Function at 0x14008cf30
Capabilities:
Create process on windows
Create thread
Schedule task via at

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x1f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140164240]
xor rax, rsp
mov qword [rbp + 0x40], rax
xor r12d, r12d
xorps xmm9, xmm9
mov qword [rbp - 0x20], r12
lea r8, [rbp - 0x20]
mov edx, 2
lea rcx, [0x14016bdc8]
call fcn.14005fd90
xor edx, edx
lea rcx, [0x14016bdc0]
call fcn.14005fde0
movss xmm6, dword [0x140113d0c]
movaps xmm0, xmm6
call fcn.14005fd70
lea rcx, [0x14015c270]
cmp qword [0x14015c288], 0xf
cmova rcx, qword [0x14015c270]
mov r8d, dword [0x14015c1d0]
lea rdx, [0x14016bda8]
call fcn.1400435c0
call fcn.14009e2d0
call fcn.140054a40
mov r14, rax
lea rcx, [rbp - 0x28]
call fcn.140054a70
lea rcx, [rbp - 0x20]
call fcn.140054a90
movdqa xmm0, xmmword [0x140118ad0]
movups xmmword [rbp - 0x18], xmm0
lea rcx, [rbp - 0x18]
call fcn.140048d20
movss xmm1, dword [rbp - 0x1c]
addss xmm1, dword [rbp - 0x24]
movss xmm0, dword [rbp - 0x20]
addss xmm0, dword [rbp - 0x28]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss dword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], r12d
movss dword [rsp + 0x20], xmm9
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x28]
mov rcx, r14
call fcn.140067a80
movdqa xmm0, xmmword [0x140118ac0]
movups xmmword [rbp - 0x18], xmm0
lea rcx, [rbp - 0x18]
call fcn.140048d20
mov esi, eax
movdqa xmm0, xmmword [0x140118ac0]
movups xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call fcn.140048d20
mov edi, eax
movdqa xmm0, xmmword [0x140118ae0]
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call fcn.140048d20
mov ebx, eax
movdqa xmm0, xmmword [0x140118ae0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
movss xmm1, dword [rbp - 0x1c]
addss xmm1, dword [rbp - 0x24]
movss xmm0, dword [rbp - 0x20]
addss xmm0, dword [rbp - 0x28]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9d, eax
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x28]
mov rcx, r14
call fcn.140067d40
movss xmm0, dword [0x14016bdc4]
subss xmm0, dword [0x140118a08]
movss dword [rsp + 0x40], xmm0
mov dword [rsp + 0x44], 0x41a00000
lea rcx, [rsp + 0x40]
call fcn.14005fb40
mov dword [rsp + 0x40], 0x41f00000
mov dword [rsp + 0x44], 0x41f00000
lea r8, [rsp + 0x40]
mov rdx, qword [0x14016bdd8]
lea rcx, [0x1401187fc]
call fcn.14008b350
test al, al
je 0x14008d17c
mov byte [0x14016bda8], r12b
movss xmm10, dword [0x140113d84]
mov eax, dword [0x14016b680]
cmp dword [0x14016bdb8], eax
jne 0x14008d198
movaps xmm7, xmm6
jmp 0x14008d19c
movaps xmm7, xmm10
call fcn.1400540b0
movss xmm0, dword [rax + 0x10]
movss xmm13, dword [0x140113d44]
mulss xmm0, xmm13
mulss xmm0, xmm7
addss xmm0, dword [0x14016b684]
comiss xmm9, xmm0
jbe 0x14008d1cb
xorps xmm6, xmm6
jmp 0x14008d1cf
minss xmm6, xmm0
movss dword [0x14016b684], xmm6
mov eax, dword [0x14016b680]
test eax, eax
jne 0x14008d35b
call fcn.1400540b0
movss xmm2, dword [rax + 0x10]
mulss xmm2, dword [0x140113d3c]
movss xmm1, dword [0x140113e74]
subss xmm1, dword [0x14016b688]
mulss xmm1, xmm2
addss xmm1, dword [0x14016b688]
movss dword [0x14016b688], xmm1
call fcn.140054a40
mov rbx, rax
movdqa xmm0, xmmword [0x140113eb0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov qword [rbp + 0x20], r12
movss xmm3, dword [rbp - 0x28]
addss xmm3, dword [0x140113d54]
addss xmm3, xmm9
movss xmm2, dword [rbp - 0x24]
subss xmm2, dword [0x140113d54]
addss xmm2, dword [0x14016b688]
movaps xmm0, xmm3
addss xmm0, dword [0x140113d64]
movss dword [rbp + 0x10], xmm0
movaps xmm0, xmm2
addss xmm0, dword [0x140113d64]
movss dword [rbp + 0x14], xmm0
movss dword [rbp - 0x18], xmm3
movss dword [rbp - 0x14], xmm2
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x18]
mov rdx, qword [0x14016bde8]
mov rcx, rbx
call fcn.140066890
movdqa xmm0, xmmword [0x140118b50]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov ebx, eax
movdqa xmm0, xmmword [0x140118b60]
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call fcn.140048d20
mov qword [rbp - 0x18], r12
mov dword [rbp + 0x10], 0x3f800000
mov dword [rbp + 0x14], 0x3f800000
mov dword [rsp + 0x40], 0x42b40000
mov dword [rsp + 0x44], 0x42b40000
movss xmm1, dword [0x140113cbc]
movss dword [rsp + 0x38], xmm1
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10]
lea r8, [rsp + 0x40]
mov rdx, qword [0x14016bdd0]
mov ecx, 1
call fcn.14008b6f0
jmp 0x14008f3aa
cmp eax, 1
jne 0x14008de13
call fcn.1400540b0
movss xmm2, dword [rax + 0x10]
movss xmm15, dword [0x140113d3c]
mulss xmm2, xmm15
movss xmm1, dword [0x140113e74]
subss xmm1, dword [0x14016b688]
mulss xmm1, xmm2
addss xmm1, dword [0x14016b688]
movss dword [0x14016b688], xmm1
movdqa xmm0, xmmword [0x140113eb0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm5, dword [0x14016b688]
movaps xmm2, xmm5
addss xmm2, dword [0x140113e90]
addss xmm2, dword [rbp - 0x24]
movss xmm4, dword [0x14016bdc0]
movaps xmm0, xmm4
addss xmm0, dword [0x140113e90]
movss xmm12, dword [0x140113cdc]
mulss xmm0, xmm12
addss xmm0, dword [rbp - 0x28]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
addss xmm5, dword [0x140113d54]
addss xmm5, dword [rbp - 0x24]
subss xmm4, dword [0x140118a10]
mulss xmm4, xmm12
addss xmm4, dword [rbp - 0x28]
movss dword [rbp + 0x20], xmm4
movss dword [rbp + 0x24], xmm5
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016bde0]
mov rcx, r14
call fcn.140066890
movss xmm1, dword [0x14016bdc4]
subss xmm1, dword [0x140113d6c]
mulss xmm1, xmm12
movss xmm0, dword [0x14016bdc0]
subss xmm0, dword [0x140118a4c]
mulss xmm0, xmm12
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
lea rcx, [rbp - 0x18]
call fcn.14005fb40
call fcn.140047170
mov dword [rbp - 0x18], 0x43870000
movss xmm11, dword [0x140113e7c]
mov dword [rbp - 0x14], 0x42200000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x10
lea rsi, [0x14016b760]
mov r8, rsi
lea rdx, [0x140118808]
lea rcx, [0x140118814]
call fcn.14007ba70
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
movdqa xmm14, xmmword [0x140118b60]
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r8d, eax
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq rdx, xmm0
mov rcx, qword [0x14016bdf0]
call fcn.14008b110
movzx eax, byte [0x14016b638]
neg al
sbb ecx, ecx
and ecx, 0x8000
mov dword [rbp - 0x18], 0x43870000
mov dword [rbp - 0x14], 0x42200000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], ecx
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x10
lea rdi, [0x14016b780]
mov r8, rdi
lea rdx, [0x140118818]
lea rcx, [0x140118824]
call fcn.14007ba70
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r9d, eax
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq r8, xmm0
mov rdx, qword [0x14016bdf8]
lea rcx, [0x140118828]
call fcn.14008a460
test al, al
je 0x14008d5e9
cmp byte [0x14016b638], r12b
sete byte [0x14016b638]
movdqa xmm8, xmmword [0x140118170]
movups xmmword [rsp + 0x50], xmm8
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm3, dword [rbp - 0x24]
addss xmm3, dword [0x140118a1c]
movss xmm2, dword [rbp - 0x28]
addss xmm2, dword [0x140118a44]
movaps xmm1, xmm3
movss xmm7, dword [0x1401189f8]
addss xmm1, xmm7
movaps xmm0, xmm2
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss dword [rbp + 0x20], xmm2
movss dword [rbp + 0x24], xmm3
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016be08]
mov rcx, r14
call fcn.140066890
movups xmmword [rsp + 0x50], xmm8
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm3, dword [rbp - 0x24]
addss xmm3, dword [0x140118a38]
movss xmm2, dword [rbp - 0x28]
addss xmm2, dword [0x140118a44]
movaps xmm1, xmm3
addss xmm1, xmm7
movaps xmm0, xmm2
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss dword [rbp + 0x20], xmm2
movss dword [rbp + 0x24], xmm3
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016be08]
mov rcx, r14
call fcn.140066890
call fcn.140052400
movss xmm2, dword [0x14016bdc4]
subss xmm2, xmm11
mov rax, qword [0x14016bdb0]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm13
subss xmm2, xmm0
movss xmm1, dword [rax + 0x48]
movss xmm0, dword [0x14016bdc0]
subss xmm0, dword [0x140118a48]
addss xmm1, xmm1
subss xmm0, xmm1
mulss xmm0, xmm12
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm2
lea rcx, [rbp - 0x18]
call fcn.14005fb40
call fcn.140047170
mov rax, qword [0x14016bdb0]
movss xmm0, dword [rax + 0x48]
movss xmm1, dword [0x14016bdc0]
subss xmm1, dword [0x140113e94]
addss xmm0, xmm0
subss xmm1, xmm0
mulss xmm1, xmm12
movss dword [rbp - 0x18], xmm1
mov dword [rbp - 0x14], 0x43a50000
lea rcx, [rbp - 0x18]
call fcn.14005fb40
lea rcx, [0x140118830]
call fcn.14008be00
test al, al
je 0x14008d7f0
cmp dword [0x14016b680], 2
je 0x14008d7e6
mov dword [0x14016b684], r12d
mov dword [0x14016b688], r12d
mov dword [0x14016bdb8], 2
mov dword [0x14016b680], 2
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r9d, eax
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq r8, xmm0
mov rdx, qword [0x14016be10]
lea rcx, [0x140118848]
call fcn.14008a460
test al, al
je 0x14008d84d
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [0x140118850]
lea rdx, [0x140118880]
xor ecx, ecx
call qword [sym.imp.shell32.dll_ShellExecuteW]
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
mov dword [rbp - 0x18], 0x43520000
mov dword [rbp - 0x14], 0x42200000
lea rdx, [rbp - 0x18]
lea rcx, [0x14011888c]
call fcn.14008a0a0
test al, al
je 0x14008dd9f
lea rax, [rsp + 0x50]
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rdi + r8], r12b
jne 0x14008d8a4
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.1400853d0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x14008d8d0
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.1400853d0
nop
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x20]
lea rcx, [0x14016ba00]
call fcn.1400b3990
movsd xmm0, qword [0x140118788]
movsd qword [rbp - 0x18], xmm0
movzx ecx, word [0x140118790]
mov word [rbp - 0x10], cx
movzx eax, byte [0x140118792]
mov byte [rbp - 0x18], 0x30
xor byte [rbp - 0x17], 0x33
xor byte [rbp - 0x16], 0x34
xor byte [rbp - 0x15], 0x35
xor byte [rbp - 0x14], 0x36
xor byte [rbp - 0x13], 0x37
xor byte [rbp - 0x12], 0x38
xor byte [rbp - 0x11], 0x39
xor cl, 0x3a
mov byte [rbp - 0x10], cl
xor byte [rbp - 0xf], 0x3b
xor al, 0x3c
mov byte [rbp - 0xe], al
lea rax, [rbp - 0x18]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x14008d950
lea rdi, [0x14016bc38]
mov rcx, rdi
mov r14, qword [0x14016bc38]
mov r15, qword [0x14016bc50]
cmp r15, 0xf
cmova rcx, r14
mov rsi, qword [0x14016bc48]
cmp rsi, rbx
jne 0x14008dd60
mov r8, rsi
lea rdx, [rbp - 0x18]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008dd60
mov eax, dword [0x14011879c]
mov dword [rsp + 0x40], eax
movzx ecx, word [0x1401187a0]
mov word [rsp + 0x44], cx
movzx eax, byte [0x1401187a2]
mov byte [rsp + 0x40], 0x6e
xor byte [rsp + 0x41], 0x33
xor byte [rsp + 0x42], 0x34
xor byte [rsp + 0x43], 0x35
xor cl, 0x36
mov byte [rsp + 0x44], cl
xor byte [rsp + 0x45], 0x37
xor al, 0x38
mov byte [rsp + 0x46], al
mov eax, dword [0x140118794]
mov dword [rbp + 0x20], eax
movzx eax, word [0x140118798]
mov word [rbp + 0x24], ax
mov byte [rbp + 0x20], 0x6e
xor byte [rbp + 0x21], 0x33
xor byte [rbp + 0x22], 0x34
xor byte [rbp + 0x23], 0x35
xor al, 0x36
mov byte [rbp + 0x24], al
xor byte [rbp + 0x25], 0x37
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x68]
call fcn.140087130
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [0x14016ba00]
call fcn.1400b9a40
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140085380
movzx ebx, al
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14008da7d
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008da78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008da78
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010c1ec
test bl, bl
je 0x14008dd9f
cmp dword [0x14016b680], 3
je 0x14008daac
mov dword [0x14016b684], 0
mov dword [0x14016b688], 0
mov dword [0x14016bdb8], 3
mov dword [0x14016b680], 3
call fcn.14009d060
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov esi, 0x16
mov r8d, esi
lea rdx, [0x140118898]
lea rcx, [rsp + 0x50]
call fcn.1400853d0
nop
lea rcx, [rsp + 0x50]
call fcn.14009e0c0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14008db31
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008db2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008db2c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010c1ec
movsd xmm0, qword [0x1401187a8]
movsd qword [rbp - 0x18], xmm0
movzx edx, word [0x1401187b0]
mov word [rbp - 0x10], dx
movzx eax, byte [0x1401187b2]
mov byte [rbp - 0x18], 0x4c
xor byte [rbp - 0x17], 0x33
xor byte [rbp - 0x16], 0x34
xor byte [rbp - 0x15], 0x35
xor byte [rbp - 0x14], 0x36
xor byte [rbp - 0x13], 0x37
xor byte [rbp - 0x12], 0x38
xor byte [rbp - 0x11], 0x39
xor dl, 0x3a
mov byte [rbp - 0x10], dl
xor byte [rbp - 0xf], 0x3b
xor al, 0x3c
mov byte [rbp - 0xe], al
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x78]
call fcn.140087130
mov rdx, rax
lea rcx, [0x14016ba00]
call fcn.1400b3280
mov r13, qword [0x14016bad0]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 9
jb 0x14008f437
lea r14, [0x14016bac0]
cmp qword [0x14016bad8], 0xf
cmova r14, qword [0x14016bac0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r15, [r13 + 9]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp r15, rbx
jbe 0x14008dc6f
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x14008dc34
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14010c9ac
test rax, rax
je 0x14008dd52
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14008dc6a
cmp rbx, 0x16
cmovb rbx, rsi
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14008dc4a
mov rdi, r12
jmp 0x14008dc6a
cmp rcx, 0x1000
jb 0x14008dc62
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14008f42b
jmp 0x14008dc15
call fcn.14010c9ac
mov rdi, rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rbx
movsd xmm0, qword [0x1401188b0]
movsd qword [rdi], xmm0
movzx ecx, byte [0x1401188b8]
mov byte [rdi + 8], cl
lea rcx, [rdi + 9]
mov r8, r13
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy_1
mov byte [rdi + r15], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
mov r8d, 7
lea rdx, [0x1401188c0]
lea rcx, [rbp - 0x18]
call fcn.1400853d0
nop
xor r9d, r9d
movaps xmm2, xmm15
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x18]
call fcn.140089c70
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x14008dd1e
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dd18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008dd18
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010c1ec
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14008dd9f
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008dd59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008dd59
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010c1ec
jmp 0x14008dd9f
cmp byte [0x14016bc30], 0
jne 0x14008dd9f
lea rbx, [0x14015c1e8]
cmp rbx, rdi
je 0x14008dd8b
cmp r15, 0xf
cmova rdi, r14
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140089ed0
mov dword [0x14016b63c], 1
mov ecx, 5
call fcn.14008fba0
movaps xmm1, xmm10
movaps xmm0, xmm9
call fcn.14005f3a0
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r9d, eax
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq r8, xmm0
mov rdx, qword [0x14016be18]
lea rcx, [0x1401188c8]
call fcn.14008a460
test al, al
je 0x14008de09
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, [0x1401188d0]
lea rdx, [0x140118880]
xor ecx, ecx
call qword [sym.imp.shell32.dll_ShellExecuteW]
call fcn.140052400
jmp 0x14008f3aa
cmp eax, 2
jne 0x14008e825
call fcn.1400540b0
movss xmm2, dword [rax + 0x10]
movss xmm14, dword [0x140113d3c]
mulss xmm2, xmm14
movss xmm1, dword [0x140113e74]
subss xmm1, dword [0x14016b688]
mulss xmm1, xmm2
addss xmm1, dword [0x14016b688]
movss dword [0x14016b688], xmm1
movdqa xmm0, xmmword [0x140113eb0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm6, dword [0x14016b688]
movaps xmm3, xmm6
addss xmm3, dword [0x140113e90]
addss xmm3, dword [rbp - 0x24]
movss xmm5, dword [0x14016bdc0]
movaps xmm0, xmm5
addss xmm0, dword [0x140118a10]
movss xmm12, dword [0x140113cdc]
mulss xmm0, xmm12
addss xmm0, dword [rbp - 0x28]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm3
addss xmm6, dword [0x140113d54]
addss xmm6, dword [rbp - 0x24]
subss xmm5, dword [0x140118a10]
mulss xmm5, xmm12
addss xmm5, dword [rbp - 0x28]
movss dword [rbp + 0x20], xmm5
movss dword [rbp + 0x24], xmm6
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016bde0]
mov rcx, r14
call fcn.140066890
movss xmm1, dword [0x14016bdc4]
subss xmm1, dword [0x140113d6c]
mulss xmm1, xmm12
movss xmm0, dword [0x14016bdc0]
subss xmm0, dword [0x140118a4c]
mulss xmm0, xmm12
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
lea rcx, [rbp - 0x18]
call fcn.14005fb40
call fcn.140047170
mov dword [rbp - 0x18], 0x43870000
movss xmm11, dword [0x140113e7c]
mov dword [rbp - 0x14], 0x42200000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x10
lea rsi, [0x14016b760]
mov r8, rsi
lea rdx, [0x140118808]
lea rcx, [0x140118814]
call fcn.14007ba70
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
movdqa xmm6, xmmword [0x140118b60]
movups xmmword [rsp + 0x50], xmm6
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r8d, eax
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq rdx, xmm0
mov rcx, qword [0x14016bdf0]
call fcn.14008b110
movzx eax, byte [0x14016b638]
neg al
sbb ecx, ecx
and ecx, 0x8000
mov dword [rbp - 0x18], 0x43870000
mov dword [rbp - 0x14], 0x42200000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], ecx
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x10
lea rdi, [0x14016b780]
mov r8, rdi
lea rdx, [0x140118818]
lea rcx, [0x140118824]
call fcn.14007ba70
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
movups xmmword [rsp + 0x50], xmm6
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r9d, eax
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq r8, xmm0
mov rdx, qword [0x14016bdf8]
lea rcx, [0x140118828]
call fcn.14008a460
test al, al
je 0x14008e09e
cmp byte [0x14016b638], r12b
sete byte [0x14016b638]
mov dword [rbp - 0x18], 0x43870000
mov dword [rbp - 0x14], 0x42200000
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r9d, 0x1f4
lea r15, [0x14016b7a0]
mov r8, r15
lea rdx, [0x140118910]
lea rcx, [0x140118918]
call fcn.14007ba70
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
movups xmmword [rsp + 0x50], xmm6
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r8d, eax
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movq rdx, xmm0
mov rcx, qword [0x14016bdf8]
call fcn.14008b110
movdqa xmm8, xmmword [0x140118170]
movups xmmword [rsp + 0x50], xmm8
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm3, dword [rbp - 0x24]
addss xmm3, dword [0x140118a1c]
movss xmm2, dword [rbp - 0x28]
movss xmm6, dword [0x140118a44]
addss xmm2, xmm6
movaps xmm1, xmm3
movss xmm7, dword [0x1401189f8]
addss xmm1, xmm7
movaps xmm0, xmm2
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss dword [rbp + 0x20], xmm2
movss dword [rbp + 0x24], xmm3
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016be08]
mov rcx, r14
call fcn.140066890
movups xmmword [rsp + 0x50], xmm8
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm3, dword [rbp - 0x24]
addss xmm3, dword [0x140118a38]
movss xmm2, dword [rbp - 0x28]
addss xmm2, xmm6
movaps xmm1, xmm3
addss xmm1, xmm7
movaps xmm0, xmm2
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss dword [rbp + 0x20], xmm2
movss dword [rbp + 0x24], xmm3
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016be08]
mov rcx, r14
call fcn.140066890
movups xmmword [rsp + 0x50], xmm8
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm3, dword [rbp - 0x24]
addss xmm3, dword [0x140118a50]
movss xmm2, dword [rbp - 0x28]
addss xmm2, xmm6
movaps xmm1, xmm3
addss xmm1, xmm7
movaps xmm0, xmm2
addss xmm0, xmm7
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss dword [rbp + 0x20], xmm2
movss dword [rbp + 0x24], xmm3
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016be08]
mov rcx, r14
call fcn.140066890
call fcn.140052400
movss xmm2, dword [0x14016bdc4]
subss xmm2, xmm11
mov rax, qword [0x14016bdb0]
movss xmm0, dword [rax + 0x4c]
mulss xmm0, xmm13
subss xmm2, xmm0
movss xmm1, dword [rax + 0x48]
movss xmm0, dword [0x14016bdc0]
subss xmm0, dword [0x140118a48]
addss xmm1, xmm1
subss xmm0, xmm1
mulss xmm0, xmm12
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm2
lea rcx, [rbp - 0x18]
call fcn.14005fb40
call fcn.140047170
mov rax, qword [0x14016bdb0]
movss xmm0, dword [rax + 0x48]
movss xmm1, dword [0x14016bdc0]
subss xmm1, dword [0x140118a48]
addss xmm0, xmm0
subss xmm1, xmm0
mulss xmm1, xmm12
movss dword [rbp - 0x18], xmm1
mov dword [rbp - 0x14], 0x43c20000
lea rcx, [rbp - 0x18]
call fcn.14005fb40
mov dword [rbp - 0x18], 0x431b0000
mov dword [rbp - 0x14], 0x42200000
lea rdx, [rbp - 0x18]
lea rcx, [0x140118920]
call fcn.14008a0a0
test al, al
je 0x14008e3c1
cmp dword [0x14016b680], 1
je 0x14008e3b7
mov dword [0x14016b684], r12d
mov dword [0x14016b688], r12d
mov dword [0x14016bdb8], 1
mov dword [0x14016b680], 1
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
mov dword [rbp - 0x18], 0x431b0000
mov dword [rbp - 0x14], 0x42200000
lea rdx, [rbp - 0x18]
lea rcx, [0x140118938]
call fcn.14008a0a0
test al, al
je 0x14008e81b
lea rax, [rsp + 0x50]
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
xor r8d, r8d
lea rdx, [0x1401136ec]
lea rcx, [rsp + 0x50]
call fcn.1400853d0
nop
lea rax, [rbp - 0x48]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r12
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [r15 + r8], 0
jne 0x14008e444
mov rdx, r15
lea rcx, [rbp - 0x48]
call fcn.1400853d0
nop
lea rax, [rbp - 0x68]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
mov r8, rbx
inc r8
cmp byte [rdi + r8], 0
jne 0x14008e476
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.1400853d0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
mov r8, rbx
inc r8
cmp byte [rsi + r8], 0
jne 0x14008e4a0
mov rdx, rsi
lea rcx, [rsp + 0x78]
call fcn.1400853d0
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x78]
lea rcx, [0x14016ba00]
call fcn.1400b5ee0
movsd xmm0, qword [0x1401187b8]
movsd qword [rbp - 0x18], xmm0
movzx ecx, word [0x1401187c0]
mov word [rbp - 0x10], cx
movzx eax, byte [0x1401187c2]
mov byte [rbp - 0x18], 0x30
xor byte [rbp - 0x17], 0x33
xor byte [rbp - 0x16], 0x34
xor byte [rbp - 0x15], 0x35
xor byte [rbp - 0x14], 0x36
xor byte [rbp - 0x13], 0x37
xor byte [rbp - 0x12], 0x38
xor byte [rbp - 0x11], 0x39
xor cl, 0x3a
mov byte [rbp - 0x10], cl
xor byte [rbp - 0xf], 0x3b
xor al, 0x3c
mov byte [rbp - 0xe], al
lea rax, [rbp - 0x18]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14008e530
lea rdi, [0x14016bc38]
mov rcx, rdi
mov r14, qword [0x14016bc38]
mov r15, qword [0x14016bc50]
cmp r15, 0xf
cmova rcx, r14
mov rsi, qword [0x14016bc48]
cmp rsi, rbx
jne 0x14008e7dc
mov r8, rsi
lea rdx, [rbp - 0x18]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14008e7dc
mov eax, dword [0x1401187cc]
mov dword [rsp + 0x40], eax
movzx ecx, word [0x1401187d0]
mov word [rsp + 0x44], cx
movzx eax, byte [0x1401187d2]
mov byte [rsp + 0x40], 0x6e
xor byte [rsp + 0x41], 0x33
xor byte [rsp + 0x42], 0x34
xor byte [rsp + 0x43], 0x35
xor cl, 0x36
mov byte [rsp + 0x44], cl
xor byte [rsp + 0x45], 0x37
xor al, 0x38
mov byte [rsp + 0x46], al
mov eax, dword [0x1401187c4]
mov dword [rbp + 0x20], eax
movzx eax, word [0x1401187c8]
mov word [rbp + 0x24], ax
mov byte [rbp + 0x20], 0x6e
xor byte [rbp + 0x21], 0x33
xor byte [rbp + 0x22], 0x34
xor byte [rbp + 0x23], 0x35
xor al, 0x36
mov byte [rbp + 0x24], al
xor byte [rbp + 0x25], 0x37
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x68]
call fcn.140087130
mov r8, rax
lea rdx, [rsp + 0x78]
lea rcx, [0x14016ba00]
call fcn.1400b9a40
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140085380
movzx ebx, al
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14008e65d
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008e658
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008e658
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010c1ec
test bl, bl
je 0x14008e81b
mov ecx, 3
call fcn.14008fba0
call fcn.14009d060
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 0x16
lea rdx, [0x140118898]
lea rcx, [rsp + 0x78]
call fcn.1400853d0
nop
lea rcx, [rsp + 0x78]
call fcn.14009e0c0
nop
lea rcx, [rsp + 0x78]
call fcn.140087a30
movsd xmm0, qword [0x1401187d8]
movsd qword [rbp - 0x18], xmm0
movzx ecx, word [0x1401187e0]
mov word [rbp - 0x10], cx
movzx eax, byte [0x1401187e2]
mov byte [rbp - 0x18], 0x4c
xor byte [rbp - 0x17], 0x33
xor byte [rbp - 0x16], 0x34
xor byte [rbp - 0x15], 0x35
xor byte [rbp - 0x14], 0x36
xor byte [rbp - 0x13], 0x37
xor byte [rbp - 0x12], 0x38
xor byte [rbp - 0x11], 0x39
xor cl, 0x3a
mov byte [rbp - 0x10], cl
xor byte [rbp - 0xf], 0x3b
xor al, 0x3c
mov byte [rbp - 0xe], al
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x78]
call fcn.140087130
mov rdx, rax
lea rcx, [0x14016ba00]
call fcn.1400b3280
mov rdx, qword [0x14016bad0]
movabs rcx, 0x7fffffffffffffff
sub rcx, rdx
cmp rcx, 9
jb 0x14008f437
lea r14, [0x14016bac0]
mov rax, r14
cmp qword [0x14016bad8], 0xf
cmova rax, qword [0x14016bac0]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, [0x1401188b0]
mov r8, r14
movzx edx, byte [rsp + 0x70]
lea rcx, [rbp - 0x68]
call fcn.140087170
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 7
lea rdx, [0x1401188c0]
lea rcx, [rsp + 0x78]
call fcn.1400853d0
nop
xor r9d, r9d
movaps xmm2, xmm14
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x78]
call fcn.140089c70
nop
lea rcx, [rsp + 0x78]
call fcn.140087a30
nop
lea rcx, [rbp - 0x68]
call fcn.140087a30
call fcn.140052400
jmp 0x14008f3aa
cmp byte [0x14016bc30], 0
jne 0x14008e81b
lea rbx, [0x14015c1e8]
cmp rbx, rdi
je 0x14008e807
cmp r15, 0xf
cmova rdi, r14
mov r8, rsi
mov rdx, rdi
mov rcx, rbx
call fcn.140089ed0
mov dword [0x14016b63c], 2
mov ecx, 5
call fcn.14008fba0
call fcn.140052400
jmp 0x14008f3aa
cmp eax, 3
jne 0x14008f059
call fcn.1400540b0
movss xmm2, dword [rax + 0x10]
movss xmm11, dword [0x140113d3c]
mulss xmm2, xmm11
movss xmm1, dword [0x140113e74]
subss xmm1, dword [0x14016b688]
mulss xmm1, xmm2
addss xmm1, dword [0x14016b688]
movss dword [0x14016b688], xmm1
call fcn.140054a40
mov rbx, rax
movdqa xmm13, xmmword [0x140113eb0]
movups xmmword [rsp + 0x50], xmm13
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm0, dword [rbp - 0x24]
subss xmm0, dword [0x140113d54]
movss xmm4, dword [0x14016b688]
addss xmm4, xmm0
movss xmm3, dword [rbp - 0x28]
addss xmm3, dword [0x140113d54]
addss xmm3, xmm9
movaps xmm2, xmm4
addss xmm2, dword [0x140113d64]
movaps xmm0, xmm3
addss xmm0, dword [0x140113d64]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
movss dword [rbp + 0x20], xmm3
movss dword [rbp + 0x24], xmm4
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016bde8]
mov rcx, rbx
call fcn.140066890
movss xmm12, dword [0x140113e7c]
movss xmm1, dword [0x140113e8c]
movss xmm7, dword [0x140118a4c]
movdqa xmmword [rsp + 0x50], xmm13
lea r8, [rsp + 0x50]
movaps xmm0, xmm12
unpcklps xmm0, xmm1
movq rdx, xmm0
movaps xmm1, xmm7
unpcklps xmm1, xmm12
movq rcx, xmm1
call fcn.14008af90
movdqa xmm14, xmmword [0x140118170]
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm4, dword [rbp - 0x24]
addss xmm4, dword [0x140118a04]
movss xmm3, dword [rbp - 0x28]
addss xmm3, dword [0x140118a54]
movaps xmm2, xmm4
addss xmm2, dword [0x1401189f8]
movaps xmm0, xmm3
addss xmm0, dword [0x1401189f8]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm2
movss dword [rbp + 0x20], xmm3
movss dword [rbp + 0x24], xmm4
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016be08]
mov rcx, r14
call fcn.140066890
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
movss xmm1, dword [rbp - 0x24]
addss xmm1, dword [0x140113d68]
movss xmm0, dword [rbp - 0x28]
movss xmm15, dword [0x140113e80]
addss xmm0, xmm15
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
mov qword [rsp + 0x20], r12
lea r9, [0x140118950]
mov r8d, eax
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.140067f20
mov rax, qword [0x14016b658]
cmp qword [0x14016b650], rax
jne 0x14008ea72
movss xmm6, dword [0x14015c1d4]
jmp 0x14008ea7a
movss xmm6, dword [0x14015c1d8]
call fcn.1400540b0
movss xmm1, dword [rax + 0x10]
mulss xmm1, xmm11
subss xmm6, dword [0x14016b64c]
mulss xmm6, xmm1
addss xmm6, dword [0x14016b64c]
movss dword [0x14016b64c], xmm6
movss xmm1, dword [0x140113e90]
movdqa xmmword [rsp + 0x50], xmm13
lea r8, [rsp + 0x50]
movaps xmm0, xmm12
unpcklps xmm0, xmm1
movq rdx, xmm0
movaps xmm1, xmm7
unpcklps xmm1, xmm6
movq rcx, xmm1
call fcn.14008af90
movss xmm1, dword [0x140118a14]
movss xmm8, dword [0x140118a2c]
movdqa xmmword [rsp + 0x50], xmm13
lea r8, [rsp + 0x50]
movaps xmm0, xmm15
unpcklps xmm0, xmm1
movq rdx, xmm0
movaps xmm1, xmm8
unpcklps xmm1, xmm12
movq rcx, xmm1
call fcn.14008af90
mov dword [rbp - 0x18], 0x439d8000
mov dword [rbp - 0x14], 0x43200000
lea rcx, [rbp - 0x18]
call fcn.14005fb40
movdqa xmm7, xmmword [0x140118b60]
movups xmmword [rsp + 0x50], xmm7
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r8d, eax
movaps xmm0, xmm12
unpcklps xmm0, xmm12
movq rdx, xmm0
mov rcx, qword [0x14016be30]
call fcn.14008b110
lea rbx, [0x14015c230]
cmp qword [0x14015c248], 0xf
cmova rbx, qword [0x14015c230]
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
movss xmm1, dword [rbp - 0x24]
addss xmm1, dword [0x140118a18]
movss xmm0, dword [rbp - 0x28]
movss xmm6, dword [0x140113e84]
addss xmm0, xmm6
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
mov qword [rsp + 0x20], r12
mov r9, rbx
mov r8d, eax
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.140067f20
movss xmm1, dword [0x140118a20]
movdqa xmmword [rsp + 0x50], xmm13
lea r8, [rsp + 0x50]
movaps xmm0, xmm15
unpcklps xmm0, xmm1
movq rdx, xmm0
movaps xmm1, xmm8
unpcklps xmm1, xmm12
movq rcx, xmm1
call fcn.14008af90
mov dword [rbp - 0x18], 0x439d8000
mov dword [rbp - 0x14], 0x43520000
lea rcx, [rbp - 0x18]
call fcn.14005fb40
movups xmmword [rsp + 0x50], xmm7
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r8d, eax
movaps xmm0, xmm12
unpcklps xmm0, xmm12
movq rdx, xmm0
mov rcx, qword [0x14016be38]
call fcn.14008b110
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
movss xmm1, dword [rbp - 0x24]
addss xmm1, dword [0x140118a24]
movss xmm0, dword [rbp - 0x28]
addss xmm0, xmm6
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
mov qword [rsp + 0x20], r12
lea r9, [0x140118968]
mov r8d, eax
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.140067f20
movss xmm1, dword [0x140118a34]
movdqa xmmword [rsp + 0x50], xmm13
lea r8, [rsp + 0x50]
movaps xmm0, xmm15
unpcklps xmm0, xmm1
movq rdx, xmm0
movaps xmm1, xmm8
unpcklps xmm1, xmm12
movq rcx, xmm1
call fcn.14008af90
mov dword [rbp - 0x18], 0x439d8000
mov dword [rbp - 0x14], 0x43820000
lea rcx, [rbp - 0x18]
call fcn.14005fb40
movups xmmword [rsp + 0x50], xmm7
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r8d, eax
movaps xmm0, xmm12
unpcklps xmm0, xmm12
movq rdx, xmm0
mov rcx, qword [0x14016be40]
call fcn.14008b110
movups xmmword [rsp + 0x50], xmm14
lea rcx, [rsp + 0x50]
call fcn.140048d20
movss xmm1, dword [rbp - 0x24]
addss xmm1, dword [0x140118a40]
movss xmm0, dword [rbp - 0x28]
addss xmm0, xmm6
movss dword [rbp - 0x18], xmm0
movss dword [rbp - 0x14], xmm1
mov qword [rsp + 0x20], r12
lea r9, [0x140118978]
mov r8d, eax
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.140067f20
call fcn.140047170
mov rax, qword [0x14016b658]
cmp qword [0x14016b650], rax
jne 0x14008ed5d
movss xmm6, dword [0x14015c1e0]
jmp 0x14008ed65
movss xmm6, dword [0x14015c1dc]
call fcn.1400540b0
movss xmm1, dword [rax + 0x10]
mulss xmm1, xmm11
subss xmm6, dword [0x14016b648]
mulss xmm6, xmm1
addss xmm6, dword [0x14016b648]
movss dword [0x14016b648], xmm6
mov dword [rbp - 0x18], 0x42240000
movss dword [rbp - 0x14], xmm6
lea rcx, [rbp - 0x18]
call fcn.14005fb40
mov dword [rbp - 0x18], 0x43340000
mov dword [rbp - 0x14], 0x42200000
lea r9, [0x14016b640]
lea r8, [0x14016b668]
lea rdx, [rbp - 0x18]
lea rcx, [0x14011898c]
call fcn.14008a7c0
movaps xmm1, xmm10
xorps xmm0, xmm0
call fcn.14005f3a0
mov dword [rbp - 0x18], 0x43020000
mov dword [rbp - 0x14], 0x42200000
lea rdx, [rbp - 0x18]
lea rcx, [0x140118998]
call fcn.14008a0a0
test al, al
je 0x14008f3aa
movsxd rcx, dword [0x14016b640]
mov rax, qword [0x14016b668]
mov rdx, qword [rax + rcx*8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp byte [rdx + rbx], r12b
jne 0x14008ee30
mov r8, rbx
lea rcx, [rbp + 0x20]
call fcn.1400853d0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0x30]
sub rax, r15
cmp rax, 8
jb 0x14008f43d
lea rax, [rbp + 0x20]
mov r14, qword [rbp + 0x20]
mov r13, qword [rbp + 0x38]
cmp r13, 0xf
cmova rax, r14
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r12, [r15 + 8]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp r12, rbx
jbe 0x14008ef25
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x14008eedc
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14010c9ac
test rax, rax
je 0x14008ef0d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14008ef1c
mov esi, 0x16
cmp rbx, rsi
cmovb rbx, rsi
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14008eef5
xor edi, edi
jmp 0x14008ef20
cmp rcx, 0x1000
jb 0x14008ef14
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14008f431
jmp 0x14008eec1
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14010c9ac
mov rdi, rax
mov rax, qword [rbp - 0x18]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rbx
mov r8, r15
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy_1
movabs rax, 0x6465747261745320
mov qword [rdi + r15], rax
mov byte [rdi + r12], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 7
lea rdx, [0x1401189a8]
lea rcx, [rsp + 0x78]
call fcn.1400853d0
nop
xor r9d, r9d
movss xmm2, dword [0x140113d2c]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.140089c70
nop
lea rcx, [rsp + 0x78]
call fcn.140087a30
nop
lea rcx, [rsp + 0x50]
call fcn.140087a30
mov ecx, 1
call fcn.14010c9ac
mov qword [rbp - 0x18], rax
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0
mov r9, rax
lea r8, [0x140085f30]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ucrtbase.dll__beginthreadex]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14008f419
cmp dword [rbp + 0x18], 0
je 0x14008f443
movaps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call sub.msvcp140.dll__Thrd_detach
test eax, eax
jne 0x14008f443
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x10], xmm0
cmp r13, 0xf
jbe 0x14008f3aa
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14008f04c
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008f04c
call qword [sym.imp.ucrtbase.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.14010c1ec
jmp 0x14008f3aa
cmp eax, 4
jne 0x14008f1a2
call fcn.1400540b0
movss xmm2, dword [rax + 0x10]
mulss xmm2, dword [0x140113d3c]
movss xmm1, dword [0x140113e74]
subss xmm1, dword [0x14016b688]
mulss xmm1, xmm2
addss xmm1, dword [0x14016b688]
movss dword [0x14016b688], xmm1
call fcn.140054a40
mov rbx, rax
movdqa xmm0, xmmword [0x140113eb0]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm3, dword [rbp - 0x28]
addss xmm3, dword [0x140113d54]
addss xmm3, xmm9
movss xmm2, dword [rbp - 0x24]
subss xmm2, dword [0x140113d54]
addss xmm2, dword [0x14016b688]
movaps xmm0, xmm3
addss xmm0, dword [0x140113d64]
movss dword [rsp + 0x40], xmm0
movaps xmm0, xmm2
addss xmm0, dword [0x140113d64]
movss dword [rsp + 0x44], xmm0
movss dword [rbp + 0x20], xmm3
movss dword [rbp + 0x24], xmm2
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016bde8]
mov rcx, rbx
call fcn.140066890
mov qword [rbp - 0x18], r12
mov dword [rbp + 0x10], 0x3f800000
mov dword [rbp + 0x14], 0x3f800000
mov dword [rsp + 0x40], 0x42b40000
mov dword [rsp + 0x44], 0x42b40000
movss xmm1, dword [0x140113cbc]
movss dword [rsp + 0x28], xmm1
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10]
lea r8, [rsp + 0x40]
mov rdx, qword [0x14016bdd0]
mov ecx, 1
call fcn.14008c0e0
jmp 0x14008f3aa
cmp eax, 5
jne 0x14008f3aa
call fcn.1400540b0
movss xmm2, dword [rax + 0x10]
mulss xmm2, dword [0x140113d3c]
movss xmm1, dword [0x140113e74]
subss xmm1, dword [0x14016b688]
mulss xmm1, xmm2
addss xmm1, dword [0x14016b688]
movss dword [0x14016b688], xmm1
movdqa xmm7, xmmword [0x140113eb0]
movups xmmword [rsp + 0x50], xmm7
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov dword [rbp - 0x18], 0x3f800000
mov dword [rbp - 0x14], 0x3f800000
mov qword [rbp + 0x10], r12
movss xmm6, dword [0x14016bdc0]
movaps xmm0, xmm6
addss xmm0, dword [0x140113e90]
mulss xmm0, dword [0x140113cdc]
addss xmm0, dword [rbp - 0x28]
movss dword [rsp + 0x40], xmm0
movss xmm5, dword [0x14016b688]
movaps xmm0, xmm5
addss xmm0, dword [0x140113e90]
addss xmm0, dword [rbp - 0x24]
movss dword [rsp + 0x44], xmm0
subss xmm6, dword [0x140118a10]
mulss xmm6, dword [0x140113cdc]
addss xmm6, dword [rbp - 0x28]
movss dword [rbp + 0x20], xmm6
addss xmm5, dword [0x140113d54]
addss xmm5, dword [rbp - 0x24]
movss dword [rbp + 0x24], xmm5
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x20]
mov rdx, qword [0x14016bde0]
mov rcx, r14
call fcn.140066890
movss xmm6, dword [0x140113e7c]
movss xmm1, dword [0x140118a28]
movdqa xmmword [rsp + 0x50], xmm7
lea r8, [rsp + 0x50]
movaps xmm0, xmm6
unpcklps xmm0, xmm1
movq rdx, xmm0
movss xmm1, dword [0x140118a3c]
unpcklps xmm1, xmm6
movq rcx, xmm1
call fcn.14008af90
lea rbx, [0x14015c1e8]
cmp qword [0x14015c200], 0xf
cmova rbx, qword [0x14015c1e8]
movdqa xmm0, xmmword [0x140118170]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
movss xmm0, dword [rbp - 0x28]
addss xmm0, dword [0x140113e80]
movss dword [rbp - 0x18], xmm0
movss xmm1, dword [rbp - 0x24]
addss xmm1, dword [0x140118a30]
movss dword [rbp - 0x14], xmm1
mov qword [rsp + 0x20], r12
mov r9, rbx
mov r8d, eax
lea rdx, [rbp - 0x18]
mov rcx, r14
call fcn.140067f20
mov dword [rbp - 0x18], 0x43a50000
mov dword [rbp - 0x14], 0x43700000
lea rcx, [rbp - 0x18]
call fcn.14005fb40
movdqa xmm0, xmmword [0x140118b60]
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call fcn.140048d20
mov r9d, eax
movaps xmm0, xmm6
unpcklps xmm0, xmm6
movq r8, xmm0
mov rdx, qword [0x14016be48]
lea rcx, [0x1401189b0]
call fcn.14008a460
test al, al
je 0x14008f3aa
mov ecx, dword [0x14016b63c]
call fcn.14008fba0
call fcn.14008f450
call fcn.140051300
mov rcx, qword [rbp + 0x40]
xor rcx, rsp
call fcn.14010c660
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp + 0x18], 0
mov ecx, 6
call sub.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.140083770
nop
call fcn.140083770
nop
call fcn.140089c10
nop
call fcn.140089c10
nop
mov ecx, 1
call sub.msvcp140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3