Function at 0x140006180
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x448]
sub rsp, 0x520
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400df080]
xor rax, rsp
mov qword [rbp + 0x370], rax
xor r12d, r12d
mov dword [rsp + 0x60], r12d
lea ecx, [r12 + 1]
call fcn.1400b4ac4
mov rcx, qword [0x1400e2650]
add rcx, 0x2165e48
call fcn.140009da0
mov r13, rax
mov qword [rsp + 0x68], rax
cmp byte [0x1400dff03], r12b
jne 0x140006368
lea rcx, str.win32u
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserSendInput
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1400062a3
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserSendInput
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1400062a3
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.SendInput
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140006368
lea rcx, str.win32u
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserGetAsyncKeyState
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x140006312
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtUserGetAsyncKeyState
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
jne 0x140006312
lea rcx, str.user32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [0x1400c67b8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rax
test rax, rax
je 0x140006368
movups xmm0, xmmword [rbx]
movups xmmword [0x1400e2a90], xmm0
movsd xmm1, qword [rbx + 0x10]
movsd qword [0x1400e2aa0], xmm1
mov eax, dword [rbx + 0x18]
mov dword [0x1400e2aa8], eax
movzx eax, word [rbx + 0x1c]
mov word [0x1400e2aac], ax
movups xmm0, xmmword [rcx]
movups xmmword [0x1400e2ab0], xmm0
movsd xmm1, qword [rcx + 0x10]
movsd qword [0x1400e2ac0], xmm1
mov eax, dword [rcx + 0x18]
mov dword [0x1400e2ac8], eax
movzx eax, word [rcx + 0x1c]
mov word [0x1400e2acc], ax
xorps xmm10, xmm10
movss xmm14, dword [0x1400ce9a8]
cmp byte [0x1400dff0b], r12b
jne 0x1400063af
cmp byte [0x1400e01c9], r12b
jne 0x1400063af
cmp byte [0x1400dff00], r12b
jne 0x1400063af
cmp byte [0x1400dff0f], r12b
jne 0x1400063af
cmp byte [0x1400dff09], r12b
jne 0x1400063af
cmp byte [0x1400dff0e], r12b
je 0x14000777c
xor esi, esi
mov dword [rsp + 0x60], esi
xor r15d, r15d
mov qword [rsp + 0x58], r15
movzx ebx, byte [rsp + 0x50]
movss xmm12, dword [0x1400cea50]
movss xmm15, dword [0x1400ceadc]
movss xmm13, dword [0x1400cea08]
nop dword [rax]
mov rdi, qword [0x1400e2650]
add rdi, 0x1db73e8
mov rcx, rdi
call fcn.140009da0
test rax, rax
je 0x140007726
mov eax, esi
shl eax, 5
movsxd rcx, eax
add rcx, rdi
call fcn.140009da0
mov r14, rax
test rax, rax
je 0x140007726
cmp r13, rax
je 0x140007726
mov rax, qword [rsp + 0x58]
lea rsi, [rax + rax*4]
add rsi, rsi
lea r15, [0x140000000]
movss xmm6, dword [r15 + rsi*8 + 0xe01d0]
cvtps2pd xmm6, xmm6
divsd xmm6, qword [0x1400cea10]
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x1400c67cc]
call fcn.1400029a0
movsxd rdi, eax
mov rdx, rdi
lea rcx, [rbp + 0x1b0]
call fcn.140009b90
bts r12d, 7
lea rcx, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0x10
cmovae rcx, qword [rbp + 0x1b0]
lea rdx, [rdi + 1]
movaps xmm3, xmm6
movq r9, xmm6
lea r8, [0x1400c67cc]
call fcn.1400028e0
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x1400064e7
inc rdx
mov rcx, qword [0x1400df0e0]
cmp rdx, 0x1000
jb 0x1400064e2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140007744
mov rcx, r8
call fcn.1400b4d58
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [0x1400df0e0], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [0x1400df0f0], xmm1
mov r8d, dword [r15 + rsi*8 + 0xe01d4]
lea r10, [rbp + 0x21d]
test r8d, r8d
jns 0x140006560
neg r8d
nop word [rax + rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140006520
dec r10
mov byte [r10], reloc.WLDAP32.dll_Ordinal_45
jmp 0x14000658a
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140006560
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x21d]
mov rdx, r10
lea rcx, [rbp + 0xd0]
call fcn.14000a510
or r12d, 0x60
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
setae r13b
lea rdi, [0x1400df0e0]
mov r15, qword [0x1400df0e0]
cmovae rdi, r15
mov rsi, qword [0x1400df0f0]
test rsi, rsi
je 0x1400065ed
mov r8, rsi
mov edx, reloc.WLDAP32.dll_Ordinal_46
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400065ed
sub rax, rdi
jmp 0x1400065f4
mov rax, 0xffffffffffffffff
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xor edi, edi
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], rdi
cmp rsi, rax
cmovb rax, rsi
lea rdx, [0x1400df0e0]
test r13b, r13b
cmovne rdx, r15
mov r8, rax
lea rcx, [rbp + 0x70]
call fcn.14000a030
or r12d, 0x10
lea r8d, [rdi + 2]
lea rdx, [0x1400c68e4]
lea rcx, [rbp + 0x70]
call fcn.140009cb0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
or r12d, 2
lea r9, [rbp + 0xd0]
lea r8, [rbp + 0x130]
movzx edx, bl
lea rcx, [rbp + 0x1b0]
call fcn.14000a2c0
or r12d, 8
lea r8d, [rdi + 1]
lea rdx, [0x1400c68e0]
lea rcx, [rbp + 0x1b0]
call fcn.140009cb0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
or r12d, 4
mov rdx, qword [reloc.WS2_32.dll_ntohs]
cmp rdx, 0x10
jb 0x1400066ff
inc rdx
mov rcx, qword [0x1400df0e0]
cmp rdx, 0x1000
jb 0x1400066fa
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000774b
mov rcx, r8
call fcn.1400b4d58
movups xmmword [0x1400df0e0], xmm6
movups xmmword [0x1400df0f0], xmm7
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0x10
jb 0x14000674e
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006749
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007752
call fcn.1400b4d58
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b0], 0
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x1400067a9
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400067a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007759
call fcn.1400b4d58
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x1400067e7
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400067e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007760
call fcn.1400b4d58
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x88], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x14000683e
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006839
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007767
call fcn.1400b4d58
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x78], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
lea r15, [r14 + 0x17c]
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rsp + 0x70]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm6, dword [rsp + 0x70]
movss xmm8, dword [rsp + 0x74]
movss xmm9, dword [rsp + 0x78]
lea r13, [r14 + 0xdc8]
mov rcx, r13
call fcn.140009da0
mov rdi, rax
lea rcx, [rax + 0x24c]
call fcn.140009e40
movaps xmm7, xmm0
addss xmm7, xmm6
lea rcx, [rdi + 0x25c]
call fcn.140009e40
movaps xmm6, xmm0
addss xmm6, xmm8
lea rcx, [rdi + 0x26c]
call fcn.140009e40
addss xmm0, xmm9
movss dword [0x1400e2a80], xmm7
movss dword [0x1400e2a84], xmm6
movss dword [0x1400e2a88], xmm0
lea r8, [0x1400e2a80]
lea rdx, [rbp + 0x90]
call fcn.140005af0
movsd xmm0, qword [rax]
movsd qword [0x1400e2a28], xmm0
mov ecx, dword [rax + 8]
mov dword [0x1400e2a30], ecx
movd xmm0, ecx
comiss xmm10, xmm0
jae 0x14000771c
mov qword [rbp + 0x190], 0
mov dword [rbp + 0x198], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rbp + 0x190]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm0, dword [rbp + 0x190]
movss dword [0x1400e2a38], xmm0
movss xmm1, dword [rbp + 0x194]
movss dword [0x1400e2a3c], xmm1
movss xmm0, dword [rbp + 0x198]
addss xmm0, dword [0x1400cea60]
movss dword [0x1400e2a40], xmm0
lea r8, [0x1400e2a38]
lea rdx, [rbp + 0x1a0]
call fcn.140005af0
movsd xmm0, qword [rax]
movsd qword [0x1400e2a70], xmm0
mov eax, dword [rax + 8]
mov dword [0x1400e2a78], eax
mov qword [rbp - 0x40], 0
mov dword [rbp - 0x38], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rbp - 0x40]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm6, dword [rbp - 0x40]
movss xmm7, dword [rbp - 0x3c]
movss xmm9, dword [rbp - 0x38]
mov rcx, r13
call fcn.140009da0
mov rdi, rax
lea rcx, [rax + 0x21c]
call fcn.140009e40
movaps xmm8, xmm0
addss xmm8, xmm6
lea rcx, [rdi + 0x22c]
call fcn.140009e40
movaps xmm6, xmm0
addss xmm6, xmm7
lea rcx, [rdi + 0x23c]
call fcn.140009e40
addss xmm0, xmm9
movaps xmm1, xmm8
unpcklps xmm1, xmm6
movsd qword [0x1400e2a18], xmm1
movss dword [0x1400e2a20], xmm0
lea r8, [0x1400e2a18]
lea rdx, [rbp + 0xc0]
call fcn.140005af0
movsd xmm0, qword [rax]
movsd qword [0x1400e2a08], xmm0
mov ecx, dword [rax + 8]
mov dword [0x1400e2a10], ecx
movd xmm0, ecx
comiss xmm10, xmm0
jae 0x14000771c
xor eax, eax
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x10], eax
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov rax, qword [rsp + 0x68]
add rax, 0x17c
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xec], 0x100
lea rax, [rbp - 0x18]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
xor eax, eax
mov qword [rbp - 8], rax
mov dword [rbp], eax
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rbp - 8]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm2, dword [rbp - 0x18]
subss xmm2, dword [rbp - 8]
movss xmm0, dword [rbp - 0x14]
subss xmm0, dword [rbp - 4]
movss xmm1, dword [rbp - 0x10]
subss xmm1, dword [rbp]
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140006c89
xorps xmm6, xmm6
sqrtss xmm6, xmm2
jmp 0x140006c94
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
divss xmm6, dword [0x1400cea64]
xorps xmm11, xmm11
cvtss2sd xmm11, xmm6
movaps xmm3, xmm11
movq r9, xmm3
lea r8, [0x1400c67cc]
mov edx, 0x64
lea rcx, [rbp + 0x220]
call fcn.140002940
movss xmm1, dword [0x1400e2a2c]
movss xmm2, dword [0x1400cecd0]
andps xmm1, xmm2
movss xmm0, dword [0x1400e2a3c]
andps xmm0, xmm2
subss xmm1, xmm0
andps xmm1, xmm2
movss dword [0x1400e2494], xmm1
cvttss2si eax, xmm6
cmp eax, 0x5a
jg 0x1400070a9
cmp byte [0x1400dff0f], 0
je 0x1400070a9
mov qword [rbp - 0x4c], 0
mov dword [rbp - 0x44], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rbp - 0x4c]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm6, dword [rbp - 0x4c]
movss xmm7, dword [rbp - 0x48]
movss xmm9, dword [rbp - 0x44]
mov rcx, r13
call fcn.140009da0
mov rdi, rax
lea rcx, [rax + 0x24c]
call fcn.140009e40
movaps xmm8, xmm0
addss xmm8, xmm6
lea rcx, [rdi + 0x25c]
call fcn.140009e40
movaps xmm6, xmm0
addss xmm6, xmm7
lea rcx, [rdi + 0x26c]
call fcn.140009e40
addss xmm0, xmm9
movss dword [0x1400e2a80], xmm8
movss dword [0x1400e2a84], xmm6
addss xmm0, xmm12
movss dword [0x1400e2a88], xmm0
lea r8, [0x1400e2a80]
lea rdx, [rbp + 0x9c]
call fcn.140005af0
movsd xmm0, qword [rax]
movsd qword [0x1400e2a28], xmm0
mov ecx, dword [rax + 8]
mov dword [0x1400e2a30], ecx
movd xmm0, ecx
comiss xmm10, xmm0
jae 0x14000771c
lea rcx, [r14 + 0x318]
call fcn.140009f30
mov edi, eax
lea rcx, [r14 + 0x1a0]
call fcn.140009f30
mov esi, eax
lea rcx, [r14 + 0x1a4]
call fcn.140009f30
mov dword [rsp + 0x54], eax
lea rcx, [r14 + 0x4604]
call fcn.140009f30
mov r14d, eax
lea r10, [rbp + 0x21d]
mov r8d, edi
test edi, edi
jns 0x140006ec0
neg r8d
nop word [rax + rax]
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140006e80
dec r10
mov byte [r10], reloc.WLDAP32.dll_Ordinal_45
jmp 0x140006eea
dec r10
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r10], r8b
mov r8d, edx
test edx, edx
jne 0x140006ec0
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x21d]
mov rdx, r10
lea rcx, [rbp + 0x1b0]
call fcn.14000a510
or r12d, 0x300
lea rdx, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0x10
cmovae rdx, qword [rbp + 0x1b0]
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d0], xmm0
xor eax, eax
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1e8], rax
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], al
jne 0x140006f44
lea rcx, [rbp + 0x1d0]
call fcn.14000a030
nop
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0x10
jb 0x140006f9b
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000776e
call fcn.1400b4d58
lea rcx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae rcx, qword [rbp + 0x1d0]
mov rax, qword [0x1400e2640]
test rcx, rcx
jne 0x140006fc4
movaps xmm2, xmm10
jmp 0x140007016
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm15
movss xmm3, dword [0x1400ceacc]
movss xmm2, dword [rax + 0x3d40]
lea rdx, [rbp - 0x78]
mov rcx, qword [rax + 0x3d38]
call fcn.140034fe0
movss xmm0, dword [rbp - 0x78]
addss xmm0, dword [0x1400ce9d8]
cvttss2si eax, xmm0
movd xmm2, eax
cvtdq2ps xmm2, xmm2
movss dword [rbp - 0x78], xmm2
movss xmm1, dword [0x1400e2a2c]
subss xmm1, xmm12
mulss xmm2, xmm14
movss xmm0, dword [0x1400e2a28]
subss xmm0, xmm2
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r14d
mov r9d, dword [rsp + 0x54]
mov r8d, esi
call fcn.140003fd0
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0x10
jb 0x14000708c
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007087
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007775
call fcn.1400b4d58
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d0], 0
cmp byte [0x1400dff0e], 0
je 0x1400072b4
mov qword [rbp - 0x58], 0
mov dword [rbp - 0x50], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rbp - 0x58]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm6, dword [rbp - 0x58]
movss xmm7, dword [rbp - 0x54]
movss xmm9, dword [rbp - 0x50]
mov rcx, r13
call fcn.140009da0
mov rdi, rax
lea rcx, [rax + 0x24c]
call fcn.140009e40
movaps xmm8, xmm0
addss xmm8, xmm6
lea rcx, [rdi + 0x25c]
call fcn.140009e40
movaps xmm6, xmm0
addss xmm6, xmm7
lea rcx, [rdi + 0x26c]
call fcn.140009e40
addss xmm0, xmm9
movss dword [0x1400e2a80], xmm8
movss dword [0x1400e2a84], xmm6
movss dword [0x1400e2a88], xmm0
lea r8, [0x1400e2a80]
lea rdx, [rbp + 0xa8]
call fcn.140005af0
movsd xmm0, qword [rax]
movsd qword [0x1400e2a28], xmm0
mov ecx, dword [rax + 8]
mov dword [0x1400e2a30], ecx
movd xmm0, ecx
comiss xmm10, xmm0
jae 0x14000771c
movss xmm0, dword [0x1400e2a28]
movss dword [rbp - 0x80], xmm0
movss xmm1, dword [0x1400e2a2c]
movss dword [rbp - 0x7c], xmm1
movaps xmm3, xmm11
movq r9, xmm3
lea r8, str._.2f_m
mov edx, 0x64
lea rcx, [rbp + 0x290]
call fcn.140002940
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400108d0
mov rdx, rax
lea rax, [rbp + 0x290]
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x140007240
lea r8, [rbp + 0x290]
add r8, rcx
lea rax, [rbp + 0x290]
cmp rax, r8
je 0x1400072b4
mov rax, qword [rdx + 0x38]
movups xmm0, xmmword [rdx + 0x88]
movups xmmword [rbp + 0x208], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm10
mov qword [rsp + 0x38], r8
lea rcx, [rbp + 0x290]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x208]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0xffffffff
lea r9, [rbp - 0x80]
movss xmm2, dword [rax + 0x10]
mov rcx, qword [rax + 8]
call fcn.140035200
cmp byte [0x1400dff0b], 0
je 0x1400074a0
mov qword [rbp - 0x64], 0
mov dword [rbp - 0x5c], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rbp - 0x64]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm6, dword [rbp - 0x64]
movss xmm7, dword [rbp - 0x60]
movss xmm9, dword [rbp - 0x5c]
mov rcx, r13
call fcn.140009da0
mov rdi, rax
lea rcx, [rax + 0x24c]
call fcn.140009e40
movaps xmm8, xmm0
addss xmm8, xmm6
lea rcx, [rdi + 0x25c]
call fcn.140009e40
movaps xmm6, xmm0
addss xmm6, xmm7
lea rcx, [rdi + 0x26c]
call fcn.140009e40
addss xmm0, xmm9
movss dword [0x1400e2a80], xmm8
movss dword [0x1400e2a84], xmm6
movss xmm11, dword [0x1400cea70]
addss xmm0, xmm11
movss dword [0x1400e2a88], xmm0
lea r8, [0x1400e2a80]
lea rdx, [rbp + 0xb4]
call fcn.140005af0
movsd xmm0, qword [rax]
movsd qword [0x1400e2a28], xmm0
mov ecx, dword [rax + 8]
mov dword [0x1400e2a30], ecx
movd xmm0, ecx
comiss xmm10, xmm0
jae 0x14000771c
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400108d0
mov rdi, rax
movaps xmm0, xmmword [0x1400cec30]
movups xmmword [rbp + 0x208], xmm0
lea rcx, [rbp + 0x208]
call fcn.14000ceb0
mov esi, eax
movss xmm0, dword [0x1400e2a28]
movss dword [rbp - 0x30], xmm0
movss xmm1, dword [0x1400e2a2c]
movss dword [rbp - 0x2c], xmm1
test eax, 0xff000000
je 0x1400074a9
mov dword [rsp + 0x20], Ordinal_50
xor r9d, r9d
movaps xmm2, xmm13
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.14002fd60
mov r8d, dword [rdi + 0x78]
dec r8d
mov dword [rdi + 0x78], r8d
movss xmm0, dword [0x1400cea00]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, esi
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.14002e8b0
mov dword [rdi + 0x78], 0
jmp 0x1400074a9
movss xmm11, dword [0x1400cea70]
cmp byte [0x1400e01c9], 0
je 0x140007622
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x68], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
mov qword [rbp + 0xd8], r15
mov dword [rbp + 0xec], 0x100
lea rax, [rbp - 0x70]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm6, dword [rbp - 0x70]
movss xmm7, dword [rbp - 0x6c]
movss xmm9, dword [rbp - 0x68]
mov rcx, r13
call fcn.140009da0
mov rdi, rax
lea rcx, [rax + 0x24c]
call fcn.140009e40
movaps xmm8, xmm0
addss xmm8, xmm6
lea rcx, [rdi + 0x25c]
call fcn.140009e40
movaps xmm6, xmm0
addss xmm6, xmm7
lea rcx, [rdi + 0x26c]
call fcn.140009e40
addss xmm0, xmm9
movss dword [0x1400e2a80], xmm8
movss dword [0x1400e2a84], xmm6
addss xmm0, xmm11
movss dword [0x1400e2a88], xmm0
lea r8, [0x1400e2a80]
lea rdx, [rbp + 0x1f0]
call fcn.140005af0
movsd xmm0, qword [rax]
movsd qword [0x1400e2a28], xmm0
mov ecx, dword [rax + 8]
mov dword [0x1400e2a30], ecx
movd xmm0, ecx
comiss xmm10, xmm0
jae 0x14000771c
movaps xmm0, xmmword [0x1400cec30]
movups xmmword [rbp + 0x208], xmm0
lea rcx, [rbp + 0x208]
call fcn.14000ceb0
mov dword [rsp + 0x54], eax
cvttss2si edx, dword [0x1400e2a2c]
movss xmm0, dword [0x1400e2a28]
movss xmm6, dword [0x1400cea38]
subss xmm0, xmm6
cvttss2si ecx, xmm0
lea rax, [rsp + 0x54]
mov qword [rsp + 0x20], rax
call fcn.140003540
jmp 0x14000762a
movss xmm6, dword [0x1400cea38]
cmp byte [0x1400dff00], 0
je 0x140007678
movaps xmm0, xmmword [0x1400cec30]
movups xmmword [rbp + 0x208], xmm0
lea rcx, [rbp + 0x208]
call fcn.14000ceb0
mov dword [rsp + 0x54], eax
cvttss2si edx, dword [0x1400e2a2c]
movss xmm0, dword [0x1400e2a28]
subss xmm0, xmm6
cvttss2si ecx, xmm0
lea rax, [rsp + 0x54]
mov qword [rsp + 0x20], rax
call fcn.140002c60
cmp byte [0x1400dff09], 0
je 0x14000771c
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.1400108d0
mov r10, rax
movaps xmm0, xmmword [0x1400cec30]
movups xmmword [rbp + 0x208], xmm0
lea rcx, [rbp + 0x208]
call fcn.14000ceb0
movss xmm0, dword [0x1400e2a28]
movss dword [rbp - 0x28], xmm0
movss xmm1, dword [0x1400e2a2c]
movss dword [rbp - 0x24], xmm1
mov rcx, qword [0x1400e2640]
movss xmm2, dword [rcx + 0x14]
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm14
movss dword [rbp - 0x20], xmm0
movss dword [rbp - 0x1c], xmm2
movss xmm0, dword [0x1400ce9e0]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x20]
mov rcx, r10
call fcn.140030be0
mov r13, qword [rsp + 0x68]
mov r15, qword [rsp + 0x58]
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
inc r15
mov qword [rsp + 0x58], r15
cmp eax, 0x41
jge 0x14000777c
mov esi, eax
jmp 0x1400063e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm7, dword [0x1400cea7c]
cmp byte [0x1400dff02], 0
jne 0x1400077a3
cmp byte [0x1400dff06], 0
jne 0x1400077a3
cmp byte [0x1400dff01], 0
je 0x1400083a5
mov rcx, qword [0x1400e2650]
add rcx, 0x73df958
call fcn.140009da0
lea rcx, [rax + 0x11a350]
call fcn.140009da0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
mov ecx, dword [0x1400e2658]
mov dword [rbp + 0x148], ecx
mov qword [rbp + 0x140], 0x40
mov qword [rbp + 0x138], rax
mov dword [rbp + 0x14c], 0x100
lea rax, [rbp + 0xd0]
mov qword [rbp + 0x170], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x130]
call rax
mov rcx, qword [0x1400e2650]
add rcx, 0x2165e48
call fcn.140009da0
mov rsi, rax
mov qword [rsp + 0x70], rax
xor r14d, r14d
mov dword [rsp + 0x54], r14d
lea r15, [0x1400e22a0]
mov qword [rsp + 0x68], r15
mov r13d, 0x1a4
mov qword [rsp + 0x58], r13
lea rdi, [0x1400e2304]
movss xmm13, dword [0x1400ce9a4]
nop dword [rax]
nop dword [rax + rax]
mov rbx, qword [0x1400e2650]
add rbx, 0x1db73e8
mov rcx, rbx
call fcn.140009da0
test rax, rax
je 0x14000837f
mov eax, r14d
shl eax, 5
movsxd rcx, eax
add rcx, rbx
call fcn.140009da0
mov rbx, rax
test rax, rax
je 0x14000837f
xor eax, eax
mov qword [rbp + 0x208], rax
mov dword [rbp + 0x210], eax
mov ecx, dword [0x1400e2658]
mov dword [rbp + 0x148], ecx
mov qword [rbp + 0x140], ntohl
lea rcx, [rsi + 0x17c]
mov qword [rbp + 0x138], rcx
mov dword [rbp + 0x14c], 0x100
lea rax, [rbp + 0x208]
mov qword [rbp + 0x170], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x130]
call rax
xor eax, eax
mov qword [rbp + 0x1a0], rax
mov dword [rbp + 0x1a8], eax
mov eax, dword [0x1400e2658]
mov dword [rbp + 0x148], eax
mov qword [rbp + 0x140], ntohl
lea rax, [rbx + 0x17c]
mov qword [rbp + 0x138], rax
mov dword [rbp + 0x14c], 0x100
lea rax, [rbp + 0x1a0]
mov qword [rbp + 0x170], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x130]
call rax
movss xmm2, dword [rbp + 0x208]
movss xmm9, dword [rbp + 0x1a0]
subss xmm2, xmm9
movss xmm0, dword [rbp + 0x20c]
movss xmm11, dword [rbp + 0x1a4]
subss xmm0, xmm11
movss xmm1, dword [rbp + 0x210]
movss xmm8, dword [rbp + 0x1a8]
subss xmm1, xmm8
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140007a41
xorps xmm6, xmm6
sqrtss xmm6, xmm2
jmp 0x140007a4c
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
divss xmm6, dword [0x1400cea64]
xorps xmm3, xmm3
cvtss2sd xmm3, xmm6
movq r9, xmm3
lea r8, [0x1400c67cc]
mov edx, 0x64
lea rcx, [rbp + 0x300]
call fcn.140002940
call fcn.140005d40
mov ecx, dword [rdi]
add ecx, 0xa
cmp rax, rcx
jb 0x140007ac4
lea rcx, [rbx + 0x1970]
call fcn.140009e40
movss xmm1, dword [rdi - 0x1f4]
comiss xmm0, xmm1
ja 0x140007ab0
comiss xmm10, xmm0
jbe 0x140007aac
comiss xmm1, xmm10
ja 0x140007ab0
xor al, al
jmp 0x140007ab2
mov al, 1
mov byte [r15], al
movss dword [rdi - 0x1f4], xmm0
call fcn.140005d40
mov dword [rdi], eax
movzx eax, byte [r15]
mov byte [rsp + 0x50], al
cvttss2si esi, xmm6
cmp esi, 0x1f4
jg 0x140008372
mov rcx, qword [rsp + 0x70]
add rcx, 0x328
call fcn.140009f30
mov r15d, eax
lea rcx, [rbx + 0x328]
call fcn.140009f30
mov r13d, eax
lea rcx, [rbx + 0x318]
call fcn.140009f30
mov r14d, eax
lea rcx, [rbx + 0x460]
call fcn.140009f30
lea rcx, [rbx + 0x26c0]
call fcn.140009f30
lea rcx, [rbx + 0x680]
call fcn.140009f30
mov ebx, eax
mov rcx, qword [rsp + 0x58]
add rcx, 0xfffffffffffffffc
call fcn.140009f30
mov rcx, qword [rsp + 0x58]
call fcn.140009f30
mov rcx, qword [rsp + 0x58]
add rcx, 0x4460
call fcn.140009f30
movaps xmm6, xmm8
addss xmm6, dword [0x1400cea70]
movaps xmm2, xmm11
mulss xmm2, dword [rbp + 0x104]
movaps xmm0, xmm9
mulss xmm0, dword [rbp + 0x100]
addss xmm2, xmm0
movaps xmm7, xmm8
mulss xmm7, dword [rbp + 0x108]
addss xmm7, xmm2
addss xmm7, dword [rbp + 0x10c]
movaps xmm5, xmm11
mulss xmm5, dword [rbp + 0xd4]
movaps xmm0, xmm9
mulss xmm0, dword [rbp + 0xd0]
addss xmm5, xmm0
movss xmm1, dword [0x1400ce9e0]
divss xmm1, xmm7
movaps xmm0, xmm8
mulss xmm0, dword [rbp + 0xd8]
addss xmm0, xmm5
addss xmm0, dword [rbp + 0xdc]
mulss xmm0, xmm1
mulss xmm11, dword [rbp + 0xe4]
mulss xmm9, dword [rbp + 0xe0]
addss xmm11, xmm9
mulss xmm8, dword [rbp + 0xe8]
addss xmm8, xmm11
addss xmm8, dword [rbp + 0xec]
mulss xmm8, xmm1
xorps xmm3, xmm3
cvtsi2ss xmm3, dword [0x1400df0d0]
movaps xmm1, xmm3
mulss xmm1, xmm14
movss dword [rsp + 0x60], xmm1
movaps xmm12, xmm1
xorps xmm4, xmm4
cvtsi2ss xmm4, dword [0x1400df0c4]
movaps xmm15, xmm4
mulss xmm15, xmm14
movaps xmm9, xmm15
mulss xmm0, xmm14
mulss xmm0, xmm3
addss xmm0, xmm14
addss xmm12, xmm0
mulss xmm8, xmm14
mulss xmm8, xmm4
addss xmm8, xmm14
subss xmm9, xmm8
movaps xmm0, xmm6
mulss xmm0, dword [rbp + 0x108]
addss xmm0, xmm2
addss xmm0, dword [rbp + 0x10c]
movss xmm1, dword [0x1400ce9e0]
divss xmm1, xmm0
movaps xmm2, xmm6
mulss xmm2, dword [rbp + 0xd8]
addss xmm2, xmm5
addss xmm2, dword [rbp + 0xdc]
mulss xmm2, xmm1
mulss xmm6, dword [rbp + 0xe8]
addss xmm6, xmm11
addss xmm6, dword [rbp + 0xec]
mulss xmm6, xmm1
mulss xmm2, xmm14
mulss xmm2, xmm3
addss xmm2, xmm14
movss xmm11, dword [rsp + 0x60]
addss xmm11, xmm2
movss dword [rsp + 0x60], xmm11
mulss xmm6, xmm14
mulss xmm6, xmm4
addss xmm6, xmm14
subss xmm15, xmm6
movaps xmm6, xmm15
subss xmm6, xmm9
movaps xmm1, xmm6
divss xmm1, dword [0x1400cea04]
movaps xmm0, xmm1
mulss xmm0, xmm14
subss xmm12, xmm0
addss xmm6, xmm9
movaps xmm8, xmm1
addss xmm8, xmm12
comiss xmm7, dword [0x1400ce974]
jb 0x14000835b
cmp r13d, r15d
je 0x14000835b
lea eax, [r14 - 1]
cmp eax, 0x63
ja 0x14000835b
test ebx, ebx
jne 0x14000835b
movss xmm7, dword [0x1400cea7c]
cmp esi, 0x2d
jl 0x140008066
divss xmm1, dword [0x1400cea0c]
movd xmm2, r14d
cvtdq2ps xmm2, xmm2
divss xmm2, xmm7
movaps xmm3, xmm8
addss xmm3, dword [0x1400cea00]
movss dword [rbp - 0x30], xmm3
movss dword [rbp - 0x2c], xmm9
addss xmm1, xmm3
movss dword [rbp - 0x80], xmm1
movss dword [rbp - 0x7c], xmm6
movaps xmm1, xmm6
subss xmm1, xmm9
movss xmm0, dword [0x1400ce9e0]
subss xmm0, xmm2
mulss xmm1, xmm0
addss xmm1, xmm9
movss dword [rbp + 0x40], xmm3
movss dword [rbp + 0x44], xmm1
cmp byte [0x1400dff06], bl
je 0x140007e54
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
lea edx, [rbx + 1]
mov rcx, qword [rax]
call fcn.1400108d0
mov rcx, rax
movss dword [rbp - 0x20], xmm11
movss dword [rbp - 0x1c], xmm15
mov eax, dword [0x1400df0d8]
cdq
and edx, 7
add eax, edx
sar eax, 3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x1400df0d4]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x28], xmm0
movss dword [rbp - 0x24], xmm1
movss xmm0, dword [0x1400ce9e0]
movss dword [rsp + 0x20], xmm0
mov r9d, 0xffffffff
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x28]
call fcn.140030be0
cmp byte [0x1400dff01], 0
je 0x140007eed
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400108d0
xor r13d, r13d
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm10
mov r9d, 0xff0000ff
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.140030e50
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
lea edx, [r13 + 1]
mov rcx, qword [rax]
call fcn.1400108d0
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm10
mov r9d, 0xff00ff00
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x40]
mov rcx, rax
call fcn.140030e50
jmp 0x140007ef0
xor r13d, r13d
movzx r15d, byte [rsp + 0x50]
cmp byte [0x1400dff02], 0
je 0x14000806c
movaps xmm11, xmm9
addss xmm11, xmm14
movaps xmm7, xmm12
addss xmm7, xmm14
mov rax, qword [0x1400e2640]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rax + 0x4ad0]
mov rcx, qword [rax]
call fcn.1400108d0
mov rbx, rax
movaps xmm1, xmm6
movaps xmm0, xmm8
mov dword [rsp + 0x20], r13d
movaps xmm3, xmm10
mov rcx, rax
test r15b, r15b
je 0x140007ff5
test byte [rax + 0x30], 1
je 0x140007f85
subss xmm1, xmm14
subss xmm0, xmm14
movss dword [rbp + 0x48], xmm0
movss dword [rbp + 0x4c], xmm1
movss dword [rbp + 0x50], xmm7
movss dword [rbp + 0x54], xmm11
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x50]
jmp 0x140007fac
subss xmm1, xmm13
subss xmm0, xmm13
movss dword [rbp + 0x58], xmm0
movss dword [rbp + 0x5c], xmm1
movss dword [rbp + 0x60], xmm7
movss dword [rbp + 0x64], xmm11
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
call fcn.1400306c0
mov r9d, 0xff00ff00
movss xmm0, dword [0x1400ce9e0]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14002e8b0
mov dword [rbx + 0x78], r13d
movss xmm11, dword [rsp + 0x60]
movss xmm7, dword [0x1400cea7c]
jmp 0x14000806c
test byte [rax + 0x30], 1
je 0x14000802f
subss xmm1, xmm14
subss xmm0, xmm14
movss dword [rbp + 0x68], xmm0
movss dword [rbp + 0x6c], xmm1
movss dword [rbp + 8], xmm7
movss dword [rbp + 0xc], xmm11
lea r8, [rbp + 0x68]
lea rdx, [rbp + 8]
call fcn.1400306c0
mov r9d, 0xff0000ff
jmp 0x140007fb7
subss xmm1, xmm13
subss xmm0, xmm13
movss dword [rbp + 0x10], xmm0
movss dword [rbp + 0x14], xmm1
movss dword [rbp + 0x38], xmm7
movss dword [rbp + 0x3c], xmm11
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x38]
call fcn.1400306c0
mov r9d, 0xff0000ff
jmp 0x140007fb7
movzx r15d, byte [rsp + 0x50]
cmp esi, 0x2d
jg 0x140008363
movd xmm2, r14d
cvtdq2ps xmm2, xmm2
divss xmm2, xmm7
movaps xmm3, xmm8
addss xmm3, dword [0x1400cea00]
movss dword [rbp + 0x28], xmm3
movss dword [rbp + 0x2c], xmm9
movaps xmm0, xmm8
addss xmm0, dword [0x1400cea38]
movss dword [rbp - 0x78], xmm0
movss dword [rbp - 0x74], xmm6
movaps xmm1, xmm6
subss xmm1, xmm9
mulss xmm1, xmm2
addss xmm1, xmm9
movss dword [rbp + 0x30], xmm3
movss dword [rbp + 0x34], xmm1
cmp byte [0x1400dff06], 0
je 0x14000815e
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400108d0
mov rcx, rax
movss dword [rbp + 0x18], xmm11
movss dword [rbp + 0x1c], xmm15
mov eax, dword [0x1400df0d8]
cdq
and edx, 7
add eax, edx
sar eax, 3
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x1400df0d4]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x20], xmm0
movss dword [rbp + 0x24], xmm1
movss xmm11, dword [0x1400ce9e0]
movss dword [rsp + 0x20], xmm11
mov r9d, 0xffffffff
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x20]
call fcn.140030be0
jmp 0x140008167
movss xmm11, dword [0x1400ce9e0]
cmp byte [0x1400dff01], 0
je 0x1400081fc
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400108d0
xor esi, esi
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm10
mov r9d, 0xff00ff00
lea r8, [rbp - 0x78]
lea rdx, [rbp + 0x28]
mov rcx, rax
call fcn.140030e50
mov rax, qword [0x1400e2640]
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
lea edx, [rsi + 1]
mov rcx, qword [rax]
call fcn.1400108d0
mov dword [rsp + 0x28], esi
movss dword [rsp + 0x20], xmm10
mov r9d, 0xff0000ff
lea r8, [rbp - 0x78]
lea rdx, [rbp + 0x30]
mov rcx, rax
call fcn.140030e50
jmp 0x1400081fe
xor esi, esi
cmp byte [0x1400dff02], 0
je 0x140008363
addss xmm9, xmm14
addss xmm12, xmm14
mov rax, qword [0x1400e2640]
lea r8, str.Foreground
mov edx, 1
mov rax, qword [rax + 0x4ad0]
mov rcx, qword [rax]
call fcn.1400108d0
mov rbx, rax
mov dword [rsp + 0x20], esi
movaps xmm3, xmm10
mov rcx, rax
test r15b, r15b
je 0x1400082dd
test byte [rax + 0x30], 1
je 0x14000827f
subss xmm6, xmm14
subss xmm8, xmm14
movss dword [rbp - 8], xmm8
movss dword [rbp - 4], xmm6
movss dword [rbp - 0x18], xmm12
movss dword [rbp - 0x14], xmm9
lea r8, [rbp - 8]
lea rdx, [rbp - 0x18]
jmp 0x1400082a8
subss xmm6, xmm13
subss xmm8, xmm13
movss dword [rbp - 0x70], xmm8
movss dword [rbp - 0x6c], xmm6
movss dword [rbp - 0x64], xmm12
movss dword [rbp - 0x60], xmm9
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x64]
call fcn.1400306c0
mov r9d, 0xff00ff00
movss dword [rsp + 0x28], xmm11
mov dword [rsp + 0x20], 1
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14002e8b0
mov dword [rbx + 0x78], esi
jmp 0x140008363
test byte [rax + 0x30], 1
je 0x140008319
subss xmm6, xmm14
subss xmm8, xmm14
movss dword [rbp - 0x58], xmm8
movss dword [rbp - 0x54], xmm6
movss dword [rbp - 0x4c], xmm12
movss dword [rbp - 0x48], xmm9
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x4c]
call fcn.1400306c0
mov r9d, 0xff0000ff
jmp 0x1400082b3
subss xmm6, xmm13
subss xmm8, xmm13
movss dword [rbp - 0x40], xmm8
movss dword [rbp - 0x3c], xmm6
movss dword [rbp + 0x190], xmm12
movss dword [rbp + 0x194], xmm9
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x190]
call fcn.1400306c0
mov r9d, 0xff0000ff
jmp 0x1400082b3
movss xmm7, dword [0x1400cea7c]
mov r13, qword [rsp + 0x58]
mov r15, qword [rsp + 0x68]
mov r14d, dword [rsp + 0x54]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rsi, qword [rsp + 0x70]
inc r14d
mov dword [rsp + 0x54], r14d
inc r13
mov qword [rsp + 0x58], r13
add rdi, 4
inc r15
mov qword [rsp + 0x68], r15
cmp r14d, 0x64
jl 0x1400078a0
cmp byte [0x1400dff04], 0
je 0x14000846e
mov ebx, dword [reloc.WLDAP32.dll_Ordinal_200]
mov rax, qword [0x1400e2640]
movss xmm1, dword [rax + 0x14]
mulss xmm1, xmm14
movss xmm0, dword [rax + 0x10]
mulss xmm0, xmm14
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
mov rax, qword [rax + 0x4ad0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400108d0
mov rdi, rax
movd xmm2, ebx
cvtdq2ps xmm2, xmm2
comiss xmm14, xmm2
ja 0x14000846e
subss xmm2, xmm14
mov dword [rsp + 0x28], 0x63
movss xmm0, dword [0x1400cea30]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm10
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.140030290
movss xmm0, dword [0x1400cea00]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 1
mov r9d, 0xff0000ff
mov r8d, dword [rdi + 0x78]
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.14002e8b0
xor r13d, r13d
mov dword [rdi + 0x78], r13d
jmp 0x140008471
xor r13d, r13d
cmp byte [0x1400dff0c], 0
je 0x1400086ae
mov rcx, qword [0x1400e2650]
add rcx, 0x2165e48
call fcn.140009da0
mov rbx, rax
test rax, rax
je 0x1400086ae
mov ecx, 1
call fcn.140002bc0
test eax, eax
je 0x140008699
mov qword [rbp + 0x1a0], 0
mov dword [rbp + 0x1a8], 0
mov ecx, dword [0x1400e2658]
mov dword [rbp + 0xe8], ecx
mov qword [rbp + 0xe0], ntohl
lea rdi, [rbx + 0x2500]
mov qword [rbp + 0xd8], rdi
mov dword [rbp + 0xec], 0x100
lea rax, [rbp + 0x1a0]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
mov qword [rbp + 0x190], 0
mov dword [rbp + 0x198], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
lea rax, [rbx + 0x2418]
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xec], 0x100
lea rax, [rbp + 0x190]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm0, dword [0x1400e2a4c]
subss xmm0, dword [rbp + 0x194]
movss xmm1, dword [0x1400e2630]
divss xmm1, xmm7
movaps xmm2, xmm1
mulss xmm2, xmm0
movss xmm3, dword [0x1400e2a48]
subss xmm3, dword [rbp + 0x190]
mulss xmm3, xmm1
movss xmm4, dword [rbp + 0x1a4]
addss xmm4, xmm2
movss xmm1, dword [rbp + 0x1a0]
addss xmm1, xmm3
movss xmm0, dword [0x1400ceae8]
maxss xmm0, xmm1
movss xmm2, dword [0x1400cea78]
minss xmm2, xmm0
comiss xmm4, dword [0x1400cea8c]
jbe 0x140008633
subss xmm4, dword [0x1400cea98]
jmp 0x140008648
movss xmm0, dword [0x1400ceaf0]
comiss xmm0, xmm4
jbe 0x140008648
addss xmm4, dword [0x1400cea98]
movss dword [rsp + 0x70], xmm2
movss dword [rsp + 0x74], xmm4
mov r8d, 8
lea rdx, [rsp + 0x70]
mov rcx, rdi
call fcn.140049de0
movss xmm0, dword [rbp + 0x190]
movss dword [0x1400e2a48], xmm0
movss xmm1, dword [rbp + 0x194]
movss dword [0x1400e2a4c], xmm1
movss xmm0, dword [rbp + 0x198]
movss dword [0x1400e2a50], xmm0
jmp 0x1400086ae
mov qword [0x1400e2a48], 0
mov dword [0x1400e2a50], 0
cmp byte [0x1400dff05], 0
je 0x140008e95
mov rcx, qword [0x1400e2650]
add rcx, 0x73df958
call fcn.140009da0
lea rcx, [rax + 0x11a350]
call fcn.140009da0
xorps xmm0, xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
mov ecx, dword [0x1400e2658]
mov dword [rbp + 0xe8], ecx
mov qword [rbp + 0xe0], 0x40
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xec], 0x100
lea rax, [rbp + 0x130]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
mov rcx, qword [0x1400e2650]
add rcx, 0x2165e48
call fcn.140009da0
mov r15, rax
movss xmm12, dword [0x1400ceac0]
movaps xmm10, xmm12
movaps xmm11, xmm12
mov r14d, r13d
mov rdi, r13
movss xmm13, dword [rbp + 0x16c]
movss xmm15, dword [rbp + 0x168]
mov rcx, qword [0x1400e2650]
add rcx, 0x2165e48
call fcn.140009da0
mov rbx, qword [0x1400e2650]
add rbx, 0x1db73e8
mov rcx, rbx
call fcn.140009da0
test rax, rax
je 0x140008c4d
mov eax, r14d
shl eax, 5
movsxd rcx, eax
add rcx, rbx
call fcn.140009da0
mov rsi, rax
test rax, rax
je 0x140008c4d
lea rcx, [rax + 0x471]
call fcn.140009da0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1b0], 0
or r12d, 1
mov dword [rsp + 0x60], r12d
mov ecx, dword [0x1400e2658]
mov dword [rbp + 0x238], ecx
mov qword [rbp + 0x230], reloc.WLDAP32.dll_Ordinal_32
mov qword [rbp + 0x228], rax
mov dword [rbp + 0x23c], 0x100
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x260], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0x220]
call rax
mov rdx, rsi
lea rcx, [rbp + 0xd0]
call fcn.140005e00
mov rdx, rax
mov rax, qword [rax + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1400088b2
mov rdx, qword [rdx]
cmp rax, 6
jne 0x1400088e8
mov rcx, r13
lea r8, str.player
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r8 + rcx - 1]
jne 0x1400088db
cmp rcx, 6
jne 0x1400088c2
mov eax, r13d
jmp 0x1400088e0
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400088e8
mov bl, 1
jmp 0x1400088ea
xor bl, bl
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x14000892b
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008926
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008efd
call fcn.1400b4d58
test bl, bl
je 0x140008c08
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x78], 0
mov eax, dword [0x1400e2658]
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xe0], ntohl
lea rax, [rsi + 0x17c]
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xec], 0x100
lea rax, [rsp + 0x70]
mov qword [rbp + 0x110], rax
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtTokenManagerGetAnalogExclusiveTokenEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rbp + 0xd0]
call rax
movss xmm6, dword [rsp + 0x70]
movss xmm7, dword [rsp + 0x74]
movss xmm8, dword [rsp + 0x78]
lea rcx, [rsi + 0xdc8]
call fcn.140009da0
mov rbx, rax
lea rcx, [rax + 0xcc]
call fcn.140009e40
movaps xmm9, xmm0
addss xmm9, xmm6
lea rcx, [rbx + 0xdc]
call fcn.140009e40
movaps xmm6, xmm0
addss xmm6, xmm7
lea rcx, [rbx + 0xec]
call fcn.140009e40
movaps xmm5, xmm0
addss xmm5, xmm8
addss xmm5, dword [0x1400e2634]
movaps xmm3, xmm9
mulss xmm3, dword [rbp + 0x160]
movaps xmm1, xmm6
mulss xmm1, dword [rbp + 0x164]
addss xmm3, xmm1
movaps xmm2, xmm5
mulss xmm2, xmm15
addss xmm3, xmm2
addss xmm3, xmm13
movss xmm2, dword [0x1400ce9e0]
divss xmm2, xmm3
movaps xmm4, xmm9
mulss xmm4, dword [rbp + 0x130]
movaps xmm0, xmm6
mulss xmm0, dword [rbp + 0x134]
addss xmm4, xmm0
movaps xmm1, xmm5
mulss xmm1, dword [rbp + 0x138]
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x13c]
mulss xmm4, xmm2
mulss xmm9, dword [rbp + 0x140]
mulss xmm6, dword [rbp + 0x144]
addss xmm9, xmm6
mulss xmm5, dword [rbp + 0x148]
addss xmm9, xmm5
addss xmm9, dword [rbp + 0x14c]
mulss xmm9, xmm2
movd xmm0, dword [0x1400df0d0]
cvtdq2ps xmm0, xmm0
movaps xmm7, xmm0
mulss xmm7, xmm14
movd xmm1, dword [0x1400df0c4]
cvtdq2ps xmm1, xmm1
movaps xmm6, xmm1
mulss xmm6, xmm14
mulss xmm4, xmm14
mulss xmm4, xmm0
addss xmm4, xmm14
addss xmm7, xmm4
mulss xmm9, xmm14
mulss xmm9, xmm1
addss xmm9, xmm14
subss xmm6, xmm9
lea rcx, [rsi + 0x1970]
call fcn.140009e40
movss dword [0x1400e00a8], xmm0
lea rcx, [rsi + 0x26c0]
call fcn.140009f30
mov ebx, eax
lea rcx, [r15 + 0x328]
call fcn.140009f30
lea rcx, [rsi + 0x328]
call fcn.140009f30
movss xmm4, dword [0x1400e00a8]
lea rcx, [0x140000000]
ucomiss xmm4, dword [rdi + rcx + 0xe24a0]
jp 0x140008b75
jne 0x140008b75
mov eax, dword [rdi + rcx + 0xdff10]
test eax, eax
js 0x140008c08
dec eax
mov dword [rdi + rcx + 0xdff10], eax
jmp 0x140008c08
mov dword [rdi + rcx + 0xdff10], r13d
test ebx, ebx
jne 0x140008bff
movd xmm3, dword [0x1400e26a4]
cvtdq2ps xmm3, xmm3
movaps xmm1, xmm6
subss xmm1, xmm3
movd xmm2, dword [0x1400e269c]
cvtdq2ps xmm2, xmm2
movaps xmm0, xmm7
subss xmm0, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm1
cvttss2si eax, xmm0
cmp eax, dword [0x1400e26a0]
jge 0x140008bff
subss xmm2, xmm7
movss xmm1, dword [0x1400cecd0]
andps xmm2, xmm1
movd xmm0, dword [reloc.WLDAP32.dll_Ordinal_200]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm2
jbe 0x140008bff
subss xmm3, xmm6
andps xmm3, xmm1
movd xmm0, dword [0x1400e2698]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm3
jbe 0x140008bff
movaps xmm10, xmm7
movaps xmm11, xmm6
movss dword [rdi + rcx + 0xe24a0], xmm4
and r12d, 0xfffffffe
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0x10
jb 0x140008c4d
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f04
call fcn.1400b4d58
inc r14d
add rdi, 4
cmp r14d, 0x40
jle 0x1400087a1
ucomiss xmm10, xmm12
jp 0x140008c6a
je 0x140008e95
ucomiss xmm11, xmm12
jp 0x140008c76
je 0x140008e95
mov edx, 0x1000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
test rax, rax
je 0x140008cef
movups xmm0, xmmword [0x1400e2ab0]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x1400e2ac0]
movsd qword [rax + 0x10], xmm1
mov ecx, dword [0x1400e2ac8]
mov dword [rax + 0x18], ecx
movzx ecx, word [0x1400e2acc]
mov word [rax + 0x1c], cx
mov ecx, 1
call rdi
mov ebx, eax
xor edx, edx
mov r8d, 0x1000
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x8000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test ebx, ebx
jne 0x140008d6c
mov edx, 0x1000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdi, rax
test rax, rax
je 0x140008e95
movups xmm0, xmmword [0x1400e2ab0]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x1400e2ac0]
movsd qword [rax + 0x10], xmm1
mov ecx, dword [0x1400e2ac8]
mov dword [rax + 0x18], ecx
movzx ecx, word [0x1400e2acc]
mov word [rax + 0x1c], cx
mov ecx, 2
call rdi
mov ebx, eax
xor edx, edx
mov r8d, 0x1000
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x8000
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
test ebx, ebx
je 0x140008e95
mov dword [rbp + 0x1f0], Ordinal_32
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1f4], xmm0
mov dword [rbp + 0x204], eax
lea rcx, [rbp + 0x1f0]
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x140008e95
cmp dword [rbp + 0x1f4], 0
jne 0x140008e95
movd xmm1, dword [reloc.WS2_32.dll_accept]
cvtdq2ps xmm1, xmm1
movd xmm0, dword [0x1400e269c]
cvtdq2ps xmm0, xmm0
subss xmm10, xmm0
divss xmm10, xmm1
cvttss2si ecx, xmm10
mov dword [0x1400e2498], ecx
movd xmm0, dword [0x1400e26a4]
cvtdq2ps xmm0, xmm0
subss xmm11, xmm0
divss xmm11, xmm1
cvttss2si eax, xmm11
mov dword [0x1400e00ac], eax
mov dword [rbp + 0xd0], r13d
mov dword [rbp + 0xe0], r13d
mov qword [rbp + 0xe4], 0x4001
mov dword [rbp + 0xd8], ecx
mov dword [rbp + 0xdc], eax
mov edx, 0x1000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test rax, rax
je 0x140008e95
movups xmm0, xmmword [0x1400e2a90]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x1400e2aa0]
movsd qword [rax + 0x10], xmm1
mov edx, dword [0x1400e2aa8]
mov dword [rax + 0x18], edx
movzx edx, word [0x1400e2aac]
mov word [rax + 0x1c], dx
mov r8d, Ordinal_41
lea rdx, [rbp + 0xd0]
lea ecx, [r8 - 0x27]
call rbx
xor edx, edx
mov r8d, 0x1000
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x8000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, qword [rbp + 0x370]
xor rcx, rsp
call fcn.1400b49c0
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3