Function at 0x1800943b0
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
movapd xmmword [rsp + 0xe0], xmm6
mov rax, qword [rcx]
cmp rax, 3
je 0x1800951e8
mov rdi, rdx
mov rsi, rcx
movabs r13, 0x7fffffffffffffff
lea rbx, [rcx + 8]
cmp rax, 2
cmovne rbx, rcx
cmp eax, 2
je 0x180094e5c
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x180095292
mov r14, qword [rsp + 0x30]
mov rcx, qword [0x18016cb98]
test rcx, rcx
jne 0x18009445c
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x180095292
mov rcx, qword [rsp + 0x30]
mov qword [0x18016cb98], rcx
test rcx, rcx
je 0x1800951e8
mov rax, r14
or rax, rcx
shr rax, 0x20
je 0x180094472
mov rax, r14
xor edx, edx
div rcx
jmp 0x180094479
mov eax, r14d
xor edx, edx
div ecx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x18009449d
xor edx, edx
div rcx
mov r15, rax
jmp 0x1800944a4
xor edx, edx
div ecx
mov r15d, eax
add r15, r8
mov rax, r15
shr rax, 9
movabs rcx, 0x44b82fa09b5a53
mul rcx
mov r14, rdx
mov r12, qword [rbx + 0x500]
lea rcx, [r12 + 0x10]
mov qword [rsp + 0x78], rcx
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x18016cbb8]
test rax, r13
jne 0x1800946e7
mov dword [rsp + 0x2c], 0
movzx eax, byte [r12 + 0x18]
test al, al
jne 0x1800951e8
mov rax, qword [rbx + 0x500]
mov rax, qword [rax]
mov qword [rsp + 0xb0], rax
mov r8d, dword [rbx + 0x4d8]
cmp r8d, 0x3b9aca00
je 0x1800947c1
movzx eax, byte [rbx + 0x4f9]
test rax, rax
je 0x18009454a
cmp eax, 1
je 0x18009453d
cmp dword [r12 + 0x38], 0x3b9aca00
je 0x18009455e
cmp al, 1
je 0x1800945d8
jmp 0x1800947c1
cmp qword [rsp + 0xb0], 2
ja 0x18009455e
cmp byte [rbx + 0x4f8], 0
je 0x18009453d
mov byte [rbx + 0x4f9], 1
mov eax, dword [r12 + 0x58]
cmp eax, 0x3b9aca00
je 0x1800951e8
mov rdx, qword [r12 + 0x50]
add rdx, qword [rbx + 0x4d0]
jb 0x1800951e8
add r8d, eax
cmp r8d, 0x3b9aca00
jb 0x1800945a3
inc rdx
je 0x1800951e8
add r8d, 0xc4653600
mov eax, r8d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r8d, eax
mov rcx, qword [rbx + 0x4f0]
call fcn.1800ebb70
movzx eax, byte [rbx + 0x4f9]
cmp al, 1
jne 0x1800947c1
mov rbp, qword [rbx + 0x4f0]
mov r13, qword [rdi]
mov rcx, rbp
mov rdx, r13
call fcn.1800eb9b0
test al, al
jne 0x1800947c1
mov eax, dword [r12 + 0x58]
cmp eax, 0x3b9aca00
je 0x1800951e8
mov rcx, qword [r12 + 0x50]
add rcx, qword [rbx + 0x4d0]
jb 0x1800951e8
add eax, dword [rbx + 0x4d8]
cmp eax, 0x3b9aca00
jb 0x180094632
inc rcx
je 0x1800951e8
add eax, 0xc4653600
mov rdx, qword [rbp + 0x10]
cmp rcx, rdx
jb 0x180094662
jne 0x180094961
mov ecx, eax
shr ecx, 9
imul rcx, rcx, 0x44b83
shr rcx, 0x27
imul ecx, ecx, 0x3b9aca00
sub eax, ecx
cmp eax, dword [rbp + 0x18]
ja 0x180094961
lea rcx, [r12 + 0x20]
call fcn.180035690
mov byte [rbx + 0x4f9], 2
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x180095292
mov r13, qword [rsp + 0x30]
mov rcx, qword [0x18016cb98]
test rcx, rcx
jne 0x1800946d1
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x180095292
mov rcx, qword [rsp + 0x30]
mov qword [0x18016cb98], rcx
test rcx, rcx
je 0x1800951e8
mov rax, r13
or rax, rcx
shr rax, 0x20
je 0x180094705
mov rax, r13
xor edx, edx
div rcx
jmp 0x18009470c
call fcn.18010ce00
xor al, 1
mov dword [rsp + 0x2c], eax
movzx eax, byte [r12 + 0x18]
test al, al
je 0x1800944fb
jmp 0x1800951e8
mov eax, r13d
xor edx, edx
div ecx
imul r9, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
movabs r10, 0x44b82fa09b5a53
je 0x18009473a
xor edx, edx
div rcx
mov r8, rax
jmp 0x180094741
xor edx, edx
div ecx
mov r8d, eax
add r8, r9
mov rcx, r8
shr rcx, 9
mov rax, rcx
mul r10
mov r9, rdx
shr r9, 0xb
add r9, qword [rbx + 0x4e0]
jb 0x1800951e8
mov rax, rcx
mul r10
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub r8d, eax
add r8d, dword [rbx + 0x4e8]
cmp r8d, 0x3b9aca00
jb 0x180094798
inc r9
je 0x1800951e8
add r8d, 0xc4653600
mov eax, r8d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r8d, eax
mov rcx, qword [rbx + 0x4f0]
mov rdx, r9
call fcn.1800ebb70
cmp dword [r12 + 0x38], 0x3b9aca00
jne 0x180094982
mov r15d, 2
cmp byte [rsp + 0x2c], 0
je 0x1800947e4
mov r14, qword [rsp + 0x78]
jmp 0x180094803
mov rax, qword [0x18016cbb8]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
mov r14, qword [rsp + 0x78]
jne 0x180095147
mov rcx, r14
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
test r15d, r15d
je 0x18009482d
mov bpl, 5
cmp r15d, 1
movabs r13, 0x7fffffffffffffff
je 0x180094f9e
jmp 0x180094e5c
mov r15, qword [rbx + 0x3f0]
lea r14, [r15 + 0x10]
mov rcx, r14
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x18016cbb8]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
jne 0x180095159
xor ebp, ebp
movzx eax, byte [r15 + 0x18]
test al, al
jne 0x1800951e8
mov ecx, dword [r15 + 0xb0]
mov eax, dword [r15 + 0x6c]
add eax, ecx
js 0x1800951e8
mov eax, r13d
sub eax, ecx
mov dword [r15 + 0x6c], eax
mov ecx, dword [r15 + 0x68]
sub eax, ecx
jle 0x1800948bc
mov edx, ecx
shr edx, 0x1f
add edx, ecx
sar edx, 1
cmp eax, edx
jl 0x1800948bc
mov rax, qword [r15 + 0x160]
mov rcx, qword [r15 + 0x168]
mov qword [r15 + 0x160], 0
test rax, rax
je 0x1800948bc
call qword [rax + 8]
test bpl, bpl
jne 0x1800948db
mov rax, qword [0x18016cbb8]
movabs rcx, 0x7fffffffffffffff
test rax, rcx
jne 0x18009520f
mov rcx, r14
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
cmp dword [rbx + 0x428], 2
jb 0x180094951
mov dword [rbx + 0x434], 0
mov dword [rbx + 0x43c], 0
mov dword [rbx + 0x444], 1
mov dword [rbx + 0x448], r13d
mov dword [rbx + 0x44c], 0
mov dword [rbx + 0x454], 0
mov dword [rbx + 0x45c], 0
mov byte [rbx + 0x464], 0
mov qword [rbx + 0x428], 0
movabs r13, 0x7fffffffffffffff
jmp 0x180094e5c
mov byte [rsp + 0xb9], 0xa
mov bpl, 3
jmp 0x180094f9e
mov byte [rbx + 0x4f9], 0
mov rax, qword [r13]
mov rcx, qword [r13 + 8]
call qword [rax + 0x10]
cmp dword [r12 + 0x38], 0x3b9aca00
je 0x1800947d0
mov r13, qword [r12 + 0x60]
mov rdx, qword [rdi]
lea rcx, [r13 + 0x30]
call fcn.18001bc00
xor ecx, ecx
mov eax, 3
lock cmpxchg qword [r13 + 0x10], rcx
cmp rax, 3
je 0x180094a30
cmp rax, 4
je 0x180094e30
cmp dword [rbx + 0x4d8], 0x3b9aca00
je 0x180094e30
cmp byte [rbx + 0x4f9], 2
jb 0x180094e30
mov rcx, qword [rbx + 0x4f0]
mov rdx, qword [rdi]
call fcn.1800eb9b0
test al, al
jne 0x180094e30
cmp dword [rbx + 0x4d8], 0x3b9aca00
je 0x180095251
mov r15, qword [rbx + 0x4f0]
mov rcx, r15
call fcn.1800e86b0
mov rcx, qword [r15 + 8]
mov rdx, qword [r15]
lock dec qword [rcx]
sete al
test rdx, rdx
je 0x180095226
test al, al
je 0x18009522f
call fcn.180036f20
jmp 0x18009522f
mov r8d, dword [r12 + 0x38]
cmp r8d, 0x3b9aca00
je 0x1800951e8
mov rbp, r14
shr rbp, 0xb
imul eax, ebp, 0x3b9aca00
sub r15d, eax
mov rdx, qword [r12 + 0x30]
mov dword [r12 + 0x38], 0x3b9aca00
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x38], r15d
lea rcx, [rsp + 0x30]
call fcn.1800d6740
mov r9, rax
mov r13d, edx
xor r14d, r14d
cmp edx, 0x3b9aca00
cmovne r14d, edx
cmp dword [rbx + 0x4d8], 0x3b9aca00
je 0x180094c48
mov r8d, 0x3b9aca00
cmp dword [r12 + 0x58], 0x3b9aca00
je 0x180094b99
mov qword [rsp + 0x70], r9
mov dword [rsp + 0x6c], r14d
mov r14, rbp
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceCounter]
test eax, eax
je 0x180095292
mov rbp, qword [rsp + 0x30]
mov rcx, qword [0x18016cb98]
test rcx, rcx
jne 0x180094b17
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x30]
call qword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
test eax, eax
je 0x180095292
mov rcx, qword [rsp + 0x30]
mov qword [0x18016cb98], rcx
test rcx, rcx
je 0x1800951e8
mov rax, rbp
or rax, rcx
shr rax, 0x20
je 0x180094b2d
mov rax, rbp
xor edx, edx
div rcx
jmp 0x180094b33
mov eax, ebp
xor edx, edx
div ecx
imul r9, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
mov rbp, r14
je 0x180094b5a
xor edx, edx
div rcx
mov r8, rax
jmp 0x180094b61
xor edx, edx
div ecx
mov r8d, eax
mov r14d, dword [rsp + 0x6c]
add r8, r9
mov rax, r8
shr rax, 9
movabs rcx, 0x44b82fa09b5a53
mul rcx
shr rdx, 0xb
imul eax, edx, 0x3b9aca00
sub r8d, eax
mov qword [r12 + 0x50], rdx
mov dword [r12 + 0x58], r8d
mov r9, qword [rsp + 0x70]
movzx eax, byte [rbx + 0x4f9]
test rax, rax
je 0x180094bbe
cmp eax, 1
je 0x180094c48
cmp dword [r12 + 0x38], 0x3b9aca00
je 0x180094bd2
jmp 0x180094c48
cmp qword [rsp + 0xb0], 2
ja 0x180094bd2
cmp byte [rbx + 0x4f8], 0
je 0x180094c48
mov byte [rbx + 0x4f9], 1
cmp r8d, 0x3b9aca00
je 0x1800951e8
mov rdx, qword [r12 + 0x50]
add rdx, qword [rbx + 0x4d0]
jb 0x1800951e8
add r8d, dword [rbx + 0x4d8]
cmp r8d, 0x3b9aca00
mov qword [rsp + 0x70], r9
jb 0x180094c1d
inc rdx
je 0x1800951e8
add r8d, 0xc4653600
mov eax, r8d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r8d, eax
mov rcx, qword [rbx + 0x4f0]
call fcn.1800ebb70
mov r9, qword [rsp + 0x70]
cmp dword [rbx + 0x4b0], 0x3b9aca00
je 0x180094e30
cmp qword [r12 + 0x20], 0
je 0x1800951e8
mov rcx, qword [r12 + 0x28]
mov qword [r12 + 0x20], 1
mov qword [r12 + 0x28], 0
mov eax, dword [rbx + 0x4c8]
cmp rax, 0x1000000
je 0x180094d67
movdqa xmm2, xmmword [0x180111bc0]
movapd xmm1, xmmword [0x180111bd0]
xorpd xmm0, xmm0
xorpd xmm3, xmm3
cmp r13d, 0x3b9aca00
je 0x180094cc7
movq xmm4, r9
punpckldq xmm4, xmm2
subpd xmm4, xmm1
movapd xmm3, xmm4
unpckhpd xmm3, xmm4
addsd xmm3, xmm4
mov edx, r14d
xorps xmm4, xmm4
cvtsi2sd xmm4, rdx
divsd xmm4, qword [0x180111be0]
addsd xmm4, xmm3
movsd xmm3, qword [rbx + 0x4b8]
movsd xmm5, qword [rbx + 0x4c0]
movapd xmm6, xmm4
subsd xmm6, xmm5
mulsd xmm6, qword [0x180111be8]
addsd xmm6, xmm5
cmpeqsd xmm0, xmm5
andpd xmm4, xmm0
andnpd xmm0, xmm6
orpd xmm0, xmm4
movlpd qword [rbx + 0x4c0], xmm0
movq xmm4, rcx
punpckldq xmm4, xmm2
subpd xmm4, xmm1
movapd xmm1, xmm4
unpckhpd xmm1, xmm4
mulsd xmm0, qword [0x180111bf0]
addsd xmm1, xmm4
divsd xmm1, xmm0
ucomisd xmm3, xmm1
ja 0x180094d67
movsd qword [rbx + 0x4b8], xmm1
add rax, rax
movabs rdx, 0x5555555555555556
mul rdx
cmp rdx, rcx
jbe 0x180095173
mov rax, qword [rbx + 0x4a8]
cmp rax, 9
ja 0x180094dd6
mov ecx, dword [rbx + 0x4cc]
inc ecx
mov dword [rbx + 0x4cc], ecx
cmp ecx, 2
jb 0x180094dd6
mov ecx, dword [rbx + 0x4b0]
imul rdx, rcx, 0x44b82fa1
shr rdx, 0x3a
lea ecx, [rcx*4]
mov r8d, ecx
shr r8d, 9
imul r8, r8, 0x44b83
shr r8, 0x27
imul r8d, r8d, 0x3b9aca00
sub ecx, r8d
lea rax, [rdx + rax*4]
mov qword [rbx + 0x4a8], rax
mov dword [rbx + 0x4b0], ecx
mov dword [rbx + 0x4cc], 0
xor ecx, ecx
add rbp, rax
jb 0x1800951e8
add r15d, dword [rbx + 0x4b0]
cmp r15d, 0x3b9aca00
jb 0x180094e01
inc rbp
je 0x1800951e8
add r15d, 0xc4653600
mov eax, r15d
shr eax, 9
imul rax, rax, 0x44b83
shr rax, 0x27
imul eax, eax, 0x3b9aca00
sub r15d, eax
mov qword [r12 + 0x40], rbp
mov dword [r12 + 0x48], r15d
xor r15d, r15d
test cl, cl
jne 0x1800947d6
cmp byte [rsp + 0x2c], 0
movabs r13, 0x7fffffffffffffff
jne 0x180094e51
mov rax, qword [0x18016cbb8]
test rax, r13
jne 0x1800951ec
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
mov r15, qword [rbx + 0x3f0]
lea r14, [r15 + 0x10]
mov rcx, r14
call qword [sym.imp.kernel32.dll_AcquireSRWLockExclusive]
mov rax, qword [0x18016cbb8]
test rax, r13
jne 0x180095117
xor eax, eax
movzx ecx, byte [r15 + 0x18]
test cl, cl
jne 0x1800951e8
mov rcx, qword [r15 + 0x178]
mov bpl, 1
or rcx, qword [r15 + 0x188]
jne 0x180094eae
cmp qword [r15 + 0x228], 2
setae bpl
test al, al
jne 0x180094ec2
mov rax, qword [0x18016cbb8]
test rax, r13
jne 0x180095130
mov rcx, r14
call qword [sym.imp.kernel32.dll_ReleaseSRWLockExclusive]
test bpl, bpl
jne 0x180094f24
lea rax, [rbx + 0x3e8]
lea rcx, [rbx + 0x390]
lea rdx, [rbx + 0x400]
lea r8, [rbx + 0x3c8]
mov r9, qword [rbx + 0x3f8]
add r9, 0x10
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r9
mov byte [rsp + 0x60], 0
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x48], r8
lea rcx, [rsp + 0x30]
call fcn.180096840
lea rcx, [rsp + 0x80]
mov rdx, rbx
mov r8, rdi
call fcn.1800969c0
movzx eax, byte [rsp + 0x80]
cmp eax, 3
je 0x180094f9b
cmp eax, 4
je 0x180094f94
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x50], rax
movupd xmm0, xmmword [rsp + 0x80]
movupd xmm1, xmmword [rsp + 0x90]
movapd xmmword [rsp + 0x40], xmm1
movapd xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0xb8]
lea rdx, [rsp + 0x30]
call fcn.180020ba0
movzx ebp, byte [rsp + 0xb8]
cmp bpl, 6
jne 0x180094f9e
mov al, 2
jmp 0x1800950fb
mov bpl, 5
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x9f], rax
movzx eax, byte [rsp + 0xb9]
mov rcx, qword [rsp + 0xba]
mov edx, dword [rsp + 0xc2]
movzx r8d, word [rsp + 0xc6]
movzx r9d, byte [rsp + 0xc8]
movupd xmm0, xmmword [rsp + 0xc9]
movapd xmmword [rsp + 0x90], xmm0
mov byte [rsp + 0x80], al
mov qword [rsp + 0x81], rcx
mov dword [rsp + 0x89], edx
mov word [rsp + 0x8d], r8w
mov byte [rsp + 0x8f], r9b
cmp dword [rsi], 3
je 0x18009529b
mov rcx, rsi
call fcn.1800952b0
mov qword [rsi], 3
cmp bpl, 5
je 0x1800950f4
mov byte [rsp + 0x30], bpl
movapd xmm0, xmmword [rsp + 0x80]
movapd xmm1, xmmword [rsp + 0x90]
movupd xmmword [rsp + 0x31], xmm0
movupd xmmword [rsp + 0x41], xmm1
mov rax, qword [rsp + 0x9f]
mov qword [rsp + 0x50], rax
movzx eax, bpl
lea ecx, [rax - 2]
cmp ecx, 2
jb 0x1800950f4
test eax, eax
je 0x1800950f4
cmp eax, 1
jne 0x180095094
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
call qword [rax + 0x10]
jmp 0x1800950f4
mov rax, qword [rsp + 0x38]
mov ecx, eax
and ecx, 3
lea rdx, [rcx - 2]
cmp rdx, 2
jb 0x1800950f4
test rcx, rcx
je 0x1800950f4
lea rsi, [rax - 1]
mov rdi, qword [rax - 1]
mov rbx, qword [rax + 7]
mov rcx, rdi
call qword [rbx]
cmp qword [rbx + 8], 0
je 0x1800950e2
cmp qword [rbx + 0x10], 0x11
jb 0x1800950d0
mov rdi, qword [rdi - 8]
mov rcx, qword [0x18016cb80]
xor edx, edx
mov r8, rdi
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [0x18016cb80]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
cmp bpl, 5
setne al
movaps xmm6, xmmword [rsp + 0xe0]
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.18010ce00
xor al, 1
movzx ecx, byte [r15 + 0x18]
test cl, cl
je 0x180094e8f
jmp 0x1800951e8
call fcn.18010ce00
test al, al
jne 0x180094ec2
mov byte [r15 + 0x18], 1
jmp 0x180094ec2
call fcn.18010ce00
test al, al
jne 0x180094803
jmp 0x180095204
call fcn.18010ce00
mov ebp, eax
xor bpl, 1
movzx eax, byte [r15 + 0x18]
test al, al
je 0x18009486a
jmp 0x1800951e8
add rcx, rcx
cmp rcx, 0x1000000
mov r13d, 0x1000000
cmovb r13, rcx
mov dword [rbx + 0x4c8], r13d
mov dword [rbx + 0x4cc], 0
mov rcx, qword [rbx + 0x4a8]
mov rax, rcx
shr rax, 1
mov edx, dword [rbx + 0x4b0]
shr edx, 1
lea r8d, [rdx + 0x1dcd6500]
test cl, 1
cmove r8d, edx
imul rcx, r8, 0x44b82fa1
shr rcx, 0x3c
imul ecx, ecx, 0x3b9aca00
sub r8d, ecx
mov qword [rbx + 0x4a8], rax
mov dword [rbx + 0x4b0], r8d
mov cl, 1
add rbp, rax
jae 0x180094de1
ud2
call fcn.18010ce00
test al, al
jne 0x180094e51
mov r15d, 2
mov r14, qword [rsp + 0x78]
mov byte [r12 + 0x18], 1
jmp 0x180094803
call fcn.18010ce00
test al, al
jne 0x1800948db
mov byte [r15 + 0x18], 1
jmp 0x1800948db
test al, al
je 0x18009522f
call fcn.1800053f0
mov rax, qword [r15 + 0x48]
test rax, rax
je 0x18009523f
mov rcx, qword [r15 + 0x50]
call qword [rax + 0x18]
mov rcx, qword [0x18016cb80]
xor edx, edx
mov r8, r15
call qword [sym.imp.kernel32.dll_HeapFree]
mov dword [rbx + 0x4d8], 0x3b9aca00
movupd xmm0, xmmword [rsp + 0x30]
movupd xmm1, xmmword [rsp + 0x40]
movupd xmmword [rbx + 0x4dc], xmm0
movupd xmmword [rbx + 0x4ec], xmm1
mov eax, dword [rsp + 0x50]
mov dword [rbx + 0x4fc], eax
mov byte [r12 + 0x68], 1
mov r15d, 1
jmp 0x1800947d6
call sub.kernel32.dll_GetLastError
ud2
mov qword [rsi], 3
ud2