Function at 0x7ff6f9cae2d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x518
mov rcx, qword [rcx]
mov rax, qword [rcx]
mov qword [rcx], 0
test rax, rax
je 0x7ff6f9cb0991
mov r15, qword [rax]
lea rax, [0x7ff6f9d0f964]
mov qword [rsp + 0x348], rax
lea rax, [0x7ff6f9d0f96e]
mov qword [rsp + 0x350], rax
mov word [rsp + 0x358], 0
mov dword [rsp + 0x360], 1
lea rcx, [rsp + 0x378]
lea rdx, [rsp + 0x348]
call fcn.7ff6f9c4f460
mov dword [rsp + 0x348], 0
lea rdx, [rsp + 0x348]
mov ecx, 1
call sub.kernel32.dll_SetThreadErrorMode
test eax, eax
sete bl
mov r14d, dword [rsp + 0x348]
cmp r14d, 1
sete r12b
mov rbp, qword [rsp + 0x378]
mov rcx, rbp
xor edx, edx
mov r8d, 0x1000
call sub.kernel32.dll_LoadLibraryExW
test rax, rax
je 0x7ff6f9caf9e0
mov rsi, rax
mov edi, 0x11
or bl, r12b
cmp qword [rsp + 0x380], 0
je 0x7ff6f9cae3bf
mov rcx, qword [0x7ff6f9d20580]
xor edx, edx
mov r8, rbp
call qword [sym.imp.kernel32.dll_HeapFree]
test bl, bl
jne 0x7ff6f9cae3cd
mov ecx, r14d
xor edx, edx
call sub.kernel32.dll_SetThreadErrorMode
cmp edi, 0x11
je 0x7ff6f9cae4cd
mov qword [rsp + 0x390], rdi
mov qword [rsp + 0x398], rsi
lea rcx, [rsp + 0x390]
call fcn.7ff6f9cadfb0
lea rax, [0x7ff6f9d0f958]
mov qword [rsp + 0x348], rax
lea rax, [0x7ff6f9d0f964]
mov qword [rsp + 0x350], rax
mov word [rsp + 0x358], 0
mov dword [rsp + 0x360], 1
lea rcx, [rsp + 0x378]
lea rdx, [rsp + 0x348]
call fcn.7ff6f9c4f460
mov dword [rsp + 0x348], 0
lea rdx, [rsp + 0x348]
mov ecx, 1
call sub.kernel32.dll_SetThreadErrorMode
test eax, eax
sete bl
mov r12d, dword [rsp + 0x348]
cmp r12d, 1
sete r14b
mov rbp, qword [rsp + 0x378]
mov rcx, rbp
xor edx, edx
mov r8d, 0x1000
call sub.kernel32.dll_LoadLibraryExW
test rax, rax
je 0x7ff6f9cb0921
mov rsi, rax
mov edi, 0x11
or bl, r14b
cmp qword [rsp + 0x380], 0
je 0x7ff6f9cae4b6
mov rcx, qword [0x7ff6f9d20580]
xor edx, edx
mov r8, rbp
call qword [sym.imp.kernel32.dll_HeapFree]
test bl, bl
jne 0x7ff6f9cae4c4
mov ecx, r12d
xor edx, edx
call sub.kernel32.dll_SetThreadErrorMode
cmp edi, 0x11
jne 0x7ff6f9cafa17
lea rax, [rsp + 0x398]
mov qword [rsp + 0x398], rsi
mov qword [rsp + 0x390], 0x11
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f03e]
lea rbp, [0x7ff6f9d16b60]
lea r14, [rsp + 0x348]
mov r8d, 0xa
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x33]
lea r12, [0x7ff6f9cb5760]
cmove rax, r12
mov qword [rsp + 0x3b8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f048]
mov r8d, 0xf
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
mov rbx, rax
test rax, rax
setne byte [rsp + 0x32]
cmove rbx, r12
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f057]
mov r8d, 0xf
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x31]
cmove rax, r12
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x20], 1
lea rdx, [0x7ff6f9d0f090]
lea r9, [0x7ff6f9d0f080]
mov r8d, 0x11
mov rcx, r14
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x30]
cmove rax, r12
mov qword [rsp + 0x3c0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f0a1]
mov r8d, 0xe
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
mov rsi, rax
test rax, rax
setne byte [rsp + 0x5f]
cmove rsi, r12
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f0af]
mov r8d, 0x10
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x5e]
cmove rax, r12
mov qword [rsp + 0x510], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f0bf]
mov r8d, 0xe
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x5d]
cmove rax, r12
mov qword [rsp + 0x508], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f0cd]
mov r8d, 0x20
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x5c]
cmove rax, r12
mov qword [rsp + 0x500], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f0ed]
mov r8d, 0x17
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x5b]
cmove rax, r12
mov qword [rsp + 0x4f8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f104]
mov r8d, 0x16
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x5a]
cmove rax, r12
mov qword [rsp + 0x4f0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f11a]
mov r8d, 0x1e
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x59]
cmove rax, r12
mov qword [rsp + 0x4e8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f138]
mov r8d, 0x21
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x58]
cmove rax, r12
mov qword [rsp + 0x4e0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f159]
mov r8d, 0x1e
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x57]
cmove rax, r12
mov qword [rsp + 0x4d8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f177]
mov r8d, 0x21
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x56]
cmove rax, r12
mov qword [rsp + 0x4d0], rax
mov qword [rsp + 0x20], 1
lea rdx, [0x7ff6f9d0f1c0]
lea r9, [0x7ff6f9d0f1b0]
mov r8d, 0xd
mov rcx, r14
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x55]
cmove rax, r12
mov qword [rsp + 0x4c8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f1cd]
mov r8d, 0x16
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x54]
cmove rax, r12
mov qword [rsp + 0x4c0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f1e3]
mov r8d, 0x11
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x53]
cmove rax, r12
mov qword [rsp + 0x4b8], rax
mov qword [rsp + 0x20], 1
lea rdx, [0x7ff6f9d0f218]
lea r9, [0x7ff6f9d0f208]
mov r8d, 0xf
mov rcx, r14
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x52]
cmove rax, r12
mov qword [rsp + 0x4b0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f227]
mov r8d, 0x11
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x51]
cmove rax, r12
mov qword [rsp + 0x4a8], rax
mov qword [rsp + 0x20], 1
lea rdx, [0x7ff6f9d0f260]
lea r9, [0x7ff6f9d0f250]
mov r8d, 0xe
mov rcx, r14
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x50]
cmove rax, r12
mov qword [rsp + 0x4a0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f26e]
mov r8d, 0x12
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x4f]
cmove rax, r12
mov qword [rsp + 0x498], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f280]
mov r8d, 0xd
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x4e]
cmove rax, r12
mov qword [rsp + 0x490], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f28d]
mov r8d, 0x14
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x4d]
cmove rax, r12
mov qword [rsp + 0x488], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f2a1]
mov r8d, 0x14
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x4c]
cmove rax, r12
mov qword [rsp + 0x480], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f2b5]
mov r8d, 0x14
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x4b]
cmove rax, r12
mov qword [rsp + 0x478], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f2c9]
mov r8d, 0xd
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x4a]
cmove rax, r12
mov qword [rsp + 0x470], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f2d6]
mov r8d, 0xb
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x49]
cmove rax, r12
mov qword [rsp + 0x468], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f2e1]
mov r8d, 0x15
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x48]
cmove rax, r12
mov qword [rsp + 0x460], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f2f6]
mov r8d, 0x18
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x47]
cmove rax, r12
mov qword [rsp + 0x458], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f30e]
mov r8d, 0x11
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x46]
cmove rax, r12
mov qword [rsp + 0x450], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f31f]
mov r8d, 0x10
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x45]
cmove rax, r12
mov qword [rsp + 0x448], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f32f]
mov r8d, 0xd
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x44]
cmove rax, r12
mov qword [rsp + 0x440], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f33c]
mov r8d, 0xe
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x43]
cmove rax, r12
mov qword [rsp + 0x438], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f34a]
mov r8d, 0xb
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x42]
cmove rax, r12
mov qword [rsp + 0x430], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f355]
mov r8d, 0xf
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x41]
cmove rax, r12
mov qword [rsp + 0x428], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f364]
mov r8d, 0xe
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x40]
cmove rax, r12
mov qword [rsp + 0x420], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f372]
mov r8d, 0xf
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x3f]
cmove rax, r12
mov qword [rsp + 0x418], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f381]
mov r8d, 0x12
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x3e]
cmove rax, r12
mov qword [rsp + 0x410], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f393]
mov r8d, 0x10
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x3d]
cmove rax, r12
mov qword [rsp + 0x408], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f3a3]
mov r8d, 0x10
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x3c]
cmove rax, r12
mov qword [rsp + 0x400], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f3b3]
mov r8d, 0xe
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x3b]
cmove rax, r12
mov qword [rsp + 0x3f8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f3c1]
mov r8d, 0x1b
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x3a]
cmove rax, r12
mov qword [rsp + 0x3f0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f3dc]
mov r8d, 0xf
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x39]
cmove rax, r12
mov qword [rsp + 0x3e8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f3eb]
mov r8d, 0xc
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x38]
cmove rax, r12
mov qword [rsp + 0x3e0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f3f7]
mov r8d, 0xd
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x37]
cmove rax, r12
mov qword [rsp + 0x3d8], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f404]
mov r8d, 9
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
test rax, rax
setne byte [rsp + 0x36]
cmove rax, r12
mov qword [rsp + 0x3d0], rax
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f40d]
mov r8d, 0xd
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
mov r13, rax
test rax, rax
setne byte [rsp + 0x35]
cmove r13, r12
mov qword [rsp + 0x20], 0
lea rdx, [0x7ff6f9d0f41a]
mov r8d, 0xb
mov rcx, r14
mov r9, rbp
call fcn.7ff6f9cb5870
mov r14, rax
test rax, rax
cmove r14, r12
setne cl
mov rax, qword [rsp + 0x390]
mov rdi, qword [rsp + 0x398]
cmp rax, 0x11
jne 0x7ff6f9cb09bc
mov byte [rsp + 0x34], cl
mov rcx, qword [0x7ff6f9d20580]
test rcx, rcx
jne 0x7ff6f9caef34
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x7ff6f9cb09ab
mov rcx, rax
mov qword [0x7ff6f9d20580], rax
mov r8d, 0x18
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x7ff6f9cb09ab
mov r12, rsi
movaps xmm0, xmmword [0x7ff6f9cf2740]
movups xmmword [rax], xmm0
mov qword [rax + 0x10], rdi
mov ecx, dword [rsp + 0x348]
mov edx, dword [rsp + 0x34b]
mov dword [rsp + 0x1d3], edx
mov dword [rsp + 0x1d0], ecx
mov ecx, dword [rsp + 0x378]
mov edx, dword [rsp + 0x37b]
mov dword [rsp + 0x1c8], ecx
mov dword [rsp + 0x1cb], edx
mov ecx, dword [rsp + 0x340]
mov edx, dword [rsp + 0x343]
mov dword [rsp + 0x1c0], ecx
mov dword [rsp + 0x1c3], edx
mov ecx, dword [rsp + 0x338]
mov edx, dword [rsp + 0x33b]
mov dword [rsp + 0x1b8], ecx
mov dword [rsp + 0x1bb], edx
mov ecx, dword [rsp + 0x330]
mov edx, dword [rsp + 0x333]
mov dword [rsp + 0x1b3], edx
mov dword [rsp + 0x1b0], ecx
mov ecx, dword [rsp + 0x328]
mov edx, dword [rsp + 0x32b]
mov dword [rsp + 0x1ab], edx
mov dword [rsp + 0x1a8], ecx
mov ecx, dword [rsp + 0x320]
mov edx, dword [rsp + 0x323]
mov dword [rsp + 0x1a3], edx
mov dword [rsp + 0x1a0], ecx
mov ecx, dword [rsp + 0x318]
mov edx, dword [rsp + 0x31b]
mov dword [rsp + 0x19b], edx
mov dword [rsp + 0x198], ecx
mov ecx, dword [rsp + 0x310]
mov edx, dword [rsp + 0x313]
mov dword [rsp + 0x193], edx
mov dword [rsp + 0x190], ecx
mov ecx, dword [rsp + 0x308]
mov edx, dword [rsp + 0x30b]
mov dword [rsp + 0x18b], edx
mov dword [rsp + 0x188], ecx
mov ecx, dword [rsp + 0x300]
mov edx, dword [rsp + 0x303]
mov dword [rsp + 0x183], edx
mov dword [rsp + 0x180], ecx
mov ecx, dword [rsp + 0x2f8]
mov edx, dword [rsp + 0x2fb]
mov dword [rsp + 0x17b], edx
mov dword [rsp + 0x178], ecx
mov ecx, dword [rsp + 0x2f0]
mov edx, dword [rsp + 0x2f3]
mov dword [rsp + 0x173], edx
mov dword [rsp + 0x170], ecx
mov ecx, dword [rsp + 0x2e8]
mov edx, dword [rsp + 0x2eb]
mov dword [rsp + 0x16b], edx
mov dword [rsp + 0x168], ecx
mov ecx, dword [rsp + 0x2e0]
mov edx, dword [rsp + 0x2e3]
mov dword [rsp + 0x163], edx
mov dword [rsp + 0x160], ecx
mov ecx, dword [rsp + 0x2d8]
mov edx, dword [rsp + 0x2db]
mov dword [rsp + 0x15b], edx
mov dword [rsp + 0x158], ecx
mov ecx, dword [rsp + 0x2d0]
mov edx, dword [rsp + 0x2d3]
mov dword [rsp + 0x153], edx
mov dword [rsp + 0x150], ecx
mov ecx, dword [rsp + 0x2c8]
mov edx, dword [rsp + 0x2cb]
mov dword [rsp + 0x14b], edx
mov dword [rsp + 0x148], ecx
mov ecx, dword [rsp + 0x2c0]
mov edx, dword [rsp + 0x2c3]
mov dword [rsp + 0x143], edx
mov dword [rsp + 0x140], ecx
mov ecx, dword [rsp + 0x2b8]
mov edx, dword [rsp + 0x2bb]
mov dword [rsp + 0x13b], edx
mov dword [rsp + 0x138], ecx
mov ecx, dword [rsp + 0x2b0]
mov edx, dword [rsp + 0x2b3]
mov dword [rsp + 0x133], edx
mov dword [rsp + 0x130], ecx
mov ecx, dword [rsp + 0x2a8]
mov edx, dword [rsp + 0x2ab]
mov dword [rsp + 0x12b], edx
mov dword [rsp + 0x128], ecx
mov ecx, dword [rsp + 0x2a0]
mov edx, dword [rsp + 0x2a3]
mov dword [rsp + 0x123], edx
mov dword [rsp + 0x120], ecx
mov ecx, dword [rsp + 0x298]
mov edx, dword [rsp + 0x29b]
mov dword [rsp + 0x11b], edx
mov dword [rsp + 0x118], ecx
mov ecx, dword [rsp + 0x290]
mov edx, dword [rsp + 0x293]
mov dword [rsp + 0x113], edx
mov dword [rsp + 0x110], ecx
mov ecx, dword [rsp + 0x288]
mov edx, dword [rsp + 0x28b]
mov dword [rsp + 0x10b], edx
mov dword [rsp + 0x108], ecx
mov ecx, dword [rsp + 0x280]
mov edx, dword [rsp + 0x283]
mov dword [rsp + 0x103], edx
mov dword [rsp + 0x100], ecx
mov ecx, dword [rsp + 0x278]
mov edx, dword [rsp + 0x27b]
mov dword [rsp + 0xfb], edx
mov dword [rsp + 0xf8], ecx
mov ecx, dword [rsp + 0x270]
mov edx, dword [rsp + 0x273]
mov dword [rsp + 0xf3], edx
mov dword [rsp + 0xf0], ecx
mov ecx, dword [rsp + 0x268]
mov edx, dword [rsp + 0x26b]
mov dword [rsp + 0xeb], edx
mov dword [rsp + 0xe8], ecx
mov ecx, dword [rsp + 0x260]
mov edx, dword [rsp + 0x263]
mov dword [rsp + 0xe3], edx
mov dword [rsp + 0xe0], ecx
mov ecx, dword [rsp + 0x258]
mov edx, dword [rsp + 0x25b]
mov dword [rsp + 0xdb], edx
mov dword [rsp + 0xd8], ecx
mov ecx, dword [rsp + 0x250]
mov edx, dword [rsp + 0x253]
mov dword [rsp + 0xd3], edx
mov dword [rsp + 0xd0], ecx
mov ecx, dword [rsp + 0x248]
mov edx, dword [rsp + 0x24b]
mov dword [rsp + 0xcb], edx
mov dword [rsp + 0xc8], ecx
mov ecx, dword [rsp + 0x240]
mov edx, dword [rsp + 0x243]
mov dword [rsp + 0xc3], edx
mov dword [rsp + 0xc0], ecx
mov ecx, dword [rsp + 0x238]
mov edx, dword [rsp + 0x23b]
mov dword [rsp + 0xbb], edx
mov dword [rsp + 0xb8], ecx
mov ecx, dword [rsp + 0x230]
mov edx, dword [rsp + 0x233]
mov dword [rsp + 0xb3], edx
mov dword [rsp + 0xb0], ecx
mov ecx, dword [rsp + 0x228]
mov edx, dword [rsp + 0x22b]
mov dword [rsp + 0xab], edx
mov dword [rsp + 0xa8], ecx
mov ecx, dword [rsp + 0x220]
mov edx, dword [rsp + 0x223]
mov dword [rsp + 0xa3], edx
mov dword [rsp + 0xa0], ecx
mov ecx, dword [rsp + 0x218]
mov edx, dword [rsp + 0x21b]
mov dword [rsp + 0x9b], edx
mov dword [rsp + 0x98], ecx
mov ecx, dword [rsp + 0x210]
mov edx, dword [rsp + 0x213]
mov dword [rsp + 0x93], edx
mov dword [rsp + 0x90], ecx
mov ecx, dword [rsp + 0x208]
mov edx, dword [rsp + 0x20b]
mov dword [rsp + 0x8b], edx
mov dword [rsp + 0x88], ecx
mov ecx, dword [rsp + 0x200]
mov edx, dword [rsp + 0x203]
mov dword [rsp + 0x83], edx
mov dword [rsp + 0x80], ecx
mov ecx, dword [rsp + 0x1f8]
mov edx, dword [rsp + 0x1fb]
mov dword [rsp + 0x7b], edx
mov dword [rsp + 0x78], ecx
mov ecx, dword [rsp + 0x1f0]
mov edx, dword [rsp + 0x1f3]
mov dword [rsp + 0x73], edx
mov dword [rsp + 0x70], ecx
mov ecx, dword [rsp + 0x1e8]
mov edx, dword [rsp + 0x1eb]
mov dword [rsp + 0x6b], edx
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0x1e0]
mov edx, dword [rsp + 0x1e3]
mov dword [rsp + 0x63], edx
mov dword [rsp + 0x60], ecx
mov ecx, dword [rsp + 0x1d8]
mov edx, dword [rsp + 0x1db]
mov dword [rsp + 0x373], edx
mov dword [rsp + 0x370], ecx
mov ecx, dword [rsp + 0x1d0]
mov edx, dword [rsp + 0x1d3]
mov dword [rsp + 0x34b], edx
mov dword [rsp + 0x348], ecx
mov ecx, dword [rsp + 0x1c8]
mov edx, dword [rsp + 0x1cb]
mov dword [rsp + 0x393], edx
mov dword [rsp + 0x390], ecx
mov ecx, dword [rsp + 0x1c0]
mov edx, dword [rsp + 0x1c3]
mov dword [rsp + 0x37b], edx
mov dword [rsp + 0x378], ecx
mov ecx, dword [rsp + 0x1b8]
mov edx, dword [rsp + 0x1bb]
mov dword [rsp + 0x343], edx
mov dword [rsp + 0x340], ecx
mov ecx, dword [rsp + 0x1b0]
mov edx, dword [rsp + 0x1b3]
mov dword [rsp + 0x33b], edx
mov dword [rsp + 0x338], ecx
mov ecx, dword [rsp + 0x1a8]
mov edx, dword [rsp + 0x1ab]
mov dword [rsp + 0x333], edx
mov dword [rsp + 0x330], ecx
mov ecx, dword [rsp + 0x1a0]
mov edx, dword [rsp + 0x1a3]
mov dword [rsp + 0x32b], edx
mov dword [rsp + 0x328], ecx
mov ecx, dword [rsp + 0x198]
mov edx, dword [rsp + 0x19b]
mov dword [rsp + 0x323], edx
mov dword [rsp + 0x320], ecx
mov ecx, dword [rsp + 0x190]
mov edx, dword [rsp + 0x193]
mov dword [rsp + 0x31b], edx
mov dword [rsp + 0x318], ecx
mov ecx, dword [rsp + 0x188]
mov edx, dword [rsp + 0x18b]
mov dword [rsp + 0x313], edx
mov dword [rsp + 0x310], ecx
mov ecx, dword [rsp + 0x180]
mov edx, dword [rsp + 0x183]
mov dword [rsp + 0x30b], edx
mov dword [rsp + 0x308], ecx
mov ecx, dword [rsp + 0x178]
mov edx, dword [rsp + 0x17b]
mov dword [rsp + 0x303], edx
mov dword [rsp + 0x300], ecx
mov ecx, dword [rsp + 0x170]
mov edx, dword [rsp + 0x173]
mov dword [rsp + 0x2fb], edx
mov dword [rsp + 0x2f8], ecx
mov ecx, dword [rsp + 0x168]
mov edx, dword [rsp + 0x16b]
mov dword [rsp + 0x2f3], edx
mov dword [rsp + 0x2f0], ecx
mov ecx, dword [rsp + 0x160]
mov edx, dword [rsp + 0x163]
mov dword [rsp + 0x2eb], edx
mov dword [rsp + 0x2e8], ecx
mov ecx, dword [rsp + 0x158]
mov edx, dword [rsp + 0x15b]
mov dword [rsp + 0x2e3], edx
mov dword [rsp + 0x2e0], ecx
mov ecx, dword [rsp + 0x150]
mov edx, dword [rsp + 0x153]
mov dword [rsp + 0x2db], edx
mov dword [rsp + 0x2d8], ecx
mov ecx, dword [rsp + 0x148]
mov edx, dword [rsp + 0x14b]
mov dword [rsp + 0x2d3], edx
mov dword [rsp + 0x2d0], ecx
mov ecx, dword [rsp + 0x140]
mov edx, dword [rsp + 0x143]
mov dword [rsp + 0x2cb], edx
mov dword [rsp + 0x2c8], ecx
mov ecx, dword [rsp + 0x138]
mov edx, dword [rsp + 0x13b]
mov dword [rsp + 0x2c3], edx
mov dword [rsp + 0x2c0], ecx
mov ecx, dword [rsp + 0x130]
mov edx, dword [rsp + 0x133]
mov dword [rsp + 0x2bb], edx
mov dword [rsp + 0x2b8], ecx
mov ecx, dword [rsp + 0x128]
mov edx, dword [rsp + 0x12b]
mov dword [rsp + 0x2b3], edx
mov dword [rsp + 0x2b0], ecx
mov ecx, dword [rsp + 0x120]
mov edx, dword [rsp + 0x123]
mov dword [rsp + 0x2ab], edx
mov dword [rsp + 0x2a8], ecx
mov ecx, dword [rsp + 0x118]
mov edx, dword [rsp + 0x11b]
mov dword [rsp + 0x2a3], edx
mov dword [rsp + 0x2a0], ecx
mov ecx, dword [rsp + 0x110]
mov edx, dword [rsp + 0x113]
mov dword [rsp + 0x29b], edx
mov dword [rsp + 0x298], ecx
mov ecx, dword [rsp + 0x108]
mov edx, dword [rsp + 0x10b]
mov dword [rsp + 0x293], edx
mov dword [rsp + 0x290], ecx
mov ecx, dword [rsp + 0x100]
mov edx, dword [rsp + 0x103]
mov dword [rsp + 0x28b], edx
mov dword [rsp + 0x288], ecx
mov ecx, dword [rsp + 0xf8]
mov edx, dword [rsp + 0xfb]
mov dword [rsp + 0x283], edx
mov dword [rsp + 0x280], ecx
mov ecx, dword [rsp + 0xf0]
mov edx, dword [rsp + 0xf3]
mov dword [rsp + 0x27b], edx
mov dword [rsp + 0x278], ecx
mov ecx, dword [rsp + 0xe8]
mov edx, dword [rsp + 0xeb]
mov dword [rsp + 0x273], edx
mov dword [rsp + 0x270], ecx
mov ecx, dword [rsp + 0xe0]
mov edx, dword [rsp + 0xe3]
mov dword [rsp + 0x26b], edx
mov dword [rsp + 0x268], ecx
mov ecx, dword [rsp + 0xd8]
mov edx, dword [rsp + 0xdb]
mov dword [rsp + 0x263], edx
mov dword [rsp + 0x260], ecx
mov ecx, dword [rsp + 0xd0]
mov edx, dword [rsp + 0xd3]
mov dword [rsp + 0x25b], edx
mov dword [rsp + 0x258], ecx
mov ecx, dword [rsp + 0xc8]
mov edx, dword [rsp + 0xcb]
mov dword [rsp + 0x253], edx
mov dword [rsp + 0x250], ecx
mov ecx, dword [rsp + 0xc0]
mov edx, dword [rsp + 0xc3]
mov dword [rsp + 0x24b], edx
mov dword [rsp + 0x248], ecx
mov ecx, dword [rsp + 0xb8]
mov edx, dword [rsp + 0xbb]
mov dword [rsp + 0x243], edx
mov dword [rsp + 0x240], ecx
mov ecx, dword [rsp + 0xb0]
mov edx, dword [rsp + 0xb3]
mov dword [rsp + 0x23b], edx
mov dword [rsp + 0x238], ecx
mov ecx, dword [rsp + 0xa8]
mov edx, dword [rsp + 0xab]
mov dword [rsp + 0x233], edx
mov dword [rsp + 0x230], ecx
mov ecx, dword [rsp + 0xa0]
mov edx, dword [rsp + 0xa3]
mov dword [rsp + 0x22b], edx
mov dword [rsp + 0x228], ecx
mov ecx, dword [rsp + 0x98]
mov edx, dword [rsp + 0x9b]
mov dword [rsp + 0x223], edx
mov dword [rsp + 0x220], ecx
mov ecx, dword [rsp + 0x90]
mov edx, dword [rsp + 0x93]
mov dword [rsp + 0x21b], edx
mov dword [rsp + 0x218], ecx
mov ecx, dword [rsp + 0x88]
mov edx, dword [rsp + 0x8b]
mov dword [rsp + 0x213], edx
mov dword [rsp + 0x210], ecx
mov ecx, dword [rsp + 0x80]
mov edx, dword [rsp + 0x83]
mov dword [rsp + 0x20b], edx
mov dword [rsp + 0x208], ecx
mov ecx, dword [rsp + 0x78]
mov edx, dword [rsp + 0x7b]
mov dword [rsp + 0x203], edx
mov dword [rsp + 0x200], ecx
mov ecx, dword [rsp + 0x70]
mov edx, dword [rsp + 0x73]
mov dword [rsp + 0x1fb], edx
mov dword [rsp + 0x1f8], ecx
mov ecx, dword [rsp + 0x68]
mov edx, dword [rsp + 0x6b]
mov dword [rsp + 0x1f3], edx
mov dword [rsp + 0x1f0], ecx
mov ecx, dword [rsp + 0x60]
mov edx, dword [rsp + 0x63]
mov dword [rsp + 0x1eb], edx
mov dword [rsp + 0x1e8], ecx
mov ecx, dword [rsp + 0x370]
mov edx, dword [rsp + 0x373]
mov dword [rsp + 0x1e3], edx
mov dword [rsp + 0x1e0], ecx
mov rsi, rbx
movzx ebx, byte [rsp + 0x33]
movzx r8d, byte [rsp + 0x32]
mov rbp, qword [rsp + 0x3c8]
movzx r9d, byte [rsp + 0x31]
mov r10, qword [rsp + 0x3c0]
movzx r11d, byte [rsp + 0x30]
mov rdi, qword [rsp + 0x3b8]
jmp 0x7ff6f9cafa36
call sub.kernel32.dll_GetLastError
mov rsi, rax
shl rsi, 0x20
mov qword [rsp + 0x348], 7
test eax, eax
je 0x7ff6f9cb0951
lea rcx, [rsp + 0x348]
call fcn.7ff6f9cadfb0
mov edi, 6
jmp 0x7ff6f9cb0956
mov qword [rsp + 0x390], rdi
mov qword [rsp + 0x398], rsi
lea rcx, [rsp + 0x390]
call fcn.7ff6f9cadfb0
mov bl, 2
mov ecx, dword [rsp + 0x34b]
mov dword [rsp + 0x1db], ecx
mov ecx, dword [rsp + 0x348]
mov dword [rsp + 0x1d8], ecx
mov ecx, dword [rsp + 0x390]
mov dword [rsp + 0x1d0], ecx
mov ecx, dword [rsp + 0x393]
mov dword [rsp + 0x1d3], ecx
mov ecx, dword [rsp + 0x378]
mov dword [rsp + 0x1c8], ecx
mov ecx, dword [rsp + 0x37b]
mov dword [rsp + 0x1cb], ecx
mov ecx, dword [rsp + 0x340]
mov dword [rsp + 0x1c0], ecx
mov ecx, dword [rsp + 0x343]
mov dword [rsp + 0x1c3], ecx
mov ecx, dword [rsp + 0x33b]
mov dword [rsp + 0x1bb], ecx
mov ecx, dword [rsp + 0x338]
mov dword [rsp + 0x1b8], ecx
mov ecx, dword [rsp + 0x333]
mov dword [rsp + 0x1b3], ecx
mov ecx, dword [rsp + 0x330]
mov dword [rsp + 0x1b0], ecx
mov ecx, dword [rsp + 0x328]
mov dword [rsp + 0x1a8], ecx
mov ecx, dword [rsp + 0x32b]
mov dword [rsp + 0x1ab], ecx
mov ecx, dword [rsp + 0x320]
mov dword [rsp + 0x1a0], ecx
mov ecx, dword [rsp + 0x323]
mov dword [rsp + 0x1a3], ecx
mov ecx, dword [rsp + 0x318]
mov dword [rsp + 0x198], ecx
mov ecx, dword [rsp + 0x31b]
mov dword [rsp + 0x19b], ecx
mov ecx, dword [rsp + 0x313]
mov dword [rsp + 0x193], ecx
mov ecx, dword [rsp + 0x310]
mov dword [rsp + 0x190], ecx
mov ecx, dword [rsp + 0x30b]
mov dword [rsp + 0x18b], ecx
mov ecx, dword [rsp + 0x308]
mov dword [rsp + 0x188], ecx
mov ecx, dword [rsp + 0x303]
mov dword [rsp + 0x183], ecx
mov ecx, dword [rsp + 0x300]
mov dword [rsp + 0x180], ecx
mov ecx, dword [rsp + 0x2fb]
mov dword [rsp + 0x17b], ecx
mov ecx, dword [rsp + 0x2f8]
mov dword [rsp + 0x178], ecx
mov ecx, dword [rsp + 0x2f3]
mov dword [rsp + 0x173], ecx
mov ecx, dword [rsp + 0x2f0]
mov dword [rsp + 0x170], ecx
mov ecx, dword [rsp + 0x2eb]
mov dword [rsp + 0x16b], ecx
mov ecx, dword [rsp + 0x2e8]
mov dword [rsp + 0x168], ecx
mov ecx, dword [rsp + 0x2e3]
mov dword [rsp + 0x163], ecx
mov ecx, dword [rsp + 0x2e0]
mov dword [rsp + 0x160], ecx
mov ecx, dword [rsp + 0x2db]
mov dword [rsp + 0x15b], ecx
mov ecx, dword [rsp + 0x2d8]
mov dword [rsp + 0x158], ecx
mov ecx, dword [rsp + 0x2d3]
mov dword [rsp + 0x153], ecx
mov ecx, dword [rsp + 0x2d0]
mov dword [rsp + 0x150], ecx
mov ecx, dword [rsp + 0x2cb]
mov dword [rsp + 0x14b], ecx
mov ecx, dword [rsp + 0x2c8]
mov dword [rsp + 0x148], ecx
mov ecx, dword [rsp + 0x2c3]
mov dword [rsp + 0x143], ecx
mov ecx, dword [rsp + 0x2c0]
mov dword [rsp + 0x140], ecx
mov ecx, dword [rsp + 0x2bb]
mov dword [rsp + 0x13b], ecx
mov ecx, dword [rsp + 0x2b8]
mov dword [rsp + 0x138], ecx
mov ecx, dword [rsp + 0x2b3]
mov dword [rsp + 0x133], ecx
mov ecx, dword [rsp + 0x2b0]
mov dword [rsp + 0x130], ecx
mov ecx, dword [rsp + 0x2ab]
mov dword [rsp + 0x12b], ecx
mov ecx, dword [rsp + 0x2a8]
mov dword [rsp + 0x128], ecx
mov ecx, dword [rsp + 0x2a3]
mov dword [rsp + 0x123], ecx
mov ecx, dword [rsp + 0x2a0]
mov dword [rsp + 0x120], ecx
mov ecx, dword [rsp + 0x29b]
mov dword [rsp + 0x11b], ecx
mov ecx, dword [rsp + 0x298]
mov dword [rsp + 0x118], ecx
mov ecx, dword [rsp + 0x293]
mov dword [rsp + 0x113], ecx
mov ecx, dword [rsp + 0x290]
mov dword [rsp + 0x110], ecx
mov ecx, dword [rsp + 0x28b]
mov dword [rsp + 0x10b], ecx
mov ecx, dword [rsp + 0x288]
mov dword [rsp + 0x108], ecx
mov ecx, dword [rsp + 0x283]
mov dword [rsp + 0x103], ecx
mov ecx, dword [rsp + 0x280]
mov dword [rsp + 0x100], ecx
mov ecx, dword [rsp + 0x27b]
mov dword [rsp + 0xfb], ecx
mov ecx, dword [rsp + 0x278]
mov dword [rsp + 0xf8], ecx
mov ecx, dword [rsp + 0x273]
mov dword [rsp + 0xf3], ecx
mov ecx, dword [rsp + 0x270]
mov dword [rsp + 0xf0], ecx
mov ecx, dword [rsp + 0x26b]
mov dword [rsp + 0xeb], ecx
mov ecx, dword [rsp + 0x268]
mov dword [rsp + 0xe8], ecx
mov ecx, dword [rsp + 0x263]
mov dword [rsp + 0xe3], ecx
mov ecx, dword [rsp + 0x260]
mov dword [rsp + 0xe0], ecx
mov ecx, dword [rsp + 0x25b]
mov dword [rsp + 0xdb], ecx
mov ecx, dword [rsp + 0x258]
mov dword [rsp + 0xd8], ecx
mov ecx, dword [rsp + 0x253]
mov dword [rsp + 0xd3], ecx
mov ecx, dword [rsp + 0x250]
mov dword [rsp + 0xd0], ecx
mov ecx, dword [rsp + 0x24b]
mov dword [rsp + 0xcb], ecx
mov ecx, dword [rsp + 0x248]
mov dword [rsp + 0xc8], ecx
mov ecx, dword [rsp + 0x243]
mov dword [rsp + 0xc3], ecx
mov ecx, dword [rsp + 0x240]
mov dword [rsp + 0xc0], ecx
mov ecx, dword [rsp + 0x23b]
mov dword [rsp + 0xbb], ecx
mov ecx, dword [rsp + 0x238]
mov dword [rsp + 0xb8], ecx
mov ecx, dword [rsp + 0x233]
mov dword [rsp + 0xb3], ecx
mov ecx, dword [rsp + 0x230]
mov dword [rsp + 0xb0], ecx
mov ecx, dword [rsp + 0x22b]
mov dword [rsp + 0xab], ecx
mov ecx, dword [rsp + 0x228]
mov dword [rsp + 0xa8], ecx
mov ecx, dword [rsp + 0x223]
mov dword [rsp + 0xa3], ecx
mov ecx, dword [rsp + 0x220]
mov dword [rsp + 0xa0], ecx
mov ecx, dword [rsp + 0x21b]
mov dword [rsp + 0x9b], ecx
mov ecx, dword [rsp + 0x218]
mov dword [rsp + 0x98], ecx
mov ecx, dword [rsp + 0x213]
mov dword [rsp + 0x93], ecx
mov ecx, dword [rsp + 0x210]
mov dword [rsp + 0x90], ecx
mov ecx, dword [rsp + 0x20b]
mov dword [rsp + 0x8b], ecx
mov ecx, dword [rsp + 0x208]
mov dword [rsp + 0x88], ecx
mov ecx, dword [rsp + 0x203]
mov dword [rsp + 0x83], ecx
mov ecx, dword [rsp + 0x200]
mov dword [rsp + 0x80], ecx
mov ecx, dword [rsp + 0x1fb]
mov dword [rsp + 0x7b], ecx
mov ecx, dword [rsp + 0x1f8]
mov dword [rsp + 0x78], ecx
mov ecx, dword [rsp + 0x1f3]
mov dword [rsp + 0x73], ecx
mov ecx, dword [rsp + 0x1f0]
mov dword [rsp + 0x70], ecx
mov ecx, dword [rsp + 0x1eb]
mov dword [rsp + 0x6b], ecx
mov ecx, dword [rsp + 0x1e8]
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0x1e3]
mov dword [rsp + 0x63], ecx
mov ecx, dword [rsp + 0x1e0]
mov dword [rsp + 0x60], ecx
mov rcx, qword [r15 + 0x300]
movzx edx, byte [r15 + 8]
mov qword [r15], rdi
mov byte [r15 + 8], bl
mov edi, dword [rsp + 0x1d8]
mov ebx, dword [rsp + 0x1db]
mov dword [r15 + 9], edi
mov dword [r15 + 0xc], ebx
mov qword [r15 + 0x10], rsi
mov byte [r15 + 0x18], r8b
mov ebx, dword [rsp + 0x1d0]
mov edi, dword [rsp + 0x1d3]
mov dword [r15 + 0x19], ebx
mov dword [r15 + 0x1c], edi
mov qword [r15 + 0x20], rbp
mov byte [r15 + 0x28], r9b
mov ebx, dword [rsp + 0x1c8]
mov edi, dword [rsp + 0x1cb]
mov dword [r15 + 0x29], ebx
mov dword [r15 + 0x2c], edi
mov qword [r15 + 0x30], r10
mov byte [r15 + 0x38], r11b
mov ebx, dword [rsp + 0x1c0]
mov edi, dword [rsp + 0x1c3]
mov dword [r15 + 0x3c], edi
mov dword [r15 + 0x39], ebx
mov qword [r15 + 0x40], r12
movzx ebx, byte [rsp + 0x5f]
mov byte [r15 + 0x48], bl
mov ebx, dword [rsp + 0x1b8]
mov edi, dword [rsp + 0x1bb]
mov dword [r15 + 0x4c], edi
mov dword [r15 + 0x49], ebx
mov rbp, qword [rsp + 0x510]
mov qword [r15 + 0x50], rbp
movzx ebx, byte [rsp + 0x5e]
mov byte [r15 + 0x58], bl
mov ebx, dword [rsp + 0x1b0]
mov edi, dword [rsp + 0x1b3]
mov dword [r15 + 0x5c], edi
mov dword [r15 + 0x59], ebx
mov rbp, qword [rsp + 0x508]
mov qword [r15 + 0x60], rbp
movzx ebx, byte [rsp + 0x5d]
mov byte [r15 + 0x68], bl
mov ebx, dword [rsp + 0x1a8]
mov edi, dword [rsp + 0x1ab]
mov dword [r15 + 0x6c], edi
mov dword [r15 + 0x69], ebx
mov rbp, qword [rsp + 0x500]
mov qword [r15 + 0x70], rbp
movzx ebx, byte [rsp + 0x5c]
mov byte [r15 + 0x78], bl
mov ebx, dword [rsp + 0x1a0]
mov edi, dword [rsp + 0x1a3]
mov dword [r15 + 0x7c], edi
mov dword [r15 + 0x79], ebx
mov rbp, qword [rsp + 0x4f8]
mov qword [r15 + 0x80], rbp
movzx ebx, byte [rsp + 0x5b]
mov byte [r15 + 0x88], bl
mov ebx, dword [rsp + 0x198]
mov edi, dword [rsp + 0x19b]
mov dword [r15 + 0x8c], edi
mov dword [r15 + 0x89], ebx
mov rbp, qword [rsp + 0x4f0]
mov qword [r15 + 0x90], rbp
movzx ebx, byte [rsp + 0x5a]
mov byte [r15 + 0x98], bl
mov ebx, dword [rsp + 0x190]
mov edi, dword [rsp + 0x193]
mov dword [r15 + 0x9c], edi
mov dword [r15 + 0x99], ebx
mov rbp, qword [rsp + 0x4e8]
mov qword [r15 + 0xa0], rbp
movzx ebx, byte [rsp + 0x59]
mov byte [r15 + 0xa8], bl
mov ebx, dword [rsp + 0x188]
mov edi, dword [rsp + 0x18b]
mov dword [r15 + 0xac], edi
mov dword [r15 + 0xa9], ebx
mov rbp, qword [rsp + 0x4e0]
mov qword [r15 + 0xb0], rbp
movzx ebx, byte [rsp + 0x58]
mov byte [r15 + 0xb8], bl
mov ebx, dword [rsp + 0x180]
mov edi, dword [rsp + 0x183]
mov dword [r15 + 0xbc], edi
mov dword [r15 + 0xb9], ebx
mov rbp, qword [rsp + 0x4d8]
mov qword [r15 + 0xc0], rbp
movzx ebx, byte [rsp + 0x57]
mov byte [r15 + 0xc8], bl
mov ebx, dword [rsp + 0x178]
mov edi, dword [rsp + 0x17b]
mov dword [r15 + 0xcc], edi
mov dword [r15 + 0xc9], ebx
mov rbp, qword [rsp + 0x4d0]
mov qword [r15 + 0xd0], rbp
movzx ebx, byte [rsp + 0x56]
mov byte [r15 + 0xd8], bl
mov ebx, dword [rsp + 0x170]
mov edi, dword [rsp + 0x173]
mov dword [r15 + 0xdc], edi
mov dword [r15 + 0xd9], ebx
mov rbp, qword [rsp + 0x4c8]
mov qword [r15 + 0xe0], rbp
movzx ebx, byte [rsp + 0x55]
mov byte [r15 + 0xe8], bl
mov ebx, dword [rsp + 0x168]
mov edi, dword [rsp + 0x16b]
mov dword [r15 + 0xec], edi
mov dword [r15 + 0xe9], ebx
mov rbp, qword [rsp + 0x4c0]
mov qword [r15 + 0xf0], rbp
movzx ebx, byte [rsp + 0x54]
mov byte [r15 + 0xf8], bl
mov ebx, dword [rsp + 0x160]
mov edi, dword [rsp + 0x163]
mov dword [r15 + 0xfc], edi
mov dword [r15 + 0xf9], ebx
mov rbp, qword [rsp + 0x4b8]
mov qword [r15 + 0x100], rbp
movzx ebx, byte [rsp + 0x53]
mov byte [r15 + 0x108], bl
mov ebx, dword [rsp + 0x158]
mov edi, dword [rsp + 0x15b]
mov dword [r15 + 0x10c], edi
mov dword [r15 + 0x109], ebx
mov rbp, qword [rsp + 0x4b0]
mov qword [r15 + 0x110], rbp
movzx ebx, byte [rsp + 0x52]
mov byte [r15 + 0x118], bl
mov ebx, dword [rsp + 0x150]
mov edi, dword [rsp + 0x153]
mov dword [r15 + 0x11c], edi
mov dword [r15 + 0x119], ebx
mov rbp, qword [rsp + 0x4a8]
mov qword [r15 + 0x120], rbp
movzx ebx, byte [rsp + 0x51]
mov byte [r15 + 0x128], bl
mov ebx, dword [rsp + 0x148]
mov edi, dword [rsp + 0x14b]
mov dword [r15 + 0x12c], edi
mov dword [r15 + 0x129], ebx
mov rbp, qword [rsp + 0x4a0]
mov qword [r15 + 0x130], rbp
movzx ebx, byte [rsp + 0x50]
mov byte [r15 + 0x138], bl
mov ebx, dword [rsp + 0x140]
mov edi, dword [rsp + 0x143]
mov dword [r15 + 0x13c], edi
mov dword [r15 + 0x139], ebx
mov rbp, qword [rsp + 0x498]
mov qword [r15 + 0x140], rbp
movzx ebx, byte [rsp + 0x4f]
mov byte [r15 + 0x148], bl
mov ebx, dword [rsp + 0x138]
mov edi, dword [rsp + 0x13b]
mov dword [r15 + 0x14c], edi
mov dword [r15 + 0x149], ebx
mov rbp, qword [rsp + 0x490]
mov qword [r15 + 0x150], rbp
movzx ebx, byte [rsp + 0x4e]
mov byte [r15 + 0x158], bl
mov ebx, dword [rsp + 0x130]
mov edi, dword [rsp + 0x133]
mov dword [r15 + 0x15c], edi
mov dword [r15 + 0x159], ebx
mov rbp, qword [rsp + 0x488]
mov qword [r15 + 0x160], rbp
movzx ebx, byte [rsp + 0x4d]
mov byte [r15 + 0x168], bl
mov ebx, dword [rsp + 0x128]
mov edi, dword [rsp + 0x12b]
mov dword [r15 + 0x16c], edi
mov dword [r15 + 0x169], ebx
mov rbp, qword [rsp + 0x480]
mov qword [r15 + 0x170], rbp
movzx ebx, byte [rsp + 0x4c]
mov byte [r15 + 0x178], bl
mov ebx, dword [rsp + 0x120]
mov edi, dword [rsp + 0x123]
mov dword [r15 + 0x17c], edi
mov dword [r15 + 0x179], ebx
mov rbp, qword [rsp + 0x478]
mov qword [r15 + 0x180], rbp
movzx ebx, byte [rsp + 0x4b]
mov byte [r15 + 0x188], bl
mov ebx, dword [rsp + 0x118]
mov edi, dword [rsp + 0x11b]
mov dword [r15 + 0x18c], edi
mov dword [r15 + 0x189], ebx
mov rbp, qword [rsp + 0x470]
mov qword [r15 + 0x190], rbp
movzx ebx, byte [rsp + 0x4a]
mov byte [r15 + 0x198], bl
mov ebx, dword [rsp + 0x110]
mov edi, dword [rsp + 0x113]
mov dword [r15 + 0x19c], edi
mov dword [r15 + 0x199], ebx
mov rbp, qword [rsp + 0x468]
mov qword [r15 + 0x1a0], rbp
movzx ebx, byte [rsp + 0x49]
mov byte [r15 + 0x1a8], bl
mov ebx, dword [rsp + 0x108]
mov edi, dword [rsp + 0x10b]
mov dword [r15 + 0x1ac], edi
mov dword [r15 + 0x1a9], ebx
mov rbp, qword [rsp + 0x460]
mov qword [r15 + 0x1b0], rbp
movzx ebx, byte [rsp + 0x48]
mov byte [r15 + 0x1b8], bl
mov ebx, dword [rsp + 0x100]
mov edi, dword [rsp + 0x103]
mov dword [r15 + 0x1bc], edi
mov dword [r15 + 0x1b9], ebx
mov rbp, qword [rsp + 0x458]
mov qword [r15 + 0x1c0], rbp
movzx ebx, byte [rsp + 0x47]
mov byte [r15 + 0x1c8], bl
mov ebx, dword [rsp + 0xf8]
mov edi, dword [rsp + 0xfb]
mov dword [r15 + 0x1cc], edi
mov dword [r15 + 0x1c9], ebx
mov rbp, qword [rsp + 0x450]
mov qword [r15 + 0x1d0], rbp
movzx ebx, byte [rsp + 0x46]
mov byte [r15 + 0x1d8], bl
mov ebx, dword [rsp + 0xf0]
mov edi, dword [rsp + 0xf3]
mov dword [r15 + 0x1dc], edi
mov dword [r15 + 0x1d9], ebx
mov rbp, qword [rsp + 0x448]
mov qword [r15 + 0x1e0], rbp
movzx ebx, byte [rsp + 0x45]
mov byte [r15 + 0x1e8], bl
mov ebx, dword [rsp + 0xe8]
mov edi, dword [rsp + 0xeb]
mov dword [r15 + 0x1ec], edi
mov dword [r15 + 0x1e9], ebx
mov rbp, qword [rsp + 0x440]
mov qword [r15 + 0x1f0], rbp
movzx ebx, byte [rsp + 0x44]
mov byte [r15 + 0x1f8], bl
mov ebx, dword [rsp + 0xe0]
mov edi, dword [rsp + 0xe3]
mov dword [r15 + 0x1fc], edi
mov dword [r15 + 0x1f9], ebx
mov rbp, qword [rsp + 0x438]
mov qword [r15 + 0x200], rbp
movzx ebx, byte [rsp + 0x43]
mov byte [r15 + 0x208], bl
mov ebx, dword [rsp + 0xd8]
mov edi, dword [rsp + 0xdb]
mov dword [r15 + 0x20c], edi
mov dword [r15 + 0x209], ebx
mov rbp, qword [rsp + 0x430]
mov qword [r15 + 0x210], rbp
movzx ebx, byte [rsp + 0x42]
mov byte [r15 + 0x218], bl
mov ebx, dword [rsp + 0xd0]
mov edi, dword [rsp + 0xd3]
mov dword [r15 + 0x21c], edi
mov dword [r15 + 0x219], ebx
mov rbp, qword [rsp + 0x428]
mov qword [r15 + 0x220], rbp
movzx ebx, byte [rsp + 0x41]
mov byte [r15 + 0x228], bl
mov ebx, dword [rsp + 0xc8]
mov edi, dword [rsp + 0xcb]
mov dword [r15 + 0x22c], edi
mov dword [r15 + 0x229], ebx
mov rbp, qword [rsp + 0x420]
mov qword [r15 + 0x230], rbp
movzx ebx, byte [rsp + 0x40]
mov byte [r15 + 0x238], bl
mov ebx, dword [rsp + 0xc0]
mov edi, dword [rsp + 0xc3]
mov dword [r15 + 0x23c], edi
mov dword [r15 + 0x239], ebx
mov rbp, qword [rsp + 0x418]
mov qword [r15 + 0x240], rbp
movzx ebx, byte [rsp + 0x3f]
mov byte [r15 + 0x248], bl
mov ebx, dword [rsp + 0xb8]
mov edi, dword [rsp + 0xbb]
mov dword [r15 + 0x24c], edi
mov dword [r15 + 0x249], ebx
mov rbp, qword [rsp + 0x410]
mov qword [r15 + 0x250], rbp
movzx ebx, byte [rsp + 0x3e]
mov byte [r15 + 0x258], bl
mov ebx, dword [rsp + 0xb0]
mov edi, dword [rsp + 0xb3]
mov dword [r15 + 0x25c], edi
mov dword [r15 + 0x259], ebx
mov rbp, qword [rsp + 0x408]
mov qword [r15 + 0x260], rbp
movzx ebx, byte [rsp + 0x3d]
mov byte [r15 + 0x268], bl
mov ebx, dword [rsp + 0xa8]
mov edi, dword [rsp + 0xab]
mov dword [r15 + 0x26c], edi
mov dword [r15 + 0x269], ebx
mov rbp, qword [rsp + 0x400]
mov qword [r15 + 0x270], rbp
movzx ebx, byte [rsp + 0x3c]
mov byte [r15 + 0x278], bl
mov ebx, dword [rsp + 0xa0]
mov edi, dword [rsp + 0xa3]
mov dword [r15 + 0x27c], edi
mov dword [r15 + 0x279], ebx
mov rbp, qword [rsp + 0x3f8]
mov qword [r15 + 0x280], rbp
movzx ebx, byte [rsp + 0x3b]
mov byte [r15 + 0x288], bl
mov ebx, dword [rsp + 0x98]
mov edi, dword [rsp + 0x9b]
mov dword [r15 + 0x28c], edi
mov dword [r15 + 0x289], ebx
mov rbp, qword [rsp + 0x3f0]
mov qword [r15 + 0x290], rbp
movzx ebx, byte [rsp + 0x3a]
mov byte [r15 + 0x298], bl
mov ebx, dword [rsp + 0x90]
mov edi, dword [rsp + 0x93]
mov dword [r15 + 0x29c], edi
mov dword [r15 + 0x299], ebx
mov rbp, qword [rsp + 0x3e8]
mov qword [r15 + 0x2a0], rbp
movzx ebx, byte [rsp + 0x39]
mov byte [r15 + 0x2a8], bl
mov ebx, dword [rsp + 0x88]
mov edi, dword [rsp + 0x8b]
mov dword [r15 + 0x2ac], edi
mov dword [r15 + 0x2a9], ebx
mov rbp, qword [rsp + 0x3e0]
mov qword [r15 + 0x2b0], rbp
movzx ebx, byte [rsp + 0x38]
mov byte [r15 + 0x2b8], bl
mov ebx, dword [rsp + 0x80]
mov edi, dword [rsp + 0x83]
mov dword [r15 + 0x2bc], edi
mov dword [r15 + 0x2b9], ebx
mov rbp, qword [rsp + 0x3d8]
mov qword [r15 + 0x2c0], rbp
movzx ebx, byte [rsp + 0x37]
mov byte [r15 + 0x2c8], bl
mov ebx, dword [rsp + 0x78]
mov edi, dword [rsp + 0x7b]
mov dword [r15 + 0x2cc], edi
mov dword [r15 + 0x2c9], ebx
mov rbp, qword [rsp + 0x3d0]
mov qword [r15 + 0x2d0], rbp
movzx ebx, byte [rsp + 0x36]
mov byte [r15 + 0x2d8], bl
mov ebx, dword [rsp + 0x70]
mov edi, dword [rsp + 0x73]
mov dword [r15 + 0x2dc], edi
mov dword [r15 + 0x2d9], ebx
mov qword [r15 + 0x2e0], r13
movzx ebx, byte [rsp + 0x35]
mov byte [r15 + 0x2e8], bl
mov ebx, dword [rsp + 0x68]
mov edi, dword [rsp + 0x6b]
mov dword [r15 + 0x2ec], edi
mov dword [r15 + 0x2e9], ebx
mov qword [r15 + 0x2f0], r14
movzx ebx, byte [rsp + 0x34]
mov byte [r15 + 0x2f8], bl
mov ebp, dword [rsp + 0x60]
mov ebx, dword [rsp + 0x63]
mov dword [r15 + 0x2fc], ebx
mov dword [r15 + 0x2f9], ebp
mov qword [r15 + 0x300], rax
cmp dl, 1
ja 0x7ff6f9cb090c
lock dec qword [rcx]
jne 0x7ff6f9cb090c
call fcn.7ff6f9cb0a20
nop
add rsp, 0x518
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call sub.kernel32.dll_GetLastError
mov rsi, rax
shl rsi, 0x20
mov qword [rsp + 0x348], 7
test eax, eax
je 0x7ff6f9cb0971
lea rcx, [rsp + 0x348]
call fcn.7ff6f9cadfb0
mov edi, 6
jmp 0x7ff6f9cb0976
mov edi, 7
or rsi, 2
or bl, r12b
cmp qword [rsp + 0x380], 0
jne 0x7ff6f9cae3ad
jmp 0x7ff6f9cae3bf
mov edi, 7
or rsi, 2
or bl, r14b
cmp qword [rsp + 0x380], 0
jne 0x7ff6f9cae4a4
jmp 0x7ff6f9cae4b6
lea rcx, [0x7ff6f9d167a8]
lea r8, [0x7ff6f9d17308]
mov edx, 0x2b
call fcn.7ff6f9cee040
ud2
mov ecx, 0x18
mov edx, 8
call fcn.7ff6f9ceaec0
ud2
mov qword [rsp + 0x348], rax
mov qword [rsp + 0x350], rdi
movups xmm0, xmmword [rsp + 0x3a0]
movups xmmword [rsp + 0x358], xmm0
mov rax, qword [rsp + 0x3b0]
mov qword [rsp + 0x368], rax
lea rax, [0x7ff6f9d0f880]
mov qword [rsp + 0x20], rax
lea rcx, [0x7ff6f9d175d0]
lea r9, fcn.7ff6f9cadfb0
lea r8, [rsp + 0x348]
mov edx, 0x2b
call fcn.7ff6f9cee170
ud2