Function at 0x140005870
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x2d70
call fcn.1402292f0
sub rsp, rax
mov rax, qword [0x140264040]
xor rax, rsp
mov qword [rsp + 0x2d60], rax
lea rax, str.tkSvfwPCMY
mov qword [rsp + 0x150], rax
lea r9, str.Ficha_AGFnMwg
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rsp + 0x148], rax
cmp qword [rsp + 0x148], 0
je 0x140006c6a
mov edx, 0x117
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
lea rdx, str.MJPNzYaJSP__d
lea rcx, [rsp + 0x2960]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x2960]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x140], eax
mov dword [rsp + 0x2c], 0
jmp 0x14000592c
mov eax, dword [rsp + 0x2c]
inc eax
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x140]
cmp dword [rsp + 0x2c], eax
jge 0x140006c5b
cmp dword [rsp + 0x2c], 3
jle 0x140005949
jmp 0x140006c5b
movsxd rax, dword [rsp + 0x2c]
movzx eax, word [rsp + rax*2 + 0x2960]
cmp eax, 0x72
jl 0x14000598f
movsxd rax, dword [rsp + 0x2c]
movzx eax, word [rsp + rax*2 + 0x2960]
cmp eax, 0x53
jg 0x14000598f
movsxd rax, dword [rsp + 0x2c]
movzx eax, word [rsp + rax*2 + 0x2960]
add eax, 0x20
movsxd rcx, dword [rsp + 0x2c]
mov word [rsp + rcx*2 + 0x2960], ax
jmp 0x140006c56
movsxd rax, dword [rsp + 0x2c]
movzx eax, word [rsp + rax*2 + 0x2960]
cmp eax, 0x4a
jl 0x140006c56
movsxd rax, dword [rsp + 0x2c]
movzx eax, word [rsp + rax*2 + 0x2960]
cmp eax, 0x65
jg 0x140006c56
movsxd rax, dword [rsp + 0x2c]
movzx eax, word [rsp + rax*2 + 0x2960]
sub eax, 0x20
movsxd rcx, dword [rsp + 0x2c]
mov word [rsp + rcx*2 + 0x2960], ax
mov dword [rsp + 0x160], 0xfc0e
mov dword [rsp + 0x164], 0x1106d
mov dword [rsp + 0x168], 0xce7d
mov dword [rsp + 0x16c], 0x61f9
mov dword [rsp + 0x170], 0x1b55
mov dword [rsp + 0x174], 0x1467d
mov dword [rsp + 0x178], 0x9bc7
mov dword [rsp + 0x17c], 0xaaa3
mov dword [rsp + 0x180], 0x423c
mov dword [rsp + 0x184], 0xfe36
mov dword [rsp + 0x188], 0x1870
mov dword [rsp + 0x18c], 0x17c7b
mov dword [rsp + 0x190], 0x4253
mov dword [rsp + 0x194], 0xaea3
mov dword [rsp + 0x198], 0x22a0
mov dword [rsp + 0x19c], 0x16dda
mov dword [rsp + 0x1a0], 0x12f49
mov dword [rsp + 0x1a4], 0x142f1
mov dword [rsp + 0x1a8], 0x10f00
mov dword [rsp + 0x1ac], 0x182e2
mov dword [rsp + 0x1b0], 0x7849
mov dword [rsp + 0x1b4], 0x14a05
mov dword [rsp + 0x1b8], 0xb800
mov dword [rsp + 0x1bc], 0x16f84
mov dword [rsp + 0x1c0], 0xab95
mov dword [rsp + 0x1c4], 0x2106
mov dword [rsp + 0x1c8], 0xeddd
mov dword [rsp + 0x1cc], 0x13c42
mov dword [rsp + 0x1d0], 0x48ba
mov dword [rsp + 0x1d4], 0x1077d
mov dword [rsp + 0x1d8], 0x35c1
mov dword [rsp + 0x1dc], 0xc60
mov dword [rsp + 0x1e0], 0x4499
mov dword [rsp + 0x1e4], 0xe1a8
mov dword [rsp + 0x1e8], 0x13a12
mov dword [rsp + 0x1ec], 0x16b62
mov dword [rsp + 0x1f0], 0x7525
mov dword [rsp + 0x1f4], 0x17323
mov dword [rsp + 0x1f8], 0x12e0b
mov dword [rsp + 0x1fc], 0x123eb
mov dword [rsp + 0x200], 0x2cff
mov dword [rsp + 0x204], SafeArrayAccessData
mov dword [rsp + 0x208], 0x2aea
mov dword [rsp + 0x20c], 0x3aed
mov dword [rsp + 0x210], 0x156db
mov dword [rsp + 0x214], 0x10519
mov dword [rsp + 0x218], 0xae9f
mov dword [rsp + 0x21c], 0x18341
mov dword [rsp + 0x220], 0xc0b2
mov dword [rsp + 0x224], 0x10700
mov dword [rsp + 0x228], 0x6db5
mov dword [rsp + 0x22c], 0xe7b1
mov dword [rsp + 0x230], 0x3831
mov dword [rsp + 0x234], 0xc405
mov dword [rsp + 0x238], 0xeee3
mov dword [rsp + 0x23c], 0x632f
mov dword [rsp + 0x240], 0x11dd4
mov dword [rsp + 0x244], 0x8b98
mov dword [rsp + 0x248], 0x13cdb
mov dword [rsp + 0x24c], 0x12b19
mov dword [rsp + 0x250], 0x16963
mov dword [rsp + 0x254], 0x145ab
mov dword [rsp + 0x258], 0x164f2
mov dword [rsp + 0x25c], 0xeabe
mov dword [rsp + 0x260], 0xcf2f
mov dword [rsp + 0x264], 0x1149
mov dword [rsp + 0x268], 0xb07f
mov dword [rsp + 0x26c], 0xbdf
mov dword [rsp + 0x270], 0xb26b
mov dword [rsp + 0x274], 0x15419
mov dword [rsp + 0x278], 0xf749
mov dword [rsp + 0x27c], 0xeb9c
mov dword [rsp + 0x280], 0xd525
mov dword [rsp + 0x284], 0xbcaa
mov dword [rsp + 0x288], 0x3eb1
mov dword [rsp + 0x28c], 0x10bbc
mov dword [rsp + 0x290], 0x4f86
mov dword [rsp + 0x294], 0xb78a
mov dword [rsp + 0x298], 0x9a8f
mov dword [rsp + 0x29c], 0x17073
mov dword [rsp + 0x2a0], 0xaa27
mov dword [rsp + 0x2a4], 0xd97a
mov dword [rsp + 0x2a8], 0x58fc
mov dword [rsp + 0x2ac], 0xedf8
mov dword [rsp + 0x2b0], 0x8209
mov dword [rsp + 0x2b4], 0xf676
mov dword [rsp + 0x2b8], 0x393a
mov dword [rsp + 0x2bc], 0x9f3e
mov dword [rsp + 0x2c0], 0x128c9
mov dword [rsp + 0x2c4], 0xb335
mov dword [rsp + 0x2c8], 0x5ad8
mov dword [rsp + 0x2cc], 0xf2c8
mov dword [rsp + 0x2d0], 0x12c0c
mov dword [rsp + 0x2d4], 0xea83
mov dword [rsp + 0x2d8], 0x158b1
mov dword [rsp + 0x2dc], 0xbf73
mov dword [rsp + 0x2e0], 0x4e18
mov dword [rsp + 0x2e4], 0xf919
mov dword [rsp + 0x2e8], 0xc606
mov dword [rsp + 0x2ec], 0x9398
mov dword [rsp + 0x2f0], 0x185e7
mov dword [rsp + 0x2f4], 0x1254c
mov dword [rsp + 0x2f8], 0x6a88
mov dword [rsp + 0x2fc], 0x80c2
mov dword [rsp + 0x300], 0x57d9
mov dword [rsp + 0x304], 0x3dc3
mov dword [rsp + 0x308], 0x32bf
mov dword [rsp + 0x30c], 0x4c75
mov dword [rsp + 0x310], 0x2661
mov dword [rsp + 0x314], 0x984c
mov dword [rsp + 0x318], 0x14bdf
mov dword [rsp + 0x31c], 0xc225
mov dword [rsp + 0x320], 0x17f61
mov dword [rsp + 0x324], 0xb6d6
mov dword [rsp + 0x328], 0x155d
mov dword [rsp + 0x32c], 0x8a7b
mov dword [rsp + 0x330], 0x14c1e
mov dword [rsp + 0x334], 0x7869
mov dword [rsp + 0x338], 0x12b5a
mov dword [rsp + 0x33c], 0x8a47
mov dword [rsp + 0x340], 0x5d28
mov dword [rsp + 0x344], 0xe82d
mov dword [rsp + 0x348], 0x174cd
mov dword [rsp + 0x34c], 0x12056
mov dword [rsp + 0x350], 0x6056
mov dword [rsp + 0x354], 0x13e5c
mov dword [rsp + 0x358], 0x1596
mov dword [rsp + 0x35c], 0x6020
mov dword [rsp + 0x360], 0xeceb
mov dword [rsp + 0x364], 0x11458
mov dword [rsp + 0x368], 0xd695
mov dword [rsp + 0x36c], 0xb251
mov dword [rsp + 0x370], 0x632d
mov dword [rsp + 0x374], 0x7bf9
mov dword [rsp + 0x378], 0x8057
mov dword [rsp + 0x37c], 0x3b64
mov dword [rsp + 0x380], 0xe102
mov dword [rsp + 0x384], 0xa488
mov dword [rsp + 0x388], 0x4c62
mov dword [rsp + 0x38c], 0x67e9
mov dword [rsp + 0x390], 0x9a9
mov dword [rsp + 0x394], 0xb2b7
mov dword [rsp + 0x398], 0x10960
mov dword [rsp + 0x39c], 0x6550
mov dword [rsp + 0x3a0], 0x2db3
mov dword [rsp + 0x3a4], 0xcc19
mov dword [rsp + 0x3a8], 0x57f4
mov dword [rsp + 0x3ac], 0x4ea8
mov dword [rsp + 0x3b0], 0xf721
mov dword [rsp + 0x3b4], 0x7db
mov dword [rsp + 0x3b8], 0x201
mov dword [rsp + 0x3bc], 0x5b9e
mov dword [rsp + 0x3c0], 0xdd95
mov dword [rsp + 0x3c4], 0x59
mov dword [rsp + 0x3c8], 0x73fe
mov dword [rsp + 0x3cc], 0x4f4
mov dword [rsp + 0x3d0], 0x674b
mov dword [rsp + 0x3d4], 0xbd7e
mov dword [rsp + 0x3d8], 0x419b
mov dword [rsp + 0x3dc], 0x13f9
mov dword [rsp + 0x3e0], 0xe42a
mov dword [rsp + 0x3e4], 0xfdd6
mov dword [rsp + 0x3e8], 0xd493
mov dword [rsp + 0x3ec], 0x16f5e
mov dword [rsp + 0x3f0], 0xab03
mov dword [rsp + 0x3f4], 0x31e9
mov dword [rsp + 0x3f8], 0x4f40
mov dword [rsp + 0x3fc], 0xff64
mov dword [rsp + 0x400], 0x105e1
mov dword [rsp + 0x404], 0x12c0b
mov dword [rsp + 0x408], 0x12f65
mov dword [rsp + 0x40c], 0x14637
mov dword [rsp + 0x410], 0x221e
mov dword [rsp + 0x414], 0x17b7a
mov dword [rsp + 0x418], 0x8c3f
mov dword [rsp + 0x41c], 0xadd7
mov dword [rsp + 0x420], 0x13d79
mov dword [rsp + 0x424], 0xcdc6
mov dword [rsp + 0x428], 0x7d95
mov dword [rsp + 0x42c], 0xf852
mov dword [rsp + 0x430], 0x114e9
mov dword [rsp + 0x434], 0x17e24
mov dword [rsp + 0x438], 0x8bca
mov dword [rsp + 0x43c], 0x468e
mov dword [rsp + 0x440], 0x9a2b
mov dword [rsp + 0x444], 0x17c72
mov dword [rsp + 0x448], 0x89e2
mov dword [rsp + 0x44c], 0x11147
mov dword [rsp + 0x450], 0x88c9
mov dword [rsp + 0x454], 0x3726
mov dword [rsp + 0x458], 0x17102
mov dword [rsp + 0x45c], 0x91a3
mov dword [rsp + 0x460], 0x8ddc
mov dword [rsp + 0x464], 0xcab4
mov dword [rsp + 0x468], 0xf56f
mov dword [rsp + 0x46c], 0x11de5
mov dword [rsp + 0x470], 0xfabc
mov dword [rsp + 0x474], 0x7d6c
mov dword [rsp + 0x478], 0x151e1
mov dword [rsp + 0x47c], 0x6ad2
mov dword [rsp + 0x480], 0x1765b
mov dword [rsp + 0x484], 0x13175
mov dword [rsp + 0x488], 0xe3be
mov dword [rsp + 0x48c], 0x3def
mov dword [rsp + 0x490], 0x149c4
mov dword [rsp + 0x494], 0xb775
mov dword [rsp + 0x498], 0x151d2
mov dword [rsp + 0x49c], 0x113f4
mov dword [rsp + 0x4a0], 0x15e11
mov dword [rsp + 0x4a4], 0x310d
mov dword [rsp + 0x4a8], 0x3f50
mov dword [rsp + 0x4ac], 0xbbe3
mov dword [rsp + 0x4b0], 0x1115b
mov dword [rsp + 0x4b4], 0x610e
mov dword [rsp + 0x4b8], 0x11174
mov dword [rsp + 0x4bc], 0x15620
mov dword [rsp + 0x4c0], 0x12304
mov dword [rsp + 0x4c4], 0xae8b
mov dword [rsp + 0x4c8], 0x17f85
mov dword [rsp + 0x4cc], 0x7451
mov dword [rsp + 0x4d0], 0xb2c7
mov dword [rsp + 0x4d4], 0x13e4d
mov dword [rsp + 0x4d8], 0x8e4f
mov dword [rsp + 0x4dc], 0x13855
mov dword [rsp + 0x4e0], 0xa05e
mov dword [rsp + 0x4e4], 0xeedd
mov dword [rsp + 0x4e8], 0x5640
mov dword [rsp + 0x4ec], 0x5f69
mov dword [rsp + 0x4f0], 0x94e2
mov dword [rsp + 0x4f4], 0x58df
mov dword [rsp + 0x4f8], 0x779d
mov dword [rsp + 0x4fc], 0x23c3
mov dword [rsp + 0x500], 0x16380
mov dword [rsp + 0x504], 0xd9f7
mov dword [rsp + 0x508], 0x1321d
mov dword [rsp + 0x50c], 0x17846
mov dword [rsp + 0x510], 0x13862
mov dword [rsp + 0x514], 0x6eec
mov dword [rsp + 0x518], 0x1140b
mov dword [rsp + 0x51c], 0x4cb6
mov dword [rsp + 0x520], 0xc734
mov dword [rsp + 0x524], 0x1426e
mov dword [rsp + 0x528], 0xe2b9
mov dword [rsp + 0x52c], 0x131da
mov dword [rsp + 0x530], 0xbfa2
mov dword [rsp + 0x534], 0x111f8
mov dword [rsp + 0x538], 0x5526
mov dword [rsp + 0x53c], 0xc431
mov dword [rsp + 0x540], 0xf857
mov dword [rsp + 0x544], 0x16c2a
mov dword [rsp + 0x548], 0x15430
mov dword [rsp + 0x54c], 0xf534
mov dword [rsp + 0x550], 0xa137
mov dword [rsp + 0x554], 0x17a09
mov dword [rsp + 0x558], 0x60d1
mov dword [rsp + 0x55c], 0x11d34
mov dword [rsp + 0x560], 0x9b9
mov dword [rsp + 0x564], 0x12a3f
mov dword [rsp + 0x568], 0x25f0
mov dword [rsp + 0x56c], 0x1c12
mov dword [rsp + 0x570], 0x10abf
mov dword [rsp + 0x574], 0xf9c3
mov dword [rsp + 0x578], 0x1685e
mov dword [rsp + 0x57c], 0x5ae3
mov dword [rsp + 0x580], 0x13e4a
mov dword [rsp + 0x584], 0x1381b
mov dword [rsp + 0x588], 0x113ea
mov dword [rsp + 0x58c], 0x9c42
mov dword [rsp + 0x590], 0x51c6
mov dword [rsp + 0x594], 0x163fc
mov dword [rsp + 0x598], 0x36e9
mov dword [rsp + 0x59c], 0x17913
mov dword [rsp + 0x5a0], 0x6d54
mov dword [rsp + 0x5a4], 0x11f5c
mov dword [rsp + 0x5a8], 0x65dc
mov dword [rsp + 0x5ac], 0xab15
mov dword [rsp + 0x5b0], 0x236e
mov dword [rsp + 0x5b4], 0x5435
mov dword [rsp + 0x5b8], 0xbcb
mov dword [rsp + 0x5bc], 0x15185
mov dword [rsp + 0x5c0], 0x16a8e
mov dword [rsp + 0x5c4], 0x22b6
mov dword [rsp + 0x5c8], 0x419
mov dword [rsp + 0x5cc], 0xe20
mov dword [rsp + 0x5d0], 0xd969
mov dword [rsp + 0x5d4], 0x657a
mov dword [rsp + 0x5d8], 0x14e70
mov dword [rsp + 0x5dc], 0x10242
mov dword [rsp + 0x5e0], 0x943d
mov dword [rsp + 0x5e4], 0xc0de
mov dword [rsp + 0x5e8], 0xb673
mov dword [rsp + 0x5ec], 0xc909
mov dword [rsp + 0x5f0], 0x796f
mov dword [rsp + 0x5f4], 0xb11b
mov dword [rsp + 0x5f8], 0x202b
mov dword [rsp + 0x5fc], 0x13c78
mov dword [rsp + 0x600], 0x4442
mov dword [rsp + 0x604], 0xbff7
mov dword [rsp + 0x608], 0x134c1
mov dword [rsp + 0x60c], 0x105f3
mov dword [rsp + 0x610], 0x1686b
mov dword [rsp + 0x614], 0x1134f
mov dword [rsp + 0x618], 0x12e14
mov dword [rsp + 0x61c], 0x4b7
mov dword [rsp + 0x620], 0xb75a
mov dword [rsp + 0x624], 0x3941
mov dword [rsp + 0x628], 0x8cc1
mov dword [rsp + 0x62c], 0x12233
mov dword [rsp + 0x630], 0x108b9
mov dword [rsp + 0x634], 0x497c
mov dword [rsp + 0x638], 0x11e2d
mov dword [rsp + 0x63c], 0xfbcb
mov dword [rsp + 0x640], 0x2c21
mov dword [rsp + 0x644], 0x15924
mov dword [rsp + 0x648], 0x3ed3
mov dword [rsp + 0x64c], 0x524
mov dword [rsp + 0x650], 0x7062
mov dword [rsp + 0x654], 0x1005
mov dword [rsp + 0x658], 0x6818
mov dword [rsp + 0x65c], 0x346
mov dword [rsp + 0x660], 0x166da
mov dword [rsp + 0x664], 0x2991
mov dword [rsp + 0x668], 0x11c20
mov dword [rsp + 0x66c], 0x184a3
mov dword [rsp + 0x670], 0x17660
mov dword [rsp + 0x674], 0x69ab
mov dword [rsp + 0x678], 0x6caa
mov dword [rsp + 0x67c], 0x8d1b
mov dword [rsp + 0x680], 0x8e37
mov dword [rsp + 0x684], 0x57c0
mov dword [rsp + 0x688], 0xc1c8
mov dword [rsp + 0x68c], 0x6c70
mov dword [rsp + 0x690], 0x9bc9
mov dword [rsp + 0x694], 0x13251
mov dword [rsp + 0x698], 0x14fad
mov dword [rsp + 0x69c], 0x10dac
mov dword [rsp + 0x6a0], 0x74b3
mov dword [rsp + 0x6a4], 0x3eeb
mov dword [rsp + 0x6a8], 0x8a42
mov dword [rsp + 0x6ac], 0x17524
mov dword [rsp + 0x6b0], 0x1634f
mov dword [rsp + 0x6b4], 0x4cba
mov dword [rsp + 0x6b8], 0xacd0
mov dword [rsp + 0x6bc], 0xf809
mov dword [rsp + 0x6c0], 0xf19
mov dword [rsp + 0x6c4], 0x24d7
mov dword [rsp + 0x6c8], 0x17406
mov dword [rsp + 0x6cc], 0xa9f7
mov dword [rsp + 0x6d0], 0x12006
mov dword [rsp + 0x6d4], 0x6a13
mov dword [rsp + 0x6d8], 0x174b0
mov dword [rsp + 0x6dc], 0xa21f
mov dword [rsp + 0x6e0], 0x149c4
mov dword [rsp + 0x6e4], 0x4813
mov dword [rsp + 0x6e8], 0xa7e1
mov dword [rsp + 0x6ec], 0x2a56
mov dword [rsp + 0x6f0], 0x1a24
mov dword [rsp + 0x6f4], 0x176af
mov dword [rsp + 0x6f8], 0x1021f
mov dword [rsp + 0x6fc], 0x7aac
mov dword [rsp + 0x700], 0xe9c1
mov dword [rsp + 0x704], 0x16813
mov dword [rsp + 0x708], 0x4a4c
mov dword [rsp + 0x70c], 0xd62a
mov dword [rsp + 0x710], 0x14103
mov dword [rsp + 0x714], 0x17eed
mov dword [rsp + 0x718], 0x1127a
mov dword [rsp + 0x71c], 0xa44b
mov dword [rsp + 0x720], 0x4bd6
mov dword [rsp + 0x724], 0x1317b
mov dword [rsp + 0x728], 0x86e9
mov dword [rsp + 0x72c], 0x6853
mov dword [rsp + 0x730], 0xb7b6
mov dword [rsp + 0x734], 0x454a
mov dword [rsp + 0x738], 0x4675
mov dword [rsp + 0x73c], 0x9c7e
mov dword [rsp + 0x740], 0xe06
mov dword [rsp + 0x744], 0x15dd2
mov dword [rsp + 0x748], 0x2c03
mov dword [rsp + 0x74c], 0xbcef
mov dword [rsp + 0x750], 0x568f
mov dword [rsp + 0x754], 0x4dea
mov dword [rsp + 0x758], 0x10315
mov dword [rsp + 0x75c], 0x10c6d
mov dword [rsp + 0x760], 0xa7b6
mov dword [rsp + 0x764], 0x10e9b
mov dword [rsp + 0x768], 0x15391
mov dword [rsp + 0x76c], 0xcc81
mov dword [rsp + 0x770], 0x14069
mov dword [rsp + 0x774], 0x13c8a
mov dword [rsp + 0x778], 0x68f2
mov dword [rsp + 0x77c], 0x17e56
mov dword [rsp + 0x780], 0x1110c
mov dword [rsp + 0x784], 0x17a27
mov dword [rsp + 0x788], 0xdcfb
mov dword [rsp + 0x78c], 0x129d4
mov dword [rsp + 0x790], 0xf2e
mov dword [rsp + 0x794], 0xb026
mov dword [rsp + 0x798], 0xa1d0
mov dword [rsp + 0x79c], 0x11ddc
mov dword [rsp + 0x7a0], 0x6c0
mov dword [rsp + 0x7a4], 0x106ec
mov dword [rsp + 0x7a8], 0x14e27
mov dword [rsp + 0x7ac], 0x54a5
mov dword [rsp + 0x7b0], 0x15764
mov dword [rsp + 0x7b4], 0x1229
mov dword [rsp + 0x7b8], 0x7e93
mov dword [rsp + 0x7bc], 0x3294
mov dword [rsp + 0x7c0], 0x122d
mov dword [rsp + 0x7c4], 0xf688
mov dword [rsp + 0x7c8], 0x353e
mov dword [rsp + 0x7cc], 0xf98
mov dword [rsp + 0x7d0], 0x7da1
mov dword [rsp + 0x7d4], 0x26d4
mov dword [rsp + 0x7d8], 0x4a6f
mov dword [rsp + 0x7dc], 0xded4
mov dword [rsp + 0x7e0], 0x13681
mov dword [rsp + 0x7e4], 0xb6fc
mov dword [rsp + 0x7e8], 0x12dd9
mov dword [rsp + 0x7ec], 0xa356
mov dword [rsp + 0x7f0], 0x108af
mov dword [rsp + 0x7f4], 0xa46c
mov dword [rsp + 0x7f8], 0xc62e
mov dword [rsp + 0x7fc], 0x11f63
mov dword [rsp + 0x44], 0
jmp 0x140006c24
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
movsxd rax, dword [rsp + 0x44]
cmp rax, 0x1a8
jae 0x140006c56
movsxd rax, dword [rsp + 0x44]
mov ecx, 0x1a8
sub rcx, rax
mov rax, rcx
movsxd rcx, dword [rsp + 0x44]
mov eax, dword [rsp + rax*4 + 0x160]
mov dword [rsp + rcx*4 + 0x160], eax
jmp 0x140006c1a
jmp 0x140005922
mov rcx, qword [rsp + 0x148]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x800], rax
mov qword [rsp + 0x138], 0xffffffffffffffff
inc qword [rsp + 0x138]
mov rax, qword [rsp + 0x800]
mov rcx, qword [rsp + 0x138]
cmp byte [rax + rcx], 0
jne 0x140006c86
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x808], rax
mov rcx, qword [rsp + 0x808]
call fcn.1400011d0
mov qword [rsp + 0x810], rax
mov rax, qword [rsp + 0x810]
mov qword [rsp + 0x818], rax
mov dword [rsp + 0x48], 0
jmp 0x140006ced
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
movsxd rax, dword [rsp + 0x48]
cmp rax, 8
jae 0x140006d1c
movsxd rax, dword [rsp + 0x48]
movsxd rcx, dword [rsp + 0x48]
mov rdx, qword [rsp + 0x818]
mov r8, qword [rsp + 0x150]
movzx eax, byte [r8 + rax]
mov byte [rdx + rcx], al
jmp 0x140006ce3
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
lea rdx, str.IELIuVCYkx__d
lea rcx, [rsp + 0x2b60]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x2b60]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x144], eax
mov dword [rsp + 0x30], 0
jmp 0x140006d63
mov eax, dword [rsp + 0x30]
inc eax
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x144]
cmp dword [rsp + 0x30], eax
jge 0x140007aa6
cmp dword [rsp + 0x30], 9
jle 0x140006d80
jmp 0x140007aa6
movsxd rax, dword [rsp + 0x30]
movzx eax, word [rsp + rax*2 + 0x2b60]
cmp eax, 0x42
jge 0x140006da4
movsxd rax, dword [rsp + 0x30]
movzx eax, word [rsp + rax*2 + 0x2b60]
cmp eax, 0x4e
jg 0x140006dc6
movsxd rax, dword [rsp + 0x30]
movzx eax, word [rsp + rax*2 + 0x2b60]
add eax, 0x20
movsxd rcx, dword [rsp + 0x30]
mov word [rsp + rcx*2 + 0x2b60], ax
jmp 0x140007aa1
movsxd rax, dword [rsp + 0x30]
movzx eax, word [rsp + rax*2 + 0x2b60]
cmp eax, 0x6c
jl 0x140007aa1
movsxd rax, dword [rsp + 0x30]
movzx eax, word [rsp + rax*2 + 0x2b60]
cmp eax, 0x4c
jg 0x140007aa1
movsxd rax, dword [rsp + 0x30]
movzx eax, word [rsp + rax*2 + 0x2b60]
sub eax, 0x20
movsxd rcx, dword [rsp + 0x30]
mov word [rsp + rcx*2 + 0x2b60], ax
mov byte [rsp + 0x74], 1
mov byte [rsp + 0x22], 0
mov byte [rsp + 0x3e], 1
movzx eax, byte [rsp + 0x22]
test eax, eax
je 0x140006ecd
movzx eax, byte [rsp + 0x3e]
test eax, eax
je 0x140006ecd
mov dword [rsp + 0x68], 0xc657
mov dword [rsp + 0x8c], 0
jmp 0x140006e5d
mov eax, dword [rsp + 0x8c]
inc eax
mov dword [rsp + 0x8c], eax
cmp dword [rsp + 0x8c], 0xa
jge 0x140006e7e
cmp dword [rsp + 0x68], 0
jge 0x140006e72
jmp 0x140006e7e
mov eax, dword [rsp + 0x68]
dec eax
mov dword [rsp + 0x68], eax
jmp 0x140006e4d
mov dword [rsp + 0x68], 0x164e0
mov dword [rsp + 0x90], 0
cmp dword [rsp + 0x90], 0x38
jge 0x140006ecd
movzx eax, byte [rsp + 0x3e]
test eax, eax
je 0x140006ead
movzx eax, byte [rsp + 0x22]
test eax, eax
jne 0x140006eb6
movzx eax, byte [rsp + 0x22]
test eax, eax
jne 0x140006ebb
mov byte [rsp + 0x22], 0
mov eax, dword [rsp + 0x90]
inc eax
mov dword [rsp + 0x90], eax
jmp 0x140006e91
mov byte [rsp + 0x75], 0
mov byte [rsp + 0x20], 0
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x140006f7e
mov dword [rsp + 0x6c], 0x14777
mov dword [rsp + 0x94], 0
jmp 0x140006f09
mov eax, dword [rsp + 0x94]
inc eax
mov dword [rsp + 0x94], eax
cmp dword [rsp + 0x94], 9
jge 0x140006f2a
cmp dword [rsp + 0x6c], 0
jge 0x140006f1e
jmp 0x140006f2a
mov eax, dword [rsp + 0x6c]
dec eax
mov dword [rsp + 0x6c], eax
jmp 0x140006ef9
mov dword [rsp + 0x6c], 0xee137
mov dword [rsp + 0x98], 0
cmp dword [rsp + 0x98], 0xb
jge 0x140006f79
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x140006f59
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x140006f62
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x140006f67
mov byte [rsp + 0x20], 0
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
jmp 0x140006f3d
jmp 0x1400073a0
mov byte [rsp + 0x76], 0
mov byte [rsp + 0x77], 0
mov byte [rsp + 0x3f], 1
mov byte [rsp + 0x26], 0
mov byte [rsp + 0x34], 1
movzx eax, byte [rsp + 0x3f]
test eax, eax
jne 0x140006fba
movzx eax, byte [rsp + 0x26]
test eax, eax
je 0x14000704f
movzx eax, byte [rsp + 0x34]
test eax, eax
je 0x14000704f
mov dword [rsp + 0x70], 0x28d8
mov dword [rsp + 0x9c], 0
jmp 0x140006fdf
mov eax, dword [rsp + 0x9c]
inc eax
mov dword [rsp + 0x9c], eax
cmp dword [rsp + 0x9c], 0x19
jge 0x140007000
cmp dword [rsp + 0x70], 0
jge 0x140006ff4
jmp 0x140007000
mov eax, dword [rsp + 0x70]
dec eax
mov dword [rsp + 0x70], eax
jmp 0x140006fcf
mov dword [rsp + 0x70], 0xa8152
mov dword [rsp + 0xa0], 0
cmp dword [rsp + 0xa0], 0x4a
jge 0x14000704f
movzx eax, byte [rsp + 0x3f]
test eax, eax
je 0x14000702f
movzx eax, byte [rsp + 0x26]
test eax, eax
jne 0x140007038
movzx eax, byte [rsp + 0x34]
test eax, eax
jne 0x14000703d
mov byte [rsp + 0x26], 0
mov eax, dword [rsp + 0xa0]
inc eax
mov dword [rsp + 0xa0], eax
jmp 0x140007013
mov byte [rsp + 0x78], 1
mov byte [rsp + 0x79], 1
mov byte [rsp + 0x36], 1
mov byte [rsp + 0x37], 1
mov byte [rsp + 0x38], 1
mov byte [rsp + 0x35], 0
movzx eax, byte [rsp + 0x36]
test eax, eax
je 0x14000707f
movzx eax, byte [rsp + 0x37]
test eax, eax
jne 0x140007095
movzx eax, byte [rsp + 0x38]
test eax, eax
jne 0x140007095
movzx eax, byte [rsp + 0x35]
test eax, eax
je 0x14000712f
mov dword [rsp + 0x4c], 0x4425
mov dword [rsp + 0xa4], 0
jmp 0x1400070ba
mov eax, dword [rsp + 0xa4]
inc eax
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 1
jge 0x1400070db
cmp dword [rsp + 0x4c], 0
jge 0x1400070cf
jmp 0x1400070db
mov eax, dword [rsp + 0x4c]
dec eax
mov dword [rsp + 0x4c], eax
jmp 0x1400070aa
mov dword [rsp + 0x4c], 0x853d0
mov dword [rsp + 0xa8], 0
cmp dword [rsp + 0xa8], 0x30
jge 0x14000712a
movzx eax, byte [rsp + 0x35]
test eax, eax
je 0x14000710a
movzx eax, byte [rsp + 0x36]
test eax, eax
jne 0x140007113
movzx eax, byte [rsp + 0x37]
test eax, eax
jne 0x140007118
mov byte [rsp + 0x38], 0
mov eax, dword [rsp + 0xa8]
inc eax
mov dword [rsp + 0xa8], eax
jmp 0x1400070ee
jmp 0x140007203
lea rax, [rsp + 0x15f0]
mov rdi, rax
xor eax, eax
mov ecx, 0x300
rep stosb byte [rdi], al
mov dword [rsp + 0xac], 0
jmp 0x140007160
mov eax, dword [rsp + 0xac]
inc eax
mov dword [rsp + 0xac], eax
movsxd rax, dword [rsp + 0xac]
cmp rax, 8
jae 0x140007199
mov dword [rsp + 0xb0], 0
jmp 0x14000718b
mov eax, dword [rsp + 0xb0]
inc eax
mov dword [rsp + 0xb0], eax
cmp dword [rsp + 0xb0], 0xc
jge 0x140007197
jmp 0x14000717b
jmp 0x140007150
lea rax, [rsp + 0x18f0]
mov rdi, rax
xor eax, eax
mov ecx, 0x300
rep stosb byte [rdi], al
mov dword [rsp + 0xb4], 0
jmp 0x1400071ca
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
movsxd rax, dword [rsp + 0xb4]
cmp rax, 8
jae 0x140007203
mov dword [rsp + 0xb8], 0
jmp 0x1400071f5
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
cmp dword [rsp + 0xb8], 0xc
jge 0x140007201
jmp 0x1400071e5
jmp 0x1400071ba
mov byte [rsp + 0x7a], 1
mov byte [rsp + 0x7b], 1
mov byte [rsp + 0x23], 0
mov byte [rsp + 0x39], 0
movzx eax, byte [rsp + 0x23]
test eax, eax
jne 0x14000722d
movzx eax, byte [rsp + 0x39]
test eax, eax
je 0x1400072c7
mov dword [rsp + 0x50], 0x1695b
mov dword [rsp + 0xbc], 0
jmp 0x140007252
mov eax, dword [rsp + 0xbc]
inc eax
mov dword [rsp + 0xbc], eax
cmp dword [rsp + 0xbc], 8
jge 0x140007273
cmp dword [rsp + 0x50], 0
jge 0x140007267
jmp 0x140007273
mov eax, dword [rsp + 0x50]
dec eax
mov dword [rsp + 0x50], eax
jmp 0x140007242
mov dword [rsp + 0x50], 0x1d28b
mov dword [rsp + 0xc0], 0
cmp dword [rsp + 0xc0], 0x63
jge 0x1400072c2
movzx eax, byte [rsp + 0x23]
test eax, eax
je 0x1400072a2
movzx eax, byte [rsp + 0x39]
test eax, eax
jne 0x1400072ab
movzx eax, byte [rsp + 0x23]
test eax, eax
jne 0x1400072b0
mov byte [rsp + 0x23], 0
mov eax, dword [rsp + 0xc0]
inc eax
mov dword [rsp + 0xc0], eax
jmp 0x140007286
jmp 0x14000739b
lea rax, [rsp + 0x820]
mov rdi, rax
xor eax, eax
mov ecx, 0x2a8
rep stosb byte [rdi], al
mov dword [rsp + 0xc4], 0
jmp 0x1400072f8
mov eax, dword [rsp + 0xc4]
inc eax
mov dword [rsp + 0xc4], eax
movsxd rax, dword [rsp + 0xc4]
cmp rax, 0xa
jae 0x140007331
mov dword [rsp + 0xc8], 0
jmp 0x140007323
mov eax, dword [rsp + 0xc8]
inc eax
mov dword [rsp + 0xc8], eax
cmp dword [rsp + 0xc8], 0x11
jge 0x14000732f
jmp 0x140007313
jmp 0x1400072e8
lea rax, [rsp + 0xad0]
mov rdi, rax
xor eax, eax
mov ecx, 0x2a8
rep stosb byte [rdi], al
mov dword [rsp + 0xcc], 0
jmp 0x140007362
mov eax, dword [rsp + 0xcc]
inc eax
mov dword [rsp + 0xcc], eax
movsxd rax, dword [rsp + 0xcc]
cmp rax, 0xa
jae 0x14000739b
mov dword [rsp + 0xd0], 0
jmp 0x14000738d
mov eax, dword [rsp + 0xd0]
inc eax
mov dword [rsp + 0xd0], eax
cmp dword [rsp + 0xd0], 0x11
jge 0x140007399
jmp 0x14000737d
jmp 0x140007352
mov byte [rsp + 0x7c], 0
mov byte [rsp + 0x7d], 1
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x27], 0
movzx eax, byte [rsp + 0x28]
test eax, eax
jne 0x1400073c5
movzx eax, byte [rsp + 0x27]
test eax, eax
je 0x14000745f
mov dword [rsp + 0x54], 0xe51c
mov dword [rsp + 0xd4], 0
jmp 0x1400073ea
mov eax, dword [rsp + 0xd4]
inc eax
mov dword [rsp + 0xd4], eax
cmp dword [rsp + 0xd4], 0x1e
jge 0x14000740b
cmp dword [rsp + 0x54], 0
jge 0x1400073ff
jmp 0x14000740b
mov eax, dword [rsp + 0x54]
dec eax
mov dword [rsp + 0x54], eax
jmp 0x1400073da
mov dword [rsp + 0x54], 0x56ab0
mov dword [rsp + 0xd8], 0
cmp dword [rsp + 0xd8], 0x53
jge 0x14000745a
movzx eax, byte [rsp + 0x28]
test eax, eax
je 0x14000743a
movzx eax, byte [rsp + 0x27]
test eax, eax
jne 0x140007443
movzx eax, byte [rsp + 0x27]
test eax, eax
jne 0x140007448
mov byte [rsp + 0x28], 1
mov eax, dword [rsp + 0xd8]
inc eax
mov dword [rsp + 0xd8], eax
jmp 0x14000741e
jmp 0x140007a89
mov byte [rsp + 0x7e], 1
mov byte [rsp + 0x3a], 1
mov byte [rsp + 0x24], 1
movzx eax, byte [rsp + 0x3a]
test eax, eax
je 0x140007522
movzx eax, byte [rsp + 0x24]
test eax, eax
je 0x140007522
mov dword [rsp + 0x58], 0xd1a9
mov dword [rsp + 0xdc], 0
jmp 0x1400074ad
mov eax, dword [rsp + 0xdc]
inc eax
mov dword [rsp + 0xdc], eax
cmp dword [rsp + 0xdc], 0x16
jge 0x1400074ce
cmp dword [rsp + 0x58], 0
jge 0x1400074c2
jmp 0x1400074ce
mov eax, dword [rsp + 0x58]
dec eax
mov dword [rsp + 0x58], eax
jmp 0x14000749d
mov dword [rsp + 0x58], 0xcaca7
mov dword [rsp + 0xe0], 0
cmp dword [rsp + 0xe0], 0x18
jge 0x14000751d
movzx eax, byte [rsp + 0x24]
test eax, eax
je 0x1400074fd
movzx eax, byte [rsp + 0x3a]
test eax, eax
jne 0x140007506
movzx eax, byte [rsp + 0x24]
test eax, eax
jne 0x14000750b
mov byte [rsp + 0x24], 0
mov eax, dword [rsp + 0xe0]
inc eax
mov dword [rsp + 0xe0], eax
jmp 0x1400074e1
jmp 0x1400076ca
lea rax, [rsp + 0x1bf0]
mov rdi, rax
xor eax, eax
mov ecx, 0x348
rep stosb byte [rdi], al
mov dword [rsp + 0xe4], 0
jmp 0x140007553
mov eax, dword [rsp + 0xe4]
inc eax
mov dword [rsp + 0xe4], eax
movsxd rax, dword [rsp + 0xe4]
cmp rax, 7
jae 0x14000758c
mov dword [rsp + 0xe8], 0
jmp 0x14000757e
mov eax, dword [rsp + 0xe8]
inc eax
mov dword [rsp + 0xe8], eax
cmp dword [rsp + 0xe8], 0xf
jge 0x14000758a
jmp 0x14000756e
jmp 0x140007543
lea rax, [rsp + 0x1f40]
mov rdi, rax
xor eax, eax
mov ecx, 0x348
rep stosb byte [rdi], al
mov dword [rsp + 0xec], 0
jmp 0x1400075bd
mov eax, dword [rsp + 0xec]
inc eax
mov dword [rsp + 0xec], eax
movsxd rax, dword [rsp + 0xec]
cmp rax, 7
jae 0x1400075f6
mov dword [rsp + 0xf0], 0
jmp 0x1400075e8
mov eax, dword [rsp + 0xf0]
inc eax
mov dword [rsp + 0xf0], eax
cmp dword [rsp + 0xf0], 0xf
jge 0x1400075f4
jmp 0x1400075d8
jmp 0x1400075ad
lea rax, [rsp + 0x2290]
mov rdi, rax
xor eax, eax
mov ecx, 0x348
rep stosb byte [rdi], al
mov dword [rsp + 0xf4], 0
jmp 0x140007627
mov eax, dword [rsp + 0xf4]
inc eax
mov dword [rsp + 0xf4], eax
movsxd rax, dword [rsp + 0xf4]
cmp rax, 7
jae 0x140007660
mov dword [rsp + 0xf8], 0
jmp 0x140007652
mov eax, dword [rsp + 0xf8]
inc eax
mov dword [rsp + 0xf8], eax
cmp dword [rsp + 0xf8], 0xf
jge 0x14000765e
jmp 0x140007642
jmp 0x140007617
lea rax, [rsp + 0x25e0]
mov rdi, rax
xor eax, eax
mov ecx, 0x348
rep stosb byte [rdi], al
mov dword [rsp + 0xfc], 0
jmp 0x140007691
mov eax, dword [rsp + 0xfc]
inc eax
mov dword [rsp + 0xfc], eax
movsxd rax, dword [rsp + 0xfc]
cmp rax, 7
jae 0x1400076ca
mov dword [rsp + 0x100], 0
jmp 0x1400076bc
mov eax, dword [rsp + 0x100]
inc eax
mov dword [rsp + 0x100], eax
cmp dword [rsp + 0x100], 0xf
jge 0x1400076c8
jmp 0x1400076ac
jmp 0x140007681
mov byte [rsp + 0x7f], 0
mov byte [rsp + 0x80], 1
mov byte [rsp + 0x81], 1
mov byte [rsp + 0x21], 1
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x14000778b
mov dword [rsp + 0x5c], 0xc705
mov dword [rsp + 0x104], 0
jmp 0x140007716
mov eax, dword [rsp + 0x104]
inc eax
mov dword [rsp + 0x104], eax
cmp dword [rsp + 0x104], 0x2c
jge 0x140007737
cmp dword [rsp + 0x5c], 0
jge 0x14000772b
jmp 0x140007737
mov eax, dword [rsp + 0x5c]
dec eax
mov dword [rsp + 0x5c], eax
jmp 0x140007706
mov dword [rsp + 0x5c], 0x156
mov dword [rsp + 0x108], 0
cmp dword [rsp + 0x108], 8
jge 0x140007786
movzx eax, byte [rsp + 0x21]
test eax, eax
je 0x140007766
movzx eax, byte [rsp + 0x21]
test eax, eax
jne 0x14000776f
movzx eax, byte [rsp + 0x21]
test eax, eax
jne 0x140007774
mov byte [rsp + 0x21], 0
mov eax, dword [rsp + 0x108]
inc eax
mov dword [rsp + 0x108], eax
jmp 0x14000774a
jmp 0x1400078c9
lea rax, [rsp + 0xd80]
mov rdi, rax
xor eax, eax
mov ecx, 0x2d0
rep stosb byte [rdi], al
mov dword [rsp + 0x10c], 0
jmp 0x1400077bc
mov eax, dword [rsp + 0x10c]
inc eax
mov dword [rsp + 0x10c], eax
movsxd rax, dword [rsp + 0x10c]
cmp rax, 9
jae 0x1400077f5
mov dword [rsp + 0x110], 0
jmp 0x1400077e7
mov eax, dword [rsp + 0x110]
inc eax
mov dword [rsp + 0x110], eax
cmp dword [rsp + 0x110], 0xa
jge 0x1400077f3
jmp 0x1400077d7
jmp 0x1400077ac
lea rax, [rsp + 0x1050]
mov rdi, rax
xor eax, eax
mov ecx, 0x2d0
rep stosb byte [rdi], al
mov dword [rsp + 0x114], 0
jmp 0x140007826
mov eax, dword [rsp + 0x114]
inc eax
mov dword [rsp + 0x114], eax
movsxd rax, dword [rsp + 0x114]
cmp rax, 9
jae 0x14000785f
mov dword [rsp + 0x118], 0
jmp 0x140007851
mov eax, dword [rsp + 0x118]
inc eax
mov dword [rsp + 0x118], eax
cmp dword [rsp + 0x118], 0xa
jge 0x14000785d
jmp 0x140007841
jmp 0x140007816
lea rax, [rsp + 0x1320]
mov rdi, rax
xor eax, eax
mov ecx, 0x2d0
rep stosb byte [rdi], al
mov dword [rsp + 0x11c], 0
jmp 0x140007890
mov eax, dword [rsp + 0x11c]
inc eax
mov dword [rsp + 0x11c], eax
movsxd rax, dword [rsp + 0x11c]
cmp rax, 9
jae 0x1400078c9
mov dword [rsp + 0x120], 0
jmp 0x1400078bb
mov eax, dword [rsp + 0x120]
inc eax
mov dword [rsp + 0x120], eax
cmp dword [rsp + 0x120], 0xa
jge 0x1400078c7
jmp 0x1400078ab
jmp 0x140007880
mov byte [rsp + 0x82], 0
mov byte [rsp + 0x3b], 0
mov byte [rsp + 0x29], 0
mov byte [rsp + 0x3c], 1
movzx eax, byte [rsp + 0x3b]
test eax, eax
jne 0x1400078ff
movzx eax, byte [rsp + 0x29]
test eax, eax
jne 0x1400078ff
movzx eax, byte [rsp + 0x3c]
test eax, eax
je 0x140007994
mov dword [rsp + 0x60], 0xca9c
mov dword [rsp + 0x124], 0
jmp 0x140007924
mov eax, dword [rsp + 0x124]
inc eax
mov dword [rsp + 0x124], eax
cmp dword [rsp + 0x124], 1
jge 0x140007945
cmp dword [rsp + 0x60], 0
jge 0x140007939
jmp 0x140007945
mov eax, dword [rsp + 0x60]
dec eax
mov dword [rsp + 0x60], eax
jmp 0x140007914
mov dword [rsp + 0x60], 0x8828f
mov dword [rsp + 0x128], 0
cmp dword [rsp + 0x128], 0x5d
jge 0x140007994
movzx eax, byte [rsp + 0x3b]
test eax, eax
je 0x140007974
movzx eax, byte [rsp + 0x29]
test eax, eax
jne 0x14000797d
movzx eax, byte [rsp + 0x29]
test eax, eax
jne 0x140007982
mov byte [rsp + 0x3c], 0
mov eax, dword [rsp + 0x128]
inc eax
mov dword [rsp + 0x128], eax
jmp 0x140007958
mov byte [rsp + 0x83], 1
mov byte [rsp + 0x84], 1
mov byte [rsp + 0x85], 0
mov byte [rsp + 0x25], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x3d], 1
mov byte [rsp + 0x41], 1
movzx eax, byte [rsp + 0x25]
test eax, eax
je 0x140007a89
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x140007a89
movzx eax, byte [rsp + 0x3d]
test eax, eax
je 0x140007a89
movzx eax, byte [rsp + 0x41]
test eax, eax
je 0x140007a89
mov dword [rsp + 0x64], 0xe2b5
mov dword [rsp + 0x12c], 0
jmp 0x140007a19
mov eax, dword [rsp + 0x12c]
inc eax
mov dword [rsp + 0x12c], eax
cmp dword [rsp + 0x12c], 3
jge 0x140007a3a
cmp dword [rsp + 0x64], 0
jge 0x140007a2e
jmp 0x140007a3a
mov eax, dword [rsp + 0x64]
dec eax
mov dword [rsp + 0x64], eax
jmp 0x140007a09
mov dword [rsp + 0x64], 0xa0398
mov dword [rsp + 0x130], 0
cmp dword [rsp + 0x130], 0x4f
jge 0x140007a89
movzx eax, byte [rsp + 0x25]
test eax, eax
je 0x140007a69
movzx eax, byte [rsp + 0x25]
test eax, eax
jne 0x140007a72
movzx eax, byte [rsp + 0x25]
test eax, eax
jne 0x140007a77
mov byte [rsp + 0x3d], 1
mov eax, dword [rsp + 0x130]
inc eax
mov dword [rsp + 0x130], eax
jmp 0x140007a4d
mov byte [rsp + 0x86], 1
mov byte [rsp + 0x87], 1
mov byte [rsp + 0x88], 0
jmp 0x140006d59
lea r9, [0x140007b20]
mov r8d, 0x5a
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetTimer]
nop
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x2930]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x140007af9
lea rcx, [rsp + 0x2930]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x2930]
call qword [sym.imp.USER32.dll_DispatchMessageW]
nop
jmp 0x140007af9
mov rax, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x2d60]
xor rcx, rsp
call fcn.140228960
add rsp, 0x2d70
pop rdi
ret