Function at 0x14005cd30
Capabilities:
Authenticate hmac

Disassembly:
xchg rsi, rbx
mov qword [rsp + 8], rsi
xchg rbx, rsi
push rbp
push rsi
push rdi
nop
sub rsp, 8
mov qword [rsp], r12
nop
sub rsp, 8
mov qword [rsp], r13
nop
sub rsp, 8
mov qword [rsp], r14
nop
sub rsp, 8
mov qword [rsp], r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
xchg rbx, rcx
mov rcx, rbx
xchg rcx, rbx
xor esi, esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x38], esi
xor r8d, r8d
lea rdx, [rsp + 0x30]
call fcn.14005fd50
test al, al
je 0x14005dba8
mov r15d, dword [rsp + 0x38]
xchg r14, r15
mov r15, qword [rsp + 0x30]
xchg r14, r15
cmp dword [rbx + 0x24], 5
jne 0x14005d96b
cmp r14, 0xffffffffffffffff
je 0x14005d96b
bt r15d, 8
jae 0x14005d96b
btr r15d, 8
lea r8, [rbx + 0x50]
lea r10, [r8 + 0x1b8]
mov edx, 0x5739f989
add edx, 0x262b0c45
sub edx, 0x2c43a597
add edx, 0x2508649e
sub edx, 0x48cd112b
sub edx, 0x11511555
sub edx, 0x1c0b9e4a
nop dword [rax]
xchg rdx, r8
mov rcx, r8
xchg r8, rdx
shr rcx, 1
lea rax, [rcx + rcx*4]
lea r9, [r8 + rax*8]
cmp dword [r9], r15d
jge 0x14005ce63
lea r8, [r9 + 0x28]
nop
movabs rax, 0xffffffff214436e8
add rax, 0x42498a6c
sub rax, 0x28087352
xor rax, 0x738bb5a2
xor rax, 0x58510b23
add rax, 0x52f85b74
add rax, 0x7fffffff
xor rax, 0x1ca7b409
sub rax, rcx
add rdx, rax
jmp 0x14005ce6c
xchg rdx, rcx
mov rcx, rdx
xchg rdx, rcx
test rdx, rdx
jg 0x14005ce02
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0x9126497
xor qword [rsp + 0x40], 0x21584d23
add qword [rsp + 0x40], 0x24388b49
xor qword [rsp + 0x40], 0x58d32c25
xor qword [rsp + 0x40], 0x53f8045b
xor qword [rsp + 0x40], 0x47a99c88
mov r13d, 0x35d5683c
xor r13d, 0x3b9a27a0
add r13d, 0x1a959e54
add r13d, 0x300dbcc
sub r13d, 0x1d257722
sub r13d, 0xd3c8fc1
add r13d, 0x576753d2
sub r13d, 0x58eb169c
xchg rcx, r13
mov qword [rsp + 0x48], rcx
xchg rcx, r13
movsd xmm0, qword [0x140001ba8]
movsd qword [rsp + 0x30], xmm0
movzx eax, word [0x140001bb0]
mov word [rsp + 0x38], ax
movzx eax, byte [0x140001bb2]
mov byte [rsp + 0x3a], al
mov byte [rsp + 0x3b], sil
cmp r8, r10
je 0x14005d371
cmp dword [r8], r15d
jne 0x14005d371
lea rdx, [r8 + 8]
lea rcx, [rsp + 0x70]
call fcn.1400499a0
nop
xchg r8, rdi
mov r8, qword [rbx + 0x28]
xchg r8, rdi
mov rax, qword [rdi + 0x10]
mov rax, qword [rax - 8]
lea rdx, [rsp + 0x30]
xchg rcx, r8
mov r8, qword [rax + 8]
xchg rcx, r8
call fcn.14004e500
mov qword [rdi + 0x20], rax
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx + 0x28]
call fcn.140070a70
test al, al
je 0x14005d315
mov eax, 0x69119db5
xor eax, 0x6ff47c01
xor eax, 0x78b342b
add eax, 0x152a5d8a
add eax, 0x1fbd662b
xor eax, 0x4c6ad21f
add eax, 0x17bf45e
sub eax, 0x7bb83f54
cmp r15d, 0x43
cmove r15d, eax
mov r12, qword [rsp + 0x48]
cmp r12, 0xb
jb 0x14005d04a
lea rdi, [rsp + 0x30]
cmp r12, 0x10
cmovae rdi, qword [rsp + 0x30]
mov qword [rsp + 0x40], 0x5b4a97e4
sub qword [rsp + 0x40], 0x3ddb5147
xor qword [rsp + 0x40], 0x4aaaf6bc
sub qword [rsp + 0x40], 0x1c102330
sub qword [rsp + 0x40], 0x38b9afe5
add qword [rsp + 0x40], 0x564468c0
xor qword [rsp + 0x40], 0x25d4e4e8
sub qword [rsp + 0x40], 0x7c94a119
lea r8d, [r13 - 4]
lea rdx, [0x140001bc0]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 0xb], 0x43
sub byte [rdi + 0xb], 0x30
add byte [rdi + 0xb], 0x1f
add byte [rdi + 0xb], 3
xor byte [rdi + 0xb], 0x3e
add byte [rdi + 0xb], 0x30
xor byte [rdi + 0xb], 0x3b
jmp 0x14005d263
xchg r12, r11
mov rcx, r11
xchg r11, r12
shr rcx, 1
movabs rdi, 0x7fffffff69ebe560
xor rdi, 0xe87313f
sub rdi, 0xecb77ff
sub rdi, 0x18565d67
xor rdi, 0x63b0edb5
xor rdi, 0xd159fca
add rdi, 0x1bebb45b
sub rdi, 0x261b42f2
add rdi, 0x7fffffff
xor rdi, 0x5b400211
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
sub rax, rcx
cmp r12, rax
jbe 0x14005d118
movabs rax, 0x80000000057e39f1
xor rax, 0x52b2a10
add rax, 0x595de6c2
add rax, 0xe592b75
add rax, 0x657642f
xor rax, 0x3fb526db
add rax, 0x1ebe6103
sub rax, 0x70950d9f
neg rax
add rax, 0xffffffffffffffd9
neg rax
xchg r13, rcx
mov r13, rax
xchg rcx, r13
call fcn.1401fc590
test rax, rax
je 0x14005d24c
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x14005d172
lea rax, [r12 + rcx]
xchg r13, r11
mov rdi, r11
xchg r11, r13
cmp rax, r13
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14005d14f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005dc34
jmp 0x14005d0f0
test rcx, rcx
je 0x14005d169
call fcn.1401fc590
xchg rsi, rax
mov r13, rsi
xchg rsi, rax
jmp 0x14005d172
xchg rsi, r13
mov rsi, r13
xchg r13, rsi
mov qword [rsp + 0x40], 0x1457d9a6
sub qword [rsp + 0x40], 0x118ada32
add qword [rsp + 0x40], 0x69216dbe
xor qword [rsp + 0x40], 0x5fc77131
sub qword [rsp + 0x40], 0x53916ab
sub qword [rsp + 0x40], 0x2ef0054d
mov qword [rsp + 0x48], rdi
movsd xmm0, qword [0x140001bc0]
xchg r13, r15
movsd qword [r15], xmm0
xchg r15, r13
movzx eax, word [0x140001bc8]
mov word [r13 + 8], ax
movzx eax, byte [0x140001bca]
mov byte [r13 + 0xa], al
mov byte [r13 + 0xb], 0x21
add byte [r13 + 0xb], 0x21
add byte [r13 + 0xb], 0x1c
sub byte [r13 + 0xb], 0x11
xor byte [r13 + 0xb], 0x35
xor byte [r13 + 0xb], 0x44
sub byte [r13 + 0xb], 0x14
sub byte [r13 + 0xb], 6
sub byte [r13 + 0xb], 0x22
cmp r12, 0x10
jb 0x14005d258
lea rdx, [r12 + 1]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d253
nop
add rdx, 0x4cef972d
sub rdx, 0x4cef9706
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d253
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fc5cc
xchg rsi, r13
mov qword [rsp + 0x30], rsi
xchg r13, rsi
xchg r12, rdi
mov r12, qword [rbx + 0x28]
xchg rdi, r12
mov rax, qword [rdi + 0x10]
