Function at 0x1400dd1d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x108
mov rbx, r9
mov r15, r8
mov rdi, rdx
mov rsi, rcx
mov rbp, qword [rsp + 0x170]
mov eax, 0x2600
mov r13, r8
jmp 0x1400dd238
inc r13
cmp ecx, 0xd
ja 0x1400dd2e0
mov r14d, 0x110000
bt eax, ecx
jae 0x1400dd2e0
cmp r14d, 0x110000
jne 0x1400dd2f0
mov r14d, 0x110000
cmp r13, rbx
je 0x1400dd5ba
movzx ecx, byte [r13]
test cl, cl
jns 0x1400dd210
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [r13 + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400dd2aa
movzx r8d, byte [r13 + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp cl, 0xf0
jb 0x1400dd2c1
movzx ecx, byte [r13 + 3]
and edx, 7
shl edx, 0x12
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
or ecx, edx
cmp ecx, 0x110000
je 0x1400dd5ba
add r13, 4
cmp ecx, 0xd
jbe 0x1400dd21c
jmp 0x1400dd2e0
add r13, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400dd21c
jmp 0x1400dd2e0
add r13, 3
shl edx, 0xc
or r8d, edx
mov ecx, r8d
cmp ecx, 0xd
jbe 0x1400dd21c
nop word [rax + rax]
mov r14d, ecx
cmp r14d, 0x110000
je 0x1400dd238
cmp r14d, 0x2f
je 0x1400dd300
cmp r14d, 0x5c
jne 0x1400dd5ba
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400dd318
cmp r14d, 0x5c
jne 0x1400dd318
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov eax, 0x2600
mov r12, r13
jmp 0x1400dd356
inc r12
cmp ecx, 0xd
ja 0x1400dd400
mov edx, 0x110000
bt eax, ecx
jae 0x1400dd400
cmp edx, 0x110000
jne 0x1400dd40e
cmp r12, rbx
je 0x1400dd617
movzx ecx, byte [r12]
test cl, cl
jns 0x1400dd330
mov edx, ecx
and edx, 0x1f
movzx r9d, byte [r12 + 1]
and r9d, 0x3f
cmp cl, 0xdf
jbe 0x1400dd3c5
movzx r8d, byte [r12 + 2]
shl r9d, 6
and r8d, 0x3f
or r8d, r9d
cmp cl, 0xf0
jb 0x1400dd3dc
movzx ecx, byte [r12 + 3]
and edx, 7
shl edx, 0x12
shl r8d, 6
and ecx, 0x3f
or ecx, r8d
or ecx, edx
cmp ecx, 0x110000
je 0x1400dd617
add r12, 4
cmp ecx, 0xd
jbe 0x1400dd33c
jmp 0x1400dd400
add r12, 2
shl edx, 6
or edx, r9d
mov ecx, edx
cmp ecx, 0xd
jbe 0x1400dd33c
jmp 0x1400dd400
add r12, 3
shl edx, 0xc
or r8d, edx
mov ecx, r8d
cmp ecx, 0xd
jbe 0x1400dd33c
nop word cs:[rax + rax]
mov edx, ecx
cmp edx, 0x110000
je 0x1400dd356
cmp edx, 0x2f
je 0x1400dd41c
cmp edx, 0x5c
jne 0x1400dd617
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x1400dd433
cmp edx, 0x5c
jne 0x1400dd433
mov rax, qword [rdi + 0x38]
xor edx, edx
call qword [rax + 0x28]
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 6
jbe 0x1400de368
mov rax, qword [rdi + 8]
mov dword [rax + rdx + 3], 0x2f2f3a65
mov dword [rax + rdx], 0x656c6966
add rdx, 7
mov qword [rdi + 0x10], rdx
mov rax, rbx
sub rax, r12
je 0x1400dd78a
xor r15d, r15d
mov ecx, 0x2600
movabs rdx, 0x8000800800000000
xor r8d, r8d
xor r14d, r14d
mov r9, r12
jmp 0x1400dd4c2
inc r9
mov r10d, r11d
mov r11d, 1
cmp r10d, 0x3f
ja 0x1400dd54d
mov r13d, r10d
bt rcx, r13
jae 0x1400dd543
mov r15b, 1
add r14, r11
cmp r9, rbx
je 0x1400dd68c
movzx r11d, byte [r9]
test r11b, r11b
jns 0x1400dd490
mov r10d, r11d
and r10d, 0x1f
movzx r13d, byte [r9 + 1]
and r13d, 0x3f
cmp r11b, 0xdf
jbe 0x1400dd526
movzx ebp, byte [r9 + 2]
shl r13d, 6
and ebp, 0x3f
or ebp, r13d
cmp r11b, 0xf0
jb 0x1400dd59d
movzx r11d, byte [r9 + 3]
add r9, 4
and r10d, 7
shl r10d, 0x12
shl ebp, 6
and r11d, 0x3f
or r11d, ebp
or r10d, r11d
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400dd4a6
jmp 0x1400dd54d
add r9, 2
shl r10d, 6
or r10d, r13d
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400dd4a6
jmp 0x1400dd54d
bt rdx, r13
jb 0x1400dd68c
cmp r10d, 0x110000
je 0x1400dd68c
cmp r10d, 0x5c
je 0x1400dd68c
inc r8
cmp r10d, 0x80
jb 0x1400dd4b6
mov r11d, 2
cmp r10d, 0x800
jb 0x1400dd4b6
cmp r10d, 0x10000
mov r11d, 4
sbb r11, 0
jmp 0x1400dd4b6
add r9, 3
shl r10d, 0xc
or r10d, ebp
mov r11d, 1
cmp r10d, 0x3f
jbe 0x1400dd4a6
jmp 0x1400dd54d
test rbp, rbp
je 0x1400dd84a
cmp r14d, 0x23
je 0x1400dd7da
cmp r14d, 0x3f
je 0x1400dd79f
cmp r14d, 0x110000
jne 0x1400dd837
cmp dword [rbp + 0x20], 0
je 0x1400ddc9a
mov ebx, dword [rbp + 0x24]
mov rdx, qword [rbp + 8]
test rbx, rbx
je 0x1400de1cd
cmp qword [rbp + 0x10], rbx
jbe 0x1400de28a
cmp byte [rdx + rbx], 0xbf
jg 0x1400de290
jmp 0x1400de66b
mov rax, qword [rdi]
mov r12, qword [rdi + 0x10]
sub rax, r12
cmp rax, 6
mov qword [rsp + 0x68], r15
jbe 0x1400de337
mov rax, qword [rdi + 8]
mov dword [rax + r12 + 3], 0x2f2f3a65
mov dword [rax + r12], 0x656c6966
add r12, 7
mov qword [rdi + 0x10], r12
mov rcx, r13
mov rdx, rbx
call fcn.1400e0590
xor r15d, r15d
test rbp, rbp
je 0x1400ddc57
test al, al
jne 0x1400ddc57
cmp dword [rbp + 0x18], 0
je 0x1400dd954
lea rax, [rbp + 0x1c]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x3c]
cmp edx, ecx
jbe 0x1400dd96f
jmp 0x1400de66b
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xc0], rbx
test r15b, 1
sete bpl
jne 0x1400dd90d
mov rcx, r12
test r8, r8
je 0x1400dd9b2
mov edx, 0x2600
mov rcx, r12
jmp 0x1400dd6dc
add rcx, 2
shl r10d, 6
or r10d, r13d
mov r9d, r10d
nop
cmp r9d, 0xd
ja 0x1400dd6f7
bt edx, r9d
jae 0x1400dd6f7
cmp rcx, rbx
je 0x1400dd9af
movzx r9d, byte [rcx]
test r9b, r9b
js 0x1400dd710
inc rcx
cmp r9d, 0xd
jbe 0x1400dd6d6
cmp r9d, 0x110000
je 0x1400dd6dc
dec r8
jne 0x1400dd6dc
jmp 0x1400dd9b2
mov r10d, r9d
and r10d, 0x1f
movzx r13d, byte [rcx + 1]
and r13d, 0x3f
cmp r9b, 0xdf
jbe 0x1400dd6c0
movzx r11d, byte [rcx + 2]
shl r13d, 6
and r11d, 0x3f
or r11d, r13d
cmp r9b, 0xf0
jb 0x1400dd76d
movzx r9d, byte [rcx + 3]
add rcx, 4
and r10d, 7
shl r10d, 0x12
shl r11d, 6
and r9d, 0x3f
or r9d, r11d
or r9d, r10d
cmp r9d, 0x110000
jne 0x1400dd6d0
jmp 0x1400dd9b2
add rcx, 3
shl r10d, 0xc
or r11d, r10d
mov r9d, r11d
cmp r9d, 0xd
jbe 0x1400dd6d6
jmp 0x1400dd6f7
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], rbx
jmp 0x1400dd9db
cmp dword [rbp + 0x18], 0
je 0x1400ddc70
lea rax, [rbp + 0x1c]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
je 0x1400ddc8e
mov rax, qword [rbp + 0x10]
cmp rax, r12
jbe 0x1400de095
cmp byte [rdx + r12], 0xbf
jg 0x1400de3a9
jmp 0x1400de66b
mov rax, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rax
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x20], rbx
lea rdx, [rsp + 0x70]
mov rcx, rsi
mov r8, rbp
mov r9, r15
call fcn.1400df400
jmp 0x1400de42b
mov rcx, r15
mov rdx, rbx
call fcn.1400e0590
test al, al
je 0x1400dd98c
mov rax, qword [rdi]
mov rdx, qword [rdi + 0x10]
sub rax, rdx
cmp rax, 7
jbe 0x1400de351
mov rax, qword [rdi + 8]
movabs rcx, 0x2f2f2f3a656c6966
mov qword [rax + rdx], rcx
add rdx, 8
mov qword [rdi + 0x10], rdx
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x70]
mov r9d, 7
mov rcx, rdi
xor edx, edx
call fcn.1400db770
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dfc60
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400de3fe
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movdqa xmm0, xmmword [0x1401bc590]
movdqu xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], 7
mov byte [rsi + 0x40], 0
jmp 0x1400de42b
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0xb8]
call fcn.1400e2a30
mov rcx, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov r14, qword [rsp + 0x80]
jmp 0x1400ddcb3
cmp dword [rbp + 0x20], 0
je 0x1400de25e
lea rax, [rbp + 0x24]
mov ecx, dword [rax]
mov edx, dword [rbp + 0x3c]
cmp edx, ecx
ja 0x1400de66b
mov rax, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
test rdx, rdx
je 0x1400dd9f5
cmp r8, rdx
jbe 0x1400dd9ef
cmp byte [rax + rdx], 0xbf
jg 0x1400dd9f5
jmp 0x1400de66b
cmp dword [rbp + 0x18], 0
je 0x1400de2fc
lea rax, [rbp + 0x1c]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
jne 0x1400de31a
jmp 0x1400de49b
mov rcx, rbx
mov qword [rsp + 0xb8], rcx
test r14, r14
je 0x1400dd9db
cmp r14, rax
jae 0x1400ddca7
cmp byte [r12 + r14], 0xbf
jle 0x1400de66b
mov r13, r12
jmp 0x1400ddcb3
mov r15d, 1
mov bpl, 1
xor r14d, r14d
mov r13, r12
jmp 0x1400ddd37
jne 0x1400de66b
test rcx, rcx
je 0x1400dda10
cmp r8, rcx
jbe 0x1400dda0a
cmp byte [rax + rcx], 0xbf
jg 0x1400dda10
jmp 0x1400de66b
jne 0x1400de66b
lea rbp, [rax + rdx]
sub rcx, rdx
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0xd0], rax
test rcx, rcx
je 0x1400de66b
cmp byte [rbp], 0x2f
jne 0x1400de66b
inc rbp
dec rcx
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], rcx
movabs rdx, 0x2f0000002f
mov qword [rsp + 0xa0], rdx
mov byte [rsp + 0xa8], 1
mov word [rsp + 0xb0], 1
mov al, 0x2f
xor edx, edx
movdqa xmm0, xmmword [0x1401bc570]
movdqa xmm1, xmmword [0x1401bc580]
movabs r9, 0x8080808080808080
mov r11, rcx
sub r11, rdx
lea r10, [rdx + rbp]
cmp r11, 0x10
jae 0x1400ddae8
cmp rcx, rdx
je 0x1400ddbb4
xor r8d, r8d
cmp byte [r10 + r8], 0x2f
je 0x1400ddb94
inc r8
cmp r11, r8
jne 0x1400ddad0
jmp 0x1400ddbb4
lea r15, [r10 + 7]
and r15, 0xfffffffffffffff8
sub r15, r10
jne 0x1400ddafe
lea r8, [r11 - 0x10]
xor r15d, r15d
jmp 0x1400ddb35
cmp r15, r11
cmovae r15, r11
xor r8d, r8d
nop dword [rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400ddb94
inc r8
cmp r15, r8
jne 0x1400ddb10
lea r8, [r11 - 0x10]
nop word cs:[rax + rax]
cmp r15, r8
ja 0x1400ddb64
movdqu xmm2, xmmword [r10 + r15]
movdqa xmm3, xmm2
pxor xmm3, xmm0
paddq xmm3, xmm1
pandn xmm2, xmm3
pshufd xmm3, xmm2, 0xee
por xmm3, xmm2
movq rax, xmm3
test rax, r9
jne 0x1400ddb64
add r15, 0x10
jmp 0x1400ddb30
cmp r15, r11
je 0x1400ddbb4
add r10, r15
mov r11, rcx
sub r11, r15
sub r11, rdx
xor r8d, r8d
mov al, 0x2f
nop word [rax + rax]
cmp byte [r10 + r8], 0x2f
je 0x1400ddb91
inc r8
cmp r11, r8
jne 0x1400ddb80
jmp 0x1400ddbb4
add r8, r15
add r8, rdx
mov rdx, r8
inc rdx
je 0x1400ddbab
cmp rdx, rcx
ja 0x1400ddbab
cmp byte [rbp + r8], al
je 0x1400ddbb7
cmp rdx, rcx
jbe 0x1400ddab4
mov r8, rcx
cmp r8, 2
jne 0x1400ddc03
movzx eax, byte [rbp]
and al, 0xdf
add al, 0xbf
cmp al, 0x19
ja 0x1400ddc03
cmp byte [rbp + 1], 0x3a
jne 0x1400ddc03
cmp r12, qword [rdi]
jne 0x1400ddbe3
mov rcx, rdi
mov rdx, r12
call fcn.140086540
mov r12, qword [rdi + 0x10]
mov rax, qword [rdi + 8]
mov byte [rax + r12], 0x2f
inc qword [rdi + 0x10]
mov r8d, 2
mov rcx, rdi
mov rdx, rbp
call fcn.1400e2f40
jmp 0x1400ddc54
mov rax, qword [rsp + 0x170]
movzx r15d, byte [rax + 0x40]
test r15b, r15b
je 0x1400ddc54
mov ecx, dword [rax + 0x34]
mov ebp, dword [rax + 0x38]
cmp ecx, ebp
mov rdx, qword [rsp + 0xd0]
mov rax, qword [rsp + 0xd8]
ja 0x1400de66b
test rcx, rcx
je 0x1400de0a9
cmp rax, rcx
jbe 0x1400de0a3
cmp byte [rdx + rcx], 0xbf
jg 0x1400de0a9
jmp 0x1400de66b
xor r15d, r15d
mov r12d, 7
add r14d, 0xffffffdd
cmp r14d, 0x39
jbe 0x1400de10f
jmp 0x1400de124
cmp dword [rbp + 0x20], 0
je 0x1400de3a1
lea rax, [rbp + 0x24]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
jne 0x1400dd7bd
mov r13, qword [rdi + 0x10]
xor r12d, r12d
jmp 0x1400de3bc
mov rdx, qword [rbp + 8]
mov rbx, qword [rbp + 0x10]
jmp 0x1400de290
jne 0x1400de66b
mov r13, r12
mov r14, rax
test r14, r14
je 0x1400ddd03
cmp r14, 2
jne 0x1400ddd0e
movzx eax, byte [r13]
and al, 0xdf
add al, 0xbf
cmp al, 0x19
ja 0x1400de05f
movzx eax, byte [r13 + 1]
cmp eax, 0x3a
je 0x1400ddce2
cmp eax, 0x7c
jne 0x1400de05f
xor r14d, r14d
mov bpl, 1
test r15b, 1
je 0x1400dddd5
test rcx, rcx
je 0x1400dddd5
mov r15d, 1
jmp 0x1400ddd62
mov rbx, rcx
mov r15d, 1
jmp 0x1400ddd37
test r14, r14
js 0x1400de66b
mov rbx, rcx
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, r14
call fcn.14008b700
mov r15, rax
test rax, rax
je 0x1400de66b
mov rcx, r15
mov rdx, r13
mov r8, r14
call sub.msvcrt.dll_memcpy
mov rax, rbx
mov r12, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
test bpl, bpl
jne 0x1400ddd73
test rax, rax
je 0x1400ddd73
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
test r14, r14
je 0x1400dddcf
lea rcx, [rsp + 0x70]
mov rdx, r15
mov r8, r14
call fcn.1400e1650
mov rax, qword [rsp + 0x70]
movabs r13, 0x8000000000000000
lea r14, [r13 + 2]
cmp rax, r14
jne 0x1400dde5a
movzx ebx, byte [rsp + 0x78]
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov byte [rsi + 8], bl
mov qword [rsi], r13
cmp qword [rdi], 0
jne 0x1400de419
jmp 0x1400de42b
mov bpl, 1
xor r14d, r14d
mov qword [rsp + 0x68], rax
mov r15, qword [rdi + 0x10]
mov rax, r15
shr rax, 0x20
jne 0x1400de23e
test r14b, r14b
setne byte [rsp + 0xb8]
test bpl, bpl
je 0x1400ddf7d
mov rax, r15
cmp r15, qword [rdi]
jne 0x1400dde16
mov rcx, rdi
mov rdx, r15
call fcn.140086540
mov rax, qword [rdi + 0x10]
mov rcx, qword [rdi + 8]
mov byte [rcx + rax], 0x2f
inc qword [rdi + 0x10]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0xb8]
mov rcx, rdi
xor edx, edx
mov r9, r15
call fcn.1400db770
mov rbx, rax
mov r12, rdx
cmp byte [rsp + 0xb8], 0
jne 0x1400ddfcb
jmp 0x1400ddfa7
mov r8, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
lea rdx, [r13 + 1]
cmp rax, rdx
jle 0x1400dde95
cmp rcx, 9
jne 0x1400dde95
movabs rdx, 0x736f686c61636f6c
xor rdx, qword [r8]
movzx r9d, byte [r8 + 8]
xor r9, 0x74
or r9, rdx
je 0x1400de37f
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], r8
mov qword [rsp + 0xc8], rcx
lea rax, [rsp + 0xb8]
mov qword [rsp + 0xe0], rax
lea rax, [0x1400e0e00]
mov qword [rsp + 0xe8], rax
lea rax, [0x140215b28]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 1
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 1
lea rdx, [0x1402158d8]
lea r8, [rsp + 0x70]
mov rcx, rdi
call fcn.14000c7a0
test al, al
jne 0x1400de66b
mov rax, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xc8]
xor ecx, ecx
cmp rax, r14
movabs rdx, 0x8000000000000000
lea rdx, [rdx + rax + 1]
cmovl rcx, rdx
test rcx, rcx
mov qword [rsp + 0xd0], r8
je 0x1400de1d8
cmp rcx, 1
jne 0x1400de1e6
mov r14b, 2
mov qword [rsp + 0x68], rcx
jmp 0x1400de1f5
mov qword [rsp + 0x20], rbx
lea r8, [rsp + 0xb8]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400e08d0
mov rbx, rax
mov r12, rdx
cmp byte [rsp + 0xb8], 0
jne 0x1400ddfcb
lea r14, [rsp + 0x70]
mov rcx, r14
mov rdx, rdi
mov r8, r15
call fcn.1400e29e0
mov rcx, r14
call fcn.14000b590
mov r15d, 7
xor r14d, r14d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], rbx
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dfc60
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400de3fe
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], r15d
mov dword [rsi + 0x3c], r15d
mov byte [rsi + 0x40], r14b
mov dword [rsi + 0x41], r13d
mov rax, qword [rsp + 0x68]
mov dword [rsi + 0x45], eax
mov rax, qword [rsp + 0xd0]
mov qword [rsi + 0x49], rax
jmp 0x1400de42b
mov rbx, rcx
movzx eax, byte [0x140259141]
mov r14d, 2
mov edx, 2
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400de66b
mov r15, rax
movzx eax, word [r13]
mov word [r15], ax
jmp 0x1400ddd45
mov r12, rax
je 0x1400de3a9
jmp 0x1400de66b
jne 0x1400de66b
test rbp, rbp
je 0x1400de0c4
cmp rax, rbp
jbe 0x1400de0be
cmp byte [rdx + rbp], 0xbf
jg 0x1400de0c4
jmp 0x1400de66b
jne 0x1400de66b
add rdx, rcx
sub rbp, rcx
mov rax, qword [rdi]
sub rax, r12
cmp rax, rbp
jb 0x1400de5f4
mov rcx, qword [rdi + 8]
add rcx, r12
mov r8, rbp
call sub.msvcrt.dll_memcpy
add r12, rbp
mov qword [rdi + 0x10], r12
mov rax, qword [rsp + 0x170]
movdqu xmm0, xmmword [rax + 0x41]
movdqa xmmword [rsp + 0xf0], xmm0
add r14d, 0xffffffdd
cmp r14d, 0x39
ja 0x1400de124
movabs rax, 0x200000010001001
bt rax, r14
jae 0x1400de124
mov r13, qword [rsp + 0x68]
mov byte [rsp + 0x70], 0
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400db770
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, 4
call fcn.1400dfc60
mov eax, dword [rsp + 0x70]
cmp eax, 2
je 0x1400de3fe
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], 0
movabs rax, 0x700000004
mov qword [rsi + 0x2c], rax
mov dword [rsi + 0x34], 7
mov dword [rsi + 0x38], r12d
mov dword [rsi + 0x3c], r12d
mov byte [rsi + 0x40], r15b
movdqa xmm0, xmmword [rsp + 0xf0]
movdqu xmmword [rsi + 0x41], xmm0
jmp 0x1400de42b
mov r15, qword [rdi + 0x10]
xor ebx, ebx
jmp 0x1400de2a3
test r8, r8
setne r14b
mov qword [rsp + 0x68], rcx
jmp 0x1400de1f5
mov rcx, r13
shr rcx, 0x20
mov qword [rsp + 0x68], rcx
mov r14b, 3
movabs rcx, 0x8000000000000002
cmp rax, rcx
jl 0x1400de21a
test rax, rax
je 0x1400de21a
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
xor ebp, ebp
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
mov r15, qword [rdi + 0x10]
mov rax, r15
shr rax, 0x20
je 0x1400dddeb
mov byte [rsi + 8], 9
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rdi], 0
jne 0x1400de419
jmp 0x1400de42b
mov edx, dword [rbp + 0x3c]
mov rax, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
test rdx, rdx
je 0x1400de5db
cmp r8, rdx
jbe 0x1400de5d5
cmp byte [rax + rdx], 0xbf
jg 0x1400de5db
jmp 0x1400de66b
jne 0x1400de66b
mov rax, qword [rdi]
mov r15, qword [rdi + 0x10]
sub rax, r15
cmp rax, rbx
jb 0x1400de614
mov rcx, qword [rdi + 8]
add rcx, r15
mov r8, rbx
call sub.msvcrt.dll_memcpy
add r15, rbx
mov qword [rdi + 0x10], r15
mov eax, dword [rbp + 0x3c]
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], r15
mov rcx, qword [rbp + 0x18]
mov qword [rsi + 0x18], rcx
mov dword [rsi + 0x20], 0
mov ecx, dword [rbp + 0x28]
mov dword [rsi + 0x28], ecx
movups xmm0, xmmword [rbp + 0x2c]
movups xmmword [rsi + 0x2c], xmm0
mov dword [rsi + 0x3c], eax
movzx eax, byte [rbp + 0x50]
mov byte [rsi + 0x50], al
movdqu xmm0, xmmword [rbp + 0x40]
movdqu xmmword [rsi + 0x40], xmm0
jmp 0x1400de42b
cmp dword [rbp + 0x20], 0
je 0x1400de493
lea rax, [rbp + 0x24]
mov r12d, dword [rax]
mov rdx, qword [rbp + 8]
test r12, r12
je 0x1400de49b
mov rax, qword [rbp + 0x10]
cmp rax, r12
jbe 0x1400de489
cmp byte [rdx + r12], 0xbf
jg 0x1400de49b
jmp 0x1400de66b
mov r8d, 7
mov rcx, rdi
mov rdx, r12
call fcn.1400e2df0
mov r12, qword [rdi + 0x10]
jmp 0x1400dd630
mov r8d, 8
mov rcx, rdi
call fcn.1400e2df0
mov rdx, qword [rdi + 0x10]
jmp 0x1400dd85e
mov r8d, 7
mov rcx, rdi
call fcn.1400e2df0
mov rdx, qword [rdi + 0x10]
jmp 0x1400dd447
mov bpl, 1
test rax, rax
je 0x1400de5e7
mov rcx, qword [0x1402590e0]
xor r14d, r14d
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400de5ea
mov rdx, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov rax, qword [rdi]
mov r13, qword [rdi + 0x10]
sub rax, r13
cmp rax, r12
jb 0x1400de631
mov rcx, qword [rdi + 8]
add rcx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
add r13, r12
mov qword [rdi + 0x10], r13
mov r14, rbp
mov ebp, dword [rbp + 0x2c]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x70]
mov rdx, rdi
xor r8d, r8d
mov r9d, ebp
call fcn.1400dfc60
mov eax, dword [rsp + 0x70]
cmp eax, 2
jne 0x1400de440
movzx eax, byte [rsp + 0x74]
mov byte [rsi + 8], al
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rdi], 0
je 0x1400de42b
mov r8, qword [rdi + 8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
nop
add rsp, 0x108
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0x74]
mov r8, qword [rdi + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rdi]
movups xmmword [rsi], xmm0
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov eax, dword [r14 + 0x28]
mov dword [rsi + 0x28], eax
mov dword [rsi + 0x2c], ebp
movups xmm0, xmmword [r14 + 0x30]
movups xmmword [rsi + 0x30], xmm0
movdqu xmm0, xmmword [r14 + 0x40]
movdqu xmmword [rsi + 0x40], xmm0
movzx eax, byte [r14 + 0x50]
mov byte [rsi + 0x50], al
jmp 0x1400de42b
mov r12, rax
je 0x1400de49b
jmp 0x1400de66b
mov rdx, qword [rbp + 8]
mov r12, qword [rbp + 0x10]
mov rax, qword [rdi]
mov r13, qword [rdi + 0x10]
sub rax, r13
cmp rax, r12
jb 0x1400de64e
mov rcx, qword [rdi + 8]
add rcx, r13
mov r8, r12
call sub.msvcrt.dll_memcpy
add r13, r12
mov qword [rdi + 0x10], r13
mov r12d, dword [rbp + 0x3c]
mov rcx, r13
sub rcx, r12
je 0x1400de518
mov rax, qword [rdi + 8]
test r12, r12
je 0x1400de4ed
cmp r13, r12
jbe 0x1400de66b
cmp byte [rax + r12], 0xbf
jle 0x1400de66b
cmp rcx, 2
jne 0x1400de50b
movzx ecx, byte [rax + r12]
and cl, 0xdf
add cl, 0xbf
cmp cl, 0x19
ja 0x1400de50b
cmp byte [rax + r12 + 1], 0x3a
je 0x1400de518
mov rcx, rdi
xor edx, edx
mov r8, r12
call fcn.1400e03b0
mov byte [rsp + 0x70], 1
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], r15
lea r8, [rsp + 0x70]
mov rcx, rdi
xor edx, edx
mov r9, r12
call fcn.1400db770
mov rcx, qword [rdi + 0x40]
mov qword [rsp + 0xb0], rcx
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rdi + 0x10]
movdqu xmm2, xmmword [rdi + 0x20]
movdqu xmm3, xmmword [rdi + 0x30]
movdqa xmmword [rsp + 0xa0], xmm3
movdqa xmmword [rsp + 0x90], xmm2
movdqa xmmword [rsp + 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov r9d, dword [rbp + 0x2c]
mov ecx, dword [rbp + 0x30]
mov r8d, dword [rbp + 0x34]
mov r10d, dword [rbp + 0x38]
lea r11, [rbp + 0x40]
movzx edi, word [rbp + 0x28]
movzx ebx, word [rbp + 0x2a]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x50], r12d
mov word [rsp + 0x48], bx
mov word [rsp + 0x40], di
mov qword [rsp + 0x38], r11
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], ecx
lea rdx, [rsp + 0x70]
mov rcx, rsi
xor r8d, r8d
call fcn.1400dc530
jmp 0x1400de42b
jne 0x1400de66b
lea rbp, [rax + rdx]
mov rcx, r8
jmp 0x1400dda14
xor r14d, r14d
mov qword [rsp + 0x68], rax
jmp 0x1400de21c
mov rcx, rdi
mov rax, rdx
mov rdx, r12
mov r8, rbp
mov r12, rax
call fcn.1400e2df0
mov rdx, r12
mov r12, qword [rdi + 0x10]
jmp 0x1400de0d9
mov rcx, rdi
mov r14, rdx
mov rdx, r15
mov r8, rbx
call fcn.1400e2df0
mov rdx, r14
mov r15, qword [rdi + 0x10]
jmp 0x1400de2a3
mov rcx, rdi
mov r14, rdx
mov rdx, r13
mov r8, r12
call fcn.1400e2df0
mov rdx, r14
mov r13, qword [rdi + 0x10]
jmp 0x1400de3bc
mov rcx, rdi
mov r14, rdx
mov rdx, r13
mov r8, r12
call fcn.1400e2df0
mov rdx, r14
mov r13, qword [rdi + 0x10]
jmp 0x1400de4ae
ud2