Function at 0x140009390
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 8], rcx
push rbp
push r14
push r15
sub rsp, 0x60
movzx r15d, byte [0x140106d02]
or r15b, byte [0x140106b57]
mov r14, qword [0x140106cf0]
mov byte [rsp + 0x98], r15b
movsxd rbp, edx
mov qword [rsp + 0x80], r14
jne 0x1400093e0
xor edx, edx
xor ecx, ecx
add rsp, 0x60
pop r15
pop r14
pop rbp
jmp fcn.14000a270
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rdi
mov rdi, qword [0x140106c90]
test rdi, rdi
jne 0x140009575
mov ecx, 0x1800
call fcn.1400a76d4
mov qword [0x140106c90], rax
test rax, rax
je 0x14000956b
mov ecx, 0x3000
call fcn.1400a76d4
mov qword [0x140106c88], rax
test rax, rax
je 0x14000956b
mov ecx, 0x20000
call fcn.1400a76d4
mov qword [0x140106ca8], rax
test rax, rax
je 0x14000956b
mov ecx, 0x40000
call fcn.1400a76d4
mov qword [0x140106ca0], rax
test rax, rax
je 0x14000956b
movsxd rcx, dword [0x140106cec]
add rcx, rcx
call fcn.1400ab568
mov qword [0x140106c98], rax
mov rbx, rax
test rax, rax
je 0x14000956b
mov rdi, qword [0x140106c90]
xor edx, edx
mov rcx, rdi
mov r8d, 0x1800
call fcn.1400a9f50
mov rsi, qword [0x140106c88]
xor edx, edx
mov rcx, rsi
mov r8d, 0x3000
call fcn.1400a9f50
mov byte [rdi + 0x1a4], 3
lea rax, [0x140101a6c]
mov byte [rdi + 0xf3c], 1
mov byte [rdi + 0xf54], 2
mov byte [rdi + 0x1bc], reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov byte [rdi + 0xf6c], 4
mov byte [rdi + 0xf84], 8
mov byte [rdi + 0x18c], gethostbyname
mov byte [rdi + 0xf0c], 0x10
mov byte [rdi + 0xf24], 0x20
mov byte [rdi + 0x894], 0x40
mov byte [rdi + 0x8ac], 0x80
mov byte [rsi + 0x2c4], 1
mov byte [rsi + 0x1ac4], 2
mov byte [rsi + 0x54c], 4
mov byte [rsi + 0x1d4c], 8
mov byte [rsi + 0x3fc], 0x10
mov byte [rsi + 0x1d1c], 0x20
mov byte [rsi + 0x2094], 0x40
mov byte [rsi + 0x20ac], 0x80
mov qword [rdi + 0xd98], rax
lea rax, [0x14010230c]
mov qword [rdi + 0x1e0], rax
lea rax, [0x140103318]
mov qword [rdi + 0xd80], rax
jmp 0x140009583
call fcn.14000a9a0
jmp 0x14000a098
mov rsi, qword [0x140106c88]
mov rbx, qword [0x140106c98]
mov qword [rsp + 0x48], r12
lea rax, [rdi + 0xd]
mov qword [rsp + 0x40], r13
mov r12d, 0x7fff
mov ecx, 0x100
nop dword [rax]
and byte [rax + 3], 8
mov word [rax - 3], r12w
mov word [rax], 0
mov byte [rax + 2], 0
mov byte [rax + 0xa], 0
lea rax, [rax + 0x18]
sub rcx, 1
jne 0x1400095a0
lea rax, [rsi + 0xd]
mov ecx, 0x200
nop dword [rax]
and byte [rax + 3], 8
mov word [rax - 3], r12w
mov word [rax], 0
mov byte [rax + 2], 0
mov byte [rax + 0xa], 0
lea rax, [rax + 0x18]
sub rcx, 1
jne 0x1400095d0
lea rdx, [0x140101a78]
mov r8d, 0x1fe
lea edi, [rcx + 0xd]
movzx ecx, word [rdx]
lea eax, [rcx - 1]
cmp ax, r8w
ja 0x140009618
movzx eax, cx
lea rcx, [rax + rax*2]
mov byte [rsi + rcx*8 + 0x17], 1
add rdx, 0x10
sub rdi, 1
jne 0x140009600
mov rdi, qword [0x140106ca8]
mov ecx, 0x10000
movzx eax, r12w
rep stosw word [rdi], ax
mov rdi, qword [0x140106ca0]
mov ecx, 0x20000
movzx eax, r12w
rep stosw word [rdi], ax
xor eax, eax
cmp dword [0x140106cec], eax
jle 0x140009672
nop dword [rax]
nop word [rax + rax]
mov word [rbx], r12w
lea rbx, [rbx + 2]
inc eax
cmp eax, dword [0x140106cec]
jl 0x140009660
movzx ecx, word [0x140106d00]
mov eax, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1400a76d4
mov qword [rsp + 0x20], rax
xor r13d, r13d
mov rax, rbp
mov qword [rsp + 0x28], rax
test ebp, ebp
jle 0x140009ef5
mov r15, qword [rsp + 0x20]
xor r12d, r12d
mov rbx, qword [0x140106c90]
add r15, 6
mov rsi, qword [0x140106c88]
mov ecx, 0x1ff
mov r8d, 0x8000
mov rdi, qword [r14 + r12*8]
movzx eax, byte [rdi + 0x12]
dec al
cmp al, 2
ja 0x140009947
cmp byte [0x140106afd], 0
je 0x140009745
cmp word [rdi + 6], 0
jne 0x140009947
mov rbp, qword [rdi + 0x28]
test rbp, rbp
je 0x140009947
mov rcx, rbp
call fcn.140086180
test al, al
jne 0x14000972c
mov rbp, qword [rbp + 0x10]
test rbp, rbp
jne 0x140009704
mov rbx, qword [0x140106c90]
mov rsi, qword [0x140106c88]
jmp 0x140009947
mov rbx, qword [0x140106c90]
mov ecx, 0x1ff
mov rsi, qword [0x140106c88]
mov r8d, 0x8000
cmp word [rdi + 6], 0
je 0x140009793
cmp byte [rdi + 0x19], 0
sete al
test al, al
jne 0x140009947
movzx edx, byte [rdi + 0x10]
test dl, dl
jne 0x14000976e
cmp word [rdi + 8], 0
je 0x140009947
movzx eax, word [rdi + 8]
cmp ax, cx
ja 0x140009947
test dl, dl
jne 0x1400097b4
movzx eax, ax
lea rcx, [rax + rax*2]
lea rbp, [rsi + rcx*8]
mov byte [rbp + 0x17], 1
jmp 0x140009893
mov rax, qword [rdi + 0x28]
test rax, rax
je 0x140009947
cmp byte [rax + 0x28], 0
jne 0x14000975b
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400097a0
jmp 0x140009947
movzx eax, dl
lea rcx, [rax + rax*2]
lea rbp, [rbx + rcx*8]
movzx ecx, dl
sub ecx, 0x10
je 0x140009855
sub ecx, 1
je 0x140009815
cmp ecx, 1
jne 0x140009893
mov byte [rbx + 0xf6e], cl
mov byte [rbx + 0xf86], cl
mov byte [rsi + 0x54e], cl
mov byte [rsi + 0x1d4e], cl
cmp byte [rdi + 0x16], 0
je 0x140009893
mov byte [rbx + 0xf6f], cl
mov byte [rbx + 0xf87], cl
mov byte [rsi + 0x54f], cl
mov byte [rsi + 0x1d4f], cl
jmp 0x140009893
mov byte [rbx + 0xf3e], 1
mov byte [rbx + 0xf56], 1
mov byte [rsi + 0x2c6], 1
mov byte [rsi + 0x1ac6], 1
cmp byte [rdi + 0x16], 0
je 0x140009893
mov byte [rbx + 0xf3f], 1
mov byte [rbx + 0xf57], 1
mov byte [rsi + 0x2c7], 1
mov byte [rsi + 0x1ac7], 1
jmp 0x140009893
mov byte [rbx + 0xf0e], 1
mov byte [rbx + 0xf26], 1
mov byte [rsi + 0x3fe], 1
mov byte [rsi + 0x1d1e], 1
cmp byte [rdi + 0x16], 0
je 0x140009893
mov byte [rbx + 0xf0f], 1
mov byte [rbx + 0xf27], 1
mov byte [rsi + 0x3ff], 1
mov byte [rsi + 0x1d1f], 1
mov byte [rbp + 0xe], 1
cmp byte [rdi + 0x16], 0
movzx r14d, word [rdi + 4]
je 0x1400098aa
mov byte [rbp + 0xf], 1
or r14w, r8w
movzx edx, byte [rdi + 0x11]
test dl, dl
jne 0x1400098bd
cmp word [rdi + 0xa], 0
jne 0x1400098bd
xor al, al
jmp 0x1400098bf
mov al, 1
cmp byte [rbp + 0xc], 0
je 0x140009a0c
cmp byte [rdi + 0xf], 0
jne 0x140009a0c
test al, al
jne 0x140009a14
test byte [rdi + 0x13], 2
jne 0x1400098f1
movzx edx, word [rdi + 8]
xor r8d, r8d
movzx ecx, byte [rdi + 0x10]
call fcn.140009190
cmp byte [rdi + 0xf], 0
jne 0x140009901
test byte [rdi + 0x13], 2
je 0x140009901
or byte [rbp + 0x10], 1
movzx eax, word [rdi + 6]
test ax, ax
cmovne r14w, ax
inc r13d
mov word [r15 + 4], r14w
movzx eax, byte [rdi + 0x10]
mov byte [r15], al
movzx eax, word [rdi + 8]
mov word [r15 + 2], ax
mov eax, dword [rdi]
mov dword [r15 - 6], eax
movzx eax, byte [rdi + 0xe]
mov byte [r15 - 2], al
movzx eax, byte [rdi + 0x15]
mov byte [r15 - 1], al
add r15, 0xc
mov r14, qword [rsp + 0x80]
inc r12
mov ecx, 0x1ff
mov r8d, 0x8000
cmp r12, qword [rsp + 0x28]
jl 0x1400096d1
test r13d, r13d
je 0x140009ee6
mov rbx, qword [rsp + 0x20]
lea r9, [0x140008fa0]
movsxd rdi, r13d
mov rcx, rbx
mov rdx, rdi
mov qword [rsp + 0x28], rdi
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
call fcn.1400adc70
test r13d, r13d
jle 0x140009ee6
mov rsi, qword [0x140106ca0]
mov edi, 0x7ff9
mov r14, qword [0x140106ca8]
add rsi, 0x270
mov r9, qword [0x140106c98]
add r14, 0x14a
mov qword [rsp + 0x38], r14
mov rax, rbx
mov qword [rsp + 0x30], rsi
lea edx, [rdi + 6]
nop
movzx ebx, word [rax + 0xa]
movzx r15d, bx
and bx, dx
shr r15w, 0xf
and r15b, 1
cmp bx, di
ja 0x140009bab
movzx ecx, byte [rax + 6]
test cl, cl
je 0x140009b48
movzx ecx, cl
lea rdx, [rcx + rcx*2]
mov rcx, qword [0x140106c90]
jmp 0x140009b57
test al, al
je 0x1400098f1
test dl, dl
je 0x140009aef
movzx eax, dl
lea rcx, [rax + rax*2]
cmp byte [rbx + rcx*8 + 0xc], 0
lea rax, [rbx + rcx*8]
je 0x140009ad6
lea eax, [rdx - 0x10]
cmp al, 2
ja 0x140009ac8
movzx ecx, dl
sub ecx, 0x10
je 0x140009aa3
sub ecx, 1
je 0x140009a7b
cmp ecx, 1
jne 0x140009b33
mov byte [rbx + 0x1bd], 2
mov byte [rbx + 0xf6d], 2
mov byte [rbx + 0xf85], 2
mov byte [rsi + 0x54d], 2
mov byte [rsi + 0x1d4d], 2
jmp 0x140009b33
mov byte [rbx + 0x1a5], 2
mov byte [rbx + 0xf3d], 2
mov byte [rbx + 0xf55], 2
mov byte [rsi + 0x2c5], 2
mov byte [rsi + 0x1ac5], 2
jmp 0x140009b33
mov byte [rbx + 0x18d], 2
mov byte [rbx + 0xf0d], 2
mov byte [rbx + 0xf25], 2
mov byte [rsi + 0x3fd], 2
mov byte [rsi + 0x1d1d], 2
jmp 0x140009b33
movzx eax, dl
lea rcx, [rax + rax*2]
mov byte [rbx + rcx*8 + 0xd], 1
jmp 0x140009b33
mov byte [rax + 0xd], 1
test byte [rdi + 0x13], 1
je 0x140009b33
movzx eax, byte [rdi + 0x11]
lea rcx, [rax + rax*2]
or byte [rbx + rcx*8 + 0x10], 1
jmp 0x140009b33
movzx ecx, word [rdi + 0xa]
lea rax, [rcx + rcx*2]
cmp byte [rsi + rax*8 + 0xc], 0
lea rdx, [rsi + rax*8]
je 0x140009b0f
mov eax, ecx
lea rcx, [rcx + rcx*2]
mov byte [rsi + rcx*8 + 0xd], 1
jmp 0x140009b33
mov byte [rdx + 0xd], 1
test byte [rdi + 0x13], 1
je 0x140009b26
movzx eax, word [rdi + 0xa]
lea rcx, [rax + rax*2]
or byte [rsi + rcx*8 + 0x10], 1
movzx eax, word [rdi + 0xa]
lea rcx, [rax + rax*2]
mov byte [rsi + rcx*8 + 0x17], 1
movzx eax, word [rbp + 0xa]
mov word [rdi + 0xc], ax
movzx eax, word [rdi + 4]
mov word [rbp + 0xa], ax
jmp 0x14000993f
movzx ecx, word [rax + 8]
lea rdx, [rcx + rcx*2]
mov rcx, qword [0x140106c88]
lea rdi, [rcx + rdx*8]
mov r10d, 0x7fff
add rdi, 0xa
cmp word [rdi], r10w
je 0x140009b92
mov r8, qword [rsp + 0x80]
movzx ecx, word [rdi]
mov rdx, qword [r8 + rcx*8]
cmp byte [rdx + 0x11], 0
jne 0x140009b87
cmp word [rdx + 0xa], 0
je 0x140009b92
cmp word [rdx + 0xc], r10w
lea rdi, [rdx + 0xc]
jne 0x140009b73
mov rdx, qword [rsp + 0x80]
movzx ecx, bx
mov rdx, qword [rdx + rcx*8]
movzx ecx, word [rdi]
mov word [rdx + 0xc], cx
mov word [rdi], bx
movzx r10d, byte [rax + 4]
mov r11d, dword [rax]
mov r13d, r11d
test r10b, r10b
je 0x140009bfe
movzx ecx, r10b
and cl, 0xc0
neg cl
movzx ecx, r10b
sbb edx, edx
and edx, 8
mov edi, edx
or edi, 1
and cl, 0xc
movzx ecx, r10b
cmove edi, edx
mov r8d, edi
or r8d, 4
and cl, 0x30
movzx ecx, r10b
cmove r8d, edi
mov edx, r8d
or edx, 2
and cl, 3
cmove edx, r8d
or r13d, edx
cmp byte [rax + 5], 0
je 0x140009c08
xor cl, cl
jmp 0x140009c5f
mov ecx, r11d
mov edi, r11d
and cl, 8
neg cl
sbb cl, cl
and cl, 0xc0
movzx r8d, cl
movzx ecx, r8b
or cl, 0xc
movzx edx, cl
and dil, 1
mov edi, r11d
cmove edx, r8d
movzx r8d, dl
movzx ecx, r8b
or cl, 3
movzx edx, cl
and dil, 2
cmove edx, r8d
movzx edx, dl
movzx ecx, dl
or cl, 0x30
movzx ecx, cl
and r11b, 4
cmove ecx, edx
or cl, r10b
not cl
xor r10d, r10d
movzx r12d, cl
xor ebp, ebp
xor r11d, r11d
nop dword [rax + rax]
test r10d, r12d
jne case.0x140009e12.19
movzx ecx, r10b
and cl, 0xc0
neg cl
movzx ecx, r10b
sbb edx, edx
and edx, 8
mov edi, edx
or edi, 1
and cl, 0xc
movzx ecx, r10b
cmove edi, edx
mov r8d, edi
or r8d, 4
and cl, 0x30
movzx ecx, r10b
cmove r8d, edi
mov edx, r8d
or edx, 2
and cl, 3
cmove edx, r8d
and edx, r13d
cmp r13d, edx
jne case.0x140009e12.19
movzx ecx, byte [rax + 4]
test cl, cl
je 0x140009cdd
movzx edx, cl
mov ecx, edx
and ecx, r10d
cmp edx, ecx
jne case.0x140009e12.19
movzx ecx, byte [rax + 6]
test cl, cl
jne 0x140009d72
movzx ecx, word [rax + 8]
mov rdx, qword [0x140106ca0]
add ecx, ebp
movsxd rcx, ecx
movzx edi, word [rdx + rcx*2]
lea r8, [rdx + rcx*2]
mov edx, 0x7fff
cmp di, dx
jne 0x140009d18
movzx ecx, word [rax + 0xa]
mov word [r8], cx
jmp case.default.0x140009e12
movzx ecx, di
shr cx, 0xf
and cl, 1
test r15b, r15b
je 0x140009d3c
test cl, cl
jne 0x140009d55
movzx ecx, word [rax + 0xa]
and rdi, rdx
mov word [r9 + rdi*2], cx
jmp case.default.0x140009e12
test cl, cl
je 0x140009d55
movzx ecx, bx
mov word [r9 + rcx*2], di
movzx ecx, word [rax + 0xa]
mov word [r8], cx
jmp case.default.0x140009e12
and rdi, rdx
movzx edx, bx
movzx ecx, word [r9 + rdi*2]
mov word [r9 + rdx*2], cx
movzx ecx, word [rax + 0xa]
mov word [r8], cx
jmp case.0x140009e12.19
mov rdx, qword [0x140106ca8]
movzx ecx, cl
add ecx, r11d
movsxd rcx, ecx
movzx edi, word [rdx + rcx*2]
lea r8, [rdx + rcx*2]
mov edx, 0x7fff
cmp di, dx
je 0x140009ddb
movzx ecx, di
shr cx, 0xf
and cl, 1
test r15b, r15b
je 0x140009db8
test cl, cl
jne 0x140009dc6
movzx ecx, word [rax + 0xa]
and rdi, rdx
mov word [r9 + rdi*2], cx
jmp case.default.0x140009e12
test cl, cl
je 0x140009dc6
movzx ecx, bx
mov word [r9 + rcx*2], di
jmp 0x140009ddb
and rdi, rdx
movzx edx, bx
movzx ecx, word [r9 + rdi*2]
mov word [r9 + rdx*2], cx
mov edx, 0x7fff
movzx ecx, word [rax + 0xa]
mov word [r8], cx
movzx ecx, byte [rax + 6]
add ecx, 0xfffffff0
cmp ecx, 0x95
ja case.default.0x140009e12
lea rdi, [0x140000000]
movsxd rcx, ecx
movzx ecx, byte [rdi + rcx + 0xa0d0]
mov edx, dword [rdi + rcx*4 + 0xa0b4]
add rdx, rdi
jmp rdx
movzx ecx, word [rax + 0xa]
mov word [r14 - 2], cx
movzx ecx, word [rax + 0xa]
mov word [rsi - 0x200], cx
cmp byte [rax + 6], 0xa4
je case.0x140009e12.19
movzx ecx, word [rax + 0xa]
mov word [r14], cx
movzx ecx, word [rax + 0xa]
mov word [rsi], cx
jmp case.0x140009e12.19
movzx ecx, word [rax + 0xa]
mov word [r14 - 0xa], cx
movzx ecx, word [rax + 0xa]
mov word [rsi - 0x21c], cx
cmp byte [rax + 6], 0xa0
je case.0x140009e12.19
movzx ecx, word [rax + 0xa]
mov word [r14 - 8], cx
movzx ecx, word [rax + 0xa]
mov word [rsi - 4], cx
jmp case.0x140009e12.19
movzx ecx, word [rax + 0xa]
mov word [r14 - 6], cx
movzx ecx, word [rax + 0xa]
mov word [rsi - 0x236], cx
cmp byte [rax + 6], 0xa2
je case.0x140009e12.19
movzx ecx, word [rax + 0xa]
mov word [r14 - 4], cx
movzx ecx, word [rax + 0xa]
mov word [rsi - 0x36], cx
mov edx, 0x7fff
inc r10d
add r11d, 0x100
add r14, 0x200
add ebp, 0x200
add rsi, 0x400
cmp r11d, 0xff00
jle 0x140009c70
mov rsi, qword [rsp + 0x30]
add rax, 0xc
sub qword [rsp + 0x28], 1
mov edi, 0x7ff9
mov r14, qword [rsp + 0x38]
jne 0x1400099d0
movzx r15d, byte [rsp + 0x98]
mov r12d, 0x7fff
mov rcx, qword [rsp + 0x20]
call fcn.1400a76dc
mov rdx, qword [0x140106c90]
mov r13, qword [rsp + 0x40]
cmp byte [rdx + 0x18e], 0
je 0x140009f88
movzx r8d, word [rdx + 0x18a]
cmp r8w, r12w
je 0x140009f88
lea rax, [rdx + 0xf0a]
movzx ecx, word [rax]
cmp cx, r12w
je 0x140009f54
mov rdi, qword [0x140106cf0]
nop dword [rax]
movzx eax, cx
mov rax, qword [rdi + rax*8]
add rax, 0xc
movzx ecx, word [rax]
cmp cx, r12w
jne 0x140009f40
mov word [rax], r8w
lea rax, [rdx + 0xf22]
movzx ecx, word [rax]
cmp cx, r12w
je 0x140009f84
mov rdi, qword [0x140106cf0]
nop
movzx eax, cx
mov rax, qword [rdi + rax*8]
add rax, 0xc
movzx ecx, word [rax]
cmp cx, r12w
jne 0x140009f70
mov word [rax], r8w
cmp byte [rdx + 0x1a6], 0
je 0x14000a008
movzx r8d, word [rdx + reloc.OLEAUT32.dll_OleCreatePictureIndirect]
cmp r8w, r12w
je 0x14000a008
lea rax, [rdx + 0xf3a]
movzx ecx, word [rax]
cmp cx, r12w
je 0x140009fd4
mov rdi, qword [0x140106cf0]
nop word [rax + rax]
movzx eax, cx
mov rax, qword [rdi + rax*8]
add rax, 0xc
movzx ecx, word [rax]
cmp cx, r12w
jne 0x140009fc0
mov word [rax], r8w
lea rax, [rdx + 0xf52]
movzx ecx, word [rax]
cmp cx, r12w
je 0x14000a004
mov rdi, qword [0x140106cf0]
nop
movzx eax, cx
mov rax, qword [rdi + rax*8]
add rax, 0xc
movzx ecx, word [rax]
cmp cx, r12w
jne 0x140009ff0
mov word [rax], r8w
cmp byte [rdx + 0x1be], 0
je 0x14000a088
movzx r8d, word [rdx + 0x1ba]
cmp r8w, r12w
je 0x14000a088
lea rax, [rdx + 0xf6a]
movzx ecx, word [rax]
cmp cx, r12w
je 0x14000a054
mov rdi, qword [0x140106cf0]
nop word [rax + rax]
movzx eax, cx
mov rax, qword [rdi + rax*8]
add rax, 0xc
movzx ecx, word [rax]
cmp cx, r12w
jne 0x14000a040
mov word [rax], r8w
lea rax, [rdx + 0xf82]
movzx ecx, word [rax]
cmp cx, r12w
je 0x14000a084
mov rdx, qword [0x140106cf0]
nop
movzx eax, cx
mov rax, qword [rdx + rax*8]
add rax, 0xc
movzx ecx, word [rax]
cmp cx, r12w
jne 0x14000a070
mov word [rax], r8w
xor edx, edx
movzx ecx, r15b
call fcn.14000a270
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x50]
add rsp, 0x60
pop r15
pop r14
pop rbp
ret