Function at 0x140157d40
Capabilities:
Get geographical location

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x3d8]
sub rsp, 0x4d8
mov rax, qword [0x1402bb040]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
mov edi, 0x1e
mov esi, edx
mov rdx, qword [0x1402c5ff0]
cmp r8, rdi
mov r12, rcx
cmovae rdi, r8
mov qword [rsp + 0x40], rdi
lea rcx, [rdi + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor ecx, ecx
mov qword [rsp + 0x30], rax
mov r11, rax
mov qword [rsp + 0x38], rcx
mov r15d, ecx
mov qword [rax], rdi
add rax, 0x10
mov qword [r11 + 8], rax
mov word [rdi + rax], cx
test byte [0x1402c1490], 1
mov rbx, qword [r11 + 8]
jne 0x140157e97
lock bts qword [0x1402c1490], 0x1f
setb al
test al, al
jne 0x140157e7b
mov r9d, 4
lea r8, [rbp - 0x70]
mov edx, 0xe
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
test eax, eax
je 0x140157e13
mov rax, qword ds:[rbp - 0x70]
test ax, ax
je 0x140157e13
cmp word [rbp - 0x6e], r15w
jne 0x140157e13
mov word [0x1402c14a0], ax
mov r9d, 4
lea r8, [rbp - 0x70]
mov edx, 0xf
mov ecx, 0x400
call qword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
test eax, eax
je 0x140157e4e
mov rax, qword [rbp - 0x70]
test ax, ax
je 0x140157e4e
nop word [rax + rax]
cmp word [rbp - 0x6e], r15w
jne 0x140157e4e
mov word [0x1402c1520], ax
cmp word [0x1402c14a0], 0x2e
je 0x140157e6d
lea rdx, [0x14023aad8]
xor ecx, ecx
call fcn.1401f4a28
mov qword [0x1402c93f8], rax
lea rcx, [0x1402c1490]
call sym.SystemInformer.exe_Ordinal_1386
jmp 0x140157e92
test byte [0x1402c1490], 1
jne 0x140157e97
xor edx, edx
lea rcx, [0x1402c1490]
call sym.SystemInformer.exe_Ordinal_1388
mov r11, qword [rsp + 0x30]
test esi, esi
je 0x1401595af
mov qword [rsp + 0x518], r13
lea r8, [0x140000000]
mov qword [rsp + 0x4d0], r14
mov edx, 1
movaps xmmword [rsp + 0x4c0], xmm6
mov r9d, 0xa2
movsd xmm6, qword [0x140293a18]
mov r10d, 2
movaps xmmword [rsp + 0x4b0], xmm7
movsd xmm7, qword [0x1402939f0]
nop word [rax + rax]
mov r14, r12
mov qword [rsp + 0x58], r12
add r12, 0x20
mov qword [rbp - 0x80], r15
dec esi
mov qword [rbp - 0x78], r12
xor r11d, r11d
mov dword [rsp + 0x6c], esi
mov r13d, dword [r14]
mov r12d, r11d
mov eax, r13d
and eax, 0x3f
cmp eax, 0xd
ja case.default.0x140157f34
mov ecx, dword [r8 + rax*4 + 0x1595e4]
add rcx, r8
jmp rcx
lea rsi, [r15 + 2]
cmp rdi, rsi
jae 0x140157fba
mov rdx, qword [0x1402c5ff0]
lea rax, ds:[rdi + rdi]
cmp rax, rsi
mov rbx, rsi
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov r8, r15
mov rdi, rax
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [rbx + rcx], dx
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rax + 8]
mov rdx, qword [rbx + 8]
call fcn.14020c7e0
lea rcx, ds:[rbx - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140157faa
call fcn.140143da0
mov rax, qword [rdi + 8]
shr r15, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + r15*2]
movzx eax, word [r14 + 0x10]
mov r15, rsi
mov word [rbx], ax
add rbx, 2
mov qword [rsp + 0x38], rsi
jmp case.default.0x140157f34
mov rcx, qword [r14 + 0x10]
add rcx, r15
cmp rdi, rcx
jae 0x14015805d
mov rdx, qword [0x1402c5ff0]
lea rax, ds:[rdi + rdi]
cmp rax, rcx
mov rbx, rcx
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov r8, r15
mov rdi, rax
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [rbx + rcx], dx
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rax + 8]
mov rdx, qword [rbx + 8]
call fcn.14020c7e0
lea rcx, ds:[rbx - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x14015804a
call fcn.140143da0
mov rax, qword [rdi + 8]
mov rcx, r15
shr rcx, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + rcx*2]
mov r8, qword [r14 + 0x10]
mov rcx, rbx
mov rdx, qword [r14 + 0x18]
call fcn.14020c7e0
mov rax, qword [r14 + 0x10]
shr rax, 1
add r15, qword [r14 + 0x10]
jmp 0x140159423
mov rdi, qword [r14 + 0x10]
xorps xmm1, xmm1
