Function at 0x14007bbd0
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x200
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140290040]
xor rax, rsp
mov qword [rbp + 0x150], rax
xor edi, edi
mov esi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rsi + rbx]
cmp dword [0x1402c10a0], eax
jle 0x14007bcb0
lea rcx, [0x1402c10a0]
call fcn.1400861c8
cmp dword [0x1402c10a0], 0xffffffff
jne 0x14007bcb0
mov qword [0x1402c11b0], rdi
mov qword [0x1402c11b8], rdi
mov byte [0x1402c10b0], dil
mov dword [0x1402c11c0], edi
mov r8d, 0xff
lea rdx, [0x14008bc3d]
lea rcx, [0x1402c10b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x1402c11af], dil
lea rcx, [0x1402c10b0]
call fcn.140037400
nop
lea rcx, [0x14008aac0]
call fcn.1400860cc
nop
lea rcx, [0x1402c10a0]
call fcn.14008615c
mov eax, dword [rsi + rbx]
cmp dword [0x1402c0fe0], eax
jle 0x14007bce8
lea rcx, [0x1402c0fe0]
call fcn.1400861c8
cmp dword [0x1402c0fe0], 0xffffffff
jne 0x14007bce8
lea rcx, [0x14008aa50]
call fcn.1400860cc
lea rcx, [0x1402c0fe0]
call fcn.14008615c
xorps xmm6, xmm6
mov rdx, qword [0x1402be4c8]
test rdx, rdx
jne 0x14007bd18
mov dword [rbp + 0xa0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xa4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
xorps xmm2, xmm2
jmp 0x14007bd64
mov rcx, qword [0x1402bf758]
test rcx, rcx
je 0x14007bd4c
cmp dword [0x1402bf6c4], 0
je 0x14007bd4c
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0xa0]
movss xmm0, dword [rbp + 0xa8]
movss xmm1, dword [rbp + 0xa4]
subss xmm2, dword [0x1402bfb24]
subss xmm1, dword [0x1402bfb28]
subss xmm0, dword [0x1402bfb2c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14007bda1
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007bda9
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x140282078]
jbe 0x14007be76
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x68], xmm0
movdqa xmm7, xmmword [0x140282100]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], al
mov dword [rbp + 0x90], 0xffffffff
mov rax, qword [rbp + 0x60]
mov qword [0x1402be4c8], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x1402be4d0]
call fcn.140032e60
mov rax, qword [rbp + 0x88]
mov qword [0x1402be4f0], rax
mov eax, dword [rbp + 0x90]
mov dword [0x1402be4f8], eax
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x14007be6d
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007be60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007be60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140085e60
movdqa xmm7, xmmword [0x140282100]
movdqu xmmword [rbp + 0x78], xmm7
mov byte [rbp + 0x68], 0
mov rcx, qword [0x1402bf6b8]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x140281fd0]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x140281ed8]
mulss xmm0, xmm9
movss xmm10, dword [0x140281fe4]
subss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43b90000
movabs rax, 0x6ca0d3e08bada1cf
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0x9bc26c865c46c58a
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
movabs r14, 0x4cc5bf83e2c5c499
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rsi, 0x9bc26c862835acc6
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp]
call fcn.14003e300
movabs rax, 0x4cc5d7e090a4a1ca
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xb0], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
lea r8, [0x1402c10b0]
xor edx, edx
lea rcx, [rbp]
call fcn.140071460
test al, al
je 0x14007c05a
lea rcx, [0x1402c10b0]
call fcn.140037400
mov rax, qword [0x1402bf6b8]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43870000
movabs rax, 0x3facf3eb8793e7ba
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0x9bc26c862835acb2
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp]
call fcn.140077e10
test al, al
je 0x14007c272
cmp qword [0x1402bfb10], 0
je 0x14007c268
lea rdx, [0x1402bfb30]
lea rcx, [rbp + 0xe0]
call fcn.140029030
nop
mov r12, qword [rbp + 0xe8]
mov r15, qword [rbp + 0xe0]
cmp r15, r12
je 0x14007c25c
add r15, 0x28
nop dword [rax + rax]
mov rax, qword [r15 - 0x28]
mov qword [rbp + 0x60], rax
lea rdx, [r15 - 0x20]
lea rcx, [rbp + 0x68]
call fcn.140006fe0
mov rax, qword [r15]
mov qword [rbp + 0x88], rax
mov eax, dword [r15 + 8]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x68]
mov r14, qword [rbp + 0x68]
mov r13, qword [rbp + 0x80]
cmp r13, 0xf
cmova rax, r14
movsxd rcx, dword [0x1402c11b0]
test ecx, ecx
je 0x14007c4a0
lea rdi, [0x14008bc3d]
test rax, rax
cmovne rdi, rax
mov rbx, qword [0x1402c11b8]
mov rsi, rcx
shl rsi, 4
add rsi, rbx
cmp rbx, rsi
je 0x14007c47a
nop word [rax + rax]
mov r8, qword [rbx]
mov r9, qword [rbx + 8]
cmp r8, r9
je 0x14007c46d
mov rcx, rdi
cmp byte [r8], 0x2d
jne 0x14007c463
inc r8
call fcn.140036840
test rax, rax
je 0x14007c46d
xor edi, edi
movabs rsi, 0x9bc26c862835acc6
cmp r13, 0xf
jbe 0x14007c241
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14007c239
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c8bf
mov rcx, r14
call fcn.140085e60
add r15, 0x38
lea rax, [r15 - 0x28]
cmp rax, r12
jne 0x14007c150
movabs r14, 0x4cc5bf83e2c5c499
lea rcx, [rbp + 0xe0]
call fcn.140007140
call fcn.14003efb0
call fcn.140047e70
call fcn.14003e990
mov rcx, qword [0x1402bf6b8]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x140281fb0]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x42f00000
movabs rax, 0x4cb6d1ec8bb1a7d8
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.14003e300
cmp dword [0x1402be4f8], 0xffffffff
je 0x14007cc24
mov qword [rbp + 0xb0], 0
movabs rax, 0x38b7d0f387a9a1cd
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0x9bc26c86285ad8e6
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.14006a5b0
test al, al
je 0x14007ca31
mov rdx, qword [0x1402be4c8]
mov rcx, qword [0x1402bf758]
test rdx, rdx
jne 0x14007c8c6
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x14007c8fe
call fcn.140036840
test rax, rax
jne 0x14007c494
add rbx, 0x10
cmp rbx, rsi
jne 0x14007c1d0
xor edi, edi
movabs rsi, 0x9bc26c862835acc6
cmp dword [0x1402c11c0], edi
jne 0x14007c20a
jmp 0x14007c4a0
xor edi, edi
movabs rsi, 0x9bc26c862835acc6
movabs rax, 0x4cc5bf83e2c5edf4
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
movabs r14, 0x4cc5bf83e2c5c499
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x60]
test rdx, rdx
jne 0x14007c534
mov dword [rbp + 0x10], edx
movaps xmm1, xmm6
movss dword [rbp + 0x14], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x18], xmm6
movaps xmm2, xmm6
jmp 0x14007c574
mov rcx, qword [0x1402bf758]
test rcx, rcx
je 0x14007c565
cmp dword [0x1402bf6c4], 0
je 0x14007c565
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
movss xmm0, dword [rbp + 0x18]
movss xmm1, dword [rbp + 0x14]
subss xmm2, dword [0x1402bfb24]
subss xmm1, dword [0x1402bfb28]
subss xmm0, dword [0x1402bfb2c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14007c5b1
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007c5b9
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x120]
call fcn.140001230
mov rbx, rax
movabs rax, 0x4cc5bf83e2c5ecb9
mov qword [rbp + 0xa0], rax
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rcx
mov qword [rbp + 0xa0], rsi
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rcx
mov qword [rbp + 0xa0], r14
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rcx
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.140007f80
nop
mov r9, rbx
mov r8, rax
lea rcx, [rbp + 0x20]
call fcn.140080910
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14007c671
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.140007340
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14007c6ff
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c6fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c8a3
call fcn.140085e60
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14007c74a
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c745
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c8aa
call fcn.140085e60
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14007c79b
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c796
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c8b1
call fcn.140085e60
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
mov rax, qword [0x1402be4c8]
cmp qword [rbp + 0x60], rax
sete dl
mov qword [rbp + 0xb0], 0
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rcx, qword [rbp + 0xc0]
lea r9, [rbp + 0xb0]
xor r8d, r8d
call fcn.140077520
test al, al
je 0x14007c83d
mov rax, qword [rbp + 0x60]
mov qword [0x1402be4c8], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [0x1402be4d0]
call fcn.140007b50
mov rax, qword [rbp + 0x88]
mov qword [0x1402be4f0], rax
mov eax, dword [rbp + 0x90]
mov dword [0x1402be4f8], eax
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14007c87a
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007c875
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007c8b8
call fcn.140085e60
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
mov r13, qword [rbp + 0x80]
mov r14, qword [rbp + 0x68]
jmp 0x14007c20a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x14007c8fe
cmp dword [0x1402bf6c4], 0
je 0x14007c8fe
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1402be4c8]
mov rcx, qword [0x1402bf758]
movsd xmm7, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x14007c914
mov qword [rbp], rdx
mov dword [rbp + 8], edx
jmp 0x14007c945
test rcx, rcx
je 0x14007c945
cmp dword [0x1402bf6c4], 0
je 0x14007c945
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1402bf758]
movsd xmm6, qword [rbp]
mov edi, dword [rbp + 8]
mov rdx, qword [0x1402bfb10]
test rdx, rdx
jne 0x14007c95d
xor ebx, ebx
jmp 0x14007c9a0
test rcx, rcx
je 0x14007c999
cmp dword [0x1402bf6c4], 0
je 0x14007c999
add rdx, 0x20
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1402bfb10]
mov rcx, qword [0x1402bf758]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x14007c9aa
xor r8d, r8d
jmp 0x14007c9e6
test rcx, rcx
je 0x14007c9df
cmp dword [0x1402bf6c4], 0
je 0x14007c9df
add rdx, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1402bfb10]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.140032270
movabs rsi, 0x9bc26c862835acc6
mov qword [rbp + 0xb0], 0
movabs rax, 0x28e5d4e08da9aacc
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0x9bc26c862847c3a9
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.14006a5b0
test al, al
je 0x14007cb20
mov rdx, qword [0x1402be4c8]
test rdx, rdx
je 0x14007cb20
mov dword [rbp + 0xb0], 1
mov rcx, qword [0x1402bf758]
test rcx, rcx
je 0x14007cb20
cmp dword [0x1402bf6c4], 0
je 0x14007cb20
add rdx, qword [0x1402bf668]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xb0], 0
movabs rax, 0x23aadba389a6abd5
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0x9bc26c862835acb4
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.14006a5b0
test al, al
je 0x14007cd10
mov rdx, qword [0x1402be4c8]
test rdx, rdx
je 0x14007cd10
mov dword [rbp + 0xb0], 2
mov rcx, qword [0x1402bf758]
test rcx, rcx
je 0x14007cd10
cmp dword [0x1402bf6c4], 0
je 0x14007cd10
add rdx, qword [0x1402bf668]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14007cd10
movabs rax, 0x2de5cbe087a9a1ca
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x20], rax
movabs rax, 0xfeae0fef4050dae6
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x28], rax
movabs rax, 0xbac1ae26f4865893
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x30], rax
movabs rcx, 0xa8916c18d6640c88
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movabs rax, 0xbae0da5586ef3eb3
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140069c30
call fcn.14003e990
mov rcx, qword [0x1402bf6b8]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x140281fb0]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x140282040]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43520000
movabs rax, 0x4cb6d3e297b6adcf
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.14003e300
movabs rax, 0x4ca1daef80a4aadc
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x1402be5cc]
lea rcx, [rbp + 0x100]
call fcn.14006bbd0
movabs rax, 0x3e5daf18daba3d0
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0x9ba609ef5840cfa5
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x1402be5cd]
lea rcx, [rbp + 0x100]
call fcn.14006bbd0
movabs rax, 0x4cc5cde689b7a5d4
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x1402be5ce]
lea rcx, [rbp + 0x100]
call fcn.14006bbd0
movabs rax, 0x4cc5bf8387a8a5d7
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x1402be5d0]
lea rcx, [rbp + 0x100]
call fcn.14006bbd0
movabs rax, 0x29a6d1e296b6addd
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x1402be5cf]
lea rcx, [rbp + 0x100]
call fcn.14006bbd0
movabs rax, 0x4cc5bff18da9abda
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
mov r8d, 0x10260
lea rdx, [0x1402be5d4]
lea rcx, [rbp + 0x100]
call fcn.140073fa0
call fcn.14003e990
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140085e40
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret