Function at 0x140035000
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x48]
sub rsp, 0x120
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x140093070]
xor rax, rsp
mov qword [rbp - 0x10], rax
cmp qword [0x140096a50], 0
jne 0x14003504f
cmp qword [0x140096a60], 0
je 0x14003504f
call fcn.140021f20
call fcn.1400222e0
call fcn.1400055e0
mov rcx, qword [0x1400969b8]
lea rdx, [rbp - 0x20]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x1400350a1
mov eax, dword [rbp - 0x18]
sub eax, dword [rbp - 0x20]
movd xmm1, eax
mov eax, dword [rbp - 0x14]
sub eax, dword [rbp - 0x1c]
cvtdq2ps xmm1, xmm1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [0x140096a28], xmm1
movss dword [0x140096a24], xmm2
jmp 0x1400350b1
movss xmm1, dword [0x140096a28]
movss xmm2, dword [0x140096a24]
mulss xmm1, dword [0x140088670]
mulss xmm2, dword [0x140088670]
movss dword [0x140096a20], xmm1
movss dword [0x1400969fc], xmm2
call fcn.140032800
call fcn.140031d80
call fcn.1400326b0
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor ebx, ebx
test al, 1
je 0x140035195
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], 1
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
cmp byte [0x140094200], bl
sete byte [0x140094200]
cmp byte [0x140094201], bl
je 0x1400351df
mov rcx, qword [0x1400968b0]
lea rdx, [rsp + 0x58]
movss xmm0, dword [0x140088788]
xor r8d, r8d
movss xmm1, dword [0x140088780]
movss dword [rsp + 0x58], xmm0
mov rcx, qword [rcx + 0x19f8]
movss dword [rsp + 0x5c], xmm1
call fcn.14000c2f0
call fcn.1400339c0
mov byte [0x140094201], bl
cmp byte [0x140094200], bl
mov r12d, 1
movss xmm8, dword [0x140088698]
movaps xmmword [rsp + 0x110], xmm6
je 0x140036404
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0xd1958caf
mov dword [rsp + 0x44], 0x839d81a2
mov dword [rsp + 0x48], 0x9d8397
mov byte [rsp + 0x4c], r12b
call fcn.140011c50
mov r8d, r12d
lea rcx, [rsp + 0x40]
xor edx, edx
call fcn.1400090c0
test al, al
je 0x1400363ff
mov rcx, qword [0x1400968b0]
lea rdx, [rsp + 0x58]
movss xmm0, dword [0x14008877c]
xor r8d, r8d
movss xmm1, dword [0x140088774]
movss dword [rsp + 0x58], xmm0
mov rcx, qword [rcx + 0x19f8]
movss dword [rsp + 0x5c], xmm1
call fcn.14000c3b0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x40], 0x42700000
mov dword [rsp + 0x44], 0x41900000
mov dword [rsp + 0x58], 0x4b454e47
mov dword [rsp + 0x5c], 0x1005f45
call fcn.140038e00
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.1400237b0
test al, al
je 0x140035355
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov dword [0x140094204], r12d
movss xmm6, dword [0x1400887a4]
xorps xmm0, xmm0
movaps xmm1, xmm6
call fcn.14000c8b0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0x42700000
mov dword [rsp + 0x5c], 0x41900000
mov dword [rsp + 0x40], 0x5c5b4e50
mov dword [rsp + 0x44], 0x5f474b
mov byte [rsp + 0x48], r12b
call fcn.140038e30
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400237b0
test al, al
je 0x14003544e
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov dword [0x140094204], 2
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0x42700000
mov dword [rsp + 0x5c], 0x41900000
mov dword [rsp + 0x40], 0x4a5b4e4b
mov word [rsp + 0x44], 0x100
call fcn.140038ed0
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400237b0
test al, al
je 0x14003553e
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov dword [0x140094204], 3
jmp 0x140035ce2
cmp dword [0x140094204], ebx
jne 0x140035810
lea rcx, [rbp - 0x30]
mov word [rbp - 0x30], 6
mov byte [rbp - 0x2e], r12b
call fcn.140038e90
lea rcx, [rbp - 0x30]
call fcn.1400230a0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x484d4f65
mov dword [rsp + 0x5c], 0x595f0b5e
mov dword [rsp + 0x60], 0x42455b4f
mov word [rsp + 0x64], 8
mov byte [rsp + 0x66], r12b
call fcn.140038cb0
movaps xmm0, xmmword [0x140088de0]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
call fcn.140023120
movdqa xmm0, xmmword [str.dF_FnUH]
lea rcx, [rsp + 0x58]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x68], r12b
call fcn.140038c80
lea rcx, [rsp + 0x58]
call fcn.1400230a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4c4c4973
mov dword [rsp + 0x5c], 0x594f4e5e
mov dword [rsp + 0x60], 0x1004b4b
call fcn.140038d10
movaps xmm0, xmmword [0x140088cc0]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
call fcn.140023120
movdqa xmm0, xmmword [str.cF_PkEXDmGUPF_t]
lea rcx, [rsp + 0x58]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x68], r12b
call fcn.140038c80
lea rcx, [rsp + 0x58]
call fcn.1400230a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4c5c4973
mov dword [rsp + 0x5c], 0x49495f59
mov word [rsp + 0x60], 0x100
call fcn.140038da0
movaps xmm0, xmmword [0x140088cd0]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
call fcn.140023120
lea rcx, [rbp - 0x30]
mov word [rbp - 0x30], 6
mov byte [rbp - 0x2e], r12b
call fcn.140038e90
lea rcx, [rbp - 0x30]
call fcn.1400230a0
movdqa xmm0, xmmword [str.bN_JEYH_r_JBGWA]
lea rcx, [rsp + 0x40]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x50], r12b
call fcn.140038c80
movaps xmm0, xmmword [0x140088de0]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x58]
movups xmmword [rsp + 0x58], xmm0
call fcn.140023120
movss xmm0, dword [0x140088750]
movss dword [rsp + 0x58], xmm0
mov dword [rsp + 0x5c], 0x41900000
mov dword [rsp + 0x40], 0x465c5247
mov dword [rsp + 0x44], 0x4443410a
mov word [rsp + 0x48], 0x40
mov byte [rsp + 0x4a], r12b
lea rcx, [rsp + 0x40]
call fcn.140038dd0
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400237b0
test al, al
je 0x140035810
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x140088f10]
lea rcx, [rsp + 0x58]
movdqa xmm1, xmmword [0x140088920]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x78], 0x3f
movdqu xmmword [rsp + 0x68], xmm1
mov byte [rsp + 0x7a], r12b
call fcn.140038c50
lea rcx, [rsp + 0x58]
call fcn.14004ec98
cmp dword [0x140094204], r12d
jne 0x140035baf
lea rcx, [rbp - 0x30]
mov word [rbp - 0x30], 6
mov byte [rbp - 0x2e], r12b
call fcn.140038e90
lea rcx, [rbp - 0x30]
call fcn.1400230a0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4b494943
mov dword [rsp + 0x5c], 0x1004e46
call fcn.140038e00
lea rdx, [0x140094210]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x5e495542
mov dword [rsp + 0x5c], 0x5b434d0a
mov word [rsp + 0x60], 0x100
call fcn.140038da0
lea rdx, [0x140094211]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x465c5267
mov dword [rsp + 0x5c], 0x5f456d0a
mov word [rsp + 0x60], 0x4b
mov byte [rsp + 0x62], r12b
call fcn.140038dd0
lea rdx, [0x140094212]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4f1a0903
mov word [rsp + 0x5c], 0x100
call fcn.140038ed0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x5e4840
mov byte [rsp + 0x44], r12b
call fcn.140038ea0
movss xmm0, dword [0x14008876c]
lea rax, [rsp + 0x58]
movss dword [rsp + 0x30], xmm8
lea r9, [rbp - 0x28]
mov qword [rsp + 0x28], rax
lea r8, [0x140094218]
lea rax, [rbp - 0x30]
movss dword [rbp - 0x30], xmm0
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x40]
mov dword [rbp - 0x28], ebx
call fcn.140024ff0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4f1a0903
mov word [rsp + 0x5c], 0x100
call fcn.140038ed0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x46474a55
mov dword [rsp + 0x44], 0x100435e
call fcn.140038e00
movss xmm0, dword [0x140088724]
lea rax, [rsp + 0x58]
movss dword [rsp + 0x30], xmm8
lea r9, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea r8, [0x14009421c]
lea rax, [rbp - 0x28]
movss dword [rbp - 0x28], xmm0
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x40]
mov dword [rbp - 0x30], 0x3f800000
call fcn.140024ff0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4f1a0903
mov word [rsp + 0x5c], 0x100
call fcn.140038ed0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x5d5b4e42
mov dword [rsp + 0x44], 0x484f454b
mov word [rsp + 0x48], 0x100
call fcn.140038da0
movss xmm0, dword [0x140088764]
lea rax, [rsp + 0x58]
movss xmm1, dword [0x140088734]
lea r9, [rbp - 0x30]
movss dword [rsp + 0x30], xmm8
lea r8, [0x140094220]
mov qword [rsp + 0x28], rax
lea rcx, [rsp + 0x40]
lea rax, [rbp - 0x28]
movss dword [rbp - 0x28], xmm0
mov edx, 4
mov qword [rsp + 0x20], rax
movss dword [rbp - 0x30], xmm1
call fcn.140024ff0
movzx eax, byte [str.Shift]
lea rcx, [rsp + 0x58]
xor al, 0x26
mov word [rsp + 0x5d], 0x100
mov byte [rsp + 0x58], al
movzx eax, byte [0x140088015]
xor al, 0x27
mov byte [rsp + 0x59], al
movzx eax, byte [0x140088016]
xor al, 0x28
mov byte [rsp + 0x5a], al
movzx eax, byte [0x140088017]
xor al, 0x29
mov byte [rsp + 0x5b], al
movzx eax, byte [0x140088018]
xor al, 0x2a
mov byte [rsp + 0x5c], al
call fcn.140038d70
lea rdx, [0x140094225]
lea rcx, [rsp + 0x58]
call fcn.140024560
test al, al
je 0x140035ad4
movzx eax, byte [0x140094225]
test al, al
je 0x140035ac4
mov byte [0x140094224], bl
mov byte [0x140094226], bl
jmp 0x140035ad4
cmp byte [0x140094224], bl
cmove eax, r12d
mov byte [0x140094225], al
movss xmm1, dword [0x140088740]
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x999786bc
mov dword [rsp + 0x5c], 0x9a99d386
mov dword [rsp + 0x60], 0x9d8483
mov byte [rsp + 0x64], r12b
call fcn.140011c50
lea rdx, [0x140094224]
lea rcx, [rsp + 0x58]
call fcn.140024560
test al, al
je 0x140035b44
movzx eax, byte [0x140094224]
test al, al
je 0x140035b34
mov word [0x140094225], bx
jmp 0x140035b44
cmp byte [0x140094225], bl
cmove eax, r12d
mov byte [0x140094224], al
movss xmm1, dword [0x140088740]
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x465a5567
mov dword [rsp + 0x5c], 0x42680b5d
mov dword [rsp + 0x60], 0x1004159
call fcn.140038d10
lea rdx, [0x140094226]
lea rcx, [rsp + 0x58]
call fcn.140024560
test al, al
je 0x140035baf
movzx eax, byte [0x140094226]
test al, al
je 0x140035b9f
mov word [0x140094224], bx
jmp 0x140035baf
cmp byte [0x140094225], bl
cmove eax, r12d
mov byte [0x140094226], al
cmp dword [0x140094204], 2
jne 0x140035cd5
lea rcx, [rbp - 0x30]
mov word [rbp - 0x30], 6
mov byte [rbp - 0x2e], r12b
call fcn.140038e90
lea rcx, [rbp - 0x30]
call fcn.1400230a0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4c504844
mov word [rsp + 0x5c], 0x59
mov byte [rsp + 0x5e], r12b
call fcn.140038d70
lea rdx, [0x14009422c]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x45444e40
mov dword [rsp + 0x5c], 0x4f0c4f4f
mov dword [rsp + 0x60], 0x1005741
call fcn.140038d10
lea rdx, [0x14009422d]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x5d5b4e42
mov dword [rsp + 0x5c], 0x484f454b
mov word [rsp + 0x60], 0x100
call fcn.140038da0
lea rdx, [0x140094230]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x59494955
mov dword [rsp + 0x5c], 0x48424246
mov word [rsp + 0x60], 0x5d
mov byte [rsp + 0x62], r12b
call fcn.140038dd0
lea rdx, [0x14009422f]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4d49424e
mov dword [rsp + 0x5c], 0x59434f0a
mov word [rsp + 0x60], 0x100
call fcn.140038da0
lea rdx, [0x140094231]
lea rcx, [rsp + 0x58]
call fcn.140024560
cmp dword [0x140094204], 3
jne 0x1400363ff
lea rcx, [rbp - 0x30]
mov word [rbp - 0x30], 6
mov byte [rbp - 0x2e], r12b
call fcn.140038e90
lea rcx, [rbp - 0x30]
call fcn.1400230a0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x5a475545
mov dword [rsp + 0x5c], 0x444d4359
mov word [rsp + 0x60], 0x5c
mov byte [rsp + 0x62], r12b
call fcn.140038dd0
lea rdx, [0x140094239]
lea rcx, [rsp + 0x58]
call fcn.140024560
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4f1a0903
mov word [rsp + 0x5c], 0x100
call fcn.140038ed0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x405a486e
mov dword [rsp + 0x44], 0x59424450
mov dword [rsp + 0x48], 0x100434f
call fcn.140038d10
lea rax, [rsp + 0x58]
movss dword [rsp + 0x30], xmm8
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x30]
lea rax, [rbp - 0x28]
mov dword [rbp - 0x28], 0x41a00000
lea r8, [0x14009423c]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 0x30], 0x3f800000
lea rcx, [rsp + 0x40]
call fcn.140024ff0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4f1a0903
mov word [rsp + 0x5c], 0x100
call fcn.140038ed0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x5d5a4270
mov dword [rsp + 0x44], 0x414d4843
mov word [rsp + 0x48], 0x100
call fcn.140038da0
lea rax, [rsp + 0x58]
movss dword [rsp + 0x30], xmm8
mov qword [rsp + 0x28], rax
lea r9, [rbp - 0x30]
lea rax, [rbp - 0x28]
mov dword [rbp - 0x28], 0x41a00000
lea r8, [0x140094240]
mov qword [rsp + 0x20], rax
mov edx, 4
mov dword [rbp - 0x30], 0x3f800000
lea rcx, [rsp + 0x40]
call fcn.140024ff0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4f1a0903
mov word [rsp + 0x5c], 0x100
call fcn.140038ed0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x4a414f72
mov dword [rsp + 0x44], 0x5e494541
mov word [rsp + 0x48], 0x5d
mov byte [rsp + 0x4a], r12b
call fcn.140038dd0
movss xmm0, dword [0x140088710]
lea rax, [rsp + 0x58]
movss dword [rsp + 0x30], xmm8
lea r9, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea r8, [0x140094244]
lea rax, [rbp - 0x28]
movss dword [rbp - 0x28], xmm0
mov edx, 4
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x40]
mov dword [rbp - 0x30], 0x3f000000
call fcn.140024ff0
mov word [rbp - 0x30], 6
lea rcx, [rbp - 0x30]
mov byte [rbp - 0x2e], r12b
call fcn.140038e90
lea rcx, [rbp - 0x30]
call fcn.1400230a0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x4c405369
mov dword [rsp + 0x5c], 0x1001158
call fcn.140038e00
movaps xmm0, xmmword [0x140088de0]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
call fcn.140023120
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0x42b80000
mov dword [rsp + 0x5c], 0x41900000
mov dword [rsp + 0x40], 0x4c5b4254
mov dword [rsp + 0x44], 0x485f0b5e
mov dword [rsp + 0x48], 0x5f595b5a
mov dword [rsp + 0x4c], 0x1004055
call fcn.140038d40
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400237b0
test al, al
je 0x140035ffd
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140032750
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0x42b80000
mov dword [rsp + 0x5c], 0x41900000
mov dword [rsp + 0x40], 0x94868e9d
mov dword [rsp + 0x44], 0x9b9b90d2
mov dword [rsp + 0x48], 0x9f9e90
mov byte [rsp + 0x4c], r12b
call fcn.140011c50
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400237b0
test al, al
je 0x1400360fc
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400329d0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x58], 0x42b80000
mov dword [rsp + 0x5c], 0x41900000
mov dword [rsp + 0x40], 0x95918082
mov dword [rsp + 0x44], 0x9b9b90d2
mov dword [rsp + 0x48], 0x9f9e90
mov byte [rsp + 0x4c], r12b
call fcn.140011c50
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400237b0
test al, al
je 0x1400361f0
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400339c0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x40], 0x42b80000
mov dword [rsp + 0x44], 0x41900000
mov dword [rsp + 0x58], 0x46444953
mov dword [rsp + 0x5c], 0x1004f4b
call fcn.140038e00
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.1400237b0
test al, al
jne 0x140036554
lea rcx, [rbp - 0x30]
mov word [rbp - 0x30], 6
mov byte [rbp - 0x2e], r12b
call fcn.140038e90
lea rcx, [rbp - 0x30]
call fcn.1400230a0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0x484d4f65
mov dword [rsp + 0x5c], 0x4c5c0b5e
mov dword [rsp + 0x60], 0x110a475a
mov word [rsp + 0x64], 0x100
call fcn.140038c20
lea rcx, [rsp + 0x58]
call fcn.1400230a0
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000c8b0
lea rcx, [rsp + 0x58]
mov dword [rsp + 0x58], 0xb8dfd5ad
mov dword [rsp + 0x5c], 0x9b95809c
mov dword [rsp + 0x60], 0x81839f
mov byte [rsp + 0x64], r12b
call fcn.140011c50
movaps xmm2, xmmword [0x140088ce0]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm2
call fcn.140023120
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.14000c8b0
movss xmm0, dword [0x140088748]
lea rcx, [rsp + 0x40]
movss xmm1, dword [0x14008873c]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
mov dword [rsp + 0x40], 0x60908
mov byte [rsp + 0x44], r12b
call fcn.140038ea0
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.1400237b0
test al, al
je 0x1400363ff
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140038ce0
xor r9d, r9d
lea rcx, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
movdqa xmm0, xmmword [0x140088e80]
lea rcx, [rsp + 0x58]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x68], 0x4f
mov byte [rsp + 0x6a], r12b
call fcn.140038bf0
lea rcx, [rsp + 0x58]
call fcn.14004ec98
call fcn.14000be00
call fcn.140006890
mov rcx, qword [0x140096998]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x140096998]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x140096998]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140096998]
mov r9d, r12d
mov dword [rsp + 0x30], ebx
xor r8d, r8d
movss dword [rsp + 0x28], xmm8
xor edx, edx
mov dword [rsp + 0x20], ebx
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x140096998]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400364b8
call fcn.140006df0
mov rcx, qword [0x1400968b0]
add rcx, 0x1c70
cmp byte [rcx], bl
cmove rcx, rbx
call fcn.140021650
mov rcx, qword [0x140096998]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140096998]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003651a
mov rcx, qword [0x140096998]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003651a
call fcn.1400220f0
mov rcx, qword [0x140096998]
lea rdx, [0x140096950]
mov rax, qword [rcx]
call qword [rax + 0x80]
cmp qword [0x140096a60], rbx
je 0x14003651a
call fcn.140021f20
movaps xmm6, xmmword [rsp + 0x110]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14003c8e0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm8, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp - 0x80]
mov dword [rbp - 0x80], 0x1c4b1c56
mov dword [rbp - 0x7c], 0x1c501c49
mov dword [rbp - 0x78], 0x1c681c0a
mov dword [rbp - 0x74], 0x1c711c16
mov dword [rbp - 0x70], 0x1c411c67
mov dword [rbp - 0x6c], 0x1c501c43
mov dword [rbp - 0x68], 0x1c5a1c5c
mov dword [rbp - 0x64], 0x1c4c1c40
mov dword [rbp - 0x60], 0x1c551c6a
mov dword [rbp - 0x5c], 0x1c4d1c4d
mov dword [rbp - 0x58], 0x1c541c4e
mov dword [rbp - 0x54], 0x1c5e1c52
mov dword [rbp - 0x50], 0x1c561c52
mov dword [rbp - 0x4c], 0x1c2a1c23
mov dword [rbp - 0x48], 0x1c2e1c6c
mov dword [rbp - 0x44], 0x1c761c34
mov word [rbp - 0x40], bx
mov byte [rbp - 0x3e], r12b
call fcn.140036600
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINMM.dll_mciSendStringW]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.14004e188
int3