Function at 0x1800a1440
Capabilities:
Check for time delay via gettickcount
Get file size

Disassembly:
push rbp
push r12
push r15
sub rsp, 0xff0
mov rax, qword [0x1801dc960]
xor rax, rsp
mov qword [rsp + 0xfc0], rax
mov r12, rdx
mov rbp, rcx
test rcx, rcx
je 0x1800a146f
call fcn.1800fd3f0
lea rdx, str.CopyFileAuditControl...
lea rcx, [0x180153a08]
call fcn.18005cd20
mov r15d, 1
test r12, r12
je 0x1800a14a3
mov r8d, r15d
mov rdx, r12
mov rcx, rbp
call fcn.180068a40
mov rcx, r12
call fcn.1800fd3f0
cmp dword [0x1802210f4], 0
mov qword [rsp + 0x1020], rbx
mov qword [rsp + 0xfe8], rsi
mov qword [rsp + 0xfe0], rdi
mov qword [rsp + 0xfd8], r13
je 0x1800a1b62
cmp dword [0x180259e9c], 0
je 0x1800a1b62
cmp byte [r12], 0x5c
je 0x1800a1b62
mov qword [rsp + 0xfd0], r14
xor ebx, ebx
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
cmp dword [0x1802211f8], ebx
je 0x1800a1595
movzx ecx, byte [0x18025bde4]
cmp byte [r12], cl
je 0x1800a1595
mov rcx, r12
call fcn.180065ab0
mov dword [0x18025c98c], eax
test eax, eax
jne 0x1800a1542
mov rcx, r12
call fcn.1800658c0
test eax, eax
jne 0x1800a1542
movzx ecx, byte [r12]
call fcn.180065cb0
test eax, eax
je 0x1800a1580
lea rcx, [0x1802211fc]
xor r8d, r8d
mov rdx, rbp
call fcn.18008f400
test eax, eax
je 0x1800a1580
lea r8, [0x180163a68]
lea rcx, [0x180155288]
mov edx, 0xb4ad
call fcn.18005cd20
movzx eax, byte [r12]
mov r14d, r15d
mov byte [0x18025b31c], al
jmp 0x1800a1586
mov byte [0x18025b31c], bl
mov dword [0x18025c208], edi
test r14d, r14d
jne 0x1800a16c7
cmp dword [0x1802216ac], ebx
je 0x1800a16c7
movzx eax, byte [0x18025bde5]
cmp byte [rbp], al
je 0x1800a1633
mov rcx, rbp
call fcn.180065ab0
mov dword [0x18025c988], eax
test eax, eax
jne 0x1800a15dc
mov rcx, rbp
call fcn.1800658c0
test eax, eax
jne 0x1800a15dc
movzx ecx, byte [rbp]
call fcn.180065cb0
test eax, eax
je 0x1800a1622
lea rcx, [0x18022138c]
xor r8d, r8d
mov rdx, rbp
call fcn.18008f400
test eax, eax
je 0x1800a1622
lea r8, [0x180163a68]
lea rcx, [0x180155288]
mov edx, 0xb4cc
call fcn.18005cd20
movzx eax, byte [rbp]
mov ebx, r15d
mov byte [0x18025b31d], al
mov dword [0x18025c20c], edi
jmp 0x1800a16c7
mov byte [0x18025b31d], bl
mov dword [0x18025c20c], edi
jmp 0x1800a16c7
mov eax, edi
sub eax, dword [0x18025c20c]
cmp eax, 0xea60
jbe 0x1800a16b4
mov rcx, rbp
call fcn.180065ab0
mov dword [0x18025c988], eax
test eax, eax
jne 0x1800a166d
mov rcx, rbp
call fcn.1800658c0
test eax, eax
jne 0x1800a166d
movzx ecx, byte [rbp]
call fcn.180065cb0
test eax, eax
je 0x1800a1683
lea rcx, [0x18022138c]
xor r8d, r8d
mov rdx, rbp
call fcn.18008f400
test eax, eax
jne 0x1800a168d
xor al, al
mov byte [0x18025b31d], al
jmp 0x1800a16ba
lea r8, [0x180163a50]
lea rcx, [0x180155288]
mov edx, 0xb4e8
call fcn.18005cd20
movzx eax, byte [rbp]
mov ebx, r15d
mov byte [0x18025b31d], al
jmp 0x1800a16ba
mov al, byte [0x18025b31d]
mov dword [0x18025c20c], edi
cmp byte [rbp], al
cmove ebx, r15d
cmp dword [0x1802216b4], 0
jne 0x1800a16dd
cmp dword [0x1802216b8], 0
je 0x1800a1b5a
test r14d, r14d
jne 0x1800a16ea
test ebx, ebx
je 0x1800a1b5a
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov edx, 0x80000000
lea r8d, [r9 + 3]
mov rcx, rbp
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rcx, [rsp + 0x61]
xor r13d, r13d
xor edx, edx
mov r8d, 0x103
mov rdi, rax
mov byte [rsp + 0x60], r13b
call fcn.1800f4fb0
cmp rdi, 0xffffffffffffffff
je 0x1800a1752
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov rcx, rdi
mov r13d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x60]
mov rcx, rbp
call fcn.180065a00
lea rcx, [rsp + 0x7c1]
xor edx, edx
mov r8d, 0x7ff
mov byte [rsp + 0x7c0], 0
call fcn.1800f4fb0
test r14d, r14d
je 0x1800a19d4
test ebx, ebx
je 0x1800a18b7
cmp dword [0x18025c98c], 0
je 0x1800a182f
cmp dword [0x18025c988], 0
jne 0x1800a182f
lea rdx, [0x180151370]
mov ecx, 0x3f9
call fcn.180001000
lea rdx, [0x1801514f4]
mov ecx, 4
mov rdi, rax
call fcn.180001000
lea rdx, [0x180150e60]
mov ecx, 0x435
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x1802210f8]
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
lea r9, [0x1802210fc]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind103__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a1b26
lea rdx, [0x180151370]
mov ecx, 0x3f9
call fcn.180001000
lea rdx, [0x1801514ec]
mov ecx, 5
mov rdi, rax
call fcn.180001000
lea rdx, [0x180150e60]
mov ecx, 0x435
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x1802210f8]
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
lea r9, [0x1802210fc]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind103__policyid_d__policyname_s__context_s___s___s___s_s__s_d_bytes_.
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a1b26
cmp dword [0x18025c98c], 0
je 0x1800a194c
lea rdx, [0x180151370]
mov ecx, 0x3f9
call fcn.180001000
lea rdx, [0x1801514fc]
mov ecx, 3
mov rdi, rax
call fcn.180001000
lea rdx, [0x1801512a8]
mov ecx, 0x403
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x1802210f8]
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
lea r9, [0x1802210fc]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind103__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_.
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a1b26
lea rdx, [0x180151370]
mov ecx, 0x3f9
call fcn.180001000
lea rdx, [0x1801514fc]
mov ecx, 3
mov rdi, rax
call fcn.180001000
lea rdx, [0x180151298]
mov ecx, 0x404
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x1802210f8]
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
lea r9, [0x1802210fc]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind103__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_.
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a1b26
test ebx, ebx
je 0x1800a1b26
cmp dword [0x18025c988], 0
je 0x1800a1a8a
lea rdx, [0x180151500]
mov ecx, 2
call fcn.180001000
lea rdx, [0x180151370]
mov ecx, 0x3f9
mov rsi, rax
call fcn.180001000
lea rdx, [0x1801514fc]
mov ecx, 3
mov rdi, rax
call fcn.180001000
lea rdx, [0x1801512d0]
mov ecx, 0x404
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x1802210f8]
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rcx
lea r9, [0x1802210fc]
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind102__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_.__s
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a1b26
lea rdx, [0x180151500]
mov ecx, 2
call fcn.180001000
lea rdx, [0x180151370]
mov ecx, 0x3f9
mov rsi, rax
call fcn.180001000
lea rdx, [0x1801514fc]
mov ecx, 3
mov rdi, rax
call fcn.180001000
lea rdx, [0x1801512c0]
mov ecx, 0x402
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x1802210f8]
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rcx
lea r9, [0x1802210fc]
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind102__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_.__s
mov qword [rsp + 0x20], rax
call fcn.1800f509c
lea rcx, [rsp + 0x7c0]
call fcn.18009c870
test r14d, r14d
je 0x1800a1b5a
cmp dword [0x18025c98c], 0
jne 0x1800a1b5a
cmp dword [0x1802216c4], 0
je 0x1800a1b5a
mov r8d, r15d
mov edx, 0x500
mov rcx, rbp
call fcn.180068d50
mov r14, qword [rsp + 0xfd0]
cmp dword [0x180221ea4], 0
je 0x1800a22a2
cmp dword [0x180259e9c], 0
je 0x1800a22a2
cmp byte [r12], 0x5c
je 0x1800a22a2
xor esi, esi
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
cmp dword [0x180221fac], ebx
je 0x1800a1c2a
movzx ecx, byte [0x18025bde4]
cmp byte [r12], cl
je 0x1800a1c2a
mov rcx, r12
call fcn.180065ab0
mov dword [0x18025c98c], eax
test eax, eax
jne 0x1800a1bd8
mov rcx, r12
call fcn.1800658c0
test eax, eax
jne 0x1800a1bd8
movzx ecx, byte [r12]
call fcn.180065cb0
test eax, eax
je 0x1800a1c16
lea rcx, [0x180221fb0]
xor r8d, r8d
mov rdx, rbp
call fcn.18008f400
test eax, eax
je 0x1800a1c16
lea r8, [0x180163a68]
lea rcx, [0x180155288]
mov edx, 0xb560
call fcn.18005cd20
movzx eax, byte [r12]
mov esi, r15d
mov byte [0x18025b31c], al
jmp 0x1800a1c1c
mov byte [0x18025b31c], bl
mov dword [0x18025c208], edi
test esi, esi
jne 0x1800a1d5c
cmp dword [0x1802222d0], ebx
je 0x1800a1d5c
movzx eax, byte [0x18025bde5]
cmp byte [rbp], al
je 0x1800a1cc8
mov rcx, rbp
call fcn.180065ab0
mov dword [0x18025c988], eax
test eax, eax
jne 0x1800a1c71
mov rcx, rbp
call fcn.1800658c0
test eax, eax
jne 0x1800a1c71
movzx ecx, byte [rbp]
call fcn.180065cb0
test eax, eax
je 0x1800a1cb7
lea rcx, [0x180222140]
xor r8d, r8d
mov rdx, rbp
call fcn.18008f400
test eax, eax
je 0x1800a1cb7
lea r8, [0x180163a68]
lea rcx, [0x180155288]
mov edx, 0xb57a
call fcn.18005cd20
movzx eax, byte [rbp]
mov ebx, r15d
mov byte [0x18025b31d], al
mov dword [0x18025c20c], edi
jmp 0x1800a1d5c
mov byte [0x18025b31d], bl
mov dword [0x18025c20c], edi
jmp 0x1800a1d5c
mov eax, edi
sub eax, dword [0x18025c20c]
cmp eax, 0xea60
jbe 0x1800a1d49
mov rcx, rbp
call fcn.180065ab0
mov dword [0x18025c988], eax
test eax, eax
jne 0x1800a1d02
mov rcx, rbp
call fcn.1800658c0
test eax, eax
jne 0x1800a1d02
movzx ecx, byte [rbp]
call fcn.180065cb0
test eax, eax
je 0x1800a1d18
lea rcx, [0x180222140]
xor r8d, r8d
mov rdx, rbp
call fcn.18008f400
test eax, eax
jne 0x1800a1d22
xor al, al
mov byte [0x18025b31d], al
jmp 0x1800a1d4f
lea r8, [0x180163a50]
lea rcx, [0x180155288]
mov edx, 0xb594
call fcn.18005cd20
movzx eax, byte [rbp]
mov ebx, r15d
mov byte [0x18025b31d], al
jmp 0x1800a1d4f
mov al, byte [0x18025b31d]
mov dword [0x18025c20c], edi
cmp byte [rbp], al
cmove ebx, r15d
cmp dword [0x1802222d4], 0
jne 0x1800a1d72
cmp dword [0x1802222d8], 0
je 0x1800a22a2
test esi, esi
jne 0x1800a1d7e
test ebx, ebx
je 0x1800a22a2
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov edx, 0x80000000
lea r8d, [r9 + 3]
mov rcx, rbp
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea rcx, [rsp + 0x61]
xor r13d, r13d
xor edx, edx
mov r8d, 0x103
mov rdi, rax
mov byte [rsp + 0x60], r13b
call fcn.1800f4fb0
cmp rdi, 0xffffffffffffffff
je 0x1800a1de6
xor edx, edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov rcx, rdi
mov r13d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x60]
mov rcx, rbp
call fcn.180065a00
lea rcx, [rsp + 0x7c1]
xor edx, edx
mov r8d, 0x7ff
mov byte [rsp + 0x7c0], 0
call fcn.1800f4fb0
test esi, esi
je 0x1800a20eb
test ebx, ebx
je 0x1800a1f6d
cmp dword [0x18025c98c], 0
je 0x1800a1ec2
cmp dword [0x18025c988], 0
jne 0x1800a1ec2
lea rdx, [0x180151370]
mov ecx, 0x3f9
call fcn.180001000
lea rdx, [0x1801514f4]
mov ecx, 4
mov rdi, rax
call fcn.180001000
lea rdx, [0x180150e60]
mov ecx, 0x435
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x180221eac]
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
lea r9, [0x180221eb0]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind103__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a22a2
lea rcx, [rsp + 0x171]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x170], 0
call fcn.1800f4fb0
mov ecx, dword [0x1802222dc]
lea r11, [rsp + 0x5b0]
lea rax, [rsp + 0x4a0]
lea r9, [rsp + 0x390]
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x280]
mov r8, r12
mov rdx, rbp
mov qword [rsp + 0x20], rax
call fcn.180085950
lea rax, [rsp + 0x4a0]
lea r11, [rsp + 0x5b0]
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x390]
jmp 0x1800a20a8
cmp dword [0x18025c98c], 0
je 0x1800a2002
lea rdx, [0x180151370]
mov ecx, 0x3f9
call fcn.180001000
lea rdx, [0x1801514fc]
mov ecx, 3
mov rdi, rax
call fcn.180001000
lea rdx, [0x1801512a8]
mov ecx, 0x403
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x180221eac]
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
lea r9, [0x180221eb0]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind103__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_.
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a22a2
lea rcx, [rsp + 0x171]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x170], 0
call fcn.1800f4fb0
mov ecx, dword [0x1802222dc]
lea r11, [rsp + 0x5b0]
lea rax, [rsp + 0x390]
lea r9, [rsp + 0x4a0]
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x280]
mov r8, r12
mov rdx, rbp
mov qword [rsp + 0x20], rax
call fcn.180085950
lea rax, [rsp + 0x390]
lea r11, [rsp + 0x5b0]
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x280]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x4a0]
mov qword [rsp + 0x30], rax
lea rdx, str.Mode_d_r_nSrcP_s_r_nDstP_s_r_nFSize_d_r_nFSign_s_r_nFCode_s_r_nCreateTime_s_r_nMifTime_s_r_nUType_s
lea rcx, [rsp + 0x7c0]
mov r9, rbp
mov r8d, 2
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r12
call fcn.1800f509c
lea rax, [rsp + 0x7c0]
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], rax
jmp 0x1800a2282
test ebx, ebx
je 0x1800a22a2
cmp dword [0x18025c988], 0
je 0x1800a21a1
lea rdx, [0x180151500]
mov ecx, 2
call fcn.180001000
lea rdx, [0x180151370]
mov ecx, 0x3f9
mov rsi, rax
call fcn.180001000
lea rdx, [0x1801514fc]
mov ecx, 3
mov rdi, rax
call fcn.180001000
lea rdx, [0x1801512d0]
mov ecx, 0x404
mov rbx, rax
call fcn.180001000
mov r8d, dword [0x180221eac]
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x50], r13d
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x28], rcx
lea r9, [0x180221eb0]
lea rcx, [rsp + 0x7c0]
lea rdx, str.kind102__policyid_d__policyname_s__context_s__s___s___s_s__s_d_bytes_.__s
mov qword [rsp + 0x20], rax
call fcn.1800f509c
jmp 0x1800a22a2
lea rcx, [rsp + 0x171]
xor edx, edx
mov r8d, 0x103
mov byte [rsp + 0x170], 0
call fcn.1800f4fb0
mov ecx, dword [0x1802222dc]
lea r11, [rsp + 0x5b0]
lea rax, [rsp + 0x390]
lea r9, [rsp + 0x4a0]
mov qword [rsp + 0x38], r11
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x280]
mov r8, r12
mov rdx, rbp
mov qword [rsp + 0x20], rax
call fcn.180085950
lea r11, [rsp + 0x5b0]
lea rax, [rsp + 0x390]
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x280]
lea rdx, str.Mode_d_r_nSrcP_s_r_nDstP_s_r_nFSize_d_r_nFSign_s_r_nFCode_s_r_nCreateTime_s_r_nMifTime_s_r_nUType_s
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x4a0]
lea rcx, [rsp + 0x7c0]
mov qword [rsp + 0x30], rax
mov r9, rbp
mov r8d, r15d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r12
call fcn.1800f509c
lea rcx, [rsp + 0x7c0]
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x30], rcx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0xe
call fcn.18008e860
mov r13, qword [rsp + 0xfd8]
mov rdi, qword [rsp + 0xfe0]
mov rsi, qword [rsp + 0xfe8]
mov rbx, qword [rsp + 0x1020]
mov eax, r15d
mov rcx, qword [rsp + 0xfc0]
xor rcx, rsp
call fcn.1800f4f80
add rsp, 0xff0
pop r15
pop r12
pop rbp
ret