Function at 0x1400b9ec0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov r14, r9
mov rbp, r8
mov rdi, rdx
mov rsi, rcx
mov r8, qword [rsp + 0x178]
movzx r12d, byte [rsp + 0x170]
mov eax, 0x2600
mov r13, rbp
jmp 0x1400b9f28
inc r13
cmp ecx, 0xd
ja 0x1400b9fd0
mov r15d, 0x110000
bt eax, ecx
jae 0x1400b9fd0
cmp r15d, 0x110000
jne 0x1400b9fe0
mov r15d, 0x110000
cmp r13, r14
je 0x1400ba184
movzx ecx, byte [r13]
test cl, cl
jns 0x1400b9f00
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [r13 + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400b9f9a
movzx r10d, byte [r13 + 2]
shl r9d, 6
and r10d, 0x3f
or r10d, r9d
cmp cl, 0xf0
jb 0x1400b9fb1
movzx ecx, byte [r13 + 3]
and edx, 7
shl edx, 0x12
shl r10d, 6
and ecx, 0x3f
or ecx, r10d
or ecx, edx
cmp ecx, 0x110000
je 0x1400ba184
add r13, 4
cmp ecx, 0xd
jbe 0x1400b9f0c
jmp 0x1400b9fd0
add r13, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400b9f0c
jmp 0x1400b9fd0
add r13, 3
shl edx, 0xc
or r10d, edx
mov ecx, r10d
cmp ecx, 0xd
jbe 0x1400b9f0c
nop word [rax + rax]
mov r15d, ecx
cmp r15d, 0x110000
je 0x1400b9f28
cmp r15d, 0x5c
je 0x1400b9ff0
cmp r15d, 0x2f
jne 0x1400ba184
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400ba008
cmp r15d, 0x5c
jne 0x1400ba008
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov eax, 0x2600
mov rbx, r13
jmp 0x1400ba046
inc rbx
cmp ecx, 0xd
ja 0x1400ba0e0
mov edx, 0x110000
bt eax, ecx
jae 0x1400ba0e0
cmp edx, 0x110000
jne 0x1400ba0ee
cmp rbx, r14
je 0x1400ba1e4
movzx ecx, byte [rbx]
test cl, cl
jns 0x1400ba020
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [rbx + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400ba0ab
movzx r10d, byte [rbx + 2]
shl r9d, 6
and r10d, 0x3f
or r10d, r9d
cmp cl, 0xf0
jb 0x1400ba0c2
movzx ecx, byte [rbx + 3]
and edx, 7
shl edx, 0x12
shl r10d, 6
and ecx, 0x3f
or ecx, r10d
or ecx, edx
cmp ecx, 0x110000
je 0x1400ba1e4
add rbx, 4
cmp ecx, 0xd
jbe 0x1400ba02c
jmp 0x1400ba0e0
add rbx, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400ba02c
jmp 0x1400ba0e0
add rbx, 3
shl edx, 0xc
or r10d, edx
mov ecx, r10d
cmp ecx, 0xd
jbe 0x1400ba02c
nop dword [rax + rax]
mov edx, ecx
cmp edx, 0x110000
je 0x1400ba046
cmp edx, 0x2f
je 0x1400ba0fc
cmp edx, 0x5c
jne 0x1400ba1e4
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400ba113
cmp edx, 0x5c
jne 0x1400ba113
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 6
jbe 0x1400baae8
movabs rbp, 0x8000000000000000
mov rax, qword [rdi + 8]
mov dword [rax + rdx + 3], 0x2f2f3a65
mov dword [rax + rdx], 0x656c6966
add rdx, 7
mov qword [rdi + 0x10], rdx
lea rcx, [rsp + 0x70]
mov rdx, rbx
mov r8, r14
call fcn.1400bd2d0
mov r14, qword [rsp + 0x70]
cmp r14, rbp
jne 0x1400ba269
movzx ebx, byte [rsp + 0x78]
mov byte [rsi + 8], bl
mov qword [rsi], rbp
cmp qword [rdi], 0
jne 0x1400bab8e
jmp 0x1400baba0
test r8, r8
je 0x1400ba3a1
cmp r15d, 0x23
je 0x1400ba2ec
cmp r15d, 0x3f
je 0x1400ba346
cmp r15d, 0x110000
jne 0x1400ba38b
cmp dword [r8 + 0x20], 0
je 0x1400ba841
mov ebx, dword [r8 + 0x24]
mov r14, qword [r8 + 8]
test rbx, rbx
je 0x1400ba9c1
cmp qword [r8 + 0x10], rbx
jbe 0x1400ba9ff
cmp byte [r14 + rbx], 0xbf
jg 0x1400baa05
jmp 0x1400baf85
mov qword [rsp + 0xc8], rbp
mov rax, qword [rdi]
mov rbp, qword [rdi + 0x10]
sub rax, rbp
cmp rax, 6
jbe 0x1400baab7
mov rax, qword [rdi + 8]
mov dword [rax + rbp + 3], 0x2f2f3a65
mov dword [rax + rbp], 0x656c6966
add rbp, 7
mov qword [rdi + 0x10], rbp
mov rcx, r13
mov rdx, r14
call fcn.1400bcf90
xor r12d, r12d
mov ebx, 7
mov r8, qword [rsp + 0x178]
test r8, r8
je 0x1400ba8ef
test al, al
jne 0x1400ba8ef
cmp dword [r8 + 0x18], 0
je 0x1400ba461
lea rax, [r8 + 0x1c]
mov ecx, dword [rax]
mov edx, dword [r8 + 0x3c]
cmp edx, ecx
jbe 0x1400ba47e
jmp 0x1400baf85
mov r15, qword [rsp + 0x78]
mov r8, qword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xc8], rax
mov r12, qword [rsp + 0x98]
mov bl, 1
test r8, r8
je 0x1400bac76
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.1400be4d0
mov rax, qword [rsp + 0x70]
lea r13, [rbp + 2]
cmp rax, r13
jne 0x1400ba4be
movzx ebx, byte [rsp + 0x78]
test r14, r14
je 0x1400ba16f
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
mov byte [rsi + 8], bl
mov qword [rsi], rbp
cmp qword [rdi], 0
jne 0x1400bab8e
jmp 0x1400baba0
mov rax, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rax
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x20], r14
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov r9, rbp
call fcn.1400bbe00
jmp 0x1400baba0
cmp dword [r8 + 0x18], 0
mov qword [rsp + 0xc8], rbp
je 0x1400ba84e
lea rax, [r8 + 0x1c]
mov eax, dword [rax]
mov rbx, qword [r8 + 8]
test rax, rax
je 0x1400ba86c
mov r13, qword [r8 + 0x10]
cmp r13, rax
jbe 0x1400ba87b
cmp byte [rbx + rax], 0xbf
mov r13, rax
jg 0x1400bab12
jmp 0x1400baf85
mov r15, r8
mov rcx, rbp
mov rdx, r14
call fcn.1400bcf90
test al, al
je 0x1400ba4a7
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 7
jbe 0x1400baad1
mov rax, qword [rdi + 8]
movabs rcx, 0x2f2f2f3a656c6966
mov qword [rax + rdx], rcx
add qword [rdi + 0x10], 8
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rbp
lea r8, [rsp + 0x70]
mov r9d, 7
mov rcx, rdi
xor edx, edx
call fcn.1400b8790
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400bc630
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400bab73
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movdqa xmm0, xmmword [0x140191140]
movdqu xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], 7
mov byte [rsi + 0x40], 0
jmp 0x1400baba0
cmp dword [r8 + 0x20], 0
je 0x1400ba9cc
lea rax, [r8 + 0x24]
mov ecx, dword [rax]
mov edx, dword [r8 + 0x3c]
cmp edx, ecx
ja 0x1400baf85
mov rax, qword [r8 + 8]
mov r8, qword [r8 + 0x10]
test rdx, rdx
je 0x1400ba5dd
cmp r8, rdx
jbe 0x1400ba5d7
cmp byte [rax + rdx], 0xc0
jge 0x1400ba5dd
jmp 0x1400baf85
mov rcx, r15
cmp dword [r15 + 0x18], 0
je 0x1400baa7c
lea rax, [rcx + 0x1c]
jmp 0x1400baa8a
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
