Function at 0x1400dd1c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rbx, r9
mov r15, r8
mov rdi, rdx
mov rsi, rcx
mov rbp, qword [rsp + 0x170]
mov eax, 0x2600
mov r13, r8
jmp 0x1400dd228
inc r13
cmp ecx, 0xd
ja 0x1400dd2d0
mov r14d, 0x110000
bt eax, ecx
jae 0x1400dd2d0
cmp r14d, 0x110000
jne 0x1400dd2e0
mov r14d, 0x110000
cmp r13, rbx
je 0x1400dd5aa
movzx ecx, byte [r13]
test cl, cl
jns 0x1400dd200
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [r13 + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400dd29a
movzx r8d, byte [r13 + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp cl, 0xf0
jb 0x1400dd2b1
movzx ecx, byte [r13 + 3]
and edx, 7
shl edx, 0x12
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
or ecx, edx
cmp ecx, 0x110000
je 0x1400dd5aa
add r13, 4
cmp ecx, 0xd
jbe 0x1400dd20c
jmp 0x1400dd2d0
add r13, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400dd20c
jmp 0x1400dd2d0
add r13, 3
shl edx, 0xc
or r8d, edx
mov ecx, r8d
cmp ecx, 0xd
jbe 0x1400dd20c
nop word [rax + rax]
mov r14d, ecx
cmp r14d, 0x110000
je 0x1400dd228
cmp r14d, 0x2f
je 0x1400dd2f0
cmp r14d, 0x5c
jne 0x1400dd5aa
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400dd308
cmp r14d, 0x5c
jne 0x1400dd308
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov eax, 0x2600
mov r12, r13
jmp 0x1400dd346
inc r12
cmp ecx, 0xd
ja 0x1400dd3f0
mov edx, 0x110000
bt eax, ecx
jae 0x1400dd3f0
cmp edx, 0x110000
jne 0x1400dd3fe
cmp r12, rbx
je 0x1400dd607
movzx ecx, byte [r12]
test cl, cl
jns 0x1400dd320
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [r12 + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400dd3b5
movzx r8d, byte [r12 + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp cl, 0xf0
jb 0x1400dd3cc
movzx ecx, byte [r12 + 3]
and edx, 7
shl edx, 0x12
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
or ecx, edx
cmp ecx, 0x110000
je 0x1400dd607
add r12, 4
cmp ecx, 0xd
jbe 0x1400dd32c
jmp 0x1400dd3f0
add r12, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400dd32c
jmp 0x1400dd3f0
add r12, 3
shl edx, 0xc
or r8d, edx
mov ecx, r8d
cmp ecx, 0xd
jbe 0x1400dd32c
nop word cs:[rax + rax]
mov edx, ecx
cmp edx, 0x110000
je 0x1400dd346
cmp edx, 0x2f
je 0x1400dd40c
cmp edx, 0x5c
jne 0x1400dd607
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400dd423
cmp edx, 0x5c
jne 0x1400dd423
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 6
jbe 0x1400de358
mov rax, qword [rdi + 8]
mov dword [rax + rdx + 3], 0x2f2f3a65
mov dword [rax + rdx], 0x656c6966
add rdx, 7
mov qword [rdi + 0x10], rdx
mov rax, rbx
sub rax, r12
je 0x1400dd77a
xor r15d, r15d
mov ecx, 0x2600
movabs rdx, 0x8000800800000000
xor r8d, r8d
xor r14d, r14d
mov r9, r12
jmp 0x1400dd4b2
inc r9
mov r10d, r11d
mov r11d, 1
cmp r10d, 0x3f
ja 0x1400dd53d
mov r13d, r10d
bt rcx, r13
jae 0x1400dd533
mov r15b, 1
add r14, r11
cmp r9, rbx
je 0x1400dd67c
movzx r11d, byte [r9]
test r11b, r11b
jns 0x1400dd480
mov r10d, r11d
and r10d, 0x1f
movzx r13d, byte [r9 + 1]
and r13d, 0x3f
cmp r11b, 0xdf
jbe 0x1400dd516
movzx ebp, byte [r9 + 2]
shl r13d, 6
and ebp, 0x3f
or ebp, r13d
cmp r11b, 0xf0
jb 0x1400dd58d
movzx r11d, byte [r9 + 3]
add r9, 4
and r10d, 7
shl r10d, 0x12
shl ebp, 6
and r11d, 0x3f
or r11d, ebp
or r10d, r11d
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400dd496
jmp 0x1400dd53d
add r9, 2
shl r10d, 6
or r10d, r13d
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400dd496
jmp 0x1400dd53d
bt rdx, r13
jb 0x1400dd67c
cmp r10d, 0x110000
je 0x1400dd67c
cmp r10d, 0x5c
je 0x1400dd67c
inc r8
cmp r10d, 0x80
jb 0x1400dd4a6
mov r11d, 2
cmp r10d, 0x800
jb 0x1400dd4a6
cmp r10d, 0x10000
mov r11d, 4
sbb r11, 0
jmp 0x1400dd4a6
add r9, 3
shl r10d, 0xc
or r10d, ebp
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400dd496
jmp 0x1400dd53d
test rbp, rbp
je 0x1400dd83a
cmp r14d, 0x23
je 0x1400dd7ca
cmp r14d, 0x3f
je 0x1400dd78f
cmp r14d, 0x110000
jne 0x1400dd827
cmp dword [rbp + 0x20], 0
je 0x1400ddc8a
mov ebx, dword [rbp + 0x24]
mov rdx, qword [rbp + 8]
test rbx, rbx
je 0x1400de1bd
cmp qword [rbp + 0x10], rbx
jbe 0x1400de27a
cmp byte [rdx + rbx], 0xbf
jg 0x1400de280
jmp 0x1400de65b
mov rax, qword [rdi]
mov r12, qword [rdi + 0x10]
sub rax, r12
cmp rax, 6
mov qword [rsp + 0x68], r15
jbe 0x1400de327
mov rax, qword [rdi + 8]
mov dword [rax + r12 + 3], 0x2f2f3a65
mov dword [rax + r12], 0x656c6966
add r12, 7
mov qword [rdi + 0x10], r12
mov rcx, r13
mov rdx, rbx
call fcn.1400e0580
xor r15d, r15d
test rbp, rbp
je 0x1400ddc47
test al, al
jne 0x1400ddc47
cmp dword [rbp + 0x18], 0
je 0x1400dd944
lea rax, [rbp + 0x1c]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x3c]
cmp edx, ecx
jbe 0x1400dd95f
jmp 0x1400de65b
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xc0], rbx
test r15b, 1
sete bpl
jne 0x1400dd8fd
mov rcx, r12
test r8, r8
je 0x1400dd9a2
mov edx, 0x2600
mov rcx, r12
jmp 0x1400dd6cc
add rcx, 2
shl r10d, 6
or r10d, r13d
mov r9d, r10d
nop
cmp r9d, 0xd
ja 0x1400dd6e7
bt edx, r9d
jae 0x1400dd6e7
cmp rcx, rbx
je 0x1400dd99f
movzx r9d, byte [rcx]
test r9b, r9b
js 0x1400dd700
inc rcx
cmp r9d, 0xd
jbe 0x1400dd6c6
cmp r9d, 0x110000
je 0x1400dd6cc
dec r8
jne 0x1400dd6cc
jmp 0x1400dd9a2
mov r10d, r9d
and r10d, 0x1f
movzx r13d, byte [rcx + 1]
and r13d, 0x3f
cmp r9b, 0xdf
jbe 0x1400dd6b0
movzx r11d, byte [rcx + 2]
shl r13d, 6
and r11d, 0x3f
or r11d, r13d
cmp r9b, 0xf0
jb 0x1400dd75d
movzx r9d, byte [rcx + 3]
add rcx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
cmp r9d, 0x110000
jne 0x1400dd6c0
jmp 0x1400dd9a2
add rcx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xd
jbe 0x1400dd6c6
jmp 0x1400dd6e7
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], rbx
jmp 0x1400dd9cb
cmp dword [rbp + 0x18], 0
je 0x1400ddc60
lea rax, [rbp + 0x1c]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
je 0x1400ddc7e
mov rax, qword [rbp + 0x10]
cmp rax, r12
jbe 0x1400de085
cmp byte [rdx + r12], 0xbf
jg 0x1400de399
jmp 0x1400de65b
mov rax, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rax
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov r8, rbp
mov r9, r15
call fcn.1400df3f0
jmp 0x1400de41b
mov rcx, r15
mov rdx, rbx
call fcn.1400e0580
test al, al
je 0x1400dd97c
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 7
jbe 0x1400de341
mov rax, qword [rdi + 8]
movabs rcx, 0x2f2f2f3a656c6966
mov qword [rax + rdx], rcx
add rdx, 8
mov qword [rdi + 0x10], rdx
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x70]
mov r9d, 7
mov rcx, rdi
xor edx, edx
call fcn.1400db760
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dfc50
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400de3ee
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movdqa xmm0, xmmword [0x1401bc590]
movdqu xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], 7
mov byte [rsi + 0x40], 0
jmp 0x1400de41b
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0xb8]
call fcn.1400e2a20
mov rcx, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov r14, qword [rsp + 0x80]
jmp 0x1400ddca3
cmp dword [rbp + 0x20], 0
je 0x1400de24e
lea rax, [rbp + 0x24]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x3c]
cmp edx, ecx
ja 0x1400de65b
mov rax, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
test rdx, rdx
je 0x1400dd9e5
cmp r8, rdx
jbe 0x1400dd9df
cmp byte [rax + rdx], 0xbf
jg 0x1400dd9e5
jmp 0x1400de65b
cmp dword [rbp + 0x18], 0
je 0x1400de2ec
lea rax, [rbp + 0x1c]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
jne 0x1400de30a
jmp 0x1400de48b
mov rcx, rbx
mov qword [rsp + 0xb8], rcx
test r14, r14
je 0x1400dd9cb
cmp r14, rax
jae 0x1400ddc97
cmp byte [r12 + r14], 0xbf
jle 0x1400de65b
mov r13, r12
jmp 0x1400ddca3
mov r15d, 1
mov bpl, 1
xor r14d, r14d
mov r13, r12
jmp 0x1400ddd27
jne 0x1400de65b
test rcx, rcx
je 0x1400dda00
cmp r8, rcx
jbe 0x1400dd9fa
cmp byte [rax + rcx], 0xbf
jg 0x1400dda00
jmp 0x1400de65b
jne 0x1400de65b
lea rbp, [rax + rdx]
sub rcx, rdx
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xd0], rax
test rcx, rcx
je 0x1400de65b
cmp byte [rbp], 0x2f
jne 0x1400de65b
inc rbp
dec rcx
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], rcx
movabs rdx, 0x2f0000002f
mov qword [rsp + 0xa0], rdx
mov byte [rsp + 0xa8], 1
mov word [rsp + 0xb0], 1
mov al, 0x2f
xor edx, edx
movdqa xmm0, xmmword [0x1401bc570]
movdqa xmm1, xmmword [0x1401bc580]
movabs r9, 0x8080808080808080
mov r11, rcx
sub r11, rdx
lea r10, [rdx + rbp]
cmp r11, 0x10
jae 0x1400ddad8
cmp rcx, rdx
je 0x1400ddba4
xor r8d, r8d
cmp byte [r10 + r8], 0x2f
je 0x1400ddb84
inc r8
cmp r11, r8
jne 0x1400ddac0
jmp 0x1400ddba4
lea r15, [r10 + 7]
and r15, 0xfffffffffffffff8
sub r15, r10
jne 0x1400ddaee
lea r8, [r11 - 0x10]
xor r15d, r15d
jmp 0x1400ddb25
cmp r15, r11
cmovae r15, r11
xor r8d, r8d
nop dword [rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400ddb84
inc r8
cmp r15, r8
jne 0x1400ddb00
lea r8, [r11 - 0x10]
nop word cs:[rax + rax]
cmp r15, r8
ja 0x1400ddb54
movdqu xmm2, xmmword [r10 + r15]
movdqa xmm3, xmm2
pxor xmm3, xmm0
paddq xmm3, xmm1
pandn xmm2, xmm3
pshufd xmm3, xmm2, 0xee
por xmm3, xmm2
movq rax, xmm3
test rax, r9
jne 0x1400ddb54
add r15, 0x10
jmp 0x1400ddb20
cmp r15, r11
je 0x1400ddba4
add r10, r15
mov r11, rcx
sub r11, r15
sub r11, rdx
xor r8d, r8d
mov al, 0x2f
nop word [rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400ddb81
inc r8
cmp r11, r8
jne 0x1400ddb70
jmp 0x1400ddba4
add r8, r15
add r8, rdx
mov rdx, r8
inc rdx
je 0x1400ddb9b
cmp rdx, rcx
ja 0x1400ddb9b
cmp byte [rbp + r8], al
je 0x1400ddba7
cmp rdx, rcx
jbe 0x1400ddaa4
mov r8, rcx
cmp r8, 2
jne 0x1400ddbf3
movzx eax, byte [rbp]
and al, 0xdf
add al, 0xbf
cmp al, 0x19
ja 0x1400ddbf3
cmp byte [rbp + 1], 0x3a
jne 0x1400ddbf3
cmp r12, qword [rdi]
jne 0x1400ddbd3
mov rcx, rdi
mov rdx, r12
call fcn.140086540
mov r12, qword [rdi + 0x10]
mov rax, qword [rdi + 8]
mov byte [rax + r12], 0x2f
inc qword [rdi + 0x10]
mov r8d, 2
mov rcx, rdi
mov rdx, rbp
call fcn.1400e2f30
jmp 0x1400ddc44
mov rax, qword [rsp + 0x170]
movzx r15d, byte [rax + 0x40]
test r15b, r15b
je 0x1400ddc44
mov ecx, dword [rax + 0x34]
mov ebp, dword [rax + 0x38]
cmp ecx, ebp
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xd8]
ja 0x1400de65b
test rcx, rcx
je 0x1400de099
cmp rax, rcx
jbe 0x1400de093
cmp byte [rdx + rcx], 0xbf
jg 0x1400de099
jmp 0x1400de65b
xor r15d, r15d
mov r12d, 7
add r14d, 0xffffffdd
cmp r14d, 0x39
jbe 0x1400de0ff
jmp 0x1400de114
cmp dword [rbp + 0x20], 0
je 0x1400de391
lea rax, [rbp + 0x24]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
jne 0x1400dd7ad
mov r13, qword [rdi + 0x10]
xor r12d, r12d
jmp 0x1400de3ac
mov rdx, qword [rbp + 8]
mov rbx, qword [rbp + 0x10]
jmp 0x1400de280
jne 0x1400de65b
mov r13, r12
mov r14, rax
test r14, r14
je 0x1400ddcf3
cmp r14, 2
jne 0x1400ddcfe
movzx eax, byte [r13]
and al, 0xdf
add al, 0xbf
cmp al, 0x19
ja 0x1400de04f
movzx eax, byte [r13 + 1]
cmp eax, 0x3a
je 0x1400ddcd2
cmp eax, 0x7c
jne 0x1400de04f
xor r14d, r14d
mov bpl, 1
test r15b, 1
je 0x1400dddc5
test rcx, rcx
je 0x1400dddc5
mov r15d, 1
jmp 0x1400ddd52
mov rbx, rcx
mov r15d, 1
jmp 0x1400ddd27
test r14, r14
js 0x1400de65b
mov rbx, rcx
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, r14
call fcn.14008b700
mov r15, rax
test rax, rax
je 0x1400de65b
mov rcx, r15
mov rdx, r13
mov r8, r14
call sub.msvcrt.dll_memcpy
mov rax, rbx
mov r12, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
test bpl, bpl
jne 0x1400ddd63
test rax, rax
je 0x1400ddd63
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
test r14, r14
je 0x1400dddbf
lea rcx, [rsp + 0x70]
mov rdx, r15
mov r8, r14
call fcn.1400e1640
mov rax, qword [rsp + 0x70]
movabs r13, 0x8000000000000000
lea r14, [r13 + 2]
cmp rax, r14
jne 0x1400dde4a
movzx ebx, byte [rsp + 0x78]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov byte [rsi + 8], bl
mov qword [rsi], r13
cmp qword [rdi], 0
jne 0x1400de409
jmp 0x1400de41b
mov bpl, 1
xor r14d, r14d
mov qword [rsp + 0x68], rax
mov r15, qword [rdi + 0x10]
mov rax, r15
shr rax, 0x20
jne 0x1400de22e
test r14b, r14b
setne byte [rsp + 0xb8]
test bpl, bpl
je 0x1400ddf6d
mov rax, r15
cmp r15, qword [rdi]
jne 0x1400dde06
mov rcx, rdi
mov rdx, r15
call fcn.140086540
mov rax, qword [rdi + 0x10]
mov rcx, qword [rdi + 8]
mov byte [rcx + rax], 0x2f
inc qword [rdi + 0x10]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0xb8]
mov rcx, rdi
xor edx, edx
mov r9, r15
call fcn.1400db760
mov rbx, rax
mov r12, rdx
cmp byte [rsp + 0xb8], 0
jne 0x1400ddfbb
jmp 0x1400ddf97
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
lea rdx, [r13 + 1]
cmp rax, rdx
jle 0x1400dde85
cmp rcx, 9
jne 0x1400dde85
movabs rdx, 0x736f686c61636f6c
xor rdx, qword [r8]
movzx r9d, byte [r8 + 8]
xor r9, 0x74
or r9, rdx
je 0x1400de36f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], r8
mov qword [rsp + 0xc8], rcx
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xe0], rax
lea rax, [0x1400e0df0]
mov qword [rsp + 0xe8], rax
lea rax, [0x140215b38]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rdx, [0x1402158e8]
lea r8, [rsp + 0x70]
mov rcx, rdi
call fcn.14000c7a0
test al, al
jne 0x1400de65b
mov rax, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xc8]
xor ecx, ecx
cmp rax, r14
movabs rdx, 0x8000000000000000
lea rdx, [rdx + rax + 1]
cmovl rcx, rdx
test rcx, rcx
mov qword [rsp + 0xd0], r8
je 0x1400de1c8
cmp rcx, 1
jne 0x1400de1d6
mov r14b, 2
mov qword [rsp + 0x68], rcx
jmp 0x1400de1e5
mov qword [rsp + 0x20], rbx
lea r8, [rsp + 0xb8]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400e08c0
mov rbx, rax
mov r12, rdx
cmp byte [rsp + 0xb8], 0
jne 0x1400ddfbb
lea r14, [rsp + 0x70]
mov rcx, r14
mov rdx, rdi
mov r8, r15
call fcn.1400e29d0
mov rcx, r14
call fcn.14000b590
mov r15d, 7
xor r14d, r14d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dfc50
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400de3ee
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], r15d
mov dword [rsi + 0x3c], r15d
mov byte [rsi + 0x40], r14b
mov dword [rsi + 0x41], r13d
mov rax, qword [rsp + 0x68]
mov dword [rsi + 0x45], eax
mov rax, qword [rsp + 0xd0]
mov qword [rsi + 0x49], rax
jmp 0x1400de41b
mov rbx, rcx
movzx eax, byte [0x140259141]
mov r14d, 2
mov edx, 2
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400de65b
mov r15, rax
movzx eax, word [r13]
mov word [r15], ax
jmp 0x1400ddd35
mov r12, rax
je 0x1400de399
jmp 0x1400de65b
jne 0x1400de65b
test rbp, rbp
je 0x1400de0b4
cmp rax, rbp
jbe 0x1400de0ae
cmp byte [rdx + rbp], 0xbf
jg 0x1400de0b4
jmp 0x1400de65b
jne 0x1400de65b
add rdx, rcx
sub rbp, rcx
mov rax, qword [rdi]
sub rax, r12
cmp rax, rbp
jb 0x1400de5e4
mov rcx, qword [rdi + 8]
add rcx, r12
mov r8, rbp
call sub.msvcrt.dll_memcpy
add r12, rbp
mov qword [rdi + 0x10], r12
mov rax, qword [rsp + 0x170]
movdqu xmm0, xmmword [rax + 0x41]
movdqa xmmword [rsp + 0xf0], xmm0
add r14d, 0xffffffdd
cmp r14d, 0x39
ja 0x1400de114
movabs rax, 0x200000010001001
bt rax, r14
jae 0x1400de114
mov r13, qword [rsp + 0x68]
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400db760
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dfc50
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400de3ee
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], r12d
mov dword [rsi + 0x3c], r12d
mov byte [rsi + 0x40], r15b
movdqa xmm0, xmmword [rsp + 0xf0]
movdqu xmmword [rsi + 0x41], xmm0
jmp 0x1400de41b
mov r15, qword [rdi + 0x10]
xor ebx, ebx
jmp 0x1400de293
test r8, r8
setne r14b
mov qword [rsp + 0x68], rcx
jmp 0x1400de1e5
mov rcx, r13
shr rcx, 0x20
mov qword [rsp + 0x68], rcx
mov r14b, 3
movabs rcx, 0x8000000000000002
cmp rax, rcx
jl 0x1400de20a
test rax, rax
je 0x1400de20a
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
xor ebp, ebp
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov r15, qword [rdi + 0x10]
mov rax, r15
shr rax, 0x20
je 0x1400ddddb
mov byte [rsi + 8], 9
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rdi], 0
jne 0x1400de409
jmp 0x1400de41b
mov edx, dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
test rdx, rdx
je 0x1400de5cb
cmp r8, rdx
jbe 0x1400de5c5
cmp byte [rax + rdx], 0xbf
jg 0x1400de5cb
jmp 0x1400de65b
jne 0x1400de65b
mov rax, qword [rdi]
mov r15, qword [rdi + 0x10]
sub rax, r15
cmp rax, rbx
jb 0x1400de604
mov rcx, qword [rdi + 8]
add rcx, r15
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r15, rbx
mov qword [rdi + 0x10], r15
mov eax, dword [rbp + 0x3c]
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov rcx, qword [rbp + 0x18]
mov qword [rsi + 0x18], rcx
mov dword [rsi + 0x20], 0
mov ecx, dword [rbp + 0x28]
mov dword [rsi + 0x28], ecx
movups xmm0, xmmword [rbp + 0x2c]
movups xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], eax
movzx eax, byte [rbp + 0x50]
mov byte [rsi + 0x50], al
movdqu xmm0, xmmword [rbp + 0x40]
movdqu xmmword [rsi + 0x40], xmm0
jmp 0x1400de41b
cmp dword [rbp + 0x20], 0
je 0x1400de483
lea rax, [rbp + 0x24]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
je 0x1400de48b
mov rax, qword [rbp + 0x10]
cmp rax, r12
jbe 0x1400de479
cmp byte [rdx + r12], 0xbf
jg 0x1400de48b
jmp 0x1400de65b
mov r8d, 7
mov rcx, rdi
mov rdx, r12
call fcn.1400e2de0
mov r12, qword [rdi + 0x10]
jmp 0x1400dd620
mov r8d, 8
mov rcx, rdi
call fcn.1400e2de0
mov rdx, qword [rdi + 0x10]
jmp 0x1400dd84e
mov r8d, 7
mov rcx, rdi
call fcn.1400e2de0
mov rdx, qword [rdi + 0x10]
jmp 0x1400dd437
mov bpl, 1
test rax, rax
je 0x1400de5d7
mov rcx, qword [0x1402590e0]
xor r14d, r14d
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400de5da
mov rdx, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov rax, qword [rdi]
mov r13, qword [rdi + 0x10]
sub rax, r13
cmp rax, r12
jb 0x1400de621
mov rcx, qword [rdi + 8]
add rcx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
add r13, r12
mov qword [rdi + 0x10], r13
mov r14, rbp
mov ebp, dword [rbp + 0x2c]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, ebp
call fcn.1400dfc50
mov eax, dword [rsp + 0x70]
cmp eax, 2
jne 0x1400de430
movzx eax, byte [rsp + 0x74]
mov byte [rsi + 8], al
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rdi], 0
je 0x1400de41b
mov r8, qword [rdi + 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov eax, dword [r14 + 0x28]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x2c], ebp
movups xmm0, xmmword [r14 + 0x30]
movups xmmword [rsi + 0x30], xmm0
movdqu xmm0, xmmword [r14 + 0x40]
movdqu xmmword [rsi + 0x40], xmm0
movzx eax, byte [r14 + 0x50]
mov byte [rsi + 0x50], al
jmp 0x1400de41b
mov r12, rax
je 0x1400de48b
jmp 0x1400de65b
mov rdx, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov rax, qword [rdi]
mov r13, qword [rdi + 0x10]
sub rax, r13
cmp rax, r12
jb 0x1400de63e
mov rcx, qword [rdi + 8]
add rcx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
add r13, r12
mov qword [rdi + 0x10], r13
mov r12d, dword [rbp + 0x3c]
mov rcx, r13
sub rcx, r12
je 0x1400de508
mov rax, qword [rdi + 8]
test r12, r12
je 0x1400de4dd
cmp r13, r12
jbe 0x1400de65b
cmp byte [rax + r12], 0xbf
jle 0x1400de65b
cmp rcx, 2
jne 0x1400de4fb
movzx ecx, byte [rax + r12]
and cl, 0xdf
add cl, 0xbf
cmp cl, 0x19
ja 0x1400de4fb
cmp byte [rax + r12 + 1], 0x3a
je 0x1400de508
mov rcx, rdi
xor edx, edx
mov r8, r12
call fcn.1400e03a0
mov byte [rsp + 0x70], 1
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400db760
mov rcx, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rcx
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov r9d, dword [rbp + 0x2c]
mov ecx, dword [rbp + 0x30]
mov r8d, dword [rbp + 0x34]
mov r10d, dword [rbp + 0x38]
lea r11, [rbp + 0x40]
movzx edi, word [rbp + 0x28]
movzx ebx, word [rbp + 0x2a]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], r12d
mov word [rsp + 0x48], bx
mov word [rsp + 0x40], di
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], ecx
lea rdx, [rsp + 0x70]
mov rcx, rsi
xor r8d, r8d
call fcn.1400dc520
jmp 0x1400de41b
jne 0x1400de65b
lea rbp, [rax + rdx]
mov rcx, r8
jmp 0x1400dda04
xor r14d, r14d
mov qword [rsp + 0x68], rax
jmp 0x1400de20c
mov rcx, rdi
mov rax, rdx
mov rdx, r12
mov r8, rbp
mov r12, rax
call fcn.1400e2de0
mov rdx, r12
mov r12, qword [rdi + 0x10]
jmp 0x1400de0c9
mov rcx, rdi
mov r14, rdx
mov rdx, r15
mov r8, rbx
call fcn.1400e2de0
mov rdx, r14
mov r15, qword [rdi + 0x10]
jmp 0x1400de293
mov rcx, rdi
mov r14, rdx
mov rdx, r13
mov r8, r12
call fcn.1400e2de0
mov rdx, r14
mov r13, qword [rdi + 0x10]
jmp 0x1400de3ac
mov rcx, rdi
mov r14, rdx
mov rdx, r13
mov r8, r12
call fcn.1400e2de0
mov rdx, r14
mov r13, qword [rdi + 0x10]
jmp 0x1400de49e
ud2