Function at 0x140045820
Capabilities:
Get graphical window text
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1710]
mov eax, 0x1810
call fcn.14004e140
sub rsp, rax
movaps xmmword [rsp + 0x1800], xmm6
movaps xmmword [rsp + 0x17f0], xmm7
movaps xmmword [rsp + 0x17e0], xmm8
movaps xmmword [rsp + 0x17d0], xmm9
movaps xmmword [rsp + 0x17c0], xmm10
movaps xmmword [rsp + 0x17b0], xmm11
movaps xmmword [rsp + 0x17a0], xmm12
movaps xmmword [rsp + 0x1790], xmm13
movaps xmmword [rsp + 0x1780], xmm14
movaps xmmword [rsp + 0x1770], xmm15
mov rax, qword [0x140061040]
xor rax, rsp
mov qword [rbp + 0x1668], rax
mov r15d, r9d
mov r14, rcx
xor r13d, r13d
mov qword [rbp + 0x13e0], r13
lea ecx, [r13 + 0x20]
call fcn.14004d634
mov rbx, rax
mov qword [rbp + 0x13d8], rax
mov qword [rbp + 0x13e8], 0x11
mov qword [rbp + 0x13f0], 0x1f
movups xmm0, xmmword [str.CS2_Cheat_Log.txt]
movups xmmword [rax], xmm0
movzx eax, byte [0x1400578c0]
mov byte [rbx + 0x10], al
mov byte [rbx + 0x11], r13b
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1400]
call sub.VCRUNTIME140.dll_memset
mov rdx, rbx
lea rcx, [rbp + 0x1400]
call fcn.1400498e0
mov rax, qword [rbp + 0x1400]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1400], rax
mov rax, qword [rbp + 0x1400]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x13fc], edx
xorps xmm0, xmm0
xor eax, eax
mov qword [rbp + 0x1658], rax
movaps xmmword [rbp + 0x1160], xmm0
movsd xmm0, qword [rbp + 0x1658]
movsd qword [rbp + 0x1170], xmm0
lea rdx, [rbp + 0x1160]
lea rcx, [rbp + 0x1400]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::seekp_class_std::fpos_struct__Mbstatet_____ptr64]
lea rdx, str._Tip_:_After_running_this_program__please_make_sure_to_read_the_software_usage_instructions._If_it_doesnt_work__please_copy_this_log_file_record_to_the_GitHub_repository_and_submit_an_issue__or_directly_contact_the_author_via_WeChat_at_yl1099129793._The_author_has_limited_capacity_and_cannot_synchronously_update_CS2_game_patch._If_urgently_needed__you_can_fork_this_repository_and_modify_offsets_to_build_with_the_latest_value.
lea rcx, [rbp + 0x1400]
call fcn.140049dc0
lea rdx, [0x140049f90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov qword [rbp + 0x1180], r13
mov edi, r13d
mov qword [rbp + 0x1188], r13
mov dword [rbp + 0x1510], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x1510]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x140045a59
lea rsi, str.cs2.exe
mov rcx, r13
lea rdx, [rbp + 0x153c]
nop dword [rax]
movzx eax, byte [rsi + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140045c30
cmp rcx, 8
jne 0x140045a00
mov esi, dword [rbp + 0x1518]
mov dword [rbp + 0x1180], esi
mov ecx, esi
call fcn.14004cc10
mov rdi, rax
mov qword [rbp + 0x1188], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x140045a59
mov r8d, esi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
mov qword [rbp + 0x1188], rax
test rbx, rbx
je 0x140045a67
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rdi, rdi
jne 0x140045daa
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x1140], rdx
lea rcx, [rbp + 0x1140]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov rbx, rax
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x1280]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140057c50]
mov qword [rbp + 0x1280], rax
lea rax, [0x140057b88]
mov qword [rbp + 0x1290], rax
lea rcx, [rbp + 0x1318]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r8d, r8d
lea rdx, [rbp + 0x1298]
lea rcx, [rbp + 0x1280]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rbp + 0x1280]
movsxd rcx, dword [rax + 4]
lea rsi, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x1280], rsi
mov rax, qword [rbp + 0x1280]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x127c], edx
lea rcx, [rbp + 0x1298]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + 0x1298], rax
mov qword [rbp + 0x1300], r13
mov dword [rbp + 0x1308], r13d
mov qword [rbp + 0x1160], rbx
lea rax, str._Y__m__d__H:_M:_S
mov qword [rbp + 0x1168], rax
mov qword [rbp + 0x1170], rax
nop dword [rax]
inc rax
cmp byte [rax], r13b
jne 0x140045b80
mov qword [rbp + 0x1170], rax
lea rdx, [rbp + 0x1160]
lea rcx, [rbp + 0x1290]
call fcn.140049fd0
lea rdx, [0x140056e64]
lea rcx, [rbp + 0x1400]
call fcn.140049dc0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1648], xmm0
mov qword [rbp + 0x1658], r13
mov qword [rbp + 0x1660], 0xf
mov byte [rbp + 0x1648], r13b
xor eax, eax
movups xmmword [rbp + 0x1160], xmm0
mov qword [rbp + 0x1170], rax
mov rdx, r13
mov r8d, dword [rbp + 0x1308]
mov ecx, r8d
and cl, 0x22
cmp cl, 2
je 0x140045c4d
mov rax, qword [rbp + 0x12d8]
mov rbx, qword [rax]
test rbx, rbx
je 0x140045c4d
mov rax, qword [rbp + 0x12b8]
mov r9, qword [rax]
cmp rbx, qword [rbp + 0x1300]
cmovb rbx, qword [rbp + 0x1300]
sub rbx, r9
mov rdx, r9
jmp 0x140045c8b
lea rdx, [rbp + 0x1510]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x1400459f2
jmp 0x140045a59
test r8b, 4
jne 0x140045cc1
mov rax, qword [rbp + 0x12d0]
mov rcx, qword [rax]
mov rbx, r13
test rcx, rcx
je 0x140045c84
mov rax, qword [rbp + 0x12b0]
mov r9, qword [rax]
mov rax, qword [rbp + 0x12e8]
movsxd rbx, dword [rax]
add rbx, rcx
sub rbx, r9
mov rdx, r9
jmp 0x140045c8b
mov r9, qword [rbp + 0x1160]
test rdx, rdx
je 0x140045cc1
lea rcx, [rbp + 0x1648]
cmp rbx, 0xf
ja 0x140045cb9
mov qword [rbp + 0x1658], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx + 0x1648], r13b
jmp 0x140045cc1
mov rdx, rbx
call fcn.14004a780
lea rdx, [rbp + 0x1648]
cmp qword [rbp + 0x1660], 0xf
cmova rdx, qword [rbp + 0x1648]
mov r8, qword [rbp + 0x1658]
mov rcx, rdi
call fcn.14004a9c0
lea rdx, [0x140056e60]
mov rcx, rax
call fcn.140049dc0
mov rcx, rax
lea rdx, str.Please_run_this_cs2_cheat_app_after_enter_cs2_game_
call fcn.140049dc0
lea rdx, [0x140049f90]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdx, qword [rbp + 0x1660]
cmp rdx, 0xf
jbe 0x140045d59
inc rdx
mov rcx, qword [rbp + 0x1648]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140045d54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140045d54
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d2cc
mov rax, qword [rbp + 0x1280]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1280], rsi
mov rax, qword [rbp + 0x1280]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx + 0x127c], edx
lea rcx, [rbp + 0x1298]
call fcn.1400492d0
lea rcx, [rbp + 0x12a0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x1318]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rdx, str.client.dll
lea rcx, [rbp + 0x1180]
call fcn.14004d040
mov r12, rax
mov qword [rsp + 0x68], rax
lea rdx, str.server.dll
lea rcx, [rbp + 0x1180]
call fcn.14004d040
mov dword [0x1400643a0], 0x50
mov dword [0x1400643a4], 3
lea rax, [0x140043c50]
mov qword [0x1400643a8], rax
mov qword [0x1400643b8], r14
lea rbx, str.cs2yinlei
mov qword [0x1400643e0], rbx
lea rcx, [0x1400643a0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], r13
mov rax, qword [0x1400643b8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov eax, dword [0x140061bac]
mov dword [rsp + 0x38], eax
mov eax, dword [0x140061ba8]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
mov r9d, 0x80000000
mov r8, rbx
mov rdx, qword [0x1400643e0]
mov ecx, 0x80028
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x1400643f0], rax
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x11b0], xmm0
lea rdx, [rbp + 0x11b0]
mov rcx, qword [0x1400643f0]
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1270], xmm0
lea rdx, [rbp + 0x1270]
mov rcx, qword [0x1400643f0]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x50], r13
lea rdx, [rbp + 0x50]
mov rcx, qword [0x1400643f0]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x50]
mov dword [rbp + 0x1230], eax
mov eax, dword [rbp + 0x54]
mov dword [rbp + 0x1234], eax
mov eax, dword [rbp + 0x11b8]
mov dword [rbp + 0x1238], eax
mov eax, dword [rbp + 0x11bc]
mov dword [rbp + 0x123c], eax
lea rdx, [rbp + 0x1230]
mov rcx, qword [0x1400643f0]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, r15d
mov rcx, qword [0x1400643f0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x1400643f0]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
mov qword [0x140064320], r13
mov qword [0x140064334], r13
mov qword [0x14006433c], 1
mov qword [0x140064348], 2
mov qword [0x140064360], 2
mov dword [0x140064328], 0x3c
mov dword [0x14006432c], 1
mov dword [0x140064330], 0x1c
mov dword [0x140064344], 0x20
mov rax, qword [0x1400643f0]
mov qword [0x140064350], rax
mov qword [0x140064358], 1
mov dword [rbp + 0x1640], 0xb000
mov dword [rbp + 0x1644], 0xa000
lea rax, [0x140064380]
mov qword [rsp + 0x58], rax
lea rax, [0x140064378]
mov qword [rsp + 0x50], rax
lea rax, [0x140064390]
mov qword [rsp + 0x48], rax
lea rax, [0x140064370]
mov qword [rsp + 0x40], rax
lea rax, [0x140064320]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x1640]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov qword [rbp + 0x50], r13
mov rcx, qword [0x140064370]
mov rax, qword [rcx]
lea r9, [rbp + 0x50]
lea r8, [0x1400576c8]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp + 0x50]
test rdx, rdx
je 0x14004606f
mov rcx, qword [0x140064390]
mov rax, qword [rcx]
lea r9, [0x140064310]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x50]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
call fcn.140043cd0
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0x80], xmm0
movaps xmmword [rbp + 0x90], xmm0
movaps xmmword [rbp + 0xa0], xmm0
movaps xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rax
movups xmmword [rbp + 0x60], xmm0
movdqa xmm1, xmmword [0x140057f00]
movdqa xmmword [rbp + 0x70], xmm1
mov byte [rbp + 0x60], al
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], rax
movaps xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0xf0], xmm1
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], r13
movdqa xmmword [rbp + 0x110], xmm0
movdqu xmmword [rbp + 0x1128], xmm1
mov qword [rbp + 0x1138], r13
mov qword [rbp + 0x1140], 0x40
lea rdx, [rbp + 0x1140]
lea rcx, [rbp + 0x1128]
call fcn.14004a3f0
movabs r14, 0x2aaaaaaaaaaaaaab
mov rsi, qword [rbp + 0x1188]
movzx eax, byte [0x1400610dd]
test al, al
je 0x140047d93
movzx ebx, byte [rbp + 0x10f0]
movss xmm9, dword [0x140057d9c]
nop dword [rax]
mov rdi, qword [rbp + 0x1128]
mov r14, qword [rbp + 0x1130]
cmp rdi, r14
je 0x14004618c
mov rcx, rdi
call fcn.14004bdc0
add rdi, 0xc0
cmp rdi, r14
jne 0x140046163
mov rax, qword [rbp + 0x1128]
mov qword [rbp + 0x1130], rax
movzx eax, byte [0x1400610dd]
test al, al
je 0x140047d89
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400461b1
cmp byte [0x1400610dc], 0
sete byte [0x1400610dc]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1240]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14004621d
lea rcx, [rbp + 0x1240]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1240]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x1248], 0x12
jne 0x1400461fc
mov byte [0x1400610dd], 0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1240]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x1400461d2
mov rax, qword [0x140061b68]
xor r14d, r14d
test rax, rax
je 0x140046235
mov rcx, qword [rax + 0x98]
jmp 0x140046238
mov rcx, r14
cmp qword [rcx + 0x48], 0
jne 0x140046244
call fcn.14002ed10
call fcn.14002ff50
call fcn.140008750
nop
call fcn.140044260
lea rdx, [r12 + 0x17361e8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1640]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x1640]
mov qword [rbp + 0x80], rdi
lea rdx, [rdi + 0x127c]
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x78], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rsp + 0x70]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm10, dword [rsp + 0x70]
movss dword [rbp + 0xd8], xmm10
movss xmm12, dword [rsp + 0x74]
movss dword [rbp + 0xdc], xmm12
movss xmm13, dword [rsp + 0x78]
movss dword [rbp + 0xe0], xmm13
lea rdx, [rdi + 0xc58]
mov qword [rsp + 0x7c], 0
mov dword [rbp - 0x7c], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rsp + 0x7c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm14, dword [rsp + 0x7c]
movss dword [rbp - 0x3c], xmm14
movss dword [rbp + 0xe4], xmm14
movss xmm0, dword [rbp - 0x80]
movss dword [rbp + 0x1108], xmm0
movss dword [rbp + 0xe8], xmm0
movss xmm15, dword [rbp - 0x7c]
movss dword [rbp - 0x38], xmm15
movss dword [rbp + 0xec], xmm15
lea rdx, [rdi + 0x3cb]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1114]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x1114]
mov dword [rbp + 0x9c], r13d
lea rdx, [rdi + 0x15a4]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x114c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x114c]
mov dword [rbp + 0xb0], eax
lea rdx, [rdi + 0x3d4]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1118]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x1118]
mov dword [rbp + 0xa8], eax
lea rdx, [rdi + 0x14b8]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1154]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x1154]
movss dword [rbp + 0xa0], xmm0
lea rdx, [rdi + 0x3d8]
mov qword [rbp - 0x78], 0
mov dword [rbp - 0x70], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x78]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x78]
movss dword [rbp - 0x34], xmm0
movss dword [rbp + 0xfc], xmm0
movss xmm11, dword [rbp - 0x74]
movss dword [rbp - 0x14], xmm11
movss dword [rbp + 0x100], xmm11
movss xmm0, dword [rbp - 0x70]
movss dword [rbp - 0x30], xmm0
movss dword [rbp + 0x104], xmm0
lea rdx, [r12 + 0x18c1db8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x13b0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, qword [rbp + 0x13b0]
mov qword [rbp + 0x50], r12
mov rdi, qword [rsp + 0x68]
lea rdx, [rdi + 0x19231b0]
mov qword [rsp + 0x20], r14
mov r9d, 0x40
lea r8, [rbp + 0x11f0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0x191ec70]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x13b8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x13b8]
test rdx, rdx
je 0x140046543
add rdx, 0x9dd
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0x1101]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x1101], 0
je 0x140046532
mov byte [0x140064388], 1
jmp 0x140046543
mov dword [0x1400610d8], 0xffffffff
mov byte [0x140064388], 0
mov r15d, 1
mov dword [rsp + 0x60], r15d
nop
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, 0x100
lea rdx, [rbp + 0x120]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rdx, [0x140057d20]
lea rcx, [rbp + 0x120]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1400465a2
lea rdx, str.Counter
lea rcx, [rbp + 0x120]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140046cba
mov edx, r15d
and edx, 0x7fff
shl edx, 3
sar edx, 9
add rdx, 0x10
add rdx, r12
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x13c8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x13c8]
test rcx, rcx
je 0x140046cba
mov eax, r15d
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x13d0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x13d0]
test r14, r14
je 0x140046cb7
lea rdx, [r14 + 0x7e4]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x11e0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x11e0]
mov edx, edi
shr edx, 9
and edx, 0x3f
shl edx, 3
add rdx, 0x10
add rdx, r12
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x13a8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x13a8]
test rcx, rcx
je 0x140046cb7
and edi, 0x1ff
imul edx, edi, 0x78
add rdx, rcx
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x13a0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x13a0]
test rdi, rdi
je 0x140046cb7
cmp rdi, qword [rbp + 0x1640]
je 0x140046cb7
lea rdx, [r14 + 0x3cb]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x1148]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x1148], r13d
je 0x140046cb7
mov ecx, 0x80
call fcn.14004d634
mov qword [rbp + 0x1160], rax
lea rcx, [rax + 0x80]
mov qword [rbp + 0x1170], rcx
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
mov qword [rbp + 0x1168], rcx
lea rdx, [r14 + 0x638]
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x80
mov r8, qword [rbp + 0x1160]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1160]
lea rcx, [rbp + 0x1240]
call fcn.1400493f0
mov rcx, qword [rbp + 0x1160]
test rcx, rcx
je 0x1400467c4
mov rdx, qword [rbp + 0x1170]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400467bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047fee
call fcn.14004d2cc
lea rdx, [rdi + 0x334]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x11dc]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0x338]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x11d8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12d, dword [rbp + 0x11dc]
lea eax, [r12 - 1]
cmp eax, 0x63
ja 0x140046c72
cmp dword [rbp + 0x11d8], 0x100
jne 0x140046c72
lea rdx, [rdi + 0x1308]
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x13c0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x13c0]
add rdx, 0x12a2
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 2]
lea r8, [rbp + 0x1110]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x140064369], r15b
je 0x1400468a7
mov byte [rbp + 0x10f8], 1
lea rdx, [rdi + 0x16a0]
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 1]
lea r8, [rbp + 0x10f8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140064368], r15b
je 0x1400468dc
mov dword [rbp + 0x1120], 0x47a8c000
lea rdx, [rdi + 0x1440]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x1120]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0x12b0], xmm0
movaps xmmword [rbp + 0x12c0], xmm0
movaps xmmword [rbp + 0x12d0], xmm0
mov qword [rbp + 0x12e0], rax
movups xmmword [rbp + 0x1280], xmm0
mov qword [rbp + 0x1290], r15
mov qword [rbp + 0x1298], 0xf
mov byte [rbp + 0x1280], al
mov qword [rbp + 0x12e8], rax
mov qword [rbp + 0x12f0], r15
mov qword [rbp + 0x12f8], rax
movaps xmmword [rbp + 0x1300], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x1310], xmm1
mov qword [rbp + 0x1320], rax
mov qword [rbp + 0x1328], r15
movdqa xmmword [rbp + 0x1330], xmm0
mov qword [rbp + 0x12a0], rdi
mov qword [rbp + 0x12a8], r14
lea r9, [rbp + 0x1240]
mov r15, qword [rbp + 0x1240]
mov r13, qword [rbp + 0x1258]
cmp r13, 0xf
cmova r9, r15
mov r14, qword [rbp + 0x1250]
lea rcx, [rbp + 0x1280]
cmp r14, 0xf
ja 0x1400469b4
mov qword [rbp + 0x1290], r14
mov r8, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + r14 + 0x1280], 0
jmp 0x1400469ca
mov rdx, r14
call fcn.14004a780
mov r13, qword [rbp + 0x1258]
mov r15, qword [rbp + 0x1240]
mov dword [rbp + 0x12b8], r12d
mov dword [rbp + 0x12cc], 0x100
mov eax, dword [rbp + 0x1148]
mov dword [rbp + 0x12bc], eax
lea rdx, [rdi + 0x16a0]
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 1]
lea r8, [rbp + 0x1100]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0x1100]
mov byte [rbp + 0x12e0], al
mov qword [rbp - 0x6c], r14
mov dword [rbp - 0x64], r14d
lea rdx, [rdi + 0x127c]
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp - 0x6c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm8, dword [rbp - 0x6c]
movss dword [rbp + 0x12f8], xmm8
movss xmm6, dword [rbp - 0x68]
movss dword [rbp + 0x12fc], xmm6
movss xmm7, dword [rbp - 0x64]
movss dword [rbp + 0x1300], xmm7
mov qword [rbp - 0x20], r14
mov dword [rbp - 0x18], r14d
lea rdx, [rdi + 0xc58]
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp - 0x20]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x20]
movsd qword [rbp + 0x1304], xmm0
mov eax, dword [rbp - 0x18]
mov dword [rbp + 0x130c], eax
subss xmm7, xmm13
subss xmm6, xmm12
subss xmm8, xmm10
mulss xmm8, xmm8
mulss xmm6, xmm6
addss xmm8, xmm6
mulss xmm7, xmm7
addss xmm8, xmm7
xorps xmm0, xmm0
ucomiss xmm0, xmm8
ja 0x140046ad9
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x140046ae2
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss dword [rbp + 0x12c4], xmm0
movzx ecx, word [rbp + 0x1110]
mov word [rbp + 0x12d4], cx
call fcn.140045250
mov qword [rbp + 0x12d8], rax
lea rdx, [rdi + 0x318]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1380]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1380]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1388]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1388]
mov qword [rbp + 0x12f0], rax
lea rdx, [rax + 0xc0]
mov qword [rbp - 0x2c], r14
mov dword [rbp - 0x24], r14d
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x2c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x2c]
movsd qword [rbp + 0x12e4], xmm0
mov eax, dword [rbp - 0x24]
mov dword [rbp + 0x12ec], eax
mov rax, qword [rbp + 0x1130]
cmp rax, qword [rbp + 0x1138]
je 0x140046bc6
lea rdx, [rbp + 0x1280]
mov rcx, rax
call fcn.14004c2f0
add qword [rbp + 0x1130], 0xc0
jmp 0x140046bdc
lea r8, [rbp + 0x1280]
mov rdx, rax
lea rcx, [rbp + 0x1128]
call fcn.14004b010
lea rcx, [rbp + 0x1328]
call fcn.140049ae0
mov rdx, qword [rbp + 0x1298]
cmp rdx, 0xf
jbe 0x140046c29
inc rdx
mov rcx, qword [rbp + 0x1280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046c24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047ff5
call fcn.14004d2cc
cmp r13, 0xf
jbe 0x140046c60
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140046c58
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047ff5
mov rcx, r15
call fcn.14004d2cc
mov r15d, dword [rsp + 0x60]
mov r12, qword [rbp + 0x50]
mov r13d, dword [rbp + 0x1114]
jmp 0x140046cba
mov rdx, qword [rbp + 0x1258]
cmp rdx, 0xf
jbe 0x140046cb3
inc rdx
mov rcx, qword [rbp + 0x1240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046cae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047ff5
call fcn.14004d2cc
mov r12, qword [rbp + 0x50]
xor r14d, r14d
inc r15d
mov dword [rsp + 0x60], r15d
cmp r15d, 0x40
jl 0x140046550
mov r13, qword [rbp + 0x1130]
mov r15, qword [rbp + 0x1128]
cmp r15, r13
je 0x1400475d5
lea r14, [r15 + 0x80]
nop word [rax + rax]
movss xmm2, dword [r14 - 4]
movss xmm6, dword [r14 - 8]
movss xmm3, dword [r14]
movaps xmm4, xmm6
movss xmm8, dword [rbp + 0x1200]
mulss xmm4, xmm8
movaps xmm0, xmm2
movss xmm11, dword [rbp + 0x1204]
mulss xmm0, xmm11
addss xmm4, xmm0
movaps xmm1, xmm3
movss xmm12, dword [rbp + 0x1208]
mulss xmm1, xmm12
addss xmm4, xmm1
movss xmm13, dword [rbp + 0x120c]
addss xmm4, xmm13
movaps xmm1, xmm6
movss xmm14, dword [rbp + 0x1220]
mulss xmm1, xmm14
movss xmm15, dword [rbp + 0x1224]
mulss xmm2, xmm15
addss xmm1, xmm2
mulss xmm3, dword [rbp + 0x1228]
addss xmm1, xmm3
addss xmm1, dword [rbp + 0x122c]
movss xmm0, dword [0x140057d4c]
comiss xmm0, xmm1
ja 0x14004758c
movss xmm0, dword [0x140057dd0]
divss xmm0, xmm1
mov ecx, dword [0x140061bac]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm10, xmm10
cvtsi2ss xmm10, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, ecx
movss dword [rbp + 0x1120], xmm1
mulss xmm4, xmm0
mulss xmm4, xmm9
mulss xmm4, xmm1
addss xmm4, xmm9
movaps xmm9, xmm10
subss xmm9, xmm4
movss xmm2, dword [r14 - 0x18]
movss xmm5, dword [r14 - 0x1c]
movss xmm3, dword [r14 - 0x14]
movaps xmm7, xmm5
mulss xmm7, dword [rbp + 0x11f0]
movaps xmm0, xmm2
mulss xmm0, dword [rbp + 0x11f4]
addss xmm7, xmm0
movaps xmm1, xmm3
mulss xmm1, dword [rbp + 0x11f8]
addss xmm7, xmm1
addss xmm7, dword [rbp + 0x11fc]
movaps xmm4, xmm5
mulss xmm4, xmm8
movaps xmm0, xmm2
mulss xmm0, xmm11
addss xmm4, xmm0
movaps xmm1, xmm3
mulss xmm1, xmm12
addss xmm4, xmm1
addss xmm4, xmm13
mulss xmm5, xmm14
mulss xmm2, xmm15
addss xmm5, xmm2
mulss xmm3, dword [rbp + 0x1228]
addss xmm5, xmm3
addss xmm5, dword [rbp + 0x122c]
movss xmm0, dword [0x140057d4c]
comiss xmm0, xmm5
ja 0x140047583
movss xmm1, dword [0x140057dd0]
divss xmm1, xmm5
mulss xmm7, xmm1
movss xmm2, dword [0x140057d9c]
mulss xmm7, xmm2
mov eax, dword [0x140061ba8]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm7, xmm0
addss xmm7, xmm2
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm7, xmm0
mulss xmm4, xmm1
mulss xmm4, xmm2
mulss xmm4, dword [rbp + 0x1120]
addss xmm4, xmm2
subss xmm10, xmm4
ucomiss xmm6, dword [0x140057d38]
jp 0x140046ee2
je 0x140047583
subss xmm9, xmm10
movaps xmm11, xmm9
mulss xmm11, dword [0x140057d68]
movaps xmm1, xmm9
divss xmm1, dword [0x140057e10]
movaps xmm8, xmm1
mulss xmm8, xmm2
movss xmm12, dword [0x140057e74]
cmp byte [0x1400610d3], 0
je 0x140046fb4
movsd xmm0, qword [0x140061b78]
movsd qword [rbp], xmm0
mov eax, dword [0x140061b80]
mov dword [rbp + 8], eax
movaps xmm0, xmm11
addss xmm0, xmm9
cvttss2si r9d, xmm0
cvttss2si r8d, xmm1
movaps xmm1, xmm10
subss xmm1, xmm11
cvttss2si edx, xmm1
movaps xmm0, xmm7
subss xmm0, xmm8
cvttss2si ecx, xmm0
movss dword [rsp + 0x38], xmm12
lea rax, [rbp]
mov qword [rsp + 0x20], rax
call fcn.140045130
lea r9, [r14 - 0x80]
cmp qword [r14 - 0x68], 0xf
jbe 0x140046f84
mov r9, qword [r9]
movsd xmm0, qword [0x1400552b0]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [0x1400552b8]
mov dword [rbp + 0x28], eax
cvttss2si edx, xmm10
movaps xmm0, xmm8
addss xmm0, xmm7
cvttss2si ecx, xmm0
lea r8, [rbp + 0x20]
call fcn.140045020
cmp byte [0x1400610d4], 0
je 0x140046ff9
movsd xmm0, qword [0x140055280]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [0x140055288]
mov dword [rbp + 0x18], eax
movaps xmm0, xmm10
addss xmm0, xmm9
cvttss2si edx, xmm0
movaps xmm1, xmm7
subss xmm1, xmm8
cvttss2si ecx, xmm1
mov r9, qword [r14 - 0x28]
lea r8, [rbp + 0x10]
call fcn.140045020
cmp byte [0x1400610d2], 0
je 0x140047150
movsd xmm0, qword [0x140055290]
movsd qword [rbp + 0x30], xmm0
mov eax, dword [0x140055298]
mov dword [rbp + 0x38], eax
mov eax, 0x64
sub eax, dword [r14 - 0x48]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm9
divss xmm1, xmm12
addss xmm8, dword [0x140057e50]
movaps xmm6, xmm7
subss xmm6, xmm8
movaps xmm0, xmm9
subss xmm0, xmm1
addss xmm0, xmm11
cvttss2si r9d, xmm0
addss xmm1, xmm10
subss xmm1, xmm11
cvttss2si edx, xmm1
cvttss2si ecx, xmm6
movss xmm0, dword [0x140057e8c]
movss dword [rsp + 0x38], xmm0
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r8d, 3
call fcn.140045130
mov edx, dword [r14 - 0x48]
lea rcx, [rbp + 0x1240]
call fcn.140049be0
lea r9, [rbp + 0x1240]
cmp qword [rbp + 0x1258], 0xf
cmova r9, qword [rbp + 0x1240]
mov eax, 0x64
sub eax, dword [r14 - 0x48]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm9
divss xmm0, xmm12
addss xmm0, xmm10
subss xmm0, xmm11
subss xmm0, dword [0x140057e60]
cvttss2si edx, xmm0
movsd xmm0, qword [0x1400552a0]
movsd qword [rbp + 0x40], xmm0
mov eax, dword [0x1400552a8]
mov dword [rbp + 0x48], eax
subss xmm6, dword [0x140057e4c]
cvttss2si ecx, xmm6
lea r8, [rbp + 0x40]
call fcn.140045020
mov rdx, qword [rbp + 0x1258]
cmp rdx, 0xf
jbe 0x140047150
inc rdx
mov rcx, qword [rbp + 0x1240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004714b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047ffc
call fcn.14004d2cc
cmp byte [0x1400610d1], 0
je 0x140047583
xor r12d, r12d
movss dword [rbp - 0x10], xmm7
movss dword [rbp - 0xc], xmm10
lea r15, [0x1400610e4]
mov eax, dword [r15 - 4]
mov edi, dword [r15]
shl eax, 5
movsxd rdx, eax
add rdx, qword [r14 - 0x10]
mov qword [rbp + 0x11a0], 0
mov dword [rbp + 0x11a8], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x11a0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
shl edi, 5
movsxd rdx, edi
add rdx, qword [r14 - 0x10]
mov qword [rbp + 0x1190], 0
mov dword [rbp + 0x1198], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rbp + 0x1190]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x11f4]
movaps xmm7, xmm6
movss xmm4, dword [rbp + 0x11a4]
mulss xmm7, xmm4
movss xmm11, dword [rbp + 0x11f0]
movaps xmm0, xmm11
movss xmm3, dword [rbp + 0x11a0]
mulss xmm0, xmm3
addss xmm7, xmm0
movss xmm12, dword [rbp + 0x11f8]
movaps xmm1, xmm12
movss xmm2, dword [rbp + 0x11a8]
mulss xmm1, xmm2
addss xmm7, xmm1
movss xmm15, dword [rbp + 0x11fc]
addss xmm7, xmm15
movss xmm8, dword [rbp + 0x1204]
movaps xmm10, xmm8
mulss xmm10, xmm4
movss xmm13, dword [rbp + 0x1200]
movaps xmm0, xmm13
mulss xmm0, xmm3
addss xmm10, xmm0
movss xmm14, dword [rbp + 0x1208]
movaps xmm1, xmm14
mulss xmm1, xmm2
addss xmm10, xmm1
addss xmm10, dword [rbp + 0x120c]
movss xmm5, dword [rbp + 0x1224]
movaps xmm9, xmm5
mulss xmm9, xmm4
movss xmm4, dword [rbp + 0x1220]
movaps xmm0, xmm4
mulss xmm0, xmm3
addss xmm9, xmm0
movss xmm3, dword [rbp + 0x1228]
movaps xmm1, xmm3
mulss xmm1, xmm2
addss xmm9, xmm1
addss xmm9, dword [rbp + 0x122c]
mov ecx, dword [0x140061ba8]
mov r8d, dword [0x140061bac]
movss xmm0, dword [0x140057d4c]
comiss xmm0, xmm9
ja 0x14004736d
movss xmm2, dword [0x140057dd0]
divss xmm2, xmm9
mulss xmm7, xmm2
movss xmm9, dword [0x140057d9c]
mulss xmm7, xmm9
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm7, xmm0
addss xmm7, xmm9
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm7, xmm0
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm10
mulss xmm2, xmm9
xorps xmm0, xmm0
cvtsi2ss xmm0, r8d
mulss xmm2, xmm0
addss xmm2, xmm9
subss xmm1, xmm2
movaps xmm10, xmm1
jmp 0x140047376
movss xmm9, dword [0x140057d9c]
movss xmm2, dword [rbp + 0x1194]
mulss xmm6, xmm2
movss xmm1, dword [rbp + 0x1190]
mulss xmm11, xmm1
addss xmm6, xmm11
movss xmm0, dword [rbp + 0x1198]
mulss xmm12, xmm0
addss xmm6, xmm12
addss xmm6, xmm15
mulss xmm8, xmm2
mulss xmm13, xmm1
addss xmm8, xmm13
mulss xmm14, xmm0
addss xmm8, xmm14
addss xmm8, dword [rbp + 0x120c]
mulss xmm5, xmm2
mulss xmm4, xmm1
addss xmm5, xmm4
mulss xmm3, xmm0
addss xmm5, xmm3
addss xmm5, dword [rbp + 0x122c]
movss xmm0, dword [0x140057d4c]
comiss xmm0, xmm5
ja 0x140047465
movss xmm2, dword [0x140057dd0]
divss xmm2, xmm5
movaps xmm0, xmm2
mulss xmm0, xmm6
movaps xmm6, xmm0
mulss xmm6, xmm9
xorps xmm1, xmm1
cvtsi2ss xmm1, ecx
mulss xmm6, xmm1
addss xmm6, xmm9
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm6, xmm0
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm8
mulss xmm2, xmm9
xorps xmm0, xmm0
cvtsi2ss xmm0, r8d
mulss xmm2, xmm0
addss xmm2, xmm9
subss xmm1, xmm2
movaps xmm8, xmm1
movsd xmm0, qword [0x1400552c0]
movsd qword [rbp + 0x1230], xmm0
mov edi, dword [0x1400552c8]
mov rax, qword [0x140061b68]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007e00
mov rcx, qword [rbp + 0x1230]
mov r9, rcx
shr r9, 0x20
or edi, 0xffffff00
shl edi, 8
or r9d, edi
shl r9d, 8
or r9d, ecx
movss xmm0, dword [0x140057df8]
movss dword [rsp + 0x28], xmm0
movss xmm2, dword [0x140057dd0]
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.1400285f0
movsd xmm0, qword [0x1400552c0]
movsd qword [rbp + 0x1180], xmm0
mov edi, dword [0x1400552c8]
mov rax, qword [0x140061b68]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007e00
or edi, 0xffffff00
shl edi, 8
mov rdx, qword [rbp + 0x1180]
mov r9, rdx
shr r9, 0x20
or r9d, edi
shl r9d, 8
or r9d, edx
movss dword [rbp - 8], xmm6
movss dword [rbp - 4], xmm8
movss dword [rbp + 0x1140], xmm7
movss dword [rbp + 0x1144], xmm10
movss xmm0, dword [0x140057de0]
movss dword [rsp + 0x20], xmm0
lea r8, [rbp - 8]
lea rdx, [rbp + 0x1140]
mov rcx, rax
call fcn.140028080
inc r12d
add r15, 8
cmp r12d, 0x10
jb 0x140047172
jmp 0x14004758c
movss xmm9, dword [0x140057d9c]
add r14, 0xc0
lea rax, [r14 - 0x80]
cmp rax, r13
jne 0x140046cf0
mov r13, qword [rbp + 0x1130]
mov r15, qword [rbp + 0x1128]
movss xmm11, dword [rbp - 0x14]
movss xmm10, dword [rsp + 0x70]
movss xmm12, dword [rsp + 0x74]
movss xmm13, dword [rsp + 0x78]
movss xmm14, dword [rbp - 0x3c]
movss xmm15, dword [rbp - 0x38]
cmp byte [0x140064401], 0
je 0x140047849
mov rcx, r13
sub rcx, r15
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
mov r14, rdx
sar r14, 5
mov rax, r14
shr rax, 0x3f
add r14, rax
je 0x140047849
cmp byte [0x140064369], 0
jne 0x140047849
cmp byte [r15 + 0x60], 0
je 0x140047849
cmp r14, 0x20
jg 0x14004763a
mov rdx, r13
mov rcx, r15
call fcn.14004ab80
jmp 0x1400476f6
mov rax, r14
cqo
sub rax, rdx
sar rax, 1
mov rdi, r14
sub rdi, rax
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
cmp rdi, rcx
cmovl rax, rdi
cmp rdi, 0x15
jbe 0x1400476b1
mov rdi, rax
movabs rcx, 0x155555555555555
cmp rax, rcx
ja 0x1400476a2
test rax, rax
jle 0x1400476a2
nop dword [rax]
lea rcx, [rdi + rdi*2]
shl rcx, 6
lea rdx, [0x14004f820]
call fcn.14004d670
test rax, rax
jne 0x14004779e
shr rdi, 1
jne 0x140047680
xor eax, eax
mov rcx, rax
call fcn.14004d684
mov edi, 0x15
lea rax, [rbp + 0x130]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], rdi
mov byte [rsp + 0x28], bl
mov qword [rsp + 0x20], rdi
mov r9, rax
mov r8, r14
mov rdx, r13
mov rcx, r15
call fcn.14004af10
cmp qword [rbp + 0x128], 0x15
jbe 0x1400476f6
mov rcx, qword [rbp + 0x120]
call fcn.14004d684
addss xmm15, xmm13
movss xmm0, dword [rbp + 0x1108]
addss xmm0, xmm12
mov rdi, qword [rbp + 0x1128]
addss xmm14, xmm10
movss xmm6, dword [rdi + 0x64]
subss xmm6, xmm14
movss xmm7, dword [rdi + 0x68]
subss xmm7, xmm0
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
movsd xmm12, qword [0x140057e30]
mulsd xmm1, xmm12
movsd xmm13, qword [0x140057e08]
divsd xmm1, xmm13
cvtpd2ps xmm10, xmm1
movss xmm8, dword [rdi + 0x6c]
subss xmm8, xmm15
cvtps2pd xmm0, xmm6
movsd xmm1, qword [0x140057e00]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movsd xmm1, qword [0x140057e00]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1400477ad
xorps xmm1, xmm1
sqrtsd xmm1, xmm0
jmp 0x1400477b5
cmp rdi, 0x15
jbe 0x1400476a4
jmp 0x1400476b8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm1, xmm0
cvtps2pd xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
mulsd xmm0, xmm12
divsd xmm0, xmm13
xorps xmm0, xmmword [0x140057fa0]
cvtsd2ss xmm0, xmm0
unpcklps xmm0, xmm10
movsd qword [rbp + 0x1270], xmm0
xorps xmm6, xmm6
movss dword [rbp + 0x1278], xmm6
mov r12, qword [rsp + 0x68]
lea rdx, [r12 + 0x192f940]
xor r13d, r13d
mov qword [rsp + 0x20], r13
lea r9d, [r13 + 0xc]
lea r8, [rbp + 0x1270]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14006437c], r13b
je 0x140047854
cmp dword [rbp + 0x114c], r13d
jle 0x140047854
mov qword [rbp + 0x50], 1
lea rcx, [rbp + 0x50]
call fcn.14004a280
mov qword [rbp + 0x50], 1
lea rcx, [rbp + 0x50]
call fcn.14004a280
jmp 0x140047854
xor r13d, r13d
mov r12, qword [rsp + 0x68]
xorps xmm6, xmm6
mov r15, qword [rbp + 0x1640]
cmp byte [0x1400610d0], 0
je 0x14004789d
movss xmm0, dword [rbp + 0x1154]
comiss xmm0, xmm6
jbe 0x14004789d
mov dword [rbp + 0x1108], 0
lea rdx, [r15 + 0x14b8]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x1108]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140064400], 0
je 0x1400478d8
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400478d8
mov eax, dword [rbp + 0x1118]
add eax, 0xfffeff7f
test eax, 0xfffffffd
jne 0x1400478d8
mov qword [rbp + 0x50], 1
lea rcx, [rbp + 0x50]
call fcn.14004a280
cmp dword [rbp + 0x1118], 0x10080
jne 0x1400479da
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400479da
mov qword [rbp + 0x50], 2
lea rcx, [rbp + 0x50]
call fcn.14004a280
lea rdx, [r15 + 0x3d8]
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0
mov qword [rsp + 0x20], r13
mov r9d, 0xc
lea r8, [rbp - 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x60]
movss dword [0x140064420], xmm0
movss xmm1, dword [rbp - 0x5c]
movss xmm0, dword [rbp - 0x58]
movss xmm9, dword [0x140057ec8]
movss dword [0x140064428], xmm0
movss dword [0x140064424], xmm1
comiss xmm0, dword [0x140057e5c]
ja 0x140047979
comiss xmm9, xmm0
jbe 0x1400479c0
mov qword [rbp - 0x54], 0
mov dword [rbp - 0x4c], 0
mov qword [rsp + 0x20], r13
mov r9d, 0xc
lea r8, [rbp - 0x54]
lea rdx, [r15 + 0x3d8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x54]
movss dword [0x140064420], xmm0
movss xmm1, dword [rbp - 0x50]
movss xmm0, dword [rbp - 0x4c]
jmp 0x14004795a
mov qword [rbp + 0x50], 2
lea rcx, [rbp + 0x50]
call fcn.14004a280
movss xmm9, dword [0x140057d9c]
mov edi, dword [0x1400643fc]
lea rdx, [r15 + 0x1138]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x1390]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1390]
mov qword [rbp + 0x90], rax
lea r14, [rax + 0x210]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x11d4]
mov rdx, r14
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x1400]
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp + 0x10f0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x10f0], 0
jne 0x140047a8c
cmp dword [rbp + 0x11d4], edi
je 0x140047a8c
mov dword [rbp + 0x1108], edi
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x1108]
mov rdx, r14
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mulss xmm11, xmm11
movss xmm0, dword [rbp - 0x34]
mulss xmm0, xmm0
addss xmm11, xmm0
movss xmm0, dword [rbp - 0x30]
mulss xmm0, xmm0
addss xmm11, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm11
ja 0x140047ac0
xorps xmm0, xmm0
sqrtss xmm0, xmm11
jmp 0x140047ac9
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si eax, xmm0
mov dword [0x14006438c], eax
cmp byte [0x140064318], 0
je 0x140047cee
lea rdx, [r15 + 0x147c]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x11d0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r12 + 0x191f9b8]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0x1398]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1398]
add rdx, 0x40
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x1150]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x17a0]
mov qword [rbp + 0x11b0], r13
mov qword [rbp + 0x11b8], r13
mov qword [rsp + 0x20], r13
mov r9d, 0x10
lea r8, [rbp + 0x11b0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x11b8]
test rdx, rdx
je 0x140047d7a
mov rcx, qword [rbp + 0x11b0]
lea rax, [rcx - 1]
cmp rax, 0xfffd
ja 0x140047d7a
dec rcx
lea rax, [rcx + rcx*2]
lea rdx, [rdx + rax*4]
mov qword [rbp - 0x48], 0
mov dword [rbp - 0x40], 0
mov qword [rsp + 0x20], r13
mov r9d, 0xc
lea r8, [rbp - 0x48]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x48]
movss dword [rbp + 0xf0], xmm6
movss xmm7, dword [rbp - 0x44]
movss dword [rbp + 0xf4], xmm7
movss xmm8, dword [rbp - 0x40]
movss dword [rbp + 0xf8], xmm8
cmp dword [rbp + 0x11d0], 1
jle 0x140047cd9
mov qword [rbp + 0x11c0], 0
mov dword [rbp + 0x11c8], 0
lea rdx, [r12 + 0x192f940]
mov qword [rsp + 0x20], r13
mov r9d, 0xc
lea r8, [rbp + 0x11c0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
addss xmm7, xmm7
addss xmm6, xmm6
movss xmm1, dword [0x140064434]
subss xmm1, xmm7
movss xmm3, dword [rbp + 0x11c4]
movaps xmm0, xmm3
addss xmm0, xmm1
subss xmm3, xmm0
movss xmm2, dword [rbp + 0x1150]
mulss xmm2, dword [0x140057d50]
movss xmm0, dword [0x140064430]
subss xmm0, xmm6
movss xmm1, dword [rbp + 0x11c0]
addss xmm0, xmm1
subss xmm1, xmm0
divss xmm1, xmm2
cvttss2si edx, xmm1
divss xmm3, xmm2
cvttss2si r8d, xmm3
neg r8d
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
addss xmm8, xmm8
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [0x140064430], xmm0
movss dword [0x140064438], xmm8
jmp 0x140047cee
mov qword [0x140064434], 0
mov dword [0x140064430], 0
call fcn.14000a430
call fcn.14000a850
xorps xmm0, xmm0
movups xmmword [rbp + 0x1648], xmm0
mov rcx, qword [0x140064380]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x140064310]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x140064380]
mov rax, qword [rcx]
lea r8, [rbp + 0x1648]
mov rdx, qword [0x140064310]
call qword [rax + 0x190]
mov rax, qword [0x140061b68]
mov rax, qword [rax + 0x4b00]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r13
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14002e2b0
mov rcx, qword [0x140064370]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
nop
movzx eax, byte [0x1400610dd]
test al, al
jne 0x140046150
movabs r14, 0x2aaaaaaaaaaaaaab
call fcn.140044020
nop
mov rcx, qword [0x140064310]
test rcx, rcx
je 0x140047db2
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140064310], r13
mov rcx, qword [0x140064370]
test rcx, rcx
je 0x140047dcb
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140064370], r13
mov rcx, qword [0x140064380]
test rcx, rcx
je 0x140047de4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140064380], r13
mov rcx, qword [0x140064390]
test rcx, rcx
je 0x140047dfd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140064390], r13
mov rcx, qword [0x1400643f0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x1400643b8]
mov rcx, qword [0x1400643e0]
call qword [sym.imp.USER32.dll_UnregisterClassW]
lea rcx, [rbp + 0x1408]
call fcn.140049820
test rax, rax
jne 0x140047e51
mov rax, qword [rbp + 0x1400]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1400]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rbx, qword [rbp + 0x1128]
test rbx, rbx
je 0x140047ef0
mov rdi, qword [rbp + 0x1130]
cmp rbx, rdi
je 0x140047e8b
nop dword [rax]
mov rcx, rbx
call fcn.14004bdc0
add rbx, 0xc0
cmp rbx, rdi
jne 0x140047e70
mov rbx, qword [rbp + 0x1128]
mov rcx, qword [rbp + 0x1138]
sub rcx, rbx
mov rax, r14
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 6
mov rax, rbx
cmp rdx, 0x1000
jb 0x140047ed6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047fe7
mov rcx, rbx
call fcn.14004d2cc
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1128], xmm0
mov qword [rbp + 0x1138], r13
lea rcx, [rbp + 0x108]
call fcn.140049ae0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140047f37
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047f32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047fe7
call fcn.14004d2cc
test rsi, rsi
je 0x140047f45
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x140061b90]
test rcx, rcx
je 0x140047f57
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x1400]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1400], rax
mov rax, qword [rbp + 0x1400]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x13fc], edx
lea rcx, [rbp + 0x1408]
call fcn.140048c60
lea rcx, [rbp + 0x1410]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x14a8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [rbp + 0x13f0]
cmp rdx, 0xf
jbe 0x140048008
inc rdx
mov rcx, qword [rbp + 0x13d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048003
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140048003
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d2cc
xor eax, eax
mov rcx, qword [rbp + 0x1668]
xor rcx, rsp
call fcn.14004d130
lea r11, [rsp + 0x1810]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret