Function at 0x180011450
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2a8]
sub rsp, 0x380
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
mov rax, qword [0x180124040]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
xor r15d, r15d
mov qword [rbp + 0x60], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x60]
movabs rdx, 0x141cc8988
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x60]
mov qword [rbp + 0x68], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x68]
lea rdx, [rbx + 0x744]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x68]
mov qword [rbp + 0x60], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x60]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x60]
mov qword [rbp + 0x70], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x70]
lea rdx, [rbx + 0x68]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x70]
mov qword [rbp + 0x98], rbx
mov qword [rbp + 0xc0], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0xc0]
lea rdx, [rbx + 0x458]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14, qword [rbp + 0xc0]
mov qword [rbp + 0x68], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x68]
lea rdx, [rbx + 0x438]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x60], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x60]
lea rdx, [rbx + 0x120]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x60]
mov qword [rbp + 0xc8], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0xc8]
lea rdx, [rdi + 0x538]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdi, qword [rbp + 0x68]
xor eax, eax
mov dword [rbp], eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 0x20]
lea r8, [rbp]
lea rdx, [rdi + 0x410]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [0x180265c4c], r15d
jle 0x1800116e8
lea ecx, [r15 + 1]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1800116e8
xor eax, eax
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x80], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 0xc]
lea r8, [rbp + 0x78]
lea rdx, [rbx + 0x8c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [rbp + 0x78]
sub eax, dword [0x180265c4c]
mov dword [rbp + 0xb0], eax
mov rax, qword [rbp + 0x78]
shr rax, 0x20
mov dword [rbp + 0xb4], eax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0xb8], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 0xc]
lea r8, [rbp + 0xb0]
lea rdx, [rbx + 0x8c]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
lea rcx, [0x180110700]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x18001171d
lea rdx, [rbp + 0xd0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, 0xfffffff0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
xor edx, edx
lea rcx, [0x180110700]
call qword [sym.imp.USER32.dll_FindWindowW]
mov rbx, rax
test rax, rax
je 0x18001177a
lea rdx, [rbp + 0xd0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov edx, 0xfffffff0
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
test rax, 0xcf0000
je 0x18001177a
lea rdx, [rbp + 0x130]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [rbp + 0x120]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetClientRect]
lea rcx, [rbp + 0x98]
call fcn.180005650
movaps xmm11, xmm0
movss xmm8, dword [0x180118c00]
mov rdi, qword [rbp + 0xc8]
mov qword [rbp + 0x60], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x60]
lea rdx, [rdi + 0x3fc]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp + 0x140]
call fcn.180004b30
nop
mov qword [rbp + 0x60], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0x60]
lea rdx, [r14 + 0x3fc]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x60]
lea rcx, [rbp + 0x100]
call fcn.180004b30
nop
mov ecx, dword [0x180265c08]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180011830
mov eax, r15d
cmp dword [0x180265bd0], eax
sete al
mov dword [0x180265bd0], eax
mov ecx, dword [0x180265c0c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180011878
cmp byte [0x180265bcc], 0
sete al
mov byte [0x180265bcc], al
mov edx, 0x3e8
test al, al
je 0x180011867
lea r8, str.Aimbot_Activated_
mov ecx, 2
jmp 0x180011873
lea r8, str.Aimbot_Deactivated_
mov ecx, 4
call fcn.18000b400
movsd xmm9, qword [rbp + 0x10]
movsd xmm10, qword [rbp + 4]
movss xmm13, dword [0x180118ec0]
movss xmm12, dword [0x180118b94]
movabs rax, 0xcccccccccccccccc
test rdi, rdi
je 0x180012265
cmp rdi, rax
je 0x180012265
mov qword [rbp + 0xb0], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
mov r9d, 8
lea r8, [rbp + 0xb0]
lea rdx, [rdi + 0x270]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp + 0xb0]
mov word [rbp + 0x70], r15w
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
mov r9d, 2
lea r8, [rbp + 0x70]
lea rdx, [r14 + 0x384]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov word [rbp + 0x68], r15w
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
mov r9d, 2
lea r8, [rbp + 0x68]
lea rdx, [rdi + 0x384]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp word [rbp + 0x70], 1
jl 0x180012174
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x90], r15
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180011980
lea rcx, [rbp + 0x78]
call fcn.1800032f0
mov rbx, qword [0x180266a30]
mov r12, qword [0x180266a38]
mov r13, qword [rbp + 0x90]
mov r15, qword [rbp + 0x78]
cmp rbx, r12
je 0x1800119f8
nop dword [rax]
nop word [rax + rax]
lea rdx, [rbp + 0x78]
cmp r13, 0xf
cmova rdx, r15
mov r8, qword [rbx + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x1800119dd
mov rcx, qword [rbx]
cmp r8, qword [rbp + 0x88]
jne 0x1800119ef
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x180011a40
add rbx, 0x20
cmp rbx, r12
jne 0x1800119c0
xor bl, bl
cmp r13, 0xf
jbe 0x180011a31
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x180011a29
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001216d
mov rcx, r15
call fcn.180073914
test bl, bl
je 0x180011a44
mov rdi, rsi
xor r15d, r15d
jmp 0x180011896
mov bl, 1
jmp 0x1800119fa
movzx r13d, word [rbp + 0x68]
cmp r13w, 1
jl 0x180011a35
xor r15d, r15d
mov qword [rbp + 0x78], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x78]
lea rdx, [rdi + 0x3fc]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x78]
mov qword [rbp + 0x98], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x98]
lea rdx, [r14 + 0x3fc]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp + 0x98]
mov dword [rbp + 0x68], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x68]
lea rdx, [r15 + 0x274]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15d, dword [rbp + 0x68]
mov dword [rbp + 0x70], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x70]
lea rdx, [rbx + 0x274]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp r15d, dword [rbp + 0x70]
je 0x180011a35
xor r15d, r15d
mov qword [rbp + 0x98], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x98]
lea rdx, [rdi + 0x448]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x98]
movabs rax, 0xcccccccccccccccc
test rbx, rbx
je 0x180012165
cmp rbx, rax
je 0x180012165
mov qword [rbp + 0x78], r15
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r15 + 8]
lea r8, [rbp + 0x78]
lea rdx, [rdi + 0x3fc]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp + 0x78]
xor r12d, r12d
mov qword [rbp + 0x78], r12
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 8]
lea r8, [rbp + 0x78]
lea rdx, [r15 + 0x278]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r15, qword [rbp + 0x78]
mov dword [rbp + 0x68], r12d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 4]
lea r8, [rbp + 0x68]
lea rdx, [r15 + 0x25c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
call fcn.18000b720
xor eax, eax
mov dword [rbp + 0x90], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 0x1c]
lea r8, [rbp + 0x78]
lea rdx, [rbx + 0x8c]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r12
lea r9d, [r12 + 0x10]
lea r8, [rbp + 0x78]
lea rdx, [rbx + 0x300]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xor eax, eax
mov dword [rbp + 0x16c], eax
mov dword [rbp + 0x17c], eax
mov dword [rbp + 0x18c], eax
mov dword [rbp + 0x19c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor r15d, r15d
mov qword [rsp + 0x20], r15
lea r9d, [r12 + 0x40]
lea r8, [rbp + 0x160]
lea rdx, [rbx + 0xc0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm0, xmmword [rbp + 0x160]
movaps xmmword [rbp + 0x20], xmm0
movaps xmm1, xmmword [rbp + 0x170]
movaps xmmword [rbp + 0x30], xmm1
movaps xmm0, xmmword [rbp + 0x180]
movaps xmmword [rbp + 0x40], xmm0
movaps xmm1, xmmword [rbp + 0x190]
movaps xmmword [rbp + 0x50], xmm1
mov rbx, qword [rbp + 0x78]
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe0], xmm0
xor eax, eax
mov dword [rbp + 0xfc], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r12 + 0x20]
lea r8, [rbp + 0xe0]
lea rdx, [rbx + 0x100]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmmword [rbp - 0x20], xmm0
movaps xmm6, xmmword [rbp + 0xf0]
mov rbx, qword [rbp + 0x78]
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe0], xmm0
xor eax, eax
mov dword [rbp + 0xfc], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r12 + 0x20]
lea r8, [rbp + 0xe0]
lea rdx, [rbx + 0x100]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x78]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1b0], xmm0
xor eax, eax
mov dword [rbp + 0x1cc], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r12 + 0x20]
lea r8, [rbp + 0x1b0]
lea rdx, [rbx + 0x140]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x78]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1b0], xmm0
xor eax, eax
mov dword [rbp + 0x1cc], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r12 + 0x20]
lea r8, [rbp + 0x1b0]
lea rdx, [rbx + 0x60]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0x78]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x160], xmm0
xor eax, eax
mov dword [rbp + 0x17c], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
lea r9d, [r12 + 0x20]
lea r8, [rbp + 0x160]
lea rdx, [rbx + 0x1c0]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [0x180265bd0]
test eax, eax
jne 0x180011e1b
movaps xmm0, xmmword [rbp + 0xe0]
movaps xmm6, xmmword [rbp + 0xf0]
jmp 0x180011e2e
cmp eax, 1
jne 0x180011e32
movaps xmm0, xmmword [rbp + 0x1b0]
movaps xmm6, xmmword [rbp + 0x1c0]
movaps xmmword [rbp - 0x20], xmm0
movss xmm2, dword [rbp - 0x18]
xorps xmm2, xmm13
movss xmm0, dword [rbp - 0x20]
movss dword [rbp - 0x40], xmm0
movss xmm1, dword [rbp - 0x1c]
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm2
movss xmm0, dword [rbp - 0x14]
movss dword [rbp - 0x34], xmm0
movsd qword [rbp - 0x30], xmm6
psrldq xmm6, 8
movd dword [rbp - 0x28], xmm6
mov dword [rbp - 0x24], 0x3f800000
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x40]
call fcn.1800041d0
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x1b0]
mov rcx, rax
call fcn.180003dc0
movsd xmm7, qword [rax + 0x30]
mov r12d, dword [rax + 0x38]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov qword [rsp + 0x20], r15
mov r9d, recv
lea r8, [rsp + 0x30]
lea rdx, [r14 + 0x80]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm2, dword [rsp + 0x30]
subss xmm2, xmm7
movss xmm3, dword [rsp + 0x34]
movaps xmm0, xmm7
shufps xmm0, xmm0, 0x55
movsd qword [rbp + 0x98], xmm7
subss xmm3, xmm0
movss xmm1, dword [rsp + 0x38]
movd xmm0, r12d
subss xmm1, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm3, xmm2
mulss xmm1, xmm1
addss xmm3, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x180011f1d
xorps xmm6, xmm6
sqrtss xmm6, xmm3
jmp 0x180011f28
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
divss xmm6, xmm12
cmp byte [0x180265c5d], r15b
je 0x180011f51
comiss xmm6, dword [0x180265c64]
jbe 0x180011f51
mov rdi, rsi
movabs rax, 0xcccccccccccccccc
jmp 0x1800118a0
movsd qword [rsp + 0x40], xmm10
mov r15d, dword [rbp + 0xc]
mov dword [rsp + 0x48], r15d
movsd qword [rsp + 0x50], xmm9
mov ebx, dword [rbp + 0x18]
mov dword [rsp + 0x58], ebx
movsd qword [rsp + 0x60], xmm7
mov dword [rsp + 0x68], r12d
movss dword [rsp + 0x20], xmm11
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x60]
call fcn.180004720
test al, al
je 0x180012150
movsd qword [rsp + 0x70], xmm10
mov dword [rsp + 0x78], r15d
movsd qword [rbp - 0x80], xmm9
mov dword [rbp - 0x78], ebx
movsd qword [rbp - 0x70], xmm7
mov dword [rbp - 0x68], r12d
movss dword [rsp + 0x20], xmm11
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.180004720
test al, al
je 0x180012150
cmp byte [0x180265bcc], 0
je 0x180012150
cmp r13w, 1
jle 0x180012150
xor edx, edx
lea rcx, [0x180110700]
call qword [sym.imp.USER32.dll_FindWindowW]
mov r15, rax
test rax, rax
jne 0x180012017
xor ebx, ebx
jmp 0x180012041
lea rdx, [rbp + 0x1a0]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
mov ebx, dword [rbp + 0x1a8]
sub ebx, dword [rbp + 0x1a0]
mov edx, 0xfffffff0
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov r13d, eax
xor edx, edx
lea rcx, [0x180110700]
call qword [sym.imp.USER32.dll_FindWindowW]
mov r15, rax
test rax, rax
jne 0x180012066
xor ebx, ebx
jmp 0x1800120d2
lea rdx, [rbp + 0x120]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
mov ebx, dword [rbp + 0x12c]
sub ebx, dword [rbp + 0x124]
mov edx, 0xfffffff0
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
test rax, 0xcf0000
je 0x1800120d2
lea rdx, [rbp + 0xd0]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rdx, [rbp + 0x130]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [rbp + 0x13c]
sub ecx, dword [rbp + 0x134]
sub ecx, dword [rbp + 0xdc]
add ecx, dword [rbp + 0xd4]
add ebx, ecx
mov eax, dword [0x180265bd4]
test eax, eax
jne 0x18001212c
movd xmm0, r13d
cvtdq2ps xmm0, xmm0
movss xmm2, dword [rbp + 0x60]
subss xmm2, xmm0
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss xmm1, dword [rbp + 0x64]
subss xmm1, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm1, xmm2
movss xmm0, dword [0x180265bf4]
comiss xmm0, xmm1
jbe 0x180012150
movsd qword [rbp - 0x60], xmm7
mov dword [rbp - 0x58], r12d
lea rdx, [rbp - 0x60]
jmp 0x180012148
cmp eax, 1
jne 0x180012150
comiss xmm8, xmm6
jbe 0x180012150
movaps xmm8, xmm6
movsd qword [rbp - 0x50], xmm7
mov dword [rbp - 0x48], r12d
lea rdx, [rbp - 0x50]
mov rcx, rdi
call fcn.18000bdc0
mov rdi, rsi
xor r15d, r15d
movabs rax, 0xcccccccccccccccc
jmp 0x1800118a0
mov rdi, rsi
jmp 0x1800118a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x1800121b5
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800121b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001229d
call fcn.180073914
movdqa xmm0, xmmword [0x180118ca0]
movdqu xmmword [rbp + 0x110], xmm0
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x18001220d
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012208
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180012304
call fcn.180073914
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.180073350
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x1800122a9
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800122a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800122a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180073914
movdqa xmm0, xmmword [0x180118ca0]
movdqu xmmword [rbp + 0x110], xmm0
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x18001220d
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180012208
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180012208
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3