Function at 0x140045f80
Capabilities:
Check for unmoving mouse cursor
Get disk size
Get hostname

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x128]
sub rsp, 0x220
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x140092100]
xor rax, rsp
mov qword [rbp + 0x100], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140045ffc
lea rax, [rsp + 0x40]
mov rcx, rbx
lea r9, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046045
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
movdqa xmm6, xmmword [0x140079df0]
xor esi, esi
mov ecx, esi
mov rdx, rax
mov edi, 0x18680
nop
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140046070
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400460c2
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400461af
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400461f8
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046220
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046274
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140046290
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400462f0
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140046330
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046390
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x1400463c0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046420
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14004648a
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x1400464d0
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046522
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400465a1
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x1400465b1
mov rax, rdi
nop dword [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046610
mov rcx, rdx
call fcn.14004fdb0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400466dd
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x1400466f0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046750
mov rcx, rdx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400467af
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.140040270
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x1400467d0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046830
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400468b6
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046942
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140046952
mov rax, rdi
nop dword [rax]
nop dword [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400469b0
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x1400469e1
mov rax, rdi
nop dword [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046a40
mov rcx, rdx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046a9f
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140046ae0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046b40
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140046ba0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046c00
mov rcx, rdx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046c3e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046c66
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046ca4
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046d18
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046d92
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046dc5
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046e0e
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046e36
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046e7a
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x202
lea rdx, [rsp + 0x60]
call fcn.14003cd00
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140046edd
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046f05
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046f38
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140046f50
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140046fa2
mov rcx, rdx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140046fe0
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140047010
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140047070
mov rcx, rdx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400470cf
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14004713f
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140047150
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400471b0
mov rcx, rdx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400471ee
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047273
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400472d8
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047327
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140047340
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400473a0
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140047426
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14004744e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400474bd
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140047542
mov rax, rdi
nop dword [rax]
nop dword [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400475a0
mov rcx, rdx
call fcn.14004fdb0
call fcn.14000c560
test al, al
je 0x140048309
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x1400475d3
mov rax, rdi
nop dword [rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140047630
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400476ba
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140047808
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14004786d
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400478bc
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14004791b
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140047964
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400479ad
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140047a01
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140047a4a
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047a88
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140047afc
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047b76
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140047bca
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047bf2
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
call fcn.140038570
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047c87
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047caf
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047d0f
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047d53
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140047d63
mov rax, rdi
nop dword [rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140047dc0
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140047df1
mov rax, rdi
nop dword [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140047e50
mov rcx, rdx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047e8e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047ef9
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140047f3d
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140047f50
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140047fa2
mov rcx, rdx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140048001
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.14004ff80
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x10
mov rcx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, rsi
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140048090
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400480f0
mov rcx, rdx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14004812e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14004819e
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400481e7
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14004821a
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor edx, edx
mov ecx, 0x400
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140048263
lea rax, [rsp + 0x30]
mov rcx, rbx
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x48]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.14004ff80
nop dword [rax]
movdqu xmm0, xmmword [rsi + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rsi + rax], xmm1
movdqu xmm0, xmmword [rsi + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rsi + rax + 0x10], xmm1
movdqu xmm0, xmmword [rsi + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rsi + rax + 0x20], xmm1
movdqu xmm0, xmmword [rsi + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rsi + rax + 0x30], xmm0
add rsi, 0x40
cmp rsi, rdi
jl 0x140048290
nop dword [rax]
nop word [rax + rax]
inc byte [rdi + rax]
inc rdi
cmp rdi, 0x186a0
jl 0x1400482f0
mov rcx, rax
call fcn.14004fdb0
mov al, 1
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.14004fe50
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret