Function at 0x1400090e0
Capabilities:
Delete volume shadow copies
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4e0]
sub rsp, 0x5e0
mov rax, qword [0x14012de80]
xor rax, rsp
mov qword [rbp + 0x4d0], rax
xor ebx, ebx
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x1a0]
call fcn.1400350d0
lea edx, [rbx + 1]
lea rcx, [rbp + 0x1a0]
call fcn.1400031b0
nop
lea r9d, [rbx + 0x40]
lea r8d, [rbx + 0x20]
lea rdx, str.C:WindowsIMENVContainer.exe
lea rcx, [rbp + 0x1a0]
call fcn.140008390
mov r8d, 0x5e670
lea rdx, [0x1400cf770]
lea rcx, [rbp + 0x1a0]
call fcn.14000c120
lea rcx, [rbp + 0x1a8]
call fcn.140006650
lea edi, [rbx + 6]
lea esi, [rbx + 2]
test rax, rax
jne 0x1400091c1
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
mov eax, edi
cmp qword [rbp + rcx + 0x1e8], rbx
cmovne eax, esi
or eax, dword [rbp + rcx + 0x1b0]
and eax, 0x17
mov dword [rbp + rcx + 0x1b0], eax
mov edx, dword [rbp + rcx + 0x1b4]
and edx, eax
jne 0x14000b8fc
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x90]
call fcn.1400350d0
mov edx, 1
lea rcx, [rbp + 0x90]
call fcn.1400031b0
nop
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, str.C:WindowsIME_amifldrv64.sys
lea rcx, [rbp + 0x90]
call fcn.140008390
mov r8d, 0x7180
lea rdx, [0x1400c85f0]
lea rcx, [rbp + 0x90]
call fcn.14000c120
lea rcx, [rbp + 0x98]
call fcn.140006650
test rax, rax
jne 0x140009267
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
mov eax, edi
cmp qword [rbp + rcx + 0xd8], 0
cmovne eax, esi
or eax, dword [rbp + rcx + 0xa0]
and eax, 0x17
mov dword [rbp + rcx + 0xa0], eax
mov edx, dword [rbp + rcx + 0xa4]
and edx, eax
jne 0x14000b950
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x80]
call fcn.1400350d0
mov edx, 1
lea rcx, [rbp - 0x80]
call fcn.1400031b0
nop
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, str.C:WindowsIME_amigendrv64.sys
lea rcx, [rbp - 0x80]
call fcn.140008390
mov r8d, 0x8788
lea rdx, [0x1400bfe60]
lea rcx, [rbp - 0x80]
call fcn.14000c120
lea rcx, [rbp - 0x78]
call fcn.140006650
test rax, rax
jne 0x1400092ed
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
cmp qword [rbp + rcx - 0x38], 0
cmovne edi, esi
or edi, dword [rbp + rcx - 0x70]
and edi, 0x17
mov dword [rbp + rcx - 0x70], edi
mov eax, dword [rbp + rcx - 0x6c]
and eax, edi
jne 0x14000b9a4
mov ecx, dword [0x1401311d0]
mov rax, qword gs:[0x58]
mov edx, 4
mov rsi, qword [rax + rcx*8]
add rsi, rdx
mov rdi, 0xffffffffffffffff
mov eax, dword [rsi]
cmp dword [0x140130858], eax
jg 0x14000b9f6
mov eax, dword [rsi]
cmp dword [0x140130880], eax
jg 0x14000ba43
lea rcx, str.C:WindowsIMENVContainer.exe__SU_auto
call fcn.140016e90
mov r15, qword [0x140130848]
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, r15
cmp rax, 0x24
jb 0x14000ba8e
lea r12, [0x140130838]
cmp qword [0x140130850], 0xf
cmova r12, qword [0x140130838]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r14, [r15 + 0x24]
mov edi, 0xf
lea rsi, [rsp + 0x30]
movabs rax, 0x8000000000000000
lea ecx, [rdi + 7]
cmp r14, rdi
jbe 0x140009439
mov rdi, r14
or rdi, 0xf
cmp rdi, r13
jbe 0x1400093ff
mov rdi, r13
add rax, 0x27
mov rcx, rax
call fcn.14001010c
test rax, rax
je 0x14000ba94
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140009434
inc r8
cmp byte [rax + r8], 0
je 0x14000b871
jmp 0x1400093e0
inc rdi
cmp byte [rax + rdi], 0
je 0x14000b8a9
jmp 0x1400093f0
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140009422
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b8e4
jmp 0x1400093b7
test rcx, rcx
je 0x140009431
call fcn.14001010c
mov rsi, rax
jmp 0x140009434
mov rsi, rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rdi
movups xmm0, xmmword [str.C:WindowsIMENVContainer.exe__PSN]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x140037a10]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [0x140037a20]
mov dword [rsi + 0x20], eax
lea rcx, [rsi + 0x24]
mov r8, r15
mov rdx, r12
call fcn.140034a30
mov byte [rsi + r14], 0
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
call fcn.140016e90
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400094c8
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400094c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba94
call fcn.140010148
mov r15, qword [0x140130870]
mov rax, r13
sub rax, r15
cmp rax, 0x23
jb 0x14000ba9a
lea r12, [0x140130860]
cmp qword [0x140130878], 0xf
cmova r12, qword [0x140130860]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r14, [r15 + 0x23]
mov edi, 0xf
lea rsi, [rsp + 0x30]
cmp r14, rdi
jbe 0x140009596
mov rdi, r14
or rdi, 0xf
cmp rdi, r13
jbe 0x140009556
mov rdi, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001010c
test rax, rax
je 0x14000baa0
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140009591
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000957f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b8ea
jmp 0x140009537
test rcx, rcx
je 0x14000958e
call fcn.14001010c
mov rsi, rax
jmp 0x140009591
mov rsi, rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rdi
movups xmm0, xmmword [str.C:WindowsIMENVContainer.exe__SS]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x140037a38]
movups xmmword [rsi + 0x10], xmm1
movzx eax, word [0x140037a48]
mov word [rsi + 0x20], ax
movzx eax, byte [0x140037a4a]
mov byte [rsi + 0x22], al
lea rcx, [rsi + 0x23]
mov r8, r15
mov rdx, r12
call fcn.140034a30
mov byte [rsi + r14], 0
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
call fcn.140016e90
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140009631
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000962c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000baa0
call fcn.140010148
lea rcx, [rsp + 0x50]
call fcn.140007da0
mov rdi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x23
jb 0x1400096d6
lea rax, [r8 + 0x23]
mov qword [rdi + 0x10], rax
mov rsi, rdi
cmp rcx, 0xf
jbe 0x14000966a
mov rsi, qword [rdi]
lea rax, [0x140037a73]
mov r12d, 0x23
lea r15, str.C:WindowsIMENVContainer.exe__SV
cmp rax, rsi
jbe 0x14000969e
lea rax, [rsi + r8]
cmp r15, rax
ja 0x14000969e
cmp rsi, r15
ja 0x140009696
mov r14, rbx
jmp 0x1400096a1
mov r14, rsi
sub r14, r15
jmp 0x1400096a1
mov r14, r12
lea rcx, [rsi + 0x23]
inc r8
mov rdx, rsi
call fcn.140034a30
mov r8, r14
mov rdx, r15
mov rcx, rsi
call fcn.140034a30
lea rcx, [rsi + r14]
sub r12, r14
lea rdx, [r15 + 0x23]
add rdx, r14
mov r8, r12
call fcn.140034a30
jmp 0x140009701
mov r12d, 0x23
mov qword [rsp + 0x28], r12
lea r15, str.C:WindowsIMENVContainer.exe__SV
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
mov rcx, rdi
call fcn.140002ac0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
call fcn.140016e90
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140009785
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009780
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000baa6
call fcn.140010148
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400097d5
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400097d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000baac
call fcn.140010148
mov r15, qword [0x140130870]
mov rax, r13
sub rax, r15
cmp rax, 0x23
jb 0x14000bab2
lea r12, [0x140130860]
cmp qword [0x140130878], 0xf
cmova r12, qword [0x140130860]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r14, [r15 + 0x23]
mov edi, 0xf
lea rsi, [rsp + 0x30]
cmp r14, rdi
jbe 0x1400098a3
mov rdi, r14
or rdi, 0xf
cmp rdi, r13
jbe 0x140009863
mov rdi, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001010c
test rax, rax
je 0x14000bab8
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000989e
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000988c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b8f0
jmp 0x140009844
test rcx, rcx
je 0x14000989b
call fcn.14001010c
mov rsi, rax
jmp 0x14000989e
mov rsi, rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rdi
movups xmm0, xmmword [str.C:WindowsIMENVContainer.exe__BM]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x140037a88]
movups xmmword [rsi + 0x10], xmm1
movzx eax, word [0x140037a98]
mov word [rsi + 0x20], ax
movzx eax, byte [0x140037a9a]
mov byte [rsi + 0x22], al
lea rcx, [rsi + 0x23]
mov r8, r15
mov rdx, r12
call fcn.140034a30
mov byte [rsi + r14], 0
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
call fcn.140016e90
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000993e
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009939
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bab8
call fcn.140010148
mov r15, qword [0x140130870]
mov rax, r13
sub rax, r15
cmp rax, 0x24
jb 0x14000babe
lea r12, [0x140130860]
cmp qword [0x140130878], 0xf
cmova r12, qword [0x140130860]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea r14, [r15 + 0x24]
mov edi, 0xf
lea rsi, [rsp + 0x30]
cmp r14, rdi
jbe 0x140009a0c
mov rdi, r14
or rdi, 0xf
cmp rdi, r13
jbe 0x1400099cc
mov rdi, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001010c
test rax, rax
je 0x14000bac4
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140009a07
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1400099f5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000b8f6
jmp 0x1400099ad
test rcx, rcx
je 0x140009a04
call fcn.14001010c
mov rsi, rax
jmp 0x140009a07
mov rsi, rbx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rdi
movups xmm0, xmmword [str.C:WindowsIMENVContainer.exe__PAT]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x140037ab0]
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [0x140037ac0]
mov dword [rsi + 0x20], eax
lea rcx, [rsi + 0x24]
mov r8, r15
mov rdx, r12
call fcn.140034a30
mov byte [rsi + r14], 0
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
call fcn.140016e90
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140009a9b
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bac4
call fcn.140010148
lea rcx, [rsp + 0x50]
call fcn.140007da0
mov rdi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x24
jb 0x140009b40
lea rax, [r8 + 0x24]
mov qword [rdi + 0x10], rax
mov rsi, rdi
cmp rcx, 0xf
jbe 0x140009ad4
mov rsi, qword [rdi]
lea rax, [0x140037aec]
mov r12d, 0x24
lea r15, str.C:WindowsIMENVContainer.exe__PPN
cmp rax, rsi
jbe 0x140009b08
lea rax, [rsi + r8]
cmp r15, rax
ja 0x140009b08
cmp rsi, r15
ja 0x140009b00
mov r14, rbx
jmp 0x140009b0b
mov r14, rsi
sub r14, r15
jmp 0x140009b0b
mov r14, r12
lea rcx, [rsi + 0x24]
inc r8
mov rdx, rsi
call fcn.140034a30
mov r8, r14
mov rdx, r15
mov rcx, rsi
call fcn.140034a30
lea rcx, [rsi + r14]
sub r12, r14
lea rdx, [r15 + 0x24]
add rdx, r14
mov r8, r12
call fcn.140034a30
jmp 0x140009b6b
mov r12d, 0x24
mov qword [rsp + 0x28], r12
lea r15, str.C:WindowsIMENVContainer.exe__PPN
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
mov rcx, rdi
call fcn.140002ac0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
call fcn.140016e90
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140009bef
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009bea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000baca
call fcn.140010148
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140009c3f
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009c3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bad0
call fcn.140010148
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__IVN
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x140009c68
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140009cad
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009ca8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bad6
call fcn.140010148
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140009cfd
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009cf8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000badc
call fcn.140010148
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__IV
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x140009d26
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x140009d48
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140009d75
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__ID
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x140009d9e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x140009dc0
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140009ded
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__SM
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x140009e16
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x140009e38
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140009e65
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea r8, [0x140130838]
lea rdx, str.C:WindowsIMENVContainer.exe__CA
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x140009e87
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140009ea9
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__SP
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x140009ed2
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x140009ef4
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140009f21
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea r8, [0x140130860]
lea rdx, str.C:WindowsIMENVContainer.exe__SK
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x140009f43
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140009f65
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea r8, [0x140130860]
lea rdx, str.C:WindowsIMENVContainer.exe__SF
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x140009f87
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x140009fa9
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__BP
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x140009fd2
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x140009ff4
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a021
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__BV
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a04a
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a06c
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a099
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea r8, [0x140130860]
lea rdx, str.C:WindowsIMENVContainer.exe__BT
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000a0bb
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a0dd
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__BLC
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a106
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a128
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a155
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CM
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a17e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a1a0
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a1cd
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CO
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a1f6
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a218
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a245
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CT
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a26e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a290
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a2bd
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CV
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a2e6
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a308
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a335
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea r8, [0x140130838]
lea rdx, str.C:WindowsIMENVContainer.exe__CS
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000a357
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a379
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea r8, [0x140130838]
lea rdx, str.C:WindowsIMENVContainer.exe__CSK
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000a39b
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a3bd
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_1
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a3e6
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a408
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a435
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_2
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a45e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a480
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a4ad
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_3
lea rcx, [rsp + 0x30]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a4d6
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
mov r8, qword [rsp + 0x48]
cmp r8, 0xf
jbe 0x14000a4f8
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x30]
call fcn.140004dc0
movdqa xmm0, xmmword [0x140038b90]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov r8, qword [rsp + 0x68]
cmp r8, 0xf
jbe 0x14000a525
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.140004dc0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_4
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a54e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_5
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a594
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_6
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a5da
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_7
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a620
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__OS_8
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a666
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__BLCH_2
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a6ac
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea r8, [0x140130838]
lea rdx, str.C:WindowsIMENVContainer.exe__BS
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000a6eb
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CMH_3
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a726
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CVH_3
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a76c
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CSH_3
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a7b2
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CAH_3
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a7f8
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__CSKH_3
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a83e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__SCO_1
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a884
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__SCO_2
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a8ca
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__SCO_4
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a910
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsIMENVContainer.exe__BSH
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000a956
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, str.C:WindowsIMENVContainer.exe
call fcn.140018ce0
lea rcx, str.C:WindowsIME_amifldrv64.sys
call fcn.140018ce0
lea rcx, str.C:WindowsIME_amigendrv64.sys
call fcn.140018ce0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x3c0]
call fcn.1400350d0
mov edx, 1
lea rcx, [rbp + 0x3c0]
call fcn.1400031b0
nop
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe
lea rcx, [rbp + 0x3c0]
call fcn.140008390
mov r8d, 0x71270
lea rdx, [0x14004ebf0]
lea rcx, [rbp + 0x3c0]
call fcn.14000c120
lea rcx, [rbp + 0x3c0]
call fcn.140006750
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x2b0]
call fcn.1400350d0
mov edx, 1
lea rcx, [rbp + 0x2b0]
call fcn.1400031b0
nop
mov r9d, 0x40
lea r8d, [r9 - 0x20]
lea rdx, str.C:WindowsPerformance_amifldrv64.sys
lea rcx, [rbp + 0x2b0]
call fcn.140008390
mov r8d, 0x4be8
lea rdx, section..data
lea rcx, [rbp + 0x2b0]
call fcn.14000c120
lea rcx, [rbp + 0x2b0]
call fcn.140006750
lea rcx, str.C:WindowsPerformanceAMDContainer.exe__SU_auto
call fcn.140016e90
lea r8, [0x140130838]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__PSN
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000aa95
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea r8, [0x140130860]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__SS
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000aac9
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__SV
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000ab04
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea r8, [0x140130860]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__BM
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000ab43
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea r8, [0x140130860]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__PAT
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000ab77
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__PPN
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000abb2
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__IVN
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000abf8
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__IV
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000ac3e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__ID
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000ac84
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__SM
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000acca
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea r8, [0x140130838]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__CA
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000ad09
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__SP
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000ad44
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea r8, [0x140130860]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__SK
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000ad83
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea r8, [0x140130860]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__SF
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000adb7
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__BP
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000adf2
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__BV
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000ae38
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea r8, [0x140130860]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__BT
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000ae77
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__BLC
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000aeb2
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__CM
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000aef8
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__CO
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000af3e
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__CT
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000af84
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__CV
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000afca
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea r8, [0x140130838]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__CS
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000b009
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea r8, [0x140130838]
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__CSK
lea rcx, [rsp + 0x50]
call fcn.140001540
cmp qword [rax + 0x18], 0xf
jbe 0x14000b03d
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__OS_1
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000b078
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__OS_2
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000b0be
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__OS_3
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000b104
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__OS_4
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000b14a
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__OS_5
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000b190
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__OS_6
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000b1d6
mov rax, qword [rax]
mov rcx, rax
call fcn.140016e90
lea rcx, [rsp + 0x50]
call fcn.140003df0
nop
lea rcx, [rsp + 0x30]
call fcn.140003df0
lea rcx, [rsp + 0x30]
call fcn.140007da0
nop
mov r8, rax
lea rdx, str.C:WindowsPerformanceAMDContainer.exe__OS_7
lea rcx, [rsp + 0x50]
call fcn.140001410
cmp qword [rax + 0x18], 0xf
jbe 0x14000b21c
mov rdx, rax
lea rcx, [0x140130838]
call fcn.140001830
nop
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [0x140036410]
call fcn.140010378
nop
lea rcx, [0x140130858]
call fcn.14000fffc
jmp 0x14000931d
mov r8, rdi
mov rdx, rax
lea rcx, [0x140130860]
call fcn.140001830
nop
lea rcx, [rsp + 0x50]
call fcn.140003df0
lea rcx, [0x140036480]
call fcn.140010378
nop
lea rcx, [0x140130880]
call fcn.14000fffc
jmp 0x14000932b
call fcn.140006430
int3
call fcn.140006430
int3
call fcn.140006430
int3
call fcn.140006430
nop
test dl, 4
je 0x14000b90a
lea rbx, str.ios_base::badbit_set
jmp 0x14000b91f
test sil, dl
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.1400082e0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.140003a20
lea rdx, [0x1400491b8]
lea rcx, [rsp + 0x50]
call fcn.1400111d4
nop
test dl, 4
je 0x14000b95e
lea rbx, str.ios_base::badbit_set
jmp 0x14000b973
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.1400082e0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.140003a20
lea rdx, [0x1400491b8]
lea rcx, [rsp + 0x50]
call fcn.1400111d4
nop
test al, 4
je 0x14000b9b1
lea rbx, str.ios_base::badbit_set
jmp 0x14000b9c5
test al, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x30]
call fcn.1400082e0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.140003a20
lea rdx, [0x1400491b8]
lea rcx, [rsp + 0x50]
call fcn.1400111d4
int3
lea rcx, [0x140130858]
call fcn.140010068
cmp dword [0x140130858], edi
jne 0x14000931d
lea rcx, [rsp + 0x50]
call fcn.140007da0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000ba23
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [0x140130838], xmm0
mov qword [0x140130848], rbx
mov qword [0x140130850], rbx
mov r8, rdi
jmp 0x1400093e0
lea rcx, [0x140130880]
call fcn.140010068
cmp dword [0x140130880], 0xffffffff
jne 0x14000932b
lea rcx, [rsp + 0x50]
call fcn.140004aa0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000ba71
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [0x140130860], xmm0
mov qword [0x140130870], rbx
mov qword [0x140130878], rbx
jmp 0x1400093f0
call fcn.140006500
int3
call fcn.140016dfc
int3
call fcn.140006500
int3
call fcn.140016dfc
nop
call fcn.140016dfc
nop
call fcn.140016dfc
int3
call fcn.140006500
int3
call fcn.140016dfc
int3
call fcn.140006500
int3
call fcn.140016dfc
nop
call fcn.140016dfc
nop
call fcn.140016dfc
nop
call fcn.140016dfc
nop
call fcn.140016dfc
int3