Function at 0x1400075b0
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x50
movss xmm3, dword [0x1400097dc]
mov rdi, rcx
mov eax, dword [0x14000b048]
add eax, 0xc8
movaps xmmword [rsp + 0x40], xmm6
movss xmm6, dword [0x140009840]
mov dword [rsp + 0x28], 0xff6495ed
movss dword [rsp + 0x20], xmm3
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x11b
movaps xmmword [rsp + 0x30], xmm7
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, dword [0x1400097c0]
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
lea rcx, str.Uzqf_Mjof
call fcn.140007d90
mov r9, rax
mov dword [rsp + 0x20], 0
mov eax, dword [0x14000b04c]
or r8d, 0xffffffff
add eax, 0x11b
movd xmm1, eax
mov eax, dword [0x14000b048]
add eax, 0x102
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.140004970
movss xmm3, dword [0x140009798]
movaps xmm2, xmm6
mov eax, dword [0x14000b04c]
add eax, 0x131
mov dword [rsp + 0x28], 0xff6495ed
movss dword [rsp + 0x20], xmm3
movss xmm3, dword [0x14000982c]
movd xmm1, eax
mov eax, dword [0x14000b048]
add eax, 0xc8
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.140004000
cmp dword [rdi], 0
movss xmm7, dword [0x1400097d0]
movss xmm6, dword [0x1400097ec]
jne 0x14000779b
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xff00ff00
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x133
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xffff0000
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x15c
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xffff0000
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x185
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
cmp dword [rdi], 1
jne 0x140007873
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xffff0000
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x133
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xff00ff00
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x15c
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xffff0000
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x185
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
cmp dword [rdi], 2
jne 0x14000794b
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xffff0000
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x133
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xffff0000
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x15c
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0xff00ff00
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x185
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov ebx, dword [0x14000b04c]
lea rcx, [0x14001ff18]
mov esi, dword [0x14000b048]
add ebx, 0x133
add esi, 0x10d
mov dword [0x14001ff18], 0x18
call qword [sym.imp.USER32.dll_GetCursorInfo]
mov ecx, dword [0x14001ff28]
cmp ecx, esi
jl 0x140007a5a
lea eax, [rsi + 0x14]
cmp ecx, eax
jg 0x140007a5a
mov ecx, dword [0x14001ff2c]
cmp ecx, ebx
jl 0x140007a5a
lea eax, [rbx + 0x14]
cmp ecx, eax
jg 0x140007a5a
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0x1effffff
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x133
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov rax, qword [0x14001ff88]
test rax, rax
jne 0x140007c92
lea rcx, str.OuVtfsHfuLfzTubuf
call fcn.140007d90
lea rcx, str.win32u.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14001ff88], rax
test rax, rax
jne 0x140007c92
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
jne 0x140007caa
mov byte [0x140023278], 0
mov ebx, dword [0x14000b04c]
lea rcx, [0x14001ff18]
mov esi, dword [0x14000b048]
add ebx, 0x15c
add esi, 0x10d
mov dword [0x14001ff18], 0x18
call qword [sym.imp.USER32.dll_GetCursorInfo]
mov ecx, dword [0x14001ff28]
cmp ecx, esi
jl 0x140007b69
lea eax, [rsi + 0x14]
cmp ecx, eax
jg 0x140007b69
mov ecx, dword [0x14001ff2c]
cmp ecx, ebx
jl 0x140007b69
lea eax, [rbx + 0x14]
cmp ecx, eax
jg 0x140007b69
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0x1effffff
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x15c
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov rax, qword [0x14001ff88]
test rax, rax
jne 0x140007ce4
lea rcx, str.OuVtfsHfuLfzTubuf
call fcn.140007d90
lea rcx, str.win32u.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14001ff88], rax
test rax, rax
jne 0x140007ce4
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
jne 0x140007cfc
mov byte [0x140023278], 0
mov ebx, dword [0x14000b04c]
lea rcx, [0x14001ff18]
mov esi, dword [0x14000b048]
add ebx, 0x185
add esi, 0x10d
mov dword [0x14001ff18], 0x18
call qword [sym.imp.USER32.dll_GetCursorInfo]
mov ecx, dword [0x14001ff28]
cmp ecx, esi
jl 0x140007c78
lea eax, [rsi + 0x14]
cmp ecx, eax
jg 0x140007c78
mov ecx, dword [0x14001ff2c]
cmp ecx, ebx
jl 0x140007c78
lea eax, [rbx + 0x14]
cmp ecx, eax
jg 0x140007c78
mov eax, dword [0x14000b048]
add eax, 0x10d
mov dword [rsp + 0x28], 0x1effffff
movss dword [rsp + 0x20], xmm6
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x185
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm7
addss xmm2, xmm6
movaps xmm3, xmm1
call fcn.140004ba0
mov rax, qword [0x14001ff88]
test rax, rax
jne 0x140007d36
lea rcx, str.OuVtfsHfuLfzTubuf
call fcn.140007d90
lea rcx, str.win32u.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14001ff88], rax
test rax, rax
jne 0x140007d36
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
jne 0x140007d4e
mov byte [0x140023278], 0
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x40]
movaps xmm7, xmmword [rsp + 0x30]
add rsp, 0x50
pop rdi
ret
mov ecx, 1
call rax
movsx rcx, ax
shr rcx, 0x10
test cx, cx
je 0x140007a53
cmp byte [0x140023278], 0
je 0x140007cd2
cmp dword [0x14002327c], 0
je 0x140007a5a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x14002327c], eax
ja 0x140007a5a
mov byte [0x140023278], 1
mov dword [rdi], 0
jmp 0x140007a5a
mov ecx, 1
call rax
movsx rcx, ax
shr rcx, 0x10
test cx, cx
je 0x140007b62
cmp byte [0x140023278], 0
je 0x140007d24
cmp dword [0x14002327c], 0
je 0x140007b69
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x14002327c], eax
ja 0x140007b69
mov byte [0x140023278], 1
mov dword [rdi], 1
jmp 0x140007b69
mov ecx, 1
call rax
movsx rcx, ax
shr rcx, 0x10
test cx, cx
je 0x140007c71
cmp byte [0x140023278], 0
je 0x140007d76
cmp dword [0x14002327c], 0
je 0x140007c78
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x14002327c], eax
ja 0x140007c78
mov byte [0x140023278], 1
mov dword [rdi], 2
jmp 0x140007c78