Function at 0x140033240
Capabilities:
Enumerate process modules
Link many functions at runtime
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
lea rbp, [rsp - 0x1470]
mov eax, 0x1570
call fcn.140036e10
sub rsp, rax
mov rax, qword [0x140045010]
xor rax, rsp
mov qword [rbp + 0x13b0], rax
lea rax, [0x1400331e0]
mov qword [rbp + 0x128], rcx
xor esi, esi
mov qword [rbp + 0x118], rax
xorps xmm0, xmm0
mov qword [rbp + 0x120], rsi
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x130], xmm0
lea rdi, str.fortnite_balls
movdqa xmmword [rbp + 0x140], xmm1
lea rcx, [rbp + 0x110]
mov qword [rbp + 0x150], rdi
mov qword [rbp + 0x158], rsi
mov ebx, r9d
mov dword [rbp + 0x110], 0x50
mov dword [rbp + 0x114], 3
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov rax, qword [rbp + 0x128]
mov r9d, 0x80000000
mov rdx, qword [rbp + 0x150]
mov r8, rdi
mov qword [rsp + 0x58], rsi
mov ecx, 0x80028
mov qword [rsp + 0x50], rax
mov eax, dword [0x14004584c]
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], eax
mov eax, dword [0x140045848]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea r9d, [rsi + 2]
mov r8b, 0xff
mov rcx, rax
mov qword [rbp - 0x28], rax
xor edx, edx
mov r12, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
lea rdx, [rbp + 0x200]
mov rcx, r12
movups xmmword [rbp + 0x200], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
lea rdx, [rbp + 0x218]
mov rcx, r12
movups xmmword [rbp + 0x218], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [rbp + 0x1e8]
mov qword [rbp + 0x1e8], rsi
mov rcx, r12
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x1e8]
lea rdx, [rbp + 0x1f0]
mov dword [rbp + 0x1f0], eax
mov rcx, r12
mov eax, dword [rbp + 0x1ec]
mov dword [rbp + 0x1f4], eax
mov eax, dword [rbp + 0x208]
mov dword [rbp + 0x1f8], eax
mov eax, dword [rbp + 0x20c]
mov dword [rbp + 0x1fc], eax
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xd4], rsi
mov qword [rbp + 0xdc], 1
mov qword [rbp + 0xe8], 2
mov qword [rbp + 0x100], 2
mov dword [rbp + 0xc8], 0x3c
mov dword [rbp + 0xcc], 1
mov dword [rbp + 0xd0], 0x1c
mov dword [rbp + 0xe4], 0x20
mov qword [rbp + 0xf0], r12
mov qword [rbp + 0xf8], 1
mov dword [rbp + 0x290], 0xb000
mov dword [rbp + 0x294], 0xa000
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], rsi
lea rax, [rbp + 0x90]
mov qword [rbp + 0xa8], rsi
mov qword [rsp + 0x58], rax
lea edx, [rsi + 1]
lea rax, [rbp + 0x1e0]
mov dword [rbp + 0x1e0], esi
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea rax, [rbp + 0xa0]
xor r8d, r8d
mov qword [rsp + 0x48], rax
xor ecx, ecx
lea rax, [rbp + 0x98]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x290]
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov rcx, qword [rbp + 0x98]
lea r9, [rbp + 0xb0]
mov qword [rbp + 0xb0], rsi
lea r8, [0x14003ea48]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rdx, qword [rbp + 0xb0]
test rdx, rdx
je 0x140034bc9
mov rcx, qword [rbp + 0xa0]
lea r9, [rbp + 0xa8]
mov qword [rsp + 0x15a8], r13
xor r8d, r8d
mov qword [rsp + 0x1568], r14
mov qword [rsp + 0x1560], r15
mov rax, qword [rcx]
movaps xmmword [rsp + 0x1550], xmm6
movaps xmmword [rsp + 0x1540], xmm7
movaps xmmword [rsp + 0x1530], xmm8
movaps xmmword [rsp + 0x1520], xmm9
movaps xmmword [rsp + 0x1510], xmm10
movaps xmmword [rsp + 0x1500], xmm11
movaps xmmword [rsp + 0x14f0], xmm12
movaps xmmword [rsp + 0x14e0], xmm13
movaps xmmword [rsp + 0x14d0], xmm14
movaps xmmword [rsp + 0x14c0], xmm15
call qword [rax + 0x48]
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov edx, ebx
mov rcx, r12
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r12
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140045818]
mov ecx, 0x6280
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r8, qword [0x140045818]
mov r9, rax
test r8, r8
je 0x140033634
movsx rax, word [r8 + 0x60f0]
lea rdx, [r8 + 0x60f4]
mov r10d, dword [r8 + 0x3f58]
lea rdx, [rdx + rax*8]
cmp dword [rdx], r10d
je 0x140033629
lea ecx, [rax + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x60f4]
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r10d
mov dword [rdx + 4], esi
inc word [rdx + 4]
inc dword [r8 + 0x60e8]
test r9, r9
je 0x140033645
xor edx, edx
mov rcx, r9
call fcn.140001480
jmp 0x140033648
mov rax, rsi
mov qword [0x140045818], rax
call fcn.140005460
mov rax, qword [0x140045818]
test rbx, rbx
cmovne rax, rbx
xor ecx, ecx
mov qword [0x140045818], rax
call fcn.140023870
mov rcx, r12
call fcn.14002dce0
mov rdx, qword [rbp + 0x90]
mov rcx, qword [rbp + 0xa0]
call fcn.14002db20
mov ecx, 0x38
call fcn.14003638c
mov r14, rax
mov qword [rbp - 0x30], rax
lea rsi, [r14 + 0x10]
xorps xmm0, xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rax, vtable.std::_Ref_count_obj2_class_pProcess_.0
mov qword [r14], rax
xor eax, eax
movups xmmword [rsi], xmm0
movups xmmword [rsi + 0x10], xmm0
mov qword [rsi + 0x20], rax
call fcn.140035460
mov dword [rsi], eax
test eax, eax
je 0x140033794
mov ecx, eax
call fcn.1400350f0
mov qword [rsi + 8], rax
lea rcx, [rax + 1]
test rcx, 0xfffffffffffffffe
jne 0x1400337aa
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140035a60
lea rdx, [0x140035c10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call fcn.140035460
mov dword [rsi], eax
test eax, eax
je 0x14003378e
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
lea r9, [rbp + 0x214]
mov dword [rsp + 0x20], 2
mov rcx, rax
mov qword [rsi + 8], rax
mov r8d, 0x7f8
lea rdx, [rbp + 0x2b0]
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rbp + 0x2b0]
lea r8, [rbp + 0x260]
mov rcx, qword [rsi + 8]
mov r9d, 0x18
mov qword [rsi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rbp + 0x268]
mov edx, dword [rsi]
mov qword [rsi + 0x20], rax
call fcn.140035690
mov qword [rsi + 0x10], rax
mov al, 1
jmp 0x140033790
xor al, al
test al, al
jne 0x140033810
lea rcx, [rbp - 8]
mov qword [rbp - 8], 1
call fcn.140034ca0
jmp 0x1400336c8
lea r9, [rbp + 0x210]
mov dword [rsp + 0x20], 2
mov r8d, 0x7f8
lea rdx, [rbp + 0xab0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
mov rdx, qword [rbp + 0xab0]
lea r8, [rbp + 0x278]
mov rcx, qword [rsi + 8]
mov r9d, 0x18
mov qword [rsi + 0x18], rdx
call qword [sym.imp.KERNEL32.dll_K32GetModuleInformation]
mov eax, dword [rbp + 0x280]
mov edx, dword [rsi]
mov qword [rsi + 0x20], rax
call fcn.140035690
mov qword [rsi + 0x10], rax
nop word [rax + rax]
lea r8, str.client.dll
mov rcx, rsi
lea rdx, [rbp + 0x70]
call fcn.140035750
lea r8, str.engine2.dll
mov rcx, rsi
lea rdx, [rbp + 0x80]
movups xmm6, xmmword [rax]
call fcn.140035750
movq rdi, xmm6
mov qword [rbp - 0x50], rdi
mov rbx, qword [rax]
test rdi, rdi
je 0x140033852
test rbx, rbx
jne 0x140033863
lea rcx, [rbp - 0x10]
mov qword [rbp - 0x10], 1
call fcn.140034ca0
test rdi, rdi
je 0x140033810
test rbx, rbx
je 0x140033810
movss xmm15, dword [0x14003ebc4]
mov r13b, 1
mov dword [rbp - 0x74], r13d
mov r15, 0xffffffffffffffff
xorps xmm7, xmm7
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp + 0x230]
xor edx, edx
mov r14d, 0x8000
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14003390e
xor edi, edi
lea rcx, [rbp + 0x230]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x230]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x238], 0x12
lea rcx, [rbp + 0x230]
movzx r13d, r13b
cmove r13d, edi
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
movzx ebx, r13b
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400338b0
mov rdi, qword [rbp - 0x50]
mov dword [rbp - 0x74], r13d
test bl, bl
je 0x14003488b
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test r14w, ax
jne 0x14003488b
mov rax, qword [0x140045818]
test rax, rax
je 0x140033938
mov rcx, qword [rax + 0x98]
jmp 0x14003393a
xor ecx, ecx
cmp qword [rcx + 0x48], 0
jne 0x140033946
call fcn.14002d4c0
call fcn.14002e6e0
call fcn.140007a20
lea rdx, [rdi + 0x1902988]
mov rcx, rsi
call fcn.140034bf0
xorps xmm0, xmm0
mov qword [rbp - 0x20], rax
lea rcx, str.ntdll.dll
mov r13, rax
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rdx, [rdi + 0x1912320]
mov r9d, 0x40
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x170]
call rbx
lea rdx, [rdi + 0x18b3018]
mov rcx, rsi
call fcn.140034bf0
lea rdx, [r13 + 0x3cb]
movss dword [rsp + 0x68], xmm7
mov rcx, rsi
movss dword [rsp + 0x6c], xmm7
movss dword [rsp + 0x70], xmm7
mov r14, rax
mov qword [rsp + 0x78], rax
movaps xmm6, xmm7
movaps xmm8, xmm7
movaps xmm9, xmm7
call fcn.140034e30
mov dword [rbp - 0x70], eax
mov r12d, 1
mov edx, r12d
mov rcx, rsi
and edx, 0x7fff
shl edx, 3
sar edx, 9
add rdx, 0x10
add rdx, r14
call fcn.140034bf0
test rax, rax
je 0x1400347ee
mov ecx, r12d
and ecx, 0x1ff
imul edx, ecx, 0x78
mov rcx, rsi
add rdx, rax
call fcn.140034bf0
mov rdi, rax
test rax, rax
je 0x1400347ee
lea rdx, [rax + 0x3cb]
mov rcx, rsi
call fcn.140034bf0
lea rdx, [rdi + 0x7e4]
mov rcx, rsi
mov r15, rax
call fcn.140034bf0
mov rcx, rax
mov rbx, rax
shr rcx, 9
and ecx, 0x3f
lea rcx, [rcx + 2]
lea rdx, [r14 + rcx*8]
mov rcx, rsi
call fcn.140034bf0
test rax, rax
je 0x1400347e7
and ebx, 0x1ff
mov rcx, rsi
imul rdx, rbx, 0x78
add rdx, rax
call fcn.140034bf0
mov r14, rax
test rax, rax
je 0x1400347e2
lea rcx, str.ntdll.dll
mov qword [rbp + 0x160], 0
mov dword [rbp + 0x168], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rdx, [r14 + 0x127c]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
lea r8, [rbp + 0x160]
call rbx
cmp rdi, r13
jne 0x140033b90
movss xmm6, dword [rbp + 0x160]
movss xmm8, dword [rbp + 0x164]
movss xmm9, dword [rbp + 0x168]
movss dword [rsp + 0x68], xmm6
movss dword [rsp + 0x6c], xmm8
movss dword [rsp + 0x70], xmm9
jmp 0x1400347e2
movaps xmm0, xmm8
movaps xmm2, xmm6
subss xmm2, dword [rbp + 0x160]
subss xmm0, dword [rbp + 0x164]
movaps xmm1, xmm9
subss xmm1, dword [rbp + 0x168]
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
addss xmm2, xmm1
ucomiss xmm0, xmm2
ja 0x140033bd8
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140033be0
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x14003ec94]
ja 0x1400347e2
cmp dword [rbp - 0x70], r15d
je 0x1400347e2
lea rdx, [r14 + 0x334]
mov rcx, rsi
call fcn.140034e30
lea rdx, [r14 + 0x1570]
mov dword [rbp - 0x64], eax
mov rcx, rsi
mov ebx, eax
call fcn.140034e30
lea ecx, [rbx - 1]
mov dword [rbp - 0x60], eax
cmp ecx, 0x63
ja 0x1400347e2
lea rdx, [rdi + 0x748]
mov rcx, rsi
call fcn.140034bf0
lea rcx, str.ntdll.dll
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rax, [rbp + 0x228]
mov r9d, 0x100
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x12b0]
mov rdx, rdi
call rbx
lea rdx, [r14 + 0x318]
mov rcx, rsi
call fcn.140034bf0
mov rcx, rsi
lea rdx, [rax + 0x1e0]
call fcn.140034bf0
movss xmm8, dword [rbp + 0x168]
lea rcx, str.ntdll.dll
addss xmm8, dword [0x14003ec60]
movss xmm9, dword [rbp + 0x160]
mov rdi, rax
movss xmm10, dword [rbp + 0x164]
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x1b0], 0
mov dword [rbp + 0x1b8], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea rdx, [rdi + 0xc0]
xor edi, edi
lea r8, [rbp + 0x1b0]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 0xc]
call rbx
movss xmm5, dword [rbp + 0x1a0]
movss xmm2, dword [rbp + 0x164]
movaps xmm6, xmm5
movss xmm3, dword [rbp + 0x160]
movaps xmm0, xmm2
movss xmm11, dword [rbp + 0x1a4]
movss xmm4, dword [rbp + 0x168]
movss xmm12, dword [rbp + 0x1a8]
movaps xmm1, xmm4
movss xmm13, dword [rbp + 0x1ac]
mov ecx, dword [0x14004584c]
mulss xmm6, xmm3
mulss xmm0, xmm11
mulss xmm1, xmm12
addss xmm6, xmm0
movss xmm0, dword [0x14003eb84]
addss xmm6, xmm1
addss xmm6, xmm13
comiss xmm0, xmm6
jbe 0x140033dd6
movss xmm3, dword [0x14003ebf8]
movss dword [rsp + 0x64], xmm7
jmp 0x140033e42
mulss xmm2, dword [rbp + 0x184]
xorps xmm14, xmm14
mov eax, ecx
mulss xmm3, dword [rbp + 0x180]
cdq
sub eax, edx
mulss xmm4, dword [rbp + 0x188]
sar eax, 1
addss xmm2, xmm3
movss xmm3, dword [0x14003ebf8]
movaps xmm0, xmm3
divss xmm0, xmm6
addss xmm2, xmm4
cvtsi2ss xmm14, eax
addss xmm2, dword [rbp + 0x18c]
mulss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm15
mulss xmm2, xmm0
addss xmm2, xmm15
subss xmm14, xmm2
movss dword [rsp + 0x64], xmm14
mov r8d, dword [0x140045848]
movaps xmm0, xmm11
movss xmm6, dword [rbp + 0x17c]
movaps xmm2, xmm5
movss xmm14, dword [rbp + 0x178]
movaps xmm1, xmm12
movss xmm15, dword [rbp + 0x174]
mulss xmm2, xmm9
mulss xmm0, xmm10
mulss xmm1, xmm8
addss xmm2, xmm0
movss xmm0, dword [0x14003eb84]
addss xmm2, xmm1
addss xmm2, xmm13
comiss xmm0, xmm2
jbe 0x140033eb7
movss xmm8, dword [rbp + 0x18c]
movaps xmm10, xmm7
movss xmm9, dword [rbp + 0x188]
movss dword [rbp - 0x78], xmm7
jmp 0x140033f97
movss xmm4, dword [0x14003ebc4]
movaps xmm0, xmm15
divss xmm3, xmm2
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
movss xmm2, dword [rbp + 0x170]
movaps xmm1, xmm14
mulss xmm2, xmm9
mulss xmm0, xmm10
mulss xmm1, xmm8
addss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, r8d
addss xmm2, xmm1
addss xmm2, xmm6
mulss xmm2, xmm3
mulss xmm2, xmm4
mulss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
addss xmm2, xmm4
addss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
movss dword [rbp - 0x78], xmm2
movss xmm2, dword [rbp + 0x180]
mulss xmm2, xmm9
movss xmm9, dword [rbp + 0x188]
movss dword [rsp + 0x60], xmm0
movaps xmm1, xmm9
movss xmm0, dword [rbp + 0x184]
mulss xmm0, xmm10
movss xmm10, dword [rsp + 0x60]
mulss xmm1, xmm8
movss xmm8, dword [rbp + 0x18c]
addss xmm2, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
addss xmm2, xmm1
addss xmm2, xmm8
mulss xmm2, xmm3
mulss xmm2, xmm4
mulss xmm2, xmm0
addss xmm2, xmm4
subss xmm10, xmm2
movss xmm3, dword [rbp + 0x1b4]
movss xmm4, dword [rbp + 0x1b0]
movaps xmm1, xmm3
mulss xmm1, xmm11
mulss xmm5, xmm4
movss dword [rsp + 0x60], xmm10
addss xmm1, xmm5
movss xmm5, dword [rbp + 0x1b8]
movaps xmm0, xmm5
mulss xmm0, xmm12
addss xmm1, xmm0
movss xmm0, dword [0x14003eb84]
addss xmm1, xmm13
comiss xmm0, xmm1
jbe 0x140033ffa
movss xmm15, dword [0x14003ebc4]
movaps xmm6, xmm7
movss dword [rbp - 0x80], xmm7
jmp 0x1400340be
movss xmm2, dword [0x14003ebf8]
movaps xmm0, xmm3
mulss xmm3, dword [rbp + 0x184]
movaps xmm11, xmm4
mov eax, r8d
mulss xmm11, dword [rbp + 0x170]
cdq
sub eax, edx
mulss xmm4, dword [rbp + 0x180]
sar eax, 1
mulss xmm0, xmm15
movss xmm15, dword [0x14003ebc4]
addss xmm3, xmm4
divss xmm2, xmm1
addss xmm11, xmm0
movaps xmm1, xmm5
xorps xmm0, xmm0
mulss xmm1, xmm14
cvtsi2ss xmm0, r8d
addss xmm11, xmm1
mulss xmm5, xmm9
addss xmm3, xmm5
addss xmm11, xmm6
xorps xmm6, xmm6
addss xmm3, xmm8
mulss xmm11, xmm2
mulss xmm11, xmm15
mulss xmm3, xmm2
mulss xmm11, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mulss xmm3, xmm15
addss xmm11, xmm15
cvtsi2ss xmm6, eax
addss xmm11, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
movss dword [rbp - 0x80], xmm11
mulss xmm3, xmm0
addss xmm3, xmm15
subss xmm6, xmm3
movss xmm0, dword [rsp + 0x64]
movaps xmm1, xmm0
movss dword [rbp - 0x7c], xmm6
subss xmm0, xmm10
subss xmm1, xmm6
movss dword [rsp + 0x64], xmm0
divss xmm0, dword [0x14003ec14]
mulss xmm1, dword [0x14003eb98]
movss dword [rbp - 0x68], xmm0
movss dword [rbp - 0x6c], xmm1
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rsi + 0x10]
jne 0x1400347ce
mov r13, qword [rbp - 0x18]
lea r15, [0x140045054]
mov dword [rbp], 0xff
mov r14d, edi
mov dword [rbp + 4], 0xff
movsd xmm11, qword [rbp]
nop word [rax + rax]
mov eax, dword [r15 - 4]
lea rcx, str.ntdll.dll
shl eax, 5
movsxd rdi, eax
add rdi, r13
mov qword [rbp + 0x1c0], 0
mov dword [rbp + 0x1c8], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea r8, [rbp + 0x1c0]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
mov rdx, rdi
call rbx
mov eax, dword [r15]
lea rcx, str.ntdll.dll
shl eax, 5
movsxd rdi, eax
add rdi, r13
mov qword [rbp + 0x1d0], 0
mov dword [rbp + 0x1d8], 0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtReadVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtWriteVirtualMemory
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rsi + 8]
lea r8, [rbp + 0x1d0]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
mov rdx, rdi
call rbx
movss xmm4, dword [rbp + 0x1c0]
movss xmm8, dword [rbp + 0x1c4]
movaps xmm5, xmm4
movss xmm3, dword [rbp + 0x1a0]
movaps xmm0, xmm8
movss xmm12, dword [rbp + 0x1a4]
movss xmm9, dword [rbp + 0x1c8]
movss xmm13, dword [rbp + 0x1a8]
movaps xmm1, xmm9
movss xmm14, dword [rbp + 0x1ac]
mov ecx, dword [0x14004584c]
mov r8d, dword [0x140045848]
mulss xmm5, xmm3
mulss xmm0, xmm12
mulss xmm1, xmm13
addss xmm5, xmm0
movss xmm0, dword [0x14003eb84]
addss xmm5, xmm1
addss xmm5, xmm14
comiss xmm0, xmm5
jbe 0x1400342b4
movaps xmm6, xmm7
movaps xmm10, xmm7
jmp 0x14003437a
movss xmm2, dword [0x14003ebf8]
movaps xmm6, xmm4
mulss xmm6, dword [rbp + 0x170]
movaps xmm0, xmm8
mov eax, r8d
mulss xmm0, dword [rbp + 0x174]
movaps xmm1, xmm9
cdq
mulss xmm4, dword [rbp + 0x180]
sub eax, edx
sar eax, 1
mulss xmm1, dword [rbp + 0x178]
addss xmm6, xmm0
mulss xmm8, dword [rbp + 0x184]
xorps xmm10, xmm10
mulss xmm9, dword [rbp + 0x188]
xorps xmm0, xmm0
addss xmm6, xmm1
addss xmm4, xmm8
cvtsi2ss xmm0, r8d
addss xmm6, dword [rbp + 0x17c]
addss xmm4, xmm9
divss xmm2, xmm5
addss xmm4, dword [rbp + 0x18c]
mulss xmm6, xmm2
mulss xmm6, xmm15
mulss xmm4, xmm2
mulss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mulss xmm4, xmm15
addss xmm6, xmm15
cvtsi2ss xmm10, eax
addss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm4, xmm0
addss xmm4, xmm15
subss xmm10, xmm4
movss xmm8, dword [rbp + 0x1d4]
movss xmm5, dword [rbp + 0x1d0]
movaps xmm0, xmm8
movss xmm9, dword [rbp + 0x1d8]
mulss xmm0, xmm12
movaps xmm1, xmm9
movss xmm12, dword [0x14003ebf8]
mulss xmm3, xmm5
mulss xmm1, xmm13
addss xmm3, xmm0
movss xmm0, dword [0x14003eb84]
addss xmm3, xmm1
addss xmm3, xmm14
comiss xmm0, xmm3
jbe 0x1400343d8
movaps xmm4, xmm7
movaps xmm1, xmm7
jmp 0x140034497
movaps xmm4, xmm5
movaps xmm0, xmm8
mulss xmm4, dword [rbp + 0x170]
movaps xmm1, xmm9
mov eax, r8d
mulss xmm0, dword [rbp + 0x174]
movaps xmm2, xmm12
cdq
mulss xmm5, dword [rbp + 0x180]
sub eax, edx
sar eax, 1
mulss xmm1, dword [rbp + 0x178]
addss xmm4, xmm0
mulss xmm8, dword [rbp + 0x184]
xorps xmm0, xmm0
mulss xmm9, dword [rbp + 0x188]
addss xmm4, xmm1
xorps xmm1, xmm1
addss xmm5, xmm8
cvtsi2ss xmm0, r8d
addss xmm4, dword [rbp + 0x17c]
addss xmm5, xmm9
divss xmm2, xmm3
addss xmm5, dword [rbp + 0x18c]
mulss xmm4, xmm2
mulss xmm4, xmm15
mulss xmm5, xmm2
mulss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mulss xmm5, xmm15
addss xmm4, xmm15
cvtsi2ss xmm1, eax
addss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm5, xmm0
addss xmm5, xmm15
subss xmm1, xmm5
lea rax, [rbp + 0x10]
mov dword [rsp + 0x28], 1
cvttss2si r9d, xmm1
mov dword [rbp + 0x18], 0xff
mov qword [rsp + 0x20], rax
cvttss2si r8d, xmm4
cvttss2si edx, xmm10
cvttss2si ecx, xmm6
movsd qword [rbp + 0x10], xmm11
call fcn.1400330f0
inc r14d
add r15, 8
cmp r14d, 0x10
jb 0x140034130
mov rax, qword [0x140045818]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
call fcn.1400070c0
cvttss2si ecx, dword [rbp - 0x80]
lea rdx, [rbp - 0x40]
mov r9d, 0xffffffff
movss xmm2, dword [rbp - 0x6c]
subss xmm2, dword [0x14003ec1c]
movss dword [rsp + 0x28], xmm12
movd xmm0, ecx
cvttss2si ecx, dword [rbp - 0x7c]
cvtdq2ps xmm0, xmm0
movd xmm1, ecx
mov rcx, rax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x40], xmm0
movss dword [rbp - 0x3c], xmm1
call fcn.140027370
mov rax, qword [0x140045818]
lea r8, str.Background
movss xmm10, dword [rbp - 0x68]
xor edx, edx
movss xmm6, dword [rbp - 0x78]
movaps xmm0, xmm10
movss xmm11, dword [rsp + 0x60]
movaps xmm9, xmm6
mov rcx, qword [rax + 0x4b10]
mulss xmm0, xmm15
cvttss2si ebx, xmm11
mov rcx, qword [rcx]
subss xmm9, xmm0
cvttss2si edi, xmm9
call fcn.1400070c0
lea r8, [rbp - 0x38]
mov r9d, 0xff0000ff
lea rdx, [rbp - 0x48]
movss xmm14, dword [rsp + 0x64]
cvttss2si ecx, xmm10
movss dword [rsp + 0x30], xmm12
add ecx, edi
movd xmm8, edi
cvtdq2ps xmm8, xmm8
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvttss2si ecx, xmm14
movss dword [rbp - 0x38], xmm0
add ecx, ebx
movss dword [rbp - 0x48], xmm8
movss dword [rsp + 0x20], xmm7
movd xmm0, ecx
mov rcx, rax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x34], xmm0
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x44], xmm0
call fcn.140026f60
mov rax, qword [0x140045818]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
call fcn.1400070c0
subss xmm6, dword [0x14003ec40]
movaps xmm1, xmm11
mov r15, 0xffffffffffffffff
subss xmm1, dword [0x14003ec48]
mov r8, rax
lea rax, [rbp + 0x12b0]
cvttss2si ecx, xmm6
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
cvttss2si ecx, xmm1
movss dword [rbp - 0x5c], xmm0
movd xmm0, ecx
mov rcx, r15
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x58], xmm0
inc rcx
cmp byte [rax + rcx], 0
jne 0x140034664
lea rdx, [rbp + 0x12b0]
add rdx, rcx
lea rax, [rbp + 0x12b0]
cmp rax, rdx
je 0x1400346d5
mov rax, qword [r8 + 0x38]
lea rcx, [rbp + 0x12b0]
movups xmm0, xmmword [r8 + 0x88]
mov byte [rsp + 0x48], 0
lea r9, [rbp - 0x5c]
movss dword [rsp + 0x40], xmm7
movss xmm2, dword [rax + 0x10]
mov qword [rsp + 0x38], rdx
mov rdx, r8
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x60]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
movups xmmword [rbp + 0x60], xmm0
mov dword [rsp + 0x20], 0xffffffff
call fcn.14002b4e0
subss xmm9, dword [0x14003ec38]
mov eax, 0x64
mov dword [rbp + 0x24], 0xff
sub eax, dword [rbp - 0x64]
xor ebx, ebx
mov dword [rbp + 0x20], ebx
movaps xmm6, xmm14
movsd xmm0, qword [rbp + 0x20]
addss xmm6, xmm11
movsd qword [rbp + 0x30], xmm0
movd xmm0, eax
lea rax, [rbp + 0x30]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], 4
mov dword [rbp + 0x38], ebx
mov qword [rsp + 0x20], rax
cvttss2si ecx, xmm9
mulss xmm0, xmm14
mov r8d, ecx
cvttss2si r9d, xmm6
divss xmm0, dword [0x14003ec64]
addss xmm0, xmm11
cvttss2si edx, xmm0
call fcn.1400330f0
addss xmm6, dword [0x14003ec28]
mov eax, 0x64
mov qword [rbp + 0x40], rbx
sub eax, dword [rbp - 0x60]
addss xmm8, xmm10
movsd xmm0, qword [rbp + 0x40]
mov ecx, edi
movsd qword [rbp + 0x50], xmm0
cvttss2si edx, xmm6
mov dword [rsp + 0x28], 4
mov dword [rbp + 0x58], 0xff
movd xmm0, eax
lea rax, [rbp + 0x50]
cvtdq2ps xmm0, xmm0
mov r9d, edx
mov qword [rsp + 0x20], rax
mulss xmm0, xmm10
divss xmm0, dword [0x14003ec64]
subss xmm8, xmm0
cvttss2si r8d, xmm8
call fcn.1400330f0
movss xmm6, dword [rsp + 0x68]
movss xmm8, dword [rsp + 0x6c]
movss xmm9, dword [rsp + 0x70]
mov r14, qword [rsp + 0x78]
mov r13, qword [rbp - 0x20]
jmp 0x1400347f0
movss xmm6, dword [rsp + 0x68]
movss xmm8, dword [rsp + 0x6c]
movss xmm9, dword [rsp + 0x70]
mov r14, qword [rsp + 0x78]
mov r15, 0xffffffffffffffff
xor ebx, ebx
inc r12d
cmp r12d, 0x20
jl 0x140033a31
call fcn.140009ab0
mov rcx, qword [rbp + 0x90]
lea r8, [rbp + 0xa8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rbp + 0x298], xmm0
mov rax, qword [rcx]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [rbp + 0x90]
lea r8, [rbp + 0x298]
mov rdx, qword [rbp + 0xa8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x140045818]
mov rcx, qword [rax + 0x4b10]
mov rax, qword [rcx]
mov rcx, rbx
add rax, 0x48
cmp byte [rax], 0
cmovne rcx, rax
call fcn.14002ca50
mov rcx, qword [rbp + 0x98]
xor r8d, r8d
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x40]
mov r13d, dword [rbp - 0x74]
mov rdi, qword [rbp - 0x50]
jmp 0x140033887
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [0x140045818]
xor esi, esi
movaps xmm15, xmmword [rsp + 0x14c0]
movaps xmm14, xmmword [rsp + 0x14d0]
movaps xmm13, xmmword [rsp + 0x14e0]
movaps xmm12, xmmword [rsp + 0x14f0]
movaps xmm11, xmmword [rsp + 0x1500]
movaps xmm10, xmmword [rsp + 0x1510]
movaps xmm9, xmmword [rsp + 0x1520]
movaps xmm8, xmmword [rsp + 0x1530]
movaps xmm7, xmmword [rsp + 0x1540]
movaps xmm6, xmmword [rsp + 0x1550]
mov r13, qword [rsp + 0x15a8]
test rbx, rbx
je 0x14003490c
mov rdi, qword [rbx + 0x98]
jmp 0x14003490f
mov rdi, rsi
call fcn.14002da00
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140034923
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi]
test rcx, rcx
je 0x140034931
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140034940
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x140045818]
mov qword [rbx + 0x88], rsi
mov qword [rbx + 0x98], rsi
test r8, r8
je 0x1400349c1
movsx rdx, word [r8 + 0x60f0]
lea rcx, [r8 + 0x60f4]
mov r9d, dword [r8 + 0x3f58]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x1400349b6
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rcx, [r8 + 0x60f4]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x140045818]
test r8, r8
je 0x1400349df
mov rdi, qword [r8 + 0x90]
jmp 0x1400349e2
mov rdi, rsi
mov rcx, qword [rdi + 0x38]
lea rbx, [r8 + 8]
test rcx, rcx
je 0x1400349fc
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x140045818]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], rsi
mov qword [rbx + 0x88], rsi
test r8, r8
je 0x140034a73
movsx rdx, word [r8 + 0x60f0]
mov r9d, dword [r8 + 0x3f58]
lea rcx, [rdx*8 + 0x60f4]
add rcx, r8
cmp dword [rcx], r9d
je 0x140034a68
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rcx, [rax*8 + 0x60f4]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], 0
inc word [rcx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140045818]
mov qword [0x140045818], rbx
call fcn.140005970
mov qword [0x140045818], rsi
test rbx, rbx
je 0x140034b20
mov rcx, rbx
call fcn.14001b560
mov r8, qword [0x140045818]
test r8, r8
je 0x140034b17
movsx r10, word [r8 + 0x60f0]
lea rdx, [r8 + 0x60f4]
mov r9d, dword [r8 + 0x3f58]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x140034b0c
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
lea rdx, [r8 + 0x60f4]
sub ecx, eax
mov word [r8 + 0x60f0], cx
movsx rax, cx
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], 0
inc word [rdx + 6]
inc dword [r8 + 0x60ec]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x140034b32
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x140034b44
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140034b56
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x140034b68
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rbp + 0x128]
mov rcx, qword [rbp + 0x150]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov r14, qword [rbp - 0x30]
mov eax, r15d
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x140034bb5
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
lock xadd dword [r14 + 0xc], r15d
cmp r15d, 1
jne 0x140034bb5
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 8]
mov r15, qword [rsp + 0x1560]
xor eax, eax
mov r14, qword [rsp + 0x1568]
jmp 0x140034bce
mov eax, 1
mov rcx, qword [rbp + 0x13b0]
xor rcx, rsp
call fcn.140035ea0
add rsp, 0x1570
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret