Function at 0x14004a5f0
Capabilities:
Terminate process

Disassembly:
push rbx
sub rsp, 0x40
mov rax, qword [0x140078100]
lea rcx, [0x140058aec]
xor ebx, ebx
or dword [rax + 0x1b08], 2
mov dword [rax + 0x1b28], 0x43960000
mov dword [rax + 0x1b2c], 0x42700000
mov dword [rax + 0x1b10], 1
mov dword [rax + 0x15c4], 0x41a80000
mov qword [rax + 0x15cc], 0x3f800000
mov qword [rax + 0x15d4], 0x3f800000
mov dword [rax + 0x1570], 0x3f800000
mov dword [rax + 0x158c], 0x3f800000
mov dword [rax + 0x1594], 0x3f800000
mov dword [rax + 0x15a8], 0x3f800000
mov dword [rax + 0x156c], 0x40c00000
mov dword [rax + 0x1588], 0x40800000
mov dword [rax + 0x15a0], 0x40800000
mov dword [rax + 0x1590], ebx
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rcx, rax
lea edx, [rbx + 1]
lea r8d, [rbx + 0x23]
call fcn.14001b770
mov rcx, qword [0x140078100]
mov rax, qword [rcx + 0x1a68]
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1a68]
lea rcx, str.key:
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x54]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x58]
addss xmm0, dword [0x140058da8]
addss xmm2, dword [0x140058d64]
movss dword [rax + 0xd0], xmm0
movss dword [rax + 0xd4], xmm2
movss xmm1, dword [rax + 0xe8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xec]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm1
movss dword [rax + 0xec], xmm0
call fcn.140035560
mov rcx, qword [0x140078100]
lea r8, [0x1400ad8f2]
mov qword [rsp + 0x38], rbx
mov r9d, 0xff
mov qword [rsp + 0x30], rbx
xor edx, edx
mov dword [rsp + 0x28], ebx
mov rax, qword [rcx + 0x1a68]
mov qword [rsp + 0x50], rbx
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1a68]
lea rcx, [0x140052960]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x54]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x58]
addss xmm0, dword [0x140058dcc]
addss xmm2, dword [0x140058d60]
movss dword [rax + 0xd0], xmm0
movss dword [rax + 0xd4], xmm2
movss xmm1, dword [rax + 0xe8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xec]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm1
movss dword [rax + 0xec], xmm0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.14003b1d0
mov rcx, qword [0x140078100]
mov rax, qword [rcx + 0x1a68]
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1a68]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x54]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x58]
addss xmm0, dword [0x140058dcc]
addss xmm2, dword [0x140058d60]
movss dword [rax + 0xd0], xmm0
lea r8, [0x1400ad9f1]
mov qword [rsp + 0x38], rbx
lea rcx, [0x140052960]
mov qword [rsp + 0x30], rbx
mov r9d, 0xff
mov dword [rsp + 0x28], ebx
xor edx, edx
movss dword [rax + 0xd4], xmm2
movss xmm1, dword [rax + 0xe8]
maxss xmm1, xmm0
mov qword [rsp + 0x50], rbx
movss xmm0, dword [rax + 0xec]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm1
movss dword [rax + 0xec], xmm0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.14003b1d0
mov rcx, qword [0x140078100]
lea rdx, [rsp + 0x50]
mov rax, qword [rcx + 0x1a68]
mov byte [rax + 0x80], 1
mov rax, qword [rcx + 0x1a68]
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [rax + 0x54]
movss xmm2, dword [rax + 0x14]
subss xmm2, dword [rax + 0x58]
addss xmm0, dword [0x140058df8]
addss xmm2, dword [0x140058db0]
movss dword [rax + 0xd0], xmm0
movss dword [rax + 0xd4], xmm2
movss xmm1, dword [rax + 0xe8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xec]
maxss xmm0, xmm2
movss dword [rax + 0xe8], xmm1
movss xmm1, dword [0x140058d88]
movss dword [rax + 0xec], xmm0
movss xmm0, dword [0x140058ddc]
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
call fcn.140035f20
test al, al
je 0x14004a941
cmp byte [0x1400ad8f0], bl
jne 0x14004a94b
mov byte [0x1400ad8f0], 1
add rsp, 0x40
pop rbx
jmp fcn.14001da80
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3