Function at 0x14004a390
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400b3100]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov rax, qword [rsp + 0x238]
xor esi, esi
mov qword [rbp + 0x10], rax
mov r15, rdx
mov eax, 0x5a4d
mov qword [rbp + 8], rcx
mov r13, rcx
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x60], rsi
cmp word [rdx], ax
je 0x14004a3ef
mov edi, esi
jmp 0x14004a400
movsxd rdi, dword [rdx + 0x3c]
add rdi, r15
cmp dword [rdi], 0x4550
cmovne rdi, rsi
test rdi, rdi
jne 0x14004a58d
movabs rax, 0x2a55e6f76638c65c
movabs rcx, 0x240bc2aeac8e9998
mov qword [rbp + 0x20], rax
movabs rdi, 0x2a34e6816656c635
mov rax, qword [rbp + 0x20]
movabs rsi, 0x594a41b076882cfa
mov qword [rbp + 0x80], rax
movabs r15, 0x15fd92fb8e454747
movabs rax, 0x596a41d476e12c96
movabs r12, 0x8be52cd222fff254
mov qword [rbp + 0x20], rax
movabs r13, 0x53adc9fd6b76c8b9
mov rax, qword [rbp + 0x20]
movabs rbx, 0x98b7c5cc2a52baae
mov qword [rbp + 0x88], rax
movabs rax, 0x159092898e2a4721
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x90], rax
movabs rax, 0x8b8a2cf2228bf235
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x98], rax
movabs rax, 0x53c8c98d6b56c8df
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xa0], rax
movabs rax, 0x98d6c5a12a3bba8e
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xa8], rax
movabs rax, 0x933ee7bdccd7e9ac
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x20], rdi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x20], r15
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x20], r13
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x108], rax
movabs rax, 0x933ee7b7ccb2e9cb
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
jmp 0x14004b6ac
mov eax, 0x20b
cmp word [rdi + 0x18], ax
je 0x14004a6fa
movabs rax, 0x2a53e6e0663bc65c
movabs rbx, 0x98b7c5cc2a52baae
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe0], rax
movabs rax, 0x593941d976a82c9f
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe8], rax
movabs rax, 0x158992948e2b4767
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8bc52ce622c9f274
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf8], rax
movabs rax, 0x53a7c9896b1fc8db
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
lea rdx, [rbp + 0xe0]
mov qword [rbp + 0x108], rax
movabs rdi, 0x2a34e6816656c635
mov qword [rbp + 0x20], rdi
movabs rsi, 0x594a41b076882cfa
mov rax, qword [rbp + 0x20]
movabs r15, 0x15fd92fb8e454747
mov qword [rbp + 0x80], rax
movabs r12, 0x8be52cd222fff254
mov qword [rbp + 0x20], rsi
movabs r13, 0x53adc9fd6b76c8b9
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x20], r15
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x20], r13
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
movdqa xmm2, xmmword [rbp + 0x100]
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
mov qword [rbp + 0xa8], rax
vxorps xmm2, xmm2, xmmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqa xmmword [rbp + 0x100], xmm2
jmp 0x14004b6ea
mov ebx, dword [rdi + 0x50]
xor ecx, ecx
mov edx, ebx
mov r9d, 4
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test rax, rax
je 0x14004b6f9
movzx eax, word [rdi + 0x14]
mov rcx, r13
mov eax, dword [rax + rdi + 0x24]
sub ebx, eax
mov dword [rbp + 0x20], eax
mov eax, ebx
mov r8d, ebx
mov qword [rbp], rax
call fcn.14003b5c0
mov r12, rax
test rax, rax
jne 0x14004aa0b
movabs rax, 0x2a58e6e86637c653
movabs r8, 0x6fc392da9c878d7c
mov qword [rbp + 0x20], rax
movabs rcx, 0x240bc2aeac8e9998
mov rax, qword [rbp + 0x20]
movabs rdi, 0x2a34e6816656c635
mov qword [rbp + 0xe0], rax
movabs rsi, 0x594a41b076882cfa
movabs rax, 0x593e419076ec2c9f
movabs r15, 0x15fd92fb8e454747
mov qword [rbp + 0x20], rax
movabs r12, 0x8be52cd222fff254
mov rax, qword [rbp + 0x20]
movabs r13, 0x53adc9fd6b76c8b9
mov qword [rbp + 0xe8], rax
movabs rbx, 0x98b7c5cc2a52baae
movabs rax, 0x1591929a8e654728
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8b842cb12290f238
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf8], rax
movabs rax, 0x53dfc9dd6b13c8cd
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x100], rax
movabs rax, 0x98c3c5a32a3fbacb
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x108], rax
movabs rax, 0x9353e7decc92e9ae
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x110], rax
movabs rax, 0x242bc2cbace999f9
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x118], rax
movabs rax, 0xcdabfc89f2c70674
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x120], rax
movabs rax, 0x3bc0e7161ca4b407
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x128], rax
movabs rax, 0xf8a6b7c37829de63
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x20], r8
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x20], rdi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x20], r15
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x20], r13
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xa8], rax
movabs rax, 0x933ee7b7ccb2e9cb
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x20], rcx
movabs rcx, 0xcdc0fca9f2a9061d
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x20], rcx
movabs rdx, 0x3ba5e7781cd6b462
mov rax, qword [rbp + 0x20]
lea rcx, [0x1400b4830]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0x20], rdx
lea rdx, [rbp + 0xe0]
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xc8], rax
movabs rax, 0xf8a6b7c37823de0f
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0x20], r8
mov rax, qword [rbp + 0x20]
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqu ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xe0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x100], ymm1
mov qword [rbp + 0xd8], rax
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x120], ymm1
vzeroupper
call fcn.140046970
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x14004b6f9
mov r8d, dword [rdi + 0x54]
mov rdx, r15
mov rcx, r14
call fcn.140084e70
movzx ebx, word [rdi + 0x14]
xor eax, eax
add rbx, 0x28
cmp ax, word [rdi + 6]
jae 0x14004aa5b
add rbx, rdi
nop dword [rax]
test dword [rbx + 0x14], 0x80
ja 0x14004aa4d
mov edx, dword [rbx + 4]
mov ecx, dword [rbx - 4]
add rdx, r15
mov r8d, dword [rbx]
add rcx, r14
call fcn.140084e70
movzx eax, word [rdi + 6]
inc esi
add rbx, 0x28
cmp esi, eax
jl 0x14004aa30
mov r15d, dword [rbp + 0x20]
lea rcx, [rbp + 0x80]
mov rsi, r12
mov qword [rbp + 0x18], r12
sub r12, r15
mov rdx, r14
mov rbx, r12
sub rbx, qword [rdi + 0x30]
call fcn.14004f3d0
mov rdx, rbx
mov rcx, rax
call fcn.14004b730
mov rdx, r12
mov rcx, r14
call fcn.14004b830
test al, al
jne 0x14004ab37
movabs rax, 0x2a58e6e86637c653
movabs rbx, 0x98b7c5cc2a52baae
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe0], rax
movabs rax, 0x593e419076ec2c9f
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe8], rax
movabs rax, 0x1594929d8e654728
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8b8a2cb122dff22c
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf8], rax
movabs rax, 0x53c8c9946b1dc8d6
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x100], rax
movabs rax, 0x98b7c5cc2a52baa4
mov qword [rbp + 0x20], rax
jmp 0x14004a627
mov rdx, r14
lea rcx, [rbp + 0x80]
call fcn.14004f530
mov rdx, rax
mov rcx, r13
call fcn.14004c310
test al, al
jne 0x14004ad1b
movabs rax, 0x2a58e6e86637c653
movabs rcx, 0x240bc2aeac8e9998
mov qword [rbp + 0x20], rax
movabs rdi, 0x2a34e6816656c635
mov rax, qword [rbp + 0x20]
movabs rsi, 0x594a41b076882cfa
mov qword [rbp + 0x80], rax
movabs r15, 0x15fd92fb8e454747
movabs rax, 0x593e419076ec2c9f
movabs r12, 0x8be52cd222fff254
mov qword [rbp + 0x20], rax
movabs r13, 0x53adc9fd6b76c8b9
mov rax, qword [rbp + 0x20]
movabs rbx, 0x98b7c5cc2a52baae
mov qword [rbp + 0x88], rax
movabs rax, 0x159892898e654728
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x90], rax
movabs rax, 0x8b932cbe2290f227
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x98], rax
movabs rax, 0x53c0c9946b56c8dc
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xa0], rax
movabs rax, 0x98c3c5be2a3dbade
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xa8], rax
movabs rax, 0x933ee7b7ccb8e9b8
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x20], rdi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0x20], rsi
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x20], r15
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0x20], r12
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x20], r13
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x20], rbx
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x108], rax
movabs rax, 0x933ee7b7ccb2e9cb
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqu ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0x80], ymm1
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xa0], ymm1
jmp 0x14004b468
lea rax, [r15 + r14]
test rax, rax
je 0x14004b1cb
mov rbx, qword [rbp]
test rbx, rbx
je 0x14004b1cb
xor r15d, r15d
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x38], r15
lea rax, [rbp + 0x20]
mov qword [rsp + 0x30], rax
lea r8, [rbp + 0x80]
mov dword [rsp + 0x28], r15d
mov r9d, 0x28
mov edx, 0x80862007
mov qword [rsp + 0x20], r15
mov rcx, r13
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x80], 0x33
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], rbx
mov dword [rbp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14004b1cb
mov edi, dword [rdi + 0x28]
lea rdx, [rbp + 0x40]
mov r9, rbx
mov qword [rsp + 0x20], r15
mov r8, rsi
lea rcx, [rbp + 0x60]
add rdi, r12
call fcn.1400453c0
test al, al
jne 0x14004aff8
movabs rax, 0x2a58e6ed6637c656
movabs rcx, 0xcdc0fca9f2a9061d
mov qword [rbp], rax
movabs rdx, 0x3ba5e7781cd6b462
mov rax, qword [rbp]
movabs rdi, 0x2a34e6816656c635
mov qword [rbp + 0x80], rax
movabs rsi, 0x594a41b076882cfa
movabs rax, 0x592141d376e92c98
movabs r15, 0x15fd92fb8e454747
mov qword [rbp], rax
movabs r12, 0x8be52cd222fff254
mov rax, qword [rbp]
movabs r13, 0x53adc9fd6b76c8b9
mov qword [rbp + 0x88], rax
movabs rbx, 0x98b7c5cc2a52baae
movabs rax, 0x1589929e8e374767
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x8b962cbc228df221
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x53c1c99c6b10c899
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x9897c5e02a37badd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x9352e7deccd3e9ad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x2401c28facea99fd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x933ee7b7ccb2e9cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x240bc2aeac8e9998
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
mov qword [rbp + 0x128], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vmovdqa xmm2, xmmword [rbp + 0xc0]
lea rdx, [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vxorps xmm2, xmm2, xmmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqa xmmword [rbp + 0xc0], xmm2
jmp 0x14004b468
mov rax, qword [rbp + 0x40]
lea rdx, [rbp + 0x20]
mov r9, qword [rbp + 0x60]
mov r8, rdi
mov rcx, r13
mov qword [rsp + 0x20], rax
mov dword [rbp + 0x20], r15d
call fcn.14004c7f0
test al, al
jne 0x14004b1a4
movabs rax, 0x2a58e6e86637c653
movabs rcx, 0x240bc2aeac8e9998
mov qword [rbp], rax
movabs rdi, 0x2a34e6816656c635
mov rax, qword [rbp]
movabs rsi, 0x594a41b076882cfa
mov qword [rbp + 0x80], rax
movabs r15, 0x15fd92fb8e454747
movabs rax, 0x593e419076ec2c9f
movabs r12, 0x8be52cd222fff254
mov qword [rbp], rax
movabs r13, 0x53adc9fd6b76c8b9
mov rax, qword [rbp]
movabs rbx, 0x98b7c5cc2a52baae
mov qword [rbp + 0x88], rax
movabs rax, 0x159c92988e654728
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x8b812cf22293f238
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x53c8c98b6b1fc8cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x98d9c5a92a72badc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x9334e7ceccc0e9bf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x933ee7b7ccb2e9cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
jmp 0x14004acd8
mov rax, qword [rbp + 0x10]
test rax, rax
je 0x14004b1b2
mov ecx, dword [rbp + 0x20]
mov dword [rax], ecx
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, rsi
jmp 0x14004b6fb
movabs rax, 0x2a58e6e86637c653
movabs r8, 0x6fc392da9c878d7c
mov qword [rbp + 0x10], rax
movabs rdi, 0x2a34e6816656c635
mov rax, qword [rbp + 0x10]
movabs rsi, 0x594a41b076882cfa
mov qword [rbp + 0xe0], rax
movabs r15, 0x15fd92fb8e454747
movabs rax, 0x593e419076ec2c9f
movabs r12, 0x8be52cd222fff254
mov qword [rbp + 0x10], rax
movabs r13, 0x53adc9fd6b76c8b9
mov rax, qword [rbp + 0x10]
movabs rbx, 0x98b7c5cc2a52baae
mov qword [rbp + 0xe8], rax
movabs rcx, 0xcdc0fca9f2a9061d
movabs rax, 0x158f928c8e654728
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8bc52cb7228bf23d
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xf8], rax
movabs rax, 0x53ccc99e6b19c8d5
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x100], rax
movabs rax, 0x98dac5a52a72bac2
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x108], rax
movabs rax, 0x931ee7d2ccd5e9aa
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x110], rax
movabs rax, 0x2479c28eace199ec
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x118], rax
movabs rax, 0xcdb4fcc6f2c40678
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x120], rax
movabs rax, 0x3bc8e7111cf6b407
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x128], rax
movabs rax, 0xf8acb7a67844de6e
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x10], r8
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x10], rdi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x10], rsi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x10], r15
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xa8], rax
movabs rax, 0x933ee7b7ccb2e9cb
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xb0], rax
movabs rax, 0x240bc2aeac8e9998
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x10], rcx
movabs rdx, 0x3ba5e7781cd6b462
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0x10], rdx
lea rdx, [rbp + 0xe0]
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xc8], rax
movabs rax, 0xf8a6b7c37823de0f
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0x10], r8
mov rax, qword [rbp + 0x10]
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xe0]
vmovdqu ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xe0], ymm1
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqu ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x100], ymm1
mov qword [rbp + 0xd8], rax
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x120], ymm1
lea rcx, [0x1400b4830]
vzeroupper
call fcn.140046970
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 8]
call fcn.14003b8d0
test al, al
je 0x14004b55f
movabs rax, 0x2a5be6ec6633c658
movabs rcx, 0x240bc2aeac8e9998
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
movabs rax, 0x5922419076f12c88
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
movabs rax, 0x159f92db8e364726
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x90], rax
movabs rax, 0x8bc52cbc229af231
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x98], rax
movabs rax, 0x53c8c9916b13c8cb
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa0], rax
movabs rax, 0x98d3c5a92a21bacf
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa8], rax
movabs rax, 0x933ee7b7ccb2e9c1
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 8], rcx
jmp 0x14004b626
movabs rax, 0x2a5ae6f36637c642
movabs rcx, 0x240bc2aeac8e9998
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
movabs rax, 0x597041d776e62c93
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
movabs rax, 0x1594929a8e234767
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x90], rax
movabs rax, 0x8bc52cb6229af238
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x98], rax
movabs rax, 0x53cbc9dd6b19c8cd
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa0], rax
movabs rax, 0x9897c5a92a37badc
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa8], rax
movabs rax, 0x9351e7daccd7e9a6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb0], rax
movabs rax, 0x240bc2a4acf799ea
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf0], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x100], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x108], rax
movabs rax, 0x933ee7b7ccb2e9cb
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x110], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqu ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0x80], ymm1
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rcx, [0x1400b4830]
vzeroupper
call fcn.140046970
xor eax, eax
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.140058530
mov rbx, qword [rsp + 0x200]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret