Function at 0x1800811f0
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180309080]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor r14d, r14d
mov ecx, dword [0x18030b254]
mov rax, qword gs:[0x58]
mov edi, 4
mov rbx, qword [rax + rcx*8]
mov eax, dword [rbx + rdi]
cmp dword [0x18030bd60], eax
jle 0x1800812d9
lea rcx, [0x18030bd60]
call fcn.1800e8140
cmp dword [0x18030bd60], 0xffffffff
jne 0x1800812d9
mov qword [0x18030be70], r14
mov qword [0x18030be78], r14
mov byte [0x18030bd70], r14b
mov dword [0x18030be80], r14d
mov r8d, 0xff
lea rdx, [0x1800fd358]
lea rcx, [0x18030bd70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x18030be6f], r14b
lea rcx, [0x18030bd70]
call fcn.180034db0
nop
lea rcx, [0x1800edf70]
call fcn.1800e8044
nop
lea rcx, [0x18030bd60]
call fcn.1800e80d4
mov eax, dword [rbx + rdi]
cmp dword [0x18030bc98], eax
jle 0x180081311
lea rcx, [0x18030bc98]
call fcn.1800e8140
cmp dword [0x18030bc98], 0xffffffff
jne 0x180081311
lea rcx, [0x1800edf00]
call fcn.1800e8044
lea rcx, [0x18030bc98]
call fcn.1800e80d4
xorps xmm6, xmm6
mov rdx, qword [0x180309bd8]
test rdx, rdx
jne 0x180081341
mov dword [rbp + 0xa0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xa4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
xorps xmm2, xmm2
jmp 0x18008138d
mov rcx, qword [0x18030b418]
test rcx, rcx
je 0x180081375
cmp dword [0x18030b384], 0
je 0x180081375
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0xa0]
movss xmm0, dword [rbp + 0xa8]
movss xmm1, dword [rbp + 0xa4]
subss xmm2, dword [0x18030bb64]
subss xmm1, dword [0x18030bb68]
subss xmm0, dword [0x18030bb6c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x1800813ca
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1800813d2
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x1802f4110]
jbe 0x18008149f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x68], xmm0
movdqa xmm7, xmmword [0x1802f41a0]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], al
mov dword [rbp + 0x90], 0xffffffff
mov rax, qword [rbp + 0x60]
mov qword [0x180309bd8], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x180309be0]
call fcn.18002e5b0
mov rax, qword [rbp + 0x88]
mov qword [0x180309c00], rax
mov eax, dword [rbp + 0x90]
mov dword [0x180309c08], eax
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x180081496
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180081489
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180081489
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800e8064
movdqa xmm7, xmmword [0x1802f41a0]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], 0
mov rcx, qword [0x18030b378]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x1802f4078]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x1802f3f8c]
mulss xmm0, xmm9
movss xmm10, dword [0x1802f408c]
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43b90000
movabs rax, 0xf0b56f7412380847
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0xa5e996d2e0a2a41a
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r15, 0xd0d003177b506d11
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rax
movabs rsi, 0xa5e996d294d1cd56
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.18003bcb0
movabs rax, 0xd0d06b7409310842
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xc0], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x18030bd70]
xor edx, edx
lea rcx, [rbp]
call fcn.18006f850
test al, al
je 0x180081684
lea rcx, [0x18030bd70]
call fcn.180034db0
mov rax, qword [0x18030b378]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43870000
movabs rax, 0xa3b94f7f1e064e32
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0xa5e996d294d1cd22
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.180076230
test al, al
je 0x1800818a8
cmp qword [0x18030bb50], 0
je 0x18008189e
lea rdx, [0x18030bb70]
lea rcx, [rbp + 0x100]
call fcn.1800216b0
nop
mov rax, qword [rbp + 0x108]
mov qword [rbp + 0xa0], rax
mov r12, qword [rbp + 0x100]
cmp r12, rax
je 0x180081892
add r12, 0x28
movzx ebx, byte [rbp + 0x1c]
mov rax, qword [r12 - 0x28]
mov qword [rbp + 0x60], rax
lea rdx, [r12 - 0x20]
lea rcx, [rbp + 0x68]
call fcn.18000dcf0
mov rax, qword [r12]
mov qword [rbp + 0x88], rax
mov eax, dword [r12 + 8]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x68]
mov r15, qword [rbp + 0x68]
mov r13, qword [rbp + 0x80]
cmp r13, 0xf
cmova rax, r15
movsxd rcx, dword [0x18030be70]
test ecx, ecx
je 0x180081ad9
lea rsi, [0x1800fd358]
test rax, rax
cmovne rsi, rax
mov rdi, qword [0x18030be78]
mov r14, rcx
shl r14, 4
add r14, rdi
cmp rdi, r14
je 0x180081ab0
nop dword [rax + rax]
mov r8, qword [rdi]
mov r9, qword [rdi + 8]
cmp r8, r9
je 0x180081aa3
mov rcx, rsi
cmp byte [r8], 0x2d
jne 0x180081a99
inc r8
call fcn.1800341f0
test rax, rax
je 0x180081aa3
xor r14d, r14d
movabs rsi, 0xa5e996d294d1cd56
cmp r13, 0xf
jbe 0x180081872
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18008186a
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180081efe
mov rcx, r15
call fcn.1800e8064
add r12, 0x38
lea rax, [r12 - 0x28]
cmp rax, qword [rbp + 0xa0]
jne 0x180081780
movabs r15, 0xd0d003177b506d11
lea rcx, [rbp + 0x100]
call fcn.1800038e0
call fcn.18003c960
call fcn.180045820
call fcn.18003c340
mov rcx, qword [0x18030b378]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1802f4054]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x42f00000
movabs rax, 0xd0a36d7812240e50
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x120]
call fcn.18003bcb0
cmp dword [0x180309c08], 0xffffffff
je 0x180082293
mov qword [rbp + 0xc0], 0
movabs rax, 0xa4a26c671e3c0845
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xa5e996d294beb976
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x120]
call fcn.180067f60
test al, al
je 0x180082078
mov rdx, qword [0x180309bd8]
mov rcx, qword [0x18030b418]
test rdx, rdx
jne 0x180081f05
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x180081f3d
call fcn.1800341f0
test rax, rax
jne 0x180081acc
add rdi, 0x10
cmp rdi, r14
jne 0x180081800
xor r14d, r14d
movabs rsi, 0xa5e996d294d1cd56
cmp dword [0x18030be80], r14d
jne 0x18008183b
jmp 0x180081ad9
xor r14d, r14d
movabs rsi, 0xa5e996d294d1cd56
movabs rax, 0xd0d003177b50447c
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r15, 0xd0d003177b506d11
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x60]
test rdx, rdx
jne 0x180081b6d
mov dword [rbp + 0x10], edx
movaps xmm1, xmm6
movss dword [rbp + 0x14], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x18], xmm6
movaps xmm2, xmm6
jmp 0x180081bad
mov rcx, qword [0x18030b418]
test rcx, rcx
je 0x180081b9e
cmp dword [0x18030b384], 0
je 0x180081b9e
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
movss xmm0, dword [rbp + 0x18]
movss xmm1, dword [rbp + 0x14]
subss xmm2, dword [0x18030bb64]
subss xmm1, dword [0x18030bb68]
subss xmm0, dword [0x18030bb6c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x180081bea
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x180081bf2
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x140]
call fcn.180002080
mov rdi, rax
movabs rax, 0xd0d003177b504531
mov qword [rbp + 0xb0], rax
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rcx
mov qword [rbp + 0xb0], rsi
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rcx
mov qword [rbp + 0xb0], r15
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.180084870
nop
mov r9, rdi
mov r8, rax
movzx edx, bl
lea rcx, [rbp + 0x20]
call fcn.180085db0
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180081cb0
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.180003a50
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0xf8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x180081d3e
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180081d39
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180081ee2
call fcn.1800e8064
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x180081d89
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180081d84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180081ee9
call fcn.1800e8064
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x180081dda
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180081dd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180081ef0
call fcn.1800e8064
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov rax, qword [0x180309bd8]
cmp qword [rbp + 0x60], rax
sete dl
mov qword [rbp + 0xc0], 0
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rcx, qword [rbp + 0xe0]
lea r9, [rbp + 0xc0]
xor r8d, r8d
call fcn.180075930
test al, al
je 0x180081e7c
mov rax, qword [rbp + 0x60]
mov qword [0x180309bd8], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [0x180309be0]
call fcn.18000ead0
mov rax, qword [rbp + 0x88]
mov qword [0x180309c00], rax
mov eax, dword [rbp + 0x90]
mov dword [0x180309c08], eax
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x180081eb9
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180081eb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180081ef7
call fcn.1800e8064
mov qword [rbp + 0xf0], r14
mov qword [rbp + reloc.WS2_32.dll_ntohs8], 0xf
mov byte [rbp + 0xe0], 0
mov r13, qword [rbp + 0x80]
mov r15, qword [rbp + 0x68]
jmp 0x18008183b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x180081f3d
cmp dword [0x18030b384], 0
je 0x180081f3d
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x180309bd8]
mov rcx, qword [0x18030b418]
movsd xmm7, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x180081f59
mov qword [rbp + 0xc0], rdx
mov dword [rbp + 0xc8], edx
jmp 0x180081f8d
test rcx, rcx
je 0x180081f8d
cmp dword [0x18030b384], 0
je 0x180081f8d
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x18030b418]
movsd xmm6, qword [rbp + 0xc0]
mov edi, dword [rbp + 0xc8]
mov rdx, qword [0x18030bb50]
test rdx, rdx
jne 0x180081fac
mov rbx, r14
jmp 0x180081feb
test rcx, rcx
je 0x180081fe4
cmp dword [0x18030b384], 0
je 0x180081fe4
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x18030bb50]
mov rcx, qword [0x18030b418]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x180081ff5
mov r8, r14
jmp 0x18008202d
test rcx, rcx
je 0x180082026
cmp dword [0x18030b384], 0
je 0x180082026
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x18030bb50]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.18002cbd0
movabs rsi, 0xa5e996d294d1cd56
mov qword [rbp + 0xc0], 0
movabs rax, 0xb4f06874143c0344
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xa5e996d294a3a239
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x120]
call fcn.180067f60
test al, al
je 0x180082163
mov rdx, qword [0x180309bd8]
test rdx, rdx
je 0x180082163
mov dword [rbp + 0xc0], 1
mov rcx, qword [0x18030b418]
test rcx, rcx
je 0x180082163
cmp dword [0x18030b384], 0
je 0x180082163
add rdx, qword [0x18030b330]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xc0], 0
movabs rax, 0xb193237b1a351942
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xa5e996d294d1cd24
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x120]
call fcn.180067f60
test al, al
je 0x1800823a7
mov rdx, qword [0x180309bd8]
test rdx, rdx
je 0x180082252
mov dword [rbp + 0xc0], 1
mov rcx, qword [0x18030b418]
test rcx, rcx
je 0x180082252
cmp dword [0x18030b384], 0
je 0x180082252
add rdx, qword [0x18030b330]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor r8d, r8d
mov edx, 0x156
lea rcx, [0x180309bd8]
call fcn.1800784f0
mov r8b, 1
mov edx, 0xfc
lea rcx, [0x180309bd8]
call fcn.1800784f0
mov r8b, 1
mov edx, Ordinal_143
lea rcx, [0x180309bd8]
call fcn.1800784f0
jmp 0x1800823a7
movabs rax, 0xb1f077741e3c0842
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
movabs rax, 0xc085f5bbfcb4bb76
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
movabs rax, 0x880de6d2bbc7fe4b
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xf0], rax
movabs rcx, 0x8eb27d844b481e08
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
movabs rax, 0x882c92a1c9ae986b
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x158], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [rbp + 0x150]
xorps xmm1, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0xf0], xmm1
lea rcx, [rbp + 0xe0]
call fcn.1800675e0
call fcn.18003c340
mov rcx, qword [0x18030b378]
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
mulss xmm2, xmm9
addss xmm2, dword [0x1802f4054]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, dword [0x1802f40d8]
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43520000
movabs rax, 0xd0a36f760e230447
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x120]
call fcn.18003bcb0
movabs rax, 0xd0b4667b19310354
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [0x180309ce8]
lea rcx, [rbp + 0x120]
call fcn.180069eb0
movabs rax, 0x9ff06665143e0a58
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xa58df3bbe4a4ae35
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [0x180309ce9]
lea rcx, [rbp + 0x120]
call fcn.180069eb0
movabs rax, 0xd0d0717210220c5c
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [0x180309cea]
lea rcx, [rbp + 0x120]
call fcn.180069eb0
movabs rax, 0xd0d003171e3d0c5f
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [0x180309cec]
lea rcx, [rbp + 0x120]
call fcn.180069eb0
movabs rax, 0xb5b36d760f230455
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [0x180309ceb]
lea rcx, [rbp + 0x120]
call fcn.180069eb0
movabs rax, 0xd0d00365143c0252
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
mov r8d, 0x10260
lea rdx, [0x180309cf0]
lea rcx, [rbp + 0x120]
call fcn.1800723a0
call fcn.18003c340
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1800e7c90
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret