Function at 0x1400014c0
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rsi
push rbp
lea rbp, [r11 - 0x138]
sub rsp, 0x230
mov rax, qword [0x14005f040]
xor rax, rsp
mov qword [rbp + 0x80], rax
cmp byte [0x14005f0c0], 0
mov rsi, qword [0x14005f898]
je 0x140001988
mov qword [r11 + 0x18], r14
xor r14d, r14d
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movaps xmmword [r11 - 0x38], xmm8
movss xmm8, dword [0x1400572a0]
movaps xmmword [r11 - 0x48], xmm9
movss xmm9, dword [0x140057328]
movaps xmmword [r11 - 0x58], xmm10
movss xmm10, dword [0x140057320]
movaps xmmword [r11 - 0x68], xmm11
movss xmm11, dword [0x14005728c]
movaps xmmword [r11 - 0x78], xmm12
movss xmm12, dword [0x14005732c]
movaps xmmword [r11 - 0x88], xmm13
movss xmm13, dword [0x1400572b0]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rdi
movaps xmmword [r11 - 0x98], xmm14
movaps xmmword [r11 - 0xa8], xmm15
nop dword [rax + rax]
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.140001de0
mov ecx, dword [0x14005f128]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x1400015b6
mov ecx, dword [0x14005f12c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140001900
movsd xmm3, qword [rbp + 0x64]
xorps xmm0, xmm0
movss xmm14, dword [rbp + 0x6c]
xorps xmm2, xmm2
xorps xmm6, xmm6
mov dword [rsp + 0x38], r14d
unpcklps xmm0, xmm6
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x38]
movlhps xmm2, xmm0
movaps xmm0, xmm14
movlhps xmm3, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x140001900
mov rdx, qword [0x14005f180]
lea r8, [rbp - 0x78]
mov rcx, qword [0x14005f178]
add rdx, 0x20d9868
mov r9d, 8
mov qword [rbp - 0x78], r14
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x78]
lea r8, [rsp + 0x78]
mov rcx, qword [0x14005f178]
mov r9d, 0xc
mov qword [rsp + 0x78], r14
mov dword [rbp - 0x80], r14d
lea rdx, [rbx + 0x3d0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14005f178]
lea rdx, [rbx + 0x60]
mov r9d, 0xc
mov qword [rsp + 0x68], r14
lea r8, [rsp + 0x68]
mov dword [rsp + 0x70], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x70]
movss xmm15, dword [rsp + 0x68]
subss xmm0, xmm14
movss xmm7, dword [rbp + 0x64]
movaps xmm1, xmm15
movss xmm2, dword [rsp + 0x6c]
subss xmm1, xmm7
movss xmm6, dword [rbp + 0x68]
subss xmm2, xmm6
mulss xmm0, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400016d5
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1400016dd
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
subss xmm14, dword [rsp + 0x70]
subss xmm6, dword [rsp + 0x6c]
subss xmm7, xmm15
divss xmm14, xmm0
divss xmm7, xmm0
movss dword [rbp - 0x68], xmm14
comiss xmm7, xmm11
divss xmm6, xmm0
jbe 0x14000171b
nop dword [rax + rax]
addss xmm7, xmm9
comiss xmm7, xmm11
ja 0x140001710
comiss xmm10, xmm7
jbe 0x14000172c
addss xmm7, xmm8
comiss xmm10, xmm7
ja 0x140001721
comiss xmm6, xmm8
jbe 0x14000173d
addss xmm6, xmm12
comiss xmm6, xmm8
ja 0x140001732
comiss xmm9, xmm6
jbe 0x14000174e
addss xmm6, xmm13
comiss xmm9, xmm6
ja 0x140001743
movsd xmm3, qword [rsp + 0x78]
xorps xmm2, xmm2
movaps xmm0, xmm7
unpcklps xmm0, xmm6
movsd xmm2, xmm0
movss xmm0, dword [rbp - 0x80]
movlhps xmm3, xmm0
movss xmm0, dword [rbp - 0x68]
movlhps xmm2, xmm0
subps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x58], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x60], xmm0
jbe 0x1400017a1
nop dword [rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x58], xmm2
ja 0x140001790
comiss xmm10, xmm2
jbe 0x1400017c1
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x58], xmm2
ja 0x1400017b0
movss xmm0, dword [rsp + 0x5c]
comiss xmm0, xmm8
jbe 0x1400017e1
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x1400017d0
movss dword [rsp + 0x5c], xmm0
comiss xmm9, xmm0
jbe 0x140001801
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x1400017f0
movss dword [rsp + 0x5c], xmm0
movsd xmm2, qword [rsp + 0x58]
movss xmm0, dword [rsp + 0x60]
movlhps xmm2, xmm0
addps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x48], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x50], xmm0
jbe 0x140001841
nop dword [rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x48], xmm2
ja 0x140001830
comiss xmm10, xmm2
jbe 0x140001861
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x48], xmm2
ja 0x140001850
movss xmm0, dword [rsp + 0x4c]
comiss xmm0, xmm8
jbe 0x140001881
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x140001870
movss dword [rsp + 0x4c], xmm0
comiss xmm9, xmm0
jbe 0x1400018a1
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x140001890
movss dword [rsp + 0x4c], xmm0
movsd xmm4, qword [rsp + 0x48]
xorps xmm0, xmm0
xorps xmm3, xmm3
mov dword [rsp + 0x44], r14d
xorps xmm1, xmm1
unpcklps xmm0, xmm1
movsd xmm3, xmm0
movss xmm0, dword [rsp + 0x44]
movlhps xmm3, xmm0
movss xmm0, dword [rsp + 0x50]
movlhps xmm4, xmm0
cmpeqps xmm3, xmm4
movmskps eax, xmm3
and eax, 7
cmp al, 7
je 0x140001900
mov rcx, qword [0x14005f178]
lea r8, [rsp + 0x48]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x3d0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14005f0c0], r14b
jne 0x140001580
movaps xmm15, xmmword [rsp + 0x190]
movaps xmm14, xmmword [rsp + 0x1a0]
movaps xmm13, xmmword [rsp + 0x1b0]
movaps xmm12, xmmword [rsp + 0x1c0]
movaps xmm11, xmmword [rsp + 0x1d0]
movaps xmm10, xmmword [rsp + 0x1e0]
movaps xmm9, xmmword [rsp + 0x1f0]
movaps xmm8, xmmword [rsp + 0x200]
movaps xmm7, xmmword [rsp + 0x210]
movaps xmm6, xmmword [rsp + 0x220]
mov r14, qword [rsp + 0x250]
mov rdi, qword [rsp + 0x248]
mov rbx, qword [rsp + 0x240]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.14004dd20
mov rsi, qword [rsp + 0x258]
add rsp, 0x230
pop rbp
ret