Function at 0x1800b9740
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x11550
call fcn.1801339d0
sub rsp, rax
mov qword [rsp + 0x11390], 0xfffffffffffffffe
mov rax, qword [0x180161180]
xor rax, rsp
mov qword [rsp + 0x11540], rax
mov qword [rsp + 0x10b8], 0
mov qword [rsp + 0x11158], 0
mov qword [rsp + 0x11170], 0
mov dword [rsp + 0x10e4], 0x1f
mov dword [rsp + 0x10cc], 0
mov dword [rsp + 0x10b0], 0
mov dword [rsp + 0x11150], 0
mov dword [rsp + 0x11138], 0
mov dword [rsp + 0x11164], 0
mov dword [rsp + 0x10e0], 0
mov byte [rsp + 0x11118], 0
mov byte [rsp + 0x11140], 0
mov byte [rsp + 0x1112a], 0
mov dword [rsp + 0x10d0], 0
mov dword [rsp + 0x98], 0
mov dword [rsp + 0x94], 0
mov dword [rsp + 0x10c8], 0
mov dword [rsp + 0x11100], 0
mov dword [rsp + 0x11144], 0
mov dword [rsp + 0x1113c], 0
mov dword [rsp + 0x90], 0xff
mov byte [rsp + 0x11129], 0xff
mov byte [rsp + 0x11160], 0
mov byte [rsp + 0x10c4], 0
mov byte [rsp + 0x11128], 0
mov dword [rsp + 0x11168], 0
lea rax, [rsp + 0x10f0]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x9c], 0
mov dword [rsp + 0x10c0], 0
mov dword [rsp + 0x10e8], 0
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x11148], 0
mov qword [rsp + 0x11120], 0
mov dword [rsp + 0x1111c], 0
mov rdx, qword [rsp + 0x11568]
lea rcx, [0x180022c60]
call fcn.1800892c0
mov rdx, qword [rsp + 0x11560]
add rdx, 0x12188
lea rcx, [rsp + 0x70]
call fcn.18008d200
nop
mov rax, qword [rsp + 0x11560]
cmp dword [rax + 0x121c4], 0x4000000
jge 0x1800b99ff
mov r8d, 0x4000000
mov rax, qword [rsp + 0x11560]
mov edx, dword [rax + 0x121c4]
lea rcx, [0x180022bd0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x111b8], rax
cmp qword [rsp + 0x111b8], 0
je 0x1800b99af
mov dword [rsp + 0x28], 0x4000000
mov rax, qword [rsp + 0x11560]
mov eax, dword [rax + 0x121c4]
mov dword [rsp + 0x20], eax
lea r9, [0x180022b40]
xor r8d, r8d
mov edx, 0x27
mov rcx, qword [rsp + 0x111b8]
call fcn.18008d120
mov qword [rsp + 0x11398], rax
jmp 0x1800b99bb
mov qword [rsp + 0x11398], 0
mov rax, qword [rsp + 0x11398]
mov qword [rsp + 0x111b0], rax
mov rax, qword [rsp + 0x111b0]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x111c0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x111c0]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
call fcn.1800a4bf0
mov rcx, qword [rsp + 0x11560]
call fcn.1800b3ec0
mov dword [rsp + 0x11168], eax
mov edx, dword [rsp + 0x11168]
lea rcx, [0x180022af0]
call fcn.1800892c0
cmp dword [rsp + 0x11168], 3
jle 0x1800b9af2
mov edx, dword [rsp + 0x11168]
lea rcx, [0x180022a90]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x111d0], rax
cmp qword [rsp + 0x111d0], 0
je 0x1800b9aa2
mov eax, dword [rsp + 0x11168]
mov dword [rsp + 0x20], eax
lea r9, [0x180022a40]
xor r8d, r8d
mov edx, 0xa
mov rcx, qword [rsp + 0x111d0]
call fcn.18008d120
mov qword [rsp + 0x113a0], rax
jmp 0x1800b9aae
mov qword [rsp + 0x113a0], 0
mov rax, qword [rsp + 0x113a0]
mov qword [rsp + 0x111c8], rax
mov rax, qword [rsp + 0x111c8]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x111d8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x111d8]
call fcn.1800ec370
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x10]
mov dword [rax + 0x18], 0xf000
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x10]
mov r8d, dword [rax + 0x18]
mov edx, dword [rsp + 0x11168]
lea rcx, [0x1800229d0]
call fcn.1800892c0
mov rdx, qword [rsp + 0x11560]
mov byte [rdx + 0x11cbe], 0
mov rax, qword [rsp + 0x11560]
mov byte [rax + 0x11cbd], 3
mov rax, qword [rsp + 0x11560]
mov dword [rax + 0x121c8], 0x940
mov rax, qword [rsp + 0x11598]
movzx eax, byte [rax + 0x321]
cmp eax, 1
jne 0x1800b9b82
lea rcx, [0x180022980]
call fcn.1800892c0
mov byte [rsp + 0x10c4], 0
jmp 0x1800b9b96
lea rcx, [0x180022920]
call fcn.1800892c0
mov byte [rsp + 0x10c4], 0
mov byte [rsp + 0x11160], 1
movzx eax, byte [rsp + 0x11570]
cmp eax, 1
jne 0x1800b9bc1
lea rcx, [0x1800228c0]
call fcn.1800892c0
mov byte [rsp + 0x11128], 0x20
jmp 0x1800b9bd5
lea rcx, [0x180022860]
call fcn.1800892c0
mov byte [rsp + 0x11128], 0
lea rcx, [0x180022810]
call fcn.1800892c0
mov edx, dword [rsp + 0x11168]
mov rcx, qword [rsp + 0x11560]
call fcn.1800b34c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x20
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov byte [rsp + 0x68], 0
mov word [rsp + 0x60], 0
mov byte [rsp + 0x58], 0
mov byte [rsp + 0x50], 0
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x40], 0
mov byte [rsp + 0x38], 0
movzx eax, byte [rsp + 0x11128]
mov byte [rsp + 0x30], al
movzx eax, byte [rsp + 0x11580]
mov byte [rsp + 0x28], al
movzx eax, byte [rsp + 0x11578]
mov byte [rsp + 0x20], al
movzx r9d, byte [rsp + 0x10c4]
movzx r8d, byte [rsp + 0x11160]
mov dl, 3
mov rcx, qword [rsp + 0x11560]
call fcn.1800b30e0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 4
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov rcx, qword [rsp + 0x11568]
add rcx, 0x60
mov rax, qword [rsp + 0x11568]
mov rax, qword [rax + 0x60]
lea rdx, [rsp + 0x111e0]
call qword [rax + 0x10]
mov qword [rsp + 0x113a8], rax
mov rax, qword [rsp + 0x113a8]
mov rax, qword [rax]
mov qword [rsp + 0x10d8], rax
mov rax, qword [rsp + 0x11560]
mov ecx, dword [rax + 0x121c8]
mov rax, qword [rsp + 0x10d8]
cqo
idiv rcx
mov qword [rsp + 0x20f8], rax
lea r9, [rsp + 0x20f8]
lea r8, [rsp + 0x10d8]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 5
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
lea rcx, [0x1800227c0]
call fcn.1800892c0
lea rdi, [rsp + 0xb0]
xor eax, eax
mov ecx, 0x1000
rep stosb byte [rdi], al
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x20], eax
mov r9b, 1
mov r8d, 0x1000
lea rdx, [rsp + 0xb0]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a63f0
lea rax, [rsp + 0x1111c]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x11129]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10c8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x94]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x98]
lea r8, [rsp + 0x1112a]
lea rdx, [rsp + 0x11140]
lea rcx, [rsp + 0xb0]
call fcn.18008b660
movzx eax, byte [rsp + 0x11140]
test eax, eax
jne 0x1800b9df9
lea rcx, [0x180022770]
call fcn.1800892c0
movzx eax, byte [rsp + 0x1112a]
test eax, eax
jne 0x1800b9e11
lea rcx, [0x180022720]
call fcn.1800892c0
movsxd rax, dword [rsp + 0x98]
cmp qword [rsp + 0x20f8], rax
jle 0x1800b9e3f
mov r8d, dword [rsp + 0x98]
mov rdx, qword [rsp + 0x20f8]
lea rcx, [0x1800226b0]
call fcn.1800892c0
lea rdi, [rsp + 0x10f0]
xor eax, eax
mov ecx, 0x1000
rep stosb byte [rdi], al
mov r8d, 0x1000
lea rdx, [rsp + 0x10f0]
mov rcx, qword [rsp + 0x11560]
call fcn.1800d7b80
mov byte [rsp + 0x20], 0
mov rax, qword [rsp + 0xa0]
movzx r9d, byte [rax + 0x13]
mov rax, qword [rsp + 0xa0]
movzx r8d, byte [rax + 0x12]
mov rax, qword [rsp + 0xa0]
movzx edx, byte [rax + 0x11]
mov rcx, qword [rsp + 0x11560]
call fcn.1800c51a0
mov dword [rsp + 0x113b0], eax
mov eax, dword [rsp + 0x113b0]
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x9c]
add eax, 0x97
cdq
xor eax, edx
sub eax, edx
add eax, 1
mov dword [rsp + 0x10c0], eax
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0x94], eax
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0x11100], eax
mov eax, dword [rsp + 0x10c0]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x11100]
mov r8d, dword [rsp + 0x94]
mov edx, dword [rsp + 0x9c]
lea rcx, [0x180022640]
call fcn.1800892c0
mov ecx, 0x149f8
call fcn.1800eb9ac
mov qword [rsp + 0x113b8], rax
mov rax, qword [rsp + 0x113b8]
mov qword [rsp + 0x111f0], rax
cmp qword [rsp + 0x111f0], 0
je 0x1800b9fa1
movzx eax, byte [rsp + 0x11570]
mov byte [rsp + 0x28], al
mov rax, qword [rsp + 0x11598]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x20f8]
mov r8d, dword [rsp + 0x10c0]
mov edx, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0x111f0]
call fcn.1800aba60
mov qword [rsp + 0x113c0], rax
mov rax, qword [rsp + 0x113c0]
mov qword [rsp + 0x113c8], rax
jmp 0x1800b9fad
mov qword [rsp + 0x113c8], 0
mov rax, qword [rsp + 0x113c8]
mov qword [rsp + 0x111e8], rax
mov rax, qword [rsp + 0x111e8]
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
jne 0x1800ba09b
lea rcx, [0x1800225e0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x113d0], rax
mov rax, qword [rsp + 0x113d0]
mov qword [rsp + 0x11200], rax
cmp qword [rsp + 0x11200], 0
je 0x1800ba04b
lea r9, [0x180022580]
xor r8d, r8d
mov edx, 4
mov rcx, qword [rsp + 0x11200]
call fcn.18008d120
mov qword [rsp + 0x113d8], rax
mov rax, qword [rsp + 0x113d8]
mov qword [rsp + 0x113e0], rax
jmp 0x1800ba057
mov qword [rsp + 0x113e0], 0
mov rax, qword [rsp + 0x113e0]
mov qword [rsp + 0x111f8], rax
mov rax, qword [rsp + 0x111f8]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x11208], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11208]
call fcn.1800ec370
mov ecx, 0x1178
call fcn.1800eb9ac
mov qword [rsp + 0x113e8], rax
mov rax, qword [rsp + 0x113e8]
mov qword [rsp + 0x11218], rax
cmp qword [rsp + 0x11218], 0
je 0x1800ba11c
movzx eax, byte [rsp + 0x11570]
mov byte [rsp + 0x28], al
mov rax, qword [rsp + 0x11598]
movzx eax, byte [rax + 0x321]
mov byte [rsp + 0x20], al
mov r9b, 1
mov r8d, 0x96
mov edx, 0xffffff6a
mov rcx, qword [rsp + 0x11218]
call fcn.1800ad460
mov qword [rsp + 0x113f0], rax
mov rax, qword [rsp + 0x113f0]
mov qword [rsp + 0x113f8], rax
jmp 0x1800ba128
mov qword [rsp + 0x113f8], 0
mov rax, qword [rsp + 0x113f8]
mov qword [rsp + 0x11210], rax
mov rax, qword [rsp + 0x11210]
mov qword [rsp + 0x11148], rax
cmp qword [rsp + 0x11148], 0
jne 0x1800ba216
lea rcx, [0x180022520]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11400], rax
mov rax, qword [rsp + 0x11400]
mov qword [rsp + 0x11228], rax
cmp qword [rsp + 0x11228], 0
je 0x1800ba1c6
lea r9, [0x1800224c0]
xor r8d, r8d
mov edx, 4
mov rcx, qword [rsp + 0x11228]
call fcn.18008d120
mov qword [rsp + 0x11408], rax
mov rax, qword [rsp + 0x11408]
mov qword [rsp + 0x11410], rax
jmp 0x1800ba1d2
mov qword [rsp + 0x11410], 0
mov rax, qword [rsp + 0x11410]
mov qword [rsp + 0x11220], rax
mov rax, qword [rsp + 0x11220]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x11230], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11230]
call fcn.1800ec370
mov ecx, 0x1170
call fcn.1800eb9ac
mov qword [rsp + 0x11418], rax
mov rax, qword [rsp + 0x11418]
mov qword [rsp + 0x11240], rax
cmp qword [rsp + 0x11240], 0
je 0x1800ba28a
movzx r9d, byte [rsp + 0x11570]
mov rax, qword [rsp + 0x11598]
movzx r8d, byte [rax + 0x321]
mov edx, dword [rsp + 0x20f8]
mov rcx, qword [rsp + 0x11240]
call fcn.1800ae240
mov qword [rsp + 0x11420], rax
mov rax, qword [rsp + 0x11420]
mov qword [rsp + 0x11428], rax
jmp 0x1800ba296
mov qword [rsp + 0x11428], 0
mov rax, qword [rsp + 0x11428]
mov qword [rsp + 0x11238], rax
mov rax, qword [rsp + 0x11238]
mov qword [rsp + 0x11120], rax
cmp qword [rsp + 0x11120], 0
jne 0x1800ba384
lea rcx, [0x180022450]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11430], rax
mov rax, qword [rsp + 0x11430]
mov qword [rsp + 0x11250], rax
cmp qword [rsp + 0x11250], 0
je 0x1800ba334
lea r9, [0x1800223f0]
xor r8d, r8d
mov edx, 4
mov rcx, qword [rsp + 0x11250]
call fcn.18008d120
mov qword [rsp + 0x11438], rax
mov rax, qword [rsp + 0x11438]
mov qword [rsp + 0x11440], rax
jmp 0x1800ba340
mov qword [rsp + 0x11440], 0
mov rax, qword [rsp + 0x11440]
mov qword [rsp + 0x11248], rax
mov rax, qword [rsp + 0x11248]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x11258], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11258]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b0]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x1800ba484
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x180022390]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11448], rax
mov rax, qword [rsp + 0x11448]
mov qword [rsp + 0x11268], rax
cmp qword [rsp + 0x11268], 0
je 0x1800ba434
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x180022330]
mov edx, 5
mov rcx, qword [rsp + 0x11268]
call fcn.18008d120
mov qword [rsp + 0x11450], rax
mov rax, qword [rsp + 0x11450]
mov qword [rsp + 0x11458], rax
jmp 0x1800ba440
mov qword [rsp + 0x11458], 0
mov rax, qword [rsp + 0x11458]
mov qword [rsp + 0x11260], rax
mov rax, qword [rsp + 0x11260]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x11270], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11270]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b8]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x1800ba584
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x1800222c0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11460], rax
mov rax, qword [rsp + 0x11460]
mov qword [rsp + 0x11280], rax
cmp qword [rsp + 0x11280], 0
je 0x1800ba534
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x180022260]
mov edx, 5
mov rcx, qword [rsp + 0x11280]
call fcn.18008d120
mov qword [rsp + 0x11468], rax
mov rax, qword [rsp + 0x11468]
mov qword [rsp + 0x11470], rax
jmp 0x1800ba540
mov qword [rsp + 0x11470], 0
mov rax, qword [rsp + 0x11470]
mov qword [rsp + 0x11278], rax
mov rax, qword [rsp + 0x11278]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x11288], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x11288]
call fcn.1800ec370
mov rcx, qword [rsp + 0x11560]
add rcx, 0x3030
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x3030]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x11cc0]
call fcn.1800a8710
cmp qword [rsp + 0x11568], 0
je 0x1800ba5da
mov rax, qword [rsp + 0x11568]
add rax, 0x60
mov qword [rsp + 0x11478], rax
jmp 0x1800ba5e6
mov qword [rsp + 0x11478], 0
mov rcx, qword [rsp + 0x11560]
mov rax, qword [rsp + 0x11478]
mov qword [rcx + 0x11cc8], rax
mov rax, qword [rsp + 0x11560]
mov dword [rax + 0x121c0], 0
lea rax, [rsp + 0x10cc]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0x11560]
lea r8, [0x1800b26d0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rsp + 0x11170], rax
cmp qword [rsp + 0x11170], 0
jne 0x1800ba737
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x180022200]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x11480], rax
mov rax, qword [rsp + 0x11480]
mov qword [rsp + 0x11298], rax
cmp qword [rsp + 0x11298], 0
je 0x1800ba6e7
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x1800221b0]
mov edx, 5
mov rcx, qword [rsp + 0x11298]
call fcn.18008d120
mov qword [rsp + 0x11488], rax
mov rax, qword [rsp + 0x11488]
mov qword [rsp + 0x11490], rax
jmp 0x1800ba6f3
mov qword [rsp + 0x11490], 0
mov rax, qword [rsp + 0x11490]
mov qword [rsp + 0x11290], rax
mov rax, qword [rsp + 0x11290]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x112a0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112a0]
call fcn.1800ec370
lea rdx, [rsp + 0x11170]
lea rcx, [rsp + 0x11178]
call fcn.18008cf40
mov qword [rsp + 0x11498], rax
mov rax, qword [rsp + 0x11560]
mov eax, dword [rax + 0x121c4]
cdq
mov ecx, 0xb0
idiv ecx
mov dword [rsp + 0x10b0], eax
xor r9d, r9d
lea r8, [rsp + 0x10b0]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 6
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov edx, dword [rsp + 0x10b0]
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [rsp + 0x11150], eax
cmp dword [rsp + 0x11150], 0
je 0x1800ba8c5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x10e4], eax
mov r8d, dword [rsp + 0x11150]
mov edx, dword [rsp + 0x10e4]
lea rcx, [0x180022140]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x114a0], rax
mov rax, qword [rsp + 0x114a0]
mov qword [rsp + 0x112b0], rax
cmp qword [rsp + 0x112b0], 0
je 0x1800ba875
mov r8d, dword [rsp + 0x10e4]
mov eax, dword [rsp + 0x11150]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x10e4]
mov dword [rsp + 0x20], eax
lea r9, [0x1800220d0]
mov edx, 5
mov rcx, qword [rsp + 0x112b0]
call fcn.18008d120
mov qword [rsp + 0x114a8], rax
mov rax, qword [rsp + 0x114a8]
mov qword [rsp + 0x114b0], rax
jmp 0x1800ba881
mov qword [rsp + 0x114b0], 0
mov rax, qword [rsp + 0x114b0]
mov qword [rsp + 0x112a8], rax
mov rax, qword [rsp + 0x112a8]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x112b8], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112b8]
call fcn.1800ec370
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 7
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x28
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov qword [rsp + 0x20f0], 0
mov dword [rsp + 0x10d0], 0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x11138], eax
mov eax, dword [rsp + 0x11138]
mov dword [rsp + 0x11164], eax
mov r8d, dword [rsp + 0x10c0]
mov edx, dword [rsp + 0x94]
lea rcx, [0x180022060]
call fcn.1800892c0
mov eax, dword [rsp + 0x10c0]
mov dword [rsp + 0x10e8], eax
lea rdi, [rsp + 0x2100]
xor eax, eax
mov ecx, 0xf000
rep stosb byte [rdi], al
cmp dword [rsp + 0x10e8], 0x10
jle 0x1800baa18
mov qword [rsp + 0x11130], 0x9400
mov rcx, qword [rsp + 0x88]
add rcx, 0x60
mov rax, qword [rsp + 0x88]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11130]
call qword [rax + 8]
mov dword [rsp + 0x20], 0x9400
mov r9d, dword [rsp + 0x94]
mov r8d, 0x10
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov eax, dword [rsp + 0x10e8]
sub eax, 0x10
mov dword [rsp + 0x10e8], eax
mov eax, dword [rsp + 0x94]
add eax, 0x10
mov dword [rsp + 0x94], eax
jmp 0x1800baac2
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x940
cdqe
mov qword [rsp + 0x11130], rax
mov r8d, 0x10
mov edx, dword [rsp + 0x10e8]
lea rcx, [0x180021ff0]
call fcn.1800892c0
mov rcx, qword [rsp + 0x88]
add rcx, 0x60
mov rax, qword [rsp + 0x88]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11130]
call qword [rax + 8]
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x940
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov r8d, dword [rsp + 0x10e8]
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov ecx, dword [rsp + 0x10e8]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
jmp 0x1800baac7
jmp 0x1800ba970
mov r8d, 0x96
mov edx, dword [rsp + 0x94]
lea rcx, [0x180021f70]
call fcn.1800892c0
mov dword [rsp + 0x10e8], 0x96
lea rdi, [rsp + 0x2100]
xor eax, eax
mov ecx, 0xf000
rep stosb byte [rdi], al
cmp dword [rsp + 0x10e8], 0x10
jle 0x1800bab93
mov qword [rsp + 0x11130], 0x9400
mov rcx, qword [rsp + 0x11148]
add rcx, 0x60
mov rax, qword [rsp + 0x11148]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11130]
call qword [rax + 8]
mov dword [rsp + 0x20], 0x9400
mov r9d, dword [rsp + 0x94]
mov r8d, 0x10
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov eax, dword [rsp + 0x10e8]
sub eax, 0x10
mov dword [rsp + 0x10e8], eax
mov eax, dword [rsp + 0x94]
add eax, 0x10
mov dword [rsp + 0x94], eax
jmp 0x1800bac3d
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x940
cdqe
mov qword [rsp + 0x11130], rax
mov r8d, 0x10
mov edx, dword [rsp + 0x10e8]
lea rcx, [0x180021f00]
call fcn.1800892c0
mov rcx, qword [rsp + 0x11148]
add rcx, 0x60
mov rax, qword [rsp + 0x11148]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11130]
call qword [rax + 8]
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x940
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov r8d, dword [rsp + 0x10e8]
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov ecx, dword [rsp + 0x10e8]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
jmp 0x1800bac42
jmp 0x1800baaeb
mov edx, dword [rsp + 0x94]
lea rcx, [0x180021e90]
call fcn.1800892c0
mov rcx, qword [rsp + 0x11560]
add rcx, 0x3030
mov rax, qword [rsp + 0x11560]
mov rax, qword [rax + 0x3030]
call qword [rax + 0x18]
mov qword [rsp + 0x114b8], rax
mov rax, qword [rsp + 0x114b8]
mov qword [rsp + 0x10b8], rax
cmp qword [rsp + 0x10b8], 0
je 0x1800bb068
mov rax, qword [rsp + 0x10b8]
movzx eax, byte [rax + 0x31]
cmp eax, 1
jne 0x1800bad09
mov rcx, qword [rsp + 0x10b8]
call fcn.1800e3fe0
mov dword [rsp + 0x114c0], eax
mov r8, qword [rsp + 0x10b8]
mov r8, qword [r8 + 0x38]
mov edx, dword [rsp + 0x114c0]
lea rcx, [0x180021e30]
call fcn.1800892c0
mov rax, qword [rsp + 0x10b8]
mov rax, qword [rax + 0x38]
mov qword [rsp + 0x112c0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112c0]
call fcn.1800ec370
mov rax, qword [rsp + 0x10b8]
mov eax, dword [rax + 0x44]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov rax, qword [rsp + 0x10b8]
mov r8d, dword [rax + 0x48]
mov rdx, qword [rsp + 0x10b8]
mov rdx, qword [rdx + 0x50]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov rax, qword [rsp + 0x10b8]
movzx eax, byte [rax + 0x30]
mov byte [rsp + 0x11118], al
mov rax, qword [rsp + 0x10b8]
mov ecx, dword [rax + 0x48]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
mov rax, qword [rsp + 0x10b8]
movsxd rcx, dword [rax + 0x48]
mov rax, qword [rsp + 0x20f0]
add rax, rcx
mov qword [rsp + 0x20f0], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x10e0], eax
cmp dword [rsp + 0x11588], 0
jbe 0x1800bae0a
mov edx, dword [rsp + 0x11588]
imul edx, edx, 0x3e8
mov ecx, dword [rsp + 0x11138]
mov eax, dword [rsp + 0x10e0]
sub eax, ecx
cmp eax, edx
jbe 0x1800bae0a
mov eax, dword [rsp + 0x10e0]
mov dword [rsp + 0x11138], eax
lea r9, [rsp + 0x20f0]
lea r8, [rsp + 0x20f8]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0xc
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
cmp dword [rsp + 0x11590], 0
jbe 0x1800baf3c
mov eax, dword [rsp + 0x10d0]
add eax, 1
mov dword [rsp + 0x10d0], eax
cmp dword [rsp + 0x10d0], 8
jle 0x1800bae6b
mov dword [rsp + 0x10d0], 0
lea rdi, [rsp + 0x11108]
xor eax, eax
mov ecx, 0xc
rep stosb byte [rdi], al
mov r8d, 0xc
lea rdx, [rsp + 0x11108]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a6fe0
nop
mov edx, dword [rsp + 0x11590]
imul edx, edx, 0x3e8
mov ecx, dword [rsp + 0x11164]
mov eax, dword [rsp + 0x10e0]
sub eax, ecx
cmp eax, edx
jbe 0x1800baf3c
mov eax, dword [rsp + 0x10e0]
mov dword [rsp + 0x11164], eax
movzx edi, byte [rsp + 0x1110f]
movzx edx, byte [rsp + 0x1110e]
shl edx, 8
movzx ecx, byte [rsp + 0x1110d]
shl ecx, 0x10
movzx eax, byte [rsp + 0x1110c]
shl eax, 0x18
or eax, ecx
or eax, edx
or eax, edi
mov dword [rsp + 0x11144], eax
movzx edi, byte [rsp + 0x11113]
movzx edx, byte [rsp + 0x11112]
shl edx, 8
movzx ecx, byte [rsp + 0x11111]
shl ecx, 0x10
movzx eax, byte [rsp + 0x11110]
shl eax, 0x18
or eax, ecx
or eax, edx
or eax, edi
mov dword [rsp + 0x1113c], eax
lea r9, [rsp + 0x1113c]
lea r8, [rsp + 0x11144]
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0xd
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov rdx, qword [rsp + 0x10b8]
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x11cc0]
call fcn.1800a87b0
xor edx, edx
mov rcx, qword [rsp + 0x11560]
mov rcx, qword [rcx + 0x121b8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x1800bb063
mov rax, qword [rsp + 0x11560]
movzx eax, byte [rax + 0x11cbe]
cmp eax, 1
jne 0x1800bb063
mov rdx, qword [rsp + 0x20f0]
lea rcx, [0x180021de0]
call fcn.1800892c0
mov ecx, 0x1020
call fcn.1800eb9ac
mov qword [rsp + 0x114e8], rax
mov rax, qword [rsp + 0x114e8]
mov qword [rsp + 0x112e8], rax
cmp qword [rsp + 0x112e8], 0
je 0x1800bb013
mov rax, qword [rsp + 0x20f0]
mov qword [rsp + 0x20], rax
lea r9, [0x180021d90]
xor r8d, r8d
mov edx, 0xe
mov rcx, qword [rsp + 0x112e8]
call fcn.18008d120
mov qword [rsp + 0x114f0], rax
mov rax, qword [rsp + 0x114f0]
mov qword [rsp + 0x114f8], rax
jmp 0x1800bb01f
mov qword [rsp + 0x114f8], 0
mov rax, qword [rsp + 0x114f8]
mov qword [rsp + 0x112e0], rax
mov rax, qword [rsp + 0x112e0]
mov qword [rsp + 0x11158], rax
mov rax, qword [rsp + 0x11158]
mov qword [rsp + 0x112f0], rax
lea rdx, [0x18015a158]
lea rcx, [rsp + 0x112f0]
call fcn.1800ec370
jmp 0x1800bac55
movzx eax, byte [rsp + 0x11118]
test eax, eax
jne 0x1800bb0b9
lea rcx, [0x180021d48]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x19
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov ecx, dword [0x18015e864]
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800bac55
mov edx, dword [rsp + 0x94]
lea rcx, [0x180021ce0]
call fcn.1800892c0
mov dword [rsp + 0x10e8], 0x1a5e
lea rdi, [rsp + 0x2100]
xor eax, eax
mov ecx, 0xf000
rep stosb byte [rdi], al
cmp dword [rsp + 0x10e8], 0x10
jle 0x1800bb17f
mov qword [rsp + 0x11130], 0x9400
mov rcx, qword [rsp + 0x11120]
add rcx, 0x60
mov rax, qword [rsp + 0x11120]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11130]
call qword [rax + 8]
mov dword [rsp + 0x20], 0x9400
mov r9d, dword [rsp + 0x94]
mov r8d, 0x10
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov eax, dword [rsp + 0x10e8]
sub eax, 0x10
mov dword [rsp + 0x10e8], eax
mov eax, dword [rsp + 0x94]
add eax, 0x10
mov dword [rsp + 0x94], eax
jmp 0x1800bb229
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x940
cdqe
mov qword [rsp + 0x11130], rax
mov r8d, 0x10
mov edx, dword [rsp + 0x10e8]
lea rcx, [0x180021c70]
call fcn.1800892c0
mov rcx, qword [rsp + 0x11120]
add rcx, 0x60
mov rax, qword [rsp + 0x11120]
mov rax, qword [rax + 0x60]
lea r8, [rsp + 0x2100]
mov rdx, qword [rsp + 0x11130]
call qword [rax + 8]
mov eax, dword [rsp + 0x10e8]
imul eax, eax, 0x940
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x94]
mov r8d, dword [rsp + 0x10e8]
lea rdx, [rsp + 0x2100]
mov rcx, qword [rsp + 0x11560]
call fcn.1800a78b0
mov ecx, dword [rsp + 0x10e8]
mov eax, dword [rsp + 0x94]
add eax, ecx
mov dword [rsp + 0x94], eax
jmp 0x1800bb22e
jmp 0x1800bb0d7
mov edx, dword [rsp + 0x94]
lea rcx, [0x180021c20]
call fcn.1800892c0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 0x29
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 8
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
mov rcx, qword [rsp + 0x11560]
call fcn.1800b3b50
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x11560]
mov rdx, qword [rdx + 0x121d8]
mov ecx, 9
mov rax, qword [rsp + 0x11560]
call qword [rax + 0x121d0]
nop
lea rcx, [rsp + 0x11178]
call fcn.18008cfd0
nop
cmp qword [rsp + 0x88], 0
je 0x1800bb33b
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x11368], rax
mov rax, qword [rsp + 0x11368]
mov qword [rsp + 0x11360], rax
cmp qword [rsp + 0x11360], 0
je 0x1800bb32f
mov rax, qword [rsp + 0x11360]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x11360]
call qword [rax]
mov qword [rsp + 0x11528], rax
jmp 0x1800bb33b
mov qword [rsp + 0x11528], 0
cmp qword [rsp + 0x11148], 0
je 0x1800bb3a1
mov rax, qword [rsp + 0x11148]
mov qword [rsp + 0x11378], rax
mov rax, qword [rsp + 0x11378]
mov qword [rsp + 0x11370], rax
cmp qword [rsp + 0x11370], 0
je 0x1800bb395
mov rax, qword [rsp + 0x11370]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x11370]
call qword [rax]
mov qword [rsp + 0x11530], rax
jmp 0x1800bb3a1
mov qword [rsp + 0x11530], 0
cmp qword [rsp + 0x11120], 0
je 0x1800bb407
mov rax, qword [rsp + 0x11120]
mov qword [rsp + 0x11388], rax
mov rax, qword [rsp + 0x11388]
mov qword [rsp + 0x11380], rax
cmp qword [rsp + 0x11380], 0
je 0x1800bb3fb
mov rax, qword [rsp + 0x11380]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x11380]
call qword [rax]
mov qword [rsp + 0x11538], rax
jmp 0x1800bb407
mov qword [rsp + 0x11538], 0
mov rcx, qword [rsp + 0x11560]
call fcn.1800b3070
lea rcx, [0x180021bd0]
call fcn.1800892c0
nop
lea rcx, [rsp + 0x70]
call fcn.18008d2a0
mov rcx, qword [rsp + 0x11540]
xor rcx, rsp
call fcn.1800eb430
add rsp, 0x11550
pop rdi
ret