Function at 0x1400eeb50
Capabilities:
Terminate thread
Timestomp file

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov qword [rsp + 0xc0], rbx
mov rdi, rcx
lea rax, vtable.HitmanPro35::HitmanPro.0
mov qword [rcx], rax
mov rcx, qword [rcx + 8]
call fcn.1402ae570
mov rcx, qword [rdi + 0x290]
test rcx, rcx
je 0x1400eebc5
mov edx, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400eebb8
or edx, 0xffffffff
mov rcx, qword [rdi + 0x290]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x290]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x298]
test rcx, rcx
je 0x1400eebfd
mov edx, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400eebf0
or edx, 0xffffffff
mov rcx, qword [rdi + 0x298]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x298]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x268]
test rcx, rcx
je 0x1400eec35
mov edx, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400eec28
or edx, 0xffffffff
mov rcx, qword [rdi + 0x268]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x268]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x270]
test rcx, rcx
je 0x1400eec6d
mov edx, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400eec60
or edx, 0xffffffff
mov rcx, qword [rdi + 0x270]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x270]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x278]
test rcx, rcx
je 0x1400eeca5
mov edx, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400eec98
or edx, 0xffffffff
mov rcx, qword [rdi + 0x278]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x278]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x280]
test rcx, rcx
je 0x1400eecdd
mov edx, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400eecd0
or edx, 0xffffffff
mov rcx, qword [rdi + 0x280]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x280]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rdi + 0x288]
test rcx, rcx
je 0x1400eed15
mov edx, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1400eed08
or edx, 0xffffffff
mov rcx, qword [rdi + 0x288]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rdi + 0x288]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x140428af0]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov rcx, qword [0x140428c70]
test rcx, rcx
je 0x1400eed4f
mov edx, 0x2710
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1400eed4f
xor edx, edx
mov rcx, qword [0x140428c70]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [0x140428b48]
test rcx, rcx
je 0x1400eed65
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rdi + 0x418]
test rcx, rcx
je 0x1400eed7b
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rdi + 0x420]
test rcx, rcx
je 0x1400eed91
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rdi + 0x428]
test rcx, rcx
je 0x1400eeda7
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rdi + 0x430]
test rcx, rcx
je 0x1400eedbd
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rdi + 0x438]
test rcx, rcx
je 0x1400eedd3
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
lea r14, [rdi + 0x568]
mov rcx, r14
call fcn.140119320
mov rbx, qword [rdi + 0x4e0]
test rbx, rbx
je 0x1400eedfe
mov rcx, rbx
call fcn.140119190
mov rcx, rbx
call fcn.1402150f0
lea rax, [rdi + 0x468]
mov qword [rbp + 0x48], rax
lea r13, [rax + 8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
lea r12, [rdi + 0x498]
mov rax, qword [r12]
mov rbx, qword [rax]
cmp rbx, rax
je 0x1400eee94
nop word [rax + rax]
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x1400eee43
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
cmp byte [rbx + 0x19], 0
jne 0x1400eee8e
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1400eee6e
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x1400eee8e
nop
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1400eee60
jmp 0x1400eee8e
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400eee8b
cmp rbx, qword [rax + 0x10]
jne 0x1400eee8b
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400eee78
mov rbx, rax
cmp rbx, qword [r12]
jne 0x1400eee30
mov rcx, r12
call fcn.140009e30
lea rax, vtable.Core::Dictionary_class_Core::String__class_HitmanPro35::FileSystemBase____ptr64_::Enumerator.0
mov qword [rbp - 0x18], rax
lea r15, [rdi + 0x3f8]
mov qword [rbp - 0x10], r15
mov rbx, qword [r15 + 8]
mov qword [rbp - 8], rbx
lea rax, [0x140346ce0]
mov qword [rbp - 0x28], rax
xor esi, esi
mov qword [rbp - 0x20], rsi
nop dword [rax + rax]
test rbx, rbx
je 0x1400eef22
mov edx, dword [rbx + 0x1c]
lea rcx, [rbp - 0x28]
call fcn.1401fcb40
movsxd r9, dword [rbx + 0x1c]
mov eax, dword [rbp - 0x20]
inc eax
movsxd rdx, eax
mov r8, qword [rbx + 0x10]
mov rcx, qword [rbp - 0x28]
call fcn.1402ba94c
mov edx, dword [rbx + 0x1c]
lea rcx, [rbp - 0x28]
call fcn.1401fde50
mov rcx, qword [rbx + 0x20]
mov rbx, qword [rbx]
mov qword [rbp - 8], rbx
test rcx, rcx
je 0x1400eeed0
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
jmp 0x1400eeed0
mov rbx, qword [r15 + 8]
test rbx, rbx
je 0x1400eef52
nop dword [rax + rax]
mov rsi, qword [rbx]
cmp dword [rbx + 0x18], 0
jle 0x1400eef42
mov rcx, qword [rbx + 0x10]
call fcn.1402b7350
mov rcx, rbx
call fcn.1402150f0
mov rbx, rsi
test rsi, rsi
jne 0x1400eef30
mov qword [r15 + 8], rsi
mov qword [r15 + 0x10], rsi
mov dword [r15 + 0x18], esi
cmp dword [rbp - 0x20], 0
jle 0x1400eef6e
mov rcx, qword [rbp - 0x28]
call fcn.1402b7350
nop
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [0x140428cc0]
mov rcx, qword [rcx + 0x28]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, 0x2710
mov rcx, qword [0x140428cc0]
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rdi + 0x2e0]
test rcx, rcx
je 0x1400eefb4
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rdi + 0x2e8]
test rcx, rcx
je 0x1400eefcb
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 8]
call fcn.1400fe460
test al, al
je 0x1400eefd9
call fcn.1400febd0
cmp byte [rdi + 0x265], 0
jne 0x1400ef00a
cmp byte [rdi + 0x35], 0
jne 0x1400ef00a
call fcn.140111f80
test al, al
jne 0x1400ef00a
cmp qword [0x140429010], 0
ja 0x1400ef005
cmp qword [rdi + 0x280], 0
je 0x1400ef00a
call fcn.14010f730
mov rcx, qword [rdi + 0xc0]
test rcx, rcx
je 0x1400ef020
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov rcx, qword [rdi + 0xc8]
test rcx, rcx
je 0x1400ef036
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
cmp byte [rdi + 0x58], 0
je 0x1400ef045
mov rcx, qword [rdi + 0x50]
call fcn.1401413d0
cmp byte [rdi + 0x4c], 0
je 0x1400ef050
call fcn.140140a60
mov rbx, qword [0x140428ac8]
mov qword [0x140428ac8], rsi
test rbx, rbx
je 0x1400ef073
mov rcx, rbx
call fcn.140073a80
mov rcx, rbx
call fcn.1402150f0
call qword [sym.imp.WS2_32.dll_WSACleanup]
cmp byte [rdi + 0x225], 0
je 0x1400ef11a
cmp byte [rdi + 0x31], 0
je 0x1400ef11a
cmp word [0x1404295c0], 0
jne 0x1400ef0af
mov r8d, 0x104
lea rdx, [0x1404295c0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x100
lea r8d, [r9 + 3]
lea rcx, [0x1404295c0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1400ef11a
lea r9, [rbp + 0x48]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x1400ef111
mov dword [rbp + 0x48], 0x55555555
lea r9, [rbp + 0x48]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileTime]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [0x140428b78], rsi
mov r8, qword [rdi + 0xa08]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0xa08]
call fcn.140009b50
mov rcx, qword [rdi + 0xa08]
call fcn.1402150f0
nop
cmp dword [rdi + 0xa00], 0
jle 0x1400ef161
mov rcx, qword [rdi + 0x9f8]
call fcn.1402b7350
nop
cmp dword [rdi + 0x9f0], 0
jle 0x1400ef177
