Function at 0x1400339b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140044040]
xor rax, rsp
mov qword [rbp - 0x18], rax
mov r14, qword [rdx + 0x18]
mov rdi, rdx
mov rdx, qword [r8 + 0x18]
mov rsi, r8
mov r15, rcx
cmp r14, rdx
je 0x140033d27
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x20]
mov qword [r11 + 8], rbx
add rdx, 0x3cb
mov qword [r11 + 0x20], r12
xor r12d, r12d
mov dword [rbp - 0x20], r12d
mov qword [r11 - 0x78], r12
lea r9d, [r12 + 4]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1400440c0]
lea rdx, [r14 + 0x3cb]
mov ebx, dword [rbp - 0x20]
lea r9d, [r12 + 4]
lea r8, [rbp - 0x30]
mov dword [rbp - 0x30], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp ebx, dword [rbp - 0x30]
je 0x140033d17
mov rbx, qword [rdi + 0x28]
lea r9d, [r12 + 4]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x30]
mov dword [rbp - 0x30], r12d
mov qword [rsp + 0x20], r12
lea rdx, [rbx + 0x334]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x30], r12d
jle 0x140033d17
mov rdx, qword [rsi + 0x28]
lea r9d, [r12 + 4]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x30]
add rdx, 0x334
mov dword [rbp - 0x30], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x30], r12d
jle 0x140033d17
mov rcx, qword [0x1400440c0]
lea rdx, [rbx + 0x318]
lea r9d, [r12 + 8]
mov qword [rbp - 0x30], r12
lea r8, [rbp - 0x30]
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x30]
lea r9d, [r12 + 8]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x20]
add rdx, 0x1e0
mov qword [rbp - 0x20], r12
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x20]
lea r9d, [r12 + 0xc]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x40]
add rdx, 0xc0
mov qword [rbp - 0x40], r12
mov dword [rbp - 0x38], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x40]
call fcn.140032a50
movsd xmm0, qword [r15]
lea ecx, [r12 + 5]
movsd qword [rbp - 0x40], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140033d17
movss xmm0, dword [rbp - 0x3c]
subss xmm0, dword [rbp - 0x2c]
movsd xmm1, qword [0x14003d920]
movaps xmmword [rsp + 0x60], xmm7
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x14003d920]
movaps xmm7, xmm0
movss xmm0, dword [rbp - 0x40]
subss xmm0, dword [rbp - 0x30]
cvtps2pd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm7
ja 0x140033bae
xorps xmm0, xmm0
sqrtsd xmm0, xmm7
jmp 0x140033bb6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movaps xmm7, xmmword [rsp + 0x60]
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movss xmm0, dword [0x14003d94c]
comiss xmm0, xmm1
jb 0x140033d17
xor edx, edx
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 2]
call qword [sym.imp.USER32.dll_mouse_event]
lea rcx, [rbp - 0x30]
call fcn.140032dd0
mov rdi, qword [rbp - 0x30]
movabs rax, 0x7fffffffffb3b4be
movabs rbx, 0x7fffffffffffffff
cmp rdi, rax
jg 0x140033c18
add rdi, 0x4c4b40
jmp 0x140033c1b
mov rdi, rbx
movabs rsi, 0x4e94914effff
movabs r14, 0x431bde82d7b634db
nop
lea rcx, [rbp - 0x30]
call fcn.140032dd0
mov rax, qword [rbp - 0x30]
cmp rdi, rax
je 0x140033c87
jl 0x140033c87
mov rcx, rdi
sub rcx, rax
cmp rcx, rsi
jg 0x140033c7b
mov rax, r14
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140033c72
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140033c30
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140033c30
xor edx, edx
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor r8d, r8d
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
lea rcx, [rbp - 0x30]
call fcn.140032dd0
mov rax, qword [rbp - 0x30]
movabs rcx, 0x7fffffffff67697e
cmp rax, rcx
jg 0x140033cc0
lea rbx, [rax + 0x989680]
lea rcx, [rbp - 0x30]
call fcn.140032dd0
mov rax, qword [rbp - 0x30]
cmp rbx, rax
je 0x140033d17
jl 0x140033d17
mov rcx, rbx
sub rcx, rax
cmp rcx, rsi
jg 0x140033d0b
mov rax, r14
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140033d02
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x140033cc0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x140033cc0
mov rbx, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xb8]
mov rcx, qword [rbp - 0x18]
xor rcx, rsp
call fcn.140034ec0
add rsp, 0x70
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret