Function at 0x1400403d0
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
push r14
push r15
lea rbp, [r11 - 0x398]
sub rsp, 0x480
mov rax, qword [0x14005d010]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rdx, qword [0x140143428]
xor r14d, r14d
movaps xmmword [r11 - 0x38], xmm6
add rdx, 0xfafc14
movaps xmmword [r11 - 0x68], xmm9
movaps xmmword [r11 - 0x78], xmm10
movaps xmmword [r11 - 0x88], xmm11
lea r15d, [r14 + 4]
movaps xmmword [r11 - 0x98], xmm12
movaps xmmword [r11 - 0xa8], xmm13
movaps xmmword [r11 - 0xc8], xmm15
cmp rdx, 0xffffffffffffffff
je 0x140040468
mov rcx, qword [0x140143430]
lea rax, [rbp + 0x110]
mov r9d, r15d
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x44]
mov qword [rbp + 0x110], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm15, xmm15
movsd xmm12, qword [0x140054180]
movsd xmm10, qword [0x140054178]
movsd xmm13, qword [0x140054160]
movss xmm6, dword [0x1400541d0]
movss xmm11, dword [0x14005419c]
mov qword [rsp + 0x4a0], rbx
mov qword [rsp + 0x4a8], rsi
mov qword [rsp + 0x4b0], rdi
movaps xmmword [rsp + 0x450], xmm7
movaps xmmword [rsp + 0x440], xmm8
cmp dword [rbp - 0x44], r14d
je 0x140041763
movss xmm9, dword [0x140054250]
movss xmm7, dword [0x1400541b4]
mov esi, dword [rsp + 0x58]
mov qword [rsp + 0x470], r13
mov r13d, r14d
mov qword [rsp + 0x478], r12
movaps xmmword [rsp + 0x3e0], xmm14
mov dword [rsp + 0x68], r14d
mov rdx, qword [0x140143428]
add rdx, 0xfa6060
cmp rdx, 0xffffffffffffffff
je 0x14004053c
mov rcx, qword [0x140143430]
lea rax, [rbp + 0x108]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x48]
mov qword [rbp + 0x108], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140143428]
add rdx, 0xfa6050
cmp rdx, 0xffffffffffffffff
je 0x140040577
mov rcx, qword [0x140143430]
lea rax, [rbp + 0x100]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x10]
mov qword [rbp + 0x100], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140143428]
add rdx, 0xfa604c
cmp rdx, 0xffffffffffffffff
je 0x1400405b2
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xf8]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp + 8]
mov qword [rbp + 0xf8], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp - 0x48]
lea rax, [rbp + 0xf0]
sub ecx, dword [rbp - 0x10]
lea r8, [rbp - 0xc]
mov edx, dword [rbp + 8]
mov r9, r15
add edx, ecx
mov dword [rbp - 0x48], ecx
mov rcx, qword [0x140143430]
add rdx, 0x298cc
mov qword [rbp + 0xf0], r14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0xc]
and eax, 0x80000001
jge 0x1400405ff
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov ecx, r14d
mov eax, r13d
setne cl
and eax, 1
cmp eax, ecx
je 0x14004171e
mov rax, qword [0x140143428]
lea rdx, [rax + 0xfa64e0]
cmp rdx, 0xffffffffffffffff
je 0x140040657
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xe0]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp - 8]
mov qword [rbp + 0xe0], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140143428]
lea rdx, [rax + 0xfa655c]
cmp rdx, 0xffffffffffffffff
je 0x14004068b
mov rcx, qword [0x140143430]
lea rax, [rbp + 0x160]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp - 4]
mov qword [rbp + 0x160], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp - 8]
mov edx, r13d
add ecx, dword [rbp - 4]
call fcn.14003b6b0
mov ebx, eax
test eax, eax
je 0x14004171e
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xe8]
lea rdx, [rbx + 0xd8c]
mov qword [rsp + 0x20], rax
mov r9, r15
mov qword [rbp + 0xe8], r14
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp]
test ecx, ecx
je 0x14004171e
lea rdx, [rcx + 0x20]
mov qword [rbp + 0xb0], r14
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xb0]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp + 4]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cvttss2si r12d, dword [rbp + 4]
test r12d, r12d
je 0x14004171e
cmp byte [0x140143445], 0
jne 0x14004072c
cmp byte [0x14014329f], 0
je 0x140040865
mov rax, qword [0x140143428]
lea rdx, [rax + 0xfa6060]
cmp rdx, 0xffffffffffffffff
je 0x14004076f
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xb8]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x6c]
mov qword [rbp + 0xb8], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140143428]
lea rdx, [rax + 0xfa6050]
cmp rdx, 0xffffffffffffffff
je 0x1400407aa
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xc0]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x80]
mov qword [rbp + 0xc0], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140143428]
lea rdx, [rax + 0xfa604c]
cmp rdx, 0xffffffffffffffff
je 0x1400407de
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xc8]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x78]
mov qword [rbp + 0xc8], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rsp + 0x6c]
lea eax, [r13*4]
sub ecx, dword [rbp - 0x80]
mov edx, dword [rbp - 0x78]
add edx, ecx
mov dword [rsp + 0x6c], ecx
add rdx, 0x297d0
movsxd rcx, eax
add rdx, rcx
cmp rdx, 0xffffffffffffffff
je 0x140040831
mov rcx, qword [0x140143430]
lea rax, [rbp + 0xd0]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x78]
mov qword [rbp + 0xd0], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rsp + 0x78]
lea rax, [rbp + 0x160]
mov rcx, qword [0x140143430]
lea r8, [rbp + 0x200]
add edx, 8
mov qword [rbp + 0x160], r14
mov r9d, 0x40
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, 5
lea rcx, [rbp + 0x150]
mov edx, ebx
call fcn.14003b7a0
mov rcx, qword [0x140143430]
lea rdx, [rbx + 0x790]
mov edi, 4
mov qword [rbp + 0x160], r14
mov r9d, edi
lea r8, [rsp + 0x70]
movsd xmm0, qword [rax]
mov r15d, dword [rax + 8]
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x48], xmm0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rsp + 0x70]
test eax, eax
je 0x14004091c
mov rcx, qword [0x140143430]
lea rdx, [rax + 0x50]
lea rax, [rbp + 0xd8]
mov qword [rbp + 0xd8], r14
mov r9d, edi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x70]
test eax, eax
je 0x14004091c
mov rcx, qword [0x140143430]
lea edx, [rax + 0x40]
lea rax, [rbp - 0x28]
mov qword [rbp - 0x28], r14
lea r9d, [rdi + 8]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140143428]
movsd xmm6, qword [rbp + 0xa0]
add rdx, 0xfafc14
mov edi, dword [rbp + 0xa8]
movsd qword [rbp + 0x18], xmm6
mov dword [rbp + 0x20], edi
cmp rdx, 0xffffffffffffffff
je 0x14004096f
mov rcx, qword [0x140143430]
lea rax, [rbp + 0x10]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x58]
mov qword [rbp + 0x10], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rsp + 0x58]
test esi, esi
je 0x140040a41
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x30]
mov edx, esi
lea r8, [rsp + 0x58]
add rdx, 0x7cc
mov qword [rbp - 0x30], r14
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rsp + 0x58]
test esi, esi
je 0x140040a41
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x38]
lea rdx, [rsi + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp - 0x38], r14
lea r8, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rsp + 0x58]
test esi, esi
je 0x140040a41
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x40]
lea rdx, [rsi + 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp - 0x40], r14
lea r8, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rsp + 0x58]
test esi, esi
je 0x140040a41
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x68]
lea edx, [rsi + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 0xc
mov qword [rbp - 0x68], r14
lea r8, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rsp + 0x58]
movsd xmm0, qword [rbp + 0x48]
lea rdx, [rbp + 0x118]
movss xmm1, dword [rbp + 0x4c]
lea rcx, [rbp + 0x130]
addss xmm1, dword [0x1400540cc]
mov r9d, dword [0x140143404]
mov eax, 0x64
mov r8d, dword [0x14014343c]
cmp r12d, 0x64
shufps xmm0, xmm0, 0xe1
mov r14d, r12d
cmovge r14d, eax
mov dword [rbp + 0x138], r15d
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movsd qword [rbp + 0x48], xmm0
movsd qword [rbp + 0x130], xmm0
call fcn.14003b3f0
test al, al
je 0x140041715
mov r9d, dword [0x140143404]
lea rdx, [rbp + 0x140]
mov r8d, dword [0x14014343c]
lea rcx, [rbp + 0x90]
movsd qword [rbp + 0x90], xmm6
mov dword [rbp + 0x98], edi
call fcn.14003b3f0
test al, al
je 0x140041715
cmp byte [0x14014329d], 0
lea rdi, [0x140142780]
je 0x140040afd
mov rdx, rdi
mov ecx, ebx
call fcn.14003b9b0
cmp byte [0x140143443], 0
movss xmm8, dword [rbp + 0x11c]
movss xmm11, dword [rbp + 0x118]
movss xmm6, dword [rbp + 0x144]
je 0x140040bee
movaps xmm0, xmm8
subss xmm0, xmm6
comiss xmm15, xmm0
jbe 0x140040b37
mulss xmm0, xmm9
mov ecx, dword [0x140142780]
xorps xmm1, xmm1
cvttss2si r9d, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, rcx
mov ecx, dword [0x140142784]
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
cvtsi2sd xmm1, rcx
mov ecx, dword [0x140142788]
mov r8d, eax
mov eax, dword [0x14014278c]
divsd xmm0, xmm12
divsd xmm1, xmm10
cvtpd2ps xmm0, xmm0
movss dword [rbp + 0x68], xmm0
cvtpd2ps xmm0, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
lea rcx, [rbp + 0x68]
movss dword [rbp + 0x6c], xmm0
divsd xmm1, xmm13
cvtpd2ps xmm0, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
movss dword [rbp + 0x70], xmm0
divsd xmm1, xmm12
cvtpd2ps xmm0, xmm1
movss dword [rbp + 0x74], xmm0
call fcn.140002ec0
mov dword [rbp + 0x160], eax
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
cvttss2si ecx, xmm11
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.14003a450
cmp byte [0x140143446], 0
je 0x140040c26
mov eax, dword [0x14014343c]
cdq
mov dword [rsp + 0x28], 2
sub eax, edx
mov qword [rsp + 0x20], rdi
mov edx, dword [0x140143404]
sar eax, 1
cvttss2si r9d, xmm8
mov ecx, eax
cvttss2si r8d, xmm11
call fcn.14003a340
movaps xmm0, xmm8
subss xmm0, xmm6
comiss xmm15, xmm0
movaps xmm1, xmm0
jbe 0x140040c3c
mulss xmm1, xmm9
cvttss2si eax, xmm1
cvttss2si ebx, xmm11
test eax, eax
jns 0x140040c4b
inc eax
sar eax, 1
cmp byte [0x14014329a], 0
cvttss2si r15d, xmm8
lea r13d, [rax + rbx]
je 0x140040d35
xor ecx, ecx
test r14w, r14w
cmovne cx, r14w
comiss xmm15, xmm0
jbe 0x140040c79
mulss xmm0, xmm9
cvttss2si r9d, xmm0
subss xmm6, xmm8
mov eax, r9d
cdq
and edx, 3
add eax, edx
sar eax, 2
sub ebx, eax
movzx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, dword [0x1400541e0]
cvttss2si rdi, xmm0
cmp cx, 0x64
ja 0x140040cd0
cmp cx, 0x4b
ja 0x140040cd0
cmp cx, 0x28
jbe 0x140040cc7
movups xmm0, xmmword [0x1401426b0]
jmp 0x140040cd7
movups xmm0, xmmword [0x1401425c0]
jmp 0x140040cd7
movups xmm0, xmmword [0x140142600]
lea rax, [0x140142760]
add r9d, 2
lea edx, [r15 - 1]
mov qword [rsp + 0x20], rax
lea ecx, [rbx - 6]
mov r8d, 5
movups xmmword [rbp - 0x68], xmm0
call fcn.14003abe0
mov eax, edi
lea ecx, [rbx - 5]
xorps xmm0, xmm0
movd xmm1, r15d
cvtdq2ps xmm1, xmm1
mov r9d, edi
mov r8d, 3
cvtsi2ss xmm0, rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x20], rax
subss xmm6, xmm0
addss xmm6, xmm1
cvttss2si edx, xmm6
call fcn.14003abe0
cmp byte [0x140143445], 0
movss xmm12, dword [rbp + 0x20]
movss xmm13, dword [rbp + 0x1c]
movss xmm14, dword [rbp + 0x18]
je 0x140041289
lea rax, [rbp + 0x78]
mov dword [rbp + 0x78], 9
movaps xmm10, xmm11
mov dword [rbp + 0x7c], 9
subss xmm10, dword [0x1400541d8]
movaps xmm9, xmm8
mov dword [rbp + 0x80], 9
subss xmm9, dword [0x1400541d4]
mov r9d, 0x1a
mov dword [rbp + 0x84], 0xff
mov r8d, 0x9b
mov dword [rbp + 0x58], 0x1c
cvttss2si edi, xmm10
mov dword [rbp + 0x5c], 0x36
mov dword [rbp + 0x60], 0x3a
mov dword [rbp + 0x64], 0xff
mov qword [rsp + 0x20], rax
cvttss2si ebx, xmm9
mov ecx, edi
mov edx, ebx
call fcn.14003abe0
mov r9d, 0x19
lea rax, [rbp + 0x58]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov ecx, edi
lea r8d, [r9 + 5]
call fcn.14003abe0
movss xmm0, dword [rbp - 0x18]
movss xmm1, dword [rbp - 0x20]
subss xmm0, xmm12
movss xmm2, dword [rbp - 0x1c]
subss xmm1, xmm14
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140040e33
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140040e3b
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov eax, dword [0x140053cc0]
lea rdx, [rbp + 0x168]
mov dword [rbp + 0x168], eax
lea rcx, [rbp + 0x180]
movzx eax, byte [0x140053cc4]
xorps xmm2, xmm2
xor byte [rbp + 0x169], 0x35
xor al, 0x38
xor byte [rbp + 0x16a], 0x36
xor byte [rbp + 0x16b], 0x37
cvtss2sd xmm2, xmm0
mov byte [rbp + 0x168], 0x25
mov byte [rbp + 0x16c], al
movq r8, xmm2
call fcn.140034db0
movaps xmm0, xmm9
mov dword [rbp + 0x30], 0
addss xmm0, dword [0x14005418c]
movaps xmm1, xmm10
mov dword [rbp + 0x34], 0xcb
addss xmm1, dword [0x1400541a8]
lea rax, [rbp + 0x180]
mov dword [rbp + 0x38], 0xff
mov qword [rsp + 0x30], rax
lea r9, [rbp + 0x30]
cvttss2si ebx, xmm0
mov byte [rsp + 0x28], 0
mov dword [rbp + 0x3c], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
cvttss2si edx, xmm1
mov r8d, ebx
movd ecx, xmm0
call fcn.140039330
mov eax, dword [0x140053938]
lea rdx, [rbp + 0x178]
mov dword [rbp + 0x178], eax
lea rcx, [rbp + 0x1a0]
movzx eax, word [0x14005393c]
mov r8d, r12d
xor byte [rbp + 0x179], 0x35
xor byte [rbp + 0x17a], 0x36
xor byte [rbp + 0x17b], 0x37
mov word [rbp + 0x17c], ax
xor byte [rbp + 0x17c], 0x38
xor byte [rbp + 0x17d], 0x39
mov byte [rbp + 0x178], 0x25
call fcn.140042d50
movaps xmm0, xmm9
lea rax, [rbp + 0x1a0]
subss xmm0, dword [0x14005418c]
mov qword [rsp + 0x30], rax
lea r9, [rbp + 0x30]
movaps xmm1, xmm10
mov byte [rsp + 0x28], 0
addss xmm1, dword [0x1400541f0]
mov byte [rsp + 0x20], 0
cvttss2si r8d, xmm0
movaps xmm0, xmm7
cvttss2si edx, xmm1
movd ecx, xmm0
call fcn.140039330
cmp word [0x140053ac6], 0
mov rax, qword [0x140053ac0]
mov qword [rbp + 0x160], rax
je 0x140041097
xor r8d, r8d
cmp dword [0x14005d018], 2
jl 0x14004104d
movdqa xmm3, xmmword [0x140054300]
mov eax, 4
movdqa xmm2, xmm3
movdqa xmm0, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400546e0]
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400546e0]
shufps xmm2, xmm0, 0xdd
movd xmm0, eax
mov eax, 0x1f
psrad xmm2, xmm0
movdqa xmm1, xmm2
movd xmm0, eax
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140054320]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp + 0x160]
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.44444444]
pxor xmm2, xmm0
movq qword [rbp + 0x160], xmm2
jmp 0x140041097
lea r9, [rbp + 0x160]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x3521cfb3
lea r9, [r9 + 2]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movzx eax, ax
imul ecx, eax, 0x35
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x34
xor word [r9 - 2], ax
cmp r8d, 4
jl 0x140041060
lea r9, [rbp + 0x200]
mov edx, 0x20
lea r8, [rbp + 0x160]
lea rcx, [rbp + 0x240]
call fcn.140034cf0
movaps xmm0, xmm10
mov dword [rbp - 0x58], 0xc9
addss xmm0, dword [0x1400541d0]
lea rax, [rbp + 0x240]
mov dword [rbp - 0x54], 0x10
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x58]
mov byte [rsp + 0x28], 0
mov r8d, ebx
mov dword [rbp - 0x50], 0x10
cvttss2si edx, xmm0
mov dword [rbp - 0x4c], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
movd ecx, xmm0
call fcn.140039b50
movss xmm2, dword [0x140054108]
lea rcx, [rbp - 0x68]
movaps xmm0, xmmword [0x140054530]
movaps xmm7, xmm10
addss xmm9, dword [0x1400541c8]
addss xmm7, dword [0x1400541f4]
movups xmmword [rbp - 0x68], xmm0
movaps xmm1, xmm10
movaps xmm6, xmm9
addss xmm1, xmm2
addss xmm6, dword [0x14005419c]
movaps xmm0, xmm7
subss xmm0, xmm2
movss dword [rbp + 0x40], xmm1
movss dword [rbp + 0x28], xmm0
movaps xmm0, xmm6
subss xmm0, xmm2
movss dword [rbp + 0x2c], xmm0
movaps xmm0, xmm9
addss xmm0, xmm2
movss dword [rbp + 0x44], xmm0
call fcn.140002ec0
movss xmm0, dword [0x140054108]
lea r8, [rbp + 0x28]
mov rcx, qword [0x1401432a0]
lea rdx, [rbp + 0x40]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], 0xf
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001df70
movaps xmm0, xmmword [0x140054530]
lea rcx, [rbp - 0x68]
movups xmmword [rbp - 0x68], xmm0
movss dword [rsp + 0x50], xmm7
movss dword [rsp + 0x54], xmm6
movss dword [rsp + 0x48], xmm10
movss dword [rsp + 0x4c], xmm9
call fcn.140002ec0
movss xmm0, dword [0x140054108]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1401432a0]
lea rdx, [rsp + 0x48]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], 0xf
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001df70
cmp r14d, 0x32
lea rax, [0x140142600]
lea rdx, [0x1401425e0]
cmovge rdx, rax
lea r9, [0x1401425c0]
cmp r14d, 0x14
mov eax, r14d
cmovge r9, rdx
cdq
sub eax, edx
sar eax, 1
mov ecx, edi
mov qword [rsp + 0x20], r9
mov r9d, 6
cvttss2si edx, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x140054158]
cvttss2si r8d, xmm0
call fcn.14003abe0
movss xmm7, dword [0x1400541b4]
movsd xmm10, qword [0x140054178]
cmp byte [0x14014329f], 0
je 0x1400413fb
cmp word [0x140053ac6], 0
mov rax, qword [0x140053ac0]
mov qword [rbp + 0x160], rax
je 0x140041397
xor r8d, r8d
cmp dword [0x14005d018], 2
jl 0x14004134c
movdqa xmm3, xmmword [0x140054300]
mov eax, 4
movdqa xmm2, xmm3
movdqa xmm0, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1400546e0]
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1400546e0]
shufps xmm2, xmm0, 0xdd
movd xmm0, eax
mov eax, 0x1f
psrad xmm2, xmm0
movdqa xmm1, xmm2
movd xmm0, eax
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x140054320]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rbp + 0x160]
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.44444444]
pxor xmm2, xmm0
movq qword [rbp + 0x160], xmm2
jmp 0x140041397
lea r9, [rbp + 0x160]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x3521cfb3
lea r9, [r9 + 2]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movzx eax, ax
imul ecx, eax, 0x35
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x34
xor word [r9 - 2], ax
cmp r8d, 4
jl 0x140041360
lea r9, [rbp + 0x200]
mov edx, 0x20
lea r8, [rbp + 0x160]
lea rcx, [rbp + 0x280]
call fcn.140034cf0
subss xmm8, dword [0x1400541bc]
subss xmm11, dword [0x1400541c8]
movaps xmm0, xmm7
lea rax, [rbp + 0x280]
mov qword [rsp + 0x30], rax
lea r9, [0x1401425c0]
movd ecx, xmm0
cvttss2si r8d, xmm8
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
cvttss2si edx, xmm11
call fcn.140039b50
cmp byte [0x140143403], 0
je 0x140041491
mov eax, dword [0x140053d50]
lea rdx, [rbp + 0x170]
mov dword [rbp + 0x170], eax
lea rcx, [rbp + 0x1c0]
movzx eax, word [0x140053d54]
mov r8d, r12d
xor byte [rbp + 0x171], 0x35
xor byte [rbp + 0x172], 0x36
xor byte [rbp + 0x173], 0x37
mov word [rbp + 0x174], ax
xor byte [rbp + 0x174], 0x38
xor byte [rbp + 0x175], 0x39
mov byte [rbp + 0x170], 0x25
call fcn.140042d50
movaps xmm0, xmm7
lea rax, [rbp + 0x1c0]
mov qword [rsp + 0x30], rax
lea r9, str.AiP
movd ecx, xmm0
mov r8d, r15d
mov byte [rsp + 0x28], 0
mov edx, r13d
mov byte [rsp + 0x20], 0
call fcn.140039330
cmp byte [0x140143402], 0
je 0x1400416fe
movss xmm0, dword [rbp - 0x18]
movss xmm1, dword [rbp - 0x20]
subss xmm0, xmm12
movss xmm2, dword [rbp - 0x1c]
subss xmm1, xmm14
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400414e3
xorps xmm9, xmm9
sqrtss xmm9, xmm2
jmp 0x1400414ef
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm9, xmm0
mov rax, qword [0x140053930]
xor r14d, r14d
cmp byte [0x140053937], r14b
mov qword [rbp + 0x160], rax
je 0x140041673
cmp dword [0x14005d018], 2
mov r8d, r14d
jl 0x14004162d
movdqa xmm2, xmmword [0x140054300]
mov eax, 4
movdqa xmm4, xmmword [0x1400546e0]
movdqa xmm1, xmm2
movdqa xmm3, xmmword [0x140054310]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movd xmm6, eax
mov eax, 0x1f
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movd xmm5, eax
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140054320]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rbp + 0x160]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
pand xmm2, xmmword [0x140054350]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400543a0]
pxor xmm2, xmm0
punpckldq xmm1, xmm3
movd dword [rbp + 0x160], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140054320]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rbp + 0x164]
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x140054350]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1400543a0]
pxor xmm2, xmm0
movd dword [rbp + 0x164], xmm2
jmp 0x140041673
lea r9, [rbp + 0x160]
nop dword [rax]
nop dword [rax + rax]
mov eax, 0x3521cfb3
lea r9, [r9 + 1]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x140041640
xorps xmm2, xmm2
lea rdx, [rbp + 0x160]
cvtss2sd xmm2, xmm9
lea rcx, [rbp + 0x1e0]
movq r8, xmm2
call fcn.140034db0
cmp byte [0x140143403], 0
movd xmm0, r15d
cvtdq2ps xmm0, xmm0
je 0x1400416ac
addss xmm0, dword [0x1400541b8]
movss xmm7, dword [0x1400541b4]
lea rax, [rbp + 0x1e0]
mov qword [rsp + 0x30], rax
lea r9, [0x1401425e0]
cvttss2si r8d, xmm0
mov byte [rsp + 0x28], 0
mov edx, r13d
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
movd ecx, xmm0
call fcn.140039330
movsd xmm12, qword [0x140054180]
movsd xmm13, qword [0x140054160]
mov r13d, dword [rsp + 0x68]
jmp 0x140041718
movsd xmm12, qword [0x140054180]
movsd xmm13, qword [0x140054160]
mov r13d, dword [rsp + 0x68]
xor r14d, r14d
mov r15d, 4
movss xmm9, dword [0x140054250]
inc r13d
mov dword [rsp + 0x68], r13d
cmp r13d, 0xf
jle 0x140040501
movss xmm6, dword [0x1400541d0]
movss xmm11, dword [0x14005419c]
movaps xmm14, xmmword [rsp + 0x3e0]
mov r13, qword [rsp + 0x470]
mov r12, qword [rsp + 0x478]
cmp byte [0x140143441], 0
movss xmm9, dword [0x1400540dc]
je 0x140041b3a
mov rax, qword [0x1401432a0]
xorps xmm0, xmm0
xorps xmm1, xmm1
movss xmm8, dword [rax + 0x10]
lea rdi, [rax + 0x1cc8]
movss xmm7, dword [rax + 0x14]
mov eax, dword [0x1401427c0]
mulss xmm8, xmm9
mulss xmm7, xmm9
cvtsi2sd xmm0, rax
mov eax, dword [0x1401427c4]
cvtsi2sd xmm1, rax
mov eax, dword [0x1401427c8]
divsd xmm0, xmm12
divsd xmm1, xmm10
movss xmm10, dword [0x140054108]
cvtpd2ps xmm4, xmm0
xorps xmm0, xmm0
comiss xmm15, xmm4
cvtsi2sd xmm0, rax
mov eax, dword [0x1401427cc]
cvtpd2ps xmm2, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
divsd xmm0, xmm13
divsd xmm1, xmm12
cvtpd2ps xmm3, xmm0
cvtpd2ps xmm5, xmm1
jbe 0x14004180d
movaps xmm0, xmm15
jmp 0x140041815
movaps xmm0, xmm10
minss xmm0, xmm4
comiss xmm15, xmm2
movss xmm1, dword [0x1400541fc]
mulss xmm0, xmm1
addss xmm0, xmm9
cvttss2si ecx, xmm0
jbe 0x140041836
movaps xmm0, xmm15
jmp 0x14004183e
movaps xmm0, xmm10
minss xmm0, xmm2
mulss xmm0, xmm1
addss xmm0, xmm9
cvttss2si eax, xmm0
shl eax, 8
or ecx, eax
comiss xmm15, xmm3
jbe 0x14004185c
movaps xmm0, xmm15
jmp 0x140041864
movaps xmm0, xmm10
minss xmm0, xmm3
mulss xmm0, xmm1
addss xmm0, xmm9
cvttss2si eax, xmm0
shl eax, 0x10
or ecx, eax
comiss xmm15, xmm5
jbe 0x140041882
movaps xmm0, xmm15
jmp 0x14004188a
movaps xmm0, xmm10
minss xmm0, xmm5
mulss xmm0, xmm1
movss xmm1, dword [0x1400540a0]
movss dword [rsp + 0x54], xmm7
addss xmm0, xmm9
movss dword [rsp + 0x4c], xmm7
cvttss2si eax, xmm0
xorps xmm0, xmm0
shl eax, 0x18
or ecx, eax
movzx eax, cl
cvtsi2ss xmm0, rax
mov eax, ecx
shr eax, 8
movzx eax, al
mulss xmm0, xmm1
movss dword [rbp - 0x58], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov eax, ecx
shr ecx, 0x18
shr eax, 0x10
movzx eax, al
mulss xmm0, xmm1
movss dword [rbp - 0x54], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov eax, ecx
lea rcx, [rbp - 0x58]
mulss xmm0, xmm1
movss dword [rbp - 0x50], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movaps xmm1, xmm8
subss xmm1, xmm6
movss dword [rbp - 0x4c], xmm0
movaps xmm0, xmm8
addss xmm0, xmm6
movss dword [rsp + 0x50], xmm1
movss dword [rsp + 0x48], xmm0
call fcn.140002ec0
mov r9d, eax
movss dword [rsp + 0x20], xmm10
lea rdx, [rsp + 0x50]
mov rcx, rdi
lea r8, [rsp + 0x48]
mov ebx, eax
call fcn.14001ddf0
movaps xmm0, xmm7
movss dword [rsp + 0x50], xmm8
movaps xmm1, xmm7
movss dword [rsp + 0x48], xmm8
subss xmm0, xmm6
movss dword [rsp + 0x20], xmm10
addss xmm1, xmm6
mov r9d, ebx
lea r8, [rsp + 0x48]
mov rcx, rdi
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x54], xmm0
movss dword [rsp + 0x4c], xmm1
call fcn.14001ddf0
movaps xmm0, xmm8
movss dword [rsp + 0x54], xmm7
movaps xmm1, xmm8
movss dword [rsp + 0x4c], xmm7
subss xmm0, xmm11
movss dword [rsp + 0x20], xmm10
addss xmm1, xmm11
mov r9d, ebx
lea r8, [rsp + 0x48]
mov rcx, rdi
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x48], xmm1
call fcn.14001ddf0
movaps xmm0, xmm7
movss dword [rsp + 0x50], xmm8
subss xmm0, xmm11
movss dword [rsp + 0x48], xmm8
movss dword [rsp + 0x54], xmm0
movaps xmm1, xmm7
movss dword [rsp + 0x20], xmm10
addss xmm1, xmm11
mov r9d, ebx
lea r8, [rsp + 0x48]
mov rcx, rdi
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x4c], xmm1
call fcn.14001ddf0
movss xmm6, dword [0x140054188]
lea r8, [rsp + 0x48]
movaps xmm0, xmm8
movss dword [rsp + 0x54], xmm7
subss xmm0, xmm6
movss dword [rsp + 0x4c], xmm7
mov r9d, ebx
movss dword [rsp + 0x20], xmm10
lea rdx, [rsp + 0x50]
mov rcx, rdi
movss dword [rsp + 0x50], xmm0
movaps xmm0, xmm8
addss xmm0, xmm6
movss dword [rsp + 0x48], xmm0
call fcn.14001ddf0
movaps xmm0, xmm7
movss dword [rsp + 0x50], xmm8
movaps xmm1, xmm7
movss dword [rsp + 0x48], xmm8
subss xmm0, xmm6
movss dword [rsp + 0x20], xmm10
addss xmm1, xmm6
mov r9d, ebx
lea r8, [rsp + 0x48]
mov rcx, rdi
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x54], xmm0
movss dword [rsp + 0x4c], xmm1
call fcn.14001ddf0
movaps xmm0, xmm8
movss dword [rsp + 0x54], xmm7
movaps xmm1, xmm8
movss dword [rsp + 0x4c], xmm7
subss xmm0, xmm10
movss dword [rsp + 0x20], xmm10
addss xmm1, xmm10
mov r9d, ebx
lea r8, [rsp + 0x48]
mov rcx, rdi
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x48], xmm1
call fcn.14001ddf0
movaps xmm0, xmm7
movss dword [rsp + 0x50], xmm8
subss xmm0, xmm10
movss dword [rsp + 0x48], xmm8
addss xmm7, xmm10
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x50]
mov rcx, rdi
movss dword [rsp + 0x54], xmm0
movss dword [rsp + 0x4c], xmm7
call fcn.14001ddf0
jmp 0x140041b43
movss xmm10, dword [0x140054108]
cmp byte [0x14014329b], 0
movaps xmm13, xmmword [rsp + 0x3f0]
movaps xmm11, xmmword [rsp + 0x410]
movaps xmm8, xmmword [rsp + 0x440]
movaps xmm7, xmmword [rsp + 0x450]
je 0x140041ce7
mov eax, dword [0x140142780]
lea rcx, [rbp - 0x58]
movss xmm6, dword [0x140142b2c]
xorps xmm1, xmm1
movaps xmm0, xmm6
mulss xmm0, xmm9
cvtsi2sd xmm1, rax
mov eax, dword [0x140142784]
cvttss2si r8d, xmm0
divsd xmm1, xmm12
cvtpd2ps xmm0, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
mov eax, dword [0x140142788]
movss dword [rbp - 0x58], xmm0
divsd xmm1, xmm12
cvtpd2ps xmm0, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
mov eax, dword [0x14014278c]
movss dword [rbp - 0x54], xmm0
divsd xmm1, xmm12
cvtpd2ps xmm0, xmm1
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
mov eax, dword [0x14014343c]
cdq
sub eax, edx
sar eax, 1
movss dword [rbp - 0x50], xmm0
divsd xmm1, xmm12
cvtpd2ps xmm0, xmm1
movss dword [rbp - 0x4c], xmm0
movd xmm0, eax
mov eax, dword [0x140143404]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rsp + 0x48], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x4c], xmm0
call fcn.140002ec0
mov rdi, qword [0x1401432a0]
mov esi, eax
add rdi, 0x1cc8
test eax, 0xff000000
je 0x140041ce7
movd xmm0, r8d
lea rdx, [rsp + 0x48]
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r8d
cvttss2si ecx, xmm6
movaps xmm1, xmm0
movaps xmm3, xmm15
subss xmm1, xmm10
movd xmm2, ecx
mov rcx, rdi
cvtdq2ps xmm2, xmm2
mulss xmm1, dword [0x1400541a0]
subss xmm2, xmm9
divss xmm1, xmm0
movss dword [rsp + 0x20], xmm1
call fcn.14001d8b0
mov r8d, dword [rdi + 0x80]
mov r9d, esi
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
movss dword [rsp + 0x28], xmm10
mov byte [rsp + 0x20], 1
call fcn.14001c1a0
mov ecx, dword [rdi + 0x84]
test ecx, ecx
jns 0x140041ce0
mov eax, ecx
cdq
sub eax, edx
mov edx, r14d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x80]
test eax, eax
cmovg edx, eax
call fcn.140013440
mov dword [rdi + 0x80], r14d
cmp dword [rbp - 0x44], 0
movaps xmm15, xmmword [rsp + 0x3d0]
movaps xmm12, xmmword [rsp + 0x400]
movaps xmm10, xmmword [rsp + 0x420]
movaps xmm9, xmmword [rsp + 0x430]
movaps xmm6, xmmword [rsp + 0x460]
mov rdi, qword [rsp + 0x4b0]
mov rsi, qword [rsp + 0x4a8]
je 0x140041fc9
mov rdx, qword [0x140143428]
add rdx, 0xfa6060
cmp rdx, 0xffffffffffffffff
je 0x140041d63
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x68]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x68]
mov qword [rbp - 0x68], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140143428]
add rdx, 0xfa6050
cmp rdx, 0xffffffffffffffff
je 0x140041d9b
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x40]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x160]
mov qword [rbp - 0x40], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140143428]
add rdx, 0xfa604c
cmp rdx, 0xffffffffffffffff
je 0x140041dd1
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x38]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x6c]
mov qword [rbp - 0x38], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rsp + 0x68]
lea rax, [rbp - 0x30]
sub ecx, dword [rbp + 0x160]
lea r8, [rbp - 0x70]
mov edx, dword [rsp + 0x6c]
mov r9, r15
add edx, ecx
mov dword [rsp + 0x68], ecx
mov rcx, qword [0x140143430]
add rdx, 0x298cc
mov qword [rbp - 0x30], r14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
imul ecx, dword [rbp - 0x70], 0x4c
mov r9, r15
mov eax, dword [rsp + 0x68]
add eax, 0x408
add ecx, dword [rsp + 0x6c]
add ecx, eax
cmp byte [0x140143400], 0
mov ebx, ecx
lea rdx, [rcx + 0xc]
mov rcx, qword [0x140143430]
je 0x140041e4c
mov dword [rsp + 0x70], 0x4eed39fb
lea rax, [rbp + 0x10]
lea r8, [rsp + 0x70]
jmp 0x140041e5d
mov dword [rsp + 0x78], 0xb7a7c5ac
lea rax, [rbp - 0x28]
lea r8, [rsp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140143442], 0
lea rdx, [rbx + 0x10]
mov rcx, qword [0x140143430]
mov r9, r15
je 0x140041e90
mov dword [rbp - 0x78], 0x4eed39fb
lea rax, [rbp - 0x38]
lea r8, [rbp - 0x78]
jmp 0x140041e9f
mov dword [rbp - 0x80], 0xb7a7c5ac
lea rax, [rbp - 0x30]
lea r8, [rbp - 0x80]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140143299], 0
je 0x140041f26
mov rdx, qword [0x140143428]
add rdx, 0xf7ff2c
cmp rdx, 0xffffffffffffffff
je 0x140041ee9
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x68]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x70]
mov qword [rbp - 0x68], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140041f26
mov edx, dword [rsp + 0x70]
lea rax, [rbp + 0x10]
mov rcx, qword [0x140143430]
lea r8, [rsp + 0x60]
add rdx, 0x3c
mov byte [rsp + 0x60], 4
mov r9d, 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140143428]
add rdx, 0xf8ea58
cmp rdx, 0xffffffffffffffff
je 0x140041f5e
mov rcx, qword [0x140143430]
lea rax, [rbp - 0x68]
mov r9, r15
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x168]
mov qword [rbp - 0x68], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0x168]
lea rax, [rbp - 0x40]
mov rcx, qword [0x140143430]
lea r8, [rsp + 0x58]
add rdx, 0x240
mov qword [rbp - 0x40], r14
mov r9, r15
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rsp + 0x58]
lea rax, [rbp - 0x28]
mov rcx, qword [0x140143430]
lea r8, [rsp + 0x40]
add rdx, 0x58
mov qword [rsp + 0x20], rax
cmp byte [0x140143440], 0
mov r9d, 1
mov byte [rsp + 0x40], r9b
jne 0x140041fc3
mov byte [rsp + 0x40], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [rsp + 0x4a0]
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.1400435e0
add rsp, 0x480
pop r15
pop r14
pop rbp
ret