Function at 0x140008e60
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x200
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400c8040]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov r13, rcx
call fcn.140008010
mov qword [rsp + 0x60], rax
call fcn.140059d60
mov r15, rax
mov qword [rsp + 0x68], rax
mov r8, qword [0x1401e76a0]
add r8, 0x182cea0
mov edx, dword [0x1401e82f0]
mov dword [rsp + 0x70], edx
mov qword [rsp + 0x78], r8
lea rax, [rbp - 0x70]
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], 0x40
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x20
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9d, [r14 + 0x20]
lea r8, [rsp + 0x70]
mov edx, 0x22199c
mov rcx, qword [0x1401e82e8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
lea rdx, [rbp + 0x20]
mov rcx, r15
call fcn.140059eb0
nop
mov qword [rsp + 0x78], r14
lea rsi, [rbp + 0x20]
mov r12, qword [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rsi, r12
movabs rdi, 0x7fffffffffffffff
mov rbx, qword [rbp + 0x30]
cmp rbx, rdi
ja 0x1400098b6
cmp rbx, 0xf
ja 0x140008fad
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x70], xmm0
jmp 0x140009042
mov rax, rbx
or rax, 0xf
cmp rax, rdi
jbe 0x140008fe5
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400780f0
mov rcx, rax
test rax, rax
je 0x140009010
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140009026
mov ecx, 0x16
cmp rax, rcx
cmovb rax, rcx
mov rdi, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140009017
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400098bc
jmp 0x140008fc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140009023
call fcn.1400780f0
jmp 0x140009026
mov rax, r14
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
lea r8, [rbx + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x70]
call fcn.14005a170
mov r14d, eax
mov r8, qword [r15]
add r8, 0x1224
lea rdx, [rbp + 0x10]
call fcn.140008b30
mov r8, qword [r15]
add r8, 0x114c
lea rdx, [rbp + 8]
call fcn.14005a710
mov rdx, qword [r15]
add rdx, 0x12b0
call fcn.140008980
lea rdx, [rax + 0x1570]
call fcn.140008aa0
mov byte [rsp + 0x40], al
mov rcx, r15
call fcn.14005a0e0
mov dword [rsp + 0x5c], eax
mov rdx, qword [r15]
add rdx, 0x3c8
call fcn.140008a10
mov dword [rsp + 0x50], eax
mov rcx, r15
call fcn.1400083f0
mov esi, eax
mov dword [rsp + 0x58], eax
call fcn.140059e10
mov qword [rbp], rax
mov edx, r14d
sub edx, 1
je 0x14000910e
sub edx, 1
je 0x140009105
sub edx, 1
je 0x1400090fc
sub edx, 1
je 0x1400090f3
cmp edx, 1
jne 0x140009812
cmp byte [0x1401e7614], 0
jmp 0x140009115
cmp byte [0x1401e7634], 0
jmp 0x140009115
cmp byte [0x1401e7674], 0
jmp 0x140009115
cmp byte [0x1401e7654], 0
jmp 0x140009115
cmp byte [0x1401e75f4], 0
je 0x140009812
mov r12d, 1
xorps xmm6, xmm6
nop dword [rax]
nop dword [rax + rax]
cmp byte [0x1401e775c], 0
jne 0x140009523
mov r8d, r12d
mov rdx, rax
mov rcx, qword [rsp + 0x60]
call fcn.1400080b0
mov rbx, rax
mov ecx, 8
call fcn.1400780f0
mov qword [rsp + 0x48], rax
mov qword [rax], rbx
mov rdx, rbx
mov rcx, qword [rsp + 0x60]
call fcn.1400081e0
mov rbx, rax
mov rcx, rax
call fcn.140008360
dec eax
cmp eax, 0x63
ja 0x14000951f
mov rcx, rbx
call fcn.1400083f0
cmp eax, esi
je 0x14000951f
mov rdx, qword [rbx]
add rdx, 0x1640
call fcn.140008aa0
mov rcx, rbx
call fcn.140008510
mov r8, qword [rbx]
add r8, 0x1224
lea rdx, [rbp + 0x40]
call fcn.140008b30
mov edx, r14d
call fcn.140009940
movss dword [rsp + 0x54], xmm0
movaps xmm9, xmm6
movaps xmm10, xmm6
movaps xmm8, xmm6
mov rcx, rbx
call fcn.140008510
lea r8, [rax + 0xc0]
lea rdx, [rsp + 0x70]
call fcn.140008b30
mov rcx, rbx
call fcn.140008510
lea r8, [rax + 0xa0]
lea rdx, [rbp - 0x10]
call fcn.140008b30
mov rcx, rbx
call fcn.140008510
lea r8, [rax + 0x80]
lea rdx, [rbp - 0x20]
call fcn.140008b30
mov rcx, rbx
call fcn.140008510
mov r8, rax
lea rdx, [rbp - 0x30]
call fcn.140008b30
mov ecx, r14d
sub ecx, 1
je 0x140009276
sub ecx, 1
je 0x14000926e
sub ecx, 1
je 0x140009266
sub ecx, 1
je 0x14000925e
cmp ecx, 1
jne 0x1400092e0
mov ecx, dword [0x1401e7624]
jmp 0x14000927c
mov ecx, dword [0x1401e7644]
jmp 0x14000927c
mov ecx, dword [0x1401e7684]
jmp 0x14000927c
mov ecx, dword [0x1401e7664]
jmp 0x14000927c
mov ecx, dword [0x1401e7604]
test ecx, ecx
je 0x1400092cb
sub ecx, 1
je 0x1400092b7
sub ecx, 1
je 0x1400092a3
cmp ecx, 1
jne 0x1400092e0
movss xmm9, dword [rbp - 0x30]
movss xmm10, dword [rbp - 0x2c]
movss xmm8, dword [rbp - 0x28]
jmp 0x1400092e0
movss xmm9, dword [rbp - 0x20]
movss xmm10, dword [rbp - 0x1c]
movss xmm8, dword [rbp - 0x18]
jmp 0x1400092e0
movss xmm9, dword [rbp - 0x10]
movss xmm10, dword [rbp - 0xc]
movss xmm8, dword [rbp - 8]
jmp 0x1400092e0
movss xmm9, dword [rsp + 0x70]
movss xmm10, dword [rsp + 0x74]
movss xmm8, dword [rsp + 0x78]
mov edx, r14d
call fcn.140009990
movzx r15d, al
mov edx, r14d
call fcn.1400098d0
mov esi, eax
mov edx, r14d
call fcn.140009a00
movzx ebx, al
mov edx, r14d
call fcn.140009a70
movss dword [rsp + 0x48], xmm0
mov edx, r14d
call fcn.140009ac0
movd xmm15, eax
cvtdq2ps xmm15, xmm15
mov edx, r14d
call fcn.140009b00
mov edi, eax
movaps xmm11, xmm9
movss xmm13, dword [rbp + 0x10]
subss xmm11, xmm13
movaps xmm12, xmm10
movss xmm14, dword [rbp + 0x14]
subss xmm12, xmm14
movaps xmm7, xmm8
cmp dword [rsp + 0x50], 0x10083
jne 0x140009360
subss xmm7, dword [0x1400bc410]
jmp 0x140009368
subss xmm7, dword [0x1400bc418]
subss xmm7, dword [rbp + 0x18]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm11
movsd xmm1, qword [0x1400bc360]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
xorps xmm0, xmm0
cvtss2sd xmm0, xmm12
movsd xmm1, qword [0x1400bc360]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x1400093b3
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x1400093bb
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
movaps xmm1, xmm11
movaps xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
mulss xmm0, dword [0x1400bc444]
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
divsd xmm2, qword [0x1400bc378]
movss xmm1, dword [rbp + 0xc]
cvtps2pd xmm1, xmm1
subsd xmm2, xmm1
cvtpd2ps xmm12, xmm2
divss xmm7, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atanf
xorps xmm0, xmmword [0x1400bc780]
mulss xmm0, dword [0x1400bc444]
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
divsd xmm1, qword [0x1400bc378]
movss xmm0, dword [rbp + 8]
cvtps2pd xmm0, xmm0
subsd xmm1, xmm0
cvtpd2ps xmm11, xmm1
movss xmm2, dword [rbp + 0x40]
subss xmm2, xmm13
movss xmm7, dword [rbp + 0x44]
subss xmm7, xmm14
cvtps2pd xmm0, xmm2
movsd xmm13, qword [0x1400bc360]
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x140009483
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x14000948b
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
cvtps2pd xmm0, xmm11
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm12
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x1400094c8
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x1400094d0
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm0
movaps xmm1, xmm7
mulss xmm1, dword [0x1400bc4c8]
movaps xmm0, xmm7
movss xmm3, dword [rsp + 0x54]
addss xmm0, xmm3
divss xmm1, xmm0
subss xmm2, xmm1
mulss xmm2, dword [0x1400bc3d0]
comiss xmm3, xmm2
jb 0x140009511
comiss xmm15, xmm7
jb 0x140009511
cmp byte [rsp + 0x40], 0
jne 0x140009535
mov word [r13 + 0xc], 0
xorps xmm6, xmm6
mov esi, dword [rsp + 0x58]
mov rax, qword [rbp]
inc r12d
cmp r12d, 0x40
jl 0x140009130
jmp 0x14000980e
mov word [r13 + 0xc], 0x101
movss xmm3, dword [rbp - 0x6c]
mulss xmm3, xmm10
movss xmm0, dword [rbp - 0x70]
mulss xmm0, xmm9
addss xmm3, xmm0
movss xmm1, dword [rbp - 0x68]
mulss xmm1, xmm8
addss xmm3, xmm1
addss xmm3, dword [rbp - 0x64]
movss dword [r13], xmm3
movss xmm4, dword [rbp - 0x5c]
mulss xmm4, xmm10
movss xmm0, dword [rbp - 0x60]
mulss xmm0, xmm9
addss xmm4, xmm0
movss xmm1, dword [rbp - 0x58]
mulss xmm1, xmm8
addss xmm4, xmm1
addss xmm4, dword [rbp - 0x54]
movss dword [r13 + 4], xmm4
movss xmm2, dword [rbp - 0x3c]
mulss xmm2, xmm10
movss xmm0, dword [rbp - 0x40]
mulss xmm0, xmm9
addss xmm2, xmm0
movss xmm1, dword [rbp - 0x38]
mulss xmm1, xmm8
addss xmm2, xmm1
addss xmm2, dword [rbp - 0x34]
movss xmm0, dword [0x1400bc258]
comiss xmm0, xmm2
ja 0x14000963f
movss xmm0, dword [0x1400bc2e4]
divss xmm0, xmm2
mulss xmm3, xmm0
mulss xmm4, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [0x1401e8344]
movss xmm2, dword [0x1400bc298]
mulss xmm3, xmm2
mulss xmm3, xmm1
addss xmm3, xmm2
mulss xmm1, xmm2
addss xmm3, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1401e8348]
movaps xmm1, xmm0
mulss xmm1, xmm2
mulss xmm4, xmm2
mulss xmm4, xmm0
addss xmm4, xmm2
subss xmm1, xmm4
movss dword [r13], xmm3
movss dword [r13 + 4], xmm1
mov ecx, esi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000980e
movss xmm0, dword [rbp + 8]
addss xmm11, xmm0
movss xmm3, dword [rbp + 0xc]
addss xmm12, xmm3
cmp byte [0x1401e7694], 0
je 0x140009788
lea eax, [r14 - 1]
test eax, 0xfffffffb
jne 0x140009788
xor esi, esi
cmp dword [rsp + 0x5c], esi
je 0x140009771
mov rcx, qword [rsp + 0x68]
mov rcx, qword [rcx]
add rcx, 0x1740
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov eax, dword [0x1401e82f0]
mov dword [rbp - 0x70], eax
mov qword [rbp - 0x68], rcx
lea rax, [rsp + 0x70]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 0x10
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x20
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
lea r9d, [rsi + 0x20]
lea r8, [rbp - 0x70]
mov edx, 0x22199c
mov rcx, qword [0x1401e82e8]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rax, qword [rsp + 0x70]
dec rax
lea rcx, [rax + rax*2]
mov rax, qword [rsp + 0x78]
lea r8, [rax + rcx*4]
lea rdx, [rbp]
call fcn.14005a710
movss xmm0, dword [rbp + 4]
movss xmm1, dword [rbp]
xorps xmm2, xmm2
ucomiss xmm1, xmm2
jp 0x140009735
jne 0x140009735
ucomiss xmm0, xmm2
jp 0x140009735
je 0x14000980e
mulss xmm1, dword [0x1401e7698]
subss xmm11, xmm1
mulss xmm0, dword [0x1401e769c]
subss xmm12, xmm0
movss dword [0x1401e82f8], xmm1
movss dword [0x1401e82fc], xmm0
mov dword [0x1401e8300], esi
movss xmm3, dword [rbp + 0xc]
movss xmm0, dword [rbp + 8]
jmp 0x14000978a
mov qword [0x1401e82f8], 0
mov dword [0x1401e8300], 0
jmp 0x14000978a
xor esi, esi
movss xmm1, dword [rsp + 0x48]
mulss xmm1, dword [0x1400bc440]
movss dword [rsp + 0x28], xmm1
movss dword [rsp + 0x20], xmm0
movaps xmm2, xmm11
movaps xmm1, xmm12
lea rcx, [rsp + 0x48]
call fcn.140077e10
cvttss2si r8, dword [rsp + 0x4c]
cvttss2si rdx, dword [rsp + 0x48]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
test bl, bl
je 0x14000980e
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r12, qword [rbp + 0x20]
mov rax, qword [rbp + 0x38]
cmp rax, 0xf
jbe 0x140009851
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140009849
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009849
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140078374
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.140077fb0
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400012d0
nop
call fcn.140001230
int3