Function at 0x140085a70
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2f8]
sub rsp, 0x3c0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
movaps xmmword [rax - 0xc8], xmm14
movaps xmmword [rax - 0xd8], xmm15
mov rax, qword [0x1400ee010]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov rbx, rdx
mov qword [rsp + 0x40], rdx
mov rsi, rcx
xor r15d, r15d
mov r12d, r15d
mov dword [rbp + 0x178], r15d
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140085b5b
nop dword [rax]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x140085b20
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rbx]
je 0x140085b89
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [rbx + 8]
je 0x140085b89
mov byte [rsi], r12b
mov edx, 0xffffffec
mov r8d, 0x800a8
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov rax, qword [0x140110148]
test rax, rax
je 0x140085b9e
mov rcx, qword [rax + 0xa0]
jmp 0x140085ba1
mov rcx, r15
cmp qword [rcx + 0x48], r12
jne 0x140085bac
call fcn.14005b730
call fcn.14005c5d0
call fcn.1400357e0
mov rcx, qword [rsi + 0x10]
mov dword [rsp + 0x20], r15d
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rcx + 0x28]
call sub.VCRUNTIME140.dll___RTDynamicCast
mov qword [rbp - 0x38], rax
mov ecx, dword [rax + 0xec]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140085c2c
movzx r8d, byte [rsi]
test r8b, r8b
sete cl
mov byte [rsi], cl
test r8b, r8b
jne 0x140085c0e
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov r8d, 0xa8
jmp 0x140085c1e
mov rcx, qword [rbx + 8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov r8d, 0x800a8
mov edx, 0xffffffec
mov rcx, qword [rbx]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov rcx, qword [rsi + 0x10]
mov dword [rsp + 0x20], r15d
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rcx]
call sub.VCRUNTIME140.dll___RTDynamicCast
mov r14, rax
mov rcx, qword [rsi + 0x10]
mov dword [rsp + 0x20], r15d
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rcx + 8]
call sub.VCRUNTIME140.dll___RTDynamicCast
mov r13, rax
mov ebx, 4
mov rcx, qword gs:[0x58]
mov rdi, qword [rcx]
mov ecx, dword [rbx + rdi]
cmp dword [0x1401104a8], ecx
jle 0x140085cb8
lea rcx, [0x1401104a8]
call fcn.1400a4ae8
cmp dword [0x1401104a8], 0xffffffff
jne 0x140085cb8
call fcn.1400873f0
nop
lea rcx, [0x1401104a8]
call fcn.1400a4a7c
mov eax, dword [rbx + rdi]
cmp dword [0x140110488], eax
jle 0x140085d8a
lea rcx, [0x140110488]
call fcn.1400a4ae8
cmp dword [0x140110488], 0xffffffff
jne 0x140085d8a
mov rcx, qword [rsi + 8]
test rcx, rcx
jne 0x140085cf1
mov rbx, r15
jmp 0x140085d72
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rax
lea rax, vtable.std::_Func_impl_no_alloc_class__public:_unsigned_long_long_unsigned___int64____cdecl_process::Roblox::get_base_void____ptr64::_2::_lambda_1___void__unsigned_char____ptr64_.0
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea r9, [rsp + 0x70]
mov r8b, 4
lea rdx, [rbp + 0x180]
mov rcx, qword [rcx + 0x10]
call fcn.140001210
mov rcx, qword [rbp + 0x180]
mov rbx, qword [rcx]
mov rdx, qword [rbp + 0x190]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085d6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140085d6d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
mov qword [0x140110440], rbx
lea rcx, [0x140110488]
call fcn.1400a4a7c
mov ebx, 4
mov eax, dword [rbx + rdi]
cmp dword [0x1401104ac], eax
jle 0x140085dbc
lea rcx, [0x1401104ac]
call fcn.1400a4ae8
cmp dword [0x1401104ac], 0xffffffff
jne 0x140085dbc
call fcn.1400876c0
nop
lea rcx, [0x1401104ac]
call fcn.1400a4a7c
mov eax, dword [rbx + rdi]
cmp dword [0x140110498], eax
jle 0x140085e06
lea rcx, [0x140110498]
call fcn.1400a4ae8
cmp dword [0x140110498], 0xffffffff
jne 0x140085e06
mov rdx, qword [0x140110440]
add rdx, 0x3a2b900
mov rcx, qword [rsi + 8]
call fcn.14007cc90
mov qword [0x1401104a0], rax
lea rcx, [0x140110498]
call fcn.1400a4a7c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], rax
mov rcx, qword [rsi + 8]
mov qword [rbp - 0x40], rcx
mov qword [rbp + 0x1a8], rcx
mov rdx, qword [0x1401104a0]
mov qword [rbp + 0x1b0], rdx
mov eax, 0x1b0
mov word [rbp + 0x1b8], ax
mov byte [rbp + 0x1ba], 0x10
test rdx, rdx
jne 0x140085e53
mov rax, r15
jmp 0x140085e60
add rdx, 0x10
call fcn.1400017a0
mov rcx, qword [rbp - 0x40]
add rax, 0x190
mov qword [rsp + 0x58], rax
lea r8, vtable.std::_Func_impl_no_alloc_class__public:_struct_engine::matrix_16___cdecl_process::Roblox::read_struct_engine::matrix_16__unsigned_long_long_unsigned___int64_____ptr64::_2::_lambda_1___void__unsigned_char____ptr64_.0
je 0x140085f0d
test rcx, rcx
je 0x140085f0d
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rdx
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea r9, [rsp + 0x70]
xor r8d, r8d
lea rdx, [rbp + 0x180]
mov rcx, qword [rcx + 0x10]
call fcn.140001210
mov rcx, qword [rbp + 0x180]
movups xmm6, xmmword [rcx]
movups xmm7, xmmword [rcx + 0x10]
movups xmm8, xmmword [rcx + 0x20]
movups xmm9, xmmword [rcx + 0x30]
mov rdx, qword [rbp + 0x190]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085f06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086692
call fcn.1400a4a0c
jmp 0x140085f1b
xorps xmm6, xmm6
xorps xmm7, xmm7
xorps xmm8, xmm8
xorps xmm9, xmm9
mov rcx, qword [rsi + 8]
mov rax, qword [0x140110440]
add rax, 0x24b5400
je 0x140085fbe
test rcx, rcx
je 0x140085fbe
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rdx
lea rdx, vtable.std::_Func_impl_no_alloc_class__public:_unsigned_long_long_unsigned___int64____cdecl_process::Roblox::get_task_scheduler_unsigned_long_long_unsigned___int64_____ptr64::_2::_lambda_1___void__unsigned_char____ptr64_.0
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea r9, [rsp + 0x70]
mov r8b, 5
lea rdx, [rbp + 0x180]
mov rcx, qword [rcx + 0x10]
call fcn.140001210
mov rcx, qword [rbp + 0x180]
mov r15, qword [rcx]
mov rdx, qword [rbp + 0x190]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140085fb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140086692
call fcn.1400a4a0c
mov eax, dword [rbx + rdi]
cmp dword [0x140110438], eax
jle 0x140085ff0
lea rcx, [0x140110438]
call fcn.1400a4ae8
cmp dword [0x140110438], 0xffffffff
jne 0x140085ff0
call fcn.140087960
nop
lea rcx, [0x140110438]
call fcn.1400a4a7c
mov eax, dword [rbx + rdi]
cmp dword [0x14011048c], eax
jle 0x1400860d2
lea rcx, [0x14011048c]
call fcn.1400a4ae8
cmp dword [0x14011048c], 0xffffffff
jne 0x1400860d2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140110450], xmm0
movups xmmword [0x140110460], xmm0
movups xmmword [0x140110470], xmm0
mov qword [0x140110480], rax
mov rbx, qword [rsi + 8]
mov qword [0x140110450], r15
mov dword [0x140110458], 0x178
mov dword [0x14011045c], 0x158
mov byte [0x140110460], 0x10
mov dword [rbp + 0x178], 0x38
mov dword [rbp + 0x17c], 0x10
movdqu xmmword [0x140110468], xmm0
xor r15d, r15d
mov qword [0x140110478], r15
lea edx, [rax + 2]
call fcn.140088c10
mov qword [0x140110468], rax
lea r8, [rax + 8]
mov qword [0x140110478], r8
mov rdx, qword [rbp + 0x178]
mov qword [rax], rdx
mov qword [0x140110470], r8
mov qword [0x140110480], rbx
lea rcx, [0x1400a9ee0]
call fcn.1400a4e68
nop
lea rcx, [0x14011048c]
call fcn.1400a4a7c
jmp 0x1400860d5
xor r15d, r15d
mov byte [rbp + 0x178], 0x4c
mov al, 0x1e
mov cl, 0x23
mov dl, 0x2e
mov r8b, 0x20
movzx r9d, cl
mov r10b, 0x34
xor r11d, r11d
xor al, 0x4c
mov byte [rbp + 0x179], al
xor cl, 0x4c
mov byte [rbp + 0x17a], cl
xor dl, 0x4c
mov byte [rbp + 0x17b], dl
xor r8b, 0x4c
mov byte [rbp + 0x17c], r8b
xor r9b, 0x4c
mov byte [rbp + 0x17d], r9b
xor r10b, 0x4c
mov byte [rbp + 0x17e], r10b
mov byte [rbp + 0x17f], r11b
lea rdx, [rbp + 0x179]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x60]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x1400873bb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r9d, 2
lea r8, [rsp + 0x60]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_MapWindowPoints]
test eax, eax
jne 0x140086193
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
test eax, eax
jne 0x140087393
mov rdx, qword [rsp + 0x68]
mov eax, edx
mov rcx, qword [rsp + 0x60]
sub eax, ecx
mov dword [rsp + 0x74], eax
shr rcx, 0x20
shr rdx, 0x20
sub edx, ecx
mov dword [rsp + 0x70], edx
movups xmmword [rsp + 0x78], xmm6
movups xmmword [rbp - 0x78], xmm7
movups xmmword [rbp - 0x68], xmm8
movups xmmword [rbp - 0x58], xmm9
cmp qword [0x14010a4d8], 0
jne 0x140086226
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x1a8]
call fcn.1400013d0
movups xmm0, xmmword [rax]
movaps xmmword [0x14010a4d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [0x14010a4e0], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [0x14010a4f0], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [0x14010a500], xmm1
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [0x14010a510], xmm0
movsd xmm1, qword [rax + 0x50]
movsd qword [0x14010a520], xmm1
mov eax, 4
mov eax, dword [rax + rdi]
cmp dword [0x140110448], eax
jle 0x140086297
lea rcx, [0x140110448]
call fcn.1400a4ae8
cmp dword [0x140110448], 0xffffffff
jne 0x140086297
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140086269
imul rax, rax, 0x64
jmp 0x140086284
cqo
idiv rbx
imul r8, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, r8
mov qword [0x140110490], rax
lea rcx, [0x140110448]
call fcn.1400a4a7c
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x1400862b5
imul rax, rax, 0x64
jmp 0x1400862d0
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
sub rax, qword [0x140110490]
movabs rcx, 0x12a05f200
cmp rax, rcx
jl 0x1400865b7
cmp qword [0x1401104a0], 0
je 0x140086344
cmp qword [0x14010a4d8], 0
je 0x140086344
lea rdx, [rbp + 0x180]
lea rcx, [0x14010a4d0]
call fcn.14002ae10
mov r12d, 1
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140086325
mov rax, qword [rax]
cmp r8, 4
jne 0x14008633e
lea rdx, str.Game
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140086344
movzx ebx, r12b
jmp 0x140086346
xor bl, bl
test r12b, 1
je 0x140086390
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140086390
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008638b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008638b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
test bl, bl
je 0x140086524
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x1a8]
call fcn.1400013d0
movups xmm0, xmmword [rax]
movaps xmmword [0x14010a4d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [0x14010a4e0], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [0x14010a4f0], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [0x14010a500], xmm1
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [0x14010a510], xmm0
movsd xmm1, qword [rax + 0x50]
movsd qword [0x14010a520], xmm1
mov rax, qword [rsi + 8]
mov qword [rbp + 0x180], rax
mov rax, qword [0x1401104a0]
mov qword [rbp + 0x188], rax
mov eax, 0x1b0
mov word [rbp + 0x190], ax
mov byte [rbp + 0x192], 0x10
movups xmm0, xmmword [rbp + 0x180]
movups xmmword [rbp + 0x1a8], xmm0
movsd xmm1, qword [rbp + 0x190]
movsd qword [rbp + 0x1b8], xmm1
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x1400864e9
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x1400864e9
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rdx
lea rdx, vtable.std::_Func_impl_no_alloc_class__public:_struct_engine::matrix_16___cdecl_process::Roblox::read_struct_engine::matrix_16__unsigned_long_long_unsigned___int64_____ptr64::_2::_lambda_1___void__unsigned_char____ptr64_.0
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea r9, [rsp + 0x70]
xor r8d, r8d
lea rdx, [rbp + 0x180]
mov rcx, qword [rcx + 0x10]
call fcn.140001210
mov rcx, qword [rbp + 0x180]
movups xmm6, xmmword [rcx]
movups xmm8, xmmword [rcx + 0x10]
movups xmm9, xmmword [rcx + 0x20]
movups xmm7, xmmword [rcx + 0x30]
mov rdx, qword [rbp + 0x190]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400864e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400864e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
jmp 0x1400864f7
xorps xmm6, xmm6
xorps xmm8, xmm8
xorps xmm9, xmm9
xorps xmm7, xmm7
mov qword [rsp + 0x70], 0
movups xmmword [rsp + 0x78], xmm6
movups xmmword [rbp - 0x78], xmm8
movups xmmword [rbp - 0x68], xmm9
movups xmmword [rbp - 0x58], xmm7
unpckhpd xmm7, xmm7
movaps xmm6, xmm7
movsd qword [rbp + 0x178], xmm7
jmp 0x140086531
movsd xmm6, qword [rbp - 0x50]
movsd qword [rbp + 0x178], xmm6
movaps xmm12, xmmword [rsp + 0x70]
movaps xmm13, xmmword [rbp - 0x80]
movaps xmm14, xmmword [rbp - 0x70]
movaps xmm15, xmmword [rbp - 0x60]
cmp qword [0x1401104a0], 0
jne 0x14008656e
mov rdx, qword [0x140110440]
add rdx, 0x3a2b900
mov rcx, qword [rsi + 8]
call fcn.14007cc90
mov qword [0x1401104a0], rax
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140086593
imul rax, rax, 0x64
mov qword [0x140110490], rax
jmp 0x1400865d9
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
mov qword [0x140110490], rax
jmp 0x1400865d9
movsd xmm6, qword [rbp - 0x50]
movsd qword [rbp + 0x178], xmm6
movaps xmm15, xmmword [rbp - 0x60]
movaps xmm14, xmmword [rbp - 0x70]
movaps xmm13, xmmword [rbp - 0x80]
movaps xmm12, xmmword [rsp + 0x70]
cmp byte [0x140110378], 0
jne 0x1400866a5
mov eax, dword [0x14011045c]
add rax, qword [0x140110450]
je 0x14008669e
mov rcx, qword [0x140110480]
test rcx, rcx
je 0x14008669e
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rdx
lea rdx, vtable.std::_Func_impl_no_alloc_class__public:_void___cdecl_process::Roblox::write_double__unsigned_long_long_unsigned___int64___double____ptr64::_2::_lambda_1___void__unsigned_char____ptr64_.0
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rax
movsd xmm0, qword [0x1400d7e90]
movsd qword [rbp - 0x80], xmm0
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
lea r9, [rsp + 0x70]
mov r8b, 1
lea rdx, [rbp + 0x180]
mov rcx, qword [rcx + 0x10]
call fcn.140001210
mov rcx, qword [rbp + 0x180]
test rcx, rcx
je 0x14008669e
mov rdx, qword [rbp + 0x190]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086699
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140086699
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
mov byte [0x140110378], 1
xorps xmm8, xmm8
cmp qword [0x14010a4d8], 0
je 0x140086b12
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov r12, qword [rsp + 0x40]
cmp rax, qword [r12 + 8]
jne 0x140086b17
mov rdi, qword [0x140110148]
lea rcx, [rdi + 0x4828]
movss xmm0, dword [rdi + 0x37e4]
mov dword [rsp + 0x60], 4
movss dword [rsp + 0x64], xmm0
lea rdx, [rsp + 0x60]
call fcn.140049470
mov dword [rdi + 0x37e4], r15d
mov rbx, qword [0x140110148]
lea rcx, [rbx + 0x4828]
movss xmm1, dword [rbx + 0x37d8]
movss xmm0, dword [rbx + 0x37dc]
mov dword [rsp + 0x48], 2
movss dword [rsp + 0x4c], xmm1
movss dword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x48]
call fcn.140049470
mov qword [rbx + 0x37d8], 0
mov rbx, qword [0x140110148]
mov dword [rbp - 0x20], 2
movups xmm0, xmmword [rbx + 0x38cc]
movups xmmword [rbp - 0x1c], xmm0
lea rcx, [rbx + 0x4818]
lea rdx, [rbp - 0x20]
call fcn.140049560
mov qword [rbx + 0x38cc], 0
mov qword [rbx + 0x38d4], 0
mov qword [rdi + 0x3a5c], 0x3f149495
mov dword [rdi + 0x3a64], 0x3f53d3d4
mov dword [rdi + 0x3a68], 0x437f0000
xor edx, edx
mov r8d, 0xc0201
lea rcx, str.Backbuffer
call fcn.14003af10
mov qword [rsp + 0x40], 0
mov r10, qword [0x140110148]
mov r8d, 1
lea rdx, [rsp + 0x40]
mov rcx, qword [r10 + 0x3ed0]
call fcn.14003dc50
movss xmm5, dword [rdi + 0x14]
movss xmm4, dword [rdi + 0x10]
movss dword [rsp + 0x40], xmm4
movss dword [rsp + 0x44], xmm5
lea rdx, [rsp + 0x40]
mov rcx, qword [r10 + 0x3ed0]
call fcn.14003ddc0
cmp byte [r14 + 0x39], 0
je 0x1400869ae
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
mov r8d, 7
lea rdx, str.Players
lea rcx, [rbp - 0x20]
call fcn.140011070
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x120]
lea rcx, [0x14010a4d0]
call fcn.14002b9d0
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.14002b490
nop
mov rbx, qword [rbp + 0x180]
mov rdi, qword [rbp + 0x188]
cmp rbx, rdi
je 0x1400869a2
nop word [rax + rax]
movups xmm6, xmmword [rbx]
movups xmm7, xmmword [rbx + 0x10]
movups xmm8, xmmword [rbx + 0x20]
movups xmm9, xmmword [rbx + 0x30]
movups xmm10, xmmword [rbx + 0x40]
movsd xmm11, qword [rbx + 0x50]
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], r15
mov r8d, 7
lea rdx, str.Players
lea rcx, [rbp]
call fcn.140011070
lea r8, [rbp]
lea rdx, [rbp + 0xc0]
lea rcx, [0x14010a4d0]
call fcn.14002b9d0
lea rdx, [rbp + 0x20]
mov rcx, rax
call fcn.14002bd50
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rcx, xmm0
cmp rcx, qword [rax + 8]
je 0x140086989
movaps xmmword [rbp + 0xc0], xmm6
movaps xmmword [rbp + 0xd0], xmm7
movaps xmmword [rbp + 0xe0], xmm8
movaps xmmword [rbp + 0xf0], xmm9
movaps xmmword [rbp + 0x100], xmm10
movsd qword [rbp + 0x110], xmm11
movaps xmmword [rbp + 0x20], xmm12
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm15
movsd xmm6, qword [rbp + 0x178]
movsd qword [rbp + 0x60], xmm6
mov eax, dword [r14 + 0x510]
mov dword [rsp + 0x30], eax
mov eax, dword [r14 + 0x458]
mov dword [rsp + 0x28], eax
mov eax, dword [r14 + 0x498]
mov dword [rsp + 0x20], eax
mov r9d, dword [r14 + 0x438]
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.1400229c0
jmp 0x140086991
movsd xmm6, qword [rbp + 0x178]
add rbx, 0x58
cmp rbx, rdi
jne 0x140086880
xorps xmm8, xmm8
lea rcx, [rbp + 0x180]
call fcn.14001a7b0
cmp byte [r13 + 0x39], 0
je 0x140086a5d
cmp byte [r13 + 0x3b], 0
je 0x140086a2f
mov ebx, dword [r13 + 0x50]
lea rcx, [rbp + 0x178]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, str.Roblox
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp + 0x178]
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm1, dword [rbp + 0x17c]
cvtdq2ps xmm1, xmm1
movd xmm0, dword [rbp + 0x178]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movaps xmm1, xmmword [0x1400d83c0]
movaps xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x60]
mov edx, ebx
mov rcx, qword [rsp + 0x40]
call fcn.1400284b0
cmp byte [rsi], 0
jne 0x140086a5d
movaps xmmword [rbp + 0x20], xmm12
movaps xmmword [rbp + 0x30], xmm13
movaps xmmword [rbp + 0x40], xmm14
movaps xmmword [rbp + 0x50], xmm15
movsd qword [rbp + 0x60], xmm6
lea r8, [rbp + 0x20]
mov rdx, qword [rbp - 0x38]
mov rcx, r13
call fcn.140018130
mov rcx, qword [0x140110148]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
mov rcx, qword [rax + 0x298]
mov rax, qword [rcx + 0x38]
movss xmm1, dword [rax + 0x28]
movss xmm0, dword [rax + 0x24]
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss xmm2, dword [rax + 0x20]
movss xmm0, dword [rax + 0x1c]
movss dword [rbp + 0x178], xmm0
movss dword [rbp + 0x17c], xmm2
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, [rbp + 0x178]
call fcn.140051f40
call fcn.14003d1c0
mov rbx, qword [0x140110148]
movsxd rax, dword [rbx + 0x4818]
cmp eax, 1
jl 0x140086b06
lea rdx, [rax + rax*4]
mov rcx, qword [rbx + 0x4820]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [rbx + rax*8 + 0x38ac], xmm0
dec dword [rbx + 0x4818]
mov ecx, 2
call fcn.140031e00
jmp 0x140086b1e
mov r12, qword [rsp + 0x40]
mov rbx, qword [0x140110148]
cmp byte [rsi], 0
je 0x140087288
or dword [rbx + 0x47a8], 0x10
movaps xmm0, xmmword [0x1400d85d0]
movups xmmword [rbx + 0x47e4], xmm0
mov qword [rbx + 0x47f8], r15
mov qword [rbx + 0x4800], r15
xor edx, edx
lea r8d, [rdx + 0x61]
lea rcx, str.Dx9ware_v2
call fcn.14003af10
mov rcx, qword [0x140110148]
mov rax, qword [rcx + 0x3ed0]
movss xmm1, dword [rax + 0x28]
subss xmm1, dword [0x1400d8070]
mulss xmm1, dword [0x1400d7e80]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x84]
addss xmm0, xmm1
movss dword [rax + 0x100], xmm0
mov byte [rax + 0x141], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [0x1400d83e0]
movups xmmword [rbp - 0x30], xmm1
mov dword [rsp + 0x40], 0x3f800000
mov dword [rsp + 0x44], 0x3f800000
mov qword [rbp + 0x178], 0
mov dword [rsp + 0x48], 0x42960000
mov dword [rsp + 0x4c], 0x42960000
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
lea r8, [rbp + 0x178]
lea rdx, [rsp + 0x48]
mov rcx, qword [0x1401101b0]
call fcn.140061a10
mov rax, qword [0x140110148]
mov rax, qword [rax + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x140086c44
mov eax, dword [rax + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140062f70
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x4c], 0x40a00000
lea rcx, [rsp + 0x48]
call fcn.140062d40
mov r14, qword [rsi + 0x10]
mov r15, qword [rsi + 0x18]
xor r13d, r13d
cmp r14, r15
je 0x140087098
mov dword [rbp - 0x30], 0x17
mov dword [rsp + 0x60], 0xe
mov dword [rsp + 0x4c], 0x41f00000
movss xmm7, dword [0x1400d805c]
movss xmm6, dword [0x1400d810c]
nop dword [rax]
mov rdi, qword [r14]
mov rcx, qword [0x1401101a8]
call fcn.14003d920
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
test al, al
je 0x140086cc4
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov rbx, qword [0x140110148]
lea rcx, [rbx + 0x4828]
movss xmm1, dword [rbx + 0x3868]
movss xmm0, dword [rbx + 0x386c]
movss dword [rbp - 0x2c], xmm1
movss dword [rbp - 0x28], xmm0
lea rdx, [rbp - 0x30]
call fcn.140049470
mov dword [rbx + 0x3868], 0x3d4ccccd
mov dword [rbx + 0x386c], 0x3f000000
mov rbx, qword [0x140110148]
lea rcx, [rbx + 0x4828]
movss xmm1, dword [rbx + 0x381c]
movss xmm0, dword [rbx + 0x3820]
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rdx, [rsp + 0x60]
call fcn.140049470
mov qword [rbx + 0x381c], r13
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
test al, al
je 0x140086d70
movaps xmm0, xmmword [0x1400d83d0]
movups xmmword [rbp + 0x80], xmm0
lea rsi, [rbp + 0x80]
jmp 0x140086d85
movaps xmm0, xmmword [0x1400d81c0]
movups xmmword [rbp + 0x90], xmm0
lea rsi, [rbp + 0x90]
mov rbx, qword [0x140110148]
mov dword [rbp + 0x180], 0x15
movups xmm0, xmmword [rbx + 0x39fc]
movups xmmword [rbp + 0x184], xmm0
lea rcx, [rbx + 0x4818]
lea rdx, [rbp + 0x180]
call fcn.140049560
movups xmm0, xmmword [rsi]
movups xmmword [rbx + 0x39fc], xmm0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
test al, al
je 0x140086df0
movaps xmm0, xmmword [0x1400d83d0]
movups xmmword [rbp + 0xa0], xmm0
lea rsi, [rbp + 0xa0]
jmp 0x140086e05
movaps xmm0, xmmword [0x1400d81c0]
movups xmmword [rbp + 0xb0], xmm0
lea rsi, [rbp + 0xb0]
mov rbx, qword [0x140110148]
mov dword [rbp + 0x180], 0x16
movups xmm0, xmmword [rbx + 0x3a0c]
movups xmmword [rbp + 0x184], xmm0
lea rcx, [rbx + 0x4818]
lea rdx, [rbp + 0x180]
call fcn.140049560
movups xmm0, xmmword [rsi]
movups xmmword [rbx + 0x3a0c], xmm0
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x10]
test al, al
je 0x140086e60
movaps xmm0, xmmword [0x1400d83d0]
movups xmmword [rbp], xmm0
lea rsi, [rbp]
jmp 0x140086e6f
movaps xmm0, xmmword [0x1400d81c0]
movups xmmword [rbp - 0x20], xmm0
lea rsi, [rbp - 0x20]
mov rbx, qword [0x140110148]
mov dword [rbp + 0x180], 0x17
movups xmm0, xmmword [rbx + 0x3a1c]
movups xmmword [rbp + 0x184], xmm0
lea rcx, [rbx + 0x4818]
lea rdx, [rbp + 0x180]
call fcn.140049560
movups xmm0, xmmword [rsi]
movups xmmword [rbx + 0x3a1c], xmm0
mov rax, qword [0x140110148]
mov rdx, qword [rax + 0x3ed0]
movss xmm0, dword [rdx + 0x250]
cmp qword [rdx + 0x1a8], 0
jne 0x140086ed5
cmp qword [rax + 0x4b10], 0
je 0x140086edd
movss xmm0, dword [rdx + 0x220]
subss xmm0, dword [rdx + 0x100]
subss xmm0, xmm7
movss dword [rsp + 0x48], xmm0
mov rax, qword [rdi]
lea rdx, [rbp + 0x180]
mov rcx, rdi
call qword [rax + 8]
nop
cmp qword [rax + 0x18], 0x10
jb 0x140086f0a
mov rax, qword [rax]
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140060a50
movzx esi, al
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140086f5b
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086f56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140087256
call fcn.1400a4a0c
movaps xmm1, xmm6
movaps xmm0, xmm8
call fcn.140040b90
mov rdx, qword [0x140110148]
mov rcx, qword [rdx + 0x3ed0]
movss xmm0, dword [rcx + 0x250]
cmp qword [rcx + 0x1a8], 0
jne 0x140086f91
cmp qword [rdx + 0x4b10], 0
je 0x140086f99
movss xmm0, dword [rcx + 0x220]
subss xmm0, dword [rcx + 0x100]
movss dword [rsp + 0x40], xmm0
mov dword [rsp + 0x44], 0x41f00000
lea rdx, [rsp + 0x40]
lea rcx, [0x1400b5e8c]
call fcn.140060a50
movzx ebx, al
mov ecx, 2
call fcn.140031e00
mov r9d, 3
mov r8, qword [0x140110148]
mov ecx, dword [r8 + 0x4818]
cmp ecx, r9d
jge 0x140086ff0
mov r9d, ecx
test ecx, ecx
jle 0x14008702a
nop dword [rax]
movsxd rax, ecx
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4820]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x38ac], xmm0
dec dword [r8 + 0x4818]
mov ecx, dword [r8 + 0x4818]
dec r9d
test r9d, r9d
jg 0x140086ff0
test sil, sil
jne 0x140087033
test bl, bl
je 0x140087047
mov rbx, qword [rdi]
mov rcx, rdi
call qword [rbx + 0x10]
test al, al
sete dl
mov rcx, rdi
call qword [rbx + 0x18]
call fcn.14003d9c0
mov rcx, qword [0x140110148]
mov rax, qword [rcx + 0x3ed0]
mov byte [rax + 0xb8], 1
mov rax, qword [rcx + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x14008708b
mov qword [rbp + 0x178], 0
movaps xmm1, xmm6
lea rcx, [rbp + 0x178]
call fcn.140040870
add r14, 8
cmp r14, r15
jne 0x140086ca0
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x4c], 0x40a00000
lea rcx, [rsp + 0x48]
call fcn.140062d40
mov rax, qword [0x140110148]
mov rax, qword [rax + 0x3ed0]
cmp byte [rax + 0xbb], 0
jne 0x1400870db
mov eax, dword [rax + 0x1b4]
neg eax
sbb ecx, ecx
add ecx, 6
call fcn.140062f70
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x4c], 0x40a00000
lea rcx, [rsp + 0x48]
call fcn.140062d40
mov rcx, qword [0x1401101a8]
call fcn.14003d920
mov rax, qword [0x140110148]
mov rdx, qword [rax + 0x3ed0]
movss xmm0, dword [rdx + 0x250]
cmp qword [rdx + 0x1a8], 0
jne 0x14008712b
cmp qword [rax + 0x4b10], 0
je 0x140087133
movss xmm0, dword [rdx + 0x220]
subss xmm0, dword [rdx + 0x100]
movss dword [rsp + 0x48], xmm0
mov dword [rsp + 0x4c], 0x41f00000
lea rdx, [rsp + 0x48]
lea rcx, str.Rescan
call fcn.140060a50
test al, al
je 0x140087262
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x1a8]
call fcn.1400013d0
movups xmm0, xmmword [rax]
movaps xmmword [0x14010a4d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [0x14010a4e0], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [0x14010a4f0], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [0x14010a500], xmm1
movups xmm0, xmmword [rax + 0x40]
movaps xmmword [0x14010a510], xmm0
movsd xmm1, qword [rax + 0x50]
movsd qword [0x14010a520], xmm1
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140087262
mov rax, qword [rbp - 0x40]
test rax, rax
je 0x140087262
xorps xmm0, xmm0
xor edx, edx
movups xmmword [rbp + 0x1a8], xmm0
mov qword [rbp + 0x1b8], rdx
lea rdx, vtable.std::_Func_impl_no_alloc_class__public:_struct_engine::matrix_16___cdecl_process::Roblox::read_struct_engine::matrix_16__unsigned_long_long_unsigned___int64_____ptr64::_2::_lambda_1___void__unsigned_char____ptr64_.0
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rcx
lea rcx, [rsp + 0x70]
mov qword [rbp - 0x58], rcx
lea r9, [rsp + 0x70]
xor r8d, r8d
lea rdx, [rbp + 0x1a8]
mov rcx, qword [rax + 0x10]
call fcn.140001210
mov rcx, qword [rbp + 0x1a8]
test rcx, rcx
je 0x140087262
mov rdx, qword [rbp + 0x1b8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008725d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008725d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a4a0c
call fcn.14003d9c0
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x5c], 0x40000000
lea rcx, [rsp + 0x58]
call fcn.140062d40
call fcn.14003d1c0
jmp 0x14008728b
xor r13d, r13d
mov rbx, qword [rbp - 0x38]
mov ecx, dword [rbx + 0xf4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
mov byte [0x140110139], al
mov ecx, dword [rbx + 0xf0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
and al, 1
mov byte [0x140110138], al
call fcn.1400378e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
mov rcx, qword [r12 + 0x18]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [r12 + 0x28]
lea edx, [r9 + 1]
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [r12 + 0x18]
mov rax, qword [rcx]
lea r8, [rbp + 0x200]
mov rdx, qword [r12 + 0x28]
call qword [rax + 0x190]
mov rax, qword [0x140110148]
mov rcx, qword [rax + 0x48a8]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, r13
call fcn.14005aab0
mov rcx, qword [r12 + 0x20]
mov rax, qword [rcx]
xor r8d, r8d
xor edx, edx
call qword [rax + 0x40]
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1400a49b0
lea r11, [rsp + 0x3c0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400020b0
mov r8, rax
lea rcx, [rbp + 0x1a8]
call fcn.14002a8e0
lea rdx, [0x1400e9be8]
lea rcx, [rbp + 0x1a8]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
call fcn.1400020b0
mov r8, rax
lea rcx, [rbp + 0x180]
call fcn.14002a8e0
lea rdx, [0x1400e9be8]
lea rcx, [rbp + 0x180]
call sub.VCRUNTIME140.dll__CxxThrowException
int3