Function at 0x14009ca00
Capabilities:
Check for unmoving mouse cursor
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x118]
sub rsp, 0x210
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x98], xmm14
mov rax, qword [0x14015a040]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rbx, rcx
lea rcx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0x41]
mov dword [rsp + 0x40], 0x626f5258
xor ecx, ecx
mov dword [rsp + 0x44], 0x786f6c
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp - 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov edx, dword [0x1404370f8]
xor edi, edi
mov rax, qword [0x140436258]
mov dword [rbp - 0x4f], edi
mov word [rbp - 0x4b], di
mov byte [rbp - 0x49], dil
mov dword [rbp - 0x70], 0x12b2d92
lea rcx, [rax + 0x730]
mov qword [rbp - 0x68], rcx
lea rcx, [rbp]
mov qword [rbp - 0x60], rcx
mov rcx, qword [0x1404370f0]
mov qword [rbp - 0x58], 8
mov dword [rbp - 0x6c], edx
mov byte [rbp - 0x50], dil
test edx, edx
je 0x14009cb03
test rcx, rcx
je 0x14009cb03
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [0x140436258]
mov edx, dword [0x1404370f8]
mov rcx, qword [0x1404370f0]
add rax, 0x4c0
mov dword [rbp - 0x7f], edi
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x70], rax
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x78], 0x40
mov dword [rsp + 0x64], edx
mov byte [rbp - 0x80], dil
test edx, edx
je 0x14009cb76
test rcx, rcx
je 0x14009cb76
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
add rbx, 0x158
mov rdx, rbx
call fcn.14008a220
lea rdx, [rbp + 8]
lea r8, [rax + 0x140]
call fcn.14008a6c0
mov rax, qword [0x1404362a0]
add rax, 0x110
mov dword [rbp - 0x4f], edi
mov qword [rbp - 0x68], rax
lea rax, [rsp + 0x50]
mov qword [rbp - 0x60], rax
mov eax, dword [0x1404370f8]
mov word [rbp - 0x4b], di
mov byte [rbp - 0x49], dil
mov dword [rbp - 0x70], 0x12b2d92
mov qword [rbp - 0x58], 8
mov dword [rbp - 0x6c], eax
mov byte [rbp - 0x50], dil
test eax, eax
je 0x14009cc16
mov rcx, qword [0x1404370f0]
test rcx, rcx
je 0x14009cc16
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rdx, qword [rsp + 0x50]
movaps xmmword [rsp + 0x200], xmm6
add rdx, 0x158
movaps xmmword [rsp + 0x1f0], xmm7
movaps xmmword [rsp + 0x1e0], xmm8
movaps xmmword [rsp + 0x1d0], xmm9
movaps xmmword [rsp + 0x1b0], xmm11
movaps xmmword [rsp + 0x1a0], xmm12
call fcn.14008a220
lea rdx, [rbp + 0x18]
lea r8, [rax + 0x140]
call fcn.14008a6c0
cmp byte [0x140436282], dil
mov rdx, rbx
movss xmm14, dword [0x140140f0c]
je 0x14009cd8b
call fcn.14008a220
lea rdx, [rsp + 0x50]
lea r8, [rax + 0x14c]
call fcn.14008a6c0
movss xmm6, dword [rsp + 0x58]
mov rdx, rbx
movss xmm7, dword [rsp + 0x54]
movss xmm8, dword [rsp + 0x50]
divss xmm6, dword [0x140435298]
divss xmm7, dword [0x140435284]
divss xmm8, dword [0x140435298]
call fcn.14008a220
lea rdx, [rsp + 0x40]
lea r8, [rax + 0x140]
call fcn.14008a6c0
movss xmm10, dword [rsp + 0x48]
movss xmm9, dword [rsp + 0x44]
addss xmm10, xmm6
movss xmm12, dword [rsp + 0x40]
addss xmm9, xmm7
addss xmm12, xmm8
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movss xmm6, dword [0x140140d08]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm14
subss xmm0, xmm6
mulss xmm0, dword [0x140436268]
addss xmm12, xmm0
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm11, eax
cvtdq2ps xmm11, xmm11
divss xmm11, xmm14
subss xmm11, xmm6
mulss xmm11, dword [0x140436268]
addss xmm11, xmm9
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movaps xmm1, xmm12
unpcklps xmm1, xmm11
movd xmm9, eax
cvtdq2ps xmm9, xmm9
divss xmm9, xmm14
subss xmm9, xmm6
mulss xmm9, dword [0x140436268]
addss xmm9, xmm10
movd eax, xmm9
jmp 0x14009cdc8
call fcn.14008a220
lea rdx, [rsp + 0x50]
lea r8, [rax + 0x140]
call fcn.14008a6c0
movsd xmm1, qword [rsp + 0x50]
mov eax, dword [rsp + 0x58]
movaps xmm0, xmm1
shufps xmm0, xmm0, 0x55
movsd qword [rsp + 0x50], xmm1
movaps xmm11, xmm0
movss xmm12, dword [rsp + 0x50]
movd xmm9, eax
lea r8, [rsp + 0x40]
movsd qword [rsp + 0x40], xmm1
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x48], eax
call fcn.140088450
movss xmm10, dword [rsp + 0x50]
ucomiss xmm10, dword [0x140140f30]
jp 0x14009cdf8
je 0x14009d552
xorps xmm0, xmm0
movaps xmmword [rsp + 0x190], xmm13
cvtsi2ss xmm0, dword [rbp - 0x40]
movss xmm13, dword [rsp + 0x54]
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rbp - 0x3c]
movaps xmm7, xmm10
subss xmm7, xmm0
movaps xmm0, xmm13
subss xmm0, xmm1
movsd xmm1, qword [0x140140d90]
cvtps2pd xmm0, xmm0
call fcn.140114317
movsd xmm1, qword [0x140140d90]
movaps xmm8, xmm0
cvtps2pd xmm0, xmm7
call fcn.140114317
addsd xmm8, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm8
ja 0x14009ce65
xorps xmm0, xmm0
sqrtsd xmm0, xmm8
jmp 0x14009ce6e
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm8, xmm8
lea rcx, [rsp + 0x50]
cvtsd2ss xmm8, xmm0
call qword [sym.imp.USER32.dll_GetCursorPos]
lea rdx, [rsp + 0x41]
mov dword [rsp + 0x40], 0x626f5276
xor ecx, ecx
mov dword [rsp + 0x44], 0x786f6c
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_ScreenToClient]
movd xmm0, dword [rsp + 0x50]
lea rdx, str.Workspace
movd xmm2, dword [rsp + 0x54]
lea rcx, [rsp + 0x60]
cvtdq2ps xmm0, xmm0
mov r8d, 9
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
cvtdq2ps xmm2, xmm2
movaps xmm6, xmm10
movaps xmm7, xmm13
subss xmm6, xmm0
xorps xmm0, xmm0
subss xmm7, xmm2
movups xmmword [rsp + 0x60], xmm0
mulss xmm6, dword [0x140435280]
mulss xmm7, dword [0x140435280]
divss xmm6, dword [0x140435294]
divss xmm7, dword [0x140435294]
call fcn.14000c790
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [0x140436288]
call fcn.140088160
mov qword [rsp + 0x70], rdi
mov r8d, 6
mov qword [rsp + 0x78], rdi
lea rdx, str.Camera
lea rcx, [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
call fcn.14000c790
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140088160
mov rbx, qword [rsp + 0x40]
lea rdx, [rbp - 0x38]
lea r8, [rbx + 0xf4]
call fcn.14008a6c0
mov r8d, dword [0x1404370f8]
lea rax, [rbp - 0x28]
mov rcx, qword [0x1404370f0]
add rbx, 0xd0
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x4f], edi
mov word [rbp - 0x4b], di
mov byte [rbp - 0x49], dil
mov dword [rbp - 0x70], 0x12b2d92
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x58], 0x24
mov dword [rbp - 0x6c], r8d
mov byte [rbp - 0x50], dil
test r8d, r8d
je 0x14009d00b
test rcx, rcx
je 0x14009d00b
mov qword [rsp + 0x38], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rdi
lea r8, [rbp - 0x70]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r8d, dword [0x1404370f8]
mov rcx, qword [0x1404370f0]
cmp byte [0x140436254], dil
je 0x14009d029
movd xmm0, dword [0x1404352b0]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm8
jb 0x14009d549
mov edx, dword [0x140436260]
test edx, edx
je 0x14009d508
sub edx, 1
je 0x14009d152
cmp edx, 1
jne 0x14009d549
mov rax, qword [0x1404370e8]
test rax, rax
jne 0x14009d0fc
xorps xmm0, xmm0
mov dword [rsp + 0x50], 0x756f4d2a
movups xmmword [rsp + 0x60], xmm0
mov dword [rsp + 0x54], 0x65536573
lea rax, [rsp + 0x51]
mov dword [rsp + 0x58], 0x63697672
mov r8, 0xffffffffffffffff
mov word [rsp + 0x5c], 0x65
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rdi
inc r8
cmp byte [rax + r8], dil
jne 0x14009d096
lea rdx, [rsp + 0x51]
lea rcx, [rsp + 0x60]
call fcn.14000c790
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [0x140436288]
call fcn.140088160
mov rdx, qword [rsp + 0x50]
test rdx, rdx
je 0x14009d549
add rdx, 0xf0
call fcn.14008a220
mov qword [0x1404370e8], rax
test rax, rax
je 0x14009d549
mov r8d, dword [0x1404370f8]
mov rcx, qword [0x1404370f0]
add rax, 0xdc
mov dword [rbp - 0x7f], edi
mov qword [rsp + 0x68], rax
movaps xmm0, xmm10
unpcklps xmm0, xmm13
lea rax, [rsp + 0x50]
mov qword [rsp + 0x70], rax
movsd qword [rsp + 0x50], xmm0
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x78], 8
mov dword [rsp + 0x64], r8d
mov byte [rbp - 0x80], 1
test r8d, r8d
je 0x14009d549
jmp 0x14009d4cf
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm7, eax
cvtdq2ps xmm7, xmm7
divss xmm7, xmm14
subss xmm7, dword [0x140140cf8]
mulss xmm7, dword [0x140436268]
addss xmm7, xmm12
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
divss xmm6, xmm14
subss xmm6, dword [0x140140cf8]
mulss xmm6, dword [0x140436268]
addss xmm6, xmm11
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
subss xmm7, dword [rbp - 0x38]
subss xmm6, dword [rbp - 0x34]
lea rdx, [rsp + 0x50]
movd xmm0, eax
lea rcx, [rsp + 0x40]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x50], xmm7
divss xmm0, xmm14
movss dword [rsp + 0x54], xmm6
subss xmm0, dword [0x140140cf8]
mulss xmm0, dword [0x140436268]
addss xmm0, xmm9
subss xmm0, dword [rbp - 0x30]
movss dword [rsp + 0x58], xmm0
call fcn.14009a820
movss xmm6, dword [rsp + 0x48]
lea rdx, [rsp + 0x50]
movss xmm7, dword [rsp + 0x40]
lea rcx, [rsp + 0x40]
movss xmm8, dword [rsp + 0x44]
xorps xmm2, xmm2
movaps xmm0, xmm6
movaps xmm3, xmm8
mulss xmm3, xmm2
movaps xmm1, xmm7
mulss xmm1, xmm2
subss xmm0, xmm3
subss xmm3, xmm7
movss dword [rsp + 0x50], xmm0
movaps xmm0, xmm6
mulss xmm0, xmm2
movss dword [rsp + 0x58], xmm3
subss xmm1, xmm0
movss dword [rsp + 0x54], xmm1
call fcn.14009a820
movss xmm5, dword [rsp + 0x48]
movaps xmm0, xmm6
movss xmm11, dword [rsp + 0x44]
movaps xmm9, xmm5
movss xmm3, dword [rsp + 0x40]
movaps xmm4, xmm6
mulss xmm0, xmm11
movaps xmm10, xmm11
mulss xmm9, xmm8
mulss xmm4, xmm3
subss xmm9, xmm0
mulss xmm10, xmm7
movaps xmm0, xmm5
movss dword [rsp + 0x6c], xmm11
mulss xmm0, xmm7
movss dword [rsp + 0x64], xmm9
subss xmm4, xmm0
movaps xmm0, xmm8
mulss xmm0, xmm3
subss xmm10, xmm0
movss dword [rsp + 0x70], xmm4
movss xmm0, dword [0x140141930]
xorps xmm3, xmm0
xorps xmm7, xmm0
xorps xmm8, xmm0
movss dword [rsp + 0x60], xmm3
xorps xmm5, xmm0
movss dword [rsp + 0x68], xmm7
movss dword [rsp + 0x7c], xmm10
movss dword [rsp + 0x74], xmm8
movss dword [rsp + 0x78], xmm5
cmp byte [0x14043627a], dil
xorps xmm6, xmm0
jne 0x14009d39b
movups xmm0, xmmword [rsp + 0x60]
lea rax, [rbp - 0x70]
mov dword [rbp - 0x7f], edi
movups xmm1, xmmword [rsp + 0x70]
mov qword [rsp + 0x70], rax
mov eax, dword [0x1404370f8]
movss dword [rbp - 0x50], xmm6
movaps xmmword [rbp - 0x70], xmm0
movaps xmmword [rbp - 0x60], xmm1
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x78], 0x24
mov dword [rsp + 0x64], eax
mov byte [rbp - 0x80], 1
test eax, eax
je 0x14009d549
mov rcx, qword [0x1404370f0]
test rcx, rcx
je 0x14009d549
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x14009d549
subss xmm4, dword [rbp - 0x18]
subss xmm3, dword [rbp - 0x28]
movss xmm2, dword [0x140435280]
lea rax, [rbp - 0x70]
divss xmm2, dword [0x140435294]
mov dword [rbp - 0x7f], edi
mov word [rbp - 0x7b], di
mov byte [rbp - 0x79], dil
mov byte [rbp - 0x80], 1
subss xmm8, dword [rbp - 0x14]
subss xmm9, dword [rbp - 0x24]
subss xmm5, dword [rbp - 0x10]
subss xmm7, dword [rbp - 0x20]
subss xmm10, dword [rbp - 0xc]
subss xmm11, dword [rbp - 0x1c]
subss xmm6, dword [rbp - 8]
mulss xmm4, xmm2
mulss xmm3, xmm2
addss xmm4, dword [rbp - 0x18]
mulss xmm8, xmm2
addss xmm3, dword [rbp - 0x28]
mulss xmm9, xmm2
addss xmm8, dword [rbp - 0x14]
shufps xmm4, xmm4, 0xe1
addss xmm9, dword [rbp - 0x24]
shufps xmm3, xmm3, 0xe1
mulss xmm5, xmm2
movss xmm4, xmm8
mulss xmm7, xmm2
movss xmm3, xmm9
shufps xmm4, xmm4, 0xc6
addss xmm5, dword [rbp - 0x10]
addss xmm7, dword [rbp - 0x20]
shufps xmm3, xmm3, 0xc6
mulss xmm10, xmm2
movss xmm4, xmm5
mulss xmm11, xmm2
movss xmm3, xmm7
shufps xmm4, xmm4, 0x27
addss xmm10, dword [rbp - 0xc]
addss xmm11, dword [rbp - 0x1c]
shufps xmm3, xmm3, 0x27
mulss xmm6, xmm2
movss xmm4, xmm10
shufps xmm4, xmm4, 0x39
movss xmm3, xmm11
addss xmm6, dword [rbp - 8]
movups xmmword [rsp + 0x70], xmm4
mov qword [rsp + 0x70], rax
mov eax, dword [0x1404370f8]
shufps xmm3, xmm3, 0x39
movss dword [rbp - 0x50], xmm6
movaps xmmword [rbp - 0x70], xmm3
movaps xmmword [rbp - 0x60], xmm4
mov qword [rsp + 0x78], 0x24
movups xmmword [rsp + 0x60], xmm3
mov dword [rsp + 0x60], 0x12b2d92
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x64], eax
test eax, eax
je 0x14009d549
mov rcx, qword [0x1404370f0]
test rcx, rcx
je 0x14009d549
mov qword [rsp + 0x38], rdi
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rdi
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], 0x28
mov r9d, 0x28
mov edx, 0x224a14
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x14009d549
mulss xmm6, dword [0x140435294]
lea rdx, [rbp - 0x70]
mov r8d, 0x28
mov ecx, 1
mulss xmm7, dword [0x140435294]
mov dword [rbp - 0x70], edi
cvttss2si eax, xmm6
mov dword [rbp - 0x60], edi
mov qword [rbp - 0x5c], 1
mov dword [rbp - 0x68], eax
cvttss2si eax, xmm7
mov dword [rbp - 0x64], eax
call qword [sym.imp.USER32.dll_SendInput]
movaps xmm13, xmmword [rsp + 0x190]
movaps xmm12, xmmword [rsp + 0x1a0]
movaps xmm11, xmmword [rsp + 0x1b0]
movaps xmm9, xmmword [rsp + 0x1d0]
movaps xmm8, xmmword [rsp + 0x1e0]
movaps xmm7, xmmword [rsp + 0x1f0]
movaps xmm6, xmmword [rsp + 0x200]
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140112f50
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm14, xmmword [r11 - 0x90]
mov rsp, r11
pop rbp
ret