Function at 0x140001150
Capabilities:
Acquire debug privileges
Enumerate process modules
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5b0]
sub rsp, 0x6b0
mov rax, qword [0x140037040]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
xor ebx, ebx
mov edi, ebx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x78], rbx
lea rdx, str.Trying_to_enable_debug_privileges_for_the_current_process
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x38]
lea edx, [rbx + 0x20]
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400011f8
lea r8, [rsp + 0x40]
lea rdx, str.SeDebugPrivilege
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov rcx, qword [rsp + 0x38]
test eax, eax
jne 0x140001255
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Could_not_enable_debug_privileges
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
lea rcx, str.pause
call fcn.14000f750
nop
mov eax, 1
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.140008e60
lea r11, [rsp + 0x6b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp + 0x350], 1
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x354], rax
mov r12d, 2
mov dword [rbp + 0x35c], r12d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
lea r9d, [r12 + 0xe]
lea r8, [rbp + 0x350]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov rcx, qword [rsp + 0x38]
test eax, eax
je 0x1400011f2
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, str.Debug_privileges_enabled
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
lea rdx, str.Trying_to_find_process
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
lea rdx, str.eu4.exe
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], 7
mov r14d, 0xf
mov qword [rbp + 0x328], r14
mov rax, qword [str.eu4.exe]
mov dword [rbp + 0x310], eax
movzx eax, word [0x140031294]
mov word [rbp + 0x314], ax
movzx eax, byte [0x140031296]
mov byte [rbp + 0x316], al
mov byte [rbp + 0x317], 0
xor edx, edx
mov ecx, r12d
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140001551
mov dword [rbp + 0x360], 0x130
lea rdx, [rbp + 0x360]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140001551
mov rsi, qword [rsp + 0x70]
nop
cmp rsi, rdi
je 0x140001416
mov rcx, rsi
lea rax, [rbp + 0x360]
mov rdx, r12
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400013a0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
add rsi, 0x130
mov qword [rsp + 0x70], rsi
jmp 0x140001434
lea r8, [rbp + 0x360]
mov rdx, rsi
lea rcx, [rsp + 0x68]
call fcn.140006b70
mov rdi, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x70]
lea rdx, [rbp + 0x360]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140001380
mov qword [rsp + 0x48], rdi
mov r15, qword [rsp + 0x68]
mov rbx, r15
cmp r15, rsi
je 0x1400014cb
lea r14, [r15 + 0x2c]
nop dword [rax]
nop word [rax + rax]
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140001480
lea rcx, [rbp + 0x310]
mov eax, 7
mov r8d, eax
cmp rdi, rax
cmovb r8, rdi
mov rdx, r14
call fcn.140025e90
test eax, eax
jne 0x1400014b8
mov eax, 7
cmp rax, rdi
jb 0x1400014b8
jbe 0x1400014d5
add rbx, 0x130
add r14, 0x130
cmp rbx, rsi
jne 0x140001470
mov rdi, qword [rsp + 0x48]
jmp 0x140001556
lea rax, [rbp - 0x60]
nop dword [rax]
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rbx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rbx, [rbx + 0x80]
sub r12, 1
jne 0x1400014e0
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rax + 0x20], xmm0
xor bl, bl
mov rdi, qword [rsp + 0x48]
jmp 0x140001558
mov r15, qword [rsp + 0x68]
mov bl, 1
mov r12d, 0xf
lea rdx, str.eu4.exe
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
test bl, bl
je 0x1400015ef
lea rdx, str._process_could_not_be_found__is_it_already_running_
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
lea rcx, str.pause
call fcn.14000f750
nop
test r15, r15
je 0x140001220
sub rdi, r15
movabs rax, 0x6bca1af286bca1b
imul rdi
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x130
mov rax, r15
cmp rdx, 0x1000
jb 0x140001f07
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jmp 0x140001f05
lea rdx, str._process_found
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x78], xmm0
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov qword [rbp - 0x68], r14
mov r13d, dword [rbp - 0x58]
mov dword [rbp - 0x80], r13d
lea rdx, str.Trying_to_find_module
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
lea rdx, str.eu4.exe
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], 7
mov qword [rbp + 0x328], r12
mov rax, qword [str.eu4.exe]
mov dword [rbp + 0x310], eax
movzx eax, word [0x140031294]
mov word [rbp + 0x314], ax
movzx eax, byte [0x140031296]
mov byte [rbp + 0x316], al
mov byte [rbp + 0x317], r14b
xor bl, bl
mov edx, r13d
lea ecx, [r14 + 0x18]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400016e6
nop dword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12b
jne 0x14000170d
inc bl
cmp bl, 0xa
ja 0x14000170d
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, r13d
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400016b0
mov dword [rbp + 0x360], 0x238
lea rdx, [rbp + 0x360]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
jne 0x140001716
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rbp - 0x78]
jmp 0x140001926
mov r13d, 4
mov rsi, qword [rbp - 0x70]
cmp rsi, r14
je 0x1400017bd
mov rcx, rsi
lea rax, [rbp + 0x360]
mov rdx, r13
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140001740
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
add rsi, 0x238
mov qword [rbp - 0x70], rsi
jmp 0x1400017d8
lea r8, [rbp + 0x360]
mov rdx, rsi
lea rcx, [rbp - 0x78]
call fcn.140006860
mov r14, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x70]
lea rdx, [rbp + 0x360]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x140001720
mov qword [rsp + 0x38], r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12, qword [rbp - 0x78]
mov rbx, r12
cmp r12, rsi
je 0x14000191d
mov al, 0
mov byte [rsp + 0x30], al
lea r14, [r12 + 0x30]
nop dword [rax]
mov rdi, 0xffffffffffffffff
nop word [rax + rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140001830
lea rcx, [rbp + 0x310]
test al, al
cmovne rcx, qword [rbp + 0x310]
mov eax, 7
mov r8d, eax
cmp rdi, rax
cmovb r8, rdi
mov rdx, r14
call fcn.140025e90
test eax, eax
jne 0x140001872
mov eax, 7
cmp rax, rdi
jb 0x140001872
jbe 0x140001890
add rbx, 0x238
add r14, 0x238
cmp rbx, rsi
je 0x14000191d
movzx eax, byte [rsp + 0x30]
jmp 0x140001820
lea rcx, [rbp + 0xd0]
nop word [rax + rax]
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rbx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rbx, [rbx + 0x80]
sub r13, 1
jne 0x1400018a0
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rbx + 0x30]
mov qword [rcx + 0x30], rax
xor bl, bl
mov r14, qword [rsp + 0x38]
mov r13d, dword [rbp - 0x58]
jmp 0x140001928
mov r14, qword [rsp + 0x38]
mov r13d, dword [rbp - 0x58]
mov bl, 1
lea rdx, str.eu4.exe
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
test bl, bl
je 0x1400019e3
lea rdx, str._module_could_not_be_found__has_the_target_app_completely_loaded_
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
lea rcx, str.pause
call fcn.14000f750
nop
test r12, r12
je 0x1400019c0
sub r14, r12
movabs rax, 0x73615a240e6c2b45
imul r14
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x238
mov rax, r12
cmp rdx, 0x1000
jb 0x1400019b7
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f1a
mov rcx, r12
call fcn.140008ee8
nop
test r15, r15
je 0x140001220
mov rcx, qword [rsp + 0x48]
sub rcx, r15
movabs rax, 0x6bca1af286bca1b
imul rcx
jmp 0x1400015b2
lea rdx, str._module_found
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
mov dword [rsp + 0x38], r13d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], 0
lea rdx, str.Trying_to_find_memory_patterns
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
mov esi, dword [rbp + 0xf0]
mov qword [rbp + 0x350], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov ecx, 0x20
call fcn.140008e80
mov rdx, rax
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x340], 0x17
mov qword [rbp + 0x348], 0x1f
movups xmm0, xmmword [str.74____C6_44_24_40_00_B9]
movups xmmword [rax], xmm0
mov ecx, dword [0x140031278]
mov dword [rax + 0x10], ecx
movzx ecx, word [0x14003127c]
mov word [rax + 0x14], cx
movzx eax, byte [0x14003127e]
mov byte [rdx + 0x16], al
mov byte [rdx + 0x17], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x350]
mov rdi, qword [rbp + 0xe8]
mov r8, rdi
lea rdx, [rbp + 0x330]
lea rcx, [rsp + 0x38]
call fcn.140003f60
movzx ebx, al
mov rdx, qword [rbp + 0x348]
cmp rdx, 0xf
jbe 0x140001b06
inc rdx
mov rcx, qword [rbp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f20
call fcn.140008ee8
test bl, bl
jne 0x140001b30
lea rdx, str.First_memory_pattern_could_not_be_found__using_fallback_offset
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
mov ebx, 0x171df5d
mov dword [rsp + 0x40], ebx
jmp 0x140001b34
mov ebx, dword [rsp + 0x40]
lea rdx, str.First_memory_pattern_found
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
mov eax, ebx
add rax, rdi
mov qword [rbp + 0x310], rax
mov ecx, 1
call fcn.140008e80
mov byte [rax], 0xeb
mov qword [rbp + 0x318], rax
mov qword [rbp + 0x320], 1
lea r8, [rbp + 0x310]
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400027a0
mov qword [rbp + 0x350], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], 0xb
mov eax, 0xf
mov qword [rbp + 0x348], rax
movsd xmm0, qword [str.74____C7_04]
movsd qword [rbp + 0x330], xmm0
movzx eax, word [0x140031288]
mov word [rbp + 0x338], ax
movzx eax, byte [0x14003128a]
mov byte [rbp + 0x33a], al
mov byte [rbp + 0x33b], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x350]
mov r8, rdi
lea rdx, [rbp + 0x330]
lea rcx, [rsp + 0x38]
call fcn.140003f60
movzx ebx, al
mov rdx, qword [rbp + 0x348]
cmp rdx, 0xf
jbe 0x140001c50
inc rdx
mov rcx, qword [rbp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f20
call fcn.140008ee8
test bl, bl
jne 0x140001c76
lea rdx, str.Second_memory_pattern_could_not_be_found__using_fallback_offset
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
mov ebx, 0x171e27b
jmp 0x140001c7a
mov ebx, dword [rsp + 0x40]
lea rdx, str.Second_memory_pattern_found
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
mov eax, ebx
add rax, rdi
mov qword [rbp + 0x310], rax
mov ecx, 1
call fcn.140008e80
mov byte [rax], 0xeb
mov qword [rbp + 0x318], rax
mov rdi, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
cmp rdi, r14
je 0x140001ce6
movups xmm0, xmmword [rbp + 0x310]
movups xmmword [rdi], xmm0
movsd xmm1, qword [rbp + 0x320]
movsd qword [rdi + 0x10], xmm1
add rdi, 0x18
mov qword [rsp + 0x58], rdi
jmp 0x140001d04
lea r8, [rbp + 0x310]
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.1400027a0
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
lea rdx, str.Trying_to_apply_patches
lea rcx, [0x1400382d0]
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
mov rsi, qword [rsp + 0x50]
mov rbx, rsi
cmp rsi, rdi
je 0x140001d69
nop dword [rax]
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.140003c40
lea rcx, [0x1400382d0]
test al, al
je 0x140001e2f
lea rdx, str.Patch_applied_successfully
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
add rbx, 0x18
cmp rbx, rdi
jne 0x140001d30
test rsi, rsi
je 0x140001dc2
sub r14, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul r14
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rsi
cmp rdx, 0x1000
jb 0x140001db9
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f26
mov rcx, rsi
call fcn.140008ee8
nop
lea rcx, [rbp - 0x78]
call fcn.1400067e0
nop
test r15, r15
je 0x140001e28
mov rcx, qword [rsp + 0x48]
sub rcx, r15
movabs rax, 0x6bca1af286bca1b
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x130
mov rax, r15
cmp rdx, 0x1000
jb 0x140001e20
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f14
mov rcx, r15
call fcn.140008ee8
xor eax, eax
jmp 0x140001225
lea rdx, str.Patch_could_not_be_applied
call fcn.140001fb0
mov rcx, rax
call fcn.140002260
lea rcx, str.pause
call fcn.14000f750
nop
test rsi, rsi
je 0x140001ea9
sub r14, rsi
movabs rax, 0x2aaaaaaaaaaaaaab
imul r14
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rsi
cmp rdx, 0x1000
jb 0x140001ea0
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f26
mov rcx, rsi
call fcn.140008ee8
nop
lea rcx, [rbp - 0x78]
call fcn.1400067e0
nop
test r15, r15
je 0x140001220
mov rcx, qword [rsp + 0x48]
sub rcx, r15
movabs rax, 0x6bca1af286bca1b
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x130
mov rcx, r15
cmp rdx, 0x1000
jb 0x140001f07
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rcx, r15
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140001f14
mov rcx, r15
call fcn.140008ee8
jmp 0x140001220
call fcn.14000fca4
nop
call fcn.14000fca4
nop
call fcn.14000fca4
nop
call fcn.14000fca4
int3