Function at 0x140002560
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x14010f080]
xor rax, rsp
mov qword [rbp - 0x11], rax
mov r15, rdx
mov qword [rbp - 0x31], rdx
mov rsi, rcx
mov qword [rbp - 0x39], rcx
cmp byte [rcx + 0xc], 0
je 0x140002aa9
mov edx, dword [rcx + 0x10]
xor r12d, r12d
mov r14d, 4
xorps xmm8, xmm8
cmp edx, 7
je 0x140002681
lea rdi, [rcx + 0x30]
mov rbx, qword [rdi]
mov rax, qword [rbx + 8]
mov qword [rbp - 0x29], rax
mov dword [rbp - 0x21], r12d
mov rcx, rbx
cmp byte [rax + 0x19], r12b
jne 0x14000260b
mov qword [rbp - 0x29], rax
cmp dword [rax + 0x1c], edx
jge 0x1400025f8
mov dword [rbp - 0x21], r12d
mov rax, qword [rax + 0x10]
jmp 0x140002605
mov dword [rbp - 0x21], 1
mov rcx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], r12b
je 0x1400025e5
cmp byte [rcx + 0x19], r12b
jne 0x140002616
cmp edx, dword [rcx + 0x1c]
jge 0x140002673
movabs rax, 0x666666666666666
cmp qword [rdi + 8], rax
je 0x140002adf
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x71], r12
mov ecx, Ordinal_41
call fcn.1400ddd30
mov r8, rax
mov eax, dword [rsi + 0x10]
mov dword [r8 + 0x1c], eax
mov dword [r8 + 0x20], r12d
mov qword [r8], rbx
mov qword [r8 + 8], rbx
mov qword [r8 + 0x10], rbx
mov word [r8 + 0x18], 0
movups xmm0, xmmword [rbp - 0x29]
movaps xmmword [rbp - 0x79], xmm0
lea rdx, [rbp - 0x79]
mov rcx, rdi
call fcn.140002ca0
mov rcx, rax
lea rdi, [rsi + 8]
mov eax, dword [rcx + 0x20]
mov dword [rdi], eax
jmp 0x1400028c8
movdqa xmm0, xmmword [0x1400fb580]
movdqu xmmword [rbp - 0x79], xmm0
mov dword [rbp - 0x69], 5
mov dword [rbp - 0x65], 4
mov dword [rbp - 0x61], 3
mov ecx, Ordinal_32
call fcn.1400ddd30
mov qword [rbp - 0x29], rax
lea rbx, [rax + 0x1c]
mov qword [rbp - 0x19], rbx
mov r8d, Ordinal_32
lea rdx, [rbp - 0x79]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp - 0x21], rbx
mov rcx, rsi
call fcn.140001e70
mov qword [rsp + 0x30], rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp - 0x55], eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov dword [rbp - 0x59], eax
movss xmm7, dword [0x1400fb3f4]
mov r12d, 0xffffffff
mov r13, qword [rbp - 0x21]
mov rbx, qword [rbp - 0x29]
cmp rbx, r13
je 0x14000287e
mov rcx, qword gs:[0x58]
mov r15, qword [rcx]
mov rsi, qword [rsp + 0x30]
nop
mov edi, dword [rbx]
mov eax, dword [r14 + r15]
cmp dword [0x140110dd8], eax
jle 0x140002790
lea rcx, [0x140110dd8]
call fcn.1400ddcb8
cmp dword [0x140110dd8], 0xffffffff
jne 0x140002790
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x140110dc8], xmm0
movss dword [0x140110dcc], xmm6
lea rcx, [0x140110dd8]
call fcn.1400ddc4c
mov r9d, edi
mov r8, rsi
lea rdx, [rbp - 0x49]
call fcn.14007a960
mov eax, dword [r14 + r15]
cmp dword [0x140110dd8], eax
jle 0x1400027fd
lea rcx, [0x140110dd8]
call fcn.1400ddcb8
cmp dword [0x140110dd8], 0xffffffff
jne 0x1400027fd
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x140110dc8], xmm0
movss dword [0x140110dcc], xmm6
lea rcx, [0x140110dd8]
call fcn.1400ddc4c
movsd xmm0, qword [rbp - 0x49]
movsd qword [rbp - 0x79], xmm0
mov eax, dword [rbp - 0x41]
mov dword [rbp - 0x71], eax
lea r8, [rbp - 0x79]
lea rdx, [rsp + 0x30]
call fcn.14007ac40
movss xmm1, dword [rsp + 0x34]
movss xmm0, dword [rsp + 0x30]
ucomiss xmm0, xmm8
jp 0x140002837
jne 0x140002837
ucomiss xmm1, xmm8
jp 0x140002837
je 0x14000285f
movd xmm2, dword [rbp - 0x59]
cvtdq2ps xmm2, xmm2
subss xmm1, xmm2
movd xmm3, dword [rbp - 0x55]
cvtdq2ps xmm3, xmm3
subss xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll__hypotf
comiss xmm7, xmm0
jbe 0x14000285f
movaps xmm7, xmm0
mov r12d, edi
add rbx, 4
cmp rbx, r13
jne 0x140002730
mov rbx, qword [rbp - 0x29]
mov rsi, qword [rbp - 0x39]
mov r15, qword [rbp - 0x31]
mov r14d, 4
lea rdi, [rsi + 8]
mov dword [rdi], r12d
test rbx, rbx
je 0x1400028c5
mov rdx, qword [rbp - 0x19]
sub rdx, rbx
and rdx, 0xfffffffffffffffc
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400028bd
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400028bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400ddfb4
xor r12d, r12d
mov ebx, r14d
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov eax, dword [rbx + r14]
cmp dword [0x140110dd8], eax
jle 0x140002935
lea rcx, [0x140110dd8]
call fcn.1400ddcb8
cmp dword [0x140110dd8], 0xffffffff
jne 0x140002935
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x140110dc8], xmm0
movss dword [0x140110dcc], xmm6
lea rcx, [0x140110dd8]
call fcn.1400ddc4c
mov r9d, dword [rdi]
mov r8, r15
lea rdx, [rbp - 0x79]
call fcn.14007a960
mov eax, dword [rbx + r14]
cmp dword [0x140110dd8], eax
jle 0x1400029a2
lea rcx, [0x140110dd8]
call fcn.1400ddcb8
cmp dword [0x140110dd8], 0xffffffff
jne 0x1400029a2
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm6, eax
cvtdq2ps xmm6, xmm6
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x140110dc8], xmm0
movss dword [0x140110dcc], xmm6
lea rcx, [0x140110dd8]
call fcn.1400ddc4c
movsd xmm0, qword [rbp - 0x79]
movsd qword [rbp - 0x49], xmm0
mov eax, dword [rbp - 0x71]
mov dword [rbp - 0x41], eax
lea r8, [rbp - 0x49]
lea rdx, [rsp + 0x30]
call fcn.14007ac40
movss xmm6, dword [rsp + 0x34]
movss xmm7, dword [rsp + 0x30]
ucomiss xmm7, xmm8
jp 0x1400029e0
jne 0x1400029e0
ucomiss xmm6, xmm8
jp 0x1400029e0
je 0x140002aa9
cvttss2si eax, dword [rsi + 0x28]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
subss xmm7, xmm0
cvttss2si eax, dword [rsi + 0x2c]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
subss xmm6, xmm0
movaps xmm1, xmm6
mulss xmm1, xmm6
movaps xmm0, xmm7
mulss xmm0, xmm7
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140002a23
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x140002a2b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movss xmm1, dword [rsi]
comiss xmm0, xmm1
ja 0x140002aa9
divss xmm0, xmm1
mulss xmm0, dword [rsi + 4]
maxss xmm0, dword [0x1400fb208]
divss xmm7, xmm0
divss xmm6, xmm0
movaps xmm0, xmm7
movss xmm1, dword [0x1400fb830]
andps xmm0, xmm1
movss xmm2, dword [0x1400fb108]
comiss xmm2, xmm0
jbe 0x140002a6c
movaps xmm7, xmm8
movaps xmm0, xmm6
andps xmm0, xmm1
comiss xmm2, xmm0
jbe 0x140002a7b
movaps xmm6, xmm8
call fcn.140001be0
mov ecx, dword [rax + 0x18]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140002aa9
cvttss2si r8d, xmm6
cvttss2si edx, xmm7
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov rcx, qword [rbp - 0x11]
xor rcx, rsp
call fcn.1400ddbf0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001bc0
int3