Function at 0x1400575a0
Capabilities:
Get token membership

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1040]
mov eax, 0x1140
call fcn.1401eeab0
sub rsp, rax
mov rax, qword [0x1402cf910]
xor rax, rsp
mov qword [rbp + 0x1030], rax
mov rdi, rcx
xor r12d, r12d
mov esi, r12d
mov dword [rsp + 0x60], r12d
lea rbx, [rcx + 0x138]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
mov edx, 0x10
lea r9d, [r12 + 0x21]
mov r8d, edx
mov rcx, rbx
call fcn.1400723f8
call fcn.140074f50
call fcn.140074f50
mov edx, 0x89
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov r8, rax
mov r14, 0xffffffffffffffff
mov edx, r14d
mov rcx, qword [rdi + 0x140]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
call fcn.140074f50
call fcn.140074f50
mov edx, 0x8a
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_LoadIconW]
mov r8, rax
mov edx, r14d
mov rcx, qword [rdi + 0x140]
call qword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
test rbx, rbx
mov r9d, r12d
je 0x140057683
mov r9, qword [rbx + 8]
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rdi + 0x1ef0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
call fcn.140072870
mov dword [rdi + 0x1aa8], r12d
mov rax, qword [rdi + 0xd18]
mov qword [rax + 0x128], r12
mov qword [rdi + 0x898], r12
mov ecx, dword [rdi + 0x81a]
mov eax, ecx
xor eax, dword [rdi + 0x818]
mov dword [rdi + 0x858], eax
mov dword [rdi + 0x85c], r12d
mov eax, ecx
xor eax, dword [rdi + 0x81c]
mov dword [rdi + 0x860], eax
mov eax, ecx
xor eax, dword [rdi + 0x81e]
mov dword [rdi + 0x864], eax
mov eax, ecx
xor eax, dword [rdi + 0x820]
mov dword [rdi + 0x868], eax
xor ecx, dword [rdi + 0x822]
mov dword [rdi + 0x86c], ecx
mov ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_AttachConsole]
mov rax, qword [rdi + 0xd18]
cmp byte [rax + 0x1e1eac], sil
je 0x140057789
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
cmp rax, r14
je 0x140057789
mov edx, 8
mov rcx, rax
call fcn.140201460
cmp eax, r14d
je 0x140057789
lea rdx, [0x140290b90]
mov ecx, eax
call fcn.140201dc0
mov rbx, rax
mov ecx, 1
call fcn.140201684
mov rcx, qword [rbx]
mov qword [rax], rcx
mov ecx, 1
call fcn.140201684
mov rcx, rax
call fcn.14020201c
mov ecx, eax
mov edx, 0x10000
call fcn.140201e38
mov r15d, r12d
nop dword [rax]
mov ecx, 0x1e70
call fcn.14007508c
mov rbx, rax
mov qword [rbp - 0x50], rax
test rax, rax
je 0x1400577bf
xor edx, edx
mov r8d, 0x1e70
mov rcx, rax
call fcn.1401f0eb0
mov dword [rbx], r14d
mov qword [rbx + 4], r14
jmp 0x1400577c2
mov rbx, r12
movsxd rax, dword [rdi + 0x1aa8]
mov qword [rdi + rax*8 + 0x1ab0], rbx
movsxd rax, dword [rdi + 0x1aa8]
mov rcx, qword [rdi + rax*8 + 0x1ab0]
test rcx, rcx
je 0x140057cd8
mov edx, r15d
call fcn.140006bc0
movsxd rcx, dword [rdi + 0x1aa8]
test al, al
jne 0x14005781c
mov rcx, qword [rdi + rcx*8 + 0x1ab0]
test rcx, rcx
je 0x140057cd8
mov edx, 0x1e70
call fcn.140003a90
jmp 0x140057cd8
mov qword [rbp - 0x40], 7
mov qword [rbp - 0x30], r12
mov dword [rbp - 0x28], r12d
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x1c], xmm0
mov dword [rbp - 0xc], r12d
mov qword [rbp - 0x38], rcx
mov eax, r15d
and eax, 1
mov dword [rbp - 0x24], eax
mov dword [rbp - 0x20], eax
mov r9, qword [rdi + rcx*8 + 0x1ab0]
mov edx, 0x100
lea rcx, [rbp + 0xc30]
cmp dword [rdi + 0xdf8], 0
je 0x140057883
lea rax, [r9 + 0x90]
add r9, 0x10
mov qword [rsp + 0x20], rax
lea r8, str._s___s_
call fcn.140002ed0
jmp 0x140057893
add r9, 0x10
lea r8, [0x1402855ec]
call fcn.140002ed0
lea rax, [rbp + 0xc30]
mov qword [rbp - 0x30], rax
lea rcx, [rbp + 0xc30]
mov rax, r14
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400578b0
mov dword [rbp - 0x28], eax
lea rcx, [rdi + 0x1eb0]
lea rdx, [rbp - 0x40]
call fcn.140073814
movsxd r8, dword [rdi + 0x1aa8]
mov r9, qword [rdi + r8*8 + 0x1ab0]
mov edx, 0x151
mov rcx, qword [rdi + 0x1ef0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rdi + 0xd18]
mov rdx, qword [rax + 0x18]
movsxd rcx, dword [rdi + 0x1aa8]
mov edx, dword [rdx + 0xd4]
mov rcx, qword [rdi + rcx*8 + 0x1ab0]
call fcn.14004be70
movsxd rax, dword [rdi + 0x1aa8]
mov rcx, qword [rdi + rax*8 + 0x1ab0]
mov dword [rcx + 0x32c], r14d
cmp dword [rdi + 0xdf0], 0
je 0x14005796d
movsxd rcx, dword [rdi + 0x1aa8]
lea rdx, [rbp + 0x710]
mov rcx, qword [rdi + rcx*8 + 0x1ab0]
call fcn.14004bcb0
test al, al
je 0x14005796d
movsx edx, byte [rbp + 0x716]
movsxd rax, dword [rdi + 0x1aa8]
mov rcx, qword [rdi + rax*8 + 0x1ab0]
mov dword [rcx + 0x32c], edx
mov rax, qword [rdi + 0xd18]
cmp byte [rax + 0x1e1eac], 0
je 0x140057c22
movsxd rax, dword [rdi + 0x1aa8]
mov rcx, qword [rdi + rax*8 + 0x1ab0]
mov r9, qword [rcx + 0x104]
cmp r9, 0x3b9aca00
jle 0x1400579b3
movabs rax, 0x112e0be826d694b3
imul r9
sar rdx, 0x1a
jmp 0x1400579c4
movabs rax, 0x431bde82d7b634db
imul r9
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea r8, str._I64d_GB
cmp r9, 0x3b9aca00
lea rax, str._d_MB
cmovle r8, rax
mov r9, rdx
mov edx, 0x100
lea rcx, [rbp + 0xe30]
call fcn.140002ed0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov r12, rax
test r15d, r15d
jne 0x140057b9f
xor ebx, ebx
mov qword [rsp + 0x70], rbx
call fcn.14006e454
test rax, rax
je 0x1400583bf
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
bts esi, 8
mov dword [rsp + 0x60], esi
lea edx, [rbx + 0x71]
lea rcx, [rsp + 0x70]
call fcn.140003220
nop
mov qword [rsp + 0x68], rbx
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x1400583b4
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
bts esi, 7
mov dword [rsp + 0x60], esi
lea edx, [rbx + 0x75]
lea rcx, [rsp + 0x68]
call fcn.140003220
nop
mov qword [rbp - 0x70], rbx
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x1400583a9
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
or esi, 0x40
mov dword [rsp + 0x60], esi
mov edx, 0x169
lea rcx, [rbp - 0x70]
call fcn.140003220
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov rbx, qword [rbp - 0x70]
mov r9, rbx
lea r8, str._n___32s__20s_10s_n
mov edx, 0x100
lea rcx, [rbp + 0xa30]
call fcn.140002ed0
and esi, 0xffffffbf
mov dword [rsp + 0x60], esi
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057b16
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
and dword [rsp + 0x60], 0xffffff7f
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057b3d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
and dword [rsp + 0x60], 0xfffffeff
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140057b64
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rbp + 0xa30]
mov r8, r14
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140057b70
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x70c]
lea rdx, [rbp + 0xa30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
mov esi, dword [rsp + 0x60]
movsxd rax, dword [rdi + 0x1aa8]
mov rcx, qword [rdi + rax*8 + 0x1ab0]
lea rax, [rcx + 0x90]
add rcx, 0x10
lea rdx, [rbp + 0xe30]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r9d, r15d
lea r8, str.__2d__32s__20s_10s_n
mov edx, 0x100
lea rcx, [rbp + 0xa30]
call fcn.140002ed0
lea rax, [rbp + 0xa30]
mov r8, r14
inc r8
cmp word [rax + r8*2], 0
jne 0x140057bf4
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x70c]
lea rdx, [rbp + 0xa30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteConsoleW]
xor r12d, r12d
movsxd rax, dword [rdi + 0x1aa8]
mov r9, qword [rdi + rax*8 + 0x1ab0]
lea rax, [r9 + 0x90]
add r9, 0x10
mov qword [rsp + 0x20], rax
lea r8, str._s_s
mov edx, 0x64
lea rcx, [rbp + 0xc30]
call fcn.140004d90
mov r9, qword [rdi + 0xd18]
mov r8, qword [r9 + 0x18]
add r8, 8
mov rax, r14
nop dword [rax + rax]
inc rax
cmp word [r8 + rax*2], 0
jne 0x140057c70
cmp rax, 1
jbe 0x140057cd2
lea rax, [rbp + 0xc30]
sub r8, rax
nop dword [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x140057ca4
add rax, 2
test ecx, ecx
jne 0x140057c90
test edx, edx
jne 0x140057cd2
mov eax, dword [rdi + 0x1aa8]
mov dword [r9 + 0x120], eax
movsxd rax, dword [rdi + 0x1aa8]
mov rcx, qword [rdi + 0xd18]
mov rax, qword [rdi + rax*8 + 0x1ab0]
mov qword [rcx + 0x128], rax
inc dword [rdi + 0x1aa8]
lea eax, [r15 - 3]
cmp eax, 1
ja 0x140057eec
lea rbx, [rdi + 0x808]
lea rdx, [rdi + 0x858]
mov rcx, rbx
call fcn.1400056a0
mov rax, qword [rdi + 0xd18]
mov rdx, qword [rax + 0x18]
add rdx, 0x5ab
movzx r8d, byte [rdx + 1]
shl r8d, 0x10
movzx eax, byte [rdx + 2]
shl eax, 8
add r8d, eax
movzx eax, byte [rdx]
shl eax, 0x18
add r8d, eax
movzx eax, byte [rdx + 3]
add r8d, eax
mov dword [rbp + 0x920], r8d
movzx ecx, byte [rdx + 4]
shl ecx, 0x18
movzx eax, byte [rdx + 5]
shl eax, 0x10
add ecx, eax
movzx eax, byte [rdx + 6]
shl eax, 8
add ecx, eax
movzx eax, byte [rdx + 7]
add ecx, eax
mov dword [rbp + 0x924], ecx
mov byte [rbp + 0x930], r8b
movzx eax, byte [rbp + 0x921]
mov byte [rbp + 0x931], al
movzx eax, byte [rbp + 0x922]
mov byte [rbp + 0x932], al
movzx eax, byte [rbp + 0x923]
mov byte [rbp + 0x933], al
mov byte [rbp + 0x934], cl
movzx eax, byte [rbp + 0x925]
mov byte [rbp + 0x935], al
movzx eax, byte [rbp + 0x926]
mov byte [rbp + 0x936], al
movzx eax, byte [rbp + 0x927]
mov byte [rbp + 0x937], al
lea r8, [rbp + 0x934]
lea rdx, [rbp + 0x930]
mov rcx, rbx
call fcn.140005260
movzx eax, byte [rdi + 0x818]
xor byte [rbp + 0x930], al
movzx eax, byte [rdi + 0x819]
xor byte [rbp + 0x931], al
movzx eax, byte [rdi + 0x81a]
xor byte [rbp + 0x932], al
movzx eax, byte [rdi + 0x81b]
xor byte [rbp + 0x933], al
movzx eax, byte [rdi + 0x81c]
xor byte [rbp + 0x934], al
movzx eax, byte [rdi + 0x81d]
xor byte [rbp + 0x935], al
movzx eax, byte [rdi + 0x81e]
xor byte [rbp + 0x936], al
movzx eax, byte [rdi + 0x81f]
xor byte [rbp + 0x937], al
mov byte [rbp + 0x938], 0
lea rcx, [rbp + 0x932]
call fcn.1401fc4f0
mov r8d, 2
lea rdx, [0x14028b750]
lea rcx, [rbp + 0x930]
call fcn.1402006a0
test eax, eax
jne 0x140058072
movsx ecx, byte [rbp + 0x932]
call fcn.140200260
test eax, eax
je 0x140058072
movsx ecx, byte [rbp + 0x933]
call fcn.140200260
test eax, eax
je 0x140058072
movsx ecx, byte [rbp + 0x934]
call fcn.140200260
test eax, eax
je 0x140058072
movsx ecx, byte [rbp + 0x935]
call fcn.140200260
test eax, eax
je 0x140058072
movsx ecx, byte [rbp + 0x936]
call fcn.140200260
test eax, eax
je 0x140058072
movsx ecx, byte [rbp + 0x937]
call fcn.140200260
test eax, eax
je 0x140058072
mov qword [rdi + 0x898], 1
inc r15d
cmp r15d, 0x80
jl 0x140057790
cmp qword [rdi + 0x898], 0
jle 0x140058359
mov eax, dword [rdi + 0x1aa8]
cmp eax, 1
jge 0x1400581be
mov dword [rbp + 0x704], 0
mov word [rbp + 0x708], 0x500
lea rax, [rbp - 0x48]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x40], r12d
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r9d, 0x220
mov r8d, 0x20
mov dl, 2
lea rcx, [rbp + 0x704]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov dword [rbp + 0x700], eax
test eax, eax
je 0x1400580e4
lea r8, [rbp + 0x700]
mov rdx, qword [rbp - 0x48]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
mov ecx, dword [rbp + 0x700]
test eax, eax
cmove ecx, r12d
mov dword [rbp + 0x700], ecx
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [rbp + 0x700], 0
je 0x1400580e4
mov qword [rsp + 0x78], r12
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x14005839e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
or esi, 4
mov dword [rsp + 0x60], esi
mov edx, 0x14f
lea rcx, [rsp + 0x78]
call fcn.140003220
nop
mov qword [rbp - 0x68], r12
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x1400583ca
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
or esi, 8
mov dword [rsp + 0x60], esi
mov edx, 0x19c
lea rcx, [rbp - 0x68]
call fcn.140003220
mov r9d, 0x10
mov r8, qword [rsp + 0x78]
mov rbx, qword [rbp - 0x68]
mov rdx, rbx
mov rcx, rdi
call fcn.1400649a0
and esi, 0xfffffff7
mov dword [rsp + 0x60], esi
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058068
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
jmp 0x140058194
cmp r15d, 3
jne 0x140057eec
xor edx, edx
mov r8d, 0x6f8
lea rcx, [rbp]
call fcn.1401f0eb0
lea rcx, [rbp]
call fcn.14003f610
nop
mov rax, qword [rdi + 0xd18]
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rbx
lea rcx, [rbp]
call fcn.14006f6b8
cmp rax, 1
je 0x1400580c7
mov dword [rdi + 0x1aa8], r12d
mov rax, r12
jmp 0x1400580cc
mov eax, 1
mov qword [rdi + 0x898], rax
lea rcx, [rbp]
call fcn.14003f9f0
inc r15d
jmp 0x140057790
mov qword [rbp - 0x80], r12
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x1400583d5
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
or esi, 1
mov dword [rsp + 0x60], esi
mov edx, 0x14f
lea rcx, [rbp - 0x80]
call fcn.140003220
nop
mov qword [rbp - 0x60], r12
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x1400583e0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
or esi, 2
mov dword [rsp + 0x60], esi
mov edx, 0x19e
lea rcx, [rbp - 0x60]
call fcn.140003220
mov r9d, 0x10
mov r8, qword [rbp - 0x80]
mov rbx, qword [rbp - 0x60]
mov rdx, rbx
mov rcx, rdi
call fcn.1400649a0
and esi, 0xfffffffd
mov dword [rsp + 0x60], esi
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140058190
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
sub r14d, 1
jg 0x1400581ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0xc0]
jmp 0x140058361
mov rdx, qword [rdi + 0xd18]
mov ecx, dword [rdx + 0x1e1ea8]
cmp ecx, 0xffffffff
je 0x14005829d
dec eax
cmp ecx, eax
jle 0x140058293
mov qword [rbp - 0x78], r12
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x1400583eb
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
or esi, 0x10
mov dword [rsp + 0x60], esi
mov edx, 0x14f
lea rcx, [rbp - 0x78]
call fcn.140003220
nop
mov qword [rbp - 0x58], r12
call fcn.14006e454
mov rcx, rax
test rax, rax
je 0x140058393
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
or esi, 0x20
mov dword [rsp + 0x60], esi
mov edx, 0x19f
lea rcx, [rbp - 0x58]
call fcn.140003220
mov r9d, 0x10
mov r8, qword [rbp - 0x78]
mov rbx, qword [rbp - 0x58]
mov rdx, rbx
mov rcx, rdi
call fcn.1400649a0
and esi, 0xffffffdf
mov dword [rsp + 0x60], esi
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14005828a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
jmp 0x140058194
test ecx, ecx
jle 0x14005829d
mov dword [rdx + 0x120], ecx
mov rax, qword [rdi + 0xd18]
movsxd r8, dword [rax + 0x120]
xor r9d, r9d
mov edx, 0x14e
mov rcx, qword [rdi + 0x1ef0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rdi + 0xd18]
movsxd rax, dword [rdx + 0x120]
mov rcx, qword [rdi + rax*8 + 0x1ab0]
mov qword [rdx + 0x128], rcx
mov rcx, rdi
call fcn.14005aac0
mov rcx, rdi
call fcn.140058400
mov rcx, rdi
call fcn.1400585b0
xor r9d, r9d
lea edx, [r9 + 3]
mov r8d, 0x3e8
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SetTimer]
mov dword [rdi + 0xc90], eax
xor r9d, r9d
lea edx, [r9 + 4]
mov r8d, 0xea60
mov rcx, qword [rdi + 0x40]
call qword [sym.imp.USER32.dll_SetTimer]
mov dword [rdi + 0xc90], eax
cmp dword [rdi + 0x1aa8], 0
jle 0x140058359
cmp qword [rdi + 0x898], 0
jle 0x140058359
mov rcx, qword [rdi + 0x1960]
mov rax, qword [rdi + 0xd18]
mov qword [rcx + 0x260], rax
jmp 0x140058363
mov rcx, rdi
call fcn.14006fa80
xor al, al
mov rcx, qword [rbp + 0x1030]
xor rcx, rsp
call fcn.1401ee030
lea r11, [rsp + 0x1140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
nop
mov ecx, 0x80004005
call fcn.1400037e0
int3