Function at 0x1800065b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x130
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
mov rax, qword [0x1800772c0]
xor rax, rsp
mov qword [rbp - 0x28], rax
mov r12, rcx
mov qword [rsp + 0x50], r8
mov ecx, dword [0x180077020]
mov r13, r9
mov rsi, r8
movzx r15d, dl
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180006b80
cmp byte [0x1800778e0], 0
je 0x180006b91
movss xmm7, dword [0x180063d38]
lea rcx, [rbp - 0x80]
mov r14d, 0xffffffff
call fcn.180059ac0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, dword [0x180063d14]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x180077ae8]
xor edi, edi
mov r8, qword [0x180077ae0]
movss xmm10, dword [0x180063e18]
sub rcx, r8
movd xmm9, eax
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
cvtdq2ps xmm9, xmm9
sar rdx, 4
mulss xmm9, dword [0x180063d14]
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1800067db
movss xmm6, dword [0x180063d0c]
xor ebx, ebx
nop
cmp byte [rbx + r8 + 9], 0
je 0x18000679f
mov rsi, qword [rbx + r8]
cmp rsi, r12
je 0x18000679f
cmp byte [rbx + r8 + 8], r15b
je 0x18000679f
lea rcx, [rsp + 0x40]
call fcn.180059ac0
mov rcx, qword [0x180077a58]
lea rdx, [rsi + 0xedc]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x48]
lea r8, [rsp + 0x40]
addss xmm0, xmm10
mov rdx, r13
lea rcx, [rsp + 0x60]
movss dword [rsp + 0x48], xmm0
call fcn.180059c20
comiss xmm6, dword [rsp + 0x68]
jae 0x180006798
movss xmm0, dword [rsp + 0x60]
movss xmm1, dword [rsp + 0x64]
subss xmm0, xmm8
subss xmm1, xmm9
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x180006773
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x18000677b
movaps xmm0, xmm1
call fcn.1800607de
comiss xmm7, xmm0
jbe 0x180006798
mov eax, dword [rsp + 0x48]
movaps xmm7, xmm0
movsd xmm0, qword [rsp + 0x40]
mov r14d, edi
movsd qword [rbp - 0x80], xmm0
mov dword [rbp - 0x78], eax
mov r8, qword [0x180077ae0]
mov rcx, qword [0x180077ae8]
inc edi
sub rcx, r8
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
add rbx, 0x58
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jb 0x1800066c0
mov rsi, qword [rsp + 0x50]
cmp byte [0x1800778e1], 0
je 0x180006b33
movsxd rax, dword [0x180077028]
cmp eax, 0xffffffff
je 0x180006b33
imul rdi, rax, 0x58
add rdi, r8
cmp byte [rdi + 9], 0
je 0x180006b80
mov rcx, qword [rdi]
add rcx, 0x34c
call fcn.180003a50
test eax, eax
je 0x180006b80
mov rbx, qword [rdi]
lea rcx, [rsp + 0x40]
call fcn.180059ac0
mov rcx, qword [0x180077a58]
lea r8, [rsp + 0x40]
xor r14d, r14d
lea rdx, [rbx + 0xedc]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x48]
mov rcx, qword [rdi]
addss xmm0, xmm10
add rcx, 0x408
movss dword [rsp + 0x48], xmm0
call fcn.180006550
mov rcx, qword [rdi]
movaps xmm7, xmm0
add rcx, 0x410
call fcn.180006550
mov rcx, qword [rdi]
movaps xmm6, xmm0
add rcx, 0x428
call fcn.180006550
movaps xmm3, xmm0
lea rcx, [rbp - 0x48]
movaps xmm2, xmm6
movaps xmm1, xmm7
call fcn.180059aa0
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.180059e00
movaps xmm2, xmm0
lea rdx, [rsp + 0x70]
movd xmm0, dword [0x180077024]
lea rcx, [rbp - 0x48]
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
call fcn.180059b30
mov r8, rax
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x40]
call fcn.180059ba0
mov rax, qword [0x180077a88]
lea r8, [rsp + 0x50]
mov rdx, qword [0x180077a48]
add rax, 0x28
mov rcx, qword [0x180077a58]
add rdx, rax
mov r9d, 8
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x180006b91
lea rcx, [rsp + 0x70]
call fcn.180059ac0
mov rcx, qword [0x180077a58]
lea r8, [rsp + 0x70]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x44]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, rsi
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x38]
call fcn.180059b60
movss xmm6, dword [rsp + 0x60]
movss xmm7, dword [rsp + 0x64]
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movss xmm9, dword [0x180063e1c]
movaps xmm8, xmm0
mulss xmm7, xmm7
xorps xmm0, xmm0
mulss xmm6, xmm6
mulss xmm8, xmm9
addss xmm7, xmm6
ucomiss xmm0, xmm7
ja 0x1800069af
xorps xmm0, xmm0
sqrtss xmm0, xmm7
jmp 0x1800069b7
movaps xmm0, xmm7
call fcn.1800607de
movaps xmm1, xmm0
movss xmm0, dword [rsp + 0x68]
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
mulss xmm0, xmm9
lea rcx, [rsp + 0x30]
xorps xmm3, xmm3
movaps xmm2, xmm8
xorps xmm6, xmm6
xorps xmm0, xmmword [0x180063e40]
movaps xmm1, xmm0
call fcn.180059aa0
movsd xmm0, qword [rsp + 0x30]
movss xmm3, dword [0x180063e20]
movsd qword [rsp + 0x60], xmm0
movss xmm0, dword [rsp + 0x30]
comiss xmm0, xmm3
ja 0x180006a1a
movss xmm3, dword [0x180063e28]
comiss xmm3, xmm0
ja 0x180006a1a
movss xmm3, dword [rsp + 0x60]
movss xmm0, dword [0x180063e2c]
movss xmm2, dword [rsp + 0x64]
comiss xmm0, xmm2
jbe 0x180006a3e
movss xmm1, dword [0x180063e24]
addss xmm2, xmm1
comiss xmm0, xmm2
ja 0x180006a35
movss xmm0, dword [0x180063d30]
comiss xmm2, xmm0
jbe 0x180006a5c
movss xmm1, dword [0x180063e30]
addss xmm2, xmm1
comiss xmm2, xmm0
ja 0x180006a53
subss xmm3, dword [rsp + 0x70]
subss xmm2, dword [rsp + 0x74]
mov rcx, qword [0x180077a58]
lea r8, [rsp + 0x30]
mov r9d, 0xc
movss dword [rsp + 0x38], xmm6
lea rdx, [rbx + 0x44]
mov qword [rsp + 0x20], r14
divss xmm3, dword [0x18007702c]
divss xmm2, dword [0x18007702c]
addss xmm3, dword [rsp + 0x70]
addss xmm2, dword [rsp + 0x74]
unpcklps xmm3, xmm2
movsd qword [rsp + 0x30], xmm3
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, [rsp + 0x50]
call fcn.180008500
mov rax, qword [rsp + 0x50]
sub rax, qword [0x1800778e8]
cmp rax, 0x1ddca740
jge 0x180006adf
cmp byte [0x1800778e2], r14b
jne 0x180006b91
xor eax, eax
lea rdx, [rbp - 0x70]
xorps xmm0, xmm0
mov qword [rbp - 0x50], rax
movups xmmword [rbp - 0x70], xmm0
mov eax, 0x33
mov dword [rbp - 0x70], 1
mov r8d, 0x28
mov word [rbp - 0x68], ax
mov ecx, 1
movups xmmword [rbp - 0x60], xmm0
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, 0x28
mov dword [rbp - 0x64], 2
lea rdx, [rbp - 0x70]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
jmp 0x180006b91
cmp r14d, 0xffffffff
je 0x180006b91
movsxd rax, r14d
imul rcx, rax, 0x58
cmp byte [rcx + r8 + 9], 0
je 0x180006b91
mov rcx, qword [rcx + r8]
add rcx, 0x34c
call fcn.180003a50
test eax, eax
je 0x180006b91
lea rcx, [rsp + 0x50]
mov dword [0x180077028], r14d
mov byte [0x1800778e1], 1
call fcn.180008500
mov rcx, qword [rax]
mov qword [0x1800778e8], rcx
jmp 0x180006b91
mov byte [0x1800778e1], 0
mov dword [0x180077028], 0xffffffff
mov rcx, qword [rbp - 0x28]
xor rcx, rsp
call fcn.18005fbf0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret