Function at 0x1800065d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x130
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
mov rax, qword [0x1800772c0]
xor rax, rsp
mov qword [rbp - 0x28], rax
mov r12, rcx
mov qword [rsp + 0x50], r8
mov ecx, dword [0x180077020]
mov r13, r9
mov rsi, r8
movzx r15d, dl
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180006ba0
cmp byte [0x1800778e0], 0
je 0x180006bb1
movss xmm7, dword [0x180063d58]
lea rcx, [rbp - 0x80]
mov r14d, 0xffffffff
call fcn.18005a300
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
movd xmm8, eax
cvtdq2ps xmm8, xmm8
mulss xmm8, dword [0x180063d34]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x180077b20]
xor edi, edi
mov r8, qword [0x180077b18]
movss xmm10, dword [0x180063e38]
sub rcx, r8
movd xmm9, eax
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
cvtdq2ps xmm9, xmm9
sar rdx, 4
mulss xmm9, dword [0x180063d34]
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1800067fb
movss xmm6, dword [0x180063d2c]
xor ebx, ebx
nop
cmp byte [rbx + r8 + 9], 0
je 0x1800067bf
mov rsi, qword [rbx + r8]
cmp rsi, r12
je 0x1800067bf
cmp byte [rbx + r8 + 8], r15b
je 0x1800067bf
lea rcx, [rsp + 0x40]
call fcn.18005a300
mov rcx, qword [0x180077a90]
lea rdx, [rsi + 0xee4]
mov r9d, 0xc
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x48]
lea r8, [rsp + 0x40]
addss xmm0, xmm10
mov rdx, r13
lea rcx, [rsp + 0x60]
movss dword [rsp + 0x48], xmm0
call fcn.18005a400
comiss xmm6, dword [rsp + 0x68]
jae 0x1800067b8
movss xmm0, dword [rsp + 0x60]
movss xmm1, dword [rsp + 0x64]
subss xmm0, xmm8
subss xmm1, xmm9
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x180006793
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x18000679b
movaps xmm0, xmm1
call fcn.1800610de
comiss xmm7, xmm0
jbe 0x1800067b8
mov eax, dword [rsp + 0x48]
movaps xmm7, xmm0
movsd xmm0, qword [rsp + 0x40]
mov r14d, edi
movsd qword [rbp - 0x80], xmm0
mov dword [rbp - 0x78], eax
mov r8, qword [0x180077b18]
mov rcx, qword [0x180077b20]
inc edi
sub rcx, r8
movabs rax, 0x2e8ba2e8ba2e8ba3
imul rcx
add rbx, 0x58
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jb 0x1800066e0
mov rsi, qword [rsp + 0x50]
cmp byte [0x1800778e1], 0
je 0x180006b53
movsxd rax, dword [0x180077028]
cmp eax, 0xffffffff
je 0x180006b53
imul rdi, rax, 0x58
add rdi, r8
cmp byte [rdi + 9], 0
je 0x180006ba0
mov rcx, qword [rdi]
add rcx, 0x34c
call fcn.180003a70
test eax, eax
je 0x180006ba0
mov rbx, qword [rdi]
lea rcx, [rsp + 0x40]
call fcn.18005a300
mov rcx, qword [0x180077a90]
lea r8, [rsp + 0x40]
xor r14d, r14d
lea rdx, [rbx + 0xee4]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x48]
mov rcx, qword [rdi]
addss xmm0, xmm10
add rcx, 0x408
movss dword [rsp + 0x48], xmm0
call fcn.180006570
mov rcx, qword [rdi]
movaps xmm7, xmm0
add rcx, 0x410
call fcn.180006570
mov rcx, qword [rdi]
movaps xmm6, xmm0
add rcx, 0x428
call fcn.180006570
movaps xmm3, xmm0
lea rcx, [rbp - 0x48]
movaps xmm2, xmm6
movaps xmm1, xmm7
call fcn.18005a2e0
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.18005a5e0
movaps xmm2, xmm0
lea rdx, [rsp + 0x70]
movd xmm0, dword [0x180077024]
lea rcx, [rbp - 0x48]
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
call fcn.18005a310
mov r8, rax
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x40]
call fcn.18005a380
mov rax, qword [0x180077ac0]
lea r8, [rsp + 0x50]
mov rdx, qword [0x180077a80]
add rax, 0x28
mov rcx, qword [0x180077a90]
add rdx, rax
mov r9d, 8
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x180006bb1
lea rcx, [rsp + 0x70]
call fcn.18005a300
mov rcx, qword [0x180077a90]
lea r8, [rsp + 0x70]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x44]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8, rsi
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x38]
call fcn.18005a340
movss xmm6, dword [rsp + 0x60]
movss xmm7, dword [rsp + 0x64]
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
movss xmm9, dword [0x180063e3c]
movaps xmm8, xmm0
mulss xmm7, xmm7
xorps xmm0, xmm0
mulss xmm6, xmm6
mulss xmm8, xmm9
addss xmm7, xmm6
ucomiss xmm0, xmm7
ja 0x1800069cf
xorps xmm0, xmm0
sqrtss xmm0, xmm7
jmp 0x1800069d7
movaps xmm0, xmm7
call fcn.1800610de
movaps xmm1, xmm0
movss xmm0, dword [rsp + 0x68]
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
mulss xmm0, xmm9
lea rcx, [rsp + 0x30]
xorps xmm3, xmm3
movaps xmm2, xmm8
xorps xmm6, xmm6
xorps xmm0, xmmword [0x180063e60]
movaps xmm1, xmm0
call fcn.18005a2e0
movsd xmm0, qword [rsp + 0x30]
movss xmm3, dword [0x180063e40]
movsd qword [rsp + 0x60], xmm0
movss xmm0, dword [rsp + 0x30]
comiss xmm0, xmm3
ja 0x180006a3a
movss xmm3, dword [0x180063e48]
comiss xmm3, xmm0
ja 0x180006a3a
movss xmm3, dword [rsp + 0x60]
movss xmm0, dword [0x180063e4c]
movss xmm2, dword [rsp + 0x64]
comiss xmm0, xmm2
jbe 0x180006a5e
movss xmm1, dword [0x180063e44]
addss xmm2, xmm1
comiss xmm0, xmm2
ja 0x180006a55
movss xmm0, dword [0x180063d50]
comiss xmm2, xmm0
jbe 0x180006a7c
movss xmm1, dword [0x180063e50]
addss xmm2, xmm1
comiss xmm2, xmm0
ja 0x180006a73
subss xmm3, dword [rsp + 0x70]
subss xmm2, dword [rsp + 0x74]
mov rcx, qword [0x180077a90]
lea r8, [rsp + 0x30]
mov r9d, 0xc
movss dword [rsp + 0x38], xmm6
lea rdx, [rbx + 0x44]
mov qword [rsp + 0x20], r14
divss xmm3, dword [0x18007702c]
divss xmm2, dword [0x18007702c]
addss xmm3, dword [rsp + 0x70]
addss xmm2, dword [rsp + 0x74]
unpcklps xmm3, xmm2
movsd qword [rsp + 0x30], xmm3
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rcx, [rsp + 0x50]
call fcn.180008520
mov rax, qword [rsp + 0x50]
sub rax, qword [0x1800778e8]
cmp rax, 0x1ddca740
jge 0x180006aff
cmp byte [0x1800778e2], r14b
jne 0x180006bb1
xor eax, eax
lea rdx, [rbp - 0x70]
xorps xmm0, xmm0
mov qword [rbp - 0x50], rax
movups xmmword [rbp - 0x70], xmm0
mov eax, 0x33
mov dword [rbp - 0x70], 1
mov r8d, 0x28
mov word [rbp - 0x68], ax
mov ecx, 1
movups xmmword [rbp - 0x60], xmm0
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, 0x28
mov dword [rbp - 0x64], 2
lea rdx, [rbp - 0x70]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
jmp 0x180006bb1
cmp r14d, 0xffffffff
je 0x180006bb1
movsxd rax, r14d
imul rcx, rax, 0x58
cmp byte [rcx + r8 + 9], 0
je 0x180006bb1
mov rcx, qword [rcx + r8]
add rcx, 0x34c
call fcn.180003a70
test eax, eax
je 0x180006bb1
lea rcx, [rsp + 0x50]
mov dword [0x180077028], r14d
mov byte [0x1800778e1], 1
call fcn.180008520
mov rcx, qword [rax]
mov qword [0x1800778e8], rcx
jmp 0x180006bb1
mov byte [0x1800778e1], 0
mov dword [0x180077028], 0xffffffff
mov rcx, qword [rbp - 0x28]
xor rcx, rsp
call fcn.1800604f0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret