Function at 0x1400037a0
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push r14
sub rsp, 0x180
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rsp + 0x160], rax
xor edi, edi
mov dword [rsp + 0x78], edi
lea rdx, str.PS3D_Hack_0.2__new__nMade_By_Dr._Hamd_nPress_L_to_teleport_Up_nPress_J_to_teleport_down__buggy__nPress_E_to_chain_up_nPress_Q_to_chain_Down_nPress_M_to_toggle_no_gravity_nHold_B_to_teleport_players_next_to_you
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400019c0
mov ecx, 8
call fcn.140004558
test rax, rax
je 0x140003802
lea rcx, [0x140003310]
mov qword [rax], rcx
jmp 0x140003805
mov rax, rdi
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0x128]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140001e50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x120], rax
test rax, rax
je 0x140004517
mov ecx, 8
call fcn.140004558
test rax, rax
je 0x14000385e
lea rcx, [0x140002050]
mov qword [rax], rcx
jmp 0x140003861
mov rax, rdi
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0x118]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], edi
mov r9, rax
lea r8, [0x140001e50]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x110], rax
test rax, rax
je 0x140004505
movss xmm6, dword [0x14000652c]
nop word [rax + rax]
mov qword [rsp + 0x50], 0xb8
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 0x20
mov qword [rsp + 0x68], 0x108
mov qword [rsp + 0x70], 0x88
lea rsi, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x90372c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x80]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0xd8]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400039c9
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400039b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400039b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov rdx, qword [rsp + 0xd8]
add rdx, 0x18
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xcc]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cvttss2si esi, dword [rsp + 0xcc]
mov dword [rsp + 0x48], esi
mov ecx, 0x4c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003b82
test esi, esi
jle 0x140003b72
mov qword [rsp + 0x50], 0x40
mov qword [rsp + 0x58], 0x370
mov qword [rsp + 0x60], 0x10
mov qword [rsp + 0x68], 0x68
mov qword [rsp + 0x70], rdi
lea r14, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b22bc8
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x88]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0xe0]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003b37
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0xc0], 0x40600000
mov rdx, qword [rsp + 0xe0]
add rdx, 0x1fc
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc0]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
nop
jmp 0x140003b82
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140003d4d
test esi, esi
jle 0x140003d3d
mov qword [rsp + 0x50], 0x40
mov qword [rsp + 0x58], 0x370
mov qword [rsp + 0x60], 0x10
mov qword [rsp + 0x68], 0x68
mov qword [rsp + 0x70], rdi
lea r14, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b22bc8
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x90]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0xe8]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003cb7
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ca4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ca4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov rbx, qword [rsp + 0xe8]
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc8]
lea rdx, [rbx + 0x1fc]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0xc8]
subss xmm0, xmm6
movss dword [rsp + 0xc0], xmm0
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc0]
lea rdx, [rbx + 0x1fc]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0xc0], 0x64
lea rcx, [rsp + 0xc0]
call fcn.140001e80
nop
jmp 0x140003d4d
mov ecx, 0x45
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140004039
test esi, esi
jle 0x140004029
mov qword [rsp + 0x50], 0x40
mov qword [rsp + 0x58], 0x370
mov qword [rsp + 0x60], 0x10
mov qword [rsp + 0x68], 0x68
mov qword [rsp + 0x70], rdi
lea r14, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b22bc8
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x98]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0xf0]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003e82
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e6f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003e6f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0xc0], 0x3f000000
mov rdx, qword [rsp + 0xf0]
add rdx, 0x218
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc0]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x50], 0xb8
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 0x20
mov qword [rsp + 0x68], 0x108
mov qword [rsp + 0x70], 0x28
lea r14, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x90372c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xa0]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0xf8]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003fd5
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003fc2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0xc0], 0xbca3d70a
mov rdx, qword [rsp + 0xf8]
add rdx, 0xac
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc0]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0xc0], 1
lea rcx, [rsp + 0xc0]
call fcn.140001e80
nop
jmp 0x140004039
mov ecx, 0x51
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140004325
test esi, esi
jle 0x140004315
mov qword [rsp + 0x50], 0x40
mov qword [rsp + 0x58], 0x370
mov qword [rsp + 0x60], 0x10
mov qword [rsp + 0x68], 0x68
mov qword [rsp + 0x70], rdi
lea r14, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009190]
add r8, 0x1b22bc8
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xa8]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0x100]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000416e
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000415b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000415b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0xc0], 0xbf000000
mov rdx, qword [rsp + 0x100]
add rdx, 0x218
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc0]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x50], 0xb8
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 0x20
mov qword [rsp + 0x68], 0x108
mov qword [rsp + 0x70], 0x28
lea r14, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x90372c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xb0]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0x108]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400042c1
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400042ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400042ae
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0xc0], 0xbca3d70a
mov rdx, qword [rsp + 0x108]
add rdx, 0xac
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc0]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0xc0], 1
lea rcx, [rsp + 0xc0]
call fcn.140001e80
nop
jmp 0x140004325
mov ecx, 0x4d
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140004379
mov ebx, edi
cmp dword [rsp + 0x78], 0
sete bl
mov dword [rsp + 0xc0], ebx
mov qword [rsp + 0x78], 0x96
lea rcx, [rsp + 0x78]
call fcn.140001e80
nop
mov dword [rsp + 0x78], ebx
jmp 0x140004379
cmp dword [rsp + 0x78], 1
jne 0x1400038b0
test esi, esi
jle 0x1400044f9
mov qword [rsp + 0x50], 0xb8
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 0x20
mov qword [rsp + 0x68], 0x108
mov qword [rsp + 0x70], 0x28
lea rsi, [rsp + 0x50]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov ecx, 0x28
call fcn.140004558
mov rbx, rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rax
lea rcx, [rax + 0x28]
mov qword [rsp + 0x40], rcx
mov r8d, 0x28
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x28]
mov qword [rsp + 0x38], rax
mov r8, qword [0x140009198]
add r8, 0x90372c0
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0xb8]
lea rcx, [0x140009180]
call fcn.140001660
mov qword [rsp + 0x20], rdi
mov r9d, 8
lea r8, [rsp + 0xd0]
mov rdx, qword [rax]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400044a5
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004492
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004492
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140004594
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0xc0], 0xbca3d70a
mov rdx, qword [rsp + 0xd0]
add rdx, 0xac
mov qword [rsp + 0x20], rdi
mov r9d, 4
lea r8, [rsp + 0xc0]
mov rcx, qword [0x140009180]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0xc0], 1
lea rcx, [rsp + 0xc0]
call fcn.140001e80
nop
jmp 0x1400038b0
mov dword [rsp + 0x118], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
nop
mov dword [rsp + 0x128], edi
mov ecx, 6
call sub.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_
int3