Function at 0x180013ec0
Capabilities:
Allocate or change rwx memory

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x18025e060]
xor rax, rsp
mov qword [rbp - 8], rax
lea r8, [0x18026228c]
lea rcx, [0x18025efd8]
call fcn.180003540
cmp dword [0x18026228c], 0
jne 0x180014d20
mov rcx, qword [0x180262a38]
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
mov rcx, qword [rax + 0x178]
test rcx, rcx
je 0x180013f5c
cmp dword [rcx + 0x10], 2
jne 0x180013f57
cmp dword [rcx + 4], 1
je 0x180013f71
call fcn.180051350
mov edx, 2
lea r8d, [rdx - 1]
lea rcx, str.cols
call fcn.1800509f0
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 0xc]
lea rdx, [0x1800aa360]
lea rcx, [rsp + 0x40]
call fcn.18001c600
movss xmm2, dword [0x18024d904]
lea rcx, [rsp + 0x40]
call fcn.180003f70
lea rax, [rsp + 0x40]
mov qword [rbp - 0x10], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0x19]
lea rdx, [0x1800aa370]
lea rcx, [rbp - 0x30]
call fcn.18001c600
mov rax, qword [0x180262a38]
mov rcx, qword [rax + 0x1c08]
movss xmm0, dword [rcx + 0x18]
movss xmm8, dword [0x18024d880]
subss xmm0, xmm8
xorps xmm9, xmm9
lea r9, [rsp + 0x40]
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rbp - 0x30]
call fcn.1800046c0
mov byte [0x180262289], al
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0x12]
lea rdx, [0x1800aa390]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea r8, [rsp + 0x40]
lea rdx, [0x18026228a]
lea rcx, [rbp - 0x30]
call fcn.180005320
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0x12]
lea rdx, [0x1800aa3a8]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea r8, [rsp + 0x40]
lea rdx, [0x18026227c]
lea rcx, [rbp - 0x30]
call fcn.180005320
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 8]
lea rdx, [0x1800aa3c0]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea r8, [rsp + 0x40]
lea rdx, [0x180262267]
lea rcx, [rbp - 0x30]
call fcn.180005320
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0xc]
lea rdx, [0x1800aa3d0]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea r8, [rsp + 0x40]
lea rdx, [0x180262288]
lea rcx, [rbp - 0x30]
call fcn.180005320
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0xc]
lea rdx, [0x1800aa3e0]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea r8, [rsp + 0x40]
lea rdx, [0x180262266]
lea rcx, [rbp - 0x30]
call fcn.180005320
call fcn.18002b090
lea ecx, [rbx + 1]
call fcn.180024e00
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 0xc]
lea rdx, [0x1800aa3f0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
movss xmm2, dword [0x18024d908]
lea rcx, [rsp + 0x40]
call fcn.180003f70
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0xc]
lea rdx, [0x1800aa400]
lea rcx, [rbp - 0x30]
call fcn.18001c600
mov rax, qword [0x180262a38]
mov rcx, qword [rax + 0x1c08]
movss xmm0, dword [rcx + 0x18]
subss xmm0, xmm8
lea r9, [rsp + 0x40]
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rbp - 0x30]
call fcn.1800046c0
mov byte [0x18026227e], al
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0xe]
lea rdx, [0x1800aa410]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, dword [0x1802626e0]
lea r8, [0x180262710]
lea rdx, [0x180262280]
lea rcx, [rbp - 0x30]
call fcn.180004ec0
mov byte [0x18026227d], al
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0xe]
lea rdx, [0x1800aa420]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, dword [0x180262278]
lea r8, [0x180262290]
lea rdx, [0x1802626d8]
lea rcx, [rbp - 0x30]
call fcn.180004ec0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0xe]
lea rdx, [0x1800aa430]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, dword [0x1802626dc]
lea r8, [0x1802623b0]
lea rdx, [0x1802626d4]
lea rcx, [rbp - 0x30]
call fcn.180004ec0
mov byte [0x18026228b], al
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 0xe]
lea rdx, [0x1800aa440]
lea rcx, [rbp - 0x30]
call fcn.18001c600
nop
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, dword [0x1802626d0]
lea r8, [0x180262320]
lea rdx, [0x180262284]
lea rcx, [rbp - 0x30]
call fcn.180004ec0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 1]
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
lea r8d, [rbx + 7]
lea rdx, [0x1800aa450]
lea rcx, [rbp - 0x30]
call fcn.18001c600
mov rax, qword [0x180262a38]
mov rcx, qword [rax + 0x1c08]
movss xmm0, dword [rcx + 0x18]
subss xmm0, xmm8
lea r9, [rsp + 0x40]
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rbp - 0x30]
call fcn.1800046c0
mov byte [0x18026227f], al
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
lea r8d, [rbx + 0x27]
lea rdx, [0x1800aa458]
lea rcx, [rsp + 0x40]
call fcn.18001c600
lea rcx, [rsp + 0x40]
call fcn.1800064d0
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
lea r8d, [rbx + 0x27]
lea rdx, [0x1800aa480]
lea rcx, [rsp + 0x70]
call fcn.18001c600
lea rcx, [rsp + 0x70]
call fcn.1800064d0
cmp byte [0x18026227e], bl
je 0x18001490a
mov dword [0x180262280], ebx
mov dword [0x1802626d4], ebx
mov dword [0x1802626d8], ebx
mov dword [0x180262284], ebx
mov dword [0x1802626e0], ebx
mov dword [0x1802626dc], ebx
mov rax, qword [0x180262258]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x5cf1078]
mov qword [rbp - 0x10], rax
mov r13d, ebx
mov r14d, 0x2b4
mov r15d, ebx
movsxd rcx, r14d
add rcx, rax
call fcn.180013cb0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1800146b0
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.18001c600
lea edx, [r13 + 1]
lea rcx, [rbp - 0x50]
call fcn.180002430
nop
mov r8d, 2
lea rdx, [0x1800aa4a8]
mov rcx, rax
call fcn.18001c760
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
lea rcx, [rsp + 0x40]
call fcn.18001c760
movups xmm6, xmmword [rax]
movups xmmword [rbp - 0x70], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm7
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18001478d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180014788
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014d76
call fcn.180067160
movups xmmword [rbp - 0x30], xmm6
movups xmmword [rbp - 0x20], xmm7
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1800147d2
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800147cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014d7c
call fcn.180067160
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x180014820
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001481b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014d82
call fcn.180067160
lea rax, [rbp - 0x30]
mov rsi, qword [rbp - 0x58]
cmp rsi, 0x10
setae byte [rsp + 0x68]
mov rdi, qword [rbp - 0x70]
mov rcx, 0xffffffffffffffff
jb 0x180014854
mov rbx, rdi
inc rcx
cmp byte [rdi + rcx], 0
jne 0x180014841
inc rcx
call fcn.1800675f4
jmp 0x180014869
inc rcx
cmp byte [rax + rcx], 0
jne 0x180014854
inc rcx
call fcn.1800675f4
lea rbx, [rbp - 0x30]
mov rdx, rax
mov rcx, rax
sub rcx, rbx
movzx eax, byte [rbx]
mov byte [rcx + rbx], al
lea rbx, [rbx + 1]
test al, al
jne 0x180014872
lea rax, [0x180262710]
mov qword [r15 + rax], rdx
mov dword [0x1802626e0], r13d
lea rax, [0x1802623b0]
mov qword [r15 + rax], rdx
mov dword [0x1802626dc], r13d
cmp byte [rsp + 0x68], 0
je 0x1800148dc
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800148d4
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180014d70
mov rcx, rdi
call fcn.180067160
inc r13d
add r14d, 0x1258
add r15, 8
cmp r14d, 0x72d14
jge 0x1800148fe
mov rax, qword [rbp - 0x10]
xor ebx, ebx
jmp 0x180014685
call fcn.180015370
call fcn.1800158c0
xor ebx, ebx
cmp byte [0x18026227d], 0
je 0x180014918
call fcn.180015370
cmp byte [0x18026228b], 0
je 0x180014926
call fcn.1800158c0
cmp byte [0x18026227f], 0
je 0x180014a0b
cmp dword [0x1802626e0], 2
jle 0x1800149f0
cmp dword [0x1802626dc], 2
jle 0x1800149f0
cmp dword [0x180262278], 1
jle 0x1800149f0
cmp dword [0x1802626d0], 1
jle 0x1800149f0
mov rax, qword [0x180262258]
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x5cf1078]
test rdx, rdx
je 0x180014a0b
imul eax, dword [0x180262280], 0x24b
add eax, dword [0x1802626d8]
shl eax, 3
movsxd r8, eax
add r8, rdx
mov r9, qword [r8]
imul eax, dword [0x1802626d4], 0x24b
add eax, dword [0x180262284]
shl eax, 3
movsxd rcx, eax
add rcx, rdx
mov rdx, qword [rcx]
mov qword [r8], rdx
mov qword [rcx], r9
mov rcx, qword [r9 + 0x60]
mov rax, qword [rdx + 0x60]
mov qword [r9 + 0x60], rax
mov qword [rdx + 0x60], rcx
mov qword [r9 + 0x78], rax
mov qword [rdx + 0x78], rcx
call fcn.180015370
mov dword [0x1802626d8], ebx
call fcn.1800158c0
mov dword [0x180262284], ebx
jmp 0x180014a0b
lea rdx, [0x1800aa4b0]
lea rcx, [0x180260a80]
call fcn.18001e310
mov rcx, rax
call fcn.18001e580
call fcn.18002b090
mov ecx, 1
call fcn.180024e00
call fcn.180051090
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov r8d, 0xc
lea rdx, [0x1800aa4c0]
lea rcx, [rsp + 0x70]
call fcn.18001c600
movss xmm6, dword [0x18024d8e4]
movaps xmm2, xmm6
lea rcx, [rsp + 0x70]
call fcn.180003f70
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov r8d, 0x2d
lea rdx, [0x1800aa4d0]
lea rcx, [rsp + 0x70]
call fcn.18001c600
nop
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov r8d, 0xc
lea rdx, [0x1800aa500]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
lea r9, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.180004b90
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov r8d, 1
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x70]
call fcn.18001c600
nop
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov r8d, 0xc
lea rdx, [0x1800aa510]
lea rcx, [rsp + 0x40]
call fcn.18001c600
nop
lea r8, [rsp + 0x70]
lea rdx, [0x180262265]
lea rcx, [rsp + 0x40]
call fcn.180005320
call fcn.18002b090
mov ecx, 1
call fcn.180024e00
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov r8d, 0x15
lea rdx, [0x1800aa520]
lea rcx, [rsp + 0x70]
call fcn.18001c600
movaps xmm2, xmm6
lea rcx, [rsp + 0x70]
call fcn.180003f70
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov r8d, 1
lea rdx, [0x1800a95a0]
lea rcx, [rsp + 0x70]
call fcn.18001c600
nop
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov r8d, 0x1b
lea rdx, [0x1800aa538]
lea rcx, [rsp + 0x40]
call fcn.18001c600
mov rax, qword [0x180262a38]
mov rcx, qword [rax + 0x1c08]
movss xmm0, dword [rcx + 0x18]
subss xmm0, xmm8
lea r9, [rsp + 0x70]
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x40]
call fcn.1800046c0
test al, al
je 0x180014cd8
mov rax, qword [0x180262258]
mov rdi, qword [rax + 0x18]
mov r8d, dword [rax + 0x10]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rdx, [rdi + 0x1a292b8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [0x180262258]
mov rdx, qword [r8 + 0x18]
mov eax, dword [0x18025ecb0]
mov dword [rdx + 0x1a292b8], eax
mov rdi, qword [r8 + 0x18]
mov r8d, dword [r8 + 0x10]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8d, [r9 - 0x3f]
lea rdx, [rdi + 0x4d4b3e]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [0x180262258]
mov rdx, qword [rax + 0x18]
movabs rax, 0xf7e8909090909090
mov qword [rdx + 0x4d4b3e], rax
call fcn.18002b090
mov ecx, 1
call fcn.180024e00
mov rcx, qword [0x180262a38]
mov rax, qword [rcx + 0x1c08]
mov byte [rax + 0x90], 1
mov rax, qword [rcx + 0x1c08]
mov rcx, qword [rax + 0x178]
test rcx, rcx
je 0x180014d20
cmp dword [rcx + 0x10], 1
jne 0x180014d1b
cmp dword [rcx + 4], 0
je 0x180014d20
call fcn.180051350
call fcn.18002b090
mov ecx, 3
call fcn.180024f80
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.180067140
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800785f0
nop
call fcn.1800785f0
nop
call fcn.1800785f0
nop
call fcn.1800785f0
int3