Function at 0x140088530
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x230
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1402e6100]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor r12d, r12d
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140319fe0], eax
jle 0x140088616
lea rcx, [0x140319fe0]
call fcn.1400999b0
cmp dword [0x140319fe0], 0xffffffff
jne 0x140088616
mov qword [0x14031a120], r12
mov qword [0x14031a128], r12
mov byte [0x14031a020], r12b
mov dword [0x14031a130], r12d
mov r8d, 0xff
lea rdx, [0x1400db0b0]
lea rcx, [0x14031a020]
call fcn.1400c85c0
mov byte [0x14031a11f], r12b
lea rcx, [0x14031a020]
call fcn.1400412b0
nop
lea rcx, [0x1400ce960]
call fcn.140099c8c
nop
lea rcx, [0x140319fe0]
call fcn.140099944
mov eax, dword [rdi + rbx]
cmp dword [0x140319da8], eax
jle 0x14008864e
lea rcx, [0x140319da8]
call fcn.1400999b0
cmp dword [0x140319da8], 0xffffffff
jne 0x14008864e
lea rcx, [0x1400ce950]
call fcn.140099c8c
lea rcx, [0x140319da8]
call fcn.140099944
xorps xmm6, xmm6
mov rdx, qword [0x140315b30]
test rdx, rdx
jne 0x14008867e
mov dword [rbp + 0xc0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xc4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xc8], xmm0
xorps xmm2, xmm2
jmp 0x1400886ca
mov rcx, qword [0x140318b48]
test rcx, rcx
je 0x1400886b2
cmp dword [0x140318b40], 0
je 0x1400886b2
add rdx, 0x90
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0xc0]
movss xmm0, dword [rbp + 0xc8]
movss xmm1, dword [rbp + 0xc4]
subss xmm2, dword [0x140319a64]
subss xmm1, dword [0x140319a68]
subss xmm0, dword [0x140319a6c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140088707
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14008870f
movaps xmm0, xmm1
call fcn.1400c6f50
comiss xmm0, dword [0x1402d17a0]
jbe 0x1400887ab
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rax
movups xmmword [rbp + 0x88], xmm0
movdqa xmm1, xmmword [0x1402d1850]
movdqu xmmword [rbp + 0x98], xmm1
mov byte [rbp + 0x88], al
mov dword [rbp + 0xb0], 0xffffffff
mov rax, qword [rbp + 0x80]
mov qword [0x140315b30], rax
lea rdx, [rbp + 0x88]
lea rcx, [0x140315b38]
call fcn.14001bdd0
mov rax, qword [rbp + 0xa8]
mov qword [0x140315b58], rax
mov eax, dword [rbp + 0xb0]
mov dword [0x140315b60], eax
lea rcx, [rbp + 0x88]
call fcn.14000a800
mov rcx, qword [0x1403189a0]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x1402d16b8]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm10, dword [0x1402d15b8]
mulss xmm0, xmm10
movss xmm11, dword [0x1402d16cc]
subss xmm0, xmm11
movss dword [rbp + 0xd0], xmm0
mov dword [rbp + 0xd4], 0x43d20000
movabs r15, 0x988709a46046c77b
mov qword [rbp + 0xc0], r15
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a462448ee8a
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
movabs r14, 0xb8e265c7092ea22d
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x130], rax
movabs r13, 0x5b486a46503b87c6
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140047c70
movabs rax, 0xb8e20da47b4fc77e
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xd0], 0
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x14031a020]
xor edx, edx
lea rcx, [rbp]
call fcn.14007b580
test al, al
je 0x140088990
lea rcx, [0x14031a020]
call fcn.1400412b0
mov rax, qword [0x1403189a0]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0xd0], xmm0
mov dword [rbp + 0xd4], 0x439d8000
movabs rax, 0xcb8b29af6c78810e
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a46503b87b2
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140083230
test al, al
je 0x140088b8f
cmp qword [0x140319a50], 0
je 0x140088b85
lea rdx, [rbp + 0x140]
call fcn.140031280
nop
mov r15, qword [rbp + 0x148]
mov r14, qword [rbp + 0x140]
cmp r14, r15
je 0x140088b65
add r14, 0x28
movabs rsi, 0x7fffffffffffffff
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [r14 - 0x28]
mov qword [rbp + 0x80], rax
lea rdx, [r14 - 0x20]
lea rcx, [rbp + 0x88]
call fcn.14000a540
mov rax, qword [r14]
mov qword [rbp + 0xa8], rax
mov eax, dword [r14 + 8]
mov dword [rbp + 0xb0], eax
lea rax, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova rax, qword [rbp + 0x88]
movsxd rcx, dword [0x14031a120]
test ecx, ecx
je 0x140088d9c
lea rdi, [0x1400db0b0]
test rax, rax
cmovne rdi, rax
mov rbx, qword [0x14031a128]
mov rsi, rcx
shl rsi, 4
add rsi, rbx
cmp rbx, rsi
je 0x140088d79
nop dword [rax]
mov r8, qword [rbx]
mov r9, qword [rbx + 8]
cmp r8, r9
je 0x140088d6c
mov rcx, rdi
cmp byte [r8], 0x2d
jne 0x140088d62
inc r8
call fcn.140040700
test rax, rax
je 0x140088d6c
movabs rsi, 0x7fffffffffffffff
lea rcx, [rbp + 0x88]
call fcn.14000a800
add r14, 0x38
lea rax, [r14 - 0x28]
cmp rax, r15
jne 0x140088a90
lea rcx, [rbp + 0x140]
call fcn.14000a660
movabs r14, 0xb8e265c7092ea22d
movabs r15, 0x988709a46046c77b
call fcn.140048840
call fcn.140051740
call fcn.140048270
mov rcx, qword [0x1403189a0]
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
mulss xmm2, xmm10
addss xmm2, dword [0x1402d1694]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm7
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm10
subss xmm0, xmm11
movss dword [rbp + 0xd0], xmm0
mov dword [rbp + 0xd4], 0x43450000
movabs rax, 0xb8910ba8605ac16c
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140047c70
cmp dword [0x140315b60], 0xffffffff
je 0x14008980b
mov qword [rbp + 0xd0], 0
movabs rax, 0xcc900ab76c42c779
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a465054f3e6
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x140089246
mov rdx, qword [0x140315b30]
mov rcx, qword [0x140318b48]
test rdx, rdx
jne 0x1400890db
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x140089113
call fcn.140040700
test rax, rax
jne 0x140088d92
add rbx, 0x10
cmp rbx, rsi
jne 0x140088b10
movabs rsi, 0x7fffffffffffffff
cmp dword [0x14031a130], 0
jne 0x140088b48
jmp 0x140088d9c
movabs rsi, 0x7fffffffffffffff
movabs rax, 0xb8e265c7092e8b40
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
movabs rdi, 0xb8e265c7092ea22d
mov qword [rbp + 0xc0], rdi
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x80]
test rdx, rdx
jne 0x140088e33
mov dword [rbp + 0x10], edx
movaps xmm1, xmm6
movss dword [rbp + 0x14], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x18], xmm6
movaps xmm2, xmm6
jmp 0x140088e73
mov rcx, qword [0x140318b48]
test rcx, rcx
je 0x140088e64
cmp dword [0x140318b40], 0
je 0x140088e64
add rdx, 0x90
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
movss xmm0, dword [rbp + 0x18]
movss xmm1, dword [rbp + 0x14]
subss xmm2, dword [0x140319a64]
subss xmm1, dword [0x140319a68]
subss xmm0, dword [0x140319a6c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140088eb0
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x140088eb8
movaps xmm0, xmm1
call fcn.1400c6f50
cvttss2si edx, xmm0
lea rcx, [rbp + 0x60]
call fcn.1400055a0
mov rbx, rax
movabs rax, 0xb8e265c7092e8a0d
mov qword [rbp + 0xc0], rax
mov rcx, qword [rbp + 0xc0]
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0xc0], r13
mov rcx, qword [rbp + 0xc0]
mov qword [rbp + 0x138], rcx
mov qword [rbp + 0xc0], rdi
mov rcx, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rcx
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x130], xmm0
lea rax, [rbp + 0x130]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140088f50
mov rax, rsi
mov rdx, qword [rbp + 0x98]
sub rax, rdx
cmp rax, rcx
jb 0x140089d51
lea r9, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova r9, qword [rbp + 0x88]
mov qword [rsp + 0x30], rcx
lea rax, [rbp + 0x130]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x40]
call fcn.140020340
nop
mov r9, rbx
lea r8, [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140093340
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140088fc2
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.14000a8a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp + 0x20]
call fcn.14000a800
nop
lea rcx, [rbp + 0x40]
call fcn.14000a800
nop
lea rcx, [rbp + 0x60]
call fcn.14000a800
mov rax, qword [0x140315b30]
cmp qword [rbp + 0x80], rax
sete dl
mov qword [rbp + 0xd0], 0
lea rcx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rcx, qword [rbp + 0x100]
lea r9, [rbp + 0xd0]
xor r8d, r8d
call fcn.140082940
test al, al
je 0x1400890ca
mov rax, qword [rbp + 0x80]
mov qword [0x140315b30], rax
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0xf
cmova rdx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x98]
lea rcx, [0x140315b38]
call fcn.14001d670
mov rax, qword [rbp + 0xa8]
mov qword [0x140315b58], rax
mov eax, dword [rbp + 0xb0]
mov dword [0x140315b60], eax
lea rcx, [rbp + 0x100]
call fcn.14000a800
jmp 0x140088b48
test rcx, rcx
je 0x140089113
cmp dword [0x140318b40], 0
je 0x140089113
add rdx, 0x90
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140315b30]
mov rcx, qword [0x140318b48]
movsd xmm8, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x140089130
mov qword [rbp + 0x130], rdx
mov dword [rbp + 0x138], edx
jmp 0x140089164
test rcx, rcx
je 0x140089164
cmp dword [0x140318b40], 0
je 0x140089164
add rdx, 0x90
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140318b48]
movsd xmm7, qword [rbp + 0x130]
mov edi, dword [rbp + 0x138]
mov rdx, qword [0x140319a50]
test rdx, rdx
jne 0x140089183
mov rbx, r12
jmp 0x1400891c2
test rcx, rcx
je 0x1400891bb
cmp dword [0x140318b40], 0
je 0x1400891bb
add rdx, 0x20
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140319a50]
mov rcx, qword [0x140318b48]
mov rbx, qword [rbp + 0xc0]
test rdx, rdx
jne 0x1400891cc
mov r8, r12
jmp 0x140089204
test rcx, rcx
je 0x1400891fd
cmp dword [0x140318b40], 0
je 0x1400891fd
add rdx, 0x30
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140319a50]
mov r8, qword [rbp + 0xd0]
movsd qword [rbp + 0xc0], xmm8
mov dword [rbp + 0xc8], esi
movsd qword [rbp + 0xd0], xmm7
mov dword [rbp + 0xd8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.14003bf90
mov qword [rbp + 0xd0], 0
movabs rax, 0xdcc20ea46642cc78
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a465049e8a9
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x140089322
mov rdx, qword [0x140315b30]
test rdx, rdx
je 0x140089322
mov dword [rbp + 0xd0], 1
mov rcx, qword [0x140318b48]
test rcx, rcx
je 0x140089322
cmp dword [0x140318b40], 0
je 0x140089322
add rdx, qword [0x140318950]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xd0], 0
movabs rax, 0xd78d01e7624dcd61
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a46503b87b4
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x1400893fe
mov rdx, qword [0x140315b30]
test rdx, rdx
je 0x1400893fe
mov dword [rbp + 0xd0], 2
mov rcx, qword [0x140318b48]
test rcx, rcx
je 0x1400893fe
cmp dword [0x140318b40], 0
je 0x1400893fe
add rdx, qword [0x140318950]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xc0], r15
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a2b225aeb87
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x1400894cd
mov rdx, qword [0x140315b30]
test rdx, rdx
je 0x1400894cd
mov byte [rbp + 0xe0], 1
mov rcx, qword [0x140318b48]
test rcx, rcx
je 0x1400894cd
cmp dword [0x140318b40], 0
je 0x1400894cd
add rdx, 0xab0
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xd0], 0
movabs rax, 0xd6a745ac684bd06f
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a463555eea1
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x1400895c2
mov rdx, qword [0x140315b30]
test rdx, rdx
je 0x1400895c2
mov rcx, qword [0x140318b48]
test rcx, rcx
je 0x1400895a6
cmp dword [0x140318b40], 0
je 0x1400895a6
add rdx, qword [0x140318978]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140315b30]
test rdx, rdx
je 0x1400895c2
mov rcx, qword [0x140318930]
add rcx, rdx
movss xmm1, dword [0x1402d17f8]
call fcn.14002bca0
mov qword [rbp + 0xd0], 0
movabs rax, 0xfdc217ae685ec77f
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a233e52e0a8
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x1400896b7
mov rdx, qword [0x140315b30]
test rdx, rdx
je 0x1400896b7
mov rcx, qword [0x140318b48]
test rcx, rcx
je 0x14008969b
cmp dword [0x140318b40], 0
je 0x14008969b
add rdx, qword [0x140318978]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140315b30]
test rdx, rdx
je 0x1400896b7
mov rcx, qword [0x140318930]
add rcx, rdx
movss xmm1, dword [0x1402d17b8]
call fcn.14002bca0
mov qword [rbp + 0xd0], 0
movabs rax, 0xddb445a9684bce6e
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rbx, 0x5b486a233c58eeae
mov qword [rbp + 0xc0], rbx
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x14008975f
mov rcx, qword [0x140315b30]
add rcx, 0x9d8
movaps xmm1, xmm6
call fcn.14002bca0
mov qword [rbp + 0xd0], 0
movabs rax, 0xddb445be7d5ccb69
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], rbx
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140073510
test al, al
je 0x14008990c
mov rcx, qword [0x140315b30]
add rcx, 0x9d8
movss xmm1, dword [0x1402d1694]
call fcn.14002bca0
jmp 0x14008990c
movabs rax, 0xd9c211a46c42c77e
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x100], rax
movabs rax, 0x3e24092f385ef1e6
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x108], rax
movabs rax, 0x8250be5e01eb478f
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x110], rax
movabs rcx, 0x35f177bcc87c3240
mov qword [rbp + 0xc0], rcx
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x118], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x148], rax
movabs rax, 0x8271ca2d738221af
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0xc0], rcx
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x158], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x100], ymm1
lea rcx, [rbp + 0x100]
vzeroupper
call fcn.140072be0
call fcn.140048270
mov rcx, qword [0x1403189a0]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm10
addss xmm0, dword [0x1402d1694]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x1402d1764]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm10
subss xmm0, xmm11
movss dword [rbp + 0xd0], xmm0
mov dword [rbp + 0xd4], 0x43570000
mov qword [rbp + 0xc0], r15
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b486a46506bd483
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xd0]
lea rcx, [rbp]
call fcn.140047c70
movabs rax, 0xb88600ab6b4fcc68
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [0x140315c74]
lea rcx, [rbp]
call fcn.1400757e0
movabs rax, 0xf7c200b56640c564
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
movabs rax, 0x5b2c0f2f204ee4a5
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [0x140315c75]
lea rcx, [rbp]
call fcn.1400757e0
movabs rax, 0xb8e217a2625cc360
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [0x140315c76]
lea rcx, [rbp]
call fcn.1400757e0
movabs rax, 0xb8e265c76c43c363
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [0x140315c78]
lea rcx, [rbp]
call fcn.1400757e0
movabs rax, 0xdd810ba67d5dcb69
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
lea rdx, [0x140315c77]
lea rcx, [rbp]
call fcn.1400757e0
movabs rax, 0xb8e265b56642cd6e
mov qword [rbp + 0xc0], rax
mov rax, qword [rbp + 0xc0]
mov qword [rbp], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xc0], r14
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xc0], r13
mov rax, qword [rbp + 0xc0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
mov r8d, 0x10260
lea rdx, [0x140315c7c]
lea rcx, [rbp]
call fcn.14007f620
call fcn.140048270
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1400998e0
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
movaps xmm11, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140005580
nop
int3