Function at 0x1400340e0
Capabilities:
Get session user name

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
test rcx, rcx
jne 0x140023077
lea eax, [rcx + 0x10]
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rdi
call fcn.140029520
mov esi, 0x7243
mov rdi, rax
movzx ecx, word [rax + 0x18]
lea eax, [rsi - 1]
cmp cx, si
jne 0x1400230c0
xor edx, edx
mov word [rdi + 0x18], ax
mov rcx, rbx
call fcn.14003af70
mov word [rdi + 0x18], si
mov rsi, qword [rsp + 0x30]
mov word [rdi + 0x1e], ax
mov rdi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
ret
cmp cx, ax
mov rcx, rbx
jne 0x1400230e6
mov edx, 1
call fcn.14003af70
mov rsi, qword [rsp + 0x30]
mov word [rdi + 0x1e], ax
mov rdi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
ret
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
add rsp, 0x20
pop rbx
jmp 0x1400340e0
push rbp
push rbx
push r13
push r15
lea rbp, [rsp - 0x2b38]
mov eax, Ordinal_11386
call fcn.1400789d0
sub rsp, rax
mov rax, qword [0x1400a45f8]
xor rax, rsp
mov qword [rbp + 0x2b20], rax
xor eax, eax
mov byte [rbp + 0xc0], 0
mov r15, rcx
mov qword [rbp + 0xc1], rax
lea rcx, [rbp + 0x520]
mov word [rbp + 0xc9], ax
xor edx, edx
mov byte [rbp + 0xcb], al
mov r8d, 0x80
mov byte [rbp + 0xb0], al
mov qword [rbp + 0xb1], rax
mov word [rbp + 0xb9], ax
mov byte [rbp + 0xbb], al
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], rax
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], rax
mov qword [rbp + 0x278], rax
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], rax
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x4a0]
mov r8d, 0x80
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x420]
mov r8d, 0x80
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x2720]
mov r8d, 0x3f9
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov byte [rbp + 0xe0], 0
xor edx, edx
mov qword [rbp + 0xe1], rax
mov r8d, 0x81
mov qword [rbp + 0xe9], rax
lea rcx, [rbp + 0x310]
mov word [rbp + 0xf1], ax
mov byte [rbp + 0xf3], al
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rax
mov word [rbp + 0x160], ax
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x188], rax
mov word [rbp + 0x190], ax
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x1a8], rax
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1b8], rax
mov word [rbp + 0x1c0], ax
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0xd80]
mov r8d, 0x1fc
call sub.VCRUNTIME140.dll_memset
xor eax, eax
xor r13d, r13d
mov dword [rbp - 0x80], r13d
mov byte [rbp + 0xd0], r13b
mov qword [rbp + 0xd1], rax
mov dword [rbp + 0xd9], eax
mov word [rbp + 0xdd], ax
mov byte [rbp + 0xdf], al
test r15, r15
jne 0x1400342d1
lea eax, [r13 + 0x10]
jmp 0x140034ccb
mov rdx, qword [0x1400a9030]
mov ecx, dword [r15 + 0x54]
mov qword [rsp + Ordinal_11383], r14
call fcn.140037e70
mov r14, rax
test rax, rax
jne 0x1400342fa
lea eax, [r14 + 2]
jmp 0x140034cc3
cmp word [rax + 0x44], r13w
jne 0x14003430b
mov eax, 0x47
jmp 0x140034cc3
cmp dword [rax + 0x1dc], 0x18
jne 0x14003431e
mov eax, 0x48
jmp 0x140034cc3
mov byte [rbp + 0x990], r13b
lea rcx, [rbp + 0x1370]
mov byte [rbp + 0x5a0], r13b
xor edx, edx
mov byte [rbp + 0x128], r13b
mov r8d, 0x3e8
mov byte [rbp + 0x118], r13b
mov byte [rbp + 0x1e8], r13b
mov byte [rbp + 0x3a0], r13b
mov byte [rbp + 0x290], r13b
mov byte [rbp + 0x3e0], r13b
mov byte [rbp + 0x2d0], r13b
mov byte [rbp + 0x210], r13b
mov byte [rbp + 0x108], r13b
mov byte [rbp + 0xf8], r13b
movzx ebx, word [rax + 0x1e0]
mov qword [rsp + 0x2cb8], r12
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0x1760]
mov r8d, 0x3e8
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea rcx, [rbp + 0xf80]
mov r8d, 0x3e8
call sub.VCRUNTIME140.dll_memset
movsx rax, word [r14 + 0x70]
lea r8, [0x140087674]
movzx r12d, word [r14 + 0x44]
lea rcx, [rbp + 0x990]
mov edx, 0x3e8
mov r9d, dword [r14 + rax*4 + 0x48]
call fcn.1400292e0
movzx r9d, word [r14 + 0x42]
lea r8, [0x140087674]
mov edx, recv
lea rcx, [rbp + 0x128]
call fcn.1400292e0
movzx r9d, word [r14 + 0x44]
lea r8, [0x140087674]
mov edx, 0x3e8
lea rcx, [rbp + 0x5a0]
call fcn.1400292e0
mov r9d, dword [0x1400a72a4]
lea r8, [0x140087774]
mov edx, reloc.WSOCK32.dll_sendto
lea rcx, [rbp + 0x230]
call fcn.1400292e0
mov r9d, dword [r14 + 0x1d4]
lea r8, [0x140087774]
mov edx, reloc.WSOCK32.dll_sendto
lea rcx, [rbp + 0x1f8]
call fcn.1400292e0
mov r9d, 0x2c6
lea r8, [0x140087674]
mov edx, recv
lea rcx, [rbp + 0x1d8]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
lea rcx, [rbp + 0x108]
lea edx, [r9 + 0xc]
call fcn.1400292e0
mov r9d, ebx
lea r8, [0x140087674]
mov edx, recv
lea rcx, [rbp + 0xf8]
call fcn.1400292e0
cmp word [r14 + 0x1d8], r13w
jne 0x1400344ed
xor r9d, r9d
lea r8, [0x140087774]
lea rcx, [rbp + 0x230]
lea edx, [r9 + 0x14]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087774]
lea rcx, [rbp + 0x1f8]
lea edx, [r9 + 0x14]
call fcn.1400292e0
cmp word [r14 + 0x1d8], 1
jne 0x14003451c
cmp word [r14 + 0x1da], r13w
jne 0x14003451c
xor r9d, r9d
lea r8, [0x140087774]
lea rcx, [rbp + 0x1f8]
lea edx, [r9 + 0x14]
call fcn.1400292e0
mov r8d, 0x40
mov dword [r14 + 0x74], r13d
lea rdx, [rbp + 0x3a0]
mov word [r14 + 0x44], r13w
mov rcx, r15
call fcn.140029b20
test ax, ax
jne 0x140034cbb
mov edx, 0x40
lea rcx, [rbp + 0x2d0]
call fcn.140026470
test eax, eax
jne 0x14003457f
xor r9d, r9d
lea r8d, [rax + 0x20]
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x2d0]
call fcn.1400272d0
test eax, eax
je 0x14003457f
mov byte [rbp + 0x210], r13b
jmp 0x140034588
cmp byte [rbp + 0x210], r13b
jne 0x1400345b6
mov edx, 0x40
lea rcx, [rbp + 0x210]
call fcn.140028720
test eax, eax
je 0x1400345b6
lea r8, str.NoName
mov edx, 0x20
lea rcx, [rbp + 0x210]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rdx, str.RNBO_SPN_LOCAL
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
mov edx, 0x40
lea rcx, [rbp + 0x2d0]
lea r8, str.RNBO_SPN_LOCAL
test eax, eax
je 0x1400345e8
lea r8, [rbp + 0x3a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea rdx, [rbp - 0x7c]
mov dword [rbp - 0x7c], 0x40
