Function at 0x1400077df
Capabilities:
Access peb ldr_data
Check os version
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1d8
movaps xmmword [rsp + 0x1c0], xmm6
mov dword [rsp + 0xb4], edx
mov qword [rsp + 0xd0], rcx
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rsi, qword [rax + 0x18]
add rsi, 0x10
mov rsi, qword [rsi]
mov rbp, qword [rsi + 0x30]
test rbp, rbp
je 0x1400087d3
mov rcx, qword [rsi + 0x60]
movzx edx, word [rsi + 0x58]
call fcn.1400077a2
cmp eax, 0x1edab0ed
jne 0x14000781e
and qword [rsp + 0x190], 0
and qword [rsp + 0x1a0], 0
and qword [rsp + 0x88], 0
and qword [rsp + 0x98], 0
cmp word [rbp], 0x5a4d
jne 0x1400087d3
movsxd rax, dword [rbp + 0x3c]
cmp dword [rax + rbp], 0x4550
jne 0x1400087d3
mov eax, dword [rbp + rax + 0x88]
mov edi, dword [rax + rbp + 0x20]
add rdi, rbp
mov ecx, dword [rax + rbp + 0x14]
mov dword [rsp + 0x68], ecx
mov ebx, dword [rax + rbp + 0x18]
mov ecx, dword [rax + rbp + 0x1c]
add rcx, rbp
mov qword [rsp + 0x60], rcx
mov eax, dword [rax + rbp + 0x24]
add rax, rbp
mov qword [rsp + 0x40], rax
xor esi, esi
lea r13, [rsp + 0x148]
cmp rbx, rsi
je 0x14000798e
mov r14d, dword [rdi + rsi*4]
add r14, rbp
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rcx, r13
mov rdx, r14
mov r8, rax
call fcn.14000449e
cmp qword [rsp + 0x148], 0
jne 0x140007986
mov r14, rbx
mov rbx, rdi
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x30], rax
mov r15, qword [rsp + 0x158]
mov rax, qword [rsp + 0x40]
movzx edi, word [rax + rsi*2]
mov rcx, r15
call fcn.1400030d9
mov r12, rax
mov qword [rsp + 0x70], rdx
mov rcx, rax
mov rdx, qword [rsp + 0x30]
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0xe0], r12
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], r15
cmp dword [rsp + 0x68], edi
jbe 0x1400087d3
mov rax, qword [rsp + 0x60]
mov r8d, dword [rax + rdi*4]
add r8, rbp
lea rcx, [rsp + 0x88]
lea rdx, [rsp + 0xe0]
call fcn.1400070d7
mov rdi, rbx
mov rbx, r14
inc rsi
jmp 0x1400078bf
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
mov rdx, rax
test rax, rax
je 0x1400079ae
mov rdx, qword [rsp + 0x98]
setne r8b
movzx r8d, r8b
lea rsi, [rsp + 0x148]
mov qword [rsi], r8
and qword [rsi + 8], 0
mov qword [rsi + 0x10], rax
mov qword [rsi + 0x18], rcx
mov qword [rsi + 0x20], r8
and qword [rsi + 0x28], 0
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rcx
mov qword [rsi + 0x40], rdx
lea rdi, [rsp + 0x88]
lea rbx, str.ZwNt
xorps xmm6, xmm6
lea r14, [rsp + 0xe0]
mov rcx, rdi
mov rdx, rsi
call fcn.140006eb2
mov r15, qword [rsp + 0x88]
test r15, r15
je 0x140007e5e
mov r12, qword [rsp + 0x90]
mov rbp, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
mov r9d, 2
mov rcx, r15
mov rdx, rbp
mov r8, rbx
call fcn.140004945
test al, al
je 0x140007e4e
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x48], r12
lea rax, [rsp + 0xc0]
movups xmmword [rax], xmm6
mov qword [rsp + 0xb8], 1
mov qword [rsp + 0x20], 2
mov rcx, r14
mov qword [rsp + 0x28], r15
mov rdx, r15
mov qword [rsp + 0x50], rbp
mov r8, rbp
mov r9, rbx
call fcn.140003dec
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x60], rax
mov rbx, qword [rsp + 0xe8]
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x100]
mov qword [rsp + 0x68], rcx
mov r15, qword [rsp + 0x108]
mov r10, qword [rsp + 0x118]
mov rdi, qword [rsp + 0x128]
mov r12, qword [rsp + 0x130]
mov r14, qword [rsp + 0x138]
mov rbp, qword [rsp + 0x140]
lea rcx, [rbp - 1]
mov qword [rsp + 0x70], rcx
mov rcx, rax
and rcx, 0xffffffffffffff00
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0x58], rax
mov r13d, eax
xor edx, edx
cmp qword [rsp + 0x60], 0
mov qword [rsp + 0x30], r10
je 0x140007c93
mov qword [rsp + 0x80], rdx
movzx eax, r13b
or rax, qword [rsp + 0xa8]
mov rcx, rbp
sub rcx, rax
mov qword [rsp + 0x78], rcx
lea rcx, [rbx - 1]
mov qword [rsp + 0x40], rcx
mov rdx, r10
cmp rbx, rdx
mov rcx, rdx
cmova rcx, rbx
cmp r10, 0xffffffffffffffff
cmove rcx, rbx
mov r11d, 0
cmovne r11, rdx
mov r8, qword [rsp + 0x70]
lea r9, [r8 + r15]
cmp r9, r12
jae 0x140007d91
movzx r9d, byte [rdi + r9]
mov r8, qword [rsp + 0x68]
bt r8, r9
jae 0x140007bc5
lea rsi, [rdi + r15]
mov r10, rcx
cmp r10, rbp
jae 0x140007bd0
mov r9, r10
lea r8, [r15 + r10]
cmp r8, r12
jae 0x1400087d3
lea r10, [r9 + 1]
mov r8b, byte [r14 + r9]
cmp r8b, byte [rsi + r9]
je 0x140007b92
sub r15, rbx
add r15, r9
inc r15
mov r10, qword [rsp + 0x30]
jmp 0x140007bc8
add r15, rbp
cmp r10, 0xffffffffffffffff
je 0x140007b69
jmp 0x140007c21
mov r9, qword [rsp + 0x40]
lea r10, [r9 + 1]
cmp r11, r10
jae 0x140007c28
cmp r9, rbp
jae 0x1400087d3
lea r10, [r15 + r9]
cmp r10, r12
jae 0x1400087d3
mov r10b, byte [r14 + r9]
lea r8, [r9 - 1]
cmp r10b, byte [rsi + r9]
mov r9, r8
je 0x140007bd5
add r15, rax
mov r10, qword [rsp + 0x30]
cmp r10, 0xffffffffffffffff
je 0x140007b69
mov rdx, qword [rsp + 0x78]
jmp 0x140007b4d
xor edx, edx
jmp 0x140007b4d
cmp qword [rsp + 0x30], 0xffffffffffffffff
mov eax, 0
cmovne rdx, rax
lea rax, [r15 + rbp]
mov r8, r15
mov qword [rsp + 0x40], rax
mov r15, rax
mov qword [rsp + 0x30], rdx
mov rdx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x28]
add rdx, rax
add r8, rax
lea rsi, [rsp + 0xb8]
mov rcx, rsi
call fcn.140002d91
mov rcx, rsi
lea rdx, [0x14000aefa]
lea r8, [0x14000aefc]
call fcn.140002d91
mov rdx, qword [rsp + 0x40]
mov r10, qword [rsp + 0x30]
jmp 0x140007b11
test dword [rsp + 0x58], 0xff0000
jne 0x140007dd5
test rbx, rbx
je 0x140007cbc
cmp rbx, r12
jae 0x140007cb6
cmp byte [rdi + rbx], 0xbf
jg 0x140007cbc
jmp 0x1400087d3
jne 0x1400087d3
cmp rbx, r12
je 0x140007d62
movzx eax, byte [rdi + rbx]
test al, al
jns 0x140007d21
mov ecx, eax
and ecx, 0x1f
movzx r9d, byte [rdi + rbx + 1]
and r9d, 0x3f
cmp al, 0xdf
jbe 0x140007d0e
movzx r8d, byte [rdi + rbx + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp al, 0xf0
jb 0x140007d18
movzx eax, byte [rdi + rbx + 3]
and ecx, 7
shl ecx, 0x12
shl r8d, 6
and eax, 0x3f
or eax, r8d
or eax, ecx
jmp 0x140007d21
shl ecx, 6
or ecx, r9d
mov eax, ecx
jmp 0x140007d21
shl ecx, 0xc
or r8d, ecx
mov eax, r8d
test r13b, r13b
jne 0x140007d80
cmp eax, 0x110000
je 0x140007dd5
mov ecx, 1
cmp eax, 0x80
jb 0x140007d57
mov ecx, 2
cmp eax, 0x800
jb 0x140007d57
cmp eax, 0x10000
mov ecx, 4
sbb rcx, 0
add rbx, rcx
mov r13b, 1
jmp 0x140007ca1
test r13b, r13b
je 0x140007dc9
test rdi, rdi
je 0x140007dc9
xor r13b, 1
mov r8, r12
mov qword [rsp + 0x40], r12
mov rbx, r12
jmp 0x140007c53
xor r13b, 1
mov r8, rbx
mov qword [rsp + 0x40], rbx
jmp 0x140007c53
lea rsi, [rsp + 0x148]
lea rdi, [rsp + 0x88]
lea rbx, str.ZwNt
lea r14, [rsp + 0xe0]
mov r15, qword [rsp + 0x28]
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x80]
jmp 0x140007e03
test r13b, r13b
mov eax, 0
cmovne rdx, rax
lea rsi, [rsp + 0x148]
lea rdi, [rsp + 0x88]
lea rbx, str.ZwNt
lea r14, [rsp + 0xe0]
mov r15, qword [rsp + 0x28]
mov r12, qword [rsp + 0x48]
mov r13, qword [rsp + 0x38]
add rdx, r15
mov r8, qword [rsp + 0x50]
add r8, r15
lea rcx, [rsp + 0xb8]
call fcn.140002d91
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0xb8]
movaps xmmword [rsp + 0xe0], xmm0
lea rcx, [rsp + 0x190]
mov rdx, r14
mov r8, r13
call fcn.1400070d7
mov rcx, r15
mov rdx, r12
call fcn.140002d87
jmp 0x1400079fd
lea rcx, [rsp + 0x148]
call fcn.140006f03
mov rax, qword [rsp + 0x190]
test rax, rax
je 0x140007ed1
mov ecx, 1
mov qword [rsp + 0x148], rcx
and qword [rsp + 0x150], 0
mov rdx, qword [rsp + 0x198]
mov qword [rsp + 0x158], rax
mov qword [rsp + 0x160], rdx
mov qword [rsp + 0x168], rcx
and qword [rsp + 0x170], 0
mov rcx, qword [rsp + 0x1a0]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x180], rdx
jmp 0x140007ee5
and qword [rsp + 0x148], 0
and qword [rsp + 0x168], 0
xor ecx, ecx
lea rdx, [rsp + 0x148]
mov qword [rdx + 0x40], rcx
lea rsi, [rsp + 0xe0]
mov rcx, rsi
call fcn.140006eb2
cmp qword [rsi], 0
je 0x1400080e6
mov rax, qword [rsp + 0x188]
inc rax
mov rcx, 0xffffffffffffffff
cmovne rcx, rax
cmp rcx, 5
mov edx, 4
cmovae rdx, rcx
mov rax, rdx
shr rax, 0x3a
jne 0x1400087d3
mov qword [rsp + 0x58], rdx
mov rcx, rdx
shl rcx, 5
call fcn.140006f44
test rax, rax
je 0x1400087d3
movabs r12, 0x3ffffffffffffff
lea rbx, [rsp + 0xe0]
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x28], rax
movups xmmword [rax], xmm0
lea rsi, [rsp + 0x148]
mov ecx, 9
mov rdi, rbx
rep movsq qword [rdi], qword [rsi]
mov eax, 1
mov qword [rsp + 0x48], rax
lea rdi, [rsp + 0x88]
mov rsi, 0xffffffffffffffff
lea rbp, [rsp + 0x1a8]
lea r15, [rsp + 0xb8]
mov r14d, 1
mov rcx, rdi
mov rdx, rbx
call fcn.140006eb2
cmp qword [rsp + 0x88], 0
je 0x1400080ab
mov rcx, qword [rsp + 0x58]
cmp r14, rcx
jne 0x140008074
mov r13, qword [rsp + 0x120]
inc r13
cmove r13, rsi
add r13, rcx
jb 0x1400087d3
lea rax, [rcx + rcx]
cmp rax, r13
cmova r13, rax
cmp r13, 5
jae 0x140008013
mov r13d, 4
xor edx, edx
cmp r13, r12
setbe dl
mov r8, r13
shl r8, 5
shl rdx, 3
shl rcx, 5
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xc0], 8
mov rcx, rbp
mov r9, r15
call fcn.140002cd5
cmp qword [rsp + 0x1a8], 0
jne 0x1400087ca
mov rcx, qword [rsp + 0x1b0]
mov qword [rsp + 0x58], r13
jmp 0x140008079
mov rcx, qword [rsp + 0x28]
mov rax, r14
shl rax, 5
movups xmm0, xmmword [rsp + 0x88]
movups xmm1, xmmword [rsp + 0x98]
movups xmmword [rcx + rax + 0x10], xmm1
mov qword [rsp + 0x28], rcx
movups xmmword [rcx + rax], xmm0
inc r14
dec qword [rsp + 0x48]
jmp 0x140007fbc
lea rcx, [rsp + 0xe0]
call fcn.140006f03
cmp r14, 0x15
jae 0x140008102
cmp r14, 1
jbe 0x140008640
mov r8d, 1
mov rsi, qword [rsp + 0x28]
mov rcx, rsi
mov rdx, r14
call fcn.1400087d7
mov rax, rsi
jmp 0x140008645
lea rcx, [rsp + 0x148]
call fcn.140006f03
mov eax, 8
xor ecx, ecx
xor r14d, r14d
jmp 0x14000864a
mov rax, r14
shl rax, 4
movabs rcx, 0x7fffffffffffffe0
and rcx, rax
call fcn.140008896
mov qword [rsp + 0x30], rax
test rax, rax
je 0x1400087d3
mov ecx, 0x100
call fcn.140008896
test rax, rax
je 0x1400087d3
mov r12, rax
mov rdx, qword [rsp + 0x28]
lea rax, [rdx + 0x58]
mov qword [rsp + 0xd8], rax
lea rax, [rdx - 0x20]
mov qword [rsp + 0x78], rax
mov eax, 0x10
mov qword [rsp + 0x38], rax
xor esi, esi
xor r15d, r15d
mov r10, qword [rsp + 0x30]
mov qword [rsp + 0xa8], r14
mov r8, r14
sub r8, r15
jbe 0x140008623
mov r9, r15
shl r9, 5
lea rcx, [rdx + r9]
cmp r8, 2
jae 0x14000819f
mov rax, r14
mov rbp, qword [rsp + 0x38]
jmp 0x1400082ce
mov rbx, rsi
mov rax, qword [rcx + 0x38]
mov rdx, qword [rdx + r9 + 0x18]
cmp rax, rdx
jae 0x1400081e8
add r9, qword [rsp + 0xd8]
mov r10, qword [rsp + 0x48]
lea r11, [r10 + r15]
mov r10d, 2
mov rsi, rax
lea rdi, [r11 + r10]
cmp rdi, 2
je 0x140008223
mov rdi, qword [r9]
cmp rdi, rsi
jae 0x140008220
inc r10
add r9, 0x20
mov rsi, rdi
jmp 0x1400081ca
add r9, qword [rsp + 0xd8]
mov r10, qword [rsp + 0x48]
lea r11, [r10 + r15]
mov r10d, 2
mov rsi, rax
lea rdi, [r11 + r10]
cmp rdi, 2
je 0x140008223
mov rdi, qword [r9]
cmp rdi, rsi
jb 0x140008220
inc r10
add r9, 0x20
mov rsi, rdi
jmp 0x140008202
mov r8, r10
lea r9, [r8 + r15]
cmp rax, rdx
mov r10, qword [rsp + 0x30]
mov rsi, rbx
jae 0x1400082bc
cmp r15, r9
ja 0x1400087d3
cmp r9, r14
ja 0x1400087d3
mov rdx, r9
mov rax, r8
shr rax, 1
mov r11, r9
shl rdx, 5
add rdx, qword [rsp + 0x78]
mov r9, rcx
sub rax, 1
jb 0x1400082c6
cmp r8, 2
jb 0x1400087d3
movups xmm0, xmmword [r9]
movups xmm1, xmmword [r9 + 0x10]
movaps xmmword [rsp + 0xf0], xmm1
movaps xmmword [rsp + 0xe0], xmm0
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r9 + 0x10], xmm1
movups xmmword [r9], xmm0
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmm1, xmmword [rsp + 0xf0]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
add r9, 0x20
add rdx, 0xffffffffffffffe0
jmp 0x140008262
mov rbp, qword [rsp + 0x38]
mov rax, r9
jmp 0x1400082ce
mov rbp, qword [rsp + 0x38]
mov rax, r11
mov rbx, rax
sub rbx, r15
jb 0x1400087d3
cmp rax, r14
ja 0x1400087d3
jae 0x140008320
cmp r8, 0xa
jae 0x140008320
lea rbx, [r15 + 0xa]
cmp rbx, r14
cmovae rbx, r14
mov qword [rsp + 0x50], rbx
sub rbx, r15
jb 0x1400087d3
cmp r8, 1
adc r8, 0
mov rdx, rbx
call fcn.1400087d7
mov r10, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
jmp 0x140008325
mov qword [rsp + 0x50], rax
cmp rsi, rbp
jne 0x14000837c
mov r13, rsi
mov rcx, rbp
shl rcx, 5
call fcn.140008896
test rax, rax
je 0x1400087d3
mov rsi, rax
lea rdi, [rbp*2]
shl rbp, 4
mov rcx, rax
mov rdx, r12
mov r8, rbp
call sub.VCRUNTIME140.dll_memcpy
mov edx, 8
mov rcx, r12
call fcn.140002a60
mov r12, rsi
mov qword [rsp + 0x38], rdi
mov r10, qword [rsp + 0x30]
mov rsi, r13
mov rax, rsi
shl rax, 4
mov qword [r12 + rax], rbx
mov qword [r12 + rax + 8], r15
inc rsi
mov qword [rsp + 0x80], r12
cmp rsi, 2
jb 0x140008614
mov rcx, rsi
shl rcx, 4
mov rax, qword [rcx + r12 - 0x10]
mov rdx, qword [rcx + r12 - 8]
add rdx, rax
cmp rdx, r14
je 0x1400083ff
mov r8, qword [rcx + r12 - 0x20]
cmp r8, rax
jbe 0x1400083ff
cmp rsi, 2
jbe 0x140008614
lea rbx, [rsi - 3]
mov rdx, rbx
shl rdx, 4
mov rdx, qword [r12 + rdx]
lea r9, [r8 + rax]
cmp rdx, r9
jbe 0x140008414
cmp rsi, 3
jbe 0x140008614
add r8, rdx
cmp qword [rcx + r12 - 0x40], r8
jbe 0x140008414
jmp 0x140008614
cmp rsi, 3
jb 0x140008419
lea rbx, [rsi - 3]
mov rcx, rbx
shl rcx, 4
mov rdx, qword [r12 + rcx]
cmp rdx, rax
jb 0x14000841d
lea rbx, [rsi - 2]
cmp rsi, rbx
jbe 0x1400087d3
lea r15, [rbx + 1]
cmp rsi, r15
mov rcx, qword [rsp + 0x28]
jbe 0x1400087d3
mov r13, rbx
shl r13, 4
mov rax, qword [r12 + r13 + 8]
shl r15, 4
mov rdx, qword [r12 + r15]
mov rdi, qword [r12 + r15 + 8]
add rdi, rdx
cmp rax, rdi
ja 0x1400087d3
mov qword [rsp + 0x70], rsi
cmp rdi, r14
ja 0x1400087d3
mov qword [rsp + 0x40], rdx
mov rdx, qword [r12 + r13]
mov r14, rax
shl r14, 5
add r14, rcx
mov r12, rdx
shl r12, 5
lea rbp, [r14 + r12]
mov rsi, rdi
shl rsi, 5
mov qword [rsp + 0x68], rax
add rax, rdx
sub rdi, rax
mov qword [rsp + 0x60], rdx
cmp rdi, rdx
jae 0x14000852a
shl rdi, 5
mov rcx, r10
mov rdx, rbp
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r9, qword [rsp + 0x30]
add rdi, r9
add rsi, qword [rsp + 0x78]
mov r12, rdi
cmp rbp, r14
jbe 0x140008595
cmp r12, r9
jbe 0x140008595
mov rax, qword [r12 - 8]
mov rcx, qword [rbp - 8]
cmp rax, rcx
mov edx, 0
sbb rdx, rdx
cmp rax, rcx
mov r8d, 0
adc r8, 0xffffffffffffffff
shl rdx, 5
add rbp, rdx
shl r8, 5
add r12, r8
cmp rax, rcx
mov rax, r12
cmovb rax, rbp
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
add rsi, 0xffffffffffffffe0
jmp 0x1400084cb
add rsi, rcx
mov rcx, r10
mov rdx, r14
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rsp + 0x30]
add r12, rdx
cmp rdx, r12
jae 0x14000859b
cmp rbp, rsi
jae 0x14000859b
mov r8, qword [rbp + 0x18]
xor eax, eax
xor ecx, ecx
mov r10, rbp
cmp r8, qword [rdx + 0x18]
setae r8b
setb r9b
jb 0x140008569
mov r10, rdx
movups xmm0, xmmword [r10]
movups xmm1, xmmword [r10 + 0x10]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
add r14, 0x20
mov cl, r9b
shl rcx, 5
add rbp, rcx
mov al, r8b
shl rax, 5
add rdx, rax
jmp 0x140008543
mov r14, rbp
mov rdx, r9
mov rbp, qword [rsp + 0x80]
lea rsi, [r15 + rbp]
lea rdi, [r15 + rbp]
add rdi, 8
sub r12, rdx
mov rcx, r14
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x40]
add rax, qword [rsp + 0x60]
mov qword [rsi], rax
mov rax, qword [rsp + 0x68]
mov qword [rdi], rax
mov rsi, qword [rsp + 0x70]
cmp rsi, rbx
mov r14, qword [rsp + 0xa8]
jbe 0x1400087d3
add r13, rbp
lea rdx, [r13 + 0x10]
not rbx
add rbx, rsi
shl rbx, 4
mov rcx, r13
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
dec rsi
mov r10, qword [rsp + 0x30]
mov r12, rbp
jmp 0x140008397
mov r15, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x28]
jmp 0x140008175
mov edx, 8
mov rcx, r12
mov rsi, r10
call fcn.140002a60
mov edx, 8
mov rcx, rsi
call fcn.140002a60
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x58]
shl r14, 5
lea r13, [rax + r14]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rcx
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], r13
xor esi, esi
test r14, r14
je 0x1400086b7
lea r15, [rax + 0x20]
mov rdi, qword [rax]
test rdi, rdi
je 0x1400086ba
mov rbx, qword [rax + 8]
mov r12, rax
mov rdx, qword [rax + 0x10]
mov rcx, rdi
call fcn.1400077a2
cmp eax, dword [rsp + 0xb4]
je 0x1400086dc
inc esi
mov rcx, rdi
mov rdx, rbx
call fcn.140002d87
add r14, 0xffffffffffffffe0
mov rax, r15
jmp 0x140008674
mov r15, r13
lea rcx, [rsp + 0xe0]
mov qword [rcx + 0x10], r15
call fcn.140007749
mov rax, qword [rsp + 0xd0]
and qword [rax], 0
jmp 0x1400087ae
mov rax, qword [r12 + 0x18]
mov qword [rsp + 0xf0], r15
xor ecx, ecx
cmp rcx, 0x19
je 0x14000870a
cmp byte [rax + rcx], 0xf
jne 0x140008705
cmp byte [rax + rcx + 1], 5
jne 0x140008705
cmp byte [rax + rcx + 2], 0xc3
je 0x14000877c
inc rcx
jmp 0x1400086eb
cmp byte [rax + 0x12], 0xf
jne 0x140008722
cmp byte [rax + 0x13], 5
jne 0x140008722
cmp byte [rax + 0x14], 0xc3
jne 0x140008722
add rax, 0x12
jmp 0x14000877f
cmp byte [rax], 0xe9
je 0x140008731
cmp byte [rax + 3], 0xe9
jne 0x1400087d3
mov rdx, 0xfffffffffffffff2
mov ecx, 0x32
cmp rdx, 0xffffffffffffc192
je 0x1400087d3
cmp byte [rax + rcx], 0xf
jne 0x14000875e
cmp byte [rax + rcx + 1], 5
jne 0x14000875e
cmp byte [rax + rcx + 2], 0xc3
je 0x14000877c
cmp byte [rax + rdx], 0xf
jne 0x140008772
cmp byte [rax + rdx + 1], 5
jne 0x140008772
cmp byte [rax + rdx + 2], 0xc3
je 0x14000877c
add rdx, 0xffffffffffffffe0
add rcx, 0x20
jmp 0x14000873d
add rax, rcx
mov rcx, qword [rsp + 0xd0]
mov word [rcx + 8], si
mov qword [rcx + 0x10], rax
mov qword [rcx], 1
mov rcx, rdi
mov rdx, rbx
call fcn.140002d87
lea rcx, [rsp + 0xe0]
call fcn.140007749
movaps xmm6, xmmword [rsp + 0x1c0]
add rsp, 0x1d8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp qword [rsp + 0x1b0], 0
ud2