Function at 0x1400345b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x178]
sub rsp, 0x250
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x140043010]
xor rax, rsp
mov qword [rbp + 0xa8], rax
movzx r10d, byte [0x140043050]
test r10b, r10b
je 0x1400346aa
mov r8, qword [0x140044080]
movaps xmm0, xmmword [0x14003cd60]
movups xmmword [rsp + 0x70], xmm0
lea rcx, [rsp + 0x70]
call fcn.140002bb0
mov r9d, eax
movd xmm2, r10d
cvtdq2ps xmm2, xmm2
mov eax, dword [0x140044130]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mov eax, dword [0x140044168]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x70], xmm0
movss dword [rsp + 0x74], xmm1
movss xmm1, dword [0x14003cb14]
movss dword [rsp + 0x28], xmm1
lea rdx, [rsp + 0x70]
lea rcx, [r8 + 0x1cc8]
call fcn.14001f350
mov eax, dword [0x140044218]
test eax, eax
jne 0x1400346c0
mov dword [0x14004421c], 0x62
jmp 0x1400346f1
cmp eax, 1
jne 0x1400346d1
mov dword [0x14004421c], 0x42
jmp 0x1400346f1
cmp eax, 2
jne 0x1400346e2
mov dword [0x14004421c], 5
jmp 0x1400346f1
cmp eax, 3
jne 0x1400346f1
mov dword [0x14004421c], 2
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], 0
mov rcx, qword [0x140044198]
sub rcx, qword [0x140044190]
movabs rsi, 0x2aaaaaaaaaaaaaab
mov rax, rsi
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1400347e3
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdx, rax
ja 0x140035179
lea rax, [rdx + rdx*2]
lea rbx, [rax*8]
cmp rbx, 0x1000
jb 0x140034787
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x140035173
call fcn.140036b0c
test rax, rax
je 0x140034780
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003479b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rbx, rbx
je 0x140034799
mov rcx, rbx
call fcn.140036b0c
mov rdi, rax
jmp 0x14003479b
xor edi, edi
mov qword [rbp - 0x40], rdi
lea rcx, [rbx + rdi]
mov qword [rbp - 0x30], rcx
mov rbx, qword [0x140044198]
mov rdx, qword [0x140044190]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov rax, rsi
imul rbx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*2]
lea rcx, [rdi + rax*8]
mov qword [rbp - 0x38], rcx
movss xmm14, dword [0x14003cbf0]
xor r13d, r13d
mov rdx, qword [0x140044138]
add rdx, 0xcde6888
call fcn.1400361c0
mov qword [0x140044180], rax
lea rdx, [rax + 0x1a8]
call fcn.1400361c0
lea rdx, [rax + 0x38]
call fcn.1400361c0
mov rdx, rax
call fcn.1400361c0
mov qword [0x140044160], rax
lea rdx, [rax + 0x30]
call fcn.1400361c0
mov qword [0x140044088], rax
lea rdx, [rax + 0x310]
call fcn.1400361c0
mov qword [0x140044128], rax
mov rdx, qword [0x140044088]
add rdx, 0x328
call fcn.1400361c0
mov rdx, qword [0x140044128]
add rdx, 0x290
call fcn.1400361c0
mov qword [0x140044118], rax
mov rdx, qword [0x140044128]
add rdx, 0x188
call fcn.1400361c0
mov qword [0x140044170], rax
mov rdx, qword [0x140044180]
add rdx, 0x30
call fcn.1400361c0
mov qword [0x140044148], rax
lea rcx, [rax + 0xa0]
mov r10, qword [0x140044188]
mov eax, dword [r10 + 8]
mov dword [rbp + 0x4c], r13d
mov dword [rbp + 0x48], eax
mov qword [rbp + 0x50], rcx
lea rax, [rsp + 0x70]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], 4
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0x38], r13
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x20
lea rax, [rbp + 0x48]
mov qword [rsp + 0x20], rax
lea r9d, [r13 + 0x20]
lea r8, [rbp + 0x48]
mov edx, 0x21a69090
mov rcx, qword [r10]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ebx, dword [rsp + 0x70]
mov rdx, qword [0x140044148]
add rdx, 0x98
call fcn.1400361c0
mov r15, rax
test ebx, ebx
je 0x140034f4a
mov r12d, ebx
movss xmm15, dword [0x14003cb90]
movss xmm7, dword [0x14003cb2c]
movss xmm8, dword [0x14003cab8]
movss xmm12, dword [0x14003cadc]
nop
mov rdx, r15
call fcn.1400361c0
mov r14, rax
lea rdx, [rax + 0x40b0]
call fcn.1400364b0
ucomiss xmm0, xmm15
jp 0x140034f3c
jne 0x140034f3c
lea rdx, [r14 + 0x2f0]
call fcn.1400361c0
mov rsi, rax
mov rdx, qword [0x140044118]
add rdx, 0x1048
call fcn.140036540
mov edi, eax
lea rdx, [r14 + 0x290]
call fcn.1400361c0
lea rdx, [rax + 0x1048]
call fcn.140036540
mov ebx, eax
mov r10, qword [0x140044188]
mov ecx, dword [r10 + 8]
xor r8d, r8d
mov dword [rbp + 0x6c], r8d
mov dword [rbp + 0x68], ecx
lea rdx, [r14 + 0x74a]
mov qword [rbp + 0x70], rdx
lea rax, [rsp + 0x44]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], 1
mov dword [rsp + 0x70], r8d
mov qword [rsp + 0x38], r8
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x20
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
lea r9d, [r8 + 0x20]
lea r8, [rbp + 0x68]
mov edx, 0x21a69090
mov rcx, qword [r10]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp edi, ebx
je 0x140034f3c
cmp r14, qword [0x140044128]
je 0x140034f3c
mov r8d, 0x62
mov rdx, rsi
lea rcx, [rbp - 0x80]
call fcn.1400326e0
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.1400326e0
mov rdx, qword [0x140044170]
add rdx, 0x128
mov rcx, qword [0x140044188]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movsd qword [rsp + 0x60], xmm0
mov eax, dword [rcx + 8]
mov dword [rbp + 0x8c], 0
mov dword [rbp + 0x88], eax
mov qword [rbp + 0x90], rdx
lea rax, [rsp + 0x50]
mov qword [rbp + 0x98], rax
mov qword [rbp + 0xa0], 0x18
mov dword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x20
lea rax, [rbp + 0x88]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
lea r8, [rbp + 0x88]
mov edx, 0x21a69090
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [0x140044200], xmm0
movsd xmm0, qword [rsp + 0x60]
movsd qword [0x140044210], xmm0
movups xmm10, xmmword [rbp - 0x80]
movaps xmmword [rsp + 0x50], xmm10
movsd xmm11, qword [rbp - 0x70]
movsd qword [rsp + 0x60], xmm11
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x30]
call fcn.140032940
movaps xmm13, xmm10
unpckhpd xmm13, xmm10
movaps xmm0, xmm13
subsd xmm0, qword [0x140044208]
cvtsd2ss xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movaps xmm0, xmm10
subsd xmm0, qword [0x140044200]
cvtsd2ss xmm0, xmm0
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
movaps xmm1, xmm11
subsd xmm1, qword [0x140044210]
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x140034bb8
xorps xmm9, xmm9
sqrtss xmm9, xmm6
jmp 0x140034bc4
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm9, xmm0
divss xmm9, dword [0x14003cbb4]
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp - 0x60]
call fcn.1400326e0
movups xmm7, xmmword [rbp - 0x60]
movaps xmmword [rbp - 0x80], xmm7
movsd xmm6, qword [rbp - 0x50]
movsd qword [rbp - 0x70], xmm6
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x20]
call fcn.140032940
movaps xmm0, xmm11
addsd xmm0, qword [0x14003cb48]
cvtpd2ps xmm3, xmm0
xorps xmm2, xmm2
cvtsd2ss xmm2, xmm13
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm10
cvtps2pd xmm1, xmm0
movsd qword [rsp + 0x50], xmm1
cvtps2pd xmm2, xmm2
movsd qword [rsp + 0x58], xmm2
cvtps2pd xmm0, xmm3
movsd qword [rsp + 0x60], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x18]
call fcn.140032940
movaps xmmword [rbp - 0x60], xmm10
movsd qword [rbp - 0x50], xmm11
lea rdx, [rbp - 0x60]
lea rcx, [rbp]
call fcn.140032940
movaps xmmword [rbp - 0x80], xmm7
movsd qword [rbp - 0x70], xmm6
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x48]
call fcn.140032940
movsd xmm10, qword [rbp + 0x20]
movaps xmm0, xmm10
movsd xmm13, qword [rbp - 0x18]
subsd xmm0, xmm13
andps xmm0, xmmword [0x14003cd80]
cvtpd2ps xmm11, xmm0
cvtps2pd xmm0, xmm11
mulsd xmm0, qword [0x14003cb18]
cvtpd2ps xmm7, xmm0
movd xmm0, dword [0x1400435bc]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm9
jbe 0x140034e91
movsd xmm9, qword [rbp - 0x20]
cmp byte [0x140043051], 0
je 0x140034d52
lea rdx, [rsi + 0x330]
call fcn.1400364b0
movaps xmm6, xmm0
lea rdx, [rsi + 0x338]
call fcn.1400364b0
addss xmm0, xmm8
comiss xmm0, xmm6
jb 0x140034cfa
mov dword [rsp + 0x28], 0xff0000ff
jmp 0x140034d27
lea rdx, [rsi + 0x330]
call fcn.1400364b0
movaps xmm6, xmm0
lea rdx, [rsi + 0x338]
call fcn.1400364b0
addss xmm0, xmm8
comiss xmm0, xmm6
jae 0x140034d52
mov dword [rsp + 0x28], 0xffffffff
movaps xmm0, xmm7
mulss xmm0, xmm12
cvtps2pd xmm1, xmm0
movaps xmm2, xmm9
subsd xmm2, xmm1
cvttss2si r9d, xmm11
cvttss2si r8d, xmm7
cvttsd2si edx, xmm10
cvttsd2si ecx, xmm2
call fcn.140032ec0
cmp byte [0x14004407a], 0
je 0x140034dee
lea rdx, [rsi + 0x330]
call fcn.1400364b0
movaps xmm6, xmm0
lea rdx, [rsi + 0x338]
call fcn.1400364b0
addss xmm0, xmm8
comiss xmm0, xmm6
jb 0x140034d8e
mov dword [rsp + 0x40], 0xff0000ff
jmp 0x140034dbb
lea rdx, [rsi + 0x330]
call fcn.1400364b0
movaps xmm6, xmm0
lea rdx, [rsi + 0x338]
call fcn.1400364b0
addss xmm0, xmm8
comiss xmm0, xmm6
jae 0x140034dee
mov dword [rsp + 0x40], 0xffffffff
cvttss2si r8d, xmm7
mulss xmm7, xmm12
cvtps2pd xmm0, xmm7
movsd xmm1, qword [rbp + 0x18]
lea rax, [rsp + 0x40]
subsd xmm1, xmm0
mov qword [rsp + 0x20], rax
cvttss2si r9d, xmm11
cvttsd2si edx, xmm10
cvttsd2si ecx, xmm1
call fcn.1400331e0
cmp byte [0x140043053], 0
je 0x140034e44
lea rdx, [rsi + 0x330]
call fcn.1400364b0
movaps xmm6, xmm0
lea rdx, [rsi + 0x338]
call fcn.1400364b0
addss xmm0, xmm8
comiss xmm0, xmm6
jb 0x140034e44
cvttsd2si r9d, xmm13
cvttsd2si r8d, xmm9
mov eax, dword [0x140044168]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
lea rax, [0x140043070]
mov qword [rsp + 0x20], rax
call fcn.140032dc0
lea rdx, [rsi + 0x330]
call fcn.1400364b0
movaps xmm6, xmm0
lea rdx, [rsi + 0x338]
call fcn.1400364b0
addss xmm0, xmm8
comiss xmm0, xmm6
jae 0x140034e91
cvttsd2si r9d, xmm13
cvttsd2si r8d, xmm9
mov eax, dword [0x140044168]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
lea rax, [0x140043230]
mov qword [rsp + 0x20], rax
call fcn.140032dc0
mov eax, dword [0x140044168]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm2, qword [rbp]
subsd xmm2, xmm0
mov eax, dword [0x140044130]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm1, qword [rbp + 8]
subsd xmm1, xmm0
mulsd xmm1, xmm1
mulsd xmm2, xmm2
addsd xmm1, xmm2
cvtpd2ps xmm3, xmm1
xorps xmm0, xmm0
ucomiss xmm0, xmm3
ja 0x140034eea
xorps xmm7, xmm7
sqrtss xmm7, xmm3
jmp 0x140034ef5
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm7, xmm0
lea rdx, [rsi + 0x330]
call fcn.1400364b0
movaps xmm6, xmm0
lea rdx, [rsi + 0x338]
call fcn.1400364b0
addss xmm0, xmm8
comiss xmm0, xmm6
jb 0x140034f34
movss xmm0, dword [0x140043058]
comiss xmm0, xmm7
jbe 0x140034f34
comiss xmm14, xmm7
jbe 0x140034f34
movaps xmm14, xmm7
mov r13, r14
movss xmm7, dword [0x14003cb2c]
add r15, 8
sub r12, 1
jne 0x140034960
cmp byte [0x140043052], 0
je 0x1400350f6
test r13, r13
je 0x1400350f6
mov ecx, dword [0x140044178]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400350f6
lea rdx, [r13 + 0x2f0]
call fcn.1400361c0
mov r8d, dword [0x14004421c]
mov rdx, rax
lea rcx, [rbp]
call fcn.1400326e0
movups xmm0, xmmword [rbp]
movaps xmmword [rbp - 0x20], xmm0
movsd xmm1, qword [rbp + 0x10]
movsd qword [rbp - 0x10], xmm1
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x60]
call fcn.140032940
movsd xmm0, qword [rbp - 0x58]
ucomisd xmm0, qword [0x14003ca90]
jp 0x140034fc8
je 0x1400350f6
cvtpd2ps xmm7, xmm0
movsd xmm8, qword [rbp - 0x60]
cvtpd2ps xmm8, xmm8
mov eax, dword [0x140044168]
cdq
sub eax, edx
sar eax, 1
movd xmm6, eax
cvtdq2ps xmm6, xmm6
mov eax, dword [0x140044130]
cdq
sub eax, edx
sar eax, 1
movd xmm5, eax
cvtdq2ps xmm5, xmm5
cvttss2si eax, dword [0x140043054]
xorps xmm4, xmm4
xorps xmm3, xmm3
xorps xmm2, xmm2
movss xmm9, dword [0x14003cda0]
ucomiss xmm8, xmm4
jp 0x14003501d
je 0x140035078
comiss xmm8, xmm6
jbe 0x140035050
movaps xmm3, xmm6
subss xmm3, xmm8
xorps xmm3, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
movaps xmm1, xmm3
addss xmm1, xmm6
movaps xmm0, xmm6
addss xmm0, xmm6
comiss xmm1, xmm0
jbe 0x140035050
xorps xmm3, xmm3
comiss xmm6, xmm8
jbe 0x140035078
movaps xmm3, xmm8
subss xmm3, xmm6
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
movaps xmm1, xmm3
addss xmm1, xmm6
comiss xmm4, xmm1
jbe 0x140035078
xorps xmm3, xmm3
ucomiss xmm7, xmm4
jp 0x14003507f
je 0x1400350d6
comiss xmm7, xmm5
jbe 0x1400350b0
movaps xmm2, xmm5
subss xmm2, xmm7
xorps xmm2, xmm9
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm5
movaps xmm0, xmm5
addss xmm0, xmm5
comiss xmm1, xmm0
jbe 0x1400350b0
xorps xmm2, xmm2
comiss xmm5, xmm7
jbe 0x1400350d6
movaps xmm2, xmm7
subss xmm2, xmm5
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm5
comiss xmm4, xmm1
jbe 0x1400350d6
xorps xmm2, xmm2
cvttss2si r8, xmm2
cvttss2si rdx, xmm3
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp - 0x40]
call fcn.140035fd0
mov rcx, qword [rbp + 0xa8]
xor rcx, rsp
call fcn.140036670
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140031910
int3
call fcn.140036640
int3