Function at 0x1400028b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
movaps xmmword [rsp + 0x60], xmm6
mov rdi, rcx
movaps xmmword [rsp + 0x50], xmm7
xor ecx, ecx
movaps xmmword [rsp + 0x40], xmm8
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
mov r12d, 1
sub eax, edx
mov ecx, r12d
sar eax, 1
mov r14d, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, dword [rdi + 0x20]
cdq
sub eax, edx
sar eax, 1
mov r15d, eax
test ecx, ecx
jne 0x140002911
xor ebx, ebx
jmp 0x14000291f
mov ebx, dword [rsp + 0xa0]
cmp ecx, r12d
cmove ebx, r12d
mov rcx, rdi
call fcn.140001b90
mov rcx, qword gs:[0x58]
mov rbp, rax
mov r13d, 4
mov rsi, qword [rcx]
mov ecx, dword [rsi + r13]
cmp dword [0x1401e7140], ecx
jle 0x140002998
lea rcx, [0x1401e7140]
call fcn.1400ce3c0
cmp dword [0x1401e7140], 0xffffffff
jne 0x140002998
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea rcx, [0x1401e7140]
movss dword [0x1401e714c], xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x1401e7148], xmm0
call fcn.1400ce354
mov r9d, ebx
lea rdx, [rsp + 0x20]
mov r8, rbp
call fcn.14006b1f0
mov eax, dword [rsi + r13]
cmp dword [0x1401e7140], eax
jle 0x140002a04
lea rcx, [0x1401e7140]
call fcn.1400ce3c0
cmp dword [0x1401e7140], 0xffffffff
jne 0x140002a04
mov ecx, r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
movd xmm6, eax
cvtdq2ps xmm6, xmm6
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea rcx, [0x1401e7140]
movss dword [0x1401e714c], xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x1401e7148], xmm0
call fcn.1400ce354
movsd xmm8, qword [rsp + 0x20]
lea r8, [rsp + 0x30]
mov ebx, dword [rsp + 0x28]
lea rdx, [rsp + 0xa0]
movsd qword [rsp + 0x30], xmm8
mov dword [rsp + 0x38], ebx
call fcn.14006b330
movss xmm0, dword [rsp + 0xa4]
movd xmm1, r15d
cvtdq2pd xmm1, xmm1
cvtps2pd xmm0, xmm0
subsd xmm0, xmm1
movsd xmm1, qword [0x1400e8c80]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x1400e8c80]
movaps xmm7, xmm0
movss xmm0, dword [rsp + 0xa0]
movd xmm2, r14d
cvtps2pd xmm0, xmm0
cvtdq2pd xmm2, xmm2
subsd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
ucomiss xmm1, xmm0
ja 0x140002a97
xorps xmm6, xmm6
sqrtss xmm6, xmm0
jmp 0x140002a9f
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
mov eax, dword [rsi + r13]
cmp dword [0x1401e6ea0], eax
jle 0x140002ad6
lea rcx, [0x1401e6ea0]
call fcn.1400ce3c0
cmp dword [0x1401e6ea0], 0xffffffff
jne 0x140002ad6
lea rcx, [0x1401e6ea0]
mov dword [0x1401e6e98], 0
call fcn.1400ce354
mov ecx, dword [0x1401e6e9c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140002b0b
movd xmm0, dword [rdi]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm6
jbe 0x140002b0b
lea rdx, [rsp + 0x30]
movsd qword [rsp + 0x30], xmm8
mov rcx, rdi
mov dword [rsp + 0x38], ebx
call fcn.1400025a0
movaps xmm6, xmmword [rsp + 0x60]
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm7, xmmword [rsp + 0x50]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret