Function at 0x14006a310
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2b8]
sub rsp, 0x380
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
mov rax, qword [0x14009b040]
xor rax, rsp
mov qword [rbp + 0x1d8], rax
mov rdi, rdx
mov rsi, rcx
cmp byte [0x14009c108], 0
je 0x14006d9a7
cmp byte [0x14009c13a], 1
je 0x14006d9a7
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
movups xmmword [rbp + 0x128], xmm0
movups xmmword [rbp + 0x138], xmm0
mov rax, qword [rdx]
mov qword [rbp + 0x118], rax
movdqu xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
movdqu xmmword [rbp + 0x140], xmm0
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rcx + 0x10]
movaps xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rcx + 0x20]
movaps xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x118]
call fcn.14006ff10
nop
lea rcx, [rbp + 0x170]
mov r13, qword [rbp + 0x170]
mov r15, qword [rbp + 0x188]
cmp r15, 0xf
cmova rcx, r13
xor r14d, r14d
mov rbx, qword [rbp + 0x180]
cmp rbx, 5
jne 0x14006a457
mov r8, rbx
lea rdx, str.knife
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14006d693
lea rcx, [rbp + 0x170]
cmp r15, 0xf
cmova rcx, r13
cmp rbx, 7
jne 0x14006a483
mov r8, rbx
lea rdx, str.knife_t
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14006d693
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rax
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm0
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x118]
call fcn.14006f990
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rax
movups xmm0, xmmword [rsi]
movaps xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rbp], xmm1
movups xmm0, xmmword [rsi + 0x20]
movaps xmmword [rbp + 0x10], xmm0
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x118]
call fcn.14006fb00
nop
mov eax, dword [0x14009c114]
test eax, eax
jne 0x14006a511
lea ecx, [rax + 1]
jmp 0x14006a529
cmp eax, 1
jne 0x14006a51b
lea ecx, [rax + 4]
jmp 0x14006a529
mov ecx, dword [rbp - 0x20]
mov edx, 6
cmp eax, 2
cmove ecx, edx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor r14d, r14d
test ax, ax
jne 0x14006a544
cmp byte [0x14009c0fc], 1
jne 0x14006d81d
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm0
movups xmmword [rbp + 0xa8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov qword [rbp], r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss xmm8, dword [0x14008c42c]
mulss xmm6, xmm8
movss dword [rsp + 0x64], xmm6
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm9, eax
cvtdq2ps xmm9, xmm9
mulss xmm9, xmm8
movss dword [rsp + 0x60], xmm9
movups xmm0, xmmword [rsi]
movaps xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm0
mov rdi, qword [rdi]
add rdi, 0x1929430
lea rbx, [rbp + 0x78]
mov r12, qword [rsp + 0x38]
lea r15, [rbx + 0x10]
cmp rbx, r15
je 0x14006a611
nop
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x30]
mov rdx, rdi
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
add rdi, 4
movss xmm0, dword [rbp - 0x30]
movss dword [rbx], xmm0
add rbx, 4
cmp rbx, r15
jne 0x14006a5e0
mov rbx, r15
lea rax, [rbp + 0xb8]
cmp r15, rax
jne 0x14006a5d5
mov ecx, dword [0x14009c10c]
test ecx, ecx
je 0x14006bf91
sub ecx, 1
je 0x14006b971
sub ecx, 1
je 0x14006b3b1
sub ecx, 1
je 0x14006ae01
cmp ecx, 1
jne 0x14006beaf
mov r15, r14
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
test rax, rax
je 0x14006ac0d
movss xmm11, dword [rbp + 0xb4]
movss xmm12, dword [rbp + 0xb0]
movss xmm13, dword [rbp + 0xac]
movss xmm14, dword [rbp + 0xa8]
movss xmm15, dword [rbp + 0x94]
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x334
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x30]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x30]
dec eax
cmp eax, 0x63
ja 0x14006abe8
cmp byte [0x14009c12b], 1
jne 0x14006a73b
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x2284
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x24]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x24], 0
je 0x14006abe8
cmp byte [0x14009b1ea], 1
jne 0x14006a801
mov rdi, qword [rbp + 0x20]
movups xmm6, xmmword [rsi]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
mov rdx, qword [rbp + 0x118]
add rdx, 0x19176a8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x60]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x60]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x2c]
psrldq xmm6, 8
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rdi + r15*8]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x28]
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14006abe8
mov eax, dword [rbp - 0x28]
cmp eax, dword [rbp - 0x2c]
je 0x14006abe8
add eax, 0xfffffffe
cmp eax, 1
ja 0x14006abe8
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x34], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x68]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x68]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp - 0x20]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x20]
add rdx, 0x340
mov qword [rbp - 0x20], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x34]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp - 0x34]
mov rdx, qword [rbp - 0x20]
add rdx, 4
mov qword [rbp - 0x20], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x34]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x34]
mov rdx, qword [rbp - 0x20]
add rdx, 4
mov qword [rbp - 0x20], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x34]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x38], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x108]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x108]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xc0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xc0]
add rdx, 0x2e0
mov qword [rbp + 0xc0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm9, dword [rbp - 0x38]
mov rdx, qword [rbp + 0xc0]
add rdx, 4
mov qword [rbp + 0xc0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm10, dword [rbp - 0x38]
mov rdx, qword [rbp + 0xc0]
add rdx, 4
mov qword [rbp + 0xc0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm4, xmm7
mulss xmm4, xmm14
movaps xmm0, xmm6
mulss xmm0, xmm13
addss xmm4, xmm0
movaps xmm1, xmm12
movss xmm2, dword [rbp - 0x34]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, xmm11
movaps xmm3, xmm7
mulss xmm3, dword [rbp + 0x78]
movaps xmm0, xmm6
mulss xmm0, dword [rbp + 0x7c]
addss xmm3, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, dword [rbp + 0x84]
mulss xmm7, dword [rbp + 0x88]
mulss xmm6, dword [rbp + 0x8c]
addss xmm7, xmm6
movss xmm6, dword [rbp + 0x90]
movaps xmm0, xmm6
mulss xmm0, xmm2
addss xmm7, xmm0
addss xmm7, xmm15
divss xmm3, xmm4
divss xmm7, xmm4
mov rax, qword [0x14009c0a8]
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm3
mulss xmm2, xmm0
addss xmm3, xmm0
addss xmm2, xmm3
movss dword [rbp - 0x78], xmm2
mulss xmm1, xmm8
movaps xmm3, xmm7
addss xmm3, xmm1
mulss xmm7, xmm1
subss xmm3, xmm7
movss dword [rbp - 0x74], xmm3
movss xmm7, dword [0x14008c3e8]
comiss xmm7, xmm4
ja 0x14006aaec
mov rdx, qword [rbp - 8]
cmp rdx, qword [rbp]
je 0x14006aad8
movaps xmm0, xmm2
unpcklps xmm0, xmm3
movsd qword [rbp - 0x78], xmm0
movsd qword [rdx], xmm0
add qword [rbp - 8], 8
jmp 0x14006aaec
lea r8, [rbp - 0x78]
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rax, qword [0x14009c0a8]
movaps xmm4, xmm9
mulss xmm4, xmm14
movaps xmm0, xmm10
mulss xmm0, xmm13
addss xmm4, xmm0
movss xmm2, dword [rbp - 0x38]
movaps xmm1, xmm2
mulss xmm1, xmm12
addss xmm4, xmm1
addss xmm4, xmm11
movaps xmm3, xmm9
mulss xmm3, dword [rbp + 0x78]
movaps xmm0, xmm10
mulss xmm0, dword [rbp + 0x7c]
addss xmm3, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rbp + 0x80]
addss xmm3, xmm1
addss xmm3, dword [rbp + 0x84]
mulss xmm9, dword [rbp + 0x88]
mulss xmm10, dword [rbp + 0x8c]
addss xmm9, xmm10
mulss xmm2, xmm6
addss xmm9, xmm2
addss xmm9, xmm15
divss xmm3, xmm4
divss xmm9, xmm4
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm3
mulss xmm2, xmm0
addss xmm3, xmm0
addss xmm2, xmm3
movss dword [rbp - 0x18], xmm2
mulss xmm1, xmm8
movaps xmm3, xmm9
addss xmm3, xmm1
mulss xmm9, xmm1
subss xmm3, xmm9
movss dword [rbp - 0x14], xmm3
comiss xmm7, xmm4
ja 0x14006abe8
mov rax, qword [rbp - 8]
cmp rax, qword [rbp]
je 0x14006abd7
movaps xmm0, xmm2
unpcklps xmm0, xmm3
movsd qword [rbp - 0x18], xmm0
movsd qword [rax], xmm0
add qword [rbp - 8], 8
jmp 0x14006abe8
lea r8, [rbp - 0x18]
mov rdx, qword [rbp - 8]
lea rcx, [rbp - 0x10]
call fcn.14006de00
inc r15
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
cmp r15, rax
jb 0x14006a6a0
movss xmm6, dword [rsp + 0x64]
movss xmm9, dword [rsp + 0x60]
mov rcx, qword [rbp - 8]
sub rcx, qword [rbp - 0x10]
sar rcx, 3
test rcx, rcx
je 0x14006beaf
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
movabs rax, 0x1fffffffffffffff
cmp rcx, rax
ja 0x14006da0f
lea rbx, [rcx*8]
cmp rbx, 0x1000
jb 0x14006ac80
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14006da15
call fcn.14007d574
test rax, rax
je 0x14006ac79
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14006ac95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x14006ac92
mov rcx, rbx
call fcn.14007d574
mov rdi, rax
jmp 0x14006ac95
mov rdi, r14
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
lea rax, [rbx + rdi]
mov qword [rsp + 0x40], rax
mov rbx, qword [rbp - 8]
sub rbx, qword [rbp - 0x10]
mov r8, rbx
mov rdx, qword [rbp - 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 3
lea rax, [rdi + rbx*8]
mov qword [rsp + 0x38], rax
movaps xmm0, xmm6
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x30]
call fcn.14006db00
mov rcx, qword [rbp - 0x10]
movss xmm7, dword [rcx + rax*8]
subss xmm7, xmm6
movss xmm6, dword [rcx + rax*8 + 4]
subss xmm6, xmm9
cmp byte [0x14009c104], 1
jne 0x14006ad5d
movss xmm1, dword [0x14009c0d8]
mulss xmm1, dword [0x14008c4e4]
comiss xmm7, xmm1
ja 0x14006d584
movss xmm2, dword [0x14008c5a8]
xorps xmm0, xmm0
comiss xmm0, xmm7
jbe 0x14006ad3f
movaps xmm0, xmm7
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
xorps xmm0, xmm0
comiss xmm6, xmm1
ja 0x14006d584
comiss xmm0, xmm6
jbe 0x14006ad5d
movaps xmm0, xmm6
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
cmp byte [0x14009c100], 0
je 0x14006be92
xor ecx, ecx
movss xmm2, dword [0x14009c0e0]
movaps xmm0, xmm2
movss xmm1, dword [0x14008c57c]
comiss xmm0, xmm1
jb 0x14006ad9a
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14006ad9a
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rbx, xmm0
add rbx, rcx
je 0x14006beaf
nop dword [rax + rax]
movaps xmm0, xmm6
divss xmm0, xmm2
movaps xmm1, xmm7
divss xmm1, xmm2
addss xmm0, xmm0
cvttss2si r8, xmm0
addss xmm1, xmm1
cvttss2si rdx, xmm1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
je 0x14006beaf
movss xmm2, dword [0x14009c0e0]
jmp 0x14006adb0
mov r15, r14
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
test rax, rax
je 0x14006b1ba
movss xmm10, dword [rbp + 0xb4]
movss xmm11, dword [rbp + 0xb0]
movss xmm12, dword [rbp + 0xac]
movss xmm13, dword [rbp + 0xa8]
movss xmm14, dword [rbp + 0x94]
movss xmm15, dword [rbp + 0x90]
movss xmm9, dword [0x14008c3e8]
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x334
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x30]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x30]
dec eax
cmp eax, 0x63
ja 0x14006b195
cmp byte [0x14009c12b], 1
jne 0x14006aefb
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x2284
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x24]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x24], 0
je 0x14006b195
cmp byte [0x14009b1ea], 1
jne 0x14006afc1
mov rdi, qword [rbp + 0x20]
movups xmm6, xmmword [rsi]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
mov rdx, qword [rbp + 0x118]
add rdx, 0x19176a8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x60]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x60]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x2c]
psrldq xmm6, 8
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rdi + r15*8]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x28]
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14006b195
mov eax, dword [rbp - 0x28]
cmp eax, dword [rbp - 0x2c]
je 0x14006b195
add eax, 0xfffffffe
cmp eax, 1
ja 0x14006b195
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x38], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x68]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x68]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rdx, qword [rbp + 0x58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp - 0x38]
mov rdx, qword [rbp + 0x58]
add rdx, 4
mov qword [rbp + 0x58], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x38]
mov rdx, qword [rbp + 0x58]
add rdx, 4
mov qword [rbp + 0x58], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm5, xmm13
mulss xmm5, xmm7
movaps xmm0, xmm12
mulss xmm0, xmm6
addss xmm5, xmm0
movss xmm2, dword [rbp - 0x38]
movaps xmm1, xmm2
mulss xmm1, xmm11
addss xmm5, xmm1
addss xmm5, xmm10
movss xmm4, dword [rbp + 0x78]
mulss xmm4, xmm7
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, xmm6
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rbp + 0x80]
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x84]
movss xmm3, dword [rbp + 0x88]
mulss xmm3, xmm7
movss xmm0, dword [rbp + 0x8c]
mulss xmm0, xmm6
addss xmm3, xmm0
mulss xmm2, xmm15
addss xmm3, xmm2
addss xmm3, xmm14
divss xmm4, xmm5
divss xmm3, xmm5
mov rax, qword [0x14009c0a8]
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x20], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x1c], xmm4
comiss xmm9, xmm5
ja 0x14006b195
mov rdx, qword [rbp - 8]
cmp rdx, qword [rbp]
je 0x14006b188
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x20], xmm0
movsd qword [rdx], xmm0
add qword [rbp - 8], 8
jmp 0x14006b195
lea r8, [rbp - 0x20]
lea rcx, [rbp - 0x10]
call fcn.14006de00
inc r15
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
cmp r15, rax
jb 0x14006ae60
movss xmm6, dword [rsp + 0x64]
movss xmm9, dword [rsp + 0x60]
mov rcx, qword [rbp - 8]
sub rcx, qword [rbp - 0x10]
sar rcx, 3
test rcx, rcx
je 0x14006beaf
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
movabs rax, 0x1fffffffffffffff
cmp rcx, rax
ja 0x14006da1b
lea rbx, [rcx*8]
cmp rbx, 0x1000
jb 0x14006b22d
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14006da21
call fcn.14007d574
test rax, rax
je 0x14006b226
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14006b242
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x14006b23f
mov rcx, rbx
call fcn.14007d574
mov rdi, rax
jmp 0x14006b242
mov rdi, r14
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
lea rax, [rbx + rdi]
mov qword [rsp + 0x40], rax
mov rbx, qword [rbp - 8]
sub rbx, qword [rbp - 0x10]
mov r8, rbx
mov rdx, qword [rbp - 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 3
lea rax, [rdi + rbx*8]
mov qword [rsp + 0x38], rax
movaps xmm0, xmm6
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x30]
call fcn.14006db00
mov rcx, qword [rbp - 0x10]
movss xmm7, dword [rcx + rax*8]
subss xmm7, xmm6
movss xmm6, dword [rcx + rax*8 + 4]
subss xmm6, xmm9
cmp byte [0x14009c104], 1
jne 0x14006b30a
movss xmm1, dword [0x14009c0d8]
mulss xmm1, dword [0x14008c4e4]
comiss xmm7, xmm1
ja 0x14006d584
movss xmm2, dword [0x14008c5a8]
xorps xmm0, xmm0
comiss xmm0, xmm7
jbe 0x14006b2ec
movaps xmm0, xmm7
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
xorps xmm0, xmm0
comiss xmm6, xmm1
ja 0x14006d584
comiss xmm0, xmm6
jbe 0x14006b30a
movaps xmm0, xmm6
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
cmp byte [0x14009c100], 0
je 0x14006be92
xor ecx, ecx
movss xmm2, dword [0x14009c0e0]
movaps xmm0, xmm2
movss xmm1, dword [0x14008c57c]
comiss xmm0, xmm1
jb 0x14006b347
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14006b347
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rbx, xmm0
add rbx, rcx
je 0x14006beaf
nop word [rax + rax]
movaps xmm0, xmm6
divss xmm0, xmm2
movaps xmm1, xmm7
divss xmm1, xmm2
addss xmm0, xmm0
cvttss2si r8, xmm0
addss xmm1, xmm1
cvttss2si rdx, xmm1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
je 0x14006beaf
movss xmm2, dword [0x14009c0e0]
jmp 0x14006b360
mov r15, r14
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
test rax, rax
je 0x14006b779
movss xmm10, dword [rbp + 0xb4]
movss xmm11, dword [rbp + 0xb0]
movss xmm12, dword [rbp + 0xac]
movss xmm13, dword [rbp + 0xa8]
movss xmm14, dword [rbp + 0x94]
movss xmm15, dword [rbp + 0x90]
movss xmm9, dword [0x14008c3e8]
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x334
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x30]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x30]
dec eax
cmp eax, 0x63
ja 0x14006b754
cmp byte [0x14009c12b], 1
jne 0x14006b4ab
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x2284
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x24]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x24], 0
je 0x14006b754
cmp byte [0x14009b1ea], 1
jne 0x14006b571
mov rdi, qword [rbp + 0x20]
movups xmm6, xmmword [rsi]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
mov rdx, qword [rbp + 0x118]
add rdx, 0x19176a8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x60]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x60]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x2c]
psrldq xmm6, 8
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rdi + r15*8]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x28]
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14006b754
mov eax, dword [rbp - 0x28]
cmp eax, dword [rbp - 0x2c]
je 0x14006b754
add eax, 0xfffffffe
cmp eax, 1
ja 0x14006b754
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x38], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x68]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x68]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp - 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x18]
add rdx, 0xa0
mov qword [rbp - 0x18], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp - 0x38]
mov rdx, qword [rbp - 0x18]
add rdx, 4
mov qword [rbp - 0x18], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x38]
mov rdx, qword [rbp - 0x18]
add rdx, 4
mov qword [rbp - 0x18], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm5, xmm13
mulss xmm5, xmm7
movaps xmm0, xmm12
mulss xmm0, xmm6
addss xmm5, xmm0
movss xmm2, dword [rbp - 0x38]
movaps xmm1, xmm2
mulss xmm1, xmm11
addss xmm5, xmm1
addss xmm5, xmm10
movss xmm4, dword [rbp + 0x78]
mulss xmm4, xmm7
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, xmm6
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x84]
movss xmm3, dword [rbp + 0x88]
mulss xmm3, xmm7
movss xmm0, dword [rbp + 0x8c]
mulss xmm0, xmm6
addss xmm3, xmm0
movaps xmm1, xmm15
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm14
divss xmm4, xmm5
divss xmm3, xmm5
mov rax, qword [0x14009c0a8]
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm0
mulss xmm2, xmm4
addss xmm0, xmm4
addss xmm2, xmm0
movss dword [rbp - 0x20], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm1
addss xmm4, xmm3
mulss xmm1, xmm3
subss xmm4, xmm1
movss dword [rbp - 0x1c], xmm4
comiss xmm9, xmm5
ja 0x14006b754
mov rdx, qword [rbp - 8]
cmp rdx, qword [rbp]
je 0x14006b747
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x20], xmm0
movsd qword [rdx], xmm0
add qword [rbp - 8], 8
jmp 0x14006b754
lea r8, [rbp - 0x20]
lea rcx, [rbp - 0x10]
call fcn.14006de00
inc r15
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
cmp r15, rax
jb 0x14006b410
movss xmm6, dword [rsp + 0x64]
movss xmm9, dword [rsp + 0x60]
mov rcx, qword [rbp - 8]
sub rcx, qword [rbp - 0x10]
sar rcx, 3
test rcx, rcx
je 0x14006beaf
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
movabs rax, 0x1fffffffffffffff
cmp rcx, rax
ja 0x14006da27
lea rbx, [rcx*8]
cmp rbx, 0x1000
jb 0x14006b7ec
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14006da2d
call fcn.14007d574
test rax, rax
je 0x14006b7e5
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14006b801
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x14006b7fe
mov rcx, rbx
call fcn.14007d574
mov rdi, rax
jmp 0x14006b801
mov rdi, r14
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
lea rax, [rbx + rdi]
mov qword [rsp + 0x40], rax
mov rbx, qword [rbp - 8]
sub rbx, qword [rbp - 0x10]
mov r8, rbx
mov rdx, qword [rbp - 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 3
lea rax, [rdi + rbx*8]
mov qword [rsp + 0x38], rax
movaps xmm0, xmm6
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x30]
call fcn.14006db00
mov rcx, qword [rbp - 0x10]
movss xmm7, dword [rcx + rax*8]
subss xmm7, xmm6
movss xmm6, dword [rcx + rax*8 + 4]
subss xmm6, xmm9
cmp byte [0x14009c104], 1
jne 0x14006b8c9
movss xmm1, dword [0x14009c0d8]
mulss xmm1, dword [0x14008c4e4]
comiss xmm7, xmm1
ja 0x14006d584
movss xmm2, dword [0x14008c5a8]
xorps xmm0, xmm0
comiss xmm0, xmm7
jbe 0x14006b8ab
movaps xmm0, xmm7
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
xorps xmm0, xmm0
comiss xmm6, xmm1
ja 0x14006d584
comiss xmm0, xmm6
jbe 0x14006b8c9
movaps xmm0, xmm6
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
cmp byte [0x14009c100], 0
je 0x14006be92
xor ecx, ecx
movss xmm2, dword [0x14009c0e0]
movaps xmm0, xmm2
movss xmm1, dword [0x14008c57c]
comiss xmm0, xmm1
jb 0x14006b906
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14006b906
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rbx, xmm0
add rbx, rcx
je 0x14006beaf
nop dword [rax]
nop dword [rax + rax]
movaps xmm0, xmm6
divss xmm0, xmm2
movaps xmm1, xmm7
divss xmm1, xmm2
addss xmm0, xmm0
cvttss2si r8, xmm0
addss xmm1, xmm1
cvttss2si rdx, xmm1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
je 0x14006beaf
movss xmm2, dword [0x14009c0e0]
jmp 0x14006b920
mov r15, r14
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
test rax, rax
je 0x14006bd39
movss xmm10, dword [rbp + 0xb4]
movss xmm11, dword [rbp + 0xb0]
movss xmm12, dword [rbp + 0xac]
movss xmm13, dword [rbp + 0xa8]
movss xmm14, dword [rbp + 0x94]
movss xmm15, dword [rbp + 0x90]
movss xmm9, dword [0x14008c3e8]
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x334
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x30]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp - 0x30]
dec eax
cmp eax, 0x63
ja 0x14006bd14
cmp byte [0x14009c12b], 1
jne 0x14006ba6b
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x2284
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x24]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x24], 0
je 0x14006bd14
cmp byte [0x14009b1ea], 1
jne 0x14006bb31
mov rdi, qword [rbp + 0x20]
movups xmm6, xmmword [rsi]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
mov rdx, qword [rbp + 0x118]
add rdx, 0x19176a8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x60]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x60]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x2c]
psrldq xmm6, 8
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rdi + r15*8]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x28]
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14006bd14
mov eax, dword [rbp - 0x28]
cmp eax, dword [rbp - 0x2c]
je 0x14006bd14
add eax, 0xfffffffe
cmp eax, 1
ja 0x14006bd14
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x38], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x68]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x68]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp - 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x18]
add rdx, 0xc0
mov qword [rbp - 0x18], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp - 0x38]
mov rdx, qword [rbp - 0x18]
add rdx, 4
mov qword [rbp - 0x18], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x38]
mov rdx, qword [rbp - 0x18]
add rdx, 4
mov qword [rbp - 0x18], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm5, xmm13
mulss xmm5, xmm7
movaps xmm0, xmm12
mulss xmm0, xmm6
addss xmm5, xmm0
movaps xmm1, xmm11
movss xmm2, dword [rbp - 0x38]
mulss xmm1, xmm2
addss xmm5, xmm1
addss xmm5, xmm10
movss xmm4, dword [rbp + 0x78]
mulss xmm4, xmm7
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, xmm6
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x84]
movss xmm3, dword [rbp + 0x88]
mulss xmm3, xmm7
movss xmm0, dword [rbp + 0x8c]
mulss xmm0, xmm6
addss xmm3, xmm0
movaps xmm1, xmm15
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm14
divss xmm4, xmm5
divss xmm3, xmm5
mov rax, qword [0x14009c0a8]
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x20], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x1c], xmm4
comiss xmm9, xmm5
ja 0x14006bd14
mov rdx, qword [rbp - 8]
cmp rdx, qword [rbp]
je 0x14006bd07
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x20], xmm0
movsd qword [rdx], xmm0
add qword [rbp - 8], 8
jmp 0x14006bd14
lea r8, [rbp - 0x20]
lea rcx, [rbp - 0x10]
call fcn.14006de00
inc r15
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
cmp r15, rax
jb 0x14006b9d0
movss xmm6, dword [rsp + 0x64]
movss xmm9, dword [rsp + 0x60]
mov rcx, qword [rbp - 8]
sub rcx, qword [rbp - 0x10]
sar rcx, 3
test rcx, rcx
je 0x14006beaf
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
movabs rax, 0x1fffffffffffffff
cmp rcx, rax
ja 0x14006da33
lea rbx, [rcx*8]
cmp rbx, 0x1000
jb 0x14006bdac
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x14006da39
call fcn.14007d574
test rax, rax
je 0x14006bda5
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14006bdc1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x14006bdbe
mov rcx, rbx
call fcn.14007d574
mov rdi, rax
jmp 0x14006bdc1
mov rdi, r14
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
lea rax, [rdi + rbx]
mov qword [rsp + 0x40], rax
mov rbx, qword [rbp - 8]
sub rbx, qword [rbp - 0x10]
mov r8, rbx
mov rdx, qword [rbp - 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 3
lea rax, [rdi + rbx*8]
mov qword [rsp + 0x38], rax
movaps xmm0, xmm6
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x30]
call fcn.14006db00
mov rcx, qword [rbp - 0x10]
movss xmm7, dword [rcx + rax*8]
subss xmm7, xmm6
movss xmm6, dword [rcx + rax*8 + 4]
subss xmm6, xmm9
cmp byte [0x14009c104], 1
jne 0x14006be89
movss xmm1, dword [0x14009c0d8]
mulss xmm1, dword [0x14008c4e4]
comiss xmm7, xmm1
ja 0x14006d584
movss xmm2, dword [0x14008c5a8]
xorps xmm0, xmm0
comiss xmm0, xmm7
jbe 0x14006be6b
movaps xmm0, xmm7
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
xorps xmm0, xmm0
comiss xmm6, xmm1
ja 0x14006d584
comiss xmm0, xmm6
jbe 0x14006be89
movaps xmm0, xmm6
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
cmp byte [0x14009c100], 0
jne 0x14006beff
cvttss2si r8, xmm6
cvttss2si rdx, xmm7
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
nop
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x14006d816
mov rax, qword [rbp]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d811
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d811
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ecx, ecx
movss xmm2, dword [0x14009c0e0]
movaps xmm0, xmm2
movss xmm1, dword [0x14008c57c]
comiss xmm0, xmm1
jb 0x14006bf2f
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14006bf2f
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rbx, xmm0
add rbx, rcx
je 0x14006beaf
nop dword [rax]
movaps xmm0, xmm6
divss xmm0, xmm2
movaps xmm1, xmm7
divss xmm1, xmm2
addss xmm0, xmm0
cvttss2si r8, xmm0
addss xmm1, xmm1
cvttss2si rdx, xmm1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
je 0x14006beaf
movss xmm2, dword [0x14009c0e0]
jmp 0x14006bf40
mov r15, r14
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
test rax, rax
je 0x14006d431
movss xmm9, dword [rbp + 0xb4]
movss xmm10, dword [rbp + 0xb0]
movss xmm11, dword [rbp + 0xac]
movss xmm12, dword [rbp + 0xa8]
movss xmm13, dword [rbp + 0x94]
movss xmm14, dword [rbp + 0x90]
movss xmm15, dword [rbp + 0x8c]
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x334
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x154]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x154]
dec eax
cmp eax, 0x63
ja 0x14006d406
cmp byte [0x14009c12b], 1
jne 0x14006c097
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rbp + 0x138]
mov rdx, qword [rax + r15*8]
add rdx, 0x2284
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x150]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x150], 0
je 0x14006d406
cmp byte [0x14009b1ea], 1
jne 0x14006c169
mov rdi, qword [rbp + 0x20]
movups xmm6, xmmword [rsi]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x50], xmm1
mov rdx, qword [rbp + 0x118]
add rdx, 0x19176a8
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1c8]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1c8]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x20]
psrldq xmm6, 8
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rdi + r15*8]
add rdx, 0x3cb
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0xc0]
movq rcx, xmm6
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14006d406
mov eax, dword [rbp + 0xc0]
cmp eax, dword [rbp - 0x20]
je 0x14006d406
add eax, 0xfffffffe
cmp eax, 1
ja 0x14006d406
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x38], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x190]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x190]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xf8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xf8]
add rdx, 0x340
mov qword [rbp + 0xf8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rbp - 0x38]
mov rdx, qword [rbp + 0xf8]
add rdx, 4
mov qword [rbp + 0xf8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x38]
mov rdx, qword [rbp + 0xf8]
add rdx, 4
mov qword [rbp + 0xf8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp - 0x34], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x198]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x198]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x100]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x100]
add rdx, 0x2e0
mov qword [rbp + 0x100], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x34]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x34]
movss dword [rbp - 0x6c], xmm0
mov rdx, qword [rbp + 0x100]
add rdx, 4
mov qword [rbp + 0x100], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x34]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x34]
movss dword [rbp - 0x68], xmm0
mov rdx, qword [rbp + 0x100]
add rdx, 4
mov qword [rbp + 0x100], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp - 0x34]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x38], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1a0]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1a0]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xc8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xc8]
add rdx, 0xc0
mov qword [rbp + 0xc8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x38]
movss dword [rbp - 0x60], xmm0
mov rdx, qword [rbp + 0xc8]
add rdx, 4
mov qword [rbp + 0xc8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x38]
movss dword [rsp + 0x6c], xmm0
mov rdx, qword [rbp + 0xc8]
add rdx, 4
mov qword [rbp + 0xc8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x3c], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1a8]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1a8]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xd0]
add rdx, 0xa0
mov qword [rbp + 0xd0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x3c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x3c]
movss dword [rbp - 0x70], xmm0
mov rdx, qword [rbp + 0xd0]
add rdx, 4
mov qword [rbp + 0xd0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x3c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x3c]
movss dword [rsp + 0x70], xmm0
mov rdx, qword [rbp + 0xd0]
add rdx, 4
mov qword [rbp + 0xd0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x3c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x40], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1b0]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1b0]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x110]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x40]
mov rdx, qword [rbp + 0x110]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x40]
movss dword [rbp - 0x64], xmm0
mov rdx, qword [rbp + 0x110]
add rdx, 4
mov qword [rbp + 0x110], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x40]
movss dword [rsp + 0x74], xmm0
mov rdx, qword [rbp + 0x110]
add rdx, 4
mov qword [rbp + 0x110], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x4c], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1b8]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1b8]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xd8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xd8]
add rdx, 0x200
mov qword [rbp + 0xd8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x4c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x4c]
movss dword [rbp - 0x2c], xmm0
mov rdx, qword [rbp + 0xd8]
add rdx, 4
mov qword [rbp + 0xd8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x4c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x4c]
movss dword [rsp + 0x7c], xmm0
mov rdx, qword [rbp + 0xd8]
add rdx, 4
mov qword [rbp + 0xd8], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x4c]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x44], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1c0]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1c0]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xe0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xe0]
add rdx, 0x160
mov qword [rbp + 0xe0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x44]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x44]
movss dword [rbp - 0x28], xmm0
mov rdx, qword [rbp + 0xe0]
add rdx, 4
mov qword [rbp + 0xe0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x44]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x44]
movss dword [rbp - 0x80], xmm0
mov rdx, qword [rbp + 0xe0]
add rdx, 4
mov qword [rbp + 0xe0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x44]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x48], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1d0]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1d0]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xf0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xf0]
add rdx, 0x360
mov qword [rbp + 0xf0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x48]
movss dword [rbp - 0x24], xmm0
mov rdx, qword [rbp + 0xf0]
add rdx, 4
mov qword [rbp + 0xf0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x48]
movss dword [rsp + 0x78], xmm0
mov rdx, qword [rbp + 0xf0]
add rdx, 4
mov qword [rbp + 0xf0], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movups xmm0, xmmword [rsi + 0x10]
movaps xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0x50], xmm1
mov dword [rbp + 0x50], 0
mov rax, qword [rbp + 0x20]
mov rdx, qword [rax + r15*8]
add rdx, 0x318
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0xe8]
mov rbx, qword [rsi + 8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0xe8]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x58]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x58]
add rdx, 0x300
mov qword [rbp + 0x58], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x50]
movss dword [rbp - 0x30], xmm0
mov rdx, qword [rbp + 0x58]
add rdx, 4
mov qword [rbp + 0x58], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x50]
movss dword [rsp + 0x68], xmm0
mov rdx, qword [rbp + 0x58]
add rdx, 4
mov qword [rbp + 0x58], rdx
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm5, xmm12
mulss xmm5, xmm7
movaps xmm0, xmm11
mulss xmm0, xmm6
addss xmm5, xmm0
movss xmm2, dword [rbp - 0x38]
movaps xmm1, xmm2
mulss xmm1, xmm10
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, xmm7
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, xmm6
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rbp + 0x80]
addss xmm4, xmm1
addss xmm4, dword [rbp + 0x84]
movss xmm3, dword [rbp + 0x88]
mulss xmm3, xmm7
movaps xmm0, xmm15
mulss xmm0, xmm6
addss xmm3, xmm0
mulss xmm2, xmm14
addss xmm3, xmm2
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
mov rax, qword [0x14009c0a8]
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x78], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x74], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006cb7f
mov rdx, qword [rbp - 8]
cmp rdx, qword [rbp]
je 0x14006cb6b
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x78], xmm0
movsd qword [rdx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006cb83
lea r8, [rbp - 0x78]
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rax, qword [0x14009c0a8]
mov rbx, qword [rbp - 8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x6c]
movaps xmm0, xmm11
mulss xmm0, dword [rbp - 0x68]
addss xmm5, xmm0
movss xmm2, dword [rbp - 0x34]
movaps xmm1, xmm2
mulss xmm1, xmm10
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x6c]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rbp - 0x68]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rbp + 0x80]
addss xmm4, xmm1
movss xmm7, dword [rbp + 0x84]
addss xmm4, xmm7
movss xmm6, dword [rbp + 0x88]
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x6c]
movaps xmm0, xmm15
mulss xmm0, dword [rbp - 0x68]
addss xmm3, xmm0
mulss xmm2, xmm14
addss xmm3, xmm2
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x18], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x14], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006cc9c
cmp rbx, qword [rbp]
je 0x14006cc81
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x18], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006cc9c
lea r8, [rbp - 0x18]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
mov rax, qword [0x14009c0a8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x60]
movaps xmm0, xmm11
mulss xmm0, dword [rsp + 0x6c]
addss xmm5, xmm0
movaps xmm1, xmm10
movss xmm2, dword [rbp + 0x38]
mulss xmm1, xmm2
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x60]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rsp + 0x6c]
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, xmm7
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x60]
movaps xmm0, xmm15
mulss xmm0, dword [rsp + 0x6c]
addss xmm3, xmm0
movaps xmm1, xmm14
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x58], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x54], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006cdac
cmp rbx, qword [rbp]
je 0x14006cd91
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x58], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006cdac
lea r8, [rbp - 0x58]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
mov rax, qword [0x14009c0a8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x70]
movaps xmm0, xmm11
mulss xmm0, dword [rsp + 0x70]
addss xmm5, xmm0
movaps xmm1, xmm10
movss xmm2, dword [rbp + 0x3c]
mulss xmm1, xmm2
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x70]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rsp + 0x70]
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, xmm7
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x70]
movaps xmm0, xmm15
mulss xmm0, dword [rsp + 0x70]
addss xmm3, xmm0
movaps xmm1, xmm14
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x50], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x4c], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006cebc
cmp rbx, qword [rbp]
je 0x14006cea1
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x50], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006cebc
lea r8, [rbp - 0x50]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
mov rax, qword [0x14009c0a8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x64]
movaps xmm0, xmm11
mulss xmm0, dword [rsp + 0x74]
addss xmm5, xmm0
movss xmm2, dword [rbp + 0x40]
movaps xmm1, xmm2
mulss xmm1, xmm10
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x64]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rsp + 0x74]
addss xmm4, xmm0
movaps xmm1, xmm2
mulss xmm1, dword [rbp + 0x80]
addss xmm4, xmm1
addss xmm4, xmm7
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x64]
movaps xmm0, xmm15
mulss xmm0, dword [rsp + 0x74]
addss xmm3, xmm0
mulss xmm2, xmm14
addss xmm3, xmm2
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x48], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x44], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006cfc8
cmp rbx, qword [rbp]
je 0x14006cfad
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x48], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006cfc8
lea r8, [rbp - 0x48]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
mov rax, qword [0x14009c0a8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x2c]
movaps xmm0, xmm11
mulss xmm0, dword [rsp + 0x7c]
addss xmm5, xmm0
movaps xmm1, xmm10
movss xmm2, dword [rbp + 0x4c]
mulss xmm1, xmm2
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x2c]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rsp + 0x7c]
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, xmm7
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x2c]
movaps xmm0, xmm15
mulss xmm0, dword [rsp + 0x7c]
addss xmm3, xmm0
movaps xmm1, xmm14
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp - 0x40], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp - 0x3c], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006d0d8
cmp rbx, qword [rbp]
je 0x14006d0bd
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp - 0x40], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006d0d8
lea r8, [rbp - 0x40]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
mov rax, qword [0x14009c0a8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x28]
movaps xmm0, xmm11
mulss xmm0, dword [rbp - 0x80]
addss xmm5, xmm0
movaps xmm1, xmm10
movss xmm2, dword [rbp + 0x44]
mulss xmm1, xmm2
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x28]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rbp - 0x80]
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, xmm7
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x28]
movaps xmm0, xmm15
mulss xmm0, dword [rbp - 0x80]
addss xmm3, xmm0
movaps xmm1, xmm14
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp + 0x108], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp + 0x10c], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006d1f1
cmp rbx, qword [rbp]
je 0x14006d1d3
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp + 0x108], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006d1f1
lea r8, [rbp + 0x108]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
mov rax, qword [0x14009c0a8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x24]
movaps xmm0, xmm11
mulss xmm0, dword [rsp + 0x78]
addss xmm5, xmm0
movaps xmm1, xmm10
movss xmm2, dword [rbp + 0x48]
mulss xmm1, xmm2
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x24]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rsp + 0x78]
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, xmm7
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x24]
movaps xmm0, xmm15
mulss xmm0, dword [rsp + 0x78]
addss xmm3, xmm0
movaps xmm1, xmm14
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp + 0x68], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp + 0x6c], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006d301
cmp rbx, qword [rbp]
je 0x14006d2e6
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp + 0x68], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006d301
lea r8, [rbp + 0x68]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
mov rax, qword [0x14009c0a8]
movaps xmm5, xmm12
mulss xmm5, dword [rbp - 0x30]
movaps xmm0, xmm11
mulss xmm0, dword [rsp + 0x68]
addss xmm5, xmm0
movaps xmm1, xmm10
movss xmm2, dword [rbp + 0x50]
mulss xmm1, xmm2
addss xmm5, xmm1
addss xmm5, xmm9
movss xmm4, dword [rbp + 0x78]
mulss xmm4, dword [rbp - 0x30]
movss xmm0, dword [rbp + 0x7c]
mulss xmm0, dword [rsp + 0x68]
addss xmm4, xmm0
movss xmm1, dword [rbp + 0x80]
mulss xmm1, xmm2
addss xmm4, xmm1
addss xmm4, xmm7
movaps xmm3, xmm6
mulss xmm3, dword [rbp - 0x30]
movaps xmm0, xmm15
mulss xmm0, dword [rsp + 0x68]
addss xmm3, xmm0
movaps xmm1, xmm14
mulss xmm1, xmm2
addss xmm3, xmm1
addss xmm3, xmm13
divss xmm4, xmm5
divss xmm3, xmm5
movss xmm0, dword [rax + 0x10]
movss xmm1, dword [rax + 0x14]
mulss xmm0, xmm8
movaps xmm2, xmm4
mulss xmm2, xmm0
addss xmm4, xmm0
addss xmm2, xmm4
movss dword [rbp + 0x60], xmm2
mulss xmm1, xmm8
movaps xmm4, xmm3
addss xmm4, xmm1
mulss xmm3, xmm1
subss xmm4, xmm3
movss dword [rbp + 0x64], xmm4
movss xmm0, dword [0x14008c3e8]
comiss xmm0, xmm5
ja 0x14006d40a
cmp rbx, qword [rbp]
je 0x14006d3f6
movaps xmm0, xmm2
unpcklps xmm0, xmm4
movsd qword [rbp + 0x60], xmm0
movsd qword [rbx], xmm0
mov rbx, qword [rbp - 8]
add rbx, 8
mov qword [rbp - 8], rbx
jmp 0x14006d40a
lea r8, [rbp + 0x60]
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.14006de00
mov rbx, qword [rbp - 8]
inc r15
mov rax, qword [rbp + 0x28]
sub rax, qword [rbp + 0x20]
sar rax, 3
cmp r15, rax
jb 0x14006bff0
movss xmm6, dword [rsp + 0x64]
movss xmm9, dword [rsp + 0x60]
jmp 0x14006d435
mov rbx, qword [rbp - 8]
mov rcx, rbx
sub rcx, qword [rbp - 0x10]
sar rcx, 3
test rcx, rcx
je 0x14006beaf
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
movabs rax, 0x1fffffffffffffff
cmp rcx, rax
ja 0x14006da3f
lea rsi, [rcx*8]
cmp rsi, 0x1000
jb 0x14006d4ab
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14006da09
call fcn.14007d574
test rax, rax
je 0x14006d4a4
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rbx, qword [rbp - 8]
jmp 0x14006d4c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rsi, rsi
je 0x14006d4c1
mov rcx, rsi
call fcn.14007d574
mov rdi, rax
mov rbx, qword [rbp - 8]
jmp 0x14006d4c4
mov rdi, r14
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
lea rax, [rsi + rdi]
mov qword [rsp + 0x40], rax
sub rbx, qword [rbp - 0x10]
mov r8, rbx
mov rdx, qword [rbp - 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
sar rbx, 3
lea rax, [rdi + rbx*8]
mov qword [rsp + 0x38], rax
movaps xmm0, xmm6
unpcklps xmm0, xmm9
movq rdx, xmm0
lea rcx, [rsp + 0x30]
call fcn.14006db00
mov rcx, qword [rbp - 0x10]
movss xmm7, dword [rcx + rax*8]
subss xmm7, xmm6
movss xmm6, dword [rcx + rax*8 + 4]
subss xmm6, xmm9
cmp byte [0x14009c104], 1
jne 0x14006d76e
movss xmm1, dword [0x14009c0d8]
mulss xmm1, dword [0x14008c4e4]
comiss xmm7, xmm1
ja 0x14006d584
movss xmm2, dword [0x14008c5a8]
xorps xmm0, xmm0
comiss xmm0, xmm7
jbe 0x14006d566
movaps xmm0, xmm7
mulss xmm0, xmm2
comiss xmm0, xmm1
ja 0x14006d584
xorps xmm0, xmm0
comiss xmm6, xmm1
ja 0x14006d584
comiss xmm0, xmm6
jbe 0x14006d76e
movaps xmm0, xmm6
mulss xmm0, xmm2
comiss xmm0, xmm1
jbe 0x14006d76e
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x14006d5d6
mov rax, qword [rbp]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d5c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006bef8
call fcn.14007d56c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x10], xmm0
mov qword [rbp], r14
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14006d62b
mov rax, qword [rbp + 0x30]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d61a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d61a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007d56c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r14
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x14006d68c
mov rax, qword [rbp + 0x168]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d675
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d675
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007d56c
mov qword [rbp + 0x158], r14
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x160], xmm0
mov r15, qword [rbp + 0x188]
cmp r15, 0xf
jbe 0x14006d6ce
lea rdx, [r15 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14006d6c5
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d6c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.14007d56c
nop
mov rcx, qword [rbp + 0x138]
test rcx, rcx
je 0x14006d720
mov rdx, qword [rbp + 0x148]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d709
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006d767
call fcn.14007d56c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], r14
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14006d9a7
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d9a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d9a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp byte [0x14009c100], 0
je 0x14006be92
xor ecx, ecx
movss xmm2, dword [0x14009c0e0]
movaps xmm0, xmm2
movss xmm1, dword [0x14008c57c]
comiss xmm0, xmm1
jb 0x14006d7ab
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14006d7ab
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rbx, xmm0
add rbx, rcx
je 0x14006beaf
nop dword [rax]
movaps xmm0, xmm6
divss xmm0, xmm2
movaps xmm1, xmm7
divss xmm1, xmm2
addss xmm0, xmm0
cvttss2si r8, xmm0
addss xmm1, xmm1
cvttss2si rdx, xmm1
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
je 0x14006beaf
movss xmm2, dword [0x14009c0e0]
jmp 0x14006d7c0
call fcn.14007d56c
mov r15, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14006d872
mov rax, qword [rbp + 0x30]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d861
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d861
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007d56c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r14
mov rcx, qword [rbp + 0x158]
test rcx, rcx
je 0x14006d8d3
mov rax, qword [rbp + 0x168]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d8bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d8bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007d56c
mov qword [rbp + 0x158], r14
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x160], xmm0
cmp r15, 0xf
jbe 0x14006d90e
lea rdx, [r15 + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14006d905
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d905
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r13
call fcn.14007d56c
nop
mov rcx, qword [rbp + 0x138]
test rcx, rcx
je 0x14006d960
mov rdx, qword [rbp + 0x148]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d949
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006d99b
call fcn.14007d56c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x148], r14
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x14006d9a7
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006d9a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006d9a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007d56c
mov rcx, qword [rbp + 0x1d8]
xor rcx, rsp
call fcn.14007d3d0
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14004e0f0
nop
call fcn.14005b5c0
int3
call fcn.14004e0f0
int3
call fcn.14005b5c0
int3
call fcn.14004e0f0
int3
call fcn.14005b5c0
int3
call fcn.14004e0f0
int3
call fcn.14005b5c0
int3
call fcn.14004e0f0
int3
call fcn.14005b5c0
int3