Function at 0x140058bf0
Capabilities:
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r14
lea rbp, [rsp - 0xc18]
sub rsp, 0xd18
mov rcx, qword [0x1402ff148]
mov r14, qword [0x1402ff158]
mov qword [rbp + 0x160], r14
mov rdx, qword [rcx + 0x10]
test rdx, rdx
jne 0x140058c3e
lea rcx, str.invalid_base_address:_0x_llx._n
call fcn.140001230
xor al, al
add rsp, 0xd18
pop r14
pop rbp
ret
mov qword [rsp + 0xd10], rbx
mov qword [rsp + 0xd08], rsi
mov qword [rsp + 0xd00], rdi
mov qword [rsp + 0xcf8], r12
xor r12d, r12d
mov qword [rsp + 0xcf0], r13
mov qword [rsp + 0xce8], r15
vmovaps xmmword [rsp + 0xcd0], xmm6
vmovaps xmmword [rsp + 0xcc0], xmm7
vmovaps xmmword [rsp + 0xcb0], xmm8
vmovss xmm8, dword [0x140149e58]
vxorps xmm6, xmm6, xmm6
mov rdx, qword [rcx + 0x10]
lea rax, [rbp + 0x668]
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0x1f8]
mov r13, 0xffffffffffffffff
mov qword [rsp + 0x20], rax
add rdx, 0x5c102b0
lea r9d, [r13 + 9]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1f8]
lea r9d, [r13 + 0x11]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x780]
mov qword [r14 + 0xc8], rax
lea rdx, [rax + 0x140]
mov rcx, qword [rcx + 0x18]
lea rax, [rbp + 0x6b0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6b8]
mov rdx, qword [r14 + 0xc8]
lea r9d, [r13 + 9]
mov qword [rbp + 0x200], r12
lea r8, [rbp + 0x200]
add rdx, 0x30
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6c0]
mov rdx, qword [r14 + 0xc8]
lea r9d, [r13 + 9]
mov qword [rsp + 0x68], r12
lea r8, [rsp + 0x68]
add rdx, 0x188
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6c8]
mov rdx, qword [rsp + 0x68]
lea r9d, [r13 + 9]
mov qword [rsp + 0x30], r12
lea r8, [rsp + 0x30]
add rdx, 0x248
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6d0]
mov rdx, qword [rsp + 0x68]
lea r9d, [r13 + 9]
add rdx, 0x38
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x208]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6d8]
mov rdx, qword [rbp + 0x208]
lea r9d, [r13 + 9]
mov qword [rbp + 0x1a0], r12
lea r8, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6e0]
mov rdx, qword [rbp + 0x1a0]
lea r9d, [r13 + 9]
mov qword [rbp + 0x198], r12
lea r8, [rbp + 0x198]
add rdx, 0x30
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x198]
lea rax, [rbp + 0x6e8]
add rdx, 0x2e0
mov qword [rbp + 0x190], r12
mov rcx, qword [0x1402ff148]
lea r9d, [r13 + 9]
lea r8, [rbp + 0x190]
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6f0]
mov rdx, qword [rsp + 0x30]
lea r9d, [r13 + 0x11]
mov rdi, qword [rbp + 0x190]
lea r8, [rbp + 0x220]
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], r12
add rdx, 0x170
mov rcx, qword [rcx + 0x18]
add rdi, 0x1c60
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x228]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e173c
mov qword [rbp + 0x1a8], rax
mov r15, rax
test rbx, rbx
je 0x140058f1c
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140112bd0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6f8]
movsxd r9, dword [rbp + 0x228]
mov r8, r15
mov rdx, qword [rbp + 0x220]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140058f64
mov rcx, r15
call fcn.1400e16f8
mov r15, r12
mov qword [rbp + 0x1a8], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x708]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x230]
add rdx, 0x2a0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x238]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e173c
mov qword [rbp + 0x30], rax
mov r14, rax
test rbx, rbx
je 0x140058fd2
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140112bd0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x710]
movsxd r9, dword [rbp + 0x238]
mov r8, r14
mov rdx, qword [rbp + 0x230]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140059014
mov rcx, r14
call fcn.1400e16f8
mov qword [rbp + 0x30], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x718]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x240]
add rdx, 0x270
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x248]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e173c
mov qword [rbp + 0x38], rax
mov rsi, rax
test rbx, rbx
je 0x140059082
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140112bd0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x720]
movsxd r9, dword [rbp + 0x248]
mov r8, rsi
mov rdx, qword [rbp + 0x240]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x1400590c4
mov rcx, rsi
call fcn.1400e16f8
mov qword [rbp + 0x38], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x728]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x250]
add rdx, 0x260
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x258]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e173c
mov qword [rbp + 0x40], rax
mov r14, rax
test rbx, rbx
je 0x140059132
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140112bd0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x730]
movsxd r9, dword [rbp + 0x258]
mov r8, r14
mov rdx, qword [rbp + 0x250]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140059174
mov rcx, r14
call fcn.1400e16f8
mov qword [rbp + 0x40], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x738]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x1e8]
add rdx, 0x610
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x1f0]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e173c
mov qword [rbp + 0x48], rax
mov rsi, rax
test rbx, rbx
je 0x1400591e2
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140112bd0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x740]
movsxd r9, dword [rbp + 0x1f0]
mov r8, rsi
mov rdx, qword [rbp + 0x1e8]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x140059224
mov rcx, rsi
call fcn.1400e16f8
mov qword [rbp + 0x48], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x748]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x260]
add rdx, 0x2b0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rbx, dword [rbp + 0x268]
mov eax, 8
mul rbx
cmovo rax, r13
mov rcx, rax
call fcn.1400e173c
mov qword [rbp + 0x158], rax
mov rsi, rax
test rbx, rbx
je 0x140059295
shl rbx, 3
xor edx, edx
mov r8, rbx
mov rcx, rax
call fcn.140112bd0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x750]
movsxd r9, dword [rbp + 0x268]
mov r8, rsi
mov rdx, qword [rbp + 0x260]
shl r9, 3
mov rcx, qword [rcx + 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x1400592da
mov rcx, rsi
call fcn.1400e16f8
mov qword [rbp + 0x158], r12
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x218]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x270]
add rdx, 0x170
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r13d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x278], 0
jle 0x14005981a
mov rbx, r15
mov qword [rsp + 0x40], rbx
nop dword [rax + rax]
mov rbx, qword [rbx]
lea rax, [rbp + 0x758]
mov rcx, qword [0x1402ff148]
lea r8, [rbp]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x2f0], xmm0
lea rdx, [rbx + 0x4260]
mov qword [rbp + 0x300], r12
mov rcx, qword [rcx + 0x18]
mov r9d, 0xc
vmovss dword [rbp + 8], xmm6
vmovss dword [rbp + 4], xmm6
vmovss dword [rbp], xmm6
mov qword [rbp + 0x308], 0xf
mov byte [rbp + 0x2f0], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x760]
vmovss xmm1, dword [rbp + 4]
vmovss dword [rbp + 0x2e4], xmm0
vmovss xmm0, dword [rbp + 8]
mov rcx, qword [rcx + 0x18]
lea rdx, [rbx + 0x18]
mov r9d, 8
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x210]
vmovss dword [rbp + 0x2e8], xmm1
vmovss dword [rbp + 0x2ec], xmm0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x210]
lea rdx, [rsp + 0x70]
call fcn.1400587e0
lea rcx, [rbp + 0x2f0]
cmp rcx, rax
je 0x140059422
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x2f0], ymm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b610
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x768]
mov r9d, 8
mov qword [rbp + 0x310], rdi
lea r8, [rbp - 0x70]
mov qword [rbp - 0x70], r12
lea rdx, [rbx + 0x2b8]
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x770]
mov rdx, qword [rbp - 0x70]
lea r8, [rbp - 0x60]
vmovss dword [rbp - 0x48], xmm6
vmovss dword [rbp - 0x4c], xmm6
vmovss dword [rbp - 0x50], xmm6
vmovss dword [rbp - 0x38], xmm6
vmovss dword [rbp - 0x3c], xmm6
vmovss dword [rbp - 0x40], xmm6
mov rcx, qword [rcx + 0x18]
add rdx, 0x1e0
mov r9d, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp - 0x44]
lea r8, [rbp + 0x188]
vmovups xmm0, xmmword [rbp - 0x60]
vmovss xmm1, dword [rbp - 0x4c]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x2b8]
mov byte [rbp + 0x334], al
mov r9d, 8
movzx eax, byte [rbp - 0x43]
mov byte [rbp + 0x335], al
movzx eax, byte [rbp - 0x42]
mov rcx, qword [rcx + 0x18]
mov byte [rbp + 0x336], al
movzx eax, byte [rbp - 0x41]
mov byte [rbp + 0x337], al
movzx eax, byte [rbp - 0x34]
mov byte [rbp + 0x344], al
movzx eax, byte [rbp - 0x33]
vmovups xmmword [rbp + 0x318], xmm0
vmovss xmm0, dword [rbp - 0x50]
mov byte [rbp + 0x345], al
movzx eax, byte [rbp - 0x32]
vmovss dword [rbp + 0x328], xmm0
vmovss xmm0, dword [rbp - 0x48]
mov byte [rbp + 0x346], al
movzx eax, byte [rbp - 0x31]
vmovss dword [rbp + 0x330], xmm0
vmovss xmm0, dword [rbp - 0x40]
mov byte [rbp + 0x347], al
lea rax, [rbp + 0x778]
vmovss dword [rbp + 0x32c], xmm1
vmovss xmm1, dword [rbp - 0x3c]
vmovss dword [rbp + 0x338], xmm0
vmovss xmm0, dword [rbp - 0x38]
mov qword [rsp + 0x20], rax
vmovss dword [rbp + 0x33c], xmm1
vmovss dword [rbp + 0x340], xmm0
mov qword [rbp + 0x188], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x540]
mov rdx, qword [rbp + 0x188]
lea r8, [rsp + 0x70]
add rdx, 0x4f0
mov qword [rsp + 0x20], rax
mov r9d, 0x20
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp qword [rsp + 0x70], 0
je 0x1400595e5
cmp dword [rsp + 0x78], 0
lea rax, [rsp + 0x70]
jne 0x1400595e9
lea rax, [rbp - 0x80]
vmovups xmm7, xmmword [rax]
vpextrd r12d, xmm7, 2
mov rcx, 0xffffffffffffffff
movsxd rbx, r12d
mov eax, 0x30
mul rbx
cmovo rax, rcx
mov rcx, rax
call fcn.1400e173c
mov rsi, rax
mov rcx, rbx
test r12d, r12d
je 0x14005964b
add rax, 0x14
xor r15d, r15d
nop dword [rax]
nop word [rax + rax]
mov qword [rax], r15
mov dword [rax - 4], r15d
mov qword [rax + 0x10], r15
mov dword [rax + 0xc], r15d
lea rax, [rax + 0x30]
sub rcx, 1
jne 0x140059630
jmp 0x14005964e
xor r15d, r15d
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x548]
lea r14, [rbx + rbx*2]
mov qword [rsp + 0x20], rax
shl r14, 4
mov r8, rsi
mov r9, r14
mov rcx, qword [rcx + 0x18]
vmovq rdx, xmm7
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x14005968d
mov rcx, rsi
call fcn.1400e16f8
mov rsi, r15
mov rcx, 0xffffffffffffffff
mov eax, 0x30
mul rbx
cmovo rax, rcx
mov rcx, rax
call fcn.1400e173c
mov r15, rax
mov r8, rbx
test r12d, r12d
je 0x1400596d7
lea rdx, [rax + 0x14]
xor eax, eax
nop dword [rax]
mov qword [rdx], rax
mov dword [rdx - 4], eax
mov qword [rdx + 0x10], rax
mov dword [rdx + 0xc], eax
lea rdx, [rdx + 0x30]
sub r8, 1
jne 0x1400596c0
mov r8, r14
mov rdx, rsi
mov rcx, r15
call fcn.140112f90
mov rcx, rsi
call fcn.1400e16f8
mov rcx, 0xffffffffffffffff
mov dword [rbp + 0x348], r12d
mov eax, 0x30
mul rbx
cmovo rax, rcx
mov rcx, rax
call fcn.1400e173c
test r12d, r12d
je 0x14005973b
lea rcx, [rax + 0x14]
xor r12d, r12d
nop dword [rax + rax]
mov qword [rcx], r12
mov dword [rcx - 4], r12d
mov qword [rcx + 0x10], r12
mov dword [rcx + 0xc], r12d
lea rcx, [rcx + 0x30]
sub rbx, 1
jne 0x140059720
jmp 0x14005973e
xor r12d, r12d
mov r8, r14
mov qword [rbp + 0x350], rax
mov rdx, r15
mov rcx, rax
call fcn.140112f90
mov rcx, r15
call fcn.1400e16f8
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0x58]
je 0x140059781
lea rdx, [rbp + 0x2e0]
mov rcx, rax
call fcn.14005b130
add qword [rsp + 0x50], 0x88
jmp 0x140059795
lea r8, [rbp + 0x2e0]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14005c310
mov rcx, qword [rbp + 0x350]
test rcx, rcx
je 0x1400597a6
call fcn.1400e16f8
mov r8, qword [rbp + 0x308]
cmp r8, 0xf
jbe 0x1400597c6
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.14005b920
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x218]
mov rbx, qword [rsp + 0x40]
lea r8, [rbp + 0x270]
mov rdx, qword [rsp + 0x30]
add rbx, 8
add rdx, 0x170
mov qword [rsp + 0x40], rbx
mov rcx, qword [rcx + 0x18]
mov r9d, 0x10
inc r13d
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r13d, dword [rbp + 0x278]
jl 0x140059330
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x2c8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x280]
add rdx, 0x2a0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r14d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x288], 0
jle 0x140059bcf
mov r15, qword [rbp + 0x30]
mov rbx, qword [r15]
lea rax, [rbp + 0x550]
mov rcx, qword [0x1402ff148]
lea r8, [rsp + 0x40]
mov r9d, 8
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x9a0]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x558]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp + 0x178]
mov qword [rbp + 0x178], r12
add rdx, 0x268
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x560]
mov rdx, qword [rbp + 0x178]
lea r8, [rbp - 0x10]
vmovss dword [rbp - 8], xmm6
vmovss dword [rbp - 0xc], xmm6
vmovss dword [rbp - 0x10], xmm6
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x568]
mov r9d, 8
mov qword [rbp + 0x170], r12
lea r8, [rbp + 0x170]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x9a0]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x570]
mov rdx, qword [rbp + 0x170]
lea r8, [rbp + 0x168]
mov qword [rbp + 0x168], r12
add rdx, 0x268
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x578]
mov rdx, qword [rbp + 0x168]
lea r8, [rbp + 0xc30]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp + 0xc30], 0xf0
je 0x140059b85
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x580]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x430], xmm0
lea rdx, [rbx + 0x280]
mov qword [rbp + 0x440], r12
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0x410]
mov r9d, 0xa
mov qword [rbp + 0x448], 0xf
vmovss dword [rbp + 0x470], xmm6
vmovss dword [rbp + 0x46c], xmm6
vmovss dword [rbp + 0x468], xmm6
vmovss dword [rbp + 0x480], xmm6
vmovss dword [rbp + 0x47c], xmm6
vmovss dword [rbp + 0x478], xmm6
mov byte [rbp + 0x430], 0
mov dword [rbp + 0x488], r12d
mov qword [rbp + 0x490], r12
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp - 0x10]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x18]
movzx eax, byte [rbp + 0x419]
lea r8, [rbp + 0x2c0]
vmovss xmm1, dword [rbp - 0xc]
vmovss dword [rbp + 0x424], xmm0
vmovss xmm0, dword [rbp - 8]
mov rcx, qword [rcx + 0x18]
mov r9d, 8
mov byte [rbp + 0x420], al
lea rax, [rbp + 0x588]
vmovss dword [rbp + 0x428], xmm1
vmovss dword [rbp + 0x42c], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x2c0]
lea rdx, [rsp + 0x70]
call fcn.1400587e0
lea rcx, [rbp + 0x430]
cmp rcx, rax
je 0x140059b06
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x430], ymm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b610
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x450], rdi
cmp rax, qword [rsp + 0x58]
je 0x140059b40
lea rdx, [rbp + 0x420]
mov rcx, rax
call fcn.14005b130
add qword [rsp + 0x50], 0x88
jmp 0x140059b54
lea r8, [rbp + 0x420]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14005c310
mov rcx, qword [rbp + 0x490]
test rcx, rcx
je 0x140059b65
call fcn.1400e16f8
mov r8, qword [rbp + 0x448]
cmp r8, 0xf
jbe 0x140059b85
mov rdx, qword [rbp + 0x430]
lea rcx, [rbp + 0x430]
call fcn.14005b920
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x2c8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x280]
add rdx, 0x2a0
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc r14d
mov rcx, qword [rcx + 0x18]
add r15, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r14d, dword [rbp + 0x288]
jl 0x140059864
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x2d8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x290]
add rdx, 0x270
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r15d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x298], 0
jle 0x140059f6f
mov r14, qword [rbp + 0x38]
nop dword [rax]
mov rbx, qword [r14]
lea rax, [rbp + 0x590]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x150]
mov r9d, 8
mov qword [rbp + 0x150], r12
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x598]
mov rdx, qword [rbp + 0x150]
lea r8, [rbp + 0xc38]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp + 0xc38], 0xf0
je 0x140059f25
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5a0]
mov r9d, 8
mov qword [rsp + 0x40], r12
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5a8]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x20]
vmovss dword [rbp - 0x18], xmm6
vmovss dword [rbp - 0x1c], xmm6
vmovss dword [rbp - 0x20], xmm6
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5b0]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x390], xmm0
lea rdx, [rbx + 0x901]
mov qword [rbp + 0x3a0], r12
mov rcx, qword [rcx + 0x18]
lea r8, [rbp + 0xc40]
mov r9d, 1
mov qword [rbp + 0x3a8], 0xf
vmovss dword [rbp + 0x3d0], xmm6
vmovss dword [rbp + 0x3cc], xmm6
vmovss dword [rbp + 0x3c8], xmm6
vmovss dword [rbp + 0x3e0], xmm6
vmovss dword [rbp + 0x3dc], xmm6
vmovss dword [rbp + 0x3d8], xmm6
mov byte [rbp + 0x390], 0
mov qword [rbp + 0x3b0], r12
mov dword [rbp + 0x3e8], r12d
mov qword [rbp + 0x3f0], r12
mov byte [rbp + 0x3f8], 1
mov byte [rbp + 0x3fa], 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp - 0x20]
mov rcx, qword [0x1402ff148]
lea rdx, [rbx + 0x18]
movzx eax, byte [rbp + 0xc40]
lea r8, [rbp + 0x2d0]
vmovss xmm1, dword [rbp - 0x1c]
vmovss dword [rbp + 0x384], xmm0
vmovss xmm0, dword [rbp - 0x18]
mov rcx, qword [rcx + 0x18]
mov r9d, 8
mov byte [rbp + 0x3f9], al
lea rax, [rbp + 0x5b8]
vmovss dword [rbp + 0x388], xmm1
vmovss dword [rbp + 0x38c], xmm0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x2d0]
lea rdx, [rsp + 0x70]
call fcn.1400587e0
mov rsi, rax
lea rax, [rbp + 0x390]
cmp rax, rsi
je 0x140059e68
lea rcx, [rbp + 0x390]
call fcn.14005b610
vmovups ymm0, ymmword [rsi]
vmovups ymmword [rbp + 0x390], ymm0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b610
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5c0]
lea rdx, [rbx + 0x5cc]
mov qword [rbp + 0x3b0], rdi
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xc48]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0xc48]
mov byte [rbp + 0x381], al
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0x58]
je 0x140059ee0
lea rdx, [rbp + 0x380]
mov rcx, rax
call fcn.14005b130
add qword [rsp + 0x50], 0x88
jmp 0x140059ef4
lea r8, [rbp + 0x380]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.14005c310
mov rcx, qword [rbp + 0x3f0]
test rcx, rcx
je 0x140059f05
call fcn.1400e16f8
mov r8, qword [rbp + 0x3a8]
cmp r8, 0xf
jbe 0x140059f25
mov rdx, qword [rbp + 0x390]
lea rcx, [rbp + 0x390]
call fcn.14005b920
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x2d8]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x290]
add rdx, 0x270
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc r15d
mov rcx, qword [rcx + 0x18]
add r14, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r15d, dword [rbp + 0x298]
jl 0x140059c20
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x1b0]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x2a0]
add rdx, 0x610
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r15d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x2a8], 0
jle 0x14005a273
mov r14, qword [rbp + 0x48]
nop dword [rax]
mov rbx, qword [r14]
lea rax, [rbp + 0x5c8]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x180]
mov r9d, 8
mov qword [rbp + 0x180], r12
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5d0]
mov rdx, qword [rbp + 0x180]
lea r8, [rsp + 0x38]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rsp + 0x38], 0xf0
je 0x14005a229
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5d8]
mov r9d, 8
mov qword [rsp + 0x40], r12
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5e0]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp + 0x10]
vmovss dword [rbp + 0x18], xmm6
vmovss dword [rbp + 0x14], xmm6
vmovss dword [rbp + 0x10], xmm6
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5e8]
vmovss xmm1, dword [rbp + 0x14]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x4c0], xmm0
vmovss xmm0, dword [rbp + 0x10]
mov rcx, qword [rcx + 0x18]
lea rdx, [rbx + 0x18]
vmovss dword [rbp + 0x4b4], xmm0
vmovss xmm0, dword [rbp + 0x18]
mov r9d, 8
mov qword [rbp + 0x4d0], r12
lea r8, [rbp + 0x370]
mov qword [rbp + 0x4d8], 0xf
vmovss dword [rbp + 0x4bc], xmm0
vmovss dword [rbp + 0x500], xmm6
vmovss dword [rbp + 0x4fc], xmm6
vmovss dword [rbp + 0x4f8], xmm6
vmovss dword [rbp + 0x510], xmm6
vmovss dword [rbp + 0x50c], xmm6
vmovss dword [rbp + 0x508], xmm6
vmovss dword [rbp + 0x4b8], xmm1
mov byte [rbp + 0x4c0], 0
mov dword [rbp + 0x518], r12d
mov qword [rbp + 0x520], r12
mov byte [rbp + 0x528], 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, qword [rbp + 0x370]
lea rdx, [rsp + 0x70]
call fcn.1400587e0
lea rcx, [rbp + 0x4c0]
cmp rcx, rax
je 0x14005a1a9
vmovups ymm0, ymmword [rax]
vmovups ymmword [rbp + 0x4c0], ymm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, qword [rbp - 0x78]
cmp r8, 0xf
jbe 0x14005a1c5
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x70]
vzeroupper
call fcn.14005b920
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x4e0], rdi
cmp rax, qword [rsp + 0x58]
je 0x14005a1f5
lea rdx, [rbp + 0x4b0]
mov rcx, rax
vzeroupper
call fcn.14005b130
add qword [rsp + 0x50], 0x88
jmp 0x14005a20c
lea r8, [rbp + 0x4b0]
mov rdx, rax
lea rcx, [rsp + 0x48]
vzeroupper
call fcn.14005c310
mov rcx, qword [rbp + 0x520]
test rcx, rcx
je 0x14005a21d
call fcn.1400e16f8
lea rcx, [rbp + 0x4c0]
call fcn.14005b610
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x1b0]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x2a0]
add rdx, 0x610
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc r15d
mov rcx, qword [rcx + 0x18]
add r14, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r15d, dword [rbp + 0x2a8]
jl 0x140059fc0
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x1c0]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x2b0]
add rdx, 0x260
mov qword [rsp + 0x20], rax
mov r9d, 0x10
mov r13d, r12d
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x2b8], 0
jle 0x14005a946
mov r12, qword [rbp + 0x40]
xor r15d, r15d
mov rbx, qword [r12]
lea rax, [rbp + 0x5f0]
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x100]
mov r9d, 8
mov qword [rbp + 0x100], r15
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x5f8]
mov rdx, qword [rbp + 0x100]
lea r8, [rsp + 0x39]
add rdx, 0x154
mov qword [rsp + 0x20], rax
mov r9d, 1
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rsp + 0x39], 0xf0
je 0x14005a8f9
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x600]
lea rdx, [rbx + 0x490]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x20]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x20], 0
jne 0x14005a8f9
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x608]
mov r9d, 8
mov qword [rsp + 0x40], r15
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea rdx, [rbx + 0x140]
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x610]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x30]
vmovss dword [rbp - 0x28], xmm6
vmovss dword [rbp - 0x2c], xmm6
vmovss dword [rbp - 0x30], xmm6
mov rcx, qword [rcx + 0x18]
add rdx, 0x124
mov r9d, 0xc
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x618]
vmovss xmm1, dword [rbp - 0x2c]
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x60], xmm0
vmovss xmm0, dword [rbp - 0x30]
mov rcx, qword [rcx + 0x18]
lea rdx, [rbx + 0x18]
vmovss dword [rbp + 0x54], xmm0
vmovss xmm0, dword [rbp - 0x28]
mov r9d, 8
mov dword [rbp + 0xb8], r15d
lea r8, [rbp - 0x68]
mov qword [rbp + 0xc0], r15
vmovss dword [rbp + 0x5c], xmm0
vmovss dword [rbp + 0xa0], xmm6
vmovss dword [rbp + 0x9c], xmm6
vmovss dword [rbp + 0x98], xmm6
vmovss dword [rbp + 0xb0], xmm6
vmovss dword [rbp + 0xac], xmm6
vmovss dword [rbp + 0xa8], xmm6
vmovss dword [rbp + 0x58], xmm1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x68]
movabs rcx, 0x100000001b3
mov r8, qword [0x1402fcf58]
movabs rax, 0xcbf29ce484222325
movzx edx, bl
xor rdx, rax
movzx eax, byte [rbp - 0x67]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rbp - 0x66]
imul rdx, rcx
xor rdx, rax
movzx eax, byte [rbp - 0x65]
imul rdx, rcx
xor rdx, rax
imul rdx, rcx
and rdx, qword [0x1402fcf70]
mov rax, rdx
add rax, rax
mov rcx, qword [r8 + rax*8 + 8]
cmp rcx, qword [0x1402fcf48]
je 0x14005a500
add rdx, rdx
mov rax, qword [r8 + rdx*8]
cmp ebx, dword [rcx + 0x10]
je 0x14005a503
nop dword [rax]
cmp rcx, rax
je 0x14005a500
mov rcx, qword [rcx + 8]
cmp ebx, dword [rcx + 0x10]
jne 0x14005a4f0
jmp 0x14005a503
mov rcx, r15
test rcx, rcx
je 0x14005a533
lea r8, [rbp - 0x70]
mov dword [rbp - 0x70], ebx
lea rdx, [rbp + 0x790]
call fcn.14005ba40
lea rcx, [rbp + 0xe0]
mov rdx, qword [rax]
add rdx, 0x18
call fcn.14005b540
jmp 0x14005a802
xor edx, edx
lea rcx, [rbp + 0x7b0]
mov r8d, 0x400
call fcn.140112bd0
mov rcx, qword [0x1402ff148]
lea r8, [rbp + 0x1b8]
mov eax, ebx
mov r9d, 8
sar eax, 0x10
lea edx, [rax*8 + 0x10]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rcx + 0x18]
add rax, 0x5d38f40
add rdx, rax
lea rax, [rbp + 0x620]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea r8, [rsp + 0x60]
movzx eax, bx
mov r9d, 2
mov rcx, qword [rcx + 0x18]
lea r14d, [rax + rax]
add r14, qword [rbp + 0x1b8]
lea rax, [rbp + 0x628]
mov rdx, r14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, word [rsp + 0x60]
shr eax, 6
test eax, eax
je 0x14005a7dd
mov rcx, qword [0x1402ff148]
lea rdx, [r14 + 2]
mov esi, eax
lea r8, [rbp + 0x7b0]
lea rax, [rbp + 0x630]
mov r9d, esi
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + rsi + 0x7b0], 0
lea rax, [rbp + 0x7b0]
vpxor xmm0, xmm0, xmm0
mov rsi, 0xffffffffffffffff
vmovups xmmword [rsp + 0x70], xmm0
mov r14, rsi
inc r14
cmp byte [rax + r14], 0
jne 0x14005a623
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x14005b106
cmp r14, 0xf
ja 0x14005a66e
mov r8, r14
mov qword [rbp - 0x80], r14
lea rdx, [rbp + 0x7b0]
mov qword [rbp - 0x78], 0xf
lea rcx, [rsp + 0x70]
call fcn.140112f90
mov byte [rsp + r14 + 0x70], 0
jmp 0x14005a6c3
mov r15, r14
or r15, 0xf
cmp r15, rax
jbe 0x14005a67f
mov r15, rax
jmp 0x14005a68c
cmp r15, 0x16
mov eax, 0x16
cmovb r15, rax
lea rcx, [r15 + 1]
call fcn.14005bd90
mov r8, r14
mov qword [rsp + 0x70], rax
lea rdx, [rbp + 0x7b0]
mov qword [rbp - 0x80], r14
mov rcx, rax
mov qword [rbp - 0x78], r15
mov rsi, rax
call fcn.140112f90
xor r15d, r15d
mov byte [rsi + r14], 0
lea rsi, [r15 - 1]
vmovups ymm1, ymmword [rsp + 0x70]
vmovups ymmword [rbp - 0x58], ymm1
mov dword [rbp - 0x60], ebx
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x7a0]
vzeroupper
call fcn.14005c0e0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14005a71f
mov rcx, qword [rbp - 0x58]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005a71a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b112
call fcn.1400e16f8
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xe0], xmm0
lea rax, [rbp + 0x7b0]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14005a732
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x14005b106
cmp rsi, 0xf
ja 0x14005a786
mov r8, rsi
mov qword [rbp + 0xf0], rsi
lea rdx, [rbp + 0x7b0]
mov qword [rbp + 0xf8], 0xf
lea rcx, [rbp + 0xe0]
call fcn.140112f90
mov byte [rbp + rsi + 0xe0], 0
jmp 0x14005a802
mov r14, rsi
or r14, 0xf
cmp r14, rax
jbe 0x14005a797
mov r14, rax
jmp 0x14005a7a4
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
lea rcx, [r14 + 1]
call fcn.14005bd90
mov r8, rsi
mov qword [rbp + 0xe0], rax
lea rdx, [rbp + 0x7b0]
mov qword [rbp + 0xf0], rsi
mov rcx, rax
mov qword [rbp + 0xf8], r14
mov rbx, rax
call fcn.140112f90
mov byte [rbx + rsi], 0
jmp 0x14005a802
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0xe0], xmm0
mov byte [rbp + 0xe0], 0
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0xf8], 0xf
mov rbx, qword [rsp + 0x50]
vmovups ymm0, ymmword [rbp + 0xe0]
vmovups ymmword [rbp + 0x60], ymm0
mov qword [rbp + 0x80], rdi
cmp rbx, qword [rsp + 0x58]
je 0x14005a8cb
movzx eax, byte [rbp + 0x50]
lea rcx, [rbx + 0x10]
vmovsd xmm0, qword [rbp + 0x54]
mov byte [rbx], al
lea rdx, [rbp + 0x60]
movzx eax, byte [rbp + 0x51]
vmovsd qword [rbx + 4], xmm0
mov byte [rbx + 1], al
mov eax, dword [rbp + 0x5c]
mov dword [rbx + 0xc], eax
vzeroupper
call fcn.14005b540
vmovups ymm0, ymmword [rbp + 0x88]
vmovups xmm1, xmmword [rbp + 0xa8]
mov rax, qword [rbp + 0x80]
lea rcx, [rbx + 0x68]
vmovups ymmword [rbx + 0x38], ymm0
vmovups xmmword [rbx + 0x58], xmm1
mov qword [rbx + 0x30], rax
lea rdx, [rbp + 0xb8]
vzeroupper
call fcn.140058b50
movzx eax, byte [rbp + 0xc8]
mov byte [rbx + 0x78], al
movzx eax, byte [rbp + 0xc9]
mov byte [rbx + 0x79], al
movzx eax, byte [rbp + 0xca]
mov byte [rbx + 0x7a], al
mov eax, dword [rbp + 0xcc]
mov dword [rbx + 0x7c], eax
mov rax, qword [rbp + 0xd0]
mov qword [rbx + 0x80], rax
add qword [rsp + 0x50], 0x88
jmp 0x14005a8df
lea r8, [rbp + 0x50]
mov rdx, rbx
lea rcx, [rsp + 0x48]
vzeroupper
call fcn.14005c310
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x14005a8f0
call fcn.1400e16f8
lea rcx, [rbp + 0x60]
call fcn.14005b610
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x1c0]
mov rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x2b0]
add rdx, 0x260
mov qword [rsp + 0x20], rax
mov r9d, 0x10
inc r13d
mov rcx, qword [rcx + 0x18]
add r12, 8
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r13d, dword [rbp + 0x2b8]
jl 0x14005a2c0
xor r12d, r12d
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x638]
mov rdx, qword [rsp + 0x68]
lea r8, [rbp + 0x1c8]
add rdx, 0x38
mov qword [rsp + 0x20], rax
mov r9d, 8
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x640]
mov rdx, qword [rbp + 0x1c8]
lea r8, [rbp + 0x108]
mov qword [rbp + 0x108], r12
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x648]
mov rdx, qword [rbp + 0x108]
lea r8, [rbp + 0x110]
mov qword [rbp + 0x110], r12
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x650]
mov rdx, qword [rbp + 0x110]
lea r8, [rbp + 0x118]
mov qword [rbp + 0x118], r12
add rdx, 0x2c8
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x658]
mov rdx, qword [rbp + 0x118]
lea r8, [rbp + 0x24]
add rdx, 0x5fc4
mov qword [rsp + 0x20], rax
mov r9d, 4
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x24], 0
je 0x14005aa87
mov rax, qword [0x1402ff150]
cmp byte [rax + 0x97], 0
jne 0x14005aa87
cmp byte [rax + 0x9b], 1
jne 0x14005aa87
mov byte [rax + 0x97], 1
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x660]
mov rdx, qword [rsp + 0x68]
lea r8, [rbp + 0x1d0]
add rdx, 0x38
mov qword [rsp + 0x20], rax
mov r9d, 8
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x700]
mov rdx, qword [rbp + 0x1d0]
lea r8, [rbp + 0x120]
mov qword [rbp + 0x120], r12
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x670]
mov rdx, qword [rbp + 0x120]
lea r8, [rbp + 0x128]
mov qword [rbp + 0x128], r12
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x678]
mov rdx, qword [rbp + 0x128]
lea r8, [rbp + 0x130]
mov qword [rbp + 0x130], r12
add rdx, 0x2c8
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x680]
mov rdx, qword [rbp + 0x130]
lea r8, [rbp + 0x28]
add rdx, 0x4a08
mov qword [rsp + 0x20], rax
mov r9d, 4
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x28], 0x64
je 0x14005abc8
mov rax, qword [0x1402ff150]
cmp byte [rax + 0x8c], 0
jne 0x14005abc8
cmp byte [rax + 0x9a], 1
jne 0x14005abc8
mov byte [rax + 0x8c], 1
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x688]
mov rdx, qword [rsp + 0x68]
lea r8, [rbp + 0x1d8]
add rdx, 0x38
mov qword [rsp + 0x20], rax
mov r9d, 8
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x690]
mov rdx, qword [rbp + 0x1d8]
lea r8, [rbp + 0x138]
mov qword [rbp + 0x138], r12
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x698]
mov rdx, qword [rbp + 0x138]
lea r8, [rbp + 0x140]
mov qword [rbp + 0x140], r12
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6a0]
mov rdx, qword [rbp + 0x140]
lea r8, [rbp + 0x148]
mov qword [rbp + 0x148], r12
add rdx, 0x2c8
mov r9d, 8
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402ff148]
lea rax, [rbp + 0x6a8]
mov rdx, qword [rbp + 0x148]
lea r8, [rbp + 0x2c]
add rdx, 0x68dc
mov qword [rsp + 0x20], rax
mov r9d, 4
mov rcx, qword [rcx + 0x18]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
vmovss xmm0, dword [rbp + 0x2c]
vcomiss xmm0, xmm8
jae 0x14005ad0f
mov rax, qword [0x1402ff150]
cmp byte [rax + 0x8e], 0
jne 0x14005ad0f
cmp byte [rax + 0x9c], 1
jne 0x14005ad0f
mov byte [rax + 0x8e], 1
mov rcx, qword [rbp + 0x1a8]
call fcn.1400e16f8
mov rcx, qword [rbp + 0x30]
call fcn.1400e16f8
mov rcx, qword [rbp + 0x38]
call fcn.1400e16f8
mov rcx, qword [rbp + 0x40]
call fcn.1400e16f8
mov rcx, qword [rbp + 0x48]
call fcn.1400e16f8
mov rcx, qword [rbp + 0x158]
call fcn.1400e16f8
mov r14, qword [rbp + 0x160]
mov rbx, qword [r14]
mov rdi, qword [r14 + 8]
cmp rbx, rdi
je 0x14005ad8a
nop
mov rcx, qword [rbx + 0x70]
test rcx, rcx
je 0x14005ad6e
call fcn.1400e16f8
lea rcx, [rbx + 0x10]
call fcn.14005b610
add rbx, 0x88
cmp rbx, rdi
jne 0x14005ad60
mov rax, qword [r14]
mov qword [r14 + 8], rax
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x48]
cmp rbx, rsi
je 0x14005af21
add rbx, 4
movzx eax, byte [rbx - 4]
lea rdx, [rbx + 0xc]
vmovsd xmm0, qword [rbx]
mov byte [rbp + 0x50], al
lea rcx, [rbp + 0x60]
movzx eax, byte [rbx - 3]
mov byte [rbp + 0x51], al
mov eax, dword [rbx + 8]
mov dword [rbp + 0x5c], eax
vmovsd qword [rbp + 0x54], xmm0
call fcn.14005b540
vmovups ymm0, ymmword [rbx + 0x34]
vmovups xmm1, xmmword [rbx + 0x54]
mov rax, qword [rbx + 0x2c]
lea rdx, [rbx + 0x64]
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0xb8]
vmovups ymmword [rbp + 0x88], ymm0
vmovups xmmword [rbp + 0xa8], xmm1
vzeroupper
call fcn.140058b50
movzx eax, byte [rbx + 0x74]
mov rdi, qword [r14 + 8]
mov byte [rbp + 0xc8], al
movzx eax, byte [rbx + 0x75]
mov byte [rbp + 0xc9], al
movzx eax, byte [rbx + 0x76]
mov byte [rbp + 0xca], al
mov eax, dword [rbx + 0x78]
mov dword [rbp + 0xcc], eax
mov rax, qword [rbx + 0x7c]
mov qword [rbp + 0xd0], rax
cmp rdi, qword [r14 + 0x10]
je 0x14005aee4
movzx eax, byte [rbp + 0x50]
lea rcx, [rdi + 0x10]
vmovsd xmm0, qword [rbp + 0x54]
mov byte [rdi], al
lea rdx, [rbp + 0x60]
movzx eax, byte [rbp + 0x51]
mov byte [rdi + 1], al
mov eax, dword [rbp + 0x5c]
vmovsd qword [rdi + 4], xmm0
mov dword [rdi + 0xc], eax
call fcn.14005b540
vmovups ymm0, ymmword [rbp + 0x88]
vmovups xmm1, xmmword [rbp + 0xa8]
mov rax, qword [rbp + 0x80]
lea rcx, [rdi + 0x68]
vmovups ymmword [rdi + 0x38], ymm0
vmovups xmmword [rdi + 0x58], xmm1
mov qword [rdi + 0x30], rax
lea rdx, [rbp + 0xb8]
vzeroupper
call fcn.140058b50
movzx eax, byte [rbp + 0xc8]
mov byte [rdi + 0x78], al
movzx eax, byte [rbp + 0xc9]
mov byte [rdi + 0x79], al
movzx eax, byte [rbp + 0xca]
mov byte [rdi + 0x7a], al
mov eax, dword [rbp + 0xcc]
mov dword [rdi + 0x7c], eax
mov rax, qword [rbp + 0xd0]
mov qword [rdi + 0x80], rax
add qword [r14 + 8], 0x88
jmp 0x14005aef3
lea r8, [rbp + 0x50]
mov rdx, rdi
mov rcx, r14
call fcn.14005c310
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x14005af04
call fcn.1400e16f8
lea rcx, [rbp + 0x60]
call fcn.14005b610
add rbx, 0x88
lea rax, [rbx - 4]
cmp rax, rsi
jne 0x14005ada1
lea rcx, [rbp + 0x1e0]
call fcn.140058700
mov rbx, qword [rbp + 0x1e0]
movabs rax, 0x7ffffffffff0bdbe
cmp rbx, rax
jg 0x14005af4c
add rbx, 0xf4240
jmp 0x14005af56
movabs rbx, 0x7fffffffffffffff
movabs r12, 0xb2f4fc0794908cf3
movabs r14, 0x4e94914effff
nop word [rax + rax]
call fcn.1400e1fcc
mov rdi, rax
call fcn.1400e1fb0
mov rcx, rax
cmp rdi, 0x989680
jne 0x14005af8f
imul rax, rcx, 0x64
jmp 0x14005b000
cmp rdi, 0x16e3600
jne 0x14005afe2
mov rax, r12
imul rcx
lea r8, [rcx + rdx]
sar r8, 0x18
mov rax, r8
shr rax, 0x3f
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
mov rax, r12
imul rcx, rcx, 0x3b9aca00
imul rcx
lea rax, [rcx + rdx]
sar rax, 0x18
mov rcx, rax
shr rcx, 0x3f
add rax, rcx
imul rcx, r8, 0x3b9aca00
jmp 0x14005affd
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
imul rcx, rcx, 0x3b9aca00
add rax, rcx
cmp rbx, rax
je 0x14005b057
jl 0x14005b057
mov rcx, rbx
sub rcx, rax
cmp rcx, r14
jg 0x14005b048
movabs rax, 0x431bde82d7b634db
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14005b03c
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14005af70
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14005af70
mov rcx, qword [rsp + 0x48]
mov r12d, 0
mov r14, qword [rbp + 0x160]
test rcx, rcx
jne 0x14005b07a
mov rcx, qword [0x1402ff148]
jmp 0x140058c98
mov rdi, qword [rsp + 0x50]
cmp rcx, rdi
je 0x14005b0b3
lea rbx, [rcx + 0x70]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14005b095
call fcn.1400e16f8
lea rcx, [rbx - 0x60]
call fcn.14005b610
add rbx, 0x88
lea rax, [rbx - 0x70]
cmp rax, rdi
jne 0x14005b088
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x58]
movabs rdx, 0xf0f0f0f0f0f0f0f1
sub rax, rcx
sar rax, 3
imul rax, rdx
imul rdx, rax, 0x88
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b0f5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005b10c
call fcn.1400e16f8
mov rcx, qword [0x1402ff148]
jmp 0x140058c98
call fcn.140058600
int3
call fcn.1400f3f60
int3
call fcn.1400f3f60
int3