Function at 0x140003690
Capabilities:
Check for time delay via gettickcount
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x458]
sub rsp, 0x530
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140088a00]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov r15, rcx
mov qword [rbp - 8], rcx
xor r14d, r14d
mov rax, qword [0x140088e48]
cmp rax, qword [0x140088e50]
je 0x140003727
mov qword [0x140088e50], rax
lea rcx, [0x1400610a0]
call sub.MSVCP140.dll__Mtx_lock
test eax, eax
jne 0x140005b59
cmp dword [0x1400610ec], 0x7fffffff
je 0x140005b64
mov rcx, qword [0x140088b60]
add rcx, 0x1d8
call fcn.140002b60
mov qword [0x140088b68], rax
lea rcx, [rax + 0x38]
call fcn.140002b60
mov rcx, rax
call fcn.140002b60
mov qword [0x140088b78], rax
lea rcx, [rax + 0x30]
call fcn.140002b60
mov qword [0x140088b90], rax
lea rcx, [rax + 0x338]
call fcn.140002b60
mov qword [0x140088b80], rax
lea rcx, [rax + 0x9d8]
call fcn.140002b60
mov qword [0x140088bb0], rax
mov rcx, qword [0x140088b80]
add rcx, 0x310
call fcn.140002b60
mov qword [0x140088ba0], rax
mov rcx, qword [0x140088b80]
add rcx, 0x298
call fcn.140002b60
mov qword [0x140088b88], rax
mov rcx, qword [0x140088b80]
add rcx, 0x198
call fcn.140002b60
mov qword [0x140088b98], rax
mov rcx, qword [0x140088b88]
add rcx, 0x1201
call fcn.1400027c0
movsx edx, al
mov dword [0x140088bbc], edx
mov rcx, qword [0x140088b60]
add rcx, 0x160
call fcn.140002b60
mov qword [0x140088b70], rax
lea rcx, [rax + 0x2a8]
call fcn.140002b60
mov qword [0x140088ba8], rax
mov rcx, qword [0x140088b70]
add rcx, 0x2b0
call fcn.1400028b0
mov dword [0x140088bc0], eax
lea rcx, [0x1400610a0]
call sub.MSVCP140.dll__Mtx_unlock
mov dword [0x1400610f0], 0x7f7fffff
mov qword [0x140088c10], r14
mov qword [0x140088c20], r14
call fcn.14000c7c0
movdqa xmm14, xmmword [0x1400522a0]
cmp byte [0x140088e68], r14b
je 0x140003916
call fcn.140017350
mov rbx, rax
movups xmmword [rbp - 0x80], xmm14
lea rcx, [rbp - 0x80]
call fcn.140014820
mov r9d, eax
mov eax, dword [0x140088bcc]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x140088bc8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss xmm10, dword [0x140051fe0]
movss dword [rsp + 0x28], xmm10
mov dword [rsp + 0x20], 0x40
movss xmm2, dword [0x140061028]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14002a5c0
jmp 0x14000391f
movss xmm10, dword [0x140051fe0]
movss xmm6, dword [0x140051fc4]
cmp byte [0x140061092], r14b
je 0x140003a8f
call fcn.1400178d0
movss xmm2, dword [rax + 0xcc]
cvtps2pd xmm2, xmm2
movq r8, xmm2
lea rdx, str.Frames_p_s__FPS______.0f
lea rcx, [rbp + 0x280]
call fcn.140002e00
mov dword [rsp + 0x40], 0x41700000
mov dword [rsp + 0x44], 0x41700000
call fcn.140017350
mov rbx, rax
movss xmm1, dword [rsp + 0x44]
addss xmm1, xmm6
movss xmm0, dword [rsp + 0x40]
addss xmm0, xmm6
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x280]
mov r8d, 0xff000000
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.14002e130
movss xmm1, dword [rsp + 0x44]
addss xmm1, xmm6
movss xmm0, dword [rsp + 0x40]
subss xmm0, xmm6
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x280]
mov r8d, 0xff000000
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14002e130
movss xmm1, dword [rsp + 0x44]
subss xmm1, xmm6
movss xmm0, dword [rsp + 0x40]
addss xmm0, xmm6
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x280]
mov r8d, 0xff000000
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14002e130
movss xmm1, dword [rsp + 0x44]
subss xmm1, xmm6
movss xmm0, dword [rsp + 0x40]
subss xmm0, xmm6
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x280]
mov r8d, 0xff000000
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.14002e130
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x280]
mov r8d, 0xffffffff
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14002e130
call fcn.1400178d0
call fcn.1400178d0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r14
mov ecx, dword [0x140088bc0]
lea eax, [rcx + rcx]
movsxd rdx, eax
mov qword [rsp + 0x40], rdx
test eax, eax
je 0x140003ae4
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
ja 0x140005b79
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.1400024e0
mov ecx, dword [0x140088bc0]
mov edi, r14d
test ecx, ecx
jle 0x140003bb6
mov rbx, qword [rsp + 0x70]
nop dword [rax]
nop dword [rax + rax]
movsxd rcx, edi
mov rax, qword [0x140088ba8]
lea rcx, [rax + rcx*8]
call fcn.140002b60
mov rsi, rax
test rax, rax
je 0x140003ba8
lea rcx, [rax + 0x308]
call fcn.140002b60
test rax, rax
je 0x140003ba8
cmp rax, qword [0x140088b80]
je 0x140003ba8
add rax, 0x6d0
mov qword [rsp + 0x40], rax
cmp rbx, qword [rsp + 0x78]
je 0x140003b59
mov qword [rbx], rax
add rbx, 8
mov qword [rsp + 0x70], rbx
jmp 0x140003b70
lea r8, [rsp + 0x40]
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.1400022f0
mov rbx, qword [rsp + 0x70]
add rsi, 0x29a
mov qword [rsp + 0x40], rsi
cmp rbx, qword [rsp + 0x78]
je 0x140003b91
mov qword [rbx], rsi
add rbx, 8
mov qword [rsp + 0x70], rbx
jmp 0x140003ba8
lea r8, [rsp + 0x40]
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.1400022f0
mov rbx, qword [rsp + 0x70]
inc edi
cmp edi, dword [0x140088bc0]
jl 0x140003b00
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x10]
call fcn.140002550
nop
mov r12d, r14d
mov dword [rsp + 0x40], r14d
xorps xmm9, xmm9
cmp dword [0x140088bc0], r14d
jle 0x140005431
movss xmm15, dword [0x140052060]
nop word [rax + rax]
mov rcx, qword [0x140088bf8]
call fcn.14001fe70
movsxd rcx, r12d
mov rax, qword [0x140088ba8]
lea rcx, [rax + rcx*8]
call fcn.140002b60
mov r14, rax
mov qword [rbp - 0x70], rax
lea rcx, [rax + 0x308]
call fcn.140002b60
mov rsi, rax
mov qword [rbp], rax
cmp rax, qword [0x140088b80]
je 0x1400053fa
lea rcx, [rax + 0x310]
call fcn.140002b60
mov rdi, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x1400053fa
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.140006c90
movsd xmm0, qword [rbp + 0x1e0]
ucomisd xmm0, xmm9
jp 0x140003c9b
jne 0x140003c9b
movsd xmm0, qword [rbp + 0x1e8]
ucomisd xmm0, xmm9
jp 0x140003c9b
jne 0x140003c9b
movsd xmm0, qword [rbp + 0x1f0]
ucomisd xmm0, xmm9
jp 0x140003c9b
je 0x1400053fa
mov r8d, 2
mov rdx, rdi
lea rcx, [rbp + 0x220]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x1e0], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1f0], xmm1
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xe8]
call fcn.14000d720
movsd xmm1, qword [rbp + 0xe8]
comisd xmm1, xmm9
jbe 0x1400053fa
movd xmm0, dword [0x140088bc8]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm1
jbe 0x1400053fa
movsd xmm1, qword [rbp + 0xf0]
comisd xmm1, xmm9
jbe 0x1400053fa
movd xmm0, dword [0x140088bcc]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm1
jbe 0x1400053fa
lea rcx, [rsi + 0x758]
call fcn.1400027c0
test al, 0xf8
jne 0x1400053fa
cmp byte [0x14006100c], 0
je 0x140003d6b
cmp qword [0x140088b80], 0
je 0x140003d6b
lea rcx, [r14 + 0x1201]
call fcn.1400028b0
cmp dword [0x140088bbc], eax
je 0x1400053fa
lea eax, [r12*8]
movsxd rcx, eax
add rcx, qword [0x140088ba8]
call fcn.140002b60
mov rdi, rax
lea rcx, [rsi + 0x310]
call fcn.140002b60
mov r14, rax
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.140006c90
movups xmm6, xmmword [rbp + 0x190]
movaps xmmword [rbp + 0x1e0], xmm6
movsd xmm7, qword [rbp + 0x1a0]
movsd qword [rbp + 0x1f0], xmm7
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x170]
call fcn.14000d720
mov r8d, 0x6e
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140006c90
mov r8d, 0x6e
mov rdx, r14
lea rcx, [rbp + 0x220]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x28]
call fcn.14000d720
mov r8d, 0x6e
mov rdx, r14
lea rcx, [rbp - 0x60]
call fcn.140006c90
mov ecx, 0x2e0
call fcn.1400029a0
mov ecx, 0x2e8
call fcn.1400029a0
movsd xmm2, qword [rbp - 0x50]
addsd xmm2, qword [0x140052018]
movups xmm1, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x190], xmm1
movsd qword [rbp + 0x230], xmm2
movsd qword [rbp + 0x1a0], xmm2
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xf8]
call fcn.14000d720
movsd xmm2, qword [rsp + 0x60]
subsd xmm2, qword [0x140051fe8]
movsd xmm0, qword [rsp + 0x58]
movsd xmm1, qword [rsp + 0x50]
unpcklpd xmm1, xmm0
movaps xmmword [rbp + 0x190], xmm1
movsd qword [rbp + 0x230], xmm2
movsd qword [rbp + 0x1a0], xmm2
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x40]
call fcn.14000d720
movsd xmm11, qword [rbp - 0x20]
movaps xmm0, xmm11
subsd xmm0, qword [rbp + 0x178]
andps xmm0, xmmword [0x1400522d0]
cvtpd2ps xmm13, xmm0
movaps xmm1, xmm6
unpckhpd xmm1, xmm6
subsd xmm1, qword [0x140088cc8]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm1
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm8, xmm0
subsd xmm6, qword [0x140088cc0]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm6
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
subsd xmm7, qword [0x140088cd0]
cvtpd2ps xmm0, xmm7
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm8
ja 0x140003f57
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x140003f60
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvtss2sd xmm0, xmm0
divsd xmm0, qword [0x140052038]
subsd xmm0, qword [0x140052000]
xorps xmm12, xmm12
cvtsd2ss xmm12, xmm0
movss dword [rsp + 0x50], xmm12
movd xmm0, dword [0x140061058]
cvtdq2ps xmm0, xmm0
comiss xmm12, xmm0
ja 0x1400053fa
cmp byte [0x140061008], 0
je 0x14000402f
mov eax, dword [0x140088bc8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm2, qword [rbp - 0x28]
subsd xmm2, xmm0
mov eax, dword [0x140088bcc]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm11
subsd xmm1, xmm0
mulsd xmm1, xmm1
mulsd xmm2, xmm2
addsd xmm1, xmm2
cvtpd2ps xmm3, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x140003ffe
xorps xmm0, xmm0
sqrtss xmm0, xmm3
jmp 0x140004006
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [0x140061028]
comiss xmm1, xmm0
jbe 0x14000402f
movss xmm1, dword [0x1400610f0]
comiss xmm1, xmm0
jbe 0x14000402f
movss dword [0x1400610f0], xmm0
mov qword [0x140088c10], rsi
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp + 0x220]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x180]
call fcn.14000d720
mov r8d, 0x56
mov rdx, r14
lea rcx, [rbp + 0x220]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1e0]
call fcn.14000d720
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movsd xmm8, qword [rbp + 0x100]
movaps xmm0, xmm8
subsd xmm0, qword [rbp + 0x188]
andps xmm0, xmmword [0x1400522d0]
cvtpd2ps xmm11, xmm0
mulss xmm13, dword [0x140051fc0]
lea rcx, [r14 + 0x2e0]
call fcn.1400029a0
movaps xmm6, xmm0
lea rcx, [r14 + 0x2e8]
call fcn.1400029a0
addss xmm0, dword [0x140051fb4]
comiss xmm0, xmm6
setae r13b
xorps xmm10, xmm10
cmp byte [0x140061041], 0
je 0x14000414e
movdqa xmmword [rbp - 0x60], xmm14
movups xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp + 0x1e0], xmm0
cvttss2si eax, xmm12
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8b, 1
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x1e0]
call fcn.140005e10
movsd xmm7, qword [rbp + 0xf8]
cmp byte [0x14006103b], 0
je 0x14000442b
mov rdx, rdi
lea rcx, [rbp + 0x1b0]
call fcn.14000d3f0
nop
movsd xmm0, qword [str.dAVF_WZ_]
movsd qword [rbp + 0x210], xmm0
mov ecx, dword [0x140051a68]
mov dword [rbp + 0x218], ecx
movzx eax, word [0x140051a6c]
mov word [rbp + 0x21c], ax
movzx eax, byte [0x140051a6e]
mov byte [rbp + 0x21e], al
xor ebx, ebx
mov r8d, ebx
cmp dword [0x140088a58], 2
jl 0x140004313
movdqa xmm3, xmmword [0x1400520e0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
movdqa xmm2, xmmword [0x1400522b0]
pmuldq xmm1, xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm5, xmmword [0x140052120]
pmulld xmm0, xmm5
movdqa xmm1, xmm3
psubd xmm1, xmm0
movdqa xmm4, xmmword [0x140052130]
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movdqa xmm6, xmmword [0x140052140]
paddb xmm1, xmm6
movd xmm0, dword [str.dAVF_WZ_]
xorps xmm1, xmm0
movd dword [rbp + 0x210], xmm1
movdqa xmm3, xmmword [0x1400520f0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
movdqa xmm1, xmm3
psubd xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm6
movd xmm0, dword [rbp + 0x214]
xorps xmm1, xmm0
movd dword [rbp + 0x214], xmm1
movdqa xmm3, xmmword [0x140052100]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
movdqa xmm1, xmm3
psubd xmm1, xmm0
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
paddb xmm1, xmm6
movd xmm0, ecx
xorps xmm1, xmm0
movd dword [rbp + 0x218], xmm1
mov r8d, 0xc
mov eax, r8d
lea r9, [rbp + 0x210]
add r9, rax
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x140004320
movups xmm12, xmmword [rbp + 0x1b0]
movaps xmmword [rbp + 0x220], xmm12
movups xmm6, xmmword [rbp + 0x1c0]
movaps xmmword [rbp + 0x230], xmm6
lea r8, [rbp + 0x220]
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x240]
call fcn.140002e60
movaps xmm10, xmm15
movdqa xmmword [rbp + 0x1e0], xmm14
movaps xmm0, xmm8
subsd xmm0, qword [0x140052010]
cvttsd2si r8d, xmm0
movaps xmm1, xmm7
subsd xmm1, qword [0x140052010]
cvttsd2si edx, xmm1
lea rax, [rbp + 0x240]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
lea r9, [rbp + 0x1e0]
movaps xmm0, xmm15
movd ecx, xmm0
call fcn.140006200
nop
psrldq xmm6, 8
movq rdx, xmm6
cmp rdx, 0xf
jbe 0x140004422
inc rdx
movq rcx, xmm12
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000441d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000541c
call fcn.14004d8bc
movss xmm12, dword [rsp + 0x50]
jmp 0x14000442d
xor ebx, ebx
cmp byte [0x14006103c], 0
je 0x1400048cf
lea rcx, [rdi + 0x3f0]
call fcn.140002b60
test rax, rax
jne 0x14000448d
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov ebx, 8
mov qword [rbp + 0x1c0], rbx
mov edi, 0xf
mov qword [rbp + 0x1c8], rdi
movabs rax, 0x6941202f20746f42
mov rsi, rax
mov qword [rbp + 0x1b0], rax
mov byte [rbp + 0x1b8], 0
jmp 0x140004618
mov dword [rbp + 0x201], ebx
mov word [rbp + 0x205], bx
mov byte [rbp + 0x207], 0
mov dword [rbp + 0x1e0], 0x3e7a1c4
mov qword [rbp + 0x1e8], rax
lea rax, [rbp + 0x280]
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], 0x80
mov eax, dword [0x140088c0c]
mov dword [rbp + 0x1e4], eax
mov byte [rbp + 0x200], 0
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0x28
lea r8, [rbp + 0x1e0]
mov edx, 0x23198c
mov rcx, qword [0x140088c88]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
xorps xmm0, xmm0
movups xmmword [rbp + 0x220], xmm0
mov qword [rbp + 0x230], rbx
mov qword [rbp + 0x238], rbx
lea rax, [rbp + 0x280]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140004540
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x220]
call fcn.140001c70
nop
lea rdx, [rbp + 0x220]
cmp qword [rbp + 0x238], 7
cmova rdx, qword [rbp + 0x220]
mov rax, qword [rbp + 0x230]
lea r8, [rdx + rax*2]
lea rdx, [rbp + 0x220]
cmova rdx, qword [rbp + 0x220]
lea r9, [rsp + 0x48]
lea rcx, [rbp + 0x190]
call fcn.140001530
movups xmm0, xmmword [rbp + 0x190]
movups xmmword [rbp + 0x1b0], xmm0
movups xmm1, xmmword [rbp + 0x1a0]
movups xmmword [rbp + 0x1c0], xmm1
mov rdx, qword [rbp + 0x238]
cmp rdx, 7
jbe 0x140004603
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005423
call fcn.14004d8bc
mov rsi, qword [rbp + 0x1b0]
mov rbx, qword [rbp + 0x1c0]
mov rdi, qword [rbp + 0x1c8]
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x14000464a
mov r8, rbx
lea rdx, [0x140051a84]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000464a
movdqa xmm6, xmm14
jmp 0x1400047b8
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x14000467f
mov r8, rbx
lea rdx, [0x140051a88]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000467f
movdqa xmm6, xmmword [0x140052190]
jmp 0x1400047b8
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x1400046b4
mov r8, rbx
lea rdx, [0x140051a8c]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400046b4
movdqa xmm6, xmmword [0x140052190]
jmp 0x1400047b8
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x1400046e9
mov r8, rbx
lea rdx, [0x140051a90]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400046e9
movdqa xmm6, xmmword [0x140052270]
jmp 0x1400047b8
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x14000471e
mov r8, rbx
lea rdx, [0x140051a94]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14000471e
movdqa xmm6, xmmword [0x140052190]
jmp 0x1400047b8
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x140004750
mov r8, rbx
lea rdx, [0x140051a98]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140004750
movdqa xmm6, xmmword [0x140052270]
jmp 0x1400047b8
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x140004782
mov r8, rbx
lea rdx, [0x140051a9c]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140004782
movdqa xmm6, xmmword [0x140052240]
jmp 0x1400047b8
lea rcx, [rbp + 0x1b0]
cmp rdi, 0xf
cmova rcx, rsi
cmp rbx, 3
jne 0x1400047b4
mov r8, rbx
lea rdx, [0x140051aa0]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400047b4
movdqa xmm6, xmmword [0x140052180]
jmp 0x1400047b8
movaps xmm6, xmm14
lea rdx, str.Platform___
lea rcx, [rbp + 0x240]
call fcn.140002e60
addss xmm10, xmm15
movaps xmm0, xmm7
subsd xmm0, qword [0x140052020]
cvttsd2si ebx, xmm0
movdqa xmmword [rbp + 0x1e0], xmm14
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
movaps xmm1, xmm8
subsd xmm1, xmm0
cvttsd2si edi, xmm1
lea rax, [rbp + 0x240]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
lea r9, [rbp + 0x1e0]
mov r8d, edi
mov edx, ebx
movaps xmm0, xmm15
movd ecx, xmm0
call fcn.140006200
lea r8, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0xf
cmova r8, qword [rbp + 0x1b0]
lea rdx, [0x140051ab8]
lea rcx, [rbp + 0x240]
call fcn.140002e60
lea edx, [rbx + 0x37]
movdqa xmmword [rbp + 0x1e0], xmm6
lea rax, [rbp + 0x240]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
lea r9, [rbp + 0x1e0]
mov r8d, edi
movaps xmm0, xmm15
movd ecx, xmm0
call fcn.140006200
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0xf
jbe 0x1400048cf
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000542a
call fcn.14004d8bc
cmp byte [0x140061042], 0
je 0x140004b8c
movups xmm2, xmmword [str.u___TXT_]
movups xmmword [rbp + 0x1e0], xmm2
movzx eax, byte [0x140051a80]
mov byte [rbp + 0x1f0], al
xor r8d, r8d
cmp dword [0x140088a58], 2
jl 0x140004acb
movdqa xmm4, xmmword [0x1400520e0]
movdqa xmm1, xmm4
punpckldq xmm1, xmm4
movdqa xmm3, xmmword [0x1400522b0]
pmuldq xmm1, xmm3
movdqa xmm0, xmm4
punpckhdq xmm0, xmm4
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm5, xmmword [0x140052120]
pmulld xmm0, xmm5
movdqa xmm1, xmm4
psubd xmm1, xmm0
movdqa xmm4, xmmword [0x140052130]
andps xmm1, xmm4
packuswb xmm1, xmm1
packuswb xmm1, xmm1
mov ecx, dword [0x140052140]
movd xmm0, ecx
paddb xmm1, xmm0
movd eax, xmm2
movd xmm0, eax
xorps xmm1, xmm0
movd dword [rbp + 0x1e0], xmm1
movdqa xmm2, xmmword [0x1400520f0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x1e4]
xorps xmm2, xmm1
movd dword [rbp + 0x1e4], xmm2
movdqa xmm2, xmmword [0x140052100]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x1e8]
xorps xmm2, xmm1
movd dword [rbp + 0x1e8], xmm2
movdqa xmm2, xmmword [0x140052110]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, ecx
paddb xmm2, xmm0
movd xmm1, dword [rbp + 0x1ec]
xorps xmm2, xmm1
movd dword [rbp + 0x1ec], xmm2
mov r8d, 0x10
mov eax, r8d
lea r9, [rbp + 0x1e0]
add r9, rax
nop dword [rax + rax]
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x34
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x11
jl 0x140004ae0
xorps xmm2, xmm2
cvtss2sd xmm2, xmm12
movq r8, xmm2
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x240]
call fcn.140002e60
addss xmm10, xmm15
movdqa xmmword [rbp + 0x1e0], xmm14
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
movaps xmm1, xmm8
subsd xmm1, xmm0
cvttsd2si r8d, xmm1
movaps xmm2, xmm7
subsd xmm2, qword [0x140052010]
cvttsd2si edx, xmm2
lea rax, [rbp + 0x240]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
lea r9, [rbp + 0x1e0]
movaps xmm0, xmm15
movd ecx, xmm0
call fcn.140006200
movups xmmword [rbp - 0x60], xmm14
movdqa xmm0, xmmword [0x140052170]
movups xmmword [rsp + 0x50], xmm0
cmp byte [0x140061030], 0
je 0x140004cfa
cvttss2si ebx, xmm13
cmp qword [0x140088b80], 0
je 0x140004c5d
cmp byte [0x14006105c], 0
je 0x140004c10
mov eax, ebx
cdq
and edx, 3
add eax, edx
sar eax, 2
movd xmm0, eax
mov dword [rsp + 0x30], 2
lea rax, [rsp + 0x50]
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm7
mov qword [rsp + 0x28], rax
cvttss2si ecx, xmm11
subsd xmm1, xmm0
mov dword [rsp + 0x20], ecx
mov r9d, ebx
cvttsd2si r8d, xmm8
cvttsd2si edx, xmm1
mov rcx, r15
call fcn.140005bc0
mov eax, ebx
cdq
and edx, 3
add eax, edx
sar eax, 2
movd xmm0, eax
cvtdq2pd xmm0, xmm0
subsd xmm7, xmm0
cvttsd2si r8d, xmm8
mov rcx, r15
cvttss2si eax, xmm11
cvttsd2si edx, xmm7
mov dword [rsp + 0x30], 1
lea r13, [0x140061060]
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], eax
mov r9d, ebx
call fcn.140005bc0
jmp 0x140004d01
mulss xmm13, dword [0x140051fbc]
cvttss2si ebx, xmm13
cmp byte [0x14006105c], 0
je 0x140004cb9
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
cvttsd2si r8d, xmm8
cvttss2si ecx, xmm11
movd xmm0, eax
mov dword [rsp + 0x30], 2
lea rax, [rsp + 0x50]
cvtdq2pd xmm0, xmm0
movaps xmm1, xmm7
mov qword [rsp + 0x28], rax
subsd xmm1, xmm0
mov dword [rsp + 0x20], ecx
mov r9d, ebx
cvttsd2si edx, xmm1
mov rcx, r15
call fcn.140005bc0
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov dword [rsp + 0x30], 1
lea rax, [rbp - 0x60]
cvtdq2pd xmm0, xmm0
mov qword [rsp + 0x28], rax
cvttss2si ecx, xmm11
subsd xmm7, xmm0
mov dword [rsp + 0x20], ecx
mov r9d, ebx
cvttsd2si r8d, xmm8
cvttsd2si edx, xmm7
mov rcx, r15
call fcn.140005bc0
lea r13, [0x140061060]
cmp byte [0x14006103a], 0
je 0x14000534a
mov r8d, 0x6e
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x108]
call fcn.14000d720
mov r8d, 0x42
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x18]
call fcn.14000d720
mov r8d, 9
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x38]
call fcn.14000d720
mov r8d, 0xa
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x48]
call fcn.14000d720
mov r8d, 0xb
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x58]
call fcn.14000d720
mov r8d, 0x26
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x28]
call fcn.14000d720
mov r8d, 0x27
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x68]
call fcn.14000d720
mov r8d, 0x28
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x78]
call fcn.14000d720
mov r8d, 2
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x88]
call fcn.14000d720
mov r8d, 0x47
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x98]
call fcn.14000d720
mov r8d, 0x48
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xa8]
call fcn.14000d720
mov r8d, 0x49
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xb8]
call fcn.14000d720
mov r8d, 0x4e
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xc8]
call fcn.14000d720
mov r8d, 0x4f
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xd8]
call fcn.14000d720
mov r8d, 0x52
mov rdx, r14
lea rcx, [rbp + 0x1b0]
call fcn.140006c90
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x190], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1a0], xmm1
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x80]
call fcn.14000d720
cvttsd2si ebx, qword [rbp + 0x110]
cvttsd2si edi, qword [rbp + 0x108]
cvttsd2si edx, qword [rbp - 0x20]
cvttsd2si ecx, qword [rbp - 0x28]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
mov r9d, ebx
mov r8d, edi
call fcn.140005ca0
cvttsd2si r13d, qword [rbp - 0x10]
cvttsd2si esi, qword [rbp - 0x18]
mov dword [rsp + 0x28], 1
lea rax, [0x140061060]
mov qword [rsp + 0x20], rax
mov r9d, r13d
mov r8d, esi
mov edx, ebx
mov ecx, edi
call fcn.140005ca0
cvttsd2si r15d, qword [rbp + 0x30]
cvttsd2si r12d, qword [rbp + 0x28]
mov dword [rsp + 0x28], 1
lea rbx, [0x140061060]
mov qword [rsp + 0x20], rbx
mov r9d, r15d
mov r8d, r12d
mov edx, r13d
mov ecx, esi
call fcn.140005ca0
cvttsd2si esi, qword [rbp + 0x40]
cvttsd2si r14d, qword [rbp + 0x38]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbx
mov r9d, r13d
cvttsd2si r8d, qword [rbp - 0x18]
mov edx, esi
mov ecx, r14d
call fcn.140005ca0
cvttsd2si ebx, qword [rbp + 0x50]
cvttsd2si edi, qword [rbp + 0x48]
mov dword [rsp + 0x28], 1
lea rax, [0x140061060]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8d, edi
mov edx, esi
mov ecx, r14d
call fcn.140005ca0
cvttsd2si r9d, qword [rbp + 0x60]
cvttsd2si r8d, qword [rbp + 0x58]
mov dword [rsp + 0x28], 1
lea rsi, [0x140061060]
mov qword [rsp + 0x20], rsi
mov edx, ebx
mov ecx, edi
call fcn.140005ca0
cvttsd2si ebx, qword [rbp + 0x70]
cvttsd2si edi, qword [rbp + 0x68]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
mov r9d, ebx
mov r8d, edi
mov edx, r15d
mov ecx, r12d
call fcn.140005ca0
cvttsd2si r9d, qword [rbp + 0x80]
cvttsd2si r8d, qword [rbp + 0x78]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
mov edx, ebx
mov ecx, edi
call fcn.140005ca0
cvttsd2si r15d, qword [rbp + 0x90]
cvttsd2si r12d, qword [rbp + 0x88]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rsi
mov r9d, r15d
mov r8d, r12d
mov edx, r13d
cvttsd2si ecx, qword [rbp - 0x18]
call fcn.140005ca0
cvttsd2si esi, qword [rbp + 0xa0]
cvttsd2si r14d, qword [rbp + 0x98]
mov dword [rsp + 0x28], 1
lea r13, [0x140061060]
mov qword [rsp + 0x20], r13
mov r9d, esi
mov r8d, r14d
mov edx, r15d
mov ecx, r12d
call fcn.140005ca0
cvttsd2si ebx, qword [rbp + 0xb0]
cvttsd2si edi, qword [rbp + 0xa8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
mov r9d, ebx
mov r8d, edi
mov edx, esi
mov ecx, r14d
call fcn.140005ca0
cvttsd2si r9d, qword [rbp + 0xc0]
cvttsd2si r8d, qword [rbp + 0xb8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
mov edx, ebx
mov ecx, edi
call fcn.140005ca0
cvttsd2si esi, qword [rbp + 0xd0]
cvttsd2si r14d, qword [rbp + 0xc8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
mov r9d, esi
mov r8d, r14d
mov edx, r15d
mov ecx, r12d
call fcn.140005ca0
cvttsd2si ebx, qword [rbp + 0xe0]
cvttsd2si edi, qword [rbp + 0xd8]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
mov r9d, ebx
mov r8d, edi
mov edx, esi
mov ecx, r14d
call fcn.140005ca0
cvttsd2si r9d, qword [rbp - 0x78]
cvttsd2si r8d, qword [rbp - 0x80]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r13
mov edx, ebx
mov ecx, edi
call fcn.140005ca0
mov r15, qword [rbp - 8]
mov r12d, dword [rsp + 0x40]
xor r14d, r14d
mov qword [rbp + 0x130], r14
xorps xmm2, xmm2
movdqu xmmword [rbp + 0x140], xmm2
movups xmmword [rbp + 0x158], xmm9
movsd qword [rbp + 0x150], xmm9
xor eax, eax
mov qword [rbp + 0x168], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x128], rax
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x138], rax
mov rdx, qword [0x140088e50]
cmp rdx, qword [0x140088e58]
je 0x1400053e5
movups xmm0, xmmword [rbp + 0x120]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rbp + 0x130]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx + 0x20], xmm2
movaps xmm0, xmm9
unpcklpd xmm0, xmm9
movups xmmword [rdx + 0x30], xmm0
movups xmm0, xmmword [rbp + 0x160]
movups xmmword [rdx + 0x40], xmm0
add qword [0x140088e50], 0x50
jmp 0x1400053fd
lea r8, [rbp + 0x120]
lea rcx, [0x140088e48]
call fcn.1400020c0
jmp 0x1400053fd
xor r14d, r14d
inc r12d
mov dword [rsp + 0x40], r12d
cmp r12d, dword [0x140088bc0]
jge 0x140005431
movss xmm10, dword [0x140051fe0]
jmp 0x140003bf0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x140088c10]
test rcx, rcx
je 0x1400058ab
cmp byte [0x140061008], 0
je 0x1400058ab
add rcx, 0x310
call fcn.140002b60
mov rbx, rax
call fcn.14000c7c0
mov r8d, 0x6e
mov rdx, rbx
lea rcx, [rbp + 0x1e0]
call fcn.140006c90
movups xmm8, xmmword [rbp + 0x1e0]
movaps xmmword [rbp + 0x190], xmm8
movsd xmm14, qword [rbp + 0x1f0]
movsd qword [rbp + 0x1a0], xmm14
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x80]
call fcn.14000d720
movsd xmm13, qword [rbp - 0x78]
movups xmm11, xmmword [rbp - 0x80]
ucomisd xmm11, xmm9
jp 0x14000556c
jne 0x14000556c
ucomisd xmm13, xmm9
jp 0x1400054d2
je 0x1400058bc
mov eax, dword [0x140088bcc]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mov eax, dword [0x140088bc8]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2pd xmm7, xmm7
movss xmm10, dword [0x140051fe0]
movaps xmm0, xmm10
movaps xmm2, xmm0
subsd xmm1, xmm13
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm2
call fcn.14004dd10
movaps xmm6, xmm0
subsd xmm7, xmm11
cvtpd2ps xmm0, xmm7
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm1, xmm0
addss xmm1, xmm6
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140005546
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14000554e
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
movss xmm0, dword [0x140061028]
cvtps2pd xmm0, xmm0
comisd xmm0, xmm1
jb 0x1400058bc
jmp 0x140005575
movss xmm10, dword [0x140051fe0]
cmp byte [0x14006100e], 0
je 0x1400055aa
lea rcx, [rbx + 0x2e0]
call fcn.1400029a0
movaps xmm6, xmm0
lea rcx, [rbx + 0x2e8]
call fcn.1400029a0
addss xmm0, dword [0x140051fb4]
comiss xmm0, xmm6
jb 0x1400058bc
mov ecx, dword [0x140061014]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400058bc
cmp byte [0x14006100b], 0
je 0x14000588d
mov rcx, qword [0x140088bb0]
add rcx, 0x1d20
call fcn.1400029a0
movaps xmm15, xmm0
mov rcx, qword [0x140088bb0]
add rcx, 0x1d24
call fcn.1400029a0
movaps xmm6, xmm0
mov rcx, qword [0x140088c10]
add rcx, 0x198
call fcn.140002b60
mov rbx, rax
movaps xmm12, xmm8
unpckhpd xmm12, xmm8
movaps xmm1, xmm12
subsd xmm1, qword [0x140088cc8]
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm1
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm7, xmm0
movaps xmm0, xmm8
subsd xmm0, qword [0x140088cc0]
cvtsd2ss xmm0, xmm0
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
movsd xmm10, qword [rbp + 0x1f0]
movaps xmm2, xmm10
subsd xmm2, qword [0x140088cd0]
cvtpd2ps xmm0, xmm2
movss xmm1, dword [0x140051fe0]
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm7
ja 0x14000568f
xorps xmm0, xmm0
sqrtss xmm0, xmm7
jmp 0x140005697
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm7, xmm7
cvtss2sd xmm7, xmm0
lea rcx, [rbx + 0x168]
movsd qword [rbp - 0x30], xmm9
movaps xmm3, xmm9
movsd qword [rbp - 0x38], xmm3
movaps xmm2, xmm9
movsd qword [rbp - 0x40], xmm2
test rcx, rcx
je 0x140005790
movabs rax, 0xcccccccccccccccc
cmp rcx, rax
je 0x140005790
cmp rcx, 0xffffffffffffffff
je 0x140005790
lea rax, [rcx - 0x400001]
movabs rdx, 0x7fffffffffbffffe
cmp rax, rdx
ja 0x140005790
mov dword [rbp + 0x1d1], r14d
mov word [rbp + 0x1d5], r14w
mov byte [rbp + 0x1d7], 0
mov dword [rbp + 0x1b0], 0x3e7a1c4
mov qword [rbp + 0x1b8], rcx
lea rax, [rbp - 0x40]
mov qword [rbp + 0x1c0], rax
mov qword [rbp + 0x1c8], 0x18
mov eax, dword [0x140088c0c]
mov dword [rbp + 0x1b4], eax
mov byte [rbp + 0x1d0], 0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, 0x28
lea r8, [rbp + 0x1b0]
mov edx, 0x23198c
mov rcx, qword [0x140088c88]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movsd xmm9, qword [rbp - 0x30]
movsd xmm3, qword [rbp - 0x38]
movsd xmm2, qword [rbp - 0x40]
xorps xmm0, xmm0
ucomiss xmm15, xmm0
jp 0x14000579f
je 0x14000585d
cvtpd2ps xmm0, xmm7
divss xmm0, xmm15
cvtps2pd xmm1, xmm0
mulss xmm6, dword [0x1400520a8]
andps xmm6, xmmword [0x1400522c0]
mulss xmm6, dword [0x140051fbc]
mulss xmm0, xmm0
mulss xmm6, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
mulsd xmm9, xmm1
addsd xmm0, xmm9
mulsd xmm2, xmm1
addsd xmm8, xmm2
mulsd xmm3, xmm1
addsd xmm3, xmm12
addsd xmm10, xmm0
unpcklpd xmm8, xmm3
movaps xmm14, xmm10
cmp byte [0x140061009], 0
je 0x14000585d
call fcn.140017350
mov rbx, rax
movdqa xmm0, xmmword [0x140052250]
movups xmmword [rbp + 0x1e0], xmm0
lea rcx, [rbp + 0x1e0]
call fcn.140014820
cvtpd2ps xmm1, xmm13
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm11
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
mov dword [rsp + 0x20], r14d
mov r9d, eax
movss xmm2, dword [0x140052028]
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.14002a6a0
movaps xmmword [rbp + 0x190], xmm8
movsd qword [rbp + 0x1a0], xmm14
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1e0]
call fcn.14000d720
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x1e0], xmm0
jmp 0x140005896
movdqa xmmword [rbp + 0x1e0], xmm11
lea rdx, [rbp + 0x1e0]
lea rcx, [0x140088bd1]
call fcn.140009630
jmp 0x1400058bc
mov dword [0x1400610f0], 0x7f7fffff
mov qword [0x140088c10], r14
cmp byte [0x14006100d], 0
je 0x1400059db
mov ecx, dword [0x140089040]
mov rax, qword gs:[0x58]
mov edi, 4
mov rbx, qword [rax + rcx*8]
mov eax, dword [rbx + rdi]
cmp dword [0x140088e78], eax
jg 0x140005b7f
mov eax, dword [rbx + rdi]
cmp dword [0x140088e80], eax
jg 0x140005b23
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [0x140088e7c]
xorps xmm6, xmm6
cvtsi2ss xmm6, rcx
divss xmm6, dword [0x140052094]
mov dword [0x140088e7c], eax
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8001
test cx, ax
setne bl
test cx, ax
je 0x140005977
cmp byte [0x140088e70], 0
jne 0x140005992
movss xmm1, dword [0x140061028]
movss dword [0x140088e74], xmm1
addss xmm1, dword [0x140052058]
movss xmm0, dword [0x140051fc4]
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x140061024], xmm0
jmp 0x14000599a
cmp byte [0x140088e70], 0
je 0x140005992
movss xmm0, dword [0x140088e74]
movss dword [0x140061024], xmm0
jmp 0x14000599a
movss xmm0, dword [0x140061024]
mulss xmm6, dword [0x14006102c]
movss xmm1, dword [0x140061028]
comiss xmm0, xmm1
jbe 0x1400059be
addss xmm6, xmm1
movaps xmm1, xmm6
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fminf]
jmp 0x1400059cd
comiss xmm1, xmm0
jbe 0x1400059d5
subss xmm1, xmm6
call qword [sym.imp.api_ms_win_crt_math_l1_1_0.dll_fmaxf]
movss dword [0x140061028], xmm0
mov byte [0x140088e70], bl
mov rax, qword [0x140088e30]
cmp rax, qword [0x140088e38]
je 0x1400059f2
mov qword [0x140088e38], rax
mov rcx, qword [0x140088e50]
sub rcx, qword [0x140088e48]
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 5
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, qword [0x140088e48]
lea rcx, [0x140088e30]
call fcn.140001990
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140005a78
mov rdx, qword [rbp + 0x20]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005a67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d8bc
mov qword [rbp + 0x10], r14
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x18], xmm0
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140005abb
mov rdx, qword [rsp + 0x78]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ab6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005ab6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d8bc
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.14004d860
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [0x140088e80]
call fcn.14004dbb4
cmp dword [0x140088e80], 0xffffffff
jne 0x1400058ff
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x140088e7c], eax
lea rcx, [0x140088e80]
call fcn.14004db48
jmp 0x1400058ff
mov ecx, 5
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3
mov dword [0x1400610ec], 0x7ffffffe
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
call fcn.14000cf20
nop
lea rcx, [0x140088e78]
call fcn.14004dbb4
cmp dword [0x140088e78], 0xffffffff
jne 0x1400058f0
movss xmm0, dword [0x140061028]
movss dword [0x140088e74], xmm0
lea rcx, [0x140088e78]
call fcn.14004db48
jmp 0x1400058f0