Function at 0x1400336a0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x17]
sub rsp, 0xb0
movaps xmmword [rsp + 0x60], xmm10
mov rax, qword [0x140044040]
xor rax, rsp
mov qword [rbp - 0x41], rax
mov r14, rdx
xor r12d, r12d
lea rdx, [rbp - 0x59]
mov qword [rbp - 0x59], r12
movaps xmm10, xmm3
mov rsi, r8
mov r13, rcx
call fcn.140032eb0
mov rbx, qword [rbp - 0x59]
mov r15, qword [r14 + 0x18]
cmp qword [rbx + 0x18], r15
jne 0x14003397d
mov rdx, qword [rsi + 0x18]
cmp r15, rdx
je 0x14003397d
mov rcx, qword [0x1400440c0]
lea r9d, [r12 + 4]
add rdx, 0x3cb
mov qword [rsp + 0x108], rdi
lea r8, [rbp - 0x49]
mov dword [rbp - 0x49], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x1400440c0]
lea rdx, [r15 + 0x3cb]
mov edi, dword [rbp - 0x49]
lea r9d, [r12 + 4]
lea r8, [rbp - 0x59]
mov dword [rbp - 0x59], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp edi, dword [rbp - 0x59]
je 0x140033975
mov rdi, qword [r14 + 0x28]
lea r9d, [r12 + 4]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x59]
mov dword [rbp - 0x59], r12d
mov qword [rsp + 0x20], r12
lea rdx, [rdi + 0x334]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x59], r12d
jle 0x140033975
mov rdx, qword [rsi + 0x28]
lea r9d, [r12 + 4]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x59]
add rdx, 0x334
mov dword [rbp - 0x59], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp - 0x59], r12d
jle 0x140033975
mov rcx, qword [0x1400440c0]
lea rdx, [rdi + 0x318]
movaps xmmword [rsp + 0xa0], xmm6
lea r9d, [r12 + 8]
movaps xmmword [rsp + 0x90], xmm7
lea r8, [rbp - 0x59]
movaps xmmword [rsp + 0x80], xmm8
movaps xmmword [rsp + 0x70], xmm9
mov qword [rbp - 0x59], r12
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x59]
lea r9d, [r12 + 8]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x49]
add rdx, 0x1e0
mov qword [rbp - 0x49], r12
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp - 0x49]
lea r9d, [r12 + 0xc]
mov rcx, qword [0x1400440c0]
lea r8, [rbp - 0x69]
add rdx, 0xc0
mov qword [rbp - 0x69], r12
mov dword [rbp - 0x61], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x69]
call fcn.140032a50
movsd xmm0, qword [r13]
movss xmm8, dword [rbp - 0x59]
movsd xmm1, qword [0x14003d920]
subss xmm0, xmm8
cvtss2sd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movss xmm7, dword [rbp - 0x55]
movaps xmm9, xmm0
movss xmm0, dword [r13 + 4]
movsd xmm1, qword [0x14003d920]
subss xmm0, xmm7
cvtss2sd xmm0, xmm0
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm9, xmm0
xorps xmm1, xmm1
ucomisd xmm1, xmm9
ja 0x1400338d9
xorps xmm0, xmm0
sqrtsd xmm0, xmm9
jmp 0x1400338e2
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
mov ecx, dword [r14 + 0x30]
xorps xmm6, xmm6
mov eax, dword [rsi + 0x10]
bt eax, ecx
movaps xmm9, xmmword [rsp + 0x70]
cvtsd2ss xmm6, xmm0
jb 0x14003390b
mov ecx, dword [rsi]
mov eax, dword [r14 + 0xc]
bt eax, ecx
jb 0x14003390b
xor dil, dil
jmp 0x14003390e
mov dil, 1
mov ecx, 0xa4
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003395c
comiss xmm10, xmm6
jbe 0x14003395c
test dil, dil
je 0x14003395c
subss xmm7, dword [r13 + 4]
subss xmm8, dword [r13]
xor r9d, r9d
mov qword [rsp + 0x20], r12
divss xmm7, dword [rbp + 0x77]
lea ecx, [r9 + 1]
divss xmm8, dword [rbp + 0x77]
cvttss2si r8, xmm7
cvttss2si rdx, xmm8
call qword [sym.imp.USER32.dll_mouse_event]
movaps xmm7, xmmword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0xa0]
movaps xmm8, xmmword [rsp + 0x80]
mov rdi, qword [rsp + 0x108]
mov edx, 0x38
mov rcx, rbx
call fcn.14003505c
mov rcx, qword [rbp - 0x41]
xor rcx, rsp
call fcn.140034ec0
movaps xmm10, xmmword [rsp + 0x60]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret