Function at 0x1400091c0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xc8]
sub rsp, 0x1a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
movaps xmmword [rax - 0xb8], xmm14
movaps xmmword [rax - 0xc8], xmm15
mov rax, qword [0x1400cc010]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rcx
mov r12, qword [0x1401ec338]
mov esi, 1
movsd xmm8, qword [0x1400c01a0]
nop dword [rax + rax]
mov r8d, esi
mov rdx, qword [0x1401ec400]
mov rcx, r12
call fcn.1400085a0
mov rdx, rax
mov rcx, r12
call fcn.1400086d0
mov rbx, rax
mov rcx, rax
call fcn.140008850
cmp eax, dword [0x1401ec414]
je 0x140009620
mov rdx, qword [rbx]
add rdx, 0x1640
call fcn.140008ee0
mov byte [rsp + 0x32], al
mov rcx, rbx
call fcn.140008970
mov rdi, rax
mov r8, qword [rbx]
add r8, 0x1224
lea rdx, [rbp - 0x18]
call fcn.140008f70
nop
lea rdx, [0x1401ec468]
lea rcx, [rbp - 0x50]
call fcn.14000d360
nop
call fcn.14005e140
mov r15, rax
mov r8, qword [rax]
add r8, 0x1224
lea rdx, [rbp - 0x28]
call fcn.140008f70
nop
mov r8, qword [r15]
add r8, 0x114c
lea rdx, [rbp - 0x30]
call fcn.14005e4a0
nop
mov rdx, qword [r15]
add rdx, 0x12b0
call fcn.140008dc0
lea rdx, [rax + 0x1570]
call fcn.140008ee0
movzx r13d, al
mov rcx, r15
call fcn.14005e410
mov dword [rsp + 0x34], eax
mov rdx, qword [r15]
add rdx, 0x3c8
call fcn.140008e50
mov ebx, eax
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov r9, rdi
mov r8, rax
lea rdx, [rbp - 0x60]
call fcn.14000a360
movss xmm14, dword [rbp - 0x60]
movaps xmm10, xmm14
movss xmm12, dword [rbp - 0x28]
subss xmm10, xmm12
movss xmm15, dword [rbp - 0x5c]
movaps xmm11, xmm15
movss xmm13, dword [rbp - 0x24]
subss xmm11, xmm13
movss xmm9, dword [rbp - 0x58]
movaps xmm7, xmm9
cmp ebx, 0x10083
jne 0x140009396
subss xmm7, dword [0x1400c0254]
jmp 0x14000939e
subss xmm7, dword [0x1400c0260]
subss xmm7, dword [rbp - 0x20]
cvtps2pd xmm0, xmm10
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm11
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x1400093d9
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x1400093e1
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
movaps xmm1, xmm10
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
mulss xmm0, dword [0x1400c0290]
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
divsd xmm2, qword [0x1400c01b8]
movss xmm1, dword [rbp - 0x2c]
cvtps2pd xmm1, xmm1
subsd xmm2, xmm1
cvtpd2ps xmm11, xmm2
divss xmm7, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_atanf
xorps xmm0, xmmword [0x1400c05f0]
mulss xmm0, dword [0x1400c0290]
xorps xmm1, xmm1
cvtss2sd xmm1, xmm0
divsd xmm1, qword [0x1400c01b8]
movss xmm0, dword [rbp - 0x30]
cvtps2pd xmm0, xmm0
subsd xmm1, xmm0
cvtpd2ps xmm10, xmm1
movss xmm0, dword [rbp - 0x18]
subss xmm0, xmm12
movss xmm7, dword [rbp - 0x14]
subss xmm7, xmm13
cvtps2pd xmm0, xmm0
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm7
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x1400094a0
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x1400094a8
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm0
cvtps2pd xmm0, xmm11
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
cvtps2pd xmm0, xmm10
movaps xmm1, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm6, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm6
ja 0x1400094e2
xorps xmm0, xmm0
sqrtsd xmm0, xmm6
jmp 0x1400094ea
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
xorps xmm6, xmm6
cvtsd2ss xmm6, xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.14000ac50
movzx ebx, al
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.14000b200
movaps xmm12, xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.14000b780
mov byte [rsp + 0x31], al
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.140009d20
mov edi, eax
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.14000bd30
mov byte [rsp + 0x30], al
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.14000c2e0
movss dword [rsp + 0x38], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.14000c860
movd xmm13, eax
cvtdq2ps xmm13, xmm13
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x50]
call fcn.14000d360
mov rdx, rax
call fcn.14000cde0
mov dword [rsp + 0x3c], eax
test bl, bl
je 0x1400095e5
comiss xmm12, xmm6
jb 0x1400095de
comiss xmm13, xmm7
jb 0x1400095de
test r13b, r13b
jne 0x140009690
mov word [r14 + 0xc], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140009620
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000961b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d0f
call fcn.14007bc94
inc esi
cmp esi, 0x40
jl 0x140009250
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14007b8c0
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
movaps xmm14, xmmword [r11 - 0x90]
movaps xmm15, xmmword [r11 - 0xa0]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov word [r14 + 0xc], 0x101
movups xmm3, xmmword [0x1401ec428]
movaps xmmword [rsp + 0x50], xmm3
movups xmm4, xmmword [0x1401ec438]
movups xmm0, xmmword [0x1401ec448]
movaps xmmword [rsp + 0x70], xmm0
movups xmm5, xmmword [0x1401ec458]
movaps xmm6, xmm14
mulss xmm6, xmm3
movaps xmm1, xmm15
movaps xmm0, xmm3
shufps xmm0, xmm3, 0x55
mulss xmm1, xmm0
addss xmm6, xmm1
movaps xmm2, xmm9
movaps xmm0, xmm3
shufps xmm0, xmm3, 0xaa
mulss xmm2, xmm0
addss xmm6, xmm2
shufps xmm3, xmm3, 0xff
addss xmm6, xmm3
movss dword [r14], xmm6
movaps xmm3, xmm4
shufps xmm3, xmm4, 0x55
mulss xmm3, xmm15
movaps xmm0, xmm4
mulss xmm0, xmm14
addss xmm3, xmm0
movaps xmm1, xmm4
shufps xmm1, xmm4, 0xaa
mulss xmm1, xmm9
addss xmm3, xmm1
shufps xmm4, xmm4, 0xff
addss xmm3, xmm4
movss dword [r14 + 4], xmm3
movaps xmm2, xmm5
shufps xmm2, xmm5, 0x55
mulss xmm2, xmm15
movaps xmm0, xmm5
mulss xmm0, xmm14
addss xmm2, xmm0
movaps xmm1, xmm5
shufps xmm1, xmm5, 0xaa
mulss xmm1, xmm9
addss xmm2, xmm1
shufps xmm5, xmm5, 0xff
addss xmm2, xmm5
movss xmm0, dword [0x1400c00b8]
comiss xmm0, xmm2
ja 0x1400097d3
movss xmm0, dword [0x1400c0144]
divss xmm0, xmm2
mulss xmm6, xmm0
mulss xmm3, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [0x1401ec064]
movss xmm2, dword [0x1400c00f8]
mulss xmm6, xmm2
mulss xmm6, xmm1
addss xmm6, xmm2
mulss xmm1, xmm2
addss xmm6, xmm1
xorps xmm0, xmm0
cvtsi2ss xmm0, dword [0x1401ec068]
movaps xmm1, xmm0
mulss xmm1, xmm2
mulss xmm3, xmm2
mulss xmm3, xmm0
addss xmm3, xmm2
subss xmm1, xmm3
movss dword [r14], xmm6
movss dword [r14 + 4], xmm1
mov ecx, edi
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rsi, qword [rbp - 0x38]
mov rdi, qword [rbp - 0x50]
test ax, ax
je 0x140009cd3
movss xmm6, dword [rbp - 0x30]
addss xmm10, xmm6
movss xmm7, dword [rbp - 0x2c]
addss xmm11, xmm7
xor r14d, r14d
xorps xmm8, xmm8
cmp byte [0x1401ec304], r14b
je 0x140009b85
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
mov rbx, qword [rbp - 0x40]
cmp rbx, 0xb
jne 0x140009841
mov r8, rbx
lea rdx, str.weapon_ak47
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xa
jne 0x14000986a
mov r8, rbx
lea rdx, str.weapon_aug
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xc
jne 0x140009893
mov r8, rbx
lea rdx, str.weapon_famas
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xe
jne 0x1400098bc
mov r8, rbx
lea rdx, str.weapon_galilar
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0x14
jne 0x1400098e5
mov r8, rbx
lea rdx, str.weapon_m4a1_silencer
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xb
jne 0x14000990e
mov r8, rbx
lea rdx, str.weapon_m4a1
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xc
jne 0x140009937
mov r8, rbx
lea rdx, str.weapon_sg553
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xc
jne 0x140009960
mov r8, rbx
lea rdx, str.weapon_mac10
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xa
jne 0x140009989
mov r8, rbx
lea rdx, str.weapon_mp7
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xa
jne 0x1400099b2
mov r8, rbx
lea rdx, str.weapon_mp9
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xc
jne 0x1400099d7
mov r8, rbx
lea rdx, str.weapon_mp5sd
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xc
jne 0x1400099fc
mov r8, rbx
lea rdx, str.weapon_ump45
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xc
jne 0x140009a21
mov r8, rbx
lea rdx, str.weapon_bizon
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140009a4e
lea rcx, [rbp - 0x50]
cmp rsi, 0x10
cmovae rcx, rdi
cmp rbx, 0xa
jne 0x140009b85
mov r8, rbx
lea rdx, str.weapon_p90
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140009b85
cmp dword [rsp + 0x34], r14d
je 0x140009b77
mov rcx, qword [r15]
add rcx, 0x1740
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r14
mov eax, dword [0x1401ec014]
mov dword [rsp + 0x68], eax
mov qword [rsp + 0x58], rcx
lea rax, [rbp - 0x60]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x60], 0x10
mov byte [rsp + 0x6d], 1
lea rcx, str.user32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.NtQueryCompositionSurfaceStatistics
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [rsp + 0x50]
call rax
nop
mov rax, qword [rbp - 0x60]
dec rax
lea rcx, [rax + rax*2]
mov rax, qword [rbp - 0x58]
lea r8, [rax + rcx*4]
lea rdx, [rbp - 0x70]
call fcn.14005e4a0
movss xmm0, dword [rbp - 0x6c]
movss xmm1, dword [rbp - 0x70]
ucomiss xmm1, xmm8
jp 0x140009b37
jne 0x140009b37
ucomiss xmm0, xmm8
jp 0x140009b37
jne 0x140009b37
cmp rsi, 0x10
jb 0x14000962b
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140009d02
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009d02
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mulss xmm1, dword [0x1401ec308]
subss xmm10, xmm1
mulss xmm0, dword [0x1401ec30c]
subss xmm11, xmm0
movss dword [0x1401ec018], xmm1
movss dword [0x1401ec01c], xmm0
mov dword [0x1401ec020], 0
movss xmm7, dword [rbp - 0x2c]
movss xmm6, dword [rbp - 0x30]
jmp 0x140009b85
mov qword [0x1401ec018], r14
mov dword [0x1401ec020], r14d
subss xmm10, xmm6
mulss xmm10, dword [rsp + 0x38]
addss xmm10, xmm6
subss xmm11, xmm7
mulss xmm11, dword [rsp + 0x38]
addss xmm11, xmm7
movss dword [rbp - 0x60], xmm10
movss dword [rbp - 0x5c], xmm11
mov dword [rbp - 0x58], 0
mov dword [rsp + 0x34], 0x42b20000
movss xmm0, dword [0x1400c0328]
mov dword [rsp + 0x38], 0xc2b20000
comiss xmm0, xmm10
seta al
lea rcx, [rsp + 0x38]
lea rdx, [rbp - 0x60]
test al, al
cmove rcx, rdx
comiss xmm10, dword [0x1400c0270]
seta al
lea rdx, [rsp + 0x34]
test al, al
cmove rdx, rcx
mov dword [rbp - 0x70], 0x43340000
movss xmm0, dword [0x1400c0330]
mov dword [rsp + 0x40], 0xc3340000
comiss xmm0, xmm11
seta al
lea rcx, [rsp + 0x40]
lea r8, [rbp - 0x5c]
test al, al
cmove rcx, r8
movss xmm8, dword [0x1400c0290]
comiss xmm11, xmm8
seta al
lea rbx, [rbp - 0x70]
test al, al
cmove rbx, rcx
movss xmm0, dword [rdx]
addss xmm0, xmm8
movss xmm6, dword [0x1400c02a4]
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
movaps xmm7, xmm0
movss xmm0, dword [rbx]
addss xmm0, xmm8
movaps xmm1, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_fmodf
subss xmm7, xmm8
subss xmm0, xmm8
cmp byte [rsp + 0x31], 0
je 0x140009c8a
cmp byte [rsp + 0x32], 0
je 0x140009cd3
cmp byte [rsp + 0x30], 0
je 0x140009cd3
movaps xmm1, xmm0
movaps xmm0, xmm7
call fcn.14007b680
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.USER32.dll_mouse_event]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 4]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, dword [rsp + 0x3c]
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
cmp rsi, 0x10
jb 0x14000962b
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140009d02
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d0f
mov rcx, rdi
call fcn.14007bc94
jmp 0x14000962b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3