Function at 0x18003ff34
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x2008]
mov eax, 0x2100
call fcn.180044a50
sub rsp, rax
movaps xmmword [rsp + 0x20f0], xmm6
mov rax, qword [0x1801a5040]
xor rax, rsp
mov qword [rbp + 0x1fe0], rax
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor edi, edi
lea esi, [rdi + 1]
test sil, al
je 0x18003ff94
cmp byte [0x1801a5301], dil
sete byte [0x1801a5301]
mov rax, qword [0x1801a5b00]
test rax, rax
je 0x18003ffa9
mov rcx, qword [rax + 0x98]
jmp 0x18003ffac
mov rcx, rdi
cmp qword [rcx + 0x18], rdi
jne 0x18003ffb7
call fcn.180026720
call fcn.180026f50
call fcn.180006a24
mov cl, byte [0x1801a5301]
mov rax, qword [0x1801a5b00]
mov byte [rax + 0x58], cl
mov ecx, 0x70
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test sil, al
je 0x18004007b
cmp byte [0x1801ab688], dil
sete byte [0x1801ab688]
mov r8d, 0xbb8
mov edx, esi
lea rcx, [rbp - 0x30]
call fcn.180037e28
lea rdx, str.ActiveHack
lea rcx, [rbp - 0x30]
call fcn.180037d74
lea rcx, [rbp - 0x30]
cmp byte [0x1801ab688], dil
je 0x18004002f
lea rdx, str.Enable_Hack
call fcn.180037dcc
jmp 0x180040042
lea rdx, str.Disable_Hack
call fcn.180037dcc
mov dword [rbp - 0x30], 3
mov rax, qword [0x1801a53c8]
cmp rax, qword [0x1801a53d0]
je 0x18004006f
mov ebx, 0x2010
mov r8d, ebx
lea rdx, [rbp - 0x30]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
add qword [0x1801a53c8], rbx
jmp 0x18004007b
lea r8, [rbp - 0x30]
mov rdx, rax
call fcn.18004208c
movdqa xmm0, xmmword [0x18019f6f0]
movups xmmword [rbp - 0x68], xmm0
lea rbx, str.Background
cmp byte [0x1801ab688], dil
je 0x1800400c6
movdqa xmm0, xmmword [0x18019f730]
movups xmmword [rbp - 0x68], xmm0
mov rax, qword [0x1801a5b00]
mov rax, qword [rax + 0x4b88]
mov r8, rbx
xor edx, edx
mov rcx, qword [rax]
call fcn.18000618c
mov rcx, rax
call fcn.1800396a4
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov r8d, 7
lea rdx, str.ShowESP
lea rcx, [rbp - 0x58]
call fcn.1800419c4
nop
movss xmm0, dword [0x18019f4e8]
movss dword [rsp + 0x20], xmm0
mov r9b, sil
xor r8d, r8d
lea rdx, str.ShowESP
lea rcx, [rsp + 0x50]
call fcn.1800088c0
mov rax, qword [0x1801a5b00]
mov rax, qword [rax + 0x4b88]
mov r8, rbx
xor edx, edx
mov rcx, qword [rax]
call fcn.18000618c
mov r10, rax
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova r9, qword [rbp - 0x58]
lea rcx, [rbp - 0x68]
call fcn.1800032d8
mov ecx, eax
mov eax, dword [0x1801a5cf8]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movss xmm0, dword [rsp + 0x50]
mulss xmm0, dword [0x18019f324]
subss xmm1, xmm0
movss dword [rsp + 0x50], xmm1
mov dword [rsp + 0x54], 0x42480000
mov qword [rsp + 0x40], rdi
xorps xmm6, xmm6
movss dword [rsp + 0x38], xmm6
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r9
mov dword [rsp + 0x20], ecx
lea r9, [rsp + 0x50]
movss xmm2, dword [0x18019f464]
xor edx, edx
mov rcx, r10
call fcn.180020f48
mov rax, qword [0x1801a5b00]
mov rax, qword [rax + 0x4b88]
mov r8, rbx
xor edx, edx
mov rcx, qword [rax]
call fcn.18000618c
mov rbx, rax
mov rcx, qword [0x1801a5b00]
cvttss2si edx, dword [rcx + 0xe4]
lea rcx, [rsp + 0x78]
call fcn.1800375cc
nop
mov r8, rax
lea rdx, str.FPS:
lea rcx, [rsp + 0x58]
call fcn.1800417e8
mov r8, rax
cmp qword [rax + 0x18], 0xf
jbe 0x180040206
mov r8, qword [rax]
movdqa xmm0, xmmword [0x18019f900]
movups xmmword [rbp - 0x68], xmm0
lea rcx, [rbp - 0x68]
call fcn.1800032d8
and dword [rsp + 0x50], 0
and dword [rsp + 0x54], 0
mov qword [rsp + 0x40], rdi
movss dword [rsp + 0x38], xmm6
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r8
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x50]
movss xmm2, dword [0x18019f468]
xor edx, edx
mov rcx, rbx
call fcn.180020f48
nop
mov ebx, 0x1000
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x180040297
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, rbx
jb 0x180040292
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180040292
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800438dc
movdqa xmm0, xmmword [0x18019f530]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], dil
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1800402e5
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, rbx
jb 0x1800402e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800402e0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800438dc
cmp byte [0x1801a5301], dil
je 0x180040327
mov rax, qword [0x1801a5b00]
mov dword [rax + 0x110], edi
mov byte [rax + 0x114], dil
mov ecx, esi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18004031d
mov rax, qword [0x1801a5b00]
mov byte [rax + 0x110], sil
call fcn.18003ec9c
call fcn.18000d920
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test sil, al
je 0x180040350
lea rcx, [0x18019f000]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
movss xmm1, dword [0x18019f43c]
mov ecx, 3
call fcn.1800037f8
movdqa xmm0, xmmword [0x18019f5e0]
movups xmmword [rbp - 0x68], xmm0
lea rdx, [rbp - 0x68]
mov ecx, 2
call fcn.180003730
call fcn.180037efc
mov ecx, esi
call fcn.1800038fc
mov ecx, esi
call fcn.1800037a4
call fcn.180008244
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
mov dword [rsp + 0x30], edi
movss xmm0, dword [0x18019f368]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], edi
mov r9d, esi
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x180040455
call fcn.180008584
mov rax, qword [0x1801a5b00]
mov rax, qword [rax + 0x4b88]
mov rdx, qword [rax]
add rdx, 0x50
mov al, byte [rdx]
neg al
sbb rcx, rcx
and rcx, rdx
call fcn.180025f48
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1800404af
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x1800404af
call fcn.180026758
mov rcx, qword [0x1801a5d80]
mov rax, qword [rcx]
lea rdx, [0x1801a5d10]
call qword [rax + 0x80]
call fcn.180026720
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x1800404e9
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, rbx
jb 0x1800404e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800404e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800438dc
mov rcx, qword [rbp + 0x1fe0]
xor rcx, rsp
call fcn.180043740
lea r11, [rsp + 0x2100]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret