Function at 0x140001ca0
Capabilities:
Enumerate process modules
Hash data using djb2

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x22f0]
mov eax, 0x23f0
call fcn.140006a60
sub rsp, rax
movaps xmmword [rsp + 0x23e0], xmm6
mov rax, qword [0x14000a010]
xor rax, rsp
mov qword [rbp + 0x22d0], rax
mov byte [rsp + 0x30], r9b
mov r13, r8
mov qword [rsp + 0x68], r8
mov r15, rdx
mov qword [rbp - 0x78], rdx
mov r14d, ecx
mov dword [rsp + 0x40], ecx
mov dword [rbp - 8], ecx
mov r10, qword [0x14000a850]
mov r9, qword [0x14000a858]
sub r9, r10
sar r9, 2
xor cl, cl
xor edi, edi
mov r8d, edi
test r9, r9
je 0x140001d56
mov edx, edi
mov edi, 1
nop dword [rax]
nop dword [rax + rax]
movzx ecx, cl
cmp dword [rdx + r10], r14d
cmove ecx, edi
inc r8d
lea rdx, [rdx + 4]
movsxd rax, r8d
cmp rax, r9
jb 0x140001d30
test cl, cl
mov edi, 0
jne 0x1400028e6
mov r8d, r14d
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400028e6
movsd xmm0, qword [str._unknown_]
movsd qword [rbp + 0x20b0], xmm0
movzx eax, word [0x140007580]
mov word [rbp + 0x20b8], ax
xor edx, edx
mov r8d, 0xfa
lea rcx, [rbp + 0x20ba]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 2
lea r9, [rbp + 0x20]
mov r8d, 8
lea rdx, [rbp - 0x10]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
test eax, eax
je 0x1400028dd
mov r9d, 0x104
lea r8, [rbp + 0x20b0]
mov rdx, qword [rbp - 0x10]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
test eax, eax
je 0x1400028dd
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], rdi
lea rax, [rbp + 0x20b0]
mov rdx, 0xffffffffffffffff
mov rbx, rdx
inc rbx
cmp byte [rax + rbx], 0
jne 0x140001e11
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
ja 0x140002920
mov qword [rbp + 0x18], 0xf
cmp rbx, 0x10
jae 0x140001e5c
mov qword [rbp + 0x10], rbx
mov r8, rbx
lea rdx, [rbp + 0x20b0]
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rbx], 0
jmp 0x140001ee6
mov rax, rbx
or rax, 0xf
cmp rax, rsi
ja 0x140001e77
mov rsi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rsi, rcx
mov rcx, rsi
add rcx, 1
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x140001eb7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000291a
mov rcx, rax
call fcn.140005b50
test rax, rax
je 0x1400028cc
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001ec4
test rcx, rcx
je 0x140001ec4
call fcn.140005b50
mov rdi, rax
mov qword [rbp], rdi
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], rsi
mov r8, rbx
lea rdx, [rbp + 0x20b0]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea rdi, [rbp]
mov r8, qword [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdi, r8
lea rcx, [rbp]
cmovae rcx, r8
mov rsi, qword [rbp + 0x10]
add rsi, rcx
lea rbx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rbx, r8
cmp rbx, rsi
je 0x140001f34
sub rdi, rbx
nop dword [rax + rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rdi + rbx], al
inc rbx
cmp rbx, rsi
jne 0x140001f20
lea rdx, [rbp]
lea rcx, [rbp + 0x28]
call fcn.1400049d0
mov rbx, rax
mov edi, 0x1505
mov dword [rsp + 0x44], edi
mov rdx, rax
mov rax, qword [rax + 0x18]
cmp rax, 0x10
jb 0x140001f5d
mov rdx, qword [rdx]
movsx ecx, byte [rdx]
inc rdx
test ecx, ecx
je 0x140001f84
nop word [rax + rax]
imul edi, edi, 0x21
add edi, ecx
movsx ecx, byte [rdx]
lea rdx, [rdx + 1]
test ecx, ecx
jne 0x140001f70
mov dword [rsp + 0x44], edi
cmp rax, 0x10
jb 0x140001fbb
mov rcx, qword [rbx]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140001fb6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400020f5
mov rcx, r8
call fcn.140005eb4
xor esi, esi
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], sil
mov dword [rsp + 0x48], edi
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, str.:windows_
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140002862
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, str.katvrhandler
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140002862
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, str.katinputService
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140002862
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, str.oculusdash
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140002862
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, str.oculus_platform_runtime
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140002862
lea rcx, [rbp + 0x48]
call fcn.1400016f0
nop
cmp qword [rbp + 0x58], rsi
jbe 0x14000210c
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14000210c
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
lea rcx, str.Found_SteamVR_System_stuff__s_skip..._n
call fcn.140001070
mov rdx, qword [0x14000a858]
cmp rdx, qword [0x14000a860]
je 0x1400020fc
mov dword [rdx], r14d
add qword [0x14000a858], 4
jmp 0x140002805
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea r8, [rbp - 8]
lea rcx, [0x14000a850]
jmp 0x140002800
mov ebx, 1
test r13, r13
je 0x14000214f
mov rdx, qword [r13]
mov r9, qword [r13 + 8]
sub r9, rdx
sar r9, 2
xor cl, cl
mov r8d, esi
test r9, r9
je 0x14000214f
nop
movzx ecx, cl
cmp dword [rdx], edi
cmove ecx, ebx
inc r8d
lea rdx, [rdx + 4]
movsxd rax, r8d
cmp rax, r9
jb 0x140002130
test cl, cl
jne 0x140002805
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0xb0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], 2
lea r9, [rbp + 0x20]
mov r8d, 0x2000
lea rdx, [rbp + 0xb0]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
test eax, eax
je 0x1400027e0
mov eax, dword [rbp + 0x20]
shr rax, 3
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov r13d, ebx
mov dword [rbp - 8], ebx
cmp rax, 1
jbe 0x1400027db
mov rdx, rbx
mov qword [rsp + 0x38], rbx
nop dword [rax]
mov dword [rsp + 0x58], r14d
mov rax, qword [rbp + rdx*8 + 0xb0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x60], rax
mov ebx, esi
mov dword [rsp + 0x34], ebx
mov rdi, qword [r15]
mov qword [rsp + 0x50], rdi
mov rax, qword [r15 + 8]
mov qword [rbp - 0x80], rax
cmp rdi, rax
je 0x14000242b
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rbp + 0x28]
call fcn.1400049d0
nop
mov r13, qword [0x14000a840]
mov rbx, qword [r13 + 8]
mov r14, r13
mov r15, qword [rbp + 0x40]
mov rsi, qword [rbp + 0x38]
mov r12, qword [rbp + 0x28]
cmp byte [rbx + 0x19], 0
jne 0x14000228f
nop dword [rax]
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x28]
cmp r15, 0x10
cmovae rdx, r12
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14000224e
mov rcx, qword [rcx]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140002267
jns 0x140002272
mov al, 0xff
jmp 0x140002274
cmp rdi, rsi
jae 0x140002270
mov al, 0xff
jmp 0x140002274
jbe 0x14000227e
mov al, 1
test al, al
jns 0x14000227e
mov rbx, qword [rbx + 0x10]
jmp 0x140002284
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140002230
mov rdi, qword [rsp + 0x50]
cmp byte [r14 + 0x19], 0
jne 0x1400022e3
lea rdx, [r14 + 0x20]
mov rbx, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400022a8
mov rdx, qword [rdx]
lea rcx, [rbp + 0x28]
cmp r15, 0x10
cmovae rcx, r12
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400022cd
jns 0x1400022d8
mov al, 0xff
jmp 0x1400022da
cmp rsi, rbx
jae 0x1400022d6
mov al, 0xff
jmp 0x1400022da
jbe 0x1400022de
mov al, 1
test al, al
js 0x1400022e3
cmp r14, r13
jne 0x140002358
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
xor esi, esi
mov qword [rbp - 0x58], rsi
lea r8, [rbp + 0x28]
lea rdx, [rbp - 0x50]
call fcn.140004c50
mov rbx, qword [rax]
add rbx, 0x40
lea rax, [rbp - 0x68]
cmp rbx, rax
je 0x140002356
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000234b
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
cmp rdx, 0x1000
jb 0x140002346
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000273e
mov rcx, r8
call fcn.140005eb4
mov qword [rbx], rsi
mov qword [rbx + 8], rsi
mov qword [rbx + 0x10], rsi
jmp 0x14000235a
xor esi, esi
lea r8, [rbp + 0x28]
lea rdx, [rbp - 0x40]
call fcn.140004c50
mov rcx, qword [rax]
mov rdx, qword [rcx + 0x40]
mov r9, qword [rcx + 0x48]
sub r9, rdx
sar r9, 4
xor cl, cl
mov r8d, esi
test r9, r9
je 0x1400023c8
mov rdi, qword [rsp + 0x78]
mov r14d, dword [rsp + 0x40]
nop dword [rax]
cmp dword [rdx], r14d
jne 0x1400023a4
movzx ecx, cl
cmp qword [rdx + 8], rdi
mov eax, 1
cmove ecx, eax
inc r8d
add rdx, 0x10
movsxd rax, r8d
cmp rax, r9
jb 0x140002390
mov rdi, qword [rsp + 0x50]
mov ebx, dword [rsp + 0x34]
test cl, cl
je 0x1400023cc
inc ebx
mov dword [rsp + 0x34], ebx
jmp 0x1400023cc
mov ebx, dword [rsp + 0x34]
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x140002407
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002402
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002745
call fcn.140005eb4
add rdi, 0x20
mov qword [rsp + 0x50], rdi
cmp rdi, qword [rbp - 0x80]
jne 0x140002200
mov r15, qword [rbp - 0x78]
mov r12, qword [rbp - 0x70]
mov r13d, dword [rbp - 8]
mov rdx, qword [rsp + 0x38]
mov rcx, qword [r15 + 8]
sub rcx, qword [r15]
sar rcx, 5
movsxd rax, ebx
cmp rax, rcx
je 0x140002715
mov rdx, qword [rbp + rdx*8 + 0xb0]
mov r9d, 0x104
lea r8, [rbp + 0x21c0]
mov rcx, r12
cmp byte [rsp + 0x30], 0
je 0x1400025b1
call qword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameA]
test eax, eax
je 0x140002710
mov rbx, qword [r15]
mov r14, qword [r15 + 8]
cmp rbx, r14
je 0x140002710
movups xmm6, xmmword [rsp + 0x58]
nop dword [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x68]
call fcn.1400049d0
nop
lea rax, [rbp + 0x68]
mov rdi, qword [rbp + 0x80]
cmp rdi, 0x10
setae r9b
mov rsi, qword [rbp + 0x68]
cmovae rax, rsi
lea r8, [rbp + 0x21c0]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400024d5
inc rax
test ecx, ecx
jne 0x1400024c2
test edx, edx
je 0x140002753
lea rdx, [rbp + 0x68]
test r9b, r9b
cmovne rdx, rsi
lea rcx, [rbp + 0x28]
call fcn.1400048b0
nop
lea r8, [rbp + 0x28]
lea rdx, [rbp - 0x30]
call fcn.140004e40
mov rcx, qword [rax]
add rcx, 0x40
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x14000251a
movups xmmword [rdx], xmm6
add qword [rcx + 8], 0x10
jmp 0x140002525
lea r8, [rsp + 0x58]
call fcn.140005570
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x140002561
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000255b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000274c
call fcn.140005eb4
nop
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x14000259f
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000259a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027d0
call fcn.140005eb4
add rbx, 0x20
cmp rbx, r14
jne 0x140002490
jmp 0x140002710
call qword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
test eax, eax
je 0x140002710
mov rbx, qword [r15]
mov r14, qword [r15 + 8]
cmp rbx, r14
je 0x140002710
movups xmm6, xmmword [rsp + 0x58]
nop dword [rax]
nop dword [rax + rax]
mov rdx, rbx
lea rcx, [rbp + 0x88]
call fcn.1400049d0
nop
lea rax, [rbp + 0x88]
mov rdi, qword [rbp + 0xa0]
cmp rdi, 0x10
setae r9b
mov rsi, qword [rbp + 0x88]
cmovae rax, rsi
lea r8, [rbp + 0x21c0]
sub r8, rax
nop dword [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002633
inc rax
test ecx, ecx
jne 0x140002620
test edx, edx
je 0x14000279b
lea rdx, [rbp + 0x88]
test r9b, r9b
cmovne rdx, rsi
lea rcx, [rbp + 0x28]
call fcn.1400048b0
nop
lea r8, [rbp + 0x28]
lea rdx, [rbp - 0x20]
call fcn.140004e40
mov rcx, qword [rax]
add rcx, 0x40
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x14000267b
movups xmmword [rdx], xmm6
add qword [rcx + 8], 0x10
jmp 0x140002686
lea r8, [rsp + 0x58]
call fcn.140005570
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x1400026c2
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002794
call fcn.140005eb4
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140002703
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027d0
call fcn.140005eb4
add rbx, 0x20
cmp rbx, r14
jne 0x1400025e0
mov rdx, qword [rsp + 0x38]
inc r13d
mov dword [rbp - 8], r13d
inc rdx
mov qword [rsp + 0x38], rdx
movsxd rax, r13d
cmp rax, qword [rsp + 0x70]
jae 0x1400027d7
mov r14d, dword [rsp + 0x40]
xor esi, esi
jmp 0x1400021c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp rdi, 0x10
jb 0x140002790
lea rdx, [rdi + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140002788
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027d0
mov rcx, rsi
call fcn.140005eb4
mov bl, 1
jmp 0x140002810
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
cmp rdi, 0x10
jb 0x140002790
lea rdx, [rdi + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140002788
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002788
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov edi, dword [rsp + 0x44]
mov r13, qword [rsp + 0x68]
test r13, r13
je 0x140002805
mov rdx, qword [r13 + 8]
cmp rdx, qword [r13 + 0x10]
je 0x1400027f8
mov dword [rdx], edi
add qword [r13 + 8], 4
jmp 0x140002805
lea r8, [rsp + 0x48]
mov rcx, r13
call fcn.140005700
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14000284e
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002849
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002849
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005eb4
xor edi, edi
mov qword [rbp + 0x58], rdi
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], dil
jmp 0x14000289a
mov rdx, qword [0x14000a858]
cmp rdx, qword [0x14000a860]
je 0x14000287f
mov dword [rdx], r14d
add qword [0x14000a858], 4
jmp 0x14000288f
lea r8, [rbp - 8]
lea rcx, [0x14000a850]
call fcn.140005700
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1400028d8
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400028d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005eb4
movzx eax, bl
jmp 0x1400028e8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
mov rcx, qword [rbp + 0x22d0]
xor rcx, rsp
call fcn.140005b30
mov rbx, qword [rsp + 0x2448]
movaps xmm6, xmmword [rsp + 0x23e0]
add rsp, 0x23f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400011d0
int3
call fcn.140001270
int3