Function at 0x7ff7c005c390
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rdi, rdx
mov r14, r9
xor dl, dl
mov rsi, r8
cmp ecx, 0xf
ja case.0x7ff7c005c3d4.5
lea r15, [0x7ff7bffc0000]
movsxd rax, ecx
mov eax, dword [r15 + rax*4 + 0x9e040]
add rax, r15
jmp rax
test byte [rdi], 1
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005c46a
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x26]
mov qword [rbp - 0x30], 0x14
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x14], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c0180d40]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180d40]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
cmp byte [rdi + 4], bl
je 0x7ff7c005c463
lea rcx, [0x7ff7c0180d48]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180d48]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov rax, qword [rbp - 0x28]
mov qword [rsi], rax
nop word [rax + rax]
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x44
mov qword [rbp - 0x30], 0x32
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
lea r8, [0x7ff7c0152200]
add rax, 0x10
mov qword [rbp - 0x28], rcx
lea rdx, [0x7ff7c0180d90]
mov qword [rcx + 8], rax
mov word [rax + 0x32], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [rbp - 0x30]
mov word [rax], bx
lea rax, [0x7ff7c0180d68]
cmp byte [rdi + 4], bl
cmovne r8, rax
call sym.ProcessHacker.exe_PhAppendFormatStringBuilder
test byte [rdi], 2
je 0x7ff7c005c4fc
lea rcx, [0x7ff7c0180e20]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180e20]
lea r8, [rax + rax]
lea rcx, [rbp - 0x30]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov rax, qword [rbp - 0x28]
mov qword [r14], rax
jmp 0x7ff7c005e01d
test byte ds:[rdi], 7
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005c6db
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x26]
mov qword [rbp - 0x30], 0x14
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x14], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c017cc48]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c017cc48]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 4
jne 0x7ff7c005c588
test al, 2
jne 0x7ff7c005c588
mov r15, qword [rbp - 0x28]
jmp 0x7ff7c005c6d8
lea rcx, [0x7ff7c0176954]
nop
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0176954]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 4
je 0x7ff7c005c5d1
lea rcx, [0x7ff7c0180e68]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180e68]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 2
je 0x7ff7c005c5f7
lea rcx, [0x7ff7c0180e88]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180e88]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 8
je 0x7ff7c005c61b
lea rcx, [0x7ff7c0180eb0]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180eb0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov r15, qword [rbp - 0x28]
lea rax, [0x7ff7c0174e40]
mov qword [rbp - 0x20], 4
mov qword [rbp - 0x18], rax
mov rcx, qword [r15]
cmp rcx, 4
jb 0x7ff7c005c69a
mov rax, qword [r15 + 8]
lea rdx, [rbp - 0x20]
add rax, 0xfffffffffffffffc
mov qword [rbp - 0x10], 4
add rcx, rax
xor r8d, r8d
mov qword [rbp - 8], rcx
lea rcx, [rbp - 0x10]
call sym.ProcessHacker.exe_PhEqualStringRef
test al, al
je 0x7ff7c005c69a
mov r8, qword [r15]
mov rcx, qword [r15 + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
sub rdx, 4
sub r8, rdx
add rcx, rdx
sub r8, 4
lea rdx, [rcx + 4]
call fcn.7ff7c0125120
add qword [r15], 0xfffffffffffffffc
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
mov word [rcx + rax], bx
mov rdx, qword [r15]
add rdx, 2
cmp qword [rbp - 0x30], rdx
jae 0x7ff7c005c6b9
lea rcx, ds:[rbp - 0x30]
call fcn.7ff7c00c9d40
mov r15, qword [rbp - 0x28]
mov rcx, qword [r15 + 8]
mov edx, 0x29
mov rax, qword [r15]
mov word [rcx + rax], dx
add qword [r15], 2
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
mov word [rcx + rax], bx
mov qword [rsi], r15
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x76
mov qword [rbp - 0x30], 0x64
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x64], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c0180ee0]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180ee0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 4
je 0x7ff7c005c762
lea rcx, [0x7ff7c0180f70]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180f70]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 2
je 0x7ff7c005c78b
lea rcx, [0x7ff7c0180fd0]
nop dword [rax]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0180fd0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
nop dword [rax + rax]
test al, 8
je 0x7ff7c005c4fc
lea rcx, [0x7ff7c0181080]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181080]
nop dword [rax + rax]
jmp 0x7ff7c005c4ef
xor ebx, ebx
test byte [rdi], 1
je 0x7ff7c005c8b7
test rsi, rsi
je 0x7ff7c005c828
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, ds:[rbx + 0x40]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x2e
