dword [rsp + 0xe8], 1
jmp 0x140049d85
mov dword [rsp + 0xe8], 0
movzx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0xe8]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
mov eax, dword [rsp + 0x4c]
cmp dword [rsp + 0x30], eax
je 0x140049deb
cmp dword [0x140074c50], 0
je 0x140049dcc
movzx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x2c]
add ecx, eax
mov eax, ecx
test eax, eax
je 0x140049dcc
mov dword [rsp + 0xec], 1
jmp 0x140049dd7
mov dword [rsp + 0xec], 0
movzx eax, byte [0x140074c88]
sub eax, dword [rsp + 0xec]
mov byte [0x140074c88], al
movzx eax, byte [0x140074c6d]
mov ecx, dword [rsp + 0x28]
mov edx, dword [rsp + 0x38]
sub edx, ecx
mov ecx, edx
and eax, ecx
mov ecx, dword [0x140074c54]
add ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
movzx eax, byte [0x140074b8f]
mov ecx, dword [rsp + 0x24]
sar eax, cl
mov ecx, dword [0x140074c70]
or ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
movzx eax, byte [0x140074c89]
mov ecx, dword [rsp + 0x34]
shl eax, cl
or eax, dword [rsp + 0x24]
mov ecx, dword [0x140074c48]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c48], eax
movzx eax, byte [0x140074c8a]
mov dword [rsp + 0x1a0], eax
xor edx, edx
mov eax, dword [rsp + 0x34]
mov ecx, 3
div ecx
mov eax, edx
mov ecx, dword [rsp + 0x1a0]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
xor edx, edx
mov eax, dword [rsp + 0x48]
mov ecx, 5
div ecx
mov eax, edx
mov ecx, dword [0x140074c80]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x48]
mov ecx, dword [0x140074c60]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c8b]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
mov eax, dword [rsp + 0x24]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [0x140074c3c]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
mov dword [rsp + 0x74], 0xf3
mov dword [rsp + 0x74], 0x29a
jmp 0x140049eee
mov eax, dword [rsp + 0x74]
dec eax
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x74], 0x1a
jbe 0x14004a0c2
mov eax, dword [rsp + 0x38]
cmp dword [rsp + 0x34], eax
jbe 0x140049f10
mov dword [rsp + 0xf0], 1
jmp 0x140049f1b
mov dword [rsp + 0xf0], 0
movsx eax, byte [0x140074c5e]
cmp dword [rsp + 0xf0], eax
je 0x140049f45
mov eax, dword [0x140074c30]
imul eax, dword [rsp + 0x38]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov byte [rsp + 0x20], al
movzx eax, byte [0x140074b8f]
mov ecx, dword [rsp + 0x28]
mov edx, dword [rsp + 0x30]
and edx, ecx
mov ecx, edx
mov edx, dword [rsp + 0x4c]
or edx, ecx
mov ecx, edx
shl eax, cl
movsx ecx, byte [0x140074c5d]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c5d], al
movsx eax, byte [0x140074c6e]
mov ecx, dword [rsp + 0x34]
shl eax, cl
mov ecx, dword [0x140074a68]
and ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
cmp dword [rsp + 0x48], 0
jne 0x140049fae
mov eax, dword [rsp + 0x4c]
cmp dword [rsp + 0x34], eax
je 0x140049fae
mov dword [rsp + 0xf4], 0
jmp 0x140049fb9
mov dword [rsp + 0xf4], 1
movsx eax, byte [0x140074a63]
mov ecx, dword [rsp + 0xf4]
sar eax, cl
mov ecx, dword [0x140074c68]
or ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
movzx eax, byte [0x140074c89]
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x2c]
add edx, ecx
mov ecx, edx
mov dword [rsp + 0x1a4], ecx
mov edx, dword [rsp + 0x28]
movzx ecx, dl
mov edx, dword [rsp + 0x1a4]
shr edx, cl
mov ecx, edx
xor eax, ecx
movzx ecx, byte [0x140074b8e]
and ecx, eax
mov eax, ecx
mov byte [0x140074b8e], al
movsx eax, byte [rsp + 0x21]
add eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x2c]
shr eax, cl
cmp dword [0x140074c3c], eax
jne 0x14004a03c
mov dword [rsp + 0xf8], 1
jmp 0x14004a047
mov dword [rsp + 0xf8], 0
movzx eax, byte [0x140074c6d]
cmp dword [rsp + 0xf8], eax
jne 0x14004a064
mov dword [rsp + 0xfc], 1
jmp 0x14004a06f
mov dword [rsp + 0xfc], 0
movsx eax, byte [0x140074c6f]
sub eax, dword [rsp + 0xfc]
mov byte [0x140074c6f], al
mov eax, dword [rsp + 0x44]
mov ecx, dword [0x140074c8c]
or ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c8b]
and ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 5
div ecx
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140049ee4
movzx eax, byte [0x140074c5f]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
mov byte [0x140074c6d], al
movzx eax, byte [0x140074b8f]
test eax, eax
je 0x14004a0fe
mov eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x4c]
sub ecx, eax
mov eax, ecx
test eax, eax
je 0x14004a0fe
mov dword [rsp + 0x100], 1
jmp 0x14004a109
mov dword [rsp + 0x100], 0
mov eax, dword [rsp + 0x100]
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
movzx eax, byte [0x140074b8f]
imul eax, dword [rsp + 0x4c]
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov dword [rsp + 0x24], eax
movzx eax, byte [rsp + 0x20]
cmp eax, dword [0x140074c64]
jne 0x14004a154
mov dword [rsp + 0x104], 1
jmp 0x14004a15f
mov dword [rsp + 0x104], 0
mov eax, dword [rsp + 0x104]
cmp dword [rsp + 0x38], eax
jae 0x14004a179
mov dword [rsp + 0x108], 1
jmp 0x14004a184
mov dword [rsp + 0x108], 0
mov eax, dword [rsp + 0x108]
cmp dword [0x140074c4c], eax
je 0x14004a1a0
mov dword [rsp + 0x10c], 1
jmp 0x14004a1ab
mov dword [rsp + 0x10c], 0
mov eax, dword [rsp + 0x28]
cmp dword [rsp + 0x10c], eax
jne 0x14004a20a
mov eax, dword [rsp + 0x34]
movzx ecx, al
mov eax, dword [rsp + 0x24]
shl eax, cl
test eax, eax
je 0x14004a1dd
cmp dword [rsp + 0x3c], 0
je 0x14004a1dd
mov dword [rsp + 0x110], 1
jmp 0x14004a1e8
mov dword [rsp + 0x110], 0
mov eax, dword [rsp + 0x110]
mov ecx, dword [0x140074c80]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c5c]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c5c], al
movsx eax, byte [rsp + 0x21]
cmp dword [rsp + 0x24], eax
jne 0x14004a222
mov dword [rsp + 0x114], 1
jmp 0x14004a22d
mov dword [rsp + 0x114], 0
movsx eax, byte [0x140074c6f]
and eax, dword [rsp + 0x114]
mov dword [0x140074c54], eax
movzx eax, byte [0x140074c8b]
test eax, eax
je 0x14004a279
cmp dword [rsp + 0x38], 0
je 0x14004a279
cmp dword [rsp + 0x24], 0
je 0x14004a279
mov eax, dword [0x140074c4c]
mov ecx, dword [rsp + 0x38]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x14004a279
mov dword [rsp + 0x118], 1
jmp 0x14004a284
mov dword [rsp + 0x118], 0
movzx eax, byte [0x140074c8b]
or eax, dword [rsp + 0x118]
mov byte [0x140074c8b], al
movsx eax, byte [0x140074c90]
mov ecx, dword [rsp + 0x2c]
shl eax, cl
movzx ecx, byte [rsp + 0x20]
mov edx, dword [rsp + 0x24]
add edx, ecx
mov ecx, edx
movzx edx, byte [0x140074b8e]
add ecx, edx
shl eax, cl
mov ecx, dword [0x140074c2c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
xor edx, edx
mov eax, dword [rsp + 0x30]
mov ecx, 3
div ecx
mov ecx, dword [0x140074c2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
call qword [sym.imp.KERNEL32.dll_UnregisterApplicationRestart]
mov dword [rsp + 0x84], 0xffffffa9
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x1a8], eax
mov eax, dword [rsp + 0x84]
inc eax
mov dword [rsp + 0x84], eax
cmp dword [rsp + 0x1a8], 0
je 0x14004a33f
movzx eax, byte [0x140074b8e]
and eax, dword [rsp + 0x38]
movsx ecx, byte [0x140074c5d]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c5d], al
jmp 0x14004a2f9
movsx eax, byte [0x140074c6c]
and eax, dword [rsp + 0x4c]
test eax, eax
je 0x14004a364
movsx eax, byte [rsp + 0x21]
test eax, eax
je 0x14004a364
mov dword [rsp + 0x11c], 1
jmp 0x14004a36f
mov dword [rsp + 0x11c], 0
movzx eax, byte [0x140074c8a]
xor eax, dword [rsp + 0x11c]
mov byte [0x140074c8a], al
movzx eax, byte [0x140074c5f]
or eax, dword [rsp + 0x34]
test eax, eax
jne 0x14004a3a0
cmp dword [rsp + 0x24], 0
jne 0x14004a3a0
mov byte [rsp + 0x53], 0
jmp 0x14004a3a5
mov byte [rsp + 0x53], 1
movzx eax, byte [rsp + 0x53]
mov byte [0x140074c90], al
cmp dword [0x140074c2c], 0
jne 0x14004a3df
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x14004a3df
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x28]
xor ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004a3df
mov dword [rsp + 0x120], 0
jmp 0x14004a3ea
mov dword [rsp + 0x120], 1
movsx eax, byte [0x140074c5e]
or eax, dword [rsp + 0x120]
mov byte [0x140074c5e], al
mov eax, dword [rsp + 0x44]
mov ecx, dword [0x140074c68]
add ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c89]
or ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
movsx eax, byte [rsp + 0x21]
test eax, eax
je 0x14004a596
cmp dword [rsp + 0x38], 0
je 0x14004a596
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [0x140074c34]
shl eax, cl
and eax, dword [rsp + 0x34]
movsx ecx, byte [0x140074a63]
and ecx, eax
mov eax, ecx
mov byte [0x140074a63], al
movzx eax, byte [0x140074b8f]
or eax, dword [rsp + 0x28]
test eax, eax
je 0x14004a47e
movsx eax, byte [rsp + 0x21]
test eax, eax
je 0x14004a47e
mov dword [rsp + 0x124], 1
jmp 0x14004a489
mov dword [rsp + 0x124], 0
movzx eax, byte [0x140074b8e]
xor eax, dword [rsp + 0x124]
mov byte [0x140074b8e], al
cmp dword [rsp + 0x24], 0
jne 0x14004a4c1
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x2c]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004a4c1
mov dword [rsp + 0x128], 0
jmp 0x14004a4cc
mov dword [rsp + 0x128], 1
mov eax, dword [rsp + 0x128]
cmp dword [0x140074c34], eax
jne 0x14004a4e8
mov dword [rsp + 0x12c], 1
jmp 0x14004a4f3
mov dword [rsp + 0x12c], 0
movsx eax, byte [0x140074c6c]
and eax, dword [rsp + 0x12c]
mov byte [0x140074c6c], al
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c84]
and ecx, eax
mov eax, ecx
or eax, dword [rsp + 0x28]
movzx ecx, byte [0x140074b8e]
or ecx, eax
mov eax, ecx
mov byte [0x140074b8e], al
cmp dword [rsp + 0x28], 0
je 0x14004a550
movsx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x44]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x14004a550
mov dword [rsp + 0x130], 1
jmp 0x14004a55b
mov dword [rsp + 0x130], 0
movsx eax, byte [0x140074c5d]
add eax, dword [rsp + 0x130]
movzx ecx, byte [0x140074c8b]
or ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
movzx eax, byte [0x140074c5f]
movzx ecx, byte [rsp + 0x20]
and ecx, dword [rsp + 0x28]
and ecx, dword [rsp + 0x40]
sub eax, ecx
mov dword [0x140074c3c], eax
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [0x140074c80]
shl eax, cl
mov ecx, dword [rsp + 0x24]
shl eax, cl
test eax, eax
jne 0x14004a5cc
movsx eax, byte [rsp + 0x21]
movzx ecx, byte [0x140074c5f]
cmp eax, ecx
je 0x14004a5cc
mov dword [rsp + 0x134], 0
jmp 0x14004a5d7
mov dword [rsp + 0x134], 1
movsx eax, byte [0x140074c6e]
and eax, dword [rsp + 0x134]
mov byte [0x140074c6e], al
movzx eax, byte [0x140074b8e]
movzx ecx, byte [rsp + 0x20]
add eax, ecx
mov dword [0x140074a68], eax
movzx eax, byte [0x140074c88]
test eax, eax
je 0x14004a632
mov eax, dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [rsp + 0x48]
shl eax, cl
mov ecx, dword [0x140074c68]
mov edx, dword [rsp + 0x30]
sub edx, ecx
mov ecx, edx
and eax, ecx
test eax, eax
je 0x14004a632
mov byte [rsp + 0x54], 1
jmp 0x14004a637
mov byte [rsp + 0x54], 0
movzx eax, byte [rsp + 0x54]
mov byte [0x140074b8f], al
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x2c], eax
jae 0x14004a65a
mov dword [rsp + 0x138], 1
jmp 0x14004a665
mov dword [rsp + 0x138], 0
mov eax, dword [0x140074c48]
cmp dword [rsp + 0x138], eax
jne 0x14004a696
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [rsp + 0x30]
shr eax, cl
or eax, dword [rsp + 0x24]
movzx ecx, al
mov eax, dword [0x140074c30]
shr eax, cl
mov byte [0x140074c5c], al
mov eax, dword [rsp + 0x40]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [0x140074a6c]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
mov eax, dword [rsp + 0x28]
cmp dword [rsp + 0x34], eax
jne 0x14004a6c9
cmp dword [0x140074c68], 0
je 0x14004a970
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov eax, ecx
cmp dword [0x140074a68], eax
jne 0x14004a6ea
mov dword [rsp + 0x13c], 1
jmp 0x14004a6f5
mov dword [rsp + 0x13c], 0
movzx eax, byte [0x140074b8e]
add eax, dword [rsp + 0x13c]
mov byte [0x140074b8e], al
mov eax, dword [rsp + 0x3c]
mov ecx, dword [0x140074c3c]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x14004a722
cmp dword [rsp + 0x40], 0
jne 0x14004a741
mov eax, dword [0x140074c34]
mov ecx, dword [rsp + 0x2c]
and ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004a741
mov dword [rsp + 0x140], 0
jmp 0x14004a74c
mov dword [rsp + 0x140], 1
mov eax, dword [rsp + 0x140]
mov ecx, dword [0x140074c54]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
movzx eax, byte [0x140074b8e]
sub eax, dword [rsp + 0x48]
mov ecx, dword [0x140074c68]
and ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
mov eax, dword [rsp + 0x24]
mov ecx, dword [0x140074c80]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x38]
sub eax, dword [rsp + 0x4c]
sub eax, dword [0x140074c2c]
movzx ecx, byte [0x140074c5c]
or ecx, eax
mov eax, ecx
mov byte [0x140074c5c], al
cmp dword [rsp + 0x38], 0
je 0x14004a7b9
cmp dword [rsp + 0x3c], 0
jne 0x14004a7cd
cmp dword [rsp + 0x34], 0
jne 0x14004a7cd
mov dword [rsp + 0x144], 0
jmp 0x14004a7d8
mov dword [rsp + 0x144], 1
movsx eax, byte [0x140074c5d]
cmp eax, dword [rsp + 0x144]
jne 0x14004a7f5
mov dword [rsp + 0x148], 1
jmp 0x14004a800
mov dword [rsp + 0x148], 0
mov eax, dword [rsp + 0x148]
mov ecx, dword [0x140074a64]
and ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
movzx eax, byte [0x140074c8a]
mov ecx, dword [rsp + 0x2c]
shl eax, cl
mov dword [0x140074c70], eax
mov eax, dword [rsp + 0x4c]
mov ecx, dword [0x140074c38]
sub ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x21]
sub eax, ecx
mov ecx, dword [0x140074c28]
and ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
movsx eax, byte [rsp + 0x21]
cmp dword [0x140074c48], eax
jne 0x14004a869
mov dword [rsp + 0x14c], 1
jmp 0x14004a874
mov dword [rsp + 0x14c], 0
mov eax, dword [rsp + 0x14c]
mov ecx, dword [0x140074c50]
or ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movsx eax, byte [0x140074c5e]
cmp eax, dword [rsp + 0x4c]
je 0x14004a8ac
cmp dword [rsp + 0x48], 0
jne 0x14004a8ac
mov dword [rsp + 0x150], 0
jmp 0x14004a8b7
mov dword [rsp + 0x150], 1
mov eax, dword [rsp + 0x150]
mov ecx, dword [0x140074a6c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
movzx eax, byte [0x140074b8f]
mov dword [rsp + 0x1ac], eax
movzx ecx, byte [rsp + 0x20]
mov eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [rsp + 0x1ac]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [0x140074a68]
shl eax, cl
mov ecx, dword [0x140074c30]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
movzx eax, byte [0x140074c89]
mov ecx, dword [rsp + 0x34]
shl eax, cl
mov ecx, dword [rsp + 0x48]
sar eax, cl
movzx ecx, byte [rsp + 0x20]
shl eax, cl
test eax, eax
jne 0x14004a94e
cmp dword [0x140074c4c], 0
jne 0x14004a94e
mov dword [rsp + 0x154], 0
jmp 0x14004a959
mov dword [rsp + 0x154], 1
mov eax, dword [rsp + 0x154]
mov ecx, dword [0x140074a6c]
and ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov dword [rsp + 0x88], 0x14e
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x1b0], eax
mov eax, dword [rsp + 0x88]
dec eax
mov dword [rsp + 0x88], eax
cmp dword [rsp + 0x1b0], 0
je 0x14004a9c9
movsx eax, byte [0x140074c5d]
mov ecx, dword [rsp + 0x48]
sar eax, cl
movsx ecx, byte [0x140074c6e]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6e], al
jmp 0x14004a981
mov eax, dword [rsp + 0x24]
movzx ecx, al
mov eax, dword [rsp + 0x24]
shl eax, cl
xor eax, dword [rsp + 0x44]
mov ecx, dword [0x140074c48]
xor ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074c6c]
or ecx, eax
mov eax, ecx
mov byte [0x140074c6c], al
mov eax, dword [0x140074c50]
cmp dword [rsp + 0x28], eax
jne 0x14004aa0e
mov dword [rsp + 0x158], 1
jmp 0x14004aa19
mov dword [rsp + 0x158], 0
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x2c]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c70]
xor ecx, eax
mov eax, ecx
xor eax, dword [rsp + 0x158]
mov ecx, dword [0x140074c50]
add ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
mov eax, dword [rsp + 0x24]
cmp dword [rsp + 0x4c], eax
jle 0x14004aa5d
mov dword [rsp + 0x15c], 1
jmp 0x14004aa68
mov dword [rsp + 0x15c], 0
mov eax, dword [0x140074c30]
cmp dword [rsp + 0x15c], eax
jne 0x14004ac40
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c48]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x2c]
and eax, dword [rsp + 0x38]
test eax, eax
jne 0x14004aaad
movzx eax, byte [0x140074c8b]
test eax, eax
jne 0x14004aaad
mov dword [rsp + 0x160], 0
jmp 0x14004aab8
mov dword [rsp + 0x160], 1
movzx eax, byte [0x140074c5f]
sub eax, dword [rsp + 0x160]
mov byte [0x140074c5f], al
movsx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074a6c]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c50]
or ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
mov eax, dword [rsp + 0x34]
cmp dword [0x140074a64], eax
jne 0x14004ab04
mov dword [rsp + 0x164], 1
jmp 0x14004ab0f
mov dword [rsp + 0x164], 0
movsx eax, byte [0x140074c6f]
and eax, dword [rsp + 0x164]
mov byte [0x140074c6f], al
mov eax, dword [rsp + 0x4c]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [0x140074c3c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [0x140074c68]
or ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074a62]
xor ecx, eax
mov eax, ecx
mov byte [0x140074a62], al
movzx eax, byte [0x140074c88]
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x44]
and edx, ecx
mov ecx, edx
or eax, ecx
movsx ecx, byte [0x140074c5e]
add ecx, eax
mov eax, ecx
mov byte [0x140074c5e], al
movsx eax, byte [0x140074a62]
mov dword [rsp + 0x1b4], eax
movzx ecx, byte [rsp + 0x20]
mov eax, ecx
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [rsp + 0x1b4]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
movsx eax, byte [rsp + 0x21]
sub eax, dword [rsp + 0x3c]
test eax, eax
jne 0x14004abd5
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x14004abd5
mov dword [rsp + 0x168], 0
jmp 0x14004abe0
mov dword [rsp + 0x168], 1
mov eax, dword [rsp + 0x168]
mov ecx, dword [0x140074c80]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c6d], al
movzx eax, byte [0x140074c88]
movzx ecx, byte [rsp + 0x20]
xor eax, ecx
mov ecx, dword [0x140074a6c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
movsx eax, byte [0x140074c90]
mov dword [rsp + 0x1b8], eax
mov eax, dword [rsp + 0x4c]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [rsp + 0x1b8]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [0x140074c80], 0
je 0x14004aca4
mov eax, dword [0x140074c48]
cmp dword [rsp + 0x30], eax
je 0x14004ac68
mov dword [rsp + 0x16c], 1
jmp 0x14004ac73
mov dword [rsp + 0x16c], 0
mov eax, dword [rsp + 0x16c]
cmp dword [rsp + 0x34], eax
jne 0x14004aca4
movzx eax, byte [0x140074c5f]
cmp eax, dword [rsp + 0x40]
jne 0x14004ac94
mov byte [rsp + 0x55], 1
jmp 0x14004ac99
mov byte [rsp + 0x55], 0
movzx eax, byte [rsp + 0x55]
mov byte [0x140074c88], al
movzx eax, byte [0x140074b8e]
movzx ecx, byte [rsp + 0x20]
sub ecx, dword [rsp + 0x38]
mov edx, dword [rsp + 0x4c]
and edx, ecx
mov ecx, edx
shl eax, cl
mov dword [0x140074c70], eax
movzx eax, byte [0x140074b8e]
mov ecx, dword [rsp + 0x40]
lea eax, [rcx + rax*2]
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov word [rsp + 0x7c], ax
movsx eax, word [rsp + 0x7c]
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0
je 0x14004ad13
cmp dword [rsp + 0x78], 1
je 0x14004ad6e
cmp dword [rsp + 0x78], 2
je 0x14004adc3
cmp dword [rsp + 0x78], 3
je 0x14004ae0c
jmp 0x14004ae91
xor edx, edx
mov eax, dword [rsp + 0x30]
mov ecx, 4
div ecx
mov ecx, dword [0x140074a64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x3c]
cmp dword [0x140074c74], eax
jne 0x14004ad47
mov dword [rsp + 0x170], 1
jmp 0x14004ad52
mov dword [rsp + 0x170], 0
mov eax, dword [rsp + 0x170]
mov ecx, dword [0x140074c54]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
jmp 0x14004af2c
cmp dword [0x140074c48], 0
jne 0x14004ad9c
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x2c]
xor ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004ad9c
mov dword [rsp + 0x174], 0
jmp 0x14004ada7
mov dword [rsp + 0x174], 1
mov eax, dword [rsp + 0x174]
mov ecx, dword [0x140074c74]
or ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
jmp 0x14004af2c
mov eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x40]
shl eax, cl
mov ecx, dword [0x140074c54]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
mov eax, dword [rsp + 0x40]
movzx ecx, al
mov eax, dword [rsp + 0x38]
shl eax, cl
mov ecx, dword [0x140074c68]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c84]
and ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
jmp 0x14004af2c
movzx eax, byte [0x140074c8a]
mov dword [rsp + 0x1bc], eax
xor edx, edx
mov eax, dword [rsp + 0x44]
mov ecx, 4
div ecx
mov ecx, dword [rsp + 0x1bc]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
movzx eax, byte [0x140074c89]
movzx ecx, byte [rsp + 0x20]
sub eax, ecx
test eax, eax
je 0x14004ae6a
mov eax, dword [rsp + 0x28]
movzx ecx, al
mov eax, dword [rsp + 0x34]
shr eax, cl
cmp eax, dword [0x140074c8c]
jne 0x14004ae6a
mov dword [rsp + 0x178], 1
jmp 0x14004ae75
mov dword [rsp + 0x178], 0
mov eax, dword [rsp + 0x178]
mov ecx, dword [0x140074c38]
and ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
jmp 0x14004af2c
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x28]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x14004aeb5
cmp dword [rsp + 0x38], 0
je 0x14004aeb5
mov dword [rsp + 0x17c], 1
jmp 0x14004aec0
mov dword [rsp + 0x17c], 0
movsx eax, byte [0x140074c6f]
xor eax, dword [rsp + 0x17c]
movsx ecx, byte [0x140074c6f]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
movsx eax, byte [rsp + 0x21]
add eax, dword [rsp + 0x3c]
movzx ecx, al
mov eax, dword [0x140074c60]
shl eax, cl
mov ecx, dword [0x140074c48]
mov edx, dword [rsp + 0x40]
add edx, ecx
mov ecx, edx
shl eax, cl
movsx ecx, byte [0x140074c6f]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
movsx eax, byte [0x140074c90]
movsx ecx, byte [rsp + 0x21]
sub eax, ecx
xor eax, dword [rsp + 0x44]
mov byte [0x140074c89], al
movzx edx, byte [0x140074c6e]
movzx ecx, byte [0x140074b8e]
call fcn.140047c90
movzx eax, byte [rsp + 0x20]
add rsp, 0x1c8
ret