lea rcx, [rbp + 0x290]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea rcx, [rbp + 0x290]
cmp eax, 1
jne 0x14003463c
lea r8d, [rax + 0x3f]
lea rdx, [rbp + 0x3e0]
call fcn.14004a720
lea rcx, [rbp + 0x290]
mov edx, 0x40
cmp eax, 0xffffffff
je 0x140034641
lea r8, [rbp + 0x3e0]
jmp 0x140034648
mov edx, 0x40
lea r8, str.NoName
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov r9d, dword [r14 + 0x90]
lea r8, [0x140087774]
mov edx, recv
lea rcx, [rbp + 0x118]
call fcn.1400292e0
mov eax, dword [r14 + 0x6b4]
cmp eax, 0x400
ja 0x140034ef6
mov qword [rsp + Ordinal_11444], rdi
test eax, eax
jne 0x140034781
xor r9d, r9d
lea r8, [0x140087674]
lea edx, [rax + 0xc]
lea rcx, [rbp + 0xc0]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
lea rcx, [rbp + 0xb0]
lea edx, [r9 + 0xc]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
lea rcx, [rbp + 0x1c8]
lea edx, [r9 + 0xc]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
lea rcx, [rbp + 0x250]
lea edx, [r9 + 0x40]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
mov edx, 0x80
lea rcx, [rbp + 0x520]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
mov edx, 0x80
lea rcx, [rbp + 0x4a0]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
mov edx, 0x80
lea rcx, [rbp + 0x420]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
lea rcx, [rbp + 0xe0]
lea edx, [r9 + 0x14]
call fcn.1400292e0
xor r9d, r9d
lea r8, [0x140087674]
mov edx, 0x3f9
lea rcx, [rbp + 0x2720]
call fcn.1400292e0
jmp 0x140034a46
movups xmm0, xmmword [r14 + 0x604]
mov qword [rsp + Ordinal_11438], rsi
lea rcx, [r14 + 0xabc]
movsx esi, byte [r14 + 0x6b1]
lea r9, [rbp - 0x80]
movups xmmword [rbp + 0x138], xmm0
lea r8, [rbp + 0xd80]
movups xmm1, xmmword [r14 + 0x614]
movups xmmword [rbp + 0x148], xmm1
movsd xmm0, qword [r14 + 0x624]
movsd qword [rbp + 0x158], xmm0
movzx eax, word [r14 + 0x62c]
mov word [rbp + 0x160], ax
movups xmm0, xmmword [r14 + 0xcb8]
movups xmmword [rbp + 0x168], xmm0
movups xmm1, xmmword [r14 + 0xcc8]
movups xmmword [rbp + 0x178], xmm1
movsd xmm0, qword [r14 + 0xcd8]
movsd qword [rbp + 0x188], xmm0
movzx eax, word [r14 + 0xce0]
mov word [rbp + 0x190], ax
movups xmm0, xmmword [r14 + 0xce2]
movups xmmword [rbp + 0x198], xmm0
movups xmm1, xmmword [r14 + 0xcf2]
movups xmmword [rbp + 0x1a8], xmm1
movsd xmm0, qword [r14 + 0xd02]
movsd qword [rbp + 0x1b8], xmm0
movzx eax, word [r14 + 0xd0a]
mov word [rbp + 0x1c0], ax
movsx ebx, byte [r14 + 0x6af]
movsx edi, byte [r14 + 0x6b0]
mov dword [rbp - 0x80], 0x1fc
mov edx, dword [r14 + 0xab8]
call fcn.140042a50
movups xmm0, xmmword [r14 + 0x62e]
mov r9d, esi
lea r8, [0x140087674]
mov edx, recv
lea rcx, [rbp + 0xc0]
movaps xmmword [rbp + 0x310], xmm0
movups xmm1, xmmword [r14 + 0x63e]
movaps xmmword [rbp + 0x320], xmm1
movups xmm0, xmmword [r14 + 0x64e]
movaps xmmword [rbp + 0x330], xmm0
movups xmm1, xmmword [r14 + 0x65e]
movaps xmmword [rbp + 0x340], xmm1
movups xmm0, xmmword [r14 + 0x66e]
movaps xmmword [rbp + 0x350], xmm0
movups xmm1, xmmword [r14 + 0x67e]
movaps xmmword [rbp + 0x360], xmm1
