Function at 0x1400400d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1c8]
sub rsp, 0x2a0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
mov rax, qword [0x1401060c0]
xor rax, rsp
mov qword [rbp + 0x138], rax
mov edi, ecx
mov rcx, qword [0x140123768]
test rcx, rcx
je 0x140040a8a
call fcn.1400338a0
mov rbx, rax
test rax, rax
jne 0x14004015d
mov dword [0x140121b48], 0x7f7fffff
xor edi, edi
mov qword [0x140123768], rdi
jmp 0x140040a8a
lea rcx, [rax + 0x600]
call fcn.14004f120
shl eax, 4
movsxd rcx, eax
add rcx, 0x570
add rcx, rbx
call fcn.14004f080
lea ecx, [rdi + rdi*2]
shl ecx, 5
movsxd rdx, ecx
add rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.14004f1c0
lea rdx, [rbx + 0x1c0]
lea rcx, [rbp - 0x80]
call fcn.14004f1c0
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.140032630
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
movups xmm8, xmmword [rax + 0x20]
movups xmm9, xmmword [rax + 0x30]
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xc0]
call fcn.140032630
movaps xmmword [rbp + 0xc0], xmm6
movaps xmmword [rbp + 0xd0], xmm7
movaps xmmword [rbp + 0xe0], xmm8
movaps xmmword [rbp + 0xf0], xmm9
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax + 0x20]
movaps xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x30]
movaps xmmword [rbp - 0x50], xmm1
lea r8, [rbp + 0xc0]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x60]
call fcn.140032850
movups xmm2, xmmword [rax + 0x30]
xorps xmm0, xmm0
cvtss2sd xmm0, xmm2
movsd qword [rsp + 0x20], xmm0
movaps xmm1, xmm2
shufps xmm1, xmm2, 0x55
xorps xmm0, xmm0
cvtss2sd xmm0, xmm1
movsd qword [rsp + 0x28], xmm0
shufps xmm2, xmm2, 0xaa
xorps xmm0, xmm0
cvtss2sd xmm0, xmm2
movsd qword [rsp + 0x30], xmm0
mov r8, qword [0x140122e88]
lea rdx, [rbp + 0xa0]
call fcn.140033290
nop
mov rcx, qword [0x140123768]
call fcn.140032e10
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm9, xmm9
movsd qword [rbp + 0x130], xmm9
lea rcx, [rax + 0x168]
mov r8d, Ordinal_26
lea rdx, [rbp + 0x120]
call fcn.1400323f0
xor edi, edi
mov r13, qword [rbp + 0xb8]
mov rbx, qword [rbp + 0xb0]
mov r15, qword [rbp + 0xa0]
cmp byte [0x1401237bd], dil
je 0x140040421
movups xmm6, xmmword [0x140123300]
movsd xmm7, qword [0x140123310]
movups xmm8, xmmword [rbp + 0x120]
movsd xmm10, qword [rbp + 0x130]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rdi
lea r14, [rbp + 0xa0]
cmp r13, 0xf
cmova r14, r15
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
ja 0x140040b1f
cmp rbx, 0xf
ja 0x140040351
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r14]
movups xmmword [rbp + 0xc0], xmm0
jmp 0x1400403ee
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x140040389
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400bab48
mov rcx, rax
test rax, rax
je 0x1400403be
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400403ca
mov rsi, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x1400403a6
mov rax, rdi
jmp 0x1400403ca
cmp rcx, 0x1000
jb 0x1400403c5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140040b25
jmp 0x14004036b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bab48
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xd0], rbx
mov qword [rbp + 0xd8], rsi
lea r8, [rbx + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movaps xmmword [rsp + 0x40], xmm6
movsd qword [rsp + 0x50], xmm7
movaps xmmword [rsp + 0x60], xmm8
movsd qword [rsp + 0x70], xmm10
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0xc0]
call fcn.14003fa50
movups xmm0, xmmword [rsp + 0x20]
movaps xmmword [rsp + 0x60], xmm0
movsd xmm1, qword [rsp + 0x30]
movsd qword [rsp + 0x70], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x20]
call fcn.140033950
mov eax, dword [0x140122ee4]
cdq
sub eax, edx
sar eax, 1
movd xmm7, eax
cvtdq2pd xmm7, xmm7
mov eax, dword [0x140122ee0]
cdq
sub eax, edx
sar eax, 1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd xmm10, qword [rsp + 0x20]
subsd xmm0, xmm10
movsd xmm1, qword [0x1400f32c0]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm8, xmm0
movsd xmm11, qword [rsp + 0x28]
subsd xmm7, xmm11
movsd xmm1, qword [0x1400f32c0]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm8, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm8
ja 0x1400404be
xorps xmm0, xmm0
sqrtsd xmm0, xmm8
jmp 0x1400404c7
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movd xmm1, dword [reloc.WLDAP32.dll_Ordinal_200]
cvtdq2pd xmm1, xmm1
comisd xmm0, xmm1
ja 0x140040ad8
ucomisd xmm10, xmm9
jp 0x1400404ea
je 0x140040ad8
ucomisd xmm11, xmm9
jp 0x1400404f7
je 0x140040ad8
mov esi, dword [reloc.WS2_32.dll_getpeername]
cmp byte [0x1401237c2], dil
je 0x1400406f3
lea r14, [rbp + 0xa0]
cmp r13, 0xf
cmova r14, r15
cmp rbx, 7
jb 0x140040577
lea r12, [rbx + r14]
lea r8, [r12 - 6]
sub r8, r14
mov edx, 0x53
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140040577
nop dword [rax]
cmp dword [rax], 0x746f6853
jne 0x14004055a
cmp word [rax + 4], 0x7567
jne 0x14004055a
cmp byte [rax + 6], 0x6e
je 0x1400406a6
inc rax
lea r8, [r12 - 6]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140040540
lea r14, [rbp + 0xa0]
cmp r13, 0xf
cmova r14, r15
cmp rbx, 3
jb 0x1400405de
lea r12, [rbx + r14]
lea r8, [r12 - 2]
sub r8, r14
mov edx, 0x53
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400405de
nop word [rax + rax]
cmp word [rax], 0x4d53
jne 0x1400405c1
cmp byte [rax + 2], 0x47
je 0x1400406bb
inc rax
lea r8, [r12 - 2]
sub r8, rax
mov edx, 0x53
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x1400405b0
lea r14, [rbp + 0xa0]
cmp r13, 0xf
cmova r14, r15
cmp rbx, 5
jb 0x140040640
lea r12, [rbx + r14]
lea r8, [r12 - 4]
sub r8, r14
mov edx, 0x52
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140040640
cmp dword [rax], 0x6c666952
jne 0x140040623
cmp byte [rax + 4], 0x65
je 0x1400406d0
inc rax
lea r8, [r12 - 4]
sub r8, rax
mov edx, 0x52
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140040611
lea r14, [rbp + 0xa0]
cmp r13, 0xf
cmova r14, r15
cmp rbx, 6
jb 0x1400406f3
lea r8, [rbx - 5]
add r8, r14
sub r8, r14
mov edx, 0x53
mov rcx, r14
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400406f3
cmp dword [rax], 0x70696e53
jne 0x140040685
cmp word [rax + 4], 0x7265
je 0x1400406e5
inc rax
lea r8, [rbx - 5]
add r8, r14
sub r8, rax
mov edx, 0x53
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140040675
jmp 0x1400406f3
sub rax, r14
cmp rax, 0xffffffffffffffff
je 0x140040577
mov esi, dword [reloc.WS2_32.dll_getpeername]
jmp 0x1400406f3
sub rax, r14
cmp rax, 0xffffffffffffffff
je 0x1400405de
mov esi, dword [reloc.WS2_32.dll_getpeername]
jmp 0x1400406f3
sub rax, r14
cmp rax, 0xffffffffffffffff
je 0x140040640
mov esi, dword [reloc.WS2_32.dll_getpeername]
jmp 0x1400406f3
sub rax, r14
cmp rax, 0xffffffffffffffff
cmovne esi, dword [reloc.WS2_32.dll_getpeername]
mov rax, qword [0x140122dd0]
movss xmm5, dword [rax + 0x10]
mulss xmm5, dword [0x1400f325c]
movss xmm4, dword [rax + 0x14]
mulss xmm4, dword [0x1400f325c]
xorps xmm6, xmm6
xorps xmm3, xmm3
xorps xmm2, xmm2
xorps xmm8, xmm8
cvtsd2ss xmm8, xmm10
xorps xmm7, xmm7
cvtsd2ss xmm7, xmm11
movss xmm9, dword [0x1400f3ac0]
ucomiss xmm8, xmm6
jp 0x14004073f
je 0x14004079a
comiss xmm8, xmm5
jbe 0x140040772
movaps xmm3, xmm5
subss xmm3, xmm8
xorps xmm3, xmm9
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
movaps xmm1, xmm3
addss xmm1, xmm5
movaps xmm0, xmm5
addss xmm0, xmm5
comiss xmm1, xmm0
jbe 0x140040772
xorps xmm3, xmm3
comiss xmm5, xmm8
jbe 0x14004079a
movaps xmm3, xmm8
subss xmm3, xmm5
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm3, xmm0
movaps xmm1, xmm3
addss xmm1, xmm5
comiss xmm6, xmm1
jbe 0x14004079a
xorps xmm3, xmm3
ucomiss xmm7, xmm6
jp 0x1400407a1
je 0x1400407f8
comiss xmm7, xmm4
jbe 0x1400407d2
movaps xmm2, xmm4
subss xmm2, xmm7
xorps xmm2, xmm9
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
movaps xmm0, xmm4
addss xmm0, xmm4
comiss xmm1, xmm0
jbe 0x1400407d2
xorps xmm2, xmm2
comiss xmm4, xmm7
jbe 0x1400407f8
movaps xmm2, xmm7
subss xmm2, xmm4
movd xmm0, esi
cvtdq2ps xmm0, xmm0
divss xmm2, xmm0
movaps xmm1, xmm2
addss xmm1, xmm4
comiss xmm6, xmm1
jbe 0x1400407f8
xorps xmm2, xmm2
mov dword [rbp + 0xc0], edi
cvttss2si eax, xmm3
mov dword [rbp + 0xc8], eax
cvttss2si eax, xmm2
mov dword [rbp + 0xcc], eax
mov dword [rbp + 0xd4], 1
mov dword [rbp + 0xd0], edi
mov dword [rbp + 0xd8], edi
mov qword [rbp + 0xe0], rdi
mov r8d, Ordinal_41
lea rdx, [rbp + 0xc0]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov dword [0x140121b48], 0x7f7fffff
mov qword [0x140123768], rdi
cmp byte [0x1401237c4], dil
je 0x140040a53
mov ecx, dword [reloc.WS2_32.dll_bind]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xorps xmm0, xmm0
mov rcx, qword [0x140122e78]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
add rcx, 0x2a8
test ax, ax
je 0x140040978
call fcn.1400323f0
cmp dword [rsp + 0x48], edi
jbe 0x140040a53
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov rcx, qword [0x140122e78]
add rcx, 0x2a8
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x20]
call fcn.1400323f0
cmp edi, dword [rsp + 0x28]
jae 0x140040941
mov ecx, edi
mov rax, qword [rsp + 0x20]
lea rcx, [rax + rcx*8]
call fcn.14004f080
mov rsi, rax
test rax, rax
je 0x140040941
cmp rax, qword [0x140122e80]
je 0x140040941
mov rcx, rax
call fcn.140032ec0
mov r14, rax
test rax, rax
je 0x140040941
mov rcx, qword [0x140122e70]
add rcx, 0x11d1
call fcn.14004f120
mov ebx, eax
lea rcx, [rsi + 0x11d1]
call fcn.14004f120
cmp eax, ebx
je 0x140040941
lea rcx, [r14 + 0x168]
movaps xmm1, xmm6
call fcn.14004efe0
inc edi
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [0x140122e78]
add rcx, 0x2a8
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x40]
call fcn.1400323f0
cmp edi, dword [rsp + 0x48]
jb 0x1400408b0
jmp 0x140040a53
call fcn.1400323f0
cmp dword [rsp + 0x48], edi
jbe 0x140040a53
movss xmm6, dword [0x1400f3284]
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov rcx, qword [0x140122e78]
add rcx, 0x2a8
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x20]
call fcn.1400323f0
cmp edi, dword [rsp + 0x28]
jae 0x140040a21
mov ecx, edi
mov rax, qword [rsp + 0x20]
lea rcx, [rax + rcx*8]
call fcn.14004f080
mov rbx, rax
test rax, rax
je 0x140040a21
cmp rax, qword [0x140122e80]
je 0x140040a21
mov rcx, rax
call fcn.140032ec0
mov rsi, rax
test rax, rax
je 0x140040a21
lea rcx, [rbx + 0x11d1]
call fcn.14004f120
mov ebx, eax
mov rcx, qword [0x140122e70]
add rcx, 0x11d1
call fcn.14004f120
cmp ebx, eax
je 0x140040a21
lea rcx, [rsi + 0x168]
movaps xmm1, xmm6
call fcn.14004efe0
inc edi
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov rcx, qword [0x140122e78]
add rcx, 0x2a8
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x40]
call fcn.1400323f0
cmp edi, dword [rsp + 0x48]
jb 0x140040990
cmp r13, 0xf
jbe 0x140040a8a
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140040a82
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040b18
mov rcx, r15
call fcn.1400ba830
mov rcx, qword [rbp + 0x138]
xor rcx, rsp
call fcn.1400ba3e0
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [0x140121b48], 0x7f7fffff
mov qword [0x140123768], rdi
cmp r13, 0xf
jbe 0x140040a8a
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140040a82
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140040a82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140031ae0
int3
call fcn.140031a40
int3