Function at 0x18003cc8c
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xc8]
sub rsp, 0x188
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
movsxd rbx, edx
mov rdi, rcx
mov r10, qword [0x180591d80]
mov rax, qword [r10 + 0x3ed0]
mov byte [rax + 0xb0], 1
mov r15, qword [r10 + 0x3ed0]
xor r13d, r13d
cmp byte [r15 + 0xb3], r13b
je 0x18003cd22
xor al, al
jmp 0x18003d59e
mov r12, qword [0x180591d80]
xor r8d, r8d
mov rdx, rdi
mov rcx, r15
call fcn.18000a7c4
mov esi, eax
call fcn.180006e74
movss xmm7, dword [0x1800fd0b4]
movss xmm13, dword [0x1800a64a0]
addss xmm7, xmm13
movss xmm6, dword [0x1800fd0b0]
addss xmm6, dword [0x1800a622c]
movss xmm15, dword [0x1800a6314]
movss dword [rsp + 0x20], xmm15
mov r9b, 1
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.18000715c
addss xmm7, dword [r15 + 0xfc]
movss xmm5, dword [r15 + 0xf8]
addss xmm6, xmm5
movss dword [rsp + 0x68], xmm5
movss xmm4, dword [r15 + 0xfc]
movss dword [rsp + 0x6c], xmm4
movss dword [rsp + 0x70], xmm6
movss dword [rsp + 0x74], xmm7
movaps xmm3, xmm7
movss xmm14, dword [0x1800a62a8]
subss xmm3, xmm14
movaps xmm2, xmm6
subss xmm2, dword [0x1800a622c]
movaps xmm1, xmm7
subss xmm1, dword [0x1800aa974]
movaps xmm0, xmm6
subss xmm0, dword [0x1800a62e0]
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
movss dword [rbp - 0x78], xmm2
movss dword [rbp - 0x74], xmm3
mov r14d, dword [rbp + 0x100]
mov eax, r14d
shr eax, 7
not al
and al, 1
movzx edi, al
mov dword [rbp - 0x70], edi
subss xmm7, xmm4
subss xmm6, xmm5
movss dword [rsp + 0x58], xmm6
movss dword [rsp + 0x5c], xmm7
movss xmm1, dword [r12 + 0x3820]
lea rcx, [rsp + 0x58]
call fcn.18000ced0
mov r9d, edi
shl r9d, 0xa
lea r8, [rsp + 0x68]
mov edx, esi
lea rcx, [rsp + 0x68]
call fcn.18000cb5c
cmp qword [rbp + 0xf8], r13
jne 0x18003ce7c
mov rax, rbx
shl rax, 5
lea rcx, [0x1800aa3d0]
mov rax, qword [rax + rcx]
mov qword [rbp + 0xf8], rax
mov ecx, dword [0x180592ad0]
mov rax, qword gs:[0x58]
mov edx, 4
mov rax, qword [rax + rcx*8]
mov eax, dword [rdx + rax]
cmp dword [0x180591ea8], eax
jg 0x18003d5e1
mov rcx, qword [0x180591e98]
mov rax, qword [rcx + 8]
mov rbx, rcx
jmp 0x18003cec4
cmp dword [rax + 0x1c], esi
jae 0x18003cebe
mov rax, qword [rax + 0x10]
jmp 0x18003cec4
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r13b
je 0x18003ceb3
cmp byte [rbx + 0x19], r13b
jne 0x18003ced5
cmp esi, dword [rbx + 0x1c]
jae 0x18003ced8
mov rbx, rcx
cmp rbx, rcx
jne 0x18003cf39
mov dword [rbp - 0x68], esi
xorps xmm0, xmm0
movups xmmword [rbp - 0x64], xmm0
and dword [rbp - 0x54], 0
and dword [rbp - 0x50], 0
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x58]
lea rcx, [0x180591e98]
call fcn.1800311c0
mov rcx, qword [0x180591e98]
mov rax, qword [rcx + 8]
mov rbx, rcx
jmp 0x18003cf25
cmp dword [rax + 0x1c], esi
jae 0x18003cf1f
mov rax, qword [rax + 0x10]
jmp 0x18003cf25
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r13b
je 0x18003cf14
cmp byte [rbx + 0x19], r13b
jne 0x18003cf36
cmp esi, dword [rbx + 0x1c]
jae 0x18003cf39
mov rbx, rcx
mov edx, esi
lea rcx, [rsp + 0x68]
call fcn.18000cd30
mov byte [rsp + 0x50], al
test dil, dil
je 0x18003cf7a
mov rcx, qword [0x180591d80]
cmp dword [rcx + 0x3f30], esi
jne 0x18003cf69
cmp dword [rcx + 0x5ae8], esi
je 0x18003cffa
test dword [r12 + 0x4774], 0x100
je 0x18003cf7a
mov r13b, 1
test al, al
je 0x18003cf93
xor r8d, r8d
mov edx, esi
xor ecx, ecx
call fcn.18000c68c
test al, al
je 0x18003cf93
mov dil, 1
jmp 0x18003cf96
xor dil, dil
test r13b, r13b
jne 0x18003cfb9
test dil, dil
jne 0x18003cfbe
cmp dword [r12 + 0x48c0], esi
je 0x18003cfcd
cmp dword [r12 + 0x48cc], esi
je 0x18003cfcd
jmp 0x18003d084
test dil, dil
je 0x18003cfcd
xor r8d, r8d
mov edx, esi
mov ecx, 0x281
call fcn.180015130
cmp byte [rbp - 0x70], 0
je 0x18003d05f
test r13b, r13b
jne 0x18003cffa
test dil, dil
je 0x18003cff0
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x18003cffa
cmp dword [r12 + 0x48cc], esi
jne 0x18003d05f
shr r14d, 4
and r14b, 1
mov al, r14b
neg al
sbb rcx, rcx
and rcx, qword [rbp + 0xf0]
neg r14b
sbb rax, rax
and rax, qword [rbp + 0xe8]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0xf8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0xd8]
mov r8, qword [rbp + 0xd0]
mov edx, esi
lea rcx, [rsp + 0x68]
call fcn.18003dbd4
jmp 0x18003d59e
mov rdx, r15
mov ecx, esi
call fcn.1800148f8
mov rdx, r15
mov ecx, esi
call fcn.180014ea8
mov rcx, r15
call fcn.18000a018
or dword [r12 + 0x4740], 3
movss xmm0, dword [rsp + 0x68]
addss xmm0, dword [0x1800a622c]
movss dword [rsp + 0x58], xmm0
movss xmm1, dword [rsp + 0x6c]
addss xmm1, dword [0x1800aa97c]
movss dword [rsp + 0x5c], xmm1
mov r8b, 1
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x58]
call fcn.180011a24
mov rdi, qword [r15 + 0x290]
movss xmm6, dword [r12 + 0x3824]
lea rcx, [0x1800fd050]
call fcn.180007fd4
movss xmm0, dword [0x1800a6298]
movss dword [rsp + 0x30], xmm0
and dword [rsp + 0x28], 0
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.18001c534
call fcn.180011768
mov r8d, 1
mov edx, esi
lea rcx, [rsp + 0x68]
call fcn.180012cb0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
lea rax, [rsp + 0x58]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], r14d
mov r14, qword [rbp + 0xf8]
mov qword [rsp + 0x30], r14
mov rdi, qword [rbp + 0xf0]
mov qword [rsp + 0x28], rdi
mov rdx, qword [rbp + 0xe8]
mov qword [rsp + 0x20], rdx
mov r13, qword [rbp + 0xe0]
mov r9, r13
mov r12d, dword [rbp + 0xd8]
mov r8d, r12d
mov edx, esi
lea rcx, [rbp - 0x80]
call fcn.18003c8a8
mov byte [rsp + 0x51], al
test al, al
je 0x18003d189
mov ecx, esi
call fcn.18000d524
movss xmm2, dword [0x1800fd0b8]
mulss xmm2, dword [0x1800a62a4]
movss xmm1, dword [rsp + 0x58]
addss xmm1, dword [rsp + 0x60]
movss xmm4, dword [0x1800a6264]
mulss xmm1, xmm4
movss xmm11, dword [rbp - 0x80]
subss xmm1, xmm11
subss xmm1, dword [rbx + 0x20]
mulss xmm1, xmm2
addss xmm1, dword [rbx + 0x20]
movss xmm0, dword [rsp + 0x5c]
addss xmm0, dword [rsp + 0x64]
mulss xmm0, xmm4
subss xmm0, dword [rbp - 0x7c]
subss xmm0, dword [rbx + 0x24]
mulss xmm0, xmm2
addss xmm0, dword [rbx + 0x24]
movss dword [rbx + 0x20], xmm1
movss dword [rbx + 0x24], xmm0
movss xmm3, dword [0x1800fd0b8]
mulss xmm3, dword [0x1800a629c]
lea rcx, [0x1800fd010]
lea rax, [0x1800fd020]
cmp byte [rsp + 0x50], 0
cmovne rax, rcx
movdqu xmm2, xmmword [rax]
lea rsi, [rbx + 0x28]
movaps xmm0, xmm2
subss xmm0, dword [rsi]
mulss xmm0, xmm3
addss xmm0, dword [rsi]
movss dword [rsp + 0x58], xmm0
movaps xmm1, xmm2
shufps xmm1, xmm2, 0x55
subss xmm1, dword [rsi + 4]
mulss xmm1, xmm3
addss xmm1, dword [rsi + 4]
movss dword [rsp + 0x5c], xmm1
movaps xmm0, xmm2
shufps xmm0, xmm2, 0xaa
subss xmm0, dword [rsi + 8]
mulss xmm0, xmm3
addss xmm0, dword [rsi + 8]
movss dword [rsp + 0x60], xmm0
shufps xmm2, xmm2, 0xff
subss xmm2, dword [rsi + 0xc]
mulss xmm2, xmm3
addss xmm2, dword [rsi + 0xc]
movss dword [rsp + 0x64], xmm2
movups xmm0, xmmword [rsp + 0x58]
movdqu xmmword [rsi], xmm0
movss xmm1, dword [rbp - 0x78]
addss xmm1, xmm11
mulss xmm1, xmm4
movss dword [rsp + 0x78], xmm1
movss xmm0, dword [rbp - 0x74]
addss xmm0, dword [rbp - 0x7c]
mulss xmm0, xmm4
movss dword [rsp + 0x7c], xmm0
movss xmm7, dword [rdi]
movss xmm8, dword [r13]
divss xmm8, xmm7
mulss xmm8, dword [0x1800aa964]
call fcn.18000a8b4
movss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1800a62bc]
movss xmm9, dword [r13]
divss xmm9, xmm7
mulss xmm9, dword [0x1800aa964]
subss xmm9, xmm8
mulss xmm9, xmm0
addss xmm9, xmm8
mov rax, qword [r15 + 0x290]
and dword [rax + 0x78], 0
mov edi, 0x28
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1800aa218]
movss dword [rsp + 0x20], xmm0
xorps xmm3, xmm3
movaps xmm2, xmm13
lea rdx, [rsp + 0x78]
mov rcx, qword [r15 + 0x290]
call fcn.180021b3c
mov rbx, qword [r15 + 0x290]
lea rcx, [0x1800fd030]
call fcn.180007fd4
movss dword [rsp + 0x28], xmm14
and dword [rsp + 0x20], 0
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18001b7e0
and dword [rbx + 0x78], 0
mov rax, qword [r15 + 0x290]
and dword [rax + 0x78], 0
movss xmm3, dword [0x1800aa960]
addss xmm9, xmm3
mov dword [rsp + 0x28], edi
movss dword [rsp + 0x20], xmm9
movaps xmm2, xmm13
lea rdx, [rsp + 0x78]
mov rcx, qword [r15 + 0x290]
call fcn.180021b3c
mov rbx, qword [r15 + 0x290]
lea rcx, section..data
call fcn.180007fd4
movss dword [rsp + 0x28], xmm14
and dword [rsp + 0x20], 0
mov r9d, eax
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.18001b7e0
and dword [rbx + 0x78], 0
mov rdi, qword [r15 + 0x290]
lea rcx, section..data
call fcn.180007fd4
mov ebx, eax
movaps xmm0, xmm9
call fcn.180080a30
movaps xmm7, xmm0
mulss xmm7, xmm13
movaps xmm1, xmm7
addss xmm1, dword [rsp + 0x78]
movss dword [rsp + 0x58], xmm1
movaps xmm0, xmm9
call fcn.180081180
movaps xmm6, xmm0
mulss xmm6, xmm13
movaps xmm1, xmm6
addss xmm1, dword [rsp + 0x7c]
movss dword [rsp + 0x5c], xmm1
and dword [rsp + 0x20], 0
mov r9d, ebx
movss xmm2, dword [0x1800a62ac]
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.18001a6dc
mov rbx, qword [r15 + 0x290]
lea rcx, [0x1800fd010]
call fcn.180007fd4
addss xmm7, dword [rsp + 0x78]
movss dword [rsp + 0x58], xmm7
addss xmm6, dword [rsp + 0x7c]
movss dword [rsp + 0x5c], xmm6
and dword [rsp + 0x20], 0
mov r9d, eax
movss xmm2, dword [0x1800a629c]
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.18001a6dc
mov qword [rsp + 0x20], r14
mov r9, r13
mov r8d, r12d
mov edx, 0x40
lea rcx, [rbp - 0x40]
call fcn.18003692c
mov rdi, qword [r15 + 0x290]
mov rcx, rsi
call fcn.18000a534
mov ebx, eax
lea r9, [rbp - 0x40]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.180018f24
movss xmm1, dword [rax + 4]
movss xmm0, dword [rsp + 0x68]
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
and qword [rsp + 0x20], 0
mov r9, qword [rbp + 0xd0]
mov r8d, ebx
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.18001e3a0
mov rdi, qword [r15 + 0x290]
lea rcx, [0x1800fd020]
call fcn.180007fd4
mov ebx, eax
lea r9, [rbp - 0x40]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp - 0x70]
call fcn.180018f24
movss xmm6, dword [rax + 4]
movss dword [rsp + 0x20], xmm15
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x80]
call fcn.18000715c
subss xmm11, dword [rax]
subss xmm11, dword [0x1800a62c0]
movss dword [rsp + 0x58], xmm11
movss dword [rsp + 0x5c], xmm6
and qword [rsp + 0x20], 0
lea r9, [rbp - 0x40]
mov r8d, ebx
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.18001e3a0
mov al, byte [rsp + 0x51]
lea r11, [rsp + 0x188]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm11, xmmword [r11 - 0x58]
movaps xmm13, xmmword [r11 - 0x68]
movaps xmm14, xmmword [r11 - 0x78]
movaps xmm15, xmmword [r11 - 0x88]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [0x180591ea8]
call fcn.18006f3a0
cmp dword [0x180591ea8], 0xffffffff
jne 0x18003cea3
mov ecx, 0x38
call fcn.18006ef44
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [0x180591e98], rax
lea rcx, [0x1800a2be0]
call fcn.18006f2e0
nop
lea rcx, [0x180591ea8]
call fcn.18006f334
jmp 0x18003cea3