Function at 0x1800019f0
Capabilities:
Suspend thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x180074080]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rsi, rdx
mov r14, rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x40], rdx
xor r13d, r13d
lea rcx, [rsp + 0x20]
call fcn.1800016c0
nop
mov rbx, qword [rsp + 0x20]
mov rdi, rbx
mov rbp, qword [rsp + 0x28]
cmp rbx, rbp
je 0x180001a88
mov r15, qword [rsi + 0x18]
mov r12, qword [rsi + 0x10]
nop dword [rax + rax]
mov rdx, rsi
cmp r15, 0xf
jbe 0x180001a5c
mov rdx, qword [rsi]
mov r8, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x180001a6d
mov rcx, qword [rdi]
cmp r8, r12
jne 0x180001a7f
call fcn.180057240
test eax, eax
je 0x180001c07
add rdi, 0x48
cmp rdi, rbp
jne 0x180001a50
test rbx, rbx
je 0x180001b45
cmp rbx, rbp
je 0x180001aed
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x180001ad0
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180001acb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180001ce5
mov rcx, r8
call fcn.18002cc24
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x48
cmp rbx, rbp
jne 0x180001a96
mov rbx, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
sub rcx, rbx
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x180001b3d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180001ce5
mov rcx, rbx
call fcn.18002cc24
mov r9d, 0x10
lea r8, str.Memcury::PE::Section::GetSection
lea rdx, [0x1800669a8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SuspendThread]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r14 + 0x20], xmm0
movups xmmword [r14 + 0x30], xmm0
mov qword [r14 + 0x40], rax
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], 0xf
mov byte [r14], al
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x180001bd0
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x180001bcb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180001cf1
mov rcx, r8
call fcn.18002cc24
mov rax, r14
mov byte [rsi], 0
mov qword [rsi + 0x18], 0xf
mov qword [rsi + 0x10], r13
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.18002c850
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rdx, rdi
mov rcx, r14
call fcn.180002be0
movups xmm0, xmmword [rdi + 0x20]
movups xmmword [r14 + 0x20], xmm0
movups xmm1, xmmword [rdi + 0x30]
movups xmmword [r14 + 0x30], xmm1
movsd xmm0, qword [rdi + 0x40]
movsd qword [r14 + 0x40], xmm0
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x180001caa
mov rdx, qword [rsp + 0x28]
call fcn.180003490
mov rcx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x20]
sub rcx, r8
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x180001c94
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180001ce5
mov rcx, r8
call fcn.18002cc24
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r13
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x180001bd0
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x180001bcb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180001ceb
jmp 0x180001bc8
call fcn.1800381c0
nop
call fcn.1800381c0
int3
call fcn.1800381c0
int3