Function at 0x1400a1800
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0xf8]
sub rsp, 0x1f0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
mov rax, qword [0x1400c4010]
xor rax, rsp
mov qword [rbp + 0xa0], rax
xor esi, esi
mov dword [rsp + 0x48], esi
mov rax, qword [0x1400cb820]
test rax, rax
je 0x1400a185c
mov rcx, qword [rax + 0x98]
jmp 0x1400a185f
mov rcx, rsi
cmp qword [rcx + 0x18], rsi
jne 0x1400a1880
test rax, rax
je 0x1400a1880
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x1400a1880
cmp qword [rcx], rsi
je 0x1400a1880
call fcn.14007ae50
call fcn.14007b860
call fcn.1400568e0
movss xmm7, dword [0x1400ceab8]
addss xmm7, dword [0x1400b9f98]
movss dword [0x1400ceab8], xmm7
xorps xmm8, xmm8
movss xmm6, dword [0x1400ba02c]
comiss xmm7, xmm6
jbe 0x1400a18be
xorps xmm7, xmm7
movss dword [0x1400ceab8], xmm7
mov ebx, esi
mov dword [0x1400cb8bc], 0x3f800000
movss xmm9, dword [0x1400b9f94]
nop dword [rax]
nop word [rax + rax]
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm9
subss xmm0, xmm7
comiss xmm8, xmm0
jbe 0x1400a18fa
addss xmm0, xmm6
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
movaps xmm2, xmm6
movaps xmm1, xmm6
call fcn.140052a50
movss xmm0, dword [rsp + 0x40]
movss dword [0x1400cb8b0], xmm0
movss xmm1, dword [rsp + 0x44]
movss dword [0x1400cb8b4], xmm1
movss xmm0, dword [rsp + 0x48]
movss dword [0x1400cb8b8], xmm0
inc ebx
cmp ebx, 0x1e5
jl 0x1400a18e0
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400a196f
cmp byte [0x1400cb819], sil
sete byte [0x1400cb819]
call fcn.14009d980
cmp byte [0x1400cb819], sil
je 0x1400a1982
call fcn.14009fe10
movss xmm7, dword [0x1400b9fe8]
cmp byte [0x1400cb81b], sil
je 0x1400a1a4a
mov rax, qword [0x1400cb820]
mov rax, qword [rax + 0x40b8]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400553a0
mov rbx, rax
movups xmm0, xmmword [0x1400cb8b0]
movups xmmword [rsp + 0x48], xmm0
lea rcx, [rsp + 0x48]
call fcn.1400528f0
mov edi, eax
mov dword [rsp + 0x48], 0x44700000
mov dword [rsp + 0x4c], 0x44070000
test eax, 0xff000000
je 0x1400a1a4a
movss xmm2, dword [0x1400ca4c8]
comiss xmm7, xmm2
ja 0x1400a1a4a
subss xmm2, xmm7
mov dword [rsp + 0x28], 0x1ff
movss xmm0, dword [0x1400ba0e4]
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm8
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.140073990
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], 1
mov r9d, edi
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140071fb0
mov dword [rbx + 0x78], esi
cmp byte [0x1400cb81e], sil
je 0x1400a1af0
mov rax, qword [0x1400cb820]
mov rax, qword [rax + 0x40b8]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax]
call fcn.1400553a0
mov rbx, rax
movups xmm0, xmmword [0x1400ca510]
movups xmmword [rsp + 0x48], xmm0
lea rcx, [rsp + 0x48]
call fcn.1400528f0
mov edi, eax
mov dword [rsp + 0x48], 0x44700000
mov dword [rsp + 0x4c], 0x44070000
test eax, 0xff000000
je 0x1400a1af0
movss xmm2, dword [0x1400ca4c8]
comiss xmm7, xmm2
ja 0x1400a1af0
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.140073460
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.140072ec0
mov dword [rbx + 0x78], esi
cmp byte [0x1400cb81a], sil
je 0x1400a1bbc
mov ecx, 0xa10
call fcn.1400a42d0
mov rbx, rax
mov qword [rsp + 0x60], rsi
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov ecx, dword [0x1400ceae8]
mov dword [rsp + 0x68], ecx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x6c], eax
add rbx, 0xf8
mov qword [rsp + 0x70], rbx
lea rax, [rsp + 0x48]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], 4
mov edx, 1
lea rcx, [rsp + 0x60]
call fcn.1400a47f0
test al, al
mov ecx, esi
je 0x1400a1b66
mov ecx, dword [rsp + 0x48]
mov eax, esi
test ecx, ecx
sete al
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x60], rsi
mov qword [rbp - 0x78], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x70], xmm0
mov eax, dword [0x1400ceae8]
mov dword [rsp + 0x68], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x6c], eax
mov qword [rsp + 0x70], rbx
lea rax, [rsp + 0x48]
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], 4
mov edx, 2
lea rcx, [rsp + 0x60]
call fcn.1400a47f0
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp - 0x60]
call fcn.1400a5bf8
lea rax, [0x1400b9e68]
mov qword [rbp - 0x60], rax
lea rax, [0x1400b9d30]
mov qword [rbp - 0x50], rax
lea rcx, [rbp + 0x38]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0x48], 1
xor r8d, r8d
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
nop
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x60], rbx
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x48]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x48], rax
mov qword [rbp + 0x20], rsi
mov dword [rbp + 0x28], esi
lea rdx, str.Nexus_Aim
cmp qword [0x1400cad98], 0x10
cmovae rdx, qword [str.Nexus_Aim]
mov r8, qword [0x1400cad90]
lea rcx, [rbp - 0x50]
call fcn.140095a30
mov rcx, rax
lea rdx, [0x1400a7a96]
call fcn.140095770
mov rax, qword [0x1400cb820]
or dword [rax + 0x3fb8], 1
mov dword [rax + 0x3fc8], 0x40a00000
mov qword [rax + 0x3fcc], 0x40a00000
mov dword [rax + 0x3fd4], esi
mov dword [rax + 0x3fbc], 1
xor edx, edx
mov r8d, 0x12f
lea rcx, str.watermark
call fcn.14005c720
lea rcx, str.NexusAim.WIN__1.f_fps_
call fcn.14007d710
movss xmm1, dword [0x1400ba1c0]
movaps xmm0, xmm8
call fcn.140060370
movss xmm3, dword [0x1400ba10c]
call fcn.14009fa90
call fcn.14005eab0
nop
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x60], rbx
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x48]
call fcn.1400a3ee0
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x38]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400a1d4b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.140059000
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
xor r8d, r8d
mov edx, 0xae
call qword [rax + 0x1c8]
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
mov dword [rsp + 0x30], esi
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], esi
mov r9d, 1
xor r8d, r8d
xor edx, edx
call qword [rax + 0x158]
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x1400a1e09
call fcn.140059380
mov rax, qword [0x1400cb820]
mov rcx, qword [rax + 0x40b8]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], 0
cmove rcx, rsi
call fcn.14007a8a0
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x1400a1ee9
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x1400a1ee9
mov rbx, qword [0x1400cb820]
test rbx, rbx
je 0x1400a1eaf
mov rbx, qword [rbx + 0x98]
test rbx, rbx
je 0x1400a1eaf
cmp qword [rbx], 0
je 0x1400a1eaf
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400a1e7a
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 8], rsi
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400a1e8d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], rsi
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1400a1eaf
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x18], rsi
mov rax, qword [0x1400cb820]
mov rcx, qword [rax + 0x50]
mov qword [rcx + 8], rsi
mov rcx, qword [0x1400cba08]
mov rax, qword [rcx]
lea rdx, [0x1400cb930]
call qword [rax + 0x80]
mov rax, qword [0x1400cb820]
test rax, rax
je 0x1400a1ee9
mov rax, qword [rax + 0x98]
test rax, rax
je 0x1400a1ee9
cmp qword [rax], 0
je 0x1400a1ee9
call fcn.14007ae50
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400a4a80
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop rbp
ret