Function at 0x180077920
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x90
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov r15, r9
movaps xmm7, xmm2
mov r14, rdx
xor esi, esi
mov dword [rax - 0x78], esi
mov rdi, qword [0x1800de510]
mov rbp, rdi
mov rax, qword [rdi + 0x4140]
mov byte [rax + 0xf5], 1
mov rbx, qword [rdi + 0x4140]
cmp byte [rbx + 0xf8], sil
je 0x18007797f
xor al, al
jmp 0x180077ba6
movsxd rcx, dword [rbx + 0x130]
mov rax, qword [rbx + 0x138]
mov r8d, dword [rax + rcx*4 - 4]
xor edx, edx
lea r12, str.Aimbot_key
mov rcx, r12
call fcn.180034930
mov rcx, qword [rbx]
cmp dword [rcx + 0x418c], eax
jne 0x1800779c4
mov r8, r12
mov edx, 0xb
mov ecx, eax
call fcn.18005bde0
mov rdi, qword [0x1800de510]
mov rcx, r12
cmp r12, 0xffffffffffffffff
jae 0x1800779ed
nop dword [rax]
movzx edx, byte [rcx]
test dl, dl
je 0x1800779ed
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x1800779e4
cmp byte [rax], dl
je 0x1800779ed
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x1800779d0
movss xmm6, dword [0x1800c8d80]
cmp r12, rcx
je 0x180077a30
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x1800c8d5c]
movss xmm2, dword [rdi + 0x3e78]
lea rdx, [rsp + 0x48]
mov rcx, qword [rdi + 0x3e70]
call fcn.18006da70
mov ebx, 1
mov r8d, ebx
xor edx, edx
mov rcx, r12
call fcn.1800763d0
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.180048930
mov edx, dword [0x1800de4c4]
mov rax, qword gs:[0x58]
mov ecx, 0x130
mov rax, qword [rax + rdx*8]
mov ecx, dword [rcx + rax]
cmp dword [0x1800dea54], ecx
jle 0x180077a9a
lea rcx, [0x1800dea54]
call fcn.1800999a4
cmp dword [0x1800dea54], 0xffffffff
jne 0x180077a9a
mov eax, dword [r14]
mov dword [0x1800dea58], eax
lea rcx, [0x1800dea54]
call fcn.180099944
cmp byte [0x1800de8e8], sil
je 0x180077ab4
mov rdx, r15
lea rcx, [0x1800c5f48]
call fcn.1800775c0
jmp 0x180077b31
mov edx, dword [r14]
test edx, edx
jne 0x180077ac4
lea rax, [0x1800c5f48]
jmp 0x180077adf
lea rcx, [rsp + 0x50]
call fcn.180001220
nop
mov esi, ebx
mov dword [rsp + 0x40], ebx
cmp qword [rax + 0x18], 0x10
jb 0x180077adf
mov rax, qword [rax]
mov rdx, r15
mov rcx, rax
call fcn.1800775c0
nop
test sil, 1
je 0x180077b31
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x180077b31
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180077b2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180077b2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800993c4
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call fcn.180046570
test al, al
je 0x180077b55
xor ecx, ecx
call fcn.180039a00
test al, al
je 0x180077b55
mov byte [0x1800de8e8], 1
jmp 0x180077b60
cmp byte [0x1800de8e8], 0
je 0x180077ba4
nop
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x180077b82
cmp ebx, 0x1b
je 0x180077b8e
cmp ebx, 1
jne 0x180077b94
cmp byte [rbp + 0x3875], 0
jne 0x180077b94
inc ebx
cmp ebx, 0xe7
jg 0x180077ba4
jmp 0x180077b60
mov ebx, dword [0x1800dea58]
mov dword [r14], ebx
mov byte [0x1800de8e8], 0
mov dword [0x1800dea58], ebx
mov al, 1
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [rsp + 0x70]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret