Function at 0x140001f40
Capabilities:
Check for software breakpoints
Check for time delay via queryperformancecounter
Load ntoskrnl

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xb50
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140017040]
xor rax, rsp
mov qword [rbp + 0xaf0], rax
mov rdi, rdx
mov qword [rbp + 0x720], rdx
mov qword [rbp + 0x3d8], rdx
xor r13d, r13d
cmp byte [0x1400a0872], r13b
je 0x1400031e1
call fcn.1400098e0
test al, al
jne 0x140002139
movabs rax, 0x162369de9bf2fbe3
mov qword [rbp + 0x7f0], rax
movabs rcx, 0xd8d6a33b0d213e24
mov qword [rbp + 0x7f8], rcx
movabs rdx, 0x2c1910acf49f9eae
mov qword [rbp + 0x20], rdx
movabs rdx, 0xd8d6a3017948506d
mov qword [rbp + 0x28], rdx
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x7f0]
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x880], rax
mov qword [rbp + 0x888], rcx
movabs rax, 0xb262496842a5b7fd
mov qword [rbp + 0x890], rax
movabs rax, 0xc7751d1df5cdaba6
mov qword [rbp + 0x898], rax
movabs rax, 0x1849612a2e00fec7
mov qword [rbp + 0x8a0], rax
movabs rax, 0x46d9c32751357508
mov qword [rbp + 0x8a8], rax
movabs rcx, 0x331f3b91c9a0beb8
mov qword [rbp + 0x180], rcx
movabs rcx, 0x9ef6fe0569040457
mov qword [rbp + 0x188], rcx
movabs rcx, 0xdd16690c27c9de9c
mov qword [rbp + 0x190], rcx
movabs rax, 0xab1474699ca3c286
mov qword [rbp + 0x198], rax
movabs rax, 0x5700126b0e6584ae
mov qword [rbp + 0x1a0], rax
movabs rax, 0x46d9c32751571c44
mov qword [rbp + 0x1a8], rax
vmovdqu ymm0, ymmword [rbp + 0x880]
vpxor ymm0, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x180], ymm0
vmovdqa xmm1, xmmword [rbp + 0x8a0]
vxorps xmm1, xmm1, xmmword [rbp + 0x1a0]
vmovdqa xmmword [rbp + 0x1a0], xmm1
mov r8d, 0xb7
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x180]
vzeroupper
call fcn.140008c00
int3
mov rcx, r8
call fcn.14000f884
xor al, al
jmp 0x140003b7d
call fcn.14000b090
test al, al
jne 0x140002293
movabs rax, 0x162369de9bf2fbe3
mov qword [rbp + 0x7e0], rax
movabs rcx, 0xd8d6a33b0d213e24
mov qword [rbp + 0x7e8], rcx
movabs rdx, 0x2c1910acf49f9eae
mov qword [rbp + 0x10], rdx
movabs rdx, 0xd8d6a3017948506d
mov qword [rbp + 0x18], rdx
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x7e0]
movdqa xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x8c0], rax
mov qword [rbp + 0x8c8], rcx
movabs rax, 0xb262496842a5b7fd
mov qword [rbp + 0x8d0], rax
movabs rax, 0xc7751d1df5cdaba6
mov qword [rbp + 0x8d8], rax
movabs rax, 0x1849612a2e00fec7
mov qword [rbp + 0x8e0], rax
movabs rax, 0x46d9c32751357508
mov qword [rbp + 0x8e8], rax
movabs rcx, 0x331f3b91c9a0beb8
mov qword [rbp + 0x200], rcx
movabs rcx, 0x9ef6fe0569040457
mov qword [rbp + 0x208], rcx
movabs rcx, 0xdd16690c27c9de9c
mov qword [rbp + 0x210], rcx
movabs rax, 0xab1474699ca3c286
mov qword [rbp + 0x218], rax
movabs rax, 0x7d3918420e6584ae
mov qword [rbp + 0x220], rax
movabs rax, 0x46d9a6443045067a
mov qword [rbp + 0x228], rax
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x8c0]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqa xmm0, xmmword [rbp + 0x8e0]
vxorps xmm0, xmm0, xmmword [rbp + 0x220]
vmovdqa xmmword [rbp + 0x220], xmm0
mov r8d, 0xbd
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x200]
jmp 0x1400020ef
cmp qword [rdi + 0x18], 0xf
jbe 0x1400022a6
mov r8, qword [rdi]
mov rdx, r8
add r8, qword [rdi + 0x10]
jmp 0x1400022b0
mov rdx, rdi
mov r8, qword [rdi + 0x10]
add r8, rdi
lea rcx, [rbp + 0x310]
call fcn.140005fe0
nop
mov rcx, rax
call fcn.1400016c0
mov ebx, eax
mov dword [rbp + 0x748], eax
mov rdx, qword [rbp + 0x328]
cmp rdx, 7
jbe 0x140002316
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002311
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002311
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f884
test ebx, ebx
jne 0x1400023e6
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14000232d
mov rdx, qword [rdi]
lea rcx, str.Waiting_for__s_n
call fcn.140008c00
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [rdi + 0x18], 0xf
jbe 0x140002357
mov r8, qword [rdi]
mov rdx, r8
add r8, qword [rdi + 0x10]
jmp 0x140002361
mov r8, qword [rdi + 0x10]
add r8, rdi
mov rdx, rdi
lea rcx, [rbp + 0x120]
call fcn.140005fe0
nop
mov rcx, rax
call fcn.1400016c0
mov ebx, eax
mov dword [rbp + 0x748], eax
mov rdx, qword [rbp + 0x138]
cmp rdx, 7
jbe 0x1400023c4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002540
call fcn.14000f884
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], 7
mov word [rbp + 0x120], r13w
test ebx, ebx
je 0x140002320
mov ecx, ebx
call fcn.140009700
mov qword [0x1400a0878], rax
test rax, rax
jne 0x140002547
movabs rax, 0x162369de9bf2fbe3
mov qword [rbp + 0x7d0], rax
movabs rcx, 0xd8d6a33b0d213e24
mov qword [rbp + 0x7d8], rcx
movabs rdx, 0x2c1910acf49f9eae
mov qword [rbp + 0x40], rdx
movabs rdx, 0xd8d6a3017948506d
mov qword [rbp + 0x48], rdx
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x7d0]
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x900], rax
mov qword [rbp + 0x908], rcx
movabs rax, 0xb262496842a5b7fd
mov qword [rbp + 0x910], rax
movabs rax, 0xc7751d1df5cdaba6
mov qword [rbp + 0x918], rax
movabs rax, 0x1849612a2e00fec7
mov qword [rbp + 0x920], rax
movabs rax, 0x46d9c32751357508
mov qword [rbp + 0x928], rax
movabs rcx, 0x331f3b91c9a0beb8
mov qword [rbp + 0x1c0], rcx
movabs rcx, 0x9ef6fe0569040457
mov qword [rbp + 0x1c8], rcx
movabs rcx, 0xdd16690c27c9de9c
mov qword [rbp + 0x1d0], rcx
movabs rcx, 0x97303d799ba4cd86
mov qword [rbp + 0x1d8], rcx
movabs rcx, 0x184332796b43b195
mov qword [rbp + 0x1e0], rcx
mov qword [rbp + 0x1e8], rax
vmovdqu ymm0, ymmword [rbp + 0x900]
vpxor ymm0, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x1c0], ymm0
vmovdqa xmm1, xmmword [rbp + 0x920]
vxorps xmm1, xmm1, xmmword [rbp + 0x1e0]
vmovdqa xmmword [rbp + 0x1e0], xmm1
mov r8d, 0xcc
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x1c0]
jmp 0x1400020ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0x3d0]
mov ecx, 0xb
call fcn.14000c140
test al, al
jne 0x140002719
movabs r9, 0xdf4e4b8d79c9f545
mov qword [rbp + 0xa00], r9
movabs r8, 0xb6136c2436e1b596
mov qword [rbp + 0xa08], r8
movabs rdx, 0x519cdc34836e56f
mov qword [rbp + 0xa10], rdx
movabs rcx, 0x6f84442ad8755ca8
mov qword [rbp + 0xa18], rcx
movabs rax, 0x987471fe15a08110
mov qword [rbp + 0xa0], rax
movabs rax, 0xc4761a4d44a5c1f3
mov qword [rbp + 0xa8], rax
movabs rax, 0x519cdf92d45842d
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rcx
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa00]
vmovdqa ymmword [rbp + 0xa0], ymm1
mov qword [rbp + 0xa20], r9
mov qword [rbp + 0xa28], r8
mov qword [rbp + 0xa30], rdx
mov qword [rbp + 0xa38], rcx
movabs rax, 0x7455714118aca2c9
mov qword [rbp + 0xa40], rax
movabs rax, 0xd2d83888fea8286a
mov qword [rbp + 0xa48], rax
movabs rdx, 0x64a7ca67bf0bfea3
mov qword [rbp + 0xa50], rdx
movabs rcx, 0x96a6ddae660a8cdc
mov qword [rbp + 0xa58], rcx
movabs rax, 0xfa7219c22b9bb01e
mov qword [rbp + 0xc0], rax
movabs rax, 0xf033311a52c48fe5
mov qword [rbp + 0xc8], rax
movabs rax, 0x6a6deda72d5a8c0e
mov qword [rbp + 0xd0], rax
movabs rax, 0xeeb280aac103b88
mov qword [rbp + 0xd8], rax
movabs rax, 0x23c032538c8c7ad
mov qword [rbp + 0xe0], rax
movabs rax, 0xa6ab51e4dedb5a0f
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf0], rdx
mov qword [rbp + 0xf8], rcx
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa20]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0xa40]
vmovdqa ymmword [rbp + 0xe0], ymm1
mov r8d, 0x10f
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140008c00
int3
mov esi, r13d
mov rdx, qword [rbp + 0x3d0]
cmp dword [rdx], r13d
jbe 0x14000277b
nop dword [rax + rax]
mov eax, esi
imul rcx, rax, 0x128
lea rbx, [rdx + 8]
add rbx, rcx
cmp qword [rbx + 0x10], 0
je 0x140002775
cmp dword [rbx + 0x18], 0
je 0x140002775
movzx ecx, word [rbx + 0x26]
add rcx, 0x28
add rcx, rbx
lea rdx, [0x140011ba0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1400028d3
mov rdx, qword [rbp + 0x3d0]
inc esi
cmp esi, dword [rdx]
jb 0x140002730
mov rcx, rdx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r15, r13
test r15, r15
jne 0x1400028e9
movabs rax, 0x162369de9bf2fbe3
mov qword [rbp + 0x820], rax
movabs rcx, 0xd8d6a33b0d213e24
mov qword [rbp + 0x828], rcx
movabs rdx, 0x2c1910acf49f9eae
mov qword [rbp + 0x50], rdx
movabs rdx, 0xd8d6a3017948506d
mov qword [rbp + 0x58], rdx
movdqa xmm0, xmmword [rbp + 0x820]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x9c0], rax
mov qword [rbp + 0x9c8], rcx
movabs rax, 0xb262496842a5b7fd
mov qword [rbp + 0x9d0], rax
movabs rax, 0xc7751d1df5cdaba6
mov qword [rbp + 0x9d8], rax
movabs rax, 0x1849612a2e00fec7
mov qword [rbp + 0x9e0], rax
movabs rax, 0x46d9c32751357508
mov qword [rbp + 0x9e8], rax
movabs rcx, 0x331f3b91c9a0beb8
mov qword [rbp + 0x240], rcx
movabs rcx, 0x9ef6fe0569040457
mov qword [rbp + 0x248], rcx
movabs rcx, 0xdd16690c27c9de9c
mov qword [rbp + 0x250], rcx
movabs rcx, 0xb31b3d799ba4cd86
mov qword [rbp + 0x258], rcx
movabs rcx, 0x18430d445c6b8da8
mov qword [rbp + 0x260], rcx
mov qword [rbp + 0x268], rax
vmovdqu ymm0, ymmword [rbp + 0x9c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x240], ymm0
vmovdqa xmm1, xmmword [rbp + 0x9e0]
vxorps xmm1, xmm1, xmmword [rbp + 0x260]
vmovdqa xmmword [rbp + 0x260], xmm1
mov r8d, 0xd3
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x240]
jmp 0x1400020ef
mov r15, qword [rbx + 0x10]
mov rcx, qword [rbp + 0x3d0]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140002787
xor edx, edx
mov r8d, 1
lea rcx, [0x140011ba0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rsi, rax
test rax, rax
jne 0x140002a4d
movabs rax, 0x162369de9bf2fbe3
mov qword [rbp + 0x810], rax
movabs rcx, 0xd8d6a33b0d213e24
mov qword [rbp + 0x818], rcx
movabs rdx, 0x2c1910acf49f9eae
mov qword [rbp + 0x60], rdx
movabs rdx, 0xd8d6a3017948506d
mov qword [rbp + 0x68], rdx
movdqa xmm0, xmmword [rbp + 0x60]
xorps xmm0, xmmword [rbp + 0x810]
movdqa xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x940], rax
mov qword [rbp + 0x948], rcx
movabs rax, 0xb262496842a5b7fd
mov qword [rbp + 0x950], rax
movabs rax, 0xc7751d1df5cdaba6
mov qword [rbp + 0x958], rax
movabs rax, 0x1849612a2e00fec7
mov qword [rbp + 0x960], rax
movabs rax, 0x46d9c32751357508
mov qword [rbp + 0x968], rax
movabs rcx, 0x331f3b91c9a0beb8
mov qword [rbp + 0x280], rcx
movabs rcx, 0x9ef6fe0569040457
mov qword [rbp + 0x288], rcx
movabs rcx, 0xdd16690c27c9de9c
mov qword [rbp + 0x290], rcx
movabs rcx, 0xb31b3d7994a2c786
mov qword [rbp + 0x298], rcx
movabs rcx, 0x18430d445c6b8da8
mov qword [rbp + 0x2a0], rcx
mov qword [rbp + 0x2a8], rax
vmovdqu ymm0, ymmword [rbp + 0x940]
vpxor ymm0, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x280], ymm0
vmovdqa xmm1, xmmword [rbp + 0x960]
vxorps xmm1, xmm1, xmmword [rbp + 0x2a0]
vmovdqa xmmword [rbp + 0x2a0], xmm1
mov r8d, 0xda
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x280]
jmp 0x1400020ef
movsxd rax, dword [rax + 0x3c]
add rax, rsi
movzx ecx, word [rax + 0x14]
add rcx, 0x24
mov ebx, r13d
movzx r14d, word [rax + 6]
cmp r13w, r14w
jae 0x140002ae3
lea r11, [rcx + rax]
lea r12, [0x140011bb0]
test dword [r11 + 0x18], 0x2000000
jne 0x140002ad8
mov r9d, dword [r11]
add r9, rsi
mov eax, dword [r11 - 4]
lea r10, [r9 - 0xf]
add r10, rax
cmp r9, r10
ja 0x140002ad8
nop word [rax + rax]
mov rcx, r13
mov r8, r9
sub r8, r12
nop dword [rax]
lea rax, [rcx + r12]
movzx edx, byte [rax]
cmp byte [rax + r8], dl
je 0x140002ac6
cmp dl, 0xcc
jne 0x140002c3c
inc rcx
cmp rcx, 0xd
jl 0x140002ab0
test r9, r9
jne 0x140002c4d
inc ebx
add r11, 0x28
cmp ebx, r14d
jl 0x140002a75
mov r9, r13
test r13, r13
jne 0x140002c4d
movabs rax, 0x162369de9bf2fbe3
mov qword [rbp + 0x800], rax
movabs rcx, 0xd8d6a33b0d213e24
mov qword [rbp + 0x808], rcx
movabs rdx, 0x2c1910acf49f9eae
mov qword [rbp + 0x30], rdx
movabs rdx, 0xd8d6a3017948506d
mov qword [rbp + 0x38], rdx
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x800]
movdqa xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x980], rax
mov qword [rbp + 0x988], rcx
movabs rax, 0xb262496842a5b7fd
mov qword [rbp + 0x990], rax
movabs rax, 0xc7751d1df5cdaba6
mov qword [rbp + 0x998], rax
movabs rax, 0x1849612a2e00fec7
mov qword [rbp + 0x9a0], rax
movabs rax, 0x46d9c32751357508
mov qword [rbp + 0x9a8], rax
movabs rcx, 0x331f3b91c9a0beb8
mov qword [rbp + 0x2c0], rcx
movabs rcx, 0x9ef6fe0569040457
mov qword [rbp + 0x2c8], rcx
movabs rcx, 0xdd16690c27c9de9c
mov qword [rbp + 0x2d0], rcx
movabs rax, 0xb7163d799ba4cd86
mov qword [rbp + 0x2d8], rax
movabs rax, 0x6a2c155e4f70deb2
mov qword [rbp + 0x2e0], rax
movabs rax, 0x46d9c32751357f66
mov qword [rbp + 0x2e8], rax
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x980]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x9a0]
vxorps xmm0, xmm0, xmmword [rbp + 0x2e0]
vmovdqa xmmword [rbp + 0x2e0], xmm0
mov r8d, 0xe1
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x2c0]
jmp 0x1400020ef
inc r9
cmp r9, r10
jbe 0x140002aa0
jmp 0x140002ad8
movsxd r12, dword [r9 + 2]
sub r12, rsi
add r12, 0xa
add r12, r15
add r12, r9
mov qword [rbp + 0x750], r12
movsxd rcx, dword [r9 + 0xd]
add rcx, r9
movsxd r14, dword [rcx + 0x18]
sub r14, rsi
add r14, r15
add rcx, 0x1c
add r14, rcx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [rbp + 0xa90], 0x48b4865
mov dword [rbp + 0xa94], 0x18825
mov dword [rbp + 0xa98], 0x808b4800
mov dword [rbp + 0xa9c], 0x220
mov word [rbp + 0xaa0], 0xb948
mov dword [rbp + 0xaaa], 0x75c83948
mov dword [rbp + 0xaae], 0xbbb9483b
mov dword [rbp + 0xab2], 0xbbbbbbbb
mov dword [rbp + 0xab6], 0x48bbbbbb
mov byte [rbp + 0xaba], 0xb8
mov dword [rbp + 0xac3], 0x48088948
mov byte [rbp + 0xac7], 0xb8
mov dword [rbp + 0xad0], 0xc7
mov dword [rbp + 0xad4], 0x200f0000
mov dword [rbp + 0xad8], 0x58948d8
mov dword [rbp + 0xadc], 2
mov qword [rbp + 0xae0], 0x8eb
mov word [rbp + 0xae8], 0
mov byte [rbp + 0xaea], 0xc3
mov rax, qword [0x1400a0878]
mov qword [rbp + 0xaa2], rax
mov r13, qword [0x1400a1468]
test r14, r14
je 0x140002dc1
xor esi, esi
movabs rdi, 0x8000000000
mov ebx, 8
sub ebx, esi
mov r15d, esi
mov edx, ebx
dec rdx
add rdx, r15
add rdx, r14
and rdx, 0xfffffffffffff000
lea rcx, [rsi + r14]
cmp rdx, rcx
jbe 0x140002d89
mov ebx, edx
sub ebx, ecx
mov rdx, r13
call fcn.14000ac00
test rax, rax
je 0x140002dc1
mov rcx, rax
sub rcx, qword [0x1400a1470]
cmp rcx, rdi
jae 0x140002dc1
mov r8d, ebx
lea rcx, [rbp + 0xab1]
add rcx, r15
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
add esi, ebx
cmp esi, 8
jb 0x140002d60
mov qword [rbp + 0xabb], r14
mov qword [rbp + 0xac8], r12
call fcn.140008c60
mov qword [rbp + 8], rax
mov r8d, 0x5b
lea rdx, [rbp + 0xa90]
mov rcx, rax
call fcn.14000afd0
mov r13, qword [0x1400a1468]
xor esi, esi
movabs r12, 0x8000000000
mov ebx, 8
sub ebx, esi
mov r15d, esi
mov eax, ebx
add rax, r14
lea rdx, [rsi - 1]
add rdx, rax
and rdx, 0xfffffffffffff000
lea rcx, [r14 + rsi]
cmp rdx, rcx
jbe 0x140002e2a
mov ebx, edx
sub ebx, ecx
mov rdx, r13
call fcn.14000ac00
test rax, rax
je 0x140002e5f
mov rcx, rax
sub rcx, qword [0x1400a1470]
cmp rcx, r12
jae 0x140002e5f
mov r8d, ebx
lea rdx, [rbp + 8]
add rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add esi, ebx
cmp esi, 8
jb 0x140002e00
lea rcx, [rbp + 0x758]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp + 0x790]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov dword [rbp], 2
mov r15, qword [0x1400a1468]
xor esi, esi
mov r12, qword [rbp + 0x750]
movabs rdi, 0x8000000000
nop word [rax + rax]
mov ebx, 4
sub ebx, esi
mov r14d, esi
mov eax, ebx
add rax, r12
lea rdx, [rsi - 1]
add rdx, rax
and rdx, 0xfffffffffffff000
lea rcx, [r12 + rsi]
cmp rdx, rcx
jbe 0x140002eca
mov ebx, edx
sub ebx, ecx
mov rdx, r15
call fcn.14000ac00
test rax, rax
je 0x140002eff
mov rcx, rax
sub rcx, qword [0x1400a1470]
cmp rcx, rdi
jae 0x140002eff
mov r8d, ebx
lea rdx, [rbp]
add rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add esi, ebx
cmp esi, 4
jb 0x140002ea0
mov rax, qword [0x1400a0890]
test rax, rax
mov rdi, qword [rbp + 0x720]
mov r13, qword [rbp + 8]
jne 0x140002fb5
lea r15, [r13 + 0x52]
movabs rdi, 0x8000000000
nop dword [rax + rax]
mov r12, qword [0x1400a1468]
test r15, r15
je 0x140002fa9
xor esi, esi
nop
mov ebx, 8
sub ebx, esi
mov r14d, esi
mov eax, ebx
add rax, r15
lea rdx, [rsi - 1]
add rdx, rax
and rdx, 0xfffffffffffff000
lea rcx, [r15 + rsi]
cmp rdx, rcx
jbe 0x140002f6a
mov ebx, edx
sub ebx, ecx
mov rdx, r12
call fcn.14000ac00
test rax, rax
je 0x140002fa2
mov rcx, rax
sub rcx, qword [0x1400a1470]
cmp rcx, rdi
jae 0x140002fa2
mov r8d, ebx
lea rcx, [0x1400a0890]
add rcx, r14
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
add esi, ebx
cmp esi, 8
jb 0x140002f40
mov rax, qword [0x1400a0890]
test rax, rax
je 0x140002f30
mov rdi, qword [rbp + 0x720]
lea rcx, [rbp + 0x798]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbp + 0x798]
sub rax, qword [rbp + 0x790]
xorps xmm2, xmm2
cvtsi2sd xmm2, rax
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp + 0x758]
divsd xmm2, xmm0
mulsd xmm2, qword [0x1400123e8]
movq r8, xmm2
mov rdx, qword [0x1400a0890]
lea rcx, str.GameCR3:__p___.4f_ms_n
call fcn.140008c00
mov rcx, r13
call fcn.140008d00
mov r12, qword [0x1400a1468]
mov r15, qword [0x1400a0878]
add r15, 0x550
je 0x1400030a0
xor esi, esi
lea r13, [0x1400a0880]
movabs rdi, 0x8000000000
nop word [rax + rax]
mov ebx, 8
sub ebx, esi
mov eax, ebx
add rax, r15
lea rdx, [rsi - 1]
add rdx, rax
and rdx, 0xfffffffffffff000
lea rcx, [r15 + rsi]
cmp rdx, rcx
jbe 0x140003067
mov ebx, edx
sub ebx, ecx
mov rdx, r12
call fcn.14000ac00
test rax, rax
je 0x140003099
mov rcx, rax
sub rcx, qword [0x1400a1470]
cmp rcx, rdi
jae 0x140003099
mov r8d, ebx
lea rcx, [rsi + r13]
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
add esi, ebx
cmp esi, 8
jb 0x140003040
mov rdi, qword [rbp + 0x720]
mov r12, qword [0x1400a0890]
mov r15, qword [0x1400a0880]
add r15, 0x10
je 0x140003130
xor esi, esi
lea r13, [0x1400a0888]
movabs rdi, 0x8000000000
nop word [rax + rax]
mov ebx, 8
sub ebx, esi
mov eax, ebx
add rax, r15
lea rdx, [rsi - 1]
add rdx, rax
and rdx, 0xfffffffffffff000
lea rcx, [r15 + rsi]
cmp rdx, rcx
jbe 0x1400030f7
mov ebx, edx
sub ebx, ecx
mov rdx, r12
call fcn.14000ac00
test rax, rax
je 0x140003129
mov rcx, rax
sub rcx, qword [0x1400a1470]
cmp rcx, rdi
jae 0x140003129
mov r8d, ebx
lea rcx, [rsi + r13]
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
add esi, ebx
cmp esi, 8
jb 0x1400030d0
mov rdi, qword [rbp + 0x720]
mov eax, dword [rbp + 0x748]
mov dword [0x1400a08c8], eax
lea rcx, [0x1400a08e0]
cmp rcx, rdi
je 0x14000315e
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140003155
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
call fcn.140005e80
mov rax, qword [0x1400a0888]
mov qword [0x1400a08d0], rax
mov rdx, rdi
lea rcx, [rbp + 0x3b0]
call fcn.1400086c0
mov rdx, rax
call fcn.1400046a0
mov qword [0x1400a08d8], rax
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400031c0
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400031bb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400031da
mov rcx, r8
call fcn.14000f884
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov al, 1
jmp 0x140003b8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp byte [0x1400a1490], 0
jne 0x140003b1b
lea rcx, str.inizializing..._n
call fcn.140008c00
lea rsi, str._device
mov qword [rbp + 0x830], rsi
lea r14, str.fpga:__algo0
mov qword [rbp + 0x838], r14
lea r15, str._waitinitialize
mov qword [rbp + 0x840], r15
lea rax, str._memmap
mov qword [rbp + 0x848], rax
lea rax, str.auto
mov qword [rbp + 0x850], rax
lea r12, [0x140011938]
mov qword [rbp + 0x868], r12
lea rax, [0x1400119f4]
mov qword [rbp + 0x858], rax
lea rax, str._printf
mov qword [rbp + 0x860], rax
lea rcx, [rbp + 0x760]
call fcn.140008a40
nop
lea rax, [rbp + 0x760]
cmp qword [rbp + 0x778], 7
cmova rax, qword [rbp + 0x760]
mov qword [rbp + 0x140], rax
mov rax, qword [rbp + 0x770]
mov qword [rbp + 0x148], rax
call fcn.14000ee28
movaps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x330], xmm0
lea r8, [rbp + 0x330]
mov edx, eax
lea rcx, [rbp + 0x100]
call fcn.140006ea0
nop
mov r8d, 8
lea rdx, str.mmap.txt
lea rcx, [rbp + 0x100]
call fcn.140007cc0
xorps xmm0, xmm0
movups xmmword [rbp + 0x728], xmm0
mov qword [rbp + 0x738], r13
mov qword [rbp + 0x740], r13
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x728], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x738], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140003366
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003361
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003361
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f884
movdqa xmm0, xmmword [0x140012400]
movdqu xmmword [rbp + 0x110], xmm0
mov byte [rbp + 0x100], 0
lea rax, [rbp + 0x728]
cmp qword [rbp + 0x740], 0xf
cmova rax, qword [rbp + 0x728]
mov qword [rbp + 0x150], rax
mov rax, qword [rbp + 0x738]
mov qword [rbp + 0x158], rax
call fcn.14000ee28
movaps xmm0, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x340], xmm0
lea r8, [rbp + 0x340]
mov edx, eax
lea rcx, [rbp + 0x70]
call fcn.1400065d0
nop
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rcx, qword [rbp + 0x70]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x7b0]
call fcn.14000f088
mov r8d, eax
test eax, eax
jne 0x14000343d
mov edx, dword [rbp + 0x7c0]
mov ecx, edx
shr ecx, 0xa
test cl, 1
je 0x140003432
mov eax, dword [rbp + 0x7c4]
cmp eax, 0xa000000c
jne 0x140003424
mov edx, 4
jmp 0x140003463
cmp eax, 0xa0000003
jne 0x140003432
mov edx, 0xa
jmp 0x140003463
shr edx, 4
and edx, 1
or edx, 2
jmp 0x140003463
mov dword [rbp + 0x304], 0xffff
sub eax, 2
je 0x14000345e
sub eax, 1
je 0x14000345e
sub eax, 0x32
je 0x14000345e
cmp eax, 0x46
mov edx, r13d
jne 0x140003463
mov edx, 1
mov dword [rbp + 0x160], r8d
lea rax, [0x1400a08b8]
mov qword [rbp + 0x168], rax
movaps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x7a0], xmm0
test edx, edx
je 0x1400034d2
cmp edx, 1
setne bl
mov rdx, qword [rbp + 0x88]
cmp rdx, 7
jbe 0x1400034e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400034df
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor bl, bl
test r8d, r8d
jne 0x140003d3b
jmp 0x140003491
call fcn.14000f884
test bl, bl
je 0x14000352b
lea rdx, [rbp + 0x728]
cmp qword [rbp + 0x740], 0xf
cmova rdx, qword [rbp + 0x728]
lea rcx, str.____Using_Memory_Map_from__s_n
call fcn.140008c00
lea rax, [rbp + 0x728]
cmp qword [rbp + 0x740], 0xf
cmova rax, qword [rbp + 0x728]
mov qword [rbp + 0x850], rax
jmp 0x140003573
lea rcx, str.____No_Memory_Map_found__Dumping_our_own_memory_map._n
call fcn.140008c00
call fcn.140001820
test al, al
je 0x140003567
lea rax, [rbp + 0x728]
cmp qword [rbp + 0x740], 0xf
cmova rax, qword [rbp + 0x728]
mov qword [rbp + 0x850], rax
lea rcx, str.___Successfully_dumped_memory_map_n
jmp 0x14000356e
lea rcx, str.____Failed_to_dump_memory_map__Were_gonna_attempt_using_memmap_auto_n
call fcn.140008c00
xor r8d, r8d
lea rdx, [rbp + 0x830]
mov ecx, 7
call qword [sym.imp.VMM.dll_VMMDLL_InitializeEx]
mov qword [0x1400a08a0], rax
test rax, rax
jne 0x14000370d
lea rcx, str.____DMA_initialization_failed_with_mmap__attempting_without_mmap._n
call fcn.140008c00
mov qword [rbp + 0xa60], rsi
mov qword [rbp + 0xa68], r14
mov qword [rbp + 0xa70], r15
mov qword [rbp + 0xa88], r12
lea rax, [0x1400119f4]
mov qword [rbp + 0xa78], rax
lea rax, str._printf
mov qword [rbp + 0xa80], rax
xor r8d, r8d
lea rdx, [rbp + 0xa60]
mov ecx, 5
call qword [sym.imp.VMM.dll_VMMDLL_InitializeEx]
mov qword [0x1400a08a0], rax
test rax, rax
jne 0x14000370d
lea rcx, str.____DMA_initialization_failed_without_mmap__power_cycle_PC._n
call fcn.140008c00
nop
mov rdx, qword [rbp + 0x740]
cmp rdx, 0xf
jbe 0x140003652
inc rdx
mov rcx, qword [rbp + 0x728]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000364d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000364d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f884
mov qword [rbp + 0x738], r13
mov qword [rbp + 0x740], 0xf
mov byte [rbp + 0x728], 0
mov rdx, qword [rbp + 0x778]
cmp rdx, 7
jbe 0x1400036b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x760]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400036af
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f884
movdqa xmm0, xmmword [0x1400123f0]
movdqu xmmword [rbp + 0x770], xmm0
mov word [rbp + 0x760], r13w
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140002132
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14000212d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jbe 0x14000212a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rbp + 0x788], r13
mov qword [rbp + 0x780], r13
lea r8, [rbp + 0x788]
movabs rdx, 0x300008100000000
mov rcx, rax
call qword [sym.imp.VMM.dll_VMMDLL_ConfigGet]
lea r8, [rbp + 0x780]
movabs rdx, 0x300008000000000
mov rcx, qword [0x1400a08a0]
call qword [sym.imp.VMM.dll_VMMDLL_ConfigGet]
mov rdx, qword [rbp + 0x788]
lea rcx, str.FPGA_ID:__llu_n
call fcn.140008c00
mov rdx, qword [rbp + 0x780]
lea rcx, str.DEVICE_ID:__llu_n
call fcn.140008c00
lea rcx, str.success__n
call fcn.140008c00
mov qword [rbp + 0x750], r13
mov qword [rbp + 0x720], r13
mov qword [rbp + 0x748], r13
lea r8, [rbp + 0x750]
movabs rdx, 0x300008100000000
mov rcx, qword [0x1400a08a0]
call qword [sym.imp.VMM.dll_VMMDLL_ConfigGet]
test eax, eax
jne 0x14000380c
lea r8, [rbp + 0x720]
movabs rdx, 0x300008200000000
mov rcx, qword [0x1400a08a0]
call qword [sym.imp.VMM.dll_VMMDLL_ConfigGet]
test eax, eax
je 0x14000380c
lea r8, [rbp + 0x748]
movabs rdx, 0x300008300000000
mov rcx, qword [0x1400a08a0]
call qword [sym.imp.VMM.dll_VMMDLL_ConfigGet]
test eax, eax
je 0x14000380c
lea rcx, str.____Failed_to_lookup_FPGA_device__Attempting_to_proceed_n_n
jmp 0x140003915
lea rcx, str.___VMMDLL_ConfigGet
call fcn.140008c00
mov rdx, qword [rbp + 0x750]
lea rcx, str._ID___lli
call fcn.140008c00
mov r8, qword [rbp + 0x748]
mov rdx, qword [rbp + 0x720]
lea rcx, str._VERSION___lli._lli_n
call fcn.140008c00
mov rax, qword [rbp + 0x720]
cmp rax, 4
jb 0x140003a6c
cmp rax, 5
jae 0x14000386a
cmp qword [rbp + 0x748], 7
jb 0x140003a6c
mov dword [rbp + 0x3e0], 0xc0fd0002
mov dword [rbp + 0x3e4], r13d
movsd xmm0, qword [str.existing]
movsd qword [rbp + 0x3e8], xmm0
movzx eax, byte [0x140011b40]
mov byte [rbp + 0x3f0], al
xor edx, edx
mov r8d, 0xfb
lea rcx, [rbp + 0x3f1]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x4ec]
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x5f0], r13
mov qword [rbp + 0x5f8], r13
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x600], xmm0
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp + 0x610]
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rbp + 0x714], eax
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.leechcore.dll_LcCreate]
mov rbx, rax
test rax, rax
jne 0x140003a2d
lea rcx, str.____Failed_to_create_FPGA_device_n
call fcn.140008c00
lea rcx, str.____Could_not_set_FPGA__n
call fcn.140008c00
mov rcx, qword [0x1400a08a0]
call qword [sym.imp.VMM.dll_VMMDLL_Close]
nop
mov rdx, qword [rbp + 0x740]
cmp rdx, 0xf
jbe 0x140003975
inc rdx
mov rcx, qword [rbp + 0x728]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003970
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003aab
call fcn.14000f884
mov qword [rbp + 0x738], r13
mov qword [rbp + 0x740], 0xf
mov byte [rbp + 0x728], 0
mov rdx, qword [rbp + 0x778]
cmp rdx, 7
jbe 0x1400039d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x760]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003b0d
call fcn.14000f884
movdqa xmm0, xmmword [0x1400123f0]
movdqu xmmword [rbp + 0x770], xmm0
mov word [rbp + 0x760], r13w
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140002132
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14000212d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jbe 0x14000212a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [0x1400170c0]
movabs rdx, 0x10800000002
mov r8d, 4
mov rcx, rbx
call qword [sym.imp.leechcore.dll_LcCommand]
lea rcx, str.____Register_auto_cleared_n
call fcn.140008c00
mov rcx, rbx
call qword [sym.imp.leechcore.dll_LcClose]
mov byte [0x1400a1490], 1
mov rdx, qword [rbp + 0x740]
cmp rdx, 0xf
jbe 0x140003ab7
inc rdx
mov rcx, qword [rbp + 0x728]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ab2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ab2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f884
mov qword [rbp + 0x738], r13
mov qword [rbp + 0x740], 0xf
mov byte [rbp + 0x728], 0
mov rdx, qword [rbp + 0x778]
cmp rdx, 7
jbe 0x140003b27
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x760]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f884
jmp 0x140003b27
lea rcx, str.DMA_already_initialized__n
call fcn.140008c00
cmp byte [0x1400a1450], 0
je 0x140003bbc
lea rcx, str.Process_already_initialized__n
call fcn.140008c00
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140003b7b
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140003b76
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140003c24
mov rcx, r8
call fcn.14000f884
mov al, 1
mov byte [rdi], 0
mov qword [rdi + 0x18], 0xf
mov qword [rdi + 0x10], r13
mov rcx, qword [rbp + 0xaf0]
xor rcx, rsp
call fcn.14000f5e0
lea r11, [rsp + 0xb50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rdx, rdi
lea rcx, [rbp + 0x390]
call fcn.1400086c0
mov rdx, rax
call fcn.140003d60
mov dword [0x1400a08c8], eax
test eax, eax
jne 0x140003c2b
lea rcx, str.____Could_not_get_PID_from_name__n
call fcn.140008c00
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140002132
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14000212d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jbe 0x14000212a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [0x1400a08e0]
cmp rcx, rdi
je 0x140003c4d
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140003c44
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
call fcn.140005e80
call fcn.140004930
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
test al, al
lea rdx, str.Failed_to_fix_CR3
je 0x140003c6b
lea rdx, str.CR3_fixed
call fcn.140001430
lea rdx, [0x140001610]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, rdi
lea rcx, [rbp + 0x370]
call fcn.1400086c0
mov rdx, rax
call fcn.140003e60
mov qword [0x1400a08d0], rax
test rax, rax
jne 0x140003caf
lea rcx, str.____Could_not_get_base_address__n
jmp 0x140003be4
mov rdx, rdi
lea rcx, [rbp + 0x350]
call fcn.1400086c0
mov rdx, rax
call fcn.1400046a0
mov qword [0x1400a08d8], rax
test rax, rax
jne 0x140003cde
lea rcx, str.____Could_not_get_base_size__n
jmp 0x140003be4
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140003ceb
mov rdx, qword [rdi]
lea rcx, str.Process_information_of__s_n
call fcn.140008c00
mov edx, dword [0x1400a08c8]
lea rcx, str.PID:__i_n
call fcn.140008c00
mov rdx, qword [0x1400a08d0]
lea rcx, str.Base_Address:_0x_llx_n
call fcn.140008c00
mov rdx, qword [0x1400a08d8]
lea rcx, str.Base_Size:_0x_llx_n
call fcn.140008c00
mov byte [0x1400a1450], 1
jmp 0x140003b41
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x7a0]
lea rcx, str.exists
call fcn.140008970
int3