Function at 0x1400030d0
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using rc4 ksa
Generate random numbers using a mersenne twister

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13a0]
mov eax, 0x14a0
call fcn.140006cd0
sub rsp, rax
movaps xmmword [rsp + 0x1490], xmm6
mov rax, qword [0x14000c040]
xor rax, rsp
mov qword [rbp + 0x1380], rax
mov rax, qword gs:[0x60]
cmp byte [rax + 2], 0
je 0x140003165
lea rdx, str.Debugger_detected_via_PEB_BeingDebugged__Sleeping_for_100_seconds...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400044b0
mov rcx, rax
lea rdx, [0x140004690]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rsp + 0x30], 0x64
lea rcx, [rsp + 0x30]
call fcn.1400048b0
mov eax, 1
jmp 0x140003a71
lea rdx, str.Starting_memory_extraction_using_tasklist...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
mov rcx, rax
lea rdx, [0x140004690]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
xor esi, esi
mov qword [rsp + 0x30], rsi
mov qword [rbp - 0x48], rsi
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rax
lea rcx, [rbp - 0x40]
call fcn.140002840
nop
mov rdi, qword [rbp - 0x38]
mov rbx, qword [rbp - 0x40]
mov r14, qword [rbp - 0x50]
cmp rbx, rdi
je 0x140003267
add rbx, 0x20
nop dword [rax + rax]
cmp r14, rsi
je 0x1400031e4
mov eax, dword [rbx]
mov dword [r14], eax
add r14, 4
mov qword [rbp - 0x50], r14
jmp 0x1400031fb
mov r8, rbx
mov rdx, r14
lea rcx, [rbp - 0x58]
call fcn.140005930
mov rsi, qword [rbp - 0x48]
mov r14, qword [rbp - 0x50]
lea rdx, str.Process:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
lea rdx, [rbx - 0x20]
cmp qword [rbx - 8], 0xf
jbe 0x14000321c
mov rdx, qword [rdx]
mov r8, qword [rbx - 0x10]
mov rcx, rax
call fcn.140005770
lea rdx, str.__PID:
mov rcx, rax
call fcn.1400044b0
mov rcx, rax
mov edx, dword [rbx]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140008608]
call fcn.1400044b0
add rbx, 0x28
lea rax, [rbx - 0x20]
cmp rax, rdi
jne 0x1400031d0
mov qword [rsp + 0x30], rsi
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1374], 0xffffffff
mov dword [rbp - 0xc], eax
mov edx, 1
nop
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0xc], eax
inc rdx
cmp rdx, 0x270
jb 0x140003280
mov dword [rbp - 0x10], 0x270
mov r15, qword [rbp - 0x58]
sub r14, r15
sar r14, 2
dec r14d
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
xor edi, edi
mov qword [rbp - 0x60], rdi
xor r13d, r13d
btc r14d, 0x1f
movsd xmm6, qword [0x1400087f0]
mov rsi, qword [rbp - 0x68]
mov r12, qword [rbp - 0x70]
nop word [rax + rax]
lea rcx, [rbp - 0x10]
cmp r14d, 0x7fffffff
jne 0x1400032f6
call fcn.140005b30
mov ecx, eax
jmp 0x14000333b
lea ebx, [r14 - 0x7fffffff]
call fcn.140005b30
mov edi, ebx
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jae 0x140003333
mov eax, ebx
neg eax
xor edx, edx
div ebx
mov ebx, edx
cmp ecx, edx
jae 0x140003333
nop dword [rax]
lea rcx, [rbp - 0x10]
call fcn.140005b30
mov ecx, eax
imul rcx, rdi
cmp ecx, ebx
jb 0x140003320
shr rcx, 0x20
mov rdi, qword [rbp - 0x60]
lea eax, [rcx - 0x80000000]
movsxd rcx, eax
xor rcx, 0xffffffff80000000
mov ebx, dword [r15 + rcx*4]
mov r8d, ebx
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r15, rax
test rax, rax
jne 0x1400033a9
lea rdx, str.Failed_to_open_selected_process__PID:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400044b0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140008624]
call fcn.1400044b0
mov rcx, rax
lea rdx, [0x140004690]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003541
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov ecx, 0x20
call fcn.140005d80
mov rdi, rax
mov qword [rsp + 0x78], rax
lea rsi, [rax + 0x20]
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
mov qword [rbp - 0x80], rsi
mov r9d, 0x30
lea r8, [rsp + 0x38]
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
je 0x14000349d
nop dword [rax + rax]
cmp dword [rsp + 0x58], 0x1000
jne 0x140003472
mov eax, dword [rsp + 0x5c]
add eax, 0xfffffffe
cmp eax, 0x3e
ja 0x140003472
movabs rcx, 0x4000000040000045
bt rcx, rax
jae 0x140003472
mov rbx, rsi
sub rbx, rdi
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov r8, rdi
mov rdx, qword [rsp + 0x38]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140003472
cmp qword [rsp + 0x68], rbx
jne 0x140003472
lea rcx, [rsp + 0x78]
call fcn.140002530
mov rsi, qword [rbp - 0x80]
comisd xmm0, xmm6
jae 0x140003553
mov rdi, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x50]
add rdx, qword [rsp + 0x38]
mov r9d, 0x30
lea r8, [rsp + 0x38]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
jne 0x140003400
mov rsi, qword [rbp - 0x78]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
test rdi, rdi
je 0x1400034dd
sub rsi, rdi
mov rax, rdi
cmp rsi, 0x1000
jb 0x1400034d2
add rsi, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000355e
mov rdx, rsi
mov rcx, rdi
call fcn.140005dbc
xor ebx, ebx
mov rdi, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x20]
test r12, r12
je 0x140003524
mov rcx, qword [rbp - 0x60]
sub rcx, r12
mov rax, r12
cmp rcx, 0x1000
jb 0x140003519
add rcx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003960
mov rdx, rcx
mov rcx, r12
call fcn.140005dbc
mov r12, rbx
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], rdi
cmp rbx, rsi
jne 0x140003565
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc r13d
cmp r13d, 0xa
jge 0x140003591
mov r15, qword [rbp - 0x58]
jmp 0x1400032e0
mov rdi, qword [rbp - 0x78]
mov rbx, qword [rsp + 0x78]
jmp 0x1400034e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rdx, str.Memory_extraction_completed_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
mov rcx, rax
lea rdx, [0x140004690]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r12, rsi
jne 0x1400035c3
lea rdx, str.Memory_extraction_failed.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400044b0
mov rcx, rax
lea rdx, [0x140004690]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ebx, 1
jmp 0x140003970
lea rdx, str.Using_extracted_memory_as_the_AES_256_encryption_key.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
mov rcx, rax
lea rdx, [0x140004690]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov ecx, 0x100
call fcn.140005d80
mov r14, rax
mov qword [rsp + 0x78], rax
lea rbx, [rax + 0x100]
mov qword [rbp - 0x78], rbx
xor edx, edx
mov r8d, 0x100
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x80], rbx
xor esi, esi
mov r15, r14
test sil, sil
jne 0x14000362e
xor r9b, r9b
jmp 0x140003696
movzx r9d, sil
mov edi, 0xfd
nop word [rax + rax]
movzx r10d, sil
movzx r8d, r9b
xor r11b, r11b
mov ebx, 8
movzx eax, r11b
xor al, r8b
movzx r9d, al
movzx eax, r11b
test r10b, 1
cmove r9d, eax
movzx eax, r8b
add al, al
movzx edx, al
shr r10b, 1
movzx r11d, r9b
movzx ecx, r8b
movzx eax, dl
xor al, 0x1b
movzx r8d, al
test cl, cl
cmovns r8d, edx
sub rbx, 1
jne 0x140003650
sub rdi, 1
jne 0x140003640
movzx eax, r9b
add al, al
xor al, r9b
add al, al
xor al, r9b
add al, al
xor al, r9b
add al, al
xor al, r9b
xor al, 0x63
mov byte [r15], al
inc esi
inc r15
cmp esi, 0x100
jl 0x140003624
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov ecx, 0x100
call fcn.140005d80
mov rdi, rax
mov qword [rbp - 0x28], rax
lea rbx, [rax + 0x100]
mov qword [rbp - 0x18], rbx
xor edx, edx
mov r8d, 0x100
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x20], rbx
xor edx, edx
nop dword [rax]
movzx ecx, byte [r14]
mov byte [rcx + rdi], dl
inc edx
lea r14, [r14 + 1]
cmp edx, 0x100
jl 0x140003700
mov dword [rsp + 0x68], 0x73696854
mov dword [rsp + 0x6c], 0x20736920
mov dword [rsp + 0x70], 0x65732061
mov dword [rsp + 0x74], 0x74657263
lea rdx, str.Original_input:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
xor edi, edi
nop word [rax + rax]
movzx ebx, byte [rsp + rdi + 0x68]
lea rdx, [0x1400024f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x1400086ec]
call fcn.1400044b0
inc rdi
cmp rdi, 0x10
jl 0x140003750
lea rdx, [0x140004690]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0x78]
mov rdx, r12
lea rcx, [rsp + 0x68]
call fcn.140001bb0
lea rdx, str.Encrypted_output:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
xor edi, edi
nop word [rax + rax]
movzx ebx, byte [rsp + rdi + 0x68]
lea rdx, [0x1400024f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x1400086ec]
call fcn.1400044b0
inc rdi
cmp rdi, 0x10
jl 0x1400037d0
lea rdx, [0x140004690]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r9, [rbp - 0x28]
lea r8, [rsp + 0x78]
mov rdx, r12
lea rcx, [rsp + 0x68]
call fcn.140001fd0
lea rdx, str.Decrypted_output:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
xor edi, edi
nop dword [rax + rax]
movzx ebx, byte [rsp + rdi + 0x68]
lea rdx, [0x1400024f0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x1400086ec]
call fcn.1400044b0
inc rdi
cmp rdi, 0x10
jl 0x140003850
lea rdx, [0x140004690]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Decrypted_string:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044b0
xor ebx, ebx
nop word [rax + rax]
movzx edx, byte [rsp + rbx + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004ab0
inc rbx
cmp rbx, 0x10
jl 0x1400038c0
lea rdx, [0x140004690]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor ebx, ebx
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14000392e
mov rdx, qword [rbp - 0x18]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003928
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003928
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dbc
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14000396c
mov rdx, qword [rbp - 0x78]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003967
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003967
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dbc
mov rdi, qword [rbp - 0x60]
test r12, r12
je 0x1400039ad
sub rdi, r12
mov rax, r12
cmp rdi, 0x1000
jb 0x1400039a1
add rdi, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, rdi
mov rcx, r12
call fcn.140005dbc
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140003a2d
mov rdx, qword [rbp - 0x38]
call fcn.140004c80
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x40]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x140003a15
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.140005dbc
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], 0
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x140003a6f
mov rdx, qword [rsp + 0x30]
sub rdx, rcx
and rdx, 0xfffffffffffffffc
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a6a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005dbc
mov eax, ebx
mov rcx, qword [rbp + 0x1380]
xor rcx, rsp
call fcn.140005d60
lea r11, [rsp + 0x14a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret