Function at 0x180073dd0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x7f8]
sub rsp, 0x8b8
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
xor edi, edi
mov dword [rbp + 0x818], edi
mov eax, dword [0x1800ca3cc]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss dword [rbp + 0x808], xmm6
mov eax, dword [0x1800ca528]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
movss dword [rbp + 0x810], xmm7
movd xmm8, dword [0x1800c8b14]
cvtdq2ps xmm8, xmm8
call fcn.180065f80
mov rbx, rax
mov r14d, 4
mov r13d, r14d
mov qword [rsp + 0x60], r13
mov esi, dword [0x1800c9d98]
test rax, rax
jne 0x180073ea0
mov eax, edi
jmp 0x180073efb
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rsi*8]
mov eax, dword [rcx + r14]
cmp dword [0x1800cbcd0], eax
jle 0x180073eeb
lea rcx, [0x1800cbcd0]
call fcn.180081210
cmp dword [0x1800cbcd0], 0xffffffff
jne 0x180073eeb
mov ecx, 0xae00109b
call fcn.180062060
mov qword [0x1800cb668], rax
lea rcx, [0x1800cbcd0]
call fcn.1800811b0
mov rax, qword [0x1800cb668]
mov rax, qword [rbx + rax]
mov qword [rsp + 0x60], r13
mov qword [rbp + 0x800], rax
mov r12d, edi
mov rax, qword [rax + 0x28]
movabs r9, 0x7fffffff0000
cmp dword [rax + 0x10], edi
jle 0x1800742a1
mov rdx, rsi
mov qword [rsp + 0x70], rdx
mov r8, qword gs:[0x58]
mov r15d, 0x20
mov r13, qword [rbp + 0x800]
nop word [rax + rax]
mov rax, qword [rax + 0x18]
mov rbx, qword [r15 + rax]
test rbx, rbx
je 0x180074263
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x180074263
mov rcx, qword [rax + 0x30]
test rcx, rcx
je 0x180074263
add rcx, 0x60
cmp rcx, 0x40000
jbe 0x180074263
lea rax, [rcx + 8]
cmp rax, r9
jae 0x180074263
mov rdi, qword [rcx]
test rdi, rdi
je 0x180074263
mov esi, r14d
mov r14, qword [r8 + rdx*8]
mov eax, dword [rsi + r14]
cmp dword [0x1800cbc28], eax
jle 0x180073fe4
lea rcx, [0x1800cbc28]
call fcn.180081210
cmp dword [0x1800cbc28], 0xffffffff
jne 0x180073fda
mov ecx, 0x33f7a6a3
call fcn.180062060
mov qword [0x1800cb850], rax
lea rcx, [0x1800cbc28]
call fcn.1800811b0
movabs r9, 0x7fffffff0000
mov rax, qword [0x1800cb850]
cmp byte [rax + rbx], 0
jne 0x18007425d
mov eax, dword [rsi + r14]
cmp dword [0x1800cbc98], eax
jle 0x180074036
lea rcx, [0x1800cbc98]
call fcn.180081210
cmp dword [0x1800cbc98], 0xffffffff
jne 0x180074036
mov ecx, 0x8bb6774c
call fcn.1800606a0
mov rdx, qword [rax]
mov qword [0x1800cbc78], rdx
lea rcx, [0x1800cbc98]
call fcn.1800811b0
mov rax, qword [0x1800cbc78]
mov rcx, rbx
call rax
test rax, rax
je 0x180074253
lea rdx, str.Local
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180074253
mov rcx, rbx
call fcn.180066100
test al, al
je 0x180074253
mov rcx, qword [0x1800ca628]
add rcx, rbx
cmp rcx, 0x40000
jbe 0x18007409e
lea rax, [rcx + 4]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x18007409e
mov edi, dword [rcx]
jmp 0x1800740a0
xor edi, edi
shr edi, 6
and dil, 1
mov eax, dword [rsi + r14]
cmp dword [0x1800cb590], eax
jle 0x1800740e5
lea rcx, [0x1800cb590]
call fcn.180081210
cmp dword [0x1800cb590], 0xffffffff
jne 0x1800740e5
mov ecx, 0x1f15eb59
call fcn.180062060
mov qword [0x1800cb5a0], rax
lea rcx, [0x1800cb590]
call fcn.1800811b0
movaps xmm0, xmmword [0x180097ca0]
movaps xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.180071010
cmp byte [0x1800ca730], 0
je 0x18007413e
mov rcx, qword [0x1800ca628]
add rcx, rbx
cmp rcx, 0x40000
jbe 0x180074131
lea rax, [rcx + 4]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x180074131
mov eax, dword [rcx]
jmp 0x180074133
xor eax, eax
shr eax, 4
test al, 1
jne 0x180074253
test dil, dil
je 0x180074150
cmp byte [0x1800ca731], 0
jne 0x180074253
lea rcx, [rbx + 0x4c0]
cmp rcx, 0x40000
jbe 0x1800741a1
lea rax, [rcx + 8]
movabs r9, 0x7fffffff0000
cmp rax, r9
jae 0x1800741a1
mov rcx, qword [rcx]
add rcx, 0x320
cmp rcx, 0x40000
jbe 0x1800741a1
lea rax, [rcx + 1]
cmp rax, r9
jae 0x1800741a1
cmp byte [rcx], 0
je 0x1800741a1
cmp byte [0x1800ca732], 0
jne 0x18007425d
call fcn.180067390
mov rcx, qword [0x1800ca6b0]
mov edx, dword [rcx + rax]
test edx, edx
je 0x1800741c6
cmp dword [rcx + rbx], edx
jne 0x1800741c6
cmp byte [0x1800ca733], 0
jne 0x180074253
mov rcx, rbx
call fcn.18006fea0
movaps xmm7, xmm0
comiss xmm8, xmm7
jbe 0x180074253
mov eax, dword [rsi + r14]
cmp dword [0x1800cb590], eax
jle 0x180074215
lea rcx, [0x1800cb590]
call fcn.180081210
cmp dword [0x1800cb590], 0xffffffff
jne 0x180074215
mov ecx, 0x1f15eb59
call fcn.180062060
mov qword [0x1800cb5a0], rax
lea rcx, [0x1800cb590]
call fcn.1800811b0
mov rax, qword [0x1800cb5a0]
cmp dword [rax + rbx], 0
jne 0x180074253
mov rcx, rbx
call fcn.18006fea0
movaps xmm6, xmm0
mov rcx, qword [0x1800ca468]
call fcn.18006fea0
comiss xmm6, xmm0
jb 0x180074248
cmp qword [0x1800ca468], 0
jne 0x180074253
movaps xmm8, xmm7
mov qword [0x1800ca468], rbx
movabs r9, 0x7fffffff0000
mov r14d, 4
inc r12d
add r15, 8
mov rax, qword [r13 + 0x28]
cmp r12d, dword [rax + 0x10]
mov rdx, qword [rsp + 0x70]
mov r8, qword gs:[0x58]
jl 0x180073f40
movss xmm6, dword [rbp + 0x808]
movss xmm7, dword [rbp + 0x810]
mov r13, qword [rsp + 0x60]
mov esi, dword [0x1800c9d98]
mov rdi, qword [0x1800ca468]
xorps xmm9, xmm9
test rdi, rdi
je 0x180074788
mov edx, esi
mov rax, qword gs:[0x58]
mov esi, r14d
mov r14, qword [rax + rdx*8]
mov eax, dword [r14 + rsi]
cmp dword [0x1800cb590], eax
jle 0x180074305
lea rcx, [0x1800cb590]
call fcn.180081210
cmp dword [0x1800cb590], 0xffffffff
jne 0x180074305
mov ecx, 0x1f15eb59
call fcn.180062060
mov qword [0x1800cb5a0], rax
lea rcx, [0x1800cb590]
call fcn.1800811b0
mov rcx, qword [0x1800ca468]
mov rax, qword [0x1800cb5a0]
cmp dword [rax + rdi], 0
mov r12d, 0
cmovne rcx, r12
mov qword [0x1800ca468], rcx
lea rbx, [rdi + 0x128]
mov r8d, 0x198
cmp rbx, 0x40000
jbe 0x1800745cc
lea rax, [rbx + 8]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x1800745cc
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1800745cc
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x1800745cc
mov rcx, qword [rcx]
add rcx, r8
cmp rcx, 0x40000
jbe 0x1800745cc
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x1800745cc
mov r15, qword [rcx]
test r15, r15
je 0x1800745cc
mov eax, dword [r14 + rsi]
cmp dword [0x1800cb8f8], eax
jle 0x1800743e7
lea rcx, [0x1800cb8f8]
call fcn.180081210
cmp dword [0x1800cb8f8], 0xffffffff
jne 0x1800743e7
mov ecx, 0x56e64b7d
call fcn.1800606a0
mov rcx, qword [rax]
mov qword [0x1800cb7f8], rcx
lea rcx, [0x1800cb8f8]
call fcn.1800811b0
mov qword [rbp + 0x10], 0
mov dword [rbp + 0x18], 0
mov r9, r15
lea r8, [rbp + 0x10]
mov rdx, qword [0x1800cb7f8]
lea rcx, [rbp + 0x40]
call fcn.1800788a0
movss xmm0, dword [rbp + 0x40]
ucomiss xmm0, xmm9
je 0x1800745cc
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1800745cc
lea rax, [rcx + 8]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x1800745cc
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1800745cc
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x1800745cc
mov r15, qword [rcx]
test r15, r15
je 0x1800745cc
mov eax, dword [r14 + rsi]
cmp dword [0x1800cb8f8], eax
jle 0x1800744b8
lea rcx, [0x1800cb8f8]
call fcn.180081210
cmp dword [0x1800cb8f8], 0xffffffff
jne 0x1800744b8
mov ecx, 0x56e64b7d
call fcn.1800606a0
mov rcx, qword [rax]
mov qword [0x1800cb7f8], rcx
lea rcx, [0x1800cb8f8]
call fcn.1800811b0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x78], 0
mov r9, r15
lea r8, [rsp + 0x70]
mov rdx, qword [0x1800cb7f8]
lea rcx, [rbp + 0x30]
call fcn.1800788a0
movss xmm0, dword [rbp + 0x34]
ucomiss xmm0, xmm9
je 0x1800745cc
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1800745cc
lea rax, [rcx + 8]
movabs rdx, 0x7fffffff0000
cmp rax, rdx
jae 0x1800745cc
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x1800745cc
lea rax, [rcx + 8]
cmp rax, rdx
jae 0x1800745cc
mov r15, qword [rcx]
test r15, r15
je 0x1800745cc
mov eax, dword [r14 + rsi]
cmp dword [0x1800cb8f8], eax
jle 0x18007458c
lea rcx, [0x1800cb8f8]
call fcn.180081210
cmp dword [0x1800cb8f8], 0xffffffff
jne 0x18007458c
mov ecx, 0x56e64b7d
call fcn.1800606a0
mov rcx, qword [rax]
mov qword [0x1800cb7f8], rcx
lea rcx, [0x1800cb8f8]
call fcn.1800811b0
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x68], 0
mov r9, r15
lea r8, [rbp - 0x70]
mov rdx, qword [0x1800cb7f8]
lea rcx, [rbp + 0x1c0]
call fcn.1800788a0
movss xmm0, dword [rbp + 0x1c8]
ucomiss xmm0, xmm9
je 0x1800745cc
mov rcx, qword [0x1800ca468]
jmp 0x1800745d6
mov rcx, r12
mov qword [0x1800ca468], rcx
lea rdx, [rdi + 0x4c0]
movabs r15, 0x7fffffff0000
cmp rdx, 0x40000
jbe 0x18007462c
lea rax, [rdx + 8]
cmp rax, r15
jae 0x18007462c
mov rdx, qword [rdx]
add rdx, 0x320
cmp rdx, 0x40000
jbe 0x18007462c
lea rax, [rdx + 1]
cmp rax, r15
jae 0x18007462c
cmp byte [rdx], 0
je 0x18007462c
cmp byte [0x1800ca732], 0
cmovne rcx, r12
mov qword [0x1800ca468], rcx
mov rdx, qword [0x1800ca628]
add rdx, rdi
cmp rdx, 0x40000
jbe 0x18007464c
lea rax, [rdx + 4]
cmp rax, r15
jae 0x18007464c
mov eax, dword [rdx]
jmp 0x18007464f
mov eax, r12d
shr eax, 4
test al, 1
je 0x180074668
cmp byte [0x1800ca730], 0
cmovne rcx, r12
mov qword [0x1800ca468], rcx
call fcn.180067390
mov rcx, qword [0x1800ca6b0]
mov edx, dword [rcx + rax]
test edx, edx
je 0x180074699
cmp dword [rcx + rdi], edx
jne 0x180074699
mov rax, qword [0x1800ca468]
cmp byte [0x1800ca733], 0
cmovne rax, r12
mov qword [0x1800ca468], rax
cmp byte [0x1800ca472], 0
je 0x18007478b
cmp byte [0x1800ca477], 0
je 0x18007478b
mov edx, 0xd0
cmp dword [0x1800ca478], 0
mov eax, 0x198
cmove edx, eax
cmp rbx, 0x40000
jbe 0x1800746f7
lea rax, [rbx + 8]
cmp rax, r15
jae 0x1800746f7
mov rcx, qword [rbx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1800746f7
lea rax, [rcx + 8]
cmp rax, r15
jae 0x1800746f7
mov rax, qword [rcx]
jmp 0x1800746fa
mov rax, r12
lea rcx, [rdx + rax]
cmp rcx, 0x40000
jbe 0x18007478b
lea rax, [rcx + 8]
cmp rax, r15
jae 0x18007478b
mov rbx, qword [rcx]
test rbx, rbx
je 0x18007478b
mov eax, dword [r14 + rsi]
cmp dword [0x1800cb8f8], eax
jle 0x18007475d
lea rcx, [0x1800cb8f8]
call fcn.180081210
cmp dword [0x1800cb8f8], 0xffffffff
jne 0x18007475d
mov ecx, 0x56e64b7d
call fcn.1800606a0
mov rdx, qword [rax]
mov qword [0x1800cb7f8], rdx
lea rcx, [0x1800cb8f8]
call fcn.1800811b0
mov qword [rbp - 0x60], 0
mov dword [rbp - 0x58], 0
mov r9, rbx
lea r8, [rbp - 0x60]
mov rdx, qword [0x1800cb7f8]
lea rcx, [rbp + 0x300]
call fcn.1800788a0
jmp 0x18007478b
xor r12d, r12d
mov rcx, rdi
call fcn.18006fea0
movd xmm1, dword [0x1800c8b14]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jae 0x1800747aa
mov qword [0x1800ca468], r12
mov rsi, qword [0x1800ca468]
cmp byte [0x1800ca487], 0
je 0x180074d9f
cmp byte [0x1800ca47d], 0
je 0x180074992
movss xmm0, dword [0x1800ca738]
ucomiss xmm0, xmm9
jne 0x1800747f9
movss xmm0, dword [0x1800ca73c]
ucomiss xmm0, xmm9
jne 0x1800747f9
movss xmm0, dword [0x1800ca740]
ucomiss xmm0, xmm9
je 0x180074992
test rsi, rsi
je 0x180074d9f
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x410]
call sub.VCRUNTIME140.dll_memset
mov r14d, dword [0x1800c9d98]
mov rax, qword gs:[0x58]
mov rcx, qword [rax + r14*8]
mov eax, dword [rcx + r13]
cmp dword [0x1800cbdb8], eax
jle 0x18007487c
lea rcx, [0x1800cbdb8]
call fcn.180081210
cmp dword [0x1800cbdb8], 0xffffffff
jne 0x18007487c
mov ecx, 0x3f7234d0
call fcn.180062060
mov qword [0x1800cb570], rax
lea rcx, [0x1800cbdb8]
call fcn.1800811b0
mov rax, qword [0x1800cb570]
mov r8, qword [rax + rsi]
add r8, 0x14
lea rdx, str._ls_manipulated
lea rcx, [rbp + 0x410]
call fcn.1800790c0
lea rax, [rbp + 0x410]
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp byte [rax + rdx], 0
jne 0x1800748b0
mov rcx, qword [rbp - 0x40]
mov r8, qword [rbp - 0x38]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x1800748f9
lea rdi, [rdx + rcx]
mov qword [rbp - 0x40], rdi
lea rbx, [rbp - 0x50]
cmp r8, 0x10
cmovae rbx, qword [rbp - 0x50]
add rcx, rbx
mov r8, rdx
lea rdx, [rbp + 0x410]
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x18007490e
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x410]
lea rcx, [rbp - 0x50]
call fcn.18004f590
lea r9, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae r9, qword [rbp - 0x50]
movaps xmm0, xmmword [0x180097bc0]
movaps xmmword [rbp + 0x20], xmm0
lea r8, [rbp + 0x20]
movaps xmm1, xmm7
movd edx, xmm1
movaps xmm0, xmm6
movd ecx, xmm0
call fcn.180070370
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18007497d
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180074978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180074978
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800816dc
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
jmp 0x180074da6
test rsi, rsi
je 0x180074d9f
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov ecx, dword [0x1800c9d98]
mov rax, qword gs:[0x58]
mov rbx, qword [rax + rcx*8]
mov eax, dword [rbx + r13]
cmp dword [0x1800cbdb8], eax
jle 0x180074a00
lea rcx, [0x1800cbdb8]
call fcn.180081210
cmp dword [0x1800cbdb8], 0xffffffff
jne 0x180074a00
mov ecx, 0x3f7234d0
call fcn.180062060
mov qword [0x1800cb570], rax
lea rcx, [0x1800cbdb8]
call fcn.1800811b0
mov rax, qword [0x1800cb570]
mov rdx, qword [rax + rsi]
add rdx, 0x14
lea rcx, [rbp + 0x160]
call fcn.180077260
nop
mov rdx, qword [rax]
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180074a46
lea rcx, [rbp + 0x180]
call fcn.18004d0c0
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180074a80
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x510]
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rbx + r13]
cmp dword [0x1800cbdb8], eax
jle 0x180074ad2
lea rcx, [0x1800cbdb8]
call fcn.180081210
cmp dword [0x1800cbdb8], 0xffffffff
jne 0x180074ad2
mov ecx, 0x3f7234d0
call fcn.180062060
mov qword [0x1800cb570], rax
lea rcx, [0x1800cbdb8]
call fcn.1800811b0
mov rax, qword [0x1800cb570]
mov rdx, qword [rax + rsi]
add rdx, 0x14
lea rcx, [rbp + 0x138]
call fcn.180077260
mov r15, rax
mov rcx, qword [rax]
mov rcx, qword [rcx - 0x18]
test rcx, rcx
je 0x180074b0a
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rcx, rax
test rax, rax
jne 0x180074b1b
call fcn.18005a960
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x20]
mov rcx, rax
test rcx, rcx
je 0x18007669c
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x50], rbx
mov dword [rbp + 0x818], 1
mov r15, qword [r15]
movsxd r12, dword [r15 - 0x10]
lea rdx, [0x180087776]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rdx + rdi], 0
jne 0x180074b51
lea r14d, [r12 + rdi]
test r14d, r14d
js 0x180076691
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, r14d
or eax, ecx
jge 0x180074b90
mov edx, r14d
lea rcx, [rbp + 0x50]
call fcn.180077e10
mov rbx, qword [rbp + 0x50]
lea rdx, [0x180087776]
movsxd rdi, edi
test rdi, rdi
je 0x180074bbc
test rbx, rbx
jne 0x180074bb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
jmp 0x180074bbc
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8, r12
lea rcx, [rdi + rbx]
test r12d, r12d
je 0x180074bf5
test rcx, rcx
je 0x180074be3
test r15, r15
je 0x180074bdc
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
jmp 0x180074bf5
xor edx, edx
call sub.VCRUNTIME140.dll_memset
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
cmp r14d, dword [rbx - 0xc]
jg 0x180076691
mov dword [rbx - 0x10], r14d
movsxd rax, r14d
mov byte [rax + rbx], 0
mov rdx, rbx
lea rcx, [rbp + 0x510]
call fcn.1800790c0
nop
mov eax, 0xffffffff
lock xadd dword [rbx - 8], eax
sub eax, 1
jg 0x180074c38
mov rcx, qword [rbx - 0x18]
mov rax, qword [rcx]
lea rdx, [rbx - 0x18]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x138]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180074c5b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x510]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180074c70
mov rcx, qword [rbp - 0x20]
mov rdx, qword [rbp - 0x18]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180074cbc
lea rax, [rcx + rdi]
mov qword [rbp - 0x20], rax
lea rbx, [rbp - 0x30]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x30]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x510]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x180074cd4
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x510]
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.18004f590
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae r9, qword [rbp - 0x30]
movaps xmm0, xmmword [0x180097ca0]
movaps xmmword [rbp + 0x2f0], xmm0
lea r8, [rbp + 0x2f0]
movaps xmm1, xmm7
movd edx, xmm1
movaps xmm0, xmm6
movd ecx, xmm0
call fcn.180070370
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x180074d50
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180074d4a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180074d4a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800816dc
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x180074d8e
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180074d89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180074d89
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800816dc
xor eax, eax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], al
mov r14d, dword [0x1800c9d98]
movss xmm13, dword [0x1800977b0]
movss xmm11, dword [0x180097998]
movss xmm14, dword [0x180097850]
movss xmm15, dword [0x1800977f0]
movss xmm7, dword [0x180097730]
movsd xmm8, qword [0x180097820]
cmp byte [0x1800ca4fc], 0
je 0x18007522f
call fcn.180067390
mov rcx, rax
call fcn.180078980
mov rbx, rax
test rax, rax
je 0x180074e0c
mov rcx, rax
call fcn.1800666f0
cmp eax, 0x407209f5
je 0x180074e4c
mov rcx, rbx
call fcn.1800666f0
cmp eax, 0xe93460ee
je 0x180074e4c
mov rcx, rbx
call fcn.1800666f0
cmp eax, 0x9b7f6dd1
je 0x180074e4c
mov rcx, rbx
call fcn.1800666f0
cmp eax, 0x643e3521
je 0x180074e4c
mov rcx, rbx
call fcn.1800666f0
cmp eax, 0xda95d4a2
jne 0x18007522f
test rbx, rbx
jne 0x180074e57
movaps xmm0, xmm9
jmp 0x180074eb1
mov ecx, r14d
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rcx + r13]
cmp dword [0x1800cbefc], eax
jle 0x180074ea5
lea rcx, [0x1800cbefc]
call fcn.180081210
cmp dword [0x1800cbefc], 0xffffffff
jne 0x180074ea5
mov ecx, 0x6c06da54
call fcn.180062060
mov qword [0x1800cbce0], rax
lea rcx, [0x1800cbefc]
call fcn.1800811b0
mov rax, qword [0x1800cbce0]
movss xmm0, dword [rax + rbx]
movss xmm2, dword [0x1800ca3e0]
comiss xmm2, xmm0
jae 0x18007522f
test rbx, rbx
jne 0x180074efc
movaps xmm6, xmm9
movaps xmm3, xmm9
movaps xmm1, xmm2
movaps xmm10, xmm2
xorps xmm10, xmmword [0x180097d30]
addss xmm6, xmm3
movaps xmm0, xmm2
subss xmm0, xmm3
comiss xmm0, xmm9
ja 0x180075024
minss xmm6, xmm1
jmp 0x180075028
mov ecx, r14d
mov rax, qword gs:[0x58]
mov rcx, qword [rax + rcx*8]
mov eax, dword [rcx + r13]
cmp dword [0x1800cbefc], eax
jle 0x180074f4a
lea rcx, [0x1800cbefc]
call fcn.180081210
cmp dword [0x1800cbefc], 0xffffffff
jne 0x180074f4a
mov ecx, 0x6c06da54
call fcn.180062060
mov qword [0x1800cbce0], rax
lea rcx, [0x1800cbefc]
call fcn.1800811b0
mov rax, qword [0x1800cbce0]
movss xmm10, dword [rax + rbx]
subss xmm10, dword [0x1800ca3e0]
mov ecx, r14d
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdi + r13]
cmp dword [0x1800cbb84], eax
jle 0x180074fae
lea rcx, [0x1800cbb84]
call fcn.180081210
cmp dword [0x1800cbb84], 0xffffffff
jne 0x180074fae
mov ecx, 0x5d491345
call fcn.180062060
mov qword [0x1800cbd20], rax
lea rcx, [0x1800cbb84]
call fcn.1800811b0
mov rax, qword [0x1800cbd20]
movss xmm6, dword [rax + rbx]
mov eax, dword [rdi + r13]
cmp dword [0x1800cbefc], eax
jle 0x180074ff8
lea rcx, [0x1800cbefc]
call fcn.180081210
cmp dword [0x1800cbefc], 0xffffffff
jne 0x180074ff8
mov ecx, 0x6c06da54
call fcn.180062060
mov qword [0x1800cbce0], rax
lea rcx, [0x1800cbefc]
call fcn.1800811b0
mov rax, qword [0x1800cbce0]
movss xmm3, dword [rax + rbx]
movss xmm2, dword [0x1800ca3e0]
movaps xmm1, xmm6
addss xmm1, xmm2
comiss xmm3, xmm9
jae 0x180074ede
maxss xmm1, xmm9
jmp 0x18007502b
maxss xmm6, xmm1
movaps xmm1, xmm6
subss xmm1, xmm2
divss xmm10, xmm1
addss xmm10, xmm7
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
comisd xmm0, xmm8
jb 0x18007522f
ucomiss xmm10, xmm9
je 0x18007522f
movaps xmm0, xmm10
addss xmm0, xmm10
comiss xmm10, xmm13
jae 0x180075078
mulss xmm0, xmm11
movss dword [rbp + 0x800], xmm0
movaps xmm12, xmm11
jmp 0x18007508f
movss dword [rbp + 0x800], xmm11
movaps xmm12, xmm14
subss xmm12, xmm0
mulss xmm12, xmm11
minss xmm10, xmm15
mov eax, dword [0x1800ca528]
cdq
sub eax, edx
sar eax, 1
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mov eax, dword [0x1800ca3cc]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
addss xmm8, xmm15
movss dword [rbp + 0x58], xmm7
movss dword [rbp + 0x5c], xmm8
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movss xmm3, dword [0x180097874]
movss xmm6, dword [0x1800978fc]
movaps xmm2, xmm6
lea rdx, [rbp + 0x58]
mov rcx, qword [0x1800cb808]
call fcn.18002d6b0
movaps xmm0, xmmword [0x180097c00]
movups xmmword [rbp + 0x1cc], xmm0
lea rcx, [rbp + 0x1cc]
call fcn.1800095f0
mov rbx, qword [0x1800cb808]
movss xmm0, dword [0x180097870]
movss dword [rsp + 0x28], xmm0
xor r13d, r13d
mov dword [rsp + 0x20], r13d
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18002be60
mov dword [rbx + 0x78], r13d
movss dword [rbp + 0x60], xmm7
movss dword [rbp + 0x64], xmm8
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
mulsd xmm0, qword [0x180097858]
cvtpd2ps xmm3, xmm0
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movaps xmm2, xmm6
lea rdx, [rbp + 0x60]
mov rcx, qword [0x1800cb808]
call fcn.18002d6b0
cvttss2si eax, dword [rbp + 0x800]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x180097718]
movss dword [rbp + 0x118], xmm0
cvttss2si eax, xmm12
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x180097718]
movss dword [rbp + 0x11c], xmm1
mov dword [rbp + 0x120], r13d
mov dword [rbp + 0x124], 0x3f800000
lea rcx, [rbp + 0x118]
call fcn.1800095f0
mov rbx, qword [0x1800cb808]
movss xmm12, dword [0x180097870]
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r13d
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18002be60
mov dword [rbx + 0x78], r13d
movss xmm7, dword [0x180097730]
movsd xmm8, qword [0x180097820]
jmp 0x18007523b
movss xmm12, dword [0x180097870]
xor r13d, r13d
mov qword [rbp - 0x80], 0
movss xmm0, dword [0x1800ca758]
ucomiss xmm0, xmm9
jne 0x180075271
movss xmm0, dword [0x1800ca75c]
ucomiss xmm0, xmm9
jne 0x180075271
movss xmm0, dword [0x1800ca760]
ucomiss xmm0, xmm9
je 0x180075431
movsd xmm0, qword [0x1800ca758]
movsd qword [rbp + 0x170], xmm0
mov eax, dword [0x1800ca760]
mov dword [rbp + 0x178], eax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x170]
call fcn.180067890
test al, al
je 0x180075431
movaps xmm0, xmmword [0x180097ab0]
movups xmmword [rbp + 0x1dc], xmm0
lea rcx, [rbp + 0x1dc]
call fcn.1800095f0
mov r14d, eax
movaps xmm0, xmmword [0x180097cc0]
movups xmmword [rbp + 0x1ec], xmm0
lea rcx, [rbp + 0x1ec]
call fcn.1800095f0
mov r15d, eax
movss xmm0, dword [rbp - 0x80]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [rbp - 0x7c]
movss dword [rsp + 0x64], xmm1
mov ecx, r14d
or ecx, eax
test ecx, 0xff000000
je 0x180075431
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
movss xmm2, dword [0x1800978ac]
lea rdx, [rsp + 0x60]
mov rcx, qword [0x1800cb808]
call fcn.18002d620
mov rcx, qword [0x1800cb808]
mov r8d, dword [rcx + 0x78]
lea ebx, [r8 - 1]
mov edi, dword [rcx + 0x34]
lea edx, [rbx + rbx*2]
call fcn.18002bbd0
mov rcx, qword [0x1800cb808]
mov rax, qword [rcx + 0x38]
movss xmm1, dword [rax]
movss xmm2, dword [rax + 4]
mov rax, qword [rcx + 0x48]
movsd xmm0, qword [rsp + 0x60]
movsd qword [rax], xmm0
mov rax, qword [rcx + 0x48]
movss dword [rax + 8], xmm1
movss dword [rax + 0xc], xmm2
mov rax, qword [rcx + 0x48]
mov dword [rax + 0x10], r15d
add qword [rcx + 0x48], 0x14
inc dword [rcx + 0x34]
movsxd r9, ebx
test ebx, ebx
jle 0x1800753d2
mov r8, r13
nop
mov rdx, qword [0x1800cb808]
mov rcx, qword [rdx + 0x80]
mov rax, qword [rdx + 0x48]
movsd xmm0, qword [rcx + r8*8]
movsd qword [rax], xmm0
mov rax, qword [rdx + 0x48]
movss dword [rax + 8], xmm1
movss dword [rax + 0xc], xmm2
mov rax, qword [rdx + 0x48]
mov dword [rax + 0x10], r14d
add qword [rdx + 0x48], 0x14
inc dword [rdx + 0x34]
inc r8
cmp r8, r9
jl 0x180075390
mov r9d, r13d
test ebx, ebx
jle 0x180075426
nop dword [rax]
mov r8, qword [0x1800cb808]
mov rax, qword [r8 + 0x50]
mov word [rax], di
add qword [r8 + 0x50], 2
mov rcx, qword [r8 + 0x50]
lea eax, [r9 + 1]
add ax, di
mov word [rcx], ax
add qword [r8 + 0x50], 2
mov rcx, qword [r8 + 0x50]
inc r9d
mov eax, r9d
cdq
idiv ebx
inc dx
add dx, di
mov word [rcx], dx
add qword [r8 + 0x50], 2
cmp r9d, ebx
jl 0x1800753e0
mov rax, qword [0x1800cb808]
mov dword [rax + 0x78], r13d
cmp byte [0x1800ca47f], 0
je 0x18007568e
mov ebx, dword [0x1800ca500]
mov edi, dword [0x1800ca4f8]
mov ecx, edi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18007545b
test ebx, ebx
je 0x180075476
mov ecx, edi
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
je 0x18007546d
cmp ebx, 1
je 0x180075476
cmp ebx, 2
jne 0x18007568e
mov ecx, dword [0x1800cc028]
test ecx, ecx
je 0x180075495
sub ecx, 1
je 0x180075495
cmp ecx, 1
je 0x180075495
movss xmm10, dword [rbp + 0x800]
jmp 0x18007549f
call qword [0x1800cc020]
movaps xmm10, xmm0
call fcn.180067390
mov rcx, rax
call fcn.180066f80
subss xmm10, dword [rax]
mulss xmm10, dword [0x180097808]
addss xmm10, xmm7
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
comisd xmm0, xmm8
jb 0x18007568e
ucomiss xmm10, xmm9
je 0x18007568e
movaps xmm0, xmm10
addss xmm0, xmm10
comiss xmm10, xmm13
jae 0x1800754fa
mulss xmm0, xmm11
movss dword [rbp + 0x800], xmm0
jmp 0x180075511
movss dword [rbp + 0x800], xmm11
subss xmm14, xmm0
mulss xmm14, xmm11
movaps xmm11, xmm14
minss xmm10, xmm15
mov eax, dword [0x1800ca528]
cdq
sub eax, edx
sar eax, 1
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mov eax, dword [0x1800ca3cc]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
subss xmm8, xmm15
movss dword [rbp + 0x68], xmm7
movss dword [rbp + 0x6c], xmm8
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movss xmm3, dword [0x180097874]
movss xmm6, dword [0x180097a44]
movaps xmm2, xmm6
lea rdx, [rbp + 0x68]
mov rcx, qword [0x1800cb808]
call fcn.18002d6b0
movaps xmm0, xmmword [0x180097c00]
movups xmmword [rbp + 0x1fc], xmm0
lea rcx, [rbp + 0x1fc]
call fcn.1800095f0
mov rbx, qword [0x1800cb808]
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r13d
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18002be60
mov dword [rbx + 0x78], r13d
movss dword [rbp + 0x70], xmm7
movss dword [rbp + 0x74], xmm8
xorps xmm0, xmm0
cvtss2sd xmm0, xmm10
mulsd xmm0, qword [0x180097858]
cvtpd2ps xmm3, xmm0
mov dword [rsp + 0x28], 0x30
movss dword [rsp + 0x20], xmm9
movaps xmm2, xmm6
lea rdx, [rbp + 0x70]
mov rcx, qword [0x1800cb808]
call fcn.18002d6b0
cvttss2si eax, dword [rbp + 0x800]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x180097718]
movss dword [rbp + 0x128], xmm0
cvttss2si eax, xmm11
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, dword [0x180097718]
movss dword [rbp + 0x12c], xmm1
mov dword [rbp + 0x130], 0
mov dword [rbp + 0x134], 0x3f800000
lea rcx, [rbp + 0x128]
call fcn.1800095f0
mov rbx, qword [0x1800cb808]
movss dword [rsp + 0x28], xmm12
mov dword [rsp + 0x20], r13d
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18002be60
mov dword [rbx + 0x78], r13d
cmp byte [0x1800ca4d5], 0
je 0x180075753
movss xmm2, dword [0x1800ca4a0]
divss xmm2, dword [0x1800ca460]
movss xmm7, dword [0x1800979a0]
movss xmm6, dword [0x1800978a0]
movss xmm8, dword [rbp + 0x808]
subss xmm8, dword [0x18009797c]
movss dword [rbp + 0x78], xmm8
movss xmm10, dword [rbp + 0x810]
movaps xmm0, xmm10
subss xmm0, dword [0x1800979a4]
movss dword [rbp + 0x7c], xmm0
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0x800], rax
movaps xmm0, xmm7
unpcklps xmm0, xmm6
movq rdx, xmm0
mov rcx, rax
call fcn.180070130
movss xmm2, dword [0x1800ca4d0]
divss xmm2, dword [0x1800ca490]
movss dword [rbp + 0x810], xmm8
subss xmm10, xmm7
movss dword [rbp + 0x814], xmm10
mov rax, qword [rbp + 0x810]
mov qword [rbp + 0x800], rax
movaps xmm0, xmm7
unpcklps xmm0, xmm6
movq rdx, xmm0
mov rcx, rax
call fcn.180070130
cmp byte [0x1800ca484], 0
je 0x1800757e8
movd xmm8, dword [0x1800c8b14]
cvtdq2ps xmm8, xmm8
mov eax, dword [0x1800ca528]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov eax, dword [0x1800ca3cc]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movaps xmm0, xmmword [0x180097ca0]
movaps xmmword [rbp + 0x210], xmm0
lea rcx, [rbp + 0x210]
call fcn.1800095f0
movss dword [rbp + 0x80], xmm6
movss dword [rbp + 0x84], xmm7
movss xmm0, dword [0x18009780c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], r13d
mov r9d, eax
movaps xmm2, xmm8
lea rdx, [rbp + 0x80]
mov rcx, qword [0x1800cb808]
call fcn.18002ea90
movss xmm14, dword [0x1800978d8]
movss xmm10, dword [0x180097a2c]
movss xmm11, dword [0x1800977e8]
movzx eax, byte [0x1800a3271]
test al, al
je 0x180075af7
cmp byte [0x1800ca494], 0
je 0x180075af7
mov rax, qword [0x1800ca3a0]
or dword [rax + 0x47e8], 2
mov dword [rax + 0x4808], 0x437a0000
mov dword [rax + 0x480c], 0x433c0000
mov dword [rax + 0x47f0], 1
xor edx, edx
mov r8d, 0x1fb
lea rcx, str.belt_menu2
call fcn.180013f80
mov rcx, qword [0x1800ca3a0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov rbx, qword [rax + 0x298]
mov rax, qword [0x1800ca3a0]
mov rcx, qword [rax + 0x3f08]
movss xmm7, dword [rcx + 0x20]
movss xmm8, dword [rcx + 0x24]
movss dword [rbp + 0x90], xmm7
movss dword [rbp + 0x94], xmm8
movss dword [0x1800c8898], xmm7
movss dword [0x1800c8b48], xmm8
movaps xmm0, xmmword [0x180097c00]
movups xmmword [rbp + 0x220], xmm0
lea rcx, [rbp + 0x220]
call fcn.1800095f0
movaps xmm1, xmm8
addss xmm1, dword [0x180097974]
movaps xmm0, xmm7
addss xmm0, dword [0x180097994]
movss dword [rbp + 0x88], xmm0
movss dword [rbp + 0x8c], xmm1
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x90]
mov rcx, rbx
call fcn.18002e060
movaps xmm0, xmmword [0x180097c30]
movups xmmword [rbp + 0x230], xmm0
lea rcx, [rbp + 0x230]
call fcn.1800095f0
movaps xmm1, xmm8
addss xmm1, dword [0x180097970]
movaps xmm0, xmm7
addss xmm0, dword [0x180097990]
movss dword [rbp + 0x98], xmm0
movss dword [rbp + 0x9c], xmm1
movaps xmm2, xmm8
addss xmm2, xmm15
movaps xmm0, xmm7
addss xmm0, xmm15
movss dword [rbp + 0xa0], xmm0
movss dword [rbp + 0xa4], xmm2
movss dword [rsp + 0x30], xmm15
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xa0]
mov rcx, rbx
call fcn.18002df60
movaps xmm0, xmmword [0x180097c30]
movups xmmword [rbp + 0x240], xmm0
lea rcx, [rbp + 0x240]
call fcn.1800095f0
movaps xmm1, xmm8
addss xmm1, dword [0x180097964]
movaps xmm0, xmm7
addss xmm0, dword [0x18009798c]
movss dword [rbp + 0xa8], xmm0
movss dword [rbp + 0xac], xmm1
movaps xmm2, xmm8
addss xmm2, xmm14
movaps xmm0, xmm7
addss xmm0, xmm14
movss dword [rbp + 0xb0], xmm0
movss dword [rbp + 0xb4], xmm2
movss dword [rsp + 0x30], xmm15
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0xb0]
mov rcx, rbx
call fcn.18002df60
mov rax, qword [0x1800ca3a0]
mov qword [rsp + 0x30], r13
lea rdi, [0x180097598]
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm10
movss xmm2, dword [rax + 0x3c30]
lea rdx, [rbp + 0x140]
mov rcx, qword [rax + 0x3c28]
call fcn.180035a50
movss xmm0, dword [rbp + 0x140]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movaps xmm1, xmmword [0x180097c80]
movups xmmword [rbp + 0x250], xmm1
lea rcx, [rbp + 0x250]
call fcn.1800095f0
addss xmm8, dword [0x18009787c]
addss xmm7, dword [0x180097950]
mulss xmm6, xmm13
subss xmm7, xmm6
movss dword [rbp + 0xb8], xmm7
movss dword [rbp + 0xbc], xmm8
mov r9, rdi
mov r8d, eax
lea rdx, [rbp + 0xb8]
mov rcx, rbx
call fcn.18002ed10
call fcn.1800166c0
movzx eax, byte [0x1800a3271]
cmp qword [0x1800ca468], 0
je 0x18007663e
test al, al
jne 0x18007663e
mov rcx, rsi
call fcn.180067010
test al, al
jne 0x18007663e
cmp byte [0x1800ca494], al
je 0x18007663e
mov rcx, rsi
call fcn.180066000
test al, al
je 0x18007663e
movss xmm0, dword [0x1800c8898]
movss xmm1, dword [0x1800c8b48]
mov rax, qword [0x1800ca3a0]
movss dword [rax + 0x47f8], xmm0
movss dword [rax + 0x47fc], xmm1
mov qword [rax + 0x4800], 0
mov dword [rax + 0x47ec], 1
or dword [rax + 0x47e8], 3
mov dword [rax + 0x4808], 0x437a0000
mov dword [rax + 0x480c], 0x433c0000
mov dword [rax + 0x47f0], 1
xor edx, edx
mov r8d, 0x1fb
lea rcx, str.belt_menu
call fcn.180013f80
movss xmm7, dword [0x1800c8898]
movss dword [rbp + 0x808], xmm7
movss xmm6, dword [0x1800c8b48]
movss dword [rbp + 0x80c], xmm6
mov rcx, qword [0x1800ca3a0]
mov rax, qword [rcx + 0x3f08]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3f08]
mov r12, qword [rax + 0x298]
movaps xmm0, xmmword [0x180097c00]
movups xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x260]
call fcn.1800095f0
movaps xmm1, xmm6
addss xmm1, dword [0x180097974]
movaps xmm0, xmm7
addss xmm0, dword [0x180097994]
movss dword [rbp + 0xf8], xmm0
movss dword [rbp + 0xfc], xmm1
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0x808]
mov rcx, r12
call fcn.18002e060
movaps xmm0, xmmword [0x180097c30]
movups xmmword [rbp + 0x270], xmm0
lea rcx, [rbp + 0x270]
call fcn.1800095f0
movaps xmm1, xmm6
addss xmm1, dword [0x180097970]
movaps xmm0, xmm7
addss xmm0, dword [0x180097990]
movss dword [rbp + 0xf0], xmm0
movss dword [rbp + 0xf4], xmm1
movaps xmm2, xmm6
addss xmm2, xmm15
movaps xmm0, xmm7
addss xmm0, xmm15
movss dword [rbp + 0xe8], xmm0
movss dword [rbp + 0xec], xmm2
movss dword [rsp + 0x30], xmm15
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0xe8]
mov rcx, r12
call fcn.18002df60
movaps xmm0, xmmword [0x180097c30]
movups xmmword [rbp + 0x280], xmm0
lea rcx, [rbp + 0x280]
call fcn.1800095f0
movaps xmm1, xmm6
addss xmm1, dword [0x180097964]
movaps xmm0, xmm7
addss xmm0, dword [0x18009798c]
movss dword [rbp + 0xe0], xmm0
movss dword [rbp + 0xe4], xmm1
movaps xmm2, xmm6
addss xmm2, xmm14
movaps xmm0, xmm7
addss xmm0, xmm14
movss dword [rbp + 0x110], xmm0
movss dword [rbp + 0x114], xmm2
movss dword [rsp + 0x30], xmm15
mov dword [rsp + 0x28], r13d
movss dword [rsp + 0x20], xmm12
mov r9d, eax
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0x110]
mov rcx, r12
call fcn.18002df60
movaps xmm0, xmmword [0x180097c90]
movups xmmword [rbp + 0x290], xmm0
lea rcx, [rbp + 0x290]
call fcn.1800095f0
movaps xmm12, xmm6
addss xmm12, dword [0x180097904]
addss xmm7, dword [0x1800978e4]
movss dword [rbp + 0x100], xmm7
movss dword [rbp + 0x104], xmm12
lea r9, [0x1800975ac]
mov r8d, eax
lea rdx, [rbp + 0x100]
mov rcx, r12
call fcn.18002ed10
movaps xmm0, xmmword [0x180097c90]
movups xmmword [rbp + 0x2a0], xmm0
lea rcx, [rbp + 0x2a0]
call fcn.1800095f0
movaps xmm0, xmm6
addss xmm0, dword [0x18009791c]
movss dword [rbp + 0x108], xmm7
movss dword [rbp + 0x10c], xmm0
lea r9, [0x1800975b0]
mov r8d, eax
lea rdx, [rbp + 0x108]
mov rcx, r12
call fcn.18002ed10
movaps xmm0, xmmword [0x180097c90]
movups xmmword [rbp + 0x2b0], xmm0
lea rcx, [rbp + 0x2b0]
call fcn.1800095f0
movaps xmm0, xmm6
addss xmm0, dword [0x180097920]
movss dword [rbp + 0xc0], xmm7
movss dword [rbp + 0xc4], xmm0
lea r9, [0x1800975b4]
mov r8d, eax
lea rdx, [rbp + 0xc0]
mov rcx, r12
call fcn.18002ed10
movaps xmm0, xmmword [0x180097c90]
movups xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x2c0]
call fcn.1800095f0
movaps xmm0, xmm6
addss xmm0, dword [0x180097930]
movss dword [rbp + 0xc8], xmm7
movss dword [rbp + 0xcc], xmm0
lea r9, [0x1800975b8]
mov r8d, eax
lea rdx, [rbp + 0xc8]
mov rcx, r12
call fcn.18002ed10
movaps xmm0, xmmword [0x180097c90]
movups xmmword [rbp + 0x2d0], xmm0
lea rcx, [rbp + 0x2d0]
call fcn.1800095f0
movaps xmm0, xmm6
addss xmm0, dword [0x18009793c]
movss dword [rbp + 0xd0], xmm7
movss dword [rbp + 0xd4], xmm0
lea r9, [0x1800975bc]
mov r8d, eax
lea rdx, [rbp + 0xd0]
mov rcx, r12
call fcn.18002ed10
movaps xmm0, xmmword [0x180097c90]
movups xmmword [rbp + 0x2e0], xmm0
lea rcx, [rbp + 0x2e0]
call fcn.1800095f0
addss xmm6, dword [0x180097948]
movss dword [rbp + 0xd8], xmm7
movss dword [rbp + 0xdc], xmm6
lea r9, [0x1800975c0]
mov r8d, eax
lea rdx, [rbp + 0xd8]
mov rcx, r12
call fcn.18002ed10
mov qword [rbp - 0x10], r13
mov qword [rbp], r13
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x610]
call sub.VCRUNTIME140.dll_memset
mov rcx, rsi
call fcn.180066c20
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.180077260
nop
mov rdx, qword [rax]
mov qword [rbp + 0x1a0], r13
mov qword [rbp + 0x1b0], r13
mov qword [rbp + 0x1b8], 0xf
mov byte [rbp + 0x1a0], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180075fb4
lea rcx, [rbp + 0x1a0]
call fcn.18004d0c0
nop
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180075fee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, rsi
call fcn.180066c20
mov rdx, rax
lea rcx, [rbp + 0x158]
call fcn.180077260
nop
mov r8, rax
lea rdx, str.Belt
lea rcx, [rbp + 0x150]
call fcn.1800770c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x610]
call fcn.1800790c0
mov rdx, qword [rbp + 0x150]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x18007604f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x180076072
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rax, [rbp + 0x610]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x180076080
mov rcx, qword [rbp]
mov rdx, qword [rbp + 8]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1800760cc
lea rax, [rcx + rdi]
mov qword [rbp], rax
lea rbx, [rbp - 0x10]
cmp rdx, 0x10
cmovae rbx, qword [rbp - 0x10]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x610]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x1800760e4
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x610]
mov rdx, rdi
lea rcx, [rbp - 0x10]
call fcn.18004f590
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rdx, qword [rbp - 0x10]
movss dword [rsp + 0x20], xmm10
xor r9d, r9d
xor r8d, r8d
lea rcx, [rbp + 0x10]
call fcn.1800102d0
lea r9, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae r9, qword [rbp - 0x10]
movaps xmm0, xmmword [0x180097c80]
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call fcn.1800095f0
movss xmm2, dword [rbp + 0x80c]
addss xmm2, dword [0x18009787c]
movss xmm8, dword [rbp + 0x808]
addss xmm8, dword [0x180097950]
movss xmm1, dword [rbp + 0x10]
mulss xmm1, xmm13
movaps xmm0, xmm8
subss xmm0, xmm1
movss dword [rbp + 0x30], xmm0
movss dword [rbp + 0x34], xmm2
mov r8d, eax
lea rdx, [rbp + 0x30]
mov rcx, r12
call fcn.18002ed10
movaps xmm7, xmm9
mov rcx, rsi
call fcn.1800671d0
test rax, rax
je 0x1800765af
mov r14d, r13d
mov rcx, rsi
call fcn.1800671d0
cmp dword [rax + 0x18], 0
jbe 0x1800765af
movss xmm14, dword [0x1800978c4]
nop word [rax + rax]
mov rcx, rsi
call fcn.1800671d0
mov rcx, qword [rax + 0x10]
mov eax, r14d
mov rbx, qword [rcx + rax*8 + 0x20]
test rbx, rbx
je 0x180076595
mov rcx, rsi
call fcn.180067240
mov rcx, rbx
cmp rbx, rax
jne 0x1800763c0
call fcn.180066a90
mov r15, rax
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
mov r8, r15
lea rdx, [0x18009754c]
lea rcx, [rbp + 0x310]
call fcn.1800790c0
lea rax, [rbp + 0x310]
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180076240
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180076291
lea rax, [rdi + rcx]
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x40]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x40]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x310]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x1800762aa
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x310]
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.18004f590
test r15, r15
je 0x180076379
lea rcx, [rsp + 0x40]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x58]
cmp r8, 0x10
cmovae rcx, rdx
mov rax, qword [0x1800ca3a0]
test rcx, rcx
jne 0x1800762dc
movaps xmm6, xmm9
jmp 0x180076329
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm10
movss xmm2, dword [rax + 0x3c30]
lea rdx, [rbp + 0x40]
mov rcx, qword [rax + 0x3c28]
call fcn.180035a50
movss xmm0, dword [rbp + 0x40]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss dword [rbp + 0x40], xmm6
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x40]
lea r9, [rsp + 0x40]
cmp r8, 0x10
cmovae r9, rdx
movaps xmm0, xmmword [0x180097ca0]
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call fcn.1800095f0
movaps xmm1, xmm7
addss xmm1, xmm12
mulss xmm6, xmm13
movaps xmm0, xmm8
subss xmm0, xmm6
movss dword [rbp - 0x60], xmm0
movss dword [rbp - 0x5c], xmm1
mov r8d, eax
lea rdx, [rbp - 0x60]
mov rcx, r12
call fcn.18002ed10
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x180076595
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076590
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180076590
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180066a90
mov r15, rax
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
mov r8, r15
lea rdx, [0x18009754c]
lea rcx, [rbp + 0x310]
call fcn.1800790c0
lea rax, [rbp + 0x310]
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180076420
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180076471
lea rax, [rdi + rcx]
mov qword [rsp + 0x50], rax
lea rbx, [rsp + 0x40]
cmp rdx, 0x10
cmovae rbx, qword [rsp + 0x40]
add rbx, rcx
mov r8, rdi
lea rdx, [rbp + 0x310]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x18007648a
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x310]
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.18004f590
test r15, r15
je 0x18007655c
lea rcx, [rsp + 0x40]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x58]
cmp r8, 0x10
cmovae rcx, rdx
mov rax, qword [0x1800ca3a0]
test rcx, rcx
jne 0x1800764bc
movaps xmm6, xmm9
jmp 0x180076509
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rcx
movss dword [rsp + 0x20], xmm10
movss xmm2, dword [rax + 0x3c30]
lea rdx, [rbp - 0x70]
mov rcx, qword [rax + 0x3c28]
call fcn.180035a50
movss xmm0, dword [rbp - 0x70]
addss xmm0, xmm11
cvttss2si eax, xmm0
movd xmm6, eax
cvtdq2ps xmm6, xmm6
movss dword [rbp - 0x70], xmm6
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x40]
lea r9, [rsp + 0x40]
cmp r8, 0x10
cmovae r9, rdx
movaps xmm0, xmmword [0x180097c90]
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp + 0x20]
call fcn.1800095f0
movaps xmm1, xmm7
addss xmm1, xmm12
mulss xmm6, xmm13
movaps xmm0, xmm8
subss xmm0, xmm6
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
mov r8d, eax
lea rdx, [rsp + 0x70]
mov rcx, r12
call fcn.18002ed10
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x180076595
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076590
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800765ee
call fcn.1800816dc
addss xmm7, xmm14
inc r14d
mov rcx, rsi
call fcn.1800671d0
cmp r14d, dword [rax + 0x18]
jb 0x1800761b0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x1800765fb
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800765f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800765f5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1800816dc
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x180076639
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180076634
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180076634
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800816dc
call fcn.1800166c0
lea r11, [rsp + 0x8b8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x80070057
call fcn.18005a7c0
nop
mov ecx, 0x80004005
call fcn.18005a7c0
int3