Function at 0x140001d30
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
mov rax, qword [0x140050040]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor ebx, ebx
cmp byte [0x1400500c8], bl
je 0x140001e2e
mov rdx, qword [0x140062dc0]
test rdx, rdx
je 0x140001e2e
cmp qword [0x140062db0], rbx
je 0x140001e2e
mov rcx, qword [0x140062d88]
lea rax, [rbp + 7]
add rdx, 0x760
mov qword [rsp + 0x20], rax
mov r9d, 4
mov dword [rbp - 0x31], ebx
lea r8, [rbp - 0x31]
mov qword [rbp + 7], rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x31]
lea rax, [rbp + 0x17]
subss xmm0, dword [0x140048510]
mov rdx, qword [0x140062dc0]
lea r8, [rbp - 0x39]
mov rcx, qword [0x140062d88]
add rdx, 0x760
mov r9d, 4
mov qword [rbp + 0x17], rbx
mov qword [rsp + 0x20], rax
movss dword [rbp - 0x39], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062db0]
lea rax, [rbp + 0x27]
mov rcx, qword [0x140062d88]
lea r8, [rbp - 0x31]
add rdx, 0x9e0
mov dword [rbp - 0x31], 1
mov r9d, 4
mov qword [rbp + 0x27], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062dba], bl
movss xmm6, dword [0x1400484f8]
je 0x140001ea1
cmp qword [0x140062dc8], rbx
je 0x140001ea1
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rdx, qword [0x140062d90]
mov r9d, 4
mov rcx, qword [0x140062d88]
add rdx, 0xc0
test ax, ax
je 0x140001e83
mov dword [rbp - 0x39], ebx
lea rax, [rbp - 9]
mov qword [rbp - 9], rbx
lea r8, [rbp - 0x39]
jmp 0x140001e96
mov dword [rbp - 0x29], 0x3f800000
lea rax, [rbp - 1]
mov qword [rbp - 1], rbx
lea r8, [rbp - 0x29]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x1400500c3], bl
mov rdx, qword [0x140062d98]
je 0x140001eca
test rdx, rdx
je 0x140001eca
mov dword [rbp + 0x17], 0xbf800000
lea rax, [rbp - 0x19]
mov qword [rbp - 0x19], rbx
lea r8, [rbp + 0x17]
jmp 0x140001edd
mov dword [rbp + 7], 0x3f800000
lea rax, [rbp - 0x21]
mov qword [rbp - 0x21], rbx
lea r8, [rbp + 7]
mov rcx, qword [0x140062d88]
mov r9d, 4
add rdx, 0xc0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x1400500c2], bl
mov rdx, qword [0x140062dc0]
je 0x140001f25
test rdx, rdx
je 0x140001f25
mov dword [rbp - 0x29], 0x7f7fffff
lea rax, [rbp - 1]
mov qword [rbp - 1], rbx
lea r8, [rbp - 0x29]
jmp 0x140001f34
mov dword [rbp - 0x39], ebx
lea rax, [rbp - 9]
mov qword [rbp - 9], rbx
lea r8, [rbp - 0x39]
mov rcx, qword [0x140062d88]
mov r9d, 4
add rdx, 0xc0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062da0], bl
mov rdx, qword [0x140062d90]
je 0x140001f79
test rdx, rdx
je 0x140001f79
mov byte [rbp - 0x49], 1
lea rax, [rbp - 0x21]
mov qword [rbp - 0x21], rbx
lea r8, [rbp - 0x49]
jmp 0x140001f88
mov byte [rbp - 0x41], bl
lea rax, [rbp - 0x19]
mov qword [rbp - 0x19], rbx
lea r8, [rbp - 0x41]
mov rcx, qword [0x140062d88]
mov r9d, 1
add rdx, 0x24fd
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062db8], bl
mov rdx, qword [0x140062da8]
je 0x140001fe1
test rdx, rdx
je 0x140001fe1
movss xmm1, dword [0x1400500c4]
lea rax, [rbp - 1]
movaps xmm0, xmm1
movss dword [rbp + 0x2f], xmm1
unpcklps xmm0, xmm1
lea r8, [rbp + 0x27]
movsd qword [rbp + 0x27], xmm0
mov qword [rbp - 1], rbx
jmp 0x140001ffd
movaps xmm0, xmm6
movss dword [rbp + 0xf], xmm6
unpcklps xmm0, xmm6
lea rax, [rbp - 9]
movsd qword [rbp + 7], xmm0
lea r8, [rbp + 7]
mov qword [rbp - 9], rbx
mov rcx, qword [0x140062d88]
mov r9d, 0xc
add rdx, 0x17c
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062db9], bl
mov rdx, qword [0x140062dc8]
je 0x140002045
test rdx, rdx
je 0x140002045
movss xmm1, dword [0x1400500cc]
movaps xmm0, xmm1
movss dword [rbp - 0x11], xmm1
unpcklps xmm0, xmm1
jmp 0x140002050
movaps xmm0, xmm6
movss dword [rbp - 0x11], xmm6
unpcklps xmm0, xmm6
mov rcx, qword [0x140062d88]
lea rax, [rbp - 0x21]
mov r9d, 0xc
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x19]
movsd qword [rbp - 0x19], xmm0
add rdx, 0x17c
mov qword [rbp - 0x21], rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov al, 1
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14003f020
mov rbx, qword [rsp + 0xe0]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rbp
ret