Function at 0x140007af0
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x228]
sub rsp, 0x320
mov rax, qword [0x140126010]
xor rax, rsp
mov qword [rbp + 0x170], rax
cmp byte [0x1401261f0], 0
je 0x1400081c6
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
xor esi, esi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r14
movabs r14, 0x142670d80
movaps xmmword [r11 - 0x18], xmm6
movss xmm6, dword [0x14011221c]
movaps xmmword [r11 - 0x28], xmm7
movaps xmmword [r11 - 0x38], xmm8
movaps xmmword [r11 - 0x48], xmm9
movaps xmmword [r11 - 0x58], xmm10
movaps xmmword [r11 - 0x68], xmm11
xorps xmm11, xmm11
movaps xmmword [r11 - 0x98], xmm14
movaps xmmword [r11 - 0xa8], xmm15
movss xmm15, dword [0x140112550]
movaps xmmword [r11 - 0x78], xmm12
movaps xmmword [r11 - 0x88], xmm13
nop dword [rax]
cmp byte [0x14012620d], sil
jne 0x140007bb1
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], 0x64
call fcn.1400081e0
jmp 0x140008141
mov ecx, dword [0x14012625c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140007bef
mov ecx, dword [0x140126260]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140007bef
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x50], 0xa
call fcn.1400081e0
jmp 0x140008141
mov ecx, dword [0x14012622c]
test ecx, ecx
je 0x140007c32
cmp ecx, 1
jne 0x140008141
cmp dword [0x140126260], esi
je 0x140007c7f
mov ecx, dword [0x14012625c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140007c7f
mov ecx, dword [0x140126260]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140007c7f
jmp 0x140007c68
cmp dword [0x140126260], esi
je 0x140007c7f
mov ecx, dword [0x14012625c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140008141
mov ecx, dword [0x140126260]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140008141
mov ecx, dword [0x14012625c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140008141
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x1401260b0]
jne 0x140008141
movaps xmm1, xmmword [0x140112390]
lea r8, [rsp + 0x58]
movd xmm12, dword [0x1401261fc]
xorps xmm0, xmm0
movd xmm13, dword [0x140126200]
xor eax, eax
mov rcx, qword [0x1401262c0]
mov r9d, 8
movups xmmword [rbp], xmm1
mov rdx, r14
movaps xmm1, xmmword [0x140112400]
movaps xmm9, xmm11
movups xmmword [rbp + 0x20], xmm1
movaps xmm10, xmm11
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x1c], rax
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp + 0x68], rax
lea rax, [rbp - 0x74]
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x30], rax
xor eax, eax
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp + 0xe4], rax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp + 0x168], rax
lea rax, [rbp + 0x8c]
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x28], rsi
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movaps xmm0, xmmword [0x1401123b0]
movaps xmm7, xmm11
movups xmmword [rbp + 0x40], xmm1
movaps xmm8, xmm11
movaps xmm1, xmmword [0x140112390]
movups xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm1
movaps xmm1, xmmword [0x140112400]
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x70], xmm0
mov dword [rbp - 0x20], esi
movups xmmword [rbp + 0x80], xmm0
mov dword [rbp - 0x14], 0x3f800000
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0x60], rsi
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xd0], rax
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xd8], rsi
movups xmmword [rbp + 0xc0], xmm0
mov dword [rbp + 0xe0], esi
movups xmmword [rbp + 0xf0], xmm0
movaps xmm0, xmmword [0x1401123b0]
cvtdq2ps xmm12, xmm12
mov dword [rbp + 0xec], 0x3f800000
mov qword [rbp + 0x160], rsi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x20], rsi
cvtdq2ps xmm13, xmm13
movups xmmword [rbp + 0x120], xmm1
xorps xmm1, xmm1
movups xmmword [rbp + 0x110], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm1
mulss xmm12, xmm6
mulss xmm13, xmm6
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x150], xmm0
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rsp + 0x58]
lea r8, [rsp + 0x60]
mov rcx, qword [0x1401262c0]
add rdx, 0x60
mov r9d, 8
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rsp + 0x60]
mov rcx, qword [0x1401262c0]
lea rdx, [rbx + 0x548]
mov r9d, 8
mov qword [rsp + 0x58], rsi
lea r8, [rsp + 0x58]
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1401262c0]
lea rdx, [rbx + 0x540]
mov rdi, qword [rsp + 0x58]
lea r8, [rsp + 0x50]
mov r9d, 8
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rsp + 0x50]
lea rcx, [rbp + 0x70]
mov qword [rbp + 0x70], rax
call fcn.140001580
movaps xmm14, xmm12
mov ebx, esi
unpcklps xmm14, xmm13
lea rcx, [rbp + 0x70]
call fcn.140001520
test al, al
je 0x140007ece
cmp qword [rbp + 0x80], rsi
je 0x1400080ce
mov rcx, qword [0x1401262c0]
lea r8, [rsp + 0x50]
movsxd rdx, ebx
mov r9d, 8
add rdx, rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rsp + 0x50]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x70], rax
call fcn.140001580
mov rdx, qword [rsp + 0x70]
lea r8, [rsp + 0x40]
mov rcx, qword [0x1401262c0]
add rdx, 0x13c9
mov r9d, 1
mov byte [rsp + 0x40], sil
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rsp + 0x40], sil
jne 0x1400080bf
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x1400080bf
cmp rax, qword [rbp + 0x70]
je 0x1400080bf
lea rcx, [rsp + 0x70]
call fcn.140001520
test al, al
jne 0x1400080bf
cmp qword [rbp - 0x80], rsi
jne 0x1400080bf
cmp qword [rbp + 0x80], rsi
jne 0x1400080bf
mov eax, dword [rbp + 0x88]
cmp dword [rbp - 0x78], eax
je 0x1400080bf
cmp byte [rbp - 0x1c], sil
jne 0x1400080bf
movss xmm0, dword [rbp + 0xe0]
subss xmm0, dword [rbp - 0x20]
movss xmm1, dword [rbp + 0xd8]
movss xmm2, dword [rbp + 0xdc]
subss xmm2, dword [rbp - 0x24]
subss xmm1, dword [rbp - 0x28]
mulss xmm0, xmm0
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140007fe9
xorps xmm6, xmm6
sqrtss xmm6, xmm2
jmp 0x140007ff4
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
comiss xmm6, dword [0x140126224]
ja 0x1400080bf
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x30]
mov r8d, 0x68
mov qword [rsp + 0x48], rsi
call fcn.140008370
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x30]
call fcn.140008470
test al, al
je 0x1400080bf
movsd xmm0, qword [rsp + 0x48]
xorps xmm2, xmm2
movaps xmm1, xmm0
mov qword [rsp + 0x50], rsi
movsd xmm2, xmm14
subps xmm2, xmm0
movaps xmm1, xmm2
movaps xmm3, xmm1
mulps xmm3, xmm3
movaps xmm0, xmm3
shufps xmm0, xmm3, 0x55
addss xmm3, xmm0
movss xmm0, dword [0x14012621c]
shufps xmm3, xmm3, 0
sqrtps xmm1, xmm3
andps xmm1, xmm15
comiss xmm0, xmm1
jbe 0x1400080bf
mov ecx, dword [0x140126228]
test ecx, ecx
je 0x1400080a0
cmp ecx, 1
jne 0x1400080bf
ucomiss xmm10, xmm11
jp 0x140008094
jne 0x140008094
movaps xmm10, xmm6
jmp 0x1400080b2
comiss xmm10, xmm6
jbe 0x1400080bf
movaps xmm10, xmm6
jmp 0x1400080b2
ucomiss xmm9, xmm11
jp 0x1400080a8
je 0x1400080ae
comiss xmm9, xmm1
jbe 0x1400080bf
movaps xmm9, xmm1
movss xmm8, dword [rsp + 0x4c]
movss xmm7, dword [rsp + 0x48]
add ebx, 8
cmp ebx, 0x200
jl 0x140007eb4
xorps xmm2, xmm2
movaps xmm0, xmm7
unpcklps xmm0, xmm8
xorps xmm3, xmm3
movsd xmm3, xmm0
movaps xmm0, xmm11
unpcklps xmm0, xmm11
movsd xmm2, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 3
cmp al, 3
je 0x140008139
movd xmm0, dword [0x140126220]
subss xmm13, xmm8
cvtdq2ps xmm0, xmm0
mov qword [rsp + 0x20], rsi
xor r9d, r9d
subss xmm12, xmm7
divss xmm13, xmm0
lea ecx, [r9 + 1]
divss xmm12, xmm0
cvttss2si r8d, xmm13
cvttss2si edx, xmm12
neg r8d
neg edx
call qword [sym.imp.USER32.dll_mouse_event]
movss xmm6, dword [0x14011221c]
cmp byte [0x1401261f0], sil
jne 0x140007b90
movaps xmm15, xmmword [rsp + 0x280]
movaps xmm14, xmmword [rsp + 0x290]
movaps xmm13, xmmword [rsp + 0x2a0]
movaps xmm12, xmmword [rsp + 0x2b0]
movaps xmm11, xmmword [rsp + 0x2c0]
movaps xmm10, xmmword [rsp + 0x2d0]
movaps xmm9, xmmword [rsp + 0x2e0]
movaps xmm8, xmmword [rsp + 0x2f0]
movaps xmm7, xmmword [rsp + 0x300]
movaps xmm6, xmmword [rsp + 0x310]
mov r14, qword [rsp + 0x348]
mov rdi, qword [rsp + 0x340]
mov rsi, qword [rsp + 0x338]
mov rbx, qword [rsp + 0x330]
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1400ce140
add rsp, 0x320
pop rbp
ret