lea rdx, [rbp + 1]
cmp rax, rdx
jle 0x1400ba4f9
cmp rcx, 9
jne 0x1400ba4f9
movabs rdx, 0x736f686c61636f6c
xor rdx, qword [r8]
movzx r9d, byte [r8 + 8]
xor r9, 0x74
or r9, rdx
je 0x1400bac5e
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xe0], rcx
lea rax, [rsp + 0xd0]
mov qword [rsp + 0xf8], rax
lea rax, [0x1400bdc10]
mov qword [rsp + 0x100], rax
lea rax, str.corrupt_deflate_stream
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0xf8]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rdx, method..virtual_0
lea r8, [rsp + 0x70]
mov rcx, rdi
call fcn.14000be90
test al, al
jne 0x1400baf85
mov rax, qword [rsp + 0xd0]
mov rbx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xf0], rcx
xor ecx, ecx
cmp rax, r13
lea rdx, [rbp + rax + 1]
cmovl rcx, rdx
test rcx, rcx
je 0x1400bac0a
cmp rcx, 1
jne 0x1400bac1e
mov r13b, 2
mov qword [rsp + 0x68], rcx
jmp 0x1400bac2d
jne 0x1400baf85
test rcx, rcx
je 0x1400ba5f8
cmp r8, rcx
jbe 0x1400ba5f2
cmp byte [rax + rcx], 0xbf
jg 0x1400ba5f8
jmp 0x1400baf85
jne 0x1400baf85
lea rbx, [rax + rdx]
sub rcx, rdx
mov qword [rsp + 0x68], r8
mov qword [rsp + 0xc0], rax
test rcx, rcx
je 0x1400baf85
cmp byte [rbx], 0x2f
jne 0x1400baf85
inc rbx
dec rcx
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], 1
movabs rdx, 0x2f0000002f
mov qword [rsp + 0xa8], rdx
mov word [rsp + 0xb0], 1
xor edx, edx
movdqa xmm0, xmmword [0x140191120]
movdqa xmm1, xmmword [0x140191130]
movabs r9, 0x8080808080808080
mov r10, rbx
mov r11, rcx
cmp r11, 0x10
jae 0x1400ba6d8
cmp rcx, rdx
je 0x1400ba7a4
xor r8d, r8d
nop word cs:[rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400ba774
inc r8
cmp r11, r8
jne 0x1400ba6c0
jmp 0x1400ba7a4
lea r12, [r10 + 7]
and r12, 0xfffffffffffffff8
sub r12, r10
je 0x1400ba715
cmp r12, r11
cmovae r12, r11
test r12, r12
je 0x1400ba715
xor r8d, r8d
nop word cs:[rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400ba774
inc r8
cmp r12, r8
jne 0x1400ba700
lea r8, [r11 - 0x10]
jmp 0x1400ba720
lea r8, [r11 - 0x10]
xor r12d, r12d
jmp 0x1400ba725
cmp r12, r8
ja 0x1400ba754
movdqu xmm2, xmmword [r10 + r12]
movdqa xmm3, xmm2
pxor xmm3, xmm0
paddq xmm3, xmm1
pandn xmm2, xmm3
pshufd xmm3, xmm2, 0xee
por xmm3, xmm2
movq rax, xmm3
test rax, r9
jne 0x1400ba754
add r12, 0x10
jmp 0x1400ba720
sub r11, r12
je 0x1400ba7a4
add r10, r12
xor r8d, r8d
nop
cmp byte [r10 + r8], 0x2f
je 0x1400ba771
inc r8
cmp r11, r8
jne 0x1400ba760
jmp 0x1400ba7a4
add r8, r12
add r8, rdx
mov rdx, r8
inc rdx
mov qword [rsp + 0x90], rdx
je 0x1400ba794
cmp rcx, rdx
jb 0x1400ba794
mov al, 0x2f
cmp byte [rbx + r8], al
je 0x1400ba7a7
lea r10, [rbx + rdx]
mov r11, rcx
sub r11, rdx
jae 0x1400ba6a0
mov r8, rcx
cmp r8, 2
jne 0x1400ba7f1
movzx eax, byte [rbx]
and al, 0xdf
add al, 0xbf
cmp al, 0x19
ja 0x1400ba7f1
cmp byte [rbx + 1], 0x3a
jne 0x1400ba7f1
cmp rbp, qword [rdi]
jne 0x1400ba7d2
mov rcx, rdi
mov rdx, rbp
call fcn.1400c0460
mov rbp, qword [rdi + 0x10]
mov rax, qword [rdi + 8]
mov byte [rax + rbp], 0x2f
inc qword [rdi + 0x10]
mov r8d, 2
mov rcx, rdi
mov rdx, rbx
call fcn.14002b560
jmp 0x1400ba834
mov rax, qword [rsp + 0x178]
movzx r12d, byte [rax + 0x40]
test r12b, r12b
je 0x1400ba834
mov ecx, dword [rax + 0x34]
mov ebx, dword [rax + 0x38]
cmp ecx, ebx
mov r9, qword [rsp + 0xc0]
mov rax, qword [rsp + 0x68]
ja 0x1400baf85
test rcx, rcx
je 0x1400ba88c
cmp rax, rcx
jbe 0x1400ba886
cmp byte [r9 + rcx], 0xc0
jge 0x1400ba88c
jmp 0x1400baf85
xor r12d, r12d
mov ebx, 7
jmp 0x1400ba8ef
mov r14, qword [r8 + 8]
mov rbx, qword [r8 + 0x10]
jmp 0x1400baa05
cmp dword [r8 + 0x20], 0
je 0x1400bab0a
lea rax, [r8 + 0x24]
mov eax, dword [rax]
mov rbx, qword [r8 + 8]
test rax, rax
jne 0x1400ba36c
mov r15, r8
mov rbp, qword [rdi + 0x10]
xor r13d, r13d
jmp 0x1400bab28
je 0x1400bab12
jmp 0x1400baf85
jne 0x1400baf85
test rbx, rbx
je 0x1400ba8a8
cmp rax, rbx
jbe 0x1400ba8a2
cmp byte [r9 + rbx], 0xbf
jg 0x1400ba8a8
jmp 0x1400baf85
jne 0x1400baf85
add r9, rcx
sub rbx, rcx
mov rax, qword [rdi]
sub rax, rbp
cmp rax, rbx
jb 0x1400baf87
mov rcx, qword [rdi + 8]
add rcx, rbp
mov rdx, r9
mov r8, rbx
call sub.msvcrt.dll_memcpy
add rbp, rbx
mov qword [rdi + 0x10], rbp
mov rax, qword [rsp + 0x178]
movdqu xmm0, xmmword [rax + 0x41]
movdqa xmmword [rsp + 0xd0], xmm0
mov rbx, rbp
add r15d, 0xffffffdd
cmp r15d, 0x39
mov rcx, qword [rsp + 0xc8]
ja 0x1400ba914
movabs rax, 0x200000010001001
bt rax, r15
jae 0x1400ba914
mov r13, rcx
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, rbx
call fcn.1400b8790
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
movzx r8d, byte [rsp + 0x170]
mov r9d, 4
call fcn.1400bc630
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400bab73
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
movdqa xmm0, xmmword [rsp + 0xd0]
movdqu xmmword [rsi + 0x41], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], ebx
mov dword [rsi + 0x3c], ebx
mov byte [rsi + 0x40], r12b
jmp 0x1400baba0
mov r15, r8
mov r12, qword [rdi + 0x10]
xor ebx, ebx
jmp 0x1400baa1b
mov ebx, dword [r8 + 0x3c]
mov rax, qword [r8 + 8]
mov r8, qword [r8 + 0x10]
mov rcx, r8
test rbx, rbx
je 0x1400baf6c
mov rcx, r8
sub rcx, rbx
jbe 0x1400baf6a
cmp byte [rax + rbx], 0xbf
jg 0x1400baf6c
jmp 0x1400baf85
jne 0x1400baf85
mov r15, r8
mov rax, qword [rdi]
mov r12, qword [rdi + 0x10]
sub rax, r12
cmp rax, rbx
jb 0x1400bafa4
mov rcx, qword [rdi + 8]
add rcx, r12
mov rdx, r14
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r12, rbx
mov qword [rdi + 0x10], r12
mov qword [rsi + 0x10], r12
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
movzx eax, byte [r15 + 0x50]
mov byte [rsi + 0x50], al
movups xmm0, xmmword [r15 + 0x40]
movups xmmword [rsi + 0x40], xmm0
mov eax, dword [r15 + 0x3c]
mov rcx, qword [r15 + 0x18]
mov qword [rsi + 0x18], rcx
mov dword [rsi + 0x20], 0
mov ecx, dword [r15 + 0x28]
mov dword [rsi + 0x28], ecx
movdqu xmm0, xmmword [r15 + 0x2c]
movdqu xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], eax
jmp 0x1400baba0
cmp dword [rcx + 0x20], 0
je 0x1400bae26
lea rax, [rcx + 0x24]
mov r12, rbp
mov eax, dword [rax]
mov rbx, qword [rcx + 8]
test rax, rax
je 0x1400baaff
mov rbp, qword [rcx + 0x10]
cmp rbp, rax
jbe 0x1400babff
cmp byte [rbx + rax], 0xbf
mov rbp, rax
jg 0x1400bae31
jmp 0x1400baf85
mov r8d, 7
mov rcx, rdi
mov rdx, rbp
call fcn.1400938d0
mov rbp, qword [rdi + 0x10]
jmp 0x1400ba200
mov r8d, 8
mov rcx, rdi
call fcn.1400938d0
mov rdx, qword [rdi + 0x10]
jmp 0x1400ba3b5
mov r8d, 7
mov rcx, rdi
call fcn.1400938d0
mov rdx, qword [rdi + 0x10]
jmp 0x1400ba127
mov r13, qword [rdi + 0x10]
xor ebp, ebp
jmp 0x1400bae44
mov rbx, qword [r8 + 8]
mov r13, qword [r8 + 0x10]
mov r15, r8
mov rax, qword [rdi]
mov rbp, qword [rdi + 0x10]
sub rax, rbp
cmp rax, r13
jb 0x1400bafbb
mov rcx, qword [rdi + 8]
add rcx, rbp
mov rdx, rbx
mov r8, r13
call sub.msvcrt.dll_memcpy
add rbp, r13
mov qword [rdi + 0x10], rbp
mov ebx, dword [r15 + 0x2c]
mov qword [rsp + 0x28], r14
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
mov r8d, r12d
mov r9d, ebx
call fcn.1400bc630
mov eax, dword [rsp + 0x70]
cmp eax, 2
jne 0x1400babb5
movzx eax, byte [rsp + 0x74]
mov byte [rsi + 8], al
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rdi], 0
je 0x1400baba0
mov r8, qword [rdi + 8]
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
nop
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [r15 + 0x40]
movups xmmword [rsi + 0x40], xmm0
movzx r8d, byte [r15 + 0x50]
mov byte [rsi + 0x50], r8b
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov eax, dword [r15 + 0x28]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x2c], ebx
movdqu xmm0, xmmword [r15 + 0x30]
movdqu xmmword [rsi + 0x30], xmm0
jmp 0x1400baba0
je 0x1400bae31
jmp 0x1400baf85
cmp qword [rsp + 0xf0], 0
setne r13b
mov qword [rsp + 0x68], rcx
jmp 0x1400bac2d
mov rcx, rbx
shr rcx, 0x20
mov qword [rsp + 0x68], rcx
mov r13b, 3
movabs rcx, 0x8000000000000002
cmp rax, rcx
jl 0x1400bac52
test rax, rax
je 0x1400bac52
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0xc0], rbx
xor ebx, ebx
jmp 0x1400bac86
test rax, rax
je 0x1400bac76
mov rcx, qword [0x140228110]
xor r13d, r13d
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x1400bac79
xor r13d, r13d
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x68], rax
test r14, r14
je 0x1400bac9c
mov rcx, qword [0x140228110]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
mov r15, qword [rdi + 0x10]
mov rax, r15
shr rax, 0x20
jne 0x1400bad04
test r13b, r13b
setne byte [rsp + 0xd0]
test bl, bl
je 0x1400bad1a
mov rax, r15
cmp r15, qword [rdi]
jne 0x1400baccf
mov rcx, rdi
mov rdx, r15
call fcn.1400c0460
mov rax, qword [rdi + 0x10]
mov rcx, qword [rdi + 8]
mov byte [rcx + rax], 0x2f
inc qword [rdi + 0x10]
mov qword [rsp + 0x28], r12
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0xd0]
mov rcx, rdi
xor edx, edx
mov r9, r15
call fcn.1400b8790
jmp 0x1400bad39
mov byte [rsi + 8], 9
mov qword [rsi], rbp
cmp qword [rdi], 0
jne 0x1400bab8e
jmp 0x1400baba0
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0xd0]
mov rcx, rdi
xor edx, edx
mov r9, qword [rsp + 0xc8]
call fcn.1400bd700
mov rbx, rax
mov r12, rdx
cmp byte [rsp + 0xd0], 0
jne 0x1400bad6d
lea r13, [rsp + 0x70]
mov rcx, r13
mov rdx, rdi
mov r8, r15
call fcn.1400c0670
mov rcx, r13
call fcn.140004650
mov r15d, 7
xor r13d, r13d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x70]
mov rdx, rdi
movzx r8d, byte [rsp + 0x170]
mov r9d, 4
call fcn.1400bc630
mov eax, dword [rsp + 0x70]
cmp eax, 2
jne 0x1400badb6
movzx eax, byte [rsp + 0x74]
mov byte [rsi + 8], al
mov qword [rsi], rbp
cmp qword [rdi], 0
jne 0x1400bab8e
jmp 0x1400baba0
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rsi], xmm0
mov r8, qword [rsp + 0xc0]
mov dword [rsi + 0x41], r8d
mov r8, qword [rsp + 0x68]
mov dword [rsi + 0x45], r8d
mov r8, qword [rsp + 0xf0]
mov qword [rsi + 0x49], r8
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], r15d
mov dword [rsi + 0x3c], r15d
mov byte [rsi + 0x40], r13b
jmp 0x1400baba0
mov r12, rbp
mov rbx, qword [rcx + 8]
mov rbp, qword [rcx + 0x10]
mov rax, qword [rdi]
mov r13, qword [rdi + 0x10]
sub rax, r13
cmp rax, rbp
jb 0x1400bafd2
mov rcx, qword [rdi + 8]
add rcx, r13
mov rdx, rbx
mov r8, rbp
call sub.msvcrt.dll_memcpy
add r13, rbp
mov qword [rdi + 0x10], r13
mov ebx, dword [r15 + 0x3c]
cmp r13, rbx
je 0x1400baeab
mov rax, qword [rdi + 8]
test rbx, rbx
je 0x1400bae82
sub r13, rbx
jbe 0x1400baf85
cmp byte [rax + rbx], 0xbf
jle 0x1400baf85
cmp r13, 2
jne 0x1400bae9e
movzx ecx, byte [rax + rbx]
and cl, 0xdf
add cl, 0xbf
cmp cl, 0x19
ja 0x1400bae9e
cmp byte [rax + rbx + 1], 0x3a
je 0x1400baeab
mov rcx, rdi
xor edx, edx
mov r8, rbx
call fcn.1400bcdb0
mov byte [rsp + 0x70], 1
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, rbx
call fcn.1400b8790
mov rcx, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rcx
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov r9d, dword [r15 + 0x2c]
mov ecx, dword [r15 + 0x30]
mov r8d, dword [r15 + 0x34]
mov r10d, dword [r15 + 0x38]
lea r11, [r15 + 0x40]
movzx edi, word [r15 + 0x28]
movzx ebp, word [r15 + 0x2a]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], ebx
mov word [rsp + 0x48], bp
mov word [rsp + 0x40], di
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], ecx
lea rdx, [rsp + 0x70]
mov rcx, rsi
xor r8d, r8d
call fcn.1400b9620
jmp 0x1400baba0
jne 0x1400baf85
add rbx, rax
mov qword [rsp + 0x68], r8
mov qword [rsp + 0xc0], rax
test rcx, rcx
jne 0x1400ba615
ud2
mov rcx, rdi
mov rdx, rbp
mov r8, rbx
mov rbp, r9
call fcn.1400938d0
mov r9, rbp
mov rbp, qword [rdi + 0x10]
jmp 0x1400ba8bd
mov rcx, rdi
mov rdx, r12
mov r8, rbx
call fcn.1400938d0
mov r12, qword [rdi + 0x10]
jmp 0x1400baa1b
mov rcx, rdi
mov rdx, rbp
mov r8, r13
call fcn.1400938d0
mov rbp, qword [rdi + 0x10]
jmp 0x1400bab28
mov rcx, rdi
mov rdx, r13
mov r8, rbp
call fcn.1400938d0
mov r13, qword [rdi + 0x10]
jmp 0x1400bae44