Function at 0x140005080
Capabilities:
Clear file content

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov dword [rsp + 8], ecx
sub rsp, 0xd8
mov eax, dword [rsp + 0x110]
add eax, 0xd
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0xe8]
sub eax, 0x8b2
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0xf8]
xor eax, 0x1b7
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0xe8]
xor eax, 0xb7a
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x110]
xor eax, 0x1a2
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x110]
xor eax, 0x81e
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x50]
add eax, 0x5b6
cmp dword [rsp + 0x40], eax
jl 0x140005789
mov eax, dword [rsp + 0x44]
xor eax, 0x2e3
cmp dword [rsp + 0x50], eax
jg 0x1400055da
mov eax, dword [rsp + 0x44]
xor eax, 0xdf8
mov dword [rsp + 0x44], eax
mov rax, qword [section..data]
mov eax, dword [rax + 8]
add eax, 0xb6b25
mov dword [rsp + 0x6c], eax
mov eax, 4
imul rax, rax, 1
mov rcx, qword [rsp + 0xf0]
mov eax, dword [rcx + rax + 0x4c]
mov ecx, dword [0x140036058]
lea eax, [rcx + rax - 0x2453ca]
mov dword [rsp + 0x68], eax
mov rax, qword [rsp + 0xf0]
mov eax, dword [rax + 0x3c]
mov r9d, dword [rsp + 0x68]
mov r8d, dword [rsp + 0x6c]
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
add rax, 0x3000
mov rcx, qword [rsp + 0xf0]
mov qword [rcx + 0xb0], rax
mov eax, dword [rsp + 0x44]
xor eax, 0xf1b
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x50]
xor eax, 0x5ca
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x54]
sub eax, 0x529
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x54]
add eax, 0xb1
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x4c]
xor eax, 0xa74
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x4c]
add eax, 0x56f
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x40]
add eax, 0x10e
mov dword [rsp + 0x70], eax
mov rax, qword [section..data]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x78]
mov r8d, dword [rsp + 0x7c]
mov edx, dword [rsp + 0x80]
mov ecx, dword [rsp + 0x84]
call fcn.140002680
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
add eax, 0x10e
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x54]
sub eax, 0x444
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x48]
add eax, 0x9bc
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x40]
sub eax, 0x667
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
xor eax, 0xbe3
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x50]
add eax, 0x493
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x44]
add eax, 0x5f4
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x40]
add eax, 0x2f8
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
xor eax, 0x7c
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x48]
sub eax, 0x12b
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x48]
sub eax, 0x319
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x5c], 0
jmp 0x1400052f6
mov eax, dword [rsp + 0x5c]
inc eax
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0xc28
jge 0x1400054fb
mov eax, 4
imul rax, rax, 2
lea rcx, [0x1400360cc]
mov eax, dword [rcx + rax]
dec eax
mov rcx, qword [rsp + 0xf0]
mov ecx, dword [rcx + 0x48]
or ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf0]
mov dword [rcx + 0x48], eax
movsxd rax, dword [rsp + 0x5c]
mov rcx, qword [rsp + 0xf0]
mov rcx, qword [rcx + 0x98]
mov eax, dword [rcx + rax*4]
mov dword [rsp + 0x58], eax
mov rax, qword [rsp + 0xf0]
mov eax, dword [rax + 8]
mov rcx, qword [rsp + 0xf0]
mov ecx, dword [rcx + 0xd8]
lea eax, [rax + rcx + 0xb3b25]
mov rcx, qword [rsp + 0xf0]
mov dword [rcx + 0xd8], eax
mov eax, 4
imul rax, rax, 1
lea rcx, [0x140036030]
mov rdx, qword [rsp + 0xf0]
mov edx, dword [rdx + 0xdc]
mov eax, dword [rcx + rax]
xor eax, edx
mov rcx, qword [rsp + 0xf0]
mov ecx, dword [rcx + 0x60]
mov edx, 0xfffe30b0
lea rax, [rax + rdx]
lea eax, [rax + rcx]
mov rcx, qword [rsp + 0xf0]
mov dword [rcx + 0x60], eax
mov rax, qword [rsp + 0xf0]
mov eax, dword [rax + 0xdc]
xor eax, 1
mov rcx, qword [rsp + 0xf0]
mov ecx, dword [rcx + 0x6c]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf0]
mov dword [rcx + 0x6c], eax
mov eax, dword [rsp + 0x58]
imul eax, dword [0x140036064]
mov dword [rsp + 0x58], eax
mov eax, 4
imul rax, rax, 1
lea rcx, [0x14003605c]
mov eax, dword [rcx + rax]
xor eax, 0x138028
mov rcx, qword [section..data]
add eax, dword [rcx + 0xac]
mov rcx, qword [section..data]
mov dword [rcx + 0xac], eax
mov eax, dword [rsp + 0x58]
shr eax, 0x10
movsxd rcx, dword [0x140036068]
mov rdx, qword [rsp + 0xf0]
mov rdx, qword [rdx + 0xa0]
mov byte [rdx + rcx], al
mov eax, dword [0x140036068]
inc eax
mov dword [0x140036068], eax
mov eax, dword [rsp + 0x58]
shr eax, 8
mov rcx, qword [rsp + 0xf0]
movsxd rcx, dword [rcx + 0x58]
mov rdx, qword [0x1400360b0]
mov byte [rdx + rcx], al
mov rax, qword [rsp + 0xf0]
mov eax, dword [rax + 0x58]
inc eax
mov rcx, qword [rsp + 0xf0]
mov dword [rcx + 0x58], eax
movsxd rax, dword [0x140036068]
mov rcx, qword [rsp + 0xf0]
mov rcx, qword [rcx + 0xa0]
movzx edx, byte [rsp + 0x58]
mov byte [rcx + rax], dl
mov eax, dword [0x140036068]
inc eax
mov dword [0x140036068], eax
mov eax, 4
imul rax, rax, 1
lea rcx, [0x140036030]
mov rdx, qword [rsp + 0xf0]
mov edx, dword [rdx + 0x38]
add edx, 0xfffb27c9
mov eax, dword [rcx + rax]
imul eax, edx
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x140036030]
mov dword [rdx + rcx], eax
jmp 0x1400052ec
mov eax, dword [rsp + 0x4c]
add eax, 0x56f
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x44]
sub eax, 0x529
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0x54]
sub eax, 0x3b
mov dword [rsp + 0x94], eax
mov eax, dword [rsp + 0x44]
xor eax, 0x8b
mov dword [rsp + 0x90], eax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsp + 0x4c]
sub eax, 0x134
mov dword [rsp + 0x8c], eax
mov eax, dword [rsp + 0x4c]
sub eax, 0x85
mov dword [rsp + 0x88], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x8c]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0xa8]
mov r8d, dword [rsp + 0x90]
mov edx, dword [rsp + 0x94]
mov ecx, dword [rsp + 0x98]
call fcn.140001470
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x4c]
xor eax, 0x31
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x48]
add eax, 0x33a
mov dword [rsp + 0x48], eax
mov eax, dword [rsp + 0x44]
xor eax, 0xcf3
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x50]
add eax, 0xe3
mov dword [rsp + 0x50], eax
jmp 0x140005789
mov eax, 4
imul rax, rax, 3
lea rcx, [0x14003601c]
mov eax, dword [rcx + rax]
mov dword [rsp + 0x60], eax
jmp 0x1400055fe
mov eax, dword [rsp + 0x60]
add eax, 2
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x48]
or ecx, eax
mov eax, ecx
xor eax, 0x7d6
cmp dword [rsp + 0x60], eax
jle 0x140005789
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x64], eax
jmp 0x14000562e
mov eax, dword [rsp + 0x64]
add eax, 4
mov dword [rsp + 0x64], eax
mov eax, dword [0x140036038]
mov ecx, dword [rsp + 0x40]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0xf0]
sub eax, dword [rcx + 8]
cmp dword [rsp + 0x64], eax
ja 0x140005784
mov eax, dword [rsp + 0x40]
and eax, 0x891
sub eax, 0x2d2
cmp dword [rsp + 0x40], eax
jne 0x140005757
mov eax, 4
imul rax, rax, 1
lea rcx, [0x140036090]
mov eax, dword [rcx + rax]
xor eax, 0x8b2
mov ecx, 4
imul rcx, rcx, 2
mov rdx, qword [section..data]
xor eax, dword [rdx + rcx + 0xc]
mov eax, eax
mov qword [rsp + 0xb0], rax
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [rsp + 0xf0]
mov ecx, dword [rsp + 0x48]
imul ecx, dword [rax + 0x6c]
mov eax, ecx
mov rcx, qword [section..data]
mov ecx, dword [rcx + 0x74]
sub ecx, eax
mov eax, ecx
mov rcx, qword [section..data]
mov dword [rcx + 0x74], eax
mov rax, qword [rsp + 0xf0]
mov ecx, dword [rsp + 0x4c]
mov eax, dword [rax + 8]
and eax, ecx
mov ecx, dword [rsp + 0x54]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
xor ecx, eax
mov eax, ecx
imul eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [0x140036084]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x4c]
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x44]
and ecx, eax
mov eax, ecx
mov rcx, qword [section..data]
add eax, dword [rcx + 0x6c]
mov eax, eax
mov qword [rsp + 0xb8], rax
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14000577f
mov eax, dword [0x140036084]
imul eax, dword [rsp + 0x54]
imul eax, dword [rsp + 0x4c]
mov eax, eax
mov qword [rsp + 0xc0], rax
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
jmp 0x140005623
jmp 0x1400055f3
mov eax, dword [rsp + 0x4c]
add eax, 0x33
add rsp, 0xd8
ret