Function at 0x180008a50
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2a8]
sub rsp, 0x380
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1800e8740]
xor rax, rsp
mov qword [rbp + 0x1d8], rax
mov r12, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xor r14d, r14d
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], r14
lea r8d, [r14 + 6]
lea rdx, str.aimbot
lea rcx, [rbp - 0x40]
call fcn.180008080
lea rdx, [rbp - 0x40]
lea rcx, [0x1800ebb68]
call fcn.180014a20
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
lea r8d, [r14 + 7]
lea rdx, str.enabled
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x18000992e
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0x1c0]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rbp + 0x1d0]
cmp byte [rbx + 0x19], r14b
jne 0x180008b69
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x180008b6c
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x180008ba9
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008ba4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009975
call fcn.180082a80
cmp byte [rbx + 0x40], 4
jne 0x18000997b
cmp byte [rbx + 0x48], 0
je 0x18000987f
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
mov r8d, 3
lea rdx, [0x1800d469c]
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x1800098e7
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0x1c0]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rbp + 0x1d0]
cmp byte [rbx + 0x19], 0
jne 0x180008c26
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x180008c29
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x180008c66
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008c61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099ba
call fcn.180082a80
lea rcx, [rbx + 0x40]
call fcn.1800123a0
mov ecx, eax
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000987f
xor r15b, r15b
mov byte [rbp + 0x1c8], r15b
movss xmm8, dword [0x1800d63a4]
mov dword [rsp + 0x5c], r14d
mov rax, qword [r12]
mov rdx, qword [rax]
add rdx, 0x108
mov dword [rbp + 0x190], r14d
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x190]
mov rcx, qword [0x1800ebab8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x190], 0
jle 0x18000987f
mov r13d, r14d
xorps xmm13, xmm13
movsd xmm15, qword [0x1800d6390]
movss xmm14, dword [0x1800d63a8]
movss xmm10, dword [0x1800d637c]
movss xmm9, dword [0x1800d6380]
mov rax, qword [r12 + 8]
movsxd rdx, r13d
add rdx, qword [rax]
mov qword [rbp + 0x1a0], r14
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1a0]
mov rcx, qword [0x1800ebab8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0x1a0]
test rsi, rsi
je 0x1800092e4
mov rax, qword [r12 + 0x10]
cmp rsi, qword [rax]
je 0x1800092e4
mov qword [rbp + 0x190], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov r8d, ntohs
lea rdx, str.dead_target
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009b2d
mov r14, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x180008dc0
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x180008dc3
mov rbx, qword [r14]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x180008e00
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008dfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099c6
call fcn.180082a80
cmp byte [rbx + 0x40], 4
jne 0x180009ae7
xor r14d, r14d
cmp byte [rbx + 0x48], r14b
jne 0x180008e4c
lea rdx, [rsi + 0x280]
mov dword [rbp + 0x198], r14d
mov qword [rsp + 0x20], r14
lea r9d, [r14 + 4]
lea r8, [rbp + 0x198]
mov rcx, qword [0x1800ebab8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
comiss xmm9, dword [rbp + 0x198]
ja 0x1800092e4
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov r8d, 4
lea rdx, str.npcs
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009aa0
mov r14, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, r14
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x180008eb2
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x180008eb5
mov rbx, qword [r14]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x180008ef2
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008eed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099c0
call fcn.180082a80
cmp byte [rbx + 0x40], 4
jne 0x180009a5a
cmp byte [rbx + 0x48], 0
jne 0x180008f72
call fcn.180021150
xor r14d, r14d
lea r9d, [r14 + 8]
mov rcx, qword [0x1800ebab8]
mov qword [rsp + 0x20], r14
cmp eax, 0xaf2
jle 0x180008f45
lea rdx, [rsi + 0x10a0]
mov qword [rbp + 0x1a8], r14
lea r8, [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1a8]
jmp 0x180008f67
lea rdx, [rsi + 0x10c8]
mov qword [rbp + 0x1b0], r14
lea r8, [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp + 0x1b0]
test rax, rax
je 0x1800092e4
jmp 0x180008f75
xor r14d, r14d
lea rdx, [rsi + 0x30]
mov qword [rbp + 0x1b8], r14
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp + 0x1b8]
mov rcx, qword [0x1800ebab8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x1b8]
test rdx, rdx
je 0x1800092e4
add rdx, 0x50
xor eax, eax
mov qword [rbp - 0x78], rax
mov dword [rbp - 0x70], eax
mov qword [rsp + 0x20], r14
lea r9d, [rax + 0xc]
lea r8, [rbp - 0x78]
mov rcx, qword [0x1800ebab8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [r12 + 0x18]
movss xmm0, dword [rbp - 0x74]
subss xmm0, dword [rbx + 4]
cvtps2pd xmm0, xmm0
movaps xmm1, xmm15
call fcn.1800aff60
movaps xmm6, xmm0
movss xmm1, dword [rbp - 0x78]
subss xmm1, dword [rbx]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm15
call fcn.1800aff60
movaps xmm7, xmm0
movss xmm1, dword [rbp - 0x70]
subss xmm1, dword [rbx + 8]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm15
call fcn.1800aff60
addsd xmm7, xmm6
addsd xmm7, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm7
ja 0x18000903c
xorps xmm0, xmm0
sqrtsd xmm0, xmm7
jmp 0x180009044
movaps xmm0, xmm7
call fcn.1800b15f4
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov r8d, 8
lea rdx, str.distance
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009a19
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x1800090b1
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x1800090b4
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1800090f1
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800090ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099cc
call fcn.180082a80
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
movzx edx, byte [rsp + 0x78]
lea rcx, [rbp - 0x80]
call fcn.180010fa0
mov byte [rsp + 0x78], 7
cvtps2pd xmm0, xmm6
movsd qword [rbp - 0x80], xmm0
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x58]
lea rcx, [rbx + 0x40]
call fcn.1800145c0
nop
movzx edx, byte [rsp + 0x78]
lea rcx, [rbp - 0x80]
call fcn.180010fa0
nop
cmp byte [rsp + 0x58], 0xff
je 0x1800092e4
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
mov r8d, 4
lea rdx, str.bone
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x1800099d8
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x1800091ae
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x1800091b1
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1800091ee
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800091e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099d2
call fcn.180082a80
lea rcx, [rbx + 0x40]
call fcn.1800123a0
mov r8d, eax
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x190]
call fcn.1800214d0
movsd xmm0, qword [rbp - 0x60]
movsd qword [rbp - 0x50], xmm0
mov eax, dword [rbp - 0x58]
mov dword [rbp - 0x48], eax
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x30]
mov rcx, qword [r12 + 0x20]
call fcn.1800216c0
movss xmm7, dword [rsp + 0x34]
movss xmm6, dword [rsp + 0x30]
ucomiss xmm6, xmm14
jp 0x18000924d
jne 0x18000924d
ucomiss xmm7, xmm14
jp 0x18000924d
je 0x1800092e4
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm0, xmm10
subss xmm6, xmm0
cvtps2pd xmm0, xmm6
movaps xmm1, xmm15
call fcn.1800aff60
movaps xmm6, xmm0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mulss xmm1, xmm10
subss xmm7, xmm1
cvtps2pd xmm0, xmm7
movaps xmm1, xmm15
call fcn.1800aff60
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x1800092b1
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x1800092b9
movaps xmm0, xmm6
call fcn.1800b15f4
cvtsd2ss xmm0, xmm0
comiss xmm8, xmm0
jbe 0x1800092e4
movaps xmm8, xmm0
mov rax, qword [rbp + 0x190]
mov qword [rbp + 0x1c0], rax
test r15b, r15b
jne 0x1800092e4
mov r15b, 1
mov byte [rbp + 0x1c8], r15b
mov esi, dword [rsp + 0x5c]
inc esi
mov dword [rsp + 0x5c], esi
add r13d, 0x10
mov rax, qword [r12]
mov rdx, qword [rax]
add rdx, 0x108
mov dword [rbp + 0x190], r14d
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rbp + 0x190]
mov rcx, qword [0x1800ebab8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp esi, dword [rbp + 0x190]
jl 0x180008d04
test r15b, r15b
je 0x18000987f
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x48], xmm1
mov r8d, 3
lea rdx, [0x1800d46a8]
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009c69
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x1800093a0
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x1800093a3
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1800093e0
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800093db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099c0
call fcn.180082a80
lea rcx, [rbx + 0x40]
call fcn.1800182d0
movaps xmm12, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x38], xmm1
xorps xmm2, xmm2
movdqu xmmword [rsp + 0x48], xmm2
mov r8d, 7
lea rdx, str.fov_min
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009c2b
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x180009452
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x180009455
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x180009492
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000948d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099c0
call fcn.180082a80
lea rcx, [rbx + 0x40]
call fcn.1800182d0
movaps xmm11, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x38], xmm1
xorps xmm2, xmm2
movdqu xmmword [rsp + 0x48], xmm2
mov r8d, 6
lea rdx, str.smooth
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009bed
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x180009504
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x180009507
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x180009544
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000953f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099c0
call fcn.180082a80
lea rcx, [rbx + 0x40]
call fcn.1800182d0
movaps xmm9, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x38], xmm1
xorps xmm2, xmm2
movdqu xmmword [rsp + 0x48], xmm2
mov r8d, 8
lea rdx, str.max_move
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009baf
mov rsi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x1800095b6
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x1800095b9
mov rbx, qword [rsi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1800095f6
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800095f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800099c0
call fcn.180082a80
lea rcx, [rbx + 0x40]
call fcn.1800182d0
movaps xmm10, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x38], xmm1
xorps xmm2, xmm2
movdqu xmmword [rsp + 0x48], xmm2
mov r8d, 4
lea rdx, str.bone
lea rcx, [rsp + 0x38]
call fcn.180008080
nop
cmp byte [rdi], 1
jne 0x180009b71
mov rdi, qword [rdi + 8]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.18001c090
mov rbx, qword [rsp + 0x70]
cmp byte [rbx + 0x19], 0
jne 0x180009668
lea r8, [rbx + 0x20]
lea rdx, [rsp + 0x38]
call fcn.18001ed20
test al, al
je 0x18000966b
mov rbx, qword [rdi]
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x1800096a8
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800096a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b6b
call fcn.180082a80
lea rcx, [rbx + 0x40]
call fcn.1800123a0
mov r8d, eax
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1c0]
call fcn.1800214d0
movsd xmm0, qword [rbp - 0x50]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [rbp - 0x48]
mov dword [rbp - 0x58], eax
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x30]
mov rcx, qword [r12 + 0x20]
call fcn.1800216c0
movss xmm7, dword [rsp + 0x34]
movss xmm8, dword [rsp + 0x30]
ucomiss xmm8, xmm14
jp 0x180009708
jne 0x180009708
ucomiss xmm7, xmm14
jp 0x180009708
je 0x18000987f
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xorps xmm6, xmm6
cvtsi2ss xmm6, eax
mulss xmm6, dword [0x1800d637c]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mulss xmm0, dword [0x1800d637c]
subss xmm7, xmm0
subss xmm8, xmm6
cvtps2pd xmm0, xmm8
movaps xmm1, xmm15
call fcn.1800aff60
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movaps xmm1, xmm15
call fcn.1800aff60
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x180009774
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x18000977c
movaps xmm0, xmm6
call fcn.1800b15f4
cvtsd2ss xmm0, xmm0
comiss xmm12, xmm0
jbe 0x18000987f
comiss xmm0, xmm11
jbe 0x18000987f
comiss xmm9, dword [0x1800d6380]
jbe 0x18000982f
movaps xmm1, xmm13
movsd xmm3, qword [0x1800d6388]
xorps xmm4, xmm4
comiss xmm8, xmm13
jbe 0x1800097ce
divss xmm8, xmm9
cvtps2pd xmm0, xmm8
addsd xmm0, xmm3
addsd xmm0, xmm4
cvtpd2ps xmm1, xmm0
jmp 0x1800097ef
comiss xmm13, xmm8
jbe 0x1800097ef
divss xmm8, xmm9
cvtps2pd xmm0, xmm8
movaps xmm2, xmm3
subsd xmm2, xmm0
xorps xmm1, xmm1
subsd xmm1, xmm2
cvtpd2ps xmm1, xmm1
comiss xmm7, xmm13
jbe 0x18000980c
divss xmm7, xmm9
cvtps2pd xmm0, xmm7
addsd xmm0, xmm3
addsd xmm0, xmm4
cvtpd2ps xmm13, xmm0
jmp 0x180009827
comiss xmm13, xmm7
jbe 0x180009827
divss xmm7, xmm9
cvtps2pd xmm0, xmm7
subsd xmm3, xmm0
subsd xmm4, xmm3
cvtpd2ps xmm13, xmm4
movaps xmm8, xmm1
movaps xmm7, xmm13
movaps xmm0, xmm8
movss xmm1, dword [0x1800d6560]
andps xmm0, xmm1
comiss xmm0, xmm10
jbe 0x18000984e
divss xmm8, xmm0
mulss xmm8, xmm10
movaps xmm0, xmm7
andps xmm0, xmm1
comiss xmm0, xmm10
jbe 0x180009863
divss xmm7, xmm0
mulss xmm7, xmm10
cvttss2si r8, xmm7
cvttss2si rdx, xmm8
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov rcx, qword [rbp + 0x1d8]
xor rcx, rsp
call fcn.180082a60
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x118]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0xc0]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0xc0]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x118]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0xc0]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0xc0]
call fcn.180084f48
nop
call fcn.180090f24
int3
lea rcx, [rbx + 0x40]
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp - 0x40]
call fcn.1800204b0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x18]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0x18]
call fcn.180084f48
nop
call fcn.180090f24
int3
call fcn.180090f24
int3
call fcn.180090f24
int3
call fcn.180090f24
int3
call fcn.180090f24
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0xf8]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x50]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0x50]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0xf8]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x50]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0x50]
call fcn.180084f48
nop
lea rcx, [rbx + 0x40]
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.1800204b0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x88]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0x88]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x170]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp + 0x138]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0x138]
call fcn.180084f48
nop
lea rcx, [rbx + 0x40]
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.1800204b0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x88]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp + 0x88]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x20]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp - 0x20]
call fcn.180084f48
nop
call fcn.180090f24
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x20]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp - 0x20]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x20]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp - 0x20]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x20]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp - 0x20]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x20]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp - 0x20]
call fcn.180084f48
nop
mov rcx, rdi
call fcn.1800109a0
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
lea rcx, [rbp + 0x18]
call fcn.18001ac30
nop
mov r8, rax
mov edx, 0x131
lea rcx, [rbp - 0x20]
call fcn.180012840
lea rdx, [0x1800e56a0]
lea rcx, [rbp - 0x20]
call fcn.180084f48
int3