Function at 0x140007b30
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14016c040]
xor rax, rsp
mov qword [rbp + 0x17], rax
xor r13d, r13d
mov r12d, r13d
mov dword [rbp - 0x11], r13d
mov qword [rbp - 0x11], 5
lea rcx, [rbp - 0x11]
call fcn.140007600
mov r15d, 4
movss xmm6, dword [0x1401533e0]
nop
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov eax, dword [r15 + rdi]
cmp dword [0x140174b0c], eax
jle 0x140007bee
lea rcx, [0x140174b0c]
call fcn.1400c4858
cmp dword [0x140174b0c], 0xffffffff
jne 0x140007bee
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140174b50], xmm0
mov qword [0x140174b60], rax
call fcn.14004fc00
lea rcx, [0x1400cfef0]
call fcn.1400c4b34
nop
lea rcx, [0x140174b0c]
call fcn.1400c47ec
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r13
mov qword [rbp - 0x61], r13
mov r8d, 0xa
lea rdx, str.TriggerBot
lea rcx, [rbp - 0x79]
call fcn.140003d60
lea rdx, [rbp - 0x79]
lea rcx, [0x140174b50]
call fcn.14004fee0
cmp byte [rax + 0x48], 0
je 0x1400081eb
mov eax, dword [r15 + rdi]
cmp dword [0x140174b08], eax
jle 0x140007c78
lea rcx, [0x140174b08]
call fcn.1400c4858
cmp dword [0x140174b08], 0xffffffff
jne 0x140007c78
xorps xmm0, xmm0
movdqu xmmword [0x140174b30], xmm0
mov qword [0x140174b40], r13
lea rcx, [0x1400cfe80]
call fcn.1400c4b34
lea rcx, [0x140174b08]
call fcn.1400c47ec
lea rax, [rbp - 0x59]
mov qword [rsp + 0x30], rax
lea rdx, [rbp - 0x59]
lea rcx, [0x14016c208]
call fcn.140007a80
or r12d, 1
lea rdx, [rbp - 0x39]
lea rcx, [0x14016c1dc]
call fcn.140003740
or r12d, 2
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x39]
lea rcx, [0x140174b30]
call fcn.1400167c0
cmp dword [rax + 8], 1
jne 0x140007d60
mov eax, dword [r15 + rdi]
cmp dword [0x140174b0c], eax
jle 0x140007d19
lea rcx, [0x140174b0c]
call fcn.1400c4858
cmp dword [0x140174b0c], 0xffffffff
jne 0x140007d19
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140174b50], xmm0
mov qword [0x140174b60], rax
call fcn.14004fc00
lea rcx, [0x1400cfef0]
call fcn.1400c4b34
nop
lea rcx, [0x140174b0c]
call fcn.1400c47ec
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r13
mov qword [rbp - 0x61], r13
mov r8d, 0xa
lea rdx, str.TriggerBot
lea rcx, [rbp - 0x79]
call fcn.140003d60
lea rdx, [rbp - 0x79]
lea rcx, [0x140174b50]
call fcn.14004fee0
mov ecx, dword [rax + 0x4c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140007b90
mov eax, dword [r15 + rdi]
cmp dword [0x140174b48], eax
jle 0x140007d9e
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140007d9e
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp - 1]
mov rdx, qword [0x140174f58]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp - 1]
mov eax, dword [r15 + rdi]
cmp dword [0x140174b48], eax
jle 0x140007e03
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140007e03
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f58]
add rdx, 0x34
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp - 0x19]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx ebx, byte [rbp - 0x19]
test rsi, rsi
je 0x1400081ba
mov eax, dword [r15 + rdi]
cmp dword [0x140174b48], eax
jle 0x140007e75
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140007e75
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
lea rdx, [rsi + 0x280]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 9]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 9]
comiss xmm0, xmm6
jb 0x1400081ba
cmp bl, 1
jne 0x1400081ba
call fcn.1400070a0
mov rbx, rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x38], rax
lea rdx, [rbp - 0x39]
lea rcx, [0x14016c1f8]
call fcn.140007a80
nop
lea rdx, [rbp - 0x59]
lea rcx, [0x14016c1e8]
call fcn.140003b60
or r12d, 0xc
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x59]
mov rcx, rbx
call fcn.1400167c0
cmp byte [rax + 4], 0
je 0x140008188
mov eax, dword [r15 + rdi]
cmp dword [0x140174b48], eax
jle 0x140007f3d
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140007f3d
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
mov rdx, qword [0x140174f70]
add rdx, 0x48
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 7]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 7]
mov eax, dword [r15 + rdi]
cmp dword [0x140174b48], eax
jle 0x140007fa6
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140007fa6
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
lea rdx, [rbx + 0xec]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 5]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r14d, dword [rbp - 5]
mov eax, dword [r15 + rdi]
cmp dword [0x140174b48], eax
jle 0x14000800b
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x14000800b
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
lea rdx, [rbx + 0x125]
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp - 0x18]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx r15d, byte [rbp - 0x18]
mov eax, 4
mov eax, dword [rax + rdi]
cmp dword [0x140174b48], eax
jle 0x140008075
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140008075
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
lea rdx, [rsi + 0x48]
mov qword [rsp + 0x20], r13
mov r9d, 8
lea r8, [rbp + 0xf]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp + 0xf]
mov eax, 4
mov eax, dword [rax + rdi]
cmp dword [0x140174b48], eax
jle 0x1400080db
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x1400080db
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
lea rdx, [rbx + 0xec]
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x11]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [rbp - 0x11]
mov eax, 4
mov eax, dword [rax + rdi]
cmp dword [0x140174b48], eax
jle 0x140008143
lea rcx, [0x140174b48]
call fcn.1400c4858
cmp dword [0x140174b48], 0xffffffff
jne 0x140008143
mov ecx, 1
call fcn.1400c48d0
mov qword [0x140174a00], rax
lea rcx, [0x140174b48]
call fcn.1400c47ec
lea rdx, [rbx + 0x125]
mov qword [rsp + 0x20], r13
mov r9d, 1
lea r8, [rbp - 0x17]
mov rcx, qword [0x140174f88]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test r14d, r14d
je 0x140008182
cmp r14d, esi
jne 0x140008182
cmp r15b, byte [rbp - 0x17]
mov r15d, 4
je 0x140007b90
jmp 0x140008188
mov r15d, 4
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 2
call qword [sym.imp.USER32.dll_mouse_event]
mov byte [0x140174b6c], 1
mov qword [rsp + 0x30], 1
lea rcx, [rsp + 0x30]
call fcn.140007690
cmp byte [0x140174b6c], 0
je 0x140007b90
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 4
call qword [sym.imp.USER32.dll_mouse_event]
mov byte [0x140174b6c], 0
jmp 0x140007b90
mov qword [rsp + 0x30], 5
lea rcx, [rsp + 0x30]
call fcn.140007600
jmp 0x140007b90