Function at 0x140001d00
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
mov rax, qword [0x14004f040]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor ebx, ebx
cmp byte [0x14004f0cc], bl
je 0x140001df8
mov rdx, qword [0x140061dc0]
test rdx, rdx
je 0x140001df8
cmp qword [0x140061db0], rbx
je 0x140001df8
mov rcx, qword [0x140061d90]
lea rax, [rbp + 7]
add rdx, 0x760
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
mov dword [rbp - 0x31], ebx
lea r8, [rbp - 0x31]
mov qword [rbp + 7], rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x31]
lea rax, [rbp + 0x17]
subss xmm0, dword [0x140048468]
mov rdx, qword [0x140061dc0]
lea r9d, [rbx + 4]
mov rcx, qword [0x140061d90]
lea r8, [rbp - 0x39]
add rdx, 0x760
mov qword [rbp + 0x17], rbx
mov qword [rsp + 0x20], rax
movss dword [rbp - 0x39], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140061db0]
lea rax, [rbp + 0x27]
mov rcx, qword [0x140061d90]
lea r9d, [rbx + 4]
add rdx, 0x9e0
mov dword [rbp - 0x31], 1
lea r8, [rbp - 0x31]
mov qword [rbp + 0x27], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14004f0c3], bl
movss xmm6, dword [0x140048450]
je 0x140001e6b
cmp qword [0x140061dc8], rbx
je 0x140001e6b
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rdx, qword [0x140061d98]
mov r9d, 4
mov rcx, qword [0x140061d90]
add rdx, 0xc0
test ax, ax
je 0x140001e4d
mov dword [rbp - 0x39], ebx
lea rax, [rbp - 9]
mov qword [rbp - 9], rbx
lea r8, [rbp - 0x39]
jmp 0x140001e60
mov dword [rbp - 0x29], 0x3f800000
lea rax, [rbp - 1]
mov qword [rbp - 1], rbx
lea r8, [rbp - 0x29]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14004f0c5], bl
mov rdx, qword [0x140061da0]
je 0x140001e94
test rdx, rdx
je 0x140001e94
mov dword [rbp + 0x17], 0xbf800000
lea rax, [rbp - 0x19]
mov qword [rbp - 0x19], rbx
lea r8, [rbp + 0x17]
jmp 0x140001ea7
mov dword [rbp + 7], 0x3f800000
lea rax, [rbp - 0x21]
mov qword [rbp - 0x21], rbx
lea r8, [rbp + 7]
mov rcx, qword [0x140061d90]
mov r9d, 4
add rdx, 0xc0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14004f0c4], bl
mov rdx, qword [0x140061dc0]
je 0x140001eef
test rdx, rdx
je 0x140001eef
mov dword [rbp - 0x29], 0x7f7fffff
lea rax, [rbp - 1]
mov qword [rbp - 1], rbx
lea r8, [rbp - 0x29]
jmp 0x140001efe
mov dword [rbp - 0x39], ebx
lea rax, [rbp - 9]
mov qword [rbp - 9], rbx
lea r8, [rbp - 0x39]
mov rcx, qword [0x140061d90]
mov r9d, 4
add rdx, 0xc0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14004f0c2], bl
mov rdx, qword [0x140061d98]
je 0x140001f43
test rdx, rdx
je 0x140001f43
mov byte [rbp - 0x49], 1
lea rax, [rbp - 0x21]
mov qword [rbp - 0x21], rbx
lea r8, [rbp - 0x49]
jmp 0x140001f52
mov byte [rbp - 0x41], bl
lea rax, [rbp - 0x19]
mov qword [rbp - 0x19], rbx
lea r8, [rbp - 0x41]
mov rcx, qword [0x140061d90]
mov r9d, 1
add rdx, 0x24fd
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140061db8], bl
mov rdx, qword [0x140061da8]
je 0x140001fab
test rdx, rdx
je 0x140001fab
movss xmm1, dword [0x14004f0c8]
lea rax, [rbp - 1]
movaps xmm0, xmm1
movss dword [rbp + 0x2f], xmm1
unpcklps xmm0, xmm1
lea r8, [rbp + 0x27]
movsd qword [rbp + 0x27], xmm0
mov qword [rbp - 1], rbx
jmp 0x140001fc7
movaps xmm0, xmm6
movss dword [rbp + 0xf], xmm6
unpcklps xmm0, xmm6
lea rax, [rbp - 9]
movsd qword [rbp + 7], xmm0
lea r8, [rbp + 7]
mov qword [rbp - 9], rbx
mov rcx, qword [0x140061d90]
mov r9d, 0xc
add rdx, 0x17c
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140061db9], bl
mov rdx, qword [0x140061dc8]
je 0x14000200f
test rdx, rdx
je 0x14000200f
movss xmm1, dword [0x14004f0d0]
movaps xmm0, xmm1
movss dword [rbp - 0x11], xmm1
unpcklps xmm0, xmm1
jmp 0x14000201a
movaps xmm0, xmm6
movss dword [rbp - 0x11], xmm6
unpcklps xmm0, xmm6
mov rcx, qword [0x140061d90]
lea rax, [rbp - 0x21]
mov r9d, 0xc
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x19]
movsd qword [rbp - 0x19], xmm0
add rdx, 0x17c
mov qword [rbp - 0x21], rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov al, 1
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14003f800
mov rbx, qword [rsp + 0xe0]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rbp
ret