Function at 0x140009260
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x898]
sub rsp, 0x970
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14004f040]
xor rax, rsp
mov qword [rbp + 0x7c0], rax
xor r14d, r14d
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_clock]
mov ebx, eax
mov ecx, dword [0x14004f0d4]
add ecx, 0x1388
cmp eax, ecx
jl 0x1400093cc
mov rcx, qword [0x14004f878]
test rcx, rcx
je 0x1400093cc
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongPtrA]
mov rdi, rax
lea rdx, [0x14004f858]
mov rcx, qword [0x14004f878]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [0x14004f860]
mov edx, dword [0x14004f858]
mov ecx, dword [0x14004f85c]
sub eax, edx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mov eax, dword [0x14004f864]
movss dword [0x14004f888], xmm0
sub eax, ecx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
test rdi, 0xc00000
je 0x140009399
mov byte [0x14004f890], 1
addss xmm0, dword [0x1400480a4]
movss dword [0x14004f88c], xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [0x14004f880], xmm0
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [0x14004f884], xmm1
jmp 0x1400093c6
mov byte [0x14004f890], r14b
movss dword [0x14004f88c], xmm0
movd xmm1, edx
cvtdq2ps xmm1, xmm1
movss dword [0x14004f880], xmm1
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [0x14004f884], xmm0
mov dword [0x14004f0d4], ebx
xor ecx, ecx
call fcn.140004a20
cmp qword [0x14004f808], r14
je 0x14000a2ba
mov rdx, qword [0x14004f7d8]
add rdx, 0x2c0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x720]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x720]
mov qword [0x14004f7f8], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm14, xmm14
mov qword [rsp + 0x40], r14
add rdx, 0x1b40
mov qword [rsp + 0x20], r14
mov r9d, 0x1c
lea r8, [rsp + 0x30]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [0x14004fa48], xmm0
movsd xmm1, qword [rsp + 0x40]
movsd qword [0x14004fa58], xmm1
mov eax, dword [rsp + 0x48]
mov dword [0x14004fa60], eax
cmp qword [0x14004f800], r14
jne 0x140009484
mov cl, 1
call fcn.140004a20
call fcn.140005320
test al, al
je 0x140009553
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_clock]
mov edi, eax
mov ecx, dword [0x14004f0cc]
add ecx, 0xbb8
cmp eax, ecx
jl 0x140009553
mov rdx, qword [0x14004f820]
add rdx, 0x30
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x720]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x720]
mov qword [0x14004f7d8], rcx
lea rdx, [rcx + 0x230]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x778]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x778]
mov qword [0x14004f7f0], rax
lea rdx, [rax + 0x288]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x720]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x720]
mov qword [0x14004f7e0], rax
mov dword [0x14004f0cc], edi
call fcn.1400065a0
cmp byte [0x14004f7bb], r14b
je 0x14000957d
cmp byte [0x14004f7a0], r14b
je 0x14000956f
call fcn.140007350
cmp byte [0x14004f7cb], r14b
je 0x14000957d
call fcn.1400085f0
mov r13d, r14d
mov rcx, qword [0x14004fa38]
sub rcx, qword [0x14004fa30]
movabs r15, 0xb21642c8590b2165
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14000a2ba
mov rsi, r14
mov qword [rbp + 0x730], r14
movss xmm6, dword [0x140048590]
movss xmm7, dword [0x140048014]
movss xmm9, dword [0x140048094]
movss xmm10, dword [0x1400480d0]
movss xmm12, dword [0x140048048]
movss xmm15, dword [0x1400480f0]
nop dword [rax]
nop word [rax + rax]
imul rbx, rsi, 0x170
mov rcx, qword [0x14004fa30]
mov rax, qword [0x14004f8c0]
cmp qword [rbx + rcx], rax
je 0x14000a27c
movss xmm2, dword [rbx + rcx + 0x3c]
divss xmm2, dword [0x140048100]
movss xmm3, dword [0x1400480c4]
divss xmm3, xmm2
movss xmm0, dword [0x14004f888]
divss xmm0, dword [0x14004810c]
mulss xmm3, xmm0
movss xmm1, dword [0x1400480d4]
divss xmm1, xmm2
movss xmm0, dword [0x14004f88c]
divss xmm0, dword [0x140048104]
mulss xmm1, xmm0
movss dword [0x14004f7d0], xmm3
movss dword [0x14004f7d4], xmm1
cmp byte [0x14004f7bb], 0
je 0x140009fb6
cmp byte [rbx + rcx + 0xb0], 0
jne 0x140009fb6
cmp byte [rbx + rcx + 0xb1], 0
jne 0x140009fb6
cmp byte [rbx + rcx + 0xb2], 0
jne 0x140009fb6
cmp byte [0x14004f7a7], 0
je 0x140009734
movzx eax, byte [0x14004f950]
cmp byte [rbx + rcx + 0x90], al
je 0x1400096d7
movdqa xmm0, xmmword [0x140048350]
jmp 0x1400096df
movdqa xmm0, xmmword [0x1400483a0]
movdqa xmmword [rbp + 0x740], xmm0
mov eax, dword [rbx + rcx + 0x38]
movsd xmm0, qword [rbx + rcx + 0x30]
cmp byte [0x14004f7a8], 0
je 0x14000971c
movsd qword [rbp - 0x80], xmm0
mov dword [rbp - 0x78], eax
lea r8, [rbp + 0x740]
movss xmm1, dword [0x14004f7b0]
lea rcx, [rbp - 0x80]
call fcn.140002d60
jmp 0x140009734
movsd qword [rbp - 0x70], xmm0
mov dword [rbp - 0x68], eax
lea rdx, [rbp + 0x740]
lea rcx, [rbp - 0x70]
call fcn.140003130
cmp byte [0x14004f7c8], 0
je 0x14000979a
movzx eax, byte [0x14004f950]
mov rcx, qword [0x14004fa30]
cmp byte [rcx + rbx + 0x90], al
je 0x14000979a
movsxd rax, r13d
imul rdi, rax, 0x170
lea rdx, [rdi + rcx]
lea rcx, [rbp - 0x10]
call fcn.1400061a0
mov rcx, rax
call fcn.140008bf0
cmp byte [0x14004f7bf], 0
je 0x14000979a
mov rdx, qword [0x14004fa30]
add rdx, rdi
lea rcx, [rbp + 0x160]
call fcn.1400061a0
mov rcx, rax
call fcn.140008f40
cmp byte [0x14004f7b7], 0
je 0x140009814
mov rax, qword [0x14004fa30]
lea r8, [rax + 0x10]
add r8, rbx
cmp qword [r8 + 0x18], 0xf
jbe 0x1400097bb
mov r8, qword [r8]
movsd xmm0, qword [rax + rbx + 0x30]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [rax + rbx + 0x38]
mov dword [rbp - 0x58], eax
movaps xmm1, xmm14
lea rcx, [rbp - 0x60]
call fcn.140001d80
lea r8, [0x14004f8d0]
cmp qword [0x14004f8e8], 0xf
cmova r8, qword [0x14004f8d0]
movsd xmm0, qword [0x14004f8f0]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [0x14004f8f8]
mov dword [rbp - 0x48], eax
movaps xmm1, xmm14
lea rcx, [rbp - 0x50]
call fcn.140001d80
cmp byte [0x14004f7b6], 0
je 0x1400098f3
mov rax, qword [0x14004fa30]
movsd xmm6, qword [rax + rbx + 0x30]
mov eax, dword [rax + rbx + 0x38]
mov dword [rbp + 0x748], eax
mov rax, qword [0x14004f840]
mov rax, qword [rax + 0x48b8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400112d0
mov rdi, rax
movdqa xmm0, xmmword [0x140048350]
movups xmmword [rbp + 0x740], xmm0
lea rcx, [rbp + 0x740]
call fcn.14000dcb0
movss dword [rsp + 0x50], xmm6
movaps xmm0, xmm6
shufps xmm0, xmm0, 0x55
movsd qword [rbp + 0x740], xmm6
movss dword [rsp + 0x54], xmm0
movss xmm1, dword [0x14004f88c]
mulss xmm1, xmm7
addss xmm1, dword [0x14004f884]
movss xmm0, dword [0x14004f888]
mulss xmm0, xmm7
addss xmm0, dword [0x14004f880]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
movss xmm11, dword [0x14004805c]
movss dword [rsp + 0x20], xmm11
mov r9d, eax
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.14002f670
movss xmm6, dword [0x140048590]
jmp 0x1400098fc
movss xmm11, dword [0x14004805c]
cmp byte [0x14004f7b4], 0
je 0x140009982
lea rdi, [rbp + 0x788]
xor eax, eax
mov ecx, 0x32
rep stosb byte [rdi], al
mov rax, qword [0x14004fa30]
cvttss2si ecx, dword [rax + rbx + 0x3c]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov r8d, edx
shr r8d, 0x1f
add r8d, edx
lea rdx, str._i_Meters_n
lea rcx, [rbp + 0x788]
call fcn.14000ab70
movss xmm1, dword [0x14004f7d4]
addss xmm1, dword [0x14004809c]
mov rax, qword [0x14004fa30]
movsd xmm0, qword [rax + rbx + 0x30]
movsd qword [rbp - 0x40], xmm0
mov eax, dword [rax + rbx + 0x38]
mov dword [rbp - 0x38], eax
lea r8, [rbp + 0x788]
lea rcx, [rbp - 0x40]
call fcn.140001d80
cmp byte [0x14004f7bd], 0
jne 0x140009998
cmp byte [0x14004f7b9], 0
je 0x140009d74
xorps xmm0, xmm0
movups xmmword [rbp + 0x758], xmm0
mov qword [rbp + 0x768], r14
mov ecx, 0xf
mov qword [rbp + 0x770], rcx
mov byte [rbp + 0x758], 0
cmp byte [0x14004f7b9], 0
je 0x140009c87
cmp byte [0x14004f7bd], 0
je 0x140009c52
mov rcx, qword [0x14004fa30]
lea r14, [rcx + 0x70]
add r14, rbx
movzx eax, byte [0x14004f950]
cmp byte [rcx + rbx + 0x90], al
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
je 0x140009ae4
mov r12, qword [r14 + 0x10]
sub rax, r12
cmp rax, 8
jb 0x14000a330
cmp qword [r14 + 0x18], 0xf
jbe 0x140009a20
mov r14, qword [r14]
movups xmmword [rsp + 0x30], xmm0
lea r15, [r12 + 8]
mov edi, 0xf
lea rsi, [rsp + 0x30]
cmp r15, rdi
jbe 0x140009ab4
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x140009a58
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140009a88
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140009a72
xor esi, esi
jmp 0x140009aaf
cmp rcx, 0x1000
jb 0x140009aa7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a336
mov rcx, rax
call fcn.14003e9c0
test rax, rax
je 0x14000a322
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140009aaf
call fcn.14003e9c0
mov rsi, rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rdi
mov r8, r12
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movabs rax, 0x796d656e45202d20
mov qword [r12 + rsi], rax
mov byte [r15 + rsi], 0
jmp 0x140009bd6
mov r15, qword [r14 + 0x10]
sub rax, r15
cmp rax, 0xb
jb 0x14000a330
cmp qword [r14 + 0x18], 0xf
jbe 0x140009aff
mov r14, qword [r14]
movups xmmword [rsp + 0x30], xmm0
lea r12, [r15 + 0xb]
mov esi, 0xf
lea rdi, [rsp + 0x30]
cmp r12, rsi
jbe 0x140009b92
mov rsi, r12
or rsi, 0xf
cmp rsi, rcx
jbe 0x140009b36
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140009b66
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140009b50
xor edi, edi
jmp 0x140009b8d
cmp rcx, 0x1000
jb 0x140009b85
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000a336
mov rcx, rax
call fcn.14003e9c0
test rax, rax
je 0x14000a322
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140009b8d
call fcn.14003e9c0
mov rdi, rax
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], rsi
mov r8, r15
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.___Friendly]
movsd qword [rdi + r15], xmm0
movzx eax, word [0x1400466f8]
mov word [rdi + r15 + 8], ax
movzx eax, byte [0x1400466fa]
mov byte [rdi + r15 + 0xa], al
mov byte [rdi + r12], 0
mov rdx, qword [rbp + 0x770]
cmp rdx, 0xf
jbe 0x140009c17
inc rdx
mov rcx, qword [rbp + 0x758]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140009c12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a322
call fcn.14003e9b8
movups xmm0, xmmword [rsp + 0x30]
movups xmmword [rbp + 0x758], xmm0
movups xmm1, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x768], xmm1
psrldq xmm1, 8
movq rcx, xmm1
mov rsi, qword [rbp + 0x730]
xor r14d, r14d
movabs r15, 0xb21642c8590b2165
jmp 0x140009cd4
movzx ecx, byte [0x14004f950]
mov rax, qword [0x14004fa30]
cmp byte [rax + rbx + 0x90], cl
je 0x140009c78
lea rdx, str.Enemy
mov r8d, 5
jmp 0x140009cc1
lea rdx, str.Friendly
mov r8d, 8
jmp 0x140009cc1
cmp byte [0x14004f7bd], 0
je 0x140009cd4
cmp byte [0x14004f7b9], 0
jne 0x140009cd4
mov rdx, qword [0x14004fa30]
add rdx, 0x70
add rdx, rbx
lea rax, [rbp + 0x758]
cmp rax, rdx
je 0x140009cd4
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140009cc1
mov rdx, qword [rdx]
lea rcx, [rbp + 0x758]
call fcn.14000a7e0
mov rcx, qword [rbp + 0x770]
lea r8, [rbp + 0x758]
cmp rcx, 0xf
cmova r8, qword [rbp + 0x758]
movss xmm1, dword [0x14004f7d4]
xorps xmm1, xmm6
subss xmm1, xmm9
mov rax, qword [0x14004fa30]
movsd xmm0, qword [rax + rbx + 0x30]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [rax + rbx + 0x38]
mov dword [rbp - 0x28], eax
lea rcx, [rbp - 0x30]
call fcn.140001d80
nop
mov rdx, qword [rbp + 0x770]
cmp rdx, 0xf
jbe 0x140009d5b
inc rdx
mov rcx, qword [rbp + 0x758]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a329
call fcn.14003e9b8
mov qword [rbp + 0x768], r14
mov qword [rbp + 0x770], 0xf
mov byte [rbp + 0x758], 0
cmp byte [0x14004f7a3], 0
je 0x140009dbf
movsxd rax, r13d
imul rdx, rax, 0x170
add rdx, qword [0x14004fa30]
lea rcx, [rbp + 0x2d0]
call fcn.1400061a0
mov rcx, qword [0x14004fa30]
movsd xmm0, qword [rcx + rbx + 0x30]
movsd qword [rbp - 0x20], xmm0
mov ecx, dword [rcx + rbx + 0x38]
mov dword [rbp - 0x18], ecx
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400034f0
cmp byte [0x14004f7be], 0
je 0x140009fb6
movsxd rax, r13d
imul rdx, rax, 0x170
add rdx, qword [0x14004fa30]
lea rcx, [rbp + 0x440]
call fcn.1400061a0
mov rbx, rax
mov qword [rbp + 0x730], rax
imul rdx, rsi, 0x170
mov rcx, qword [0x14004fa30]
movsd xmm0, qword [rdx + rcx + 0x30]
movsd qword [rsp + 0x70], xmm0
movss xmm1, dword [rax + 0xac]
movaps xmm0, xmm1
divss xmm0, xmm10
divss xmm1, xmm0
movss xmm8, dword [rax + 0xa4]
divss xmm8, xmm0
movdqa xmm0, xmmword [0x140048540]
movups xmmword [rsp + 0x30], xmm0
comiss xmm8, xmm14
jbe 0x140009fae
comiss xmm1, xmm8
jb 0x140009fae
mov rax, qword [0x14004f840]
mov rax, qword [rax + 0x48b8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400112d0
mov rdi, rax
movdqa xmm0, xmmword [0x140048340]
movups xmmword [rbp + 0x740], xmm0
lea rcx, [rbp + 0x740]
call fcn.14000dcb0
movss xmm7, dword [rsp + 0x74]
movaps xmm2, xmm7
movss xmm1, dword [0x14004f7d4]
addss xmm2, xmm1
movss xmm6, dword [rsp + 0x70]
movaps xmm0, xmm6
subss xmm0, dword [0x14004f7d0]
subss xmm0, xmm9
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x64], xmm2
divss xmm8, xmm10
mulss xmm1, xmm11
mulss xmm1, xmm8
subss xmm2, xmm1
movss dword [rsp + 0x68], xmm0
movss dword [rsp + 0x6c], xmm2
movss xmm0, dword [0x140048080]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.14002f670
mov rax, qword [0x14004f840]
mov rax, qword [rax + 0x48b8]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400112d0
mov rdi, rax
lea rcx, [rsp + 0x30]
call fcn.14000dcb0
movss xmm1, dword [0x14004f7d4]
addss xmm7, xmm1
movaps xmm0, xmm7
subss xmm0, xmm12
subss xmm6, dword [0x14004f7d0]
subss xmm6, xmm9
movss dword [rbp + 0x778], xmm6
movss dword [rbp + 0x77c], xmm0
mulss xmm1, xmm11
mulss xmm1, xmm8
subss xmm7, xmm1
addss xmm7, xmm12
movss dword [rbp + 0x720], xmm6
movss dword [rbp + 0x724], xmm7
movss xmm0, dword [0x140048070]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x778]
lea rdx, [rbp + 0x720]
mov rcx, rdi
call fcn.14002f670
nop
mov rcx, rbx
call fcn.140003760
cmp byte [0x14004f7a4], 0
je 0x14000a22c
movsxd rax, dword [0x14004f828]
imul rdx, rax, 0x170
add rdx, qword [0x14004fa30]
lea rcx, [rbp + 0x5b0]
call fcn.1400061a0
mov rdi, rax
movss xmm12, dword [0x14004f0bc]
movss xmm13, dword [0x14004f0c0]
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000a21b
movzx ecx, byte [0x14004f950]
cmp byte [rdi + 0x90], cl
je 0x14000a21b
cmp byte [rdi + 0xb0], 0
jne 0x14000a21b
mov rdx, qword [0x14004f7d8]
add rdx, 0x294
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x780]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm9, dword [rbp + 0x780]
mov rdx, qword [0x14004f7d8]
add rdx, 0x290
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x784]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm1, qword [rdi + 0x40]
movss xmm3, dword [0x14004fa48]
movss xmm2, dword [0x14004fa4c]
movss xmm7, dword [0x14004fa50]
movaps xmm8, xmm3
subss xmm8, xmm1
movaps xmm11, xmm2
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rbp + 0x730], xmm1
subss xmm11, xmm0
movaps xmm6, xmm7
subss xmm6, dword [rdi + 0x48]
movss xmm0, dword [rdi + 0x44]
subss xmm0, xmm2
movss xmm1, dword [rdi + 0x40]
subss xmm1, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movaps xmm10, xmm0
mulss xmm10, dword [0x1400480c0]
subss xmm10, xmm9
movss xmm9, dword [rdi + 0x48]
subss xmm9, xmm7
mulss xmm11, xmm11
mulss xmm8, xmm8
addss xmm11, xmm8
mulss xmm6, xmm6
addss xmm11, xmm6
xorps xmm0, xmm0
ucomiss xmm0, xmm11
ja 0x14000a135
xorps xmm0, xmm0
sqrtss xmm0, xmm11
jmp 0x14000a13e
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm9, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
mulss xmm0, dword [0x1400480c0]
subss xmm0, dword [rbp + 0x784]
movaps xmm1, xmm10
movss xmm7, dword [0x140048580]
andps xmm1, xmm7
comiss xmm1, dword [0x1400480e0]
jb 0x14000a17d
movaps xmm10, xmm15
subss xmm10, xmm1
movaps xmm1, xmm0
andps xmm1, xmm7
comiss xmm1, dword [0x1400480e8]
jb 0x14000a194
movaps xmm0, xmm15
subss xmm0, xmm1
divss xmm0, xmm13
movss dword [rbp + 0x740], xmm0
mov rdx, qword [0x14004f7d8]
add rdx, 0x428
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x740]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
divss xmm10, xmm12
movss dword [rbp + 0x730], xmm10
mov rdx, qword [0x14004f7d8]
add rdx, 0x42c
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x730]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm9, dword [0x140048094]
movss xmm10, dword [0x1400480d0]
mov rcx, rdi
call fcn.140003760
movss xmm12, dword [0x140048048]
cmp byte [0x14004f7a6], 0
je 0x14000a26c
mov dword [rbp + 0x750], 0
mov rdx, qword [0x14004f958]
add rdx, 0x114
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x750]
mov rcx, qword [0x14004f8a0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm6, dword [0x140048590]
movss xmm7, dword [0x140048014]
inc r13d
inc rsi
mov qword [rbp + 0x730], rsi
mov rcx, qword [0x14004fa38]
sub rcx, qword [0x14004fa30]
mov rax, r15
imul rcx
add rdx, rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, r13d
cmp rax, rdx
jb 0x140009600
mov rcx, qword [rbp + 0x7c0]
xor rcx, rsp
call fcn.14003e990
lea r11, [rsp + 0x970]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140003e50
int3
call fcn.140003db0
int3