mov rdx, rdi
mov ecx, edi
and rdx, 0xfffffffffffffff1
and ecx, 0xf
je 0x1401580b4
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
shr eax, cl
bsf ecx, eax
mov dword [rsp + 0x48], ecx
je 0x1401580b0
mov edx, ecx
shr rdx, 1
jmp 0x1401580f8
add rdx, 0x10
movdqu xmm0, xmmword [rdx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x48], ecx
jne 0x1401580ea
nop dword [rax]
movdqu xmm0, xmmword [rdx + 0x10]
add rdx, 0x10
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf ecx, eax
mov dword [rsp + 0x48], ecx
je 0x1401580d0
sub rdx, rdi
mov eax, ecx
sar rdx, 1
shr rax, 1
add rdx, rax
mov r8, qword [rsp + 0x40]
lea rdi, [rdx + rdx]
lea rsi, [rdi + r15]
cmp r8, rsi
jae 0x140158182
mov rdx, qword [0x1402c5ff0]
lea rax, [r8 + r8]
cmp rax, rsi
mov r12, rsi
cmovae r12, rax
mov qword [rsp + 0x40], r12
lea rcx, [r12 + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov r8, r15
mov rbx, rax
mov qword [rax], r12
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [r12 + rcx], dx
mov r12, qword [rsp + 0x30]
mov rcx, qword [rax + 8]
mov rdx, qword [r12 + 8]
call fcn.14020c7e0
lea rcx, [r12 - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140158172
call fcn.140143da0
mov rax, qword [rbx + 8]
shr r15, 1
mov qword [rsp + 0x30], rbx
lea rbx, [rax + r15*2]
mov rdx, qword [r14 + 0x10]
mov r8, rdi
mov rcx, rbx
call fcn.14020c7e0
shr rdi, 1
mov r15, rsi
mov qword [rsp + 0x38], rsi
lea rbx, [rbx + rdi*2]
jmp case.default.0x140157f34
cmp r13d, 3
jne 0x1401581b5
mov rsi, qword [r14 + 0x18]
mov rdi, qword [r14 + 0x10]
jmp 0x1401581c9
mov rsi, qword [r14 + 0x10]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rsi + rdi], r11b
jne 0x1401581c0
mov r8d, edi
lea rcx, [rsp + 0x60]
mov rdx, rsi
call qword [sym.imp.ntdll.dll_RtlMultiByteToUnicodeSize]
nop word [rax + rax]
test eax, eax
js case.default.0x140157f34
lfence
mov edx, dword [rsp + 0x60]
mov r8, qword [rsp + 0x40]
lea rcx, [r15 + rdx]
cmp r8, rcx
jae 0x140158288
mov rdx, qword [0x1402c5ff0]
lea rax, [r8 + r8]
cmp rax, rcx
mov r12, rcx
cmovae r12, rax
mov qword [rsp + 0x40], r12
lea rcx, [r12 + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov r8, r15
mov rbx, rax
mov qword [rax], r12
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [r12 + rcx], dx
mov r12, qword [rsp + 0x30]
mov rcx, qword [rax + 8]
mov rdx, qword [r12 + 8]
call fcn.14020c7e0
lea rcx, [r12 - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140158271
call fcn.140143da0
mov rax, qword [rbx + 8]
mov rcx, r15
mov edx, dword [rsp + 0x60]
shr rcx, 1
mov qword [rsp + 0x30], rbx
lea rbx, [rax + rcx*2]
mov r9, rsi
mov dword [rsp + 0x20], edi
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.ntdll.dll_RtlMultiByteToUnicodeN]
nop dword [rax + rax]
test eax, eax
js case.default.0x140157f34
mov ecx, dword [rsp + 0x60]
mov eax, ecx
shr rax, 1
add r15, rcx
jmp 0x140159423
mov eax, dword [r14 + 0x10]
mov r12d, eax
mov r8d, eax
shr r12d, 0x1f
neg r8d
test eax, eax
cmovns r8d, eax
jmp 0x1401582d6
mov r8d, dword [r14 + 0x10]
mov r10d, 0xa
bt r13d, 8
jae 0x1401582f3
movzx eax, byte [r14 + 0xa]
cmp al, 2
jb 0x1401582f3
cmp al, 0x45
ja 0x1401582f3
mov r10d, eax
bt r13d, 0x1d
lea r9, str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ_________._:_________
lea rax, [0x14028e380]
mov r14d, r11d
cmovae r9, rax
lea rsi, [rbp + 0x39e]
test r8d, r8d
je 0x1401583a2
bt r13d, 0x10
jae 0x140158380
mov edi, r11d
nop word [rax + rax]
xor edx, edx
mov eax, r8d
div r10d
inc r14d
inc edi
mov r8d, eax
movsx ecx, byte [rdx + r9]
mov word [rsi], cx
sub rsi, 2
cmp edi, 3
jne 0x140158368
test eax, eax
je 0x14015836c
movzx eax, word [0x1402c1520]
mov word [rsi], ax
sub rsi, 2
inc r14d
jmp 0x140158324
test eax, eax
jne 0x140158330
mov rdi, qword [rsp + 0x40]
mov edx, 1
test r12d, r12d
je 0x1401583ba
mov ecx, edx
jmp 0x1401583c5
xor edx, edx
mov eax, r8d
div r10d
inc r14d
mov r8d, eax
movsx ecx, byte [rdx + r9]
mov word [rsi], cx
sub rsi, 2
test eax, eax
jne 0x140158380
nop
jmp 0x140158371
mov eax, 0x30
lea rsi, [rbp + 0x39c]
mov word [rbp + 0x39e], ax
mov r14d, edx
jmp 0x140158376
bt r13d, 0x11
mov ecx, r11d
cmovb ecx, edx
and r13d, 0x50000
cmp r13d, 0x40000
mov r13, qword [rsp + 0x58]
jne 0x1401583f8
movzx edx, word [r13 + 6]
lea eax, [rcx + r14]
cmp eax, edx
jae 0x1401583f8
mov eax, edx
or r12d, 4
sub eax, ecx
sub eax, r14d
mov dword [rsp + 0x64], eax
add ecx, eax
lea eax, [rcx + r14]
lea r15, [r15 + rax*2]
cmp rdi, r15
jae 0x140158483
mov rdx, qword [0x1402c5ff0]
lea rax, [rdi + rdi]
cmp rax, r15
mov rbx, r15
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov rdi, rax
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [rcx + rbx], dx
mov rdx, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rax + 8]
mov r8, rbx
mov rdx, qword [rdx + 8]
call fcn.14020c7e0
mov rcx, qword [rsp + 0x30]
mov edx, 0xffffffff
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140158473
call fcn.140143da0
mov rax, qword [rdi + 8]
shr rbx, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + rbx*2]
test r12b, 1
je 0x140158490
mov word [rbx], 0x2d
jmp 0x14015849f
test dword [r13], 0x20000
je 0x1401584a3
mov word [rbx], 0x2b
add rbx, 2
test r12b, 4
je 0x1401584c7
mov edx, dword [rsp + 0x64]
test rdx, rdx
je 0x1401584c3
mov eax, 0x30
mov rdi, rbx
movzx eax, ax
mov rcx, rdx
rep stosw word [rdi], ax
lea rbx, [rbx + rdx*2]
mov edi, r14d
lea rdx, [rsi + 2]
add rdi, rdi
mov rcx, rbx
mov r8, rdi
call fcn.14020c7e0
mov r14, qword [rsp + 0x58]
add rbx, rdi
jmp 0x140159427
mov ecx, 0x10
mov rax, r14
mov rax, qword [rax + rcx]
mov r12, rax
mov rdi, rax
shr r12, 0x3f
neg rdi
cmovs rdi, rax
jmp 0x14015850c
mov rdi, qword [r14 + 0x10]
mov r9d, 0xa
bt r13d, 8
jae 0x14015852b
movzx eax, byte ds:[r14 + 0xa]
cmp al, 2
jb 0x14015852b
cmp al, 0x45
ja 0x14015852b
mov r9d, eax
bt r13d, 0x1d
lea r10, str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ_________._:_________
lea rax, [0x14028e380]
mov r14d, r11d
cmovae r10, rax
lea rsi, [rbp + 0x39e]
test rdi, rdi
je 0x1401585ee
bt r13d, 0x10
jae 0x1401585c0
mov r8d, r11d
nop
xor edx, edx
mov rax, rdi
div r9
mov rax, rdi
inc r14d
mov rcx, rdx
inc r8d
xor edx, edx
div r9
mov rdi, rax
mov eax, ecx
movsx ecx, byte [rax + r10]
mov word [rsi], cx
sub rsi, 2
cmp r8d, 3
jne 0x1401585a8
test rdi, rdi
je 0x1401585ad
movzx eax, word [0x1402c1520]
mov word [rsi], ax
sub rsi, 2
inc r14d
jmp 0x14015855c
test rdi, rdi
jne 0x140158560
mov edx, 1
test r12d, r12d
je 0x140158606
mov ecx, edx
jmp 0x140158611
xor edx, edx
mov rax, rdi
div r9
mov rax, rdi
inc r14d
mov rcx, rdx
xor edx, edx
div r9
mov rdi, rax
mov eax, ecx
movsx ecx, byte [rax + r10]
mov word [rsi], cx
sub rsi, 2
test rdi, rdi
jne 0x1401585c0
jmp 0x1401585ad
mov eax, 0x30
lea rsi, [rbp + 0x39c]
mov word [rbp + 0x39e], ax
mov r14d, edx
jmp 0x1401585b2
bt r13d, 0x11
mov ecx, r11d
cmovb ecx, edx
and r13d, 0x50000
cmp r13d, 0x40000
mov r13, qword [rsp + 0x58]
jne 0x140158644
movzx edx, word [r13 + 6]
lea eax, [rcx + r14]
cmp eax, edx
jae 0x140158644
mov eax, edx
or r12d, 4
sub eax, ecx
sub eax, r14d
mov dword [rsp + 0x68], eax
add ecx, eax
mov r8, qword [rsp + 0x40]
lea eax, [rcx + r14]
lea r15, [r15 + rax*2]
cmp r8, r15
jae 0x1401586d5
mov rdx, qword [0x1402c5ff0]
lea rax, [r8 + r8]
cmp rax, r15
mov rbx, r15
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
mov rdi, rax
xor edx, edx
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x30]
mov word [rbx + rcx], dx
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rdi + 8]
mov r8, rbx
mov rdx, qword [rax + 8]
call fcn.14020c7e0
mov rcx, qword [rsp + 0x30]
mov edx, 0xffffffff
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x1401586c5
nop
call fcn.140143da0
mov rax, qword [rdi + 8]
shr rbx, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + rbx*2]
test r12b, 1
je 0x1401586e2
mov word [rbx], 0x2d
jmp 0x1401586f1
test dword [r13], 0x20000
je 0x1401586f5
mov word [rbx], 0x2b
add rbx, 2
test r12b, 4
je 0x1401584c7
mov edx, dword [rsp + 0x68]
jmp 0x1401584ad
test r13b, 0x40
je 0x14015871d
movzx r8d, word [r14 + 4]
cmp r8d, r9d
jbe 0x140158723
mov r8d, r9d
jmp 0x140158723
mov r8d, 6
movss xmm0, dword [r14 + 0x10]
lea r9, [rbp - 0x5f]
mov edx, r13d
lea r15, [rbp - 0x5f]
call fcn.1401d63c0
test al, al
jne 0x140158743
mov byte [rbp - 0x5f], r12b
jmp 0x140158797
mov rdx, qword [0x1402c93f8]
test rdx, rdx
je 0x14015877a
movzx eax, byte [rbp - 0x5f]
lea rcx, [rbp - 0x5f]
test al, al
je 0x14015877a
nop dword [rax + rax]
cmp al, 0x2e
je 0x140158771
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140158760
jmp 0x14015877a
movzx eax, byte [0x1402c14a0]
mov byte [rcx], al
bt r13d, 0x1d
jae 0x140158797
lea rcx, [rbp - 0x5f]
test rdx, rdx
je 0x140158792
call fcn.1401f4054
jmp 0x140158797
call fcn.1401f3ff4
mov r9d, dword ds:[r14]
bt r9d, 0xf
jae 0x140158831
movzx eax, byte [rbp - 0x5f]
lea rcx, [rbp - 0x5f]
movzx r8d, byte [0x1402c14a0]
test al, al
je 0x1401587d0
nop word [rax + rax]
cmp al, r8b
je 0x1401587d0
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x1401587c0
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140158831
movzx eax, byte ds:[rcx]
test al, al
je 0x1401587f5
sub al, 0x45
test al, 0xdf
je 0x1401587f5
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x1401587e4
movzx eax, byte ds:[rcx - 1]
mov rdi, rcx
dec rcx
cmp al, 0x30
jne 0x14015880f
movzx eax, byte [rcx - 1]
dec rcx
cmp al, 0x30
je 0x140158804
cmp al, r8b
lea rdx, [rcx - 1]
cmovne rdx, rcx
nop word [rax + rax]
movzx eax, byte [rdi]
lea rdx, [rdx + 1]
mov byte [rdx], al
lea rdi, [rdi + 1]
test al, al
jne 0x140158820
lea rax, [rbp - 0x5f]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], r12b
jne 0x140158840
cmp byte [rbp - 0x5f], 0x2d
jne 0x140158862
dec r14d
lea r15, [rbp - 0x5e]
xor ecx, ecx
mov r12d, 1
jmp 0x140158873
bt r9d, 0x11
mov eax, 2
mov rcx, r12
cmovb r12d, eax
mov eax, r9d
and eax, 0x13000
cmp eax, 0x10000
jne 0x140158a2e
movzx eax, byte [r15]
mov rsi, r15
sub al, 0x30
mov qword [rsp + 0x50], r15
cmp al, 0xa
jae 0x1401588ad
nop dword [rax]
movzx eax, byte [rsi + 1]
inc rsi
sub al, 0x30
cmp al, 0xa
jb 0x1401588a0
mov r13d, esi
sub r13d, r15d
lea edi, [r13 + 2]
je 0x1401588c8
mov eax, 0xaaaaaaab
mul edi
mov eax, edx
shr eax, 1
dec eax
jmp 0x1401588ca
mov eax, ecx
mov r8, qword [rsp + 0x40]
lea ecx, [rax + r14]
add ecx, ecx
mov dword [rsp + 0x48], eax
test r12d, r12d
lea eax, [rcx + 2]
cmove eax, ecx
mov rcx, qword [rsp + 0x38]
add rcx, rax
cmp r8, rcx
jae 0x14015897a
lea rax, [r8 + r8]
mov rdx, rcx
cmp rax, rcx
cmovae rdx, rax
mov qword [rsp + 0x40], rdx
lea rcx, [rdx + 0x12]
mov rdx, qword [0x1402c5ff0]
call sym.SystemInformer.exe_Ordinal_1240
mov r8, qword [rsp + 0x40]
mov rbx, rax
xor edx, edx
mov qword [rax], r8
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x30]
mov word [r8 + rcx], dx
mov r8, qword [rsp + 0x38]
mov rcx, qword [rbx + 8]
mov rdx, qword [rax + 8]
call fcn.14020c7e0
mov rcx, qword [rsp + 0x30]
mov edx, 0xffffffff
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140158965
nop
call fcn.140143da0
mov rcx, qword [rsp + 0x38]
mov rax, qword [rbx + 8]
shr rcx, 1
mov qword [rsp + 0x30], rbx
lea rbx, [rax + rcx*2]
mov eax, 0xaaaaaaab
mov ecx, r13d
mul edi
shr edx, 1
lea eax, [rdx + rdx*2]
sub edi, eax
test r12b, 1
je 0x140158998
mov word [rbx], 0x2d
jmp 0x1401589a3
test r12b, 2
je 0x1401589a7
mov word [rbx], 0x2b
add rbx, 2
test r13d, r13d
je 0x1401589f0
nop dword [rax]
movsx eax, byte [r15]
dec ecx
mov word [rbx], ax
inc r15
mov eax, edi
add rbx, 2
dec edi
test eax, eax
jne 0x1401589ec
test ecx, ecx
je 0x1401589f0
movzx eax, word [0x1402c1520]
dec ecx
mov word [rbx], ax
mov edi, 1
movsx eax, byte [r15]
mov word [rbx + 2], ax
add rbx, 4
inc r15
test ecx, ecx
jne 0x1401589b0
mov r15, qword [rsp + 0x38]
test r12d, r12d
je 0x1401589fe
add r15, 2
sub r14d, r13d
mov r8, rbx
mov edx, r14d
mov rcx, rsi
mov edi, r14d
call sym.SystemInformer.exe_Ordinal_1461
mov ecx, dword [rsp + 0x48]
lea rbx, [rbx + r14*2]
mov r14, qword [rsp + 0x58]
add ecx, r13d
add rcx, rdi
lea r15, [r15 + rcx*2]
jmp 0x140159427
test r12d, r12d
mov rdx, rcx
setne dl
mov rcx, rdx
bt r9d, 0x12
jae 0x140158a6d
mov r13, qword [rsp + 0x58]
mov edi, r14d
movzx r8d, word [r13 + 6]
lea rax, [rdx + rdi]
cmp rax, r8
jae 0x140158a6d
mov ecx, r8d
or r12d, 4
sub rcx, rdi
mov rax, rcx
sub rax, rdx
mov qword [rsp + 0x70], rax
mov r13, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov r14d, r14d
lea rax, [r14 + rcx]
lea rsi, [rax*2]
add rsi, r13
cmp r8, rsi
jae 0x140158b02
mov rdx, qword [0x1402c5ff0]
lea rax, [r8 + r8]
cmp rax, rsi
mov rbx, rsi
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov r8, r13
mov rdi, rax
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [rbx + rcx], dx
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rax + 8]
mov rdx, qword [rbx + 8]
call fcn.14020c7e0
lea rcx, [rbx - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140158af2
call fcn.140143da0
mov rax, qword [rdi + 8]
shr r13, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + r13*2]
test r12b, 1
je 0x140158b0f
mov word [rbx], 0x2d
jmp 0x140158b1a
test r12b, 2
je 0x140158b1e
mov word [rbx], 0x2b
add rbx, 2
nop
test r12b, 4
je 0x140158b45
mov rdx, qword [rsp + 0x70]
test rdx, rdx
je 0x140158b41
mov eax, 0x30
mov rdi, rbx
movzx eax, ax
mov rcx, rdx
rep stosw word [rdi], ax
lea rbx, [rbx + rdx*2]
mov r8, rbx
mov rdx, r14
mov rcx, r15
call sym.SystemInformer.exe_Ordinal_1461
lea rbx, [rbx + r14*2]
mov qword [rsp + 0x38], rsi
mov r14, qword [rsp + 0x58]
mov r15, rsi
jmp case.default.0x140157f34
test r13b, 0x40
je 0x140158b7e
movzx r8d, word [r14 + 4]
cmp r8d, r9d
jbe 0x140158b84
mov r8d, r9d
jmp 0x140158b84
mov r8d, 6
movsd xmm0, qword [r14 + 0x10]
lea r9, [rbp - 0x5f]
mov edx, r13d
lea r15, [rbp - 0x5f]
call fcn.1401d6640
test al, al
jne 0x140158ba4
mov byte [rbp - 0x5f], r12b
jmp 0x140158bf7
mov rdx, qword [0x1402c93f8]
test rdx, rdx
je 0x140158bda
movzx eax, byte [rbp - 0x5f]
lea rcx, [rbp - 0x5f]
test al, al
je 0x140158bda
nop dword [rax]
cmp al, 0x2e
je 0x140158bd1
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140158bc0
jmp 0x140158bda
movzx eax, byte [0x1402c14a0]
mov byte [rcx], al
bt r13d, 0x1d
jae 0x140158bf7
lea rcx, [rbp - 0x5f]
test rdx, rdx
je 0x140158bf2
call fcn.1401f4054
jmp 0x140158bf7
call fcn.1401f3ff4
mov r9d, dword ds:[r14]
bt r9d, 0xf
jae 0x140158c91
movzx eax, byte [rbp - 0x5f]
lea rcx, [rbp - 0x5f]
movzx r8d, byte [0x1402c14a0]
test al, al
je 0x140158c30
nop word [rax + rax]
cmp al, r8b
je 0x140158c30
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140158c20
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140158c91
movzx eax, byte ds:[rcx]
test al, al
je 0x140158c55
sub al, 0x45
test al, 0xdf
je 0x140158c55
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140158c44
movzx eax, byte ds:[rcx - 1]
mov rdi, rcx
dec rcx
cmp al, 0x30
jne 0x140158c6f
movzx eax, byte [rcx - 1]
dec rcx
cmp al, 0x30
je 0x140158c64
cmp al, r8b
lea rdx, [rcx - 1]
cmovne rdx, rcx
nop word [rax + rax]
movzx eax, byte [rdi]
lea rdx, [rdx + 1]
mov byte [rdx], al
lea rdi, [rdi + 1]
test al, al
jne 0x140158c80
lea rax, [rbp - 0x5f]
mov r14, 0xffffffffffffffff
nop dword [rax]
inc r14
cmp byte [rax + r14], r12b
jne 0x140158ca0
cmp byte [rbp - 0x5f], 0x2d
jne 0x140158cc2
dec r14d
lea r15, [rbp - 0x5e]
xor ecx, ecx
mov r12d, 1
jmp 0x140158cd3
bt r9d, 0x11
mov eax, 2
mov rcx, r12
cmovb r12d, eax
mov eax, r9d
and eax, 0x13000
cmp eax, 0x10000
jne 0x140158e59
movzx eax, byte [r15]
mov rsi, r15
sub al, 0x30
mov qword [rsp + 0x50], r15
cmp al, 0xa
jae 0x140158d0d
nop dword [rax]
movzx eax, byte [rsi + 1]
inc rsi
sub al, 0x30
cmp al, 0xa
jb 0x140158d00
mov r13d, esi
sub r13d, r15d
lea edi, [r13 + 2]
je 0x140158d28
mov eax, 0xaaaaaaab
mul edi
mov eax, edx
shr eax, 1
dec eax
jmp 0x140158d2a
mov eax, ecx
mov r8, qword [rsp + 0x40]
lea ecx, [rax + r14]
add ecx, ecx
mov dword [rsp + 0x48], eax
test r12d, r12d
lea eax, [rcx + 2]
cmove eax, ecx
mov rcx, qword [rsp + 0x38]
add rcx, rax
cmp r8, rcx
jae 0x140158dda
lea rax, [r8 + r8]
mov rdx, rcx
cmp rax, rcx
cmovae rdx, rax
mov qword [rsp + 0x40], rdx
lea rcx, [rdx + 0x12]
mov rdx, qword [0x1402c5ff0]
call sym.SystemInformer.exe_Ordinal_1240
mov r8, qword [rsp + 0x40]
mov rbx, rax
xor edx, edx
mov qword [rax], r8
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x30]
mov word [r8 + rcx], dx
mov r8, qword [rsp + 0x38]
mov rcx, qword [rbx + 8]
mov rdx, qword [rax + 8]
call fcn.14020c7e0
mov rcx, qword [rsp + 0x30]
mov edx, 0xffffffff
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140158dc5
nop
call fcn.140143da0
mov rcx, qword [rsp + 0x38]
mov rax, qword [rbx + 8]
shr rcx, 1
mov qword [rsp + 0x30], rbx
lea rbx, [rax + rcx*2]
mov eax, 0xaaaaaaab
mov ecx, r13d
mul edi
shr edx, 1
lea eax, [rdx + rdx*2]
sub edi, eax
test r12b, 1
je 0x140158df8
mov word [rbx], 0x2d
jmp 0x140158e03
test r12b, 2
je 0x140158e07
mov word [rbx], 0x2b
add rbx, 2
test r13d, r13d
je 0x1401589f0
movsx eax, byte [r15]
dec ecx
mov word [rbx], ax
inc r15
mov eax, edi
add rbx, 2
dec edi
test eax, eax
jne 0x140158e50
test ecx, ecx
je 0x1401589f0
movzx eax, word [0x1402c1520]
dec ecx
mov word [rbx], ax
mov edi, 1
movsx eax, byte [r15]
mov word [rbx + 2], ax
add rbx, 4
inc r15
test ecx, ecx
jne 0x140158e10
jmp 0x1401589f0
test r12d, r12d
mov rdx, rcx
setne dl
mov rcx, rdx
bt r9d, 0x12
jae 0x140158e9a
mov r13, qword ds:[rsp + 0x58]
mov edi, r14d
movzx r8d, word [r13 + 6]
lea rax, [rdi + rdx]
cmp rax, r8
jae 0x140158e9a
mov ecx, r8d
or r12d, 4
sub rcx, rdi
mov rax, rcx
sub rax, rdx
mov qword [rsp + 0x78], rax
mov r13, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov r14d, r14d
lea rax, [r14 + rcx]
lea rsi, [rax*2]
add rsi, r13
cmp r8, rsi
jae 0x140158f2f
mov rdx, qword [0x1402c5ff0]
lea rax, [r8 + r8]
cmp rax, rsi
mov rbx, rsi
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov r8, r13
mov rdi, rax
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [rcx + rbx], dx
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rax + 8]
mov rdx, qword [rbx + 8]
call fcn.14020c7e0
lea rcx, [rbx - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140158f1f
call fcn.140143da0
mov rax, qword [rdi + 8]
shr r13, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + r13*2]
test r12b, 1
je 0x140158f3c
mov word [rbx], 0x2d
jmp 0x140158f4b
nop dword [rax]
test r12b, 2
je 0x140158f4f
mov word [rbx], 0x2b
add rbx, 2
test r12b, 4
je 0x140158b45
mov rdx, qword ds:[rsp + 0x78]
jmp 0x140158b2b
mov rdx, qword [r14 + 0x10]
xorps xmm0, xmm0
test rdx, rdx
js 0x140158f78
cvtsi2sd xmm0, rdx
jmp 0x140158f90
mov rax, rdx
mov rcx, rdx
shr rcx, 1
and eax, 1
or rcx, rax
cvtsi2sd xmm0, rcx
addsd xmm0, xmm0
test rdx, rdx
jne 0x140159030
lea rsi, ds:[r15 + 2]
cmp rdi, rsi
jae 0x14015901a
mov rdx, qword [0x1402c5ff0]
lea rax, [rdi + rdi]
cmp rax, rsi
mov rbx, rsi
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
xor edx, edx
mov r8, r15
mov rdi, rax
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
mov word [rbx + rcx], dx
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rax + 8]
mov rdx, qword [rbx + 8]
call fcn.14020c7e0
lea rcx, ds:[rbx - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x14015900a
call fcn.140143da0
mov rax, qword [rdi + 8]
shr r15, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + r15*2]
mov word [rbx], 0x30
mov r15, rsi
add rbx, 2
mov qword [rsp + 0x38], rsi
jmp case.default.0x140157f34
bt r13d, 8
jae 0x14015903e
movzx eax, byte [r14 + 0xa]
jmp 0x140159044
mov eax, dword [0x1402c29e0]
comisd xmm0, xmm6
jb 0x140159068
nop word [rax + rax]
cmp r12d, 7
jae 0x140159068
cmp r12d, eax
jae 0x140159068
mulsd xmm0, xmm7
inc r12d
comisd xmm0, xmm6
jae 0x140159050
test r13b, 0x40
je 0x140159075
movzx eax, word [r14 + 4]
jmp 0x140159078
mov eax, r10d
movzx r8d, ax
lea r14, [rbp - 0x5f]
cmp r8d, r9d
mov dword [rsp + 0x48], r11d
mov edx, 0x1804c
cmova r8d, r9d
lea r9, [rbp - 0x5f]
call fcn.1401d6640
movzx r8d, word [0x1402c14a0]
test al, al
jne 0x1401590ad
xor dl, dl
mov byte [rbp - 0x5f], dl
jmp 0x1401590df
cmp qword [0x1402c93f8], 0
movzx edx, byte [rbp - 0x5f]
je 0x1401590df
lea rcx, ds:[rbp - 0x5f]
test dl, dl
je 0x1401590df
movzx eax, dl
cmp al, 0x2e
je 0x1401590d8
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x1401590c7
jmp 0x1401590df
mov byte [rcx], r8b
movzx edx, byte [rbp - 0x5f]
lea rcx, [rbp - 0x5f]
test dl, dl
je 0x140159104
movzx eax, dl
nop word [rax + rax]
cmp al, r8b
je 0x140159104
movzx eax, byte ds:[rcx + 1]
inc rcx
test al, al
jne 0x1401590f0
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140159168
movzx eax, byte [rcx]
test al, al
je 0x140159126
sub al, 0x45
test al, 0xdf
je 0x140159126
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x140159115
movzx eax, byte [rcx - 1]
mov rdi, rcx
dec rcx
cmp al, 0x30
jne 0x14015913f
movzx eax, byte [rcx - 1]
dec rcx
cmp al, 0x30
je 0x140159134
cmp al, r8b
lea rdx, [rcx - 1]
cmovne rdx, rcx
nop word [rax + rax]
movzx eax, byte ds:[rdi]
lea rdx, [rdx + 1]
mov byte [rdx], al
lea rdi, [rdi + 1]
test al, al
jne 0x140159150
movzx edx, byte [rbp - 0x5f]
lea rax, [rbp - 0x5f]
mov r15, 0xffffffffffffffff
inc r15
cmp byte [rax + r15], 0
jne 0x140159173
nop dword [rax]
cmp dl, 0x2d
jne 0x140159199
mov r9d, 1
lea r14, [rbp - 0x5e]
mov dword [rsp + 0x48], r9d
dec r15d
jmp 0x14015919e
mov r9d, dword [rsp + 0x48]
movzx eax, byte [r14]
mov rsi, r14
sub al, 0x30
mov qword [rsp + 0x50], r14
cmp al, 0xa
jae 0x1401591bd
movzx eax, byte [rsi + 1]
inc rsi
sub al, 0x30
cmp al, 0xa
jb 0x1401591b0
mov r8d, esi
sub r8d, r14d
mov dword [rsp + 0x50], r8d
lea edi, [r8 + 2]
je 0x1401591e2
mov eax, 0xaaaaaaab
mul edi
mov r13d, edx
shr r13d, 1
dec r13d
jmp 0x1401591e7
xor eax, eax
mov r13d, eax
mov r10, qword [rsp + 0x38]
lea ecx, [r15 + r13]
add ecx, ecx
test r9d, r9d
lea eax, [rcx + 2]
cmove eax, ecx
mov ecx, eax
mov rax, qword [rsp + 0x40]
add rcx, r10
cmp rax, rcx
jae 0x1401592a7
add rax, rax
mov rdx, rcx
cmp rax, rcx
cmovae rdx, rax
mov qword [rsp + 0x40], rdx
lea rcx, [rdx + 0x12]
mov rdx, qword [0x1402c5ff0]
call sym.SystemInformer.exe_Ordinal_1240
mov r8, qword ds:[rsp + 0x38]
mov rbx, rax
mov rax, qword [rsp + 0x40]
lea rcx, [rbx + 0x10]
xor edx, edx
mov qword [rbx], rax
mov qword [rbx + 8], rcx
mov word [rcx + rax], dx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rbx + 8]
mov rdx, qword [rax + 8]
call fcn.14020c7e0
mov rcx, qword [rsp + 0x30]
mov edx, 0xffffffff
add rcx, 0xfffffffffffffff0
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x140159285
nop dword [rax]
call fcn.140143da0
mov r10, qword [rsp + 0x38]
mov rax, qword [rbx + 8]
mov rcx, r10
mov r8d, dword [rsp + 0x50]
mov r9d, dword [rsp + 0x48]
shr rcx, 1
mov qword [rsp + 0x30], rbx
lea rbx, [rax + rcx*2]
mov eax, 0xaaaaaaab
mov ecx, r8d
mul edi
shr edx, 1
lea eax, [rdx + rdx*2]
sub edi, eax
test r9d, r9d
je 0x1401592c6
mov word [rbx], 0x2d
add rbx, 2
test r8d, r8d
je 0x140159310
nop dword [rax + rax]
movsx eax, byte [r14]
dec ecx
mov word [rbx], ax
inc r14
mov eax, edi
add rbx, 2
dec edi
test eax, eax
jne 0x14015930c
test ecx, ecx
je 0x140159310
movzx eax, word [0x1402c1520]
dec ecx
mov word [rbx], ax
mov edi, 1
movsx eax, byte [r14]
mov word [rbx + 2], ax
add rbx, 4
inc r14
test ecx, ecx
jne 0x1401592d0
test r9d, r9d
je 0x14015931e
add r10, 2
mov qword [rsp + 0x38], r10
sub r15d, r8d
mov rcx, rsi
mov edx, r15d
mov r8, rbx
mov edi, r15d
call sym.SystemInformer.exe_Ordinal_1461
mov ecx, dword [rsp + 0x50]
lea rbx, [rbx + r15*2]
mov rax, qword [rsp + 0x38]
lea r15, [0x140000000]
mov r8, qword [rsp + 0x40]
add ecx, r13d
add rcx, rdi
mov r14d, r12d
add r14, r14
lea rsi, [rax + rcx*2]
mov rcx, qword [r15 + r14*8 + 0x2c14b0]
lea rax, [rsi + 2]
add rax, rcx
cmp r8, rax
jae 0x1401593ea
mov rdx, qword [0x1402c5ff0]
lea rbx, [rcx + 2]
lea rax, [r8 + r8]
add rbx, rsi
cmp rax, rbx
cmovae rbx, rax
mov qword [rsp + 0x40], rbx
lea rcx, [rbx + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
mov rdi, rax
mov r8, rsi
mov qword [rax], rbx
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
xor eax, eax
mov word [rcx + rbx], ax
mov rbx, qword [rsp + 0x30]
mov rcx, qword [rdi + 8]
mov rdx, qword [rbx + 8]
call fcn.14020c7e0
lea rcx, [rbx - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x1401593d7
call fcn.140143da0
mov rax, qword [rdi + 8]
mov rcx, rsi
shr rcx, 1
mov qword [rsp + 0x30], rdi
lea rbx, [rax + rcx*2]
mov word [rbx], 0x20
lea rcx, [rbx + 2]
mov r8, qword [r15 + r14*8 + 0x2c14b0]
mov rdx, qword [r15 + r14*8 + 0x2c14b8]
call fcn.14020c7e0
mov rcx, qword [r15 + r14*8 + 0x2c14b0]
mov r14, qword [rsp + 0x58]
lea rax, [rcx + 2]
shr rax, 1
lea r15, [rcx + 2]
add r15, rsi
lea rbx, [rbx + rax*2]
mov qword [rsp + 0x38], r15
mov rdi, r15
sub rdi, qword [rbp - 0x80]
test dword [r14], 0xc0000000
je 0x14015955d
movzx esi, word [r14 + 6]
add rsi, rsi
cmp rdi, rsi
jae 0x14015955d
mov r12, qword [rsp + 0x40]
sub rsi, rdi
lea r13, [rsi + r15]
cmp r12, r13
jae 0x1401594e0
mov rdx, qword [0x1402c5ff0]
lea rax, [r12 + r12]
cmp rax, r13
mov r12, r13
cmovae r12, rax
mov qword [rsp + 0x40], r12
lea rcx, [r12 + 0x12]
call sym.SystemInformer.exe_Ordinal_1240
mov rbx, rax
mov r8, r15
mov qword [rax], r12
lea rcx, [rax + 0x10]
mov qword [rax + 8], rcx
xor eax, eax
mov word [r12 + rcx], ax
mov r12, qword [rsp + 0x30]
mov rcx, qword [rbx + 8]
mov rdx, qword [r12 + 8]
call fcn.14020c7e0
lea rcx, [r12 - 0x10]
mov edx, 0xffffffff
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x1401594d0
call fcn.140143da0
mov rax, qword [rbx + 8]
shr r15, 1
mov qword [rsp + 0x30], rbx
lea rbx, [rax + r15*2]
mov eax, dword [r14]
test al, al
jns 0x1401594ee
movzx r12d, word [r14 + 8]
jmp 0x1401594f4
mov r12d, 0x20
shr rsi, 1
test eax, eax
jns 0x140159518
nop dword [rax + rax]
test rsi, rsi
je 0x140159512
movzx eax, r12w
mov rdi, rbx
mov rcx, rsi
rep stosw word [rdi], ax
lea r14, [rsi + rsi]
jmp 0x140159552
lfence
mov rax, rdi
lea r14, [rsi + rsi]
shr rax, 1
mov r15, rbx
add rax, rax
mov r8, rdi
sub r15, rax
mov rdx, r15
lea rcx, [r15 + r14]
call fcn.14020c7e0
nop dword [rax]
test rsi, rsi
je 0x140159552
movzx eax, r12w
mov rdi, r15
mov rcx, rsi
rep stosw word [rdi], ax
add rbx, r14
mov qword [rsp + 0x38], r13
mov r15, r13
mov esi, dword [rsp + 0x6c]
lea r8, [0x140000000]
mov rdi, qword [rsp + 0x40]
mov edx, 1
mov r12, qword [rbp - 0x78]
mov r9d, 0xa2
mov r10d, 2
test esi, esi
jne 0x140157ef0
movaps xmm7, xmmword [rsp + 0x4b0]
movaps xmm6, xmmword [rsp + 0x4c0]
mov r14, qword [rsp + 0x4d0]
mov r13, qword [rsp + 0x518]
mov r11, qword [rsp + 0x30]
mov rcx, qword [r11 + 8]
mov qword [r11], r15
shr r15, 1
xor eax, eax
mov word [rcx + r15*2], ax
mov rax, r11
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.1401e5e40
add rsp, 0x4d8
pop r15
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret