Function at 0x140013c70
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm14
mov rax, qword [0x1400f1040]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov r14, rdx
mov qword [rsp + 0x78], rdx
mov r13, rcx
xor esi, esi
mov rbx, qword [0x1401053b0]
mov r15, rbx
mov rax, qword [rbx + 0x4018]
mov byte [rax + 0xc0], 1
mov r12, qword [rbx + 0x4018]
cmp byte [r12 + 0xc3], sil
jne 0x1400147c4
movsxd r8, dword [r12 + 0x100]
mov rax, qword [r12 + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
call fcn.14001a430
mov edi, eax
mov rcx, qword [r12]
cmp dword [rcx + 0x4064], eax
jne 0x140013d4a
mov r8, r13
mov edx, 0xb
mov ecx, eax
call fcn.140030bd0
mov rbx, qword [0x1401053b0]
movss xmm3, dword [r12 + 0x110]
movss xmm1, dword [r12 + 0x114]
mov rax, qword [rbx + 0x4018]
movaps xmm2, xmm1
addss xmm2, dword [0x1400e0c10]
movaps xmm0, xmm3
addss xmm0, dword [rax + 0x30]
movss dword [rbp - 0x60], xmm3
movss dword [rbp - 0x5c], xmm1
movss dword [rbp - 0x58], xmm0
movss dword [rbp - 0x54], xmm2
subss xmm2, xmm1
subss xmm0, xmm3
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm2
movss xmm1, dword [r15 + 0x3930]
lea rcx, [rbp - 0x80]
call fcn.140029bf0
xor r9d, r9d
lea r8, [rbp - 0x60]
mov edx, edi
lea rcx, [rbp - 0x60]
call fcn.140029d60
test al, al
je 0x1400147c4
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x140105710], eax
jle 0x140013e44
lea rcx, [0x140105710]
call fcn.1400ba5a8
cmp dword [0x140105710], 0xffffffff
jne 0x140013e44
mov qword [0x140105778], rsi
mov qword [0x140105780], rsi
mov ecx, 0x28
call fcn.1400ba240
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [0x140105778], rax
lea rcx, [0x1400bcca0]
call fcn.1400ba4a4
nop
lea rcx, [0x140105710]
call fcn.1400ba53c
mov rbx, qword [0x140105778]
mov rax, qword [rbx + 8]
mov qword [rbp - 0x78], rax
xor ecx, ecx
mov dword [rbp - 0x70], ecx
mov rsi, rbx
cmp byte [rax + 0x19], cl
jne 0x140013e84
mov qword [rbp - 0x78], rax
cmp dword [rax + 0x1c], edi
jae 0x140013e72
mov dword [rbp - 0x70], ecx
mov rax, qword [rax + 0x10]
jmp 0x140013e7f
mov dword [rbp - 0x70], 1
mov rsi, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], cl
je 0x140013e60
cmp byte [rsi + 0x19], cl
jne 0x140013e8e
cmp edi, dword [rsi + 0x1c]
jae 0x140013efb
movabs rax, 0x666666666666666
cmp qword [0x140105780], rax
je 0x140014815
lea rsi, [0x140105778]
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rcx
mov ecx, 0x28
call fcn.1400ba240
nop
mov dword [rax + 0x1c], edi
xor ecx, ecx
mov qword [rax + 0x20], rcx
mov byte [rax + 0x21], cl
mov dword [rax + 0x24], ecx
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
mov word [rax + 0x18], cx
movups xmm0, xmmword [rbp - 0x78]
movaps xmmword [rsp + 0x60], xmm0
mov r8, rax
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.140014dc0
mov rsi, rax
mov rcx, qword [0x140105428]
call fcn.140026e70
mov ecx, dword [str.Select]
mov dword [rbp - 0x20], ecx
movzx ecx, word [0x1400df23c]
mov word [rbp - 0x1c], cx
movzx ecx, byte [0x1400df23e]
mov byte [rbp - 0x1a], cl
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rax
mov byte [rbp + 0x1f], al
call fcn.140026f10
mov byte [rsp + 0x50], 0
movsxd rax, dword [r14]
mov dword [rbp - 0x80], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
lea r9, str.None
mov r9, qword [r9 + rax*8]
mov r14, 0xffffffffffffffff
mov rbx, r14
nop dword [rax]
inc rbx
cmp byte [r9 + rbx], 0
jne 0x140013f80
lea rcx, [rbp - 0x50]
cmp rbx, 0xf
ja 0x140013faa
mov qword [rbp - 0x40], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rbx - 0x50], 0
jmp 0x140013fb7
mov qword [rsp + 0x20], rbx
mov rdx, rbx
call fcn.140014c30
mov rax, qword [rsp + 0x78]
cmp dword [rax], 0
je 0x140013fdc
lea rbx, [r15 + 0x407c]
cmp dword [rbx], edi
je 0x140013fdc
lea r8, [rbp - 0x50]
cmp qword [rbp - 0x38], 0xf
cmova r8, qword [rbp - 0x50]
jmp 0x140013fee
lea rbx, [r15 + 0x407c]
cmp dword [rbx], edi
jne 0x140013ffd
lea r8, str.Select
mov edx, 0x40
lea rcx, [rbp - 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r8d, r8d
mov edx, edi
lea rcx, [rbp - 0x60]
call fcn.14001dc30
mov byte [rsp + 0x70], al
test al, al
je 0x14001406c
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14001406c
cmp dword [rbx], edi
je 0x140014056
xor eax, eax
mov dword [r15 + 0xe50], eax
mov byte [r15 + 0xe54], al
lea rcx, [r15 + 0xb58]
xor edx, edx
mov r8d, 0x29a
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x78]
mov dword [rax], 0
mov rdx, r12
mov ecx, edi
call fcn.14001d840
xor edx, edx
mov rcx, r12
call fcn.1400268f0
jmp 0x140014089
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140014089
cmp dword [rbx], edi
jne 0x1400140ea
xor edx, edx
xor ecx, ecx
call fcn.14001d840
cmp dword [rbx], edi
jne 0x1400140ea
xor ebx, ebx
nop
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400140b1
mov edi, ebx
mov dword [rbp - 0x80], ebx
mov byte [rsp + 0x50], 1
xor edx, edx
xor ecx, ecx
call fcn.14001d840
jmp 0x1400140b4
mov edi, dword [rbp - 0x80]
inc ebx
cmp ebx, 0xa5
jle 0x140014090
xor edx, edx
mov ecx, 0x20e
mov r8d, 1
call fcn.140027bc0
test al, al
mov rax, qword [rsp + 0x78]
je 0x1400140e8
xor edi, edi
mov dword [rax], edi
xor edx, edx
xor ecx, ecx
call fcn.14001d840
jmp 0x1400140ec
mov dword [rax], edi
xor edi, edi
mov rbx, qword [0x1401053b0]
mov qword [rsp + 0x30], rdi
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
movss xmm9, dword [0x1400e0d04]
movss dword [rsp + 0x20], xmm9
movss xmm3, dword [0x1400e0ce0]
movss xmm2, dword [rbx + 0x3d40]
lea rdx, [rsp + 0x60]
mov rcx, qword [rbx + 0x3d38]
call fcn.14003a390
movss xmm0, dword [rsp + 0x60]
addss xmm0, dword [0x1400e0acc]
cvttss2si eax, xmm0
movd xmm14, eax
cvtdq2ps xmm14, xmm14
movss dword [rbp - 0x80], xmm14
movss xmm0, dword [0x140105490]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x140105494]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x140105498]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010549c]
mulss xmm1, dword [rbx + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a9e0
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1400e0bac]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x60]
mov rcx, qword [r12 + 0x2a8]
call fcn.140035400
mov r8, qword [r12 + 0x2a8]
mov r9, qword [0x1401053b0]
movss xmm0, dword [0x140105610]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x140105614]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x140105618]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010561c]
mulss xmm1, dword [r9 + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a9e0
mov r10d, eax
movss xmm12, dword [rbp - 0x5c]
movaps xmm1, xmm12
addss xmm1, dword [0x1400e0bc4]
movss xmm0, dword [rbp - 0x60]
addss xmm0, dword [0x1400e0bc0]
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
mov rcx, qword [0x140105428]
movss xmm2, dword [rcx + 0x14]
xorps xmm8, xmm8
test eax, 0xff000000
je 0x1400142dc
inc r14
cmp byte [r14 + r13], 0
jne 0x140014266
add r14, r13
cmp r13, r14
je 0x1400142dc
test rcx, rcx
jne 0x140014285
mov rax, qword [r8 + 0x38]
mov rcx, qword [rax + 8]
ucomiss xmm2, xmm8
jp 0x140014296
jne 0x140014296
mov rax, qword [r8 + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [r8 + 0x88]
movups xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x48], 0
movss dword [rsp + 0x40], xmm8
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r13
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r10d
lea r9, [rsp + 0x78]
mov rdx, r8
call fcn.14003a5b0
mov r9, qword [0x1401053b0]
mov eax, 0x30
mov r8d, 0xf0
cmp byte [rsi + 0x20], 0
cmovne r8d, eax
movss xmm0, dword [0x140105640]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x140105644]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x140105648]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010564c]
mulss xmm1, dword [r9 + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a9e0
movss xmm10, dword [rbp - 0x54]
movaps xmm0, xmm10
subss xmm0, dword [0x1400e0bac]
movss xmm11, dword [rbp - 0x58]
movaps xmm7, xmm11
subss xmm7, dword [0x1400e0bc0]
movss dword [rsp + 0x78], xmm7
movss dword [rsp + 0x7c], xmm0
movaps xmm2, xmm12
addss xmm2, dword [0x1400e0bac]
movaps xmm6, xmm11
subss xmm6, dword [0x1400e0be0]
subss xmm6, xmm14
movss dword [rbp - 0x60], xmm6
movss dword [rbp - 0x5c], xmm2
mov dword [rsp + 0x28], r8d
movss xmm0, dword [0x1400e0b80]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x60]
mov rcx, qword [r12 + 0x2a8]
call fcn.140035400
mov rcx, qword [0x140105428]
call fcn.140026e70
mov rax, qword [0x1401053b0]
movss xmm0, dword [0x140105620]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x140105624]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x140105628]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010562c]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a9e0
mov edx, eax
xor ecx, ecx
call fcn.14001aef0
movss xmm14, dword [0x1400e0a94]
mov dword [rbp - 0x60], 0x3f000000
mov dword [rbp - 0x5c], 0x3f000000
movaps xmm0, xmm10
subss xmm0, dword [0x1400e0bb4]
movss dword [rsp + 0x78], xmm7
movss dword [rsp + 0x7c], xmm0
movaps xmm1, xmm12
addss xmm1, dword [0x1400e0ba4]
movss dword [rsp + 0x60], xmm6
movss dword [rsp + 0x64], xmm1
mov qword [rsp + 0x30], rdi
lea rax, [rbp - 0x60]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.14001bc40
mov r8, qword [0x1401053b0]
movsxd rax, dword [r8 + 0x4a40]
cmp eax, 1
jl 0x1400144ce
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a48]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a40]
call fcn.140026f10
movss xmm1, dword [0x1400e0ad4]
cmp byte [rsp + 0x70], 0
je 0x1400144ec
cmp byte [r15 + 0x3869], 0
jne 0x14001450e
movzx eax, byte [rsi + 0x20]
test al, al
je 0x140014520
cmp byte [r15 + 0x3868], 0
jne 0x140014508
cmp byte [r15 + 0x3869], 0
je 0x14001451c
cmp byte [rsi + 0x21], 0
jne 0x14001451c
cmp byte [rsi + 0x20], 0
sete al
mov byte [rsi + 0x20], al
test al, al
je 0x140014520
movaps xmm9, xmm1
movss xmm0, dword [r15 + 0x18]
mulss xmm0, dword [0x1400e0bac]
mulss xmm0, xmm9
addss xmm0, dword [rsi + 0x24]
comiss xmm8, xmm0
ja 0x140014547
movaps xmm8, xmm1
minss xmm8, xmm0
movss dword [rsi + 0x24], xmm8
comiss xmm8, dword [0x1400e0a50]
jb 0x14001477f
movaps xmm1, xmm8
xor ecx, ecx
call fcn.14001afc0
mov rbx, qword [0x1401053b0]
lea rcx, [rbx + 0x4a50]
movss xmm0, dword [rbx + 0x3900]
mov dword [rsp + 0x60], 3
movss dword [rsp + 0x64], xmm0
lea rdx, [rsp + 0x60]
call fcn.1400314b0
mov dword [rbx + 0x3900], 0x40800000
mov qword [rsp + 0x60], 0
lea rdx, [rsp + 0x60]
mov ecx, 2
call fcn.14001b040
mov rax, qword [0x1401053b0]
movss xmm0, dword [0x140105640]
movss dword [rsp + 0x60], xmm0
movss xmm1, dword [0x140105644]
movss dword [rsp + 0x64], xmm1
movss xmm0, dword [0x140105648]
movss dword [rsp + 0x68], xmm0
movss xmm1, dword [0x14010564c]
mulss xmm1, dword [rax + 0x38f0]
movss dword [rsp + 0x6c], xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a9e0
mov edx, eax
mov ecx, 2
call fcn.14001aef0
mov rax, qword [0x1401053b0]
movss xmm0, dword [rax + 0x3940]
addss xmm0, xmm0
addss xmm0, dword [0x1400e0c30]
mov dword [rax + 0x49e8], 0x42c80000
movss dword [rax + 0x49ec], xmm0
mov dword [rax + 0x49d0], 1
subss xmm10, dword [0x1400e0bac]
movaps xmm1, xmm11
subss xmm1, dword [0x1400e0bc0]
addss xmm12, dword [0x1400e0bac]
subss xmm11, dword [0x1400e0be0]
subss xmm11, dword [rbp - 0x80]
addss xmm10, xmm12
mulss xmm10, xmm14
subss xmm10, dword [0x1400e0d14]
addss xmm1, xmm11
mulss xmm1, xmm14
subss xmm1, dword [0x1400e0c1c]
or dword [rax + 0x49c8], 3
movss dword [rax + 0x49d8], xmm1
movss dword [rax + 0x49dc], xmm10
mov qword [rax + 0x49e0], 0
mov dword [rax + 0x49cc], 1
xor edx, edx
mov r8d, 0x1147
mov rcx, r13
call fcn.1400241f0
cmp dword [rdi], 0
sete dl
lea rcx, str.Hold
call fcn.140010010
test al, al
je 0x1400146f5
mov dword [rdi], edi
mov byte [rsi + 0x20], 0
cmp dword [rdi], 1
sete dl
lea rcx, str.Toggle
call fcn.140010010
test al, al
je 0x140014715
mov dword [rdi], 1
mov byte [rsi + 0x20], 0
cmp dword [rdi], 2
sete dl
lea rcx, str.Always
call fcn.140010010
test al, al
je 0x140014735
mov dword [rdi], 2
mov byte [rsi + 0x20], 0
call fcn.140026620
mov ecx, 3
call fcn.14001b0d0
mov r8, qword [0x1401053b0]
movsxd rax, dword [r8 + 0x4a40]
cmp eax, 1
jl 0x14001477f
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a48]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39d4], xmm0
dec dword [r8 + 0x4a40]
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1400147bd
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400147b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400147b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ba4c4
movzx eax, byte [rsp + 0x50]
jmp 0x1400147c6
xor al, al
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1400ba220
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm14, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14000de00
int3