Function at 0x18002d94c
Capabilities:
Check for time delay via queryperformancecounter

Disassembly:
mov r11, rsp
mov dword [r11 + 0x20], r9d
mov dword [r11 + 0x18], r8d
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov r13d, r8d
mov dword [rsp + 0x6c], r8d
mov r14, rdx
mov r12, rcx
mov edi, dword [rsp + 0x110]
mov r15d, edi
mov eax, r8d
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x60], eax
xor ebx, ebx
mov dword [rsp + 0x40], ebx
mov qword [r11 - 0x60], rbx
mov qword [r11 - 0x58], rbx
mov qword [r11 - 0x70], rbx
mov dword [rsp + 0x64], ebx
mov qword [r11 - 0x48], rbx
mov dword [r11 - 0x64], ebx
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
lea rax, section..data
mov rcx, qword [section..data]
cmp rcx, rax
je 0x18002da1f
test byte [rcx + 0x1c], 8
je 0x18002da1f
lea rax, str.FALSE
lea rdx, str.TRUE
test r9d, r9d
cmove rdx, rax
lea r8, [0x180072920]
mov rax, r14
test r14, r14
cmove rax, r8
mov r9, r12
test r12, r12
cmove r9, r8
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.18002f3a0
lea rdx, [rsp + 0x84]
lea rcx, [rsp + 0xa0]
call fcn.18000db84
mov esi, eax
test eax, eax
je 0x18002da77
mov rcx, qword [section..data]
lea rdx, section..data
cmp rcx, rdx
je 0x18002dad6
mov r12d, 1
test byte [rcx + 0x1c], r12b
je 0x18002dadc
lea edx, [r12 + 0xa]
mov r9d, eax
lea r8, [0x180073228]
mov rcx, qword [rcx + 0x10]
call fcn.180011748
jmp 0x18002dadc
mov dword [rsp + 0x20], edi
mov r9d, r13d
mov r8d, dword [rsp + 0x108]
mov rdx, r14
mov rcx, r12
call fcn.180024bc8
mov esi, eax
mov dword [rsp + 0x98], eax
test eax, eax
je 0x18002dc09
mov edx, dword [0x18008b2a0]
mov rax, qword gs:[0x58]
mov ecx, 0x38
mov rax, qword [rax + rdx*8]
xor r8d, r8d
xor edx, edx
mov ecx, dword [rax + rcx]
call fcn.18005781c
mov r8d, 0x1bbd
mov edx, esi
xor ecx, ecx
call fcn.180038d90
mov r12d, 1
mov r15d, ebx
lea r13, section..data
mov r14d, 3
cmp qword [rsp + 0x78], rbx
je 0x18002db00
mov edx, r12d
lea rcx, [rsp + 0x78]
call fcn.180014770
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x18002db19
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
nop dword [rax + rax]
xor edx, edx
xor ecx, ecx
mov r8d, 0x1be1
call fcn.180038d90
mov rdx, qword [rsp + 0x118]
test rdx, rdx
je 0x18002db54
mov ecx, dword [0x18008b2a0]
mov rax, qword gs:[0x58]
mov r8d, 0x18
mov rax, qword [rax + rcx*8]
mov ecx, dword [r8 + rax]
mov dword [rdx], ecx
mov rcx, qword gs:[0x58]
mov eax, dword [0x18008b2a0]
mov rdx, qword [rcx + rax*8]
mov eax, 0x88
cmp dword [rax + rdx], ebx
cmovne esi, r14d
mov eax, dword [rsp + 0x6c]
and eax, 0x10040
cmp eax, 0x10000
jne 0x18002db8a
xor ecx, ecx
call fcn.180047c14
test esi, esi
cmovne r15d, esi
mov edx, edi
mov ecx, r15d
call fcn.180023f34
cmp dword [rsp + 0x84], ebx
je 0x18002dbaf
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_RevertToSelf]
nop dword [rax + rax]
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x18002dbc8
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
nop dword [rax + rax]
mov rcx, qword [section..data]
cmp rcx, r13
je 0x18002dbf2
test byte [rcx + 0x1c], 8
je 0x18002dbf2
mov edx, 0xf
mov r9d, r15d
lea r8, [0x180073228]
mov rcx, qword [rcx + 0x10]
call fcn.180011748
mov eax, r15d
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
test r13b, 0x40
jne 0x18002dad6
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bbe
call fcn.180038d90
mov eax, r13d
mov edx, 0x410000
and eax, edx
mov edi, 0xffffff9d
mov ecx, 0xfffffffd
cmp eax, edx
cmovne edi, ecx
and edi, r15d
mov dword [rsp + 0x74], edi
mov r15d, r13d
and r15d, 0x10000
mov dword [rsp + 0x58], r15d
mov r14d, r15d
mov dword [rsp + 0x68], r15d
mov r12d, 1
je 0x18002dd63
test dil, 8
jne 0x18002dc74
test r12b, dil
je 0x18002dd63
call fcn.1800147dc
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x18002dc9a
lea r14d, [rax + 8]
mov dword [rsp + 0x80], r14d
mov edx, r14d
mov r8d, 0x1d0f
jmp 0x18002dcc1
mov rdx, rax
lea rcx, [rsp + 0x64]
call fcn.180047804
mov r14d, eax
mov dword [rsp + 0x80], eax
test eax, eax
je 0x18002dcc9
mov dword [rsp + 0x64], ebx
mov r8d, 0x1d0a
mov edx, eax
mov ecx, r12d
call fcn.180038d90
jmp 0x18002dd22
test r14d, r14d
je 0x18002dd5e
mov ecx, r14d
call fcn.18000ec90
mov r15d, eax
mov edx, dword [0x18008b2a0]
mov rcx, qword gs:[0x58]
mov r9d, 0x38
mov rcx, qword [rcx + rdx*8]
xor r8d, r8d
xor edx, edx
mov ecx, dword [rcx + r9]
call fcn.18005781c
jmp 0x18002dadf
mov r14d, dword [rsp + 0x68]
test r15d, r15d
je 0x18002dd6f
xor ecx, ecx
call fcn.180047c14
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bbf
call fcn.180038d90
mov ecx, dword [0x18008b2a0]
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov qword [rsp + 0x58], rcx
mov r15d, 0x58
add r15, rcx
mov r10d, 0x10
mov eax, r14d
neg eax
sbb edx, edx
add edx, 0x131
lea rax, [rsp + 0x88]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
mov r9d, r12d
mov r8d, edi
mov rcx, qword [r10 + rcx]
call fcn.1800426ac
mov esi, eax
mov rcx, qword [rsp + 0x88]
call fcn.180038ef4
mov rcx, qword [rsp + 0x88]
call fcn.180011914
mov qword [rsp + 0x88], rbx
test esi, esi
je 0x18002de4e
mov rcx, qword [section..data]
lea r13, section..data
cmp rcx, r13
je 0x18002de2c
test byte [rcx + 0x1c], r12b
je 0x18002de2c
mov edx, 0xc
mov r9d, esi
lea r8, [0x180073228]
mov rcx, qword [rcx + 0x10]
call fcn.180011748
mov eax, 0x38
xor r8d, r8d
xor edx, edx
mov r9, qword [rsp + 0x58]
mov ecx, dword [rax + r9]
call fcn.18005781c
mov r15d, dword [rsp + 0x40]
jmp 0x18002dae6
test r14d, r14d
je 0x18002de6a
cmp dword [0x18008ba38], ebx
je 0x18002de6a
mov esi, 0xe
mov r15d, dword [rsp + 0x40]
jmp 0x18002dadf
mov eax, 0x60
mov r9, qword [rsp + 0x58]
mov r8, qword [rax + r9]
lea rcx, [rsp + 0x90]
call fcn.18005ceac
test eax, eax
je 0x18002deba
mov rcx, qword [section..data]
lea rdx, section..data
cmp rcx, rdx
je 0x18002deba
test byte [rcx + 0x1c], 2
je 0x18002deba
mov edx, 0xd
mov r9d, eax
lea r8, [0x180073228]
mov rcx, qword [rcx + 0x10]
call fcn.180011748
test r14d, r14d
je 0x18002dec7
cmp dword [0x18008ba38], ebx
jne 0x18002de5b
lea rcx, [rsp + 0x44]
call fcn.1800042f8
mov esi, ebx
test dil, 8
je 0x18002df87
xor r8d, r8d
lea edx, [r8 + 8]
xor ecx, ecx
call fcn.18005781c
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bc5
call fcn.180038d90
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov al, byte [rsp + 0x64]
and al, 4
neg al
sbb r9, r9
and r9, qword [rsp + 0x78]
mov eax, r13d
btr eax, 8
mov r8d, dword [rsp + 0x70]
cmp dword [rsp + 0x108], ebx
cmove r8d, eax
mov edx, r13d
and edx, 0x200
mov rcx, qword [r15]
add rcx, 0x58
call fcn.18002785c
mov r15d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
test r15d, r15d
je 0x18002e04a
cmp r15d, 0x16
je 0x18002df6f
mov esi, r15d
jmp 0x18002df77
mov dword [rsp + 0x40], 0x16
mov r8d, 0x1bc6
mov edx, r15d
xor ecx, ecx
call fcn.180038d90
mov r15d, dword [rsp + 0x44]
cmp qword [rsp + 0x78], rbx
je 0x18002dfa0
mov edx, r12d
lea rcx, [rsp + 0x78]
call fcn.180014770
test r14d, r14d
je 0x18002dfb1
cmp dword [0x18008ba38], ebx
jne 0x18002de5b
test dil, 4
je 0x18002e10a
xor r8d, r8d
lea edx, [r8 + 4]
xor ecx, ecx
call fcn.18005781c
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bcb
call fcn.180038d90
mov eax, 0xc
mov r14, qword [rsp + 0x58]
lea rcx, [rsp + 0x50]
cmp dword [rax + r14], 2
jne 0x18002e086
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov eax, 0x58
mov rcx, qword [rax + r14]
mov edx, r13d
mov rcx, qword [rcx + 0x60]
call fcn.180032084
mov r14d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov r9, qword [rsp + 0x58]
mov eax, 0x58
mov rcx, qword [rax + r9]
mov edx, r13d
mov rcx, qword [rcx + 0x60]
call fcn.180024008
test eax, eax
je 0x18002e0bb
mov r14d, eax
jmp 0x18002e0bb
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bc7
call fcn.180038d90
mov r15d, dword [rsp + 0x44]
mov dword [rsp + 0x20], r15d
lea r9, [0x1800732a0]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
jmp 0x18002df8c
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov eax, 0x58
mov rcx, qword [rax + r14]
mov edx, r13d
mov rcx, qword [rcx + 0x60]
call fcn.180024008
mov r14d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
xor ecx, ecx
test r14d, r14d
je 0x18002e0d5
mov esi, r14d
mov r8d, 0x1bcc
mov edx, r14d
call fcn.180038d90
jmp 0x18002e105
xor edx, edx
mov r8d, 0x1bcd
call fcn.180038d90
mov dword [rsp + 0x20], r15d
lea r9, [0x180073238]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
mov r14d, dword [rsp + 0x68]
test r14d, r14d
je 0x18002e11b
cmp dword [0x18008ba38], ebx
jne 0x18002de5b
mov r15d, 0x20
test r15b, dil
je 0x18002e1f3
xor r8d, r8d
mov edx, r15d
xor ecx, ecx
call fcn.18005781c
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov r8d, ebx
test r14d, r14d
setne r8b
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rcx, qword [rcx + rax]
mov r9d, r13d
mov edx, r15d
mov rcx, qword [rcx + 0x68]
call fcn.180026e88
mov r15d, eax
mov dword [rsp + 0x68], eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
test r15d, r15d
je 0x18002e1cd
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x18002e1c7
test byte [rcx + 0x1c], r12b
je 0x18002e1c7
mov r15d, 0xe
mov edx, r15d
mov esi, dword [rsp + 0x68]
mov r9d, esi
lea r8, [0x180073228]
mov rcx, qword [rcx + 0x10]
call fcn.180011748
jmp 0x18002e1f9
mov esi, dword [rsp + 0x68]
jmp 0x18002e1f3
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x1800732e8]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
mov r15d, 0xe
test r14d, r14d
je 0x18002e20e
cmp dword [0x18008ba38], ebx
je 0x18002e20e
mov esi, r15d
jmp 0x18002de60
test dil, 0x40
je 0x18002e2d2
xor r8d, r8d
lea edx, [r8 + 0x40]
xor ecx, ecx
call fcn.18005781c
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bd1
call fcn.180038d90
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov r8d, ebx
test r14d, r14d
setne r8b
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rcx, qword [rcx + rax]
mov r9d, r13d
mov edx, 0x40
mov rcx, qword [rcx + 0x78]
call fcn.180026e88
mov dword [rsp + 0x60], eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov eax, dword [rsp + 0x60]
xor ecx, ecx
test eax, eax
je 0x18002e29f
mov esi, eax
mov r8d, 0x1bd2
mov edx, eax
call fcn.180038d90
jmp 0x18002e2d2
xor edx, edx
mov r8d, 0x1bd3
call fcn.180038d90
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x180073370]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
test r14d, r14d
je 0x18002e2e3
cmp dword [0x18008ba38], ebx
jne 0x18002e206
mov edx, 0x80
test dl, dil
je 0x18002e401
xor r8d, r8d
xor ecx, ecx
call fcn.18005781c
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bd7
call fcn.180038d90
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rdx, qword [rcx + rax]
mov r8d, r13d
mov rdx, qword [rdx + 0x70]
mov ecx, 0x10
mov rcx, qword [rcx + rax]
call fcn.180058b48
mov dword [rsp + 0x60], eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov eax, dword [rsp + 0x60]
xor ecx, ecx
test eax, eax
je 0x18002e36e
mov esi, eax
mov r8d, 0x1bd8
mov edx, eax
call fcn.180038d90
jmp 0x18002e3a1
xor edx, edx
mov r8d, 0x1bd9
call fcn.180038d90
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x180073340]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bda
call fcn.180038d90
test r14d, r14d
je 0x18002e3c2
cmp dword [0x18008ba38], ebx
je 0x18002e3c2
mov eax, r15d
jmp 0x18002e3df
xor r8d, r8d
mov edx, r12d
mov rax, qword [rsp + 0x58]
mov ecx, 0x10
mov rcx, qword [rcx + rax]
call fcn.180059e54
test eax, eax
je 0x18002e3f2
mov esi, eax
mov r8d, 0x1bdb
mov edx, eax
xor ecx, ecx
call fcn.180038d90
jmp 0x18002e401
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bdc
call fcn.180038d90
test r14d, r14d
je 0x18002e412
cmp dword [0x18008ba38], ebx
jne 0x18002e206
test r12b, dil
je 0x18002de60
xor r8d, r8d
mov edx, r12d
xor ecx, ecx
call fcn.18005781c
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bc0
call fcn.180038d90
mov eax, r13d
and eax, 0x2000
mov dword [rsp + 0x74], eax
jne 0x18002e4fd
test r14d, r14d
je 0x18002e45b
cmp dword [0x18008b8a0], 4
je 0x18002e4fd
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov r9d, dword [rsp + 0x64]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rcx, qword [rcx + rax]
call fcn.1800287ec
mov r14d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
test r14d, r14d
je 0x18002e4c8
cmp r14d, 0x16
je 0x18002e4ae
mov esi, r14d
jmp 0x18002e4b6
mov dword [rsp + 0x40], 0x16
mov r8d, 0x1bc1
mov edx, r14d
xor ecx, ecx
call fcn.180038d90
jmp 0x18002e4fd
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bc2
call fcn.180038d90
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x180073260]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
xor r8d, r8d
mov edx, r13d
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rcx, qword [rcx + rax]
call fcn.180025658
mov r14d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
test r14d, r14d
je 0x18002e545
mov esi, r14d
jmp 0x18002e56b
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x180073260]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
lea r8, [0x180073260]
mov edx, r12d
mov r14d, 3
mov ecx, r14d
call fcn.18005781c
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rdx, qword [rcx + rax]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r13d
xor r9d, r9d
mov r8d, dword [rdx + 0xe8]
mov rdx, qword [rdx + 0xf0]
mov ecx, 0x10
mov rcx, qword [rcx + rax]
call fcn.180049e08
mov dword [rsp + 0x60], eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov eax, dword [rsp + 0x60]
xor ecx, ecx
test eax, eax
je 0x18002e5fb
mov esi, eax
mov r8d, 0x1bdf
mov edx, eax
call fcn.180038d90
jmp 0x18002e62e
xor edx, edx
mov r8d, 0x1be0
call fcn.180038d90
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x1800732c8]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
lea r8, [0x1800732c8]
mov edx, r12d
mov ecx, 4
call fcn.18005781c
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov edx, r13d
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rcx, qword [rcx + rax]
call fcn.18002a49c
mov r13d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
test r13d, r13d
jne 0x18002e77e
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x180073210]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
test r13d, r13d
jne 0x18002e77e
cmp qword [rsp + 0x90], rbx
je 0x18002e779
mov r13d, dword [rsp + 0x6c]
bt r13d, 0x10
jae 0x18002e718
test byte [rsp + 0x64], 2
je 0x18002e718
xor edx, edx
xor ecx, ecx
mov r8d, 0x1d07
call fcn.180038d90
bt r13d, 0x19
jae 0x18002e709
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 0x3e5
mov ecx, 0x1000
call fcn.1800578e8
mov ecx, 0x3e5
call fcn.18000ec90
mov r13d, eax
jmp 0x18002e779
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov eax, r13d
btr eax, 8
cmp dword [rsp + 0x108], ebx
mov r8d, dword [rsp + 0x70]
cmove r8d, eax
mov rax, qword [rsp + 0x58]
mov r9d, 0x60
mov r9, qword [r9 + rax]
mov rdx, qword [rsp + 0x90]
mov ecx, 0x58
mov rcx, qword [rcx + rax]
call fcn.1800238bc
mov r13d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
test r13d, r13d
je 0x18002e7a7
mov r8d, 0x1bc3
mov edx, r13d
xor ecx, ecx
call fcn.180038d90
mov eax, dword [rsp + 0x40]
cmp r13d, 0x16
cmove eax, r13d
mov dword [rsp + 0x40], eax
cmove r13d, esi
mov esi, r13d
jmp 0x18002e7dc
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bc4
call fcn.180038d90
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x180073308]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
lea r8, [0x180073308]
mov edx, r12d
mov ecx, r14d
call fcn.18005781c
mov ecx, 0xc
mov r9, qword [rsp + 0x58]
cmp dword [rcx + r9], 2
jne 0x18002e8b2
cmp dword [rsp + 0x74], ebx
jne 0x18002e8b2
mov r13d, dword [rsp + 0x6c]
bt r13d, 0x10
jae 0x18002e821
cmp dword [0x18008ba38], ebx
jne 0x18002e868
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
mov rax, qword [rsp + 0x58]
mov ecx, 0x58
mov rdx, qword [rcx + rax]
mov r8d, r13d
mov rdx, qword [rdx + 0x88]
call fcn.18003cb98
mov r15d, eax
lea rcx, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_profile_l1_1_0.dll_QueryPerformanceCounter]
nop dword [rax + rax]
test r15d, r15d
je 0x18002e87d
mov esi, r15d
mov r8d, 0x1bdd
mov edx, r15d
xor ecx, ecx
call fcn.180038d90
jmp 0x18002e8b2
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bde
call fcn.180038d90
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x20], eax
lea r9, [0x180073320]
mov r8, qword [rsp + 0xf0]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x50]
call fcn.180004328
lea r8, [0x180073320]
mov edx, r12d
mov ecx, r14d
call fcn.18005781c
xor edx, edx
xor ecx, ecx
mov r8d, 0x1bda
call fcn.180038d90
mov r8d, r12d
mov edx, r12d
mov rax, qword [rsp + 0x58]
mov ecx, 0x10
mov rcx, qword [rcx + rax]
call fcn.180059e54
xor ecx, ecx
test eax, eax
je 0x18002e912
mov esi, eax
mov r8d, 0x1bdb
mov edx, eax
call fcn.180038d90
mov r15d, dword [rsp + 0x40]
lea r13, section..data
jmp 0x18002daec
xor edx, edx
mov r8d, 0x1bdc
call fcn.180038d90
jmp 0x18002e901