Function at 0x14007ed50
Capabilities:
Get windows directory from kuser_shared_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x2b8
movaps xmmword [rsp + 0x2a0], xmm6
mov rsi, rcx
movabs r14, 0x674d68f26d714f09
movabs r12, 0x42b09954251ff0ef
movabs r15, 0x395016e5d5113891
movabs r13, 0x335c703fa188704
xorps xmm6, xmm6
movaps xmmword [rsp + 0x280], xmm6
movaps xmmword [rsp + 0x270], xmm6
movaps xmmword [rsp + 0x260], xmm6
movaps xmmword [rsp + 0x250], xmm6
movaps xmmword [rsp + 0x240], xmm6
movaps xmmword [rsp + 0x230], xmm6
mov qword [rsp + 0x290], 0
movaps xmmword [rsp + 0x1e0], xmm6
mov qword [rsp + 0x1f0], 0
mov dword [rsp + 0x230], 0x68
movaps xmmword [rsp + 0x140], xmm6
movaps xmmword [rsp + 0x130], xmm6
mov ecx, 0x7ffe0030
call fcn.1400894b0
lea rdi, [rsp + 0x130]
mov edx, 0x7ffe0030
mov rcx, rdi
mov r8, rax
call fcn.140022dc0
mov eax, 0x5d8f5efc
lea rbx, [rsp + 0x150]
add r13, r14
jmp 0x14007ee50
cmp edx, 0xa
cmovge eax, r8d
cmp ecx, 0xffffffff
cmovne eax, r8d
nop word cs:[rax + rax]
cmp eax, 0x88112da
jg 0x14007ef40
cmp eax, 0xcc8bed6d
jle 0x14007efa0
cmp eax, 0xe9ab62a3
jg 0x14007f0b2
cmp eax, 0xd752b61a
jg 0x14007f223
cmp eax, 0xd5593b57
jg 0x14007f463
cmp eax, 0xcc8bed6e
je 0x14007f7f3
cmp eax, 0xcdfbd1c0
jne 0x14007ee50
mov rcx, rbx
call fcn.1400894b0
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x148]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rax]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0xd0]
add rcx, r12
movabs rdx, 0xfcca38fc05e778fc
add rcx, rdx
sub rcx, r12
sub rcx, rax
add rcx, r13
movabs rax, 0x674d68f26d714f09
sub rcx, rax
mov eax, 0x17f8bc0a
cmp rcx, qword [rsp + 0x60]
jb 0x14007ee50
mov eax, 0x556383be
jmp 0x14007ee50
cmp eax, 0x2e780a6c
jle 0x14007f000
cmp eax, 0x5d8f5efb
jg 0x14007f0fc
cmp eax, 0x40c0f311
jg 0x14007f274
cmp eax, 0x3da23b8a
jg 0x14007f4b8
cmp eax, 0x2e780a6d
je 0x14007f811
cmp eax, 0x33c43f06
jne 0x14007ee50
mov rcx, qword [rsp + 0xa0]
call qword [0x1400f3460]
mov eax, 0xda8319b5
jmp 0x14007ee50
cmp eax, 0xae2d03bb
jle 0x14007f141
cmp eax, 0xbcbc5ed8
jg 0x14007f29f
cmp eax, 0xb6fd56aa
jg 0x14007f4d8
cmp eax, 0xae2d03bc
je 0x14007f833
cmp eax, 0xb252927b
jne 0x14007ee50
cmp qword [rsp + 0xa0], 0
mov eax, 0x7f04fa3c
je 0x14007ee50
mov eax, 0x2a90e2f0
jmp 0x14007ee50
cmp eax, 0x1d7feefd
jle 0x14007f1d6
cmp eax, 0x266e04ba
jg 0x14007f2da
cmp eax, 0x2401f504
jg 0x14007f52b
cmp eax, 0x1d7feefe
je 0x14007f84c
cmp eax, 0x1e383e9c
jne 0x14007ee50
mov rax, qword [rsp + 0x80]
cmp qword [rax], 8
mov rdx, rdi
jb 0x14007f050
mov rdx, qword [rsp + 0x130]
mov rax, qword [rsp + 0x1a8]
lea rcx, [rsp + 0x1e0]
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0x230]
mov qword [rsp + 0x40], rcx
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000020
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call rax
mov dword [rsp + 0xc0], eax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x100], rax
mov eax, 0xf8b05511
jmp 0x14007ee50
cmp eax, 0x2c2b166
jg 0x14007f30f
cmp eax, 0xfe09d162
jg 0x14007f575
cmp eax, 0xe9ab62a4
je 0x14007f869
cmp eax, 0xf8b05511
jne 0x14007ee50
cmp qword [rsp + 0x100], 0
mov eax, 0x3f2c7f8
je 0x14007ee50
mov eax, 0xae2d03bc
jmp 0x14007ee50
cmp eax, 0x757baed9
jg 0x14007f34a
cmp eax, 0x70ac6719
jg 0x14007f595
cmp eax, 0x5d8f5efc
je 0x14007f873
cmp eax, 0x665f3845
jne 0x14007ee50
mov rax, qword [0x1400f3460]
mov qword [rsp + 0x1d8], rax
mov eax, 0x7dc8c98
jmp 0x14007ee50
cmp eax, 0x909b282f
jg 0x14007f385
cmp eax, 0x87e0a090
jle 0x14007f5c5
cmp eax, 0x87e0a091
je 0x14007f9bc
cmp eax, 0x8cc3d631
jne 0x14007fd47
mov rax, qword [rsp + 0x1c0]
movabs rcx, 0xa0f6cab7812b3e76
add rax, rcx
movabs rdx, 0x5ea96b19551be9bb
add rax, rdx
sub rax, rcx
movabs rcx, 0xfa43071763935982
sub rax, rcx
sub rax, qword [rsp + 0x118]
add rcx, r15
movabs rdx, 0xa15694e6aae4163d
add rcx, rdx
add rcx, rax
sub rcx, r15
mov eax, 0xcc8bed6e
cmp rcx, 0x20
jb 0x14007ee50
mov eax, 0x8a900121
jmp 0x14007ee50
cmp eax, 0x12258544
jle 0x14007f428
cmp eax, 0x1cd11cf5
jg 0x14007f641
cmp eax, 0x12258545
je 0x14007fa00
cmp eax, 0x17f8bc0a
jne 0x14007ee50
mov eax, dword [0x1400f3190]
mov dword [rsp + 0x68], eax
mov eax, dword [0x1400f3194]
mov dword [rsp + 0xb0], eax
mov eax, 0xd752b61b
jmp 0x14007ee50
cmp eax, 0xdd7c1983
jg 0x14007f6b4
cmp eax, 0xd752b61b
je 0x14007fa17
cmp eax, 0xda8319b5
jne 0x14007ee50
mov eax, dword [0x1400f3190]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x1400f3194], 0xa
setl cl
or cl, al
mov byte [rsp + 0x5d], cl
mov eax, 0x2401f505
jmp 0x14007ee50
cmp eax, 0x556383bd
jg 0x14007f6d4
cmp eax, 0x40c0f312
je 0x14007fa2e
cmp eax, 0x45636975
jne 0x14007ee50
mov eax, 0x7f04fa3c
jmp 0x14007ee50
cmp eax, 0xc90cc763
jg 0x14007f71a
cmp eax, 0xbcbc5ed9
je 0x14007fa60
cmp eax, 0xc2fb0c20
jne 0x14007ee50
cmp byte [rsp + 0x5e], 0
mov eax, 0x40b71ab7
jne 0x14007ee50
mov eax, 0x1cd11cf6
jmp 0x14007ee50
cmp eax, 0x2cd87b98
jg 0x14007f73a
cmp eax, 0x266e04bb
je 0x14007fa6a
cmp eax, 0x2a90e2f0
jne 0x14007ee50
mov eax, dword [0x1400f3190]
mov dword [rsp + 0x70], eax
mov eax, 0x70ac671a
jmp 0x14007ee50
cmp eax, 0x3f2c7f7
jg 0x14007f76f
cmp eax, 0x2c2b167
je 0x14007fa88
cmp eax, 0x36a9185
jne 0x14007ee50
cmp byte [rsp + 0x5c], 0
mov eax, 0x88112db
jne 0x14007ee50
mov eax, 0x8577238c
jmp 0x14007ee50
cmp eax, 0x7f04fa3b
jg 0x14007f7a1
cmp eax, 0x757baeda
je 0x14007fa92
cmp eax, 0x7ef7e62c
jne 0x14007ee50
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x1d0], rax
mov eax, 0xa2aa9b87
jmp 0x14007ee50
cmp eax, 0xa2aa9b86
jg 0x14007f7ce
cmp eax, 0x909b2830
je 0x14007faae
cmp eax, 0xa188d537
jne 0x14007ee50
mov rcx, rsi
call fcn.1400894b0
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rax]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xe8]
movabs rdx, 0xa71d968bc602a9aa
add rcx, rdx
movabs r8, 0x2270a54e20d15b7a
add rcx, r8
sub rcx, rdx
sub rcx, rax
movabs rax, 0xdd8f5ab1df2ea486
add rcx, rax
mov qword [rsp + 0x1a0], rcx
mov eax, 0x2e780a6d
jmp 0x14007ee50
cmp eax, 0x88112db
je 0x14007fab8
cmp eax, 0x99aeba4
je 0x14007fada
cmp eax, 0x10a5ce03
jne 0x14007ee50
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x1c0], rax
mov eax, 0x8cc3d631
jmp 0x14007ee50
cmp eax, 0xd5593b58
je 0x14007fae4
cmp eax, 0xd68b2a7b
jne 0x14007ee50
mov rax, qword [rsp + 0x108]
add rax, rax
mov qword [rsp + 0x110], rax
mov r14, qword [rsp + 0x110]
add r14, 2
mov eax, 0x266e04bb
cmp r14, 0x1000
jae 0x14007f4ab
mov eax, 0x1d4b9105
mov rbp, qword [rsp + 0xa8]
jmp 0x14007ee50
cmp eax, 0x3da23b8b
je 0x14007fb23
cmp eax, 0x40b71ab7
jne 0x14007ee50
mov eax, 0x12258545
jmp 0x14007ee50
cmp eax, 0xb6fd56ab
je 0x14007fb3c
cmp eax, 0xb8f22af0
jne 0x14007ee50
mov rcx, qword [rsp + 0x188]
mov r8, qword [rsp + 0x190]
mov rdx, rbx
call fcn.140087ca0
mov rax, qword [rsp + 0xd8]
add rax, rax
add rax, qword [rsp + 0xe0]
mov qword [rsp + 0x198], rax
mov eax, 0x7fe8a154
jmp 0x14007ee50
cmp eax, 0x2401f505
je 0x14007fb5c
cmp eax, 0x25195513
jne 0x14007ee50
mov rax, qword [rsp + 0x80]
mov rax, qword [rax]
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x108]
mov eax, 0x7346e5a1
cmp rcx, 8
jae 0x14007ee50
mov eax, 0x12258545
jmp 0x14007ee50
cmp eax, 0xfe09d163
je 0x14007fb76
cmp eax, 0x257a80b
jne 0x14007ee50
mov eax, 0xa188d537
jmp 0x14007ee50
cmp eax, 0x70ac671a
je 0x14007fbac
cmp eax, 0x7346e5a1
jne 0x14007ee50
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0xa8], rax
mov eax, 0x99aeba4
jmp 0x14007ee50
cmp eax, 0x8021dfab
je 0x14007fbd0
cmp eax, 0x8577238c
jne 0x14007ee50
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x98]
movabs rdx, 0x4c2ddaa690ac3e42
sub rcx, rdx
add rax, rdx
add rax, rcx
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0xf0]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xe8]
mov rax, rdi
cmp rcx, 8
jb 0x14007f62f
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0xf8], rax
mov eax, 0x573e0996
jmp 0x14007ee50
cmp eax, 0x1cd11cf6
je 0x14007fc21
cmp eax, 0x1d4b9105
jne 0x14007ee50
mov eax, dword [0x1400f3190]
mov edx, dword [0x1400f3194]
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp edx, 0xa
setl r8b
xor r8b, al
mov eax, 0xfe09d163
mov r8d, 0xfe09d163
jne 0x14007f691
mov r8d, 0x1cd11cf6
cmp edx, 0xa
cmovge eax, r8d
cmp ecx, 0xffffffff
mov qword [rsp + 0x120], rbp
mov qword [rsp + 0x128], r14
cmovne eax, r8d
jmp 0x14007ee50
cmp eax, 0xdd7c1984
je 0x14007fc40
cmp eax, 0xe0bf6c20
jne 0x14007ee50
mov eax, 0xc90cc764
jmp 0x14007ee50
cmp eax, 0x556383be
je 0x14007fc4a
cmp eax, 0x573e0996
jne 0x14007ee50
mov rcx, qword [rsp + 0x98]
add rcx, rcx
add rcx, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x88]
add r8, r8
mov rdx, rsi
call fcn.140087ca0
mov eax, 0xb6fd56ab
jmp 0x14007ee50
cmp eax, 0xc90cc764
je 0x14007fcc5
cmp eax, 0xcbfe1b0e
jne 0x14007ee50
mov eax, 0x25195513
jmp 0x14007ee50
cmp eax, 0x2cd87b99
je 0x14007fcfb
cmp eax, 0x2e2c6bd3
jne 0x14007ee50
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x20], rdx
mov rcx, rdi
mov r9, rbx
call fcn.14003eec0
mov eax, 0xe0bf6c20
jmp 0x14007ee50
cmp eax, 0x3f2c7f8
je 0x14007fd17
cmp eax, 0x7dc8c98
jne 0x14007ee50
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x1d8]
call rax
mov eax, 0xbcbc5ed9
jmp 0x14007ee50
cmp eax, 0x7f04fa3c
je 0x14007fd31
cmp eax, 0x7fe8a154
jne 0x14007ee50
mov rax, qword [rsp + 0x198]
mov word [rax], 0
mov eax, 0xa188d537
jmp 0x14007ee50
cmp eax, 0xa2aa9b87
jne 0x14007fd3b
mov r14, qword [rsp + 0x1c8]
mov eax, 0x1d4b9105
mov rbp, qword [rsp + 0x1d0]
jmp 0x14007ee50
mov rax, qword [rsp + 0x110]
add rax, 0x29
mov qword [rsp + 0x1c8], rax
mov eax, 0x7ef7e62c
jmp 0x14007ee50
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x1a0]
cmp rcx, rax
setb byte [rsp + 0x5c]
mov eax, 0x36a9185
jmp 0x14007ee50
mov rax, qword [0x1400f3460]
mov qword [rsp + 0x1b0], rax
mov eax, 0x757baeda
jmp 0x14007ee50
mov rax, qword [rsp + 0x1b8]
mov rax, qword [rax]
mov qword [rsp + 0xa0], rax
mov eax, 0xb252927b
jmp 0x14007ee50
mov eax, 0x3f2c7f8
jmp 0x14007ee50
movabs rax, 0x5f9645ecf7e392d9
mov qword [rsp + 0x150], rax
movabs rax, 0x9814913de7c3a4aa
mov qword [rsp + 0x158], rax
movabs rax, 0x43eaa1085d9139ed
mov qword [rsp + 0x160], rax
movabs rax, 0x9a44c66321f3c674
mov qword [rsp + 0x168], rax
movabs rax, 0xc0ab7da6c69de0ac
mov qword [rsp + 0x170], rax
movabs rax, 0xcb40891439526942
mov qword [rsp + 0x178], rax
movabs rax, 0x5fe54595f7b09285
mov qword [rsp + 0x200], rax
movabs rax, 0x98279150e7a6a4de
mov qword [rsp + 0x208], rax
movabs rax, 0x4387a16b5dcd39df
mov qword [rsp + 0x210], rax
movabs rax, 0x9a3cc60621ddc610
mov qword [rsp + 0x218], rax
movabs rax, 0xc0c87d89c6bde0c9
mov qword [rsp + 0x220], rax
movabs rax, 0xcb40891439526962
mov qword [rsp + 0x228], rax
lea rax, [rsp + 0x200]
movaps xmm0, xmmword [rax]
movaps xmm1, xmmword [rsp + 0x150]
movaps xmm2, xmm0
andnps xmm2, xmm1
andnps xmm1, xmm0
orps xmm1, xmm2
movaps xmmword [rsp + 0x150], xmm1
movaps xmm0, xmmword [rax + 0x10]
movaps xmm1, xmmword [rsp + 0x160]
movaps xmm2, xmm0
andnps xmm2, xmm1
andnps xmm1, xmm0
orps xmm1, xmm2
movaps xmmword [rsp + 0x160], xmm1
movaps xmm0, xmmword [rax + 0x20]
movaps xmm1, xmmword [rsp + 0x170]
movaps xmm2, xmm1
andnps xmm2, xmm0
andnps xmm0, xmm1
orps xmm0, xmm2
movaps xmmword [rsp + 0x170], xmm0
mov eax, 0xcdfbd1c0
jmp 0x14007ee50
mov ecx, dword [rsp + 0x70]
imul ecx, dword [rsp + 0xc8]
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov edx, dword [rsp + 0xc4]
cmp edx, 0xa
setl r8b
xor r8b, al
mov eax, 0x33c43f06
mov r8d, 0x33c43f06
jne 0x14007ee38
mov r8d, 0x665f3845
jmp 0x14007ee38
cmp dword [rsp + 0xc0], 0
setne byte [rsp + 0x5f]
mov eax, 0x2c2b167
jmp 0x14007ee50
mov eax, dword [rsp + 0x68]
dec eax
mov dword [rsp + 0xb4], eax
mov eax, 0x8021dfab
jmp 0x14007ee50
mov eax, dword [rsp + 0x74]
inc eax
imul eax, dword [rsp + 0x74]
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
sete al
mov ecx, dword [rsp + 0xcc]
cmp ecx, 0xa
setl cl
or cl, al
mov byte [rsp + 0x5e], cl
mov eax, 0xc2fb0c20
jmp 0x14007ee50
mov eax, 0x33c43f06
jmp 0x14007ee50
mov rax, qword [rsp + 0xa8]
mov rax, qword [rax - 8]
mov qword [rsp + 0x118], rax
mov eax, 0x10a5ce03
jmp 0x14007ee50
mov eax, 0xaceac0e2
jmp 0x14007ee50
mov rcx, qword [rsp + 0x100]
mov rax, qword [rsp + 0x1b0]
call rax
mov eax, 0xe9ab62a4
jmp 0x14007ee50
mov eax, 0x3da23b8b
jmp 0x14007ee50
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0x20], rdx
mov rcx, rdi
mov r9, rsi
call fcn.14003eec0
mov eax, 0x909b2830
jmp 0x14007ee50
mov eax, 0xd68b2a7b
jmp 0x14007ee50
mov ecx, dword [rsp + 0xbc]
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov edx, dword [rsp + 0xb8]
cmp edx, 0xa
setl r8b
xor r8b, al
mov eax, 0x257a80b
mov r8d, 0x257a80b
jne 0x14007ee38
mov r8d, 0x2e2c6bd3
jmp 0x14007ee38
mov rax, qword [0x1400f3598]
mov qword [rsp + 0x1a8], rax
mov eax, 0x1e383e9c
jmp 0x14007ee50
mov rax, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0xf8]
mov word [rcx + rax*2], 0
mov eax, 0x3da23b8b
jmp 0x14007ee50
cmp byte [rsp + 0x5d], 0
mov eax, 0x45636975
jne 0x14007ee50
mov eax, 0x665f3845
jmp 0x14007ee50
mov rcx, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x128]
call fcn.140086f90
mov eax, dword [0x1400f3190]
mov dword [rsp + 0x74], eax
mov eax, dword [0x1400f3194]
mov dword [rsp + 0xcc], eax
mov eax, 0x40c0f312
jmp 0x14007ee50
mov eax, dword [0x1400f3194]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x70]
dec eax
mov dword [rsp + 0xc8], eax
mov eax, 0x87e0a091
jmp 0x14007ee50
mov edx, dword [rsp + 0x68]
imul edx, dword [rsp + 0xb4]
mov r9d, edx
xor r9d, 0xfffffffe
mov r8d, dword [rsp + 0xb0]
mov eax, 0xc90cc764
mov ecx, 0xc90cc764
cmp r8d, 0xa
setl r8b
jl 0x14007fc04
mov ecx, 0x2e2c6bd3
test r9d, edx
sete dl
je 0x14007fc11
mov ecx, 0x2e2c6bd3
xor r8b, dl
jne 0x14007ee50
mov eax, ecx
jmp 0x14007ee50
mov rcx, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x128]
call fcn.140086f90
mov eax, 0xdd7c1984
jmp 0x14007ee50
mov eax, 0xfe09d163
jmp 0x14007ee50
mov rax, qword [rsp + 0x60]
add rax, qword [rsp + 0x90]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0xd8]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xd0]
mov rax, rdi
cmp rcx, 8
jb 0x14007fc88
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x90]
add rax, rax
add rax, qword [rsp + 0xe0]
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x60]
add rax, rax
mov qword [rsp + 0x190], rax
mov eax, 0xb8f22af0
jmp 0x14007ee50
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x20], rdx
mov rcx, rdi
mov r9, rbx
call fcn.14003eec0
mov eax, dword [0x1400f3190]
mov dword [rsp + 0x6c], eax
mov eax, dword [0x1400f3194]
mov dword [rsp + 0xb8], eax
mov eax, 0x2cd87b99
jmp 0x14007ee50
mov eax, dword [rsp + 0x6c]
dec eax
imul eax, dword [rsp + 0x6c]
mov dword [rsp + 0xbc], eax
mov eax, 0xd5593b58
jmp 0x14007ee50
lea rax, [rsp + 0x1e8]
mov qword [rsp + 0x1b8], rax
mov eax, 0x1d7feefe
jmp 0x14007ee50
mov eax, 0xcbfe1b0e
jmp 0x14007ee50
cmp eax, 0xaceac0e2
je 0x14007fd57
jmp 0x14007ee50
cmp eax, 0x8a900121
jne 0x14007ee50
call fcn.1400862d0
movzx eax, byte [rsp + 0x5f]
movaps xmm6, xmmword [rsp + 0x2a0]
add rsp, 0x2b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret