Function at 0x140041440
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x1a8
mov rax, qword [0x1401ed028]
xor rax, rsp
mov qword [rsp + 0x198], rax
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140041477
mov byte [rsp + 0x20], 1
jmp 0x14004147c
mov byte [rsp + 0x20], 0
movzx eax, byte [rsp + 0x20]
mov byte [rsp + 0x26], al
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14004149c
mov byte [rsp + 0x21], 1
jmp 0x1400414a1
mov byte [rsp + 0x21], 0
movzx eax, byte [rsp + 0x21]
mov byte [rsp + 0x28], al
mov ecx, 0x41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400414c1
mov byte [rsp + 0x22], 1
jmp 0x1400414c6
mov byte [rsp + 0x22], 0
movzx eax, byte [rsp + 0x22]
mov byte [rsp + 0x27], al
mov ecx, 0x44
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400414e6
mov byte [rsp + 0x23], 1
jmp 0x1400414eb
mov byte [rsp + 0x23], 0
movzx eax, byte [rsp + 0x23]
mov byte [rsp + 0x29], al
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14004150b
mov byte [rsp + 0x24], 1
jmp 0x140041510
mov byte [rsp + 0x24], 0
movzx eax, byte [rsp + 0x24]
mov byte [rsp + 0x2a], al
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140041530
mov byte [rsp + 0x25], 1
jmp 0x140041535
mov byte [rsp + 0x25], 0
movzx eax, byte [rsp + 0x25]
mov byte [rsp + 0x2b], al
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x39]
test eax, eax
je 0x1400419b5
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x38]
test eax, eax
je 0x1400419b5
cmp qword [0x140222ff0], 0
je 0x1400419b5
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x23]
test eax, eax
je 0x1400419ac
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x25]
test eax, eax
je 0x1400419ac
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x26]
test eax, eax
je 0x1400419ac
mov rcx, qword [0x140222ff0]
call fcn.14002c210
mov qword [rsp + 0x30], rax
mov rcx, qword [0x140222ff0]
call fcn.14002c1c0
movzx eax, al
cmp eax, 2
je 0x1400419aa
mov rax, qword [rsp + 0x1c0]
xorps xmm0, xmm0
comiss xmm0, dword [rax + 0x3c]
jb 0x1400415ff
mov rax, qword [rsp + 0x1c0]
movss xmm0, dword [0x1401d7eac]
movss dword [rax + 0x3c], xmm0
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x178]
call fcn.140028c40
mov rax, qword [rsp + 0x1c0]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x188]
mov rcx, qword [rsp + 0x48]
call fcn.14003d7b0
movzx eax, byte [rsp + 0x26]
test eax, eax
je 0x1400416a3
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x27]
test eax, eax
je 0x1400416a3
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0x30]
call fcn.14003d590
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x1c0]
movss xmm0, dword [rax + 0x3c]
movss dword [rsp + 0x38], xmm0
movss xmm2, dword [rsp + 0x38]
lea rdx, [rsp + 0xdc]
mov rcx, qword [rsp + 0x50]
call fcn.14002c5c0
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400421c0
movzx eax, byte [rsp + 0x27]
test eax, eax
je 0x140041725
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x27]
test eax, eax
je 0x140041725
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0x30]
call fcn.14003d600
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x1c0]
movss xmm0, dword [rax + 0x3c]
movss dword [rsp + 0x3c], xmm0
movss xmm2, dword [rsp + 0x3c]
lea rdx, [rsp + 0xf4]
mov rcx, qword [rsp + 0x58]
call fcn.14002c5c0
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x100]
mov rcx, qword [rsp + 0x60]
call fcn.140042230
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400421c0
movzx eax, byte [rsp + 0x28]
test eax, eax
je 0x1400417a7
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x27]
test eax, eax
je 0x1400417a7
lea rdx, [rsp + 0x10c]
mov rcx, qword [rsp + 0x30]
call fcn.14003d590
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x1c0]
movss xmm0, dword [rax + 0x3c]
movss dword [rsp + 0x40], xmm0
movss xmm2, dword [rsp + 0x40]
lea rdx, [rsp + 0x118]
mov rcx, qword [rsp + 0x68]
call fcn.14002c5c0
mov qword [rsp + 0x70], rax
lea rdx, [rsp + 0x124]
mov rcx, qword [rsp + 0x70]
call fcn.140042230
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400421c0
movzx eax, byte [rsp + 0x29]
test eax, eax
je 0x140041812
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x27]
test eax, eax
je 0x140041812
lea rdx, [rsp + 0x130]
mov rcx, qword [rsp + 0x30]
call fcn.14003d600
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x1c0]
movss xmm0, dword [rax + 0x3c]
movss dword [rsp + 0x44], xmm0
movss xmm2, dword [rsp + 0x44]
lea rdx, [rsp + 0x13c]
mov rcx, qword [rsp + 0x78]
call fcn.14002c5c0
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400421c0
movzx eax, byte [rsp + 0x2a]
test eax, eax
je 0x140041866
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x27]
test eax, eax
je 0x140041866
mov rax, qword [rsp + 0x1c0]
movss xmm0, dword [rax + 0x3c]
divss xmm0, dword [0x1401d7eb0]
xorps xmm3, xmm3
movaps xmm2, xmm0
xorps xmm1, xmm1
lea rcx, [rsp + 0x148]
call fcn.140028c40
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400421c0
movzx eax, byte [rsp + 0x2b]
test eax, eax
je 0x1400418c1
mov rax, qword [rsp + 0x1c0]
movzx eax, byte [rax + 0x27]
test eax, eax
je 0x1400418c1
mov rax, qword [rsp + 0x1c0]
movss xmm0, dword [rax + 0x3c]
divss xmm0, dword [0x1401d7eb0]
xorps xmm0, xmmword [0x1401d8010]
xorps xmm3, xmm3
movaps xmm2, xmm0
xorps xmm1, xmm1
lea rcx, [rsp + 0x154]
call fcn.140028c40
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.1400421c0
mov rax, qword [rsp + 0x1c0]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x80], rax
lea r8, [rsp + 0x178]
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x188]
call fcn.14002c630
lea rcx, [rsp + 0x90]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_inet_ntoa
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xa0]
lea rcx, [rsp + 0x90]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_inet_ntoa
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x80]
call fcn.1400423f0
mov rax, qword [rsp + 0x1c0]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x88], rax
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm1, xmm1
lea rcx, [rsp + 0x16c]
call fcn.140028c40
lea rcx, [rsp + 0xb0]
mov rdi, rcx
mov rsi, rax
mov ecx, reloc.WS2_32.dll_inet_ntoa
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xc0]
lea rcx, [rsp + 0xb0]
mov rdi, rax
mov rsi, rcx
mov ecx, reloc.WS2_32.dll_inet_ntoa
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0xc0]
mov rcx, qword [rsp + 0x88]
call fcn.140042460
jmp 0x1400419b3
mov byte [0x14022da20], 0
jmp 0x1400419bc
mov byte [0x14022da20], 0
mov rcx, qword [rsp + 0x198]
xor rcx, rsp
call fcn.1400d63a0
add rsp, 0x1a8
pop rdi
pop rsi
ret