Function at 0x140002f20
Capabilities:
Create process on windows

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov qword [rbp - 0x10], rcx
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp - 8], rax
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140002f6e
jmp 0x1400042bd
mov eax, 0x10
mov qword [rbp - 0x28], rax
call fcn.140006850
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov rcx, rsp
mov qword [rbp - 0x40], rcx
call fcn.140006850
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
mov eax, 0x70
call fcn.140006850
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov eax, 0x20
call fcn.140006850
sub rsp, rax
mov rax, qword [rbp - 0x28]
mov rcx, rsp
mov qword [rbp - 0x20], rcx
call fcn.140006850
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x18], rax
mov dword [rax], 0x54de
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000300c
jmp 0x1400042bd
jmp 0x140003011
mov rax, qword [rbp - 0x18]
mov eax, dword [rax]
mov dword [rbp - 0x44], eax
sub eax, 0x74d
je 0x140003719
jmp 0x14000302a
mov eax, dword [rbp - 0x44]
sub eax, 0x26a6
je 0x140003b85
jmp 0x14000303d
mov eax, dword [rbp - 0x44]
sub eax, 0x2d12
je 0x140003514
jmp 0x140003050
mov eax, dword [rbp - 0x44]
sub eax, 0x39b3
je 0x140003352
jmp 0x140003063
mov eax, dword [rbp - 0x44]
sub eax, 0x428b
je 0x140003a4a
jmp 0x140003076
mov eax, dword [rbp - 0x44]
sub eax, 0x4dc8
je 0x14000378c
jmp 0x140003089
mov eax, dword [rbp - 0x44]
sub eax, 0x54de
je 0x14000318f
jmp 0x14000309c
mov eax, dword [rbp - 0x44]
sub eax, 0x6443
je 0x1400037a9
jmp 0x1400030af
mov eax, dword [rbp - 0x44]
sub eax, 0x66bb
je 0x1400038f9
jmp 0x1400030c2
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400030f4
jmp 0x140003e5c
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003126
jmp 0x140003e5c
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003158
jmp 0x14000430e
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000318a
jmp 0x14000430e
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400031c1
jmp 0x140004313
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400031f3
jmp 0x140004313
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003225
jmp 0x140003ec5
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003257
jmp 0x140004318
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x10]
mov qword [rax], rdx
xor edx, edx
mov r8d, 0x68
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x39b3
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400032b7
jmp 0x140004318
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400032e9
jmp 0x140003ec5
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000331b
jmp 0x14000434b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000334d
jmp 0x14000434b
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003384
jmp 0x140004350
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400033b6
jmp 0x140004350
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400033e8
jmp 0x140003f5c
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000341a
jmp 0x140004355
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x30]
mov dword [rax], 0x68
xor edx, edx
mov r8d, 0x18
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x2d12
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003479
jmp 0x140004355
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400034ab
jmp 0x140003f5c
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400034dd
jmp 0x140004387
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000350f
jmp 0x140004387
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003546
jmp 0x14000438c
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003578
jmp 0x14000438c
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400035aa
jmp 0x140003ff2
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400035dc
jmp 0x140004391
mov rax, qword [rbp - 0x20]
mov r10, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rcx]
xor ecx, ecx
mov r9d, ecx
xor ecx, ecx
sub rsp, 0x50
mov rcx, r9
mov r8, r9
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
mov r8d, eax
mov rax, qword [rbp - 0x18]
mov ecx, 0x74d
mov edx, 0x4dc8
cmp r8d, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000367e
jmp 0x140004391
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400036b0
jmp 0x140003ff2
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400036e2
jmp 0x140004406
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003714
jmp 0x140004406
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000374b
jmp 0x14000440b
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x26a6
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003787
jmp 0x14000440b
jmp 0x140003d2b
mov rax, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp - 0x20]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x6443
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400037db
jmp 0x14000441a
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000380d
jmp 0x14000441a
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000383f
jmp 0x1400040cb
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003871
jmp 0x14000441f
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x66bb
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400038c2
jmp 0x14000441f
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400038f4
jmp 0x1400040cb
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000392b
jmp 0x140004443
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000395d
jmp 0x140004443
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000398f
jmp 0x140004153
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400039c1
jmp 0x140004448
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax + 8]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x428b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003a13
jmp 0x140004448
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003a45
jmp 0x140004153
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003a7c
jmp 0x14000446d
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003aae
jmp 0x14000446d
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003ae0
jmp 0x1400041dc
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003b12
jmp 0x140004472
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x26a6
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003b4e
jmp 0x140004472
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003b80
jmp 0x1400041dc
jmp 0x140003d2b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003bb7
jmp 0x140004481
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003be9
jmp 0x140004481
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003c1b
jmp 0x14000424f
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003c4d
jmp 0x140004486
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003c7f
jmp 0x140004486
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003cb1
jmp 0x14000424f
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003ce3
jmp 0x14000448b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003d15
jmp 0x14000448b
mov rcx, qword [rbp - 8]
xor rcx, rbp
sub rsp, 0x20
call fcn.1400068b0
nop
mov rsp, rbp
pop rbp
ret
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003d5d
jmp 0x140004490
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003d8f
jmp 0x140004490
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003dc1
jmp 0x140004254
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003df3
jmp 0x140004254
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003e25
jmp 0x140004495
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003e57
jmp 0x140004495
jmp 0x140003011
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003e8e
jmp 0x14000449a
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003ec0
jmp 0x14000449a
jmp 0x1400030f4
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003ef7
jmp 0x14000449f
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x10]
mov qword [rax], rdx
xor edx, edx
mov r8d, 0x68
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x39b3
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003f57
jmp 0x14000449f
jmp 0x140003225
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003f8e
jmp 0x1400044d2
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x30]
mov dword [rax], 0x68
xor edx, edx
mov r8d, 0x18
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x2d12
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140003fed
jmp 0x1400044d2
jmp 0x1400033e8
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140004024
jmp 0x140004504
mov rax, qword [rbp - 0x20]
mov r10, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rcx]
xor ecx, ecx
mov r9d, ecx
xor ecx, ecx
sub rsp, 0x50
mov rcx, r9
mov r8, r9
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
mov r8d, eax
mov rax, qword [rbp - 0x18]
mov ecx, 0x74d
mov edx, 0x4dc8
cmp r8d, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400040c6
jmp 0x140004504
jmp 0x1400035aa
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400040fd
jmp 0x140004579
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x66bb
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000414e
jmp 0x140004579
jmp 0x14000383f
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140004185
jmp 0x14000459d
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax + 8]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x428b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400041d7
jmp 0x14000459d
jmp 0x14000398f
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000420e
jmp 0x1400045c2
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x26a6
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14000424a
jmp 0x1400045c2
jmp 0x140003ae0
jmp 0x140003c1b
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140004286
jmp 0x1400045d1
mov eax, dword [0x140025cdc]
mov ecx, dword [0x140025cd8]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400042b8
jmp 0x1400045d1
jmp 0x140003dc1
mov eax, 0x10
mov qword [rbp - 0x50], rax
call fcn.140006850
sub rsp, rax
mov rax, qword [rbp - 0x50]
call fcn.140006850
sub rsp, rax
mov eax, 0x70
call fcn.140006850
sub rsp, rax
mov eax, 0x20
call fcn.140006850
sub rsp, rax
mov rax, qword [rbp - 0x50]
call fcn.140006850
sub rsp, rax
mov rax, rsp
mov dword [rax], 0x54de
jmp 0x140002f6e
jmp 0x140003158
jmp 0x1400031c1
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x10]
mov qword [rax], rdx
xor edx, edx
mov r8d, 0x68
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x39b3
jmp 0x140003257
jmp 0x14000331b
jmp 0x140003384
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x30]
mov dword [rax], 0x68
xor edx, edx
mov r8d, 0x18
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x2d12
jmp 0x14000341a
jmp 0x1400034dd
jmp 0x140003546
mov rax, qword [rbp - 0x20]
mov r10, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rcx]
xor ecx, ecx
mov r9d, ecx
xor ecx, ecx
sub rsp, 0x50
mov rcx, r9
mov r8, r9
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
mov r8d, eax
mov rax, qword [rbp - 0x18]
mov ecx, 0x74d
mov edx, 0x4dc8
cmp r8d, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x1400035dc
jmp 0x1400036e2
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x26a6
jmp 0x14000374b
jmp 0x1400037db
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x66bb
jmp 0x140003871
jmp 0x14000392b
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax + 8]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x428b
jmp 0x1400039c1
jmp 0x140003a7c
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x26a6
jmp 0x140003b12
jmp 0x140003bb7
jmp 0x140003c4d
jmp 0x140003ce3
jmp 0x140003d5d
jmp 0x140003e25
jmp 0x140003e8e
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x10]
mov qword [rax], rdx
xor edx, edx
mov r8d, 0x68
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x39b3
jmp 0x140003ef7
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x30]
mov dword [rax], 0x68
xor edx, edx
mov r8d, 0x18
sub rsp, 0x20
call fcn.140018460
mov rax, qword [rbp - 0x18]
add rsp, 0x20
mov dword [rax], 0x2d12
jmp 0x140003f8e
mov rax, qword [rbp - 0x20]
mov r10, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rcx]
xor ecx, ecx
mov r9d, ecx
xor ecx, ecx
sub rsp, 0x50
mov rcx, r9
mov r8, r9
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
mov r8d, eax
mov rax, qword [rbp - 0x18]
mov ecx, 0x74d
mov edx, 0x4dc8
cmp r8d, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140004024
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x66bb
jmp 0x1400040fd
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax + 8]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x428b
jmp 0x140004185
mov rax, qword [rbp - 0x18]
mov dword [rax], 0x26a6
jmp 0x14000420e
jmp 0x140004286