Function at 0x18004fa80
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
push rdi
push r13
lea rbp, [r11 - 0x5f]
sub rsp, 0x100
movaps xmmword [r11 - 0x48], xmm7
movaps xmmword [r11 - 0x58], xmm8
movaps xmmword [r11 - 0x98], xmm13
mov rax, qword [0x1800e7f40]
xor rax, rsp
mov qword [rbp - 0x49], rax
mov eax, dword [0x18013d2bc]
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], r12
mov qword [r11 - 0x20], r14
mov qword [r11 - 0x28], r15
test eax, eax
jne 0x18004fad6
xor edi, edi
mov dword [0x18013ca78], edi
jmp 0x18004fb36
cmp eax, 1
jne 0x18004fae8
mov edi, 7
mov dword [0x18013ca78], edi
jmp 0x18004fb36
cmp eax, 2
jne 0x18004fafa
mov edi, 6
mov dword [0x18013ca78], edi
jmp 0x18004fb36
cmp eax, 3
jne 0x18004fb0c
mov edi, 5
mov dword [0x18013ca78], edi
jmp 0x18004fb36
cmp eax, 4
jne 0x18004fb1e
mov edi, 3
mov dword [0x18013ca78], edi
jmp 0x18004fb36
cmp eax, 5
jne 0x18004fb30
mov edi, 4
mov dword [0x18013ca78], edi
jmp 0x18004fb36
mov edi, dword [0x18013ca78]
mov rdx, qword [0x18013d2e0]
lea r8, [rbp - 0x59]
mov rcx, qword [0x18013d2f0]
xor r13d, r13d
movss xmm7, dword [0x1800b2e64]
add rdx, 0x18
mov qword [rsp + 0x20], r13
lea r9d, [r13 + 8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x59]
lea r9d, [r13 + 8]
mov rcx, qword [0x18013d2f0]
lea r8, [rbp - 0x51]
add rdx, 0x100
mov qword [rsp + 0x20], r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r12, qword [rbp - 0x51]
lea rsi, [0x18013ba10]
movss xmm8, dword [0x1800b2e08]
mov r14, r12
movsd xmm13, qword [0x1800b2d00]
mov r15d, 0x100
mov qword [rsp + 0x120], rbx
movaps xmmword [rsp + 0xe0], xmm6
test r12, r12
je 0x18004fcf4
mov rcx, qword [0x18013d2f0]
lea r8, [rbp - 0x69]
mov r9d, 8
mov qword [rsp + 0x20], 0
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x69]
lea r8, [rbp - 0x71]
mov rcx, qword [0x18013d2f0]
mov r9d, 4
mov qword [rsp + 0x20], 0
lea rdx, [rbx + 0x10b8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test rbx, rbx
je 0x18004fcf4
cmp byte [0x18013d2ee], 0
jne 0x18004fc3d
mov eax, dword [rbp - 0x71]
and eax, 0x1fc000
cmp eax, 0x8000
jne 0x18004fcf4
cmp rbx, qword [0x18013c240]
je 0x18004fcf4
cmp qword [rsi], rbx
je 0x18004fcf4
mov r8d, edi
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.18004d860
mov rcx, qword [0x18013d2f0]
lea rdx, [rbx + 0x280]
mov r9d, 4
mov qword [rsp + 0x20], 0
lea r8, [rbp - 0x6d]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
comiss xmm8, dword [rbp - 0x6d]
jae 0x18004fcf4
lea rcx, [rbp - 0x79]
call fcn.18004c8f0
movss xmm0, dword [rbp - 0x75]
movaps xmm1, xmm13
subss xmm0, dword [rsp + 0x34]
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movss xmm1, dword [rbp - 0x79]
movaps xmm6, xmm0
subss xmm1, dword [rsp + 0x30]
cvtps2pd xmm0, xmm1
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm6
ucomiss xmm1, xmm0
ja 0x18004fce4
sqrtss xmm0, xmm0
jmp 0x18004fce9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm7, xmm0
jbe 0x18004fcf4
movaps xmm7, xmm0
mov r13, rbx
add r14, 0x10
add rsi, 8
sub r15, 1
jne 0x18004fbc1
mov edx, dword [0x18013ca78]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov r15, qword [rsp + 0xf0]
mov r14, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x128]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x180056930]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
test r13, r13
je 0x18005004c
mov r8d, dword [0x18013ca78]
lea rcx, [rsp + 0x30]
movaps xmmword [rsp + 0xb0], xmm9
mov rdx, r13
movaps xmmword [rsp + 0xa0], xmm10
movaps xmmword [rsp + 0x90], xmm11
call fcn.18004d860
cmp byte [0x18013d2ed], 0
movss xmm0, dword [0x1801327b8]
cvtps2pd xmm0, xmm0
je 0x18004fd9f
addsd xmm0, qword [0x1800b2cb0]
jmp 0x18004fda7
addsd xmm0, qword [0x1800b2ce0]
xor ecx, ecx
cvtpd2ps xmm11, xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
mov ecx, 1
sub eax, edx
sar eax, 1
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm10, dword [rsp + 0x34]
cdq
sub eax, edx
sar eax, 1
cvtps2pd xmm0, xmm10
mov edi, eax
movd xmm1, eax
cvtdq2pd xmm1, xmm1
subsd xmm0, xmm1
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movss xmm9, dword [rsp + 0x30]
movaps xmm6, xmm0
movd xmm1, ebx
cvtdq2pd xmm1, xmm1
cvtps2pd xmm0, xmm9
subsd xmm0, xmm1
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm6
ucomiss xmm1, xmm0
ja 0x18004fe2c
xorps xmm6, xmm6
sqrtss xmm6, xmm0
jmp 0x18004fe34
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
movss xmm4, dword [0x1800b3390]
xorps xmm2, xmm2
ucomiss xmm9, xmm2
xorps xmm8, xmm8
xorps xmm7, xmm7
jp 0x18004fe4e
je 0x18004feaa
movd xmm3, ebx
cvtdq2ps xmm3, xmm3
comiss xmm9, xmm3
jbe 0x18004fe88
movaps xmm8, xmm3
lea eax, [rbx + rbx]
subss xmm8, xmm9
movd xmm0, eax
movaps xmm1, xmm3
cvtdq2ps xmm0, xmm0
xorps xmm8, xmm4
divss xmm8, xmm11
addss xmm1, xmm8
comiss xmm1, xmm0
jbe 0x18004fe88
xorps xmm8, xmm8
comiss xmm3, xmm9
jbe 0x18004feaa
movaps xmm8, xmm9
subss xmm8, xmm3
divss xmm8, xmm11
addss xmm3, xmm8
comiss xmm2, xmm3
jbe 0x18004feaa
xorps xmm8, xmm8
ucomiss xmm10, xmm2
jp 0x18004feb2
je 0x18004ff07
movd xmm3, edi
cvtdq2ps xmm3, xmm3
comiss xmm10, xmm3
jbe 0x18004fee8
movaps xmm7, xmm3
lea eax, [rdi + rdi]
subss xmm7, xmm10
movd xmm0, eax
movaps xmm1, xmm3
cvtdq2ps xmm0, xmm0
xorps xmm7, xmm4
divss xmm7, xmm11
addss xmm1, xmm7
comiss xmm1, xmm0
jbe 0x18004fee8
xorps xmm7, xmm7
comiss xmm3, xmm10
jbe 0x18004ff07
movaps xmm7, xmm10
subss xmm7, xmm3
divss xmm7, xmm11
addss xmm3, xmm7
comiss xmm2, xmm3
jbe 0x18004ff07
xorps xmm7, xmm7
mov rcx, qword [0x18013d2f0]
lea rdx, [r13 + 0x90]
xor ebx, ebx
lea r8, [rsp + 0x30]
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x18013c240]
lea r9d, [rbx + 0xc]
mov rcx, qword [0x18013d2f0]
lea r8, [rbp - 0x69]
movss xmm9, dword [rsp + 0x30]
add rdx, 0x90
movss xmm10, dword [rsp + 0x34]
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [0x18010dc28]
xorps xmm1, xmm1
movaps xmm11, xmmword [rsp + 0x90]
cvtps2pd xmm0, xmm0
cvtss2sd xmm1, xmm6
addsd xmm0, qword [0x1800b2cb0]
comisd xmm0, xmm1
jb 0x18005003a
movss xmm0, dword [rbp - 0x65]
movaps xmm1, xmm13
movss xmm2, dword [rbp - 0x69]
subss xmm0, xmm10
subss xmm2, xmm9
cvtps2pd xmm6, xmm0
cvtps2pd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm9, xmm0
movaps xmm1, xmm13
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm9, xmm0
movaps xmm1, xmm13
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm9, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm9
ja 0x18004ffeb
xorps xmm0, xmm0
sqrtsd xmm0, xmm9
jmp 0x18004fff4
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movss xmm1, dword [0x18010dc24]
mulsd xmm0, qword [0x1800b2cc8]
cvtps2pd xmm1, xmm1
comisd xmm1, xmm0
jb 0x18005003a
mov ecx, dword [0x18013ba04]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x18005003a
xor r9d, r9d
mov qword [rsp + 0x20], rbx
cvttss2si r8, xmm7
lea ecx, [r9 + 1]
cvttss2si rdx, xmm8
call qword [sym.imp.USER32.dll_mouse_event]
movaps xmm9, xmmword [rsp + 0xb0]
movaps xmm10, xmmword [rsp + 0xa0]
movaps xmm6, xmmword [rsp + 0xe0]
mov rbx, qword [rsp + 0x120]
mov rcx, qword [rbp - 0x49]
xor rcx, rsp
call fcn.18008cf00
lea r11, [rsp + 0x100]
movaps xmm7, xmmword [r11 - 0x30]
movaps xmm8, xmmword [r11 - 0x40]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r13
pop rdi
pop rbp
ret