Function at 0x14007dfd0
Capabilities:
Get windows directory from kuser_shared_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x308
movaps xmmword [rsp + 0x2f0], xmm7
movaps xmmword [rsp + 0x2e0], xmm6
mov rsi, rcx
xorps xmm6, xmm6
movaps xmmword [rsp + 0x2c0], xmm6
movaps xmmword [rsp + 0x2b0], xmm6
movaps xmmword [rsp + 0x2a0], xmm6
movaps xmmword [rsp + 0x290], xmm6
movaps xmmword [rsp + 0x280], xmm6
movaps xmmword [rsp + 0x270], xmm6
mov qword [rsp + 0x2d0], 0
movaps xmmword [rsp + 0x220], xmm6
mov qword [rsp + 0x230], 0
mov dword [rsp + 0x270], 0x68
movaps xmmword [rsp + 0x160], xmm6
movaps xmmword [rsp + 0x150], xmm6
mov ecx, 0x7ffe0030
call fcn.140087a90
lea rdi, [rsp + 0x150]
mov edx, 0x7ffe0030
mov rcx, rdi
mov r8, rax
call fcn.140023ad0
movabs rax, 0x9bddf45dc0eb8447
mov qword [rsp + 0x1a0], rax
mov eax, 0x4172bb77
lea rbx, [rsp + 0x170]
movaps xmm7, xmmword [str._vGS]
mov r12d, 0x4b65a3a
mov r13d, 0x10f9e289
mov ebp, 0xbb80ebc0
jmp 0x14007e0d0
mov eax, 0x39324dab
nop word cs:[rax + rax]
cmp eax, 0xb0e3ac2
jg 0x14007e140
cmp eax, 0xc3c4b3b7
jg 0x14007e1b0
cmp eax, 0xa13a285f
jg 0x14007e27c
cmp eax, 0x8e6df702
jg 0x14007e3fd
cmp eax, 0x8738c3b0
jle 0x14007e6e6
cmp eax, 0x8738c3b1
je 0x14007eaa4
cmp eax, 0x881889c7
je 0x14007eabd
cmp eax, 0x8a81ca74
jne 0x14007e0d0
mov rdx, qword [rsp + 0x98]
mov qword [rsp + 0x20], rdx
mov rcx, rdi
mov r9, rsi
call fcn.1400404d0
mov eax, 0xe354eef1
jmp 0x14007e0d0
cmp eax, 0x564c9b12
jg 0x14007e210
cmp eax, 0x27736a69
jg 0x14007e2cc
cmp eax, 0x173512a2
jg 0x14007e463
cmp eax, 0xe9947d4
jle 0x14007e718
cmp eax, 0xe9947d5
je 0x14007ead4
cmp eax, 0x10f9e289
je 0x14007eade
cmp eax, 0x13372c1c
jne 0x14007e0d0
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov qword [rsp + 0x130], rax
mov eax, 0x63993266
jmp 0x14007e0d0
cmp eax, 0xef8df236
jg 0x14007e30d
cmp eax, 0xe2e92202
jg 0x14007e4be
cmp eax, 0xddac6eb3
jle 0x14007e748
cmp eax, 0xddac6eb4
je 0x14007eae8
cmp eax, 0xdf3ec46c
je 0x14007eb02
cmp eax, 0xe2478af1
jne 0x14007e0d0
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x1f8], rax
mov eax, 0x7130b56e
jmp 0x14007e0d0
cmp eax, 0x688a1df3
jle 0x14007e37b
cmp eax, 0x70e62b10
jle 0x14007e508
cmp eax, 0x727655f9
jg 0x14007e695
cmp eax, 0x70e62b11
je 0x14007eb34
cmp eax, 0x7130b56e
je 0x14007eb4b
cmp eax, 0x719a2a7b
jne 0x14007e0d0
mov eax, dword [0x1400f2198]
mov ecx, dword [0x1400f219c]
mov dword [rsp + 0xd0], ecx
lea ecx, [rax - 1]
imul ecx, eax
mov dword [rsp + 0xd4], ecx
mov eax, 0xfc5296cf
jmp 0x14007e0d0
cmp eax, 0xbcdfb994
jg 0x14007e54e
cmp eax, 0xace16774
jle 0x14007e7de
cmp eax, 0xace16775
je 0x14007eb65
cmp eax, 0xb8f8e917
je 0x14007ebab
cmp eax, 0xbb80ebc0
jne 0x14007e0d0
mov rax, qword [0x1400f2460]
mov qword [rsp + 0x1d0], rax
mov eax, 0xe421b2e1
jmp 0x14007e0d0
cmp eax, 0x39324daa
jg 0x14007e5c9
cmp eax, 0x2c369388
jle 0x14007e868
cmp eax, 0x2c369389
je 0x14007ebd8
cmp eax, 0x3788e20f
je 0x14007ebf5
cmp eax, 0x382da4a6
jne 0x14007e0d0
mov eax, 0xbb80ebc0
jmp 0x14007e0d0
cmp eax, 0xfc5296ce
jg 0x14007e5ff
cmp eax, 0xf0c54df2
jle 0x14007e8a2
cmp eax, 0xf0c54df3
je 0x14007ec5e
cmp eax, 0xf3069369
je 0x14007ec7c
cmp eax, 0xf4d8a25c
jne 0x14007e0d0
mov rax, qword [0x1400f25b8]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x70]
cmp qword [rax], 8
mov rax, rdi
jb 0x14007e369
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x1c8], rax
mov eax, 0xf8abc3
jmp 0x14007e0d0
cmp eax, 0x606c0108
jle 0x14007e645
cmp eax, 0x61cc802a
jle 0x14007e8e9
cmp eax, 0x61cc802b
je 0x14007ec93
cmp eax, 0x63603883
je 0x14007ecaa
cmp eax, 0x63993266
jne 0x14007e0d0
mov rax, qword [rsp + 0x130]
cmp rax, 8
setae byte [rsp + 0x56]
mov eax, dword [0x1400f2198]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
setne al
cmp dword [0x1400f219c], 0xa
setge cl
mov edx, eax
xor dl, cl
or al, cl
not al
or al, dl
and al, 1
mov byte [rsp + 0x57], al
mov eax, 0x70e62b11
jmp 0x14007e0d0
cmp eax, 0x94729274
jle 0x14007e918
cmp eax, 0x94729275
je 0x14007ecc1
cmp eax, 0x97fb3856
je 0x14007ecd6
cmp eax, 0x9a8effa5
jne 0x14007e0d0
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
mov qword [rsp + 0x148], rax
mov rax, qword [rsp + 0xb8]
sub rax, qword [rsp + 0x148]
add rax, 0xfffffffffffffff8
cmp rax, 0x20
setb byte [rsp + 0x58]
mov eax, 0x61cc802b
jmp 0x14007e0d0
cmp eax, 0x1ef312ae
jle 0x14007e938
cmp eax, 0x1ef312af
je 0x14007ed18
cmp eax, 0x1f5005ee
je 0x14007ed90
cmp eax, 0x20cbe2c0
jne 0x14007e0d0
mov eax, dword [0x1400f219c]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsp + 0x88]
dec eax
imul eax, dword [rsp + 0x88]
mov dword [rsp + 0xc8], eax
mov eax, 0x5be215c4
jmp 0x14007e0d0
cmp eax, 0xe421b2e0
jle 0x14007e965
cmp eax, 0xe421b2e1
je 0x14007ede8
cmp eax, 0xe6c1be31
je 0x14007ee2b
cmp eax, 0xeda1aba2
jne 0x14007e0d0
mov rax, qword [rsp + 0x138]
add rax, 0x29
mov qword [rsp + 0x1f0], rax
mov eax, 0xe2478af1
jmp 0x14007e0d0
cmp eax, 0x6bcf5288
jle 0x14007e985
cmp eax, 0x6bcf5289
je 0x14007ee42
cmp eax, 0x706f5e07
je 0x14007ee75
cmp eax, 0x70df7b74
jne 0x14007e0d0
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov qword [rsp + 0x210], rax
mov eax, 0x27736a6a
jmp 0x14007e0d0
cmp eax, 0xc12aea68
jle 0x14007e9ca
cmp eax, 0xc12aea69
je 0x14007ee8e
cmp eax, 0xc2265f04
je 0x14007eec2
cmp eax, 0xc3580806
jne 0x14007e0d0
mov eax, dword [rsp + 0xcc]
cmp eax, 0xa
setl al
setge cl
movzx edx, byte [rsp + 0x53]
and al, dl
xor dl, 1
mov r8d, ecx
and r8b, dl
or al, r8b
or dl, cl
mov ecx, eax
xor cl, dl
test al, al
mov eax, 0x881889c7
mov r8d, 0xbd2f49db
cmovne eax, r8d
test dl, dl
cmovne eax, r8d
test cl, cl
mov ecx, 0x881889c7
cmovne eax, ecx
jmp 0x14007e0d0
cmp eax, 0x40ca2940
jle 0x14007e9fa
cmp eax, 0x40ca2941
je 0x14007eed9
cmp eax, 0x4172bb77
je 0x14007eef0
cmp eax, 0x4571b9ce
jne 0x14007e0d0
mov eax, 0x13372c1c
jmp 0x14007e0d0
cmp eax, 0xf8abc2
jle 0x14007ea2b
cmp eax, 0xf8abc3
je 0x14007f073
cmp eax, 0x222b7d1
je 0x14007f07d
cmp eax, 0x4b65a3a
jne 0x14007e0d0
mov rcx, rsi
call fcn.140087a90
mov qword [rsp + 0x98], rax
mov eax, 0xd01c790e
jmp 0x14007e0d0
cmp eax, 0x5be215c3
jg 0x14007ea5d
cmp eax, 0x564c9b13
je 0x14007f087
cmp eax, 0x5abc245f
jne 0x14007f2c8
mov eax, dword [rsp + 0xf4]
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete al
mov ecx, dword [rsp + 0xf0]
cmp ecx, 0xa
setl cl
or cl, al
mov byte [rsp + 0x5f], cl
mov eax, 0x19e0024e
jmp 0x14007e0d0
cmp eax, 0x727655fa
je 0x14007f0c6
cmp eax, 0x7aa9a1fd
jne 0x14007f2d4
mov r8, qword [rsp + 0x98]
add r8, r8
mov rcx, qword [rsp + 0x1b8]
mov rdx, rsi
call fcn.1400863d0
mov rax, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x120]
mov word [rcx + rax*2], 0
mov eax, 0xf4d8a25c
jmp 0x14007e0d0
cmp eax, 0x825e86ac
je 0x14007f0f0
cmp eax, 0x846716f5
jne 0x14007e0d0
mov rcx, qword [rsp + 0xb0]
mov rax, qword [rsp + 0x218]
call rax
mov eax, 0x382da4a6
jmp 0x14007e0d0
cmp eax, 0xb0e3ac3
je 0x14007f132
cmp eax, 0xbf8608d
jne 0x14007e0d0
lea rax, [rsp + 0x228]
mov qword [rsp + 0x1d8], rax
mov eax, 0x2c369389
jmp 0x14007e0d0
cmp eax, 0xc3c4b3b8
je 0x14007e0bf
cmp eax, 0xd01c790e
jne 0x14007e0d0
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x110]
movabs rdx, 0x9aaa418fcec5b586
sub rcx, rdx
sub rcx, rax
add rcx, rdx
cmp rcx, qword [rsp + 0x98]
setb byte [rsp + 0x52]
mov eax, dword [0x1400f2198]
mov ecx, dword [0x1400f219c]
mov dword [rsp + 0xcc], ecx
lea ecx, [rax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete byte [rsp + 0x53]
mov eax, 0xc3580806
jmp 0x14007e0d0
cmp eax, 0xa13a2860
je 0x14007f140
cmp eax, 0xa76adc74
jne 0x14007e0d0
lea rax, [rsp + 0x168]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xf8]
movabs rdx, 0xff52ff690e916b6f
add rcx, rdx
movabs rdx, 0x504c14f24257fe4a
add rcx, rdx
sub rcx, rax
sub rcx, rdx
movabs rax, 0xad0096f16e9491
add rcx, rax
cmp rcx, qword [rsp + 0x90]
mov eax, 0x606c0109
mov ecx, 0xe2e92203
cmovb eax, ecx
jmp 0x14007e0d0
cmp eax, 0x27736a6a
je 0x14007f14e
cmp eax, 0x288c5ee8
jne 0x14007e0d0
mov eax, dword [0x1400f2198]
mov dword [rsp + 0x8c], eax
mov eax, dword [0x1400f219c]
mov dword [rsp + 0xe4], eax
mov eax, 0x825e86ac
jmp 0x14007e0d0
cmp eax, 0xef8df237
je 0x14007f160
cmp eax, 0xeff22d23
jne 0x14007e0d0
mov eax, dword [0x1400f2198]
mov ecx, dword [0x1400f219c]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [rsp + 0x59]
cmp ecx, 0xa
setl byte [rsp + 0x5a]
mov eax, 0x706f5e07
jmp 0x14007e0d0
cmp eax, 0x606c0109
je 0x14007f16a
cmp eax, 0x6118c679
jne 0x14007e0d0
mov rax, qword [0x1400f2460]
mov qword [rsp + 0x1e0], rax
mov eax, 0xfcbc1253
jmp 0x14007e0d0
cmp eax, 0x8e6df703
je 0x14007f19f
cmp eax, 0x93e1c2b1
jne 0x14007e0d0
mov eax, 0xe6c1be31
jmp 0x14007e0d0
cmp eax, 0x173512a3
je 0x14007f1a9
cmp eax, 0x19e0024e
jne 0x14007e0d0
cmp byte [rsp + 0x5f], 0
mov eax, 0xa13a2860
mov ecx, 0x598e6b01
cmovne eax, ecx
jmp 0x14007e0d0
cmp eax, 0xe2e92203
je 0x14007f1d9
cmp eax, 0xe354eef1
jne 0x14007e0d0
mov eax, 0xf4d8a25c
jmp 0x14007e0d0
cmp eax, 0x688a1df4
je 0x14007f1fb
cmp eax, 0x68f5c71b
jne 0x14007e0d0
mov eax, dword [rsp + 0xec]
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete al
mov ecx, dword [rsp + 0xe8]
cmp ecx, 0xa
setl cl
or cl, al
mov byte [rsp + 0x5e], cl
mov eax, 0xc2265f04
jmp 0x14007e0d0
cmp eax, 0xbcdfb995
je 0x14007f224
cmp eax, 0xbd2f49db
jne 0x14007e0d0
mov rcx, rsi
call fcn.140087a90
mov qword [rsp + 0x200], rax
mov eax, 0x564c9b13
jmp 0x14007e0d0
cmp eax, 0x39324dab
je 0x14007f25c
cmp eax, 0x3ea809e6
jne 0x14007e0d0
cmp qword [rsp + 0x128], 0
mov eax, 0x6118c679
mov ecx, 0x8e6df703
cmove eax, ecx
jmp 0x14007e0d0
cmp eax, 0xfc5296cf
je 0x14007f266
cmp eax, 0xfcbc1253
jne 0x14007e0d0
mov rcx, qword [rsp + 0x128]
mov rax, qword [rsp + 0x1e0]
call rax
mov eax, 0xef8df237
jmp 0x14007e0d0
cmp eax, 0x5be215c4
je 0x14007f285
cmp eax, 0x5f968919
jne 0x14007e0d0
mov rax, qword [rsp + 0x130]
add rax, rax
mov qword [rsp + 0x138], rax
mov rax, qword [rsp + 0x138]
add rax, 2
mov qword [rsp + 0x140], rax
mov eax, 0x173512a3
jmp 0x14007e0d0
mov rax, qword [0x1400f2460]
mov qword [rsp + 0x218], rax
mov eax, 0x846716f5
jmp 0x14007e0d0
cmp byte [rsp + 0x52], 0
mov eax, 0xdf3ec46c
mov ecx, 0x8a81ca74
cmovne eax, ecx
jmp 0x14007e0d0
mov eax, 0x222b7d1
jmp 0x14007e0d0
mov eax, 0xbf8608d
jmp 0x14007e0d0
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0xb8], rax
mov eax, 0x5f968919
jmp 0x14007e0d0
mov rax, qword [rsp + 0x98]
add rax, qword [rsp + 0xa8]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x118]
mov qword [rax], rcx
mov eax, 0xace16775
jmp 0x14007e0d0
cmp byte [rsp + 0x57], 0
mov eax, 0x70df7b74
mov ecx, 0x63603883
cmovne eax, ecx
jmp 0x14007e0d0
mov r14, qword [rsp + 0x1f0]
mov eax, 0x94729275
mov r15, qword [rsp + 0x1f8]
jmp 0x14007e0d0
mov rcx, qword [rsp + 0x110]
mov rax, rdi
cmp rcx, 8
jb 0x14007eb7e
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0xa8]
add rax, rax
add rax, qword [rsp + 0x120]
mov qword [rsp + 0x1b8], rax
mov eax, 0x7aa9a1fd
jmp 0x14007e0d0
mov eax, dword [0x1400f2198]
mov ecx, dword [0x1400f219c]
mov dword [rsp + 0xdc], ecx
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
mov dword [rsp + 0xe0], ecx
mov eax, 0x97fb3856
jmp 0x14007e0d0
mov rax, qword [rsp + 0x1d8]
mov rax, qword [rax]
mov qword [rsp + 0x128], rax
mov eax, 0x3ea809e6
jmp 0x14007e0d0
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x100]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xf8]
mov rax, rdi
cmp rcx, 8
jb 0x14007ec1e
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0xa0]
add rax, rax
add rax, qword [rsp + 0x108]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x90]
add rax, rax
mov qword [rsp + 0x1b0], rax
mov eax, 0xbcdfb995
jmp 0x14007e0d0
mov rax, qword [rsp + 0xb8]
add rax, 0xfffffffffffffff8
mov qword [rsp + 0x1e8], rax
mov eax, 0x9a8effa5
jmp 0x14007e0d0
cmp byte [rsp + 0x5c], 0
mov eax, 0xb0e3ac3
mov ecx, 0xc12aea69
cmovne eax, ecx
jmp 0x14007e0d0
cmp byte [rsp + 0x58], 0
mov eax, 0x7dfc8634
mov ecx, 0xeda1aba2
cmovne eax, ecx
jmp 0x14007e0d0
cmp byte [rsp + 0x56], 0
mov eax, 0xeff22d23
mov ecx, 0xddac6eb4
cmovne eax, ecx
jmp 0x14007e0d0
mov rcx, r15
mov rdx, r14
call fcn.140085870
mov eax, 0xeff22d23
jmp 0x14007e0d0
mov ecx, dword [rsp + 0xe0]
test ecx, ecx
sete al
mov edx, dword [rsp + 0xdc]
cmp edx, 0xa
setl r8b
xor r8b, al
mov r8d, 0x70df7b74
mov r9d, 0x13372c1c
cmovne r8d, r9d
cmp edx, 0xa
mov eax, r8d
cmovl eax, r9d
test ecx, ecx
cmovne eax, r8d
jmp 0x14007e0d0
mov rax, qword [rsp + 0x1c0]
mov rdx, qword [rsp + 0x1c8]
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0x270]
mov qword [rsp + 0x40], rcx
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0x8000020
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call rax
mov dword [rsp + 0x6c], eax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0xb0], rax
cmp qword [rsp + 0xb0], 0
mov eax, 0x719a2a7b
mov ecx, 0xbf8608d
cmove eax, ecx
jmp 0x14007e0d0
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x208]
mov rax, qword [rsp + 0x80]
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x80]
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x80]
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x60]
mov rax, qword [rsp + 0x80]
mov rax, qword [rsp + 0x200]
mov eax, 0x4b65a3a
jmp 0x14007e0d0
mov rcx, qword [rsp + 0xb0]
mov rax, qword [rsp + 0x1d0]
call rax
mov eax, dword [0x1400f2198]
mov ecx, dword [0x1400f219c]
lea edx, [rax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [rsp + 0x54]
cmp ecx, 0xa
setl byte [rsp + 0x55]
mov eax, 0x688a1df4
jmp 0x14007e0d0
mov eax, dword [0x1400f2198]
mov dword [rsp + 0x88], eax
mov eax, 0x20cbe2c0
jmp 0x14007e0d0
mov ecx, dword [rsp + 0xd8]
mov eax, dword [rsp + 0xd0]
cmp eax, 0xa
mov eax, 0x8738c3b1
cmovl eax, ebp
setl dl
test ecx, ecx
mov ecx, 0x8738c3b1
cmovne eax, ecx
sete cl
xor cl, dl
cmovne eax, ebp
jmp 0x14007e0d0
movzx eax, byte [rsp + 0x59]
or al, byte [rsp + 0x5a]
and al, 1
mov byte [rsp + 0x5b], al
mov eax, 0x40ca2941
jmp 0x14007e0d0
cmp dword [rsp + 0x6c], 0
setne byte [rsp + 0x5d]
mov eax, dword [0x1400f2198]
mov ecx, dword [0x1400f219c]
mov dword [rsp + 0xe8], ecx
lea ecx, [rax - 1]
imul ecx, eax
mov dword [rsp + 0xec], ecx
mov eax, 0x68f5c71b
jmp 0x14007e0d0
cmp byte [rsp + 0x5e], 0
mov eax, 0xb0e3ac3
mov ecx, 0x727655fa
cmovne eax, ecx
jmp 0x14007e0d0
cmp byte [rsp + 0x5b], 0
mov eax, 0xa13a2860
mov ecx, 0x288c5ee8
cmovne eax, ecx
jmp 0x14007e0d0
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x170], rax
movabs rax, 0xa4f55088a41849f0
mov qword [rsp + 0x178], rax
movabs rax, 0xb0f2dafd236981df
mov qword [rsp + 0x180], rax
movabs rax, 0xb46f912a0991dca
mov qword [rsp + 0x188], rax
movabs rax, 0x1dc0628f2f92a6fa
mov qword [rsp + 0x190], rax
movabs rax, 0x65200e0141b3f5a8
mov qword [rsp + 0x198], rax
movabs rax, 0x9baef424c0b8841b
mov qword [rsp + 0x240], rax
movabs rax, 0xa4c650e5a47d4984
mov qword [rsp + 0x248], rax
movabs rax, 0xb09fda9e233581ed
mov qword [rsp + 0x250], rax
movabs rax, 0xb3ef977a0b71dae
mov qword [rsp + 0x258], rax
movabs rax, 0x1da362a02fb2a69f
mov qword [rsp + 0x260], rax
movabs rax, 0x65200e0141b3f588
mov qword [rsp + 0x268], rax
lea rax, [rsp + 0x240]
movaps xmm0, xmmword [rax]
movaps xmm1, xmmword [rsp + 0x170]
movaps xmm2, xmm1
andnps xmm2, xmm0
andnps xmm0, xmm1
orps xmm0, xmm2
movaps xmmword [rsp + 0x170], xmm0
movaps xmm0, xmmword [rax + 0x10]
movaps xmm1, xmmword [rsp + 0x180]
movaps xmm2, xmm0
andnps xmm2, xmm1
andnps xmm1, xmm0
orps xmm1, xmm2
movaps xmmword [rsp + 0x180], xmm1
movaps xmm0, xmmword [rax + 0x20]
movaps xmm1, xmmword [rsp + 0x190]
movaps xmm2, xmm7
andnps xmm2, xmm0
andnps xmm0, xmm7
orps xmm0, xmm2
movaps xmm2, xmm7
andnps xmm2, xmm1
andnps xmm1, xmm7
orps xmm1, xmm2
xorps xmm1, xmm0
movaps xmmword [rsp + 0x190], xmm1
mov rcx, rbx
call fcn.140087a90
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0xa0], rax
mov eax, 0xa76adc74
jmp 0x14007e0d0
mov eax, 0x1ef312af
jmp 0x14007e0d0
mov eax, 0x288c5ee8
jmp 0x14007e0d0
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x80]
sub rcx, rax
mov qword [rsp + 0x208], rcx
mov eax, 0x1f5005ee
jmp 0x14007e0d0
mov eax, dword [0x1400f2198]
mov ecx, dword [0x1400f219c]
mov dword [rsp + 0xf0], ecx
lea ecx, [rax - 1]
imul ecx, eax
mov dword [rsp + 0xf4], ecx
mov eax, 0x5abc245f
jmp 0x14007e0d0
mov eax, dword [rsp + 0x8c]
inc eax
imul eax, dword [rsp + 0x8c]
test al, 1
sete cl
mov edx, dword [rsp + 0xe4]
cmp edx, 0xa
setge dl
setl r8b
xor r8b, cl
or dl, al
not dl
or dl, r8b
and dl, 1
mov byte [rsp + 0x5c], dl
mov eax, 0xf3069369
jmp 0x14007e0d0
mov eax, dword [rsp + 0x6c]
mov eax, 0xc3c4b3b8
jmp 0x14007e0d0
mov eax, dword [rsp + 0x6c]
mov eax, 0xe9947d5
jmp 0x14007e0d0
mov rax, qword [rsp + 0x210]
mov eax, 0x4571b9ce
jmp 0x14007e0d0
mov eax, 0x8e6df703
jmp 0x14007e0d0
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0xa0]
movabs rdx, 0x1749c3cdd15b58f4
add rcx, rdx
add rcx, rax
sub rcx, rdx
mov qword [rsp + 0x100], rcx
mov eax, 0x3788e20f
jmp 0x14007e0d0
mov eax, 0xb8f8e917
jmp 0x14007e0d0
mov rax, qword [rsp + 0x140]
cmp rax, 0x1000
mov eax, 0x94729275
mov ecx, 0xf0c54df3
cmovae eax, ecx
mov r15, qword [rsp + 0xb8]
mov r14, qword [rsp + 0x140]
jmp 0x14007e0d0
mov rdx, qword [rsp + 0x90]
mov qword [rsp + 0x20], rdx
mov rcx, rdi
mov r9, rbx
call fcn.1400404d0
mov eax, 0x93e1c2b1
jmp 0x14007e0d0
movzx ecx, byte [rsp + 0x54]
movzx eax, byte [rsp + 0x55]
mov edx, ecx
xor dl, al
mov edx, 0x8738c3b1
cmovne edx, r13d
test al, al
mov eax, edx
cmovne eax, r13d
test cl, cl
cmove eax, edx
jmp 0x14007e0d0
mov rcx, qword [rsp + 0x1a8]
mov r8, qword [rsp + 0x1b0]
mov rdx, rbx
call fcn.1400863d0
mov rax, qword [rsp + 0x100]
mov rcx, qword [rsp + 0x108]
mov word [rcx + rax*2], 0
mov eax, 0xe6c1be31
jmp 0x14007e0d0
mov eax, 0xc12aea69
jmp 0x14007e0d0
mov eax, dword [rsp + 0xd4]
mov ecx, eax
xor ecx, 0xfffffffe
and ecx, eax
mov dword [rsp + 0xd8], ecx
mov eax, 0x6bcf5289
jmp 0x14007e0d0
mov ecx, dword [rsp + 0xc8]
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov edx, dword [rsp + 0xc4]
cmp edx, 0xa
setl r8b
xor r8b, al
mov r8d, 0xbd2f49db
cmovne r8d, r12d
cmp edx, 0xa
mov eax, r8d
cmovl eax, r12d
cmp ecx, 0xffffffff
cmovne eax, r8d
jmp 0x14007e0d0
cmp eax, 0x598e6b01
je 0x14007f2e4
jmp 0x14007e0d0
cmp eax, 0x7dfc8634
jne 0x14007e0d0
call fcn.1400847d0
movzx eax, byte [rsp + 0x5d]
movaps xmm6, xmmword [rsp + 0x2e0]
movaps xmm7, xmmword [rsp + 0x2f0]
add rsp, 0x308
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret