Function at 0x140111050
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Generate random numbers via rtlgenrandom

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
movaps xmmword [rsp + 0x180], xmm6
mov rax, qword [0x140219028]
xor rax, rsp
mov qword [rsp + 0x178], rax
cmp qword [rcx + 0x18], 0
je 0x140112019
mov r12, rcx
lea rax, [rsp + 0x118]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax - 8], rax
lea rdx, [rcx + 8]
mov rsi, qword [rcx + 0x10]
cmp rsi, rdx
mov qword [rsp + 0x48], rdx
je 0x140111d7a
xor r13d, r13d
lea r14, [rsp + 0x110]
lea r15, [rsp + 0xb0]
mov eax, dword [rsi + 0x10]
cmp eax, 2
jb 0x1401111e5
cmp eax, 3
jg 0x1401111e5
lea r8, [rsi + 0x18]
movzx r9d, byte [rsi + 0x2f]
mov rcx, r8
test r9b, r9b
jns 0x1401110f4
mov r9, qword [rsi + 0x20]
mov rcx, qword [rsi + 0x18]
cmp r9, 9
jne 0x140111120
cmp word [rcx], 0x6e
jne 0x140111120
cmp word [rcx + 2], 0x74
jne 0x140111120
cmp word [rcx + 4], 0x64
jne 0x140111120
cmp word [rcx + 6], 0x6c
jne 0x140111120
cmp word [rcx + 8], 0x6c
je 0x140111d3c
mov rdx, qword [rsp + 0x118]
test rdx, rdx
je 0x14011119d
movzx r10d, byte [rdx + 0x37]
test r10b, r10b
jns 0x140111141
mov r10, qword [rdx + 0x28]
mov rdi, qword [rdx + 0x20]
jmp 0x140111145
lea rdi, [rdx + 0x20]
cmp r10, r9
mov rax, r9
cmovb rax, r10
test rax, rax
je 0x1401111f4
xor ebp, ebp
movzx ebx, word [rdi + rbp*2]
cmp word [rcx + rbp*2], bx
ja 0x140111173
jb 0x140111198
inc rbp
cmp rax, rbp
jne 0x14011115a
jmp 0x1401111f4
test rax, rax
je 0x1401111fe
xor ebp, ebp
movzx ebx, word [rcx + rbp*2]
cmp word [rdi + rbp*2], bx
ja 0x1401111ba
jb 0x140111194
inc rbp
cmp rax, rbp
jne 0x14011117e
jmp 0x1401111fe
add rdx, 8
mov rdx, qword [rdx]
jmp 0x140111128
lea rax, [r9 + r9]
add rax, 0x1f
and rax, 0xfffffffffffffff8
add r13, rax
mov rcx, r14
mov rdx, r15
mov r9, r8
call fcn.1401120b0
movzx eax, byte [rsi + 0x47]
test al, al
js 0x140111f3b
mov rdx, qword [rsp + 0x48]
movzx ecx, byte [rsi + 0x5f]
test cl, cl
js 0x140111f44
add rax, rcx
add rax, 0x21
and rax, 0xfffffffffffffff8
add r13, rax
mov rsi, qword [rsi + 8]
cmp rsi, rdx
jne 0x1401110c6
jmp 0x140111205
cmp r9, r10
jb 0x140111198
jmp 0x140111173
cmp r10, r9
jb 0x140111194
jmp 0x1401111ba
mov rdx, qword [rsp + 0x118]
test r13, r13
je 0x140111d7c
add r13, 0xc
lea rcx, [rsp + 0x110]
call fcn.14001c810
mov rcx, r13
call fcn.14011dd70
mov r14, rax
movabs rax, 0xaaaaaaaaaaaaaaaa
test r13, r13
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r14
je 0x1401116a5
lea rsi, [r14 + 0xc]
cmp byte [r12 + 0x20], 0
je 0x140111bd5
mov rax, qword [r12]
mov rax, qword [rax + 0x48]
mov r9, qword [rsp + 0x48]
mov qword [r14 + 4], rax
lea r15, [r13 - 0xc]
mov r14, qword [r12 + 0x10]
movaps xmm6, xmmword [0x1401efb80]
mov qword [rsp + 0x60], rsi
xor edi, edi
mov qword [rsp + 0x90], r13
cmp r14, r9
je 0x140111693
mov eax, dword [r14 + 0x10]
cmp eax, 2
jb 0x14011130b
cmp eax, 3
jg 0x14011130b
lea rbp, [r14 + 0x18]
movzx eax, byte [r14 + 0x2f]
test al, al
mov r8, qword [r14 + 0x20]
mov rcx, rax
cmovs rcx, r8
cmp rcx, 9
jne 0x140111314
mov rcx, rbp
test al, al
jns 0x1401112cd
mov rcx, qword [rbp]
cmp word [rcx], 0x6e
jne 0x140111314
cmp word [rcx + 2], 0x74
jne 0x140111314
cmp word [rcx + 4], 0x64
jne 0x140111314
cmp word [rcx + 6], 0x6c
jne 0x140111314
cmp word [rcx + 8], 0x6c
jne 0x140111314
cmp word [rcx + 0xa], 0x2e
jne 0x140111314
cmp word [rcx + 0xc], 0x64
jne 0x140111314
cmp word [rcx + 0xe], 0x6c
jne 0x140111314
cmp word [rcx + 0x10], 0x6c
jne 0x140111314
mov r14, qword [r14 + 8]
jmp 0x14011128f
movabs rcx, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0x120], rcx
movaps xmmword [rsp + 0x110], xmm6
test al, al
mov dword [rsp + 0x58], edi
js 0x140111611
mov rcx, qword [rbp + 0x10]
mov qword [rsp + 0x120], rcx
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0x110], xmm0
movzx eax, al
test al, al
cmovns r8, rax
lea r13, [r8 + r8]
add r13, 0x1f
and r13, 0xfffffffffffffff8
mov rax, r15
sub rax, r13
jb 0x140112007
mov rdi, rax
cmp dword [r14 + 0x10], 3
sete byte [rsi + 0x14]
mov qword [rsi], r13
mov qword [rsi + 8], r13
mov dword [rsi + 0x10], 0
movzx r8d, byte [r14 + 0x2f]
test r8b, r8b
jns 0x14011139b
mov r8, qword [r14 + 0x20]
lea rdx, [rsi + 0x16]
mov rcx, rbp
xor r9d, r9d
call fcn.14003edb0
movzx eax, byte [r14 + 0x2f]
test al, al
jns 0x1401113b7
mov rax, qword [r14 + 0x20]
add r13, rsi
mov word [rsi + rax*2 + 0x16], 0
mov r9, qword [rsp + 0x48]
cmp r14, r9
mov r10, rdi
je 0x140111634
mov rbp, r14
movzx ecx, byte [rbp + 0x2f]
mov rax, rcx
test cl, cl
jns 0x1401113e4
mov rax, qword [rbp + 0x20]
movzx esi, byte [rsp + 0x127]
mov rdx, rsi
test sil, sil
jns 0x1401113fc
mov rdx, qword [rsp + 0x118]
cmp rax, rdx
jne 0x1401115e3
lea rdi, [rbp + 0x18]
test rax, rax
je 0x140111445
mov rbx, rdi
test cl, cl
jns 0x140111418
mov rbx, qword [rdi]
lea rcx, [rsp + 0x110]
test sil, sil
jns 0x14011142d
mov rcx, qword [rsp + 0x110]
xor edx, edx
movzx esi, word [rbx + rdx*2]
cmp si, word [rcx + rdx*2]
jne 0x1401115e3
inc rdx
cmp rax, rdx
jne 0x14011142f
mov rax, qword [rsp + 0x60]
cmp byte [rax + 0x14], 0
mov qword [rsp + 0x50], rdi
je 0x14011148f
movzx eax, byte [rbp + 0x47]
test al, al
jns 0x140111461
mov rax, qword [rbp + 0x38]
cmp rax, 1
jne 0x14011148f
lea rcx, [rbp + 0x30]
mov qword [rsp + 0x20], 1
xor edx, edx
mov r8, 0xffffffffffffffff
lea r9, [0x140206c10]
mov rsi, r10
call fcn.1400e2db0
mov r10, rsi
movzx ebx, byte [rbp + 0x47]
test bl, bl
jns 0x14011149b
mov rbx, qword [rbp + 0x38]
movzx r12d, byte [rbp + 0x5f]
test r12b, r12b
jns 0x1401114a9
mov r12, qword [rbp + 0x50]
lea rsi, [rbx + r12]
add rsi, 0x21
and rsi, 0xfffffffffffffff8
mov rax, r10
sub rax, rsi
jb 0x14011167b
mov qword [rsp + 0x98], rax
lea rcx, [rbp + 0x30]
mov r15, r14
lea r14, [rbp + 0x48]
mov qword [r13], rsi
mov eax, dword [rbp + 0x10]
mov dword [r13 + 8], eax
mov eax, dword [rbp + 0x14]
mov dword [r13 + 0xc], eax
mov rax, qword [rbp + 0x60]
mov qword [r13 + 0x10], rax
lea rdx, [r13 + 0x18]
mov qword [rsp + 0x88], rcx
mov r8, rbx
xor r9d, r9d
call fcn.14003ed50
lea rdi, [rbx + r13]
add rdi, 0x18
mov qword [rsp + 0x80], r13
lea rdx, [rbx + r13]
add rdx, 0x19
xor ebx, ebx
mov byte [rdx - 1], bl
mov qword [rsp + 0x68], r14
mov rcx, r14
mov r14, r15
mov r8, r12
xor r9d, r9d
call fcn.14003ed50
mov byte [r12 + rdi + 1], bl
mov rax, qword [rsp + 0x60]
inc dword [rax + 0x10]
add qword [rax], rsi
cmp r15, rbp
jne 0x140111551
mov r14, qword [r14 + 8]
mov r12, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x50]
mov rax, qword [rbp]
mov rbx, qword [rbp + 8]
mov qword [rax + 8], rbx
mov rax, qword [rbp]
mov rcx, qword [rbp + 8]
mov qword [rcx], rax
dec qword [r12 + 0x18]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
movabs rdx, 0xfffffffe00000000
and rax, rdx
cmp rax, qword [0x14021af08]
mov r13, qword [rsp + 0x80]
mov r15, qword [rsp + 0x98]
je 0x140111f15
mov qword [rbp + 0x60], 0
cmp byte [rbp + 0x5f], 0
js 0x140111f24
mov rax, qword [rsp + 0x88]
cmp byte [rax + 0x17], 0
js 0x1401115f8
cmp byte [rdi + 0x17], 0
js 0x140111607
add r13, rsi
mov rcx, rbp
call fcn.14011d780
mov r10, r15
mov r9, qword [rsp + 0x48]
jmp 0x1401115ea
mov rbx, qword [rbp + 8]
mov r15, r10
mov rbp, rbx
cmp rbx, r9
jne 0x1401113d5
jmp 0x14011163a
mov rcx, qword [rax]
call fcn.14011d780
mov rdi, qword [rsp + 0x50]
jmp 0x1401115c8
mov rcx, qword [rdi]
call fcn.14011d780
jmp 0x1401115ce
mov rdx, qword [r14 + 0x18]
lea rcx, [rsp + 0x110]
call fcn.1400fdc00
mov r9, qword [rsp + 0x48]
mov al, byte [r14 + 0x2f]
mov r8, qword [r14 + 0x20]
jmp 0x140111352
mov r15, r10
mov r14, r9
mov edi, dword [rsp + 0x58]
inc edi
mov bl, 1
mov rsi, r13
mov qword [rsp + 0x60], r13
cmp byte [rsp + 0x127], 0
mov r13, qword [rsp + 0x90]
jns 0x14011166e
mov rcx, qword [rsp + 0x110]
call fcn.14011d780
mov r9, qword [rsp + 0x48]
test bl, bl
jne 0x14011128f
jmp 0x140111d6d
xor ebx, ebx
mov r15, r10
mov rsi, r13
mov r12, qword [rsp + 0x70]
mov r9, qword [rsp + 0x48]
mov edi, dword [rsp + 0x58]
jmp 0x14011164a
mov r14, qword [rsp + 0x78]
mov dword [r14], edi
movabs rax, 0xaaaaaaaaaaaaaaaa
lea r9, [rsp + 0xa0]
mov qword [r9], rax
mov rax, qword [r12]
mov rcx, qword [rax]
mov rdx, r14
mov r8, r13
call fcn.14003ee10
test al, al
je 0x140112021
test r13, r13
je 0x14011202c
lea rax, [0x1401b9450]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0
lea rsi, [0x140206c30]
lea r8, str.NtMapViewOfSection
mov rcx, r12
mov rdx, rsi
mov r9d, 1
call fcn.14003d650
lea rax, [0x1401b94c0]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 1
lea r8, str.NtUnmapViewOfSection
mov rcx, r12
mov rdx, rsi
mov r9d, 1
call fcn.14003d650
mov rax, qword [r12]
mov rcx, qword [rax]
mov dword [rsp + 0x20], 1
mov r8d, 0x10000
mov qword [rsp + 0x60], rcx
xor edx, edx
mov r9d, 0x2000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov r13, rax
mov rbx, qword [r12 + 0x18]
shl rbx, 6
lea rax, [rbx + 0x60]
cmp rax, 0x10001
jae 0x14011203d
lea r15, [rsp + 0x110]
mov dword [r15], 0xaaaaaaaa
mov esi, 0x10000
mov qword [rsp + 0x50], rax
sub esi, eax
mov rcx, r15
mov edx, 4
call sub.ADVAPI32.dll_SystemFunction036
movzx edi, word [rsp + 0x110]
mov dword [rsp + 0x110], edi
cmp esi, edi
jb 0x140111791
mov ecx, 0x800
mov eax, 0x1000
mov edx, 0x800
mov rbp, qword [rsp + 0x50]
mov rsi, rax
shr rdx, 1
mov rax, rcx
cmp rcx, rbp
mov rcx, rdx
jae 0x1401117c5
neg esi
and edi, esi
mov eax, edi
and eax, 0xf000
add r13, rax
add rbx, 0x105f
and rbx, 0xfffffffffffff000
mov dword [rsp + 0x20], 0x40
mov rcx, qword [rsp + 0x60]
mov rdx, r13
mov r8, rbx
mov r9d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test rax, rax
je 0x140112040
mov rsi, rax
movaps xmm6, xmmword [0x1401efb80]
movups xmmword [rsp + 0x120], xmm6
movups xmmword [rsp + 0x160], xmm6
movups xmmword [rsp + 0x150], xmm6
movups xmmword [rsp + 0x140], xmm6
movups xmmword [rsp + 0x130], xmm6
mov qword [rsp + 0x110], rbp
mov dword [rsp + 0x128], 0
mov qword [rsp + 0x118], 0x20
lea rcx, [0x14022b900]
xor r15d, r15d
mov r8d, 0xd8
xor edx, edx
call fcn.140122050
lea rcx, [0x140206c30]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x140111bca
mov qword [rsp + 0x98], rax
and edi, 0xfff
add rsi, rdi
mov qword [rsp + 0x88], rsi
mov rax, qword [r12]
mov rsi, qword [rax]
mov ecx, 0x30
call fcn.14011d790
mov dl, byte [r12 + 0x21]
xorps xmm0, xmm0
movups xmmword [rax + 0x10], xmm0
lea rcx, [0x1401f2660]
mov qword [rax], rcx
mov qword [rax + 0x20], rsi
mov byte [rax + 0x28], dl
mov qword [rsp + 0x80], rax
mov dword [rax + 0x2c], 0
mov rdi, qword [r12 + 0x10]
mov rbx, qword [rsp + 0x48]
cmp rdi, rbx
movabs rbp, 0xaaaaaaaaaaaaaaaa
je 0x140111be9
lea r12, [rsp + 0xb8]
lea r8, [rsp + 0xc0]
lea r14, [rsp + 0xe8]
lea r9, [rsp + 0xd0]
mov eax, 0x20
mov qword [rsp + 0x68], rax
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x100], rbp
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0xb0], rax
cmp byte [rdi + 0x2f], 0
js 0x140111b96
lea rax, [rdi + 0x18]
mov rcx, qword [rax + 0x10]
mov qword [r12 + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
cmp byte [rdi + 0x47], 0
js 0x140111b00
lea rax, [rdi + 0x30]
mov rcx, qword [rax + 0x10]
mov qword [r9 + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [r9], xmm0
cmp byte [rdi + 0x5f], 0
js 0x140111f4d
lea rax, [rdi + 0x48]
mov rcx, qword [rax + 0x10]
mov qword [r14 + 0x10], rcx
movups xmm0, xmmword [rax]
movups xmmword [r14], xmm0
mov r13, qword [rdi + 0x60]
mov rax, r13
movabs rcx, 0xfffffffe00000000
and rax, rcx
cmp rax, qword [0x14021af08]
je 0x140111f81
mov qword [rsp + 0x100], r13
movzx eax, byte [rsp + 0xcf]
mov rcx, rax
test al, al
jns 0x140111a11
mov rcx, qword [rsp + 0xc0]
cmp rcx, 9
jne 0x140111a86
test al, al
mov rcx, qword [rsp + 0xb8]
mov rdx, r12
cmovs rdx, rcx
cmp word [rdx], 0x6e
jne 0x140111a86
test al, al
mov rdx, r12
cmovs rdx, rcx
cmp word [rdx + 2], 0x74
jne 0x140111a86
test al, al
mov rdx, r12
cmovs rdx, rcx
cmp word [rdx + 4], 0x64
jne 0x140111a86
test al, al
mov rdx, r12
cmovs rdx, rcx
cmp word [rdx + 6], 0x6c
jne 0x140111a86
lea rdx, [rcx + 8]
test al, al
cmovns rdx, r8
cmp word [rdx], 0x6c
jne 0x140111a86
lea rdx, [r8 + 2]
lea rsi, [rcx + 0xa]
test al, al
cmovs rdx, rsi
cmp word [rdx], 0x2e
je 0x140111d84
xor esi, esi
mov r15d, 2
mov rcx, qword [rsp + 0x100]
mov rax, rcx
movabs rdx, 0xfffffffe00000000
and rax, rdx
cmp rax, qword [0x14021af08]
je 0x140111fad
mov qword [rsp + 0x100], 0
cmp byte [rsp + 0xff], 0
js 0x140111fd6
cmp byte [rsp + 0xe7], 0
js 0x140111b34
cmp byte [rsp + 0xcf], 0
js 0x140111b65
test sil, sil
je 0x140111bdf
mov rdi, qword [rdi + 8]
cmp rdi, rbx
jne 0x14011193c
jmp 0x140111bdc
mov rdx, qword [rdi + 0x30]
mov r8, qword [rdi + 0x38]
mov rcx, r9
call fcn.1400ee680
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x1401119b4
mov rcx, qword [rsp + 0xd0]
call fcn.14011d780
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x140111ad7
mov rcx, qword [rsp + 0xb8]
call fcn.14011d780
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x140111ae5
mov rdx, qword [rdi + 0x18]
mov r8, qword [rdi + 0x20]
mov rcx, r12
call fcn.1400fdc00
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x140111997
mov r15d, 7
jmp 0x140111d00
xor eax, eax
jmp 0x140111267
xor r15d, r15d
mov r12, qword [rsp + 0x70]
mov r14, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
test rdi, rdi
mov rsi, qword [rsp + 0x88]
je 0x140111c38
lea rax, [0x1401f2700]
mov qword [rdi], rax
mov rcx, qword [rdi + 0x10]
movabs rax, 0xfffffffe00000000
and rax, rcx
cmp rax, qword [0x14021af08]
je 0x140112043
mov rcx, rdi
call fcn.14011d780
movabs rbp, 0xaaaaaaaaaaaaaaaa
test r15d, r15d
jne 0x140111d00
lea rax, [rsp + 0xb0]
mov qword [rax], rbp
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x110]
mov r9d, 0x20
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14011200e
cmp qword [rsp + 0xb0], 0x20
jne 0x14011200e
lea rax, [rsp + 0xac]
mov dword [rax], 0xaaaaaaaa
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x60]
mov rdx, rsi
mov r8, qword [rsp + 0x50]
mov r9d, 0x20
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, qword [r12]
lea rdx, str.g_originals
lea r8, [0x14022b900]
mov r9d, 0xd8
call fcn.14003d2d0
test eax, eax
jne 0x140111cfd
mov rax, qword [rsp + 0xa0]
mov qword [0x14022ba10], rax
lea r8, [0x14022ba10]
mov rcx, qword [r12]
lea rdx, str.g_interceptions
mov r9d, 8
call fcn.14003d2d0
mov r15d, eax
test r14, r14
je 0x140111d0d
mov rcx, r14
call fcn.14011d788
mov rcx, qword [rsp + 0x178]
xor rcx, rsp
call fcn.14011fe20
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x180]
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
cmp word [rcx + 0xa], 0x2e
jne 0x140111120
cmp word [rcx + 0xc], 0x64
jne 0x140111120
cmp word [rcx + 0xe], 0x6c
jne 0x140111120
cmp word [rcx + 0x10], 0x6c
jne 0x140111120
jmp 0x1401111e5
mov r15d, 0x26
mov r14, qword [rsp + 0x78]
jmp 0x140111d00
xor edx, edx
xor r13d, r13d
jmp 0x14011121a
lea rdx, [r8 + 4]
lea rsi, [rcx + 0xc]
test al, al
cmovs rdx, rsi
cmp word [rdx], 0x64
jne 0x140111a86
lea rdx, [r8 + 6]
lea rsi, [rcx + 0xe]
test al, al
cmovs rdx, rsi
cmp word [rdx], 0x6c
jne 0x140111a86
lea rdx, [r8 + 8]
add rcx, 0x10
test al, al
cmovns rcx, rdx
xor esi, esi
cmp word [rcx], 0x6c
jne 0x140111a88
cmp dword [rsp + 0xb0], 1
jne 0x140111a88
cmp byte [rsp + 0xff], 0
mov rax, r14
jns 0x140111df1
mov rax, qword [rsp + 0xe8]
movsxd rdx, dword [rsp + 0x58]
shl rdx, 6
mov rcx, qword [rsp + 0x50]
sub rcx, qword [rsp + 0x68]
cmp byte [rsp + 0xe7], 0
mov rbp, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x80]
jns 0x140111e26
mov r9, qword [rsp + 0xd0]
lea rbx, [rdx + rbp]
add rbx, 0x20
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
mov rcx, rsi
mov rdx, qword [rsp + 0x98]
xor r8d, r8d
call fcn.1400c4030
test eax, eax
js 0x14011204d
mov ecx, 0x20
call fcn.14011dd70
mov r13, rax
mov rcx, rsi
mov rdx, rax
call fcn.1400261d0
test al, al
je 0x140112097
mov rcx, rsi
mov rdx, r13
mov r8, rbx
call fcn.140025fe0
mov esi, eax
mov qword [rsp + 0x90], rbx
test r13, r13
je 0x140111ea2
mov rcx, r13
call fcn.14011d788
test esi, esi
mov rbx, qword [rsp + 0x48]
movabs rbp, 0xaaaaaaaaaaaaaaaa
lea r8, [rsp + 0xc0]
lea r9, [rsp + 0xd0]
js 0x14011204f
movsxd rax, dword [rsp + 0xb4]
lea rcx, [0x14022b900]
mov rdx, qword [rsp + 0x90]
mov qword [rcx + rax*8], rdx
mov rax, qword [rsp + 0x58]
inc eax
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x128], eax
mov rax, qword [rsp + 0x68]
add rax, 0x40
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x118], rax
mov sil, 1
jmp 0x140111a8e
call fcn.1400f23b0
mov rdi, qword [rsp + 0x50]
jmp 0x1401115a8
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax]
call fcn.14011d780
mov rdi, qword [rsp + 0x50]
jmp 0x1401115ba
mov rax, qword [rsi + 0x38]
jmp 0x1401111c6
mov rcx, qword [rsi + 0x50]
jmp 0x1401111d7
mov rdx, qword [rdi + 0x48]
mov r8, qword [rdi + 0x50]
mov rcx, r14
call fcn.1400ee680
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x1401119d1
mov rcx, r13
call fcn.1400f2260
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x1401119f2
call fcn.1400f23b0
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x140111ab3
mov rcx, qword [rsp + 0xe8]
call fcn.14011d780
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
jmp 0x140111acd
xor ebx, ebx
jmp 0x14011168d
mov r15d, 0x2a
jmp 0x140111d00
xor r15d, r15d
jmp 0x140111d0d
mov r15d, 0x27
jmp 0x140111d00
cmp qword [r12 + 0x18], 0
jne 0x140111732
jmp 0x140111cd1
int3
int3
call fcn.1400f23b0
jmp 0x140111c26
mov esi, eax
call fcn.1400377e0
mov rax, qword [rax + 0x108]
mov ecx, esi
call qword [0x14023a010]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xc0]
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov rbx, qword [rsp + 0x48]
mov r15d, 0x28
xor esi, esi
jmp 0x140111a8e
mov esi, 0xc0000035
jmp 0x140111e8d