Function at 0x1400195d0
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4b0]
sub rsp, 0x5b0
mov rax, qword [0x14015d080]
xor rax, rsp
mov qword [rbp + 0x4a8], rax
xor r13d, r13d
movdqa xmm1, xmmword [0x140149bf0]
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0x71
mov r8b, 0x75
mov r9b, Ordinal_41
mov r10b, 0x63
mov r11b, 0x7e
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor dl, cl
mov byte [rsp + 0x40], dl
xor r8b, cl
mov byte [rsp + 0x41], r8b
xor r9b, cl
mov byte [rsp + 0x42], r9b
xor r10b, cl
mov byte [rsp + 0x43], r10b
xor r11b, cl
mov byte [rsp + 0x44], r11b
xor bl, cl
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], r13b
lea rcx, [rsp + 0x31]
call fcn.140017c20
mov dword [0x14015e4bc], eax
test eax, eax
je 0x14001bae3
mov edx, eax
lea ecx, [r13 + 8]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp], 0x238
cmp rax, 0xffffffffffffffff
je 0x14001971d
lea rdx, [rbp]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x140019714
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x30]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x140019714
lea rdx, [rbp]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x1400196f0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x240]
lea rax, [rbp]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140019730
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov r8d, dword [0x14015e4bc]
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
mov qword [0x14015e3e0], rax
xorps xmm0, xmm0
mov edi, dword [rbp + 0x20]
movdqu xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], r13
test rdi, rdi
je 0x140019800
mov edx, edi
lea rcx, [rbp + 0x490]
call fcn.140032890
mov rcx, qword [rbp + 0x490]
lea rbx, [rcx + rdi]
mov r8d, edi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x498], rbx
mov qword [rsp + 0x20], r13
mov r9, rdi
mov r8, qword [rbp + 0x490]
mov rdx, qword [rbp + 0x18]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
mov rax, qword [rbp + 0x258]
mov qword [0x14015e448], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015e838]
sub rdx, qword [0x14015e830]
sar rdx, 2
movabs r12, 0x3fffffffffffffff
test rdx, rdx
je 0x1400198a7
cmp rdx, r12
ja 0x14001bb19
lea rcx, [rsp + 0x30]
call fcn.140033490
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015e838]
mov rdx, qword [0x14015e830]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x1400198f4
lea rcx, [rbp - 0x68]
call fcn.140032890
mov rdi, qword [rbp - 0x68]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x60], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.140017cf0
mov qword [0x14015e5d0], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015e6b8]
sub rdx, qword [0x14015e6b0]
sar rdx, 2
test rdx, rdx
je 0x140019975
cmp rdx, r12
ja 0x14001bb1f
lea rcx, [rbp - 0x68]
call fcn.140033490
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015e6b8]
mov rdx, qword [0x14015e6b0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x1400199c7
lea rcx, [rsp + 0x30]
call fcn.140032890
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140017cf0
mov qword [0x14015e490], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015e7d0]
sub rdx, qword [0x14015e7c8]
sar rdx, 2
test rdx, rdx
je 0x140019a48
cmp rdx, r12
ja 0x14001bb25
lea rcx, [rbp - 0x68]
call fcn.140033490
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015e7d0]
mov rdx, qword [0x14015e7c8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019a9a
lea rcx, [rsp + 0x30]
call fcn.140032890
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140017cf0
mov qword [0x14015e358], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015e670]
sub rdx, qword [0x14015e668]
sar rdx, 2
test rdx, rdx
je 0x140019b1b
cmp rdx, r12
ja 0x14001bb2b
lea rcx, [rbp - 0x68]
call fcn.140033490
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015e670]
mov rdx, qword [0x14015e668]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019b6d
lea rcx, [rsp + 0x30]
call fcn.140032890
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140017cf0
mov qword [0x14015e3f0], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015e7e8]
sub rdx, qword [0x14015e7e0]
sar rdx, 2
test rdx, rdx
je 0x140019bee
cmp rdx, r12
ja 0x14001bb31
lea rcx, [rbp - 0x68]
call fcn.140033490
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015e7e8]
mov rdx, qword [0x14015e7e0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019c40
lea rcx, [rsp + 0x30]
call fcn.140032890
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140017cf0
mov qword [0x14015e3f8], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x14015e798]
sub rdx, qword [0x14015e790]
sar rdx, 2
test rdx, rdx
je 0x140019cc1
cmp rdx, r12
ja 0x14001bb37
lea rcx, [rbp - 0x68]
call fcn.140033490
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x14015e798]
mov rdx, qword [0x14015e790]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x140019d0e
lea rcx, [rbp - 0x20]
call fcn.140032890
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x20]
call fcn.140017cf0
mov qword [0x14015e418], rax
mov r8, qword [0x14015e5d0]
test r8, r8
je 0x14001a5f2
movss xmm0, dword [0x14015d114]
movss dword [rbp + 0x480], xmm0
mov eax, dword [0x14015e4b8]
test eax, eax
jne 0x14001a375
mov rax, qword [0x14015e6e8]
cmp qword [0x14015e6e0], rax
jne 0x14001a5f2
mov eax, dword [rbp + 0x480]
movzx edx, al
mov rcx, qword [0x14015e740]
mov dword [rcx + 0x14], edx
mov ecx, eax
shr ecx, 8
movzx edx, cl
mov rcx, qword [0x14015e740]
mov dword [rcx + 0x18], edx
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
mov rcx, qword [0x14015e740]
mov dword [rcx + 0x1c], edx
shr eax, 0x18
mov rcx, qword [0x14015e740]
mov dword [rcx + 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015e780]
sub rdx, qword [0x14015e778]
sar rdx, 2
test rdx, rdx
je 0x140019e15
cmp rdx, r12
ja 0x14001bb3d
lea rcx, [rsp + 0x30]
call fcn.140033490
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015e780]
mov rdx, qword [0x14015e778]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov r8, qword [0x14015e5d0]
add r8, qword [0x14015e448]
lea r9, [rsp + 0x30]
mov rdx, qword [0x14015e3e0]
lea rcx, [rsp + 0x68]
call fcn.140017ee0
mov rbx, rax
lea r14, [0x14015e778]
cmp r14, rax
je 0x140019ed1
mov r8, qword [0x14015e778]
test r8, r8
je 0x140019ea6
mov rcx, qword [0x14015e788]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x140019e8c
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x140019f10
mov r8, rcx
mov rcx, r8
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [0x14015e778], xmm0
mov qword [0x14015e788], r13
mov rax, qword [rbx]
mov qword [0x14015e778], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e780], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e788], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140019f2a
mov rax, qword [rsp + 0x78]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019f17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019f17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
mov qword [rsp + 0x68], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140019f40
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 4]
mov r8, qword [0x14015e5d0]
lea rdx, [rbp]
call fcn.140018000
mov rsi, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015e748]
sub rdx, qword [0x14015e740]
sar rdx, 2
test rdx, rdx
je 0x14001a02f
cmp rdx, r12
ja 0x14001bb43
lea rcx, [rsp + 0x30]
call fcn.140033490
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015e748]
mov rdx, qword [0x14015e740]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rdi, [rdi + rbx*4]
mov qword [rsp + 0x38], rdi
jmp 0x14001a034
mov rdi, qword [rsp + 0x38]
mov word [rbp + 0x488], si
mov rdx, r13
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
sub rcx, rbx
sar rcx, 2
movzx eax, si
test rcx, rcx
je 0x14001a075
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a065
inc rdx
cmp rdx, rcx
jb 0x14001a055
jmp 0x14001a075
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rdx, r13
mov rcx, rdi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a0a7
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a097
inc rdx
cmp rdx, rcx
jb 0x14001a087
jmp 0x14001a0a7
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rdx, r13
mov rcx, rdi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a0e0
nop dword [rax]
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a0d0
inc rdx
cmp rdx, rcx
jb 0x14001a0c0
jmp 0x14001a0e0
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov rcx, qword [0x14015e740]
test rcx, rcx
je 0x14001a140
mov rax, qword [0x14015e750]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001a13b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a322
mov rcx, r8
call fcn.1400f0140
mov qword [0x14015e740], rbx
mov qword [0x14015e748], rdi
mov qword [0x14015e750], rsi
lea rax, [rbp - 0x38]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov rdx, qword [0x14015e780]
sub rdx, qword [0x14015e778]
sar rdx, 2
test rdx, rdx
je 0x14001a1cf
cmp rdx, r12
ja 0x14001bb49
lea rcx, [rbp - 0x38]
call fcn.140033490
mov rdi, qword [rbp - 0x38]
mov rbx, qword [0x14015e780]
mov rdx, qword [0x14015e778]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x30], rax
mov rdi, qword [0x14015e748]
mov rbx, qword [0x14015e740]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
sub rdi, rbx
sar rdi, 2
test rdi, rdi
je 0x14001a22d
cmp rdi, r12
ja 0x14001bb4f
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.140033490
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015e748]
mov rdx, qword [0x14015e740]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rbp - 0x38]
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x50]
call fcn.1400181f0
mov rbx, rax
lea rdi, [0x14015e740]
cmp rdi, rax
je 0x14001a2de
mov r8, qword [0x14015e740]
test r8, r8
je 0x14001a2b3
mov rcx, qword [0x14015e750]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001a299
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001a31b
mov r8, rcx
mov rcx, r8
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [0x14015e740], xmm0
mov qword [0x14015e750], r13
mov rax, qword [rbx]
mov qword [0x14015e740], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e748], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e750], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001a33a
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a329
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a329
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
mov qword [rbp - 0x50], r13
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
cmp byte [0x14015e33a], 0
jne 0x14001a5f2
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002b720
mov rdx, qword [0x14015e448]
add rdx, qword [0x14015e5d0]
mov r8, rax
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
jmp 0x14001a5f2
cmp eax, 1
jne 0x14001a5f2
mov rax, qword [0x14015e6e8]
cmp qword [0x14015e6e0], rax
je 0x14001a5f2
mov rsi, qword [0x14015e448]
add rsi, r8
lea rdi, [0x14015e740]
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002b720
mov rdx, rax
mov rcx, rsi
call fcn.140018310
mov r12, rax
mov r9, qword [0x14015e6e8]
sub r9, qword [0x14015e6e0]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001a3e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015e4b8]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015e3e0]
call fcn.140018390
mov r15, rax
lea rdx, [0x14015e6e0]
lea rcx, [rbp - 0x80]
call fcn.14002b720
mov rbx, r15
sub rbx, rsi
mov rdx, rax
mov rcx, r15
call fcn.1400185f0
sub r12, rax
lea rax, [r15 + 0x1000]
mov qword [0x14015e330], rax
mov qword [0x14015e468], rsi
mov qword [0x14015e4a8], r15
lea r14, [0x14015e778]
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.14002b720
mov r8, qword [0x14015e448]
add r8, qword [0x14015e5d0]
mov r9, rax
mov rdx, qword [0x14015e3e0]
lea rcx, [rbp - 0x50]
call fcn.140017ee0
mov rdx, rax
mov rcx, r14
call fcn.14002b680
lea rcx, [rbp - 0x50]
call fcn.14002b620
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002b720
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x50]
call fcn.140018670
mov rdx, rax
mov rcx, rdi
call fcn.14002b680
lea rcx, [rbp - 0x50]
call fcn.14002b620
lea rdx, [0x14015e6e0]
lea rcx, [rbp - 0x80]
call fcn.14002b720
mov r8, rax
lea rdx, [r12 - 5]
lea rcx, [rbp - 0x50]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e6e0]
call fcn.14002b680
lea rcx, [rbp - 0x50]
call fcn.14002b620
mov dword [rbp + 0x488], 0x40400000
cmp byte [0x14015e33a], 0
jne 0x14001a581
movss xmm0, dword [0x14015d114]
movss dword [rbp + 0x488], xmm0
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x488]
mov rdx, qword [0x14015e330]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e6e0]
lea rcx, [rbp - 0x80]
call fcn.14002b720
mov r8, rax
mov rdx, r15
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
movabs r12, 0x3fffffffffffffff
mov rcx, qword [0x14015e358]
test rcx, rcx
je 0x14001a9b0
cmp dword [0x14015e4a0], 1
jne 0x14001a9b0
mov rax, qword [0x14015e700]
cmp qword [0x14015e6f8], rax
je 0x14001a9b0
mov rsi, qword [0x14015e448]
add rsi, rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov r8, r13
mov qword [rsp + 0x40], r13
mov rdx, qword [0x14015e808]
sub rdx, qword [0x14015e800]
sar rdx, 2
test rdx, rdx
je 0x14001a69d
cmp rdx, r12
ja 0x14001bb55
lea rcx, [rsp + 0x30]
call fcn.140033490
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015e808]
mov rdx, qword [0x14015e800]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov r8, qword [rsp + 0x40]
jmp 0x14001a6a2
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
sub rax, rcx
sar rax, 2
lea r15, [rax + rsi]
test rcx, rcx
je 0x14001a701
sub r8, rcx
sar r8, 2
lea rdx, [r8*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a6ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a6ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov r9, qword [0x14015e700]
sub r9, qword [0x14015e6f8]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001a730
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015e4a0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015e3e0]
call fcn.140018390
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015e700]
sub rdx, qword [0x14015e6f8]
sar rdx, 2
test rdx, rdx
je 0x14001a836
cmp rdx, r12
ja 0x14001bb5b
lea rcx, [rsp + 0x68]
call fcn.140033490
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015e700]
mov rdx, qword [0x14015e6f8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
mov qword [rbp + 0x480], r13
lea rcx, [rbp + 0x480]
call fcn.140032120
mov rbx, r14
sub rbx, rsi
lea rdx, [rsp + 0x68]
mov rcx, r14
call fcn.1400185f0
sub r15, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015e428], rax
mov qword [0x14015e480], rsi
mov qword [0x14015e5e8], r14
lea rdx, [0x14015e7b0]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r9, rax
mov r8, rsi
mov rdx, qword [0x14015e3e0]
lea rcx, [rbp - 0x80]
call fcn.140017ee0
mov rdx, rax
lea rcx, [0x14015e7b0]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e800]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e800]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e6f8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [r15 - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e6f8]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
mov dword [0x14015e514], 0x41a00000
cmp byte [0x14015e339], 0
jne 0x14001a944
movss xmm0, dword [0x14015d214]
mulss xmm0, dword [0x140149190]
movss dword [0x14015e514], xmm0
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x14015e514]
mov rdx, qword [0x14015e428]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e6f8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
lea rdx, [0x14015e800]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
mov rcx, qword [0x14015e3f0]
test rcx, rcx
je 0x14001ac30
cmp dword [0x14015e3e8], 1
jne 0x14001ac30
mov rax, qword [0x14015e8c0]
cmp qword [0x14015e8b8], rax
je 0x14001ac30
mov rsi, qword [0x14015e448]
add rsi, rcx
lea rdx, [0x14015e728]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov rdx, rax
mov rcx, rsi
call fcn.140018310
mov r14, rax
mov r9, qword [0x14015e8c0]
sub r9, qword [0x14015e8b8]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001aa30
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015e3e8]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015e3e0]
call fcn.140018390
mov rdi, rax
lea rdx, [0x14015e8b8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov rbx, rdi
sub rbx, rsi
mov rdx, rax
mov rcx, rdi
call fcn.1400185f0
sub r14, rax
lea rax, [rdi + 0x1000]
mov qword [0x14015e5d8], rax
mov qword [0x14015e3b0], rsi
mov qword [0x14015e460], rdi
lea rdx, [0x14015e698]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, qword [0x14015e448]
add r8, qword [0x14015e3f0]
mov r9, rax
mov rdx, qword [0x14015e3e0]
lea rcx, [rbp - 0x80]
call fcn.140017ee0
mov rdx, rax
lea rcx, [0x14015e698]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e728]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e728]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e8b8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [r14 - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e8b8]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
mov dword [rbp + 0x480], 1
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x14015e5d8]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e8b8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
lea rdx, [0x14015e728]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
mov rcx, qword [0x14015e3f8]
test rcx, rcx
je 0x14001aed7
cmp dword [0x14015e4f4], 2
jne 0x14001aed7
mov rax, qword [0x14015e688]
cmp qword [0x14015e680], rax
je 0x14001aed7
mov rsi, qword [0x14015e448]
add rsi, rcx
lea rdx, [0x14015e6c8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov rdx, rax
mov rcx, rsi
call fcn.140018310
mov r14, rax
mov r9, qword [0x14015e688]
sub r9, qword [0x14015e680]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001acb0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015e4f4]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015e3e0]
call fcn.140018390
mov rdi, rax
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov rbx, rdi
sub rbx, rsi
mov rdx, rax
mov rcx, rdi
call fcn.1400185f0
sub r14, rax
lea rax, [rdi + 0x1000]
mov qword [0x14015e600], rax
add rax, 4
mov qword [0x14015e410], rax
mov qword [0x14015e420], rsi
mov qword [0x14015e430], rdi
lea rdx, [0x14015e710]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, qword [0x14015e448]
add r8, qword [0x14015e3f8]
mov r9, rax
mov rdx, qword [0x14015e3e0]
lea rcx, [rbp - 0x80]
call fcn.140017ee0
mov rdx, rax
lea rcx, [0x14015e710]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e6c8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e6c8]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [r14 - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e680]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x14015d120]
mov rdx, qword [0x14015e600]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x14015d1d0]
mov rdx, qword [0x14015e410]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
lea rdx, [0x14015e6c8]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
mov rax, qword [0x14015e490]
test rax, rax
je 0x14001b312
lea rcx, [rax + 2]
mov qword [0x14015e490], rcx
cmp dword [0x14015e3c4], 2
jne 0x14001b312
mov rax, qword [0x14015e868]
cmp qword [0x14015e860], rax
je 0x14001b312
mov rdi, qword [0x14015e448]
add rdi, rcx
lea rdx, [0x14015e818]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov rdx, rax
mov rcx, rdi
call fcn.140018310
mov rsi, rax
mov r9, qword [0x14015e868]
sub r9, qword [0x14015e860]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001af60
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015e3c4]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015e3e0]
call fcn.140018390
mov r14, rax
lea rdx, [0x14015e860]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov rbx, r14
sub rbx, rdi
mov rdx, rax
mov rcx, r14
call fcn.1400185f0
sub rsi, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015e408], rax
add rax, 4
mov qword [0x14015e350], rax
mov qword [0x14015e3b8], rdi
mov qword [0x14015e440], r14
lea rdx, [0x14015e848]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r9, rax
mov r8, rdi
mov rdx, qword [0x14015e3e0]
lea rcx, [rbp - 0x80]
call fcn.140017ee0
mov rdx, rax
lea rcx, [0x14015e848]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e818]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e818]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e860]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
lea rdx, [rsi - 5]
lea rcx, [rbp - 0x80]
call fcn.140018670
mov rdx, rax
lea rcx, [0x14015e860]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b100
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 5]
mov r8, qword [0x14015e490]
lea rdx, [rbp]
call fcn.140018000
mov rbx, rax
lea rdx, [0x14015e860]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r9d, 1
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140018100
mov rdx, rax
lea rcx, [0x14015e860]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e860]
lea rcx, [rsp + 0x48]
call fcn.14002b720
lea r8, [rbx + 4]
mov r9d, 1
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140018100
mov rdx, rax
lea rcx, [0x14015e860]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
lea rdx, [0x14015e860]
lea rcx, [rsp + 0x48]
call fcn.14002b720
lea r8, [rbx + 8]
mov r9d, 1
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140018100
mov rdx, rax
lea rcx, [0x14015e860]
call fcn.14002b680
lea rcx, [rbp - 0x80]
call fcn.14002b620
mov dword [rbp + 0x488], 0x3f800000
mov dword [rbp + 0x480], 0x3f800000
cmp byte [0x14015e3ed], 0
jne 0x14001b280
movss xmm0, dword [0x14015d204]
movss dword [rbp + 0x488], xmm0
movss xmm1, dword [0x14015d110]
movss dword [rbp + 0x480], xmm1
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x488]
mov rdx, qword [0x14015e408]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x14015e350]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e860]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
lea rdx, [0x14015e818]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
mov rcx, qword [0x14015e418]
test rcx, rcx
je 0x14001baa0
cmp dword [0x14015e3c0], 1
jne 0x14001baa0
mov rax, qword [0x14015e880]
cmp qword [0x14015e878], rax
je 0x14001baa0
mov r12, qword [0x14015e448]
add r12, rcx
lea rdx, [0x14015e758]
lea rcx, [rsp + 0x48]
call fcn.14002b720
mov rdx, rax
mov rcx, r12
call fcn.140018310
mov r15, rax
mov r9, qword [0x14015e880]
sub r9, qword [0x14015e878]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b390
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x14015e3c0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x14015e3e0]
call fcn.140018390
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov rdx, r13
mov qword [rsp + 0x40], rdx
mov rax, qword [0x14015e880]
sub rax, qword [0x14015e878]
sar rax, 2
test rax, rax
je 0x14001b49a
movabs rcx, 0x3fffffffffffffff
cmp rax, rcx
ja 0x14001bb61
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140033490
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x14015e880]
mov rdx, qword [0x14015e878]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov rdx, qword [rsp + 0x40]
jmp 0x14001b49f
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
sub rax, rcx
sar rax, 2
lea rbx, [r14 - 5]
add rbx, rax
test rcx, rcx
je 0x14001b501
sub rdx, rcx
sar rdx, 2
lea rdx, [rdx*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b4ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b4ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rsi, r14
sub rsi, r12
sub r15, rbx
lea rax, [r14 + 0x1000]
mov qword [0x14015e5e0], rax
mov qword [0x14015e5c8], r12
mov qword [0x14015e3c8], r14
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015e8a0]
sub rdx, qword [0x14015e898]
sar rdx, 2
test rdx, rdx
je 0x14001b596
movabs rax, 0x3fffffffffffffff
cmp rdx, rax
ja 0x14001bb67
lea rcx, [rsp + 0x68]
call fcn.140033490
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015e8a0]
mov rdx, qword [0x14015e898]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
mov r8, qword [0x14015e418]
add r8, qword [0x14015e448]
lea r9, [rsp + 0x68]
mov rdx, qword [0x14015e3e0]
lea rcx, [rbp - 0x50]
call fcn.140017ee0
mov rbx, rax
lea rax, [0x14015e898]
cmp rax, rbx
je 0x14001b658
mov r8, qword [0x14015e898]
test r8, r8
je 0x14001b62d
mov rcx, qword [0x14015e8a8]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001b613
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001b695
mov r8, rcx
mov rcx, r8
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [0x14015e898], xmm0
mov qword [0x14015e8a8], r13
mov rax, qword [rbx]
mov qword [0x14015e898], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e8a0], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e8a8], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001b6a1
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b69c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b69c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015e760]
sub rdx, qword [0x14015e758]
sar rdx, 2
test rdx, rdx
je 0x14001b711
movabs rax, 0x3fffffffffffffff
cmp rdx, rax
ja 0x14001bb6d
lea rcx, [rsp + 0x68]
call fcn.140033490
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015e760]
mov rdx, qword [0x14015e758]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
lea rdx, [rsi - 5]
lea rcx, [rbp - 0x50]
call fcn.140018670
mov rbx, rax
lea rax, [0x14015e758]
cmp rax, rbx
je 0x14001b7c2
mov r8, qword [0x14015e758]
test r8, r8
je 0x14001b797
mov rcx, qword [0x14015e768]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001b77d
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001b7ff
mov r8, rcx
mov rcx, r8
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [0x14015e758], xmm0
mov qword [0x14015e768], r13
mov rax, qword [rbx]
mov qword [0x14015e758], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e760], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e768], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001b80b
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b806
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b806
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015e880]
sub rdx, qword [0x14015e878]
sar rdx, 2
movabs rsi, 0x3fffffffffffffff
test rdx, rdx
je 0x14001b87b
cmp rdx, rsi
ja 0x14001bb73
lea rcx, [rsp + 0x68]
call fcn.140033490
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015e880]
mov rdx, qword [0x14015e878]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
lea rdx, [r15 - 5]
lea rcx, [rbp - 0x50]
call fcn.140018670
mov rbx, rax
lea rax, [0x14015e878]
cmp rax, rbx
je 0x14001b92c
mov r8, qword [0x14015e878]
test r8, r8
je 0x14001b901
mov rcx, qword [0x14015e888]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001b8e7
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001b969
mov r8, rcx
mov rcx, r8
call fcn.1400f0140
mov qword [0x14015e878], r13
xorps xmm0, xmm0
movdqu xmmword [0x14015e880], xmm0
mov rax, qword [rbx]
mov qword [0x14015e878], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e880], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e888], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001b981
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b970
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b970
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
mov qword [rbp - 0x50], r13
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp + 0x480], 0x3f19999a
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x14015e5e0]
mov rcx, qword [0x14015e3e0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x14015e880]
sub rdx, qword [0x14015e878]
sar rdx, 2
test rdx, rdx
je 0x14001ba17
cmp rdx, rsi
ja 0x14001bb79
lea rcx, [rsp + 0x68]
call fcn.140033490
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x14015e880]
mov rdx, qword [0x14015e878]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
mov rdx, r14
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov rdx, qword [0x14015e760]
sub rdx, qword [0x14015e758]
sar rdx, 2
test rdx, rdx
je 0x14001ba8c
cmp rdx, rsi
ja 0x14001bb13
lea rcx, [rbp - 0x38]
call fcn.140033490
mov rdi, qword [rbp - 0x38]
mov rbx, qword [0x14015e760]
mov rdx, qword [0x14015e758]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x30], rax
lea r8, [rbp - 0x38]
mov rdx, r12
mov rcx, qword [0x14015e3e0]
call fcn.140018e20
nop
mov rcx, qword [rbp + 0x490]
test rcx, rcx
je 0x14001bae3
mov rdx, qword [rbp + 0x4a0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001bade
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001bade
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f0140
mov rcx, qword [rbp + 0x4a8]
xor rcx, rsp
call fcn.1400f0120
lea r11, [rsp + 0x5b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14002f570
nop
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
nop
call fcn.14002f570
nop
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3
call fcn.14002f570
int3