Function at 0x140003ae0
Capabilities:
Create process on windows
Create thread
Download url
Enumerate process modules
Inject thread
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x528]
sub rsp, 0x600
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14003a140]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
mov r13, rcx
xor esi, esi
mov dword [rsp + 0x48], esi
mov r8d, 0x104
lea rdx, [rbp + 0x2d0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rbp + 0x2d0]
lea rax, [rbp + 0x2d0]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], si
jne 0x140003b50
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rsi
lea rcx, [rbp + 0x10]
call fcn.1400011d0
nop
lea rdi, [rbp + 0x10]
cmp qword [rbp + 0x28], 7
cmova rdi, qword [rbp + 0x10]
mov rax, qword [rbp + 0x20]
lea rbx, [rdi + rax*2]
mov rdx, rbx
mov rcx, rdi
call fcn.1400057d0
cmp rax, rbx
je 0x140003bfd
nop dword [rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140003baf
cmp cx, 0x2f
jne 0x140003bb8
add rax, 2
cmp rax, rbx
jne 0x140003ba0
cmp rax, rbx
je 0x140003bfd
nop dword [rax]
lea rcx, [rbx - 2]
movzx edx, word [rcx]
cmp dx, 0x5c
je 0x140003bdd
cmp dx, 0x2f
je 0x140003bdd
mov rbx, rcx
cmp rax, rcx
jne 0x140003bc0
jmp 0x140003bfd
cmp rax, rbx
je 0x140003bfd
lea rcx, [rbx - 2]
movzx edx, word [rcx]
cmp dx, 0x5c
je 0x140003bf5
cmp dx, 0x2f
jne 0x140003bfd
mov rbx, rcx
cmp rax, rcx
jne 0x140003be2
sub rbx, rdi
sar rbx, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rsi
mov r8, rbx
mov rdx, rdi
lea rcx, [rbp - 0x50]
call fcn.1400011d0
nop
lea r15, [rbp - 0x50]
cmp qword [rbp - 0x38], 7
cmova r15, qword [rbp - 0x50]
mov r14, qword [rbp - 0x40]
call fcn.14000a4d4
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov dword [rsp + 0x48], 0x11f
test r14, r14
je 0x140003d3f
cmp r14, 0x7fffffff
ja 0x14000474f
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, eax
call fcn.14000a544
mov rdi, rax
shr rax, 0x20
test eax, eax
jne 0x14000475a
movsxd rcx, edi
mov rdx, qword [rbp - 0x68]
cmp rcx, rdx
ja 0x140003cb8
mov qword [rbp - 0x68], rcx
lea rax, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova rax, qword [rbp - 0x78]
mov byte [rax + rcx], 0
jmp 0x140003d10
mov rsi, rcx
sub rsi, rdx
mov r8, qword [rbp - 0x60]
mov rax, r8
sub rax, rdx
cmp rsi, rax
ja 0x140003cf4
mov qword [rbp - 0x68], rcx
lea rbx, [rbp - 0x78]
cmp r8, 0xf
cmova rbx, qword [rbp - 0x78]
add rbx, rdx
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.1400270f0
mov byte [rsi + rbx], 0
jmp 0x140003d0e
mov byte [rsp + 0x20], 0
mov r9, rsi
movzx r8d, byte [rsp + 0x40]
mov rdx, rsi
lea rcx, [rbp - 0x78]
call fcn.140001920
xor esi, esi
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova r9, qword [rbp - 0x78]
mov dword [rsp + 0x20], edi
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.14000a544
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x140004766
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x140003d7f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003d7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004770
call fcn.14000bad8
movdqa xmm6, xmmword [0x140029eb0]
movdqu xmmword [rbp - 0x40], xmm6
mov word [rbp - 0x50], si
lea rax, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova rax, qword [rbp - 0x78]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x68]
mov qword [rbp - 8], rax
movaps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm0
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x50]
call fcn.140001300
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rsi
mov qword [rbp + 8], rsi
mov r8d, 0xa
lea rdx, [0x140029ca0]
lea rcx, [rbp - 0x10]
call fcn.1400011d0
nop
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x50]
call fcn.1400047d0
mov rbx, rax
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140003e42
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e35
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004776
call fcn.14000bad8
movdqa xmm6, xmmword [0x140029eb0]
movdqu xmmword [rbp], xmm6
mov word [rbp - 0x10], si
mov r15, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140003e58
mov r15, qword [rbx]
mov r14, qword [rbx + 0x10]
call fcn.14000a4d4
mov r12d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov dword [rsp + 0x48], 0x8eff
test r14, r14
je 0x140003f67
cmp r14, 0x7fffffff
ja 0x14000477c
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov r8d, r14d
mov rdx, r15
mov ecx, eax
call fcn.14000a544
mov rdi, rax
shr rax, 0x20
test eax, eax
jne 0x140004787
movsxd rcx, edi
mov rdx, qword [rbp - 0x20]
cmp rcx, rdx
ja 0x140003ee0
mov qword [rbp - 0x20], rcx
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rax, qword [rbp - 0x30]
mov byte [rax + rcx], 0
jmp 0x140003f38
mov rsi, rcx
sub rsi, rdx
mov r8, qword [rbp - 0x18]
mov rax, r8
sub rax, rdx
cmp rsi, rax
ja 0x140003f1c
mov qword [rbp - 0x20], rcx
lea rbx, [rbp - 0x30]
cmp r8, 0xf
cmova rbx, qword [rbp - 0x30]
add rbx, rdx
mov r8, rsi
xor edx, edx
mov rcx, rbx
call fcn.1400270f0
mov byte [rsi + rbx], 0
jmp 0x140003f36
mov byte [rsp + 0x20], 0
mov r9, rsi
movzx r8d, byte [rsp + 0x40]
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.140001920
xor esi, esi
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r9, qword [rbp - 0x30]
mov dword [rsp + 0x20], edi
mov r8d, r14d
mov rdx, r15
mov ecx, r12d
call fcn.14000a544
mov rcx, rax
shr rax, 0x20
test eax, eax
jne 0x140004793
lea rcx, [rbp + 0x50]
call fcn.140006770
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x40], xmm1
mov ecx, 0x50
call fcn.14000ba9c
mov rdx, rax
mov qword [rbp + 0x30], rax
movdqa xmm0, xmmword [0x140029ee0]
movdqu xmmword [rbp + 0x40], xmm0
movaps xmm0, xmmword [str.https:__raw.githubusercontent.com_flarialmc_newcdn_main_dll_latest.dll]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140029cd0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140029ce0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140029cf0]
movups xmmword [rax + 0x30], xmm1
mov eax, dword [0x140029d00]
mov dword [rdx + 0x40], eax
movzx eax, word [0x140029d04]
mov word [rdx + 0x44], ax
mov byte [rdx + 0x46], 0
lea r8, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r8, qword [rbp - 0x30]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
test eax, eax
jns 0x140004150
mov rcx, qword [r13]
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Failed_to_download_the_DLL.
mov rcx, qword [rcx]
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140004062
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000405d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047af
call fcn.14000bad8
movdqa xmm0, xmmword [0x140029ec0]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x1400040ae
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047b5
call fcn.14000bad8
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400040f9
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047bb
call fcn.14000bad8
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x140004149
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004144
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004749
call fcn.14000bad8
xor eax, eax
jmp 0x140004714
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x70]
call fcn.140002a40
mov rbx, rax
mov qword [rbp - 0x10], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rsi
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140004191
mov rcx, qword [rax]
lea rax, [rbp - 0x10]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
lea rax, [rbp - 0x50]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov edx, 1
mov r8d, 4
call qword [sym.imp.ADVAPI32.dll_GetNamedSecurityInfoA]
test eax, eax
jne 0x14000425e
lea rdx, [rsp + 0x50]
lea rcx, str.S_1_15_2_1
call sub.ADVAPI32.dll_ConvertStringSidToSidW
mov rax, qword [rsp + 0x50]
test rax, rax
je 0x14000425e
mov dword [rsp + 0x58], 0xa0000000
mov dword [rsp + 0x5c], 2
mov dword [rsp + 0x60], 3
mov dword [rsp + 0x74], esi
mov dword [rsp + 0x78], 5
mov qword [rbp - 0x80], rax
lea r9, [rsp + 0x48]
mov r8, qword [rbp - 0x50]
lea rdx, [rsp + 0x58]
mov ecx, 1
call qword [sym.imp.ADVAPI32.dll_SetEntriesInAclW]
test eax, eax
jne 0x14000425e
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140004236
mov rcx, qword [rbx]
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov edx, 1
mov r8d, 4
call qword [sym.imp.ADVAPI32.dll_SetNamedSecurityInfoA]
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x14000426d
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14000427d
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400042b7
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400042b2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000479d
mov rcx, r8
call fcn.14000bad8
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [r13]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea r8, str.minecraft:__
lea rdx, str.open
mov rcx, qword [rcx]
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov ecx, 0x20
call fcn.14000ba9c
mov qword [rbp - 0x10], rax
movdqa xmm0, xmmword [0x140029ed0]
movdqu xmmword [rbp], xmm0
movups xmm0, xmmword [str.Minecraft.Windows.exe]
movups xmmword [rax], xmm0
mov ecx, dword [0x140029da8]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x140029dac]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea rcx, [rbp - 0x10]
call fcn.140004eb0
mov esi, eax
test eax, eax
je 0x140004402
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
xor r15d, r15d
test rax, rax
je 0x140004405
nop word [rax + rax]
mov dword [rbp + 0x90], 0x238
mov edx, esi
mov ecx, 8
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400043f2
lea rdx, [rbp + 0x90]
mov rcx, rax
call sub.KERNEL32.dll_Module32First
test eax, eax
je 0x1400043e9
mov ebx, r15d
nop word [rax + rax]
inc ebx
lea rdx, [rbp + 0x90]
mov rcx, rdi
call sub.KERNEL32.dll_Module32Next
test eax, eax
je 0x1400043e1
cmp ebx, 0xa0
jl 0x1400043b0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140004405
cmp ebx, 0xa0
jge 0x1400043cd
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140004370
xor r15d, r15d
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x140004440
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000443b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047a3
call fcn.14000bad8
lea rax, [rsp + 0x58]
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova rax, qword [rbp - 0x78]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x48], rax
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x70]
call fcn.140001300
nop
lea rax, str.latest.dll
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 0xa
movaps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
xor r8d, r8d
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x50]
call fcn.140001300
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1400047d0
mov rbx, rax
lea rcx, [rbp + 0x50]
call fcn.140006770
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1400089e0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 0x15
lea rdx, str.Minecraft.Windows.exe
lea rcx, [rbp - 0x50]
call fcn.1400010c0
nop
lea rcx, [rbp - 0x50]
call fcn.140004eb0
nop
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400045a7
cmp rax, 0xffffffffffffffff
je 0x14000459e
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rsi, rax
mov r9, qword [rdi + 0x10]
inc r9
mov r8, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14000455b
mov r8, qword [rdi]
mov qword [rsp + 0x20], r15
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rsi
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x14000459e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call fcn.140003710
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400045ec
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047a9
call fcn.14000bad8
nop
lea rcx, [rbp + 0x70]
call fcn.140006770
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140004631
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000462c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047af
call fcn.14000bad8
movdqa xmm0, xmmword [0x140029ec0]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14000467d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004678
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047b5
call fcn.14000bad8
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400046c8
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400047bb
call fcn.14000bad8
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 7
jbe 0x140004714
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000470f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004749
call fcn.14000bad8
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.14000be30
lea r11, [rsp + 0x600]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140011944
nop
mov ecx, 0x16
call fcn.1400066f0
int3
shr rdi, 0x20
mov ecx, edi
call fcn.140006730
int3
shr rcx, 0x20
call fcn.140006730
nop
call fcn.140011944
nop
call fcn.140011944
nop
mov ecx, 0x16
call fcn.1400066f0
int3
shr rdi, 0x20
mov ecx, edi
call fcn.140006730
int3
shr rcx, 0x20
call fcn.140006730
nop
call fcn.140011944
int3
call fcn.140011944
nop
call fcn.140011944
nop
call fcn.140011944
nop
call fcn.140011944
nop
call fcn.140011944
int3