Function at 0x18004de60
Capabilities:
Encode data using xor
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3c8]
sub rsp, 0x4a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x180073028]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r15, rax
cmp byte [0x18009aefb], 0
je 0x18004f660
mov rcx, qword [0x18009add8]
test rcx, rcx
je 0x18004f660
xor r12d, r12d
cmp byte [0x18009aefe], r12b
je 0x18004e062
mov rax, qword [rcx + 0x40]
mov rbx, qword [rax + 0xd8]
test rbx, rbx
je 0x18004e062
movss xmm6, dword [0x180073264]
xor edx, edx
mov cl, 0x73
call fcn.180046860
mov byte [rsp + 0x70], al
lea edx, [r12 + 1]
mov cl, 0x65
call fcn.180046860
mov byte [rsp + 0x71], al
lea edx, [r12 + 2]
mov cl, 0x74
call fcn.180046860
mov byte [rsp + 0x72], al
lea edx, [r12 + 3]
mov cl, 0x5f
call fcn.180046860
mov byte [rsp + 0x73], al
lea edx, [r12 + 4]
mov cl, 0x66
call fcn.180046860
mov byte [rsp + 0x74], al
lea edx, [r12 + 5]
mov cl, 0x69
call fcn.180046860
mov byte [rsp + 0x75], al
lea edx, [r12 + 6]
mov cl, 0x65
call fcn.180046860
mov byte [rsp + 0x76], al
lea edx, [r12 + 7]
mov cl, 0x6c
call fcn.180046860
mov byte [rsp + 0x77], al
lea edx, [r12 + 8]
mov cl, 0x64
call fcn.180046860
mov byte [rsp + 0x78], al
lea edx, [r12 + 9]
mov cl, 0x4f
call fcn.180046860
mov byte [rsp + 0x79], al
lea edx, [r12 + 0xa]
mov cl, 0x66
call fcn.180046860
mov byte [rsp + 0x7a], al
lea edx, [r12 + 0xb]
mov cl, 0x56
call fcn.180046860
mov byte [rsp + 0x7b], al
lea edx, [r12 + 0xc]
mov cl, 0x69
call fcn.180046860
mov byte [rsp + 0x7c], al
lea edx, [r12 + 0xd]
mov cl, 0x65
call fcn.180046860
mov byte [rsp + 0x7d], al
lea edx, [r12 + 0xe]
mov cl, 0x77
call fcn.180046860
mov byte [rsp + 0x7e], al
xor eax, eax
mov byte [rsp + 0x7f], al
mov edx, r12d
nop
movsxd rcx, edx
lea eax, [rdx + 0x13]
xor byte [rsp + rcx + 0x70], al
inc edx
cmp edx, 0xf
jb 0x18004e020
mov byte [rsp + 0x7f], r12b
mov rax, qword [0x18009ac28]
mov r8d, 0xffffffff
lea rdx, [rsp + 0x70]
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004e062
mov rax, qword [rax]
test rax, rax
je 0x18004e062
movaps xmm1, xmm6
mov rcx, rbx
call rax
movss xmm7, dword [0x1800688b0]
cmp byte [0x18009af14], r12b
je 0x18004e1b7
mov rax, qword [0x18009add8]
mov rcx, qword [rax + 0x40]
mov rax, qword [rcx + 0x150]
mov byte [rax + 0x48], 1
movups xmm0, xmmword [0x180099fa0]
movups xmmword [rsp + 0x40], xmm0
cmp byte [0x18009af0d], r12b
je 0x18004e0e9
movss xmm0, dword [0x18009b0e8]
movss xmm1, dword [0x18009b0ec]
movss xmm2, dword [0x18009b0f0]
mov dword [rsp + 0x4c], 0x3f800000
movups xmm3, xmmword [rsp + 0x40]
movss xmm3, xmm0
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm1
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm2
shufps xmm3, xmm3, 0xc9
movups xmmword [rsp + 0x40], xmm3
movups xmmword [rsp + 0x40], xmm3
mov r10, qword [0x18009adb8]
lea rcx, [rsp + 0x40]
call fcn.1800053a0
mov ebx, eax
movss xmm2, dword [0x18009b100]
subss xmm2, dword [0x18006892c]
movaps xmm0, xmm2
addss xmm0, dword [0x180068940]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x18009b104]
movss dword [rsp + 0x54], xmm1
movss dword [rsp + 0x58], xmm2
movss dword [rsp + 0x5c], xmm1
movss dword [rsp + 0x20], xmm7
mov r9d, eax
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [r10 + 0x1de8]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1de8
movss xmm2, dword [0x18009b104]
subss xmm2, dword [0x18006892c]
movaps xmm1, xmm2
addss xmm1, dword [0x180068940]
movss xmm0, dword [0x18009b100]
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm2
movss dword [rsp + 0x20], xmm7
mov r9d, ebx
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x58]
call fcn.180024070
cmp byte [0x180073049], r12b
je 0x18004e27b
mov rbx, qword [0x18009adb8]
movaps xmm0, xmmword [0x180068af0]
movups xmmword [rbp + 0x190], xmm0
lea rcx, [rbp + 0x190]
call fcn.1800053a0
mov edi, eax
movss xmm0, dword [0x18009b100]
movss dword [rsp + 0x50], xmm0
movss xmm1, dword [0x18009b104]
movss dword [rsp + 0x54], xmm1
test eax, 0xff000000
je 0x18004e27b
movss xmm2, dword [0x18007326c]
subss xmm2, dword [0x180068870]
mov dword [rsp + 0x28], 0x167
movss xmm0, dword [0x180068924]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
lea rdx, [rsp + 0x50]
lea rcx, [rbx + 0x1de8]
call fcn.180023b40
movss xmm0, dword [0x1800688a8]
movss dword [rsp + 0x28], xmm0
mov byte [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x1e68]
mov rdx, qword [rbx + 0x1e70]
lea rcx, [rbx + 0x1de8]
call fcn.180022470
mov dword [rbx + 0x1e68], r12d
cmp byte [0x18009af12], r12b
je 0x18004e582
mov r14, qword [0x18009b128]
mov rcx, r14
mov rdi, qword [0x18009b120]
sub rcx, rdi
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x18004e5b4
mov rbx, rdi
cmp rdi, r14
je 0x18004e2e5
nop word [rax + rax]
mov eax, r15d
sub eax, dword [rbx]
cmp eax, 0x9c4
ja 0x18004e2e5
add rbx, 0x60
cmp rbx, r14
jne 0x18004e2d0
cmp rbx, r14
je 0x18004e3a2
lea rsi, [rbx + 0x60]
cmp rsi, r14
je 0x18004e36b
nop word [rax + rax]
mov ecx, dword [rsi]
mov eax, r15d
sub eax, ecx
cmp eax, 0x9c4
ja 0x18004e354
mov dword [rbx], ecx
mov eax, dword [rsi + 4]
mov dword [rbx + 4], eax
lea rdx, [rsi + 8]
lea rcx, [rbx + 8]
call fcn.180051960
lea rdx, [rsi + 0x28]
lea rcx, [rbx + 0x28]
call fcn.180051960
movsd xmm0, qword [rsi + 0x48]
movsd qword [rbx + 0x48], xmm0
mov eax, dword [rsi + 0x50]
mov dword [rbx + 0x50], eax
movsd xmm0, qword [rsi + 0x54]
movsd qword [rbx + 0x54], xmm0
mov eax, dword [rsi + 0x5c]
mov dword [rbx + 0x5c], eax
add rbx, 0x60
add rsi, 0x60
cmp rsi, r14
jne 0x18004e300
mov r14, qword [0x18009b128]
mov rdi, qword [0x18009b120]
cmp rbx, r14
je 0x18004e3a2
mov rsi, r14
mov rdi, rbx
nop word [rax + rax]
mov r14, rbx
mov rcx, rdi
call fcn.180046f00
add rdi, 0x60
cmp rdi, rsi
jne 0x18004e380
mov qword [0x18009b128], rbx
mov rdi, qword [0x18009b120]
cmp rdi, r14
je 0x18004e5b4
mov eax, dword [rdi]
mov dword [rbp + 0x290], eax
mov eax, dword [rdi + 4]
mov dword [rbp + 0x294], eax
lea rdx, [rdi + 8]
lea rcx, [rbp + 0x298]
call fcn.1800031b0
nop
lea rdx, [rdi + 0x28]
lea rcx, [rbp + 0x2b8]
call fcn.1800031b0
movsd xmm6, qword [rdi + 0x48]
movsd qword [rbp + 0x2d8], xmm6
mov ebx, dword [rdi + 0x50]
mov dword [rbp + 0x2e0], ebx
movsd xmm0, qword [rdi + 0x54]
movsd qword [rbp + 0x2e4], xmm0
mov eax, dword [rdi + 0x5c]
mov dword [rbp + 0x2ec], eax
cmp qword [0x18009add8], 0
je 0x18004e4f8
movsd qword [rbp - 0x60], xmm0
mov dword [rbp - 0x58], eax
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x60]
call fcn.1800480f0
test al, al
je 0x18004e4f8
movsd qword [rbp - 0x70], xmm6
mov dword [rbp - 0x68], ebx
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x70]
call fcn.1800480f0
test al, al
je 0x18004e4f8
movups xmm0, xmmword [0x180099f80]
movups xmmword [rsp + 0x40], xmm0
cmp byte [0x18009af11], 0
je 0x18004e49a
movss xmm0, dword [0x18009b0e8]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18009b0ec]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18009b0f0]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x3f800000
mov r10, qword [0x18009adb8]
lea rcx, [rsp + 0x40]
call fcn.1800053a0
movss xmm0, dword [rsp + 0x50]
movss dword [rbp - 0x80], xmm0
movss xmm1, dword [rsp + 0x54]
movss dword [rbp - 0x7c], xmm1
movss xmm0, dword [rsp + 0x58]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [rsp + 0x5c]
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x20], xmm7
mov r9d, eax
lea r8, [rbp - 0x80]
lea rdx, [rsp + 0x60]
lea rcx, [r10 + 0x1d40]
call fcn.180024070
nop
mov rdx, qword [rbp + 0x2d0]
cmp rdx, 0x10
jb 0x18004e535
inc rdx
mov rcx, qword [rbp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e530
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004e57b
call fcn.180059cf4
mov rdx, qword [rbp + 0x2b0]
cmp rdx, 0x10
jb 0x18004e572
inc rdx
mov rcx, qword [rbp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e56d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004e57b
call fcn.180059cf4
add rdi, 0x60
jmp 0x18004e3a2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [0x18009b120]
mov rdi, qword [0x18009b128]
cmp rbx, rdi
je 0x18004e5b4
mov rcx, rbx
call fcn.180046f00
add rbx, 0x60
cmp rbx, rdi
jne 0x18004e595
mov rax, qword [0x18009b120]
mov qword [0x18009b128], rax
mov rcx, qword [0x18009b108]
mov rax, qword [0x18009b110]
cmp rcx, rax
je 0x18004f64b
mov r14d, r12d
sub rax, rcx
sar rax, 3
test rax, rax
je 0x18004f64b
mov rdi, r12
lea r13, str.__.1fm_
nop dword [rax + rax]
mov r8, qword [0x18009af18]
test r8, r8
je 0x18004f627
mov rcx, qword [0x18009add8]
test rcx, rcx
je 0x18004f660
mov rax, qword [0x18009b108]
mov rdx, qword [rax + rdi*8]
test rdx, rdx
je 0x18004f627
cmp rdx, rcx
je 0x18004f627
cmp byte [0x180073047], 0
je 0x18004e654
mov rdx, qword [rdx + 0x40]
mov rax, qword [rcx + 0x40]
mov ecx, dword [rax + 0x2c]
cmp dword [rdx + 0x2c], ecx
jne 0x18004e654
cmp byte [r8 + 0x168], 0
jne 0x18004f627
mov rax, qword [0x18009add8]
mov rdx, qword [0x18009ad20]
mov rcx, qword [rax]
call rdx
mov qword [rbp + 0x264], 0
mov dword [rbp + 0x260], 0
lea rdx, [rbp + 0x260]
mov rcx, rax
call qword [0x18009ad70]
test r14d, r14d
js 0x18004f627
mov rax, qword [0x18009b110]
mov rcx, qword [0x18009b108]
sub rax, rcx
sar rax, 3
movsxd rsi, r14d
cmp rsi, rax
jae 0x18004f627
mov rax, qword [rcx + rdi*8]
mov rbx, qword [rax + 8]
test rbx, rbx
je 0x18004f627
xor edx, edx
mov cl, 0x62
call fcn.180046860
mov byte [rsp + 0x68], al
mov edx, 1
mov cl, 0x6f
call fcn.180046860
mov byte [rsp + 0x69], al
mov edx, 2
mov cl, 0x75
call fcn.180046860
mov byte [rsp + 0x6a], al
mov edx, 3
mov cl, 0x6e
call fcn.180046860
mov byte [rsp + 0x6b], al
mov edx, 4
mov cl, 0x64
call fcn.180046860
mov byte [rsp + 0x6c], al
mov edx, 5
mov cl, 0x73
call fcn.180046860
mov byte [rsp + 0x6d], al
xor eax, eax
mov byte [rsp + 0x6e], al
mov edx, r12d
nop dword [rax]
movsxd rcx, edx
lea eax, [rdx + 0x13]
xor byte [rsp + rcx + 0x68], al
inc edx
cmp edx, 6
jb 0x18004e730
mov byte [rsp + 0x6e], 0
mov rax, qword [0x18009ac30]
lea rdx, [rsp + 0x68]
mov rcx, qword [rbx]
call rax
test rax, rax
je 0x18004e798
mov rax, qword [rax + 0x10]
test rax, rax
je 0x18004e798
mov rax, qword [rax]
mov rdx, rbx
lea rcx, [rbp + 0x240]
call rax
movups xmm15, xmmword [rax]
movsd xmm0, qword [rax + 0x10]
movaps xmm9, xmm0
shufps xmm9, xmm9, 0x55
movsd qword [rbp + 0x230], xmm0
movss xmm6, dword [rbp + 0x230]
jmp 0x18004e7a3
xorps xmm15, xmm15
xorps xmm6, xmm6
xorps xmm9, xmm9
movups xmmword [rbp + 0x190], xmm15
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], r12
xor r8d, r8d
lea rdx, [0x18005d392]
lea rcx, [rbp + 0x270]
call fcn.1800032d0
nop
mov rax, qword [0x18009b110]
mov rcx, qword [0x18009b108]
sub rax, rcx
sar rax, 3
cmp rsi, rax
jae 0x18004e961
mov rax, qword [rcx + rdi*8]
mov rcx, qword [rax + 0x40]
lea rdx, [rbp + 0x200]
mov rcx, qword [rcx + 0x50]
call fcn.180002fd0
nop
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.1800461d0
mov rbx, rax
lea rax, [rbp + 0x270]
cmp rax, rbx
je 0x18004e8ad
mov rdx, qword [rbp + 0x288]
cmp rdx, 0x10
jb 0x18004e870
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e86b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f79d
call fcn.180059cf4
mov qword [rbp + 0x280], r12
mov qword [rbp + 0x288], 0xf
mov byte [rbp + 0x270], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x270], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x280], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 0x10
jb 0x18004e8ee
inc rdx
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e8e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f79d
call fcn.180059cf4
mov qword [rbp + 0x1f0], r12
mov qword [rbp + 0x1f8], 0xf
mov byte [rbp + 0x1e0], 0
mov rdx, qword [rbp + 0x218]
cmp rdx, 0x10
jb 0x18004e948
inc rdx
mov rcx, qword [rbp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004e943
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f7a4
call fcn.180059cf4
mov qword [rbp + 0x210], r12
mov qword [rbp + 0x218], 0xf
mov byte [rbp + 0x200], 0
movaps xmm0, xmm15
shufps xmm0, xmm15, 0x55
movaps xmmword [rbp + 0x220], xmm0
movaps xmm1, xmm15
shufps xmm1, xmm15, 0xaa
movaps xmmword [rbp + 0x240], xmm1
movaps xmm13, xmm1
subss xmm13, xmm9
movaps xmm11, xmm6
addss xmm11, xmm0
movaps xmm14, xmm15
movaps xmm10, xmm15
shufps xmm10, xmm15, 0xff
subss xmm14, xmm10
addss xmm10, xmm15
movaps xmm12, xmm0
subss xmm12, xmm6
addss xmm9, xmm1
movaps xmm0, xmm13
addss xmm0, xmm13
movaps xmm1, xmm12
addss xmm1, xmm12
movaps xmm2, xmm9
addss xmm2, xmm0
movaps xmm3, xmm12
addss xmm3, xmm1
movaps xmm8, xmm9
addss xmm8, xmm2
movaps xmm6, xmm12
addss xmm6, xmm3
movss xmm2, dword [0x18006885c]
mulss xmm8, xmm2
movss dword [rbp - 0x50], xmm8
mulss xmm6, xmm2
movss dword [rbp - 0x78], xmm6
movaps xmm7, xmm14
addss xmm7, xmm10
addss xmm7, xmm14
addss xmm7, xmm10
mulss xmm7, xmm2
movss dword [rbp - 0x74], xmm7
movaps xmm0, xmm11
addss xmm0, xmm11
movaps xmm1, xmm11
addss xmm1, xmm0
movaps xmm0, xmm11
addss xmm0, xmm1
mulss xmm0, xmm2
movss dword [rbp - 0x4c], xmm0
cmp byte [0x180073045], 0
je 0x18004f146
movups xmm0, xmmword [0x180099f90]
movups xmmword [rsp + 0x40], xmm0
cmp byte [0x18009af10], 0
je 0x18004ea99
movss xmm0, dword [0x18009b0e8]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18009b0ec]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18009b0f0]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x3f800000
mov ecx, dword [0x180073274]
sub ecx, 1
je 0x18004ebea
cmp ecx, 1
jne 0x18004f146
movss dword [rbp + 0x160], xmm7
movss dword [rbp + 0x164], xmm6
movss dword [rbp + 0x168], xmm8
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x160]
call fcn.180048330
movss xmm14, dword [0x1800688dc]
test al, al
je 0x18004f14f
movaps xmm1, xmm6
addss xmm1, xmm14
movaps xmm0, xmm7
unpcklps xmm0, xmm1
movsd qword [rbp + 0x1a0], xmm0
movss dword [rbp + 0x1a8], xmm8
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x1a0]
call fcn.1800480f0
test al, al
je 0x18004f14f
movss xmm6, dword [rsp + 0x64]
movaps xmm2, xmm6
movss xmm7, dword [rbp + 0xdc]
subss xmm2, xmm7
mulss xmm2, dword [0x180068858]
movss xmm1, dword [rbp + 0xd8]
movaps xmm0, xmm1
subss xmm0, xmm2
cvttss2si r9d, xmm0
addss xmm1, xmm2
cvttss2si r8d, xmm1
mov r10, qword [0x18009adb8]
lea rcx, [rsp + 0x40]
call fcn.1800053a0
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
movss dword [rbp + 0xe0], xmm0
movss dword [rbp + 0xe4], xmm6
movd xmm1, r9d
cvtdq2ps xmm1, xmm1
movss dword [rbp + 0xe8], xmm1
movss dword [rbp + 0xec], xmm7
movss xmm0, dword [0x1800688a8]
movss dword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0xf
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0xe8]
lea rcx, [r10 + 0x1d40]
call fcn.1800241d0
movss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x74]
jmp 0x18004f14f
movss dword [rbp + 0x170], xmm14
movss dword [rbp + 0x174], xmm11
movss dword [rbp + 0x178], xmm13
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x170]
call fcn.180048330
test al, al
je 0x18004f146
movss dword [rbp + 0x180], xmm10
movss dword [rbp + 0x184], xmm11
movss dword [rbp + 0x188], xmm13
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x180]
call fcn.180048330
test al, al
je 0x18004f146
movss dword [rbp + 0x100], xmm14
movss dword [rbp + 0x104], xmm12
movss dword [rbp + 0x108], xmm13
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x100]
call fcn.180048330
test al, al
je 0x18004f146
movss dword [rbp + 0x110], xmm10
movss dword [rbp + 0x114], xmm12
movss dword [rbp + 0x118], xmm13
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x110]
call fcn.180048330
test al, al
je 0x18004f146
movss dword [rbp + 0x120], xmm14
movss dword [rbp + 0x124], xmm11
movss dword [rbp + 0x128], xmm9
lea rdx, [rbp]
lea rcx, [rbp + 0x120]
call fcn.180048330
test al, al
je 0x18004f146
movss dword [rbp + 0x130], xmm10
movss dword [rbp + 0x134], xmm11
movss dword [rbp + 0x138], xmm9
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x130]
call fcn.180048330
test al, al
je 0x18004f146
movss dword [rbp + 0x140], xmm14
movss dword [rbp + 0x144], xmm12
movss dword [rbp + 0x148], xmm9
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x140]
call fcn.180048330
test al, al
je 0x18004f146
movss dword [rbp + 0x150], xmm10
movss dword [rbp + 0x154], xmm12
movss dword [rbp + 0x158], xmm9
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x150]
call fcn.180048330
test al, al
je 0x18004f146
mov r10, qword [0x18009adb8]
lea rcx, [rsp + 0x40]
call fcn.1800053a0
mov ebx, eax
movss xmm7, dword [rbp - 0x80]
movss dword [rbp + 0xf8], xmm7
movss xmm6, dword [rbp - 0x7c]
movss dword [rbp + 0xfc], xmm6
movss xmm15, dword [rbp + 0xf0]
movss dword [rbp - 0x40], xmm15
movss xmm14, dword [rbp + 0xf4]
movss dword [rbp - 0x3c], xmm14
movss xmm10, dword [0x1800688dc]
movss dword [rsp + 0x20], xmm10
mov r9d, eax
lea r8, [rbp + 0xf8]
lea rdx, [rbp - 0x40]
lea rcx, [r10 + 0x1d40]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss xmm9, dword [rsp + 0x58]
movss dword [rbp - 0x38], xmm9
movss xmm8, dword [rsp + 0x5c]
movss dword [rbp - 0x34], xmm8
movss dword [rbp - 0x30], xmm7
movss dword [rbp - 0x2c], xmm6
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x30]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss xmm7, dword [rsp + 0x50]
movss dword [rbp - 0x28], xmm7
movss xmm6, dword [rsp + 0x54]
movss dword [rbp - 0x24], xmm6
movss dword [rbp - 0x20], xmm9
movss dword [rbp - 0x1c], xmm8
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x20]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss dword [rbp - 0x18], xmm15
movss dword [rbp - 0x14], xmm14
movss dword [rbp - 0x10], xmm7
movss dword [rbp - 0xc], xmm6
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x10]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss xmm13, dword [rbp - 8]
movss dword [rbp + 8], xmm13
movss xmm12, dword [rbp - 4]
movss dword [rbp + 0xc], xmm12
movss xmm7, dword [rbp]
movss dword [rbp + 0x10], xmm7
movss xmm6, dword [rbp + 4]
movss dword [rbp + 0x14], xmm6
movss dword [rsp + 0x20], xmm10
mov r9d, ebx
lea r8, [rbp + 8]
lea rdx, [rbp + 0x10]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss xmm11, dword [rbp + 0x18]
movss dword [rbp + 0x20], xmm11
movss xmm10, dword [rbp + 0x1c]
movss dword [rbp + 0x24], xmm10
movss dword [rbp + 0x28], xmm13
movss dword [rbp + 0x2c], xmm12
movss xmm0, dword [0x1800688dc]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x28]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss xmm9, dword [rbp + 0x30]
movss dword [rbp + 0x38], xmm9
movss xmm8, dword [rbp + 0x34]
movss dword [rbp + 0x3c], xmm8
movss dword [rbp + 0x40], xmm11
movss dword [rbp + 0x44], xmm10
movss xmm0, dword [0x1800688dc]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rbp + 0x38]
lea rdx, [rbp + 0x40]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss dword [rbp + 0x48], xmm7
movss dword [rbp + 0x4c], xmm6
movss dword [rbp + 0x50], xmm9
movss dword [rbp + 0x54], xmm8
movss xmm0, dword [0x1800688dc]
movss dword [rsp + 0x20], xmm0
mov r9d, ebx
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x50]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss dword [rbp + 0x58], xmm7
movss dword [rbp + 0x5c], xmm6
movss dword [rbp + 0x60], xmm15
movss dword [rbp + 0x64], xmm14
movss xmm14, dword [0x1800688dc]
movss dword [rsp + 0x20], xmm14
mov r9d, ebx
lea r8, [rbp + 0x58]
lea rdx, [rbp + 0x60]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss dword [rbp + 0x68], xmm13
movss dword [rbp + 0x6c], xmm12
movss xmm0, dword [rbp - 0x80]
movss dword [rbp + 0x70], xmm0
movss xmm0, dword [rbp - 0x7c]
movss dword [rbp + 0x74], xmm0
movss dword [rsp + 0x20], xmm14
mov r9d, ebx
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x70]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss dword [rbp + 0x78], xmm11
movss dword [rbp + 0x7c], xmm10
movss xmm0, dword [rsp + 0x58]
movss dword [rbp + 0x80], xmm0
movss xmm0, dword [rsp + 0x5c]
movss dword [rbp + 0x84], xmm0
movss dword [rsp + 0x20], xmm14
mov r9d, ebx
lea r8, [rbp + 0x78]
lea rdx, [rbp + 0x80]
call fcn.180024070
mov rcx, qword [0x18009adb8]
add rcx, 0x1d40
movss dword [rbp + 0x88], xmm9
movss dword [rbp + 0x8c], xmm8
movss xmm0, dword [rsp + 0x50]
movss dword [rbp + 0x90], xmm0
movss xmm0, dword [rsp + 0x54]
movss dword [rbp + 0x94], xmm0
movss dword [rsp + 0x20], xmm14
mov r9d, ebx
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x90]
call fcn.180024070
movss xmm6, dword [rbp - 0x78]
movss xmm7, dword [rbp - 0x74]
movss xmm8, dword [rbp - 0x50]
movups xmm15, xmmword [rbp + 0x190]
jmp 0x18004f14f
movss xmm14, dword [0x1800688dc]
cmp byte [0x180073044], 0
je 0x18004f2b5
movaps xmm0, xmm7
unpcklps xmm0, xmm6
movsd qword [rbp + 0x1b0], xmm0
movss dword [rbp + 0x1b8], xmm8
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x1b0]
call fcn.180048330
test al, al
je 0x18004f2b5
movups xmm0, xmmword [0x180099fb0]
movups xmmword [rsp + 0x40], xmm0
cmp byte [0x18009aefd], 0
je 0x18004f1d3
movss xmm0, dword [0x18009b0e8]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18009b0ec]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18009b0f0]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x3f800000
mov ecx, dword [0x180073278]
sub ecx, 1
je 0x18004f244
cmp ecx, 1
jne 0x18004f2b5
mov r10, qword [0x18009adb8]
lea rcx, [rsp + 0x40]
call fcn.1800053a0
movss xmm0, dword [rsp + 0x60]
movss dword [rbp + 0x98], xmm0
movss xmm1, dword [rsp + 0x64]
movss dword [rbp + 0x9c], xmm1
movss xmm0, dword [0x18009b100]
movss dword [rbp + 0xa0], xmm0
movss xmm1, dword [0x18009b104]
movss dword [rbp + 0xa4], xmm1
lea r8, [rbp + 0x98]
lea rdx, [rbp + 0xa0]
jmp 0x18004f29f
mov r10, qword [0x18009adb8]
lea rcx, [rsp + 0x40]
call fcn.1800053a0
movss xmm0, dword [rsp + 0x60]
movss dword [rbp + 0xa8], xmm0
movss xmm1, dword [rsp + 0x64]
movss dword [rbp + 0xac], xmm1
movss xmm0, dword [0x18009b100]
movss dword [rbp + 0xb0], xmm0
movss xmm1, dword [0x18009b0fc]
movss dword [rbp + 0xb4], xmm1
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0xb0]
movss dword [rsp + 0x20], xmm14
mov r9d, eax
lea rcx, [r10 + 0x1d40]
call fcn.180024070
movsd xmm9, qword [0x1800688c8]
cmp byte [0x18009aefa], 0
je 0x18004f3cc
movss dword [rbp - 0x70], xmm7
movss xmm0, dword [rbp - 0x4c]
cvtps2pd xmm0, xmm0
addsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
movss dword [rbp - 0x6c], xmm0
movss dword [rbp - 0x68], xmm8
lea rdx, [rbp + 0xb8]
lea rcx, [rbp - 0x70]
call fcn.180048330
test al, al
je 0x18004f3cc
movups xmm0, xmmword [0x180099fd0]
movups xmmword [rsp + 0x40], xmm0
cmp byte [0x18009aef8], 0
je 0x18004f34b
movss xmm0, dword [0x18009b0e8]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18009b0ec]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18009b0f0]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x3f800000
lea r8, [rbp + 0x270]
cmp qword [rbp + 0x288], 0x10
cmovae r8, qword [rbp + 0x270]
lea rcx, [rsp + 0x40]
call fcn.1800053a0
movss xmm0, dword [rbp + 0xb8]
movss dword [rbp + 0xc0], xmm0
movss xmm1, dword [rbp + 0xbc]
movss dword [rbp + 0xc4], xmm1
mov qword [rsp + 0x30], r8
lea rcx, [0x1800600f4]
mov qword [rsp + 0x28], rcx
mov byte [rsp + 0x20], 1
mov r9d, eax
movss xmm10, dword [0x180068934]
movaps xmm2, xmm10
movd r8d, xmm2
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x18009b0c8]
call fcn.1800449b0
jmp 0x18004f3d5
movss xmm10, dword [0x180068934]
cmp byte [0x18007304a], 0
je 0x18004f503
movss dword [rbp - 0x60], xmm7
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
subsd xmm0, xmm9
cvtpd2ps xmm0, xmm0
movss dword [rbp - 0x5c], xmm0
movss dword [rbp - 0x58], xmm8
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.180048330
test al, al
je 0x18004f503
movups xmm0, xmmword [0x180099fe0]
movups xmmword [rsp + 0x40], xmm0
cmp byte [0x18009aeff], 0
je 0x18004f45f
movss xmm0, dword [0x18009b0e8]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [0x18009b0ec]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [0x18009b0f0]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x3f800000
subss xmm7, dword [rbp + 0x260]
subss xmm6, dword [rbp + 0x264]
subss xmm8, dword [rbp + 0x268]
mulss xmm6, xmm6
mulss xmm7, xmm7
addss xmm6, xmm7
mulss xmm8, xmm8
addss xmm6, xmm8
xorps xmm0, xmm0
ucomiss xmm0, xmm6
ja 0x18004f49c
sqrtss xmm6, xmm6
jmp 0x18004f4a7
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
lea rcx, [rsp + 0x40]
call fcn.1800053a0
movss xmm1, dword [rsp + 0x60]
movss dword [rbp + 0xc8], xmm1
movss xmm2, dword [rsp + 0x64]
movss dword [rbp + 0xcc], xmm2
xorps xmm0, xmm0
cvtss2sd xmm0, xmm6
movsd qword [rsp + 0x30], xmm0
mov qword [rsp + 0x28], r13
mov byte [rsp + 0x20], 1
mov r9d, eax
movaps xmm2, xmm10
movd r8d, xmm2
lea rdx, [rbp + 0xc8]
mov rcx, qword [0x18009b0c8]
call fcn.1800449b0
mov ebx, dword [rbp + 0x240]
movaps xmm6, xmm15
movaps xmm0, xmmword [rbp + 0x220]
unpcklps xmm6, xmm0
movzx eax, byte [0x180073046]
movzx ecx, byte [0x18009aefc]
test cl, cl
jne 0x18004f539
test al, al
jne 0x18004f539
mov qword [0x18009aeb0], r12
jmp 0x18004f6d8
cmp byte [0x180073049], 0
je 0x18004f6c8
movsd qword [rbp + 0x1c0], xmm6
mov dword [rbp + 0x1c8], ebx
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x1c0]
call fcn.180048330
test al, al
je 0x18004f6d8
movss xmm1, dword [0x18007326c]
movaps xmm0, xmm1
movss xmm2, dword [0x18009b100]
addss xmm0, xmm2
movss xmm3, dword [rbp + 0xd0]
comiss xmm3, xmm0
ja 0x18004f5e6
subss xmm2, xmm1
comiss xmm2, xmm3
ja 0x18004f5e6
movaps xmm0, xmm1
movss xmm2, dword [0x18009b104]
addss xmm0, xmm2
movss xmm3, dword [rbp + 0xd4]
comiss xmm3, xmm0
ja 0x18004f5e6
subss xmm2, xmm1
comiss xmm2, xmm3
ja 0x18004f5e6
mov rcx, qword [0x18009b108]
mov rax, qword [0x18009b110]
sub rax, rcx
sar rax, 3
cmp rsi, rax
jae 0x18004f5e6
mov rax, qword [rcx + rdi*8]
mov qword [0x18009aeb0], rax
mov rdx, qword [rbp + 0x288]
cmp rdx, 0x10
jb 0x18004f627
mov rcx, qword [rbp + 0x270]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004f622
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004f7ab
call fcn.180059cf4
inc r14d
inc rdi
mov rcx, qword [0x18009b110]
sub rcx, qword [0x18009b108]
sar rcx, 3
movsxd rax, r14d
cmp rax, rcx
jb 0x18004e5f0
mov eax, r15d
sub eax, dword [0x18009b0d0]
cmp eax, 5
jbe 0x18004f660
mov dword [0x18009b0d0], r15d
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.180059910
lea r11, [rsp + 0x4a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test cl, cl
jne 0x18004f5c1
test al, al
jne 0x18004f5c1
cmp byte [0x180073048], 0
je 0x18004f5e6
movsd qword [rbp + 0x1d0], xmm6
mov dword [rbp + 0x1d8], ebx
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.180048330
test al, al
je 0x18004f5e6
movss xmm6, dword [rbp - 0x44]
movss xmm7, dword [rbp - 0x48]
cmp byte [0x180073049], 0
je 0x18004f770
movss xmm1, dword [0x18007326c]
movaps xmm0, xmm1
movss xmm2, dword [0x18009b100]
addss xmm0, xmm2
comiss xmm7, xmm0
ja 0x18004f5e6
subss xmm2, xmm1
comiss xmm2, xmm7
ja 0x18004f5e6
movaps xmm0, xmm1
movss xmm2, dword [0x18009b104]
addss xmm0, xmm2
comiss xmm6, xmm0
ja 0x18004f5e6
subss xmm2, xmm1
comiss xmm2, xmm6
ja 0x18004f5e6
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18004f5e6
cvttss2si r8d, dword [0x180073280]
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180045fc0
jmp 0x18004f5e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3