Function at 0x180008bd0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x2b0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x180066040]
xor rax, rsp
mov qword [rbp + 0x100], rax
cmp byte [0x180067180], 0
je 0x180009c11
mov rax, qword [0x180067150]
mov rcx, qword [rax + 0x38]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x180009c0a
mov rax, qword [0x180067150]
mov rcx, qword [rax + 0x40]
mov rax, qword [rcx]
call qword [rax]
test rax, rax
je 0x180009c0a
call fcn.18004e040
test al, al
jne 0x180009c11
cmp byte [0x180067080], al
jne 0x180009c11
cmp byte [0x1800662ec], al
je 0x180008cd9
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180008cd9
mov dword [0x180066388], 0x7fc00000
mov dword [0x18006638c], 0x7fc00000
mov dword [0x180066390], 0x7fc00000
jmp 0x180009c11
mov rax, qword [0x180067150]
mov r14, qword [rax + 0x38]
lea rdx, [rsp + 0x70]
mov rcx, r14
call fcn.18004e280
lea rdx, [rsp + 0x50]
mov rcx, r14
call fcn.18004e280
mov rbx, qword [0x180066f80]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, qword [0x180066f70]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x330]
mov r8, rbx
mov rdx, rax
call r9
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
mulsd xmm1, qword [0x18005c590]
movss xmm0, dword [rsp + 0x54]
cvtps2pd xmm0, xmm0
addsd xmm1, xmm0
cvtpd2ps xmm8, xmm1
movss dword [rsp + 0x20], xmm8
mov rbx, qword [0x180066f90]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, qword [0x180066f70]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x330]
mov r8, rbx
mov rdx, rax
call r9
movss dword [rsp + 0x40], xmm0
mov rbx, qword [0x180067060]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, qword [0x180066f70]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x330]
mov r8, rbx
mov rdx, rax
call r9
movss dword [rsp + 0x2c], xmm0
xorps xmm2, xmm2
movdqu xmmword [rbp - 0x80], xmm2
xor r12d, r12d
mov qword [rbp - 0x70], r12
mov rcx, qword [0x180066378]
sub rcx, qword [0x180066370]
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x180008e2d
movabs rax, 0x1745d1745d1745d
cmp rdx, rax
ja 0x180009c79
lea rcx, [rbp - 0x80]
call fcn.18000af00
lea rax, [rbp - 0x80]
mov qword [rsp + 0x68], rax
lea r9, [rbp - 0x80]
mov r8, qword [rbp - 0x80]
mov rdx, qword [0x180066378]
mov rcx, qword [0x180066370]
call fcn.18000af90
mov qword [rbp - 0x78], rax
jmp 0x180008e31
mov rax, qword [rbp - 0x78]
cmp qword [rbp - 0x80], rax
je 0x180009bff
lea rcx, [rbp + 0x50]
call fcn.18000ef20
movss xmm14, dword [0x18005c6c0]
movss dword [rbp + 0x88], xmm14
movaps xmm15, xmm14
movss dword [rbp + 0x8c], xmm14
movaps xmm0, xmmword [0x18005c840]
movaps xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0xd0], xmm1
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
movss xmm13, dword [0x18005c6bc]
movss xmm9, dword [0x18005c698]
movss dword [rsp + 0x24], xmm9
movss dword [rsp + 0x28], xmm13
movss xmm0, dword [0x180066320]
movss dword [rsp + 0x30], xmm0
mov r15, qword [rbp - 0x78]
movsd xmm6, qword [0x18005c580]
mov rsi, qword [rbp - 0x80]
cmp rsi, r15
je 0x18000951b
add rsi, 0x44
lea r13, vtable.CEntityPlayer.0
movsd xmm15, qword [0x18005c5c0]
nop
lea rdx, [rsi - 0x44]
lea rcx, [rbp - 0x60]
call fcn.180008b00
mov qword [rbp - 0x60], r13
movsd xmm0, qword [rsi - 0xc]
movsd qword [rbp - 0x28], xmm0
mov eax, dword [rsi - 4]
mov dword [rbp - 0x20], eax
movsd xmm0, qword [rsi]
movsd qword [rbp - 0x1c], xmm0
mov eax, dword [rsi + 8]
mov dword [rbp - 0x14], eax
movups xmm0, xmmword [rsi + 0xc]
movaps xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rsi + 0x1c]
movaps xmmword [rbp], xmm1
movups xmm0, xmmword [rsi + 0x2c]
movaps xmmword [rbp + 0x10], xmm0
lea rdx, [rsi + 0x3c]
lea rcx, [rbp + 0x20]
call fcn.18000ab80
movss xmm0, dword [rsi + 0x5c]
movss dword [rbp + 0x40], xmm0
movss xmm1, dword [rsi + 0x60]
movss dword [rbp + 0x44], xmm1
movss xmm0, dword [rsi + 0x64]
movss dword [rbp + 0x48], xmm0
mov rbx, qword [rbp - 0x38]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, qword [0x180066f70]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0xc0]
mov r8, rbx
mov rdx, rax
call r9
test al, al
jne 0x180009464
mov rbx, qword [rbp - 0x38]
mov rdi, qword [0x180066fa8]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov r9, rbx
mov r8, rdi
mov rdx, rax
mov rcx, qword [0x180066f70]
call fcn.18000eef0
test al, al
je 0x180009464
movss xmm0, dword [rbp + 0xf0]
cvtps2pd xmm0, xmm0
subsd xmm0, xmm6
cvtpd2ps xmm1, xmm0
movss xmm10, dword [rbp - 0x20]
movaps xmm3, xmm10
xorps xmm14, xmm14
addss xmm3, xmm14
movss xmm11, dword [rbp - 0x24]
movaps xmm2, xmm11
addss xmm2, xmm1
movss xmm12, dword [rbp - 0x28]
movaps xmm0, xmm12
addss xmm0, xmm14
subss xmm0, dword [rsp + 0x50]
cvtps2pd xmm6, xmm0
subss xmm2, xmm8
cvtps2pd xmm9, xmm2
subss xmm3, dword [rsp + 0x58]
cvtps2pd xmm8, xmm3
movaps xmm1, xmm8
mulsd xmm1, xmm8
movaps xmm0, xmm6
mulsd xmm0, xmm6
addsd xmm1, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x180009043
sqrtpd xmm7, xmm1
jmp 0x18000904e
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm7, xmm0
movaps xmm1, xmm6
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
mulss xmm2, dword [0x18005c678]
cvtps2pd xmm3, xmm2
divsd xmm3, qword [0x18005c5c8]
cvtpd2ps xmm6, xmm3
subss xmm6, dword [0x18005c65c]
movaps xmm1, xmm7
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
xorps xmm0, xmmword [0x18005c860]
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
mulss xmm1, dword [0x18005c678]
cvtps2pd xmm2, xmm1
divsd xmm2, qword [0x18005c5c8]
cvtpd2ps xmm0, xmm2
movss xmm3, dword [rsp + 0x40]
movss xmm7, dword [0x18005c870]
xorps xmm3, xmm7
xorps xmm6, xmm7
subss xmm3, xmm6
movss xmm1, dword [rsp + 0x2c]
xorps xmm1, xmm7
xorps xmm0, xmm7
subss xmm1, xmm0
unpcklps xmm3, xmm1
movq rcx, xmm3
call fcn.18004f150
mov qword [rsp + 0x38], rax
movss xmm9, dword [rsp + 0x38]
comiss xmm14, xmm9
jbe 0x1800090fc
xorps xmm9, xmm7
movss xmm8, dword [rsp + 0x78]
subss xmm8, xmm10
movss xmm6, dword [rsp + 0x74]
subss xmm6, xmm11
movss xmm0, dword [rsp + 0x70]
subss xmm0, xmm12
cvtps2pd xmm0, xmm0
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm7, xmm0
cvtps2pd xmm0, xmm6
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm8
movaps xmm1, xmm15
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm7
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x180009163
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x18000916b
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
movaps xmm1, xmm9
andps xmm1, xmmword [0x18005c850]
movss xmm0, dword [0x1800662e8]
comiss xmm0, xmm1
jb 0x180009455
movss xmm0, dword [rsp + 0x30]
comiss xmm0, xmm6
jb 0x180009455
movss xmm7, dword [rbp + 0x44]
mov ecx, dword [0x180066318]
sub ecx, 1
je 0x180009364
cmp ecx, 1
je 0x180009289
comiss xmm13, xmm6
jbe 0x180009455
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x50]
call fcn.180009e20
movsd xmm0, qword [rbp - 0x28]
movsd qword [rbp + 0x88], xmm0
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0x90], eax
movsd xmm0, qword [rbp - 0x1c]
movsd qword [rbp + 0x94], xmm0
mov eax, dword [rbp - 0x14]
mov dword [rbp + 0x9c], eax
movaps xmm0, xmmword [rbp - 0x10]
movaps xmmword [rbp + 0xa0], xmm0
movaps xmm1, xmmword [rbp]
movaps xmmword [rbp + 0xb0], xmm1
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0xc0], xmm0
mov rdi, qword [rbp + 0x30]
lea r9, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r9, qword [rbp + 0x20]
mov rax, qword [rbp + 0xe8]
cmp rdi, rax
ja 0x180009271
lea rbx, [rbp + 0xd0]
cmp rax, 0xf
cmova rbx, qword [rbp + 0xd0]
mov qword [rbp + 0xe0], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
movaps xmm13, xmm6
jmp 0x18000942e
mov rdx, rdi
lea rcx, [rbp + 0xd0]
call fcn.18000ad50
movaps xmm13, xmm6
jmp 0x18000942e
movss xmm6, dword [rsp + 0x24]
comiss xmm6, xmm9
jbe 0x180009455
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x50]
call fcn.180009e20
movsd xmm0, qword [rbp - 0x28]
movsd qword [rbp + 0x88], xmm0
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0x90], eax
movsd xmm0, qword [rbp - 0x1c]
movsd qword [rbp + 0x94], xmm0
mov eax, dword [rbp - 0x14]
mov dword [rbp + 0x9c], eax
movaps xmm0, xmmword [rbp - 0x10]
movaps xmmword [rbp + 0xa0], xmm0
movaps xmm1, xmmword [rbp]
movaps xmmword [rbp + 0xb0], xmm1
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0xc0], xmm0
mov rdi, qword [rbp + 0x30]
lea r9, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r9, qword [rbp + 0x20]
mov rax, qword [rbp + 0xe8]
cmp rdi, rax
ja 0x180009349
lea rbx, [rbp + 0xd0]
cmp rax, 0xf
cmova rbx, qword [rbp + 0xd0]
mov qword [rbp + 0xe0], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
movss dword [rsp + 0x24], xmm9
jmp 0x18000942e
mov rdx, rdi
lea rcx, [rbp + 0xd0]
call fcn.18000ad50
movss dword [rsp + 0x24], xmm9
jmp 0x18000942e
movss xmm6, dword [rsp + 0x28]
comiss xmm6, xmm7
jbe 0x180009455
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x50]
call fcn.180009e20
movsd xmm0, qword [rbp - 0x28]
movsd qword [rbp + 0x88], xmm0
mov eax, dword [rbp - 0x20]
mov dword [rbp + 0x90], eax
movsd xmm0, qword [rbp - 0x1c]
movsd qword [rbp + 0x94], xmm0
mov eax, dword [rbp - 0x14]
mov dword [rbp + 0x9c], eax
movaps xmm0, xmmword [rbp - 0x10]
movaps xmmword [rbp + 0xa0], xmm0
movaps xmm1, xmmword [rbp]
movaps xmmword [rbp + 0xb0], xmm1
movaps xmm0, xmmword [rbp + 0x10]
movaps xmmword [rbp + 0xc0], xmm0
mov rdi, qword [rbp + 0x30]
lea r9, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova r9, qword [rbp + 0x20]
mov rax, qword [rbp + 0xe8]
cmp rdi, rax
ja 0x180009419
lea rbx, [rbp + 0xd0]
cmp rax, 0xf
cmova rbx, qword [rbp + 0xd0]
mov qword [rbp + 0xe0], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x180009428
mov rdx, rdi
lea rcx, [rbp + 0xd0]
call fcn.18000ad50
movss dword [rsp + 0x28], xmm7
movss xmm0, dword [rbp + 0x40]
movss dword [rbp + 0xf0], xmm0
movss xmm1, dword [rbp + 0x44]
movss xmm0, dword [rbp + 0x48]
movss dword [rbp + 0xf4], xmm1
movss dword [rbp + 0xf8], xmm0
movss xmm8, dword [rsp + 0x20]
movsd xmm6, qword [0x18005c580]
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x18000949f
inc rdx
mov rcx, qword [rbp + 0x20]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18000949a
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009545
call fcn.180050260
mov r8, qword [rbp - 0x48]
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], 0
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x48]
call fcn.1800064b0
mov edx, 0x48
mov rcx, qword [rbp - 0x48]
call fcn.180050260
mov r8, qword [rbp - 0x58]
mov r8, qword [r8 + 8]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x58]
call fcn.1800064b0
mov edx, 0x48
mov rcx, qword [rbp - 0x58]
call fcn.180050260
add rsi, 0xb0
lea rax, [rsi - 0x44]
cmp rax, r15
jne 0x180008ef0
movss xmm15, dword [rbp + 0x8c]
movss xmm14, dword [rbp + 0x88]
cmp qword [rbp + 0x78], 0
jne 0x18000954c
mov dword [0x180066388], 0x7fc00000
mov dword [0x18006638c], 0x7fc00000
mov dword [0x180066390], 0x7fc00000
jmp 0x180009b5b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm3, dword [rbp + 0x90]
movss dword [rsp + 0x4c], xmm3
movss xmm2, dword [rbp + 0x94]
movss dword [rsp + 0x30], xmm2
movss xmm10, dword [rbp + 0x98]
movss xmm9, dword [rbp + 0x9c]
movss xmm0, dword [rbp + 0xf0]
cvtps2pd xmm0, xmm0
subsd xmm0, xmm6
cvtpd2ps xmm1, xmm0
movaps xmm0, xmm3
xorps xmm4, xmm4
addss xmm0, xmm4
movss dword [rsp + 0x24], xmm0
movaps xmm0, xmm15
addss xmm0, xmm1
movss dword [rsp + 0x44], xmm0
movaps xmm0, xmm14
addss xmm0, xmm4
movss dword [rsp + 0x48], xmm0
movaps xmm12, xmm9
addss xmm12, xmm4
movaps xmm13, xmm10
addss xmm13, xmm1
movaps xmm0, xmm2
addss xmm0, xmm4
movss dword [rsp + 0x60], xmm0
movaps xmm0, xmm14
subss xmm0, dword [rsp + 0x50]
cvtps2pd xmm7, xmm0
movaps xmm1, xmm15
subss xmm1, xmm8
cvtps2pd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
movaps xmm0, xmm3
subss xmm0, dword [rsp + 0x58]
cvtps2pd xmm8, xmm0
movaps xmm1, xmm8
mulsd xmm1, xmm8
movaps xmm0, xmm7
mulsd xmm0, xmm7
addsd xmm1, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x180009627
sqrtpd xmm6, xmm1
jmp 0x180009632
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm6, xmm0
movaps xmm1, xmm7
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
mulss xmm2, dword [0x18005c678]
cvtps2pd xmm3, xmm2
divsd xmm3, qword [0x18005c5c8]
cvtpd2ps xmm11, xmm3
subss xmm11, dword [0x18005c65c]
movaps xmm1, xmm6
movsd xmm0, qword [rsp + 0x38]
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
xorps xmm0, xmmword [0x18005c860]
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
mulss xmm1, dword [0x18005c678]
cvtps2pd xmm2, xmm1
divsd xmm2, qword [0x18005c5c8]
cvtpd2ps xmm0, xmm2
movss dword [rsp + 0x28], xmm0
movss xmm0, dword [rsp + 0x48]
subss xmm0, dword [rsp + 0x50]
cvtps2pd xmm6, xmm0
movss xmm1, dword [rsp + 0x44]
subss xmm1, dword [rsp + 0x20]
cvtps2pd xmm0, xmm1
movsd qword [rsp + 0x38], xmm0
movss xmm0, dword [rsp + 0x24]
subss xmm0, dword [rsp + 0x58]
cvtps2pd xmm8, xmm0
movaps xmm1, xmm6
mulsd xmm1, xmm6
movaps xmm0, xmm8
mulsd xmm0, xmm8
addsd xmm1, xmm0
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x1800096f6
sqrtpd xmm7, xmm1
jmp 0x180009701
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm7, xmm0
movaps xmm1, xmm6
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
mulss xmm2, dword [0x18005c678]
cvtps2pd xmm3, xmm2
divsd xmm3, qword [0x18005c5c8]
cvtpd2ps xmm6, xmm3
subss xmm6, dword [0x18005c65c]
movaps xmm1, xmm7
movsd xmm0, qword [rsp + 0x38]
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2
xorps xmm0, xmmword [0x18005c860]
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
mulss xmm1, dword [0x18005c678]
cvtps2pd xmm2, xmm1
divsd xmm2, qword [0x18005c5c8]
cvtpd2ps xmm0, xmm2
movss dword [rsp + 0x20], xmm0
movss xmm8, dword [rsp + 0x40]
movss xmm1, dword [0x18005c870]
xorps xmm8, xmm1
movss xmm7, dword [rsp + 0x2c]
xorps xmm7, xmm1
xorps xmm6, xmm1
movaps xmm2, xmm8
subss xmm2, xmm6
xorps xmm0, xmm1
movaps xmm1, xmm7
subss xmm1, xmm0
unpcklps xmm2, xmm1
movq rcx, xmm2
call fcn.18004f150
mov qword [rsp + 0x38], rax
xorps xmm11, xmmword [0x18005c870]
subss xmm8, xmm11
movss xmm0, dword [rsp + 0x28]
xorps xmm0, xmmword [0x18005c870]
subss xmm7, xmm0
unpcklps xmm8, xmm7
movq rcx, xmm8
call fcn.18004f150
mov qword [rsp + 0x68], rax
movss xmm7, dword [0x1800662f0]
movaps xmm6, xmm7
xorps xmm6, xmmword [0x18005c870]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
divss xmm0, dword [0x18005c6b8]
subss xmm7, xmm6
mulss xmm7, xmm0
addss xmm7, xmm6
cmp byte [0x180066314], 0
je 0x18000986c
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180009844
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x180009844
subss xmm7, dword [0x18006631c]
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18000986c
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x18000986c
addss xmm7, dword [0x18006631c]
movss xmm11, dword [rsp + 0x38]
addss xmm11, xmm7
movss xmm0, dword [0x180066310]
divss xmm11, xmm0
addss xmm11, dword [rsp + 0x40]
movss xmm4, dword [0x180066360]
movss xmm3, dword [0x180066364]
movss xmm5, dword [0x180066368]
movss xmm6, dword [0x1800671d0]
movss xmm7, dword [rsp + 0x2c]
comiss xmm7, dword [rsp + 0x28]
ja 0x1800099b3
movss xmm1, dword [rsp + 0x20]
comiss xmm1, xmm7
ja 0x1800099b3
subss xmm5, xmm9
subss xmm3, xmm10
subss xmm9, dword [rsp + 0x4c]
subss xmm10, xmm15
movaps xmm2, xmm6
mulss xmm2, xmm9
movaps xmm1, xmm6
mulss xmm1, xmm10
addss xmm2, xmm5
addss xmm1, xmm3
movss xmm5, dword [rsp + 0x30]
movaps xmm0, xmm5
subss xmm0, xmm14
mulss xmm0, xmm6
subss xmm4, xmm5
addss xmm0, xmm4
movss dword [0x180066388], xmm0
movss dword [0x18006638c], xmm1
movss dword [0x180066390], xmm2
mov byte [0x18006717a], 0
movss xmm8, dword [0x180066328]
movaps xmm7, xmm8
xorps xmm7, xmmword [0x18005c870]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
divss xmm6, dword [0x18005c6b8]
mov rbx, qword [0x180066f90]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, qword [0x180066f70]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x378]
movaps xmm3, xmm11
mov r8, rbx
mov rdx, rax
call r9
mov rbx, qword [0x180067060]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
subss xmm8, xmm7
mulss xmm8, xmm6
addss xmm8, xmm7
addss xmm8, dword [rsp + 0x2c]
jmp 0x180009b3c
movss xmm1, dword [rsp + 0x6c]
divss xmm1, xmm0
addss xmm1, xmm7
movss xmm8, dword [rsp + 0x3c]
divss xmm8, xmm0
addss xmm8, xmm7
movaps xmm0, xmm7
subss xmm0, xmm1
andps xmm0, xmmword [0x18005c850]
subss xmm7, xmm8
andps xmm7, xmmword [0x18005c850]
xorps xmm2, xmm2
subss xmm5, xmm2
subss xmm4, xmm2
comiss xmm0, xmm7
jbe 0x180009a57
subss xmm3, dword [0x18005c518]
subss xmm5, xmm12
subss xmm3, xmm13
subss xmm12, dword [rsp + 0x24]
subss xmm13, dword [rsp + 0x44]
mulss xmm12, xmm6
mulss xmm13, xmm6
addss xmm12, xmm5
addss xmm13, xmm3
movss xmm1, dword [rsp + 0x60]
movaps xmm0, xmm1
subss xmm0, dword [rsp + 0x48]
subss xmm4, xmm1
movss dword [0x18006638c], xmm13
movss dword [0x180066390], xmm12
jmp 0x180009ab1
movaps xmm8, xmm1
subss xmm3, dword [0x18005c51c]
subss xmm5, xmm9
subss xmm3, xmm10
subss xmm9, dword [rsp + 0x4c]
subss xmm10, xmm15
mulss xmm9, xmm6
mulss xmm10, xmm6
addss xmm9, xmm5
addss xmm10, xmm3
movss xmm5, dword [rsp + 0x30]
movaps xmm0, xmm5
subss xmm0, xmm14
subss xmm4, xmm5
movss dword [0x18006638c], xmm10
movss dword [0x180066390], xmm9
mulss xmm0, xmm6
addss xmm0, xmm4
movss dword [0x180066388], xmm0
mov byte [0x18006717a], 1
movss xmm7, dword [0x180066328]
movaps xmm6, xmm7
xorps xmm6, xmmword [0x18005c870]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x18005c6b8]
subss xmm7, xmm6
mulss xmm7, xmm0
addss xmm7, xmm6
addss xmm8, xmm7
mov rbx, qword [0x180066f90]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, qword [0x180066f70]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x378]
movaps xmm3, xmm11
mov r8, rbx
mov rdx, rax
call r9
mov rbx, qword [0x180067060]
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, qword [0x180066f70]
mov rdx, qword [rcx]
mov r9, qword [rdx + 0x378]
movaps xmm3, xmm8
mov r8, rbx
mov rdx, rax
call r9
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x180009b9f
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009b9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009b9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180050260
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov r8, qword [rbp + 0x68]
mov r8, qword [r8 + 8]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x68]
call fcn.1800064b0
mov edx, 0x48
mov rcx, qword [rbp + 0x68]
call fcn.180050260
mov r8, qword [rbp + 0x58]
mov r8, qword [r8 + 8]
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x58]
call fcn.1800064b0
mov edx, 0x48
mov rcx, qword [rbp + 0x58]
call fcn.180050260
nop
lea rcx, [rbp - 0x80]
call fcn.180008110
jmp 0x180009c11
mov byte [0x180067169], 0
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.180050080
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18000aee0
int3