Function at 0x14001fc30
Capabilities:
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [0x14015a038]
xor rax, rsp
mov qword [rbp + 0x58], rax
mov r13, r9
mov qword [rsp + 0x68], r8
mov dword [rsp + 0x60], edx
mov r12, rcx
mov qword [rsp + 0x70], rcx
mov rcx, qword [rbp + 0xd0]
mov qword [rsp + 0x48], rcx
xor r14b, r14b
mov qword [0x14015e650], r12
xor edx, edx
mov qword [0x14015add8], rdx
lea rax, [0x14015adc8]
cmp qword [0x14015ade0], 8
cmovae rax, qword [0x14015adc8]
mov word [rax], dx
mov word [0x14015e980], dx
mov dword [r8], edx
mov dword [r9], edx
mov dword [rcx], edx
call fcn.140001e20
mov rbx, rax
lea rcx, [rax + 8]
mov rdx, r12
call fcn.140030b90
lea rsi, [rbx + 0x5b8]
cmp dword [rbx + 0x5c], 3
jne 0x14001fcfb
lea r8, [rbx + 0x240]
cmp rsi, r8
je 0x14001fd55
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14001fced
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
mov rcx, rsi
call fcn.1400123a0
jmp 0x14001fd55
mov edx, dword [rbx + 0x4cc]
lea rcx, [rbp - 0x40]
call fcn.1400397b0
mov rdx, rax
mov rcx, rsi
call fcn.140010540
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x14001fd55
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001fd50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c6c
call fcn.14009b510
mov r9d, 0x2d
mov r15d, 1
mov r8d, r15d
lea edx, [r9 - 0x29]
mov rcx, rsi
call fcn.14000bc80
lea r9d, [r15 + 0x2c]
mov r8d, r15d
lea edx, [r15 + 8]
mov rcx, rsi
call fcn.14000bc80
lea r9d, [r15 + 0x2c]
mov r8d, r15d
lea edx, [r15 + 0xd]
mov rcx, rsi
call fcn.14000bc80
lea r8, [rbx + 0x4a0]
lea rdi, [rbx + 0x5d8]
cmp rdi, r8
je 0x14001fdc2
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14001fdb6
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
mov rcx, rdi
call fcn.1400123a0
cmp qword [rbx + 0x628], 0
je 0x14001fddb
lea rcx, [rbx + 0x618]
mov rdx, rsi
call fcn.14001edd0
cmp qword [rbx + 0x5e8], 0
je 0x14001fdf0
mov rdx, rsi
mov rcx, rdi
call fcn.14001edd0
mov rcx, r12
call fcn.14001f2f0
call fcn.14001eeb0
lea rcx, [0x14015ae08]
cmp rcx, rsi
je 0x14001fe1f
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14001fe16
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
call fcn.1400123a0
lea rdi, [0x14015e980]
cmp qword [r12 + 0x548], 0
je 0x14001ff0b
lea r9, [r12 + 0x538]
mov r8d, dword [r12 + 0x530]
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.140026920
nop
mov r8, qword [rbp - 0x30]
mov r9, qword [rbp - 0x40]
mov r10, qword [rbp - 0x28]
test r8, r8
je 0x14001febc
lea rcx, [rbp - 0x40]
cmp r10, 8
cmovae rcx, r9
mov rdx, rdi
sub rdx, rcx
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14001fe80
lea rcx, [rbx + 0x5f8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x14001feb9
lea rdx, [rbp - 0x40]
cmp r10, 8
cmovae rdx, r9
call fcn.1400123a0
mov r10, qword [rbp - 0x28]
mov r9, qword [rbp - 0x40]
mov r14b, 1
cmp r10, 8
jb 0x14001fef7
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x14001feef
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c72
mov rcx, r9
call fcn.14009b510
xor edi, edi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], di
jmp 0x14001ff35
mov eax, dword [r13]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x68]
mov r9d, dword [rax]
mov r8d, dword [rsp + 0x60]
movzx edx, byte [rbp + 0xd8]
mov rcx, rbx
call fcn.140013770
movzx r14d, al
xor edi, edi
mov rcx, qword [0x14015e638]
call qword [sym.imp.USER32.dll_DestroyIcon]
mov rcx, qword [0x14015e630]
call qword [sym.imp.USER32.dll_DestroyIcon]
test r14b, r14b
je 0x140020c39
add rbx, 0x5f8
lea rcx, [rbp - 0x20]
call fcn.1400373d0
nop
lea r14, [r12 + 0xb0]
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.140007ea0
nop
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.140007ea0
nop
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140007ea0
nop
lea rcx, [rbp - 0x40]
call fcn.14003cd80
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x20]
call fcn.140037d10
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140037d10
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.140037d10
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140020009
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020004
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c78
call fcn.14009b510
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], di
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140020059
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020054
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c7e
call fcn.14009b510
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], di
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400200a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400200a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c84
call fcn.14009b510
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], di
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1400200f4
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400200ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c8a
call fcn.14009b510
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov ecx, 0x48
call fcn.14009b4d4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
call fcn.14001a890
lea rdx, [r12 + 0x3c8]
lea rcx, [rsp + 0x50]
call fcn.14001b250
cmp qword [rbx + 0x18], 8
jb 0x140020144
mov rbx, qword [rbx]
lea rdx, [0x14015e980]
mov rcx, rdx
sub rcx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x140020160
mov rdi, 0xffffffffffffffff
cmp word [0x14015e980], ax
je 0x1400201c5
lea ecx, [rdi + 0x21]
xor ebx, ebx
nop word [rax + rax]
mov rax, rdi
lea rax, [rax + 1]
cmp word [rdx + rax*2], bx
jne 0x140020193
cmp cx, word [rdx + rax*2 - 2]
jne 0x1400201c5
lea rax, [rax*2 - 2]
cmp rax, 0x208
jae 0x140020c90
mov word [rax + rdx], bx
cmp word [0x14015e980], bx
jne 0x140020190
xor ecx, ecx
mov qword [rbp + 0x10], rcx
movdqa xmm0, xmmword [0x14013a410]
movdqa xmmword [rbp + 0x20], xmm0
mov word [rbp + 0x10], cx
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rcx
movzx eax, byte [0x14015e5f2]
mov byte [rbp + 0x48], al
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], cx
cmp qword [rsi + 0x18], 8
jb 0x140020210
mov rsi, qword [rsi]
cmp qword [r14 + 0x18], 8
jb 0x14002021a
mov r14, qword [r14]
lea rax, [rbp - 0x40]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x20], rbx
mov r8, rsi
mov rdx, r14
lea rcx, [rbp + 0x10]
call fcn.14003baa0
movzx r14d, al
mov byte [rsp + 0x40], al
test al, al
je 0x1400205f6
xor eax, eax
mov ebx, eax
mov qword [rbp - 0x60], rax
mov esi, eax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rax
lea rax, [0x14015e980]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140020280
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.140019e80
mov r13, qword [rbp - 0x80]
mov r14, qword [rbp - 0x78]
cmp r13, r14
je 0x1400202b5
mov r8, rdi
lea rdx, [0x14015e980]
mov rcx, r13
call fcn.14009de10
lea rcx, [rbp - 0x20]
call fcn.1400373d0
nop
xor edi, edi
mov qword [rsp + 0x48], rdi
cmp r13, r14
je 0x1400203cf
lea rcx, [rbp - 0x20]
call fcn.1400374d0
test eax, eax
je 0x140020379
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x140020379
sub r14, r13
xor r9d, r9d
mov r8d, r14d
mov rdx, r13
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x14002036e
mov dword [rsp + 0x78], reloc.WS2_32.dll_recv
lea r8, [rsp + 0x41]
lea edx, [rdi + 0x10]
lea rcx, [rbp - 0x60]
call fcn.140019c40
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x78]
mov rbx, qword [rbp - 0x60]
mov r8, rbx
lea edx, [rdi + 2]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
test eax, eax
je 0x14002036a
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rsi, qword [rbp - 0x58]
jmp 0x1400203cf
mov rsi, qword [rbp - 0x58]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rcx, rsi
sub rcx, rbx
cmp rcx, 1
jbe 0x14002038b
lea rsi, [rbx + 1]
jmp 0x1400203c8
jae 0x1400203cc
mov rax, qword [rbp - 0x50]
sub rax, rbx
cmp rax, 1
jae 0x1400203b5
lea r8, [rsp + 0x41]
mov rdx, r15
lea rcx, [rbp - 0x60]
call fcn.140019c40
mov rsi, qword [rbp - 0x58]
mov rbx, qword [rbp - 0x60]
jmp 0x1400203cc
sub r15, rcx
mov r8, r15
xor edx, edx
mov rcx, rsi
call fcn.14009e4c0
add rsi, r15
mov qword [rbp - 0x58], rsi
mov byte [rbx], reloc.OLEAUT32.dll_SafeArrayUnaccessData
lea rcx, [r12 + 0x1f0]
lea rdx, [rbp - 0x60]
call fcn.14003a0d0
test al, al
je 0x140020402
mov r8d, 0x2e
lea rdx, str.This_Activation_Code_has_been_already_entered.
lea rcx, [rbp - 0x40]
call fcn.1400123a0
xor r14b, r14b
jmp 0x140020532
cmp rbx, rsi
je 0x14002046c
mov r14, rdi
mov rdi, qword [r12 + 0x258]
mov r15, qword [r12 + 0x260]
sub r15, rdi
sar r15, 3
movabs rax, 0xaaaaaaaaaaaaaaab
imul r15, rax
test r15, r15
je 0x14002046a
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
cmp rcx, rax
je 0x14002045e
sub rax, rcx
mov r8, rsi
sub r8, rbx
cmp rax, r8
jne 0x14002045e
mov rdx, rbx
call fcn.14009ee60
test eax, eax
je 0x14002052c
inc r14
add rdi, 0x18
cmp r14, r15
jb 0x140020434
xor edi, edi
mov rax, qword [rsp + 0x70]
mov r15, qword [rax + 0x260]
cmp r15, qword [rax + 0x268]
je 0x14002050f
mov qword [r15], rdi
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], rdi
cmp rbx, rsi
je 0x140020504
mov r14, rsi
sub r14, rbx
cmp r14, 0x1000
jb 0x1400204cd
lea rcx, [r14 + 0x27]
cmp rcx, r14
jbe 0x140020c96
call fcn.14009b4d4
test rax, rax
je 0x140020c9c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400204dd
test r14, r14
je 0x1400204dd
mov rcx, r14
call fcn.14009b4d4
mov rdi, rax
mov qword [r15], rdi
mov qword [r15 + 8], rdi
lea rax, [rdi + r14]
mov qword [r15 + 0x10], rax
mov r8, r14
mov rdx, rbx
mov rcx, rdi
call fcn.14009de10
sub rdi, rbx
add rdi, rsi
mov qword [r15 + 8], rdi
add qword [r12 + 0x260], 0x18
jmp 0x140020527
lea r8, [rbp - 0x60]
mov rdx, r15
lea rcx, [r12 + 0x258]
call fcn.14003a5f0
mov rbx, qword [rbp - 0x60]
mov r12, qword [rsp + 0x70]
movzx r14d, byte [rsp + 0x40]
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x14002056d
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020568
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020ca2
call fcn.14009b510
movdqa xmm0, xmmword [0x14013a430]
movdqu xmmword [rbp - 8], xmm0
mov byte [rbp - 0x18], 0
test r13, r13
je 0x1400205b8
mov rdx, qword [rbp - 0x70]
sub rdx, r13
mov rax, r13
cmp rdx, 0x1000
jb 0x1400205af
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020ca8
mov rcx, r13
call fcn.14009b510
nop
test rbx, rbx
je 0x1400205f1
mov rdx, qword [rbp - 0x50]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400205e9
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cae
mov rcx, rbx
call fcn.14009b510
mov rbx, qword [rsp + 0x68]
test r14b, r14b
jne 0x1400208b7
lea rdx, [r12 + 0x418]
lea rcx, [rbp - 0x80]
call fcn.140007ea0
nop
mov rax, qword [rbp - 0x70]
test rax, rax
jne 0x1400206d6
mov r8d, 0x277b
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x50]
call fcn.14001a110
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140010540
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14002067e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020679
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cb4
call fcn.14009b510
mov rbx, qword [rbp - 0x30]
test rbx, rbx
je 0x1400206b7
mov r8d, 0x1a
lea rdx, str._n_nAdditional_information:_n
lea rcx, [rbp - 0x80]
call fcn.14000b610
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rdx, qword [rbp - 0x40]
mov r8, rbx
lea rcx, [rbp - 0x80]
call fcn.14000b610
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
mov edx, 0x1010
call fcn.140022d20
xor ebx, ebx
jmp 0x14002086e
lea r10, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae r10, qword [rbp - 0x80]
cmp rax, 7
jb 0x14002077a
lea r11, [rax - 6]
lea r11, [r10 + r11*2]
mov rdx, r10
lea rbx, str._reason
mov rax, r11
sub rax, rdx
sar rax, 1
je 0x14002077a
cmp word [rdx], 0x5c
je 0x14002071b
add rdx, 2
sub rax, 1
jmp 0x140020709
mov r8d, 7
mov rcx, rbx
mov r9, rdx
sub r9, rbx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r9 + rcx], ax
jne 0x140020822
add rcx, 2
sub r8, 1
jne 0x140020730
sub rdx, r10
sar rdx, 1
cmp rdx, 0xffffffffffffffff
je 0x14002077a
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae r9, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x20], rax
mov r8d, 8
lea rcx, [rbp - 0x80]
call fcn.140019830
mov r8d, 0x2796
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x50]
call fcn.14001a110
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [0x14015ade8]
call fcn.1400123a0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [0x14015adc8]
call fcn.1400123a0
cmp qword [0x14015add8], 0
je 0x14002082b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8, rdi
cmp eax, ebx
mov ebx, 0
cmovne r8, rbx
lea r9, [0x140021ec0]
mov edx, 0x27fa
mov rcx, qword [0x14015eb98]
call fcn.1400139a0
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x14002082d
add rdx, 2
jmp 0x140020700
xor ebx, ebx
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14002086e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020868
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cba
call fcn.14009b510
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140020b58
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400208ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cc0
call fcn.14009b510
jmp 0x140020b58
xor esi, esi
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], si
cmp byte [r12 + 0x201], sil
je 0x140020909
lea r8, [r12 + 0x3f8]
lea rax, [rbp - 0x80]
cmp rax, r8
je 0x140020909
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x1400208f5
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400123a0
cmp qword [rbp - 0x70], 0
jne 0x140020943
lea r8, [r12 + 0x3d8]
lea rax, [rbp - 0x80]
cmp rax, r8
je 0x140020a66
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14002092b
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400123a0
cmp qword [rbp - 0x70], 0
je 0x140020a66
mov ecx, dword [rbx]
sub ecx, dword [rsp + 0x60]
mov eax, 0xc22e4507
imul ecx
add edx, ecx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add edx, eax
lea rcx, [rbp - 0x80]
call fcn.14001ea90
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], si
mov r8d, SafeArrayGetElement
lea rdx, str.Successful_Activation
lea rcx, [rbp - 0x60]
call fcn.1400123a0
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [0x14015ade8]
call fcn.1400123a0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rcx, [0x14015adc8]
call fcn.1400123a0
cmp qword [0x14015add8], 0
je 0x140020a1d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8, rdi
cmp eax, ebx
cmovne r8, rsi
lea r9, [0x140021e60]
mov edx, 0x27fa
mov rcx, qword [0x14015eb98]
call fcn.1400139a0
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetForegroundWindow]
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140020b16
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020a5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cc6
call fcn.14009b510
jmp 0x140020b16
mov r8d, 0x277c
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x50]
call fcn.14001a110
mov rbx, rax
lea rax, [rbp - 0x80]
cmp rax, rbx
je 0x140020af4
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140020ac6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020ac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020ccc
call fcn.14009b510
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], si
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
lea rcx, [rbp - 0x60]
call fcn.1400126b0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
mov edx, 0x1040
call fcn.140022d20
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140020b56
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020b51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cd2
call fcn.14009b510
xor ebx, ebx
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140020b99
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020b93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020cd8
call fcn.14009b510
nop
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x140020bd3
mov rdx, qword [rbp + 0x40]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020bce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c66
call fcn.14009b510
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140020c10
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140020c0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140020c66
call fcn.14009b510
nop
mov r8, qword [rsp + 0x50]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.14001ce40
mov edx, 0x48
mov rcx, qword [rsp + 0x50]
call fcn.14009b510
jmp 0x140020c3b
xor ebx, ebx
mov qword [0x14015e650], rbx
movzx eax, r14b
mov rcx, qword [rbp + 0x58]
xor rcx, rsp
call fcn.14009b5b0
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400ac408
nop
call fcn.1400ac408
int3
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.14009bfe8
nop
call fcn.140012140
int3
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
int3
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
int3
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
int3