Function at 0x140045660
Capabilities:
Get graphical window text
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17f0]
mov eax, 0x18f0
call fcn.14004b870
sub rsp, rax
movaps xmmword [rsp + 0x18e0], xmm6
movaps xmmword [rsp + 0x18d0], xmm7
movaps xmmword [rsp + 0x18c0], xmm8
movaps xmmword [rsp + 0x18b0], xmm9
movaps xmmword [rsp + 0x18a0], xmm10
movaps xmmword [rsp + 0x1890], xmm11
movaps xmmword [rsp + 0x1880], xmm12
movaps xmmword [rsp + 0x1870], xmm13
movaps xmmword [rsp + 0x1860], xmm14
movaps xmmword [rsp + 0x1850], xmm15
mov rax, qword [0x14005d040]
xor rax, rsp
mov qword [rbp + 0x1748], rax
mov r14d, r9d
mov rsi, rcx
xor r12d, r12d
mov qword [rbp + 0x1528], r12
mov edi, r12d
mov r13d, r12d
mov qword [rbp + 0x1530], r12
mov dword [rbp + 0x1600], 0x130
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
lea rdx, [rbp + 0x1600]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
je 0x1400457aa
lea r15, str.cs2.exe
nop
mov rcx, r12
lea rdx, [rbp + 0x162c]
nop word [rax + rax]
movzx eax, byte [r15 + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x14004581d
cmp rcx, 8
jne 0x140045750
mov edi, dword [rbp + 0x1608]
mov dword [rbp + 0x1528], edi
mov ecx, edi
call fcn.14004a210
mov r13, rax
mov qword [rbp + 0x1530], rax
inc rax
test rax, 0xfffffffffffffffe
jne 0x1400457aa
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r13, rax
mov qword [rbp + 0x1530], rax
test rbx, rbx
je 0x1400457b8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0x210], 0x238
mov edx, edi
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
mov r15, r12
mov qword [rsp + 0x70], r12
lea rdx, [rbp + 0x210]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
je 0x140045846
nop
lea rdx, [rbp + 0x240]
lea rcx, str.client.dll
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x14004583a
lea rdx, [rbp + 0x210]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x1400457f0
jmp 0x140045846
lea rdx, [rbp + 0x1600]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140045740
jmp 0x1400457aa
mov r15, qword [rbp + 0x228]
mov qword [rsp + 0x70], r15
test rbx, rbx
je 0x140045854
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x140060040], 0x50
mov dword [0x140060044], 3
lea rax, [0x140043c70]
mov qword [0x140060048], rax
mov qword [0x140060058], rsi
lea rbx, str.cs2yinlei
mov qword [0x140060080], rbx
lea rcx, [0x140060040]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], r12
mov rax, qword [0x140060058]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
mov eax, dword [0x14005d84c]
mov dword [rsp + 0x38], eax
mov eax, dword [0x14005d848]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r9d, 0x80000000
mov r8, rbx
mov rdx, qword [0x140060080]
mov ecx, 0x80028
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140060090], rax
mov r9d, 2
mov r8b, 0xff
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xorps xmm0, xmm0
movups xmmword [rbp + 0x14b8], xmm0
lea rdx, [rbp + 0x14b8]
mov rcx, qword [0x140060090]
call qword [sym.imp.USER32.dll_GetClientRect]
xorps xmm0, xmm0
movups xmmword [rbp + 0x15d0], xmm0
lea rdx, [rbp + 0x15d0]
mov rcx, qword [0x140060090]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rbp + 0x80], r12
lea rdx, [rbp + 0x80]
mov rcx, qword [0x140060090]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x1550], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x1554], eax
mov eax, dword [rbp + 0x14c0]
mov dword [rbp + 0x1558], eax
mov eax, dword [rbp + 0x14c4]
mov dword [rbp + 0x155c], eax
lea rdx, [rbp + 0x1550]
mov rcx, qword [0x140060090]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, r14d
mov rcx, qword [0x140060090]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [0x140060090]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
xor r14d, r14d
mov qword [0x14005ffc0], r14
mov qword [0x14005ffd4], r14
mov qword [0x14005ffdc], 1
mov qword [0x14005ffe8], 2
mov qword [0x140060000], 2
mov dword [0x14005ffc8], 0x3c
mov dword [0x14005ffcc], 1
mov dword [0x14005ffd0], 0x1c
mov dword [0x14005ffe4], 0x20
mov rax, qword [0x140060090]
mov qword [0x14005fff0], rax
mov qword [0x14005fff8], 1
mov dword [rbp + 0x1730], 0xb000
mov dword [rbp + 0x1734], 0xa000
lea rax, [0x140060020]
mov qword [rsp + 0x58], rax
lea rax, [0x140060018]
mov qword [rsp + 0x50], rax
lea rax, [0x140060030]
mov qword [rsp + 0x48], rax
lea rax, [0x140060010]
mov qword [rsp + 0x40], rax
lea rax, [0x14005ffc0]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 2
lea rax, [rbp + 0x1730]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r14 + 1]
xor ecx, ecx
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov qword [rbp + 0x80], r14
mov rcx, qword [0x140060010]
mov rax, qword [rcx]
lea r9, [rbp + 0x80]
lea r8, [0x1400552f8]
xor edx, edx
call qword [rax + 0x48]
mov rdx, qword [rbp + 0x80]
test rdx, rdx
je 0x140045b06
mov rcx, qword [0x140060030]
mov rax, qword [rcx]
lea r9, [0x14005ffb0]
xor r8d, r8d
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
call fcn.140043cf0
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0x170], xmm0
movaps xmmword [rbp + 0x180], xmm0
movaps xmmword [rbp + 0x190], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rax
movups xmmword [rbp + 0x150], xmm0
movdqa xmm1, xmmword [0x140055780]
movdqa xmmword [rbp + 0x160], xmm1
mov byte [rbp + 0x150], al
mov qword [rbp + 0x1b8], rax
movaps xmmword [rbp + 0x1c0], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x1d0], xmm1
movaps xmmword [rbp + 0x1e0], xmm0
movdqa xmmword [rbp + 0x1f0], xmm1
mov qword [rbp + 0x200], r14
movdqu xmmword [rbp + 0x1468], xmm0
mov qword [rbp + 0x1478], r14
mov qword [rbp + 0x1490], 0x40
lea rdx, [rbp + 0x1490]
lea rcx, [rbp + 0x1468]
call fcn.140047e80
movabs rsi, 0xb21642c8590b2165
movzx eax, byte [0x14005d0dd]
test al, al
je 0x1400477bc
movzx ebx, byte [rbp + 0x1430]
movss xmm11, dword [0x140055634]
nop dword [rax]
nop dword [rax + rax]
mov rdi, qword [rbp + 0x1468]
mov rsi, qword [rbp + 0x1470]
cmp rdi, rsi
je 0x140045c1c
mov rcx, rdi
call fcn.140049410
add rdi, 0xb8
cmp rdi, rsi
jne 0x140045bf3
mov rax, qword [rbp + 0x1468]
mov qword [rbp + 0x1470], rax
movzx eax, byte [0x14005d0dd]
test al, al
je 0x1400477b2
mov ecx, 0x2e
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140045c41
cmp byte [0x14005d0dc], 0
sete byte [0x14005d0dc]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1560]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140045cad
lea rcx, [rbp + 0x1560]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1560]
call qword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [rbp + 0x1568], 0x12
jne 0x140045c8c
mov byte [0x14005d0dd], 0
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1560]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140045c62
mov rax, qword [0x14005d818]
test rax, rax
je 0x140045cc2
mov rcx, qword [rax + 0x98]
jmp 0x140045cc5
mov rcx, r14
cmp qword [rcx + 0x48], 0
jne 0x140045cd1
call fcn.14002ed30
call fcn.14002ff70
call fcn.140008740
nop
call fcn.140044280
lea rdx, [r15 + 0x1730118]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1730]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp + 0x1730]
mov qword [rbp + 0x170], r15
lea rdx, [r15 + 0x127c]
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rsp + 0x60]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rsp + 0x60]
movss dword [rbp + 0x1c0], xmm6
movss xmm7, dword [rsp + 0x64]
movss dword [rbp + 0x1c4], xmm7
movss xmm8, dword [rsp + 0x68]
movss dword [rbp + 0x1c8], xmm8
lea rdx, [r15 + 0xc58]
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x68], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x70]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x70]
movss dword [rbp + 0x1438], xmm0
movss dword [rbp + 0x1cc], xmm0
movss xmm0, dword [rbp - 0x6c]
movss dword [rbp - 0x2c], xmm0
movss dword [rbp + 0x1d0], xmm0
movss xmm0, dword [rbp - 0x68]
movss dword [rbp - 0x30], xmm0
movss dword [rbp + 0x1d4], xmm0
lea rdx, [r15 + 0x3cb]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1458]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12d, dword [rbp + 0x1458]
mov dword [rbp + 0x18c], r12d
lea rdx, [r15 + 0x15a4]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x148c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x148c]
mov dword [rbp + 0x1a0], eax
lea rdx, [r15 + 0x3d4]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1480]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x1480]
mov dword [rbp + 0x198], eax
lea rdx, [r15 + 0x14b8]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x1484]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp + 0x1484]
movss dword [rbp + 0x190], xmm0
lea rdx, [r15 + 0x3d8]
mov qword [rbp - 0x7c], 0
mov dword [rbp - 0x74], 0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x7c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x7c]
movss dword [rbp - 0x24], xmm0
movss dword [rbp + 0x1e4], xmm0
movss xmm0, dword [rbp - 0x78]
movss dword [rbp - 0x28], xmm0
movss dword [rbp + 0x1e8], xmm0
movss xmm1, dword [rbp - 0x74]
movss dword [rbp - 0x40], xmm1
movss dword [rbp + 0x1ec], xmm1
mov rdi, qword [rsp + 0x70]
lea rdx, [rdi + 0x18bbaf8]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x15c8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x15c8]
mov qword [rbp + 0x80], rsi
lea rdx, [rdi + 0x191cf30]
mov qword [rsp + 0x20], r14
mov r9d, 0x40
lea r8, [rbp + 0x14d0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rdi + 0x1918a30]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x15c0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x15c0]
test rdx, rdx
je 0x140045fc1
add rdx, 0x9dd
mov qword [rsp + 0x20], r14
mov r9d, 1
lea r8, [rbp + 0x1448]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x1448], 0
je 0x140045fb0
mov byte [0x140060028], 1
jmp 0x140045fc1
mov dword [0x14005d0d8], 0xffffffff
mov byte [0x140060028], 0
mov edi, 1
mov dword [rbp - 0x80], edi
nop dword [rax]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0x450]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowTextA]
lea rdx, [0x1400555c0]
lea rcx, [rbp + 0x450]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x140046022
lea rdx, str.Counter
lea rcx, [rbp + 0x450]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x140046f9e
mov edx, edi
and edx, 0x7fff
shl edx, 3
sar edx, 9
add rdx, 0x10
add rdx, rsi
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x15b8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x15b8]
test rcx, rcx
je 0x140046f9e
mov eax, edi
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, rcx
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x15e0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0x15e0]
test r14, r14
je 0x140046f9b
lea rdx, [r14 + 0x7e4]
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x1520]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edi, dword [rbp + 0x1520]
mov edx, edi
shr edx, 9
and edx, 0x3f
shl edx, 3
add rdx, 0x10
add rdx, rsi
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [rbp + 0x1590]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rbp + 0x1590]
test rcx, rcx
je 0x140046f9b
and edi, 0x1ff
imul edx, edi, 0x78
add rdx, rcx
xor edi, edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 8]
lea r8, [rbp + 0x1598]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x1598]
test rsi, rsi
je 0x140046f94
cmp rsi, r15
je 0x140046f94
lea rdx, [r14 + 0x3cb]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x151c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15d, dword [rbp + 0x151c]
cmp r15d, r12d
je 0x140046f8d
lea r8, [r14 + 0x638]
lea rdx, [rbp + 0x1560]
lea rcx, [rbp + 0x1528]
call fcn.140047b70
lea rdx, [rsi + 0x334]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x1488]
mov r13, qword [rbp + 0x1530]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rsi + 0x338]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 4]
lea r8, [rbp + 0x1518]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12d, dword [rbp + 0x1488]
lea eax, [r12 - 1]
cmp eax, 0x63
ja 0x140046f45
cmp dword [rbp + 0x1518], 0x100
jne 0x140046f45
lea rdx, [rsi + 0x1308]
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 8]
lea r8, [rbp + 0x15a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x15a0]
add rdx, 0x12a2
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 2]
lea r8, [rbp + 0x145c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x140060009], dil
je 0x140046294
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 1]
lea r8, [rbp + 0x1460]
lea rdx, [rsi + 0x16a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [rbp + 0x1440], 1
mov qword [rsp + 0x20], rdi
lea r9d, [rdi + 1]
lea r8, [rbp + 0x1440]
lea rdx, [rsi + 0x16a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140060008], 0
je 0x1400462c9
mov dword [rbp + 0x1450], 0x47a8c000
lea rdx, [rsi + 0x1440]
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rbp + 0x1450]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
xor eax, eax
movaps xmmword [rbp + 0xc0], xmm0
movaps xmmword [rbp + 0xd0], xmm0
movaps xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rax
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], al
mov qword [rbp + 0xf8], rax
movaps xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movaps xmmword [rbp + 0x110], xmm1
movaps xmmword [rbp + 0x120], xmm0
movdqa xmmword [rbp + 0x130], xmm1
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], r14
lea r9, [rbp + 0x1560]
mov r14, qword [rbp + 0x1560]
mov qword [rbp + 0x1490], r14
cmp qword [rbp + 0x1578], 0xf
cmova r9, r14
mov rdi, qword [rbp + 0x1570]
lea rcx, [rbp + 0x90]
cmp rdi, 0xf
ja 0x140046396
mov qword [rbp + 0xa0], rdi
mov r8, rdi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rdi + 0x90], 0
jmp 0x1400463ac
mov rdx, rdi
call fcn.140047f90
mov rax, qword [rbp + 0x1560]
mov qword [rbp + 0x1490], rax
mov dword [rbp + 0xc8], r12d
mov dword [rbp + 0xdc], pe_nt_image_headers64
mov dword [rbp + 0xcc], r15d
lea rdx, [rsi + 0x16a0]
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 1]
lea r8, [rbp + 0x1430]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx eax, byte [rbp + 0x1430]
mov byte [rbp + 0xf0], al
mov qword [rbp - 0x58], r14
mov dword [rbp - 0x50], r14d
lea rdx, [rsi + 0x127c]
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp - 0x58]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x58]
movss dword [rbp + 0x100], xmm0
movss xmm1, dword [rbp - 0x54]
movss dword [rbp + 0x104], xmm1
movss xmm0, dword [rbp - 0x50]
movss dword [rbp + 0x108], xmm0
mov qword [rbp - 0x3c], r14
mov dword [rbp - 0x34], r14d
lea rdx, [rsi + 0xc58]
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp - 0x3c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rbp - 0x3c]
movsd qword [rbp + 0x10c], xmm0
mov eax, dword [rbp - 0x34]
mov dword [rbp + 0x114], eax
movss xmm1, dword [rbp + 0x108]
subss xmm1, xmm8
movss xmm2, dword [rbp + 0x104]
subss xmm2, xmm7
movss xmm0, dword [rbp + 0x100]
subss xmm0, xmm6
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm0
mulss xmm1, xmm1
addss xmm2, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400464c5
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1400464cd
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss dword [rbp + 0xd4], xmm0
movzx ecx, word [rbp + 0x145c]
mov word [rbp + 0xe4], cx
call fcn.140045090
mov qword [rbp + 0xe8], rax
lea rdx, [rsi + 0x318]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x15a8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x15a8]
add rdx, 0x1e0
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x15b0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x15b0]
mov qword [rsp + 0x78], rdx
mov qword [rbp - 0x4c], r14
mov dword [rbp - 0x44], r14d
add rdx, 0xc0
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x4c]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x4c]
movss dword [rbp + 0xf4], xmm0
movss xmm1, dword [rbp - 0x48]
movss dword [rbp + 0xf8], xmm1
movss xmm0, dword [rbp - 0x44]
movss dword [rbp + 0xfc], xmm0
mov rax, qword [rbp + 0x1470]
cmp rax, qword [rbp + 0x1478]
je 0x1400465c0
lea rdx, [rbp + 0x90]
mov rcx, rax
call fcn.140049920
add qword [rbp + 0x1470], 0xb8
jmp 0x1400465d6
lea r8, [rbp + 0x90]
mov rdx, rax
lea rcx, [rbp + 0x1468]
call fcn.140048690
movss xmm6, dword [rbp + 0x14e0]
movaps xmm4, xmm6
movss xmm10, dword [rbp + 0x100]
mulss xmm4, xmm10
movss xmm3, dword [rbp + 0x104]
movaps xmm0, xmm3
movss xmm12, dword [rbp + 0x14e4]
mulss xmm0, xmm12
addss xmm4, xmm0
movss xmm2, dword [rbp + 0x108]
movaps xmm1, xmm2
movss xmm13, dword [rbp + 0x14e8]
mulss xmm1, xmm13
addss xmm4, xmm1
movss xmm14, dword [rbp + 0x14ec]
addss xmm4, xmm14
movss xmm15, dword [rbp + 0x1500]
movaps xmm1, xmm15
mulss xmm1, xmm10
mulss xmm3, dword [rbp + 0x1504]
addss xmm1, xmm3
mulss xmm2, dword [rbp + 0x1508]
addss xmm1, xmm2
addss xmm1, dword [rbp + 0x150c]
movss xmm0, dword [0x1400555e8]
comiss xmm0, xmm1
ja 0x140046e80
movss xmm0, dword [0x140055668]
divss xmm0, xmm1
mov ecx, dword [0x14005d84c]
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm9, xmm9
cvtsi2ss xmm9, eax
xorps xmm1, xmm1
cvtsi2ss xmm1, ecx
movss dword [rbp + 0x1450], xmm1
mulss xmm0, xmm4
mulss xmm0, xmm11
mulss xmm0, xmm1
addss xmm0, xmm11
movaps xmm7, xmm9
subss xmm7, xmm0
movss xmm4, dword [rbp + 0xf8]
movaps xmm5, xmm4
mulss xmm5, dword [rbp + 0x14d4]
movss xmm3, dword [rbp + 0xf4]
movaps xmm0, xmm3
mulss xmm0, dword [rbp + 0x14d0]
addss xmm5, xmm0
movss xmm2, dword [rbp + 0xfc]
movaps xmm1, xmm2
mulss xmm1, dword [rbp + 0x14d8]
addss xmm5, xmm1
addss xmm5, dword [rbp + 0x14dc]
movaps xmm8, xmm4
mulss xmm8, xmm12
movaps xmm0, xmm3
mulss xmm0, xmm6
addss xmm8, xmm0
movaps xmm1, xmm2
mulss xmm1, xmm13
addss xmm8, xmm1
addss xmm8, xmm14
mulss xmm4, dword [rbp + 0x1504]
mulss xmm3, xmm15
addss xmm4, xmm3
mulss xmm2, dword [rbp + 0x1508]
addss xmm4, xmm2
addss xmm4, dword [rbp + 0x150c]
movss xmm0, dword [0x1400555e8]
comiss xmm0, xmm4
ja 0x140046e73
movss xmm12, dword [0x140055668]
movaps xmm1, xmm12
divss xmm1, xmm4
movaps xmm6, xmm1
mulss xmm6, xmm5
mulss xmm6, xmm11
mov eax, dword [0x14005d848]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm6, xmm0
addss xmm6, xmm11
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm6, xmm0
mulss xmm1, xmm8
mulss xmm1, xmm11
mulss xmm1, dword [rbp + 0x1450]
addss xmm1, xmm11
subss xmm9, xmm1
xorps xmm13, xmm13
ucomiss xmm10, xmm13
jp 0x1400467da
je 0x140046e73
subss xmm7, xmm9
movaps xmm10, xmm7
mulss xmm10, dword [0x140055604]
movaps xmm1, xmm7
divss xmm1, dword [0x1400556a8]
movaps xmm8, xmm1
mulss xmm8, xmm11
cmp byte [0x14005d0d3], r14b
je 0x140046922
movsd xmm0, qword [0x1400530e0]
movsd qword [rbp + 0x60], xmm0
mov edi, dword [0x1400530e8]
cvttss2si r15d, xmm7
cvttss2si esi, xmm1
cvttss2si r12d, xmm9
movaps xmm0, xmm6
subss xmm0, xmm8
cvttss2si r14d, xmm0
mov rax, qword [0x14005d818]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007df0
mov r10, rax
mov rcx, qword [rbp + 0x60]
mov r9, rcx
shr r9, 0x20
or edi, 0xffffff00
shl edi, 8
or r9d, edi
shl r9d, 8
or r9d, ecx
lea eax, [r14 + rsi]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0x10], xmm0
lea eax, [r12 + r15]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0x14], xmm1
movd xmm0, r14d
cvtdq2ps xmm0, xmm0
movss dword [rbp + 8], xmm0
movd xmm1, r12d
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xc], xmm1
movss dword [rsp + 0x30], xmm12
movss dword [rsp + 0x20], xmm13
lea r8, [rbp + 0x10]
lea rdx, [rbp + 8]
mov rcx, r10
call fcn.1400281d0
lea r9, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova r9, qword [rbp + 0x90]
movsd xmm0, qword [0x140053110]
movsd qword [rbp + 0x20], xmm0
mov eax, dword [0x140053118]
mov dword [rbp + 0x28], eax
movaps xmm0, xmm8
addss xmm0, xmm6
cvttss2si ecx, xmm0
lea r8, [rbp + 0x20]
mov edx, r12d
call fcn.140044f60
mov r12d, dword [rbp + 0x1488]
xor r14d, r14d
cmp byte [0x14005d0d4], 0
je 0x140046969
movsd xmm0, qword [0x1400530f0]
movsd qword [rbp + 0x30], xmm0
mov eax, dword [0x1400530f8]
mov dword [rbp + 0x38], eax
movaps xmm0, xmm7
mulss xmm0, dword [0x140055618]
addss xmm0, xmm9
cvttss2si edx, xmm0
cvttss2si ecx, xmm6
mov r9, qword [rbp + 0xe8]
lea r8, [rbp + 0x30]
call fcn.140044f60
cmp byte [0x14005d0d2], 0
je 0x140046a65
movsd xmm0, qword [0x140053100]
movsd qword [rbp + 0x70], xmm0
mov r14d, dword [0x140053108]
mov eax, 0x64
sub eax, r12d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm7
divss xmm0, dword [0x140055704]
subss xmm7, xmm0
cvttss2si esi, xmm7
addss xmm0, xmm9
cvttss2si r15d, xmm0
addss xmm8, dword [0x1400556e8]
movaps xmm0, xmm6
subss xmm0, xmm8
cvttss2si edi, xmm0
mov rax, qword [0x14005d818]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007df0
mov r10, rax
mov rcx, qword [rbp + 0x70]
mov r9, rcx
shr r9, 0x20
or r14d, 0xffffff00
shl r14d, 8
or r9d, r14d
shl r9d, 8
or r9d, ecx
lea eax, [rdi + 3]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbp], xmm0
lea eax, [r15 + rsi]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss dword [rbp + 4], xmm1
movd xmm0, edi
cvtdq2ps xmm0, xmm0
movss dword [rbp - 8], xmm0
movd xmm1, r15d
cvtdq2ps xmm1, xmm1
movss dword [rbp - 4], xmm1
xor r14d, r14d
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm13
lea r8, [rbp]
lea rdx, [rbp - 8]
mov rcx, r10
call fcn.1400282e0
subss xmm10, dword [0x1400556b8]
movss dword [rbp + 0x1450], xmm10
movss dword [rbp - 0x10], xmm6
movss dword [rbp - 0xc], xmm9
lea rsi, [0x14005d0e4]
mov r15, qword [rsp + 0x78]
xor r12d, r12d
mov eax, dword [rsi - 4]
mov edi, dword [rsi]
mov qword [rbp + 0x14a8], r12
mov dword [rbp + 0x14b0], r12d
shl eax, 5
movsxd rdx, eax
add rdx, r15
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x14a8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x1498], r12
mov dword [rbp + 0x14a0], r12d
shl edi, 5
movsxd rdx, edi
add rdx, r15
mov qword [rsp + 0x20], r12
mov r9d, 0xc
lea r8, [rbp + 0x1498]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm4, dword [rbp + 0x14ac]
movaps xmm7, xmm4
movss xmm5, dword [rbp + 0x14d4]
mulss xmm7, xmm5
movss xmm3, dword [rbp + 0x14a8]
movaps xmm0, xmm3
movss xmm8, dword [rbp + 0x14d0]
mulss xmm0, xmm8
addss xmm7, xmm0
movss xmm2, dword [rbp + 0x14b0]
movaps xmm1, xmm2
movss xmm10, dword [rbp + 0x14d8]
mulss xmm1, xmm10
addss xmm7, xmm1
movss xmm12, dword [rbp + 0x14dc]
addss xmm7, xmm12
movaps xmm9, xmm4
movss xmm13, dword [rbp + 0x14e4]
mulss xmm9, xmm13
movaps xmm0, xmm3
movss xmm14, dword [rbp + 0x14e0]
mulss xmm0, xmm14
addss xmm9, xmm0
movaps xmm1, xmm2
movss xmm15, dword [rbp + 0x14e8]
mulss xmm1, xmm15
addss xmm9, xmm1
addss xmm9, dword [rbp + 0x14ec]
mulss xmm4, dword [rbp + 0x1504]
mulss xmm3, dword [rbp + 0x1500]
addss xmm4, xmm3
mulss xmm2, dword [rbp + 0x1508]
addss xmm4, xmm2
addss xmm4, dword [rbp + 0x150c]
mov ecx, dword [0x14005d84c]
mov r8d, dword [0x14005d848]
movss xmm0, dword [0x1400555e8]
comiss xmm0, xmm4
ja 0x140046c51
movss xmm2, dword [0x140055668]
divss xmm2, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm7
movaps xmm7, xmm0
mulss xmm7, xmm11
xorps xmm1, xmm1
cvtsi2ss xmm1, r8d
mulss xmm7, xmm1
addss xmm7, xmm11
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm7, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm9
mulss xmm2, xmm11
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm0
addss xmm2, xmm11
subss xmm1, xmm2
movaps xmm9, xmm1
movss xmm4, dword [rbp + 0x149c]
movaps xmm6, xmm4
mulss xmm6, xmm5
movss xmm3, dword [rbp + 0x1498]
movaps xmm0, xmm3
mulss xmm0, xmm8
addss xmm6, xmm0
movss xmm2, dword [rbp + 0x14a0]
movaps xmm1, xmm2
mulss xmm1, xmm10
addss xmm6, xmm1
addss xmm6, xmm12
movaps xmm8, xmm4
mulss xmm8, xmm13
movaps xmm0, xmm3
mulss xmm0, xmm14
addss xmm8, xmm0
movaps xmm1, xmm2
mulss xmm1, xmm15
addss xmm8, xmm1
addss xmm8, dword [rbp + 0x14ec]
mulss xmm4, dword [rbp + 0x1504]
mulss xmm3, dword [rbp + 0x1500]
addss xmm4, xmm3
mulss xmm2, dword [rbp + 0x1508]
addss xmm4, xmm2
addss xmm4, dword [rbp + 0x150c]
movss xmm0, dword [0x1400555e8]
comiss xmm0, xmm4
ja 0x140046d5d
movss xmm2, dword [0x140055668]
divss xmm2, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm6
movaps xmm6, xmm0
mulss xmm6, xmm11
xorps xmm1, xmm1
cvtsi2ss xmm1, r8d
mulss xmm6, xmm1
addss xmm6, xmm11
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
addss xmm6, xmm0
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm2, xmm8
mulss xmm2, xmm11
xorps xmm0, xmm0
cvtsi2ss xmm0, ecx
mulss xmm2, xmm0
addss xmm2, xmm11
subss xmm1, xmm2
movaps xmm8, xmm1
movsd xmm0, qword [0x140053120]
movsd qword [rbp + 0x15d0], xmm0
mov edi, dword [0x140053128]
mov rax, qword [0x14005d818]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007df0
mov rcx, qword [rbp + 0x15d0]
mov r9, rcx
shr r9, 0x20
or edi, 0xffffff00
shl edi, 8
or r9d, edi
shl r9d, 8
or r9d, ecx
movss xmm0, dword [0x140055690]
movss dword [rsp + 0x28], xmm0
movss xmm2, dword [rbp + 0x1450]
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.1400285e0
movsd xmm0, qword [0x140053120]
movsd qword [rbp + 0x1550], xmm0
mov edi, dword [0x140053128]
mov rax, qword [0x14005d818]
mov rax, qword [rax + 0x4b00]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.140007df0
mov rcx, qword [rbp + 0x1550]
mov r9, rcx
shr r9, 0x20
or edi, 0xffffff00
shl edi, 8
or r9d, edi
shl r9d, 8
or r9d, ecx
movss dword [rbp - 0x18], xmm6
movss dword [rbp - 0x14], xmm8
movss dword [rbp - 0x20], xmm7
movss dword [rbp - 0x1c], xmm9
movss xmm0, dword [0x140055678]
movss dword [rsp + 0x20], xmm0
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.140028070
inc r14d
add rsi, 8
cmp r14d, 0x10
jb 0x140046a91
xor r14d, r14d
movss xmm7, dword [rsp + 0x64]
movss xmm8, dword [rsp + 0x68]
lea rcx, [rbp + 0x130]
call fcn.140047aa0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140046ecd
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046ec8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004792c
call fcn.14004aa6c
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], 0xf
mov byte [rbp + 0x90], 0
mov rax, qword [rbp + 0x1578]
cmp rax, 0xf
jbe 0x140046f28
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x1490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046f23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004792c
call fcn.14004aa6c
movss xmm6, dword [rsp + 0x60]
mov rsi, qword [rbp + 0x80]
mov r12d, dword [rbp + 0x1458]
mov r15, qword [rbp + 0x1730]
jmp 0x140046f9e
mov rdx, qword [rbp + 0x1578]
cmp rdx, 0xf
jbe 0x140046f86
inc rdx
mov rcx, qword [rbp + 0x1560]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046f81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004792c
call fcn.14004aa6c
mov r12d, dword [rbp + 0x1458]
mov r15, qword [rbp + 0x1730]
mov rsi, qword [rbp + 0x80]
xor r14d, r14d
mov eax, dword [rbp - 0x80]
inc eax
mov dword [rbp - 0x80], eax
cmp eax, 0x40
mov edi, eax
jl 0x140045fd0
cmp byte [0x1400600a1], 0
je 0x140047340
mov r15, qword [rbp + 0x1470]
mov rcx, r15
mov r14, qword [rbp + 0x1468]
sub rcx, r14
movabs rax, 0xb21642c8590b2165
imul rcx
lea rsi, [rcx + rdx]
sar rsi, 7
mov rax, rsi
shr rax, 0x3f
add rsi, rax
je 0x140047340
cmp byte [0x140060009], 0
jne 0x140047340
cmp byte [r14 + 0x60], 0
je 0x140047340
cmp rsi, 0x20
jg 0x140047025
mov rdx, r15
mov rcx, r14
call fcn.140048210
jmp 0x1400470e5
mov rax, rsi
cqo
sub rax, rdx
sar rax, 1
mov rdi, rsi
sub rdi, rax
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
cmp rdi, rcx
cmovl rax, rdi
cmp rdi, 0x16
jbe 0x1400470a0
mov rdi, rax
movabs rcx, 0x1642c8590b21642
cmp rax, rcx
ja 0x140047091
test rax, rax
jle 0x140047091
nop word [rax + rax]
imul rcx, rdi, 0xb8
lea rdx, [0x14004d680]
call fcn.14004ae10
test rax, rax
jne 0x140047195
shr rdi, 1
jne 0x140047070
xor eax, eax
mov rcx, rax
call fcn.14004ae24
mov edi, 0x16
lea rax, [rbp + 0x460]
mov qword [rbp + 0x450], rax
mov qword [rbp + 0x458], rdi
mov byte [rsp + 0x28], bl
mov qword [rsp + 0x20], rdi
mov r9, rax
mov r8, rsi
mov rdx, r15
mov rcx, r14
call fcn.140048590
cmp qword [rbp + 0x458], 0x16
jbe 0x1400470e5
mov rcx, qword [rbp + 0x450]
call fcn.14004ae24
movss xmm10, dword [rbp - 0x30]
addss xmm10, xmm8
movss xmm1, dword [rbp - 0x2c]
addss xmm1, xmm7
mov rdi, qword [rbp + 0x1468]
movss xmm0, dword [rbp + 0x1438]
addss xmm0, xmm6
movss xmm6, dword [rdi + 0x64]
subss xmm6, xmm0
movss xmm7, dword [rdi + 0x68]
subss xmm7, xmm1
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
movsd xmm12, qword [0x1400556c8]
mulsd xmm1, xmm12
movsd xmm13, qword [0x1400556a0]
divsd xmm1, xmm13
cvtpd2ps xmm9, xmm1
movss xmm8, dword [rdi + 0x6c]
subss xmm8, xmm10
cvtps2pd xmm0, xmm6
movsd xmm1, qword [0x140055698]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movsd xmm1, qword [0x140055698]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1400471a4
xorps xmm1, xmm1
sqrtsd xmm1, xmm0
jmp 0x1400471ac
cmp rdi, 0x16
jbe 0x140047093
jmp 0x1400470a7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm1, xmm0
cvtps2pd xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
mulsd xmm0, xmm12
divsd xmm0, xmm13
xorps xmm0, xmmword [0x140055820]
cvtsd2ss xmm0, xmm0
unpcklps xmm0, xmm9
movsd qword [rbp + 0x40], xmm0
xorps xmm6, xmm6
movss dword [rbp + 0x48], xmm6
mov r15, qword [rsp + 0x70]
lea rdx, [r15 + 0x1929730]
xor r12d, r12d
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 0xc]
lea r8, [rbp + 0x40]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14006001c], r12b
je 0x14004734b
cmp dword [rbp + 0x148c], r12d
jle 0x14004734b
mov dword [rbp + 0x1438], 0x10001
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 4]
lea r8, [rbp + 0x1438]
lea rdx, [r15 + 0x1728f90]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x78]
call fcn.140047d70
mov dword [rbp + 0x1438], pe_nt_image_headers64
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 4]
lea r8, [rbp + 0x1438]
lea rdx, [r15 + 0x1728f90]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, [rbp + 0x18]
call fcn.140044cc0
mov rax, qword [rbp + 0x18]
movabs rdx, 0x7ffffffffff0bdbf
mov esi, 0xff
cmp rax, rdx
je 0x1400472b8
mov ecx, 1
cmovl ecx, esi
test cl, cl
lea rdi, [rax + 0xf4240]
js 0x1400472c2
movabs rdi, 0x7fffffffffffffff
movabs rbx, 0x4e94914effff
movabs r15, 0x431bde82d7b634db
lea rcx, [rbp + 0x50]
call fcn.140044cc0
mov rax, qword [rbp + 0x50]
cmp rdi, rax
je 0x140047337
mov ecx, 1
cmovl ecx, esi
test cl, cl
jle 0x140047337
mov rcx, rdi
sub rcx, rax
cmp rcx, rbx
jg 0x14004732b
mov rax, r15
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140047322
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1400472d6
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x1400472d6
movzx ebx, byte [rbp + 0x1430]
jmp 0x140047346
xor r12d, r12d
xorps xmm6, xmm6
mov r15, qword [rsp + 0x70]
mov r14, qword [rbp + 0x1730]
cmp byte [0x14005d0d0], 0
je 0x140047394
movss xmm0, dword [rbp + 0x1484]
comiss xmm0, xmm6
jbe 0x140047394
mov dword [rbp + 0x1438], 0
lea rdx, [r14 + 0x14b8]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1438]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x1400600a0], 0
je 0x140047409
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140047409
mov eax, dword [rbp + 0x1480]
add eax, 0xfffeff7f
test eax, 0xfffffffd
je 0x1400473ca
mov dword [rbp + 0x1438], pe_nt_image_headers64
jmp 0x1400473e7
mov qword [rsp + 0x78], 1
lea rcx, [rsp + 0x78]
call fcn.140047d70
mov dword [rbp + 0x1438], 0x10001
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1438]
lea rdx, [r15 + 0x17294a0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov edi, dword [0x14006009c]
lea rdx, [r14 + 0x1138]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x15e8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x15e8]
mov qword [rbp + 0x180], rax
lea rsi, [rax + 0x210]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1514]
mov rdx, rsi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r14 + 0x1400]
mov qword [rsp + 0x20], r12
mov r9d, 1
lea r8, [rbp + 0x1449]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x1449], 0
jne 0x1400474bb
cmp dword [rbp + 0x1514], edi
je 0x1400474bb
mov dword [rbp + 0x1438], edi
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1438]
mov rdx, rsi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movss xmm1, dword [rbp - 0x28]
mulss xmm1, xmm1
movss xmm0, dword [rbp - 0x24]
mulss xmm0, xmm0
addss xmm1, xmm0
movss xmm0, dword [rbp - 0x40]
mulss xmm0, xmm0
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x1400474ef
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1400474f7
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvttss2si eax, xmm0
mov dword [0x14006002c], eax
cmp byte [0x14005ffb8], 0
je 0x140047701
lea rdx, [r14 + 0x147c]
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1510]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r15 + 0x1919778]
mov qword [rsp + 0x20], r12
mov r9d, 8
lea r8, [rbp + 0x15f0]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x15f0]
add rdx, 0x40
mov qword [rsp + 0x20], r12
mov r9d, 4
lea r8, [rbp + 0x1538]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [r14 + 0x17a0]
xor r14d, r14d
mov qword [rbp + 0x14b8], r14
mov qword [rbp + 0x14c0], r14
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0x10]
lea r8, [rbp + 0x14b8]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x14c0]
test rdx, rdx
je 0x1400477a3
mov rcx, qword [rbp + 0x14b8]
lea rax, [rcx - 1]
cmp rax, 0xfffd
ja 0x1400477a3
dec rcx
lea rax, [rcx + rcx*2]
lea rdx, [rdx + rax*4]
mov qword [rbp - 0x64], r14
mov dword [rbp - 0x5c], r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp - 0x64]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp - 0x64]
movss dword [rbp + 0x1d8], xmm6
movss xmm7, dword [rbp - 0x60]
movss dword [rbp + 0x1dc], xmm7
movss xmm8, dword [rbp - 0x5c]
movss dword [rbp + 0x1e0], xmm8
cmp dword [rbp + 0x1510], 1
jle 0x1400476f1
mov qword [rbp + 0x1540], r14
mov dword [rbp + 0x1548], r14d
lea rdx, [r15 + 0x1929730]
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
lea r8, [rbp + 0x1540]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
addss xmm7, xmm7
addss xmm6, xmm6
movss xmm0, dword [0x1400600b4]
subss xmm0, xmm7
movss xmm3, dword [rbp + 0x1544]
addss xmm0, xmm3
subss xmm3, xmm0
movss xmm2, dword [rbp + 0x1538]
mulss xmm2, dword [0x1400555ec]
movss xmm0, dword [0x1400600b0]
subss xmm0, xmm6
movss xmm1, dword [rbp + 0x1540]
addss xmm0, xmm1
subss xmm1, xmm0
divss xmm1, xmm2
cvttss2si edx, xmm1
divss xmm3, xmm2
cvttss2si r8d, xmm3
neg r8d
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r14 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
addss xmm8, xmm8
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [0x1400600b0], xmm0
movss dword [0x1400600b8], xmm8
jmp 0x140047704
mov qword [0x1400600b4], r14
mov dword [0x1400600b0], r14d
jmp 0x140047704
xor r14d, r14d
call fcn.14000a420
call fcn.14000a840
xorps xmm0, xmm0
movups xmmword [rbp + 0x1738], xmm0
mov rcx, qword [0x140060020]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x14005ffb0]
lea edx, [r9 + 1]
call qword [rax + 0x108]
mov rcx, qword [0x140060020]
mov rax, qword [rcx]
lea r8, [rbp + 0x1738]
mov rdx, qword [0x14005ffb0]
call qword [rax + 0x190]
mov rax, qword [0x14005d818]
mov rax, qword [rax + 0x4b00]
mov rcx, qword [rax]
add rcx, 0x48
mov rax, r14
cmp byte [rcx], 0
cmovne rax, rcx
mov rcx, rax
call fcn.14002e2d0
mov rcx, qword [0x140060010]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 1]
call qword [rax + 0x40]
nop
mov qword [rsp + 0x78], 2
lea rcx, [rsp + 0x78]
call fcn.140047d70
movzx eax, byte [0x14005d0dd]
test al, al
jne 0x140045be0
movabs rsi, 0xb21642c8590b2165
call fcn.140044040
nop
mov rcx, qword [0x14005ffb0]
test rcx, rcx
je 0x1400477db
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x14005ffb0], r14
mov rcx, qword [0x140060010]
test rcx, rcx
je 0x1400477f4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140060010], r14
mov rcx, qword [0x140060020]
test rcx, rcx
je 0x14004780d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140060020], r14
mov rcx, qword [0x140060030]
test rcx, rcx
je 0x140047826
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x140060030], r14
mov rcx, qword [0x140060090]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [0x140060058]
mov rcx, qword [0x140060080]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov rbx, qword [rbp + 0x1468]
test rbx, rbx
je 0x1400478e1
mov rdi, qword [rbp + 0x1470]
cmp rbx, rdi
je 0x14004787e
mov rcx, rbx
call fcn.140049410
add rbx, 0xb8
cmp rbx, rdi
jne 0x140047863
mov rbx, qword [rbp + 0x1468]
mov rcx, qword [rbp + 0x1478]
sub rcx, rbx
mov rax, rsi
imul rcx
add rdx, rcx
sar rdx, 7
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0xb8
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400478c7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047925
mov rcx, rbx
call fcn.14004aa6c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1468], xmm0
mov qword [rbp + 0x1478], r14
lea rcx, [rbp + 0x1f0]
call fcn.140047aa0
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x140047938
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047933
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047933
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004aa6c
test r13, r13
je 0x140047946
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x14005d830]
test rcx, rcx
je 0x140047958
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rbp + 0x1748]
xor rcx, rsp
call fcn.14004a8d0
lea r11, [rsp + 0x18f0]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret