Function at 0x140003960
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x290
mov rax, qword [0x140044080]
xor rax, rsp
mov qword [rsp + 0x280], rax
mov rdi, rdx
mov ebx, ecx
lea rcx, str.start_C:WindowsSystem32111.exe
call fcn.1400161d8
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
movdqa xmm1, xmmword [0x14003d880]
movdqa xmmword [rsp + 0x110], xmm1
mov byte [rsp + 0x100], 0
movups xmmword [rsp + 0x120], xmm0
xor r13d, r13d
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], r13b
mov r8, rdi
mov edx, ebx
lea rcx, [rsp + 0x100]
call fcn.140001fc0
test al, al
jne 0x140003bbb
lea rdx, str.Usage:
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
lea rdx, str.__1337patch__patch_file___process_name___options_
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
lea rdx, str.__1337patch__patch_file___pid__pid___options_
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
mov rcx, rax
call fcn.140009bd0
lea rdx, str.__patch_file:___path_to_a_x64dbg_.1337_patch_file
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
lea rdx, str.__process_name:_image_name_of_the_process_to_patch
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
lea rdx, str.__pid:__________process_ID_of_the_process_to_patch
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
mov rcx, rax
call fcn.140009bd0
lea rdx, str.Allowed_options:
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
lea rdx, str.___revert:_revert_previously_applied_patches
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
lea rdx, str.___force:__apply_revert_patches_even_if_patch_locations_contain_unexpected_data
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x140003b55
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x140003bb4
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003baf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
xor eax, eax
jmp 0x14000498c
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x38]
call fcn.1400028e0
nop
cmp qword [rsp + 0x130], 0
jne 0x140003be5
mov edi, dword [rsp + 0x140]
jmp 0x140003de7
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x1400049b9
mov dword [rsp + 0x150], 0x130
lea rdx, [rsp + 0x150]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1400049ea
lea r8, [rsp + 0x120]
cmp qword [rsp + 0x138], 0x10
cmovae r8, qword [rsp + 0x120]
lea rax, [rsp + 0x17c]
sub r8, rax
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140003c63
inc rax
test ecx, ecx
jne 0x140003c50
test edx, edx
je 0x140003c87
lea rdx, [rsp + 0x150]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140003c25
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140003ca0
mov edi, dword [rsp + 0x158]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 0xffffffff
jne 0x140003de7
lea rdx, [0x14003d39d]
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140003d3b
mov rdx, qword [rsp + 0x40]
call fcn.14000a1f0
mov rcx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x38]
sub rcx, r8
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 4
mov rax, r8
cmp rdx, 0x1000
jb 0x140003d25
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, r8
call fcn.14000d040
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x140003d7e
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003d79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x140003ddd
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003dd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
mov eax, 3
jmp 0x14000498c
mov r8d, edi
xor edx, edx
lea ecx, [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140004a1c
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.140003390
nop
cmp byte [rsp + 0x145], 0
jne 0x14000442d
movzx r9d, byte [rsp + 0x144]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.140003840
test al, al
jne 0x14000442d
cmp byte [rsp + 0x144], al
sete r14b
mov rdi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x38]
nop
cmp rdi, r15
je 0x140004198
mov rsi, qword [rsp + 0x40]
cmp rbx, rsi
je 0x14000418f
add rbx, 0x20
nop dword [rax + rax]
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140003e8d
mov rdx, qword [rdi]
lea rcx, [rbx - 0x20]
cmp qword [rbx - 8], 0x10
jb 0x140003e9b
mov rcx, qword [rcx]
call fcn.14001d2e4
test eax, eax
jne 0x140004179
mov rdx, qword [rdi + 0x20]
add rdx, qword [rbx]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rsp + 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140004a4e
cmp qword [rsp + 0x68], 1
jne 0x140004a4e
test r14b, r14b
je 0x140003eec
movzx eax, byte [rbx + 9]
jmp 0x140003ef0
movzx eax, byte [rbx + 8]
cmp byte [rsp + 0x30], al
je 0x140004179
lea rdx, [0x14003d39d]
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
nop
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x140003fed
mov rdi, qword [rsp + 0x58]
cmp rbx, rdi
je 0x140003f87
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140003f6a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140003f65
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004ab1
mov rcx, r8
call fcn.14000d040
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x140003f30
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003fd7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab1
mov rcx, rbx
call fcn.14000d040
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x1400040cd
mov rdi, qword [rsp + 0x40]
cmp rbx, rdi
je 0x140004067
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000404a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140004045
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, r8
call fcn.14000d040
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x30
cmp rbx, rdi
jne 0x140004010
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 4
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400040b7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, rbx
call fcn.14000d040
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x140004110
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000410b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000416f
inc rdx
mov rcx, qword [rsp + 0x100]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14000416a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x140004abd
call fcn.14000d040
mov eax, 2
jmp 0x14000498c
add rbx, 0x30
lea rax, [rbx - 0x20]
cmp rax, rsi
jne 0x140003e80
mov rbx, qword [rsp + 0x38]
add rdi, 0x28
jmp 0x140003e60
lea rdx, [0x14003d39d]
lea rcx, [0x140045550]
cmp byte [rsp + 0x144], 0
jne 0x1400041bf
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
jmp 0x1400041cd
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
nop
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x1400042a2
mov rdi, qword [rsp + 0x58]
cmp rbx, rdi
je 0x14000423c
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000421f
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000421a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004ab1
mov rcx, r8
call fcn.14000d040
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x1400041e5
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000428c
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab1
mov rcx, rbx
call fcn.14000d040
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x140004381
mov rdi, qword [rsp + 0x40]
cmp rbx, rdi
je 0x14000431b
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1400042fe
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400042f9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, r8
call fcn.14000d040
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x30
cmp rbx, rdi
jne 0x1400042c4
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 4
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000436b
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, rbx
call fcn.14000d040
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x1400043c4
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400043bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x140004423
inc rdx
mov rcx, qword [rsp + 0x100]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14000441e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x140004abd
call fcn.14000d040
mov eax, 1
jmp 0x14000498c
movzx r14d, byte [rsp + 0x144]
mov rbx, qword [rsp + 0x50]
mov rdi, rbx
mov r15, qword [rsp + 0x58]
mov rax, qword [rsp + 0x38]
nop dword [rax + rax]
cmp rdi, r15
je 0x140004500
mov rsi, qword [rsp + 0x40]
cmp rax, rsi
je 0x1400044f7
lea rbx, [rax + 0x28]
nop dword [rax + rax]
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14000447d
mov rdx, qword [rdi]
lea rcx, [rbx - 0x28]
cmp qword [rbx - 0x10], 0x10
jb 0x14000448b
mov rcx, qword [rcx]
call fcn.14001d2e4
test eax, eax
jne 0x1400044e0
test r14b, r14b
je 0x14000449e
movzx eax, byte [rbx]
jmp 0x1400044a2
movzx eax, byte [rbx + 1]
mov byte [rsp + 0x30], al
mov rdx, qword [rbx - 8]
add rdx, qword [rdi + 0x20]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [rsp + 0x30]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140004a7f
cmp qword [rsp + 0x68], 1
jne 0x140004a7f
add rbx, 0x30
lea rax, [rbx - 0x28]
cmp rax, rsi
jne 0x140004470
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x50]
add rdi, 0x28
jmp 0x140004450
cmp byte [rsp + 0x144], 0
jne 0x140004766
test rbx, rbx
je 0x1400045de
mov rdi, qword [rsp + 0x58]
cmp rbx, rdi
je 0x140004578
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000455b
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140004556
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004ab1
mov rcx, r8
call fcn.14000d040
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x28
cmp rbx, rdi
jne 0x140004521
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x60]
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400045c8
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab1
mov rcx, rbx
call fcn.14000d040
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x1400046bd
mov rdi, qword [rsp + 0x40]
cmp rbx, rdi
je 0x140004657
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000463a
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140004635
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, r8
call fcn.14000d040
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x30
cmp rbx, rdi
jne 0x140004600
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 4
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400046a7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, rbx
call fcn.14000d040
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x140004700
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x14000475f
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000475a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
xor eax, eax
jmp 0x14000498c
lea rdx, [0x14003d39d]
lea rcx, [0x140045550]
call fcn.140009920
mov rcx, rax
call fcn.140009bd0
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140004801
mov rdx, qword [rsp + 0x58]
call fcn.14000a160
mov rcx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x50]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x1400047eb
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab1
mov rcx, r8
call fcn.14000d040
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x1400048e0
mov rdi, qword [rsp + 0x40]
cmp rbx, rdi
je 0x14000487a
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000485d
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140004858
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, r8
call fcn.14000d040
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x30
cmp rbx, rdi
jne 0x140004823
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 4
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400048ca
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ab7
mov rcx, rbx
call fcn.14000d040
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x140004923
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000491e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], 0xf
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0x10
jb 0x140004983
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000497d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004abd
call fcn.14000d040
nop
xor eax, eax
jmp 0x14000498c
mov rcx, qword [rsp + 0x280]
xor rcx, rsp
call fcn.14000d020
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14003d6d0]
lea rcx, [rsp + 0x80]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0x80]
call fcn.14000edd4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14003d6f0]
lea rcx, [rsp + 0x98]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0x98]
call fcn.14000edd4
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14003d728]
lea rcx, [rsp + 0xb0]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0xb0]
call fcn.14000edd4
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14003d6a0]
lea rcx, [rsp + 0xc8]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0xc8]
call fcn.14000edd4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x14003d6b8]
lea rcx, [rsp + 0xe0]
call fcn.140002350
lea rdx, [0x140042650]
lea rcx, [rsp + 0xe0]
call fcn.14000edd4
nop
call fcn.14001895c
nop
call fcn.14001895c
nop
call fcn.14001895c
int3