Function at 0x14003b170
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x458]
sub rsp, 0x548
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14005e010]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov rdx, qword [0x140144598]
xor cl, cl
movss xmm0, dword [0x140054d50]
add rdx, 0xffd830
xor r12d, r12d
movss dword [rbp + 0x60], xmm0
mov qword [rbp + 0x104], 0
xorps xmm8, xmm8
movss dword [rbp + 0x10], xmm8
xorps xmm6, xmm6
movss dword [rbp + 0x14], xmm6
xorps xmm15, xmm15
mov dword [rbp + 0x100], 0
mov qword [rbp + 0xdc], 0
mov dword [rbp + 0xd8], 0
mov qword [rbp + 0xf4], 0
mov dword [rbp + 0xf0], 0
mov byte [rbp], cl
cmp rdx, 0xffffffffffffffff
je 0x14003b257
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1f0]
lea r9d, [r12 + 4]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x64]
mov qword [rbp + 0x1f0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xor cl, cl
movss xmm11, dword [0x140054ce4]
mov qword [rsp + 0x560], rbx
mov qword [rsp + 0x568], rsi
mov qword [rsp + 0x570], rdi
movaps xmmword [rsp + 0x510], xmm7
movaps xmmword [rsp + 0x4f0], xmm9
movaps xmmword [rsp + 0x4e0], xmm10
cmp dword [rbp + 0x64], r12d
je 0x14003c6e8
movss xmm11, dword [0x140054d64]
mov esi, 5
movss xmm9, dword [0x140054d60]
movss xmm7, dword [0x140054cf0]
movss xmm10, dword [0x140054c80]
mov qword [rsp + 0x540], r13
mov r13d, dword [rbp + 8]
mov qword [rsp + 0x538], r14
mov r14d, r12d
mov qword [rsp + 0x530], r15
movaps xmmword [rsp + 0x4c0], xmm12
movaps xmmword [rsp + 0x4b0], xmm13
movaps xmmword [rsp + 0x4a0], xmm14
mov dword [rbp + 0xc], r12d
mov edx, dword [0x1400546a0]
add rdx, qword [0x140144598]
cmp rdx, 0xffffffffffffffff
je 0x14003b342
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1e8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xd0]
mov qword [rbp + 0x1e8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [0x1400546a8]
add rdx, qword [0x140144598]
cmp rdx, 0xffffffffffffffff
je 0x14003b382
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1e0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1b8]
mov qword [rbp + 0x1e0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [0x1400546a4]
add rdx, qword [0x140144598]
cmp rdx, 0xffffffffffffffff
je 0x14003b3c2
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1d8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1c8]
mov qword [rbp + 0x1d8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0xd0]
lea rax, [rbp + 0x228]
sub ecx, dword [rbp + 0x1b8]
lea r8, [rbp + 0x1cc]
mov edx, dword [rbp + 0x1c8]
mov r9d, 4
add edx, 0x28540
mov dword [rbp + 0xd0], ecx
add edx, ecx
mov qword [rbp + 0x228], r12
mov rcx, qword [0x1401445a0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x14014478b], 0
jne 0x14003b442
mov eax, dword [rbp + 0x1cc]
and eax, 0x80000001
jge 0x14003b42c
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov ecx, r12d
mov eax, r14d
setne cl
and eax, 1
cmp eax, ecx
je 0x14003c68f
mov rdx, qword [0x140144598]
add rdx, 0xff4000
cmp rdx, 0xffffffffffffffff
je 0x14003b480
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x210]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp - 8]
mov qword [rbp + 0x210], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140144598]
add rdx, 0xff4014
cmp rdx, 0xffffffffffffffff
je 0x14003b4be
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x218]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp - 4]
mov qword [rbp + 0x218], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r14d, 0x11
jbe 0x14003b4d0
mov dword [rbp + 0xd4], r12d
jmp 0x14003c68f
mov eax, dword [rbp - 4]
lea r8, [rbp + 0xd4]
add eax, dword [rbp - 8]
mov r9d, 4
mov rcx, qword [0x1401445a0]
add rax, 0x137c
mov edx, r14d
mov qword [rbp + 0x230], r12
lea rdx, [rax + rdx*4]
lea rax, [rbp + 0x230]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0xd4]
test ecx, ecx
je 0x14003c68f
lea ebx, [rcx + 0x30]
mov qword [rbp + 0x208], r12
lea edx, [rcx + 0x14]
mov r9d, 4
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x208]
lea r8, [rbp + 0x164]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x200]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x160]
mov qword [rbp + 0x200], r12
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15d, dword [rbp + 0x160]
xor r15d, dword [rbp + 0x164]
je 0x14003c68f
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1f8]
lea edx, [r15 + 0xddc]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x1f8], r12
lea r8, [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x168]
test eax, eax
je 0x14003c68f
mov rcx, qword [0x1401445a0]
lea edx, [rax + 0x34]
lea rax, [rbp + 0x220]
mov qword [rbp + 0x220], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1d0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cvttss2si edi, dword [rbp + 0x1d0]
mov dword [rbp + 0x70], edi
test edi, edi
je 0x14003c68f
cmp byte [0x1401445b5], 0
jne 0x14003b62f
cmp byte [0x1401445df], 0
je 0x14003b768
mov rax, qword [0x140144598]
lea rdx, [rax + 0xff3aec]
cmp rdx, 0xffffffffffffffff
je 0x14003b674
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x170]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x68]
mov qword [rbp + 0x170], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140144598]
lea rdx, [rax + 0xff3adc]
cmp rdx, 0xffffffffffffffff
je 0x14003b6b5
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x178]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x90]
mov qword [rbp + 0x178], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140144598]
lea rdx, [rax + 0xff3ad8]
cmp rdx, 0xffffffffffffffff
je 0x14003b6ef
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x180]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x98]
mov qword [rbp + 0x180], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x68]
lea r8, [rbp + 0xa0]
sub eax, dword [rbp + 0x90]
mov r9d, 4
mov rcx, qword [0x1401445a0]
mov dword [rbp + 0x68], eax
mov qword [rbp + 0x78], r12
lea edx, [rax + 0x284f8]
lea edx, [rdx + r14*4]
add edx, dword [rbp + 0x98]
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0xa0]
lea rax, [rbp + 0xe8]
mov rcx, qword [0x1401445a0]
lea r8, [rbp + 0x2c0]
add edx, 8
mov qword [rbp + 0xe8], r12
mov r9d, 0x40
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, esi
lea rcx, [rbp - 0x14]
mov edx, r15d
call fcn.1400373d0
mov rcx, qword [0x1401445a0]
lea edx, [r15 + 0xbb8]
mov r9d, 4
mov qword [rbp + 0x114], 0
lea r8, [rbp + 0xa8]
mov dword [rbp + 0x110], 0
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
lea rax, [rbp + 0xe8]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x1a0], xmm0
mov qword [rbp + 0xe8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xa8]
test eax, eax
je 0x14003b843
mov rcx, qword [0x1401445a0]
lea edx, [rax + 0x50]
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x1c0], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xac]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xac]
test eax, eax
je 0x14003b843
mov rcx, qword [0x1401445a0]
lea edx, [rax + 0x40]
lea rax, [rbp + 0x188]
mov qword [rbp + 0x188], r12
mov r9d, 0xc
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x110]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140144598]
movss xmm12, dword [rbp + 0x110]
add rdx, 0xffd830
movss xmm13, dword [rbp + 0x114]
movss xmm14, dword [rbp + 0x118]
movss dword [rbp + 0xf0], xmm12
movss dword [rbp + 0xf4], xmm13
movss dword [rbp + 0xf8], xmm14
mov qword [rbp + 0xc4], 0
mov dword [rbp + 0xc0], 0
cmp rdx, 0xffffffffffffffff
je 0x14003b8d0
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x190]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 8]
mov qword [rbp + 0x190], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 8]
test r13d, r13d
je 0x14003b9b1
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x78]
lea edx, [r13 + 0x948]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x78], r12
lea r8, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 8]
test r13d, r13d
je 0x14003b9b1
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1b0]
lea edx, [r13 + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x1b0], r12
lea r8, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 8]
test r13d, r13d
je 0x14003b9b1
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x198]
lea edx, [r13 + 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x198], r12
lea r8, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 8]
test r13d, r13d
je 0x14003b9b1
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x50]
lea edx, [r13 + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 0xc
mov qword [rbp + 0x50], r12
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 8]
movsd xmm0, qword [rbp + 0x1a0]
lea rdx, [rbp + 0x100]
movss xmm1, dword [rbp + 0x1a4]
lea rcx, [rbp - 0x30]
addss xmm1, dword [0x140054be8]
mov r9d, dword [0x1401447a0]
mov eax, 0x64
mov r8d, dword [0x1401445a8]
cmp edi, 0x64
shufps xmm0, xmm0, 0xe1
mov esi, edi
cmovge esi, eax
mov dword [rbp - 0x28], ebx
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movsd qword [rbp + 0x1a0], xmm0
movsd qword [rbp - 0x30], xmm0
call fcn.140037120
test al, al
je 0x14003c68a
movsd xmm0, qword [rbp + 0xf0]
lea rdx, [rbp + 0xd8]
mov eax, dword [rbp + 0xf8]
lea rcx, [rbp - 0x40]
mov r9d, dword [0x1401447a0]
mov r8d, dword [0x1401445a8]
movsd qword [rbp - 0x40], xmm0
mov dword [rbp - 0x38], eax
call fcn.140037120
test al, al
je 0x14003c68a
movaps xmm2, xmm11
mov ecx, r15d
call fcn.140037840
test al, al
jne 0x14003bb98
cmp byte [0x1401445dc], al
je 0x14003ba8e
movups xmm0, xmmword [0x140143a30]
lea rcx, [rbp + 0x50]
movups xmmword [rbp + 0x50], xmm0
call fcn.140002df0
mov edx, eax
mov ecx, r15d
call fcn.140037640
cmp byte [0x14014458a], 0
movss xmm8, dword [rbp + 0x104]
movss xmm11, dword [rbp + 0x100]
movss xmm6, dword [rbp + 0xdc]
je 0x14003bb0d
movups xmm0, xmmword [0x140143a60]
lea rcx, [rbp + 0x50]
movups xmmword [rbp + 0x50], xmm0
call fcn.140002df0
movaps xmm0, xmm8
mov dword [rbp + 0x78], eax
subss xmm0, xmm6
comiss xmm15, xmm0
jbe 0x14003badb
mulss xmm0, xmm9
cvttss2si r9d, xmm0
cvttss2si ecx, xmm11
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.140031b90
cmp byte [0x1401445b7], 0
je 0x14003bce1
cvttss2si eax, dword [rbp + 0xd8]
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [0x140143a10]
movups xmmword [rbp + 0x50], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x130], xmm1
movd xmm1, dword [0x1401447a0]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x1401445a8]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x12c], xmm1
movss dword [rbp + 0x134], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x128], xmm0
call fcn.140002df0
lea rdx, [rbp + 0x128]
lea r8, [rbp + 0x130]
jmp 0x14003bcc4
cmp byte [0x1401445dc], 0
je 0x14003bbbf
movups xmm0, xmmword [0x140143a20]
lea rcx, [rbp + 0x50]
movups xmmword [rbp + 0x50], xmm0
call fcn.140002df0
mov edx, eax
mov ecx, r15d
call fcn.140037640
cmp byte [0x14014458a], 0
movss xmm8, dword [rbp + 0x104]
movss xmm11, dword [rbp + 0x100]
movss xmm6, dword [rbp + 0xdc]
je 0x14003bc3e
movups xmm0, xmmword [0x140143a20]
lea rcx, [rbp + 0x50]
movups xmmword [rbp + 0x50], xmm0
call fcn.140002df0
movaps xmm0, xmm8
mov dword [rbp + 0x78], eax
subss xmm0, xmm6
comiss xmm15, xmm0
jbe 0x14003bc0c
mulss xmm0, xmm9
cvttss2si r9d, xmm0
cvttss2si ecx, xmm11
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.140031b90
cmp byte [0x1401445b7], 0
je 0x14003bce1
cvttss2si eax, dword [rbp + 0xd8]
lea rcx, [rbp + 0x50]
movups xmm0, xmmword [0x140143a20]
movups xmmword [rbp + 0x50], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x120], xmm1
movd xmm1, dword [0x1401447a0]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x1401445a8]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x13c], xmm1
movss dword [rbp + 0x124], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x138], xmm0
call fcn.140002df0
lea rdx, [rbp + 0x138]
lea r8, [rbp + 0x120]
mov rcx, qword [0x140144590]
mov r9d, eax
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm10
call fcn.14001d410
movaps xmm0, xmm8
subss xmm0, xmm6
comiss xmm15, xmm0
movaps xmm1, xmm0
jbe 0x14003bcf7
mulss xmm1, xmm9
cvttss2si eax, xmm1
cvttss2si ebx, xmm11
test eax, eax
jns 0x14003bd06
inc eax
sar eax, 1
cmp byte [0x1401445c2], 0
cvttss2si r14d, xmm8
lea r12d, [rax + rbx]
je 0x14003bdee
xor ecx, ecx
test si, si
cmovne cx, si
comiss xmm15, xmm0
jbe 0x14003bd32
mulss xmm0, xmm9
cvttss2si r9d, xmm0
subss xmm6, xmm8
mov eax, r9d
cdq
and edx, 3
add eax, edx
sar eax, 2
sub ebx, eax
movzx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, dword [0x140054d14]
cvttss2si rdi, xmm0
cmp cx, 0x64
ja 0x14003bd89
cmp cx, 0x4b
ja 0x14003bd89
cmp cx, 0x28
jbe 0x14003bd80
movaps xmm0, xmmword [0x1401436c0]
jmp 0x14003bd90
movaps xmm0, xmmword [0x1401435d0]
jmp 0x14003bd90
movaps xmm0, xmmword [0x140143610]
lea rax, [0x140143770]
add r9d, 2
lea edx, [r14 - 1]
mov qword [rsp + 0x20], rax
lea ecx, [rbx - 6]
mov r8d, 5
movups xmmword [rbp + 0x50], xmm0
call fcn.140032320
mov eax, edi
lea ecx, [rbx - 5]
xorps xmm0, xmm0
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
mov r9d, edi
mov r8d, 3
cvtsi2ss xmm0, rax
lea rax, [rbp + 0x50]
mov qword [rsp + 0x20], rax
subss xmm6, xmm0
addss xmm6, xmm1
cvttss2si edx, xmm6
call fcn.140032320
cmp byte [0x1401445b5], 0
je 0x14003c29e
lea rax, [rbp - 0x60]
mov dword [rbp - 0x60], 9
movaps xmm10, xmm11
mov dword [rbp - 0x5c], 9
subss xmm10, dword [0x140054d10]
movaps xmm9, xmm8
mov dword [rbp - 0x58], 9
subss xmm9, dword [0x140054d0c]
mov r9d, 0x1a
mov dword [rbp - 0x54], 0xff
mov r8d, 0x9b
mov dword [rsp + 0x70], 0x1c
cvttss2si edi, xmm10
mov dword [rsp + 0x74], 0x36
mov dword [rsp + 0x78], 0x3a
mov dword [rsp + 0x7c], 0xff
mov qword [rsp + 0x20], rax
cvttss2si ebx, xmm9
mov ecx, edi
mov edx, ebx
call fcn.140032320
mov r9d, 0x19
lea rax, [rsp + 0x70]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov ecx, edi
lea r8d, [r9 + 5]
call fcn.140032320
movss xmm0, dword [rbp + 0xc8]
movss xmm1, dword [rbp + 0xc0]
subss xmm0, xmm14
movss xmm2, dword [rbp + 0xc4]
subss xmm1, xmm12
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14003bee2
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14003beea
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rbp + 0x28], 0x6c273822
xor ecx, ecx
mov word [rbp + 0x2c], 0x100
nop dword [rax]
lea eax, [rcx + 7]
xor byte [rbp + rcx + 0x28], al
inc rcx
cmp rcx, 4
jb 0x14003bf00
xorps xmm2, xmm2
mov byte [rbp + 0x2d], 0
cvtss2sd xmm2, xmm0
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x238]
movq r8, xmm2
call fcn.140013680
movss xmm6, dword [0x140054ccc]
lea rax, [rbp + 0x238]
movaps xmm0, xmm9
mov qword [rsp + 0x30], rax
addss xmm0, xmm6
mov byte [rsp + 0x28], 0
movaps xmm1, xmm10
mov dword [rsp + 0x60], 0
addss xmm1, dword [0x140054ce4]
lea r9, [rsp + 0x60]
mov dword [rsp + 0x64], 0xcb
mov dword [rsp + 0x68], 0xff
cvttss2si ebx, xmm0
mov dword [rsp + 0x6c], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
cvttss2si edx, xmm1
mov r8d, ebx
movd ecx, xmm0
call fcn.14002fc90
xor ecx, ecx
mov dword [rbp + 0x38], 0x42036122
mov word [rbp + 0x3c], 0x5b
mov byte [rbp + 0x3e], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 7]
xor byte [rbp + rcx + 0x38], al
inc rcx
cmp rcx, 5
jb 0x14003bfc0
mov r8d, dword [rbp + 0x70]
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x258]
mov byte [rbp + 0x3e], 0
call fcn.140041b50
movaps xmm0, xmm9
lea rax, [rbp + 0x258]
subss xmm0, xmm6
mov qword [rsp + 0x30], rax
movaps xmm1, xmm10
mov byte [rsp + 0x28], 0
addss xmm1, dword [0x140054d20]
lea r9, [rsp + 0x60]
mov byte [rsp + 0x20], 0
cvttss2si r8d, xmm0
movaps xmm0, xmm7
cvttss2si edx, xmm1
movd ecx, xmm0
call fcn.14002fc90
xor eax, eax
mov dword [rbp + 0x80], 0x29642922
mov ecx, eax
mov dword [rbp + 0x84], 0x297a
mov byte [rbp + 0x88], 1
mov edx, 0x2907
lea eax, [rdx + rcx]
xor word [rbp + rcx*2 + 0x80], ax
inc rcx
cmp rcx, 3
jb 0x14003c050
lea r9, [rbp + 0x2c0]
mov byte [rbp + 0x88], 0
lea r8, [rbp + 0x80]
mov edx, 0x20
lea rcx, [rbp + 0x300]
call fcn.14002c270
movaps xmm0, xmm10
mov dword [rbp - 0x70], 0xc9
addss xmm0, dword [0x140054d08]
lea rax, [rbp + 0x300]
mov dword [rbp - 0x6c], 0x10
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x70]
mov byte [rsp + 0x28], 0
mov r8d, ebx
mov dword [rbp - 0x68], 0x10
cvttss2si edx, xmm0
mov dword [rbp - 0x64], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
movd ecx, xmm0
call fcn.1400304b0
movss xmm2, dword [0x140054c80]
lea rcx, [rbp - 0x80]
movss xmm0, dword [0x140054b94]
movaps xmm7, xmm10
addss xmm9, dword [0x140054d04]
addss xmm7, dword [0x140054d30]
movss dword [rbp - 0x80], xmm0
movaps xmm1, xmm10
movss dword [rbp - 0x7c], xmm0
addss xmm1, xmm2
movss dword [rbp - 0x78], xmm0
movaps xmm6, xmm9
movss dword [rbp - 0x74], xmm2
addss xmm6, dword [0x140054cd8]
movaps xmm0, xmm7
subss xmm0, xmm2
movss dword [rbp + 0x148], xmm1
movss dword [rbp + 0x140], xmm0
movaps xmm0, xmm6
subss xmm0, xmm2
movss dword [rbp + 0x144], xmm0
movaps xmm0, xmm9
addss xmm0, xmm2
movss dword [rbp + 0x14c], xmm0
call fcn.140002df0
movss xmm0, dword [0x140054c80]
lea r8, [rbp + 0x140]
mov rcx, qword [0x140144590]
lea rdx, [rbp + 0x148]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], 0xf
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001d590
movss xmm0, dword [0x140054b94]
lea rcx, [rsp + 0x40]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm0
movss dword [rsp + 0x48], xmm0
movss xmm0, dword [0x140054c80]
movss dword [rsp + 0x4c], xmm0
movss dword [rbp + 0x20], xmm7
movss dword [rbp + 0x24], xmm6
movss dword [rbp + 0x18], xmm10
movss dword [rbp + 0x1c], xmm9
call fcn.140002df0
movss xmm0, dword [0x140054c80]
lea r8, [rbp + 0x20]
mov rcx, qword [0x140144590]
lea rdx, [rbp + 0x18]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], 0xf
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001d590
lea rdx, [0x1401435f0]
cmp esi, 0x32
lea rax, [0x140143610]
mov ecx, edi
cmovge rdx, rax
lea r9, [0x1401435d0]
cmp esi, 0x14
mov eax, esi
cmovge r9, rdx
cdq
sub eax, edx
mov qword [rsp + 0x20], r9
sar eax, 1
mov r9d, 6
cvttss2si edx, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x140054ca0]
cvttss2si r8d, xmm0
call fcn.140032320
movss xmm7, dword [0x140054cf0]
movss xmm9, dword [0x140054d60]
movss xmm10, dword [0x140054c80]
xor ebx, ebx
cmp byte [0x1401445df], bl
je 0x14003c35c
mov dword [rbp + 0xb0], 0x29642922
mov ecx, ebx
mov dword [rbp + 0xb4], 0x297a
mov edx, 0x2907
mov byte [rbp + 0xb8], 1
nop
lea eax, [rdx + rcx]
xor word [rbp + rcx*2 + 0xb0], ax
inc rcx
cmp rcx, 3
jb 0x14003c2d0
lea r9, [rbp + 0x2c0]
mov byte [rbp + 0xb8], bl
lea r8, [rbp + 0xb0]
mov edx, 0x20
lea rcx, [rbp + 0x340]
call fcn.14002c270
movups xmm0, xmmword [0x140143a40]
lea rcx, [rbp + 0x50]
movups xmmword [rbp + 0x50], xmm0
call fcn.140002df0
subss xmm8, dword [0x140054cf8]
subss xmm11, dword [0x140054d04]
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x340]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
cvttss2si r8d, xmm8
mov byte [rsp + 0x28], bl
mov byte [rsp + 0x20], bl
cvttss2si edx, xmm11
call fcn.140031420
cmp byte [0x1401447a4], 0
je 0x14003c3e7
mov dword [rbp + 0x30], 0x42296122
mov rcx, rbx
mov word [rbp + 0x34], 0x5b
mov byte [rbp + 0x36], 1
nop dword [rax]
lea eax, [rcx + 7]
xor byte [rbp + rcx + 0x30], al
inc rcx
cmp rcx, 5
jb 0x14003c380
mov r8d, dword [rbp + 0x70]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x278]
mov byte [rbp + 0x36], 0
call fcn.140041b50
movups xmm0, xmmword [str.L7_t_]
lea rcx, [rbp + 0x50]
movups xmmword [rbp + 0x50], xmm0
call fcn.140002df0
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x278]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov r8d, r14d
mov byte [rsp + 0x28], 0
mov edx, r12d
mov byte [rsp + 0x20], 0
call fcn.140030ca0
cmp byte [0x14014478a], 0
je 0x14003c4ea
movss xmm0, dword [rbp + 0xc8]
movss xmm1, dword [rbp + 0xc0]
subss xmm0, xmm14
movss xmm2, dword [rbp + 0xc4]
subss xmm1, xmm12
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14003c440
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14003c448
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rbp + 0x40], 0x24392d5c
mov rcx, rbx
mov dword [rbp + 0x44], 0x506a3b
mov byte [rbp + 0x48], 1
nop dword [rax]
lea eax, [rcx + 7]
xor byte [rbp + rcx + 0x40], al
inc rcx
cmp rcx, 7
jb 0x14003c460
xorps xmm2, xmm2
mov byte [rbp + 0x48], 0
cvtss2sd xmm2, xmm0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x298]
movq r8, xmm2
call fcn.140013680
cmp byte [0x1401447a4], 0
movd xmm6, r14d
cvtdq2ps xmm6, xmm6
je 0x14003c4a9
addss xmm6, dword [0x140054cf4]
movups xmm0, xmmword [0x140143a70]
lea rcx, [rbp + 0x50]
movups xmmword [rbp + 0x50], xmm0
call fcn.140002df0
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x298]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov edx, r12d
cvttss2si r8d, xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
call fcn.140030ca0
cmp byte [0x1401445b4], 0
movss xmm11, dword [0x140054d64]
je 0x14003c678
movaps xmm2, xmm11
mov ecx, r15d
call fcn.1400378d0
xor r12d, r12d
test al, al
jne 0x14003cede
mov ecx, dword [0x140144848]
mov r8d, r12d
mov qword [rbp + 0x154], r8
mov dword [rbp + 0x150], r12d
test ecx, ecx
je 0x14003c623
sub ecx, 1
je 0x14003c578
cmp ecx, 1
jne 0x14003c57e
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000001
jge 0x14003c565
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov r8d, 2
mov esi, 5
cmove r8d, esi
jmp 0x14003c583
mov r8d, 2
mov esi, 5
mov edx, r15d
lea rcx, [rbp - 0x20]
call fcn.1400373d0
mov r9d, dword [0x1401447a0]
lea rdx, [rbp + 0x150]
mov r8d, dword [0x1401445a8]
lea rcx, [rbp - 0x50]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp - 0x50], xmm0
mov dword [rbp - 0x48], eax
call fcn.140037120
test al, al
je 0x14003ceca
movss xmm6, dword [rbp + 0x150]
movss xmm7, dword [rbp + 0x154]
mov eax, dword [0x1401445a8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x1401447a0]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
subss xmm6, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm7, xmm0
movaps xmm0, xmm6
mulss xmm0, xmm6
movaps xmm1, xmm7
mulss xmm1, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14003c630
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14003c638
mov esi, 5
mov r8d, esi
jmp 0x14003c583
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [rbp + 0x60]
comiss xmm1, xmm0
jbe 0x14003ceca
movss xmm1, dword [0x140143bbc]
comiss xmm1, xmm0
mov r14d, dword [rbp + 0xc]
jbe 0x14003cef2
mov cl, 1
movss dword [rbp + 0x10], xmm6
movaps xmm8, xmm6
mov byte [rbp], cl
movss dword [rbp + 0x60], xmm0
movaps xmm6, xmm7
movss dword [rbp + 0x14], xmm7
jmp 0x14003c693
movss xmm6, dword [rbp + 0x14]
xor r12d, r12d
movss xmm8, dword [rbp + 0x10]
mov r14d, dword [rbp + 0xc]
mov esi, 5
movzx ecx, byte [rbp]
movss xmm7, dword [0x140054cf0]
inc r14d
mov dword [rbp + 0xc], r14d
cmp r14d, 0xf
jle 0x14003b302
movss xmm11, dword [0x140054ce4]
movaps xmm14, xmmword [rsp + 0x4a0]
movaps xmm13, xmmword [rsp + 0x4b0]
movaps xmm12, xmmword [rsp + 0x4c0]
mov r15, qword [rsp + 0x530]
mov r14, qword [rsp + 0x538]
mov r13, qword [rsp + 0x540]
cmp byte [0x1401445b4], 0
je 0x14003c793
test cl, cl
je 0x14003c793
movzx eax, byte [0x1401447a5]
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0x10
mov dword [rsp + 0x4c], 0x14
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], 0x12
mov dword [rsp + 0x58], 0x11
cmp al, 1
je 0x14003c75c
test al, al
jne 0x14003c793
movsxd rax, dword [0x140143c80]
mov ecx, dword [rsp + rax*4 + 0x40]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x14003c793
divss xmm8, dword [0x140143c84]
divss xmm6, dword [0x140143c84]
ucomiss xmm8, xmm15
jp 0x14003c779
je 0x14003d07d
ucomiss xmm6, xmm15
jp 0x14003c785
je 0x14003d07d
cvttss2si edx, xmm6
cvttss2si ecx, xmm8
call fcn.1400327e0
cmp byte [0x140144589], 0
movss xmm10, dword [0x140054c20]
je 0x14003c96a
mov rax, qword [0x140144590]
lea rcx, [rsp + 0x40]
movups xmm0, xmmword [0x140143a50]
movss xmm8, dword [rax + 0x10]
lea rdi, [rax + 0x1cc8]
movss xmm9, dword [rax + 0x14]
mulss xmm8, xmm10
mulss xmm9, xmm10
movups xmmword [rsp + 0x40], xmm0
call fcn.140002df0
movss xmm1, dword [0x140054b88]
xorps xmm0, xmm0
movzx ecx, al
mov r8d, eax
shr r8d, 0x18
movss dword [rbp + 0x24], xmm9
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movss dword [rbp + 0x1c], xmm9
mulss xmm0, xmm1
movss dword [rsp + 0x40], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 0x10
movzx eax, cl
lea rcx, [rsp + 0x40]
mulss xmm0, xmm1
movss dword [rsp + 0x44], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov eax, r8d
mulss xmm0, xmm1
movss dword [rsp + 0x48], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movaps xmm1, xmm8
subss xmm1, xmm11
movss dword [rsp + 0x4c], xmm0
movaps xmm0, xmm8
addss xmm0, xmm11
movss dword [rbp + 0x20], xmm1
movss dword [rbp + 0x18], xmm0
call fcn.140002df0
movss xmm7, dword [0x140054bdc]
lea rdx, [rbp + 0x20]
mov r9d, eax
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0x18]
mov rcx, rdi
mov ebx, eax
call fcn.14001d410
movaps xmm0, xmm9
movss dword [rbp + 0x20], xmm8
movaps xmm1, xmm9
movss dword [rbp + 0x18], xmm8
subss xmm0, xmm11
movss dword [rsp + 0x20], xmm7
addss xmm1, xmm11
mov r9d, ebx
lea r8, [rbp + 0x18]
mov rcx, rdi
lea rdx, [rbp + 0x20]
movss dword [rbp + 0x24], xmm0
movss dword [rbp + 0x1c], xmm1
call fcn.14001d410
movss xmm6, dword [0x140054c94]
lea r8, [rbp + 0x18]
movaps xmm0, xmm8
movss dword [rbp + 0x24], xmm9
subss xmm0, xmm6
movss dword [rbp + 0x1c], xmm9
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
movss dword [rbp + 0x20], xmm0
movaps xmm0, xmm8
addss xmm0, xmm6
movss dword [rbp + 0x18], xmm0
lea rdx, [rbp + 0x20]
mov rcx, rdi
call fcn.14001d410
movaps xmm0, xmm9
movss dword [rbp + 0x20], xmm8
subss xmm0, xmm6
movss dword [rbp + 0x18], xmm8
addss xmm9, xmm6
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x20]
mov rcx, rdi
movss dword [rbp + 0x24], xmm0
movss dword [rbp + 0x1c], xmm9
call fcn.14001d410
cmp byte [0x1401445c3], 0
je 0x14003ca89
movups xmm0, xmmword [0x14005e050]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
call fcn.140002df0
movss xmm2, dword [0x140143bbc]
mov esi, eax
mov eax, dword [0x1401445a8]
movaps xmm0, xmm2
mov rdi, qword [0x140144590]
cdq
sub eax, edx
mulss xmm0, xmm10
sar eax, 1
add rdi, 0x1cc8
cvttss2si ecx, xmm0
movd xmm0, eax
mov eax, dword [0x1401447a0]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x18], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x1c], xmm0
test esi, 0xff000000
je 0x14003ca89
movss xmm6, dword [0x140054c80]
lea rdx, [rbp + 0x18]
cvttss2si eax, xmm2
mov dword [rsp + 0x28], ecx
movd xmm0, ecx
movaps xmm3, xmm15
cvtdq2ps xmm0, xmm0
mov rcx, rdi
movd xmm2, eax
movaps xmm1, xmm0
subss xmm1, xmm6
cvtdq2ps xmm2, xmm2
mulss xmm1, dword [0x140054cdc]
subss xmm2, xmm10
divss xmm1, xmm0
movss dword [rsp + 0x20], xmm1
call fcn.14001ced0
mov r8d, dword [rdi + 0x80]
mov r9d, esi
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 1
call fcn.14001b7c0
mov ecx, dword [rdi + 0x84]
test ecx, ecx
jns 0x14003ca82
mov eax, ecx
cdq
sub eax, edx
mov edx, r12d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x80]
test eax, eax
cmovg edx, eax
call fcn.140012c50
mov dword [rdi + 0x80], r12d
cmp byte [0x1401445de], 0
je 0x14003cbae
cmp dword [rbp + 0x64], 0
jne 0x14003cbb8
mov rdx, qword [0x140144598]
add rdx, 0xff3cb0
cmp rdx, 0xffffffffffffffff
je 0x14003cad8
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x50]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x78]
mov qword [rbp + 0x50], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140144598]
add rdx, 0xff3c3c
cmp rdx, 0xffffffffffffffff
je 0x14003cb19
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x198]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xac]
mov qword [rbp + 0x198], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp + 0x78]
mov rdx, qword [0x140144598]
sub ebx, dword [rbp + 0xac]
add rdx, 0xff3c38
cmp rdx, 0xffffffffffffffff
je 0x14003cb63
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1b0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xa8]
mov qword [rbp + 0x1b0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0xa8]
add edi, ebx
mov ebx, r12d
nop
test edi, edi
je 0x14003cba7
mov rcx, qword [0x1401445a0]
lea edx, [rdi + 0xc]
lea rax, [rbp + 0x150]
mov dword [rbp + 0xa0], r12d
lea edx, [rdx + rbx*4]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
inc ebx
cmp ebx, 0xa
jl 0x14003cb70
cmp dword [rbp + 0x64], 0
je 0x14003d07d
mov edx, dword [rbp + 0x64]
lea rax, [rbp + 0x190]
mov rcx, qword [0x1401445a0]
lea r8, [rbp + 0x98]
add edx, 0xb88
mov qword [rbp + 0x190], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x98]
test eax, eax
je 0x14003cce1
mov rcx, qword [0x1401445a0]
lea r8, [rbp + 0x14]
mov edx, eax
mov qword [rbp + 0x188], r12
lea rax, [rbp + 0x188]
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x14]
test eax, eax
je 0x14003cce1
cmp byte [0x140144788], 0
je 0x14003cc72
mov rcx, qword [0x1401445a0]
lea edx, [rax + 0x160]
lea rax, [rbp + 0x110]
mov dword [rbp + 0x90], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0x14]
cmp byte [0x1401445b6], 0
je 0x14003ccab
mov rcx, qword [0x1401445a0]
lea edx, [rax + 0x188]
lea rax, [rbp + 0xd8]
mov dword [rbp + 0x70], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0x14]
cmp byte [0x1401445d8], 0
je 0x14003cce1
mov rcx, qword [0x1401445a0]
lea edx, [rax + 0x120]
lea rax, [rbp + 0x100]
mov dword [rbp + 0x68], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edx, dword [0x1400546a0]
mov rax, qword [0x140144598]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003cd28
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1c0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xc]
mov qword [rbp + 0x1c0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140144598]
mov edx, dword [0x1400546a8]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003cd68
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0xe8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 8]
mov qword [rbp + 0xe8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140144598]
mov edx, dword [0x1400546a4]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003cda1
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x180]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x60]
mov qword [rbp + 0x180], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0xc]
lea rax, [rbp + 0x178]
sub ecx, dword [rbp + 8]
lea r8, [rbp + 0x10]
mov edx, dword [rbp + 0x60]
mov r9d, 4
add edx, 0x28540
mov dword [rbp + 0xc], ecx
add edx, ecx
mov qword [rbp + 0x178], r12
mov rcx, qword [0x1401445a0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
imul edx, dword [rbp + 0x10], 0x17c
lea rax, [rbp + 0x170]
mov ebx, dword [rbp + 0x60]
lea r8, [rbp + 0x30]
add ebx, dword [rbp + 0xc]
mov r9d, 4
mov rcx, qword [0x1401445a0]
mov qword [rbp + 0x170], r12
add edx, 0x58
mov qword [rsp + 0x20], rax
add edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
imul edx, dword [rbp + 0x10], 0x17c
lea rax, [rbp + 0x18]
mov rcx, qword [0x1401445a0]
lea r8, [rbp + 0x38]
mov r9d, 4
mov qword [rbp + 0x18], r12
mov qword [rsp + 0x20], rax
add edx, 0x6c
add edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
imul edx, dword [rbp + 0x10], 0x17c
lea rax, [rbp + 0x20]
mov rcx, qword [0x1401445a0]
lea r8, [rbp + 0x28]
mov r9d, 4
mov qword [rbp + 0x20], r12
mov qword [rsp + 0x20], rax
add edx, 0xd0
add edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x10]
cmp eax, 0x11
jg 0x14003cff7
cmp byte [0x140144789], 0
je 0x14003cfae
mov ecx, dword [0x140143574]
test ecx, ecx
jne 0x14003cf02
lea eax, [rax + rax*8]
mov dword [rbp + 0x148], 0x3e99999a
lea eax, [rax + 0xa09c]
lea edx, [rbx + rax*4]
lea rax, [rbp + 0xf0]
lea r8, [rbp + 0x148]
jmp 0x14003cf8d
movss xmm6, dword [rbp + 0x14]
movss xmm8, dword [rbp + 0x10]
mov r14d, dword [rbp + 0xc]
jmp 0x14003c68f
movss xmm6, dword [rbp + 0x14]
movss xmm8, dword [rbp + 0x10]
mov r14d, dword [rbp + 0xc]
jmp 0x14003c68a
movss xmm6, dword [rbp + 0x14]
movss xmm8, dword [rbp + 0x10]
jmp 0x14003c68f
cmp ecx, 1
jne 0x14003cf33
movss xmm0, dword [0x140054c08]
lea eax, [rax + rax*8]
lea eax, [rax + 0xa09c]
movss dword [rbp + 0x140], xmm0
lea edx, [rbx + rax*4]
lea rax, [rbp + 0xc0]
lea r8, [rbp + 0x140]
jmp 0x14003cf8d
cmp ecx, 2
jne 0x14003cf5e
lea eax, [rax + rax*8]
mov dword [rbp + 0x138], 0x3f000000
lea eax, [rax + 0xa09c]
lea edx, [rbx + rax*4]
lea rax, [rbp + 0xb0]
lea r8, [rbp + 0x138]
jmp 0x14003cf8d
cmp ecx, 3
jne 0x14003cfa5
movss xmm0, dword [0x140054c3c]
lea eax, [rax + rax*8]
lea eax, [rax + 0xa09c]
movss dword [rbp + 0x120], xmm0
lea edx, [rbx + rax*4]
lea rax, [rbp + 0x80]
lea r8, [rbp + 0x120]
mov rcx, qword [0x1401445a0]
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x140144796], 1
jmp 0x14003cff7
cmp byte [0x140144796], 1
jne 0x14003cff7
mov rcx, qword [0x1401445a0]
lea eax, [rax + rax*8]
lea eax, [rax + 0xa09c]
mov dword [rbp + 0x128], 0
lea edx, [rbx + rax*4]
mov r9d, 4
lea rax, [rbp + 0x40]
lea r8, [rbp + 0x128]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x140144796], 0
cmp byte [0x1401445c0], 0
je 0x14003d07d
mov rdx, qword [0x140144598]
add rdx, 0xff3bdc
cmp rdx, 0xffffffffffffffff
je 0x14003d041
mov rcx, qword [0x1401445a0]
lea rax, [rbp + 0x1a0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x130]
mov qword [rbp + 0x1a0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003d07d
mov edx, dword [rbp + 0x130]
lea rax, [rbp + 0x40]
mov rcx, qword [0x1401445a0]
lea r8, [rbp]
add edx, 0x3c
mov byte [rbp], 4
mov r9d, 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm10, xmmword [rsp + 0x4e0]
movaps xmm9, xmmword [rsp + 0x4f0]
movaps xmm7, xmmword [rsp + 0x510]
mov rdi, qword [rsp + 0x570]
mov rsi, qword [rsp + 0x568]
mov rbx, qword [rsp + 0x560]
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.140043070
lea r11, [rsp + 0x548]
movaps xmm6, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x48]
movaps xmm11, xmmword [r11 - 0x78]
movaps xmm15, xmmword [r11 - 0xb8]
mov rsp, r11
pop r12
pop rbp
ret