Function at 0x140058c60
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r14
lea rbp, [rsp - 0xc08]
sub rsp, 0xd08
mov rcx, qword [0x1402ff148]
mov r14, qword [0x1402ff158]
mov qword [rbp + 0x170], r14
mov rdx, qword [rcx + 0x10]
test rdx, rdx
jne 0x140058cae
lea rcx, str.invalid_base_address:_0x_llx._n
call fcn.140001230
xor al, al
add rsp, 0xd08
pop r14
pop rbp
ret
mov qword [rsp + 0xd00], rbx
mov qword [rsp + 0xcf8], rsi
mov qword [rsp + 0xcf0], rdi
mov qword [rsp + 0xce8], r12
xor r12d, r12d
mov qword [rsp + 0xce0], r13
mov qword [rsp + 0xcd8], r15
vmovaps xmmword [rsp + 0xcc0], xmm6
vmovaps xmmword [rsp + 0xcb0], xmm7
vmovaps xmmword [rsp + 0xca0], xmm8
vmovss xmm8, dword [0x140149e58]
vxorps xmm7, xmm7, xmm7
mov rdx, qword [rcx + 0x10]
lea rax, [rbp + 0x658]
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0x308]
mov r13, 0xffffffffffffffff
mov qword [rsp + 0x20], rax
add rdx, 0x5c83430
lea r9d, [r13 + 9]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x308]
lea r9d, [r13 + 9]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x310]
mov qword [r14 + 0xc8], rax
mov qword [rbp + 0x310], r12
lea rdx, [rax + 0x30]
mov rcx, qword [rcx + 0x18]
lea rax, [rbp + 0x6a8]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6b0]
mov rdx, qword [r14 + 0xc8]
lea r9d, [r13 + 9]
mov qword [rsp + 0x68], r12
lea r8, [rsp + 0x68]
add rdx, 0x188
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6b8]
mov rdx, qword [rsp + 0x68]
lea r9d, [r13 + 9]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x30]
add rdx, 0x250
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6c0]
mov rdx, qword [rsp + 0x68]
lea r9d, [r13 + 9]
add rdx, 0x38
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x318]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6c8]
mov rdx, qword [rbp + 0x318]
lea r9d, [r13 + 9]
mov qword [rbp + 0x140], r12
lea r8, [rbp + 0x140]
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6d0]
mov rdx, qword [rbp + 0x140]
lea r9d, [r13 + 9]
mov qword [rbp + 0x148], r12
lea r8, [rbp + 0x148]
add rdx, 0x30
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6d8]
mov rdx, qword [rbp + 0x148]
lea r9d, [r13 + 9]
mov qword [rbp + 0x150], r12
lea r8, [rbp + 0x150]
add rdx, 0x2c8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x150]
add rdi, 0x1c40
vpxor xmm0, xmm0, xmm0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6e0]
mov rdx, qword [rsp + 0x30]
lea r9d, [r13 + 0x11]
vmovdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
lea r8, [rbp + 0x330]
mov rcx, qword [rcx + 0x18]
add rdx, 0x170
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x338]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e1e6c
mov qword [rbp + 0x130], rax
mov r15, rax
test rbx, rbx
je 0x140058f56
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140113300
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6e8]
movsxd r9, dword [rbp + 0x338]
mov r8, r15
mov rdx, qword [rbp + 0x330]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140058f9e
mov rcx, r15
call fcn.1400e1e28
mov r15, r12
mov qword [rbp + 0x130], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6f8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x340]
add rdx, 0x2a0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x348]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e1e6c
mov qword [rbp + 0xc0], rax
mov r14, rax
test rbx, rbx
je 0x14005900f
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140113300
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x700]
movsxd r9, dword [rbp + 0x348]
mov r8, r14
mov rdx, qword [rbp + 0x340]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140059054
mov rcx, r14
call fcn.1400e1e28
mov qword [rbp + 0xc0], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x708]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x350]
add rdx, 0x270
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x358]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e1e6c
mov qword [rbp + 0xc8], rax
mov rsi, rax
test rbx, rbx
je 0x1400590c5
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140113300
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x710]
movsxd r9, dword [rbp + 0x358]
mov r8, rsi
mov rdx, qword [rbp + 0x350]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14005910a
mov rcx, rsi
call fcn.1400e1e28
mov qword [rbp + 0xc8], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x718]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x2f8]
add rdx, 0x260
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x300]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e1e6c
mov qword [rbp + 0xd0], rax
mov r14, rax
test rbx, rbx
je 0x14005917b
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140113300
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x720]
movsxd r9, dword [rbp + 0x300]
mov r8, r14
mov rdx, qword [rbp + 0x2f8]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x1400591c0
mov rcx, r14
call fcn.1400e1e28
mov qword [rbp + 0xd0], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x728]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x360]
add rdx, 0x620
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x368]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e1e6c
mov qword [rbp + 0xd8], rax
mov rsi, rax
test rbx, rbx
je 0x140059231
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140113300
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x730]
movsxd r9, dword [rbp + 0x368]
mov r8, rsi
mov rdx, qword [rbp + 0x360]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140059276
mov rcx, rsi
call fcn.1400e1e28
mov qword [rbp + 0xd8], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x738]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x370]
add rdx, 0x2b0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x378]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e1e6c
mov qword [rbp + 0x138], rax
mov rsi, rax
test rbx, rbx
je 0x1400592e7
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140113300
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x740]
movsxd r9, dword [rbp + 0x378]
mov r8, rsi
mov rdx, qword [rbp + 0x370]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14005932c
mov rcx, rsi
call fcn.1400e1e28
mov qword [rbp + 0x138], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x328]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x380]
add rdx, 0x170
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r13d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x388], 0
jle 0x14005985a
mov rbx, r15
mov qword [rsp + 0x40], rbx
nop word [rax + rax]
mov rbx, qword [rbx]
lea r8, [rbp - 0x60]
mov rcx, qword [0x1402ff148]
xor eax, eax
vpxor xmm0, xmm0, xmm0
mov r14d, 0xf
mov dword [rbp + 0x204], eax
mov dword [rbp + 0x214], eax
lea rdx, [rbx + 0x4248]
mov rcx, qword [rcx + 0x18]
lea rax, [rbp + 0x748]
vmovups xmmword [rbp + 0x1c0], xmm0
lea r9d, [r14 - 3]
mov word [rbp + 0x1b0], 0
vmovss dword [rbp - 0x58], xmm7
vmovss dword [rbp - 0x5c], xmm7
vmovss dword [rbp - 0x60], xmm7
mov qword [rbp + 0x1d0], r12
mov qword [rbp + 0x1d8], r14
mov byte [rbp + 0x1c0], 0
vmovups xmmword [rbp + 0x1e8], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp - 0x60]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x750]
vmovss xmm1, dword [rbp - 0x5c]
vmovss dword [rbp + 0x1b4], xmm0
vmovss xmm0, dword [rbp - 0x58]
mov rcx, qword [rcx + 0x18]
lea rdx, [rbx + 0x18]
lea r9d, [r14 - 7]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x320]
vmovss dword [rbp + 0x1b8], xmm1
vmovss dword [rbp + 0x1bc], xmm0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x320]
lea rdx, [rsp + 0x70]
call fcn.140058830
mov rsi, rax
lea rax, [rbp + 0x1c0]
cmp rax, rsi
je 0x14005948e
vmovups ymm0, ymmword [rsi]
vmovups ymmword [rbp + 0x1c0], ymm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r14
mov byte [rsi], 0
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b690
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x758]
mov r9d, 8
mov qword [rbp + 0x1e0], rdi
lea r8, [rbp - 0x70]
mov qword [rbp - 0x70], r12
lea rdx, [rbx + 0x2a0]
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x760]
mov rdx, qword [rbp - 0x70]
lea r8, [rbp - 0x10]
vmovss dword [rbp + 8], xmm7
vmovss dword [rbp + 4], xmm7
vmovss dword [rbp], xmm7
vmovss dword [rbp + 0x18], xmm7
vmovss dword [rbp + 0x14], xmm7
vmovss dword [rbp + 0x10], xmm7
mov rcx, qword [rcx + 0x18]
add rdx, 0x1d0
mov r9d, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0xc]
lea r8, [rbp + 0x158]
vmovups xmm0, xmmword [rbp - 0x10]
vmovss xmm1, dword [rbp + 4]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x2a0]
mov byte [rbp + 0x204], al
mov r9d, 8
movzx eax, byte [rbp + 0xd]
mov byte [rbp + 0x205], al
movzx eax, byte [rbp + 0xe]
mov rcx, qword [rcx + 0x18]
mov byte [rbp + 0x206], al
movzx eax, byte [rbp + 0xf]
mov byte [rbp + 0x207], al
movzx eax, byte [rbp + 0x1c]
mov byte [rbp + 0x214], al
movzx eax, byte [rbp + 0x1d]
vmovups xmmword [rbp + 0x1e8], xmm0
vmovss xmm0, dword [rbp]
mov byte [rbp + 0x215], al
movzx eax, byte [rbp + 0x1e]
vmovss dword [rbp + 0x1f8], xmm0
vmovss xmm0, dword [rbp + 8]
mov byte [rbp + 0x216], al
movzx eax, byte [rbp + 0x1f]
vmovss dword [rbp + 0x200], xmm0
vmovss xmm0, dword [rbp + 0x10]
mov byte [rbp + 0x217], al
lea rax, [rbp + 0x768]
vmovss dword [rbp + 0x1fc], xmm1
vmovss xmm1, dword [rbp + 0x14]
