Function at 0x1400328f0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb78]
sub rsp, 0xc50
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400a3008]
xor rax, rsp
mov qword [rbp + 0xaa0], rax
xor r14d, r14d
mov dword [rbp - 0x78], r14d
xorps xmm15, xmm15
cmp byte [0x1400a3ca0], r14b
je 0x140032a1c
mov eax, dword [0x1400a643c]
cdq
sub eax, edx
sar eax, 1
mov esi, eax
mov eax, dword [0x1400a6438]
cdq
sub eax, edx
sar eax, 1
mov edi, eax
mov rcx, qword [0x1400a61e0]
mov rcx, qword [rcx + 0x1dc0]
lea r8, str.Foreground
lea edx, [r14 + 1]
mov rcx, qword [rcx]
call fcn.1400044f0
mov rbx, rax
movss xmm0, dword [0x140095178]
mov dword [rbp - 0x70], r14d
movss dword [rbp - 0x6c], xmm0
movss xmm0, dword [0x140095188]
movss dword [rbp - 0x68], xmm0
movss dword [rbp - 0x64], xmm0
lea rcx, [rbp - 0x70]
call fcn.140002ca0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss dword [rbp - 0x80], xmm0
movd xmm1, esi
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x7c], xmm1
mov dword [rsp + 0x20], r14d
mov r9d, eax
movss xmm2, dword [0x1400951ac]
lea rdx, [rbp - 0x80]
mov rcx, rbx
call fcn.14001fef0
cmp qword [0x1400a63c0], r14
je 0x140032a32
cmp qword [0x1400a63c8], r14
jne 0x140032c4e
mov r8d, dword [0x1400a61dc]
movabs rax, 0x91e7ad54e6a839a0
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x50], rax
movabs rbx, 0xe18a41752c4f98c
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x48], rax
movabs rdi, 0xf5c9d93a83c155c3
mov qword [rsp + 0x50], rdi
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x890], rax
movabs rsi, 0xe18a41752c495e0
mov qword [rsp + 0x50], rsi
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x898], rax
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x890]
movdqa xmmword [rbp - 0x50], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x3b0]
call fcn.1400319b0
lea rcx, [rbp + 0x170]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140032ad0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov rax, qword [rbp + 0x188]
mov qword [0x1400a63c0], rax
mov r8d, dword [0x1400a61dc]
movabs rax, 0x91e7bc54eaa63ba6
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x50], rdi
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x870], rax
mov qword [rsp + 0x50], rsi
mov rax, qword [rsp + 0x50]
mov qword [rbp + 0x878], rax
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp + 0x870]
movdqa xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x5e8]
call fcn.1400319b0
lea rcx, [rbp + 0x170]
mov edx, 4
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x140032bd0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rax + 0x30]
mov qword [rcx + 0x30], rax
mov rax, qword [rbp + 0x188]
mov qword [0x1400a63c8], rax
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rsi, [0x1400a6b78]
mov eax, dword [rdx + rcx]
cmp dword [0x1400a6ba0], eax
jle 0x140032cca
lea rcx, [0x1400a6ba0]
call fcn.14004f430
cmp dword [0x1400a6ba0], 0xffffffff
jne 0x140032cca
mov qword [0x1400a6b78], r14
mov qword [0x1400a6b88], r14
mov qword [0x1400a6b90], 0xf
xor r8d, r8d
lea rdx, [0x14008ffde]
mov rcx, rsi
call fcn.140035890
lea rcx, [0x1400801d0]
call fcn.14004fa14
nop
lea rcx, [0x1400a6ba0]
call fcn.14004f3d0
mov edi, r14d
mov rbx, r14
mov edx, dword [0x1400a63c8]
add edx, 0x47796d
add edx, edi
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0x820]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0x820]
test al, al
je 0x140032d1f
mov byte [rbp + rbx + 0x8a0], al
inc edi
inc rbx
cmp rbx, 0x100
jl 0x140032cd0
jmp 0x140032d36
movsxd rax, edi
cmp rax, 0x100
jae 0x140033ebb
mov byte [rbp + rax + 0x8a0], 0
cmp byte [rbp + 0x8a0], 0
je 0x140033e53
mov qword [rbp + 0x90], r14
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 0xf
lea rax, [rbp + 0x8a0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140032d70
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x90]
call fcn.140035890
cmp qword [0x1400a6b90], 0x10
cmovae rsi, qword [0x1400a6b78]
lea rcx, [rbp + 0x90]
mov rbx, qword [rbp + 0x90]
mov rdi, qword [rbp + 0xa8]
cmp rdi, 0x10
cmovae rcx, rbx
mov r8, qword [rbp + 0xa0]
cmp r8, qword [0x1400a6b88]
jne 0x140032de3
mov rdx, rsi
call fcn.140054690
test eax, eax
jne 0x140032de3
cmp byte [0x1400a6b40], al
je 0x140032de3
xor sil, sil
jmp 0x140032de6
mov sil, 1
cmp rdi, 0x10
jb 0x140032e1d
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140032e15
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033ed9
mov rcx, rbx
call fcn.14004f230
mov ebx, r14d
mov dword [rsp + 0x60], ebx
test sil, sil
je 0x1400330ff
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], bl
lea rax, [rbp + 0x8a0]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x140032e60
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0xf0]
call fcn.140035890
nop
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov r8d, 0xc
lea rdx, str.cstrikemaps
lea rcx, [rbp + 0xd0]
call fcn.140035890
nop
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xc0], r14
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
lea rdx, [0x1400a62b0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140032ee5
lea rcx, [rbp + 0xb0]
call fcn.140035890
nop
lea r9, [rbp + 0xd0]
lea r8, [rbp + 0xb0]
lea rcx, [rbp + 0x130]
call fcn.140035e90
mov ebx, 4
mov dword [rsp + 0x60], ebx
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x130]
lea rcx, [0x1400a6460]
call fcn.1400398a0
mov byte [0x1400a6b40], al
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x140032f80
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032f7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033ec1
call fcn.14004f230
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x148], 0xf
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0x10
jb 0x140032fdb
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140032fd5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033ec7
call fcn.14004f230
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0x10
jb 0x14003301d
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033017
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033ecd
call fcn.14004f230
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0x10
jb 0x14003305e
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033059
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033ed3
call fcn.14004f230
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x160], r14
mov qword [rbp + 0x168], 0xf
lea rax, [rbp + 0x8a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140033085
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x150]
call fcn.140035890
mov rdx, qword [0x1400a6b90]
cmp rdx, 0x10
jb 0x1400330e3
inc rdx
mov rcx, qword [0x1400a6b78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400330de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033ed9
call fcn.14004f230
movups xmm0, xmmword [rbp + 0x150]
movups xmmword [0x1400a6b78], xmm0
movups xmm1, xmmword [rbp + 0x160]
movups xmmword [0x1400a6b88], xmm1
cmp byte [0x1400a63d0], 0
jne 0x140033127
cmp byte [0x1400a3c81], 0
jne 0x140033127
cmp byte [0x1400a3c98], 0
jne 0x140033127
cmp byte [0x1400a3c99], 0
je 0x140033e53
mov rax, qword [0x1400a63c0]
lea rsi, [rax + 0x4d5ae4]
mov qword [rbp - 0x50], rsi
lea edx, [rax + 0x4c88e8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x828]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x828]
mov qword [rsp + 0x70], rdi
lea edx, [rdi + 0x260]
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp + 0x68]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm10, dword [rbp + 0x68]
movss dword [rsp + 0x58], xmm10
movss xmm12, dword [rbp + 0x6c]
movss dword [rsp + 0x5c], xmm12
movss xmm0, dword [rbp + 0x70]
movss dword [rbp - 0x60], xmm0
lea edx, [rdi + 0x9c]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x860]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13d, dword [rbp + 0x860]
mov eax, r14d
mov dword [rsp + 0x64], eax
movss xmm13, dword [0x140095550]
movss xmm9, dword [0x1400951f0]
movss xmm14, dword [0x1400951f4]
movss xmm11, dword [0x1400951c0]
nop word [rax + rax]
shl eax, 4
lea edx, [rsi + rax]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x868]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x868]
test rsi, rsi
je 0x140033e37
cmp rsi, rdi
je 0x140033e37
lea edx, [rsi + 0x260]
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp + 0x58]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x58]
movss dword [rbp + 8], xmm6
movss xmm7, dword [rbp + 0x5c]
movss dword [rbp + 0xc], xmm7
movss xmm8, dword [rbp + 0x60]
movss dword [rbp + 0x10], xmm8
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 8]
call fcn.140031840
test al, al
je 0x140033e37
lea edx, [rsi + 0x9c]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x858]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12d, dword [rbp + 0x858]
cmp r12d, r13d
jne 0x1400332e3
cmp byte [0x1400a63d0], 0
je 0x140033e37
lea edx, [rsi + 0x93]
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0x821]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x821], 0
jne 0x140033e37
lea edx, [rsi + 0x17c]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x830]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x830], 0
jne 0x140033e37
lea edx, [rsi + 0x94]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x848]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x848]
mov dword [rbp - 0x78], eax
test eax, eax
je 0x140033e37
mov r15b, 1
cmp byte [0x1400a6b40], 0
je 0x140033418
mov qword [rbp + 0x870], r14
mov qword [rbp + 0x880], r14
mov qword [rbp + 0x888], 0xf
lea rax, [rbp + 0x8a0]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400333b4
lea rdx, [rbp + 0x8a0]
lea rcx, [rbp + 0x870]
call fcn.140035890
or ebx, 2
mov dword [rsp + 0x60], ebx
lea rcx, [rbp + 0x870]
mov rbx, qword [rbp + 0x870]
mov rdi, qword [rbp + 0x888]
cmp rdi, 0x10
cmovae rcx, rbx
mov r8, qword [rbp + 0x880]
cmp r8, 0xd
jne 0x140033412
lea rdx, str.cs_office.bsp
call fcn.140054690
test eax, eax
je 0x140033426
movzx r14d, r15b
jmp 0x140033429
mov rdi, qword [rbp + 0x888]
mov rbx, qword [rbp + 0x870]
xor r14b, r14b
mov eax, dword [rsp + 0x60]
test al, 2
je 0x14003346f
and eax, 0xfffffffd
mov dword [rsp + 0x60], eax
cmp rdi, 0x10
jb 0x14003346f
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140033467
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033edf
mov rcx, rbx
call fcn.14004f230
test r14b, r14b
je 0x1400334b8
movss dword [rbp + 0x48], xmm6
movss dword [rbp + 0x4c], xmm7
movaps xmm0, xmm8
addss xmm0, xmm9
movss dword [rbp + 0x50], xmm0
movss dword [rbp + 0x38], xmm10
movss dword [rbp + 0x3c], xmm12
movss xmm0, dword [rbp - 0x60]
addss xmm0, xmm9
movss dword [rbp + 0x40], xmm0
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x38]
call fcn.14003be40
movzx r15d, al
mov edx, dword [0x1400a63c0]
add edx, 0x50e368
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 4]
lea r8, [rbp + 0x840]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ecx, dword [rbp + 0x840]
add ecx, 0x38
mov ebx, r14d
mov eax, dword [rsp + 0x64]
lea edi, [rax + rax*4]
shl edi, 6
add edi, ecx
nop dword [rax]
mov edx, edi
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0x822]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0x822]
test al, al
je 0x140033543
mov byte [rbp + rbx + 0x9a0], al
inc edi
inc rbx
cmp rbx, 0x100
jl 0x140033500
jmp 0x140033558
cmp rbx, 0x100
jae 0x140033ee5
mov byte [rbp + rbx + 0x9a0], r14b
lea edx, [rsi + 0x578]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x83c]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x83c]
test edi, edi
je 0x140033e32
lea ebx, [rdi + 0xc]
mov edx, ebx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x838]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp + 0x838]
lea edx, [rbx + 0x10]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x834]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x834]
lea edx, [rbx + 0x20]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x854]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss dword [rbp + 0x28], xmm7
movss dword [rbp + 0x2c], xmm6
movss xmm0, dword [rbp + 0x854]
movaps xmm1, xmm0
subss xmm1, xmm8
addss xmm1, xmm0
movss dword [rbp + 0x30], xmm1
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x28]
call fcn.140031840
test al, al
je 0x140033e32
lea ebx, [rdi + 0x2ac]
mov edx, ebx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x850]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp + 0x850]
lea edx, [rbx + 0x10]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x84c]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x84c]
lea edx, [rbx + 0x20]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x844]
mov rcx, qword [0x1400a63b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss dword [rbp + 0x18], xmm7
movss xmm0, dword [rbp + 0x844]
addss xmm0, dword [0x1400951c4]
movss dword [rbp + 0x20], xmm0
movss xmm8, dword [0x1400951a0]
subss xmm6, xmm8
movss dword [rbp + 0x1c], xmm6
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x18]
call fcn.140031840
test al, al
je 0x140033e32
movss xmm12, dword [rbp - 0x2c]
movaps xmm1, xmm12
movss xmm9, dword [rbp + 0x114]
subss xmm1, xmm9
andps xmm1, xmm13
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140033728
xorps xmm6, xmm6
sqrtss xmm6, xmm1
jmp 0x140033733
movaps xmm0, xmm1
call fcn.14007e298
movaps xmm6, xmm0
comiss xmm6, dword [0x1400951dc]
ja 0x1400338ef
test r15b, r15b
jne 0x140033752
cmp byte [0x1400a3c80], r14b
jne 0x1400338ef
movss xmm1, dword [0x1400951e4]
subss xmm1, dword [0x1400a3c84]
subss xmm1, xmm6
divss xmm6, xmm1
mulss xmm6, xmm14
mov eax, dword [0x1400a6438]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss xmm10, dword [rbp + 0x110]
movaps xmm7, xmm10
subss xmm7, xmm0
mov eax, dword [0x1400a643c]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movaps xmm8, xmm9
subss xmm8, xmm0
cmp byte [0x1400a3c99], r14b
je 0x140033843
mov rax, qword [0x1400a61e0]
mov rcx, qword [rax + 0x1dc0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rcx]
call fcn.1400044f0
mov rbx, rax
movaps xmm0, xmmword [0x140095540]
movups xmmword [rbp + 0x870], xmm0
cvttss2si ecx, xmm10
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
movss dword [rbp], xmm0
cvttss2si ecx, xmm9
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
movss dword [rbp + 4], xmm1
lea rcx, [rbp + 0x870]
call fcn.140002ca0
mov r9d, eax
cvttss2si ecx, xmm6
movd xmm2, ecx
cvtdq2ps xmm2, xmm2
movss xmm0, dword [0x140095188]
movss dword [rsp + 0x28], xmm0
lea rdx, [rbp]
mov rcx, rbx
call fcn.14001fe00
cmp byte [0x1400a3c98], r14b
je 0x1400338e6
cmp byte [0x1400a63d2], r14b
jne 0x1400338e6
mov ecx, 0x24
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x14003387d
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400338e6
movaps xmm0, xmm7
andps xmm0, xmm13
comiss xmm6, xmm0
jbe 0x1400338e6
movaps xmm0, xmm8
andps xmm0, xmm13
comiss xmm6, xmm0
jbe 0x1400338e6
movss xmm0, dword [0x1400a3c9c]
ucomiss xmm0, xmm15
jp 0x1400338b0
jne 0x1400338b0
mulss xmm7, xmm11
mulss xmm8, xmm11
movaps xmm1, xmm14
subss xmm1, xmm0
divss xmm1, xmm14
movaps xmm0, xmm1
mulss xmm0, xmm8
cvttss2si r8, xmm0
mulss xmm1, xmm7
cvttss2si rdx, xmm1
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov ecx, 0x8001
call qword [sym.imp.USER32.dll_mouse_event]
movss xmm8, dword [0x1400951a0]
mov dword [rbp - 0x70], 0xff
mov dword [rbp - 0x6c], 0xff
mov dword [rbp - 0x68], 0xff
mov dword [rbp - 0x64], 0xff
movss xmm11, dword [rbp - 0x30]
cmp r12d, r13d
jne 0x140033940
cmp byte [0x1400a63b5], r14b
je 0x1400339b8
cmp byte [0x1400a63d0], r14b
je 0x1400339b8
cmp byte [0x1400a63b7], r14b
je 0x140033968
test r15b, r15b
jne 0x140033968
jmp 0x1400339b8
cmp byte [0x1400a3c83], r14b
je 0x1400339e1
cmp byte [0x1400a3c81], r14b
je 0x1400339e1
cmp byte [0x1400a61da], r14b
je 0x140033968
test r15b, r15b
je 0x1400339e1
movaps xmm0, xmm11
unpcklps xmm0, xmm12
movsd qword [rbp - 0x30], xmm0
movsd qword [rbp + 0x120], xmm0
mov eax, dword [rbp - 0x28]
mov dword [rbp + 0x128], eax
movsd xmm0, qword [rbp - 0x40]
movsd qword [rbp + 0x80], xmm0
mov eax, dword [rbp - 0x38]
mov dword [rbp + 0x88], eax
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x80]
call fcn.140031b90
cmp r12d, r13d
jne 0x1400339e1
cmp byte [0x1400a61db], r14b
je 0x1400339d8
cmp byte [0x1400a63d0], r14b
je 0x1400339d8
cmp byte [0x1400a63b7], r14b
je 0x140033a0d
test r15b, r15b
jne 0x140033a0d
cmp r12d, r13d
je 0x140033c1d
cmp byte [0x1400a3c9b], r14b
je 0x140033c18
cmp byte [0x1400a3c81], r14b
je 0x140033c18
cmp byte [0x1400a61da], r14b
je 0x140033a0d
test r15b, r15b
je 0x140033c18
movss xmm0, dword [rbp - 0x40]
movaps xmm6, xmm0
subss xmm6, xmm11
addss xmm6, xmm0
mov rbx, qword [0x1400a61e0]
mov qword [rsp + 0x30], r14
lea rax, [rbp + 0x9a0]
mov qword [rsp + 0x28], rax
movss xmm0, dword [0x140095234]
movss dword [rsp + 0x20], xmm0
movss xmm3, dword [0x140095228]
movss xmm2, dword [rbx + 0x1980]
lea rdx, [rbp - 0x80]
mov rcx, qword [rbx + 0x1978]
call fcn.140023a60
movss xmm0, dword [rbp - 0x80]
addss xmm0, dword [0x140095180]
cvttss2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp - 0x80], xmm1
addss xmm6, xmm11
subss xmm6, xmm1
mulss xmm6, dword [0x140095150]
cvttss2si eax, xmm6
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rsp + 0x50], xmm7
movaps xmm0, xmm12
subss xmm0, dword [rbp - 0x7c]
subss xmm0, xmm8
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss dword [rsp + 0x54], xmm6
mov rax, qword [rbx + 0x1dc0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400044f0
mov rbx, rax
addss xmm7, dword [0x140095188]
movss dword [rbp + 0x828], xmm7
addss xmm6, dword [0x140095188]
movss dword [rbp + 0x82c], xmm6
lea rax, [rbp + 0x9a0]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], r14b
jne 0x140033b10
lea rdx, [rbp + 0x9a0]
add rdx, rcx
lea rax, [rbp + 0x9a0]
cmp rax, rdx
je 0x140033b8a
mov rax, qword [rbx + 0x38]
movups xmm0, xmmword [rbx + 0x88]
movups xmmword [rbp + 0x870], xmm0
mov byte [rsp + 0x48], r14b
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], rdx
lea rcx, [rbp + 0x9a0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x870]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0xff000000
mov r9, qword [rbp + 0x828]
movss xmm2, dword [rax + 0x10]
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.140023c80
mov rdx, rbx
lea rcx, [rbp + 0x9a0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r14b
jne 0x140033ba0
lea rcx, [rbp + 0x9a0]
add rcx, rax
lea rax, [rbp + 0x9a0]
cmp rax, rcx
je 0x140033c18
mov rax, qword [rdx + 0x38]
movups xmm0, xmmword [rbx + 0x88]
movups xmmword [rbp + 0x870], xmm0
mov byte [rsp + 0x48], r14b
movss dword [rsp + 0x40], xmm15
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x9a0]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x870]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 0xffffffff
mov r9, qword [rsp + 0x50]
movss xmm2, dword [rax + 0x10]
mov rdx, rbx
mov rcx, qword [rax + 8]
call fcn.140023c80
cmp r12d, r13d
jne 0x140033c46
cmp byte [0x1400a61d9], r14b
je 0x140033c3d
cmp byte [0x1400a63d0], r14b
je 0x140033c3d
cmp byte [0x1400a63b7], r14b
je 0x140033c72
test r15b, r15b
jne 0x140033c72
cmp r12d, r13d
je 0x140033dc2
cmp byte [0x1400a3c9a], r14b
je 0x140033dbd
cmp byte [0x1400a3c81], r14b
je 0x140033dbd
cmp byte [0x1400a61da], r14b
je 0x140033c72
test r15b, r15b
je 0x140033dbd
movss xmm10, dword [rbp - 0x3c]
movaps xmm9, xmm10
subss xmm9, xmm12
movaps xmm0, xmm9
mulss xmm0, dword [0x140095150]
mulss xmm0, dword [0x140095150]
subss xmm11, xmm0
movaps xmm6, xmm11
subss xmm6, dword [0x1400951c4]
subss xmm11, xmm8
movd xmm7, dword [rbp - 0x78]
cvtdq2ps xmm7, xmm7
movaps xmm8, xmm7
addss xmm8, xmm7
mulss xmm8, dword [0x1400951a8]
mov rax, qword [0x1400a61e0]
mov rcx, qword [rax + 0x1dc0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rcx]
call fcn.1400044f0
mov rbx, rax
movss dword [rbp - 0x20], xmm11
movss dword [rbp - 0x1c], xmm10
movss dword [rbp - 0x18], xmm6
subss xmm12, dword [0x140095188]
movss dword [rbp - 0x14], xmm12
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm15
mov r9d, 0xff000000
lea r8, [rbp - 0x20]
lea rdx, [rbp - 0x18]
mov rcx, rax
call fcn.14001fb10
movss xmm1, dword [0x140095188]
subss xmm11, xmm1
movss dword [rbp - 0x10], xmm11
movaps xmm0, xmm10
subss xmm0, xmm1
movss dword [rbp - 0xc], xmm0
addss xmm6, xmm1
movss dword [rbp - 8], xmm6
mulss xmm7, xmm9
divss xmm7, xmm14
maxss xmm7, xmm1
subss xmm10, xmm7
movss dword [rbp - 4], xmm10
movss xmm0, dword [0x140095204]
subss xmm0, xmm8
minss xmm0, dword [0x140095200]
cvttss2si r9, xmm0
minss xmm8, dword [0x140095200]
cvttss2si rax, xmm8
or eax, 0xffff0000
shl eax, 8
or r9d, eax
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm15
lea r8, [rbp - 0x10]
lea rdx, [rbp - 8]
mov rcx, rbx
call fcn.14001fb10
cmp r12d, r13d
jne 0x140033de7
cmp byte [0x1400a63b6], r14b
je 0x140033de2
cmp byte [0x1400a63d0], r14b
je 0x140033de2
cmp byte [0x1400a63b7], r14b
je 0x140033e07
test r15b, r15b
jne 0x140033e07
cmp r12d, r13d
je 0x140033e12
cmp byte [0x1400a3c82], r14b
je 0x140033e12
cmp byte [0x1400a3c81], r14b
je 0x140033e12
cmp byte [0x1400a61da], r14b
je 0x140033e07
test r15b, r15b
je 0x140033e12
lea rdx, [rbp - 0x70]
mov ecx, edi
call fcn.140031e80
movss xmm12, dword [rsp + 0x5c]
movss xmm10, dword [rsp + 0x58]
movss xmm9, dword [0x1400951f0]
movss xmm11, dword [0x1400951c0]
mov rdi, qword [rsp + 0x70]
mov eax, dword [rsp + 0x64]
inc eax
mov dword [rsp + 0x64], eax
cmp eax, 0x20
jge 0x140033e53
mov ebx, dword [rsp + 0x60]
mov rsi, qword [rbp - 0x50]
jmp 0x140033210
mov rcx, qword [rbp + 0xaa0]
xor rcx, rsp
call fcn.14004f140
lea r11, [rsp + 0xc50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14004f648
nop
call fcn.140063388
nop
call fcn.140063388
nop
call fcn.140063388
nop
call fcn.140063388
int3
call fcn.140063388
int3
call fcn.140063388
int3
call fcn.14004f648
int3