Function at 0x140035d20
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0xc0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rsp + 0x60], xmm11
movaps xmmword [rsp + 0x50], xmm12
movaps xmmword [rsp + 0x40], xmm13
mov r12, rcx
mov qword [rsp + 0x30], rdx
mov edx, dword [0x1400a9318]
mov rax, qword gs:[0x58]
mov ebp, 0x10
mov r14, qword [rax + rdx*8]
xor esi, esi
mov eax, dword [r14 + rbp]
cmp dword [0x1400a8c88], eax
jg 0x140035fda
mov eax, dword [r14 + rbp]
cmp dword [0x1400a8c90], eax
jg 0x1400360d6
mov rdi, qword [0x1400a8c78]
mov rax, qword [0x1400a8c70]
cmp rax, rdi
je 0x140035eac
lea rbx, [rax + 4]
movss xmm12, dword [rsp + 0x34]
movss xmm13, dword [rsp + 0x30]
xorps xmm11, xmm11
movss xmm10, dword [0x140053da4]
nop dword [rax + rax]
movss xmm8, dword [rbx - 4]
movss xmm6, dword [rbx + 4]
movaps xmm1, xmm8
subss xmm1, xmm6
movss xmm9, dword [rbx]
movss xmm7, dword [rbx + 8]
movaps xmm0, xmm9
subss xmm0, xmm7
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
cvtps2pd xmm2, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm2
ja 0x140035e23
sqrtpd xmm0, xmm2
jmp 0x140035e2b
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvtsd2ss xmm0, xmm0
comiss xmm0, xmm11
jbe 0x140035e5a
subss xmm6, xmm8
divss xmm6, xmm0
addss xmm6, xmm8
movss dword [rbx - 4], xmm6
subss xmm7, xmm9
divss xmm7, xmm0
addss xmm7, xmm9
movss dword [rbx], xmm7
comiss xmm10, xmm0
jbe 0x140035e94
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cvttss2si ecx, xmm12
cdq
idiv ecx
movd xmm6, edx
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cvttss2si ecx, xmm13
cdq
idiv ecx
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [rbx + 4], xmm0
movss dword [rbx + 8], xmm6
add rbx, 0x10
lea rax, [rbx - 4]
cmp rax, rdi
jne 0x140035de0
mov rax, qword [0x1400a8c70]
mov ecx, dword [0x140081140]
test ecx, ecx
jle 0x140035f7e
mov rbp, rsi
nop dword [rax]
lea r15d, [rsi + 1]
mov ebx, r15d
cmp r15d, ecx
jge 0x140035f6e
lea rdi, [rbp + 0x10]
nop dword [rax]
nop dword [rax + rax]
movss xmm0, dword [rax + rbp]
subss xmm0, dword [rdi + rax]
movss xmm1, dword [rax + rbp + 4]
subss xmm1, dword [rdi + rax + 4]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
movd xmm0, dword [0x140081144]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x140035f60
movss xmm6, dword [0x140081148]
lea rcx, [0x140081150]
call fcn.140008a00
movsxd r8, ebx
shl r8, 4
add r8, qword [0x1400a8c70]
movsxd rdx, esi
shl rdx, 4
add rdx, qword [0x1400a8c70]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
mov rcx, r12
call fcn.140019a40
mov rax, qword [0x1400a8c70]
mov ecx, dword [0x140081140]
inc ebx
add rdi, 0x10
cmp ebx, ecx
jl 0x140035ee0
add rbp, 0x10
mov esi, r15d
cmp r15d, ecx
jl 0x140035ec0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov byte [0x1400a8c8c], 1
lea rcx, [0x1400a8c90]
call fcn.140050644
jmp 0x140035da5
lea rcx, [0x1400a8c88]
call fcn.1400506b0
cmp dword [0x1400a8c88], 0xffffffff
jne 0x140035d95
movsxd rbx, dword [0x140081140]
test rbx, rbx
je 0x1400360b8
movabs rax, 0xfffffffffffffff
cmp rbx, rax
jbe 0x140036018
call fcn.140038a20
int3
mov rdi, rbx
shl rdi, 4
cmp rdi, 0x1000
jb 0x14003605a
lea rcx, [rdi + 0x27]
cmp rcx, rdi
ja 0x140036037
call fcn.140038a00
int3
call fcn.140050a6c
test rax, rax
je 0x140036053
lea rdx, [rax + 0x27]
and rdx, 0xffffffffffffffe0
mov qword [rdx - 8], rax
lea rax, [rdi + rdx]
jmp 0x140036085
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rdi, rdi
je 0x14003607e
mov rcx, rdi
call fcn.140050a6c
mov rdx, rax
mov qword [0x1400a8c70], rax
lea rcx, [rdi + rax]
mov qword [0x1400a8c80], rcx
jmp 0x1400360a0
mov rdx, rsi
lea rax, [rdi + rsi]
mov qword [0x1400a8c80], rax
mov qword [0x1400a8c70], rdx
nop dword [rax]
nop word [rax + rax]
mov qword [rdx], rsi
mov qword [rdx + 8], rsi
add rdx, 0x10
sub rbx, 1
jne 0x1400360a0
mov qword [0x1400a8c78], rdx
lea rcx, [0x140052400]
call fcn.1400505f0
nop
lea rcx, [0x1400a8c88]
call fcn.140050644
jmp 0x140035d95
lea rcx, [0x1400a8c90]
call fcn.1400506b0
cmp dword [0x1400a8c90], 0xffffffff
jne 0x140035da5
call fcn.14000bcb0
mov rdi, qword [0x1400a8c78]
mov rbx, qword [0x1400a8c70]
cmp rbx, rdi
je 0x140035fc2
cvttss2si ebp, dword [rax + 0xc]
cvttss2si r14d, dword [rax + 8]
add rbx, 4
nop word [rax + rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv ebp
movd xmm6, edx
cvtdq2ps xmm6, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
cdq
idiv r14d
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [rbx - 4], xmm0
movss dword [rbx], xmm6
movss dword [rbx + 4], xmm0
movss dword [rbx + 8], xmm6
lea rbx, [rbx + 0x10]
lea rax, [rbx - 4]
cmp rax, rdi
jne 0x140036120
jmp 0x140035fc2