Function at 0x140049ab0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x808]
sub rsp, 0x8e0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140064010]
xor rax, rsp
mov qword [rbp + 0x738], rax
xor ebx, ebx
mov r13d, ebx
mov dword [rbp - 0x18], ebx
mov rdx, qword [0x140067348]
add rdx, qword [0x14006c490]
mov qword [rbp + 0x520], rbx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 8]
lea r8, [rbp + 0x520]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, qword [rbp + 0x520]
mov qword [rbp + 0x3a0], r12
mov rdx, qword [0x140067378]
add rdx, r12
mov dword [rbp + 0x5bc], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 4]
lea r8, [rbp + 0x5bc]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x5bc]
call fcn.140047340
mov rdi, rax
mov qword [rbp + 0x3a8], rax
movss xmm15, dword [0x14005afb4]
movaps xmm11, xmm15
movss dword [rbp - 0x7c], xmm15
movaps xmm14, xmm15
movss dword [rbp - 0x80], xmm15
movaps xmm13, xmm15
movss dword [rbp - 0x78], xmm15
movaps xmm12, xmm15
movss dword [rbp - 0x74], xmm15
movss xmm0, dword [0x14005af9c]
movss dword [rbp - 0x14], xmm0
movss dword [rbp + 0x50], xmm0
mov r14d, ebx
mov qword [rbp - 0x20], rbx
mov esi, ebx
mov qword [rbp - 0x28], rbx
test r12, r12
je 0x140049c7c
mov rcx, r12
call fcn.140047600
test rax, rax
je 0x140049c7c
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x730], rbx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 8]
lea r8, [rbp + 0x730]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x730]
test rdx, rdx
je 0x140049c7c
mov qword [rbp + 0x5a0], rbx
mov dword [rbp + 0x5a8], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp + 0x5a0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x140049c89
mov qword [rbp + 0x5a0], rbx
mov dword [rbp + 0x5a8], ebx
mov ecx, 0x10
mov dword [rbp + 0x554], ecx
cmp byte [0x14006c3f1], bl
jne 0x140049ca4
cmp byte [0x14006c508], bl
je 0x140049d17
mov rdx, qword [0x140067340]
add rdx, qword [0x14006c490]
mov qword [rbp + 0x720], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x720]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rbp + 0x5c0], ebx
mov rdx, qword [rbp + 0x720]
add rdx, 0x1520
mov qword [rsp + 0x20], rbx
mov r9d, 4
lea r8, [rbp + 0x5c0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x5c0]
mov dword [rbp + 0x554], ecx
mov eax, ebx
mov dword [rbp + 0x54], ebx
mov r15, 0xffffffffffffffff
movss xmm9, dword [0x14005ae24]
xorps xmm10, xmm10
test ecx, ecx
js 0x14004dfb6
movss xmm8, dword [0x14005b510]
movss xmm11, dword [0x14005adf4]
mov ecx, eax
call fcn.140047340
mov r14, rax
test rax, rax
je 0x14004df3e
mov rdx, qword [0x140067378]
add rdx, rax
mov dword [rbp + 0x5c4], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 4
lea r8, [rbp + 0x5c4]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x5c4]
call fcn.140047340
mov rsi, rax
mov qword [rbp + 0x558], rax
test rax, rax
je 0x14004df3e
lea rdx, [rbp + 0x3d0]
mov rcx, r14
call fcn.1400474d0
nop
or r13d, 1
mov dword [rbp - 0x18], r13d
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140049dd0
mov rax, qword [rax]
cmp r8, 6
jne 0x140049de9
lea rdx, str.player
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140049e23
lea rdx, [rbp + 0x3b0]
mov rcx, r14
call fcn.1400474d0
or r13d, 2
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140049e0a
mov rax, qword [rax]
cmp r8, 0x19
jne 0x140049e27
lea rdx, str.citadel_player_controller
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140049e27
mov bl, 1
jmp 0x140049e29
xor bl, bl
test r13b, 2
je 0x140049e91
and r13d, 0xfffffffd
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 0x10
jb 0x140049e74
inc rdx
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049e6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004df75
call fcn.140051b40
mov qword [rbp + 0x3c0], 0
mov qword [rbp + 0x3c8], 0xf
mov byte [rbp + 0x3b0], 0
test r13b, 1
je 0x140049ef9
and r13d, 0xfffffffe
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0x10
jb 0x140049edc
inc rdx
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049ed7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004df7c
call fcn.140051b40
mov qword [rbp + 0x3e0], 0
mov qword [rbp + 0x3e8], 0xf
mov byte [rbp + 0x3d0], 0
test bl, bl
je 0x14004da91
cmp rsi, rdi
je 0x14004df3c
cmp r14, r12
je 0x14004df3c
mov rdx, qword [0x140067380]
add rdx, r14
mov byte [rbp + 0x550], 0
xor edi, edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 1]
lea r8, [rbp + 0x550]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x550], dil
jne 0x14004df3c
mov rdx, qword [0x140067398]
add rdx, rsi
mov dword [rbp + 0x5dc], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x5dc]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x5dc], 1
jle 0x14004df3c
mov rdx, qword [0x1400673a0]
add rdx, rsi
mov dword [rbp + 0x5b8], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x5b8]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x5b8], 0x100
jne 0x14004df3c
mov rdx, qword [0x140067388]
add rdx, r12
mov dword [rbp + 0x5b4], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x5b4]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rbp + 0x5b4]
mov rdx, qword [0x140067388]
add rdx, r14
mov dword [rbp + 0x5b0], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x5b0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp ebx, dword [rbp + 0x5b0]
je 0x14004df3c
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
lea r8d, [rdi + 4]
lea rdx, str.head
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004a0e4
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x560], rdi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 8]
lea r8, [rbp + 0x560]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x560]
test rax, rax
je 0x14004a0e4
mov qword [rbp + 0x580], rdi
mov dword [rbp + 0x588], edi
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 0xc]
lea r8, [rbp + 0x580]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004a0f1
mov qword [rbp + 0x580], rdi
mov dword [rbp + 0x588], edi
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 4
lea rdx, str.head
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004a1b0
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x560], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x560]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x560]
test rax, rax
je 0x14004a1b0
mov qword [rbp + 0x5c8], rdi
mov dword [rbp + 0x5d0], edi
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x5c8]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp + 0x5d0]
jmp 0x14004a1ba
mov qword [rbp + 0x5c8], rdi
xorps xmm1, xmm1
xorps xmm14, xmm14
movss xmm2, dword [rbp + 0x588]
addss xmm2, dword [0x14005ae20]
movaps xmm0, xmm2
subss xmm0, dword [0x14005ae1c]
movss dword [rbp + 0x588], xmm0
addss xmm1, dword [0x14005afc8]
movss dword [rbp + 0x5d0], xmm1
movss xmm0, dword [rbp + 0x580]
movss dword [rbp + 0x390], xmm0
movss xmm1, dword [rbp + 0x584]
movss dword [rbp + 0x394], xmm1
movss dword [rbp + 0x398], xmm2
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 6
lea rdx, str.pelvis
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004a2d0
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x560], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x560]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x560]
test rax, rax
je 0x14004a2d0
mov qword [rbp + 0x570], rdi
mov dword [rbp + 0x578], edi
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x570]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004a2dd
mov qword [rbp + 0x570], rdi
mov dword [rbp + 0x578], edi
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004a358
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x560], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x560]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x560]
test rdx, rdx
je 0x14004a358
mov qword [rbp + 0x590], rdi
mov dword [rbp + 0x598], edi
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x590]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004a365
mov qword [rbp + 0x590], rdi
mov dword [rbp + 0x598], edi
cmp byte [0x14006ce18], dil
je 0x14004af41
cmp byte [0x14006c5b8], dil
je 0x14004af41
mov rdx, qword [0x140067350]
add rdx, qword [0x14006c490]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rsp + 0x20], rdi
mov r9d, 0x40
lea r8, [rbp - 0x70]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp + 0x574]
movaps xmm2, xmm7
mulss xmm2, dword [rbp - 0x3c]
movss xmm5, dword [rbp + 0x570]
movaps xmm0, xmm5
mulss xmm0, dword [rbp - 0x40]
addss xmm2, xmm0
movss xmm4, dword [rbp + 0x578]
movaps xmm1, xmm4
mulss xmm1, dword [rbp - 0x38]
addss xmm2, xmm1
addss xmm2, dword [rbp - 0x34]
movss xmm6, dword [0x14005ad08]
maxss xmm6, xmm2
movss xmm3, dword [0x14005ad8c]
divss xmm3, xmm6
movss xmm9, dword [0x14006ce20]
cvttss2si eax, xmm9
movss xmm10, dword [0x14006ce24]
cvttss2si ecx, xmm10
movd xmm8, eax
cvtdq2ps xmm8, xmm8
movaps xmm2, xmm7
mulss xmm2, dword [rbp - 0x6c]
movaps xmm0, xmm5
mulss xmm0, dword [rbp - 0x70]
addss xmm2, xmm0
movaps xmm1, xmm4
mulss xmm1, dword [rbp - 0x68]
addss xmm2, xmm1
addss xmm2, dword [rbp - 0x64]
mulss xmm2, xmm3
movss xmm1, dword [0x14005ad8c]
addss xmm2, xmm1
movaps xmm0, xmm8
movss xmm15, dword [0x14005ad50]
mulss xmm0, xmm15
mulss xmm2, xmm0
movss dword [rbp + 0x10], xmm2
movd xmm11, ecx
cvtdq2ps xmm11, xmm11
mulss xmm7, dword [rbp - 0x5c]
mulss xmm5, dword [rbp - 0x60]
addss xmm7, xmm5
mulss xmm4, dword [rbp - 0x58]
addss xmm7, xmm4
addss xmm7, dword [rbp - 0x54]
mulss xmm7, xmm3
subss xmm1, xmm7
movaps xmm0, xmm11
mulss xmm0, xmm15
mulss xmm1, xmm0
movss dword [rbp + 0x14], xmm1
comiss xmm14, xmm6
jbe 0x14004a4ff
comiss xmm14, xmm2
jbe 0x14004a4d6
xorps xmm2, xmm2
jmp 0x14004a4e0
comiss xmm2, xmm8
jbe 0x14004a4e5
movaps xmm2, xmm8
movss dword [rbp + 0x10], xmm2
comiss xmm14, xmm1
jbe 0x14004a4f0
xorps xmm1, xmm1
jmp 0x14004a4fa
comiss xmm1, xmm11
jbe 0x14004a4ff
movaps xmm1, xmm11
movss dword [rbp + 0x14], xmm1
comiss xmm14, xmm2
ja 0x14004a51b
comiss xmm14, xmm1
ja 0x14004a51b
comiss xmm2, xmm9
ja 0x14004a51b
comiss xmm1, xmm10
jbe 0x14004af5a
mulss xmm10, xmm15
movaps xmm0, xmm10
subss xmm0, xmm1
mulss xmm9, xmm15
movaps xmm1, xmm9
subss xmm1, xmm2
ucomiss xmm0, xmm14
jp 0x14004a545
jne 0x14004a545
ucomiss xmm1, xmm14
jp 0x14004a545
je 0x14004a58b
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movss xmm2, dword [0x14005af28]
mulss xmm0, xmm2
cvtss2sd xmm0, xmm0
divsd xmm0, qword [0x14005add0]
cvtsd2ss xmm0, xmm0
movss xmm1, dword [0x14005ae94]
comiss xmm0, xmm1
jbe 0x14004a579
subss xmm0, xmm2
jmp 0x14004a58e
comiss xmm1, xmm0
jbe 0x14004a584
addss xmm0, xmm2
jmp 0x14004a58e
ucomiss xmm0, xmm1
jp 0x14004a58e
jne 0x14004a58e
xorps xmm0, xmm0
cvtss2sd xmm0, xmm0
mulsd xmm0, qword [0x14005ad98]
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
movd xmm7, dword [0x14006c5c0]
cvtdq2ps xmm7, xmm7
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_cosf
movaps xmm12, xmm0
mulss xmm12, xmm7
addss xmm12, xmm9
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sinf
movaps xmm11, xmm0
mulss xmm11, xmm7
addss xmm11, xmm10
mov rdx, qword [0x1400673a8]
add rdx, rsi
mov dword [rbp + 0x54c], edi
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x54c]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm13, dword [rbp + 0x54c]
cvtdq2ps xmm13, xmm13
cmp byte [0x14006c540], dil
je 0x14004a9d1
movaps xmm7, xmmword [0x14005b4f0]
movups xmm8, xmmword [0x14006c5fc]
mov rdx, qword [0x1400673a8]
add rdx, rsi
mov dword [rbp + 0x54c], edi
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x54c]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0x54c]
lea rcx, [rbp + 0x370]
call fcn.140050980
or r13d, 0x20
lea r15, [rbp + 0x370]
cmp qword [rbp + 0x388], 0x10
cmovae r15, qword [rbp + 0x370]
movups xmm9, xmmword [0x14006c5fc]
mov rdx, qword [0x140067398]
add rdx, rsi
mov dword [rbp + 0x568], edi
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x568]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0x568]
lea rcx, [rbp + 0x70]
call fcn.140050980
or r13d, 0x40
lea r12, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae r12, qword [rbp + 0x70]
movups xmm10, xmmword [0x14006c544]
mov rdx, qword [0x140067370]
add rdx, r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
mov qword [rsp + 0x20], rdi
mov r9d, 0x20
lea r8, [rbp - 0x70]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
bts r13d, 7
mov dword [rbp - 0x18], r13d
lea rdx, [rbp - 0x70]
mov r9, qword [rbp - 0x58]
cmp r9, 0x10
setae al
mov r10, qword [rbp - 0x70]
cmovae rdx, r10
lea rcx, [rbp - 0x70]
test al, al
cmovne rcx, r10
mov r8, qword [rbp - 0x60]
add r8, rcx
cmp rdx, r8
je 0x14004a789
movzx eax, byte [rdx]
sub al, 0x20
cmp al, 0x5e
ja 0x14004a775
inc rdx
cmp rdx, r8
jne 0x14004a762
jmp 0x14004a789
xor r8d, r8d
lea rcx, [rbp - 0x70]
call fcn.1400507f0
mov r9, qword [rbp - 0x58]
mov r10, qword [rbp - 0x70]
lea rsi, [rbp - 0x70]
cmp r9, 0x10
cmovae rsi, r10
mov ecx, dword [0x14006c5bc]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movaps xmm6, xmm11
subss xmm6, xmm0
subss xmm6, dword [0x14005ae08]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
lea ebx, [rdx + 0xb]
mov rdi, qword [0x14006cdf0]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
movdqa xmmword [rbp + 0x420], xmm7
movdqa xmmword [rbp + 0x440], xmm8
movdqa xmmword [rbp + 0x410], xmm7
movdqa xmmword [rbp + 0x430], xmm9
movdqa xmmword [rbp + 0x450], xmm7
movdqa xmmword [rbp + 0x460], xmm10
lea rcx, [rbp + 0x420]
mov qword [rsp + 0x78], rcx
lea rcx, [0x140059a24]
mov qword [rsp + 0x70], rcx
lea rcx, [rbp + 0x440]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], r15
lea rcx, [rbp + 0x410]
mov qword [rsp + 0x58], rcx
lea rcx, [0x14005aa84]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 0x430]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], r12
lea rcx, [rbp + 0x450]
mov qword [rsp + 0x38], rcx
lea rcx, [0x14005aa88]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x460]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rsi
movaps xmm0, xmm12
unpcklps xmm0, xmm6
movq r9, xmm0
mov r8d, ebx
mov rdx, rdi
mov rcx, rax
call fcn.140048250
btr r13d, 7
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14004a8fe
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a8f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004df83
call fcn.140051b40
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], dil
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14004a94e
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a949
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004df8a
call fcn.140051b40
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], 0xf
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0x388]
cmp rdx, 0x10
jb 0x14004a9a5
inc rdx
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a9a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004df91
call fcn.140051b40
mov qword [rbp + 0x380], rdi
mov qword [rbp + 0x388], 0xf
mov byte [rbp + 0x370], 0
mov rsi, qword [rbp + 0x558]
mov r12, qword [rbp + 0x3a0]
jmp 0x14004ac0a
movups xmm6, xmmword [0x14006c544]
mov ecx, dword [0x14006c5bc]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + 0xb]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movaps xmm1, xmm11
subss xmm1, xmm0
subss xmm1, dword [0x14005ae08]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
subss xmm1, xmm0
movss dword [rbp + 0x140], xmm12
movss dword [rbp + 0x144], xmm1
mov rdx, qword [0x140067370]
add rdx, r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov qword [rsp + 0x20], rdi
mov r9d, 0x20
lea r8, [rbp - 0x10]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
or r13d, 0x10
mov dword [rbp - 0x18], r13d
lea rdx, [rbp - 0x10]
mov r9, qword [rbp + 8]
cmp r9, 0x10
setae al
mov r10, qword [rbp - 0x10]
cmovae rdx, r10
lea r8, [rbp - 0x10]
test al, al
cmovne r8, r10
add r8, qword [rbp]
cmp rdx, r8
je 0x14004aac7
nop word [rax + rax]
movzx eax, byte [rdx]
sub al, 0x20
cmp al, 0x5e
ja 0x14004aab3
inc rdx
cmp rdx, r8
jne 0x14004aaa0
jmp 0x14004aac7
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.1400507f0
mov r9, qword [rbp + 8]
mov r10, qword [rbp - 0x10]
lea rdx, [rbp - 0x10]
cmp r9, 0x10
cmovae rdx, r10
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], rdi
mov r8, r15
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14004aaf0
lea rcx, [rbp + 0xc8]
call fcn.140051390
nop
mov rbx, qword [0x14006cdf0]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
movdqa xmmword [rbp + 0x530], xmm6
lea rcx, [rbp + 0x530]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm7
lea r9, [rbp + 0x140]
lea r8, [rbp + 0xc8]
mov rdx, rbx
mov rcx, rax
call fcn.140047cf0
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14004aba2
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ab9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004df98
call fcn.140051b40
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], 0xf
mov byte [rbp + 0xc8], 0
and r13d, 0xffffffef
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14004abfa
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004abf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004df9f
call fcn.140051b40
mov qword [rbp], rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
movaps xmm2, xmmword [0x14005b200]
mov ecx, dword [0x14006c5bc]
lea eax, [rcx - 2]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm8, xmm1
addss xmm8, xmm11
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movaps xmm7, xmm12
subss xmm7, xmm0
subss xmm7, dword [0x14005ae08]
movaps xmm6, xmm11
subss xmm6, xmm1
movdqa xmmword [rbp + 0x530], xmm2
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x148], xmm7
movss dword [rbp + 0x14c], xmm8
movss dword [rbp + 0x150], xmm7
movss dword [rbp + 0x154], xmm6
movss xmm0, dword [0x14005ade0]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x148]
lea rdx, [rbp + 0x150]
mov rcx, r10
call fcn.1400239b0
movups xmm8, xmmword [0x14006c5fc]
mov rdx, qword [0x140067398]
add rdx, rsi
mov dword [rbp + 0x54c], edi
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x54c]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [0x14006c5bc]
lea eax, [rcx - 2]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movaps xmm9, xmm0
addss xmm9, xmm11
movaps xmm1, xmm9
movss xmm3, dword [0x14005b510]
andps xmm1, xmm3
movaps xmm2, xmm11
subss xmm2, xmm0
andps xmm2, xmm3
subss xmm2, xmm1
andps xmm2, xmm3
movaps xmm7, xmm9
movss xmm10, dword [0x14005ad8c]
addss xmm7, xmm10
movd xmm0, dword [rbp + 0x54c]
cvtdq2ps xmm0, xmm0
divss xmm0, xmm13
mulss xmm0, xmm2
subss xmm7, xmm0
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movaps xmm6, xmm12
subss xmm6, xmm0
subss xmm6, dword [0x14005ae08]
subss xmm9, xmm10
movdqa xmmword [rbp + 0x530], xmm8
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x158], xmm6
movss dword [rbp + 0x15c], xmm7
movss dword [rbp + 0x160], xmm6
movss dword [rbp + 0x164], xmm9
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0x158]
lea rdx, [rbp + 0x160]
mov rcx, r10
call fcn.1400239b0
movups xmm0, xmmword [0x14006c5c4]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c5bc]
cvtdq2ps xmm6, xmm6
lea rcx, [rbp + 0x530]
call fcn.140003080
mov edi, eax
mov rax, qword [0x14006cd40]
lea r8, str.Background
xor edx, edx
mov rax, qword [rax + 0x40b0]
mov rcx, qword [rax]
cmp byte [0x14006c5b9], dl
je 0x14004aebc
call fcn.1400059c0
mov rbx, rax
movss dword [rbp + 0x168], xmm12
movss dword [rbp + 0x16c], xmm11
test edi, 0xff000000
je 0x14004af4c
comiss xmm15, xmm6
ja 0x14004af4c
mov dword [rsp + 0x28], 0x1f
movss xmm0, dword [0x14005ae0c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm6
lea rdx, [rbp + 0x168]
mov rcx, rax
call fcn.140023010
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140022550
xor edi, edi
mov dword [rbx + 0x78], edi
jmp 0x14004af4e
call fcn.1400059c0
mov rbx, rax
movss dword [rbp + 0x170], xmm12
movss dword [rbp + 0x174], xmm11
test edi, 0xff000000
je 0x14004af4c
comiss xmm15, xmm6
ja 0x14004af4c
subss xmm6, xmm15
mov dword [rsp + 0x28], 0x1f
movss xmm0, dword [0x14005ae0c]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm14
movaps xmm2, xmm6
lea rdx, [rbp + 0x170]
mov rcx, rax
call fcn.140023010
movss dword [rsp + 0x28], xmm10
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140021650
xor edi, edi
mov dword [rbx + 0x78], edi
jmp 0x14004af4e
movss xmm15, dword [0x14005ad50]
jmp 0x14004af6c
xor edi, edi
movss xmm12, dword [rbp - 0x74]
movss xmm13, dword [rbp - 0x78]
movss xmm8, dword [0x14005b510]
movss xmm9, dword [0x14005ae24]
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x390]
call fcn.1400471d0
test al, al
je 0x14004df38
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x580]
call fcn.1400471d0
test al, al
je 0x14004df38
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x590]
call fcn.1400471d0
test al, al
je 0x14004df38
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x570]
call fcn.1400471d0
test al, al
je 0x14004df38
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x5c8]
call fcn.1400471d0
test al, al
je 0x14004df38
movss xmm14, dword [rbp + 0x3c]
andps xmm14, xmm8
movss xmm13, dword [rbp + 0x64]
movss dword [rbp + 0x4c], xmm13
movaps xmm0, xmm13
andps xmm0, xmm8
subss xmm14, xmm0
andps xmm14, xmm8
movss dword [rbp + 0x548], xmm14
movaps xmm12, xmm14
mulss xmm12, xmm15
movss dword [rbp - 0x18], xmm12
movaps xmm0, xmm12
mulss xmm0, xmm15
movss xmm15, dword [rbp + 0x38]
subss xmm15, xmm0
movss xmm9, dword [rbp + 0x60]
addss xmm0, xmm9
movss dword [rbp + 0x560], xmm0
movss xmm0, dword [rbp + 0x17c]
movss dword [rbp + 0x54c], xmm0
movss xmm0, dword [rbp + 0x178]
movss dword [rbp + 0x568], xmm0
cmp byte [0x14006ce18], 0
je 0x14004d785
cmp byte [0x14006c4d8], 0
je 0x14004ce91
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 6
lea rdx, str.neck_0
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b146
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b146
mov qword [rbp + 0x670], 0
mov dword [rbp + 0x678], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x670]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b15b
mov qword [rbp + 0x670], 0
mov dword [rbp + 0x678], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 7
lea rdx, str.spine_3
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b21a
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b21a
mov qword [rbp + 0x660], 0
mov dword [rbp + 0x668], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x660]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b22f
mov qword [rbp + 0x660], 0
mov dword [rbp + 0x668], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 7
lea rdx, str.spine_2
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b2ee
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b2ee
mov qword [rbp + 0x650], 0
mov dword [rbp + 0x658], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x650]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b303
mov qword [rbp + 0x650], 0
mov dword [rbp + 0x658], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 7
lea rdx, str.spine_1
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b3c2
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b3c2
mov qword [rbp + 0x640], 0
mov dword [rbp + 0x648], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x640]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b3d7
mov qword [rbp + 0x640], 0
mov dword [rbp + 0x648], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 7
lea rdx, str.spine_0
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b496
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b496
mov qword [rbp + 0x630], 0
mov dword [rbp + 0x638], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x630]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b4ab
mov qword [rbp + 0x630], 0
mov dword [rbp + 0x638], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 6
lea rdx, str.pelvis
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b56a
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b56a
mov qword [rbp + 0x620], 0
mov dword [rbp + 0x628], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x620]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b57f
mov qword [rbp + 0x620], 0
mov dword [rbp + 0x628], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.leg_upper_L
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b63e
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b63e
mov qword [rbp + 0x710], 0
mov dword [rbp + 0x718], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x710]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b653
mov qword [rbp + 0x710], 0
mov dword [rbp + 0x718], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.leg_lower_L
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b712
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b712
mov qword [rbp + 0x610], 0
mov dword [rbp + 0x618], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x610]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b727
mov qword [rbp + 0x610], 0
mov dword [rbp + 0x618], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 7
lea rdx, str.ankle_L
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b7e6
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b7e6
mov qword [rbp + 0x6b0], 0
mov dword [rbp + 0x6b8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x6b0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b7fb
mov qword [rbp + 0x6b0], 0
mov dword [rbp + 0x6b8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 6
lea rdx, str.ball_L
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b8ba
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b8ba
mov qword [rbp + 0x600], 0
mov dword [rbp + 0x608], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x600]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b8cf
mov qword [rbp + 0x600], 0
mov dword [rbp + 0x608], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.leg_upper_R
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004b98e
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004b98e
mov qword [rbp + 0x5f0], 0
mov dword [rbp + 0x5f8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x5f0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004b9a3
mov qword [rbp + 0x5f0], 0
mov dword [rbp + 0x5f8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.leg_lower_R
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004ba62
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004ba62
mov qword [rbp + 0x5e0], 0
mov dword [rbp + 0x5e8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x5e0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004ba77
mov qword [rbp + 0x5e0], 0
mov dword [rbp + 0x5e8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 7
lea rdx, str.ankle_R
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004bb36
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004bb36
mov qword [rbp + 0x700], 0
mov dword [rbp + 0x708], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x700]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004bb4b
mov qword [rbp + 0x700], 0
mov dword [rbp + 0x708], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 6
lea rdx, str.ball_R
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004bc0a
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004bc0a
mov qword [rbp + 0x6e0], 0
mov dword [rbp + 0x6e8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x6e0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004bc1f
mov qword [rbp + 0x6e0], 0
mov dword [rbp + 0x6e8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.arm_upper_L
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004bcde
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004bcde
mov qword [rbp + 0x6d0], 0
mov dword [rbp + 0x6d8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x6d0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004bcf3
mov qword [rbp + 0x6d0], 0
mov dword [rbp + 0x6d8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.arm_lower_L
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004bdb2
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004bdb2
mov qword [rbp + 0x6c0], 0
mov dword [rbp + 0x6c8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x6c0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004bdc7
mov qword [rbp + 0x6c0], 0
mov dword [rbp + 0x6c8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 6
lea rdx, str.hand_L
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004be86
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004be86
mov qword [rbp + 0x6f0], 0
mov dword [rbp + 0x6f8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x6f0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004be9b
mov qword [rbp + 0x6f0], 0
mov dword [rbp + 0x6f8], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.arm_upper_R
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004bf5a
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004bf5a
mov qword [rbp + 0x680], 0
mov dword [rbp + 0x688], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x680]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004bf6f
mov qword [rbp + 0x680], 0
mov dword [rbp + 0x688], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 0xb
lea rdx, str.arm_lower_R
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004c02e
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004c02e
mov qword [rbp + 0x690], 0
mov dword [rbp + 0x698], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x690]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004c043
mov qword [rbp + 0x690], 0
mov dword [rbp + 0x698], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], rdi
mov r8d, 6
lea rdx, str.hand_R
lea rcx, [rbp - 0x70]
call fcn.140051390
lea rdx, [rbp - 0x70]
mov rcx, r14
call fcn.140047690
mov ebx, eax
mov rcx, r14
call fcn.140047600
test rax, rax
je 0x14004c102
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
mov qword [rbp + 0x530], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rbp + 0x530]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x530]
test rax, rax
je 0x14004c102
mov qword [rbp + 0x6a0], 0
mov dword [rbp + 0x6a8], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
mov qword [rsp + 0x20], rdi
mov r9d, 0xc
lea r8, [rbp + 0x6a0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x14004c117
mov qword [rbp + 0x6a0], 0
mov dword [rbp + 0x6a8], 0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x670]
call fcn.1400471d0
movss xmm13, dword [rbp + 0x184]
movss xmm14, dword [rbp + 0x180]
test al, al
je 0x14004c1a0
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x660]
call fcn.1400471d0
test al, al
je 0x14004c1a0
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm1, dword [0x14006c4dc]
cvtdq2ps xmm1, xmm1
movss dword [rsp + 0x28], xmm1
lea rax, [rbp + 0x530]
mov qword [rsp + 0x20], rax
movss xmm3, dword [rbp + 0x94]
movss xmm2, dword [rbp + 0x90]
movaps xmm1, xmm13
movaps xmm0, xmm14
call fcn.140047ad0
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0x650]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x18c]
movss xmm8, dword [rbp + 0x188]
test al, al
je 0x14004c264
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x138], xmm8
movss dword [rbp + 0x13c], xmm7
movss xmm0, dword [rbp + 0x90]
movss dword [rbp + 0x190], xmm0
movss xmm1, dword [rbp + 0x94]
movss dword [rbp + 0x194], xmm1
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x138]
lea rdx, [rbp + 0x190]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x640]
call fcn.1400471d0
movss xmm9, dword [rbp + 0x19c]
movss xmm10, dword [rbp + 0x198]
test al, al
je 0x14004c31b
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x1a0], xmm10
movss dword [rbp + 0x1a4], xmm9
movss dword [rbp + 0x1a8], xmm8
movss dword [rbp + 0x1ac], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0x1a8]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x630]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x1b4]
movss xmm8, dword [rbp + 0x1b0]
test al, al
je 0x14004c3d1
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x1b8], xmm8
movss dword [rbp + 0x1bc], xmm7
movss dword [rbp + 0x1c0], xmm10
movss dword [rbp + 0x1c4], xmm9
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x1b8]
lea rdx, [rbp + 0x1c0]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0x620]
call fcn.1400471d0
movss xmm11, dword [rbp + 0x1cc]
movss xmm12, dword [rbp + 0x1c8]
test al, al
je 0x14004c488
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x1d0], xmm12
movss dword [rbp + 0x1d4], xmm11
movss dword [rbp + 0x1d8], xmm8
movss dword [rbp + 0x1dc], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x1d0]
lea rdx, [rbp + 0x1d8]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x710]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x1e4]
movss xmm8, dword [rbp + 0x1e0]
test al, al
je 0x14004c53e
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x1e8], xmm8
movss dword [rbp + 0x1ec], xmm7
movss dword [rbp + 0x1f0], xmm12
movss dword [rbp + 0x1f4], xmm11
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x1e8]
lea rdx, [rbp + 0x1f0]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x610]
call fcn.1400471d0
movss xmm9, dword [rbp + 0x1fc]
movss xmm10, dword [rbp + 0x1f8]
test al, al
je 0x14004c5f5
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x200], xmm10
movss dword [rbp + 0x204], xmm9
movss dword [rbp + 0x208], xmm8
movss dword [rbp + 0x20c], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x200]
lea rdx, [rbp + 0x208]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x6b0]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x214]
movss xmm8, dword [rbp + 0x210]
test al, al
je 0x14004c6ab
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x218], xmm8
movss dword [rbp + 0x21c], xmm7
movss dword [rbp + 0x220], xmm10
movss dword [rbp + 0x224], xmm9
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x218]
lea rdx, [rbp + 0x220]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x228]
lea rcx, [rbp + 0x600]
call fcn.1400471d0
test al, al
je 0x14004c75e
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss xmm0, dword [rbp + 0x228]
movss dword [rbp + 0x230], xmm0
movss xmm1, dword [rbp + 0x22c]
movss dword [rbp + 0x234], xmm1
movss dword [rbp + 0x238], xmm8
movss dword [rbp + 0x23c], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x230]
lea rdx, [rbp + 0x238]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0x5f0]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x244]
movss xmm8, dword [rbp + 0x240]
test al, al
je 0x14004c814
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x248], xmm8
movss dword [rbp + 0x24c], xmm7
movss dword [rbp + 0x250], xmm12
movss dword [rbp + 0x254], xmm11
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x248]
lea rdx, [rbp + 0x250]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x5e0]
call fcn.1400471d0
movss xmm9, dword [rbp + 0x25c]
movss xmm10, dword [rbp + 0x258]
test al, al
je 0x14004c8cb
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x260], xmm10
movss dword [rbp + 0x264], xmm9
movss dword [rbp + 0x268], xmm8
movss dword [rbp + 0x26c], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x260]
lea rdx, [rbp + 0x268]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x700]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x274]
movss xmm8, dword [rbp + 0x270]
test al, al
je 0x14004c981
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x278], xmm8
movss dword [rbp + 0x27c], xmm7
movss dword [rbp + 0x280], xmm10
movss dword [rbp + 0x284], xmm9
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x278]
lea rdx, [rbp + 0x280]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x288]
lea rcx, [rbp + 0x6e0]
call fcn.1400471d0
test al, al
je 0x14004ca34
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss xmm0, dword [rbp + 0x288]
movss dword [rbp + 0x290], xmm0
movss xmm1, dword [rbp + 0x28c]
movss dword [rbp + 0x294], xmm1
movss dword [rbp + 0x298], xmm8
movss dword [rbp + 0x29c], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x290]
lea rdx, [rbp + 0x298]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0x6d0]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x2a4]
movss xmm8, dword [rbp + 0x2a0]
test al, al
je 0x14004caea
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x2a8], xmm8
movss dword [rbp + 0x2ac], xmm7
movss dword [rbp + 0x2b0], xmm14
movss dword [rbp + 0x2b4], xmm13
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x2a8]
lea rdx, [rbp + 0x2b0]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x6c0]
call fcn.1400471d0
movss xmm9, dword [rbp + 0x2bc]
movss xmm10, dword [rbp + 0x2b8]
test al, al
je 0x14004cba1
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x2c0], xmm10
movss dword [rbp + 0x2c4], xmm9
movss dword [rbp + 0x2c8], xmm8
movss dword [rbp + 0x2cc], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x2c8]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x2d0]
lea rcx, [rbp + 0x6f0]
call fcn.1400471d0
test al, al
je 0x14004cc55
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss xmm0, dword [rbp + 0x2d0]
movss dword [rbp + 0x2d8], xmm0
movss xmm1, dword [rbp + 0x2d4]
movss dword [rbp + 0x2dc], xmm1
movss dword [rbp + 0x2e0], xmm10
movss dword [rbp + 0x2e4], xmm9
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x2d8]
lea rdx, [rbp + 0x2e0]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x2e8]
lea rcx, [rbp + 0x680]
call fcn.1400471d0
movss xmm9, dword [rbp + 0x2ec]
movss xmm10, dword [rbp + 0x2e8]
test al, al
je 0x14004cd0d
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x2f0], xmm10
movss dword [rbp + 0x2f4], xmm9
movss dword [rbp + 0x2f8], xmm14
movss dword [rbp + 0x2fc], xmm13
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x2f0]
lea rdx, [rbp + 0x2f8]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x690]
call fcn.1400471d0
movss xmm7, dword [rbp + 0x304]
movss xmm8, dword [rbp + 0x300]
test al, al
je 0x14004cdc3
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x308], xmm8
movss dword [rbp + 0x30c], xmm7
movss dword [rbp + 0x310], xmm10
movss dword [rbp + 0x314], xmm9
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x308]
lea rdx, [rbp + 0x310]
mov rcx, r10
call fcn.1400239b0
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x6a0]
call fcn.1400471d0
test al, al
je 0x14004ce76
movups xmm0, xmmword [0x14006c4e0]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm6, dword [0x14006c4dc]
cvtdq2ps xmm6, xmm6
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss xmm0, dword [rbp + 0x318]
movss dword [rbp + 0x320], xmm0
movss xmm1, dword [rbp + 0x31c]
movss dword [rbp + 0x324], xmm1
movss dword [rbp + 0x328], xmm8
movss dword [rbp + 0x32c], xmm7
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp + 0x320]
lea rdx, [rbp + 0x328]
mov rcx, r10
call fcn.1400239b0
movss xmm9, dword [rbp + 0x60]
movss xmm14, dword [rbp + 0x548]
movss xmm13, dword [rbp + 0x4c]
movss xmm12, dword [rbp - 0x18]
cmp byte [0x14006c520], 0
je 0x14004cf3a
movups xmm0, xmmword [0x14006c528]
movdqa xmmword [rbp + 0x530], xmm0
movd xmm8, dword [0x14006c524]
cvtdq2ps xmm8, xmm8
movss xmm7, dword [0x14006ce24]
movss xmm6, dword [0x14006ce28]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp + 0x530]
call fcn.140003080
movss dword [rbp + 0x330], xmm9
movss dword [rbp + 0x334], xmm13
movss dword [rbp + 0x338], xmm6
movss dword [rbp + 0x33c], xmm7
movss dword [rsp + 0x20], xmm8
mov r9d, eax
lea r8, [rbp + 0x330]
lea rdx, [rbp + 0x338]
mov rcx, r10
call fcn.1400239b0
cmp byte [0x14006c538], 0
je 0x14004d1cd
cmp byte [0x14006c540], 0
je 0x14004d308
movaps xmm7, xmmword [0x14005b4f0]
movups xmm9, xmmword [0x14006c5fc]
mov rdx, qword [0x1400673a8]
add rdx, rsi
mov dword [rbp + 0x548], edi
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x548]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, dword [rbp + 0x548]
lea rcx, [rbp + 0x4b0]
call fcn.1400403b0
nop
mov rcx, rax
call fcn.140050620
mov r15, rax
mov dword [rsp + 0x20], 0xff
mov edx, 0xff
mov r9d, edx
mov r8d, edx
lea rcx, [rbp + 0x4d0]
call fcn.14002d7a0
movups xmm10, xmmword [rax]
movups xmm11, xmmword [0x14006c5fc]
mov rcx, rsi
call fcn.140047470
mov edx, eax
lea rcx, [rbp + 0x500]
call fcn.1400403b0
mov rsi, rax
cmp qword [rax + 0x18], 0x10
jb 0x14004d000
mov rsi, qword [rax]
nop
movups xmm8, xmmword [0x14006c544]
mov rdx, qword [0x140067370]
add rdx, r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov qword [rsp + 0x20], rdi
mov r9d, 0x20
lea r8, [rbp + 0x18]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
bts r13d, 8
mov dword [rbp - 0x18], r13d
lea rdx, [rbp + 0x18]
mov r9, qword [rbp + 0x30]
cmp r9, 0x10
setae al
mov r10, qword [rbp + 0x18]
cmovae rdx, r10
lea r8, [rbp + 0x18]
test al, al
cmovne r8, r10
add r8, qword [rbp + 0x28]
cmp rdx, r8
je 0x14004d0a7
nop dword [rax + rax]
movzx eax, byte [rdx]
sub al, 0x20
cmp al, 0x5e
ja 0x14004d093
inc rdx
cmp rdx, r8
jne 0x14004d080
jmp 0x14004d0a7
xor r8d, r8d
lea rcx, [rbp + 0x18]
call fcn.1400507f0
mov r9, qword [rbp + 0x30]
mov r10, qword [rbp + 0x18]
lea rdi, [rbp + 0x18]
cmp r9, 0x10
cmovae rdi, r10
movss xmm6, dword [rbp + 0x3c]
subss xmm6, dword [0x14005ae24]
mov rbx, qword [0x14006cdf0]
mov rcx, qword [0x14006cd40]
mov rcx, qword [rcx + 0x40b0]
mov rcx, qword [rcx]
call fcn.140005b70
movdqa xmmword [rbp + 0x530], xmm7
movdqa xmmword [rbp + 0x470], xmm9
movdqa xmmword [rbp + 0x480], xmm10
movdqa xmmword [rbp + 0x370], xmm11
movdqa xmmword [rbp + 0x70], xmm7
movdqa xmmword [rbp - 0x70], xmm8
lea rcx, [rbp + 0x530]
mov qword [rsp + 0x78], rcx
lea rcx, [0x140059a24]
mov qword [rsp + 0x70], rcx
lea rcx, [rbp + 0x470]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x60], r15
lea rcx, [rbp + 0x480]
mov qword [rsp + 0x58], rcx
lea rcx, [0x14005aa84]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 0x370]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x40], rsi
lea rcx, [rbp + 0x70]
mov qword [rsp + 0x38], rcx
lea rcx, [0x14005aa88]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdi
movss xmm0, dword [rbp + 0x60]
unpcklps xmm0, xmm6
movq r9, xmm0
mov r8d, 0xd
mov rdx, rbx
mov rcx, rax
call fcn.140048250
btr r13d, 8
lea rcx, [rbp + 0x18]
call fcn.140050630
nop
lea rcx, [rbp + 0x500]
call fcn.140050630
nop
lea rcx, [rbp + 0x4b0]
call fcn.140050630
mov rsi, qword [rbp + 0x558]
movss xmm7, dword [rbp + 0x3c]
cmp byte [0x14006c4f0], 0
je 0x14004d20d
movups xmm0, xmmword [0x14006c4f4]
movdqa xmmword [rbp - 0x70], xmm0
mov byte [rsp + 0x28], 1
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
movaps xmm3, xmm13
movss xmm2, dword [rbp + 0x560]
movaps xmm1, xmm7
movaps xmm0, xmm15
call fcn.140047b90
cmp byte [0x14006c4a8], 0
je 0x14004d3b8
movups xmm0, xmmword [0x14006c4ac]
movdqa xmmword [rbp - 0x70], xmm0
mulss xmm12, dword [0x14005ad2c]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov rbx, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
mov edi, eax
movss xmm0, dword [rbp + 0x568]
movss dword [rbp + 0x348], xmm0
movss xmm1, dword [rbp + 0x54c]
movss dword [rbp + 0x34c], xmm1
test eax, 0xff000000
je 0x14004d3b8
movss xmm0, dword [0x14005ad50]
xorps xmm10, xmm10
comiss xmm0, xmm12
ja 0x14004d3bc
subss xmm12, xmm0
mov dword [rsp + 0x28], 0xf
movss xmm0, dword [0x14005ae04]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
movaps xmm2, xmm12
lea rdx, [rbp + 0x348]
mov rcx, rbx
call fcn.140023010
movss xmm11, dword [0x14005ad8c]
movss dword [rsp + 0x28], xmm11
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140021650
mov dword [rbx + 0x78], 0
jmp 0x14004d3c5
movups xmm6, xmmword [0x14006c544]
movss xmm7, dword [rbp + 0x3c]
movaps xmm0, xmm7
subss xmm0, dword [0x14005ae24]
movss dword [rbp + 0x340], xmm9
movss dword [rbp + 0x344], xmm0
lea rdx, [rbp + 0x4e0]
mov rcx, r14
call fcn.140047a10
nop
mov rcx, rax
call fcn.140050620
mov rdx, rax
lea rcx, [rbp + 0x490]
call fcn.140050690
nop
mov rbx, qword [0x14006cdf0]
call fcn.140005b80
movdqa xmmword [rbp - 0x70], xmm6
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x28], rcx
movss xmm0, dword [0x14005ae2c]
movss dword [rsp + 0x20], xmm0
lea r9, [rbp + 0x340]
lea r8, [rbp + 0x490]
mov rdx, rbx
mov rcx, rax
call fcn.140047cf0
nop
lea rcx, [rbp + 0x490]
call fcn.140050630
nop
lea rcx, [rbp + 0x4e0]
call fcn.140050630
jmp 0x14004d1d2
xorps xmm10, xmm10
movss xmm11, dword [0x14005ad8c]
xor ebx, ebx
cmp byte [0x14006c5d8], bl
je 0x14004d649
mov rdx, qword [0x1400673a8]
add rdx, rsi
mov dword [rbp + 0x548], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 4]
lea r8, [rbp + 0x548]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm9, dword [rbp + 0x548]
cvtdq2ps xmm9, xmm9
movaps xmm0, xmmword [0x14005b200]
movaps xmmword [rbp - 0x70], xmm0
movaps xmm1, xmm0
movaps xmmword [rbp + 0x70], xmm0
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
mov r8d, eax
lea rcx, [rbp + 0x70]
call fcn.140003080
movaps xmm0, xmm15
subss xmm0, dword [0x14005ade0]
movss dword [rbp + 0x350], xmm0
movss dword [rbp + 0x354], xmm13
movaps xmm1, xmm15
subss xmm1, dword [0x14005ae08]
movss dword [rbp + 0x358], xmm1
movss dword [rbp + 0x35c], xmm7
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, eax
lea r8, [rbp + 0x350]
lea rdx, [rbp + 0x358]
mov rcx, r10
call fcn.140023dd0
mov rdx, qword [0x140067398]
add rdx, rsi
mov dword [rbp + 0x548], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 4]
lea r8, [rbp + 0x548]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm0, dword [rbp + 0x548]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm9
jbe 0x14004d683
movups xmm0, xmmword [0x14006c5fc]
movdqa xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [0x14006c5ec]
movdqa xmmword [rbp + 0x70], xmm1
movaps xmm7, xmm13
addss xmm7, xmm11
subss xmm7, xmm14
subss xmm13, xmm11
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
mov r8d, eax
lea rcx, [rbp + 0x70]
call fcn.140003080
movaps xmm6, xmm15
subss xmm6, dword [0x14005adf4]
movss dword [rbp + 0x360], xmm6
movss dword [rbp + 0x364], xmm7
subss xmm15, dword [0x14005adf8]
movss dword [rbp + 0x368], xmm15
movss dword [rbp + 0x36c], xmm13
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, eax
lea r8, [rbp + 0x360]
lea rdx, [rbp + 0x368]
mov rcx, r10
call fcn.140023dd0
movups xmm0, xmmword [0x14006c5dc]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmmword [rbp + 0x70], xmm0
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
mov r8d, eax
lea rcx, [rbp + 0x70]
call fcn.140003080
movss dword [rbp + 0xf4], xmm6
movss dword [rbp + 0xf8], xmm7
movss dword [rbp + 0xfc], xmm15
movss dword [rbp + 0x100], xmm13
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, eax
lea r8, [rbp + 0xf4]
lea rdx, [rbp + 0xfc]
mov rcx, r10
call fcn.140023dd0
movss xmm8, dword [0x14005b510]
mov ecx, dword [0x14006c430]
test ecx, ecx
je 0x14004d79e
sub ecx, 1
je 0x14004d790
cmp ecx, 1
jne 0x14004d79e
movss xmm12, dword [rbp + 0x10]
movss xmm13, dword [rbp + 0x14]
jmp 0x14004d7b0
movups xmm7, xmmword [0x14006c5fc]
movups xmm6, xmmword [0x14006c5ec]
mov rdx, qword [0x140067398]
add rdx, rsi
mov dword [rbp + 0x548], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 4
lea r8, [rbp + 0x548]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm8, xmm13
addss xmm8, xmm11
movd xmm0, dword [rbp + 0x548]
cvtdq2ps xmm0, xmm0
divss xmm0, xmm9
mulss xmm0, xmm14
subss xmm8, xmm0
movdqa xmmword [rbp - 0x70], xmm7
movdqa xmmword [rbp + 0x70], xmm6
subss xmm13, xmm11
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
mov r8d, eax
lea rcx, [rbp + 0x70]
call fcn.140003080
movaps xmm0, xmm15
subss xmm0, dword [0x14005adf4]
movss dword [rbp + 0x104], xmm0
movss dword [rbp + 0x108], xmm8
subss xmm15, dword [0x14005adf8]
movss dword [rbp + 0x10c], xmm15
movss dword [rbp + 0x110], xmm13
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], eax
mov r9d, eax
lea r8, [rbp + 0x104]
lea rdx, [rbp + 0x10c]
jmp 0x14004d641
xorps xmm10, xmm10
xor ebx, ebx
jmp 0x14004d652
movss xmm12, dword [rbp + 0x58]
movss xmm13, dword [rbp + 0x5c]
jmp 0x14004d7b0
movss xmm13, dword [rbp + 0x54c]
movss xmm12, dword [rbp + 0x568]
movss xmm1, dword [rbp + 0x598]
subss xmm1, dword [rbp + 0x5a8]
movss xmm2, dword [rbp + 0x594]
subss xmm2, dword [rbp + 0x5a4]
movss xmm0, dword [rbp + 0x590]
subss xmm0, dword [rbp + 0x5a0]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14004d805
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14004d80d
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
andps xmm0, xmm8
movss xmm9, dword [0x14005ae24]
divss xmm0, xmm9
movd xmm1, dword [0x14006c3fc]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x14004d8c7
movss xmm0, dword [0x14006ce28]
movss xmm1, dword [0x14006ce2c]
subss xmm0, xmm12
subss xmm1, xmm13
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
xorps xmm0, xmm0
cmp dword [0x14006c448], 0
jne 0x14004d8d8
ucomiss xmm0, xmm1
ja 0x14004d873
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14004d87b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movd xmm1, dword [0x14006c3f4]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x14004d8c7
movss xmm1, dword [rbp - 0x14]
comiss xmm1, xmm0
jbe 0x14004d8c7
movss dword [rbp - 0x14], xmm0
movaps xmm11, xmm12
movss dword [rbp - 0x7c], xmm12
movaps xmm14, xmm13
movss dword [rbp - 0x80], xmm13
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x28], rsi
movss xmm12, dword [rbp - 0x74]
movss xmm13, dword [rbp - 0x78]
jmp 0x14004df52
movss xmm12, dword [rbp - 0x74]
movss xmm13, dword [rbp - 0x78]
jmp 0x14004df3e
ucomiss xmm0, xmm1
ja 0x14004d8e6
xorps xmm6, xmm6
sqrtss xmm6, xmm1
jmp 0x14004d8f1
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x3f0], xmm1
mov qword [rbp + 0x400], rbx
mov qword [rbp + 0x408], rbx
mov r8d, 6
lea rdx, str.pelvis
lea rcx, [rbp + 0x3f0]
call fcn.140051390
lea rdx, [rbp + 0x3f0]
mov rcx, r14
call fcn.140047690
mov ebx, eax
test r12, r12
je 0x14004d9d2
mov rcx, r12
call fcn.140047600
test rax, rax
je 0x14004d9d2
mov rdx, qword [0x140067360]
sub rdx, 0xffffffffffffff80
add rdx, rax
xor eax, eax
mov qword [rbp + 0x728], rax
mov qword [rsp + 0x20], rax
lea r9d, [rax + 8]
lea r8, [rbp + 0x728]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x728]
test rax, rax
je 0x14004d9d2
mov qword [rbp + 0x40], 0
mov dword [rbp + 0x48], 0
shl ebx, 5
movsxd rdx, ebx
add rdx, rax
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp + 0x40]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x48]
movss xmm3, dword [rbp + 0x44]
movss xmm4, dword [rbp + 0x40]
jmp 0x14004d9ec
xorps xmm4, xmm4
movss dword [rbp + 0x40], xmm4
xorps xmm3, xmm3
movss dword [rbp + 0x44], xmm3
xorps xmm0, xmm0
movss dword [rbp + 0x48], xmm0
xor ebx, ebx
movss xmm1, dword [rbp + 0x578]
subss xmm1, xmm0
movss xmm2, dword [rbp + 0x574]
subss xmm2, xmm3
movss xmm0, dword [rbp + 0x570]
subss xmm0, xmm4
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14004da35
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14004da3d
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movd xmm1, dword [0x14006c3f4]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm6
jbe 0x14004d8c7
movss xmm1, dword [rbp - 0x14]
comiss xmm1, xmm0
jbe 0x14004d8c7
movss dword [rbp - 0x14], xmm0
movaps xmm11, xmm12
movss dword [rbp - 0x7c], xmm12
movaps xmm14, xmm13
movss dword [rbp - 0x80], xmm13
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x28], rsi
movss xmm12, dword [rbp - 0x74]
movss xmm13, dword [rbp - 0x78]
jmp 0x14004df52
lea rdx, [rbp + 0x118]
mov rcx, r14
call fcn.1400474d0
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14004daae
mov rax, qword [rax]
cmp r8, 7
jne 0x14004dacb
lea rdx, str.item_xp
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14004dacb
mov bl, 1
jmp 0x14004dacd
xor bl, bl
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x14004db0e
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004db09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004dfa6
call fcn.140051b40
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x130], 0xf
mov byte [rbp + 0x118], 0
test bl, bl
je 0x14004df3c
xor ebx, ebx
mov dword [rbp + 0x5d8], ebx
lea rdx, [r14 + 0x30]
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 4]
lea r8, [rbp + 0x5d8]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x5d8], 1
jne 0x14004df3e
mov rdx, qword [0x140067358]
add rdx, r14
mov qword [rbp + 0x558], rbx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 8]
lea r8, [rbp + 0x558]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1400673b0]
add rdx, qword [rbp + 0x558]
mov qword [rbp + 0xe8], rbx
mov dword [rbp + 0xf0], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp + 0xe8]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xe8]
call fcn.1400471d0
test al, al
je 0x14004df3e
movss xmm6, dword [rbp - 0x2c]
movss xmm7, dword [rbp - 0x30]
cmp byte [0x14006c508], bl
je 0x14004dd7e
mov rdx, qword [0x140067358]
add rdx, r14
mov qword [rbp + 0x558], rbx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 8]
lea r8, [rbp + 0x558]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1400673b0]
add rdx, qword [rbp + 0x558]
mov qword [rbp + 0xa4], rbx
mov dword [rbp + 0xac], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp + 0xa4]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140067358]
add rdx, r12
mov qword [rbp + 0x558], rbx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 8]
lea r8, [rbp + 0x558]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1400673b0]
add rdx, qword [rbp + 0x558]
mov qword [rbp + 0x98], rbx
mov dword [rbp + 0xa0], ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rbp + 0x98]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp + 0xac]
subss xmm1, dword [rbp + 0xa0]
movss xmm2, dword [rbp + 0xa8]
subss xmm2, dword [rbp + 0x9c]
movss xmm0, dword [rbp + 0xa4]
subss xmm0, dword [rbp + 0x98]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14004dd1e
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14004dd26
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
andps xmm0, xmm8
divss xmm0, xmm9
movd xmm1, dword [0x14006c50c]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x14004dd7e
movups xmm0, xmmword [0x14006c510]
movdqa xmmword [rbp - 0x70], xmm0
movaps xmm3, xmm6
addss xmm3, xmm11
movaps xmm2, xmm7
addss xmm2, xmm11
movaps xmm1, xmm6
subss xmm1, xmm11
movaps xmm0, xmm7
subss xmm0, xmm11
mov byte [rsp + 0x28], 1
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
call fcn.140047b90
mov rdx, qword [0x140067358]
add rdx, r14
mov qword [rbp + 0x558], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x558]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1400673b0]
add rdx, qword [rbp + 0x558]
mov qword [rbp + 0xbc], rbx
mov dword [rbp + 0xc4], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0xc
lea r8, [rbp + 0xbc]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140067358]
add rdx, r12
mov qword [rbp + 0x540], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x540]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1400673b0]
add rdx, qword [rbp + 0x540]
mov qword [rbp + 0xb0], rbx
mov dword [rbp + 0xb8], ebx
mov qword [rsp + 0x20], rbx
mov r9d, 0xc
lea r8, [rbp + 0xb0]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp + 0xc4]
subss xmm1, dword [rbp + 0xb8]
movss xmm0, dword [rbp + 0xc0]
subss xmm0, dword [rbp + 0xb4]
movss xmm2, dword [rbp + 0xbc]
subss xmm2, dword [rbp + 0xb0]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x14004dea7
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14004deaf
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
andps xmm0, xmm8
divss xmm0, xmm9
movd xmm1, dword [0x14006c400]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x14004df3e
movss xmm0, dword [0x14006ce28]
subss xmm0, xmm7
movss xmm1, dword [0x14006ce2c]
subss xmm1, xmm6
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14004defd
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14004df05
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movd xmm1, dword [0x14006c3f8]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x14004df3e
movss xmm1, dword [rbp + 0x50]
comiss xmm1, xmm0
jbe 0x14004df3e
movss dword [rbp + 0x50], xmm0
movaps xmm13, xmm7
movss dword [rbp - 0x78], xmm7
movaps xmm12, xmm6
movss dword [rbp - 0x74], xmm6
jmp 0x14004df3e
xorps xmm10, xmm10
xor ebx, ebx
movss xmm11, dword [rbp - 0x7c]
movss xmm14, dword [rbp - 0x80]
mov rsi, qword [rbp - 0x28]
mov r14, qword [rbp - 0x20]
mov eax, dword [rbp + 0x54]
inc eax
mov dword [rbp + 0x54], eax
mov r15, 0xffffffffffffffff
cmp eax, dword [rbp + 0x554]
jg 0x14004dfad
mov rdi, qword [rbp + 0x3a8]
jmp 0x140049d41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm15, dword [0x14005afb4]
cmp byte [0x14006c450], 0
jne 0x14004e0f2
cmp byte [0x14006c3f0], 0
je 0x14004e0f2
ucomiss xmm11, xmm15
jp 0x14004dfe4
jne 0x14004dfe4
ucomiss xmm14, xmm15
jp 0x14004dfe4
je 0x14004e0f2
cmp byte [0x14006c4c0], 0
je 0x14004e075
movups xmm0, xmmword [0x14006c4c8]
movdqa xmmword [rbp - 0x70], xmm0
movd xmm8, dword [0x14006c4c4]
cvtdq2ps xmm8, xmm8
movss xmm7, dword [0x14006ce2c]
movss xmm6, dword [0x14006ce28]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
movss dword [rbp - 0x30], xmm11
movss dword [rbp - 0x2c], xmm14
movss dword [rbp + 0x58], xmm6
movss dword [rbp + 0x5c], xmm7
movss dword [rsp + 0x20], xmm8
mov r9d, eax
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x58]
mov rcx, r10
call fcn.1400239b0
movaps xmm0, xmm11
subss xmm0, dword [0x14006ce28]
movaps xmm1, xmm14
subss xmm1, dword [0x14006ce2c]
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x14004e0aa
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x14004e0b2
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm14, dword [0x14005ad8c]
comiss xmm0, xmm14
jbe 0x14004e0fb
mov ecx, dword [0x14006c40c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14004e0fb
movss xmm1, dword [0x14006c404]
movaps xmm0, xmm11
movss xmm2, dword [rbp - 0x80]
unpcklps xmm0, xmm2
movq rcx, xmm0
call fcn.140049940
jmp 0x14004e0fb
movss xmm14, dword [0x14005ad8c]
movss xmm7, dword [0x14005ae10]
cmp byte [0x14006c3f1], 0
je 0x14004e268
cmp byte [0x14006c591], 0
je 0x14004e268
movups xmm0, xmmword [0x14006c5a4]
movdqa xmmword [rbp - 0x70], xmm0
movd xmm6, dword [0x14006c3f8]
cvtdq2ps xmm6, xmm6
movss xmm8, dword [0x14006ce2c]
movss xmm9, dword [0x14006ce28]
lea rcx, [rbp - 0x70]
call fcn.140003080
mov edi, eax
mov rax, qword [0x14006cd40]
lea r8, str.Background
xor edx, edx
mov rax, qword [rax + 0x40b0]
mov rcx, qword [rax]
cmp byte [0x14006c592], dl
je 0x14004e1e9
call fcn.1400059c0
mov rbx, rax
movss dword [rbp - 0x30], xmm9
movss dword [rbp - 0x2c], xmm8
movss xmm11, dword [0x14005ad50]
test edi, 0xff000000
je 0x14004e271
comiss xmm11, xmm6
ja 0x14004e271
mov dword [rsp + 0x28], 0x3f
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm10
movaps xmm2, xmm6
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.140023010
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140022550
xor r12d, r12d
mov dword [rbx + 0x78], r12d
jmp 0x14004e274
call fcn.1400059c0
mov rbx, rax
movss dword [rbp - 0x30], xmm9
movss dword [rbp - 0x2c], xmm8
movss xmm11, dword [0x14005ad50]
test edi, 0xff000000
je 0x14004e271
comiss xmm11, xmm6
ja 0x14004e271
subss xmm6, xmm11
mov dword [rsp + 0x28], 0x3f
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm10
movaps xmm2, xmm6
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.140023010
movss dword [rsp + 0x28], xmm14
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140021650
xor r12d, r12d
mov dword [rbx + 0x78], r12d
jmp 0x14004e274
movss xmm11, dword [0x14005ad50]
xor r12d, r12d
cmp byte [0x14006c3f0], 0
je 0x14004e3ca
cmp byte [0x14006c590], 0
je 0x14004e3ca
movups xmm0, xmmword [0x14006c594]
movdqa xmmword [rbp - 0x70], xmm0
movd xmm6, dword [0x14006c3f4]
cvtdq2ps xmm6, xmm6
movss xmm8, dword [0x14006ce2c]
movss xmm9, dword [0x14006ce28]
lea rcx, [rbp - 0x70]
call fcn.140003080
mov edi, eax
mov rax, qword [0x14006cd40]
lea r8, str.Background
xor edx, edx
mov rax, qword [rax + 0x40b0]
mov rcx, qword [rax]
cmp byte [0x14006c592], dl
je 0x14004e350
call fcn.1400059c0
mov rbx, rax
movss dword [rbp + 0x540], xmm9
movss dword [rbp + 0x544], xmm8
test edi, 0xff000000
je 0x14004e3ca
comiss xmm11, xmm6
ja 0x14004e3ca
mov dword [rsp + 0x28], 0x3f
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm10
movaps xmm2, xmm6
lea rdx, [rbp + 0x540]
mov rcx, rax
call fcn.140023010
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140022550
jmp 0x14004e3c6
call fcn.1400059c0
mov rbx, rax
movss dword [rbp + 0x540], xmm9
movss dword [rbp + 0x544], xmm8
test edi, 0xff000000
je 0x14004e3ca
comiss xmm11, xmm6
ja 0x14004e3ca
subss xmm6, xmm11
mov dword [rsp + 0x28], 0x3f
movss dword [rsp + 0x20], xmm7
movaps xmm3, xmm10
movaps xmm2, xmm6
lea rdx, [rbp + 0x540]
mov rcx, rax
call fcn.140023010
movss dword [rsp + 0x28], xmm14
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140021650
mov dword [rbx + 0x78], r12d
mov ecx, dword [0x14006c410]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14004e47c
cmp byte [0x14006c3f1], 0
je 0x14004e47c
cmp dword [0x14006c410], 0
je 0x14004e418
cmp dword [0x14006c40c], 0
je 0x14004e418
movss xmm0, dword [rbp - 0x7c]
ucomiss xmm0, xmm15
jp 0x14004e40b
je 0x14004e418
movss xmm0, dword [rbp - 0x80]
ucomiss xmm0, xmm15
jp 0x14004e47c
jne 0x14004e47c
ucomiss xmm13, xmm15
jp 0x14004e428
jne 0x14004e428
ucomiss xmm12, xmm15
jp 0x14004e428
je 0x14004e47c
subss xmm13, dword [0x14006ce28]
subss xmm12, dword [0x14006ce2c]
mulss xmm12, xmm12
mulss xmm13, xmm13
addss xmm12, xmm13
xorps xmm0, xmm0
ucomiss xmm0, xmm12
ja 0x14004e45c
xorps xmm0, xmm0
sqrtss xmm0, xmm12
jmp 0x14004e465
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, xmm14
jbe 0x14004e47c
movss xmm1, dword [0x14006c408]
mov rcx, qword [rbp - 0x78]
call fcn.140049940
movss xmm15, dword [0x14005ae30]
cmp byte [0x14006c450], 0
jne 0x14004ebd8
cmp byte [0x14006c3f0], 0
je 0x14004ebd8
cmp byte [0x14006c558], 0
je 0x14004ebd8
test r14, r14
je 0x14004ebd8
test rsi, rsi
je 0x14004ebd8
mov rdx, qword [0x140067370]
add rdx, r14
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x14005b010]
movdqu xmmword [rbp], xmm1
mov byte [rbp - 0x10], 0
mov qword [rsp + 0x20], r12
mov r9d, 0x20
lea r8, [rbp - 0x10]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
or r13d, 4
mov dword [rbp - 0x18], r13d
lea rdx, [rbp - 0x10]
mov r9, qword [rbp - 0x10]
mov r10, qword [rbp + 8]
cmp r10, 0x10
cmovae rdx, r9
lea r8, [rbp - 0x10]
cmovae r8, r9
add r8, qword [rbp]
cmp rdx, r8
je 0x14004e557
nop dword [rax]
movzx eax, byte [rdx]
sub al, 0x20
cmp al, 0x5e
ja 0x14004e543
inc rdx
cmp rdx, r8
jne 0x14004e530
jmp 0x14004e557
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.1400507f0
mov r10, qword [rbp + 8]
mov r9, qword [rbp - 0x10]
lea rax, [rbp - 0x10]
cmp r10, 0x10
cmovae rax, r9
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm10
movss xmm3, dword [0x14005af9c]
movaps xmm2, xmm15
lea rdx, [rbp + 0x540]
mov rcx, qword [0x14006cdf0]
call fcn.1400285b0
and r13d, 0xfffffffb
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x14004e5d5
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e5d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e5d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051b40
movdqa xmm0, xmmword [0x14005b010]
movdqu xmmword [rbp], xmm0
mov byte [rbp - 0x10], 0
movaps xmm1, xmmword [0x14005b1a0]
movss xmm12, dword [rbp + 0x544]
mulss xmm12, xmm11
movaps xmm8, xmm12
movss xmm9, dword [0x14006ce2c]
addss xmm8, xmm9
addss xmm8, dword [0x14005aef8]
movss xmm14, dword [rbp + 0x540]
movaps xmm13, xmm14
mulss xmm13, dword [0x14005ad50]
movaps xmm6, xmm13
movss xmm7, dword [0x14006ce28]
addss xmm6, xmm7
addss xmm6, dword [0x14005ae24]
subss xmm9, xmm12
addss xmm9, dword [0x14005aee4]
subss xmm7, xmm13
subss xmm7, dword [0x14005ae24]
movdqa xmmword [rbp - 0x70], xmm1
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
movss dword [rbp + 0x540], xmm6
movss dword [rbp + 0x544], xmm8
movss dword [rbp - 0x30], xmm7
movss dword [rbp - 0x2c], xmm9
mov dword [rsp + 0x28], r12d
movss xmm0, dword [0x14005ad8c]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x540]
lea rdx, [rbp - 0x30]
mov rcx, r10
call fcn.140023c20
movaps xmm0, xmmword [0x14005b350]
movaps xmm8, xmm12
movss xmm9, dword [0x14006ce2c]
addss xmm8, xmm9
addss xmm8, dword [0x14005aef8]
movaps xmm6, xmm13
movss xmm7, dword [0x14006ce28]
addss xmm6, xmm7
addss xmm6, dword [0x14005ae24]
subss xmm9, xmm12
addss xmm9, dword [0x14005aee4]
subss xmm7, xmm13
subss xmm7, dword [0x14005ae24]
movdqa xmmword [rbp - 0x70], xmm0
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
movss dword [rbp + 0x540], xmm6
movss dword [rbp + 0x544], xmm8
movss dword [rbp - 0x30], xmm7
movss dword [rbp - 0x2c], xmm9
movss xmm0, dword [0x14005adb0]
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [0x14005ad8c]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp + 0x540]
lea rdx, [rbp - 0x30]
mov rcx, r10
call fcn.140023b10
addss xmm14, dword [0x14005ae3c]
mov rdx, qword [0x1400673a8]
add rdx, rsi
mov dword [rbp + 0x554], r12d
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x554]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm11, dword [rbp + 0x554]
cvtdq2ps xmm11, xmm11
mov rdx, qword [0x140067398]
add rdx, rsi
mov dword [rbp + 0x554], r12d
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x554]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm0, dword [rbp + 0x554]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm11
jbe 0x14004e8d0
movups xmm0, xmmword [0x14006c580]
movdqa xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [0x14006c570]
movdqa xmmword [rbp - 0x70], xmm1
addss xmm12, dword [0x14006ce2c]
movaps xmm8, xmm12
addss xmm8, dword [0x14005aefc]
movss xmm7, dword [0x14006ce28]
subss xmm7, xmm13
subss xmm7, dword [0x14005ae24]
movaps xmm6, xmm7
addss xmm6, xmm14
addss xmm12, dword [0x14005aeec]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
mov r9d, eax
lea rcx, [rbp + 0x70]
call fcn.140003080
movss dword [rbp + 0x544], xmm8
movss dword [rbp - 0x30], xmm7
jmp 0x14004e9b9
movups xmm8, xmmword [0x14006c580]
movups xmm7, xmmword [0x14006c570]
movaps xmm10, xmm12
addss xmm10, dword [0x14006ce2c]
addss xmm10, dword [0x14005aefc]
mov rdx, qword [0x140067398]
add rdx, rsi
mov dword [rbp + 0x554], r12d
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x554]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm9, dword [0x14006ce28]
subss xmm9, xmm13
subss xmm9, dword [0x14005ae24]
movd xmm6, dword [rbp + 0x554]
cvtdq2ps xmm6, xmm6
divss xmm6, xmm11
mulss xmm6, xmm14
addss xmm6, xmm9
addss xmm12, dword [0x14006ce2c]
addss xmm12, dword [0x14005aeec]
movdqa xmmword [rbp + 0x70], xmm8
movdqa xmmword [rbp - 0x70], xmm7
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
mov r10, rax
lea rcx, [rbp - 0x70]
call fcn.140003080
mov r9d, eax
lea rcx, [rbp + 0x70]
call fcn.140003080
movss dword [rbp + 0x544], xmm10
movss dword [rbp - 0x30], xmm9
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
movss dword [rbp + 0x540], xmm6
movss dword [rbp - 0x2c], xmm12
lea r8, [rbp + 0x540]
lea rdx, [rbp - 0x30]
mov rcx, r10
call fcn.140023dd0
movups xmm6, xmmword [0x14006c560]
movss xmm1, dword [0x14006ce2c]
addss xmm1, dword [0x14005aee8]
movss xmm0, dword [0x14006ce28]
movss dword [rbp + 0x540], xmm0
movss dword [rbp + 0x544], xmm1
mov rdx, qword [0x140067370]
add rdx, r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
movdqa xmm1, xmmword [0x14005b010]
movdqu xmmword [rbp + 0x28], xmm1
mov byte [rbp + 0x18], 0
mov qword [rsp + 0x20], r12
mov r9d, 0x20
lea r8, [rbp + 0x18]
mov rcx, qword [0x14006c4a0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
or r13d, 8
mov dword [rbp - 0x18], r13d
lea rdx, [rbp + 0x18]
mov r9, qword [rbp + 0x18]
mov r10, qword [rbp + 0x30]
cmp r10, 0x10
cmovae rdx, r9
lea rcx, [rbp + 0x18]
cmovae rcx, r9
mov r8, qword [rbp + 0x28]
add r8, rcx
cmp rdx, r8
je 0x14004eaab
movzx eax, byte [rdx]
sub al, 0x20
cmp al, 0x5e
ja 0x14004ea97
inc rdx
cmp rdx, r8
jne 0x14004ea84
jmp 0x14004eaab
xor r8d, r8d
lea rcx, [rbp + 0x18]
call fcn.1400507f0
mov r10, qword [rbp + 0x30]
mov r9, qword [rbp + 0x18]
lea rdx, [rbp + 0x18]
cmp r10, 0x10
cmovae rdx, r9
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd8], xmm1
nop dword [rax]
inc r15
cmp byte [rdx + r15], 0
jne 0x14004ead0
mov r8, r15
lea rcx, [rbp + 0xc8]
call fcn.140051390
nop
mov rbx, qword [0x14006cdf0]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
movdqa xmmword [rbp - 0x70], xmm6
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm15
lea r9, [rbp + 0x540]
lea r8, [rbp + 0xc8]
mov rdx, rbx
mov rcx, rax
call fcn.140047cf0
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x14004eb83
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004eb7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004eb7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051b40
movdqa xmm0, xmmword [0x14005b010]
movdqu xmmword [rbp + 0xd8], xmm0
mov byte [rbp + 0xc8], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x14004ebd8
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ebd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ebd3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051b40
movaps xmm6, xmmword [0x14005b4f0]
movss xmm0, dword [0x14005af08]
movss dword [rbp + 0x540], xmm0
mov dword [rbp + 0x544], 0x41a00000
xorps xmm1, xmm1
movups xmmword [rbp + 0x118], xmm1
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x128], xmm0
mov r8d, 0x23
lea rdx, str.johanna.cc______made___by___pirolo
lea rcx, [rbp + 0x118]
call fcn.140051390
nop
mov rbx, qword [0x14006cd58]
mov rax, qword [0x14006cd40]
mov rax, qword [rax + 0x40b0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400059c0
movdqa xmmword [rbp - 0x70], xmm6
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm15
lea r9, [rbp + 0x540]
lea r8, [rbp + 0x118]
mov rdx, rbx
mov rcx, rax
call fcn.140047cf0
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0x10
jb 0x14004ecc1
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ecbc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ecbc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051b40
mov rcx, qword [rbp + 0x738]
xor rcx, rsp
call fcn.140051a50
lea r11, [rsp + 0x8e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret