Function at 0x14004ef80
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
sub rsp, 0xc0
mov eax, dword [0x140195704]
xor ebp, ebp
test eax, eax
jne 0x14004efa1
mov dword [0x140194ec8], ebp
jmp 0x14004eff4
cmp eax, 1
jne 0x14004efb2
mov dword [0x140194ec8], 7
jmp 0x14004eff4
cmp eax, 2
jne 0x14004efc3
mov dword [0x140194ec8], 6
jmp 0x14004eff4
cmp eax, 3
jne 0x14004efd4
mov dword [0x140194ec8], 5
jmp 0x14004eff4
cmp eax, 4
jne 0x14004efe5
mov dword [0x140194ec8], 3
jmp 0x14004eff4
cmp eax, 5
jne 0x14004eff4
mov dword [0x140194ec8], 4
call fcn.14004ec90
mov rbx, rax
test rax, rax
je 0x14004f368
mov r8d, dword [0x140194ec8]
lea rcx, [rsp + 0xd0]
mov qword [rsp + 0xd8], rsi
mov rdx, rax
mov qword [rsp + 0xe0], rdi
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xa0], xmm7
movaps xmmword [rsp + 0x90], xmm8
movaps xmmword [rsp + 0x80], xmm9
movaps xmmword [rsp + 0x70], xmm10
movaps xmmword [rsp + 0x60], xmm11
movaps xmmword [rsp + 0x50], xmm13
call fcn.14004d390
cmp byte [0x140195726], bpl
movss xmm0, dword [0x14018a1c0]
cvtps2pd xmm0, xmm0
je 0x14004f07e
addsd xmm0, qword [0x14012e180]
jmp 0x14004f086
addsd xmm0, qword [0x14012e1b0]
xor ecx, ecx
cvtpd2ps xmm11, xmm0
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
mov ecx, 1
sub eax, edx
sar eax, 1
mov edi, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm10, dword [rsp + 0xd4]
cdq
movsd xmm13, qword [0x14012e1d0]
sub eax, edx
sar eax, 1
cvtps2pd xmm0, xmm10
mov esi, eax
movd xmm1, eax
cvtdq2pd xmm1, xmm1
subsd xmm0, xmm1
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movss xmm9, dword [rsp + 0xd0]
movaps xmm6, xmm0
movd xmm1, edi
cvtdq2pd xmm1, xmm1
cvtps2pd xmm0, xmm9
subsd xmm0, xmm1
movaps xmm1, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm6
ucomiss xmm1, xmm0
ja 0x14004f11a
xorps xmm6, xmm6
sqrtss xmm6, xmm0
jmp 0x14004f122
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
movss xmm4, dword [0x14012e760]
xorps xmm2, xmm2
ucomiss xmm9, xmm2
xorps xmm8, xmm8
xorps xmm7, xmm7
jp 0x14004f13c
je 0x14004f198
movd xmm3, edi
cvtdq2ps xmm3, xmm3
comiss xmm9, xmm3
jbe 0x14004f176
movaps xmm8, xmm3
lea eax, [rdi + rdi]
subss xmm8, xmm9
movd xmm0, eax
movaps xmm1, xmm3
cvtdq2ps xmm0, xmm0
xorps xmm8, xmm4
divss xmm8, xmm11
addss xmm1, xmm8
comiss xmm1, xmm0
jbe 0x14004f176
xorps xmm8, xmm8
comiss xmm3, xmm9
jbe 0x14004f198
movaps xmm8, xmm9
subss xmm8, xmm3
divss xmm8, xmm11
addss xmm3, xmm8
comiss xmm2, xmm3
jbe 0x14004f198
xorps xmm8, xmm8
ucomiss xmm10, xmm2
mov rdi, qword [rsp + 0xe0]
jp 0x14004f1a8
je 0x14004f1fd
movd xmm3, esi
cvtdq2ps xmm3, xmm3
comiss xmm10, xmm3
jbe 0x14004f1de
movaps xmm7, xmm3
lea eax, [rsi + rsi]
subss xmm7, xmm10
movd xmm0, eax
movaps xmm1, xmm3
cvtdq2ps xmm0, xmm0
xorps xmm7, xmm4
divss xmm7, xmm11
addss xmm1, xmm7
comiss xmm1, xmm0
jbe 0x14004f1de
xorps xmm7, xmm7
comiss xmm3, xmm10
jbe 0x14004f1fd
movaps xmm7, xmm10
subss xmm7, xmm3
divss xmm7, xmm11
addss xmm3, xmm7
comiss xmm2, xmm3
jbe 0x14004f1fd
xorps xmm7, xmm7
mov rcx, qword [0x140195728]
lea rdx, [rbx + 0x90]
mov r9d, recvfrom
mov qword [rsp + 0x20], rbp
lea r8, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x140194688]
lea r8, [rsp + 0x40]
mov rcx, qword [0x140195728]
add rdx, 0x90
movss xmm9, dword [rsp + 0x30]
mov r9d, recvfrom
movss xmm10, dword [rsp + 0x34]
mov qword [rsp + 0x20], rbp
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [0x14017c06c]
xorps xmm1, xmm1
movaps xmm11, xmmword [rsp + 0x60]
mov rsi, qword [rsp + 0xd8]
cvtps2pd xmm0, xmm0
cvtss2sd xmm1, xmm6
addsd xmm0, qword [0x14012e180]
comisd xmm0, xmm1
jb 0x14004f33a
movss xmm0, dword [rsp + 0x44]
movaps xmm1, xmm13
movss xmm2, dword [rsp + 0x40]
subss xmm0, xmm10
subss xmm2, xmm9
cvtps2pd xmm6, xmm0
cvtps2pd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm9, xmm0
movaps xmm1, xmm13
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm9, xmm0
movaps xmm1, xmm13
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm9, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm9
ja 0x14004f2eb
xorps xmm0, xmm0
sqrtsd xmm0, xmm9
jmp 0x14004f2f4
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movss xmm1, dword [0x14017baac]
mulsd xmm0, qword [0x14012e198]
cvtps2pd xmm1, xmm1
comisd xmm1, xmm0
jb 0x14004f33a
mov ecx, dword [0x140193e5c]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14004f33a
xor r9d, r9d
mov qword [rsp + 0x20], rbp
cvttss2si r8, xmm7
lea ecx, [r9 + 1]
cvttss2si rdx, xmm8
call qword [sym.imp.USER32.dll_mouse_event]
movaps xmm10, xmmword [rsp + 0x70]
movaps xmm9, xmmword [rsp + 0x80]
movaps xmm8, xmmword [rsp + 0x90]
movaps xmm7, xmmword [rsp + 0xa0]
movaps xmm6, xmmword [rsp + 0xb0]
movaps xmm13, xmmword [rsp + 0x50]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xc0
pop rbp
ret