mov rcx, qword [rdi + 0x9e8]
call fcn.1402b7350
nop
lea rax, vtable.Core::Dictionary_class_Core::String__bool_.0
mov qword [rdi + 0x9c8], rax
mov rbx, qword [rdi + 0x9d0]
test rbx, rbx
je 0x1400ef1b3
mov rsi, qword [rbx]
cmp dword [rbx + 0x18], 0
jle 0x1400ef1a3
mov rcx, qword [rbx + 0x10]
call fcn.1402b7350
mov rcx, rbx
call fcn.1402150f0
mov rbx, rsi
test rsi, rsi
jne 0x1400ef191
mov qword [rdi + 0x9d0], rsi
mov qword [rdi + 0x9d8], rsi
mov dword [rdi + 0x9e0], esi
lea r13, vtable.Core::Mutex.0
mov qword [rdi + 0x998], r13
lea rcx, [rdi + 0x9a0]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
lea rax, vtable.Core::EventWaitHandle.0
mov qword [rdi + 0x988], rax
mov rcx, qword [rdi + 0x990]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, vtable.Core::WaitHandle.0
mov qword [rdi + 0x988], rax
lea rcx, [rdi + 0x950]
call fcn.140118ad0
nop
mov r8, qword [rdi + 0x718]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x718]
call fcn.14011a5d0
mov rcx, qword [rdi + 0x718]
call fcn.1402150f0
nop
mov qword [rdi + 0x6e8], r13
lea rcx, [rdi + 0x6f0]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
mov r8, qword [rdi + 0x6d8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x6d8]
call fcn.140009b50
mov rcx, qword [rdi + 0x6d8]
call fcn.1402150f0
nop
mov qword [rdi + 0x6a8], r13
lea rcx, [rdi + 0x6b0]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
mov r8, qword [rdi + 0x698]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x698]
call fcn.140009b50
mov rcx, qword [rdi + 0x698]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x688]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x688]
call fcn.140009b50
mov rcx, qword [rdi + 0x688]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x678]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x678]
call fcn.140009b50
mov rcx, qword [rdi + 0x678]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x668]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x668]
call fcn.140009b50
mov rcx, qword [rdi + 0x668]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x658]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x658]
call fcn.140009b50
mov rcx, qword [rdi + 0x658]
call fcn.1402150f0
nop
mov qword [rdi + 0x628], r13
lea rcx, [rdi + 0x630]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
mov r8, qword [rdi + 0x618]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x618]
call fcn.140009b50
mov rcx, qword [rdi + 0x618]
call fcn.1402150f0
nop
mov rcx, qword [rdi + 0x5e8]
test rcx, rcx
je 0x1400ef3ce
call fcn.1402150f0
mov qword [rdi + 0x5e8], rsi
mov qword [rdi + 0x5f0], rsi
mov qword [rdi + 0x5f8], rsi
mov rax, qword [rdi + 0x5d8]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rdi + 0x5d8]
mov qword [rax + 8], rax
mov qword [rdi + 0x5e0], rsi
cmp rcx, qword [rdi + 0x5d8]
je 0x1400ef40a
mov rbx, qword [rcx]
call fcn.1402150f0
mov rcx, rbx
cmp rbx, qword [rdi + 0x5d8]
jne 0x1400ef3f6
mov rcx, qword [rdi + 0x5d8]
call fcn.1402150f0
nop
mov qword [rdi + 0x5a8], r13
lea rcx, [rdi + 0x5b0]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x1400ef446
call fcn.1402150f0
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], rsi
mov qword [r14 + 0x20], rsi
mov rax, qword [r14]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [r14]
mov qword [rax + 8], rax
mov qword [r14 + 8], rsi
cmp rcx, qword [r14]
je 0x1400ef470
nop
mov rbx, qword [rcx]
call fcn.1402150f0
mov rcx, rbx
cmp rbx, qword [r14]
jne 0x1400ef460
mov rcx, qword [r14]
call fcn.1402150f0
nop
mov qword [rdi + 0x538], r13
lea rcx, [rdi + 0x540]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
mov r8, qword [rdi + 0x528]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x528]
call fcn.140009b50
mov rcx, qword [rdi + 0x528]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x518]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x518]
call fcn.140009b50
mov rcx, qword [rdi + 0x518]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x508]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x508]
call fcn.140009b50
mov rcx, qword [rdi + 0x508]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x4f8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x4f8]
call fcn.140009b50
mov rcx, qword [rdi + 0x4f8]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x4e8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x4e8]
call fcn.140009b50
mov rcx, qword [rdi + 0x4e8]
call fcn.1402150f0
nop
lea rcx, [rdi + 0x4b8]
call fcn.140175f40
nop
mov r8, qword [rdi + 0x4a8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x4a8]
call fcn.140009350
mov rcx, qword [rdi + 0x4a8]
call fcn.1402150f0
nop
mov r8, qword [r12]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
mov rcx, r12
call fcn.140009b50
mov rcx, qword [r12]
call fcn.1402150f0
nop
mov qword [rdi + 0x468], r13
lea rcx, [rdi + 0x470]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
mov r8, qword [rdi + 0x450]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x450]
call fcn.140009350
mov rcx, qword [rdi + 0x450]
call fcn.1402150f0
nop
mov r8, qword [rdi + 0x440]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x440]
call fcn.140009b50
mov rcx, qword [rdi + 0x440]
call fcn.1402150f0
nop
lea rax, vtable.Core::Dictionary_class_Core::String__class_HitmanPro35::FileSystemBase____ptr64_.0
mov qword [r15], rax
mov rcx, r15
call fcn.140118ed0
nop
mov r8, qword [rdi + 0x3e8]
mov r9, r8
mov r8, qword [r8]
lea rdx, [rbp + 0x48]
lea rcx, [rdi + 0x3e8]
call fcn.140009b50
mov rcx, qword [rdi + 0x3e8]
call fcn.1402150f0
nop
lea rcx, [rdi + 0x3b8]
call fcn.140118ad0
nop
lea rcx, [rdi + 0x388]
call fcn.1401187c0
nop
lea rcx, [rdi + 0x358]
call fcn.1401184b0
nop
lea rcx, [rdi + 0x328]
call fcn.1401181a0
nop
lea rcx, [rdi + 0x2f8]
call fcn.140117e90
nop
lea rbx, vtable.Core::EventWaitHandle.0
mov qword [rdi + 0x2c8], rbx
mov rcx, qword [rdi + 0x2d0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rsi, vtable.Core::WaitHandle.0
mov qword [rdi + 0x2c8], rsi
mov qword [rdi + 0x2b8], rbx
mov rcx, qword [rdi + 0x2c0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + 0x2b8], rsi
cmp dword [rdi + 0x2b0], 0
jle 0x1400ef6f8
mov rcx, qword [rdi + 0x2a8]
call fcn.1402b7350
nop
lea rbx, vtable.Core::DateTime.0
mov qword [rdi + 0x228], rbx
cmp dword [rdi + 0x210], 0
jle 0x1400ef71c
mov rcx, qword [rdi + 0x208]
call fcn.1402b7350
nop
cmp dword [rdi + 0x200], 0
jle 0x1400ef732
mov rcx, qword [rdi + 0x1f8]
call fcn.1402b7350
nop
cmp dword [rdi + 0x1f0], 0
jle 0x1400ef748
mov rcx, qword [rdi + 0x1e8]
call fcn.1402b7350
nop
cmp dword [rdi + 0x1e0], 0
jle 0x1400ef75e
mov rcx, qword [rdi + 0x1d8]
call fcn.1402b7350
nop
mov qword [rdi + 0x198], rbx
cmp dword [rdi + 0x188], 0
jle 0x1400ef77b
mov rcx, qword [rdi + 0x180]
call fcn.1402b7350
nop
cmp dword [rdi + 0x178], 0
jle 0x1400ef791
mov rcx, qword [rdi + 0x170]
call fcn.1402b7350
nop
mov qword [rdi + 0x140], r13
lea rcx, [rdi + 0x148]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
cmp dword [rdi + 0x138], 0
jle 0x1400ef7bc
mov rcx, qword [rdi + 0x130]
call fcn.1402b7350
nop
cmp dword [rdi + 0xf0], 0
jle 0x1400ef7d2
mov rcx, qword [rdi + 0xe8]
call fcn.1402b7350
nop
cmp dword [rdi + 0xd8], 0
jle 0x1400ef7e8
mov rcx, qword [rdi + 0xd0]
call fcn.1402b7350
nop
mov qword [rdi + 0x90], r13
lea rcx, [rdi + 0x98]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
nop
lea rcx, [rdi + 0x60]
call fcn.140117d10
nop
cmp dword [rdi + 0x40], 0
jle 0x1400ef816
mov rcx, qword [rdi + 0x38]
call fcn.1402b7350
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret