Function at 0x1400d8fa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rbx, r9
mov r15, r8
mov rdi, rdx
mov rsi, rcx
mov rbp, qword [rsp + 0x170]
mov eax, 0x2600
mov r13, r8
jmp 0x1400d9008
inc r13
cmp ecx, 0xd
ja 0x1400d90b0
mov r14d, 0x110000
bt eax, ecx
jae 0x1400d90b0
cmp r14d, 0x110000
jne 0x1400d90c0
mov r14d, 0x110000
cmp r13, rbx
je 0x1400d938a
movzx ecx, byte [r13]
test cl, cl
jns 0x1400d8fe0
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [r13 + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400d907a
movzx r8d, byte [r13 + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp cl, 0xf0
jb 0x1400d9091
movzx ecx, byte [r13 + 3]
and edx, 7
shl edx, 0x12
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
or ecx, edx
cmp ecx, 0x110000
je 0x1400d938a
add r13, 4
cmp ecx, 0xd
jbe 0x1400d8fec
jmp 0x1400d90b0
add r13, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400d8fec
jmp 0x1400d90b0
add r13, 3
shl edx, 0xc
or r8d, edx
mov ecx, r8d
cmp ecx, 0xd
jbe 0x1400d8fec
nop word [rax + rax]
mov r14d, ecx
cmp r14d, 0x110000
je 0x1400d9008
cmp r14d, 0x2f
je 0x1400d90d0
cmp r14d, 0x5c
jne 0x1400d938a
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400d90e8
cmp r14d, 0x5c
jne 0x1400d90e8
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov eax, 0x2600
mov r12, r13
jmp 0x1400d9126
inc r12
cmp ecx, 0xd
ja 0x1400d91d0
mov edx, 0x110000
bt eax, ecx
jae 0x1400d91d0
cmp edx, 0x110000
jne 0x1400d91de
cmp r12, rbx
je 0x1400d93e7
movzx ecx, byte [r12]
test cl, cl
jns 0x1400d9100
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [r12 + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400d9195
movzx r8d, byte [r12 + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp cl, 0xf0
jb 0x1400d91ac
movzx ecx, byte [r12 + 3]
and edx, 7
shl edx, 0x12
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
or ecx, edx
cmp ecx, 0x110000
je 0x1400d93e7
add r12, 4
cmp ecx, 0xd
jbe 0x1400d910c
jmp 0x1400d91d0
add r12, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400d910c
jmp 0x1400d91d0
add r12, 3
shl edx, 0xc
or r8d, edx
mov ecx, r8d
cmp ecx, 0xd
jbe 0x1400d910c
nop word cs:[rax + rax]
mov edx, ecx
cmp edx, 0x110000
je 0x1400d9126
cmp edx, 0x2f
je 0x1400d91ec
cmp edx, 0x5c
jne 0x1400d93e7
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400d9203
cmp edx, 0x5c
jne 0x1400d9203
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 6
jbe 0x1400da138
mov rax, qword [rdi + 8]
mov dword [rax + rdx + 3], 0x2f2f3a65
mov dword [rax + rdx], 0x656c6966
add rdx, 7
mov qword [rdi + 0x10], rdx
mov rax, rbx
sub rax, r12
je 0x1400d955a
xor r15d, r15d
mov ecx, 0x2600
movabs rdx, 0x8000800800000000
xor r8d, r8d
xor r14d, r14d
mov r9, r12
jmp 0x1400d9292
inc r9
mov r10d, r11d
mov r11d, 1
cmp r10d, 0x3f
ja 0x1400d931d
mov r13d, r10d
bt rcx, r13
jae 0x1400d9313
mov r15b, 1
add r14, r11
cmp r9, rbx
je 0x1400d945c
movzx r11d, byte [r9]
test r11b, r11b
jns 0x1400d9260
mov r10d, r11d
and r10d, 0x1f
movzx r13d, byte [r9 + 1]
and r13d, 0x3f
cmp r11b, 0xdf
jbe 0x1400d92f6
movzx ebp, byte [r9 + 2]
shl r13d, 6
and ebp, 0x3f
or ebp, r13d
cmp r11b, 0xf0
jb 0x1400d936d
movzx r11d, byte [r9 + 3]
add r9, 4
and r10d, 7
shl r10d, 0x12
shl ebp, 6
and r11d, 0x3f
or r11d, ebp
or r10d, r11d
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400d9276
jmp 0x1400d931d
add r9, 2
shl r10d, 6
or r10d, r13d
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400d9276
jmp 0x1400d931d
bt rdx, r13
jb 0x1400d945c
cmp r10d, 0x110000
je 0x1400d945c
cmp r10d, 0x5c
je 0x1400d945c
inc r8
cmp r10d, 0x80
jb 0x1400d9286
mov r11d, 2
cmp r10d, 0x800
jb 0x1400d9286
cmp r10d, 0x10000
mov r11d, 4
sbb r11, 0
jmp 0x1400d9286
add r9, 3
shl r10d, 0xc
or r10d, ebp
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400d9276
jmp 0x1400d931d
test rbp, rbp
je 0x1400d961a
cmp r14d, 0x23
je 0x1400d95aa
cmp r14d, 0x3f
je 0x1400d956f
cmp r14d, 0x110000
jne 0x1400d9607
cmp dword [rbp + 0x20], 0
je 0x1400d9a6a
mov ebx, dword [rbp + 0x24]
mov rdx, qword [rbp + 8]
test rbx, rbx
je 0x1400d9f9d
cmp qword [rbp + 0x10], rbx
jbe 0x1400da05a
cmp byte [rdx + rbx], 0xbf
jg 0x1400da060
jmp 0x1400da43b
mov rax, qword [rdi]
mov r12, qword [rdi + 0x10]
sub rax, r12
cmp rax, 6
mov qword [rsp + 0x68], r15
jbe 0x1400da107
mov rax, qword [rdi + 8]
mov dword [rax + r12 + 3], 0x2f2f3a65
mov dword [rax + r12], 0x656c6966
add r12, 7
mov qword [rdi + 0x10], r12
mov rcx, r13
mov rdx, rbx
call fcn.1400dc360
xor r15d, r15d
test rbp, rbp
je 0x1400d9a27
test al, al
jne 0x1400d9a27
cmp dword [rbp + 0x18], 0
je 0x1400d9724
lea rax, [rbp + 0x1c]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x3c]
cmp edx, ecx
jbe 0x1400d973f
jmp 0x1400da43b
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xc0], rbx
test r15b, 1
sete bpl
jne 0x1400d96dd
mov rcx, r12
test r8, r8
je 0x1400d9782
mov edx, 0x2600
mov rcx, r12
jmp 0x1400d94ac
add rcx, 2
shl r10d, 6
or r10d, r13d
mov r9d, r10d
nop
cmp r9d, 0xd
ja 0x1400d94c7
bt edx, r9d
jae 0x1400d94c7
cmp rcx, rbx
je 0x1400d977f
movzx r9d, byte [rcx]
test r9b, r9b
js 0x1400d94e0
inc rcx
cmp r9d, 0xd
jbe 0x1400d94a6
cmp r9d, 0x110000
je 0x1400d94ac
dec r8
jne 0x1400d94ac
jmp 0x1400d9782
mov r10d, r9d
and r10d, 0x1f
movzx r13d, byte [rcx + 1]
and r13d, 0x3f
cmp r9b, 0xdf
jbe 0x1400d9490
movzx r11d, byte [rcx + 2]
shl r13d, 6
and r11d, 0x3f
or r11d, r13d
cmp r9b, 0xf0
jb 0x1400d953d
movzx r9d, byte [rcx + 3]
add rcx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
cmp r9d, 0x110000
jne 0x1400d94a0
jmp 0x1400d9782
add rcx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xd
jbe 0x1400d94a6
jmp 0x1400d94c7
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], rbx
jmp 0x1400d97ab
cmp dword [rbp + 0x18], 0
je 0x1400d9a40
lea rax, [rbp + 0x1c]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
je 0x1400d9a5e
mov rax, qword [rbp + 0x10]
cmp rax, r12
jbe 0x1400d9e65
cmp byte [rdx + r12], 0xbf
jg 0x1400da179
jmp 0x1400da43b
mov rax, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rax
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov r8, rbp
mov r9, r15
call fcn.1400db1d0
jmp 0x1400da1fb
mov rcx, r15
mov rdx, rbx
call fcn.1400dc360
test al, al
je 0x1400d975c
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 7
jbe 0x1400da121
mov rax, qword [rdi + 8]
movabs rcx, 0x2f2f2f3a656c6966
mov qword [rax + rdx], rcx
add rdx, 8
mov qword [rdi + 0x10], rdx
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x70]
mov r9d, 7
mov rcx, rdi
xor edx, edx
call fcn.1400d7530
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dba30
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400da1ce
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movdqa xmm0, xmmword [0x1401b7550]
movdqu xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], 7
mov byte [rsi + 0x40], 0
jmp 0x1400da1fb
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0xb8]
call fcn.1400de800
mov rcx, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov r14, qword [rsp + 0x80]
jmp 0x1400d9a83
cmp dword [rbp + 0x20], 0
je 0x1400da02e
lea rax, [rbp + 0x24]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x3c]
cmp edx, ecx
ja 0x1400da43b
mov rax, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
test rdx, rdx
je 0x1400d97c5
cmp r8, rdx
jbe 0x1400d97bf
cmp byte [rax + rdx], 0xbf
jg 0x1400d97c5
jmp 0x1400da43b
cmp dword [rbp + 0x18], 0
je 0x1400da0cc
lea rax, [rbp + 0x1c]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
jne 0x1400da0ea
jmp 0x1400da26b
mov rcx, rbx
mov qword [rsp + 0xb8], rcx
test r14, r14
je 0x1400d97ab
cmp r14, rax
jae 0x1400d9a77
cmp byte [r12 + r14], 0xbf
jle 0x1400da43b
mov r13, r12
jmp 0x1400d9a83
mov r15d, 1
mov bpl, 1
xor r14d, r14d
mov r13, r12
jmp 0x1400d9b07
jne 0x1400da43b
test rcx, rcx
je 0x1400d97e0
cmp r8, rcx
jbe 0x1400d97da
cmp byte [rax + rcx], 0xbf
jg 0x1400d97e0
jmp 0x1400da43b
jne 0x1400da43b
lea rbp, [rax + rdx]
sub rcx, rdx
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xd0], rax
test rcx, rcx
je 0x1400da43b
cmp byte [rbp], 0x2f
jne 0x1400da43b
inc rbp
dec rcx
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], rcx
movabs rdx, 0x2f0000002f
mov qword [rsp + 0xa0], rdx
mov byte [rsp + 0xa8], 1
mov word [rsp + 0xb0], 1
mov al, 0x2f
xor edx, edx
movdqa xmm0, xmmword [0x1401b7530]
movdqa xmm1, xmmword [0x1401b7540]
movabs r9, 0x8080808080808080
mov r11, rcx
sub r11, rdx
lea r10, [rdx + rbp]
cmp r11, 0x10
jae 0x1400d98b8
cmp rcx, rdx
je 0x1400d9984
xor r8d, r8d
cmp byte [r10 + r8], 0x2f
je 0x1400d9964
inc r8
cmp r11, r8
jne 0x1400d98a0
jmp 0x1400d9984
lea r15, [r10 + 7]
and r15, 0xfffffffffffffff8
sub r15, r10
jne 0x1400d98ce
lea r8, [r11 - 0x10]
xor r15d, r15d
jmp 0x1400d9905
cmp r15, r11
cmovae r15, r11
xor r8d, r8d
nop dword [rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400d9964
inc r8
cmp r15, r8
jne 0x1400d98e0
lea r8, [r11 - 0x10]
nop word cs:[rax + rax]
cmp r15, r8
ja 0x1400d9934
movdqu xmm2, xmmword [r10 + r15]
movdqa xmm3, xmm2
pxor xmm3, xmm0
paddq xmm3, xmm1
pandn xmm2, xmm3
pshufd xmm3, xmm2, 0xee
por xmm3, xmm2
movq rax, xmm3
test rax, r9
jne 0x1400d9934
add r15, 0x10
jmp 0x1400d9900
cmp r15, r11
je 0x1400d9984
add r10, r15
mov r11, rcx
sub r11, r15
sub r11, rdx
xor r8d, r8d
mov al, 0x2f
nop word [rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400d9961
inc r8
cmp r11, r8
jne 0x1400d9950
jmp 0x1400d9984
add r8, r15
add r8, rdx
mov rdx, r8
inc rdx
je 0x1400d997b
cmp rdx, rcx
ja 0x1400d997b
cmp byte [rbp + r8], al
je 0x1400d9987
cmp rdx, rcx
jbe 0x1400d9884
mov r8, rcx
cmp r8, 2
jne 0x1400d99d3
movzx eax, byte [rbp]
and al, 0xdf
add al, 0xbf
cmp al, 0x19
ja 0x1400d99d3
cmp byte [rbp + 1], 0x3a
jne 0x1400d99d3
cmp r12, qword [rdi]
jne 0x1400d99b3
mov rcx, rdi
mov rdx, r12
call fcn.1400a1180
mov r12, qword [rdi + 0x10]
mov rax, qword [rdi + 8]
mov byte [rax + r12], 0x2f
inc qword [rdi + 0x10]
mov r8d, 2
mov rcx, rdi
mov rdx, rbp
call fcn.1400debe0
jmp 0x1400d9a24
mov rax, qword [rsp + 0x170]
movzx r15d, byte [rax + 0x40]
test r15b, r15b
je 0x1400d9a24
mov ecx, dword [rax + 0x34]
mov ebp, dword [rax + 0x38]
cmp ecx, ebp
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xd8]
ja 0x1400da43b
test rcx, rcx
je 0x1400d9e79
cmp rax, rcx
jbe 0x1400d9e73
cmp byte [rdx + rcx], 0xbf
jg 0x1400d9e79
jmp 0x1400da43b
xor r15d, r15d
mov r12d, 7
add r14d, 0xffffffdd
cmp r14d, 0x39
jbe 0x1400d9edf
jmp 0x1400d9ef4
cmp dword [rbp + 0x20], 0
je 0x1400da171
lea rax, [rbp + 0x24]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
jne 0x1400d958d
mov r13, qword [rdi + 0x10]
xor r12d, r12d
jmp 0x1400da18c
mov rdx, qword [rbp + 8]
mov rbx, qword [rbp + 0x10]
jmp 0x1400da060
jne 0x1400da43b
mov r13, r12
mov r14, rax
test r14, r14
je 0x1400d9ad3
cmp r14, 2
jne 0x1400d9ade
movzx eax, byte [r13]
and al, 0xdf
add al, 0xbf
cmp al, 0x19
ja 0x1400d9e2f
movzx eax, byte [r13 + 1]
cmp eax, 0x3a
je 0x1400d9ab2
cmp eax, 0x7c
jne 0x1400d9e2f
xor r14d, r14d
mov bpl, 1
test r15b, 1
je 0x1400d9ba5
test rcx, rcx
je 0x1400d9ba5
mov r15d, 1
jmp 0x1400d9b32
mov rbx, rcx
mov r15d, 1
jmp 0x1400d9b07
test r14, r14
js 0x1400da43b
mov rbx, rcx
movzx eax, byte [0x140254141]
xor ecx, ecx
mov rdx, r14
call fcn.14008bd10
mov r15, rax
test rax, rax
je 0x1400da43b
mov rcx, r15
mov rdx, r13
mov r8, r14
call sub.msvcrt.dll_memcpy
mov rax, rbx
mov r12, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
test bpl, bpl
jne 0x1400d9b43
test rax, rax
je 0x1400d9b43
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
test r14, r14
je 0x1400d9b9f
lea rcx, [rsp + 0x70]
mov rdx, r15
mov r8, r14
call fcn.1400dd420
mov rax, qword [rsp + 0x70]
movabs r13, 0x8000000000000000
lea r14, [r13 + 2]
cmp rax, r14
jne 0x1400d9c2a
movzx ebx, byte [rsp + 0x78]
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov byte [rsi + 8], bl
mov qword [rsi], r13
cmp qword [rdi], 0
jne 0x1400da1e9
jmp 0x1400da1fb
mov bpl, 1
xor r14d, r14d
mov qword [rsp + 0x68], rax
mov r15, qword [rdi + 0x10]
mov rax, r15
shr rax, 0x20
jne 0x1400da00e
test r14b, r14b
setne byte [rsp + 0xb8]
test bpl, bpl
je 0x1400d9d4d
mov rax, r15
cmp r15, qword [rdi]
jne 0x1400d9be6
mov rcx, rdi
mov rdx, r15
call fcn.1400a1180
mov rax, qword [rdi + 0x10]
mov rcx, qword [rdi + 8]
mov byte [rcx + rax], 0x2f
inc qword [rdi + 0x10]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0xb8]
mov rcx, rdi
xor edx, edx
mov r9, r15
call fcn.1400d7530
mov rbx, rax
mov r12, rdx
cmp byte [rsp + 0xb8], 0
jne 0x1400d9d9b
jmp 0x1400d9d77
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
lea rdx, [r13 + 1]
cmp rax, rdx
jle 0x1400d9c65
cmp rcx, 9
jne 0x1400d9c65
movabs rdx, 0x736f686c61636f6c
xor rdx, qword [r8]
movzx r9d, byte [r8 + 8]
xor r9, 0x74
or r9, rdx
je 0x1400da14f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], r8
mov qword [rsp + 0xc8], rcx
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xe0], rax
lea rax, [0x1400dcbd0]
mov qword [rsp + 0xe8], rax
lea rax, [0x140210378]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rdx, [0x140210128]
lea r8, [rsp + 0x70]
mov rcx, rdi
call fcn.14000da30
test al, al
jne 0x1400da43b
mov rax, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xc8]
xor ecx, ecx
cmp rax, r14
movabs rdx, 0x8000000000000000
lea rdx, [rdx + rax + 1]
cmovl rcx, rdx
test rcx, rcx
mov qword [rsp + 0xd0], r8
je 0x1400d9fa8
cmp rcx, 1
jne 0x1400d9fb6
mov r14b, 2
mov qword [rsp + 0x68], rcx
jmp 0x1400d9fc5
mov qword [rsp + 0x20], rbx
lea r8, [rsp + 0xb8]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400dc6a0
mov rbx, rax
mov r12, rdx
cmp byte [rsp + 0xb8], 0
jne 0x1400d9d9b
lea r14, [rsp + 0x70]
mov rcx, r14
mov rdx, rdi
mov r8, r15
call fcn.1400de7b0
mov rcx, r14
call fcn.14000cbd0
mov r15d, 7
xor r14d, r14d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dba30
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400da1ce
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], r15d
mov dword [rsi + 0x3c], r15d
mov byte [rsi + 0x40], r14b
mov dword [rsi + 0x41], r13d
mov rax, qword [rsp + 0x68]
mov dword [rsi + 0x45], eax
mov rax, qword [rsp + 0xd0]
mov qword [rsi + 0x49], rax
jmp 0x1400da1fb
mov rbx, rcx
movzx eax, byte [0x140254141]
mov r14d, 2
mov edx, 2
xor ecx, ecx
call fcn.14008bd10
test rax, rax
je 0x1400da43b
mov r15, rax
movzx eax, word [r13]
mov word [r15], ax
jmp 0x1400d9b15
mov r12, rax
je 0x1400da179
jmp 0x1400da43b
jne 0x1400da43b
test rbp, rbp
je 0x1400d9e94
cmp rax, rbp
jbe 0x1400d9e8e
cmp byte [rdx + rbp], 0xbf
jg 0x1400d9e94
jmp 0x1400da43b
jne 0x1400da43b
add rdx, rcx
sub rbp, rcx
mov rax, qword [rdi]
sub rax, r12
cmp rax, rbp
jb 0x1400da3c4
mov rcx, qword [rdi + 8]
add rcx, r12
mov r8, rbp
call sub.msvcrt.dll_memcpy
add r12, rbp
mov qword [rdi + 0x10], r12
mov rax, qword [rsp + 0x170]
movdqu xmm0, xmmword [rax + 0x41]
movdqa xmmword [rsp + 0xf0], xmm0
add r14d, 0xffffffdd
cmp r14d, 0x39
ja 0x1400d9ef4
movabs rax, 0x200000010001001
bt rax, r14
jae 0x1400d9ef4
mov r13, qword [rsp + 0x68]
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400d7530
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dba30
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400da1ce
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], r12d
mov dword [rsi + 0x3c], r12d
mov byte [rsi + 0x40], r15b
movdqa xmm0, xmmword [rsp + 0xf0]
movdqu xmmword [rsi + 0x41], xmm0
jmp 0x1400da1fb
mov r15, qword [rdi + 0x10]
xor ebx, ebx
jmp 0x1400da073
test r8, r8
setne r14b
mov qword [rsp + 0x68], rcx
jmp 0x1400d9fc5
mov rcx, r13
shr rcx, 0x20
mov qword [rsp + 0x68], rcx
mov r14b, 3
movabs rcx, 0x8000000000000002
cmp rax, rcx
jl 0x1400d9fea
test rax, rax
je 0x1400d9fea
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
xor ebp, ebp
mov rcx, qword [0x1402540f8]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov r15, qword [rdi + 0x10]
mov rax, r15
shr rax, 0x20
je 0x1400d9bbb
mov byte [rsi + 8], 9
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rdi], 0
jne 0x1400da1e9
jmp 0x1400da1fb
mov edx, dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
test rdx, rdx
je 0x1400da3ab
cmp r8, rdx
jbe 0x1400da3a5
cmp byte [rax + rdx], 0xbf
jg 0x1400da3ab
jmp 0x1400da43b
jne 0x1400da43b
mov rax, qword [rdi]
mov r15, qword [rdi + 0x10]
sub rax, r15
cmp rax, rbx
jb 0x1400da3e4
mov rcx, qword [rdi + 8]
add rcx, r15
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r15, rbx
mov qword [rdi + 0x10], r15
mov eax, dword [rbp + 0x3c]
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov rcx, qword [rbp + 0x18]
mov qword [rsi + 0x18], rcx
mov dword [rsi + 0x20], 0
mov ecx, dword [rbp + 0x28]
mov dword [rsi + 0x28], ecx
movups xmm0, xmmword [rbp + 0x2c]
movups xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], eax
movzx eax, byte [rbp + 0x50]
mov byte [rsi + 0x50], al
movdqu xmm0, xmmword [rbp + 0x40]
movdqu xmmword [rsi + 0x40], xmm0
jmp 0x1400da1fb
cmp dword [rbp + 0x20], 0
je 0x1400da263
lea rax, [rbp + 0x24]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
je 0x1400da26b
mov rax, qword [rbp + 0x10]
cmp rax, r12
jbe 0x1400da259
cmp byte [rdx + r12], 0xbf
jg 0x1400da26b
jmp 0x1400da43b
mov r8d, 7
mov rcx, rdi
mov rdx, r12
call fcn.1400deb40
mov r12, qword [rdi + 0x10]
jmp 0x1400d9400
mov r8d, 8
mov rcx, rdi
call fcn.1400deb40
mov rdx, qword [rdi + 0x10]
jmp 0x1400d962e
mov r8d, 7
mov rcx, rdi
call fcn.1400deb40
mov rdx, qword [rdi + 0x10]
jmp 0x1400d9217
mov bpl, 1
test rax, rax
je 0x1400da3b7
mov rcx, qword [0x1402540f8]
xor r14d, r14d
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400da3ba
mov rdx, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov rax, qword [rdi]
mov r13, qword [rdi + 0x10]
sub rax, r13
cmp rax, r12
jb 0x1400da401
mov rcx, qword [rdi + 8]
add rcx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
add r13, r12
mov qword [rdi + 0x10], r13
mov r14, rbp
mov ebp, dword [rbp + 0x2c]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, ebp
call fcn.1400dba30
mov eax, dword [rsp + 0x70]
cmp eax, 2
jne 0x1400da210
movzx eax, byte [rsp + 0x74]
mov byte [rsi + 8], al
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rdi], 0
je 0x1400da1fb
mov r8, qword [rdi + 8]
mov rcx, qword [0x1402540f8]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov eax, dword [r14 + 0x28]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x2c], ebp
movups xmm0, xmmword [r14 + 0x30]
movups xmmword [rsi + 0x30], xmm0
movdqu xmm0, xmmword [r14 + 0x40]
movdqu xmmword [rsi + 0x40], xmm0
movzx eax, byte [r14 + 0x50]
mov byte [rsi + 0x50], al
jmp 0x1400da1fb
mov r12, rax
je 0x1400da26b
jmp 0x1400da43b
mov rdx, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov rax, qword [rdi]
mov r13, qword [rdi + 0x10]
sub rax, r13
cmp rax, r12
jb 0x1400da41e
mov rcx, qword [rdi + 8]
add rcx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
add r13, r12
mov qword [rdi + 0x10], r13
mov r12d, dword [rbp + 0x3c]
mov rcx, r13
sub rcx, r12
je 0x1400da2e8
mov rax, qword [rdi + 8]
test r12, r12
je 0x1400da2bd
cmp r13, r12
jbe 0x1400da43b
cmp byte [rax + r12], 0xbf
jle 0x1400da43b
cmp rcx, 2
jne 0x1400da2db
movzx ecx, byte [rax + r12]
and cl, 0xdf
add cl, 0xbf
cmp cl, 0x19
ja 0x1400da2db
cmp byte [rax + r12 + 1], 0x3a
je 0x1400da2e8
mov rcx, rdi
xor edx, edx
mov r8, r12
call fcn.1400dc180
mov byte [rsp + 0x70], 1
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400d7530
mov rcx, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rcx
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov r9d, dword [rbp + 0x2c]
mov ecx, dword [rbp + 0x30]
mov r8d, dword [rbp + 0x34]
mov r10d, dword [rbp + 0x38]
lea r11, [rbp + 0x40]
movzx edi, word [rbp + 0x28]
movzx ebx, word [rbp + 0x2a]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], r12d
mov word [rsp + 0x48], bx
mov word [rsp + 0x40], di
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], ecx
lea rdx, [rsp + 0x70]
mov rcx, rsi
xor r8d, r8d
call fcn.1400d8300
jmp 0x1400da1fb
jne 0x1400da43b
lea rbp, [rax + rdx]
mov rcx, r8
jmp 0x1400d97e4
xor r14d, r14d
mov qword [rsp + 0x68], rax
jmp 0x1400d9fec
mov rcx, rdi
mov rax, rdx
mov rdx, r12
mov r8, rbp
mov r12, rax
call fcn.1400deb40
mov rdx, r12
mov r12, qword [rdi + 0x10]
jmp 0x1400d9ea9
mov rcx, rdi
mov r14, rdx
mov rdx, r15
mov r8, rbx
call fcn.1400deb40
mov rdx, r14
mov r15, qword [rdi + 0x10]
jmp 0x1400da073
mov rcx, rdi
mov r14, rdx
mov rdx, r13
mov r8, r12
call fcn.1400deb40
mov rdx, r14
mov r13, qword [rdi + 0x10]
jmp 0x1400da18c
mov rcx, rdi
mov r14, rdx
mov rdx, r13
mov r8, r12
call fcn.1400deb40
mov rdx, r14
mov r13, qword [rdi + 0x10]
jmp 0x1400da27e
ud2