Function at 0x180004440
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1600]
mov eax, 0x1700
call fcn.18004c3b0
sub rsp, rax
movaps xmmword [rsp + 0x16f0], xmm6
movaps xmmword [rsp + 0x16e0], xmm7
movaps xmmword [rsp + 0x16d0], xmm8
movaps xmmword [rsp + 0x16c0], xmm9
movaps xmmword [rsp + 0x16b0], xmm10
movaps xmmword [rsp + 0x16a0], xmm11
movaps xmmword [rsp + 0x1690], xmm12
movaps xmmword [rsp + 0x1680], xmm13
mov rax, qword [0x180060040]
xor rax, rsp
mov qword [rbp + 0x1570], rax
xor sil, sil
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rax
xorps xmm11, xmm11
mov qword [rbp + 0x1a8], rax
mov dword [rbp + 0x1b0], eax
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rbp + 0x1c8], rax
mov qword [rbp + 0x1d0], 0xf
mov byte [rbp + 0x1b8], al
mov rax, qword [0x1800b0288]
mov qword [rsp + 0x58], rax
movdqu xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], 0
mov ecx, 8
call fcn.18004b240
mov qword [rbp + 0x1f0], rax
lea rcx, [rax + 8]
mov qword [rbp + 0x200], rcx
mov rcx, qword [rsp + 0x58]
mov qword [rax], rcx
add rax, 8
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x1f0]
mov rcx, qword [0x1800b02a8]
call fcn.1800093b0
mov qword [rbp + 0x190], rax
test rax, rax
je 0x180005b6e
mov rcx, rax
call fcn.1800089b0
mov rdi, rax
mov qword [rbp + 0x198], rax
test rax, rax
je 0x180005b6e
mov qword [rsp + 0x58], 0x3e3
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], 0
mov ecx, 8
call fcn.18004b240
mov qword [rbp + 0x1f0], rax
lea rcx, [rax + 8]
mov qword [rbp + 0x200], rcx
mov rcx, qword [rsp + 0x58]
mov qword [rax], rcx
add rax, 8
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x1f0]
mov rcx, rdi
call fcn.180009290
mov r12d, eax
mov dword [rbp + 0x1a4], eax
mov qword [rsp + 0x58], 0x344
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], 0
mov ecx, 8
call fcn.18004b240
mov qword [rbp + 0x1f0], rax
lea rcx, [rax + 8]
mov qword [rbp + 0x200], rcx
mov rcx, qword [rsp + 0x58]
mov qword [rax], rcx
add rax, 8
mov qword [rbp + 0x1f8], rax
lea rdx, [rbp + 0x1f0]
mov rcx, rdi
call fcn.180009290
test eax, eax
jle 0x180005b6e
xor eax, eax
mov dword [rsp + 0x58], eax
movdqa xmm13, xmmword [0x180057410]
movss xmm10, dword [0x1800571c0]
movss xmm12, dword [0x180057198]
movss xmm8, dword [0x180057248]
nop dword [rax + rax]
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp + 0x310], xmm0
mov qword [rbp + 0x320], rcx
mov qword [rbp + 0x328], rcx
mov dword [rbp + 0x330], ecx
movups xmmword [rbp + 0x338], xmm0
mov qword [rbp + 0x348], rcx
mov qword [rbp + 0x350], 0xf
mov byte [rbp + 0x338], cl
movsxd rcx, eax
call fcn.1800477d0
mov rbx, rax
mov qword [rbp + 0x310], rax
test rax, rax
je 0x180005a54
mov qword [rsp + 0x60], 0x814
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
mov ecx, 8
call fcn.18004b240
mov qword [rsp + 0x40], rax
lea rdx, [rax + 8]
mov qword [rsp + 0x50], rdx
mov rdx, qword [rsp + 0x60]
mov qword [rax], rdx
add rax, 8
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.180009290
cmp eax, 1
jne 0x180005a54
mov rcx, rbx
call fcn.1800089b0
mov r14, rax
mov qword [rbp + 0x318], rax
test rax, rax
je 0x180005a54
cmp rax, rdi
je 0x180005a54
mov qword [rsp + 0x60], 0x3e3
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
mov ecx, 8
call fcn.18004b240
mov qword [rsp + 0x40], rax
lea rcx, [rax + 8]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.180009290
mov r15d, eax
mov dword [rbp + 0x324], eax
mov qword [rsp + 0x60], 0x344
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
mov ecx, 8
call fcn.18004b240
mov qword [rsp + 0x40], rax
lea rcx, [rax + 8]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rax], rcx
add rax, 8
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.180009290
mov dword [rbp + 0x320], eax
movdqu xmmword [rsp + 0x60], xmm13
lea r13, [rsp + 0x60]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
mov ecx, 0x10
call fcn.18004b240
mov rbx, rax
mov qword [rsp + 0x40], rax
lea rcx, [rax + 0x10]
mov qword [rsp + 0x50], rcx
mov r8d, 0x10
mov rdx, r13
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x10]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.1800094d0
test al, al
jne 0x180005a54
movzx ecx, byte [0x1800adadf]
cmp r15d, r12d
jne 0x180004895
test cl, cl
je 0x180005a54
lea eax, [r15 - 2]
cmp eax, 1
jbe 0x1800048a6
test cl, cl
je 0x180005a54
lea rcx, [rbp + 0x1e0]
call fcn.1800029e0
movsd xmm1, qword [r14 + 0xcb0]
movss xmm2, dword [r14 + 0xcb8]
addss xmm2, dword [r14 + 0x132c]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
addss xmm0, dword [r14 + 0x1328]
movsd qword [rsp + 0x60], xmm1
addss xmm1, dword [r14 + 0x1324]
movd eax, xmm1
and eax, 0x7f800000
cmp eax, 0x7f800000
setne al
cmp al, 1
jne 0x180004945
movd eax, xmm0
and eax, 0x7f800000
cmp eax, 0x7f800000
setne al
cmp al, 1
jne 0x180004945
movd eax, xmm2
and eax, 0x7f800000
cmp eax, 0x7f800000
setne al
cmp al, 1
jne 0x180004945
movss dword [rbp + 0x1f0], xmm1
movss dword [rbp + 0x1f4], xmm0
movss dword [rbp + 0x1f8], xmm2
jmp 0x180004947
xor al, al
mov byte [rbp + 0x1fc], al
cmp byte [rbp + 0x1ec], 0
je 0x180005a54
test al, al
je 0x180005a54
mov r8d, 6
mov rdx, r14
lea rcx, [rbp + 0x70]
call fcn.180008b30
mov r8d, 5
mov rdx, r14
lea rcx, [rbp + 0x2a8]
call fcn.180008b30
mov r8d, 4
mov rdx, r14
lea rcx, [rbp + 0x2b8]
call fcn.180008b30
mov r8d, 2
mov rdx, r14
lea rcx, [rbp + 0x2c8]
call fcn.180008b30
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp + 0x278]
call fcn.180008b30
mov r8d, 8
mov rdx, r14
lea rcx, [rbp + 0x2d8]
call fcn.180008b30
mov r8d, 9
mov rdx, r14
lea rcx, [rbp + 0x2e8]
call fcn.180008b30
mov r8d, 0xa
mov rdx, r14
lea rcx, [rbp + 0x2f8]
call fcn.180008b30
mov r8d, 0xd
mov rdx, r14
lea rcx, [rbp + 0x208]
call fcn.180008b30
mov r8d, 0xe
mov rdx, r14
lea rcx, [rbp + 0x228]
call fcn.180008b30
mov r8d, 0xf
mov rdx, r14
lea rcx, [rbp + 0x238]
call fcn.180008b30
mov r8d, 0x16
mov rdx, r14
lea rcx, [rbp + 0x248]
call fcn.180008b30
mov r8d, 0x17
mov rdx, r14
lea rcx, [rbp + 0x258]
call fcn.180008b30
mov r8d, 0x18
mov rdx, r14
lea rcx, [rbp + 0x268]
call fcn.180008b30
mov r8d, 0x19
mov rdx, r14
lea rcx, [rbp + 0x218]
call fcn.180008b30
mov r8d, 0x1a
mov rdx, r14
lea rcx, [rbp + 0x288]
call fcn.180008b30
mov r8d, 0x1b
mov rdx, r14
lea rcx, [rbp + 0x298]
call fcn.180008b30
mov qword [rbp + 0x60], 0
mov qword [rbp - 0x80], 0
mov qword [rbp - 0x70], 0
mov qword [rbp - 0x60], 0
mov qword [rbp - 0x50], 0
mov qword [rsp + 0x70], 0
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x20], 0
mov qword [rbp - 0x10], 0
mov qword [rbp], 0
mov qword [rbp + 0x10], 0
mov qword [rbp + 0x20], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x50], 0
mov rax, qword [0x1800ada40]
movss xmm7, dword [rax + 0x10]
movss xmm6, dword [rax + 0x14]
mov r8, qword [0x1800b0298]
add r8, qword [0x1800b02a8]
movsd xmm0, qword [rbp + 0x70]
movsd qword [rbp + 0x80], xmm0
mov eax, dword [rbp + 0x78]
mov dword [rbp + 0x88], eax
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x80]
call fcn.18004a060
movzx ebx, al
movsd xmm0, qword [rbp + 0x2a8]
movsd qword [rbp + 0x90], xmm0
mov ecx, dword [rbp + 0x2b0]
mov dword [rbp + 0x98], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x90]
call fcn.18004a060
movzx r14d, al
movsd xmm0, qword [rbp + 0x2b8]
movsd qword [rbp + 0xa0], xmm0
mov ecx, dword [rbp + 0x2c0]
mov dword [rbp + 0xa8], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0xa0]
call fcn.18004a060
movzx r15d, al
movsd xmm0, qword [rbp + 0x2c8]
movsd qword [rbp + 0xb0], xmm0
mov ecx, dword [rbp + 0x2d0]
mov dword [rbp + 0xb8], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0xb0]
call fcn.18004a060
movzx r12d, al
movsd xmm0, qword [rbp + 0x278]
movsd qword [rbp + 0xc0], xmm0
mov ecx, dword [rbp + 0x280]
mov dword [rbp + 0xc8], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xc0]
call fcn.18004a060
movzx r13d, al
movsd xmm0, qword [rbp + 0x2d8]
movsd qword [rbp + 0xd0], xmm0
mov ecx, dword [rbp + 0x2e0]
mov dword [rbp + 0xd8], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0xd0]
call fcn.18004a060
mov byte [rsp + 0x30], al
movsd xmm0, qword [rbp + 0x2e8]
movsd qword [rbp + 0x180], xmm0
mov ecx, dword [rbp + 0x2f0]
mov dword [rbp + 0x188], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x180]
call fcn.18004a060
mov byte [rsp + 0x31], al
movsd xmm0, qword [rbp + 0x2f8]
movsd qword [rbp + 0xe0], xmm0
mov ecx, dword [rbp + 0x300]
mov dword [rbp + 0xe8], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0xe0]
call fcn.18004a060
mov byte [rsp + 0x32], al
movsd xmm0, qword [rbp + 0x208]
movsd qword [rbp + 0xf0], xmm0
mov ecx, dword [rbp + 0x210]
mov dword [rbp + 0xf8], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xf0]
call fcn.18004a060
mov byte [rsp + 0x33], al
movsd xmm0, qword [rbp + 0x228]
movsd qword [rbp + 0x100], xmm0
mov ecx, dword [rbp + 0x230]
mov dword [rbp + 0x108], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x100]
call fcn.18004a060
mov byte [rsp + 0x34], al
movsd xmm0, qword [rbp + 0x238]
movsd qword [rbp + 0x110], xmm0
mov ecx, dword [rbp + 0x240]
mov dword [rbp + 0x118], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x110]
call fcn.18004a060
mov byte [rsp + 0x35], al
movsd xmm0, qword [rbp + 0x248]
movsd qword [rbp + 0x120], xmm0
mov ecx, dword [rbp + 0x250]
mov dword [rbp + 0x128], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp]
lea rcx, [rbp + 0x120]
call fcn.18004a060
mov byte [rsp + 0x36], al
movsd xmm0, qword [rbp + 0x258]
movsd qword [rbp + 0x130], xmm0
mov ecx, dword [rbp + 0x260]
mov dword [rbp + 0x138], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x130]
call fcn.18004a060
mov byte [rsp + 0x37], al
movsd xmm0, qword [rbp + 0x268]
movsd qword [rbp + 0x140], xmm0
mov ecx, dword [rbp + 0x270]
mov dword [rbp + 0x148], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x140]
call fcn.18004a060
mov byte [rsp + 0x38], al
movsd xmm0, qword [rbp + 0x218]
movsd qword [rbp + 0x150], xmm0
mov ecx, dword [rbp + 0x220]
mov dword [rbp + 0x158], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x150]
call fcn.18004a060
mov byte [rsp + 0x39], al
movsd xmm0, qword [rbp + 0x288]
movsd qword [rbp + 0x160], xmm0
mov ecx, dword [rbp + 0x290]
mov dword [rbp + 0x168], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x160]
call fcn.18004a060
mov byte [rsp + 0x3a], al
movsd xmm0, qword [rbp + 0x298]
movsd qword [rbp + 0x170], xmm0
mov ecx, dword [rbp + 0x2a0]
mov dword [rbp + 0x178], ecx
movss dword [rsp + 0x20], xmm6
movaps xmm3, xmm7
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x170]
call fcn.18004a060
mov byte [rsp + 0x3b], al
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x360]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1fc], 0
je 0x180005bc6
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x1f0]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x360]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x470]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2a8]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x470]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x580]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2b8]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x580]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x690]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2c8]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x690]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x7a0]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x278]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x7a0]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x8b0]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2d8]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x8b0]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x9c0]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2e8]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x9c0]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xad0]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x2f8]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0xad0]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xbe0]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x208]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0xbe0]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xcf0]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x228]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0xcf0]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xe00]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x238]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0xe00]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xf10]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x248]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0xf10]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1020]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x258]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1020]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1130]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x268]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1130]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1240]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x218]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1240]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1350]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x288]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1350]
mov rcx, qword [rax]
call fcn.1800020f0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1460]
call sub.VCRUNTIME140.dll_memset
call fcn.180002520
cmp byte [rbp + 0x1ec], 0
je 0x180005bc6
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x298]
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x1460]
mov rcx, qword [rax]
call fcn.1800020f0
movss xmm0, dword [rbp + 0x40c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x51c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x62c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x73c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x84c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x95c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0xa6c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0xb7c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0xc8c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0xd9c]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0xeac]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0xfbc]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x10cc]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x11dc]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x12ec]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x13fc]
comiss xmm0, xmm10
ja 0x180005514
movss xmm0, dword [rbp + 0x150c]
comiss xmm0, xmm10
ja 0x180005514
mov r12d, dword [rbp + 0x1a4]
jmp 0x180005a54
test bl, bl
jne 0x18000558c
test r14b, r14b
jne 0x18000558c
test r15b, r15b
jne 0x18000558c
test r12b, r12b
jne 0x18000558c
test r13b, r13b
jne 0x18000558c
cmp byte [rsp + 0x30], r13b
jne 0x18000558c
cmp byte [rsp + 0x31], r13b
jne 0x18000558c
cmp byte [rsp + 0x32], r13b
jne 0x18000558c
cmp byte [rsp + 0x33], r13b
jne 0x18000558c
cmp byte [rsp + 0x34], r13b
jne 0x18000558c
cmp byte [rsp + 0x35], r13b
jne 0x18000558c
cmp byte [rsp + 0x36], r13b
jne 0x18000558c
cmp byte [rsp + 0x37], r13b
jne 0x18000558c
cmp byte [rsp + 0x38], r13b
jne 0x18000558c
cmp byte [rsp + 0x39], r13b
jne 0x18000558c
cmp byte [rsp + 0x3a], r13b
jne 0x18000558c
cmp byte [rsp + 0x3b], r13b
jne 0x18000558c
mov r12d, dword [rbp + 0x1a4]
jmp 0x180005a54
mov rax, qword [0x1800ada40]
movss xmm7, dword [rax + 0x10]
movss xmm6, dword [rax + 0x14]
mulss xmm6, xmm12
mulss xmm7, xmm12
movaps xmm9, xmm7
subss xmm9, xmm8
movss xmm1, dword [rbp + 0x60]
comiss xmm1, xmm9
jbe 0x1800055f6
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800055f6
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp + 0x64]
comiss xmm1, xmm0
jbe 0x1800055f6
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800055f6
lea rcx, [0x18004ee68]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x80]
comiss xmm1, xmm9
jbe 0x18000563c
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000563c
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0x7c]
comiss xmm1, xmm0
jbe 0x18000563c
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000563c
lea rcx, [0x18004ee6c]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x70]
comiss xmm1, xmm9
jbe 0x180005682
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005682
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0x6c]
comiss xmm1, xmm0
jbe 0x180005682
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005682
lea rcx, [0x18004ee70]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x60]
comiss xmm1, xmm9
jbe 0x1800056c8
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800056c8
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0x5c]
comiss xmm1, xmm0
jbe 0x1800056c8
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800056c8
lea rcx, [0x18004ee74]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x50]
comiss xmm1, xmm9
jbe 0x18000570e
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000570e
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0x4c]
comiss xmm1, xmm0
jbe 0x18000570e
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000570e
lea rcx, [0x18004ee78]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rsp + 0x70]
comiss xmm1, xmm9
jbe 0x180005756
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005756
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rsp + 0x74]
comiss xmm1, xmm0
jbe 0x180005756
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005756
lea rcx, [0x18004ee7c]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x40]
comiss xmm1, xmm9
jbe 0x18000579c
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000579c
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0x3c]
comiss xmm1, xmm0
jbe 0x18000579c
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000579c
lea rcx, [0x18004ee80]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x30]
comiss xmm1, xmm9
jbe 0x1800057e2
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800057e2
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0x2c]
comiss xmm1, xmm0
jbe 0x1800057e2
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800057e2
lea rcx, [0x18004ee84]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x20]
comiss xmm1, xmm9
jbe 0x180005828
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005828
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0x1c]
comiss xmm1, xmm0
jbe 0x180005828
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005828
lea rcx, [0x18004ee88]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp - 0x10]
comiss xmm1, xmm9
jbe 0x18000586e
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000586e
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp - 0xc]
comiss xmm1, xmm0
jbe 0x18000586e
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000586e
lea rcx, [0x18004ee8c]
call fcn.180001690
mov sil, 1
comiss xmm11, xmm9
jbe 0x1800058ad
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm11
jbe 0x1800058ad
movaps xmm0, xmm6
subss xmm0, xmm8
comiss xmm11, xmm0
jbe 0x1800058ad
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm11
jbe 0x1800058ad
lea rcx, [0x18004ee90]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp]
comiss xmm1, xmm9
jbe 0x1800058f3
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800058f3
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp + 4]
comiss xmm1, xmm0
jbe 0x1800058f3
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800058f3
lea rcx, [0x18004ee94]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp + 0x10]
comiss xmm1, xmm9
jbe 0x180005939
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005939
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp + 0x14]
comiss xmm1, xmm0
jbe 0x180005939
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005939
lea rcx, [0x18004ee98]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp + 0x20]
comiss xmm1, xmm9
jbe 0x18000597f
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000597f
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp + 0x24]
comiss xmm1, xmm0
jbe 0x18000597f
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x18000597f
lea rcx, [0x18004ee9c]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp + 0x30]
comiss xmm1, xmm9
jbe 0x1800059c5
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800059c5
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp + 0x34]
comiss xmm1, xmm0
jbe 0x1800059c5
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x1800059c5
lea rcx, [0x18004eea0]
call fcn.180001690
mov sil, 1
movss xmm1, dword [rbp + 0x40]
comiss xmm1, xmm9
jbe 0x180005a0b
movaps xmm0, xmm7
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005a0b
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp + 0x44]
comiss xmm1, xmm0
jbe 0x180005a0b
movaps xmm0, xmm6
addss xmm0, xmm8
comiss xmm0, xmm1
jbe 0x180005a0b
lea rcx, [0x18004eea4]
call fcn.180001690
mov sil, 1
movss xmm0, dword [rbp + 0x50]
comiss xmm0, xmm9
jbe 0x180005a4b
addss xmm7, xmm8
comiss xmm7, xmm0
jbe 0x180005a4b
movaps xmm0, xmm6
subss xmm0, xmm8
movss xmm1, dword [rbp + 0x54]
comiss xmm1, xmm0
jbe 0x180005a4b
addss xmm6, xmm8
comiss xmm6, xmm1
jbe 0x180005a4b
lea rcx, [0x18004eea8]
call fcn.180001690
mov sil, 1
mov r12d, dword [rbp + 0x1a4]
jmp 0x180005a54
mov eax, dword [rsp + 0x58]
inc eax
mov dword [rsp + 0x58], eax
cmp eax, 0x40
jl 0x180004690
test sil, sil
je 0x180005b6e
mov ecx, dword [0x1800600b4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180005b6e
cmp byte [0x1800600cd], 0
jne 0x180005b6e
call fcn.18004a1e0
test al, al
je 0x180005b6e
lea rcx, [rsp + 0x60]
call fcn.1800023a0
mov ecx, dword [0x1800ad984]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x1800b0638], ecx
jle 0x180005af9
lea rcx, [0x1800b0638]
call fcn.18004b1c8
cmp dword [0x1800b0638], 0xffffffff
jne 0x180005af9
lea rcx, [0x1800b0640]
call fcn.1800023a0
lea rcx, [0x1800b0638]
call fcn.18004b15c
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
sub rcx, qword [0x1800b0640]
movabs rax, 0x431bde82d7b634db
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, dword [0x1800adad8]
cmp rdx, rax
jl 0x180005b6e
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 2
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 4
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [0x1800b0640], rbx
mov rcx, qword [rbp + 0x1570]
xor rcx, rsp
call fcn.18004b100
lea r11, [rsp + 0x1700]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180002490
nop
int3