Function at 0x140001380
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rsi
push rbp
lea rbp, [r11 - 0x148]
sub rsp, 0x240
mov rax, qword [0x140062040]
xor rax, rsp
mov qword [rbp + 0x90], rax
cmp byte [0x1400620c0], 0
mov rsi, qword [0x1400628a8]
je 0x140001858
mov qword [r11 + 0x18], r14
xor r14d, r14d
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movaps xmmword [r11 - 0x38], xmm8
movss xmm8, dword [0x1400598a0]
movaps xmmword [r11 - 0x48], xmm9
movss xmm9, dword [0x140059928]
movaps xmmword [r11 - 0x58], xmm10
movss xmm10, dword [0x140059920]
movaps xmmword [r11 - 0x68], xmm11
movss xmm11, dword [0x14005988c]
movaps xmmword [r11 - 0x78], xmm12
movss xmm12, dword [0x14005992c]
movaps xmmword [r11 - 0x88], xmm13
movss xmm13, dword [0x1400598b0]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rdi
movaps xmmword [r11 - 0x98], xmm14
movaps xmmword [r11 - 0xa8], xmm15
nop dword [rax + rax]
cmp byte [0x140062109], r14b
je 0x1400017d0
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.140001cc0
mov ecx, dword [0x140062130]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140001483
mov ecx, dword [0x140062134]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x1400017d0
movsd xmm3, qword [rbp + 0x10]
xorps xmm0, xmm0
movss xmm14, dword [rbp + 0x18]
xorps xmm2, xmm2
xorps xmm6, xmm6
mov dword [rsp + 0x38], r14d
unpcklps xmm0, xmm6
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x38]
movlhps xmm2, xmm0
movaps xmm0, xmm14
movlhps xmm3, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x1400017d0
mov rdx, qword [0x140062190]
lea r8, [rbp - 0x78]
mov rcx, qword [0x140062188]
add rdx, 0x1fbccd8
mov r9d, 8
mov qword [rbp - 0x78], r14
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x78]
lea r8, [rsp + 0x78]
mov rcx, qword [0x140062188]
mov r9d, 0xc
mov qword [rsp + 0x78], r14
mov dword [rbp - 0x80], r14d
lea rdx, [rbx + 0x3d0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140062188]
lea rdx, [rbx + 0x60]
mov r9d, 0xc
mov qword [rsp + 0x68], r14
lea r8, [rsp + 0x68]
mov dword [rsp + 0x70], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x70]
movss xmm15, dword [rsp + 0x68]
subss xmm0, xmm14
movss xmm7, dword [rbp + 0x10]
movaps xmm1, xmm15
movss xmm2, dword [rsp + 0x6c]
subss xmm1, xmm7
movss xmm6, dword [rbp + 0x14]
subss xmm2, xmm6
mulss xmm0, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400015a2
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1400015aa
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
subss xmm14, dword [rsp + 0x70]
subss xmm6, dword [rsp + 0x6c]
subss xmm7, xmm15
divss xmm14, xmm0
divss xmm7, xmm0
movss dword [rbp - 0x68], xmm14
comiss xmm7, xmm11
divss xmm6, xmm0
jbe 0x1400015e0
addss xmm7, xmm9
comiss xmm7, xmm11
ja 0x1400015d5
comiss xmm10, xmm7
jbe 0x1400015fb
nop word [rax + rax]
addss xmm7, xmm8
comiss xmm10, xmm7
ja 0x1400015f0
comiss xmm6, xmm8
jbe 0x14000160c
addss xmm6, xmm12
comiss xmm6, xmm8
ja 0x140001601
comiss xmm9, xmm6
jbe 0x14000161d
addss xmm6, xmm13
comiss xmm9, xmm6
ja 0x140001612
movsd xmm3, qword [rsp + 0x78]
xorps xmm2, xmm2
movaps xmm0, xmm7
unpcklps xmm0, xmm6
movsd xmm2, xmm0
movss xmm0, dword [rbp - 0x80]
movlhps xmm3, xmm0
movss xmm0, dword [rbp - 0x68]
movlhps xmm2, xmm0
subps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x58], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x60], xmm0
jbe 0x140001671
nop dword [rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x58], xmm2
ja 0x140001660
comiss xmm10, xmm2
jbe 0x140001691
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x58], xmm2
ja 0x140001680
movss xmm0, dword [rsp + 0x5c]
comiss xmm0, xmm8
jbe 0x1400016b1
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x1400016a0
movss dword [rsp + 0x5c], xmm0
comiss xmm9, xmm0
jbe 0x1400016d1
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x1400016c0
movss dword [rsp + 0x5c], xmm0
movsd xmm2, qword [rsp + 0x58]
movss xmm0, dword [rsp + 0x60]
movlhps xmm2, xmm0
addps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x48], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x50], xmm0
jbe 0x140001711
nop dword [rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x48], xmm2
ja 0x140001700
comiss xmm10, xmm2
jbe 0x140001731
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x48], xmm2
ja 0x140001720
movss xmm0, dword [rsp + 0x4c]
comiss xmm0, xmm8
jbe 0x140001751
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x140001740
movss dword [rsp + 0x4c], xmm0
comiss xmm9, xmm0
jbe 0x140001771
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x140001760
movss dword [rsp + 0x4c], xmm0
movsd xmm4, qword [rsp + 0x48]
xorps xmm0, xmm0
xorps xmm3, xmm3
mov dword [rsp + 0x44], r14d
xorps xmm1, xmm1
unpcklps xmm0, xmm1
movsd xmm3, xmm0
movss xmm0, dword [rsp + 0x44]
movlhps xmm3, xmm0
movss xmm0, dword [rsp + 0x50]
movlhps xmm4, xmm0
cmpeqps xmm3, xmm4
movmskps eax, xmm3
and eax, 7
cmp al, 7
je 0x1400017d0
mov rcx, qword [0x140062188]
lea r8, [rsp + 0x48]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x3d0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400620c0], r14b
jne 0x140001440
movaps xmm15, xmmword [rsp + 0x1a0]
movaps xmm14, xmmword [rsp + 0x1b0]
movaps xmm13, xmmword [rsp + 0x1c0]
movaps xmm12, xmmword [rsp + 0x1d0]
movaps xmm11, xmmword [rsp + 0x1e0]
movaps xmm10, xmmword [rsp + 0x1f0]
movaps xmm9, xmmword [rsp + 0x200]
movaps xmm8, xmmword [rsp + 0x210]
movaps xmm7, xmmword [rsp + 0x220]
movaps xmm6, xmmword [rsp + 0x230]
mov r14, qword [rsp + 0x260]
mov rdi, qword [rsp + 0x258]
mov rbx, qword [rsp + 0x250]
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.140050070
mov rsi, qword [rsp + 0x268]
add rsp, 0x240
pop rbp
ret