Function at 0x14007c060
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140304080]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor r14d, r14d
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140358de4], eax
jle 0x14007c142
lea rcx, [0x140358de4]
call fcn.1400e4790
cmp dword [0x140358de4], 0xffffffff
jne 0x14007c142
mov qword [0x140358ef0], r14
mov qword [0x140358ef8], r14
mov byte [0x140358df0], r14b
mov dword [0x140358f00], r14d
mov r8d, 0xff
lea rdx, [0x1400f9728]
lea rcx, [0x140358df0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x140358eef], r14b
lea rcx, [0x140358df0]
call fcn.1400377f0
nop
lea rcx, [0x1400e9fd0]
call fcn.1400e4694
nop
lea rcx, [0x140358de4]
call fcn.1400e4724
mov eax, dword [rdi + rbx]
cmp dword [0x140358d18], eax
jle 0x14007c17a
lea rcx, [0x140358d18]
call fcn.1400e4790
cmp dword [0x140358d18], 0xffffffff
jne 0x14007c17a
lea rcx, [0x1400e9f60]
call fcn.1400e4694
lea rcx, [0x140358d18]
call fcn.1400e4724
xorps xmm6, xmm6
mov rdx, qword [0x140356be0]
test rdx, rdx
jne 0x14007c1aa
mov dword [rbp + 0xa0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xa4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
xorps xmm2, xmm2
jmp 0x14007c1f6
mov rcx, qword [0x1403583a8]
test rcx, rcx
je 0x14007c1de
cmp dword [0x140358314], 0
je 0x14007c1de
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0xa0]
movss xmm0, dword [rbp + 0xa8]
movss xmm1, dword [rbp + 0xa4]
subss xmm2, dword [0x140358b54]
subss xmm1, dword [0x140358b58]
subss xmm0, dword [0x140358b5c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14007c233
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007c23b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x1402ef4d0]
jbe 0x14007c308
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x68], xmm0
movdqa xmm7, xmmword [0x1402ef570]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], al
mov dword [rbp + 0x90], 0xffffffff
mov rax, qword [rbp + 0x60]
mov qword [0x140356be0], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x140356be8]
call fcn.14002dbd0
mov rax, qword [rbp + 0x88]
mov qword [0x140356c08], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140356c10], eax
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14007c2ff
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c2f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007c2f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e46b4
movdqa xmm7, xmmword [0x1402ef570]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], 0
mov rcx, qword [0x140358308]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x1402ef438]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x1402ef34c]
mulss xmm0, xmm9
movss xmm10, dword [0x1402ef44c]
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43b90000
movabs rax, 0x76c86bd49166c09
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0x6b09c31790ce7454
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r15, 0x2709eade207e095f
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rax
movabs rsi, 0x6b09c317e4bd1d18
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.14003e6f0
movabs rax, 0x270982bd521f6c0c
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xc0], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x140358df0]
xor edx, edx
lea rcx, [rbp]
call fcn.140072220
test al, al
je 0x14007c4ed
lea rcx, [0x140358df0]
call fcn.1400377f0
mov rax, qword [0x140358308]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43870000
movabs rax, 0x5460a6b645282a7c
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0x6b09c317e4bd1d6c
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.140078bd0
test al, al
je 0x14007c718
cmp qword [0x140358b40], 0
je 0x14007c70e
lea rdx, [0x140358b60]
lea rcx, [rbp + 0xf0]
call fcn.140020350
nop
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0xa0], rax
mov r12, qword [rbp + 0xf0]
cmp r12, rax
je 0x14007c702
add r12, 0x28
movzx ebx, byte [rbp + 0x1c]
nop dword [rax]
mov rax, qword [r12 - 0x28]
mov qword [rbp + 0x60], rax
lea rdx, [r12 - 0x20]
lea rcx, [rbp + 0x68]
call fcn.14000cab0
mov rax, qword [r12]
mov qword [rbp + 0x88], rax
mov eax, dword [r12 + 8]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x68]
mov r15, qword [rbp + 0x68]
mov r13, qword [rbp + 0x80]
cmp r13, 0xf
cmova rax, r15
movsxd rcx, dword [0x140358ef0]
test ecx, ecx
je 0x14007c949
lea rsi, [0x1400f9728]
test rax, rax
cmovne rsi, rax
mov rdi, qword [0x140358ef8]
mov r14, rcx
shl r14, 4
add r14, rdi
cmp rdi, r14
je 0x14007c920
nop dword [rax + rax]
mov r8, qword [rdi]
mov r9, qword [rdi + 8]
cmp r8, r9
je 0x14007c913
mov rcx, rsi
cmp byte [r8], 0x2d
jne 0x14007c909
inc r8
call fcn.140036c30
test rax, rax
je 0x14007c913
xor r14d, r14d
movabs rsi, 0x6b09c317e4bd1d18
cmp r13, 0xf
jbe 0x14007c6e2
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x14007c6da
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007cd6e
mov rcx, r15
call fcn.1400e46b4
add r12, 0x38
lea rax, [r12 - 0x28]
cmp rax, qword [rbp + 0xa0]
jne 0x14007c5f0
movabs r15, 0x2709eade207e095f
lea rcx, [rbp + 0xf0]
call fcn.140003530
call fcn.14003f3a0
call fcn.140048260
call fcn.14003ed80
mov rcx, qword [0x140358308]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1402ef414]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x42f00000
movabs rax, 0x277a84b1490a6a1e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.14003e6f0
cmp dword [0x140356c10], 0xffffffff
je 0x14007cfe8
mov qword [rbp + 0xc0], 0
movabs rax, 0x537b85ae45126c0b
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
movabs rax, 0x6b09c317e4d26938
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.14006a9a0
test al, al
je 0x14007cee8
mov rdx, qword [0x140356be0]
mov rcx, qword [0x1403583a8]
test rdx, rdx
jne 0x14007cd75
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x14007cdad
call fcn.140036c30
test rax, rax
jne 0x14007c93c
add rdi, 0x10
cmp rdi, r14
jne 0x14007c670
xor r14d, r14d
movabs rsi, 0x6b09c317e4bd1d18
cmp dword [0x140358f00], r14d
jne 0x14007c6ab
jmp 0x14007c949
xor r14d, r14d
movabs rsi, 0x6b09c317e4bd1d18
movabs rax, 0x2709eade207e2032
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r15, 0x2709eade207e095f
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x60]
test rdx, rdx
jne 0x14007c9dd
mov dword [rbp + 0x10], edx
movaps xmm1, xmm6
movss dword [rbp + 0x14], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x18], xmm6
movaps xmm2, xmm6
jmp 0x14007ca1d
mov rcx, qword [0x1403583a8]
test rcx, rcx
je 0x14007ca0e
cmp dword [0x140358314], 0
je 0x14007ca0e
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
movss xmm0, dword [rbp + 0x18]
movss xmm1, dword [rbp + 0x14]
subss xmm2, dword [0x140358b54]
subss xmm1, dword [0x140358b58]
subss xmm0, dword [0x140358b5c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14007ca5a
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007ca62
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x140]
call fcn.140001d30
mov rdi, rax
movabs rax, 0x2709eade207e217f
mov qword [rbp + 0xb0], rax
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rcx
mov qword [rbp + 0xb0], rsi
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rcx
mov qword [rbp + 0xb0], r15
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rcx
mov qword [rbp + 0xb0], rsi
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea r8, [rbp + 0x110]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.140080d80
nop
mov r9, rdi
mov r8, rax
movzx edx, bl
lea rcx, [rbp + 0x20]
call fcn.140080ee0
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007cb20
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.1400036a0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14007cbae
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cba9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007cd52
call fcn.1400e46b4
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14007cbf9
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cbf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007cd59
call fcn.1400e46b4
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x14007cc4a
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cc45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007cd60
call fcn.1400e46b4
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov rax, qword [0x140356be0]
cmp qword [rbp + 0x60], rax
sete dl
mov qword [rbp + 0xc0], 0
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rcx, qword [rbp + 0xd0]
lea r9, [rbp + 0xc0]
xor r8d, r8d
call fcn.1400782e0
test al, al
je 0x14007ccec
mov rax, qword [rbp + 0x60]
mov qword [0x140356be0], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [0x140356be8]
call fcn.14000d890
mov rax, qword [rbp + 0x88]
mov qword [0x140356c08], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140356c10], eax
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x14007cd29
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007cd24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007cd67
call fcn.1400e46b4
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
mov r13, qword [rbp + 0x80]
mov r15, qword [rbp + 0x68]
jmp 0x14007c6ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x14007cdad
cmp dword [0x140358314], 0
je 0x14007cdad
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140356be0]
mov rcx, qword [0x1403583a8]
movsd xmm7, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x14007cdc9
mov qword [rbp + 0xc0], rdx
mov dword [rbp + 0xc8], edx
jmp 0x14007cdfd
test rcx, rcx
je 0x14007cdfd
cmp dword [0x140358314], 0
je 0x14007cdfd
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1403583a8]
movsd xmm6, qword [rbp + 0xc0]
mov edi, dword [rbp + 0xc8]
mov rdx, qword [0x140358b40]
test rdx, rdx
jne 0x14007ce1c
mov rbx, r14
jmp 0x14007ce5b
test rcx, rcx
je 0x14007ce54
cmp dword [0x140358314], 0
je 0x14007ce54
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140358b40]
mov rcx, qword [0x1403583a8]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x14007ce65
mov r8, r14
jmp 0x14007ce9d
test rcx, rcx
je 0x14007ce96
cmp dword [0x140358314], 0
je 0x14007ce96
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140358b40]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.14002aea0
movabs rsi, 0x6b09c317e4bd1d18
mov qword [rbp + 0xc0], 0
movabs rax, 0x432981bd4f12670a
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
movabs rax, 0x6b09c317e4cf7277
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.14006a9a0
test al, al
je 0x14007d0d4
mov rdx, qword [0x140356be0]
test rdx, rdx
je 0x14007d0d4
mov dword [rbp + 0xc0], 1
mov rcx, qword [0x1403583a8]
test rcx, rcx
je 0x14007d0d4
cmp dword [0x140358314], 0
je 0x14007d0d4
add rdx, qword [0x1403582c0]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14007d0d4
movabs rax, 0x46299ebd45126c0c
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x20], rax
movabs rax, 0xe65a07e8cd86b38
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x28], rax
movabs rax, 0xb36fa0db8af3e759
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x30], rax
movabs rcx, 0x51fb3d593cc7039a
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
movabs rax, 0xb34ed4a8f89a8179
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x158], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.14006a020
call fcn.14003ed80
mov rcx, qword [0x140358308]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1402ef414]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x1402ef498]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43520000
movabs rax, 0x277a86bf550d6009
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x110]
call fcn.14003e6f0
movabs rax, 0x276d8fb2421f671a
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140356cd8]
lea rcx, [rbp + 0x110]
call fcn.14006c8d0
movabs rax, 0x68298fac4f106e16
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
movabs rax, 0x6b6da67e94c87e7b
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140356cd9]
lea rcx, [rbp + 0x110]
call fcn.14006c8d0
movabs rax, 0x270998bb4b0c6812
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140356cda]
lea rcx, [rbp + 0x110]
call fcn.14006c8d0
movabs rax, 0x2709eade45136811
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140356cdc]
lea rcx, [rbp + 0x110]
call fcn.14006c8d0
movabs rax, 0x426a84bf540d601b
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [0x140356cdb]
lea rcx, [rbp + 0x110]
call fcn.14006c8d0
movabs rax, 0x2709eaac4f12661c
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x110], xmm0
mov r8d, 0x10260
lea rdx, [0x140356ce0]
lea rcx, [rbp + 0x110]
call fcn.140074d60
call fcn.14003ed80
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1400e4410
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret