Function at 0x1800438a0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x290
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
movaps xmmword [rax - 0x68], xmm10
mov rax, qword [0x180089040]
xor rax, rsp
mov qword [rbp + 0x138], rax
call fcn.180043210
call fcn.180043000
mov rax, qword [0x1800cd150]
mov rcx, qword [rax + 8]
mov rax, qword [0x1800cd200]
add rcx, qword [rax + 0x10]
lea rdx, [0x1800cbb80]
call fcn.180008610
mov rax, qword [0x1800cd200]
mov ecx, dword [rax + 0x28]
add rcx, qword [0x1800cbb80]
lea rdx, [0x1800cbb90]
call fcn.1800086b0
xor r14d, r14d
mov edi, r14d
mov r8, qword [0x1800cd128]
mov rax, qword [r8 + 0x148]
sub rax, qword [r8 + 0x140]
sar rax, 3
xorps xmm8, xmm8
test rax, rax
je 0x18004403f
mov esi, r14d
movabs r15, 0x7ffd5d15ff558
movabs r12, 0xaaaaaaaaaaaaaaab
movss xmm7, dword [0x18007c120]
movss xmm6, dword [0x18007bf84]
movsd xmm9, qword [0x18007bef0]
movss xmm10, dword [0x18007be90]
nop dword [rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
mov qword [rbp - 0x18], 0
mov dword [rbp - 0x10], 0
mov qword [rbp - 8], 0
mov dword [rbp], 0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], 0
mov dword [rbp + 0x7c], 0
movaps xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x90], xmm1
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xc8], r14
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmmword [rbp + 0x100], xmm1
mov rax, qword [r8 + 0x140]
mov rdx, qword [rsi + rax]
mov qword [rbp + 0xc0], rdx
mov rax, qword [r8 + 0x128]
mov rax, qword [rsi + rax]
mov qword [rbp + 0xb8], rax
mov rax, qword [0x1800cd200]
mov ecx, dword [rax + 0x44]
add rcx, rdx
lea rdx, [rbp - 8]
call fcn.1800449d0
mov rax, qword [0x1800cd200]
mov ecx, dword [rax + 0x38]
add rcx, qword [rbp + 0xc0]
lea rdx, [rbp + 0x2c]
call fcn.1800086b0
mov rax, qword [0x1800cd200]
mov ecx, dword [rax + 0x2c]
add rcx, qword [rbp + 0xb8]
lea rdx, [rbp - 0x5c]
call fcn.1800086b0
mov rax, qword [0x1800cd200]
mov ecx, dword [rax + 0x28]
add rcx, qword [rbp + 0xb8]
lea rdx, [rbp - 0x60]
call fcn.1800086b0
mov rax, qword [0x1800cd200]
mov ebx, dword [rax + 0x30]
add rbx, qword [rbp + 0xb8]
je 0x180043b4d
lea rax, [rbx - 0xaa70aa8]
cmp rax, r15
ja 0x180043b4d
mov r8d, 0x30
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x180043b4d
cmp dword [rsp + 0x70], 0x1000
jne 0x180043b4d
mov eax, dword [rsp + 0x74]
test eax, 0x101
jne 0x180043b4d
test al, 0x66
je 0x180043b4d
mov rax, qword [rsp + 0x50]
sub rax, rbx
add rax, qword [rsp + 0x68]
cmp rax, 0x15
jb 0x180043b4d
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x120], xmm0
mov eax, dword [rbx + 0x10]
mov dword [rbp + 0x130], eax
movzx eax, byte [rbx + 0x14]
mov byte [rbp + 0x134], al
mov byte [rbp + 0x134], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
lea rax, [rbp + 0x120]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x180043b74
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x50]
call fcn.180006ca0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x180043bca
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043bc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004433d
call fcn.18004550c
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rsp + 0x60]
movups xmmword [rbp - 0x48], xmm1
lea rcx, [rbp - 0x60]
call fcn.1800428f0
lea rcx, [rbp - 0x60]
call fcn.180042c80
mov rax, qword [0x1800cbb80]
cmp qword [rbp + 0xb8], rax
jne 0x180043ee5
mov rax, qword [0x1800cd200]
mov ebx, dword [rax + 0x44]
add rbx, qword [rbp + 0xc0]
je 0x180043c7b
lea rax, [rbx - 0xaa70aa8]
cmp rax, r15
ja 0x180043c7b
mov r8d, 0x30
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x180043c7b
cmp dword [rsp + 0x70], 0x1000
jne 0x180043c7b
mov eax, dword [rsp + 0x74]
test eax, 0x101
jne 0x180043c7b
test al, 0x66
je 0x180043c7b
mov rax, qword [rsp + 0x50]
sub rax, rbx
add rax, qword [rsp + 0x68]
cmp rax, 0xc
jb 0x180043c7b
movsd xmm0, qword [rbx]
movsd qword [0x1800cbb98], xmm0
mov eax, dword [rbx + 8]
mov dword [0x1800cbba0], eax
mov rax, qword [0x1800cbb80]
cmp qword [rbp + 0xb8], rax
jne 0x180043ee5
mov rcx, qword [rbp + 0xf8]
test rcx, rcx
je 0x180043ced
mov rax, qword [rbp + 0x108]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043cd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044331
call fcn.18004550c
mov qword [rbp + 0xf8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
mov rcx, qword [rbp + 0xe0]
test rcx, rcx
je 0x180043d4b
mov rax, qword [rbp + 0xf0]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043d34
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044331
call fcn.18004550c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], r14
mov rcx, qword [rbp + 0xc8]
test rcx, rcx
je 0x180043da9
mov rax, qword [rbp + 0xd8]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043d92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044331
call fcn.18004550c
mov qword [rbp + 0xc8], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0xd0], xmm0
mov rcx, qword [rbp + 0x90]
test rcx, rcx
je 0x180043e0b
mov rax, qword [rbp + 0xa0]
sub rax, rcx
sar rax, 3
imul rax, r12
lea rdx, [rax + rax*2]
shl rdx, 3
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043df4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044331
call fcn.18004550c
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r14
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x180043e46
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043e41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044331
call fcn.18004550c
mov qword [rbp + 0x68], r14
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x180043e91
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043e8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044331
call fcn.18004550c
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x180044014
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180043edb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044331
call fcn.18004550c
jmp 0x180044014
cmp byte [0x180089ad8], 0
je 0x180043efd
mov eax, dword [0x1800cbb90]
cmp dword [rbp - 0x60], eax
je 0x18004400b
cmp dword [rbp + 0x2c], 0
jle 0x18004400b
cmp dword [rbp - 0x5c], 1
jne 0x18004400b
mov rax, qword [rbp + 0x98]
cmp rax, qword [rbp + 0x90]
je 0x18004400b
lea rcx, [rbp - 0x60]
call fcn.1800063a0
movss xmm0, dword [rbp - 8]
movss dword [rsp + 0x40], xmm0
movss xmm1, dword [rbp - 4]
movss dword [rsp + 0x44], xmm1
movss xmm0, dword [rbp]
addss xmm0, xmm6
movss dword [rsp + 0x48], xmm0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x34], 0
lea r8, [rsp + 0x38]
lea rdx, [rbp - 8]
call fcn.180006260
test eax, eax
je 0x180043ff0
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x40]
call fcn.180006260
test eax, eax
je 0x180043ff0
movss xmm4, dword [rsp + 0x34]
comiss xmm8, xmm4
ja 0x180043ff0
movss xmm0, dword [rsp + 0x3c]
mov rax, qword [0x1800cd018]
comiss xmm0, dword [rax + 0x14]
ja 0x180043ff0
movaps xmm3, xmm4
subss xmm3, xmm0
andps xmm3, xmm7
cvtps2pd xmm0, xmm3
mulsd xmm0, xmm9
cvtpd2ps xmm2, xmm0
movaps xmm1, xmm2
mulss xmm1, xmm10
movss xmm0, dword [rsp + 0x38]
subss xmm0, xmm1
shufps xmm0, xmm0, 0xe1
movss xmm0, xmm4
shufps xmm0, xmm0, 0xc6
movss xmm0, xmm2
shufps xmm0, xmm0, 0x27
movss xmm0, xmm3
shufps xmm0, xmm0, 0x39
jmp 0x180043ff3
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [0x1800cbc10], xmm0
lea rcx, [rbp - 0x60]
call fcn.1800075d0
nop
lea rcx, [rbp - 0x60]
call fcn.180044350
inc edi
add rsi, 8
mov r8, qword [0x1800cd128]
mov rcx, qword [r8 + 0x148]
sub rcx, qword [r8 + 0x140]
sar rcx, 3
movsxd rax, edi
cmp rax, rcx
jb 0x1800439a0
mov ebx, r14d
mov rax, qword [r8 + 0x160]
sub rax, qword [r8 + 0x158]
sar rax, 3
test rax, rax
je 0x180044216
mov rdi, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
mov dword [rbp - 0x74], 0
movaps xmmword [rbp - 0x70], xmm0
mov rax, qword [r8 + 0x158]
mov rax, qword [rdi + rax]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x50]
call fcn.1800434c0
lea r8, [rbp - 0x68]
lea rdx, [rbp - 0x74]
call fcn.180006260
test eax, eax
je 0x1800441af
movss xmm6, dword [rbp - 0x68]
comiss xmm8, xmm6
ja 0x1800441af
mov r10, qword [0x1800cd018]
comiss xmm6, dword [r10 + 0x10]
ja 0x1800441af
movss xmm7, dword [rbp - 0x64]
comiss xmm8, xmm7
ja 0x1800441af
comiss xmm7, dword [r10 + 0x14]
ja 0x1800441af
movss xmm0, dword [rbp - 0x74]
ucomiss xmm0, xmm8
jp 0x180044100
je 0x1800441af
movss xmm0, dword [rbp - 0x70]
ucomiss xmm0, xmm8
jp 0x180044111
je 0x1800441af
movss xmm0, dword [rbp - 0x6c]
ucomiss xmm0, xmm8
jp 0x180044122
je 0x1800441af
cmp byte [0x180089ad0], 0
je 0x1800441af
cmp qword [rsp + 0x78], 0
je 0x180044172
lea rax, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rax, qword [rsp + 0x68]
movsx ecx, byte [rax]
call fcn.18004c444
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova rcx, qword [rsp + 0x68]
mov byte [rcx], al
movss xmm7, dword [rbp - 0x64]
movss xmm6, dword [rbp - 0x68]
mov r10, qword [0x1800cd018]
lea r9, [rsp + 0x68]
cmp qword [rbp - 0x80], 0xf
cmova r9, qword [rsp + 0x68]
lea rcx, [0x1800cbbf0]
call fcn.18000e1b0
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x34], xmm7
mov r8d, eax
lea rdx, [rsp + 0x30]
lea rcx, [r10 + 0x1d40]
call fcn.180029e30
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x1800441eb
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800441e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180044337
call fcn.18004550c
inc ebx
add rdi, 8
mov r8, qword [0x1800cd128]
mov rcx, qword [r8 + 0x160]
sub rcx, qword [r8 + 0x158]
sar rcx, 3
movsxd rax, ebx
cmp rax, rcx
jb 0x180044060
call fcn.1800082e0
cmp byte [0x180089ab0], 0
je 0x1800442e8
movss xmm0, dword [0x180089abc]
ucomiss xmm0, dword [0x18007bfd8]
jp 0x18004423f
je 0x1800442d3
movsxd rcx, dword [0x1800ccffc]
lea rax, [0x180076e40]
mov ecx, dword [rax + rcx*4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1800442d3
movss xmm2, dword [0x18007bec4]
divss xmm2, dword [0x180089ab4]
mov qword [rsp + 0x50], r14
mov dword [rsp + 0x60], r14d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
movss xmm1, dword [0x1800cbbe8]
subss xmm1, dword [0x1800cbb78]
mulss xmm1, xmm2
cvttss2si eax, xmm1
mov dword [rsp + 0x58], eax
movss xmm0, dword [0x1800cbbec]
subss xmm0, dword [0x1800cbb7c]
mulss xmm0, xmm2
cvttss2si eax, xmm0
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x64], 1
mov r8d, 0x28
lea rdx, [rsp + 0x50]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov dword [0x180089abc], 0x49742400
mov qword [0x1800cbbe8], 0
mov rcx, qword [rbp + 0x138]
xor rcx, rsp
call fcn.180045070
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.18004c1fc
int3
call fcn.18004c1fc
nop
call fcn.18004c1fc
nop
int3