Function at 0x180008c80
Capabilities:
Check for time delay via gettickcount
Get disk size
Get memory capacity
Get system information on windows
Timestomp file

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
movaps xmmword [rsp + 0x210], xmm6
mov rax, qword [0x18005c020]
xor rax, rsp
mov qword [rbp + 0x108], rax
mov qword [rsp + 0x50], rdx
mov r12, rcx
mov qword [rbp - 0x60], rcx
lea rcx, [rbp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, str.Current_Time_2:
lea rsi, [0x180062260]
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xf0]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce8]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xf2]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce8]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xf6]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce4]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xf8]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xfa]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xfc]
call fcn.18000ffa0
mov rcx, rax
call fcn.180012b30
lea rcx, [rbp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, str.Current_Time_1:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xf8]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xfa]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp + 0xfc]
call fcn.18000ffa0
mov rcx, rax
call fcn.180012b30
mov ebx, 1
mov r8d, ebx
mov r15d, 2
mov ecx, r15d
mov eax, 0x11
cdq
idiv ecx
test edx, edx
je 0x180008e29
inc ecx
cmp ecx, 8
jle 0x180008e14
jmp 0x180008e2c
xor r8d, r8d
lea rdi, str._d_is_not_a_prime_number._n
lea r13, str._d_is_a_prime_number._n
mov rcx, r13
test r8d, r8d
cmove rcx, rdi
mov edx, 0x11
call fcn.1800017e0
mov edx, 6
mov r8d, 0x2d0
lea rcx, str.Factorial_of__d_is__d_n
call fcn.1800017e0
mov edx, 0x2c
lea rcx, str._c_is_a_punctuation_mark._n
call fcn.1800017e0
mov edx, 0x65
lea rcx, str._c_is_a_lowercase_letter._n
call fcn.1800017e0
mov r8d, ebx
mov ecx, r15d
nop dword [rax]
mov eax, 0x11
cdq
idiv ecx
test edx, edx
je 0x180008ea5
inc ecx
cmp ecx, 8
jle 0x180008e90
jmp 0x180008ea8
xor r8d, r8d
mov rcx, r13
test r8d, r8d
cmove rcx, rdi
mov edx, 0x11
call fcn.1800017e0
mov edx, 0x48
lea rcx, str._c_is_an_uppercase_letter._n
call fcn.1800017e0
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rdx, str.Processor_Architecture:
mov rcx, rsi
call fcn.1800128c0
movzx ecx, word [rsp + 0x60]
test ecx, ecx
je 0x180008f22
sub ecx, 5
je 0x180008f19
sub ecx, ebx
je 0x180008f10
cmp ecx, 3
je 0x180008f07
lea rdx, str.Unknown
jmp 0x180008f29
lea rdx, str.AMD64
jmp 0x180008f29
lea rdx, str.IA64
jmp 0x180008f29
lea rdx, [0x18005507c]
jmp 0x180008f29
lea rdx, [0x180055088]
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
lea rdx, str.Number_of_Processors:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x80]
call fcn.18000fdf0
mov rcx, rax
call fcn.180012b30
lea rdx, str.Processor_Type:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x7c]
call fcn.18000fdf0
mov rcx, rax
call fcn.180012b30
lea rdx, str.Processor_Level:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp - 0x74]
call fcn.18000ffa0
mov rcx, rax
call fcn.180012b30
lea rdx, str.Processor_Revision:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rbp - 0x72]
call fcn.18000ffa0
mov rcx, rax
call fcn.180012b30
xorps xmm0, xmm0
movsd xmm1, qword [0x180055448]
ucomisd xmm0, xmm1
ja 0x180008fda
sqrtpd xmm0, xmm1
jmp 0x180008fe2
movaps xmm0, xmm1
call fcn.180043f34
cvtsd2ss xmm0, xmm0
xorps xmm6, xmm6
cvtss2sd xmm6, xmm0
movaps xmm2, xmm6
movq r8, xmm6
mov edx, 9
lea rcx, str.Square_root_of__d_is__.2f_n
call fcn.1800017e0
mov edx, 8
lea r8d, [rdx + 0xd]
lea rcx, str.Fibonacci_number_at_position__d_is__d_n
call fcn.1800017e0
mov edx, 0x2c
lea rcx, str._c_is_a_punctuation_mark._n
call fcn.1800017e0
mov edx, 0x7e4
lea rcx, str._d_is_a_leap_year._n
call fcn.1800017e0
mov edx, 5
lea r9d, [rdx + 3]
lea r8d, [rdx - 2]
lea rcx, str.Sum_of__d_and__d_is__d_n
call fcn.1800017e0
lea r9, [rsp + 0x40]
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0xf0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x1800090c6
mov rdi, qword [rsp + 0x40]
shr rdi, 0x1e
mov rbx, qword [rbp + 0xd0]
shr rbx, 0x1e
lea rdx, str.Disk_Usage:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
mov rdx, rbx
call fcn.18000fc40
mov rcx, rax
lea rdx, str._GB_Total_
call fcn.1800128c0
mov rcx, rax
mov rdx, rdi
call fcn.18000fc40
lea rdx, str._GB_Free
jmp 0x1800090d0
mov rax, rsi
lea rdx, str.Failed_to_get_disk_usage_
mov rcx, rax
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x4c]
call fcn.18001d1b0
mov dword [rbp - 0x50], 0x114
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x18000915d
lea rdx, str.Operating_System_Version:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x4c]
call fcn.18000fdf0
mov rcx, rax
lea rdx, [0x180055154]
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x48]
call fcn.18000fdf0
mov rcx, rax
lea rdx, str.__Build
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x44]
call fcn.18000fdf0
lea rdx, [0x180055144]
jmp 0x180009167
mov rax, rsi
lea rdx, str.Failed_to_get_operating_system_version_
mov rcx, rax
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
mov edx, 0xf
mov r9d, 0x14
mov r8d, r9d
lea rcx, str.The_maximum_number_between__d_and__d_is__d_n
call fcn.1800017e0
xor ecx, ecx
call fcn.1800230fc
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
call fcn.180023458
mov r9, rax
lea r8, str._Y__m__d__H:_M:_S
mov edx, 0x14
lea rcx, [rbp + 0xf0]
call fcn.1800204c4
lea rdx, str.Current_Time_2:
mov rcx, rsi
call fcn.1800128c0
mov rcx, rax
lea rdx, [rbp + 0xf0]
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
mov rcx, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1800091f7
mov rcx, qword [r12]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x180
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
mov qword [rbp + 0xf0], rax
mov edx, 7
lea rcx, str._d_is_odd_n
call fcn.1800017e0
mov edx, 7
lea rcx, str._d_is_odd_n
call fcn.1800017e0
mov edx, 0x35
lea rcx, str._c_is_a_digit._n
call fcn.1800017e0
test rbx, rbx
jne 0x1800092a6
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x18000929f
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x18000929a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009ba1
mov rcx, r8
call fcn.18001ae7c
xor al, al
jmp 0x180009b58
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r14, rax
movabs rax, 0x8daea1d7f4cf721b
mul r14
mov rsi, r14
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 0x1a
imul rax, rsi, 0x5265c00
mov rcx, r14
sub rcx, rax
movabs r8, 0x4a90be587de6e565
mov rax, r8
mul rcx
mov rdi, rdx
shr rdi, 0x14
mov rax, r8
mul r14
shr rdx, 0x14
imul rax, rdx, 0x36ee80
mov rbx, r14
sub rbx, rax
movabs rcx, 0x179ec9cbd821dc3b
mov rax, rcx
mul rbx
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 0xf
mov rax, rcx
mul r14
mov rax, r14
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 0xf
imul rax, rax, 0xea60
sub r14, rax
movabs rax, 0x624dd2f1a9fbe77
mul r14
sub r14, rdx
shr r14, 1
add r14, rdx
shr r14, 9
lea rdx, str.System_Uptime:
lea rcx, [0x180062260]
call fcn.1800128c0
mov rcx, rax
mov edx, esi
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._days_
call fcn.1800128c0
mov rcx, rax
mov edx, edi
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._hours_
call fcn.1800128c0
mov rcx, rax
mov edx, ebx
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._minutes_
call fcn.1800128c0
mov rcx, rax
mov edx, r14d
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._seconds
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
xor ebx, ebx
mov dword [rbp + 0xd0], 8
lea rcx, [rbp + 0xd0]
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x180009415
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [rbp + 0xd4]
mov eax, 0x10624dd3
mul ecx
mov ebx, edx
shr ebx, 6
lea rdx, str.Idle_Time:
lea rdi, [0x180062260]
mov rcx, rdi
call fcn.1800128c0
mov rcx, rax
mov edx, ebx
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._seconds
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
mov edx, 0x20
lea rcx, str._c_is_a_whitespace_character._n
call fcn.1800017e0
mov edx, 4
lea r8d, [rdx + 0xc]
lea rcx, str.Square_of__d_is__d_n
call fcn.1800017e0
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, str.Current_Time_2:
mov rcx, rdi
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x40]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce8]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x42]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce8]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x46]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce4]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x48]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x4a]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x4c]
call fcn.18000ffa0
mov rcx, rax
call fcn.180012b30
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rdx, str.Current_Time_1:
mov rcx, rdi
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x48]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x4a]
call fcn.18000ffa0
mov rcx, rax
lea rdx, [0x180054ce0]
call fcn.1800128c0
mov rcx, rax
movzx edx, word [rsp + 0x4c]
call fcn.18000ffa0
mov rcx, rax
call fcn.180012b30
mov edx, 0xa
lea r9d, [rdx - 7]
lea r8d, [rdx - 3]
lea rcx, str.Difference_between__d_and__d_is__d_n
call fcn.1800017e0
lea rdx, [rbp + 0xe8]
mov r14, qword [rsp + 0x50]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x4c]
call fcn.18001d1b0
mov dword [rbp - 0x50], 0x114
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x180009642
lea rdx, str.Operating_System_Version:
mov rcx, rdi
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x4c]
call fcn.18000fdf0
mov rcx, rax
lea rdx, [0x180055154]
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x48]
call fcn.18000fdf0
mov rcx, rax
lea rdx, str.__Build
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x44]
call fcn.18000fdf0
lea rsi, [0x180055144]
mov rdx, rsi
jmp 0x180009653
mov rax, rdi
lea rdx, str.Failed_to_get_operating_system_version_
lea rsi, [0x180055144]
mov rcx, rax
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
mov dword [rsp + 0x60], 0x40
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x1800096d4
mov rdi, qword [rsp + 0x70]
shr rdi, 0x14
mov rbx, qword [rsp + 0x68]
shr rbx, 0x14
lea rdx, str.Memory_Usage:
lea rcx, [0x180062260]
call fcn.1800128c0
mov rcx, rax
mov rdx, rbx
call fcn.18000fc40
mov rcx, rax
lea rdx, str._MB_Total_
call fcn.1800128c0
mov rcx, rax
mov rdx, rdi
call fcn.18000fc40
lea rdx, str._MB_Available
lea rdi, [0x180062260]
jmp 0x1800096de
mov rax, rdi
lea rdx, str.Failed_to_get_memory_usage_
mov rcx, rax
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
mov edx, 0x65
lea rcx, str._c_is_a_lowercase_letter._n
call fcn.1800017e0
lea rdx, [rbp + 0xe0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
movsd xmm3, qword [0x180055440]
movq r9, xmm3
movsd xmm2, qword [0x180055438]
movq r8, xmm2
movsd xmm1, qword [0x180055430]
movq rdx, xmm1
lea rcx, str.Product_of__.2f_and__.2f_is__.2f_n
call fcn.1800017e0
mov edx, 4
lea r8d, [rdx + 0xc]
lea rcx, str.Square_of__d_is__d_n
call fcn.1800017e0
movaps xmm2, xmm6
movq r8, xmm6
mov edx, 9
lea rcx, str.Square_root_of__d_is__.2f_n
call fcn.1800017e0
lea rdx, [rbp + 0xd8]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov edx, 0x2c
lea rcx, str._c_is_a_punctuation_mark._n
call fcn.1800017e0
mov edx, 0x48
lea rcx, str._c_is_an_uppercase_letter._n
call fcn.1800017e0
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0xd0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x180009819
mov rdi, qword [rsp + 0x50]
shr rdi, 0x1e
mov rbx, qword [rsp + 0x40]
shr rbx, 0x1e
lea rdx, str.Disk_Usage:
lea rcx, [0x180062260]
call fcn.1800128c0
mov rcx, rax
mov rdx, rbx
call fcn.18000fc40
mov rcx, rax
lea rdx, str._GB_Total_
call fcn.1800128c0
mov rcx, rax
mov rdx, rdi
call fcn.18000fc40
lea rdx, str._GB_Free
lea rdi, [0x180062260]
jmp 0x180009823
mov rax, rdi
lea rdx, str.Failed_to_get_disk_usage_
mov rcx, rax
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
lea r9, [rbp + 0xd8]
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xe8]
mov rbx, qword [rbp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov dword [rbp + 0xd0], eax
mov edx, 8
lea r8d, [rdx + 0xd]
lea rcx, str.Fibonacci_number_at_position__d_is__d_n
call fcn.1800017e0
mov eax, 0x11
cdq
idiv r15d
test edx, edx
je 0x180009890
inc r15d
cmp r15d, 8
jle 0x180009873
mov eax, 1
jmp 0x180009892
xor eax, eax
test eax, eax
lea rax, str._d_is_not_a_prime_number._n
cmove r13, rax
mov edx, 0x11
mov rcx, r13
call fcn.1800017e0
mov edx, 0x65
lea rcx, str._c_is_a_lowercase_letter._n
call fcn.1800017e0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0xf
mov r9d, 0x14
mov r8d, r9d
lea rcx, str.The_maximum_number_between__d_and__d_is__d_n
call fcn.1800017e0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x4c]
call fcn.18001d1b0
mov dword [rbp - 0x50], 0x114
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x180009956
lea rdx, str.Operating_System_Version:
mov rcx, rdi
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x4c]
call fcn.18000fdf0
mov rcx, rax
lea rdx, [0x180055154]
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x48]
call fcn.18000fdf0
mov rcx, rax
lea rdx, str.__Build
call fcn.1800128c0
mov rcx, rax
mov edx, dword [rbp - 0x44]
call fcn.18000fdf0
jmp 0x180009960
mov rax, rdi
lea rsi, str.Failed_to_get_operating_system_version_
mov rdx, rsi
mov rcx, rax
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r14, rax
movabs rax, 0x8daea1d7f4cf721b
mul r14
mov rsi, r14
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 0x1a
imul rcx, rsi, 0x5265c00
mov rdx, r14
sub rdx, rcx
movabs rcx, 0x4a90be587de6e565
mov rax, rcx
mul rdx
mov rdi, rdx
shr rdi, 0x14
mov rax, rcx
mul r14
shr rdx, 0x14
imul rax, rdx, 0x36ee80
mov rbx, r14
sub rbx, rax
movabs rcx, 0x179ec9cbd821dc3b
mov rax, rcx
mul rbx
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 0xf
mov rax, rcx
mul r14
mov rcx, r14
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 0xf
imul rcx, rcx, 0xea60
sub r14, rcx
movabs rax, 0x624dd2f1a9fbe77
mul r14
sub r14, rdx
shr r14, 1
add r14, rdx
shr r14, 9
lea rdx, str.System_Uptime:
lea rcx, [0x180062260]
call fcn.1800128c0
mov rcx, rax
mov edx, esi
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._days_
call fcn.1800128c0
mov rcx, rax
mov edx, edi
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._hours_
call fcn.1800128c0
mov rcx, rax
mov edx, ebx
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._minutes_
call fcn.1800128c0
mov rcx, rax
mov edx, r14d
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._seconds
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
xor ebx, ebx
mov dword [rsp + 0x40], 8
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetLastInputInfo]
test eax, eax
je 0x180009adf
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
sub r8d, dword [rsp + 0x44]
mov eax, 0x10624dd3
mul r8d
mov ebx, edx
shr ebx, 6
lea rdx, str.Idle_Time:
lea rcx, [0x180062260]
call fcn.1800128c0
mov rcx, rax
mov edx, ebx
call fcn.18000fdf0
mov rcx, rax
lea rdx, str._seconds
call fcn.1800128c0
mov rcx, rax
call fcn.180012b30
cmp dword [rbp + 0xd0], 0
setne bl
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x180009b55
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x180009b50
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180009ba1
mov rcx, r8
call fcn.18001ae7c
movzx eax, bl
mov qword [r12 + 0x10], 0
mov qword [r12 + 0x18], 0xf
mov byte [r12], 0
mov rcx, qword [rbp + 0x108]
xor rcx, rsp
call fcn.18001ae20
mov rbx, qword [rsp + 0x270]
movaps xmm6, xmmword [rsp + 0x210]
add rsp, 0x220
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001ff34
int3