Function at 0x140006ee0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x158]
sub rsp, 0x230
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140124040]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov rdi, rcx
mov rsi, rdx
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [0x140221ae0]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
lea rdx, [rsp + 0x48]
call fcn.14000d24c
lea rdx, [rbp + 0x40]
call fcn.14000d290
movzx eax, byte [0x140221aa2]
lea r8, [rbp - 0x40]
movups xmm10, xmmword [0x140221ad0]
mov ecx, 0x65
mov r15d, 9
xorps xmm0, xmm0
mov qword [rbp - 0x30], r15
sub ecx, eax
xor r14d, r14d
movups xmmword [rbp - 0x40], xmm0
lea ebx, [r15 + 6]
mov eax, 0x51eb851f
movsd xmm0, qword [str.Workspace]
imul ecx
movups xmmword [rbp], xmm10
movsd qword [rbp - 0x40], xmm0
lea rcx, [0x140221a68]
mov qword [rbp - 0x28], rbx
sar edx, 5
mov eax, edx
mov byte [rbp - 0x37], r14b
shr eax, 0x1f
add edx, eax
mov al, byte [0x140104650]
mov byte [rbp - 0x38], al
movd xmm11, edx
lea rdx, [rbp - 0x10]
cvtdq2ps xmm11, xmm11
movss dword [rbp - 0x58], xmm11
call fcn.14000d054
mov ecx, dword [str.Camera]
lea r8, [rsp + 0x50]
xorps xmm0, xmm0
mov qword [rsp + 0x60], 6
movups xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x50], ecx
lea rdx, [rbp - 0x68]
movzx ecx, word [0x140104658]
mov word [rsp + 0x54], cx
mov rcx, rax
mov qword [rsp + 0x68], rbx
mov byte [rsp + 0x56], r14b
call fcn.14000d054
mov rbx, qword [rbp - 0x68]
lea r8d, [r15 + 3]
xor eax, eax
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x48], eax
lea rcx, [rbx + 0xf4]
call fcn.140009444
xorps xmm0, xmm0
lea r12, [rbx + 0xd0]
xor eax, eax
lea r8d, [r15 + 0x1b]
mov rcx, r12
mov dword [rbp + 0x30], eax
lea rdx, [rbp + 0x10]
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
call fcn.140009444
cmp byte [0x140221a7f], r14b
je 0x1400072fa
cmp byte [0x140221aa3], r14b
je 0x1400070c9
mov eax, dword [rsi + 8]
movsd xmm0, qword [rsi]
mov dword [rsp + 0x38], eax
lea rax, [rsp + 0x30]
movsd qword [rsp + 0x30], xmm0
jmp 0x1400070d6
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.14000d41c
movsd xmm0, qword [rax]
lea rdx, [rsp + 0x30]
mov ebx, dword [rax + 8]
mov rcx, rdi
movsd qword [rsp + 0x20], xmm0
call fcn.14000d2d8
mov al, byte [0x1401240ee]
movss xmm0, dword [0x1401106c0]
movss xmm6, dword [0x1401241d0]
test al, al
je 0x140007110
movaps xmm8, xmm6
jmp 0x140007114
movaps xmm8, xmm0
test al, al
je 0x140007122
movss xmm7, dword [0x1401241a0]
jmp 0x140007125
movaps xmm7, xmm0
test al, al
jne 0x14000712c
movaps xmm6, xmm0
cmp byte [0x140221abe], r14b
movss xmm9, dword [rsp + 0x38]
movss xmm15, dword [rsp + 0x34]
movss xmm14, dword [rsp + 0x30]
je 0x14000729f
movq rax, xmm10
test rax, rax
je 0x14000729f
lea rdx, [rbp - 0x10]
lea rcx, [rbp]
call fcn.14000d21c
xorps xmm0, xmm0
mov qword [rsp + 0x60], r14
mov r8d, 0x10
mov qword [rsp + 0x68], r14
lea rdx, str.HumanoidRootPart
lea rcx, [rsp + 0x50]
movups xmmword [rsp + 0x50], xmm0
call fcn.1400021f0
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x10]
call fcn.14000d054
cmp qword [rbp - 0x68], r14
je 0x14000729f
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
call fcn.14000d2d8
movss xmm2, dword [rsp + 0x30]
movss xmm0, dword [rsp + 0x34]
subss xmm2, xmm14
movss xmm1, dword [rsp + 0x38]
subss xmm0, xmm15
subss xmm1, xmm9
mulss xmm2, xmm2
mulss xmm0, xmm0
mulss xmm1, xmm1
addss xmm0, xmm2
addss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [0x1401241b4]
movaps xmm2, xmm0
comiss xmm1, xmm2
mov al, byte [0x1401240ee]
jbe 0x140007238
movss xmm0, dword [0x1401106c0]
movss xmm6, dword [0x1401241b8]
test al, al
je 0x140007226
movaps xmm8, xmm6
jmp 0x14000722a
movaps xmm8, xmm0
test al, al
je 0x140007295
movss xmm7, dword [0x1401241b0]
jmp 0x140007298
movss xmm0, dword [0x1401241a4]
comiss xmm0, xmm2
movss xmm0, dword [0x1401106c0]
jbe 0x140007271
movss xmm6, dword [0x1401241d4]
test al, al
je 0x14000725f
movaps xmm8, xmm6
jmp 0x140007263
movaps xmm8, xmm0
test al, al
je 0x140007295
movss xmm7, dword [0x14012418c]
jmp 0x140007298
movss xmm6, dword [0x1401241c4]
test al, al
je 0x140007283
movaps xmm8, xmm6
jmp 0x140007287
movaps xmm8, xmm0
test al, al
je 0x140007295
movss xmm7, dword [0x1401241a8]
jmp 0x140007298
movaps xmm7, xmm0
test al, al
jne 0x14000729f
movaps xmm6, xmm0
cmp dword [0x140221aa4], r14d
movss xmm0, dword [rsp + 0x20]
movss xmm1, dword [rsp + 0x24]
movd xmm2, ebx
jne 0x1400072c7
divss xmm0, xmm8
divss xmm1, xmm7
divss xmm2, xmm6
jmp 0x1400072d4
mulss xmm0, xmm8
mulss xmm1, xmm7
mulss xmm2, xmm6
addss xmm14, xmm0
addss xmm15, xmm1
addss xmm9, xmm2
movss dword [rsp + 0x20], xmm14
movss dword [rsp + 0x24], xmm15
movss dword [rsp + 0x28], xmm9
jmp 0x140007325
lea rdx, [rsp + 0x30]
mov rcx, rdi
call fcn.14000d2d8
movsd xmm0, qword [rax]
movss xmm9, dword [rax + 8]
movsd qword [rsp + 0x20], xmm0
movss xmm14, dword [rsp + 0x20]
movss xmm15, dword [rsp + 0x24]
movaps xmm0, xmmword [rbp + 0x40]
lea r8, [rsp + 0x50]
movaps xmm1, xmmword [rbp + 0x50]
lea rcx, [rsp + 0x20]
mov rdx, qword [rsp + 0x48]
movaps xmmword [rsp + 0x50], xmm0
movaps xmm0, xmmword [rbp + 0x60]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm0, xmm14
movaps xmmword [rsp + 0x60], xmm1
movaps xmm1, xmmword [rbp + 0x70]
unpcklps xmm0, xmm15
movsd qword [rsp + 0x20], xmm0
movss dword [rbp - 0x70], xmm9
movss dword [rsp + 0x28], xmm9
movaps xmmword [rbp - 0x80], xmm1
call fcn.14000c0fc
movss xmm10, dword [0x1401108ec]
mov qword [rsp + 0x48], rax
movss xmm8, dword [rsp + 0x48]
ucomiss xmm8, xmm10
jp 0x140007398
je 0x140007a44
movss xmm0, dword [rsp + 0x4c]
movaps xmm2, xmm8
mov edi, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x40]
movd xmm1, edi
cvtdq2ps xmm1, xmm1
subss xmm0, xmm1
movd xmm1, ebx
cvtdq2ps xmm1, xmm1
mulss xmm0, xmm0
subss xmm2, xmm1
mulss xmm2, xmm2
addss xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cmp byte [0x140221a7a], r14b
movaps xmm12, xmm0
movss dword [rbp - 0x54], xmm0
xorps xmm13, xmm13
xorps xmm6, xmm6
xorps xmm7, xmm7
mov r13d, 1
je 0x14000762f
lea ecx, [r13 + 0x56]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx edi, ax
lea ecx, [r13 + 0x52]
shr edi, 0xf
and dil, r13b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx esi, ax
lea rdx, [rbp - 0x10]
shr esi, 0xf
lea rcx, [0x140221a80]
and sil, r13b
call fcn.14000d1ec
lea rdx, [rbp]
lea rcx, [rbp - 0x10]
call fcn.14000d21c
xorps xmm0, xmm0
mov qword [rsp + 0x60], r14
lea r8d, [r13 + 0xf]
mov qword [rsp + 0x68], r14
lea rdx, str.HumanoidRootPart
mov rbx, rax
lea rcx, [rsp + 0x50]
movups xmmword [rsp + 0x50], xmm0
call fcn.1400021f0
lea r8, [rsp + 0x50]
mov rcx, rbx
lea rdx, [rbp - 0x68]
call fcn.14000d054
mov rax, qword gs:[0x58]
mov ecx, 4
mov rax, qword [rax]
mov ecx, dword [rcx + rax]
cmp dword [0x140223210], ecx
jle 0x1400074c3
lea rcx, [0x140223210]
call fcn.1400dc360
cmp dword [0x140223210], 0xffffffff
jne 0x1400074c3
lea rdx, [0x140223218]
lea rcx, [rbp - 0x68]
call fcn.14000d2d8
lea rcx, [0x140223210]
call fcn.1400dc2f4
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x68]
call fcn.14000d2d8
cmp byte [0x140210b10], r14b
xorps xmm8, xmm8
movss xmm10, dword [rsp + 0x28]
xorps xmm9, xmm9
movss xmm11, dword [rsp + 0x20]
jne 0x14000754b
movaps xmm8, xmm11
movaps xmm9, xmm10
subss xmm8, dword [0x140223218]
subss xmm9, dword [0x140223220]
movaps xmm1, xmm8
movaps xmm0, xmm9
mulss xmm1, xmm8
mulss xmm0, xmm9
addss xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
ucomiss xmm0, xmm13
jp 0x14000752d
je 0x140007537
divss xmm8, xmm0
divss xmm9, xmm0
mulss xmm8, dword [0x1401107a4]
mulss xmm9, dword [0x1401107a4]
jmp 0x140007552
mov byte [0x140210b10], r14b
movss xmm12, dword [rsp + 0x24]
test dil, dil
je 0x14000756d
addss xmm11, xmm8
addss xmm12, xmm13
addss xmm10, xmm9
test sil, sil
je 0x14000757c
addss xmm11, xmm8
addss xmm10, xmm9
subss xmm11, dword [0x140223218]
subss xmm10, dword [0x140223220]
lea r8, [rsp + 0x20]
movss dword [rsp + 0x24], xmm12
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x68]
mulss xmm11, dword [0x1401106bc]
mulss xmm10, dword [0x1401106bc]
addss xmm11, dword [0x140223218]
addss xmm10, dword [0x140223220]
movss dword [rsp + 0x20], xmm11
movss dword [rsp + 0x28], xmm10
call fcn.14000d348
lea rcx, [rsp + 0x30]
movss dword [0x140223218], xmm11
movss dword [0x14022321c], xmm12
movss dword [0x140223220], xmm10
mov qword [rsp + 0x30], r13
call fcn.140006d84
mov rbx, qword [rsp + 0x40]
mov edi, dword [rsp + 0x44]
movss xmm9, dword [rbp - 0x70]
movss xmm8, dword [rsp + 0x48]
movss xmm10, dword [0x1401108ec]
movss xmm11, dword [rbp - 0x58]
movss xmm12, dword [rbp - 0x54]
cmp byte [0x140221aa0], r14b
je 0x1400076d3
cmp dword [0x140221ab8], r14d
jne 0x14000772b
movss xmm0, dword [0x1401241d8]
mulss xmm0, dword [0x1401107dc]
cvttss2si ebx, xmm0
movss xmm0, dword [0x14012419c]
mulss xmm0, dword [0x1401107dc]
cvttss2si edi, xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov esi, eax
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
sub ebx, eax
and esi, ebx
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm0, dword [rsp + 0x40]
movaps xmm6, xmm8
movss xmm7, dword [rsp + 0x4c]
mov ecx, eax
cvtdq2ps xmm0, xmm0
mov eax, edi
cdq
sub eax, edx
sar eax, 1
movd xmm1, esi
sub edi, eax
cvtdq2ps xmm1, xmm1
and ecx, edi
subss xmm6, xmm0
movd xmm0, dword [rsp + 0x44]
cvtdq2ps xmm0, xmm0
addss xmm6, xmm1
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
subss xmm7, xmm0
addss xmm7, xmm1
jmp 0x1400076f3
movss xmm7, dword [rsp + 0x4c]
movaps xmm6, xmm8
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
subss xmm6, xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
subss xmm7, xmm0
mulss xmm6, dword [0x1401241cc]
mulss xmm7, dword [0x1401241cc]
divss xmm6, dword [0x1401241e0]
divss xmm7, dword [0x1401241dc]
ucomiss xmm6, xmm10
jp 0x14000771f
je 0x140007a44
ucomiss xmm7, xmm10
jp 0x14000772b
je 0x140007a44
cmp byte [0x140221aa1], r14b
je 0x140007749
movd xmm0, dword [0x1401241ac]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm12
jb 0x140007a44
mov ecx, dword [0x140221a64]
test ecx, ecx
je 0x1400079cd
sub ecx, r13d
je 0x14000781e
cmp ecx, r13d
jne 0x140007a44
movss xmm1, dword [0x1402219c8]
lea rdx, [rsp + 0x50]
movss xmm0, dword [0x1402219c4]
subss xmm6, xmm1
subss xmm7, xmm0
mov qword [rsp + 0x50], r14
mov r8d, 0x28
mov qword [rsp + 0x6c], r14
mov ecx, r13d
mov dword [rsp + 0x74], r14d
mov qword [rsp + 0x64], r13
mulss xmm6, xmm11
mov dword [rsp + 0x60], r14d
mulss xmm7, xmm11
addss xmm1, xmm6
addss xmm0, xmm7
cvttss2si eax, xmm1
movss dword [0x1402219c8], xmm1
mov dword [rsp + 0x58], eax
cvttss2si eax, xmm0
movss dword [0x1402219c4], xmm0
mov dword [rsp + 0x5c], eax
call qword [sym.imp.USER32.dll_SendInput]
cmp byte [0x140210a48], r14b
jne 0x1400077fe
xor ecx, ecx
call qword [sym.imp.USER32.dll_ClipCursor]
cmp byte [0x140210a48], r14b
je 0x140007a44
mov rcx, qword [0x140221ae0]
lea rdx, [rbp - 0x10]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [rbp - 0x10]
call qword [sym.imp.USER32.dll_ClipCursor]
jmp 0x140007a44
subss xmm14, dword [rbp - 0x50]
subss xmm15, dword [rbp - 0x4c]
subss xmm9, dword [rbp - 0x48]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x30]
movss dword [rsp + 0x20], xmm14
movss dword [rsp + 0x24], xmm15
movss dword [rsp + 0x28], xmm9
call fcn.140006e38
movss xmm9, dword [rsp + 0x38]
lea rdx, [rsp + 0x20]
movss xmm7, dword [rsp + 0x30]
lea rcx, [rsp + 0x30]
movss xmm8, dword [rsp + 0x34]
movaps xmm0, xmm9
movaps xmm2, xmm8
movaps xmm1, xmm7
mulss xmm2, xmm13
mulss xmm1, xmm13
subss xmm0, xmm2
subss xmm2, xmm7
movss dword [rsp + 0x20], xmm0
movaps xmm0, xmm9
mulss xmm0, xmm13
movss dword [rsp + 0x28], xmm2
subss xmm1, xmm0
movss dword [rsp + 0x24], xmm1
call fcn.140006e38
movss xmm1, dword [rsp + 0x30]
movaps xmm0, xmm9
movss xmm6, dword [rsp + 0x38]
movaps xmm3, xmm9
movss xmm5, dword [rsp + 0x34]
movaps xmm4, xmm6
mulss xmm0, xmm5
movaps xmm2, xmm5
xor eax, eax
mulss xmm3, xmm1
mov dword [rsp + 0x70], eax
mulss xmm4, xmm8
mulss xmm2, xmm7
subss xmm4, xmm0
movss dword [rsp + 0x5c], xmm5
movaps xmm0, xmm6
mulss xmm6, xmm10
mulss xmm0, xmm7
movss dword [rsp + 0x54], xmm4
movss dword [rsp + 0x68], xmm6
subss xmm3, xmm0
movaps xmm0, xmm8
mulss xmm0, xmm1
mulss xmm1, xmm10
subss xmm2, xmm0
movss dword [rsp + 0x60], xmm3
movss xmm0, dword [0x140110cd0]
xorps xmm7, xmm0
movss dword [rsp + 0x50], xmm1
xorps xmm8, xmm0
movss dword [rsp + 0x58], xmm7
xorps xmm9, xmm0
movss dword [rsp + 0x64], xmm8
movups xmm0, xmmword [rsp + 0x50]
movss dword [rsp + 0x6c], xmm2
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rbp - 0x40], xmm0
xorps xmm0, xmm0
movss dword [rbp - 0x20], xmm9
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rbp - 0x30], xmm1
movss xmm0, dword [rbp + r14 - 0x40]
subss xmm0, dword [rbp + r14 + 0x10]
mulss xmm0, xmm11
addss xmm0, dword [rbp + r14 + 0x10]
movss dword [rsp + r14 + 0x50], xmm0
add r14, 4
sub r15, r13
jne 0x140007978
movups xmm0, xmmword [rsp + 0x50]
mov eax, dword [rsp + 0x70]
lea r8d, [r15 + 0x24]
movups xmm1, xmmword [rsp + 0x60]
lea rdx, [rbp - 0x40]
mov rcx, r12
movaps xmmword [rbp - 0x40], xmm0
movaps xmmword [rbp - 0x30], xmm1
mov dword [rbp - 0x20], eax
call fcn.1400094e0
jmp 0x140007a44
movss xmm1, dword [0x14022314c]
lea rdx, [rsp + 0x50]
movss xmm0, dword [0x140223148]
subss xmm6, xmm1
subss xmm7, xmm0
mov qword [rsp + 0x50], r14
mov r8d, 0x28
mov qword [rsp + 0x6c], r14
mov ecx, r13d
mov dword [rsp + 0x74], r14d
mov qword [rsp + 0x64], r13
mulss xmm6, xmm11
mov dword [rsp + 0x60], r14d
mulss xmm7, xmm11
addss xmm1, xmm6
addss xmm0, xmm7
cvttss2si eax, xmm1
movss dword [0x14022314c], xmm1
mov dword [rsp + 0x58], eax
cvttss2si eax, xmm0
movss dword [0x140223148], xmm0
mov dword [rsp + 0x5c], eax
call qword [sym.imp.USER32.dll_SendInput]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.1400dbf10
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret