Function at 0x18006b9f0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x40
xor r14d, r14d
movabs rbx, 0xd80958fc74e988a6
mov dword [0x1802da4f0], r14d
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], rbx
call fcn.1800cf390
mov qword [0x18034fb78], rbx
mov ebp, dword [rax]
mov dword [0x1802da4f0], r14d
mov dword [0x1802da500], r14d
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov esi, dword [rax]
movabs rax, 0x997abd671d25ca0b
mov qword [0x18034fb78], rax
mov dword [rsp + 0x78], esi
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x78], r14
mov qword [0x1802da5c8], rax
mov dword [rsp + 0x78], r14d
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5d0], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 2
call fcn.1800cf390
cmp dword [rax], r14d
je 0x18006bad5
movabs rax, 0x6094ad011a2ea87d
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], rax
mov dword [rsp + 0x78], esi
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov esi, dword [rax]
mov ecx, 0x75
xor dil, dil
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
test cx, ax
je 0x18006c2cf
movabs rax, 0x1bede233e6cd2a1f
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], rax
mov qword [rsp + 0x70], r12
mov dword [rsp + 0x78], 1
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x80], r13
mov qword [0x1802da5c8], rax
mov qword [rsp + 0x88], r15
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov qword [rsp + 0x78], r14
movabs r12, 0xa6db27d19ecbb7da
mov qword [0x18034fb78], r12
mov ebx, dword [rax]
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
movabs r15, 0xdf729e8d20cf7327
movabs r13, 0x14f96aa50d6fbea7
cmp dword [rax], r14d
je 0x18006bdc0
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], r15
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], 0x42
je 0x18006bd01
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], r15
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], 5
je 0x18006bd01
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], r15
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], 0x3c
je 0x18006bd01
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], r15
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], 2
je 0x18006bd01
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], 1
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], r13
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], r12
mov ebx, dword [rax]
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], r14d
jne 0x18006bba1
jmp 0x18006bdc0
movabs rax, 0x586afe3ff72d996e
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], rax
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov dil, 1
mov dword [rsp + 0x78], esi
movups xmm0, xmmword [rax]
movups xmmword [0x18034fc48], xmm0
movsd xmm1, qword [rax + 0x10]
movabs rax, 0x3fef770d40960d5a
mov qword [0x18034fb78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x78], r14
mov qword [0x1802da5c8], rax
mov dword [rsp + 0x78], r14d
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5d0], rax
movsd qword [0x18034fc58], xmm1
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 2
call fcn.1800cf390
movups xmm0, xmmword [rax]
movsd xmm1, qword [rax + 0x10]
movups xmmword [0x18034fc60], xmm0
movsd qword [0x18034fc70], xmm1
movabs rax, 0x1bede233e6cd2a1f
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], rax
mov dword [rsp + 0x78], 0x26
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], r12
mov ebx, dword [rax]
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], r14d
je 0x18006bf98
nop dword [rax]
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], r15
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov qword [rsp + 0x78], r14
cmp dword [rax], r14d
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
je 0x18006beef
mov dword [rsp + 0x78], 0x26
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov qword [0x18034fb78], r13
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], r12
mov ebx, dword [rax]
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], r14d
jne 0x18006be40
jmp 0x18006bf98
movabs rax, 0x586afe3ff72d996e
mov dword [rsp + 0x78], ebx
mov qword [0x18034fb78], rax
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov dil, 1
mov dword [rsp + 0x78], esi
movups xmm0, xmmword [rax]
movups xmmword [0x18034fc48], xmm0
movsd xmm1, qword [rax + 0x10]
movabs rax, 0x3fef770d40960d5a
mov qword [0x18034fb78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x78], r14
mov qword [0x1802da5c8], rax
mov dword [rsp + 0x78], r14d
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5d0], rax
movsd qword [0x18034fc58], xmm1
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 2
call fcn.1800cf390
movups xmm0, xmmword [rax]
movsd xmm1, qword [rax + 0x10]
movups xmmword [0x18034fc60], xmm0
movsd qword [0x18034fc70], xmm1
movabs rax, 0x1bede233e6cd2a1f
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], rax
mov dword [rsp + 0x78], 0x1af
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], r12
mov ebx, dword [rax]
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], r14d
je 0x18006c0ce
nop word [rax + rax]
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov qword [0x18034fb78], r15
mov dword [0x1802da4f0], 1
call fcn.1800cf390
mov qword [rsp + 0x78], r14
cmp dword [rax], 0x3c
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
je 0x18006c1a1
mov dword [rsp + 0x78], 0x1af
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov qword [0x18034fb78], r13
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov qword [0x18034fb78], r12
mov ebx, dword [rax]
mov dword [rsp + 0x78], ebx
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 1
call fcn.1800cf390
cmp dword [rax], r14d
jne 0x18006c020
test dil, dil
je 0x18006c2ae
mov ebx, r14d
lea rdi, [0x180205e80]
lea r15, [0x18034fc58]
nop dword [rax + rax]
movss xmm0, dword [rdi]
mov edx, esi
movss xmm3, dword [0x18034fc50]
movss xmm2, dword [0x18034fc48]
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm0
call fcn.1800ad960
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x180341880]
add eax, 0x64
mov dword [0x180341784], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
movss xmm3, dword [rdi]
movss xmm2, dword [0x18034fc50]
movss xmm1, dword [0x18034fc48]
mov qword [rsp + 0x20], r15
call fcn.1800ae4f0
test eax, eax
jne 0x18006c24c
inc ebx
add rdi, 4
cmp ebx, 0x11
jb 0x18006c0f0
movss xmm0, dword [0x18026b928]
lea r8d, [rax + 1]
mov r9b, 1
movss dword [0x18034fc58], xmm0
mov edx, 0xfbab5776
mov ecx, ebp
call qword [0x1803418d8]
movss xmm0, dword [0x18034fc58]
jmp 0x18006c264
movabs rax, 0x586afe3ff72d996e
mov dword [rsp + 0x78], ebx
mov qword [0x18034fb78], rax
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5c8], rax
call fcn.1800cf390
mov qword [rsp + 0x78], r14
mov dword [rsp + 0x78], esi
movups xmm0, xmmword [rax]
movups xmmword [0x18034fc48], xmm0
movsd xmm1, qword [rax + 0x10]
movabs rax, 0x3fef770d40960d5a
mov qword [0x18034fb78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x78], r14
mov qword [0x1802da5c8], rax
mov dword [rsp + 0x78], r14d
mov rax, qword [rsp + 0x78]
mov qword [0x1802da5d0], rax
movsd qword [0x18034fc58], xmm1
mov dword [0x1802da500], r14d
mov dword [0x1802da4f0], 2
call fcn.1800cf390
movups xmm0, xmmword [rax]
movsd xmm1, qword [rax + 0x10]
movups xmmword [0x18034fc60], xmm0
movsd qword [0x18034fc70], xmm1
jmp 0x18006c0d7
movss xmm0, dword [0x18034fc58]
addss xmm0, dword [0x180269e94]
movss dword [0x18034fc58], xmm0
movss xmm3, dword [0x18034fc50]
mov edx, esi
movss xmm2, dword [0x18034fc48]
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
movss dword [rsp + 0x20], xmm0
call fcn.1800ad960
call qword [sym.imp.WINMM.dll_timeGetTime]
mov rcx, qword [0x180341880]
mov dword [0x180341784], eax
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
jmp 0x18006c2ba
lea rcx, str.No_objective_found.
call fcn.1800b2f70
mov r13, qword [rsp + 0x80]
mov r12, qword [rsp + 0x70]
mov r15, qword [rsp + 0x88]
add rsp, 0x40
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret