Function at 0x140036d30
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rsi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
mov rax, qword [0x1400e0040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rax, qword [0x140109998]
xor esi, esi
movaps xmmword [rsp + 0xb0], xmm7
cmp byte [rax + 8], sil
je 0x140036d9c
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x49]
mov rcx, qword [0x1401099c8]
mov r9d, 1
mov byte [rbp - 0x49], 1
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
add rdx, 0x189
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 9], sil
je 0x140036de1
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov dword [rbp - 0x29], 0x43480000
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
add rdx, 0x280
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
mov qword [rsp + 0xe0], rbx
cmp byte [rax + 0xa], sil
je 0x140036f0f
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
add rdx, 0x30
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x29]
test rdx, rdx
je 0x140036f0f
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 0x17]
add rdx, 0x10
mov qword [rsp + 0x20], rsi
mov r9d, 8
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x17]
test rdx, rdx
je 0x140036f0f
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov r9d, 8
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x29]
test rdx, rdx
je 0x140036f0f
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 0x17]
add rdx, 0x70
mov qword [rsp + 0x20], rsi
mov r9d, 8
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x17]
test rbx, rbx
je 0x140036f0f
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, rbx
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp qword [rbp - 0x29], rsi
je 0x140036f0f
mov rcx, qword [0x1401099c8]
lea rdx, [rbx + 0x2c]
mov dword [rbp - 0x29], 0xbf800000
lea r8, [rbp - 0x29]
mov r9d, 4
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x140109998]
xorps xmm7, xmm7
movaps xmmword [rsp + 0xc0], xmm6
cmp byte [rcx + 0x10], sil
je 0x140037681
mov ecx, dword [rcx + 0x18]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140036f4a
cmp byte [0x140109841], sil
sete al
mov byte [0x140109841], al
jmp 0x140036f51
movzx eax, byte [0x140109841]
test al, al
je 0x14003759f
mov rax, qword [0x1401099b0]
lea r8, [rbp - 9]
mov rcx, qword [0x1401099c8]
mov r9d, 0xc
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x30]
mov rcx, qword [rcx]
add rdx, 0x3d0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x49]
mov rcx, qword [0x1401099c8]
mov r9d, 1
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x58]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x49], 0x40
mov rcx, qword [0x1401099c8]
mov rax, qword [0x1401099b0]
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
je 0x1400372cd
mov rdx, qword [rax + 0xd0]
lea r8, [rbp + 0x17]
add rdx, qword [rax + 0x38]
mov r9d, 8
mov qword [rsp + 0xe8], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x41]
mov rbx, qword [rbp + 0x17]
mov r9d, 0xc
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
lea rdx, [rbx + 0x90]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea rdx, [rbx + 0x30]
mov r9d, 8
mov qword [rsp + 0x20], rsi
lea r8, [rbp - 0x19]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x140109840], sil
je 0x1400370a5
mov rcx, qword [0x1401099c8]
lea rdx, [rbx + 0x20]
mov r9d, 8
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 7]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov rdx, qword [rbp + 7]
mov r9d, 4
mov dword [rbp - 0x29], esi
add rdx, 0x2c
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x140109840], sil
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400370bf
movss xmm6, dword [0x1400cfdec]
jmp 0x1400370c7
movss xmm6, dword [0x1400cfdc8]
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003711c
movss xmm1, dword [rbp - 0x41]
movss xmm0, dword [rbp - 9]
mulss xmm0, xmm6
addss xmm1, xmm0
movss xmm0, dword [rbp - 5]
mulss xmm0, xmm6
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
addss xmm1, xmm0
movss xmm0, dword [rbp - 1]
mulss xmm0, xmm6
movss dword [rbp - 0x3d], xmm1
movss xmm1, dword [rbp - 0x39]
addss xmm1, xmm0
movss dword [rbp - 0x39], xmm1
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140037171
movss xmm1, dword [rbp - 0x41]
movss xmm0, dword [rbp - 9]
mulss xmm0, xmm6
subss xmm1, xmm0
movss xmm0, dword [rbp - 5]
mulss xmm0, xmm6
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
subss xmm1, xmm0
movss xmm0, dword [rbp - 1]
mulss xmm0, xmm6
movss dword [rbp - 0x3d], xmm1
movss xmm1, dword [rbp - 0x39]
subss xmm1, xmm0
movss dword [rbp - 0x39], xmm1
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400371c4
movss xmm1, dword [rbp - 0x41]
movaps xmm2, xmm6
movss xmm0, dword [rbp - 5]
mulss xmm0, xmm6
mulss xmm2, xmm7
addss xmm1, xmm0
movss xmm0, dword [rbp - 9]
mulss xmm0, xmm6
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
subss xmm1, xmm0
movss xmm0, dword [rbp - 0x39]
addss xmm0, xmm2
movss dword [rbp - 0x3d], xmm1
movss dword [rbp - 0x39], xmm0
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140037217
movss xmm1, dword [rbp - 0x41]
movaps xmm2, xmm6
movss xmm0, dword [rbp - 5]
mulss xmm0, xmm6
mulss xmm2, xmm7
subss xmm1, xmm0
movss xmm0, dword [rbp - 9]
mulss xmm0, xmm6
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
addss xmm1, xmm0
movss xmm0, dword [rbp - 0x39]
addss xmm0, xmm2
movss dword [rbp - 0x3d], xmm1
movss dword [rbp - 0x39], xmm0
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140037235
movss xmm0, dword [rbp - 0x39]
addss xmm0, xmm6
movss dword [rbp - 0x39], xmm0
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140037253
movss xmm0, dword [rbp - 0x39]
subss xmm0, xmm6
movss dword [rbp - 0x39], xmm0
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
movsd xmm0, qword [rbp - 0x41]
mov r9d, 0xc
mov eax, dword [rbp - 0x39]
mov rdx, qword [rbp - 0x19]
movsd qword [rbp + 7], xmm0
add rdx, 0x50
mov dword [rbp + 0xf], eax
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
movsd xmm0, qword [rbp - 0x41]
lea rdx, [rbx + 0x90]
mov eax, dword [rbp - 0x39]
mov r9d, 0xc
movsd qword [rbp - 0x29], xmm0
mov dword [rbp - 0x21], eax
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdi, qword [rsp + 0xe8]
jmp 0x140037681
mov rdx, qword [rax + 0x38]
lea r8, [rbp - 0x41]
add rdx, 0x90
mov r9d, 0xc
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401099b0]
lea r8, [rbp + 7]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
add rdx, 0x30
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x140109840], sil
je 0x14003737e
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
add rdx, 0x20
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov rdx, qword [rbp - 0x19]
mov r9d, 4
mov dword [rbp - 0x29], esi
add rdx, 0x2c
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x140109840], sil
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140037398
movss xmm6, dword [0x1400cfdec]
jmp 0x1400373a0
movss xmm6, dword [0x1400cfdc8]
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400373f2
movss xmm1, dword [rbp - 0x41]
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 9]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 5]
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 1]
movss dword [rbp - 0x3d], xmm1
movss xmm1, dword [rbp - 0x39]
addss xmm1, xmm0
movss dword [rbp - 0x39], xmm1
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140037444
movss xmm1, dword [rbp - 0x41]
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 9]
subss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 5]
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
subss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 1]
movss dword [rbp - 0x3d], xmm1
movss xmm1, dword [rbp - 0x39]
subss xmm1, xmm0
movss dword [rbp - 0x39], xmm1
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140037495
movss xmm1, dword [rbp - 0x41]
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 5]
movaps xmm2, xmm6
mulss xmm2, xmm7
addss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 9]
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
subss xmm1, xmm0
movss xmm0, dword [rbp - 0x39]
addss xmm0, xmm2
movss dword [rbp - 0x3d], xmm1
movss dword [rbp - 0x39], xmm0
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400374e6
movss xmm1, dword [rbp - 0x41]
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 5]
movaps xmm2, xmm6
mulss xmm2, xmm7
subss xmm1, xmm0
movaps xmm0, xmm6
mulss xmm0, dword [rbp - 9]
movss dword [rbp - 0x41], xmm1
movss xmm1, dword [rbp - 0x3d]
addss xmm1, xmm0
movss xmm0, dword [rbp - 0x39]
addss xmm0, xmm2
movss dword [rbp - 0x3d], xmm1
movss dword [rbp - 0x39], xmm0
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140037504
movss xmm0, dword [rbp - 0x39]
addss xmm0, xmm6
movss dword [rbp - 0x39], xmm0
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140037522
movss xmm0, dword [rbp - 0x39]
subss xmm0, xmm6
movss dword [rbp - 0x39], xmm0
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x19]
movsd xmm0, qword [rbp - 0x41]
mov r9d, 0xc
mov eax, dword [rbp - 0x39]
mov rdx, qword [rbp + 7]
movsd qword [rbp - 0x19], xmm0
add rdx, 0x50
mov dword [rbp - 0x11], eax
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp - 0x39]
lea r8, [rbp + 0x17]
movsd xmm0, qword [rbp - 0x41]
mov r9d, 0xc
mov rcx, qword [0x1401099c8]
mov dword [rbp + 0x1f], eax
mov rax, qword [0x1401099b0]
movsd qword [rbp + 0x17], xmm0
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
add rdx, 0x90
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x140037681
cmp byte [0x140109840], sil
jne 0x140037681
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x49]
mov rcx, qword [0x1401099c8]
mov r9d, 1
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x58]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test byte [rbp - 0x49], 0x40
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov rax, qword [0x1401099b0]
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
je 0x14003763e
mov rdx, qword [rax + 0xd0]
add rdx, qword [rax + 0x38]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rdx, qword [rbp - 0x19]
mov r9d, 8
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 7]
jmp 0x140037650
mov rdx, qword [rax + 0x38]
add rdx, 0x20
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x19]
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov dword [rbp - 0x29], 0x3f800000
mov r9d, 4
add rdx, 0x2c
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x140109840], 1
mov rax, qword [0x140109998]
movaps xmm6, xmmword [rsp + 0xc0]
cmp byte [rax + 0xc], sil
je 0x140037704
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xa0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x140037704
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov dword [rbp - 0x29], 0x4000
mov qword [rsp + 0x20], rsi
add rdx, qword [rax + 0x98]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0xd], sil
je 0x14003777f
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xa0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x14003777f
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov dword [rbp - 0x29], 0x2000
mov qword [rsp + 0x20], rsi
add rdx, qword [rax + 0x98]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0xb], sil
je 0x1400377f7
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xa0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x1400377f7
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov dword [rbp - 0x29], 0x41700000
mov qword [rsp + 0x20], rsi
add rdx, qword [rax + 0x70]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0xe], sil
je 0x1400379a0
mov rax, qword [0x1401099b0]
lea r8, [rbp - 9]
mov rcx, qword [0x1401099c8]
mov r9d, 0xc
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
add rdx, 0x90
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x41]
mov rcx, qword [0x1401099c8]
mov r9d, 0xc
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x30]
mov rcx, qword [rcx]
add rdx, 0x3d0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
add rdx, 0x30
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rbx, qword [rbp - 0x19]
xorps xmm0, xmm0
unpcklps xmm0, xmm7
mov r9d, 0xc
movsd qword [rbp + 7], xmm0
movss dword [rbp + 0xf], xmm7
mov rcx, qword [rcx]
lea rdx, [rbx + 0x30]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14003792c
movss xmm2, dword [0x1400cfde8]
movss xmm0, dword [rbp - 9]
movss xmm1, dword [rbp - 0x41]
mulss xmm1, xmm2
addss xmm0, xmm1
movss xmm1, dword [rbp - 0x3d]
mulss xmm1, xmm2
movss dword [rbp - 9], xmm0
movss xmm0, dword [rbp - 5]
addss xmm0, xmm1
movss xmm1, dword [rbp - 0x39]
mulss xmm1, xmm2
movss dword [rbp - 5], xmm0
movss xmm0, dword [rbp - 1]
addss xmm0, xmm1
movss dword [rbp - 1], xmm0
mov eax, dword [rbp - 1]
lea r8, [rbp + 7]
movsd xmm0, qword [rbp - 9]
mov r9d, 0xc
mov rcx, qword [0x1401099c8]
mov dword [rbp + 0xf], eax
mov rax, qword [0x1401099b0]
movsd qword [rbp + 7], xmm0
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x38]
add rdx, 0x90
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1401099c8]
lea rdx, [rbx + 0x50]
movsd xmm0, qword [rbp - 9]
lea r8, [rbp + 0x17]
mov eax, dword [rbp - 1]
mov r9d, 0xc
movsd qword [rbp + 0x17], xmm0
mov dword [rbp + 0x1f], eax
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
movaps xmm7, xmmword [rsp + 0xb0]
mov rbx, qword [rsp + 0xe0]
cmp byte [rax + 0xf], sil
je 0x140037a26
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0x30]
mov rcx, qword [rcx]
add rdx, 0x10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140109998]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov rdx, qword [rbp - 0x19]
add rdx, 0x30
mov qword [rsp + 0x20], rsi
movd xmm0, dword [rax + 0x28]
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x29], xmm0
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x30], sil
je 0x140037ad4
cmp byte [0x140109842], sil
jne 0x140037ad4
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xb0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rdx, qword [rbp - 0x19]
mov r9d, 8
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov rdx, qword [rbp + 7]
mov r9d, 4
mov dword [rbp - 0x29], 0x14
add rdx, 0x120
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x140109842], 1
mov rax, qword [0x140109998]
cmp byte [rax + 0x32], sil
je 0x140037b7b
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xb0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rdx, qword [rbp - 0x19]
mov r9d, 8
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140109998]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov rdx, qword [rbp + 7]
add rdx, 0x2fc
mov qword [rsp + 0x20], rsi
movd xmm0, dword [rax + 0x34]
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x29], xmm0
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x2c], sil
je 0x140037c15
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xb0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rdx, qword [rbp - 0x19]
mov r9d, 8
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov rdx, qword [rbp + 7]
mov dword [rbp - 0x29], esi
add rdx, qword [rax + 0x40]
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x2d], sil
je 0x140037cb2
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xb0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rdx, qword [rbp - 0x19]
mov r9d, 8
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov rdx, qword [rbp + 7]
mov dword [rbp - 0x29], esi
add rdx, qword [rax + 0xc8]
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x2f], sil
je 0x140037d53
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xb0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rdx, qword [rbp - 0x19]
mov r9d, 8
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov rdx, qword [rbp + 7]
mov dword [rbp - 0x29], 0x41600000
add rdx, qword [rax + 0xc0]
mov rcx, qword [rcx]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x31], sil
je 0x140037ded
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xb0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp + 7]
mov rdx, qword [rbp - 0x19]
mov r9d, 8
add rdx, 0x20
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov rdx, qword [rbp + 7]
mov r9d, 4
mov dword [rbp - 0x29], 0x43960000
add rdx, 0xb0
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x2e], sil
je 0x140037e68
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xa0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x140037e68
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x29]
mov rcx, qword [0x1401099c8]
mov r9d, 4
mov dword [rbp - 0x29], 0x1000
mov qword [rsp + 0x20], rsi
add rdx, qword [rax + 0x98]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x120], sil
je 0x140037edf
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xd0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x140037edf
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov dword [rbp - 0x29], 1
add rdx, 0x92a
mov r9d, 4
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rax, qword [0x140109998]
cmp byte [rax + 0x120], sil
je 0x140037f56
mov rax, qword [0x1401099b0]
lea r8, [rbp - 0x19]
mov rcx, qword [0x1401099c8]
mov r9d, 8
mov qword [rsp + 0x20], rsi
mov rdx, qword [rax + 0xd0]
add rdx, qword [rax + 0x38]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x19]
test rdx, rdx
je 0x140037f56
mov rcx, qword [0x1401099c8]
lea r8, [rbp - 0x29]
mov dword [rbp - 0x29], 1
add rdx, 0x92a
mov r9d, 4
mov qword [rsp + 0x20], rsi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400470e0
mov rsi, qword [rsp + 0xf0]
add rsp, 0xd0
pop rbp
ret