Function at 0x7ff7c00d4ca0
Capabilities:
Access peb ldr_data
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r13, qword [rcx + 0x18]
add r13, 0x10
mov r12, qword [r13]
cmp r12, r13
je 0x7ff7c00d4f0f
nop dword [rax + rax]
movzx esi, word [r12 + 0x58]
mov rdi, qword [r12 + 0x60]
cmp rsi, qword [0x7ff7c01d0710]
jne 0x7ff7c00d4e6d
cmp byte [0x7ff7c01d65de], 1
mov ecx, esi
mov r14, qword [0x7ff7c01d0718]
jb 0x7ff7c00d4d51
shr rcx, 4
test rcx, rcx
je 0x7ff7c00d4d39
movdqu xmm0, xmmword [r14]
movdqu xmm1, xmmword [rdi]
pcmpeqd xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne 0x7ff7c00d4d42
add rdi, 0x10
add r14, 0x10
sub rcx, 1
jne 0x7ff7c00d4d13
shr rsi, 1
and esi, 7
jmp 0x7ff7c00d4d80
and esi, 0xf
shl rcx, 4
add rsi, rcx
shr rsi, 1
jmp 0x7ff7c00d4d80
shr rcx, 3
test rcx, rcx
je 0x7ff7c00d4d7a
nop word [rax + rax]
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x7ff7c00d4e5e
add rdi, 8
add r14, 8
sub rcx, 1
jne 0x7ff7c00d4d60
shr rsi, 1
and esi, 3
test rsi, rsi
je 0x7ff7c00d4dc6
sub r14, rdi
nop dword [rax + rax]
movzx ecx, word [rdi]
movzx r15d, word [r14 + rdi]
cmp cx, r15w
je 0x7ff7c00d4dbc
nop
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
movzx ecx, r15w
movzx ebx, ax
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
cmp bx, ax
jne 0x7ff7c00d4e6d
add rdi, 2
sub rsi, 1
jne 0x7ff7c00d4d90
test r12, r12
je 0x7ff7c00d4f0f
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r13, qword [rcx + 0x18]
add r13, 0x10
mov r12, qword [r13]
cmp r12, r13
je 0x7ff7c00d4f0f
movzx esi, word [r12 + 0x58]
mov rbx, qword [r12 + 0x60]
cmp rsi, qword [0x7ff7c01d0720]
jne 0x7ff7c00d5017
cmp byte [0x7ff7c01d65de], 1
mov ecx, esi
mov r14, qword [0x7ff7c01d0728]
jb 0x7ff7c00d4e8e
shr rcx, 4
test rcx, rcx
je 0x7ff7c00d4e56
nop word [rax + rax]
movdqu xmm1, xmmword [r14]
movdqu xmm0, xmmword [rbx]
pcmpeqd xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne 0x7ff7c00d4e7f
add rbx, 0x10
add r14, 0x10
sub rcx, 1
jne 0x7ff7c00d4e30
shr rsi, 1
and esi, 7
jmp 0x7ff7c00d4ec0
and esi, 7
lea rsi, [rsi + rcx*8]
shr rsi, 1
jmp 0x7ff7c00d4d80
mov r12, qword [r12]
cmp r12, r13
jne 0x7ff7c00d4ce0
jmp 0x7ff7c00d4f0f
and esi, 0xf
shl rcx, 4
add rsi, rcx
shr rsi, 1
jmp 0x7ff7c00d4ec0
shr rcx, 3
test rcx, rcx
je 0x7ff7c00d4eba
nop word [rax + rax]
mov rax, qword [r14]
cmp qword [rbx], rax
jne 0x7ff7c00d5008
add rbx, 8
add r14, 8
sub rcx, 1
jne 0x7ff7c00d4ea0
shr rsi, 1
and esi, 3
test rsi, rsi
je 0x7ff7c00d4f06
sub r14, rbx
nop dword [rax + rax]
movzx ecx, word [rbx]
movzx r15d, word [rbx + r14]
cmp cx, r15w
je 0x7ff7c00d4efc
nop
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
movzx ecx, r15w
movzx edi, ax
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
cmp di, ax
jne 0x7ff7c00d5017
add rbx, 2
sub rsi, 1
jne 0x7ff7c00d4ed0
test r12, r12
jne 0x7ff7c00d5b90
mov rcx, qword [0x7ff7c01d06d0]
xor r13d, r13d
mov word [rbp - 0x69], cx
mov edi, r13d
mov r12d, r13d
lea eax, [rcx + 2]
mov word [rbp - 0x67], ax
lea r14d, [r13 - 1]
mov rax, qword [0x7ff7c01d06d8]
mov qword [rbp - 0x61], rax
cmp rcx, 0xfffe
ja 0x7ff7c00d5077
lea rax, [rbp + 0x77]
xor r8d, r8d
lea r9, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x69]
lea rcx, [r13 - 3]
call fcn.7ff7c00e0390
test eax, eax
js 0x7ff7c00d5077
lea r8, ds:[rbp - 0x49]
mov edx, 0x20019
lea rcx, [rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtOpenKey]
mov rcx, qword [rbp + 0x77]
mov ebx, eax
test rcx, rcx
je 0x7ff7c00d4f97
call qword [sym.imp.ntdll.dll_NtClose]
test ebx, ebx
js 0x7ff7c00d5077
mov rcx, qword [rbp + 0x6f]
lea rdx, [0x7ff7c0188b48]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rbx, rax
mov rdi, rax
test rax, rax
je 0x7ff7c00d4fbf
cmp qword [rax], r12
jne 0x7ff7c00d4ff2
mov rcx, qword [rbp + 0x6f]
lea rdx, [0x7ff7c0188b60]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rdi, rax
test rbx, rbx
je 0x7ff7c00d4fed
lea rcx, [rbx - 0x10]
mov edx, r14d
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x7ff7c00d4fed
call fcn.7ff7c00c6290
test rdi, rdi
je 0x7ff7c00d502e
cmp qword [rdi], r12
je 0x7ff7c00d502e
mov rcx, qword ds:[rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtClose]
jmp 0x7ff7c00d506e
and esi, 7
lea rsi, [rsi + rcx*8]
shr rsi, 1
jmp 0x7ff7c00d4ec0
mov r12, qword ds:[r12]
cmp r12, r13
jne 0x7ff7c00d4df1
jmp 0x7ff7c00d4f0f
mov rcx, qword [rbp + 0x6f]
lea rdx, [0x7ff7c0188b78]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rcx, rdi
mov rdi, rax
test rcx, rcx
je 0x7ff7c00d505f
add rcx, 0xfffffffffffffff0
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x7ff7c00d505f
call fcn.7ff7c00c6290
mov rcx, qword [rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtClose]
test rdi, rdi
je 0x7ff7c00d5077
cmp qword [rdi], r12
jne 0x7ff7c00d51bd
mov rcx, qword [0x7ff7c01d0700]
mov rsi, rdi
mov word [rbp - 0x59], cx
lea eax, [rcx + 2]
mov word [rbp - 0x57], ax
mov rax, qword [0x7ff7c01d0708]
mov qword [rbp - 0x51], rax
cmp rcx, 0xfffe
ja 0x7ff7c00d51b4
xor r8d, r8d
lea rax, [rbp + 0x7f]
lea r9, [rbp - 0x19]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x59]
lea rcx, [r8 - 3]
call fcn.7ff7c00e0390
test eax, eax
js 0x7ff7c00d51b4
lea r8, ds:[rbp - 0x19]
mov edx, 0x20019
lea rcx, [rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtOpenKey]
mov rcx, qword [rbp + 0x7f]
mov ebx, eax
test rcx, rcx
je 0x7ff7c00d50f7
call qword [sym.imp.ntdll.dll_NtClose]
test ebx, ebx
js 0x7ff7c00d51b4
mov rcx, qword [rbp + 0x6f]
lea rdx, [0x7ff7c0188b48]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rbx, rax
mov rdi, rax
test rsi, rsi
je 0x7ff7c00d5132
lea rcx, [rsi - 0x10]
mov r8d, r14d
lock xadd dword [rcx + 8], r8d
cmp r8d, 1
jne 0x7ff7c00d5132
call fcn.7ff7c00c6290
test rbx, rbx
je 0x7ff7c00d513c
cmp qword [rbx], r12
jne 0x7ff7c00d516f
mov rcx, qword [rbp + 0x6f]
lea rdx, [0x7ff7c0188b60]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rdi, rax
test rbx, rbx
je 0x7ff7c00d516a
lea rcx, [rbx - 0x10]
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x7ff7c00d516a
call fcn.7ff7c00c6290
test rdi, rdi
je 0x7ff7c00d5174
cmp qword [rdi], r12
jne 0x7ff7c00d51aa
mov rcx, qword ds:[rbp + 0x6f]
lea rdx, [0x7ff7c0188b78]
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rcx, rdi
mov rdi, rax
test rcx, rcx
je 0x7ff7c00d51aa
add rcx, 0xfffffffffffffff0
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x7ff7c00d51aa
call fcn.7ff7c00c6290
mov rcx, qword [rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtClose]
test rdi, rdi
je 0x7ff7c00d535f
mov rbx, qword [rdi]
mov rdx, qword [0x7ff7c01d3b58]
add rbx, 0x1e
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov r15, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rbx + rcx], r13w
mov r8, qword [rdi]
mov rdx, qword [rdi + 8]
mov rcx, qword [rax + 8]
call fcn.7ff7c0125120
mov rcx, qword [rdi]
mov rdx, qword [r15 + 8]
movups xmm0, xmmword [0x7ff7c0188b90]
movups xmmword [rdx + rcx], xmm0
movsd xmm1, qword [0x7ff7c0188ba0]
movsd qword [rdx + rcx + 0x10], xmm1
mov eax, dword [0x7ff7c0188ba8]
mov dword [rdx + rcx + 0x18], eax
movzx eax, word [0x7ff7c0188bac]
mov word [rdx + rcx + 0x1c], ax
lea rcx, [rdi - 0x10]
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x7ff7c00d5245
nop
call fcn.7ff7c00c6290
mov rbx, qword [0x7ff7c01d0710]
add rbx, qword [r15]
mov rdx, qword [0x7ff7c01d3b58]
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rdi, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rbx + rcx], r13w
mov r8, qword [r15]
mov rdx, qword [r15 + 8]
mov rcx, qword [rax + 8]
call fcn.7ff7c0125120
mov rcx, qword [r15]
add rcx, qword [rdi + 8]
mov r8, qword [0x7ff7c01d0710]
mov rdx, qword [0x7ff7c01d0718]
call fcn.7ff7c0125120
mov rcx, qword [rdi + 8]
call qword [sym.imp.kernel32.dll_LoadLibraryW]
lea rcx, [rdi - 0x10]
mov edx, r14d
mov rsi, rax
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x7ff7c00d52c5
nop dword [rax]
call fcn.7ff7c00c6290
mov rbx, qword [0x7ff7c01d0720]
add rbx, qword [r15]
mov rdx, qword [0x7ff7c01d3b58]
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rdi, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rbx + rcx], r13w
mov r8, qword [r15]
mov rdx, qword [r15 + 8]
mov rcx, qword [rax + 8]
call fcn.7ff7c0125120
mov rcx, qword [r15]
add rcx, qword [rdi + 8]
mov r8, qword [0x7ff7c01d0720]
mov rdx, qword [0x7ff7c01d0728]
call fcn.7ff7c0125120
mov rcx, qword [rdi + 8]
call qword [sym.imp.kernel32.dll_LoadLibraryW]
lea rcx, [rdi - 0x10]
mov edx, r14d
mov r12, rax
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x7ff7c00d5345
nop dword [rax]
call fcn.7ff7c00c6290
lea rcx, [r15 - 0x10]
lock xadd dword [rcx + 8], r14d
cmp r14d, 1
jne 0x7ff7c00d535a
call fcn.7ff7c00c6290
test rsi, rsi
jne 0x7ff7c00d536f
lea rcx, [0x7ff7c0188b18]
call qword [sym.imp.kernel32.dll_LoadLibraryW]
mov rsi, rax
test r12, r12
jne 0x7ff7c00d5386
lea rcx, [0x7ff7c0188b30]
nop dword [rax + rax]
call qword [sym.imp.kernel32.dll_LoadLibraryW]
test rsi, rsi
je 0x7ff7c00d5b90
movzx ecx, word [rsi]
mov ebx, 0x5a4d
cmp cx, bx
jne 0x7ff7c00d53f6
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d53f6
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d53f6
lea r8, ds:[rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d53ed
cmp dword [r8 + 4], r13d
je 0x7ff7c00d53ed
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188bb0]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d53f9
mov qword [0x7ff7c01d3d40], r13
jmp 0x7ff7c00d5405
mov rax, r13
mov qword [0x7ff7c01d3d40], rax
cmp cx, bx
jne 0x7ff7c00d5455
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5455
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5455
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5455
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5455
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188bc0]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d5458
mov rax, r13
mov qword [0x7ff7c01d3d48], rax
nop
cmp cx, bx
jne 0x7ff7c00d551d
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d54bc
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d54bc
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d54bc
cmp dword [r8 + 4], r13d
je 0x7ff7c00d54bc
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188bd0]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
cmp cx, bx
jne 0x7ff7c00d551d
mov edx, dword [rsi + 0x3c]
movzx eax, cx
test edx, edx
je 0x7ff7c00d5520
cmp edx, 0x10000000
jae 0x7ff7c00d5520
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5520
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5514
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5514
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188be0]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
mov rdx, rax
movzx eax, word [rsi]
jmp 0x7ff7c00d5523
mov qword [0x7ff7c01d3d90], r13
jmp 0x7ff7c00d5532
movzx eax, cx
mov rdx, r13
mov qword [0x7ff7c01d3d90], rdx
movzx ecx, ax
cmp ax, bx
jne 0x7ff7c00d558b
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d558b
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d558b
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5582
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5582
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188bf0]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d558e
mov qword [0x7ff7c01d3d60], r13
jmp 0x7ff7c00d559a
mov rax, r13
mov qword [0x7ff7c01d3d60], rax
cmp cx, bx
jne 0x7ff7c00d55f6
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d55f6
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d55f6
lea r8, ds:[rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d55ed
cmp dword [r8 + 4], r13d
je 0x7ff7c00d55ed
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c00]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d55f9
mov qword [0x7ff7c01d3d58], r13
jmp 0x7ff7c00d5605
mov rax, r13
mov qword [0x7ff7c01d3d58], rax
cmp cx, bx
jne 0x7ff7c00d565e
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d565e
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d565e
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5655
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5655
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c18]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d5661
mov qword [0x7ff7c01d3d68], r13
jmp 0x7ff7c00d566d
mov rax, r13
mov qword [0x7ff7c01d3d68], rax
cmp cx, bx
jne 0x7ff7c00d56c6
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d56c6
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d56c6
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d56bd
cmp dword [r8 + 4], r13d
je 0x7ff7c00d56bd
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c30]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d56c9
mov qword [0x7ff7c01d3da0], r13
jmp 0x7ff7c00d56d5
mov rax, r13
mov qword [0x7ff7c01d3da0], rax
cmp cx, bx
jne 0x7ff7c00d5736
mov edx, dword ds:[rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5736
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5736
lea r8, ds:[rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d572d
cmp dword [r8 + 4], r13d
je 0x7ff7c00d572d
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c40]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d5739
mov qword [0x7ff7c01d3d78], r13
jmp 0x7ff7c00d5749
mov rax, r13
mov qword [0x7ff7c01d3d78], rax
cmp cx, bx
jne 0x7ff7c00d57fd
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d579c
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d579c
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d579c
cmp dword [r8 + 4], r13d
je 0x7ff7c00d579c
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c50]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
cmp cx, bx
jne 0x7ff7c00d57fd
mov edx, dword [rsi + 0x3c]
movzx eax, cx
test edx, edx
je 0x7ff7c00d5800
cmp edx, 0x10000000
jae 0x7ff7c00d5800
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5800
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d57f4
cmp dword [r8 + 4], r13d
je 0x7ff7c00d57f4
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c68]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
mov rdx, rax
movzx eax, word [rsi]
jmp 0x7ff7c00d5803
mov qword [0x7ff7c01d3da8], r13
jmp 0x7ff7c00d5816
movzx eax, cx
mov rdx, r13
mov qword [0x7ff7c01d3da8], rdx
movzx ecx, ax
cmp ax, bx
jne 0x7ff7c00d58d9
mov edx, dword ds:[rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5870
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5870
lea r8, ds:[rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5870
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5870
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c80]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
cmp cx, bx
jne 0x7ff7c00d58d9
mov edx, dword [rsi + 0x3c]
movzx eax, cx
test edx, edx
je 0x7ff7c00d58dc
nop word [rax + rax]
cmp edx, 0x10000000
jae 0x7ff7c00d58dc
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d58dc
lea r8, ds:[rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d58d0
cmp dword [r8 + 4], r13d
je 0x7ff7c00d58d0
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188c98]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
mov rdx, rax
movzx eax, word [rsi]
jmp 0x7ff7c00d58df
mov qword [0x7ff7c01d3d98], r13
jmp 0x7ff7c00d58ee
movzx eax, cx
mov rdx, r13
mov qword [0x7ff7c01d3d98], rdx
movzx ecx, ax
cmp ax, bx
jne 0x7ff7c00d5947
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5947
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5947
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d593e
cmp dword [r8 + 4], r13d
je 0x7ff7c00d593e
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188cb8]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d594a
mov qword [0x7ff7c01d3d50], r13
jmp 0x7ff7c00d5956
mov rax, r13
mov qword [0x7ff7c01d3d50], rax
cmp cx, bx
jne 0x7ff7c00d59b6
mov edx, dword ds:[rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d59b6
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d59b6
lea r8, ds:[rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d59ad
cmp dword [r8 + 4], r13d
je 0x7ff7c00d59ad
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188cd0]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d59b9
mov qword [0x7ff7c01d3d70], r13
jmp 0x7ff7c00d59c5
mov rax, r13
mov qword [0x7ff7c01d3d70], rax
cmp cx, bx
jne 0x7ff7c00d5a1e
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5a1e
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5a1e
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5a15
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5a15
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188ce8]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d5a21
mov qword [0x7ff7c01d3d88], r13
jmp 0x7ff7c00d5a2d
mov rax, r13
mov qword [0x7ff7c01d3d88], rax
cmp cx, bx
jne 0x7ff7c00d5a86
mov edx, dword [rsi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5a86
cmp dword [rdx + rsi], 0x4550
jne 0x7ff7c00d5a86
lea r8, [rsi + 0x88]
add r8, rdx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5a7d
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5a7d
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188cf8]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
movzx ecx, word [rsi]
jmp 0x7ff7c00d5a89
mov qword [0x7ff7c01d3d80], r13
jmp 0x7ff7c00d5a99
mov rax, r13
mov qword [0x7ff7c01d3d80], rax
cmp cx, bx
jne 0x7ff7c00d5b90
mov ecx, dword ds:[rsi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5af1
cmp dword [rcx + rsi], 0x4550
jne 0x7ff7c00d5af1
lea r8, ds:[rsi + 0x88]
add r8, rcx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5af1
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5af1
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188d10]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
cmp word [rsi], bx
jne 0x7ff7c00d5b90
mov ecx, dword [rsi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5b45
cmp dword [rcx + rsi], 0x4550
jne 0x7ff7c00d5b45
lea r8, [rsi + 0x88]
add r8, rcx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5b45
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5b45
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188d28]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
nop dword [rax]
cmp word [rsi], bx
jne 0x7ff7c00d5b90
mov ecx, dword [rsi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0xffffffe
ja 0x7ff7c00d5b90
cmp dword [rcx + rsi], 0x4550
jne 0x7ff7c00d5b90
lea r8, [rsi + 0x88]
add r8, rcx
mov eax, dword [r8]
test eax, eax
je 0x7ff7c00d5b90
cmp dword [r8 + 4], r13d
je 0x7ff7c00d5b90
lea r9, [rsi + rax]
mov word [rsp + 0x28], r13w
lea rax, [0x7ff7c0188d40]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.7ff7c00c4bd0
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret