Function at 0x140003844
Capabilities:
Allocate or change rwx memory

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1f8]
sub rsp, 0x2b8
movaps xmmword [rax - 0x58], xmm6
lea r12, [0x140025d80]
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.14000278c
mov edi, 0xf
cmp qword [rax + 0x18], rdi
jbe 0x140003887
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
mov r14d, 0x1000
mov r15d, 0x27
mov rdx, qword [rsp + 0x38]
cmp rdx, rdi
jbe 0x1400038d6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, r14
jb 0x1400038d1
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000440e
call fcn.1400054e8
xor esi, esi
test rbx, rbx
je 0x1400043ec
lea rdx, [0x140025e00]
lea rcx, [rsp + 0x60]
call fcn.14000278c
mov rbx, rax
mov rdx, r12
lea rcx, [rsp + 0x40]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x14000390c
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003915
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov qword [rbp + 0x218], rax
mov rdx, qword [rsp + 0x58]
cmp rdx, rdi
jbe 0x14000395e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r14
jb 0x140003959
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004414
call fcn.1400054e8
movdqa xmm6, xmmword [0x140020d20]
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], sil
mov rdx, qword [rsp + 0x78]
cmp rdx, rdi
jbe 0x1400039a8
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x1400039a3
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000441a
call fcn.1400054e8
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], sil
lea rdx, [0x140025f30]
lea rcx, [rbp - 0x60]
call fcn.14000278c
mov rbx, rax
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x1400039dc
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x1400039e5
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov qword [rbp + 0x208], rax
mov rdx, qword [rbp - 0x68]
cmp rdx, rdi
jbe 0x140003a2c
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r14
jb 0x140003a27
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004420
call fcn.1400054e8
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], sil
mov rdx, qword [rbp - 0x48]
cmp rdx, rdi
jbe 0x140003a6a
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x140003a65
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004426
call fcn.1400054e8
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], sil
lea rdx, [0x140025dc0]
lea rcx, [rbp - 0x20]
call fcn.14000278c
mov rbx, rax
mov rdx, r12
lea rcx, [rbp - 0x40]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x140003a9c
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003aa5
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov qword [rbp + 0x210], rax
mov rdx, qword [rbp - 0x28]
cmp rdx, rdi
jbe 0x140003aec
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, r14
jb 0x140003ae7
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000442c
call fcn.1400054e8
movdqu xmmword [rbp - 0x30], xmm6
mov byte [rbp - 0x40], sil
mov rdx, qword [rbp - 8]
cmp rdx, rdi
jbe 0x140003b2a
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, r14
jb 0x140003b25
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004432
call fcn.1400054e8
movdqu xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], sil
lea rdx, [0x140025d60]
lea rcx, [rbp + 0x20]
call fcn.14000278c
mov rbx, rax
mov rdx, r12
lea rcx, [rbp]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x140003b5c
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003b65
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov r13, rax
mov rdx, qword [rbp + 0x18]
cmp rdx, rdi
jbe 0x140003ba8
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, r14
jb 0x140003ba3
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004438
call fcn.1400054e8
movdqu xmmword [rbp + 0x10], xmm6
mov byte [rbp], sil
mov rdx, qword [rbp + 0x38]
cmp rdx, rdi
jbe 0x140003be6
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, r14
jb 0x140003be1
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000443e
call fcn.1400054e8
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], sil
lea rdx, [0x140025ef0]
lea rcx, [rbp + 0x60]
call fcn.14000278c
mov rbx, rax
mov rdx, r12
lea rcx, [rbp + 0x40]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x140003c18
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003c21
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov r12, rax
mov rdx, qword [rbp + 0x58]
cmp rdx, rdi
jbe 0x140003c64
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, r14
jb 0x140003c5f
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004444
call fcn.1400054e8
movdqu xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x40], sil
mov rdx, qword [rbp + 0x78]
cmp rdx, rdi
jbe 0x140003ca2
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, r14
jb 0x140003c9d
add rdx, r15
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000444a
call fcn.1400054e8
movdqu xmmword [rbp + 0x70], xmm6
mov byte [rbp + 0x60], sil
lea rdx, [0x140025e80]
lea rcx, [rbp + 0xa0]
call fcn.14000278c
mov rbx, rax
lea rdx, [0x140025d80]
lea rcx, [rbp + 0x80]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x140003cde
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003ce7
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov r15, rax
mov rdx, qword [rbp + 0x98]
cmp rdx, rdi
jbe 0x140003d31
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, r14
jb 0x140003d2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004450
call fcn.1400054e8
movdqu xmmword [rbp + 0x90], xmm6
mov byte [rbp + 0x80], sil
mov rdx, qword [rbp + 0xb8]
cmp rdx, rdi
jbe 0x140003d7c
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, r14
jb 0x140003d77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004456
call fcn.1400054e8
movdqu xmmword [rbp + 0xb0], xmm6
mov byte [rbp + 0xa0], sil
lea rdx, [0x140025e20]
lea rcx, [rbp + 0xe0]
call fcn.14000278c
mov rbx, rax
lea rdx, [0x140025d80]
lea rcx, [rbp + 0xc0]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x140003dbe
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003dc7
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov r14, rax
mov rdx, qword [rbp + 0xd8]
cmp rdx, rdi
jbe 0x140003e15
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000445c
call fcn.1400054e8
movdqu xmmword [rbp + 0xd0], xmm6
mov byte [rbp + 0xc0], sil
mov rdx, qword [rbp + 0xf8]
cmp rdx, rdi
jbe 0x140003e64
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004462
call fcn.1400054e8
movdqu xmmword [rbp + 0xf0], xmm6
mov byte [rbp + 0xe0], sil
lea rdx, [0x140025ed0]
lea rcx, [rbp + 0x120]
call fcn.14000278c
mov rbx, rax
lea rdx, [0x140025d80]
lea rcx, [rbp + 0x100]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x140003ea6
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003eaf
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov rsi, rax
mov rdx, qword [rbp + 0x118]
cmp rdx, rdi
jbe 0x140003efd
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ef8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004468
call fcn.1400054e8
movdqu xmmword [rbp + 0x110], xmm6
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, rdi
jbe 0x140003f4c
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000446e
call fcn.1400054e8
movdqu xmmword [rbp + 0x130], xmm6
mov byte [rbp + 0x120], 0
lea rdx, [0x140025f50]
lea rcx, [rbp + 0x160]
call fcn.14000278c
mov rbx, rax
lea rdx, [0x140025d80]
lea rcx, [rbp + 0x140]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], rdi
jbe 0x140003f8e
mov rbx, qword [rbx]
cmp qword [rax + 0x18], rdi
jbe 0x140003f97
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov rdi, rax
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140003fe6
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fe1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004474
call fcn.1400054e8
movdqu xmmword [rbp + 0x150], xmm6
mov byte [rbp + 0x140], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x140004036
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004031
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000447a
call fcn.1400054e8
movdqu xmmword [rbp + 0x170], xmm6
mov byte [rbp + 0x160], 0
lea rdx, [0x140025ea0]
lea rcx, [rsp + 0x20]
call fcn.14000278c
mov rbx, rax
lea rdx, [0x140025d80]
lea rcx, [rbp + 0x180]
call fcn.14000278c
nop
cmp qword [rbx + 0x18], 0xf
jbe 0x140004077
mov rbx, qword [rbx]
cmp qword [rax + 0x18], 0xf
jbe 0x140004081
mov rax, qword [rax]
mov rdx, rbx
mov rcx, rax
call fcn.1400025ac
mov rbx, rax
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x1400040d0
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004480
call fcn.1400054e8
movdqu xmmword [rbp + 0x190], xmm6
mov byte [rbp + 0x180], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000411c
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004117
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004408
call fcn.1400054e8
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], 0
mov rax, qword [rbp + 0x218]
test rax, rax
je 0x1400043ec
cmp qword [rbp + 0x208], 0
je 0x1400043ec
cmp qword [rbp + 0x210], 0
je 0x1400043ec
test r13, r13
je 0x1400043ec
test r12, r12
je 0x1400043ec
test r15, r15
je 0x1400043ec
test r14, r14
je 0x1400043ec
test rsi, rsi
je 0x1400043ec
test rdi, rdi
je 0x1400043ec
test rbx, rbx
je 0x1400043ec
lea r9, [rbp + 0x200]
mov edx, 2
lea r8d, [rdx + 0x3e]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rax, qword [rbp + 0x218]
mov word [rax], 0x9090
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov edx, 2
lea r8d, [rdx + 0x3e]
mov rcx, qword [rbp + 0x208]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rax, qword [rbp + 0x208]
mov word [rax], 0x9090
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov edx, 2
lea r8d, [rdx + 0x3e]
mov rcx, qword [rbp + 0x210]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rax, qword [rbp + 0x210]
mov word [rax], 0x9090
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, 2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov edx, 2
lea r8d, [rdx + 0x3e]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [r13], 0x9090
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, 2
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov edx, 2
lea r8d, [rdx + 0x3e]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r13d, 0x9090
mov word [r12], r13w
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, 2
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov r12d, 0x40
mov r8d, r12d
lea edx, [r12 - 0x3e]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [r15], r13w
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
lea edx, [r12 - 0x3e]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov r8d, r12d
lea r15d, [r12 - 0x3e]
mov edx, r15d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [r14], r13w
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, r15d
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov r8d, r12d
mov edx, r15d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [rsi], r13w
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, r15d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov r8d, r12d
mov edx, r15d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [rdi], r13w
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, r15d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea r9, [rbp + 0x200]
mov r8d, r12d
mov edx, r15d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [rbx], r13w
lea r9, [rbp + 0x200]
mov r8d, dword [rbp + 0x200]
mov edx, r15d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movaps xmm6, xmmword [rsp + 0x2a0]
add rsp, 0x2b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14000b0b4
int3
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
nop
call fcn.14000b0b4
int3