Function at 0x14001fbb0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x3b8
movaps xmmword [rsp + 0x3a0], xmm6
mov rax, qword [0x140140040]
xor rax, rsp
mov qword [rsp + 0x398], rax
cmp qword [rcx + 0x18], 0
je 0x140020e12
lea rdi, [rsp + 0x138]
xorps xmm6, xmm6
movups xmmword [rdi], xmm6
mov qword [rdi - 8], rdi
lea r13, [rcx + 8]
mov qword [rsp + 0x58], rcx
mov rbx, qword [rcx + 0x10]
cmp rbx, r13
mov qword [rsp + 0x60], r13
je 0x140020c39
xor esi, esi
jmp 0x14001fe2f
add rcx, 8
mov rcx, qword [rcx]
test rcx, rcx
jne 0x14001fe54
movzx ecx, dl
test dl, dl
js 0x140020b51
mov r8, rcx
lea r15, [r8*2 + 0x23]
and r15, 0xfffffffffffffff8
add r15, rsi
mov r13, rdi
mov r12, rdi
test rax, rax
je 0x14001fd86
movsx r9, byte [rax + 0x37]
mov r8, r9
test r9, r9
jns 0x14001fc69
mov r8, qword [rax + 0x28]
test r8, r8
mov r13, qword [rsp + 0x60]
js 0x140020c7d
test r9b, r9b
js 0x14001fc82
lea r10, [rax + 0x20]
jmp 0x14001fc86
mov r10, qword [rax + 0x20]
test dl, dl
js 0x14001fc8f
mov rdx, r14
jmp 0x14001fc97
mov rcx, qword [rbx + 0x20]
mov rdx, qword [rbx + 0x18]
test rcx, rcx
sete r11b
test rdx, rdx
setne r9b
or r9b, r11b
mov r12, rax
test r10, r10
jne 0x14001fcb9
test r8, r8
jne 0x140020c90
test rcx, rcx
js 0x140020c7d
test r9b, r9b
je 0x140020c90
cmp r8, rcx
mov rax, rcx
cmovb rax, r8
test rax, rax
je 0x14001fcf3
xor r11d, r11d
movzx esi, word [r10 + r11*2]
cmp word [rdx + r11*2], si
ja 0x14001fcfc
jb 0x14001fd2c
inc r11
cmp rax, r11
jne 0x14001fcdd
cmp rcx, r8
jne 0x140020c2e
test rax, rax
je 0x14001fd1e
xor r11d, r11d
movzx esi, word [rdx + r11*2]
cmp word [r10 + r11*2], si
ja 0x14001fdf7
jb 0x14001fd77
inc r11
cmp rax, r11
jne 0x14001fd04
cmp r8, rcx
je 0x14001fdf7
jmp 0x140020c4e
mov rax, qword [r12]
mov r13, r12
test rax, rax
je 0x14001fd86
movsx r8, byte [rax + 0x37]
test r8, r8
js 0x14001fd48
lea r10, [rax + 0x20]
jmp 0x14001fd50
mov r8, qword [rax + 0x28]
mov r10, qword [rax + 0x20]
mov r13, qword [rsp + 0x60]
mov r12, rax
test r8, r8
jns 0x14001fcab
jmp 0x140020c7d
mov rax, qword [r14 + 0x10]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [r14]
movups xmmword [rcx], xmm0
jmp 0x14001fdb3
mov rax, qword [r12 + 8]
test rax, rax
jne 0x14001fd38
lea r13, [r12 + 8]
mov ecx, 0x38
call fcn.1400a2d04
mov rcx, rax
add rcx, 0x20
je 0x140020e42
mov rsi, rax
cmp byte [rbx + 0x2f], 0
jns 0x14001fd66
mov rdx, qword [rbx + 0x18]
mov r8, qword [rbx + 0x20]
call fcn.140063560
movups xmmword [rsi], xmm6
mov qword [rsi + 0x10], r12
mov qword [r13], rsi
mov rax, qword [rsp + 0x130]
mov rax, qword [rax]
test rax, rax
je 0x14001fdda
mov qword [rsp + 0x130], rax
mov rsi, qword [r13]
mov rcx, qword [rsp + 0x138]
mov rdx, rsi
call fcn.140070100
inc qword [rsp + 0x140]
mov r13, qword [rsp + 0x60]
movsx rax, byte [rbx + 0x47]
test rax, rax
js 0x140020d28
movsx rcx, byte [rbx + 0x5f]
test rcx, rcx
js 0x140020d31
lea rsi, [rax + rcx]
add rsi, 0x21
and rsi, 0xfffffffffffffff8
add rsi, r15
mov rbx, qword [rbx + 8]
cmp rbx, r13
je 0x14001ff14
lea rcx, [rbx + 0x10]
call fcn.140020ef0
test al, al
je 0x14001fe22
lea r14, [rbx + 0x18]
mov rax, qword [rsp + 0x138]
mov rcx, rax
test rax, rax
je 0x140020b49
movsx r8, byte [rcx + 0x37]
test r8, r8
js 0x14001fe64
lea r9, [rcx + 0x20]
jmp 0x14001fe6c
mov r8, qword [rcx + 0x28]
mov r9, qword [rcx + 0x20]
test r8, r8
js 0x140020c7d
je 0x14001fe80
test r9, r9
je 0x140020c90
movsx rdx, byte [rbx + 0x2f]
mov r10, rdx
mov r11, r14
test rdx, rdx
jns 0x14001fe98
mov r10, qword [rbx + 0x20]
mov r11, qword [rbx + 0x18]
test r10, r10
js 0x140020c7d
je 0x14001feac
test r11, r11
je 0x140020c90
cmp r8, r10
mov r15, r10
cmovb r15, r8
test r15, r15
je 0x14001fed8
xor r12d, r12d
movzx ebp, word [r9 + r12*2]
cmp word [r11 + r12*2], bp
ja 0x14001fee1
jb 0x14001fc20
inc r12
cmp r15, r12
jne 0x14001febe
cmp r10, r8
jne 0x140020c43
test r15, r15
je 0x14001ff03
xor r12d, r12d
movzx ebp, word [r11 + r12*2]
cmp word [r9 + r12*2], bp
ja 0x14001ff0c
jb 0x14001fc1c
inc r12
cmp r15, r12
jne 0x14001fee9
cmp r8, r10
jne 0x140020c59
mov r15, rsi
jmp 0x14001fdf7
mov rcx, qword [rsp + 0x138]
lea r14, [rsi + 0x10]
test rsi, rsi
cmove r14, rsi
movabs rdi, 0xaaaaaaaaaaaaaaaa
call fcn.140010260
mov rcx, r14
call fcn.1400a2ea0
mov r12, rax
test r14, r14
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x80], rax
je 0x140020b6c
cmp byte [rbx + 0x20], 0
jne 0x140020e6f
xor eax, eax
lea r15, [r12 + 0x10]
mov qword [r12 + 8], rax
mov qword [rsp + 0x90], r14
lea r12, [r14 - 0x10]
mov r14, qword [rbx + 0x10]
movaps xmm6, xmmword [0x14011ea30]
lea rdi, [rsp + 0x130]
mov qword [rsp + 0x68], r15
xor eax, eax
mov qword [rsp + 0x50], rax
jmp 0x14001ffc9
inc qword [rsp + 0x50]
mov sil, 1
mov r12, r11
mov r15, rbx
mov qword [rsp + 0x68], rbx
cmp byte [rsp + 0x147], 0
js 0x140020b5a
test sil, sil
jne 0x14001ffc9
jmp 0x140020de9
mov r14, qword [r14 + 8]
cmp r14, r13
je 0x140020280
lea rcx, [r14 + 0x10]
call fcn.140020ef0
test al, al
je 0x14001ffc5
lea rsi, [r14 + 0x18]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x140], rax
movaps xmmword [rsp + 0x130], xmm6
mov al, byte [r14 + 0x2f]
test al, al
js 0x140020be5
mov rcx, qword [rsi + 0x10]
mov qword [rsp + 0x140], rcx
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x130], xmm0
test al, al
js 0x140020029
movzx eax, al
jmp 0x14002002d
mov rax, qword [r14 + 0x20]
lea rax, [rax*2 + 0x23]
and rax, 0xfffffffffffffff8
mov rcx, r12
sub rcx, rax
jb 0x140020d3f
mov rbp, rcx
cmp dword [r14 + 0x10], 3
sete byte [r15 + 0x18]
mov qword [r15], rax
mov rbx, rax
mov qword [r15 + 8], rax
mov qword [r15 + 0x10], 0
movsx r8, byte [r14 + 0x2f]
test r8, r8
jns 0x140020072
mov r8, qword [r14 + 0x20]
lea rdx, [r15 + 0x1a]
mov rcx, rsi
xor r9d, r9d
call fcn.140021080
movsx rax, byte [r14 + 0x2f]
test rax, rax
jns 0x14002008f
mov rax, qword [r14 + 0x20]
add rbx, r15
mov word [r15 + rax*2 + 0x1a], 0
cmp r14, r13
mov r11, rbp
je 0x140020c26
mov rsi, r14
jmp 0x1400200bb
mov r12, qword [rsi + 8]
mov rsi, r12
cmp r12, r13
je 0x14001ff9a
lea rbp, [rsi + 0x18]
movsx rax, byte [rsp + 0x147]
test rax, rax
cmovs rax, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x130]
cmovns rcx, rdi
test rax, rax
js 0x140020c7d
je 0x1400200f4
test rcx, rcx
je 0x140020c90
movsx r8, byte [rsi + 0x2f]
mov rdx, rbp
test r8, r8
jns 0x140020109
mov r8, qword [rsi + 0x20]
mov rdx, qword [rsi + 0x18]
test r8, r8
js 0x140020c7d
je 0x14002011d
test rdx, rdx
je 0x140020c90
cmp r8, rax
jne 0x1400200ab
test rax, rax
je 0x140020142
xor r8d, r8d
movzx r9d, word [rdx + r8*2]
cmp r9w, word [rcx + r8*2]
jne 0x1400200ab
inc r8
cmp rax, r8
jne 0x14002012a
mov rax, qword [rsp + 0x68]
cmp byte [rax + 0x18], 0
jne 0x140020b94
movsx r13, byte [rsi + 0x47]
test r13, r13
jns 0x14002015f
mov r13, qword [rsi + 0x38]
movsx r12, byte [rsi + 0x5f]
test r12, r12
jns 0x14002016d
mov r12, qword [rsi + 0x50]
lea r15, [r12 + r13]
add r15, 0x21
and r15, 0xfffffffffffffff8
mov rdi, r11
sub rdi, r15
jb 0x140020e55
lea rax, [rsi + 0x48]
mov qword [rsp + 0x78], rax
lea rcx, [rsi + 0x30]
mov qword [rbx], r15
mov eax, dword [rsi + 0x10]
mov dword [rbx + 8], eax
mov eax, dword [rsi + 0x14]
mov dword [rbx + 0xc], eax
mov rax, qword [rsi + 0x60]
mov qword [rbx + 0x10], rax
lea rdx, [rbx + 0x18]
mov qword [rsp + 0x48], rcx
mov r8, r13
xor r9d, r9d
call fcn.140021010
lea rax, [rbx + r13]
add rax, 0x18
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x70], rbx
lea rdx, [rbx + r13]
add rdx, 0x19
xor r13d, r13d
mov byte [rdx - 1], r13b
mov rcx, qword [rsp + 0x78]
mov rbx, rcx
mov r8, r12
xor r9d, r9d
call fcn.140021010
mov rax, qword [rsp + 0x88]
mov byte [r12 + rax + 1], r13b
mov rax, qword [rsp + 0x68]
inc qword [rax + 0x10]
add qword [rax], r15
cmp r14, rsi
jne 0x140020216
mov r14, qword [r14 + 8]
mov rcx, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
mov rax, qword [rsi]
mov r12, qword [rsi + 8]
mov qword [rax + 8], r12
mov rax, qword [rsi]
mov qword [r12], rax
dec qword [rcx + 0x18]
cmp byte [rsi + 0x5f], 0
mov rax, qword [rsp + 0x70]
js 0x140020d46
cmp byte [rsi + 0x47], 0
js 0x140020dfb
cmp byte [rsi + 0x2f], 0
js 0x140020c13
test rsi, rsi
je 0x140020dd6
add rax, r15
mov rcx, rsi
mov rbx, rax
call fcn.1400a2cfc
mov r11, rdi
lea rdi, [rsp + 0x130]
jmp 0x1400200af
mov r12, qword [rsp + 0x80]
mov rax, qword [rsp + 0x50]
mov qword [r12], rax
movabs r14, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x98], r14
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
test rax, rax
je 0x140020e3c
mov rsi, qword [rax]
mov dword [rsp + 0x20], 4
mov rcx, rsi
xor edx, edx
mov r15, qword [rsp + 0x90]
mov r8, r15
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test rax, rax
je 0x140020d6d
mov rdi, rax
mov qword [rsp + 0x130], r14
lea rax, [rsp + 0x130]
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, rdi
mov r8, r12
mov r9, r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x140020d58
cmp qword [rsp + 0x130], r15
jne 0x140020d58
mov qword [rsp + 0x98], rdi
lea rax, [0x14010d1c0]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
lea rsi, [0x140130600]
lea r8, str.NtMapViewOfSection
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
mov rdx, rsi
mov r9d, 1
call fcn.14001e210
lea rax, [0x14010d230]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 1
lea r8, str.NtUnmapViewOfSection
mov rcx, rbx
mov rdx, rsi
mov r9d, 1
call fcn.14001e210
mov rax, qword [rbx]
test rax, rax
je 0x140020e3f
mov rcx, qword [rax]
mov dword [rsp + 0x20], 1
mov r8d, 0x10000
mov qword [rsp + 0x78], rcx
xor edx, edx
mov r9d, 0x2000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
mov rsi, qword [rbx + 0x18]
shl rsi, 6
lea rax, [rsi + 0x60]
mov qword [rsp + 0x68], rax
cmp rax, 0x10001
jae 0x140020e19
mov r14d, 0xffa0
sub r14d, esi
and r14d, 0xffffffe0
or r14, 1
mov rax, 0xffffffffffffffff
xor edx, edx
div r14
mov r15, 0xfffffffffffffffe
sub r15, rdx
lea rbx, [rsp + 0x130]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x130], rax
mov edx, 8
mov rcx, rbx
call fcn.14008f340
mov rax, qword [rsp + 0x130]
cmp rax, r15
ja 0x14002040f
mov edx, 0x800
mov r9d, 0x1000
mov r8d, 0x800
mov r15, qword [rsp + 0x68]
mov rcx, r9
shr r8, 1
mov r9, rdx
cmp rdx, r15
mov rdx, r8
jae 0x140020451
xor edx, edx
div r14
mov rbx, rdx
neg ecx
and ebx, ecx
mov eax, ebx
and eax, 0xfffff000
add rdi, rax
add rsi, 0x105f
and rsi, 0xfffffffffffff000
mov dword [rsp + 0x20], 0x40
mov rcx, qword [rsp + 0x78]
mov rdx, rdi
mov r8, rsi
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test rax, rax
je 0x140020e1c
mov rdi, rax
lea rcx, [rsp + 0x130]
mov r8d, 0x138
mov dl, 0xaa
call fcn.1400d6750
lea rcx, [0x140130600]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140020e1f
movaps xmm6, xmmword [0x14011ea30]
movups xmmword [rsp + 0x348], xmm6
movups xmmword [rsp + 0x388], xmm6
movups xmmword [rsp + 0x378], xmm6
movups xmmword [rsp + 0x368], xmm6
movups xmmword [rsp + 0x358], xmm6
mov qword [rsp + 0x338], r15
mov dword [rsp + 0x350], 0
mov qword [rsp + 0x340], 0x20
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x128], rax
movups xmmword [rsp + 0x118], xmm6
movups xmmword [rsp + 0x108], xmm6
mov rsi, qword [rsp + 0x58]
mov rax, qword [rsi]
test rax, rax
je 0x140020e29
and ebx, 0xfff
add rdi, rbx
mov qword [rsp + 0x88], rdi
mov rax, qword [rax]
lea rcx, [0x140120960]
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x118], 0
mov qword [rsp + 0x120], rax
mov byte [rsp + 0x128], 1
mov dword [rsp + 0x12c], 0
lea rcx, [rsp + 0x268]
mov r8d, 0xd0
xor edx, edx
call fcn.1400d6750
mov r14, qword [rsi + 0x10]
cmp r14, r13
je 0x14002096a
lea r13, [rsp + 0xa8]
lea rdi, [rsp + 0xc0]
lea rbx, [rsp + 0xd8]
mov rax, qword [rsp + 0x88]
lea r12, [rax + 0x20]
mov dword [rsp + 0x50], 0xaaaaaaaa
lea rsi, [rsp + 0x100]
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x48], rax
jmp 0x140020887
test r13, r13
je 0x140020c90
cmp r8, 9
jne 0x140020c64
cmp word [r13], 0x6e
jne 0x140020c64
lea r8, [rdx + 2]
test al, al
lea r9, [rsp + 0xaa]
cmovns r8, r9
cmp word [r8], 0x74
jne 0x140020c64
lea r8, [rdx + 4]
test al, al
lea r9, [rsp + 0xac]
cmovns r8, r9
cmp word [r8], 0x64
jne 0x140020c64
lea r8, [rdx + 6]
test al, al
lea r9, [rsp + 0xae]
cmovns r8, r9
cmp word [r8], 0x6c
jne 0x140020c64
lea r8, [rdx + 8]
test al, al
lea r9, [rsp + 0xb0]
cmovns r8, r9
cmp word [r8], 0x6c
jne 0x140020c64
lea r8, [rdx + 0xa]
test al, al
lea r9, [rsp + 0xb2]
cmovns r8, r9
cmp word [r8], 0x2e
jne 0x140020c64
lea r8, [rdx + 0xc]
test al, al
lea r9, [rsp + 0xb4]
cmovns r8, r9
cmp word [r8], 0x64
jne 0x140020c64
lea r8, [rdx + 0xe]
test al, al
lea r9, [rsp + 0xb6]
cmovns r8, r9
cmp word [r8], 0x6c
jne 0x140020c64
add rdx, 0x10
test al, al
lea rax, [rsp + 0xb8]
cmovns rdx, rax
xor ebp, ebp
cmp word [rdx], 0x6c
jne 0x140020c66
cmp dword [rsp + 0xa0], 1
jne 0x140020c66
cmp byte [rsp + 0xef], 0
mov rdx, rbx
jns 0x140020741
mov rdx, qword [rsp + 0xd8]
cmp byte [rsp + 0xd7], 0
mov r9, rdi
jns 0x140020756
mov r9, qword [rsp + 0xc0]
mov r8, r15
sub r8, qword [rsp + 0x340]
movsxd r15, dword [rsp + 0x350]
shl r15, 6
add r15, r12
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov rcx, rsi
mov rdx, qword [rsp + 0x70]
xor r8d, r8d
call qword [0x140134870]
test eax, eax
js 0x140020cd2
mov rax, qword [rsp + 0x100]
mov rax, qword [rax + 0x20]
mov rcx, rsi
call qword [0x140134870]
mov rcx, rax
call fcn.1400a2ea0
mov rbp, rax
mov rcx, rsi
mov rdx, rax
call fcn.140021600
test al, al
je 0x140020ca3
mov rcx, rsi
mov rdx, rbp
mov r8, r15
call fcn.140021750
mov r13d, eax
test rbp, rbp
je 0x1400207fa
mov rcx, rbp
call fcn.1400a2ea8
test r13d, r13d
js 0x140020cd5
movsxd rax, dword [rsp + 0x350]
shl rax, 6
add rax, r12
movsxd rcx, dword [rsp + 0xa4]
mov qword [rsp + rcx*8 + 0x268], rax
inc dword [rsp + 0x350]
add qword [rsp + 0x340], 0x40
mov bpl, 1
cmp byte [rsp + 0xef], 0
mov r15, qword [rsp + 0x60]
js 0x140020cae
cmp byte [rsp + 0xd7], 0
js 0x140020cc0
cmp byte [rsp + 0xbf], 0
js 0x140020b37
test bpl, bpl
je 0x140020d77
mov r14, qword [r14 + 8]
cmp r14, r15
mov r15, qword [rsp + 0x68]
lea r13, [rsp + 0xa8]
je 0x14002096a
movabs rax, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xf0], rax
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm6
mov rax, qword [r14 + 0x10]
mov qword [rsp + 0xa0], rax
cmp byte [r14 + 0x2f], 0
js 0x140020bfe
lea rax, [r14 + 0x18]
mov rcx, qword [rax + 0x10]
mov qword [r13 + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [r13], xmm0
cmp byte [r14 + 0x47], 0
js 0x140020cfe
lea rax, [r14 + 0x30]
mov rcx, qword [rax + 0x10]
mov qword [rdi + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [rdi], xmm0
cmp byte [r14 + 0x5f], 0
js 0x140020d13
lea rax, [r14 + 0x48]
mov rcx, qword [rax + 0x10]
mov qword [rbx + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [rbx], xmm0
mov rcx, qword [r14 + 0x60]
mov qword [rsp + 0xf0], rcx
movsx rax, byte [rsp + 0xbf]
test rax, rax
mov r8, qword [rsp + 0xb0]
cmovns r8, rax
mov rdx, qword [rsp + 0xa8]
cmovs r13, rdx
test r8, r8
js 0x140020c7d
je 0x14002061f
jmp 0x140020616
lea rsi, [rsp + 0x130]
lea rdx, [rsp + 0x268]
mov r8d, 0x130
mov rcx, rsi
call fcn.1400d60b0
mov qword [rsi + 0x130], 1
lea rax, [rsp + 0xa0]
movabs rdi, 0xaaaaaaaaaaaaaaaa
mov qword [rax], rdi
lea r8, [rsp + 0x200]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
mov rcx, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x88]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ebp, 0x2a
test eax, eax
mov r12, qword [rsp + 0x80]
je 0x140020e2c
cmp qword [rsp + 0xa0], 0x20
mov rsi, qword [rsp + 0x58]
jne 0x140020a9c
lea rax, [rsp + 0x100]
mov dword [rax], 0xaaaaaaaa
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x78]
mov rdx, rbx
mov r8, r15
mov r9d, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rax, qword [rsi]
test rax, rax
je 0x140020e36
cmp qword [rsp + 0x260], 1
jne 0x140020d3a
cmp dword [rax + 0x10], 0
mov rcx, qword [rax]
je 0x140020e8a
mov qword [rsp + 0x268], rdi
lea rax, [rsp + 0x268]
mov qword [rsp + 0x20], rax
lea rdx, [0x140157b20]
lea r8, [rsp + 0x130]
mov r9d, 0xd0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor ecx, ecx
cmp qword [rsp + 0x268], 0xd0
mov edx, 0x3a
cmove edx, ecx
test eax, eax
mov ebp, 0x39
cmovne ebp, edx
test ebp, ebp
jne 0x140020afc
mov rax, qword [rsi]
test rax, rax
je 0x140020e39
cmp dword [rax + 0x10], 0
mov rcx, qword [rax]
je 0x140020eb2
lea rsi, [rsp + 0x130]
mov qword [rsi], rdi
mov qword [rsp + 0x20], rsi
lea rdx, [0x140157c28]
lea r8, [rsp + 0x98]
mov r9d, 8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor ecx, ecx
cmp qword [rsi], 8
mov edx, 0x3a
cmove edx, ecx
test eax, eax
mov ebp, 0x39
cmovne ebp, edx
test r12, r12
je 0x140020b09
mov rcx, r12
call fcn.1400a2ea8
mov rcx, qword [rsp + 0x398]
xor rcx, rsp
call fcn.1400a4d90
mov eax, ebp
movaps xmm6, xmmword [rsp + 0x3a0]
add rsp, 0x3b8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0xa8]
call fcn.1400a2cfc
jmp 0x140020864
mov dl, byte [rbx + 0x2f]
jmp 0x14001fc2c
mov r8, qword [rbx + 0x20]
jmp 0x14001fc3a
mov rcx, qword [rsp + 0x130]
call fcn.1400a2cfc
jmp 0x14001ffbb
mov rax, qword [rbx]
test rax, rax
je 0x140020e3c
mov qword [rsp + 0x98], 0
cmp qword [rbx + 0x18], 0
jne 0x14002039c
jmp 0x140020aac
movsx rax, byte [rsi + 0x47]
test rax, rax
js 0x140020ba4
lea rcx, [rsi + 0x30]
jmp 0x140020bac
mov rax, qword [rsi + 0x38]
mov rcx, qword [rsi + 0x30]
test rax, rax
js 0x140020c7d
je 0x140020bc0
test rcx, rcx
je 0x140020c90
cmp rax, 1
jne 0x140020bcf
cmp byte [rcx], 0x40
je 0x140020151
mov rdi, rbx
mov rbx, r11
call fcn.1400d78d0
mov r11, rbx
mov rbx, rdi
jmp 0x140020151
mov rdx, qword [r14 + 0x18]
mov r8, qword [r14 + 0x20]
mov rcx, rdi
call fcn.140063560
mov al, byte [r14 + 0x2f]
jmp 0x140020020
mov rdx, qword [r14 + 0x18]
mov r8, qword [r14 + 0x20]
mov rcx, r13
call fcn.140063560
jmp 0x1400208ec
mov rcx, qword [rbp]
call fcn.1400a2cfc
mov rax, qword [rsp + 0x70]
jmp 0x140020259
mov r14, r13
jmp 0x14001ff9a
jb 0x14001fd2c
jmp 0x14001fcfc
xor ecx, ecx
xor r14d, r14d
jmp 0x14001ff27
jb 0x14001fc20
jmp 0x14001fee1
jb 0x14001fd77
jmp 0x14001fdf7
jb 0x14001fc1c
jmp 0x14001ff0c
xor ebp, ebp
mov eax, 2
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], 2
jmp 0x140020835
lea rcx, [0x140121d8c]
lea rdx, str....._third_partylibc_srcinclude_string_view:314:_assertion___len___static_cast_size_type__numeric_limits_difference_type_::max____failed:_string_view::string_view__CharT___size_t_:_length_does_not_fit_in_difference_type_n
call fcn.1400d6ae0
lea rcx, [0x140121d8c]
lea rdx, str....._third_partylibc_srcinclude_string_view:316:_assertion___len__0____s___nullptr_failed:_string_view::string_view__CharT___size_t_:_received_nullptr_n
call fcn.1400d6ae0
mov r13d, 0xc0000035
jmp 0x1400207ed
mov rcx, qword [rsp + 0xd8]
call fcn.1400a2cfc
jmp 0x140020848
mov rcx, qword [rsp + 0xc0]
call fcn.1400a2cfc
jmp 0x140020856
mov r13d, eax
mov ecx, r13d
call fcn.14010ae10
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rsp + 0x50], 0x28
xor ebp, ebp
mov eax, 2
mov qword [rsp + 0x48], rax
jmp 0x140020835
mov rdx, qword [r14 + 0x30]
mov r8, qword [r14 + 0x38]
mov rcx, rdi
call fcn.140058830
jmp 0x140020909
mov rdx, qword [r14 + 0x48]
mov r8, qword [r14 + 0x50]
mov rcx, rbx
call fcn.140058830
jmp 0x140020926
mov rax, qword [rbx + 0x38]
jmp 0x14001fe05
mov rcx, qword [rbx + 0x50]
jmp 0x14001fe13
call fcn.14010bee0
xor esi, esi
jmp 0x14001ffad
mov rcx, qword [rbx]
call fcn.1400a2cfc
mov rax, qword [rsp + 0x70]
jmp 0x140020245
mov rcx, rsi
mov rdx, rdi
xor r8d, r8d
mov r9d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ebp, 0x27
jmp 0x140020afc
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x130], eax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x260], rax
cmp rax, 1
mov r15, qword [rsp + 0x68]
je 0x140020993
cmp qword [rsp + 0x48], 2
mov rsi, qword [rsp + 0x58]
mov r12, qword [rsp + 0x80]
movabs rdi, 0xaaaaaaaaaaaaaaaa
mov ebp, dword [rsp + 0x50]
je 0x140020a9c
cmp qword [rsp + 0x48], 0
je 0x140020eda
call fcn.14010bee0
lea rcx, [0x140121d8c]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:66:_assertion___loc___nullptr_failed:_null_pointer_given_to_destroy_at_n
call fcn.1400d6ae0
mov ebp, 0x26
mov r12, qword [rsp + 0x80]
jmp 0x140020afc
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call fcn.1400a2cfc
mov rax, qword [rsp + 0x70]
jmp 0x14002024f
xor ebp, ebp
jmp 0x140020b09
int3
int3
mov ebp, 7
jmp 0x140020afc
int3
mov rsi, qword [rsp + 0x58]
jmp 0x140020a9c
int3
int3
int3
int3
lea rcx, [0x140121d8c]
lea rdx, str....._third_partylibc_srcinclude__memoryconstruct_at.h:40:_assertion___location___nullptr_failed:_null_pointer_given_to_construct_at_n
call fcn.1400d6ae0
xor esi, esi
mov r12, r11
mov r15, rbx
mov r13, qword [rsp + 0x60]
lea rdi, [rsp + 0x130]
jmp 0x14001ffad
mov rax, qword [rbx]
test rax, rax
je 0x140020edd
mov rax, qword [rax + 0x40]
mov rbx, qword [rsp + 0x58]
mov r13, qword [rsp + 0x60]
jmp 0x14001ff63
test rcx, rcx
jne 0x140020a4c
cmp dword [rax + 0x14], 0
jne 0x140020a4c
mov ebp, 8
cmp qword [rax + 8], 0
jne 0x140020a4c
jmp 0x140020a9c
test rcx, rcx
jne 0x140020ab9
cmp dword [rax + 0x14], 0
jne 0x140020ab9
mov ebp, 8
cmp qword [rax + 8], 0
jne 0x140020ab9
jmp 0x140020afc
int3
int3