Function at 0x1400196d0
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x450]
sub rsp, 0x550
mov rax, qword [0x14015d070]
xor rax, rsp
mov qword [rbp + 0x440], rax
xor r15d, r15d
movdqa xmm1, xmmword [0x140148f60]
movdqu xmmword [rsp + 0x60], xmm1
mov dl, 0x76
mov r8b, WSAStartup
mov r9b, 0x2f
mov r10b, 0x64
mov r11b, 0x79
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x61], al
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
xor r8b, cl
mov byte [rsp + 0x71], r8b
xor r9b, cl
mov byte [rsp + 0x72], r9b
xor r10b, cl
mov byte [rsp + 0x73], r10b
xor r11b, cl
mov byte [rsp + 0x74], r11b
xor bl, cl
mov byte [rsp + 0x75], bl
mov byte [rsp + 0x76], r15b
lea rcx, [rsp + 0x61]
call fcn.140017e30
mov dword [0x14015e484], eax
test eax, eax
je 0x14001b899
mov edx, eax
lea ecx, [r15 + 8]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp - 0x70], 0x238
cmp rax, 0xffffffffffffffff
je 0x14001981d
lea rdx, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x140019814
lea rdx, [rsp + 0x61]
lea rcx, [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x140019814
lea rdx, [rbp - 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x1400197f0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1d0]
lea rax, [rbp - 0x70]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140019830
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov r8d, dword [0x14015e484]
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
mov qword [0x14015e3c0], rax
xorps xmm0, xmm0
mov edi, dword [rbp - 0x50]
movdqu xmmword [rbp + 0x428], xmm0
mov qword [rbp + 0x438], r15
test rdi, rdi
je 0x140019900
mov edx, edi
lea rcx, [rbp + 0x428]
call fcn.140032030
mov rcx, qword [rbp + 0x428]
lea rbx, [rdi + rcx]
mov r8d, edi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x430], rbx
mov qword [rsp + 0x20], r15
mov r9, rdi
mov r8, qword [rbp + 0x428]
mov rdx, qword [rbp - 0x58]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
mov rax, qword [rbp + 0x1e8]
mov qword [0x14015e418], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e7c0]
sub rbx, qword [0x14015e7b8]
sar rbx, 2
movabs r13, 0x3fffffffffffffff
test rbx, rbx
je 0x1400199b6
cmp rbx, r13
ja 0x14001b8cf
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7c0]
mov rdx, qword [0x14015e7b8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019a06
lea rcx, [rsp + 0x78]
call fcn.140032030
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140017f00
mov qword [0x14015e590], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e670]
sub rbx, qword [0x14015e668]
sar rbx, 2
test rbx, rbx
je 0x140019a9d
cmp rbx, r13
ja 0x14001b8d5
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e670]
mov rdx, qword [0x14015e668]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019aed
lea rcx, [rsp + 0x78]
call fcn.140032030
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140017f00
mov qword [0x14015e458], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e758]
sub rbx, qword [0x14015e750]
sar rbx, 2
test rbx, rbx
je 0x140019b84
cmp rbx, r13
ja 0x14001b8db
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e758]
mov rdx, qword [0x14015e750]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019bd4
lea rcx, [rsp + 0x78]
call fcn.140032030
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140017f00
mov qword [0x14015e340], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e628]
sub rbx, qword [0x14015e620]
sar rbx, 2
test rbx, rbx
je 0x140019c6b
cmp rbx, r13
ja 0x14001b8e1
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e628]
mov rdx, qword [0x14015e620]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019cbb
lea rcx, [rsp + 0x78]
call fcn.140032030
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140017f00
mov qword [0x14015e3d0], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e770]
sub rbx, qword [0x14015e768]
sar rbx, 2
test rbx, rbx
je 0x140019d52
cmp rbx, r13
ja 0x14001b8e7
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e770]
mov rdx, qword [0x14015e768]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019da4
lea rcx, [rsp + 0x60]
call fcn.140032030
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.140017f00
mov qword [0x14015e3d8], rax
mov r12, 0xfffffffffffffffb
mov r8, qword [0x14015e590]
test r8, r8
je 0x14001a6c9
movss xmm0, dword [0x14015d0c4]
movss dword [rbp + 0x410], xmm0
mov eax, dword [0x14015e480]
test eax, eax
jne 0x14001a43e
mov rax, qword [0x14015e6a0]
cmp qword [0x14015e698], rax
jne 0x14001a6c9
mov eax, dword [rbp + 0x410]
movzx edx, al
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x14], edx
mov ecx, eax
shr ecx, 8
movzx edx, cl
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x18], edx
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x1c], edx
shr eax, 0x18
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rbx, qword [0x14015e720]
sub rbx, qword [0x14015e718]
sar rbx, 2
test rbx, rbx
je 0x140019ebf
cmp rbx, r13
ja 0x14001b8ed
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + rbx*4]
mov qword [rbp - 0x78], rcx
mov rbx, qword [0x14015e720]
mov rdx, qword [0x14015e718]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x80], rax
mov r8, qword [0x14015e590]
add r8, qword [0x14015e418]
lea r9, [rsp + 0x78]
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x48]
call fcn.1400180f0
mov rbx, rax
lea r15, [0x14015e718]
cmp r15, rax
je 0x140019f85
mov r8, qword [0x14015e718]
test r8, r8
je 0x140019f55
mov rcx, qword [0x14015e728]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x140019f36
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x140019fc7
mov r8, rcx
mov rcx, r8
call fcn.1400ef390
xorps xmm0, xmm0
movdqu xmmword [0x14015e718], xmm0
xor r15d, r15d
mov qword [0x14015e728], r15
jmp 0x140019f58
xor r15d, r15d
mov rax, qword [rbx]
mov qword [0x14015e718], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e720], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e728], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
jmp 0x140019f88
xor r15d, r15d
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140019fe1
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019fce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019fce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef390
mov qword [rsp + 0x48], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov edx, 4
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140019ff1
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 4]
mov r8, qword [0x14015e590]
lea rdx, [rbp - 0x70]
call fcn.140018210
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov rbx, qword [0x14015e700]
sub rbx, qword [0x14015e6f8]
sar rbx, 2
test rbx, rbx
je 0x14001a0ef
cmp rbx, r13
ja 0x14001b8f3
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x70], rcx
mov rbx, qword [0x14015e700]
mov rdx, qword [0x14015e6f8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rsi, [rdi + rbx*4]
mov qword [rsp + 0x68], rsi
jmp 0x14001a0f4
mov rsi, qword [rsp + 0x68]
mov word [rbp + 0x418], r14w
mov rdx, r15
mov rcx, rsi
mov rbx, qword [rsp + 0x60]
sub rcx, rbx
sar rcx, 2
movzx eax, r14w
test rcx, rcx
je 0x14001a137
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a127
inc rdx
cmp rdx, rcx
jb 0x14001a117
jmp 0x14001a137
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a170
nop dword [rax]
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a160
inc rdx
cmp rdx, rcx
jb 0x14001a150
jmp 0x14001a170
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a1a2
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a192
inc rdx
cmp rdx, rcx
jb 0x14001a182
jmp 0x14001a1a2
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x70]
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x60], r15
mov rcx, qword [0x14015e6f8]
test rcx, rcx
je 0x14001a202
mov rax, qword [0x14015e708]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001a1fd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a405
mov rcx, r8
call fcn.1400ef390
mov qword [0x14015e6f8], rbx
mov qword [0x14015e700], rsi
mov qword [0x14015e708], rdi
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov r14, qword [0x14015e720]
sub r14, qword [0x14015e718]
sar r14, 2
test r14, r14
je 0x14001a2a6
cmp r14, r13
ja 0x14001b8f9
mov rdx, r14
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + r14*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e720]
mov rdx, qword [0x14015e718]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov rsi, qword [0x14015e700]
mov rbx, qword [0x14015e6f8]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
sub rsi, rbx
sar rsi, 2
test rsi, rsi
je 0x14001a30c
cmp rsi, r13
ja 0x14001b8ff
mov rdx, rsi
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + rsi*4]
mov qword [rbp - 0x78], rcx
mov rbx, qword [0x14015e700]
mov rdx, qword [0x14015e6f8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x80], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x48]
call fcn.140018310
mov rbx, rax
lea rsi, [0x14015e6f8]
cmp rsi, rax
je 0x14001a3bf
mov r8, qword [0x14015e6f8]
test r8, r8
je 0x14001a394
mov rcx, qword [0x14015e708]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001a37a
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001a3fe
mov r8, rcx
mov rcx, r8
call fcn.1400ef390
xorps xmm0, xmm0
movdqu xmmword [0x14015e6f8], xmm0
mov qword [0x14015e708], r15
mov rax, qword [rbx]
mov qword [0x14015e6f8], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e700], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e708], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001a411
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a40c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a40c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef390
cmp byte [0x14015e32a], 0
jne 0x14001a6c9
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, qword [0x14015e418]
add rdx, qword [0x14015e590]
jmp 0x14001a6ba
cmp eax, 1
jne 0x14001a6c9
mov rax, qword [0x14015e6a0]
cmp qword [0x14015e698], rax
je 0x14001a6c9
mov r14, qword [0x14015e418]
add r14, r8
lea rsi, [0x14015e6f8]
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, r14
call fcn.140018430
mov rdi, rax
mov r10d, dword [0x14015e480]
mov r9, qword [0x14015e6a0]
sub r9, qword [0x14015e698]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001a4b1
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400184b0
mov r13, rax
lea rdx, [0x14015e698]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, r13
call fcn.140018710
mov rcx, r14
sub rcx, r13
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [r13 + 0x1000]
mov qword [0x14015e320], rax
mov qword [0x14015e438], r14
mov qword [0x14015e470], r13
lea r15, [0x14015e718]
mov rdx, r15
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, qword [0x14015e418]
add r8, qword [0x14015e590]
mov r9, rax
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.1400180f0
mov rdx, rax
mov rcx, r15
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140018790
mov rdx, rax
mov rcx, rsi
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e698]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e698]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
mov dword [rbp + 0x418], 0x40400000
cmp byte [0x14015e32a], 0
jne 0x14001a660
movss xmm0, dword [0x14015d0c4]
movss dword [rbp + 0x418], xmm0
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 4]
lea r8, [rbp + 0x418]
mov rdx, qword [0x14015e320]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e698]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, r13
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, r14
mov r8, rax
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
mov rcx, qword [0x14015e340]
test rcx, rcx
je 0x14001a971
cmp dword [0x14015e468], 1
jne 0x14001a971
mov rax, qword [0x14015e6b8]
cmp qword [0x14015e6b0], rax
je 0x14001a971
mov rsi, qword [0x14015e418]
add rsi, rcx
lea rdx, [0x14015e788]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, rsi
call fcn.140018430
mov rdi, rax
mov r10d, dword [0x14015e468]
mov r9, qword [0x14015e6b8]
sub r9, qword [0x14015e6b0]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001a750
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400184b0
mov r14, rax
lea rdx, [0x14015e6b0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, r14
call fcn.140018710
mov rcx, rsi
sub rcx, r14
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015e3f8], rax
mov qword [0x14015e450], rsi
mov qword [0x14015e5a0], r14
lea rdx, [0x14015e738]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r9, rax
mov r8, rsi
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.1400180f0
mov rdx, rax
lea rcx, [0x14015e738]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e788]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e788]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e6b0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e6b0]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
mov dword [0x14015e50c], 0x41a00000
cmp byte [0x14015e329], 0
jne 0x14001a905
movss xmm0, dword [0x14015d1c4]
mulss xmm0, dword [0x140148220]
movss dword [0x14015e50c], xmm0
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [0x14015e50c]
mov rdx, qword [0x14015e3f8]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e6b0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
lea rdx, [0x14015e788]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
mov rcx, qword [0x14015e3d0]
test rcx, rcx
je 0x14001ac0b
cmp dword [0x14015e3b4], 1
jne 0x14001ac0b
mov rax, qword [0x14015e818]
cmp qword [0x14015e810], rax
je 0x14001ac0b
mov r14, qword [0x14015e418]
add r14, rcx
lea rdx, [0x14015e6e0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, r14
call fcn.140018430
mov rdi, rax
mov r10d, dword [0x14015e3b4]
mov r9, qword [0x14015e818]
sub r9, qword [0x14015e810]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001aa00
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400184b0
mov rsi, rax
lea rdx, [0x14015e810]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, rsi
call fcn.140018710
mov rcx, r14
sub rcx, rsi
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [rsi + 0x1000]
mov qword [0x14015e598], rax
mov qword [0x14015e348], r14
mov qword [0x14015e430], rsi
lea rdx, [0x14015e650]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, qword [0x14015e418]
add r8, qword [0x14015e3d0]
mov r9, rax
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.1400180f0
mov rdx, rax
lea rcx, [0x14015e650]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e6e0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e6e0]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e810]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e810]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
mov dword [rbp + 0x410], 1
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x410]
mov rdx, qword [0x14015e598]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e810]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
lea rdx, [0x14015e6e0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
mov rcx, qword [0x14015e3d8]
test rcx, rcx
je 0x14001af11
cmp dword [0x14015e4ec], 2
jne 0x14001af11
mov rax, qword [0x14015e640]
cmp qword [0x14015e638], rax
je 0x14001af11
mov rsi, qword [0x14015e418]
add rsi, rcx
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, rsi
call fcn.140018430
mov rdi, rax
mov r10d, dword [0x14015e4ec]
mov r9, qword [0x14015e640]
sub r9, qword [0x14015e638]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001ac90
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400184b0
mov r14, rax
lea rdx, [0x14015e638]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, r14
call fcn.140018710
mov rcx, rsi
sub rcx, r14
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015e5b8], rax
add rax, 4
mov qword [0x14015e3e8], rax
mov qword [0x14015e3f0], rsi
mov qword [0x14015e408], r14
lea rdx, [0x14015e6c8]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, qword [0x14015e418]
add r8, qword [0x14015e3d8]
mov r9, rax
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.1400180f0
mov rdx, rax
lea rcx, [0x14015e6c8]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e680]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e638]
lea rcx, [rsp + 0x30]
call fcn.14002b1d0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e638]
call fcn.14002b130
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001ae7f
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ae6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ae6c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef390
mov qword [rsp + 0x48], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [0x14015d0d0]
mov rdx, qword [0x14015e5b8]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [0x14015d0fc]
mov rdx, qword [0x14015e3e8]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e638]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
mov rax, qword [0x14015e458]
test rax, rax
je 0x14001b84f
lea rcx, [rax + 2]
mov qword [0x14015e458], rcx
cmp dword [0x14015e3ac], 2
jne 0x14001b84f
mov rax, qword [0x14015e7f0]
cmp qword [0x14015e7e8], rax
je 0x14001b84f
mov r14, qword [0x14015e418]
add r14, rcx
lea rdx, [0x14015e7a0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, r14
call fcn.140018430
mov rdi, rax
mov r10d, dword [0x14015e3ac]
mov r9, qword [0x14015e7f0]
sub r9, qword [0x14015e7e8]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001afa0
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400184b0
mov r13, rax
lea rsi, [0x14015e7e8]
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov rdx, rax
mov rcx, r13
call fcn.140018710
mov rcx, r14
sub rcx, r13
mov rbx, r12
sub rbx, rcx
sub rax, rdi
sub r12, rax
lea rax, [r13 + 0x1000]
mov qword [0x14015e3e0], rax
add rax, 4
mov qword [0x14015e338], rax
mov qword [0x14015e3a0], r14
mov qword [0x14015e410], r13
lea rdx, [0x14015e7d0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r9, rax
mov r8, r14
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.1400180f0
mov rdx, rax
lea rcx, [0x14015e7d0]
call fcn.14002b130
lea rcx, [rsp + 0x30]
call fcn.14002b0d0
lea rdx, [0x14015e7a0]
lea rcx, [rsp + 0x30]
call fcn.14002b1d0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140018790
mov rdx, rax
lea rcx, [0x14015e7a0]
call fcn.14002b130
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001b13c
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b137
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b137
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef390
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e7f0]
sub rbx, qword [0x14015e7e8]
sar rbx, 2
test rbx, rbx
je 0x14001b1bb
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x14001b905
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0x30]
mov rdx, r12
lea rcx, [rsp + 0x48]
call fcn.140018790
mov rbx, rax
cmp rsi, rax
je 0x14001b265
mov r8, qword [0x14015e7e8]
test r8, r8
je 0x14001b23a
mov rcx, qword [0x14015e7f8]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001b220
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001b2a4
mov r8, rcx
mov rcx, r8
call fcn.1400ef390
mov qword [0x14015e7e8], r15
xorps xmm0, xmm0
movdqu xmmword [0x14015e7f0], xmm0
mov rax, qword [rbx]
mov qword [0x14015e7e8], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e7f0], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e7f8], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001b2be
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b2ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b2ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef390
mov qword [rsp + 0x48], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b2d0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 5]
mov r8, qword [0x14015e458]
lea rdx, [rbp - 0x70]
call fcn.140018210
mov rsi, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov rbx, qword [0x14015e7f0]
sub rbx, qword [0x14015e7e8]
sar rbx, 2
test rbx, rbx
je 0x14001b3d8
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x14001b90b
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x70], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rbx, [rdi + rbx*4]
mov qword [rsp + 0x68], rbx
jmp 0x14001b3dd
mov rbx, qword [rsp + 0x68]
mov word [rbp + 0x418], si
mov rcx, r15
mov rax, rbx
mov rdi, qword [rsp + 0x60]
sub rax, rdi
sar rax, 2
test rax, rax
je 0x14001b424
nop dword [rax + rax]
cmp dword [rdi + rcx*4], 0xfffffffe
je 0x14001b410
inc rcx
cmp rcx, rax
jb 0x14001b400
jmp 0x14001b424
movzx eax, byte [rbp + 0x418]
mov dword [rdi + rcx*4], eax
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov r15, qword [rsp + 0x70]
xor r12d, r12d
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x60], r12
mov rcx, qword [0x14015e7e8]
test rcx, rcx
je 0x14001b487
mov rax, qword [0x14015e7f8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001b482
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b50e
mov rcx, r8
call fcn.1400ef390
mov qword [0x14015e7e8], rdi
mov qword [0x14015e7f0], rbx
mov qword [0x14015e7f8], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
sub rbx, rdi
sar rbx, 2
test rbx, rbx
je 0x14001b515
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x14001b911
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + rbx*4]
mov qword [rbp - 0x78], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rbx, [rdi + rbx*4]
mov qword [rbp - 0x80], rbx
jmp 0x14001b519
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [rbp - 0x80]
lea rax, [rsi + 4]
mov word [rbp + 0x418], ax
mov rcx, r12
mov rax, rbx
mov rdi, qword [rsp + 0x78]
sub rax, rdi
sar rax, 2
test rax, rax
je 0x14001b563
nop dword [rax + rax]
cmp dword [rdi + rcx*4], 0xfffffffe
je 0x14001b550
inc rcx
cmp rcx, rax
jb 0x14001b540
jmp 0x14001b563
movzx eax, byte [rbp + 0x418]
mov dword [rdi + rcx*4], eax
mov rbx, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov r15, qword [rbp - 0x78]
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r12
mov qword [rsp + 0x78], r12
mov rcx, qword [0x14015e7e8]
test rcx, rcx
je 0x14001b5c0
mov rax, qword [0x14015e7f8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001b5bb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b64b
mov rcx, r8
call fcn.1400ef390
mov qword [0x14015e7e8], rdi
mov qword [0x14015e7f0], rbx
mov qword [0x14015e7f8], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
sub rbx, rdi
sar rbx, 2
movabs r15, 0x3fffffffffffffff
test rbx, rbx
je 0x14001b652
cmp rbx, r15
ja 0x14001b917
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rdi, [rdi + rbx*4]
mov qword [rsp + 0x38], rdi
jmp 0x14001b657
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdi, qword [rsp + 0x38]
lea rax, [rsi + 8]
mov word [rbp + 0x418], ax
mov rcx, r12
mov rax, rdi
mov rbx, qword [rsp + 0x30]
sub rax, rbx
sar rax, 2
test rax, rax
je 0x14001b6a4
nop dword [rax]
cmp dword [rbx + rcx*4], 0xfffffffe
je 0x14001b690
inc rcx
cmp rcx, rax
jb 0x14001b680
jmp 0x14001b6a4
movzx eax, byte [rbp + 0x418]
mov dword [rbx + rcx*4], eax
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov rcx, qword [0x14015e7e8]
test rcx, rcx
je 0x14001b704
mov rax, qword [0x14015e7f8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001b6ff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b88d
mov rcx, r8
call fcn.1400ef390
mov qword [0x14015e7e8], rbx
mov qword [0x14015e7f0], rdi
mov qword [0x14015e7f8], rsi
mov dword [rbp + 0x420], 0x3f800000
mov dword [rbp + 0x410], 0x3f800000
cmp byte [0x14015e425], r12b
jne 0x14001b756
movss xmm0, dword [0x14015d1b4]
movss dword [rbp + 0x420], xmm0
movss xmm1, dword [0x14015d0c0]
movss dword [rbp + 0x410], xmm1
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x420]
mov rdx, qword [0x14015e3e0]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x410]
mov rdx, qword [0x14015e338]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov rbx, qword [0x14015e7f0]
sub rbx, qword [0x14015e7e8]
sar rbx, 2
test rbx, rbx
je 0x14001b817
cmp rbx, r15
ja 0x14001b8c9
mov rdx, rbx
call fcn.140033110
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0x30]
mov rdx, r13
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
lea rdx, [0x14015e7a0]
lea rcx, [rsp + 0x48]
call fcn.14002b1d0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140018f40
nop
mov rcx, qword [rbp + 0x428]
test rcx, rcx
je 0x14001b899
mov rdx, qword [rbp + 0x438]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b894
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b894
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400ef390
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.1400ef370
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14002ee40
nop
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
nop
call fcn.14002ee40
nop
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
int3
call fcn.14002ee40
int3