Function at 0x1800b6920
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x1490
call fcn.1801339d0
sub rsp, rax
mov qword [rsp + 0x1300], 0xfffffffffffffffe
mov rax, qword [0x180161180]
xor rax, rsp
mov qword [rsp + 0x1480], rax
mov qword [rsp + 0x10a8], 0
mov qword [rsp + 0x1138], 0
mov qword [rsp + 0x1158], 0
mov dword [rsp + 0x10cc], 0x1f
mov dword [rsp + 0x10b8], 0
mov dword [rsp + 0x10a4], 0
mov dword [rsp + 0x1134], 0
mov dword [rsp + 0x1120], 0
mov dword [rsp + 0x1148], 0
mov dword [rsp + 0x10c8], 0
mov byte [rsp + 0x10f0], 0
mov byte [rsp + 0x112c], 0
mov byte [rsp + 0x1112], 0
mov dword [rsp + 0x10bc], 0
mov dword [rsp + 0x94], 0
mov dword [rsp + 0x90], 0
mov dword [rsp + 0x10b4], 0
mov dword [rsp + 0x10f8], 0
mov dword [rsp + 0x1130], 0
mov dword [rsp + 0x1128], 0
mov dword [rsp + 0x88], 0xff
mov dword [rsp + 0x10f4], 0
mov dword [rsp + 0x1150], 0
mov dword [rsp + 0x10a0], 0
mov byte [rsp + 0x1111], 0xff
mov byte [rsp + 0x1144], 0
mov byte [rsp + 0x10b0], 0
mov byte [rsp + 0x1110], 0
mov dword [rsp + 0x110c], 0
mov dword [rsp + 0x114c], 0
mov dword [rsp + 0x1140], 0
mov byte [rsp + 0x8c], 0
mov dword [rsp + 0x1108], 0
mov qword [rsp + 0x1100], 0
xor eax, eax
mov word [rsp + 0x10fc], ax
mov byte [rsp + 0x1124], 0
mov rdx, qword [rsp + 0x14a8]
lea rcx, [0x1800217d8]
call fcn.1800892c0
mov rdx, qword [rsp + 0x14a0]
add rdx, 0x12188
lea rcx, [rsp + 0x70]
call fcn.18008d200
nop
mov rax, qword [rsp + 0x14a0]
cmp dword [rax + 0x121c4], 0x4000000
jge 0x1800b6be7
mov r8d, 0x4000000
mov rax, qword [rsp + 0x14a0]
mov edx, dword [rax + 0x121c4]
lea rcx, [0x180021750]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11b0], rax
cmp qword [rsp + 0x11b0], 0
je 0x1800b6b97
mov dword [rsp + 0x28], 0x4000000
mov rax, qword [rsp + 0x14a0]
mov eax, dword [rax + 0x121c4]
mov dword [rsp + 0x20], eax
lea r9, [0x1800216c0]
xor r8d, r8d
mov edx, 0x27
mov rcx, qword [rsp + 0x11b0]
call fcn.18008d120
mov qword [rsp + 0x1308], rax
jmp 0x1800b6ba3
mov qword [rsp + 0x1308], 0
mov rax, qword [rsp + 0x1308]
mov qword [rsp + 0x11a8], rax
mov rax, qword [rsp + 0x11a8]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x11b8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11b8]
call fcn.1800ec370
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a4bf0
mov rdx, qword [rsp + 0x14a0]
mov byte [rdx + 0x11cbe], 0
mov rax, qword [rsp + 0x14a0]
mov byte [rax + 0x11cbd], 1
mov rcx, qword [rsp + 0x14a0]
movzx eax, byte [rsp + 0x14c0]
mov byte [rcx + 0x11cbc], al
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b3ec0
mov dword [rsp + 0x114c], eax
mov edx, dword [rsp + 0x114c]
lea rcx, [0x180021670]
call fcn.1800892c0
cmp dword [rsp + 0x114c], 3
jle 0x1800b6d2f
cmp dword [rsp + 0x14d8], 1
je 0x1800b6d2f
mov r8d, dword [rsp + 0x14d8]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x180021600]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11c8], rax
cmp qword [rsp + 0x11c8], 0
je 0x1800b6cdf
mov eax, dword [rsp + 0x14d8]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x114c]
mov dword [rsp + 0x20], eax
lea r9, [0x180021590]
xor r8d, r8d
mov edx, 2
mov rcx, qword [rsp + 0x11c8]
call fcn.18008d120
mov qword [rsp + 0x1310], rax
jmp 0x1800b6ceb
mov qword [rsp + 0x1310], 0
mov rax, qword [rsp + 0x1310]
mov qword [rsp + 0x11c0], rax
mov rax, qword [rsp + 0x11c0]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x11d0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11d0]
call fcn.1800ec370
cmp dword [rsp + 0x114c], 3
jle 0x1800b6e2b
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
test eax, eax
jne 0x1800b6e2b
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x18001d1e0]
call fcn.1800eae7c
test rax, rax
je 0x1800b6d91
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021580]
call fcn.1800eae7c
test rax, rax
jne 0x1800b6dce
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180021578]
call fcn.1800eae7c
test rax, rax
je 0x1800b6e2b
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021568]
call fcn.1800eae7c
test rax, rax
je 0x1800b6e2b
mov rax, qword [rsp + 0x14a0]
mov byte [rax + 0x11cbc], 1
movzx ecx, byte [rsp + 0x14c0]
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
mov r8, qword [rsp + 0x14a0]
add r8, 0x1018
mov rdx, qword [rsp + 0x14a0]
add rdx, 0x18
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x114c]
lea rcx, [0x1800214e0]
call fcn.1800892c0
cmp dword [rsp + 0x114c], 3
jle 0x1800b7206
movzx eax, byte [0x18015e757]
cmp eax, 1
je 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x1800214d0]
call fcn.1800eae7c
test rax, rax
je 0x1800b6e8a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x1800214c8]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b6ecb
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x1800214c0]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b6f0c
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x1800214b8]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b6f4d
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x1800214b0]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b6f8e
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x1800214a8]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b6fcf
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x1800214a0]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b7010
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021498]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b7051
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021490]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b7092
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021488]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b70d3
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021480]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b7110
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021478]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b714d
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021470]
call fcn.1800eae7c
test rax, rax
jne 0x1800b718a
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x180003608]
call fcn.1800eae7c
test rax, rax
je 0x1800b71ce
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x180021468]
call fcn.1800eae7c
test rax, rax
je 0x1800b71ce
movzx r9d, byte [0x18015e757]
mov r8, qword [rsp + 0x14a0]
add r8, 0x1018
mov rdx, qword [rsp + 0x14a0]
add rdx, 0x18
lea rcx, [0x180021400]
call fcn.1800892c0
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
mov dword [rax + 0x18], 0x10000
jmp 0x1800b71e1
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
mov dword [rax + 0x18], 0x8000
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
mov r8d, dword [rax + 0x18]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x180021390]
call fcn.1800892c0
jmp 0x1800b727e
xor eax, eax
test eax, eax
je 0x1800b7248
mov r8, qword [rsp + 0x14a0]
add r8, 0x1018
mov rdx, qword [rsp + 0x14a0]
add rdx, 0x18
lea rcx, [0x180021330]
call fcn.1800892c0
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
mov dword [rax + 0x18], 0x10000
jmp 0x1800b725b
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
mov dword [rax + 0x18], 0xf000
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
mov r8d, dword [rax + 0x18]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x1800212c0]
call fcn.1800892c0
mov eax, dword [rsp + 0x14d8]
mov dword [rsp + 0x1318], eax
cmp dword [rsp + 0x1318], 1
je 0x1800b72ff
cmp dword [rsp + 0x1318], 2
je 0x1800b72a5
jmp 0x1800b736d
lea rcx, [0x180021270]
call fcn.1800892c0
mov rdx, qword [rsp + 0x14a0]
mov dword [rdx + 0x121c8], 0x930
mov byte [rsp + 0x1144], 0
mov byte [rsp + 0x10b0], 0
mov byte [rsp + 0x1110], 0
movzx eax, word [rsp + 0x1500]
mov word [rsp + 0x10fc], ax
movzx eax, byte [rsp + 0x1508]
mov byte [rsp + 0x1124], al
jmp 0x1800b73a3
lea rcx, [0x180021220]
call fcn.1800892c0
mov rdx, qword [rsp + 0x14a0]
mov dword [rdx + 0x121c8], 0x800
mov byte [rsp + 0x10b0], 4
movzx eax, byte [rsp + 0x14b0]
test eax, eax
jne 0x1800b734f
lea rcx, [0x1800211d0]
call fcn.1800892c0
mov byte [rsp + 0x1144], 8
mov byte [rsp + 0x1110], 0
jmp 0x1800b736b
lea rcx, [0x180021170]
call fcn.1800892c0
mov byte [rsp + 0x1144], 0xa
mov byte [rsp + 0x1110], 0x20
jmp 0x1800b73a3
lea rcx, [0x180021110]
call fcn.1800892c0
mov rdx, qword [rsp + 0x14a0]
mov dword [rdx + 0x121c8], 0x91c
mov byte [rsp + 0x10b0], 4
mov byte [rsp + 0x1144], 0xd
mov byte [rsp + 0x1110], 0x20
lea rcx, [0x1800210c0]
call fcn.1800892c0
lea rdi, [rsp + 0xa0]
xor eax, eax
mov ecx, 0x1000
rep stosb byte [rdi], al
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x18
lea rdx, [0x18001c818]
call fcn.1800eae7c
test rax, rax
je 0x1800b747e
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x1018
lea rdx, [0x1800210b0]
call fcn.1800eae7c
test rax, rax
je 0x1800b747e
cmp dword [rsp + 0x14d8], 3
jne 0x1800b747e
mov r8, qword [rsp + 0x14a0]
add r8, 0x1018
mov rdx, qword [rsp + 0x14a0]
add rdx, 0x18
lea rcx, [0x180021050]
call fcn.1800892c0
lea rcx, [0x180021000]
call fcn.1800892c0
nop
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x14a0]
call qword [rax + 8]
nop
mov dword [rsp + 0x20], 0xff
mov r9b, 1
mov r8d, 0x1000
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a63f0
jmp 0x1800b74b7
lea rcx, [0x180020fb0]
call fcn.1800892c0
mov eax, dword [rsp + 0x114c]
mov dword [rsp + 0x20], eax
mov r9d, 0x1000
lea r8, [rsp + 0xa0]
mov edx, dword [rsp + 0x88]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800d7be0
lea rax, [rsp + 0x1108]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1111]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10b4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x94]
lea r8, [rsp + 0x1112]
lea rdx, [rsp + 0x112c]
lea rcx, [rsp + 0xa0]
call fcn.18008b660
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x10f8], eax
cmp dword [rsp + 0x114c], 9
je 0x1800b7540
cmp dword [rsp + 0x114c], 6
je 0x1800b7540
cmp dword [rsp + 0x114c], 0x13
jne 0x1800b762a
movzx eax, byte [rsp + 0x112c]
test eax, eax
jne 0x1800b762a
movzx eax, byte [rsp + 0x1112]
cmp eax, 1
jne 0x1800b762a
cmp dword [rsp + 0x114c], 6
jne 0x1800b7578
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b46f0
cmp dword [rsp + 0x114c], 9
jne 0x1800b758f
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b45c0
cmp dword [rsp + 0x114c], 0x13
jne 0x1800b75a6
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b48a0
mov r8d, dword [rsp + 0x88]
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b5750
lea rax, [rsp + 0x1108]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1111]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10b4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x94]
lea r8, [rsp + 0x1112]
lea rdx, [rsp + 0x112c]
lea rcx, [rsp + 0xa0]
call fcn.18008b660
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x10f8], eax
movzx eax, byte [rsp + 0x112c]
test eax, eax
jne 0x1800b7642
lea rcx, [0x180020f60]
call fcn.1800892c0
movzx eax, byte [rsp + 0x1112]
test eax, eax
jne 0x1800b7759
cmp dword [rsp + 0x114c], 5
je 0x1800b767a
cmp dword [rsp + 0x114c], 0x10
je 0x1800b767a
cmp dword [rsp + 0x114c], 0xd
je 0x1800b767a
cmp dword [rsp + 0x114c], 0xf
jne 0x1800b769a
mov r8d, dword [rsp + 0x114c]
mov edx, dword [rsp + 0x90]
lea rcx, [0x180020ec0]
call fcn.1800892c0
jmp 0x1800b7759
lea rcx, [0x180020e78]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x1340], rax
mov rax, qword [rsp + 0x1340]
mov qword [rsp + 0x11f8], rax
cmp qword [rsp + 0x11f8], 0
je 0x1800b7709
lea r9, [0x180020e38]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x11f8]
call fcn.18008d120
mov qword [rsp + 0x1348], rax
mov rax, qword [rsp + 0x1348]
mov qword [rsp + 0x1350], rax
jmp 0x1800b7715
mov qword [rsp + 0x1350], 0
mov rax, qword [rsp + 0x1350]
mov qword [rsp + 0x11f0], rax
mov rax, qword [rsp + 0x11f0]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x1200], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x1200]
call fcn.1800ec370
cmp dword [rsp + 0x114c], 8
je 0x1800b776d
cmp dword [rsp + 0x114c], 7
jne 0x1800b77b4
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
test eax, eax
jne 0x1800b77b4
cmp dword [rsp + 0x90], 0
jle 0x1800b77b4
mov r8d, dword [rsp + 0x90]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x180020dc0]
call fcn.1800892c0
mov rax, qword [rsp + 0x14a0]
mov byte [rax + 0x11cbc], 1
cmp dword [rsp + 0x114c], 5
jne 0x1800b7805
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
test eax, eax
jne 0x1800b7805
cmp dword [rsp + 0x90], 0
jle 0x1800b7805
mov r8d, dword [rsp + 0x90]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x180020d40]
call fcn.1800892c0
mov rax, qword [rsp + 0x14a0]
mov byte [rax + 0x11cbc], 1
cmp dword [rsp + 0x114c], 0x10
jne 0x1800b7845
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
cmp eax, 1
jne 0x1800b7845
mov edx, dword [rsp + 0x114c]
lea rcx, [0x180020ce0]
call fcn.1800892c0
mov rax, qword [rsp + 0x14a0]
mov byte [rax + 0x11cbc], 0
lea rcx, [0x180020c90]
call fcn.1800892c0
mov edx, dword [rsp + 0x114c]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b34c0
mov eax, dword [rsp + 0x114c]
mov dword [rsp + 0x1358], eax
mov eax, dword [rsp + 0x1358]
sub eax, 4
mov dword [rsp + 0x1358], eax
cmp dword [rsp + 0x1358], 0xf
ja case.0x1800b78ab.10
movsxd rax, dword [rsp + 0x1358]
lea rcx, [0x180000000]
mov eax, dword [rcx + rax*4 + 0xb9690]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
cmp eax, 1
jne 0x1800b79b6
cmp dword [rsp + 0x114c], 7
je 0x1800b78d9
cmp dword [rsp + 0x114c], 8
jne 0x1800b7958
lea rcx, [0x180020c20]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x20
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 0
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x38], 0
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 0
mov r9b, 4
mov r8b, 8
mov dl, 1
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b30e0
jmp 0x1800b79b4
lea rcx, [0x180020bb0]
call fcn.1800892c0
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 1
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x38], 0
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], 1
movzx eax, byte [rsp + 0x14b8]
mov byte [rsp + 0x20], al
mov r9b, 5
mov r8b, 8
xor edx, edx
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b30e0
jmp 0x1800b7a12
lea rcx, [0x180020b40]
call fcn.1800892c0
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 1
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x38], 0
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], 0
movzx eax, byte [rsp + 0x14b8]
mov byte [rsp + 0x20], al
mov r9b, 5
mov r8b, 8
mov dl, 2
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b30e0
jmp 0x1800b7be3
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x20
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 0
movzx eax, byte [rsp + 0x14f8]
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x14f0]
mov byte [rsp + 0x48], al
movzx eax, byte [rsp + 0x14e8]
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x14e0]
mov byte [rsp + 0x38], al
mov byte [rsp + 0x30], 0
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], 0
mov r9b, 4
mov r8b, 8
mov dl, 2
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b30e0
jmp 0x1800b7be3
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x20
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 0
movzx eax, byte [rsp + 0x14f8]
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x14f0]
mov byte [rsp + 0x48], al
movzx eax, byte [rsp + 0x14e8]
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x14e0]
mov byte [rsp + 0x38], al
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 0
mov r9b, 4
mov r8b, 8
mov dl, 1
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b30e0
jmp 0x1800b7be3
movzx eax, byte [rsp + 0x1124]
mov byte [rsp + 0x68], al
movzx eax, word [rsp + 0x10fc]
mov word [rsp + 0x60], ax
mov byte [rsp + 0x58], 0
movzx eax, byte [rsp + 0x14f8]
mov byte [rsp + 0x50], al
movzx eax, byte [rsp + 0x14f0]
mov byte [rsp + 0x48], al
movzx eax, byte [rsp + 0x14e8]
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x14e0]
mov byte [rsp + 0x38], al
movzx eax, byte [rsp + 0x1110]
mov byte [rsp + 0x30], al
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
mov byte [rsp + 0x28], al
movzx eax, byte [rsp + 0x14b8]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x10b0]
movzx r8d, byte [rsp + 0x1144]
mov dl, 1
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b30e0
cmp dword [rsp + 0x114c], 4
jge 0x1800b7c9f
lea rcx, [0x180020ae0]
call fcn.1800892c0
lea rdi, [rsp + 0xa0]
xor eax, eax
mov ecx, 0x1000
rep stosb byte [rdi], al
movzx eax, byte [rsp + 0x88]
mov dword [rsp + 0x20], eax
mov r9b, 1
mov r8d, 0x1000
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a63f0
lea rax, [rsp + 0x1108]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x1111]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10b4]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x94]
lea r8, [rsp + 0x1112]
lea rdx, [rsp + 0x112c]
lea rcx, [rsp + 0xa0]
call fcn.18008b660
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x10f8], eax
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 4
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov rcx, qword [rsp + 0x14a8]
add rcx, 0x60
mov rax, qword [rsp + 0x14a8]
mov rax, qword [rax + 0x60]
lea rdx, [rsp + 0x1208]
call qword [rax + 0x10]
mov qword [rsp + 0x1360], rax
mov rax, qword [rsp + 0x1360]
mov rax, qword [rax]
mov qword [rsp + 0x10c0], rax
mov rax, qword [rsp + 0x14a0]
mov ecx, dword [rax + 0x121c8]
mov rax, qword [rsp + 0x10c0]
cqo
idiv rcx
mov qword [rsp + 0x10d8], rax
lea r9, [rsp + 0x10d8]
lea r8, [rsp + 0x10c0]
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 5
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
movsxd rax, dword [rsp + 0x94]
cmp qword [rsp + 0x10d8], rax
jle 0x1800b7d8a
mov r8d, dword [rsp + 0x94]
mov rdx, qword [rsp + 0x10d8]
lea rcx, [0x180020a70]
call fcn.1800892c0
jmp 0x1800b7db2
mov r8d, dword [rsp + 0x94]
mov rdx, qword [rsp + 0x10d8]
lea rcx, [0x180020a00]
call fcn.1800892c0
lea rcx, [0x180020980]
call fcn.1800892c0
cmp dword [rsp + 0x114c], 3
jle 0x1800b7f0c
cmp dword [rsp + 0x114c], 0x11
jge 0x1800b7f0c
cmp dword [rsp + 0x10d8], 0x80000
jae 0x1800b7eb6
movzx eax, byte [0x18015e756]
cmp eax, 1
jne 0x1800b7eb6
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
test eax, eax
jne 0x1800b7eb6
mov eax, 0x80000
sub eax, dword [rsp + 0x10d8]
mov dword [rsp + 0x110c], eax
lea r9, [rsp + 0x110c]
lea r8, [rsp + 0x10d8]
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x1a
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov r8d, dword [rsp + 0x110c]
mov edx, dword [rsp + 0x10d8]
lea rcx, [0x180020900]
call fcn.1800892c0
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
test eax, eax
je 0x1800b7e8a
lea rax, [0x1800034dc]
mov qword [rsp + 0x1368], rax
jmp 0x1800b7e99
lea rax, [0x1800034d8]
mov qword [rsp + 0x1368], rax
movzx edx, byte [0x18015e756]
mov r8, qword [rsp + 0x1368]
lea rcx, [0x1800208a0]
call fcn.1800892c0
jmp 0x1800b7f0c
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
test eax, eax
je 0x1800b7eda
lea rax, [0x1800034dc]
mov qword [rsp + 0x1370], rax
jmp 0x1800b7ee9
lea rax, [0x1800034d8]
mov qword [rsp + 0x1370], rax
movzx r8d, byte [0x18015e756]
mov r9, qword [rsp + 0x1370]
mov edx, dword [rsp + 0x10d8]
lea rcx, [0x180020810]
call fcn.1800892c0
cmp dword [rsp + 0x114c], 4
je 0x1800b7f42
cmp dword [rsp + 0x114c], 5
je 0x1800b7f42
cmp dword [rsp + 0x114c], 0x10
je 0x1800b7f42
cmp dword [rsp + 0x114c], 7
je 0x1800b7f42
cmp dword [rsp + 0x114c], 8
jne 0x1800b8052
lea rcx, [0x1800207c0]
call fcn.1800892c0
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
cmp eax, 1
jne 0x1800b8017
cmp dword [rsp + 0x114c], 7
je 0x1800b7f7e
cmp dword [rsp + 0x114c], 8
jne 0x1800b8017
lea rcx, [0x180020778]
call fcn.1800892c0
cmp dword [rsp + 0x90], 0
jne 0x1800b7fb1
lea rcx, [0x180020730]
call fcn.1800892c0
mov dl, 1
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b55f0
jmp 0x1800b7fcc
lea rcx, [0x1800206d0]
call fcn.1800892c0
xor edx, edx
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b55f0
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 1
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x38], 0
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 0
mov r9b, 5
mov r8b, 8
xor edx, edx
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b30e0
jmp 0x1800b8052
mov eax, dword [rsp + 0x110c]
mov edx, dword [rsp + 0x10d8]
add edx, eax
lea rcx, [0x180020660]
call fcn.1800892c0
nop
mov eax, dword [rsp + 0x110c]
mov edx, dword [rsp + 0x10d8]
add edx, eax
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a74a0
nop
cmp dword [rsp + 0x114c], 0xf
jne 0x1800b82bd
lea rcx, [0x1800205f0]
call fcn.1800892c0
lea r8, [rsp + 0x8c]
lea rdx, [rsp + 0x1140]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b4330
movzx eax, byte [rsp + 0x8c]
cmp eax, 1
jne 0x1800b80a7
lea rax, [0x1800034dc]
mov qword [rsp + 0x1388], rax
jmp 0x1800b80b6
lea rax, [0x1800034d8]
mov qword [rsp + 0x1388], rax
mov r8, qword [rsp + 0x1388]
mov edx, dword [rsp + 0x1140]
lea rcx, [0x180020570]
call fcn.1800892c0
movzx eax, byte [rsp + 0x8c]
test eax, eax
jne 0x1800b82b1
mov rdx, qword [rsp + 0x10c0]
lea rcx, [0x180020500]
call fcn.1800892c0
xor eax, eax
test eax, eax
je 0x1800b81f3
mov rax, qword [rsp + 0x10c0]
cqo
and rdx, 0x7ff
add rax, rdx
sar rax, 0xb
mov dword [rsp + 0x1140], eax
xor edx, edx
mov eax, dword [rsp + 0x1140]
mov ecx, 0x3e8
div ecx
mov dword [rsp + 0x1140], eax
mov eax, dword [rsp + 0x1140]
imul eax, eax, 0x203
mov dword [rsp + 0x1140], eax
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
xor edx, edx
mov eax, dword [rax + 0x18]
mov ecx, 0x800
div ecx
mov ecx, eax
xor edx, edx
mov eax, dword [rsp + 0x1140]
div ecx
mov dword [rsp + 0x1140], eax
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
xor edx, edx
mov eax, dword [rax + 0x18]
mov ecx, 0x800
div ecx
mov ecx, eax
mov eax, dword [rsp + 0x1140]
imul eax, ecx
mov dword [rsp + 0x1140], eax
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x10]
xor edx, edx
mov eax, dword [rax + 0x18]
mov ecx, 0x800
div ecx
mov ecx, eax
mov eax, dword [rsp + 0x1140]
add eax, ecx
mov dword [rsp + 0x1140], eax
mov edx, dword [rsp + 0x1140]
lea rcx, [0x180020480]
call fcn.1800892c0
mov edx, dword [rsp + 0x1140]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b44e0
jmp 0x1800b821a
mov edx, dword [rsp + 0x1140]
lea rcx, [0x180020400]
call fcn.1800892c0
mov edx, dword [rsp + 0x1140]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b44e0
lea rcx, [0x180020390]
call fcn.1800892c0
lea r8, [rsp + 0x8c]
lea rdx, [rsp + 0x1140]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b4330
movzx eax, byte [rsp + 0x8c]
cmp eax, 1
jne 0x1800b8261
lea rax, [0x1800034dc]
mov qword [rsp + 0x1390], rax
jmp 0x1800b8270
lea rax, [0x1800034d8]
mov qword [rsp + 0x1390], rax
mov r8, qword [rsp + 0x1390]
mov edx, dword [rsp + 0x1140]
lea rcx, [0x180020570]
call fcn.1800892c0
mov r8d, dword [rsp + 0x1140]
imul r8, r8, 0x800
mov edx, dword [rsp + 0x1140]
shl edx, 1
lea rcx, [0x180020320]
call fcn.1800892c0
jmp 0x1800b82bd
lea rcx, [0x1800202b0]
call fcn.1800892c0
mov rcx, qword [rsp + 0x14a0]
mov rcx, qword [rcx + 0x121b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x1800b83bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10cc], eax
mov edx, dword [rsp + 0x10cc]
lea rcx, [0x180020250]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x1398], rax
mov rax, qword [rsp + 0x1398]
mov qword [rsp + 0x1220], rax
cmp qword [rsp + 0x1220], 0
je 0x1800b836d
mov r8d, dword [rsp + 0x10cc]
mov eax, dword [rsp + 0x10cc]
mov dword [rsp + 0x20], eax
lea r9, [0x1800201f0]
mov edx, 5
mov rcx, qword [rsp + 0x1220]
call fcn.18008d120
mov qword [rsp + 0x13a0], rax
mov rax, qword [rsp + 0x13a0]
mov qword [rsp + 0x13a8], rax
jmp 0x1800b8379
mov qword [rsp + 0x13a8], 0
mov rax, qword [rsp + 0x13a8]
mov qword [rsp + 0x1218], rax
mov rax, qword [rsp + 0x1218]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x1228], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x1228]
call fcn.1800ec370
mov rcx, qword [rsp + 0x14a0]
mov rcx, qword [rcx + 0x121b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x1800b84bd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10cc], eax
mov edx, dword [rsp + 0x10cc]
lea rcx, [0x180020180]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x13b0], rax
mov rax, qword [rsp + 0x13b0]
mov qword [rsp + 0x1238], rax
cmp qword [rsp + 0x1238], 0
je 0x1800b846d
mov r8d, dword [rsp + 0x10cc]
mov eax, dword [rsp + 0x10cc]
mov dword [rsp + 0x20], eax
lea r9, [0x180020120]
mov edx, 5
mov rcx, qword [rsp + 0x1238]
call fcn.18008d120
mov qword [rsp + 0x13b8], rax
mov rax, qword [rsp + 0x13b8]
mov qword [rsp + 0x13c0], rax
jmp 0x1800b8479
mov qword [rsp + 0x13c0], 0
mov rax, qword [rsp + 0x13c0]
mov qword [rsp + 0x1230], rax
mov rax, qword [rsp + 0x1230]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x1240], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x1240]
call fcn.1800ec370
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x3030
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x3030]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x14a0]
mov rcx, qword [rcx + 0x11cc0]
call fcn.1800a8710
cmp qword [rsp + 0x14a8], 0
je 0x1800b8513
mov rax, qword [rsp + 0x14a8]
add rax, 0x60
mov qword [rsp + 0x13c8], rax
jmp 0x1800b851f
mov qword [rsp + 0x13c8], 0
mov rcx, qword [rsp + 0x14a0]
mov rax, qword [rsp + 0x13c8]
mov qword [rcx + 0x11cc8], rax
mov rax, qword [rsp + 0x14a0]
mov dword [rax + 0x121c0], 0
lea rax, [rsp + 0x10b8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x14a0]
lea r8, [0x1800b26d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x1158], rax
cmp qword [rsp + 0x1158], 0
jne 0x1800b8670
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10cc], eax
mov edx, dword [rsp + 0x10cc]
lea rcx, [0x1800200d0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x13d0], rax
mov rax, qword [rsp + 0x13d0]
mov qword [rsp + 0x1250], rax
cmp qword [rsp + 0x1250], 0
je 0x1800b8620
mov r8d, dword [rsp + 0x10cc]
mov eax, dword [rsp + 0x10cc]
mov dword [rsp + 0x20], eax
lea r9, [0x180020080]
mov edx, 5
mov rcx, qword [rsp + 0x1250]
call fcn.18008d120
mov qword [rsp + 0x13d8], rax
mov rax, qword [rsp + 0x13d8]
mov qword [rsp + 0x13e0], rax
jmp 0x1800b862c
mov qword [rsp + 0x13e0], 0
mov rax, qword [rsp + 0x13e0]
mov qword [rsp + 0x1248], rax
mov rax, qword [rsp + 0x1248]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x1258], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x1258]
call fcn.1800ec370
lea rdx, [rsp + 0x1158]
lea rcx, [rsp + 0x1160]
call fcn.18008cf40
mov qword [rsp + 0x13e8], rax
mov rax, qword [rsp + 0x14a0]
mov eax, dword [rax + 0x121c4]
cdq
mov ecx, 0xb0
idiv ecx
mov dword [rsp + 0x10a4], eax
xor r9d, r9d
lea r8, [rsp + 0x10a4]
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 6
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov edx, dword [rsp + 0x10a4]
mov rcx, qword [rsp + 0x14a0]
mov rcx, qword [rcx + 0x121b0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x1134], eax
cmp dword [rsp + 0x1134], 0
je 0x1800b87fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10cc], eax
mov r8d, dword [rsp + 0x1134]
mov edx, dword [rsp + 0x10cc]
lea rcx, [0x180020010]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x13f0], rax
mov rax, qword [rsp + 0x13f0]
mov qword [rsp + 0x1268], rax
cmp qword [rsp + 0x1268], 0
je 0x1800b87ae
mov r8d, dword [rsp + 0x10cc]
mov eax, dword [rsp + 0x1134]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x10cc]
mov dword [rsp + 0x20], eax
lea r9, [0x18001ffa0]
mov edx, 5
mov rcx, qword [rsp + 0x1268]
call fcn.18008d120
mov qword [rsp + 0x13f8], rax
mov rax, qword [rsp + 0x13f8]
mov qword [rsp + 0x1400], rax
jmp 0x1800b87ba
mov qword [rsp + 0x1400], 0
mov rax, qword [rsp + 0x1400]
mov qword [rsp + 0x1260], rax
mov rax, qword [rsp + 0x1260]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x1270], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x1270]
call fcn.1800ec370
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 7
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x28
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov qword [rsp + 0x10d0], 0
mov dword [rsp + 0x10bc], 0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x1120], eax
mov eax, dword [rsp + 0x1120]
mov dword [rsp + 0x1148], eax
mov rcx, qword [rsp + 0x14a0]
add rcx, 0x3030
mov rax, qword [rsp + 0x14a0]
mov rax, qword [rax + 0x3030]
call qword [rax + 0x18]
mov qword [rsp + 0x1408], rax
mov rax, qword [rsp + 0x1408]
mov qword [rsp + 0x10a8], rax
cmp qword [rsp + 0x10a8], 0
je 0x1800b8d8c
mov rax, qword [rsp + 0x10a8]
movzx eax, byte [rax + 0x31]
cmp eax, 1
jne 0x1800b8940
mov rcx, qword [rsp + 0x10a8]
call fcn.1800e3fe0
mov dword [rsp + 0x1410], eax
mov r8, qword [rsp + 0x10a8]
mov r8, qword [r8 + 0x38]
mov edx, dword [rsp + 0x1410]
lea rcx, [0x18001ff40]
call fcn.1800892c0
mov rax, qword [rsp + 0x10a8]
mov byte [rax + 0x31], 0
mov rax, qword [rsp + 0x10a8]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x1278], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x1278]
call fcn.1800ec370
mov rax, qword [rsp + 0x10a8]
movzx eax, byte [rax + 0x30]
cmp eax, 1
jne 0x1800b8a23
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
cmp eax, 1
jne 0x1800b8a23
cmp dword [rsp + 0x114c], 7
je 0x1800b8985
cmp dword [rsp + 0x114c], 8
jne 0x1800b8a23
mov rax, qword [rsp + 0x14a0]
movzx r8d, byte [rax + 0x11cbc]
mov rax, qword [rsp + 0x10a8]
movzx edx, byte [rax + 0x30]
mov r9d, dword [rsp + 0x114c]
lea rcx, [0x18001fec0]
call fcn.1800892c0
movzx eax, byte [0x18015e757]
cmp eax, 1
jne 0x1800b89f2
mov dword [rsp + 0x20], 0x10000
mov r9d, dword [rsp + 0x90]
mov r8d, 0x20
mov rdx, qword [rsp + 0x10a8]
mov rdx, qword [rdx + 0x50]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
jmp 0x1800b8a21
mov dword [rsp + 0x20], 0x8000
mov r9d, dword [rsp + 0x90]
mov r8d, 0x10
mov rdx, qword [rsp + 0x10a8]
mov rdx, qword [rdx + 0x50]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
jmp 0x1800b8a5f
mov rax, qword [rsp + 0x10a8]
mov eax, dword [rax + 0x44]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x90]
mov rax, qword [rsp + 0x10a8]
mov r8d, dword [rax + 0x48]
mov rdx, qword [rsp + 0x10a8]
mov rdx, qword [rdx + 0x50]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
mov rax, qword [rsp + 0x10a8]
movzx eax, byte [rax + 0x30]
mov byte [rsp + 0x10f0], al
mov rax, qword [rsp + 0x10a8]
mov ecx, dword [rax + 0x48]
mov eax, dword [rsp + 0x90]
add eax, ecx
mov dword [rsp + 0x90], eax
mov rax, qword [rsp + 0x10a8]
movsxd rcx, dword [rax + 0x48]
mov rax, qword [rsp + 0x10d0]
add rax, rcx
mov qword [rsp + 0x10d0], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x10c8], eax
cmp dword [rsp + 0x14c8], 0
jbe 0x1800b8b24
mov edx, dword [rsp + 0x14c8]
imul edx, edx, 0x3e8
mov ecx, dword [rsp + 0x1120]
mov eax, dword [rsp + 0x10c8]
sub eax, ecx
cmp eax, edx
jbe 0x1800b8b24
mov eax, dword [rsp + 0x10c8]
mov dword [rsp + 0x1120], eax
lea r9, [rsp + 0x10d0]
lea r8, [rsp + 0x10d8]
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0xc
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
cmp dword [rsp + 0x14d0], 0
jbe 0x1800b8c60
mov eax, dword [rsp + 0x10bc]
add eax, 1
mov dword [rsp + 0x10bc], eax
cmp dword [rsp + 0x10bc], 8
jle 0x1800b8b8f
mov dword [rsp + 0x10bc], 0
lea rdi, [rsp + 0x10e0]
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
cmp dword [rsp + 0x114c], 6
je 0x1800b8b8f
mov r8d, 0xc
lea rdx, [rsp + 0x10e0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a6fe0
nop
mov edx, dword [rsp + 0x14d0]
imul edx, edx, 0x3e8
mov ecx, dword [rsp + 0x1148]
mov eax, dword [rsp + 0x10c8]
sub eax, ecx
cmp eax, edx
jbe 0x1800b8c60
mov eax, dword [rsp + 0x10c8]
mov dword [rsp + 0x1148], eax
movzx edi, byte [rsp + 0x10e7]
movzx edx, byte [rsp + 0x10e6]
shl edx, 8
movzx ecx, byte [rsp + 0x10e5]
shl ecx, 0x10
movzx eax, byte [rsp + 0x10e4]
shl eax, 0x18
or eax, ecx
or eax, edx
or eax, edi
mov dword [rsp + 0x1130], eax
movzx edi, byte [rsp + 0x10eb]
movzx edx, byte [rsp + 0x10ea]
shl edx, 8
movzx ecx, byte [rsp + 0x10e9]
shl ecx, 0x10
movzx eax, byte [rsp + 0x10e8]
shl eax, 0x18
or eax, ecx
or eax, edx
or eax, edi
mov dword [rsp + 0x1128], eax
lea r9, [rsp + 0x1128]
lea r8, [rsp + 0x1130]
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0xd
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov rdx, qword [rsp + 0x10a8]
mov rcx, qword [rsp + 0x14a0]
mov rcx, qword [rcx + 0x11cc0]
call fcn.1800a87b0
xor edx, edx
mov rcx, qword [rsp + 0x14a0]
mov rcx, qword [rcx + 0x121b8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1800b8d87
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbe]
cmp eax, 1
jne 0x1800b8d87
mov rdx, qword [rsp + 0x10d0]
lea rcx, [0x18001fe70]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x1438], rax
mov rax, qword [rsp + 0x1438]
mov qword [rsp + 0x12a0], rax
cmp qword [rsp + 0x12a0], 0
je 0x1800b8d37
mov rax, qword [rsp + 0x10d0]
mov qword [rsp + 0x20], rax
lea r9, [0x18001fe20]
xor r8d, r8d
mov edx, 0xe
mov rcx, qword [rsp + 0x12a0]
call fcn.18008d120
mov qword [rsp + 0x1440], rax
mov rax, qword [rsp + 0x1440]
mov qword [rsp + 0x1448], rax
jmp 0x1800b8d43
mov qword [rsp + 0x1448], 0
mov rax, qword [rsp + 0x1448]
mov qword [rsp + 0x1298], rax
mov rax, qword [rsp + 0x1298]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x12a8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x12a8]
call fcn.1800ec370
jmp 0x1800b8880
movzx eax, byte [rsp + 0x10f0]
test eax, eax
jne 0x1800b8ddd
lea rcx, [0x18001fde0]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x19
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov ecx, dword [0x18015e864]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800b8880
cmp dword [rsp + 0x10f8], 0
je 0x1800b93cc
cmp dword [rsp + 0x114c], 9
je 0x1800b8e39
cmp dword [rsp + 0x114c], 6
je 0x1800b8e39
cmp dword [rsp + 0x114c], 0x13
je 0x1800b8e39
mov rax, qword [rsp + 0x14a0]
movzx eax, byte [rax + 0x11cbc]
cmp eax, 1
jne 0x1800b93cc
cmp dword [rsp + 0x114c], 8
je 0x1800b8e39
cmp dword [rsp + 0x114c], 7
jne 0x1800b93cc
mov rcx, qword [rsp + 0x14a8]
call fcn.1800b96e0
mov byte [rsp + 0x1450], al
movzx eax, byte [rsp + 0x1450]
cmp eax, 1
jne 0x1800b9019
mov rax, qword [rsp + 0x14a0]
movzx r8d, byte [rax + 0x11cbc]
mov r9d, dword [rsp + 0x10f8]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x18001fd20]
call fcn.1800892c0
mov qword [rsp + 0x1118], 0x10000
mov dword [rsp + 0x10f4], 0
jmp 0x1800b8eb3
mov eax, dword [rsp + 0x10f4]
add eax, 0x20
mov dword [rsp + 0x10f4], eax
cmp dword [rsp + 0x10f4], 0x100
jge 0x1800b8f4d
mov rdi, qword [rsp + 0x14a0]
mov rdi, qword [rdi + 0x11cb0]
xor eax, eax
mov ecx, 0x10000
rep stosb byte [rdi], al
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x20
mov r9d, dword [rsp + 0x10f4]
mov r8d, 0x10000
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a4e10
mov eax, dword [rsp + 0x1118]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x10f4]
mov r8d, 0x20
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
jmp 0x1800b8ea2
mov rdi, qword [rsp + 0x14a0]
mov rdi, qword [rdi + 0x11cb0]
xor eax, eax
mov ecx, 0x10000
rep stosb byte [rdi], al
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x20
mov r9d, pe_nt_image_headers64
mov r8d, 0x10000
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a4e10
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a8]
call fcn.1800b9700
mov eax, dword [rsp + 0x1118]
mov dword [rsp + 0x20], eax
mov r9d, pe_nt_image_headers64
mov r8d, 0x20
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
mov rax, qword [rsp + 0x14a0]
movzx r8d, byte [rax + 0x11cbc]
mov r9d, dword [rsp + 0x10f8]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x18001fc50]
call fcn.1800892c0
jmp 0x1800b93cc
mov rax, qword [rsp + 0x14a0]
movzx r8d, byte [rax + 0x11cbc]
mov r9d, dword [rsp + 0x10f8]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x18001fb80]
call fcn.1800892c0
mov rcx, qword [rsp + 0x14a8]
call fcn.18009bdb0
mov qword [rsp + 0x1118], 0x10000
mov rdi, qword [rsp + 0x14a0]
mov rdi, qword [rdi + 0x11cb0]
xor eax, eax
mov ecx, 0x10000
rep stosb byte [rdi], al
cmp qword [rsp + 0x10c0], 0x10000
jge 0x1800b90b7
mov rcx, qword [rsp + 0x14a8]
add rcx, 0x60
mov rax, qword [rsp + 0x14a8]
mov rax, qword [rax + 0x60]
mov r8, qword [rsp + 0x14a0]
mov r8, qword [r8 + 0x11cb0]
mov rdx, qword [rsp + 0x10c0]
call qword [rax + 8]
jmp 0x1800b90e9
mov rcx, qword [rsp + 0x14a8]
add rcx, 0x60
mov rax, qword [rsp + 0x14a8]
mov rax, qword [rax + 0x60]
mov r8, qword [rsp + 0x14a0]
mov r8, qword [r8 + 0x11cb0]
mov rdx, qword [rsp + 0x1118]
call qword [rax + 8]
mov r8d, 0x20
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800d8900
mov dword [rsp + 0x1454], eax
mov eax, dword [rsp + 0x1454]
mov dword [rsp + 0x10a0], eax
mov edx, dword [rsp + 0x10a0]
lea rcx, [0x18001fb20]
call fcn.1800892c0
cmp dword [rsp + 0x10a0], 0x10
jle 0x1800b9212
mov edx, dword [rsp + 0x10a0]
lea rcx, [0x18001fab0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x1458], rax
mov rax, qword [rsp + 0x1458]
mov qword [rsp + 0x12b8], rax
cmp qword [rsp + 0x12b8], 0
je 0x1800b91c2
mov eax, dword [rsp + 0x10a0]
mov dword [rsp + 0x20], eax
lea r9, [0x18001fa40]
xor r8d, r8d
mov edx, 2
mov rcx, qword [rsp + 0x12b8]
call fcn.18008d120
mov qword [rsp + 0x1460], rax
mov rax, qword [rsp + 0x1460]
mov qword [rsp + 0x1468], rax
jmp 0x1800b91ce
mov qword [rsp + 0x1468], 0
mov rax, qword [rsp + 0x1468]
mov qword [rsp + 0x12b0], rax
mov rax, qword [rsp + 0x12b0]
mov qword [rsp + 0x1138], rax
mov rax, qword [rsp + 0x1138]
mov qword [rsp + 0x12c0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x12c0]
call fcn.1800ec370
cmp dword [rsp + 0x10a0], 0
jle 0x1800b93b9
mov edx, dword [rsp + 0x10a0]
lea rcx, [0x18001f9d0]
call fcn.1800892c0
mov rcx, qword [rsp + 0x14a8]
call fcn.18009bdb0
mov qword [rsp + 0x1118], 0x8000
mov rdi, qword [rsp + 0x14a0]
mov rdi, qword [rdi + 0x11cb0]
xor eax, eax
mov ecx, 0x10000
rep stosb byte [rdi], al
mov rcx, qword [rsp + 0x14a8]
add rcx, 0x60
mov rax, qword [rsp + 0x14a8]
mov rax, qword [rax + 0x60]
mov r8, qword [rsp + 0x14a0]
mov r8, qword [r8 + 0x11cb0]
mov rdx, qword [rsp + 0x1118]
call qword [rax + 8]
mov eax, dword [rsp + 0x1118]
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x10
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
mov rdi, qword [rsp + 0x14a0]
mov rdi, qword [rdi + 0x11cb0]
xor eax, eax
mov ecx, 0x10000
rep stosb byte [rdi], al
mov byte [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x10
mov r9d, 0x10
mov r8d, 0x8000
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a4e10
mov eax, dword [rsp + 0x10a0]
imul eax, eax, 0x800
cdqe
mov qword [rsp + 0x1118], rax
mov rcx, qword [rsp + 0x14a8]
add rcx, 0x60
mov rax, qword [rsp + 0x14a8]
mov rax, qword [rax + 0x60]
mov r8, qword [rsp + 0x14a0]
mov r8, qword [r8 + 0x11cb0]
mov rdx, qword [rsp + 0x1118]
call qword [rax + 8]
mov dword [rsp + 0x20], 0x8000
mov r9d, 0x10
mov r8d, 0x10
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
mov rax, qword [rsp + 0x14a0]
movzx r8d, byte [rax + 0x11cbc]
mov r9d, dword [rsp + 0x10f8]
mov edx, dword [rsp + 0x114c]
lea rcx, [0x18001f910]
call fcn.1800892c0
jmp 0x1800b93cc
mov edx, dword [rsp + 0x10a0]
lea rcx, [0x18001f890]
call fcn.1800892c0
cmp dword [rsp + 0x110c], 0
jbe 0x1800b95bf
mov edx, dword [rsp + 0x90]
lea rcx, [0x18001f840]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x1b
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov eax, dword [rsp + 0x110c]
mov dword [rsp + 0x1150], eax
mov rdi, qword [rsp + 0x14a0]
mov rdi, qword [rdi + 0x11cb0]
xor eax, eax
mov ecx, 0x10000
rep stosb byte [rdi], al
cmp dword [rsp + 0x1150], 0x20
jle 0x1800b9517
mov dword [rsp + 0x20], 0x10000
mov r9d, dword [rsp + 0x90]
mov r8d, 0x20
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x10c8], eax
cmp dword [rsp + 0x14c8], 0
jbe 0x1800b94f3
mov edx, dword [rsp + 0x14c8]
imul edx, edx, 0x3e8
mov ecx, dword [rsp + 0x1120]
mov eax, dword [rsp + 0x10c8]
sub eax, ecx
cmp eax, edx
jbe 0x1800b94f3
mov eax, dword [rsp + 0x10c8]
mov dword [rsp + 0x1120], eax
lea r9, [rsp + 0x1150]
lea r8, [rsp + 0x110c]
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x27
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov eax, dword [rsp + 0x1150]
sub eax, 0x20
mov dword [rsp + 0x1150], eax
mov eax, dword [rsp + 0x90]
add eax, 0x20
mov dword [rsp + 0x90], eax
jmp 0x1800b9586
mov r8d, 0x20
mov edx, dword [rsp + 0x1150]
lea rcx, [0x18001f7d0]
call fcn.1800892c0
mov eax, dword [rsp + 0x1150]
imul eax, eax, 0x800
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x90]
mov r8d, dword [rsp + 0x1150]
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x11cb0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800a78b0
mov ecx, dword [rsp + 0x1150]
mov eax, dword [rsp + 0x90]
add eax, ecx
mov dword [rsp + 0x90], eax
jmp 0x1800b958b
jmp 0x1800b9423
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x1c
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
lea rcx, [0x18001f780]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x29
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 8
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b3b50
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x14a0]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 9
mov rax, qword [rsp + 0x14a0]
call qword [rax + 0x121d0]
nop
lea rcx, [rsp + 0x1160]
call fcn.18008cfd0
nop
mov rcx, qword [rsp + 0x14a0]
call fcn.1800b3070
lea rcx, [0x18001f730]
call fcn.1800892c0
nop
lea rcx, [rsp + 0x70]
call fcn.18008d2a0
mov rcx, qword [rsp + 0x1480]
xor rcx, rsp
call fcn.1800eb430
add rsp, 0x1490
pop rdi
ret