Function at 0x14003d0a0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x4730]
mov eax, 0x4830
call fcn.1400c8750
sub rsp, rax
movaps xmmword [rsp + 0x4820], xmm6
movaps xmmword [rsp + 0x4810], xmm7
mov rax, qword [0x140170028]
xor rax, rsp
mov qword [rbp + 0x4700], rax
xor r15d, r15d
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x80]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x80]
lea rcx, [0x1401713c0]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171b28]
call fcn.140007200
nop
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], r15b
je 0x14003d2c4
mov qword [rbp + 0x2350], r15
mov qword [rbp + 0x2360], r15
movss xmm0, dword [0x140157158]
movss dword [rbp + 0x2370], xmm0
mov rdx, qword [0x140178eb8]
add rdx, 8
lea rax, [rbp + 0x2360]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 8]
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2350]
add rdx, 0x30
mov qword [rbp + 0x2350], rdx
lea rax, [rbp + 0x2360]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 8]
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2350]
add rdx, 0x10
mov qword [rbp + 0x2350], rdx
lea rax, [rbp + 0x2360]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 4]
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2350]
add rdx, 0x20
mov qword [rbp + 0x2350], rdx
lea rax, [rbp + 0x2360]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 8]
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2350]
add rdx, 0x70
mov qword [rbp + 0x2350], rdx
lea rax, [rbp + 0x2360]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 4]
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rax, [rbp + 0x2360]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 8]
lea r8, [rbp + 0x2350]
mov rdx, qword [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2350]
add rdx, 0x2c
mov qword [rbp + 0x2350], rdx
lea rax, [rbp + 0x2360]
mov qword [rsp + 0x20], rax
lea r9d, [r15 + 4]
lea r8, [rbp + 0x2370]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140170f10]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x1401720cc]
call fcn.140010660
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, dword [0x140172170]
jp 0x14003d326
jne 0x14003d326
mov edi, 4
jmp 0x14003d403
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140172098]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x140171e8c]
call fcn.140010660
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
movss dword [0x140172170], xmm0
mov edi, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003d3c9
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d3c9
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
movss xmm0, dword [0x140172170]
movss dword [rbp + 0x2370], xmm0
mov rdx, qword [0x140178ed8]
add rdx, 0xc
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2370]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140170ea0]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x140172104]
call fcn.1400037d0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003d4f4
cmp byte [0x14017c523], 0
jne 0x14003d4f4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003d4ab
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d4ab
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
movss xmm0, dword [0x140157140]
movss dword [rbp + 0x2370], xmm0
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2370]
mov rdx, qword [0x140178ed8]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c523], 1
lea rcx, str.Debug_On
jmp 0x14003d5e0
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171878]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x1401719a8]
call fcn.1400037d0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
jne 0x14003d5e5
cmp byte [0x14017c523], 0
je 0x14003d5e5
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003d59c
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d59c
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
movss xmm0, dword [0x140156ee0]
movss dword [rbp + 0x2370], xmm0
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2370]
mov rdx, qword [0x140178ed8]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c523], 0
lea rcx, str.Debug_off
call fcn.140003040
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171280]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x1401715e0]
call fcn.140003930
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003d6d3
cmp byte [0x14017c41f], 0
jne 0x14003d6d3
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003d68d
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d68d
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov edx, dword [0x140178e1c]
add rdx, qword [0x140178f30]
mov byte [rbp + 0x2348], 0
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c41f], 1
lea rcx, str.Debug_On
jmp 0x14003d7bc
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171958]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x140170f88]
call fcn.140003930
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
jne 0x14003d7c1
cmp byte [0x14017c41f], 0
je 0x14003d7c1
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003d77b
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d77b
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov edx, dword [0x140178e1c]
add rdx, qword [0x140178f30]
mov byte [rbp + 0x2348], 0x20
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c41f], 0
lea rcx, str.Debug_off
call fcn.140003040
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171cf8]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x1401718f8]
call fcn.1400039e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003d8a9
cmp byte [0x14017c420], 0
jne 0x14003d8a9
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003d869
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d869
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x189
mov byte [rbp + 0x2348], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c420], 1
jmp 0x14003da29
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x1401712c8]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x1401716a8]
call fcn.1400039e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
jne 0x14003da29
cmp byte [0x14017c420], 0
je 0x14003da29
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov eax, dword [rdi + r14]
cmp dword [0x140178c50], eax
jle 0x14003d952
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d952
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x189
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, r15d
movzx esi, byte [rbp + 0x2348]
nop dword [rax]
movzx edx, sil
movzx ecx, bl
shr dl, cl
and dl, 1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___bool____ptr64]
inc ebx
cmp ebx, 8
jl 0x14003d990
mov eax, dword [rdi + r14]
cmp dword [0x140178c50], eax
jle 0x14003d9ee
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003d9ee
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x189
mov byte [rbp + 0x2340], 0
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c420], 0
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x1401714a0]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x140171a08]
call fcn.1400039e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
jne 0x14003dbb2
cmp byte [0x14017c0e8], 1
jne 0x14003dbb2
mov byte [0x14017c0e8], 0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003dad8
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003dad8
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x2e
mov byte [rbp + 0x2340], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x2380], 1
mov dword [rbp + 0x4384], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4388], rax
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0x2384]
call main
lea rdx, [rbp - 0x80]
lea rcx, [0x140171c10]
call fcn.140003a90
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x2380]
call fcn.140037510
lea rcx, [rbp - 0x80]
call fcn.140006940
mov rax, qword [0x140175788]
cmp rax, qword [0x140175790]
je 0x14003dba3
mov r8d, 0x2010
lea rdx, [rbp + 0x2380]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140175788], 0x2010
jmp 0x14003dbb2
lea r8, [rbp + 0x2380]
mov rdx, rax
call fcn.140045a40
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171210]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x140171d18]
call fcn.1400039e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
xorps xmm7, xmm7
cmp byte [rax + 4], 0
je 0x14003e34c
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003dc50
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003dc50
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0a0]
add rdx, 0x3c0
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2360]
mov qword [0x14017c0d8], rax
cmp qword [0x14017c0b0], 0
jne 0x14003dd7b
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003dcd6
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003dcd6
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2350]
mov rdx, qword [0x140178f38]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2350]
mov qword [0x14017c0b0], rax
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003dd47
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003dd47
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rdx, qword [0x14017c0b0]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2360]
mov qword [0x14017c0a0], rax
call fcn.140045910
mov rcx, qword [rax + 0xd0]
movss xmm0, dword [rcx]
movss dword [0x140174af8], xmm0
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003ddbb
call fcn.140045910
mov rcx, qword [rax + 0xc8]
movss xmm0, dword [rcx]
movss dword [0x140174af8], xmm0
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003ddf8
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003ddf8
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x2e
mov byte [rbp + 0x2340], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c0e8], 1
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14003e0b8
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003de83
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003de83
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003deed
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003deed
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm3, dword [rbp + 0x2360]
ucomiss xmm3, xmm7
jp 0x14003dfee
jne 0x14003dfee
movss xmm0, dword [rbp + 0x2364]
ucomiss xmm0, xmm7
jp 0x14003dfee
jne 0x14003dfee
movss xmm0, dword [rbp + 0x2368]
ucomiss xmm0, xmm7
jp 0x14003dfee
jne 0x14003dfee
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003df9c
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003df9c
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x70]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm3, dword [rsp + 0x70]
movss dword [rbp + 0x2360], xmm3
movss xmm0, dword [rsp + 0x74]
movss dword [rbp + 0x2364], xmm0
movss xmm1, dword [rsp + 0x78]
movss dword [rbp + 0x2368], xmm1
movss xmm2, dword [0x140174af8]
mulss xmm3, xmm2
addss xmm3, dword [rbp + 0x2350]
movss dword [rsp + 0x60], xmm3
movss xmm0, dword [rbp + 0x2364]
mulss xmm0, xmm2
addss xmm0, dword [rbp + 0x2354]
movss dword [rsp + 0x64], xmm0
movss xmm1, dword [rbp + 0x2368]
mulss xmm1, xmm2
addss xmm1, dword [rbp + 0x2358]
movss dword [rsp + 0x68], xmm1
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e079
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e079
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x90
movsd xmm0, qword [rsp + 0x60]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14003e34c
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e10b
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e10b
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e175
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e175
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x2360]
ucomiss xmm2, xmm7
jp 0x14003e276
jne 0x14003e276
movss xmm0, dword [rbp + 0x2364]
ucomiss xmm0, xmm7
jp 0x14003e276
jne 0x14003e276
movss xmm0, dword [rbp + 0x2368]
ucomiss xmm0, xmm7
jp 0x14003e276
jne 0x14003e276
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e224
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e224
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x70]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rsp + 0x70]
movss dword [rbp + 0x2360], xmm2
movss xmm0, dword [rsp + 0x74]
movss dword [rbp + 0x2364], xmm0
movss xmm1, dword [rsp + 0x78]
movss dword [rbp + 0x2368], xmm1
movss xmm3, dword [0x140174af8]
mulss xmm2, xmm3
movss xmm0, dword [rbp + 0x2350]
subss xmm0, xmm2
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [rbp + 0x2364]
mulss xmm1, xmm3
movss xmm0, dword [rbp + 0x2354]
subss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
movss xmm2, dword [rbp + 0x2368]
mulss xmm2, xmm3
movss xmm0, dword [rbp + 0x2358]
subss xmm0, xmm2
movss dword [rsp + 0x68], xmm0
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e30d
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e30d
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x90
movsd xmm0, qword [rsp + 0x60]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171e70]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x140171500]
call fcn.140003720
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
jne 0x14003e5ba
cmp byte [0x14017c071], 1
jne 0x14003e5ba
mov byte [0x14017c071], 0
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e3fb
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e3fb
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x2e
mov byte [rbp + 0x2340], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e469
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e469
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov edx, dword [0x140178e3c]
add rdx, qword [0x140178f30]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2360]
mov qword [0x14017c090], rax
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e4e0
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e4e0
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
add rdx, 0x2e
mov byte [rbp + 0x2340], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x2380], 1
mov dword [rbp + 0x4384], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4388], rax
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0x2384]
call main
lea rdx, [rbp - 0x80]
lea rcx, [0x140171168]
call fcn.140003a90
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x2380]
call fcn.140037510
lea rcx, [rbp - 0x80]
call fcn.140006940
mov rax, qword [0x140175788]
cmp rax, qword [0x140175790]
je 0x14003e5ab
mov r8d, 0x2010
lea rdx, [rbp + 0x2380]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140175788], 0x2010
jmp 0x14003e5ba
lea r8, [rbp + 0x2380]
mov rdx, rax
call fcn.140045a40
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140170f30]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x1401712d8]
call fcn.140003720
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003f564
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e655
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e655
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0a0]
add rdx, 0x3c0
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2360]
mov qword [0x14017c0d8], rax
cmp qword [0x14017c0b0], 0
jne 0x14003e780
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e6db
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e6db
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2350]
mov rdx, qword [0x140178f38]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2350]
mov qword [0x14017c0b0], rax
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e74c
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e74c
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rdx, qword [0x14017c0b0]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2360]
mov qword [0x14017c0a0], rax
call fcn.140045910
mov rcx, qword [rax + 0xd0]
movss xmm0, dword [rcx]
movss dword [0x140174af8], xmm0
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003e7c0
call fcn.140045910
mov rcx, qword [rax + 0xc8]
movss xmm0, dword [rcx]
movss dword [0x140174af8], xmm0
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14003ee93
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e813
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e813
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x144b
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx esi, byte [rbp + 0x2340]
mov eax, dword [rdi + rbx]
cmp sil, 0x60
jne 0x14003e9c2
cmp dword [0x140178c50], eax
jle 0x14003e88e
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e88e
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov edx, dword [0x140178e3c]
add rdx, qword [0x140178f30]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2360]
mov qword [0x14017c090], rax
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e905
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e905
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x30]
movsd qword [rbp + 0x2360], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rbp + 0x2368], eax
mov byte [0x14017c071], 1
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003e98c
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e98c
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
add rdx, 0x2e
mov byte [rbp + 0x2340], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14003eab4
cmp dword [0x140178c50], eax
jle 0x14003e9fc
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003e9fc
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x2e
mov byte [rbp + 0x2348], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c071], 1
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003ea71
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003ea71
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x30]
movsd qword [rbp + 0x2360], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rbp + 0x2368], eax
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003eaf1
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003eaf1
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm3, dword [rbp + 0x2350]
ucomiss xmm3, xmm7
jp 0x14003ebf2
jne 0x14003ebf2
movss xmm0, dword [rbp + 0x2354]
ucomiss xmm0, xmm7
jp 0x14003ebf2
jne 0x14003ebf2
movss xmm0, dword [rbp + 0x2358]
ucomiss xmm0, xmm7
jp 0x14003ebf2
jne 0x14003ebf2
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003eba0
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003eba0
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x60]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm3, dword [rsp + 0x60]
movss dword [rbp + 0x2350], xmm3
movss xmm0, dword [rsp + 0x64]
movss dword [rbp + 0x2354], xmm0
movss xmm1, dword [rsp + 0x68]
movss dword [rbp + 0x2358], xmm1
movss xmm2, dword [0x140174af8]
mulss xmm3, xmm2
addss xmm3, dword [rbp + 0x2360]
movss dword [rsp + 0x70], xmm3
movss xmm0, dword [rbp + 0x2354]
mulss xmm0, xmm2
addss xmm0, dword [rbp + 0x2364]
movss dword [rsp + 0x74], xmm0
movss xmm1, dword [rbp + 0x2358]
mulss xmm1, xmm2
addss xmm1, dword [rbp + 0x2368]
movss dword [rsp + 0x78], xmm1
mov eax, dword [rdi + rbx]
cmp sil, 0x60
jne 0x14003ed73
cmp dword [0x140178c50], eax
jle 0x14003ec87
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003ec87
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
add rdx, 0x30
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003ecee
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003ecee
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
movsd xmm6, qword [rsp + 0x70]
movsd qword [rsp + 0x30], xmm6
mov esi, dword [rsp + 0x78]
mov dword [rsp + 0x38], esi
mov rdx, qword [rbp + 0x2360]
add rdx, 0x50
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003ed67
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003ed67
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
jmp 0x14003ee65
cmp dword [0x140178c50], eax
jle 0x14003edad
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003edad
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
lea rcx, [rbp + 0x2380]
call fcn.1400c07e0
mov rdx, qword [rax + 0x30]
add rdx, 0x50
movsd xmm6, qword [rsp + 0x70]
movsd qword [rsp + 0x30], xmm6
mov esi, dword [rsp + 0x78]
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
mov r8d, 0x15e0
lea rcx, [rbp + 0x2380]
call main
xor edx, edx
mov r8d, 0xd98
lea rcx, [rbp + 0x3960]
call main
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003ee5e
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003ee5e
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
mov qword [rsp + 0x20], r15
movsd qword [rsp + 0x60], xmm6
mov dword [rsp + 0x68], esi
mov r9d, 0xc
lea r8, [rsp + 0x60]
add rdx, 0x90
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14003f564
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003eee6
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003eee6
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x144b
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx esi, byte [rbp + 0x2340]
mov eax, dword [rdi + rbx]
cmp sil, 0x60
jne 0x14003f091
cmp dword [0x140178c50], eax
jle 0x14003ef61
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003ef61
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov edx, dword [0x140178e3c]
add rdx, qword [0x140178f30]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2360]
mov qword [0x14017c090], rax
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003efd8
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003efd8
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x78], eax
mov byte [0x14017c071], 1
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f05b
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f05b
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
add rdx, 0x2e
mov byte [rbp + 0x2340], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14003f17f
cmp dword [0x140178c50], eax
jle 0x14003f0cb
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f0cb
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x2e
mov byte [rbp + 0x2348], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c071], 1
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f140
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f140
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x78], eax
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f1bc
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f1bc
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x2350]
ucomiss xmm2, xmm7
jp 0x14003f2bd
jne 0x14003f2bd
movss xmm0, dword [rbp + 0x2354]
ucomiss xmm0, xmm7
jp 0x14003f2bd
jne 0x14003f2bd
movss xmm0, dword [rbp + 0x2358]
ucomiss xmm0, xmm7
jp 0x14003f2bd
jne 0x14003f2bd
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f26b
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f26b
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c0d8]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rsp + 0x30]
movss dword [rbp + 0x2350], xmm2
movss xmm0, dword [rsp + 0x34]
movss dword [rbp + 0x2354], xmm0
movss xmm1, dword [rsp + 0x38]
movss dword [rbp + 0x2358], xmm1
movss xmm3, dword [0x140174af8]
mulss xmm2, xmm3
movss xmm0, dword [rsp + 0x70]
subss xmm0, xmm2
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [rbp + 0x2354]
mulss xmm1, xmm3
movss xmm0, dword [rsp + 0x74]
subss xmm0, xmm1
movss dword [rsp + 0x64], xmm0
movss xmm2, dword [rbp + 0x2358]
mulss xmm2, xmm3
movss xmm0, dword [rsp + 0x78]
subss xmm0, xmm2
movss dword [rsp + 0x68], xmm0
mov eax, dword [rdi + rbx]
cmp sil, 0x60
jne 0x14003f444
cmp dword [0x140178c50], eax
jle 0x14003f358
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f358
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
add rdx, 0x30
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2360]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f3bf
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f3bf
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
movsd xmm6, qword [rsp + 0x60]
movsd qword [rsp + 0x30], xmm6
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x38], esi
mov rdx, qword [rbp + 0x2360]
add rdx, 0x50
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f438
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f438
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x14017c090]
jmp 0x14003f536
cmp dword [0x140178c50], eax
jle 0x14003f47e
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f47e
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
lea rcx, [rbp + 0x2380]
call fcn.1400c07e0
mov rdx, qword [rax + 0x30]
add rdx, 0x50
movsd xmm6, qword [rsp + 0x60]
movsd qword [rsp + 0x30], xmm6
mov esi, dword [rsp + 0x68]
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
mov r8d, 0x15e0
lea rcx, [rbp + 0x2380]
call main
xor edx, edx
mov r8d, 0xd98
lea rcx, [rbp + 0x3960]
call main
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f52f
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f52f
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
mov qword [rsp + 0x20], r15
movsd qword [rsp + 0x60], xmm6
mov dword [rsp + 0x68], esi
mov r9d, 0xc
lea r8, [rsp + 0x60]
add rdx, 0x90
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171b40]
call fcn.140003a90
nop
lea rdx, [rbp - 0x80]
lea rcx, [0x140170e20]
call fcn.140003a90
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.140015970
movss xmm6, dword [0x1401570b4]
cmp byte [rax + 4], 0
je 0x14003f7bf
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f607
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f607
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x280
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2370]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp + 0x2370]
comiss xmm1, xmm7
jbe 0x14003f7bf
movss xmm0, dword [0x1401570a4]
comiss xmm0, xmm1
jb 0x14003f7bf
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f693
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f693
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x280
mov dword [rbp + 0x2350], 0x43480000
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x2360], rax
lea rdx, [rsp + 0x40]
lea rcx, [0x140171ef8]
call fcn.140003a90
nop
lea rdx, [rbp - 0x60]
lea rcx, [0x140172160]
call fcn.140003a90
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 0x60]
mov rcx, rbx
call fcn.140015970
mov byte [rax + 4], 0
mov dword [rbp + 0x2380], 1
mov dword [rbp + 0x4384], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4388], rax
xor edx, edx
mov r8d, 0x2000
lea rcx, [rbp + 0x2384]
call main
lea rdx, [rbp - 0x80]
lea rcx, [0x1401711e0]
call fcn.14003c970
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x2380]
call fcn.140037510
lea rcx, [rbp - 0x80]
call fcn.140006940
mov rax, qword [0x140175788]
cmp rax, qword [0x140175790]
je 0x14003f7b0
mov r8d, 0x2010
lea rdx, [rbp + 0x2380]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140175788], 0x2010
jmp 0x14003f7bf
lea r8, [rbp + 0x2380]
mov rdx, rax
call fcn.140045a40
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140172358]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x1401710f0]
call fcn.140003930
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003f914
cmp byte [0x14017c41c], 0
jne 0x14003f914
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f866
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f866
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x2c
mov byte [rbp + 0x2340], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f8d4
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f8d4
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0xac
mov byte [rbp + 0x2348], 0
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c41c], 1
jmp 0x14003fa64
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171418]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171018]
call fcn.140003930
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
jne 0x14003fa64
cmp byte [0x14017c41c], 0
je 0x14003fa64
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003f9bb
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003f9bb
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x2c
mov byte [rbp + 0x2340], 0x37
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003fa29
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003fa29
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0xac
mov byte [rbp + 0x2348], 0xff
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2348]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c41c], 0
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171ea8]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171c88]
call fcn.140003930
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003fb38
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171f68]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171570]
call fcn.140003930
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movzx ecx, byte [rax + 4]
neg cl
sbb al, al
and al, 0x40
mov byte [rbp + 0x2340], al
mov edx, dword [0x140178e08]
add rdx, qword [0x14017c068]
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171f18]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171668]
call fcn.140003b40
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003fc6d
mov rdx, qword [0x140178f30]
lea rcx, [rbp - 0x40]
call fcn.1400c07e0
mov r8d, 0x15e0
mov rdx, rax
lea rcx, [rbp + 0x2380]
call sub.VCRUNTIME140.dll_memcpy
xor edx, edx
mov r8d, 0x15e0
lea rcx, [rbp - 0x40]
call main
xor edx, edx
mov r8d, 0xd98
lea rcx, [rbp + 0x15a0]
call main
movss xmm0, dword [rbp + 0x2600]
comiss xmm0, xmm7
jbe 0x14003fc6d
comiss xmm6, xmm0
jbe 0x14003fc6d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003fc36
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003fc36
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov rdx, qword [0x140178f30]
add rdx, 0x280
mov dword [rbp + 0x2350], 0x43480000
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171508]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171028]
call fcn.140003b40
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
cmp byte [rax + 4], 0
je 0x14003fdb7
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003fd07
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003fd07
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov edx, dword [0x140178e04]
add rdx, qword [0x140178f30]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [0x140157088]
comiss xmm0, dword [rbp + 0x2350]
jbe 0x14003fdb7
mov eax, dword [rdi + rbx]
cmp dword [0x140178c50], eax
jle 0x14003fd81
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003fd81
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
mov edx, dword [0x140178e04]
add rdx, qword [0x140178f30]
mov dword [rbp + 0x2370], 0x42c80000
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2370]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x1401717d8]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140172388]
call fcn.140003880
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
movss xmm6, dword [0x140156f90]
ucomiss xmm0, xmm6
jp 0x14003fe1f
jne 0x14003fe1f
cmp byte [0x14017c522], 0
je 0x14003ff49
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003fe68
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003fe68
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171488]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140170d58]
call fcn.140003880
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
movss dword [rbp + 0x2350], xmm0
mov edx, dword [0x140178e34]
add rdx, qword [0x14017c068]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c522], 1
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171840]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140172058]
call fcn.140003880
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x14003ff49
jne 0x14003ff49
mov byte [0x14017c522], 0
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x1401719e8]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171868]
call fcn.140007200
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x14003ffa9
jne 0x14003ffa9
cmp byte [0x14017c521], 0
je 0x1400400d3
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14003fff2
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14003fff2
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x1401711c0]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140171e80]
call fcn.140007200
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
movss dword [rbp + 0x2350], xmm0
mov edx, dword [0x140178e24]
add rdx, qword [0x14017c068]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c521], 1
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140170f20]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x1401716b8]
call fcn.140007200
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x1400400d3
jne 0x1400400d3
mov byte [0x14017c521], 0
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171968]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140170dc8]
call fcn.140003930
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x140040133
jne 0x140040133
cmp byte [0x14017c41e], 0
je 0x14004025d
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140178c50], eax
jle 0x14004017c
lea rcx, [0x140178c50]
call fcn.1400c7688
cmp dword [0x140178c50], 0xffffffff
jne 0x14004017c
mov ecx, 1
call fcn.1400c7798
mov qword [0x140178b10], rax
lea rcx, [0x140178c50]
call fcn.1400c7628
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140172150]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x1401720e0]
call fcn.140003930
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
movss dword [rbp + 0x2350], xmm0
mov edx, dword [0x140178e10]
add rdx, qword [0x14017c068]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2350]
mov rcx, qword [0x140178f40]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x14017c41e], 1
call fcn.140006680
mov rbx, rax
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2360], rax
lea rdx, [rbp - 0x60]
lea rcx, [0x140171f28]
call fcn.140003a90
nop
lea rdx, [rsp + 0x40]
lea rcx, [0x140172118]
call fcn.140003930
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140015970
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x14004025d
jne 0x14004025d
mov byte [0x14017c41e], 0
mov rcx, qword [rbp + 0x4700]
xor rcx, rsp
call fcn.1400c74e0
lea r11, [rsp + 0x4830]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret