Function at 0x1800bb450
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x11550
call fcn.1801339d0
sub rsp, rax
mov qword [rsp + 0x11390], 0xfffffffffffffffe
mov rax, qword [0x180161180]
xor rax, rsp
mov qword [rsp + 0x11540], rax
mov qword [rsp + 0x10b8], 0
mov qword [rsp + 0x11150], 0
mov qword [rsp + 0x11170], 0
mov dword [rsp + 0x10e4], 0x1f
mov dword [rsp + 0x10cc], 0
mov dword [rsp + 0x10b0], 0
mov dword [rsp + 0x1114c], 0
mov dword [rsp + 0x11130], 0
mov dword [rsp + 0x1115c], 0
mov dword [rsp + 0x10e0], 0
mov byte [rsp + 0x11118], 0
mov byte [rsp + 0x11138], 0
mov byte [rsp + 0x11122], 0
mov dword [rsp + 0x10d0], 0
mov dword [rsp + 0x98], 0
mov dword [rsp + 0x94], 0
mov dword [rsp + 0x10c8], 0
mov dword [rsp + 0x11100], 0
mov dword [rsp + 0x11148], 0
mov dword [rsp + 0x11134], 0
mov dword [rsp + 0x90], 0xff
mov byte [rsp + 0x11121], 0xff
mov byte [rsp + 0x11158], 0
mov byte [rsp + 0x10c4], 0
mov byte [rsp + 0x11120], 0
mov dword [rsp + 0x11168], 0
lea rax, [rsp + 0x10f0]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x9c], 0
mov dword [rsp + 0x10c0], 0
mov dword [rsp + 0x10e8], 0
mov qword [rsp + 0x11140], 0
mov qword [rsp + 0x11160], 0
mov qword [rsp + 0x88], 0
mov dword [rsp + 0x1111c], 0
mov rdx, qword [rsp + 0x11568]
lea rcx, [0x180024200]
call fcn.1800892c0
mov rdx, qword [rsp + 0x11560]
add rdx, 0x12188
lea rcx, [rsp + 0x70]
call fcn.18008d200
nop
mov rax, qword [rsp + 0x11560]
cmp dword [rax + 0x121c4], 0x4000000
jge 0x1800bb70f
mov r8d, 0x4000000
mov rax, qword [rsp + 0x11560]
mov edx, dword [rax + 0x121c4]
lea rcx, [0x180024170]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x111b8], rax
cmp qword [rsp + 0x111b8], 0
je 0x1800bb6bf
mov dword [rsp + 0x28], 0x4000000
mov rax, qword [rsp + 0x11560]
mov eax, dword [rax + 0x121c4]
mov dword [rsp + 0x20], eax
lea r9, [0x1800240e0]
xor r8d, r8d
mov edx, 0x27
mov rcx, qword [rsp + 0x111b8]
call fcn.18008d120
mov qword [rsp + 0x11398], rax
jmp 0x1800bb6cb
mov qword [rsp + 0x11398], 0
mov rax, qword [rsp + 0x11398]
mov qword [rsp + 0x111b0], rax
mov rax, qword [rsp + 0x111b0]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x111c0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x111c0]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
call fcn.1800a4bf0
mov rcx, qword [rsp + 0x11560]
call fcn.1800b3ec0
mov dword [rsp + 0x11168], eax
mov edx, dword [rsp + 0x11168]
lea rcx, [0x180024090]
call fcn.1800892c0
cmp dword [rsp + 0x11168], 3
jle 0x1800bb802
mov edx, dword [rsp + 0x11168]
lea rcx, [0x180024030]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x111d0], rax
cmp qword [rsp + 0x111d0], 0
je 0x1800bb7b2
mov eax, dword [rsp + 0x11168]
mov dword [rsp + 0x20], eax
lea r9, [0x180023fd0]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x111d0]
call fcn.18008d120
mov qword [rsp + 0x113a0], rax
jmp 0x1800bb7be
mov qword [rsp + 0x113a0], 0
mov rax, qword [rsp + 0x113a0]
mov qword [rsp + 0x111c8], rax
mov rax, qword [rsp + 0x111c8]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x111d8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x111d8]
call fcn.1800ec370
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x10]
mov dword [rax + 0x18], 0xf000
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x10]
mov r8d, dword [rax + 0x18]
mov edx, dword [rsp + 0x11168]
lea rcx, [0x180023f60]
call fcn.1800892c0
mov rdx, qword [rsp + 0x11560]
mov byte [rdx + 0x11cbe], 0
mov rax, qword [rsp + 0x11560]
mov byte [rax + 0x11cbd], 3
mov rax, qword [rsp + 0x11560]
mov dword [rax + 0x121c8], 0x990
mov rax, qword [rsp + 0x11598]
movzx eax, byte [rax + 0x321]
cmp eax, 1
jne 0x1800bb892
lea rcx, [0x180023f00]
call fcn.1800892c0
mov byte [rsp + 0x10c4], 0
jmp 0x1800bb8a6
lea rcx, [0x180023ea0]
call fcn.1800892c0
mov byte [rsp + 0x10c4], 0
mov byte [rsp + 0x11158], 3
movzx eax, byte [rsp + 0x11570]
cmp eax, 1
jne 0x1800bb8d1
lea rcx, [0x180023e40]
call fcn.1800892c0
mov byte [rsp + 0x11120], 0x20
jmp 0x1800bb8e5
lea rcx, [0x180023de0]
call fcn.1800892c0
mov byte [rsp + 0x11120], 0
lea rcx, [0x180023d90]
call fcn.1800892c0
mov edx, dword [rsp + 0x11168]
mov rcx, qword [rsp + 0x11560]
call fcn.1800b34c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x20
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 0
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x38], 0
movzx eax, byte [rsp + 0x11120]
mov byte [rsp + 0x30], al
movzx eax, byte [rsp + 0x11580]
mov byte [rsp + 0x28], al
movzx eax, byte [rsp + 0x11578]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x10c4]
movzx r8d, byte [rsp + 0x11158]
mov dl, 3
mov rcx, qword [rsp + 0x11560]
call fcn.1800b30e0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 4
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov rcx, qword [rsp + 0x11568]
add rcx, 0x60
mov rax, qword [rsp + 0x11568]
mov rax, qword [rax + 0x60]
lea rdx, [rsp + 0x111e0]
call qword [rax + 0x10]
mov qword [rsp + 0x113a8], rax
mov rax, qword [rsp + 0x113a8]
mov rax, qword [rax]
mov qword [rsp + 0x10d8], rax
mov rax, qword [rsp + 0x11560]
mov ecx, dword [rax + 0x121c8]
mov rax, qword [rsp + 0x10d8]
cqo
idiv rcx
mov qword [rsp + 0x20f8], rax
lea r9, [rsp + 0x20f8]
lea r8, [rsp + 0x10d8]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 5
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
lea rcx, [0x180023d40]
call fcn.1800892c0
lea rdi, [rsp + 0xb0]
xor eax, eax
mov ecx, 0x1000
rep stosb byte [rdi], al
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x20], eax
mov r9b, 1
mov r8d, 0x1000
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a63f0
lea rax, [rsp + 0x1111c]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x11121]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10c8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x94]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x98]
lea r8, [rsp + 0x11122]
lea rdx, [rsp + 0x11138]
lea rcx, [rsp + 0xb0]
call fcn.18008b660
movzx eax, byte [rsp + 0x11138]
test eax, eax
jne 0x1800bbb09
lea rcx, [0x180023cf0]
call fcn.1800892c0
movzx eax, byte [rsp + 0x11122]
test eax, eax
jne 0x1800bbb21
lea rcx, [0x180023ca0]
call fcn.1800892c0
movsxd rax, dword [rsp + 0x98]
cmp qword [rsp + 0x20f8], rax
jle 0x1800bbb4f
mov r8d, dword [rsp + 0x98]
mov rdx, qword [rsp + 0x20f8]
lea rcx, [0x180023c20]
call fcn.1800892c0
lea rdi, [rsp + 0x10f0]
xor eax, eax
mov ecx, 0x1000
rep stosb byte [rdi], al
mov r8d, 0x1000
lea rdx, [rsp + 0x10f0]
mov rcx, qword [rsp + 0x11560]
call fcn.1800d7b80
mov byte [rsp + 0x20], 0
mov rax, qword [rsp + 0xa0]
movzx r9d, byte [rax + 0x13]
mov rax, qword [rsp + 0xa0]
movzx r8d, byte [rax + 0x12]
mov rax, qword [rsp + 0xa0]
movzx edx, byte [rax + 0x11]
mov rcx, qword [rsp + 0x11560]
call fcn.1800c51a0
mov dword [rsp + 0x113b0], eax
mov eax, dword [rsp + 0x113b0]
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x9c]
add eax, 0x97
cdq
xor eax, edx
sub eax, edx
add eax, 1
mov dword [rsp + 0x10c0], eax
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0x94], eax
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0x11100], eax
mov eax, dword [rsp + 0x10c0]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x11100]
mov r8d, dword [rsp + 0x94]
mov edx, dword [rsp + 0x9c]
lea rcx, [0x180023bb0]
call fcn.1800892c0
mov ecx, 0x14a08
call fcn.1800eb9ac
mov qword [rsp + 0x113b8], rax
mov rax, qword [rsp + 0x113b8]
mov qword [rsp + 0x111f0], rax
cmp qword [rsp + 0x111f0], 0
je 0x1800bbcc4
mov rax, qword [rsp + 0x11560]
add rax, 0x121e0
mov qword [rsp + 0x30], rax
movzx eax, byte [rsp + 0x11570]
mov byte [rsp + 0x28], al
mov rax, qword [rsp + 0x11598]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x20f8]
mov r8d, dword [rsp + 0x10c0]
mov edx, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0x111f0]
call fcn.1800ac790
mov qword [rsp + 0x113c0], rax
mov rax, qword [rsp + 0x113c0]
mov qword [rsp + 0x113c8], rax
jmp 0x1800bbcd0
mov qword [rsp + 0x113c8], 0
mov rax, qword [rsp + 0x113c8]
mov qword [rsp + 0x111e8], rax
mov rax, qword [rsp + 0x111e8]
mov qword [rsp + 0x11140], rax
cmp qword [rsp + 0x11140], 0
jne 0x1800bbdbe
lea rcx, [0x180023b40]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x113d0], rax
mov rax, qword [rsp + 0x113d0]
mov qword [rsp + 0x11200], rax
cmp qword [rsp + 0x11200], 0
je 0x1800bbd6e
lea r9, [0x180023ad0]
xor r8d, r8d
mov edx, 4
mov rcx, qword [rsp + 0x11200]
call fcn.18008d120
mov qword [rsp + 0x113d8], rax
mov rax, qword [rsp + 0x113d8]
mov qword [rsp + 0x113e0], rax
jmp 0x1800bbd7a
mov qword [rsp + 0x113e0], 0
mov rax, qword [rsp + 0x113e0]
mov qword [rsp + 0x111f8], rax
mov rax, qword [rsp + 0x111f8]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x11208], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11208]
call fcn.1800ec370
mov ecx, 0x1180
call fcn.1800eb9ac
mov qword [rsp + 0x113e8], rax
mov rax, qword [rsp + 0x113e8]
mov qword [rsp + 0x11218], rax
cmp qword [rsp + 0x11218], 0
je 0x1800bbe3f
movzx eax, byte [rsp + 0x11570]
mov byte [rsp + 0x28], al
mov rax, qword [rsp + 0x11598]
movzx eax, byte [rax + 0x321]
mov byte [rsp + 0x20], al
mov r9b, 1
mov r8d, 0x96
mov edx, 0xffffff6a
mov rcx, qword [rsp + 0x11218]
call fcn.1800adb10
mov qword [rsp + 0x113f0], rax
mov rax, qword [rsp + 0x113f0]
mov qword [rsp + 0x113f8], rax
jmp 0x1800bbe4b
mov qword [rsp + 0x113f8], 0
mov rax, qword [rsp + 0x113f8]
mov qword [rsp + 0x11210], rax
mov rax, qword [rsp + 0x11210]
mov qword [rsp + 0x11160], rax
cmp qword [rsp + 0x11160], 0
jne 0x1800bbf39
lea rcx, [0x180023a60]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11400], rax
mov rax, qword [rsp + 0x11400]
mov qword [rsp + 0x11228], rax
cmp qword [rsp + 0x11228], 0
je 0x1800bbee9
lea r9, [0x1800239f0]
xor r8d, r8d
mov edx, 4
mov rcx, qword [rsp + 0x11228]
call fcn.18008d120
mov qword [rsp + 0x11408], rax
mov rax, qword [rsp + 0x11408]
mov qword [rsp + 0x11410], rax
jmp 0x1800bbef5
mov qword [rsp + 0x11410], 0
mov rax, qword [rsp + 0x11410]
mov qword [rsp + 0x11220], rax
mov rax, qword [rsp + 0x11220]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x11230], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11230]
call fcn.1800ec370
mov ecx, 0x1178
call fcn.1800eb9ac
mov qword [rsp + 0x11418], rax
mov rax, qword [rsp + 0x11418]
mov qword [rsp + 0x11240], rax
cmp qword [rsp + 0x11240], 0
je 0x1800bbfad
movzx r9d, byte [rsp + 0x11570]
mov rax, qword [rsp + 0x11598]
movzx r8d, byte [rax + 0x321]
mov edx, dword [rsp + 0x20f8]
mov rcx, qword [rsp + 0x11240]
call fcn.1800ae8e0
mov qword [rsp + 0x11420], rax
mov rax, qword [rsp + 0x11420]
mov qword [rsp + 0x11428], rax
jmp 0x1800bbfb9
mov qword [rsp + 0x11428], 0
mov rax, qword [rsp + 0x11428]
mov qword [rsp + 0x11238], rax
mov rax, qword [rsp + 0x11238]
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
jne 0x1800bc0a7
lea rcx, [0x180023980]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11430], rax
mov rax, qword [rsp + 0x11430]
mov qword [rsp + 0x11250], rax
cmp qword [rsp + 0x11250], 0
je 0x1800bc057
lea r9, [0x180023910]
xor r8d, r8d
mov edx, 4
mov rcx, qword [rsp + 0x11250]
call fcn.18008d120
mov qword [rsp + 0x11438], rax
mov rax, qword [rsp + 0x11438]
mov qword [rsp + 0x11440], rax
jmp 0x1800bc063
mov qword [rsp + 0x11440], 0
mov rax, qword [rsp + 0x11440]
mov qword [rsp + 0x11248], rax
mov rax, qword [rsp + 0x11248]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x11258], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11258]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x1800bc1a7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x1800238b0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11448], rax
mov rax, qword [rsp + 0x11448]
mov qword [rsp + 0x11268], rax
cmp qword [rsp + 0x11268], 0
je 0x1800bc157
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x180023850]
mov edx, 5
mov rcx, qword [rsp + 0x11268]
call fcn.18008d120
mov qword [rsp + 0x11450], rax
mov rax, qword [rsp + 0x11450]
mov qword [rsp + 0x11458], rax
jmp 0x1800bc163
mov qword [rsp + 0x11458], 0
mov rax, qword [rsp + 0x11458]
mov qword [rsp + 0x11260], rax
mov rax, qword [rsp + 0x11260]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x11270], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11270]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x1800bc2a7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x1800237e0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11460], rax
mov rax, qword [rsp + 0x11460]
mov qword [rsp + 0x11280], rax
cmp qword [rsp + 0x11280], 0
je 0x1800bc257
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x180023770]
mov edx, 5
mov rcx, qword [rsp + 0x11280]
call fcn.18008d120
mov qword [rsp + 0x11468], rax
mov rax, qword [rsp + 0x11468]
mov qword [rsp + 0x11470], rax
jmp 0x1800bc263
mov qword [rsp + 0x11470], 0
mov rax, qword [rsp + 0x11470]
mov qword [rsp + 0x11278], rax
mov rax, qword [rsp + 0x11278]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x11288], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11288]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
add rcx, 0x3030
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x3030]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x11cc0]
call fcn.1800a8710
cmp qword [rsp + 0x11568], 0
je 0x1800bc2fd
mov rax, qword [rsp + 0x11568]
add rax, 0x60
mov qword [rsp + 0x11478], rax
jmp 0x1800bc309
mov qword [rsp + 0x11478], 0
mov rcx, qword [rsp + 0x11560]
mov rax, qword [rsp + 0x11478]
mov qword [rcx + 0x11cc8], rax
mov rax, qword [rsp + 0x11560]
mov dword [rax + 0x121c0], 0
lea rax, [rsp + 0x10cc]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x11560]
lea r8, [0x1800b26d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x11170], rax
cmp qword [rsp + 0x11170], 0
jne 0x1800bc45a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x180023710]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11480], rax
mov rax, qword [rsp + 0x11480]
mov qword [rsp + 0x11298], rax
cmp qword [rsp + 0x11298], 0
je 0x1800bc40a
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x1800236b0]
mov edx, 5
mov rcx, qword [rsp + 0x11298]
call fcn.18008d120
mov qword [rsp + 0x11488], rax
mov rax, qword [rsp + 0x11488]
mov qword [rsp + 0x11490], rax
jmp 0x1800bc416
mov qword [rsp + 0x11490], 0
mov rax, qword [rsp + 0x11490]
mov qword [rsp + 0x11290], rax
mov rax, qword [rsp + 0x11290]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x112a0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112a0]
call fcn.1800ec370
lea rdx, [rsp + 0x11170]
lea rcx, [rsp + 0x11178]
call fcn.18008cf40
mov qword [rsp + 0x11498], rax
mov rax, qword [rsp + 0x11560]
mov eax, dword [rax + 0x121c4]
cdq
mov ecx, 0xb0
idiv ecx
mov dword [rsp + 0x10b0], eax
xor r9d, r9d
lea r8, [rsp + 0x10b0]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 6
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov edx, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x1114c], eax
cmp dword [rsp + 0x1114c], 0
je 0x1800bc5e8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov r8d, dword [rsp + 0x1114c]
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x180023640]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x114a0], rax
mov rax, qword [rsp + 0x114a0]
mov qword [rsp + 0x112b0], rax
cmp qword [rsp + 0x112b0], 0
je 0x1800bc598
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x1114c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x1800235d0]
mov edx, 5
mov rcx, qword [rsp + 0x112b0]
call fcn.18008d120
mov qword [rsp + 0x114a8], rax
mov rax, qword [rsp + 0x114a8]
mov qword [rsp + 0x114b0], rax
jmp 0x1800bc5a4
mov qword [rsp + 0x114b0], 0
mov rax, qword [rsp + 0x114b0]
mov qword [rsp + 0x112a8], rax
mov rax, qword [rsp + 0x112a8]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x112b8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112b8]
call fcn.1800ec370
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 7
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x28
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov qword [rsp + 0x20f0], 0
mov dword [rsp + 0x10d0], 0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x11130], eax
mov eax, dword [rsp + 0x11130]
mov dword [rsp + 0x1115c], eax
mov r8d, dword [rsp + 0x10c0]
mov edx, dword [rsp + 0x94]
lea rcx, [0x180023560]
call fcn.1800892c0
mov eax, dword [rsp + 0x10c0]
mov dword [rsp + 0x10e8], eax
lea rdi, [rsp + 0x2100]
xor eax, eax
mov ecx, 0xf000
rep stosb byte [rdi], al
cmp dword [rsp + 0x10e8], 0x10
jle 0x1800bc73b
mov qword [rsp + 0x11128], 0x9900
mov rcx, qword [rsp + 0x11140]
add rcx, 0x60
mov rax, qword [rsp + 0x11140]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11128]
call qword [rax + 8]
mov dword [rsp + 0x20], 0x9900
mov r9d, dword [rsp + 0x94]
mov r8d, 0x10
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov eax, dword [rsp + 0x10e8]
sub eax, 0x10
mov dword [rsp + 0x10e8], eax
mov eax, dword [rsp + 0x94]
add eax, 0x10
mov dword [rsp + 0x94], eax
jmp 0x1800bc7e5
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x990
cdqe
mov qword [rsp + 0x11128], rax
mov r8d, 0x10
mov edx, dword [rsp + 0x10e8]
lea rcx, [0x1800234f0]
call fcn.1800892c0
mov rcx, qword [rsp + 0x11140]
add rcx, 0x60
mov rax, qword [rsp + 0x11140]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11128]
call qword [rax + 8]
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x990
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov r8d, dword [rsp + 0x10e8]
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov ecx, dword [rsp + 0x10e8]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
jmp 0x1800bc7ea
jmp 0x1800bc693
mov r8d, 0x96
mov edx, dword [rsp + 0x94]
lea rcx, [0x180023470]
call fcn.1800892c0
mov dword [rsp + 0x10e8], 0x96
lea rdi, [rsp + 0x2100]
xor eax, eax
mov ecx, 0xf000
rep stosb byte [rdi], al
cmp dword [rsp + 0x10e8], 0x10
jle 0x1800bc8b6
mov qword [rsp + 0x11128], 0x9900
mov rcx, qword [rsp + 0x11160]
add rcx, 0x60
mov rax, qword [rsp + 0x11160]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11128]
call qword [rax + 8]
mov dword [rsp + 0x20], 0x9900
mov r9d, dword [rsp + 0x94]
mov r8d, 0x10
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov eax, dword [rsp + 0x10e8]
sub eax, 0x10
mov dword [rsp + 0x10e8], eax
mov eax, dword [rsp + 0x94]
add eax, 0x10
mov dword [rsp + 0x94], eax
jmp 0x1800bc960
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x990
cdqe
mov qword [rsp + 0x11128], rax
mov r8d, 0x10
mov edx, dword [rsp + 0x10e8]
lea rcx, [0x180023400]
call fcn.1800892c0
mov rcx, qword [rsp + 0x11160]
add rcx, 0x60
mov rax, qword [rsp + 0x11160]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11128]
call qword [rax + 8]
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x990
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov r8d, dword [rsp + 0x10e8]
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov ecx, dword [rsp + 0x10e8]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
jmp 0x1800bc965
jmp 0x1800bc80e
mov edx, dword [rsp + 0x94]
lea rcx, [0x180023390]
call fcn.1800892c0
mov rcx, qword [rsp + 0x11560]
add rcx, 0x3030
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x3030]
call qword [rax + 0x18]
mov qword [rsp + 0x114b8], rax
mov rax, qword [rsp + 0x114b8]
mov qword [rsp + 0x10b8], rax
cmp qword [rsp + 0x10b8], 0
je 0x1800bcd8b
mov rax, qword [rsp + 0x10b8]
movzx eax, byte [rax + 0x31]
cmp eax, 1
jne 0x1800bca2c
mov rcx, qword [rsp + 0x10b8]
call fcn.1800e3fe0
mov dword [rsp + 0x114c0], eax
mov r8, qword [rsp + 0x10b8]
mov r8, qword [r8 + 0x38]
mov edx, dword [rsp + 0x114c0]
lea rcx, [0x180023320]
call fcn.1800892c0
mov rax, qword [rsp + 0x10b8]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x112c0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112c0]
call fcn.1800ec370
mov rax, qword [rsp + 0x10b8]
mov eax, dword [rax + 0x44]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov rax, qword [rsp + 0x10b8]
mov r8d, dword [rax + 0x48]
mov rdx, qword [rsp + 0x10b8]
mov rdx, qword [rdx + 0x50]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov rax, qword [rsp + 0x10b8]
movzx eax, byte [rax + 0x30]
mov byte [rsp + 0x11118], al
mov rax, qword [rsp + 0x10b8]
mov ecx, dword [rax + 0x48]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
mov rax, qword [rsp + 0x10b8]
movsxd rcx, dword [rax + 0x48]
mov rax, qword [rsp + 0x20f0]
add rax, rcx
mov qword [rsp + 0x20f0], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x10e0], eax
cmp dword [rsp + 0x11588], 0
jbe 0x1800bcb2d
mov edx, dword [rsp + 0x11588]
imul edx, edx, 0x3e8
mov ecx, dword [rsp + 0x11130]
mov eax, dword [rsp + 0x10e0]
sub eax, ecx
cmp eax, edx
jbe 0x1800bcb2d
mov eax, dword [rsp + 0x10e0]
mov dword [rsp + 0x11130], eax
lea r9, [rsp + 0x20f0]
lea r8, [rsp + 0x20f8]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0xc
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
cmp dword [rsp + 0x11590], 0
jbe 0x1800bcc5f
mov eax, dword [rsp + 0x10d0]
add eax, 1
mov dword [rsp + 0x10d0], eax
cmp dword [rsp + 0x10d0], 8
jle 0x1800bcb8e
mov dword [rsp + 0x10d0], 0
lea rdi, [rsp + 0x11108]
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
mov r8d, 0xc
lea rdx, [rsp + 0x11108]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a6fe0
nop
mov edx, dword [rsp + 0x11590]
imul edx, edx, 0x3e8
mov ecx, dword [rsp + 0x1115c]
mov eax, dword [rsp + 0x10e0]
sub eax, ecx
cmp eax, edx
jbe 0x1800bcc5f
mov eax, dword [rsp + 0x10e0]
mov dword [rsp + 0x1115c], eax
movzx edi, byte [rsp + 0x1110f]
movzx edx, byte [rsp + 0x1110e]
shl edx, 8
movzx ecx, byte [rsp + 0x1110d]
shl ecx, 0x10
movzx eax, byte [rsp + 0x1110c]
shl eax, 0x18
or eax, ecx
or eax, edx
or eax, edi
mov dword [rsp + 0x11148], eax
movzx edi, byte [rsp + 0x11113]
movzx edx, byte [rsp + 0x11112]
shl edx, 8
movzx ecx, byte [rsp + 0x11111]
shl ecx, 0x10
movzx eax, byte [rsp + 0x11110]
shl eax, 0x18
or eax, ecx
or eax, edx
or eax, edi
mov dword [rsp + 0x11134], eax
lea r9, [rsp + 0x11134]
lea r8, [rsp + 0x11148]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0xd
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov rdx, qword [rsp + 0x10b8]
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x11cc0]
call fcn.1800a87b0
xor edx, edx
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1800bcd86
mov rax, qword [rsp + 0x11560]
movzx eax, byte [rax + 0x11cbe]
cmp eax, 1
jne 0x1800bcd86
mov rdx, qword [rsp + 0x20f0]
lea rcx, [0x1800232c0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x114e8], rax
mov rax, qword [rsp + 0x114e8]
mov qword [rsp + 0x112e8], rax
cmp qword [rsp + 0x112e8], 0
je 0x1800bcd36
mov rax, qword [rsp + 0x20f0]
mov qword [rsp + 0x20], rax
lea r9, [0x180023270]
xor r8d, r8d
mov edx, 0xe
mov rcx, qword [rsp + 0x112e8]
call fcn.18008d120
mov qword [rsp + 0x114f0], rax
mov rax, qword [rsp + 0x114f0]
mov qword [rsp + 0x114f8], rax
jmp 0x1800bcd42
mov qword [rsp + 0x114f8], 0
mov rax, qword [rsp + 0x114f8]
mov qword [rsp + 0x112e0], rax
mov rax, qword [rsp + 0x112e0]
mov qword [rsp + 0x11150], rax
mov rax, qword [rsp + 0x11150]
mov qword [rsp + 0x112f0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112f0]
call fcn.1800ec370
jmp 0x1800bc978
movzx eax, byte [rsp + 0x11118]
test eax, eax
jne 0x1800bcddc
lea rcx, [0x180023220]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x19
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov ecx, dword [0x18015e864]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800bc978
mov edx, dword [rsp + 0x94]
lea rcx, [0x1800231b0]
call fcn.1800892c0
mov dword [rsp + 0x10e8], 0x1a5e
lea rdi, [rsp + 0x2100]
xor eax, eax
mov ecx, 0xf000
rep stosb byte [rdi], al
cmp dword [rsp + 0x10e8], 0x10
jle 0x1800bcea2
mov qword [rsp + 0x11128], 0x9900
mov rcx, qword [rsp + 0x88]
add rcx, 0x60
mov rax, qword [rsp + 0x88]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11128]
call qword [rax + 8]
mov dword [rsp + 0x20], 0x9900
mov r9d, dword [rsp + 0x94]
mov r8d, 0x10
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov eax, dword [rsp + 0x10e8]
sub eax, 0x10
mov dword [rsp + 0x10e8], eax
mov eax, dword [rsp + 0x94]
add eax, 0x10
mov dword [rsp + 0x94], eax
jmp 0x1800bcf4c
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x990
cdqe
mov qword [rsp + 0x11128], rax
mov r8d, 0x10
mov edx, dword [rsp + 0x10e8]
lea rcx, [0x180023140]
call fcn.1800892c0
mov rcx, qword [rsp + 0x88]
add rcx, 0x60
mov rax, qword [rsp + 0x88]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11128]
call qword [rax + 8]
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x990
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov r8d, dword [rsp + 0x10e8]
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov ecx, dword [rsp + 0x10e8]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
jmp 0x1800bcf51
jmp 0x1800bcdfa
mov edx, dword [rsp + 0x94]
lea rcx, [0x1800230e0]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x29
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 8
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov rcx, qword [rsp + 0x11560]
call fcn.1800b3b50
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 9
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
nop
lea rcx, [rsp + 0x11178]
call fcn.18008cfd0
nop
cmp qword [rsp + 0x11140], 0
je 0x1800bd05e
mov rax, qword [rsp + 0x11140]
mov qword [rsp + 0x11368], rax
mov rax, qword [rsp + 0x11368]
mov qword [rsp + 0x11360], rax
cmp qword [rsp + 0x11360], 0
je 0x1800bd052
mov rax, qword [rsp + 0x11360]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x11360]
call qword [rax]
mov qword [rsp + 0x11528], rax
jmp 0x1800bd05e
mov qword [rsp + 0x11528], 0
cmp qword [rsp + 0x11160], 0
je 0x1800bd0c4
mov rax, qword [rsp + 0x11160]
mov qword [rsp + 0x11378], rax
mov rax, qword [rsp + 0x11378]
mov qword [rsp + 0x11370], rax
cmp qword [rsp + 0x11370], 0
je 0x1800bd0b8
mov rax, qword [rsp + 0x11370]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x11370]
call qword [rax]
mov qword [rsp + 0x11530], rax
jmp 0x1800bd0c4
mov qword [rsp + 0x11530], 0
cmp qword [rsp + 0x88], 0
je 0x1800bd12a
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x11388], rax
mov rax, qword [rsp + 0x11388]
mov qword [rsp + 0x11380], rax
cmp qword [rsp + 0x11380], 0
je 0x1800bd11e
mov rax, qword [rsp + 0x11380]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x11380]
call qword [rax]
mov qword [rsp + 0x11538], rax
jmp 0x1800bd12a
mov qword [rsp + 0x11538], 0
mov rcx, qword [rsp + 0x11560]
call fcn.1800b3070
lea rcx, [0x180023090]
call fcn.1800892c0
nop
lea rcx, [rsp + 0x70]
call fcn.18008d2a0
mov rcx, qword [rsp + 0x11540]
xor rcx, rsp
call fcn.1800eb430
add rsp, 0x11550
pop rdi
ret