Function at 0x14007aa50
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x4d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14028c040]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x14035e430], eax
jle 0x14007ab3e
lea rcx, [0x14035e430]
call fcn.140083010
cmp dword [0x14035e430], 0xffffffff
jne 0x14007ab3e
mov qword [0x14035e540], 0
mov qword [0x14035e548], 0
mov byte [0x14035e440], 0
mov dword [0x14035e550], 0
mov r8d, 0xff
lea rdx, [0x140088b58]
lea rcx, [0x14035e440]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x14035e53f], 0
lea rcx, [0x14035e440]
call fcn.140034ea0
nop
lea rcx, [0x140087b30]
call fcn.140082f14
nop
lea rcx, [0x14035e430]
call fcn.140082fa4
mov eax, dword [rdi + rbx]
cmp dword [0x14035e370], eax
jle 0x14007ab76
lea rcx, [0x14035e370]
call fcn.140083010
cmp dword [0x14035e370], 0xffffffff
jne 0x14007ab76
lea rcx, [0x140087ac0]
call fcn.140082f14
lea rcx, [0x14035e370]
call fcn.140082fa4
xorps xmm6, xmm6
mov rdx, qword [0x14035cab0]
test rdx, rdx
jne 0x14007ab9d
mov dword [rbp + 8], edx
xorps xmm1, xmm1
movss dword [rbp + 0xc], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0x10], xmm0
xorps xmm2, xmm2
jmp 0x14007abe1
mov rcx, qword [0x14035de48]
test rcx, rcx
je 0x14007abd2
cmp dword [0x14035ddb4], 0
je 0x14007abd2
add rdx, 0x90
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 8]
movss xmm0, dword [rbp + 0x10]
movss xmm1, dword [rbp + 0xc]
subss xmm2, dword [0x14035e234]
subss xmm1, dword [0x14035e238]
subss xmm0, dword [0x14035e23c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14007ac1e
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007ac26
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x14027e8bc]
jbe 0x14007ad11
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rax
movups xmmword [rbp + 0x188], xmm0
movdqa xmm1, xmmword [0x14027e960]
movdqu xmmword [rbp + 0x198], xmm1
mov byte [rbp + 0x188], al
mov dword [rbp + 0x1b0], 0xffffffff
mov rax, qword [rbp + 0x180]
mov qword [0x14035cab0], rax
lea rdx, [rbp + 0x188]
lea rcx, [0x14035cab8]
call fcn.140030690
mov rax, qword [rbp + 0x1a8]
mov qword [0x14035cad8], rax
mov eax, dword [rbp + 0x1b0]
mov dword [0x14035cae0], eax
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 0xf
jbe 0x14007acfa
inc rdx
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007acf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007acf5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140082f34
movdqa xmm0, xmmword [0x14027e960]
movdqu xmmword [rbp + 0x198], xmm0
mov byte [rbp + 0x188], 0
mov rcx, qword [0x14035dda8]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x14027e81c]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x14027e724]
mulss xmm0, xmm9
movss xmm10, dword [0x14027e830]
subss xmm0, xmm10
movss dword [rbp + 0x50], xmm0
mov dword [rbp + 0x54], 0x43b90000
movabs rax, 0xcbe8459aa791f90b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x5c921f3ceb60a01a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs r14, 0xeb8d29f9cef99c5d
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rdi, 0x5c921f3c9f13c956
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movdqa xmm0, xmmword [rbp + 0xf0]
xorps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0xf0], xmm0
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xf0]
call fcn.14003bd90
movabs rax, 0xeb8d419abc98f90e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x58], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, pe_nt_image_headers64
lea r8, [0x14035e440]
xor edx, edx
lea rcx, [rbp + 0x100]
call fcn.1400704d0
test al, al
je 0x14007aee0
lea rcx, [0x14035e440]
call fcn.140034ea0
mov rax, qword [0x14035dda8]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0x60], xmm0
mov dword [rbp + 0x64], 0x43870000
movabs rax, 0x98e46591abafbf7e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x5c921f3c9f13c922
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x310]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x110]
call fcn.140076ed0
test al, al
je 0x14007b570
cmp qword [0x14035e220], 0
je 0x14007b566
lea rdx, [0x14035e240]
lea rcx, [rbp + 0x2d8]
call fcn.140025220
nop
mov r12, qword [rbp + 0x2e0]
mov r15, qword [rbp + 0x2d8]
cmp r15, r12
je 0x14007b55a
add r15, 0x28
nop
mov rax, qword [r15 - 0x28]
mov qword [rbp + 0x260], rax
lea rdx, [r15 - 0x20]
lea rcx, [rbp + 0x268]
call fcn.140010c00
mov rax, qword [r15]
mov qword [rbp + 0x288], rax
mov eax, dword [r15 + 8]
mov dword [rbp + 0x290], eax
lea rax, [rbp + 0x268]
mov r14, qword [rbp + 0x268]
mov r13, qword [rbp + 0x280]
cmp r13, 0xf
cmova rax, r14
movsxd rcx, dword [0x14035e540]
test ecx, ecx
je 0x14007b092
lea rdi, [0x140088b58]
test rax, rax
cmovne rdi, rax
mov rbx, qword [0x14035e548]
mov rsi, rcx
shl rsi, 4
add rsi, rbx
cmp rbx, rsi
je 0x14007b07b
nop dword [rax + rax]
mov r8, qword [rbx]
mov r9, qword [rbx + 8]
cmp r8, r9
je 0x14007b072
mov rcx, rdi
cmp byte [r8], 0x2d
jne 0x14007b068
inc r8
call fcn.1400342e0
test rax, rax
jne 0x14007b4fe
jmp 0x14007b072
call fcn.1400342e0
test rax, rax
jne 0x14007b088
add rbx, 0x10
cmp rbx, rsi
jne 0x14007b040
cmp dword [0x14035e550], 0
jne 0x14007b4fe
movabs rdi, 0x5c921f3c9f13c956
movabs rax, 0xeb8d29f9cef9b530
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rsi, 0xeb8d29f9cef99c5d
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x40], xmm0
mov rdx, qword [rbp + 0x260]
test rdx, rdx
jne 0x14007b111
mov dword [rbp + 0x14], edx
movaps xmm1, xmm6
movss dword [rbp + 0x18], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x1c], xmm6
movaps xmm2, xmm6
jmp 0x14007b155
mov rcx, qword [0x14035de48]
test rcx, rcx
je 0x14007b146
cmp dword [0x14035ddb4], 0
je 0x14007b146
add rdx, 0x90
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x14]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x14]
movss xmm0, dword [rbp + 0x1c]
movss xmm1, dword [rbp + 0x18]
subss xmm2, dword [0x14035e234]
subss xmm1, dword [0x14035e238]
subss xmm0, dword [0x14035e23c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14007b192
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007b19a
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x240]
call fcn.140001220
mov rbx, rax
movabs rax, 0xeb8d29f9cef9b47d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x120], rcx
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x128], rcx
mov qword [rbp], rsi
mov rcx, qword [rbp]
mov qword [rbp + 0x330], rcx
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x330]
movdqa xmmword [rbp + 0x120], xmm0
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x220]
call fcn.14007f8e0
nop
mov r9, rbx
mov r8, rax
lea rcx, [rbp + 0x1e0]
call fcn.14007fa40
nop
lea rax, [rbp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14007b243
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x1e0]
call fcn.140002b10
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], 0
mov qword [rbp + 0x2c8], 0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2c0], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0xf
jbe 0x14007b2e6
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b2e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b71b
call fcn.140082f34
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x1f8], 0xf
mov byte [rbp + 0x1e0], 0
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x14007b344
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b33f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b722
call fcn.140082f34
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x238], 0xf
mov byte [rbp + 0x220], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x14007b3a2
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b39d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b729
call fcn.140082f34
mov qword [rbp + 0x250], 0
mov qword [rbp + 0x258], 0xf
mov byte [rbp + 0x240], 0
mov rax, qword [0x14035cab0]
cmp qword [rbp + 0x260], rax
sete dl
mov qword [rbp + 0x68], 0
lea rcx, [rbp + 0x2b0]
cmp qword [rbp + 0x2c8], 0xf
cmova rcx, qword [rbp + 0x2b0]
lea r9, [rbp + 0x68]
xor r8d, r8d
call fcn.1400765e0
test al, al
je 0x14007b492
mov rax, qword [rbp + 0x260]
mov qword [0x14035cab0], rax
mov rdi, qword [rbp + 0x278]
lea r9, [rbp + 0x268]
cmp qword [rbp + 0x280], 0xf
cmova r9, qword [rbp + 0x268]
mov rax, qword [0x14035cad0]
cmp rdi, rax
ja 0x14007b469
lea rbx, [0x14035cab8]
cmp rax, 0xf
cmova rbx, qword [0x14035cab8]
mov qword [0x14035cac8], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14007b478
mov rdx, rdi
lea rcx, [0x14035cab8]
call fcn.140013730
mov rax, qword [rbp + 0x288]
mov qword [0x14035cad8], rax
mov eax, dword [rbp + 0x290]
mov dword [0x14035cae0], eax
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 0xf
jbe 0x14007b4d3
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007b4ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b730
call fcn.140082f34
mov qword [rbp + 0x2c0], 0
mov qword [rbp + 0x2c8], 0xf
mov byte [rbp + 0x2b0], 0
mov r13, qword [rbp + 0x280]
mov r14, qword [rbp + 0x268]
cmp r13, 0xf
jbe 0x14007b535
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x14007b52d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007b737
mov rcx, r14
call fcn.140082f34
add r15, 0x38
lea rax, [r15 - 0x28]
movabs rdi, 0x5c921f3c9f13c956
cmp rax, r12
jne 0x14007afc0
movabs r14, 0xeb8d29f9cef99c5d
lea rcx, [rbp + 0x2d8]
call fcn.1400029a0
call fcn.14003cab0
call fcn.140045990
call fcn.14003c4a0
mov rcx, qword [0x14035dda8]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x14027e7f4]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x70], xmm0
mov dword [rbp + 0x74], 0x42f00000
movabs rax, 0xebfe4796a78dff1c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movdqa xmm0, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x130]
call fcn.14003bd90
cmp dword [0x14035cae0], 0xffffffff
je 0x14007ba74
mov qword [rbp + 0x78], 0
movabs rax, 0x9fff4689ab95f909
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x5c921f3c9f7cbd76
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x140]
call fcn.140068b80
test al, al
je 0x14007b8b1
mov rdx, qword [0x14035cab0]
mov rcx, qword [0x14035de48]
test rdx, rdx
jne 0x14007b73e
mov qword [rbp + 0x20], rdx
mov dword [rbp + 0x28], edx
jmp 0x14007b77a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x14007b77a
cmp dword [0x14035ddb4], 0
je 0x14007b77a
add rdx, 0x90
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x14035cab0]
mov rcx, qword [0x14035de48]
movsd xmm7, qword [rbp + 0x20]
mov esi, dword [rbp + 0x28]
test rdx, rdx
jne 0x14007b790
mov qword [rbp + 0x2c], rdx
mov dword [rbp + 0x34], edx
jmp 0x14007b7c5
test rcx, rcx
je 0x14007b7c5
cmp dword [0x14035ddb4], 0
je 0x14007b7c5
add rdx, 0x90
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x2c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14035de48]
movsd xmm6, qword [rbp + 0x2c]
mov edi, dword [rbp + 0x34]
mov rdx, qword [0x14035e220]
test rdx, rdx
jne 0x14007b7dd
xor ebx, ebx
jmp 0x14007b820
test rcx, rcx
je 0x14007b819
cmp dword [0x14035ddb4], 0
je 0x14007b819
add rdx, 0x20
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x2d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x14035e220]
mov rcx, qword [0x14035de48]
mov rbx, qword [rbp + 0x2d0]
test rdx, rdx
jne 0x14007b82a
xor r8d, r8d
jmp 0x14007b866
test rcx, rcx
je 0x14007b85f
cmp dword [0x14035ddb4], 0
je 0x14007b85f
add rdx, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x298]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x14035e220]
mov r8, qword [rbp + 0x298]
movsd qword [rbp + 0x1c0], xmm7
mov dword [rbp + 0x1c8], esi
movsd qword [rbp + 0x1d0], xmm6
mov dword [rbp + 0x1d8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1d0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.14002f970
movabs rdi, 0x5c921f3c9f13c956
mov qword [rbp + 0x80], 0
movabs rax, 0x8fad429aa195f208
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x5c921f3c9f61a639
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movdqa xmm0, xmmword [rbp + 0x150]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x150], xmm0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x150]
call fcn.140068b80
test al, al
je 0x14007b988
mov rdx, qword [0x14035cab0]
test rdx, rdx
je 0x14007b988
mov dword [rbp + 0x2a8], 1
mov rcx, qword [0x14035de48]
test rcx, rcx
je 0x14007b988
cmp dword [0x14035ddb4], 0
je 0x14007b988
add rdx, qword [0x14035dd68]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x88], 0
movabs rax, 0x84e24dd9a59af311
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x5c921f3c9f13c924
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x160]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x160], xmm0
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x160]
call fcn.140068b80
test al, al
je 0x14007bb45
mov rdx, qword [0x14035cab0]
test rdx, rdx
je 0x14007bb45
mov dword [rbp + 0x2a0], 2
mov rcx, qword [0x14035de48]
test rcx, rcx
je 0x14007bb45
cmp dword [0x14035ddb4], 0
je 0x14007bb45
add rdx, qword [0x14035dd68]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14007bb45
movabs rax, 0x8aad5d9aab95f90e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x39fe7c55f776bf76
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0x1d66e4343182d9e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rcx, 0xa4d2a8c29384de08
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
movabs rax, 0x1d47904743ebbfc7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
lea rcx, [rbp + 0x200]
vzeroupper
call fcn.1400681e0
call fcn.14003c4a0
mov rcx, qword [0x14035dda8]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x14027e7f4]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x14027e884]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 8], xmm0
mov dword [rbp + 0xc], 0x43520000
movabs rax, 0xebfe4598bb8af50b
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x170], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x298], r14
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x388], rax
movdqa xmm0, xmmword [rbp + 0x170]
xorps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rbp + 0x170], xmm0
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x170]
call fcn.14003bd90
movabs rax, 0xebe94c95ac98f218
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x298], r14
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3e8], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x3e0]
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [0x14035cba8]
lea rcx, [rbp + 0x90]
call fcn.14006aaa0
movabs rax, 0xa4ad4c8ba197fb14
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xa0], rax
movabs rax, 0x5cf67a55ef66aa35
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x298], r14
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x398], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [0x14035cba9]
lea rcx, [rbp + 0xa0]
call fcn.14006aaa0
movabs rax, 0xeb8d5b9ca58bfd10
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x298], r14
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3a8], rax
movdqa xmm0, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0xb0], xmm0
lea rdx, [0x14035cbaa]
lea rcx, [rbp + 0xb0]
call fcn.14006aaa0
movabs rax, 0xeb8d29f9ab94fd13
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0x298], r14
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3b0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3b8], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [0x14035cbac]
lea rcx, [rbp + 0xc0]
call fcn.14006aaa0
movabs rax, 0x8eee4798ba8af519
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0x298], r14
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3c8], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x3c0]
movdqa xmmword [rbp + 0xd0], xmm0
lea rdx, [0x14035cbab]
lea rcx, [rbp + 0xd0]
call fcn.14006aaa0
movabs rax, 0xeb8d298ba195f31e
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x298], r14
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 0x298], rdi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3d8], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x3d0]
movdqa xmmword [rbp + 0xe0], xmm0
mov r8d, 0x10260
lea rdx, [0x14035cbb0]
lea rcx, [rbp + 0xe0]
call fcn.140073060
call fcn.14003c4a0
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.140082c90
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret