Function at 0x140040910
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x358
movaps xmmword [rsp + 0x340], xmm6
mov rax, qword [0x1402b3040]
xor rax, rsp
mov qword [rsp + 0x338], rax
cmp qword [rcx + 0x18], 0
je 0x140041a3b
mov rsi, rcx
lea r14, [rsp + 0x138]
xorps xmm6, xmm6
movups xmmword [r14], xmm6
mov qword [r14 - 8], r14
lea r13, [rcx + 8]
mov r15, qword [rcx + 0x10]
cmp r15, r13
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], r13
je 0x1400418cd
xor r12d, r12d
lea rcx, [r15 + 0x10]
call fcn.140041c20
test al, al
jne 0x1400411e7
mov r15, qword [r15 + 8]
cmp r15, r13
jne 0x14004097c
mov rcx, qword [rsp + 0x138]
lea rbx, [r12 + 0x10]
test r12, r12
cmove rbx, r12
movabs rdi, 0xaaaaaaaaaaaaaaaa
call fcn.1400176c0
mov rcx, rbx
call fcn.14018f798
mov r14, rax
test rbx, rbx
mov qword [rsp + 0x78], rax
jne 0x140041698
mov rax, qword [rsi]
test rax, rax
je 0x140041a5b
mov qword [rsp + 0x98], 0
cmp qword [rsi + 0x18], 0
je 0x140041156
mov rcx, qword [rax]
mov dword [rsp + 0x20], 1
mov r8d, 0x10000
mov qword [rsp + 0x70], rcx
xor edx, edx
mov r9d, 0x2000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov rsi, qword [rsi + 0x18]
shl rsi, 6
lea rax, [rsi + 0x60]
mov qword [rsp + 0x60], rax
cmp rax, 0x10001
jae 0x140041a42
mov r14d, 0xffa0
sub r14d, esi
and r14d, 0xffffffe0
inc r14
mov rax, 0xffffffffffffffff
xor edx, edx
div r14
mov r15, 0xfffffffffffffffe
sub r15, rdx
lea r12, [rsp + 0x238]
lea rbx, [rsp + 0x130]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x130], r12
mov qword [rsp + 0x138], 8
mov rcx, rbx
call fcn.14011ebb0
mov rax, qword [rsp + 0x238]
cmp rax, r15
ja 0x140040a6f
mov edx, 0x800
mov r9d, 0x1000
mov r8d, 0x800
mov r15, qword [rsp + 0x60]
mov rcx, r9
shr r8, 1
mov r9, rdx
cmp rdx, r15
mov rdx, r8
jae 0x140040ac0
xor edx, edx
div r14
mov rbx, rdx
neg ecx
and ebx, ecx
mov eax, ebx
and eax, 0xfffff000
add rdi, rax
add rsi, 0x105f
and rsi, 0xfffffffffffff000
mov dword [rsp + 0x20], 0x40
mov rcx, qword [rsp + 0x70]
mov rdx, rdi
mov r8, rsi
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test rax, rax
je 0x140041a45
mov rdi, rax
lea rcx, [rsp + 0x130]
mov r8d, 0x108
mov dl, 0xaa
call fcn.1401cdd80
lea rcx, [0x14029e370]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x88], rax
test rax, rax
mov rsi, qword [rsp + 0x58]
je 0x140041a5e
movaps xmm6, xmmword [0x14026f080]
movups xmmword [rsp + 0x2e8], xmm6
movups xmmword [rsp + 0x328], xmm6
movups xmmword [rsp + 0x318], xmm6
movups xmmword [rsp + 0x308], xmm6
movups xmmword [rsp + 0x2f8], xmm6
mov qword [rsp + 0x2d8], r15
mov dword [rsp + 0x2f0], 0
mov qword [rsp + 0x2e0], Ordinal_41
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x128], rax
movups xmmword [rsp + 0x118], xmm6
movups xmmword [rsp + 0x108], xmm6
mov rax, qword [rsi]
test rax, rax
je 0x140041a48
and ebx, 0xfff
add rdi, rbx
mov qword [rsp + 0x80], rdi
mov rax, qword [rax]
lea rcx, [0x140270d40]
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x118], 0
mov qword [rsp + 0x120], rax
mov byte [rsp + 0x128], 1
mov dword [rsp + 0x12c], 0
lea rcx, [rsp + 0x238]
mov r8d, 0xa0
xor edx, edx
call fcn.1401cdd80
mov r14, qword [rsi + 0x10]
cmp r14, r13
je 0x140041017
lea rbp, [rsp + 0xa8]
lea r12, [rsp + 0xc0]
lea rsi, [rsp + 0xd8]
mov rax, qword [rsp + 0x80]
lea rdi, [rax + 0x20]
mov dword [rsp + 0x50], 0xaaaaaaaa
lea rbx, [rsp + 0x100]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x48], rax
jmp 0x140040df2
mov rdx, qword [r14 + 0x18]
mov r8, qword [r14 + 0x20]
mov rcx, rbp
call fcn.140145f50
jmp 0x140040e56
mov rcx, qword [rsp + 0xa8]
call fcn.14018f5a0
jmp 0x140040dd4
mov r9, qword [rsp + 0xc0]
mov r8, r15
sub r8, qword [rsp + 0x2e0]
movsxd r15, dword [rsp + 0x2f0]
shl r15, 6
add r15, rdi
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov rcx, rbx
mov rdx, qword [rsp + 0x88]
xor r8d, r8d
call qword [0x1402a3ee8]
test eax, eax
js 0x140041973
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x20]
mov rcx, rbx
call qword [0x1402a3ee8]
test rax, rax
je 0x14004193d
mov rcx, rax
call fcn.14018f798
mov r13, rax
mov rcx, rbx
mov rdx, r13
call fcn.140029990
test al, al
je 0x140041945
mov rcx, rbx
mov rdx, r13
mov r8, r15
call fcn.140029ae0
mov ebp, eax
test r13, r13
mov r15, qword [rsp + 0x60]
je 0x140040d6b
mov rcx, r13
call fcn.14018f5e4
test ebp, ebp
js 0x14004197a
movsxd rax, dword [rsp + 0x2f0]
shl rax, 6
add rax, rdi
movsxd rcx, dword [rsp + 0xa4]
mov qword [rsp + rcx*8 + 0x238], rax
inc dword [rsp + 0x2f0]
add qword [rsp + 0x2e0], 0x40
mov bpl, 1
mov r13, qword [rsp + 0x68]
cmp byte [rsp + 0xef], 0
js 0x14004194f
cmp byte [rsp + 0xd7], 0
js 0x140041961
cmp byte [rsp + 0xbf], 0
js 0x140040c9d
test bpl, bpl
je 0x1400419e4
mov r14, qword [r14 + 8]
cmp r14, r13
lea rbp, [rsp + 0xa8]
je 0x140041017
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xf0], rax
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
mov rax, qword [r14 + 0x10]
mov qword [rsp + 0xa0], rax
cmp byte [r14 + 0x2f], 0
js 0x140040c88
lea rax, [r14 + 0x18]
mov rcx, qword [rax + 0x10]
mov qword [rbp + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
cmp byte [r14 + 0x47], 0
js 0x1400419a2
lea rax, [r14 + 0x30]
mov rcx, qword [rax + 0x10]
mov qword [r12 + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
cmp byte [r14 + 0x5f], 0
js 0x1400419b7
lea rax, [r14 + 0x48]
mov rcx, qword [rax + 0x10]
mov qword [rsi + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [rsi], xmm0
mov rcx, qword [r14 + 0x60]
mov qword [rsp + 0xf0], rcx
movsx rax, byte [rsp + 0xbf]
test rax, rax
mov r8, qword [rsp + 0xb0]
cmovns r8, rax
mov rdx, qword [rsp + 0xa8]
cmovs rbp, rdx
test r8, r8
js 0x14004192a
sete r10b
test rbp, rbp
setne r11b
or r11b, r10b
je 0x140041917
cmp r8, 9
jne 0x1400418fe
cmp word [rbp], 0x6e
jne 0x1400418fe
lea r8, [rdx + 2]
test al, al
lea r9, [rsp + 0xaa]
cmovns r8, r9
cmp word [r8], 0x74
jne 0x1400418fe
lea r8, [rdx + 4]
test al, al
lea r9, [rsp + 0xac]
cmovns r8, r9
cmp word [r8], 0x64
jne 0x1400418fe
lea r8, [rdx + 6]
test al, al
lea r9, [rsp + 0xae]
cmovns r8, r9
cmp word [r8], 0x6c
jne 0x1400418fe
lea r8, [rdx + 8]
test al, al
lea r9, [rsp + 0xb0]
cmovns r8, r9
cmp word [r8], 0x6c
jne 0x1400418fe
lea r8, [rdx + 0xa]
test al, al
lea r9, [rsp + 0xb2]
cmovns r8, r9
cmp word [r8], 0x2e
jne 0x1400418fe
lea r8, [rdx + 0xc]
test al, al
lea r9, [rsp + 0xb4]
cmovns r8, r9
cmp word [r8], 0x64
jne 0x1400418fe
lea r8, [rdx + 0xe]
test al, al
lea r9, [rsp + 0xb6]
cmovns r8, r9
cmp word [r8], 0x6c
jne 0x1400418fe
add rdx, 0x10
test al, al
lea rax, [rsp + 0xb8]
cmovns rdx, rax
xor ebp, ebp
cmp word [rdx], 0x6c
jne 0x140041900
cmp dword [rsp + 0xa0], 1
jne 0x140041900
cmp byte [rsp + 0xef], 0
mov rdx, rsi
jns 0x140041001
mov rdx, qword [rsp + 0xd8]
cmp byte [rsp + 0xd7], 0
mov r9, r12
jns 0x140040cb7
jmp 0x140040caf
lea rsi, [rsp + 0x130]
lea rdx, [rsp + 0x238]
mov r8d, 0x100
mov rcx, rsi
call fcn.1401cd6e0
mov qword [rsi + 0x100], 1
lea rax, [rsp + 0xa0]
movabs rdi, 0xaaaaaaaaaaaaaaaa
mov qword [rax], rdi
lea r8, [rsp + 0x1d0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x80]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ebp, Ordinal_46
test eax, eax
mov r14, qword [rsp + 0x78]
je 0x140041a4b
cmp qword [rsp + 0xa0], 0x20
mov rsi, qword [rsp + 0x58]
jne 0x140041146
lea rax, [rsp + 0x100]
mov dword [rax], 0xaaaaaaaa
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x70]
mov rdx, rbx
mov r8, r15
mov r9d, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rax, qword [rsi]
test rax, rax
je 0x140041a55
cmp qword [rsp + 0x230], 1
jne 0x1400419cc
cmp dword [rax + 0x10], 0
mov rcx, qword [rax]
je 0x140041a6d
mov qword [rsp + 0x238], rdi
lea rax, [rsp + 0x238]
mov qword [rsp + 0x20], rax
lea rdx, [0x1402cc9d8]
lea r8, [rsp + 0x130]
mov r9d, 0xa0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor ecx, ecx
cmp qword [rsp + 0x238], 0xa0
mov edx, 0x3a
cmove edx, ecx
test eax, eax
mov ebp, 0x39
cmovne ebp, edx
test ebp, ebp
jne 0x1400411a6
mov rax, qword [rsi]
test rax, rax
je 0x140041a58
cmp dword [rax + 0x10], 0
mov rcx, qword [rax]
je 0x140041a95
lea rsi, [rsp + 0x130]
mov qword [rsi], rdi
mov qword [rsp + 0x20], rsi
lea rdx, [0x1402ccae8]
lea r8, [rsp + 0x98]
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor ecx, ecx
cmp qword [rsi], 8
mov edx, 0x3a
cmove edx, ecx
test eax, eax
mov ebp, 0x39
cmovne ebp, edx
mov r15d, ebp
test r14, r14
je 0x1400411b6
mov rcx, r14
call fcn.14018f5e4
mov esi, r15d
mov rcx, qword [rsp + 0x338]
xor rcx, rsp
call fcn.140191d70
mov eax, esi
movaps xmm6, xmmword [rsp + 0x340]
add rsp, 0x358
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rsi, [r15 + 0x18]
mov r13, qword [rsp + 0x138]
test r13, r13
jne 0x140041b73
movsx rax, byte [r15 + 0x2f]
test rax, rax
jns 0x140041ad4
mov rcx, qword [r15 + 0x20]
lea rbx, [rcx*2 + 0x23]
and rbx, 0xfffffffffffffff8
add rbx, r12
mov r10, qword [rsp + 0x138]
mov r13, r14
mov r12, r14
test r10, r10
je 0x14004134a
movsx rdx, byte [r10 + 0x37]
mov rcx, rdx
test rdx, rdx
jns 0x140041245
mov rcx, qword [r10 + 0x28]
test rcx, rcx
js 0x14004192a
test dl, dl
js 0x140041258
lea r9, [r10 + 0x20]
jmp 0x14004125c
mov r9, qword [r10 + 0x20]
mov rdx, rsi
test al, al
jns 0x14004126b
mov rax, qword [r15 + 0x20]
mov rdx, qword [r15 + 0x18]
test rax, rax
sete r11b
test rdx, rdx
setne r8b
or r8b, r11b
mov r12, r10
test r9, r9
jne 0x14004128d
test rcx, rcx
jne 0x140041917
test rax, rax
js 0x14004192a
test r8b, r8b
je 0x140041917
cmp rcx, rax
mov r10, rax
cmovb r10, rcx
test r10, r10
je 0x1400412c7
xor r11d, r11d
movzx edi, word [r9 + r11*2]
cmp word [rdx + r11*2], di
ja 0x1400412d0
jb 0x140041306
inc r11
cmp r10, r11
jne 0x1400412b1
cmp rax, rcx
jne 0x1400418e8
test r10, r10
mov r13, qword [rsp + 0x68]
je 0x1400412f3
xor r11d, r11d
movzx edi, word [rdx + r11*2]
cmp word [r9 + r11*2], di
ja 0x1400412fc
jb 0x14004133b
inc r11
cmp r10, r11
jne 0x1400412dd
cmp rcx, rax
jne 0x1400418f3
mov rsi, qword [rsp + 0x58]
jmp 0x1400413b9
mov r10, qword [r12]
mov r13, r12
test r10, r10
je 0x14004134a
movsx rcx, byte [r10 + 0x37]
test rcx, rcx
js 0x140041322
lea r9, [r10 + 0x20]
jmp 0x14004132a
mov rcx, qword [r10 + 0x28]
mov r9, qword [r10 + 0x20]
mov r12, r10
test rcx, rcx
jns 0x14004127f
jmp 0x14004192a
mov r10, qword [r12 + 8]
test r10, r10
jne 0x140041312
lea r13, [r12 + 8]
mov ecx, 0x38
call fcn.14018f5a8
mov rcx, rax
add rcx, 0x20
je 0x1400419d1
mov rdi, rax
cmp byte [r15 + 0x2f], 0
jns 0x1400413f7
mov rdx, qword [r15 + 0x18]
mov r8, qword [r15 + 0x20]
call fcn.140145f50
mov rsi, qword [rsp + 0x58]
movups xmmword [rdi], xmm6
mov qword [rdi + 0x10], r12
mov qword [r13], rdi
mov rax, qword [rsp + 0x130]
mov rax, qword [rax]
test rax, rax
jne 0x1400413e9
mov rcx, qword [rsp + 0x138]
mov rdx, rdi
call fcn.14013f5a0
inc qword [rsp + 0x140]
mov r13, qword [rsp + 0x68]
movsx rax, byte [r15 + 0x47]
test rax, rax
js 0x140041adc
movsx rcx, byte [r15 + 0x5f]
test rcx, rcx
js 0x140041ae5
lea r12, [rax + rcx]
add r12, 0x21
and r12, 0xfffffffffffffff8
add r12, rbx
jmp 0x14004098d
mov qword [rsp + 0x130], rax
mov rdi, qword [r13]
jmp 0x14004139c
mov rax, qword [rsi + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsi]
movups xmmword [rcx], xmm0
jmp 0x14004137c
test rax, rax
je 0x14004142a
xor r8d, r8d
movzx r9d, word [rdx + r8*2]
cmp r9w, word [rcx + r8*2]
jne 0x1400415f5
inc r8
cmp rax, r8
jne 0x140041412
mov rax, qword [rsp + 0x88]
cmp byte [rax + 0x18], 1
mov rbx, qword [rsp + 0x60]
jne 0x140041484
movsx rax, byte [rsi + 0x47]
test rax, rax
js 0x14004144d
lea rcx, [rsi + 0x30]
jmp 0x140041455
mov rax, qword [rsi + 0x38]
mov rcx, qword [rsi + 0x30]
test rax, rax
js 0x14004192a
sete dl
test rcx, rcx
setne r8b
or r8b, dl
je 0x140041917
cmp rax, 1
jne 0x140041abd
cmp byte [rcx], 0x40
jne 0x140041abd
movsx r13, byte [rsi + 0x47]
test r13, r13
jns 0x140041492
mov r13, qword [rsi + 0x38]
movsx r12, byte [rsi + 0x5f]
test r12, r12
jns 0x1400414a0
mov r12, qword [rsi + 0x50]
lea r14, [r12 + r13]
add r14, 0x21
and r14, 0xfffffffffffffff8
mov r15, rbx
sub r15, r14
jb 0x140041bf3
lea rax, [rsi + 0x48]
mov qword [rsp + 0x80], rax
lea rcx, [rsi + 0x30]
mov qword [r11], r14
mov eax, dword [rsi + 0x10]
mov dword [r11 + 8], eax
mov eax, dword [rsi + 0x14]
mov dword [r11 + 0xc], eax
mov rax, qword [rsi + 0x60]
mov qword [r11 + 0x10], rax
lea rdx, [r11 + 0x18]
mov qword [rsp + 0x90], rcx
mov r8, r13
xor r9d, r9d
mov rbx, r11
call fcn.140041da0
lea rax, [rbx + r13]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], rbx
lea rdx, [rbx + r13]
add rdx, 0x19
xor r13d, r13d
mov byte [rdx - 1], r13b
mov rcx, qword [rsp + 0x80]
mov r8, r12
xor r9d, r9d
call fcn.140041da0
mov rax, qword [rsp + 0x50]
mov byte [r12 + rax + 1], r13b
mov rax, qword [rsp + 0x88]
inc qword [rax + 0x10]
add qword [rax], r14
cmp rbp, rsi
jne 0x140041551
mov rbp, qword [rbp + 8]
mov r13, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x48]
mov rax, qword [rsi]
mov r12, qword [rsi + 8]
mov qword [rax + 8], r12
mov rax, qword [rsi]
mov qword [r12], rax
mov rax, qword [rsp + 0x58]
dec qword [rax + 0x18]
cmp byte [rsi + 0x5f], 0
mov rax, qword [rsp + 0x60]
js 0x140041b3f
cmp byte [rsi + 0x47], 0
js 0x140041b59
cmp byte [rsi + 0x2f], 0
js 0x1400418d6
test rsi, rsi
je 0x140041b08
add rax, r14
mov rcx, rsi
mov rsi, rax
call fcn.14018f5a0
mov r11, rsi
mov qword [rsp + 0x60], r15
mov r14, qword [rsp + 0x78]
lea r15, [rsp + 0x130]
jmp 0x1400415f9
mov r8, qword [rsi + 0x20]
mov rdx, qword [rsi + 0x18]
test r8, r8
js 0x14004192a
sete r9b
test rdx, rdx
setne r10b
or r10b, r9b
je 0x140041917
cmp r8, rax
je 0x14004140a
mov r12, qword [rsi + 8]
mov rsi, r12
cmp r12, r13
je 0x140041654
lea rdi, [rsi + 0x18]
movsx rax, byte [rsp + 0x147]
test rax, rax
cmovs rax, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x130]
cmovns rcx, r15
test rax, rax
js 0x14004192a
sete dl
test rcx, rcx
setne r8b
or r8b, dl
je 0x140041917
movsx r8, byte [rsi + 0x2f]
mov rdx, rdi
test r8, r8
jns 0x1400415cf
jmp 0x1400415c7
inc qword [rsp + 0x70]
mov sil, 1
mov r12, qword [rsp + 0x60]
mov rdi, r11
mov qword [rsp + 0x88], r11
cmp byte [rsp + 0x147], 0
jns 0x140041683
mov rcx, qword [rsp + 0x130]
call fcn.14018f5a0
mov r15d, Ordinal_41
test sil, sil
mov rsi, qword [rsp + 0x58]
jne 0x1400416d5
jmp 0x1400411a9
cmp byte [rsi + 0x20], 1
mov qword [rsp + 0x48], rbx
je 0x140041b1b
xor eax, eax
lea rdi, [r14 + 0x10]
mov qword [r14 + 8], rax
lea r12, [rbx - 0x10]
mov rbp, qword [rsi + 0x10]
movaps xmm6, xmmword [0x14026f080]
mov qword [rsp + 0x88], rdi
xor eax, eax
mov qword [rsp + 0x70], rax
jmp 0x1400416d5
mov rbp, qword [rbp + 8]
cmp rbp, r13
je 0x1400417bc
lea rcx, [rbp + 0x10]
call fcn.140041c20
test al, al
je 0x1400416d1
lea rsi, [rbp + 0x18]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x140], rax
movaps xmmword [rsp + 0x130], xmm6
mov al, byte [rbp + 0x2f]
test al, al
jns 0x140041bcf
mov rdx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x20]
lea r15, [rsp + 0x130]
mov rcx, r15
call fcn.140145f50
mov al, byte [rbp + 0x2f]
test al, al
jns 0x140041739
mov rax, qword [rbp + 0x20]
jmp 0x14004173c
movzx eax, al
lea rax, [rax*2 + 0x23]
and rax, 0xfffffffffffffff8
mov rcx, r12
sub rcx, rax
mov qword [rsp + 0x60], rcx
jb 0x140041acd
cmp dword [rbp + 0x10], 3
sete byte [rdi + 0x18]
mov qword [rdi], rax
mov r12, rax
mov qword [rdi + 8], rax
mov qword [rdi + 0x10], 0
movsx r8, byte [rbp + 0x2f]
test r8, r8
jns 0x140041781
mov r8, qword [rbp + 0x20]
lea rdx, [rdi + 0x1a]
mov rcx, rsi
xor r9d, r9d
call fcn.140041e10
movsx rax, byte [rbp + 0x2f]
test rax, rax
jns 0x14004179e
mov rax, qword [rbp + 0x20]
mov r11, r12
add r11, rdi
mov word [rdi + rax*2 + 0x1a], 0
cmp rbp, r13
je 0x140041654
mov rsi, rbp
jmp 0x140041601
mov rax, qword [rsp + 0x70]
mov qword [r14], rax
movabs r15, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x98], r15
mov rax, qword [rsi]
test rax, rax
je 0x140041a5b
mov rsi, qword [rax]
mov dword [rsp + 0x20], 4
mov rcx, rsi
xor edx, edx
mov r8, rbx
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ebp, Ordinal_41
test rax, rax
je 0x1400411a6
mov rdi, rax
mov qword [rsp + 0x130], r15
lea rax, [rsp + 0x130]
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, rdi
mov r8, r14
mov r9, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140041aee
cmp qword [rsp + 0x130], rbx
jne 0x140041aee
mov qword [rsp + 0x98], rdi
lea rax, [0x14024eba0]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
lea rsi, [0x14029e370]
lea r8, str.NtMapViewOfSection
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
mov rdx, rsi
mov r9d, 1
call fcn.14003e590
lea rax, [0x14024ec10]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 1
lea r8, str.NtUnmapViewOfSection
mov rcx, rdi
mov rdx, rsi
mov rsi, rdi
mov r9d, 1
call fcn.14003e590
mov rax, qword [rdi]
test rax, rax
jne 0x1400409f5
int3
xor ecx, ecx
xor ebx, ebx
jmp 0x1400409aa
mov rcx, qword [rdi]
call fcn.14018f5a0
mov rax, qword [rsp + 0x60]
jmp 0x140041599
jb 0x140041306
jmp 0x1400412d0
jb 0x14004133b
jmp 0x1400412fc
xor ebp, ebp
mov eax, 2
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], 2
jmp 0x140040daa
lea rcx, [0x1402742d5]
lea rdx, str....._third_partylibc_srcinclude_string_view:320:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.1401ceaf0
lea rcx, [0x1402742d5]
lea rdx, str....._third_partylibc_srcinclude_string_view:318:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.1401ceaf0
xor r13d, r13d
jmp 0x140040d36
mov ebp, 0xc0000035
jmp 0x140040d59
mov rcx, qword [rsp + 0xd8]
call fcn.14018f5a0
jmp 0x140040db8
mov rcx, qword [rsp + 0xc0]
call fcn.14018f5a0
jmp 0x140040dc6
mov ebp, eax
mov r15, qword [rsp + 0x60]
mov ecx, ebp
call fcn.140239cc0
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rsp + 0x50], Ordinal_41
xor ebp, ebp
mov eax, 2
mov qword [rsp + 0x48], rax
jmp 0x140040da5
mov rdx, qword [r14 + 0x30]
mov r8, qword [r14 + 0x38]
mov rcx, r12
call fcn.14011ed20
jmp 0x140040e76
mov rdx, qword [r14 + 0x48]
mov r8, qword [r14 + 0x50]
mov rcx, rsi
call fcn.14011ed20
jmp 0x140040e93
call fcn.14020bd90
lea rcx, [0x1402742d5]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.1401ceaf0
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x130], eax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x230], rax
cmp rax, 1
je 0x140041040
cmp qword [rsp + 0x48], 2
mov rsi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x78]
movabs rdi, 0xaaaaaaaaaaaaaaaa
mov ebp, dword [rsp + 0x50]
je 0x140041146
cmp qword [rsp + 0x48], 0
je 0x140041c0f
call fcn.14020bd90
xor esi, esi
jmp 0x1400411b9
int3
int3
int3
mov rsi, qword [rsp + 0x58]
jmp 0x140041146
int3
int3
int3
mov ebp, 7
mov r14, qword [rsp + 0x78]
jmp 0x1400411a6
test rcx, rcx
jne 0x1400410f6
cmp dword [rax + 0x14], 0
jne 0x1400410f6
mov ebp, 8
cmp qword [rax + 8], 0
jne 0x1400410f6
jmp 0x140041146
test rcx, rcx
jne 0x140041163
cmp dword [rax + 0x14], 0
jne 0x140041163
mov ebp, 8
cmp qword [rax + 8], 0
jne 0x140041163
jmp 0x1400411a6
mov r15, r11
call fcn.1401d1140
mov r11, r15
jmp 0x140041484
xor esi, esi
jmp 0x14004166c
mov rcx, rax
jmp 0x14004120e
mov rax, qword [r15 + 0x38]
jmp 0x1400413c7
mov rcx, qword [r15 + 0x50]
jmp 0x1400413d5
mov rcx, rsi
mov rdx, rdi
xor r8d, r8d
mov r9d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x1400411a6
lea rcx, [0x1402742d5]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
call fcn.1401ceaf0
mov rax, qword [rsi]
test rax, rax
je 0x140041c12
mov rax, qword [rax + 0x40]
mov rsi, qword [rsp + 0x58]
mov r13, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x48]
jmp 0x1400416a9
mov rax, qword [rsp + 0x80]
mov rcx, qword [rax]
call fcn.14018f5a0
mov rax, qword [rsp + 0x60]
jmp 0x140041585
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax]
call fcn.14018f5a0
mov rax, qword [rsp + 0x60]
jmp 0x14004158f
lea rdi, [rsp + 0x238]
lea rbx, [r13 + 0x20]
mov rcx, rdi
mov rdx, rsi
mov r8, rbx
call fcn.14018dff0
cmp byte [rsp + 0x238], 0
js 0x140041bb3
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call fcn.14018dff0
cmp byte [rsp + 0x238], 0
jns 0x140041bc2
add r13, 8
mov r13, qword [r13]
test r13, r13
je 0x1400411fc
jmp 0x140041b7b
mov rbx, r12
mov rsi, qword [rsp + 0x58]
jmp 0x1400413b4
mov rcx, qword [rsi + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x130], xmm0
lea r15, [rsp + 0x130]
jmp 0x14004172f
xor esi, esi
mov r12, rbx
mov rdi, r11
mov r13, qword [rsp + 0x68]
mov r14, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x48]
jmp 0x14004166c
int3
int3