Function at 0x1400282c0
Capabilities:
Log keystrokes via polling
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push r12
push r14
push r15
sub rsp, 0x220
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
movaps xmmword [rax - 0x78], xmm11
movaps xmmword [rax - 0x88], xmm12
movaps xmmword [rax - 0x98], xmm13
movaps xmmword [rax - 0xa8], xmm14
movaps xmmword [rax - 0xb8], xmm15
mov rax, qword [0x140232100]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov r15, qword [0x14023a7a8]
mov rax, qword [0x14023a7b0]
mov rbx, qword [rax + 0x50]
test rbx, rbx
je 0x140028f1a
mov qword [rsp + 0x70], 1
lea rax, [rbx + 0x1290]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x14023a7d0]
call fcn.14002c350
cmp byte [rsp + 0x80], 0
je 0x140028393
lea rcx, [0x140239d30]
call fcn.140029360
jmp 0x140028f1a
cmp qword [0x140239b98], 0x10000
jb 0x140028f1a
mov rax, qword [0x14023a7b0]
mov r14, qword [rax + 0x58]
cmp r14, 0x10000
jb 0x140028f1a
mov rax, qword [0x140239ba0]
add rax, 0x290
mov qword [rsp + 0x30], rax
xorps xmm9, xmm9
mov qword [rsp + 0xbc], 0
mov dword [rsp + 0xb8], 0
mov qword [rsp + 0x70], 0xc
lea r9, [rsp + 0x70]
lea r8, [rsp + 0xb8]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x14023a7d0]
call fcn.14002c350
movss xmm0, dword [rsp + 0xb8]
ucomiss xmm0, xmm9
jp 0x140028447
jne 0x140028447
movss xmm0, dword [rsp + 0xbc]
ucomiss xmm0, xmm9
jp 0x140028447
jne 0x140028447
movss xmm0, dword [rsp + 0xc0]
ucomiss xmm0, xmm9
jp 0x140028447
je 0x140028f1a
mov qword [rsp + 0x9c], 0
mov dword [rsp + 0x98], 0
mov qword [rsp + 0x70], 0xc
lea rax, [rbx + 0xb90]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x98]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x14023a7d0]
call fcn.14002c350
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe0], xmm0
movups xmmword [rsp + 0xf0], xmm0
mov dword [rsp + 0x100], eax
mov qword [rsp + 0x70], 0x24
lea rax, [rbx + 0xb6c]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x14023a7d0]
call fcn.14002c350
mov qword [rsp + 0xac], 0
mov dword [rsp + 0xa8], 0
mov qword [rsp + 0x70], 0xc
lea rax, [rbx + 0x2f0]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x14023a7d0]
call fcn.14002c350
mov qword [rsp + 0x8c], 0
mov dword [rsp + 0x88], 0
mov qword [rsp + 0x70], 0xc
lea rax, [rbx + 0x2fc]
mov qword [rsp + 0x30], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x30]
mov rcx, qword [0x14023a7d0]
call fcn.14002c350
movups xmm0, xmmword [rsp + 0xe0]
movups xmmword [0x140239e0c], xmm0
movups xmm1, xmmword [rsp + 0xf0]
movups xmmword [0x140239e1c], xmm1
mov eax, dword [rsp + 0x100]
mov dword [0x140239e2c], eax
movsd xmm0, qword [rsp + 0xa8]
movsd qword [0x140239df4], xmm0
mov eax, dword [rsp + 0xb0]
mov dword [0x140239dfc], eax
movsd xmm0, qword [rsp + 0x88]
movsd qword [0x140239e00], xmm0
mov eax, dword [rsp + 0x90]
mov dword [0x140239e08], eax
lea rax, [rbx + 0x1308]
mov qword [rsp + 0x60], rax
xor r12d, r12d
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x30], 8
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x60]
mov rcx, qword [0x14023a7d0]
call fcn.14002c350
mov rcx, qword [rsp + 0x70]
call fcn.140026b90
mov byte [0x140239e48], al
movsd xmm0, qword [rsp + 0x98]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x48], eax
movsd xmm0, qword [rsp + 0x88]
movsd qword [rsp + 0x70], xmm0
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x78], eax
movsd xmm0, qword [rsp + 0xa8]
movsd qword [rsp + 0x30], xmm0
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x38], eax
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x110], xmm0
movups xmm1, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x120], xmm1
mov eax, dword [rsp + 0x100]
mov dword [rsp + 0x130], eax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0xc8]
call fcn.140026080
mov rdi, rax
lea rax, [0x140239e30]
movabs rsi, 0x2aaaaaaaaaaaaaab
cmp rax, rdi
je 0x140028783
mov r8, qword [0x140239e30]
test r8, r8
je 0x140028758
mov rcx, qword [0x140239e40]
sub rcx, r8
mov rax, rsi
imul rcx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 2
cmp rdx, 0x1000
jb 0x14002873b
add rdx, 0x27
mov rcx, qword [r8 - 8]
sub r8, rcx
lea rax, [r8 - 8]
cmp rax, 0x1f
ja 0x140028f80
mov r8, rcx
mov rcx, r8
call fcn.1401383fc
mov qword [0x140239e30], r12
mov qword [0x140239e38], r12
mov qword [0x140239e40], r12
mov rax, qword [rdi]
mov qword [0x140239e30], rax
mov rax, qword [rdi + 8]
mov qword [0x140239e38], rax
mov rax, qword [rdi + 0x10]
mov qword [0x140239e40], rax
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
lea rcx, [rsp + 0xc8]
call fcn.140029280
movzx r9d, byte [0x140239e48]
test r9b, r9b
je 0x140028a60
movss xmm6, dword [rsp + 0x98]
movss xmm10, dword [rsp + 0x9c]
movss xmm7, dword [rsp + 0xa0]
movss xmm11, dword [rsp + 0x88]
movss xmm15, dword [rsp + 0x90]
movss xmm0, dword [rsp + 0xac]
movss xmm14, dword [rsp + 0xb0]
movups xmm8, xmmword [rsp + 0xe0]
movups xmm13, xmmword [rsp + 0xf0]
mov r8d, 6
mov edx, r8d
lea rcx, [rsp + 0x114]
nop word [rax + rax]
mov rax, rdx
dec rdx
test rax, rax
je 0x140028821
add rcx, 0xc
jmp 0x140028810
movaps xmm1, xmm0
movaps xmm5, xmm8
shufps xmm5, xmm8, 0xff
mulss xmm1, xmm5
movss dword [rsp + 0x30], xmm1
movaps xmm1, xmm0
mulss xmm1, xmm13
movss dword [rsp + 0x5c], xmm1
movaps xmm4, xmm13
shufps xmm4, xmm13, 0x55
mulss xmm0, xmm4
movss dword [rsp + 0x60], xmm0
movaps xmm0, xmm14
movaps xmm3, xmm13
shufps xmm3, xmm13, 0xaa
mulss xmm0, xmm3
movss dword [rsp + 0x6c], xmm0
movaps xmm0, xmm14
movaps xmm2, xmm13
shufps xmm2, xmm13, 0xff
mulss xmm0, xmm2
movss dword [rsp + 0x68], xmm0
mulss xmm14, dword [rsp + 0x100]
movaps xmm12, xmm11
mulss xmm12, xmm8
movss dword [rsp + 0x50], xmm11
movaps xmm0, xmm8
shufps xmm0, xmm8, 0x55
movss xmm13, dword [rsp + 0x50]
mulss xmm13, xmm0
movss dword [rsp + 0x50], xmm13
shufps xmm8, xmm8, 0xaa
mulss xmm11, xmm8
movss xmm8, dword [rsp + 0x8c]
movaps xmm0, xmm8
mulss xmm0, xmm5
movss dword [rsp + 0x58], xmm0
movaps xmm0, xmm8
movups xmm13, xmmword [rsp + 0xf0]
mulss xmm0, xmm13
movss dword [rsp + 0x54], xmm0
mulss xmm8, xmm4
movss dword [rsp + 0x70], xmm8
movaps xmm5, xmm15
mulss xmm5, xmm3
movaps xmm4, xmm15
mulss xmm4, xmm2
mulss xmm15, dword [rsp + 0x100]
lea rcx, [rsp + 0x114]
mov rax, r8
dec r8
test rax, rax
je 0x140028935
add rcx, 0xc
jmp 0x140028924
movaps xmm1, xmm7
addss xmm1, xmm14
movaps xmm2, xmm10
addss xmm2, dword [rsp + 0x68]
movaps xmm0, xmm6
addss xmm0, dword [rsp + 0x6c]
addss xmm7, xmm15
addss xmm10, xmm4
addss xmm6, xmm5
movaps xmm13, xmm12
addss xmm13, xmm0
addss xmm2, dword [rsp + 0x50]
movaps xmm0, xmm11
addss xmm0, xmm1
addss xmm12, xmm6
addss xmm10, dword [rsp + 0x50]
addss xmm11, xmm7
mov edx, 8
lea rcx, [rsp + 0x114]
mov rax, rdx
dec rdx
test rax, rax
je 0x1400289a4
add rcx, 0xc
jmp 0x140028993
movaps xmm3, xmm0
addss xmm3, dword [rsp + 0x60]
movaps xmm4, xmm2
addss xmm4, dword [rsp + 0x5c]
movaps xmm7, xmm13
addss xmm7, dword [rsp + 0x30]
addss xmm8, xmm0
movss xmm6, dword [rsp + 0x54]
addss xmm6, xmm2
movss xmm5, dword [rsp + 0x58]
addss xmm5, xmm13
movaps xmm0, xmm11
addss xmm0, dword [rsp + 0x70]
movaps xmm1, xmm10
addss xmm1, dword [rsp + 0x54]
movaps xmm2, xmm12
addss xmm2, dword [rsp + 0x58]
addss xmm11, dword [rsp + 0x60]
addss xmm10, dword [rsp + 0x5c]
addss xmm12, dword [rsp + 0x30]
addss xmm8, xmm3
addss xmm6, xmm4
addss xmm8, xmm0
addss xmm6, xmm1
addss xmm8, xmm11
addss xmm6, xmm10
movss xmm0, dword [0x140215db0]
mulss xmm8, xmm0
mulss xmm6, xmm0
addss xmm5, xmm7
addss xmm5, xmm2
addss xmm5, xmm12
mulss xmm5, xmm0
movss dword [rsp + 0x40], xmm5
movss dword [rsp + 0x44], xmm6
movss dword [rsp + 0x48], xmm8
jmp 0x140028a7a
movsd xmm0, qword [rsp + 0x98]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [rsp + 0xa0]
mov dword [rsp + 0x48], eax
lea rax, [rsp + 0x40]
movsd xmm0, qword [rax]
movsd qword [0x140239ddc], xmm0
mov eax, dword [rax + 8]
mov dword [0x140239de4], eax
mov rcx, qword [0x14023a7d0]
test r9b, r9b
je 0x140028ae2
lea rax, [rbx + 0xba0]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x30], 8
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x60]
call fcn.14002c350
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x70]
call fcn.140026c90
jmp 0x140028b1a
lea rax, [rbx + 0x249c]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x44], r12
mov dword [rsp + 0x40], r12d
mov qword [rsp + 0x70], 0xc
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
call fcn.14002c350
lea rax, [rsp + 0x40]
movsd xmm0, qword [rax]
movsd qword [0x140239de8], xmm0
mov eax, dword [rax + 8]
mov dword [0x140239df0], eax
mov qword [0x140239ca0], r14
mov rax, qword [0x140239cb0]
mov qword [0x140239ca8], rax
cmp rax, rbx
je 0x140028b55
lea rcx, [0x140239d30]
call fcn.140029360
mov qword [0x140239cb0], rbx
lea rdx, [rsp + 0xc8]
lea rcx, [0x140239c90]
call fcn.140027a00
movsd xmm8, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rsp + 0x40], xmm8
ucomiss xmm8, xmm9
movss xmm7, dword [rsp + 0x44]
jp 0x140028ba6
jne 0x140028ba6
ucomiss xmm7, xmm9
jp 0x140028ba6
jne 0x140028ba6
movd xmm6, eax
ucomiss xmm6, xmm9
jp 0x140028baa
jne 0x140028baa
jmp 0x140028f1a
movd xmm6, eax
movsd qword [0x140239d18], xmm8
mov dword [0x140239d20], eax
mov r8, qword [0x140239d50]
test r8, r8
je 0x140028f18
movaps xmm1, xmm9
movaps xmm0, xmm9
movaps xmm2, xmm9
mov rdx, qword [0x140239d48]
lea r9, [rdx + r8]
cmp rdx, r9
je 0x140028c20
mov r10, qword [0x140239d38]
mov r11, qword [0x140239d40]
dec r11
nop word [rax + rax]
mov rax, rdx
and rax, r11
mov rcx, qword [r10 + rax*8]
addss xmm2, dword [rcx]
addss xmm0, dword [rcx + 4]
addss xmm1, dword [rcx + 8]
inc rdx
cmp rdx, r9
jne 0x140028c00
xorps xmm3, xmm3
test r8, r8
js 0x140028c2f
cvtsi2ss xmm3, r8
jmp 0x140028c45
mov rax, r8
shr rax, 1
and r8d, 1
or rax, r8
cvtsi2ss xmm3, rax
addss xmm3, xmm3
divss xmm2, xmm3
divss xmm0, xmm3
divss xmm1, xmm3
ucomiss xmm2, xmm9
jp 0x140028c6d
jne 0x140028c6d
ucomiss xmm0, xmm9
jp 0x140028c6d
jne 0x140028c6d
ucomiss xmm1, xmm9
jp 0x140028c6d
je 0x140028f18
movaps xmm2, xmm8
mulss xmm2, dword [0x140239bbc]
movaps xmm0, xmm7
mulss xmm0, dword [0x140239bcc]
addss xmm2, xmm0
movaps xmm1, xmm6
mulss xmm1, dword [0x140239bdc]
addss xmm2, xmm1
addss xmm2, dword [0x140239bec]
movss xmm0, dword [0x140215d74]
comiss xmm0, xmm2
ja 0x140028f1a
mov ecx, dword [r15]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140028f1a
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc8], xmm1
mov qword [rsp + 0xd8], r12
mov rcx, qword [0x140239db8]
sub rcx, qword [0x140239db0]
mov rax, rsi
imul rcx
mov rbx, rdx
sar rbx, 1
mov rax, rbx
shr rax, 0x3f
add rbx, rax
je 0x140028d79
movabs rax, 0x1555555555555555
cmp rbx, rax
ja 0x140028f86
mov rdx, rbx
call fcn.140029ae0
mov rdi, rax
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], rax
lea rcx, [rbx + rbx*2]
lea rdx, [rax + rcx*4]
mov qword [rsp + 0xd8], rdx
mov rbx, qword [0x140239db8]
mov rdx, qword [0x140239db0]
sub rbx, rdx
mov r8, rbx
mov rcx, rax
call fcn.140171ce0
mov rax, rsi
imul rbx
sar rdx, 1
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*2]
lea rcx, [rdi + rax*4]
mov qword [rsp + 0xd0], rcx
mov rax, qword [rsp + 0xc8]
movss xmm0, dword [rax + 8]
addss xmm0, dword [rax + 0x14]
movss xmm2, dword [rax + 4]
addss xmm2, dword [rax + 0x10]
addss xmm0, dword [rax + 0x20]
addss xmm2, dword [rax + 0x1c]
addss xmm0, dword [rax + 0x2c]
addss xmm2, dword [rax + 0x28]
addss xmm0, dword [rax + 0x38]
addss xmm2, dword [rax + 0x34]
addss xmm0, dword [rax + 0x44]
addss xmm2, dword [rax + 0x40]
addss xmm0, dword [rax + 0x50]
addss xmm2, dword [rax + 0x4c]
addss xmm0, dword [rax + 0x5c]
addss xmm2, dword [rax + 0x58]
movss xmm1, dword [0x140215d78]
mulss xmm0, xmm1
mulss xmm2, xmm1
subss xmm6, xmm0
subss xmm7, xmm2
movss xmm0, dword [rax]
addss xmm0, dword [rax + 0xc]
addss xmm0, dword [rax + 0x18]
addss xmm0, dword [rax + 0x24]
addss xmm0, dword [rax + 0x30]
addss xmm0, dword [rax + 0x3c]
addss xmm0, dword [rax + 0x48]
addss xmm0, dword [rax + 0x54]
mulss xmm0, xmm1
subss xmm8, xmm0
movaps xmm1, xmm8
mulss xmm1, xmm8
movaps xmm0, xmm6
mulss xmm0, xmm6
addss xmm1, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm1
ja 0x140028e3e
xorps xmm0, xmm0
sqrtss xmm0, xmm1
jmp 0x140028e46
movaps xmm0, xmm1
call fcn.140170cc4
movaps xmm1, xmm0
movaps xmm0, xmm7
call fcn.14016bc18
movaps xmm7, xmm0
movaps xmm1, xmm8
movaps xmm0, xmm6
call fcn.14016bc18
movaps xmm6, xmm0
xorps xmm6, xmmword [0x140216570]
movaps xmm0, xmm6
call fcn.14016b9d0
cmp ax, 2
je 0x140028eb9
movss xmm8, dword [0x140215fd4]
movaps xmm1, xmm8
movaps xmm0, xmm6
call fcn.14016cea4
movaps xmm9, xmm0
movss xmm0, dword [0x140216168]
comiss xmm0, xmm9
jbe 0x140028ea6
addss xmm9, xmm8
jmp 0x140028eb9
comiss xmm9, dword [0x140215f60]
jbe 0x140028eb9
addss xmm9, dword [0x140216198]
subss xmm7, dword [0x140239b88]
addss xmm7, dword [0x140239b88]
subss xmm9, dword [0x140239ba8]
addss xmm9, dword [0x140239ba8]
mov rdx, qword [0x140239b80]
add rdx, 0x4c0a350
movaps xmm2, xmm9
call fcn.140029490
mov rdx, qword [0x140239b80]
add rdx, 0x4c0a354
movaps xmm2, xmm7
call fcn.140029490
nop
lea rcx, [rsp + 0xc8]
call fcn.140029280
jmp 0x140028f1a
jmp 0x140028f1a
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.140138160
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r12
ret
call fcn.140145644
int3
call fcn.140029b80
int3