Function at 0x140035860
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0xc0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rsp + 0x60], xmm11
movaps xmmword [rsp + 0x50], xmm12
movaps xmmword [rsp + 0x40], xmm13
mov r12, rcx
mov qword [rsp + 0x30], rdx
mov edx, dword [0x1400a9378]
mov rax, qword gs:[0x58]
mov ebp, 0x10
mov r14, qword [rax + rdx*8]
xor esi, esi
mov eax, dword [r14 + rbp]
cmp dword [0x1400a8ce8], eax
jg 0x140035b1a
mov eax, dword [r14 + rbp]
cmp dword [0x1400a8cf0], eax
jg 0x140035c16
mov rdi, qword [0x1400a8cd8]
mov rax, qword [0x1400a8cd0]
cmp rax, rdi
je 0x1400359ec
lea rbx, [rax + 4]
movss xmm12, dword [rsp + 0x34]
movss xmm13, dword [rsp + 0x30]
xorps xmm11, xmm11
movss xmm10, dword [0x140053da4]
nop dword [rax + rax]
movss xmm8, dword [rbx - 4]
movss xmm6, dword [rbx + 4]
movaps xmm1, xmm8
subss xmm1, xmm6
movss xmm9, dword [rbx]
movss xmm7, dword [rbx + 8]
movaps xmm0, xmm9
subss xmm0, xmm7
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
cvtps2pd xmm2, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm2
ja 0x140035963
sqrtpd xmm0, xmm2
jmp 0x14003596b
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm0, xmm11
jbe 0x14003599a
subss xmm6, xmm8
divss xmm6, xmm0
addss xmm6, xmm8
movss dword [rbx - 4], xmm6
subss xmm7, xmm9
divss xmm7, xmm0
addss xmm7, xmm9
movss dword [rbx], xmm7
comiss xmm10, xmm0
jbe 0x1400359d4
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cvttss2si ecx, xmm12
cdq
idiv ecx
movd xmm6, edx
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cvttss2si ecx, xmm13
cdq
idiv ecx
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [rbx + 4], xmm0
movss dword [rbx + 8], xmm6
add rbx, 0x10
lea rax, [rbx - 4]
cmp rax, rdi
jne 0x140035920
mov rax, qword [0x1400a8cd0]
mov ecx, dword [0x140081140]
test ecx, ecx
jle 0x140035abe
mov rbp, rsi
nop dword [rax]
lea r15d, [rsi + 1]
mov ebx, r15d
cmp r15d, ecx
jge 0x140035aae
lea rdi, [rbp + 0x10]
nop dword [rax]
nop dword [rax + rax]
movss xmm0, dword [rax + rbp]
subss xmm0, dword [rdi + rax]
movss xmm1, dword [rax + rbp + 4]
subss xmm1, dword [rdi + rax + 4]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
movd xmm0, dword [0x140081144]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x140035aa0
movss xmm6, dword [0x140081148]
lea rcx, [0x140081150]
call fcn.140008930
movsxd r8, ebx
shl r8, 4
add r8, qword [0x1400a8cd0]
movsxd rdx, esi
shl rdx, 4
add rdx, qword [0x1400a8cd0]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
mov rcx, r12
call fcn.140019940
mov rax, qword [0x1400a8cd0]
mov ecx, dword [0x140081140]
inc ebx
add rdi, 0x10
cmp ebx, ecx
jl 0x140035a20
add rbp, 0x10
mov esi, r15d
cmp r15d, ecx
jl 0x140035a00
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov byte [0x1400a8cec], 1
lea rcx, [0x1400a8cf0]
call fcn.1400505b4
jmp 0x1400358e5
lea rcx, [0x1400a8ce8]
call fcn.140050620
cmp dword [0x1400a8ce8], 0xffffffff
jne 0x1400358d5
movsxd rbx, dword [0x140081140]
test rbx, rbx
je 0x140035bf8
movabs rax, 0xfffffffffffffff
cmp rbx, rax
jbe 0x140035b58
call fcn.140038560
int3
mov rdi, rbx
shl rdi, 4
cmp rdi, 0x1000
jb 0x140035b9a
lea rcx, [rdi + 0x27]
cmp rcx, rdi
ja 0x140035b77
call fcn.140038540
int3
call fcn.1400509dc
test rax, rax
je 0x140035b93
lea rdx, [rax + 0x27]
and rdx, 0xffffffffffffffe0
mov qword [rdx - 8], rax
lea rax, [rdi + rdx]
jmp 0x140035bc5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
je 0x140035bbe
mov rcx, rdi
call fcn.1400509dc
mov rdx, rax
mov qword [0x1400a8cd0], rax
lea rcx, [rdi + rax]
mov qword [0x1400a8ce0], rcx
jmp 0x140035be0
mov rdx, rsi
lea rax, [rdi + rsi]
mov qword [0x1400a8ce0], rax
mov qword [0x1400a8cd0], rdx
nop dword [rax]
nop word [rax + rax]
mov qword [rdx], rsi
mov qword [rdx + 8], rsi
add rdx, 0x10
sub rbx, 1
jne 0x140035be0
mov qword [0x1400a8cd8], rdx
lea rcx, [0x140052370]
call fcn.140050560
nop
lea rcx, [0x1400a8ce8]
call fcn.1400505b4
jmp 0x1400358d5
lea rcx, [0x1400a8cf0]
call fcn.140050620
cmp dword [0x1400a8cf0], 0xffffffff
jne 0x1400358e5
call fcn.14000bc10
mov rdi, qword [0x1400a8cd8]
mov rbx, qword [0x1400a8cd0]
cmp rbx, rdi
je 0x140035b02
cvttss2si ebp, dword [rax + 0xc]
cvttss2si r14d, dword [rax + 8]
add rbx, 4
nop word [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv ebp
movd xmm6, edx
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv r14d
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [rbx - 4], xmm0
movss dword [rbx], xmm6
movss dword [rbx + 4], xmm0
movss dword [rbx + 8], xmm6
lea rbx, [rbx + 0x10]
lea rax, [rbx - 4]
cmp rax, rdi
jne 0x140035c60
jmp 0x140035b02