Function at 0x180015d10
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xc0
mov edi, dword [rbp + 0x77]
mov r13, rdx
movzx edx, byte [rbp + 0x77]
mov r12, r8
mov ebx, dword [rbp + 0x77]
mov r11, r9
mov r15, qword [rbp - 9]
mov rsi, rcx
lea eax, [rdi + 0xc]
mov dword [rbp - 0x51], edi
mov dword [rbp - 0x19], eax
cmp edi, eax
mov eax, dword [rbp + 0x77]
mov r8d, edi
mov byte [rbp - 0x68], dl
jae 0x1800166fe
mov ecx, dword [rbp + 0x77]
mov r14, qword [rbp + 0x7f]
mov dword [rbp - 0x65], eax
movzx eax, byte [rbp + 0x77]
mov byte [rbp - 0x69], al
mov eax, dword [rbp + 0x77]
mov dword [rbp - 0xd], eax
mov eax, dword [rbp + 0x77]
mov dword [rbp - 0x31], eax
mov dword [rbp - 0x11], ecx
lea eax, [r8 - 0x8e]
lea r9, [0x180000000]
cmp eax, 0x1c
ja case.0x180015db1.143
mov ecx, dword [r9 + rax*4 + 0x16ac0]
add rcx, r9
jmp rcx
lea r9, [rbp - 9]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
movzx edx, byte [rbp - 0x68]
mov r9d, eax
mov r8d, dword [rbp - 0x51]
mov dword [rbp - 0x65], eax
jmp 0x1800165b7
cmp dword [r12 + 0x6c], 0
je 0x180015e05
mov eax, dword [r14]
lea r9, [rbp - 0x29]
and eax, 0x4000
mov r8d, 0x10
mov rdx, r12
mov dword [rbp - 0x29], eax
xor ecx, ecx
call fcn.18001c730
test eax, eax
jne 0x180016182
mov eax, dword [rsi]
lea r8, [rbp - 0x29]
xor edx, edx
mov dword [rbp - 0x29], eax
xor r9d, r9d
lea ecx, [rdx + 0x53]
call fcn.18002e570
mov r8d, dword [rbp - 0x51]
lea edx, [rax + 0x10]
mov byte [rbp - 0x68], dl
jmp case.0x180015db1.143
mov eax, dword [rsi]
lea r9, [rbp - 0x49]
mov dword [rbp - 0x29], eax
lea r8, [rbp - 0x41]
mov rax, qword [rbp + 0x67]
lea rdx, [rbp - 0x61]
mov qword [rsp + 0x38], r12
lea rcx, [rbp - 0x59]
mov eax, dword [rax]
mov dword [rbp - 0x61], eax
mov rax, qword [rbp + 0x6f]
mov eax, dword [rax]
mov dword [rbp - 0x59], eax
mov eax, dword [r11]
mov dword [rbp - 0x49], eax
mov eax, dword [r13]
mov dword [rbp - 0x41], eax
mov eax, dword [r14]
mov dword [rbp - 0x21], eax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x21]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0xd9
call fcn.180035000
cmp dword [r13], 0
je 0x1800163e0
movzx edx, byte [rbp - 0x68]
mov r8d, dword [rbp - 0x51]
jmp case.0x180015db1.143
mov eax, dword [r11]
mov dword [rbp - 0x11], eax
mov eax, dword [r12]
test eax, eax
jne 0x180015fce
jmp case.0x180015db1.143
mov ecx, dword [r13]
lea eax, [rcx - 4]
cmp eax, 1
ja 0x180015f00
mov edx, 0x45
mov eax, edx
sub eax, 0x45
je 0x180015ede
cmp eax, 1
jne 0x180015ef0
mov dword [r13], 0x10b
jmp 0x180015ef0
mov ecx, dword [r13]
mov eax, dword [r12 + 0x64]
add ecx, 0xfffffffc
lea ecx, [rax + rcx*4]
mov dword [r11], ecx
inc edx
cmp edx, 0x48
jb 0x180015ec8
movzx edx, byte [rbp - 0x68]
jmp case.0x180015db1.143
mov r9d, dword [rbp - 0x65]
lea eax, [rcx - 9]
movzx r10d, byte [rbp - 0x69]
cmp eax, 1
ja 0x1800165bc
mov eax, dword [r12 + 0x68]
add ecx, 0xfffffff7
lea ecx, [rax + rcx*4]
mov dword [r11], ecx
mov dword [r13], 0x10b
jmp 0x1800165bc
mov r9d, dword [rbp - 0x65]
mov r10b, 1
mov byte [rbp - 0x69], r10b
jmp 0x1800165bc
mov eax, dword [r14]
and eax, 0xffff80ff
cmp eax, 0x19
jge 0x18001637a
cmp dword [r13], 0xc
jg 0x18001637a
mov r14d, 0x38
cmp r14d, 0x1c3
ja 0x180016301
je 0x1800162f8
mov eax, r14d
sub eax, 0x38
je 0x1800161c4
sub eax, 0x4f
je 0x1800161a3
sub eax, 0x4f
je 0x180015ff9
sub eax, 0x4f
je 0x180015fb1
cmp eax, 0x4f
jne 0x18001635a
mov byte [r15], 8
add dword [r12 + 0x54], 8
mov byte [r15 + 1], StrCmpNCA
jmp 0x180016356
test r15, r15
jne 0x18001635a
mov ecx, 0x5d
nop
mov eax, ecx
sub eax, 0x5d
je 0x180015fe9
cmp eax, 1
jne 0x180015fed
mov eax, ebx
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ebx, dword [r12]
inc ecx
cmp ecx, 0x5f
jb 0x180015fc0
jmp 0x18001635a
cmp dword [0x18004509c], 0
je 0x1800160cd
mov esi, 0x117
mov edi, 6
cmp edi, 6
ja case.default.0x180016026
mov eax, edi
mov ecx, dword [r9 + rax*4 + 0x16b34]
add rcx, r9
jmp rcx
movsxd rax, dword [r13]
movzx ecx, byte [rax + r9 + 0x3bab0]
shl cl, 3
or cl, 0xc5
mov byte [r15], cl
inc r15
xor ebx, ebx
jmp case.default.0x180016026
mov eax, dword [r13]
lea r8, [rbp - 0x61]
mov dword [rbp - 0x59], eax
lea rdx, [rbp - 0x41]
lea rax, [rbp - 0x59]
mov dword [rbp - 0x61], 0
mov qword [rsp + 0x28], rax
lea rcx, [rbp - 0x49]
mov r9, r12
mov dword [rsp + 0x20], 0x11a
mov dword [rbp - 0x49], 0x200
mov dword [rbp - 0x41], 0
call fcn.180037100
test eax, eax
jne 0x180016182
xor r9d, r9d
mov dword [rbp - 0x59], 4
lea rax, [rbp - 0x59]
xor edx, edx
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x57]
call fcn.1800170e0
mov r15, rax
movzx edx, byte [rbp - 0x68]
lea r9, [0x180000000]
dec esi
dec edi
cmp esi, 0x110
ja 0x180016010
xor r9d, r9d
mov dword [rbp - 0x61], 9
lea rax, [rbp - 0x61]
xor edx, edx
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x57]
call fcn.1800170e0
mov r15, rax
jmp 0x18001635a
lea eax, [rdx - 0x50]
mov byte [r15], al
inc r15
jmp case.default.0x180016026
lea rax, [rbp - 0x59]
mov dword [rbp - 0x61], 1
mov qword [rsp + 0x28], rax
lea r8, [rbp - 0x61]
mov r9, r12
mov dword [rsp + 0x20], 0x11a
lea rdx, [rbp - 0x41]
mov dword [rbp - 0x49], 0x200
lea rcx, [rbp - 0x49]
mov dword [rbp - 0x41], 0
mov dword [rbp - 0x59], 0xc
call fcn.180037100
test eax, eax
je 0x1800160b2
mov eax, 0xaa
nop
cmp eax, 0xaa
je 0x180016164
cmp eax, 0x64f0
je case.0x180016026.0
jmp 0x180016168
mov ebx, dword [r12]
add eax, 0x6446
cmp eax, 0xc88c
jbe 0x180016150
jmp 0x1800160b2
test r15, r15
jne case.default.0x180016026
mov eax, dword [r12]
jmp 0x180015fce
mov byte [r15], 3
add dword [r12 + 0x54], 3
mov byte [r15 + 1], 0xf
add r15, 2
jmp case.default.0x180016026
cmp dword [0x18004509c], 0xffffffff
jne 0x18001635a
xor edx, edx
xor ecx, ecx
mov r8d, 0xec
call fcn.180003aa0
jmp 0x18001635a
movsxd rax, dword [r13]
cmp byte [rax + r9 + 0x3bab0], 4
ja 0x18001635a
mov edi, 0x20
nop dword [rax]
cmp edi, 0x440
ja 0x18001629e
je 0x180016286
cmp edi, 0x20
je 0x180016255
cmp edi, 0x180
je 0x180016217
cmp edi, 0x2e0
jne 0x1800162e4
mov byte [r15], 0xf
inc r15
jmp 0x1800162e4
test r15, r15
jne 0x180016243
mov eax, 0x21
cmp eax, 0x21
je 0x180016233
cmp eax, 0xbc
je case.0x180016026.0
jmp 0x180016237
mov ebx, dword [r12]
add eax, 0x9b
cmp eax, 0x157
jb 0x180016221
mov byte [r15], 6
inc r15
add dword [r12 + 0x54], 6
jmp 0x1800162e4
xor r9d, r9d
mov dword [rbp - 0x41], 7
lea rax, [rbp - 0x41]
xor edx, edx
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x57]
call fcn.1800170e0
movzx edx, byte [rbp - 0x68]
lea r9, [0x180000000]
mov r15, rax
jmp 0x1800162e4
mov byte [r15], dl
movsxd rax, dword [r13]
movzx eax, byte [rax + r9 + 0x3bab0]
or al, 0xc0
mov byte [r15 + 1], al
jmp 0x1800162e0
cmp edi, 0x5a0
je 0x1800162da
cmp edi, 0x700
je 0x1800162bc
cmp edi, 0x860
je case.0x180016026.0
jmp 0x1800162e4
movsxd rax, dword [r13]
movzx ecx, byte [rax + r9 + 0x3bab0]
movzx eax, cl
or al, 0xf8
shl al, 3
or al, cl
mov byte [r15], al
xor ebx, ebx
jmp 0x1800162e4
mov word [r15], 0xb60f
add r15, 2
add edi, 0x160
cmp edi, 0x9a0
jbe 0x1800161e0
jmp 0x18001635a
mov byte [r15], 0xf
inc r15
jmp 0x18001635a
mov eax, r14d
sub eax, 0x212
je 0x18001634e
sub eax, 0x4f
je 0x180016346
sub eax, 0x4f
je 0x180016329
sub eax, 0x4f
je 0x180016325
cmp eax, 0x4f
je case.0x180016026.0
jmp 0x18001635a
xor ebx, ebx
jmp 0x18001635a
movsxd rax, dword [r13]
movzx ecx, byte [rax + r9 + 0x3bab0]
or cl, 0xf8
shl cl, 3
mov byte [r15], cl
mov byte [r15 + 1], StrCmpNCA
jmp 0x180016356
mov word [r15], 0xb60f
jmp 0x180016356
mov byte [r15], dl
mov byte [r15 + 1], 0xc0
add r15, 2
movzx edx, byte [rbp - 0x68]
lea r9, [0x180000000]
add r14d, 0x4f
cmp r14d, 0x39d
jb 0x180015f62
mov r8d, dword [rbp - 0x51]
mov rax, qword [rbp + 0x7f]
mov ecx, dword [rax]
mov eax, ecx
and eax, 0xffff80ff
cmp eax, 0x1f
jne 0x1800165af
test ecx, 0x7f00
jne 0x1800165af
movsxd rax, dword [r13]
cmp eax, 0xc
jg 0x1800165af
mov rcx, qword [rbp + 0x6f]
cmp eax, dword [rcx]
jne 0x1800165af
cmp byte [rax + r9 + 0x3bab0], 4
ja 0x1800165af
mov r14d, 0xf
nop word [rax + rax]
cmp r14d, 0xf
je 0x1800163e7
cmp r14d, 0x5e
jne 0x180016596
xor eax, eax
jmp 0x180015fce
cmp dword [r13], 1
je 0x1800164cd
mov esi, 0x67
mov edi, 5
nop dword [rax]
cmp edi, 5
ja case.default.0x180016416
mov eax, edi
mov ecx, dword [r9 + rax*4 + 0x16b50]
add rcx, r9
jmp rcx
mov byte [r15], 7
add dword [r12 + 0x54], 7
mov byte [r15 + 1], StrCmpNCA
add r15, 2
jmp case.default.0x180016416
mov byte [r15], StrCmpNCA
inc r15
jmp case.default.0x180016416
mov byte [r15], 0xf
mov byte [r15 + 1], dl
add r15, 2
jmp case.default.0x180016416
xor r9d, r9d
mov dword [rbp - 0x49], 8
lea rax, [rbp - 0x49]
xor edx, edx
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x57]
call fcn.1800170e0
mov r15, rax
test rax, rax
jne 0x18001648d
mov ecx, 0x50
mov eax, ecx
sub eax, 0x4f
je case.0x180016026.0
cmp eax, 1
jne 0x180016486
mov ebx, dword [r12]
dec ecx
cmp ecx, 0x4e
ja 0x180016472
lea r9, [0x180000000]
movzx edx, byte [rbp - 0x68]
dec esi
dec edi
cmp esi, 0x61
ja 0x180016400
jmp 0x180016596
mov word [r15], 0x8c0
add r15, 2
jmp case.default.0x180016416
movsxd rax, dword [r13]
movzx eax, byte [rax + r9 + 0x3bab0]
or al, 0xc0
mov byte [r15], al
inc r15
jmp case.default.0x180016416
mov esi, 0x11e
xor edi, edi
cmp edi, 6
ja case.default.0x1800164e8
mov ecx, dword [r9 + rdi*4 + 0x16b68]
add rcx, r9
jmp rcx
mov word [r15], 0xcd87
add r15, 2
jmp case.default.0x1800164e8
mov byte [r15], 0xf
mov byte [r15 + 1], dl
add r15, 2
jmp case.default.0x1800164e8
xor r9d, r9d
mov dword [rbp - 0x21], 0xa
lea rax, [rbp - 0x21]
xor edx, edx
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x57]
call fcn.1800170e0
mov r15, rax
lea r9, [0x180000000]
jmp case.default.0x1800164e8
mov byte [r15], 0xc8
inc r15
jmp case.default.0x1800164e8
mov word [r15], 0x8c1
add r15, 2
jmp case.default.0x1800164e8
test r15, r15
jne 0x180016575
mov eax, 0x6d
cmp eax, 0x6d
je 0x180016565
cmp eax, 0x176b
je case.0x180016026.0
jmp 0x180016569
mov ebx, dword [r12]
add eax, 0x16fe
cmp eax, 0x2dfc
jbe 0x180016553
mov byte [r15], 9
inc r15
add dword [r12 + 0x54], 9
movzx edx, byte [rbp - 0x68]
inc esi
inc edi
cmp esi, 0x125
jb 0x1800164d4
movzx edx, byte [rbp - 0x68]
add r14d, 0x4f
cmp r14d, 0xad
jb 0x1800163d0
mov r8d, dword [rbp - 0x51]
mov r14, qword [rbp + 0x7f]
mov r9d, dword [rbp - 0x65]
movzx r10d, byte [rbp - 0x69]
inc r8d
mov dword [rbp - 0x51], r8d
cmp r8d, dword [rbp - 0x19]
jae 0x180016720
mov rsi, qword [rbp + 0x47]
mov r11, qword [rbp + 0x5f]
jmp 0x180015d8f
mov rdx, qword [0x180046cb8]
lea r9, [rbp - 0x39]
xor r8d, r8d
mov byte [rbp - 0x39], 1
mov qword [rsp + 0x20], 0
lea ecx, [r8 + 0x31]
call fcn.1800233e0
movzx edx, byte [rbp - 0x68]
mov r8d, dword [rbp - 0x51]
mov qword [rbp - 9], 0
jmp case.0x180015db1.143
mov rcx, qword [0x180046cb8]
xor r9d, r9d
xor edx, edx
mov r8d, 0xc7
call fcn.18002e290
test al, al
je 0x1800163e0
movzx edx, byte [rbp - 0x68]
mov r8d, dword [rbp - 0x51]
jmp case.0x180015db1.143
mov eax, dword [r13]
xor dl, dl
mov byte [rbp - 0x68], dl
mov dword [rbp - 0xd], eax
jmp case.0x180015db1.143
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x51]
call fcn.1800265c0
movzx edx, byte [rbp - 0x68]
mov r8d, dword [rbp - 0x51]
jmp case.0x180015db1.143
xor r8d, r8d
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov r9, r12
xor ecx, ecx
mov qword [rsp + 0x20], 0
lea edx, [r8 + 0x2f]
call fcn.180021420
test al, al
jne 0x1800166ec
mov edi, 0xa2
nop dword [rax]
mov eax, edi
sub eax, 0xa0
je case.0x180016026.0
sub eax, 1
je 0x1800166e0
cmp eax, 1
jne 0x1800166e2
mov r9, qword [0x180046cb8]
xor eax, eax
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov ecx, 0xf8
mov qword [rsp + 0x20], rax
call fcn.180020610
jmp 0x1800166e2
xor ebx, ebx
dec edi
cmp edi, 0x9f
ja 0x1800166a0
movzx edx, byte [rbp - 0x68]
xor eax, eax
mov r8d, dword [rbp - 0x51]
mov dword [rbp - 0x31], eax
jmp case.0x180015db1.143
movzx r10d, byte [rbp + 0x77]
mov r9d, dword [rbp + 0x77]
mov dword [rbp - 0x11], eax
mov eax, dword [rbp + 0x77]
mov dword [rbp - 0xd], eax
mov eax, dword [rbp + 0x77]
mov dword [rbp - 0x31], eax
mov dword [rbp - 0x65], r9d
mov byte [rbp - 0x69], r10b
jmp 0x180016723
mov edi, dword [rbp + 0x77]
lea r14d, [rdi + 0x72c]
cmp edi, r14d
jae case.0x180016026.0
mov esi, dword [rbp + 0x77]
nop word [rax + rax]
cmp edi, 0x265
ja 0x180016961
je 0x180016950
cmp edi, 0x13f
ja 0x180016889
je 0x180016874
mov eax, edi
sub eax, 0x9a
je 0x180016845
sub eax, 0xc
je 0x180016799
cmp eax, 0x8d
jne 0x18001682e
mov byte [r15], 8
add dword [r12 + 0x54], 8
mov byte [r15 + 1], StrCmpNCA
add r15, 2
jmp 0x18001682e
mov rcx, qword [r12 + 0x28]
call qword [r12 + 0x20]
test al, al
je 0x180016821
mov r13d, dword [rbp - 0x31]
mov edi, 0x1a
cmp edi, 0x1a
je 0x1800167f3
cmp edi, 0xc9
je 0x1800167e5
cmp edi, 0x178
je 0x1800167d4
cmp edi, 0x227
jne 0x180016808
call qword [r12 + 0x50]
jmp 0x180016808
mov eax, 0x10624dd3
mul r13d
mov r13d, edx
shr r13d, 6
jmp 0x180016808
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r13d, eax
sub r13d, esi
jmp 0x180016808
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edx, 0x126
mov rcx, r12
mov esi, eax
call fcn.180022a10
add edi, 0xaf
cmp edi, 0x2d6
jb 0x1800167b0
mov edi, dword [rbp + 0x77]
mov dword [rbp - 0x31], r13d
mov r13, qword [rbp + 0x4f]
mov r9d, dword [rbp - 0x65]
movzx r10d, byte [rbp - 0x69]
movzx edx, byte [rbp - 0x68]
add edi, 0x99
mov dword [rbp + 0x77], edi
cmp edi, r14d
jb 0x180016740
jmp case.0x180016026.0
xor r9d, r9d
mov dword [rbp + 0x77], 9
lea rax, [rbp + 0x77]
xor edx, edx
mov rcx, r12
mov qword [rsp + 0x20], rax
lea r8d, [r9 + 0x57]
call fcn.1800170e0
mov r15, rax
test rax, rax
je 0x180016182
jmp 0x180016821
xor ecx, ecx
movzx eax, r10b
test r9d, r9d
cmove ecx, eax
movzx r10d, cl
mov byte [rbp - 0x69], cl
jmp 0x18001682e
mov eax, edi
sub eax, 0x1cc
je 0x180016944
cmp eax, 0xc
jne 0x18001682e
mov r9, qword [0x180046cb8]
xor eax, eax
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov ecx, 0xf8
mov qword [rsp + 0x20], rax
call fcn.180020610
movzx r10d, byte [rbp - 0x69]
test r10b, r10b
je 0x180016a65
mov rcx, qword [rbp - 9]
mov edi, 0xe8
nop dword [rax]
mov eax, edi
sub eax, 0xe8
je 0x18001692d
sub eax, 0x56
je 0x180016909
cmp eax, 0x56
jne 0x18001692d
test rcx, rcx
je 0x18001692d
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rbp - 9]
mov r9d, eax
mov dword [rbp - 0x65], eax
jmp 0x180016931
xor eax, eax
xor r9d, r9d
mov dword [rsp + 0x28], eax
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call sub.RPCRT4.dll_MesIncrementalHandleReset
mov rcx, qword [rbp - 9]
mov r9d, eax
mov dword [rbp - 0x65], eax
jmp 0x180016931
mov r9d, dword [rbp - 0x65]
add edi, 0x56
cmp edi, 0x1ea
jb 0x1800168e0
mov edi, dword [rbp + 0x77]
jmp 0x180016825
mov byte [r15], 0xf
inc r15
jmp 0x18001682e
mov byte [r15], dl
mov byte [r15 + 1], 0xc0
add r15, 2
jmp 0x18001682e
cmp edi, 0x271
je 0x180016a2b
cmp edi, 0x2fe
je 0x180016a1c
cmp edi, 0x397
je 0x180016a0d
cmp edi, 0x430
je 0x180016a47
cmp edi, 0x4c9
jne 0x18001682e
mov ecx, dword [rbp - 0xd]
lea r9, [rbp - 0x41]
mov r11d, dword [rbp - 0x11]
lea r8, [rbp - 0x49]
mov rax, qword [rbp + 0x7f]
lea rdx, [rbp - 0x21]
mov dword [rbp - 0x41], ecx
mov dword [rbp + 0x77], ecx
mov ecx, 0x9a
mov dword [rbp - 0x49], 0
mov eax, dword [rax]
mov dword [rbp - 0x21], eax
lea rax, [rbp + 0x77]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x19]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x59]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x61]
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x19], 0xc
mov dword [rbp - 0x61], r11d
mov dword [rbp - 0x59], r11d
call fcn.18000e3e0
jmp 0x180015fce
mov word [r15], 0x95c0
add r15, 2
jmp 0x18001682e
mov word [r15], 0xb60f
add r15, 2
jmp 0x18001682e
mov eax, 0x9d
cmp eax, 0x9d
je 0x180016ab8
add eax, 0x5fac
cmp eax, 0x5fac
jbe 0x180016a30
mov rax, qword [rbp + 0x7f]
mov eax, dword [rax]
and eax, 0xffff80ff
cmp eax, 0x19
jl 0x180016a70
mov dword [r12 + 0x7c], 1
jmp 0x18001682e
mov r9d, dword [rbp - 0x65]
jmp 0x18001682a
mov rax, qword [rbp + 0x5f]
lea r8, [rbp - 0x19]
mov r9, r12
mov dword [rbp - 0x19], 0
lea rdx, [rbp - 0x59]
mov dword [rbp - 0x61], 0xc
lea rcx, [rbp - 0x61]
mov eax, dword [rax]
mov dword [rbp - 0x59], eax
mov eax, dword [r13]
mov dword [rbp + 0x77], eax
lea rax, [rbp + 0x77]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x11a
call fcn.180037100
jmp 0x180015fce
mov eax, dword [rbp - 0x31]
jmp 0x180015fce