Function at 0x140004050
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x178]
sub rsp, 0x250
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400cd740]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov rsi, rdx
mov qword [rsp + 0x50], rdx
mov r13, rcx
mov qword [rbp - 0x50], rcx
mov ecx, dword [0x1400ce070]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x1400040fa
mov byte [0x1400ce040], 0
mov qword [0x1400ce038], 0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400048d4
mov ecx, dword [0x1400ce070]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400048d4
cmp byte [0x1400ce040], 0
jne 0x1400048d4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rax
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], rax
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x20], r15
mov byte [rbp + 8], al
mov qword [rbp + 0x28], rax
xorps xmm13, xmm13
xorps xmm12, xmm12
xorps xmm14, xmm14
movss xmm10, dword [0x1400bf028]
mov eax, dword [0x1400cd77c]
cdq
sub eax, edx
sar eax, 1
movd xmm11, eax
cvtdq2ps xmm11, xmm11
movss dword [rsp + 0x40], xmm11
mov eax, dword [0x1400cd778]
cdq
sub eax, edx
sar eax, 1
movd xmm9, eax
cvtdq2ps xmm9, xmm9
movss dword [rbp - 0x48], xmm9
movss dword [rsp + 0x44], xmm11
movss dword [rsp + 0x48], xmm9
movaps xmm0, xmmword [0x1400bf1c0]
movups xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x58]
call fcn.14000a340
mov edi, eax
mov rcx, qword [0x1400ce050]
mov rdx, qword [rcx + 0x4ae0]
mov rcx, qword [rdx]
lea r8, str.Background
xor edx, edx
call fcn.14000de80
mov rbx, rax
movss xmm15, dword [0x1400bef2c]
movss xmm6, dword [0x1400bef64]
test edi, 0xff000000
je 0x140004265
movss xmm2, dword [0x1400cd7c0]
comiss xmm15, xmm2
ja 0x140004265
subss xmm2, xmm15
mov dword [rsp + 0x20], Ordinal_50
xor r9d, r9d
lea rdx, [rsp + 0x44]
mov rcx, rax
call fcn.14002cb40
mov r8d, dword [rbx + 0x78]
dec r8d
mov dword [rbx + 0x78], r8d
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], 1
mov r9d, edi
mov rdx, qword [rbx + 0x80]
mov rcx, rbx
call fcn.14002b6b0
mov dword [rbx + 0x78], 0
mov r12, qword [r13]
mov rbx, qword [r12]
cmp rbx, r12
je 0x14000486e
nop word [rax + rax]
lea rdx, [rbx + 0x10]
lea rcx, [rbp + 0x30]
call fcn.140004a00
nop
mov rdi, qword [rbp + 0x38]
mov rax, qword [0x1400ce038]
test rax, rax
je 0x1400042a7
cmp rdi, rax
je 0x14000454c
movaps xmm8, xmmword [rsi]
movaps xmm9, xmmword [rsi + 0x10]
movaps xmm2, xmmword [rsi + 0x30]
movaps xmm3, xmm2
shufps xmm3, xmm2, 0x55
movss xmm7, dword [rbp + 0x68]
mulss xmm3, xmm7
movaps xmm0, xmm2
movss xmm6, dword [rbp + 0x64]
mulss xmm0, xmm6
addss xmm3, xmm0
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xaa
movss xmm5, dword [rbp + 0x6c]
mulss xmm1, xmm5
addss xmm3, xmm1
shufps xmm2, xmm2, 0xff
addss xmm3, xmm2
movss xmm4, dword [0x1400bef64]
divss xmm4, xmm3
movaps xmm11, xmm8
shufps xmm11, xmm8, 0x55
mulss xmm11, xmm7
movaps xmm0, xmm8
mulss xmm0, xmm6
addss xmm11, xmm0
movaps xmm1, xmm8
shufps xmm1, xmm8, 0xaa
mulss xmm1, xmm5
addss xmm11, xmm1
shufps xmm8, xmm8, 0xff
addss xmm11, xmm8
mulss xmm11, xmm4
movaps xmm2, xmm9
shufps xmm2, xmm9, 0x55
mulss xmm2, xmm7
movaps xmm0, xmm9
mulss xmm0, xmm6
addss xmm2, xmm0
movaps xmm1, xmm9
shufps xmm1, xmm9, 0xaa
mulss xmm1, xmm5
addss xmm2, xmm1
shufps xmm9, xmm9, 0xff
addss xmm2, xmm9
mulss xmm2, xmm4
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1400cd77c]
mulss xmm11, xmm15
mulss xmm11, xmm0
addss xmm11, xmm15
mulss xmm0, xmm15
addss xmm11, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1400cd778]
movaps xmm7, xmm0
mulss xmm7, xmm15
mulss xmm2, xmm15
mulss xmm2, xmm0
addss xmm2, xmm15
subss xmm7, xmm2
movaps xmm0, xmm11
subss xmm0, dword [rsp + 0x40]
cvtss2sd xmm0, xmm0
movsd xmm1, qword [0x1400bef80]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movaps xmm1, xmm7
movss xmm9, dword [rbp - 0x48]
subss xmm1, xmm9
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x1400bef80]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x140004408
sqrtsd xmm0, xmm0
jmp 0x14000440d
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
comiss xmm13, xmm10
ja 0x14000442c
comiss xmm10, xmm1
ja 0x14000442c
mov rsi, qword [rbp + 0x90]
jmp 0x1400044fb
movaps xmm10, xmm1
movaps xmm12, xmm11
movaps xmm14, xmm7
mov rax, qword [rbp + 0x30]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdi
movsd xmm0, qword [rbp + 0x40]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [rbp + 0x48]
mov dword [rbp - 0x28], eax
movsd xmm0, qword [rbp + 0x4c]
movsd qword [rbp - 0x24], xmm0
mov eax, dword [rbp + 0x54]
mov dword [rbp - 0x1c], eax
movsd xmm0, qword [rbp + 0x58]
movsd qword [rbp - 0x18], xmm0
mov eax, dword [rbp + 0x60]
mov dword [rbp - 0x10], eax
movsd xmm0, qword [rbp + 0x64]
movsd qword [rbp - 0xc], xmm0
mov eax, dword [rbp + 0x6c]
mov dword [rbp - 4], eax
mov rax, qword [rbp + 0x70]
mov qword [rbp], rax
lea r9, [rbp + 0x78]
mov rsi, qword [rbp + 0x90]
cmp rsi, 0x10
cmovae r9, qword [rbp + 0x78]
mov r14, qword [rbp + 0x88]
cmp r14, r15
ja 0x1400044d2
lea rdi, [rbp + 8]
cmp r15, 0x10
cmovae rdi, qword [rbp + 8]
mov qword [rbp + 0x18], r14
mov r8, r14
mov rdx, r9
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rdi], 0
jmp 0x1400044e5
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.140001d60
mov rsi, qword [rbp + 0x90]
mov eax, dword [rbp + 0x98]
mov dword [rbp + 0x28], eax
mov eax, dword [rbp + 0x9c]
mov dword [rbp + 0x2c], eax
mov r15, qword [rbp + 0x20]
cmp rsi, 0x10
jb 0x140004533
lea rdx, [rsi + 1]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000452e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004860
call fcn.1400a685c
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r12
je 0x140004867
mov rsi, qword [rsp + 0x50]
jmp 0x140004280
movaps xmm7, xmmword [rsi]
movaps xmm8, xmmword [rsi + 0x10]
movaps xmm2, xmmword [rsi + 0x30]
movaps xmm3, xmm2
shufps xmm3, xmm2, 0x55
movss xmm6, dword [rbp + 0x68]
mulss xmm3, xmm6
movaps xmm0, xmm2
movss xmm5, dword [rbp + 0x64]
mulss xmm0, xmm5
addss xmm3, xmm0
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xaa
movss xmm4, dword [rbp + 0x6c]
mulss xmm1, xmm4
addss xmm3, xmm1
shufps xmm2, xmm2, 0xff
addss xmm3, xmm2
movss xmm10, dword [0x1400bef64]
divss xmm10, xmm3
movaps xmm12, xmm7
shufps xmm12, xmm7, 0x55
mulss xmm12, xmm6
movaps xmm0, xmm7
mulss xmm0, xmm5
addss xmm12, xmm0
movaps xmm1, xmm7
shufps xmm1, xmm7, 0xaa
mulss xmm1, xmm4
addss xmm12, xmm1
shufps xmm7, xmm7, 0xff
addss xmm12, xmm7
mulss xmm12, xmm10
movaps xmm2, xmm8
shufps xmm2, xmm8, 0x55
mulss xmm2, xmm6
movaps xmm0, xmm8
mulss xmm0, xmm5
addss xmm2, xmm0
movaps xmm1, xmm8
shufps xmm1, xmm8, 0xaa
mulss xmm1, xmm4
addss xmm2, xmm1
shufps xmm8, xmm8, 0xff
addss xmm2, xmm8
mulss xmm2, xmm10
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1400cd77c]
mulss xmm12, xmm15
mulss xmm12, xmm0
addss xmm12, xmm15
mulss xmm0, xmm15
addss xmm12, xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1400cd778]
movaps xmm14, xmm0
mulss xmm14, xmm15
mulss xmm2, xmm15
mulss xmm2, xmm0
addss xmm2, xmm15
subss xmm14, xmm2
movaps xmm0, xmm12
movss xmm11, dword [rsp + 0x40]
subss xmm0, xmm11
cvtss2sd xmm0, xmm0
movsd xmm1, qword [0x1400bef80]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
movaps xmm2, xmm14
subss xmm2, xmm9
cvtps2pd xmm0, xmm2
movsd xmm1, qword [0x1400bef80]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1400046ae
sqrtsd xmm0, xmm0
jmp 0x1400046b3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm10, xmm10
cvtsd2ss xmm10, xmm0
mov rax, qword [rbp + 0x30]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdi
movsd xmm0, qword [rbp + 0x40]
movsd qword [rbp - 0x30], xmm0
mov eax, dword [rbp + 0x48]
mov dword [rbp - 0x28], eax
movsd xmm0, qword [rbp + 0x4c]
movsd qword [rbp - 0x24], xmm0
mov eax, dword [rbp + 0x54]
mov dword [rbp - 0x1c], eax
movsd xmm0, qword [rbp + 0x58]
movsd qword [rbp - 0x18], xmm0
mov eax, dword [rbp + 0x60]
mov dword [rbp - 0x10], eax
movsd xmm0, qword [rbp + 0x64]
movsd qword [rbp - 0xc], xmm0
mov eax, dword [rbp + 0x6c]
mov dword [rbp - 4], eax
mov rax, qword [rbp + 0x70]
mov qword [rbp], rax
lea r9, [rbp + 0x78]
mov rdi, qword [rbp + 0x78]
mov rsi, qword [rbp + 0x90]
cmp rsi, 0x10
cmovae r9, rdi
mov r14, qword [rbp + 0x88]
cmp r14, r15
ja 0x140004755
lea rbx, [rbp + 8]
cmp r15, 0x10
cmovae rbx, qword [rbp + 8]
mov r8, r14
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rbx], 0
jmp 0x14000476c
mov rdx, r14
lea rcx, [rbp + 8]
call fcn.140001d60
mov rsi, qword [rbp + 0x90]
mov rdi, qword [rbp + 0x78]
cmp rsi, 0x10
jb 0x1400047a3
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14000479b
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004860
mov rcx, rdi
call fcn.1400a685c
mov r15, qword [rbp + 0x20]
comiss xmm10, dword [0x1400cd7c0]
ja 0x140004944
comiss xmm13, xmm10
ja 0x140004944
mov rax, qword [rbp - 0x38]
mov qword [0x1400ce038], rax
movss xmm4, dword [0x1400cd7b8]
movaps xmm3, xmm4
movaps xmm1, xmm12
subss xmm1, xmm11
andps xmm1, xmmword [0x1400bf4b0]
movaps xmm2, xmm14
subss xmm2, xmm9
andps xmm2, xmmword [0x1400bf4b0]
movss xmm5, dword [0x1400bf4c0]
comiss xmm11, xmm12
jbe 0x140004806
xorps xmm4, xmm5
comiss xmm9, xmm14
jbe 0x14000480f
xorps xmm3, xmm5
mulss xmm1, xmm4
cvttss2si eax, xmm1
mov dword [rbp - 0x48], eax
mulss xmm2, xmm3
cvttss2si eax, xmm2
mov dword [rbp - 0x44], eax
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 8
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r9d, 8
lea r8, [rbp - 0x48]
mov edx, 0x222054
mov rcx, qword [0x1400ce060]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x14000489b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movss xmm11, dword [rsp + 0x40]
cmp qword [0x1400ce038], 0
jbe 0x1400047a7
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400047a7
mov byte [0x1400ce040], 1
mov qword [0x1400ce038], 0
cmp r15, 0x10
jb 0x1400048d4
lea rdx, [r15 + 1]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000497b
call fcn.1400a685c
nop
mov rcx, r13
call fcn.1400071f0
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400a6800
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp r15, 0x10
jb 0x1400048d4
lea rdx, [r15 + 1]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400048ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400048ce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3