Function at 0x140001d90
Capabilities:
Enumerate processes
Get graphical window text
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x7f8]
sub rsp, 0x8d0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14005a040]
xor rax, rsp
mov qword [rbp + 0x720], rax
mov r15, rcx
mov qword [rbp + 0x20], rcx
xor r13d, r13d
cmp byte [rcx + 0x98], r13b
je 0x140001e25
mov byte [rcx + 0x99], 1
jmp 0x140004ffb
mov rax, qword [0x14005a7a8]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14000c460
mov qword [r15 + 0x78], rax
mov edi, r13d
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140001eee
xor edx, edx
mov r8d, 0x234
lea rcx, [rbp + 0x4e4]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x4e0], 0x238
lea rdx, [rbp + 0x4e0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32FirstW]
cmp eax, 1
jne 0x140001ee5
lea rdx, [rbp + 0x50c]
lea rcx, str.cs2.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140001edf
lea rdx, [rbp + 0x50c]
lea rcx, str.cs2.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140001edf
lea rdx, [rbp + 0x4e0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32NextW]
cmp eax, 1
je 0x140001eb0
jmp 0x140001ee5
mov edi, dword [rbp + 0x4e8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str..lilyweeDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
mov ecx, edi
call fcn.140048dc0
mov ecx, edi
mov qword [rbp + 0x348], rcx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x348]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x348]
mov edx, 0x221a58
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm7, dword [0x140051cbc]
test eax, eax
je 0x1400049e5
mov ecx, edi
call fcn.140048dc0
mov rsi, rax
test rax, rax
je 0x1400049e5
test edi, edi
jne 0x140001fb3
lea rdx, str.Failed_to_find_cs2._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140005b70
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
jmp 0x140004ffb
cmp r14, 0xffffffffffffffff
jne 0x140001fc2
lea rdx, str.Failed_to_create_our_driver_handle._n
jmp 0x140001f95
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x68], xmm0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x6c], xmm0
mov qword [rbp + 0x388], r13
lea rax, [rsi + 0x17c17f0]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x388]
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], 8
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x158]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x158]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x370], r13
lea rbx, [rsi + 0x1954568]
mov qword [rbp + 0x160], rbx
lea rax, [rbp + 0x370]
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], 8
xor edi, edi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x158]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x158]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a8], xmm0
movups xmmword [rbp + 0x1b8], xmm0
movups xmmword [rbp + 0x1c8], xmm0
movups xmmword [rbp + 0x1d8], xmm0
lea rax, [rsi + 0x19b64f0]
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x1a8]
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], 0x40
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x158]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x158]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movups xmm0, xmmword [rbp + 0x1a8]
movaps xmmword [rbp + 0x1f0], xmm0
movups xmm1, xmmword [rbp + 0x1b8]
movaps xmmword [rbp + 0x200], xmm1
movups xmm0, xmmword [rbp + 0x1c8]
movaps xmmword [rbp + 0x210], xmm0
movups xmm1, xmmword [rbp + 0x1d8]
movaps xmmword [rbp + 0x220], xmm1
mov dword [rbp + 0x380], edi
mov rsi, qword [rbp + 0x388]
mov qword [rbp - 0x78], rsi
lea rax, [rsi + 0x3c3]
mov qword [rbp + 0x160], rax
lea rax, [rbp + 0x380]
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], 4
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x158]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x158]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x388], rdi
mov qword [rbp + 0x160], rbx
lea rax, [rbp + 0x388]
mov qword [rbp + 0x168], rax
mov qword [rbp + 0x170], 8
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x158]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x158]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x4a8], rdi
mov r13, qword [rbp + 0x388]
mov qword [rbp - 0x80], r13
lea rax, [r13 + 0x10]
mov qword [rbp + 0x328], rax
lea rax, [rbp + 0x4a8]
mov qword [rbp + 0x330], rax
mov qword [rbp + 0x338], 8
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x320]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x320]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r12d, 1
mov dword [rbp - 0x64], r12d
movss xmm0, dword [rbp + 0x22c]
movss dword [rbp - 0x70], xmm0
movss xmm15, dword [rbp + 0x228]
movss dword [rsp + 0x78], xmm15
movss xmm13, dword [rbp + 0x224]
movss dword [rsp + 0x70], xmm13
movss xmm0, dword [rbp + 0x220]
movss dword [rsp + 0x6c], xmm0
movss xmm0, dword [rbp + 0x20c]
movss dword [rsp + 0x68], xmm0
movss xmm0, dword [rbp + 0x208]
movss dword [rsp + 0x64], xmm0
movss xmm0, dword [rbp + 0x204]
movss dword [rsp + 0x5c], xmm0
movss xmm0, dword [rbp + 0x200]
movss dword [rsp + 0x60], xmm0
movss xmm0, dword [rbp + 0x1fc]
movss dword [rsp + 0x74], xmm0
movss xmm0, dword [rbp + 0x1f8]
movss dword [rsp + 0x58], xmm0
movss xmm0, dword [rbp + 0x1f4]
movss dword [rsp + 0x50], xmm0
movss xmm0, dword [rbp + 0x1f0]
movss dword [rsp + 0x54], xmm0
movss xmm6, dword [rbp + 0x1e4]
movss dword [rsp + 0x40], xmm6
movss xmm11, dword [rbp + 0x1e0]
movss dword [rsp + 0x44], xmm11
movss xmm0, dword [rbp + 0x1dc]
movss dword [rbp - 0x2c], xmm0
movss xmm0, dword [rbp + 0x1d8]
movss dword [rbp - 0x30], xmm0
movss xmm0, dword [rbp + 0x1c4]
movss dword [rbp - 0x3c], xmm0
movss xmm0, dword [rbp + 0x1c0]
movss dword [rbp - 0x40], xmm0
movss xmm10, dword [rbp + 0x1bc]
movss dword [rsp + 0x48], xmm10
movss xmm8, dword [rbp + 0x1b8]
movss dword [rsp + 0x4c], xmm8
movss xmm0, dword [rbp + 0x1b4]
movss dword [rbp - 0x1c], xmm0
movss xmm0, dword [rbp + 0x1b0]
movss dword [rbp - 0x20], xmm0
movss xmm0, dword [rbp + 0x1ac]
movss dword [rbp - 0x24], xmm0
movss xmm0, dword [rbp + 0x1a8]
movss dword [rbp - 0x28], xmm0
mov eax, dword [rbp + 0x380]
mov dword [rbp - 0x34], eax
mov rdx, qword [rbp + 0x4a8]
mov qword [rbp - 0x58], rdx
movss xmm9, dword [0x140051d98]
movss xmm14, dword [0x140051cfc]
movss xmm12, dword [0x140051c80]
test rdx, rdx
je 0x1400049e5
mov qword [rbp + 0x4b0], 0
mov eax, r12d
and eax, 0x1ff
imul ecx, eax, 0x78
add rcx, rdx
mov qword [rbp + 0x238], rcx
lea rax, [rbp + 0x4b0]
mov qword [rbp + 0x240], rax
mov qword [rbp + 0x248], 8
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x230]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x230]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdi, qword [rbp + 0x4b0]
test rdi, rdi
je 0x14000499e
mov qword [rbp + 0x4b8], 0
lea rax, [rdi + 0x7ec]
mov qword [rbp + 0x260], rax
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], 8
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x258]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x258]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rbx, qword [rbp + 0x4b8]
test rbx, rbx
je 0x14000499e
xor ecx, ecx
mov qword [rbp + 0x4c8], rcx
mov rax, rbx
shr rax, 9
and eax, 0x3f
lea rax, [rax*8 + 0x10]
add rax, r13
mov qword [rbp + 0x300], rax
lea rax, [rbp + 0x4c8]
mov qword [rbp + 0x308], rax
mov qword [rbp + 0x310], 8
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x2f8]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [rbp + 0x4c8]
test rcx, rcx
je 0x14000499e
xor r13d, r13d
mov qword [rbp + 0x4c0], r13
and ebx, 0x1ff
imul rax, rbx, 0x78
add rax, rcx
mov qword [rbp + 0x2d8], rax
lea rax, [rbp + 0x4c0]
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x2e8], 8
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x2d0]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x2d0]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r13, qword [rbp + 0x4c0]
test r13, r13
je 0x14000499a
mov dword [rbp + 0x3b8], 0
lea rax, [r13 + 0x3c3]
mov qword [rbp + 0x2b0], rax
lea rax, [rbp + 0x3b8]
mov qword [rbp + 0x2b8], rax
mov qword [rbp + 0x2c0], 4
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x2a8]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x2a8]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov eax, dword [rbp - 0x34]
cmp dword [rbp + 0x3b8], eax
je 0x14000499a
mov dword [rbp + 0x3bc], 0
lea rax, [r13 + 0x324]
mov qword [rbp + 0x288], rax
lea rax, [rbp + 0x3bc]
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x298], 4
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x280]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x280]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ebx, dword [rbp + 0x3bc]
lea eax, [rbx - 1]
cmp eax, 0x63
ja 0x14000499a
cmp r13, rsi
je 0x14000499a
mov qword [rbp + 0x488], 0
mov dword [rbp + 0x490], 0
lea rax, [r13 + 0x1274]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x488]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm1, dword [rbp + 0x490]
movaps xmm3, xmm1
addss xmm3, xmm9
movss xmm9, dword [rbp + 0x488]
mulss xmm8, xmm9
movaps xmm0, xmm10
movss xmm10, dword [rbp + 0x48c]
mulss xmm0, xmm10
addss xmm8, xmm0
movss xmm2, dword [rbp - 0x40]
mulss xmm2, xmm1
addss xmm2, xmm8
addss xmm2, dword [rbp - 0x3c]
movss xmm5, dword [rbp - 0x30]
mulss xmm5, xmm9
movss xmm0, dword [rbp - 0x2c]
mulss xmm0, xmm10
addss xmm5, xmm0
movaps xmm4, xmm11
mulss xmm4, xmm1
addss xmm4, xmm5
addss xmm4, xmm6
mov ecx, dword [0x14005a7bc]
comiss xmm12, xmm4
jbe 0x140002866
xorps xmm11, xmm11
jmp 0x140002893
movaps xmm0, xmm14
divss xmm0, xmm4
mulss xmm2, xmm0
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movaps xmm11, xmm1
mulss xmm11, xmm7
mulss xmm2, xmm7
mulss xmm2, xmm1
addss xmm2, xmm7
subss xmm11, xmm2
movss xmm6, dword [rbp - 0x28]
mulss xmm6, xmm9
movss xmm0, dword [rbp - 0x24]
mulss xmm0, xmm10
addss xmm6, xmm0
movaps xmm1, xmm3
mulss xmm1, dword [rbp - 0x20]
addss xmm6, xmm1
addss xmm6, dword [rbp - 0x1c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x44]
addss xmm0, xmm5
addss xmm0, dword [rsp + 0x40]
comiss xmm12, xmm0
jbe 0x1400028de
xorps xmm6, xmm6
xorps xmm9, xmm9
jmp 0x14000294e
movaps xmm2, xmm14
divss xmm2, xmm0
mulss xmm6, xmm2
mulss xmm6, xmm7
mov eax, dword [0x14005a7b8]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm6, xmm0
addss xmm6, xmm7
xorps xmm0, xmm0
cvtsi2sd xmm0, eax
mulsd xmm0, qword [0x140051d18]
cvtpd2ps xmm1, xmm0
addss xmm6, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
movaps xmm9, xmm0
mulss xmm9, xmm7
mulss xmm3, dword [rbp - 0x40]
addss xmm3, xmm8
addss xmm3, dword [rbp - 0x3c]
mulss xmm3, xmm2
mulss xmm3, xmm7
mulss xmm3, xmm0
addss xmm3, xmm7
subss xmm9, xmm3
movaps xmm10, xmm11
subss xmm10, xmm9
movaps xmm8, xmm10
divss xmm8, dword [0x140051d24]
movss dword [rbp - 0x5c], xmm8
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0x4e0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rdx, str.Counter_Strike_2
lea rcx, [rbp + 0x4e0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140004976
cmp byte [0x14005a790], 0
je 0x1400032fd
xor esi, esi
mov qword [rbp + 0x378], rsi
lea rax, [r13 + 0x12f0]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x378]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x390], rsi
mov rax, qword [rbp + 0x378]
add rax, 0x360
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x390]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x378], rsi
mov rax, qword [rbp + 0x390]
add rax, 0xc28
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x378]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0x398], xmm0
mov qword [rbp + 0x3a8], rsi
mov qword [rbp + 0x3b0], rsi
mov r8d, 0x18
lea rdx, str.Nombre_de_arma_no_valido
lea rcx, [rbp + 0x398]
call fcn.140005d50
nop
mov rax, qword [rbp + 0x378]
test rax, rax
jne 0x140002b48
mov r8d, 0x18
lea rcx, [rbp + 0x398]
call fcn.140005790
jmp 0x140002d00
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x180]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0x20
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], rsi
lea rax, [rbp + 0x180]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002bd0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x130]
call fcn.140005d50
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0xf
jbe 0x140002c2e
inc rdx
mov rcx, qword [rbp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049c2
call fcn.140048f04
movups xmm0, xmmword [rbp + 0x130]
movups xmmword [rbp + 0x398], xmm0
movups xmm1, xmmword [rbp + 0x140]
movups xmmword [rbp + 0x3a8], xmm1
movq r8, xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], rsi
cmp r8, 7
jb 0x140005063
lea rax, [r8 - 7]
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
cmova rdx, qword [rbp + 0x398]
add rdx, 7
lea rcx, [rbp + 0x130]
call fcn.140005d50
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0xf
jbe 0x140002ce4
inc rdx
mov rcx, qword [rbp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cdf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049c2
call fcn.140048f04
movups xmm0, xmmword [rbp + 0x130]
movups xmmword [rbp + 0x398], xmm0
movups xmm1, xmmword [rbp + 0x140]
movups xmmword [rbp + 0x3a8], xmm1
mov qword [rbp + 0x378], rsi
lea rax, [rdi + 0x750]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x378]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xa0], xmm0
mov rax, qword [rbp + 0x378]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x30]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0x80
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movups xmm0, xmmword [rbp + 0x30]
movaps xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rbp + 0x40]
movaps xmmword [rbp + 0xc0], xmm1
movups xmm0, xmmword [rbp + 0x50]
movaps xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rbp + 0x60]
movaps xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rbp + 0x70]
movaps xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rbp + 0x80]
movaps xmmword [rbp + 0x100], xmm1
movups xmm0, xmmword [rbp + 0x90]
movaps xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rbp + 0xa0]
movaps xmmword [rbp + 0x120], xmm1
mov r9d, ebx
lea r8, str.HP:__d
mov edx, 0x20
lea rcx, [rbp + 0x158]
call fcn.140001150
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
mov qword [rbp + 0x140], rsi
mov qword [rbp + 0x148], rsi
lea rax, [rbp + 0xb0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140002e92
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x130]
call fcn.140005d50
nop
movaps xmm0, xmm9
subss xmm0, dword [0x140051d60]
movaps xmm8, xmm6
subss xmm8, dword [0x140051d6c]
movss dword [rbp + 4], xmm8
movss dword [rbp + 8], xmm0
lea r8, [rbp + 0x130]
lea rdx, [rbp + 4]
mov rcx, r15
call fcn.140005370
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x140002f29
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049c9
call fcn.140048f04
mov rsi, qword [rbp + 0x3a8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 3
jb 0x14000506f
lea r12, [rbp + 0x398]
cmp qword [rbp + 0x3b0], 0xf
cmova r12, qword [rbp + 0x398]
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
xor eax, eax
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], rax
lea r15, [rsi + 3]
mov ebx, 0xf
lea rdi, [rbp + 0x180]
cmp r15, rbx
jbe 0x140003009
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140002faf
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140002fdb
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
je 0x140002fff
cmp rcx, 0x1000
jb 0x140002ffa
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140005069
mov rcx, rax
call fcn.140048ec0
test rax, rax
je 0x1400049d7
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003002
call fcn.140048ec0
mov rdi, rax
mov qword [rbp + 0x180], rdi
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], rbx
mov r8, rsi
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x14004b82c]
mov word [rdi + rsi], ax
movzx eax, byte [0x14004b82e]
mov byte [rdi + rsi + 2], al
mov byte [rdi + r15], 0
lea rax, [rbp + 0x158]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140003050
mov rcx, qword [rbp + 0x190]
mov rdx, qword [rbp + 0x198]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1400030b2
lea rax, [rcx + rdi]
mov qword [rbp + 0x190], rax
lea rbx, [rbp + 0x180]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x180]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x158]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
lea rax, [rbp + 0x180]
jmp 0x1400030cd
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x158]
mov rdx, rdi
lea rcx, [rbp + 0x180]
call fcn.140005e50
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
xor ebx, ebx
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x148], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
movss dword [rbp + 0xc], xmm8
movss dword [rbp + 0x10], xmm11
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0xc]
mov r15, qword [rbp + 0x20]
mov rcx, r15
call fcn.140005370
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x14000316f
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000316a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049d0
call fcn.140048f04
mov qword [rbp + 0x140], rbx
mov qword [rbp + 0x148], 0xf
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x1400031c9
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049d7
call fcn.140048f04
mov qword [rbp + 0x378], rbx
lea rax, [r15 + 0x10]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x378]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x4d0], rbx
mov rax, qword [rbp + 0x378]
add rax, 0x20
mov qword [rbp + 0x188], rax
lea rax, [rbp + 0x4d0]
mov qword [rbp + 0x190], rax
mov qword [rbp + 0x198], 8
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x180]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x180]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
nop
mov rdx, qword [rbp + 0x3b0]
cmp rdx, 0xf
jbe 0x1400032da
inc rdx
mov rcx, qword [rbp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400049de
call fcn.140048f04
mov qword [rbp + 0x3a8], rbx
mov qword [rbp + 0x3b0], 0xf
mov byte [rbp + 0x398], 0
movss xmm8, dword [rbp - 0x5c]
mov r12d, dword [rbp - 0x64]
cmp byte [0x14005a780], 0
je 0x1400033f2
cvttss2si esi, xmm9
movaps xmm0, xmm8
mulss xmm0, xmm7
subss xmm6, xmm0
cvttss2si edi, xmm6
movss xmm0, dword [0x14005a0b8]
movss xmm2, dword [0x140051db0]
mulss xmm0, xmm2
cvttss2si ecx, xmm0
movss xmm1, dword [0x14005a0bc]
mulss xmm1, xmm2
cvttss2si eax, xmm1
movss xmm0, dword [0x14005a0c0]
mulss xmm0, xmm2
cvttss2si ebx, xmm0
or ebx, 0xffffff00
shl ebx, 8
or ebx, eax
shl ebx, 8
or ebx, ecx
mov rax, qword [0x14005a7a8]
mov rax, qword [rax + 0x4878]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.14000c460
cvttss2si ecx, xmm8
add ecx, edi
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x14], xmm0
cvttss2si ecx, xmm10
add ecx, esi
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x18], xmm0
movd xmm1, edi
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x370], xmm1
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x374], xmm0
movss dword [rsp + 0x30], xmm14
xorps xmm11, xmm11
movss dword [rsp + 0x20], xmm11
mov r9d, ebx
lea r8, [rbp + 0x14]
lea rdx, [rbp + 0x370]
mov rcx, rax
call fcn.14002b4f0
xor edi, edi
cmp byte [0x14005a781], dil
je 0x140004817
mov qword [rbp + 0x378], rdi
lea rax, [r13 + 0x308]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x378]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x390], rdi
mov rax, qword [rbp + 0x378]
add rax, 0x1f0
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x390]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x478], rdi
mov dword [rbp + 0x480], edi
mov rbx, qword [rbp + 0x390]
lea rax, [rbx + 0xc0]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x478]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x458], rdi
mov dword [rbp + 0x460], edi
lea rax, [rbx + 0xa0]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x458]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x448], rdi
mov dword [rbp + 0x450], edi
lea rax, [rbx + 0x100]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x448]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x438], rdi
mov dword [rbp + 0x440], edi
lea rax, [rbx + 0x1a0]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x438]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x428], rdi
mov dword [rbp + 0x430], edi
lea rax, [rbx + 0x120]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x428]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x3c8], rdi
mov dword [rbp + 0x3d0], edi
lea rax, [rbx + 0x1c0]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x3c8]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x468], rdi
mov dword [rbp + 0x470], edi
lea rax, [rbx + 0x160]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x468]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x498], rdi
mov dword [rbp + 0x4a0], edi
lea rax, [rbx + 0x200]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x498]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x3d8], rdi
mov dword [rbp + 0x3e0], edi
mov qword [rbp + 0x138], rbx
lea rax, [rbp + 0x3d8]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x3e8], rdi
mov dword [rbp + 0x3f0], edi
lea rax, [rbx + 0x2e0]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x3e8]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x3f8], rdi
mov dword [rbp + 0x400], edi
lea rax, [rbx + 0x340]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x3f8]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x408], rdi
mov dword [rbp + 0x410], edi
lea rax, [rbx + 0x300]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x408]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rbp + 0x418], rdi
mov dword [rbp + 0x420], edi
lea rax, [rbx + 0x360]
mov qword [rbp + 0x1f8], rax
lea rax, [rbp + 0x418]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], 0xc
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x1f0]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm5, dword [rbp + 0x47c]
movaps xmm6, xmm5
mulss xmm6, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x478]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x480]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm6, xmm1
movss xmm8, dword [rsp + 0x74]
addss xmm6, xmm8
movaps xmm4, xmm5
mulss xmm4, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm4, xmm1
addss xmm4, dword [rsp + 0x68]
mulss xmm5, xmm13
mulss xmm3, dword [rsp + 0x6c]
addss xmm5, xmm3
mulss xmm2, xmm15
addss xmm5, xmm2
movss xmm9, dword [rbp - 0x70]
addss xmm5, xmm9
comiss xmm12, xmm5
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm5
movss xmm11, dword [rbp - 0x68]
movaps xmm5, xmm11
mulss xmm5, xmm7
mulss xmm6, xmm0
mulss xmm6, xmm7
mulss xmm6, xmm11
addss xmm6, xmm7
addss xmm6, xmm5
movss dword [rbp - 0x14], xmm6
movss xmm10, dword [rbp - 0x6c]
movaps xmm13, xmm10
mulss xmm13, xmm7
mulss xmm4, xmm0
mulss xmm4, xmm7
mulss xmm4, xmm10
addss xmm4, xmm7
movaps xmm0, xmm13
subss xmm0, xmm4
movss dword [rbp - 0x18], xmm0
movss xmm4, dword [rbp + 0x45c]
movaps xmm6, xmm4
mulss xmm6, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x458]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x460]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm6, xmm1
addss xmm6, xmm8
movaps xmm8, xmm4
mulss xmm8, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm8, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm8, xmm1
addss xmm8, dword [rsp + 0x68]
mulss xmm4, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm4, xmm3
mulss xmm2, xmm15
addss xmm4, xmm2
addss xmm4, xmm9
comiss xmm12, xmm4
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm4
movaps xmm15, xmm0
mulss xmm15, xmm6
mulss xmm15, xmm7
mulss xmm15, xmm11
addss xmm15, xmm7
addss xmm15, xmm5
mulss xmm0, xmm8
mulss xmm0, xmm7
mulss xmm0, xmm10
addss xmm0, xmm7
movaps xmm1, xmm13
subss xmm1, xmm0
movss dword [rbp - 0x60], xmm1
movss xmm4, dword [rbp + 0x44c]
movaps xmm6, xmm4
mulss xmm6, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x448]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x450]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm6, xmm1
addss xmm6, dword [rsp + 0x74]
movaps xmm8, xmm4
mulss xmm8, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm8, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm8, xmm1
addss xmm8, dword [rsp + 0x68]
mulss xmm4, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm4, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm4, xmm2
addss xmm4, xmm9
comiss xmm12, xmm4
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm4
movaps xmm1, xmm0
mulss xmm1, xmm6
mulss xmm1, xmm7
mulss xmm1, xmm11
addss xmm1, xmm7
addss xmm1, xmm5
movss dword [rbp - 0x10], xmm1
mulss xmm0, xmm8
mulss xmm0, xmm7
mulss xmm0, xmm10
addss xmm0, xmm7
movaps xmm1, xmm13
subss xmm1, xmm0
movss dword [rbp - 0x48], xmm1
movss xmm4, dword [rbp + 0x43c]
movaps xmm6, xmm4
mulss xmm6, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x438]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x440]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm6, xmm1
addss xmm6, dword [rsp + 0x74]
movaps xmm8, xmm4
mulss xmm8, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm8, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm8, xmm1
addss xmm8, dword [rsp + 0x68]
mulss xmm4, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm4, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm4, xmm2
addss xmm4, xmm9
comiss xmm12, xmm4
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm4
movaps xmm1, xmm0
mulss xmm1, xmm6
mulss xmm1, xmm7
mulss xmm1, xmm11
addss xmm1, xmm7
addss xmm1, xmm5
movss dword [rbp - 0x4c], xmm1
mulss xmm0, xmm8
mulss xmm0, xmm7
mulss xmm0, xmm10
addss xmm0, xmm7
movaps xmm1, xmm13
subss xmm1, xmm0
movss dword [rbp - 0x50], xmm1
movss xmm4, dword [rbp + 0x42c]
movaps xmm6, xmm4
mulss xmm6, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x428]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x430]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm6, xmm1
addss xmm6, dword [rsp + 0x74]
movaps xmm8, xmm4
mulss xmm8, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm8, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm8, xmm1
addss xmm8, dword [rsp + 0x68]
mulss xmm4, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm4, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm4, xmm2
addss xmm4, xmm9
comiss xmm12, xmm4
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm4
movaps xmm1, xmm0
mulss xmm1, xmm6
mulss xmm1, xmm7
mulss xmm1, xmm11
addss xmm1, xmm7
addss xmm1, xmm5
movss dword [rbp - 0xc], xmm1
mulss xmm0, xmm8
mulss xmm0, xmm7
mulss xmm0, xmm10
addss xmm0, xmm7
movaps xmm1, xmm13
subss xmm1, xmm0
movss dword [rbp - 0x44], xmm1
movss xmm4, dword [rbp + 0x3cc]
movaps xmm6, xmm4
mulss xmm6, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x3c8]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x3d0]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm6, xmm1
addss xmm6, dword [rsp + 0x74]
movaps xmm8, xmm4
mulss xmm8, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm8, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm8, xmm1
addss xmm8, dword [rsp + 0x68]
mulss xmm4, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm4, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm4, xmm2
addss xmm4, xmm9
comiss xmm12, xmm4
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm4
movaps xmm1, xmm0
mulss xmm1, xmm6
mulss xmm1, xmm7
mulss xmm1, xmm11
addss xmm1, xmm7
addss xmm1, xmm5
movss dword [rbp - 0x64], xmm1
mulss xmm0, xmm8
mulss xmm0, xmm7
mulss xmm0, xmm10
addss xmm0, xmm7
movaps xmm1, xmm13
subss xmm1, xmm0
movss dword [rbp - 0x5c], xmm1
movss xmm8, dword [rbp + 0x49c]
movaps xmm6, xmm8
mulss xmm6, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x498]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x4a0]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm6, xmm1
addss xmm6, dword [rsp + 0x74]
movaps xmm4, xmm8
mulss xmm4, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm4, xmm1
addss xmm4, dword [rsp + 0x68]
mulss xmm8, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm8, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm8, xmm2
addss xmm8, xmm9
comiss xmm12, xmm8
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm8
mulss xmm6, xmm0
mulss xmm6, xmm7
mulss xmm6, xmm11
addss xmm6, xmm7
addss xmm6, xmm5
mulss xmm4, xmm0
mulss xmm4, xmm7
mulss xmm4, xmm10
addss xmm4, xmm7
movaps xmm0, xmm13
subss xmm0, xmm4
movss dword [rbp - 4], xmm0
movss xmm8, dword [rbp + 0x46c]
movaps xmm9, xmm8
mulss xmm9, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x468]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm9, xmm0
movss xmm2, dword [rbp + 0x470]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm9, xmm1
addss xmm9, dword [rsp + 0x74]
movaps xmm4, xmm8
mulss xmm4, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm4, xmm1
addss xmm4, dword [rsp + 0x68]
mulss xmm8, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm8, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm8, xmm2
addss xmm8, dword [rbp - 0x70]
comiss xmm12, xmm8
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm8
mulss xmm9, xmm0
mulss xmm9, xmm7
mulss xmm9, xmm11
addss xmm9, xmm7
addss xmm9, xmm5
mulss xmm4, xmm0
mulss xmm4, xmm7
mulss xmm4, xmm10
addss xmm4, xmm7
movaps xmm0, xmm13
subss xmm0, xmm4
movss dword [rbp - 8], xmm0
movss xmm10, dword [rbp + 0x3dc]
movaps xmm8, xmm10
mulss xmm8, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x3d8]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm8, xmm0
movss xmm2, dword [rbp + 0x3e0]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm8, xmm1
addss xmm8, dword [rsp + 0x74]
movaps xmm4, xmm10
mulss xmm4, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm4, xmm1
addss xmm4, dword [rsp + 0x68]
mulss xmm10, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm10, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm10, xmm2
addss xmm10, dword [rbp - 0x70]
comiss xmm12, xmm10
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm10
mulss xmm8, xmm0
mulss xmm8, xmm7
mulss xmm8, xmm11
addss xmm8, xmm7
addss xmm8, xmm5
mulss xmm4, xmm0
mulss xmm4, xmm7
mulss xmm4, dword [rbp - 0x6c]
addss xmm4, xmm7
movaps xmm0, xmm13
subss xmm0, xmm4
movss dword [rbp], xmm0
movss xmm11, dword [rbp + 0x3ec]
movaps xmm10, xmm11
mulss xmm10, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x3e8]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm10, xmm0
movss xmm2, dword [rbp + 0x3f0]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm10, xmm1
addss xmm10, dword [rsp + 0x74]
movaps xmm4, xmm11
mulss xmm4, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm4, xmm1
addss xmm4, dword [rsp + 0x68]
mulss xmm11, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm11, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm11, xmm2
addss xmm11, dword [rbp - 0x70]
comiss xmm12, xmm11
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm11
mulss xmm10, xmm0
mulss xmm10, xmm7
mulss xmm10, dword [rbp - 0x68]
addss xmm10, xmm7
addss xmm10, xmm5
mulss xmm4, xmm0
mulss xmm4, xmm7
mulss xmm4, dword [rbp - 0x6c]
addss xmm4, xmm7
movaps xmm0, xmm13
subss xmm0, xmm4
movss dword [rbp - 0x38], xmm0
movss xmm12, dword [rbp + 0x3fc]
movaps xmm11, xmm12
mulss xmm11, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x3f8]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm11, xmm0
movss xmm2, dword [rbp + 0x400]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm11, xmm1
addss xmm11, dword [rsp + 0x74]
movaps xmm4, xmm12
mulss xmm4, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm4, xmm1
addss xmm4, dword [rsp + 0x68]
mulss xmm12, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm12, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm12, xmm2
addss xmm12, dword [rbp - 0x70]
movss xmm0, dword [0x140051c80]
comiss xmm0, xmm12
ja 0x140004972
movaps xmm0, xmm14
divss xmm0, xmm12
mulss xmm11, xmm0
mulss xmm11, xmm7
mulss xmm11, dword [rbp - 0x68]
addss xmm11, xmm7
addss xmm11, xmm5
mulss xmm4, xmm0
mulss xmm4, xmm7
mulss xmm4, dword [rbp - 0x6c]
addss xmm4, xmm7
movaps xmm0, xmm13
subss xmm0, xmm4
movss dword [rbp + 0x390], xmm0
movss xmm14, dword [rbp + 0x40c]
movaps xmm12, xmm14
mulss xmm12, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x408]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm12, xmm0
movss xmm2, dword [rbp + 0x410]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm12, xmm1
addss xmm12, dword [rsp + 0x74]
movaps xmm4, xmm14
mulss xmm4, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
addss xmm4, xmm1
addss xmm4, dword [rsp + 0x68]
mulss xmm14, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm14, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm14, xmm2
addss xmm14, dword [rbp - 0x70]
movss xmm0, dword [0x140051c80]
comiss xmm0, xmm14
ja 0x140004972
movss xmm0, dword [0x140051cfc]
divss xmm0, xmm14
mulss xmm12, xmm0
mulss xmm12, xmm7
mulss xmm12, dword [rbp - 0x68]
addss xmm12, xmm7
addss xmm12, xmm5
mulss xmm4, xmm0
mulss xmm4, xmm7
mulss xmm4, dword [rbp - 0x6c]
addss xmm4, xmm7
movaps xmm0, xmm13
subss xmm0, xmm4
movss dword [rbp + 0x378], xmm0
movss xmm4, dword [rbp + 0x41c]
movaps xmm14, xmm4
mulss xmm14, dword [rsp + 0x50]
movss xmm3, dword [rbp + 0x418]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x54]
addss xmm14, xmm0
movss xmm2, dword [rbp + 0x420]
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x58]
addss xmm14, xmm1
addss xmm14, dword [rsp + 0x74]
movaps xmm1, xmm4
mulss xmm1, dword [rsp + 0x5c]
movaps xmm0, xmm3
mulss xmm0, dword [rsp + 0x60]
addss xmm1, xmm0
movss dword [rbp + 0x380], xmm1
movaps xmm1, xmm2
mulss xmm1, dword [rsp + 0x64]
movss xmm0, dword [rbp + 0x380]
addss xmm0, xmm1
movaps xmm1, xmm0
addss xmm1, dword [rsp + 0x68]
mulss xmm4, dword [rsp + 0x70]
mulss xmm3, dword [rsp + 0x6c]
addss xmm4, xmm3
mulss xmm2, dword [rsp + 0x78]
addss xmm4, xmm2
addss xmm4, dword [rbp - 0x70]
movss xmm0, dword [0x140051c80]
comiss xmm0, xmm4
ja 0x140004972
movss xmm2, dword [0x140051cfc]
movaps xmm0, xmm2
divss xmm0, xmm4
mulss xmm14, xmm0
mulss xmm14, xmm7
mulss xmm14, dword [rbp - 0x68]
addss xmm14, xmm7
addss xmm14, xmm5
movss dword [rbp + 0x380], xmm14
mulss xmm1, xmm0
mulss xmm1, xmm7
mulss xmm1, dword [rbp - 0x6c]
addss xmm1, xmm7
subss xmm13, xmm1
movss dword [rsp + 0x30], xmm2
movss dword [rsp + 0x28], xmm2
movss xmm3, dword [rbp - 0x18]
movss xmm2, dword [rbp - 0x14]
movss xmm1, dword [rbp - 0x60]
movaps xmm0, xmm15
call fcn.140001290
movss xmm0, dword [0x140051cfc]
movss dword [rsp + 0x30], xmm0
movss xmm1, dword [0x140051d10]
movss dword [rsp + 0x28], xmm1
movss xmm3, dword [rbp - 0x48]
movss xmm14, dword [rbp - 0x10]
movaps xmm2, xmm14
movss xmm1, dword [rbp - 0x60]
movaps xmm0, xmm15
call fcn.140001290
movss xmm0, dword [0x140051cfc]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x140051d10]
movss dword [rsp + 0x28], xmm0
movss xmm3, dword [rbp - 0x50]
movss xmm2, dword [rbp - 0x4c]
movss xmm1, dword [rbp - 0x60]
movaps xmm0, xmm15
call fcn.140001290
movss xmm0, dword [0x140051cfc]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x140051d10]
movss dword [rsp + 0x28], xmm0
movss xmm3, dword [rbp - 0x50]
movss xmm2, dword [rbp - 0x4c]
movss xmm1, dword [rbp - 0x5c]
movss xmm0, dword [rbp - 0x64]
call fcn.140001290
movss xmm0, dword [0x140051cfc]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x140051d10]
movss dword [rsp + 0x28], xmm0
movss xmm3, dword [rbp - 0x48]
movaps xmm2, xmm14
movss xmm1, dword [rbp - 0x44]
movss xmm14, dword [rbp - 0xc]
movaps xmm0, xmm14
call fcn.140001290
movss xmm0, dword [0x140051cfc]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x140051d10]
movss dword [rsp + 0x28], xmm0
movss xmm3, dword [rbp - 8]
movaps xmm2, xmm9
movss xmm1, dword [rbp - 0x44]
movaps xmm0, xmm14
call fcn.140001290
movss xmm14, dword [0x140051cfc]
movss dword [rsp + 0x30], xmm14
movss xmm9, dword [0x140051d10]
movss dword [rsp + 0x28], xmm9
movss xmm3, dword [rbp - 4]
movaps xmm2, xmm6
movss xmm1, dword [rbp - 0x5c]
movss xmm0, dword [rbp - 0x64]
call fcn.140001290
movss dword [rsp + 0x30], xmm14
movss dword [rsp + 0x28], xmm9
movss xmm6, dword [rbp]
movaps xmm3, xmm6
movaps xmm2, xmm8
movss xmm1, dword [rbp - 0x60]
movaps xmm0, xmm15
call fcn.140001290
movss dword [rsp + 0x30], xmm14
movaps xmm15, xmm9
movss dword [rsp + 0x28], xmm15
movaps xmm3, xmm6
movaps xmm2, xmm8
movss xmm9, dword [rbp - 0x38]
movaps xmm1, xmm9
movaps xmm0, xmm10
call fcn.140001290
movss dword [rsp + 0x30], xmm14
movss dword [rsp + 0x28], xmm15
movaps xmm3, xmm6
movaps xmm2, xmm8
movss xmm6, dword [rbp + 0x390]
movaps xmm1, xmm6
movaps xmm0, xmm11
call fcn.140001290
movss dword [rsp + 0x30], xmm14
movss dword [rsp + 0x28], xmm15
movaps xmm3, xmm13
movss xmm2, dword [rbp + 0x380]
movaps xmm1, xmm6
movaps xmm0, xmm11
call fcn.140001290
movss dword [rsp + 0x30], xmm14
movss dword [rsp + 0x28], xmm15
movss xmm3, dword [rbp + 0x378]
movaps xmm2, xmm12
movaps xmm1, xmm9
movaps xmm0, xmm10
call fcn.140001290
cmp byte [0x14005a791], 0
je 0x140004972
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140004972
mov qword [rbp + 0x378], rdi
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x138], rax
lea rax, [rbp + 0x378]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x148], 8
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x130]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [rbp + 0x3c0], edi
mov rbx, qword [rbp + 0x378]
lea rax, [rbx + 0x13a8]
mov qword [rbp + 0x1b0], rax
lea rax, [rbp + 0x3c0]
mov qword [rbp + 0x1b8], rax
mov qword [rbp + 0x1c0], 4
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x28
lea rax, [rbp + 0x1a8]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
lea r8, [rbp + 0x1a8]
mov edx, 0x221a5c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov eax, dword [rbp + 0x3c0]
test eax, eax
je 0x140004ffb
test rbx, rbx
je 0x140004ffb
cmp eax, 0xffffffff
je 0x140004972
lea rcx, [rbp + 0x388]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, dword [rbp + 0x38c]
mov edx, dword [rbp + 0x388]
mov ecx, 2
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, dword [rbp + 0x38c]
mov edx, dword [rbp + 0x388]
mov ecx, 4
call qword [sym.imp.USER32.dll_mouse_event]
mov rsi, qword [rbp - 0x78]
movss xmm6, dword [rsp + 0x40]
movss xmm11, dword [rsp + 0x44]
movss xmm10, dword [rsp + 0x48]
movss xmm8, dword [rsp + 0x4c]
movss xmm9, dword [0x140051d98]
mov r13, qword [rbp - 0x80]
inc r12d
mov dword [rbp - 0x64], r12d
cmp r12d, 0x40
jge 0x1400049e5
movss xmm15, dword [rsp + 0x78]
movss xmm13, dword [rsp + 0x70]
mov rdx, qword [rbp - 0x58]
jmp 0x140002430
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm8, dword [0x140051e10]
movss xmm9, dword [0x140051de8]
movss xmm10, dword [0x140051cf4]
cmp byte [0x14005a792], 0
je 0x140004b31
mov rax, qword [0x14005a7a8]
cvttss2si edx, dword [rax + 0xe0]
lea rcx, [rbp + 0x130]
call fcn.140005990
nop
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 0xf
cmova rcx, qword [rbp + 0x130]
mov rax, qword [0x14005a7a8]
test rcx, rcx
jne 0x140004a51
xorps xmm1, xmm1
jmp 0x140004aa0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm9
movss xmm2, dword [rax + 0x3c00]
lea rdx, [rbp - 0x58]
mov rcx, qword [rax + 0x3bf8]
call fcn.14002f5e0
movss xmm0, dword [rbp - 0x58]
addss xmm0, xmm10
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [r15 + 0x90]
subss xmm0, xmm1
movss dword [rbp + 0x370], xmm0
mov dword [rbp + 0x374], 0
lea r8, [rbp + 0x130]
lea rdx, [rbp + 0x370]
mov rcx, r15
call fcn.140005370
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0xf
jbe 0x140004b1a
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004b15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140048f04
movdqa xmm0, xmmword [0x140051e50]
movdqu xmmword [rbp + 0x140], xmm0
mov byte [rbp + 0x130], 0
cmp dword [r15 + 0xa0], 1
je 0x140004ffb
mov rcx, qword [0x14005a7a8]
mov eax, dword [rcx + 0x4778]
or eax, 2
mov dword [rcx + 0x4778], eax
mov dword [rcx + 0x4798], 0x44160000
mov dword [rcx + 0x479c], 0x43c80000
mov dword [rcx + 0x4780], 1
movss xmm0, dword [rcx + 0x10]
movss xmm1, dword [rcx + 0x14]
movss xmm6, dword [0x140051dc0]
subss xmm0, xmm6
mulss xmm0, xmm7
subss xmm1, dword [0x140051db4]
mulss xmm1, xmm7
or eax, 1
mov dword [rcx + 0x4778], eax
movss dword [rcx + 0x4788], xmm0
movss dword [rcx + 0x478c], xmm1
mov qword [rcx + 0x4790], 0
mov dword [rcx + 0x477c], 1
xor edx, edx
mov r8d, 0x43
lea rcx, str.General
call fcn.140012240
mov rbx, qword [0x14005a7a8]
xor r13d, r13d
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
lea rdi, str.Marianito
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm9
movss xmm2, dword [rbx + 0x3c00]
lea rdx, [rbp - 0x58]
mov rcx, qword [rbx + 0x3bf8]
call fcn.14002f5e0
movss xmm0, dword [rbp - 0x58]
addss xmm0, xmm10
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ea0]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x7c]
subss xmm6, xmm1
mulss xmm6, xmm7
addss xmm0, xmm6
movss dword [rax + 0xf8], xmm0
mov byte [rax + 0x139], 1
mov rcx, rdi
call fcn.1400343f0
mov rbx, qword [0x14005a7a8]
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm8
movaps xmm3, xmm9
movss xmm2, dword [rbx + 0x3c00]
lea rdx, [rbp - 0x58]
mov rcx, qword [rbx + 0x3bf8]
call fcn.14002f5e0
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ea0]
cmp byte [rax + 0xb3], r13b
jne 0x140004cea
mov qword [rbp + 0x370], r13
movaps xmm1, xmm8
lea rcx, [rbp + 0x370]
call fcn.140017660
mov rbx, qword [0x14005a7a8]
mov rax, qword [rbx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rbx + 0x3ea0]
cmp byte [rax + 0xb3], r13b
jne 0x140004d1f
mov qword [rbp + 0x370], r13
movaps xmm1, xmm8
lea rcx, [rbp + 0x370]
call fcn.140017660
call fcn.140043e10
test al, al
je 0x140004ff6
lea rcx, str.Visuals
call fcn.140045a20
test al, al
je 0x140004e85
lea rcx, str.Visuals_Options
call fcn.1400343f0
mov rcx, qword [0x14005a7a8]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0xb3], r13b
jne 0x140004d8f
mov qword [rbp + 0x370], r13
movaps xmm1, xmm8
lea rcx, [rbp + 0x370]
call fcn.140017660
mov rcx, qword [0x14005a7a8]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0xb3], r13b
jne 0x140004dc4
mov qword [rbp + 0x370], r13
movaps xmm1, xmm8
lea rcx, [rbp + 0x370]
call fcn.140017660
lea rdx, [0x14005a780]
lea rcx, str._ESP_Box
call fcn.140036340
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.140017980
mov r8d, 0x10420
lea rdx, [0x14005a0b8]
lea rcx, str.ColorBo868
call fcn.14003f260
lea rdx, [0x14005a781]
lea rcx, str._ESP_Skeleton
call fcn.140036340
movaps xmm1, xmm8
xorps xmm0, xmm0
call fcn.140017980
mov r8d, 0x10420
lea rdx, [0x14005a0c8]
lea rcx, str.ColorBolita868
call fcn.14003f260
lea rdx, [0x14005a790]
lea rcx, str._ESP_Names_HP
call fcn.140036340
mov rdx, qword [0x14005a7a8]
mov r8, qword [rdx + 0x3ea0]
cmp byte [r8 + 0xb3], r13b
jne 0x140004e85
mov rdx, qword [rdx + 0x4b50]
test rdx, rdx
je 0x140004e85
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x140004e85
dec dword [r8 + 0xe8]
lea rcx, str.Misc
call fcn.140045a20
test al, al
je 0x140004f45
lea rcx, str.Misc_Options
call fcn.1400343f0
mov rcx, qword [0x14005a7a8]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0xb3], r13b
jne 0x140004ee1
mov qword [rbp + 0x370], r13
movaps xmm1, xmm8
lea rcx, [rbp + 0x370]
call fcn.140017660
lea rdx, [0x14005a792]
lea rcx, str.FPS_Overlay
call fcn.140036340
lea rdx, [0x14005a782]
lea rcx, str.Enable_Streamer_mode
call fcn.140036340
mov rdx, qword [0x14005a7a8]
mov r8, qword [rdx + 0x3ea0]
cmp byte [r8 + 0xb3], r13b
jne 0x140004f45
mov rdx, qword [rdx + 0x4b50]
test rdx, rdx
je 0x140004f45
movsx rax, word [rdx + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [rdx + 8]
test byte [rcx + rax + 4], 8
jne 0x140004f45
dec dword [r8 + 0xe8]
lea rcx, str.Aim_Assistance
call fcn.140045a20
test al, al
je 0x140004ff1
lea rcx, str.Aim_assistance_options
call fcn.1400343f0
lea rdx, [0x14005a791]
lea rcx, str.Enable_TriggerBot
call fcn.140036340
mov rcx, qword [0x14005a7a8]
mov rax, qword [rcx + 0x3ea0]
mov byte [rax + 0xb0], 1
mov rax, qword [rcx + 0x3ea0]
cmp byte [rax + 0xb3], r13b
jne 0x140004fbb
mov qword [rbp + 0x370], r13
movaps xmm1, xmm8
lea rcx, [rbp + 0x370]
call fcn.140017660
mov rcx, qword [0x14005a7a8]
mov rdx, qword [rcx + 0x3ea0]
cmp byte [rdx + 0xb3], r13b
jne 0x140004ff1
mov r8, qword [rcx + 0x4b50]
test r8, r8
je 0x140004ff1
movsx rax, word [r8 + 0x70]
imul rcx, rax, 0x2c
mov rax, qword [r8 + 8]
test byte [rcx + rax + 4], 8
jne 0x140004ff1
dec dword [rdx + 0xe8]
call fcn.1400442f0
call fcn.140014600
mov rcx, qword [rbp + 0x720]
xor rcx, rsp
call fcn.140048ea0
lea r11, [rsp + 0x8d0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140005900
nop
call fcn.1400011b0
int3
call fcn.140001270
int3