vmovss dword [rbp + 0x208], xmm0
vmovss xmm0, dword [rbp + 0x18]
mov qword [rsp + 0x20], rax
vmovss dword [rbp + 0x20c], xmm1
vmovss dword [rbp + 0x210], xmm0
mov qword [rbp + 0x158], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x770]
mov rdx, qword [rbp + 0x158]
lea r8, [rsp + 0x70]
add rdx, 0x4e0
mov qword [rsp + 0x20], rax
mov r9d, 0x20
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp qword [rsp + 0x70], 0
je 0x140059651
cmp dword [rsp + 0x78], 0
lea rax, [rsp + 0x70]
jne 0x140059655
lea rax, [rbp - 0x80]
vmovups xmm6, xmmword [rax]
vpextrd r12d, xmm6, 2
movsxd rbx, r12d
mov eax, 0x30
mul rbx
mov r14, 0xffffffffffffffff
cmovo rax, r14
mov rcx, rax
call fcn.1400e1e6c
lea r9, [0x140058c40]
mov r8, rbx
lea edx, [r14 + 0x31]
mov rcx, rax
mov rsi, rax
call fcn.1400023d0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x540]
lea r15, [rbx + rbx*2]
mov qword [rsp + 0x20], rax
shl r15, 4
mov r8, rsi
mov r9, r15
mov rcx, qword [rcx + 0x18]
vmovq rdx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x1400596d4
mov rcx, rsi
call fcn.1400e1e28
xor esi, esi
mov eax, 0x30
mul rbx
cmovo rax, r14
mov rcx, rax
call fcn.1400e1e6c
mov r14, rax
mov r8, rbx
test r12d, r12d
je 0x140059717
lea rdx, [rax + 0x14]
xor eax, eax
nop dword [rax]
mov qword [rdx], rax
mov dword [rdx - 4], eax
mov qword [rdx + 0x10], rax
mov dword [rdx + 0xc], eax
lea rdx, [rdx + 0x30]
sub r8, 1
jne 0x140059700
mov r8, r15
mov rdx, rsi
mov rcx, r14
call fcn.1401136c0
mov rcx, rsi
call fcn.1400e1e28
mov rcx, 0xffffffffffffffff
mov dword [rbp + 0x218], r12d
mov eax, 0x30
mul rbx
cmovo rax, rcx
mov rcx, rax
call fcn.1400e1e6c
test r12d, r12d
je 0x14005977b
lea rcx, [rax + 0x14]
xor r12d, r12d
nop dword [rax + rax]
mov qword [rcx], r12
mov dword [rcx - 4], r12d
mov qword [rcx + 0x10], r12
mov dword [rcx + 0xc], r12d
lea rcx, [rcx + 0x30]
sub rbx, 1
jne 0x140059760
jmp 0x14005977e
xor r12d, r12d
mov r8, r15
mov qword [rbp + 0x220], rax
mov rdx, r14
mov rcx, rax
call fcn.1401136c0
mov rcx, r14
call fcn.1400e1e28
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0x58]
je 0x1400597c1
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call fcn.14005b1b0
add qword [rsp + 0x50], 0x88
jmp 0x1400597d5
lea r8, [rbp + 0x1b0]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14005c390
mov rcx, qword [rbp + 0x220]
test rcx, rcx
je 0x1400597e6
call fcn.1400e1e28
mov r8, qword [rbp + 0x1d8]
cmp r8, 0xf
jbe 0x140059806
mov rdx, qword [rbp + 0x1c0]
lea rcx, [rbp + 0x1c0]
call fcn.14005b9a0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x328]
mov rbx, qword [rsp + 0x40]
lea r8, [rbp + 0x380]
mov rdx, qword [rsp + 0x30]
add rbx, 8
add rdx, 0x170
mov qword [rsp + 0x40], rbx
mov rcx, qword [rcx + 0x18]
mov r9d, 0x10
inc r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r13d, dword [rbp + 0x388]
jl 0x140059380
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x3d8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x390]
add rdx, 0x2a0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov esi, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x398], 0
jle 0x140059c2c
mov r14, qword [rbp + 0xc0]
nop word [rax + rax]
mov rbx, qword [r14]
lea rax, [rbp + 0x548]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x160]
mov r9d, 8
mov qword [rbp + 0x160], r12
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x9a0]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x550]
mov rdx, qword [rbp + 0x160]
lea r8, [rbp + 0x168]
mov qword [rbp + 0x168], r12
add rdx, 0x258
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x558]
mov rdx, qword [rbp + 0x168]
lea r8, [rbp + 0xc20]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp + 0xc20], 0xf0
je 0x140059be4
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x560]
mov r9d, 8
mov qword [rsp + 0x40], r12
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x9a0]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x568]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp + 0x178]
mov qword [rbp + 0x178], r12
add rdx, 0x258
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x570]
mov rdx, qword [rbp + 0x178]
lea r8, [rbp - 0x50]
vmovss dword [rbp - 0x48], xmm7
vmovss dword [rbp - 0x4c], xmm7
vmovss dword [rbp - 0x50], xmm7
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x270]
xor eax, eax
mov byte [rbp + 0x411], 0
vpxor xmm0, xmm0, xmm0
mov r15d, 0xf
mov dword [rbp + 0x464], eax
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0x530]
mov qword [rbp + 0x474], rax
lea rax, [rbp + 0x578]
vmovups xmmword [rbp + 0x420], xmm0
lea r9d, [r15 - 5]
mov qword [rbp + 0x430], r12
vmovss dword [rbp + 0x460], xmm7
vmovss dword [rbp + 0x45c], xmm7
vmovss dword [rbp + 0x458], xmm7
vmovss dword [rbp + 0x470], xmm7
vmovss dword [rbp + 0x46c], xmm7
vmovss dword [rbp + 0x468], xmm7
mov qword [rbp + 0x438], r15
mov byte [rbp + 0x420], 0
vmovups xmmword [rbp + 0x448], xmm0
mov qword [rbp + 0x480], r12
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp - 0x50]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x18]
movzx eax, byte [rbp + 0x539]
lea r9d, [r15 - 7]
vmovss xmm1, dword [rbp - 0x4c]
vmovss dword [rbp + 0x414], xmm0
vmovss xmm0, dword [rbp - 0x48]
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0x3d0]
mov byte [rbp + 0x410], al
lea rax, [rbp + 0x580]
vmovss dword [rbp + 0x418], xmm1
vmovss dword [rbp + 0x41c], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x3d0]
lea rdx, [rsp + 0x70]
call fcn.140058830
mov rbx, rax
lea rax, [rbp + 0x420]
cmp rax, rbx
je 0x140059b66
vmovups ymm0, ymmword [rbx]
vmovups ymmword [rbp + 0x420], ymm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r15
mov byte [rbx], 0
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b690
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x440], rdi
cmp rax, qword [rsp + 0x58]
je 0x140059ba0
lea rdx, [rbp + 0x410]
mov rcx, rax
call fcn.14005b1b0
add qword [rsp + 0x50], 0x88
jmp 0x140059bb4
lea r8, [rbp + 0x410]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14005c390
mov rcx, qword [rbp + 0x480]
test rcx, rcx
je 0x140059bc5
call fcn.1400e1e28
mov r8, qword [rbp + 0x438]
cmp r8, r15
jbe 0x140059be4
mov rdx, qword [rbp + 0x420]
lea rcx, [rbp + 0x420]
call fcn.14005b9a0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x3d8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x390]
add rdx, 0x2a0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc esi
mov rcx, qword [rcx + 0x18]
add r14, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp esi, dword [rbp + 0x398]
jl 0x1400598b0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x3e8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x3a0]
add rdx, 0x270
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r15d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x3a8], 0
jle 0x140059fe1
mov r14, qword [rbp + 0xc8]
nop dword [rax]
mov rbx, qword [r14]
lea rax, [rbp + 0x588]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x180]
mov r9d, 8
mov qword [rbp + 0x180], r12
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x590]
mov rdx, qword [rbp + 0x180]
lea r8, [rbp + 0xc28]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp + 0xc28], 0xf0
je 0x140059f97
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x598]
mov r9d, 8
mov qword [rsp + 0x40], r12
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5a0]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x40]
vmovss dword [rbp - 0x38], xmm7
vmovss dword [rbp - 0x3c], xmm7
vmovss dword [rbp - 0x40], xmm7
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x8f1]
xor eax, eax
mov word [rbp + 0x240], 0
vpxor xmm0, xmm0, xmm0
mov r13d, 0xf
mov dword [rbp + 0x294], eax
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0xc30]
mov qword [rbp + 0x2a4], rax
lea rax, [rbp + 0x5a8]
vmovups xmmword [rbp + 0x250], xmm0
lea r9d, [r13 - 0xe]
mov qword [rbp + 0x260], r12
vmovss dword [rbp + 0x290], xmm7
vmovss dword [rbp + 0x28c], xmm7
vmovss dword [rbp + 0x288], xmm7
vmovss dword [rbp + 0x2a0], xmm7
vmovss dword [rbp + 0x29c], xmm7
vmovss dword [rbp + 0x298], xmm7
mov qword [rbp + 0x268], r13
mov byte [rbp + 0x250], 0
mov qword [rbp + 0x270], r12
vmovups xmmword [rbp + 0x278], xmm0
mov qword [rbp + 0x2b0], r12
mov byte [rbp + 0x2b8], 1
mov byte [rbp + 0x2ba], 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp - 0x40]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x18]
movzx eax, byte [rbp + 0xc30]
lea r9d, [r13 - 7]
vmovss xmm1, dword [rbp - 0x3c]
vmovss dword [rbp + 0x244], xmm0
vmovss xmm0, dword [rbp - 0x38]
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0x3e0]
mov byte [rbp + 0x2b9], al
lea rax, [rbp + 0x5b0]
vmovss dword [rbp + 0x248], xmm1
vmovss dword [rbp + 0x24c], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x3e0]
lea rdx, [rsp + 0x70]
call fcn.140058830
mov rsi, rax
lea rax, [rbp + 0x250]
cmp rax, rsi
je 0x140059edb
lea rcx, [rbp + 0x250]
call fcn.14005b690
vmovups ymm0, ymmword [rsi]
vmovups ymmword [rbp + 0x250], ymm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r13
mov byte [rsi], 0
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b690
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5b8]
lea rdx, [rbx + 0x5bc]
mov qword [rbp + 0x270], rdi
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xc38]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0xc38]
mov byte [rbp + 0x241], al
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0x58]
je 0x140059f53
lea rdx, [rbp + 0x240]
mov rcx, rax
call fcn.14005b1b0
add qword [rsp + 0x50], 0x88
jmp 0x140059f67
lea r8, [rbp + 0x240]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14005c390
mov rcx, qword [rbp + 0x2b0]
test rcx, rcx
je 0x140059f78
call fcn.1400e1e28
mov r8, qword [rbp + 0x268]
cmp r8, r13
jbe 0x140059f97
mov rdx, qword [rbp + 0x250]
lea rcx, [rbp + 0x250]
call fcn.14005b9a0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x3e8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x3a0]
add rdx, 0x270
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc r15d
mov rcx, qword [rcx + 0x18]
add r14, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r15d, dword [rbp + 0x3a8]
jl 0x140059c80
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x3f8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x3b0]
add rdx, 0x620
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r15d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x3b8], 0
jle 0x14005a2e5
mov r14, qword [rbp + 0xd8]
nop
mov rbx, qword [r14]
lea rax, [rbp + 0x5c0]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x188]
mov r9d, 8
mov qword [rbp + 0x188], r12
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5c8]
mov rdx, qword [rbp + 0x188]
lea r8, [rsp + 0x38]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rsp + 0x38], 0xf0
je 0x14005a29b
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5d0]
mov r9d, 8
mov qword [rsp + 0x40], r12
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5d8]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x30]
vmovss dword [rbp - 0x28], xmm7
vmovss dword [rbp - 0x2c], xmm7
vmovss dword [rbp - 0x30], xmm7
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x18]
vmovss xmm1, dword [rbp - 0x2c]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x4b0], xmm0
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0x3f0]
xor eax, eax
mov word [rbp + 0x4a0], 0
vmovups xmmword [rbp + 0x4d8], xmm0
vmovss xmm0, dword [rbp - 0x30]
mov esi, 0xf
mov dword [rbp + 0x4f4], eax
vmovss dword [rbp + 0x4a4], xmm0
vmovss xmm0, dword [rbp - 0x28]
mov qword [rbp + 0x504], rax
lea rax, [rbp + 0x5e0]
lea r9d, [rsi - 7]
mov qword [rbp + 0x4c0], r12
vmovss dword [rbp + 0x4ac], xmm0
vmovss dword [rbp + 0x4f0], xmm7
vmovss dword [rbp + 0x4ec], xmm7
vmovss dword [rbp + 0x4e8], xmm7
vmovss dword [rbp + 0x500], xmm7
vmovss dword [rbp + 0x4fc], xmm7
vmovss dword [rbp + 0x4f8], xmm7
vmovss dword [rbp + 0x4a8], xmm1
mov qword [rbp + 0x4c8], rsi
mov byte [rbp + 0x4b0], 0
mov qword [rbp + 0x510], r12
mov byte [rbp + 0x518], 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x3f0]
lea rdx, [rsp + 0x70]
call fcn.140058830
mov rbx, rax
lea rax, [rbp + 0x4b0]
cmp rax, rbx
je 0x14005a230
vmovups ymm0, ymmword [rbx]
vmovups ymmword [rbp + 0x4b0], ymm0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], rsi
mov byte [rbx], 0
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b690
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x4d0], rdi
cmp rax, qword [rsp + 0x58]
je 0x14005a26a
lea rdx, [rbp + 0x4a0]
mov rcx, rax
call fcn.14005b1b0
add qword [rsp + 0x50], 0x88
jmp 0x14005a27e
lea r8, [rbp + 0x4a0]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14005c390
mov rcx, qword [rbp + 0x510]
test rcx, rcx
je 0x14005a28f
call fcn.1400e1e28
lea rcx, [rbp + 0x4b0]
call fcn.14005b690
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x3f8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x3b0]
add rdx, 0x620
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc r15d
mov rcx, qword [rcx + 0x18]
add r14, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r15d, dword [rbp + 0x3b8]
jl 0x14005a030
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x2d0]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x3c0]
add rdx, 0x260
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r13d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x3c8], 0
jle 0x14005a9b4
mov r12, qword [rbp + 0xd0]
xor r15d, r15d
mov rbx, qword [r12]
lea rax, [rbp + 0x5e8]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0xe0]
mov r9d, 8
mov qword [rbp + 0xe0], r15
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5f0]
mov rdx, qword [rbp + 0xe0]
lea r8, [rsp + 0x39]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rsp + 0x39], 0xf0
je 0x14005a967
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5f8]
lea rdx, [rbx + 0x478]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0xb0]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0xb0], 0
jne 0x14005a967
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x600]
mov r9d, 8
mov qword [rsp + 0x40], r15
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x608]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x20]
vmovss dword [rbp - 0x18], xmm7
vmovss dword [rbp - 0x1c], xmm7
vmovss dword [rbp - 0x20], xmm7
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x18]
vmovss xmm1, dword [rbp - 0x1c]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x30], xmm0
mov rcx, qword [rcx + 0x18]
lea r8, [rbp - 0x68]
xor eax, eax
mov word [rbp + 0x20], 0
vmovups xmmword [rbp + 0x58], xmm0
vmovss xmm0, dword [rbp - 0x20]
vmovss dword [rbp + 0x24], xmm0
vmovss xmm0, dword [rbp - 0x18]
mov dword [rbp + 0x74], eax
mov r9d, 8
mov qword [rbp + 0x84], rax
lea rax, [rbp + 0x610]
vmovss dword [rbp + 0x2c], xmm0
vmovss dword [rbp + 0x70], xmm7
vmovss dword [rbp + 0x6c], xmm7
vmovss dword [rbp + 0x68], xmm7
vmovss dword [rbp + 0x80], xmm7
vmovss dword [rbp + 0x7c], xmm7
vmovss dword [rbp + 0x78], xmm7
vmovss dword [rbp + 0x28], xmm1
mov qword [rbp + 0x40], r15
mov byte [rbp + 0x30], 0
mov qword [rbp + 0x90], r15
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x68]
movabs rcx, 0x100000001b3
mov r8, qword [0x1402fcf58]
movabs rax, 0xcbf29ce484222325
movzx edx, bl
xor rdx, rax
movzx eax, byte [rbp - 0x67]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rbp - 0x66]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rbp - 0x65]
imul rdx, rcx
xor rdx, rax
imul rdx, rcx
and rdx, qword [0x1402fcf70]
mov rax, rdx
add rax, rax
mov rcx, qword [r8 + rax*8 + 8]
cmp rcx, qword [0x1402fcf48]
je 0x14005a580
add rdx, rdx
mov rax, qword [r8 + rdx*8]
cmp ebx, dword [rcx + 0x10]
je 0x14005a583
cmp rcx, rax
je 0x14005a580
mov rcx, qword [rcx + 8]
cmp ebx, dword [rcx + 0x10]
jne 0x14005a570
jmp 0x14005a583
mov rcx, r15
test rcx, rcx
je 0x14005a5b8
lea r8, [rbp - 0x70]
mov dword [rbp - 0x70], ebx
lea rdx, [rbp + 0x788]
call fcn.14005bac0
lea rcx, [rbp + 0x190]
mov rdx, qword [rax]
add rdx, 0x18
call fcn.14005b5c0
mov eax, 0xf
jmp 0x14005a81a
xor edx, edx
lea rcx, [rbp + 0x7a0]
mov r8d, 0x400
call fcn.140113300
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x400]
mov eax, ebx
mov r9d, 8
sar eax, 0x10
lea edx, [rax*8 + 0x10]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rcx + 0x18]
add rax, 0x5dad9c0
add rdx, rax
lea rax, [rbp + 0x618]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea r8, [rsp + 0x60]
movzx eax, bx
mov r9d, 2
mov rcx, qword [rcx + 0x18]
lea r14d, [rax + rax]
add r14, qword [rbp + 0x400]
lea rax, [rbp + 0x620]
mov rdx, r14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, word [rsp + 0x60]
shr eax, 6
test eax, eax
je 0x14005a7f4
mov rcx, qword [0x1402ff148]
lea rdx, [r14 + 2]
mov esi, eax
lea r8, [rbp + 0x7a0]
lea rax, [rbp + 0x628]
mov r9d, esi
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + rsi + 0x7a0], 0
lea rax, [rbp + 0x7a0]
vpxor xmm0, xmm0, xmm0
mov rsi, 0xffffffffffffffff
vmovups xmmword [rsp + 0x70], xmm0
mov r14, rsi
nop dword [rax + rax]
inc r14
cmp byte [rax + r14], 0
jne 0x14005a6b0
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x14005b190
cmp r14, 0xf
ja 0x14005a6fb
mov r8, r14
mov qword [rbp - 0x80], r14
lea rdx, [rbp + 0x7a0]
mov qword [rbp - 0x78], 0xf
lea rcx, [rsp + 0x70]
call fcn.1401136c0
mov byte [rsp + r14 + 0x70], 0
jmp 0x14005a750
mov r15, r14
or r15, 0xf
cmp r15, rax
jbe 0x14005a70c
mov r15, rax
jmp 0x14005a719
cmp r15, 0x16
mov eax, 0x16
cmovb r15, rax
lea rcx, [r15 + 1]
call fcn.14005be10
mov r8, r14
mov qword [rsp + 0x70], rax
lea rdx, [rbp + 0x7a0]
mov qword [rbp - 0x80], r14
mov rcx, rax
mov qword [rbp - 0x78], r15
mov rsi, rax
call fcn.1401136c0
xor r15d, r15d
mov byte [rsi + r14], 0
lea rsi, [r15 - 1]
vmovups ymm1, ymmword [rsp + 0x70]
vmovups ymmword [rbp - 8], ymm1
mov dword [rbp - 0x10], ebx
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x778]
vzeroupper
call fcn.14005c160
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x14005a7ac
mov rcx, qword [rbp - 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a7a7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b18a
call fcn.1400e1e28
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], r15
lea rax, [rbp + 0x7a0]
mov qword [rbp + 0x1a8], r15
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14005a7d0
lea rdx, [rbp + 0x7a0]
lea rcx, [rbp + 0x190]
call fcn.14005bcc0
mov eax, 0xf
jmp 0x14005a81a
vpxor xmm0, xmm0, xmm0
mov eax, 0xf
mov qword [rbp + 0x1a0], r15
vmovups xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x190], 0
mov qword [rbp + 0x1a8], rax
cmp rax, 0xf
jbe 0x14005a852
mov rcx, qword [rbp + 0x30]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a84d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b196
call fcn.1400e1e28
mov rbx, qword [rsp + 0x50]
vmovups ymm0, ymmword [rbp + 0x190]
vmovups ymmword [rbp + 0x30], ymm0
mov qword [rbp + 0x50], rdi
cmp rbx, qword [rsp + 0x58]
je 0x14005a907
vmovsd xmm0, qword [rbp + 0x24]
mov eax, dword [rbp + 0x2c]
lea rcx, [rbx + 0x10]
vmovsd qword [rbx + 4], xmm0
mov dword [rbx + 0xc], eax
lea rdx, [rbp + 0x30]
mov word [rbx], 0
vzeroupper
call fcn.14005b5c0
vmovups ymm0, ymmword [rbp + 0x58]
vmovups xmm1, xmmword [rbp + 0x78]
mov rax, qword [rbp + 0x50]
lea rcx, [rbx + 0x68]
vmovups ymmword [rbx + 0x38], ymm0
vmovups xmmword [rbx + 0x58], xmm1
mov qword [rbx + 0x30], rax
lea rdx, [rbp + 0x88]
vzeroupper
call fcn.140058ba0
movzx eax, byte [rbp + 0x98]
mov byte [rbx + 0x78], al
movzx eax, byte [rbp + 0x99]
mov byte [rbx + 0x79], al
movzx eax, byte [rbp + 0x9a]
mov byte [rbx + 0x7a], al
mov eax, dword [rbp + 0x9c]
mov dword [rbx + 0x7c], eax
mov rax, qword [rbp + 0xa0]
mov qword [rbx + 0x80], rax
add qword [rsp + 0x50], 0x88
jmp 0x14005a91b
lea r8, [rbp + 0x20]
mov rdx, rbx
lea rcx, [rsp + 0x48]
vzeroupper
call fcn.14005c390
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x14005a92c
call fcn.1400e1e28
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x14005a967
mov rcx, qword [rbp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a962
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b17e
call fcn.1400e1e28
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x2d0]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x3c0]
add rdx, 0x260
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc r13d
mov rcx, qword [rcx + 0x18]
add r12, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r13d, dword [rbp + 0x3c8]
jl 0x14005a335
xor r12d, r12d
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x630]
mov rdx, qword [rsp + 0x68]
lea r8, [rbp + 0x2d8]
add rdx, 0x38
mov qword [rsp + 0x20], rax
mov r9d, 8
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x638]
mov rdx, qword [rbp + 0x2d8]
lea r8, [rbp + 0xe8]
mov qword [rbp + 0xe8], r12
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x640]
mov rdx, qword [rbp + 0xe8]
lea r8, [rbp + 0xf0]
mov qword [rbp + 0xf0], r12
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x648]
mov rdx, qword [rbp + 0xf0]
lea r8, [rbp + 0xf8]
mov qword [rbp + 0xf8], r12
add rdx, 0x2b0
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x650]
mov rdx, qword [rbp + 0xf8]
lea r8, [rbp + 0xb4]
add rdx, 0x5fd8
mov qword [rsp + 0x20], rax
mov r9d, 4
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0xb4], 0
je 0x14005aafb
mov rax, qword [0x1402ff150]
cmp byte [rax + 0x97], 0
jne 0x14005aafb
cmp byte [rax + 0x9b], 1
jne 0x14005aafb
mov byte [rax + 0x97], 1
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6f0]
mov rdx, qword [rsp + 0x68]
lea r8, [rbp + 0x2e0]
add rdx, 0x38
mov qword [rsp + 0x20], rax
mov r9d, 8
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x660]
mov rdx, qword [rbp + 0x2e0]
lea r8, [rbp + 0x100]
mov qword [rbp + 0x100], r12
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x668]
mov rdx, qword [rbp + 0x100]
lea r8, [rbp + 0x108]
mov qword [rbp + 0x108], r12
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x670]
mov rdx, qword [rbp + 0x108]
lea r8, [rbp + 0x110]
mov qword [rbp + 0x110], r12
add rdx, 0x2b0
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x678]
mov rdx, qword [rbp + 0x110]
lea r8, [rbp + 0xb8]
add rdx, 0x49f8
mov qword [rsp + 0x20], rax
mov r9d, 4
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0xb8], 0x64
je 0x14005ac42
mov rax, qword [0x1402ff150]
cmp byte [rax + 0x8c], 0
jne 0x14005ac42
cmp byte [rax + 0x9a], 1
jne 0x14005ac42
mov byte [rax + 0x8c], 1
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x680]
mov rdx, qword [rsp + 0x68]
lea r8, [rbp + 0x2e8]
add rdx, 0x38
mov qword [rsp + 0x20], rax
mov r9d, 8
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x688]
mov rdx, qword [rbp + 0x2e8]
lea r8, [rbp + 0x118]
mov qword [rbp + 0x118], r12
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x690]
mov rdx, qword [rbp + 0x118]
lea r8, [rbp + 0x120]
mov qword [rbp + 0x120], r12
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x698]
mov rdx, qword [rbp + 0x120]
lea r8, [rbp + 0x128]
mov qword [rbp + 0x128], r12
add rdx, 0x2b0
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6a0]
mov rdx, qword [rbp + 0x128]
lea r8, [rbp + 0xbc]
add rdx, 0x68dc
mov qword [rsp + 0x20], rax
mov r9d, 4
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp + 0xbc]
vcomiss xmm0, xmm8
jae 0x14005ad8f
mov rax, qword [0x1402ff150]
cmp byte [rax + 0x8e], 0
jne 0x14005ad8f
cmp byte [rax + 0x9c], 1
jne 0x14005ad8f
mov byte [rax + 0x8e], 1
mov rcx, qword [rbp + 0x130]
call fcn.1400e1e28
mov rcx, qword [rbp + 0xc0]
call fcn.1400e1e28
mov rcx, qword [rbp + 0xc8]
call fcn.1400e1e28
mov rcx, qword [rbp + 0xd0]
call fcn.1400e1e28
mov rcx, qword [rbp + 0xd8]
call fcn.1400e1e28
mov rcx, qword [rbp + 0x138]
call fcn.1400e1e28
mov r14, qword [rbp + 0x170]
mov rbx, qword [r14]
mov rdi, qword [r14 + 8]
cmp rbx, rdi
je 0x14005ae1a
nop word [rax + rax]
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x14005adfe
call fcn.1400e1e28
lea rcx, [rbx + 0x10]
call fcn.14005b690
add rbx, 0x88
cmp rbx, rdi
jne 0x14005adf0
mov rax, qword [r14]
mov qword [r14 + 8], rax
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
cmp rbx, rsi
je 0x14005af9f
add rbx, 4
movzx eax, byte [rbx - 4]
lea rdx, [rbx + 0xc]
vmovsd xmm0, qword [rbx]
mov byte [rbp + 0x20], al
lea rcx, [rbp + 0x30]
movzx eax, byte [rbx - 3]
mov byte [rbp + 0x21], al
mov eax, dword [rbx + 8]
mov dword [rbp + 0x2c], eax
vmovsd qword [rbp + 0x24], xmm0
call fcn.14005b5c0
vmovups ymm0, ymmword [rbx + 0x34]
vmovups xmm1, xmmword [rbx + 0x54]
mov rax, qword [rbx + 0x2c]
lea rdx, [rbx + 0x64]
mov qword [rbp + 0x50], rax
lea rcx, [rbp + 0x88]
vmovups ymmword [rbp + 0x58], ymm0
vmovups xmmword [rbp + 0x78], xmm1
vzeroupper
call fcn.140058ba0
movzx eax, byte [rbx + 0x74]
mov rdi, qword [r14 + 8]
mov byte [rbp + 0x98], al
movzx eax, byte [rbx + 0x75]
mov byte [rbp + 0x99], al
movzx eax, byte [rbx + 0x76]
mov byte [rbp + 0x9a], al
mov eax, dword [rbx + 0x78]
mov dword [rbp + 0x9c], eax
mov rax, qword [rbx + 0x7c]
mov qword [rbp + 0xa0], rax
cmp rdi, qword [r14 + 0x10]
je 0x14005af62
movzx eax, byte [rbp + 0x20]
lea rcx, [rdi + 0x10]
vmovsd xmm0, qword [rbp + 0x24]
mov byte [rdi], al
lea rdx, [rbp + 0x30]
movzx eax, byte [rbp + 0x21]
mov byte [rdi + 1], al
mov eax, dword [rbp + 0x2c]
vmovsd qword [rdi + 4], xmm0
mov dword [rdi + 0xc], eax
call fcn.14005b5c0
vmovups ymm0, ymmword [rbp + 0x58]
vmovups xmm1, xmmword [rbp + 0x78]
mov rax, qword [rbp + 0x50]
lea rcx, [rdi + 0x68]
vmovups ymmword [rdi + 0x38], ymm0
vmovups xmmword [rdi + 0x58], xmm1
mov qword [rdi + 0x30], rax
lea rdx, [rbp + 0x88]
vzeroupper
call fcn.140058ba0
movzx eax, byte [rbp + 0x98]
mov byte [rdi + 0x78], al
movzx eax, byte [rbp + 0x99]
mov byte [rdi + 0x79], al
movzx eax, byte [rbp + 0x9a]
mov byte [rdi + 0x7a], al
mov eax, dword [rbp + 0x9c]
mov dword [rdi + 0x7c], eax
mov rax, qword [rbp + 0xa0]
mov qword [rdi + 0x80], rax
add qword [r14 + 8], 0x88
jmp 0x14005af71
lea r8, [rbp + 0x20]
mov rdx, rdi
mov rcx, r14
call fcn.14005c390
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x14005af82
call fcn.1400e1e28
lea rcx, [rbp + 0x30]
call fcn.14005b690
add rbx, 0x88
lea rax, [rbx - 4]
cmp rax, rsi
jne 0x14005ae31
lea rcx, [rbp + 0x2f0]
call fcn.140058750
mov rbx, qword [rbp + 0x2f0]
movabs rax, 0x7ffffffffff0bdbe
cmp rbx, rax
jg 0x14005afca
add rbx, 0xf4240
jmp 0x14005afd4
movabs rbx, 0x7fffffffffffffff
movabs r14, 0xb2f4fc0794908cf3
nop
call fcn.1400e26fc
mov rdi, rax
call fcn.1400e26e0
mov rcx, rax
cmp rdi, 0x989680
jne 0x14005afff
imul rax, rcx, 0x64
jmp 0x14005b070
cmp rdi, 0x16e3600
jne 0x14005b052
mov rax, r14
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
mov rax, r14
imul rcx, rcx, 0x3b9aca00
imul rcx
lea rax, [rcx + rdx]
sar rax, 0x18
mov rcx, rax
shr rcx, 0x3f
add rax, rcx
imul rcx, r8, 0x3b9aca00
jmp 0x14005b06d
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rbx, rax
je 0x14005b0d1
jl 0x14005b0d1
mov rcx, rbx
sub rcx, rax
movabs rax, 0x4e94914effff
cmp rcx, rax
jg 0x14005b0c2
movabs rax, 0x431bde82d7b634db
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14005b0b6
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14005afe0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14005afe0
mov rcx, qword [rsp + 0x48]
mov r14, qword [rbp + 0x170]
test rcx, rcx
jne 0x14005b0ee
mov rcx, qword [0x1402ff148]
jmp 0x140058d08
mov rdi, qword [rsp + 0x50]
cmp rcx, rdi
je 0x14005b12b
lea rbx, [rcx + 0x70]
nop dword [rax]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14005b10d
call fcn.1400e1e28
lea rcx, [rbx - 0x60]
call fcn.14005b690
add rbx, 0x88
lea rax, [rbx - 0x70]
cmp rax, rdi
jne 0x14005b100
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x58]
movabs rdx, 0xf0f0f0f0f0f0f0f1
sub rax, rcx
sar rax, 3
imul rax, rdx
imul rdx, rax, 0x88
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b16d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b184
call fcn.1400e1e28
mov rcx, qword [0x1402ff148]
jmp 0x140058d08
call fcn.1400f4690
int3
call fcn.1400f4690
int3
call fcn.1400f4690
int3
call fcn.140058650
int3
call fcn.1400f4690
int3