Function at 0x14007f780
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1402ff180]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor r14d, r14d
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x14030d800], eax
jle 0x14007f862
lea rcx, [0x14030d800]
call fcn.1400d9fb0
cmp dword [0x14030d800], 0xffffffff
jne 0x14007f862
mov qword [0x14030d910], r14
mov qword [0x14030d918], r14
mov byte [0x14030d810], r14b
mov dword [0x14030d920], r14d
mov r8d, 0xff
lea rdx, [0x1400eb469]
lea rcx, [0x14030d810]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x14030d90f], r14b
lea rcx, [0x14030d810]
call fcn.1400396e0
nop
lea rcx, [0x1400e1c40]
call fcn.1400d9eb4
nop
lea rcx, [0x14030d800]
call fcn.1400d9f44
mov eax, dword [rdi + rbx]
cmp dword [0x14030d740], eax
jle 0x14007f89a
lea rcx, [0x14030d740]
call fcn.1400d9fb0
cmp dword [0x14030d740], 0xffffffff
jne 0x14007f89a
lea rcx, [0x1400e1bd0]
call fcn.1400d9eb4
lea rcx, [0x14030d740]
call fcn.1400d9f44
xorps xmm6, xmm6
mov rdx, qword [0x1403047e0]
test rdx, rdx
jne 0x14007f8ca
mov dword [rbp + 0xa0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xa4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
xorps xmm2, xmm2
jmp 0x14007f916
mov rcx, qword [0x14030c760]
test rcx, rcx
je 0x14007f8fe
cmp dword [0x14030c5c8], 0
je 0x14007f8fe
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recv
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0xa0]
movss xmm0, dword [rbp + 0xa8]
movss xmm1, dword [rbp + 0xa4]
subss xmm2, dword [0x14030d614]
subss xmm1, dword [0x14030d618]
subss xmm0, dword [0x14030d61c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14007f953
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007f95b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x1402e1808]
jbe 0x14007fa28
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x68], xmm0
movdqa xmm7, xmmword [0x1402e18a0]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], al
mov dword [rbp + 0x90], 0xffffffff
mov rax, qword [rbp + 0x60]
mov qword [0x1403047e0], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x1403047e8]
call fcn.140034c60
mov rax, qword [rbp + 0x88]
mov qword [0x140304808], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140304810], eax
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14007fa1f
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007fa12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007fa12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d9ed4
movdqa xmm7, xmmword [0x1402e18a0]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], 0
mov rcx, qword [0x14030c5b8]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x1402e1770]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x1402e167c]
mulss xmm0, xmm9
movss xmm10, dword [0x1402e1788]
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43b90000
movabs rax, 0x36cdda574ccaf15d
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0xee259ca1eb3a600c
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r12, 0x16a8b63425a2940b
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rax
movabs r15, 0xee259ca19f490940
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.1400405e0
movabs rax, 0x16a8de5757c3f158
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xc0], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x14030d810]
xor edx, edx
lea rcx, [rbp]
call fcn.1400741b0
test al, al
je 0x14007fc0d
lea rcx, [0x14030d810]
call fcn.1400396e0
mov rax, qword [0x14030c5b8]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43870000
movabs rax, 0x65c1fa5c40f4b728
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
movabs rax, 0xee259ca19f490934
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.14007ab80
test al, al
je 0x14007fe3f
cmp qword [0x14030d600], 0
je 0x14007fe35
lea rdx, [0x14030d620]
lea rcx, [rbp + 0xf0]
call fcn.140029a00
nop
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0xa0], rax
mov r13, qword [rbp + 0xf0]
cmp r13, rax
je 0x14007fe29
add r13, 0x28
movzx ebx, byte [rbp + 0x10]
movzx edi, byte [rbp + 0x10]
nop dword [rax]
mov rax, qword [r13 - 0x28]
mov qword [rbp + 0x60], rax
lea rdx, [r13 - 0x20]
lea rcx, [rbp + 0x68]
call fcn.140014d00
mov rax, qword [r13]
mov qword [rbp + 0x88], rax
mov eax, dword [r13 + 8]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x68]
mov r12, qword [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rax, r12
movsxd rcx, dword [0x14030d910]
test ecx, ecx
je 0x140080052
lea r14, [0x1400eb469]
test rax, rax
cmovne r14, rax
mov rsi, qword [0x14030d918]
mov r15, rcx
shl r15, 4
add r15, rsi
cmp rsi, r15
je 0x140080029
nop word [rax + rax]
mov r8, qword [rsi]
mov r9, qword [rsi + 8]
cmp r8, r9
je 0x14008001c
mov rcx, r14
cmp byte [r8], 0x2d
jne 0x140080012
inc r8
call fcn.140038b20
test rax, rax
je 0x14008001c
xor r14d, r14d
movabs r15, 0xee259ca19f490940
mov rax, qword [rbp + 0x80]
cmp rax, 0xf
jbe 0x14007fe0a
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14007fe02
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400804c7
mov rcx, r12
call fcn.1400d9ed4
add r13, 0x38
lea rax, [r13 - 0x28]
cmp rax, qword [rbp + 0xa0]
jne 0x14007fd10
movabs r12, 0x16a8b63425a2940b
lea rcx, [rbp + 0xf0]
call fcn.140006930
call fcn.140041290
call fcn.14004a1b0
call fcn.140040c70
mov rcx, qword [0x14030c5b8]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1402e174c]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x42f00000
movabs rax, 0x16dbd85b4cd6f74a
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.1400405e0
cmp dword [0x140304810], 0xffffffff
je 0x140080804
mov qword [rbp + 0xc0], 0
movabs rax, 0x62dad94440cef15f
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xee259ca19f267d60
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.14006c8f0
test al, al
je 0x140080637
mov rdx, qword [0x1403047e0]
mov rcx, qword [0x14030c760]
test rdx, rdx
jne 0x1400804ce
mov qword [rbp + 0x14], rdx
mov dword [rbp + 0x1c], edx
jmp 0x140080506
call fcn.140038b20
test rax, rax
jne 0x140080045
add rsi, 0x10
cmp rsi, r15
jne 0x14007fd90
xor r14d, r14d
movabs r15, 0xee259ca19f490940
cmp dword [0x14030d920], r14d
jne 0x14007fdcb
jmp 0x140080052
xor r14d, r14d
movabs r15, 0xee259ca19f490940
movabs rax, 0x16a8b63425a2bd66
mov qword [rbp + 0xb0], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 8], rax
movabs r12, 0x16a8b63425a2940b
mov qword [rbp + 0xb0], r12
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x60]
test rdx, rdx
jne 0x1400800e6
mov dword [rbp + 0x14], edx
movaps xmm1, xmm6
movss dword [rbp + 0x18], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x1c], xmm6
movaps xmm2, xmm6
jmp 0x140080126
mov rcx, qword [0x14030c760]
test rcx, rcx
je 0x140080117
cmp dword [0x14030c5c8], 0
je 0x140080117
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recv
lea r8, [rbp + 0x14]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x14]
movss xmm0, dword [rbp + 0x1c]
movss xmm1, dword [rbp + 0x18]
subss xmm2, dword [0x14030d614]
subss xmm1, dword [0x14030d618]
subss xmm0, dword [0x14030d61c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140080163
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14008016b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x140]
call fcn.140004a80
mov rsi, rax
movabs rax, 0x16a8b63425a2bc2b
mov qword [rbp + 0xb0], rax
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x120], rcx
mov qword [rbp + 0xb0], r15
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x128], rcx
mov qword [rbp + 0xb0], r12
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0x110], rcx
mov qword [rbp + 0xb0], r15
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x120], xmm0
lea rax, [rbp + 0x120]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], 0
jne 0x140080201
movabs rax, 0x7fffffffffffffff
mov rdx, qword [rbp + 0x78]
sub rax, rdx
cmp rax, rcx
jb 0x140080d30
lea r9, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova r9, qword [rbp + 0x68]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x120]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 0x68]
movzx edx, dil
lea rcx, [rbp + 0x20]
call fcn.14008a860
nop
mov r9, rsi
lea r8, [rbp + 0x20]
movzx edx, bl
lea rcx, [rbp + 0x40]
call fcn.14008a670
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140080280
lea rdx, [rbp]
lea rcx, [rbp + 0x40]
call fcn.140006aa0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14008030e
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400804ab
call fcn.1400d9ed4
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140080359
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080354
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400804b2
call fcn.1400d9ed4
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x1400803aa
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400803a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400804b9
call fcn.1400d9ed4
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x140], 0
mov rax, qword [0x1403047e0]
cmp qword [rbp + 0x60], rax
sete dl
mov qword [rbp + 0xc0], 0
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rcx, qword [rbp + 0xd0]
lea r9, [rbp + 0xc0]
xor r8d, r8d
call fcn.14007a290
test al, al
je 0x14008044c
mov rax, qword [rbp + 0x60]
mov qword [0x1403047e0], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [0x1403047e8]
call fcn.140015fa0
mov rax, qword [rbp + 0x88]
mov qword [0x140304808], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140304810], eax
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140080489
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140080484
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400804c0
call fcn.1400d9ed4
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xd0], 0
mov r12, qword [rbp + 0x68]
jmp 0x14007fdcb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x140080506
cmp dword [0x14030c5c8], 0
je 0x140080506
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recv
lea r8, [rbp + 0x14]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1403047e0]
mov rcx, qword [0x14030c760]
movsd xmm7, qword [rbp + 0x14]
mov esi, dword [rbp + 0x1c]
test rdx, rdx
jne 0x140080522
mov qword [rbp + 0xc0], rdx
mov dword [rbp + 0xc8], edx
jmp 0x140080556
test rcx, rcx
je 0x140080556
cmp dword [0x14030c5c8], 0
je 0x140080556
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, recv
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14030c760]
movsd xmm6, qword [rbp + 0xc0]
mov edi, dword [rbp + 0xc8]
mov rdx, qword [0x14030d600]
test rdx, rdx
jne 0x140080575
mov rbx, r14
jmp 0x1400805b4
test rcx, rcx
je 0x1400805ad
cmp dword [0x14030c5c8], 0
je 0x1400805ad
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x14030d600]
mov rcx, qword [0x14030c760]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x1400805be
mov r8, r14
jmp 0x1400805f6
test rcx, rcx
je 0x1400805ef
cmp dword [0x14030c5c8], 0
je 0x1400805ef
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x14030d600]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.140034050
mov qword [rbp + 0xc0], 0
movabs rax, 0x6088dd574acefa5e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xee25f9cdfc206125
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.14006c8f0
test al, al
je 0x140080713
mov rdx, qword [0x1403047e0]
test rdx, rdx
je 0x140080713
mov dword [rbp + 0xc0], 1
mov rcx, qword [0x14030c760]
test rcx, rcx
je 0x140080713
cmp dword [0x14030c5c8], 0
je 0x140080713
add rdx, qword [0x14030c578]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xc0], 0
movabs rax, 0x7ecdc0144ec1fb47
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xee259ca1fa256a29
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.14006c8f0
test al, al
je 0x1400808f0
mov rdx, qword [0x1403047e0]
test rdx, rdx
je 0x1400808f0
mov dword [rbp + 0xc0], 2
mov rcx, qword [0x14030c760]
test rcx, rcx
je 0x1400808f0
cmp dword [0x14030c5c8], 0
je 0x1400808f0
add rdx, qword [0x14030c578]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x1400808f0
movabs rax, 0x7788c25740cef158
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x20], rax
movabs rax, 0x8b49ffc8f72c7f60
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x28], rax
movabs rax, 0x6c4cf5d90ca05fa5
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x30], rax
movabs rcx, 0x7eec39af64412572
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
movabs rax, 0x6c6d81aa7ec93985
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x158], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.14006bf70
call fcn.140040c70
mov rcx, qword [0x14030c5b8]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1402e174c]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x1402e17d4]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xc0], xmm0
mov dword [rbp + 0xc4], 0x43520000
movabs rax, 0x16dbda5550d1fd5d
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp]
call fcn.1400405e0
movabs rax, 0x16ccd35847c3fa4e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [0x1403048e8]
lea rcx, [rbp]
call fcn.14006e830
movabs rax, 0x5988d3464accf342
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xee41f9c8ef3c6a23
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [0x1403048e9]
lea rcx, [rbp]
call fcn.14006e830
movabs rax, 0x16a8c4514ed0f546
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [0x1403048ea]
lea rcx, [rbp]
call fcn.14006e830
movabs rax, 0x16a8b63440cff545
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [0x1403048ec]
lea rcx, [rbp]
call fcn.14006e830
movabs rax, 0x73cbd85551d1fd4f
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
lea rdx, [0x1403048eb]
lea rcx, [rbp]
call fcn.14006e830
movabs rax, 0x16a8b6464acefb48
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp], xmm0
mov r8d, 0x10260
lea rdx, [0x1403048f0]
lea rcx, [rbp]
call fcn.140076d00
call fcn.140040c70
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1400d9c30
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140004a60
nop
int3