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x2e], bx
movups xmm0, xmmword [0x7ff7c01810f0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0181100]
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [0x7ff7c0181110]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [0x7ff7c0181118]
mov dword [rcx + 0x28], eax
movzx eax, word [0x7ff7c018111c]
mov word [rcx + 0x2c], ax
nop dword [rax + rax]
test r14, r14
je 0x7ff7c005c8b5
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x7a
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x68
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x68], bx
movaps xmm0, xmmword [0x7ff7c0181120]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0181130]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0181140]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0181150]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c0181160]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c0181170]
movups xmmword [rcx + 0x50], xmm1
movsd xmm0, qword [0x7ff7c0181180]
movsd qword [rcx + 0x60], xmm0
mov qword [r14], rdx
mov dl, 1
test byte [rdi], 2
je 0x7ff7c005c9e7
test rsi, rsi
je 0x7ff7c005c92b
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x5a
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x48
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x48], bx
movaps xmm0, xmmword [0x7ff7c0181190]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c01811a0]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c01811b0]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c01811c0]
movups xmmword [rcx + 0x30], xmm1
movsd xmm0, qword [0x7ff7c01811d0]
movsd qword [rcx + 0x40], xmm0
nop dword [rax + rax]
test r14, r14
je 0x7ff7c005c9e5
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0xbe
call sym.ProcessHacker.exe_PhCreateObject
lea rcx, [r15 + 0x1c11e0]
mov r8, rax
mov qword [rax], 0xac
add rax, 0x10
mov qword [r8 + 8], rax
mov word [rax + 0xac], bx
movups xmm0, xmmword [rcx]
mov rdx, qword [r8 + 8]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x70], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx + 0x80], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx + 0x90], xmm1
mov rax, qword [rcx + 0xa0]
mov qword [rdx + 0xa0], rax
mov eax, dword [rcx + 0xa8]
mov dword [rdx + 0xa8], eax
mov qword [r14], r8
mov dl, 1
test byte ds:[rdi], 4
je case.0x7ff7c005c3d4.5
test rsi, rsi
je 0x7ff7c005ca54
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x44
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x32
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x32], bx
movups xmm0, xmmword [0x7ff7c0181290]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c01812a0]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c01812b0]
movups xmmword [rcx + 0x20], xmm0
movzx eax, word [0x7ff7c01812c0]
mov word [rcx + 0x30], ax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x16c
call sym.ProcessHacker.exe_PhCreateObject
mov r9, rax
lea rdx, [0x7ff7c01812d0]
mov r8d, 2
mov qword [rax], 0x15a
add rax, 0x10
mov qword [r9 + 8], rax
mov word [rax + 0x15a], bx
mov rcx, qword [r9 + 8]
nop dword [rax + rax]
lea rcx, ds:[rcx + 0x80]
movups xmm0, xmmword [rdx]
lea rdx, [rdx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rdx - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rdx - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rdx - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rdx - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rdx - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rdx - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rdx - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub r8, 1
jne 0x7ff7c005caa0
movups xmm0, xmmword ds:[rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
mov rax, qword [rdx + 0x50]
mov qword [rcx + 0x50], rax
movzx eax, word [rdx + 0x58]
mov word [rcx + 0x58], ax
mov qword [r14], r9
jmp 0x7ff7c005e01d
test byte [rdi], 1
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005cb94
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, ds:[rbx + 0x3a]
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
mov qword [rsi], rcx
mov qword [rax], 0x28
add rax, 0x10
mov qword [rcx + 8], rax
mov word [rax + 0x28], bx
movups xmm0, xmmword [0x7ff7c0181430]
mov rax, qword [rcx + 8]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x7ff7c0181440]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x7ff7c0181450]
movsd qword [rax + 0x20], xmm0
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0xa0
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x8e
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x8e], bx
movaps xmm0, xmmword [0x7ff7c0181460]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0181470]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0181480]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0181490]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c01814a0]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c01814b0]
movups xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [0x7ff7c01814c0]
movups xmmword [rcx + 0x60], xmm0
movaps xmm1, xmmword [0x7ff7c01814d0]
movups xmmword [rcx + 0x70], xmm1
movsd xmm0, qword [0x7ff7c01814e0]
movsd qword [rcx + 0x80], xmm0
mov eax, dword [0x7ff7c01814e8]
mov dword [rcx + 0x88], eax
movzx eax, word [0x7ff7c01814ec]
mov word [rcx + 0x8c], ax
mov qword [r14], rdx
jmp 0x7ff7c005e01d
xor ebx, ebx
test byte [rdi], 1
je 0x7ff7c005cd44
test rsi, rsi
je 0x7ff7c005ccbf
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, ds:[rbx + 0x4a]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x38
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x38], bx
movups xmm0, xmmword [0x7ff7c01814f0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0181500]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c0181510]
movups xmmword [rcx + 0x20], xmm0
movsd xmm1, qword [0x7ff7c0181520]
movsd qword [rcx + 0x30], xmm1
test r14, r14
je 0x7ff7c005cd42
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x74
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x62
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x62], bx
movaps xmm0, xmmword [0x7ff7c0181530]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0181540]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0181550]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0181560]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c0181570]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c0181580]
movups xmmword [rcx + 0x50], xmm1
movzx eax, word [0x7ff7c0181590]
mov word [rcx + 0x60], ax
mov qword [r14], rdx
mov dl, 1
test byte [rdi], 2
je case.0x7ff7c005c3d4.5
nop dword [rax]
test rsi, rsi
je 0x7ff7c005cdb7
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x48
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x36
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x36], bx
movups xmm0, xmmword [0x7ff7c0181598]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c01815a8]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c01815b8]
movups xmmword [rcx + 0x20], xmm0
mov eax, dword [0x7ff7c01815c8]
mov dword [rcx + 0x30], eax
movzx eax, word [0x7ff7c01815cc]
mov word [rcx + 0x34], ax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x88
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x76
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x76], bx
movaps xmm0, xmmword [0x7ff7c01815d0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c01815e0]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c01815f0]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0181600]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c0181610]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c0181620]
movups xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [0x7ff7c0181630]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [0x7ff7c0181640]
mov dword [rcx + 0x70], eax
movzx eax, word [0x7ff7c0181644]
mov word [rcx + 0x74], ax
mov qword [r14], rdx
jmp 0x7ff7c005e01d
test byte [rdi], 1
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005cebe
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x44]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x32
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x32], bx
movups xmm0, xmmword [0x7ff7c0181648]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0181658]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c0181668]
movups xmmword [rcx + 0x20], xmm0
movzx eax, word [0x7ff7c0181678]
mov word [rcx + 0x30], ax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x92
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x80
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x80], bx
movaps xmm0, xmmword [0x7ff7c0181680]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0181690]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c01816a0]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c01816b0]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c01816c0]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c01816d0]
movups xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [0x7ff7c01816e0]
movups xmmword [rcx + 0x60], xmm0
movaps xmm1, xmmword [0x7ff7c01816f0]
movups xmmword [rcx + 0x70], xmm1
mov qword [r14], rdx
jmp 0x7ff7c005e01d
test byte [rdi], 1
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005cfe9
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x44]
mov qword [rbp - 0x30], 0x32
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x32], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
mov word [rax], bx
test byte [rdi], 4
je 0x7ff7c005cfc2
lea rcx, [0x7ff7c0181708]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181708]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
lea rcx, [0x7ff7c017cc70]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c017cc70]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov rax, qword [rbp - 0x28]
mov qword [rsi], rax
nop dword [rax]
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x76
mov qword [rbp - 0x30], 0x64
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x64], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c0181720]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181720]
lea rcx, ds:[rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 4
je 0x7ff7c005d07d
lea rcx, [0x7ff7c0181790]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181790]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 2
je 0x7ff7c005c4fc
lea rcx, [0x7ff7c01817f0]
nop dword [rax]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c01817f0]
jmp 0x7ff7c005c4ef
test byte [rdi], 3
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005d225
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, ds:[rbx + 0x44]
mov qword [rbp - 0x30], 0x32
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x32], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c0181858]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181858]
lea rcx, ds:[rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 1
je 0x7ff7c005d13d
lea rcx, [0x7ff7c0181888]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181888]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 2
je 0x7ff7c005d161
lea rcx, [0x7ff7c01818b0]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c01818b0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov r15, qword [rbp - 0x28]
lea rax, [0x7ff7c0174e40]
mov qword [rbp - 0x10], 4
mov qword [rbp - 8], rax
mov rcx, qword [r15]
cmp rcx, 4
jb 0x7ff7c005d1e8
mov rax, qword [r15 + 8]
lea rdx, [rbp - 0x10]
add rax, 0xfffffffffffffffc
mov qword [rbp - 0x20], 4
add rcx, rax
xor r8d, r8d
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x20]
call sym.ProcessHacker.exe_PhEqualStringRef
nop dword [rax]
test al, al
je 0x7ff7c005d1e8
mov r8, qword [r15]
mov rcx, qword [r15 + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
sub rdx, 4
sub r8, rdx
add rcx, rdx
sub r8, 4
lea rdx, [rcx + 4]
call fcn.7ff7c0125120
add qword [r15], 0xfffffffffffffffc
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
mov word [rcx + rax], bx
mov rdx, qword ds:[r15]
add rdx, 2
cmp qword [rbp - 0x30], rdx
jae 0x7ff7c005d203
lea rcx, [rbp - 0x30]
call fcn.7ff7c00c9d40
mov r15, qword [rbp - 0x28]
mov rcx, qword [r15 + 8]
mov edx, 0x29
mov rax, qword [r15]
mov qword [rsi], r15
mov word [rcx + rax], dx
add qword [r15], 2
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
mov word [rcx + rax], bx
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x76
mov qword [rbp - 0x30], 0x64
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x64], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c01818d0]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c01818d0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 1
je 0x7ff7c005d2b1
lea rcx, [0x7ff7c0181950]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181950]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 2
je 0x7ff7c005d2d7
lea rcx, [0x7ff7c01819b0]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c01819b0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 4
je 0x7ff7c005c4fc
lea rcx, [0x7ff7c0181a10]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181a10]
jmp 0x7ff7c005c4ef
test byte [rdi], 1
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005d35e
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x44]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x32
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x32], bx
movups xmm0, xmmword [0x7ff7c0181a58]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0181a68]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c0181a78]
movups xmmword [rcx + 0x20], xmm0
movzx eax, word [0x7ff7c0181a88]
mov word [rcx + 0x30], ax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x76
mov qword [rbp - 0x30], 0x64
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x64], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c0181a90]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181a90]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
test byte [rdi], 2
je 0x7ff7c005c4fc
lea rcx, [0x7ff7c0181b00]
nop dword [rax]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181b00]
jmp 0x7ff7c005c4ef
xor ebx, ebx
test byte [rdi], 3
je 0x7ff7c005d5fe
nop dword [rax]
test rsi, rsi
je 0x7ff7c005d565
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, ds:[rbx + 0x44]
mov qword [rbp - 0x30], 0x32
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x32], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c0181b90]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181b90]
lea rcx, ds:[rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 1
je 0x7ff7c005d47d
lea rcx, [0x7ff7c0181bb8]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181bb8]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 2
je 0x7ff7c005d4a1
lea rcx, [0x7ff7c0181bd8]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181bd8]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov r15, qword [rbp - 0x28]
lea rax, [0x7ff7c0174e40]
mov qword [rbp - 0x10], 4
mov qword [rbp - 8], rax
mov rcx, qword [r15]
cmp rcx, 4
jb 0x7ff7c005d528
mov rax, qword [r15 + 8]
lea rdx, [rbp - 0x10]
add rax, 0xfffffffffffffffc
mov qword [rbp - 0x20], 4
add rcx, rax
xor r8d, r8d
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x20]
call sym.ProcessHacker.exe_PhEqualStringRef
nop dword [rax]
test al, al
je 0x7ff7c005d528
mov r8, qword [r15]
mov rcx, qword [r15 + 8]
mov rdx, r8
and rdx, 0xfffffffffffffffe
sub rdx, 4
sub r8, rdx
add rcx, rdx
sub r8, 4
lea rdx, [rcx + 4]
call fcn.7ff7c0125120
add qword [r15], 0xfffffffffffffffc
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
mov word [rcx + rax], bx
mov rdx, qword ds:[r15]
add rdx, 2
cmp qword [rbp - 0x30], rdx
jae 0x7ff7c005d543
lea rcx, [rbp - 0x30]
call fcn.7ff7c00c9d40
mov r15, qword [rbp - 0x28]
mov rcx, qword [r15 + 8]
mov edx, 0x29
mov rax, qword [r15]
mov qword [rsi], r15
mov word [rcx + rax], dx
add qword [r15], 2
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
mov word [rcx + rax], bx
test r14, r14
je 0x7ff7c005d5fc
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x44
mov qword [rbp - 0x30], 0x32
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x32], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
mov word [rax], bx
mov eax, dword [rdi]
test al, 1
je 0x7ff7c005d5cc
lea rcx, [0x7ff7c0181c20]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181c20]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
nop dword [rax]
test al, 2
je 0x7ff7c005d5f5
lea rcx, [0x7ff7c0181ca0]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181ca0]
lea rcx, ds:[rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov rax, qword [rbp - 0x28]
mov qword [r14], rax
mov dl, 1
test byte [rdi], 4
je case.0x7ff7c005c3d4.5
nop word [rax + rax]
test rsi, rsi
je 0x7ff7c005d672
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x3e
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x2c
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x2c], bx
movups xmm0, xmmword [0x7ff7c0181d30]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0181d40]
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [0x7ff7c0181d50]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [0x7ff7c0181d58]
mov dword [rcx + 0x28], eax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x150
call sym.ProcessHacker.exe_PhCreateObject
mov r9, rax
lea rdx, [0x7ff7c0181d60]
mov r8d, 2
mov qword [rax], 0x13e
add rax, 0x10
mov qword [r9 + 8], rax
mov word [rax + 0x13e], bx
mov rcx, qword [r9 + 8]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rdx]
lea rdx, [rdx + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm1, xmmword [rdx - 0x70]
movups xmmword [rcx - 0x70], xmm1
movups xmm0, xmmword [rdx - 0x60]
movups xmmword [rcx - 0x60], xmm0
movups xmm1, xmmword [rdx - 0x50]
movups xmmword [rcx - 0x50], xmm1
movups xmm0, xmmword [rdx - 0x40]
movups xmmword [rcx - 0x40], xmm0
movups xmm1, xmmword [rdx - 0x30]
movups xmmword [rcx - 0x30], xmm1
movups xmm0, xmmword [rdx - 0x20]
movups xmmword [rcx - 0x20], xmm0
movups xmm1, xmmword [rdx - 0x10]
movups xmmword [rcx - 0x10], xmm1
sub r8, 1
jne 0x7ff7c005d6b6
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rdx + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [rdx + 0x38]
mov dword [rcx + 0x38], eax
movzx eax, word [rdx + 0x3c]
mov word [rcx + 0x3c], ax
mov qword [r14], r9
jmp 0x7ff7c005e01d
test byte [rdi], 0xf
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005d7b2
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x3c]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x2a
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x2a], bx
movups xmm0, xmmword [0x7ff7c0181ea0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0181eb0]
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [0x7ff7c0181ec0]
movsd qword [rcx + 0x20], xmm0
movzx eax, word [0x7ff7c0181ec8]
mov word [rcx + 0x28], ax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x56
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x44
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x44], bx
movaps xmm0, xmmword [0x7ff7c0181ed0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0181ee0]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0181ef0]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0181f00]
movups xmmword [rcx + 0x30], xmm1
mov eax, dword [0x7ff7c0181f10]
mov dword [rcx + 0x40], eax
mov qword [r14], rdx
jmp 0x7ff7c005e01d
test dword [rdi], 0x555
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005d887
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x3a]
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
mov qword [rsi], rcx
mov qword [rax], 0x28
add rax, 0x10
mov qword [rcx + 8], rax
mov word [rax + 0x28], bx
movups xmm0, xmmword [0x7ff7c0181f18]
mov rax, qword [rcx + 8]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x7ff7c0181f28]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x7ff7c0181f38]
movsd qword [rax + 0x20], xmm0
nop word [rax + rax]
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x76
mov qword [rbp - 0x30], 0x64
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
add rax, 0x10
mov qword [rbp - 0x28], rcx
mov qword [rcx + 8], rax
mov word [rax + 0x64], bx
mov qword [rcx], rbx
mov rax, qword [rcx + 8]
lea rcx, [0x7ff7c0181f50]
mov word [rax], bx
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181f50]
lea rcx, ds:[rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 1
je 0x7ff7c005d91d
lea rcx, [0x7ff7c0181fc0]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0181fc0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 4
je 0x7ff7c005d943
lea rcx, [0x7ff7c0182010]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0182010]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 0x10
je 0x7ff7c005d96b
lea rcx, [0x7ff7c0182070]
nop
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0182070]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
test al, 0x40
je 0x7ff7c005d991
lea rcx, [0x7ff7c01820c0]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c01820c0]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
bt eax, 8
jae 0x7ff7c005d9b9
lea rcx, [0x7ff7c01820f8]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c01820f8]
lea rcx, [rbp - 0x30]
lea r8, [rax + rax]
call sym.ProcessHacker.exe_PhAppendStringBuilderEx
mov eax, dword [rdi]
bt eax, 0xa
jae 0x7ff7c005c4fc
lea rcx, [0x7ff7c0182130]
call sym.ProcessHacker.exe_PhCountStringZ
lea rdx, [0x7ff7c0182130]
jmp 0x7ff7c005c4ef
test byte [rdi], 1
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005da5c
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x50]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x3e
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x3e], bx
movaps xmm0, xmmword [0x7ff7c0182160]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0182170]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0182180]
movups xmmword [rcx + 0x20], xmm0
movsd xmm1, qword [0x7ff7c0182190]
movsd qword [rcx + 0x30], xmm1
mov eax, dword [0x7ff7c0182198]
mov dword [rcx + 0x38], eax
movzx eax, word [0x7ff7c018219c]
mov word [rcx + 0x3c], ax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x7a
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x68
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x68], bx
movaps xmm0, xmmword [0x7ff7c01821a0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c01821b0]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c01821c0]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c01821d0]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c01821e0]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c01821f0]
movups xmmword [rcx + 0x50], xmm1
movsd xmm0, qword [0x7ff7c0182200]
movsd qword [rcx + 0x60], xmm0
mov qword [r14], rdx
jmp 0x7ff7c005e01d
xor ebx, ebx
test byte [rdi], 1
je 0x7ff7c005dc0c
test rsi, rsi
je 0x7ff7c005db5f
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, [rbx + 0x56]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x44
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x44], bx
movaps xmm0, xmmword [0x7ff7c0182210]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0182220]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0182230]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0182240]
movups xmmword [rcx + 0x30], xmm1
mov eax, dword [0x7ff7c0182250]
mov dword [rcx + 0x40], eax
test r14, r14
je 0x7ff7c005dc0a
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x98
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x86
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x86], bx
movaps xmm0, xmmword [0x7ff7c0182260]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0182270]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0182280]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0182290]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c01822a0]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c01822b0]
movups xmmword [rcx + 0x50], xmm1
movaps xmm0, xmmword [0x7ff7c01822c0]
movups xmmword [rcx + 0x60], xmm0
movaps xmm1, xmmword [0x7ff7c01822d0]
movups xmmword [rcx + 0x70], xmm1
mov eax, dword [0x7ff7c01822e0]
mov dword [rcx + 0x80], eax
movzx eax, word [0x7ff7c01822e4]
mov word [rcx + 0x84], ax
mov qword [r14], rdx
mov dl, 1
test byte ds:[rdi], 2
je 0x7ff7c005dcec
test rsi, rsi
je 0x7ff7c005dc72
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x42
call sym.ProcessHacker.exe_PhCreateObject
mov rcx, rax
mov qword [rsi], rcx
mov qword [rax], 0x30
add rax, 0x10
mov qword [rcx + 8], rax
mov word [rax + 0x30], bx
movups xmm0, xmmword [0x7ff7c01822e8]
mov rax, qword [rcx + 8]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x7ff7c01822f8]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c0182308]
movups xmmword [rax + 0x20], xmm0
test r14, r14
je 0x7ff7c005dcea
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x5e
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x4c
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x4c], bx
movaps xmm0, xmmword [0x7ff7c0182320]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0182330]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0182340]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0182350]
movups xmmword [rcx + 0x30], xmm1
movsd xmm0, qword [0x7ff7c0182360]
movsd qword [rcx + 0x40], xmm0
mov eax, dword [0x7ff7c0182368]
mov dword [rcx + 0x48], eax
mov qword [r14], rdx
mov dl, 1
test byte ds:[rdi], 4
je 0x7ff7c005dded
test rsi, rsi
je 0x7ff7c005dd5d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x44
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x32
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x32], bx
movups xmm0, xmmword [0x7ff7c0182370]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0182380]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c0182390]
movups xmmword [rcx + 0x20], xmm0
movzx eax, word [0x7ff7c01823a0]
mov word [rcx + 0x30], ax
test r14, r14
je 0x7ff7c005ddeb
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x70
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x5e
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x5e], bx
movaps xmm0, xmmword [0x7ff7c01823b0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c01823c0]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c01823d0]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c01823e0]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c01823f0]
movups xmmword [rcx + 0x40], xmm0
movsd xmm1, qword [0x7ff7c0182400]
movsd qword [rcx + 0x50], xmm1
mov eax, dword [0x7ff7c0182408]
mov dword [rcx + 0x58], eax
movzx eax, word [0x7ff7c018240c]
mov word [rcx + 0x5c], ax
mov qword [r14], rdx
mov dl, 1
test byte [rdi], 8
je case.0x7ff7c005c3d4.5
test rsi, rsi
je 0x7ff7c005de5f
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x4a
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x38
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x38], bx
movups xmm0, xmmword [0x7ff7c0182410]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c0182420]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c0182430]
movups xmmword [rcx + 0x20], xmm0
movsd xmm1, qword [0x7ff7c0182440]
movsd qword [rcx + 0x30], xmm1
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0x7a
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rax], 0x68
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x68], bx
movaps xmm0, xmmword [0x7ff7c0182450]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movaps xmm1, xmmword [0x7ff7c0182460]
movups xmmword [rcx + 0x10], xmm1
movaps xmm0, xmmword [0x7ff7c0182470]
movups xmmword [rcx + 0x20], xmm0
movaps xmm1, xmmword [0x7ff7c0182480]
movups xmmword [rcx + 0x30], xmm1
movaps xmm0, xmmword [0x7ff7c0182490]
movups xmmword [rcx + 0x40], xmm0
movaps xmm1, xmmword [0x7ff7c01824a0]
movups xmmword [rcx + 0x50], xmm1
movsd xmm0, qword [0x7ff7c01824b0]
movsd qword [rcx + 0x60], xmm0
mov qword [r14], rdx
jmp 0x7ff7c005e01d
test byte ds:[rdi], 1
je case.0x7ff7c005c3d4.5
xor ebx, ebx
test rsi, rsi
je 0x7ff7c005df66
mov rdx, qword [0x7ff7c01d3b58]
lea ecx, ds:[rbx + 0x48]
call sym.ProcessHacker.exe_PhCreateObject
mov rdx, rax
mov qword [rsi], rdx
mov qword [rax], 0x36
add rax, 0x10
mov qword [rdx + 8], rax
mov word [rax + 0x36], bx
movups xmm0, xmmword [0x7ff7c01824c0]
mov rcx, qword [rdx + 8]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [0x7ff7c01824d0]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [0x7ff7c01824e0]
movups xmmword [rcx + 0x20], xmm0
mov eax, dword [0x7ff7c01824f0]
mov dword [rcx + 0x30], eax
movzx eax, word [0x7ff7c01824f4]
mov word [rcx + 0x34], ax
test r14, r14
je 0x7ff7c005e01d
mov rdx, qword [0x7ff7c01d3b58]
mov ecx, 0xde
call sym.ProcessHacker.exe_PhCreateObject
lea rcx, [r15 + 0x1c2500]
mov r8, rax
lea rcx, [rcx + 0x80]
mov qword [rax], 0xcc
add rax, 0x10
mov qword [r8 + 8], rax
mov word [rax + 0xcc], bx
movups xmm0, xmmword [rcx - 0x80]
mov rdx, qword [r8 + 8]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx - 0x70]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x60], xmm0
sub rdx, 0xffffffffffffff80
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm1, xmmword [rcx]
movups xmmword [rdx], xmm1
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm0
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm1
movups xmm0, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm0
mov rax, qword [rcx + 0x40]
mov qword [rdx + 0x40], rax
mov eax, dword [rcx + 0x48]
mov dword [rdx + 0x48], eax
mov qword [r14], r8
mov dl, 1
mov rbx, qword [rsp + 0x70]
movzx eax, dl
mov rsi, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
add rsp, 0x50
pop r15
pop r14
pop rbp
ret