Function at 0x1400b77d0
Capabilities:
Allocate or change rwx memory
Generate random numbers via rtlgenrandom

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1b8
movaps xmmword [rsp + 0x1a0], xmm7
movaps xmmword [rsp + 0x190], xmm6
mov rax, qword [0x1401f5028]
xor rax, rsp
mov qword [rsp + 0x188], rax
cmp qword [rcx + 0x18], 0
je 0x1400b85bb
mov r12, rcx
lea rax, [rsp + 0xc8]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax - 8], rax
lea r14, [rcx + 8]
mov rbx, qword [rcx + 0x10]
movabs r15, 0xaaaaaaaaaaaaaaaa
cmp rbx, r14
mov qword [rsp + 0x60], r14
je 0x1400b852e
xor edi, edi
lea r13, [rsp + 0xc0]
lea r14, [rsp + 0x120]
mov eax, dword [rbx + 0x10]
cmp eax, 2
jb 0x1400b7954
cmp eax, 5
jg 0x1400b7954
mov qword [rsp + 0x130], r15
mov byte [rsp + 0x137], 9
movaps xmm0, xmmword [0x1401e2170]
movaps xmmword [rsp + 0x120], xmm0
movzx eax, word [0x1401e2180]
mov word [rsp + 0x130], ax
mov word [rsp + 0x132], 0
movzx ecx, byte [rbx + 0x2f]
mov rax, rcx
test cl, cl
jns 0x1400b78b3
mov rax, qword [rbx + 0x20]
lea rbp, [rbx + 0x18]
cmp rax, 9
jne 0x1400b78f3
mov rax, rbp
test cl, cl
jns 0x1400b78c8
mov rax, qword [rbp]
movzx ecx, word [rax]
cmp cx, word [rsp + 0x120]
jne 0x1400b78f3
xor ecx, ecx
cmp rcx, 8
je 0x1400b7954
movzx edx, word [rsp + rcx*2 + 0x122]
lea rsi, [rcx + 1]
cmp dx, word [rax + rcx*2 + 2]
mov rcx, rsi
je 0x1400b78d7
mov rcx, r13
mov rdx, rbp
call fcn.1400052d0
test rax, rax
jne 0x1400b792e
movzx eax, byte [rbp + 0x17]
test al, al
jns 0x1400b790f
mov rax, qword [rbp + 8]
add rax, rax
add rax, 0x1f
and rax, 0xfffffffffffffff8
add rdi, rax
mov rcx, r13
mov rdx, r14
mov r8, rbp
mov r9, rbp
call fcn.1400053d0
movzx eax, byte [rbx + 0x47]
test al, al
js 0x1400b857b
movzx ecx, byte [rbx + 0x5f]
test cl, cl
js 0x1400b8584
add rax, rcx
add rax, 0x21
and rax, 0xfffffffffffffff8
add rdi, rax
mov rbx, qword [rbx + 8]
cmp rbx, qword [rsp + 0x60]
jne 0x1400b7857
mov rdx, qword [rsp + 0xc8]
test rdi, rdi
je 0x1400b84c4
add rdi, 0xc
mov r14, qword [rsp + 0x60]
lea rcx, [rsp + 0xc0]
call fcn.1400214c0
mov rcx, rdi
call fcn.1400f04c8
mov r13, rax
mov qword [rsp + 0x80], rdi
test rdi, rdi
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x68], rax
je 0x1400b7dfc
lea rsi, [r13 + 0xc]
cmp byte [r12 + 0x20], 0
je 0x1400b84d8
mov rax, qword [r12]
mov rax, qword [rax + 0x48]
mov qword [r13 + 4], rax
mov rax, qword [rsp + 0x80]
lea r13, [rax - 0xc]
mov rcx, qword [r12 + 0x10]
movaps xmm6, xmmword [0x1401c8a80]
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x74], 0
cmp rcx, r14
je 0x1400b7def
mov eax, dword [rcx + 0x10]
cmp eax, 2
jb 0x1400b7d62
cmp eax, 5
jg 0x1400b7d62
mov qword [rsp + 0x130], r15
mov byte [rsp + 0x137], 9
movaps xmm0, xmmword [0x1401e2170]
movaps xmmword [rsp + 0x120], xmm0
movzx eax, word [0x1401e2180]
mov word [rsp + 0x130], ax
mov word [rsp + 0x132], 0
lea rbp, [rcx + 0x18]
movzx eax, byte [rcx + 0x2f]
test al, al
mov qword [rsp + 0x40], rcx
mov r8, qword [rcx + 0x20]
mov rcx, rax
cmovs rcx, r8
cmp rcx, 9
jne 0x1400b7aa1
mov rcx, rbp
test al, al
jns 0x1400b7a72
mov rcx, qword [rbp]
movzx edx, word [rcx]
cmp dx, word [rsp + 0x120]
jne 0x1400b7aa1
xor edx, edx
cmp rdx, 8
je 0x1400b7d5d
movzx ebx, word [rsp + rdx*2 + 0x122]
lea rdi, [rdx + 1]
cmp bx, word [rcx + rdx*2 + 2]
mov rdx, rdi
je 0x1400b7a81
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x130], r15
movaps xmmword [rsp + 0x120], xmm6
test al, al
js 0x1400b7d6b
mov rcx, qword [rbp + 0x10]
mov qword [rsp + 0x130], rcx
mov rcx, qword [rsp + 0x40]
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x120], xmm0
movzx eax, al
test al, al
cmovns r8, rax
lea r15, [r8 + r8]
add r15, 0x1f
and r15, 0xfffffffffffffff8
mov rax, r13
sub rax, r15
jb 0x1400b85b4
mov rdi, rax
cmp dword [rcx + 0x10], 5
sete byte [rsi + 0x14]
mov qword [rsi], r15
mov qword [rsi + 8], r15
mov dword [rsi + 0x10], 0
movzx r8d, byte [rcx + 0x2f]
test r8b, r8b
jns 0x1400b7b23
mov r8, qword [rcx + 0x20]
lea rdx, [rsi + 0x16]
mov rcx, rbp
xor r9d, r9d
call fcn.140005270
mov rbp, qword [rsp + 0x40]
movzx eax, byte [rbp + 0x2f]
test al, al
jns 0x1400b7b43
mov rax, qword [rbp + 0x20]
add r15, rsi
mov word [rsi + rax*2 + 0x16], 0
cmp rbp, r14
mov r9, rdi
je 0x1400b7d8d
movzx ecx, byte [rbp + 0x2f]
mov rax, rcx
test cl, cl
jns 0x1400b7b68
mov rax, qword [rbp + 0x20]
movzx esi, byte [rsp + 0x137]
mov rdx, rsi
test sil, sil
jns 0x1400b7b80
mov rdx, qword [rsp + 0x128]
cmp rax, rdx
jne 0x1400b7d2f
lea rdi, [rbp + 0x18]
test rax, rax
je 0x1400b7bc9
mov rbx, rdi
test cl, cl
jns 0x1400b7b9c
mov rbx, qword [rdi]
lea rcx, [rsp + 0x120]
test sil, sil
jns 0x1400b7bb1
mov rcx, qword [rsp + 0x120]
xor edx, edx
movzx esi, word [rbx + rdx*2]
cmp si, word [rcx + rdx*2]
jne 0x1400b7d2f
inc rdx
cmp rax, rdx
jne 0x1400b7bb3
mov rax, qword [rsp + 0x50]
cmp byte [rax + 0x14], 0
mov qword [rsp + 0x48], rdi
je 0x1400b7c13
movzx eax, byte [rbp + 0x47]
test al, al
jns 0x1400b7be5
mov rax, qword [rbp + 0x38]
cmp rax, 1
jne 0x1400b7c13
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], 1
xor edx, edx
mov r8, 0xffffffffffffffff
mov rsi, r9
lea r9, [0x1401e215e]
call fcn.1400b8610
mov r9, rsi
movzx ebx, byte [rbp + 0x47]
test bl, bl
jns 0x1400b7c1f
mov rbx, qword [rbp + 0x38]
movzx r12d, byte [rbp + 0x5f]
test r12b, r12b
jns 0x1400b7c2d
mov r12, qword [rbp + 0x50]
lea r14, [rbx + r12]
add r14, 0x21
and r14, 0xfffffffffffffff8
mov r13, r9
sub r13, r14
jb 0x1400b7ddb
lea rcx, [rbp + 0x30]
mov rdi, r15
lea r15, [rbp + 0x48]
mov qword [rdi], r14
mov eax, dword [rbp + 0x10]
mov dword [rdi + 8], eax
mov eax, dword [rbp + 0x14]
mov dword [rdi + 0xc], eax
mov rax, qword [rbp + 0x60]
mov qword [rdi + 0x10], rax
lea rdx, [rdi + 0x18]
mov qword [rsp + 0x90], rcx
mov r8, rbx
xor r9d, r9d
call fcn.140005210
lea rsi, [rdi + rbx]
add rsi, 0x18
mov qword [rsp + 0x78], rdi
lea rdx, [rdi + rbx]
add rdx, 0x19
xor ebx, ebx
mov byte [rdx - 1], bl
mov qword [rsp + 0x88], r15
mov rcx, r15
mov r8, r12
xor r9d, r9d
call fcn.140005210
mov byte [r12 + rsi + 1], bl
mov rax, qword [rsp + 0x50]
inc dword [rax + 0x10]
add qword [rax], r14
mov rax, qword [rsp + 0x40]
cmp rax, rbp
jne 0x1400b7cd1
mov rax, qword [rax + 8]
mov qword [rsp + 0x40], rax
mov r12, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x48]
mov rax, qword [rbp]
mov rbx, qword [rbp + 8]
mov qword [rax + 8], rbx
mov rax, qword [rbp]
mov rcx, qword [rbp + 8]
mov qword [rcx], rax
dec qword [r12 + 0x18]
cmp byte [rbp + 0x5f], 0
mov r15, qword [rsp + 0x78]
js 0x1400b8561
mov rax, qword [rsp + 0x90]
cmp byte [rax + 0x17], 0
js 0x1400b7d4e
cmp byte [rdx + 0x17], 0
js 0x1400b7d44
add r15, r14
mov rcx, rbp
call fcn.1400f0498
mov r9, r13
mov r14, qword [rsp + 0x60]
jmp 0x1400b7d36
mov rbx, qword [rbp + 8]
mov r13, r9
mov rbp, rbx
cmp rbx, r14
jne 0x1400b7b59
jmp 0x1400b7d95
mov rcx, qword [rdx]
call fcn.1400f0498
jmp 0x1400b7d1a
mov rcx, qword [rax]
call fcn.1400f0498
mov rdx, qword [rsp + 0x48]
jmp 0x1400b7d14
mov rcx, qword [rsp + 0x40]
mov rcx, qword [rcx + 8]
jmp 0x1400b79f1
mov rdx, qword [rcx + 0x18]
lea rcx, [rsp + 0x120]
call fcn.1400da520
mov rcx, qword [rsp + 0x40]
mov al, byte [rcx + 0x2f]
mov r8, qword [rcx + 0x20]
jmp 0x1400b7adb
mov r13, r9
mov qword [rsp + 0x40], r14
inc dword [rsp + 0x74]
mov bl, 1
mov rsi, r15
mov qword [rsp + 0x50], r15
cmp byte [rsp + 0x137], 0
movabs r15, 0xaaaaaaaaaaaaaaaa
mov rcx, qword [rsp + 0x40]
jns 0x1400b7dce
mov rcx, qword [rsp + 0x120]
call fcn.1400f0498
mov rcx, qword [rsp + 0x40]
test bl, bl
jne 0x1400b79f1
jmp 0x1400b851e
xor ebx, ebx
mov r13, r9
mov rsi, r15
mov r12, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
jmp 0x1400b7da3
mov r13, qword [rsp + 0x68]
mov eax, dword [rsp + 0x74]
mov dword [r13], eax
lea r9, [rsp + 0x98]
mov qword [r9], r15
mov rax, qword [r12]
mov rcx, qword [rax]
mov rdx, r13
mov rsi, qword [rsp + 0x80]
mov r8, rsi
call fcn.1400055e0
test al, al
je 0x1400b85c3
test rsi, rsi
je 0x1400b85ce
lea rax, [0x140192760]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
lea rsi, [0x1401e2170]
lea r8, str.NtMapViewOfSection
mov rcx, r12
mov rdx, rsi
mov r9d, 1
call fcn.140003b30
lea rax, [0x1401929b0]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 1
lea r8, str.NtUnmapViewOfSection
mov rcx, r12
mov rdx, rsi
mov r9d, 1
call fcn.140003b30
mov rax, qword [r12]
mov r15, qword [rax]
mov dword [rsp + 0x20], 1
mov r8d, 0x10000
mov rcx, r15
xor edx, edx
mov r9d, 0x2000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rbp, rax
mov rdi, qword [r12 + 0x18]
shl rdi, 6
lea rax, [rdi + 0x60]
mov qword [rsp + 0x40], rax
cmp rax, 0x10001
jae 0x1400b85df
lea rsi, [rsp + 0x120]
mov dword [rsi], 0xaaaaaaaa
mov ebx, 0xffa0
sub rbx, rdi
mov rcx, rsi
mov edx, 4
call sub.ADVAPI32.dll_SystemFunction036
movzx eax, word [rsi]
mov dword [rsi], eax
cmp rbx, rax
jb 0x1400b8532
mov esi, 0x1000
cmp qword [rsp + 0x40], 0x800
ja 0x1400b7f2d
mov esi, 0x800
cmp qword [rsp + 0x40], 0x400
jbe 0x1400b84f6
neg esi
and esi, eax
mov eax, esi
and eax, 0xf000
add rbp, rax
add rdi, 0x105f
and rdi, 0xfffffffffffff000
mov dword [rsp + 0x20], 0x40
mov rcx, r15
mov rdx, rbp
mov r8, rdi
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test rax, rax
je 0x1400b85e2
mov rbx, rax
movaps xmm6, xmmword [0x1401c8a80]
movups xmmword [rsp + 0x130], xmm6
movups xmmword [rsp + 0x170], xmm6
movups xmmword [rsp + 0x160], xmm6
movups xmmword [rsp + 0x150], xmm6
movups xmmword [rsp + 0x140], xmm6
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x138], 0
mov qword [rsp + 0x128], 0x20
lea rcx, [0x140201460]
mov r8d, 0xd8
xor edx, edx
call fcn.1400f5b50
lea rcx, [0x1401e2170]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x78], rax
test rax, rax
lea rdi, [rsp + 0xc8]
je 0x1400b84d0
mov qword [rsp + 0x48], r15
and esi, 0xfff
add rbx, rsi
mov qword [rsp + 0x50], rbx
mov ecx, 0x30
call fcn.1400f045c
mov r15, rax
mov al, byte [r12 + 0x21]
mov rcx, qword [r12]
mov rcx, qword [rcx]
lea rdx, [0x1401cc178]
mov qword [r15], rdx
mov qword [r15 + 0x18], 0
mov qword [r15 + 0x20], rcx
mov byte [r15 + 0x28], al
mov dword [r15 + 0x2c], 0
mov rbp, qword [r12 + 0x10]
cmp rbp, r14
je 0x1400b8395
lea r13, [rsp + 0xe0]
lea r12, [rsp + 0xf8]
movaps xmm7, xmmword [0x1401e2170]
movzx ebx, word [0x1401e2180]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x110], rax
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0xc0], rax
cmp byte [rbp + 0x2f], 0
js 0x1400b8364
lea rax, [rbp + 0x18]
mov rcx, qword [rax + 0x10]
mov qword [rdi + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
cmp byte [rbp + 0x47], 0
js 0x1400b832b
lea rax, [rbp + 0x30]
mov rcx, qword [rax + 0x10]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [r13], xmm0
cmp byte [rbp + 0x5f], 0
js 0x1400b858d
lea rax, [rbp + 0x48]
mov rcx, qword [rax + 0x10]
mov qword [r12 + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
mov rax, qword [rbp + 0x60]
mov qword [rsp + 0x110], rax
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xb0], rcx
mov byte [rsp + 0xb7], 9
movaps xmmword [rsp + 0xa0], xmm7
mov word [rsp + 0xb0], bx
mov word [rsp + 0xb2], 0
movzx edx, byte [rsp + 0xdf]
mov rcx, rdx
test dl, dl
jns 0x1400b816c
mov rcx, qword [rsp + 0xd0]
cmp rcx, 9
jne 0x1400b81c5
mov rcx, rdi
test dl, dl
jns 0x1400b8181
mov rcx, qword [rsp + 0xc8]
movzx edx, word [rcx]
cmp dx, word [rsp + 0xa0]
jne 0x1400b81c5
xor edx, edx
cmp rdx, 8
je 0x1400b8214
movzx ebx, word [rcx + rdx*2 + 2]
lea rdi, [rdx + 1]
cmp bx, word [rsp + rdx*2 + 0xa2]
mov rdx, rdi
je 0x1400b8190
xor esi, esi
mov r14d, 2
lea rdi, [rsp + 0xc8]
movzx ebx, word [0x1401e2180]
jmp 0x1400b81cd
xor esi, esi
mov r14d, 2
cmp byte [rsp + 0x10f], 0
js 0x1400b85a2
cmp byte [rsp + 0xf7], 0
js 0x1400b8352
cmp byte [rsp + 0xdf], 0
js 0x1400b8340
test sil, sil
je 0x1400b84df
mov rbp, qword [rbp + 8]
cmp rbp, qword [rsp + 0x60]
jne 0x1400b8076
jmp 0x1400b8395
cmp dword [rsp + 0xc0], 1
jne 0x1400b81ac
cmp byte [rsp + 0x10f], 0
mov rcx, r12
jns 0x1400b8233
mov rcx, qword [rsp + 0xf8]
movsxd rbx, dword [rsp + 0x138]
shl rbx, 6
mov rdx, qword [rsp + 0x40]
sub rdx, qword [rsp + 0x128]
cmp byte [rsp + 0xf7], 0
mov r9, r13
jns 0x1400b8261
mov r9, qword [rsp + 0xe0]
mov rdi, qword [rsp + 0x50]
lea rsi, [rdi + rbx]
add rsi, 0x20
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r13, r15
mov rcx, r15
mov rdx, qword [rsp + 0x78]
xor r8d, r8d
call fcn.1400056b0
test eax, eax
js 0x1400b85e5
mov ecx, 0x20
call fcn.1400f04c8
mov rdi, rax
mov rcx, r13
mov rdx, rax
call fcn.140019d70
test al, al
je 0x1400b85e9
mov rcx, r13
mov rdx, rdi
mov r8, rsi
call fcn.140019b80
mov ebx, eax
mov rcx, rdi
call fcn.1400f04a0
test ebx, ebx
lea r13, [rsp + 0xe0]
js 0x1400b8379
movsxd rax, dword [rsp + 0x138]
lea ecx, [rax + 1]
shl rax, 6
mov rdx, qword [rsp + 0x50]
add rax, rdx
add rax, 0x20
movsxd rdx, dword [rsp + 0xc4]
lea rbx, [0x140201460]
mov qword [rbx + rdx*8], rax
mov dword [rsp + 0x138], ecx
add qword [rsp + 0x128], 0x40
mov sil, 1
jmp 0x1400b81b4
mov rdx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x38]
mov rcx, r13
call fcn.1400e8260
jmp 0x1400b80f6
mov rcx, qword [rsp + 0xc8]
call fcn.1400f0498
jmp 0x1400b81f7
mov rcx, qword [rsp + 0xe0]
call fcn.1400f0498
jmp 0x1400b81e9
mov rdx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x20]
mov rcx, rdi
call fcn.1400da520
jmp 0x1400b80d8
mov ecx, ebx
call fcn.140125460
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r14d, 0x28
xor esi, esi
jmp 0x1400b81b4
mov rcx, r15
call fcn.1400f0498
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x120]
mov r9d, 0x20
mov rcx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r14d, 0x2a
test eax, eax
je 0x1400b84e7
cmp qword [rsp + 0xc0], 0x20
mov r12, qword [rsp + 0x58]
mov r13, qword [rsp + 0x68]
jne 0x1400b844c
lea rax, [rsp + 0xa0]
mov dword [rax], 0xaaaaaaaa
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x48]
mov rdx, rsi
mov r8, qword [rsp + 0x40]
mov r9d, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [r12]
lea rdx, str.g_originals
lea r8, [0x140201460]
mov r9d, 0xd8
call fcn.1400037f0
mov r14d, eax
test r14d, r14d
jne 0x1400b8480
mov rax, qword [rsp + 0x98]
mov qword [0x140201568], rax
lea r8, [0x140201568]
mov rcx, qword [r12]
lea rdx, str.g_interceptions
mov r9d, 8
call fcn.1400037f0
mov r14d, eax
test r13, r13
je 0x1400b848d
mov rcx, r13
call fcn.1400f04a0
mov rcx, qword [rsp + 0x188]
xor rcx, rsp
call fcn.1400f32c0
mov eax, r14d
movaps xmm6, xmmword [rsp + 0x190]
movaps xmm7, xmmword [rsp + 0x1a0]
add rsp, 0x1b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r14, qword [rsp + 0x60]
xor edi, edi
jmp 0x1400b797d
mov r14d, 7
jmp 0x1400b8480
xor eax, eax
jmp 0x1400b79c8
mov rcx, r15
call fcn.1400f0498
mov r12, qword [rsp + 0x58]
mov r13, qword [rsp + 0x68]
jmp 0x1400b844c
mov ecx, 0x200
mov ebx, 0x400
mov edx, 0x200
mov rsi, rbx
shr rdx, 1
mov rbx, rcx
cmp rcx, qword [rsp + 0x40]
mov rcx, rdx
jb 0x1400b7f2d
jmp 0x1400b8505
mov r14d, 0x26
mov r13, qword [rsp + 0x68]
jmp 0x1400b8480
xor edx, edx
jmp 0x1400b84c9
lea rsi, [rsp + 0x120]
mov rcx, rsi
mov edx, 4
call sub.ADVAPI32.dll_SystemFunction036
movzx eax, word [rsp + 0x120]
mov dword [rsp + 0x120], eax
cmp rbx, rax
jae 0x1400b7f09
jmp 0x1400b853a
mov rax, qword [rsp + 0x88]
mov rcx, qword [rax]
call fcn.1400f0498
mov rdx, qword [rsp + 0x48]
jmp 0x1400b7d06
mov rax, qword [rbx + 0x38]
jmp 0x1400b793a
mov rcx, qword [rbx + 0x50]
jmp 0x1400b7946
mov rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x50]
mov rcx, r12
call fcn.1400e8260
jmp 0x1400b8115
mov rcx, qword [rsp + 0xf8]
call fcn.1400f0498
jmp 0x1400b81db
xor ebx, ebx
jmp 0x1400b7da3
xor r14d, r14d
jmp 0x1400b848d
mov r14d, 0x27
jmp 0x1400b8480
cmp qword [r12 + 0x18], 0
jne 0x1400b7e91
jmp 0x1400b8451
int3
int3
mov ebx, eax
jmp 0x1400b85f6
mov rcx, rdi
call fcn.1400f04a0
mov ebx, 0xc0000035
lea r13, [rsp + 0xe0]
jmp 0x1400b8379