Function at 0x140019800
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x450]
sub rsp, 0x550
mov rax, qword [0x14015d070]
xor rax, rsp
mov qword [rbp + 0x440], rax
xor r15d, r15d
movdqa xmm1, xmmword [0x140148dc0]
movdqu xmmword [rsp + 0x60], xmm1
mov dl, reloc.WLDAP32.dll_Ordinal_79
mov r8b, 0x4b
mov r9b, reloc.WLDAP32.dll_Ordinal_22
mov r10b, 0x5d
mov r11b, 0x40
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x61], al
xor byte [rsp + 0x62], cl
xor byte [rsp + 0x63], cl
xor byte [rsp + 0x64], cl
xor byte [rsp + 0x65], cl
xor byte [rsp + 0x66], cl
xor byte [rsp + 0x67], cl
xor byte [rsp + 0x68], cl
xor byte [rsp + 0x69], cl
xor byte [rsp + 0x6a], cl
xor byte [rsp + 0x6b], cl
xor byte [rsp + 0x6c], cl
xor byte [rsp + 0x6d], cl
xor byte [rsp + 0x6e], cl
xor byte [rsp + 0x6f], cl
xor dl, cl
mov byte [rsp + 0x70], dl
xor r8b, cl
mov byte [rsp + 0x71], r8b
xor r9b, cl
mov byte [rsp + 0x72], r9b
xor r10b, cl
mov byte [rsp + 0x73], r10b
xor r11b, cl
mov byte [rsp + 0x74], r11b
xor bl, cl
mov byte [rsp + 0x75], bl
mov byte [rsp + 0x76], r15b
lea rcx, [rsp + 0x61]
call fcn.140017f60
mov dword [0x14015e484], eax
test eax, eax
je 0x14001b9c9
mov edx, eax
lea ecx, [r15 + 8]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp - 0x70], 0x238
cmp rax, 0xffffffffffffffff
je 0x14001994d
lea rdx, [rbp - 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x140019944
lea rdx, [rsp + 0x61]
lea rcx, [rbp - 0x40]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x140019944
lea rdx, [rbp - 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x140019920
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x1d0]
lea rax, [rbp - 0x70]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140019960
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov r8d, dword [0x14015e484]
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
mov qword [0x14015e3c0], rax
xorps xmm0, xmm0
mov edi, dword [rbp - 0x50]
movdqu xmmword [rbp + 0x428], xmm0
mov qword [rbp + 0x438], r15
test rdi, rdi
je 0x140019a30
mov edx, edi
lea rcx, [rbp + 0x428]
call fcn.140032200
mov rcx, qword [rbp + 0x428]
lea rbx, [rdi + rcx]
mov r8d, edi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x430], rbx
mov qword [rsp + 0x20], r15
mov r9, rdi
mov r8, qword [rbp + 0x428]
mov rdx, qword [rbp - 0x58]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
mov rax, qword [rbp + 0x1e8]
mov qword [0x14015e418], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e7c0]
sub rbx, qword [0x14015e7b8]
sar rbx, 2
movabs r13, 0x3fffffffffffffff
test rbx, rbx
je 0x140019ae6
cmp rbx, r13
ja 0x14001b9ff
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7c0]
mov rdx, qword [0x14015e7b8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019b36
lea rcx, [rsp + 0x78]
call fcn.140032200
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140018030
mov qword [0x14015e590], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e670]
sub rbx, qword [0x14015e668]
sar rbx, 2
test rbx, rbx
je 0x140019bcd
cmp rbx, r13
ja 0x14001ba05
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e670]
mov rdx, qword [0x14015e668]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019c1d
lea rcx, [rsp + 0x78]
call fcn.140032200
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140018030
mov qword [0x14015e458], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e758]
sub rbx, qword [0x14015e750]
sar rbx, 2
test rbx, rbx
je 0x140019cb4
cmp rbx, r13
ja 0x14001ba0b
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e758]
mov rdx, qword [0x14015e750]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019d04
lea rcx, [rsp + 0x78]
call fcn.140032200
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140018030
mov qword [0x14015e340], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e628]
sub rbx, qword [0x14015e620]
sar rbx, 2
test rbx, rbx
je 0x140019d9b
cmp rbx, r13
ja 0x14001ba11
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e628]
mov rdx, qword [0x14015e620]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019deb
lea rcx, [rsp + 0x78]
call fcn.140032200
mov rdi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140018030
mov qword [0x14015e3d0], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e770]
sub rbx, qword [0x14015e768]
sar rbx, 2
test rbx, rbx
je 0x140019e82
cmp rbx, r13
ja 0x14001ba17
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e770]
mov rdx, qword [0x14015e768]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov rdx, qword [rbp + 0x430]
sub rdx, qword [rbp + 0x428]
je 0x140019ed4
lea rcx, [rsp + 0x60]
call fcn.140032200
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rbp + 0x430]
mov rdx, qword [rbp + 0x428]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.140018030
mov qword [0x14015e3d8], rax
mov r12, 0xfffffffffffffffb
mov r8, qword [0x14015e590]
test r8, r8
je 0x14001a7f9
movss xmm0, dword [0x14015d0c4]
movss dword [rbp + 0x410], xmm0
mov eax, dword [0x14015e480]
test eax, eax
jne 0x14001a56e
mov rax, qword [0x14015e6a0]
cmp qword [0x14015e698], rax
jne 0x14001a7f9
mov eax, dword [rbp + 0x410]
movzx edx, al
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x14], edx
mov ecx, eax
shr ecx, 8
movzx edx, cl
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x18], edx
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x1c], edx
shr eax, 0x18
mov rcx, qword [0x14015e6f8]
mov dword [rcx + 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
mov rbx, qword [0x14015e720]
sub rbx, qword [0x14015e718]
sar rbx, 2
test rbx, rbx
je 0x140019fef
cmp rbx, r13
ja 0x14001ba1d
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + rbx*4]
mov qword [rbp - 0x78], rcx
mov rbx, qword [0x14015e720]
mov rdx, qword [0x14015e718]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x80], rax
mov r8, qword [0x14015e590]
add r8, qword [0x14015e418]
lea r9, [rsp + 0x78]
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x48]
call fcn.140018220
mov rbx, rax
lea r15, [0x14015e718]
cmp r15, rax
je 0x14001a0b5
mov r8, qword [0x14015e718]
test r8, r8
je 0x14001a085
mov rcx, qword [0x14015e728]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001a066
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001a0f7
mov r8, rcx
mov rcx, r8
call fcn.1400ef560
xorps xmm0, xmm0
movdqu xmmword [0x14015e718], xmm0
xor r15d, r15d
mov qword [0x14015e728], r15
jmp 0x14001a088
xor r15d, r15d
mov rax, qword [rbx]
mov qword [0x14015e718], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e720], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e728], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
jmp 0x14001a0b8
xor r15d, r15d
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001a111
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a0fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a0fe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef560
mov qword [rsp + 0x48], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov edx, 4
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001a121
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 4]
mov r8, qword [0x14015e590]
lea rdx, [rbp - 0x70]
call fcn.140018340
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov rbx, qword [0x14015e700]
sub rbx, qword [0x14015e6f8]
sar rbx, 2
test rbx, rbx
je 0x14001a21f
cmp rbx, r13
ja 0x14001ba23
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x70], rcx
mov rbx, qword [0x14015e700]
mov rdx, qword [0x14015e6f8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rsi, [rdi + rbx*4]
mov qword [rsp + 0x68], rsi
jmp 0x14001a224
mov rsi, qword [rsp + 0x68]
mov word [rbp + 0x418], r14w
mov rdx, r15
mov rcx, rsi
mov rbx, qword [rsp + 0x60]
sub rcx, rbx
sar rcx, 2
movzx eax, r14w
test rcx, rcx
je 0x14001a267
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a257
inc rdx
cmp rdx, rcx
jb 0x14001a247
jmp 0x14001a267
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a2a0
nop dword [rax]
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a290
inc rdx
cmp rdx, rcx
jb 0x14001a280
jmp 0x14001a2a0
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov rdx, r15
mov rcx, rsi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001a2d2
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001a2c2
inc rdx
cmp rdx, rcx
jb 0x14001a2b2
jmp 0x14001a2d2
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x70]
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x60], r15
mov rcx, qword [0x14015e6f8]
test rcx, rcx
je 0x14001a332
mov rax, qword [0x14015e708]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001a32d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001a535
mov rcx, r8
call fcn.1400ef560
mov qword [0x14015e6f8], rbx
mov qword [0x14015e700], rsi
mov qword [0x14015e708], rdi
lea rax, [rsp + 0x30]
mov qword [rbp + 0x410], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov r14, qword [0x14015e720]
sub r14, qword [0x14015e718]
sar r14, 2
test r14, r14
je 0x14001a3d6
cmp r14, r13
ja 0x14001ba29
mov rdx, r14
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + r14*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e720]
mov rdx, qword [0x14015e718]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov rsi, qword [0x14015e700]
mov rbx, qword [0x14015e6f8]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r15
sub rsi, rbx
sar rsi, 2
test rsi, rsi
je 0x14001a43c
cmp rsi, r13
ja 0x14001ba2f
mov rdx, rsi
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + rsi*4]
mov qword [rbp - 0x78], rcx
mov rbx, qword [0x14015e700]
mov rdx, qword [0x14015e6f8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x80], rax
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x48]
call fcn.140018440
mov rbx, rax
lea rsi, [0x14015e6f8]
cmp rsi, rax
je 0x14001a4ef
mov r8, qword [0x14015e6f8]
test r8, r8
je 0x14001a4c4
mov rcx, qword [0x14015e708]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001a4aa
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001a52e
mov r8, rcx
mov rcx, r8
call fcn.1400ef560
xorps xmm0, xmm0
movdqu xmmword [0x14015e6f8], xmm0
mov qword [0x14015e708], r15
mov rax, qword [rbx]
mov qword [0x14015e6f8], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e700], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e708], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001a541
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a53c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a53c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef560
cmp byte [0x14015e32a], 0
jne 0x14001a7f9
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, qword [0x14015e418]
add rdx, qword [0x14015e590]
jmp 0x14001a7ea
cmp eax, 1
jne 0x14001a7f9
mov rax, qword [0x14015e6a0]
cmp qword [0x14015e698], rax
je 0x14001a7f9
mov r14, qword [0x14015e418]
add r14, r8
lea rsi, [0x14015e6f8]
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, r14
call fcn.140018560
mov rdi, rax
mov r10d, dword [0x14015e480]
mov r9, qword [0x14015e6a0]
sub r9, qword [0x14015e698]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001a5e1
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400185e0
mov r13, rax
lea rdx, [0x14015e698]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, r13
call fcn.140018840
mov rcx, r14
sub rcx, r13
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [r13 + 0x1000]
mov qword [0x14015e320], rax
mov qword [0x14015e438], r14
mov qword [0x14015e470], r13
lea r15, [0x14015e718]
mov rdx, r15
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, qword [0x14015e418]
add r8, qword [0x14015e590]
mov r9, rax
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.140018220
mov rdx, rax
mov rcx, r15
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.1400188c0
mov rdx, rax
mov rcx, rsi
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e698]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e698]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
mov dword [rbp + 0x418], 0x40400000
cmp byte [0x14015e32a], 0
jne 0x14001a790
movss xmm0, dword [0x14015d0c4]
movss dword [rbp + 0x418], xmm0
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 4]
lea r8, [rbp + 0x418]
mov rdx, qword [0x14015e320]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e698]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, r13
mov rcx, qword [0x14015e3c0]
call fcn.140019070
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, r14
mov r8, rax
mov rcx, qword [0x14015e3c0]
call fcn.140019070
mov rcx, qword [0x14015e340]
test rcx, rcx
je 0x14001aaa1
cmp dword [0x14015e468], 1
jne 0x14001aaa1
mov rax, qword [0x14015e6b8]
cmp qword [0x14015e6b0], rax
je 0x14001aaa1
mov rsi, qword [0x14015e418]
add rsi, rcx
lea rdx, [0x14015e788]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, rsi
call fcn.140018560
mov rdi, rax
mov r10d, dword [0x14015e468]
mov r9, qword [0x14015e6b8]
sub r9, qword [0x14015e6b0]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001a880
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400185e0
mov r14, rax
lea rdx, [0x14015e6b0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, r14
call fcn.140018840
mov rcx, rsi
sub rcx, r14
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015e3f8], rax
mov qword [0x14015e450], rsi
mov qword [0x14015e5a0], r14
lea rdx, [0x14015e738]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r9, rax
mov r8, rsi
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.140018220
mov rdx, rax
lea rcx, [0x14015e738]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e788]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e788]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e6b0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e6b0]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
mov dword [0x14015e50c], 0x41a00000
cmp byte [0x14015e329], 0
jne 0x14001aa35
movss xmm0, dword [0x14015d1c4]
mulss xmm0, dword [0x140148220]
movss dword [0x14015e50c], xmm0
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [0x14015e50c]
mov rdx, qword [0x14015e3f8]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e6b0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140019070
lea rdx, [0x14015e788]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3c0]
call fcn.140019070
mov rcx, qword [0x14015e3d0]
test rcx, rcx
je 0x14001ad3b
cmp dword [0x14015e3b4], 1
jne 0x14001ad3b
mov rax, qword [0x14015e818]
cmp qword [0x14015e810], rax
je 0x14001ad3b
mov r14, qword [0x14015e418]
add r14, rcx
lea rdx, [0x14015e6e0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, r14
call fcn.140018560
mov rdi, rax
mov r10d, dword [0x14015e3b4]
mov r9, qword [0x14015e818]
sub r9, qword [0x14015e810]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001ab30
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400185e0
mov rsi, rax
lea rdx, [0x14015e810]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, rsi
call fcn.140018840
mov rcx, r14
sub rcx, rsi
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [rsi + 0x1000]
mov qword [0x14015e598], rax
mov qword [0x14015e348], r14
mov qword [0x14015e430], rsi
lea rdx, [0x14015e650]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, qword [0x14015e418]
add r8, qword [0x14015e3d0]
mov r9, rax
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.140018220
mov rdx, rax
lea rcx, [0x14015e650]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e6e0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e6e0]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e810]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e810]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
mov dword [rbp + 0x410], 1
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x410]
mov rdx, qword [0x14015e598]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e810]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3c0]
call fcn.140019070
lea rdx, [0x14015e6e0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140019070
mov rcx, qword [0x14015e3d8]
test rcx, rcx
je 0x14001b041
cmp dword [0x14015e4ec], 2
jne 0x14001b041
mov rax, qword [0x14015e640]
cmp qword [0x14015e638], rax
je 0x14001b041
mov rsi, qword [0x14015e418]
add rsi, rcx
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, rsi
call fcn.140018560
mov rdi, rax
mov r10d, dword [0x14015e4ec]
mov r9, qword [0x14015e640]
sub r9, qword [0x14015e638]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001adc0
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400185e0
mov r14, rax
lea rdx, [0x14015e638]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, r14
call fcn.140018840
mov rcx, rsi
sub rcx, r14
mov rbx, r12
sub rbx, rcx
sub rax, rdi
mov rdi, r12
sub rdi, rax
lea rax, [r14 + 0x1000]
mov qword [0x14015e5b8], rax
add rax, 4
mov qword [0x14015e3e8], rax
mov qword [0x14015e3f0], rsi
mov qword [0x14015e408], r14
lea rdx, [0x14015e6c8]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, qword [0x14015e418]
add r8, qword [0x14015e3d8]
mov r9, rax
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.140018220
mov rdx, rax
lea rcx, [0x14015e6c8]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e680]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e638]
lea rcx, [rsp + 0x30]
call fcn.14002b3a0
mov r8, rax
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e638]
call fcn.14002b300
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001afaf
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001af9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001af9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef560
mov qword [rsp + 0x48], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [0x14015d0d0]
mov rdx, qword [0x14015e5b8]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [0x14015d0fc]
mov rdx, qword [0x14015e3e8]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x14015e638]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140019070
lea rdx, [0x14015e680]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x14015e3c0]
call fcn.140019070
mov rax, qword [0x14015e458]
test rax, rax
je 0x14001b97f
lea rcx, [rax + 2]
mov qword [0x14015e458], rcx
cmp dword [0x14015e3ac], 2
jne 0x14001b97f
mov rax, qword [0x14015e7f0]
cmp qword [0x14015e7e8], rax
je 0x14001b97f
mov r14, qword [0x14015e418]
add r14, rcx
lea rdx, [0x14015e7a0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, r14
call fcn.140018560
mov rdi, rax
mov r10d, dword [0x14015e3ac]
mov r9, qword [0x14015e7f0]
sub r9, qword [0x14015e7e8]
sar r9, 2
lea rdx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov r8d, 4
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rax, [rax + 0x80]
sub r8, 1
jne 0x14001b0d0
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rdx + 0x30], rax
mov dword [rsp + 0x20], r10d
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14015e3c0]
call fcn.1400185e0
mov r13, rax
lea rsi, [0x14015e7e8]
mov rdx, rsi
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov rdx, rax
mov rcx, r13
call fcn.140018840
mov rcx, r14
sub rcx, r13
mov rbx, r12
sub rbx, rcx
sub rax, rdi
sub r12, rax
lea rax, [r13 + 0x1000]
mov qword [0x14015e3e0], rax
add rax, 4
mov qword [0x14015e338], rax
mov qword [0x14015e3a0], r14
mov qword [0x14015e410], r13
lea rdx, [0x14015e7d0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r9, rax
mov r8, r14
mov rdx, qword [0x14015e3c0]
lea rcx, [rsp + 0x30]
call fcn.140018220
mov rdx, rax
lea rcx, [0x14015e7d0]
call fcn.14002b300
lea rcx, [rsp + 0x30]
call fcn.14002b2a0
lea rdx, [0x14015e7a0]
lea rcx, [rsp + 0x30]
call fcn.14002b3a0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.1400188c0
mov rdx, rax
lea rcx, [0x14015e7a0]
call fcn.14002b300
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001b26c
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b267
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b267
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef560
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov rbx, qword [0x14015e7f0]
sub rbx, qword [0x14015e7e8]
sar rbx, 2
test rbx, rbx
je 0x14001b2eb
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x14001ba35
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0x30]
mov rdx, r12
lea rcx, [rsp + 0x48]
call fcn.1400188c0
mov rbx, rax
cmp rsi, rax
je 0x14001b395
mov r8, qword [0x14015e7e8]
test r8, r8
je 0x14001b36a
mov rcx, qword [0x14015e7f8]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001b350
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001b3d4
mov r8, rcx
mov rcx, r8
call fcn.1400ef560
mov qword [0x14015e7e8], r15
xorps xmm0, xmm0
movdqu xmmword [0x14015e7f0], xmm0
mov rax, qword [rbx]
mov qword [0x14015e7e8], rax
mov rax, qword [rbx + 8]
mov qword [0x14015e7f0], rax
mov rax, qword [rbx + 0x10]
mov qword [0x14015e7f8], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14001b3ee
mov rax, qword [rsp + 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b3db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b3db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ef560
mov qword [rsp + 0x48], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
lea rcx, [rbp - 0x70]
lea rax, [rbp + 0x1d0]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b400
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 5]
mov r8, qword [0x14015e458]
lea rdx, [rbp - 0x70]
call fcn.140018340
mov rsi, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
mov rbx, qword [0x14015e7f0]
sub rbx, qword [0x14015e7e8]
sar rbx, 2
test rbx, rbx
je 0x14001b508
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x14001ba3b
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x70], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rbx, [rdi + rbx*4]
mov qword [rsp + 0x68], rbx
jmp 0x14001b50d
mov rbx, qword [rsp + 0x68]
mov word [rbp + 0x418], si
mov rcx, r15
mov rax, rbx
mov rdi, qword [rsp + 0x60]
sub rax, rdi
sar rax, 2
test rax, rax
je 0x14001b554
nop dword [rax + rax]
cmp dword [rdi + rcx*4], 0xfffffffe
je 0x14001b540
inc rcx
cmp rcx, rax
jb 0x14001b530
jmp 0x14001b554
movzx eax, byte [rbp + 0x418]
mov dword [rdi + rcx*4], eax
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov r15, qword [rsp + 0x70]
xor r12d, r12d
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x60], r12
mov rcx, qword [0x14015e7e8]
test rcx, rcx
je 0x14001b5b7
mov rax, qword [0x14015e7f8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001b5b2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b63e
mov rcx, r8
call fcn.1400ef560
mov qword [0x14015e7e8], rdi
mov qword [0x14015e7f0], rbx
mov qword [0x14015e7f8], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
sub rbx, rdi
sar rbx, 2
test rbx, rbx
je 0x14001b645
movabs rax, 0x3fffffffffffffff
cmp rbx, rax
ja 0x14001ba41
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
lea rcx, [rax + rbx*4]
mov qword [rbp - 0x78], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rbx, [rdi + rbx*4]
mov qword [rbp - 0x80], rbx
jmp 0x14001b649
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [rbp - 0x80]
lea rax, [rsi + 4]
mov word [rbp + 0x418], ax
mov rcx, r12
mov rax, rbx
mov rdi, qword [rsp + 0x78]
sub rax, rdi
sar rax, 2
test rax, rax
je 0x14001b693
nop dword [rax + rax]
cmp dword [rdi + rcx*4], 0xfffffffe
je 0x14001b680
inc rcx
cmp rcx, rax
jb 0x14001b670
jmp 0x14001b693
movzx eax, byte [rbp + 0x418]
mov dword [rdi + rcx*4], eax
mov rbx, qword [rbp - 0x80]
mov rdi, qword [rsp + 0x78]
mov r15, qword [rbp - 0x78]
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x80], r12
mov qword [rsp + 0x78], r12
mov rcx, qword [0x14015e7e8]
test rcx, rcx
je 0x14001b6f0
mov rax, qword [0x14015e7f8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001b6eb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b77b
mov rcx, r8
call fcn.1400ef560
mov qword [0x14015e7e8], rdi
mov qword [0x14015e7f0], rbx
mov qword [0x14015e7f8], r15
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
sub rbx, rdi
sar rbx, 2
movabs r15, 0x3fffffffffffffff
test rbx, rbx
je 0x14001b782
cmp rbx, r15
ja 0x14001ba47
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rdi, [rdi + rbx*4]
mov qword [rsp + 0x38], rdi
jmp 0x14001b787
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdi, qword [rsp + 0x38]
lea rax, [rsi + 8]
mov word [rbp + 0x418], ax
mov rcx, r12
mov rax, rdi
mov rbx, qword [rsp + 0x30]
sub rax, rbx
sar rax, 2
test rax, rax
je 0x14001b7d4
nop dword [rax]
cmp dword [rbx + rcx*4], 0xfffffffe
je 0x14001b7c0
inc rcx
cmp rcx, rax
jb 0x14001b7b0
jmp 0x14001b7d4
movzx eax, byte [rbp + 0x418]
mov dword [rbx + rcx*4], eax
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov rcx, qword [0x14015e7e8]
test rcx, rcx
je 0x14001b834
mov rax, qword [0x14015e7f8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001b82f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b9bd
mov rcx, r8
call fcn.1400ef560
mov qword [0x14015e7e8], rbx
mov qword [0x14015e7f0], rdi
mov qword [0x14015e7f8], rsi
mov dword [rbp + 0x420], 0x3f800000
mov dword [rbp + 0x410], 0x3f800000
cmp byte [0x14015e425], r12b
jne 0x14001b886
movss xmm0, dword [0x14015d1b4]
movss dword [rbp + 0x420], xmm0
movss xmm1, dword [0x14015d0c0]
movss dword [rbp + 0x410], xmm1
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x420]
mov rdx, qword [0x14015e3e0]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x410]
mov rdx, qword [0x14015e338]
mov rcx, qword [0x14015e3c0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r12
mov rbx, qword [0x14015e7f0]
sub rbx, qword [0x14015e7e8]
sar rbx, 2
test rbx, rbx
je 0x14001b947
cmp rbx, r15
ja 0x14001b9f9
mov rdx, rbx
call fcn.1400332e0
mov rdi, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + rbx*4]
mov qword [rsp + 0x40], rcx
mov rbx, qword [0x14015e7f0]
mov rdx, qword [0x14015e7e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0x30]
mov rdx, r13
mov rcx, qword [0x14015e3c0]
call fcn.140019070
lea rdx, [0x14015e7a0]
lea rcx, [rsp + 0x48]
call fcn.14002b3a0
mov r8, rax
mov rdx, r14
mov rcx, qword [0x14015e3c0]
call fcn.140019070
nop
mov rcx, qword [rbp + 0x428]
test rcx, rcx
je 0x14001b9c9
mov rdx, qword [rbp + 0x438]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b9c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b9c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400ef560
mov rcx, qword [rbp + 0x440]
xor rcx, rsp
call fcn.1400ef540
lea r11, [rsp + 0x550]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14002f010
nop
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
nop
call fcn.14002f010
nop
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
int3
call fcn.14002f010
int3