Function at 0x1800840c0
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x220
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180297040]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor edi, edi
mov ecx, dword [0x180298210]
mov rax, qword gs:[0x58]
mov esi, 4
mov rbx, qword [rax + rcx*8]
mov eax, dword [rbx + rsi]
cmp dword [0x180298960], eax
jle 0x1800841a7
lea rcx, [0x180298960]
call fcn.18008c0d0
cmp dword [0x180298960], 0xffffffff
jne 0x1800841a7
mov qword [0x180298a70], rdi
mov qword [0x180298a78], rdi
mov byte [0x180298970], dil
mov dword [0x180298a80], edi
mov r8d, 0xff
lea rdx, [0x180091be0]
lea rcx, [0x180298970]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x180298a6f], dil
lea rcx, [0x180298970]
call fcn.180035110
nop
lea rcx, [0x1800909e0]
call fcn.18008bfd4
nop
lea rcx, [0x180298960]
call fcn.18008c064
mov eax, dword [rbx + rsi]
cmp dword [0x180298898], eax
jle 0x1800841df
lea rcx, [0x180298898]
call fcn.18008c0d0
cmp dword [0x180298898], 0xffffffff
jne 0x1800841df
lea rcx, [0x180090970]
call fcn.18008bfd4
lea rcx, [0x180298898]
call fcn.18008c064
xorps xmm7, xmm7
mov rdx, qword [0x1802970d8]
test rdx, rdx
jne 0x18008420f
mov dword [rbp + 0xa0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xa4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
xorps xmm2, xmm2
jmp 0x18008425b
mov rcx, qword [0x180298368]
test rcx, rcx
je 0x180084243
cmp dword [0x1802982d4], 0
je 0x180084243
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0xa0]
movss xmm0, dword [rbp + 0xa8]
movss xmm1, dword [rbp + 0xa4]
subss xmm2, dword [0x180298764]
subss xmm1, dword [0x180298768]
subss xmm0, dword [0x18029876c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x180084298
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1800842a0
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x180288fcc]
jbe 0x18008436d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x68], xmm0
movdqa xmm6, xmmword [0x180289070]
movdqu xmmword [rbp + 0x78], xmm6
mov byte [rbp + 0x68], al
mov dword [rbp + 0x90], 0xffffffff
mov rax, qword [rbp + 0x60]
mov qword [0x1802970d8], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x1802970e0]
call fcn.18002e660
mov rax, qword [rbp + 0x88]
mov qword [0x180297100], rax
mov eax, dword [rbp + 0x90]
mov dword [0x180297108], eax
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x180084364
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084357
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180084357
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18008bff4
movdqa xmm6, xmmword [0x180289070]
movdqu xmmword [rbp + 0x78], xmm6
mov byte [rbp + 0x68], 0
mov rcx, qword [0x1802982c8]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm6, dword [0x180288f38]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm6
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm8, dword [0x180288e48]
mulss xmm0, xmm8
movss xmm9, dword [0x180288f4c]
subss xmm0, xmm9
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43b90000
movabs rax, 0xa81622662fbb293
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xc0ff8ee0c64a7f3e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
movabs r12, 0x2ae40e450b93d7c5
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rsi, 0xc0ff8ee0b2391672
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp]
call fcn.18003c010
movabs rax, 0x2ae4662679f2b296
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xb0], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
lea r8, [0x180298970]
xor edx, edx
lea rcx, [rbp]
call fcn.18006fc60
test al, al
je 0x180084551
lea rcx, [0x180298970]
call fcn.180035110
mov rax, qword [0x1802982c8]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm6
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43870000
movabs rax, 0x598d422d6ec5f4e6
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xc0ff8ee0b2391606
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp]
call fcn.180076640
test al, al
je 0x180084763
cmp qword [0x180298750], 0
je 0x180084759
lea rdx, [0x180298770]
lea rcx, [rbp + 0x100]
call fcn.180021790
nop
mov r13, qword [rbp + 0x108]
mov r12, qword [rbp + 0x100]
cmp r12, r13
je 0x180084743
add r12, 0x28
mov rax, qword [r12 - 0x28]
mov qword [rbp + 0x60], rax
lea rdx, [r12 - 0x20]
lea rcx, [rbp + 0x68]
call fcn.18000ccf0
mov rax, qword [r12]
mov qword [rbp + 0x88], rax
mov eax, dword [r12 + 8]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x68]
mov r14, qword [rbp + 0x68]
mov r15, qword [rbp + 0x80]
cmp r15, 0xf
cmova rax, r14
movsxd rcx, dword [0x180298a70]
test ecx, ecx
je 0x180084999
lea rdi, [0x180091be0]
test rax, rax
cmovne rdi, rax
mov rbx, qword [0x180298a78]
mov rsi, rcx
shl rsi, 4
add rsi, rbx
cmp rbx, rsi
je 0x180084973
nop dword [rax]
mov r8, qword [rbx]
mov r9, qword [rbx + 8]
cmp r8, r9
je 0x180084966
mov rcx, rdi
cmp byte [r8], 0x2d
jne 0x18008495c
inc r8
call fcn.180034550
test rax, rax
je 0x180084966
xor edi, edi
movabs rsi, 0xc0ff8ee0b2391672
cmp r15, 0xf
jbe 0x180084731
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x180084729
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084dbe
mov rcx, r14
call fcn.18008bff4
add r12, 0x38
lea rax, [r12 - 0x28]
cmp rax, r13
jne 0x180084642
lea rcx, [rbp + 0x100]
call fcn.180002a00
movabs r12, 0x2ae40e450b93d7c5
call fcn.18003ccc0
call fcn.180045b80
call fcn.18003c6a0
mov rcx, qword [0x1802982c8]
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
mulss xmm2, xmm8
addss xmm2, dword [0x180288f14]
subss xmm2, dword [0x180288ed0]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm6
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm8
subss xmm0, xmm9
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x42f00000
movabs rax, 0x2a97602a62e7b484
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x120]
call fcn.18003c010
cmp dword [0x180297108], 0xffffffff
je 0x1800854e0
mov qword [rbp + 0xb0], 0
movabs rax, 0x5e9661356effb291
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xc0ff8ee0b2566252
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x120]
call fcn.1800682c0
test al, al
je 0x180084f2e
mov rdx, qword [0x1802970d8]
mov rcx, qword [0x180298368]
test rdx, rdx
jne 0x180084dc5
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x180084dfd
call fcn.180034550
test rax, rax
jne 0x18008498d
add rbx, 0x10
cmp rbx, rsi
jne 0x1800846c0
xor edi, edi
movabs rsi, 0xc0ff8ee0b2391672
cmp dword [0x180298a80], edi
jne 0x1800846fa
jmp 0x180084999
xor edi, edi
movabs rsi, 0xc0ff8ee0b2391672
movabs rax, 0x2ae40e450b93fea8
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
movabs r14, 0x2ae40e450b93d7c5
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x160], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x168], rax
movdqa xmm0, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x60]
test rdx, rdx
jne 0x180084a2d
mov dword [rbp + 0x10], edx
movaps xmm1, xmm7
movss dword [rbp + 0x14], xmm7
movaps xmm0, xmm7
movss dword [rbp + 0x18], xmm7
movaps xmm2, xmm7
jmp 0x180084a6d
mov rcx, qword [0x180298368]
test rcx, rcx
je 0x180084a5e
cmp dword [0x1802982d4], 0
je 0x180084a5e
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
movss xmm0, dword [rbp + 0x18]
movss xmm1, dword [rbp + 0x14]
subss xmm2, dword [0x180298764]
subss xmm1, dword [0x180298768]
subss xmm0, dword [0x18029876c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x180084aaa
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x180084ab2
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x140]
call fcn.180001220
mov rbx, rax
movabs rax, 0x2ae40e450b93ffe5
mov qword [rbp + 0xa0], rax
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rcx
mov qword [rbp + 0xa0], rsi
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rcx
mov qword [rbp + 0xa0], r14
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x120], xmm0
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.180086f50
nop
mov r9, rbx
mov r8, rax
lea rcx, [rbp + 0x20]
call fcn.1800880b0
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x180084b70
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.180003050
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x180084bfe
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084bf9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084da2
call fcn.18008bff4
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x180084c49
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084c44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084da9
call fcn.18008bff4
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x180084c9a
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084c95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084db0
call fcn.18008bff4
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
mov rax, qword [0x1802970d8]
cmp qword [rbp + 0x60], rax
sete dl
mov qword [rbp + 0xb0], 0
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rcx, qword [rbp + 0xe0]
lea r9, [rbp + 0xb0]
xor r8d, r8d
call fcn.180075d40
test al, al
je 0x180084d3c
mov rax, qword [rbp + 0x60]
mov qword [0x1802970d8], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [0x1802970e0]
call fcn.18000dad0
mov rax, qword [rbp + 0x88]
mov qword [0x180297100], rax
mov eax, dword [rbp + 0x90]
mov dword [0x180297108], eax
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x180084d79
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084d74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084db7
call fcn.18008bff4
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf8], 0xf
mov byte [rbp + 0xe0], 0
mov r15, qword [rbp + 0x80]
mov r14, qword [rbp + 0x68]
jmp 0x1800846fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x180084dfd
cmp dword [0x1802982d4], 0
je 0x180084dfd
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1802970d8]
mov rcx, qword [0x180298368]
movsd xmm7, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x180084e13
mov qword [rbp], rdx
mov dword [rbp + 8], edx
jmp 0x180084e44
test rcx, rcx
je 0x180084e44
cmp dword [0x1802982d4], 0
je 0x180084e44
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x180298368]
movsd xmm6, qword [rbp]
mov edi, dword [rbp + 8]
mov rdx, qword [0x180298750]
xor r14d, r14d
test rdx, rdx
jne 0x180084e60
mov ebx, r14d
jmp 0x180084e9f
test rcx, rcx
je 0x180084e98
cmp dword [0x1802982d4], 0
je 0x180084e98
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x180298750]
mov rcx, qword [0x180298368]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x180084ea9
mov r8, r14
jmp 0x180084ee1
test rcx, rcx
je 0x180084eda
cmp dword [0x1802982d4], 0
je 0x180084eda
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x180298750]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.18002cc90
movabs rsi, 0xc0ff8ee0b2391672
jmp 0x180084f31
xor r14d, r14d
mov qword [rbp + 0xb0], 0
movabs rax, 0x4ba72e296af6a396
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs r15, 0xc0ff8ee0b2391600
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x120]
call fcn.1800682c0
test al, al
je 0x1800851dc
mov rdx, qword [0x1802970d8]
test rdx, rdx
je 0x180085020
mov dword [rbp + 0xb0], 1
mov rcx, qword [0x180298368]
test rcx, rcx
je 0x180085020
cmp dword [0x1802982d4], 0
je 0x180085020
add rdx, qword [0x180298280]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor r8d, r8d
mov edx, 0x156
lea rcx, [0x1802970d8]
call fcn.1800788e0
mov r8b, 1
mov edx, 0xfc
lea rcx, [0x1802970d8]
call fcn.1800788e0
mov r8b, 1
mov edx, 0x8d
lea rcx, [0x1802970d8]
call fcn.1800788e0
mov rdx, qword [0x1802970d8]
mov rcx, qword [0x180298368]
test rdx, rdx
jne 0x180085078
mov qword [rbp], rdx
mov dword [rbp + 8], edx
jmp 0x1800850b0
test rcx, rcx
je 0x1800850b0
cmp dword [0x1802982d4], 0
je 0x1800850b0
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1802970d8]
mov rcx, qword [0x180298368]
movsd xmm7, qword [rbp]
mov esi, dword [rbp + 8]
test rdx, rdx
jne 0x1800850c6
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x1800850f7
test rcx, rcx
je 0x1800850f7
cmp dword [0x1802982d4], 0
je 0x1800850f7
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x180298368]
movsd xmm6, qword [rbp + 0x10]
mov edi, dword [rbp + 0x18]
mov rdx, qword [0x180298750]
test rdx, rdx
jne 0x180085110
mov rbx, r14
jmp 0x18008514f
test rcx, rcx
je 0x180085148
cmp dword [0x1802982d4], 0
je 0x180085148
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x180298750]
mov rcx, qword [0x180298368]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x180085159
mov r8, r14
jmp 0x180085191
test rcx, rcx
je 0x18008518a
cmp dword [0x1802982d4], 0
je 0x18008518a
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x180298750]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.18002cc90
movabs rsi, 0xc0ff8ee0b2391672
mov qword [rbp + 0xb0], 0
movabs rax, 0x6ec4652664ffb990
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xc0ff8ee0b24b791d
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x120]
call fcn.1800682c0
test al, al
je 0x1800852c7
mov rdx, qword [0x1802970d8]
test rdx, rdx
je 0x1800852c7
mov dword [rbp + 0xb0], 1
mov rcx, qword [0x180298368]
test rcx, rcx
je 0x1800852c7
cmp dword [0x1802982d4], 0
je 0x1800852c7
add rdx, qword [0x180298280]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xb0], 0
movabs rax, 0x458b4a6560f0b889
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], r15
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x120]
call fcn.1800682c0
test al, al
je 0x1800853a5
mov rdx, qword [0x1802970d8]
test rdx, rdx
je 0x1800853a5
mov dword [rbp + 0xb0], r14d
mov rcx, qword [0x180298368]
test rcx, rcx
je 0x1800853a5
cmp dword [0x1802982d4], 0
je 0x1800853a5
add rdx, qword [0x180298280]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0xb0], 0
movabs rax, 0x438c6b132bebbe83
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
movabs rax, 0xc0ff8ee0b25c7a11
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x120]
call fcn.1800682c0
test al, al
je 0x1800855f4
mov rdx, qword [0x1802970d8]
mov rcx, qword [0x180298368]
test rdx, rdx
je 0x18008549f
mov dword [rbp + 0xb0], r14d
test rcx, rcx
je 0x18008549f
cmp dword [0x1802982d4], 0
je 0x18008549f
add rdx, qword [0x180298280]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x1802970d8]
mov rcx, qword [0x180298368]
mov byte [rbp + 0xc0], 0x17
test rcx, rcx
je 0x1800855f4
cmp dword [0x1802982d4], 0
je 0x1800855f4
add rdx, 0x972
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x1800855f4
movabs rax, 0x4bc47a266effb296
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe0], rax
movabs rax, 0xa593ed89da5c6052
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xe8], rax
movabs rax, 0x762d06e46fe32427
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xf0], rax
movabs rcx, 0x3302768a20a3b3c4
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0xa0], r12
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
movabs rax, 0x760c72971d8a4207
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x150], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x158], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0xe0], xmm0
movdqa xmm1, xmmword [rbp + 0x150]
xorps xmm1, xmmword [rbp + 0xf0]
movdqa xmmword [rbp + 0xf0], xmm1
lea rcx, [rbp + 0xe0]
call fcn.180067940
call fcn.18003c6a0
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.18008bc20
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret