Function at 0x140004b60
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x260
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
mov rax, qword [0x1401200c0]
xor rax, rsp
mov qword [rsp + 0x210], rax
mov rdi, rdx
mov r15, rcx
lea rdx, [rsp + 0x1c0]
call fcn.140004ec0
mov rcx, qword [0x14032fdd8]
cmp byte [rcx + 0x21], 0
jne 0x140004e6a
cmp byte [rcx + 0x1a], 0
jne 0x140004e6a
mov ecx, dword [rcx + 0x58]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140004e6a
movdqa xmm0, xmmword [0x14010a2a0]
movdqu xmmword [rsp + 0xd0], xmm0
mov dword [rsp + 0xe0], Ordinal_60
xorps xmm6, xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x34], xmm6
movss dword [rsp + 0x38], xmm6
movss xmm7, dword [0x14010a15c]
movss dword [rsp + 0x40], xmm7
mov rcx, qword [0x14032fde0]
mov rdx, qword [rcx + 0x38]
add rdx, 0x12a0
mov qword [rsp + 0x1a0], 0
mov dword [rsp + 0x1a8], 0
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9d, [rbx + 0xc]
lea r8, [rsp + 0x1a0]
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movd esi, xmm6
xorps xmm0, xmm0
unpcklps xmm0, xmm6
movaps xmm8, xmm0
mov dword [rsp + 0x44], ebx
cmp ebx, 5
jge 0x140004e5d
movsxd r8, ebx
mov r8d, dword [rsp + r8*4 + 0xd0]
lea rdx, [rsp + 0x30]
mov rcx, r15
call fcn.1400046a0
lea rcx, [rsp + 0x120]
call fcn.140003f40
lea rdx, [rsp + 0xe8]
mov rcx, rax
call fcn.1400033b0
movsd xmm0, qword [rax]
movsd qword [rsp + 0x90], xmm0
movss dword [rsp + 0x48], xmm0
movss xmm1, dword [rsp + 0x94]
movss dword [rsp + 0x4c], xmm1
movss xmm4, dword [rax + 8]
movss dword [rsp + 0x50], xmm4
movsd xmm9, qword [rsp + 0x30]
movsd qword [rsp + 0xa0], xmm9
mov r14d, dword [rsp + 0x38]
mov dword [rsp + 0xa8], r14d
movss xmm3, dword [rsp + 0x30]
movss dword [rsp + 0x58], xmm3
movss xmm2, dword [rsp + 0x34]
movss dword [rsp + 0x5c], xmm2
movd xmm6, r14d
movss dword [rsp + 0x60], xmm6
unpcklps xmm0, xmm1
xorps xmm5, xmm5
movsd xmm5, xmm0
movss dword [rsp + 0x108], xmm4
movlhps xmm5, xmm4
movaps xmm0, xmm3
unpcklps xmm0, xmm2
xorps xmm4, xmm4
movsd xmm4, xmm0
movss dword [rsp + 0x118], xmm6
movlhps xmm4, xmm6
subps xmm4, xmm5
movaps xmm1, xmm4
mulps xmm1, xmm4
movaps xmm0, xmm1
shufps xmm0, xmm1, 0x66
addss xmm1, xmm0
shufps xmm0, xmm0, 0x55
addss xmm1, xmm0
shufps xmm1, xmm1, 0
sqrtps xmm1, xmm1
shufps xmm1, xmm1, 0
divps xmm4, xmm1
movaps xmm0, xmm4
movsd qword [rsp + 0x1b0], xmm4
shufps xmm4, xmm4, 0xaa
movsd qword [rsp + 0xb0], xmm0
movss dword [rsp + 0xb8], xmm4
movss xmm2, dword [rsp + 0x1b0]
movss dword [rsp + 0x68], xmm2
movss xmm1, dword [rsp + 0x1b4]
movss dword [rsp + 0x6c], xmm1
movss dword [rsp + 0x70], xmm4
movsd xmm0, qword [rsp + 0x1a0]
movsd qword [rsp + 0xc0], xmm0
mov eax, dword [rsp + 0x1a8]
mov dword [rsp + 0xc8], eax
movd xmm3, eax
subss xmm3, xmm4
movss xmm0, dword [rsp + 0x1a4]
subss xmm0, xmm1
movss xmm4, dword [rsp + 0x1a0]
subss xmm4, xmm2
movss dword [rsp + 0x78], xmm4
movss dword [rsp + 0x7c], xmm0
movss dword [rsp + 0x80], xmm3
mulss xmm4, xmm4
mulss xmm0, xmm0
addss xmm4, xmm0
mulss xmm3, xmm3
addss xmm4, xmm3
xorps xmm0, xmm0
ucomiss xmm0, xmm4
ja 0x140004e39
xorps xmm0, xmm0
sqrtss xmm0, xmm4
jmp 0x140004e41
movaps xmm0, xmm4
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm7, xmm0
jbe 0x140004e56
movaps xmm7, xmm0
movss dword [rsp + 0x40], xmm0
movaps xmm8, xmm9
mov esi, r14d
inc ebx
jmp 0x140004c6e
movsd qword [rdi], xmm8
mov dword [rdi + 8], esi
mov rax, rdi
jmp 0x140004e80
mov r8d, reloc.WS2_32.dll_recvfrom
mov rdx, rdi
mov rcx, r15
call fcn.1400046a0
mov rax, rdi
jmp 0x140004e80
mov rcx, qword [rsp + 0x210]
xor rcx, rsp
call fcn.1400cf470
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop rdi
ret