Function at 0x140088fb0
Capabilities:
Enumerate process modules
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa68
mov qword [rsp + 0x1a8], r9
mov qword [rsp + 0x118], r8
mov rbx, rdx
test rcx, rcx
je 0x140088fdf
mov rbx, qword [rbx + 8]
test rbx, rbx
sete bpl
mov rax, qword [0x140190190]
test rax, rax
jne 0x14008959a
mov rax, qword [0x140148df8]
movzx eax, byte [rax]
mov ecx, 0x8c0
mov edx, 8
call fcn.14007eb20
test rax, rax
je 0x14008aba7
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 4
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x1b0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b8], xmm0
mov ecx, 8
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
cmp rax, 0xffffffffffffffff
je 0x14008941f
mov r14, rax
mov byte [rsp + 0x38], bpl
lea rsi, [rsp + 0x630]
mov r8d, 0x438
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x630], 0x438
mov rcx, r14
mov rdx, rsi
call sub.KERNEL32.dll_Module32FirstW
cmp eax, 1
jne 0x140089412
lea r15, [rsp + 0xa68]
lea r12, [rsp + 0x458]
mov eax, 8
mov qword [rsp + 0x30], rax
xor eax, eax
mov qword [rsp + 0x68], rax
lea r13, [rsp + 0x630]
jmp 0x140089144
mov rcx, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x1c0]
mov rax, rdx
shl rax, 6
movups xmm0, xmmword [rsp + 0x220]
movups xmm1, xmmword [rsp + 0x230]
movups xmm2, xmmword [rsp + 0x240]
movups xmm3, xmmword [rsp + 0x250]
movups xmmword [rcx + rax + 0x30], xmm3
movups xmmword [rcx + rax + 0x20], xmm2
movups xmmword [rcx + rax + 0x10], xmm1
mov qword [rsp + 0x30], rcx
movups xmmword [rcx + rax], xmm0
inc rdx
mov rax, rdx
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x1c0], rdx
nop dword [rax + rax]
mov rcx, r14
mov rdx, r13
call sub.KERNEL32.dll_Module32NextW
cmp eax, 1
jne 0x140089412
xor r8d, r8d
nop word [rax + rax]
cmp word [rsp + r8*2 + 0x860], 0
je 0x1400891b0
lea rax, [rsp + r8*2]
add rax, 0x860
cmp word [rax + 2], 0
je 0x140089197
cmp word [rax + 4], 0
je 0x14008919c
cmp word [rax + 6], 0
je 0x1400891a2
cmp word [rax + 8], 0
je 0x1400891a8
add r8, 5
add rax, 0xa
cmp rax, r15
jne 0x140089150
mov r8d, 0x104
jmp 0x1400891b0
inc r8
jmp 0x1400891b0
add r8, 2
jmp 0x1400891b0
add r8, 3
jmp 0x1400891b0
add r8, 4
nop dword [rax]
lea rcx, [rsp + 0xb0]
lea rdx, [rsp + 0x860]
call fcn.14007b400
mov rbp, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xc0]
lea rcx, [rsp + 0x450]
mov rdx, rbp
mov r8, rdi
call fcn.140088da0
cmp qword [rsp + 0x450], 0
je 0x1400892a5
mov rax, qword [r12 + 0x10]
mov qword [rsp + 0x150], rax
movups xmm0, xmmword [r12]
movaps xmmword [rsp + 0x140], xmm0
mov rsi, qword [rsp + 0x148]
test rsi, rsi
je 0x140089290
cmp rax, 0x40
jb 0x140089290
movzx ecx, word [rsi]
cmp ecx, 0x5a4d
jne 0x140089290
mov ecx, dword [rsi + 0x3c]
mov rdx, rax
sub rdx, rcx
jb 0x140089290
cmp rdx, 0x88
jb 0x140089290
cmp dword [rsi + rcx], 0x4550
jne 0x140089290
movzx edx, word [rsi + rcx + 0x18]
cmp edx, 0x20b
jne 0x140089290
movzx edx, word [rsi + rcx + 0x14]
cmp rdx, 0x70
jb 0x140089290
lea r8, [rcx + 0x88]
sub rax, r8
jb 0x140089290
add rdx, 0xffffffffffffff90
cmp rax, rdx
jb 0x140089290
mov eax, dword [rsi + rcx + 0x84]
shl rax, 3
cmp rax, rdx
jbe 0x1400892ca
nop dword [rax]
mov rcx, rsi
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, qword [rsp + 0x140]
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0xb8], 0
je 0x140089130
mov rcx, qword [0x140190150]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
jmp 0x140089130
mov rax, qword [rsi + rcx + 0x30]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x648]
mov qword [rsp + 0x48], rax
mov rax, qword [0x140148df8]
movzx eax, byte [rax]
mov ecx, 0x10
mov edx, 8
call fcn.14007eb20
test rax, rax
je 0x14008abc6
mov edx, dword [rsp + 0x650]
mov rcx, qword [rsp + 0x50]
mov qword [rax], rcx
mov qword [rsp + 0x40], rax
mov qword [rax + 8], rdx
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x28], rax
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x60], al
lea rcx, [rsp + 0xc9]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rsp + 0x450], eax
mov dword [rsp + 0x453], ecx
mov rcx, rsi
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, qword [rsp + 0x140]
call sub.KERNEL32.dll_CloseHandle
movzx ecx, byte [rsp + 0x60]
cmp cl, 2
je 0x140089130
mov rax, qword [rsp + 0x48]
sub rax, qword [rsp + 0x50]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x228], rax
mov qword [rsp + 0x230], 1
mov qword [rsp + 0x238], 1
mov qword [rsp + 0x240], rbp
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], rdi
mov byte [rsp + 0x258], cl
mov eax, dword [rsp + 0x450]
mov ecx, dword [rsp + 0x453]
lea rdx, [rsp + 0x259]
mov dword [rdx + 3], ecx
mov dword [rdx], eax
mov rdx, qword [rsp + 0x68]
cmp rdx, qword [rsp + 0x1b8]
mov rcx, qword [rsp + 0x30]
jne 0x1400890d9
lea rcx, [rsp + 0x1b0]
call fcn.140065d00
jmp 0x1400890c9
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
movzx ebp, byte [rsp + 0x38]
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x640], rax
movups xmm0, xmmword [rsp + 0x1b0]
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x658], rax
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x648], xmm1
movaps xmmword [rsp + 0x220], xmm0
mov rax, qword [rsp + 0x640]
mov qword [rsp + 0x230], rax
mov rax, qword [rsp + 0x648]
mov qword [rsp + 0x238], rax
mov rax, qword [rsp + 0x650]
mov qword [rsp + 0x240], rax
mov rax, qword [rsp + 0x658]
mov qword [rsp + 0x248], rax
mov rsi, qword [0x140190190]
test rsi, rsi
je 0x140089566
mov rdi, qword [0x1401901a0]
test rdi, rdi
je 0x1400894fc
lea r14, [rsi + 0x28]
jmp 0x1400894c9
add r14, 0x40
dec rdi
je 0x1400894fc
cmp qword [r14], 0
je 0x1400894e1
mov r8, qword [r14 - 8]
mov rcx, qword [0x140190150]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [r14 - 0x18], 0
je 0x1400894c0
mov r8, qword [r14 - 0x20]
mov rcx, qword [0x140190150]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400894c0
cmp qword [0x140190198], 0
je 0x140089517
mov rcx, qword [0x140190150]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rdi, qword [0x1401901a8]
mov r15, qword [0x1401901b8]
inc r15
mov r14, rdi
nop dword [rax + rax]
cmp r15, 1
je 0x14008954b
lea rcx, [r14 + 8]
add r14, 0x230
dec r15
call fcn.140061db0
jmp 0x140089530
cmp qword [0x1401901b0], 0
je 0x140089566
mov rcx, qword [0x140190150]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
movaps xmm0, xmmword [rsp + 0x220]
movaps xmm1, xmmword [rsp + 0x230]
movaps xmm2, xmmword [rsp + 0x240]
movups xmmword [0x1401901b0], xmm2
movups xmmword [0x1401901a0], xmm1
movups xmmword [0x140190190], xmm0
mov rax, qword [0x140190190]
mov rdx, qword [0x1401901a0]
test rdx, rdx
je 0x14008a9d5
dec rbx
mov rcx, rdx
shl rcx, 6
add rcx, rax
xor r15d, r15d
test bpl, bpl
cmovne rbx, r15
mov r8, rax
mov r12, qword [r8]
mov r10, qword [r8 + 8]
mov r9, qword [r8 + 0x18]
add r8, 0x40
shl r9, 4
nop word [rax + rax]
test r9, r9
je 0x140089610
mov r11, r10
add r10, 0x10
mov rsi, qword [r11]
add rsi, r12
add r9, 0xfffffffffffffff0
cmp rsi, rbx
ja 0x1400895e0
add rsi, qword [r11 + 8]
cmp rsi, rbx
jbe 0x1400895e0
jmp 0x14008961d
inc r15
cmp r8, rcx
jne 0x1400895c4
jmp 0x14008a9d5
mov r14, qword [0x1401901b8]
test r14, r14
je 0x14008965a
mov rbp, qword [0x1401901a8]
imul rsi, r14, 0x230
xor ecx, ecx
xor r13d, r13d
nop dword [rax]
cmp qword [rbp + r13], r15
je 0x140089866
add r13, 0x230
dec rcx
cmp rsi, r13
jne 0x140089640
cmp rdx, r15
jbe 0x14008a86e
mov rcx, r15
shl rcx, 6
mov rdx, qword [rax + rcx + 0x20]
mov r8, qword [rax + rcx + 0x30]
lea rcx, [rsp + 0x450]
call fcn.140088da0
cmp qword [rsp + 0x450], 0
je 0x14008a9d5
mov r14, qword [rsp + 0x468]
mov qword [rsp + 0x130], r14
movups xmm0, xmmword [rsp + 0x458]
movaps xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x70], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rsp + 0x88], 8
movups xmmword [rsp + 0x90], xmm0
cmp r14, 0x40
jb 0x14008a9b1
mov r13, qword [rsp + 0x128]
movzx eax, word [r13]
cmp eax, 0x5a4d
jne 0x14008a9b1
mov eax, dword [r13 + 0x3c]
mov rcx, r14
sub rcx, rax
jb 0x14008a9b1
cmp rcx, 0x88
jb 0x14008a9b1
cmp dword [r13 + rax], 0x4550
jne 0x14008a9b1
movzx ecx, word [r13 + rax + 0x18]
cmp ecx, 0x20b
jne 0x14008a9b1
movzx ecx, word [r13 + rax + 0x14]
cmp rcx, 0x70
jb 0x14008a9b1
lea rdx, [rax + 0x88]
mov r8, r14
sub r8, rdx
jb 0x14008a9b1
add rcx, 0xffffffffffffff90
cmp r8, rcx
jb 0x14008a9b1
mov r8d, dword [r13 + rax + 0x84]
shl r8, 3
cmp r8, rcx
ja 0x14008a9b1
movzx ebp, word [r13 + rax + 6]
add rcx, rdx
lea rdx, [rbp*8]
lea rdx, [rdx + rdx*4]
mov r8, r14
sub r8, rcx
setae r9b
add rcx, r13
cmp r8, rdx
setae dl
xor edi, edi
and dl, r9b
cmovne rdi, rcx
cmp dl, 1
jne 0x14008a9b1
mov ecx, dword [r13 + rax + 0xc]
test rcx, rcx
je 0x14008a87f
mov r11d, dword [r13 + rax + 0x10]
lea rdx, [r11 + r11]
lea r10, [rdx + rdx*8]
mov rdx, r14
sub rdx, rcx
setb r8b
lea r9, [rcx + r13]
cmp rdx, r10
setb dl
xor esi, esi
or dl, r8b
cmove rsi, r9
jne 0x14008a9b1
add r10, rcx
mov rcx, r14
sub rcx, r10
jb 0x14008a9b1
cmp rcx, 4
jb 0x14008a9b1
mov qword [rsp + 0x30], rdi
mov ecx, dword [r13 + r10]
mov qword [rsp + 0x28], r10
add rcx, r10
mov qword [rsp + 0x58], rcx
mov rax, qword [r13 + rax + 0x30]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0xb0], 8
movups xmmword [rsp + 0xb8], xmm0
test r11, r11
je 0x14008a8bb
mov ecx, 8
xor edx, edx
xor edi, edi
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x40], rsi
jmp 0x14008a7fc
test rcx, rcx
je 0x140089901
mov rdi, rbp
add rdi, r13
lea rcx, [rsp + 0x630]
mov r8d, 0x230
mov rdx, rdi
call sub.msvcrt.dll_memcpy
lea rdx, [r13 + 0x230]
add rdx, rbp
sub rsi, r13
add rsi, 0xfffffffffffffdd0
mov rcx, rdi
mov r8, rsi
call sub.msvcrt.dll_memmove
lea rsi, [r14 - 1]
mov qword [0x1401901b8], rsi
cmp rsi, qword [0x1401901b0]
jne 0x1400898ce
mov rcx, rsi
call fcn.140065f50
mov rbp, qword [0x1401901a8]
lea rcx, [rbp + 0x230]
imul r8, rsi, 0x230
mov rdx, rbp
call sub.msvcrt.dll_memmove
lea rdx, [rsp + 0x630]
mov r8d, 0x230
mov rcx, rbp
call sub.msvcrt.dll_memcpy
mov qword [0x1401901b8], r14
sub rbx, r12
lea r14, [rbx + 1]
mov r15, qword [rbp + 0x160]
mov rdx, qword [rbp + 0x168]
xor ecx, ecx
test rdx, rdx
je 0x140089974
mov r8d, 0xff
mov rax, rdx
mov r9, rdx
jmp 0x140089938
mov r9, rax
sub rax, rcx
jbe 0x140089974
shr rax, 1
add rax, rcx
mov r11, rax
shl r11, 5
xor r10d, r10d
cmp qword [r15 + r11], r14
setne r10b
cmovb r10d, r8d
cmp r10b, 1
je 0x140089930
movzx ecx, r10b
inc rax
cmp ecx, 0xff
jne 0x140089971
mov rcx, rax
mov rax, r9
jmp 0x140089933
mov rcx, rax
cmp rcx, rdx
ja 0x14008abb8
test rcx, rcx
je 0x140089aef
lea rsi, [rbp + 0x158]
shl rcx, 5
lea r12, [rcx + r15]
add r12, 0xffffffffffffffe0
neg rcx
jmp 0x1400899ae
add r12, 0xffffffffffffffe0
add rcx, 0x20
je 0x140089aef
cmp qword [r12 + 0x18], rbx
jbe 0x140089aef
cmp qword [r12 + 8], rbx
jbe 0x1400899a0
cmp r14, qword [r12]
jbe 0x1400899a0
mov rcx, qword [r12 + 0x10]
mov rdx, qword [rbp + 0x178]
cmp rcx, rdx
jae 0x14008ab99
imul rdi, rcx, 0x218
add rdi, qword [rbp + 0x170]
lea rcx, [rsp + 0x220]
mov rdx, rdi
mov r8, rsi
call fcn.140070280
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], rsi
cmp qword [rsp + 0x250], 0
mov qword [rsp + 0xa0], rbp
je 0x140089e1c
lea rax, [rsp + 0x250]
movups xmm0, xmmword [rsp + 0x220]
movups xmm1, xmmword [rsp + 0x230]
movups xmm2, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0x650], xmm2
movaps xmmword [rsp + 0x640], xmm1
movaps xmmword [rsp + 0x630], xmm0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x460], rcx
movups xmm0, xmmword [rax]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x478], rax
movaps xmmword [rsp + 0x660], xmm0
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x670], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x678], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x680], rax
mov rax, qword [rsp + 0x478]
mov qword [rsp + 0x688], rax
jmp 0x140089e45
mov dword [rsp + 0x220], 3
mov eax, 3
mov ecx, dword [rsp + 0x254]
mov dword [rsp + 0x1e0], ecx
movups xmm0, xmmword [rsp + 0x224]
movups xmm1, xmmword [rsp + 0x234]
movups xmm2, xmmword [rsp + 0x244]
movaps xmmword [rsp + 0x1d0], xmm2
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1b0], xmm0
mov rdx, qword [rsp + 0x258]
mov r8, qword [rsp + 0x260]
movups xmm0, xmmword [rsp + 0x268]
movaps xmmword [rsp + 0x120], xmm0
cmp eax, 5
je 0x14008a701
mov dword [rsp + 0x220], eax
movaps xmm0, xmmword [rsp + 0x1b0]
movaps xmm1, xmmword [rsp + 0x1c0]
movaps xmm2, xmmword [rsp + 0x1d0]
movups xmmword [rsp + 0x234], xmm1
movups xmmword [rsp + 0x244], xmm2
mov ecx, dword [rsp + 0x1e0]
mov dword [rsp + 0x254], ecx
movups xmmword [rsp + 0x224], xmm0
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x258], rdx
mov qword [rsp + 0x260], r8
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rsp + 0x268], xmm0
add eax, 0xfffffffd
cmp eax, 2
mov ecx, 2
cmovb ecx, eax
test ecx, ecx
je 0x140089d00
mov rdx, qword [rsp + 0x268]
mov qword [rsp + 0x30], rdx
mov rsi, qword [rsp + 0x270]
mov rdx, qword [rsp + 0x240]
mov r9, qword [rsp + 0x248]
mov qword [rsp + 0x198], r9
lea r9, [rdx + 0x60]
mov qword [rsp + 0x58], r9
lea r9, [rdx + 0x1b8]
mov qword [rsp + 0xa8], r9
lea r9, [rdx + 0x1c0]
mov qword [rsp + 0x1a0], r9
mov r9, qword [rsp + 0x250]
lea r10, [rbp + 0x190]
mov qword [rsp + 0x68], r10
cmp ecx, 1
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x218], r9
mov qword [rsp + 0xa0], rbp
jne 0x140089d08
mov r15, qword [rsp + 0x228]
mov dword [rsp + 0x228], 2
cmp eax, 2
jb 0x140089c9e
test r8, r8
je 0x140089c9e
mov r8d, 8
mov rcx, qword [rsp + 0x40]
call fcn.14007ebb0
mov dword [rsp + 0x220], 3
lea rcx, [rsp + 0x230]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x80], rax
mov r13d, 3
mov rax, rcx
mov rbp, rsi
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x150], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x140], xmm0
mov rcx, qword [rsp + 0x68]
mov rdx, rbx
call fcn.14008aef0
mov rsi, rax
mov rdi, rdx
jmp 0x14008a276
mov sil, 1
jmp 0x14008a6d1
mov r15, qword [rsp + 0x220]
lea rax, [rsp + 0x228]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xb0], xmm0
mov rax, qword [rax + 0x10]
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0x220], 2
cmp rsi, qword [rsp + 0x30]
je 0x140089dfe
lea rbp, [rsi - 8]
mov qword [rsp + 0x270], rbp
mov rdi, qword [rsi - 8]
mov r14d, dword [rdi + 0x28]
mov esi, dword [rdi + 0x2c]
xor r13d, r13d
test r14d, r14d
setne byte [rsp + 0x38]
xor r12d, r12d
test esi, esi
setne byte [rsp + 0x50]
cmp qword [rdi], 0
je 0x14008a1f7
mov rax, qword [rsp + 0x58]
cmp dword [rax], 0x2f
je 0x14008a1f7
mov rax, qword [rdi + 8]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x28]
cmp qword [rax + 0x1b0], 0
jne 0x14008a19c
lea rcx, [rsp + 0x630]
mov rdx, qword [rsp + 0x58]
call fcn.14006fb80
lea rcx, [rsp + 0x450]
lea r8, [rsp + 0x630]
mov rdx, qword [rsp + 0x28]
mov r9, qword [rsp + 0x198]
call fcn.140073b20
mov rax, qword [rsp + 0x28]
cmp qword [rax + 0x1b0], 0
je 0x14008a172
lea rcx, [rsp + 0x450]
call fcn.140062280
jmp 0x14008a19c
mov rsi, qword [r9 + 0x28]
test rsi, rsi
je 0x14008a0ff
mov rdi, qword [r9 + 0x30]
movzx r14d, word [rdx + 0x210]
jmp 0x14008a104
lea rcx, [rsp + 0x630]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0x220]
call fcn.140070610
mov qword [rsp + 0x660], 0
mov qword [rsp + 0x450], rbx
mov qword [rsp + 0x458], rdi
mov qword [rsp + 0x460], rsi
mov qword [rsp + 0x468], rsi
mov qword [rsp + 0x470], rbx
mov qword [rsp + 0x478], r14
mov qword [rsp + 0x480], r15
mov qword [rsp + 0x488], r12
mov qword [rsp + 0x490], r14
mov qword [rsp + 0x498], rbx
mov byte [rsp + 0x4a0], 0
lea rcx, [rsp + 0x220]
lea rdx, [rsp + 0x630]
lea r8, [rsp + 0x450]
call fcn.140073410
cmp byte [rsp + 0x2d0], 2
je 0x14008a0eb
lea rdi, [rsp + 0x151]
lea r14, [rsp + 0x480]
lea r12, [rsp + 0x450]
lea r13, [rsp + 0x630]
lea rbp, [rsp + 0xb0]
lea rsi, [rsp + 0x140]
lea r15, [rsp + 0x220]
movups xmm0, xmmword [rsp + 0x220]
movups xmm1, xmmword [rsp + 0x230]
movups xmm2, xmmword [rsp + 0x240]
movaps xmmword [rsp + 0x650], xmm2
movaps xmmword [rsp + 0x640], xmm1
movaps xmmword [rsp + 0x630], xmm0
mov r8d, 0x88
mov rcx, r12
lea rdx, [rsp + 0x250]
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x630]
lock dec qword [rax]
jne 0x140089f5c
mov rcx, r13
call fcn.1400653f0
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
movups xmm2, xmmword [rsp + 0x470]
movaps xmmword [rsp + 0x630], xmm0
movaps xmmword [rsp + 0x640], xmm1
movaps xmmword [rsp + 0x650], xmm2
mov rax, qword [rsp + 0x630]
mov rcx, qword [rsp + 0x640]
movzx edx, byte [rax + 0x200]
cmp edx, 0x4b
je 0x140089fc1
cmp edx, 0x4c
jne 0x140089fed
mov byte [rax + 0x200], 0x4b
mov qword [rax + 0x208], 0
jmp 0x140089fdf
mov r8, qword [rax + 0x208]
test r8, r8
je 0x140089fdf
mov rcx, qword [r8]
add rcx, 0x10
add r8, 8
mov dl, 2
mov rax, r8
jmp 0x140089fe8
mov rcx, qword [rcx]
add rcx, 0x10
xor edx, edx
xor r8d, r8d
jmp 0x14008a01d
mov rcx, qword [rax + 0x200]
movzx edx, byte [rax + 0x208]
mov r8d, dword [rax + 0x20c]
mov dword [rsp + 0xb3], r8d
mov eax, dword [rax + 0x209]
mov dword [rsp + 0xb0], eax
mov r8d, 1
mov r9d, dword [rsp + 0xb0]
mov r10d, dword [rsp + 0xb3]
mov dword [rdi + 3], r10d
mov dword [rdi], r9d
mov qword [rsp + 0x140], r8
mov qword [rsp + 0x148], rcx
mov byte [rsp + 0x150], dl
mov qword [rsp + 0x158], rax
mov rcx, rbp
lea rdx, [rsp + 0x648]
mov r8, rsi
call fcn.140070610
mov qword [rsp + 0xe0], 0
mov rax, qword [r14 + 0x50]
mov qword [rsp + 0x190], rax
movups xmm0, xmmword [r14 + 0x40]
movaps xmmword [rsp + 0x180], xmm0
movups xmm0, xmmword [r14]
movups xmm1, xmmword [r14 + 0x10]
movups xmm2, xmmword [r14 + 0x20]
movups xmm3, xmmword [r14 + 0x30]
movaps xmmword [rsp + 0x170], xmm3
movaps xmmword [rsp + 0x160], xmm2
movaps xmmword [rsp + 0x150], xmm1
movaps xmmword [rsp + 0x140], xmm0
mov rcx, r13
mov rdx, rbp
mov r8, rsi
call fcn.140073410
mov r8d, 0xb8
mov rcx, r15
mov rdx, r13
call sub.msvcrt.dll_memcpy
cmp byte [rsp + 0x2d0], 2
jne 0x140089f00
mov eax, dword [rsp + 0x220]
mov rbp, qword [rsp + 0xa0]
jmp 0x140089aff
mov r14w, 2
test r8, r8
je 0x14008a119
mov r8d, 8
mov rcx, qword [rsp + 0x40]
call fcn.14007ebb0
mov dword [rsp + 0x220], 3
lea rcx, [rsp + 0x228]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x80], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x140], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x150], rax
mov r13d, 3
mov rbp, qword [rsp + 0x30]
cmp r14w, 2
je 0x140089ce8
jmp 0x14008a276
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
mov rcx, qword [rsp + 0xa8]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov qword [rax + 0x1b0], 1
xor ecx, ecx
mov rax, qword [rsp + 0xa8]
cmp qword [rax], 0
cmove rax, qword [rsp + 0x1a0]
mov edx, 1
cmove rcx, rdx
test rcx, rcx
je 0x14008a1d5
mov ecx, esi
mov sil, 1
cmp byte [rax], 0x4b
jne 0x14008a788
mov rax, qword [rax + 8]
mov esi, ecx
test rax, rax
je 0x14008a1f7
mov rdx, qword [rsp + 0x60]
cmp rdx, qword [rax + 8]
jae 0x14008a1f7
mov rcx, qword [rax]
lea rdx, [rdx + rdx*2]
mov rax, qword [rcx + rdx*8]
mov rcx, qword [rcx + rdx*8 + 0x10]
jmp 0x14008a1f9
xor eax, eax
movzx edx, byte [rsp + 0x38]
mov r13b, dl
movzx edx, byte [rsp + 0x50]
mov r12b, dl
mov dword [rsp + 0x220], r13d
mov dword [rsp + 0x224], r14d
mov dword [rsp + 0x228], r12d
mov dword [rsp + 0x22c], esi
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rcx
mov rsi, qword [rdi + 0x18]
test rsi, rsi
je 0x14008a75f
mov rdi, qword [rdi + 0x20]
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x80], rax
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rax
lea rcx, [rsp + 0x638]
mov rax, qword [rsp + 0x150]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x140]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x630], r15
mov qword [rsp + 0x650], rbx
mov qword [rsp + 0x658], rsi
mov qword [rsp + 0x660], rdi
mov rax, qword [rsp + 0x1a8]
mov rax, qword [rax + 0x20]
lea rdx, [rsp + 0x630]
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 0x38], rax
call rax
nop dword [rax + rax]
add r13d, 0xfffffffd
cmp r13d, 2
mov eax, 2
cmovb eax, r13d
cmp eax, 1
je 0x14008a400
cmp eax, 2
jne 0x14008a6c2
mov rsi, qword [rsp + 0x220]
lea rax, [rsp + 0x228]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xb0], xmm0
mov rax, qword [rax + 0x10]
mov qword [rsp + 0xc0], rax
mov dword [rsp + 0x220], 2
cmp rbp, qword [rsp + 0x30]
je 0x14008a496
lea r14, [rbp - 8]
mov qword [rsp + 0x270], r14
mov rbp, qword [rbp - 8]
mov r12d, dword [rbp + 0x28]
mov edi, dword [rbp + 0x2c]
xor r13d, r13d
test r12d, r12d
setne byte [rsp + 0x50]
xor r15d, r15d
test edi, edi
setne byte [rsp + 0x60]
cmp qword [rbp], 0
je 0x14008a5c0
mov rax, qword [rsp + 0x58]
cmp dword [rax], 0x2f
je 0x14008a5c0
mov rax, qword [rbp + 8]
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x28]
cmp qword [rax + 0x1b0], 0
jne 0x14008a55f
lea rcx, [rsp + 0x630]
mov rdx, qword [rsp + 0x58]
call fcn.14006fb80
lea rcx, [rsp + 0x450]
mov rdx, qword [rsp + 0x28]
lea r8, [rsp + 0x630]
mov r9, qword [rsp + 0x198]
call fcn.140073b20
mov rax, qword [rsp + 0x28]
cmp qword [rax + 0x1b0], 0
je 0x14008a535
lea rcx, [rsp + 0x450]
call fcn.140062280
jmp 0x14008a55f
mov rsi, qword [rsp + 0x228]
mov dword [rsp + 0x228], 2
cmp r13d, 2
jb 0x14008a434
cmp qword [rsp + 0x48], 0
je 0x14008a434
mov rcx, qword [0x140190150]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x220], 3
lea rcx, [rsp + 0x230]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x80], rax
mov r13d, 3
mov rax, rcx
mov r14, rbp
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x150], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x140], xmm0
mov rcx, qword [rsp + 0x68]
mov rdx, rbx
call fcn.14008aef0
mov rdi, rax
mov rbp, rdx
jmp 0x14008a640
mov rax, qword [rsp + 0x218]
mov rdi, qword [rax + 0x28]
test rdi, rdi
je 0x14008a4ba
mov rbp, qword [rax + 0x30]
mov rax, qword [rsp + 0x28]
movzx r15d, word [rax + 0x210]
jmp 0x14008a4bf
mov r15w, 2
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x14008a4dc
mov rcx, qword [0x140190150]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.KERNEL32.dll_HeapFree
mov dword [rsp + 0x220], 3
lea rcx, [rsp + 0x228]
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x70], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x80], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x140], xmm0
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x150], rax
mov r13d, 3
mov r14, qword [rsp + 0x30]
cmp r15w, 2
je 0x14008a47e
jmp 0x14008a640
movups xmm0, xmmword [rsp + 0x450]
movups xmm1, xmmword [rsp + 0x460]
mov rcx, qword [rsp + 0xa8]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov qword [rax + 0x1b0], 1
mov rax, qword [rsp + 0xa8]
cmp qword [rax], 0
cmove rax, qword [rsp + 0x1a0]
mov ecx, 0
mov edx, 1
cmove rcx, rdx
test rcx, rcx
je 0x14008a594
cmp byte [rax], 0x4b
jne 0x14008a786
mov rax, qword [rax + 8]
test rax, rax
je 0x14008a5c0
mov rdx, qword [rsp + 0x210]
cmp rdx, qword [rax + 8]
jae 0x14008a5c0
mov rcx, qword [rax]
lea rdx, [rdx + rdx*2]
mov rax, qword [rcx + rdx*8]
mov rcx, qword [rcx + rdx*8 + 0x10]
jmp 0x14008a5c2
xor eax, eax
movzx edx, byte [rsp + 0x50]
mov r13b, dl
movzx edx, byte [rsp + 0x60]
mov r15b, dl
mov dword [rsp + 0x220], r13d
mov dword [rsp + 0x224], r12d
mov dword [rsp + 0x228], r15d
mov dword [rsp + 0x22c], edi
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x238], rcx
mov rdi, qword [rbp + 0x18]
test rdi, rdi
je 0x14008a69b
mov rbp, qword [rbp + 0x20]
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x80], rax
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], rax
nop
mov rax, qword [rsp + 0x150]
lea rcx, [rsp + 0x638]
mov qword [rcx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x140]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x630], rsi
mov qword [rsp + 0x650], rbx
mov qword [rsp + 0x658], rdi
mov qword [rsp + 0x660], rbp
mov rcx, qword [rsp + 0x118]
lea rdx, [rsp + 0x630]
call qword [rsp + 0x38]
mov rbp, r14
jmp 0x14008a2e0
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x80], rax
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x70], xmm0
lea rax, [rsp + 0x70]
jmp 0x14008a467
xor esi, esi
mov rbp, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x48]
mov eax, dword [rsp + 0x220]
add eax, 0xfffffffd
cmp eax, 2
jb 0x14008a6f8
test r8, r8
je 0x14008a6f8
mov rcx, qword [0x140190150]
xor edx, edx
mov r8, qword [rsp + 0x40]
call sub.KERNEL32.dll_HeapFree
test sil, sil
je 0x14008a9d5
add rbp, 0x190
mov rcx, rbp
mov rdx, rbx
call fcn.14008aef0
test rax, rax
je 0x14008a9d5
mov dword [rsp + 0x630], 3
mov qword [rsp + 0x638], rax
mov qword [rsp + 0x640], rdx
mov qword [rsp + 0x648], rbx
lea rdx, [rsp + 0x630]
mov rcx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x1a8]
call qword [rax + 0x20]
jmp 0x14008a9d5
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x80], rax
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x70], xmm0
lea rax, [rsp + 0x70]
jmp 0x140089cd1
xor esi, esi
cmp qword [rsp + 0x48], 0
mov rbp, qword [rsp + 0xa0]
jne 0x14008a6e5
jmp 0x14008a6f8
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xc0]
add rbp, qword [rsp + 0x50]
add rsi, rbp
mov rax, rdx
shl rax, 4
mov qword [rcx + rax], rsi
mov r8, qword [rsp + 0x68]
mov qword [rcx + rax + 8], r8
inc rdx
mov qword [rsp + 0xc0], rdx
mov rbp, qword [rsp + 0x60]
mov r11, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
add rdi, rax
inc rdi
cmp rdi, r11
jae 0x14008a8b1
lea r8, [rdi + rdi*8]
movzx eax, byte [rsi + r8*2 + 0x11]
mov qword [rsp + 0x38], rax
movzx eax, word [rsi + r8*2 + 0xc]
test rax, rax
je 0x14008a7e8
movzx r9d, word [rsi + r8*2 + 0xe]
and r9d, 0x30
cmp r9w, 0x20
jne 0x14008a7e8
dec rax
cmp rax, rbp
jae 0x14008ab7a
lea r8, [rsi + r8*2]
mov qword [rsp + 0x68], r8
mov ebp, dword [r8 + 8]
lea rax, [rax + rax*4]
mov r8, qword [rsp + 0x30]
mov esi, dword [r8 + rax*8 + 0xc]
cmp rdx, qword [rsp + 0xb8]
jne 0x14008a7b1
lea rcx, [rsp + 0xb0]
call fcn.140065780
jmp 0x14008a7a1
lea r8, [0x14010bb40]
mov rcx, r15
call fcn.140008c60
ud2
mov qword [rsp + 0xb0], 8
movups xmmword [rsp + 0xb8], xmm0
mov esi, 8
xor eax, eax
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rsp + 0x28], rax
xor eax, eax
mov qword [rsp + 0x38], rax
xor edx, edx
jmp 0x14008a8cf
mov rsi, qword [rsp + 0xb0]
jmp 0x14008a8c2
xor edx, edx
mov esi, 8
mov rax, r13
mov qword [rsp + 0x38], r13
mov rdi, qword [rsp + 0x30]
test rdx, rdx
je 0x14008a8de
bsr rax, rdx
xor rax, 0x3f
jmp 0x14008a8e3
mov eax, 0x40
mov r9d, 0x40
sub r9d, eax
mov rcx, rsi
xor r8d, r8d
call fcn.140063570
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x1e0], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1b0], r13
mov qword [rsp + 0x1b8], r14
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x1c8], rbp
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x1e8], rax
mov qword [rsp + 0x1f0], r14
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x140], 0
mov qword [rsp + 0xb0], 0
lea rcx, [rsp + 0x450]
lea rdx, [rsp + 0x1b0]
lea r8, [rsp + 0x140]
lea r9, [rsp + 0xb0]
call fcn.140084be0
movzx edi, byte [rsp + 0x450]
cmp dil, 0x17
jne 0x14008a9ea
lea rcx, [rsp + 0x70]
call fcn.140061f90
mov rcx, qword [rsp + 0x128]
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, qword [rsp + 0x120]
call sub.KERNEL32.dll_CloseHandle
nop
add rsp, 0xa68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, [rsp + 0x451]
lea rsi, [rsp + 0x630]
mov r8d, 0x1df
mov rcx, rsi
call sub.msvcrt.dll_memcpy
movaps xmm0, xmmword [rsp + 0x120]
movups xmmword [rsp + 0x80f], xmm0
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x81f], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rsp + 0x80]
movups xmm2, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x827], xmm0
movups xmmword [rsp + 0x837], xmm1
movups xmmword [rsp + 0x847], xmm2
lea rcx, [rsp + 0x221]
mov r8d, 0x227
mov rdx, rsi
call sub.msvcrt.dll_memcpy
mov byte [rsp + 0x220], dil
mov rsi, qword [0x1401901b8]
cmp rsi, 4
jne 0x14008aac6
mov qword [0x1401901b8], 3
mov edx, 0x690
add rdx, qword [0x1401901a8]
lea rcx, [rsp + 0x630]
mov r8d, 0x230
call sub.msvcrt.dll_memcpy
cmp byte [rsp + 0x638], 0x17
je 0x14008aac1
lea rcx, [rsp + 0x638]
call fcn.140061db0
mov esi, 3
lea rcx, [rsp + 0x638]
lea rdx, [rsp + 0x220]
mov r8d, 0x228
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x630], r15
cmp rsi, qword [0x1401901b0]
jne 0x14008aafa
mov rcx, rsi
call fcn.140065f50
mov rbp, qword [0x1401901a8]
test rsi, rsi
je 0x14008ab54
lea rcx, [rbp + 0x230]
imul r8, rsi, 0x230
mov rdx, rbp
call sub.msvcrt.dll_memmove
lea rdx, [rsp + 0x630]
mov r8d, 0x230
mov rcx, rbp
call sub.msvcrt.dll_memcpy
inc rsi
mov qword [0x1401901b8], rsi
jne 0x140089901
lea r8, [0x14010bb58]
xor ecx, ecx
xor edx, edx
call fcn.140008c60
ud2
lea rdx, [rsp + 0x630]
mov r8d, 0x230
mov rcx, rbp
call sub.msvcrt.dll_memcpy
mov qword [0x1401901b8], 1
jmp 0x140089901
cmp qword [rsp + 0xb8], 0
je 0x14008a9b1
mov r8d, 8
call fcn.14007ebb0
jmp 0x14008a9b1
lea r8, str.C:Users_runneradmin.cargo_registry_srcindex.crates.io_6f17d22bba15001f_addr2line_0.21.0_srclib.rs
call fcn.140008c60
ud2
mov ecx, 8
mov edx, 0x8c0
call fcn.140004200
ud2
lea r8, str.C:Users_runneradmin.cargo_registry_srcindex.crates.io_6f17d22bba15001f_addr2line_0.21.0_srclib.rs
call fcn.14000bc50
ud2
mov ecx, 8
mov edx, 0x10
call fcn.140004200
ud2