Function at 0x140072960
Capabilities:
Enumerate process modules
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xaa8
mov qword [rsp + 0x128], r8
mov qword [rsp + 0xa8], rdx
mov rax, qword [rcx + 8]
lea rbx, [rax - 1]
test rax, rax
cmove rbx, rax
mov rax, qword [0x1401323d0]
test rax, rax
jne 0x140072e7c
movzx eax, byte [0x140132410]
mov ecx, 0x8c0
mov edx, 8
call fcn.140007210
test rax, rax
je 0x1400742db
mov qword [rsp + 0x38], rax
mov qword [rsp + 0xb0], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
mov ecx, 8
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
cmp rax, 0xffffffffffffffff
je 0x140072d48
mov r15, rax
lea rsi, [rsp + 0x670]
mov r8d, 0x438
mov rcx, rsi
xor edx, edx
call sub.msvcrt.dll_memset
mov dword [rsp + 0x670], 0x438
mov rcx, r15
mov rdx, rsi
call sub.KERNEL32.dll_Module32FirstW
cmp eax, 1
jne 0x140072d40
lea r14, [rsp + 0xaa8]
mov eax, 8
mov qword [rsp + 0x40], rax
xor esi, esi
jmp 0x140072ad9
mov r13, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x58]
sub rcx, rax
mov rax, rsi
shl rax, 6
mov qword [r8 + rax], rcx
mov rcx, qword [rsp + 0x50]
mov qword [r8 + rax + 8], rcx
mov qword [r8 + rax + 0x10], 1
mov qword [r8 + rax + 0x18], 1
mov qword [r8 + rax + 0x20], rdi
mov qword [r8 + rax + 0x28], r13
mov qword [r8 + rax + 0x30], r12
mov byte [r8 + rax + 0x38], bpl
mov ecx, dword [rsp + 0x210]
mov edx, dword [rsp + 0x213]
mov dword [r8 + rax + 0x39], ecx
mov qword [rsp + 0x40], r8
mov dword [r8 + rax + 0x3c], edx
inc rsi
mov qword [rsp + 0xc0], rsi
nop dword [rax + rax]
mov rcx, r15
lea rdx, [rsp + 0x670]
call sub.KERNEL32.dll_Module32NextW
cmp eax, 1
jne 0x140072d40
xor r8d, r8d
nop dword [rax]
cmp word [rsp + r8*2 + 0x8a0], 0
je 0x140072b40
lea rax, [rsp + r8*2]
add rax, 0x8a0
cmp word [rax + 2], 0
je 0x140072b27
cmp word [rax + 4], 0
je 0x140072b2c
cmp word [rax + 6], 0
je 0x140072b32
cmp word [rax + 8], 0
je 0x140072b38
add r8, 5
add rax, 0xa
cmp rax, r14
jne 0x140072ae0
mov r8d, 0x104
jmp 0x140072b40
inc r8
jmp 0x140072b40
add r8, 2
jmp 0x140072b40
add r8, 3
jmp 0x140072b40
add r8, 4
nop dword [rax]
lea rcx, [rsp + 0x440]
lea rdx, [rsp + 0x8a0]
call fcn.1400713f0
mov rdi, qword [rsp + 0x440]
mov r12, qword [rsp + 0x450]
lea rcx, [rsp + 0x210]
mov rdx, rdi
mov r8, r12
call fcn.140074680
cmp qword [rsp + 0x210], 0
je 0x140072c40
mov r13, qword [rsp + 0x218]
mov rbp, qword [rsp + 0x220]
mov rax, qword [rsp + 0x228]
cmp rax, 0x40
jb 0x140072c30
test rbp, rbp
je 0x140072c30
movzx ecx, word [rbp]
cmp ecx, 0x5a4d
jne 0x140072c30
mov edx, dword [rbp + 0x3c]
mov rcx, rax
sub rcx, rdx
setb r8b
lea r9, [rdx + rbp]
cmp rcx, 0x88
setb cl
or cl, r8b
mov ecx, 0
cmove rcx, r9
jne 0x140072c30
cmp dword [rcx], 0x4550
jne 0x140072c30
movzx r8d, word [rcx + 0x18]
cmp r8d, 0x20b
jne 0x140072c30
movzx r8d, word [rcx + 0x14]
cmp r8, 0x70
jb 0x140072c30
add rdx, 0x88
sub rax, rdx
jb 0x140072c30
add r8, 0xffffffffffffff90
cmp rax, r8
jb 0x140072c30
mov eax, dword [rcx + 0x84]
shl rax, 3
cmp rax, r8
jbe 0x140072c65
nop dword [rax]
mov rcx, rbp
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
cmp qword [rsp + 0x448], 0
je 0x140072ac0
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapFree
jmp 0x140072ac0
mov rax, qword [rcx + 0x30]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x28], rax
movzx eax, byte [0x140132410]
mov ecx, 0x10
mov edx, 8
call fcn.140007210
test rax, rax
je 0x1400742fa
mov ecx, dword [rsp + 0x690]
mov rdx, qword [rsp + 0x30]
mov qword [rax], rdx
mov qword [rsp + 0x50], rax
mov qword [rax + 8], rcx
movzx edx, byte [rsp + 0x458]
lea rcx, [rsp + 0x459]
mov eax, dword [rcx]
mov ecx, dword [rcx + 3]
mov dword [rsp + 0x210], eax
mov dword [rsp + 0x213], ecx
mov rcx, rbp
mov ebp, edx
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, r13
call sub.KERNEL32.dll_CloseHandle
cmp bpl, 2
je 0x140072ac0
cmp rsi, qword [rsp + 0xb8]
mov r8, qword [rsp + 0x40]
jne 0x140072a46
lea rcx, [rsp + 0xb0]
mov rdx, rsi
mov r13, qword [rsp + 0x28]
call fcn.1400748f0
mov rax, qword [rsp + 0x30]
mov r8, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xc0]
jmp 0x140072a50
mov rcx, r15
call sub.KERNEL32.dll_CloseHandle
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x680], rax
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x670], xmm0
mov rsi, qword [0x1401323d0]
test rsi, rsi
je 0x140072e35
mov rdi, qword [0x1401323e0]
test rdi, rdi
je 0x140072dcc
lea r14, [rsi + 0x28]
jmp 0x140072d99
add r14, 0x40
dec rdi
je 0x140072dcc
cmp qword [r14], 0
je 0x140072db1
mov r8, qword [r14 - 8]
mov rcx, qword [0x140132378]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
cmp qword [r14 - 0x18], 0
je 0x140072d90
mov r8, qword [r14 - 0x20]
mov rcx, qword [0x140132378]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x140072d90
cmp qword [0x1401323d8], 0
je 0x140072de7
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [0x1401323e8]
mov r14, qword [0x1401323f8]
lea rcx, [rsi + 8]
inc r14
nop dword [rax]
cmp r14, 1
je 0x140072e1a
lea rdi, [rcx + 0x230]
dec r14
call fcn.1400749b0
mov rcx, rdi
jmp 0x140072e00
cmp qword [0x1401323f0], 0
je 0x140072e35
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, rsi
call sub.KERNEL32.dll_HeapFree
mov rax, qword [rsp + 0x680]
mov qword [0x1401323e0], rax
movaps xmm0, xmmword [rsp + 0x670]
movups xmmword [0x1401323d0], xmm0
mov rax, qword [rsp + 0x38]
mov qword [0x1401323e8], rax
mov qword [0x1401323f0], 4
mov qword [0x1401323f8], 0
mov rax, qword [0x1401323d0]
mov rdx, qword [0x1401323e0]
test rdx, rdx
je 0x14007410b
mov rcx, rdx
shl rcx, 6
add rcx, rax
xor r15d, r15d
mov r8, rax
mov r13, qword [r8]
mov r10, qword [r8 + 8]
mov r9, qword [r8 + 0x18]
add r8, 0x40
shl r9, 4
nop
test r9, r9
je 0x140072ee0
mov r11, r10
add r10, 0x10
mov rsi, qword [r11]
add rsi, r13
add r9, 0xfffffffffffffff0
cmp rsi, rbx
ja 0x140072eb0
add rsi, qword [r11 + 8]
cmp rsi, rbx
jbe 0x140072eb0
jmp 0x140072eed
inc r15
cmp r8, rcx
jne 0x140072e9c
jmp 0x14007410b
mov rdi, qword [0x1401323f8]
test rdi, rdi
je 0x140072f29
mov r12, qword [0x1401323e8]
imul rcx, rdi, 0x230
xor r8d, r8d
xor r14d, r14d
nop dword [rax]
cmp qword [r12 + r8], r15
je 0x14007313c
inc r14
add r8, 0x230
cmp rcx, r8
jne 0x140072f10
cmp rdx, r15
jbe 0x140073fb2
mov rcx, r15
shl rcx, 6
mov rdx, qword [rax + rcx + 0x20]
mov r8, qword [rax + rcx + 0x30]
lea rcx, [rsp + 0x670]
call fcn.140074680
cmp qword [rsp + 0x670], 0
je 0x14007410b
mov r14, qword [rsp + 0x678]
mov r12, qword [rsp + 0x680]
mov rdi, qword [rsp + 0x688]
mov qword [rsp + 0x130], 8
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x148], 8
movups xmmword [rsp + 0x150], xmm0
xor eax, eax
cmp rdi, 0x40
cmovae rax, r12
jb 0x1400740ee
movzx ecx, word [rax]
cmp ecx, 0x5a4d
jne 0x1400740ee
mov ecx, dword [rax + 0x3c]
mov rax, rdi
sub rax, rcx
setb dl
lea r8, [r12 + rcx]
cmp rax, 0x88
setb r9b
xor eax, eax
or r9b, dl
cmove rax, r8
jne 0x1400740ee
cmp dword [rax], 0x4550
jne 0x1400740ee
movzx edx, word [rax + 0x18]
cmp edx, 0x20b
jne 0x1400740ee
movzx edx, word [rax + 0x14]
cmp rdx, 0x70
jb 0x1400740ee
add rcx, 0x88
mov r8, rdi
sub r8, rcx
jb 0x1400740ee
add rdx, 0xffffffffffffff90
cmp r8, rdx
jb 0x1400740ee
mov r8d, dword [rax + 0x84]
shl r8, 3
cmp r8, rdx
ja 0x1400740ee
add rdx, rcx
movzx ecx, word [rax + 6]
lea r8, [rcx*8]
lea r8, [r8 + r8*4]
mov r9, rdi
sub r9, rdx
setb r10b
add rdx, r12
cmp r9, r8
setb r8b
xor ebp, ebp
or r8b, r10b
mov r10d, 0x1f
cmove r10, rcx
cmove rbp, rdx
jne 0x1400740ee
mov ecx, dword [rax + 0xc]
test rcx, rcx
je 0x140073fc3
mov edx, dword [rax + 0x10]
mov qword [rsp + 0x30], rdx
add rdx, rdx
lea r11, [rdx + rdx*8]
mov rdx, rdi
sub rdx, rcx
setb r8b
lea r9, [r12 + rcx]
cmp rdx, r11
setb dl
xor esi, esi
or dl, r8b
cmove rsi, r9
jne 0x1400740ee
add r11, rcx
mov rcx, rdi
sub rcx, r11
jb 0x1400740ee
cmp rcx, 4
jb 0x1400740ee
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x28], r10
mov ecx, dword [r12 + r11]
mov qword [rsp + 0x48], r11
add rcx, r11
mov qword [rsp + 0x80], rcx
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xb0], 8
movups xmmword [rsp + 0xb8], xmm0
cmp qword [rsp + 0x30], 0
je 0x140074002
mov eax, 8
xor edx, edx
xor esi, esi
mov qword [rsp + 0x78], rbp
jmp 0x140073f18
test r14, r14
je 0x1400731dd
imul r15, r14, 0x230
lea rsi, [r12 + r15]
lea rcx, [rsp + 0x210]
mov r8d, 0x230
mov rdx, rsi
call sub.msvcrt.dll_memcpy
lea rdx, [r12 + r15]
add rdx, 0x230
not r14
add r14, rdi
imul r8, r14, 0x230
mov rcx, rsi
call sub.msvcrt.dll_memmove
lea rsi, [rdi - 1]
mov qword [0x1401323f8], rsi
cmp rsi, qword [0x1401323f0]
jne 0x1400731a9
mov rcx, rsi
call fcn.140079840
mov r12, qword [0x1401323e8]
lea rcx, [r12 + 0x230]
imul r8, rsi, 0x230
mov rdx, r12
call sub.msvcrt.dll_memmove
lea rdx, [rsp + 0x210]
mov r8d, 0x230
mov rcx, r12
call sub.msvcrt.dll_memcpy
mov qword [0x1401323f8], rdi
sub rbx, r13
lea r14, [rbx + 1]
mov r15, qword [r12 + 0x160]
mov rdx, qword [r12 + 0x168]
xor ecx, ecx
test rdx, rdx
je 0x140073254
mov r8d, 0xff
mov rax, rdx
mov r9, rdx
jmp 0x140073218
mov r9, rax
sub rax, rcx
jbe 0x140073254
shr rax, 1
add rax, rcx
mov r11, rax
shl r11, 5
xor r10d, r10d
cmp qword [r15 + r11], r14
setne r10b
cmovb r10d, r8d
cmp r10b, 1
je 0x140073210
movzx ecx, r10b
inc rax
cmp ecx, 0xff
jne 0x140073251
mov rcx, rax
mov rax, r9
jmp 0x140073213
mov rcx, rax
cmp rcx, rdx
ja 0x1400742ec
mov eax, 3
test rcx, rcx
mov qword [rsp + 0x68], r12
je 0x1400736b2
lea rsi, [r12 + 0x158]
shl rcx, 5
lea r12, [rcx + r15]
add r12, 0xffffffffffffffe0
neg rcx
jmp 0x14007329e
add r12, 0xffffffffffffffe0
add rcx, 0x20
je 0x1400736ad
cmp qword [r12 + 0x18], rbx
jbe 0x1400736ad
cmp qword [r12 + 8], rbx
jbe 0x140073290
cmp r14, qword [r12]
jbe 0x140073290
mov rcx, qword [r12 + 0x10]
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax + 0x178]
cmp rcx, rdx
jae 0x1400742cd
imul rdi, rcx, 0x218
add rdi, qword [rax + 0x170]
lea rcx, [rsp + 0x210]
mov rdx, rdi
mov r8, rsi
call fcn.140079920
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc0], rbx
mov qword [rsp + 0xb8], rsi
cmp qword [rsp + 0x240], 0
je 0x1400733d9
lea rax, [rsp + 0x240]
movups xmm0, xmmword [rsp + 0x210]
movups xmm1, xmmword [rsp + 0x220]
movups xmm2, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x690], xmm2
movaps xmmword [rsp + 0x680], xmm1
movaps xmmword [rsp + 0x670], xmm0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x450], rcx
movups xmm0, xmmword [rax]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x458], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x460], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x468], rax
movaps xmmword [rsp + 0x6a0], xmm0
mov rax, qword [rsp + 0x450]
mov qword [rsp + 0x6b0], rax
mov rax, qword [rsp + 0x458]
mov qword [rsp + 0x6b8], rax
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x6c0], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x6c8], rax
jmp 0x140073402
lea rcx, [rsp + 0x670]
lea rdx, [rsp + 0xb0]
lea r8, [rsp + 0x210]
call fcn.140079cb0
mov qword [rsp + 0x6a0], 0
mov qword [rsp + 0x440], rbx
mov qword [rsp + 0x448], rdi
mov qword [rsp + 0x450], rsi
mov qword [rsp + 0x458], rsi
mov qword [rsp + 0x460], rbx
mov qword [rsp + 0x468], r14
mov qword [rsp + 0x470], r15
mov qword [rsp + 0x478], r12
mov qword [rsp + 0x480], r14
mov qword [rsp + 0x488], rbx
mov byte [rsp + 0x490], 0
lea rcx, [rsp + 0x210]
lea rdx, [rsp + 0x670]
lea r8, [rsp + 0x440]
call fcn.14007cda0
cmp byte [rsp + 0x2c0], 2
je 0x1400736a6
lea r14, [rsp + 0x171]
lea rdi, [rsp + 0x470]
lea r15, [rsp + 0x440]
lea r12, [rsp + 0x670]
lea r13, [rsp + 0xb0]
lea rbp, [rsp + 0x160]
lea rsi, [rsp + 0x210]
nop dword [rax]
movups xmm0, xmmword [rsp + 0x210]
movups xmm1, xmmword [rsp + 0x220]
movups xmm2, xmmword [rsp + 0x230]
movaps xmmword [rsp + 0x690], xmm2
movaps xmmword [rsp + 0x680], xmm1
movaps xmmword [rsp + 0x670], xmm0
mov r8d, 0x88
mov rcx, r15
lea rdx, [rsp + 0x240]
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x670]
lock dec qword [rax]
jne 0x14007351c
mov rcx, r12
call fcn.14007d420
movups xmm0, xmmword [rsp + 0x440]
movups xmm1, xmmword [rsp + 0x450]
movups xmm2, xmmword [rsp + 0x460]
movaps xmmword [rsp + 0x670], xmm0
movaps xmmword [rsp + 0x680], xmm1
movaps xmmword [rsp + 0x690], xmm2
mov rax, qword [rsp + 0x670]
mov rcx, qword [rsp + 0x680]
movzx edx, byte [rax + 0x200]
cmp edx, 0x4b
je 0x140073581
cmp edx, 0x4c
jne 0x1400735ad
mov byte [rax + 0x200], 0x4b
mov qword [rax + 0x208], 0
jmp 0x14007359f
mov r8, qword [rax + 0x208]
test r8, r8
je 0x14007359f
mov rcx, qword [r8]
add rcx, 0x10
add r8, 8
mov dl, 2
mov rax, r8
jmp 0x1400735a8
mov rcx, qword [rcx]
add rcx, 0x10
xor edx, edx
xor r8d, r8d
jmp 0x1400735dd
mov rcx, qword [rax + 0x200]
movzx edx, byte [rax + 0x208]
mov r8d, dword [rax + 0x20c]
mov dword [rsp + 0xb3], r8d
mov eax, dword [rax + 0x209]
mov dword [rsp + 0xb0], eax
mov r8d, 1
mov r9d, dword [rsp + 0xb0]
mov r10d, dword [rsp + 0xb3]
mov dword [r14 + 3], r10d
mov dword [r14], r9d
mov qword [rsp + 0x160], r8
mov qword [rsp + 0x168], rcx
mov byte [rsp + 0x170], dl
mov qword [rsp + 0x178], rax
mov rcx, r13
lea rdx, [rsp + 0x688]
mov r8, rbp
call fcn.140079cb0
mov qword [rsp + 0xe0], 0
mov rax, qword [rdi + 0x50]
mov qword [rsp + 0x1b0], rax
movups xmm0, xmmword [rdi + 0x40]
movaps xmmword [rsp + 0x1a0], xmm0
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmm2, xmmword [rdi + 0x20]
movups xmm3, xmmword [rdi + 0x30]
movaps xmmword [rsp + 0x190], xmm3
movaps xmmword [rsp + 0x180], xmm2
movaps xmmword [rsp + 0x170], xmm1
movaps xmmword [rsp + 0x160], xmm0
mov rcx, r12
mov rdx, r13
mov r8, rbp
call fcn.14007cda0
mov r8d, 0xb8
mov rcx, rsi
mov rdx, r12
call sub.msvcrt.dll_memcpy
cmp byte [rsp + 0x2c0], 2
jne 0x1400734c0
mov eax, dword [rsp + 0x210]
mov r12, qword [rsp + 0x68]
cmp eax, 5
je 0x140073e29
mov rcx, qword [rsp + 0x248]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x250]
mov qword [rsp + 0x60], rcx
lea ecx, [rax - 3]
cmp ecx, 2
mov edx, 2
cmovb edx, ecx
test edx, edx
je 0x140073813
mov r8d, dword [rsp + 0x214]
mov r10d, dword [rsp + 0x218]
mov r14d, dword [rsp + 0x21c]
mov r9, qword [rsp + 0x220]
mov qword [rsp + 0x30], r9
mov r9, qword [rsp + 0x228]
mov qword [rsp + 0x28], r9
mov rsi, qword [rsp + 0x230]
mov r9, qword [rsp + 0x238]
mov qword [rsp + 0x110], r9
mov r9, qword [rsp + 0x240]
mov qword [rsp + 0x120], r9
mov r9, qword [rsp + 0x258]
mov qword [rsp + 0x98], r9
mov r11, qword [rsp + 0x260]
lea r9, [rsi + 0x60]
mov qword [rsp + 0x90], r9
lea r9, [rsi + 0x1b8]
mov qword [rsp + 0x88], r9
lea r9, [rsi + 0x1c0]
mov qword [rsp + 0x118], r9
lea r9, [r12 + 0x190]
mov qword [rsp + 0x80], r9
cmp edx, 1
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r11
jne 0x14007381a
mov qword [rsp + 0x78], r8
shl r14, 0x20
or r14, r10
mov eax, 2
mov qword [rsp + 0x40], rax
mov eax, 3
mov qword [rsp + 0x38], rax
cmp ecx, 2
jb 0x1400737eb
cmp qword [rsp + 0x60], 0
je 0x1400737eb
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
mov r12, rsi
mov rsi, qword [rsp + 0x28]
mov r13, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x80]
mov rdx, rbx
call fcn.14007f9d0
mov rbp, rax
mov rdi, rdx
jmp 0x140073a42
xor esi, esi
jmp 0x140073e00
mov qword [rsp + 0x40], r10
mov eax, eax
mov r14, r8
shl r14, 0x20
or r14, rax
mov r13, qword [rsp + 0x58]
shl r13, 0x20
add r13, qword [rsp + 0x40]
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0x98]
je 0x140073907
mov rsi, qword [rax - 8]
mov eax, dword [rsi + 0x28]
mov ecx, dword [rsi + 0x2c]
xor edx, edx
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x78], rax
test eax, eax
setne dil
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x58], rcx
test ecx, ecx
setne bpl
cmp qword [rsi], 0
je 0x1400739fb
mov rax, qword [rsp + 0x90]
cmp dword [rax], 0x2f
je 0x1400739fb
mov r15, qword [rsi + 8]
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x1b0], 0
jne 0x1400739ac
lea rcx, [rsp + 0x670]
mov rdx, qword [rsp + 0x90]
call fcn.14007d4c0
mov r12, qword [rsp + 0x48]
lea rcx, [rsp + 0x210]
lea r8, [rsp + 0x670]
mov rdx, r12
mov r9, qword [rsp + 0x110]
call fcn.14007d8f0
cmp qword [r12 + 0x1b0], 0
je 0x140073981
lea rcx, [rsp + 0x210]
call fcn.14007f900
jmp 0x1400739ac
mov qword [rsp + 0x78], r8
mov rax, qword [rsp + 0x120]
mov rbp, qword [rax + 0x28]
test rbp, rbp
je 0x140073930
mov rdi, qword [rax + 0x30]
mov rax, qword [rsp + 0x48]
movzx r15d, word [rax + 0x210]
jmp 0x140073935
mov r15w, 2
cmp qword [rsp + 0x60], 0
je 0x140073950
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
mov eax, 3
mov qword [rsp + 0x38], rax
mov r12, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x50], rax
cmp r15w, 2
je 0x1400737f8
jmp 0x140073a42
movups xmm0, xmmword [rsp + 0x210]
movups xmm1, xmmword [rsp + 0x220]
mov rax, qword [rsp + 0x88]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [r12 + 0x1b0], 1
xor ecx, ecx
mov rax, qword [rsp + 0x88]
cmp qword [rax], 0
cmove rax, qword [rsp + 0x118]
mov edx, 1
cmove rcx, rdx
test rcx, rcx
je 0x1400739de
cmp byte [rax], 0x4b
jne 0x140073ea5
mov rax, qword [rax + 8]
test rax, rax
je 0x1400739fb
cmp r15, qword [rax + 8]
jae 0x1400739fb
mov rcx, qword [rax]
lea rdx, [r15 + r15*2]
mov rax, qword [rcx + rdx*8]
mov rcx, qword [rcx + rdx*8 + 0x10]
jmp 0x1400739fd
xor eax, eax
add qword [rsp + 0x50], 0xfffffffffffffff8
mov rdx, qword [rsp + 0x38]
mov dl, dil
mov qword [rsp + 0x38], rdx
mov rdx, qword [rsp + 0x40]
mov dl, bpl
mov qword [rsp + 0x40], rdx
mov rbp, qword [rsi + 0x18]
test rbp, rbp
je 0x140073e87
mov rdi, qword [rsi + 0x20]
mov r12, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x670], r14
mov qword [rsp + 0x678], r13
mov qword [rsp + 0x680], rsi
mov qword [rsp + 0x688], r12
mov qword [rsp + 0x690], rbx
mov qword [rsp + 0x698], rbp
mov qword [rsp + 0x6a0], rdi
mov rax, qword [rsp + 0x128]
mov rax, qword [rax + 0x20]
lea rdx, [rsp + 0x670]
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0xa0], rax
call rax
lea r15, [rsp + 0x670]
jmp 0x140073b1a
mov rbp, qword [rsi + 0x20]
mov r14, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
nop word cs:[rax + rax]
mov qword [rsp + 0x670], r13
mov qword [rsp + 0x678], r12
mov qword [rsp + 0x680], rsi
mov qword [rsp + 0x688], r14
mov qword [rsp + 0x690], rbx
mov qword [rsp + 0x698], rdi
mov qword [rsp + 0x6a0], rbp
mov rcx, qword [rsp + 0xa8]
mov rdx, r15
call qword [rsp + 0xa0]
mov rax, qword [rsp + 0x38]
lea ecx, [rax - 3]
cmp ecx, 2
mov eax, 2
cmovb eax, ecx
cmp eax, 1
je 0x140073c30
cmp eax, 2
jne 0x140073df8
mov eax, dword [rsp + 0x38]
mov r13, qword [rsp + 0x78]
shl r13, 0x20
or r13, rax
mov eax, dword [rsp + 0x40]
mov r12, qword [rsp + 0x58]
shl r12, 0x20
or r12, rax
mov rax, qword [rsp + 0x50]
cmp rax, qword [rsp + 0x98]
je 0x140073c9e
mov rsi, qword [rax - 8]
mov eax, dword [rsi + 0x28]
mov ecx, dword [rsi + 0x2c]
xor edx, edx
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x78], rax
test eax, eax
setne dil
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x58], rcx
test ecx, ecx
setne bpl
cmp qword [rsi], 0
je 0x140073db0
mov rax, qword [rsp + 0x90]
cmp dword [rax], 0x2f
je 0x140073db0
mov r14, qword [rsi + 8]
mov rax, qword [rsp + 0x48]
cmp qword [rax + 0x1b0], 0
jne 0x140073d55
mov rcx, r15
mov rdx, qword [rsp + 0x90]
call fcn.14007d4c0
mov r8, r15
mov r15, qword [rsp + 0x48]
lea rcx, [rsp + 0x210]
mov rdx, r15
mov r9, qword [rsp + 0x110]
call fcn.14007d8f0
cmp qword [r15 + 0x1b0], 0
je 0x140073d23
lea rcx, [rsp + 0x210]
call fcn.14007f900
jmp 0x140073d4d
mov eax, dword [rsp + 0x40]
mov r13, qword [rsp + 0x58]
shl r13, 0x20
or r13, rax
mov eax, 2
mov qword [rsp + 0x40], rax
mov eax, 3
mov qword [rsp + 0x38], rax
cmp ecx, 2
jb 0x140073c74
cmp qword [rsp + 0x60], 0
je 0x140073c74
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
mov r14, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x80]
mov rdx, rbx
call fcn.14007f9d0
mov rdi, rax
mov rbp, rdx
jmp 0x140073ad0
mov rax, qword [rsp + 0x120]
mov rdi, qword [rax + 0x28]
test rdi, rdi
je 0x140073d14
mov rbp, qword [rax + 0x30]
mov rax, qword [rsp + 0x48]
movzx r15d, word [rax + 0x210]
cmp qword [rsp + 0x60], 0
je 0x140073cdb
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
mov eax, 3
mov qword [rsp + 0x38], rax
mov r14, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x50], rax
cmp r15w, 2
lea r15, [rsp + 0x670]
jne 0x140073ad0
jmp 0x140073c83
mov r15w, 2
cmp qword [rsp + 0x60], 0
jne 0x140073cc8
jmp 0x140073cdb
movups xmm0, xmmword [rsp + 0x210]
movups xmm1, xmmword [rsp + 0x220]
mov rax, qword [rsp + 0x88]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax], xmm0
mov qword [r15 + 0x1b0], 1
lea r15, [rsp + 0x670]
mov rax, qword [rsp + 0x88]
cmp qword [rax], 0
cmove rax, qword [rsp + 0x118]
mov ecx, 0
mov edx, 1
cmove rcx, rdx
test rcx, rcx
je 0x140073d8a
cmp byte [rax], 0x4b
jne 0x140073ea0
mov rax, qword [rax + 8]
test rax, rax
je 0x140073db0
cmp r14, qword [rax + 8]
jae 0x140073db0
mov rcx, qword [rax]
lea rdx, [r14 + r14*2]
mov rax, qword [rcx + rdx*8]
mov rcx, qword [rcx + rdx*8 + 0x10]
jmp 0x140073db2
xor eax, eax
add qword [rsp + 0x50], 0xfffffffffffffff8
mov rdx, qword [rsp + 0x38]
mov dl, dil
mov qword [rsp + 0x38], rdx
mov rdx, qword [rsp + 0x40]
mov dl, bpl
mov qword [rsp + 0x40], rdx
mov rdi, qword [rsi + 0x18]
test rdi, rdi
jne 0x140073aaa
mov r14, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
jmp 0x140073c83
mov sil, 1
mov r12, qword [rsp + 0x68]
cmp ecx, 2
jb 0x140073e20
cmp qword [rsp + 0x60], 0
je 0x140073e20
mov rcx, qword [0x140132378]
xor edx, edx
mov r8, qword [rsp + 0x70]
call sub.KERNEL32.dll_HeapFree
test sil, sil
jne 0x14007410b
add r12, 0x190
mov rcx, r12
mov rdx, rbx
call fcn.14007f9d0
test rax, rax
je 0x14007410b
mov dword [rsp + 0x670], 3
mov qword [rsp + 0x678], rax
mov qword [rsp + 0x680], rdx
mov qword [rsp + 0x688], rbx
lea rdx, [rsp + 0x670]
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0x128]
call qword [rax + 0x20]
jmp 0x14007410b
mov r12, qword [rsp + 0x28]
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
jmp 0x1400737f8
mov sil, 1
jmp 0x140073ea7
xor esi, esi
cmp qword [rsp + 0x60], 0
mov r12, qword [rsp + 0x68]
jne 0x140073e0d
jmp 0x140073e20
mov rax, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xc0]
add rbp, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x50]
add r8, rbp
mov rcx, rdx
shl rcx, 4
mov qword [rax + rcx], r8
mov r8, qword [rsp + 0x58]
mov qword [rax + rcx + 8], r8
inc rdx
mov qword [rsp + 0xc0], rdx
mov rbp, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x38]
add rsi, rcx
inc rsi
cmp rsi, qword [rsp + 0x30]
jae 0x140073ff8
lea rcx, [rsi + rsi*8]
mov r9, qword [rsp + 0x40]
movzx r8d, byte [r9 + rcx*2 + 0x11]
mov qword [rsp + 0x38], r8
movzx r8d, word [r9 + rcx*2 + 0xc]
test r8, r8
je 0x140073f02
movzx r9d, word [r9 + rcx*2 + 0xe]
and r9d, 0x30
cmp r9w, 0x20
jne 0x140073f02
dec r8
lea r9, [r8 + r8*4]
lea r9, [r9*8]
add r9, rbp
cmp r8, qword [rsp + 0x28]
mov r8d, 0x1d
cmovae r9, r8
jae 0x1400742a3
test r9, r9
je 0x1400742a3
mov r8, qword [rsp + 0x40]
lea rcx, [r8 + rcx*2]
mov qword [rsp + 0x58], rcx
mov ebp, dword [rcx + 8]
mov ecx, dword [r9 + 0xc]
mov qword [rsp + 0x50], rcx
cmp rdx, qword [rsp + 0xb8]
jne 0x140073ecd
lea rcx, [rsp + 0xb0]
call fcn.1400755d0
jmp 0x140073ebd
lea r8, [0x140122068]
mov rcx, r15
call fcn.140031320
ud2
mov qword [rsp + 0x28], r10
mov qword [rsp + 0xb0], 8
movups xmmword [rsp + 0xb8], xmm0
mov ecx, 8
xor eax, eax
mov qword [rsp + 0x80], rax
xor eax, eax
mov qword [rsp + 0x48], rax
xor esi, esi
xor edx, edx
jmp 0x14007400c
mov rcx, qword [rsp + 0xb0]
jmp 0x140074009
xor edx, edx
mov ecx, 8
mov rsi, r12
test rdx, rdx
je 0x14007401b
bsr rax, rdx
xor rax, 0x3f
jmp 0x140074020
mov eax, 0x40
mov r9d, 0x40
sub r9d, eax
xor r8d, r8d
call fcn.140074a70
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x1e8], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmmword [rsp + 0x1d8], xmm0
mov qword [rsp + 0x1b8], r12
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x1c8], rbp
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x1f0], rsi
mov qword [rsp + 0x1f8], rdi
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x160], 0
mov qword [rsp + 0xb0], 0
lea rcx, [rsp + 0x670]
lea rdx, [rsp + 0x1b8]
lea r8, [rsp + 0x160]
lea r9, [rsp + 0xb0]
call fcn.140075690
movzx esi, byte [rsp + 0x670]
cmp sil, 0x17
jne 0x140074120
lea rcx, [rsp + 0x130]
call fcn.140079780
mov rcx, r12
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, r14
call sub.KERNEL32.dll_CloseHandle
nop
add rsp, 0xaa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, [rsp + 0x671]
lea rcx, [rsp + 0x441]
mov r8d, 0x1df
call sub.msvcrt.dll_memcpy
movups xmm0, xmmword [rsp + 0x130]
movups xmm1, xmmword [rsp + 0x140]
movups xmm2, xmmword [rsp + 0x150]
movups xmmword [rsp + 0x638], xmm0
movups xmmword [rsp + 0x648], xmm1
movups xmmword [rsp + 0x658], xmm2
mov byte [rsp + 0x440], sil
mov qword [rsp + 0x620], r14
mov qword [rsp + 0x628], r12
mov qword [rsp + 0x630], rdi
mov r14, qword [0x1401323f8]
cmp r14, 4
jne 0x1400741e8
mov qword [0x1401323f8], 3
mov rsi, qword [0x1401323f0]
mov edx, 0x690
add rdx, qword [0x1401323e8]
lea rcx, [rsp + 0x670]
mov r8d, 0x230
call sub.msvcrt.dll_memcpy
cmp byte [rsp + 0x678], 0x17
je 0x1400741e0
lea rcx, [rsp + 0x678]
call fcn.1400749b0
mov r14d, 3
jmp 0x1400741ef
mov rsi, qword [0x1401323f0]
lea rdi, [rsp + 0x678]
lea rdx, [rsp + 0x440]
mov r8d, 0x228
mov rcx, rdi
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x670], r15
cmp r14, rsi
jne 0x140074222
mov rcx, rsi
call fcn.140079840
mov r12, qword [0x1401323e8]
test r14, r14
je 0x14007427d
lea rcx, [r12 + 0x230]
imul r8, r14, 0x230
mov rdx, r12
call sub.msvcrt.dll_memmove
lea rdx, [rsp + 0x670]
mov r8d, 0x230
mov rcx, r12
call sub.msvcrt.dll_memcpy
inc r14
mov qword [0x1401323f8], r14
jne 0x1400731dd
lea r8, [0x140122080]
xor ecx, ecx
xor edx, edx
call fcn.140031320
ud2
lea rdx, [rsp + 0x670]
mov r8d, 0x230
mov rcx, r12
call sub.msvcrt.dll_memcpy
mov qword [0x1401323f8], 1
jmp 0x1400731dd
cmp qword [rsp + 0xb8], 0
je 0x1400740ee
mov r8, qword [rsp + 0xb0]
mov rcx, qword [0x140132378]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400740ee
lea r8, str._rust_deps_addr2line_0.21.0_srclib.rs
call fcn.140031320
ud2
mov ecx, 8
mov edx, 0x8c0
call fcn.1400077f0
ud2
lea r8, str._rust_deps_addr2line_0.21.0_srclib.rs
call fcn.140031c00
ud2
mov ecx, 8
mov edx, 0x10
call fcn.1400077f0
ud2