Function at 0x14004b740
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x140103080]
xor rax, rsp
mov qword [rbp - 0x41], rax
mov eax, dword [0x140103610]
xor r15d, r15d
mov esi, 1
test eax, eax
jne 0x14004b78c
mov r9d, r15d
jmp 0x14004b796
mov r9d, dword [rbp - 0x59]
cmp eax, esi
cmove r9d, esi
mov r8, qword [0x140104a88]
lea rdx, [rbp - 0x69]
call fcn.140070230
cmp byte [0x140104c04], r15b
lea r8, [rbp - 0x79]
movsd xmm8, qword [rbp - 0x69]
lea rdx, [rbp - 0x59]
mov edi, dword [rbp - 0x61]
movsd qword [rbp - 0x79], xmm8
mov dword [rbp - 0x71], edi
je 0x14004b7d0
call fcn.14006ffb0
jmp 0x14004b7d5
call fcn.14006fdd0
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm7, dword [rbp - 0x55]
mov ecx, esi
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
cvtps2pd xmm7, xmm7
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2pd xmm1, xmm1
subsd xmm7, xmm1
movsd xmm1, qword [0x1400ee990]
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x1400ee990]
movaps xmm7, xmm0
movss xmm0, dword [rbp - 0x59]
movd xmm2, ebx
cvtps2pd xmm0, xmm0
cvtdq2pd xmm2, xmm2
subsd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
ucomiss xmm1, xmm0
ja 0x14004b855
xorps xmm6, xmm6
sqrtss xmm6, xmm0
jmp 0x14004b85d
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
lea r8, [rbp - 0x79]
movsd qword [rbp - 0x79], xmm8
lea rdx, [rbp - 0x59]
mov dword [rbp - 0x71], edi
call fcn.14006fdd0
movd xmm1, dword [0x1401035f4]
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm6
jbe 0x14004bb73
mov ecx, dword [0x140103614]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14004bb73
mov rdx, qword [0x140104ae0]
lea r8, [rbp - 0x59]
add rdx, qword [0x140104b00]
mov r9d, 8
mov rcx, qword [0x140104b08]
mov qword [rsp + 0x110], r14
movaps xmmword [rsp + 0xb0], xmm9
movaps xmmword [rsp + 0xa0], xmm10
movaps xmmword [rsp + 0x90], xmm12
movaps xmmword [rsp + 0x80], xmm13
movaps xmmword [rsp + 0x70], xmm14
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rsi, qword [rbp - 0x59]
lea r8, [rbp - 0x79]
mov rcx, qword [0x140104b08]
mov r9d, ntohs
mov qword [rsp + 0x20], r15
lea rdx, [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140104b08]
lea rdx, [rsi + 0x60]
movss xmm12, dword [rbp - 0x79]
lea r8, [rbp - 0x51]
movss xmm13, dword [rbp - 0x75]
mov r9d, ntohs
movss xmm14, dword [rbp - 0x71]
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x49]
movss xmm9, dword [rbp - 0x51]
movss xmm10, dword [rbp - 0x4d]
movaps xmm1, xmm9
movss xmm6, dword [rbp - 0x69]
movaps xmm2, xmm10
movss xmm7, dword [rbp - 0x65]
subss xmm1, xmm6
subss xmm2, xmm7
movd xmm8, edi
subss xmm0, xmm8
mulss xmm1, xmm1
mulss xmm2, xmm2
mulss xmm0, xmm0
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
cvtps2pd xmm1, xmm2
ucomisd xmm0, xmm1
ja 0x14004b9a9
sqrtpd xmm0, xmm1
jmp 0x14004b9b1
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
subss xmm8, dword [rbp - 0x49]
movss xmm5, dword [0x1400eeaac]
subss xmm7, xmm10
movss xmm10, dword [0x1400eeaa8]
subss xmm6, xmm9
movss xmm9, dword [0x1400eea20]
cvtsd2ss xmm0, xmm0
divss xmm7, xmm0
divss xmm6, xmm0
comiss xmm10, xmm7
divss xmm8, xmm0
ja 0x14004ba00
comiss xmm7, xmm9
jbe 0x14004ba03
nop dword [rax + rax]
movaps xmm7, xmm5
movss xmm4, dword [0x1400eea04]
comiss xmm6, xmm4
movss xmm2, dword [0x1400eeaa0]
jbe 0x14004ba1d
movaps xmm6, xmm2
jmp 0x14004ba25
comiss xmm2, xmm6
jbe 0x14004ba25
movaps xmm6, xmm4
subss xmm7, xmm13
subss xmm6, xmm12
subss xmm8, xmm14
comiss xmm10, xmm7
ja 0x14004ba40
comiss xmm7, xmm9
jbe 0x14004ba43
movaps xmm7, xmm5
comiss xmm6, xmm4
jbe 0x14004ba4d
movaps xmm6, xmm2
jmp 0x14004ba55
comiss xmm2, xmm6
jbe 0x14004ba55
movaps xmm6, xmm4
movss xmm1, dword [0x1401035f8]
xorps xmm0, xmm0
ucomiss xmm1, xmm0
jp 0x14004ba74
jne 0x14004ba74
movaps xmm0, xmm6
unpcklps xmm0, xmm7
movsd qword [rbp - 0x79], xmm0
jmp 0x14004ba8b
divss xmm6, xmm1
divss xmm7, xmm1
movss dword [rbp - 0x79], xmm6
movss dword [rbp - 0x75], xmm7
divss xmm8, xmm1
lea rax, [rbp - 0x79]
movss dword [rbp - 0x71], xmm8
movsd xmm0, qword [rax]
movss xmm7, dword [rax + 8]
movaps xmm3, xmm0
shufps xmm3, xmm3, 0x55
addss xmm7, xmm14
movaps xmm14, xmmword [rsp + 0x70]
addss xmm3, xmm13
movaps xmm13, xmmword [rsp + 0x80]
movaps xmm1, xmm0
addss xmm1, xmm12
movsd qword [rbp - 0x69], xmm0
movaps xmm12, xmmword [rsp + 0x90]
comiss xmm10, xmm3
movaps xmm10, xmmword [rsp + 0xa0]
ja 0x14004baf0
comiss xmm3, xmm9
jbe 0x14004baf3
nop dword [rax]
movaps xmm3, xmm5
comiss xmm1, xmm4
movaps xmm9, xmmword [rsp + 0xb0]
jbe 0x14004bb06
movaps xmm1, xmm2
jmp 0x14004bb0e
comiss xmm2, xmm1
jbe 0x14004bb0e
movaps xmm1, xmm4
mov rcx, qword [0x140104b08]
lea r8, [rbp - 0x79]
movaps xmm6, xmm1
movss dword [rbp - 0x71], xmm7
unpcklps xmm6, xmm3
lea rdx, [rsi + 0x40]
mov r9d, ntohs
movsd qword [rbp - 0x79], xmm6
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [0x140104b08]
lea rdx, [rsi + 0x3d0]
mov r9d, ntohs
movss dword [rbp - 0x61], xmm7
lea r8, [rbp - 0x69]
movsd qword [rbp - 0x69], xmm6
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r14, qword [rsp + 0x110]
mov rcx, qword [rbp - 0x41]
xor rcx, rsp
call fcn.1400d2300
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop rdi
pop rbp
ret