Function at 0x140001300
Capabilities:
Accept command line arguments
Check for debugger via api
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Check mutex on windows
Create process on windows
Enumerate processes
Hide thread from debugger

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x7e0]
sub rsp, 0x8e0
mov rax, qword [0x1400b5840]
xor rax, rsp
mov qword [rbp + 0x7d0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rbp - 0x18]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r12, rax
xor r13d, r13d
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x140001650
call fcn.140002130
test eax, eax
jne 0x140001650
call fcn.140002147
test eax, eax
jne 0x140001650
mov dword [rbp - 0x40], r13d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
cmp dword [rbp - 0x40], r13d
jne 0x140001650
xorps xmm0, xmm0
mov dword [rbp - 0x40], r13d
lea rcx, str.ntdll.dll
mov ebx, r13d
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, 1
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x140001419
lea rdx, str.NtQueryInformationProcess
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x140001419
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rcx, [rbp - 0x40]
mov r9d, 0x30
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x70]
mov rcx, rax
xor edx, edx
call rdi
test eax, eax
js 0x140001411
mov rax, qword [rbp - 0x68]
test rax, rax
je 0x140001411
cmp byte [rax + 2], bl
cmovne ebx, esi
test ebx, ebx
jne 0x140001655
xor edx, edx
lea rcx, str.OLLYDBG
call qword [sym.imp.USER32.dll_FindWindowW]
xor edx, edx
lea rcx, [0x1400ab558]
mov rbx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140001655
test rbx, rbx
jne 0x140001655
lea rdx, str.OllyDbg____CPU_
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
lea rdx, str.Immunity_Debugger____CPU_
xor ecx, ecx
mov rbx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
jne 0x140001655
test rbx, rbx
jne 0x140001655
lea rax, str.cheatengine_x86_64.exe
xor edx, edx
mov qword [rbp + 0x560], rax
lea rcx, [rbp + 0x94]
lea rax, str.ollydbg.exe
mov r8d, 0x234
mov qword [rbp + 0x568], rax
mov edi, r13d
lea rax, str.ida.exe
mov qword [rbp + 0x570], rax
lea rax, str.ida64.exe
mov qword [rbp + 0x578], rax
lea rax, str.radare2.exe
mov qword [rbp + 0x580], rax
lea rax, str.x64dbg.exe
mov qword [rbp + 0x588], rax
call fcn.14008d200
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
xor edx, edx
mov dword [rbp + 0x590], 0x238
mov r8d, 0x234
lea rcx, [rbp + 0x594]
mov r14, rax
call fcn.14008d200
lea rcx, [rbp + 0x90]
mov edx, 4
lea rax, [rbp + 0x590]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, rsi
jne 0x140001530
movups xmm0, xmmword [rax]
lea rdx, [rbp + 0x90]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x20]
mov rax, qword [rax + 0x30]
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x1400015f8
lea rbx, [rbp + 0x560]
nop dword [rax + rax]
mov rcx, qword [rbx]
lea rdx, [rbp + 0xbc]
call fcn.14006b31c
test eax, eax
lea rax, [rbp + 0x590]
cmove edi, esi
add rbx, 8
cmp rbx, rax
jne 0x1400015c0
lea rdx, [rbp + 0x90]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x1400015b4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x140001655
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, r13d
cmp rax, 0xffffffffffffffff
je 0x140001657
test rax, rax
je 0x140001657
lea rdx, str.NtSetInformationThread
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140001657
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, reloc.WS2_32.dll_recvfrom
call rbx
jmp 0x140001657
mov esi, 1
mov edi, esi
cmp dword [rbp - 0x18], 1
mov qword [rsp + 0x910], r15
jle 0x140001a7a
mov r12, qword [r12 + 8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [r12 + rbx*2], r13w
jne 0x140001680
movabs r15, 0x7ffffffffffffffe
cmp rbx, r15
ja 0x140001f92
movabs r14, 0x7fffffffffffffff
cmp rbx, 7
ja 0x1400016d6
mov qword [rbp], rbx
lea rcx, [rbp - 0x10]
add rbx, rbx
mov qword [rbp + 8], 7
mov r8, rbx
mov rdx, r12
call fcn.14008cb60
mov word [rbp + rbx - 0x10], r13w
jmp 0x140001775
mov rax, rbx
or rax, 7
cmp rax, r15
jbe 0x14000171b
lea rcx, [r14 + r14]
cmp rcx, 0x1000
jb 0x140001741
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001f8c
mov rcx, rax
call fcn.140067490
test rax, rax
je 0x140001f86
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140001749
mov ecx, 0xa
mov r15, rax
cmp rax, rcx
cmovb r15, rcx
lea rcx, [r15 + 1]
cmp rcx, r14
ja 0x140001f8c
add rcx, rcx
jne 0x1400016e6
mov r14, r13
jmp 0x140001749
call fcn.140067490
mov r14, rax
mov qword [rbp], rbx
mov rdx, r12
add rbx, rbx
mov qword [rbp - 0x10], r14
mov r8, rbx
mov qword [rbp + 8], r15
mov rcx, r14
call fcn.14008cb60
mov word [r14 + rbx], r13w
movabs r14, 0x7fffffffffffffff
cmp qword [rbp + 8], 7
lea rdx, [rbp - 0x10]
mov rax, qword [rbp]
lea rbx, [rbp - 0x10]
cmova rdx, qword [rbp - 0x10]
xorps xmm0, xmm0
cmova rbx, qword [rbp - 0x10]
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
lea r15, [rdx + rax*2]
cmp rbx, r15
jne 0x1400017b6
mov eax, reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], r13b
mov qword [rbp - 0x20], rax
jmp 0x1400018b0
sub r15, rbx
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
sar r15, 1
cmp r15, r14
ja 0x140001f92
mov r14d, reloc.WS2_32.dll_ntohs
cmp r15, r14
jbe 0x140001876
mov r14, r15
movabs rax, 0x7fffffffffffffff
or r14, 0xf
cmp r14, rax
jbe 0x140001805
mov r14, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000183d
mov eax, socket
cmp r14, rax
cmovb r14, rax
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x140001827
mov rax, r13
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x38], rax
jmp 0x14000187a
cmp rcx, 0x1000
jb 0x140001867
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001f8c
mov rcx, rax
call fcn.140067490
mov rcx, rax
test rax, rax
je 0x140001f86
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
jmp 0x14000187a
call fcn.140067490
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x20], r14
jmp 0x14000187a
mov rax, qword [rbp - 0x38]
cmp r14, 0xf
lea r8, [rbp - 0x38]
mov rdx, r15
cmova r8, rax
mov rcx, r8
test r15, r15
je 0x1400018a4
movzx eax, byte [rbx]
lea rbx, [rbx + 2]
mov byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x140001891
mov qword [rbp - 0x28], r15
mov byte [r8 + r15], r13b
mov rax, qword [rbp - 0x20]
xorps xmm0, xmm0
mov dword [rbp + 0x20], 0x68
cmp rax, 0xf
mov dword [rbp - 0x40], r13d
lea rbx, [rbp - 0x38]
cmova rbx, qword [rbp - 0x38]
lea r8, str.antidbg
xor eax, eax
xor edx, edx
xor ecx, ecx
mov dword [rbp + 0x84], eax
mov qword [rbp - 0x80], rax
movups xmmword [rbp + 0x24], xmm0
movups xmmword [rbp + 0x34], xmm0
movups xmmword [rbp + 0x44], xmm0
movups xmmword [rbp + 0x54], xmm0
movups xmmword [rbp + 0x64], xmm0
movups xmmword [rbp + 0x74], xmm0
movups xmmword [rsp + 0x70], xmm0
call qword [sym.imp.KERNEL32.dll_CreateMutexW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x14000192c
mov rcx, rbx
call fcn.1400704fc
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_DebugActiveProcess]
test eax, eax
je 0x140001f7b
jmp 0x1400019ef
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, 0x104
lea rdx, [rbp + 0x90]
xor ecx, ecx
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea r9, [rbp + 0x90]
mov dword [rsp + 0x20], ebx
lea r8, str._ws__d
mov edx, 0x109
lea rcx, [rbp + 0x590]
call fcn.140001010
lea rax, [rsp + 0x70]
xor r9d, r9d
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x590]
lea rax, [rbp + 0x20]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rsp + 0x70]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x70]
lea rdx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rbp - 0x40], 0x22b
mov ebx, r13d
mov rcx, qword [rsp + 0x70]
cmove ebx, esi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
cmovne edi, esi
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140001a2a
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a25
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f86
call fcn.1400674cc
mov rdx, qword [rbp + 8]
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], r13b
cmp rdx, 7
jbe 0x140001a7a
mov rcx, qword [rbp - 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a75
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f86
call fcn.1400674cc
xor edx, edx
lea rcx, [rbp + 0x90]
mov r8d, 0x4d0
call fcn.14008d200
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea rdx, [rbp + 0x90]
mov dword [rbp + 0xc0], 0x100010
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x140001aef
cmp qword [rbp + 0xd8], r13
jne 0x140001ae8
cmp qword [rbp + 0xe0], r13
jne 0x140001ae8
cmp qword [rbp + 0xe8], r13
jne 0x140001ae8
cmp qword [rbp + 0xf0], r13
jne 0x140001ae8
cmp qword [rbp + 0xf8], r13
jne 0x140001ae8
cmp qword [rbp + 0x100], r13
je 0x140001aef
mov edi, esi
jmp 0x140001bb5
xorps xmm0, xmm0
lea rcx, [rbp - 0x70]
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
call fcn.14000217d
mov rcx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x70]
shl rcx, 0x20
or rcx, qword [rbp - 0x58]
shl rax, 0x20
or rax, qword [rbp - 0x68]
sub rcx, rax
cmp rcx, 0x100000
jbe 0x140001b2e
mov edi, esi
jmp 0x140001bb5
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call fcn.14000215f
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbp - 0x40]
sub rax, qword [rbp + 0x10]
cmp rax, 0x1e
jle 0x140001b59
mov edi, esi
jmp 0x140001bb5
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, eax
call fcn.14000216e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, 0x1e
jbe 0x140001b77
mov edi, esi
jmp 0x140001bb5
call fcn.140001070
test eax, eax
je 0x140001b84
mov edi, esi
jmp 0x140001bb5
call fcn.1400010a0
test eax, eax
je 0x140001b91
mov edi, esi
jmp 0x140001bb5
call fcn.1400010c0
test eax, eax
je 0x140001b9e
mov edi, esi
jmp 0x140001bb5
call fcn.140001100
test eax, eax
je 0x140001bab
mov edi, esi
jmp 0x140001bb5
call fcn.1400010e0
test eax, eax
cmovne edi, esi
call fcn.140001120
test edi, edi
jne 0x140001f40
movdqa xmm1, xmmword [reloc.WS2_32.dll_closesocket]
xorps xmm0, xmm0
mov eax, dword [0x1400ab6f0]
movq rcx, xmm1
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x50], ax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rsp + 0x52], al
movdqu xmmword [rsp + 0x60], xmm1
mov byte [rsp + 0x53], r13b
psrldq xmm1, 8
movq rdx, xmm1
mov rax, rdx
sub rax, rcx
cmp rax, 5
jb 0x140001c49
cmp rdx, 0xf
lea rax, [rcx + 5]
lea rbx, [rsp + 0x50]
mov qword [rsp + 0x60], rax
cmova rbx, qword [rsp + 0x50]
lea rdx, str.ps:__
add rbx, rcx
mov r8d, 5
mov rcx, rbx
call fcn.14008cb60
lea rax, [rsp + 0x50]
mov byte [rbx + 5], r13b
jmp 0x140001c68
lea r9, str.ps:__
mov qword [rsp + 0x20], 5
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.140001fa0
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x70], xmm0
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x140001ce5
cmp rdx, 0xf
lea rax, [rcx + 6]
lea rbx, [rsp + 0x70]
mov qword [rbp - 0x80], rax
cmova rbx, qword [rsp + 0x70]
lea rdx, str.google
add rbx, rcx
mov r8d, 6
mov rcx, rbx
call fcn.14008cb60
lea rax, [rsp + 0x70]
mov byte [rbx + 6], r13b
jmp 0x140001d04
lea r9, str.google
mov qword [rsp + 0x20], 6
mov edx, 6
lea rcx, [rsp + 0x70]
call fcn.140001fa0
xorps xmm0, xmm0
lea rcx, [rbp - 0x38]
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x28], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov r8, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x28]
mov rax, r8
sub rax, rdx
cmp rax, 4
jb 0x140001d6e
lea rax, [rdx + 4]
cmp r8, 0xf
mov qword [rbp - 0x28], rax
mov eax, dword [str..com]
cmova rcx, qword [rbp - 0x38]
mov dword [rcx + rdx], eax
lea rax, [rbp - 0x38]
mov byte [rcx + rdx + 4], r13b
jmp 0x140001d88
lea r9, str..com
mov qword [rsp + 0x20], 4
mov edx, 4
call fcn.140001fa0
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x70], xmm0
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140001df0
mov rcx, qword [rbp - 0x38]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001deb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f98
call fcn.1400674cc
mov rdx, qword [rbp - 0x78]
movdqa xmm0, xmmword [0x1400ab710]
mov byte [rbp - 0x38], r13b
movdqu xmmword [rbp - 0x28], xmm0
cmp rdx, 0xf
jbe 0x140001e45
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e38
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f98
call fcn.1400674cc
movdqa xmm0, xmmword [0x1400ab710]
mov rdx, qword [rsp + 0x68]
mov byte [rsp + 0x70], r13b
movdqu xmmword [rbp - 0x80], xmm0
cmp rdx, 0xf
jbe 0x140001e8c
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e87
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f98
call fcn.1400674cc
cmp qword [rbp - 0x58], 0xf
lea rdi, [rbp - 0x70]
mov ecx, 3
cmova rdi, qword [rbp - 0x70]
call fcn.140002460
call fcn.1400021f0
mov rbx, rax
test rax, rax
je 0x140001f04
mov r8, rdi
mov edx, 0x2712
mov rcx, rax
call fcn.140005230
mov r8d, esi
mov edx, 0x2b
mov rcx, rbx
call fcn.140005230
mov r8d, esi
mov edx, 0x34
mov rcx, rbx
call fcn.140005230
mov edx, reloc.WS2_32.dll_listen
mov r8d, __WSAFDIsSet
mov rcx, rbx
call fcn.140005230
mov rcx, rbx
call fcn.140002260
mov rcx, rbx
call fcn.1400021c0
call fcn.140002400
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x140001f40
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f3b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001f75
call fcn.1400674cc
mov r15, qword [rsp + 0x910]
xor eax, eax
mov rcx, qword [rbp + 0x7d0]
xor rcx, rsp
call fcn.140067470
lea r11, [rsp + 0x8e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
call fcn.140070954
int3
mov ecx, 0x22b
call fcn.14006b234
int3
call fcn.140070954
int3
call fcn.140001240
int3
call fcn.1400012e0
int3
call fcn.140070954
int3