Function at 0x14000e3a0
Capabilities:
Enumerate process modules

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x378
lea rbp, [rsp + 0x80]
movdqa xmmword [rbp + 0x2e0], xmm12
movdqa xmmword [rbp + 0x2d0], xmm11
movdqa xmmword [rbp + 0x2c0], xmm10
movdqa xmmword [rbp + 0x2b0], xmm9
movdqa xmmword [rbp + 0x2a0], xmm8
movdqa xmmword [rbp + 0x290], xmm7
movdqa xmmword [rbp + 0x280], xmm6
mov qword [rbp + 0x278], 0xfffffffffffffffe
mov qword [rbp + 0x250], rdx
mov qword [rbp + 0x1e0], rcx
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rbx, rax
mov qword [rbp + 0x1f8], rax
mov qword [rbp - 0x50], 0
mov qword [rbp - 0x48], 8
mov qword [rbp - 0x40], 0
mov dword [rbp + 0x208], 0
mov dword [rsp + 0x20], 3
mov esi, 8
lea r9, [rbp + 0x208]
mov edx, 8
mov rcx, rax
xor r8d, r8d
call sub.psapi.dll_EnumProcessModulesEx
test eax, eax
je 0x14000f676
lea r14, [rbp - 0x50]
xor r15d, r15d
xor edi, edi
jmp 0x14000e4b4
mov r13, rdi
mov qword [rbp - 0x40], r13
lea r8d, [r13*8]
mov dword [rsp + 0x20], 3
mov rcx, rbx
mov rdx, rsi
lea r9, [rbp + 0x208]
call sub.psapi.dll_EnumProcessModulesEx
mov r15, r13
test eax, eax
je 0x14000f4f4
mov eax, edi
mov edi, dword [rbp + 0x208]
cmp edi, eax
jbe 0x14000e54c
cmp r15, rdi
jae 0x14000e480
mov r12, rdi
sub r12, r15
mov rax, qword [rbp - 0x50]
sub rax, r15
mov r13, r15
cmp rax, r12
jb 0x14000e50b
lea rcx, [rsi + r13*8]
cmp r12, 2
jb 0x14000e530
lea r8, [r12*8 - 8]
xor edx, edx
call fcn.140027ff0
lea rax, [r12 + r13]
lea rcx, [rsi + rax*8]
add rcx, 0xfffffffffffffff8
add r13, r12
dec r13
jmp 0x14000e539
mov rcx, r14
mov rdx, r15
mov r8, r12
call fcn.1400378d0
mov rsi, qword [rbp - 0x48]
mov r13, qword [rbp - 0x40]
lea rcx, [rsi + r13*8]
cmp r12, 2
jae 0x14000e4e8
nop dword [rax + rax]
cmp r15, rdi
je 0x14000e483
mov qword [rcx], 0
inc r13
mov rsi, qword [rbp - 0x48]
jmp 0x14000e483
mov rax, rdi
shr rax, 3
mov rcx, rax
mov qword [rbp + 0x238], rax
cmp r15, rax
jb 0x14000f68b
cmp edi, 8
jae 0x14000f3dc
mov r14d, 8
xor edi, edi
cmp qword [rbp - 0x50], 0
je 0x14000e590
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
test rdi, rdi
je 0x14000f39e
shl rdi, 4
add rdi, r14
mov rsi, qword [rbp + 0x250]
mov rax, rsi
not rax
shr rax, 0x3f
mov qword [rbp + 0x1f0], rax
mov rax, rsi
and rax, 0xffffffffffffffe0
mov qword [rbp + 0x1e8], rax
and rsi, 0xfffffffffffffff8
lea r12, [rbp - 0x50]
movdqa xmm6, xmmword [0x140038600]
movdqa xmm7, xmmword [0x140038610]
movdqa xmm8, xmmword [0x140038620]
movdqa xmm9, xmmword [0x140038560]
movdqa xmm10, xmmword [0x140038570]
movdqa xmm11, xmmword [0x140038580]
mov rax, r14
mov qword [rbp + 0x1d0], r14
nop dword [rax]
mov rbx, qword [rax]
mov qword [rbp + 0x1c8], rax
movdqu xmm12, xmmword [rax]
mov r8d, 0x208
mov rcx, r12
xor edx, edx
call fcn.140027ff0
pshufd xmm0, xmm12, 0xee
movq rax, xmm0
mov qword [rbp + 0x1c0], rax
mov rcx, qword [rax]
mov qword [rbp + 0x1d8], rbx
mov rdx, rbx
mov r8, r12
mov r9d, 0x104
call sub.psapi.dll_GetModuleBaseNameW
test eax, eax
je 0x14000f582
mov r8d, eax
cmp eax, 0x105
jae 0x14000f576
lea rcx, [rbp + 0x208]
mov rdx, r12
call fcn.14001ea30
mov r13, qword [rbp + 0x210]
mov rax, qword [rbp + 0x218]
test rax, rax
mov qword [rbp + 0x270], rax
je 0x14000e7b0
lea r15, [rax + r13]
xor ebx, ebx
mov rcx, r13
jmp 0x14000e6cf
add rcx, 2
cmp rax, r15
cmovne rax, rcx
mov edx, 2
nop word [rax + rax]
add rbx, rdx
mov rcx, rax
cmp rax, r15
je 0x14000e750
lea rax, [rcx + 1]
movzx r8d, byte [rcx]
mov edx, 1
test r8b, r8b
jns 0x14000e6c0
cmp r8b, 0xe0
jb 0x14000e6aa
cmp r8b, 0xed
jne 0x14000e713
cmp rax, r15
je 0x14000e750
lea rax, [rcx + 2]
cmp rax, r15
je 0x14000e750
cmp byte [rcx + 1], 0xa0
jae 0x14000e974
add rcx, 3
mov edx, 3
mov rax, rcx
jmp 0x14000e6c0
add rcx, 2
cmp rax, r15
cmove rcx, rax
xor eax, eax
cmp rcx, r15
setne al
add rax, rcx
mov edx, 3
cmp r8b, 0xf0
jb 0x14000e6c0
xor ecx, ecx
cmp rax, r15
setne cl
add rax, rcx
mov edx, 4
jmp 0x14000e6c0
cmp qword [rbp + 0x270], 0
je 0x14000e7b0
js 0x14000f555
mov rax, qword [0x14037d038]
test rax, rax
jne 0x14000e782
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14000f663
mov qword [0x14037d038], rax
mov rcx, rax
xor edx, edx
mov r8, qword [rbp + 0x270]
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
jne 0x14000e7b5
jmp 0x14000f663
mov ebx, 1
mov rcx, rbx
mov rdx, r13
mov r14, qword [rbp + 0x270]
mov r8, r14
call fcn.140027940
cmp qword [rbp + 0x208], 0
je 0x14000e7ea
mov r8, qword [rbp + 0x210]
mov rcx, qword [0x14037d038]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, r12
mov qword [rbp + 0x230], rbx
mov rdx, rbx
mov qword [rbp + 0x200], r14
mov r8, r14
call fcn.140008040
mov rax, qword [rbp - 0x48]
mov qword [rbp + 0x240], rax
mov r12, qword [rbp - 0x40]
mov r13d, 1
mov ebx, 1
test r12, r12
mov r14, qword [rbp + 0x250]
je 0x14000ebff
js 0x14000f555
mov rax, qword [0x14037d038]
test rax, rax
jne 0x14000e858
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14000f63e
mov qword [0x14037d038], rax
mov rcx, rax
xor edx, edx
mov r8, r12
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x14000f63e
mov r15, rax
mov rbx, rax
mov rcx, r15
mov rdx, qword [rbp + 0x240]
mov r8, r12
call fcn.140027940
mov rax, r15
cmp r12, 8
mov r14, qword [rbp + 0x250]
jb 0x14000ebd0
cmp r12, 0x20
jae 0x14000e8a5
xor eax, eax
jmp 0x14000e920
mov rax, r12
and rax, 0xffffffffffffffe0
xor ecx, ecx
nop
movdqu xmm0, xmmword [rbx + rcx]
movdqu xmm1, xmmword [rbx + rcx + 0x10]
movdqa xmm2, xmm0
paddb xmm2, xmm9
movdqa xmm3, xmm1
paddb xmm3, xmm9
movdqa xmm4, xmm2
pminub xmm4, xmm10
pcmpeqb xmm4, xmm2
pand xmm4, xmm11
movdqa xmm2, xmm3
pminub xmm2, xmm10
pcmpeqb xmm2, xmm3
pand xmm2, xmm11
por xmm4, xmm0
por xmm2, xmm1
movdqu xmmword [rbx + rcx], xmm4
movdqu xmmword [rbx + rcx + 0x10], xmm2
add rcx, 0x20
cmp rax, rcx
jne 0x14000e8b0
cmp r12, rax
je 0x14000ebff
test r12b, 0x18
je 0x14000ebc6
mov rcx, r12
and rcx, 0xfffffffffffffff8
nop word [rax + rax]
movq xmm0, qword [rbx + rax]
movdqa xmm1, xmm0
paddb xmm1, xmm6
movdqa xmm2, xmm1
pmaxub xmm2, xmm7
pcmpeqb xmm2, xmm1
pandn xmm2, xmm8
por xmm2, xmm0
movq qword [rbx + rax], xmm2
add rax, 8
cmp rcx, rax
jne 0x14000e930
cmp r12, rcx
je 0x14000ebff
add rcx, r15
mov rax, rcx
jmp 0x14000ebd0
mov r14, qword [rbp + 0x270]
test r14, r14
js 0x14000f555
mov rax, qword [0x14037d038]
test rax, rax
jne 0x14000e9a6
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14000f62f
mov qword [0x14037d038], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x14000f62f
mov qword [rbp + 0x258], r14
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x268], 0
mov r12, r14
sub r12, rbx
jb 0x14000f73a
mov rcx, rax
mov rdx, r13
mov r8, rbx
mov r14, rax
call fcn.140027940
mov rcx, r14
mov qword [rbp + 0x268], rbx
mov r14, rbx
cmp r12, 2
ja 0x14000ea30
mov r8d, 3
lea rcx, [rbp + 0x258]
mov rdx, rbx
call fcn.140036210
mov rcx, qword [rbp + 0x260]
mov r14, qword [rbp + 0x268]
nop dword [rax]
lea rax, [rcx + r14]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add r14, 3
mov qword [rbp + 0x268], r14
mov r12, rbx
add r12, 3
cmp r12, qword [rbp + 0x270]
ja 0x14000f722
je 0x14000f319
lea r9, [r12 + r13]
mov rbx, r12
mov qword [rbp + 0x240], r9
jmp 0x14000ea9f
add r9, 2
cmp rax, r15
cmovne rax, r9
mov edx, 2
nop word cs:[rax + rax]
add rbx, rdx
mov r9, rax
cmp rax, r15
je 0x14000f320
lea rax, [r9 + 1]
movzx r8d, byte [r9]
mov edx, 1
test r8b, r8b
jns 0x14000ea90
cmp r8b, 0xe0
jb 0x14000ea72
cmp r8b, 0xed
jne 0x14000eae8
cmp rax, r15
je 0x14000f320
lea rax, [r9 + 2]
cmp rax, r15
je 0x14000f320
cmp byte [r9 + 1], 0xa0
jae 0x14000eb1e
add r9, 3
mov edx, 3
mov rax, r9
jmp 0x14000ea90
add r9, 2
cmp rax, r15
cmove r9, rax
xor eax, eax
cmp r9, r15
setne al
add rax, r9
mov edx, 3
cmp r8b, 0xf0
jb 0x14000ea90
xor edx, edx
cmp rax, r15
setne dl
add rax, rdx
mov edx, 4
jmp 0x14000ea90
mov r8, rbx
sub r8, r12
jb 0x14000f76a
cmp rbx, qword [rbp + 0x270]
ja 0x14000f752
mov rdx, qword [rbp + 0x258]
mov rax, rdx
sub rax, r14
cmp rax, r8
jae 0x14000eb7c
lea rcx, [rbp + 0x258]
mov rdx, r14
mov r12, r8
call fcn.140036210
mov r14, qword [rbp + 0x268]
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x230], rax
mov rcx, qword [rbp + 0x260]
mov r8, r12
jmp 0x14000eb83
mov qword [rbp + 0x230], rdx
mov qword [rbp + 0x200], rcx
add rcx, r14
mov rdx, qword [rbp + 0x240]
mov r12, r8
call fcn.140027940
add r14, r12
mov qword [rbp + 0x268], r14
mov rax, qword [rbp + 0x230]
sub rax, r14
cmp rax, 2
jbe 0x14000f2ff
mov rcx, qword [rbp + 0x200]
jmp 0x14000ea30
add rax, r15
nop dword [rax]
add r15, r12
nop word cs:[rax + rax]
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
mov byte [rax], dl
lea rcx, [rax + 1]
mov rax, rcx
cmp rcx, r15
jne 0x14000ebe0
test r14, r14
je 0x14000ed7f
js 0x14000f555
mov rax, qword [0x14037d038]
test rax, rax
jne 0x14000ec30
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14000f64d
mov qword [0x14037d038], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x14000f64d
mov r15, rax
mov r13, rax
mov rcx, r15
mov rdx, qword [rbp + 0x1e0]
mov r8, r14
call fcn.140027940
mov rax, r15
cmp r14, 8
jb 0x14000ed50
xor eax, eax
cmp r14, 0x20
jb 0x14000ed00
mov rcx, qword [rbp + 0x1e8]
nop
movdqu xmm0, xmmword [r13 + rax]
movdqu xmm1, xmmword [r13 + rax + 0x10]
movdqa xmm2, xmm0
paddb xmm2, xmm9
movdqa xmm3, xmm1
paddb xmm3, xmm9
movdqa xmm4, xmm2
pminub xmm4, xmm10
pcmpeqb xmm4, xmm2
pand xmm4, xmm11
movdqa xmm2, xmm3
pminub xmm2, xmm10
pcmpeqb xmm2, xmm3
pand xmm2, xmm11
por xmm4, xmm0
por xmm2, xmm1
movdqu xmmword [r13 + rax], xmm4
movdqu xmmword [r13 + rax + 0x10], xmm2
add rax, 0x20
cmp rcx, rax
jne 0x14000ec80
cmp rcx, r14
je 0x14000ed7f
mov rax, rcx
test r14b, 0x18
je 0x14000ed3f
nop word cs:[rax + rax]
movq xmm0, qword [r13 + rax]
movdqa xmm1, xmm0
paddb xmm1, xmm6
movdqa xmm2, xmm1
pmaxub xmm2, xmm7
pcmpeqb xmm2, xmm1
pandn xmm2, xmm8
por xmm2, xmm0
movq qword [r13 + rax], xmm2
add rax, 8
cmp rsi, rax
jne 0x14000ed00
cmp rsi, r14
je 0x14000ed7f
lea rax, [r15 + rsi]
jmp 0x14000ed50
lea rax, [r15 + rcx]
nop word cs:[rax + rax]
add r15, r14
nop word cs:[rax + rax]
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
mov byte [rax], dl
lea rcx, [rax + 1]
mov rax, rcx
cmp rcx, r15
jne 0x14000ed60
cmp r12, r14
jne 0x14000edb0
mov rcx, rbx
mov rdx, r13
mov r8, qword [rbp + 0x250]
call fcn.140028750
mov r14, qword [rbp + 0x250]
test eax, eax
sete r15b
test r14, r14
jne 0x14000edb8
jmp 0x14000edca
xor r15d, r15d
test r14, r14
je 0x14000edca
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapFree]
test r12, r12
je 0x14000ede1
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
cmp qword [rbp - 0x50], 0
mov r14, qword [rbp + 0x1d0]
lea rbx, [rbp - 0x50]
mov r12, qword [rbp + 0x270]
je 0x14000ee10
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, qword [rbp + 0x240]
call qword [sym.imp.kernel32.dll_HeapFree]
test r12, r12
je 0x14000ee2b
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, qword [rbp + 0x230]
call qword [sym.imp.kernel32.dll_HeapFree]
test r15b, r15b
jne 0x14000f46c
mov r8d, 0x208
mov rcx, rbx
xor edx, edx
call fcn.140027ff0
mov rax, qword [rbp + 0x1c0]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1d8]
mov r8, rbx
mov r9d, 0x104
call sub.psapi.dll_GetModuleFileNameExW
test eax, eax
je 0x14000f5be
mov r8d, eax
cmp eax, 0x105
jae 0x14000f616
lea rcx, [rbp + 0x210]
mov rdx, rbx
call fcn.14001ea30
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x270], rax
mov r13, qword [rbp + 0x218]
mov r14, qword [rbp + 0x220]
mov r12d, 1
mov r15d, 1
test r14, r14
je 0x14000f0bf
lea rax, [r14 + r13]
mov rdx, r13
jmp 0x14000eed8
add rdx, 2
cmp rcx, rax
cmovne rcx, rdx
nop dword [rax]
mov rdx, rcx
cmp rcx, rax
je 0x14000ef40
lea rcx, [rdx + 1]
movzx r8d, byte [rdx]
test r8b, r8b
jns 0x14000eed0
cmp r8b, 0xe0
jb 0x14000eec2
cmp r8b, 0xed
jne 0x14000ef12
cmp rcx, rax
je 0x14000ef40
lea rcx, [rdx + 2]
cmp rcx, rax
je 0x14000ef40
cmp byte [rdx + 1], 0xa0
jae 0x14000f55c
add rdx, 3
mov rcx, rdx
jmp 0x14000eed0
add rdx, 2
cmp rcx, rax
cmove rdx, rcx
xor ecx, ecx
cmp rdx, rax
setne cl
add rcx, rdx
cmp r8b, 0xf0
jb 0x14000eed0
xor edx, edx
cmp rcx, rax
setne dl
add rcx, rdx
jmp 0x14000eed0
test r14, r14
js 0x14000f555
mov rax, qword [0x14037d038]
test rax, rax
jne 0x14000ef6b
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14000f62f
mov qword [0x14037d038], rax
mov rcx, rax
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x14000f62f
mov rbx, rax
mov r15, rax
mov rcx, rbx
mov rdx, r13
mov r8, r14
call fcn.140027940
mov rax, rbx
cmp r14, 8
jb 0x14000f090
cmp r14, 0x20
jae 0x14000efb0
xor eax, eax
jmp 0x14000f030
mov rax, r14
and rax, 0xffffffffffffffe0
xor ecx, ecx
nop dword [rax]
movdqu xmm0, xmmword [r15 + rcx]
movdqu xmm1, xmmword [r15 + rcx + 0x10]
movdqa xmm2, xmm0
paddb xmm2, xmm9
movdqa xmm3, xmm1
paddb xmm3, xmm9
movdqa xmm4, xmm2
pminub xmm4, xmm10
pcmpeqb xmm4, xmm2
pand xmm4, xmm11
movdqa xmm2, xmm3
pminub xmm2, xmm10
pcmpeqb xmm2, xmm3
pand xmm2, xmm11
por xmm4, xmm0
por xmm2, xmm1
movdqu xmmword [r15 + rcx], xmm4
movdqu xmmword [r15 + rcx + 0x10], xmm2
add rcx, 0x20
cmp rax, rcx
jne 0x14000efc0
cmp r14, rax
je 0x14000f0bf
test r14b, 0x18
je 0x14000f07f
mov rcx, r14
and rcx, 0xfffffffffffffff8
nop word [rax + rax]
movq xmm0, qword [r15 + rax]
movdqa xmm1, xmm0
paddb xmm1, xmm6
movdqa xmm2, xmm1
pmaxub xmm2, xmm7
pcmpeqb xmm2, xmm1
pandn xmm2, xmm8
por xmm2, xmm0
movq qword [r15 + rax], xmm2
add rax, 8
cmp rcx, rax
jne 0x14000f040
cmp r14, rcx
je 0x14000f0bf
add rcx, rbx
mov rax, rcx
jmp 0x14000f090
add rax, rbx
nop word cs:[rax + rax]
add rbx, r14
nop word cs:[rax + rax]
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
mov byte [rax], dl
lea rcx, [rax + 1]
mov rax, rcx
cmp rcx, rbx
jne 0x14000f0a0
mov qword [rbp + 0x240], r13
mov r13, qword [rbp + 0x250]
test r13, r13
je 0x14000f24f
js 0x14000f555
mov rax, qword [0x14037d038]
test rax, rax
jne 0x14000f0fe
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14000f652
mov qword [0x14037d038], rax
mov rcx, rax
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x14000f652
mov rbx, rax
mov r12, rax
mov rcx, rbx
mov rdx, qword [rbp + 0x1e0]
mov r8, r13
call fcn.140027940
mov rax, rbx
cmp r13, 8
jb 0x14000f220
xor eax, eax
cmp r13, 0x20
jb 0x14000f1d0
mov rcx, qword [rbp + 0x1e8]
nop dword [rax]
movdqu xmm0, xmmword [r12 + rax]
movdqu xmm1, xmmword [r12 + rax + 0x10]
movdqa xmm2, xmm0
paddb xmm2, xmm9
movdqa xmm3, xmm1
paddb xmm3, xmm9
movdqa xmm4, xmm2
pminub xmm4, xmm10
pcmpeqb xmm4, xmm2
pand xmm4, xmm11
movdqa xmm2, xmm3
pminub xmm2, xmm10
pcmpeqb xmm2, xmm3
pand xmm2, xmm11
por xmm4, xmm0
por xmm2, xmm1
movdqu xmmword [r12 + rax], xmm4
movdqu xmmword [r12 + rax + 0x10], xmm2
add rax, 0x20
cmp rcx, rax
jne 0x14000f150
cmp rcx, r13
je 0x14000f24f
mov rax, rcx
test r13b, 0x18
je 0x14000f20d
nop word cs:[rax + rax]
movq xmm0, qword [r12 + rax]
movdqa xmm1, xmm0
paddb xmm1, xmm6
movdqa xmm2, xmm1
pmaxub xmm2, xmm7
pcmpeqb xmm2, xmm1
pandn xmm2, xmm8
por xmm2, xmm0
movq qword [r12 + rax], xmm2
add rax, 8
cmp rsi, rax
jne 0x14000f1d0
cmp rsi, r13
je 0x14000f24f
lea rax, [rbx + rsi]
jmp 0x14000f220
lea rax, [rbx + rcx]
nop word cs:[rax + rax]
add rbx, r13
nop word cs:[rax + rax]
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
mov byte [rax], dl
lea rcx, [rax + 1]
mov rax, rcx
cmp rcx, rbx
jne 0x14000f230
cmp r14, r13
jne 0x14000f280
mov rcx, r15
mov rdx, r12
mov r8, qword [rbp + 0x250]
call fcn.140028750
mov r13, qword [rbp + 0x250]
test eax, eax
sete bl
test r13, r13
jne 0x14000f287
jmp 0x14000f299
xor ebx, ebx
test r13, r13
je 0x14000f299
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, r12
call qword [sym.imp.kernel32.dll_HeapFree]
test r14, r14
mov r14, qword [rbp + 0x1d0]
mov r13, qword [rbp + 0x240]
je 0x14000f2be
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, r15
call qword [sym.imp.kernel32.dll_HeapFree]
cmp qword [rbp + 0x270], 0
lea r12, [rbp - 0x50]
je 0x14000f2de
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapFree]
test bl, bl
jne 0x14000f46c
mov rax, qword [rbp + 0x1c8]
add rax, 0x10
cmp rax, rdi
jne 0x14000e610
jmp 0x14000f39e
mov r8d, 3
lea rcx, [rbp + 0x258]
mov rdx, r14
call fcn.140036210
jmp 0x14000ea1b
mov r12, qword [rbp + 0x270]
mov r8, qword [rbp + 0x270]
sub r8, r12
mov rax, qword [rbp + 0x258]
sub rax, r14
cmp rax, r8
jae 0x14000f35b
lea rcx, [rbp + 0x258]
mov rdx, r14
mov rbx, r8
call fcn.140036210
mov rcx, qword [rbp + 0x260]
mov r14, qword [rbp + 0x268]
jmp 0x14000f35e
mov rbx, r8
add r13, r12
add rcx, r14
mov rdx, r13
mov r8, rbx
call fcn.140027940
add r14, rbx
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x270], rax
mov rbx, qword [rbp + 0x260]
lea r12, [rbp - 0x50]
cmp qword [rbp + 0x208], 0
jne 0x14000e7d4
jmp 0x14000e7ea
cmp qword [rbp + 0x238], 0
je 0x14000f3ba
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [rbp + 0x1f8]
call qword [sym.imp.kernel32.dll_CloseHandle]
mov dword [rbp + 0x24c], eax
test eax, eax
je 0x14000f6a3
xor eax, eax
jmp 0x14000f4aa
mov rbx, qword [rbp + 0x238]
shl rbx, 4
mov rcx, qword [0x14037d038]
test rcx, rcx
jne 0x14000f40c
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x14000f713
mov rcx, rax
mov qword [0x14037d038], rax
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
je 0x14000f713
mov r14, rax
mov rax, qword [rbp + 0x238]
lea rax, [rax*8]
xor ecx, ecx
lea rdx, [rbp + 0x1f8]
xor edi, edi
nop dword [rax]
mov r8, qword [rsi + rcx]
mov qword [r14 + rcx*2], r8
mov qword [r14 + rcx*2 + 8], rdx
dec rdi
add rcx, 8
cmp rax, rcx
jne 0x14000f440
neg rdi
cmp qword [rbp - 0x50], 0
jne 0x14000e57e
jmp 0x14000e590
cmp qword [rbp + 0x238], 0
je 0x14000f488
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, r14
call qword [sym.imp.kernel32.dll_HeapFree]
mov rcx, qword [rbp + 0x1f8]
call qword [sym.imp.kernel32.dll_CloseHandle]
mov dword [rbp + 0x24c], eax
test eax, eax
je 0x14000f6a3
mov rax, qword [rbp + 0x1d8]
movaps xmm6, xmmword [rbp + 0x280]
movaps xmm7, xmmword [rbp + 0x290]
movaps xmm8, xmmword [rbp + 0x2a0]
movaps xmm9, xmmword [rbp + 0x2b0]
movaps xmm10, xmmword [rbp + 0x2c0]
movaps xmm11, xmmword [rbp + 0x2d0]
movaps xmm12, xmmword [rbp + 0x2e0]
add rsp, 0x378
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rbx, qword [rbp - 0x50]
call qword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
shl rdi, 0x20
or rdi, 2
test rbx, rbx
je 0x14000f51f
mov rcx, qword [0x14037d038]
xor edx, edx
mov r8, rsi
call qword [sym.imp.kernel32.dll_HeapFree]
mov qword [rbp - 0x50], 0
mov qword [rbp - 0x48], rdi
lea rax, str.dinvokedinvoke_rsdinvoke_srclib.rs
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x14036c7d8]
lea r8, [rbp - 0x50]
mov edx, 0x2b
call fcn.140035fb0
ud2
call fcn.1400078a0
ud2
lea rcx, str.called__Option::unwrap____on_a__None__valueinternal_error:_entered_unreachable_code_rustc_88fb1b922b047981fc0cfc62aa1418b4361ae72elibrary_alloc_src_vecmod.rs
lea r8, str.dinvokedinvoke_rsdinvoke_srclib.rs
mov edx, 0x2b
call fcn.140035d90
ud2
lea rax, str.C:Userslucak.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
jmp 0x14000f61d
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp - 0x50], 0
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 0x230]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp + 0x200]
mov qword [rbp - 0x38], rax
lea rax, str.dinvokedinvoke_rsdinvoke_srclib.rs
jmp 0x14000f532
call qword [sym.imp.kernel32.dll_GetLastError]
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x208], 0
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp - 0x30], rax
movups xmm0, xmmword [rbp + 0x218]
movaps xmmword [rbp - 0x40], xmm0
mov rax, qword [rbp + 0x208]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp - 0x48], rax
lea rax, str.dinvokedinvoke_rsdinvoke_srclib.rs
jmp 0x14000f532
lea rax, str.C:Userslucak.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmodule.rs
mov edx, 0x104
mov rcx, r8
mov r8, rax
call fcn.140035d80
ud2
mov edx, 1
mov rcx, r14
call fcn.140035300
ud2
mov edx, 1
mov rcx, r12
call fcn.140035300
ud2
mov rcx, r14
jmp 0x14000f655
mov rcx, r13
mov rdx, qword [rbp + 0x1f0]
call fcn.140035300
ud2
mov edx, 1
mov rcx, qword [rbp + 0x270]
call fcn.140035300
ud2
call qword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
shl rdi, 0x20
or rdi, 2
jmp 0x14000f51f
lea r8, str.C:Userslucak.cargo_registry_srcindex.crates.io_6f17d22bba15001fwinproc_0.6.4_srcprocessmod.rs
mov rcx, qword [rbp + 0x238]
mov rdx, r15
call fcn.140035d80
ud2
call sub.kernel32.dll_GetLastError
shl rax, 0x20
or rax, 2
mov qword [rbp + 0x258], rax
lea rax, [rbp + 0x258]
mov qword [rbp + 0x208], rax
lea rax, [0x140021470]
mov qword [rbp + 0x210], rax
mov qword [rbp - 0x50], 0
lea rax, [0x14036fde8]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 1
lea rax, [rbp + 0x208]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 1
lea rcx, [rbp + 0x24c]
lea rdx, [rbp - 0x50]
call fcn.140037860
ud2
mov edx, 8
mov rcx, rbx
call fcn.140035300
ud2
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r12
mov rdx, qword [rbp + 0x270]
call fcn.140035d70
jmp 0x14000f77c
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rbx
mov rdx, qword [rbp + 0x270]
call fcn.140035d80
jmp 0x14000f77c
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rbx
mov rdx, qword [rbp + 0x270]
call fcn.140035d80
jmp 0x14000f77c
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, r12
mov rdx, rbx
call fcn.140035fa0
ud2