movups xmm0, xmmword [r14 + 0x68e]
movaps xmmword [rbp + 0x370], xmm0
movups xmm1, xmmword [r14 + 0x69e]
movaps xmmword [rbp + reloc.mfc140.dll_Ordinal_896], xmm1
movzx eax, byte [r14 + 0x6ae]
mov byte [rbp + 0x390], al
call fcn.1400292e0
mov r9d, ebx
lea r8, [0x140087674]
mov edx, recv
lea rcx, [rbp + 0xb0]
call fcn.1400292e0
mov r9d, edi
lea r8, [0x140087674]
mov edx, recv
lea rcx, [rbp + 0x1c8]
call fcn.1400292e0
mov rsi, qword [rsp + 0x2ca8]
lea rcx, [rbp + 0x310]
or rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], r13b
jne 0x140034970
test rax, rax
je 0x1400349b2
mov ebx, reloc.WSOCK32.dll_recv
lea r8, [rbp + 0xd0]
mov r9d, ebx
lea rcx, [rbp + 0x310]
mov edx, eax
call fcn.14004f9f0
lea r8, [rbp + 0x250]
mov edx, ebx
lea rcx, [rbp + 0xd0]
call fcn.140026c60
jmp 0x1400349cc
xor r9d, r9d
lea r8, [0x140087674]
lea rcx, [rbp + 0x250]
lea edx, [r9 + 0x40]
call fcn.1400292e0
lea r8, [rbp + 0x520]
mov edx, 0x2a
lea rcx, [rbp + 0x138]
call fcn.140026c60
lea r8, [rbp + 0x4a0]
mov edx, 0x2a
lea rcx, [rbp + 0x168]
call fcn.140026c60
lea r8, [rbp + 0x420]
mov edx, 0x2a
lea rcx, [rbp + 0x198]
call fcn.140026c60
mov r9d, dword [rbp - 0x80]
lea r8, [0x140087674]
mov edx, reloc.WSOCK32.dll_sendto
lea rcx, [rbp + 0xe0]
call fcn.1400292e0
mov edx, dword [rbp - 0x80]
lea r8, [rbp + 0x2720]
lea rcx, [rbp + 0xd80]
call fcn.140026c60
cmp r12d, 0xffff
jne 0x140034b70
lea rax, [rbp + 0x2720]
mov edx, 0x15
mov qword [rsp + 0xb0], rax
lea r9, [rbp + 0x5a0]
lea rax, [rbp + 0xe0]
mov qword [rsp + 0xa8], rax
lea r8, [rbp + 0x990]
lea rax, [rbp + 0x420]
mov qword [rsp + 0xa0], rax
lea rcx, [0x140087678]
lea rax, [rbp + 0x4a0]
mov qword [rsp + 0x98], rax
lea rax, [rbp + 0x520]
mov qword [rsp + 0x90], rax
lea rax, [rbp + 0x250]
mov qword [rsp + 0x88], rax
lea rax, [rbp + 0x1c8]
mov qword [rsp + 0x80], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x1d8]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x230]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x210]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x2d0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x290]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x128]
mov qword [rsp + 0x20], rax
call fcn.14004d500
jmp 0x140034c07
lea rax, [rbp + 0x1d8]
mov edx, recv
mov qword [rsp + 0x68], rax
lea r9, [rbp + 0x5a0]
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x60], rax
lea r8, [rbp + 0x990]
lea rax, [rbp + 0x108]
mov qword [rsp + 0x58], rax
lea rcx, [0x140087678]
lea rax, [rbp + 0x1f8]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x230]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x210]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x2d0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x290]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x118]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x128]
mov qword [rsp + 0x20], rax
call fcn.14004d500
mov rbx, rax
test rax, rax
je 0x140034ca6
mov r8, rax
lea rcx, [rbp + 0x1760]
mov edx, 0x3e8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rax, [rbp + 0x1e8]
mov edx, 3
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x1760]
lea rcx, [0x140087688]
lea r8, str.findNextUnitEx3
cmp r12d, 0xffff
je 0x140034c67
lea r8, str.findNextUnitEx2
call fcn.14004d500
mov rbx, rax
test rax, rax
je 0x140034ca6
mov r8, rax
lea rcx, [rbp + 0xf80]
mov edx, 0x3e8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rcx, [rbp + 0xf80]
call fcn.14004d610
mov rbx, rax
test rax, rax
jne 0x140034ce8
mov ecx, 0x4a
mov rdx, r14
call fcn.140036520
mov rdi, qword [rsp + 0x2cb0]
mov r12, qword [rsp + 0x2cb8]
mov r14, qword [rsp + 0x2c70]
mov rcx, qword [rbp + 0x2b20]
xor rcx, rsp
call fcn.140077b10
add rsp, 0x2c78
pop r15
pop r13
pop rbx
pop rbp
ret
mov r8, rbx
lea rcx, [rbp + 0xf80]
mov edx, 0x3e8
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea r8, [rbp + 0x1370]
mov rdx, r14
lea rcx, [rbp + 0xf80]
call fcn.140047060
test ax, ax
je 0x140034d2e
mov rdx, r14
movzx ecx, ax
call fcn.140037660
jmp 0x140034cb3
lea rcx, [rbp + 0x1370]
call fcn.14004d950
mov rdi, rax
test rax, rax
je 0x140034e1f
lea rax, [rbp + 0x1370]
mov r8, rdi
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x1b50]
lea rax, [rbp + 0x1f40]
mov edx, 3
lea rcx, [0x140087688]
mov qword [rsp + 0x20], rax
call fcn.14004d9d0
mov rcx, rdi
mov ebx, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test bx, bx
jne 0x140034e1f
mov byte [rbp + 0x1f37], r13b
lea rdx, [rbp + 0x1b50]
mov byte [rbp + 0x2327], r13b
lea r8, str.error
mov rcx, r13
nop dword [rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x140034de4
cmp rcx, 6
jne 0x140034db0
lea rcx, [rbp + 0x1f40]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movzx ebx, ax
cmp ax, 0x46
je 0x140034de4
cmp ax, 0x50
jne 0x140034eee
lea rax, [rbp + 0x2330]
mov edx, 3
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x5a0]
lea rax, [rbp + 0x990]
lea r8, [rbp + 0x1370]
mov qword [rsp + 0x20], rax
lea rcx, [0x140087678]
call fcn.14004d9d0
test eax, eax
je 0x140034e29
mov ecx, 0x42
jmp 0x140034cab
mov byte [rbp + 0x2717], r13b
movsx edi, word [r14 + 0x70]
cmp edi, 9
jge 0x140034e43
inc edi
mov word [r14 + 0x70], di
jmp 0x140034e4b
mov word [r14 + 0x70], r13w
mov edi, r13d
lea rcx, [rbp + 0x5a0]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
lea rcx, [rbp + 0x990]
mov word [r14 + 0x44], ax
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, edi
mov dword [r14 + rcx*4 + 0x48], eax
lea rcx, [rbp + 0x2330]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov word [r14 + 0x1d0], ax
shr eax, 0x10
mov dword [r14 + 0x1e0], eax
test bx, bx
jne 0x140034ede
lea rcx, [r14 + 0x80]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov edx, dword [r14 + 0x78]
mov rcx, r15
mov qword [r14 + 0x88], 0x78
call fcn.140032380
lea rax, [rbp - 0x70]
mov dword [rsp + 0x28], 0x118
xor r9d, r9d
mov qword [rsp + 0x20], rax
xor r8d, r8d
xor edx, edx
mov rcx, r15
call fcn.140031b40
movzx ebx, ax
cmp bx, 0x50
jne 0x140034eee
mov eax, 0x46
jmp 0x140034cb3
movzx ecx, bx
jmp 0x140034cab
mov eax, 0x4a
jmp 0x140034cbb