Function at 0x140077f10
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x4d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1402fe080]
xor rax, rsp
mov qword [rbp + 0x420], rax
xor r14d, r14d
mov edi, 4
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140305d80], eax
jle 0x140077ff2
lea rcx, [0x140305d80]
call fcn.1400df460
cmp dword [0x140305d80], 0xffffffff
jne 0x140077ff2
mov qword [0x140305e90], r14
mov qword [0x140305e98], r14
mov byte [0x140305d90], r14b
mov dword [0x140305ea0], r14d
mov r8d, 0xff
lea rdx, [0x1400f4678]
lea rcx, [0x140305d90]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [0x140305e8f], r14b
lea rcx, [0x140305d90]
call fcn.1400369d0
nop
lea rcx, [0x1400e4f80]
call fcn.1400df364
nop
lea rcx, [0x140305d80]
call fcn.1400df3f4
mov eax, dword [rdi + rbx]
cmp dword [0x140305cb8], eax
jle 0x14007802a
lea rcx, [0x140305cb8]
call fcn.1400df460
cmp dword [0x140305cb8], 0xffffffff
jne 0x14007802a
lea rcx, [0x1400e4f10]
call fcn.1400df364
lea rcx, [0x140305cb8]
call fcn.1400df3f4
xorps xmm6, xmm6
mov rdx, qword [0x140303c80]
test rdx, rdx
jne 0x140078051
mov dword [rbp + 0x14], edx
xorps xmm1, xmm1
movss dword [rbp + 0x18], xmm1
xorps xmm0, xmm0
movss dword [rbp + 0x1c], xmm0
xorps xmm2, xmm2
jmp 0x140078091
mov rcx, qword [0x140305478]
test rcx, rcx
je 0x140078082
cmp dword [0x1403053e4], 0
je 0x140078082
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, listen
lea r8, [rbp + 0x14]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x14]
movss xmm0, dword [rbp + 0x1c]
movss xmm1, dword [rbp + 0x18]
subss xmm2, dword [0x140305b94]
subss xmm1, dword [0x140305b98]
subss xmm0, dword [0x140305b9c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x1400780ce
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1400780d6
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x1402ea3b8]
jbe 0x1400781c1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rax
movups xmmword [rbp + 0x168], xmm0
movdqa xmm1, xmmword [0x1402ea450]
movdqu xmmword [rbp + 0x178], xmm1
mov byte [rbp + 0x168], al
mov dword [rbp + 0x190], 0xffffffff
mov rax, qword [rbp + 0x160]
mov qword [0x140303c80], rax
lea rdx, [rbp + 0x168]
lea rcx, [0x140303c88]
call fcn.1400311a0
mov rax, qword [rbp + 0x188]
mov qword [0x140303ca8], rax
mov eax, dword [rbp + 0x190]
mov dword [0x140303cb0], eax
mov rdx, qword [rbp + 0x180]
cmp rdx, 0xf
jbe 0x1400781aa
inc rdx
mov rcx, qword [rbp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400781a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400781a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400df384
movdqa xmm0, xmmword [0x1402ea450]
movdqu xmmword [rbp + 0x178], xmm0
mov byte [rbp + 0x168], 0
mov rcx, qword [0x1403053d8]
mov rax, qword [rcx + 0x4038]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
movss xmm7, dword [0x1402ea31c]
addss xmm1, xmm7
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
movss xmm9, dword [0x1402ea224]
mulss xmm0, xmm9
movss xmm10, dword [0x1402ea330]
subss xmm0, xmm10
movss dword [rbp + 0x44], xmm0
mov dword [rbp + 0x48], 0x442f0000
movabs rax, 0xa9b88db4c803c1d8
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xbab782e9a73ef39e
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xdc984193bd2cdd5a
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d0], rax
movabs rbx, 0x8f727bca544003fc
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d8], rax
movabs r15, 0xcad1e5d19e23ecf5
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3e0], rax
movabs rsi, 0x9ac3f180eb1e96f2
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3e8], rax
movabs rdi, 0xdc984193bd2cf077
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3f0], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3f8], rax
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0x1c0], ymm1
lea rdx, [rbp + 0x44]
lea rcx, [rbp + 0x1c0]
vzeroupper
call fcn.14003d8c0
mov rax, qword [0x1403053d8]
mov rcx, qword [rax + 0x4038]
movss xmm0, dword [rcx + 0x30]
movss xmm1, dword [rcx + 0x34]
subss xmm1, dword [0x1402ea340]
subss xmm0, xmm7
movss dword [rbp + 0x4c], xmm0
movss dword [rbp + 0x50], xmm1
movabs rax, 0xb9b8a9b9fb75cfd6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf0], rax
movabs rax, 0x9ac3f180eb1e9686
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2f8], rax
movdqa xmm0, xmmword [rbp + 0xf0]
xorps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0xf0], xmm0
lea rdx, [rbp + 0x4c]
lea rcx, [rbp + 0xf0]
call fcn.140073e80
test al, al
je 0x140078579
cmp qword [0x140305b80], 0
je 0x14007856f
lea rdx, [0x140305ba0]
lea rcx, [rbp + 0x2d8]
call fcn.140025d20
nop
mov rax, qword [rbp + 0x2e0]
mov qword [rbp], rax
mov r12, qword [rbp + 0x2d8]
cmp r12, rax
je 0x140078563
add r12, 0x28
movzx ebx, byte [rbp + 0x10]
nop dword [rax]
mov rax, qword [r12 - 0x28]
mov qword [rbp + 0x260], rax
lea rdx, [r12 - 0x20]
lea rcx, [rbp + 0x268]
call fcn.1400116c0
mov rax, qword [r12]
mov qword [rbp + 0x288], rax
mov eax, dword [r12 + 8]
mov dword [rbp + 0x290], eax
lea rax, [rbp + 0x268]
mov r15, qword [rbp + 0x268]
mov r13, qword [rbp + 0x280]
cmp r13, 0xf
cmova rax, r15
movsxd rcx, dword [0x140305e90]
test ecx, ecx
je 0x14007876b
lea rsi, [0x1400f4678]
test rax, rax
cmovne rsi, rax
mov rdi, qword [0x140305e98]
mov r14, rcx
shl r14, 4
add r14, rdi
cmp rdi, r14
je 0x14007874c
nop word [rax + rax]
mov r8, qword [rdi]
mov r9, qword [rdi + 8]
cmp r8, r9
je 0x14007873f
mov rcx, rsi
cmp byte [r8], 0x2d
jne 0x140078735
inc r8
call fcn.140035ed0
test rax, rax
je 0x14007873f
xor r14d, r14d
cmp r13, 0xf
jbe 0x140078528
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140078520
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078bef
mov rcx, r15
call fcn.1400df384
add r12, 0x38
lea rax, [r12 - 0x28]
movabs rsi, 0x9ac3f180eb1e96f2
cmp rax, qword [rbp]
jne 0x140078430
movabs rbx, 0x8f727bca544003fc
movabs rdi, 0xdc984193bd2cf077
movabs r15, 0xcad1e5d19e23ecf5
lea rcx, [rbp + 0x2d8]
call fcn.1400032a0
call fcn.14003e5f0
call fcn.1400474d0
call fcn.14003dfd0
mov rcx, qword [0x1403053d8]
mov rax, qword [rcx + 0x4038]
movss xmm2, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
mulss xmm2, xmm9
addss xmm2, dword [0x1402ea2f4]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm2, xmm0
movss xmm1, dword [rax + 0x2c]
subss xmm1, dword [rax + 0x90]
addss xmm1, xmm7
movss dword [rax + 0x110], xmm2
movss dword [rax + 0x114], xmm1
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x5c], xmm0
mov dword [rbp + 0x60], 0x42f00000
movabs rax, 0xa5b891b2df03c1d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x9ac3f1adc63ee59c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movdqa xmm0, xmmword [rbp + 0x110]
xorps xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x5c]
lea rcx, [rbp + 0x110]
call fcn.14003d8c0
cmp dword [0x140303cb0], 0xffffffff
je 0x140078f09
mov qword [rbp + 0x64], 0
movabs rax, 0xbea38aa1fb4f89a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x9ac3f180eb71e2d2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
movdqa xmm0, xmmword [rbp + 0x120]
xorps xmm0, xmmword [rbp + 0x330]
movdqa xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0x64]
lea rcx, [rbp + 0x120]
call fcn.14006a6f0
test al, al
je 0x140078d5a
mov rdx, qword [0x140303c80]
mov rcx, qword [0x140305478]
test rdx, rdx
jne 0x140078bf6
mov qword [rbp + 0x2c], rdx
mov dword [rbp + 0x34], edx
jmp 0x140078c2e
call fcn.140035ed0
test rax, rax
jne 0x14007875e
add rdi, 0x10
cmp rdi, r14
jne 0x1400784c0
xor r14d, r14d
cmp dword [0x140305ea0], r14d
jne 0x1400784f1
jmp 0x140078761
xor r14d, r14d
movabs rsi, 0x9ac3f180eb1e96f2
movabs rax, 0xcad1e5d19e23c598
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
movabs r15, 0xcad1e5d19e23ecf5
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0x300], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x308], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x80], xmm0
mov rdx, qword [rbp + 0x260]
test rdx, rdx
jne 0x1400787f6
mov dword [rbp + 0x20], edx
movaps xmm1, xmm6
movss dword [rbp + 0x24], xmm6
movaps xmm0, xmm6
movss dword [rbp + 0x28], xmm6
movaps xmm2, xmm6
jmp 0x140078836
mov rcx, qword [0x140305478]
test rcx, rcx
je 0x140078827
cmp dword [0x1403053e4], 0
je 0x140078827
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, listen
lea r8, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x20]
movss xmm0, dword [rbp + 0x28]
movss xmm1, dword [rbp + 0x24]
subss xmm2, dword [0x140305b94]
subss xmm1, dword [0x140305b98]
subss xmm0, dword [0x140305b9c]
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140078873
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14007887b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si edx, xmm0
lea rcx, [rbp + 0x240]
call fcn.140001aa0
mov rdi, rax
movabs rax, 0xcad1e5d19e23c4d5
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x100], rcx
mov qword [rbp + 8], rsi
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x108], rcx
mov qword [rbp + 8], r15
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x310], rcx
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x318], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x310]
movdqa xmmword [rbp + 0x100], xmm0
lea r8, [rbp + 0x100]
lea rdx, [rbp + 0x268]
lea rcx, [rbp + 0x220]
call fcn.14007ccc0
nop
mov r9, rdi
mov r8, rax
movzx edx, bl
lea rcx, [rbp + 0x1e0]
call fcn.14007ce20
nop
lea rax, [rbp + 0x80]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140078930
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x1e0]
call fcn.140003410
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x2c0], r14
mov qword [rbp + 0x2c8], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2b0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2c0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0xf
jbe 0x1400789ca
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400789c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078bd3
call fcn.1400df384
mov qword [rbp + 0x1f0], r14
mov qword [rbp + 0x1f8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1e0], 0
mov rdx, qword [rbp + 0x238]
cmp rdx, 0xf
jbe 0x140078a24
inc rdx
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078a1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078bda
call fcn.1400df384
mov qword [rbp + 0x230], r14
mov qword [rbp + 0x238], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x220], 0
mov rdx, qword [rbp + 0x258]
cmp rdx, 0xf
jbe 0x140078a7e
inc rdx
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078a79
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078be1
call fcn.1400df384
mov qword [rbp + 0x250], r14
mov qword [rbp + 0x258], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x240], 0
mov rax, qword [0x140303c80]
cmp qword [rbp + 0x260], rax
sete dl
mov qword [rbp + 0x54], 0
lea rcx, [rbp + 0x2b0]
cmp qword [rbp + 0x2c8], 0xf
cmova rcx, qword [rbp + 0x2b0]
lea r9, [rbp + 0x54]
xor r8d, r8d
call fcn.140073590
test al, al
je 0x140078b6a
mov rax, qword [rbp + 0x260]
mov qword [0x140303c80], rax
mov rsi, qword [rbp + 0x278]
lea r9, [rbp + 0x268]
cmp qword [rbp + 0x280], 0xf
cmova r9, qword [rbp + 0x268]
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rsi, rax
ja 0x140078b41
lea rdi, [0x140303c88]
cmp rax, 0xf
cmova rdi, qword [0x140303c88]
mov qword [0x140303c98], rsi
mov r8, rsi
mov rdx, r9
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
jmp 0x140078b50
mov rdx, rsi
lea rcx, [0x140303c88]
call fcn.140014220
mov rax, qword [rbp + 0x288]
mov qword [0x140303ca8], rax
mov eax, dword [rbp + 0x290]
mov dword [0x140303cb0], eax
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 0xf
jbe 0x140078ba7
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078ba2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078be8
call fcn.1400df384
mov qword [rbp + 0x2c0], r14
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x2b0], 0
mov r13, qword [rbp + 0x280]
mov r15, qword [rbp + 0x268]
jmp 0x1400784f1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
test rcx, rcx
je 0x140078c2e
cmp dword [0x1403053e4], 0
je 0x140078c2e
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, listen
lea r8, [rbp + 0x2c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140303c80]
mov rcx, qword [0x140305478]
movsd xmm7, qword [rbp + 0x2c]
mov esi, dword [rbp + 0x34]
test rdx, rdx
jne 0x140078c44
mov qword [rbp + 0x38], rdx
mov dword [rbp + 0x40], edx
jmp 0x140078c75
test rcx, rcx
je 0x140078c75
cmp dword [0x1403053e4], 0
je 0x140078c75
add rdx, 0x90
mov qword [rsp + 0x20], r14
mov r9d, listen
lea r8, [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140305478]
movsd xmm6, qword [rbp + 0x38]
mov edi, dword [rbp + 0x40]
mov rdx, qword [0x140305b80]
test rdx, rdx
jne 0x140078c8e
mov rbx, r14
jmp 0x140078ccd
test rcx, rcx
je 0x140078cc6
cmp dword [0x1403053e4], 0
je 0x140078cc6
add rdx, 0x20
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x2d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140305b80]
mov rcx, qword [0x140305478]
mov rbx, qword [rbp + 0x2d0]
test rdx, rdx
jne 0x140078cd7
mov r8, r14
jmp 0x140078d0f
test rcx, rcx
je 0x140078d08
cmp dword [0x1403053e4], 0
je 0x140078d08
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x298]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140305b80]
mov r8, qword [rbp + 0x298]
movsd qword [rbp + 0x1a0], xmm7
mov dword [rbp + 0x1a8], esi
movsd qword [rbp + 0x1b0], xmm6
mov dword [rbp + 0x1b8], edi
mov byte [rsp + 0x30], 1
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x20], rax
mov r9, rbx
call fcn.140030480
movabs rsi, 0x9ac3f180eb1e96f2
mov qword [rbp + 0x6c], 0
movabs rax, 0xaef18eb2f14f82a0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x9ac3f180eb6cf99d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
movdqa xmm0, xmmword [rbp + 0x130]
xorps xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0x130], xmm0
lea rdx, [rbp + 0x6c]
lea rcx, [rbp + 0x130]
call fcn.14006a6f0
test al, al
je 0x140078e27
mov rdx, qword [0x140303c80]
test rdx, rdx
je 0x140078e27
mov dword [rbp + 0x2a8], 1
mov rcx, qword [0x140305478]
test rcx, rcx
je 0x140078e27
cmp dword [0x1403053e4], 0
je 0x140078e27
add rdx, qword [0x140305398]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x2a8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x74], 0
movabs rax, 0xa5be81f1f54083b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x9ac3f180eb1e9680
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x350]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x74]
lea rcx, [rbp + 0x140]
call fcn.14006a6f0
test al, al
je 0x140078fc6
mov rdx, qword [0x140303c80]
test rdx, rdx
je 0x140078fc6
mov dword [rbp + 0x2a0], 2
mov rcx, qword [0x140305478]
test rcx, rcx
je 0x140078fc6
cmp dword [0x1403053e4], 0
je 0x140078fc6
add rdx, qword [0x140305398]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x140078fc6
movabs rax, 0xabf191b2fb4f89a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0xffaf92e9837be0d2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xdcb935e0cf459657
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
vmovdqu ymm0, ymmword [rbp + 0x400]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
lea rcx, [rbp + 0x200]
vzeroupper
call fcn.140069d50
call fcn.14003dfd0
mov rcx, qword [0x1403053d8]
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4038]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [rax + 0x8c]
mulss xmm0, xmm9
addss xmm0, dword [0x1402ea2f4]
addss xmm1, xmm0
movss xmm0, dword [rax + 0x2c]
subss xmm0, dword [rax + 0x90]
addss xmm0, dword [0x1402ea37c]
movss dword [rax + 0x110], xmm1
movss dword [rax + 0x114], xmm0
mov byte [rax + 0x151], 1
mov rax, qword [rcx + 0x4038]
movss xmm0, dword [rax + 0x30]
mulss xmm0, xmm9
subss xmm0, xmm10
movss dword [rbp + 0x14], xmm0
mov dword [rbp + 0x18], 0x43520000
movabs rax, 0xaba496b8c803c1d8
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x150], rax
movabs rax, 0x9ac3f1adc63ee59e
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x360], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x368], rax
movdqa xmm0, xmmword [rbp + 0x150]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x150], xmm0
lea rdx, [rbp + 0x14]
lea rcx, [rbp + 0x150]
call fcn.14003d8c0
movabs rax, 0xcab580bdfc4282b0
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x370], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x90], xmm0
lea rdx, [0x140303d78]
lea rcx, [rbp + 0x90]
call fcn.14006c610
movabs rax, 0x85f180a3f14d8bbc
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xa0], rax
movabs rax, 0x9aa794e99b6bf591
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x380], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x388], rax
movdqa xmm0, xmmword [rbp + 0xa0]
xorps xmm0, xmmword [rbp + 0x380]
movdqa xmmword [rbp + 0xa0], xmm0
lea rdx, [0x140303d79]
lea rcx, [rbp + 0xa0]
call fcn.14006c610
movabs rax, 0xcad197b4f5518db8
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3c8], rax
movdqa xmm0, xmmword [rbp + 0xb0]
xorps xmm0, xmmword [rbp + 0x3c0]
movdqa xmmword [rbp + 0xb0], xmm0
lea rdx, [0x140303d7a]
lea rcx, [rbp + 0xb0]
call fcn.14006c610
movabs rax, 0xcad1e5d1fb4e8dbb
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x390], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x398], rax
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x390]
movdqa xmmword [rbp + 0xc0], xmm0
lea rdx, [0x140303d7c]
lea rcx, [rbp + 0xc0]
call fcn.14006c610
movabs rax, 0xafb28bb0ea5085b1
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3a8], rax
movdqa xmm0, xmmword [rbp + 0xd0]
xorps xmm0, xmmword [rbp + 0x3a0]
movdqa xmmword [rbp + 0xd0], xmm0
lea rdx, [0x140303d7b]
lea rcx, [rbp + 0xd0]
call fcn.14006c610
movabs rax, 0xcad1e5a3f14f83b6
mov qword [rbp + 0x298], rax
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0x298], r15
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3b0], rax
mov qword [rbp + 0x298], rsi
mov rax, qword [rbp + 0x298]
mov qword [rbp + 0x3b8], rax
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x3b0]
movdqa xmmword [rbp + 0xe0], xmm0
mov r8d, 0x10260
lea rdx, [0x140303d80]
lea rcx, [rbp + 0xe0]
call fcn.140070010
call fcn.14003dfd0
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.1400df0e0
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret