The Las Vegas gunman transferred $100,000 overseas in the days before the attack and planned the massacre so meticulously that he even set up cameras inside his high-rise hotel room and on a service cart outside his door, apparently to spot anyone coming for him, authorities said on Tuesday.
Meanwhile, investigators are taking a harder look at the shooter's girlfriend and what she might have known about the attack, with the sheriff naming her a "person of interest" and saying the FBI is bringing her back to the US on Wednesday for questioning.
Authorities are trying to determine why Stephen Paddock killed 59 people at a country music festival in the deadliest mass shooting in modern US history.
They have been speaking with girlfriend Marilou Danley, 62, who was out the country at the time of the shooting and in the Philippines on Tuesday, and "we anticipate some information from her shortly," Sheriff Joseph Lombardo said.
Lombardo said he is "absolutely" confident authorities will find out what set off Paddock, a 64-year-old high-stakes gambler and retired accountant who killed himself before police stormed his 32nd-floor room.
Paddock transferred $100,000 to the Philippines in the days before the shooting, a US official briefed by law enforcement but not authorised to speak publicly because of the continuing investigation told The Associated Press on condition of anonymity.
Investigators are still trying to trace that money and also looking into a least a dozen reports over the past several weeks that said Paddock gambled more than $10,000 per day, the official said.
The cameras Paddock set up at the Mandalay Bay hotel casino were part of his extensive preparations that included stockpiling nearly two dozen guns in his room before opening fire on the concert below.
"I anticipate he was looking for anybody coming to take him into custody," Lombardo said.
During the Sunday night rampage, a hotel security guard who approached the room was shot through the door and wounded in the leg.
"The fact that he had the type of weaponry and amount of weaponry in that room, it was preplanned extensively," the sheriff said, "and I'm pretty sure he evaluated everything that he did and his actions, which is troublesome."
Lombardo said the investigation is proceeding cautiously in case criminal charges are warranted against someone else.
"This investigation is not ended with the demise of Mr. Paddock," the sheriff said. "Did this person get radicalized unbeknownst to us? And we want to identify that source."
In addition to the cameras, investigators found a computer and 23 guns with him at the hotel, along with "bump stock" devices that can enable a rifle to fire continuously, like an automatic weapon, authorities said. Nineteen more guns were found at Paddock's Mesquite home and seven at his Reno house.
Video shot outside the broken door of the room show an assault-style rifle with a scope on a bipod. The sheriff said an internal investigation has been launched to find out how that footage was obtained.
Some investigators turned their focus on Tuesday from the shooter's perch to the festival grounds where his victims fell.
A dozen investigators, most in FBI jackets and all wearing blue booties to avoid contaminating the scene, documented evidence at the site where gunfire rained down and country music gave way to screams of pain and terror.
"Shoes, baby strollers, chairs, sunglasses, purses. The whole field was just littered with things," said Nevada Attorney General Adam Laxalt after touring the site on Monday. "There were bloodstains everywhere."
More than 500 people were injured in the rampage, some by gunfire, some during the chaotic escape. At least 45 patients at two hospitals remained in critical condition. All but three of the dead had been identified by Tuesday afternoon, Lombardo said.
As for what may have set Paddock off, retired FBI profiler Jim Clemente speculated that there was "some sort of major trigger in his life - a great loss, a breakup, or maybe he just found out he has a terminal disease."
Clemente said a "psychological autopsy" may be necessary to try to establish the motive. If the suicide didn't destroy Paddock's brain, experts may even find a neurological disorder or malformation, he said.
He said there could be a genetic component to the slaughter: Paddock's father was a bank robber who was on the FBI's most-wanted list in the 1960s and was diagnosed a psychopath.
"The genetics load the gun, personality and psychology aim it, and experiences pull the trigger, typically," Clemente said.
Paddock had a business degree from Cal State Northridge. In the 1970s and '80s, he worked as a mail carrier and an IRS agent and held down a job in an auditing division of the Defense Department, according to the government. He later worked for a defense contractor.
He had no known criminal record, and public records showed no signs of financial troubles, though he was said to be a big gambler.
Nevada's Gaming Control Board said it will pass along records compiled on Paddock and his girlfriend to investigators.
His brother, Eric Paddock, said he was at a loss to explain the massacre.
"No affiliation, no religion, no politics. He never cared about any of that stuff," he said outside his Florida home.
The FBI discounted the possibility of international terrorism early on, even after the Islamic State claimed responsibility for the attack.
Eric Paddock said his brother did show a confrontational side at times: He apparently hated cigarette smoke so much that he carried around a cigar and blew smoke in people's faces when they lit up around him.