Function at 0x18003f460
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x120
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov rax, qword [0x18029b200]
xor rax, rsp
mov qword [rbp - 0x30], rax
mov r15d, r8d
mov r12, rdx
mov rdx, rcx
mov qword [rsp + 0x68], rcx
mov rcx, qword [0x18029dac0]
mov rax, qword [rcx + 0x1c40]
mov byte [rax + 0x90], 1
mov r14, qword [rcx + 0x1c40]
cmp byte [r14 + 0x93], 0
je 0x18003f4d8
xor al, al
jmp 0x18003fab9
mov rbx, qword [0x18029dac0]
mov qword [rsp + 0x70], rbx
xor r8d, r8d
mov rcx, r14
call fcn.18000d1c0
mov edi, eax
call fcn.18000d030
movss xmm2, dword [r14 + 0xd8]
movss xmm3, dword [r14 + 0xdc]
movaps xmm4, xmm3
addss xmm4, dword [0x18012c564]
movaps xmm1, xmm2
addss xmm1, dword [0x18012c564]
movss dword [rbp - 0x50], xmm2
movss dword [rbp - 0x4c], xmm3
movss dword [rbp - 0x48], xmm1
movss dword [rbp - 0x44], xmm4
movss xmm1, dword [rbx + 0x15b0]
lea rcx, [rbp - 0x50]
call fcn.18000f6f0
xor r9d, r9d
xor r8d, r8d
mov edx, edi
lea rcx, [rbp - 0x50]
call fcn.18000f3f0
mov ecx, dword [0x18029ef40]
mov rax, qword gs:[0x58]
mov edx, Ordinal_41
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x18029dbc0], eax
jg 0x18003fafa
mov rsi, qword [0x18029dbb0]
mov rax, qword [rsi + 8]
mov rbx, rsi
movzx edx, byte [rax + 0x19]
test dl, dl
jne 0x18003f5ab
mov rcx, rax
cmp dword [rcx + 0x1c], edi
jae 0x18003f59f
mov rcx, qword [rcx + 0x10]
jmp 0x18003f5a5
mov rbx, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], 0
je 0x18003f594
cmp byte [rbx + 0x19], 0
jne 0x18003f5b6
cmp edi, dword [rbx + 0x1c]
jae 0x18003f5b9
mov rbx, rsi
xor r8d, r8d
cmp rbx, rsi
jne 0x18003f705
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x50], r8
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x58], r8
mov dword [rsp + 0x78], edi
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x7c], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rbp - 0x74], xmm1
movups xmm6, xmmword [rsp + 0x58]
movups xmmword [rbp - 0x64], xmm6
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x40], r8d
mov rcx, rsi
test dl, dl
jne 0x18003f63d
mov qword [rsp + 0x38], rax
cmp dword [rax + 0x1c], edi
jae 0x18003f629
mov dword [rsp + 0x40], r8d
mov rax, qword [rax + 0x10]
jmp 0x18003f637
mov dword [rsp + 0x40], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r8b
je 0x18003f614
cmp byte [rcx + 0x19], r8b
jne 0x18003f64c
cmp edi, dword [rcx + 0x1c]
jae 0x18003f6d3
movabs rax, 0x333333333333333
cmp qword [0x18029dbb8], rax
je 0x18003faf4
lea rbx, [0x18029dbb0]
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], r8
mov ecx, 0x50
call fcn.18011e6b4
nop
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rax + 0x1c], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rax + 0x2c], xmm1
movups xmm0, xmmword [rbp - 0x68]
movups xmmword [rax + 0x3c], xmm0
psrldq xmm6, 0xc
movd dword [rax + 0x4c], xmm6
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
mov word [rax + 0x18], 0
movups xmm0, xmmword [rsp + 0x38]
movaps xmmword [rbp - 0x40], xmm0
mov r8, rax
lea rdx, [rbp - 0x40]
mov rcx, rbx
call fcn.18001b820
mov rsi, qword [0x18029dbb0]
xor r8d, r8d
mov rax, qword [rsi + 8]
mov rbx, rsi
cmp byte [rax + 0x19], 0
jne 0x18003f6f7
cmp dword [rax + 0x1c], edi
jae 0x18003f6eb
mov rax, qword [rax + 0x10]
jmp 0x18003f6f1
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18003f6e0
cmp byte [rbx + 0x19], 0
jne 0x18003f702
cmp edi, dword [rbx + 0x1c]
jae 0x18003f705
mov rbx, rsi
mov dword [rsp + 0x20], r8d
lea r9, [rsp + 0x31]
lea r8, [rsp + 0x30]
mov edx, edi
lea rcx, [rbp - 0x50]
call fcn.180036e70
test al, al
je 0x18003f72e
mov dword [r12], r15d
mov ecx, edi
call fcn.18000ff30
movss xmm6, dword [rbp - 0x48]
subss xmm6, dword [rbp - 0x50]
movss xmm7, dword [rbp - 0x44]
subss xmm7, dword [rbp - 0x4c]
lea rcx, [rbp - 0x40]
call fcn.18000d310
addss xmm6, dword [rbp - 0x50]
movss xmm2, dword [rbp - 0x4c]
addss xmm7, xmm2
movss xmm1, dword [rbp - 0x40]
comiss xmm1, dword [rbp - 0x50]
jb 0x18003f78c
comiss xmm6, xmm1
jb 0x18003f78c
movss xmm0, dword [rbp - 0x3c]
comiss xmm0, xmm2
jb 0x18003f78c
comiss xmm7, xmm0
jb 0x18003f78c
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movzx esi, ax
and sil, 1
jmp 0x18003f791
movzx esi, byte [rsp + 0x30]
mov r8d, 1
mov edx, edi
lea rcx, [rbp - 0x50]
call fcn.1800162d0
lea rcx, [0x180197120]
lea rax, [0x1801970e0]
cmp dword [r12], r15d
cmovne rax, rcx
movups xmm6, xmmword [rax]
lea r13, [rbx + 0x40]
movaps xmm5, xmm6
subss xmm5, dword [r13]
movss xmm3, dword [0x180197308]
mulss xmm5, xmm3
addss xmm5, dword [r13]
movaps xmm4, xmm6
shufps xmm4, xmm6, 0x55
subss xmm4, dword [rbx + 0x44]
mulss xmm4, xmm3
addss xmm4, dword [rbx + 0x44]
movaps xmm2, xmm6
shufps xmm2, xmm6, 0xaa
subss xmm2, dword [rbx + 0x48]
mulss xmm2, xmm3
addss xmm2, dword [rbx + 0x48]
shufps xmm6, xmm6, 0xff
subss xmm6, dword [rbx + 0x4c]
mulss xmm6, xmm3
addss xmm6, dword [rbx + 0x4c]
shufps xmm5, xmm5, 0xe1
movss xmm5, xmm4
shufps xmm5, xmm5, 0xc6
movss xmm5, xmm2
shufps xmm5, xmm5, 0x27
movss xmm5, xmm6
shufps xmm5, xmm5, 0x39
movups xmmword [rbp - 0x40], xmm5
movups xmmword [r13], xmm5
lea rax, [rbp - 0x40]
cmp dword [r12], r15d
jne 0x18003f852
movups xmm0, xmmword [0x1801970e0]
movups xmmword [rbp - 0x40], xmm0
jmp 0x18003f880
movss xmm0, dword [0x1801970e0]
movss xmm1, dword [0x1801970e4]
movss xmm2, dword [0x1801970e8]
movss dword [rbp - 0x40], xmm0
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm2
mov dword [rbp - 0x34], 0
movups xmm6, xmmword [rax]
movaps xmm5, xmm6
subss xmm5, dword [rbx + 0x30]
movss xmm3, dword [0x180197308]
mulss xmm5, xmm3
addss xmm5, dword [rbx + 0x30]
movaps xmm4, xmm6
shufps xmm4, xmm6, 0x55
subss xmm4, dword [rbx + 0x34]
mulss xmm4, xmm3
addss xmm4, dword [rbx + 0x34]
movaps xmm2, xmm6
shufps xmm2, xmm6, 0xaa
subss xmm2, dword [rbx + 0x38]
mulss xmm2, xmm3
addss xmm2, dword [rbx + 0x38]
shufps xmm6, xmm6, 0xff
subss xmm6, dword [rbx + 0x3c]
mulss xmm6, xmm3
addss xmm6, dword [rbx + 0x3c]
shufps xmm5, xmm5, 0xe1
movss xmm5, xmm4
shufps xmm5, xmm5, 0xc6
movss xmm5, xmm2
shufps xmm5, xmm5, 0x27
movss xmm5, xmm6
shufps xmm5, xmm5, 0x39
movups xmmword [rbp - 0x40], xmm5
movups xmmword [rbx + 0x30], xmm5
lea rax, [rbp - 0x40]
cmp dword [r12], r15d
jne 0x18003f913
movups xmm0, xmmword [0x180197150]
movups xmmword [rbp - 0x40], xmm0
jmp 0x18003f941
movss xmm0, dword [0x180197150]
movss xmm1, dword [0x180197154]
movss xmm2, dword [0x180197158]
movss dword [rbp - 0x40], xmm0
movss dword [rbp - 0x3c], xmm1
movss dword [rbp - 0x38], xmm2
mov dword [rbp - 0x34], 0
movups xmm6, xmmword [rax]
lea rcx, [rbx + 0x20]
movaps xmm5, xmm6
subss xmm5, dword [rcx]
movss xmm3, dword [0x180197308]
mulss xmm5, xmm3
addss xmm5, dword [rcx]
movaps xmm4, xmm6
shufps xmm4, xmm6, 0x55
subss xmm4, dword [rbx + 0x24]
mulss xmm4, xmm3
addss xmm4, dword [rbx + 0x24]
movaps xmm2, xmm6
shufps xmm2, xmm6, 0xaa
subss xmm2, dword [rbx + 0x28]
mulss xmm2, xmm3
addss xmm2, dword [rbx + 0x28]
shufps xmm6, xmm6, 0xff
subss xmm6, dword [rbx + 0x2c]
mulss xmm6, xmm3
addss xmm6, dword [rbx + 0x2c]
shufps xmm5, xmm5, 0xe1
movss xmm5, xmm4
shufps xmm5, xmm5, 0xc6
movss xmm5, xmm2
shufps xmm5, xmm5, 0x27
movss xmm5, xmm6
shufps xmm5, xmm5, 0x39
movups xmmword [rbp - 0x40], xmm5
movups xmmword [rcx], xmm5
mov rbx, qword [r14 + 0x270]
mov rax, qword [rsp + 0x70]
movss xmm6, dword [rax + 0x15b4]
call fcn.18000cec0
xor r15d, r15d
mov dword [rsp + 0x28], r15d
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rbp - 0x48]
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.18001f0c0
mov rcx, qword [0x18029db50]
call fcn.180015130
mov rdi, qword [r14 + 0x270]
mov rcx, r13
call fcn.18000cec0
mov ebx, eax
movss xmm7, dword [rbp - 0x48]
movss xmm9, dword [rbp - 0x44]
movss xmm6, dword [rbp - 0x50]
movss xmm8, dword [rbp - 0x4c]
movss xmm0, dword [0x180127ac8]
movss dword [rsp + 0x20], xmm0
xor r9d, r9d
xor r8d, r8d
mov r14, qword [rsp + 0x68]
mov rdx, r14
lea rcx, [rsp + 0x68]
call fcn.180009a10
movss xmm2, dword [rax + 4]
subss xmm7, xmm6
movss xmm1, dword [0x180127a30]
mulss xmm7, xmm1
addss xmm7, xmm6
movss xmm0, dword [rax]
mulss xmm0, xmm1
subss xmm7, xmm0
movss dword [rbp - 0x40], xmm7
subss xmm9, xmm8
mulss xmm9, xmm1
addss xmm9, xmm8
mulss xmm2, xmm1
subss xmm9, xmm2
movss dword [rbp - 0x3c], xmm9
mov qword [rsp + 0x20], r15
mov r9, r14
mov r8d, ebx
lea rdx, [rbp - 0x40]
mov rcx, rdi
call fcn.18001f800
call fcn.180014d20
movzx eax, sil
mov rcx, qword [rbp - 0x30]
xor rcx, rsp
call fcn.18011eca0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18001baa0
int3
lea rcx, [0x18029dbc0]
call fcn.18011eb10
cmp dword [0x18029dbc0], 0xffffffff
jne 0x18003f57b
mov ecx, 0x50
call fcn.18011e6b4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [0x18029dbb0], rax
lea rcx, [0x180124740]
call fcn.18011ea50
nop
lea rcx, [0x18029dbc0]
call fcn.18011eaa4
jmp 0x18003f57b