Function at 0x180029100
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x298]
sub rsp, 0x360
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
call fcn.180015bb0
mov ebx, dword [0x1803ed330]
mov rdi, rax
mov r15d, 4
test rax, rax
je 0x180029210
mov rcx, qword gs:[0x58]
mov rsi, qword [rcx + rbx*8]
mov eax, dword [rsi + r15]
cmp dword [0x180423dc0], eax
jle 0x180029193
lea rcx, [0x180423dc0]
call fcn.180109418
cmp dword [0x180423dc0], 0xffffffff
jne 0x180029193
mov ecx, 0x3300df68
call fcn.18000e040
mov rcx, qword [rax]
mov qword [0x180423a18], rcx
lea rcx, [0x180423dc0]
call fcn.1801093ac
mov r8, rdi
call fcn.18005a010
mov rdi, rax
test rax, rax
je 0x180029210
mov ecx, dword [rsi + r15]
cmp dword [0x180423998], ecx
jle 0x1800291e4
lea rcx, [0x180423998]
call fcn.180109418
cmp dword [0x180423998], 0xffffffff
jne 0x1800291e4
mov ecx, 0x56e64b7d
call fcn.18000e040
mov rcx, qword [rax]
mov qword [0x180423878], rcx
lea rcx, [0x180423998]
call fcn.1801093ac
mov rdx, qword [0x180423878]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x68], 0
call fcn.180059f70
jmp 0x180029221
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
call fcn.180015bb0
mov rdi, rax
test rax, rax
je 0x1800292fd
mov rcx, qword gs:[0x58]
mov rsi, qword [rcx + rbx*8]
mov edx, dword [rsi + r15]
cmp dword [0x180423dc0], edx
jle 0x180029280
lea rcx, [0x180423dc0]
call fcn.180109418
cmp dword [0x180423dc0], 0xffffffff
jne 0x180029280
mov ecx, 0x3300df68
call fcn.18000e040
lea rcx, [0x180423dc0]
mov rdx, qword [rax]
mov qword [0x180423a18], rdx
call fcn.1801093ac
mov r8, rdi
call fcn.18005a010
mov rdi, rax
test rax, rax
je 0x1800292fd
mov ecx, dword [rsi + r15]
cmp dword [0x180424008], ecx
jle 0x1800292d1
lea rcx, [0x180424008]
call fcn.180109418
cmp dword [0x180424008], 0xffffffff
jne 0x1800292d1
mov ecx, 0x33ac3a8f
call fcn.18000e040
lea rcx, [0x180424008]
mov rdx, qword [rax]
mov qword [0x180423e98], rdx
call fcn.1801093ac
mov rdx, qword [0x180423e98]
lea r8, [rsp + 0x60]
mov r9, rdi
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x68], 0
call fcn.180059f70
jmp 0x18002930e
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rbx*8]
mov eax, dword [rdi + r15]
cmp dword [0x180423830], eax
jle 0x180029359
lea rcx, [0x180423830]
call fcn.180109418
cmp dword [0x180423830], 0xffffffff
jne 0x180029359
mov ecx, 0xf7ce809e
call fcn.18000d5a0
lea rcx, [0x180423830]
mov qword [0x180423e28], rax
call fcn.1801093ac
mov rax, qword [0x180423e28]
mov rax, qword [rax + 0xb8]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x20], xmm0
mov dword [rsp + 0x28], eax
call fcn.180015bb0
mov rbx, rax
test rax, rax
jne 0x180029398
mov qword [rsp + 0x64], rax
mov dword [rsp + 0x60], eax
lea rax, [rsp + 0x60]
jmp 0x180029446
mov eax, dword [rdi + r15]
cmp dword [0x180423a5c], eax
jle 0x1800293d6
lea rcx, [0x180423a5c]
call fcn.180109418
cmp dword [0x180423a5c], 0xffffffff
jne 0x1800293d6
mov ecx, 0x6d5c7dd2
call fcn.18000f6e0
lea rcx, [0x180423a5c]
mov qword [0x180423f48], rax
call fcn.1801093ac
mov rax, qword [0x180423f48]
mov qword [rsp + 0x64], 0
mov dword [rsp + 0x60], 0
mov rbx, qword [rax + rbx]
test rbx, rbx
jne 0x1800293fe
lea rax, [rsp + 0x60]
jmp 0x180029446
mov eax, dword [rdi + r15]
cmp dword [0x180423980], eax
jle 0x18002943c
lea rcx, [0x180423980]
call fcn.180109418
cmp dword [0x180423980], 0xffffffff
jne 0x18002943c
mov ecx, 0x7cd71351
call fcn.18000f6e0
lea rcx, [0x180423980]
mov qword [0x1804239c0], rax
call fcn.1801093ac
mov rax, qword [0x1804239c0]
add rax, rbx
movss xmm2, dword [rsp + 0x24]
movabs r12, 0x7fffffff0000
addss xmm2, dword [rax + 4]
movss xmm0, dword [rsp + 0x48]
movss xmm1, dword [rsp + 0x44]
movss xmm6, dword [rsp + 0x40]
movss xmm8, dword [rsp + 0x38]
movss xmm7, dword [rsp + 0x34]
mov rcx, qword [0x1803ed4e8]
mulss xmm0, xmm2
add rcx, 0xb8
mulss xmm1, xmm2
mulss xmm6, xmm2
addss xmm8, xmm0
addss xmm7, xmm1
addss xmm6, dword [rsp + 0x30]
movss dword [rbp - 0x74], xmm8
movss dword [rbp - 0x78], xmm7
movss dword [rbp - 0x7c], xmm6
cmp rcx, 0x40000
jbe 0x18002957f
lea rax, [rcx + 8]
cmp rax, r12
jae 0x18002957f
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18002957f
lea rax, [rcx + 8]
cmp rax, r12
jae 0x18002957f
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18002957f
lea rax, [rcx + 8]
cmp rax, r12
jae 0x18002957f
mov rbx, qword [rcx]
test rbx, rbx
je 0x18002957f
mov eax, dword [rdi + r15]
cmp dword [0x180423998], eax
jle 0x180029553
lea rcx, [0x180423998]
call fcn.180109418
cmp dword [0x180423998], 0xffffffff
jne 0x180029553
mov ecx, 0x56e64b7d
call fcn.18000e040
mov rcx, qword [rax]
mov qword [0x180423878], rcx
lea rcx, [0x180423998]
call fcn.1801093ac
mov rdx, qword [0x180423878]
lea r8, [rsp + 0x40]
mov r9, rbx
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x48], 0
call fcn.180059f70
jmp 0x180029590
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
movsd xmm0, qword [rsp + 0x30]
lea rdx, [rsp + 0x20]
mov eax, dword [rsp + 0x38]
lea rcx, [rsp + 0x40]
movaps xmmword [rsp + 0x320], xmm9
movaps xmmword [rsp + 0x310], xmm10
movaps xmmword [rsp + 0x300], xmm11
movaps xmmword [rsp + 0x2f0], xmm12
movsd qword [rsp + 0x20], xmm0
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movaps xmmword [rsp + 0x2e0], xmm13
movd r14d, xmm8
movaps xmmword [rsp + 0x2d0], xmm14
movsd qword [rsp + 0x60], xmm0
movsd qword [rsp + 0x40], xmm0
movaps xmmword [rsp + 0x2c0], xmm15
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x48], r14d
call fcn.180016570
test al, al
jne 0x18002a08d
mov ecx, dword [0x180424040]
test ecx, ecx
je 0x180029634
sub ecx, 1
je 0x180029634
cmp ecx, 1
je 0x180029634
movss xmm6, dword [rbp + 0x2a0]
jmp 0x18002963d
call qword [0x180424038]
movaps xmm6, xmm0
call fcn.180015bb0
mov rbx, rax
test rax, rax
jne 0x18002964f
xorps xmm0, xmm0
jmp 0x180029699
mov eax, dword [rdi + r15]
cmp dword [0x180423930], eax
jle 0x18002968d
lea rcx, [0x180423930]
call fcn.180109418
cmp dword [0x180423930], 0xffffffff
jne 0x18002968d
mov ecx, 0xc566d10
call fcn.18000f6e0
lea rcx, [0x180423930]
mov qword [0x180423798], rax
call fcn.1801093ac
mov rax, qword [0x180423798]
movss xmm0, dword [rbx + rax]
subss xmm6, xmm0
xorps xmm7, xmm7
subss xmm6, dword [0x180284948]
call fcn.180015bb0
mov rbx, rax
test rax, rax
jne 0x1800296bd
xorps xmm0, xmm0
jmp 0x1800297a9
mov eax, dword [rdi + r15]
cmp dword [0x180424050], eax
jle 0x1800296fb
lea rcx, [0x180424050]
call fcn.180109418
cmp dword [0x180424050], 0xffffffff
jne 0x1800296fb
mov ecx, 0xac5e6f4b
call fcn.18000f6e0
lea rcx, [0x180424050]
mov qword [0x180423b50], rax
call fcn.1801093ac
mov rax, qword [0x180423b50]
mov ecx, dword [rdi + r15]
cmp qword [rbx + rax], 0
je 0x180029760
cmp dword [0x180423814], ecx
jle 0x18002974a
lea rcx, [0x180423814]
call fcn.180109418
cmp dword [0x180423814], 0xffffffff
jne 0x18002974a
mov ecx, 0x9e8772e4
call fcn.18000e040
lea rcx, [0x180423814]
mov rdx, qword [rax]
mov qword [0x180423bc8], rdx
call fcn.1801093ac
mov rax, qword [0x180423bc8]
mov rcx, rbx
call rax
mulss xmm0, dword [0x180284e4c]
jmp 0x1800297a9
cmp dword [0x180423814], ecx
jle 0x18002979d
lea rcx, [0x180423814]
call fcn.180109418
cmp dword [0x180423814], 0xffffffff
jne 0x18002979d
mov ecx, 0x9e8772e4
call fcn.18000e040
mov rcx, qword [rax]
mov qword [0x180423bc8], rcx
lea rcx, [0x180423814]
call fcn.1801093ac
mov rax, qword [0x180423bc8]
mov rcx, rbx
call rax
mulss xmm6, dword [0x180284ca8]
addss xmm6, dword [0x180284988]
mulss xmm6, xmm0
addss xmm6, dword [0x180284928]
movaps xmm8, xmm6
movss dword [rbp - 0x80], xmm6
mulss xmm8, dword [0x180284980]
movss dword [rbp + 0x2b8], xmm8
call fcn.180015bb0
mov rbx, rax
test rax, rax
je 0x18002988f
mov ecx, dword [rdi + r15]
cmp dword [0x180423a5c], ecx
jle 0x18002982f
lea rcx, [0x180423a5c]
call fcn.180109418
cmp dword [0x180423a5c], 0xffffffff
jne 0x18002982f
mov ecx, 0x6d5c7dd2
call fcn.18000f6e0
lea rcx, [0x180423a5c]
mov qword [0x180423f48], rax
call fcn.1801093ac
mov rax, qword [0x180423f48]
mov rbx, qword [rax + rbx]
test rbx, rbx
je 0x18002988f
mov eax, dword [rdi + r15]
cmp dword [0x180423fb8], eax
jle 0x180029880
lea rcx, [0x180423fb8]
call fcn.180109418
cmp dword [0x180423fb8], 0xffffffff
jne 0x180029880
mov ecx, 0x3fc4366
call fcn.18000e040
lea rcx, [0x180423fb8]
mov r8, qword [rax]
mov qword [0x180424020], r8
call fcn.1801093ac
mov rdx, rbx
lea rcx, [rbp - 0x60]
call qword [0x180424020]
jmp 0x18002989e
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0
call fcn.180015bb0
mov rbx, rax
test rax, rax
je 0x180029957
mov edx, dword [rdi + r15]
cmp dword [0x180423a5c], edx
jle 0x1800298ed
lea rcx, [0x180423a5c]
call fcn.180109418
cmp dword [0x180423a5c], 0xffffffff
jne 0x1800298ed
mov ecx, 0x6d5c7dd2
call fcn.18000f6e0
lea rcx, [0x180423a5c]
mov qword [0x180423f48], rax
call fcn.1801093ac
mov rax, qword [0x180423f48]
mov rbx, qword [rax + rbx]
test rbx, rbx
je 0x180029957
mov eax, dword [rdi + r15]
cmp dword [0x180423f9c], eax
jle 0x18002993e
lea rcx, [0x180423f9c]
call fcn.180109418
cmp dword [0x180423f9c], 0xffffffff
jne 0x18002993e
mov ecx, 0x28985755
call fcn.18000e040
lea rcx, [0x180423f9c]
mov r8, qword [rax]
mov qword [0x1804240d0], r8
call fcn.1801093ac
mov rdx, rbx
lea rcx, [rbp - 0x70]
call qword [0x1804240d0]
movss xmm5, dword [rbp - 0x70]
movss xmm7, dword [rbp - 0x68]
jmp 0x18002996b
xorps xmm5, xmm5
movss dword [rbp - 0x68], xmm7
movss dword [rbp - 0x70], xmm5
mov dword [rbp - 0x6c], 0
movss xmm15, dword [rbp - 0x58]
movaps xmm0, xmm8
mulss xmm0, dword [0x18028496c]
movaps xmm1, xmm8
mov dword [rbp - 0x30], 0
mulss xmm1, dword [0x1802849cc]
movaps xmm3, xmm6
mov qword [rbp - 0x28], 0
movss xmm14, dword [rbp - 0x60]
movaps xmm12, xmm15
movss xmm13, dword [0x180285058]
movaps xmm11, xmm14
movss dword [rbp - 0x20], xmm1
movaps xmm4, xmm7
movss dword [rbp - 0x2c], xmm0
movaps xmm0, xmmword [0x180285240]
movaps xmmword [rbp - 0x10], xmm0
movaps xmm0, xmm6
mulss xmm0, dword [0x1802849cc]
mov qword [rbp - 0x1c], 0
mulss xmm12, xmm6
mov dword [rbp], 0
movaps xmm1, xmm0
mulss xmm11, xmm6
mov dword [rbp + 4], 0xbfb33333
mulss xmm1, xmm15
movaps xmm2, xmm0
mov dword [rbp + 8], 0
mulss xmm2, xmm14
movaps xmm10, xmm12
mov dword [rbp + 0x10], 0
mulss xmm3, xmm13
movaps xmm9, xmm11
mov dword [rbp + 0x1c], 0
movss dword [rbp + 0x14], xmm1
movss dword [rbp + 0x2c], xmm1
movaps xmm1, xmm15
mulss xmm1, dword [0x180284e00]
mov dword [rbp + 0x28], 0x3f333333
movss dword [rbp + 0x2a8], xmm0
movaps xmm0, xmm3
mulss xmm0, xmm14
mov dword [rbp + 0x34], 0x3fb33333
movss dword [rbp + 0x44], xmm1
movaps xmm1, xmm3
mulss xmm1, xmm15
mov dword [rbp + 0x40], 0xbf333333
movss dword [rbp - 0x14], xmm8
movss xmm8, dword [0x180285720]
xorps xmm10, xmm8
movss dword [rbp + 0x5c], xmm1
xorps xmm9, xmm8
movss dword [rbp + 0x74], xmm1
movss dword [rbp + 0x8c], xmm1
movss dword [rbp + 0x2b0], xmm7
movss dword [rbp + 0x2a0], xmm5
movss dword [rbp + 0xc], xmm2
movss dword [rbp + 0x18], xmm11
movss dword [rbp + 0x20], xmm12
movss dword [rbp + 0x24], xmm2
movss dword [rbp + 0x30], xmm11
movss dword [rbp + 0x38], xmm12
movss dword [rbp + 0x3c], xmm2
movss dword [rbp + 0x48], xmm11
movss dword [rbp + 0x50], xmm12
movss dword [rbp + 0x54], xmm0
movss dword [rbp + 0x60], xmm9
movss dword [rbp + 0x68], xmm10
movss dword [rbp + 0x6c], xmm0
movss dword [rbp + 0x78], xmm9
movss dword [rbp + 0x80], xmm10
movss dword [rbp + 0x84], xmm0
movss dword [rbp + 0x90], xmm9
movss dword [rbp + 0x98], xmm10
mov dword [rbp + 0x4c], 0xbfb33333
mov dword [rbp + 0x58], 0
mov dword [rbp + 0x64], 0
mov dword [rbp + 0x70], 0x3f333333
mov dword [rbp + 0x7c], 0x3fb33333
mov dword [rbp + 0x88], 0xbf333333
mov dword [rbp + 0x94], 0xbfb33333
mulss xmm4, dword [rbp + 0x2a8]
movaps xmm0, xmm5
mov dword [rbp + 0xa0], 0
mulss xmm0, xmm6
movaps xmm1, xmm7
mov dword [rbp + 0xac], 0
mulss xmm7, xmm3
movaps xmm2, xmm5
mov dword [rbp + 0xb8], 0
mulss xmm2, dword [rbp + 0x2a8]
mov dword [rbp + 0xc4], 0
mulss xmm5, xmm3
movaps xmm3, xmm0
mov dword [rbp + 0xd0], 0x3f333333
movss dword [rbp + 0xa8], xmm0
xorps xmm3, xmm8
movss dword [rbp + 0xd8], xmm0
movss dword [rbp + 0xf0], xmm0
movss xmm0, dword [rbp + 0x2a0]
mulss xmm0, dword [0x1802850c8]
mov dword [rbp + 0xdc], 0x3fb33333
mulss xmm1, xmm6
mov dword [rbp + 0xe8], 0xbf333333
movss dword [rbp + 0x9c], xmm2
movss dword [rbp + 0xcc], xmm2
movss dword [rbp + 0xe4], xmm2
movaps xmm6, xmm1
movss dword [rbp + 0x120], xmm0
xorps xmm6, xmm8
movss dword [rbp + 0xa4], xmm4
movss dword [rbp + 0xd4], xmm4
movss dword [rbp + 0xec], xmm4
movss xmm4, dword [rbp + 0x2b0]
movaps xmm2, xmm4
movss dword [rbp + 0xc0], xmm3
mulss xmm2, dword [0x1802850c8]
mov dword [rbp + 0xf4], 0xbfb33333
movss dword [rbp + 0x108], xmm3
movss dword [rbp + 0x138], xmm3
movss xmm3, dword [rbp + 0x2b8]
movaps xmm0, xmm3
movss dword [rbp + 0x128], xmm2
movaps xmm2, xmm3
movss dword [rbp + 0xb0], xmm1
movss dword [rbp + 0xe0], xmm1
xorps xmm2, xmm8
movss dword [rbp + 0xf8], xmm1
movss xmm1, dword [0x180284ab4]
mulss xmm0, xmm1
mov dword [rbp + 0x100], 0
mulss xmm12, xmm1
mov dword [rbp + 0x10c], 0
movss dword [rbp + 0x148], xmm0
movss dword [rbp + 0x154], xmm0
movaps xmm0, xmm2
mulss xmm11, xmm1
mov dword [rbp + 0x118], 0x3f333333
mulss xmm0, xmm1
mov dword [rbp + 0x124], 0x3fb33333
mulss xmm10, xmm1
mov dword [rbp + 0x130], 0xbf333333
mulss xmm9, xmm1
mov dword [rbp + 0x13c], 0xbfb33333
movss dword [rbp + 0x160], xmm0
movss dword [rbp + 0xb4], xmm5
movss dword [rbp + 0xbc], xmm7
movss dword [rbp + 0xc8], xmm6
movss dword [rbp + 0xfc], xmm5
movss dword [rbp + 0x104], xmm7
movss dword [rbp + 0x110], xmm6
movss dword [rbp + 0x114], xmm5
movss dword [rbp + 0x11c], xmm7
movss dword [rbp + 0x12c], xmm5
movss dword [rbp + 0x134], xmm7
movss dword [rbp + 0x140], xmm6
movss dword [rbp + 0x144], xmm11
movss dword [rbp + 0x14c], xmm12
movss dword [rbp + 0x150], xmm9
movss dword [rbp + 0x158], xmm10
movss dword [rbp + 0x15c], xmm11
movss dword [rbp + 0x164], xmm12
movss xmm5, dword [0x1802849cc]
lea rbx, [rbp - 0x30]
movss xmm6, dword [rbp + 0x2a8]
movaps xmm1, xmm15
movss dword [rbp + 0x16c], xmm0
movaps xmm0, xmm14
mulss xmm1, xmm5
mulss xmm0, xmm5
movss dword [rbp + 0x190], xmm2
movss dword [rbp + 0x19c], xmm2
movss xmm2, dword [rbp + 0x2a0]
mulss xmm15, xmm13
mulss xmm14, xmm13
movss dword [rbp + 0x170], xmm10
movss xmm10, dword [rbp - 0x80]
mulss xmm1, xmm10
mulss xmm0, xmm10
movss dword [rbp + 0x17c], xmm1
movss dword [rbp + 0x194], xmm1
movaps xmm1, xmm4
movss dword [rbp + 0x174], xmm0
movss dword [rbp + 0x18c], xmm0
movaps xmm0, xmm2
mulss xmm15, xmm10
mulss xmm14, xmm10
mulss xmm4, xmm13
mulss xmm1, xmm5
mulss xmm4, xmm10
mulss xmm0, xmm5
mulss xmm2, xmm13
mulss xmm4, xmm5
mulss xmm1, xmm6
mulss xmm0, xmm6
mulss xmm2, xmm6
movss dword [rbp + 0x168], xmm9
movss xmm9, dword [rbp - 0x7c]
movss dword [rbp + 0x180], xmm14
movss dword [rbp + 0x188], xmm15
movss dword [rbp + 0x198], xmm14
movss xmm14, dword [rbp - 0x78]
movss dword [rbp + 0x1a0], xmm15
movss xmm15, dword [rbp - 0x74]
movss dword [rbp + 0x1b8], xmm4
movss dword [rbp + 0x178], xmm3
movss dword [rbp + 0x184], xmm3
movss dword [rbp + 0x1a4], xmm0
movss dword [rbp + 0x1a8], xmm3
movss dword [rbp + 0x1ac], xmm1
movss dword [rbp + 0x1b0], xmm2
movss dword [rbp + 0x1b4], xmm3
nop dword [rax + rax]
movsd xmm0, qword [rbx]
lea rdx, [rbp - 0x50]
movss xmm12, dword [rbx + 8]
lea rcx, [rsp + 0x40]
movaps xmm11, xmm0
movsd qword [rsp + 0x70], xmm0
movsd xmm0, qword [rsp + 0x60]
movaps xmm8, xmm12
movss xmm13, dword [rsp + 0x70]
addss xmm8, xmm15
shufps xmm11, xmm11, 0x55
movaps xmm6, xmm13
movaps xmm7, xmm11
movsd qword [rbp - 0x50], xmm0
addss xmm7, xmm14
mov dword [rbp - 0x48], r14d
addss xmm6, xmm9
movss dword [rsp + 0x48], xmm8
movss dword [rsp + 0x44], xmm7
movss dword [rsp + 0x40], xmm6
call fcn.180016570
test al, al
je 0x18002a079
mov rcx, qword [0x1803ed4e8]
add rcx, 0xb8
cmp rcx, 0x40000
jbe 0x18002a02d
lea rax, [rcx + 8]
cmp rax, r12
jae 0x18002a02d
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18002a02d
lea rax, [rcx + 8]
cmp rax, r12
jae 0x18002a02d
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18002a02d
lea rax, [rcx + 8]
cmp rax, r12
jae 0x18002a02d
mov rsi, qword [rcx]
test rsi, rsi
je 0x18002a02d
mov eax, dword [rdi + r15]
cmp dword [0x180423998], eax
jle 0x18002a001
lea rcx, [0x180423998]
call fcn.180109418
cmp dword [0x180423998], 0xffffffff
jne 0x18002a001
mov ecx, 0x56e64b7d
call fcn.18000e040
mov rcx, qword [rax]
mov qword [0x180423878], rcx
lea rcx, [0x180423998]
call fcn.1801093ac
mov rdx, qword [0x180423878]
lea r8, [rsp + 0x20]
mov r9, rsi
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x28], 0
call fcn.180059f70
jmp 0x18002a03e
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
mov eax, dword [rsp + 0x38]
lea rdx, [rbp - 0x40]
movaps xmm0, xmm6
movss dword [rbp - 0x38], xmm8
unpcklps xmm0, xmm7
lea rcx, [rsp + 0x50]
movsd qword [rbp - 0x40], xmm0
movsd xmm0, qword [rsp + 0x30]
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call fcn.180016570
test al, al
jne 0x18002a106
add rbx, 0xc
lea rax, [rbp + 0x1bc]
cmp rbx, rax
jne 0x180029ee0
mov qword [0x180423258], 0
mov dword [0x180423260], 0
movaps xmm15, xmmword [rsp + 0x2c0]
lea r11, [rsp + 0x360]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm14, xmmword [rsp + 0x2d0]
movaps xmm13, xmmword [rsp + 0x2e0]
movaps xmm12, xmmword [rsp + 0x2f0]
movaps xmm11, xmmword [rsp + 0x300]
movaps xmm10, xmmword [rsp + 0x310]
movaps xmm9, xmmword [rsp + 0x320]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp byte [0x1803ed541], 0
je 0x18002a246
mov ecx, dword [0x1803ed664]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002a246
cmp qword [0x1803ed4e8], 0
je 0x18002a246
movss xmm6, dword [0x18029bf90]
movss xmm7, dword [0x18029bf94]
movss xmm8, dword [0x18029bf98]
call fcn.180015bb0
mov r8d, 0x12
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.1800154d0
movss xmm9, dword [0x1802849cc]
lea rdx, [rsp + 0x50]
movss xmm2, dword [rbp + 0x2a8]
lea rcx, [rsp + 0x20]
movss dword [rsp + 0x50], xmm6
movss xmm0, dword [rax]
movss xmm1, dword [rax + 4]
subss xmm1, xmm9
movss dword [rsp + 0x20], xmm0
movss xmm0, dword [rax + 8]
movss dword [rsp + 0x54], xmm7
movss dword [rsp + 0x58], xmm8
movss dword [rsp + 0x28], xmm0
movss dword [rsp + 0x24], xmm1
mov dword [rsp + 0x5c], 0x437f0000
call fcn.180028f00
cmp byte [0x1803ed3df], 0
lea rbx, [rsp + 0x50]
je 0x18002a1de
movaps xmm0, xmmword [0x180285430]
jmp 0x18002a1e5
movaps xmm0, xmmword [0x180285390]
movups xmmword [rsp + 0x50], xmm0
call fcn.180015bb0
mov r8d, 0x12
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.1800154d0
movups xmm0, xmmword [rbx]
lea rdx, [rsp + 0x50]
movss xmm2, dword [0x180284e50]
lea rcx, [rsp + 0x20]
movss xmm1, dword [rax]
movaps xmmword [rsp + 0x50], xmm0
movss xmm0, dword [rax + 4]
subss xmm0, xmm9
movss dword [rsp + 0x20], xmm1
movss dword [rsp + 0x24], xmm0
movss xmm0, dword [rax + 8]
movss dword [rsp + 0x28], xmm0
call fcn.180028f00
cmp byte [0x1803ed539], 0
movss xmm15, dword [0x18028498c]
movsd xmm9, qword [0x180284db8]
movss xmm14, dword [0x180284b04]
je 0x18002a3bb
mov ecx, dword [0x1803ed664]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002a3bb
cmp qword [0x1803ed4e8], 0
je 0x18002a3bb
movss xmm6, dword [0x18029c120]
movss xmm7, dword [0x18029c124]
movss xmm8, dword [0x18029c128]
call fcn.180015bb0
mov r8d, 0x12
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.1800154d0
xorps xmm1, xmm1
movss dword [rsp + 0x50], xmm6
movaps xmm0, xmm10
movss dword [rsp + 0x54], xmm7
mulss xmm0, xmm15
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x5c], 0x437f0000
movaps xmm2, xmm14
movss dword [rsp + 0x58], xmm8
cvtss2sd xmm1, xmm0
movss xmm0, dword [rax]
subsd xmm1, xmm9
movss dword [rsp + 0x20], xmm0
movss xmm0, dword [rax + 8]
movss dword [rsp + 0x28], xmm0
cvtpd2ps xmm9, xmm1
movaps xmm1, xmm9
addss xmm1, dword [rax + 4]
movss dword [rsp + 0x24], xmm1
call fcn.180028f00
movss xmm6, dword [0x18029c120]
movss xmm7, dword [0x18029c124]
movss xmm8, dword [0x18029c128]
call fcn.180015bb0
mov r8d, 0x12
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.1800154d0
movaps xmm2, xmm14
movss dword [rsp + 0x50], xmm6
lea rdx, [rsp + 0x50]
movss dword [rsp + 0x54], xmm7
lea rcx, [rsp + 0x20]
movss dword [rsp + 0x58], xmm8
movss xmm0, dword [rax]
movss xmm1, dword [rax + 4]
subss xmm1, xmm9
movss dword [rsp + 0x20], xmm0
movss xmm0, dword [rax + 8]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x5c], 0x437f0000
movss dword [rsp + 0x24], xmm1
call fcn.180028f00
movsd xmm9, qword [0x180284db8]
cmp byte [0x1803ed540], 0
je 0x18002a4a1
mov ecx, dword [0x1803ed664]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18002a4a1
mov rcx, qword [0x1803ed4e8]
test rcx, rcx
je 0x18002a4a1
mov r8d, 0x12
lea rdx, [rsp + 0x30]
call fcn.1800154d0
movss xmm1, dword [rsp + 0x30]
lea rdx, [rsp + 0x70]
xorps xmm0, xmm0
mulss xmm10, xmm15
lea rcx, [rsp + 0x20]
movaps xmm2, xmm14
movss dword [rsp + 0x20], xmm1
cvtss2sd xmm0, xmm10
subsd xmm0, xmm9
cvtpd2ps xmm6, xmm0
movaps xmm0, xmmword [0x1802856d0]
movaps xmmword [rsp + 0x70], xmm0
movss xmm0, dword [rsp + 0x34]
addss xmm0, xmm6
movss dword [rsp + 0x24], xmm0
movss xmm0, dword [rsp + 0x38]
movss dword [rsp + 0x28], xmm0
call fcn.180028f00
movaps xmm0, xmmword [0x1802856d0]
lea rdx, [rsp + 0x70]
movss xmm1, dword [rsp + 0x30]
lea rcx, [rsp + 0x20]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm2, xmm14
movss xmm0, dword [rsp + 0x34]
subss xmm0, xmm6
movss dword [rsp + 0x20], xmm1
movss dword [rsp + 0x24], xmm0
movss xmm0, dword [rsp + 0x38]
movss dword [rsp + 0x28], xmm0
call fcn.180028f00
xorps xmm0, xmm0
ucomiss xmm13, xmm0
jne 0x18002a4ba
ucomiss xmm11, xmm0
jne 0x18002a4ba
ucomiss xmm12, xmm0
je 0x18002a08d
movss dword [0x180423258], xmm13
movss dword [0x18042325c], xmm11
movss dword [0x180423260], xmm12
jmp 0x18002a0a2