Function at 0x140074210
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x4b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1402fa080]
xor rax, rsp
mov qword [rbp + 0x400], rax
xor r14d, r14d
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140301d40], eax
jle 0x1400742f2
lea rcx, [0x140301d40]
call fcn.1400dc1e0
cmp dword [0x140301d40], 0xffffffff
jne 0x1400742f2
mov qword [0x140301e50], r14
mov qword [0x140301e58], r14
mov byte [0x140301d50], r14b
mov dword [0x140301e60], r14d
mov r8d, 0xff
lea rdx, [0x1400f0658]
lea rcx, [0x140301d50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x140301e4f], r14b
lea rcx, [0x140301d50]
call fcn.140033260
nop
lea rcx, [0x1400e1760]
call fcn.1400dc0e4
nop
lea rcx, [0x140301d40]
call fcn.1400dc174
mov eax, dword [rdi + rbx]
cmp dword [0x140301c80], eax
jle 0x14007432a
lea rcx, [0x140301c80]
call fcn.1400dc1e0
cmp dword [0x140301c80], 0xffffffff
jne 0x14007432a
lea rcx, [0x1400e16f0]
call fcn.1400dc0e4
lea rcx, [0x140301c80]
call fcn.1400dc174
xorps xmm6, xmm6
mov rdx, qword [0x1402ffc80]
test rdx, rdx
jne 0x140074351
mov dword [rbp + 0x14], edx
xorps xmm1, xmm1
movss dword [rbp + 0x18], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0x1c], xmm0
xorps xmm2, xmm2
jmp 0x140074391
mov rcx, qword [0x140301438]
test rcx, rcx
je 0x140074382
cmp dword [0x1403013a4], 0
je 0x140074382
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x14]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x14]
movss xmm0, dword [rbp + 0x1c]
movss xmm1, dword [rbp + 0x18]
subss xmm2, dword [0x140301b54]
subss xmm1, dword [0x140301b58]
subss xmm0, dword [0x140301b5c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x1400743ce
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1400743d6
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x1402e62a4]
jbe 0x1400744c1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rax
movups xmmword [rbp + 0x158], xmm0
movdqa xmm1, xmmword [0x1402e6340]
movdqu xmmword [rbp + 0x168], xmm1
mov byte [rbp + 0x158], al
mov dword [rbp + 0x180], 0xffffffff
mov rax, qword [rbp + 0x150]
mov qword [0x1402ffc80], rax
lea rdx, [rbp + 0x158]
lea rcx, [0x1402ffc88]
call fcn.14002cff0
mov rax, qword [rbp + 0x178]
mov qword [0x1402ffca8], rax
mov eax, dword [rbp + 0x180]
mov dword [0x1402ffcb0], eax
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x1400744aa
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400744a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400744a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400dc104
movdqa xmm0, xmmword [0x1402e6340]
movdqu xmmword [rbp + 0x168], xmm0
mov byte [rbp + 0x158], 0
mov rcx, qword [0x140301398]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x1402e6204]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x1402e6104]
mulss xmm0, xmm9
movss xmm10, dword [0x1402e6218]
subss xmm0, xmm10
movss dword [rbp + 0x44], xmm0
mov dword [rbp + 0x48], 0x440e8000
movabs rax, 0xd40991d710f55676
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x52931b6d412a2fc
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xaba7ac28fbb2b550
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d0], rax
movabs rbx, 0x196c82dd88cfe05a
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d8], rax
movabs r15, 0xb760f9b246d57b5b
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3c0], rax
movabs rsi, 0x255d42df9832c790
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3c8], rax
movabs rdi, 0xaba7ac28fbb2987d
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3d8], rax
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0x1c0], ymm1
lea rdx, [rbp + 0x44]
lea rcx, [rbp + 0x1c0]
vzeroupper
call fcn.14003a150
mov rax, qword [0x140301398]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm7
movss dword [rbp + 0x4c], xmm0
mov dword [rbp + 0x50], 0x43ff0000
movabs rax, 0xc409b5da23835878
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe0], rax
movabs rax, 0x255d42df9832c7e4
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2f8], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0xe0], xmm0
lea rdx, [rbp + 0x4c]
lea rcx, [rbp + 0xe0]
call fcn.140070710
test al, al
je 0x140074869
cmp qword [0x140301b40], 0
je 0x14007485f
lea rdx, [0x140301b60]
lea rcx, [rbp + 0x2d0]
call fcn.140020d90
nop
mov rax, qword [rbp + 0x2d8]
mov qword [rbp], rax
mov r12, qword [rbp + 0x2d0]
cmp r12, rax
je 0x140074853
add r12, 0x28
movzx ebx, byte [rbp + 0x10]
mov rax, qword [r12 - 0x28]
mov qword [rbp + 0x260], rax
lea rdx, [r12 - 0x20]
lea rcx, [rbp + 0x268]
call fcn.14000d7b0
mov rax, qword [r12]
mov qword [rbp + 0x288], rax
mov eax, dword [r12 + 8]
mov dword [rbp + 0x290], eax
lea rax, [rbp + 0x268]
mov r15, qword [rbp + 0x268]
mov r13, qword [rbp + 0x280]
cmp r13, 0xf
cmova rax, r15
movsxd rcx, dword [0x140301e50]
test ecx, ecx
je 0x140074a5b
lea rsi, [0x1400f0658]
test rax, rax
cmovne rsi, rax
mov rdi, qword [0x140301e58]
mov r14, rcx
shl r14, 4
add r14, rdi
cmp rdi, r14
je 0x140074a3c
nop dword [rax]
mov r8, qword [rdi]
mov r9, qword [rdi + 8]
cmp r8, r9
je 0x140074a2f
mov rcx, rsi
cmp byte [r8], 0x2d
jne 0x140074a25
inc r8
call fcn.140032760
test rax, rax
je 0x140074a2f
xor r14d, r14d
cmp r13, 0xf
jbe 0x140074818
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140074810
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074edf
mov rcx, r15
call fcn.1400dc104
add r12, 0x38
lea rax, [r12 - 0x28]
movabs rsi, 0x255d42df9832c790
cmp rax, qword [rbp]
jne 0x140074722
movabs rbx, 0x196c82dd88cfe05a
movabs rdi, 0xaba7ac28fbb2987d
movabs r15, 0xb760f9b246d57b5b
lea rcx, [rbp + 0x2d0]
call fcn.140003290
call fcn.14003ae80
call fcn.140043d60
call fcn.14003a860
mov rcx, qword [0x140301398]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1402e61dc]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x5c], xmm0
mov dword [rbp + 0x60], 0x42f00000
movabs rax, 0xd8098dd107f55676
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x255d42f2b512b4fe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x100]
call fcn.14003a150
cmp dword [0x1402ffcb0], 0xffffffff
je 0x14007512c
mov qword [rbp + 0x64], 0
movabs rax, 0xc31296c223b91e0f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x255d42df985db3b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x330]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x64]
lea rcx, [rbp + 0x110]
call fcn.140066f80
test al, al
je 0x14007504a
mov rdx, qword [0x1402ffc80]
mov rcx, qword [0x140301438]
test rdx, rdx
jne 0x140074ee6
mov qword [rbp + 0x2c], rdx
mov dword [rbp + 0x34], edx
jmp 0x140074f1e
call fcn.140032760
test rax, rax
jne 0x140074a4e
add rdi, 0x10
cmp rdi, r14
jne 0x1400747b0
xor r14d, r14d
cmp dword [0x140301e60], r14d
jne 0x1400747e1
jmp 0x140074a51
xor r14d, r14d
movabs rsi, 0x255d42df9832c790
movabs rax, 0xb760f9b246d55236
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
movabs r15, 0xb760f9b246d57b5b
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x300], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x308], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x80], xmm0
mov rdx, qword [rbp + 0x260]
test rdx, rdx
jne 0x140074ae6
mov dword [rbp + 0x20], edx
movaps xmm1, xmm6
movss dword [rbp + 0x24], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x28], xmm6
movaps xmm2, xmm6
jmp 0x140074b26
mov rcx, qword [0x140301438]
test rcx, rcx
je 0x140074b17
cmp dword [0x1403013a4], 0
je 0x140074b17
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x20]
movss xmm0, dword [rbp + 0x28]
movss xmm1, dword [rbp + 0x24]
subss xmm2, dword [0x140301b54]
subss xmm1, dword [0x140301b58]
subss xmm0, dword [0x140301b5c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140074b63
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x140074b6b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x240]
call fcn.140001a90
mov rdi, rax
movabs rax, 0xb760f9b246d5537b
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0xf0], rcx
mov qword [rbp + 8], rsi
mov rcx, qword [rbp + 8]
mov qword [rbp + 0xf8], rcx
mov qword [rbp + 8], r15
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x310], rcx
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x318], rax
movdqa xmm0, xmmword [rbp + 0xf0]
xorps xmm0, xmmword [rbp + 0x310]
movdqa xmmword [rbp + 0xf0], xmm0
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x220]
call fcn.140078dc0
nop
mov r9, rdi
mov r8, rax
movzx edx, bl
lea rcx, [rbp + 0x1e0]
call fcn.140078f20
nop
lea rax, [rbp + 0x80]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140074c20
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x1e0]
call fcn.140003400
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a8], xmm0
mov qword [rbp + 0x2b8], r14
mov qword [rbp + 0x2c0], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2a8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2b8], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0xf
jbe 0x140074cba
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074cb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074ec3
call fcn.1400dc104
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1e0], 0
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140074d14
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074d0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074eca
call fcn.1400dc104
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x220], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x140074d6e
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074d69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074ed1
call fcn.1400dc104
mov qword [rbp + 0x250], r14
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], 0
mov rax, qword [0x1402ffc80]
cmp qword [rbp + 0x260], rax
sete dl
mov qword [rbp + 0x54], 0
lea rcx, [rbp + 0x2a8]
cmp qword [rbp + 0x2c0], 0xf
cmova rcx, qword [rbp + 0x2a8]
lea r9, [rbp + 0x54]
xor r8d, r8d
call fcn.14006fe20
test al, al
je 0x140074e5a
mov rax, qword [rbp + 0x260]
mov qword [0x1402ffc80], rax
mov rsi, qword [rbp + 0x278]
lea r9, [rbp + 0x268]
cmp qword [rbp + 0x280], 0xf
cmova r9, qword [rbp + 0x268]
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rsi, rax
ja 0x140074e31
lea rdi, [0x1402ffc88]
cmp rax, 0xf
cmova rdi, qword [0x1402ffc88]
mov qword [0x1402ffc98], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rsi + rdi], 0
jmp 0x140074e40
mov rdx, rsi
lea rcx, [0x1402ffc88]
call fcn.14000f9e0
mov rax, qword [rbp + 0x288]
mov qword [0x1402ffca8], rax
mov eax, dword [rbp + 0x290]
mov dword [0x1402ffcb0], eax
mov rdx, qword [rbp + 0x2c0]
cmp rdx, 0xf
jbe 0x140074e97
inc rdx
mov rcx, qword [rbp + 0x2a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074e92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140074ed8
call fcn.1400dc104
mov qword [rbp + 0x2b8], r14
mov qword [rbp + 0x2c0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2a8], 0
mov r13, qword [rbp + 0x280]
mov r15, qword [rbp + 0x268]
jmp 0x1400747e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x140074f1e
cmp dword [0x1403013a4], 0
je 0x140074f1e
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x2c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1402ffc80]
mov rcx, qword [0x140301438]
movsd xmm7, qword [rbp + 0x2c]
mov esi, dword [rbp + 0x34]
test rdx, rdx
jne 0x140074f34
mov qword [rbp + 0x38], rdx
mov dword [rbp + 0x40], edx
jmp 0x140074f65
test rcx, rcx
je 0x140074f65
cmp dword [0x1403013a4], 0
je 0x140074f65
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, ntohs
lea r8, [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140301438]
movsd xmm6, qword [rbp + 0x38]
mov edi, dword [rbp + 0x40]
mov rdx, qword [0x140301b40]
test rdx, rdx
jne 0x140074f7e
mov rbx, r14
jmp 0x140074fbd
test rcx, rcx
je 0x140074fb6
cmp dword [0x1403013a4], 0
je 0x140074fb6
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x2c8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140301b40]
mov rcx, qword [0x140301438]
mov rbx, qword [rbp + 0x2c8]
test rdx, rdx
jne 0x140074fc7
mov r8, r14
jmp 0x140074fff
test rcx, rcx
je 0x140074ff8
cmp dword [0x1403013a4], 0
je 0x140074ff8
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x298]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140301b40]
mov r8, qword [rbp + 0x298]
movsd qword [rbp + 0x190], xmm7
mov dword [rbp + 0x198], esi
movsd qword [rbp + 0x1a0], xmm6
mov dword [rbp + 0x1a8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0x190]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.14002b660
movabs rsi, 0x255d42df9832c790
mov qword [rbp + 0x6c], 0
movabs rax, 0xd34092d129b9150e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x255d42df9840a8ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0x6c]
lea rcx, [rbp + 0x120]
call fcn.140066f80
test al, al
je 0x1400751e9
mov rdx, qword [0x1402ffc80]
test rdx, rdx
je 0x1400751e9
mov dword [rbp + 0x2a0], 1
mov rcx, qword [0x140301438]
test rcx, rcx
je 0x1400751e9
cmp dword [0x1403013a4], 0
je 0x1400751e9
add rdx, qword [0x140301358]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x1400751e9
movabs rax, 0xd6408dd123b91e08
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x403121b6f057b1b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xab86d85b89dbfe5d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
vmovdqu ymm0, ymmword [rbp + 0x3e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
lea rcx, [rbp + 0x200]
vzeroupper
call fcn.1400665e0
call fcn.14003a860
mov rcx, qword [0x140301398]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1402e61dc]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x1402e6268]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x14], xmm0
mov dword [rbp + 0x18], 0x43520000
movabs rax, 0xd6158adb10f55676
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x130], rax
movabs rax, 0x255d42f2b512b4fc
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x358], rax
movdqa xmm0, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [rbp + 0x14]
lea rcx, [rbp + 0x130]
call fcn.14003a150
movabs rax, 0xb7049cde24b4151e
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x360], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x368], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [0x1402ffd78]
lea rcx, [rbp + 0x140]
call fcn.140068ea0
movabs rax, 0xf8409cc029bb1c12
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x90], rax
movabs rax, 0x253927b6e847a4f3
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x370], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [0x1402ffd79]
lea rcx, [rbp + 0x90]
call fcn.140068ea0
movabs rax, 0xb7608bd72da71a16
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x388], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [0x1402ffd7a]
lea rcx, [rbp + 0xa0]
call fcn.140068ea0
movabs rax, 0xb760f9b223b81a15
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x398], rax
movdqa xmm0, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0xb0], xmm0
lea rdx, [0x1402ffd7c]
lea rcx, [rbp + 0xb0]
call fcn.140068ea0
movabs rax, 0xd20397d332a6121f
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3b0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3b8], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [0x1402ffd7b]
lea rcx, [rbp + 0xc0]
call fcn.140068ea0
movabs rax, 0xb760f9c029b91418
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3a8], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0xd0], xmm0
mov r8d, 0x10260
lea rdx, [0x1402ffd80]
lea rcx, [rbp + 0xd0]
call fcn.14006c8a0
call fcn.14003a860
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.1400dbe60
lea r11, [rsp + 0x4b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret