Function at 0x14004fd50
Capabilities:
Authenticate hmac
Encode data using xor

Disassembly:
mov byte [rsp + 0x20], r9b
xchg rdi, r8
mov qword [rsp + 0x18], rdi
xchg rdi, r8
mov qword [rsp + 8], rcx
nop
sub rsp, 8
mov qword [rsp], rbx
push rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
nop
sub rsp, 8
mov qword [rsp], r13
push rax
mov qword [rsp], r14
push r15
sub rsp, 0x860
xchg r15, rbx
mov r15, rdx
xchg rbx, r15
xor edi, edi
mov dword [rsp + 0xc0], edi
xchg rdx, rcx
mov rdx, rcx
xchg rcx, rdx
call fcn.1400701d0
test rax, rax
je 0x140051722
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rdi
movdqu xmmword [rsp + 0x128], xmm0
xchg rdi, rbp
mov qword [rsp + 0x138], rbp
xchg rdi, rbp
mov dword [rsp + 0xc0], 0x437984ab
add dword [rsp + 0xc0], 0x2e356f20
xor dword [rsp + 0xc0], 0xadac2b1
xor dword [rsp + 0xc0], 0x2c1cdfcb
xor dword [rsp + 0xc0], 0x7145e47
add dword [rsp + 0xc0], 0x5326a0c
xor dword [rsp + 0xc0], 0x55af1b03
lea ecx, [rdi + 0x20]
call fcn.1401fcb4c
mov qword [rsp + 0x88], rax
test rax, rax
je 0x14004fefd
xorps xmm0, xmm0
xchg r8, rax
movups xmmword [r8], xmm0
xchg r8, rax
mov dword [rax + 8], 0xfdb1e9e
sub dword [rax + 8], 0x85ca910
add dword [rax + 8], 0x607e09e2
xor dword [rax + 8], 0x9b1a629
sub dword [rax + 8], 0x7b63f73
xor dword [rax + 8], 0x222cf937
add dword [rax + 8], 0x29e67b63
sub dword [rax + 8], 0x6ea1dc33
mov dword [rax + 0xc], 0x23ba5e20
xor dword [rax + 0xc], 0x68bc13e5
sub dword [rax + 0xc], 0x42b8e9
sub dword [rax + 0xc], 0x3fb10509
xor dword [rax + 0xc], 0x1c9ab172
xor dword [rax + 0xc], 0x336f2dd4
xor dword [rax + 0xc], 0xc30e898
add dword [rax + 0xc], 0x68cae93
sub dword [rax + 0xc], 0x2f64aa7f
lea rcx, [0x140002b88]
xchg r10, rcx
mov qword [rax], r10
xchg rcx, r10
lea rcx, [0x1400017e0]
mov qword [rax + 0x10], rcx
lea rcx, [rsp + 0x128]
xchg rcx, rsi
mov qword [rax + 0x18], rsi
xchg rsi, rcx
jmp 0x14004ff06
xchg rdi, rbp
mov rax, rbp
xchg rdi, rbp
or dword [rsp + 0xc0], 2
lea rcx, [rax + 0x10]
xchg rcx, rbx
mov qword [rsp + 0xe8], rbx
xchg rbx, rcx
mov qword [rsp + 0xf0], rax
lea rdx, [rsp + 0xe8]
xchg rdx, r8
mov qword [rsp + 0x88], r8
xchg r8, rdx
test rax, rax
je 0x14004ff61
lock inc dword [rax + 8]
mov rax, qword [rsp + 0xf0]
xchg r9, rcx
mov r9, qword [rsp + 0xe8]
xchg r9, rcx
mov byte [rsp + 0x1c0], 0x4a
xor byte [rsp + 0x1c0], 0x3a
xor byte [rsp + 0x1c0], 0x19
sub byte [rsp + 0x1c0], 0x42
add byte [rsp + 0x1c0], 7
add byte [rsp + 0x1c0], 0x41
sub byte [rsp + 0x1c0], 0x26
add byte [rsp + 0x1c0], 0x20
sub byte [rsp + 0x1c0], 0x68
mov qword [rsp + 0x1c8], rcx
xchg r12, rax
mov qword [rsp + 0x1d0], r12
xchg r12, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x218], xmm0
mov rdx, rbx
lea rcx, [rsp + 0x1c0]
call fcn.140071860
nop
mov rbx, qword [rsp + 0x1d0]
nop
movabs r14, 0xffffffff41b6c66a
sub r14, 0x3c66b260
add r14, 0x7a905427
sub r14, 0x7c271c1
sub r14, 0x1c952947
add r14, 0xe389258
add r14, 0xec611e9
add r14, 0x7fffffff
add r14, 0x7788e96
test rbx, rbx
je 0x140050076
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x140050076
xchg r12, rax
mov r12, qword [rbx]
xchg r12, rax
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x140050076
xchg rsi, rax
mov rsi, qword [rbx]
xchg rsi, rax
xchg rbx, rsi
mov rcx, rsi
xchg rsi, rbx
call qword [rax + 8]
nop
mov rbx, qword [rsp + 0xf0]
test rbx, rbx
je 0x1400500c4
mov eax, r14d
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400500c4
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r14d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400500c4
xchg rsi, rax
mov rsi, qword [rbx]
xchg rsi, rax
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call qword [rax + 8]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14005011f
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14005011a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffff8058902c
sub rax, 0xffffffff80589034
cmp rax, 0x1f
jbe 0x14005011a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
xchg r13, rdx
mov rdx, qword [rsp + 0x128]
xchg rdx, r13
mov qword [rsp + 0x70], r13
mov r12, qword [rsp + 0x130]
xchg r12, rsi
mov qword [rsp + 0x78], rsi
xchg rsi, r12
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0x80], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x128], xmm0
xchg rdi, r11
mov qword [rsp + 0x138], r11
xchg rdi, r11
and dword [rsp + 0xc0], 0xfffffffe
xchg r12, r15
mov r12, r15
xchg r12, r15
sub r15, r13
lea rsi, [r15 + 0xf]
and rsi, 0xfffffffffffffff0
cmp r15, rsi
je 0x14005020d
jbe 0x1400501ac
lea rax, [rsi + r13]
xchg rdi, rax
mov qword [rsp + 0x78], rdi
xchg rdi, rax
jmp 0x14005020d
jae 0x14005020d
sub rax, r13
cmp rsi, rax
jbe 0x1400501e0
lea r8, [rsp + 0x30]
xchg rsi, r9
mov rdx, r9
xchg r9, rsi
lea rcx, [rsp + 0x70]
call fcn.140035630
mov r13, qword [rsp + 0x70]
jmp 0x14005020d
mov rbx, rsi
sub rbx, r15
xchg r8, r11
mov r11, rbx
xchg r11, r8
xor edx, edx
xchg r15, rcx
mov r15, r12
xchg rcx, r15
call sub.VCRUNTIME140.dll_memset
add r12, rbx
xchg r12, rdx
mov qword [rsp + 0x78], rdx
xchg rdx, r12
call fcn.140179940
movabs rcx, 0x272e2121135cb115
xor rcx, 0x2d347919
sub rcx, 0x243cbe1a
add rcx, 0x483b0232
sub rcx, 0x50792d5b
xor rcx, 0xcf18f64
xor rcx, 0x5b3a8776
add rcx, 0x32d15eda
xor rcx, 0x44cb2bf8
push rax
xor eax, ecx
push rax
xor rax, qword [rsp + 8]
shr rax, 0x20
ror rcx, 0x20
xor eax, ecx
ror rcx, 0x20
shl rax, 0x20
xor rax, qword [rsp]
add rsp, 0x10
mov qword [rsp + 0x140], r15
xchg r10, rax
mov qword [rsp + 0x148], r10
xchg r10, rax
mov r9d, 0x7d13ebdf
add r9d, 0x1ba8ef5
xor r9d, 0x74100c5f
add r9d, 0x1cfafa0e
xor r9d, 0x34fd1368
add r9d, 0x41bbd2c1
xor r9d, 0x54e036a2
lea r8, [rsp + 0x140]
xchg r13, rdx
mov r13, rdx
xchg r13, rdx
lea rcx, [rsp + 0x70]
call fcn.140033e00
mov eax, 0x4bba8445
xor eax, 0x4cde33bc
add eax, 0x74b92f06
sub eax, 0xc4d555c
xor eax, 0x57756df4
sub eax, 0x38a5fc56
xor ecx, ecx
cpuid
mov dword [rsp + 0x170], eax
mov dword [rsp + 0x174], ebx
mov dword [rsp + 0x178], ecx
mov dword [rsp + 0x17c], edx
xchg r13, r14
mov r14, qword [rsp + 0x8a0]
xchg r14, r13
bt ecx, 0x19
jae 0x140050387
lea rcx, [rsp + 0x440]
call fcn.1400278f0
lea r8, [rsp + 0x140]
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x440]
call fcn.140027c20
mov rdx, qword [rsp + 0x70]
nop
add rdx, 0x742e2119
sub rdx, 0x742e2109
xchg rdx, r13
mov r9, r13
xchg r13, rdx
mov r8d, esi
lea rcx, [rsp + 0x440]
call fcn.140027b00
jmp 0x14005040e
xor edx, edx
mov r8d, 0x6b8ac6a7
sub r8d, 0x20f13b8f
xor r8d, 0x36495c31
sub r8d, 0x410b189d
add r8d, 0x15a17b87
sub r8d, 0x4ebf939e
add r8d, 0x1c8f1837
xor r8d, 0x1f36bfac
lea rcx, [rsp + 0x240]
call sub.VCRUNTIME140.dll_memset
lea r8, [rsp + 0x140]
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x240]
call fcn.140026290
xchg rdx, r9
mov r9, qword [rsp + 0x70]
xchg rdx, r9
neg rdx
add rdx, 0xfffffffffffffff0
neg rdx
mov r8d, esi
lea rcx, [rsp + 0x240]
call fcn.140026160
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xchg rdx, rdi
mov qword [rsp + 0x48], rdx
xchg rdi, rdx
mov qword [rsp + 0x50], 0x5ed22a2c
add qword [rsp + 0x50], 0x180ec3c4
sub qword [rsp + 0x50], 0x3311859a
add qword [rsp + 0x50], 0xeac43b6
sub qword [rsp + 0x50], 0x49876934
add qword [rsp + 0x50], 0x6ef2e8df
sub qword [rsp + 0x50], 0x5c930217
add qword [rsp + 0x50], 0x52e307d7
sub qword [rsp + 0x50], 0x6e373170
mov word [rsp + 0x38], di
lea rcx, [r13 + 0x108]
call fcn.14007b280
test rax, rax
jne 0x140050c81
lea rdx, [r13 + 0xc8]
lea r8d, [rax + 0x21]
lea rcx, [rsp + 0x1f8]
call fcn.140073b20
nop
xchg r14, rax
mov rdx, r14
xchg r14, rax
lea rcx, [rsp + 0x150]
call fcn.1401fc650
nop
mov rdx, qword [rsp + 0x210]
cmp rdx, 0x10
jb 0x140050516
inc rdx
xchg rcx, r9
mov r9, qword [rsp + 0x1f8]
xchg rcx, r9
xchg rbx, rax
mov rbx, rcx
xchg rbx, rax
cmp rdx, 0x1000
jb 0x140050511
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050511
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
movdqa xmm0, xmmword [0x140002c80]
movdqu xmmword [rsp + 0x208], xmm0
mov byte [rsp + 0x1f8], 0x65
sub byte [rsp + 0x1f8], 0x1d
xor byte [rsp + 0x1f8], 0x53
add byte [rsp + 0x1f8], 0x1d
add byte [rsp + 0x1f8], 0x3d
sub byte [rsp + 0x1f8], 0x6d
xor byte [rsp + 0x1f8], 0x23
xor byte [rsp + 0x1f8], 0x39
xor byte [rsp + 0x1f8], 0x12
mov dword [rsp + 0x98], 0x7ab30264
sub dword [rsp + 0x98], 0x45a11e95
sub dword [rsp + 0x98], 0x1cec4c24
add dword [rsp + 0x98], 0x210fdd83
sub dword [rsp + 0x98], 0x1a931ce0
xor dword [rsp + 0x98], 0xe854aeb8
mov dword [rsp + 0x9e], 0x74e6eb32
sub dword [rsp + 0x9e], 0x63995b9e
add dword [rsp + 0x9e], 0x1d2ac83b
xor dword [rsp + 0x9e], 0x1c007efc
xor dword [rsp + 0x9e], 0x37111c0d
add dword [rsp + 0x9e], 0x5132accb
sub dword [rsp + 0x9e], 0xf783dac
sub dword [rsp + 0x9e], 0x3e2bce8c
add dword [rsp + 0x9e], 0xf6772978
mov dword [rsp + 0xa2], 0x3c7df83d
xor dword [rsp + 0xa2], 0x5c57ddd4
xor dword [rsp + 0xa2], 0x606097f4
add dword [rsp + 0xa2], 0x250a82f3
xor dword [rsp + 0xa2], 0x475eb742
add dword [rsp + 0xa2], 0x194fced2
add dword [rsp + 0xa2], 0x83ecae4e
xor eax, eax
mov word [rsp + 0xa6], ax
mov rdx, rdi
nop word [rax + rax]
movzx eax, word [rsp + rdx*2 + 0x9e]
movzx ecx, byte [rsp + rdx + 0x98]
add cx, ax
mov word [rsp + rdx*2 + 0x9e], cx
mov byte [rsp + rdx + 0x98], reloc.SHLWAPI.dll_SHCreateMemStream
xor byte [rsp + rdx + 0x98], 0x23
xor byte [rsp + rdx + 0x98], 0x36
xor byte [rsp + rdx + 0x98], 0x33
xor byte [rsp + rdx + 0x98], 0x48
sub byte [rsp + rdx + 0x98], 0x62
inc rdx
cmp rdx, 4
jb 0x140050674
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x190], xmm1
lea rax, [rsp + 0x9e]
mov r8, r14
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x1400506f0
lea rdx, [rsp + 0x9e]
lea rcx, [rsp + 0x180]
call fcn.140030b50
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x14005076f
lea rdx, [rdx*2 + 2]
xchg rdi, rcx
mov rdi, qword [rsp + 0x38]
xchg rdi, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x14005076a
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14005076a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
movups xmm0, xmmword [rsp + 0x180]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rsp + 0x190]
movups xmmword [rsp + 0x48], xmm1
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rsp + 0x190], xmm0
mov word [rsp + 0x180], di
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
nop dword [rax + rax]
mov byte [rsp + rax + 0x9e], 0x49
add byte [rsp + rax + 0x9e], 0x1e
xor byte [rsp + rax + 0x9e], 0x30
sub byte [rsp + rax + 0x9e], 0x1f
xor byte [rsp + rax + 0x9e], 0x63
xor byte [rsp + rax + 0x9e], 0x3e
sub byte [rsp + rax + 0x9e], 0x65
inc rax
cmp rax, 8
jb 0x1400507ae
lea rdx, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rdx, qword [rsp + 0x150]
xchg r12, rcx
mov rcx, qword [rsp + 0x160]
xchg rcx, r12
add r12, rdx
lea rsi, [rsp + 0x150]
cmp qword [rsp + 0x168], 0x10
cmovae rsi, qword [rsp + 0x150]
xorps xmm0, xmm0
movups xmmword [rsp + 0xc8], xmm0
xchg rdi, r10
mov qword [rsp + 0xd8], r10
xchg rdi, r10
cmp rsi, r12
jne 0x1400508a7
xchg rsi, rdi
mov rdi, rsi
xchg rsi, rdi
mov r15d, 0x52b488fd
xor r15d, 0x32056e75
xor r15d, 0x4261b210
xor r15d, 0x3dd30273
add r15d, 0x5d28a23f
sub r15d, 0x7c2bf923
xchg rsi, r15
mov qword [rsp + 0xe0], rsi
xchg rsi, r15
mov word [rsp + 0xc8], di
jmp 0x140050a40
xchg rcx, r12
mov rax, rcx
xchg r12, rcx
sub rax, rsi
mov r15, rdi
mov ebx, 0x764677ce
sub ebx, 0x1d04c565
xor ebx, 0x576e935
xor ebx, 0x7b1b80c5
add ebx, 0x146df938
xor ebx, 0x48ec615a
xor ebx, 0x22029101
sub ebx, 0x51742483
xchg r11, rbx
mov qword [rsp + 0xe0], r11
xchg r11, rbx
movabs rcx, 0x7fffffff5175e45e
sub rcx, 0x4acb1d43
add rcx, 0xd0c026
add rcx, 0x72461dd8
sub rcx, 0x7757bac
xor rcx, 0x6835437d
add rcx, 0x50f39f15
add rcx, 0x7fffffff
xor rcx, 0x1492f6da
cmp rax, rcx
ja 0x1400522cc
cmp rax, 8
jb 0x1400509bc
mov rbx, rax
or rbx, 7
cmp rbx, rcx
jbe 0x140050966
xchg rdx, rcx
mov rbx, rdx
xchg rcx, rdx
jmp 0x140050995
mov eax, 0x2dfb752
add eax, 0x6c0d7df8
sub eax, 0x175f6d04
xor eax, 0x67f3e5c6
xor eax, 0x68231fea
sub eax, 0x3f3af3ae
add eax, 0x313c93a6
xor eax, 0x4a5ed268
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rsp + 0xc8]
call fcn.14002f880
mov qword [rsp + 0xc8], rax
xchg r13, rbx
mov qword [rsp + 0xe0], r13
xchg r13, rbx
lea rcx, [rsp + 0xc8]
cmp rbx, 8
cmovae rcx, qword [rsp + 0xc8]
movsx eax, byte [rsi]
mov word [rcx + r15*2], ax
xchg r13, r15
mov r13, qword [rsp + 0xd8]
xchg r13, r15
inc r15
mov qword [rsp + 0xd8], r15
inc rsi
cmp rsi, r12
je 0x140050a0b
mov rbx, qword [rsp + 0xe0]
jmp 0x1400509bc
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xe0], 8
cmovae rax, qword [rsp + 0xc8]
mov word [rax + r15*2], di
xchg r15, rbp
mov rbp, qword [rsp + 0xe0]
xchg r15, rbp
mov rsi, qword [rsp + 0xd8]
lea r9, [rsp + 0xc8]
xchg r12, rdx
mov rdx, qword [rsp + 0xc8]
xchg r12, rdx
cmp r15, 8
cmovae r9, r12
xchg r13, rsi
mov rsi, qword [rsp + 0x48]
xchg rsi, r13
xchg rcx, rdx
mov rdx, qword [rsp + 0x50]
xchg rdx, rcx
mov rax, rcx
sub rax, r13
cmp rsi, rax
ja 0x140050abc
lea rax, [rsi + r13]
xchg rbx, rax
mov qword [rsp + 0x48], rbx
xchg rbx, rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r13*2]
lea r8, [rsi + rsi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + r13]
mov word [rbx + rax*2], di
jmp 0x140050af0
xchg rsi, r11
mov qword [rsp + 0x20], r11
xchg rsi, r11
movzx r8d, byte [rsp + 0x30]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.140034e50
xchg r15, r8
mov r8, qword [rsp + 0xe0]
xchg r15, r8
mov r12, qword [rsp + 0xc8]
cmp r15, 8
jb 0x140050b45
lea rdx, [r15*2 + 2]
xchg rbx, rax
mov rbx, r12
xchg rbx, rax
cmp rdx, 0x1000
jb 0x140050b37
sub rdx, 0xffffffffffffffd9
mov r12, qword [r12 - 8]
sub rax, r12
sub rax, 8
cmp rax, 0x1f
jbe 0x140050b37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xchg rbp, r12
mov rcx, rbp
xchg r12, rbp
call fcn.1401fcb88
xchg rdi, r15
mov qword [rsp + 0xd8], r15
xchg r15, rdi
mov qword [rsp + 0xe0], 0x103ac22c
add qword [rsp + 0xe0], 0x1465e292
xor qword [rsp + 0xe0], 0x52181be7
xor qword [rsp + 0xe0], 0x3fb083bb
xor qword [rsp + 0xe0], 0x17c1b029
add qword [rsp + 0xe0], 0x215cd95
sub qword [rsp + 0xe0], 0x16cd9747
add qword [rsp + 0xe0], 0x129ea393
xor qword [rsp + 0xe0], 0x5cb066ab
mov word [rsp + 0xc8], di
mov rdx, qword [rsp + 0x168]
cmp rdx, 0x10
jb 0x140050c23
inc rdx
mov rcx, qword [rsp + 0x150]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x140050c1e
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
jbe 0x140050c1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
movdqa xmm0, xmmword [0x140002c80]
movdqu xmmword [rsp + 0x160], xmm0
mov byte [rsp + 0x150], 0x1b
add byte [rsp + 0x150], 0x36
xor byte [rsp + 0x150], 0x62
add byte [rsp + 0x150], 2
xor byte [rsp + 0x150], 0x33
add byte [rsp + 0x150], 7
xor byte [rsp + 0x150], 0x2d
xor byte [rsp + 0x150], 0x20
mov r13, qword [rsp + 0x8a0]
jmp 0x140050fc0
mov dword [rsp + 0x88], 0x36859e54
sub dword [rsp + 0x88], 0x510cb33
sub dword [rsp + 0x88], 0x172316dc
add dword [rsp + 0x88], 0x207f713b
sub dword [rsp + 0x88], 0x24606d39
add dword [rsp + 0x88], 0x169962eb
xor dword [rsp + 0x88], 0xdbfcd5c4
mov dword [rsp + 0x8e], 0x29bc4d29
sub dword [rsp + 0x8e], 0xec91cf7
xor dword [rsp + 0x8e], 0xcc663c0
add dword [rsp + 0x8e], 0x2d50fb2e
sub dword [rsp + 0x8e], 0xf4a60bd
add dword [rsp + 0x8e], 0xcb4610e6
mov dword [rsp + 0x92], 0x3bacbe81
add dword [rsp + 0x92], 0x186621e8
sub dword [rsp + 0x92], 0x1608e1cc
sub dword [rsp + 0x92], 0x44576e9
xor dword [rsp + 0x92], 0x75c61037
sub dword [rsp + 0x92], 0x15d37ffa
xor dword [rsp + 0x92], 0x666c296
add dword [rsp + 0x92], 0x4b33baf5
add dword [rsp + 0x92], 0x83ca6f5a
xor eax, eax
mov word [rsp + 0x96], ax
xchg rdx, rdi
mov rdi, rdx
xchg rdi, rdx
movzx eax, word [rsp + rdx*2 + 0x8e]
movzx ecx, byte [rsp + rdx + 0x88]
add cx, ax
mov word [rsp + rdx*2 + 0x8e], cx
mov byte [rsp + rdx + 0x88], SHCreateMemStream
add byte [rsp + rdx + 0x88], 0x5a
sub byte [rsp + rdx + 0x88], 0x1e
add byte [rsp + rdx + 0x88], 0xf
sub byte [rsp + rdx + 0x88], 2
sub byte [rsp + rdx + 0x88], 0x2d
add byte [rsp + rdx + 0x88], 0x44
xor byte [rsp + rdx + 0x88], 0x71
sub byte [rsp + rdx + 0x88], 0x1a
inc rdx
cmp rdx, 4
jb 0x140050d86
xorps xmm0, xmm0
movups xmmword [rsp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1b0], xmm1
lea rax, [rsp + 0x8e]
mov r8, r14
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140050e1a
lea rdx, [rsp + 0x8e]
lea rcx, [rsp + 0x1a0]
call fcn.140030b50
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140050e9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x140050e99
nop
add rdx, 0x2075961f
sub rdx, 0x207595f8
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140050e99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
movups xmm0, xmmword [rsp + 0x1a0]
movups xmmword [rsp + 0x38], xmm0
movups xmm1, xmmword [rsp + 0x1b0]
movups xmmword [rsp + 0x48], xmm1
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rsp + 0x1b0], xmm0
mov word [rsp + 0x1a0], di
xchg rdi, r14
mov rax, r14
xchg rdi, r14
nop dword [rax + rax]
mov byte [rsp + rax + 0x8e], 0x26
xor byte [rsp + rax + 0x8e], 0x49
sub byte [rsp + rax + 0x8e], 0x4e
add byte [rsp + rax + 0x8e], 0x53
sub byte [rsp + rax + 0x8e], 0x50
sub byte [rsp + rax + 0x8e], 0x24
inc rax
cmp rax, 8
jb 0x140050edf
lea rcx, [r13 + 0x108]
call fcn.14007b1a0
xchg r9, rax
mov rax, r9
xchg r9, rax
mov rsi, r14
inc rsi
cmp word [rax + rsi*2], 0
jne 0x140050f32
xchg rsi, r15
mov rsi, qword [rsp + 0x48]
xchg rsi, r15
mov rcx, qword [rsp + 0x50]
xchg r15, rax
mov r15, rcx
xchg r15, rax
sub rax, r15
cmp rsi, rax
ja 0x140050fa2
lea rax, [r15 + rsi]
xchg r15, rax
mov qword [rsp + 0x48], r15
xchg r15, rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
xchg rdx, r14
mov r14, r9
xchg rdx, r14
call sub.VCRUNTIME140.dll_memmove
lea rax, [r15 + rsi]
mov word [rbx + rax*2], di
jmp 0x140050fc0
xchg r14, rsi
mov qword [rsp + 0x20], r14
xchg r14, rsi
movzx r8d, byte [rsp + 0x30]
mov rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.140034e50
mov dword [rsp + 0xa8], 0x740cf251
sub dword [rsp + 0xa8], 0x17f736f2
xor dword [rsp + 0xa8], 0x4bcbeff6
sub dword [rsp + 0xa8], 0x1e13945
add dword [rsp + 0xa8], 0xabf545e
add dword [rsp + 0xa8], 0x5b4f4e64
xor dword [rsp + 0xa8], 0x24ce2c5a
xor dword [rsp + 0xa8], 0xae33648a
mov dword [rsp + 0xae], 0x4b3cda6a
sub dword [rsp + 0xae], 0x23f368ea
add dword [rsp + 0xae], 0x1d50ea6f
xor dword [rsp + 0xae], 0x453d01fa
add dword [rsp + 0xae], 0x78f488a8
xor dword [rsp + 0xae], 0x41dccfaa
xor dword [rsp + 0xae], 0xc43ad227
mov dword [rsp + 0xb2], 0x26c124b1
add dword [rsp + 0xb2], 0x4142e081
xor dword [rsp + 0xb2], 0x7dae298
xor dword [rsp + 0xb2], 0x42bbc02a
xor dword [rsp + 0xb2], 0x818f9cc
add dword [rsp + 0xb2], 0x4fb89250
xor dword [rsp + 0xb2], 0x8a588fef
mov byte [rsp + 0xac], SHCreateMemStream
add byte [rsp + 0xac], 0x6e
sub byte [rsp + 0xac], 0x12
xor byte [rsp + 0xac], 0x39
xor byte [rsp + 0xac], 0xb
xor byte [rsp + 0xac], 0xa3
mov dword [rsp + 0xb6], 0x3d79d815
add dword [rsp + 0xb6], 0x27c8354c
xor dword [rsp + 0xb6], 0x1580b10a
sub dword [rsp + 0xb6], 0xe2bc26d
sub dword [rsp + 0xb6], 0x1a2feb1d
sub dword [rsp + 0xb6], 0x3f377f04
add dword [rsp + 0xb6], 0x211216ec
add dword [rsp + 0xb6], 0x28e5f1fc
xor dword [rsp + 0xb6], 0x53276782
xchg rbp, rdi
mov rdx, rbp
xchg rbp, rdi
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rsp + rdx*2 + 0xae]
movzx ecx, byte [rsp + rdx + 0xa8]
add cx, ax
mov word [rsp + rdx*2 + 0xae], cx
mov byte [rsp + rdx + 0xa8], 0x77
xor byte [rsp + rdx + 0xa8], 0x60
sub byte [rsp + rdx + 0xa8], 4
xor byte [rsp + rdx + 0xa8], 0x49
add byte [rsp + rdx + 0xa8], 0x1e
sub byte [rsp + rdx + 0xa8], 0x78
inc rdx
cmp rdx, 5
jb 0x14005115b
lea rax, [rsp + 0xae]
xchg rsi, r14
mov r14, rsi
xchg r14, rsi
nop word [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400511cd
xchg r15, rdi
mov rdi, qword [rsp + 0x48]
xchg r15, rdi
xchg rcx, rsi
mov rsi, qword [rsp + 0x50]
xchg rsi, rcx
xchg r15, rax
mov r15, rcx
xchg r15, rax
sub rax, r15
cmp rsi, rax
ja 0x14005123e
lea rax, [rsi + r15]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
lea rdx, [rsp + 0xae]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [r15 + rsi]
mov word [rbx + rax*2], di
jmp 0x140051265
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0xae]
movzx r8d, byte [rsp + 0x30]
xchg rsi, rdx
mov rsi, rdx
xchg rdx, rsi
lea rcx, [rsp + 0x38]
call fcn.140034e50
nop
xchg rdi, rax
mov rdi, rax
xchg rdi, rax
nop word [rax + rax]
mov byte [rsp + rax + 0xae], 0x6a
sub byte [rsp + rax + 0xae], 0x30
xor byte [rsp + rax + 0xae], 0x2d
xor byte [rsp + rax + 0xae], 0x5e
sub byte [rsp + rax + 0xae], 0x23
add byte [rsp + rax + 0xae], 0x2d
sub byte [rsp + rax + 0xae], 0x53
inc rax
cmp rax, 0xa
jb 0x140051272
lea rcx, [r13 + 0x138]
call fcn.14007b1a0
mov r9, rax
xchg r14, rsi
mov r14, rsi
xchg r14, rsi
inc rsi
cmp word [rax + rsi*2], 0
jne 0x1400512cf
xchg rdx, r15
mov rdx, qword [rsp + 0x48]
xchg rdx, r15
mov rcx, qword [rsp + 0x50]
xchg rdx, rcx
mov rax, rdx
xchg rcx, rdx
sub rax, r15
cmp rsi, rax
ja 0x14005133d
lea rax, [r15 + rsi]
mov qword [rsp + 0x48], rax
lea rbx, [rsp + 0x38]
cmp rcx, 8
cmovae rbx, qword [rsp + 0x38]
lea rcx, [rbx + r15*2]
lea r8, [rsi + rsi]
xchg r9, r11
mov rdx, r11
xchg r11, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [r15 + rsi]
mov word [rbx + rax*2], di
jmp 0x14005135b
mov qword [rsp + 0x20], rsi
movzx r8d, byte [rsp + 0x30]
xchg rsi, r9
mov rdx, r9
xchg rsi, r9
lea rcx, [rsp + 0x38]
call fcn.140034e50
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
xchg r15, rcx
mov rcx, qword [r13 + 0x78]
xchg rcx, r15
xchg rbx, r11
mov r11, qword [rsp + 0x78]
xchg rbx, r11
mov rsi, qword [rsp + 0x70]
sub rbx, rsi
lea rcx, [r13 + 0xf0]
call fcn.14007b1a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1e8], xmm1
nop
inc r14
cmp word [rax + r14*2], 0
jne 0x1400513ab
mov r8, r14
xchg r9, rdx
mov r9, rax
xchg r9, rdx
lea rcx, [rsp + 0x1d8]
call fcn.140030b50
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
xchg r8, rcx
mov rcx, qword [rsp + 0x48]
xchg r8, rcx
lea rcx, [rsp + 0x1d8]
call fcn.1400539d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x108], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x118], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x108], xmm0
xchg r8, rax
movups xmm1, xmmword [r8 + 0x10]
xchg r8, rax
movups xmmword [rsp + 0x118], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0x1d6b4249
xor qword [rax + 0x18], 0x613f10d0
sub qword [rax + 0x18], 0x4fa9e392
add qword [rax + 0x18], 0x670abe1
xor qword [rax + 0x18], 0x1688ef98
sub qword [rax + 0x18], 0xc8990ba
sub qword [rax + 0x18], 0x190a64af
mov word [rax], di
lea rdx, [rsp + 0x108]
cmp qword [rsp + 0x120], 8
cmovae rdx, qword [rsp + 0x108]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9, rbx
xchg r8, rsi
mov rsi, r8
xchg r8, rsi
xchg r9, r15
mov rcx, r9
xchg r15, r9
call fcn.140193f90
test al, al
sete bl
xchg rdx, rdi
mov rdi, qword [rsp + 0x120]
xchg rdi, rdx
cmp rdx, 8
jb 0x140051529
lea rdx, [rdx*2 + 2]
xchg rbp, rcx
mov rbp, qword [rsp + 0x108]
xchg rcx, rbp
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051524
nop
sub rdx, 0x3eda45fc
add rdx, 0x3eda4623
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffc5da1ef5
sub rax, 0xffffffffc5da1efd
cmp rax, 0x1f
jbe 0x140051524
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
movdqa xmm0, xmmword [0x140002c70]
movdqu xmmword [rsp + 0x118], xmm0
mov word [rsp + 0x108], di
xchg r13, rdx
mov r13, qword [rsp + 0x1f0]
xchg rdx, r13
cmp rdx, 8
jb 0x1400515b7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1d8]
xchg r11, rax
mov r11, rcx
xchg r11, rax
cmp rdx, 0x1000
jb 0x1400515b2
nop
sub rdx, 0x5674881b
add rdx, 0x56748842
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffa36378d7
sub rax, 0xffffffffa36378df
cmp rax, 0x1f
jbe 0x1400515b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
test bl, bl
je 0x14005179b
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140051617
xchg r9, rdx
mov r9, qword [rsp + 0x68]
xchg rdx, r9
sub rdx, rcx
cmp rdx, 0x1000
mov rax, rcx
jb 0x140051604
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rdx, 0xffffffffffffffd9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140052195
call fcn.1401fcb88
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
xchg rdx, r14
mov r14, qword [rsp + 0x50]
xchg r14, rdx
cmp rdx, 8
jb 0x140051676
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
cmp rdx, 0x1000
xchg rcx, r10
mov rax, r10
xchg r10, rcx
jb 0x140051671
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffff82cabc0e
sub rax, 0xffffffff82cabc16
cmp rax, 0x1f
ja 0x14005213d
call fcn.1401fcb88
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 0x7d5bcf63
sub qword [rsp + 0x50], 0x7a6ef785
xor qword [rsp + 0x50], 0x616efbf8
sub qword [rsp + 0x50], 0x48edcbd8
sub qword [rsp + 0x50], 0x33ccd6
xor qword [rsp + 0x50], 0x41c2ca0
sub qword [rsp + 0x50], 0x182ded43
sub qword [rsp + 0x50], 0x64ed28e
mov word [rsp + 0x38], di
test rsi, rsi
je 0x140051722
xchg rdx, r9
mov r9, qword [rsp + 0x80]
xchg rdx, r9
sub rdx, rsi
xchg rsi, rax
mov rsi, rax
xchg rsi, rax
cmp rdx, 0x1000
jb 0x14005171a
nop
sub rdx, 0x6bf5be1c
add rdx, 0x6bf5be43
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400522c5
mov rcx, rsi
call fcn.1401fcb88
xor al, al
add rsp, 0x860
push rcx
push rcx
push rax
push rax
push rdx
push rax
push rdx
push rax
xchg qword [rsp + 0x40], r15
pop rax
pop rdx
pop rax
pop rdx
pop rax
pop rax
pop rcx
pop rcx
add rsp, 8
nop
add rsp, 8
xchg qword [rsp - 8], r14
nop
add rsp, 8
mov r13, qword [rsp - 8]
nop
add rsp, 8
xchg qword [rsp - 8], r12
push rbx
push rax
push rax
push rbx
push rcx
push rax
xchg qword [rsp + 0x30], rdi
pop rax
pop rcx
pop rbx
pop rax
pop rax
pop rbx
add rsp, 8
push rbx
push rcx
push rcx
push rbx
push rdx
push rbx
push rax
push rax
xchg qword [rsp + 0x40], rsi
add rsp, 0x48
nop
add rsp, 8
mov rbx, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
cmp byte [rsp + 0x8b8], 0
je 0x14005193a
xchg rcx, r13
mov r13, qword [rsp + 0x58]
xchg r13, rcx
test rcx, rcx
je 0x140051810
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400517fd
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffffdd2558d7
add rax, 0xffffffffdd2558cf
cmp rax, 0x1f
ja 0x140052195
call fcn.1401fcb88
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
xchg rdx, r8
mov r8, qword [rsp + 0x50]
xchg rdx, r8
cmp rdx, 8
jb 0x140051871
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005186c
nop
sub rdx, 0x11a07843
add rdx, 0x11a0786a
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x14005213d
call fcn.1401fcb88
mov word [rsp + 0x38], di
mov qword [rsp + 0x50], 0x323b82c8
sub qword [rsp + 0x50], 0x9fe3926
sub qword [rsp + 0x50], 0x970d0f1
xor qword [rsp + 0x50], 0x7df7c3ac
xor qword [rsp + 0x50], 0x4192d91
sub qword [rsp + 0x50], 0x490437e7
add qword [rsp + 0x50], 0x11df75f9
add qword [rsp + 0x50], 0xeba14b8
sub qword [rsp + 0x50], 0x3eb7e94f
xchg r11, rdi
mov qword [rsp + 0x48], r11
xchg rdi, r11
test rsi, rsi
je 0x140051923
mov rdx, qword [rsp + 0x80]
sub rdx, rsi
cmp rdx, 0x1000
xchg rsi, rcx
mov rax, rcx
xchg rsi, rcx
jb 0x14005191b
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400522c5
mov rcx, rsi
call fcn.1401fcb88
mov al, 0x4a
xor al, 0x38
sub al, 0x59
xor al, 0x36
add al, 0x29
xor al, 0x14
sub al, 0x2d
xor al, 0x22
sub al, 0x3c
jmp 0x140051724
xchg r14, r8
mov r8, qword [rsp + 0x60]
xchg r14, r8
xchg r10, r8
mov r10, qword [rsp + 0x58]
xchg r10, r8
sub r14, r8
cmp r14, 0x20
jae 0x140051997
mov ecx, 0x28e85aea
add ecx, 0x10b002cf
add ecx, 0x2f9e7156
sub ecx, 0x19bf2cd2
xor ecx, 0x1480e747
add ecx, 0xa27bac5
sub ecx, 0x2dbeb02b
xor ecx, 0x38605019
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1400515bf
sub r14, 0x10
xchg rbp, r12
mov rbp, qword [r8]
xchg rbp, r12
cmp r12, r14
jbe 0x1400519ed
mov ecx, 0x61109ca8
sub ecx, 0x14b34cec
add ecx, 0x24b3df91
xor ecx, 0x1ed9f022
sub ecx, 0x5a128c7d
add ecx, 0x1adedc41
add ecx, 0x3fafefee
sub ecx, 0x4c37886
xor ecx, 0x6b81a3eb
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1400515bf
mov eax, 0x2b077c57
add eax, 0x45fd21f5
xor eax, 0x4f6242ee
sub eax, 0x34b74861
xor eax, 0x1abaf58a
sub eax, 0x131561ca
xor ecx, ecx
cpuid
bt ecx, 0x19
jae 0x140051a71
lea rcx, [rsp + 0x650]
call fcn.1400278f0
mov r8, qword [rsp + 0x58]
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x650]
call fcn.140027c20
xchg rdx, rdi
mov rdi, qword [rsp + 0x58]
xchg rdx, rdi
nop
sub rdx, 0x39b21878
add rdx, 0x39b21888
mov r9, rdx
mov r8d, r14d
lea rcx, [rsp + 0x650]
call fcn.1400279b0
jmp 0x140051aa9
lea rdx, [r13 + 0x88]
lea rcx, [rsp + 0x340]
call fcn.140026290
mov rdx, qword [rsp + 0x58]
nop
add rdx, 0x78ebd2d8
sub rdx, 0x78ebd2c8
mov r8d, r14d
lea rcx, [rsp + 0x340]
call fcn.140026030
xchg r15, rbx
mov rbx, qword [rsp + 0x58]
xchg rbx, r15
lea rdx, [r15 + 0x10]
cmp r15, rdx
je 0x140051ae8
xchg rbp, rbx
mov rbp, qword [rsp + 0x60]
xchg rbx, rbp
sub rbx, rdx
mov r8, rbx
mov rcx, r15
call sub.VCRUNTIME140.dll_memmove
lea rcx, [rbx + r15]
mov qword [rsp + 0x60], rcx
jmp 0x140051aed
mov rcx, qword [rsp + 0x60]
cmp r12, r14
je 0x140051b15
sub r14, r12
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
sub rax, r14
cmp rax, rcx
cmovne rcx, rax
xchg rcx, r12
mov qword [rsp + 0x60], r12
xchg r12, rcx
mov dword [rsp + 0x20], edi
mov r9b, 0x62
xor r9b, 0x49
xor r9b, 0x36
add r9b, 0x37
sub r9b, 5
sub r9b, 0x47
sub r9b, 7
movzx r8d, r9b
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x228]
call fcn.14003a4c0
mov rdx, rax
mov r14, qword [rsp + 0x8b0]
xchg r14, rbx
mov rcx, rbx
xchg r14, rbx
call fcn.14004d980
xchg rcx, r13
mov r13, r14
xchg rcx, r13
call fcn.1400701d0
test rax, rax
jne 0x140051d40
mov ecx, 0x18617c1e
add ecx, 0x2d10d838
xor ecx, 0x7f43d491
xor ecx, 0x16f0eca
add ecx, 0x2258fa7b
xor ecx, 0x2af8d15d
sub ecx, 0x367e7245
add ecx, 0xa62dd16
sub ecx, 0x4b33bef0
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140051c21
xchg rdx, rbx
mov rbx, qword [rsp + 0x68]
xchg rbx, rdx
sub rdx, rcx
xchg rcx, rax
mov rcx, rax
xchg rcx, rax
cmp rdx, 0x1000
jb 0x140051c08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffc9b63101
sub rax, 0xffffffffc9b63109
cmp rax, 0x1f
ja 0x140051f39
call fcn.1401fcb88
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xchg r13, rdi
mov qword [rsp + 0x68], r13
xchg r13, rdi
xchg r8, rdx
mov r8, qword [rsp + 0x50]
xchg r8, rdx
cmp rdx, 8
jb 0x140051c77
lea rdx, [rdx*2 + 2]
xchg rcx, r11
mov r11, qword [rsp + 0x38]
xchg r11, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051c72
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
ja 0x140051fa1
call fcn.1401fcb88
xchg rbp, rdi
mov qword [rsp + 0x48], rbp
xchg rbp, rdi
mov qword [rsp + 0x50], 0x2213db8f
xor qword [rsp + 0x50], 0x7e2e7908
sub qword [rsp + 0x50], 0x2dacd334
sub qword [rsp + 0x50], 0xa980de4
add qword [rsp + 0x50], 0x5be4a96f
xor qword [rsp + 0x50], 0x44f425f0
xor qword [rsp + 0x50], 0x4f5a1857
sub qword [rsp + 0x50], 0x727ce366
xor qword [rsp + 0x50], 0x1f67414
mov word [rsp + 0x38], di
test rsi, rsi
je 0x140051d39
mov rdx, qword [rsp + 0x80]
sub rdx, rsi
mov rax, rsi
cmp rdx, 0x1000
jb 0x140051d1e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
nop
sub rax, 0xffffffff87fdb988
add rax, 0xffffffff87fdb980
cmp rax, 0x1f
ja 0x140052036
mov rcx, rsi
call fcn.1401fcb88
xchg rdi, r8
mov qword [rsp + 0x70], r8
xchg r8, rdi
mov qword [rsp + 0x80], rdi
xor al, al
jmp 0x140051724
xor edx, edx
xchg rcx, rbx
mov rbx, r14
xchg rcx, rbx
call fcn.14004e040
mov rbx, rax
mov byte [rsp + 0xf8], 0x64
xor byte [rsp + 0xf8], 0x35
add byte [rsp + 0xf8], 2
xor byte [rsp + 0xf8], 0x3b
xor byte [rsp + 0xf8], 0x7a
add byte [rsp + 0xf8], 0x38
sub byte [rsp + 0xf8], 5
xor byte [rsp + 0xf8], 0x5d
sub byte [rsp + 0xf8], 0x18
xor eax, eax
xchg r10, rax
mov qword [rsp + 0x100], r10
xchg r10, rax
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.1400541f0
mov byte [rsp + 0xf8], 0x46
add byte [rsp + 0xf8], 0xd
xor byte [rsp + 0xf8], 0x7c
add byte [rsp + 0xf8], 0xf
xor byte [rsp + 0xf8], 0x4c
sub byte [rsp + 0xf8], 0x33
xor byte [rsp + 0xf8], 0x18
sub byte [rsp + 0xf8], 0x23
mov byte [rsp + 0xc0], 0x5a
add byte [rsp + 0xc0], 0x1b
xor byte [rsp + 0xc0], 0x76
xor byte [rsp + 0xc0], 0x6f
add byte [rsp + 0xc0], 0xf
sub byte [rsp + 0xc0], 0x61
add byte [rsp + 0xc0], 0x2f
add byte [rsp + 0xc0], 0x2c
xor byte [rsp + 0xc0], 0x74
xchg r8, rax
mov r8, qword [rsp + 0xc0]
xchg r8, rax
mov qword [rsp + 0x100], rax
lea rdx, [rsp + 0xf8]
xchg r9, rcx
mov r9, rbx
xchg r9, rcx
call fcn.14004d9f0
movzx ebx, al
mov dl, 3
add dl, 0x79
sub dl, 0x6f
add dl, 0x5c
add dl, 6
sub dl, 0x4d
sub dl, 0x1e
lea rcx, [rsp + 0x100]
call fcn.1400541f0
nop
test bl, bl
jne 0x14005206b
mov edx, 0x49473be6
add edx, 0x1f193cb5
sub edx, 0x5d0650f9
add edx, 0x5312d009
xor edx, 0x4a5af427
add edx, 0x8d0c6e0
add edx, 0x2191f9ec
sub edx, 0x3e98c457
mov rcx, r14
call fcn.14004e040
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400306c0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop
xchg rcx, r10
mov r10, qword [rsp + 0x58]
xchg rcx, r10
test rcx, rcx
je 0x140051f53
xchg r10, rdx
mov r10, qword [rsp + 0x68]
xchg rdx, r10
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051f40
nop
sub rdx, 0x21f778ac
add rdx, 0x21f778d3
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x140051f40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140051fad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051fa8
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
sub rax, 0xffffffff91bb20eb
add rax, 0xffffffff91bb20e3
cmp rax, 0x1f
jbe 0x140051fa8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
xchg r14, rdi
mov qword [rsp + 0x48], r14
xchg r14, rdi
mov qword [rsp + 0x50], 0x2fa35129
sub qword [rsp + 0x50], 0x13b6bade
sub qword [rsp + 0x50], 0xbb17e76
add qword [rsp + 0x50], 0x4e9d0584
sub qword [rsp + 0x50], 0x5227b527
xor qword [rsp + 0x50], 0xcb06835
mov word [rsp + 0x38], di
test rsi, rsi
je 0x140052064
mov rdx, qword [rsp + 0x80]
sub rdx, rsi
mov rax, rsi
cmp rdx, 0x1000
jb 0x14005203d
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005203d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xchg r13, rcx
mov r13, rsi
xchg rcx, r13
call fcn.1401fcb88
xchg r11, rdi
mov qword [rsp + 0x70], r11
xchg r11, rdi
xchg rdi, rbp
mov qword [rsp + 0x80], rbp
xchg rdi, rbp
xor al, al
jmp 0x140051724
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400520d2
mov rdx, qword [rsp + 0x68]
sub rdx, rcx
xchg rcx, r12
mov rax, r12
xchg rcx, r12
cmp rdx, 0x1000
jb 0x1400520bf
neg rdx
add rdx, 0xffffffffffffffd9
neg rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffaf02c8fc
sub rax, 0xffffffffaf02c904
cmp rax, 0x1f
ja 0x140052195
call fcn.1401fcb88
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
xchg rcx, rdx
mov rcx, qword [rsp + 0x50]
xchg rdx, rcx
cmp rdx, 8
jb 0x140051871
lea rdx, [rdx*2 + 2]
xchg rcx, r12
mov r12, qword [rsp + 0x38]
xchg rcx, r12
xchg rcx, rsi
mov rax, rsi
xchg rsi, rcx
cmp rdx, 0x1000
jb 0x14005186c
nop
sub rdx, 0x27915f12
add rdx, 0x27915f39
mov rcx, qword [rcx - 8]
sub rax, rcx
nop
add rax, 0xffffffffb8ea0538
sub rax, 0xffffffffb8ea0540
cmp rax, 0x1f
jbe 0x14005186c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xchg r10, rcx
mov r10, qword [rsp + 0x58]
xchg r10, rcx
test rcx, rcx
je 0x1400521bc
xchg rdx, r10
mov r10, qword [rsp + 0x68]
xchg r10, rdx
sub rdx, rcx
xchg rsi, rcx
mov rax, rsi
xchg rcx, rsi
cmp rdx, 0x1000
jb 0x14005219c
sub rdx, 0xffffffffffffffd9
mov rcx, qword [rcx - 8]
sub rax, rcx
sub rax, 8
cmp rax, 0x1f
jbe 0x14005219c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401fcb88
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xor edi, edi
xchg rdi, r12
mov qword [rsp + 0x68], r12
xchg r12, rdi
jmp 0x1400521be
xor edi, edi
mov r8, qword [rsp + 0x50]
cmp r8, 8
jb 0x1400521df
inc r8
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.140054180
xchg rdi, rsi
mov qword [rsp + 0x48], rsi
xchg rdi, rsi
mov qword [rsp + 0x50], 0x34b2f94a
add qword [rsp + 0x50], 0x1e2c2d4f
sub qword [rsp + 0x50], 0xf7034f0
sub qword [rsp + 0x50], 0x18cb6052
xor qword [rsp + 0x50], 0x1b79d19b
sub qword [rsp + 0x50], 0x31da40c5
mov word [rsp + 0x38], di
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140051722
mov rdx, qword [rsp + 0x80]
sub rdx, rcx
xchg rcx, rbp
mov rax, rbp
xchg rcx, rbp
cmp rdx, 0x1000
jb 0x14005171d
nop
add rdx, 0x600dd3cf
sub rdx, 0x600dd3a8
mov rcx, qword [rcx - 8]
sub rax, rcx
neg rax
add rax, 8
neg rax
cmp rax, 0x1f
ja 0x1400522c5
jmp 0x14005171d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14002f840
int3