Function at 0x140006f80
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x968]
sub rsp, 0xa50
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x1401d12b0]
xor rax, rsp
mov qword [rbp + 0x8a0], rax
xor r15d, r15d
movabs r12, 0x2aaaaaaaaaaaaaab
movss xmm15, dword [0x1401b3e60]
xorps xmm6, xmm6
nop dword [rax]
xor edx, edx
mov r8d, 0x8f0
lea rcx, [rbp - 0x50]
call sub.VCRUNTIME140.dll_memset
mov r8d, dword [0x1401e29d0]
mov edx, dword [0x1401e29d4]
lea rcx, [rbp - 0x50]
call fcn.140005070
nop
mov ecx, WSAStartup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007061
cmp byte [0x1401e2a7f], 0
sete byte [0x1401e2a7f]
mov ecx, __WSAFDIsSet
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rbp + 0x58]
test eax, eax
jne 0x1400070bc
cmp dword [rbp + 0x60], eax
jle 0x1400071c0
movzx esi, byte [0x1401e2a72]
mov ecx, dword [reloc.WS2_32.dll_accept]
movzx r14d, byte [0x1401e2a73]
movzx edi, byte [0x1401e2a71]
movss xmm0, dword [0x1401d140c]
movss dword [0x1401e2a8c], xmm0
movss xmm14, dword [0x1401d13fc]
mov ebx, dword [0x1401e2a74]
movd xmm0, dword [0x1401d142c]
cvtdq2ps xmm0, xmm0
jmp 0x1400071e2
cmp eax, 1
jne 0x140007116
cmp dword [rbp + 0x60], 0
jle 0x1400071c0
movzx esi, byte [0x1401e2a85]
mov ecx, dword [reloc.WS2_32.dll_accept]
movzx r14d, byte [0x1401e2a86]
movzx edi, byte [0x1401e2a84]
movss xmm0, dword [0x1401d149c]
movss dword [0x1401e2a8c], xmm0
movss xmm14, dword [0x1401d148c]
mov ebx, dword [0x1401e2a80]
movd xmm0, dword [0x1401d14bc]
cvtdq2ps xmm0, xmm0
jmp 0x1400071e2
cmp eax, 2
jne 0x14000716d
cmp dword [rbp + 0x60], 0
jle 0x1400071c0
movzx esi, byte [0x1401e2a63]
mov ecx, dword [reloc.WS2_32.dll_accept]
movzx r14d, byte [0x1401e2a70]
movzx edi, byte [0x1401e2a62]
movss xmm0, dword [0x1401d13cc]
movss dword [0x1401e2a8c], xmm0
movss xmm14, dword [0x1401d13bc]
mov ebx, dword [0x1401e2a6c]
movd xmm0, dword [0x1401d13ec]
cvtdq2ps xmm0, xmm0
jmp 0x1400071e2
cmp eax, 3
jne 0x1400071c0
cmp dword [rbp + 0x60], 0
jle 0x1400071c0
movzx esi, byte [0x1401e2a7d]
mov ecx, dword [reloc.WS2_32.dll_accept]
movzx r14d, byte [0x1401e2a7e]
movzx edi, byte [0x1401e2a7c]
movss xmm0, dword [0x1401d144c]
movss dword [0x1401e2a8c], xmm0
movss xmm14, dword [0x1401d143c]
mov ebx, dword [0x1401e2a78]
movd xmm0, dword [0x1401d146c]
cvtdq2ps xmm0, xmm0
jmp 0x1400071e2
xor sil, sil
mov ecx, 1
xor r14b, r14b
xor dil, dil
mov dword [0x1401e2a8c], 0
movaps xmm14, xmm6
mov ebx, r15d
movaps xmm0, xmm6
movss dword [0x1401e2a90], xmm0
mov byte [0x1401e2960], sil
mov qword [0x140203d38], 0
mov dword [0x140203d40], 0
mov qword [0x140203d28], 0
mov dword [0x140203d30], 0
mov qword [0x140203d48], 0
mov dword [0x140203d50], 0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140007246
test r14b, r14b
je 0x1400076dc
cmp byte [0x1401e2a7f], 0
je 0x1400076dc
cmp dword [rbp + 0x60], 0
jle 0x1400076dc
test sil, sil
je 0x1400076dc
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov qword [rsp + 0x78], r15
cmp dword [0x1401e2a68], 0
jne 0x1400072b9
test dil, dil
jne 0x140007295
test ebx, ebx
je 0x1400072b0
sub ebx, 1
je 0x1400072a7
sub ebx, 1
je 0x14000729e
cmp ebx, 1
jne 0x1400072f0
lea r8, [rbp + 0x644]
jmp 0x1400072e4
lea r8, [rbp + 0x62c]
jmp 0x1400072e4
lea r8, [rbp + 0x620]
jmp 0x1400072e4
lea r8, [rbp + 0x614]
jmp 0x1400072e4
test dil, dil
jne 0x1400072dd
test ebx, ebx
je 0x1400073cc
sub ebx, 1
je 0x1400073c0
sub ebx, 1
je 0x1400073b4
cmp ebx, 1
jne 0x1400072f0
lea r8, [rbp + 0x40c]
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.140008ac0
mov rdi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
cmp rbx, rdi
je 0x14000767d
movsd xmm12, qword [rbx]
mov eax, dword [rbx + 8]
mov dword [rsp + 0x40], eax
movsd qword [rsp + 0x38], xmm12
ucomiss xmm12, xmm6
jp 0x140007322
je 0x14000766b
movss xmm11, dword [rsp + 0x3c]
movaps xmm8, xmm11
movss xmm9, dword [rsp + 0x40]
movaps xmm10, xmm9
movaps xmm13, xmm12
mov esi, eax
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14000747c
movaps xmm0, xmm12
subss xmm0, dword [0x140218628]
movss xmm1, dword [0x1401b3188]
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm7, xmm0
subss xmm11, dword [0x14021862c]
movss xmm1, dword [0x1401b3188]
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
subss xmm9, dword [0x140218630]
movss xmm1, dword [0x1401b3188]
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm7
ja 0x1400073d8
xorps xmm3, xmm3
sqrtss xmm3, xmm7
jmp 0x1400073e3
lea r8, [rbp + 0x3f4]
jmp 0x1400072e4
lea r8, [rbp + 0x3e8]
jmp 0x1400072e4
lea r8, [rbp + 0x3dc]
jmp 0x1400072e4
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm3, xmm0
divss xmm3, dword [0x1401b3284]
cmp dword [0x1401e2a68], 0
jne 0x14000740e
movss xmm4, dword [rbp + 0x530]
movss xmm5, dword [rbp + 0x534]
movss xmm7, dword [rbp + 0x538]
jmp 0x140007426
movss xmm4, dword [rbp + 0x2f8]
movss xmm5, dword [rbp + 0x2fc]
movss xmm7, dword [rbp + 0x300]
movss xmm2, dword [rbp - 0x30]
andps xmm2, xmmword [0x1401b3e40]
movss xmm0, dword [rbp - 0x34]
andps xmm0, xmmword [0x1401b3e40]
divss xmm3, xmm0
movaps xmm1, xmm3
mulss xmm1, xmm4
addss xmm1, xmm12
movaps xmm12, xmm1
movaps xmm11, xmm3
mulss xmm11, xmm5
addss xmm11, xmm8
movaps xmm9, xmm3
mulss xmm9, xmm2
mulss xmm9, xmm3
addss xmm9, xmm10
mulss xmm3, xmm7
addss xmm9, xmm3
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
movss dword [rsp + 0x50], xmm12
movss dword [rsp + 0x54], xmm11
movss dword [rsp + 0x58], xmm9
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x50]
call fcn.140006400
test al, al
je 0x1400074c4
movss xmm2, dword [rsp + 0x20]
movss xmm8, dword [rsp + 0x24]
jmp 0x1400074cb
movaps xmm2, xmm6
movaps xmm8, xmm6
mov eax, dword [0x1401e29d4]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, dword [0x1401e29d0]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
movaps xmm10, xmm14
addss xmm10, xmm14
movaps xmm5, xmm6
movaps xmm4, xmm6
ucomiss xmm2, xmm6
jp 0x1400074fb
je 0x140007550
movd xmm3, ecx
cvtdq2ps xmm3, xmm3
comiss xmm2, xmm3
jbe 0x140007530
movaps xmm5, xmm3
subss xmm5, xmm2
xorps xmm5, xmm15
divss xmm5, xmm10
movaps xmm1, xmm5
addss xmm1, xmm3
lea eax, [rcx + rcx]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jbe 0x140007530
movaps xmm5, xmm6
comiss xmm3, xmm2
jbe 0x140007550
movaps xmm5, xmm2
subss xmm5, xmm3
divss xmm5, xmm10
movaps xmm0, xmm5
addss xmm0, xmm3
comiss xmm6, xmm0
jbe 0x140007550
movaps xmm5, xmm6
ucomiss xmm8, xmm6
jp 0x140007558
je 0x1400075b1
movd xmm7, edx
cvtdq2ps xmm7, xmm7
comiss xmm8, xmm7
jbe 0x14000758f
movaps xmm4, xmm7
subss xmm4, xmm8
xorps xmm4, xmm15
divss xmm4, xmm10
movaps xmm1, xmm4
addss xmm1, xmm7
lea eax, [rdx + rdx]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jbe 0x14000758f
movaps xmm4, xmm6
comiss xmm7, xmm8
jbe 0x1400075b1
movaps xmm4, xmm8
subss xmm4, xmm7
divss xmm4, xmm10
movaps xmm0, xmm4
addss xmm0, xmm7
comiss xmm6, xmm0
jbe 0x1400075b1
movaps xmm4, xmm6
movss xmm3, dword [0x1401d147c]
movss xmm2, dword [0x1401d14cc]
movaps xmm0, xmm5
unpcklps xmm0, xmm4
movq rdx, xmm0
lea rcx, [rsp + 0x30]
call fcn.140093e00
cvttss2si ecx, dword [rsp + 0x34]
cvttss2si eax, dword [rsp + 0x30]
mov dword [rbp - 0x80], r15d
mov dword [rbp - 0x70], r15d
mov qword [rbp - 0x6c], 1
mov dword [rbp - 0x78], eax
mov dword [rbp - 0x74], ecx
mov r8d, Ordinal_41
lea rdx, [rbp - 0x80]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
movss dword [0x140203d38], xmm12
movss dword [0x140203d3c], xmm11
movss dword [0x140203d40], xmm9
movsd qword [0x140203d28], xmm13
mov dword [0x140203d30], esi
cmp dword [0x1401e2a68], 0
jne 0x14000764f
movsd xmm0, qword [rbp + 0x638]
mov eax, dword [rbp + 0x640]
jmp 0x14000765d
movsd xmm0, qword [rbp + 0x400]
mov eax, dword [rbp + 0x408]
mov dword [0x140203d50], eax
movsd qword [0x140203d48], xmm0
add rbx, 0xc
cmp rbx, rdi
jne 0x140007303
mov rbx, qword [rsp + 0x68]
test rbx, rbx
je 0x1400076dc
mov rcx, qword [rsp + 0x78]
sub rcx, rbx
mov rax, r12
imul rcx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 2
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400076c6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400076fe
mov rcx, rbx
call fcn.14012eab4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
mov qword [rsp + 0x60], 1
lea rcx, [rsp + 0x60]
call fcn.140008910
nop
lea rcx, [rbp - 0x50]
call fcn.140007710
jmp 0x140007010
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3