Function at 0x140053770
Capabilities:
Get graphical window text
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a60]
mov eax, 0x1b60
call fcn.14005cb20
sub rsp, rax
movaps xmmword [rsp + 0x1b50], xmm6
movaps xmmword [rsp + 0x1b40], xmm7
movaps xmmword [rsp + 0x1b30], xmm8
movaps xmmword [rsp + 0x1b20], xmm9
movaps xmmword [rsp + 0x1b10], xmm10
movaps xmmword [rsp + 0x1b00], xmm11
movaps xmmword [rsp + 0x1af0], xmm12
movaps xmmword [rsp + 0x1ae0], xmm13
movaps xmmword [rsp + 0x1ad0], xmm14
movaps xmmword [rsp + 0x1ac0], xmm15
mov rax, qword [0x140072040]
xor rax, rsp
mov qword [rbp + 0x19b8], rax
mov r13d, r9d
mov r12, rcx
xor esi, esi
mov qword [rbp + 0x1758], rsi
lea ecx, [rsi + 0x20]
call fcn.14005c004
mov rbx, rax
mov qword [rbp + 0x1750], rax
movdqa xmm0, xmmword [0x140067350]
movdqu xmmword [rbp + 0x1760], xmm0
movups xmm1, xmmword [str.CS2_Cheat_Log.txt]
movups xmmword [rax], xmm1
movzx eax, byte [0x140066c68]
mov byte [rbx + 0x10], al
mov byte [rbx + 0x11], sil
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1770]
call sub.VCRUNTIME140.dll_memset
mov rdx, rbx
lea rcx, [rbp + 0x1770]
call fcn.140058400
mov rax, qword [rbp + 0x1770]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1770], rax
mov rax, qword [rbp + 0x1770]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x176c], edx
xorps xmm0, xmm0
xor eax, eax
mov qword [rbp + 0x14a8], rax
movaps xmmword [rbp + 0x14e0], xmm0
movsd xmm0, qword [rbp + 0x14a8]
movsd qword [rbp + 0x14f0], xmm0
lea rdx, [rbp + 0x14e0]
lea rcx, [rbp + 0x1770]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::seekp_class_std::fpos_struct__Mbstatet_____ptr64]
lea rdx, str._Tip_:_After_running_this_program__please_make_sure_to_read_the_software_usage_instructions._If_it_doesnt_work__please_copy_this_log_file_record_to_the_GitHub_repository_and_submit_an_issue__or_directly_contact_the_author_via_WeChat_at_yl1099129793._The_author_has_limited_capacity_and_cannot_synchronously_update_CS2_game_patch._If_urgently_needed__you_can_fork_this_repository_and_modify_offsets_to_build_with_the_latest_value.
lea rcx, [rbp + 0x1770]
call fcn.1400588e0
lea rdx, [0x140058ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140058ab0]
lea rcx, [rbp + 0x1770]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r14d, esi
mov edi, esi
mov qword [rsp + 0x60], rsi
mov dword [rbp + 0x1880], 0x130
xor edx, edx
lea ecx, [rsi + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x1880]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400539b2
lea r15, str.cs2.exe
nop word [rax + rax]
mov rcx, rsi
lea rdx, [rbp + 0x18ac]
nop word [rax + rax]
movzx eax, byte [r15 + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140053ba4
cmp rcx, 8
jne 0x140053960
mov r14d, dword [rbp + 0x1888]
mov ecx, r14d
call fcn.14005b6d0
mov rdi, rax
mov qword [rsp + 0x60], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x1400539b2
mov r8d, r14d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
mov qword [rsp + 0x60], rax
test rbx, rbx
je 0x1400539c0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x1628], rdx
lea rcx, [rbp + 0x1628]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov rbx, rax
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x1650]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140067028]
mov qword [rbp + 0x1650], rax
lea rax, [0x140066f60]
mov qword [rbp + 0x1660], rax
lea rcx, [rbp + 0x16e8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r8d, r8d
lea rdx, [rbp + 0x1668]
lea rcx, [rbp + 0x1650]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rbp + 0x1650]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x1650], rax
mov rax, qword [rbp + 0x1650]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x164c], edx
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x1668], rax
mov qword [rbp + 0x16d0], rsi
mov dword [rbp + 0x16d8], esi
mov qword [rbp + 0x14e0], rbx
lea rax, str._Y__m__d__H:_M:_S
mov qword [rbp + 0x14e8], rax
mov qword [rbp + 0x14f0], rax
inc rax
cmp byte [rax], sil
jne 0x140053ac8
mov qword [rbp + 0x14f0], rax
lea rdx, [rbp + 0x14e0]
lea rcx, [rbp + 0x1660]
call fcn.140058af0
lea rdx, [0x140065e9c]
lea rcx, [rbp + 0x1770]
call fcn.1400588e0
mov r15, rax
xorps xmm0, xmm0
mov qword [rbp + 0x14a8], rsi
mov qword [rbp + 0x14b0], 0xf
mov rbx, rsi
mov edx, dword [rbp + 0x16d8]
xor eax, eax
movups xmmword [rbp + 0x1498], xmm0
movups xmmword [rbp + 0x14e0], xmm0
mov ecx, edx
mov qword [rbp + 0x14f0], rax
mov byte [rbp + 0x1498], sil
and cl, 0x22
test rdi, rdi
jne 0x140053d06
cmp cl, 2
je 0x140053bc7
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x140053bc1
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rsi, rax
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rdi, rax
mov rbx, qword [rbp + 0x16d0]
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
cmp rdi, rbx
cmovb rdi, rbx
sub rdi, rsi
mov rbx, rsi
jmp 0x140053c14
lea rdx, [rbp + 0x1880]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140053950
jmp 0x1400539b2
mov edx, dword [rbp + 0x16d8]
test dl, 4
jne 0x140053c67
mov rdi, rsi
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x140053c0d
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rsi, rax
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rdi, rax
sub rdi, rsi
mov rbx, rsi
jmp 0x140053c14
mov rsi, qword [rbp + 0x14e0]
test rbx, rbx
je 0x140053c65
mov rax, qword [rbp + 0x14b0]
cmp rdi, rax
ja 0x140053c53
lea rbx, [rbp + 0x1498]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x1498]
mov qword [rbp + 0x14a8], rdi
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x140053c65
mov r9, rsi
mov rdx, rdi
lea rcx, [rbp + 0x1498]
call fcn.140059460
xor esi, esi
lea rdx, [rbp + 0x1498]
cmp qword [rbp + 0x14b0], 0xf
cmova rdx, qword [rbp + 0x1498]
mov r8, qword [rbp + 0x14a8]
mov rcx, r15
call fcn.1400596a0
lea rdx, [0x140066e74]
mov rcx, rax
call fcn.1400588e0
mov rcx, rax
lea rdx, str.Please_run_this_cs2_cheat_app_after_enter_cs2_game_
call fcn.1400588e0
lea rdx, [0x140058ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x14b0]
cmp rdx, 0xf
jbe 0x140053eaa
inc rdx
mov rcx, qword [rbp + 0x1498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053ea5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140053ea5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp cl, 2
je 0x140053d66
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
test rax, rax
je 0x140053d60
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pbase_void_const___ptr64]
mov rsi, rax
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const___ptr64]
mov rdi, rax
mov rbx, qword [rbp + 0x16d0]
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const___ptr64]
cmp rdi, rbx
cmovb rdi, rbx
sub rdi, rsi
mov rbx, rsi
jmp 0x140053db3
mov edx, dword [rbp + 0x16d8]
test dl, 4
jne 0x140053e06
mov rdi, rsi
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::gptr_void_const___ptr64]
test rax, rax
je 0x140053dac
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::eback_void_const___ptr64]
mov rsi, rax
lea rcx, [rbp + 0x1668]
call qword [sym.imp.MSVCP140.dll_protected:_char____ptr64___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::egptr_void_const___ptr64]
mov rdi, rax
sub rdi, rsi
mov rbx, rsi
jmp 0x140053db3
mov rsi, qword [rbp + 0x14e0]
test rbx, rbx
je 0x140053e04
mov rax, qword [rbp + 0x14b0]
cmp rdi, rax
ja 0x140053df2
lea rbx, [rbp + 0x1498]
cmp rax, 0xf
cmova rbx, qword [rbp + 0x1498]
mov qword [rbp + 0x14a8], rdi
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x140053e04
mov r9, rsi
mov rdx, rdi
lea rcx, [rbp + 0x1498]
call fcn.140059460
xor esi, esi
lea rdx, [rbp + 0x1498]
cmp qword [rbp + 0x14b0], 0xf
cmova rdx, qword [rbp + 0x1498]
mov r8, qword [rbp + 0x14a8]
mov rcx, r15
call fcn.1400596a0
lea rdx, [0x140066e74]
mov rcx, rax
call fcn.1400588e0
mov rcx, rax
lea rdx, str.cs2.exes_process_id_located_at
call fcn.1400588e0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140058ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x14b0]
cmp rdx, 0xf
jbe 0x140053eaa
inc rdx
mov rcx, qword [rbp + 0x1498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053ea5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140053ea5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005bc9c
mov dword [rbp + 0x2c0], 0x238
mov r15, rsi
mov qword [rsp + 0x70], rsi
mov edx, r14d
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x2c0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
je 0x140053f1a
lea rdx, [rbp + 0x2f0]
lea rcx, str.client.dll
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140053f0e
lea rdx, [rbp + 0x2c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x140053ee1
jmp 0x140053f1a
mov r15, qword [rbp + 0x2d8]
mov qword [rsp + 0x70], r15
test rbx, rbx
je 0x140053f28
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x140065e9c]
lea rcx, [rbp + 0x1770]
call fcn.1400588e0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1498], xmm0
mov qword [rbp + 0x14a8], rsi
mov qword [rbp + 0x14b0], 0xf
mov byte [rbp + 0x1498], 0
xor eax, eax
movups xmmword [rbp + 0x14e0], xmm0
mov qword [rbp + 0x14f0], rax
mov rdx, rsi
mov r8d, dword [rbp + 0x16d8]
mov ecx, r8d
and cl, 0x22
cmp cl, 2
je 0x140053fb6
mov rax, qword [rbp + 0x16a8]
mov rbx, qword [rax]
test rbx, rbx
je 0x140053fb6
mov rax, qword [rbp + 0x1688]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x16d0]
cmovb rbx, qword [rbp + 0x16d0]
sub rbx, r9
mov rdx, r9
jmp 0x140053ff4
test r8b, 4
jne 0x14005402a
mov rax, qword [rbp + 0x16a0]
mov rcx, qword [rax]
mov rbx, rsi
test rcx, rcx
je 0x140053fed
mov rax, qword [rbp + 0x1680]
mov r9, qword [rax]
mov rax, qword [rbp + 0x16b8]
movsxd rbx, dword [rax]
add rbx, rcx
sub rbx, r9
mov rdx, r9
jmp 0x140053ff4
mov r9, qword [rbp + 0x14e0]
test rdx, rdx
je 0x14005402a
lea rcx, [rbp + 0x1498]
cmp rbx, 0xf
ja 0x140054022
mov qword [rbp + 0x14a8], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x1498], 0
jmp 0x14005402a
mov rdx, rbx
call fcn.140059460
lea rdx, [rbp + 0x1498]
cmp qword [rbp + 0x14b0], 0xf
cmova rdx, qword [rbp + 0x1498]
mov r8, qword [rbp + 0x14a8]
mov rcx, rdi
call fcn.1400596a0
lea rdx, [0x140066e74]
mov rcx, rax
call fcn.1400588e0
mov rcx, rax
lea rdx, str.client.dll___
call fcn.1400588e0
mov rcx, rax
lea rdx, [0x140066ea4]
call fcn.1400588e0
lea rdx, [0x140052d50]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdx, r15
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64]
lea rdx, [0x140052d30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [0x140058ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x14b0]
cmp rdx, 0xf
jbe 0x1400540fd
inc rdx
mov rcx, qword [rbp + 0x1498]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400540f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400540f8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005bc9c
mov dword [0x1400753b0], 0x50
mov dword [0x1400753b4], 3
lea rax, [0x140051d90]
mov qword [0x1400753b8], rax
mov qword [0x1400753c8], r12
lea rax, str.yinlei
mov qword [0x1400753f0], rax
lea rcx, [0x1400753b0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], rsi
mov rax, qword [0x1400753c8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov eax, dword [0x140072bcc]
mov dword [rsp + 0x38], eax
mov eax, dword [0x140072bc8]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
mov r9d, 0x80000000
lea r8, str.cs2_cheat
mov rdx, qword [0x1400753f0]
mov ecx, 0x80028
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140075400], rax
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1498], xmm0
lea rdx, [rbp + 0x1498]
mov rcx, qword [0x140075400]
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0x15e0], xmm0
lea rdx, [rbp + 0x15e0]
mov rcx, qword [0x140075400]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x110], rsi
lea rdx, [rbp + 0x110]
mov rcx, qword [0x140075400]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x110]
mov dword [rbp + 0x15d0], eax
mov eax, dword [rbp + 0x114]
mov dword [rbp + 0x15d4], eax
mov eax, dword [rbp + 0x14a0]
mov dword [rbp + 0x15d8], eax
mov eax, dword [rbp + 0x14a4]
mov dword [rbp + 0x15dc], eax
lea rdx, [rbp + 0x15d0]
mov rcx, qword [0x140075400]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, r13d
mov rcx, qword [0x140075400]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140075400]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
mov qword [0x140075340], rsi
mov qword [0x140075354], rsi
mov qword [0x14007535c], 1
mov qword [0x140075368], 2
mov qword [0x140075380], 2
mov dword [0x140075348], 0x3c
mov dword [0x14007534c], 1
mov dword [0x140075350], 0x1c
mov dword [0x140075364], 0x20
mov rax, qword [0x140075400]
mov qword [0x140075370], rax
mov qword [0x140075378], 1
mov dword [rbp + 0x19b0], 0xb000
mov dword [rbp + 0x19b4], 0xa000
lea rax, [0x140075398]
mov qword [rsp + 0x58], rax
lea rax, [0x140075390]
mov qword [rsp + 0x50], rax
lea rax, [0x1400753a8]
mov qword [rsp + 0x48], rax
lea rax, [0x140075388]
mov qword [rsp + 0x40], rax
lea rax, [0x140075340]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x19b0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov qword [rbp + 0x110], rsi
mov rcx, qword [0x140075388]
mov rax, qword [rcx]
lea r9, [rbp + 0x110]
lea r8, [0x140066a70]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp + 0x110]
test rdx, rdx
je 0x1400543ae
mov rcx, qword [0x1400753a8]
mov rax, qword [rcx]
lea r9, [0x140075330]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x110]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
call fcn.140051e10
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0x140], xmm0
movaps xmmword [rbp + 0x150], xmm0
movaps xmmword [rbp + 0x160], xmm0
movaps xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x188], rax
movups xmmword [rbp + 0x120], xmm0
movdqa xmm1, xmmword [0x140067340]
movdqa xmmword [rbp + 0x130], xmm1
mov byte [rbp + 0x120], al
movaps xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rsi
mov qword [rbp + 0x1a8], rax
movaps xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x1c0], xmm1
mov qword [rbp + 0x1d0], rax
mov qword [rbp + 0x1d8], rsi
movdqa xmmword [rbp + 0x1e0], xmm0
movdqu xmmword [rbp + 0x14b8], xmm1
mov qword [rbp + 0x14c8], rsi
mov qword [rbp + 0x1540], 0x40
lea rdx, [rbp + 0x1540]
lea rcx, [rbp + 0x14b8]
call fcn.1400590e0
movabs r14, 0x4ec4ec4ec4ec4ec5
movzx eax, byte [0x1400720f3]
test al, al
je 0x14005684a
movzx ebx, byte [rbp + 0x1480]
movsd xmm14, qword [0x140067228]
movsd xmm15, qword [0x1400671f8]
movss xmm12, dword [0x140067258]
movss xmm13, dword [0x1400671e8]
movss xmm11, dword [0x1400671c4]
xorps xmm10, xmm10
mov r13, qword [rsp + 0x60]
nop
mov rdi, qword [rbp + 0x14b8]
mov rsi, qword [rbp + 0x14c0]
cmp rdi, rsi
je 0x1400544fc
mov rcx, rdi
call fcn.14005a880
add rdi, 0xd0
cmp rdi, rsi
jne 0x1400544d3
mov rax, qword [rbp + 0x14b8]
mov qword [rbp + 0x14c0], rax
movzx eax, byte [0x1400720f3]
test al, al
je 0x14005683e
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140054521
cmp byte [0x1400720f2], 0
sete byte [0x1400720f2]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x15a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14005458d
lea rcx, [rbp + 0x15a0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x15a0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x15a8], 0x12
jne 0x14005456c
mov byte [0x1400720f3], 0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x15a0]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140054542
mov rax, qword [0x140072b88]
xor esi, esi
test rax, rax
je 0x1400545a4
mov rcx, qword [rax + 0x98]
jmp 0x1400545a7
mov rcx, rsi
cmp qword [rcx + 0x48], 0
jne 0x1400545b3
call fcn.140030d80
call fcn.140031fc0
call fcn.140008ca0
nop
call fcn.140052450
test r13, r13
je 0x14005680c
lea rdx, [r15 + 0x173a3b8]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x1630]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1630]
mov qword [rbp + 0x140], rax
lea rdx, [rax + 0x127c]
mov qword [rsp + 0x78], 0
mov dword [rbp - 0x80], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rsp + 0x78]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x78]
movss dword [rbp + 0x1a8], xmm0
movss xmm1, dword [rsp + 0x7c]
movss dword [rbp + 0x1ac], xmm1
movss xmm0, dword [rbp - 0x80]
movss dword [rbp + 0x1b0], xmm0
mov rdx, qword [rbp + 0x140]
add rdx, 0xc58
mov qword [rbp - 0x34], 0
mov dword [rbp - 0x2c], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp - 0x34]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x34]
movss dword [rbp + 0x1b4], xmm0
movss xmm1, dword [rbp - 0x30]
movss dword [rbp + 0x1b8], xmm1
movss xmm0, dword [rbp - 0x2c]
movss dword [rbp + 0x1bc], xmm0
mov rdx, qword [rbp + 0x140]
add rdx, 0x3cb
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1580]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x1580]
mov dword [rbp + 0x160], eax
mov rdx, qword [rbp + 0x140]
add rdx, 0x13b0
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x157c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x157c]
mov dword [rbp + 0x174], eax
mov rdx, qword [rbp + 0x140]
add rdx, 0x3d4
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1578]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x1578]
mov dword [rbp + 0x158], eax
mov rdx, qword [rbp + 0x140]
add rdx, 0x1350
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1574]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x1574]
movss dword [rbp + 0x164], xmm0
mov rdx, qword [rbp + 0x140]
add rdx, 0x3d8
mov qword [rbp - 0x40], 0
mov dword [rbp - 0x38], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp - 0x40]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x40]
movss dword [rbp + 0x1cc], xmm0
movss xmm1, dword [rbp - 0x3c]
movss dword [rbp + 0x1d0], xmm1
movss xmm0, dword [rbp - 0x38]
movss dword [rbp + 0x1d4], xmm0
lea rdx, [r15 + 0x18c6268]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x1640]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x1640]
mov qword [rbp + 0x1488], r14
lea rdx, [r15 + 0x19278a0]
mov qword [rsp + 0x20], rsi
mov r9d, 0x40
lea r8, [rbp + 0x1500]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12d, 1
nop dword [rax]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, 0x100
lea rdx, [rbp + 0x500]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rdx, [0x1400670f8]
lea rcx, [rbp + 0x500]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140054892
lea rdx, str.Counter
lea rcx, [rbp + 0x500]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x1400553f3
mov edx, r12d
and edx, 0x7fff
shl edx, 3
sar edx, 9
add rdx, 0x10
add rdx, r14
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x1620]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x1620]
test rcx, rcx
je 0x1400553f3
mov eax, r12d
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x1610]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x1610]
test rsi, rsi
je 0x1400553e3
lea rdx, [rsi + 0x7e4]
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 4]
lea r8, [rbp + 0x1598]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x1598]
test edi, edi
je 0x1400553e3
mov edx, edi
shr edx, 9
and edx, 0x3f
shl edx, 3
add rdx, 0x10
add rdx, r14
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x1608]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x1608]
test rcx, rcx
je 0x1400553e3
and edi, 0x1ff
imul edx, edi, 0x78
add rdx, rcx
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x1638]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x1638]
test rdi, rdi
je 0x1400553e3
cmp rdi, qword [rbp + 0x140]
je 0x1400553e3
lea rdx, [rsi + 0x3cb]
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 4]
lea r8, [rbp + 0x1568]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, 0x80
call fcn.14005c004
mov qword [rbp + 0x14e0], rax
lea rcx, [rax + 0x80]
mov qword [rbp + 0x14f0], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rbp + 0x14e8], rcx
lea rdx, [rsi + 0x638]
mov qword [rsp + 0x20], r15
mov r9d, 0x80
mov r8, qword [rbp + 0x14e0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x14e0]
lea rcx, [rbp + 0x15a0]
call fcn.140057f10
mov rcx, qword [rbp + 0x14e0]
test rcx, rcx
je 0x140054a97
mov rdx, qword [rbp + 0x14f0]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140054a92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056822
call fcn.14005bc9c
lea rdx, [rdi + 0x334]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x1570]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0x338]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x156c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x1570]
lea eax, [r13 - 1]
cmp eax, 0x63
ja 0x14005538d
cmp dword [rbp + 0x156c], 0x100
jne 0x14005538d
lea rdx, [rdi + 0x12f8]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x1600]
mov r14, qword [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1600]
add rdx, 0x12a2
mov qword [rsp + 0x20], r15
mov r9d, 2
lea r8, [rbp + 0x14d0]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x1400720da], r15b
je 0x140054b81
mov byte [rbp + 0x1480], 1
lea rdx, [rdi + 0x2280]
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x1480]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x230], xmm0
movaps xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], rax
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x208], 0xf
mov byte [rbp + 0x1f0], al
movaps xmmword [rbp + 0x260], xmm0
mov qword [rbp + 0x270], r15
mov qword [rbp + 0x278], rax
movaps xmmword [rbp + 0x280], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x290], xmm1
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x2a8], r15
movdqa xmmword [rbp + 0x2b0], xmm0
mov qword [rbp + 0x210], rdi
mov qword [rbp + 0x218], rsi
lea r9, [rbp + 0x15a0]
mov r14, qword [rbp + 0x15a0]
mov r15, qword [rbp + 0x15b8]
cmp r15, 0xf
cmova r9, r14
mov rsi, qword [rbp + 0x15b0]
lea rcx, [rbp + 0x1f0]
cmp rsi, 0xf
ja 0x140054c5f
mov qword [rbp + 0x200], rsi
mov r8, rsi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rsi + 0x1f0], 0
jmp 0x140054c75
mov rdx, rsi
call fcn.140059460
mov r15, qword [rbp + 0x15b8]
mov r14, qword [rbp + 0x15a0]
mov dword [rbp + 0x22c], r13d
mov dword [rbp + 0x240], 0x100
mov eax, dword [rbp + 0x1568]
mov dword [rbp + 0x230], eax
lea rdx, [rdi + 0x2280]
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 1]
lea r8, [rbp + 0x1491]
mov r13, qword [rsp + 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0x1491]
mov byte [rbp + 0x258], al
mov qword [rbp - 0x4c], rsi
mov dword [rbp - 0x44], esi
lea rdx, [rdi + 0x127c]
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0xc]
lea r8, [rbp - 0x4c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x4c]
movss dword [rbp + 0x278], xmm6
movss xmm8, dword [rbp - 0x48]
movss dword [rbp + 0x27c], xmm8
movss xmm7, dword [rbp - 0x44]
movss dword [rbp + 0x280], xmm7
mov qword [rbp - 0x28], rsi
mov dword [rbp - 0x20], esi
lea rdx, [rdi + 0xc58]
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 0xc]
lea r8, [rbp - 0x28]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x28]
movsd qword [rbp + 0x284], xmm0
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0x28c], eax
subss xmm7, dword [rbp + 0x1b0]
subss xmm8, dword [rbp + 0x1ac]
subss xmm6, dword [rbp + 0x1a8]
mulss xmm8, xmm8
mulss xmm6, xmm6
addss xmm8, xmm6
mulss xmm7, xmm7
addss xmm8, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm8
ja 0x140054d90
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x140054d99
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss dword [rbp + 0x238], xmm0
movzx ecx, word [rbp + 0x14d0]
mov word [rbp + 0x248], cx
call fcn.1400531a0
mov qword [rbp + 0x250], rax
lea rdx, [rdi + 0x318]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x15f8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x15f8]
add rdx, 0x1e0
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x15f0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x15f0]
mov qword [rbp + 0x270], rax
lea rdx, [rax + 0xc0]
mov qword [rbp - 0x64], rsi
mov dword [rbp - 0x5c], esi
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp - 0x64]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm3, dword [rbp - 0x64]
movss dword [rbp + 0x25c], xmm3
movss xmm2, dword [rbp - 0x60]
movss dword [rbp + 0x260], xmm2
movss xmm4, dword [rbp - 0x5c]
movss dword [rbp + 0x264], xmm4
movss xmm6, dword [rbp + 0x1504]
mulss xmm6, xmm2
movss xmm0, dword [rbp + 0x1500]
mulss xmm0, xmm3
addss xmm6, xmm0
movss xmm1, dword [rbp + 0x1508]
mulss xmm1, xmm4
addss xmm6, xmm1
addss xmm6, dword [rbp + 0x150c]
movss xmm5, dword [rbp + 0x1514]
mulss xmm5, xmm2
movss xmm0, dword [rbp + 0x1510]
mulss xmm0, xmm3
addss xmm5, xmm0
movss xmm1, dword [rbp + 0x1518]
mulss xmm1, xmm4
addss xmm5, xmm1
addss xmm5, dword [rbp + 0x151c]
movss xmm7, dword [rbp + 0x1534]
mulss xmm7, xmm2
movss xmm0, dword [rbp + 0x1530]
mulss xmm0, xmm3
addss xmm7, xmm0
movss xmm1, dword [rbp + 0x1538]
mulss xmm1, xmm4
addss xmm7, xmm1
addss xmm7, dword [rbp + 0x153c]
mov ecx, dword [0x140072bcc]
mov r8d, dword [0x140072bc8]
movss xmm9, dword [0x140067134]
comiss xmm9, xmm7
ja 0x140054f80
movaps xmm2, xmm11
divss xmm2, xmm7
mulss xmm6, xmm2
movss xmm3, dword [0x140067184]
mulss xmm6, xmm3
xorps xmm0, xmm0
cvtsi2ss xmm0, r8d
mulss xmm6, xmm0
addss xmm6, xmm3
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm6, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm5, xmm2
mulss xmm5, xmm3
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm5, xmm0
addss xmm5, xmm3
subss xmm1, xmm5
movaps xmm5, xmm1
movss dword [rbp + 0x268], xmm6
movss dword [rbp + 0x26c], xmm5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm5, xmm0
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
mulss xmm5, xmm5
mulss xmm6, xmm6
addss xmm5, xmm6
xorps xmm0, xmm0
ucomiss xmm0, xmm5
ja 0x140054fd2
xorps xmm0, xmm0
sqrtss xmm0, xmm5
jmp 0x140054fda
movaps xmm0, xmm5
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss dword [rbp + 0x23c], xmm0
mov rax, qword [rbp + 0x14c0]
cmp rax, qword [rbp + 0x14c8]
je 0x14005500e
lea rdx, [rbp + 0x1f0]
mov rcx, rax
call fcn.14005ad90
add qword [rbp + 0x14c0], 0xd0
jmp 0x140055024
lea r8, [rbp + 0x1f0]
mov rdx, rax
lea rcx, [rbp + 0x14b8]
call fcn.140059ae0
lea rcx, [rbp + 0x2a8]
call fcn.140058600
mov rdx, qword [rbp + 0x208]
cmp rdx, 0xf
jbe 0x140055071
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005506c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056829
call fcn.14005bc9c
cmp r15, 0xf
jbe 0x1400550a8
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400550a0
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056829
mov rcx, r14
call fcn.14005bc9c
mov r14, qword [rbp + 0x1488]
inc r12d
cmp r12d, 0x40
jl 0x140054840
mov r12, qword [rbp + 0x14c0]
mov r15, qword [rbp + 0x14b8]
cmp r15, r12
je 0x140055d08
lea r14, [r15 + 0x90]
nop word [rax + rax]
movss xmm2, dword [r14 - 4]
movss xmm7, dword [r14 - 8]
movss xmm3, dword [r14]
movaps xmm4, xmm7
movss xmm8, dword [rbp + 0x1510]
mulss xmm4, xmm8
movaps xmm0, xmm2
movss xmm10, dword [rbp + 0x1514]
mulss xmm0, xmm10
addss xmm4, xmm0
movaps xmm1, xmm3
movss xmm11, dword [rbp + 0x1518]
mulss xmm1, xmm11
addss xmm4, xmm1
movss xmm12, dword [rbp + 0x151c]
addss xmm4, xmm12
movaps xmm1, xmm7
movss xmm13, dword [rbp + 0x1530]
mulss xmm1, xmm13
movss xmm14, dword [rbp + 0x1534]
mulss xmm2, xmm14
addss xmm1, xmm2
movss xmm15, dword [rbp + 0x1538]
mulss xmm3, xmm15
addss xmm1, xmm3
addss xmm1, dword [rbp + 0x153c]
comiss xmm9, xmm1
ja 0x140055cb2
movss xmm0, dword [0x1400671c4]
divss xmm0, xmm1
mov ecx, dword [0x140072bcc]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
movss dword [rsp + 0x68], xmm1
xorps xmm2, xmm2
cvtsi2ss xmm2, ecx
movss dword [rbp + 0x1488], xmm2
mulss xmm4, xmm0
mulss xmm4, dword [0x140067184]
mulss xmm4, xmm2
addss xmm4, dword [0x140067184]
movaps xmm9, xmm1
subss xmm9, xmm4
movss xmm2, dword [r14 - 0x20]
movss xmm4, dword [r14 - 0x24]
movss xmm3, dword [r14 - 0x1c]
movaps xmm5, xmm4
mulss xmm5, dword [rbp + 0x1500]
movaps xmm0, xmm2
mulss xmm0, dword [rbp + 0x1504]
addss xmm5, xmm0
movaps xmm1, xmm3
mulss xmm1, dword [rbp + 0x1508]
addss xmm5, xmm1
addss xmm5, dword [rbp + 0x150c]
movaps xmm6, xmm4
mulss xmm6, xmm8
movaps xmm0, xmm2
mulss xmm0, xmm10
addss xmm6, xmm0
movaps xmm1, xmm3
mulss xmm1, xmm11
addss xmm6, xmm1
addss xmm6, xmm12
mulss xmm4, xmm13
mulss xmm2, xmm14
addss xmm4, xmm2
mulss xmm3, xmm15
addss xmm4, xmm3
addss xmm4, dword [rbp + 0x153c]
movss xmm0, dword [0x140067134]
comiss xmm0, xmm4
ja 0x140055ca9
movss xmm13, dword [0x1400671c4]
movaps xmm1, xmm13
divss xmm1, xmm4
movaps xmm11, xmm1
mulss xmm11, xmm5
movss xmm12, dword [0x140067184]
mulss xmm11, xmm12
mov eax, dword [0x140072bc8]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm11, xmm0
addss xmm11, xmm12
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm11, xmm0
mulss xmm1, xmm6
mulss xmm1, xmm12
mulss xmm1, dword [rbp + 0x1488]
addss xmm1, xmm12
movss xmm10, dword [rsp + 0x68]
subss xmm10, xmm1
movss dword [rsp + 0x68], xmm10
ucomiss xmm7, dword [0x140067110]
jp 0x1400552f7
je 0x140055ca9
subss xmm9, xmm10
movaps xmm7, xmm9
mulss xmm7, dword [0x140067154]
movaps xmm8, xmm9
divss xmm8, dword [0x140067200]
movss xmm14, dword [0x140067274]
cmp byte [0x140075394], 0
je 0x14005543e
cvttss2si r8d, xmm8
movaps xmm1, xmm10
movaps xmm2, xmm8
subss xmm1, xmm7
mulss xmm2, xmm12
movss dword [rsp + 0x38], xmm14
cvttss2si edx, xmm1
cmp byte [0x1400720de], 0
je 0x140055401
lea rcx, [0x140064310]
mov eax, dword [rbp + 0x160]
cmp dword [r14 - 0x50], eax
lea rax, [0x140072b98]
cmovne rcx, rax
movsd xmm0, qword [rcx]
movsd qword [rbp + 0x70], xmm0
mov eax, dword [rcx + 8]
mov dword [rbp + 0x78], eax
lea rax, [rbp + 0x70]
jmp 0x14005541b
mov rdx, qword [rbp + 0x15b8]
cmp rdx, 0xf
jbe 0x1400553ce
inc rdx
mov rcx, qword [rbp + 0x15a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400553c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056829
call fcn.14005bc9c
movss xmm9, dword [0x140067134]
mov r13, qword [rsp + 0x60]
xor esi, esi
jmp 0x1400550af
movss xmm9, dword [0x140067134]
xor esi, esi
jmp 0x1400550af
movss xmm9, dword [0x140067134]
jmp 0x1400550af
movsd xmm0, qword [0x140072b98]
movsd qword [rbp + 0x60], xmm0
mov eax, dword [0x140072ba0]
mov dword [rbp + 0x68], eax
lea rax, [rbp + 0x60]
movaps xmm0, xmm7
addss xmm0, xmm9
cvttss2si r9d, xmm0
movaps xmm0, xmm11
subss xmm0, xmm2
mov qword [rsp + 0x20], rax
cvttss2si ecx, xmm0
call fcn.140052f60
lea r9, [r14 - 0x90]
cmp qword [r14 - 0x78], 0xf
jbe 0x14005544f
mov r9, qword [r9]
movsd xmm0, qword [0x140064350]
movsd qword [rbp + 0x50], xmm0
mov eax, dword [0x140064358]
mov dword [rbp + 0x58], eax
cvttss2si edi, xmm11
movaps xmm0, xmm10
subss xmm0, xmm7
cvttss2si edx, xmm0
lea r8, [rbp + 0x50]
mov ecx, edi
call fcn.140052e50
cvttss2si edx, dword [r14 - 0x48]
lea rcx, [rbp + 0x15a0]
call fcn.140058700
lea r9, [rbp + 0x15a0]
cmp qword [rbp + 0x15b8], 0xf
cmova r9, qword [rbp + 0x15a0]
movsd xmm0, qword [0x140064360]
movsd qword [rbp + 0x40], xmm0
mov eax, dword [0x140064368]
mov dword [rbp + 0x48], eax
movaps xmm1, xmm7
addss xmm1, xmm7
movaps xmm0, xmm10
subss xmm0, xmm1
cvttss2si edx, xmm0
lea r8, [rbp + 0x40]
mov ecx, edi
call fcn.140052e50
mov rdx, qword [rbp + 0x15b8]
cmp rdx, 0xf
jbe 0x14005551f
inc rdx
mov rcx, qword [rbp + 0x15a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005551a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056830
call fcn.14005bc9c
mov qword [rbp + 0x15b0], rsi
mov qword [rbp + 0x15b8], 0xf
mov byte [rbp + 0x15a0], 0
cmp byte [0x1400720dd], 0
je 0x140055586
movsd xmm0, qword [0x140064320]
movsd qword [rbp + 0x30], xmm0
mov eax, dword [0x140064328]
mov dword [rbp + 0x38], eax
movaps xmm0, xmm10
addss xmm0, xmm9
cvttss2si edx, xmm0
movaps xmm1, xmm8
mulss xmm1, xmm12
movaps xmm0, xmm11
subss xmm0, xmm1
cvttss2si ecx, xmm0
mov r9, qword [r14 - 0x30]
lea r8, [rbp + 0x30]
call fcn.140052e50
cmp byte [0x1400720db], 0
je 0x1400556f3
movsd xmm0, qword [0x140064330]
movsd qword [rbp + 0xd0], xmm0
mov eax, dword [0x140064338]
mov dword [rbp + 0xd8], eax
mov eax, 0x64
sub eax, dword [r14 - 0x54]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm9
divss xmm2, xmm14
mulss xmm8, xmm12
addss xmm8, dword [0x140067248]
movaps xmm6, xmm11
subss xmm6, xmm8
movaps xmm0, xmm9
subss xmm0, xmm2
addss xmm0, xmm7
cvttss2si r9d, xmm0
movaps xmm1, xmm10
addss xmm1, xmm2
subss xmm1, xmm7
cvttss2si edx, xmm1
cvttss2si ecx, xmm6
movss xmm0, dword [0x14006728c]
movss dword [rsp + 0x38], xmm0
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
mov r8d, 3
call fcn.140052f60
mov edx, dword [r14 - 0x54]
lea rcx, [rbp + 8]
call fcn.140058700
lea r9, [rbp + 8]
cmp qword [rbp + 0x20], 0xf
cmova r9, qword [rbp + 8]
mov eax, 0x64
sub eax, dword [r14 - 0x54]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm9
divss xmm0, xmm14
addss xmm0, xmm10
subss xmm0, xmm7
subss xmm0, dword [0x14006725c]
cvttss2si edx, xmm0
movsd xmm0, qword [0x140064340]
movsd qword [rbp + 0xc0], xmm0
mov eax, dword [0x140064348]
mov dword [rbp + 0xc8], eax
subss xmm6, dword [0x140067244]
cvttss2si ecx, xmm6
lea r8, [rbp + 0xc0]
call fcn.140052e50
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x1400556e3
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400556de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056837
call fcn.14005bc9c
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
cmp byte [0x1400720d9], 0
je 0x140055bc9
lea r15, [0x140072104]
lea rbx, [0x140064370]
nop
mov eax, dword [r15 - 4]
mov edi, dword [r15]
shl eax, 5
movsxd rdx, eax
add rdx, qword [r14 - 0x10]
mov qword [rbp + 0x1548], 0
mov dword [rbp + 0x1550], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x1548]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
shl edi, 5
movsxd rdx, edi
add rdx, qword [r14 - 0x10]
mov qword [rbp + 0x1558], 0
mov dword [rbp + 0x1560], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x1558]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x1504]
movaps xmm7, xmm6
movss xmm4, dword [rbp + 0x154c]
mulss xmm7, xmm4
movss xmm12, dword [rbp + 0x1500]
movaps xmm0, xmm12
movss xmm3, dword [rbp + 0x1548]
mulss xmm0, xmm3
addss xmm7, xmm0
movss xmm13, dword [rbp + 0x1508]
movaps xmm1, xmm13
movss xmm2, dword [rbp + 0x1550]
mulss xmm1, xmm2
addss xmm7, xmm1
addss xmm7, dword [rbp + 0x150c]
movss xmm9, dword [rbp + 0x1514]
movaps xmm8, xmm9
mulss xmm8, xmm4
movss xmm14, dword [rbp + 0x1510]
movaps xmm0, xmm14
mulss xmm0, xmm3
addss xmm8, xmm0
movss xmm15, dword [rbp + 0x1518]
movaps xmm1, xmm15
mulss xmm1, xmm2
addss xmm8, xmm1
addss xmm8, dword [rbp + 0x151c]
movss xmm5, dword [rbp + 0x1534]
movaps xmm10, xmm5
mulss xmm10, xmm4
movss xmm4, dword [rbp + 0x1530]
movaps xmm0, xmm4
mulss xmm0, xmm3
addss xmm10, xmm0
movss xmm3, dword [rbp + 0x1538]
movaps xmm1, xmm3
mulss xmm1, xmm2
addss xmm10, xmm1
addss xmm10, dword [rbp + 0x153c]
mov ecx, dword [0x140072bcc]
mov r8d, dword [0x140072bc8]
movss xmm0, dword [0x140067134]
comiss xmm0, xmm10
ja 0x140055907
movss xmm2, dword [0x1400671c4]
divss xmm2, xmm10
mulss xmm7, xmm2
movss xmm10, dword [0x140067184]
mulss xmm7, xmm10
xorps xmm0, xmm0
cvtsi2ss xmm0, r8d
mulss xmm7, xmm0
addss xmm7, xmm10
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm7, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm8, xmm2
mulss xmm8, xmm10
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm8, xmm0
addss xmm8, xmm10
subss xmm1, xmm8
movaps xmm8, xmm1
jmp 0x140055910
movss xmm10, dword [0x140067184]
movss xmm2, dword [rbp + 0x155c]
mulss xmm6, xmm2
movss xmm1, dword [rbp + 0x1558]
mulss xmm12, xmm1
addss xmm6, xmm12
movss xmm0, dword [rbp + 0x1560]
mulss xmm13, xmm0
addss xmm6, xmm13
addss xmm6, dword [rbp + 0x150c]
mulss xmm9, xmm2
mulss xmm14, xmm1
addss xmm9, xmm14
mulss xmm15, xmm0
addss xmm9, xmm15
addss xmm9, dword [rbp + 0x151c]
mulss xmm5, xmm2
mulss xmm4, xmm1
addss xmm5, xmm4
mulss xmm3, xmm0
addss xmm5, xmm3
addss xmm5, dword [rbp + 0x153c]
movss xmm0, dword [0x140067134]
movss xmm13, dword [0x1400671c4]
comiss xmm0, xmm5
ja 0x140055a01
movaps xmm2, xmm13
divss xmm2, xmm5
mulss xmm6, xmm2
mulss xmm6, xmm10
xorps xmm0, xmm0
cvtsi2ss xmm0, r8d
mulss xmm6, xmm0
addss xmm6, xmm10
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm6, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm9
mulss xmm2, xmm10
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm0
addss xmm2, xmm10
subss xmm1, xmm2
movaps xmm9, xmm1
movaps xmm2, xmm13
movss xmm1, dword [rsp + 0x68]
cmp byte [0x140075394], 0
je 0x140055acb
movsd xmm0, qword [0x140064370]
movsd qword [rbp + 0xb0], xmm0
mov eax, dword [0x140064378]
mov dword [rbp + 0xb8], eax
movss xmm0, dword [0x14006728c]
movss dword [rsp + 0x28], xmm0
lea r9, [rbp + 0xb0]
movaps xmm0, xmm11
call fcn.140053060
movsd xmm0, qword [0x140064370]
movsd qword [rbp + 0x100], xmm0
mov edi, dword [0x140064378]
mov rax, qword [0x140072b88]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008350
or edi, 0xffffff00
shl edi, 8
mov rdx, qword [rbp + 0x100]
mov r9, rdx
shr r9, 0x20
or r9d, edi
shl r9d, 8
or r9d, edx
movss dword [rbp - 4], xmm6
movss dword [rbp], xmm9
movss dword [rbp - 0xc], xmm7
movss dword [rbp - 8], xmm8
lea r8, [rbp - 4]
lea rdx, [rbp - 0xc]
jmp 0x140055b94
lea rdi, [0x140064310]
mov rcx, rdi
mov eax, dword [rbp + 0x160]
cmp dword [r14 - 0x50], eax
cmovne rcx, rbx
movsd xmm0, qword [rcx]
movsd qword [rbp + 0x90], xmm0
mov eax, dword [rcx + 8]
mov dword [rbp + 0x98], eax
movss xmm0, dword [0x14006728c]
movss dword [rsp + 0x28], xmm0
lea r9, [rbp + 0x90]
movaps xmm0, xmm11
call fcn.140053060
mov rcx, rdi
mov eax, dword [rbp + 0x160]
cmp dword [r14 - 0x50], eax
cmovne rcx, rbx
movsd xmm0, qword [rcx]
movsd qword [rbp + 0x15d0], xmm0
mov edi, dword [rcx + 8]
mov rax, qword [0x140072b88]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008350
or edi, 0xffffff00
shl edi, 8
mov rdx, qword [rbp + 0x15d0]
mov r9, rdx
shr r9, 0x20
or r9d, edi
shl r9d, 8
or r9d, edx
movss dword [rbp - 0x14], xmm6
movss dword [rbp - 0x10], xmm9
movss dword [rbp - 0x1c], xmm7
movss dword [rbp - 0x18], xmm8
lea r8, [rbp - 0x14]
lea rdx, [rbp - 0x1c]
movss xmm0, dword [0x1400671d4]
movss dword [rsp + 0x20], xmm0
mov rcx, rax
call fcn.140029380
inc esi
add r15, 8
cmp esi, 0x10
jb 0x140055710
movss xmm12, dword [0x140067184]
movzx ebx, byte [rbp + 0x1480]
movss xmm8, dword [0x1400720d4]
mov eax, dword [0x140072bcc]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov eax, dword [0x140072bc8]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov rax, qword [0x140072b88]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140008350
mov rdi, rax
movups xmm0, xmmword [0x1400720e0]
movups xmmword [rbp + 0x15e0], xmm0
lea rcx, [rbp + 0x15e0]
call fcn.140003b30
mov esi, eax
movss dword [rbp + 0x1540], xmm6
movss dword [rbp + 0x1544], xmm7
test eax, 0xff000000
je 0x140055ca7
comiss xmm12, xmm8
ja 0x140055ca7
subss xmm8, xmm12
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
movaps xmm2, xmm8
lea rdx, [rbp + 0x1540]
mov rcx, rdi
call fcn.140028510
mov r8d, dword [rdi + 0x78]
dec r8d
mov dword [rdi + 0x78], r8d
movss dword [rsp + 0x28], xmm13
mov dword [rsp + 0x20], 1
mov r9d, esi
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.140027070
xor esi, esi
mov dword [rdi + 0x78], esi
jmp 0x140055ca9
xor esi, esi
movss xmm9, dword [0x140067134]
add r14, 0xd0
lea rax, [r14 - 0x90]
cmp rax, r12
jne 0x1400550e0
mov r12, qword [rbp + 0x14c0]
mov r15, qword [rbp + 0x14b8]
movss xmm11, dword [0x1400671c4]
xorps xmm10, xmm10
movss xmm12, dword [0x140067258]
movss xmm13, dword [0x1400671e8]
movsd xmm14, qword [0x140067228]
movsd xmm15, qword [0x1400671f8]
cmp byte [0x1400720f1], 0
je 0x1400561bb
mov rcx, r12
sub rcx, r15
movabs rax, 0x4ec4ec4ec4ec4ec5
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400561bb
cmp byte [0x1400720de], 0
je 0x140055e1c
mov r14, r12
mov rdi, r15
mov eax, dword [rbp + 0x160]
cmp r15, r12
je 0x140055d71
nop word [rax + rax]
cmp dword [rdi + 0x40], eax
je 0x140055d71
add rdi, 0xd0
cmp rdi, r12
jne 0x140055d60
cmp rdi, r12
je 0x140055db9
lea rsi, [rdi + 0xd0]
cmp rsi, r12
je 0x140055db9
cmp dword [rsi + 0x40], eax
je 0x140055d9f
mov rdx, rsi
mov rcx, rdi
call fcn.140058da0
add rdi, 0xd0
mov eax, dword [rbp + 0x160]
add rsi, 0xd0
cmp rsi, r14
jne 0x140055d82
mov r12, qword [rbp + 0x14c0]
mov r15, qword [rbp + 0x14b8]
cmp rdi, r14
je 0x140055e1c
cmp r14, r12
je 0x140055def
mov rdx, r14
mov rcx, rdi
call fcn.140058da0
add rdi, 0xd0
add r14, 0xd0
cmp r14, r12
jne 0x140055dc3
mov r12, qword [rbp + 0x14c0]
mov r15, qword [rbp + 0x14b8]
mov rsi, rdi
cmp rdi, r12
je 0x140055e12
mov rcx, rsi
call fcn.14005a880
add rsi, 0xd0
cmp rsi, r12
jne 0x140055df7
mov r15, qword [rbp + 0x14b8]
mov r12, rdi
mov qword [rbp + 0x14c0], rdi
mov r8, r12
sub r8, r15
movabs rax, 0x4ec4ec4ec4ec4ec5
imul r8
mov rsi, rdx
sar rsi, 6
mov rax, rsi
shr rax, 0x3f
add rsi, rax
cmp rsi, 0x20
jg 0x140055e56
mov rdx, r12
mov rcx, r15
call fcn.140059860
jmp 0x140055f15
mov rax, rsi
cqo
sub rax, rdx
sar rax, 1
mov rdi, rsi
sub rdi, rax
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
cmp rdi, rcx
cmovl rax, rdi
cmp rdi, 0x13
jbe 0x140055ed0
mov rdi, rax
movabs rcx, 0x13b13b13b13b13b
cmp rax, rcx
ja 0x140055ec1
test rax, rax
jle 0x140055ec1
nop dword [rax + rax]
imul rcx, rdi, 0xd0
lea rdx, [0x14005e880]
call fcn.14005c040
test rax, rax
jne 0x140055fd7
shr rdi, 1
jne 0x140055ea0
xor eax, eax
mov rcx, rax
call fcn.14005c054
mov edi, 0x13
lea rax, [rbp + 0x510]
mov qword [rbp + 0x500], rax
mov qword [rbp + 0x508], rdi
mov byte [rsp + 0x28], bl
mov qword [rsp + 0x20], rdi
mov r9, rax
mov r8, rsi
mov rdx, r12
mov rcx, r15
call fcn.1400599e0
cmp qword [rbp + 0x508], 0x13
jbe 0x140055f15
mov rcx, qword [rbp + 0x500]
call fcn.14005c054
mov rdi, qword [rbp + 0x14b8]
movss xmm0, dword [0x1400720d4]
comiss xmm0, dword [rdi + 0x4c]
jbe 0x140056054
movss xmm8, dword [rbp + 0x1bc]
addss xmm8, dword [rbp + 0x1b0]
movss xmm1, dword [rbp + 0x1b8]
addss xmm1, dword [rbp + 0x1ac]
movss xmm0, dword [rbp + 0x1b4]
addss xmm0, dword [rbp + 0x1a8]
movss xmm6, dword [rdi + 0x6c]
subss xmm6, xmm0
movss xmm7, dword [rdi + 0x70]
subss xmm7, xmm1
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mulsd xmm1, xmm14
divsd xmm1, xmm15
cvtpd2ps xmm10, xmm1
movss xmm9, dword [rdi + 0x74]
subss xmm9, xmm8
cvtps2pd xmm0, xmm6
movsd xmm1, qword [0x1400671f0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movsd xmm1, qword [0x1400671f0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x140055fe6
xorps xmm1, xmm1
sqrtsd xmm1, xmm0
jmp 0x140055fee
cmp rdi, 0x13
jbe 0x140055ec3
jmp 0x140055ed7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm1, xmm0
cvtps2pd xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
mulsd xmm0, xmm14
divsd xmm0, xmm15
xorps xmm0, xmmword [0x140067410]
cvtsd2ss xmm0, xmm0
unpcklps xmm0, xmm10
movsd qword [rbp + 0xa0], xmm0
xorps xmm0, xmm0
movss dword [rbp + 0xa8], xmm0
mov rsi, qword [rsp + 0x70]
lea rdx, [rsi + 0x19342e0]
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0xa0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm10, xmm10
jmp 0x140056059
mov rsi, qword [rsp + 0x70]
cmp byte [0x1400720dc], 0
je 0x1400561b9
cmp dword [rbp + 0x174], 0
jle 0x1400561b9
mov dword [rbp + 0x1488], 0x10001
lea rdx, [rsi + 0x1733230]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x1488]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, [rbp + 0xe0]
call fcn.140052d70
mov rax, qword [rbp + 0xe0]
movabs r12, 0x7fffffffffe17b7f
mov r14d, 0xff
cmp rax, r12
je 0x1400560df
mov ecx, 1
cmovl ecx, r14d
test cl, cl
lea rdi, [rax + 0x1e8480]
js 0x1400560e9
movabs rdi, 0x7fffffffffffffff
movabs rbx, 0x4e94914effff
movabs r13, 0x431bde82d7b634db
nop dword [rax]
lea rcx, [rbp + 0xe8]
call fcn.140052d70
mov rax, qword [rbp + 0xe8]
cmp rdi, rax
je 0x140056168
mov ecx, 1
cmovl ecx, r14d
test cl, cl
jle 0x140056168
mov rcx, rdi
sub rcx, rax
cmp rcx, rbx
jg 0x14005615c
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140056153
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140056100
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140056100
mov dword [rbp + 0x1488], 0x100
lea rdx, [rsi + 0x1733230]
xor esi, esi
mov qword [rsp + 0x20], rsi
lea r9d, [rsi + 4]
lea r8, [rbp + 0x1488]
mov r13, qword [rsp + 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x1488], 2
lea rcx, [rbp + 0x1488]
call fcn.140058fd0
movzx ebx, byte [rbp + 0x1480]
jmp 0x1400561bb
xor esi, esi
cmp byte [0x1400720d8], 0
je 0x140056205
movss xmm0, dword [rbp + 0x164]
comiss xmm0, xmm10
jbe 0x140056205
mov dword [rbp + 0x1488], 0
mov rdx, qword [rbp + 0x140]
add rdx, 0x1350
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1488]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x1400720f0], 0
je 0x140056275
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140056275
mov eax, dword [rbp + 0x158]
add eax, 0xfffeff7f
mov r15, qword [rsp + 0x70]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1488]
mov rcx, r13
lea rdx, [r15 + 0x1733740]
test eax, 0xfffffffd
je 0x140056263
mov dword [rbp + 0x1488], 0x100
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14005627a
mov dword [rbp + 0x1488], 0x10001
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14005627a
mov r15, qword [rsp + 0x70]
cmp dword [rbp + 0x158], 0x10080
jne 0x1400564a3
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400564a3
mov qword [rbp + 0x1488], 3
lea rcx, [rbp + 0x1488]
call fcn.140058fd0
mov rdx, qword [rbp + 0x140]
add rdx, 0x3d8
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x68], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp - 0x70]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x70]
movss dword [0x140075420], xmm0
movss xmm1, dword [rbp - 0x6c]
movss xmm0, dword [rbp - 0x68]
movss xmm11, dword [0x1400672f8]
movss dword [0x140075428], xmm0
movss dword [0x140075424], xmm1
comiss xmm0, xmm12
ja 0x140056326
comiss xmm11, xmm0
jbe 0x140056374
mov qword [rbp - 0x58], 0
mov dword [rbp - 0x50], 0
mov rdx, qword [rbp + 0x140]
add rdx, 0x3d8
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp - 0x58]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x58]
movss dword [0x140075420], xmm0
movss xmm1, dword [rbp - 0x54]
movss xmm0, dword [rbp - 0x50]
jmp 0x14005630a
mov dword [rbp + 0x1488], 0x10001
lea rdx, [r15 + 0x1733230]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1488]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, [rbp + 0xf0]
call fcn.140052d70
mov rax, qword [rbp + 0xf0]
movabs r12, 0x7ffffffffff0bdbf
cmp rax, r12
movss xmm11, dword [0x1400671c4]
mov r14d, 0xff
je 0x1400563e5
mov ecx, 1
cmovl ecx, r14d
test cl, cl
lea rdi, [rax + 0xf4240]
js 0x1400563ef
movabs rdi, 0x7fffffffffffffff
movabs rbx, 0x4e94914effff
movabs r13, 0x431bde82d7b634db
lea rcx, [rbp + 0x80]
call fcn.140052d70
mov rax, qword [rbp + 0x80]
cmp rdi, rax
je 0x14005646b
mov ecx, 1
cmovl ecx, r14d
test cl, cl
jle 0x14005646b
mov rcx, rdi
sub rcx, rax
cmp rcx, rbx
jg 0x14005645f
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140056456
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140056403
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140056403
mov dword [rbp + 0x1488], 0x100
lea rdx, [r15 + 0x1733230]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1488]
mov r13, qword [rsp + 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx ebx, byte [rbp + 0x1480]
mov edi, dword [0x14007540c]
mov rdx, qword [rbp + 0x140]
add rdx, 0x1138
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x1648]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1648]
mov qword [rbp + 0x150], rax
lea rdx, [rax + 0x210]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x159c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x140]
add rdx, 0x2290
mov qword [rsp + 0x20], rsi
mov r9d, 1
lea r8, [rbp + 0x1490]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x1490], 0
jne 0x14005656b
cmp dword [rbp + 0x159c], edi
je 0x14005656b
mov dword [rbp + 0x1488], edi
mov rdx, qword [rbp + 0x150]
add rdx, 0x210
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x1488]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm2, dword [rbp + 0x1d0]
mulss xmm2, xmm2
movss xmm0, dword [rbp + 0x1cc]
mulss xmm0, xmm0
addss xmm2, xmm0
movss xmm1, dword [rbp + 0x1d4]
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400565a8
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1400565b0
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si eax, xmm0
mov dword [0x1400753a0], eax
cmp byte [0x1400720d0], 0
je 0x14005680c
mov rdx, qword [rbp + 0x140]
add rdx, 0x22a4
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x19b0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x19240a8]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rbp + 0x1618]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1618]
add rdx, 0x40
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rbp + 0x110]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x140]
add rdx, 0x14f8
mov qword [rbp + 0x1498], rsi
mov qword [rbp + 0x14a0], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 0x10
lea r8, [rbp + 0x1498]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x14a0]
test rdx, rdx
je 0x140056811
mov rcx, qword [rbp + 0x1498]
lea rax, [rcx - 1]
cmp rax, 0xfffd
ja 0x140056811
dec rcx
lea rax, [rcx + rcx*2]
lea rdx, [rdx + rax*4]
mov qword [rbp - 0x7c], 0
mov dword [rbp - 0x74], 0
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp - 0x7c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x7c]
movss dword [rbp + 0x1c0], xmm0
movss xmm1, dword [rbp - 0x78]
movss dword [rbp + 0x1c4], xmm1
movss xmm0, dword [rbp - 0x74]
movss dword [rbp + 0x1c8], xmm0
cmp dword [rbp + 0x19b0], 1
jle 0x1400567f7
mov qword [rbp + 0x1588], 0
mov dword [rbp + 0x1590], 0
lea rdx, [r15 + 0x19342e0]
mov qword [rsp + 0x20], rsi
mov r9d, 0xc
lea r8, [rbp + 0x1588]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x1c4]
mulss xmm0, xmm13
movss xmm1, dword [0x140075434]
subss xmm1, xmm0
movss xmm4, dword [rbp + 0x158c]
addss xmm1, xmm4
subss xmm4, xmm1
movss xmm3, dword [rbp + 0x110]
mulss xmm3, dword [0x140067138]
movss xmm0, dword [rbp + 0x1c0]
mulss xmm0, xmm13
movss xmm1, dword [0x140075430]
subss xmm1, xmm0
movss xmm2, dword [rbp + 0x1588]
addss xmm1, xmm2
subss xmm2, xmm1
divss xmm2, xmm3
cvttss2si edx, xmm2
divss xmm4, xmm3
cvttss2si r8d, xmm4
neg r8d
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
movss xmm2, dword [rbp + 0x1c8]
mulss xmm2, xmm13
movss xmm1, dword [rbp + 0x1c4]
mulss xmm1, xmm13
movss xmm0, dword [rbp + 0x1c0]
mulss xmm0, xmm13
unpcklps xmm0, xmm1
movsd qword [0x140075430], xmm0
movss dword [0x140075438], xmm2
jmp 0x14005680c
mov qword [0x140075434], 0
mov dword [0x140075430], 0
call fcn.1400523a0
movzx eax, byte [0x1400720f3]
test al, al
jne 0x1400544c0
jmp 0x140056840
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor esi, esi
movabs r14, 0x4ec4ec4ec4ec4ec5
call fcn.140052160
nop
mov rcx, qword [0x140075330]
test rcx, rcx
je 0x140056869
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140075330], rsi
mov rcx, qword [0x140075388]
test rcx, rcx
je 0x140056882
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140075388], rsi
mov rcx, qword [0x140075398]
test rcx, rcx
je 0x14005689b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140075398], rsi
mov rcx, qword [0x1400753a8]
test rcx, rcx
je 0x1400568b4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1400753a8], rsi
mov rcx, qword [0x140075400]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x1400753c8]
mov rcx, qword [0x1400753f0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea rcx, [rbp + 0x1778]
call fcn.140058340
test rax, rax
jne 0x140056908
mov rax, qword [rbp + 0x1770]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1770]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rbx, qword [rbp + 0x14b8]
test rbx, rbx
je 0x1400569a3
mov rdi, qword [rbp + 0x14c0]
cmp rbx, rdi
je 0x14005693f
mov rcx, rbx
call fcn.14005a880
add rbx, 0xd0
cmp rbx, rdi
jne 0x140056924
mov rbx, qword [rbp + 0x14b8]
mov rcx, qword [rbp + 0x14c8]
sub rcx, rbx
mov rax, r14
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xd0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140056989
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056b11
mov rcx, rbx
call fcn.14005bc9c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x14b8], xmm0
mov qword [rbp + 0x14c8], rsi
lea rcx, [rbp + 0x1d8]
call fcn.140058600
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x1400569f0
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400569eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140056b11
call fcn.14005bc9c
movdqa xmm0, xmmword [0x140067340]
movdqa xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x120], 0
mov rax, qword [rbp + 0x1650]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x1650], rax
mov rax, qword [rbp + 0x1650]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x164c], edx
lea rcx, [rbp + 0x1668]
call fcn.140057df0
lea rcx, [rbp + 0x1670]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x16e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140056a6f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140072bb0]
test rcx, rcx
je 0x140056a81
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x1770]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1770], rax
mov rax, qword [rbp + 0x1770]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x176c], edx
lea rcx, [rbp + 0x1778]
call fcn.140057780
lea rcx, [rbp + 0x1780]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1818]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp + 0x1768]
cmp rdx, 0xf
jbe 0x140056b1d
inc rdx
mov rcx, qword [rbp + 0x1750]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056b18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056b18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005bc9c
xor eax, eax
mov rcx, qword [rbp + 0x19b8]
xor rcx, rsp
call fcn.14005bb00
lea r11, [rsp + 0x1b60]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret