Function at 0x140095220
Capabilities:
Check for unmoving mouse cursor
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x158]
sub rsp, 0x250
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
mov rax, qword [0x1400c4040]
xor rax, rsp
mov qword [rbp + 0xb0], rax
mov rbx, rcx
lea rcx, [rbp + 0x28]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0x41]
mov dword [rsp + 0x40], 0x626f5256
xor ecx, ecx
mov dword [rsp + 0x44], 0x786f6c
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp + 0x28]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [0x1400c51d8]
xor edi, edi
mov rax, qword [0x1400c5538]
mov dword [rbp - 0x3f], edi
mov word [rbp - 0x3b], di
mov byte [rbp - 0x39], dil
mov dword [rbp - 0x60], 0x12b2d92
lea rcx, [rax + 0x760]
mov qword [rbp - 0x58], rcx
lea rcx, [rbp + 0x60]
mov qword [rbp - 0x50], rcx
mov rcx, qword [0x1400c51d0]
mov qword [rbp - 0x48], 8
mov dword [rbp - 0x5c], edx
mov byte [rbp - 0x40], dil
test edx, edx
je 0x140095323
test rcx, rcx
je 0x140095323
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x1400c5538]
mov edx, dword [0x1400c51d8]
mov rcx, qword [0x1400c51d0]
add rax, 0x4f0
mov dword [rbp - 0xf], edi
mov qword [rbp - 0x28], rax
lea rax, [rbp + 0x70]
mov qword [rbp - 0x20], rax
mov word [rbp - 0xb], di
mov byte [rbp - 9], dil
mov dword [rbp - 0x30], 0x12b2d92
mov qword [rbp - 0x18], 0x40
mov dword [rbp - 0x2c], edx
mov byte [rbp - 0x10], dil
test edx, edx
je 0x14009538f
test rcx, rcx
je 0x14009538f
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x30]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
add rbx, 0x158
mov rdx, rbx
call fcn.14008d2e0
lea rdx, [rbp + 0x30]
lea r8, [rax + 0x140]
call fcn.14008d550
mov rax, qword [0x1400c5578]
add rax, 0x110
mov dword [rbp - 0x3f], edi
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x70]
mov qword [rbp - 0x50], rax
mov eax, dword [0x1400c51d8]
mov word [rbp - 0x3b], di
mov byte [rbp - 0x39], dil
mov dword [rbp - 0x60], 0x12b2d92
mov qword [rbp - 0x48], 8
mov dword [rbp - 0x5c], eax
mov byte [rbp - 0x40], dil
test eax, eax
je 0x14009542e
mov rcx, qword [0x1400c51d0]
test rcx, rcx
je 0x14009542e
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [rbp - 0x70]
movaps xmmword [rsp + 0x240], xmm6
add rdx, 0x158
movaps xmmword [rsp + 0x230], xmm7
call fcn.14008d2e0
lea rdx, [rbp + 0x40]
lea r8, [rax + 0x140]
call fcn.14008d550
cmp byte [0x1400c5536], dil
je 0x140095508
cmp byte [0x1400c4280], dil
je 0x140095508
movss xmm6, dword [rbp + 0x30]
movss xmm7, dword [rbp + 0x34]
subss xmm6, dword [rbp + 0x40]
subss xmm7, dword [rbp + 0x44]
movaps xmm0, xmm6
mulss xmm0, xmm6
movaps xmm1, xmm7
mulss xmm1, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x1400954af
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x1400954b7
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x140095508
divss xmm6, xmm0
mov r8d, 0x28
lea rdx, [rbp - 0x60]
mov ecx, 1
mov qword [rbp - 0x4c], 1
mov dword [rbp - 0x60], edi
mov dword [rbp - 0x50], edi
divss xmm7, xmm0
mulss xmm6, dword [0x1400c4198]
mulss xmm7, dword [0x1400c4198]
cvttss2si eax, xmm6
mov dword [rbp - 0x58], eax
cvttss2si eax, xmm7
mov dword [rbp - 0x54], eax
call qword [sym.imp.USER32.dll_SendInput]
cmp byte [0x1400c5570], dil
mov rdx, rbx
movss xmm12, dword [0x1400b2c90]
movaps xmmword [rsp + 0x220], xmm8
movaps xmmword [rsp + 0x210], xmm9
movaps xmmword [rsp + 0x200], xmm10
je 0x140095642
call fcn.14008d2e0
lea rdx, [rsp + 0x50]
lea r8, [rax + 0x14c]
call fcn.14008d550
movss xmm7, dword [rsp + 0x58]
mov rdx, rbx
movss xmm6, dword [rsp + 0x54]
movss xmm10, dword [rsp + 0x50]
divss xmm7, dword [0x1400c41a8]
divss xmm6, dword [0x1400c4194]
divss xmm10, dword [0x1400c41a8]
call fcn.14008d2e0
lea rdx, [rbp - 0x70]
lea r8, [rax + 0x140]
call fcn.14008d550
movss xmm8, dword [rbp - 0x68]
addss xmm10, dword [rbp - 0x70]
addss xmm8, xmm7
movss xmm7, dword [rbp - 0x6c]
addss xmm7, xmm6
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm6, dword [0x1400b2b0c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm12
subss xmm0, xmm6
mulss xmm0, dword [0x1400c5544]
addss xmm10, xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm9, eax
cvtdq2ps xmm9, xmm9
divss xmm9, xmm12
subss xmm9, xmm6
mulss xmm9, dword [0x1400c5544]
addss xmm9, xmm7
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movaps xmm0, xmm10
unpcklps xmm0, xmm9
movaps xmm1, xmm0
movsd qword [rsp + 0x50], xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
divss xmm7, xmm12
subss xmm7, xmm6
mulss xmm7, dword [0x1400c5544]
addss xmm7, xmm8
movss dword [rsp + 0x58], xmm7
movd eax, xmm7
jmp 0x140095682
call fcn.14008d2e0
lea rdx, [rsp + 0x50]
lea r8, [rax + 0x140]
call fcn.14008d550
movsd xmm1, qword [rsp + 0x50]
mov eax, dword [rsp + 0x58]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rsp + 0x50], xmm1
movaps xmm9, xmm0
movss xmm10, dword [rsp + 0x50]
mov dword [rsp + 0x58], eax
movd xmm7, eax
lea r8, [rsp + 0x40]
movsd qword [rsp + 0x40], xmm1
lea rdx, [rbp - 0x70]
mov dword [rsp + 0x48], eax
call fcn.14008be70
movss xmm11, dword [rbp - 0x70]
ucomiss xmm11, dword [0x1400b2cbc]
jp 0x1400956b0
je 0x140095d46
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1d0], xmm13
cvtsi2ss xmm0, dword [rbp + 0x2c]
xorps xmm1, xmm1
movaps xmmword [rsp + 0x1c0], xmm14
cvtsi2ss xmm1, dword [rbp + 0x28]
movss xmm14, dword [rbp - 0x6c]
movaps xmm3, xmm11
subss xmm3, xmm1
movaps xmm2, xmm14
subss xmm2, xmm0
xorps xmm0, xmm0
mulss xmm3, xmm3
mulss xmm2, xmm2
addss xmm3, xmm2
ucomiss xmm0, xmm3
ja 0x140095707
xorps xmm13, xmm13
sqrtss xmm13, xmm3
jmp 0x140095713
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm13, xmm0
lea rcx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0x41]
mov dword [rsp + 0x40], 0x626f5268
xor ecx, ecx
mov dword [rsp + 0x44], 0x786f6c
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [rbp - 0x70]
lea rdx, str.Workspace
movd xmm2, dword [rbp - 0x6c]
lea rcx, [rsp + 0x60]
cvtdq2ps xmm0, xmm0
mov r8d, 9
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
cvtdq2ps xmm2, xmm2
movaps xmm6, xmm11
movaps xmm8, xmm14
subss xmm6, xmm0
xorps xmm0, xmm0
subss xmm8, xmm2
movups xmmword [rsp + 0x60], xmm0
mulss xmm6, dword [0x1400c4190]
mulss xmm8, dword [0x1400c4190]
divss xmm6, dword [0x1400c41a4]
divss xmm8, dword [0x1400c41a4]
call fcn.1400097e0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x70]
lea rcx, [0x1400c5568]
call fcn.14008bc40
mov qword [rsp + 0x70], rdi
mov r8d, 6
mov qword [rsp + 0x78], rdi
lea rdx, str.Camera
lea rcx, [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
call fcn.1400097e0
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x70]
call fcn.14008bc40
mov rbx, qword [rsp + 0x40]
lea rdx, [rbp + 0x50]
lea r8, [rbx + 0xf4]
call fcn.14008d550
mov r8d, dword [0x1400c51d8]
lea rax, [rbp]
mov rcx, qword [0x1400c51d0]
add rbx, 0xd0
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x3f], edi
mov word [rbp - 0x3b], di
mov byte [rbp - 0x39], dil
mov dword [rbp - 0x60], 0x12b2d92
mov qword [rbp - 0x58], rbx
mov qword [rbp - 0x48], 0x24
mov dword [rbp - 0x5c], r8d
mov byte [rbp - 0x40], dil
test r8d, r8d
je 0x1400958a4
test rcx, rcx
je 0x1400958a4
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r8d, dword [0x1400c51d8]
mov rcx, qword [0x1400c51d0]
cmp byte [0x1400c5514], dil
je 0x140095aff
movd xmm0, dword [0x1400c41bc]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm13
jae 0x140095aff
mov edx, dword [0x1400c5540]
test edx, edx
je 0x140095d02
sub edx, 1
je 0x1400959f7
cmp edx, 1
jne 0x140095d34
mov rax, qword [0x1400c5728]
test rax, rax
jne 0x140095997
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x756f4d37
movups xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x54], 0x65536573
lea rax, [rsp + 0x51]
mov dword [rsp + 0x58], 0x63697672
mov r8, 0xffffffffffffffff
mov word [rsp + 0x5c], 0x65
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
inc r8
cmp byte [rax + r8], dil
jne 0x140095933
lea rdx, [rsp + 0x51]
lea rcx, [rsp + 0x60]
call fcn.1400097e0
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x70]
lea rcx, [0x1400c5568]
call fcn.14008bc40
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x140095d34
add rdx, 0xf0
call fcn.14008d2e0
mov qword [0x1400c5728], rax
test rax, rax
je 0x140095d34
mov r8d, dword [0x1400c51d8]
mov rcx, qword [0x1400c51d0]
add rax, 0xdc
mov dword [rbp - 0xf], edi
mov qword [rbp - 0x28], rax
movaps xmm0, xmm11
unpcklps xmm0, xmm14
lea rax, [rbp - 0x70]
mov qword [rbp - 0x20], rax
movsd qword [rbp - 0x70], xmm0
mov word [rbp - 0xb], di
mov byte [rbp - 9], dil
mov dword [rbp - 0x30], 0x12b2d92
mov qword [rbp - 0x18], 8
mov dword [rbp - 0x2c], r8d
mov byte [rbp - 0x10], 1
test r8d, r8d
je 0x140095d34
test rcx, rcx
je 0x140095d34
lea rax, [rbp - 0x30]
lea r8, [rbp - 0x30]
jmp 0x140095ccf
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm12
subss xmm0, dword [0x1400b2af4]
mulss xmm0, dword [0x1400c5544]
addss xmm0, xmm10
movss dword [rsp + 0x50], xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm12
subss xmm0, dword [0x1400b2af4]
mulss xmm0, dword [0x1400c5544]
addss xmm0, xmm9
movss dword [rsp + 0x54], xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x60]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm12
subss xmm0, dword [0x1400b2af4]
mulss xmm0, dword [0x1400c5544]
addss xmm0, xmm7
movss dword [rsp + 0x58], xmm0
call fcn.140092930
cmp byte [0x1400c5564], dil
movups xmm9, xmmword [rax]
mov ecx, dword [rax + 0x20]
movups xmm10, xmmword [rax + 0x10]
jne 0x140095b4f
lea rax, [rsp + 0x60]
movaps xmmword [rsp + 0x60], xmm9
mov qword [rbp - 0x20], rax
mov eax, dword [0x1400c51d8]
movaps xmmword [rsp + 0x70], xmm10
mov dword [rbp - 0x80], ecx
mov dword [rbp - 0xf], edi
mov word [rbp - 0xb], di
mov byte [rbp - 9], dil
mov dword [rbp - 0x30], 0x12b2d92
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x18], 0x24
mov dword [rbp - 0x2c], eax
mov byte [rbp - 0x10], 1
test eax, eax
je 0x140095d34
mov rcx, qword [0x1400c51d0]
jmp 0x1400959e1
mov dword [0x1400c5540], 3
call fcn.140093b40
test al, al
je 0x140095cf9
lea r8, [rsp + 0x50]
lea rdx, [rbp + 0x50]
lea rcx, [rbp - 0x60]
call fcn.140092930
cmp byte [0x1400c5564], dil
movups xmm9, xmmword [rax]
mov ecx, dword [rax + 0x20]
movups xmm10, xmmword [rax + 0x10]
jne 0x140095b4f
movaps xmmword [rbp - 0x30], xmm9
movaps xmmword [rbp - 0x20], xmm10
mov dword [rbp - 0x10], ecx
jmp 0x140095c79
movss xmm7, dword [0x1400c4190]
movaps xmm8, xmm9
divss xmm7, dword [0x1400c41a4]
subss xmm8, dword [rbp]
movaps xmm6, xmm10
movd xmm1, ecx
subss xmm6, dword [rbp + 0x10]
subss xmm1, dword [rbp + 0x20]
movaps xmm5, xmm9
movaps xmm3, xmm10
mulss xmm8, xmm7
movaps xmm4, xmm9
shufps xmm5, xmm9, 0x55
movaps xmm2, xmm10
subss xmm5, dword [rbp + 4]
addss xmm8, dword [rbp]
mulss xmm6, xmm7
shufps xmm3, xmm10, 0x55
subss xmm3, dword [rbp + 0x14]
addss xmm6, dword [rbp + 0x10]
shufps xmm4, xmm9, 0xaa
subss xmm4, dword [rbp + 8]
shufps xmm2, xmm10, 0xaa
subss xmm2, dword [rbp + 0x18]
shufps xmm8, xmm8, 0xe1
shufps xmm6, xmm6, 0xe1
shufps xmm9, xmm9, 0xff
subss xmm9, dword [rbp + 0xc]
shufps xmm10, xmm10, 0xff
subss xmm10, dword [rbp + 0x1c]
mulss xmm5, xmm7
mulss xmm3, xmm7
addss xmm5, dword [rbp + 4]
mulss xmm4, xmm7
addss xmm3, dword [rbp + 0x14]
mulss xmm2, xmm7
addss xmm4, dword [rbp + 8]
movss xmm8, xmm5
mulss xmm9, xmm7
addss xmm2, dword [rbp + 0x18]
movss xmm6, xmm3
shufps xmm8, xmm8, 0xc6
addss xmm9, dword [rbp + 0xc]
shufps xmm6, xmm6, 0xc6
movss xmm8, xmm4
shufps xmm8, xmm8, 0x27
movss xmm6, xmm2
mulss xmm10, xmm7
shufps xmm6, xmm6, 0x27
movss xmm8, xmm9
shufps xmm8, xmm8, 0x39
addss xmm10, dword [rbp + 0x1c]
mulss xmm1, xmm7
movups xmmword [rsp + 0x60], xmm8
addss xmm1, dword [rbp + 0x20]
movss xmm6, xmm10
movaps xmmword [rbp - 0x30], xmm8
shufps xmm6, xmm6, 0x39
movups xmmword [rsp + 0x70], xmm6
movaps xmmword [rbp - 0x20], xmm6
movss dword [rbp - 0x10], xmm1
lea rax, [rbp - 0x30]
mov dword [rbp - 0x7f], edi
mov qword [rsp + 0x70], rax
mov eax, dword [0x1400c51d8]
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], 0x24
mov dword [rsp + 0x64], eax
mov byte [rbp - 0x80], 1
test eax, eax
je 0x140095d34
mov rcx, qword [0x1400c51d0]
test rcx, rcx
je 0x140095d34
lea rax, [rsp + 0x60]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x38], rdi
mov r9d, 0x28
mov qword [rsp + 0x30], rdi
mov edx, 0x224a14
mov dword [rsp + 0x28], 0x28
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x140095d34
call fcn.140093e30
test al, al
je 0x140095d34
cvttss2si eax, xmm6
mov r8d, 0x28
mov qword [rbp - 0x4c], 1
lea rdx, [rbp - 0x60]
mov dword [rbp - 0x60], edi
mov ecx, 1
mov dword [rbp - 0x50], edi
mov dword [rbp - 0x58], eax
cvttss2si eax, xmm8
mov dword [rbp - 0x54], eax
call qword [sym.imp.USER32.dll_SendInput]
movaps xmm13, xmmword [rsp + 0x1d0]
movaps xmm14, xmmword [rsp + 0x1c0]
movaps xmm10, xmmword [rsp + 0x200]
movaps xmm9, xmmword [rsp + 0x210]
movaps xmm8, xmmword [rsp + 0x220]
movaps xmm7, xmmword [rsp + 0x230]
movaps xmm6, xmmword [rsp + 0x240]
mov rcx, qword [rbp + 0xb0]
xor rcx, rsp
call fcn.1400a2610
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop rbp
ret