Function at 0x140055570
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x19c0]
mov eax, 0x1ac0
call fcn.14005efb0
sub rsp, rax
mov qword [rbp + 0xa0], 0xfffffffffffffffe
mov qword [rsp + 0x1af8], rbx
mov qword [rsp + 0x1b00], rsi
mov qword [rsp + 0x1b08], rdi
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x19b0], rax
mov r14, rcx
lea rsi, [0x1400021b0]
mov qword [rbp + 0x1000], rsi
lea r15, [0x1400023c0]
mov qword [rbp + 0x1008], r15
lea rdi, [0x140002198]
mov qword [rbp + 0x1010], rdi
mov dword [rbp + 0x1018], 0x235
mov dword [rbp + 0x101c], 1
mov dword [rbp + 0x1020], 0xff
xor r13d, r13d
mov dword [rbp + 0x10a0], 0x1000000
xor edx, edx
lea r8d, [r13 + 0x78]
lea rcx, [rbp + 0x1028]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rbp + 0x1000]
lea rcx, [rsp + 0x60]
call fcn.140052e50
nop
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_2.dll_GetCurrentThreadId]
mov dword [r14 + 0x12c], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoInitializeEx]
mov ebx, eax
mov dword [rsp + 0x68], eax
test eax, eax
js 0x140068f96
mov byte [r14 + 0x150], 1
mov qword [rbp - 8], r13
xorps xmm0, xmm0
movdqa xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmmword [rbp + 0x50], xmm1
mov byte [rbp - 0x10], r13b
mov qword [rbp + 0x60], r13
lea rcx, [rbp - 0x10]
call fcn.140051120
mov qword [rsp + 0x40], r13
mov dword [rsp + 0x38], 0x3042
mov qword [rsp + 0x30], r13
mov edi, 2
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 6
xor r9d, r9d
xor r8d, r8d
or edx, 0xffffffff
mov r12, qword [rbp + 0x38]
mov rcx, r12
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoInitializeSecurity]
mov ebx, eax
mov dword [rsp + 0x68], eax
test eax, eax
js 0x140069090
lea ecx, [rdi + 0xf]
call fcn.140056120
mov ebx, eax
mov dword [rsp + 0x68], eax
test eax, eax
js 0x140069191
lea ecx, [rdi + 0x10]
call fcn.140056120
mov ebx, eax
mov dword [rsp + 0x68], eax
test eax, eax
js 0x140069292
lea ecx, [rdi + 0x13]
call fcn.140056120
mov ebx, eax
mov dword [rsp + 0x68], eax
test eax, eax
js 0x140069393
mov qword [rbp + 0xcb8], rsi
mov qword [rbp + 0xcc0], r15
lea rax, [0x140002198]
mov qword [rbp + 0xcc8], rax
mov dword [rbp + 0xcd0], 0x283
mov dword [rbp + 0xcd4], 1
mov dword [rbp + 0xcd8], 0xff
mov dword [rbp + 0xd58], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xce0]
call sub.msvcrt.dll_memset
lea rdx, [rbp + 0xcb8]
lea rcx, [rsp + 0x60]
call fcn.140058980
xor edx, edx
xor ecx, ecx
mov r9d, 0x1f0003
lea r8d, [rdx + 1]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_CreateWaitableTimerExW]
mov rbx, rax
mov rcx, qword [r14 + 0x138]
test rcx, rcx
jne 0x14006949f
mov qword [r14 + 0x138], rbx
cmp rbx, 0
je 0x1400694ab
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_CreateEventW]
mov qword [r14 + 0x148], rax
test rax, rax
je 0x1400695da
lea rdx, [0x1401544ec]
mov ecx, 0x68
call fcn.14005de74
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x1400560f9
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
call fcn.140057708
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x30], r13
mov dword [rbx + 0x60], r13d
mov qword [r14 + 0x160], rbx
test rbx, rbx
je 0x140069709
cmp dword [0x140154b14], 0
jne 0x14006979e
mov dword [rbp + 0x1890], 0x11c
lea rcx, [rbp + 0x1890]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetVersionExW]
movzx ecx, byte [rbp + 0x19aa]
lea eax, [rcx - 2]
cmp al, 1
ja 0x14006977e
test byte [rbp + 0x19a8], 0x40
jne 0x14006978d
mov dword [0x140154b18], 1
mov dword [0x140154b10], edi
mov dword [0x140154b14], 1
cmp edi, 2
jne 0x140055a9d
mov rbx, qword [r14 + 0x100]
mov rdi, qword [r14 + 0x160]
lea rax, [0x140003db0]
mov qword [rbp + 0xc10], rax
lea rax, [0x140003e60]
mov qword [rbp + 0xc18], rax
lea rax, [0x140003d98]
mov qword [rbp + 0xc20], rax
mov dword [rbp + 0xc28], 0x621
mov dword [rbp + 0xc2c], 1
mov dword [rbp + 0xc30], 0xff
mov dword [rbp + 0xcb0], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xc38]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rbp + 0xc10]
lea rcx, [rbp + 0x270]
call fcn.140052e50
nop
mov qword [rdi], rbx
lea rcx, [rdi + 0x38]
call fcn.140057bb0
movups xmm0, xmmword [0x140001990]
movaps xmmword [rbp + 0x70], xmm0
lea r8, [rdi + 8]
lea rdx, [rbp + 0x70]
mov rcx, rdi
call fcn.140054a60
movups xmm0, xmmword [0x1400019a0]
movaps xmmword [rbp + 0x90], xmm0
lea r8, [rdi + 0x10]
lea rdx, [rbp + 0x90]
mov rcx, rdi
call fcn.140054a60
movups xmm0, xmmword [0x1400019c0]
movaps xmmword [rbp + 0x80], xmm0
lea r8, [rdi + 0x18]
lea rdx, [rbp + 0x80]
mov rcx, rdi
call fcn.140054a60
nop
mov rbx, r13
mov rcx, qword [rbp + rbx*8 + 0x2b0]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbp + rbx*8 + 0x2b0], r13
inc rbx
cmp rbx, 4
jl 0x1400559a0
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r9d, eax
sub r9d, dword [rbp + 0x2a4]
mov eax, 0x10624dd3
mul r9d
mov r10d, edx
shr r10d, 6
imul ecx, r10d, 0x3e8
mov ebx, r9d
sub ebx, ecx
mov eax, 0x88888889
mul r10d
shr edx, 5
imul eax, edx, 0x3c
sub r10d, eax
mov eax, 0x45e7b273
mul r9d
mov ecx, edx
shr ecx, 0xe
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov eax, 0x95217cb1
mul r9d
mov r11d, edx
shr r11d, 0x15
mov eax, 0x88888889
mul r11d
shr edx, 5
imul eax, edx, 0x3c
sub r11d, eax
mov r8d, dword [rbp + 0x2a8]
cmp r8d, 0xff
jne 0x140055a4d
mov r8d, RegisterTypeLib
mov eax, dword [rbp + 0x278]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r11d
lea r9, [0x1400043e0]
lea rdx, [0x1400043d0]
lea rcx, [rbp + 0x270]
call fcn.140051070
mov rcx, qword [rbp + 0x2d0]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
mov byte [r14 + 0x151], 1
lea r15, [r14 + 0x170]
mov qword [rsp + 0x20], r15
lea r9, [0x140001930]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x140001970]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoCreateInstance]
mov ebx, eax
mov dword [rsp + 0x68], eax
mov qword [rbp + 0x1c8], rsi
lea rax, [0x1400023c0]
mov qword [rbp + 0x1d0], rax
lea rax, [0x140002198]
mov qword [rbp + 0x1d8], rax
mov dword [rbp + 0x1e0], 0x2ae
mov dword [rbp + 0x1e4], 1
mov dword [rbp + 0x1e8], 0xff
mov dword [rbp + 0x268], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x1f0]
call sub.msvcrt.dll_memset
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x50], rax
test ebx, ebx
js 0x1400697a9
mov esi, 0xf
cmp byte [rbp + 0x26b], 0
je 0x140055b66
lea rbx, [rbp + 0x1f0]
mov edi, esi
mov rcx, qword [rbx]
test rcx, rcx
jne 0x1400697d4
add rbx, 8
dec rdi
jne 0x140055b51
lea rcx, [r14 + 0x178]
mov rdx, qword [r15]
call fcn.140057750
lea rax, [0x1400021b0]
mov qword [rbp + 0xd60], rax
lea rax, [0x1400023c0]
mov qword [rbp + 0xd68], rax
lea rax, [0x140002198]
mov qword [rbp + 0xd70], rax
mov dword [rbp + 0xd78], 0x2b3
mov dword [rbp + 0xd7c], 1
mov dword [rbp + 0xd80], 0xff
mov dword [rbp + 0xe00], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xd88]
call sub.msvcrt.dll_memset
lea r8, [0x140002430]
lea rdx, [rbp + 0xd60]
lea rcx, [rsp + 0x60]
call fcn.1400510b0
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x18]
mov rcx, rbx
call qword [fcn.14005e6a0]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 5
lea r9, [0x140001930]
xor r8d, r8d
lea rdx, [0x14005baa0]
mov rcx, rdi
call rbx
mov ebx, eax
mov dword [rsp + 0x68], eax
lea rdi, [0x1400021b0]
mov qword [rbp + 0x120], rdi
lea r15, [0x1400023c0]
mov qword [rbp + 0x128], r15
lea rax, [0x140002198]
mov qword [rbp + 0x130], rax
mov dword [rbp + 0x138], 0x2b5
mov dword [rbp + 0x13c], 1
mov dword [rbp + 0x140], 0xff
mov dword [rbp + 0x1c0], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x148]
call sub.msvcrt.dll_memset
lea rax, [rbp + 0x120]
mov qword [rsp + 0x50], rax
test ebx, ebx
js 0x1400697e2
cmp byte [rbp + 0x1c3], 0
je 0x140055cd5
lea rbx, [rbp + 0x148]
nop word [rax + rax]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14006980d
add rbx, 8
dec rsi
jne 0x140055cc0
mov qword [rbp - 0x18], r13
lea rax, [0x140001b68]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x30], 1
lea r8, [0x140002080]
mov rdx, 0xffffffff80000002
lea rcx, [rbp - 0x30]
call fcn.140050870
test al, al
je 0x140055d2d
mov dword [rsp + 0x50], r13d
lea r8, [rsp + 0x50]
lea rdx, [0x140002038]
lea rcx, [rbp - 0x30]
call fcn.14004d450
test al, al
jne 0x14006981b
cmp qword [r14 + 0x1c0], 0
jne 0x140055d4f
cmp dword [0x140154b14], 0
je 0x140056101
mov qword [r14 + 0x1c0], 0xffffffff94b62e00
mov r8b, 1
mov edx, 4
mov rcx, r14
call fcn.140053e30
mov byte [r14 + 0x1c8], 1
call fcn.1400587d0
call fcn.140058480
call fcn.140058250
call fcn.140057e80
mov rcx, qword [r14 + 0x148]
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_SetEvent]
test eax, eax
je 0x140069832
lea rsi, [0x140005f30]
mov qword [rbp + 0x8c8], rsi
lea r14, [0x1400060b0]
mov qword [rbp + 0x8d0], r14
lea r15, [0x140005f88]
mov qword [rbp + 0x8d8], r15
mov dword [rbp + 0x8e0], 0x29e
mov dword [rbp + 0x8e4], reloc.VssTrace.DLL_Ordinal_11
mov dword [rbp + 0x8e8], 0xff
mov dword [rbp + 0x968], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x8f0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rbp + 0x8c8]
lea rcx, [rbp + 0xb0]
call fcn.140052e50
mov rbx, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x140055e27
call qword [sym.imp.api_ms_win_core_registry_l1_1_0.dll_RegCloseKey]
mov edi, eax
test eax, eax
jne 0x14006994b
test rbx, rbx
je 0x140055e35
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov rbx, r13
mov rcx, qword [rbp + rbx*8 + 0xf0]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbp + rbx*8 + 0xf0], r13
inc rbx
cmp rbx, 4
jl 0x140055e38
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r8d, eax
sub r8d, dword [rbp + 0xe4]
mov eax, 0x10624dd3
mul r8d
mov r9d, edx
shr r9d, 6
imul ecx, r9d, 0x3e8
mov r11d, r8d
sub r11d, ecx
mov eax, 0x88888889
mul r9d
shr edx, 5
imul eax, edx, 0x3c
sub r9d, eax
mov eax, 0x45e7b273
mul r8d
mov ecx, edx
shr ecx, 0xe
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov eax, 0x95217cb1
mul r8d
mov r10d, edx
shr r10d, 0x15
mov eax, 0x88888889
mul r10d
shr edx, 5
imul eax, edx, 0x3c
sub r10d, eax
mov edx, dword [rbp + 0xe8]
cmp edx, 0xff
jne 0x140055ee3
mov edx, RegisterTypeLib
mov eax, dword [rbp + 0xb8]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r8d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r10d
lea r9, [0x1400043e0]
mov r8d, edx
lea rdx, [0x1400043d0]
lea rcx, [rbp + 0xb0]
call fcn.140051070
mov rcx, qword [rbp + 0x110]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
nop
mov rcx, qword [rbp + 0x58]
call qword [sym.imp.KERNEL32.dll_LocalFree]
test r12, r12
je 0x140055f47
mov rcx, r12
call fcn.14005d774
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x140055f55
call fcn.14005d7b4
mov rcx, qword [rbp + 0x48]
test rcx, rcx
je 0x140055f63
call fcn.14005d7b4
mov rcx, qword [rbp + 0x50]
test rcx, rcx
je 0x140055f71
call fcn.14005d774
mov rcx, qword [rbp + 0x18]
test rcx, rcx
je 0x140055f7f
call fcn.14005d774
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x140055f8d
call fcn.14005d7b4
mov rcx, qword [rbp + 0x28]
test rcx, rcx
je 0x140055f9b
call fcn.14005d7b4
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x140055fa9
call fcn.14005d774
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140055fb7
call fcn.14005d774
mov rcx, qword [rbp]
test rcx, rcx
je 0x140055fc5
call fcn.14005d7b4
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x140055fd3
call fcn.14005d7b4
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140055fe2
call fcn.14005d774
nop
mov rbx, r13
mov rcx, qword [rbp + rbx*8 - 0x60]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbp + rbx*8 - 0x60], r13
inc rbx
cmp rbx, 4
jl 0x140055fe5
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r8d, eax
sub r8d, dword [rbp - 0x6c]
mov eax, 0x10624dd3
mul r8d
mov r9d, edx
shr r9d, 6
imul ecx, r9d, 0x3e8
mov r11d, r8d
sub r11d, ecx
mov eax, 0x88888889
mul r9d
shr edx, 5
imul ecx, edx, 0x3c
sub r9d, ecx
mov eax, 0x45e7b273
mul r8d
mov r10d, edx
shr r10d, 0xe
mov eax, 0x88888889
mul r10d
shr edx, 5
imul ecx, edx, 0x3c
sub r10d, ecx
mov eax, 0x95217cb1
mul r8d
mov ecx, edx
shr ecx, 0x15
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov edx, dword [rbp - 0x68]
cmp edx, 0xff
jne 0x140056084
mov edx, RegisterTypeLib
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r8d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], ecx
lea r9, [0x1400043e0]
mov r8d, edx
lea rdx, [0x1400043d0]
lea rcx, [rsp + 0x60]
call fcn.140051070
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
mov rcx, qword [rbp + 0x19b0]
xor rcx, rsp
call fcn.14005dc70
lea r11, [rsp + 0x1ac0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rbx, r13
jmp 0x140055834
call fcn.1401041c8
jmp 0x140055d44
mov qword [rbp + 0x6d0], rsi
mov qword [rbp + 0x6d8], r15
mov qword [rbp + 0x6e0], rdi
mov dword [rbp + 0x6e8], 0x23f
mov dword [rbp + 0x6ec], 1
mov dword [rbp + 0x6f0], 0xff
mov dword [rbp + 0x770], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x6f8]
call sub.msvcrt.dll_memset
mov r8d, ebx
lea rdx, [rbp + 0x11f8]
lea rcx, [rbp + 0x6d0]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 2]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x6d0]
call fcn.1400ff75c
mov qword [rbp + 0x970], rsi
mov qword [rbp + 0x978], r15
mov qword [rbp + 0x980], rdi
mov dword [rbp + 0x988], 0x240
mov dword [rbp + 0x98c], 1
mov dword [rbp + 0x990], 0xff
mov dword [rbp + 0xa10], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x998]
call sub.msvcrt.dll_memset
mov r8d, dword [rsp + 0x68]
mov dword [rsp + 0x20], r8d
lea r9, [0x14000de70]
lea rdx, [rbp + 0x970]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
nop
mov qword [rbp + 0x430], rsi
mov qword [rbp + 0x438], r15
lea rdi, [0x140002198]
mov qword [rbp + 0x440], rdi
mov dword [rbp + 0x448], 0x266
mov dword [rbp + 0x44c], 1
mov dword [rbp + 0x450], 0xff
mov dword [rbp + 0x4d0], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x458]
call sub.msvcrt.dll_memset
mov r8d, ebx
lea rdx, [rbp + 0x17e0]
lea rcx, [rbp + 0x430]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 3]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x430]
call fcn.1400ff75c
mov qword [rbp + 0x820], rsi
mov qword [rbp + 0x828], r15
mov qword [rbp + 0x830], rdi
mov dword [rbp + 0x838], 0x267
mov dword [rbp + 0x83c], 1
mov dword [rbp + 0x840], 0xff
mov dword [rbp + 0x8c0], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x848]
call sub.msvcrt.dll_memset
mov r8d, dword [rsp + 0x68]
mov dword [rsp + 0x20], r8d
lea r9, [0x14000ded0]
lea rdx, [rbp + 0x820]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
int3
mov qword [rbp + 0x2e0], rsi
mov qword [rbp + 0x2e8], r15
lea rdi, [0x140002198]
mov qword [rbp + 0x2f0], rdi
mov dword [rbp + 0x2f8], 0x26e
mov dword [rbp + 0x2fc], 1
mov dword [rbp + 0x300], 0xff
mov dword [rbp + 0x380], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x308]
call sub.msvcrt.dll_memset
mov r8d, ebx
lea rdx, [rbp + 0x13f0]
lea rcx, [rbp + 0x2e0]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 4]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x2e0]
call fcn.1400ff75c
mov qword [rbp + 0xac0], rsi
mov qword [rbp + 0xac8], r15
mov qword [rbp + 0xad0], rdi
mov dword [rbp + 0xad8], 0x26f
mov dword [rbp + 0xadc], 1
mov dword [rbp + 0xae0], 0xff
mov dword [rbp + 0xb60], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xae8]
call sub.msvcrt.dll_memset
mov r8d, dword [rsp + 0x68]
mov dword [rsp + 0x20], r8d
lea r9, [0x14000df30]
lea rdx, [rbp + 0xac0]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
int3
mov qword [rbp + 0x580], rsi
mov qword [rbp + 0x588], r15
lea rdi, [0x140002198]
mov qword [rbp + 0x590], rdi
mov dword [rbp + 0x598], 0x275
mov dword [rbp + 0x59c], 1
mov dword [rbp + 0x5a0], 0xff
mov dword [rbp + 0x620], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x5a8]
call sub.msvcrt.dll_memset
mov r8d, ebx
lea rdx, [rbp + 0x1690]
lea rcx, [rbp + 0x580]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 4]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x580]
call fcn.1400ff75c
mov qword [rbp + 0x1150], rsi
mov qword [rbp + 0x1158], r15
mov qword [rbp + 0x1160], rdi
mov dword [rbp + 0x1168], 0x276
mov dword [rbp + 0x116c], 1
mov dword [rbp + 0x1170], 0xff
mov dword [rbp + 0x11f0], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x1178]
call sub.msvcrt.dll_memset
mov r8d, dword [rsp + 0x68]
mov dword [rsp + 0x20], r8d
lea r9, [0x14000dfa0]
lea rdx, [rbp + 0x1150]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
int3
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], r15
lea rax, [0x140002198]
mov qword [rbp + 0x398], rax
mov dword [rbp + 0x3a0], 0x27c
mov dword [rbp + 0x3a4], 1
mov dword [rbp + 0x3a8], 0xff
mov dword [rbp + 0x428], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3b0]
call sub.msvcrt.dll_memset
mov r8d, ebx
lea rdx, [rbp + 0x1540]
lea rcx, [rbp + 0x388]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 0x1d]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x388]
call fcn.1400ff75c
mov qword [rbp + 0x10a8], rsi
mov qword [rbp + 0x10b0], r15
lea rax, [0x140002198]
mov qword [rbp + 0x10b8], rax
mov dword [rbp + 0x10c0], 0x27e
mov dword [rbp + 0x10c4], 1
mov dword [rbp + 0x10c8], 0xff
mov dword [rbp + 0x1148], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x10d0]
call sub.msvcrt.dll_memset
mov r9d, dword [rsp + 0x68]
lea r8, [0x14000e010]
lea rdx, [rbp + 0x10a8]
lea rcx, [rsp + 0x60]
call fcn.1400510b0
mov dword [rsp + 0x68], r13d
jmp 0x140055731
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop
jmp 0x1400557bf
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
cmp eax, 0xe
je 0x14006955b
mov qword [rbp + 0x4d8], rsi
mov qword [rbp + 0x4e0], r15
lea rax, [0x140002198]
mov qword [rbp + 0x4e8], rax
mov dword [rbp + 0x4f0], 0x28f
mov dword [rbp + 0x4f4], 1
mov dword [rbp + 0x4f8], 0xff
mov dword [rbp + 0x578], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x500]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
test eax, eax
jle 0x140069522
movzx eax, ax
or eax, 0x80070000
mov r8d, eax
lea rdx, [rbp + 0x12a0]
lea rcx, [rbp + 0x4d8]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 6]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x4d8]
call fcn.1400ff75c
mov qword [rbp + 0xf58], rsi
mov qword [rbp + 0xf60], r15
lea rax, [0x140002198]
mov qword [rbp + 0xf68], rax
mov dword [rbp + 0xf70], 0x290
mov dword [rbp + 0xf74], 1
mov dword [rbp + 0xf78], 0xff
mov dword [rbp + 0xff8], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xf80]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea r9, [0x14000e080]
mov r8d, 0x80042302
lea rdx, [rbp + 0xf58]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
int3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
cmp eax, 0xe
je 0x14006968a
mov qword [rbp + 0x628], rsi
mov qword [rbp + 0x630], r15
lea rax, [0x140002198]
mov qword [rbp + 0x638], rax
mov dword [rbp + 0x640], 0x29e
mov dword [rbp + 0x644], 1
mov dword [rbp + 0x648], 0xff
mov dword [rbp + 0x6c8], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x650]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
test eax, eax
jle 0x140069651
movzx eax, ax
or eax, 0x80070000
mov r8d, eax
lea rdx, [rbp + 0x1348]
lea rcx, [rbp + 0x628]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 6]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x628]
call fcn.1400ff75c
mov qword [rbp + 0xe08], rsi
mov qword [rbp + 0xe10], r15
lea rax, [0x140002198]
mov qword [rbp + 0xe18], rax
mov dword [rbp + 0xe20], 0x29f
mov dword [rbp + 0xe24], 1
mov dword [rbp + 0xe28], 0xff
mov dword [rbp + 0xea8], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xe30]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea r9, [0x14000e0e0]
mov r8d, 0x80042302
lea rdx, [rbp + 0xe08]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
int3
mov qword [rbp + 0xb68], rsi
mov qword [rbp + 0xb70], r15
lea rax, [0x140002198]
mov qword [rbp + 0xb78], rax
mov dword [rbp + 0xb80], 0x2a5
mov dword [rbp + 0xb84], 1
mov dword [rbp + 0xb88], 0xff
mov dword [rbp + 0xc08], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xb90]
call sub.msvcrt.dll_memset
lea r9, [0x14000e150]
mov r8d, 0x8007000e
lea rdx, [rbp + 0xb68]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
int3
mov edi, r13d
cmp cl, 1
sete dil
jmp 0x140055891
mov edi, 4
mov dword [0x140154b18], r13d
jmp 0x140055891
mov edi, dword [0x140154b10]
jmp 0x1400558a1
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x1498]
call fcn.1400ff694
lea r9, [0x140002408]
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140102640
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbx], r13
jmp 0x140055b5d
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x15e8]
call fcn.1400ff694
lea r9, [0x140002470]
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140102640
nop
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbx], r13
jmp 0x140055ccc
mov eax, dword [rsp + 0x50]
imul rcx, rax, 0xffffffffff676980
mov qword [r14 + 0x1c0], rcx
jmp 0x140055d2d
mov qword [rbp + 0x778], rdi
mov qword [rbp + 0x780], r15
lea rbx, [0x140002198]
mov qword [rbp + 0x788], rbx
mov dword [rbp + 0x790], 0x2d6
mov dword [rbp + 0x794], 1
mov dword [rbp + 0x798], 0xff
mov dword [rbp + 0x818], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x7a0]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
test eax, eax
jle 0x14006989a
movzx eax, ax
or eax, 0x80070000
mov r8d, eax
lea rdx, [rbp + 0x1738]
lea rcx, [rbp + 0x778]
call fcn.1400ff820
mov r9d, 1
mov r8, rax
lea edx, [r9 + 6]
lea rcx, [rsp + 0x60]
call fcn.14004a830
lea rcx, [rbp + 0x778]
call fcn.1400ff75c
mov qword [rbp + 0xeb0], rdi
mov qword [rbp + 0xeb8], r15
mov qword [rbp + 0xec0], rbx
mov dword [rbp + 0xec8], 0x2d7
mov dword [rbp + 0xecc], 1
mov dword [rbp + 0xed0], 0xff
mov dword [rbp + 0xf50], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xed8]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea r9, [0x14000e1b0]
mov r8d, 0x80042302
lea rdx, [rbp + 0xeb0]
lea rcx, [rsp + 0x60]
call fcn.140101d5c
nop
mov qword [rbp + 0xa18], rsi
mov qword [rbp + 0xa20], r14
mov qword [rbp + 0xa28], r15
mov dword [rbp + 0xa30], 0x2a5
mov dword [rbp + 0xa34], reloc.VssTrace.DLL_Ordinal_11
mov dword [rbp + 0xa38], 0xff
mov dword [rbp + 0xab8], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0xa40]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, rbx
lea r8, [0x1400060e0]
lea rdx, [rbp + 0xa18]
lea rcx, [rbp + 0xb0]
call fcn.1400510b0
nop
jmp 0x140055e27