Function at 0x140019a10
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4b0]
sub rsp, 0x5b0
mov rax, qword [0x14015e080]
xor rax, rsp
mov qword [rbp + 0x4a8], rax
xor r13d, r13d
movdqa xmm1, xmmword [0x140149dd0]
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0x48
mov r8b, 0x4c
mov r9b, reloc.WS2_32.dll_recvfrom
mov r10b, 0x5a
mov r11b, 0x47
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor dl, cl
mov byte [rsp + 0x40], dl
xor r8b, cl
mov byte [rsp + 0x41], r8b
xor r9b, cl
mov byte [rsp + 0x42], r9b
xor r10b, cl
mov byte [rsp + 0x43], r10b
xor r11b, cl
mov byte [rsp + 0x44], r11b
xor bl, cl
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], r13b
lea rcx, [rsp + 0x31]
call fcn.140018710
mov dword [0x14015f5d4], eax
test eax, eax
je 0x14001bf23
mov edx, eax
lea ecx, [r13 + 8]
call qword [sym.imp.KERNEL32.DLL_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp], 0x238
cmp rax, 0xffffffffffffffff
je 0x140019b5d
lea rdx, [rbp]
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_Module32First]
test eax, eax
je 0x140019b54
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x30]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x140019b54
lea rdx, [rbp]
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_Module32Next]
test eax, eax
jne 0x140019b30
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
lea rcx, [rbp + 0x240]
lea rax, [rbp]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140019b70
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov r8d, dword [0x14015f5d4]
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.DLL_OpenProcess]
mov rsi, rax
mov qword [0x14015f4f0], rax
xorps xmm0, xmm0
mov edi, dword [rbp + 0x20]
movdqu xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], r13
test rdi, rdi
je 0x140019c40
mov edx, edi
lea rcx, [rbp + 0x490]
call fcn.140032290
mov rcx, qword [rbp + 0x490]
lea rbx, [rcx + rdi]
mov r8d, edi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x498], rbx
mov qword [rsp + 0x20], r13
mov r9, rdi
mov r8, qword [rbp + 0x490]
mov rdx, qword [rbp + 0x18]
mov rcx, rsi
call qword [sym.imp.KERNEL32.DLL_ReadProcessMemory]
nop
mov rax, qword [rbp + 0x258]
mov qword [0x14015f550], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015f990]
sub rdx, qword [0x14015f988]
sar rdx, 2
movabs r12, 0x3fffffffffffffff
test rdx, rdx
je 0x140019ce7
cmp rdx, r12
ja 0x14001bf59
lea rcx, [rsp + 0x30]
call fcn.140032e30
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015f990]
mov rdx, qword [0x14015f988]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019d34
lea rcx, [rbp - 0x68]
call fcn.140032290
mov rdi, qword [rbp - 0x68]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x60], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.1400187e0
mov qword [0x14015f6f8], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015f7e0]
sub rdx, qword [0x14015f7d8]
sar rdx, 2
test rdx, rdx
je 0x140019db5
cmp rdx, r12
ja 0x14001bf5f
lea rcx, [rbp - 0x68]
call fcn.140032e30
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015f7e0]
mov rdx, qword [0x14015f7d8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019e07
lea rcx, [rsp + 0x30]
call fcn.140032290
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.1400187e0
mov qword [0x14015f5a8], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015f928]
sub rdx, qword [0x14015f920]
sar rdx, 2
test rdx, rdx
je 0x140019e88
cmp rdx, r12
ja 0x14001bf65
lea rcx, [rbp - 0x68]
call fcn.140032e30
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015f928]
mov rdx, qword [0x14015f920]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019eda
lea rcx, [rsp + 0x30]
call fcn.140032290
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.1400187e0
mov qword [0x14015f358], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015f798]
sub rdx, qword [0x14015f790]
sar rdx, 2
test rdx, rdx
je 0x140019f5b
cmp rdx, r12
ja 0x14001bf6b
lea rcx, [rbp - 0x68]
call fcn.140032e30
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015f798]
mov rdx, qword [0x14015f790]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019fad
lea rcx, [rsp + 0x30]
call fcn.140032290
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.1400187e0
mov qword [0x14015f500], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015f940]
sub rdx, qword [0x14015f938]
sar rdx, 2
test rdx, rdx
je 0x14001a02e
cmp rdx, r12
ja 0x14001bf71
lea rcx, [rbp - 0x68]
call fcn.140032e30
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015f940]
mov rdx, qword [0x14015f938]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001a080
lea rcx, [rsp + 0x30]
call fcn.140032290
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.1400187e0
mov qword [0x14015f508], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015f8f0]
sub rdx, qword [0x14015f8e8]
sar rdx, 2
test rdx, rdx
je 0x14001a101
cmp rdx, r12
ja 0x14001bf77
lea rcx, [rbp - 0x68]
call fcn.140032e30
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015f8f0]
mov rdx, qword [0x14015f8e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001a14e
lea rcx, [rbp - 0x20]
call fcn.140032290
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x20]
call fcn.1400187e0
mov qword [0x14015f528], rax
mov r8, qword [0x14015f6f8]
test r8, r8
je 0x14001aa32
movss xmm0, dword [0x14015e114]
movss dword [rbp + 0x480], xmm0
mov eax, dword [0x14015f5d0]
test eax, eax
jne 0x14001a7b5
mov rax, qword [0x14015f810]
cmp qword [0x14015f808], rax
jne 0x14001aa32
mov eax, dword [rbp + 0x480]
movzx edx, al
mov rcx, qword [0x14015f880]
mov dword [rcx + 0x14], edx
mov ecx, eax
shr ecx, 8
movzx edx, cl
mov rcx, qword [0x14015f880]
mov dword [rcx + 0x18], edx
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
mov rcx, qword [0x14015f880]
mov dword [rcx + 0x1c], edx
shr eax, 0x18
mov rcx, qword [0x14015f880]
mov dword [rcx + 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015f8c0]
sub rdx, qword [0x14015f8b8]
sar rdx, 2
test rdx, rdx
je 0x14001a255
cmp rdx, r12
ja 0x14001bf7d
lea rcx, [rsp + 0x30]
call fcn.140032e30
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015f8c0]
mov rdx, qword [0x14015f8b8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov r8, qword [0x14015f6f8]
add r8, qword [0x14015f550]
lea r9, [rsp + 0x30]
mov rdx, qword [0x14015f4f0]
lea rcx, [rsp + 0x68]
call fcn.1400189d0
mov rbx, rax
lea r14, [0x14015f8b8]
cmp r14, rax
je 0x14001a311
mov r8, qword [0x14015f8b8]
test r8, r8
je 0x14001a2e6
mov rcx, qword [0x14015f8c8]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001a2cc
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001a350
mov r8, rcx
mov rcx, r8
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [0x14015f8b8], xmm0
mov qword [0x14015f8c8], r13
mov rax, qword [rbx]
mov qword [0x14015f8b8], rax
mov rax, qword [rbx + 8]
mov qword [0x14015f8c0], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015f8c8], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14001a36a
mov rax, qword [rsp + 0x78]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a357
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a357
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
mov qword [rsp + 0x68], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001a380
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 4]
mov r8, qword [0x14015f6f8]
lea rdx, [rbp]
call fcn.140018af0
mov rsi, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015f888]
sub rdx, qword [0x14015f880]
sar rdx, 2
test rdx, rdx
je 0x14001a46f
cmp rdx, r12
ja 0x14001bf83
lea rcx, [rsp + 0x30]
call fcn.140032e30
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015f888]
mov rdx, qword [0x14015f880]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rdi, [rdi + rbx*4]
mov qword [rsp + 0x38], rdi
jmp 0x14001a474
mov rdi, qword [rsp + 0x38]
mov word [rbp + 0x488], si
mov rdx, r13
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
sub rcx, rbx
sar rcx, 2
movzx eax, si
test rcx, rcx
je 0x14001a4b5
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a4a5
inc rdx
cmp rdx, rcx
jb 0x14001a495
jmp 0x14001a4b5
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rdx, r13
mov rcx, rdi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a4e7
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a4d7
inc rdx
cmp rdx, rcx
jb 0x14001a4c7
jmp 0x14001a4e7
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rdx, r13
mov rcx, rdi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a520
nop dword [rax]
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a510
inc rdx
cmp rdx, rcx
jb 0x14001a500
jmp 0x14001a520
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov rcx, qword [0x14015f880]
test rcx, rcx
je 0x14001a580
mov rax, qword [0x14015f890]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001a57b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a762
mov rcx, r8
call fcn.1400effc0
mov qword [0x14015f880], rbx
mov qword [0x14015f888], rdi
mov qword [0x14015f890], rsi
lea rax, [rbp - 0x38]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov rdx, qword [0x14015f8c0]
sub rdx, qword [0x14015f8b8]
sar rdx, 2
test rdx, rdx
je 0x14001a60f
cmp rdx, r12
ja 0x14001bf89
lea rcx, [rbp - 0x38]
call fcn.140032e30
mov rdi, qword [rbp - 0x38]
mov rbx, qword [0x14015f8c0]
mov rdx, qword [0x14015f8b8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x30], rax
mov rdi, qword [0x14015f888]
mov rbx, qword [0x14015f880]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
sub rdi, rbx
sar rdi, 2
test rdi, rdi
je 0x14001a66d
cmp rdi, r12
ja 0x14001bf8f
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.140032e30
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015f888]
mov rdx, qword [0x14015f880]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rbp - 0x38]
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x50]
call fcn.140018ce0
mov rbx, rax
lea rdi, [0x14015f880]
cmp rdi, rax
je 0x14001a71e
mov r8, qword [0x14015f880]
test r8, r8
je 0x14001a6f3
mov rcx, qword [0x14015f890]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001a6d9
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001a75b
mov r8, rcx
mov rcx, r8
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [0x14015f880], xmm0
mov qword [0x14015f890], r13
mov rax, qword [rbx]
mov qword [0x14015f880], rax
mov rax, qword [rbx + 8]
mov qword [0x14015f888], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015f890], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001a77a
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a769
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a769
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
mov qword [rbp - 0x50], r13
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
cmp byte [0x14015f33a], 0
jne 0x14001aa32
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002b230
mov rdx, qword [0x14015f550]
add rdx, qword [0x14015f6f8]
mov r8, rax
mov rcx, qword [0x14015f4f0]
call fcn.140019910
jmp 0x14001aa32
cmp eax, 1
jne 0x14001aa32
mov rax, qword [0x14015f810]
cmp qword [0x14015f808], rax
je 0x14001aa32
mov rsi, qword [0x14015f550]
add rsi, r8
lea rdi, [0x14015f880]
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002b230
mov rdx, rax
mov rcx, rsi
call fcn.140018e00
mov r12, rax
mov r9, qword [0x14015f810]
sub r9, qword [0x14015f808]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001a820
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015f5d0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015f4f0]
call fcn.140018e80
mov r15, rax
lea rdx, [0x14015f808]
lea rcx, [rbp - 0x80]
call fcn.14002b230
mov rbx, r15
sub rbx, rsi
mov rdx, rax
mov rcx, r15
call fcn.1400190e0
sub r12, rax
lea rax, [r15 + 0x1000]
mov qword [0x14015f330], rax
mov qword [0x14015f570], rsi
mov qword [0x14015f5c0], r15
lea r14, [0x14015f8b8]
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.14002b230
mov r8, qword [0x14015f550]
add r8, qword [0x14015f6f8]
mov r9, rax
mov rdx, qword [0x14015f4f0]
lea rcx, [rbp - 0x50]
call fcn.1400189d0
mov rdx, rax
mov rcx, r14
call fcn.14002b190
lea rcx, [rbp - 0x50]
call fcn.14002b130
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002b230
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x50]
call fcn.140019160
mov rdx, rax
mov rcx, rdi
call fcn.14002b190
lea rcx, [rbp - 0x50]
call fcn.14002b130
lea rdx, [0x14015f808]
lea rcx, [rbp - 0x80]
call fcn.14002b230
mov r8, rax
lea rdx, [r12 - 5]
lea rcx, [rbp - 0x50]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f808]
call fcn.14002b190
lea rcx, [rbp - 0x50]
call fcn.14002b130
mov dword [rbp + 0x488], 0x40400000
cmp byte [0x14015f33a], 0
jne 0x14001a9c1
movss xmm0, dword [0x14015e114]
movss dword [rbp + 0x488], xmm0
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x488]
mov rdx, qword [0x14015f330]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
lea rdx, [0x14015f808]
lea rcx, [rbp - 0x80]
call fcn.14002b230
mov r8, rax
mov rdx, r15
mov rcx, qword [0x14015f4f0]
call fcn.140019910
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015f4f0]
call fcn.140019910
movabs r12, 0x3fffffffffffffff
mov rcx, qword [0x14015f358]
test rcx, rcx
je 0x14001adf0
cmp dword [0x14015f5b8], 1
jne 0x14001adf0
mov rax, qword [0x14015f828]
cmp qword [0x14015f820], rax
je 0x14001adf0
mov rsi, qword [0x14015f550]
add rsi, rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov r8, r13
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015f960]
sub rdx, qword [0x14015f958]
sar rdx, 2
test rdx, rdx
je 0x14001aadd
cmp rdx, r12
ja 0x14001bf95
lea rcx, [rsp + 0x30]
call fcn.140032e30
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015f960]
mov rdx, qword [0x14015f958]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov r8, qword [rsp + 0x40]
jmp 0x14001aae2
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
sub rax, rcx
sar rax, 2
lea r15, [rax + rsi]
test rcx, rcx
je 0x14001ab41
sub r8, rcx
sar r8, 2
lea rdx, [r8*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ab2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ab2e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov r9, qword [0x14015f828]
sub r9, qword [0x14015f820]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001ab70
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015f5b8]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015f4f0]
call fcn.140018e80
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015f828]
sub rdx, qword [0x14015f820]
sar rdx, 2
test rdx, rdx
je 0x14001ac76
cmp rdx, r12
ja 0x14001bf9b
lea rcx, [rsp + 0x68]
call fcn.140032e30
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015f828]
mov rdx, qword [0x14015f820]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
mov qword [rbp + 0x480], r13
lea rcx, [rbp + 0x480]
call fcn.140031b20
mov rbx, r14
sub rbx, rsi
lea rdx, [rsp + 0x68]
mov rcx, r14
call fcn.1400190e0
sub r15, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015f538], rax
mov qword [0x14015f598], rsi
mov qword [0x14015f710], r14
lea rdx, [0x14015f908]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r9, rax
mov r8, rsi
mov rdx, qword [0x14015f4f0]
lea rcx, [rbp - 0x80]
call fcn.1400189d0
mov rdx, rax
lea rcx, [0x14015f908]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f958]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f958]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f820]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [r15 - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f820]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
mov dword [0x14015f654], 0x41a00000
cmp byte [0x14015f339], 0
jne 0x14001ad84
movss xmm0, dword [0x14015e214]
mulss xmm0, dword [0x140149554]
movss dword [0x14015f654], xmm0
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x14015f654]
mov rdx, qword [0x14015f538]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
lea rdx, [0x14015f820]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015f4f0]
call fcn.140019910
lea rdx, [0x14015f958]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015f4f0]
call fcn.140019910
mov rcx, qword [0x14015f500]
test rcx, rcx
je 0x14001b070
cmp dword [0x14015f4f8], 1
jne 0x14001b070
mov rax, qword [0x14015fa18]
cmp qword [0x14015fa10], rax
je 0x14001b070
mov rsi, qword [0x14015f550]
add rsi, rcx
lea rdx, [0x14015f868]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov rdx, rax
mov rcx, rsi
call fcn.140018e00
mov r14, rax
mov r9, qword [0x14015fa18]
sub r9, qword [0x14015fa10]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001ae70
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015f4f8]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015f4f0]
call fcn.140018e80
mov rdi, rax
lea rdx, [0x14015fa10]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov rbx, rdi
sub rbx, rsi
mov rdx, rax
mov rcx, rdi
call fcn.1400190e0
sub r14, rax
lea rax, [rdi + 0x1000]
mov qword [0x14015f700], rax
mov qword [0x14015f3b0], rsi
mov qword [0x14015f568], rdi
lea rdx, [0x14015f7c0]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, qword [0x14015f550]
add r8, qword [0x14015f500]
mov r9, rax
mov rdx, qword [0x14015f4f0]
lea rcx, [rbp - 0x80]
call fcn.1400189d0
mov rdx, rax
lea rcx, [0x14015f7c0]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f868]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f868]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015fa10]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [r14 - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015fa10]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
mov dword [rbp + 0x480], 1
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x14015f700]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
lea rdx, [0x14015fa10]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x14015f4f0]
call fcn.140019910
lea rdx, [0x14015f868]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015f4f0]
call fcn.140019910
mov rcx, qword [0x14015f508]
test rcx, rcx
je 0x14001b317
cmp dword [0x14015f634], 2
jne 0x14001b317
mov rax, qword [0x14015f7b0]
cmp qword [0x14015f7a8], rax
je 0x14001b317
mov rsi, qword [0x14015f550]
add rsi, rcx
lea rdx, [0x14015f7f0]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov rdx, rax
mov rcx, rsi
call fcn.140018e00
mov r14, rax
mov r9, qword [0x14015f7b0]
sub r9, qword [0x14015f7a8]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b0f0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015f634]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015f4f0]
call fcn.140018e80
mov rdi, rax
lea rdx, [0x14015f7a8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov rbx, rdi
sub rbx, rsi
mov rdx, rax
mov rcx, rdi
call fcn.1400190e0
sub r14, rax
lea rax, [rdi + 0x1000]
mov qword [0x14015f728], rax
add rax, 4
mov qword [0x14015f520], rax
mov qword [0x14015f530], rsi
mov qword [0x14015f540], rdi
lea rdx, [0x14015f838]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, qword [0x14015f550]
add r8, qword [0x14015f508]
mov r9, rax
mov rdx, qword [0x14015f4f0]
lea rcx, [rbp - 0x80]
call fcn.1400189d0
mov rdx, rax
lea rcx, [0x14015f838]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f7f0]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f7f0]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f7a8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [r14 - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f7a8]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x14015e120]
mov rdx, qword [0x14015f728]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x14015e1d0]
mov rdx, qword [0x14015f520]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
lea rdx, [0x14015f7a8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x14015f4f0]
call fcn.140019910
lea rdx, [0x14015f7f0]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015f4f0]
call fcn.140019910
mov rax, qword [0x14015f5a8]
test rax, rax
je 0x14001b752
lea rcx, [rax + 2]
mov qword [0x14015f5a8], rcx
cmp dword [0x14015f4d0], 2
jne 0x14001b752
mov rax, qword [0x14015f9c0]
cmp qword [0x14015f9b8], rax
je 0x14001b752
mov rdi, qword [0x14015f550]
add rdi, rcx
lea rdx, [0x14015f970]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov rdx, rax
mov rcx, rdi
call fcn.140018e00
mov rsi, rax
mov r9, qword [0x14015f9c0]
sub r9, qword [0x14015f9b8]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b3a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015f4d0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015f4f0]
call fcn.140018e80
mov r14, rax
lea rdx, [0x14015f9b8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov rbx, r14
sub rbx, rdi
mov rdx, rax
mov rcx, r14
call fcn.1400190e0
sub rsi, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015f518], rax
add rax, 4
mov qword [0x14015f350], rax
mov qword [0x14015f3b8], rdi
mov qword [0x14015f548], r14
lea rdx, [0x14015f9a0]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r9, rax
mov r8, rdi
mov rdx, qword [0x14015f4f0]
lea rcx, [rbp - 0x80]
call fcn.1400189d0
mov rdx, rax
lea rcx, [0x14015f9a0]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f970]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f970]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f9b8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
lea rdx, [rsi - 5]
lea rcx, [rbp - 0x80]
call fcn.140019160
mov rdx, rax
lea rcx, [0x14015f9b8]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b540
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 5]
mov r8, qword [0x14015f5a8]
lea rdx, [rbp]
call fcn.140018af0
mov rbx, rax
lea rdx, [0x14015f9b8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r9d, 1
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140018bf0
mov rdx, rax
lea rcx, [0x14015f9b8]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f9b8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
lea r8, [rbx + 4]
mov r9d, 1
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140018bf0
mov rdx, rax
lea rcx, [0x14015f9b8]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
lea rdx, [0x14015f9b8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
lea r8, [rbx + 8]
mov r9d, 1
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140018bf0
mov rdx, rax
lea rcx, [0x14015f9b8]
call fcn.14002b190
lea rcx, [rbp - 0x80]
call fcn.14002b130
mov dword [rbp + 0x488], 0x3f800000
mov dword [rbp + 0x480], 0x3f800000
cmp byte [0x14015f3cc], 0
jne 0x14001b6c0
movss xmm0, dword [0x14015e204]
movss dword [rbp + 0x488], xmm0
movss xmm1, dword [0x14015e110]
movss dword [rbp + 0x480], xmm1
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x488]
mov rdx, qword [0x14015f518]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x14015f350]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
lea rdx, [0x14015f9b8]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015f4f0]
call fcn.140019910
lea rdx, [0x14015f970]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x14015f4f0]
call fcn.140019910
mov rcx, qword [0x14015f528]
test rcx, rcx
je 0x14001bee0
cmp dword [0x14015f3c0], 1
jne 0x14001bee0
mov rax, qword [0x14015f9d8]
cmp qword [0x14015f9d0], rax
je 0x14001bee0
mov r12, qword [0x14015f550]
add r12, rcx
lea rdx, [0x14015f898]
lea rcx, [rsp + 0x48]
call fcn.14002b230
mov rdx, rax
mov rcx, r12
call fcn.140018e00
mov r15, rax
mov r9, qword [0x14015f9d8]
sub r9, qword [0x14015f9d0]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b7d0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015f3c0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015f4f0]
call fcn.140018e80
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov rdx, r13
mov qword [rsp + 0x40], rdx
mov rax, qword [0x14015f9d8]
sub rax, qword [0x14015f9d0]
sar rax, 2
test rax, rax
je 0x14001b8da
movabs rcx, 0x3fffffffffffffff
cmp rax, rcx
ja 0x14001bfa1
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140032e30
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015f9d8]
mov rdx, qword [0x14015f9d0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov rdx, qword [rsp + 0x40]
jmp 0x14001b8df
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
sub rax, rcx
sar rax, 2
lea rbx, [r14 - 5]
add rbx, rax
test rcx, rcx
je 0x14001b941
sub rdx, rcx
sar rdx, 2
lea rdx, [rdx*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b92e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b92e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rsi, r14
sub rsi, r12
sub r15, rbx
lea rax, [r14 + 0x1000]
mov qword [0x14015f708], rax
mov qword [0x14015f6f0], r12
mov qword [0x14015f4d8], r14
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015f9f8]
sub rdx, qword [0x14015f9f0]
sar rdx, 2
test rdx, rdx
je 0x14001b9d6
movabs rax, 0x3fffffffffffffff
cmp rdx, rax
ja 0x14001bfa7
lea rcx, [rsp + 0x68]
call fcn.140032e30
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015f9f8]
mov rdx, qword [0x14015f9f0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
mov r8, qword [0x14015f528]
add r8, qword [0x14015f550]
lea r9, [rsp + 0x68]
mov rdx, qword [0x14015f4f0]
lea rcx, [rbp - 0x50]
call fcn.1400189d0
mov rbx, rax
lea rax, [0x14015f9f0]
cmp rax, rbx
je 0x14001ba98
mov r8, qword [0x14015f9f0]
test r8, r8
je 0x14001ba6d
mov rcx, qword [0x14015fa00]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001ba53
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001bad5
mov r8, rcx
mov rcx, r8
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [0x14015f9f0], xmm0
mov qword [0x14015fa00], r13
mov rax, qword [rbx]
mov qword [0x14015f9f0], rax
mov rax, qword [rbx + 8]
mov qword [0x14015f9f8], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015fa00], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001bae1
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001badc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001badc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015f8a0]
sub rdx, qword [0x14015f898]
sar rdx, 2
test rdx, rdx
je 0x14001bb51
movabs rax, 0x3fffffffffffffff
cmp rdx, rax
ja 0x14001bfad
lea rcx, [rsp + 0x68]
call fcn.140032e30
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015f8a0]
mov rdx, qword [0x14015f898]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
lea rdx, [rsi - 5]
lea rcx, [rbp - 0x50]
call fcn.140019160
mov rbx, rax
lea rax, [0x14015f898]
cmp rax, rbx
je 0x14001bc02
mov r8, qword [0x14015f898]
test r8, r8
je 0x14001bbd7
mov rcx, qword [0x14015f8a8]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001bbbd
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001bc3f
mov r8, rcx
mov rcx, r8
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [0x14015f898], xmm0
mov qword [0x14015f8a8], r13
mov rax, qword [rbx]
mov qword [0x14015f898], rax
mov rax, qword [rbx + 8]
mov qword [0x14015f8a0], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015f8a8], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001bc4b
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001bc46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001bc46
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015f9d8]
sub rdx, qword [0x14015f9d0]
sar rdx, 2
movabs rsi, 0x3fffffffffffffff
test rdx, rdx
je 0x14001bcbb
cmp rdx, rsi
ja 0x14001bfb3
lea rcx, [rsp + 0x68]
call fcn.140032e30
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015f9d8]
mov rdx, qword [0x14015f9d0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
lea rdx, [r15 - 5]
lea rcx, [rbp - 0x50]
call fcn.140019160
mov rbx, rax
lea rax, [0x14015f9d0]
cmp rax, rbx
je 0x14001bd6c
mov r8, qword [0x14015f9d0]
test r8, r8
je 0x14001bd41
mov rcx, qword [0x14015f9e0]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001bd27
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001bda9
mov r8, rcx
mov rcx, r8
call fcn.1400effc0
mov qword [0x14015f9d0], r13
xorps xmm0, xmm0
movdqu xmmword [0x14015f9d8], xmm0
mov rax, qword [rbx]
mov qword [0x14015f9d0], rax
mov rax, qword [rbx + 8]
mov qword [0x14015f9d8], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015f9e0], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001bdc1
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001bdb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001bdb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
mov qword [rbp - 0x50], r13
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp + 0x480], 0x3f19999a
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x14015f708]
mov rcx, qword [0x14015f4f0]
call qword [sym.imp.KERNEL32.DLL_WriteProcessMemory]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015f9d8]
sub rdx, qword [0x14015f9d0]
sar rdx, 2
test rdx, rdx
je 0x14001be57
cmp rdx, rsi
ja 0x14001bfb9
lea rcx, [rsp + 0x68]
call fcn.140032e30
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015f9d8]
mov rdx, qword [0x14015f9d0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
mov rdx, r14
mov rcx, qword [0x14015f4f0]
call fcn.140019910
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov rdx, qword [0x14015f8a0]
sub rdx, qword [0x14015f898]
sar rdx, 2
test rdx, rdx
je 0x14001becc
cmp rdx, rsi
ja 0x14001bf53
lea rcx, [rbp - 0x38]
call fcn.140032e30
mov rdi, qword [rbp - 0x38]
mov rbx, qword [0x14015f8a0]
mov rdx, qword [0x14015f898]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x30], rax
lea r8, [rbp - 0x38]
mov rdx, r12
mov rcx, qword [0x14015f4f0]
call fcn.140019910
nop
mov rcx, qword [rbp + 0x490]
test rcx, rcx
je 0x14001bf23
mov rdx, qword [rbp + 0x4a0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001bf1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001bf1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400effc0
mov rcx, qword [rbp + 0x4a8]
xor rcx, rsp
call fcn.1400effa0
lea r11, [rsp + 0x5b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14002efd0
nop
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
nop
call fcn.14002efd0
nop
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3
call fcn.14002efd0
int3