Function at 0x14003cd30
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x4720]
mov eax, 0x4820
call fcn.1400c59a0
sub rsp, rax
movaps xmmword [rsp + 0x4810], xmm6
movaps xmmword [rsp + 0x4800], xmm7
movaps xmmword [rsp + 0x47f0], xmm8
movaps xmmword [rsp + 0x47e0], xmm9
mov rax, qword [0x14016c040]
xor rax, rsp
mov qword [rbp + 0x46d0], rax
xor r15d, r15d
mov r14d, r15d
mov dword [rbp + 0x2340], r15d
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d398]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x60]
lea rcx, [0x14016db48]
call fcn.140007a80
nop
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], r15b
je 0x14003cf7b
mov qword [rbp + 0x2320], r15
mov qword [rbp + 0x2330], r15
mov dword [rbp + 0x2340], 0xbf7fbe77
mov rdx, qword [0x140174ee8]
add rdx, 8
lea rax, [rbp + 0x2330]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2320]
add rdx, 0x30
mov qword [rbp + 0x2320], rdx
lea rax, [rbp + 0x2330]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2320]
add rdx, 0x10
mov qword [rbp + 0x2320], rdx
lea rax, [rbp + 0x2330]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2320]
add rdx, 0x20
mov qword [rbp + 0x2320], rdx
lea rax, [rbp + 0x2330]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2320]
add rdx, 0x70
mov qword [rbp + 0x2320], rdx
lea rax, [rbp + 0x2330]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rax, [rbp + 0x2330]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rbp + 0x2320]
mov rdx, qword [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x2320]
add rdx, 0x2c
mov qword [rbp + 0x2320], rdx
lea rax, [rbp + 0x2330]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016cf38]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e174]
call fcn.140010be0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, dword [0x140170a4c]
jp 0x14003cfe1
jne 0x14003cfe1
mov edi, 4
mov esi, edi
jmp 0x14003d0c2
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016e110]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016df34]
call fcn.140010be0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
movss dword [0x140170a4c], xmm0
mov edi, 4
mov esi, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdi + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d088
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d088
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
movss xmm0, dword [0x140170a4c]
movss dword [rbp + 0x2340], xmm0
mov rdx, qword [0x140174f18]
add rdx, 0xc
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016cf08]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e1a0]
call fcn.1400037f0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003d202
cmp byte [0x1401757f8], 0
jne 0x14003d202
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rsi + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d16c
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d16c
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov dword [rbp + 0x2340], 0xba83126f
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2340]
mov rdx, qword [0x140174f18]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401757f8], 1
mov dword [rbp + 0x2350], 1
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016dd18]
call fcn.140007a80
jmp 0x14003d343
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016df98]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d548]
call fcn.1400037f0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
jne 0x14003d3ab
cmp byte [0x1401757f8], 0
je 0x14003d3ab
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rsi + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d2ac
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d2ac
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov dword [rbp + 0x2340], 0x38d1b717
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2340]
mov rdx, qword [0x140174f18]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401757f8], 0
mov dword [rbp + 0x2350], 4
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016dbd8]
call fcn.140003b60
mov r14d, 0x20
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x2350]
call fcn.140038710
lea rcx, [rsp + 0x30]
call fcn.140007360
mov rax, qword [0x140171748]
cmp rax, qword [0x140171750]
je 0x14003d39c
mov r8d, 0x2010
lea rdx, [rbp + 0x2350]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140171748], 0x2010
jmp 0x14003d3ab
lea r8, [rbp + 0x2350]
mov rdx, rax
call fcn.140045f70
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016e298]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d5a0]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003d565
cmp byte [0x1401751eb], 0
jne 0x14003d565
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d457
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d457
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov edx, dword [0x140174d10]
add rdx, qword [0x140174f70]
mov byte [rbp + 0x2318], 0
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401751eb], 1
mov dword [rbp + 0x2350], 1
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov rcx, r15
mov qword [rsp + 0x40], rcx
mov edx, 0xf
mov qword [rsp + 0x48], rdx
mov byte [rsp + 0x30], cl
or r14d, 1
mov dword [rbp + 0x2340], r14d
lea rbx, [0x14016d7d0]
lea rsi, [0x14016d7de]
movzx r9d, byte [rbx]
xor r9b, 0x69
cmp rcx, rdx
jae 0x14003d542
lea rax, [rcx + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14003d54c
lea rcx, [rsp + 0x30]
call fcn.1400077b0
inc rbx
cmp rbx, rsi
je 0x14003d560
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x40]
jmp 0x14003d512
jmp 0x14003d6a5
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016ce40]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d2a8]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
jne 0x14003d70d
cmp byte [0x1401751eb], 0
je 0x14003d70d
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d611
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d611
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov edx, dword [0x140174d10]
add rdx, qword [0x140174f70]
mov byte [rbp + 0x2318], 0x20
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401751eb], 0
mov dword [rbp + 0x2350], 4
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016ce00]
call fcn.140008610
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x2350]
call fcn.140038710
lea rcx, [rsp + 0x30]
call fcn.140007360
mov rax, qword [0x140171748]
cmp rax, qword [0x140171750]
je 0x14003d6fe
mov r8d, 0x2010
lea rdx, [rbp + 0x2350]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140171748], 0x2010
jmp 0x14003d70d
lea r8, [rbp + 0x2350]
mov rdx, rax
call fcn.140045f70
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016dd60]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d9f8]
call fcn.140003a00
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003d853
cmp byte [0x1401751ea], 0
jne 0x14003d853
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d7b9
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d7b9
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x189
mov byte [rbp + 0x2318], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401751ea], 1
mov dword [rbp + 0x2350], 1
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016ce58]
call fcn.140003b60
jmp 0x14003da40
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016ded0]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d7e0]
call fcn.140003a00
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
jne 0x14003daa8
cmp byte [0x1401751ea], 0
je 0x14003daa8
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d8ff
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d8ff
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x189
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, r15d
movzx esi, byte [rbp + 0x2318]
nop word [rax + rax]
movzx edx, sil
movzx ecx, bl
shr dl, cl
and dl, 1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___bool____ptr64]
inc ebx
cmp ebx, 8
jl 0x14003d940
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003d9ab
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003d9ab
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x189
mov byte [rbp + 0x2310], 0
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401751ea], 0
mov dword [rbp + 0x2350], 4
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d628]
call fcn.140003ab0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x2350]
call fcn.140038710
lea rcx, [rsp + 0x30]
call fcn.140007360
mov rax, qword [0x140171748]
cmp rax, qword [0x140171750]
je 0x14003da99
mov r8d, 0x2010
lea rdx, [rbp + 0x2350]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140171748], 0x2010
jmp 0x14003daa8
lea r8, [rbp + 0x2350]
mov rdx, rax
call fcn.140045f70
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016da70]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016cdd0]
call fcn.140003a00
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
jne 0x14003dc4e
cmp byte [0x1401757fb], 1
jne 0x14003dc4e
mov byte [0x1401757fb], 0
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003db5b
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003db5b
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x2e
mov byte [rbp + 0x2310], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x2350], 4
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e3c8]
call fcn.140003ab0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x2350]
call fcn.140038710
lea rcx, [rsp + 0x30]
call fcn.140007360
mov rax, qword [0x140171748]
cmp rax, qword [0x140171750]
je 0x14003dc3f
mov r8d, 0x2010
lea rdx, [rbp + 0x2350]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140171748], 0x2010
jmp 0x14003dc4e
lea r8, [rbp + 0x2350]
mov rdx, rax
call fcn.140045f70
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d380]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d580]
call fcn.140003a00
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
xorps xmm9, xmm9
cmp byte [rax + 4], 0
je 0x14003e404
mov ebx, edi
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov esi, edi
mov eax, dword [r14 + rbx]
cmp dword [0x140174b48], eax
jle 0x14003dcf8
lea rcx, [0x140174b48]
call fcn.1400c4858
mov esi, ebx
cmp dword [0x140174b48], 0xffffffff
jne 0x14003dcf8
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov esi, edi
mov rdx, qword [0x140178278]
add rdx, 0x3c0
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2330]
mov qword [0x1401782b0], rax
cmp qword [0x140178288], 0
jne 0x14003de2b
mov eax, dword [r14 + rbx]
cmp dword [0x140174b48], eax
jle 0x14003dd82
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003dd82
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rbx, rsi
mov rsi, rbx
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2320]
mov rdx, qword [0x140174f80]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2320]
mov qword [0x140178288], rax
mov eax, dword [rbx + r14]
cmp dword [0x140174b48], eax
jle 0x14003ddf7
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ddf7
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rdx, qword [0x140178288]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2330]
mov qword [0x140178278], rax
call fcn.140045d70
mov rcx, qword [rax + 0xd0]
movss xmm0, dword [rcx]
movss dword [0x140170a3c], xmm0
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003de6b
call fcn.140045d70
mov rcx, qword [rax + 0xc8]
movss xmm0, dword [rcx]
movss dword [0x140170a3c], xmm0
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov rbx, rsi
mov eax, dword [r14 + rsi]
cmp dword [0x140174b48], eax
jle 0x14003deba
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003deba
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov ebx, edi
mov rdx, qword [0x140174f70]
add rdx, 0x2e
mov byte [rbp + 0x2310], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401757fb], 1
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14003e18a
mov eax, dword [r14 + rsi]
cmp dword [0x140174b48], eax
jle 0x14003df46
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003df46
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov ebx, edi
mov rdx, qword [0x140174f70]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, rbx
mov eax, edi
mov ecx, dword [rax + r14]
cmp dword [0x140174b48], ecx
jle 0x14003dfb8
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003dfb8
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov esi, edi
mov rdx, qword [0x1401782b0]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x2338]
movss xmm7, dword [rbp + 0x2334]
movss xmm8, dword [rbp + 0x2330]
ucomiss xmm8, xmm9
jp 0x14003e0d2
jne 0x14003e0d2
ucomiss xmm7, xmm9
jp 0x14003e0d2
jne 0x14003e0d2
mov rbx, rsi
ucomiss xmm6, xmm9
jp 0x14003e0d2
jne 0x14003e0d2
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003e07c
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e07c
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x1401782b0]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp - 0x80]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm1, qword [rbp - 0x80]
mov eax, dword [rbp - 0x78]
mov dword [rbp + 0x2338], eax
mov ebx, edi
movd xmm6, eax
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movaps xmm7, xmm0
movsd qword [rbp + 0x2330], xmm1
movss xmm8, dword [rbp + 0x2330]
movss xmm0, dword [0x140170a3c]
mulss xmm8, xmm0
addss xmm8, dword [rbp + 0x2320]
mulss xmm7, xmm0
addss xmm7, dword [rbp + 0x2324]
mulss xmm6, xmm0
addss xmm6, dword [rbp + 0x2328]
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov eax, edi
mov ecx, dword [rax + r14]
cmp dword [0x140174b48], ecx
jle 0x14003e14c
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e14c
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x90
movaps xmm0, xmm8
unpcklps xmm0, xmm7
movsd qword [rsp + 0x50], xmm0
movss dword [rsp + 0x58], xmm6
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14003e404
mov eax, dword [r14 + rbx]
cmp dword [0x140174b48], eax
jle 0x14003e1dc
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e1dc
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + r14]
cmp dword [0x140174b48], eax
jle 0x14003e247
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e247
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x1401782b0]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp + 0x2330]
ucomiss xmm1, xmm9
jp 0x14003e33f
jne 0x14003e33f
movss xmm0, dword [rbp + 0x2334]
ucomiss xmm0, xmm9
jp 0x14003e33f
jne 0x14003e33f
movss xmm0, dword [rbp + 0x2338]
ucomiss xmm0, xmm9
jp 0x14003e33f
jne 0x14003e33f
mov eax, edi
mov ecx, dword [rax + r14]
cmp dword [0x140174b48], ecx
jle 0x14003e2fc
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e2fc
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x1401782b0]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x50]
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x2338], eax
movaps xmm1, xmm0
movsd qword [rbp + 0x2330], xmm0
movss xmm2, dword [0x140170a3c]
mulss xmm1, xmm2
movss xmm6, dword [rbp + 0x2320]
subss xmm6, xmm1
movss xmm0, dword [rbp + 0x2334]
mulss xmm0, xmm2
movss xmm7, dword [rbp + 0x2324]
subss xmm7, xmm0
movss xmm1, dword [rbp + 0x2338]
mulss xmm1, xmm2
movss xmm8, dword [rbp + 0x2328]
subss xmm8, xmm1
mov eax, edi
mov ecx, dword [rax + r14]
cmp dword [0x140174b48], ecx
jle 0x14003e3c9
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e3c9
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x90
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rbp - 0x80], xmm0
movss dword [rbp - 0x78], xmm8
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp - 0x80]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d0b8]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016ddf8]
call fcn.140003740
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
jne 0x14003e68f
cmp byte [0x1401751e9], 1
jne 0x14003e68f
mov byte [0x1401751e9], 0
mov ebx, edi
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003e4b7
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e4b7
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x2e
mov byte [rbp + 0x2310], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003e525
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e525
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov edx, dword [0x1401749f8]
add rdx, qword [0x140174f70]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2330]
mov qword [0x140178268], rax
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003e59c
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e59c
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
add rdx, 0x2e
mov byte [rbp + 0x2310], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [rbp + 0x2350], 1
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016dfb8]
call fcn.140003ab0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x2350]
call fcn.140038710
lea rcx, [rsp + 0x30]
call fcn.140007360
mov rax, qword [0x140171748]
cmp rax, qword [0x140171750]
je 0x14003e680
mov r8d, 0x2010
lea rdx, [rbp + 0x2350]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140171748], 0x2010
jmp 0x14003e68f
lea r8, [rbp + 0x2350]
mov rdx, rax
call fcn.140045f70
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016cef8]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016ddc0]
call fcn.140003740
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003f68b
mov ebx, edi
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov esi, edi
mov eax, dword [r14 + rbx]
cmp dword [0x140174b48], eax
jle 0x14003e735
lea rcx, [0x140174b48]
call fcn.1400c4858
mov esi, ebx
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e735
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov esi, edi
mov rdx, qword [0x140178278]
add rdx, 0x3c0
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2330]
mov qword [0x1401782b0], rax
cmp qword [0x140178288], 0
jne 0x14003e868
mov eax, dword [r14 + rbx]
cmp dword [0x140174b48], eax
jle 0x14003e7bf
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e7bf
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rbx, rsi
mov rsi, rbx
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2320]
mov rdx, qword [0x140174f80]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2320]
mov qword [0x140178288], rax
mov eax, dword [r14 + rbx]
cmp dword [0x140174b48], eax
jle 0x14003e834
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e834
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rdx, qword [0x140178288]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2330]
mov qword [0x140178278], rax
call fcn.140045d70
mov rcx, qword [rax + 0xd0]
movss xmm0, dword [rcx]
movss dword [0x140170a3c], xmm0
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003e8a8
call fcn.140045d70
mov rcx, qword [rax + 0xc8]
movss xmm0, dword [rcx]
movss dword [0x140170a3c], xmm0
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14003ef94
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003e905
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e905
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x144b
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx r14d, byte [rbp + 0x2310]
mov eax, dword [rsi + rbx]
cmp r14b, 0x60
jne 0x14003eabf
cmp dword [0x140174b48], eax
jle 0x14003e981
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e981
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov edx, dword [0x1401749f8]
add rdx, qword [0x140174f70]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2330]
mov qword [0x140178268], rax
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003e9fa
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003e9fa
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp + 0x2330], xmm0
mov esi, dword [rsp + 0x58]
mov byte [0x1401751e9], 1
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003ea89
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ea89
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
add rdx, 0x2e
mov byte [rbp + 0x2310], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14003ebad
cmp dword [0x140174b48], eax
jle 0x14003eaf9
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003eaf9
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x2e
mov byte [rbp + 0x2318], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401751e9], 1
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003eb70
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003eb70
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp + 0x2330], xmm0
mov esi, dword [rsp + 0x58]
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003ebf8
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ebf8
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x1401782b0]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm6, dword [rbp + 0x2320]
ucomiss xmm6, xmm9
jp 0x14003ecef
jne 0x14003ecef
movss xmm0, dword [rbp + 0x2324]
ucomiss xmm0, xmm9
jp 0x14003ecef
jne 0x14003ecef
movss xmm0, dword [rbp + 0x2328]
ucomiss xmm0, xmm9
jp 0x14003ecef
jne 0x14003ecef
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003ecac
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ecac
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x1401782b0]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x50]
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x2328], eax
movaps xmm6, xmm0
movsd qword [rbp + 0x2320], xmm0
movss xmm0, dword [0x140170a3c]
mulss xmm6, xmm0
addss xmm6, dword [rbp + 0x2330]
movss xmm7, dword [rbp + 0x2324]
mulss xmm7, xmm0
addss xmm7, dword [rbp + 0x2334]
movss xmm8, dword [rbp + 0x2328]
mulss xmm8, xmm0
movd xmm0, esi
addss xmm8, xmm0
mov ecx, edi
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rbx + rcx]
cmp r14b, 0x60
jne 0x14003ee6f
cmp dword [0x140174b48], eax
jle 0x14003ed83
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ed83
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
add rdx, 0x30
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003edec
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003edec
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
unpcklps xmm6, xmm7
movsd qword [rsp + 0x50], xmm6
movss dword [rsp + 0x58], xmm8
mov rdx, qword [rbp + 0x2330]
add rdx, 0x50
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003ee63
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ee63
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
jmp 0x14003ef66
cmp dword [0x140174b48], eax
jle 0x14003eea9
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003eea9
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
lea rcx, [rbp + 0x2350]
call fcn.1400bd110
mov rdx, qword [rax + 0x30]
add rdx, 0x50
unpcklps xmm6, xmm7
movsd qword [rsp + 0x50], xmm6
movss dword [rsp + 0x58], xmm8
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x46c0], r15
xor edx, edx
mov r8d, 0x15e0
lea rcx, [rbp + 0x2350]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xd90
lea rcx, [rbp + 0x3930]
call sub.VCRUNTIME140.dll_memset
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003ef5f
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ef5f
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
mov qword [rsp + 0x20], r15
movsd qword [rbp - 0x80], xmm6
movss dword [rbp - 0x78], xmm8
mov r9d, 0xc
lea r8, [rbp - 0x80]
add rdx, 0x90
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14003f68b
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003eff3
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003eff3
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x144b
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx r14d, byte [rbp + 0x2310]
mov eax, edi
mov eax, dword [rax + rbx]
cmp r14b, 0x60
jne 0x14003f1af
cmp dword [0x140174b48], eax
jle 0x14003f071
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f071
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov edx, dword [0x1401749f8]
add rdx, qword [0x140174f70]
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x2330]
mov qword [0x140178268], rax
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003f0ea
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f0ea
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp + 0x2330], xmm0
mov esi, dword [rsp + 0x58]
mov byte [0x1401751e9], 1
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003f179
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f179
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
add rdx, 0x2e
mov byte [rbp + 0x2310], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14003f29d
cmp dword [0x140174b48], eax
jle 0x14003f1e9
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f1e9
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x2e
mov byte [rbp + 0x2318], 3
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401751e9], 1
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003f260
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f260
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x90
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x50]
movsd qword [rbp + 0x2330], xmm0
mov esi, dword [rsp + 0x58]
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003f2e8
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f2e8
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x1401782b0]
add rdx, 0x3d0
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp + 0x2320]
ucomiss xmm1, xmm9
jp 0x14003f3df
jne 0x14003f3df
movss xmm0, dword [rbp + 0x2324]
ucomiss xmm0, xmm9
jp 0x14003f3df
jne 0x14003f3df
movss xmm0, dword [rbp + 0x2328]
ucomiss xmm0, xmm9
jp 0x14003f3df
jne 0x14003f3df
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003f39c
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f39c
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x1401782b0]
add rdx, 0x40
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm0, qword [rsp + 0x50]
mov eax, dword [rsp + 0x58]
mov dword [rbp + 0x2328], eax
movaps xmm1, xmm0
movsd qword [rbp + 0x2320], xmm0
movss xmm2, dword [0x140170a3c]
mulss xmm1, xmm2
movss xmm6, dword [rbp + 0x2330]
subss xmm6, xmm1
movss xmm0, dword [rbp + 0x2324]
mulss xmm0, xmm2
movss xmm7, dword [rbp + 0x2334]
subss xmm7, xmm0
movss xmm1, dword [rbp + 0x2328]
mulss xmm1, xmm2
movd xmm8, esi
subss xmm8, xmm1
mov ecx, edi
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov eax, dword [rbx + rcx]
cmp r14b, 0x60
jne 0x14003f566
cmp dword [0x140174b48], eax
jle 0x14003f47a
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f47a
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
add rdx, 0x30
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x2330]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003f4e3
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f4e3
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
unpcklps xmm6, xmm7
movsd qword [rsp + 0x50], xmm6
movss dword [rsp + 0x58], xmm8
mov rdx, qword [rbp + 0x2330]
add rdx, 0x50
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003f55a
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f55a
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140178268]
jmp 0x14003f65d
cmp dword [0x140174b48], eax
jle 0x14003f5a0
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f5a0
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
lea rcx, [rbp + 0x2350]
call fcn.1400bd110
mov rdx, qword [rax + 0x30]
add rdx, 0x50
unpcklps xmm6, xmm7
movsd qword [rsp + 0x50], xmm6
movss dword [rsp + 0x58], xmm8
mov qword [rsp + 0x20], r15
mov r9d, 0xc
lea r8, [rsp + 0x50]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rbp + 0x46c0], r15
xor edx, edx
mov r8d, 0x15e0
lea rcx, [rbp + 0x2350]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xd90
lea rcx, [rbp + 0x3930]
call sub.VCRUNTIME140.dll_memset
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x140174b48], ecx
jle 0x14003f656
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f656
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
mov qword [rsp + 0x20], r15
movsd qword [rbp - 0x80], xmm6
movss dword [rbp - 0x78], xmm8
mov r9d, 0xc
lea r8, [rbp - 0x80]
add rdx, 0x90
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016e1d0]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d1c8]
call fcn.140003ab0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm6, dword [0x140153400]
cmp byte [rax + 4], 0
je 0x14003f906
mov ebx, edi
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003f732
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f732
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x280
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm1, dword [rbp + 0x2340]
comiss xmm1, xmm9
jbe 0x14003f906
movss xmm0, dword [0x1401533f0]
comiss xmm0, xmm1
jb 0x14003f906
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003f7bf
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f7bf
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x280
mov dword [rbp + 0x2320], 0x43480000
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016e150]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016df38]
call fcn.140003ab0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
mov byte [rax + 4], 0
mov dword [rbp + 0x2350], 1
mov dword [rbp + 0x4354], 0x7d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [rbp + 0x4358], rax
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x2354]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x3354]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x30]
lea rcx, [0x14016de18]
call fcn.14003c5f0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
lea rcx, [rbp + 0x2350]
call fcn.140038710
lea rcx, [rsp + 0x30]
call fcn.140007360
mov rax, qword [0x140171748]
cmp rax, qword [0x140171750]
je 0x14003f8f7
mov r8d, 0x2010
lea rdx, [rbp + 0x2350]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x140171748], 0x2010
jmp 0x14003f906
lea r8, [rbp + 0x2350]
mov rdx, rax
call fcn.140045f70
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016df08]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d8b0]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003fa60
cmp byte [0x1401786ac], 0
jne 0x14003fa60
mov ebx, edi
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003f9b2
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003f9b2
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x2c
mov byte [rbp + 0x2310], 1
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003fa20
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003fa20
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0xac
mov byte [rbp + 0x2318], 0
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401786ac], 1
jmp 0x14003fbb5
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d7e8]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e020]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
jne 0x14003fbb5
cmp byte [0x1401786ac], 0
je 0x14003fbb5
mov ebx, edi
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003fb0c
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003fb0c
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x2c
mov byte [rbp + 0x2310], 0x37
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003fb7a
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003fb7a
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0xac
mov byte [rbp + 0x2318], 0xff
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2318]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401786ac], 0
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016dc20]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d528]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003fc8f
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d0e8]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d0f8]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movzx ecx, byte [rax + 4]
neg cl
sbb al, al
and al, 0x40
mov byte [rbp + 0x2310], al
mov edx, dword [0x140174cfc]
add rdx, qword [0x140178248]
mov qword [rsp + 0x20], r15
mov r9d, 1
lea r8, [rbp + 0x2310]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016e088]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e288]
call fcn.140003b60
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003fdd1
mov rdx, qword [0x140174f70]
lea rcx, [rbp - 0x70]
call fcn.1400bd110
mov r8d, 0x15e0
mov rdx, rax
lea rcx, [rbp + 0x2350]
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x2300], r15
xor edx, edx
mov r8d, 0x15e0
lea rcx, [rbp - 0x70]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xd90
lea rcx, [rbp + 0x1570]
call sub.VCRUNTIME140.dll_memset
movss xmm0, dword [rbp + 0x25d0]
comiss xmm0, xmm9
jbe 0x14003fdd1
comiss xmm6, xmm0
jbe 0x14003fdd1
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003fd9a
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003fd9a
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x280
mov dword [rbp + 0x2320], 0x43480000
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016dc40]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016dd40]
call fcn.140003b60
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x14003ff20
mov ebx, edi
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003fe70
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003fe70
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov edx, dword [0x140174cf8]
add rdx, qword [0x140174f70]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [0x1401533e0]
comiss xmm0, dword [rbp + 0x2320]
jbe 0x14003ff20
mov eax, dword [rbx + rsi]
cmp dword [0x140174b48], eax
jle 0x14003feea
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003feea
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov edx, dword [0x140174cf8]
add rdx, qword [0x140174f70]
mov dword [rbp + 0x2340], 0x42c80000
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2340]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016dfa8]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e0d8]
call fcn.1400038a0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
movss xmm6, dword [0x1401532ec]
ucomiss xmm0, xmm6
jp 0x14003ff8b
jne 0x14003ff8b
cmp byte [0x1401787b2], 0
je 0x1400400bd
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14003ffd6
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14003ffd6
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d290]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016daf8]
call fcn.1400038a0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
movss dword [rbp + 0x2320], xmm0
mov edx, dword [0x140174d2c]
add rdx, qword [0x140178248]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401787b2], 1
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d638]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d7c0]
call fcn.1400038a0
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x1400400bd
jne 0x1400400bd
mov byte [0x1401787b2], 0
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d0d8]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e468]
call fcn.140007a80
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x140040120
jne 0x140040120
cmp byte [0x1401787b1], 0
je 0x140040252
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x14004016b
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14004016b
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d008]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016e1b0]
call fcn.140007a80
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
movss dword [rbp + 0x2320], xmm0
mov edx, dword [0x140174d18]
add rdx, qword [0x140178248]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401787b1], 1
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d918]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016d168]
call fcn.140007a80
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x140040252
jne 0x140040252
mov byte [0x1401787b1], 0
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d230]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016dad8]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x1400402b5
jne 0x1400402b5
cmp byte [0x1401786ae], 0
je 0x1400403e7
mov edx, edi
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140174b48], eax
jle 0x140040300
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140040300
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016cde8]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016da58]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
movss dword [rbp + 0x2320], xmm0
mov edx, dword [0x140174d04]
add rdx, qword [0x140178248]
mov qword [rsp + 0x20], r15
mov r9d, 4
lea r8, [rbp + 0x2320]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [0x1401786ae], 1
call fcn.1400070a0
mov rbx, rax
lea rax, [rsp + 0x60]
mov qword [rbp + 0x2330], rax
lea rdx, [rsp + 0x60]
lea rcx, [0x14016d688]
call fcn.140003ab0
nop
lea rdx, [rsp + 0x30]
lea rcx, [0x14016cdd8]
call fcn.140003950
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.1400167c0
movss xmm0, dword [rax + 0x34]
ucomiss xmm0, xmm6
jp 0x1400403e7
jne 0x1400403e7
mov byte [0x1401786ae], 0
mov rcx, qword [rbp + 0x46d0]
xor rcx, rsp
call fcn.1400c4790
lea r11, [rsp + 0x4820]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop rbp
ret