Function at 0x1400336a0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x1f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140043040]
xor rax, rsp
mov qword [rbp + 0x48], rax
movzx r10d, byte [0x1400430c0]
test r10b, r10b
je 0x140033798
mov r8, qword [0x1400440f0]
movdqa xmm0, xmmword [0x14003d1c0]
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x40]
call fcn.140002b40
mov r9d, eax
movd xmm2, r10d
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140044198]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x1400441d0]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
movss xmm1, dword [0x14003cb20]
movss dword [rsp + 0x28], xmm1
lea rdx, [rsp + 0x40]
lea rcx, [r8 + 0x1cc8]
call fcn.14001e6a0
mov eax, dword [0x140044278]
test eax, eax
jne 0x1400337ae
mov dword [0x14004427c], 0x6e
jmp 0x1400337df
cmp eax, 1
jne 0x1400337bf
mov dword [0x14004427c], 0x42
jmp 0x1400337df
cmp eax, 2
jne 0x1400337d0
mov dword [0x14004427c], 5
jmp 0x1400337df
cmp eax, 3
jne 0x1400337df
mov dword [0x14004427c], 2
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
xor r12d, r12d
mov qword [rbp - 0x38], r12
mov rcx, qword [0x1400441f8]
sub rcx, qword [0x1400441f0]
movabs rsi, 0x2aaaaaaaaaaaaaab
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400338d1
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdx, rax
ja 0x1400341db
lea rax, [rdx + rdx*2]
lea rbx, [rax*8]
test rbx, rbx
jne 0x140033849
mov edi, r12d
jmp 0x140033889
cmp rbx, 0x1000
jb 0x14003387e
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x1400341d5
call fcn.14003632c
test rax, rax
je 0x140033877
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140033889
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14003632c
mov rdi, rax
mov qword [rbp - 0x48], rdi
lea rcx, [rbx + rdi]
mov qword [rbp - 0x38], rcx
mov rbx, qword [0x1400441f8]
mov rdx, qword [0x1400441f0]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov rax, rsi
imul rbx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*2]
lea rcx, [rdi + rax*8]
mov qword [rbp - 0x40], rcx
movss xmm14, dword [0x14003cc00]
mov r13, r12
mov rcx, qword [0x1400441a0]
add rcx, 0x12ed8e38
call fcn.1400358b0
mov qword [0x1400441e8], rax
lea rcx, [rax + 0x1f0]
call fcn.1400358b0
lea rcx, [rax + 0x38]
call fcn.1400358b0
mov rcx, rax
call fcn.1400358b0
mov qword [0x1400441c8], rax
lea rcx, [rax + 0x30]
call fcn.1400358b0
mov qword [0x1400440f8], rax
lea rcx, [rax + 0x350]
call fcn.1400358b0
mov qword [0x140044190], rax
mov rcx, qword [0x1400440f8]
add rcx, 0x348
call fcn.1400358b0
mov rcx, qword [0x140044190]
add rcx, 0x2c8
call fcn.1400358b0
mov qword [0x140044180], rax
mov rcx, qword [0x140044190]
add rcx, 0x1b0
call fcn.1400358b0
mov qword [0x1400441d8], rax
mov rcx, qword [0x1400441e8]
add rcx, 0x40
call fcn.1400358b0
mov qword [0x1400441b0], rax
add rax, 0xa8
mov dword [rsp + 0x40], r12d
mov dword [rbp + 0x42], r12d
mov word [rbp + 0x46], r12w
mov dword [rbp + 0x20], 0x7f1e8b
mov qword [rbp + 0x28], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], 4
mov eax, dword [0x140044728]
mov dword [rbp + 0x24], eax
mov word [rbp + 0x40], 0x100
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x28
lea r8, [rbp + 0x20]
mov edx, 0x226c78
mov rcx, qword [0x140044730]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x1400441b0]
add rcx, 0xa0
call fcn.1400358b0
mov r14, rax
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x140033fbd
mov r15d, eax
movss xmm15, dword [0x14003cba0]
movss xmm7, dword [0x14003cb3c]
movss xmm8, dword [0x14003cac8]
movss xmm12, dword [0x14003caec]
lea r12, [0x1400430e0]
nop word [rax + rax]
mov rcx, r14
call fcn.1400358b0
mov rsi, rax
lea rcx, [rax + 0x4d08]
call fcn.140035b00
ucomiss xmm0, xmm15
jp 0x140033fac
jne 0x140033fac
lea rcx, [rsi + 0x328]
call fcn.1400358b0
mov rbx, rax
mov rcx, qword [0x140044180]
add rcx, 0x1239
call fcn.140035d60
lea rcx, [rsi + 0x2c8]
call fcn.1400358b0
lea rcx, [rax + 0x1239]
call fcn.140035d60
mov r8d, 0x6e
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.140031a40
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140031a40
mov rcx, qword [0x1400441d8]
add rcx, 0x120
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movsd qword [rsp + 0x50], xmm0
mov r8d, 0x18
lea rdx, [rsp + 0x40]
call fcn.140031600
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [0x140044260], xmm0
movsd xmm0, qword [rsp + 0x50]
movsd qword [0x140044270], xmm0
movups xmm10, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x40], xmm10
movsd xmm11, qword [rsp + 0x70]
movsd qword [rsp + 0x50], xmm11
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 8]
call fcn.140031bb0
movaps xmm13, xmm10
unpckhpd xmm13, xmm10
movaps xmm0, xmm13
subsd xmm0, qword [0x140044268]
cvtsd2ss xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movaps xmm0, xmm10
subsd xmm0, qword [0x140044260]
cvtsd2ss xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
movaps xmm1, xmm11
subsd xmm1, qword [0x140044270]
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x140033bc1
xorps xmm9, xmm9
sqrtss xmm9, xmm6
jmp 0x140033bcd
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm9, xmm0
divss xmm9, dword [0x14003cbc4]
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.140031a40
movups xmm7, xmmword [rbp - 0x80]
movaps xmmword [rsp + 0x60], xmm7
movsd xmm6, qword [rbp - 0x70]
movsd qword [rsp + 0x70], xmm6
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x30]
call fcn.140031bb0
movaps xmm0, xmm11
addsd xmm0, qword [0x14003cb58]
cvtpd2ps xmm4, xmm0
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm13
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
cvtps2pd xmm0, xmm0
cvtps2pd xmm3, xmm1
cvtps2pd xmm5, xmm4
unpcklpd xmm0, xmm3
movaps xmmword [rbp - 0x80], xmm0
movsd qword [rbp + 0x18], xmm5
movsd qword [rbp - 0x70], xmm5
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x10]
call fcn.140031bb0
movaps xmmword [rbp - 0x80], xmm10
movsd qword [rbp - 0x70], xmm11
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.140031bb0
movaps xmmword [rsp + 0x60], xmm7
movsd qword [rsp + 0x70], xmm6
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.140031bb0
movsd xmm10, qword [rbp - 8]
movaps xmm0, xmm10
movsd xmm13, qword [rbp - 0x28]
subsd xmm0, xmm13
andps xmm0, xmmword [0x14003d220]
cvtpd2ps xmm11, xmm0
cvtps2pd xmm0, xmm11
mulsd xmm0, qword [0x14003cb28]
cvtpd2ps xmm7, xmm0
movd xmm0, dword [0x14004362c]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm9
jbe 0x140033ef2
movsd xmm9, qword [rbp - 0x30]
cmp byte [0x1400430c1], 0
je 0x140033d7e
mov rcx, qword [0x1400441e8]
add rcx, 0x148
call fcn.140035a50
movaps xmm6, xmm0
lea rcx, [rbx + 0x2f0]
call fcn.140035b00
addss xmm0, xmm8
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
comisd xmm1, xmm6
jb 0x140033d17
mov dword [rsp + 0x28], 0xff0000ff
jmp 0x140033d53
mov rcx, qword [0x1400441e8]
add rcx, 0x148
call fcn.140035a50
movaps xmm6, xmm0
lea rcx, [rbx + 0x2f0]
call fcn.140035b00
addss xmm0, xmm8
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
comisd xmm1, xmm6
jae 0x140033d7e
mov dword [rsp + 0x28], 0xffffffff
movaps xmm0, xmm7
mulss xmm0, xmm12
cvtps2pd xmm1, xmm0
movaps xmm2, xmm9
subsd xmm2, xmm1
cvttss2si r9d, xmm11
cvttss2si r8d, xmm7
cvttsd2si edx, xmm10
cvttsd2si ecx, xmm2
call fcn.140032100
cmp byte [0x1400440ea], 0
je 0x140033e38
mov rcx, qword [0x1400441e8]
add rcx, 0x148
call fcn.140035a50
movaps xmm6, xmm0
lea rcx, [rbx + 0x2f0]
call fcn.140035b00
addss xmm0, xmm8
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
comisd xmm1, xmm6
jb 0x140033dc9
mov dword [rsp + 0x40], 0xff0000ff
jmp 0x140033e05
mov rcx, qword [0x1400441e8]
add rcx, 0x148
call fcn.140035a50
movaps xmm6, xmm0
lea rcx, [rbx + 0x2f0]
call fcn.140035b00
addss xmm0, xmm8
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
comisd xmm1, xmm6
jae 0x140033e38
mov dword [rsp + 0x40], 0xffffffff
cvttss2si r8d, xmm7
mulss xmm7, xmm12
cvtps2pd xmm0, xmm7
movsd xmm1, qword [rbp - 0x10]
lea rax, [rsp + 0x40]
subsd xmm1, xmm0
mov qword [rsp + 0x20], rax
cvttss2si r9d, xmm11
cvttsd2si edx, xmm10
cvttsd2si ecx, xmm1
call fcn.140032440
cmp byte [0x1400430c3], 0
je 0x140033e96
mov rcx, qword [0x1400441e8]
add rcx, 0x148
call fcn.140035a50
movaps xmm6, xmm0
lea rcx, [rbx + 0x2f0]
call fcn.140035b00
addss xmm0, xmm8
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
comisd xmm1, xmm6
jb 0x140033e96
cvttsd2si r9d, xmm13
cvttsd2si r8d, xmm9
mov eax, dword [0x1400441d0]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov qword [rsp + 0x20], r12
call fcn.140032000
mov rcx, qword [0x1400441e8]
add rcx, 0x148
call fcn.140035a50
movaps xmm6, xmm0
lea rcx, [rbx + 0x2f0]
call fcn.140035b00
addss xmm0, xmm8
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
comisd xmm1, xmm6
jae 0x140033ef2
cvttsd2si r9d, xmm13
cvttsd2si r8d, xmm9
mov eax, dword [0x1400441d0]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
lea rax, [0x1400432a0]
mov qword [rsp + 0x20], rax
call fcn.140032000
mov eax, dword [0x1400441d0]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm2, qword [rbp - 0x60]
subsd xmm2, xmm0
mov eax, dword [0x140044198]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm1, qword [rbp - 0x58]
subsd xmm1, xmm0
mulsd xmm1, xmm1
mulsd xmm2, xmm2
addsd xmm1, xmm2
cvtpd2ps xmm3, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x140033f4b
xorps xmm7, xmm7
sqrtss xmm7, xmm3
jmp 0x140033f56
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm7, xmm0
mov rcx, qword [0x1400441e8]
add rcx, 0x148
call fcn.140035a50
movaps xmm6, xmm0
lea rcx, [rbx + 0x2f0]
call fcn.140035b00
addss xmm0, xmm8
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
comisd xmm1, xmm6
jb 0x140033fa4
movss xmm0, dword [0x1400430c8]
comiss xmm0, xmm7
jbe 0x140033fa4
comiss xmm14, xmm7
jbe 0x140033fa4
movaps xmm14, xmm7
mov r13, rsi
movss xmm7, dword [0x14003cb3c]
add r14, 8
sub r15, 1
jne 0x140033a60
xor r12d, r12d
cmp byte [0x1400430c2], 0
je 0x140034167
test r13, r13
je 0x140034167
mov ecx, dword [0x1400441e0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140034167
lea rcx, [r13 + 0x328]
call fcn.1400358b0
mov r8d, dword [0x14004427c]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140031a40
movups xmm0, xmmword [rbp - 0x60]
movaps xmmword [rbp - 0x30], xmm0
movsd xmm1, qword [rbp - 0x50]
movsd qword [rbp - 0x20], xmm1
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x60]
call fcn.140031bb0
movsd xmm0, qword [rbp - 0x58]
ucomisd xmm0, qword [0x14003caa0]
jp 0x14003403b
je 0x140034167
cvtpd2ps xmm7, xmm0
movsd xmm8, qword [rbp - 0x60]
cvtpd2ps xmm8, xmm8
mov eax, dword [0x1400441d0]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov eax, dword [0x140044198]
cdq
sub eax, edx
sar eax, 1
movd xmm5, eax
cvtdq2ps xmm5, xmm5
cvttss2si eax, dword [0x1400430c4]
xorps xmm4, xmm4
xorps xmm3, xmm3
xorps xmm2, xmm2
movss xmm9, dword [0x14003d240]
ucomiss xmm8, xmm4
jp 0x140034090
je 0x1400340eb
comiss xmm8, xmm6
jbe 0x1400340c3
movaps xmm3, xmm6
subss xmm3, xmm8
xorps xmm3, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
movaps xmm1, xmm3
addss xmm1, xmm6
movaps xmm0, xmm6
addss xmm0, xmm6
comiss xmm1, xmm0
jbe 0x1400340c3
xorps xmm3, xmm3
comiss xmm6, xmm8
jbe 0x1400340eb
movaps xmm3, xmm8
subss xmm3, xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
movaps xmm1, xmm3
addss xmm1, xmm6
comiss xmm4, xmm1
jbe 0x1400340eb
xorps xmm3, xmm3
ucomiss xmm7, xmm4
jp 0x1400340f2
je 0x140034149
comiss xmm7, xmm5
jbe 0x140034123
movaps xmm2, xmm5
subss xmm2, xmm7
xorps xmm2, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm5
movaps xmm0, xmm5
addss xmm0, xmm5
comiss xmm1, xmm0
jbe 0x140034123
xorps xmm2, xmm2
comiss xmm5, xmm7
jbe 0x140034149
movaps xmm2, xmm7
subss xmm2, xmm5
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm5
comiss xmm4, xmm1
jbe 0x140034149
xorps xmm2, xmm2
cvttss2si r8, xmm2
cvttss2si rdx, xmm3
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov ecx, 1
call qword [sym.imp.USER32.dll_mouse_event]
nop
lea rcx, [rbp - 0x48]
call fcn.1400356c0
mov rcx, qword [rbp + 0x48]
xor rcx, rsp
call fcn.140035ea0
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140030f10
int3
call fcn.140035e70
int3