Function at 0x14003e550
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x200
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
mov rax, qword [0x140075040]
xor rax, rsp
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
lea rdx, [rbp + 0x118]
movabs rcx, 0xff00ff00ff00ff00
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x70], rdx
mov rax, qword [rdx]
xor rax, rcx
mov qword [rbp - 0x80], rax
xor r14d, r14d
mov qword [rdx], r14
mov rbx, qword [0x140075ce8]
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400715c0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.perception_ipc]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x140070b48]
mov dword [rsp + 0x48], eax
movzx eax, word [0x140070b4c]
mov word [rsp + 0x4c], ax
mov byte [rsp + 0x4e], r14b
lea rdx, str.App1.exe
lea rcx, [rsp + 0x60]
call fcn.1400338e0
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.140032960
movzx ebx, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14003e693
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e68e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e68e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004229c
movdqa xmm0, xmmword [0x1400715a0]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], r14w
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14003e6e7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003e6e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003e6e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14004229c
test bl, bl
jne 0x14003e6f7
lea rcx, str.__ipc_____initialization_failed._n
call fcn.1400326e0
lea r15, [0x1400750a0]
xorps xmm6, xmm6
movss xmm9, dword [0x140071570]
movss xmm8, dword [0x140071560]
movss xmm7, dword [0x1400714d0]
movss xmm10, dword [0x140071558]
movss xmm11, dword [0x1400714b8]
movss xmm12, dword [0x14007153c]
movss xmm13, dword [0x1400714e0]
movss xmm14, dword [0x140071538]
nop dword [rax + rax]
mov edx, 0xffffffff
mov rcx, qword [0x140075ce8]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [0x140075ce8]
mov dword [rax + 0x18], r14d
mov rax, qword [0x140075ce8]
mov rdx, qword [rax + 0x10]
lea rcx, [rbp - 0x60]
test rdx, rdx
je 0x14003e800
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
movups xmm0, xmmword [rdx + 0x80]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x90]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0xa0]
movups xmmword [rcx + 0x20], xmm0
mov rax, qword [rdx + 0xb0]
mov qword [rcx + 0x30], rax
mov eax, dword [rdx + 0xb8]
mov dword [rcx + 0x38], eax
jmp 0x14003e81d
mov r8d, 0xbc
call fcn.140042e2a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov dword [rax], 0x16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo]
movss xmm0, dword [rbp - 0x44]
comiss xmm0, xmm6
jb 0x14003e8b9
comiss xmm9, xmm0
jb 0x14003e8b9
lea rcx, [rbp - 0x60]
movups xmm0, xmmword [rcx]
movups xmmword [r15], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r15 + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [r15 + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [r15 + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [r15 + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [r15 + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [r15 + 0x60], xmm0
lea rdx, [r15 + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
movups xmm0, xmmword [rcx + 0x80]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x90]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0xa0]
movups xmmword [rdx + 0x20], xmm0
mov rax, qword [rcx + 0xb0]
mov qword [rdx + 0x30], rax
mov eax, dword [rcx + 0xb8]
mov dword [rdx + 0x38], eax
mov qword [rsp + 0x68], r14
mov ecx, 0x20
call fcn.140042020
mov rdi, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], 0x10
mov qword [rsp + 0x78], 0x1f
movups xmm0, xmmword [str.catalyst_private]
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0
mov dword [rsp + 0x40], 0x10
mov dword [rsp + 0x44], 0x42c40000
mov dword [rsp + 0x48], 0x41200000
mov dword [rsp + 0x4c], 0xffffffff
mov dword [rsp + 0x50], 0x41900000
mov word [rsp + 0x54], 1
mov rsi, qword [0x140075ce8]
mov ecx, dword [rsi + 0x18]
lea rax, [rcx + 1]
cmp rax, 0xf4240
jbe 0x14003e948
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rsi + 0x18], r14d
mov ecx, r14d
mov rax, qword [rsi + 0x10]
mov byte [rcx + rax], 5
inc dword [rsi + 0x18]
mov rsi, qword [0x140075ce8]
mov ecx, dword [rsi + 0x18]
lea rax, [rcx + 0x18]
cmp rax, 0xf4240
jbe 0x14003e97c
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rsi + 0x18], r14d
mov ecx, r14d
mov rax, qword [rsi + 0x10]
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rsp + 0x50]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rsi + 0x18], 0x18
mov rsi, qword [0x140075ce8]
mov ecx, dword [rsi + 0x18]
lea rax, [rcx + 0x10]
cmp rax, 0xf4240
jbe 0x14003e9c2
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rsi + 0x18], r14d
mov ecx, r14d
mov edx, ecx
mov rax, qword [rsi + 0x10]
movups xmm0, xmmword [rdi]
movups xmmword [rax + rdx], xmm0
add dword [rsi + 0x18], 0x10
mov edx, 0x20
mov rcx, rdi
call fcn.14004229c
mov rcx, qword [0x140075bc8]
call fcn.140039860
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003ea75
cmp byte [0x140075ac4], 0
sete sil
mov byte [0x140075ac4], sil
mov rdi, qword [0x140075ce8]
mov ecx, dword [rdi + 0x18]
lea rax, [rcx + 1]
cmp rax, 0xf4240
jbe 0x14003ea36
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rdi + 0x18], r14d
mov ecx, r14d
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 8
inc dword [rdi + 0x18]
mov rdi, qword [0x140075ce8]
mov ecx, dword [rdi + 0x18]
lea rax, [rcx + 1]
cmp rax, 0xf4240
jbe 0x14003ea6a
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rdi + 0x18], r14d
mov ecx, r14d
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], sil
inc dword [rdi + 0x18]
mov ecx, 0x72
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003ea92
cmp byte [0x140075208], 0
sete byte [0x140075208]
cmp byte [0x1400750a8], 0
je 0x14003ebbc
movss xmm3, dword [0x1400750ac]
ucomiss xmm3, xmm6
jp 0x14003eaba
jne 0x14003eaba
movaps xmm3, xmm8
movss dword [0x1400750ac], xmm3
movzx ecx, byte [0x140075217]
shl ecx, 8
movzx eax, byte [0x140075216]
or ecx, eax
shl ecx, 8
movzx eax, byte [0x140075215]
or ecx, eax
shl ecx, 8
movzx eax, byte [0x140075214]
or ecx, eax
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov byte [rsp + 0x30], 0
movss dword [rsp + 0x28], xmm7
mov dword [rsp + 0x20], ecx
call fcn.1400323d0
cmp byte [0x140075ce2], 0
je 0x14003ebbc
movzx r8d, byte [0x140075217]
shl r8d, 8
movzx eax, byte [0x140075216]
or r8d, eax
shl r8d, 8
movzx eax, byte [0x140075215]
or r8d, eax
shl r8d, 8
movss xmm1, dword [0x140075204]
divss xmm1, xmm10
movzx eax, byte [0x140075214]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm1, xmm0
cvttss2si eax, xmm1
movzx ecx, al
or r8d, ecx
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov byte [rsp + 0x30], 1
movss dword [rsp + 0x28], xmm7
mov dword [rsp + 0x20], r8d
movss xmm3, dword [0x1400750ac]
call fcn.1400323d0
cmp byte [0x140075ce5], 0
je 0x14003ee41
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm11
movaps xmm3, xmm1
subss xmm3, xmm12
movss dword [rsp + 0x30], xmm13
mov dword [rsp + 0x28], 0xff000000
movss dword [rsp + 0x20], xmm2
call fcn.140032300
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm1, xmm11
movaps xmm3, xmm1
addss xmm3, xmm12
movss dword [rsp + 0x30], xmm13
mov dword [rsp + 0x28], 0xff000000
movss dword [rsp + 0x20], xmm2
call fcn.140032300
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
subss xmm2, xmm11
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm2
subss xmm0, xmm12
movss dword [rsp + 0x30], xmm13
mov dword [rsp + 0x28], 0xff000000
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm1
call fcn.140032300
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm2, xmm11
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm2
addss xmm0, xmm12
movss dword [rsp + 0x30], xmm13
mov dword [rsp + 0x28], 0xff000000
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm1
call fcn.140032300
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm11
movaps xmm3, xmm1
subss xmm3, xmm14
subss xmm1, xmm11
movss dword [rsp + 0x30], xmm11
mov dword [rsp + 0x28], 0x80ffffff
movss dword [rsp + 0x20], xmm2
call fcn.140032300
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
addss xmm1, xmm11
movaps xmm3, xmm1
addss xmm3, xmm14
addss xmm1, xmm11
movss dword [rsp + 0x30], xmm11
mov dword [rsp + 0x28], 0x80ffffff
movss dword [rsp + 0x20], xmm2
call fcn.140032300
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
subss xmm2, xmm11
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm2
subss xmm0, xmm14
subss xmm2, xmm11
movss dword [rsp + 0x30], xmm11
mov dword [rsp + 0x28], 0x80ffffff
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm1
call fcn.140032300
mov eax, dword [0x14007520c]
cdq
sub eax, edx
sar eax, 1
movd xmm2, eax
cvtdq2ps xmm2, xmm2
addss xmm2, xmm11
mov eax, dword [0x140075210]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm2
addss xmm0, xmm14
addss xmm2, xmm11
movss dword [rsp + 0x30], xmm11
mov dword [rsp + 0x28], 0x80ffffff
movss dword [rsp + 0x20], xmm0
movaps xmm3, xmm1
call fcn.140032300
cmp byte [0x140075ce3], 0
je 0x14003efa8
cmp byte [0x140075209], 0
je 0x14003efa8
mov qword [rsp + 0x68], r14
mov ecx, 0x20
call fcn.140042020
mov rbx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], 0x15
mov qword [rsp + 0x78], 0x1f
movups xmm0, xmmword [str.prediction_aim_active]
movups xmmword [rax], xmm0
mov eax, dword [0x140070bb8]
mov dword [rbx + 0x10], eax
movzx eax, byte [0x140070bbc]
mov byte [rbx + 0x14], al
mov byte [rbx + 0x15], 0
mov dword [rsp + 0x40], 0x15
mov dword [rsp + 0x44], 0x41700000
mov dword [rsp + 0x48], 0x420c0000
mov dword [rsp + 0x4c], 0xff96cdff
mov dword [rsp + 0x50], 0x41800000
mov word [rsp + 0x54], 0
mov rsi, qword [0x140075ce8]
mov ecx, dword [rsi + 0x18]
lea rax, [rcx + 1]
cmp rax, 0xf4240
jbe 0x14003eefd
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rsi + 0x18], r14d
mov ecx, r14d
mov rax, qword [rsi + 0x10]
mov byte [rcx + rax], 5
inc dword [rsi + 0x18]
mov rsi, qword [0x140075ce8]
mov ecx, dword [rsi + 0x18]
lea rax, [rcx + 0x18]
cmp rax, 0xf4240
jbe 0x14003ef31
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rsi + 0x18], r14d
mov ecx, r14d
mov rax, qword [rsi + 0x10]
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rax + rcx], xmm0
movsd xmm1, qword [rsp + 0x50]
movsd qword [rax + rcx + 0x10], xmm1
add dword [rsi + 0x18], 0x18
mov rsi, qword [0x140075ce8]
mov ecx, dword [rsi + 0x18]
lea rax, [rcx + 0x15]
cmp rax, 0xf4240
jbe 0x14003ef77
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rsi + 0x18], r14d
mov ecx, r14d
mov r8d, ecx
mov rdx, qword [rsi + 0x10]
movups xmm0, xmmword [rbx]
movups xmmword [rdx + r8], xmm0
mov eax, dword [rbx + 0x10]
mov dword [rdx + r8 + 0x10], eax
movzx eax, byte [rbx + 0x14]
mov byte [rdx + r8 + 0x14], al
add dword [rsi + 0x18], 0x15
mov edx, 0x20
mov rcx, rbx
call fcn.14004229c
mov rdi, qword [0x140075ce8]
mov ecx, dword [rdi + 0x18]
lea rax, [rcx + 1]
cmp rax, 0xf4240
jbe 0x14003efd1
lea rcx, str.__buffer_____overflow._n
call fcn.1400326e0
mov dword [rdi + 0x18], r14d
mov ecx, r14d
mov rax, qword [rdi + 0x10]
mov byte [rcx + rax], 0
inc dword [rdi + 0x18]
mov rcx, qword [0x140075ce8]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x14003e750