Function at 0x140002f40
Capabilities:
Log keystrokes via polling
Resume thread

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x1e8]
sub rsp, 0x2e0
mov qword [rax - 0x10], rbx
mov qword [rax - 0x20], rdi
mov qword [rax - 0x28], r12
mov qword [rax - 0x30], r13
mov qword [rax - 0x38], r14
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
mov rax, qword [0x14004c130]
cmp rax, qword [0x14004c138]
je 0x140002fb6
mov qword [0x14004c138], rax
mov rax, qword [0x14004c148]
cmp rax, qword [0x14004c150]
je 0x140002fcd
mov qword [0x14004c150], rax
mov eax, dword [0x14004b930]
mov dword [rbp - 0x48], eax
mov rax, qword [0x14004b8d0]
mov qword [rbp - 0x40], rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov rcx, qword [0x14004c120]
lea r8, [rbp - 0x48]
mov qword [rsp + 0x38], 0
mov r9d, 0x28
mov dword [rbp - 0x38], eax
mov edx, 0x22265a
lea rax, [0x14004b890]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0x40
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x14004b918]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x4b10]
mov rcx, qword [rcx]
call fcn.14000ec70
mov rdx, qword [0x14004b8e0]
xor r14d, r14d
mov dword [rbp + 0x208], 0
mov r13, rax
mov dword [rbp + 0x1f0], r14d
test rdx, rdx
jle 0x1400030f1
mov ecx, dword [0x14004b930]
mov dword [rbp + 0xd0], ecx
lea rcx, [rdx + 0x25f0]
mov qword [rbp + 0xd8], rcx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov rcx, qword [0x14004c128]
lea r9d, [r14 + 0x28]
mov qword [rsp + 0x38], r14
lea r8, [rbp + 0xd0]
mov dword [rbp + 0xe0], eax
mov edx, 0x22265a
lea rax, [rbp + 0x208]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf0], 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r12, qword [0x14004c170]
xor eax, eax
movss xmm14, dword [0x1400441ec]
xorps xmm7, xmm7
movss xmm13, dword [0x140044260]
xorps xmm9, xmm9
movss xmm1, dword [0x140044194]
xorps xmm10, xmm10
movss xmm15, dword [0x1400441b8]
xorps xmm11, xmm11
mov qword [rbp - 0x20], r12
mov r12, qword [0x14004c168]
mov qword [rsp + 0x2d0], rsi
movaps xmmword [rsp + 0x290], xmm6
movss dword [rbp], xmm7
movss dword [rbp + 4], xmm9
movaps xmmword [rsp + 0x230], xmm12
mov dword [rbp + 8], eax
movups xmmword [rbp + 0xc], xmm10
mov qword [rbp + 0x20], rax
cmp r12, qword [rbp - 0x20]
je 0x140003649
movss xmm10, dword [0x14004416c]
mov qword [rsp + 0x2a8], r15
cmp byte [0x14004c0d3], 0
movups xmm0, xmmword [r12 + 0x30]
movups xmm7, xmmword [r12]
movups xmm9, xmmword [r12 + 0x10]
movups xmm12, xmmword [r12 + 0x20]
movups xmmword [rsp + 0x50], xmm0
movaps xmmword [rbp + 0x90], xmm0
movups xmm0, xmmword [r12 + 0x40]
movups xmmword [rbp - 0x10], xmm7
movups xmmword [rbp + 0x40], xmm0
movaps xmmword [rbp + 0xa0], xmm0
movsd xmm0, qword [r12 + 0x50]
movsd qword [rsp + 0x60], xmm0
movsd qword [rbp + 0xb0], xmm0
movaps xmmword [rbp + 0x60], xmm7
movups xmmword [rbp + 0x50], xmm9
movaps xmmword [rbp + 0x70], xmm9
movups xmmword [rsp + 0x40], xmm12
movaps xmmword [rbp + 0x80], xmm12
je 0x14000322a
movdqa xmm0, xmm7
psrldq xmm0, 8
movq rax, xmm0
shr rax, 0x20
cmp eax, 0x3e
jge 0x14000360e
cmp eax, 0x26
je 0x14000360e
cmp eax, 0x19
je 0x14000360e
cmp eax, 0x1c
je 0x14000360e
mov eax, dword [0x14004b930]
movq rsi, xmm7
mov rbx, qword [0x14004b838]
mov qword [rbp - 0x68], rsi
mov dword [rbp - 0x70], eax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov rcx, qword [0x14004c128]
lea r8, [rbp - 0x70]
mov qword [rsp + 0x38], 0
mov r9d, 0x28
mov qword [rsp + 0x30], 0
mov edx, 0x22265a
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov dword [rbp - 0x60], eax
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x50], 0x25f8
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x14004b838]
movsd xmm0, qword [rcx + 0x14c]
mov r15d, dword [rcx + 0x154]
movaps xmm4, xmm0
movsd qword [rbp + 0xc0], xmm0
movss xmm2, dword [rbp + 0xc0]
movsd qword [rbp + 0x28], xmm0
movaps xmm0, xmm2
mulss xmm0, dword [0x14004b8c0]
shufps xmm4, xmm4, 0x55
movaps xmm3, xmm4
movd xmm5, r15d
mulss xmm3, dword [0x14004b8c4]
movaps xmm1, xmm5
mulss xmm1, dword [0x14004b8c8]
addss xmm3, xmm0
movdqa xmm0, xmm12
psrldq xmm0, 8
movd edi, xmm0
addss xmm3, xmm1
movdqa xmm1, xmm7
psrldq xmm1, 8
movd edx, xmm1
addss xmm3, dword [0x14004b8cc]
cmp edx, 1
jne 0x14000335e
cmp dword [rcx + 0x25f0], 0
jne 0x14000335e
cmp edi, 0x32
jg 0x14000335e
mov r8d, dword [rcx + 0x440]
lea eax, [r8 - 1]
cmp eax, 0x63
ja 0x14000360e
cmp r8d, 0x32
jne 0x140003354
cmp dword [rcx + 0x170], 0
je 0x14000360e
inc r14d
mov dword [rbp + 0x1f0], r14d
movsd xmm1, qword [0x1400441f0]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm3
comisd xmm1, xmm0
ja 0x14000360e
movaps xmm8, xmm14
divss xmm8, xmm3
test edx, edx
jne 0x140003739
movd xmm0, edi
cvtdq2ps xmm0, xmm0
comiss xmm0, dword [0x140044278]
ja 0x14000360e
mov rax, qword [0x14004b878]
movaps xmm7, xmm4
mulss xmm7, dword [0x14004b894]
movaps xmm0, xmm2
mov edx, dword [0x14004b880]
mulss xmm0, dword [0x14004b890]
movaps xmm1, xmm5
add edx, eax
mov ecx, dword [0x14004b884]
mulss xmm4, dword [0x14004b8a4]
xorps xmm6, xmm6
mulss xmm1, dword [0x14004b898]
addss xmm7, xmm0
mulss xmm2, dword [0x14004b8a0]
xorps xmm0, xmm0
mulss xmm5, dword [0x14004b8a8]
cvtsi2ss xmm0, eax
addss xmm7, xmm1
addss xmm4, xmm2
addss xmm7, dword [0x14004b89c]
addss xmm4, xmm5
mulss xmm7, xmm8
addss xmm4, dword [0x14004b8ac]
mulss xmm7, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
mov edx, dword [0x14004b87c]
add ecx, edx
mulss xmm4, xmm8
addss xmm7, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
cvtsi2ss xmm6, ecx
mulss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x14004b888]
subss xmm6, xmm4
movss dword [rbp + 0x200], xmm7
comiss xmm7, xmm0
movss dword [rbp + 0x1f8], xmm6
ja 0x14000360e
movss xmm0, dword [0x140044308]
comiss xmm0, xmm7
ja 0x14000360e
movd xmm0, dword [0x14004b814]
cvtdq2ps xmm0, xmm0
comiss xmm6, xmm0
ja 0x14000360e
comiss xmm11, xmm6
ja 0x14000360e
lea rcx, str._s____s____dM____d
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rcx, qword [0x14004b820]
movdqa xmm0, xmm12
movq r9, xmm9
psrldq xmm0, 4
psrldq xmm9, 8
mov rdx, rax
movd dword [rsp + 0x28], xmm0
movq r8, xmm9
mov dword [rsp + 0x20], edi
call fcn.140002a60
mov rdx, qword [0x14004c150]
mov rcx, qword [0x14004c148]
nop dword [rax]
mov rax, rcx
cmp rax, rdx
je 0x140003527
movss xmm0, dword [rax]
ucomiss xmm0, xmm7
movss xmm1, dword [rax + 4]
jp 0x14000350f
jne 0x14000350f
ucomiss xmm1, xmm6
jp 0x14000350f
je 0x140003515
add rax, 8
jmp 0x1400034f3
addss xmm6, dword [0x140044304]
movss dword [rbp + 0x1f8], xmm6
jmp 0x1400034f0
cmp rdx, qword [0x14004c158]
je 0x140003543
movss dword [rdx], xmm7
movss dword [rdx + 4], xmm6
add qword [0x14004c150], 8
jmp 0x140003566
lea r9, [rbp + 0x1f8]
lea r8, [rbp + 0x200]
call fcn.140005570
movss xmm7, dword [rbp + 0x200]
movss xmm6, dword [rbp + 0x1f8]
xorps xmm3, xmm3
movd ecx, xmm12
xorps xmm0, xmm0
unpcklps xmm7, xmm6
xorps xmm1, xmm1
xorps xmm2, xmm2
movzx eax, cl
movq r9, xmm7
cvtsi2ss xmm3, rax
mov eax, ecx
shr eax, 8
movzx eax, al
cvtsi2ss xmm0, rax
mov eax, ecx
shr eax, 0x10
movzx eax, al
shr ecx, 0x18
mulss xmm3, xmm10
cvtsi2ss xmm1, rax
mov eax, ecx
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
mov rax, qword [0x14004b820]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mulss xmm0, xmm10
mulss xmm1, xmm10
movss xmm3, xmm0
mulss xmm2, xmm10
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rbp - 0x80], xmm3
movdqa xmmword [rsp + 0x40], xmm3
mov rdx, qword [0x14004b848]
movaps xmm2, xmm13
mov rcx, r13
mov qword [rsp + 0x20], rax
call fcn.1400063f0
movss xmm1, dword [0x140044194]
add r12, 0x58
cmp r12, qword [rbp - 0x20]
jne 0x140003182
mov r15, qword [rsp + 0x2a8]
mov rax, qword [rbp + 0x20]
movups xmm10, xmmword [rbp + 0xc]
movss xmm9, dword [rbp + 4]
movss xmm7, dword [rbp]
movss xmm15, dword [0x1400441b8]
movss xmm8, dword [rbp + 8]
ucomiss xmm8, xmm11
mov r12, qword [rsp + 0x2c0]
jp 0x140003663
je 0x1400036f9
mov rdx, qword [0x14004b848]
subss xmm8, xmm9
mov qword [rsp + 0x28], rax
movaps xmm2, xmm13
lea rax, [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm10
mov rcx, r13
mov qword [rsp + 0x20], rax
movaps xmm0, xmm8
movaps xmm6, xmm8
mulss xmm0, xmm1
mulss xmm6, xmm15
subss xmm7, xmm0
movaps xmm0, xmm6
addss xmm0, xmm7
unpcklps xmm0, xmm9
movq r9, xmm0
call fcn.1400063f0
movss xmm2, dword [0x140044200]
lea r9, [rsp + 0x50]
shufps xmm7, xmm7, 0xe1
lea rdx, [rbp + 0x50]
movss xmm7, xmm9
movdqa xmmword [rsp + 0x50], xmm10
shufps xmm7, xmm7, 0xc6
mov rcx, r13
movss xmm7, xmm6
shufps xmm7, xmm7, 0x27
movss xmm7, xmm8
shufps xmm7, xmm7, 0x39
movdqa xmmword [rbp + 0x50], xmm7
call fcn.1400067f0
lea rcx, str.50M_Lives:__d
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
mov rcx, qword [0x14004b820]
mov r8d, r14d
mov rdx, rax
call fcn.140002a60
mov rcx, qword [0x14004b820]
lea rax, [rsp + 0x50]
test r14d, r14d
jne 0x14000427c
movaps xmm0, xmmword [0x1400446d0]
jmp 0x140004283
cmp edx, 1
jne 0x140003ce7
mov rax, qword [0x14004b878]
movaps xmm1, xmm5
mulss xmm1, dword [0x14004b898]
movaps xmm15, xmm4
mov edx, dword [0x14004b880]
mulss xmm15, dword [0x14004b894]
movaps xmm0, xmm2
mov ecx, dword [0x14004b884]
add edx, eax
mulss xmm0, dword [0x14004b890]
xorps xmm6, xmm6
mulss xmm4, dword [0x14004b8a4]
xorps xmm3, xmm3
mulss xmm2, dword [0x14004b8a0]
addss xmm15, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm15, xmm1
movss xmm1, dword [0x140044194]
addss xmm4, xmm2
addss xmm15, dword [0x14004b89c]
mulss xmm15, xmm8
mulss xmm15, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
mov edx, dword [0x14004b87c]
add ecx, edx
cvtsi2ss xmm6, ecx
addss xmm15, xmm0
movaps xmm0, xmm5
addss xmm0, dword [0x140044284]
subss xmm5, dword [0x140044250]
movaps xmm14, xmm6
cvtsi2ss xmm3, edx
mulss xmm0, dword [0x14004b8a8]
mulss xmm5, dword [0x14004b8a8]
addss xmm0, xmm4
addss xmm5, xmm4
addss xmm0, dword [0x14004b8ac]
addss xmm5, dword [0x14004b8ac]
mulss xmm0, xmm8
mulss xmm5, xmm8
mulss xmm0, xmm3
mulss xmm5, xmm3
subss xmm14, xmm0
subss xmm6, xmm5
movaps xmm13, xmm14
subss xmm13, xmm6
movss dword [rbp + 0x1f8], xmm6
movaps xmm6, xmm15
movaps xmm0, xmm13
mulss xmm0, xmm1
subss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x14004b888]
movss dword [rbp + 0x200], xmm6
comiss xmm6, xmm0
ja 0x140004265
movss xmm0, dword [0x140044308]
comiss xmm0, xmm6
ja 0x140004265
movd xmm0, dword [0x14004b814]
cvtdq2ps xmm0, xmm0
comiss xmm14, xmm0
ja 0x140004265
comiss xmm11, xmm14
ja 0x140004265
cmp qword [0x14004b8e0], rsi
movaps xmm3, xmm11
mov rcx, rsi
jne 0x1400038ce
movss xmm8, dword [0x140044264]
movaps xmm9, xmmword [0x1400446d0]
movaps xmm2, xmm8
movaps xmm1, xmm8
jmp 0x1400038e2
movaps xmm9, xmmword [0x140044660]
movaps xmm1, xmm11
movss xmm2, dword [0x14004425c]
movups xmmword [rbp - 0x80], xmm9
call fcn.140002c80
mov rcx, qword [0x14004b838]
mov edx, dword [rcx + 0x440]
lea eax, [rdx - 1]
cmp eax, 0x63
ja 0x140003cd0
cmp edx, 0x32
jne 0x140003917
cmp dword [rcx + 0x170], 0
je 0x140003cd0
cmp dword [rcx + 0x25f0], 0
je 0x140003985
movss xmm0, dword [0x14004423c]
movaps xmm12, xmm11
movss xmm11, dword [0x1400441b0]
movaps xmm3, xmm0
movss xmm10, dword [0x1400441ec]
movaps xmm2, xmm0
xorps xmm1, xmm1
mov rcx, rsi
call fcn.140002c80
movups xmm9, xmmword [rbp - 0x80]
movss xmm6, dword [rbp + 0x200]
movups xmm7, xmmword [rbp - 0x10]
movss xmm9, xmm12
shufps xmm9, xmm9, 0xe1
movss xmm9, xmm11
shufps xmm9, xmm9, 0xc6
movss xmm9, xmm10
shufps xmm9, xmm9, 0xc9
movups xmmword [rbp - 0x80], xmm9
jmp 0x14000399b
movaps xmm10, xmm9
movaps xmm11, xmm9
shufps xmm10, xmm9, 0xaa
movaps xmm12, xmm9
shufps xmm11, xmm9, 0x55
cmp byte [0x14004c0c1], 0
je 0x140003bf6
lea rcx, str._s_n_d
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
lea rcx, str._s_n_d
mov rbx, rax
call qword [sym.imp.VMProtectSDK64.dll_VMProtectDecryptStringA]
cmp rsi, qword [0x14004b8e0]
mov r14, rax
movups xmm8, xmmword [rbp + 0x40]
jne 0x140003ac8
mov ecx, dword [0x14004b930]
movdqa xmm0, xmm8
mov rbx, qword [0x14004b840]
psrldq xmm0, 8
movq qword [rbp - 0x40], xmm0
mov dword [rbp - 0x48], ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov rcx, qword [0x14004c128]
lea r8, [rbp - 0x48]
mov dword [rbp - 0x38], eax
mov edx, 0x22265a
xor eax, eax
mov qword [rbp - 0x30], rbx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
lea r9d, [rax + 0x28]
mov qword [rbp - 0x28], 0x100
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x14004b818]
mov r9d, edi
movq r8, xmm8
mov rdx, r14
call fcn.140002a60
movss xmm6, dword [rbp + 0x1f8]
movaps xmm0, xmm15
mov rax, qword [0x14004b818]
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm6
mov dword [rbp - 0x30], 0x3f800000
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm14
mov qword [rbp - 0x28], rax
shufps xmm0, xmm0, 0x27
movss xmm0, xmm12
shufps xmm0, xmm0, 0x39
movups xmmword [rbp - 0x48], xmm0
movups xmmword [rbp], xmm0
movups xmm0, xmmword [rbp - 0x38]
movss xmm0, xmm11
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm10
movups xmm10, xmmword [rsp + 0x40]
shufps xmm0, xmm0, 0xe1
movups xmmword [rbp - 0x38], xmm0
movups xmmword [rbp + 0x10], xmm0
movsd xmm0, qword [rbp - 0x28]
movsd qword [rbp + 0x20], xmm0
jmp 0x140003b42
movups xmm10, xmmword [rsp + 0x40]
mov rcx, qword [0x14004b820]
mov rdx, rbx
movq r8, xmm8
movdqa xmm0, xmm10
psrldq xmm0, 4
movd r9d, xmm0
call fcn.140002a60
mulss xmm13, dword [0x1400441b8]
mov rcx, r13
mov rax, qword [0x14004b820]
movss xmm2, dword [0x140044254]
mov rdx, qword [0x14004b848]
addss xmm13, xmm6
mov qword [rsp + 0x28], rax
movss xmm6, dword [rbp + 0x1f8]
lea rax, [rbp - 0x10]
movdqa xmmword [rbp - 0x10], xmm9
mov qword [rsp + 0x20], rax
unpcklps xmm13, xmm6
movq r9, xmm13
call fcn.1400063f0
movss xmm0, dword [0x14004c0c4]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x140003b90
cmp byte [0x14004c0e2], 0
je 0x140003b90
movaps xmm0, xmmword [0x1400446d0]
lea rax, [rbp - 0x10]
movsd xmm1, qword [rbp + 0x28]
lea r8, [rbp + 0x30]
mov rdx, rsi
movaps xmmword [rbp - 0x10], xmm0
mov rcx, r13
movsd qword [rbp + 0x30], xmm1
mov qword [rsp + 0x28], rax
mov dword [rbp + 0x38], r15d
call fcn.1400015f0
mov r14d, dword [rbp + 0x1f0]
cmp byte [0x14004b803], 0
jne 0x140003bad
cmp dword [rbp + 0x208], 0
je 0x14000425c
cmp byte [0x14004c0d5], 0
je 0x14000425c
xorps xmm0, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm0, dword [0x14004b878]
cvtsi2ss xmm1, dword [0x14004b87c]
subss xmm0, xmm15
subss xmm1, xmm6
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140003c0b
xorps xmm6, xmm6
sqrtss xmm6, xmm1
jmp 0x140003c16
movss xmm6, dword [rbp + 0x1f8]
movups xmm8, xmmword [rbp + 0x40]
movups xmm10, xmmword [rsp + 0x40]
jmp 0x140003b97
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
cmp edi, 0x19
jge 0x140003c7e
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140003c7e
mov rdx, qword [0x14004c138]
cmp rdx, qword [0x14004c140]
je 0x140003c6e
movups xmm0, xmmword [rbp + 0x50]
movups xmmword [rdx], xmm7
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rdx + 0x20], xmm10
movups xmmword [rdx + 0x30], xmm0
movsd xmm0, qword [rsp + 0x60]
movups xmmword [rdx + 0x40], xmm8
movsd qword [rdx + 0x50], xmm0
add qword [0x14004c138], 0x58
jmp 0x140003c7e
lea r8, [rbp + 0x60]
lea rcx, [0x14004c130]
call fcn.140005740
movss xmm0, dword [0x14004c0d8]
xorps xmm11, xmm11
comiss xmm0, xmm6
jbe 0x140003cc7
movss xmm0, dword [0x14004c0c4]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x140003cc7
movss xmm0, dword [0x14004b810]
comiss xmm0, xmm6
ja 0x140003cb8
ucomiss xmm0, xmm11
jp 0x140003cc7
jne 0x140003cc7
movss dword [0x14004b810], xmm6
mov qword [0x14004b830], rsi
movss xmm10, dword [0x14004416c]
movss xmm13, dword [0x140044260]
movss xmm14, dword [0x1400441ec]
jmp 0x14000360e
cmp edx, 2
jne 0x140003ee8
mov rax, qword [0x14004b878]
movaps xmm6, xmm4
mulss xmm6, dword [0x14004b894]
movaps xmm0, xmm2
mov edx, dword [0x14004b880]
mulss xmm0, dword [0x14004b890]
movaps xmm1, xmm5
add edx, eax
mov ecx, dword [0x14004b884]
mulss xmm4, dword [0x14004b8a4]
xorps xmm7, xmm7
mulss xmm1, dword [0x14004b898]
addss xmm6, xmm0
mulss xmm2, dword [0x14004b8a0]
xorps xmm0, xmm0
mulss xmm5, dword [0x14004b8a8]
cvtsi2ss xmm0, eax
addss xmm6, xmm1
addss xmm4, xmm2
addss xmm6, dword [0x14004b89c]
addss xmm4, xmm5
mulss xmm6, xmm8
addss xmm4, dword [0x14004b8ac]
mulss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
mov edx, dword [0x14004b87c]
add ecx, edx
mulss xmm4, xmm8
addss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
cvtsi2ss xmm7, ecx
mulss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x14004b888]
subss xmm7, xmm4
movss dword [rbp + 0x1f8], xmm6
comiss xmm6, xmm0
movss dword [rbp + 0x200], xmm7
ja 0x14000360e
movss xmm0, dword [0x140044308]
comiss xmm0, xmm6
ja 0x14000360e
movd xmm0, dword [0x14004b814]
cvtdq2ps xmm0, xmm0
comiss xmm7, xmm0
ja 0x14000360e
comiss xmm11, xmm7
ja 0x14000360e
lea r8, [0x14003db0c]
mov rcx, qword [0x14004b820]
lea rdx, str._s__d
mov r9d, edi
call fcn.140002a60
mov rdx, qword [0x14004c150]
cmp rdx, qword [0x14004c158]
je 0x140003e2f
movss dword [rdx], xmm6
movss dword [rdx + 4], xmm7
add qword [0x14004c150], 8
jmp 0x140003e52
lea r9, [rbp + 0x200]
lea r8, [rbp + 0x1f8]
call fcn.140005570
movss xmm6, dword [rbp + 0x1f8]
movss xmm7, dword [rbp + 0x200]
xorps xmm3, xmm3
movd ecx, xmm12
xorps xmm0, xmm0
unpcklps xmm6, xmm7
xorps xmm1, xmm1
xorps xmm2, xmm2
movzx eax, cl
movq r9, xmm6
cvtsi2ss xmm3, rax
mov eax, ecx
shr eax, 8
movzx eax, al
cvtsi2ss xmm0, rax
mov eax, ecx
shr eax, 0x10
movzx eax, al
shr ecx, 0x18
mulss xmm3, xmm10
cvtsi2ss xmm1, rax
mov eax, ecx
shufps xmm3, xmm3, 0xe1
cvtsi2ss xmm2, rax
mov rax, qword [0x14004b820]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mulss xmm0, xmm10
mulss xmm1, xmm10
movss xmm3, xmm0
mulss xmm2, xmm10
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rsp + 0x40], xmm3
movdqa xmmword [rsp + 0x50], xmm3
jmp 0x1400035f6
cmp edx, 3
jne 0x140004034
mov rax, qword [0x14004b878]
movaps xmm6, xmm4
mulss xmm6, dword [0x14004b894]
movaps xmm0, xmm2
mov edx, dword [0x14004b880]
mulss xmm0, dword [0x14004b890]
movaps xmm1, xmm5
add edx, eax
mov ecx, dword [0x14004b884]
mulss xmm4, dword [0x14004b8a4]
xorps xmm7, xmm7
mulss xmm1, dword [0x14004b898]
addss xmm6, xmm0
mulss xmm2, dword [0x14004b8a0]
xorps xmm0, xmm0
mulss xmm5, dword [0x14004b8a8]
cvtsi2ss xmm0, eax
addss xmm6, xmm1
addss xmm4, xmm2
addss xmm6, dword [0x14004b89c]
addss xmm4, xmm5
mulss xmm6, xmm8
addss xmm4, dword [0x14004b8ac]
mulss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
mov edx, dword [0x14004b87c]
add ecx, edx
mulss xmm4, xmm8
addss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
cvtsi2ss xmm7, ecx
mulss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x14004b888]
subss xmm7, xmm4
movss dword [rbp + 0x1f8], xmm6
comiss xmm6, xmm0
movss dword [rbp + 0x200], xmm7
ja 0x14000360e
movss xmm0, dword [0x140044308]
comiss xmm0, xmm6
ja 0x14000360e
movd xmm0, dword [0x14004b814]
cvtdq2ps xmm0, xmm0
comiss xmm7, xmm0
ja 0x14000360e
comiss xmm11, xmm7
ja 0x14000360e
mov rcx, qword [0x14004b820]
lea r8, [0x14003db18]
lea rdx, [0x14003db1c]
call fcn.140002a60
mov rdx, qword [0x14004c150]
cmp rdx, qword [0x14004c158]
je 0x140003e2f
movss dword [rdx], xmm6
movss dword [rdx + 4], xmm7
add qword [0x14004c150], 8
jmp 0x140003e52
cmp edx, 4
jne 0x140004148
mov rax, qword [0x14004b878]
movaps xmm6, xmm4
mulss xmm6, dword [0x14004b894]
movaps xmm0, xmm2
mov edx, dword [0x14004b880]
mulss xmm0, dword [0x14004b890]
movaps xmm1, xmm5
add edx, eax
mov ecx, dword [0x14004b884]
mulss xmm4, dword [0x14004b8a4]
xorps xmm7, xmm7
mulss xmm1, dword [0x14004b898]
addss xmm6, xmm0
mulss xmm2, dword [0x14004b8a0]
xorps xmm0, xmm0
mulss xmm5, dword [0x14004b8a8]
cvtsi2ss xmm0, eax
addss xmm6, xmm1
addss xmm4, xmm2
addss xmm6, dword [0x14004b89c]
addss xmm4, xmm5
mulss xmm6, xmm8
addss xmm4, dword [0x14004b8ac]
mulss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
mov edx, dword [0x14004b87c]
add ecx, edx
mulss xmm4, xmm8
addss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
cvtsi2ss xmm7, ecx
mulss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x14004b888]
subss xmm7, xmm4
movss dword [rbp + 0x1f8], xmm6
comiss xmm6, xmm0
movss dword [rbp + 0x200], xmm7
ja 0x14000360e
movss xmm0, dword [0x140044308]
comiss xmm0, xmm6
ja 0x14000360e
movd xmm0, dword [0x14004b814]
cvtdq2ps xmm0, xmm0
comiss xmm7, xmm0
ja 0x14000360e
comiss xmm11, xmm7
ja 0x14000360e
lea r8, [0x14003db20]
jmp 0x140003df6
cmp edx, 5
jne 0x14000360e
mov rax, qword [0x14004b878]
movaps xmm6, xmm4
mulss xmm6, dword [0x14004b894]
movaps xmm0, xmm2
mov edx, dword [0x14004b880]
mulss xmm0, dword [0x14004b890]
movaps xmm1, xmm5
add edx, eax
mov ecx, dword [0x14004b884]
mulss xmm4, dword [0x14004b8a4]
xorps xmm7, xmm7
mulss xmm1, dword [0x14004b898]
addss xmm6, xmm0
mulss xmm2, dword [0x14004b8a0]
xorps xmm0, xmm0
mulss xmm5, dword [0x14004b8a8]
cvtsi2ss xmm0, eax
addss xmm6, xmm1
addss xmm4, xmm2
addss xmm6, dword [0x14004b89c]
addss xmm4, xmm5
mulss xmm6, xmm8
addss xmm4, dword [0x14004b8ac]
mulss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
mov edx, dword [0x14004b87c]
add ecx, edx
mulss xmm4, xmm8
addss xmm6, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, edx
cvtsi2ss xmm7, ecx
mulss xmm4, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x14004b888]
subss xmm7, xmm4
movss dword [rbp + 0x1f8], xmm6
comiss xmm6, xmm0
movss dword [rbp + 0x200], xmm7
ja 0x14000360e
movss xmm0, dword [0x140044308]
comiss xmm0, xmm6
ja 0x14000360e
movd xmm0, dword [0x14004b814]
cvtdq2ps xmm0, xmm0
comiss xmm7, xmm0
ja 0x14000360e
comiss xmm11, xmm7
ja 0x14000360e
lea r8, str.dloot
jmp 0x140003df6
xorps xmm11, xmm11
jmp 0x140003cc7
movss xmm13, dword [0x140044260]
movss xmm14, dword [0x1400441ec]
jmp 0x140003616
movaps xmm0, xmmword [0x140044620]
movd xmm2, dword [0x14004b878]
movss xmm1, dword [0x140044270]
mov rdx, qword [0x14004b848]
cvtdq2ps xmm2, xmm2
mov qword [rsp + 0x28], rcx
mov rcx, r13
movups xmmword [rsp + 0x50], xmm0
subss xmm2, dword [0x140044290]
movups xmm0, xmmword [rax]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
movaps xmmword [rsp + 0x50], xmm0
unpcklps xmm2, xmm1
movq r9, xmm2
movss xmm2, dword [0x140044268]
call fcn.1400063f0
xor eax, eax
movaps xmm10, xmm11
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x78], eax
mov eax, dword [0x14004b930]
mov dword [rbp - 0x70], eax
mov rax, qword [0x14004b8d8]
add rax, 0xffffffffffffffe4
mov qword [rbp - 0x68], rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov rcx, qword [0x14004c120]
lea r8, [rbp - 0x70]
mov qword [rsp + 0x38], 0
mov r9d, 0x28
mov dword [rbp - 0x60], eax
mov edx, 0x22265a
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 0xc
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdi, qword [0x14004c138]
xor r14b, r14b
mov rbx, qword [0x14004c130]
mov r13, qword [rsp + 0x2b8]
cmp rbx, rdi
je 0x140004611
movss xmm13, dword [0x140044170]
nop dword [rax]
nop dword [rax + rax]
mov rsi, qword [rbx]
xor eax, eax
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], eax
mov eax, dword [0x14004b930]
mov dword [rbp - 0x70], eax
lea rax, [rsi + 0x14c]
mov qword [rbp - 0x68], rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov rcx, qword [0x14004c120]
lea r8, [rbp - 0x70]
mov qword [rsp + 0x38], 0
mov r9d, 0x28
mov dword [rbp - 0x60], eax
mov edx, 0x22265a
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 0xc
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm7, dword [rsp + 0x64]
movss xmm9, dword [rsp + 0x60]
movaps xmm2, xmm7
mulss xmm2, dword [0x14004b8c4]
movaps xmm0, xmm9
mulss xmm0, dword [0x14004b8c0]
movss xmm8, dword [rsp + 0x68]
movaps xmm1, xmm8
mulss xmm1, dword [0x14004b8c8]
addss xmm2, xmm0
addss xmm2, xmm1
addss xmm2, dword [0x14004b8cc]
comiss xmm13, xmm2
ja 0x1400045ed
mov edx, dword [0x14004b87c]
xorps xmm5, xmm5
mov ecx, dword [0x14004b884]
movaps xmm0, xmm9
mulss xmm0, dword [0x14004b8a0]
add ecx, edx
mov rax, qword [0x14004b878]
movaps xmm6, xmm14
movaps xmm4, xmm7
mulss xmm4, dword [0x14004b8a4]
xorps xmm3, xmm3
divss xmm6, xmm2
addss xmm4, xmm0
movaps xmm1, xmm8
mulss xmm1, dword [0x14004b898]
movaps xmm0, xmm8
addss xmm0, dword [0x140044284]
cvtsi2ss xmm3, edx
mov edx, dword [0x14004b880]
add edx, eax
mulss xmm0, dword [0x14004b8a8]
movaps xmm2, xmm7
mulss xmm2, dword [0x14004b894]
xorps xmm12, xmm12
addss xmm0, xmm4
cvtsi2ss xmm5, ecx
addss xmm0, dword [0x14004b8ac]
movaps xmm11, xmm5
cvtsi2ss xmm12, eax
mulss xmm0, xmm6
mulss xmm0, xmm3
subss xmm11, xmm0
movaps xmm0, xmm8
subss xmm0, dword [0x140044250]
mulss xmm0, dword [0x14004b8a8]
addss xmm0, xmm4
addss xmm0, dword [0x14004b8ac]
mulss xmm0, xmm6
mulss xmm0, xmm3
subss xmm5, xmm0
movaps xmm0, xmm9
mulss xmm0, dword [0x14004b890]
addss xmm2, xmm0
xorps xmm0, xmm0
subss xmm11, xmm5
cvtsi2ss xmm0, edx
addss xmm2, xmm1
movaps xmm1, xmm11
mulss xmm1, dword [0x140044194]
mulss xmm11, xmm15
addss xmm2, dword [0x14004b89c]
mulss xmm2, xmm6
mulss xmm2, xmm12
addss xmm2, xmm0
subss xmm2, xmm1
comiss xmm2, xmm12
jbe 0x1400045e9
addss xmm11, xmm2
comiss xmm12, xmm11
jbe 0x1400045e9
subss xmm7, dword [rsp + 0x74]
subss xmm9, dword [rsp + 0x70]
subss xmm8, dword [rsp + 0x78]
xorps xmm0, xmm0
mulss xmm7, xmm7
mulss xmm9, xmm9
mulss xmm8, xmm8
addss xmm7, xmm9
addss xmm7, xmm8
ucomiss xmm0, xmm7
ja 0x1400045bf
xorps xmm0, xmm0
sqrtss xmm0, xmm7
jmp 0x1400045c7
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm10, xmm0
xorps xmm11, xmm11
ja 0x1400045d9
ucomiss xmm10, xmm11
jp 0x1400045ed
jne 0x1400045ed
mov r14b, 1
mov qword [0x14004b830], rsi
movaps xmm10, xmm0
jmp 0x1400045ed
xorps xmm11, xmm11
add rbx, 0x58
cmp rbx, rdi
jne 0x140004390
test r14b, r14b
jne 0x140004733
mov rdi, qword [0x14004c138]
mov rbx, qword [0x14004c130]
mov rcx, rdi
movabs rax, 0x2e8ba2e8ba2e8ba3
sub rcx, rbx
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x140004733
cmp rbx, rdi
je 0x140004733
mov rsi, qword [rbx]
xor eax, eax
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x68], eax
mov eax, dword [0x14004b930]
mov dword [rbp - 0x70], eax
lea rax, [rsi + 0x14c]
mov qword [rbp - 0x68], rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov rcx, qword [0x14004c120]
lea r8, [rbp - 0x70]
mov qword [rsp + 0x38], 0
mov r9d, 0x28
mov dword [rbp - 0x60], eax
mov edx, 0x22265a
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 0xc
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movss xmm0, dword [rsp + 0x68]
subss xmm0, dword [rsp + 0x78]
movss xmm1, dword [rsp + 0x60]
movss xmm2, dword [rsp + 0x64]
subss xmm2, dword [rsp + 0x74]
subss xmm1, dword [rsp + 0x70]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140004705
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14000470d
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm10, xmm0
ja 0x14000471b
ucomiss xmm10, xmm11
jp 0x140004726
jne 0x140004726
movaps xmm10, xmm0
mov qword [0x14004b830], rsi
add rbx, 0x58
cmp rbx, rdi
jne 0x140004641
movss xmm0, dword [0x14004b810]
ucomiss xmm0, xmm11
mov r14, qword [rsp + 0x2b0]
mov rdi, qword [rsp + 0x2c8]
mov rsi, qword [rsp + 0x2d0]
mov rbx, qword [rsp + 0x2d8]
movaps xmm15, xmmword [rsp + 0x200]
movaps xmm14, xmmword [rsp + 0x210]
movaps xmm13, xmmword [rsp + 0x220]
movaps xmm12, xmmword [rsp + 0x230]
movaps xmm9, xmmword [rsp + 0x260]
movaps xmm8, xmmword [rsp + 0x270]
movaps xmm7, xmmword [rsp + 0x280]
movaps xmm6, xmmword [rsp + 0x290]
jp 0x1400047c5
jne 0x1400047c5
ucomiss xmm10, xmm11
jp 0x1400047c5
jne 0x1400047c5
cmp byte [0x14004b803], 0
je 0x1400047c5
mov qword [0x14004b830], 0
cmp byte [0x14004c0d5], 0
mov rax, qword [0x14004b830]
movaps xmm11, xmmword [rsp + 0x240]
movaps xmm10, xmmword [rsp + 0x250]
mov qword [0x14004b8e0], rax
je 0x140004847
mov ecx, dword [0x14004c0dc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140004836
cmp qword [0x14004b8e0], 0
jle 0x140004836
cmp byte [0x14004b803], 0
mov byte [0x14004b802], 1
je 0x140004847
mov rcx, qword [0x14004c0e8]
mov byte [0x14004b803], 0
call qword [sym.imp.KERNEL32.dll_ResumeThread]
add rsp, 0x2e0
pop rbp
ret
mov dword [0x14004b810], 0
mov byte [0x14004b802], 0
add rsp, 0x2e0
pop rbp
ret