Function at 0x14000bae0
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x68]
sub rsp, 0x160
mov rax, qword [0x140073040]
xor rax, rsp
mov qword [rbp - 0x30], rax
mov rax, qword gs:[0x58]
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov rsi, rcx
mov qword [r11 + 0x20], rdi
mov rdi, qword [rax]
mov eax, dword [0x1400a29c0]
mov qword [r11 - 0x10], r12
mov qword [r11 - 0x18], r13
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
movaps xmmword [r11 - 0x48], xmm7
mov ebx, 4
movaps xmmword [r11 - 0x58], xmm8
movaps xmmword [r11 - 0x88], xmm12
cmp eax, dword [rbx + rdi]
jle 0x14000bb73
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
mov eax, dword [0x1400a29c0]
cmp eax, 0xffffffff
jne 0x14000bb73
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov eax, dword [0x1400a29c0]
mov r12, qword [0x1400a28e8]
cmp eax, dword [rbx + rdi]
jle 0x14000bba0
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000bba0
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rbp - 0x70]
mov rcx, qword [0x1400a29e0]
xor r14d, r14d
add rdx, 0x10c8
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [0x1400a29c0]
mov r15, qword [rbp - 0x70]
mov qword [rsp + 0x60], r15
cmp eax, dword [rbx + rdi]
jle 0x14000bc2e
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
mov eax, dword [0x1400a29c0]
cmp eax, 0xffffffff
jne 0x14000bc08
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov eax, dword [0x1400a29c0]
cmp eax, dword [rbx + rdi]
jle 0x14000bc2e
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000bc2e
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2948]
lea r8, [rsp + 0x40]
add rdx, qword [0x1400a28e8]
mov r9d, 8
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000bc85
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000bc85
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2900]
lea r8, [rbp - 0x60]
mov rcx, qword [0x1400a29e0]
add rdx, r12
mov r9d, 8
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x68]
mov rcx, qword [0x1400a29e0]
add rdx, 0x20
mov r9d, 8
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r13, qword [rbp - 0x68]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
mov r9d, 8
mov qword [rsp + 0x20], r14
lea rdx, [r13 + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x40]
lea r8, [rbp - 0x58]
mov rcx, qword [0x1400a29e0]
add rdx, 0x40
mov r9d, 8
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
lea rdx, [0x1400629f1]
xorps xmm1, xmm1
lea rcx, [rbp - 0x50]
xor r8d, r8d
movups xmmword [rbp - 0x50], xmm0
movdqu xmmword [rbp - 0x40], xmm1
call fcn.1400044f0
cmp byte [rsi + 0x1c], r14b
je 0x14000bdf7
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000bd72
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000bd72
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2920]
lea r8, [rsp + 0x40]
add rdx, qword [0x1400a29f0]
mov r9d, 8
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x40]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1400a29e0]
add rdx, 0x10
mov r9d, 8
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm0, dword [rsi + 0x20]
lea r8, [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov r9d, 4
mov rcx, qword [0x1400a29e0]
add rdx, 0x30
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x20], r14
movss dword [rsp + 0x68], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [rbx + rdi]
cmp byte [rsi + 1], r14b
je 0x14000be99
cmp dword [0x1400a29c0], eax
jle 0x14000be2d
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000be2d
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, 0x189
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 1
je 0x14000bf50
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000be8f
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000be8f
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov byte [rsp + 0x30], 1
jmp 0x14000bf25
cmp dword [0x1400a29c0], eax
jle 0x14000bec2
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000bec2
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, 0x189
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], r14b
je 0x14000bf50
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000bf20
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000bf20
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov byte [rsp + 0x30], r14b
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, 0x189
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm12, xmm12
movaps xmmword [rsp + 0x130], xmm6
cmp byte [rsi + 4], r14b
je 0x14000c13e
mov eax, dword [0x1400a29c0]
cmp eax, dword [rbx + rdi]
jle 0x14000bf9a
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
mov eax, dword [0x1400a29c0]
cmp eax, 0xffffffff
jne 0x14000bf9a
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov eax, dword [0x1400a29c0]
mov r14, qword [0x1400a28e8]
cmp eax, dword [rbx + rdi]
jle 0x14000bfc7
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000bfc7
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1400a29e0]
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000c01f
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c01f
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28f0]
lea r8, [rsp + 0x68]
mov rcx, qword [0x1400a29e0]
mov r9d, 4
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000c073
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c073
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28f8]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
mov r9d, 4
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm7, dword [rsp + 0x68]
ucomiss xmm7, xmm12
jp 0x14000c0ad
je 0x14000c137
movss xmm6, dword [rsp + 0x40]
ucomiss xmm6, dword [0x140069170]
jp 0x14000c0be
je 0x14000c137
mov rdx, qword [rsp + 0x50]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, 0x50
mov r9d, 0xc
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x44], xmm6
mov dword [rsp + 0x48], 0x41f00000
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1400a29e0]
lea rdx, [r14 + 0x90]
xor r14d, r14d
movss dword [rsp + 0x50], xmm7
lea r8, [rsp + 0x50]
movss dword [rsp + 0x54], xmm6
mov dword [rsp + 0x58], 0x41f00000
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 0xc]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14000c13a
xor r14d, r14d
mov byte [rsi + 4], 0
cmp byte [rsi], 0
je 0x14000c475
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
movaps xmmword [rsp + 0x100], xmm9
movaps xmmword [rsp + 0xf0], xmm10
jle 0x14000c185
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c185
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2920]
lea r8, [rsp + 0x50]
add rdx, qword [0x1400a29f0]
mov r9d, 8
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000c1dc
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c1dc
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [rsp + 0x50]
lea r8, [rbp - 0x80]
add rdx, qword [0x1400a2980]
mov r9d, 0xc
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000c230
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c230
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov r15, qword [0x1400a28e8]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1400a29e0]
mov r9d, 8
mov qword [rsp + 0x20], r14
lea rdx, [r15 + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
mov r14, qword [rsp + 0x50]
jle 0x14000c289
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c289
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x70]
mov rcx, qword [0x1400a29e0]
add rdx, 0x90
mov r9d, 0xc
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000c2e4
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c2e4
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x68]
mov rcx, qword [0x1400a29e0]
add rdx, 0x30
mov r9d, 8
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsi + 0x44], 0
movss xmm6, dword [rsp + 0x70]
movss xmm9, dword [rsp + 0x74]
movss xmm10, dword [rsp + 0x78]
je 0x14000c36b
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000c36b
mov rcx, qword [0x1400a29e0]
lea rdx, [r14 + 0x2c]
mov r9d, 4
mov dword [rsp + 0x40], 0x42c80000
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [rsi + 0x44], 0
mov ecx, 0x46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000c45e
cmp byte [rsi + 0x44], 0
jne 0x14000c3b2
mov rcx, qword [0x1400a29e0]
lea rdx, [r14 + 0x2c]
mov r9d, 4
mov dword [rsp + 0x40], 0
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movd xmm8, dword [rsi + 0x40]
lea r8, [rsp + 0x50]
mov rdx, qword [rsp + 0x68]
mov r9d, 0xc
cvtdq2ps xmm8, xmm8
mov byte [rsi + 0x44], 1
add rdx, 0x50
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], 0
movaps xmm7, xmm8
mulss xmm7, dword [rbp - 0x80]
addss xmm7, xmm6
movaps xmm6, xmm8
mulss xmm6, dword [rbp - 0x7c]
mulss xmm8, dword [rbp - 0x78]
addss xmm6, xmm9
movss dword [rsp + 0x50], xmm7
addss xmm8, xmm10
movss dword [rsp + 0x54], xmm6
movss dword [rsp + 0x58], xmm8
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1400a29e0]
lea rdx, [r15 + 0x90]
mov r9d, 0xc
movss dword [rsp + 0x50], xmm7
lea r8, [rsp + 0x50]
movss dword [rsp + 0x54], xmm6
movss dword [rsp + 0x58], xmm8
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r15, qword [rsp + 0x60]
movaps xmm9, xmmword [rsp + 0x100]
movaps xmm10, xmmword [rsp + 0xf0]
cmp byte [rsi + 0x45], 0
movss xmm8, dword [0x140069160]
je 0x14000c52a
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000c4b4
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c4b4
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1400a29e0]
add rdx, 0x20
mov r9d, 8
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rsp + 0x50]
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], 0
mov r9d, 4
mov dword [rsp + 0x40], 0
lea rdx, [r14 + 0x2c]
test ax, ax
jne 0x14000c524
mov dword [rsp + 0x40], 0x447a0000
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0x2c], 0
je 0x14000c809
mov eax, dword [0x1400a29c0]
cmp eax, dword [rbx + rdi]
jle 0x14000c568
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
mov eax, dword [0x1400a29c0]
cmp eax, 0xffffffff
jne 0x14000c568
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov eax, dword [0x1400a29c0]
mov r14, qword [0x1400a28e8]
cmp eax, dword [rbx + rdi]
jle 0x14000c595
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c595
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2900]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1400a29e0]
add rdx, r14
xor r14d, r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbx + rdi]
cmp dword [0x1400a29c0], eax
jle 0x14000c5e9
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c5e9
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [rsp + 0x50]
lea r8, [rsp + 0x60]
add rdx, qword [0x1400a2910]
mov r9d, 8
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rsp + 0x60]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
mov r9d, 4
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x4c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm1, dword [rsi + 0x30]
movss xmm0, dword [rsp + 0x40]
cvtdq2ps xmm1, xmm1
ucomiss xmm0, xmm1
jp 0x14000c64d
je 0x14000c674
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
movss dword [rsp + 0x40], xmm1
lea rdx, [rbx + 0x4c]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x6c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rsi + 0x34]
movss xmm0, dword [rsp + 0x40]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
ucomiss xmm0, xmm1
jp 0x14000c6e4
jne 0x14000c6e4
mov rcx, qword [0x1400a29e0]
lea rdx, [rbx + 0x7c]
mov r9d, 4
mov qword [rsp + 0x20], r14
lea r8, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rsi + 0x34]
movss xmm0, dword [rsp + 0x40]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
ucomiss xmm0, xmm1
jp 0x14000c6e4
je 0x14000c741
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
movd xmm0, eax
lea rdx, [rbx + 0x6c]
cvtdq2ps xmm0, xmm0
mov r9d, 4
mov qword [rsp + 0x20], r14
movss dword [rsp + 0x40], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movd xmm0, dword [rsi + 0x34]
lea rdx, [rbx + 0x7c]
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
cvtdq2ps xmm0, xmm0
mov r9d, 4
mov qword [rsp + 0x20], r14
movss dword [rsp + 0x40], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm1, dword [rsi + 0x38]
movss xmm0, dword [rsp + 0x40]
cvtdq2ps xmm1, xmm1
ucomiss xmm0, xmm1
jp 0x14000c77a
je 0x14000c7a4
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
movss dword [rsp + 0x40], xmm1
lea rdx, [rbx + 0x88]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x90]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm1, dword [rsi + 0x3c]
movss xmm0, dword [rsp + 0x40]
cvtdq2ps xmm1, xmm1
ucomiss xmm0, xmm1
jp 0x14000c7dd
je 0x14000c80c
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
movss dword [rsp + 0x40], xmm1
lea rdx, [rbx + 0x90]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14000c80c
xor r14d, r14d
cmp byte [rsi + 2], 0
mov edi, 4
je 0x14000c94e
mov rax, qword gs:[0x58]
mov ecx, dword [0x1400a29c0]
mov rbx, qword [rax]
cmp ecx, dword [rdi + rbx]
jle 0x14000c881
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
mov ecx, dword [0x1400a29c0]
cmp ecx, 0xffffffff
jne 0x14000c85b
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov ecx, dword [0x1400a29c0]
cmp ecx, dword [rdi + rbx]
jle 0x14000c881
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c881
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2940]
lea r8, [rsp + 0x40]
add rdx, qword [0x1400a28e8]
mov r9d, 4
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, dword [0x140069138]
jp 0x14000c8c1
je 0x14000c94e
mov ecx, dword [0x1400a29c0]
cmp ecx, dword [rdi + rbx]
jle 0x14000c91b
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
mov ecx, dword [0x1400a29c0]
cmp ecx, 0xffffffff
jne 0x14000c8f5
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov ecx, dword [0x1400a29c0]
cmp ecx, dword [rdi + rbx]
jle 0x14000c91b
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c91b
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2940]
lea r8, [rsp + 0x40]
add rdx, qword [0x1400a28e8]
mov r9d, 4
mov rcx, qword [0x1400a29e0]
mov dword [rsp + 0x40], 0x42c80000
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 3], 0
mov rax, qword gs:[0x58]
mov ecx, edi
mov rbx, qword [rax]
mov eax, dword [rbx + rcx]
je 0x14000c9fd
cmp dword [0x1400a29c0], eax
jle 0x14000c992
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c992
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, 0x2c
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 1
je 0x14000cab0
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000c9f3
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000c9f3
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov byte [rsp + 0x30], 1
jmp 0x14000ca88
cmp dword [0x1400a29c0], eax
jle 0x14000ca26
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000ca26
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, 0x2c
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 0x37
je 0x14000cab0
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000ca83
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000ca83
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov byte [rsp + 0x30], 0x37
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, 0x2c
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 5], 0
movss xmm7, dword [0x140069038]
mov eax, edi
mov ecx, dword [rax + rbx]
je 0x14000cc98
cmp dword [0x1400a29c0], ecx
jle 0x14000caf0
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000caf0
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1400a29e0]
add rdx, 0x10c8
mov r9d, 8
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rsp + 0x50]
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cb51
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cb51
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2970]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, rdi
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm6, dword [rsi + 0x10]
movss xmm0, dword [rsp + 0x40]
cvtdq2ps xmm6, xmm6
ucomiss xmm0, xmm6
jp 0x14000cb8d
je 0x14000cbeb
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cbbe
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cbbe
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2970]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, rdi
mov r9d, 4
movss dword [rsp + 0x40], xmm6
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cc1c
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cc1c
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2970]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, rdi
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm6, dword [rsi + 0x14]
movss xmm0, dword [rsp + 0x40]
cvtdq2ps xmm6, xmm6
ucomiss xmm0, xmm6
jp 0x14000cc5c
je 0x14000ce7b
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cc8d
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cc8d
lea rcx, [0x1400a29c0]
call fcn.14005c454
movss dword [rsp + 0x40], xmm6
jmp 0x14000ce54
cmp dword [0x1400a29c0], ecx
jle 0x14000ccc1
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000ccc1
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a28e8]
lea r8, [rsp + 0x50]
mov rcx, qword [0x1400a29e0]
add rdx, 0x10c8
mov r9d, 8
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rsp + 0x50]
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cd22
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cd22
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2970]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, rdi
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm7
jp 0x14000cd56
je 0x14000cdb6
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cd87
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cd87
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2970]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, rdi
mov r9d, 4
mov dword [rsp + 0x40], 0x3f800000
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cde7
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cde7
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2970]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, rdi
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm7
jp 0x14000ce1b
je 0x14000ce7b
mov eax, 4
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000ce4c
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000ce4c
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0x3f800000
mov rdx, qword [0x1400a2970]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, rdi
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 6], 0
movaps xmm6, xmmword [rsp + 0x130]
je 0x14000ceea
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
mov qword [rsp + 0x20], r14
lea rdx, [r15 + 0xcf4]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, dword [0x140069138]
jp 0x14000cebe
je 0x14000ceea
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
mov dword [rsp + 0x40], 0x42c80000
lea rdx, [r15 + 0xcf4]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 9], 0
mov edi, 4
mov ecx, dword [rdi + rbx]
je 0x14000cf97
cmp dword [0x1400a29c0], ecx
jle 0x14000cf25
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cf25
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2928]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm12
jp 0x14000cf5e
je 0x14000d04f
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000cf8a
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cf8a
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0
jmp 0x14000d028
cmp dword [0x1400a29c0], ecx
jle 0x14000cfc0
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000cfc0
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2928]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm7
jp 0x14000cff4
je 0x14000d04f
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d020
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d020
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0x3f800000
mov rdx, qword [0x1400a2928]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0xb], 0
mov ecx, dword [rdi + rbx]
je 0x14000d0f7
cmp dword [0x1400a29c0], ecx
jle 0x14000d085
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d085
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2930]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm12
jp 0x14000d0be
je 0x14000d1af
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d0ea
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d0ea
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0
jmp 0x14000d188
cmp dword [0x1400a29c0], ecx
jle 0x14000d120
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d120
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2930]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm7
jp 0x14000d154
je 0x14000d1af
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d180
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d180
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0x3f800000
mov rdx, qword [0x1400a2930]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0xc], 0
mov ecx, dword [rdi + rbx]
je 0x14000d257
cmp dword [0x1400a29c0], ecx
jle 0x14000d1e5
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d1e5
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2938]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm8
jp 0x14000d21e
je 0x14000d30f
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d24a
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d24a
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0x447a0000
jmp 0x14000d2e8
cmp dword [0x1400a29c0], ecx
jle 0x14000d280
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d280
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2938]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm7
jp 0x14000d2b4
je 0x14000d30f
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d2e0
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d2e0
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0x3f800000
mov rdx, qword [0x1400a2938]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r13
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 8], 0
je 0x14000d33f
mov rcx, qword [0x1400a29e0]
lea rdx, [r12 + 0x146b]
mov r9d, 1
mov byte [rsp + 0x30], 1
lea r8, [rsp + 0x30]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0x1c], 0
je 0x14000d3fa
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d375
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d375
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2920]
lea r8, [rsp + 0x50]
add rdx, qword [0x1400a29f0]
mov r9d, 8
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x50]
lea r8, [rsp + 0x60]
mov rcx, qword [0x1400a29e0]
add rdx, 0x10
mov r9d, 8
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd xmm0, dword [rsi + 0x20]
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x60]
mov r9d, 4
mov rcx, qword [0x1400a29e0]
add rdx, 0x30
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x20], r14
movss dword [rsp + 0x40], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdi, qword [rbp - 0x60]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdi, 0x189
cmp byte [rsi + 0x25], 0
mov r9d, 1
mov qword [rsp + 0x20], r14
mov rdx, rdi
je 0x14000d439
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 1
je 0x14000d46b
mov byte [rsp + 0x30], 1
jmp 0x14000d44b
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 0
je 0x14000d46b
mov byte [rsp + 0x30], 0
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x30]
mov r9d, 1
mov qword [rsp + 0x20], r14
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0x26], 0
mov edi, 4
je 0x14000d4da
mov ecx, dword [rdi + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d4a2
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d4a2
lea rcx, [0x1400a29c0]
call fcn.14005c454
call fcn.14000b820
add rax, qword [0x1400a29a0]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
mov rdx, rax
mov r9d, 4
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [rsi + 0x26], 0
cmp byte [rsi + 0x27], 0
je 0x14000d546
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d50e
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d50e
lea rcx, [0x1400a29c0]
call fcn.14005c454
call fcn.14000b820
add rax, qword [0x1400a29a0]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
mov rdx, rax
mov r9d, 4
mov dword [rsp + 0x40], 2
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov byte [rsi + 0x27], 0
cmp byte [rsi + 7], 0
je 0x14000d576
mov rdx, qword [rbp - 0x58]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, 0x38
mov r9d, 4
mov dword [rsp + 0x40], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0x2a], 0
je 0x14000d6f0
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d5ae
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d5ae
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2958]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, r12
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 0
jne 0x14000d63c
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d60a
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d60a
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2960]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, r12
mov r9d, 1
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 0xc9
je 0x14000d6f0
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d66a
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d66a
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2958]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, r12
mov r9d, 1
mov byte [rsp + 0x30], 0
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d6c4
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d6c4
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2960]
lea r8, [rsp + 0x30]
mov rcx, qword [0x1400a29e0]
add rdx, r12
mov r9d, 1
mov byte [rsp + 0x30], 0xc9
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0x2b], 0
mov eax, edi
mov ecx, dword [rax + rbx]
je 0x14000d79c
cmp dword [0x1400a29c0], ecx
jle 0x14000d728
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d728
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2988]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r15
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm8
jp 0x14000d761
je 0x14000d856
mov eax, edi
mov edx, dword [rax + rbx]
cmp dword [0x1400a29c0], edx
jle 0x14000d78f
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d78f
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0x447a0000
jmp 0x14000d82f
cmp dword [0x1400a29c0], ecx
jle 0x14000d7c5
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d7c5
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov rdx, qword [0x1400a2988]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r15
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm7
jp 0x14000d7f9
je 0x14000d856
mov eax, edi
mov ecx, dword [rax + rbx]
cmp dword [0x1400a29c0], ecx
jle 0x14000d827
lea rcx, [0x1400a29c0]
call fcn.14005c4c0
cmp dword [0x1400a29c0], 0xffffffff
jne 0x14000d827
lea rcx, [0x1400a29c0]
call fcn.14005c454
mov dword [rsp + 0x40], 0x3f800000
mov rdx, qword [0x1400a2988]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1400a29e0]
add rdx, r15
mov r9d, 4
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0x28], 0
movaps xmm8, xmmword [rsp + 0x110]
movaps xmm7, xmmword [rsp + 0x120]
mov r15, qword [rsp + 0x140]
mov rdi, qword [rsp + 0x188]
je 0x14000d8d3
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x30]
mov r9d, 1
mov qword [rsp + 0x20], r14
lea rdx, [r12 + 0x10b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x30], 0
je 0x14000d8d3
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x30]
mov r9d, 1
mov byte [rsp + 0x30], 0
lea rdx, [r12 + 0x10b8]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [rsi + 0xd], 0
lea r8, [rsp + 0x40]
mov rsi, qword [rsp + 0x180]
lea rdx, [r13 + 0x13c]
mov r12, qword [rsp + 0x158]
mov r9d, 4
mov rcx, qword [0x1400a29e0]
mov qword [rsp + 0x20], r14
je 0x14000d943
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x40]
ucomiss xmm0, xmm12
jp 0x14000d91b
je 0x14000d97d
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov dword [rsp + 0x40], 0
lea rdx, [r13 + 0x13c]
mov qword [rsp + 0x20], r14
mov r9d, 4
jmp 0x14000d94b
mov dword [rsp + 0x40], 0x3dcccccd
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x1400a29e0]
lea r8, [rsp + 0x40]
mov r9d, 4
mov qword [rsp + 0x20], r14
lea rdx, [r13 + 0x140]
mov dword [rsp + 0x40], 0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [rbp - 0x38]
movaps xmm12, xmmword [rsp + 0xe0]
mov r14, qword [rsp + 0x148]
mov r13, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x178]
cmp rdx, 0xf
jbe 0x14000d9dc
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d9d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000d9d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c0d4
mov rcx, qword [rbp - 0x30]
xor rcx, rsp
call fcn.14005c070
add rsp, 0x160
pop rbp
ret