Function at 0x14000c560
Capabilities:
Check for unmoving mouse cursor
Get common file path
Get disk size
Get hostname

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd28]
sub rsp, 0xe00
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140092100]
xor rax, rsp
mov qword [rbp + 0xce0], rax
xor r15d, r15d
lea r12, [0x140093e80]
mov qword [rsp + 0x38], r12
mov rcx, r12
call fcn.14004d800
test eax, eax
jne 0x14000f2c0
cmp dword [0x140093ecc], 0x7fffffff
je 0x14000f2cb
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000c613
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000c63b
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000c6ab
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
movdqa xmm6, xmmword [0x140079df0]
mov edi, 0x18680
nop
movdqu xmm0, xmmword [rax + rcx]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx], xmm0
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
paddb xmm0, xmm6
movdqu xmmword [rax + rcx + 0x30], xmm0
add rax, 0x40
cmp rax, rdi
jl 0x14000c6e0
mov rax, rdi
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000c732
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000c76d
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000c7b6
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000c7d0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000c830
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000c8ba
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000c90d
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000c940
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000c9bb
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000c9e3
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000ca74
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000ca90
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000caf0
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000cb4c
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000cb80
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000cbe0
call fcn.14004fdb0
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000cc58
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000cc80
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000ccd3
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000cce3
mov rax, rdi
nop dword [rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000cd40
call fcn.14004fdb0
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [0x140093e60]
call qword [sym.imp.ole32.dll_CoCreateGuid]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0xc0]
call fcn.14000c240
mov rdx, rax
lea rcx, [section..data]
call fcn.14000b860
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x14000cdd7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000cdd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f2b4
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000ce30
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000ce90
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000cecb
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000cf1f
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000cf47
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000cf62
mov rax, rdi
nop dword [rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000cfc0
call fcn.14004fdb0
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000d027
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d0b0
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000d0c0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000d120
call fcn.14004fdb0
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000d143
mov rax, rdi
nop dword [rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000d1a0
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d298
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d2cb
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000d33f
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000d350
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000d3b0
call fcn.14004fdb0
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000d44d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d475
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov word [rbp + 0x4e0], r15w
mov r8d, 0x400
lea rdx, [rbp + 0x4e0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rax, [rbp + 0x4e0]
mov rsi, 0xffffffffffffffff
mov rdx, rsi
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14000d4c0
mov rax, qword [0x140092038]
cmp rdx, rax
ja 0x14000d50d
lea r14, [0x140092020]
cmp rax, 7
cmova r14, qword [0x140092020]
mov qword [0x140092030], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x4e0]
mov rcx, r14
call fcn.140074c10
mov word [r14 + rbx], r15w
jmp 0x14000d523
lea r9, [rbp + 0x4e0]
xor r8d, r8d
lea rcx, [0x140092020]
call fcn.14000b6f0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x140093e70], eax
mov word [rbp + 0x4e0], r15w
lea rdx, [rbp + 0x4e0]
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea rax, [rbp + 0x4e0]
mov rdx, rsi
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14000d553
mov rax, qword [0x140092058]
cmp rdx, rax
ja 0x14000d5a0
lea r14, [0x140092040]
cmp rax, 7
cmova r14, qword [0x140092040]
mov qword [0x140092050], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x4e0]
mov rcx, r14
call fcn.140074c10
mov word [r14 + rbx], r15w
jmp 0x14000d5b6
lea r9, [rbp + 0x4e0]
xor r8d, r8d
lea rcx, [0x140092040]
call fcn.14000b6f0
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d610
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d638
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d6b2
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000d6e0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000d740
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000d79c
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000d7cf
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000d800
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000d860
call fcn.14004fdb0
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000d8b0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000d910
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
nop
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000d960
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000d9c0
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000db02
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000db2a
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000db52
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000dbdd
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov byte [0x140093e74], 1
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x5c]
call fcn.140074850
mov dword [rbp - 0x60], 0x114
lea rcx, [0x140079cb0]
call fcn.1400387c0
mov rcx, rax
call fcn.14003bd00
mov rbx, rax
test rax, rax
je 0x14000dc8e
lea rcx, str.Q4N
call fcn.140038680
mov rdx, rax
mov rcx, rbx
call fcn.14003b800
test rax, rax
je 0x14000dc8e
lea rcx, [rbp - 0x60]
call rax
test eax, eax
jne 0x14000dc8e
movzx ecx, byte [rbp - 0x5c]
mov byte [0x140093e75], cl
movzx eax, byte [rbp - 0x58]
mov byte [0x140093e76], al
cmp cl, 0xa
jne 0x14000dc8e
cmp dword [rbp - 0x54], 0x55f0
jb 0x14000dc8e
mov byte [0x140093e75], 0xb
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000dca0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000dd00
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000dd66
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000de41
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000de69
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000deb2
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000dec2
mov rax, rdi
nop dword [rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000df20
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000df50
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000dfb0
call fcn.14004fdb0
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000e028
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000e050
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000e070
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000e0d0
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000e12c
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000e1e4
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000e258
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000e2cc
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000e2f4
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000e31c
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 0x400
lea rcx, [rbp + 0xe0]
call fcn.14003cfa0
test eax, eax
jne 0x14000e9ea
lea rax, [rbp + 0xe0]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000e347
mov rax, qword [0x140092098]
cmp rsi, rax
ja 0x14000e38e
lea rbx, [0x140092080]
cmp rax, 0xf
cmova rbx, qword [0x140092080]
mov qword [0x140092090], rsi
mov r8, rsi
lea rdx, [rbp + 0xe0]
mov rcx, rbx
call fcn.140074c10
mov byte [rbx + rsi], 0
jmp 0x14000e3a7
lea r9, [rbp + 0xe0]
xor r8d, r8d
mov rdx, rsi
lea rcx, [0x140092080]
call fcn.14000b5b0
lea rcx, [rbp + 0xe0]
call fcn.14003cee0
mov qword [rsp + 0x48], rax
lea rbx, [0x140092060]
mov rcx, rbx
cmp qword [0x140092078], 0xf
cmova rcx, qword [0x140092060]
mov qword [0x140092070], r15
mov byte [rcx], 0
test rax, rax
je 0x14000e9ea
mov r13d, r15d
mov rax, qword [rax + 0x18]
cmp qword [rax], r13
je 0x14000e9ea
mov rcx, r15
nop dword [rax + rax]
mov r12, qword [rcx + rax]
test r13d, r13d
je 0x14000e464
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14000e445
lea rax, [rcx + 1]
mov qword [0x140092070], rax
mov rax, rbx
cmp rdx, 0xf
cmova rax, qword [0x140092060]
mov word [rax + rcx], 0x3b
jmp 0x14000e464
mov qword [rsp + 0x20], 1
lea r9, [0x140079dbc]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.140007a50
movzx r8d, byte [r12]
lea r10, [rbp + 0xd5]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14000e470
lea r9, [rsp + 0x30]
lea r8, [rbp + 0xd5]
mov rdx, r10
lea rcx, [rsp + 0x68]
call fcn.140007920
nop
lea r9, [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
mov r15, qword [rbp - 0x80]
cmp r15, 0xf
cmova r9, rsi
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
mov r14, qword [rsp + 0x78]
cmp r14, rax
ja 0x14000e51e
lea rax, [r14 + rcx]
mov qword [0x140092070], rax
cmp rdx, 0xf
cmova rbx, qword [0x140092060]
add rbx, rcx
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.140074c10
mov byte [r14 + rbx], 0
lea rbx, [0x140092060]
jmp 0x14000e53a
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.140007a50
mov r15, qword [rbp - 0x80]
mov rsi, qword [rsp + 0x68]
cmp r15, 0xf
jbe 0x14000e571
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000e569
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f2ba
mov rcx, rsi
call fcn.14004fdb0
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14000e5ad
lea rax, [rcx + 1]
mov qword [0x140092070], rax
mov rax, rbx
cmp rdx, 0xf
cmova rax, qword [0x140092060]
mov word [rax + rcx], 0x2e
jmp 0x14000e5cc
mov qword [rsp + 0x20], 1
lea r9, [0x140079dc0]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.140007a50
movzx r8d, byte [r12 + 1]
lea r10, [rbp + 0xd5]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14000e5e0
lea r9, [rsp + 0x30]
lea r8, [rbp + 0xd5]
mov rdx, r10
lea rcx, [rsp + 0x68]
call fcn.140007920
nop
lea r9, [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
mov r15, qword [rbp - 0x80]
cmp r15, 0xf
cmova r9, rsi
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
mov r14, qword [rsp + 0x78]
cmp r14, rax
ja 0x14000e68e
lea rax, [r14 + rcx]
mov qword [0x140092070], rax
cmp rdx, 0xf
cmova rbx, qword [0x140092060]
add rbx, rcx
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.140074c10
mov byte [r14 + rbx], 0
lea rbx, [0x140092060]
jmp 0x14000e6aa
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.140007a50
mov r15, qword [rbp - 0x80]
mov rsi, qword [rsp + 0x68]
cmp r15, 0xf
jbe 0x14000e6e1
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000e6d9
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f2ba
mov rcx, rsi
call fcn.14004fdb0
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14000e71d
lea rax, [rcx + 1]
mov qword [0x140092070], rax
mov rax, rbx
cmp rdx, 0xf
cmova rax, qword [0x140092060]
mov word [rax + rcx], 0x2e
jmp 0x14000e73c
mov qword [rsp + 0x20], 1
lea r9, [0x140079dc0]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.140007a50
movzx r8d, byte [r12 + 2]
lea r10, [rbp + 0xd5]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14000e750
lea r9, [rsp + 0x30]
lea r8, [rbp + 0xd5]
mov rdx, r10
lea rcx, [rsp + 0x68]
call fcn.140007920
nop
lea r9, [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
mov r15, qword [rbp - 0x80]
cmp r15, 0xf
cmova r9, rsi
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
mov r14, qword [rsp + 0x78]
cmp r14, rax
ja 0x14000e7fe
lea rax, [r14 + rcx]
mov qword [0x140092070], rax
cmp rdx, 0xf
cmova rbx, qword [0x140092060]
add rbx, rcx
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.140074c10
mov byte [r14 + rbx], 0
lea rbx, [0x140092060]
jmp 0x14000e81a
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.140007a50
mov r15, qword [rbp - 0x80]
mov rsi, qword [rsp + 0x68]
cmp r15, 0xf
jbe 0x14000e851
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000e849
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f2ba
mov rcx, rsi
call fcn.14004fdb0
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14000e88d
lea rax, [rcx + 1]
mov qword [0x140092070], rax
mov rax, rbx
cmp rdx, 0xf
cmova rax, qword [0x140092060]
mov word [rax + rcx], 0x2e
jmp 0x14000e8ac
mov qword [rsp + 0x20], 1
lea r9, [0x140079dc0]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, rbx
call fcn.140007a50
movzx r8d, byte [r12 + 3]
lea r10, [rbp + 0xd5]
nop dword [rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x14000e8c0
lea r9, [rsp + 0x30]
lea r8, [rbp + 0xd5]
mov rdx, r10
lea rcx, [rsp + 0x68]
call fcn.140007920
nop
lea r9, [rsp + 0x68]
mov rsi, qword [rsp + 0x68]
mov r15, qword [rbp - 0x80]
cmp r15, 0xf
cmova r9, rsi
mov rcx, qword [0x140092070]
mov rdx, qword [0x140092078]
mov rax, rdx
sub rax, rcx
mov r14, qword [rsp + 0x78]
cmp r14, rax
ja 0x14000e96e
lea rax, [rcx + r14]
mov qword [0x140092070], rax
cmp rdx, 0xf
cmova rbx, qword [0x140092060]
add rbx, rcx
mov r8, r14
mov rdx, r9
mov rcx, rbx
call fcn.140074c10
mov byte [r14 + rbx], 0
lea rbx, [0x140092060]
jmp 0x14000e98a
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, r14
mov rcx, rbx
call fcn.140007a50
mov r15, qword [rbp - 0x80]
mov rsi, qword [rsp + 0x68]
cmp r15, 0xf
jbe 0x14000e9c1
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000e9b9
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f2ba
mov rcx, rsi
call fcn.14004fdb0
inc r13d
lea rcx, [r13*8]
mov rax, qword [rsp + 0x48]
mov rax, qword [rax + 0x18]
cmp qword [rcx + rax], 0
jne 0x14000e400
xor r15d, r15d
lea r12, [0x140093e80]
call qword [sym.imp.KERNEL32.dll_GetACP]
mov dword [0x140093e7c], eax
mov ecx, 0x186a0
call fcn.14004ff80
mov rcx, rax
mov rax, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rax + rcx]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x10], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x20], xmm1
movdqu xmm0, xmmword [rax + rcx + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rax + rcx + 0x30], xmm1
add rax, 0x40
cmp rax, rdi
jl 0x14000ea10
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rcx]
inc rax
cmp rax, 0x186a0
jl 0x14000ea70
call fcn.14004fdb0
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000eaab
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000eac0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000eb20
mov rcx, rdx
call fcn.14004fdb0
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea r9, [rbp - 0x78]
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x68]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000ec16
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x70]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x14000ec68
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x70]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000ec80
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000ece0
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x78]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
nop dword [rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000ed30
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000ed90
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
nop word [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000edc0
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000ee20
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x68]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000ee6b
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x68]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000eea0
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea r9, [rbp - 0x70]
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x40]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov edx, 8
lea rcx, [rsp + 0x50]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000ef5b
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x78]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov edx, 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000efc8
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov edx, 8
lea rcx, [rsp + 0x68]
call qword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x14000eff0
lea ecx, [rax + 1]
call qword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ecx, 1
call qword [sym.imp.WINMM.dll_timeEndPeriod]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000f000
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000f060
mov rcx, rdx
call fcn.14004fdb0
lea rcx, [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000f091
mov rax, rdi
nop dword [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000f0f0
mov rcx, rdx
call fcn.14004fdb0
lea r9, [rsp + 0x68]
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x78]
lea rcx, [0x140079da0]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov ecx, 0x20
call fcn.14004ff80
mov rbx, rax
mov dword [rsp + 0x48], 0x10
lea rdx, [rsp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rcx, rbx
call fcn.14004fdb0
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ecx, 0x186a0
call fcn.14004ff80
mov rdx, rax
mov rcx, r15
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x10], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x20], xmm1
movdqu xmm0, xmmword [rcx + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [rcx + rax + 0x30], xmm1
add rcx, 0x40
cmp rcx, rdi
jl 0x14000f170
mov rax, rdi
nop word [rax + rax]
inc byte [rax + rdx]
inc rax
cmp rax, 0x186a0
jl 0x14000f1d0
mov rcx, rdx
call fcn.14004fdb0
mov ecx, 0x186a0
call fcn.14004ff80
movdqu xmm0, xmmword [r15 + rax]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [r15 + rax], xmm1
movdqu xmm0, xmmword [r15 + rax + 0x10]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [r15 + rax + 0x10], xmm1
movdqu xmm0, xmmword [r15 + rax + 0x20]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [r15 + rax + 0x20], xmm1
movdqu xmm0, xmmword [r15 + rax + 0x30]
movdqa xmm1, xmm6
paddb xmm1, xmm0
movdqu xmmword [r15 + rax + 0x30], xmm1
add r15, 0x40
cmp r15, rdi
jl 0x14000f1f0
nop
inc byte [rdi + rax]
inc rdi
cmp rdi, 0x186a0
jl 0x14000f250
mov rcx, rax
call fcn.14004fdb0
mov byte [0x140093e78], 1
mov byte [0x140093e77], 1
mov rcx, r12
call fcn.14004d828
mov al, 1
mov rcx, qword [rbp + 0xce0]
xor rcx, rsp
call fcn.14004fe50
lea r11, [rsp + 0xe00]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140056fb4
nop
call fcn.140056fb4
nop
mov ecx, 5
call fcn.14004d684
int3
mov dword [0x140093ecc], 0x7ffffffe
mov ecx, 6
call fcn.14004d684
int3