Function at 0x140017e60
Capabilities:
Check for unmoving mouse cursor
Get disk size
Get hostname

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4350]
mov eax, 0x4450
call fcn.1400691e0
sub rsp, rax
movaps xmmword [rsp + 0x4440], xmm6
mov rax, qword [0x1400ab100]
xor rax, rsp
mov qword [rbp + 0x4330], rax
mov r13, rdx
mov r12, rcx
mov qword [rsp + 0x60], rcx
mov qword [rbp + 0x1f0], rdx
xor r15d, r15d
mov dword [rsp + 0x38], r15d
mov byte [rcx + 0xa0], 1
lea rcx, [rbp + 0x3820]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea edx, [r15 + 8]
lea rcx, [rbp + 0x2110]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140017ef4
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
lea ecx, [r15 + 1]
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x2118]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140017f1e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x2120]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140017f48
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqa xmm6, xmmword [0x140092e10]
mov edi, 0x18680
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140017f70
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140017fc2
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140017ff0
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140018042
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3830]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140018080
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400180d0
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0x2a00]
lea r8, [rbp + 0x3618]
lea rdx, [rbp + 0x3620]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x3840]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x3628]
lea r8, [rbp + 0x3630]
lea rdx, [rbp + 0x3638]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x3640]
lea r8, [rbp + 0x3648]
lea rdx, [rbp + 0x3650]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x3658]
lea r8, [rbp + 0x3660]
lea rdx, [rbp + 0x3668]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x3670]
lea r8, [rbp + 0x3678]
lea rdx, [rbp + 0x3680]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0x3688]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400181c7
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3690]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0x3698]
lea r8, [rbp + 0x36a0]
lea rdx, [rbp + 0x36a8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x53c], 0x10
lea rdx, [rbp + 0x53c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x540], 0x10
lea rdx, [rbp + 0x540]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x544], 0x10
lea rdx, [rbp + 0x544]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400182d4
lea rax, [rbp + 0x36b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x36b8]
lea r8, [rbp + 0x36c0]
lea rdx, [rbp + 0x36c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x36d0]
lea r8, [rbp + 0x36d8]
lea rdx, [rbp + 0x36e0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x36e8]
lea r8, [rbp + 0x36f0]
lea rdx, [rbp + 0x36f8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x548], 0x10
lea rdx, [rbp + 0x548]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x3700]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140018371
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3708]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3710]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0x3718]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400183b5
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3850]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x3720]
lea r8, [rbp + 0x3728]
lea rdx, [rbp + 0x3730]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140018400
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140018450
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3738]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400184c4
lea rax, [rbp + 0x3740]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3748]
lea r8, [rbp + 0x3750]
lea rdx, [rbp + 0x3758]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x3760]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400184ee
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0x3768]
lea r8, [rbp + 0x3770]
lea rdx, [rbp + 0x3778]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x3780]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x54c], 0x10
lea rdx, [rbp + 0x54c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140018560
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400185b2
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3788]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x1400185f0
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140018642
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3790]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0x3798]
lea r8, [rbp + 0x37a0]
lea rdx, [rbp + 0x37a8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x1400186a0
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400186f0
mov rcx, rdx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140018757
lea rax, [rbp + 0x37b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x37b8]
lea r8, [rbp + 0x37c0]
lea rdx, [rbp + 0x37c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400187a8
lea rax, [rbp + 0x37d0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x37d8]
lea r8, [rbp + 0x37e0]
lea rdx, [rbp + 0x37e8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x37f0]
lea r8, [rbp + 0x37f8]
lea rdx, [rbp + 0x3800]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x550], 0x10
lea rdx, [rbp + 0x550]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140018810
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140018860
mov rcx, rdx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x3808]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400188a0
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400188f1
lea rax, [rbp + 0x3810]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3818]
lea r8, [rbp + 0x688]
lea rdx, [rbp + 0x690]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x554], 0x10
lea rdx, [rbp + 0x554]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x698]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140018940
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140018992
mov rcx, rdx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400189f9
lea rax, [rbp + 0x6a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x6a8]
lea r8, [rbp + 0x6b0]
lea rdx, [rbp + 0x6b8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3860]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x6c0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x558], 0x10
lea rdx, [rbp + 0x558]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x55c], 0x10
lea rdx, [rbp + 0x55c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x560], 0x10
lea rdx, [rbp + 0x560]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x6c8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140018aca
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140018ae0
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x140018b32
mov rcx, rdx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140018b99
lea rax, [rbp + 0x6d0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x6d8]
lea r8, [rbp + 0x6e0]
lea rdx, [rbp + 0x6e8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140018bb0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x140018c00
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0x6f0]
lea r8, [rbp + 0x6f8]
lea rdx, [rbp + 0x700]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140018c89
lea rax, [rbp + 0x708]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x710]
lea r8, [rbp + 0x718]
lea rdx, [rbp + 0x720]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x728]
lea r8, [rbp + 0x730]
lea rdx, [rbp + 0x738]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov rcx, qword [r13]
call fcn.140014250
cmp al, 0x21
jne 0x14001ab35
mov r8b, 2
lea rdx, [rbp + 0x208]
mov rcx, qword [r13]
call fcn.140013fa0
nop
lea rdx, [rbp + 0x5d8]
mov rcx, qword [rax]
call fcn.1400142b0
nop
mov rcx, qword [rbp + 0x210]
test rcx, rcx
je 0x140018cf1
call fcn.140014e50
xorps xmm0, xmm0
movups xmmword [rbp + 0x570], xmm0
lea rcx, [rbp + 0x570]
call fcn.14000c410
nop
mov edx, 8
lea rcx, [rbp + 0x740]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140018d32
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x564], 0x10
lea rdx, [rbp + 0x564]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x568], 0x10
lea rdx, [rbp + 0x568]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x580], 0x10
lea rdx, [rbp + 0x580]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140018e10
lea rax, [rbp + 0x748]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x750]
lea r8, [rbp + 0x758]
lea rdx, [rbp + 0x760]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x768]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3870]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140018e7b
lea rax, [rbp + 0x770]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x778]
lea r8, [rbp + 0x780]
lea rdx, [rbp + 0x788]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x790]
lea r8, [rbp + 0x798]
lea rdx, [rbp + 0x7a0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x3880]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x7a8]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140018f08
lea rax, [rbp + 0x7b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x7b8]
lea r8, [rbp + 0x7c0]
lea rdx, [rbp + 0x7c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x7d0]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3890]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x38a0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x7d8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x584], 0x10
lea rdx, [rbp + 0x584]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x38b0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140018f90
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x140018fe0
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x38c0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x7e0]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019061
lea rax, [rbp + 0x7e8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x7f0]
lea r8, [rbp + 0x7f8]
lea rdx, [rbp + 0x800]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x808]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001908b
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x810]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0x818]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400190c2
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x38d0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x820]
lea r8, [rbp + 0x828]
lea rdx, [rbp + 0x830]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019142
lea rax, [rbp + 0x838]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x840]
lea r8, [rbp + 0x848]
lea rdx, [rbp + 0x850]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0x858]
lea r8, [rbp + 0x860]
lea rdx, [rbp + 0x868]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140019180
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x1400191d2
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x588], 0x10
lea rdx, [rbp + 0x588]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x38e0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x870]
lea r8, [rbp + 0x878]
lea rdx, [rbp + 0x880]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019297
lea rax, [rbp + 0x888]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x890]
lea r8, [rbp + 0x898]
lea rdx, [rbp + 0x8a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x8a8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400192c1
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019312
lea rax, [rbp + 0x8b0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x8b8]
lea r8, [rbp + 0x8c0]
lea rdx, [rbp + 0x8c8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x8d0]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x38f0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x8d8]
lea r8, [rbp + 0x8e0]
lea rdx, [rbp + 0x8e8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x8f0]
lea r8, [rbp + 0x8f8]
lea rdx, [rbp + 0x900]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x58c], 0x10
lea rdx, [rbp + 0x58c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x3900]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400193fd
lea rax, [rbp + 0x908]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x910]
lea r8, [rbp + 0x918]
lea rdx, [rbp + 0x920]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x928]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140019427
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x590], 0x10
lea rdx, [rbp + 0x590]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400194a7
lea rax, [rbp + 0x930]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x938]
lea r8, [rbp + 0x940]
lea rdx, [rbp + 0x948]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x594], 0x10
lea rdx, [rbp + 0x594]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea r9, [rbp + 0x950]
lea r8, [rbp + 0x958]
lea rdx, [rbp + 0x960]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x968]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3910]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x970]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019570
lea rax, [rbp + 0x978]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x980]
lea r8, [rbp + 0x988]
lea rdx, [rbp + 0x990]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x998]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001959a
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400195eb
lea rax, [rbp + 0x9a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x9a8]
lea r8, [rbp + 0x9b0]
lea rdx, [rbp + 0x9b8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x9c0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0x9c8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140019622
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x598], 0x10
lea rdx, [rbp + 0x598]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x9d0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001967b
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x9d8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400196a5
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x9e0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400196cf
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3920]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x59c], 0x10
lea rdx, [rbp + 0x59c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x9e8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0x9f0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140019742
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5a0], 0x10
lea rdx, [rbp + 0x5a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400197c2
lea rax, [rbp + 0x9f8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xa00]
lea r8, [rbp + 0xa08]
lea rdx, [rbp + 0xa10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x1400aced0], 0
je 0x140019a1a
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov ecx, 0x88
call fcn.140069020
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140019821
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
mov dl, 0x12
mov rcx, rax
call fcn.140012dc0
jmp 0x140019824
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400030b0
nop
mov ecx, 0x88
call fcn.140069020
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001988b
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
mov r9d, 1
lea r8, [0x140092e38]
movzx edx, r9b
mov rcx, rax
call fcn.140012ef0
jmp 0x14001988e
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x218]
call fcn.1400030b0
mov rdx, rax
mov rsi, qword [rbp - 0x10]
mov rcx, rsi
call fcn.1400135f0
cmp qword [0x1400acf20], 0
je 0x140019929
mov ecx, 0x88
call fcn.140069020
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14001990c
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
lea r9d, [rcx + 0x10]
mov r8, qword [0x1400acf20]
mov dl, 2
mov rcx, rax
call fcn.140012ef0
jmp 0x14001990f
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x228]
call fcn.1400030b0
mov rdx, rax
mov rcx, rsi
call fcn.1400135f0
mov ecx, 0x88
call fcn.140069020
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400199bf
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
movups xmmword [rbx + 0x50], xmm0
movups xmmword [rbx + 0x60], xmm0
movups xmmword [rbx + 0x70], xmm0
mov qword [rbx + 0x80], rax
movdqa xmmword [rbp + 0x100], xmm0
mov rax, qword [rbp + 0x578]
test rax, rax
je 0x140019987
lock inc dword [rax + 8]
mov rsi, qword [rbp - 0x10]
movaps xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x100], xmm0
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x238]
lea rcx, [0x1400aced0]
call fcn.14004fb30
mov r8, rax
mov dl, 0x10
mov rcx, rbx
call fcn.1400132d0
jmp 0x1400199c2
mov rax, r15
mov rdx, rax
lea rcx, [rbp + 0x248]
call fcn.1400030b0
mov rdx, rax
mov rcx, rsi
call fcn.1400135f0
lea rdx, [rbp + 0x258]
mov rcx, rsi
call fcn.140013a10
mov rdx, rax
lea rcx, [rbp + 0x570]
call fcn.140007070
mov rcx, qword [rbp + 0x260]
test rcx, rcx
je 0x140019a0c
call fcn.140014e50
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140019a1a
call fcn.140014e50
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140019a30
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x140019a80
mov rcx, rdx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xa18]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140019ac0
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5a4], 0x10
lea rdx, [rbp + 0x5a4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5a8], 0x10
lea rdx, [rbp + 0x5a8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019b6f
lea rax, [rbp + 0xa20]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xa28]
lea r8, [rbp + 0xa30]
lea rdx, [rbp + 0xa38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3930]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x3940]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5ac], 0x10
lea rdx, [rbp + 0x5ac]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5b0], 0x10
lea rdx, [rbp + 0x5b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xa40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140019c11
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3950]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0xa48]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140019c48
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3960]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019ca6
lea rax, [rbp + 0xa50]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xa58]
lea r8, [rbp + 0xa60]
lea rdx, [rbp + 0xa68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140019cc0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x140019d10
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5b4], 0x10
lea rdx, [rbp + 0x5b4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140019d70
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x140019dc2
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3970]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5b8], 0x10
lea rdx, [rbp + 0x5b8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5bc], 0x10
lea rdx, [rbp + 0x5bc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xa70]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140019e6d
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x464], 0x10
lea rdx, [rbp + 0x464]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0xa78]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0xa80]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0xa88]
lea r8, [rbp + 0xa90]
lea rdx, [rbp + 0xa98]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140019f29
lea rax, [rbp + 0xaa0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xaa8]
lea r8, [rbp + 0xab0]
lea rdx, [rbp + 0xab8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140019f40
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x140019f92
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3980]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5c0], 0x10
lea rdx, [rbp + 0x5c0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001a035
lea rax, [rbp + 0xac0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xac8]
lea r8, [rbp + 0xad0]
lea rdx, [rbp + 0xad8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001a086
lea rax, [rbp + 0xae0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xae8]
lea r8, [rbp + 0xaf0]
lea rdx, [rbp + 0xaf8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5c4], 0x10
lea rdx, [rbp + 0x5c4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001a106
lea rax, [rbp + 0xb00]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xb08]
lea r8, [rbp + 0xb10]
lea rdx, [rbp + 0xb18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001a120
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001a170
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0xb20]
lea r8, [rbp + 0xb28]
lea rdx, [rbp + 0xb30]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0xb38]
lea r8, [rbp + 0xb40]
lea rdx, [rbp + 0xb48]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001a1e0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001a230
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001a260
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001a2b2
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0xb50]
lea r8, [rbp + 0xb58]
lea rdx, [rbp + 0xb60]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0xb68]
lea r8, [rbp + 0xb70]
lea rdx, [rbp + 0xb78]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5c8], 0x10
lea rdx, [rbp + 0x5c8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xb80]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001a365
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0xb88]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0xb90]
lea r8, [rbp + 0xb98]
lea rdx, [rbp + 0xba0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0xba8]
lea r8, [rbp + 0xbb0]
lea rdx, [rbp + 0xbb8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0xbc0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0xbc8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001a3ed
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001a400
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001a452
mov rcx, rdx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001a4b9
lea rax, [rbp + 0xbd0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xbd8]
lea r8, [rbp + 0xbe0]
lea rdx, [rbp + 0xbe8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0xbf0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001a4e3
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001a500
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001a550
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5cc], 0x10
lea rdx, [rbp + 0x5cc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xbf8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001a5bf
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001a610
lea rax, [rbp + 0xc00]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc08]
lea r8, [rbp + 0xc10]
lea rdx, [rbp + 0xc18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3990]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x39a0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x39b0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0xc20]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0xc28]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001a66e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001a680
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001a6d0
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001a700
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001a752
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5d0], 0x10
lea rdx, [rbp + 0x5d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x39c0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0xc30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001a7ce
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0xc38]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001a7f8
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5d4], 0x10
lea rdx, [rbp + 0x5d4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov ecx, 0x88
call fcn.140069020
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a879
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
mov dl, 0x21
mov rcx, rax
call fcn.140012dc0
jmp 0x14001a87c
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400030b0
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov ecx, 0x88
call fcn.140069020
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a8ea
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
mov r9d, 1
lea r8, [0x140092d70]
movzx edx, r9b
mov rcx, rax
call fcn.140012ef0
jmp 0x14001a8ed
mov rax, r15
mov rdx, rax
lea rcx, [rbp]
call fcn.1400030b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov ecx, 0x88
call fcn.140069020
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a957
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
lea r9d, [rcx + 4]
lea r8, [rbp + 0x5d8]
mov dl, 2
mov rcx, rax
call fcn.140012ef0
jmp 0x14001a95a
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400030b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov ecx, 0x88
call fcn.140069020
mov qword [rsp + 0x30], rax
test rax, rax
je 0x14001a9e7
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rax + 0x80], rcx
movdqa xmmword [rbp + 0x110], xmm0
mov rcx, qword [rbp + 0x578]
test rcx, rcx
je 0x14001a9c5
lock inc dword [rcx + 8]
movaps xmm0, xmmword [rbp + 0x570]
movdqa xmmword [rbp + 0x110], xmm0
lea r8, [rbp + 0x110]
mov dl, 4
mov rcx, rax
call fcn.1400132d0
jmp 0x14001a9ea
mov rax, r15
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.1400030b0
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14001aa0f
lock inc dword [rcx + 8]
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0x120]
mov r14, qword [rbp - 0x80]
mov rcx, r14
call fcn.1400135f0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x130], xmm0
mov rbx, qword [rbp - 0x48]
test rbx, rbx
je 0x14001aa4e
lock inc dword [rbx + 8]
mov r14, qword [rbp - 0x80]
mov rbx, qword [rbp - 0x48]
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [rbp + 0x130]
mov rcx, r14
call fcn.1400135f0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x140], xmm0
mov rsi, qword [rbp - 0x28]
test rsi, rsi
je 0x14001aa8d
lock inc dword [rsi + 8]
mov r14, qword [rbp - 0x80]
mov rbx, qword [rbp - 0x48]
mov rsi, qword [rbp - 0x28]
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x140]
mov rcx, r14
call fcn.1400135f0
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x150], xmm0
mov r14, qword [rbp - 0x78]
test r14, r14
je 0x14001aacd
lock inc dword [r14 + 8]
mov r14, qword [rbp - 0x78]
mov rbx, qword [rbp - 0x48]
mov rsi, qword [rbp - 0x28]
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp + 0x150], xmm0
lea rdx, [rbp + 0x150]
mov rcx, qword [r12 + 8]
call fcn.1400545f0
nop
test rsi, rsi
je 0x14001aaf9
mov rcx, rsi
call fcn.140014e50
nop
test rbx, rbx
je 0x14001ab07
mov rcx, rbx
call fcn.140014e50
nop
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x14001ab16
call fcn.140014e50
nop
test r14, r14
je 0x14001ab24
mov rcx, r14
call fcn.140014e50
nop
mov rcx, qword [rbp + 0x578]
test rcx, rcx
je 0x14001ab35
call fcn.140014e50
mov edx, 8
lea rcx, [rbp + 0xc40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001ab5f
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5dc], 0x10
lea rdx, [rbp + 0x5dc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xc48]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001abb8
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0xc50]
lea r8, [rbp + 0xc58]
lea rdx, [rbp + 0xc60]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0xc68]
lea r8, [rbp + 0xc70]
lea rdx, [rbp + 0xc78]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x39d0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001ac20
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001ac70
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001aca0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001acf0
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0xc80]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001ad30
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001ad82
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0xc88]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x39e0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x39f0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0xc90]
lea r8, [rbp + 0xc98]
lea rdx, [rbp + 0xca0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5e0], 0x10
lea rdx, [rbp + 0x5e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001ae61
lea rax, [rbp + 0xca8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xcb0]
lea r8, [rbp + 0xcb8]
lea rdx, [rbp + 0xcc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xcc8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001ae80
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001aed2
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3a00]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0xcd0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001af1f
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0xcd8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001af40
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001af90
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0xce0]
lea r8, [rbp + 0xce8]
lea rdx, [rbp + 0xcf0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001afe0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b030
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001b060
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b0b2
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3a10]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0xcf8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b0ff
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0xd00]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0xd08]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5e4], 0x10
lea rdx, [rbp + 0x5e4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xd10]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b172
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0xd18]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3a20]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0xd20]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0xd28]
lea r8, [rbp + 0xd30]
lea rdx, [rbp + 0xd38]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001b20c
lea rax, [rbp + 0xd40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xd48]
lea r8, [rbp + 0xd50]
lea rdx, [rbp + 0xd58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xd60]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5e8], 0x10
lea rdx, [rbp + 0x5e8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea r9, [rbp + 0xd68]
lea r8, [rbp + 0xd70]
lea rdx, [rbp + 0xd78]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001b280
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b2d2
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0xd80]
lea r8, [rbp + 0xd88]
lea rdx, [rbp + 0xd90]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0xd98]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b334
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001b350
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b3a0
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0xda0]
lea r8, [rbp + 0xda8]
lea rdx, [rbp + 0xdb0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0xdb8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b402
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0xdc0]
lea r8, [rbp + 0xdc8]
lea rdx, [rbp + 0xdd0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001b475
lea rax, [rbp + 0xdd8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xde0]
lea r8, [rbp + 0xde8]
lea rdx, [rbp + 0xdf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3a30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001b492
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b4e0
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3a40]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x3a50]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0xdf8]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0xe00]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b547
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3a60]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001b570
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b5c2
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0xe08]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0xe10]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0xe18]
lea r8, [rbp + 0xe20]
lea rdx, [rbp + 0xe28]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0xe30]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b63e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0xe38]
lea r8, [rbp + 0xe40]
lea rdx, [rbp + 0xe48]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001b670
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b6c2
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5f0], 0x10
lea rdx, [rbp + 0x5f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x3a70]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5f4], 0x10
lea rdx, [rbp + 0x5f4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0xe50]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b76d
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0xe58]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b797
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov rcx, qword [r13]
call fcn.140014250
cmp al, 0x22
jne 0x14001f609
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001b7c0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001b810
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0xe60]
lea r8, [rbp + 0xe68]
lea rdx, [rbp + 0xe70]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5f8], 0x10
lea rdx, [rbp + 0x5f8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x3a80]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x5fc], 0x10
lea rdx, [rbp + 0x5fc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x3a90]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0xe78]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b8ea
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x600], 0x10
lea rdx, [rbp + 0x600]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001b96a
lea rax, [rbp + 0xe80]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xe88]
lea r8, [rbp + 0xe90]
lea rdx, [rbp + 0xe98]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xea0]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0xea8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001b9a1
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0xeb0]
lea r8, [rbp + 0xeb8]
lea rdx, [rbp + 0xec0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x604], 0x10
lea rdx, [rbp + 0x604]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001ba43
lea rax, [rbp + 0xec8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xed0]
lea r8, [rbp + 0xed8]
lea rdx, [rbp + 0xee0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0xee8]
lea r8, [rbp + 0xef0]
lea rdx, [rbp + 0xef8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0xf00]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001ba8f
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x608], 0x10
lea rdx, [rbp + 0x608]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001bb0f
lea rax, [rbp + 0xf08]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xf10]
lea r8, [rbp + 0xf18]
lea rdx, [rbp + 0xf20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xf28]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3aa0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001bb40
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001bb90
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x60c], 0x10
lea rdx, [rbp + 0x60c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001bc26
lea rax, [rbp + 0xf30]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xf38]
lea r8, [rbp + 0xf40]
lea rdx, [rbp + 0xf48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3ab0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0xf50]
lea r8, [rbp + 0xf58]
lea rdx, [rbp + 0xf60]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001bca6
lea rax, [rbp + 0xf68]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xf70]
lea r8, [rbp + 0xf78]
lea rdx, [rbp + 0xf80]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xf88]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0xf90]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001bcd0
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001bd22
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001bd50
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001bda2
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0xf98]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3ac0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001be23
lea rax, [rbp + 0xfa0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xfa8]
lea r8, [rbp + 0xfb0]
lea rdx, [rbp + 0xfb8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xfc0]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001be81
lea rax, [rbp + 0xfc8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xfd0]
lea r8, [rbp + 0xfd8]
lea rdx, [rbp + 0xfe0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rbp + 0xfe8]
lea r8, [rbp + 0xff0]
lea rdx, [rbp + 0xff8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x1000]
lea r8, [rbp + 0x1008]
lea rdx, [rbp + 0x1010]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001bee0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001bf30
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x610], 0x10
lea rdx, [rbp + 0x610]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea r9, [rbp + 0x1018]
lea r8, [rbp + 0x1020]
lea rdx, [rbp + 0x1028]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x614], 0x10
lea rdx, [rbp + 0x614]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c017
lea rax, [rbp + 0x1030]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1038]
lea r8, [rbp + 0x1040]
lea rdx, [rbp + 0x1048]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3ad0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c075
lea rax, [rbp + 0x1050]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1058]
lea r8, [rbp + 0x1060]
lea rdx, [rbp + 0x1068]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1070]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3ae0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0x1078]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001c0b9
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x1080]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c117
lea rax, [rbp + 0x1088]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1090]
lea r8, [rbp + 0x1098]
lea rdx, [rbp + 0x10a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c168
lea rax, [rbp + 0x10a8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10b0]
lea r8, [rbp + 0x10b8]
lea rdx, [rbp + 0x10c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001c180
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001c1d0
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001c200
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001c252
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0x10c8]
lea r8, [rbp + 0x10d0]
lea rdx, [rbp + 0x10d8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x10e0]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c2e8
lea rax, [rbp + 0x10e8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10f0]
lea r8, [rbp + 0x10f8]
lea rdx, [rbp + 0x1100]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c339
lea rax, [rbp + 0x1108]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1110]
lea r8, [rbp + 0x1118]
lea rdx, [rbp + 0x1120]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c38a
lea rax, [rbp + 0x1128]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1130]
lea r8, [rbp + 0x1138]
lea rdx, [rbp + 0x1140]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c3db
lea rax, [rbp + 0x1148]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1150]
lea r8, [rbp + 0x1158]
lea rdx, [rbp + 0x1160]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c42c
lea rax, [rbp + 0x1168]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1170]
lea r8, [rbp + 0x1178]
lea rdx, [rbp + 0x1180]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x1188]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001c456
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001c470
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001c4c2
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x3af0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x1190]
lea r8, [rbp + 0x1198]
lea rdx, [rbp + 0x11a0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rbp + 0x11a8]
lea r8, [rbp + 0x11b0]
lea rdx, [rbp + 0x11b8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c57a
lea rax, [rbp + 0x11c0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x11c8]
lea r8, [rbp + 0x11d0]
lea rdx, [rbp + 0x11d8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c5cb
lea rax, [rbp + 0x11e0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x11e8]
lea r8, [rbp + 0x11f0]
lea rdx, [rbp + 0x11f8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8b, 2
lea rdx, [rbp + 0x268]
mov rcx, qword [r13]
call fcn.140013fa0
nop
lea rdx, [rbp + 0x634]
mov rcx, qword [rax]
call fcn.1400142b0
nop
mov rcx, qword [rbp + 0x270]
test rcx, rcx
je 0x14001c600
call fcn.140014e50
xorps xmm0, xmm0
movups xmmword [rbp + 0x380], xmm0
lea rcx, [rbp + 0x380]
call fcn.14002f9d0
nop
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001c630
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001c680
mov rcx, rdx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c6e7
lea rax, [rbp + 0x1200]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1208]
lea r8, [rbp + 0x1210]
lea rdx, [rbp + 0x1218]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x1220]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001c711
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x1228]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001c73b
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001c78c
lea rax, [rbp + 0x1230]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1238]
lea r8, [rbp + 0x1240]
lea rdx, [rbp + 0x1248]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1250]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x20], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001c7b0
mov rax, rdi
nop
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001c800
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x618], 0x10
lea rdx, [rbp + 0x618]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x61c], 0x10
lea rdx, [rbp + 0x61c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001c890
mov rax, rdi
inc byte [rdx + rax]
inc rax
cmp rax, 0x186a0
jl 0x14001c8e2
lea rcx, [rbp + 0x1928]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rbp + 0x1930]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f640
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x390], 0x10
lea rdx, [rbp + 0x390]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001f680
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001f6d2
mov rcx, rdx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x1938]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f712
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3cc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x1940]
lea r8, [rbp + 0x1948]
lea rdx, [rbp + 0x1950]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x1958]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0x1960]
lea r8, [rbp + 0x1968]
lea rdx, [rbp + 0x1970]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0x1978]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f79a
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x1980]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f7c4
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x1988]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f7ee
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rbp + 0x1990]
lea r8, [rbp + 0x1998]
lea rdx, [rbp + 0x19a0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rbp + 0x19a8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f83a
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x19b0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f864
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001f8b5
lea rax, [rbp + 0x19b8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x19c0]
lea r8, [rbp + 0x19c8]
lea rdx, [rbp + 0x19d0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3cd0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x19d8]
lea r8, [rbp + 0x19e0]
lea rdx, [rbp + 0x19e8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x394], 0x10
lea rdx, [rbp + 0x394]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001f930
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001f982
mov rcx, rdx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x19f0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001f9c2
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x398], 0x10
lea rdx, [rbp + 0x398]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001fa01
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001fa50
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x19f8]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3ce0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x1a00]
lea r8, [rbp + 0x1a08]
lea rdx, [rbp + 0x1a10]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001fab2
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001fb00
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x1a18]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp + 0x1a20]
lea r8, [rbp + 0x1a28]
lea rdx, [rbp + 0x1a30]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x3cf0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x39c], 0x10
lea rdx, [rbp + 0x39c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001fbd2
lea rax, [rbp + 0x1a38]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1a40]
lea r8, [rbp + 0x1a48]
lea rdx, [rbp + 0x1a50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001fc23
lea rax, [rbp + 0x1a58]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1a60]
lea r8, [rbp + 0x1a68]
lea rdx, [rbp + 0x1a70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001fc74
lea rax, [rbp + 0x1a78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1a80]
lea r8, [rbp + 0x1a88]
lea rdx, [rbp + 0x1a90]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1a98]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001fc91
mov rax, rdi
nop dword [rax]
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001fcf0
mov rcx, rdx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x1aa0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14001fd30
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x14001fd40
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001fd92
mov rcx, rdx
call fcn.14006905c
lea r9, [rbp + 0x1aa8]
lea r8, [rbp + 0x1ab0]
lea rdx, [rbp + 0x1ab8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001fde0
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001fe30
mov rcx, rdx
call fcn.14006905c
lea rcx, [rbp + 0x1ac0]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3d00]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14001feb1
lea rax, [rbp + 0x1ac8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1ad0]
lea r8, [rbp + 0x1ad8]
lea rdx, [rbp + 0x1ae0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3d10]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x1ae8]
lea r8, [rbp + 0x1af0]
lea rdx, [rbp + 0x1af8]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0x1b00]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x1b08]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x1b10]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x1b18]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x3d20]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14001ff31
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14001ff80
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3a0], 0x10
lea rdx, [rbp + 0x3a0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3a4], 0x10
lea rdx, [rbp + 0x3a4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x1b20]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3a8], 0x10
lea rdx, [rbp + 0x3a8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x1b28]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3ac], 0x10
lea rdx, [rbp + 0x3ac]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140020080
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x1400200d2
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140020100
mov rax, rdi
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140020152
mov rcx, rdx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3b0], 0x10
lea rdx, [rbp + 0x3b0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3b4], 0x10
lea rdx, [rbp + 0x3b4]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x1b30]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140020224
lea rax, [rbp + 0x1b38]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1b40]
lea r8, [rbp + 0x1b48]
lea rdx, [rbp + 0x1b50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x1b58]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14002024e
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3b8], 0x10
lea rdx, [rbp + 0x3b8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
lea rcx, [rbp + 0x3d30]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov rcx, qword [r13]
call fcn.140014250
cmp al, 0x23
jne 0x1400283bb
lea r9, [rbp + 0x1b60]
lea r8, [rbp + 0x1b68]
lea rdx, [rbp + 0x1b70]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3bc], 0x10
lea rdx, [rbp + 0x3bc]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140020300
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140020350
mov rcx, rdx
call fcn.14006905c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400203b7
lea rax, [rbp + 0x1b78]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1b80]
lea r8, [rbp + 0x1b88]
lea rdx, [rbp + 0x1b90]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3d40]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0x1b98]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400203ee
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0x3d50]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rbp + 0x1ba0]
lea r8, [rbp + 0x1ba8]
lea rdx, [rbp + 0x1bb0]
lea rcx, [0x140092dc0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140020430
mov rax, rdi
nop
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x140020480
mov rcx, rdx
call fcn.14006905c
mov edx, 8
lea rcx, [rbp + 0x1bb8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400204c0
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x1bc0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400204ea
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x1bc8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140020514
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140020565
lea rax, [rbp + 0x1bd0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1bd8]
lea r8, [rbp + 0x1be0]
lea rdx, [rbp + 0x1be8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400205b6
lea rax, [rbp + 0x1bf0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1bf8]
lea r8, [rbp + 0x1c00]
lea rdx, [rbp + 0x1c08]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3d60]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140020614
lea rax, [rbp + 0x1c10]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1c18]
lea r8, [rbp + 0x1c20]
lea rdx, [rbp + 0x1c28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.140069230
mov rbx, rax
mov dword [rbp + 0x3c0], 0x10
lea rdx, [rbp + 0x3c0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14006905c
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x30], xmm0
add rcx, 0x40
cmp rcx, rdi
jl 0x140020660
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14002840c
lea rax, [rbp + 0x3408]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3410]
lea r8, [rbp + 0x3418]
lea rdx, [rbp + 0x3420]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x4250]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x4260]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rbp + 0x4270]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0x3428]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14002845d
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400284ae
lea rax, [rbp + 0x3430]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3438]
lea r8, [rbp + 0x3440]
lea rdx, [rbp + 0x3448]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rbp + 0x3450]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1400284d8
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x140028529
lea rax, [rbp + 0x3458]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3460]
lea r8, [rbp + 0x3468]
lea rdx, [rbp + 0x3470]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x3478]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rbp + 0x4280]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0x3480]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14002856d
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400285be
lea rax, [rbp + 0x3488]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3490]
lea r8, [rbp + 0x3498]
lea rdx, [rbp + 0x34a0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14002860f
lea rax, [rbp + 0x34a8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x34b0]
lea r8, [rbp + 0x34b8]
lea rdx, [rbp + 0x34c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x4290]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rbp + 0x34c8]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140028646
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rbp + 0x34d0]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x140028670
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400286c1
lea rax, [rbp + 0x34d8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x34e0]
lea r8, [rbp + 0x34e8]
lea rdx, [rbp + 0x34f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x42a0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14002871f
lea rax, [rbp + 0x34f8]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x3500]
lea r8, [rbp + 0x3508]
lea rdx, [rbp + 0x3510]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.140069230
mov rdx, rax
mov rcx, r15
nop
movdqu xmm0, xmmword [rcx + rax]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x10]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x10], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x20]
paddb xmm0, xmm6
movdqu xmmword [rcx + rax + 0x20], xmm0
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x140028730