Function at 0x14003da50
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x528]
sub rsp, 0x618
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140062010]
xor rax, rsp
mov qword [rbp + 0x450], rax
lea rcx, [rbp - 0x50]
call fcn.140031900
lea rcx, [rbp - 0x50]
call fcn.14003afe0
mov rdx, qword [0x140148598]
xor cl, cl
movss xmm0, dword [0x140058758]
add rdx, 0xffd830
xor r12d, r12d
movss dword [rbp + 0xe8], xmm0
mov qword [rbp + 0x16c], 0
xorps xmm8, xmm8
movss dword [rbp + 0xb0], xmm8
xorps xmm6, xmm6
movss dword [rbp + 0xac], xmm6
xorps xmm15, xmm15
mov dword [rbp + 0x168], 0
mov qword [rbp + 0x15c], 0
mov dword [rbp + 0x158], 0
mov qword [rbp + 0x17c], 0
mov dword [rbp + 0x178], 0
mov byte [rbp + 0x88], cl
cmp rdx, 0xffffffffffffffff
je 0x14003db58
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x2d8]
lea r9d, [r12 + 4]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xec]
mov qword [rbp + 0x2d8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xor cl, cl
movss xmm11, dword [0x1400586ec]
mov qword [rsp + 0x630], rbx
mov qword [rsp + 0x638], rsi
mov qword [rsp + 0x640], rdi
movaps xmmword [rsp + 0x5e0], xmm7
movaps xmmword [rsp + 0x5c0], xmm9
movaps xmmword [rsp + 0x5b0], xmm10
cmp dword [rbp + 0xec], r12d
je 0x14003f124
movss xmm11, dword [0x14005876c]
mov esi, 5
movss xmm9, dword [0x140058768]
movss xmm7, dword [0x1400586f8]
movss xmm10, dword [0x140058670]
mov qword [rsp + 0x610], r13
mov r13d, dword [rbp + 0x90]
mov qword [rsp + 0x608], r14
mov r14d, r12d
mov qword [rsp + 0x600], r15
movaps xmmword [rsp + 0x590], xmm12
movaps xmmword [rsp + 0x580], xmm13
movaps xmmword [rsp + 0x570], xmm14
mov dword [rbp + 0xa8], r12d
nop dword [rax]
mov edx, dword [0x1400576a8]
add rdx, qword [0x140148598]
cmp rdx, 0xffffffffffffffff
je 0x14003dc50
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x2d0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x148]
mov qword [rbp + 0x2d0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [0x1400576b0]
add rdx, qword [0x140148598]
cmp rdx, 0xffffffffffffffff
je 0x14003dc90
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x308]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1e8]
mov qword [rbp + 0x308], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [0x1400576ac]
add rdx, qword [0x140148598]
cmp rdx, 0xffffffffffffffff
je 0x14003dcd0
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x2f8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x22c]
mov qword [rbp + 0x2f8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x148]
lea rax, [rbp + 0x2c8]
sub ecx, dword [rbp + 0x1e8]
lea r8, [rbp + 0x228]
mov edx, dword [rbp + 0x22c]
mov r9d, 4
add edx, 0x28540
mov dword [rbp + 0x148], ecx
add edx, ecx
mov qword [rbp + 0x2c8], r12
mov rcx, qword [0x1401485a0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x14014878e], 0
jne 0x14003dd50
mov eax, dword [rbp + 0x228]
and eax, 0x80000001
jge 0x14003dd3a
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov ecx, r12d
mov eax, r14d
setne cl
and eax, 1
cmp eax, ecx
je 0x14003f0c5
mov rdx, qword [0x140148598]
add rdx, 0xff4000
cmp rdx, 0xffffffffffffffff
je 0x14003dd91
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x2c0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x80]
mov qword [rbp + 0x2c0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140148598]
add rdx, 0xff4014
cmp rdx, 0xffffffffffffffff
je 0x14003ddd2
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x2a8]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x84]
mov qword [rbp + 0x2a8], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r14d, 0x11
jbe 0x14003dde4
mov dword [rbp + 0x14c], r12d
jmp 0x14003f0c5
mov eax, dword [rbp + 0x84]
lea r8, [rbp + 0x14c]
add eax, dword [rbp + 0x80]
mov r9d, 4
mov rcx, qword [0x1401485a0]
add rax, 0x137c
mov edx, r14d
mov qword [rbp + 0x2a0], r12
lea rdx, [rax + rdx*4]
lea rax, [rbp + 0x2a0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x14c]
test ecx, ecx
je 0x14003f0c5
lea ebx, [rcx + 0x30]
mov qword [rbp + 0x298], r12
lea edx, [rcx + 0x14]
mov r9d, 4
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x298]
lea r8, [rbp + 0x1f8]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x290]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x208]
mov qword [rbp + 0x290], r12
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15d, dword [rbp + 0x208]
xor r15d, dword [rbp + 0x1f8]
je 0x14003f0c5
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x2e0]
lea edx, [r15 + 0xddc]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x2e0], r12
lea r8, [rbp + 0x1ec]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x1ec]
test eax, eax
je 0x14003f0c5
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x34]
lea rax, [rbp + 0x300]
mov qword [rbp + 0x300], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x248]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cvttss2si edi, dword [rbp + 0x248]
mov dword [rbp + 0xe4], edi
test edi, edi
je 0x14003f0c5
cmp byte [0x1401485af], 0
jne 0x14003df4c
cmp byte [0x140148752], 0
je 0x14003e094
mov rax, qword [0x140148598]
lea rdx, [rax + 0xff3aec]
cmp rdx, 0xffffffffffffffff
je 0x14003df94
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x238]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe0]
mov qword [rbp + 0x238], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140148598]
lea rdx, [rax + 0xff3adc]
cmp rdx, 0xffffffffffffffff
je 0x14003dfd5
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x240]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xf0]
mov qword [rbp + 0x240], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140148598]
lea rdx, [rax + 0xff3ad8]
cmp rdx, 0xffffffffffffffff
je 0x14003e00f
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x200]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x120]
mov qword [rbp + 0x200], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xe0]
lea r8, [rbp + 0x128]
sub eax, dword [rbp + 0xf0]
mov r9d, 4
mov rcx, qword [0x1401485a0]
mov dword [rbp + 0xe0], eax
mov qword [rbp + 0xf8], r12
lea edx, [rax + 0x284f8]
lea edx, [rdx + r14*4]
add edx, dword [rbp + 0x120]
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0x128]
lea rax, [rbp + 0x150]
mov rcx, qword [0x1401485a0]
lea r8, [rbp + 0x390]
add edx, 8
mov qword [rbp + 0x150], r12
mov r9d, 0x40
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, esi
lea rcx, [rbp + 0x2b0]
mov edx, r15d
call fcn.1400399d0
mov rcx, qword [0x1401485a0]
lea edx, [r15 + 0xbb8]
mov r9d, 4
mov qword [rbp + 0x18c], 0
lea r8, [rbp + 0x130]
mov dword [rbp + 0x188], 0
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
lea rax, [rbp + 0x150]
mov qword [rsp + 0x20], rax
movsd qword [rbp + 0x250], xmm0
mov qword [rbp + 0x150], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x130]
test eax, eax
je 0x14003e172
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x50]
lea rax, [rbp + 0x210]
mov qword [rbp + 0x210], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x134]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x134]
test eax, eax
je 0x14003e172
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x40]
lea rax, [rbp + 0x218]
mov qword [rbp + 0x218], r12
mov r9d, 0xc
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140148598]
movss xmm12, dword [rbp + 0x188]
add rdx, 0xffd830
movss xmm13, dword [rbp + 0x18c]
movss xmm14, dword [rbp + 0x190]
movss dword [rbp + 0x178], xmm12
movss dword [rbp + 0x17c], xmm13
movss dword [rbp + 0x180], xmm14
mov qword [rbp + 0x13c], 0
mov dword [rbp + 0x138], 0
cmp rdx, 0xffffffffffffffff
je 0x14003e205
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x230]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x90]
mov qword [rbp + 0x230], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x90]
test r13d, r13d
je 0x14003e307
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0xf8]
lea edx, [r13 + 0x948]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0xf8], r12
lea r8, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x90]
test r13d, r13d
je 0x14003e307
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x1f0]
lea edx, [r13 + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x1f0], r12
lea r8, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x90]
test r13d, r13d
je 0x14003e307
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x220]
lea edx, [r13 + 0x20]
mov qword [rsp + 0x20], rax
mov r9d, 4
mov qword [rbp + 0x220], r12
lea r8, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x90]
test r13d, r13d
je 0x14003e307
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0xd0]
lea edx, [r13 + 0xe8]
mov qword [rsp + 0x20], rax
mov r9d, 0xc
mov qword [rbp + 0xd0], r12
lea r8, [rbp + 0x138]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x90]
movsd xmm0, qword [rbp + 0x250]
lea rdx, [rbp + 0x168]
movss xmm1, dword [rbp + 0x254]
lea rcx, [rbp + 0x260]
addss xmm1, dword [0x1400585d8]
mov r9d, dword [0x1401487a4]
mov eax, 0x64
mov r8d, dword [0x1401485a8]
cmp edi, 0x64
shufps xmm0, xmm0, 0xe1
mov esi, edi
cmovge esi, eax
mov dword [rbp + 0x268], ebx
movss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movsd qword [rbp + 0x250], xmm0
movsd qword [rbp + 0x260], xmm0
call fcn.140039720
test al, al
je 0x14003f0c0
movsd xmm0, qword [rbp + 0x178]
lea rdx, [rbp + 0x158]
mov eax, dword [rbp + 0x180]
lea rcx, [rbp + 0x280]
mov r9d, dword [0x1401487a4]
mov r8d, dword [0x1401485a8]
movsd qword [rbp + 0x280], xmm0
mov dword [rbp + 0x288], eax
call fcn.140039720
test al, al
je 0x14003f0c0
movaps xmm2, xmm11
mov ecx, r15d
call fcn.140039e40
test al, al
jne 0x14003e518
cmp byte [0x1401485df], al
je 0x14003e3fc
movups xmm0, xmmword [0x140147a30]
lea rcx, [rbp + 0xd0]
movups xmmword [rbp + 0xd0], xmm0
call fcn.140002df0
mov edx, eax
mov ecx, r15d
call fcn.140039c40
cmp byte [0x1401485ac], 0
movss xmm8, dword [rbp + 0x16c]
movss xmm11, dword [rbp + 0x168]
movss xmm6, dword [rbp + 0x15c]
je 0x14003e487
movups xmm0, xmmword [0x140147a60]
lea rcx, [rbp + 0xd0]
movups xmmword [rbp + 0xd0], xmm0
call fcn.140002df0
movaps xmm0, xmm8
mov dword [rbp + 0xf8], eax
subss xmm0, xmm6
comiss xmm15, xmm0
jbe 0x14003e452
mulss xmm0, xmm9
cvttss2si r9d, xmm0
cvttss2si ecx, xmm11
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.140034040
cmp byte [0x1401485ba], 0
je 0x14003e679
cvttss2si eax, dword [rbp + 0x158]
lea rcx, [rbp + 0xd0]
movups xmm0, xmmword [0x140147a10]
movups xmmword [rbp + 0xd0], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x1c8], xmm1
movd xmm1, dword [0x1401487a4]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x1401485a8]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x1d4], xmm1
movss dword [rbp + 0x1cc], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x1d0], xmm0
call fcn.140002df0
lea rdx, [rbp + 0x1d0]
lea r8, [rbp + 0x1c8]
jmp 0x14003e65c
cmp byte [0x1401485df], 0
je 0x14003e545
movups xmm0, xmmword [0x140147a20]
lea rcx, [rbp + 0xd0]
movups xmmword [rbp + 0xd0], xmm0
call fcn.140002df0
mov edx, eax
mov ecx, r15d
call fcn.140039c40
cmp byte [0x1401485ac], 0
movss xmm8, dword [rbp + 0x16c]
movss xmm11, dword [rbp + 0x168]
movss xmm6, dword [rbp + 0x15c]
je 0x14003e5d0
movups xmm0, xmmword [0x140147a20]
lea rcx, [rbp + 0xd0]
movups xmmword [rbp + 0xd0], xmm0
call fcn.140002df0
movaps xmm0, xmm8
mov dword [rbp + 0xf8], eax
subss xmm0, xmm6
comiss xmm15, xmm0
jbe 0x14003e59b
mulss xmm0, xmm9
cvttss2si r9d, xmm0
cvttss2si ecx, xmm11
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
cdq
sub eax, edx
sar eax, 1
cvttss2si r10d, xmm8
sub ecx, eax
lea rax, [rbp + 0xf8]
mov qword [rsp + 0x20], rax
mov edx, r10d
call fcn.140034040
cmp byte [0x1401485ba], 0
je 0x14003e679
cvttss2si eax, dword [rbp + 0x158]
lea rcx, [rbp + 0xd0]
movups xmm0, xmmword [0x140147a20]
movups xmmword [rbp + 0xd0], xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
cvttss2si eax, xmm6
movss dword [rbp + 0x198], xmm1
movd xmm1, dword [0x1401487a4]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
mov eax, dword [0x1401485a8]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x1c4], xmm1
movss dword [rbp + 0x19c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x1c0], xmm0
call fcn.140002df0
lea rdx, [rbp + 0x1c0]
lea r8, [rbp + 0x198]
mov rcx, qword [0x140148590]
mov r9d, eax
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm10
call fcn.14001d410
movaps xmm0, xmm8
subss xmm0, xmm6
comiss xmm15, xmm0
movaps xmm1, xmm0
jbe 0x14003e68f
mulss xmm1, xmm9
cvttss2si eax, xmm1
cvttss2si ebx, xmm11
test eax, eax
jns 0x14003e69e
inc eax
sar eax, 1
cmp byte [0x1401485c5], 0
cvttss2si r14d, xmm8
lea r12d, [rax + rbx]
je 0x14003e78c
xor ecx, ecx
test si, si
cmovne cx, si
comiss xmm15, xmm0
jbe 0x14003e6ca
mulss xmm0, xmm9
cvttss2si r9d, xmm0
subss xmm6, xmm8
mov eax, r9d
cdq
and edx, 3
add eax, edx
sar eax, 2
sub ebx, eax
movzx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
divss xmm0, dword [0x14005871c]
cvttss2si rdi, xmm0
cmp cx, 0x64
ja 0x14003e721
cmp cx, 0x4b
ja 0x14003e721
cmp cx, 0x28
jbe 0x14003e718
movaps xmm0, xmmword [0x1401476c0]
jmp 0x14003e728
movaps xmm0, xmmword [0x1401475d0]
jmp 0x14003e728
movaps xmm0, xmmword [0x140147610]
lea rax, [0x140147770]
add r9d, 2
lea edx, [r14 - 1]
mov qword [rsp + 0x20], rax
lea ecx, [rbx - 6]
mov r8d, 5
movups xmmword [rbp + 0xd0], xmm0
call fcn.1400347d0
mov eax, edi
lea ecx, [rbx - 5]
xorps xmm0, xmm0
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
mov r9d, edi
mov r8d, 3
cvtsi2ss xmm0, rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x20], rax
subss xmm6, xmm0
addss xmm6, xmm1
cvttss2si edx, xmm6
call fcn.1400347d0
cmp byte [0x1401485af], 0
je 0x14003ec68
lea rax, [rbp - 0x70]
mov dword [rbp - 0x70], 9
movaps xmm10, xmm11
mov dword [rbp - 0x6c], 9
subss xmm10, dword [0x140058718]
movaps xmm9, xmm8
mov dword [rbp - 0x68], 9
subss xmm9, dword [0x140058714]
mov r9d, 0x1a
mov dword [rbp - 0x64], 0xff
mov r8d, 0x9b
mov dword [rbp - 0x60], 0x1c
cvttss2si edi, xmm10
mov dword [rbp - 0x5c], 0x36
mov dword [rbp - 0x58], 0x3a
mov dword [rbp - 0x54], 0xff
mov qword [rsp + 0x20], rax
cvttss2si ebx, xmm9
mov ecx, edi
mov edx, ebx
call fcn.1400347d0
mov r9d, 0x19
lea rax, [rbp - 0x60]
mov edx, ebx
mov qword [rsp + 0x20], rax
mov ecx, edi
lea r8d, [r9 + 5]
call fcn.1400347d0
movss xmm0, dword [rbp + 0x140]
movss xmm1, dword [rbp + 0x138]
subss xmm0, xmm14
movss xmm2, dword [rbp + 0x13c]
subss xmm1, xmm12
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14003e87b
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14003e883
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rbp + 0x98], 0xce899680
xor ecx, ecx
mov word [rbp + 0x9c], 0x100
nop dword [rax + rax]
lea eax, [rcx - 0x5b]
xor byte [rbp + rcx + 0x98], al
inc rcx
cmp rcx, 4
jb 0x14003e8a0
xorps xmm2, xmm2
mov byte [rbp + 0x9d], 0
cvtss2sd xmm2, xmm0
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x370]
movq r8, xmm2
call fcn.140013680
movss xmm6, dword [0x1400586bc]
lea rax, [rbp + 0x370]
movaps xmm0, xmm9
mov qword [rsp + 0x30], rax
addss xmm0, xmm6
mov byte [rsp + 0x28], 0
movaps xmm1, xmm10
mov dword [rsp + 0x60], 0
addss xmm1, dword [0x1400586ec]
lea r9, [rsp + 0x60]
mov dword [rsp + 0x64], 0xcb
mov dword [rsp + 0x68], 0xff
cvttss2si ebx, xmm0
mov dword [rsp + 0x6c], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
cvttss2si edx, xmm1
mov r8d, ebx
movd ecx, xmm0
call fcn.140032140
xor ecx, ecx
mov dword [rbp + 0xa0], 0xe0adcf80
mov word [rbp + 0xa4], 0xf9
mov byte [rbp + 0xa6], 1
lea eax, [rcx - 0x5b]
xor byte [rbp + rcx + 0xa0], al
inc rcx
cmp rcx, 5
jb 0x14003e963
mov r8d, dword [rbp + 0xe4]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x310]
mov byte [rbp + 0xa6], 0
call fcn.140044800
movaps xmm0, xmm9
lea rax, [rbp + 0x310]
subss xmm0, xmm6
mov qword [rsp + 0x30], rax
movaps xmm1, xmm10
mov byte [rsp + 0x28], 0
addss xmm1, dword [0x140058728]
lea r9, [rsp + 0x60]
mov byte [rsp + 0x20], 0
cvttss2si r8d, xmm0
movaps xmm0, xmm7
cvttss2si edx, xmm1
movd ecx, xmm0
call fcn.140032140
xor eax, eax
mov dword [rbp + 0x100], 0xd2cad280
mov ecx, eax
mov dword [rbp + 0x104], 0xd2d4
mov byte [rbp + 0x108], 1
mov edx, 0x2d5b
nop
movzx eax, cx
sub ax, dx
xor word [rbp + rcx*2 + 0x100], ax
inc rcx
cmp rcx, 3
jb 0x14003ea00
lea r9, [rbp + 0x390]
mov byte [rbp + 0x108], 0
lea r8, [rbp + 0x100]
mov edx, 0x20
lea rcx, [rbp + 0x3d0]
call fcn.14002c270
movaps xmm0, xmm10
mov dword [rbp - 0x80], 0xc9
addss xmm0, dword [0x140058710]
lea rax, [rbp + 0x3d0]
mov dword [rbp - 0x7c], 0x10
mov qword [rsp + 0x30], rax
lea r9, [rbp - 0x80]
mov byte [rsp + 0x28], 0
mov r8d, ebx
mov dword [rbp - 0x78], 0x10
cvttss2si edx, xmm0
mov dword [rbp - 0x74], 0xff
mov byte [rsp + 0x20], 0
movaps xmm0, xmm7
movd ecx, xmm0
call fcn.140032960
movss xmm2, dword [0x140058670]
lea rcx, [rsp + 0x70]
movss xmm0, dword [0x140058584]
movaps xmm7, xmm10
addss xmm9, dword [0x14005870c]
addss xmm7, dword [0x140058738]
movss dword [rsp + 0x70], xmm0
movaps xmm1, xmm10
movss dword [rsp + 0x74], xmm0
addss xmm1, xmm2
movss dword [rsp + 0x78], xmm0
movaps xmm6, xmm9
movss dword [rsp + 0x7c], xmm2
addss xmm6, dword [0x1400586c8]
movaps xmm0, xmm7
subss xmm0, xmm2
movss dword [rbp + 0x1b0], xmm1
movss dword [rbp + 0x1b8], xmm0
movaps xmm0, xmm6
subss xmm0, xmm2
movss dword [rbp + 0x1bc], xmm0
movaps xmm0, xmm9
addss xmm0, xmm2
movss dword [rbp + 0x1b4], xmm0
call fcn.140002df0
movss xmm0, dword [0x140058670]
lea r8, [rbp + 0x1b8]
mov rcx, qword [0x140148590]
lea rdx, [rbp + 0x1b0]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], 0xf
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001d590
movss xmm0, dword [0x140058584]
lea rcx, [rsp + 0x40]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm0
movss dword [rsp + 0x48], xmm0
movss xmm0, dword [0x140058670]
movss dword [rsp + 0x4c], xmm0
movss dword [rbp + 0x1a8], xmm7
movss dword [rbp + 0x1ac], xmm6
movss dword [rbp + 0x1a0], xmm10
movss dword [rbp + 0x1a4], xmm9
call fcn.140002df0
movss xmm0, dword [0x140058670]
lea r8, [rbp + 0x1a8]
mov rcx, qword [0x140148590]
lea rdx, [rbp + 0x1a0]
movss dword [rsp + 0x30], xmm0
mov r9d, eax
mov dword [rsp + 0x28], 0xf
add rcx, 0x1cc8
movss dword [rsp + 0x20], xmm15
call fcn.14001d590
lea rdx, [0x1401475f0]
cmp esi, 0x32
lea rax, [0x140147610]
mov ecx, edi
cmovge rdx, rax
lea r9, [0x1401475d0]
cmp esi, 0x14
mov eax, esi
cmovge r9, rdx
cdq
sub eax, edx
mov qword [rsp + 0x20], r9
sar eax, 1
mov r9d, 6
cvttss2si edx, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x140058690]
cvttss2si r8d, xmm0
call fcn.1400347d0
movss xmm7, dword [0x1400586f8]
movss xmm9, dword [0x140058768]
movss xmm10, dword [0x140058670]
xor ebx, ebx
cmp byte [0x140148752], bl
je 0x14003ed35
mov dword [rbp + 0x110], 0xd2cad280
mov ecx, ebx
mov dword [rbp + 0x114], 0xd2d4
mov edx, 0x2d5b
mov byte [rbp + 0x118], 1
nop dword [rax + rax]
movzx eax, cx
sub ax, dx
xor word [rbp + rcx*2 + 0x110], ax
inc rcx
cmp rcx, 3
jb 0x14003eca0
lea r9, [rbp + 0x390]
mov byte [rbp + 0x118], bl
lea r8, [rbp + 0x110]
mov edx, 0x20
lea rcx, [rbp + 0x410]
call fcn.14002c270
movups xmm0, xmmword [0x140147a40]
lea rcx, [rbp + 0xd0]
movups xmmword [rbp + 0xd0], xmm0
call fcn.140002df0
subss xmm8, dword [0x140058700]
subss xmm11, dword [0x14005870c]
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x410]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
cvttss2si r8d, xmm8
mov byte [rsp + 0x28], bl
mov byte [rsp + 0x20], bl
cvttss2si edx, xmm11
call fcn.1400338d0
cmp byte [0x1401487b0], 0
je 0x14003edd9
mov dword [rbp + 0xb4], 0xe087cf80
mov rcx, rbx
mov word [rbp + 0xb8], 0xf9
mov byte [rbp + 0xba], 1
nop
lea eax, [rcx - 0x5b]
xor byte [rbp + rcx + 0xb4], al
inc rcx
cmp rcx, 5
jb 0x14003ed60
mov r8d, dword [rbp + 0xe4]
lea rdx, [rbp + 0xb4]
lea rcx, [rbp + 0x330]
mov byte [rbp + 0xba], 0
call fcn.140044800
movups xmm0, xmmword [str.L7_t_]
lea rcx, [rbp + 0xd0]
movups xmmword [rbp + 0xd0], xmm0
call fcn.140002df0
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x330]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov r8d, r14d
mov byte [rsp + 0x28], 0
mov edx, r12d
mov byte [rsp + 0x20], 0
call fcn.140033150
cmp byte [0x14014878d], 0
je 0x14003eef9
movss xmm0, dword [rbp + 0x140]
movss xmm1, dword [rbp + 0x138]
subss xmm0, xmm14
movss xmm2, dword [rbp + 0x13c]
subss xmm1, xmm12
subss xmm2, xmm13
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14003ee32
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14003ee3a
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov dword [rbp + 0xc0], 0x869783fe
mov rcx, rbx
mov dword [rbp + 0xc4], 0xf6cc99
mov byte [rbp + 0xc8], 1
nop dword [rax + rax]
lea eax, [rcx - 0x5b]
xor byte [rbp + rcx + 0xc0], al
inc rcx
cmp rcx, 7
jb 0x14003ee60
xorps xmm2, xmm2
mov byte [rbp + 0xc8], 0
cvtss2sd xmm2, xmm0
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x350]
movq r8, xmm2
call fcn.140013680
cmp byte [0x1401487b0], 0
movd xmm6, r14d
cvtdq2ps xmm6, xmm6
je 0x14003eeb2
addss xmm6, dword [0x1400586fc]
movups xmm0, xmmword [0x140147a70]
lea rcx, [rbp + 0xd0]
movups xmmword [rbp + 0xd0], xmm0
call fcn.140002df0
mov r9d, eax
movaps xmm0, xmm7
lea rax, [rbp + 0x350]
movd ecx, xmm0
mov qword [rsp + 0x30], rax
mov edx, r12d
cvttss2si r8d, xmm6
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x20], 0
call fcn.140033150
cmp byte [0x1401485ae], 0
movss xmm11, dword [0x14005876c]
je 0x14003f0a5
movaps xmm2, xmm11
mov ecx, r15d
call fcn.140039ed0
xor r12d, r12d
test al, al
jne 0x14003f9e4
mov ecx, dword [0x140148848]
mov r8d, r12d
mov qword [rbp + 0x1dc], r8
mov dword [rbp + 0x1d8], r12d
test ecx, ecx
je 0x14003f03e
sub ecx, 1
je 0x14003ef87
cmp ecx, 1
jne 0x14003ef8d
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000001
jge 0x14003ef74
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
mov r8d, 2
mov esi, 5
cmove r8d, esi
jmp 0x14003ef92
mov r8d, 2
mov esi, 5
mov edx, r15d
lea rcx, [rbp + 0x2e8]
call fcn.1400399d0
mov r9d, dword [0x1401487a4]
lea rdx, [rbp + 0x1d8]
mov r8d, dword [0x1401485a8]
lea rcx, [rbp + 0x270]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp + 0x270], xmm0
mov dword [rbp + 0x278], eax
call fcn.140039720
test al, al
je 0x14003f9c7
movss xmm6, dword [rbp + 0x1d8]
movss xmm7, dword [rbp + 0x1dc]
mov eax, dword [0x1401485a8]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
mov eax, dword [0x1401487a4]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
subss xmm6, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm7, xmm0
movaps xmm0, xmm6
mulss xmm0, xmm6
movaps xmm1, xmm7
mulss xmm1, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14003f04b
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14003f053
mov esi, 5
mov r8d, esi
jmp 0x14003ef92
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [rbp + 0xe8]
comiss xmm1, xmm0
jbe 0x14003f9c7
movss xmm1, dword [0x140147bbc]
comiss xmm1, xmm0
mov r14d, dword [rbp + 0xa8]
jbe 0x14003fa01
mov cl, 1
movss dword [rbp + 0xb0], xmm6
movaps xmm8, xmm6
mov byte [rbp + 0x88], cl
movss dword [rbp + 0xe8], xmm0
movaps xmm6, xmm7
movss dword [rbp + 0xac], xmm7
jmp 0x14003f0cc
movss xmm6, dword [rbp + 0xac]
xor r12d, r12d
movss xmm8, dword [rbp + 0xb0]
mov r14d, dword [rbp + 0xa8]
mov esi, 5
movzx ecx, byte [rbp + 0x88]
movss xmm7, dword [0x1400586f8]
inc r14d
mov dword [rbp + 0xa8], r14d
cmp r14d, 0xf
jle 0x14003dc10
movss xmm11, dword [0x1400586ec]
movaps xmm14, xmmword [rsp + 0x570]
movaps xmm13, xmmword [rsp + 0x580]
movaps xmm12, xmmword [rsp + 0x590]
mov r15, qword [rsp + 0x600]
mov r14, qword [rsp + 0x608]
mov r13, qword [rsp + 0x610]
cmp byte [0x1401485ae], 0
je 0x14003f1cf
test cl, cl
je 0x14003f1cf
movzx eax, byte [0x1401487b1]
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x44], 2
mov dword [rsp + 0x48], 0x10
mov dword [rsp + 0x4c], 0x14
mov dword [rsp + 0x50], 9
mov dword [rsp + 0x54], 0x12
mov dword [rsp + 0x58], 0x11
cmp al, 1
je 0x14003f198
test al, al
jne 0x14003f1cf
movsxd rax, dword [0x140147c80]
mov ecx, dword [rsp + rax*4 + 0x40]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x14003f1cf
divss xmm8, dword [0x140147c84]
divss xmm6, dword [0x140147c84]
ucomiss xmm8, xmm15
jp 0x14003f1b5
je 0x14003fcfc
ucomiss xmm6, xmm15
jp 0x14003f1c1
je 0x14003fcfc
cvttss2si edx, xmm6
cvttss2si ecx, xmm8
call fcn.140034c90
cmp byte [0x14014858a], 0
movss xmm10, dword [0x140058610]
je 0x14003f3ee
mov rax, qword [0x140148590]
lea rcx, [rsp + 0x40]
movups xmm0, xmmword [0x140147a50]
movss xmm8, dword [rax + 0x10]
lea rdi, [rax + 0x1cc8]
movss xmm9, dword [rax + 0x14]
mulss xmm8, xmm10
mulss xmm9, xmm10
movups xmmword [rsp + 0x40], xmm0
call fcn.140002df0
movss xmm1, dword [0x140058578]
xorps xmm0, xmm0
movzx ecx, al
mov r8d, eax
shr r8d, 0x18
movss dword [rbp + 0xa4], xmm9
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
movss dword [rbp + 0x9c], xmm9
mulss xmm0, xmm1
movss dword [rsp + 0x40], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 0x10
movzx eax, cl
lea rcx, [rsp + 0x40]
mulss xmm0, xmm1
movss dword [rsp + 0x44], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov eax, r8d
mulss xmm0, xmm1
movss dword [rsp + 0x48], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm1
movaps xmm1, xmm8
subss xmm1, xmm11
movss dword [rsp + 0x4c], xmm0
movaps xmm0, xmm8
addss xmm0, xmm11
movss dword [rbp + 0xa0], xmm1
movss dword [rbp + 0x98], xmm0
call fcn.140002df0
movss xmm7, dword [0x1400585cc]
lea rdx, [rbp + 0xa0]
mov r9d, eax
movss dword [rsp + 0x20], xmm7
lea r8, [rbp + 0x98]
mov rcx, rdi
mov ebx, eax
call fcn.14001d410
movaps xmm0, xmm9
movss dword [rbp + 0xa0], xmm8
movaps xmm1, xmm9
movss dword [rbp + 0x98], xmm8
subss xmm0, xmm11
movss dword [rsp + 0x20], xmm7
addss xmm1, xmm11
mov r9d, ebx
lea r8, [rbp + 0x98]
mov rcx, rdi
lea rdx, [rbp + 0xa0]
movss dword [rbp + 0xa4], xmm0
movss dword [rbp + 0x9c], xmm1
call fcn.14001d410
movss xmm6, dword [0x140058684]
lea r8, [rbp + 0x98]
movaps xmm0, xmm8
movss dword [rbp + 0xa4], xmm9
subss xmm0, xmm6
movss dword [rbp + 0x9c], xmm9
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
movss dword [rbp + 0xa0], xmm0
movaps xmm0, xmm8
addss xmm0, xmm6
movss dword [rbp + 0x98], xmm0
lea rdx, [rbp + 0xa0]
mov rcx, rdi
call fcn.14001d410
movaps xmm0, xmm9
movss dword [rbp + 0xa0], xmm8
subss xmm0, xmm6
movss dword [rbp + 0x98], xmm8
addss xmm9, xmm6
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xa0]
mov rcx, rdi
movss dword [rbp + 0xa4], xmm0
movss dword [rbp + 0x9c], xmm9
call fcn.14001d410
cmp byte [0x1401485c6], 0
je 0x14003f516
movups xmm0, xmmword [0x140062050]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
call fcn.140002df0
movss xmm2, dword [0x140147bbc]
mov esi, eax
mov eax, dword [0x1401485a8]
movaps xmm0, xmm2
mov rdi, qword [0x140148590]
cdq
sub eax, edx
mulss xmm0, xmm10
sar eax, 1
add rdi, 0x1cc8
cvttss2si ecx, xmm0
movd xmm0, eax
mov eax, dword [0x1401487a4]
cvtdq2ps xmm0, xmm0
cdq
sub eax, edx
sar eax, 1
movss dword [rbp + 0x98], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x9c], xmm0
test esi, 0xff000000
je 0x14003f516
movss xmm6, dword [0x140058670]
lea rdx, [rbp + 0x98]
cvttss2si eax, xmm2
mov dword [rsp + 0x28], ecx
movd xmm0, ecx
movaps xmm3, xmm15
cvtdq2ps xmm0, xmm0
mov rcx, rdi
movd xmm2, eax
movaps xmm1, xmm0
subss xmm1, xmm6
cvtdq2ps xmm2, xmm2
mulss xmm1, dword [0x1400586cc]
subss xmm2, xmm10
divss xmm1, xmm0
movss dword [rsp + 0x20], xmm1
call fcn.14001ced0
mov r8d, dword [rdi + 0x80]
mov r9d, esi
mov rdx, qword [rdi + 0x88]
mov rcx, rdi
movss dword [rsp + 0x28], xmm6
mov byte [rsp + 0x20], 1
call fcn.14001b7c0
mov ecx, dword [rdi + 0x84]
test ecx, ecx
jns 0x14003f50f
mov eax, ecx
cdq
sub eax, edx
mov edx, r12d
sar eax, 1
add eax, ecx
lea rcx, [rdi + 0x80]
test eax, eax
cmovg edx, eax
call fcn.140012c50
mov dword [rdi + 0x80], r12d
cmp byte [0x140148751], 0
je 0x14003f64e
cmp dword [rbp + 0xec], 0
jne 0x14003f65b
mov rdx, qword [0x140148598]
add rdx, 0xff3cb0
cmp rdx, 0xffffffffffffffff
je 0x14003f571
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0xd0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xf8]
mov qword [rbp + 0xd0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140148598]
add rdx, 0xff3c3c
cmp rdx, 0xffffffffffffffff
je 0x14003f5b2
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x220]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x134]
mov qword [rbp + 0x220], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp + 0xf8]
mov rdx, qword [0x140148598]
sub ebx, dword [rbp + 0x134]
add rdx, 0xff3c38
cmp rdx, 0xffffffffffffffff
je 0x14003f5ff
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x1f0]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x130]
mov qword [rbp + 0x1f0], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x130]
add edi, ebx
mov ebx, r12d
nop word [rax + rax]
test edi, edi
je 0x14003f647
mov rcx, qword [0x1401485a0]
lea edx, [rdi + 0xc]
lea rax, [rbp + 0x250]
mov dword [rbp + 0x128], r12d
lea edx, [rdx + rbx*4]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x128]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
inc ebx
cmp ebx, 0xa
jl 0x14003f610
cmp dword [rbp + 0xec], 0
je 0x14003fcfc
mov edx, dword [rbp + 0xec]
lea rax, [rbp + 0x230]
mov rcx, qword [0x1401485a0]
lea r8, [rbp + 0x120]
add edx, 0xb88
mov qword [rbp + 0x230], r12
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x120]
test eax, eax
je 0x14003f79f
mov rcx, qword [0x1401485a0]
lea r8, [rbp + 0xb0]
mov edx, eax
mov qword [rbp + 0x218], r12
lea rax, [rbp + 0x218]
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xb0]
test eax, eax
je 0x14003f79f
cmp byte [0x140148753], 0
je 0x14003f721
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x160]
lea rax, [rbp + 0x1d8]
mov dword [rbp + 0x240], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x240]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0xb0]
cmp byte [0x1401485b9], 0
je 0x14003f763
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x188]
lea rax, [rbp + 0x188]
mov dword [rbp + 0x238], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x238]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0xb0]
cmp byte [0x1401485cf], 0
je 0x14003f79f
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x120]
lea rax, [rbp + 0x158]
mov dword [rbp + 0x1a0], r12d
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edx, dword [0x1400576a8]
mov rax, qword [0x140148598]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003f7e9
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x210]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xac]
mov qword [rbp + 0x210], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140148598]
mov edx, dword [0x1400576b0]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003f82c
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x150]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1a8]
mov qword [rbp + 0x150], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [0x140148598]
mov edx, dword [0x1400576ac]
add rdx, rax
cmp rdx, 0xffffffffffffffff
je 0x14003f868
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x200]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0xe8]
mov qword [rbp + 0x200], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0xac]
lea rax, [rbp + 0x2e8]
sub ecx, dword [rbp + 0x1a8]
lea r8, [rbp + 0x90]
mov edx, dword [rbp + 0xe8]
mov r9d, 4
add edx, 0x28540
mov dword [rbp + 0xac], ecx
add edx, ecx
mov qword [rbp + 0x2e8], r12
mov rcx, qword [0x1401485a0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
imul edx, dword [rbp + 0x90], 0x17c
lea rax, [rbp + 0x2b0]
mov ebx, dword [rbp + 0xe8]
lea r8, [rbp + 0xb4]
add ebx, dword [rbp + 0xac]
mov r9d, 4
mov rcx, qword [0x1401485a0]
mov qword [rbp + 0x2b0], r12
add edx, 0x58
mov qword [rsp + 0x20], rax
add edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
imul edx, dword [rbp + 0x90], 0x17c
lea rax, [rbp + 0x270]
mov rcx, qword [0x1401485a0]
lea r8, [rbp + 0xa0]
mov r9d, 4
mov qword [rbp + 0x270], r12
mov qword [rsp + 0x20], rax
add edx, 0x6c
add edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
imul edx, dword [rbp + 0x90], 0x17c
lea rax, [rbp + 0x280]
mov rcx, qword [0x1401485a0]
lea r8, [rbp + 0x98]
mov r9d, 4
mov qword [rbp + 0x280], r12
mov qword [rsp + 0x20], rax
add edx, 0xd0
add edx, ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x90]
cmp eax, 0x11
jg 0x14003fc69
cmp byte [0x14014878c], 0
je 0x14003fac9
mov ecx, dword [0x140147574]
test ecx, ecx
jne 0x14003fa17
lea eax, [rax + rax*8]
mov dword [rbp + 0x1b0], 0x3e99999a
lea eax, [rax + 0xa09c]
lea edx, [rbx + rax*4]
lea rax, [rbp + 0x168]
lea r8, [rbp + 0x1b0]
jmp 0x14003faa2
movss xmm6, dword [rbp + 0xac]
movss xmm8, dword [rbp + 0xb0]
mov r14d, dword [rbp + 0xa8]
jmp 0x14003f0c5
movss xmm6, dword [rbp + 0xac]
movss xmm8, dword [rbp + 0xb0]
mov r14d, dword [rbp + 0xa8]
jmp 0x14003f0c0
movss xmm6, dword [rbp + 0xac]
movss xmm8, dword [rbp + 0xb0]
jmp 0x14003f0c5
cmp ecx, 1
jne 0x14003fa48
movss xmm0, dword [0x1400585f8]
lea eax, [rax + rax*8]
lea eax, [rax + 0xa09c]
movss dword [rbp + 0x1b8], xmm0
lea edx, [rbx + rax*4]
lea rax, [rbp + 0x178]
lea r8, [rbp + 0x1b8]
jmp 0x14003faa2
cmp ecx, 2
jne 0x14003fa73
lea eax, [rax + rax*8]
mov dword [rbp + 0x1c0], 0x3f000000
lea eax, [rax + 0xa09c]
lea edx, [rbx + rax*4]
lea rax, [rbp + 0x138]
lea r8, [rbp + 0x1c0]
jmp 0x14003faa2
cmp ecx, 3
jne 0x14003fac0
movss xmm0, dword [0x14005862c]
lea eax, [rax + rax*8]
lea eax, [rax + 0xa09c]
movss dword [rbp + 0x198], xmm0
lea edx, [rbx + rax*4]
lea rax, [rbp + 0x110]
lea r8, [rbp + 0x198]
mov rcx, qword [0x1401485a0]
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0x90]
mov byte [0x14014879a], 1
jmp 0x14003fb1b
cmp byte [0x14014879a], 1
jne 0x14003fb1b
mov rcx, qword [0x1401485a0]
lea eax, [rax + rax*8]
lea eax, [rax + 0xa09c]
mov dword [rbp + 0x1d0], 0
lea edx, [rbx + rax*4]
mov r9d, 4
lea rax, [rbp + 0x100]
lea r8, [rbp + 0x1d0]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbp + 0x90]
mov byte [0x14014879a], 0
cmp byte [0x14014858b], 0
je 0x14003fc54
mov rcx, qword [0x1401485a0]
lea edx, [rbx + 0x90]
imul eax, eax, 0x23a0
lea r8, [rbp + 0xe4]
mov r9d, 4
mov dword [rbp + 0xe4], r12d
mov qword [rsp + 0x20], r12
add edx, eax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0xe4], 1
ja 0x14003fc4b
mov rdx, qword [0x140148598]
add rdx, 0xffd830
cmp rdx, 0xffffffffffffffff
je 0x14003fc4b
mov rcx, qword [0x1401485a0]
lea r8, [rbp + 0xe0]
mov r9d, 4
mov dword [rbp + 0xe0], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xe0]
test eax, eax
je 0x14003fc4b
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x30]
mov r9d, 4
mov dword [rbp + 0xa8], r12d
lea r8, [rbp + 0xa8]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xa8]
test eax, eax
je 0x14003fc4b
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x30]
mov r9d, 4
mov dword [rbp + 0xf0], r12d
lea r8, [rbp + 0xf0]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xf0]
test eax, eax
je 0x14003fc4b
mov rcx, qword [0x1401485a0]
lea edx, [rax + 0x77]
lea rax, [rbp + 0xc0]
mov byte [rbp + 0x88], 0x42
mov r9d, 1
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401485b8], 1
jmp 0x14003fc69
movzx eax, byte [0x1401485b8]
cmp al, 1
mov ecx, eax
cmove ecx, r12d
mov byte [0x1401485b8], cl
cmp byte [0x1401485bb], 0
je 0x14003fcfc
mov rdx, qword [0x140148598]
add rdx, 0xff3bdc
cmp rdx, 0xffffffffffffffff
je 0x14003fcb7
mov rcx, qword [0x1401485a0]
lea rax, [rbp + 0x260]
mov r9d, 4
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x1c8]
mov qword [rbp + 0x260], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, 0x79
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003fcfc
mov edx, dword [rbp + 0x1c8]
lea rax, [rbp + 0xc0]
mov rcx, qword [0x1401485a0]
lea r8, [rbp + 0x88]
add edx, 0x3c
mov byte [rbp + 0x88], 4
mov r9d, 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm10, xmmword [rsp + 0x5b0]
movaps xmm9, xmmword [rsp + 0x5c0]
movaps xmm7, xmmword [rsp + 0x5e0]
mov rdi, qword [rsp + 0x640]
mov rsi, qword [rsp + 0x638]
mov rbx, qword [rsp + 0x630]
mov rcx, qword [rbp + 0x450]
xor rcx, rsp
call fcn.140045d20
lea r11, [rsp + 0x618]
movaps xmm6, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x48]
movaps xmm11, xmmword [r11 - 0x78]
movaps xmm15, xmmword [r11 - 0xb8]
mov rsp, r11
pop r12
pop rbp
ret