Function at 0x140046720
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x458]
sub rsp, 0x518
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
xor esi, esi
movss xmm12, dword [0x1400b0ab8]
movss xmm15, dword [0x14005c478]
mulss xmm12, xmm15
movss dword [rbp + 0x478], xmm12
movss xmm6, dword [0x1400b0abc]
mulss xmm6, xmm15
movss dword [rsp + 0x50], xmm6
movss xmm7, dword [0x14005c518]
mov dword [rbp + 0x460], 0x41200000
mov dword [rbp + 0x464], 0x41200000
mov r10, qword [0x1400d2ae8]
test r10, r10
jne 0x140046804
mov r8d, 0xfdd
lea rdx, str.C:UsersemeyDesktopximguiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov r10, qword [0x1400d2ae8]
cvttss2si r8d, dword [r10 + 0xe0]
lea r9, [rbp - 0x5b]
test r8d, r8d
jns 0x140046860
neg r8d
nop dword [rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140046820
dec r9
mov byte [r9], 0x2d
jmp 0x14004688a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140046860
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
lea rax, [rbp - 0x5b]
cmp r9, rax
je 0x1400468c6
lea r8, [rbp - 0x5b]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x58]
call fcn.1400028a0
mov r10, qword [0x1400d2ae8]
mov rdx, qword [r10 + 0x68]
test rdx, rdx
jne 0x1400468da
mov rax, qword [r10 + 0x58]
mov rcx, qword [rax + 0x60]
mov rdx, qword [rcx]
mov byte [rsp + 0x30], 0
movss xmm0, dword [0x14005c528]
movss dword [rsp + 0x20], xmm0
lea r9, [rbp + 0x460]
lea r8, [rsp + 0x58]
call fcn.140047c50
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x14004693f
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004693a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004693a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004d170
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x1400469a6
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x460], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 8], 0
je 0x140046a66
movss xmm6, dword [rax + 0xc]
movss xmm1, dword [0x1400b0abc]
mulss xmm1, xmm15
movss xmm0, dword [0x1400b0ab8]
mulss xmm0, xmm15
movss dword [rbp + 0x460], xmm0
movss dword [rbp + 0x464], xmm1
mov rax, qword [0x1400d2ae8]
mov rax, qword [rax + 0x4878]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.140008b20
mov r8, rax
mov rcx, qword [0x1400d2ae8]
mov dword [rbp - 0x70], 0x3f800000
mov dword [rbp - 0x6c], 0x3f800000
mov dword [rbp - 0x68], 0x3f800000
movss xmm0, dword [rcx + 0x37e0]
movss dword [rbp - 0x64], xmm0
lea rcx, [rbp - 0x70]
call fcn.140004fa0
mov r9d, eax
movss xmm0, dword [0x14005c4c4]
movss dword [rsp + 0x28], xmm0
movaps xmm2, xmm6
lea rdx, [rbp + 0x460]
mov rcx, r8
call fcn.14002a200
mov rax, qword [0x1400d2b88]
movss xmm6, dword [rsp + 0x50]
test rax, rax
jne 0x140046ac6
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x460], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 0x34], 0
je 0x140046b79
movaps xmm0, xmm12
addss xmm0, xmm7
movss dword [rbp + 0x460], xmm0
movss dword [rbp + 0x464], xmm6
movaps xmm1, xmm12
subss xmm1, xmm7
movss dword [rbp + 0x468], xmm1
movss dword [rbp + 0x46c], xmm6
movss xmm8, dword [0x14005c4b0]
movss dword [rsp + 0x20], xmm8
