Function at 0x18001d3a0
Capabilities:
Log keystrokes via application hook
Log keystrokes via polling

Disassembly:
push rbp
push r14
lea rbp, [rsp - 0x18]
sub rsp, 0x118
movaps xmmword [rsp + 0x100], xmm6
mov rax, qword [0x18009a040]
xor rax, rsp
mov qword [rbp - 0x10], rax
lea rdx, str.VALORANT
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov r14, rax
call qword [sym.imp.USER32.dll_GetActiveWindow]
test r14, r14
jne 0x18001d3ed
mov eax, 3
jmp 0x18001da50
lea rdx, [rbp - 0x30]
mov rcx, r14
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
jne 0x18001d408
mov eax, 4
jmp 0x18001da50
mov qword [rsp + 0x130], rbx
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x138], rsi
mov esi, dword [rbp - 0x28]
sub esi, dword [rbp - 0x30]
mov qword [rsp + 0x140], rdi
mov edi, dword [rbp - 0x24]
sub edi, dword [rbp - 0x2c]
mov qword [rsp + 0x110], r15
mov dword [0x1800c2238], esi
mov dword [0x1800c2234], edi
test rbx, rbx
jne 0x18001d477
nop word [rax + rax]
lea rdx, str.CiceroUIWndFrame
lea rcx, str.CiceroUIWndFrame
call qword [sym.imp.USER32.dll_FindWindowA]
mov ecx, 0x1f4
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Sleep]
test rbx, rbx
je 0x18001d450
mov edx, 5
mov rcx, rbx
call qword [sym.imp.USER32.dll_ShowWindow]
movdqa xmm0, xmmword [0x18008de10]
lea rdx, [rbp - 0x30]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov edx, 0xffffffec
mov r8d, 0x800a8
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongA]
xor r15d, r15d
xor r9d, r9d
mov dword [rsp + 0x30], r15d
xor r8d, r8d
mov dword [rsp + 0x28], edi
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x20], esi
call qword [sym.imp.USER32.dll_SetWindowPos]
xor r9d, r9d
mov qword [0x1800c2240], rbx
xor r8d, r8d
lea rdx, [0x18001d160]
mov ecx, 0xd
call qword [sym.imp.USER32.dll_SetWindowsHookExA]
mov eax, dword [0x1800c2238]
xor r9d, r9d
mov dword [rbp - 0x30], eax
xor r8d, r8d
mov eax, dword [0x1800c2234]
mov edx, 1
mov dword [rbp - 0x2c], eax
xor ecx, ecx
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x64], 1
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x28], rax
movups xmm0, xmmword [rbp - 0x30]
mov qword [rsp + 0x60], 1
mov rax, qword [rsp + 0x60]
mov qword [rbp - 0x64], rax
mov rax, qword [0x1800c2240]
mov qword [rbp - 0x50], rax
lea rax, [0x1800c2410]
mov qword [rsp + 0x58], rax
lea rax, [0x1800c2418]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], rax
lea rax, [0x1800c2420]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x60]
mov dword [rsp + 0x30], 7
mov qword [rbp - 0x20], 0x1c
movsd xmm1, qword [rbp - 0x20]
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x58], 2
mov qword [rbp - 0x40], 2
movaps xmmword [rbp - 0x80], xmm0
movsd qword [rbp - 0x70], xmm1
mov dword [rbp - 0x68], r15d
mov dword [rbp - 0x5c], 0x20
mov qword [rbp - 0x48], 1
mov dword [rsp + 0x60], 0xb000
mov dword [rsp + 0x64], 0xa000
call qword [sym.imp.d3d11.dll_D3D11CreateDeviceAndSwapChain]
mov rdi, qword [rsp + 0x140]
mov rsi, qword [rsp + 0x138]
test eax, eax
js 0x18001da3b
mov rcx, qword [0x1800c2420]
lea r9, [0x1800c2450]
lea r8, [0x180080c48]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x48]
test eax, eax
js 0x18001da3b
mov rcx, qword [0x1800c2418]
lea r9, [0x1800c2408]
mov rdx, qword [0x1800c2450]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
test eax, eax
js 0x18001da3b
mov rcx, qword [0x1800c2450]
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov rcx, qword [0x1800c2240]
call fcn.18001ca30
test al, al
jne 0x18001d66e
mov eax, 5
jmp 0x18001da40
mov rcx, qword [0x1800c2360]
test rcx, rcx
jne 0x18001d69b
mov r8d, 0x100c
lea rdx, str.F:Valorant_productsHopesar_Leaked_Source_Valorant_Rat_Loader_mainValClara_HopesarImGuiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rcx, qword [0x1800c2360]
movss xmm3, dword [0x18008dce8]
lea rdx, [0x18009a0d0]
mov rcx, qword [rcx + 0x58]
mov r8d, 0x26b8c
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
call fcn.180068040
movsd xmm6, qword [0x18008dc60]
nop dword [rax + rax]
mov rdx, qword [0x1800c2240]
lea rcx, [0x1800c2e18]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x18001d710
lea rcx, [0x1800c2e18]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x1800c2e18]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xorps xmm0, xmm0
mov qword [rsp + 0x60], r15
lea rdx, [rbp - 0x30]
mov rcx, r14
movups xmmword [rbp - 0x30], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [rsp + 0x60]
mov rbx, qword [0x1800c2360]
mov dword [rbp - 0x30], eax
mov eax, dword [rsp + 0x64]
mov dword [rbp - 0x2c], eax
test rbx, rbx
jne 0x18001d772
mov r8d, 0x100c
lea rdx, str.F:Valorant_productsHopesar_Leaked_Source_Valorant_Rat_Loader_mainValClara_HopesarImGuiimgui.cpp
lea rcx, str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rbx, qword [0x1800c2360]
lea rcx, [rsp + 0x68]
mov qword [rbx + 0xd0], r14
mov dword [rbx + 0x18], 0x3c888889
call qword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [rsp + 0x68]
mov ecx, 1
sub eax, dword [rsp + 0x60]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe08], xmm0
mov eax, dword [rsp + 0x6c]
sub eax, dword [rsp + 0x64]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe0c], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18001d7e5
mov byte [rbx + 0xe10], 1
mov eax, dword [rbx + 0xe0c]
mov dword [rbx + 0x36f4], eax
mov byte [rbx + 0x3748], 1
jmp 0x18001d7ec
mov byte [rbx + 0xe10], r15b
mov eax, dword [0x1800c2e00]
mov ecx, dword [rbp - 0x24]
mov edx, dword [rbp - 0x28]
cmp dword [rbp - 0x30], eax
jne 0x18001d818
cmp edx, dword [0x1800c2e08]
jne 0x18001d818
mov eax, dword [0x1800c2e04]
cmp dword [rbp - 0x2c], eax
jne 0x18001d818
cmp ecx, dword [0x1800c2e0c]
je 0x18001d858
movups xmm0, xmmword [rbp - 0x30]
mov r9d, dword [rsp + 0x64]
mov r8d, dword [rsp + 0x60]
mov dword [rsp + 0x30], 8
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], edx
mov dword [0x1800c2238], edx
xor edx, edx
mov dword [0x1800c2234], ecx
mov rcx, qword [0x1800c2240]
movups xmmword [0x1800c2e00], xmm0
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rbx, qword [0x1800c2360]
test rbx, rbx
je 0x18001d872
mov rbx, qword [rbx + 0xa0]
test rbx, rbx
jne 0x18001d88f
jmp 0x18001d875
mov rbx, r15
mov r8d, 0x250
lea rdx, str.F:Valorant_productsHopesar_Leaked_Source_Valorant_Rat_Loader_mainValClara_HopesarImGuiimgui_impl_dx11.cpp
lea rcx, str.bd___nullptr___Did_you_call_ImGui_ImplDX11_Init____
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
cmp qword [rbx + 0x48], r15
jne 0x18001d89a
call fcn.18006dc20
call fcn.18006ec00
call fcn.180044870
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, r14
jne 0x18001d97d
mov rbx, qword [0x1800c2360]
cmp dword [rbx + 0x4898], r15d
jg 0x18001d8dd
mov r8d, 0x6fc
lea rdx, str.F:Valorant_productsHopesar_Leaked_Source_Valorant_Rat_Loader_mainValClara_HopesarImGuiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a0]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax]
call fcn.180043e90
mov rbx, qword [0x1800c2360]
mov qword [0x1800c2250], rax
cmp dword [rbx + 0x4898], r15d
jg 0x18001d926
mov r8d, 0x6fc
lea rdx, str.F:Valorant_productsHopesar_Leaked_Source_Valorant_Rat_Loader_mainValClara_HopesarImGuiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a0]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.180043e90
movd xmm0, dword [0x1800c2238]
movd xmm1, dword [0x1800c2234]
cvtdq2pd xmm0, xmm0
mov qword [0x1800c2248], rax
cvtdq2pd xmm1, xmm1
mulsd xmm0, xmm6
mulsd xmm1, xmm6
cvtpd2ps xmm2, xmm0
cvtpd2ps xmm0, xmm1
unpcklps xmm2, xmm0
movq rcx, xmm2
call fcn.18000f9a0
call fcn.180047010
call fcn.180046b70
mov rcx, qword [0x1800c2410]
lea r8, [0x1800c2408]
xor r9d, r9d
mov edx, 1
mov rax, qword [rcx]
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [0x1800c2410]
lea r8, [0x180080bb0]
mov rdx, qword [0x1800c2408]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x1800c2360]
cmp dword [rbx + 0x4898], r15d
jg 0x18001d9ee
mov r8d, 0x6fc
lea rdx, str.F:Valorant_productsHopesar_Leaked_Source_Valorant_Rat_Loader_mainValClara_HopesarImGuiimgui.h
lea rcx, str.i___0__i___Size
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
mov rax, qword [rbx + 0x48a0]
mov rcx, qword [rax]
mov rax, r15
add rcx, 0x48
cmp byte [rcx], r15b
cmovne rax, rcx
mov rcx, rax
call fcn.18006d190
mov rcx, qword [0x1800c2420]
xor r8d, r8d
cmp byte [0x1800c233c], r15b
mov rax, qword [rcx]
je 0x18001da31
mov edx, 1
call qword [rax + 0x40]
jmp 0x18001d6d0
xor edx, edx
call qword [rax + 0x40]
jmp 0x18001d6d0
mov eax, 1
mov rbx, qword [rsp + 0x130]
mov r15, qword [rsp + 0x110]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.18007bd30
movaps xmm6, xmmword [rsp + 0x100]
add rsp, 0x118
pop r14
pop rbp
ret