Function at 0x14004d900
Capabilities:
Encode data using base64

Disassembly:
mov dword [rsp + 8], ecx
sub rsp, 0x178
mov byte [rsp + 0x25], 0x9f
mov dword [rsp + 0x34], 0x119
mov byte [rsp + 0x22], 0xf
mov byte [rsp + 0x26], 0xd
mov byte [rsp + 0x24], 0x2a
mov dword [rsp + 0x2c], 0x6b
mov dword [rsp + 0x28], 0x3d
mov dword [rsp + 0x40], 0xd7
mov byte [rsp + 0x21], 3
mov dword [rsp + 0x3c], 0xd4
mov byte [rsp + 0x20], 0xff
mov byte [rsp + 0x23], 0x3b
mov dword [rsp + 0x38], 0x14b
mov dword [rsp + 0x48], 0x62
mov dword [rsp + 0x30], 0x36
call qword [sym.imp.USER32.dll_GetDesktopWindow]
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x26]
sub eax, ecx
test eax, eax
jne 0x14004d995
cmp dword [rsp + 0x28], 0
jne 0x14004d995
mov dword [rsp + 0x7c], 0
jmp 0x14004d99d
mov dword [rsp + 0x7c], 1
mov eax, dword [rsp + 0x7c]
mov ecx, dword [0x140074c70]
or ecx, eax
mov eax, ecx
movsx ecx, byte [0x140074c5e]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c5e], al
movzx eax, byte [0x140074c5f]
mov dword [rsp + 0x134], eax
movzx ecx, byte [rsp + 0x21]
mov eax, ecx
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [rsp + 0x134]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [0x140074a68]
shr eax, cl
movzx ecx, byte [0x140074c5f]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
movzx eax, byte [0x140074c6d]
movsx ecx, byte [rsp + 0x23]
imul eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov byte [rsp + 0x20], al
movzx eax, byte [0x140074c6d]
mov ecx, dword [rsp + 0x34]
shl eax, cl
test eax, eax
jne 0x14004da4d
cmp dword [rsp + 0x2c], 0
jne 0x14004da4d
mov byte [rsp + 0x44], 0
jmp 0x14004da52
mov byte [rsp + 0x44], 1
movzx eax, byte [rsp + 0x44]
mov byte [0x140074c89], al
mov eax, dword [0x140074c60]
imul eax, dword [rsp + 0x34]
xor edx, edx
mov ecx, 3
div ecx
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c48]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c74]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
movzx eax, byte [rsp + 0x24]
add eax, dword [rsp + 0x30]
sub eax, dword [rsp + 0x28]
cmp eax, dword [0x140074c84]
jne 0x14004dab5
mov dword [rsp + 0x80], 1
jmp 0x14004dac0
mov dword [rsp + 0x80], 0
movzx eax, byte [0x140074c8b]
and eax, dword [rsp + 0x80]
movzx ecx, byte [0x140074c88]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c88], al
movsx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x21]
cmp eax, ecx
jne 0x14004db01
cmp dword [rsp + 0x38], 0
je 0x14004db01
mov dword [rsp + 0x84], 1
jmp 0x14004db0c
mov dword [rsp + 0x84], 0
movsx eax, byte [0x140074c6f]
add eax, dword [rsp + 0x84]
movzx ecx, byte [0x140074c8b]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
mov eax, dword [0x140074c74]
imul eax, dword [rsp + 0x30]
xor edx, edx
mov ecx, 4
div ecx
mov byte [rsp + 0x24], al
mov eax, dword [0x140074a68]
imul eax, dword [rsp + 0x28]
xor edx, edx
mov ecx, 5
div ecx
mov eax, edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x6c], 0xfffffd59
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x138], eax
mov eax, dword [rsp + 0x6c]
inc eax
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x138], 0
je 0x14004dc5b
movsx eax, byte [rsp + 0x25]
cmp dword [0x140074c8c], eax
jne 0x14004db9c
mov byte [rsp + 0x45], 1
jmp 0x14004dba1
mov byte [rsp + 0x45], 0
movzx eax, byte [rsp + 0x45]
mov byte [0x140074c89], al
movsx eax, byte [rsp + 0x20]
movzx ecx, al
mov eax, dword [0x140074c70]
sar eax, cl
mov byte [0x140074c5e], al
cmp dword [0x140074c54], 0
jne 0x14004dbef
movsx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x3c]
sar eax, cl
mov ecx, dword [rsp + 0x3c]
xor ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004dbef
mov dword [rsp + 0x88], 0
jmp 0x14004dbfa
mov dword [rsp + 0x88], 1
mov eax, dword [rsp + 0x88]
mov ecx, dword [0x140074c70]
and ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
cmp dword [0x140074c34], 0
je 0x14004dc37
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x26]
xor eax, ecx
test eax, eax
je 0x14004dc37
mov dword [rsp + 0x8c], 1
jmp 0x14004dc42
mov dword [rsp + 0x8c], 0
movzx eax, byte [0x140074c6d]
xor eax, dword [rsp + 0x8c]
mov byte [0x140074c6d], al
jmp 0x14004db65
movzx eax, byte [rsp + 0x21]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [0x140074a64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x50], 0xbc
mov dword [rsp + 0x50], 0x292
jmp 0x14004dc95
mov eax, dword [rsp + 0x50]
dec eax
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x50], 0x3f
jle 0x14004ddee
cmp dword [0x140074c38], 0
je 0x14004dd00
movsx eax, byte [rsp + 0x23]
test eax, eax
je 0x14004dcca
movsx eax, byte [0x140074c6e]
test eax, eax
je 0x14004dcca
mov dword [rsp + 0x90], 1
jmp 0x14004dcd5
mov dword [rsp + 0x90], 0
mov eax, dword [rsp + 0x90]
cmp dword [rsp + 0x30], eax
jne 0x14004dd00
movsx eax, byte [0x140074c5e]
movsx ecx, byte [rsp + 0x22]
xor eax, ecx
mov ecx, dword [0x140074c84]
and ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c84]
and ecx, eax
mov eax, ecx
test eax, eax
je 0x14004dd38
movsx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x28]
sar eax, cl
movsx ecx, byte [0x140074c6c]
sar eax, cl
test eax, eax
je 0x14004dd38
mov dword [rsp + 0x94], 1
jmp 0x14004dd43
mov dword [rsp + 0x94], 0
movsx eax, byte [0x140074c6f]
sub eax, dword [rsp + 0x94]
mov byte [0x140074c6f], al
movzx eax, byte [0x140074c89]
test eax, eax
jne 0x14004dd90
movsx eax, byte [rsp + 0x20]
test eax, eax
jne 0x14004dd90
movsx eax, byte [rsp + 0x23]
and eax, dword [rsp + 0x2c]
test eax, eax
jne 0x14004dd90
movzx eax, byte [0x140074b8f]
test eax, eax
jne 0x14004dd90
mov dword [rsp + 0x98], 0
jmp 0x14004dd9b
mov dword [rsp + 0x98], 1
mov eax, dword [rsp + 0x98]
mov ecx, dword [0x140074c38]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
movsx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074a6c]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c4c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
movzx eax, byte [0x140074c5f]
imul eax, dword [rsp + 0x40]
cdq
mov ecx, 5
idiv ecx
mov byte [rsp + 0x24], al
jmp 0x14004dc8b
mov dword [rsp + 0x4c], 0x1b1
mov dword [rsp + 0x4c], 7
jmp 0x14004de0a
mov eax, dword [rsp + 0x4c]
inc eax
mov dword [rsp + 0x4c], eax
cmp dword [rsp + 0x4c], 0x3bf
jge 0x14004de65
cmp dword [0x140074c38], 0
je 0x14004de41
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x21]
add eax, ecx
test eax, eax
je 0x14004de41
mov dword [rsp + 0x9c], 1
jmp 0x14004de4c
mov dword [rsp + 0x9c], 0
mov eax, dword [rsp + 0x9c]
mov ecx, dword [0x140074c54]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
jmp 0x14004de00
movsx eax, byte [rsp + 0x25]
mov ecx, dword [0x140074c70]
add ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x21]
or eax, ecx
mov byte [0x140074c6d], al
movzx eax, byte [0x140074c89]
test eax, eax
je 0x14004dec0
movzx eax, byte [rsp + 0x24]
movzx ecx, byte [rsp + 0x21]
mov dword [rsp + 0x13c], ecx
mov edx, dword [rsp + 0x30]
movzx ecx, dl
mov edx, dword [rsp + 0x13c]
sar edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14004dec0
mov dword [rsp + 0xa0], 1
jmp 0x14004decb
mov dword [rsp + 0xa0], 0
movsx eax, byte [0x140074c90]
or eax, dword [rsp + 0xa0]
mov byte [0x140074c90], al
movsx eax, byte [0x140074c5e]
sub eax, dword [rsp + 0x3c]
test eax, eax
jne 0x14004df04
movsx eax, byte [rsp + 0x20]
test eax, eax
jne 0x14004df04
mov dword [rsp + 0xa4], 0
jmp 0x14004df0f
mov dword [rsp + 0xa4], 1
mov eax, dword [rsp + 0xa4]
mov ecx, dword [0x140074c34]
and ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
movzx eax, byte [0x140074c5c]
test eax, eax
jne 0x14004df52
movsx eax, byte [rsp + 0x25]
xor eax, dword [rsp + 0x34]
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
test eax, eax
jne 0x14004df52
mov dword [rsp + 0xa8], 0
jmp 0x14004df5d
mov dword [rsp + 0xa8], 1
mov eax, dword [rsp + 0xa8]
mov ecx, dword [0x140074c2c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [rsp + 0x38], 0
je 0x14004df9e
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x2c]
add ecx, eax
mov eax, ecx
test eax, eax
je 0x14004df9e
mov dword [rsp + 0xac], 1
jmp 0x14004dfa9
mov dword [rsp + 0xac], 0
mov eax, dword [rsp + 0xac]
mov ecx, dword [0x140074c28]
add ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c50]
add ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
mov eax, dword [0x140074a6c]
imul eax, dword [rsp + 0x34]
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov byte [rsp + 0x20], al
cmp dword [0x140074a64], 0
je 0x14004e001
cmp dword [rsp + 0x30], 0
je 0x14004e001
mov dword [rsp + 0xb0], 1
jmp 0x14004e00c
mov dword [rsp + 0xb0], 0
mov eax, dword [rsp + 0xb0]
mov ecx, dword [0x140074c2c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
xor edx, edx
mov eax, dword [rsp + 0x28]
mov ecx, 5
div ecx
mov eax, edx
mov ecx, dword [0x140074c38]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x70], 0xffffff9f
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x140], eax
mov eax, dword [rsp + 0x70]
inc eax
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x140], 0
je 0x14004e3d2
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x40], eax
jbe 0x14004e082
mov dword [rsp + 0xb4], 1
jmp 0x14004e08d
mov dword [rsp + 0xb4], 0
movzx eax, byte [0x140074c5f]
cmp dword [rsp + 0xb4], eax
jne 0x14004e2ac
cmp dword [0x140074a64], 0
je 0x14004e0c8
movzx eax, byte [rsp + 0x24]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
test eax, eax
je 0x14004e0c8
mov dword [rsp + 0xb8], 1
jmp 0x14004e0d3
mov dword [rsp + 0xb8], 0
mov eax, dword [rsp + 0xb8]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
mov eax, dword [rsp + 0x34]
cmp dword [0x140074c34], eax
jne 0x14004e103
movsx eax, byte [rsp + 0x23]
sub eax, dword [rsp + 0x38]
test eax, eax
jne 0x14004e113
cmp dword [0x140074c70], 0
jne 0x14004e113
mov byte [rsp + 0x46], 0
jmp 0x14004e118
mov byte [rsp + 0x46], 1
movzx eax, byte [rsp + 0x46]
mov byte [0x140074c6f], al
movzx eax, byte [0x140074c8a]
mov dword [rsp + 0x144], eax
xor edx, edx
mov eax, dword [rsp + 0x30]
mov ecx, 4
div ecx
mov ecx, dword [rsp + 0x144]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x26], al
movzx eax, byte [0x140074c6d]
movsx ecx, byte [rsp + 0x23]
sub eax, ecx
mov ecx, dword [rsp + 0x30]
shl eax, cl
movsx ecx, byte [rsp + 0x25]
xor eax, ecx
movsx ecx, byte [0x140074a62]
or eax, ecx
movsx ecx, byte [0x140074a62]
xor ecx, eax
mov eax, ecx
mov byte [0x140074a62], al
xor edx, edx
mov eax, dword [rsp + 0x30]
mov ecx, 3
div ecx
mov eax, edx
mov ecx, dword [0x140074c4c]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
movzx eax, byte [0x140074c6d]
mov ecx, dword [rsp + 0x2c]
shl eax, cl
mov ecx, dword [0x140074c4c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
movsx eax, byte [rsp + 0x20]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [0x140074c48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
movsx eax, byte [0x140074a63]
movzx ecx, byte [rsp + 0x24]
or eax, ecx
movzx ecx, byte [0x140074c5c]
add ecx, eax
mov eax, ecx
mov byte [0x140074c5c], al
movsx eax, byte [0x140074c5e]
movzx ecx, byte [rsp + 0x24]
imul eax, ecx
cdq
mov ecx, 5
idiv ecx
mov dword [rsp + 0x48], eax
cmp dword [0x140074c70], 0
je 0x14004e232
movsx eax, byte [rsp + 0x20]
test eax, eax
je 0x14004e232
mov dword [rsp + 0xbc], 1
jmp 0x14004e23d
mov dword [rsp + 0xbc], 0
mov eax, dword [rsp + 0xbc]
mov ecx, dword [0x140074c2c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
cmp dword [0x140074c74], 0
jne 0x14004e28a
movsx eax, byte [rsp + 0x20]
movzx ecx, byte [rsp + 0x24]
shl eax, cl
mov ecx, dword [0x140074a6c]
mov edx, dword [rsp + 0x30]
add edx, ecx
mov ecx, edx
sar eax, cl
test eax, eax
jne 0x14004e28a
mov dword [rsp + 0xc0], 0
jmp 0x14004e295
mov dword [rsp + 0xc0], 1
mov eax, dword [rsp + 0xc0]
mov ecx, dword [0x140074c80]
add ecx, eax
mov eax, ecx
mov dword [0x140074c80], eax
movsx eax, byte [0x140074c6f]
movsx ecx, byte [rsp + 0x23]
cmp eax, ecx
jne 0x14004e2c9
mov dword [rsp + 0xc4], 1
jmp 0x14004e2d4
mov dword [rsp + 0xc4], 0
movzx eax, byte [rsp + 0x26]
mov ecx, dword [rsp + 0xc4]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c54]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
movsx eax, byte [0x140074c90]
add eax, dword [rsp + 0x48]
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
movsx eax, byte [0x140074c90]
movsx ecx, byte [rsp + 0x20]
imul eax, ecx
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov byte [rsp + 0x22], al
cmp dword [0x140074c80], 0
je 0x14004e35a
movsx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x22]
or eax, ecx
test eax, eax
je 0x14004e35a
mov dword [rsp + 0xc8], 1
jmp 0x14004e365
mov dword [rsp + 0xc8], 0
mov eax, dword [rsp + 0xc8]
mov ecx, dword [0x140074a68]
add ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
movzx eax, byte [0x140074c8a]
cmp dword [rsp + 0x30], eax
jne 0x14004e396
mov dword [rsp + 0xcc], 1
jmp 0x14004e3a1
mov dword [rsp + 0xcc], 0
movsx eax, byte [0x140074c90]
movsx ecx, byte [rsp + 0x20]
add eax, ecx
movzx ecx, byte [rsp + 0x26]
add eax, ecx
and eax, dword [rsp + 0xcc]
mov ecx, dword [0x140074c38]
or ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
jmp 0x14004e048
movzx eax, byte [rsp + 0x24]
movsx ecx, byte [0x140074c5e]
imul ecx, ecx, 5
add eax, ecx
cdq
mov ecx, 7
idiv ecx
mov eax, edx
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x148]
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0
je 0x14004e428
cmp dword [rsp + 0x54], 1
je 0x14004e46e
cmp dword [rsp + 0x54], 2
je 0x14004e4cc
cmp dword [rsp + 0x54], 3
je 0x14004e501
jmp 0x14004e551
movsx eax, byte [0x140074c6f]
test eax, eax
jne 0x14004e447
cmp dword [rsp + 0x2c], 0
jne 0x14004e447
mov dword [rsp + 0xd0], 0
jmp 0x14004e452
mov dword [rsp + 0xd0], 1
mov eax, dword [rsp + 0xd0]
mov ecx, dword [0x140074c54]
or ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
jmp 0x14004e551
movsx eax, byte [0x140074c90]
movzx ecx, byte [rsp + 0x21]
movsx edx, byte [rsp + 0x23]
add ecx, edx
movsx edx, byte [rsp + 0x22]
or ecx, edx
or eax, ecx
movsx ecx, byte [0x140074c90]
and ecx, eax
mov eax, ecx
mov byte [0x140074c90], al
movsx eax, byte [0x140074c5e]
mov dword [rsp + 0x14c], eax
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 3
div ecx
mov eax, edx
mov ecx, dword [rsp + 0x14c]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
jmp 0x14004e551
movzx eax, byte [rsp + 0x21]
cdq
mov ecx, 5
idiv ecx
mov ecx, dword [0x140074c60]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x24], al
movzx eax, byte [0x140074c8b]
movsx ecx, byte [rsp + 0x23]
sar eax, cl
xor eax, dword [rsp + 0x28]
mov dword [0x140074c80], eax
jmp 0x14004e551
movsx eax, byte [rsp + 0x22]
test eax, eax
je 0x14004e528
movzx eax, byte [rsp + 0x24]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
test eax, eax
je 0x14004e528
mov dword [rsp + 0xd4], 1
jmp 0x14004e533
mov dword [rsp + 0xd4], 0
movsx eax, byte [0x140074c6c]
xor eax, dword [rsp + 0xd4]
mov ecx, dword [0x140074c60]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c50]
and ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x25]
xor eax, ecx
test eax, eax
je 0x14004e589
movsx eax, byte [rsp + 0x22]
movzx ecx, byte [0x140074c89]
sub eax, ecx
test eax, eax
je 0x14004e589
mov dword [rsp + 0xd8], 1
jmp 0x14004e594
mov dword [rsp + 0xd8], 0
mov eax, dword [rsp + 0xd8]
mov ecx, dword [0x140074c70]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
movsx eax, byte [rsp + 0x25]
cmp dword [0x140074c50], eax
jne 0x14004e5d8
movzx eax, byte [rsp + 0x21]
sub eax, dword [rsp + 0x3c]
and eax, dword [0x140074c34]
test eax, eax
je 0x14004e5d8
mov dword [rsp + 0xdc], 1
jmp 0x14004e5e3
mov dword [rsp + 0xdc], 0
movsx eax, byte [0x140074c6c]
add eax, dword [rsp + 0xdc]
mov byte [0x140074c6c], al
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [0x140074c80], 0
je 0x14004e61c
movsx eax, byte [rsp + 0x25]
test eax, eax
je 0x14004e61c
mov dword [rsp + 0xe0], 1
jmp 0x14004e627
mov dword [rsp + 0xe0], 0
mov eax, dword [rsp + 0xe0]
mov ecx, dword [0x140074c38]
and ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
movzx eax, byte [0x140074c89]
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
mov ecx, dword [0x140074c70]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
movzx eax, byte [0x140074c8b]
mov ecx, dword [rsp + 0x28]
lea eax, [rcx + rax*2]
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov word [rsp + 0x68], ax
movsx eax, word [rsp + 0x68]
mov dword [rsp + 0x58], eax
cmp dword [rsp + 0x58], 0
je 0x14004e6b0
cmp dword [rsp + 0x58], 1
je 0x14004e746
cmp dword [rsp + 0x58], 2
je 0x14004e76c
cmp dword [rsp + 0x58], 3
je 0x14004e7ab
jmp 0x14004e7ca
movzx eax, byte [0x140074c89]
test eax, eax
je 0x14004e6d1
movsx eax, byte [rsp + 0x22]
test eax, eax
je 0x14004e6d1
mov dword [rsp + 0xe4], 1
jmp 0x14004e6dc
mov dword [rsp + 0xe4], 0
mov eax, dword [rsp + 0xe4]
mov dword [0x140074c70], eax
movzx eax, byte [rsp + 0x26]
movzx ecx, al
mov eax, dword [0x140074c38]
sar eax, cl
movzx ecx, byte [rsp + 0x21]
and eax, ecx
test eax, eax
jne 0x14004e722
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c60]
sar eax, cl
test eax, eax
jne 0x14004e722
mov dword [rsp + 0xe8], 0
jmp 0x14004e72d
mov dword [rsp + 0xe8], 1
movzx eax, byte [0x140074c88]
sub eax, dword [rsp + 0xe8]
mov byte [0x140074c88], al
jmp 0x14004e7ca
movsx eax, byte [rsp + 0x20]
movzx ecx, al
mov eax, dword [0x140074c84]
shr eax, cl
and eax, dword [rsp + 0x34]
mov ecx, dword [0x140074c3c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c3c], eax
jmp 0x14004e7ca
movzx eax, byte [rsp + 0x24]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [0x140074c38]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x20], al
movzx eax, byte [rsp + 0x24]
mov ecx, dword [0x140074c38]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
jmp 0x14004e7ca
movzx eax, byte [rsp + 0x26]
mov ecx, dword [0x140074c54]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov dword [rsp + 0x40], eax
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
movsx eax, byte [0x140074c6f]
test eax, eax
je 0x14004e818
movzx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x38]
mov edx, dword [rsp + 0x2c]
shl edx, cl
mov ecx, edx
mov dword [rsp + 0x150], ecx
mov edx, dword [0x140074c28]
movzx ecx, dl
mov edx, dword [rsp + 0x150]
shr edx, cl
mov ecx, edx
cmp eax, ecx
jne 0x14004e818
mov dword [rsp + 0xec], 1
jmp 0x14004e823
mov dword [rsp + 0xec], 0
mov eax, dword [rsp + 0xec]
mov ecx, dword [0x140074c68]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
cmp dword [rsp + 0x30], 0
je 0x14004e85e
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x3c]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x14004e85e
mov dword [rsp + 0xf0], 1
jmp 0x14004e869
mov dword [rsp + 0xf0], 0
movsx eax, byte [0x140074a62]
mov ecx, dword [rsp + 0xf0]
shl eax, cl
movsx ecx, byte [0x140074a62]
and ecx, eax
mov eax, ecx
mov byte [0x140074a62], al
mov dword [rsp + 0x74], 0xfffffeef
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x74]
inc eax
mov dword [rsp + 0x74], eax
cmp dword [rsp + 0x154], 0
je 0x14004e94b
movsx eax, byte [rsp + 0x25]
mov ecx, dword [0x140074c34]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov byte [rsp + 0x22], al
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x28]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x14004e8f6
cmp dword [rsp + 0x3c], 0
je 0x14004e8f6
mov dword [rsp + 0xf4], 1
jmp 0x14004e901
mov dword [rsp + 0xf4], 0
mov eax, dword [rsp + 0xf4]
movzx ecx, al
mov eax, dword [0x140074c4c]
shl eax, cl
mov ecx, dword [0x140074c2c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
movzx eax, byte [0x140074c5c]
movsx ecx, byte [rsp + 0x22]
sub eax, ecx
add eax, dword [rsp + 0x30]
movsx ecx, byte [0x140074c5e]
or ecx, eax
mov eax, ecx
mov byte [0x140074c5e], al
jmp 0x14004e892
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
movsx eax, byte [rsp + 0x25]
mov ecx, dword [0x140074c2c]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c50]
and ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movzx eax, byte [0x140074c88]
movzx ecx, byte [rsp + 0x26]
or eax, ecx
mov ecx, dword [0x140074c28]
and ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
movsx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c60]
sub ecx, eax
mov eax, ecx
test eax, eax
je 0x14004e9c5
movsx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x48]
and ecx, eax
mov eax, ecx
xor eax, dword [0x140074c54]
test eax, eax
je 0x14004e9c5
mov dword [rsp + 0xf8], 1
jmp 0x14004e9d0
mov dword [rsp + 0xf8], 0
mov eax, dword [rsp + 0xf8]
mov ecx, dword [0x140074c54]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
movsx eax, byte [0x140074a63]
test eax, eax
je 0x14004ea12
cmp dword [rsp + 0x2c], 0
je 0x14004ea12
movsx eax, byte [rsp + 0x25]
movzx ecx, al
mov eax, dword [rsp + 0x2c]
shr eax, cl
test eax, eax
je 0x14004ea12
mov byte [rsp + 0x47], 1
jmp 0x14004ea17
mov byte [rsp + 0x47], 0
movzx eax, byte [rsp + 0x47]
mov byte [0x140074c5d], al
movzx eax, byte [0x140074b8f]
movzx ecx, byte [rsp + 0x26]
sub eax, ecx
mov ecx, dword [0x140074c28]
add ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
mov eax, dword [rsp + 0x28]
movzx ecx, al
mov eax, dword [0x140074c70]
shl eax, cl
mov ecx, dword [0x140074c2c]
add ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
movsx eax, byte [0x140074c5e]
sub eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c50]
or ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movsx eax, byte [0x140074c5e]
sub eax, dword [rsp + 0x48]
mov ecx, dword [0x140074c74]
add ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
movsx eax, byte [0x140074c6c]
test eax, eax
jne 0x14004eaba
movsx eax, byte [rsp + 0x23]
add eax, dword [rsp + 0x38]
test eax, eax
jne 0x14004eaba
mov dword [rsp + 0xfc], 0
jmp 0x14004eac5
mov dword [rsp + 0xfc], 1
mov eax, dword [rsp + 0xfc]
mov ecx, dword [0x140074c60]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
movzx eax, byte [rsp + 0x24]
movsx ecx, byte [0x140074c5d]
imul ecx, ecx, 3
add eax, ecx
cdq
mov ecx, 6
idiv ecx
mov eax, edx
mov dword [rsp + 0x158], eax
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
je 0x14004eb2a
cmp dword [rsp + 0x5c], 1
je 0x14004eb43
cmp dword [rsp + 0x5c], 2
je 0x14004eb7e
cmp dword [rsp + 0x5c], 3
je 0x14004eb9c
jmp 0x14004ebec
mov eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c8c]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
jmp 0x14004ebec
mov eax, dword [rsp + 0x38]
movzx ecx, al
mov eax, dword [0x140074c2c]
shl eax, cl
mov dword [0x140074c70], eax
movsx eax, byte [rsp + 0x22]
sub eax, dword [rsp + 0x3c]
movzx ecx, al
mov eax, dword [0x140074c30]
shr eax, cl
mov ecx, dword [0x140074a64]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
jmp 0x14004ebec
movsx eax, byte [rsp + 0x22]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [0x140074a68]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x23], al
jmp 0x14004ebec
mov eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x38]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x14004ebc0
cmp dword [rsp + 0x38], 0
je 0x14004ebc0
mov dword [rsp + 0x100], 1
jmp 0x14004ebcb
mov dword [rsp + 0x100], 0
movsx eax, byte [0x140074a62]
mov ecx, dword [rsp + 0x100]
sar eax, cl
movsx ecx, byte [0x140074c6c]
and ecx, eax
mov eax, ecx
mov byte [0x140074c6c], al
movsx eax, byte [rsp + 0x22]
movzx ecx, byte [0x140074c89]
lea eax, [rax + rcx*4]
cdq
mov ecx, 7
idiv ecx
mov eax, edx
mov word [rsp + 0x64], ax
movsx eax, word [rsp + 0x64]
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x14004ec3c
cmp dword [rsp + 0x60], 1
je 0x14004ec81
cmp dword [rsp + 0x60], 2
je 0x14004ece3
cmp dword [rsp + 0x60], 3
je 0x14004ed53
jmp 0x14004ed80
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c28]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x28]
shr eax, cl
movzx ecx, byte [0x140074b8f]
or ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
xor edx, edx
mov eax, dword [rsp + 0x2c]
mov ecx, 4
div ecx
mov ecx, dword [0x140074c2c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
jmp 0x14004ed80
movsx eax, byte [rsp + 0x25]
mov ecx, dword [rsp + 0x28]
sar eax, cl
movsx ecx, byte [rsp + 0x22]
shl eax, cl
cmp dword [0x140074a68], eax
jne 0x14004eca8
mov dword [rsp + 0x104], 1
jmp 0x14004ecb3
mov dword [rsp + 0x104], 0
mov eax, dword [rsp + 0x104]
mov ecx, dword [0x140074c48]
and ecx, eax
mov eax, ecx
mov dword [0x140074c48], eax
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c28]
add ecx, eax
mov eax, ecx
mov byte [0x140074c5c], al
jmp 0x14004ed80
movsx eax, byte [0x140074c6f]
mov dword [rsp + 0x15c], eax
movsx ecx, byte [rsp + 0x23]
mov eax, ecx
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [rsp + 0x15c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x2c], eax
movsx eax, byte [rsp + 0x23]
mov ecx, dword [rsp + 0x38]
shl eax, cl
cmp dword [0x140074c54], eax
jne 0x14004ed2f
mov dword [rsp + 0x108], 1
jmp 0x14004ed3a
mov dword [rsp + 0x108], 0
mov eax, dword [rsp + 0x108]
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
jmp 0x14004ed80
mov eax, dword [rsp + 0x2c]
movzx ecx, al
mov eax, dword [rsp + 0x28]
shl eax, cl
mov ecx, dword [0x140074c8c]
shr eax, cl
mov ecx, dword [rsp + 0x2c]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c8c]
or ecx, eax
mov eax, ecx
mov byte [0x140074c88], al
mov eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x2c]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c70]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c54]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
movsx eax, byte [0x140074a62]
test eax, eax
jne 0x14004edd4
cmp dword [rsp + 0x30], 0
je 0x14004edc7
cmp dword [rsp + 0x40], 0
jne 0x14004edd4
mov dword [rsp + 0x10c], 0
jmp 0x14004eddf
mov dword [rsp + 0x10c], 1
mov eax, dword [rsp + 0x10c]
mov ecx, dword [0x140074c64]
or ecx, eax
mov eax, ecx
mov dword [0x140074c64], eax
mov eax, dword [rsp + 0x34]
cmp dword [0x140074c8c], eax
jbe 0x14004ee0f
mov dword [rsp + 0x114], 1
jmp 0x14004ee1a
mov dword [rsp + 0x114], 0
movsx eax, byte [0x140074c6e]
cmp dword [rsp + 0x34], eax
jbe 0x14004ee34
mov dword [rsp + 0x110], 1
jmp 0x14004ee3f
mov dword [rsp + 0x110], 0
mov eax, dword [rsp + 0x110]
cmp dword [rsp + 0x114], eax
je 0x14004ee97
cmp dword [rsp + 0x28], 0
je 0x14004ee97
movsx eax, byte [rsp + 0x22]
cmp dword [rsp + 0x34], eax
jne 0x14004ee6e
mov dword [rsp + 0x118], 1
jmp 0x14004ee79
mov dword [rsp + 0x118], 0
movsx eax, byte [0x140074c6e]
mov ecx, dword [rsp + 0x28]
mov edx, dword [rsp + 0x118]
or edx, ecx
mov ecx, edx
xor eax, ecx
mov byte [0x140074c6e], al
movsx eax, byte [0x140074c6f]
movsx ecx, byte [rsp + 0x23]
sub ecx, dword [rsp + 0x40]
xor eax, ecx
movzx ecx, byte [0x140074b8e]
and ecx, eax
mov eax, ecx
mov byte [0x140074b8e], al
movzx eax, byte [0x140074c6d]
imul eax, dword [rsp + 0x2c]
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov byte [rsp + 0x22], al
movsx eax, byte [0x140074a62]
test eax, eax
je 0x14004f038
cmp dword [rsp + 0x38], 0
jne 0x14004ef01
cmp dword [0x140074c54], 0
jne 0x14004ef01
mov dword [rsp + 0x11c], 0
jmp 0x14004ef0c
mov dword [rsp + 0x11c], 1
mov eax, dword [rsp + 0x11c]
cmp dword [rsp + 0x40], eax
jle 0x14004f038
movzx eax, byte [rsp + 0x26]
mov ecx, dword [0x140074c60]
add ecx, eax
mov eax, ecx
movsx ecx, byte [rsp + 0x20]
movsx edx, byte [rsp + 0x22]
add ecx, edx
shr eax, cl
test eax, eax
jne 0x14004ef54
cmp dword [0x140074c80], 0
jne 0x14004ef54
mov dword [rsp + 0x120], 0
jmp 0x14004ef5f
mov dword [rsp + 0x120], 1
mov eax, dword [rsp + 0x120]
mov dword [0x140074c38], eax
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x28]
add ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004ef90
cmp dword [rsp + 0x28], 0
jne 0x14004ef90
mov dword [rsp + 0x124], 0
jmp 0x14004ef9b
mov dword [rsp + 0x124], 1
movzx eax, byte [0x140074c88]
and eax, dword [rsp + 0x124]
mov byte [0x140074c8a], al
movzx eax, byte [rsp + 0x21]
test eax, eax
jne 0x14004efd5
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x40]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x14004efd5
mov dword [rsp + 0x128], 0
jmp 0x14004efe0
mov dword [rsp + 0x128], 1
movsx eax, byte [0x140074c6e]
or eax, dword [rsp + 0x128]
movzx ecx, byte [0x140074c8b]
add ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c68]
imul ecx, eax
mov eax, ecx
cdq
mov ecx, 5
idiv ecx
mov byte [rsp + 0x20], al
xor edx, edx
mov eax, dword [rsp + 0x34]
mov ecx, 4
div ecx
mov eax, edx
mov ecx, dword [0x140074c64]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
movsx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x3c], eax
jne 0x14004f050
mov dword [rsp + 0x12c], 1
jmp 0x14004f05b
mov dword [rsp + 0x12c], 0
mov eax, dword [0x140074c3c]
cmp dword [rsp + 0x12c], eax
je 0x14004f094
movsx eax, byte [rsp + 0x22]
sub eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x34]
shl eax, cl
movzx ecx, al
mov eax, dword [0x140074c50]
shr eax, cl
mov ecx, dword [0x140074c3c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c3c], eax
movsx eax, byte [0x140074c5e]
movsx ecx, byte [rsp + 0x23]
and ecx, dword [rsp + 0x28]
xor eax, ecx
mov dword [0x140074c50], eax
movsx eax, byte [0x140074a62]
movsx ecx, byte [rsp + 0x23]
mov edx, dword [rsp + 0x30]
shl edx, cl
mov ecx, edx
or eax, ecx
mov dword [0x140074c60], eax
movsx eax, byte [0x140074a62]
movsx ecx, byte [rsp + 0x20]
sub ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x38]
and edx, ecx
mov ecx, edx
sar eax, cl
mov ecx, dword [0x140074c68]
add ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x48], eax
je 0x14004f112
movsx eax, byte [rsp + 0x20]
test eax, eax
jne 0x14004f112
mov dword [rsp + 0x130], 0
jmp 0x14004f11d
mov dword [rsp + 0x130], 1
movzx eax, byte [0x140074c5c]
add eax, dword [rsp + 0x130]
mov ecx, dword [0x140074c74]
and ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [rsp + 0x78], 0xffffffce
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x160], eax
mov eax, dword [rsp + 0x78]
inc eax
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x160], 0
je 0x14004f17b
movzx eax, byte [0x140074c5c]
or eax, dword [rsp + 0x2c]
mov byte [0x140074c5d], al
jmp 0x14004f149
movsx eax, byte [0x140074c6f]
movsx ecx, byte [rsp + 0x20]
xor eax, ecx
mov ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x48]
and edx, ecx
mov ecx, edx
xor eax, ecx
xor eax, dword [0x140074c2c]
mov ecx, dword [0x140074c48]
or ecx, eax
mov eax, ecx
mov dword [0x140074c48], eax
movzx eax, byte [0x140074b8e]
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x3c]
sub edx, ecx
mov ecx, edx
mov edx, dword [rsp + 0x40]
xor edx, ecx
mov ecx, edx
add eax, ecx
movzx ecx, byte [0x140074c89]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
mov ecx, dword [0x140074c60]
call fcn.14004c840
movsx eax, byte [rsp + 0x23]
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
add rsp, 0x178
ret