Function at 0x1401cca10
Capabilities:
Check for time delay via gettickcount
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1404af540]
xor rax, rsp
mov qword [rbp - 8], rax
mov rbx, rcx
xor r9d, r9d
xor r8d, r8d
mov edx, Ordinal_16
mov rcx, qword [0x1404c4920]
call qword [sym.imp.USER32.dll_SendMessageW]
lea r15d, [rax + 1]
xor sil, sil
cmp r15d, 1
jle 0x1401cd39d
movsxd rcx, r15d
mov eax, 2
mul rcx
mov rdi, 0xffffffffffffffff
cmovb rax, rdi
mov rcx, rax
call fcn.1403ca480
mov r14, rax
mov r8d, r15d
mov rdx, rax
mov rcx, qword [0x1404c4920]
call qword [sym.imp.USER32.dll_GetWindowTextW]
mov byte [rbp - 0x10], sil
mov rax, qword [rbx + 0x30]
xor r15d, r15d
mov word [rbp - 0x2c], r15w
mov dword [rbp - 0x18], r15d
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x48], Ordinal_60
mov rax, qword [rax + 0x180]
mov qword [rbp - 0x34], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x38], eax
mov qword [rbp - 0x28], r14
lea rax, [rbp - 0x10]
mov qword [rbp - 0x20], rax
mov rax, qword [rbx]
lea rdx, [rbp - 0x48]
mov rcx, rbx
call qword [rax + 0x238]
cmp byte [rbp - 0x10], sil
jne 0x1401cd390
mov qword [rbp - 0x50], r15
mov eax, dword [rbx + 0x64c]
dec eax
cmp eax, 0xc
ja case.default.0x1401ccb1a
cdqe
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x1cd4e4]
add rcx, rdx
jmp rcx
mov r8d, 0xa
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov edx, eax
cmp byte [rbx + 0x5f0], sil
je 0x1401ccbe5
mov eax, dword [rbx + 0x650]
cmp edx, eax
jge 0x1401ccb66
mov edx, eax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x388]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, dword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401ccbde
cmp edx, r8d
jle 0x1401ccbb6
mov r9d, dword [rbx + 0x660]
cmp edx, r9d
jge 0x1401ccbb6
mov ecx, edx
sub ecx, r8d
mov eax, r9d
sub eax, edx
mov edx, r8d
cmp ecx, eax
cmovge edx, r9d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x388]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov eax, dword [rbx + 0x668]
cmp edx, eax
jle 0x1401ccbe5
mov edx, eax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x388]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
cmp edx, r8d
cmovg edx, r8d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x388]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, 0xa
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov edx, eax
cmp byte [rbx + 0x5f0], sil
je 0x1401cccca
mov eax, dword [rbx + 0x650]
cmp edx, eax
jae 0x1401ccc4b
mov edx, eax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x380]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, dword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401cccc3
cmp edx, r8d
jbe 0x1401ccc9b
mov r9d, dword [rbx + 0x660]
cmp edx, r9d
jae 0x1401ccc9b
mov ecx, edx
sub ecx, r8d
mov eax, r9d
sub eax, edx
mov edx, r8d
cmp ecx, eax
cmovae edx, r9d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x380]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov eax, dword [rbx + 0x668]
cmp edx, eax
jbe 0x1401cccca
mov edx, eax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x380]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
cmp edx, r8d
cmova edx, r8d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x380]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, 0xa
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstol]
mov edx, eax
cmp byte [rbx + 0x5f0], sil
je 0x1401ccdaf
mov eax, dword [rbx + 0x650]
cmp edx, eax
jge 0x1401ccd30
mov edx, eax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x378]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, dword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401ccda8
cmp edx, r8d
jle 0x1401ccd80
mov r9d, dword [rbx + 0x660]
cmp edx, r9d
jge 0x1401ccd80
mov ecx, edx
sub ecx, r8d
mov eax, r9d
sub eax, edx
mov edx, r8d
cmp ecx, eax
cmovge edx, r9d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x378]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov eax, dword [rbx + 0x668]
cmp edx, eax
jle 0x1401ccdaf
mov edx, eax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x378]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
cmp edx, r8d
cmovg edx, r8d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x378]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, 0xa
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov edx, eax
cmp byte [rbx + 0x5f0], sil
je 0x1401cce42
mov eax, dword [rbx + 0x650]
cmp edx, eax
jae 0x1401ccdf7
mov edx, eax
jmp 0x1401cce42
mov r8d, dword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401cce3b
cmp edx, r8d
jbe 0x1401cce2d
mov r9d, dword [rbx + 0x660]
cmp edx, r9d
jae 0x1401cce2d
mov ecx, r9d
sub ecx, edx
mov eax, edx
sub eax, r8d
mov edx, r8d
cmp eax, ecx
cmovae edx, r9d
jmp 0x1401cce42
mov eax, dword [rbx + 0x668]
cmp edx, eax
jbe 0x1401cce42
mov edx, eax
jmp 0x1401cce42
cmp edx, r8d
cmova edx, r8d
mov rax, qword [rbx]
xor r8d, r8d
mov rcx, rbx
call qword [rax + 0x368]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, 0xa
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoll]
mov rdx, rax
cmp byte [rbx + 0x5f0], sil
je 0x1401ccf34
mov rax, qword [rbx + 0x650]
cmp rdx, rax
jge 0x1401cceaf
mov rdx, rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x360]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8, qword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401ccf2d
cmp rdx, r8
jle 0x1401ccf02
mov r9, qword [rbx + 0x660]
cmp rdx, r9
jge 0x1401ccf02
mov rcx, r9
sub rcx, rdx
mov rax, rdx
sub rax, r8
mov rdx, r8
cmp rax, rcx
cmovge rdx, r9
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x360]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov rax, qword [rbx + 0x668]
cmp rdx, rax
jle 0x1401ccf34
mov rdx, rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x360]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
cmp rdx, r8
cmovg rdx, r8
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x360]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, 0xa
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoull]
mov rdx, rax
cmp byte [rbx + 0x5f0], sil
je 0x1401ccfd1
mov rax, qword [rbx + 0x650]
cmp rdx, rax
jae 0x1401ccf80
mov rdx, rax
jmp 0x1401ccfd1
mov r8, qword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401ccfca
cmp rdx, r8
jbe 0x1401ccfb9
mov r9, qword [rbx + 0x660]
cmp rdx, r9
jae 0x1401ccfb9
mov rcx, r9
sub rcx, rdx
mov rax, rdx
sub rax, r8
mov rdx, r8
cmp rax, rcx
cmovae rdx, r9
jmp 0x1401ccfd1
mov rax, qword [rbx + 0x668]
cmp rdx, rax
jbe 0x1401ccfd1
mov rdx, rax
jmp 0x1401ccfd1
cmp rdx, r8
cmova rdx, r8
mov rax, qword [rbx]
xor r8d, r8d
mov rcx, rbx
call qword [rax + 0x358]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, reloc.SinoSPE.dll_Ordinal_16
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov edx, eax
cmp byte [rbx + 0x5f0], sil
je 0x1401cd076
movzx eax, word [rbx + 0x650]
cmp dx, ax
jae 0x1401cd01f
movzx edx, ax
jmp 0x1401cd076
movzx r8d, word [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401cd06d
cmp dx, r8w
jbe 0x1401cd05c
movzx r9d, word [rbx + 0x660]
cmp dx, r9w
jae 0x1401cd05c
movzx edx, dx
mov ecx, r9d
sub ecx, edx
sub edx, r8d
cmp edx, ecx
cmovge r8w, r9w
movzx edx, r8w
jmp 0x1401cd076
movzx eax, word [rbx + 0x668]
cmp dx, ax
jbe 0x1401cd076
movzx edx, ax
jmp 0x1401cd076
cmp dx, r8w
cmova dx, r8w
mov rax, qword [rbx]
mov r8b, 1
mov rcx, rbx
call qword [rax + 0x370]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, reloc.SinoSPE.dll_Ordinal_16
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoul]
mov edx, eax
cmp byte [rbx + 0x5f0], sil
je 0x1401cd10c
mov eax, dword [rbx + 0x650]
cmp edx, eax
jae 0x1401cd0c1
mov edx, eax
jmp 0x1401cd10c
mov r8d, dword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401cd105
cmp edx, r8d
jbe 0x1401cd0f7
mov r9d, dword [rbx + 0x660]
cmp edx, r9d
jae 0x1401cd0f7
mov ecx, edx
sub ecx, r8d
mov eax, r9d
sub eax, edx
mov edx, r8d
cmp ecx, eax
cmovae edx, r9d
jmp 0x1401cd10c
mov eax, dword [rbx + 0x668]
cmp edx, eax
jbe 0x1401cd10c
mov edx, eax
jmp 0x1401cd10c
cmp edx, r8d
cmova edx, r8d
mov rax, qword [rbx]
mov r8b, 1
mov rcx, rbx
call qword [rax + 0x368]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov r8d, reloc.SinoSPE.dll_Ordinal_16
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstoull]
mov rdx, rax
cmp byte [rbx + 0x5f0], sil
je 0x1401cd1ac
mov rax, qword [rbx + 0x650]
cmp rdx, rax
jae 0x1401cd15b
mov rdx, rax
jmp 0x1401cd1ac
mov r8, qword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401cd1a5
cmp rdx, r8
jbe 0x1401cd194
mov r9, qword [rbx + 0x660]
cmp rdx, r9
jae 0x1401cd194
mov rcx, r9
sub rcx, rdx
mov rax, rdx
sub rax, r8
mov rdx, r8
cmp rax, rcx
cmovae rdx, r9
jmp 0x1401cd1ac
mov rax, qword [rbx + 0x668]
cmp rdx, rax
jbe 0x1401cd1ac
mov rdx, rax
jmp 0x1401cd1ac
cmp rdx, r8
cmova rdx, r8
mov rax, qword [rbx]
mov r8b, 1
mov rcx, rbx
call qword [rax + 0x358]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstof]
movaps xmm2, xmm0
cmp byte [rbx + 0x5f0], sil
je 0x1401cd249
movss xmm0, dword [rbx + 0x650]
comiss xmm0, xmm2
jbe 0x1401cd1f6
movaps xmm2, xmm0
jmp 0x1401cd249
movss xmm3, dword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401cd242
comiss xmm2, xmm3
jbe 0x1401cd231
movss xmm4, dword [rbx + 0x660]
comiss xmm4, xmm2
jbe 0x1401cd231
movaps xmm1, xmm2
subss xmm1, xmm3
movaps xmm0, xmm4
subss xmm0, xmm2
comiss xmm0, xmm1
ja 0x1401cd246
movaps xmm2, xmm4
jmp 0x1401cd249
movss xmm0, dword [rbx + 0x668]
minss xmm0, xmm2
movaps xmm2, xmm0
jmp 0x1401cd249
minss xmm3, xmm2
movaps xmm2, xmm3
mov rax, qword [rbx]
mov r8d, edi
movaps xmm1, xmm2
mov rcx, rbx
call qword [rax + 0x350]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
lea rdx, [rbp - 0x50]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstod]
movaps xmm2, xmm0
cmp byte [rbx + 0x5f0], sil
je 0x1401cd2ed
movsd xmm0, qword [rbx + 0x650]
comisd xmm0, xmm2
jbe 0x1401cd297
movaps xmm2, xmm0
jmp 0x1401cd2ed
movsd xmm3, qword [rbx + 0x658]
cmp byte [rbx + 0x5f1], sil
je 0x1401cd2e6
comisd xmm2, xmm3
jbe 0x1401cd2d5
movsd xmm4, qword [rbx + 0x660]
comisd xmm4, xmm2
jbe 0x1401cd2d5
movaps xmm1, xmm2
subsd xmm1, xmm3
movaps xmm0, xmm4
subsd xmm0, xmm2
comisd xmm0, xmm1
ja 0x1401cd2ea
movaps xmm2, xmm4
jmp 0x1401cd2ed
movsd xmm0, qword [rbx + 0x668]
minsd xmm0, xmm2
movaps xmm2, xmm0
jmp 0x1401cd2ed
minsd xmm3, xmm2
movaps xmm2, xmm3
mov rax, qword [rbx]
mov r8d, edi
movaps xmm1, xmm2
mov rcx, rbx
call qword [rax + 0x348]
movzx esi, al
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
nop
inc rdi
cmp word [r14 + rdi*2], r15w
jne 0x1401cd320
mov r8, rdi
mov rdx, r14
lea rcx, [rbp - 0x48]
call fcn.140006340
nop
mov rax, qword [rbx]
lea rdx, [rbp - 0x48]
mov rcx, rbx
call qword [rax + 0x390]
movzx esi, al
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x1401cd390
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401cd38b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401cd38b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
mov rcx, r14
call fcn.1403ca488
jmp 0x1401cd46f
mov byte [rbp - 0x10], sil
mov rax, qword [rbx + 0x30]
xor r15d, r15d
mov word [rbp - 0x2c], r15w
mov dword [rbp - 0x18], r15d
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x48], Ordinal_60
mov rax, qword [rax + 0x180]
mov qword [rbp - 0x34], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x38], eax
mov qword [rbp - 0x28], r15
lea rax, [rbp - 0x10]
mov qword [rbp - 0x20], rax
mov rax, qword [rbx]
lea rdx, [rbp - 0x48]
mov rcx, rbx
call qword [rax + 0x238]
cmp byte [rbp - 0x10], sil
jne 0x1401cd4bb
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
xor r8d, r8d
lea rdx, [0x140419d94]
lea rcx, [rbp - 0x48]
call fcn.140006340
nop
mov rax, qword [rbx]
lea rdx, [rbp - 0x48]
mov rcx, rbx
call qword [rax + 0x390]
movzx esi, al
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x1401cd46f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401cd46a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401cd46a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1403ca488
test sil, sil
je 0x1401cd4bb
mov word [rbp - 0x2c], r15w
mov dword [rbp - 0x18], 0
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x48], reloc.SinoSPE.dll_Ordinal_58
mov rax, qword [rbx + 0x30]
mov rdx, qword [rax + 0x180]
mov qword [rbp - 0x34], rdx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp - 0x38], eax
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], r15
mov rax, qword [rbx]
lea rdx, [rbp - 0x48]
mov rcx, rbx
call qword [rax + 0x238]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1403ca460
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret