Function at 0x140003010
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push r14
sub rsp, 0x2b0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
movaps xmmword [rax - 0x88], xmm13
movaps xmmword [rax - 0x98], xmm14
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rsp + 0x210], rax
xor esi, esi
mov dword [rsp + 0x98], esi
lea rdx, str.PS3D_Hack_0.2__new__nMade_By_Dr._Hamd_nPress_L_to_teleport_Up_nPress_J_to_teleport_down__buggy__nPress_E_to_chain_up_nPress_Q_to_chain_Down_nPress_M_to_toggle_no_gravity_nHold_B_to_teleport_players_next_to_you
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400019c0
mov ecx, 8
call fcn.140004734
test rax, rax
je 0x1400030a2
lea rcx, [0x140002a80]
mov qword [rax], rcx
jmp 0x1400030a5
mov rax, rsi
mov qword [rsp + 0x160], rax
lea rcx, [rsp + 0x1d0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x140001eb0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x1c8], rax
test rax, rax
je 0x1400046f5
movsd xmm12, qword [0x140006530]
movsd xmm11, qword [0x140006538]
movsd xmm10, qword [0x140006540]
movss xmm13, dword [0x140006548]
movss xmm14, dword [0x14000652c]
mov qword [rsp + 0x30], 0xb8
mov qword [rsp + 0x38], 0x10
mov qword [rsp + 0x40], 0x20
mov qword [rsp + 0x48], 0x108
mov qword [rsp + 0x50], 0x28
mov qword [rsp + 0x58], 0x38
lea rdi, [rsp + 0x30]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
mov ecx, 0x30
call fcn.140004734
mov rbx, rax
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x120], rcx
mov r8d, 0x30
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x118], rax
mov r8, qword [0x140009198]
add r8, 0x884ec30
lea r9, [rsp + 0x110]
lea rdx, [rsp + 0xb0]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x198]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x140003257
mov rax, qword [rsp + 0x120]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000323e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000323e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
mov rdx, qword [rsp + 0x198]
add rdx, 0x18
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x144]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cvttss2si edi, dword [rsp + 0x144]
mov dword [rsp + 0x60], edi
mov ecx, 0x4c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003443
test edi, edi
jle 0x14000340e
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], 0x10
mov qword [rsp + 0x78], 0x60
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], 0x60
mov qword [rsp + 0x90], rsi
lea r14, [rsp + 0x68]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140004734
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b5d230
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xb8]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x1a0]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400033d3
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400033c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x110], 0x40600000
mov rdx, qword [rsp + 0x1a0]
add rdx, 0x1fc
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
jmp 0x140003443
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003642
test edi, edi
jle 0x14000360d
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], 0x10
mov qword [rsp + 0x78], 0x60
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], 0x60
mov qword [rsp + 0x90], rsi
lea r14, [rsp + 0x68]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140004734
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b5d230
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xc0]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x1a8]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003586
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003573
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003573
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov rbx, qword [rsp + 0x1a8]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x148]
lea rdx, [rbx + 0x1fc]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x148]
subss xmm0, xmm14
movss dword [rsp + 0x110], xmm0
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
lea rdx, [rbx + 0x1fc]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x110], 0x64
lea rcx, [rsp + 0x110]
call fcn.140001ee0
nop
jmp 0x140003642
mov ecx, 0x45
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003971
test edi, edi
jle 0x14000393c
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], 0x10
mov qword [rsp + 0x78], 0x60
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], 0x60
mov qword [rsp + 0x90], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140001e00
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
lea rdx, [rsp + 0x68]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b5d230
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xc8]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x1b0]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003782
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000376f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000376f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x110], 0x3f000000
mov rdx, qword [rsp + 0x1b0]
add rdx, 0x218
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x68], 0x48
mov qword [rsp + 0x70], 0xb8
mov qword [rsp + 0x78], 0x20
mov qword [rsp + 0x80], 0x20
mov qword [rsp + 0x88], 0x108
mov qword [rsp + 0x90], 0x28
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140001e00
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
lea rdx, [rsp + 0x68]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x88f31c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xd0]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x168]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400038e8
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038d5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x110], 0xbca3d70a
mov rdx, qword [rsp + 0x168]
add rdx, 0xac
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x110], 1
lea rcx, [rsp + 0x110]
call fcn.140001ee0
nop
jmp 0x140003971
mov ecx, 0x51
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003ca0
test edi, edi
jle 0x140003c6b
mov qword [rsp + 0x68], 8
mov qword [rsp + 0x70], 0x10
mov qword [rsp + 0x78], 0x60
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], 0x60
mov qword [rsp + 0x90], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140001e00
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
lea rdx, [rsp + 0x68]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b5d230
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xd8]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x170]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003ab1
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x110], 0xbf000000
mov rdx, qword [rsp + 0x170]
add rdx, 0x218
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x68], 0x48
mov qword [rsp + 0x70], 0xb8
mov qword [rsp + 0x78], 0x20
mov qword [rsp + 0x80], 0x20
mov qword [rsp + 0x88], 0x108
mov qword [rsp + 0x90], 0x28
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140001e00
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
lea rdx, [rsp + 0x68]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x88f31c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xe0]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x178]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003c17
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x110], 0xbca3d70a
mov rdx, qword [rsp + 0x178]
add rdx, 0xac
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x110], 1
lea rcx, [rsp + 0x110]
call fcn.140001ee0
nop
jmp 0x140003ca0
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003d28
mov ebx, esi
cmp dword [rsp + 0x98], 0
sete bl
mov dword [rsp + 0x110], ebx
mov qword [rsp + 0x98], 0x96
lea rcx, [rsp + 0x98]
call fcn.140001ee0
nop
mov dword [rsp + 0x98], ebx
jmp 0x140003d28
cmp dword [rsp + 0x98], 1
jne 0x140003eef
test edi, edi
jle 0x140003ebe
mov qword [rsp + 0x68], 0x48
mov qword [rsp + 0x70], 0xb8
mov qword [rsp + 0x78], 0x20
mov qword [rsp + 0x80], 0x20
mov qword [rsp + 0x88], 0x108
mov qword [rsp + 0x90], 0x28
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140001e00
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
lea rdx, [rsp + 0x68]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x88f31c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xe8]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x180]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003e6a
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003e57
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x110], 0xbca3d70a
mov rdx, qword [rsp + 0x180]
add rdx, 0xac
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x110], 1
lea rcx, [rsp + 0x110]
call fcn.140001ee0
nop
jmp 0x140003eef
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003110
mov qword [rsp + 0x110], 0xb8
mov qword [rsp + 0x118], 0x20
mov qword [rsp + 0x120], 0x20
mov qword [rsp + 0x128], 0x108
mov qword [rsp + 0x130], 0x30
lea rdi, [rsp + 0x110]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x28
call fcn.140004734
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x88f31c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xf0]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x1b8]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x1b8]
add rdx, 0x24
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x14c]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140004050
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000404b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000404b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
mov qword [rsp + 0x110], 0xb8
mov qword [rsp + 0x118], 0x20
mov qword [rsp + 0x120], 0x20
mov qword [rsp + 0x128], 0x108
mov qword [rsp + 0x130], 0x30
lea rdi, [rsp + 0x110]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x28
call fcn.140004734
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x88f31c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xf8]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x1c0]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x1c0]
add rdx, 0x28
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x150]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000419d
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004198
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004198
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
mov qword [rsp + 0x110], 0xb8
mov qword [rsp + 0x118], 0x20
mov qword [rsp + 0x120], 0x20
mov qword [rsp + 0x128], 0x108
mov qword [rsp + 0x130], 0x30
lea rdi, [rsp + 0x110]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x28
call fcn.140004734
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x88f31c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x100]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x188]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x188]
add rdx, 0x2c
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x154]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400042ea
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042e5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400042e5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
movaps xmm9, xmm13
mov qword [rsp + 0x68], 0xb8
mov qword [rsp + 0x70], 0x20
mov qword [rsp + 0x78], 0x20
mov qword [rsp + 0x80], 0x108
mov qword [rsp + 0x88], 0x30
mov qword [rsp + 0x90], 0xc8
lea rdi, [rsp + 0x68]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov ecx, 0x30
call fcn.140004734
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x30]
mov qword [rsp + 0x40], rcx
mov r8d, 0x30
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x30]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x88f31c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x108]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x190]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000441d
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000440a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000440a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004770
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rsi
mov rdx, qword [rsp + 0x190]
add rdx, 0x28
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x158]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [0x1400091a0]
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
jne 0x1400046e9
movss xmm6, dword [rsp + 0x14c]
movss xmm7, dword [rsp + 0x150]
movss xmm8, dword [rsp + 0x154]
mov r14d, dword [rsp + 0x158]
nop dword [rax]
nop word [rax + rax]
mov rdi, qword [rbx + 0x20]
lea rdx, [rdi + 0xc8]
mov qword [rsp + 0x20], rsi
mov r9d, 8
lea r8, [rsp + 0x160]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x160]
add rdx, 0x28
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x15c]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rsp + 0x15c], r14d
je 0x14000468b
lea rdx, [rdi + 0x10]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x140]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rsp + 0x140], 0
jne 0x1400045c9
mov r9, qword [0x1400091a0]
mov rcx, qword [r9 + 8]
mov rax, rcx
mov rdx, r9
cmp byte [rcx + 0x19], 0
jne 0x140004568
nop
mov r8, qword [rax + 0x20]
cmp r8, rdi
jge 0x14000454f
mov rax, qword [rax + 0x10]
jmp 0x140004562
cmp byte [rdx + 0x19], 0
je 0x14000455c
cmp rdi, r8
cmovl rdx, rax
mov r9, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x140004540
cmp byte [rdx + 0x19], 0
jne 0x140004571
mov rcx, qword [rdx]
cmp byte [rcx + 0x19], 0
jne 0x14000458f
cmp rdi, qword [rcx + 0x20]
jge 0x140004585
mov rdx, rcx
mov rcx, qword [rcx]
jmp 0x140004589
mov rcx, qword [rcx + 0x10]
cmp byte [rcx + 0x19], 0
je 0x140004577
mov qword [rsp + 0xa0], r9
mov qword [rsp + 0xa8], rdx
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0x110], xmm0
lea rdx, [rsp + 0x110]
lea rcx, [0x1400091a0]
call fcn.1400020b0
jmp 0x14000468b
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
addsd xmm0, xmm10
cvtpd2ps xmm0, xmm0
movss dword [rsp + 0x110], xmm0
lea rdx, [rdi + 0x24]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm7
subsd xmm0, xmm11
cvtpd2ps xmm0, xmm0
movss dword [rsp + 0x110], xmm0
lea rdx, [rdi + 0x28]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm0, xmm9
addss xmm0, xmm8
movss dword [rsp + 0x110], xmm0
lea rdx, [rdi + 0x2c]
mov qword [rsp + 0x20], rsi
mov r9d, 4
lea r8, [rsp + 0x110]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm9
addsd xmm0, xmm12
cvtpd2ps xmm9, xmm0
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x1400046b8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400046b3
nop
cmp rbx, qword [rax + 0x10]
jne 0x1400046b3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x1400046a0
mov rbx, rax
jmp 0x1400046df
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x1400046df
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x1400046d0
cmp byte [rbx + 0x19], 0
je 0x140004490
jmp 0x140003110
mov dword [rsp + 0x1d0], esi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3