Function at 0x1800ff1e8
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
movss xmm0, dword [0x18057aecc]
xor r14d, r14d
cmp byte [0x1805f0514], r14b
mov r15d, 1
movss xmm1, dword [0x1800c3b08]
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm10
movaps xmmword [rax - 0xa8], xmm11
movaps xmmword [rax - 0xb8], xmm12
movaps xmmword [rax - 0xc8], xmm13
movaps xmmword [rax - 0xd8], xmm14
movaps xmmword [rax - 0xe8], xmm15
je 0x1800ff26f
ucomiss xmm0, xmm1
je 0x1800ff2a7
comiss xmm0, dword [0x1800c3b0c]
mov byte [0x1805f0514], r14b
jae 0x1800ff291
addss xmm0, dword [0x1800c386c]
movss dword [0x18057aecc], xmm0
jmp 0x1800ff298
mov byte [0x1805f0514], r15b
comiss xmm0, xmm1
jb 0x1800ff2a7
mov dword [0x18057aecc], 0xc3960000
mov ecx, dword [0x1805f0538]
mov r12d, 3
movss xmm13, dword [0x1800c38c0]
xorps xmm15, xmm15
lea r13d, [r12 - 1]
test ecx, ecx
je 0x1800ff3ac
sub ecx, r15d
je 0x1800ff36d
sub ecx, r15d
je 0x1800ff346
cmp ecx, r15d
je 0x1800ff300
and dword [0x1805f0534], r14d
mov dword [0x1804e07f0], 0x3f800000
mov dword [0x1805a4d50], 0x3f800000
jmp 0x1800ff3d1
movss xmm1, dword [0x1805a4d50]
movss xmm0, dword [0x1805f0534]
addss xmm1, dword [0x1800c37c4]
addss xmm0, dword [0x1800c3b4c]
comiss xmm1, xmm13
movss dword [0x1805a4d50], xmm1
movss dword [0x1805f0534], xmm0
jb 0x1800ff3d1
mov dword [0x1805f0538], r14d
jmp 0x1800ff3d1
movss xmm0, dword [0x1804e07f0]
addss xmm0, dword [0x1800c37c4]
comiss xmm0, xmm13
movss dword [0x1804e07f0], xmm0
jb 0x1800ff3d1
mov dword [0x1805f0538], r12d
jmp 0x1800ff3d1
movss xmm1, dword [0x1805f0534]
movss xmm0, dword [0x1805a4d50]
addss xmm1, dword [0x1800c37c4]
addss xmm0, dword [0x1800c3b4c]
comiss xmm1, xmm13
movss dword [0x1805f0534], xmm1
movss dword [0x1805a4d50], xmm0
jb 0x1800ff3d1
mov dword [0x1805f0538], r13d
jmp 0x1800ff3d1
movss xmm0, dword [0x1804e07f0]
addss xmm0, dword [0x1800c3b4c]
comiss xmm0, xmm15
movss dword [0x1804e07f0], xmm0
ja 0x1800ff3d1
mov dword [0x1805f0538], r15d
mov eax, dword [0x1805ba6fc]
mov ecx, dword [0x1805f13a0]
cdq
sub eax, edx
sar eax, 1
movd xmm14, eax
mov eax, dword [0x1805ba70c]
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm14, xmm14
movd xmm10, eax
movss dword [rbp + 0xc0], xmm14
cvtdq2ps xmm10, xmm10
movss dword [rbp + 0xb8], xmm10
test ecx, ecx
je 0x1800ff429
sub ecx, r15d
je 0x1800ff429
cmp ecx, r15d
je 0x1800ff429
movss xmm6, dword [rbp + 0xb0]
jmp 0x1800ff432
call qword [0x1805f1398]
movaps xmm6, xmm0
call fcn.1800d9cf8
mov rcx, rax
call fcn.1800d962c
mov ecx, dword [0x1805f13a0]
subss xmm6, dword [rax]
movaps xmm7, xmm6
mulss xmm7, dword [0x1800c38d8]
addss xmm7, dword [0x1800c37d4]
test ecx, ecx
je 0x1800ff46a
sub ecx, r15d
je 0x1800ff46a
cmp ecx, r15d
jne 0x1800ff470
call qword [0x1805f1398]
call fcn.1800d9cf8
mov rcx, rax
call fcn.1800d962c
call fcn.1800fefc8
cmp byte [0x1805ba6c6], r14b
je 0x1800ff4b9
cmp byte [0x1805ba789], r14b
je 0x1800ff4b9
mov ecx, dword [0x1805ba7d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800ff4b9
xorps xmm0, xmm0
mov dl, r15b
cvtss2sd xmm0, xmm7
comisd xmm0, xmmword [0x1800c3900]
ja 0x1800ff4bc
mov dl, r14b
movss xmm11, dword [0x1800c37f8]
lea rcx, [0x1800c06c0]
movss dword [rsp + 0x20], xmm11
call fcn.1800cbe3c
call fcn.1800f49e0
cmp byte [0x1805ba68e], r14b
mov edi, 0x12
mov esi, dword [0x1805b9dd4]
mov ebx, 4
je 0x1800ff627
mov rcx, qword [0x1805ba658]
test rcx, rcx
je 0x1800ff627
call fcn.1800d8294
test al, al
je 0x1800ff627
mov rax, qword gs:[0x58]
mov rax, qword [rax + rsi*8]
mov eax, dword [rbx + rax]
cmp dword [0x1805f07d0], eax
jg 0x180100c18
mov rcx, qword [0x1805ba658]
lea rdx, [rbp - 0x70]
and dword [rbp + 0xb4], r14d
mov r8d, edi
and dword [rbp + 0xb0], r14d
call fcn.1800d96a8
ucomiss xmm15, dword [rax]
jne 0x1800ff594
mov rcx, qword [0x1805ba658]
lea rdx, [rsp + 0x50]
mov r8d, edi
call fcn.1800d96a8
ucomiss xmm15, dword [rax + 4]
jne 0x1800ff594
mov rcx, qword [0x1805ba658]
lea rdx, [rsp + 0x60]
mov r8d, edi
call fcn.1800d96a8
ucomiss xmm15, dword [rax + 8]
je 0x1800ff627
mov rcx, qword [0x1805ba658]
lea rdx, [rsp + 0x40]
mov r8d, 0x2f
call fcn.1800d96a8
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x50]
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call fcn.1800da4a4
test al, al
je 0x1800ff627
movdqa xmm0, xmmword [0x1800c41f0]
lea rax, [rsp + 0x40]
movss xmm3, dword [rbp + 0xb0]
movss xmm2, dword [0x1805f0dd4]
movss xmm1, dword [0x1805f0dd0]
movdqa xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x1800c38e0]
mov byte [rsp + 0x38], r15b
movss dword [rsp + 0x30], xmm0
movss xmm0, dword [rbp + 0xb4]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.1800daf74
mov dl, byte [0x1805ba789]
lea rcx, [0x1800c06e0]
movss dword [rsp + 0x20], xmm11
call fcn.1800cbe3c
movss xmm9, dword [0x1800c37b8]
comiss xmm0, xmm9
movss xmm8, dword [0x1800c3a9c]
movss xmm12, dword [0x1800c3ac4]
jbe 0x1800ff905
and dword [rsp + 0x40], r14d
lea rax, [rsp + 0x40]
and dword [rsp + 0x44], r14d
movaps xmm3, xmm12
and dword [rsp + 0x48], r14d
movss xmm1, dword [0x18026b970]
movss xmm2, dword [0x18026b96c]
addss xmm1, xmm8
movss dword [rsp + 0x4c], xmm0
movups xmm0, xmmword [rsp + 0x40]
mov dword [rsp + 0x38], r14d
movss dword [rsp + 0x30], xmm15
subss xmm1, dword [0x1800c3a94]
movdqa xmmword [rsp + 0x40], xmm0
movss xmm0, dword [0x1800c3a08]
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
call fcn.1800dbd4c
cmp byte [0x1805ba789], r14b
je 0x1800ff7dc
mov ecx, dword [0x1805ba7d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800ff7dc
cmp byte [0x1805ba789], r14b
je 0x1800ff70e
xorps xmm0, xmm0
mov dl, r15b
cvtss2sd xmm0, xmm7
comisd xmm0, xmmword [0x1800c3890]
ja 0x1800ff711
mov dl, r14b
lea rcx, [0x1800c0700]
movss dword [rsp + 0x20], xmm11
call fcn.1800cbe3c
movaps xmm4, xmm0
xorps xmm1, xmm1
cvtss2sd xmm1, xmm4
comisd xmm1, xmmword [0x1800c38a8]
jbe 0x1800ff7dc
comiss xmm7, dword [0x1800c386c]
mulss xmm6, xmm12
movaps xmm3, xmm7
addss xmm3, xmm7
minss xmm6, dword [0x1800c3ad4]
jae 0x1800ff75f
movaps xmm0, xmm13
jmp 0x1800ff76f
movss xmm0, dword [0x1800c39a0]
subss xmm0, xmm3
movaps xmm3, xmm13
movss xmm1, dword [0x18026b970]
lea rax, [rsp + 0x40]
movss xmm2, dword [0x18026b96c]
addss xmm1, xmm8
subss xmm6, dword [0x1800c39a0]
and dword [rsp + 0x48], r14d
addss xmm2, xmm13
mov dword [rsp + 0x38], r14d
movss dword [rsp + 0x30], xmm15
subss xmm1, dword [0x1800c3a90]
movss dword [rsp + 0x44], xmm0
movss xmm0, dword [0x1800c39f0]
movss dword [rsp + 0x40], xmm3
movaps xmm3, xmm6
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x4c], xmm4
movss dword [rsp + 0x20], xmm0
call fcn.1800dbd4c
and dword [rbp + 0xb4], r14d
and dword [rbp + 0xb0], r14d
cmp byte [0x1805ba6c5], r14b
je 0x1800ff905
movss xmm0, dword [0x1805f0238]
ucomiss xmm0, xmm15
jne 0x1800ff825
movss xmm0, dword [0x1805f023c]
ucomiss xmm0, xmm15
jne 0x1800ff825
movss xmm0, dword [0x1805f0240]
ucomiss xmm0, xmm15
je 0x1800ff905
movsd xmm0, qword [0x1805f0238]
lea rdx, [rbp + 0xb0]
mov eax, dword [0x1805f0240]
lea rcx, [rsp + 0x50]
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call fcn.1800da4a4
test al, al
je 0x1800ff905
movss xmm0, dword [0x1803a4f80]
lea rcx, [rsp + 0x40]
movss xmm1, dword [0x1803a4f84]
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x1803a4f88]
movss dword [rsp + 0x48], xmm0
movss dword [rsp + 0x44], xmm1
mov dword [rsp + 0x4c], 0x3f800000
call fcn.18010e01c
movss xmm0, dword [0x1803a4fd0]
lea rcx, [rsp + 0x40]
movss xmm1, dword [0x1803a4fd4]
mov r8d, eax
movss dword [rsp + 0x40], xmm0
movss xmm0, dword [0x1803a4fd8]
movss dword [rsp + 0x48], xmm0
movss dword [rsp + 0x44], xmm1
mov dword [rsp + 0x4c], 0x41c80000
call fcn.18010e01c
movss xmm0, dword [rbp + 0xb0]
lea rdx, [rbp + 0xc8]
movss xmm1, dword [rbp + 0xb4]
mov r9d, eax
movss dword [rbp + 0xc8], xmm0
movss dword [rbp + 0xcc], xmm1
mov dword [rsp + 0x20], r8d
call fcn.1800dbdd4
mov dl, byte [0x1805ba76a]
lea rcx, [0x1800c0720]
movss dword [rsp + 0x20], xmm11
call fcn.1800cbe3c
movaps xmm6, xmm0
comiss xmm6, xmm9
movss dword [rbp + 0xb0], xmm6
jbe 0x1800ffdc7
movdqa xmm1, xmmword [0x1800c41d0]
mov ecx, 4
mov rax, qword [0x1805ba8a8]
movdqu xmmword [rax + 0x38d0], xmm1
xorps xmm1, xmm1
call fcn.18010e4c8
lea rdx, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x3f800000
mov ecx, 5
mov dword [rbp + 0xcc], 0x3f800000
call fcn.18010e540
xorps xmm1, xmm1
mov ecx, r12d
call fcn.18010e4c8
movdqa xmm0, xmmword [0x1800c3c40]
lea rdx, [rsp + 0x40]
mov ecx, r13d
movups xmmword [rsp + 0x40], xmm0
call fcn.18010e414
mov rax, qword [0x1805ba8a8]
mov ecx, 0x453b8000
xor edx, edx
mov r8d, 0xc021f
or dword [rax + 0x47b0], r12d
mov dword [rax + 0x47d0], ecx
mov dword [rax + 0x47d4], ecx
lea rcx, [0x1800c0738]
mov qword [rax + 0x47c0], r14
mov qword [rax + 0x47c8], r14
mov dword [rax + 0x47b4], r15d
mov dword [rax + 0x47b8], r15d
call fcn.180114984
cmp byte [0x1805ba76a], r14b
je 0x1800ffdb7
movss xmm0, dword [0x1805dbd68]
lea rcx, [rsp + 0x40]
movss xmm1, dword [0x1805dfeac]
subss xmm0, xmm13
movss xmm12, dword [0x1805dba28]
subss xmm1, xmm13
movss xmm14, dword [0x1805dbd6c]
and dword [rsp + 0x40], r14d
and dword [rsp + 0x44], r14d
and dword [rsp + 0x48], r14d
divss xmm12, xmm0
divss xmm14, xmm1
movss dword [rsp + 0x4c], xmm6
call fcn.18010e01c
movss xmm1, dword [0x1802c2f74]
lea rdx, [rbp + 0xc8]
addss xmm1, dword [0x1800c3a1c]
movss xmm0, dword [0x1802c2f78]
lea rcx, [rsp + 0x50]
mov r8d, eax
movss dword [rsp + 0x50], xmm0
mov dword [rbp + 0xc8], 0x43af0000
mov dword [rbp + 0xcc], 0x40e00000
movss dword [rsp + 0x54], xmm1
call fcn.1800fed28
movss xmm11, dword [0x1803a4f40]
lea rcx, [rsp + 0x40]
movss xmm10, dword [0x1803a4f44]
movss xmm9, dword [0x1803a4f48]
movss dword [rsp + 0x40], xmm11
movss dword [rsp + 0x44], xmm10
movss dword [rsp + 0x48], xmm9
movss dword [rsp + 0x4c], xmm6
call fcn.18010e01c
movss xmm0, dword [rbp + 0xb0]
lea rcx, [rsp + 0x40]
movss xmm8, dword [0x1803a5020]
mov r10d, eax
movss xmm7, dword [0x1803a5024]
movss xmm6, dword [0x1803a5028]
movss dword [rsp + 0x4c], xmm0
movss dword [rsp + 0x40], xmm8
movss dword [rsp + 0x44], xmm7
movss dword [rsp + 0x48], xmm6
call fcn.18010e01c
movss dword [rsp + 0x48], xmm6
lea rcx, [rsp + 0x40]
movss xmm6, dword [rbp + 0xb0]
mov r8d, eax
movss dword [rsp + 0x4c], xmm6
movss dword [rsp + 0x40], xmm8
movss dword [rsp + 0x44], xmm7
call fcn.18010e01c
lea rcx, [rsp + 0x40]
movss dword [rsp + 0x40], xmm11
mov r9d, eax
movss dword [rsp + 0x44], xmm10
movss dword [rsp + 0x48], xmm9
movss dword [rsp + 0x4c], xmm6
call fcn.18010e01c
movss xmm1, dword [0x1802c2f74]
minss xmm12, xmm13
addss xmm1, dword [0x1800c3a20]
movss xmm0, dword [0x1802c2f78]
lea rdx, [rbp + 0xc8]
mov dword [rsp + 0x28], r10d
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x20], r8d
mov r8d, eax
mulss xmm12, dword [0x1800c3ad8]
mov dword [rbp + 0xcc], 0x40a00000
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
movss dword [rbp + 0xc8], xmm12
call fcn.1800fedc4
and dword [rsp + 0x40], r14d
lea rcx, [rsp + 0x40]
and dword [rsp + 0x44], r14d
movaps xmm12, xmm6
and dword [rsp + 0x48], r14d
movss dword [rsp + 0x4c], xmm12
call fcn.18010e01c
movss xmm0, dword [0x1802c2f78]
lea rdx, [rbp + 0xb0]
movss xmm1, dword [0x1802c2f74]
lea rcx, [rbp + 0xc8]
mov r8d, eax
movss dword [rbp + 0xc8], xmm0
movss dword [rbp + 0xcc], xmm1
mov dword [rbp + 0xb0], 0x43af0000
mov dword [rbp + 0xb4], 0x40e00000
call fcn.1800fed28
movss xmm11, dword [0x1803a4f40]
lea rcx, [rsp + 0x40]
movss xmm10, dword [0x1803a4f44]
movss xmm9, dword [0x1803a4f48]
movss dword [rsp + 0x40], xmm11
movss dword [rsp + 0x44], xmm10
movss dword [rsp + 0x48], xmm9
movss dword [rsp + 0x4c], xmm12
call fcn.18010e01c
movss xmm8, dword [0x1803a5020]
lea rcx, [rsp + 0x40]
movss xmm7, dword [0x1803a5024]
mov r10d, eax
movss xmm6, dword [0x1803a5028]
movss dword [rsp + 0x40], xmm8
movss dword [rsp + 0x44], xmm7
movss dword [rsp + 0x48], xmm6
movss dword [rsp + 0x4c], xmm12
call fcn.18010e01c
lea rcx, [rsp + 0x40]
movss dword [rsp + 0x40], xmm8
mov r8d, eax
movss dword [rsp + 0x44], xmm7
movss dword [rsp + 0x48], xmm6
movss dword [rsp + 0x4c], xmm12
call fcn.18010e01c
lea rcx, [rsp + 0x40]
movss dword [rsp + 0x40], xmm11
mov r9d, eax
movss dword [rsp + 0x44], xmm10
movss dword [rsp + 0x48], xmm9
movss dword [rsp + 0x4c], xmm12
call fcn.18010e01c
minss xmm14, dword [0x1800c38c0]
movss xmm1, dword [0x1802c2f74]
lea rdx, [rbp + 0xb0]
addss xmm1, dword [0x1800c38c0]
movss xmm0, dword [0x1802c2f78]
lea rcx, [rbp + 0xc8]
mov dword [rsp + 0x28], r10d
mulss xmm14, dword [0x1800c3ad8]
mov dword [rsp + 0x20], r8d
mov r8d, eax
movss dword [rbp + 0xc8], xmm0
movss dword [rbp + 0xcc], xmm1
movss dword [rbp + 0xb0], xmm14
mov dword [rbp + 0xb4], 0x40a00000
call fcn.1800fedc4
movss xmm10, dword [rbp + 0xb8]
movss xmm8, dword [0x1800c3a9c]
movss xmm11, dword [0x1800c37f8]
movss xmm12, dword [0x1800c3ac4]
movss xmm14, dword [rbp + 0xc0]
mov ecx, r15d
call fcn.18010e470
mov ecx, r12d
call fcn.18010e5cc
cmp byte [0x1805ba79c], r14b
movss xmm9, dword [0x1800c3a44]
je 0x180100041
call fcn.1800d9cf8
mov rcx, rax
call fcn.18010980c
movss xmm1, dword [0x1803a5118]
mov rdi, rax
movss xmm0, dword [0x1800c3a08]
addss xmm1, xmm8
movss xmm13, dword [0x1800c3a94]
lea rax, [rsp + 0x40]
movdqa xmm6, xmmword [0x1800c3e10]
movaps xmm3, xmm12
movss xmm2, dword [0x1803a5114]
mov dword [rsp + 0x38], r14d
movss dword [rsp + 0x30], xmm15
subss xmm1, xmm13
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x40], xmm6
call fcn.1800dbd4c
test rdi, rdi
je 0x1800ffffb
cmp byte [0x1805ba40e], r14b
jne 0x1800fff03
mov rcx, rdi
call fcn.1800d893c
mov rcx, rdi
mov rbx, rax
call fcn.1800d893c
movss xmm6, dword [0x1800c3818]
movss xmm0, dword [rbx]
movss xmm2, dword [0x1805f0234]
movss xmm1, dword [rax]
mulss xmm1, xmm6
subss xmm0, xmm1
comiss xmm2, xmm0
ja 0x1800ffef6
comiss xmm2, xmm15
jbe 0x1800ffef6
mov rcx, rdi
call fcn.1800d893c
mov rcx, rdi
mov rbx, rax
call fcn.1800d893c
movss xmm3, dword [rbx]
movss xmm1, dword [0x1803a5114]
movss xmm2, dword [0x1805f0234]
addss xmm1, xmm9
movss xmm0, dword [rax]
mulss xmm0, xmm6
subss xmm3, xmm0
movss xmm0, dword [0x1803a5118]
addss xmm0, xmm8
call fcn.1800fea70
movdqa xmm6, xmmword [0x1800c3e10]
jmp 0x1800ffffb
movdqa xmm6, xmmword [0x1800c3e10]
mov ebx, 4
mov rax, qword gs:[0x58]
lea r13, [0x1805f11e8]
mov ecx, dword [0x1805f11e8]
mov rsi, qword [rax + rsi*8]
cmp ecx, dword [rsi + rbx]
jg 0x180100bdd
jmp 0x1800fff30
movdqa xmm6, xmmword [0x1800c3e10]
mov rax, qword [0x1805f0f60]
movss xmm0, dword [0x1805ba4c8]
comiss xmm0, dword [rax + rdi]
jae 0x1800ffff5
cmp ecx, dword [rsi + rbx]
jg 0x180100c78
mov rax, qword [0x1805f0f60]
mov rcx, rdi
movss xmm7, dword [rax + rdi]
subss xmm7, dword [0x1805ba4c8]
call fcn.1800d893c
movss xmm6, dword [rax]
mov eax, dword [rsi + rbx]
cmp dword [0x1805f11e8], eax
jg 0x180100baa
mov rax, qword [0x1805f0f60]
movss xmm2, dword [0x1805ba4c8]
movaps xmm3, xmm2
addss xmm3, xmm6
movss xmm1, dword [rax + rdi]
comiss xmm1, xmm15
jae 0x1800fffa9
maxss xmm3, xmm15
jmp 0x1800fffc7
movaps xmm0, xmm2
addss xmm6, xmm1
subss xmm0, xmm1
comiss xmm0, xmm15
ja 0x1800fffc0
minss xmm6, xmm3
jmp 0x1800fffc4
maxss xmm6, xmm3
movaps xmm3, xmm6
movss xmm1, dword [0x1803a5114]
subss xmm3, xmm2
movss xmm0, dword [0x1803a5118]
addss xmm1, xmm9
addss xmm0, xmm8
movaps xmm2, xmm7
call fcn.1800fea70
movdqa xmm6, xmmword [0x1800c3e10]
mov r13d, 2
movss xmm1, dword [0x1803a5118]
lea rax, [rsp + 0x40]
movss xmm0, dword [0x1800c3a08]
addss xmm1, xmm8
movss xmm2, dword [0x1803a5114]
movaps xmm3, xmm12
mov dword [rsp + 0x38], r15d
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm0
subss xmm1, xmm13
movdqa xmmword [rsp + 0x40], xmm6
call fcn.1800dbcb4
mov dl, byte [0x1805ba6e6]
lea rcx, [0x1800c0748]
movss dword [rsp + 0x20], xmm11
call fcn.1800cbe3c
comiss xmm0, dword [0x1800c37d4]
jbe 0x1801000ed
movss xmm1, dword [0x1803a5070]
mov rax, qword [0x1805ba8a8]
movss xmm2, dword [0x1803a5074]
movss xmm6, dword [0x1803f8f00]
movss dword [rsp + 0x40], xmm1
mov rcx, qword [rax + 0x3ed0]
movss xmm1, dword [0x1803a5078]
movss dword [rsp + 0x44], xmm2
movss dword [rsp + 0x48], xmm1
movss dword [rsp + 0x4c], xmm0
movups xmm0, xmmword [rsp + 0x40]
mov byte [rcx + 0xb8], r15b
lea rcx, [rsp + 0x40]
movss dword [rbp + 0xb0], xmm14
movss dword [rbp + 0xb4], xmm10
movdqa xmmword [rsp + 0x40], xmm0
call fcn.18010e01c
mov r9d, eax
lea rdx, [rbp + 0xb0]
movaps xmm2, xmm6
call fcn.1801241ac
mov rcx, qword [0x1805ba658]
mov edi, r14d
mov esi, 0xf
test rcx, rcx
je 0x18010034e
cmp byte [0x1805ba788], r14b
je 0x18010034e
call fcn.1800d8294
test al, al
je 0x18010034e
cmp byte [0x1805ba436], r14b
jne 0x18010034e
mov rcx, qword [0x1805ba658]
call fcn.1800d9244
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.1801082b0
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x60], xmm0
or r8, 0xffffffffffffffff
mov rdx, qword [rax]
movdqu xmmword [rbp - 0x50], xmm1
inc r8
cmp byte [rdx + r8], r14b
jne 0x18010015d
lea rcx, [rbp - 0x60]
call fcn.1800c68f8
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, r15d
jg 0x180100190
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
cmp byte [0x1805ba4cd], r14b
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x70], r14b
mov qword [rbp - 0x78], rsi
je 0x1801001da
mov rax, qword [0x1800c0758]
mov dword [rsp + 0x70], eax
movzx eax, word [0x1800c075c]
mov word [rsp + 0x74], ax
mov al, byte [0x1800c075e]
mov byte [rsp + 0x76], al
mov qword [rbp - 0x80], 7
mov byte [rsp + 0x77], r14b
jmp 0x180100201
movsd xmm0, qword [0x1800c0760]
movzx eax, word [0x1800c0768]
movsd qword [rsp + 0x70], xmm0
mov word [rsp + 0x78], ax
mov qword [rbp - 0x80], 0xa
mov byte [rsp + 0x7a], r14b
cmp qword [rbp - 0x48], rsi
lea rbx, [rbp - 0x60]
mov rdx, qword [0x1805ba658]
lea rcx, [rsp + 0x60]
cmova rbx, qword [rbp - 0x60]
call fcn.1800f4644
movss xmm8, dword [0x1800c3a1c]
lea r9, [rsp + 0x40]
mov rcx, qword [0x1805f0e10]
movaps xmm6, xmm10
mov qword [rsp + 0x38], rbx
addss xmm6, xmm9
movups xmm0, xmmword [rax]
movss dword [rsp + 0x30], xmm8
movaps xmm1, xmm14
movd edx, xmm1
movaps xmm2, xmm6
mov dword [rsp + 0x28], r13d
movd r8d, xmm2
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x20], r12d
call fcn.1800db090
cmp byte [0x1805ba4cd], r14b
lea rax, [rsp + 0x70]
je 0x180100289
movdqa xmm0, xmmword [0x1800c41d0]
jmp 0x180100291
movdqa xmm0, xmmword [0x1800c3e20]
addss xmm6, dword [0x1800c3a20]
mov rcx, qword [0x1805f0e10]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x38], rax
movaps xmm1, xmm14
movss dword [rsp + 0x30], xmm8
movd edx, xmm1
movaps xmm2, xmm6
mov dword [rsp + 0x28], r13d
movd r8d, xmm2
movdqa xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x20], r12d
call fcn.1800db090
mov rdx, qword [rbp - 0x78]
mov edi, 0x16
mov ebx, 0x1000
cmp rdx, rsi
jbe 0x180100313
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x18010030e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180100340
call fcn.180134b64
mov rdx, qword [rbp - 0x48]
cmp rdx, rsi
jbe 0x180100357
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, rbx
jb 0x180100347
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180100347
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180134b64
jmp 0x180100357
movss xmm8, dword [0x1800c3a1c]
mov ecx, dword [0x1805f13a0]
test ecx, ecx
je 0x180100375
sub ecx, r15d
je 0x180100375
cmp ecx, r15d
je 0x180100375
movss xmm7, dword [rbp + 0xb0]
jmp 0x18010037e
call qword [0x1805f1398]
movaps xmm7, xmm0
call fcn.1800d9cf8
mov rcx, rax
call fcn.1800d962c
subss xmm7, dword [rax]
subss xmm7, dword [0x1800c3814]
call fcn.1800d9cf8
mov rcx, rax
call fcn.1800d9a34
movss xmm6, dword [0x1800c380c]
lea rcx, [0x1800c0770]
mov dl, byte [0x1805ba706]
movaps xmm11, xmm0
movss dword [rsp + 0x20], xmm6
call fcn.1800cbe3c
comiss xmm0, xmm6
jbe 0x1801006a6
cmp byte [0x1805ba706], r14b
je 0x1801006a6
cmp byte [0x1805ba6c6], r14b
je 0x1801004ac
mov ecx, dword [0x1805ba7d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801004ac
movss xmm0, dword [0x1803a4f30]
movss xmm1, dword [0x1803a4f34]
movss dword [rsp + 0x60], xmm0
movss xmm0, dword [0x1803a4f38]
movss dword [rsp + 0x68], xmm0
movss dword [rsp + 0x64], xmm1
mov dword [rsp + 0x6c], 0x437f0000
call fcn.1800d9cf8
mov r8d, 0x12
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.1800d96a8
mulss xmm7, dword [0x1800c3888]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
movups xmm0, xmmword [rsp + 0x60]
addss xmm7, dword [0x1800c381c]
movss xmm1, dword [rax]
movdqa xmmword [rsp + 0x60], xmm0
movss xmm0, dword [rax + 4]
subss xmm0, dword [0x1800c386c]
mulss xmm7, xmm11
movss dword [rsp + 0x50], xmm1
addss xmm7, dword [0x1800c37e8]
movss dword [rsp + 0x54], xmm0
movss xmm0, dword [rax + 8]
movss dword [rsp + 0x58], xmm0
movaps xmm2, xmm7
call fcn.1800fee78
cmp byte [0x1805ba6c4], r14b
je 0x180100525
mov ecx, dword [0x1805ba7d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180100525
movdqa xmm0, xmmword [0x1800c3e20]
lea rax, [0x1800c0788]
mov rcx, qword [0x1805f0e10]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm10
movdqa xmmword [rsp + 0x40], xmm0
addss xmm2, xmm9
movss dword [rsp + 0x30], xmm8
movaps xmm1, xmm14
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r12d
movd edx, xmm1
addss xmm2, xmm0
movd r8d, xmm2
call fcn.1800db090
add edi, esi
cmp byte [0x1805ba6a8], r14b
je 0x18010059e
mov ecx, dword [0x1805ba7c0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18010059e
movdqa xmm0, xmmword [0x1800c3e90]
lea rax, [0x1800c0798]
mov rcx, qword [0x1805f0e10]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x38], rax
movaps xmm2, xmm10
movdqa xmmword [rsp + 0x40], xmm0
addss xmm2, xmm9
movss dword [rsp + 0x30], xmm8
movaps xmm1, xmm14
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r12d
movd edx, xmm1
addss xmm2, xmm0
movd r8d, xmm2
call fcn.1800db090
add edi, esi
cmp byte [0x1805ba78a], r14b
je 0x1801006a6
mov ecx, dword [0x1805ba7c8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1801006a6
mov rcx, qword [0x1805ba658]
lea rdx, [rsp + 0x40]
mov esi, 0x2f
mov r8d, esi
call fcn.1800d96a8
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
movsd qword [rbp - 0x70], xmm0
call fcn.1800d9cf8
mov r8d, esi
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.1800d96a8
movdqa xmm13, xmmword [0x1800c41d0]
movsd xmm0, qword [rax]
movss xmm1, dword [rax + 8]
movsd qword [rsp + 0x50], xmm0
movss xmm2, dword [rsp + 0x54]
movss xmm3, dword [rsp + 0x50]
subss xmm3, dword [rbp - 0x70]
subss xmm2, dword [rbp - 0x6c]
movd xmm0, ebx
subss xmm1, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm3, xmm2
addss xmm3, xmm1
comiss xmm3, dword [0x1800c39e4]
jae 0x1801006af
mov rcx, qword [0x1805f0e10]
addss xmm10, xmm9
movd xmm0, edi
lea rax, [0x1800c07a8]
mov qword [rsp + 0x38], rax
lea r9, [rsp + 0x40]
movss dword [rsp + 0x30], xmm8
movaps xmm1, xmm14
cvtdq2ps xmm0, xmm0
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r12d
movd edx, xmm1
addss xmm10, xmm0
movdqa xmmword [rsp + 0x40], xmm13
movaps xmm2, xmm10
movd r8d, xmm2
call fcn.1800db090
jmp 0x1801006af
movdqa xmm13, xmmword [0x1800c41d0]
cmp byte [0x1805ba68b], r14b
mov edi, 0x30
movdqa xmm10, xmmword [0x1800c3d80]
mov ebx, 0xc0
movss xmm11, dword [0x1800c3acc]
movss xmm7, dword [0x1800c39d8]
movss xmm15, dword [0x1800c3a7c]
je 0x1801007e8
cmp byte [0x1805ba436], r14b
je 0x1801007e8
movss xmm1, dword [0x1800c3a8c]
movaps xmm0, xmm11
unpcklps xmm0, xmm1
movq rcx, xmm0
call fcn.1800dab64
movss xmm2, dword [0x1801f65f4]
lea rax, [rsp + 0x40]
movss xmm1, dword [0x180221b3c]
movaps xmm3, xmm11
mov dword [rsp + 0x38], edi
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm9
movdqa xmmword [rsp + 0x40], xmm10
call fcn.1800dbd4c
movss xmm2, dword [0x1801f65f4]
lea rax, [rsp + 0x40]
movss xmm1, dword [0x180221b3c]
addss xmm2, xmm9
mov dword [rsp + 0x38], ebx
movaps xmm3, xmm11
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm15
movdqa xmmword [rsp + 0x40], xmm10
call fcn.1800dbd4c
movss xmm2, dword [0x1801f65f4]
lea rax, [0x1800c07b8]
movss xmm1, dword [0x180221b3c]
lea r9, [rsp + 0x40]
addss xmm2, dword [0x1800c3a58]
addss xmm1, dword [0x1800c3aa8]
mov rcx, qword [0x1805f0e10]
mov qword [rsp + 0x38], rax
movss dword [rsp + 0x30], xmm8
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x28], r15d
movdqa xmmword [rsp + 0x40], xmm13
mov dword [rsp + 0x20], r12d
call fcn.1800db090
cmp byte [0x1805ba79c], r14b
movss xmm12, dword [0x1800c3ac8]
movss xmm6, dword [0x1800c3a18]
movss xmm14, dword [0x1800c3aa0]
je 0x1801008c2
cmp byte [0x1805ba436], r14b
je 0x1801008c2
movaps xmm0, xmm12
unpcklps xmm0, xmm6
movq rcx, xmm0
call fcn.1800dac68
movss xmm2, dword [0x1803a5114]
lea rax, [rsp + 0x40]
movss xmm1, dword [0x1803a5118]
movaps xmm3, xmm12
mov dword [rsp + 0x38], ebx
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movdqa xmmword [rsp + 0x40], xmm10
call fcn.1800dbd4c
movss xmm2, dword [0x1803a5114]
lea rax, [0x1800c07c8]
movss xmm1, dword [0x1803a5118]
lea r9, [rsp + 0x40]
subss xmm2, dword [0x1800c39a0]
mov rcx, qword [0x1805f0e10]
addss xmm1, xmm14
mov qword [rsp + 0x38], rax
movss dword [rsp + 0x30], xmm8
mov dword [rsp + 0x28], r15d
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rsp + 0x40], xmm13
mov dword [rsp + 0x20], r12d
call fcn.1800db090
cmp byte [0x1805ba789], r14b
je 0x180100982
cmp byte [0x1805ba436], r14b
je 0x180100982
movaps xmm0, xmm12
unpcklps xmm0, xmm6
movq rcx, xmm0
call fcn.1800dad6c
movss xmm2, dword [0x18026b96c]
lea rax, [rsp + 0x40]
movss xmm1, dword [0x18026b970]
movaps xmm3, xmm12
mov dword [rsp + 0x38], ebx
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movdqa xmmword [rsp + 0x40], xmm10
call fcn.1800dbd4c
movss xmm2, dword [0x18026b96c]
lea rax, [0x1800c07e0]
movss xmm1, dword [0x18026b970]
lea r9, [rsp + 0x40]
subss xmm2, dword [0x1800c39a0]
mov rcx, qword [0x1805f0e10]
addss xmm1, xmm14
mov qword [rsp + 0x38], rax
movss dword [rsp + 0x30], xmm8
mov dword [rsp + 0x28], r15d
movd r8d, xmm2
movd edx, xmm1
movdqa xmmword [rsp + 0x40], xmm13
mov dword [rsp + 0x20], r12d
call fcn.1800db090
cmp byte [0x1805ba76a], r14b
je 0x180100a4b
cmp byte [0x1805ba436], r14b
je 0x180100a4b
movss xmm14, dword [0x1800c3adc]
movss xmm6, dword [0x1800c3a40]
movaps xmm0, xmm14
unpcklps xmm0, xmm6
movq rcx, xmm0
call fcn.1800dae70
movss xmm2, dword [0x1802c2f74]
lea rax, [rsp + 0x40]
movss xmm1, dword [0x1802c2f78]
movaps xmm3, xmm14
mov dword [rsp + 0x38], ebx
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movdqa xmmword [rsp + 0x40], xmm10
call fcn.1800dbd4c
movss xmm1, dword [0x1802c2f78]
lea rax, [0x1800c07f8]
movss xmm2, dword [0x1802c2f74]
addss xmm1, xmm12
mov rcx, qword [0x1805f0e10]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x38], rax
movss dword [rsp + 0x30], xmm8
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x28], r15d
movdqa xmmword [rsp + 0x40], xmm13
mov dword [rsp + 0x20], r12d
call fcn.1800db090
cmp byte [0x1805ba68a], r14b
je 0x180100b57
cmp byte [0x1805ba436], r14b
je 0x180100b57
movss xmm1, dword [0x1800c3a8c]
movaps xmm0, xmm11
unpcklps xmm0, xmm1
movq rcx, xmm0
call fcn.1800dab64
movss xmm2, dword [0x1800bb57c]
lea rax, [rsp + 0x40]
movss xmm1, dword [0x1800bb578]
movaps xmm3, xmm11
mov dword [rsp + 0x38], edi
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm9
movdqa xmmword [rsp + 0x40], xmm10
call fcn.1800dbd4c
movss xmm2, dword [0x1800bb57c]
lea rax, [rsp + 0x40]
movss xmm1, dword [0x1800bb578]
addss xmm2, xmm9
mov dword [rsp + 0x38], ebx
movaps xmm3, xmm11
movss dword [rsp + 0x30], xmm7
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm15
movdqa xmmword [rsp + 0x40], xmm10
call fcn.1800dbd4c
movss xmm2, dword [0x1800bb57c]
lea rax, [0x1800c0810]
movss xmm1, dword [0x1800bb578]
lea r9, [rsp + 0x40]
addss xmm2, dword [0x1800c3a58]
addss xmm1, dword [0x1800c3aa8]
mov rcx, qword [0x1805f0e10]
mov qword [rsp + 0x38], rax
movss dword [rsp + 0x30], xmm8
movd r8d, xmm2
movd edx, xmm1
mov dword [rsp + 0x28], r13d
movdqa xmmword [rsp + 0x40], xmm13
mov dword [rsp + 0x20], r12d
call fcn.1800db090
lea r11, [rsp + 0x168]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm11, xmmword [r11 - 0x68]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
movaps xmm14, xmmword [r11 - 0x98]
movaps xmm15, xmmword [r11 - 0xa8]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, r13
call fcn.180134c0c
cmp dword [0x1805f11e8], 0xffffffff
jne 0x1800fff81
mov ecx, 0x6c06da54
call fcn.1800d52f4
mov rcx, r13
mov qword [0x1805f0f60], rax
call fcn.180134ba0
jmp 0x1800fff81
mov rcx, r13
call fcn.180134c0c
mov ecx, dword [0x1805f11e8]
cmp ecx, 0xffffffff
jne 0x1800fff28
mov ecx, 0x6c06da54
call fcn.1800d52f4
mov rcx, r13
mov qword [0x1805f0f60], rax
call fcn.180134ba0
mov ecx, dword [0x1805f11e8]
jmp 0x1800fff28
lea rcx, [0x1805f07d0]
call fcn.180134c0c
cmp dword [0x1805f07d0], 0xffffffff
jne 0x1800ff533
movd xmm2, dword [0x1805ba70c]
lea rcx, [0x1805f07d0]
movd xmm0, dword [0x1805ba6fc]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm0, xmm0
mulss xmm2, dword [0x1800c386c]
mulss xmm0, dword [0x1800c386c]
movss dword [0x1805f0dd4], xmm2
movss dword [0x1805f0dd0], xmm0
call fcn.180134ba0
jmp 0x1800ff533
mov rcx, r13
call fcn.180134c0c
cmp dword [0x1805f11e8], 0xffffffff
jne 0x1800fff52
mov ecx, 0x6c06da54
call fcn.1800d52f4
mov rcx, r13
mov qword [0x1805f0f60], rax
call fcn.180134ba0
jmp 0x1800fff52