Function at 0x1400618f0
Capabilities:
Check for time delay via gettickcount
Check os version
Enumerate processes
Get process image filename

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa670]
mov eax, 0xa770
call fcn.1400dc350
sub rsp, rax
mov qword [rbp + 0x28], 0xfffffffffffffffe
mov qword [rsp + 0xa7a8], rbx
mov qword [rsp + 0xa7b0], rsi
mov qword [rsp + 0xa7b8], rdi
mov rax, qword [0x1401d5e90]
xor rax, rsp
mov qword [rbp + 0xa660], rax
mov r12, rcx
mov qword [rsp + 0x60], rcx
xor r15d, r15d
mov word [rbp + 0xb30], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0xb32]
call fcn.1400dc6e0
mov qword [r12 + 0x1d0], r15
mov eax, dword [0x1401ddd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 5
jne 0x140061a1c
mov word [rbp + 0xd40], r15w
xor edx, edx
mov r8d, 0x991e
lea rcx, [rbp + 0xd42]
call fcn.1400dc6e0
mov r10d, r15d
mov r9d, r15d
nop dword [rax + rax]
mov r8, r15
test r10, r10
je 0x1400619f0
test r8, r8
je 0x1400619f0
lea rdx, [r9 + r8]
lea rax, [r9 + r8]
movzx ecx, word [rbp + rax*2 + 0xc28]
inc cx
add cx, word [rbp + rdx*2 + 0xd3e]
mov word [rbp + rdx*2 + 0xd40], cx
inc r8
cmp r8, 0x8c
jl 0x1400619c3
inc r10
add r9, 0x8c
cmp r9, 0x4c90
jl 0x1400619c0
movsx eax, word [rbp + 0xa65e]
mov dword [0x1401ddd80], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x70], r15d
or r13, 0xffffffffffffffff
lea ebx, [r13 + 0x66]
lea edi, [rbx - 0x64]
mov r8d, dword [0x1401ddd80]
jmp 0x140061a45
mov esi, dword [rsp + 0x58]
cmp byte [r12 + 0x119], 0
je 0x140061a78
mov ebx, dword [r12 + 0x1e0]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, ebx
jb 0x140061a6c
test ebx, ebx
jne 0x140062d89
mov r8d, dword [0x1401ddd80]
mov ebx, 0x65
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 9
jne 0x140061aa5
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14006325c
xor edx, edx
mov r8d, 0x238
lea rcx, [rbp + 0x60]
call fcn.1400dc6e0
mov dword [rbp + 0x60], 0x238
mov esi, r15d
lea rdx, [rbp + 0x60]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x14006318e
nop dword [rax]
mov eax, 0x63
mov word [rbp + 0xb10], ax
mov dword [rbp + 0xb14], 0x6f0072
mov eax, 0x6d
mov word [rbp + 0xb18], ax
mov eax, 0x2e
mov word [rbp + 0xb1c], ax
mov word [rbp + 0xb24], r15w
mov qword [rbp + 0x2b0], r15
mov qword [rbp + 0x2b8], r15
mov qword [rbp + 0x2b8], 7
mov qword [rbp + 0x2b0], r15
mov word [rbp + 0x2a0], r15w
cmp word [rbp + 0x8c], 0
jne 0x140061b5d
mov r8, r15
jmp 0x140061b7b
lea rax, [rbp + 0x8c]
mov r8, r13
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140061b70
lea rdx, [rbp + 0x8c]
lea rcx, [rbp + 0x2a0]
call fcn.140066ba0
nop
mov word [rbp + 0xb22], bx
mov word [rbp + 0xb1e], bx
mov word [rbp + 0xb1a], bx
mov eax, 0x68
mov word [rbp + 0xb12], ax
mov r10d, dword [0x1401ddd80]
lea ecx, [r10 + 1]
imul ecx, r10d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 8
jne 0x140061c05
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 6
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
lea r10d, [r8 + 1]
mov dword [0x1401ddd80], r10d
mov eax, 0x78
mov word [rbp + 0xb20], ax
lea rax, [rbp + 0xb10]
mov rdx, r13
nop dword [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140061c20
lea rcx, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 8
cmovae rcx, qword [rbp + 0x2a0]
mov r9, rdx
mov r11, qword [rbp + 0x2b0]
cmp r11, rdx
cmovb r9, r11
test r9, r9
je 0x140061c84
lea r8, [rbp + 0xb10]
nop
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x140061c78
add rcx, 2
add r8, 2
dec r9
jne 0x140061c60
jmp 0x140061c84
mov r9d, edi
cmp word [rcx], ax
cmovb r9d, r13d
jmp 0x140061c87
mov r9d, r15d
movsxd rax, r9d
test r9d, r9d
jne 0x140061c9a
cmp r11, rdx
jb 0x140061ca2
mov eax, r15d
setne al
test eax, eax
je 0x140061d38
lea ecx, [r10 + 1]
imul ecx, r10d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 8
jne 0x140061cee
mov ecx, 4
call fcn.1400d7a58
mov rbx, rax
call fcn.1400d7b94
mov dword [rbx], eax
mov dword [0x1401ddd80], eax
mov rcx, rbx
call fcn.1400d7280
mov ebx, 0x65
cmp qword [rbp + 0x2b8], 8
jb 0x140061d04
mov rcx, qword [rbp + 0x2a0]
call fcn.1400d7280
mov qword [rbp + 0x2b8], 7
mov qword [rbp + 0x2b0], r15
mov word [rbp + 0x2a0], r15w
lea rdx, [rbp + 0x60]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
je 0x1400622ef
jmp 0x140061af0
cmp dword [r12 + 0x2d0], 1
jne 0x140061d4f
mov dword [r12 + 0x2d0], 2
mov esi, dword [rbp + 0x80]
lea ecx, [r10 + 2]
lea eax, [r10 + 1]
imul ecx, eax
imul ecx, r10d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, 7
jne 0x140061d8b
dec r10d
mov dword [0x1401ddd80], r10d
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [r12 + 0x1d0], rax
test rax, rax
je 0x140062050
test esi, esi
je 0x140062050
mov r8d, 0x104
lea rdx, [rbp + 0xb30]
mov rcx, rax
call qword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x140062e08
cmp word [rbp + 0xb30], 0
jne 0x140061de1
mov r8, r15
jmp 0x140061dfb
lea rax, [rbp + 0xb30]
mov r8, r13
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140061df0
lea rdx, [rbp + 0xb30]
lea rcx, [rbp + 0x2a0]
call fcn.140066ba0
mov ecx, dword [0x1401ddd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 5
jne 0x140061e62
lea ecx, [r8 - 1]
call fcn.1400d7a58
mov rbx, rax
call fcn.1400d7b94
mov dword [rbx], eax
mov dword [0x1401ddd80], eax
mov rcx, rbx
call fcn.1400d7280
mov r8, qword [rbp + 0x2b0]
add r8, 0xfffffffffffffff6
mov r9, r13
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x2a0]
call fcn.140066640
mov rcx, rax
lea rax, [rbp + 0xb10]
mov rdx, r13
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140061e90
mov r10, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x140061ea8
mov rcx, qword [rcx]
mov r9, rdx
cmp r10, rdx
cmovb r9, r10
test r9, r9
je 0x140061ee4
lea r8, [rbp + 0xb10]
nop
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x140061ed8
add rcx, 2
add r8, 2
dec r9
jne 0x140061ec0
jmp 0x140061ee4
mov r9d, edi
cmp word [rcx], ax
cmovb r9d, r13d
jmp 0x140061ee7
mov r9d, r15d
movsxd rax, r9d
test r9d, r9d
jne 0x140061f02
cmp r10, rdx
jae 0x140061ef9
mov eax, r13d
jmp 0x140061f02
mov eax, r15d
cmp r10, rdx
setne al
test eax, eax
setne bl
cmp qword [rbp + 0x338], 8
jb 0x140061f1d
mov rcx, qword [rbp + 0x320]
call fcn.1400d7280
mov qword [rbp + 0x338], 7
mov qword [rbp + 0x330], r15
mov word [rbp + 0x320], r15w
test bl, bl
je 0x140062031
mov rcx, qword [r12 + 0x1d0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp + 0x68]
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
sub ecx, eax
cmp ecx, 4
jne 0x140061ff2
test r8d, r8d
je 0x140061ff2
nop
mov eax, r8d
and eax, 0x80000001
jge 0x140061f91
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x140061fa8
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401ddd80], eax
jmp 0x140061fb7
lea r8d, [r8*2 + 1]
mov dword [0x1401ddd80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x140061fdb
sub ecx, 2
je 0x140061fdf
dec ecx
je 0x140061fe2
jmp 0x140061fed
add r8d, 2
inc r8d
add r8d, 2
mov dword [0x1401ddd80], r8d
test r8d, r8d
jne 0x140061f80
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [r12 + 0x1d0], rax
test rax, rax
je 0x140062dcc
mov r8d, 0x104
lea rdx, [rbp + 0xb30]
mov rcx, rax
call qword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x140062d90
cmp qword [rbp + 0x2b8], 8
jb 0x1400622d5
mov rcx, qword [rbp + 0x2a0]
call fcn.1400d7280
jmp 0x1400622d5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov ecx, dword [0x1401ddd80]
mov r8d, ecx
imul r8d, ecx
imul r8d, ecx
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 0x11
jne 0x1400621b3
mov rbx, r15
nop
call fcn.1400d7b94
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rbp + rbx*8 + 0x560], xmm0
inc rbx
cmp rbx, 0xb5
jb 0x140062090
mov r8, r15
mov r9d, 0xb4
lea r10d, [r9 + 1]
nop
mov ecx, 0xb4
cmp r8, rcx
jge 0x1400621a4
cmp r9, 4
jl 0x14006216d
lea rax, [rbp + 0xaf0]
mov edx, 0xb0
sub rdx, r8
shr rdx, 2
inc rdx
mov ecx, 0x2d
sub rcx, rdx
shl rcx, 2
nop word [rax + rax]
movsd xmm0, qword [rax + 0x10]
movsd xmm1, qword [rax + 8]
comisd xmm0, xmm1
jbe 0x14006211a
movsd qword [rax + 0x10], xmm1
movsd qword [rax + 8], xmm0
movsd xmm0, qword [rax + 8]
movsd xmm1, qword [rax]
comisd xmm0, xmm1
jbe 0x140062132
movsd qword [rax + 8], xmm1
movsd qword [rax], xmm0
movsd xmm0, qword [rax]
movsd xmm1, qword [rax - 8]
comisd xmm0, xmm1
jbe 0x14006214a
movsd qword [rax], xmm1
movsd qword [rax - 8], xmm0
movsd xmm0, qword [rax - 8]
movsd xmm1, qword [rax - 0x10]
comisd xmm0, xmm1
jbe 0x140062164
movsd qword [rax - 8], xmm1
movsd qword [rax - 0x10], xmm0
sub rax, 0x20
dec rdx
jne 0x140062100
cmp rcx, r8
jle 0x1400621a4
movsd xmm0, qword [rbp + rcx*8 + 0x560]
movsd xmm1, qword [rbp + rcx*8 + 0x558]
comisd xmm0, xmm1
jbe 0x14006219c
movsd qword [rbp + rcx*8 + 0x560], xmm1
movsd qword [rbp + rcx*8 + 0x558], xmm0
dec rcx
cmp rcx, r8
jg 0x140062172
inc r8
dec r9
dec r10
jne 0x1400620c0
mov esi, dword [rbp + 0x68]
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [r12 + 0x1d0], rax
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0xb
jne 0x14006228e
mov ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 3
jne 0x140062250
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r8d, dword [0x1401ddd80]
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r13
mov rcx, rax
call fcn.1400d68e8
mov rcx, rax
call fcn.1400d834c
mov rcx, qword [r12 + 0x1d0]
test rcx, rcx
je 0x140062f0c
mov r8d, 0x104
lea rdx, [rbp + 0xb30]
call qword [sym.imp.PSAPI.DLL_GetProcessImageFileNameW]
test eax, eax
je 0x140062e44
cmp qword [rbp + 0x2b8], 8
jb 0x1400622d0
mov rcx, qword [rbp + 0x2a0]
call fcn.1400d7280
mov edi, 1
mov word [rbp + 0x2a0], r15w
mov qword [rbp + 0x2b0], r15
mov qword [rbp + 0x2b8], 7
mov rax, qword [r12 + 0x1d0]
inc rax
test rax, 0xfffffffffffffffe
jne 0x140062310
mov ecx, dword [r12 + 0x1dc]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, dword [0x1401ddd80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 6
jne 0x1400623c2
test r8d, r8d
je 0x1400623c2
nop dword [rax + rax]
mov eax, r8d
and eax, 0x80000001
jge 0x140062361
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x140062378
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401ddd80], eax
jmp 0x140062387
lea r8d, [r8*2 + 1]
mov dword [0x1401ddd80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x1400623ab
sub ecx, 2
je 0x1400623af
dec ecx
je 0x1400623b2
jmp 0x1400623bd
add r8d, 2
inc r8d
add r8d, 2
mov dword [0x1401ddd80], r8d
test r8d, r8d
jne 0x140062350
mov rax, qword [r12 + 0x1d0]
dec rax
cmp rax, 0xfffffffffffffffd
mov ebx, 0x65
ja 0x140061a41
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
mov r12d, r15d
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
call qword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x140062518
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x140062451
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.140002860
mov rbx, qword [rsp + 0x50]
cmp dword [rbx - 0xc], 0x104
jl 0x14006300c
mov dword [rbx - 0x10], 0x104
mov word [rbx + 0x208], r15w
mov r9d, 0x104
mov r8, rbx
xor edx, edx
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 0x1d0]
call qword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x48], rax
lea rcx, [rbx - 0x18]
call fcn.1400028c0
add rax, 0x18
mov qword [rbp - 0x40], rax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x28]
call fcn.140054470
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x14006250f
cmp dword [rdi + 0x10], 0
jl 0x140062500
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x140062500
call fcn.1400028c0
mov rbx, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x1400624f5
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x14006250f
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140002770
nop
mov rdx, qword [rbp - 0x28]
jmp 0x1400627b3
lea rax, [rsp + 0x78]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rcx, [rbp + 0xb30]
lea rax, [rbp + 0xb30]
test rax, 0xffffffffffff0000
jne 0x140062573
movzx ebx, cx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006259f
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140002a60
jmp 0x14006259f
lea rcx, [rbp + 0xb30]
mov rax, r13
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140062580
mov r8d, eax
lea rdx, [rbp + 0xb30]
lea rcx, [rsp + 0x78]
call fcn.140002770
nop
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x18]
call fcn.140054470
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x140062602
cmp dword [rdi + 0x10], 0
jl 0x1400625f3
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400625f3
call fcn.1400028c0
mov rbx, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x1400625e8
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x140062602
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140002770
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006261a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xd
jne 0x140062675
mov ecx, 1
cmp r8d, ecx
jle 0x14006266f
nop word [rax + rax]
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, r8d
jl 0x140062660
mov dword [0x1401ddd80], ecx
call fcn.14005a850
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x140063183
mov rdi, qword [rsp + 0x40]
mov rcx, rdi
sub rdx, rdi
nop dword [rax]
movzx eax, word [rcx]
cmp ax, word [rcx + rdx]
jne 0x1400626b7
add rcx, 2
test ax, ax
jne 0x1400626a0
mov eax, r15d
jmp 0x1400626bc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400627d5
mov rbx, qword [rsp + 0x50]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x1400626f1
mov edx, 0x104
lea rcx, [rsp + 0x50]
call fcn.140002860
mov rbx, qword [rsp + 0x50]
cmp dword [rbx - 0xc], 0x104
jl 0x140063017
mov dword [rbx - 0x10], 0x104
mov word [rbx + 0x208], r15w
mov r9d, 0x104
mov r8, rbx
xor edx, edx
mov rcx, qword [rsp + 0x60]
mov rcx, qword [rcx + 0x1d0]
call qword [sym.imp.PSAPI.DLL_GetModuleFileNameExW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x48], rax
lea rcx, [rbx - 0x18]
call fcn.1400028c0
add rax, 0x18
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 8]
call fcn.140054470
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x1400627af
cmp dword [rdi + 0x10], 0
jl 0x1400627a0
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400627a0
call fcn.1400028c0
mov rbx, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x140062795
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x1400627af
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140002770
nop
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400627c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdi, qword [rsp + 0x40]
mov r14d, eax
cmp dword [rdi - 0x10], 0
je 0x140062824
call fcn.14005a850
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x140063022
mov rcx, rdi
sub rdx, rdi
nop word [rax + rax]
movzx eax, word [rcx]
cmp ax, word [rcx + rdx]
jne 0x140062817
add rcx, 2
test ax, ax
jne 0x140062800
mov eax, r15d
jmp 0x14006281c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14006302d
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 3
jne 0x14006287d
mov r9d, r15d
test r8d, r8d
je 0x140062876
nop dword [rax + rax]
mov ecx, r8d
and ecx, 1
add r9d, ecx
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
jne 0x140062860
mov dword [0x1401ddd80], r9d
mov ebx, r15d
cmp r14d, 0x714
jne 0x140062910
lea rcx, [rbp - 0x20]
call fcn.140055160
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x1400628eb
cmp dword [rdi + 0x10], 0
jl 0x1400628dc
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400628dc
call fcn.1400028c0
mov rbx, rax
lock add dword [rdi + 0x10], 0xffffffff
jg 0x1400628d1
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rbx + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x1400628eb
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140002770
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140062903
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0
je 0x140062959
call fcn.14005a850
mov rdx, rax
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x14006313c
mov rcx, rdi
sub rdx, rdi
movzx eax, word [rcx]
cmp ax, word [rcx + rdx]
jne 0x14006294c
add rcx, 2
test ax, ax
jne 0x140062935
mov eax, r15d
jmp 0x140062951
sbb eax, eax
or eax, 1
test eax, eax
jne 0x14006302d
mov rax, qword [rsp + 0x60]
mov qword [rax + 0x1d0], r15
mov edx, ebx
lea rcx, [rbp + 0x3c0]
call fcn.140058640
mov rsi, rax
mov edx, r14d
lea rcx, [rbp + 0x380]
call fcn.140058640
mov rdi, rax
mov edx, r12d
lea rcx, [rbp + 0x2e0]
call fcn.140058640
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x340]
call fcn.140058640
nop
lea r8, [0x1401649dc]
mov rdx, rax
lea rcx, [rbp + 0x300]
call fcn.140038240
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call fcn.140067240
nop
lea r8, [0x140164914]
mov rdx, rax
lea rcx, [rbp + 0x360]
call fcn.140038240
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x3a0]
call fcn.140067240
nop
lea r8, [0x1401648ec]
mov rdx, rax
lea rcx, [rbp + 0x400]
call fcn.140038240
nop
mov r8, rsi
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.140067240
nop
cmp qword [rbp + 0x418], 0x10
jb 0x140062a43
mov rcx, qword [rbp + 0x400]
call fcn.1400d7280
mov qword [rbp + 0x418], 0xf
mov qword [rbp + 0x410], r15
mov byte [rbp + 0x400], 0
cmp qword [rbp + 0x3b8], 0x10
jb 0x140062a72
mov rcx, qword [rbp + 0x3a0]
call fcn.1400d7280
mov qword [rbp + 0x3b8], 0xf
mov qword [rbp + 0x3b0], r15
mov byte [rbp + 0x3a0], 0
cmp qword [rbp + 0x378], 0x10
jb 0x140062aa1
mov rcx, qword [rbp + 0x360]
call fcn.1400d7280
mov qword [rbp + 0x378], 0xf
mov qword [rbp + 0x370], r15
mov byte [rbp + 0x360], 0
cmp qword [rbp + 0x3f8], 0x10
jb 0x140062ad0
mov rcx, qword [rbp + 0x3e0]
call fcn.1400d7280
mov qword [rbp + 0x3f8], 0xf
mov qword [rbp + 0x3f0], r15
mov byte [rbp + 0x3e0], 0
cmp qword [rbp + 0x318], 0x10
jb 0x140062aff
mov rcx, qword [rbp + 0x300]
call fcn.1400d7280
mov qword [rbp + 0x318], 0xf
mov qword [rbp + 0x310], r15
mov byte [rbp + 0x300], 0
cmp qword [rbp + 0x358], 0x10
jb 0x140062b2e
mov rcx, qword [rbp + 0x340]
call fcn.1400d7280
mov qword [rbp + 0x358], 0xf
mov qword [rbp + 0x350], r15
mov byte [rbp + 0x340], 0
cmp qword [rbp + 0x2f8], 0x10
jb 0x140062b5d
mov rcx, qword [rbp + 0x2e0]
call fcn.1400d7280
mov qword [rbp + 0x2f8], 0xf
mov qword [rbp + 0x2f0], r15
mov byte [rbp + 0x2e0], 0
cmp qword [rbp + 0x398], 0x10
jb 0x140062b8c
mov rcx, qword [rbp + 0x380]
call fcn.1400d7280
mov qword [rbp + 0x398], 0xf
mov qword [rbp + 0x390], r15
mov byte [rbp + 0x380], 0
cmp qword [rbp + 0x3d8], 0x10
jb 0x140062bbb
mov rcx, qword [rbp + 0x3c0]
call fcn.1400d7280
mov qword [rbp + 0x3d8], 0xf
mov qword [rbp + 0x3d0], r15
mov byte [rbp + 0x3c0], 0
mov ebx, dword [rsp + 0x70]
mov eax, ebx
inc ebx
mov dword [rsp + 0x70], ebx
cmp eax, 5
jge 0x140063147
mov r8d, dword [0x1401ddd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 0xa
jne 0x140062c53
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r13
mov rcx, rax
call fcn.1400d68e8
mov rcx, rax
call fcn.1400d834c
lea rdx, [rbp + 0x2c0]
cmp qword [rbp + 0x2d8], 0x10
cmovae rdx, qword [rbp + 0x2c0]
lea rcx, [rbp - 0x38]
call fcn.140003890
nop
call fcn.14005dbf0
mov rdx, rax
lea rcx, [rbp]
call fcn.1400025b0
nop
lea r8, [rbp - 0x38]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.1400109e0
nop
mov r12, qword [rsp + 0x60]
lea rcx, [r12 + 0x1b8]
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
call fcn.1400114a0
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140062cca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140062ce3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140062cfb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [r12 + 0x1dc]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
cmp qword [rbp + 0x2d8], 0x10
jb 0x140062d27
mov rcx, qword [rbp + 0x2c0]
call fcn.1400d7280
mov qword [rbp + 0x2d8], 0xf
mov qword [rbp + 0x2d0], r15
mov byte [rbp + 0x2c0], 0
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140062d5a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jle 0x140062d7e
mov r8d, dword [0x1401ddd80]
mov edi, 1
lea ebx, [rdi + 0x64]
jmp 0x140061a41
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140062d6a
mov eax, edi
jmp 0x140063320
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x520]
call fcn.140058640
mov rbx, rax
call fcn.14005d980
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x50]
call fcn.14005eca0
lea rdx, [0x1401a0190]
lea rcx, [rbp + 0x50]
call fcn.1400df178
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x460]
call fcn.140058640
mov rbx, rax
call fcn.14005e8b0
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x30]
call fcn.14005eca0
lea rdx, [0x1401a0190]
lea rcx, [rbp + 0x30]
call fcn.1400df178
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x420]
call fcn.140058640
mov r10, rax
call fcn.14005e610
mov rdx, rax
mov r8, r10
lea rcx, [rbp + 0x40]
call fcn.14005eca0
lea rdx, [0x1401a0190]
lea rcx, [rbp + 0x40]
call fcn.1400df178
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x4a0]
call fcn.140058640
mov rdi, rax
call fcn.14005c2c0
mov rbx, rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rdx, qword [0x1401d59a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
test rbx, rbx
je 0x140062ebe
nop dword [rax]
inc r13
cmp word [rbx + r13*2], 0
jne 0x140062eb0
mov r15d, r13d
mov r8d, r15d
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.140002770
cmp qword [rdi + 0x18], 0x10
jb 0x140062ed7
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.140003a70
lea r8, [0x140169918]
lea rdx, [0x140169914]
lea rcx, [rbp - 0x70]
call fcn.140010530
nop
lea rdx, [0x1401a0190]
lea rcx, [rbp - 0x70]
call fcn.1400df178
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x540]
call fcn.140058640
mov rbx, rax
mov edx, edi
lea rcx, [rbp + 0x4e0]
call fcn.140058640
nop
lea r8, [0x1401648d4]
mov rdx, rax
lea rcx, [rbp + 0x500]
call fcn.140038240
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x440]
call fcn.140067240
mov rdi, rax
call fcn.14005d350
mov rbx, rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rdx, qword [0x1401d59a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
test rbx, rbx
je 0x140062fbe
nop
inc r13
cmp word [rbx + r13*2], 0
jne 0x140062fb0
mov r15d, r13d
mov r8d, r15d
mov rdx, rbx
lea rcx, [rbp - 0x50]
call fcn.140002770
cmp qword [rdi + 0x18], 0x10
jb 0x140062fd7
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.140003a70
lea r8, [0x140169918]
lea rdx, [0x140169914]
lea rcx, [rbp - 0x50]
call fcn.140010530
nop
lea rdx, [0x1401a0190]
lea rcx, [rbp - 0x50]
call fcn.1400df178
nop
mov ecx, 0x80070057
call fcn.140001920
int3
mov ecx, 0x80070057
call fcn.140001920
int3
mov ecx, 0x80004005
call fcn.140001920
int3
mov rcx, r15
lea rdx, str.0.0.0.0
nop word [rax + rax]
movzx eax, word [rdi + rcx*2]
inc rcx
cmp ax, word [rdx + rcx*2 - 2]
jne 0x140063059
cmp rcx, 8
jne 0x140063040
mov eax, r15d
jmp 0x14006305e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400630eb
mov rax, qword [rsp + 0x60]
mov qword [rax + 0x1d0], r15
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x68]
call fcn.14001bfc0
nop
mov dl, 0x5c
lea rcx, [rsp + 0x68]
call fcn.140066510
mov dl, 0x20
lea rcx, [rsp + 0x68]
call fcn.140066510
mov dl, 0x2f
lea rcx, [rsp + 0x68]
call fcn.140066510
mov rax, qword [rsp + 0x68]
mov ecx, 1
sub ecx, dword [rax - 8]
or ecx, dword [rax - 0xc]
jge 0x1400630c4
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.14001caa0
call fcn.14005d7a0
mov rdx, rax
mov r8, qword [rsp + 0x68]
lea rcx, [rbp + 0x18]
call fcn.14005ebe0
lea rdx, [0x1401a0190]
lea rcx, [rbp + 0x18]
call fcn.1400df178
nop
mov rbx, qword [rsp + 0x60]
lea rcx, [rbx + 0x188]
lea rdx, [rsp + 0x40]
call fcn.1400026d0
mov dword [rbx + 0x1c8], esi
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006311c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140063135
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
jmp 0x140063320
mov ecx, 0x80004005
call fcn.140001920
nop
lea r10, [rbp + 0x2c0]
cmp qword [rbp + 0x2d8], 0x10
cmovae r10, qword [rbp + 0x2c0]
call fcn.14005d210
mov rdx, rax
mov r8, r10
lea rcx, [rbp + 8]
call fcn.14005ebe0
lea rdx, [0x1401a0190]
lea rcx, [rbp + 8]
call fcn.1400df178
nop
mov ecx, 0x80004005
call fcn.140001920
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x480]
call fcn.140058640
mov rdi, rax
call fcn.14005cfc0
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rdx, qword [0x1401d59a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
test rbx, rbx
je 0x14006320e
nop word [rax + rax]
inc r13
cmp word [rbx + r13*2], 0
jne 0x140063200
mov r15d, r13d
mov r8d, r15d
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140002770
cmp qword [rdi + 0x18], 0x10
jb 0x140063227
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x58]
call fcn.140003a70
lea r8, [0x140169918]
lea rdx, [0x140169914]
lea rcx, [rbp - 0x60]
call fcn.140010530
nop
lea rdx, [0x1401a0190]
lea rcx, [rbp - 0x60]
call fcn.1400df178
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp + 0x4c0]
call fcn.140058640
mov rdi, rax
call fcn.14005d4c0
mov rbx, rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rdx, qword [0x1401d59a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x48], rax
lea rcx, [0x1401d59a8]
mov rax, qword [0x1401d59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
test rbx, rbx
je 0x1400632d2
inc r13
cmp word [rbx + r13*2], 0
jne 0x1400632c4
mov r15d, r13d
mov r8d, r15d
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140002770
cmp qword [rdi + 0x18], 0x10
jb 0x1400632eb
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.140003a70
lea r8, [0x140169918]
lea rdx, [0x140169914]
lea rcx, [rbp - 0x80]
call fcn.140010530
nop
lea rdx, [0x1401a0190]
lea rcx, [rbp - 0x80]
call fcn.1400df178
nop
mov rcx, qword [rbp + 0xa660]
xor rcx, rsp
call fcn.1400d72a0
lea r11, [rsp + 0xa770]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret