Function at 0x14007ffa0
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140365f00]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor r14d, r14d
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140377220], eax
jle 0x140080082
lea rcx, [0x140377220]
call fcn.140130860
cmp dword [0x140377220], 0xffffffff
jne 0x140080082
mov qword [0x140377330], r14
mov qword [0x140377338], r14
mov byte [0x140377230], r14b
mov dword [0x140377340], r14d
mov r8d, 0xff
lea rdx, [0x140156098]
lea rcx, [0x140377230]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x14037732f], r14b
lea rcx, [0x140377230]
call fcn.14003b8a0
nop
lea rcx, [0x140136aa0]
call fcn.140130764
nop
lea rcx, [0x140377220]
call fcn.1401307f4
mov eax, dword [rdi + rbx]
cmp dword [0x140377160], eax
jle 0x1400800ba
lea rcx, [0x140377160]
call fcn.140130860
cmp dword [0x140377160], 0xffffffff
jne 0x1400800ba
lea rcx, [0x140136a30]
call fcn.140130764
lea rcx, [0x140377160]
call fcn.1401307f4
xorps xmm6, xmm6
mov rdx, qword [0x140374ef8]
test rdx, rdx
jne 0x1400800ea
mov dword [rbp + 0xa0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xa4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
xorps xmm2, xmm2
jmp 0x140080136
mov rcx, qword [0x1403768d8]
test rcx, rcx
je 0x14008011e
cmp dword [0x140376844], 0
je 0x14008011e
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0xa0]
movss xmm0, dword [rbp + 0xa8]
movss xmm1, dword [rbp + 0xa4]
subss xmm2, dword [0x140377034]
subss xmm1, dword [0x140377038]
subss xmm0, dword [0x14037703c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140080173
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14008017b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x14034be70]
jbe 0x140080248
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x68], xmm0
movdqa xmm7, xmmword [0x14034bf10]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], al
mov dword [rbp + 0x90], 0xffffffff
mov rax, qword [rbp + 0x60]
mov qword [0x140374ef8], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x140374f00]
call fcn.14002c4a0
mov rax, qword [rbp + 0x88]
mov qword [0x140374f20], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140374f28], eax
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14008023f
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080232
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140080232
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140130784
movdqa xmm7, xmmword [0x14034bf10]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], 0
mov rcx, qword [0x140376838]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x14034bdd8]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x14034bce8]
mulss xmm0, xmm9
movss xmm10, dword [0x14034bdec]
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43b90000
movabs rax, 0x2aed6d622cd6421b
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0x71fa9af8310b729e
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r15, 0xa88010145be274d
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rax
movabs rsi, 0x71fa9af845781bd2
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.1400427a0
movabs rax, 0xa88696237df421e
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xc0], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x140377230]
xor edx, edx
lea rcx, [rbp]
call fcn.1400762e0
test al, al
je 0x14008042d
lea rcx, [0x140377230]
call fcn.14003b8a0
mov rax, qword [0x140376838]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43870000
movabs rax, 0x79e14d6920e8046e
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0x71fa9af845781ba6
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.14007cc90
test al, al
je 0x140080658
cmp qword [0x140377020], 0
je 0x14008064e
lea rdx, [0x140377040]
lea rcx, [rbp + 0xf0]
call fcn.140020260
nop
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0xa0], rax
mov r12, qword [rbp + 0xf0]
cmp r12, rax
je 0x140080642
add r12, 0x28
movzx ebx, byte [rbp + 0x1c]
nop dword [rax]
mov rax, qword [r12 - 0x28]
mov qword [rbp + 0x60], rax
lea rdx, [r12 - 0x20]
lea rcx, [rbp + 0x68]
call fcn.14000cc10
mov rax, qword [r12]
mov qword [rbp + 0x88], rax
mov eax, dword [r12 + 8]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x68]
mov r15, qword [rbp + 0x68]
mov r13, qword [rbp + 0x80]
cmp r13, 0xf
cmova rax, r15
movsxd rcx, dword [0x140377330]
test ecx, ecx
je 0x140080889
lea rsi, [0x140156098]
test rax, rax
cmovne rsi, rax
mov rdi, qword [0x140377338]
mov r14, rcx
shl r14, 4
add r14, rdi
cmp rdi, r14
je 0x140080860
nop dword [rax + rax]
mov r8, qword [rdi]
mov r9, qword [rdi + 8]
cmp r8, r9
je 0x140080853
mov rcx, rsi
cmp byte [r8], 0x2d
jne 0x140080849
inc r8
call fcn.14003ace0
test rax, rax
je 0x140080853
xor r14d, r14d
movabs rsi, 0x71fa9af845781bd2
cmp r13, 0xf
jbe 0x140080622
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14008061a
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080cae
mov rcx, r15
call fcn.140130784
add r12, 0x38
lea rax, [r12 - 0x28]
cmp rax, qword [rbp + 0xa0]
jne 0x140080530
movabs r15, 0xa88010145be274d
lea rcx, [rbp + 0xf0]
call fcn.1400034b0
call fcn.140043450
call fcn.14004c330
call fcn.140042e30
mov rcx, qword [0x140376838]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x14034bdb4]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x42f00000
movabs rax, 0xafb6f6e2cca440c
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.1400427a0
cmp dword [0x140374f28], 0xffffffff
je 0x140080f28
mov qword [rbp + 0xc0], 0
movabs rax, 0x7efa6e7120d24219
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
movabs rax, 0x71fa9af845176ff2
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.14006ea40
test al, al
je 0x140080e28
mov rdx, qword [0x140374ef8]
mov rcx, qword [0x1403768d8]
test rdx, rdx
jne 0x140080cb5
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x140080ced
call fcn.14003ace0
test rax, rax
jne 0x14008087c
add rdi, 0x10
cmp rdi, r14
jne 0x1400805b0
xor r14d, r14d
movabs rsi, 0x71fa9af845781bd2
cmp dword [0x140377340], r14d
jne 0x1400805eb
jmp 0x140080889
xor r14d, r14d
movabs rsi, 0x71fa9af845781bd2
movabs rax, 0xa88010145be0e20
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r15, 0xa88010145be274d
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x60]
test rdx, rdx
jne 0x14008091d
mov dword [rbp + 0x10], edx
movaps xmm1, xmm6
movss dword [rbp + 0x14], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x18], xmm6
movaps xmm2, xmm6
jmp 0x14008095d
mov rcx, qword [0x1403768d8]
test rcx, rcx
je 0x14008094e
cmp dword [0x140376844], 0
je 0x14008094e
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
movss xmm0, dword [rbp + 0x18]
movss xmm1, dword [rbp + 0x14]
subss xmm2, dword [0x140377034]
subss xmm1, dword [0x140377038]
subss xmm0, dword [0x14037703c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14008099a
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1400809a2
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x140]
call fcn.140001cc0
mov rdi, rax
movabs rax, 0xa88010145be0f6d
mov qword [rbp + 0xb0], rax
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rcx
mov qword [rbp + 0xb0], rsi
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rcx
mov qword [rbp + 0xb0], r15
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rcx
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.140084bf0
nop
mov r9, rdi
mov r8, rax
movzx edx, bl
lea rcx, [rbp + 0x20]
call fcn.140084d50
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140080a60
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.140003620
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140080aee
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080ae9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080c92
call fcn.140130784
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140080b39
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080b34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080c99
call fcn.140130784
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140080b8a
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080b85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080ca0
call fcn.140130784
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov rax, qword [0x140374ef8]
cmp qword [rbp + 0x60], rax
sete dl
mov qword [rbp + 0xc0], 0
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rcx, qword [rbp + 0xd0]
lea r9, [rbp + 0xc0]
xor r8d, r8d
call fcn.14007c3a0
test al, al
je 0x140080c2c
mov rax, qword [rbp + 0x60]
mov qword [0x140374ef8], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [0x140374f00]
call fcn.14000dae0
mov rax, qword [rbp + 0x88]
mov qword [0x140374f20], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140374f28], eax
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140080c69
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080c64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140080ca7
call fcn.140130784
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
mov r13, qword [rbp + 0x80]
mov r15, qword [rbp + 0x68]
jmp 0x1400805eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x140080ced
cmp dword [0x140376844], 0
je 0x140080ced
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140374ef8]
mov rcx, qword [0x1403768d8]
movsd xmm7, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x140080d09
mov qword [rbp + 0xc0], rdx
mov dword [rbp + 0xc8], edx
jmp 0x140080d3d
test rcx, rcx
je 0x140080d3d
cmp dword [0x140376844], 0
je 0x140080d3d
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1403768d8]
movsd xmm6, qword [rbp + 0xc0]
mov edi, dword [rbp + 0xc8]
mov rdx, qword [0x140377020]
test rdx, rdx
jne 0x140080d5c
mov rbx, r14
jmp 0x140080d9b
test rcx, rcx
je 0x140080d94
cmp dword [0x140376844], 0
je 0x140080d94
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140377020]
mov rcx, qword [0x1403768d8]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x140080da5
mov r8, r14
jmp 0x140080ddd
test rcx, rcx
je 0x140080dd6
cmp dword [0x140376844], 0
je 0x140080dd6
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140377020]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.14002aa00
movabs rsi, 0x71fa9af845781bd2
mov qword [rbp + 0xc0], 0
movabs rax, 0x6ea86a622ad24918
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
movabs rax, 0x71fa9af8450a74bd
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.14006ea40
test al, al
je 0x140081014
mov rdx, qword [0x140374ef8]
test rdx, rdx
je 0x140081014
mov dword [rbp + 0xc0], 1
mov rcx, qword [0x1403768d8]
test rcx, rcx
je 0x140081014
cmp dword [0x140376844], 0
je 0x140081014
add rdx, qword [0x1403767f8]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x140081014
movabs rax, 0x6ba8756220d2421e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x20], rax
movabs rax, 0x1496f9912d1d6df2
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x28], rax
movabs rax, 0x8b470360b4d88acf
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x30], rax
movabs rcx, 0x2b543429c193164
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
movabs rax, 0x8b667713c6b1ecef
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x158], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.14006e0c0
call fcn.140042e30
mov rcx, qword [0x140376838]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x14034bdb4]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x14034be38]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43520000
movabs rax, 0xafb6d6030cd4e1b
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.1400427a0
movabs rax, 0xaec646d27df4908
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140374fe8]
lea rcx, [rbp + 0x110]
call fcn.140070990
movabs rax, 0x45a864732ad04004
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
movabs rax, 0x719eff91350d78b1
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140374fe9]
lea rcx, [rbp + 0x110]
call fcn.140070990
movabs rax, 0xa8873642ecc4600
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140374fea]
lea rcx, [rbp + 0x110]
call fcn.140070990
movabs rax, 0xa88010120d34603
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140374fec]
lea rcx, [rbp + 0x110]
call fcn.140070990
movabs rax, 0x6feb6f6031cd4e09
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140374feb]
lea rcx, [rbp + 0x110]
call fcn.140070990
movabs rax, 0xa8801732ad2480e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
mov r8d, 0x10260
lea rdx, [0x140374ff0]
lea rcx, [rbp + 0x110]
call fcn.140078e20
call fcn.140042e30
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1401304e0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret