Function at 0x140050e30
Capabilities:
Get graphical window text
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x19d0]
mov eax, 0x1ad0
call fcn.14005a0d0
sub rsp, rax
movaps xmmword [rsp + 0x1ac0], xmm6
movaps xmmword [rsp + 0x1ab0], xmm7
movaps xmmword [rsp + 0x1aa0], xmm8
movaps xmmword [rsp + 0x1a90], xmm9
movaps xmmword [rsp + 0x1a80], xmm10
movaps xmmword [rsp + 0x1a70], xmm11
movaps xmmword [rsp + 0x1a60], xmm12
movaps xmmword [rsp + 0x1a50], xmm13
movaps xmmword [rsp + 0x1a40], xmm14
movaps xmmword [rsp + 0x1a30], xmm15
mov rax, qword [0x14006d040]
xor rax, rsp
mov qword [rbp + 0x1928], rax
mov r15d, r9d
mov r14, rcx
xor r12d, r12d
lea rcx, [rsp + 0x70]
call fcn.14004fa20
mov qword [rbp + 0x16c8], r12
lea ecx, [r12 + 0x20]
call fcn.1400595b4
mov rbx, rax
mov qword [rbp + 0x16c0], rax
movdqa xmm0, xmmword [0x140062f20]
movdqu xmmword [rbp + 0x16d0], xmm0
movups xmm1, xmmword [str.cs2_cheat_log.txt]
movups xmmword [rax], xmm1
movzx eax, byte [0x140062890]
mov byte [rbx + 0x10], al
mov byte [rbx + 0x11], r12b
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x16e0]
call sub.VCRUNTIME140.dll_memset
mov rdx, rbx
lea rcx, [rbp + 0x16e0]
call fcn.1400558d0
mov rax, qword [rbp + 0x16e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x16e0], rax
mov rax, qword [rbp + 0x16e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x16dc], edx
xorps xmm0, xmm0
xor eax, eax
mov qword [rbp + 0x13c8], rax
movaps xmmword [rbp + 0x1400], xmm0
movsd xmm0, qword [rbp + 0x13c8]
movsd qword [rbp + 0x1410], xmm0
lea rdx, [rbp + 0x1400]
lea rcx, [rbp + 0x16e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::seekp_class_std::fpos_struct__Mbstatet_____ptr64]
lea rdx, str.After_running_this_software__please_make_sure_to_read_the_software_usage_instructions_
lea rcx, [rbp + 0x16e0]
call fcn.140055db0
lea rdx, [0x140055f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.If_you_are_stuck_in_the_use_of_the_software__please_update_the_latest_offsets_value_which_located_sdk_folder_or_submit_an_issue_on_Github_
lea rcx, [rbp + 0x16e0]
call fcn.140055db0
lea rdx, [0x140055f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Support_me__You_can_scan_the_WeiChat_pay_QR_code_or_concat_me_yl1099129793._Thank_you_for_your_support_
lea rcx, [rbp + 0x16e0]
call fcn.140055db0
lea rdx, [0x140055f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140055f80]
lea rcx, [rbp + 0x16e0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edi, r12d
mov r13d, r12d
mov qword [rsp + 0x68], r12
mov dword [rbp + 0x17f0], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x17f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400510bf
lea rsi, str.cs2.exe
nop dword [rax + rax]
mov rcx, r12
lea rdx, [rbp + 0x181c]
nop word [rax + rax]
movzx eax, byte [rsi + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x14005128f
cmp rcx, 8
jne 0x140051070
mov edi, dword [rbp + 0x17f8]
mov ecx, edi
call fcn.140058c80
mov r13, rax
mov qword [rsp + 0x68], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x1400510bf
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
mov qword [rsp + 0x68], rax
test rbx, rbx
je 0x1400510cd
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x1548], rdx
lea rcx, [rbp + 0x1548]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov rbx, rax
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp + 0x15c0]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140062c08]
mov qword [rbp + 0x15c0], rax
lea rax, [0x140062b40]
mov qword [rbp + 0x15d0], rax
lea rcx, [rbp + 0x1658]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r8d, r8d
lea rdx, [rbp + 0x15d8]
lea rcx, [rbp + 0x15c0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rbp + 0x15c0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x15c0], rax
mov rax, qword [rbp + 0x15c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x15bc], edx
lea rcx, [rbp + 0x15d8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x15d8], rax
mov qword [rbp + 0x1640], r12
mov dword [rbp + 0x1648], r12d
mov qword [rbp + 0x1400], rbx
lea rax, str._Y__m__d__H:_M:_S
mov qword [rbp + 0x1408], rax
mov qword [rbp + 0x1410], rax
inc rax
cmp byte [rax], r12b
jne 0x1400511d6
mov qword [rbp + 0x1410], rax
lea rdx, [rbp + 0x1400]
lea rcx, [rbp + 0x15d0]
call fcn.140055fc0
lea rdx, [0x140061a5c]
lea rcx, [rbp + 0x16e0]
call fcn.140055db0
mov rsi, rax
xorps xmm0, xmm0
mov qword [rbp + 0x13c8], r12
mov qword [rbp + 0x13d0], 0xf
mov rdx, r12
mov r8d, dword [rbp + 0x1648]
xor eax, eax
movups xmmword [rbp + 0x13b8], xmm0
movups xmmword [rbp + 0x1400], xmm0
mov ecx, r8d
mov qword [rbp + 0x1410], rax
mov byte [rbp + 0x13b8], r12b
and cl, 0x22
test r13, r13
jne 0x1400513bf
cmp cl, 2
je 0x1400512ac
mov rax, qword [rbp + 0x1618]
mov rbx, qword [rax]
test rbx, rbx
je 0x1400512ac
mov rax, qword [rbp + 0x15f8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x1640]
cmovb rbx, qword [rbp + 0x1640]
sub rbx, r9
mov rdx, r9
jmp 0x1400512ea
lea rdx, [rbp + 0x17f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140051060
jmp 0x1400510bf
test r8b, 4
jne 0x140051320
mov rax, qword [rbp + 0x1610]
mov rcx, qword [rax]
mov rbx, r12
test rcx, rcx
je 0x1400512e3
mov rax, qword [rbp + 0x15f0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x1628]
movsxd rbx, dword [rax]
add rbx, rcx
sub rbx, r9
mov rdx, r9
jmp 0x1400512ea
mov r9, qword [rbp + 0x1400]
test rdx, rdx
je 0x140051320
lea rcx, [rbp + 0x13b8]
cmp rbx, 0xf
ja 0x140051318
mov qword [rbp + 0x13c8], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x13b8], r12b
jmp 0x140051320
mov rdx, rbx
call fcn.1400568b0
lea rdx, [rbp + 0x13b8]
cmp qword [rbp + 0x13d0], 0xf
cmova rdx, qword [rbp + 0x13b8]
mov r8, qword [rbp + 0x13c8]
mov rcx, rsi
call fcn.140056bb0
lea rdx, [0x140062a4c]
mov rcx, rax
call fcn.140055db0
mov rcx, rax
lea rdx, str.Please_run_this_cs2_cheat_app_after_enter_cs2_game_
call fcn.140055db0
lea rdx, [0x140055f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x13d0]
cmp rdx, 0xf
jbe 0x14005150b
inc rdx
mov rcx, qword [rbp + 0x13b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051506
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051506
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp cl, 2
je 0x1400513f4
mov rax, qword [rbp + 0x1618]
mov rbx, qword [rax]
test rbx, rbx
je 0x1400513f4
mov rax, qword [rbp + 0x15f8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x1640]
cmovb rbx, qword [rbp + 0x1640]
sub rbx, r9
mov rdx, r9
jmp 0x140051432
test r8b, 4
jne 0x140051468
mov rax, qword [rbp + 0x1610]
mov rcx, qword [rax]
mov rbx, r12
test rcx, rcx
je 0x14005142b
mov rax, qword [rbp + 0x15f0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x1628]
movsxd rbx, dword [rax]
add rbx, rcx
sub rbx, r9
mov rdx, r9
jmp 0x140051432
mov r9, qword [rbp + 0x1400]
test rdx, rdx
je 0x140051468
lea rcx, [rbp + 0x13b8]
cmp rbx, 0xf
ja 0x140051460
mov qword [rbp + 0x13c8], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x13b8], r12b
jmp 0x140051468
mov rdx, rbx
call fcn.1400568b0
lea rdx, [rbp + 0x13b8]
cmp qword [rbp + 0x13d0], 0xf
cmova rdx, qword [rbp + 0x13b8]
mov r8, qword [rbp + 0x13c8]
mov rcx, rsi
call fcn.140056bb0
lea rdx, [0x140062a4c]
mov rcx, rax
call fcn.140055db0
mov rcx, rax
lea rdx, str.cs2.exes_process_id_located_at
call fcn.140055db0
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140055f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x13d0]
cmp rdx, 0xf
jbe 0x14005150b
inc rdx
mov rcx, qword [rbp + 0x13b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051506
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051506
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005924c
mov dword [rbp + 0x1e0], 0x238
mov qword [rsp + 0x60], r12
mov edx, edi
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x1e0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
je 0x140051579
nop
lea rdx, [rbp + 0x210]
lea rcx, str.client.dll
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14005156d
lea rdx, [rbp + 0x1e0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x140051540
jmp 0x140051579
mov r12, qword [rbp + 0x1f8]
mov qword [rsp + 0x60], r12
test rbx, rbx
je 0x140051587
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x140061a5c]
lea rcx, [rbp + 0x16e0]
call fcn.140055db0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x13b8], xmm0
mov qword [rbp + 0x13c8], 0
mov qword [rbp + 0x13d0], 0xf
mov byte [rbp + 0x13b8], 0
xor eax, eax
movups xmmword [rbp + 0x1400], xmm0
mov qword [rbp + 0x1410], rax
xor edx, edx
mov r8d, dword [rbp + 0x1648]
mov ecx, r8d
and cl, 0x22
cmp cl, 2
je 0x140051618
mov rax, qword [rbp + 0x1618]
mov rbx, qword [rax]
test rbx, rbx
je 0x140051618
mov rax, qword [rbp + 0x15f8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x1640]
cmovb rbx, qword [rbp + 0x1640]
sub rbx, r9
mov rdx, r9
jmp 0x140051655
test r8b, 4
jne 0x14005168b
mov rax, qword [rbp + 0x1610]
mov rcx, qword [rax]
xor ebx, ebx
test rcx, rcx
je 0x14005164e
mov rax, qword [rbp + 0x15f0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x1628]
movsxd rbx, dword [rax]
add rbx, rcx
sub rbx, r9
mov rdx, r9
jmp 0x140051655
mov r9, qword [rbp + 0x1400]
test rdx, rdx
je 0x14005168b
lea rcx, [rbp + 0x13b8]
cmp rbx, 0xf
ja 0x140051683
mov qword [rbp + 0x13c8], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x13b8], 0
jmp 0x14005168b
mov rdx, rbx
call fcn.1400568b0
lea rdx, [rbp + 0x13b8]
cmp qword [rbp + 0x13d0], 0xf
cmova rdx, qword [rbp + 0x13b8]
mov r8, qword [rbp + 0x13c8]
mov rcx, rdi
call fcn.140056bb0
lea rdx, [0x140062a4c]
mov rcx, rax
call fcn.140055db0
mov rcx, rax
lea rdx, str.client.dll___
call fcn.140055db0
mov rcx, rax
lea rdx, [0x140062a84]
call fcn.140055db0
lea rdx, [0x14004fa00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, r12
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x14004f9e0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [0x140055f80]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x13d0]
cmp rdx, 0xf
jbe 0x14005175e
inc rdx
mov rcx, qword [rbp + 0x13b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140051759
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140051759
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005924c
mov dword [0x14006dd10], 0x50
mov dword [0x14006dd14], 3
lea rax, [0x14004e4f0]
mov qword [0x14006dd18], rax
mov qword [0x14006dd28], r14
lea rax, str.yinlei
mov qword [0x14006dd50], rax
lea rcx, [0x14006dd10]
call qword [sym.imp.USER32.dll_RegisterClassExW]
xor r14d, r14d
mov qword [rsp + 0x58], r14
mov rax, qword [0x14006dd28]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
mov eax, dword [0x14006dc44]
mov dword [rsp + 0x38], eax
mov eax, dword [0x14006dc40]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
mov r9d, 0x80000000
lea r8, str.cs2_cheat
mov rdx, qword [0x14006dd50]
mov ecx, 0x80028
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x14006dd60], rax
lea r9d, [r14 + 2]
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x13b8], xmm0
lea rdx, [rbp + 0x13b8]
mov rcx, qword [0x14006dd60]
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1520], xmm0
lea rdx, [rbp + 0x1520]
mov rcx, qword [0x14006dd60]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp - 8], r14
lea rdx, [rbp - 8]
mov rcx, qword [0x14006dd60]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp - 8]
mov dword [rbp + 0x14f0], eax
mov eax, dword [rbp - 4]
mov dword [rbp + 0x14f4], eax
mov eax, dword [rbp + 0x13c0]
mov dword [rbp + 0x14f8], eax
mov eax, dword [rbp + 0x13c4]
mov dword [rbp + 0x14fc], eax
lea rdx, [rbp + 0x14f0]
mov rcx, qword [0x14006dd60]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, r15d
mov rcx, qword [0x14006dd60]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x14006dd60]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
mov qword [0x14006dc90], r14
mov qword [0x14006dca4], r14
mov qword [0x14006dcac], 1
mov qword [0x14006dcb8], 2
mov qword [0x14006dcd0], 2
mov dword [0x14006dc98], 0x4b
mov dword [0x14006dc9c], 1
mov dword [0x14006dca0], 0x1c
mov dword [0x14006dcb4], 0x20
mov rax, qword [0x14006dd60]
mov qword [0x14006dcc0], rax
mov qword [0x14006dcc8], 1
mov dword [rbp + 0x1920], 0xb000
mov dword [rbp + 0x1924], 0xa000
lea rax, [0x14006dcf0]
mov qword [rsp + 0x58], rax
lea rax, [0x14006dce8]
mov qword [rsp + 0x50], rax
lea rax, [0x14006dd00]
mov qword [rsp + 0x48], rax
lea rax, [0x14006dce0]
mov qword [rsp + 0x40], rax
lea rax, [0x14006dc90]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x1920]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov qword [rbp - 8], r14
mov rcx, qword [0x14006dce0]
mov rax, qword [rcx]
lea r9, [rbp - 8]
lea r8, [0x140062388]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp - 8]
test rdx, rdx
je 0x1400519fa
mov rcx, qword [0x14006dd00]
mov rax, qword [rcx]
lea r9, [0x14006dc78]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp - 8]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
call fcn.14004e570
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0x20], xmm0
movaps xmmword [rbp + 0x30], xmm0
movaps xmmword [rbp + 0x40], xmm0
movaps xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rax
movups xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x140062f10]
movdqa xmmword [rbp + 0x10], xmm1
mov byte [rbp], al
movaps xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x88], rax
movaps xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0xa0], xmm1
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], r14
movdqa xmmword [rbp + 0xc0], xmm0
movdqa xmmword [rbp + 0xd0], xmm1
mov qword [rbp + 0xe0], r14
movdqu xmmword [rbp + 0x13d8], xmm0
mov qword [rbp + 0x13e8], r14
mov qword [rbp + 0x1480], 0x40
lea rdx, [rbp + 0x1480]
lea rcx, [rbp + 0x13d8]
call fcn.140056530
movabs rsi, 0x469ee58469ee5847
movzx eax, byte [0x14006d170]
test al, al
je 0x140053d1a
movzx edi, byte [rbp + 0x13a8]
movss xmm9, dword [0x140062d64]
movsd xmm14, qword [0x140062e00]
movsd xmm15, qword [0x140062dd8]
movss xmm12, dword [0x140062ec8]
mov rbx, qword [rsp + 0x70]
movss xmm11, dword [0x140062da4]
movss xmm13, dword [0x140062d14]
mov rsi, qword [rbp + 0x13d8]
mov r14, qword [rbp + 0x13e0]
cmp rsi, r14
je 0x140051b3c
mov rcx, rsi
call fcn.140057e00
add rsi, 0xe8
cmp rsi, r14
jne 0x140051b13
mov rax, qword [rbp + 0x13d8]
mov qword [rbp + 0x13e0], rax
movzx eax, byte [0x14006d170]
test al, al
je 0x140053d0d
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140051b61
cmp byte [0x14006d148], 0
sete byte [0x14006d148]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x14a8]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140051bcd
lea rcx, [rbp + 0x14a8]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x14a8]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x14b0], 0x12
jne 0x140051bac
mov byte [0x14006d170], 0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x14a8]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140051b82
mov rax, qword [0x14006dc08]
xor r14d, r14d
test rax, rax
je 0x140051be5
mov rcx, qword [rax + 0x98]
jmp 0x140051be8
mov rcx, r14
cmp qword [rcx + 0x48], 0
jne 0x140051bf4
call fcn.140030c40
call fcn.140031e80
call fcn.140008c00
nop
call fcn.14004ef00
test r13, r13
je 0x140053cdb
lea rdx, [r12 + 0x1823128]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1588]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1588]
mov qword [rbp + 0x20], rax
lea rdx, [rax + 0x131c]
mov qword [rbp - 0x64], 0
mov dword [rbp - 0x5c], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x64]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x64]
movss dword [rbp + 0x88], xmm0
movss xmm1, dword [rbp - 0x60]
movss dword [rbp + 0x8c], xmm1
movss xmm0, dword [rbp - 0x5c]
movss dword [rbp + 0x90], xmm0
mov rdx, qword [rbp + 0x20]
add rdx, 0xca8
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x68], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x70]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x70]
movss dword [rbp + 0x94], xmm0
movss xmm1, dword [rbp - 0x6c]
movss dword [rbp + 0x98], xmm1
movss xmm0, dword [rbp - 0x68]
movss dword [rbp + 0x9c], xmm0
mov rdx, qword [rbp + 0x20]
add rdx, 0x3e3
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x14dc]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x14dc]
mov dword [rbp + 0x40], eax
mov rdx, qword [rbp + 0x20]
add rdx, 0x3ec
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x14e0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x14e0]
mov dword [rbp + 0x38], eax
mov rdx, qword [rbp + 0x20]
add rdx, 0x13f0
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1500]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x1500]
movss dword [rbp + 0x44], xmm0
mov rdx, qword [rbp + 0x20]
add rdx, 0x3f0
mov qword [rbp - 0x7c], 0
mov dword [rbp - 0x74], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x7c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x7c]
movss dword [rbp + 0xac], xmm0
movss xmm1, dword [rbp - 0x78]
movss dword [rbp + 0xb0], xmm1
movss xmm0, dword [rbp - 0x74]
movss dword [rbp + 0xb4], xmm0
lea rdx, [r12 + 0x19bbcc8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1540]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, qword [rbp + 0x1540]
mov qword [rbp - 8], r12
mov rdx, qword [rsp + 0x60]
add rdx, 0x1a1dde0
mov qword [rsp + 0x20], r14
mov r9d, 0x40
lea r8, [rbp + 0x1440]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15d, 1
mov dword [rbp + 0x13a0], r15d
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0x420]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rdx, [0x140062cd8]
lea rcx, [rbp + 0x420]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140051e87
lea rdx, str.Counter
lea rcx, [rbp + 0x420]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14005271a
mov edx, r15d
and edx, 0x7fff
shl edx, 3
sar edx, 9
add rdx, 0x10
add rdx, r12
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1538]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x1538]
test rcx, rcx
je 0x14005271a
mov eax, r15d
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1530]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x1530]
test r14, r14
je 0x140052717
lea rdx, [r14 + 0x80c]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x14d8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rbp + 0x14d8]
test esi, esi
je 0x140052717
mov edx, esi
shr edx, 9
and edx, 0x3f
shl edx, 3
add rdx, 0x10
add rdx, r12
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x15b0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x15b0]
test rcx, rcx
je 0x140052717
and esi, 0x1ff
imul edx, esi, 0x78
add rdx, rcx
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x15a8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x15a8]
test rsi, rsi
je 0x140052717
cmp rsi, qword [rbp + 0x20]
je 0x140052717
lea rdx, [r14 + 0x3e3]
xor r12d, r12d
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 4]
lea r8, [rbp + 0x150c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, 0x80
call fcn.1400595b4
mov qword [rbp + 0x1400], rax
lea rcx, [rax + 0x80]
mov qword [rbp + 0x1410], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rbp + 0x1408], rcx
lea rdx, [r14 + 0x660]
mov qword [rsp + 0x20], r12
mov r9d, 0x80
mov r8, qword [rbp + 0x1400]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1400]
lea rcx, [rbp + 0x14a8]
call fcn.1400553e0
mov rcx, qword [rbp + 0x1400]
test rcx, rcx
je 0x14005209c
mov rdx, qword [rbp + 0x1410]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052097
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053cf1
call fcn.14005924c
lea rdx, [rsi + 0x344]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1504]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rsi + 0x348]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1508]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12d, dword [rbp + 0x1504]
lea eax, [r12 - 1]
cmp eax, 0x63
ja 0x1400526d2
cmp dword [rbp + 0x1508], 0x100
jne 0x1400526d2
lea rdx, [rsi + 0x1398]
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x1590]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1590]
add rdx, 0x134a
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 2]
lea r8, [rbp + 0x13f0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x14006dcdb], r15b
je 0x14005217f
mov byte [rbp + 0x13a8], 1
lea rdx, [rsi + 0x23b0]
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 1]
lea r8, [rbp + 0x13a8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0x120], xmm0
movaps xmmword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rax
mov qword [rbp + 0x158], rax
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], al
movaps xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r15
mov qword [rbp + 0x178], rax
movaps xmmword [rbp + 0x180], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x190], xmm1
mov qword [rbp + 0x1a0], rax
mov qword [rbp + 0x1a8], r15
movdqa xmmword [rbp + 0x1b0], xmm0
movdqa xmmword [rbp + 0x1c0], xmm1
mov qword [rbp + 0x1d0], r15
mov qword [rbp + 0x110], rsi
mov qword [rbp + 0x118], r14
lea r9, [rbp + 0x14a8]
mov r15, qword [rbp + 0x14a8]
mov r13, qword [rbp + 0x14c0]
cmp r13, 0xf
cmova r9, r15
mov r14, qword [rbp + 0x14b8]
lea rcx, [rbp + 0xf0]
cmp r14, 0xf
ja 0x14005226d
mov qword [rbp + 0x100], r14
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + r14 + 0xf0], 0
jmp 0x140052283
mov rdx, r14
call fcn.1400568b0
mov r13, qword [rbp + 0x14c0]
mov r15, qword [rbp + 0x14a8]
mov dword [rbp + 0x12c], r12d
mov dword [rbp + 0x140], pe_nt_image_headers64
mov eax, dword [rbp + 0x150c]
mov dword [rbp + 0x130], eax
lea rdx, [rsi + 0x23b0]
xor r12d, r12d
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 1]
lea r8, [rbp + 0x13b2]
mov r14, qword [rsp + 0x68]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0x13b2]
mov byte [rbp + 0x158], al
mov qword [rsp + 0x78], r12
mov dword [rbp - 0x80], r12d
lea rdx, [rsi + 0x131c]
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 0xc]
lea r8, [rsp + 0x78]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm8, dword [rsp + 0x78]
movss dword [rbp + 0x178], xmm8
movss xmm6, dword [rsp + 0x7c]
movss dword [rbp + 0x17c], xmm6
movss xmm7, dword [rbp - 0x80]
movss dword [rbp + 0x180], xmm7
mov qword [rbp - 0x40], r12
mov dword [rbp - 0x38], r12d
lea rdx, [rsi + 0xca8]
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 0xc]
lea r8, [rbp - 0x40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp + 0x184], xmm0
mov eax, dword [rbp - 0x38]
mov dword [rbp + 0x18c], eax
subss xmm7, dword [rbp + 0x90]
subss xmm6, dword [rbp + 0x8c]
subss xmm8, dword [rbp + 0x88]
mulss xmm8, xmm8
mulss xmm6, xmm6
addss xmm8, xmm6
mulss xmm7, xmm7
addss xmm8, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm8
ja 0x1400523a8
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x1400523b1
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss dword [rbp + 0x138], xmm0
movzx ecx, word [rbp + 0x13f0]
mov word [rbp + 0x148], cx
call fcn.1400503b0
mov qword [rbp + 0x150], rax
lea rdx, [rsi + 0x328]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x1570]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1570]
add rdx, 0x1f0
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x1568]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1568]
mov qword [rbp + 0x170], rax
lea rdx, [rax + 0xc0]
mov qword [rbp - 0x58], r12
mov dword [rbp - 0x50], r12d
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp - 0x58]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm3, dword [rbp - 0x58]
movss dword [rbp + 0x15c], xmm3
movss xmm2, dword [rbp - 0x54]
movss dword [rbp + 0x160], xmm2
movss xmm4, dword [rbp - 0x50]
movss dword [rbp + 0x164], xmm4
movss xmm5, dword [rbp + 0x1444]
mulss xmm5, xmm2
movss xmm0, dword [rbp + 0x1440]
mulss xmm0, xmm3
addss xmm5, xmm0
movss xmm1, dword [rbp + 0x1448]
mulss xmm1, xmm4
addss xmm5, xmm1
addss xmm5, dword [rbp + 0x144c]
movss xmm6, dword [rbp + 0x1454]
mulss xmm6, xmm2
movss xmm0, dword [rbp + 0x1450]
mulss xmm0, xmm3
addss xmm6, xmm0
movss xmm1, dword [rbp + 0x1458]
mulss xmm1, xmm4
addss xmm6, xmm1
addss xmm6, dword [rbp + 0x145c]
movss xmm7, dword [rbp + 0x1474]
mulss xmm7, xmm2
movss xmm0, dword [rbp + 0x1470]
mulss xmm0, xmm3
addss xmm7, xmm0
movss xmm1, dword [rbp + 0x1478]
mulss xmm1, xmm4
addss xmm7, xmm1
addss xmm7, dword [rbp + 0x147c]
mov ecx, dword [0x14006dc44]
mov r8d, dword [0x14006dc40]
comiss xmm13, xmm7
ja 0x140052592
movaps xmm2, xmm11
divss xmm2, xmm7
movaps xmm0, xmm2
mulss xmm0, xmm5
movaps xmm5, xmm0
mulss xmm5, xmm9
xorps xmm1, xmm1
cvtsi2ss xmm1, r8d
mulss xmm5, xmm1
addss xmm5, xmm9
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm5, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm6
mulss xmm2, xmm9
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm0
addss xmm2, xmm9
subss xmm1, xmm2
movaps xmm6, xmm1
movss dword [rbp + 0x168], xmm5
movss dword [rbp + 0x16c], xmm6
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm5, xmm0
mulss xmm6, xmm6
mulss xmm5, xmm5
addss xmm6, xmm5
xorps xmm0, xmm0
ucomiss xmm0, xmm6
ja 0x1400525e4
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x1400525ec
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss dword [rbp + 0x13c], xmm0
mov rax, qword [rbp + 0x13e0]
cmp rax, qword [rbp + 0x13e8]
je 0x140052620
lea rdx, [rbp + 0xf0]
mov rcx, rax
call fcn.140058320
add qword [rbp + 0x13e0], 0xe8
jmp 0x140052636
lea r8, [rbp + 0xf0]
mov rdx, rax
lea rcx, [rbp + 0x13d8]
call fcn.140057000
lea rcx, [rbp + 0x1c0]
call fcn.140055ad0
lea rcx, [rbp + 0x1a8]
call fcn.140055ad0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x14005268f
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005268a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053cf8
call fcn.14005924c
cmp r13, 0xf
jbe 0x1400526c6
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400526be
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053cf8
mov rcx, r15
call fcn.14005924c
mov r15d, dword [rbp + 0x13a0]
mov r13, r14
jmp 0x140052713
mov rdx, qword [rbp + 0x14c0]
cmp rdx, 0xf
jbe 0x140052713
inc rdx
mov rcx, qword [rbp + 0x14a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005270e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053cf8
call fcn.14005924c
mov r12, qword [rbp - 8]
xor r14d, r14d
inc r15d
mov dword [rbp + 0x13a0], r15d
cmp r15d, 0x40
jl 0x140051e35
mov r12, qword [rbp + 0x13e0]
mov qword [rbp - 0x48], r12
mov rsi, qword [rbp + 0x13d8]
cmp rsi, r12
je 0x140053241
lea r14, [rsi + 0x90]
movss xmm0, dword [r14 - 0x48]
movss xmm14, dword [0x140062da4]
comiss xmm0, dword [0x140062e84]
jbe 0x140052772
movss xmm0, dword [0x140062de4]
jmp 0x140052776
movaps xmm0, xmm14
cvttss2si r15d, xmm0
movss xmm8, dword [r14 - 8]
movss xmm7, dword [rbp + 0x1450]
movaps xmm5, xmm7
mulss xmm5, xmm8
movss xmm10, dword [rbp + 0x1454]
movaps xmm0, xmm10
mulss xmm0, dword [r14 - 4]
addss xmm5, xmm0
movss xmm11, dword [rbp + 0x1458]
movaps xmm1, xmm11
mulss xmm1, dword [r14]
addss xmm5, xmm1
movss xmm15, dword [rbp + 0x145c]
addss xmm5, xmm15
movss xmm6, dword [rbp + 0x1470]
movaps xmm4, xmm6
mulss xmm4, xmm8
movss xmm12, dword [rbp + 0x1474]
movaps xmm0, xmm12
mulss xmm0, dword [r14 - 4]
addss xmm4, xmm0
movss xmm13, dword [rbp + 0x1478]
movaps xmm1, xmm13
mulss xmm1, dword [r14]
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x147c]
movss xmm0, dword [0x140062d14]
comiss xmm0, xmm4
ja 0x1400531fd
movaps xmm0, xmm14
divss xmm0, xmm4
mov ecx, dword [0x14006dc44]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm14, xmm14
cvtsi2ss xmm14, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, ecx
movss dword [rbp + 0x13a0], xmm1
mulss xmm0, xmm5
mulss xmm0, xmm9
mulss xmm0, xmm1
addss xmm0, xmm9
movaps xmm9, xmm14
subss xmm9, xmm0
movss xmm3, dword [r14 - 0x20]
movss xmm2, dword [r14 - 0x24]
movss xmm4, dword [r14 - 0x1c]
movss xmm5, dword [rbp + 0x1440]
mulss xmm5, xmm2
movss xmm0, dword [rbp + 0x1444]
mulss xmm0, xmm3
addss xmm5, xmm0
movss xmm1, dword [rbp + 0x1448]
mulss xmm1, xmm4
addss xmm5, xmm1
addss xmm5, dword [rbp + 0x144c]
mulss xmm7, xmm2
mulss xmm10, xmm3
addss xmm7, xmm10
mulss xmm11, xmm4
addss xmm7, xmm11
addss xmm7, xmm15
mulss xmm6, xmm2
mulss xmm12, xmm3
addss xmm6, xmm12
mulss xmm13, xmm4
addss xmm6, xmm13
addss xmm6, dword [rbp + 0x147c]
movss xmm13, dword [0x140062d14]
comiss xmm13, xmm6
ja 0x1400531f2
movss xmm12, dword [0x140062da4]
movaps xmm1, xmm12
divss xmm1, xmm6
movaps xmm10, xmm1
mulss xmm10, xmm5
movss xmm11, dword [0x140062d64]
mulss xmm10, xmm11
mov eax, dword [0x14006dc40]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm10, xmm0
addss xmm10, xmm11
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm10, xmm0
mulss xmm1, xmm7
mulss xmm1, xmm11
mulss xmm1, dword [rbp + 0x13a0]
addss xmm1, xmm11
subss xmm14, xmm1
movss dword [rbp + 0x13a0], xmm14
ucomiss xmm8, dword [0x140062cf0]
jp 0x140052984
je 0x1400531f2
subss xmm9, xmm14
movaps xmm8, xmm9
mulss xmm8, dword [0x140062d34]
movaps xmm7, xmm9
divss xmm7, dword [0x140062de0]
cmp byte [0x14006dcec], 0
je 0x140052a49
cmp byte [0x14006d100], 0
je 0x1400529f1
mov ecx, dword [r14 - 0x50]
cmp ecx, dword [rbp + 0x40]
je 0x140052a49
lea r10, [0x14006d0d0]
lea rax, [0x14006d0b8]
cmove r10, rax
movzx eax, byte [0x14006dd70]
mov byte [rsp + 0x30], al
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r10
jmp 0x140052a10
movzx eax, byte [0x14006dd70]
mov byte [rsp + 0x30], al
mov dword [rsp + 0x28], 1
lea rax, [0x14006d0d0]
mov qword [rsp + 0x20], rax
movaps xmm0, xmm8
addss xmm0, xmm9
movaps xmm2, xmm7
cvttss2si r9d, xmm0
movaps xmm1, xmm14
mulss xmm2, xmm11
movaps xmm0, xmm10
subss xmm1, xmm8
subss xmm0, xmm2
cvttss2si r8d, xmm7
cvttss2si edx, xmm1
cvttss2si ecx, xmm0
call fcn.14004fc30
cmp byte [0x14006dd68], 0
je 0x140052b29
mov rcx, qword [rbp + 0x13e0]
sub rcx, qword [rbp + 0x13d8]
movabs rax, 0x469ee58469ee5847
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140052a8a
cmp byte [0x14006d100], 0
je 0x140052a97
mov eax, dword [rbp + 0x40]
cmp dword [r14 - 0x50], eax
je 0x140052b29
mov eax, dword [0x14006dc40]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movups xmm0, xmmword [0x14006d0e0]
movups xmmword [rbp + 0x13b8], xmm0
lea rcx, [rbp + 0x13b8]
call fcn.140003b30
mov esi, eax
mov rcx, qword [0x14006dc08]
mov rcx, qword [rcx + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rcx]
call fcn.1400082b0
movss dword [rsp + 0x70], xmm10
movss dword [rsp + 0x74], xmm14
movss dword [rbp + 0x1480], xmm6
mov dword [rbp + 0x1484], 0
movss xmm0, dword [0x140062db4]
movss dword [rsp + 0x20], xmm0
mov r9d, esi
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x1480]
mov rcx, rax
call fcn.140029240
cmp byte [0x14006dcee], 0
je 0x140052b7b
cmp byte [0x14006d100], 0
je 0x140052b44
mov eax, dword [rbp + 0x40]
cmp dword [r14 - 0x50], eax
je 0x140052b7b
lea r9, [r14 - 0x90]
cmp qword [r14 - 0x78], 0xf
jbe 0x140052b55
mov r9, qword [r9]
movaps xmm0, xmm14
subss xmm0, xmm8
subss xmm0, dword [0x140062e2c]
cvttss2si edx, xmm0
cvttss2si ecx, xmm10
lea r8, [0x14006d138]
call fcn.14004fb00
cmp byte [0x14006dc70], 0
je 0x140052c2e
cmp byte [0x14006d100], 0
je 0x140052b9e
mov eax, dword [rbp + 0x40]
cmp dword [r14 - 0x50], eax
je 0x140052c2e
cvttss2si edx, dword [r14 - 0x48]
lea rcx, [rbp + 0x14a8]
call fcn.140055bd0
lea r9, [rbp + 0x14a8]
cmp qword [rbp + 0x14c0], 0xf
cmova r9, qword [rbp + 0x14a8]
movaps xmm0, xmm14
addss xmm0, xmm9
addss xmm0, dword [0x140062e0c]
cvttss2si edx, xmm0
cvttss2si ecx, xmm10
lea r8, [0x14006d150]
call fcn.14004fb00
mov rdx, qword [rbp + 0x14c0]
cmp rdx, 0xf
jbe 0x140052c2e
inc rdx
mov rcx, qword [rbp + 0x14a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052c29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053cff
call fcn.14005924c
cmp byte [0x14006dcf8], 0
je 0x140052c72
cmp byte [0x14006d100], 0
je 0x140052c49
mov eax, dword [rbp + 0x40]
cmp dword [r14 - 0x50], eax
je 0x140052c72
cvttss2si edx, xmm14
movaps xmm0, xmm10
addss xmm0, xmm7
addss xmm0, dword [0x140062de4]
cvttss2si ecx, xmm0
mov r9, qword [r14 - 0x30]
lea r8, [0x14006d0f0]
call fcn.14004fb00
cmp byte [0x14006dcdc], 0
je 0x140052dc2
cmp byte [0x14006d100], 0
je 0x140052c95
mov eax, dword [rbp + 0x40]
cmp dword [r14 - 0x50], eax
je 0x140052dc2
mov eax, 0x64
sub eax, dword [r14 - 0x54]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm9
divss xmm2, dword [0x140062e50]
mulss xmm7, xmm11
addss xmm7, dword [0x140062e20]
movaps xmm6, xmm10
subss xmm6, xmm7
movaps xmm0, xmm9
subss xmm0, xmm2
addss xmm0, xmm8
cvttss2si r9d, xmm0
movaps xmm1, xmm14
addss xmm1, xmm2
subss xmm1, xmm8
cvttss2si edx, xmm1
cvttss2si ecx, xmm6
mov byte [rsp + 0x30], 1
mov dword [rsp + 0x28], r15d
lea rax, [0x14006d108]
mov qword [rsp + 0x20], rax
mov r8d, 3
call fcn.14004fc30
mov edx, dword [r14 - 0x54]
lea rcx, [rbp + 0x14a8]
call fcn.140055bd0
lea r9, [rbp + 0x14a8]
cmp qword [rbp + 0x14c0], 0xf
cmova r9, qword [rbp + 0x14a8]
mov eax, 0x64
sub eax, dword [r14 - 0x54]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm9
divss xmm0, dword [0x140062e50]
addss xmm0, xmm14
subss xmm0, xmm8
subss xmm0, dword [0x140062e34]
cvttss2si edx, xmm0
subss xmm6, dword [0x140062e1c]
cvttss2si ecx, xmm6
lea r8, [0x14006d118]
call fcn.14004fb00
mov rdx, qword [rbp + 0x14c0]
cmp rdx, 0xf
jbe 0x140052dc2
inc rdx
mov rcx, qword [rbp + 0x14a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140052dbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053d06
call fcn.14005924c
cmp byte [0x14006dcda], 0
je 0x1400531aa
cmp byte [0x14006d100], 0
je 0x140052de5
mov eax, dword [rbp + 0x40]
cmp dword [r14 - 0x50], eax
je 0x1400531aa
xor r15d, r15d
lea r12, [0x14006d184]
lea rdi, [0x14006d0b8]
nop word [rax + rax]
mov eax, dword [r12 - 4]
mov esi, dword [r12]
shl eax, 5
movsxd rdx, eax
add rdx, qword [r14 - 0x10]
mov qword [rbp + 0x1488], 0
mov dword [rbp + 0x1490], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x1488]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
shl esi, 5
movsxd rdx, esi
add rdx, qword [r14 - 0x10]
mov qword [rbp + 0x1498], 0
mov dword [rbp + 0x14a0], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x1498]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x1444]
movaps xmm7, xmm6
movss xmm4, dword [rbp + 0x148c]
mulss xmm7, xmm4
movss xmm12, dword [rbp + 0x1440]
movaps xmm0, xmm12
movss xmm3, dword [rbp + 0x1488]
mulss xmm0, xmm3
addss xmm7, xmm0
movss xmm13, dword [rbp + 0x1448]
movaps xmm1, xmm13
movss xmm2, dword [rbp + 0x1490]
mulss xmm1, xmm2
addss xmm7, xmm1
addss xmm7, dword [rbp + 0x144c]
movss xmm8, dword [rbp + 0x1454]
movaps xmm9, xmm8
mulss xmm9, xmm4
movss xmm14, dword [rbp + 0x1450]
movaps xmm0, xmm14
mulss xmm0, xmm3
addss xmm9, xmm0
movss xmm15, dword [rbp + 0x1458]
movaps xmm1, xmm15
mulss xmm1, xmm2
addss xmm9, xmm1
addss xmm9, dword [rbp + 0x145c]
movss xmm5, dword [rbp + 0x1474]
movaps xmm11, xmm5
mulss xmm11, xmm4
movss xmm4, dword [rbp + 0x1470]
movaps xmm0, xmm4
mulss xmm0, xmm3
addss xmm11, xmm0
movss xmm3, dword [rbp + 0x1478]
movaps xmm1, xmm3
mulss xmm1, xmm2
addss xmm11, xmm1
addss xmm11, dword [rbp + 0x147c]
mov ecx, dword [0x14006dc44]
mov r8d, dword [0x14006dc40]
movss xmm0, dword [0x140062d14]
comiss xmm0, xmm11
ja 0x140052ffd
movss xmm2, dword [0x140062da4]
divss xmm2, xmm11
movaps xmm0, xmm2
mulss xmm0, xmm7
movaps xmm7, xmm0
movss xmm11, dword [0x140062d64]
mulss xmm7, xmm11
xorps xmm1, xmm1
cvtsi2ss xmm1, r8d
mulss xmm7, xmm1
addss xmm7, xmm11
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm7, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm9
mulss xmm2, xmm11
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm0
addss xmm2, xmm11
subss xmm1, xmm2
movaps xmm9, xmm1
jmp 0x140053006
movss xmm11, dword [0x140062d64]
movss xmm2, dword [rbp + 0x149c]
mulss xmm6, xmm2
movss xmm1, dword [rbp + 0x1498]
mulss xmm12, xmm1
addss xmm6, xmm12
movss xmm0, dword [rbp + 0x14a0]
mulss xmm13, xmm0
addss xmm6, xmm13
addss xmm6, dword [rbp + 0x144c]
mulss xmm8, xmm2
mulss xmm14, xmm1
addss xmm8, xmm14
mulss xmm15, xmm0
addss xmm8, xmm15
addss xmm8, dword [rbp + 0x145c]
mulss xmm5, xmm2
mulss xmm4, xmm1
addss xmm5, xmm4
mulss xmm3, xmm0
addss xmm5, xmm3
addss xmm5, dword [rbp + 0x147c]
movss xmm0, dword [0x140062d14]
movss xmm12, dword [0x140062da4]
comiss xmm0, xmm5
ja 0x1400530fd
movaps xmm2, xmm12
divss xmm2, xmm5
movaps xmm0, xmm2
mulss xmm0, xmm6
movaps xmm6, xmm0
mulss xmm6, xmm11
xorps xmm1, xmm1
cvtsi2ss xmm1, r8d
mulss xmm6, xmm1
addss xmm6, xmm11
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm6, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm8
mulss xmm2, xmm11
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm0
addss xmm2, xmm11
subss xmm1, xmm2
movaps xmm8, xmm1
movss xmm11, dword [0x140062db4]
movaps xmm2, xmm12
movss xmm1, dword [rbp + 0x13a0]
movaps xmm0, xmm10
movss dword [rsp + 0x20], xmm11
cmp byte [0x14006dcec], 0
je 0x14005313b
lea r9, [0x14006d160]
call fcn.140050260
lea rcx, [0x14006d160]
jmp 0x140053163
mov eax, dword [r14 - 0x50]
lea rsi, [0x14006d160]
mov r9, rsi
cmp eax, dword [rbp + 0x40]
cmove r9, rdi
call fcn.140050260
mov eax, dword [r14 - 0x50]
mov rcx, rsi
cmp eax, dword [rbp + 0x40]
cmove rcx, rdi
movaps xmm0, xmm11
movss dword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rcx
movaps xmm3, xmm8
movaps xmm2, xmm6
movaps xmm1, xmm9
movaps xmm0, xmm7
call fcn.140050190
inc r15d
add r12, 8
cmp r15d, 0x10
jb 0x140052e00
movss xmm13, dword [0x140062d14]
movzx edi, byte [rbp + 0x13a8]
mov r12, qword [rbp - 0x48]
cmp byte [0x14006dd72], 0
je 0x1400531f2
mov eax, dword [0x14006dc44]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x14006dc40]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x20], xmm12
lea r9, [0x14006d128]
movss xmm2, dword [0x14006d0c8]
call fcn.140050260
movss xmm9, dword [0x140062d64]
jmp 0x140053206
movss xmm13, dword [0x140062d14]
add r14, 0xe8
lea rax, [r14 - 0x90]
cmp rax, r12
jne 0x140052750
movss xmm11, dword [0x140062da4]
movss xmm12, dword [0x140062ec8]
movsd xmm14, qword [0x140062e00]
movsd xmm15, qword [0x140062dd8]
cmp byte [0x14006dd72], 0
je 0x1400535a0
mov r12, qword [rbp + 0x13e0]
mov rcx, r12
mov rsi, qword [rbp + 0x13d8]
sub rcx, rsi
movabs rax, 0x469ee58469ee5847
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400535a0
cmp byte [0x14006d100], 0
je 0x14005335b
mov r15, r12
cmp rsi, r12
je 0x1400532b0
mov eax, dword [rbp + 0x40]
cmp dword [rsi + 0x40], eax
je 0x1400532b0
add rsi, 0xe8
cmp rsi, qword [rbp + 0x13e0]
jne 0x140053298
mov r12, qword [rbp + 0x13e0]
cmp rsi, r12
je 0x1400532f7
lea r14, [rsi + 0xe8]
cmp r14, r12
je 0x1400532f7
nop dword [rax + rax]
mov eax, dword [rbp + 0x40]
cmp dword [r14 + 0x40], eax
je 0x1400532eb
mov rdx, r14
mov rcx, rsi
call fcn.140056270
add rsi, 0xe8
add r14, 0xe8
cmp r14, r15
jne 0x1400532d0
cmp rsi, r15
je 0x14005335b
mov r14, qword [rbp + 0x13e0]
cmp r15, r14
je 0x14005332e
nop dword [rax + rax]
mov rdx, r15
mov rcx, rsi
call fcn.140056270
add rsi, 0xe8
add r15, 0xe8
cmp r15, r14
jne 0x140053310
mov r15, qword [rbp + 0x13e0]
mov r14, rsi
cmp rsi, r15
je 0x140053354
nop dword [rax]
mov rcx, r14
call fcn.140057e00
add r14, 0xe8
cmp r14, r15
jne 0x140053340
mov qword [rbp + 0x13e0], rsi
mov rsi, qword [rbp + 0x13d8]
mov r12, qword [rbp + 0x13e0]
mov r8, r12
sub r8, rsi
movabs rax, 0x469ee58469ee5847
imul r8
mov r15, rdx
sar r15, 6
mov rax, r15
shr rax, 0x3f
add r15, rax
cmp r15, 0x20
jg 0x1400533a3
mov rdx, r12
mov rcx, rsi
call fcn.140056d70
jmp 0x140053467
mov rax, r15
cqo
sub rax, rdx
sar rax, 1
mov r14, r15
sub r14, rax
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
cmp r14, rcx
cmovl rax, r14
cmp r14, 0x11
jbe 0x140053421
mov r14, rax
movabs rcx, 0x11a7b9611a7b961
cmp rax, rcx
ja 0x140053411
test rax, rax
jle 0x140053411
nop word [rax + rax]
imul rcx, r14, 0xe8
lea rdx, [0x14005b850]
call fcn.1400595f0
test rax, rax
jne 0x140053529
shr r14, 1
jne 0x1400533f0
xor eax, eax
mov rcx, rax
call fcn.140059604
mov r14d, 0x11
lea rax, [rbp + 0x430]
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x428], r14
mov byte [rsp + 0x28], dil
mov qword [rsp + 0x20], r14
mov r9, rax
mov r8, r15
mov rdx, r12
mov rcx, rsi
call fcn.140056f00
cmp qword [rbp + 0x428], 0x11
jbe 0x140053467
mov rcx, qword [rbp + 0x420]
call fcn.140059604
mov rsi, qword [rbp + 0x13d8]
movss xmm0, dword [0x14006d0c8]
comiss xmm0, dword [rsi + 0x4c]
jbe 0x1400535a0
movss xmm8, dword [rbp + 0x9c]
addss xmm8, dword [rbp + 0x90]
movss xmm1, dword [rbp + 0x98]
addss xmm1, dword [rbp + 0x8c]
movss xmm0, dword [rbp + 0x94]
addss xmm0, dword [rbp + 0x88]
movss xmm6, dword [rsi + 0x6c]
subss xmm6, xmm0
movss xmm7, dword [rsi + 0x70]
subss xmm7, xmm1
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mulsd xmm1, xmm14
divsd xmm1, xmm15
cvtpd2ps xmm10, xmm1
movss xmm9, dword [rsi + 0x74]
subss xmm9, xmm8
cvtps2pd xmm0, xmm6
movsd xmm1, qword [0x140062dd0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movsd xmm1, qword [0x140062dd0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x140053538
xorps xmm1, xmm1
sqrtsd xmm1, xmm0
jmp 0x140053540
cmp r14, 0x11
jbe 0x140053413
jmp 0x140053428
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm1, xmm0
cvtps2pd xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
mulsd xmm0, xmm14
divsd xmm0, xmm15
xorps xmm0, xmmword [0x140062ff0]
cvtsd2ss xmm0, xmm0
unpcklps xmm0, xmm10
movsd qword [rbp + 0x14f0], xmm0
xorps xmm6, xmm6
movss dword [rbp + 0x14f8], xmm6
mov r12, qword [rsp + 0x60]
lea rdx, [r12 + 0x1a27c50]
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp + 0x14f0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x1400535ab
xorps xmm6, xmm6
mov r12, qword [rsp + 0x60]
xor r14d, r14d
mov rdx, qword [rbp + 0x20]
add rdx, 0x1450
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1510]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x1510]
mov dword [rbp + 0x54], eax
cmp byte [0x14006dced], 0
je 0x1400537be
test eax, eax
jle 0x1400537be
sar eax, 9
shl eax, 3
cdqe
mov rdx, qword [rbp - 8]
add rdx, 0x10
add rdx, rax
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1558]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x54]
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, qword [rbp + 0x1558]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1560]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1560]
add rdx, 0x3e3
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1514]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x14006d100], 0
je 0x14005368b
mov eax, dword [rbp + 0x40]
cmp dword [rbp + 0x1514], eax
je 0x1400537be
mov dword [rbp + 0x13a0], 0x10001
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x13a0]
lea rdx, [r12 + 0x181bc20]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp - 0x48], 2
lea rcx, [rbp - 0x48]
call fcn.140056420
mov dword [rbp + 0x13a0], pe_nt_image_headers64
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x13a0]
lea rdx, [r12 + 0x181bc20]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, [rbp - 0x30]
call fcn.14004fa20
mov rax, qword [rbp - 0x30]
movabs rdx, 0x7ffffffffff0bdbf
mov r15d, 0xff
cmp rax, rdx
je 0x14005372c
mov ecx, 1
cmovl ecx, r15d
test cl, cl
lea rsi, [rax + 0xf4240]
js 0x140053736
movabs rsi, 0x7fffffffffffffff
movabs rdi, 0x4e94914effff
movabs r12, 0x431bde82d7b634db
nop word [rax + rax]
lea rcx, [rbp - 0x18]
call fcn.14004fa20
mov rax, qword [rbp - 0x18]
cmp rsi, rax
je 0x1400537b2
mov ecx, 1
cmovl ecx, r15d
test cl, cl
jle 0x1400537b2
mov rcx, rsi
sub rcx, rax
cmp rcx, rdi
jg 0x1400537a6
mov rax, r12
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14005379d
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140053750
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140053750
movzx edi, byte [rbp + 0x13a8]
mov r12, qword [rsp + 0x60]
cmp byte [0x14006dcd8], 0
je 0x140053801
movss xmm0, dword [rbp + 0x44]
comiss xmm0, xmm6
jbe 0x140053801
mov dword [rbp + 0x13a0], 0
mov rdx, qword [rbp + 0x20]
add rdx, 0x13f0
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x13a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14006dcdd], 0
je 0x1400539a6
lea rdx, [r12 + 0x1a21f28]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1578]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x1578]
lea rdx, [r12 + 0x1a196e8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1580]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test rsi, rsi
je 0x1400539a6
lea rdx, [rsi + 0xfb8]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1554]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rsi + 0xfb4]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1550]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rsi + 0xfc0]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1920]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1580]
test rdx, rdx
je 0x1400539a6
add rdx, 0x9a5
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0x13b1]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x13b1], 0
je 0x14005398e
cmp byte [0x14006dd69], 0
jne 0x14005392f
mov dword [0x14006dc84], 0x42200000
lea rcx, [rbp - 0x10]
call fcn.14004fa20
mov rbx, qword [rax]
mov byte [0x14006dd69], 1
lea rcx, [rbp - 0x20]
call fcn.14004fa20
mov rax, qword [rbp - 0x20]
mov rcx, rax
sub rcx, rbx
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
divss xmm0, dword [0x140062ea0]
comiss xmm0, xmm11
jb 0x140053985
mov rbx, rax
movss xmm0, dword [0x14006dc84]
comiss xmm0, xmm6
jbe 0x14005397e
addss xmm0, xmm12
movss dword [0x14006dc84], xmm0
mov byte [0x14006dcd9], 1
jmp 0x1400539a6
mov byte [0x14006dd69], 0
mov byte [0x14006dcd9], 1
jmp 0x1400539a6
mov byte [0x14006dcd9], 0
mov dword [0x14006dc84], 0xbf800000
mov byte [0x14006dd69], 0
cmp byte [0x14006dd71], 0
je 0x140053a05
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140053a05
mov eax, dword [rbp + 0x38]
add eax, 0xfffeff7f
lea rdx, [r12 + 0x181c130]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x13a0]
mov rcx, r13
test eax, 0xfffffffd
mov dword [rbp + 0x13a0], pe_nt_image_headers64
jne 0x1400539ff
mov dword [rbp + 0x13a0], 0x10001
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov esi, dword [0x14006dd74]
mov rdx, qword [rbp + 0x20]
add rdx, 0x11d8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1598]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1598]
mov qword [rbp + 0x30], rax
lea rdx, [rax + 0x210]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1518]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x20]
add rdx, 0x23c0
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0x13b0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x13b0], 0
jne 0x140053ac1
cmp dword [rbp + 0x1518], esi
je 0x140053ac1
mov dword [rbp + 0x13a0], esi
mov rdx, qword [rbp + 0x30]
add rdx, 0x210
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x13a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm2, dword [rbp + 0xb0]
mulss xmm2, xmm2
movss xmm0, dword [rbp + 0xac]
mulss xmm0, xmm0
addss xmm2, xmm0
movss xmm1, dword [rbp + 0xb4]
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140053afe
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140053b06
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si eax, xmm0
mov dword [0x14006dcfc], eax
cmp byte [0x14006dc80], 0
je 0x140053cd2
mov rdx, qword [rbp + 0x20]
add rdx, 0x23d4
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x151c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x151c], 1
jle 0x140053cbd
mov rdx, qword [rbp + 0x20]
add rdx, 0x1574
mov qword [rbp + 0x1428], 0
mov dword [rbp + 0x1430], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp + 0x1428]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x1520], 0
mov dword [rbp + 0x1528], 0
lea rdx, [r12 + 0x1a27c50]
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp + 0x1520]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r12 + 0x1a1a408]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x15a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x15a0]
add rdx, 0x40
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1420]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rbp + 0x142c]
subss xmm2, dword [0x14006dd9c]
movss xmm1, dword [rbp + 0x1420]
mulss xmm1, dword [0x140062d18]
addss xmm2, xmm2
divss xmm2, xmm1
movss dword [0x14006dd78], xmm2
movss xmm0, dword [rbp + 0x1428]
subss xmm0, dword [0x14006dd98]
xorps xmm0, xmmword [0x140063000]
addss xmm0, xmm0
divss xmm0, xmm1
movss dword [0x14006dd7c], xmm0
cvttss2si r8, xmm0
xorps xmm2, xmmword [0x140063000]
mulss xmm2, xmm12
cvttss2si rdx, xmm2
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
movss xmm0, dword [rbp + 0x1428]
movss dword [0x14006dd98], xmm0
movss xmm1, dword [rbp + 0x142c]
movss dword [0x14006dd9c], xmm1
movss xmm0, dword [rbp + 0x1430]
movss dword [0x14006dda0], xmm0
jmp 0x140053cd2
mov qword [0x14006dd9c], 0
mov dword [0x14006dd98], 0
movss xmm9, dword [0x140062d64]
call fcn.14004ee50
movzx eax, byte [0x14006d170]
test al, al
jne 0x140051b00
jmp 0x140053d10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor r14d, r14d
movabs rsi, 0x469ee58469ee5847
call fcn.14004ec10
nop
mov rcx, qword [0x14006dc78]
test rcx, rcx
je 0x140053d39
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14006dc78], r14
mov rcx, qword [0x14006dce0]
test rcx, rcx
je 0x140053d52
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14006dce0], r14
mov rcx, qword [0x14006dcf0]
test rcx, rcx
je 0x140053d6b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14006dcf0], r14
mov rcx, qword [0x14006dd00]
test rcx, rcx
je 0x140053d84
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14006dd00], r14
mov rcx, qword [0x14006dd60]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x14006dd28]
mov rcx, qword [0x14006dd50]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea rcx, [rbp + 0x16e8]
call fcn.140055810
test rax, rax
jne 0x140053dd8
mov rax, qword [rbp + 0x16e0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x16e0]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rbx, qword [rbp + 0x13d8]
test rbx, rbx
je 0x140053e73
mov rdi, qword [rbp + 0x13e0]
cmp rbx, rdi
je 0x140053e0f
mov rcx, rbx
call fcn.140057e00
add rbx, 0xe8
cmp rbx, rdi
jne 0x140053df4
mov rbx, qword [rbp + 0x13d8]
mov rcx, qword [rbp + 0x13e8]
sub rcx, rbx
mov rax, rsi
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xe8
mov rax, rbx
cmp rdx, 0x1000
jb 0x140053e59
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053fdf
mov rcx, rbx
call fcn.14005924c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x13d8], xmm0
mov qword [rbp + 0x13e8], r14
lea rcx, [rbp + 0xd0]
call fcn.140055ad0
lea rcx, [rbp + 0xb8]
call fcn.140055ad0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140053ec6
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053ec1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053fdf
call fcn.14005924c
movdqa xmm0, xmmword [0x140062f10]
movdqa xmmword [rbp + 0x10], xmm0
mov byte [rbp], 0
mov rax, qword [rbp + 0x15c0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x15c0], rax
mov rax, qword [rbp + 0x15c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x15bc], edx
lea rcx, [rbp + 0x15d8]
call fcn.1400552c0
lea rcx, [rbp + 0x15e0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1658]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
test r13, r13
je 0x140053f3d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14006dc28]
test rcx, rcx
je 0x140053f4f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x16e0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x16e0], rax
mov rax, qword [rbp + 0x16e0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x16dc], edx
lea rcx, [rbp + 0x16e8]
call fcn.140054c40
lea rcx, [rbp + 0x16f0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1788]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp + 0x16d8]
cmp rdx, 0xf
jbe 0x140053feb
inc rdx
mov rcx, qword [rbp + 0x16c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053fe6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140053fe6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005924c
xor eax, eax
mov rcx, qword [rbp + 0x1928]
xor rcx, rsp
call fcn.1400590b0
lea r11, [rsp + 0x1ad0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret