Function at 0x1400a94a0
Capabilities:
Check for unmoving mouse cursor
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x118]
sub rsp, 0x210
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x98], xmm14
mov rax, qword [0x1400de040]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rbx, rcx
lea rcx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0x41]
mov dword [rsp + 0x40], 0x626f5253
xor ecx, ecx
mov dword [rsp + 0x44], 0x786f6c
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [0x1400dfbb8]
xor edi, edi
mov rax, qword [0x1400df340]
mov dword [rbp - 0x4f], edi
mov word [rbp - 0x4b], di
mov byte [rbp - 0x49], dil
mov dword [rbp - 0x70], 0x12b2d92
lea rcx, [rax + 0x730]
mov qword [rbp - 0x68], rcx
lea rcx, [rbp]
mov qword [rbp - 0x60], rcx
mov rcx, qword [0x1400dfbb0]
mov qword [rbp - 0x58], 8
mov dword [rbp - 0x6c], edx
mov byte [rbp - 0x50], dil
test edx, edx
je 0x1400a95a3
test rcx, rcx
je 0x1400a95a3
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x1400df340]
mov edx, dword [0x1400dfbb8]
mov rcx, qword [0x1400dfbb0]
add rax, 0x4c0
mov dword [rbp - 0x7f], edi
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x70], rax
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x78], 0x40
mov dword [rsp + 0x64], edx
mov byte [rbp - 0x80], dil
test edx, edx
je 0x1400a9616
test rcx, rcx
je 0x1400a9616
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movaps xmmword [rsp + 0x200], xmm6
add rbx, 0x158
movaps xmmword [rsp + 0x1f0], xmm7
mov rdx, rbx
movaps xmmword [rsp + 0x1e0], xmm8
movaps xmmword [rsp + 0x1d0], xmm9
movaps xmmword [rsp + 0x1b0], xmm11
movaps xmmword [rsp + 0x1a0], xmm12
call fcn.1400992e0
lea rdx, [rbp + 8]
lea r8, [rax + 0x140]
call fcn.1400999d0
mov r8, qword [0x1400df390]
lea rdx, [rsp + 0x50]
add r8, 0x110
call fcn.140099920
mov rdx, qword [rsp + 0x50]
add rdx, 0x158
call fcn.1400992e0
lea rdx, [rbp + 0x18]
lea r8, [rax + 0x140]
call fcn.1400999d0
cmp byte [0x1400df374], dil
mov rdx, rbx
movss xmm14, dword [0x1400ca764]
je 0x1400a97c2
call fcn.1400992e0
lea rdx, [rsp + 0x50]
lea r8, [rax + 0x14c]
call fcn.1400999d0
movss xmm6, dword [rsp + 0x58]
mov rdx, rbx
movss xmm7, dword [rsp + 0x54]
movss xmm8, dword [rsp + 0x50]
divss xmm6, dword [0x1400de2e8]
divss xmm7, dword [0x1400de2d4]
divss xmm8, dword [0x1400de2e8]
call fcn.1400992e0
lea rdx, [rsp + 0x40]
lea r8, [rax + 0x140]
call fcn.1400999d0
movss xmm10, dword [rsp + 0x48]
movss xmm9, dword [rsp + 0x44]
addss xmm10, xmm6
movss xmm12, dword [rsp + 0x40]
addss xmm9, xmm7
addss xmm12, xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm6, dword [0x1400ca578]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm14
subss xmm0, xmm6
mulss xmm0, dword [0x1400df34c]
addss xmm12, xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm11, eax
cvtdq2ps xmm11, xmm11
divss xmm11, xmm14
subss xmm11, xmm6
mulss xmm11, dword [0x1400df34c]
addss xmm11, xmm9
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movaps xmm1, xmm12
unpcklps xmm1, xmm11
movd xmm9, eax
cvtdq2ps xmm9, xmm9
divss xmm9, xmm14
subss xmm9, xmm6
mulss xmm9, dword [0x1400df34c]
addss xmm9, xmm10
movd eax, xmm9
jmp 0x1400a97ff
call fcn.1400992e0
lea rdx, [rsp + 0x50]
lea r8, [rax + 0x140]
call fcn.1400999d0
movsd xmm1, qword [rsp + 0x50]
mov eax, dword [rsp + 0x58]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rsp + 0x50], xmm1
movaps xmm11, xmm0
movss xmm12, dword [rsp + 0x50]
movd xmm9, eax
lea r8, [rsp + 0x40]
movsd qword [rsp + 0x40], xmm1
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x48], eax
call fcn.140097510
movss xmm10, dword [rsp + 0x50]
ucomiss xmm10, dword [0x1400ca798]
jp 0x1400a982f
je 0x1400a9f8c
xorps xmm0, xmm0
movaps xmmword [rsp + 0x190], xmm13
cvtsi2ss xmm0, dword [rbp - 0x40]
movss xmm13, dword [rsp + 0x54]
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rbp - 0x3c]
movaps xmm7, xmm10
subss xmm7, xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
movsd xmm1, qword [0x1400ca618]
cvtps2pd xmm0, xmm0
call fcn.1400b6e24
movsd xmm1, qword [0x1400ca618]
movaps xmm8, xmm0
cvtps2pd xmm0, xmm7
call fcn.1400b6e24
addsd xmm8, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm8
ja 0x1400a989c
xorps xmm0, xmm0
sqrtsd xmm0, xmm8
jmp 0x1400a98a5
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm8, xmm8
lea rcx, [rsp + 0x50]
cvtsd2ss xmm8, xmm0
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0x41]
mov dword [rsp + 0x40], 0x626f5206
xor ecx, ecx
mov dword [rsp + 0x44], 0x786f6c
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [rsp + 0x50]
lea rdx, str.Workspace
movd xmm2, dword [rsp + 0x54]
lea rcx, [rsp + 0x60]
cvtdq2ps xmm0, xmm0
mov r8d, 9
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
cvtdq2ps xmm2, xmm2
movaps xmm6, xmm10
movaps xmm7, xmm13
subss xmm6, xmm0
xorps xmm0, xmm0
subss xmm7, xmm2
movups xmmword [rsp + 0x60], xmm0
mulss xmm6, dword [0x1400de2d0]
mulss xmm7, dword [0x1400de2d0]
divss xmm6, dword [0x1400de2e4]
divss xmm7, dword [0x1400de2e4]
call fcn.140002040
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [0x1400df378]
call fcn.1400970c0
mov qword [rsp + 0x70], rdi
mov r8d, 6
mov qword [rsp + 0x78], rdi
lea rdx, str.Camera
lea rcx, [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
call fcn.140002040
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400970c0
mov rbx, qword [rsp + 0x40]
lea rdx, [rbp - 0x38]
lea r8, [rbx + 0xf4]
call fcn.1400999d0
mov r8d, dword [0x1400dfbb8]
lea rax, [rbp - 0x28]
mov rcx, qword [0x1400dfbb0]
add rbx, 0xd0
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x4f], edi
mov word [rbp - 0x4b], di
mov byte [rbp - 0x49], dil
mov dword [rbp - 0x70], 0x12b2d92
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x58], 0x24
mov dword [rbp - 0x6c], r8d
mov byte [rbp - 0x50], dil
test r8d, r8d
je 0x1400a9a42
test rcx, rcx
je 0x1400a9a42
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r8d, dword [0x1400dfbb8]
mov rcx, qword [0x1400dfbb0]
cmp byte [0x1400df306], dil
je 0x1400a9a60
movd xmm0, dword [0x1400de300]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm8
jb 0x1400a9f83
mov edx, dword [0x1400df348]
test edx, edx
je 0x1400a9f42
sub edx, 1
je 0x1400a9b8c
cmp edx, 1
jne 0x1400a9f83
mov rax, qword [0x1400dfba8]
test rax, rax
jne 0x1400a9b36
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x756f4d46
movups xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x54], 0x65536573
lea rax, [rsp + 0x51]
mov dword [rsp + 0x58], 0x63697672
mov r8, 0xffffffffffffffff
mov word [rsp + 0x5c], 0x65
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9ad0
lea rdx, [rsp + 0x51]
lea rcx, [rsp + 0x60]
call fcn.140002040
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [0x1400df378]
call fcn.1400970c0
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x1400a9f83
add rdx, 0xf0
call fcn.1400992e0
mov qword [0x1400dfba8], rax
test rax, rax
je 0x1400a9f83
mov r8d, dword [0x1400dfbb8]
mov rcx, qword [0x1400dfbb0]
add rax, 0xdc
mov dword [rbp - 0x7f], edi
mov qword [rsp + 0x68], rax
movaps xmm0, xmm10
unpcklps xmm0, xmm13
lea rax, [rsp + 0x50]
mov qword [rsp + 0x70], rax
movsd qword [rsp + 0x50], xmm0
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x78], 8
mov dword [rsp + 0x64], r8d
mov byte [rbp - 0x80], 1
test r8d, r8d
je 0x1400a9f83
jmp 0x1400a9f09
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
divss xmm7, xmm14
subss xmm7, dword [0x1400ca558]
mulss xmm7, dword [0x1400df34c]
addss xmm7, xmm12
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
divss xmm6, xmm14
subss xmm6, dword [0x1400ca558]
mulss xmm6, dword [0x1400df34c]
addss xmm6, xmm11
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
subss xmm7, dword [rbp - 0x38]
subss xmm6, dword [rbp - 0x34]
lea rdx, [rsp + 0x50]
movd xmm0, eax
lea rcx, [rsp + 0x40]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x50], xmm7
divss xmm0, xmm14
movss dword [rsp + 0x54], xmm6
subss xmm0, dword [0x1400ca558]
mulss xmm0, dword [0x1400df34c]
addss xmm0, xmm9
subss xmm0, dword [rbp - 0x30]
movss dword [rsp + 0x58], xmm0
call fcn.1400a7870
movss xmm6, dword [rsp + 0x48]
lea rdx, [rsp + 0x50]
movss xmm7, dword [rsp + 0x40]
lea rcx, [rsp + 0x40]
movss xmm8, dword [rsp + 0x44]
xorps xmm2, xmm2
movaps xmm0, xmm6
movaps xmm3, xmm8
mulss xmm3, xmm2
movaps xmm1, xmm7
mulss xmm1, xmm2
subss xmm0, xmm3
subss xmm3, xmm7
movss dword [rsp + 0x50], xmm0
movaps xmm0, xmm6
mulss xmm0, xmm2
movss dword [rsp + 0x58], xmm3
subss xmm1, xmm0
movss dword [rsp + 0x54], xmm1
call fcn.1400a7870
movss xmm5, dword [rsp + 0x48]
movaps xmm0, xmm6
movss xmm11, dword [rsp + 0x44]
movaps xmm9, xmm5
movss xmm3, dword [rsp + 0x40]
movaps xmm4, xmm6
mulss xmm0, xmm11
movaps xmm10, xmm11
mulss xmm9, xmm8
mulss xmm4, xmm3
subss xmm9, xmm0
mulss xmm10, xmm7
movaps xmm0, xmm5
movss dword [rsp + 0x6c], xmm11
mulss xmm0, xmm7
movss dword [rsp + 0x64], xmm9
subss xmm4, xmm0
movaps xmm0, xmm8
mulss xmm0, xmm3
subss xmm10, xmm0
movss dword [rsp + 0x70], xmm4
movss xmm0, dword [0x1400cae50]
xorps xmm3, xmm0
xorps xmm7, xmm0
xorps xmm8, xmm0
movss dword [rsp + 0x60], xmm3
xorps xmm5, xmm0
movss dword [rsp + 0x68], xmm7
movss dword [rsp + 0x7c], xmm10
movss dword [rsp + 0x74], xmm8
movss dword [rsp + 0x78], xmm5
cmp byte [0x1400df36b], dil
xorps xmm6, xmm0
jne 0x1400a9dd5
movups xmm0, xmmword [rsp + 0x60]
lea rax, [rbp - 0x70]
mov dword [rbp - 0x7f], edi
movups xmm1, xmmword [rsp + 0x70]
mov qword [rsp + 0x70], rax
mov eax, dword [0x1400dfbb8]
movss dword [rbp - 0x50], xmm6
movaps xmmword [rbp - 0x70], xmm0
movaps xmmword [rbp - 0x60], xmm1
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], 0x24
mov dword [rsp + 0x64], eax
mov byte [rbp - 0x80], 1
test eax, eax
je 0x1400a9f83
mov rcx, qword [0x1400dfbb0]
test rcx, rcx
je 0x1400a9f83
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x1400a9f83
subss xmm4, dword [rbp - 0x18]
subss xmm3, dword [rbp - 0x28]
movss xmm2, dword [0x1400de2d0]
lea rax, [rbp - 0x70]
divss xmm2, dword [0x1400de2e4]
mov dword [rbp - 0x7f], edi
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov byte [rbp - 0x80], 1
subss xmm8, dword [rbp - 0x14]
subss xmm9, dword [rbp - 0x24]
subss xmm5, dword [rbp - 0x10]
subss xmm7, dword [rbp - 0x20]
subss xmm10, dword [rbp - 0xc]
subss xmm11, dword [rbp - 0x1c]
subss xmm6, dword [rbp - 8]
mulss xmm4, xmm2
mulss xmm3, xmm2
addss xmm4, dword [rbp - 0x18]
mulss xmm8, xmm2
addss xmm3, dword [rbp - 0x28]
mulss xmm9, xmm2
addss xmm8, dword [rbp - 0x14]
shufps xmm4, xmm4, 0xe1
addss xmm9, dword [rbp - 0x24]
shufps xmm3, xmm3, 0xe1
mulss xmm5, xmm2
movss xmm4, xmm8
mulss xmm7, xmm2
movss xmm3, xmm9
shufps xmm4, xmm4, 0xc6
addss xmm5, dword [rbp - 0x10]
addss xmm7, dword [rbp - 0x20]
shufps xmm3, xmm3, 0xc6
mulss xmm10, xmm2
movss xmm4, xmm5
mulss xmm11, xmm2
movss xmm3, xmm7
shufps xmm4, xmm4, 0x27
addss xmm10, dword [rbp - 0xc]
addss xmm11, dword [rbp - 0x1c]
shufps xmm3, xmm3, 0x27
mulss xmm6, xmm2
movss xmm4, xmm10
shufps xmm4, xmm4, 0x39
movss xmm3, xmm11
addss xmm6, dword [rbp - 8]
movups xmmword [rsp + 0x70], xmm4
mov qword [rsp + 0x70], rax
mov eax, dword [0x1400dfbb8]
shufps xmm3, xmm3, 0x39
movss dword [rbp - 0x50], xmm6
movaps xmmword [rbp - 0x70], xmm3
movaps xmmword [rbp - 0x60], xmm4
mov qword [rsp + 0x78], 0x24
movups xmmword [rsp + 0x60], xmm3
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x64], eax
test eax, eax
je 0x1400a9f83
mov rcx, qword [0x1400dfbb0]
test rcx, rcx
je 0x1400a9f83
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x1400a9f83
mulss xmm6, dword [0x1400de2e4]
lea rdx, [rbp - 0x70]
mov r8d, 0x28
mov ecx, 1
mulss xmm7, dword [0x1400de2e4]
mov dword [rbp - 0x70], edi
cvttss2si eax, xmm6
mov dword [rbp - 0x60], edi
mov qword [rbp - 0x5c], 1
mov dword [rbp - 0x68], eax
cvttss2si eax, xmm7
mov dword [rbp - 0x64], eax
call qword [sym.imp.USER32.dll_SendInput]
movaps xmm13, xmmword [rsp + 0x190]
movaps xmm12, xmmword [rsp + 0x1a0]
movaps xmm11, xmmword [rsp + 0x1b0]
movaps xmm9, xmmword [rsp + 0x1d0]
movaps xmm8, xmmword [rsp + 0x1e0]
movaps xmm7, xmmword [rsp + 0x1f0]
movaps xmm6, xmmword [rsp + 0x200]
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1400b5c20
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop rbp
ret