mov r9d, 0xfff0f029
lea r8, [rbp + 0x460]
lea rdx, [rbp + 0x468]
call fcn.140048b70
movss dword [rbp + 0x460], xmm12
movaps xmm0, xmm6
addss xmm0, xmm7
movss dword [rbp + 0x464], xmm0
movss dword [rbp + 0x468], xmm12
movaps xmm1, xmm6
subss xmm1, xmm7
movss dword [rbp + 0x46c], xmm1
movss dword [rsp + 0x20], xmm8
mov r9d, 0xfff0f029
lea r8, [rbp + 0x460]
lea rdx, [rbp + 0x468]
call fcn.140048b70
cmp qword [0x1400d2b80], 0
je 0x140046bf4
lea rcx, [rbp + 0xf0]
call fcn.140049f00
movaps xmm0, xmmword [rbp + 0xf0]
movaps xmmword [0x1400d30d0], xmm0
movaps xmm1, xmmword [rbp + 0x100]
movaps xmmword [0x1400d30e0], xmm1
movaps xmm0, xmmword [rbp + 0x110]
movaps xmmword [0x1400d30f0], xmm0
movaps xmm1, xmmword [rbp + 0x120]
movaps xmmword [0x1400d3100], xmm1
movsd xmm0, qword [rbp + 0x130]
movsd qword [0x1400d3110], xmm0
lea r9, [fcn.140002c20]
mov edx, 0xc
lea r8d, [rdx - 9]
lea rcx, [rbp + 0x114]
call fcn.14004d444
nop
movsxd rcx, dword [0x1400d2b48]
add rcx, qword [0x1400b0aa0]
call fcn.14004a020
mov r14d, eax
mov dword [rsp + 0x78], eax
call fcn.140045370
movsxd rbx, eax
movsxd rcx, dword [0x1400d2b40]
imul rbx, rcx
add rbx, qword [0x1400d2b78]
movsxd rcx, dword [0x1400d2b3c]
add rcx, rbx
mov byte [rbp + 0x460], 0
mov dword [rbp - 0x58], 0x1257
mov eax, dword [0x1400b0a98]
mov dword [rbp - 0x54], eax
mov qword [rbp - 0x48], rcx
lea rax, [rbp + 0x460]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x50], 1
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x40], esi
lea rax, [rbp - 0x58]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rsi
mov eax, dword [0x1400b0a94]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x9301
call fcn.14004d0e0
mov rdx, rbx
lea rcx, [rbp + 0x80]
call fcn.140045930
mov r13d, esi
test r14d, r14d
jle 0x140047bd9
movss xmm13, dword [0x14005c4cc]
xorps xmm10, xmm10
nop
movsxd r14, dword [0x1400d2b40]
movsxd rax, r13d
imul r14, rax
add r14, qword [0x1400d2b78]
je 0x140047bcb
movsxd rcx, dword [0x1400d2b3c]
add rcx, r14
mov byte [rbp + 0x468], 0
mov dword [rbp + 0x140], 0x1257
mov eax, dword [0x1400b0a98]
mov dword [rbp + 0x144], eax
mov qword [rbp + 0x150], rcx
lea rax, [rbp + 0x468]
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x148], 1
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x40], esi
lea rax, [rbp + 0x140]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rsi
mov eax, dword [0x1400b0a94]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x9301
call fcn.14004d0e0
mov rax, r14
sub rax, qword [0x1400d2b78]
movsxd rcx, dword [0x1400d2b40]
xor edx, edx
div rcx
movsxd rbx, eax
movsxd rax, dword [0x1400d2b38]
imul rbx, rax
add rbx, qword [0x1400d2b70]
xor edx, edx
mov r8d, 0xd0
lea rcx, [rbp + 0x2a0]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x160], 0x1257
mov eax, dword [0x1400b0a98]
mov dword [rbp + 0x164], eax
mov qword [rbp + 0x170], rbx
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x168], 0xd0
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x40], esi
lea rax, [rbp + 0x160]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rsi
mov eax, dword [0x1400b0a94]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x9301
call fcn.14004d0e0
lea rcx, [rbp + 0x1d0]
lea rax, [rbp + 0x2a0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
sub rcx, 0xffffffffffffff80
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0xb0]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0xc0]
movups xmmword [rcx + 0x40], xmm0
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.140045930
movss xmm7, dword [rbp - 0x78]
movaps xmm9, xmm7
addss xmm9, dword [0x14005c570]
movss xmm0, dword [rbp - 0x7c]
movaps xmm11, xmm0
addss xmm11, xmm10
movss xmm6, dword [rbp - 0x80]
movaps xmm12, xmm6
addss xmm12, xmm10
subss xmm0, dword [rbp + 0x84]
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm8, xmm0
subss xmm6, dword [rbp + 0x80]
movaps xmm1, xmm13
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
subss xmm7, dword [rbp + 0x88]
movaps xmm1, xmm13
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm8
ja 0x140046f24
xorps xmm14, xmm14
sqrtss xmm14, xmm8
jmp 0x140046f31
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm14, xmm0
mulss xmm14, dword [0x14005c448]
mov rax, r14
sub rax, qword [0x1400d2b78]
movsxd rcx, dword [0x1400d2b40]
xor edx, edx
div rcx
mov r12, rax
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x140046fb7
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp - 0x30], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
movzx r15d, byte [rbp + 0x468]
cmp byte [rax + 0x29], 0
je 0x140046fd2
cmp r15b, byte [rbp + 0x460]
je 0x140047bcb
movsd xmm6, qword [rbp - 0x80]
mov ebx, dword [rbp - 0x78]
lea rcx, [rbp + 0x1a0]
call fcn.140045430
movsd xmm0, qword [rax]
movsd qword [rbp + 0xc0], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0xc8], eax
movsd qword [rbp + 0xd0], xmm6
mov dword [rbp + 0xd8], ebx
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp - 0x10]
call fcn.140045540
movss xmm10, dword [rbp - 0xc]
movss xmm13, dword [rbp - 0x10]
xorps xmm7, xmm7
comiss xmm7, xmm13
jb 0x14004703f
comiss xmm7, xmm10
jae 0x140047bbe
movsd xmm8, qword [0x1400d3100]
mov esi, dword [0x1400d3108]
movsd xmm7, qword [0x1400d310c]
mov edi, dword [0x1400d3114]
movsd xmm6, qword [0x1400d30f4]
mov ebx, dword [0x1400d30fc]
lea rcx, [rbp + 0x1ac]
call fcn.140045430
movsd xmm1, qword [rax]
subss xmm9, dword [rax + 8]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
subss xmm11, xmm0
movsd qword [rbp - 0x30], xmm1
subss xmm12, xmm1
movaps xmm3, xmm6
mulss xmm3, xmm12
movaps xmm0, xmm6
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x30], xmm6
mulss xmm0, xmm11
addss xmm3, xmm0
movd xmm0, ebx
mulss xmm0, xmm9
addss xmm3, xmm0
movaps xmm1, xmm7
mulss xmm1, xmm12
movaps xmm0, xmm7
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x30], xmm7
mulss xmm0, xmm11
addss xmm1, xmm0
movd xmm0, edi
mulss xmm0, xmm9
addss xmm1, xmm0
movaps xmm2, xmm8
mulss xmm2, xmm12
movaps xmm0, xmm8
shufps xmm0, xmm0, 0x55
movsd qword [rbp - 0x30], xmm8
mulss xmm0, xmm11
addss xmm2, xmm0
movd xmm0, esi
mulss xmm0, xmm9
addss xmm2, xmm0
movss xmm0, dword [0x14005c444]
movss xmm7, dword [0x14005c4b0]
comiss xmm0, xmm3
jbe 0x140047135
xorps xmm6, xmm6
xorps xmm9, xmm9
jmp 0x140047180
divss xmm1, dword [0x1400d30e4]
divss xmm1, xmm3
movaps xmm9, xmm7
subss xmm9, xmm1
movss xmm0, dword [0x1400b0abc]
mulss xmm0, xmm15
mulss xmm9, xmm0
divss xmm2, dword [0x1400d30e0]
divss xmm2, xmm3
movaps xmm6, xmm7
subss xmm6, xmm2
movss xmm0, dword [0x1400b0ab8]
mulss xmm0, xmm15
mulss xmm6, xmm0
xor esi, esi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], sil
lea rax, [rbp + 0x1d4]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400471b0
lea rdx, [rbp + 0x1d4]
lea rcx, [rsp + 0x58]
call fcn.1400028a0
nop
mov eax, dword [rbp + 0x254]
xorps xmm11, xmm11
cvtsi2ss xmm11, rax
movss xmm0, dword [0x14005c470]
comiss xmm0, xmm11
jae 0x140047b81
mov rcx, qword [0x1400d2b68]
test rcx, rcx
jne 0x1400471fd
xor bl, bl
jmp 0x140047261
sub rcx, 0xffffffffffffff80
call fcn.140049e30
mov rcx, rax
test rax, rax
jne 0x140047212
xor bl, bl
jmp 0x140047261
lea eax, [r12 + r12*8]
lea eax, [rax*8 + 0xa90]
movsxd rdi, eax
add rdi, rcx
jne 0x140047229
xor bl, bl
jmp 0x140047261
lea rcx, [rdi + 0x14]
call fcn.14004a020
lea ecx, [rdi + 0x10]
xor eax, ecx
jne 0x14004723d
xor bl, bl
jmp 0x140047261
lea ebx, [rax + 2]
imul ebx, eax
mov esi, ebx
shr esi, 8
test ebx, ebx
je 0x14004725f
lea rcx, [rdi + 0x10]
call fcn.14004a020
xor al, sil
xor al, bl
cmp al, 3
sete bl
xor esi, esi
mov edi, 0xff4a4c4f
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x1400472cd
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 0x28], 0
je 0x1400472e2
mov edi, 0xfffc2d26
test bl, bl
mov ecx, 0xff26fc51
cmovne edi, ecx
cmp byte [rax], 0
je 0x14004754f
cmp r15b, byte [rbp + 0x460]
je 0x14004754f
movss xmm0, dword [rax + 0x20]
comiss xmm0, xmm14
jb 0x14004754f
mov ecx, dword [rax + 4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
mov rax, qword [0x1400d2b88]
je 0x14004754f
test rax, rax
jne 0x140047380
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
movss xmm1, dword [rax + 0xc]
movaps xmm0, xmm6
movss xmm12, dword [rbp + 0x478]
subss xmm0, xmm12
comiss xmm1, xmm0
jbe 0x140047558
movaps xmm0, xmm12
subss xmm0, xmm6
comiss xmm1, xmm0
jbe 0x140047558
movss xmm2, dword [rsp + 0x50]
movaps xmm0, xmm2
subss xmm0, xmm9
comiss xmm1, xmm0
jbe 0x140047558
movaps xmm0, xmm9
subss xmm0, xmm2
comiss xmm1, xmm0
jbe 0x140047558
cmp dword [0x1400d2afc], r12d
jne 0x140047558
mov r9d, 7
mov r8d, r12d
lea rcx, [rbp + 0xe0]
call fcn.1400456b0
lea rcx, [rbp + 0x1b8]
call fcn.140045430
movsd xmm0, qword [rax]
movsd qword [rbp + 0x90], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0x98], eax
movsd xmm0, qword [rbp + 0xe0]
movsd qword [rbp + 0xa0], xmm0
mov eax, dword [rbp + 0xe8]
mov dword [rbp + 0xa8], eax
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp - 8]
call fcn.140045540
movss xmm0, dword [0x1400b0ab8]
mulss xmm0, xmm15
movss xmm1, dword [rbp - 8]
subss xmm1, xmm0
mulss xmm1, xmm15
cvttss2si ecx, xmm1
movss xmm0, dword [0x1400b0abc]
mulss xmm0, xmm15
movss xmm1, dword [rbp - 4]
subss xmm1, xmm0
mulss xmm1, xmm15
cvttss2si eax, xmm1
mov qword [rbp + 0xf0], 0
mov dword [rbp + 0x100], esi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov dword [rbp + 0xf8], ecx
mov dword [rbp + 0xfc], eax
mov dword [rbp + 0x104], 1
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x140047525
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 0x1c], 0
je 0x14004752f
test bl, bl
je 0x140047558
mov r8d, 0x28
lea rdx, [rbp + 0xf0]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov rax, qword [0x1400d2b88]
jmp 0x140047558
movss xmm12, dword [rbp + 0x478]
test rax, rax
jne 0x1400475b8
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
movss xmm0, dword [rax + 0x30]
comiss xmm0, xmm14
jb 0x140047b81
cmp byte [rax + 0x27], 0
je 0x14004760c
movss dword [rbp], xmm13
movss dword [rbp + 4], xmm10
movss dword [rbp + 8], xmm12
movss xmm0, dword [0x1400b0abc]
movss dword [rbp + 0xc], xmm0
movss dword [rsp + 0x20], xmm7
mov r9d, 0xff26cefc
lea r8, [rbp]
lea rdx, [rbp + 8]
call fcn.140048b70
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x14004766c
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 0x25], 0
je 0x14004775b
movaps xmm0, xmm9
subss xmm0, xmm10
divss xmm0, dword [0x14005c4ec]
movaps xmm7, xmm0
addss xmm7, xmm13
movss dword [rbp + 0x10], xmm7
movss dword [rbp + 0x14], xmm10
movaps xmm6, xmm13
subss xmm6, xmm0
movss dword [rbp + 0x18], xmm6
movss dword [rbp + 0x1c], xmm10
movss xmm8, dword [0x14005c4e0]
movss dword [rsp + 0x20], xmm8
mov r9d, edi
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x18]
call fcn.140048b70
movss dword [rbp + 0x20], xmm6
movss dword [rbp + 0x24], xmm10
movss dword [rbp + 0x28], xmm6
movss dword [rbp + 0x2c], xmm9
movss dword [rsp + 0x20], xmm8
mov r9d, edi
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x28]
call fcn.140048b70
movss dword [rbp + 0x30], xmm7
movss dword [rbp + 0x34], xmm10
movss dword [rbp + 0x38], xmm7
movss dword [rbp + 0x3c], xmm9
movss dword [rsp + 0x20], xmm8
mov r9d, edi
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x38]
call fcn.140048b70
movss dword [rbp + 0x40], xmm7
movss dword [rbp + 0x44], xmm9
movss dword [rbp + 0x48], xmm6
movss dword [rbp + 0x4c], xmm9
movss dword [rsp + 0x20], xmm8
mov r9d, edi
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x48]
call fcn.140048b70
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x1400477bb
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 0x26], 0
je 0x140047884
movaps xmm0, xmm11
maxss xmm0, dword [0x14005c58c]
movaps xmm8, xmm9
subss xmm8, xmm10
divss xmm8, dword [0x14005c4e8]
mulss xmm8, dword [0x14005c4c0]
movaps xmm7, xmm10
subss xmm7, xmm9
movaps xmm6, xmm7
mulss xmm6, xmm11
divss xmm6, xmm0
addss xmm8, xmm13
movss dword [rbp + 0x50], xmm8
movss dword [rbp + 0x54], xmm10
movss dword [rbp + 0x58], xmm8
movss dword [rbp + 0x5c], xmm9
movss xmm11, dword [0x14005c4e4]
movss dword [rsp + 0x20], xmm11
mov r9d, 0xff000000
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x58]
call fcn.140048b70
movss dword [rbp + 0x78], xmm8
movss dword [rbp + 0x7c], xmm10
subss xmm9, xmm6
addss xmm9, xmm7
movss dword [rbp + 0x70], xmm8
movss dword [rbp + 0x74], xmm9
movss dword [rsp + 0x20], xmm11
mov r9d, 0xff00ff00
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x70]
call fcn.140048b70
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x1400478e4
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 0x2b], 0
je 0x14004791a
lea rcx, [rbp - 0x70]
call fcn.140045430
movsd xmm0, qword [rax]
movsd qword [rbp + 0xb0], xmm0
mov eax, dword [rax + 8]
mov dword [rbp + 0xb8], eax
mov r9d, r12d
lea r8, [rbp + 0xb0]
mov rdx, r14
call fcn.140049240
movss dword [rbp + 0x68], xmm13
movss dword [rbp + 0x6c], xmm10
call fcn.140003cd0
mov byte [rsp + 0x30], 1
movss xmm7, dword [0x14005c534]
movss dword [rsp + 0x20], xmm7
lea r9, [rbp + 0x68]
lea r8, [rsp + 0x58]
mov rdx, rax
call fcn.140047c50
movaps xmm6, xmm0
mov rax, qword [0x1400d2b88]
test rax, rax
jne 0x1400479b9
lea ecx, [rax + 0x38]
call fcn.14004d134
mov qword [rbp + 0x468], rax
mov byte [rax], 0
mov dword [rax + 4], 0x43
mov byte [rax + 8], 1
mov qword [rax + 0xc], 0x42700000
mov byte [rax + 0x14], 1
mov dword [rax + 0x18], 0x41200000
mov byte [rax + 0x1c], 0
mov qword [rax + 0x20], 0x437a0000
mov dword [rax + 0x28], pe_nt_image_headers64
mov byte [rax + 0x2c], 0
mov dword [rax + 0x30], 0x437a0000
mov word [rax + 0x34], 0
mov qword [0x1400d2b88], rax
cmp byte [rax + 0x2a], 0
je 0x140047b81
movss dword [rbp + 0x60], xmm13
movss dword [rbp + 0x64], xmm6
mov word [rbp + 0x470], 0xe1
mov ecx, esi
mov rdx, rsi
nop dword [rax]
lea eax, [rcx - 0x74]
xor byte [rbp + rdx + 0x470], al
inc ecx
movsxd rdx, ecx
cmp rdx, 1
jb 0x1400479e0
mov byte [rbp + 0x471], 0
cvttss2si r8d, xmm14
lea r9, [rbp - 0x1b]
test r8d, r8d
jns 0x140047a50
neg r8d
nop dword [rax]
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140047a10
dec r9
mov byte [r9], 0x2d
jmp 0x140047a7a
dec r9
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub r8b, cl
add r8b, 0x30
mov byte [r9], r8b
mov r8d, edx
test edx, edx
jne 0x140047a50
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
lea rax, [rbp - 0x1b]
cmp r9, rax
je 0x140047aab
lea r8, [rbp - 0x1b]
sub r8, r9
mov rdx, r9
lea rcx, [rbp - 0x58]
call fcn.1400028a0
nop
lea rdx, [rbp + 0x470]
lea rcx, [rbp - 0x58]
call fcn.1400027b0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140003cd0
mov byte [rsp + 0x30], 1
movss dword [rsp + 0x20], xmm7
lea r9, [rbp + 0x60]
lea r8, [rbp + 0x180]
mov rdx, rax
call fcn.140047c50
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140047b45
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047b3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047c2c
call fcn.14004d170
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140047b81
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047b7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047c33
call fcn.14004d170
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140047bbe
inc rdx
mov rcx, qword [rsp + 0x58]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140047bb9
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047c3a
call fcn.14004d170
xorps xmm10, xmm10
movss xmm13, dword [0x14005c4cc]
inc r13d
cmp r13d, dword [rsp + 0x78]
jl 0x140046cc0
lea r11, [rsp + 0x518]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3