Function at 0x140007160
Capabilities:
Check for time delay via gettickcount
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x60
movss xmm3, dword [0x1400097dc]
mov rsi, rcx
mov eax, dword [0x14000b048]
add eax, 0xf
movaps xmmword [rsp + 0x50], xmm6
mov dword [rsp + 0x28], 0xff6495ed
movss dword [rsp + 0x20], xmm3
movaps xmmword [rsp + 0x40], xmm7
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x11b
movaps xmmword [rsp + 0x30], xmm8
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, dword [0x1400097c0]
addss xmm2, dword [0x140009840]
movaps xmm3, xmm1
call fcn.140004ba0
lea rcx, str.Uzqf_Cpy
call fcn.140007d90
mov r9, rax
mov dword [rsp + 0x20], 0
mov eax, dword [0x14000b04c]
or r8d, 0xffffffff
add eax, 0x11b
movd xmm1, eax
mov eax, dword [0x14000b048]
add eax, 0x49
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.140004970
mov eax, dword [0x14000b04c]
movss xmm7, dword [0x14000982c]
add eax, 0x131
movss xmm8, dword [0x140009820]
movaps xmm3, xmm7
movss xmm6, dword [0x140009798]
movaps xmm2, xmm8
movd xmm1, eax
mov eax, dword [0x14000b048]
add eax, 0xf
cmp dword [rsi], 0
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
jne 0x14000727b
mov dword [rsp + 0x28], 0xff00ff00
movss dword [rsp + 0x20], xmm6
call fcn.140004000
mov dword [rsp + 0x28], 0xffff0000
jmp 0x140007296
mov dword [rsp + 0x28], 0xffff0000
movss dword [rsp + 0x20], xmm6
call fcn.140004000
mov dword [rsp + 0x28], 0xff00ff00
mov eax, dword [0x14000b04c]
movaps xmm3, xmm7
add eax, 0x131
movss dword [rsp + 0x20], xmm6
movaps xmm2, xmm8
movd xmm1, eax
mov eax, dword [0x14000b048]
add eax, 0x6a
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
call fcn.1400040f0
mov ebx, dword [0x14000b04c]
lea rcx, [0x14001ff18]
mov edi, dword [0x14000b048]
add ebx, 0x131
add edi, 0xf
mov dword [0x14001ff18], 0x18
call qword [sym.imp.USER32.dll_GetCursorInfo]
mov ecx, dword [0x14001ff28]
movss xmm6, dword [0x140009810]
cmp ecx, edi
jl 0x1400073dd
lea eax, [rdi + 0x44]
cmp ecx, eax
jg 0x1400073dd
mov ecx, dword [0x14001ff2c]
cmp ecx, ebx
jl 0x1400073dd
lea eax, [rbx + 0x69]
cmp ecx, eax
jg 0x1400073dd
mov eax, dword [0x14000b048]
add eax, 0xf
mov dword [rsp + 0x28], 0x1effffff
movss dword [rsp + 0x20], xmm7
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x131
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm6
addss xmm2, xmm8
movaps xmm3, xmm1
call fcn.140004ba0
mov rax, qword [0x14001ff88]
test rax, rax
jne 0x140007508
lea rcx, str.OuVtfsHfuLfzTubuf
call fcn.140007d90
lea rcx, str.win32u.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14001ff88], rax
test rax, rax
jne 0x140007508
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
jne 0x140007520
mov byte [0x140023278], 0
mov ebx, dword [0x14000b04c]
lea rcx, [0x14001ff18]
mov edi, dword [0x14000b048]
add ebx, 0x131
add edi, 0x6a
mov dword [0x14001ff18], 0x18
call qword [sym.imp.USER32.dll_GetCursorInfo]
mov ecx, dword [0x14001ff28]
cmp ecx, edi
jl 0x1400074e8
lea eax, [rdi + 0x44]
cmp ecx, eax
jg 0x1400074e8
mov ecx, dword [0x14001ff2c]
cmp ecx, ebx
jl 0x1400074e8
lea eax, [rbx + 0x69]
cmp ecx, eax
jg 0x1400074e8
mov eax, dword [0x14000b048]
add eax, 0x6a
mov dword [rsp + 0x28], 0x1effffff
movss dword [rsp + 0x20], xmm7
movd xmm0, eax
mov eax, dword [0x14000b04c]
add eax, 0x131
cvtdq2ps xmm0, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm2, xmm0
addss xmm1, xmm6
addss xmm2, xmm8
movaps xmm3, xmm1
call fcn.140004ba0
mov rax, qword [0x14001ff88]
test rax, rax
jne 0x14000755a
lea rcx, str.OuVtfsHfuLfzTubuf
call fcn.140007d90
lea rcx, str.win32u.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14001ff88], rax
test rax, rax
jne 0x14000755a
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
jne 0x140007572
mov byte [0x140023278], 0
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
movaps xmm6, xmmword [rsp + 0x50]
movaps xmm7, xmmword [rsp + 0x40]
movaps xmm8, xmmword [rsp + 0x30]
add rsp, 0x60
pop rdi
ret
mov ecx, 1
call rax
movsx rcx, ax
shr rcx, 0x10
test cx, cx
je 0x1400073d6
cmp byte [0x140023278], 0
je 0x140007548
cmp dword [0x14002327c], 0
je 0x1400073dd
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x14002327c], eax
ja 0x1400073dd
mov byte [0x140023278], 1
mov dword [rsi], 0
jmp 0x1400073dd
mov ecx, 1
call rax
movsx rcx, ax
shr rcx, 0x10
test cx, cx
je 0x1400074e1
cmp byte [0x140023278], 0
je 0x14000759a
cmp dword [0x14002327c], 0
je 0x1400074e8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [0x14002327c], eax
ja 0x1400074e8
mov byte [0x140023278], 1
mov dword [rsi], 1
jmp 0x1400074e8