Function at 0x140074b70
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140285040]
xor rax, rsp
mov qword [rbp + 0x150], rax
xor edi, edi
mov esi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rsi + rbx]
cmp dword [0x140287828], eax
jle 0x140074c4b
lea rcx, [0x140287828]
call fcn.14007d1e8
cmp dword [0x140287828], 0xffffffff
jne 0x140074c4b
mov qword [0x140287930], rdi
mov qword [0x140287938], rdi
mov byte [0x140287830], dil
mov dword [0x140287940], edi
mov r8d, 0xff
lea rdx, [0x140082a88]
lea rcx, [0x140287830]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x14028792f], dil
lea rcx, [0x140287830]
call fcn.140030420
nop
lea rcx, [0x1400810c0]
call fcn.14007d0f4
nop
lea rcx, [0x140287828]
call fcn.14007d17c
movdqa xmm6, xmmword [0x1402788a0]
mov eax, dword [rsi + rbx]
cmp dword [0x140287730], eax
jle 0x140074ccb
lea rcx, [0x140287730]
call fcn.14007d1e8
cmp dword [0x140287730], 0xffffffff
jne 0x140074ccb
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1402877f0], xmm0
movups xmmword [0x140287800], xmm0
movups xmmword [0x140287810], xmm0
mov qword [0x140287820], rax
movups xmmword [0x1402877f8], xmm0
movdqu xmmword [0x140287808], xmm6
mov byte [0x1402877f8], al
mov dword [0x140287820], 0xffffffff
lea rcx, [0x140081050]
call fcn.14007d0f4
lea rcx, [0x140287730]
call fcn.14007d17c
mov rdx, qword [0x1402877f0]
test rdx, rdx
jne 0x140074cf8
mov dword [rbp + 0xa0], edx
xorps xmm1, xmm1
movss dword [rbp + 0xa4], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
xorps xmm2, xmm2
jmp 0x140074d4c
mov rcx, qword [0x140287218]
test rcx, rcx
je 0x140074d34
cmp dword [0x140287184], 0
je 0x140074d34
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movdqa xmm6, xmmword [0x1402788a0]
movss xmm2, dword [rbp + 0xa0]
movss xmm0, dword [rbp + 0xa8]
movss xmm1, dword [rbp + 0xa4]
subss xmm2, dword [0x140287604]
subss xmm1, dword [0x140287608]
subss xmm0, dword [0x14028760c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140074d89
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x140074d99
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movdqa xmm6, xmmword [0x1402788a0]
comiss xmm0, dword [0x140278810]
jbe 0x140074e5e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x68], xmm0
movdqu xmmword [rbp + 0x78], xmm6
mov byte [rbp + 0x68], al
mov dword [rbp + 0x90], 0xffffffff
mov rax, qword [rbp + 0x60]
mov qword [0x1402877f0], rax
lea rdx, [rbp + 0x68]
lea rcx, [0x1402877f8]
call fcn.14002b450
mov rax, qword [rbp + 0x88]
mov qword [0x140287818], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140287820], eax
mov rdx, qword [rbp + 0x80]
cmp rdx, 0xf
jbe 0x140074e4d
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140074e48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140074e48
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007d10c
movdqa xmm0, xmmword [0x1402788a0]
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], 0
mov rcx, qword [0x140287178]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm6, dword [0x140278778]
addss xmm1, xmm6
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm6
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x140278684]
mulss xmm0, xmm9
subss xmm0, dword [0x14027878c]
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43b90000
movabs rax, 0x41530d03b33b956d
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xb55511d990d719e8
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
movabs r14, 0x61366160da53f03b
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rsi, 0xb55511d9e4a470a4
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp]
call fcn.140037320
movabs rax, 0x61360903a8329568
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm0
mov qword [rbp + 0xb0], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9d, 0x100
lea r8, [0x140287830]
xor edx, edx
lea rcx, [rbp]
call fcn.14006ae90
test al, al
je 0x14007503c
lea rcx, [0x140287830]
call fcn.140030420
mov rax, qword [0x140287178]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
subss xmm0, xmm6
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43870000
movabs rax, 0x125f2d08bf05d318
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
movabs rax, 0xb55511d9e4a470d0
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp]
call fcn.140071860
test al, al
je 0x140075252
cmp qword [0x1402875f0], 0
je 0x140075248
lea rdx, [0x140287610]
lea rcx, [rbp + 0xe0]
call fcn.14001f4e0
nop
mov r12, qword [rbp + 0xe8]
mov r15, qword [rbp + 0xe0]
cmp r15, r12
je 0x14007523c
add r15, 0x28
nop dword [rax]
mov rax, qword [r15 - 0x28]
mov qword [rbp + 0x60], rax
lea rdx, [r15 - 0x20]
lea rcx, [rbp + 0x68]
call fcn.14000be10
mov rax, qword [r15]
mov qword [rbp + 0x88], rax
mov eax, dword [r15 + 8]
mov dword [rbp + 0x90], eax
lea rax, [rbp + 0x68]
mov r14, qword [rbp + 0x68]
mov r13, qword [rbp + 0x80]
cmp r13, 0xf
cmova rax, r14
movsxd rcx, dword [0x140287930]
test ecx, ecx
je 0x140075483
lea rdi, [0x140082a88]
test rax, rax
cmovne rdi, rax
mov rbx, qword [0x140287938]
mov rsi, rcx
shl rsi, 4
add rsi, rbx
cmp rbx, rsi
je 0x14007545d
nop word [rax + rax]
mov r8, qword [rbx]
mov r9, qword [rbx + 8]
cmp r8, r9
je 0x140075450
mov rcx, rdi
cmp byte [r8], 0x2d
jne 0x140075446
inc r8
call fcn.14002f860
test rax, rax
je 0x140075450
xor edi, edi
movabs rsi, 0xb55511d9e4a470a4
cmp r13, 0xf
jbe 0x140075221
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140075219
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400758a2
mov rcx, r14
call fcn.14007d10c
add r15, 0x38
lea rax, [r15 - 0x28]
cmp rax, r12
jne 0x140075130
movabs r14, 0x61366160da53f03b
lea rcx, [rbp + 0xe0]
call fcn.140002a10
call fcn.140037fd0
call fcn.140040e90
call fcn.1400379b0
mov rcx, qword [0x140287178]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x140278754]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, xmm6
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, dword [0x14027878c]
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x42f00000
movabs rax, 0x61450f0fb327937a
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.140037320
cmp dword [0x140287820], 0xffffffff
je 0x140075b18
mov qword [rbp + 0xb0], 0
movabs rax, 0x15440e10bf3f956f
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0xb55511d9e4cb0484
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.1400635d0
test al, al
je 0x140075a14
mov rdx, qword [0x1402877f0]
mov rcx, qword [0x140287218]
test rdx, rdx
jne 0x1400758a9
mov qword [rbp + 0x10], rdx
mov dword [rbp + 0x18], edx
jmp 0x1400758e1
call fcn.14002f860
test rax, rax
jne 0x140075477
add rbx, 0x10
cmp rbx, rsi
jne 0x1400751b0
xor edi, edi
movabs rsi, 0xb55511d9e4a470a4
cmp dword [0x140287940], edi
jne 0x1400751ea
jmp 0x140075483
xor edi, edi
movabs rsi, 0xb55511d9e4a470a4
movabs rax, 0x61366160da53d956
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 8], rax
movabs r14, 0x61366160da53f03b
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x60]
test rdx, rdx
jne 0x140075517
mov dword [rbp + 0x10], edx
xorps xmm1, xmm1
movss dword [rbp + 0x14], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
xorps xmm2, xmm2
jmp 0x140075557
mov rcx, qword [0x140287218]
test rcx, rcx
je 0x140075548
cmp dword [0x140287184], 0
je 0x140075548
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x10]
movss xmm0, dword [rbp + 0x18]
movss xmm1, dword [rbp + 0x14]
subss xmm2, dword [0x140287604]
subss xmm1, dword [0x140287608]
subss xmm0, dword [0x14028760c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140075594
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007559c
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x120]
call fcn.140001220
mov rbx, rax
movabs rax, 0x61366160da53d81b
mov qword [rbp + 0xa0], rax
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rcx
mov qword [rbp + 0xa0], rsi
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rcx
mov qword [rbp + 0xa0], r14
mov rcx, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rcx
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.1400797e0
nop
mov r9, rbx
mov r8, rax
lea rcx, [rbp + 0x20]
call fcn.140079940
nop
lea rax, [rbp]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140075654
lea rdx, [rbp]
lea rcx, [rbp + 0x20]
call fcn.140002b80
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400756e2
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400756dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075886
call fcn.14007d10c
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14007572d
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075728
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007588d
call fcn.14007d10c
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x14007577e
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075779
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140075894
call fcn.14007d10c
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
mov rax, qword [0x1402877f0]
cmp qword [rbp + 0x60], rax
sete dl
mov qword [rbp + 0xb0], 0
lea rcx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 0xf
cmova rcx, qword [rbp + 0xc0]
lea r9, [rbp + 0xb0]
xor r8d, r8d
call fcn.140070f70
test al, al
je 0x140075820
mov rax, qword [rbp + 0x60]
mov qword [0x1402877f0], rax
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0xf
cmova rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
lea rcx, [0x1402877f8]
call fcn.14000cbf0
mov rax, qword [rbp + 0x88]
mov qword [0x140287818], rax
mov eax, dword [rbp + 0x90]
mov dword [0x140287820], eax
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x14007585d
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140075858
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007589b
call fcn.14007d10c
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], 0xf
mov byte [rbp + 0xc0], 0
mov r13, qword [rbp + 0x80]
mov r14, qword [rbp + 0x68]
jmp 0x1400751ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x1400758e1
cmp dword [0x140287184], 0
je 0x1400758e1
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1402877f0]
mov rcx, qword [0x140287218]
movsd xmm7, qword [rbp + 0x10]
mov esi, dword [rbp + 0x18]
test rdx, rdx
jne 0x1400758f7
mov qword [rbp], rdx
mov dword [rbp + 8], edx
jmp 0x140075928
test rcx, rcx
je 0x140075928
cmp dword [0x140287184], 0
je 0x140075928
add rdx, 0x90
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140287218]
movsd xmm6, qword [rbp]
mov edi, dword [rbp + 8]
mov rdx, qword [0x1402875f0]
test rdx, rdx
jne 0x140075940
xor ebx, ebx
jmp 0x140075983
test rcx, rcx
je 0x14007597c
cmp dword [0x140287184], 0
je 0x14007597c
add rdx, 0x20
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1402875f0]
mov rcx, qword [0x140287218]
mov rbx, qword [rbp + 0xa0]
test rdx, rdx
jne 0x14007598d
xor r8d, r8d
jmp 0x1400759c9
test rcx, rcx
je 0x1400759c2
cmp dword [0x140287184], 0
je 0x1400759c2
add rdx, 0x30
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1402875f0]
mov r8, qword [rbp + 0xb0]
movsd qword [rbp + 0xa0], xmm7
mov dword [rbp + 0xa8], esi
movsd qword [rbp + 0xb0], xmm6
mov dword [rbp + 0xb8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.140029be0
movabs rsi, 0xb55511d9e4a470a4
mov qword [rbp + 0xb0], 0
movabs rax, 0x5160a03b53f9e6e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0xb55511d9e4d61fcb
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.1400635d0
test al, al
je 0x140075c04
mov rdx, qword [0x1402877f0]
test rdx, rdx
je 0x140075c04
mov dword [rbp + 0xb0], 1
mov rcx, qword [0x140287218]
test rcx, rcx
je 0x140075c04
cmp dword [0x140287184], 0
je 0x140075c04
add rdx, qword [0x140287148]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x140075c04
movabs rax, 0x161503bf3f9568
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x20], rax
movabs rax, 0xd03972b08cc10684
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x28], rax
movabs rax, 0xac4a77213dd4f8a5
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x30], rax
movabs rcx, 0xca37c86364027d6e
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x128], rax
movabs rax, 0xac6b03524fbd9e85
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0xa0], rcx
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x138], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140062c50
call fcn.1400379b0
mov rcx, qword [0x140287178]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x140278754]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x1402787d8]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, dword [0x14027878c]
movss dword [rbp + 0xb0], xmm0
mov dword [rbp + 0xb4], 0x43520000
movabs rax, 0x61450d01af20996d
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x100]
call fcn.140037320
movabs rax, 0x6152040cb8329e7e
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x140286118]
lea rcx, [rbp + 0x100]
call fcn.140065510
movabs rax, 0x2e160412b53d9772
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
movabs rax, 0xb53174b094d113c7
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x140286119]
lea rcx, [rbp + 0x100]
call fcn.140065510
movabs rax, 0x61361305b1219176
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x14028611a]
lea rcx, [rbp + 0x100]
call fcn.140065510
movabs rax, 0x61366160bf3e9175
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x14028611c]
lea rcx, [rbp + 0x100]
call fcn.140065510
movabs rax, 0x4550f01ae20997f
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
lea rdx, [0x14028611b]
lea rcx, [rbp + 0x100]
call fcn.140065510
movabs rax, 0x61366112b53f9f78
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x108], rax
mov qword [rbp + 0xa0], r14
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0xa0], rsi
mov rax, qword [rbp + 0xa0]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x100], xmm0
mov r8d, 0x10260
lea rdx, [0x140286120]
lea rcx, [rbp + 0x100]
call fcn.14006d9e0
call fcn.1400379b0
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.14007ce70
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret