Function at 0x14001b4d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0xf8]
sub rsp, 0x1e0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x1401ce080]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov edi, 0x64
xor r14d, r14d
movabs r15, 0x7fffffffffffffff
lea r12, [0x1401e7d90]
movss xmm8, dword [0x1401b12d0]
movss xmm9, dword [0x1401b12c0]
xorps xmm12, xmm12
movss xmm14, dword [0x1401b09c0]
movss xmm13, dword [0x1401b097c]
movss xmm15, dword [0x1401b0a88]
nop word [rax + rax]
mov rbx, qword [0x1401e9028]
mov rcx, qword [0x1401e9020]
test rbx, rbx
je 0x14001bac1
test rcx, rcx
je 0x14001bac1
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], listen
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.MouseService]
movsd qword [rbp + 0x10], xmm0
mov eax, dword [0x14019f928]
mov dword [rbp + 0x18], eax
mov byte [rbp + 0x1c], 0
lea rdx, [rbp + 0x10]
call fcn.14001bb20
mov rdx, qword [0x1401ce128]
add rdx, rax
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x58], rdx
lea rax, [rsp + 0x40]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], Ordinal_50
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, Ordinal_50
lea r8, [rsp + 0x50]
mov edx, 0x222004
mov rcx, qword [0x1401ea0f0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14001b686
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b681
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001bb17
call fcn.1401045ac
mov rsi, qword [rsp + 0x40]
test rsi, rsi
jne 0x14001b6da
mov ebx, edi
lea rcx, [rbp - 0x60]
call fcn.1400192e0
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x40], rax
test edi, edi
je 0x14001bb08
imul rdx, rbx, 0xf4240
mov rcx, r15
sub rcx, rdx
cmp rax, rcx
jge 0x14001bb03
lea rcx, [rdx + rax]
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x40]
call fcn.14001bd60
jmp 0x14001b590
movd xmm11, dword [0x1401e7b20]
cvtdq2ps xmm11, xmm11
movd xmm10, dword [0x1401e7b24]
cvtdq2ps xmm10, xmm10
ucomiss xmm11, xmm12
jp 0x14001b708
jne 0x14001b708
ucomiss xmm10, xmm12
jp 0x14001b708
je 0x14001bab0
ucomiss xmm11, xmm11
setp al
cmp al, 1
je 0x14001bab0
ucomiss xmm10, xmm10
setp al
cmp al, 1
je 0x14001bab0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov rcx, qword [0x1401ce180]
add rcx, rbx
mov qword [rsp + 0x58], rcx
lea rax, [rbp - 0x30]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], 0x40
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], Ordinal_50
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, Ordinal_50
lea r8, [rsp + 0x50]
mov edx, 0x222004
mov rcx, qword [0x1401ea0f0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov r9d, r14d
lea r8, [rbp - 0x30]
nop word [rax + rax]
mov edx, r14d
mov rcx, r8
nop word [rax + rax]
movss xmm0, dword [rcx]
ucomiss xmm0, xmm0
setp al
cmp al, 1
je 0x14001ba9f
andps xmm0, xmm8
comiss xmm0, xmm9
setae al
cmp al, 1
je 0x14001ba9f
inc edx
add rcx, 4
cmp edx, 4
jl 0x14001b7b0
inc r9d
add r8, 0x10
cmp r9d, 4
jl 0x14001b7a0
movaps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [rbp - 0x20]
movaps xmmword [rsp + 0x60], xmm1
movaps xmm0, xmmword [rbp - 0x10]
movaps xmmword [rsp + 0x70], xmm0
movaps xmm1, xmmword [rbp]
movaps xmmword [rbp - 0x80], xmm1
lea rdx, [rsp + 0x50]
movaps xmm0, xmm11
unpcklps xmm0, xmm10
movq rcx, xmm0
call fcn.14001a830
mov ecx, dword [reloc.WS2_32.dll_bind]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14001ba89
cmp byte [0x1401e7d85], 0
je 0x14001ba89
cmp byte [0x1401e7de8], 0
je 0x14001ba89
mov edi, 1
movss xmm3, dword [0x1401e7e08]
movss xmm2, dword [0x1401e7e0c]
movss xmm4, dword [0x1401e7e10]
movss xmm6, dword [rbp - 0x2c]
mulss xmm6, xmm2
movss xmm0, dword [rbp - 0x30]
mulss xmm0, xmm3
addss xmm6, xmm0
movss xmm1, dword [rbp - 0x28]
mulss xmm1, xmm4
addss xmm6, xmm1
addss xmm6, dword [rbp - 0x24]
movss xmm7, dword [rbp - 0x1c]
mulss xmm7, xmm2
movss xmm0, dword [rbp - 0x20]
mulss xmm0, xmm3
addss xmm7, xmm0
movss xmm1, dword [rbp - 0x18]
mulss xmm1, xmm4
addss xmm7, xmm1
addss xmm7, dword [rbp - 0x14]
movss xmm5, dword [rbp + 4]
mulss xmm5, xmm2
movss xmm0, dword [rbp]
mulss xmm0, xmm3
addss xmm5, xmm0
movss xmm1, dword [rbp + 8]
mulss xmm1, xmm4
addss xmm5, xmm1
addss xmm5, dword [rbp + 0xc]
movss xmm0, dword [0x1401b0944]
comiss xmm0, xmm5
jbe 0x14001b902
movaps xmm3, xmm12
movaps xmm4, xmm12
jmp 0x14001b945
movaps xmm2, xmm14
divss xmm2, xmm5
movaps xmm1, xmm2
mulss xmm1, xmm6
mulss xmm2, xmm7
movaps xmm0, xmm11
mulss xmm0, xmm13
movaps xmm3, xmm0
mulss xmm3, xmm1
addss xmm0, xmm1
addss xmm3, xmm0
movaps xmm1, xmm10
mulss xmm1, xmm13
movaps xmm4, xmm1
addss xmm4, xmm2
mulss xmm1, xmm2
subss xmm4, xmm1
ucomiss xmm3, xmm12
jp 0x14001b959
jne 0x14001b959
ucomiss xmm4, xmm12
jp 0x14001b959
je 0x14001b590
ucomiss xmm3, xmm3
setp al
cmp al, dil
je 0x14001b590
ucomiss xmm4, xmm4
setp al
cmp al, dil
je 0x14001b590
mulss xmm11, xmm13
mulss xmm10, xmm13
mov dword [rsp + 0x40], 0x42c80000
mov dword [rsp + 0x48], 0x3f800000
movss xmm0, dword [0x1401e7d90]
lea rcx, [rsp + 0x48]
comiss xmm14, xmm0
cmovbe rcx, r12
lea rax, [rsp + 0x40]
comiss xmm0, xmm15
cmovbe rax, rcx
movss xmm1, dword [rax]
mov ecx, dword [0x1401e7d94]
test ecx, ecx
je 0x14001ba14
cmp ecx, edi
je 0x14001b9d5
movss dword [rbp - 0x70], xmm3
movss dword [rbp - 0x6c], xmm4
lea rax, [rbp - 0x70]
jmp 0x14001ba22
subss xmm4, xmm10
divss xmm4, xmm1
cvttss2si r8d, xmm4
subss xmm3, xmm11
divss xmm3, xmm1
cvttss2si edx, xmm3
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov ecx, edi
call qword [sym.imp.USER32.dll_mouse_event]
mov ebx, edi
lea rcx, [rbp - 0x58]
call fcn.1400192e0
mov rax, qword [rbp - 0x58]
jmp 0x14001bad0
movss dword [rbp - 0x68], xmm3
movss dword [rbp - 0x64], xmm4
lea rax, [rbp - 0x68]
mov rcx, qword [0x1401ce130]
add rcx, rsi
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], Ordinal_50
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, Ordinal_50
lea r8, [rsp + 0x50]
mov edx, 0x222008
mov rcx, qword [0x1401ea0f0]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ebx, edi
lea rcx, [rbp - 0x58]
call fcn.1400192e0
mov rax, qword [rbp - 0x58]
jmp 0x14001bad0
mov edi, 0x64
mov ebx, edi
lea rcx, [rbp - 0x58]
call fcn.1400192e0
mov rax, qword [rbp - 0x58]
jmp 0x14001bad0
mov ebx, edi
lea rcx, [rbp - 0x50]
call fcn.1400192e0
mov rax, qword [rbp - 0x50]
jmp 0x14001bad0
mov ebx, edi
lea rcx, [rbp - 0x48]
call fcn.1400192e0
mov rax, qword [rbp - 0x48]
jmp 0x14001bad0
mov ebx, edi
lea rcx, [rbp - 0x40]
call fcn.1400192e0
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x40], rax
test edi, edi
je 0x14001bb08
imul rdx, rbx, 0xf4240
mov rcx, r15
sub rcx, rdx
cmp rax, rcx
jge 0x14001bb03
lea rcx, [rax + rdx]
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x40]
call fcn.14001bd60
jmp 0x14001b590
mov qword [rsp + 0x40], r15
lea rcx, [rsp + 0x40]
call fcn.14001bd60
jmp 0x14001b590
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3