Function at 0x140005c80
Capabilities:
Create directory
Get common file path
Query environment variable
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x240]
sub rsp, 0x340
mov rax, qword [0x14003b040]
xor rax, rsp
mov qword [rbp + 0x230], rax
movsxd rbx, edx
mov rdi, rcx
mov qword [rsp + 0x58], rcx
mov dword [rsp + 0x30], 1
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor r15d, r15d
mov qword [rcx + 0x10], r15
mov esi, 7
mov qword [rcx + 0x18], rsi
mov word [rcx], r15w
mov dword [rsp + 0x30], 1
mov r12d, 0x5c
cmp ebx, 0x12
ja case.default.0x140005d07
lea rdx, [0x140000000]
mov ecx, dword [rdx + rbx*4 + 0x688c]
add rcx, rdx
jmp rcx
lea rdx, [rbp + 0x20]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x140005d2d
lea rcx, str.Failed_to_get_temp_path
call fcn.1400056f0
jmp 0x14000685e
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140005d40
mov rax, qword [rdi + 0x18]
cmp rbx, rax
ja 0x140005d7f
mov rsi, rdi
cmp rax, 7
jbe 0x140005d5f
mov rsi, qword [rdi]
mov qword [rdi + 0x10], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x20]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rsi], r15w
jmp case.0x140005d07.10
lea r9, [rbp + 0x20]
mov rdx, rbx
mov rcx, rdi
call fcn.1400020a0
jmp case.0x140005d07.10
mov r8d, 0x104
lea rdx, [rbp + 0x20]
lea rcx, str.SystemDrive
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x140005f73
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x140005dd2
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x60]
call fcn.140002210
nop
lea rdx, str.Temp
lea rcx, [rsp + 0x60]
call fcn.140008320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x38], xmm1
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], rsi
mov word [rax], r15w
mov dword [rsp + 0x30], 3
lea rax, [rbp]
cmp rdi, rax
je 0x140005e84
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140005e76
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140005e68
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005ebb
mov rcx, r8
call fcn.1400113c4
movups xmm0, xmmword [rbp - 0x80]
movups xmm1, xmmword [rsp + 0x38]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm1
mov word [rbp], r15w
jmp 0x140005e88
mov rsi, qword [rbp + 0x18]
cmp rsi, 7
jbe 0x140005ec8
lea rdx, [rsi*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ec2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ec2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400113c4
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x140005f0d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005f08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005f08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400113c4
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140005f1a
mov rdx, qword [rdi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
nop dword [rax]
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x140005f30
mov r8, rbx
lea rcx, [rsp + 0x60]
call fcn.140002210
lea rcx, [rsp + 0x60]
call fcn.140005be0
test al, al
jne case.0x140005d07.10
mov rcx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140005f66
mov rcx, qword [rdi]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp case.0x140005d07.10
lea rcx, str.Failed_to_get_system_drive
call fcn.1400056f0
mov qword [rdi + 0x10], r15
mov rax, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140005f90
mov rax, qword [rdi]
mov word [rax], r15w
jmp case.0x140005d07.10
mov edx, 0x104
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x14000608e
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r15
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140005fd0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x40]
call fcn.140002210
lea rax, [rbp - 0x40]
cmp rdi, rax
je 0x140006044
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x14000602e
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140006029
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006087
mov rcx, r8
call fcn.1400113c4
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rdi + 0x10], xmm1
mov word [rbp - 0x40], r15w
jmp 0x140006048
mov rsi, qword [rbp - 0x28]
cmp rsi, 7
jbe case.0x140005d07.10
lea rdx, [rsi*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, str.Failed_to_get_system_drive
call fcn.1400056f0
cmp qword [rdi + 0x18], 0xb
jb 0x1400060cb
mov rbx, qword [rdi]
mov qword [rdi + 0x10], 0xb
mov r8d, 0x16
lea rdx, str.C:Windows_
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + 0x16], r15w
jmp case.0x140005d07.10
lea r9, str.C:Windows_
mov edx, 0xb
mov rcx, rdi
call fcn.1400020a0
jmp case.0x140005d07.10
lea rdx, [rbp + 0x20]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
jne 0x140006108
lea rcx, str.Failed_to_get_current_directory
call fcn.1400056f0
jmp 0x14000685e
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140006113
mov rax, qword [rdi + 0x18]
cmp rbx, rax
ja 0x140005d7f
mov rsi, rdi
cmp rax, 7
jbe 0x140006136
mov rsi, qword [rdi]
mov qword [rdi + 0x10], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x20]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + rbx], r15w
jmp case.0x140005d07.10
mov r8d, 0x104
lea rdx, [rbp + 0x20]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x14000617d
lea rcx, str.Failed_to_get_module_file_name
call fcn.1400056f0
jmp 0x14000685e
lea rdx, [rbp + 0x20]
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140006190
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r15
mov r8, rbx
lea rcx, [rbp - 0x60]
call fcn.140002210
mov dword [rsp + 0x30], 0xc1
lea rbx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rbx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
lea rdx, [rbx + rax*2]
mov rcx, rbx
call fcn.140002d00
cmp rax, rdx
je 0x14000624c
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x1400061ef
cmp cx, 0x2f
jne 0x1400061f8
add rax, 2
cmp rax, rdx
jne 0x1400061e0
cmp rax, rdx
je 0x14000624c
nop dword [rax]
lea r8, [rdx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14000621e
cmp cx, 0x2f
je 0x14000621e
mov rdx, r8
cmp rax, r8
jne 0x140006200
jmp 0x14000624c
cmp rax, rdx
je 0x14000624c
nop dword [rax]
nop word [rax + rax]
lea r8, [rdx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x140006244
cmp cx, 0x2f
jne 0x14000624c
mov rdx, r8
cmp rax, r8
jne 0x140006230
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
sub rdx, rbx
sar rdx, 1
mov r8, rdx
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140002210
mov dword [rsp + 0x30], 0xf9
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.140007b90
mov dword [rsp + 0x30], 0xfd
lea rax, [rbp - 0x20]
cmp rdi, rax
je 0x1400062e7
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x1400062d1
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400062cc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000631e
mov rcx, r8
call fcn.1400113c4
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x10]
movups xmmword [rdi + 0x10], xmm1
mov word [rbp - 0x20], r15w
jmp 0x1400062eb
mov rsi, qword [rbp - 8]
cmp rsi, 7
jbe 0x14000632b
lea rdx, [rsi*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006325
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006325
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400113c4
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x14000636f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006369
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006369
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400113c4
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe case.0x140005d07.10
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400113c4
jmp case.0x140005d07.10
lea eax, [rbx - 5]
cmp eax, 0xb
ja case.0x1400063cf.7
cdqe
mov ecx, dword [rdx + rax*4 + 0x68d8]
add rcx, rdx
jmp rcx
movups xmm0, xmmword [0x1400148f0]
jmp 0x1400063fc
movups xmm0, xmmword [0x140014900]
jmp 0x1400063fc
movups xmm0, xmmword [0x1400148e0]
jmp 0x1400063fc
movups xmm0, xmmword [0x140014920]
jmp 0x1400063fc
movups xmm0, xmmword [0x140014910]
movups xmmword [rbp - 0x80], xmm0
lea r9, [rsp + 0x38]
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x80]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jns 0x140006429
lea rcx, str.Failed_to_get_known_folder_path
call fcn.1400056f0
jmp 0x14000685e
mov rdx, qword [rsp + 0x38]
mov rcx, rdi
call fcn.140007b10
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp ebx, 0xe
jne case.0x140005d07.10
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140006495
mov rax, rdi
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140006463
mov rax, qword [rdi]
cmp word [rax + rcx*2 - 2], r12w
je 0x140006495
cmp rcx, rdx
jae 0x14000648a
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 7
jbe 0x140006484
mov rax, qword [rdi]
mov dword [rax + rcx*2], r12d
jmp 0x140006495
mov r9d, r12d
mov rcx, rdi
call fcn.140008c60
lea rdx, str.SpiAlert_
mov rcx, rdi
call fcn.140008320
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x1400064b1
mov rdx, qword [rdi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rdx + rbx*2], 0
jne 0x1400064d0
mov r8, rbx
lea rcx, [rsp + 0x60]
call fcn.140002210
lea rcx, [rsp + 0x60]
call fcn.140005be0
test al, al
jne case.0x140005d07.10
mov rcx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140006506
mov rcx, qword [rdi]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp case.0x140005d07.10
mov r8d, 0x104
lea rdx, [rbp + 0x20]
lea rcx, str.ProgramFiles
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x14000653f
lea rcx, str.Failed_to_get_ProgramFiles_environment_variable
call fcn.1400056f0
jmp 0x14000685e
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140006550
mov rax, qword [rdi + 0x18]
cmp rbx, rax
ja 0x140005d7f
mov rsi, rdi
cmp rax, 7
jbe 0x140006573
mov rsi, qword [rdi]
mov qword [rdi + 0x10], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x20]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rsi], r15w
jmp case.0x140005d07.10
mov r8d, 0x104
lea rdx, [rbp + 0x20]
lea rcx, str.USERPROFILE
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x1400065bf
lea rcx, str.Failed_to_get_USERPROFILE_environment_variable
call fcn.1400056f0
jmp 0x14000685e
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400065d0
mov rax, qword [rdi + 0x18]
cmp rbx, rax
ja 0x140005d7f
mov rsi, rdi
cmp rax, 7
jbe 0x1400065f3
mov rsi, qword [rdi]
mov qword [rdi + 0x10], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x20]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rsi], r15w
jmp case.0x140005d07.10
sub ebx, 7
je 0x14000662f
cmp ebx, 1
je 0x140006626
lea rbx, str.CustomDir3
jmp 0x140006636
lea rbx, str.CustomDir2
jmp 0x140006636
lea rbx, str.CustomDir1
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.SoftwareSpiCam_
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140006679
lea rdx, str.SoftwareSpiCam_
lea rcx, str.Cannot_open_registry_key__s
call fcn.1400056f0
jmp 0x14000685e
mov dword [rsp + 0x48], 0x208
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x50]
xor r8d, r8d
mov rdx, rbx
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x1400066cd
mov rdx, rbx
lea rcx, str.Cannot_read_registry_value__s
call fcn.1400056f0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14000685e
lea rax, [rbp + 0x20]
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x1400066e0
mov rax, qword [rdi + 0x18]
cmp rbx, rax
ja 0x14000671c
mov r14, rdi
cmp rax, 7
jbe 0x1400066ff
mov r14, qword [rdi]
mov qword [rdi + 0x10], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x20]
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + r14], r15w
jmp 0x14000672b
lea r9, [rbp + 0x20]
mov rdx, rbx
mov rcx, rdi
call fcn.1400020a0
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp qword [rdi + 0x10], 0
jne case.0x140005d07.10
mov edx, 1
lea rcx, [rsp + 0x60]
call fcn.140005c80
mov rbx, rax
cmp rdi, rax
je 0x1400067b9
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140006793
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000678e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400067fa
mov rcx, r8
call fcn.1400113c4
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], rsi
mov word [rdi], r15w
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], rsi
mov word [rbx], r15w
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe case.0x140005d07.10
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400063b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edx, ebx
lea rcx, str.Unknown_path_type:__d
call fcn.1400056f0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14000685e
mov rax, rdi
mov rdx, qword [rdi + 0x18]
cmp rdx, 7
jbe 0x140006828
mov rax, qword [rdi]
cmp word [rax + rcx*2 - 2], 0x5c
je 0x14000685e
cmp rcx, rdx
jae 0x140006852
lea rax, [rcx + 1]
mov qword [rdi + 0x10], rax
mov rax, rdi
cmp rdx, 7
jbe 0x140006849
mov rax, qword [rdi]
mov dword [rax + rcx*2], 0x5c
jmp 0x14000685e
mov r9d, r12d
mov rcx, rdi
call fcn.140008c60
nop
mov rax, rdi
mov rcx, qword [rbp + 0x230]
xor rcx, rsp
call fcn.140011000
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret