Function at 0x18003bcf0
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x248]
sub rsp, 0x340
mov rax, qword [0x18004e040]
xor rax, rsp
mov qword [rbp + 0x170], rax
mov rdx, qword [0x18004ea90]
lea r8, [rbp + 0x128]
mov rcx, qword [0x18004ea98]
add rdx, 0x1836bb8
mov qword [r11 + 8], rbx
mov r9d, 8
mov qword [r11 + 0x10], rsi
xor esi, esi
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x10], r12
mov qword [r11 - 0x18], r13
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
movaps xmmword [r11 - 0x58], xmm8
movaps xmmword [r11 - 0x68], xmm9
movaps xmmword [r11 - 0x78], xmm10
movaps xmmword [r11 - 0x88], xmm11
movaps xmmword [r11 - 0x98], xmm12
movaps xmmword [r11 - 0xa8], xmm13
movaps xmmword [r11 - 0xb8], xmm14
movaps xmmword [r11 - 0xc8], xmm15
mov qword [rbp + 0x128], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x18004ea90]
lea r8, [rbp + 0x58]
mov rdi, qword [rbp + 0x128]
xorps xmm0, xmm0
mov rcx, qword [0x18004ea98]
add rdx, 0x1a33e30
mov r9d, 0x40
mov qword [rbp - 0x50], rdi
movups xmmword [rbp + 0x58], xmm0
mov qword [rsp + 0x20], rsi
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm1, xmmword [rbp + 0x68]
mov ebx, esi
mov r14d, 1
movups xmm0, xmmword [rbp + 0x58]
lea rax, [rdi + 0x568]
mov qword [rbp - 0x48], rbx
movss xmm14, dword [0x180046ad4]
xorps xmm13, xmm13
movss xmm10, dword [0x180046aa0]
xorps xmm8, xmm8
movaps xmmword [rsp + 0x60], xmm1
movups xmm1, xmmword [rbp + 0x88]
movaps xmmword [rsp + 0x50], xmm0
movss xmm9, dword [rsp + 0x5c]
movss xmm15, dword [rsp + 0x58]
movaps xmmword [rbp - 0x80], xmm1
movss xmm1, dword [0x180046b90]
movss xmm6, dword [rbp - 0x74]
movss xmm7, dword [rbp - 0x78]
movss dword [rbp - 0x58], xmm1
movss dword [rbp - 0x70], xmm8
movss dword [rbp - 0x6c], xmm13
movss dword [rbp - 0x68], xmm13
mov rcx, qword [0x18004ea98]
lea r8, [rbp + 0xc8]
mov r9d, 0xc
mov qword [rbp + 0xc8], 0
mov rdx, rax
mov dword [rbp + 0xd0], 0
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x18004ea90]
lea r8, [rbp + 0x130]
mov rcx, qword [0x18004ea98]
add rdx, 0x1a3dcc0
mov r9d, 0xc
mov qword [rbp + 0x130], 0
mov dword [rbp + 0x138], 0
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea r8, [rbp + 0xf8]
mov qword [rbp + 0xf8], rsi
mov rdx, rdi
mov qword [rbp + 0x100], 0
mov ecx, r14d
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x110], 0
call fcn.18003b560
test al, al
je 0x18003cead
mov r15, qword [rbp + 0xf8]
lea r8, [rbp + 0xa8]
mov rcx, qword [0x18004ea98]
mov r9d, 8
mov qword [rbp + 0xa8], rsi
mov qword [rsp + 0x20], rsi
lea r13, [r15 + 0x328]
mov rdx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xa8]
lea r8, [rbp + 0xb0]
mov rcx, qword [0x18004ea98]
add rdx, 0x1f0
mov r9d, 8
mov qword [rbp + 0xb0], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x7c]
xor ecx, ecx
mulss xmm0, dword [rbp + 0x10c]
mov r12, qword [rbp + 0xb0]
movss xmm12, dword [rbp + 0x108]
movss xmm15, dword [rbp - 0x80]
movss xmm11, dword [rbp + 0x110]
movss xmm8, dword [rsp + 0x50]
mulss xmm7, xmm11
mulss xmm15, xmm12
mulss xmm8, xmm12
addss xmm15, xmm0
movss xmm0, dword [rsp + 0x54]
mulss xmm0, dword [rbp + 0x10c]
addss xmm7, xmm15
movss dword [rbp + 0xa8], xmm15
addss xmm8, xmm0
addss xmm7, xmm6
movaps xmm6, xmm14
movss dword [rbp - 0x60], xmm8
divss xmm6, xmm7
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [rsp + 0x58]
mov ecx, 1
mulss xmm0, xmm11
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm0, xmm8
addss xmm0, xmm9
movss xmm9, dword [rsp + 0x60]
mulss xmm9, xmm12
mulss xmm0, xmm6
mulss xmm0, xmm10
addss xmm0, xmm10
mulss xmm1, xmm0
movss xmm0, dword [rsp + 0x64]
mulss xmm0, dword [rbp + 0x10c]
cvttss2si eax, xmm1
addss xmm9, xmm0
movd xmm8, eax
cvtdq2ps xmm8, xmm8
movss dword [rbp + 0xa0], xmm9
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm12, dword [rsp + 0x68]
lea r8, str.Background
movaps xmm1, xmm12
movaps xmm0, xmm10
mulss xmm1, xmm11
xor edx, edx
movss xmm11, dword [rsp + 0x6c]
movd xmm2, eax
addss xmm1, xmm9
cvtdq2ps xmm2, xmm2
addss xmm1, xmm11
mulss xmm1, xmm6
mulss xmm1, xmm10
subss xmm0, xmm1
mulss xmm2, xmm0
cvttss2si eax, xmm2
movd xmm9, eax
mov rax, qword [0x18004ea38]
cvtdq2ps xmm9, xmm9
mov rcx, qword [rax + 0x4ad0]
mov rcx, qword [rcx]
call fcn.1800068c0
comiss xmm7, dword [0x180046a70]
mov rdi, rax
jbe 0x18003ce63
cmp byte [0x18004e360], 0
movaps xmm12, xmm13
movss dword [rbp - 0x5c], xmm13
movaps xmm11, xmm13
movss dword [rbp - 0x64], xmm13
je 0x18003c167
mov rcx, qword [0x18004ea38]
lea r8, [rbp - 0x28]
mov r9d, 0xffffffff
movss dword [rbp - 0x28], xmm8
lea rdx, [rbp - 0x20]
movss dword [rbp - 0x24], xmm9
movss dword [rsp + 0x20], xmm14
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm10
movss dword [rbp - 0x20], xmm0
movss xmm0, dword [rcx + 0x14]
mov rcx, rax
movss dword [rbp - 0x1c], xmm0
call fcn.180025770
cmp byte [0x18004e361], 0
je 0x18003c3e0
mov rcx, qword [0x18004ea98]
lea rdx, [r15 + 0xcb0]
mov r9d, 0xc
mov qword [rbp + 0x118], 0
lea r8, [rbp + 0x118]
mov dword [rbp + 0x120], 0
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x110]
movaps xmm6, xmm14
movss xmm7, dword [rbp + 0x120]
movaps xmm8, xmm0
movss xmm12, dword [rbp - 0x78]
addss xmm7, xmm0
subss xmm8, dword [0x180046b2c]
movaps xmm0, xmm12
xor ecx, ecx
addss xmm7, dword [0x180046b40]
mulss xmm0, xmm7
addss xmm0, xmm15
addss xmm0, dword [rbp - 0x74]
divss xmm6, xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xorps xmm1, xmm1
movaps xmm0, xmm7
mulss xmm0, dword [rsp + 0x58]
xorps xmm9, xmm9
mov ecx, 1
cvtsi2ss xmm1, eax
addss xmm0, dword [rbp - 0x60]
addss xmm0, dword [rsp + 0x5c]
mulss xmm0, xmm6
mulss xmm0, xmm10
addss xmm0, xmm10
mulss xmm1, xmm0
cvttss2si eax, xmm1
cvtsi2ss xmm9, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mulss xmm7, dword [rsp + 0x68]
xorps xmm1, xmm1
xor ecx, ecx
movaps xmm0, xmm10
cvtsi2ss xmm1, eax
addss xmm7, dword [rbp + 0xa0]
addss xmm7, dword [rsp + 0x6c]
mulss xmm7, xmm6
xorps xmm6, xmm6
mulss xmm7, xmm10
subss xmm0, xmm7
mulss xmm1, xmm0
cvttss2si eax, xmm1
cvtsi2ss xmm6, eax
movss dword [rbp - 0x5c], xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm7, dword [rbp - 0x74]
movaps xmm0, xmm12
movss xmm1, dword [rsp + 0x68]
movaps xmm2, xmm14
mulss xmm0, xmm8
xorps xmm3, xmm3
mulss xmm1, xmm8
xorps xmm11, xmm11
addss xmm0, xmm15
cvtsi2ss xmm3, eax
addss xmm1, dword [rbp + 0xa0]
addss xmm0, xmm7
addss xmm1, dword [rsp + 0x6c]
divss xmm2, xmm0
movaps xmm0, xmm10
mulss xmm2, xmm1
mulss xmm2, xmm10
subss xmm0, xmm2
mulss xmm3, xmm0
cvttss2si eax, xmm3
cvtsi2ss xmm11, eax
movaps xmm0, xmm11
movss dword [rbp - 0x64], xmm11
subss xmm0, xmm6
andps xmm0, xmmword [0x180046fb0]
test byte [rdi + 0x30], 1
movaps xmm12, xmm9
divss xmm0, dword [0x180046ae8]
mov dword [rsp + 0x20], esi
mov rcx, rdi
movaps xmm2, xmm6
movaps xmm3, xmm10
mulss xmm0, xmm10
addss xmm2, xmm10
subss xmm12, xmm0
addss xmm0, xmm9
movaps xmm1, xmm12
addss xmm1, xmm10
je 0x18003c377
subss xmm0, xmm10
movss dword [rbp - 0x10], xmm1
movss dword [rbp - 0xc], xmm2
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x10]
movss dword [rbp - 0x18], xmm0
movaps xmm0, xmm11
subss xmm0, xmm10
movss dword [rbp - 0x14], xmm0
jmp 0x18003c3a7
subss xmm0, dword [0x180046a9c]
movss dword [rbp], xmm1
lea r8, [rbp - 8]
movss dword [rbp + 4], xmm2
lea rdx, [rbp]
movss dword [rbp - 8], xmm0
movaps xmm0, xmm11
subss xmm0, dword [0x180046a9c]
movss dword [rbp - 4], xmm0
call fcn.1800253b0
movss xmm0, dword [0x180046af8]
mov r9d, 0xffffffff
mov r8d, dword [rdi + 0x78]
mov rcx, rdi
mov rdx, qword [rdi + 0x80]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
call fcn.180023590
mov dword [rdi + 0x78], esi
jmp 0x18003c3e5
movss xmm7, dword [rbp - 0x74]
cmp byte [0x18004e368], 0
je 0x18003c73b
movdqa xmm0, xmmword [0x180046fa0]
lea rcx, [rbp + 0x48]
movups xmmword [rbp + 0x48], xmm0
call fcn.180003a70
movss xmm13, dword [0x180046ad4]
lea rbx, [0x18004e2e0]
movss xmm11, dword [0x180046af8]
lea r13, [0x18004e360]
mov esi, eax
jmp 0x18003c435
movss xmm7, dword [rbp - 0x74]
mov ecx, dword [rbx]
lea r8, [rbp + 0xb8]
shl ecx, 5
mov r9d, 0xc
movsxd rdx, ecx
mov rcx, qword [0x18004ea98]
add rdx, r12
mov qword [rbp + 0xb8], 0
mov dword [rbp + 0xc0], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + 4]
lea r8, [rbp + 0xe8]
mov rcx, qword [0x18004ea98]
mov r9d, 0xc
shl eax, 5
movsxd rdx, eax
add rdx, r12
mov qword [rbp + 0xe8], 0
mov dword [rbp + 0xf0], 0
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm5, dword [rbp + 0xbc]
movaps xmm2, xmm13
movss xmm4, dword [rbp + 0xb8]
xor ecx, ecx
movss xmm3, dword [rbp + 0xc0]
movss xmm0, dword [rsp + 0x50]
movss xmm1, dword [rbp - 0x80]
movss xmm9, dword [rbp - 0x7c]
movss xmm6, dword [rsp + 0x64]
movaps xmm8, xmm9
mulss xmm1, xmm4
mulss xmm8, xmm5
mulss xmm6, xmm5
addss xmm8, xmm1
mulss xmm0, xmm4
movss xmm1, dword [rbp - 0x78]
mulss xmm1, xmm3
addss xmm8, xmm1
movss xmm1, dword [rsp + 0x58]
mulss xmm1, xmm3
addss xmm8, xmm7
movss xmm7, dword [rsp + 0x54]
mulss xmm7, xmm5
addss xmm7, xmm0
movss xmm0, dword [rsp + 0x60]
divss xmm2, xmm8
addss xmm7, xmm1
mulss xmm0, xmm4
movss xmm1, dword [rsp + 0x68]
mulss xmm1, xmm3
addss xmm7, dword [rsp + 0x5c]
addss xmm6, xmm0
mulss xmm7, xmm2
addss xmm6, xmm1
addss xmm6, dword [rsp + 0x6c]
mulss xmm6, xmm2
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mulss xmm7, xmm10
mov ecx, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
addss xmm7, xmm10
mulss xmm0, xmm7
cvttss2si eax, xmm0
movd xmm14, eax
cvtdq2ps xmm14, xmm14
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm5, dword [rbp + 0xec]
movaps xmm0, xmm10
mulss xmm6, xmm10
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm0, xmm6
mulss xmm9, xmm5
mulss xmm1, xmm0
movss xmm0, dword [rbp - 0x80]
cvttss2si eax, xmm1
movd xmm15, eax
cvtdq2ps xmm15, xmm15
movss xmm4, dword [rbp + 0xe8]
movaps xmm2, xmm13
movss xmm3, dword [rbp + 0xf0]
xor ecx, ecx
movss xmm1, dword [rbp - 0x78]
movss xmm7, dword [rsp + 0x54]
movss xmm6, dword [rsp + 0x64]
mulss xmm0, xmm4
mulss xmm1, xmm3
addss xmm9, xmm0
mulss xmm7, xmm5
movss xmm0, dword [rsp + 0x50]
mulss xmm6, xmm5
addss xmm9, xmm1
mulss xmm0, xmm4
movss xmm1, dword [rsp + 0x58]
mulss xmm1, xmm3
addss xmm7, xmm0
movss xmm0, dword [rsp + 0x60]
addss xmm9, dword [rbp - 0x74]
mulss xmm0, xmm4
addss xmm7, xmm1
movss xmm1, dword [rsp + 0x68]
addss xmm6, xmm0
mulss xmm1, xmm3
divss xmm2, xmm9
addss xmm7, dword [rsp + 0x5c]
addss xmm6, xmm1
mulss xmm7, xmm2
addss xmm6, dword [rsp + 0x6c]
mulss xmm6, xmm2
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mulss xmm7, xmm10
mov ecx, 1
movd xmm0, eax
addss xmm7, xmm10
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm7
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movaps xmm0, xmm10
mulss xmm6, xmm10
movd xmm1, eax
subss xmm0, xmm6
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm0
movss xmm0, dword [0x180046a80]
comiss xmm8, xmm0
cvttss2si eax, xmm1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
jbe 0x18003c709
comiss xmm9, xmm0
jbe 0x18003c709
mov r9d, esi
movss dword [rbp + 8], xmm7
lea r8, [rbp + 8]
movss dword [rbp + 0xc], xmm2
lea rdx, [rbp + 0x10]
movss dword [rbp + 0x10], xmm14
mov rcx, rdi
movss dword [rbp + 0x14], xmm15
movss dword [rsp + 0x20], xmm11
call fcn.180025770
add rbx, 8
cmp rbx, r13
jne 0x18003c430
movss xmm11, dword [rbp - 0x64]
lea r13, [r15 + 0x328]
movss xmm14, dword [0x180046ad4]
xorps xmm13, xmm13
movss xmm15, dword [rbp + 0xa8]
xor esi, esi
cmp byte [0x18004e362], 0
je 0x18003c9e4
mov rcx, qword [0x18004ea98]
lea rdx, [r15 + 0xcb0]
mov r9d, 0xc
mov qword [rbp + 0x140], 0
lea r8, [rbp + 0x140]
mov dword [rbp + 0x148], 0
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm9, dword [rbp + 0x110]
xor ecx, ecx
movaps xmm7, xmm9
subss xmm7, dword [0x180046b2c]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [rbp - 0x78]
movaps xmm6, xmm14
mulss xmm0, xmm7
xor ecx, ecx
addss xmm0, xmm15
movss xmm15, dword [rbp - 0x74]
addss xmm0, xmm15
divss xmm6, xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [rsp + 0x58]
xorps xmm1, xmm1
mulss xmm0, xmm7
xorps xmm8, xmm8
mov ecx, 1
cvtsi2ss xmm1, eax
addss xmm0, dword [rbp - 0x60]
addss xmm0, dword [rsp + 0x5c]
mulss xmm0, xmm6
mulss xmm0, xmm10
addss xmm0, xmm10
mulss xmm1, xmm0
cvttss2si eax, xmm1
cvtsi2ss xmm8, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm1, dword [rsp + 0x68]
xorps xmm2, xmm2
mulss xmm1, xmm7
movaps xmm0, xmm10
cvtsi2ss xmm2, eax
addss xmm1, dword [rbp + 0xa0]
addss xmm1, dword [rsp + 0x6c]
mulss xmm1, xmm6
xorps xmm6, xmm6
mulss xmm1, xmm10
subss xmm0, xmm1
movss xmm1, dword [rbp + 0xc8]
subss xmm1, dword [rbp + 0x108]
mulss xmm2, xmm0
movss xmm0, dword [rbp + 0xd0]
subss xmm0, xmm9
mulss xmm1, xmm1
cvttss2si eax, xmm2
movss xmm2, dword [rbp + 0xcc]
subss xmm2, dword [rbp + 0x10c]
mulss xmm0, xmm0
cvtsi2ss xmm6, eax
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x18003c8ab
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x18003c8b3
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm7, dword [0x180046b60]
lea r8, str._.2f_m
divss xmm0, xmm7
lea rcx, [rbp + 0x150]
mov edx, 0x20
xorps xmm3, xmm3
cvtss2sd xmm3, xmm0
movq r9, xmm3
call fcn.18003b4e0
mov rcx, qword [0x18004ea38]
lea rax, [rbp + 0x150]
movss xmm0, dword [0x180046b9c]
lea rdx, [rbp + 0x18]
movss xmm3, dword [0x180046b90]
mov qword [rsp + 0x30], rsi
movss xmm2, dword [rcx + 0x3d40]
mov rcx, qword [rcx + 0x3d38]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.180029680
movss xmm0, dword [rbp + 0x18]
lea rcx, [rbp + 0x150]
addss xmm0, dword [0x180046acc]
addss xmm6, dword [0x180046af8]
cvttss2si eax, xmm0
movss dword [rbp + 0x24], xmm6
movd xmm1, eax
mov rax, 0xffffffffffffffff
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x18], xmm1
mulss xmm1, xmm10
subss xmm8, xmm1
movss dword [rbp + 0x20], xmm8
inc rax
cmp byte [rcx + rax], 0
jne 0x18003c971
lea rcx, [rbp + 0x150]
add rcx, rax
lea rax, [rbp + 0x150]
cmp rax, rcx
je 0x18003c9f2
mov rax, qword [rdi + 0x38]
lea r9, [rbp + 0x20]
movups xmm0, xmmword [rdi + 0x88]
mov byte [rsp + 0x48], 0
mov rdx, rdi
movss dword [rsp + 0x40], xmm13
movss xmm2, dword [rax + 0x10]
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x150]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rax + 8]
movups xmmword [rbp + 0x48], xmm0
mov dword [rsp + 0x20], 0xffffffff
call fcn.1800298a0
jmp 0x18003c9f2
movss xmm15, dword [rbp - 0x74]
movss xmm7, dword [0x180046b60]
cmp byte [0x18004e369], 0
je 0x18003cbe0
mov rcx, qword [0x18004ea98]
lea rdx, [r15 + 0x344]
mov r9d, 4
mov dword [rbp + 0xa0], esi
lea r8, [rbp + 0xa0]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x18004ea38]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x4ad0]
mov rcx, qword [rcx]
call fcn.1800068c0
movd xmm6, dword [rbp + 0xa0]
lea r8, [rbp + 0x28]
movss xmm8, dword [rbp - 0x5c]
lea rdx, [rbp + 0x30]
cvtdq2ps xmm6, xmm6
mov dword [rsp + 0x28], esi
mov r9d, 0xff000050
mov rcx, rax
mov rbx, rax
movss dword [rbp + 0x34], xmm8
divss xmm6, xmm7
movaps xmm7, xmm12
movss dword [rbp + 0x2c], xmm11
subss xmm7, dword [0x180046b24]
subss xmm12, dword [0x180046b2c]
movss dword [rsp + 0x20], xmm13
subss xmm7, dword [0x180046b2c]
movss dword [rbp + 0x28], xmm12
movss dword [rbp + 0x30], xmm7
call fcn.1800259e0
movaps xmm0, xmm11
mov dword [rsp + 0x28], esi
movaps xmm1, xmm11
movss dword [rbp + 0x40], xmm7
subss xmm1, xmm8
movss dword [rbp + 0x38], xmm12
lea r8, [rbp + 0x38]
movss dword [rbp + 0x3c], xmm11
lea rdx, [rbp + 0x40]
movss dword [rsp + 0x20], xmm13
mov rcx, rbx
mulss xmm1, xmm6
subss xmm0, xmm1
movss dword [rbp + 0x44], xmm0
movaps xmm0, xmm6
mulss xmm0, dword [0x180046b70]
cvttss2si r9, xmm0
movaps xmm0, xmm14
or r9d, 0xffff0000
subss xmm0, xmm6
shl r9d, 8
mulss xmm0, dword [0x180046b70]
cvttss2si rax, xmm0
or r9d, eax
call fcn.1800259e0
test byte [rbx + 0x30], 1
addss xmm7, xmm10
addss xmm8, xmm10
mov dword [rsp + 0x20], esi
movaps xmm3, xmm13
mov rcx, rbx
je 0x18003cb76
subss xmm12, xmm10
movss dword [rbp - 0x38], xmm7
subss xmm11, xmm10
movss dword [rbp - 0x34], xmm8
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x38]
movss dword [rbp - 0x40], xmm12
movss dword [rbp - 0x3c], xmm11
jmp 0x18003cbb0
subss xmm12, dword [0x180046a9c]
subss xmm11, dword [0x180046a9c]
movss dword [rbp + 0x98], xmm7
lea r8, [rbp - 0x30]
movss dword [rbp + 0x9c], xmm8
lea rdx, [rbp + 0x98]
movss dword [rbp - 0x30], xmm12
movss dword [rbp - 0x2c], xmm11
call fcn.1800253b0
mov r8d, dword [rbx + 0x78]
mov r9d, 0xffffffff
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
movss dword [rsp + 0x28], xmm14
mov dword [rsp + 0x20], 1
call fcn.180023590
mov dword [rbx + 0x78], esi
cmp byte [0x18004e36a], 0
je 0x18003ce87
mov rcx, qword [0x18004ea98]
lea r8, [rbp + 0xb0]
mov r9d, 8
mov qword [rbp + 0xb0], rsi
mov rdx, r13
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xb0]
lea r8, [rbp + 0xa8]
mov rcx, qword [0x18004ea98]
add rdx, 0x1f0
mov r9d, 8
mov qword [rbp + 0xa8], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xa8]
lea r8, [rbp + 0xd8]
mov rcx, qword [0x18004ea98]
add rdx, 0xc0
mov r9d, 0xc
mov qword [rbp + 0xd8], 0
mov dword [rbp + 0xe0], 0
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm8, dword [rbp + 0xd8]
movaps xmm6, xmm14
movss xmm9, dword [rbp + 0xdc]
movaps xmm0, xmm8
movss xmm2, dword [rbp - 0x7c]
xor ecx, ecx
mulss xmm0, dword [rbp - 0x80]
movss xmm11, dword [rbp + 0xe0]
movss xmm1, dword [rbp - 0x78]
mulss xmm2, xmm9
mulss xmm1, xmm11
addss xmm2, xmm0
addss xmm2, xmm1
addss xmm2, xmm15
divss xmm6, xmm2
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm2, dword [rsp + 0x54]
movaps xmm0, xmm8
mulss xmm0, dword [rsp + 0x50]
mov ecx, 1
movss xmm15, dword [rsp + 0x58]
mulss xmm2, xmm9
movaps xmm1, xmm15
movd xmm3, eax
mulss xmm1, xmm11
addss xmm2, xmm0
cvtdq2ps xmm3, xmm3
addss xmm2, xmm1
addss xmm2, dword [rsp + 0x5c]
mulss xmm2, xmm6
mulss xmm2, xmm10
addss xmm2, xmm10
mulss xmm3, xmm2
cvttss2si eax, xmm3
movd xmm7, eax
cvtdq2ps xmm7, xmm7
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm12, dword [rsp + 0x68]
movaps xmm0, xmm8
mulss xmm0, dword [rsp + 0x60]
movaps xmm2, xmm9
mulss xmm2, dword [rsp + 0x64]
movaps xmm1, xmm12
movd xmm3, eax
mulss xmm1, xmm11
addss xmm2, xmm0
movaps xmm0, xmm10
cvtdq2ps xmm3, xmm3
addss xmm2, xmm1
addss xmm2, dword [rsp + 0x6c]
mulss xmm2, xmm6
mulss xmm2, xmm10
subss xmm0, xmm2
mulss xmm3, xmm0
cvttss2si eax, xmm3
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov rbx, qword [0x18004ea38]
movsd xmm1, qword [0x180046b00]
movss xmm0, dword [rbx + 0x10]
mulss xmm0, xmm10
subss xmm7, xmm0
cvtps2pd xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x180046b00]
movaps xmm7, xmm0
movss xmm0, dword [rbx + 0x14]
mulss xmm0, xmm10
subss xmm6, xmm0
cvtps2pd xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm7
ja 0x18003cdf8
xorps xmm0, xmm0
sqrtsd xmm0, xmm7
jmp 0x18003ce00
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movss xmm6, dword [rbp - 0x74]
xorps xmm1, xmm1
movss xmm7, dword [rbp - 0x78]
mov rdi, qword [rbp - 0x50]
cvtsd2ss xmm1, xmm0
movss xmm0, dword [0x18004e370]
mulss xmm0, dword [0x180046b3c]
comiss xmm0, xmm1
jbe 0x18003d140
movss xmm0, dword [rbp - 0x58]
comiss xmm0, xmm1
jbe 0x18003d140
mov rbx, r15
movss dword [rbp - 0x6c], xmm9
movss xmm9, dword [rsp + 0x5c]
mov qword [rbp - 0x48], rbx
movss dword [rbp - 0x58], xmm1
movss dword [rbp - 0x70], xmm8
movss dword [rbp - 0x68], xmm11
jmp 0x18003ceb4
movss xmm8, dword [rbp - 0x70]
movss xmm6, dword [rbp - 0x74]
movss xmm7, dword [rbp - 0x78]
movss xmm9, dword [rsp + 0x5c]
movss xmm15, dword [rsp + 0x58]
mov rdi, qword [rbp - 0x50]
jmp 0x18003cebb
movss xmm8, dword [rbp - 0x70]
movss xmm6, dword [rbp - 0x74]
movss xmm7, dword [rbp - 0x78]
movss xmm9, dword [rsp + 0x5c]
movss xmm15, dword [rsp + 0x58]
mov rbx, qword [rbp - 0x48]
mov rdi, qword [rbp - 0x50]
movss xmm12, dword [rsp + 0x68]
movss xmm11, dword [rsp + 0x6c]
inc r14d
lea rax, [rdi + 0x568]
cmp r14d, 0x40
jl 0x18003be72
mov r15, qword [rsp + 0x320]
mov ecx, 0x10
mov r14, qword [rsp + 0x328]
mov r13, qword [rsp + 0x330]
mov r12, qword [rsp + 0x338]
mov rdi, qword [rsp + 0x360]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18003d097
cmp byte [0x18004e36a], 0
je 0x18003d097
test rbx, rbx
je 0x18003d097
movss xmm0, dword [rbp - 0x6c]
movaps xmm2, xmm8
mulss xmm2, dword [rbp - 0x80]
xor ecx, ecx
mulss xmm0, dword [rbp - 0x7c]
movss xmm1, dword [rbp - 0x68]
mulss xmm1, xmm7
addss xmm2, xmm0
addss xmm2, xmm1
addss xmm2, xmm6
movaps xmm6, xmm14
divss xmm6, xmm2
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm0, dword [rbp - 0x6c]
movaps xmm2, xmm8
mulss xmm2, dword [rsp + 0x50]
xorps xmm3, xmm3
mov ecx, 1
mulss xmm0, dword [rsp + 0x54]
xorps xmm7, xmm7
movss xmm1, dword [rbp - 0x68]
cvtsi2ss xmm3, eax
addss xmm2, xmm0
mulss xmm1, xmm15
addss xmm2, xmm1
addss xmm2, xmm9
mulss xmm2, xmm6
mulss xmm2, xmm10
addss xmm2, xmm10
mulss xmm3, xmm2
cvttss2si eax, xmm3
cvtsi2ss xmm7, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mulss xmm8, dword [rsp + 0x60]
lea rcx, [rbp + 0x98]
movss xmm1, dword [rbp - 0x6c]
xorps xmm0, xmm0
mulss xmm1, dword [rsp + 0x64]
cvtsi2ss xmm0, eax
addss xmm8, xmm1
movss xmm1, dword [rbp - 0x68]
mulss xmm1, xmm12
addss xmm8, xmm1
addss xmm8, xmm11
mulss xmm8, xmm6
xorps xmm6, xmm6
mulss xmm8, xmm10
subss xmm10, xmm8
mulss xmm0, xmm10
cvttss2si eax, xmm0
cvtsi2ss xmm6, eax
call qword [sym.imp.USER32.dll_GetCursorPos]
movss xmm1, dword [0x18004e36c]
comiss xmm1, xmm13
mov rax, qword [rbp + 0x98]
mov edx, dword [rbp + 0x9c]
movaps xmm0, xmm1
divss xmm0, dword [0x180046b3c]
divss xmm14, xmm0
jbe 0x18003d065
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movd xmm0, edx
cvtdq2ps xmm0, xmm0
subss xmm7, xmm1
subss xmm6, xmm0
mulss xmm7, xmm14
mulss xmm6, xmm14
addss xmm7, xmm1
addss xmm6, xmm0
movd xmm0, edx
xor r9d, r9d
movd xmm1, eax
mov ecx, 1
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x20], rsi
cvtdq2ps xmm1, xmm1
subss xmm6, xmm0
subss xmm7, xmm1
cvttss2si r8d, xmm6
cvttss2si edx, xmm7
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm15, xmmword [rsp + 0x280]
movaps xmm14, xmmword [rsp + 0x290]
movaps xmm13, xmmword [rsp + 0x2a0]
movaps xmm12, xmmword [rsp + 0x2b0]
movaps xmm11, xmmword [rsp + 0x2c0]
movaps xmm10, xmmword [rsp + 0x2d0]
movaps xmm9, xmmword [rsp + 0x2e0]
movaps xmm8, xmmword [rsp + 0x2f0]
movaps xmm7, xmmword [rsp + 0x300]
movaps xmm6, xmmword [rsp + 0x310]
mov rsi, qword [rsp + 0x358]
mov rbx, qword [rsp + 0x350]
test ax, ax
je 0x18003d128
cmp byte [0x18004ea31], 0
mov ecx, 0x1f4
sete byte [0x18004ea31]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.18003e010
add rsp, 0x340
pop rbp
ret
movss xmm8, dword [rbp - 0x70]
movss xmm9, dword [rsp + 0x5c]
mov rbx, qword [rbp - 0x48]
jmp 0x18003ceb4