Function at 0x1400214c0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2c8]
sub rsp, 0x3a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x14014d040]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
cmp byte [0x1401f1508], 0
jne 0x1400232c0
mov r13d, 4
mov rax, qword gs:[0x58]
mov r15, qword [rax]
xor r12d, r12d
movabs rsi, 0x30245c8b48909090
movabs r14, 0x30245c8b48205f89
movss xmm11, dword [0x14013e9dc]
movss xmm7, dword [0x14013e9b8]
xorps xmm9, xmm9
movss xmm10, dword [0x14013e84c]
movsd xmm14, qword [0x14013e900]
movsd xmm15, qword [0x14013e880]
movss xmm12, dword [0x14013e9f8]
movss xmm13, dword [0x14013e7dc]
movss xmm8, dword [0x14013e9c8]
nop word [rax + rax]
mov eax, dword [0x1401f1514]
add eax, 5
movsxd rcx, eax
mov qword [rbp + 0x30], rcx
lea rcx, [rbp + 0x30]
call fcn.140003cc0
cmp byte [0x1401f14a4], 0
je 0x1400215e7
mov r8b, 1
jmp 0x1400215ea
xor r8b, r8b
mov edx, 0xdf
mov rcx, qword [0x1401f1348]
call fcn.1400208d0
cmp byte [0x1401f14d1], 0
je 0x140021658
movd xmm0, dword [0x1401f14cc]
cvtdq2ps xmm0, xmm0
mov rdx, qword [0x1401f1348]
test rdx, rdx
je 0x140021651
movss dword [rbp], xmm0
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140021651
cmp dword [0x1401f0820], 0
je 0x140021651
add rdx, 0x280
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401f14d1], 0
mov ecx, dword [0x1401f14d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14002183f
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], 0xf
mov byte [rbp - 0x68], 0
mov dword [rbp - 0x40], 0xffffffff
movaps xmm6, xmm11
cmp qword [0x1401f1348], 0
je 0x140021836
lea rdx, [rbp + 0x1c0]
lea rcx, [0x1401f1050]
call fcn.1400209d0
nop
mov rsi, qword [rbp + 0x1c8]
mov rbx, qword [rbp + 0x1c0]
cmp rbx, rsi
je 0x1400217dc
add rbx, 0x28
nop dword [rax]
mov rax, qword [rbx - 0x28]
mov qword [rbp - 0x38], rax
lea rdx, [rbx - 0x20]
lea rcx, [rbp - 0x30]
call fcn.140011720
mov rax, qword [rbx]
mov qword [rbp - 0x10], rax
mov eax, dword [rbx + 8]
mov dword [rbp - 8], eax
mov rdi, qword [rbp - 0x38]
test rdi, rdi
je 0x1400217c2
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140021731
cmp dword [0x1401f0820], 0
je 0x140021731
lea rdx, [rdi + 0x90]
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rsp + 0x54]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rsp + 0x54]
subss xmm1, dword [0x1401f135c]
movss xmm2, dword [rsp + 0x58]
subss xmm2, dword [0x1401f1360]
movss xmm0, dword [rsp + 0x5c]
subss xmm0, dword [0x1401f1364]
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140021780
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140021788
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm6, xmm0
jbe 0x1400217c2
comiss xmm7, xmm0
jbe 0x1400217c2
movaps xmm6, xmm0
mov qword [rbp - 0x70], rdi
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
lea rcx, [rbp - 0x68]
call fcn.1400124b0
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x48], rax
mov eax, dword [rbp - 8]
mov dword [rbp - 0x40], eax
lea rcx, [rbp - 0x30]
call fcn.140003250
add rbx, 0x38
lea rax, [rbx - 0x28]
cmp rax, rsi
jne 0x1400216d0
lea rcx, [rbp + 0x1c0]
call fcn.1400030b0
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x14002182c
mov dword [rbp], 1
mov rdx, qword [0x1401f0758]
add rdx, rcx
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x14002182c
cmp dword [0x1401f0820], 0
je 0x14002182c
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movabs rsi, 0x30245c8b48909090
lea rcx, [rbp - 0x68]
call fcn.140003250
mov rbx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
cmp byte [0x1401f14d2], 0
je 0x1400218a4
test rbx, rbx
je 0x14002189d
mov dword [rbp + 0x78], 0
test r10, r10
je 0x14002189d
cmp dword [0x1401f0820], 0
je 0x14002189d
lea rdx, [rbx + 0x280]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x78]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
mov byte [0x1401f14d2], 0
cmp byte [0x1401f14d3], 0
je 0x140021901
test rbx, rbx
je 0x1400218fa
mov dword [rbp + 0x80], 0x43c80000
test r10, r10
je 0x1400218fa
cmp dword [0x1401f0820], 0
je 0x1400218fa
lea rdx, [rbx + 0x280]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x80]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
mov byte [0x1401f14d3], 0
cmp byte [0x1401f14c0], 0
je 0x1400219da
lea rdx, [rbx + 0x280]
test r10, r10
je 0x14002194c
cmp dword [0x1401f0820], 0
je 0x14002194c
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x88]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
movss xmm0, dword [rbp + 0x88]
comiss xmm0, xmm10
jbe 0x14002198f
test rbx, rbx
je 0x1400219cd
mov byte [rbp + 8], 1
test r10, r10
je 0x1400219cd
cmp dword [0x1401f0820], 0
je 0x1400219cd
lea rdx, [rbx + 0x2c]
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x1400219bf
lea rdx, [rbx + 0x280]
test r10, r10
je 0x1400219cd
cmp dword [0x1401f0820], 0
je 0x1400219cd
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x118]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rbx, qword [0x1401f1348]
cmp byte [0x1401f14c0], 0
jne 0x140021a99
lea rdx, [rbx + 0x280]
test r10, r10
je 0x140021a18
cmp dword [0x1401f0820], 0
je 0x140021a18
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x8c]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
movss xmm0, dword [rbp + 0x8c]
comiss xmm0, xmm10
jbe 0x140021a5b
test rbx, rbx
je 0x140021a99
mov byte [rbp + 0x10], 0x37
test r10, r10
je 0x140021a99
cmp dword [0x1401f0820], 0
je 0x140021a99
lea rdx, [rbx + 0x2c]
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x10]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x140021a8b
lea rdx, [rbx + 0x280]
test r10, r10
je 0x140021a99
cmp dword [0x1401f0820], 0
je 0x140021a99
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x190]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rbx, qword [0x1401f1348]
cmp byte [0x1401f14b1], 0
je 0x140021b43
test rbx, rbx
jne 0x140021ab0
mov rcx, r12
jmp 0x140021af8
mov rdx, qword [0x1401f0728]
add rdx, rbx
test r10, r10
je 0x140021af1
cmp dword [0x1401f0820], 0
je 0x140021af1
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x168]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
mov rcx, qword [rbp + 0x168]
mov dword [rbp + 0x90], 0x42c40000
mov rdx, qword [0x1401f0748]
add rdx, rcx
test r10, r10
je 0x140021b43
cmp dword [0x1401f0820], 0
je 0x140021b43
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x90]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rbx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
movzx edi, byte [0x1401f14a5]
test rbx, rbx
je 0x140021bd6
test r10, r10
je 0x140021b8a
cmp dword [0x1401f0820], 0
je 0x140021b8a
lea rdx, [rbx + 0x188]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x180]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
btr rax, 8
bts rcx, 8
test dil, dil
cmove rcx, rax
mov qword [rbp + 0x30], rcx
test r10, r10
je 0x140021bd6
cmp dword [0x1401f0820], 0
je 0x140021bd6
lea rdx, [rbx + 0x188]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x30]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [0x1401f14a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140021c33
mov ecx, dword [0x1401f14a8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140021c33
cmp byte [0x1401f14a5], 0
je 0x140021c05
xor dl, dl
jmp 0x140021c07
mov dl, 1
mov rcx, qword [0x1401f1348]
add rcx, 0x189
call fcn.1400234d0
cmp byte [0x1401f14a5], 0
sete byte [0x1401f14a5]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1401f14dc], 0
je 0x140021c41
mov r8b, 1
jmp 0x140021c44
xor r8b, r8b
mov edx, 2
mov rcx, qword [0x1401f1348]
call fcn.1400208d0
mov rcx, qword [0x1401f1348]
test rcx, rcx
je 0x140021cc2
mov rdx, qword [0x1401f0728]
add rdx, rcx
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140021c9f
cmp dword [0x1401f0820], 0
je 0x140021c9f
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x188]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401f0828]
mov rdx, qword [rbp + 0x188]
test rdx, rdx
je 0x140021cc9
mov rcx, qword [0x1401f0750]
add rcx, rdx
movss xmm1, dword [0x1401f14ac]
call fcn.1400233f0
mov rcx, qword [0x1401f0828]
movzx eax, byte [0x1401f14b0]
cmp byte [0x1401f06b2], al
je 0x140021cf4
movzx ecx, al
call fcn.140020b10
movzx eax, byte [0x1401f14b0]
mov byte [0x1401f06b2], al
mov rcx, qword [0x1401f0828]
cmp byte [0x1401f14d0], 0
je 0x140021d3d
cmp byte [0x1401f06c8], 0
jne 0x140021d7b
mov qword [rbp + 0x30], rsi
test rcx, rcx
je 0x140021d34
cmp dword [0x1401f0820], 0
je 0x140021d34
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x30]
mov rdx, qword [0x1401f10d0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401f06c8], 1
jmp 0x140021d7b
cmp byte [0x1401f06c8], 0
je 0x140021d7b
mov qword [rbp + 0x30], r14
test rcx, rcx
je 0x140021d74
cmp dword [0x1401f0820], 0
je 0x140021d74
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x30]
mov rdx, qword [0x1401f10d0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401f06c8], 0
mov eax, dword [r15 + r13]
cmp dword [0x1401f15cc], eax
jle 0x140021db4
lea rcx, [0x1401f15cc]
call fcn.140096130
cmp dword [0x1401f15cc], 0xffffffff
jne 0x140021db4
lea rcx, [0x1401f15d8]
call fcn.1400017c0
lea rcx, [0x1401f15cc]
call fcn.1400960c4
lea rcx, [rbp - 0x78]
call fcn.1400017c0
mov rax, qword [rbp - 0x78]
sub rax, qword [0x1401f15d8]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm0, xmm14
comisd xmm0, xmm15
jb 0x140021f6b
mov rdx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
test rdx, rdx
jne 0x140021df8
mov rdx, r12
jmp 0x140021e33
test r10, r10
je 0x140021e2c
cmp dword [0x1401f0820], 0
je 0x140021e2c
add rdx, 0x30
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x1a0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rdx, qword [rbp + 0x1a0]
test r10, r10
je 0x140021f1c
cmp dword [0x1401f0820], 0
je 0x140021e6b
add rdx, 0x10
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x108]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
test r10, r10
je 0x140021f1c
cmp dword [0x1401f0820], 0
je 0x140021eaa
mov rdx, qword [rbp + 0x108]
add rdx, 0x20
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x1a8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
test r10, r10
je 0x140021f1c
cmp dword [0x1401f0820], 0
je 0x140021ee5
mov rdx, qword [rbp + 0x1a8]
add rdx, 0x70
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x1b0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
test r10, r10
je 0x140021f1c
cmp dword [0x1401f0820], 0
je 0x140021f1c
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0xf0]
mov rdx, qword [rbp + 0x1b0]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
cmp byte [0x1401f14b2], 0
je 0x140021f2b
movaps xmm0, xmm12
jmp 0x140021f2f
movaps xmm0, xmm13
movss dword [rbp + 0x98], xmm0
test r10, r10
je 0x140021f72
cmp dword [0x1401f0820], 0
je 0x140021f72
mov rdx, qword [rbp + 0xf0]
add rdx, 0x2c
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x98]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
movzx r8d, byte [0x1401f14b3]
cmp byte [0x1401f08e3], r8b
je 0x140022026
test r8b, r8b
setne al
add al, 0xc8
mov byte [rbp + 0x18], al
mov rdx, qword [0x1401f1348]
add rdx, qword [0x1401f0740]
test r10, r10
je 0x140021fd5
cmp dword [0x1401f0820], 0
je 0x140021fd5
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x18]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx r8d, byte [0x1401f14b3]
mov r10, qword [0x1401f0828]
test r8b, r8b
sete byte [rbp + 0x20]
mov rdx, qword [0x1401f1348]
add rdx, qword [0x1401f0760]
test r10, r10
je 0x14002201f
cmp dword [0x1401f0820], 0
je 0x14002201f
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x20]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx r8d, byte [0x1401f14b3]
mov r10, qword [0x1401f0828]
mov byte [0x1401f08e3], r8b
movzx r8d, byte [0x1401f14b4]
cmp byte [0x1401f08e2], r8b
je 0x140022090
mov eax, 0x20
test r8b, r8b
cmovne eax, r12d
mov byte [rbp + 0x28], al
mov rdx, qword [0x1401f1348]
add rdx, qword [0x1401f0718]
test r10, r10
je 0x140022089
cmp dword [0x1401f0820], 0
je 0x140022089
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x28]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx r8d, byte [0x1401f14b4]
mov r10, qword [0x1401f0828]
mov byte [0x1401f08e2], r8b
mov rdx, qword [0x1401f1348]
test rdx, rdx
je 0x1400221f4
test r10, r10
je 0x1400220d4
cmp dword [0x1401f0820], 0
je 0x1400220d4
add rdx, 0x20
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0xf8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rbx, qword [rbp + 0xf8]
test rbx, rbx
je 0x1400221f4
mov eax, dword [r15 + r13]
cmp dword [0x1401f15bc], eax
jle 0x140022118
lea rcx, [0x1401f15bc]
call fcn.140096130
cmp dword [0x1401f15bc], 0xffffffff
jne 0x140022111
lea rcx, [0x1401f15bc]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
mov eax, dword [r15 + r13]
cmp dword [0x1401f15b4], eax
jle 0x14002218d
lea rcx, [0x1401f15b4]
call fcn.140096130
cmp dword [0x1401f15b4], 0xffffffff
jne 0x140022186
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x14002216a
cmp dword [0x1401f0820], 0
je 0x14002216a
lea rdx, [rbx + 0x38]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xa0]
movss dword [0x1401f15e0], xmm0
lea rcx, [0x1401f15b4]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
movss xmm0, dword [0x1401f14b8]
divss xmm0, dword [0x14013e940]
mulss xmm0, dword [0x14013e8b4]
subss xmm0, dword [0x14013e8a8]
cmp byte [0x1401f14b7], 0
jne 0x1400221be
movss xmm0, dword [0x1401f15e0]
movss dword [rbp + 0x38], xmm0
test r10, r10
je 0x1400221f4
cmp dword [0x1401f0820], 0
je 0x1400221f4
lea rdx, [rbx + 0x38]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x38]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
mov rcx, qword [0x1401f1348]
test rcx, rcx
je 0x140022380
mov rdx, qword [0x1401f0728]
add rdx, rcx
test r10, r10
je 0x14002223e
cmp dword [0x1401f0820], 0
je 0x14002223e
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x100]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
cmp qword [rbp + 0x100], 0
je 0x140022380
cmp byte [0x1401f14bc], 0
je 0x140022380
mov rcx, qword [0x1401f1348]
test rcx, rcx
jne 0x14002226a
mov rdx, r12
jmp 0x1400222ab
mov rdx, qword [0x1401f0728]
add rdx, rcx
test r10, r10
je 0x1400222a4
cmp dword [0x1401f0820], 0
je 0x1400222a4
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x138]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rdx, qword [rbp + 0x138]
test r10, r10
je 0x1400222e2
cmp dword [0x1401f0820], 0
je 0x1400222e2
add rdx, 0x280
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xa4]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
cvttss2si rcx, dword [rbp + 0xa4]
movzx eax, byte [0x1401f14bc]
neg al
sbb ebx, ebx
and ebx, 0x4000
or ebx, ecx
mov rcx, qword [0x1401f1348]
test rcx, rcx
jne 0x14002230f
mov rax, r12
jmp 0x140022350
mov rdx, qword [0x1401f0728]
add rdx, rcx
test r10, r10
je 0x140022349
cmp dword [0x1401f0820], 0
je 0x140022349
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x110]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rax, qword [rbp + 0x110]
lea rdx, [rax + 0x270]
mov dword [rbp], ebx
test r10, r10
je 0x140022380
cmp dword [0x1401f0820], 0
je 0x140022380
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [r15 + r13]
cmp dword [0x1401f159c], eax
jle 0x1400223b9
lea rcx, [0x1401f159c]
call fcn.140096130
cmp dword [0x1401f159c], 0xffffffff
jne 0x1400223b9
lea rcx, [0x1401f1590]
call fcn.1400017c0
lea rcx, [0x1401f159c]
call fcn.1400960c4
lea rcx, [rbp - 0x80]
call fcn.1400017c0
mov rax, qword [rbp - 0x80]
mov rcx, rax
sub rcx, qword [0x1401f1590]
cmp rcx, 0x3b9aca00
jl 0x14002256f
mov qword [0x1401f1590], rax
movzx ecx, byte [0x1401f14b6]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14002256f
mov rdx, qword [0x1401f1348]
test rdx, rdx
je 0x140022be8
lea rdx, [rbp + 0x1d8]
lea rcx, [0x1401f1050]
call fcn.1400209d0
nop
mov r14, qword [rbp + 0x1e0]
mov rdi, qword [rbp + 0x1d8]
cmp rdi, r14
je 0x140022559
add rdi, 0x28
nop dword [rax]
mov rax, qword [rdi - 0x28]
mov qword [rbp - 0x70], rax
lea rdx, [rdi - 0x20]
lea rcx, [rbp - 0x68]
call fcn.140011720
mov rax, qword [rdi]
mov qword [rbp - 0x48], rax
mov eax, dword [rdi + 8]
mov dword [rbp - 0x40], eax
mov rsi, qword [rbp - 0x70]
test rsi, rsi
je 0x14002253f
mov rbx, qword [0x1401f0828]
test rbx, rbx
je 0x1400224ab
cmp dword [0x1401f0820], 0
je 0x1400224ab
lea rdx, [rsi + 0x90]
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [0x1401f0828]
movss xmm1, dword [rsp + 0x48]
subss xmm1, dword [0x1401f135c]
movss xmm2, dword [rsp + 0x4c]
subss xmm2, dword [0x1401f1360]
movss xmm0, dword [rsp + 0x50]
subss xmm0, dword [0x1401f1364]
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400224fa
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x140022502
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm8, xmm0
jbe 0x14002253f
mov dword [rbp], 1
mov rdx, qword [0x1401f0758]
add rdx, rsi
test rbx, rbx
je 0x14002253f
cmp dword [0x1401f0820], 0
je 0x14002253f
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, [rbp - 0x68]
call fcn.140003250
add rdi, 0x38
lea rax, [rdi - 0x28]
cmp rax, r14
jne 0x140022440
lea rcx, [rbp + 0x1d8]
call fcn.1400030b0
movabs r14, 0x30245c8b48205f89
mov rdx, qword [0x1401f1348]
test rdx, rdx
je 0x140022be8
mov r10, qword [0x1401f0828]
test r10, r10
je 0x1400225c4
cmp dword [0x1401f0820], 0
je 0x1400225c4
add rdx, qword [0x1401f0730]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x120]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
mov rsi, qword [rbp + 0x120]
test rsi, rsi
je 0x140022bef
movzx ebx, byte [0x1401f14e0]
test r10, r10
je 0x140022612
cmp dword [0x1401f0820], 0
je 0x140022612
lea rdx, [rsi + 0x188]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x128]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rcx, qword [rbp + 0x128]
mov rax, rcx
btr rax, 8
bts rcx, 8
test bl, bl
cmove rcx, rax
mov qword [rbp + 0x130], rcx
test r10, r10
je 0x14002269e
cmp dword [0x1401f0820], 0
je 0x14002266a
lea rdx, [rsi + 0x188]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x130]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
test r10, r10
je 0x14002269e
cmp dword [0x1401f0820], 0
je 0x14002269e
lea rdx, [rsi + 0x20]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x1b8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rdi, qword [rbp + 0x1b8]
test r10, r10
je 0x1400226df
cmp dword [0x1401f0820], 0
je 0x1400226df
mov rdx, qword [0x1401f0720]
add rdx, rsi
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0xe8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rbx, qword [rbp + 0xe8]
test rbx, rbx
je 0x140022b19
mov eax, dword [r15 + r13]
cmp dword [0x1401f1588], eax
jle 0x140022723
lea rcx, [0x1401f1588]
call fcn.140096130
cmp dword [0x1401f1588], 0xffffffff
jne 0x14002271c
lea rcx, [0x1401f1588]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
mov eax, dword [r15 + r13]
cmp dword [0x1401f15a8], eax
jle 0x14002279f
lea rcx, [0x1401f15a8]
call fcn.140096130
cmp dword [0x1401f15a8], 0xffffffff
jne 0x140022798
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x14002277c
cmp dword [0x1401f0820], 0
je 0x14002277c
mov rdx, qword [rbp + 0xe8]
add rdx, 0x4c
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xa8]
movss dword [0x1401f1618], xmm0
lea rcx, [0x1401f15a8]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
mov eax, dword [r15 + r13]
cmp dword [0x1401f158c], eax
jle 0x140022817
lea rcx, [0x1401f158c]
call fcn.140096130
cmp dword [0x1401f158c], 0xffffffff
jne 0x140022810
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x1400227f4
cmp dword [0x1401f0820], 0
je 0x1400227f4
lea rdx, [rbx + 0xf8]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xac]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xac]
movss dword [0x1401f1600], xmm0
lea rcx, [0x1401f158c]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
mov eax, dword [r15 + r13]
cmp dword [0x1401f160c], eax
jle 0x14002288c
lea rcx, [0x1401f160c]
call fcn.140096130
cmp dword [0x1401f160c], 0xffffffff
jne 0x140022885
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022869
cmp dword [0x1401f0820], 0
je 0x140022869
lea rdx, [rdi + 0x38]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xb0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xb0]
movss dword [0x1401f15a4], xmm0
lea rcx, [0x1401f160c]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
mov eax, dword [r15 + r13]
cmp dword [0x1401f15b0], eax
jle 0x140022904
lea rcx, [0x1401f15b0]
call fcn.140096130
cmp dword [0x1401f15b0], 0xffffffff
jne 0x1400228fd
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x1400228e1
cmp dword [0x1401f0820], 0
je 0x1400228e1
lea rdx, [rbx + 0x90]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xb4]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xb4]
movss dword [0x1401f1584], xmm0
lea rcx, [0x1401f15b0]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
mov eax, dword [r15 + r13]
cmp dword [0x1401f15b8], eax
jle 0x14002297c
lea rcx, [0x1401f15b8]
call fcn.140096130
cmp dword [0x1401f15b8], 0xffffffff
jne 0x140022975
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022959
cmp dword [0x1401f0820], 0
je 0x140022959
lea rdx, [rbx + 0x88]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xb8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xb8]
movss dword [0x1401f15c4], xmm0
lea rcx, [0x1401f15b8]
call fcn.1400960c4
mov r10, qword [0x1401f0828]
cmp byte [0x1401f14e1], 0
je 0x14002298f
movss xmm0, dword [0x1401f14e4]
jmp 0x140022997
movss xmm0, dword [0x1401f1618]
movss dword [rbp + 0x40], xmm0
test r10, r10
je 0x1400229cd
cmp dword [0x1401f0820], 0
je 0x1400229cd
lea rdx, [rbx + 0x4c]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x40]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
cmp byte [0x1401f14e8], 0
je 0x1400229e0
movss xmm0, dword [0x1401f14ec]
jmp 0x1400229e8
movss xmm0, dword [0x1401f1584]
movss dword [rbp + 0x48], xmm0
test r10, r10
je 0x140022a21
cmp dword [0x1401f0820], 0
je 0x140022a21
lea rdx, [rbx + 0x90]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x48]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
cmp byte [0x1401f14f0], 0
je 0x140022a34
movss xmm0, dword [0x1401f14f4]
jmp 0x140022a3c
movss xmm0, dword [0x1401f15c4]
movss dword [rbp + 0x50], xmm0
test r10, r10
je 0x140022a75
cmp dword [0x1401f0820], 0
je 0x140022a75
lea rdx, [rbx + 0x88]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x50]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
cmp byte [0x1401f14f8], 0
je 0x140022a88
movss xmm0, dword [0x1401f14fc]
jmp 0x140022a90
movss xmm0, dword [0x1401f15a4]
movss dword [rbp + 0x70], xmm0
test r10, r10
je 0x140022ac6
cmp dword [0x1401f0820], 0
je 0x140022ac6
lea rdx, [rdi + 0x38]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x70]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
cmp byte [0x1401f1500], 0
je 0x140022ad8
mov dword [rbp + 0x58], 0
jmp 0x140022ae5
movss xmm0, dword [0x1401f1600]
movss dword [rbp + 0x58], xmm0
test r10, r10
je 0x140022b4d
cmp dword [0x1401f0820], 0
je 0x140022b19
lea rdx, [rbx + 0xf8]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x58]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r10, qword [0x1401f0828]
test r10, r10
je 0x140022b4d
cmp dword [0x1401f0820], 0
je 0x140022b4d
lea rdx, [rsi + 0x20]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x140]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rax, qword [rbp + 0x140]
mov qword [0x1401f06d0], rax
mov qword [0x1401f06d8], rsi
test r10, r10
je 0x140022b96
cmp dword [0x1401f0820], 0
je 0x140022b96
lea rdx, [rsi + 0x30]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x148]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rax, qword [rbp + 0x148]
mov qword [0x1401f06c0], rax
test r10, r10
je 0x140022bd9
cmp dword [0x1401f0820], 0
je 0x140022bd9
lea rdx, [rsi + 0x90]
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rsp + 0x70]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
movsd xmm0, qword [rsp + 0x70]
mov eax, dword [rsp + 0x78]
jmp 0x140022cf7
mov r10, qword [0x1401f0828]
test rdx, rdx
jne 0x140022bf9
mov rax, r12
jmp 0x140022c3b
test r10, r10
je 0x140022c34
cmp dword [0x1401f0820], 0
je 0x140022c34
add rdx, 0x20
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x150]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
mov rax, qword [rbp + 0x150]
mov qword [0x1401f06d0], rax
mov qword [0x1401f06d8], rdx
test rdx, rdx
jne 0x140022c53
mov rax, r12
jmp 0x140022c95
test r10, r10
je 0x140022c8e
cmp dword [0x1401f0820], 0
je 0x140022c8e
add rdx, 0x30
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x158]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1401f1348]
mov r10, qword [0x1401f0828]
mov rax, qword [rbp + 0x158]
mov qword [0x1401f06c0], rax
test rdx, rdx
jne 0x140022cb8
movss dword [rsp + 0x44], xmm9
movaps xmm0, xmm9
unpcklps xmm0, xmm9
movsd qword [rsp + 0x3c], xmm0
jmp 0x140022ced
test r10, r10
je 0x140022ced
cmp dword [0x1401f0820], 0
je 0x140022ced
add rdx, 0x90
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rsp + 0x3c]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
movsd xmm0, qword [rsp + 0x3c]
mov eax, dword [rsp + 0x44]
mov dword [0x1401f0898], eax
movsd qword [0x1401f0890], xmm0
mov rdx, qword [0x1401f1280]
test rdx, rdx
je 0x140022d81
test r10, r10
je 0x140022d48
cmp dword [0x1401f0820], 0
je 0x140022d48
add rdx, 0x3c0
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x160]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r10, qword [0x1401f0828]
mov rdx, qword [rbp + 0x160]
test rdx, rdx
je 0x140022d81
test r10, r10
je 0x140022d92
cmp dword [0x1401f0820], 0
je 0x140022d92
add rdx, 0x40
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rsp + 0x30]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
jmp 0x140022d92
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x68], eax
lea rcx, [rsp + 0x60]
call fcn.140020ce0
mov rdx, qword [0x1401f1348]
test rdx, rdx
je 0x1400232a9
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022df4
cmp dword [0x1401f0820], 0
je 0x140022df4
add rdx, qword [0x1401f0768]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x198]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x198]
test rdi, rdi
je 0x1400232a9
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022e35
cmp dword [0x1401f0820], 0
je 0x140022e35
lea rdx, [rdi + 0x20]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x170]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x170]
test rbx, rbx
je 0x1400232a9
mov eax, dword [r15 + r13]
cmp dword [0x1401f15c0], eax
jle 0x140022eb3
lea rcx, [0x1401f15c0]
call fcn.140096130
cmp dword [0x1401f15c0], 0xffffffff
jne 0x140022eb3
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022e97
cmp dword [0x1401f0820], 0
je 0x140022e97
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xe4]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xe4]
movss dword [0x1401f161c], xmm0
lea rcx, [0x1401f15c0]
call fcn.1400960c4
mov eax, dword [r15 + r13]
cmp dword [0x1401f1604], eax
jle 0x140022f20
lea rcx, [0x1401f1604]
call fcn.140096130
cmp dword [0x1401f1604], 0xffffffff
jne 0x140022f20
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022f08
cmp dword [0x1401f0820], 0
je 0x140022f08
lea rdx, [rbx + 0x2e4]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xe0]
mov dword [0x1401f1608], eax
lea rcx, [0x1401f1604]
call fcn.1400960c4
mov eax, dword [r15 + r13]
cmp dword [0x1401f1610], eax
jle 0x140022f8d
lea rcx, [0x1401f1610]
call fcn.140096130
cmp dword [0x1401f1610], 0xffffffff
jne 0x140022f8d
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022f75
cmp dword [0x1401f0820], 0
je 0x140022f75
lea rdx, [rbx + 0x2e8]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xdc]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0xdc]
mov dword [0x1401f15c8], eax
lea rcx, [0x1401f1610]
call fcn.1400960c4
mov eax, dword [r15 + r13]
cmp dword [0x1401f1638], eax
jle 0x140022ffe
lea rcx, [0x1401f1638]
call fcn.140096130
cmp dword [0x1401f1638], 0xffffffff
jne 0x140022ffe
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140022fe2
cmp dword [0x1401f0820], 0
je 0x140022fe2
lea rdx, [rbx + 0x8c]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xc8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xc8]
movss dword [0x1401f15d0], xmm0
lea rcx, [0x1401f1638]
call fcn.1400960c4
mov eax, dword [r15 + r13]
cmp dword [0x1401f15a0], eax
jle 0x14002306f
lea rcx, [0x1401f15a0]
call fcn.140096130
cmp dword [0x1401f15a0], 0xffffffff
jne 0x14002306f
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140023053
cmp dword [0x1401f0820], 0
je 0x140023053
lea rdx, [rbx + 0x2f4]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xd8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0xd8]
movss dword [0x1401f15ac], xmm0
lea rcx, [0x1401f15a0]
call fcn.1400960c4
movzx eax, byte [0x1401f1505]
cmp byte [0x1401f08e1], al
je 0x1400230d3
test al, al
je 0x14002308b
mov dword [rbp + 0x60], 0
jmp 0x140023098
movss xmm0, dword [0x1401f161c]
movss dword [rbp + 0x60], xmm0
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x1400230cd
cmp dword [0x1401f0820], 0
je 0x1400230cd
lea rdx, [rbx + 0x74]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx eax, byte [0x1401f1505]
mov byte [0x1401f08e1], al
movzx eax, byte [0x1401f1507]
cmp byte [0x1401f08e4], al
je 0x140023158
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140023113
cmp dword [0x1401f0820], 0
je 0x140023113
lea rdx, [rdi + 0x20]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x178]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rbp + 0xd0], 0x447a0000
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140023158
cmp dword [0x1401f0820], 0
je 0x140023158
mov rdx, qword [rbp + 0x178]
add rdx, 0x134
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xd0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx edx, byte [0x1401f1506]
cmp byte [0x1401f08ec], dl
je 0x1400232a9
mov eax, dword [0x1401f1608]
test dl, dl
cmovne eax, r12d
mov dword [rbp + 0xc0], eax
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x1400231b8
cmp dword [0x1401f0820], 0
je 0x1400231b8
lea rdx, [rbx + 0x2e4]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx edx, byte [0x1401f1506]
mov eax, dword [0x1401f15c8]
test dl, dl
cmovne eax, r12d
mov dword [rbp + 0x30], eax
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x1400231ff
cmp dword [0x1401f0820], 0
je 0x1400231ff
lea rdx, [rbx + 0x2e8]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx edx, byte [0x1401f1506]
test dl, dl
je 0x14002320c
mov dword [rbp + 0x68], 0x3c23d70a
jmp 0x140023219
movss xmm0, dword [0x1401f15ac]
movss dword [rbp + 0x68], xmm0
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x140023251
cmp dword [0x1401f0820], 0
je 0x140023251
lea rdx, [rbx + 0x2f4]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx edx, byte [0x1401f1506]
test dl, dl
je 0x14002325e
mov dword [rbp], 0x43520000
jmp 0x14002326b
movss xmm0, dword [0x1401f15d0]
movss dword [rbp], xmm0
mov rcx, qword [0x1401f0828]
test rcx, rcx
je 0x1400232a3
cmp dword [0x1401f0820], 0
je 0x1400232a3
lea rdx, [rbx + 0x8c]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movzx edx, byte [0x1401f1506]
mov byte [0x1401f08ec], dl
cmp byte [0x1401f1508], 0
movabs rsi, 0x30245c8b48909090
je 0x1400215c0
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.140095db0
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret