Function at 0x1400113ed
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x1400167c0
push rbp
push rsi
push rdi
sub rsp, 0xa60
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x1cc
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140024040]
xor rax, rbp
mov qword [rbp + 0xa28], rax
lea rcx, [0x14002b117]
call fcn.1400115b4
cmp qword [0x1400248e8], 0
jne 0x14001682b
lea rdx, str.Apex_Legends
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1400248e8], rax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400167fe
cmp dword [0x140024904], 0
jne 0x140016894
lea rax, [rbp + 0x5f8]
mov qword [rbp + 0x628], rax
lea rdx, str.r5apex.exe
mov rcx, qword [rbp + 0x628]
call fcn.140011244
lea rcx, [rbp + 0x950]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0x950]
call fcn.140011177
mov dword [0x140024904], eax
lea rcx, str.____Driver_Loader_n____Status_Apex:Detected_n____Contact_Rakuza7789
call fcn.14001129e
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14001682b
cmp qword [0x1400248f8], 0
jne 0x1400168c4
lea rdx, str.r5apex.exe
mov ecx, dword [0x140024904]
call fcn.140014fd0
mov qword [0x1400248f8], rax
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140016894
xor eax, eax
cmp eax, 1
je 0x140017070
mov rax, qword [0x1400248f8]
add rax, 0x73f1978
mov rcx, rax
call fcn.1400114ab
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
add rax, 0x11a350
mov rcx, rax
call fcn.1400114ab
mov qword [rbp + 0x28], rax
mov rdx, qword [rbp + 0x28]
lea rcx, [rbp + 0x648]
call fcn.140011497
lea rcx, [rbp + 0x50]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
mov rax, qword [0x1400248f8]
add rax, 0x21830f8
mov rcx, rax
call fcn.1400114ab
mov qword [rbp + 0xa8], rax
mov dword [rbp + 0xc4], 0x270f
mov dword [rbp + 0xe4], 0x270f
mov dword [rbp + 0x104], 0
jmp 0x140016969
mov eax, dword [rbp + 0x104]
inc eax
mov dword [rbp + 0x104], eax
cmp dword [rbp + 0x104], 0x40
jge 0x140016f92
mov rdx, qword [0x1400248f8]
mov ecx, dword [rbp + 0x104]
call fcn.140011168
mov qword [rbp + 0x128], rax
cmp qword [rbp + 0x128], 0
jne 0x14001699b
jmp 0x14001695b
mov rax, qword [rbp + 0x128]
add rax, 0x38
mov rcx, rax
call fcn.1400114ab
mov qword [rbp + 0x148], rax
mov rdx, qword [rbp + 0x148]
lea rcx, [rbp + 0x168]
call fcn.1400113fc
nop
lea rcx, [rbp + 0x168]
call fcn.140011087
mov qword [rbp + 0x1a8], rax
lea rdx, str.player
mov rcx, qword [rbp + 0x1a8]
call fcn.14001164f
test eax, eax
je 0x140016f81
mov rdx, qword [rbp + 0x128]
lea rcx, [rbp + 0x6d8]
call fcn.140011037
lea rcx, [rbp + 0x6a8]
mov rdi, rcx
mov rsi, rax
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x980]
lea rcx, [rbp + 0x6a8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea r9, [rbp + 0x980]
mov r8d, 8
mov rdx, qword [rbp + 0x128]
lea rcx, [rbp + 0x708]
call fcn.140011104
lea rcx, [rbp + 0x1c8]
mov rdi, rcx
mov rsi, rax
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x9e0]
lea rcx, [rbp + 0x50]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x40
rep movsb byte [rdi], byte [rsi]
lea rax, [rbp + 0x9b0]
lea rcx, [rbp + 0x1c8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
lea r8, [rbp + 0x9e0]
lea rdx, [rbp + 0x9b0]
lea rcx, [rbp + 0x738]
call fcn.140011631
lea rcx, [rbp + 0x1f8]
mov rdi, rcx
mov rsi, rax
mov ecx, 0xc
rep movsb byte [rdi], byte [rsi]
cvttss2si eax, dword [rbp + 0x1f8]
mov dword [rbp + 0x224], eax
cvttss2si eax, dword [rbp + 0x1fc]
mov dword [rbp + 0x244], eax
mov rax, qword [rbp + 0x128]
add rax, 0x1990
mov rcx, rax
call fcn.140011541
movss dword [0x1400244f8], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x26e0
mov rcx, rax
call fcn.1400113e8
mov dword [rbp + 0x264], eax
mov rax, qword [rbp + 0xa8]
add rax, 0x328
mov rcx, rax
call fcn.1400113e8
mov dword [rbp + 0x284], eax
mov rax, qword [rbp + 0x128]
add rax, 0x328
mov rcx, rax
call fcn.1400113e8
mov dword [rbp + 0x2a4], eax
mov eax, dword [rbp + 0x284]
cmp dword [rbp + 0x2a4], eax
je 0x140016f81
mov dword [rbp + 0x764], 1
mov rax, qword [rbp + 0x128]
add rax, 0x26c
lea rdx, [rbp + 0x764]
mov rcx, rax
call fcn.140011528
mov dword [rbp + 0x784], 2
mov rax, qword [rbp + 0x128]
add rax, 0x26c
lea rdx, [rbp + 0x784]
mov rcx, rax
call fcn.140011528
mov byte [rbp + 0x7a4], 0x65
mov byte [rbp + 0x7a5], 0x65
mov byte [rbp + 0x7a6], 0x2e
mov byte [rbp + 0x7a7], 0x5a
mov rax, qword [rbp + 0x128]
add rax, 0x34
lea rdx, [rbp + 0x7a4]
mov rcx, rax
call fcn.14001153c
movsxd rax, dword [rbp + 0x104]
lea rcx, [0x140024500]
movss xmm0, dword [0x1400244f8]
ucomiss xmm0, dword [rcx + rax*4]
jp 0x140016c0e
je 0x140016e25
movsxd rax, dword [rbp + 0x104]
lea rcx, [0x140024690]
mov dword [rcx + rax*4], 0
cmp dword [rbp + 0x264], 0
jne 0x140016d81
xorps xmm0, xmm0
movss dword [rbp + 0x7c4], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d0
lea rdx, [rbp + 0x7c4]
mov rcx, rax
call fcn.140011140
movss xmm0, dword [0x140020c9c]
movss dword [rbp + 0x7e4], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d4
lea rdx, [rbp + 0x7e4]
mov rcx, rax
call fcn.140011140
xorps xmm0, xmm0
movss dword [rbp + 0x804], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d8
lea rdx, [rbp + 0x804]
mov rcx, rax
call fcn.140011140
mov eax, dword [rbp + 0x224]
mov ecx, dword [0x140024820]
sub ecx, eax
mov eax, ecx
mov ecx, eax
call fcn.140011569
mov dword [rbp + 0xa24], eax
mov ecx, dword [rbp + 0xc4]
mov edx, dword [0x140024820]
sub edx, ecx
mov ecx, edx
call fcn.140011569
mov ecx, dword [rbp + 0xa24]
cmp ecx, eax
jge 0x140016d7c
mov eax, dword [rbp + 0x224]
mov ecx, dword [0x140024820]
sub ecx, eax
mov eax, ecx
mov ecx, eax
call fcn.140011569
cmp eax, dword [0x140024008]
jge 0x140016d7c
mov eax, dword [rbp + 0x244]
mov ecx, dword [0x140024824]
sub ecx, eax
mov eax, ecx
mov ecx, eax
call fcn.140011569
mov dword [rbp + 0xa24], eax
mov ecx, dword [rbp + 0xe4]
mov edx, dword [0x140024824]
sub edx, ecx
mov ecx, edx
call fcn.140011569
mov ecx, dword [rbp + 0xa24]
cmp ecx, eax
jge 0x140016d7c
mov eax, dword [rbp + 0x244]
mov ecx, dword [0x140024824]
sub ecx, eax
mov eax, ecx
mov ecx, eax
call fcn.140011569
cmp eax, dword [0x14002400c]
jge 0x140016d7c
mov eax, dword [rbp + 0x224]
mov dword [rbp + 0xc4], eax
mov eax, dword [rbp + 0x244]
mov dword [rbp + 0xe4], eax
jmp 0x140016e05
movss xmm0, dword [0x140020c98]
movss dword [rbp + 0x824], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d0
lea rdx, [rbp + 0x824]
mov rcx, rax
call fcn.140011140
movss xmm0, dword [0x140020c98]
movss dword [rbp + 0x844], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d4
lea rdx, [rbp + 0x844]
mov rcx, rax
call fcn.140011140
movss xmm0, dword [0x140020c98]
movss dword [rbp + 0x864], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d8
lea rdx, [rbp + 0x864]
mov rcx, rax
call fcn.140011140
movsxd rax, dword [rbp + 0x104]
lea rcx, [0x140024500]
movss xmm0, dword [0x1400244f8]
movss dword [rcx + rax*4], xmm0
jmp 0x140016f49
movsxd rax, dword [rbp + 0x104]
lea rcx, [0x140024690]
cmp dword [rcx + rax*4], 0
jg 0x140016f49
cmp dword [rbp + 0x264], 0
jne 0x140016ec5
movss xmm0, dword [0x140020c9c]
movss dword [rbp + 0x884], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d0
lea rdx, [rbp + 0x884]
mov rcx, rax
call fcn.140011140
xorps xmm0, xmm0
movss dword [rbp + 0x8a4], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d4
lea rdx, [rbp + 0x8a4]
mov rcx, rax
call fcn.140011140
xorps xmm0, xmm0
movss dword [rbp + 0x8c4], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d8
lea rdx, [rbp + 0x8c4]
mov rcx, rax
call fcn.140011140
jmp 0x140016f49
movss xmm0, dword [0x140020c98]
movss dword [rbp + 0x8e4], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d0
lea rdx, [rbp + 0x8e4]
mov rcx, rax
call fcn.140011140
movss xmm0, dword [0x140020c98]
movss dword [rbp + 0x904], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d4
lea rdx, [rbp + 0x904]
mov rcx, rax
call fcn.140011140
movss xmm0, dword [0x140020c98]
movss dword [rbp + 0x924], xmm0
mov rax, qword [rbp + 0x128]
add rax, 0x1d8
lea rdx, [rbp + 0x924]
mov rcx, rax
call fcn.140011140
movsxd rax, dword [rbp + 0x104]
lea rcx, [0x140024690]
cmp dword [rcx + rax*4], 0
jl 0x140016f81
movsxd rax, dword [rbp + 0x104]
lea rcx, [0x140024690]
mov eax, dword [rcx + rax*4]
dec eax
movsxd rcx, dword [rbp + 0x104]
lea rdx, [0x140024690]
mov dword [rdx + rcx*4], eax
lea rcx, [rbp + 0x168]
call fcn.140011109
jmp 0x14001695b
cmp dword [rbp + 0xc4], 0x270f
je 0x14001706b
cmp dword [rbp + 0xe4], 0x270f
je 0x14001706b
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
jne 0x140016fd6
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
test eax, eax
je 0x14001706b
mov dword [rbp + 0x2c8], 0x18
lea rax, [rbp + 0x2cc]
mov rdi, rax
xor eax, eax
mov ecx, 0x14
rep stosb byte [rdi], al
lea rcx, [rbp + 0x2c8]
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x14001706b
cmp dword [rbp + 0x2cc], 0
jne 0x14001702a
mov eax, dword [0x140024820]
mov ecx, dword [rbp + 0xc4]
sub ecx, eax
mov eax, ecx
cdq
idiv dword [0x140024010]
mov dword [0x1400244f0], eax
mov eax, dword [0x140024824]
mov ecx, dword [rbp + 0xe4]
sub ecx, eax
mov eax, ecx
cdq
idiv dword [0x140024010]
mov dword [0x1400244f4], eax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, dword [0x1400244f4]
mov edx, dword [0x1400244f0]
mov ecx, 1
call qword [sym.imp.USER32.dll_mouse_event]
jmp 0x1400168c4
lea rcx, [rbp - 0x30]
lea rdx, [0x1400205c0]
call fcn.1400114d8
mov rcx, qword [rbp + 0xa28]
xor rcx, rbp
call fcn.1400112c1
lea rsp, [rbp + 0xa30]
pop rdi
pop rsi
pop rbp
ret