Function at 0x1400168e0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x1400f5040]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov r14, rdx
mov qword [rsp + 0x78], rdx
mov r13, rcx
xor esi, esi
mov rbx, qword [0x1401093b8]
mov r15, rbx
mov rax, qword [rbx + 0x4018]
mov byte [rax + 0xc0], 1
mov r12, qword [rbx + 0x4018]
cmp byte [r12 + 0xc3], sil
jne 0x140017460
movsxd r8, dword [r12 + 0x100]
mov rax, qword [r12 + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
call fcn.14001d0e0
mov edi, eax
mov rcx, qword [r12]
cmp dword [rcx + 0x4064], eax
jne 0x1400169b8
mov r8, r13
lea edx, [rsi + 0xb]
mov ecx, eax
call fcn.140033a00
mov rbx, qword [0x1401093b8]
movss xmm3, dword [r12 + 0x110]
movss xmm1, dword [r12 + 0x114]
mov rax, qword [rbx + 0x4018]
movaps xmm2, xmm1
addss xmm2, dword [0x1400e4e7c]
movaps xmm0, xmm3
addss xmm0, dword [rax + 0x30]
movss dword [rbp - 0x60], xmm3
movss dword [rbp - 0x5c], xmm1
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x54], xmm2
subss xmm2, xmm1
subss xmm0, xmm3
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm2
movss xmm1, dword [r15 + 0x3930]
lea rcx, [rbp - 0x80]
call fcn.14002c8a0
xor r9d, r9d
lea r8, [rbp - 0x60]
mov edx, edi
lea rcx, [rbp - 0x60]
call fcn.14002ca10
test al, al
je 0x140017460
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x14010b370], eax
jle 0x140016ab2
lea rcx, [0x14010b370]
call fcn.1400bded8
cmp dword [0x14010b370], 0xffffffff
jne 0x140016ab2
mov qword [0x14010b3d8], rsi
mov qword [0x14010b3e0], rsi
mov ecx, 0x28
call fcn.1400bda30
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [0x14010b3d8], rax
lea rcx, [0x1400c0570]
call fcn.1400bdd64
nop
lea rcx, [0x14010b370]
call fcn.1400bde6c
mov rbx, qword [0x14010b3d8]
mov rax, qword [rbx + 8]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov dword [rbp - 0x70], ecx
mov rsi, rbx
cmp byte [rax + 0x19], cl
jne 0x140016af4
nop
mov qword [rbp - 0x78], rax
cmp dword [rax + 0x1c], edi
jae 0x140016ae2
mov dword [rbp - 0x70], ecx
mov rax, qword [rax + 0x10]
jmp 0x140016aef
mov dword [rbp - 0x70], 1
mov rsi, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], cl
je 0x140016ad0
cmp byte [rsi + 0x19], cl
jne 0x140016afe
cmp edi, dword [rsi + 0x1c]
jae 0x140016b6b
movabs rax, 0x666666666666666
cmp qword [0x14010b3e0], rax
je 0x1400174b1
lea rsi, [0x14010b3d8]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rcx
mov ecx, 0x28
call fcn.1400bda30
nop
mov dword [rax + 0x1c], edi
xor ecx, ecx
mov qword [rax + 0x20], rcx
mov byte [rax + 0x21], cl
mov dword [rax + 0x24], ecx
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
mov word [rax + 0x18], cx
movups xmm0, xmmword [rbp - 0x78]
movaps xmmword [rsp + 0x60], xmm0
mov r8, rax
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.140017a60
mov rsi, rax
mov rcx, qword [0x140109460]
call fcn.140029a80
mov ecx, dword [str.Select]
mov dword [rbp - 0x20], ecx
movzx ecx, word [0x1400e34ac]
mov word [rbp - 0x1c], cx
movzx ecx, byte [0x1400e34ae]
mov byte [rbp - 0x1a], cl
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rax
mov byte [rbp + 0x1f], al
call fcn.140029b20
mov byte [rsp + 0x50], 0
movsxd rax, dword [r14]
mov dword [rbp - 0x80], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea r9, str.None
mov r9, qword [r9 + rax*8]
mov r14, 0xffffffffffffffff
mov rbx, r14
nop dword [rax]
inc rbx
cmp byte [r9 + rbx], 0
jne 0x140016bf0
lea rcx, [rbp - 0x50]
cmp rbx, 0xf
ja 0x140016c1a
mov qword [rbp - 0x40], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x50], 0
jmp 0x140016c27
mov qword [rsp + 0x20], rbx
mov rdx, rbx
call fcn.1400178d0
mov rax, qword [rsp + 0x78]
cmp dword [rax], 0
je 0x140016c4c
lea rbx, [r15 + 0x407c]
cmp dword [rbx], edi
je 0x140016c4c
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r8, qword [rbp - 0x50]
jmp 0x140016c5e
lea rbx, [r15 + 0x407c]
cmp dword [rbx], edi
jne 0x140016c6d
lea r8, str.Select
mov edx, 0x40
lea rcx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r8d, r8d
mov edx, edi
lea rcx, [rbp - 0x60]
call fcn.140020950
mov byte [rsp + 0x70], al
test al, al
je 0x140016cdc
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140016cdc
cmp dword [rbx], edi
je 0x140016cc6
xor eax, eax
mov dword [r15 + 0xe50], eax
mov byte [r15 + 0xe54], al
lea rcx, [r15 + 0xb58]
xor edx, edx
mov r8d, 0x29a
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x78]
mov dword [rax], 0
mov rdx, r12
mov ecx, edi
call fcn.140020550
xor edx, edx
mov rcx, r12
call fcn.1400295d0
jmp 0x140016cf9
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140016cf9
cmp dword [rbx], edi
jne 0x140016d58
xor edx, edx
xor ecx, ecx
call fcn.140020550
cmp dword [rbx], edi
jne 0x140016d58
xor ebx, ebx
nop
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140016d21
mov edi, ebx
mov dword [rbp - 0x80], ebx
mov byte [rsp + 0x50], 1
xor edx, edx
xor ecx, ecx
call fcn.140020550
jmp 0x140016d24
mov edi, dword [rbp - 0x80]
inc ebx
cmp ebx, 0xa5
jle 0x140016d00
xor edx, edx
mov ecx, 0x20e
lea r8d, [rdx + 1]
call fcn.14002a800
test al, al
mov rax, qword [rsp + 0x78]
je 0x140016d56
xor edi, edi
mov dword [rax], edi
xor edx, edx
xor ecx, ecx
call fcn.140020550
jmp 0x140016d5a
mov dword [rax], edi
xor edi, edi
mov rbx, qword [0x1401093b8]
mov qword [rsp + 0x30], rdi
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
movss xmm9, dword [0x1400e4f74]
movss dword [rsp + 0x20], xmm9
movss xmm3, dword [0x1400e4f50]
movss xmm2, dword [rbx + 0x3d40]
lea rdx, [rsp + 0x60]
mov rcx, qword [rbx + 0x3d38]
call fcn.14003db00
movss xmm0, dword [rsp + 0x60]
addss xmm0, dword [0x1400e4d3c]
cvttss2si eax, xmm0
movd xmm15, eax
cvtdq2ps xmm15, xmm15
movss dword [rbp - 0x80], xmm15
movss xmm0, dword [0x14010b0f0]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x14010b0f4]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x14010b0f8]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010b0fc]
mulss xmm1, dword [rbx + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001d690
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400e4e1c]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x60]
mov rcx, qword [r12 + 0x2a8]
call fcn.1400387f0
mov r8, qword [r12 + 0x2a8]
mov r9, qword [0x1401093b8]
movss xmm0, dword [0x14010b270]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x14010b274]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x14010b278]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010b27c]
mulss xmm1, dword [r9 + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001d690
mov r10d, eax
movss xmm12, dword [rbp - 0x5c]
movaps xmm1, xmm12
addss xmm1, dword [0x1400e4e34]
movss xmm0, dword [rbp - 0x60]
addss xmm0, dword [0x1400e4e30]
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
mov rcx, qword [0x140109460]
movss xmm2, dword [rcx + 0x14]
xorps xmm8, xmm8
test eax, 0xff000000
je 0x140016f4a
inc r14
cmp byte [r14 + r13], 0
jne 0x140016ed4
add r14, r13
cmp r13, r14
je 0x140016f4a
test rcx, rcx
jne 0x140016ef3
mov rax, qword [r8 + 0x38]
mov rcx, qword [rax + 8]
ucomiss xmm2, xmm8
jp 0x140016f04
jne 0x140016f04
mov rax, qword [r8 + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r10d
lea r9, [rsp + 0x78]
mov rdx, r8
call fcn.14003dd20
mov r9, qword [0x1401093b8]
mov eax, 0x30
mov r8d, 0xf0
cmp byte [rsi + 0x20], 0
cmovne r8d, eax
movss xmm0, dword [0x14010b2a0]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x14010b2a4]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x14010b2a8]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010b2ac]
mulss xmm1, dword [r9 + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001d690
movss xmm10, dword [rbp - 0x54]
movaps xmm0, xmm10
subss xmm0, dword [0x1400e4e1c]
movss xmm11, dword [rbp - 0x58]
movaps xmm7, xmm11
subss xmm7, dword [0x1400e4e30]
movss dword [rsp + 0x78], xmm7
movss dword [rsp + 0x7c], xmm0
movaps xmm2, xmm12
addss xmm2, dword [0x1400e4e1c]
movaps xmm6, xmm11
subss xmm6, dword [0x1400e4e50]
subss xmm6, xmm15
movss dword [rbp - 0x60], xmm6
movss dword [rbp - 0x5c], xmm2
mov dword [rsp + 0x28], r8d
movss xmm0, dword [0x1400e4df0]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x60]
mov rcx, qword [r12 + 0x2a8]
call fcn.1400387f0
mov rcx, qword [0x140109460]
call fcn.140029a80
mov rax, qword [0x1401093b8]
movss xmm0, dword [0x14010b280]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x14010b284]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x14010b288]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010b28c]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001d690
mov edx, eax
xor ecx, ecx
call fcn.14001dba0
movss xmm15, dword [0x1400e4d04]
mov dword [rbp - 0x60], 0x3f000000
mov dword [rbp - 0x5c], 0x3f000000
movaps xmm0, xmm10
subss xmm0, dword [0x1400e4e24]
movss dword [rsp + 0x78], xmm7
movss dword [rsp + 0x7c], xmm0
movaps xmm1, xmm12
addss xmm1, dword [0x1400e4e14]
movss dword [rsp + 0x60], xmm6
movss dword [rsp + 0x64], xmm1
mov qword [rsp + 0x30], rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.14001e980
mov r8, qword [0x1401093b8]
movsxd rax, dword [r8 + 0x4a40]
cmp eax, 1
jl 0x14001713c
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a48]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a40]
call fcn.140029b20
movss xmm1, dword [0x1400e4d44]
cmp byte [rsp + 0x70], 0
je 0x14001715a
cmp byte [r15 + 0x3869], 0
jne 0x14001717c
movzx eax, byte [rsi + 0x20]
test al, al
je 0x14001718e
cmp byte [r15 + 0x3868], 0
jne 0x140017176
cmp byte [r15 + 0x3869], 0
je 0x14001718a
cmp byte [rsi + 0x21], 0
jne 0x14001718a
cmp byte [rsi + 0x20], 0
sete al
mov byte [rsi + 0x20], al
test al, al
je 0x14001718e
movaps xmm9, xmm1
movss xmm0, dword [r15 + 0x18]
mulss xmm0, dword [0x1400e4e1c]
mulss xmm0, xmm9
addss xmm0, dword [rsi + 0x24]
comiss xmm8, xmm0
ja 0x1400171b4
minss xmm1, xmm0
movaps xmm8, xmm1
movss dword [rsi + 0x24], xmm8
comiss xmm8, dword [0x1400e4cc0]
jb 0x14001741b
movaps xmm1, xmm8
xor ecx, ecx
call fcn.14001dc70
mov rbx, qword [0x1401093b8]
lea rcx, [rbx + 0x4a50]
movss xmm0, dword [rbx + 0x3900]
mov dword [rsp + 0x60], 3
movss dword [rsp + 0x64], xmm0
lea rdx, [rsp + 0x60]
call fcn.1400342e0
mov dword [rbx + 0x3900], 0x40800000
mov rbx, qword [0x1401093b8]
lea rcx, [rbx + 0x4a50]
movss xmm1, dword [rbx + 0x38f8]
movss xmm0, dword [rbx + 0x38fc]
mov dword [rsp + 0x60], 2
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x68], xmm0
lea rdx, [rsp + 0x60]
call fcn.1400342e0
mov qword [rbx + 0x38f8], 0
mov rax, qword [0x1401093b8]
movss xmm0, dword [0x14010b2a0]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x14010b2a4]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x14010b2a8]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010b2ac]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001d690
mov edx, eax
mov ecx, 2
call fcn.14001dba0
mov rax, qword [0x1401093b8]
movss xmm0, dword [rax + 0x3940]
addss xmm0, xmm0
addss xmm0, dword [0x1400e4ea0]
mov dword [rax + 0x49e8], 0x42c80000
movss dword [rax + 0x49ec], xmm0
mov dword [rax + 0x49d0], 1
subss xmm10, dword [0x1400e4e1c]
movaps xmm1, xmm11
subss xmm1, dword [0x1400e4e30]
addss xmm12, dword [0x1400e4e1c]
subss xmm11, dword [0x1400e4e50]
subss xmm11, dword [rbp - 0x80]
addss xmm10, xmm12
mulss xmm10, xmm15
subss xmm10, dword [0x1400e4f84]
addss xmm1, xmm11
mulss xmm1, xmm15
subss xmm1, dword [0x1400e4e88]
or dword [rax + 0x49c8], 3
movss dword [rax + 0x49d8], xmm1
movss dword [rax + 0x49dc], xmm10
mov qword [rax + 0x49e0], 0
mov dword [rax + 0x49cc], 1
xor edx, edx
mov r8d, 0x1147
mov rcx, r13
call fcn.140026ea0
cmp dword [rdi], 0
sete dl
lea rcx, str.Hold
call fcn.140012b60
test al, al
je 0x140017391
mov dword [rdi], edi
mov byte [rsi + 0x20], 0
cmp dword [rdi], 1
sete dl
lea rcx, str.Toggle
call fcn.140012b60
test al, al
je 0x1400173b1
mov dword [rdi], 1
mov byte [rsi + 0x20], 0
cmp dword [rdi], 2
sete dl
lea rcx, str.Always
call fcn.140012b60
test al, al
je 0x1400173d1
mov dword [rdi], 2
mov byte [rsi + 0x20], 0
call fcn.140029300
mov ecx, 3
call fcn.14001dd80
mov r8, qword [0x1401093b8]
movsxd rax, dword [r8 + 0x4a40]
cmp eax, 1
jl 0x14001741b
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a48]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a40]
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140017459
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140017454
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140017454
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bdd84
movzx eax, byte [rsp + 0x50]
jmp 0x140017462
xor al, al
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1400bda10
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm15, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400108e0
int3