Function at 0x14001ac20
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4b0]
sub rsp, 0x5b0
mov rax, qword [0x140160080]
xor rax, rsp
mov qword [rbp + 0x4a8], rax
xor r13d, r13d
movdqa xmm1, xmmword [0x14014bf10]
movdqu xmmword [rsp + 0x30], xmm1
mov dl, reloc.WLDAP32.dll_Ordinal_79
mov r8b, 0x4b
mov r9b, reloc.WLDAP32.dll_Ordinal_22
mov r10b, 0x5d
mov r11b, 0x40
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor dl, cl
mov byte [rsp + 0x40], dl
xor r8b, cl
mov byte [rsp + 0x41], r8b
xor r9b, cl
mov byte [rsp + 0x42], r9b
xor r10b, cl
mov byte [rsp + 0x43], r10b
xor r11b, cl
mov byte [rsp + 0x44], r11b
xor bl, cl
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], r13b
lea rcx, [rsp + 0x31]
call fcn.140019270
mov dword [0x1401615d8], eax
test eax, eax
je 0x14001d133
mov edx, eax
lea ecx, [r13 + 8]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov dword [rbp], 0x238
cmp rax, 0xffffffffffffffff
je 0x14001ad6d
lea rdx, [rbp]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x14001ad64
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x30]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbscmp]
test eax, eax
je 0x14001ad64
lea rdx, [rbp]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x14001ad40
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x240]
lea rax, [rbp]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001ad80
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov r8d, dword [0x1401615d8]
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
mov qword [0x1401614f0], rax
xorps xmm0, xmm0
mov edi, dword [rbp + 0x20]
movdqu xmmword [rbp + 0x490], xmm0
mov qword [rbp + 0x4a0], r13
test rdi, rdi
je 0x14001ae50
mov edx, edi
lea rcx, [rbp + 0x490]
call fcn.1400345f0
mov rcx, qword [rbp + 0x490]
lea rbx, [rcx + rdi]
mov r8d, edi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x498], rbx
mov qword [rsp + 0x20], r13
mov r9, rdi
mov r8, qword [rbp + 0x490]
mov rdx, qword [rbp + 0x18]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
nop
mov rax, qword [rbp + 0x258]
mov qword [0x140161558], rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x140161990]
sub rdx, qword [0x140161988]
sar rdx, 2
movabs r12, 0x3fffffffffffffff
test rdx, rdx
je 0x14001aef7
cmp rdx, r12
ja 0x14001d169
lea rcx, [rsp + 0x30]
call fcn.140035190
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x140161990]
mov rdx, qword [0x140161988]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001af44
lea rcx, [rbp - 0x68]
call fcn.1400345f0
mov rdi, qword [rbp - 0x68]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x60], rax
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.140019340
mov qword [0x1401616f8], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x1401617e0]
sub rdx, qword [0x1401617d8]
sar rdx, 2
test rdx, rdx
je 0x14001afc5
cmp rdx, r12
ja 0x14001d16f
lea rcx, [rbp - 0x68]
call fcn.140035190
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x1401617e0]
mov rdx, qword [0x1401617d8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001b017
lea rcx, [rsp + 0x30]
call fcn.1400345f0
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140019340
mov qword [0x1401615b0], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x140161928]
sub rdx, qword [0x140161920]
sar rdx, 2
test rdx, rdx
je 0x14001b098
cmp rdx, r12
ja 0x14001d175
lea rcx, [rbp - 0x68]
call fcn.140035190
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x140161928]
mov rdx, qword [0x140161920]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001b0ea
lea rcx, [rsp + 0x30]
call fcn.1400345f0
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140019340
mov qword [0x140161358], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x140161798]
sub rdx, qword [0x140161790]
sar rdx, 2
test rdx, rdx
je 0x14001b16b
cmp rdx, r12
ja 0x14001d17b
lea rcx, [rbp - 0x68]
call fcn.140035190
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x140161798]
mov rdx, qword [0x140161790]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001b1bd
lea rcx, [rsp + 0x30]
call fcn.1400345f0
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140019340
mov qword [0x140161500], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x140161940]
sub rdx, qword [0x140161938]
sar rdx, 2
test rdx, rdx
je 0x14001b23e
cmp rdx, r12
ja 0x14001d181
lea rcx, [rbp - 0x68]
call fcn.140035190
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x140161940]
mov rdx, qword [0x140161938]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001b290
lea rcx, [rsp + 0x30]
call fcn.1400345f0
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + rdi]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x30]
call fcn.140019340
mov qword [0x140161508], rax
lea rax, [rbp - 0x68]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov rdx, qword [0x1401618f0]
sub rdx, qword [0x1401618e8]
sar rdx, 2
test rdx, rdx
je 0x14001b311
cmp rdx, r12
ja 0x14001d187
lea rcx, [rbp - 0x68]
call fcn.140035190
mov rdi, qword [rbp - 0x68]
mov rbx, qword [0x1401618f0]
mov rdx, qword [0x1401618e8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r13
mov rdx, qword [rbp + 0x498]
sub rdx, qword [rbp + 0x490]
je 0x14001b35e
lea rcx, [rbp - 0x20]
call fcn.1400345f0
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp + 0x498]
mov rdx, qword [rbp + 0x490]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rbx]
mov qword [rbp - 0x18], rax
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x20]
call fcn.140019340
mov qword [0x140161528], rax
mov r8, qword [0x1401616f8]
test r8, r8
je 0x14001bc42
movss xmm0, dword [0x140160114]
movss dword [rbp + 0x480], xmm0
mov eax, dword [0x1401615d4]
test eax, eax
jne 0x14001b9c5
mov rax, qword [0x140161810]
cmp qword [0x140161808], rax
jne 0x14001bc42
mov eax, dword [rbp + 0x480]
movzx edx, al
mov rcx, qword [0x140161880]
mov dword [rcx + 0x14], edx
mov ecx, eax
shr ecx, 8
movzx edx, cl
mov rcx, qword [0x140161880]
mov dword [rcx + 0x18], edx
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
mov rcx, qword [0x140161880]
mov dword [rcx + 0x1c], edx
shr eax, 0x18
mov rcx, qword [0x140161880]
mov dword [rcx + 0x20], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x1401618c0]
sub rdx, qword [0x1401618b8]
sar rdx, 2
test rdx, rdx
je 0x14001b465
cmp rdx, r12
ja 0x14001d18d
lea rcx, [rsp + 0x30]
call fcn.140035190
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x1401618c0]
mov rdx, qword [0x1401618b8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov r8, qword [0x1401616f8]
add r8, qword [0x140161558]
lea r9, [rsp + 0x30]
mov rdx, qword [0x1401614f0]
lea rcx, [rsp + 0x68]
call fcn.140019530
mov rbx, rax
lea r14, [0x1401618b8]
cmp r14, rax
je 0x14001b521
mov r8, qword [0x1401618b8]
test r8, r8
je 0x14001b4f6
mov rcx, qword [0x1401618c8]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001b4dc
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001b560
mov r8, rcx
mov rcx, r8
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [0x1401618b8], xmm0
mov qword [0x1401618c8], r13
mov rax, qword [rbx]
mov qword [0x1401618b8], rax
mov rax, qword [rbx + 8]
mov qword [0x1401618c0], rax
mov rax, qword [rbx + 0x10]
mov qword [0x1401618c8], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14001b57a
mov rax, qword [rsp + 0x78]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b567
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b567
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
mov qword [rsp + 0x68], r13
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x70], xmm0
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001b590
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 4]
mov r8, qword [0x1401616f8]
lea rdx, [rbp]
call fcn.140019650
mov rsi, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rdx, qword [0x140161888]
sub rdx, qword [0x140161880]
sar rdx, 2
test rdx, rdx
je 0x14001b67f
cmp rdx, r12
ja 0x14001d193
lea rcx, [rsp + 0x30]
call fcn.140035190
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x140161888]
mov rdx, qword [0x140161880]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rdi, [rdi + rbx*4]
mov qword [rsp + 0x38], rdi
jmp 0x14001b684
mov rdi, qword [rsp + 0x38]
mov word [rbp + 0x488], si
mov rdx, r13
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
sub rcx, rbx
sar rcx, 2
movzx eax, si
test rcx, rcx
je 0x14001b6c5
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001b6b5
inc rdx
cmp rdx, rcx
jb 0x14001b6a5
jmp 0x14001b6c5
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rdx, r13
mov rcx, rdi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001b6f7
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001b6e7
inc rdx
cmp rdx, rcx
jb 0x14001b6d7
jmp 0x14001b6f7
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rdx, r13
mov rcx, rdi
sub rcx, rbx
sar rcx, 2
test rcx, rcx
je 0x14001b730
nop dword [rax]
cmp dword [rbx + rdx*4], 0xfffffffe
je 0x14001b720
inc rdx
cmp rdx, rcx
jb 0x14001b710
jmp 0x14001b730
movzx ecx, al
mov dword [rbx + rdx*4], ecx
mov rdi, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov rcx, qword [0x140161880]
test rcx, rcx
je 0x14001b790
mov rax, qword [0x140161890]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
cmp rdx, 0x1000
jb 0x14001b78b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14001b972
mov rcx, r8
call fcn.1400f24c0
mov qword [0x140161880], rbx
mov qword [0x140161888], rdi
mov qword [0x140161890], rsi
lea rax, [rbp - 0x38]
mov qword [rbp + 0x480], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov rdx, qword [0x1401618c0]
sub rdx, qword [0x1401618b8]
sar rdx, 2
test rdx, rdx
je 0x14001b81f
cmp rdx, r12
ja 0x14001d199
lea rcx, [rbp - 0x38]
call fcn.140035190
mov rdi, qword [rbp - 0x38]
mov rbx, qword [0x1401618c0]
mov rdx, qword [0x1401618b8]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x30], rax
mov rdi, qword [0x140161888]
mov rbx, qword [0x140161880]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
sub rdi, rbx
sar rdi, 2
test rdi, rdi
je 0x14001b87d
cmp rdi, r12
ja 0x14001d19f
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.140035190
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x140161888]
mov rdx, qword [0x140161880]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rbp - 0x38]
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x50]
call fcn.140019840
mov rbx, rax
lea rdi, [0x140161880]
cmp rdi, rax
je 0x14001b92e
mov r8, qword [0x140161880]
test r8, r8
je 0x14001b903
mov rcx, qword [0x140161890]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001b8e9
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001b96b
mov r8, rcx
mov rcx, r8
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [0x140161880], xmm0
mov qword [0x140161890], r13
mov rax, qword [rbx]
mov qword [0x140161880], rax
mov rax, qword [rbx + 8]
mov qword [0x140161888], rax
mov rax, qword [rbx + 0x10]
mov qword [0x140161890], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001b98a
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b979
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b979
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
mov qword [rbp - 0x50], r13
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
cmp byte [0x14016133a], 0
jne 0x14001bc42
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002d160
mov rdx, qword [0x140161558]
add rdx, qword [0x1401616f8]
mov r8, rax
mov rcx, qword [0x1401614f0]
call fcn.14001a470
jmp 0x14001bc42
cmp eax, 1
jne 0x14001bc42
mov rax, qword [0x140161810]
cmp qword [0x140161808], rax
je 0x14001bc42
mov rsi, qword [0x140161558]
add rsi, r8
lea rdi, [0x140161880]
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002d160
mov rdx, rax
mov rcx, rsi
call fcn.140019960
mov r12, rax
mov r9, qword [0x140161810]
sub r9, qword [0x140161808]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001ba30
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x1401615d4]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x1401614f0]
call fcn.1400199e0
mov r15, rax
lea rdx, [0x140161808]
lea rcx, [rbp - 0x80]
call fcn.14002d160
mov rbx, r15
sub rbx, rsi
mov rdx, rax
mov rcx, r15
call fcn.140019c40
sub r12, rax
lea rax, [r15 + 0x1000]
mov qword [0x140161330], rax
mov qword [0x140161578], rsi
mov qword [0x1401615c8], r15
lea r14, [0x1401618b8]
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.14002d160
mov r8, qword [0x140161558]
add r8, qword [0x1401616f8]
mov r9, rax
mov rdx, qword [0x1401614f0]
lea rcx, [rbp - 0x50]
call fcn.140019530
mov rdx, rax
mov rcx, r14
call fcn.14002d0c0
lea rcx, [rbp - 0x50]
call fcn.14002d060
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.14002d160
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x50]
call fcn.140019cc0
mov rdx, rax
mov rcx, rdi
call fcn.14002d0c0
lea rcx, [rbp - 0x50]
call fcn.14002d060
lea rdx, [0x140161808]
lea rcx, [rbp - 0x80]
call fcn.14002d160
mov r8, rax
lea rdx, [r12 - 5]
lea rcx, [rbp - 0x50]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x140161808]
call fcn.14002d0c0
lea rcx, [rbp - 0x50]
call fcn.14002d060
mov dword [rbp + 0x488], 0x40400000
cmp byte [0x14016133a], 0
jne 0x14001bbd1
movss xmm0, dword [0x140160114]
movss dword [rbp + 0x488], xmm0
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x488]
mov rdx, qword [0x140161330]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x140161808]
lea rcx, [rbp - 0x80]
call fcn.14002d160
mov r8, rax
mov rdx, r15
mov rcx, qword [0x1401614f0]
call fcn.14001a470
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x1401614f0]
call fcn.14001a470
movabs r12, 0x3fffffffffffffff
mov rcx, qword [0x140161358]
test rcx, rcx
je 0x14001c000
cmp dword [0x1401615c0], 1
jne 0x14001c000
mov rax, qword [0x140161828]
cmp qword [0x140161820], rax
je 0x14001c000
mov rsi, qword [0x140161558]
add rsi, rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov r8, r13
mov qword [rsp + 0x40], r13
mov rdx, qword [0x140161960]
sub rdx, qword [0x140161958]
sar rdx, 2
test rdx, rdx
je 0x14001bced
cmp rdx, r12
ja 0x14001d1a5
lea rcx, [rsp + 0x30]
call fcn.140035190
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x140161960]
mov rdx, qword [0x140161958]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov r8, qword [rsp + 0x40]
jmp 0x14001bcf2
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
sub rax, rcx
sar rax, 2
lea r15, [rax + rsi]
test rcx, rcx
je 0x14001bd51
sub r8, rcx
sar r8, 2
lea rdx, [r8*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001bd3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001bd3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov r9, qword [0x140161828]
sub r9, qword [0x140161820]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001bd80
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x1401615c0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x1401614f0]
call fcn.1400199e0
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x140161828]
sub rdx, qword [0x140161820]
sar rdx, 2
test rdx, rdx
je 0x14001be86
cmp rdx, r12
ja 0x14001d1ab
lea rcx, [rsp + 0x68]
call fcn.140035190
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x140161828]
mov rdx, qword [0x140161820]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
mov qword [rbp + 0x480], r13
lea rcx, [rbp + 0x480]
call fcn.140033e80
mov rbx, r14
sub rbx, rsi
lea rdx, [rsp + 0x68]
mov rcx, r14
call fcn.140019c40
sub r15, rax
lea rax, [r14 + 0x1000]
mov qword [0x140161538], rax
mov qword [0x1401615a0], rsi
mov qword [0x140161710], r14
lea rdx, [0x140161908]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r9, rax
mov r8, rsi
mov rdx, qword [0x1401614f0]
lea rcx, [rbp - 0x80]
call fcn.140019530
mov rdx, rax
lea rcx, [0x140161908]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x140161958]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x140161958]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x140161820]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [r15 - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x140161820]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
mov dword [0x140161664], 0x41a00000
cmp byte [0x140161339], 0
jne 0x14001bf94
movss xmm0, dword [0x140160214]
mulss xmm0, dword [0x14014b5d4]
movss dword [0x140161664], xmm0
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x140161664]
mov rdx, qword [0x140161538]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x140161820]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, r14
mov rcx, qword [0x1401614f0]
call fcn.14001a470
lea rdx, [0x140161958]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x1401614f0]
call fcn.14001a470
mov rcx, qword [0x140161500]
test rcx, rcx
je 0x14001c280
cmp dword [0x1401614f8], 1
jne 0x14001c280
mov rax, qword [0x140161a18]
cmp qword [0x140161a10], rax
je 0x14001c280
mov rsi, qword [0x140161558]
add rsi, rcx
lea rdx, [0x140161868]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov rdx, rax
mov rcx, rsi
call fcn.140019960
mov r14, rax
mov r9, qword [0x140161a18]
sub r9, qword [0x140161a10]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001c080
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x1401614f8]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x1401614f0]
call fcn.1400199e0
mov rdi, rax
lea rdx, [0x140161a10]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov rbx, rdi
sub rbx, rsi
mov rdx, rax
mov rcx, rdi
call fcn.140019c40
sub r14, rax
lea rax, [rdi + 0x1000]
mov qword [0x140161700], rax
mov qword [0x1401613b0], rsi
mov qword [0x140161570], rdi
lea rdx, [0x1401617c0]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, qword [0x140161558]
add r8, qword [0x140161500]
mov r9, rax
mov rdx, qword [0x1401614f0]
lea rcx, [rbp - 0x80]
call fcn.140019530
mov rdx, rax
lea rcx, [0x1401617c0]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x140161868]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x140161868]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x140161a10]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [r14 - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x140161a10]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
mov dword [rbp + 0x480], 1
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x140161700]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x140161a10]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x1401614f0]
call fcn.14001a470
lea rdx, [0x140161868]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x1401614f0]
call fcn.14001a470
mov rcx, qword [0x140161508]
test rcx, rcx
je 0x14001c527
cmp dword [0x140161644], 2
jne 0x14001c527
mov rax, qword [0x1401617b0]
cmp qword [0x1401617a8], rax
je 0x14001c527
mov rsi, qword [0x140161558]
add rsi, rcx
lea rdx, [0x1401617f0]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov rdx, rax
mov rcx, rsi
call fcn.140019960
mov r14, rax
mov r9, qword [0x1401617b0]
sub r9, qword [0x1401617a8]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001c300
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x140161644]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x1401614f0]
call fcn.1400199e0
mov rdi, rax
lea rdx, [0x1401617a8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov rbx, rdi
sub rbx, rsi
mov rdx, rax
mov rcx, rdi
call fcn.140019c40
sub r14, rax
lea rax, [rdi + 0x1000]
mov qword [0x140161728], rax
add rax, 4
mov qword [0x140161520], rax
mov qword [0x140161530], rsi
mov qword [0x140161540], rdi
lea rdx, [0x140161838]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, qword [0x140161558]
add r8, qword [0x140161508]
mov r9, rax
mov rdx, qword [0x1401614f0]
lea rcx, [rbp - 0x80]
call fcn.140019530
mov rdx, rax
lea rcx, [0x140161838]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x1401617f0]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x1401617f0]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x1401617a8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [r14 - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x1401617a8]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x140160120]
mov rdx, qword [0x140161728]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [0x1401601d0]
mov rdx, qword [0x140161520]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x1401617a8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x1401614f0]
call fcn.14001a470
lea rdx, [0x1401617f0]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, rsi
mov rcx, qword [0x1401614f0]
call fcn.14001a470
mov rax, qword [0x1401615b0]
test rax, rax
je 0x14001c962
lea rcx, [rax + 2]
mov qword [0x1401615b0], rcx
cmp dword [0x1401614d0], 2
jne 0x14001c962
mov rax, qword [0x1401619c0]
cmp qword [0x1401619b8], rax
je 0x14001c962
mov rdi, qword [0x140161558]
add rdi, rcx
lea rdx, [0x140161970]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov rdx, rax
mov rcx, rdi
call fcn.140019960
mov rsi, rax
mov r9, qword [0x1401619c0]
sub r9, qword [0x1401619b8]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001c5b0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x1401614d0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x1401614f0]
call fcn.1400199e0
mov r14, rax
lea rdx, [0x1401619b8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov rbx, r14
sub rbx, rdi
mov rdx, rax
mov rcx, r14
call fcn.140019c40
sub rsi, rax
lea rax, [r14 + 0x1000]
mov qword [0x140161518], rax
add rax, 4
mov qword [0x140161350], rax
mov qword [0x1401613b8], rdi
mov qword [0x140161550], r14
lea rdx, [0x1401619a0]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r9, rax
mov r8, rdi
mov rdx, qword [0x1401614f0]
lea rcx, [rbp - 0x80]
call fcn.140019530
mov rdx, rax
lea rcx, [0x1401619a0]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x140161970]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [rbx - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x140161970]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x1401619b8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
lea rdx, [rsi - 5]
lea rcx, [rbp - 0x80]
call fcn.140019cc0
mov rdx, rax
lea rcx, [0x1401619b8]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001c750
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
lea r9d, [rdx + 5]
mov r8, qword [0x1401615b0]
lea rdx, [rbp]
call fcn.140019650
mov rbx, rax
lea rdx, [0x1401619b8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r9d, 1
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140019750
mov rdx, rax
lea rcx, [0x1401619b8]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x1401619b8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
lea r8, [rbx + 4]
mov r9d, 1
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140019750
mov rdx, rax
lea rcx, [0x1401619b8]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
lea rdx, [0x1401619b8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
lea r8, [rbx + 8]
mov r9d, 1
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140019750
mov rdx, rax
lea rcx, [0x1401619b8]
call fcn.14002d0c0
lea rcx, [rbp - 0x80]
call fcn.14002d060
mov dword [rbp + 0x488], 0x3f800000
mov dword [rbp + 0x480], 0x3f800000
cmp byte [0x1401613cc], 0
jne 0x14001c8d0
movss xmm0, dword [0x140160204]
movss dword [rbp + 0x488], xmm0
movss xmm1, dword [0x140160110]
movss dword [rbp + 0x480], xmm1
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x488]
mov rdx, qword [0x140161518]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x140161350]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rdx, [0x1401619b8]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, r14
mov rcx, qword [0x1401614f0]
call fcn.14001a470
lea rdx, [0x140161970]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov r8, rax
mov rdx, rdi
mov rcx, qword [0x1401614f0]
call fcn.14001a470
mov rcx, qword [0x140161528]
test rcx, rcx
je 0x14001d0f0
cmp dword [0x1401613c0], 1
jne 0x14001d0f0
mov rax, qword [0x1401619d8]
cmp qword [0x1401619d0], rax
je 0x14001d0f0
mov r12, qword [0x140161558]
add r12, rcx
lea rdx, [0x140161898]
lea rcx, [rsp + 0x48]
call fcn.14002d160
mov rdx, rax
mov rcx, r12
call fcn.140019960
mov r15, rax
mov r9, qword [0x1401619d8]
sub r9, qword [0x1401619d0]
sar r9, 2
lea rcx, [rbp]
lea rax, [rbp + 0x240]
mov edx, 4
nop
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x14001c9e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov eax, dword [0x1401613c0]
mov dword [rsp + 0x20], eax
lea rdx, [rbp]
mov rcx, qword [0x1401614f0]
call fcn.1400199e0
mov r14, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov rdx, r13
mov qword [rsp + 0x40], rdx
mov rax, qword [0x1401619d8]
sub rax, qword [0x1401619d0]
sar rax, 2
test rax, rax
je 0x14001caea
movabs rcx, 0x3fffffffffffffff
cmp rax, rcx
ja 0x14001d1b1
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140035190
mov rdi, qword [rsp + 0x30]
mov rbx, qword [0x1401619d8]
mov rdx, qword [0x1401619d0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x38], rax
mov rdx, qword [rsp + 0x40]
jmp 0x14001caef
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
sub rax, rcx
sar rax, 2
lea rbx, [r14 - 5]
add rbx, rax
test rcx, rcx
je 0x14001cb51
sub rdx, rcx
sar rdx, 2
lea rdx, [rdx*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cb3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cb3e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r13
mov rsi, r14
sub rsi, r12
sub r15, rbx
lea rax, [r14 + 0x1000]
mov qword [0x140161708], rax
mov qword [0x1401616f0], r12
mov qword [0x1401614d8], r14
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x1401619f8]
sub rdx, qword [0x1401619f0]
sar rdx, 2
test rdx, rdx
je 0x14001cbe6
movabs rax, 0x3fffffffffffffff
cmp rdx, rax
ja 0x14001d1b7
lea rcx, [rsp + 0x68]
call fcn.140035190
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x1401619f8]
mov rdx, qword [0x1401619f0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
mov r8, qword [0x140161528]
add r8, qword [0x140161558]
lea r9, [rsp + 0x68]
mov rdx, qword [0x1401614f0]
lea rcx, [rbp - 0x50]
call fcn.140019530
mov rbx, rax
lea rax, [0x1401619f0]
cmp rax, rbx
je 0x14001cca8
mov r8, qword [0x1401619f0]
test r8, r8
je 0x14001cc7d
mov rcx, qword [0x140161a00]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001cc63
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001cce5
mov r8, rcx
mov rcx, r8
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [0x1401619f0], xmm0
mov qword [0x140161a00], r13
mov rax, qword [rbx]
mov qword [0x1401619f0], rax
mov rax, qword [rbx + 8]
mov qword [0x1401619f8], rax
mov rax, qword [rbx + 0x10]
mov qword [0x140161a00], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001ccf1
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ccec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ccec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x1401618a0]
sub rdx, qword [0x140161898]
sar rdx, 2
test rdx, rdx
je 0x14001cd61
movabs rax, 0x3fffffffffffffff
cmp rdx, rax
ja 0x14001d1bd
lea rcx, [rsp + 0x68]
call fcn.140035190
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x1401618a0]
mov rdx, qword [0x140161898]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
lea rdx, [rsi - 5]
lea rcx, [rbp - 0x50]
call fcn.140019cc0
mov rbx, rax
lea rax, [0x140161898]
cmp rax, rbx
je 0x14001ce12
mov r8, qword [0x140161898]
test r8, r8
je 0x14001cde7
mov rcx, qword [0x1401618a8]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001cdcd
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001ce4f
mov r8, rcx
mov rcx, r8
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [0x140161898], xmm0
mov qword [0x1401618a8], r13
mov rax, qword [rbx]
mov qword [0x140161898], rax
mov rax, qword [rbx + 8]
mov qword [0x1401618a0], rax
mov rax, qword [rbx + 0x10]
mov qword [0x1401618a8], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001ce5b
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ce56
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x1401619d8]
sub rdx, qword [0x1401619d0]
sar rdx, 2
movabs rsi, 0x3fffffffffffffff
test rdx, rdx
je 0x14001cecb
cmp rdx, rsi
ja 0x14001d1c3
lea rcx, [rsp + 0x68]
call fcn.140035190
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x1401619d8]
mov rdx, qword [0x1401619d0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
lea rdx, [r15 - 5]
lea rcx, [rbp - 0x50]
call fcn.140019cc0
mov rbx, rax
lea rax, [0x1401619d0]
cmp rax, rbx
je 0x14001cf7c
mov r8, qword [0x1401619d0]
test r8, r8
je 0x14001cf51
mov rcx, qword [0x1401619e0]
sub rcx, r8
sar rcx, 2
lea rdx, [rcx*4]
cmp rdx, 0x1000
jb 0x14001cf37
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x14001cfb9
mov r8, rcx
mov rcx, r8
call fcn.1400f24c0
mov qword [0x1401619d0], r13
xorps xmm0, xmm0
movdqu xmmword [0x1401619d8], xmm0
mov rax, qword [rbx]
mov qword [0x1401619d0], rax
mov rax, qword [rbx + 8]
mov qword [0x1401619d8], rax
mov rax, qword [rbx + 0x10]
mov qword [0x1401619e0], rax
mov qword [rbx], r13
mov qword [rbx + 8], r13
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14001cfd1
mov rax, qword [rbp - 0x40]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cfc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cfc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
mov qword [rbp - 0x50], r13
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp + 0x480], 0x3f19999a
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x480]
mov rdx, qword [0x140161708]
mov rcx, qword [0x1401614f0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r13
mov rdx, qword [0x1401619d8]
sub rdx, qword [0x1401619d0]
sar rdx, 2
test rdx, rdx
je 0x14001d067
cmp rdx, rsi
ja 0x14001d1c9
lea rcx, [rsp + 0x68]
call fcn.140035190
mov rdi, qword [rsp + 0x68]
mov rbx, qword [0x1401619d8]
mov rdx, qword [0x1401619d0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rsp + 0x70], rax
lea r8, [rsp + 0x68]
mov rdx, r14
mov rcx, qword [0x1401614f0]
call fcn.14001a470
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], r13
mov rdx, qword [0x1401618a0]
sub rdx, qword [0x140161898]
sar rdx, 2
test rdx, rdx
je 0x14001d0dc
cmp rdx, rsi
ja 0x14001d163
lea rcx, [rbp - 0x38]
call fcn.140035190
mov rdi, qword [rbp - 0x38]
mov rbx, qword [0x1401618a0]
mov rdx, qword [0x140161898]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea rax, [rdi + rbx*4]
mov qword [rbp - 0x30], rax
lea r8, [rbp - 0x38]
mov rdx, r12
mov rcx, qword [0x1401614f0]
call fcn.14001a470
nop
mov rcx, qword [rbp + 0x490]
test rcx, rcx
je 0x14001d133
mov rdx, qword [rbp + 0x4a0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d12e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d12e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400f24c0
mov rcx, qword [rbp + 0x4a8]
xor rcx, rsp
call fcn.1400f24a0
lea r11, [rsp + 0x5b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140030fb0
nop
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
nop
call fcn.140030fb0
nop
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3
call fcn.140030fb0
int3