mov rax, qword [rax - 8]
lea rdx, [rsp + 0x30]
xchg rcx, r8
mov r8, qword [rax + 8]
xchg rcx, r8
call fcn.14004e500
xchg r10, rax
mov qword [rdi + 0x20], r10
xchg r10, rax
xchg rdx, r14
mov r14, rdx
xchg r14, rdx
mov rcx, qword [rbx + 0x28]
call fcn.140070760
test al, al
je 0x14005d315
test r14, r14
je 0x14005d2e3
nop word [rax + rax]
mov edx, r15d
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.140064d00
test al, al
je 0x14005d315
inc rsi
cmp rsi, r14
jb 0x14005d2be
xchg r9, rax
mov r9, qword [rbx + 0x28]
xchg r9, rax
sub qword [rax + 0x10], 8
mov rax, qword [rbx + 0x28]
add qword [rax + 0x10], 0xfffffffffffffff8
mov bl, SHCreateMemStream
add bl, 0x4f
xor bl, 0x72
xor bl, 0x40
sub bl, 0x2a
xor bl, 3
add bl, 0x22
sub bl, 0x5e
jmp 0x14005d317
xor bl, bl
xchg rcx, rdx
mov rcx, qword [rbp - 0x78]
xchg rcx, rdx
cmp rdx, 0x10
jb 0x14005d8f3
inc rdx
mov rcx, qword [rsp + 0x70]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14005d367
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d367
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fc5cc
jmp 0x14005d8f3
lea rdx, [rbp - 0x50]
xchg rcx, r15
mov r15, rbx
xchg rcx, r15
call fcn.14005c870
nop
mov rax, qword [rbx + 0x28]
xchg r14, rax
mov qword [rbp + 0xa8], r14
xchg r14, rax
xorps xmm0, xmm0
xchg rbp, rdx
movups xmmword [rdx - 0x70], xmm0
xchg rbp, rdx
mov qword [rbp - 0x60], 0x5ae6091a
sub qword [rbp - 0x60], 0x4a3d0808
add qword [rbp - 0x60], 0x4fd922af
xor qword [rbp - 0x60], 0x1084e29
xor qword [rbp - 0x60], 0x74d2f4e
sub qword [rbp - 0x60], 0x5438a7ba
add qword [rbp - 0x60], 0x2a87c0a2
sub qword [rbp - 0x60], 0x1447f908
sub qword [rbp - 0x60], 0x28ce6282
mov qword [rbp - 0x58], r13
mov dword [rbp - 0x70], 0x4256a0f5
xor dword [rbp - 0x70], 0x67d0890d
add dword [rbp - 0x70], 0x36aec218
sub dword [rbp - 0x70], 0x153b9158
xor dword [rbp - 0x70], 0x53ef5e41
add dword [rbp - 0x70], 0x1de93cf
add dword [rbp - 0x70], 0x4e7be0ac
mov byte [rbp - 0x6c], 0x54
sub byte [rbp - 0x6c], 0x51
add byte [rbp - 0x6c], 0x1e
sub byte [rbp - 0x6c], 0x12
xor byte [rbp - 0x6c], 0x69
sub byte [rbp - 0x6c], 0x24
sub byte [rbp - 0x6c], 0x42
movabs rdi, 0x7fffffff13185d5e
sub rdi, 0x8b8a2a6
add rdi, 0x251460f6
sub rdi, 0xef49976
add rdi, 0x158fac09
add rdi, 0x7fffffff
add rdi, 0x49f0d1bf
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
xchg rdx, r12
mov r12, qword [rbp - 0x40]
xchg rdx, r12
sub rax, rdx
cmp rax, 0x10
jb 0x14005dc40
lea r9, [rbp - 0x50]
mov r15, qword [rbp - 0x50]
xchg r9, r12
mov r9, qword [rbp - 0x38]
xchg r9, r12
cmp r12, 0x10
cmovae r9, r15
mov qword [rbp + 0xa0], r9
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rax, [rdx + 0x10]
mov qword [rbp + 0x98], rax
lea r14, [rsp + 0x50]
cmp rax, 0xf
jbe 0x14005d5fe
xchg rcx, rax
mov r13, rcx
xchg rcx, rax
or r13, 0xf
cmp r13, rdi
jbe 0x14005d55f
xchg r13, r9
mov r9, rdi
xchg r9, r13
movabs rax, 0x800000003cca9532
sub rax, 0x14be56ff
add rax, 0x3910a3f8
xor rax, 0x223b0079
xor rax, 0x89c00e2
add rax, 0x76ba7b7
sub rax, 0x53278a67
add rax, 0x27
mov rcx, rax
call fcn.1401fc590
test rax, rax
je 0x14005d81d
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
xchg r10, rax
mov qword [r14 - 8], r10
xchg r10, rax
mov rdx, qword [rbp - 0x40]
xchg r12, rax
mov r12, qword [rbp + 0x98]
xchg r12, rax
mov r9, qword [rbp + 0xa0]
jmp 0x14005d5f3
mov ecx, 0x27a76be6
xor ecx, 0x3828d0c7
add ecx, 0x4503e5e2
sub ecx, 0x7f7cf4e
sub ecx, 0x4df299e6
xor ecx, 0x58646524
sub ecx, 0x3d948647
add ecx, 0xf332dc4
sub ecx, 0x286bfa52
cmp r13, rcx
cmovb r13, rcx
lea rcx, [r13 + 1]
cmp rcx, 0x1000
jb 0x14005d5be
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005dc3a
jmp 0x14005d523
test rcx, rcx
je 0x14005d5ea
call fcn.1401fc590
xchg rbp, rax
mov r14, rbp
xchg rbp, rax
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp + 0x98]
mov r9, qword [rbp + 0xa0]
jmp 0x14005d5f3
xchg rsi, rcx
mov r14, rcx
xchg rsi, rcx
xchg r10, r14
mov qword [rsp + 0x50], r10
xchg r14, r10
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], r13
movups xmm0, xmmword [0x140001920]
movups xmmword [r14], xmm0
lea rcx, [r14 + 0x10]
xchg rdx, r8
mov rdx, r8
xchg rdx, r8
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
xchg r12, rax
mov r12, qword [rbp + 0x98]
xchg r12, rax
mov byte [r14 + rax], 0x66
xor byte [r14 + rax], 0x40
add byte [r14 + rax], 0x44
sub byte [r14 + rax], 0x36
sub byte [r14 + rax], 4
xor byte [r14 + rax], 0x50
sub byte [r14 + rax], 0x55
xor byte [r14 + rax], 0x50
sub byte [r14 + rax], 0x5b
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
mov r8d, dword [rbx + 0x24]
lea rdx, [rsp + 0x70]
xchg rsi, rbx
mov rcx, rsi
xchg rbx, rsi
call fcn.140055680
nop
xchg rdi, rsi
mov qword [rsp + 0x20], rdi
xchg rdi, rsi
xchg r9, rax
mov rax, r9
xchg r9, rax
mov r8, qword [rbx + 0x18]
mov edx, 0x6ca5d0fb
xor edx, 0x637a8c59
add edx, 0x2541d90a
xor edx, 0x212cfcab
add edx, 0x48224792
sub edx, 0x2ffad9b
sub edx, 0x117ebefb
sub edx, 0x47b1a393
lea rcx, [rbp - 0x30]
call fcn.140038d00
nop
xchg r8, rcx
mov r8, qword [rbp + 0xa8]
xchg r8, rcx
mov byte [rcx + 0x28], 0x18
add byte [rcx + 0x28], 0x3b
xor byte [rcx + 0x28], 0x6a
sub byte [rcx + 0x28], 0x39
add byte [rcx + 0x28], 7
xor byte [rcx + 0x28], 0x59
sub byte [rcx + 0x28], 0x5d
cmp byte [rcx + 0x29], 0
jne 0x14005dc11
lea rbx, [0x140004a88]
xchg rbx, r10
mov qword [rbp - 0x10], r10
xchg r10, rbx
lea rcx, [rbp - 8]
call sub.VCRUNTIME140.dll___std_exception_destroy
xchg r11, rbx
mov qword [rbp - 0x30], r11
xchg rbx, r11
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll___std_exception_destroy
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x14005d798
inc rdx
xchg rcx, r8
mov r8, qword [rsp + 0x70]
xchg rcx, r8
xchg rcx, r14
mov rax, r14
xchg rcx, r14
cmp rdx, 0x1000
jb 0x14005d793
nop
sub rdx, 0x35aef305
add rdx, 0x35aef32c
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005d793
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fc5cc
movdqa xmm0, xmmword [0x140002c80]
xchg rbp, rcx
movdqu xmmword [rcx - 0x80], xmm0
xchg rbp, rcx
mov byte [rsp + 0x70], 0x41
xor byte [rsp + 0x70], 1
sub byte [rsp + 0x70], 0x2c
add byte [rsp + 0x70], 0x4e
sub byte [rsp + 0x70], 0x19
xor byte [rsp + 0x70], 0x77
sub byte [rsp + 0x70], 0x3e
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14005d82a
inc rdx
mov rcx, qword [rsp + 0x50]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14005d824
nop
sub rdx, 0x67f60209
add rdx, 0x67f60230
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14005d824
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fc5cc
nop
xchg r11, rdx
mov r11, qword [rbp - 0x58]
xchg rdx, r11
cmp rdx, 0x10
jb 0x14005d88c
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005d886
nop
sub rdx, 0x69c798eb
add rdx, 0x69c79912
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x14005d886
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fc5cc
nop
cmp r12, 0x10
jb 0x14005d8f1
lea rdx, [r12 + 1]
xchg rbp, rax
mov rbp, r15
xchg rbp, rax
cmp rdx, 0x1000
jb 0x14005d8e3
nop
add rdx, 0x30a4e2ee
sub rdx, 0x30a4e2c7
mov r15, qword [r15 - 8]
sub rax, r15
nop
add rax, 0xffffffffbe911696
sub rax, 0xffffffffbe91169e
cmp rax, 0x1f
jbe 0x14005d8e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xchg r13, rcx
mov r13, r15
xchg rcx, r13
call fcn.1401fc5cc
xor bl, bl
xchg rdx, r15
mov r15, qword [rsp + 0x48]
xchg r15, rdx
cmp rdx, 0x10
jb 0x14005d963
inc rdx
xchg r9, rcx
mov r9, qword [rsp + 0x30]
xchg r9, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14005d95e
nop
add rdx, 0x35b73083
sub rdx, 0x35b7305c
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffc30413ad
sub rax, 0xffffffffc30413b5
cmp rax, 0x1f
jbe 0x14005d95e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fc5cc
movzx eax, bl
jmp 0x14005dbaa
mov rdi, qword [rbx + 0x28]
xchg rcx, rdi
mov rdi, rcx
xchg rcx, rdi
cmp r14, 0xffffffffffffffff
je 0x14005da73
xchg rdx, r14
mov r14, rdx
xchg r14, rdx
call fcn.140070760
test al, al
je 0x14005dba8
test r15d, r15d
je 0x14005da07
cmp r15d, 0x4e
je 0x14005db80
test r14, r14
je 0x14005db80
nop
mov edx, r15d
xchg r14, rbx
mov rcx, r14
xchg r14, rbx
call fcn.140064d00
test al, al
je 0x14005dba8
inc rsi
cmp rsi, r14
jb 0x14005d9b6
mov rax, qword [rbx + 0x28]
nop
add qword [rax + 0x10], 0xffffffff88d0a10a
sub qword [rax + 0x10], 0xffffffff88d0a112
mov al, 0x32
add al, 0x1b
xor al, 0x5d
add al, 0x1b
add al, 0x46
sub al, 0x14
add al, 0x13
sub al, 0x42
xor al, 0x2f
jmp 0x14005dbaa
test r14, r14
je 0x14005db80
mov dl, 0x7d
sub dl, 0x46
add dl, 0x46
sub dl, 0x59
add dl, 0x10
sub dl, 0x29
xor dl, 0x3e
xor dl, 0x34
xchg rcx, r15
mov r15, rbx
xchg r15, rcx
call fcn.14006c4e0
test al, al
je 0x14005dba8
inc rsi
cmp rsi, r14
jb 0x14005da10
xchg r15, rax
mov r15, qword [rbx + 0x28]
xchg r15, rax
nop
sub qword [rax + 0x10], 0xffffffff90ef8d90
add qword [rax + 0x10], 0xffffffff90ef8d88
mov al, 0x5c
sub al, 2
add al, 0xc
xor al, 0x2a
sub al, 0x3c
xor al, 0x11
jmp 0x14005dbaa
mov byte [rbp + 0x98], 0x30
xor byte [rbp + 0x98], 0x56
xor byte [rbp + 0x98], 0x74
xor byte [rbp + 0x98], 0xe
add byte [rbp + 0x98], 0x49
xor byte [rbp + 0x98], 0x13
xor byte [rbp + 0x98], 0x74
lea rdx, [rbp + 0x98]
call fcn.140048410
xchg r15, rax
mov qword [rbp + 0x98], r15
xchg r15, rax
xchg rdx, r12
mov r12, qword [rdi + 0x10]
xchg r12, rdx
cmp rdx, qword [rdi + 0x18]
je 0x14005dae4
mov qword [rdx], rax
neg qword [rdi + 0x10]
add qword [rdi + 0x10], 0xfffffffffffffff8
neg qword [rdi + 0x10]
jmp 0x14005daf4
lea r8, [rbp + 0x98]
lea rcx, [rdi + 8]
call fcn.140033000
cmp dword [rbx + 0x10], 0x5d
je 0x14005db80
xor edx, edx
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.14006c4e0
test al, al
je 0x14005dba8
inc qword [rbx + 0x18]
xchg r14, rax
mov r14, qword [rbx]
xchg r14, rax
cmp rax, qword [rbx + 8]
je 0x14005db45
movzx ecx, byte [rax]
inc rax
mov qword [rbx], rax
mov dword [rbx + 0x10], ecx
cmp ecx, 0x4e
je 0x14005db16
jmp 0x14005db77
mov ecx, 0x722b7123
xor ecx, 0x3b8070ce
add ecx, 0x15cbf21e
xor ecx, 0x46483b1c
sub ecx, 0xa5f826e
sub ecx, 0xd8ff9b1
xor ecx, 0x56fb528f
add ecx, 0xa84bff88
mov dword [rbx + 0x10], ecx
cmp ecx, 0x5d
jne 0x14005dafe
xchg r13, rax
mov r13, qword [rbx + 0x28]
xchg r13, rax
neg qword [rax + 0x10]
add qword [rax + 0x10], 8
neg qword [rax + 0x10]
mov al, reloc.SHLWAPI.dll_SHCreateMemStream
xor al, 0x14
sub al, 3
xor al, 0x53
sub al, 0x34
xor al, 0x38
xor al, 0x2b
jmp 0x14005dbaa
xor al, al
mov rbx, qword [rsp + 0x190]
add rsp, 0x150
nop
add rsp, 8
xchg qword [rsp - 8], r15
push rdx
push rbx
xchg qword [rsp + 0x10], r14
add rsp, 0x18
push rbx
push rax
push rdx
xchg qword [rsp + 0x18], r13
pop rdx
pop rax
pop rbx
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r12
push rax
push rdx
push rbx
push rbx
push rbx
xchg qword [rsp + 0x28], rdi
add rsp, 0x30
nop
add rsp, 8
xchg qword [rsp - 8], rsi
nop
xchg qword [rsp], rbp
add rsp, 8
nop
add rsp, 8
jmp qword [rsp - 8]
xchg r8, rdx
mov r8, rax
xchg rdx, r8
lea rcx, [rbp + 0x10]
call fcn.14004c080
lea rdx, [0x140214f90]
lea rcx, [rbp + 0x10]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.14002f7b0
nop
call fcn.14002f7b0
int3
call fcn.14002f8e0
int3