Function at 0x180024a80
Capabilities:
Contain obfuscated stackstrings
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rdi
push r12
push r13
push r14
lea rbp, [rax - 0x3b8]
sub rsp, 0x488
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xd8], xmm14
call fcn.180017620
mov ebx, dword [0x18014e100]
mov rdi, rax
mov r14d, 4
test rax, rax
je 0x180024bc0
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx + rbx*8]
mov ecx, dword [r14 + rdx]
cmp dword [0x18014f128], ecx
jle 0x180024b32
lea rcx, [0x18014f128]
call fcn.1800ea128
cmp dword [0x18014f128], 0xffffffff
jne 0x180024b32
mov ecx, 0x3300df68
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014edc0], rcx
lea rcx, [0x18014f128]
call fcn.1800ea0bc
mov r8, rdi
call fcn.180048b50
mov rdi, rax
test rax, rax
je 0x180024bc0
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx + rbx*8]
mov ecx, dword [r14 + rdx]
cmp dword [0x18014ed50], ecx
jle 0x180024b90
lea rcx, [0x18014ed50]
call fcn.1800ea128
cmp dword [0x18014ed50], 0xffffffff
jne 0x180024b90
mov ecx, 0x56e64b7d
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014ec40], rcx
lea rcx, [0x18014ed50]
call fcn.1800ea0bc
mov rdx, qword [0x18014ec40]
lea r8, [rsp + 0x30]
xorps xmm7, xmm7
lea rcx, [rsp + 0x40]
xorps xmm0, xmm0
movss dword [rsp + 0x38], xmm7
unpcklps xmm0, xmm7
mov r9, rdi
movsd qword [rsp + 0x30], xmm0
call fcn.180048ab0
jmp 0x180024bd4
mov qword [rsp + 0x40], 0
xorps xmm7, xmm7
mov dword [rsp + 0x48], 0
call fcn.180017620
mov rdi, rax
test rax, rax
je 0x180024cbe
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx + rbx*8]
mov r8d, dword [r14 + rdx]
cmp dword [0x18014f128], r8d
jle 0x180024c34
lea rcx, [0x18014f128]
call fcn.1800ea128
cmp dword [0x18014f128], 0xffffffff
jne 0x180024c34
mov ecx, 0x3300df68
call fcn.18000fa40
lea rcx, [0x18014f128]
mov rdx, qword [rax]
mov qword [0x18014edc0], rdx
call fcn.1800ea0bc
mov r8, rdi
call fcn.180048b50
mov rdi, rax
test rax, rax
je 0x180024cbe
mov rcx, qword gs:[0x58]
mov rdx, qword [rcx + rbx*8]
mov ecx, dword [r14 + rdx]
cmp dword [0x18014f334], ecx
jle 0x180024c92
lea rcx, [0x18014f334]
call fcn.1800ea128
cmp dword [0x18014f334], 0xffffffff
jne 0x180024c92
mov ecx, 0x33ac3a8f
call fcn.18000fa40
lea rcx, [0x18014f334]
mov rdx, qword [rax]
mov qword [0x18014f1d0], rdx
call fcn.1800ea0bc
mov rdx, qword [0x18014f1d0]
lea r8, [rsp + 0x30]
xorps xmm0, xmm0
movss dword [rsp + 0x38], xmm7
unpcklps xmm0, xmm7
lea rcx, [rbp - 0x70]
mov r9, rdi
movsd qword [rsp + 0x30], xmm0
call fcn.180048ab0
jmp 0x180024ccd
mov qword [rbp - 0x70], 0
mov dword [rbp - 0x68], 0
mov rax, qword gs:[0x58]
mov rdi, qword [rax + rbx*8]
mov eax, dword [rdi + r14]
cmp dword [0x18014ec00], eax
jle 0x180024d18
lea rcx, [0x18014ec00]
call fcn.1800ea128
cmp dword [0x18014ec00], 0xffffffff
jne 0x180024d18
mov ecx, 0xf7ce809e
call fcn.18000eff0
lea rcx, [0x18014ec00]
mov qword [0x18014f178], rax
call fcn.1800ea0bc
mov rax, qword [0x18014f178]
mov rax, qword [rax + 0xb8]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call fcn.180017620
mov rbx, rax
test rax, rax
jne 0x180024d57
mov qword [rsp + 0x34], rax
mov dword [rsp + 0x30], eax
lea rax, [rsp + 0x30]
jmp 0x180024e05
mov eax, dword [rdi + r14]
cmp dword [0x18014edec], eax
jle 0x180024d95
lea rcx, [0x18014edec]
call fcn.1800ea128
cmp dword [0x18014edec], 0xffffffff
jne 0x180024d95
mov ecx, 0x6d5c7dd2
call fcn.180011100
lea rcx, [0x18014edec]
mov qword [0x18014f278], rax
call fcn.1800ea0bc
mov rax, qword [0x18014f278]
mov qword [rsp + 0x34], 0
mov dword [rsp + 0x30], 0
mov rbx, qword [rbx + rax]
test rbx, rbx
jne 0x180024dbd
lea rax, [rsp + 0x30]
jmp 0x180024e05
mov eax, dword [rdi + r14]
cmp dword [0x18014ed30], eax
jle 0x180024dfb
lea rcx, [0x18014ed30]
call fcn.1800ea128
cmp dword [0x18014ed30], 0xffffffff
jne 0x180024dfb
mov ecx, 0x7cd71351
call fcn.180011100
lea rcx, [0x18014ed30]
mov qword [0x18014ed70], rax
call fcn.1800ea0bc
mov rax, qword [0x18014ed70]
add rax, rbx
movss xmm11, dword [rsp + 0x54]
xorps xmm14, xmm14
addss xmm11, dword [rax + 4]
movss xmm0, dword [0x18014e640]
xorps xmm12, xmm12
ucomiss xmm0, xmm7
movabs r13, 0x7fffffff0000
movaps xmm9, xmm11
movss dword [rsp + 0x70], xmm7
mulss xmm9, dword [rbp - 0x68]
movaps xmm8, xmm11
mulss xmm11, dword [rbp - 0x70]
mulss xmm8, dword [rbp - 0x6c]
addss xmm11, dword [rsp + 0x40]
addss xmm9, dword [rsp + 0x48]
addss xmm8, dword [rsp + 0x44]
movss dword [rsp + 0x74], xmm14
movss dword [rsp + 0x78], xmm12
movaps xmm6, xmm11
movss dword [rbp - 0x48], xmm11
movss dword [rbp - 0x50], xmm9
unpcklps xmm6, xmm8
movsd qword [rbp - 0x70], xmm6
movss dword [rbp - 0x4c], xmm8
movd r12d, xmm9
jne 0x180024fc6
movss xmm0, dword [0x18014e644]
ucomiss xmm0, xmm7
jne 0x180024fc6
movss xmm0, dword [0x18014e648]
ucomiss xmm0, xmm7
jne 0x180024fc6
mov rcx, qword [0x18014e260]
add rcx, 0x128
cmp rcx, 0x40000
jbe 0x180024f99
lea rax, [rcx + 8]
cmp rax, r13
jae 0x180024f99
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180024f99
lea rax, [rcx + 8]
cmp rax, r13
jae 0x180024f99
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180024f99
lea rax, [rcx + 8]
cmp rax, r13
jae 0x180024f99
mov rbx, qword [rcx]
test rbx, rbx
je 0x180024f99
mov eax, dword [rdi + r14]
cmp dword [0x18014ed50], eax
jle 0x180024f6c
lea rcx, [0x18014ed50]
call fcn.1800ea128
cmp dword [0x18014ed50], 0xffffffff
jne 0x180024f6c
mov ecx, 0x56e64b7d
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014ec40], rcx
lea rcx, [0x18014ed50]
call fcn.1800ea0bc
mov rdx, qword [0x18014ec40]
lea r8, [rsp + 0x50]
xorps xmm0, xmm0
movss dword [rsp + 0x58], xmm7
unpcklps xmm0, xmm7
lea rcx, [rsp + 0x40]
mov r9, rbx
movsd qword [rsp + 0x50], xmm0
call fcn.180048ab0
jmp 0x180024faa
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
movsd xmm0, qword [rsp + 0x40]
lea rcx, [rsp + 0x30]
mov eax, dword [rsp + 0x48]
movsd qword [rsp + 0x30], xmm6
mov dword [rsp + 0x38], r12d
jmp 0x180024fee
movsd xmm0, qword [0x18014e640]
lea rcx, [rsp + 0x40]
mov eax, dword [0x18014e648]
movss dword [rsp + 0x40], xmm11
movss dword [rsp + 0x44], xmm8
movss dword [rsp + 0x48], xmm9
mov r9, qword [0x18014e268]
lea rdx, [rsp + 0x50]
add r9, 0x559e30
mov qword [rsp + 0x20], 1
mov r8d, 0xa10000
mov dword [rsp + 0x58], eax
xorps xmm3, xmm3
movsd qword [rsp + 0x50], xmm0
call r9
test al, al
je 0x180025037
xorps xmm0, xmm0
movss dword [0x18014e688], xmm7
unpcklps xmm0, xmm7
jmp 0x18002666a
mov ecx, dword [0x18014f360]
movaps xmmword [rsp + 0x420], xmm10
movaps xmmword [rsp + 0x3d0], xmm15
test ecx, ecx
je 0x180025068
sub ecx, 1
je 0x180025068
cmp ecx, 1
je 0x180025068
movss xmm15, dword [rbp + 0x3c0]
jmp 0x180025072
call qword [0x18014f358]
movaps xmm15, xmm0
call fcn.180017620
mov rbx, rax
test rax, rax
jne 0x180025084
xorps xmm0, xmm0
jmp 0x1800250ce
mov eax, dword [rdi + r14]
cmp dword [0x18014ece8], eax
jle 0x1800250c2
lea rcx, [0x18014ece8]
call fcn.1800ea128
cmp dword [0x18014ece8], 0xffffffff
jne 0x1800250c2
mov ecx, 0xc566d10
call fcn.180011100
lea rcx, [0x18014ece8]
mov qword [0x18014eb50], rax
call fcn.1800ea0bc
mov rax, qword [0x18014eb50]
movss xmm0, dword [rbx + rax]
subss xmm15, xmm0
subss xmm15, dword [0x18012d4dc]
call fcn.180017620
mov rbx, rax
test rax, rax
jne 0x1800250f1
xorps xmm0, xmm0
jmp 0x1800251dd
mov eax, dword [rdi + r14]
cmp dword [0x18014f374], eax
jle 0x18002512f
lea rcx, [0x18014f374]
call fcn.1800ea128
cmp dword [0x18014f374], 0xffffffff
jne 0x18002512f
mov ecx, 0xac5e6f4b
call fcn.180011100
lea rcx, [0x18014f374]
mov qword [0x18014eee8], rax
call fcn.1800ea0bc
mov rax, qword [0x18014eee8]
mov ecx, dword [rdi + r14]
cmp qword [rbx + rax], 0
je 0x180025194
cmp dword [0x18014ebdc], ecx
jle 0x18002517e
lea rcx, [0x18014ebdc]
call fcn.1800ea128
cmp dword [0x18014ebdc], 0xffffffff
jne 0x18002517e
mov ecx, 0x9e8772e4
call fcn.18000fa40
lea rcx, [0x18014ebdc]
mov rdx, qword [rax]
mov qword [0x18014ef20], rdx
call fcn.1800ea0bc
mov rax, qword [0x18014ef20]
mov rcx, rbx
call rax
mulss xmm0, dword [0x18012d9e8]
jmp 0x1800251dd
cmp dword [0x18014ebdc], ecx
jle 0x1800251d1
lea rcx, [0x18014ebdc]
call fcn.1800ea128
cmp dword [0x18014ebdc], 0xffffffff
jne 0x1800251d1
mov ecx, 0x9e8772e4
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014ef20], rcx
lea rcx, [0x18014ebdc]
call fcn.1800ea0bc
mov rax, qword [0x18014ef20]
mov rcx, rbx
call rax
mulss xmm15, dword [0x18012d840]
movss xmm6, dword [0x18012d4c0]
addss xmm15, dword [0x18012d530]
mulss xmm15, xmm0
addss xmm15, xmm6
movaps xmm10, xmm15
movss dword [rbp + 0x3d8], xmm15
mulss xmm10, dword [0x18012d528]
movss dword [rbp + 0x3d0], xmm10
call fcn.180017620
mov rbx, rax
test rax, rax
je 0x1800252cf
mov ecx, dword [rdi + r14]
cmp dword [0x18014edec], ecx
jle 0x18002526f
lea rcx, [0x18014edec]
call fcn.1800ea128
cmp dword [0x18014edec], 0xffffffff
jne 0x18002526f
mov ecx, 0x6d5c7dd2
call fcn.180011100
lea rcx, [0x18014edec]
mov qword [0x18014f278], rax
call fcn.1800ea0bc
mov rax, qword [0x18014f278]
mov rbx, qword [rbx + rax]
test rbx, rbx
je 0x1800252cf
mov eax, dword [rdi + r14]
cmp dword [0x18014f2d8], eax
jle 0x1800252c0
lea rcx, [0x18014f2d8]
call fcn.1800ea128
cmp dword [0x18014f2d8], 0xffffffff
jne 0x1800252c0
mov ecx, 0x3fc4366
call fcn.18000fa40
lea rcx, [0x18014f2d8]
mov r8, qword [rax]
mov qword [0x18014f340], r8
call fcn.1800ea0bc
mov rdx, rbx
lea rcx, [rbp - 0x20]
call qword [0x18014f340]
jmp 0x1800252de
mov qword [rbp - 0x20], 0
mov dword [rbp - 0x18], 0
call fcn.180017620
mov rbx, rax
test rax, rax
je 0x18002539f
mov edx, dword [rdi + r14]
cmp dword [0x18014edec], edx
jle 0x18002532d
lea rcx, [0x18014edec]
call fcn.1800ea128
cmp dword [0x18014edec], 0xffffffff
jne 0x18002532d
mov ecx, 0x6d5c7dd2
call fcn.180011100
lea rcx, [0x18014edec]
mov qword [0x18014f278], rax
call fcn.1800ea0bc
mov rax, qword [0x18014f278]
mov rbx, qword [rbx + rax]
test rbx, rbx
je 0x18002539f
mov eax, dword [rdi + r14]
cmp dword [0x18014f2c4], eax
jle 0x18002537e
lea rcx, [0x18014f2c4]
call fcn.1800ea128
cmp dword [0x18014f2c4], 0xffffffff
jne 0x18002537e
mov ecx, 0x28985755
call fcn.18000fa40
lea rcx, [0x18014f2c4]
mov r8, qword [rax]
mov qword [0x18014f3c8], r8
call fcn.1800ea0bc
mov rdx, rbx
lea rcx, [rbp - 0x60]
call qword [0x18014f3c8]
movss xmm0, dword [rbp - 0x60]
movss xmm3, dword [rbp - 0x58]
movss dword [rbp + 0x3c0], xmm0
jmp 0x1800253be
xorps xmm1, xmm1
mov dword [rbp - 0x5c], 0
xorps xmm3, xmm3
movss dword [rbp + 0x3c0], xmm1
movss dword [rbp - 0x60], xmm1
movss dword [rbp - 0x58], xmm3
cmp dword [0x18014e2d0], 0
mov qword [rsp + 0x480], rsi
movaps xmmword [rsp + 0x3f0], xmm13
movss dword [rbp + 0x3c8], xmm3
jne 0x180025a78
xorps xmm0, xmm0
mov qword [rsp + 0x478], r15
movaps xmm1, xmm15
mov qword [rbp + 0xd0], 0
lea rcx, [rbp + 0xc0]
movdqu xmmword [rbp + 0xc0], xmm0
call fcn.1800246e0
mov r14, qword [rbp + 0xc0]
mov r15, qword [rbp + 0xc8]
mov rbx, r14
cmp r14, r15
je 0x1800259f5
nop dword [rax]
cmp byte [0x18014e2cf], 0
movaps xmm10, xmm9
movsd xmm0, qword [rbx]
movaps xmm9, xmm8
movss xmm12, dword [rbx + 8]
movaps xmm14, xmm0
movsd qword [rbp + 0x10], xmm0
addss xmm10, xmm12
movss xmm13, dword [rbp + 0x10]
movaps xmm8, xmm13
shufps xmm14, xmm14, 0x55
addss xmm8, xmm11
movss dword [rbp + 0x3c0], xmm12
addss xmm9, xmm14
je 0x1800256df
cmp byte [0x18014e2af], 0
je 0x1800256df
mov ecx, dword [0x18014e3ac]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800256df
mov rcx, qword [0x18014e260]
test rcx, rcx
je 0x1800256df
add rcx, 0x128
cmp rcx, 0x40000
jbe 0x1800255aa
lea rax, [rcx + 8]
cmp rax, r13
jae 0x1800255aa
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1800255aa
lea rax, [rcx + 8]
cmp rax, r13
jae 0x1800255aa
mov rcx, qword [rcx]
add rcx, 0xb0
cmp rcx, 0x40000
jbe 0x1800255aa
lea rax, [rcx + 8]
cmp rax, r13
jae 0x1800255aa
mov rsi, qword [rcx]
test rsi, rsi
je 0x1800255aa
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x18014ed50], eax
jle 0x180025568
lea rcx, [0x18014ed50]
call fcn.1800ea128
cmp dword [0x18014ed50], 0xffffffff
jne 0x180025568
mov ecx, 0x56e64b7d
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014ec40], rcx
lea rcx, [0x18014ed50]
call fcn.1800ea0bc
mov rdx, qword [0x18014ec40]
lea r8, [rsp + 0x50]
movaps xmm0, xmm7
movss dword [rsp + 0x58], xmm7
unpcklps xmm0, xmm7
lea rcx, [rsp + 0x30]
mov r9, rsi
movsd qword [rsp + 0x50], xmm0
call fcn.180048ab0
movss xmm13, dword [rsp + 0x38]
movss xmm11, dword [rsp + 0x34]
movss xmm12, dword [rsp + 0x30]
jmp 0x1800255c8
movss dword [rsp + 0x30], xmm7
movaps xmm12, xmm7
movss dword [rsp + 0x34], xmm7
movaps xmm11, xmm7
movss dword [rsp + 0x38], xmm7
movaps xmm13, xmm7
movss xmm2, dword [0x1801439e8]
lea rdx, [rsp + 0x60]
movss xmm3, dword [0x1801439ec]
lea rcx, [rbp - 0x10]
movss xmm5, dword [0x1801439f0]
xorps xmm1, xmm1
movaps xmm0, xmm15
mov dword [rbp - 0x38], 0x3f800000
mulss xmm0, dword [0x18012d534]
movss dword [rbp - 8], xmm13
cvtss2sd xmm1, xmm0
movups xmm0, xmmword [rbp - 0x44]
subsd xmm1, qword [0x18012d948]
movss xmm0, xmm2
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm3
shufps xmm0, xmm0, 0xc6
cvtpd2ps xmm6, xmm1
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movaps xmm4, xmm6
addss xmm4, xmm11
movdqa xmmword [rsp + 0x60], xmm0
movups xmmword [rbp - 0x44], xmm0
unpcklps xmm12, xmm4
movsd qword [rbp - 0x10], xmm12
call fcn.1800244f0
movss xmm0, dword [0x1801439e8]
lea rdx, [rsp + 0x60]
movss xmm2, dword [0x1801439ec]
lea rcx, [rbp]
movss xmm4, dword [rsp + 0x34]
movss xmm3, dword [0x1801439f0]
subss xmm4, xmm6
movss xmm5, dword [rsp + 0x38]
mov dword [rbp - 0x28], 0x3f800000
movups xmm1, xmmword [rbp - 0x34]
movss dword [rbp + 8], xmm5
movss xmm1, xmm0
movss xmm0, dword [rsp + 0x30]
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm2
unpcklps xmm0, xmm4
shufps xmm1, xmm1, 0xc6
movss xmm1, xmm3
movsd qword [rbp], xmm0
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x34], xmm1
movdqa xmmword [rsp + 0x60], xmm1
call fcn.1800244f0
movss xmm6, dword [0x18012d4c0]
movss xmm12, dword [rbp + 0x3c0]
movss xmm13, dword [rbp + 0x10]
mov rax, qword [0x18014e268]
lea rdx, [rbp + 0x20]
movsd xmm0, qword [rbp - 0x70]
lea rcx, [rbp + 0x30]
movaps xmm11, xmm8
movss dword [rbp + 0x38], xmm10
unpcklps xmm11, xmm9
add rax, 0x559e30
movaps xmm3, xmm7
movsd qword [rbp + 0x30], xmm11
mov r8d, 0xa10000
movsd qword [rbp + 0x20], xmm0
mov dword [rbp + 0x28], r12d
mov qword [rsp + 0x20], 1
call rax
test al, al
je 0x1800259b7
cmp byte [0x18014e2a8], 0
je 0x1800257ef
movss xmm0, dword [0x180143ab0]
movss xmm1, dword [0x180143ab4]
mov ecx, dword [0x18014f3a8]
movss dword [rsp + 0x7c], xmm0
movss xmm0, dword [0x180143ab8]
movss dword [rbp - 0x7c], xmm0
movss dword [rbp - 0x80], xmm1
mov dword [rbp - 0x78], 0x3f800000
test ecx, ecx
je 0x1800257b4
sub ecx, 1
je 0x18002579b
cmp ecx, 1
jne 0x1800257ef
movaps xmm1, xmm8
movss dword [rbp + 0x48], xmm10
unpcklps xmm1, xmm9
lea rcx, [rbp + 0x40]
movsd qword [rbp + 0x40], xmm1
jmp 0x1800257cb
movaps xmm1, xmm8
movss dword [rbp + 0x58], xmm10
unpcklps xmm1, xmm9
lea rcx, [rbp + 0x50]
movsd qword [rbp + 0x50], xmm1
jmp 0x1800257cb
movaps xmm1, xmm8
movss dword [rbp + 0x68], xmm10
unpcklps xmm1, xmm9
lea rcx, [rbp + 0x60]
movsd qword [rbp + 0x60], xmm1
movups xmm0, xmmword [rsp + 0x7c]
mov dword [rsp + 0x20], 0xa
lea r8, [rsp + 0x60]
movaps xmm3, xmm6
movaps xmm1, xmm6
movdqa xmmword [rsp + 0x60], xmm0
call qword [0x18014f3a0]
movss xmm0, dword [0x18014e640]
ucomiss xmm0, xmm7
jne 0x180025954
movss xmm0, dword [0x18014e644]
ucomiss xmm0, xmm7
jne 0x180025954
movss xmm0, dword [0x18014e648]
ucomiss xmm0, xmm7
jne 0x180025954
mov rcx, qword [0x18014e260]
add rcx, 0x128
cmp rcx, 0x40000
jbe 0x180025902
lea rax, [rcx + 8]
cmp rax, r13
jae 0x180025902
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x180025902
lea rax, [rcx + 8]
cmp rax, r13
jae 0x180025902
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x180025902
lea rax, [rcx + 8]
cmp rax, r13
jae 0x180025902
mov rsi, qword [rcx]
test rsi, rsi
je 0x180025902
mov eax, 4
mov eax, dword [rdi + rax]
cmp dword [0x18014ed50], eax
jle 0x1800258d8
lea rcx, [0x18014ed50]
call fcn.1800ea128
cmp dword [0x18014ed50], 0xffffffff
jne 0x1800258d8
mov ecx, 0x56e64b7d
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014ec40], rcx
lea rcx, [0x18014ed50]
call fcn.1800ea0bc
mov rdx, qword [0x18014ec40]
lea r8, [rbp + 0x70]
movaps xmm0, xmm7
movss dword [rbp + 0x78], xmm7
unpcklps xmm0, xmm7
lea rcx, [rsp + 0x40]
mov r9, rsi
movsd qword [rbp + 0x70], xmm0
call fcn.180048ab0
jmp 0x180025913
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
mov eax, dword [rsp + 0x48]
lea rdx, [rbp + 0x80]
movaps xmm0, xmm8
movss dword [rbp + 0x88], xmm10
unpcklps xmm0, xmm9
lea rcx, [rbp + 0x90]
movsd qword [rbp + 0x80], xmm0
movsd xmm0, qword [rsp + 0x40]
movsd qword [rbp + 0x90], xmm0
mov dword [rbp + 0x98], eax
jmp 0x180025990
movsd xmm0, qword [0x18014e640]
lea rdx, [rbp + 0xa0]
mov eax, dword [0x18014e648]
lea rcx, [rbp + 0xb0]
movsd qword [rbp + 0xb0], xmm0
movss dword [rbp + 0xa8], xmm10
movsd qword [rbp + 0xa0], xmm11
mov dword [rbp + 0xb8], eax
mov r9, qword [0x18014e268]
movaps xmm3, xmm7
add r9, 0x559e30
mov qword [rsp + 0x20], 1
mov r8d, 0xa10000
call r9
test al, al
jne 0x1800259d7
add rbx, 0xc
cmp rbx, r15
je 0x1800259ec
movss xmm11, dword [rbp - 0x48]
movss xmm8, dword [rbp - 0x4c]
movss xmm9, dword [rbp - 0x50]
jmp 0x180025430
movss dword [rsp + 0x70], xmm13
movss dword [rsp + 0x74], xmm14
movss dword [rsp + 0x78], xmm12
movss xmm10, dword [rbp + 0x3d0]
mov r15, qword [rsp + 0x478]
test r14, r14
je 0x180025a56
mov rax, qword [rbp + 0xd0]
movabs rcx, 0xaaaaaaaaaaaaaaab
sub rax, r14
sar rax, 2
imul rax, rcx
lea rdx, [rax + rax*2]
mov rax, r14
shl rdx, 2
cmp rdx, 0x1000
jb 0x180025a4e
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180025a4e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800ea54c
movss xmm6, dword [rbp - 0x58]
movss xmm0, dword [rbp - 0x60]
movss dword [rbp + 0x3c8], xmm6
movss dword [rbp + 0x3c0], xmm0
mov r14d, 4
jmp 0x180025a80
movss xmm6, dword [rbp + 0x3c8]
cmp dword [0x18014e2d0], 1
jne 0x18002660b
movss xmm5, dword [rbp + 0x3d8]
movaps xmm3, xmm15
mulss xmm3, dword [0x18012d578]
movaps xmm1, xmm10
mov dword [rbp + 0xe0], 0
mulss xmm1, dword [0x18012d578]
movaps xmm0, xmm10
mov qword [rbp + 0xe8], 0
movss xmm15, dword [rbp - 0x18]
movaps xmm7, xmm5
mulss xmm0, dword [0x18012d514]
movaps xmm12, xmm15
mov qword [rbp + 0xf4], 0
movss xmm14, dword [rbp - 0x20]
movaps xmm2, xmm3
movss xmm8, dword [0x18012e410]
movaps xmm11, xmm14
movss xmm13, dword [0x18012dbcc]
movaps xmm4, xmm3
movss dword [rbp + 0xf0], xmm1
movaps xmm1, xmm3
mulss xmm1, xmm15
mov dword [rbp + 0x110], 0
mulss xmm12, xmm5
mov dword [rbp + 0x114], 0xbfb33333
movss dword [rbp + 0x124], xmm1
movss dword [rbp + 0x13c], xmm1
movaps xmm1, xmm15
mulss xmm1, dword [0x18012d990]
mov dword [rbp + 0x118], 0
mulss xmm11, xmm5
mov dword [rbp + 0x120], 0
movss dword [rbp + 0xe4], xmm0
movdqa xmm0, xmmword [0x18012dd00]
mulss xmm2, xmm14
movaps xmm9, xmm11
mov dword [rbp + 0x12c], 0
xorps xmm9, xmm8
mulss xmm7, xmm13
mov dword [rbp + 0x138], 0x3f333333
movss dword [rbp + 0x154], xmm1
movaps xmmword [rbp + 0x100], xmm0
movss dword [rbp + 0xfc], xmm10
movaps xmm1, xmm7
mulss xmm1, xmm15
movaps xmm0, xmm7
mov dword [rbp + 0x144], 0x3fb33333
mulss xmm0, xmm14
movaps xmm10, xmm12
mov dword [rbp + 0x150], 0xbf333333
xorps xmm10, xmm8
movss dword [rbp - 0x24], xmm3
movss dword [rbp + 0x16c], xmm1
movss dword [rbp + 0x184], xmm1
movss dword [rbp + 0x19c], xmm1
movss dword [rbp + 0x11c], xmm2
movss dword [rbp + 0x128], xmm11
movss dword [rbp + 0x130], xmm12
movss dword [rbp + 0x134], xmm2
movss dword [rbp + 0x140], xmm11
movss dword [rbp + 0x148], xmm12
movss dword [rbp + 0x14c], xmm2
movss dword [rbp + 0x158], xmm11
movss dword [rbp + 0x160], xmm12
movss dword [rbp + 0x164], xmm0
movss dword [rbp + 0x170], xmm9
movss dword [rbp + 0x178], xmm10
movss dword [rbp + 0x17c], xmm0
movss dword [rbp + 0x188], xmm9
movss dword [rbp + 0x190], xmm10
movss dword [rbp + 0x194], xmm0
movss dword [rbp + 0x1a0], xmm9
movss dword [rbp + 0x1a8], xmm10
mov dword [rbp + 0x15c], 0xbfb33333
mov dword [rbp + 0x168], 0
mov dword [rbp + 0x174], 0
mov dword [rbp + 0x180], 0x3f333333
mov dword [rbp + 0x18c], 0x3fb33333
mov dword [rbp + 0x198], 0xbf333333
mov dword [rbp + 0x1a4], 0xbfb33333
mulss xmm4, xmm6
movss xmm0, dword [rbp + 0x3c0]
movaps xmm1, xmm6
mulss xmm1, xmm5
movaps xmm2, xmm3
mov dword [rbp + 0x1b0], 0
mulss xmm2, xmm0
movaps xmm6, xmm7
mov dword [rbp + 0x1bc], 0
mulss xmm7, dword [rbp + 0x3c0]
mov dword [rbp + 0x1c8], 0
mulss xmm6, dword [rbp + 0x3c8]
mov dword [rbp + 0x1d4], 0
mulss xmm0, xmm5
movaps xmm5, xmm1
mov dword [rbp + 0x1e0], 0x3f333333
movss dword [rbp + 0x1ac], xmm2
xorps xmm5, xmm8
movss dword [rbp + 0x1dc], xmm2
movaps xmm3, xmm0
movss dword [rbp + 0x1b8], xmm0
movss dword [rbp + 0x1e8], xmm0
xorps xmm3, xmm8
movss dword [rbp + 0x200], xmm0
movss xmm0, dword [rbp + 0x3c0]
mulss xmm0, dword [0x18012dc18]
mov dword [rbp + 0x1ec], 0x3fb33333
movss dword [rbp + 0x1f4], xmm2
movss dword [rbp + 0x1b4], xmm4
movss dword [rbp + 0x230], xmm0
movss dword [rbp + 0x1e4], xmm4
movss dword [rbp + 0x1fc], xmm4
movss xmm4, dword [rbp + 0x3c8]
movaps xmm2, xmm4
movss dword [rbp + 0x1c4], xmm7
mulss xmm2, dword [0x18012dc18]
mov dword [rbp + 0x1f8], 0xbf333333
movss dword [rbp + 0x20c], xmm7
movss dword [rbp + 0x224], xmm7
movss dword [rbp + 0x238], xmm2
movss dword [rbp + 0x23c], xmm7
movss xmm7, dword [rbp + 0x3d0]
movaps xmm0, xmm7
movss dword [rbp + 0x1c0], xmm1
movaps xmm2, xmm7
movss dword [rbp + 0x1f0], xmm1
movss dword [rbp + 0x208], xmm1
xorps xmm2, xmm8
movss xmm1, dword [0x18012d66c]
mulss xmm0, xmm1
mov dword [rbp + 0x204], 0xbfb33333
mulss xmm12, xmm1
mov dword [rbp + 0x210], 0
movss dword [rbp + 0x258], xmm0
movss dword [rbp + 0x264], xmm0
movaps xmm0, xmm2
mulss xmm11, xmm1
mov dword [rbp + 0x21c], 0
mulss xmm0, xmm1
mov dword [rbp + 0x228], 0x3f333333
mulss xmm10, xmm1
mov dword [rbp + 0x234], 0x3fb33333
mulss xmm9, xmm1
mov dword [rbp + 0x240], 0xbf333333
movss dword [rbp + 0x270], xmm0
movss dword [rbp + 0x1cc], xmm6
movss dword [rbp + 0x1d0], xmm3
movss dword [rbp + 0x1d8], xmm5
movss dword [rbp + 0x214], xmm6
movss dword [rbp + 0x218], xmm3
movss dword [rbp + 0x220], xmm5
movss dword [rbp + 0x22c], xmm6
movss dword [rbp + 0x244], xmm6
movss dword [rbp + 0x248], xmm3
movss dword [rbp + 0x250], xmm5
movss dword [rbp + 0x254], xmm11
movss dword [rbp + 0x25c], xmm12
movss dword [rbp + 0x260], xmm9
movss dword [rbp + 0x268], xmm10
movss dword [rbp + 0x26c], xmm11
movss dword [rbp + 0x274], xmm12
mov dword [rbp + 0x24c], 0xbfb33333
movss xmm3, dword [0x18012d578]
lea rbx, [rbp + 0xe0]
movss xmm6, dword [rbp + 0x3d8]
movaps xmm1, xmm15
movss xmm5, dword [rbp + 0x3c0]
movss xmm8, dword [0x18012d4c0]
movss dword [rbp + 0x27c], xmm0
movaps xmm0, xmm14
mulss xmm1, xmm3
mulss xmm0, xmm3
mulss xmm1, xmm6
mulss xmm0, xmm6
movss dword [rbp + 0x28c], xmm1
movss dword [rbp + 0x2a4], xmm1
movaps xmm1, xmm4
movss dword [rbp + 0x284], xmm0
movss dword [rbp + 0x29c], xmm0
movaps xmm0, xmm5
mulss xmm4, xmm13
mulss xmm15, xmm13
mulss xmm4, xmm6
mulss xmm15, xmm6
mulss xmm14, xmm13
mulss xmm1, xmm3
mulss xmm14, xmm6
mulss xmm0, xmm3
mulss xmm5, xmm13
movss dword [rbp + 0x2a0], xmm2
movss dword [rbp + 0x2ac], xmm2
movss xmm2, dword [rbp - 0x24]
mulss xmm4, xmm3
mulss xmm1, xmm2
mulss xmm0, xmm2
mulss xmm5, xmm2
movss dword [rbp + 0x288], xmm7
movss dword [rbp + 0x294], xmm7
movss dword [rbp + 0x2b8], xmm7
movss dword [rbp + 0x2c4], xmm7
xorps xmm7, xmm7
movss dword [rbp + 0x2c8], xmm4
movss dword [rbp + 0x278], xmm9
movss dword [rbp + 0x280], xmm10
movss dword [rbp + 0x290], xmm14
movss dword [rbp + 0x298], xmm15
movss dword [rbp + 0x2a8], xmm14
movss dword [rbp + 0x2b0], xmm15
movss dword [rbp + 0x2b4], xmm0
movss dword [rbp + 0x2bc], xmm1
movss dword [rbp + 0x2c0], xmm5
nop word [rax + rax]
cmp byte [0x18014e2cf], 0
movsd xmm0, qword [rbx]
movss xmm12, dword [rbx + 8]
movaps xmm15, xmm0
movss xmm11, dword [rbp - 0x50]
movss xmm10, dword [rbp - 0x4c]
addss xmm11, xmm12
movsd qword [rbp + 0x80], xmm0
movss xmm13, dword [rbp + 0x80]
movaps xmm9, xmm13
shufps xmm15, xmm15, 0x55
addss xmm9, dword [rbp - 0x48]
movss dword [rbp + 0x3c0], xmm12
addss xmm10, xmm15
je 0x180026331
cmp byte [0x18014e2af], 0
je 0x180026331
mov ecx, dword [0x18014e3ac]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180026331
mov rcx, qword [0x18014e260]
test rcx, rcx
je 0x180026331
add rcx, 0x128
cmp rcx, 0x40000
jbe 0x1800261f7
lea rax, [rcx + 8]
cmp rax, r13
jae 0x1800261f7
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x1800261f7
lea rax, [rcx + 8]
cmp rax, r13
jae 0x1800261f7
mov rcx, qword [rcx]
add rcx, 0xb0
cmp rcx, 0x40000
jbe 0x1800261f7
lea rax, [rcx + 8]
cmp rax, r13
jae 0x1800261f7
mov rsi, qword [rcx]
test rsi, rsi
je 0x1800261f7
mov eax, dword [rdi + r14]
cmp dword [0x18014ed50], eax
jle 0x1800261af
lea rcx, [0x18014ed50]
call fcn.1800ea128
cmp dword [0x18014ed50], 0xffffffff
jne 0x1800261af
mov ecx, 0x56e64b7d
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014ec40], rcx
lea rcx, [0x18014ed50]
call fcn.1800ea0bc
mov rdx, qword [0x18014ec40]
lea r8, [rbp + 0xb0]
movaps xmm0, xmm7
movss dword [rbp + 0xb8], xmm7
unpcklps xmm0, xmm7
lea rcx, [rsp + 0x30]
mov r9, rsi
movsd qword [rbp + 0xb0], xmm0
call fcn.180048ab0
movss xmm14, dword [rsp + 0x38]
movss xmm12, dword [rsp + 0x34]
movss xmm13, dword [rsp + 0x30]
jmp 0x180026215
movss dword [rsp + 0x30], xmm7
movaps xmm13, xmm7
movss dword [rsp + 0x34], xmm7
movaps xmm12, xmm7
movss dword [rsp + 0x38], xmm7
movaps xmm14, xmm7
mulss xmm6, dword [0x18012d534]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xa0]
mov dword [rbp - 0x28], 0x437f0000
movss xmm2, dword [0x1801439e8]
movups xmm0, xmmword [rbp - 0x34]
movss xmm3, dword [0x1801439ec]
movss xmm5, dword [0x1801439f0]
movss xmm0, xmm2
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm3
movss dword [rbp + 0xa8], xmm14
cvtps2pd xmm1, xmm6
shufps xmm0, xmm0, 0xc6
subsd xmm1, qword [0x18012d948]
movss xmm0, xmm5
shufps xmm0, xmm0, 0xc9
movups xmmword [rbp - 0x34], xmm0
cvtpd2ps xmm6, xmm1
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm4, xmm6
addss xmm4, xmm12
unpcklps xmm13, xmm4
movsd qword [rbp + 0xa0], xmm13
call fcn.1800244f0
movss xmm0, dword [0x1801439e8]
lea rdx, [rsp + 0x60]
movss xmm2, dword [0x1801439ec]
lea rcx, [rbp + 0x90]
movss xmm4, dword [rsp + 0x34]
movss xmm3, dword [0x1801439f0]
subss xmm4, xmm6
movss xmm5, dword [rsp + 0x38]
mov dword [rbp - 0x38], 0x437f0000
movups xmm1, xmmword [rbp - 0x44]
movss dword [rbp + 0x98], xmm5
movss xmm1, xmm0
movss xmm0, dword [rsp + 0x30]
shufps xmm1, xmm1, 0xe1
movss xmm1, xmm2
unpcklps xmm0, xmm4
shufps xmm1, xmm1, 0xc6
movss xmm1, xmm3
movsd qword [rbp + 0x90], xmm0
shufps xmm1, xmm1, 0xc9
movups xmmword [rbp - 0x44], xmm1
movdqa xmmword [rsp + 0x60], xmm1
call fcn.1800244f0
movss xmm12, dword [rbp + 0x3c0]
movss xmm13, dword [rbp + 0x80]
mov rax, qword [0x18014e268]
lea rdx, [rbp + 0x70]
movsd xmm0, qword [rbp - 0x70]
lea rcx, [rbp + 0x60]
movaps xmm6, xmm9
movss dword [rbp + 0x68], xmm11
unpcklps xmm6, xmm10
add rax, 0x559e30
movaps xmm3, xmm7
movsd qword [rbp + 0x60], xmm6
mov r8d, 0xa10000
movsd qword [rbp + 0x70], xmm0
mov dword [rbp + 0x78], r12d
mov qword [rsp + 0x20], 1
call rax
test al, al
je 0x1800265e0
cmp byte [0x18014e2a8], 0
je 0x180026442
movss xmm0, dword [0x180143ab0]
movss xmm1, dword [0x180143ab4]
mov ecx, dword [0x18014f3a8]
movss dword [rsp + 0x7c], xmm0
movss xmm0, dword [0x180143ab8]
movss dword [rbp - 0x7c], xmm0
movss dword [rbp - 0x80], xmm1
mov dword [rbp - 0x78], 0x3f800000
test ecx, ecx
je 0x180026405
sub ecx, 1
je 0x1800263ec
cmp ecx, 1
jne 0x180026442
movaps xmm1, xmm9
movss dword [rbp + 0x58], xmm11
unpcklps xmm1, xmm10
lea rcx, [rbp + 0x50]
movsd qword [rbp + 0x50], xmm1
jmp 0x18002641c
movaps xmm1, xmm9
movss dword [rbp + 0x48], xmm11
unpcklps xmm1, xmm10
lea rcx, [rbp + 0x40]
movsd qword [rbp + 0x40], xmm1
jmp 0x18002641c
movaps xmm1, xmm9
movss dword [rbp + 0x38], xmm11
unpcklps xmm1, xmm10
lea rcx, [rbp + 0x30]
movsd qword [rbp + 0x30], xmm1
movups xmm0, xmmword [rsp + 0x7c]
mov dword [rsp + 0x20], 0xa
lea r8, [rsp + 0x60]
movaps xmm3, xmm8
movaps xmm1, xmm8
movdqa xmmword [rsp + 0x60], xmm0
call qword [0x18014f3a0]
movss xmm0, dword [0x18014e640]
ucomiss xmm0, xmm7
jne 0x18002658d
movss xmm0, dword [0x18014e644]
ucomiss xmm0, xmm7
jne 0x18002658d
movss xmm0, dword [0x18014e648]
ucomiss xmm0, xmm7
jne 0x18002658d
mov rcx, qword [0x18014e260]
add rcx, 0x128
cmp rcx, 0x40000
jbe 0x18002654d
lea rax, [rcx + 8]
cmp rax, r13
jae 0x18002654d
mov rcx, qword [rcx]
add rcx, 0x48
cmp rcx, 0x40000
jbe 0x18002654d
lea rax, [rcx + 8]
cmp rax, r13
jae 0x18002654d
mov rcx, qword [rcx]
add rcx, 0x198
cmp rcx, 0x40000
jbe 0x18002654d
lea rax, [rcx + 8]
cmp rax, r13
jae 0x18002654d
mov rsi, qword [rcx]
test rsi, rsi
je 0x18002654d
mov eax, dword [rdi + r14]
cmp dword [0x18014ed50], eax
jle 0x180026523
lea rcx, [0x18014ed50]
call fcn.1800ea128
cmp dword [0x18014ed50], 0xffffffff
jne 0x180026523
mov ecx, 0x56e64b7d
call fcn.18000fa40
mov rcx, qword [rax]
mov qword [0x18014ec40], rcx
lea rcx, [0x18014ed50]
call fcn.1800ea0bc
mov rdx, qword [0x18014ec40]
lea r8, [rbp + 0x20]
movaps xmm0, xmm7
movss dword [rbp + 0x28], xmm7
unpcklps xmm0, xmm7
lea rcx, [rsp + 0x40]
mov r9, rsi
movsd qword [rbp + 0x20], xmm0
call fcn.180048ab0
jmp 0x18002655e
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x48], 0
mov eax, dword [rsp + 0x48]
lea rdx, [rbp + 0x10]
movaps xmm0, xmm9
movss dword [rbp + 0x18], xmm11
unpcklps xmm0, xmm10
lea rcx, [rbp]
movsd qword [rbp + 0x10], xmm0
movsd xmm0, qword [rsp + 0x40]
movsd qword [rbp], xmm0
mov dword [rbp + 8], eax
jmp 0x1800265b9
movsd xmm0, qword [0x18014e640]
lea rdx, [rbp - 0x10]
mov eax, dword [0x18014e648]
lea rcx, [rsp + 0x50]
movsd qword [rsp + 0x50], xmm0
movss dword [rbp - 8], xmm11
movsd qword [rbp - 0x10], xmm6
mov dword [rsp + 0x58], eax
mov r9, qword [0x18014e268]
movaps xmm3, xmm7
add r9, 0x559e30
mov qword [rsp + 0x20], 1
mov r8d, 0xa10000
call r9
test al, al
jne 0x1800265fd
add rbx, 0xc
lea rax, [rbp + 0x2cc]
cmp rbx, rax
je 0x18002660b
movss xmm6, dword [rbp + 0x3d8]
jmp 0x180026070
movaps xmm0, xmm13
movaps xmm1, xmm15
movaps xmm2, xmm12
jmp 0x18002661d
movss xmm2, dword [rsp + 0x78]
movss xmm1, dword [rsp + 0x74]
movss xmm0, dword [rsp + 0x70]
ucomiss xmm0, xmm7
jne 0x18002663c
ucomiss xmm1, xmm7
jne 0x18002663c
ucomiss xmm2, xmm7
jne 0x18002663c
movaps xmm0, xmm7
movss dword [0x18014e688], xmm7
unpcklps xmm0, xmm7
jmp 0x180026647
movss dword [0x18014e688], xmm2
unpcklps xmm0, xmm1
movaps xmm13, xmmword [rsp + 0x3f0]
mov rsi, qword [rsp + 0x480]
movaps xmm10, xmmword [rsp + 0x420]
movaps xmm15, xmmword [rsp + 0x3d0]
lea r11, [rsp + 0x488]
movsd qword [0x18014e680], xmm0
movaps xmm6, xmmword [r11 - 0x28]
movaps xmm7, xmmword [r11 - 0x38]
movaps xmm8, xmmword [r11 - 0x48]
movaps xmm9, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x78]
movaps xmm12, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0xa8]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbx
pop rbp
ret