Function at 0x140016570
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
push rbp
lea rbp, [r11 - 0x5f]
sub rsp, 0xf0
mov rax, qword [0x140103040]
xor rax, rsp
mov qword [rbp + 0x17], rax
xor ebx, ebx
movaps xmmword [r11 - 0x38], xmm8
cmp byte [0x140107386], bl
xorps xmm8, xmm8
je 0x140016714
mov rcx, qword [0x1401074c0]
xorps xmm0, xmm0
movaps xmmword [r11 - 0x28], xmm7
movss xmm7, dword [0x140107598]
test rcx, rcx
js 0x1400165cb
cvtsi2ss xmm0, rcx
jmp 0x1400165e0
mov rax, rcx
and ecx, 1
shr rax, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
movss xmm1, dword [0x1400f3608]
addss xmm0, xmm7
xor eax, eax
addss xmm0, dword [0x1400f3540]
comiss xmm0, xmm1
jb 0x140016611
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x140016611
movabs rcx, 0x8000000000000000
mov rax, rcx
mov rcx, qword [0x140107200]
lea r8, [rbp - 0x59]
cvttss2si rdx, xmm0
mov r9d, 4
mov dword [rbp - 0x59], ebx
add rdx, rax
lea rax, [rbp - 0x11]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [0x140107584], 1
jbe 0x1400166f7
movss xmm3, dword [0x140107570]
lea rdx, [rbp - 0x39]
cvtps2pd xmm3, xmm3
mov r8d, 0x28
mov qword [rbp - 0x39], rbx
mov dword [rbp - 0x29], ebx
mov qword [rbp - 0x21], rbx
mov dword [rbp - 0x25], 1
lea ecx, [r8 - 0x27]
mov qword [rbp - 0x19], rbx
movaps xmmword [rsp + 0xe0], xmm6
movss xmm6, dword [rbp - 0x59]
movaps xmm0, xmm6
subss xmm0, dword [0x140107208]
cvtps2pd xmm1, xmm0
movaps xmm0, xmm7
mulsd xmm1, qword [0x1400f3648]
subss xmm0, dword [0x14010720c]
addsd xmm1, xmm1
divsd xmm1, xmm3
divsd xmm1, qword [0x1400f3638]
cvttsd2si eax, xmm1
cvtps2pd xmm1, xmm0
mov dword [rbp - 0x31], eax
mulsd xmm1, qword [0x1400f3648]
addsd xmm1, xmm1
divsd xmm1, xmm3
divsd xmm1, qword [0x1400f34f8]
cvttsd2si eax, xmm1
mov dword [rbp - 0x2d], eax
call qword [sym.imp.USER32.dll_SendInput]
movss dword [0x140107208], xmm6
movaps xmm6, xmmword [rsp + 0xe0]
jmp 0x140016704
movss xmm0, dword [rbp - 0x59]
movss dword [0x140107208], xmm0
movss dword [0x14010720c], xmm7
movaps xmm7, xmmword [rsp + 0xd0]
cmp byte [0x140107383], bl
je 0x14001675b
movss xmm0, dword [0x140107460]
comiss xmm0, xmm8
jbe 0x14001675b
movsxd rdx, dword [0x140103434]
lea rax, [rbp - 9]
add rdx, qword [0x1401074c0]
lea r8, [rbp - 0x61]
mov rcx, qword [0x140107200]
mov r9d, 4
mov dword [rbp - 0x61], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140107387], bl
movaps xmm8, xmmword [rsp + 0xc0]
je 0x1400167f5
mov ecx, 0x20
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400167f5
movsxd rdx, dword [0x14010344c]
lea rax, [rbp - 0x51]
add rdx, qword [0x1401075c8]
lea r8, [rbp - 0x5d]
mov rcx, qword [0x140107200]
mov r9d, 4
mov dword [rbp - 0x5d], 0x10001
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
movsxd rdx, dword [0x14010344c]
lea rax, [rbp - 1]
add rdx, qword [0x1401075c8]
lea r8, [rbp - 0x65]
mov rcx, qword [0x140107200]
mov r9d, 4
mov dword [rbp - 0x65], 0x100
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x14010349f], bl
je 0x140016802
call fcn.140014000
cmp byte [0x1401034a3], bl
je 0x14001680f
call fcn.140014d60
cmp byte [0x140107385], bl
je 0x14001681c
call fcn.140015720
cmp byte [0x140107384], bl
je 0x14001689c
mov eax, dword [0x140103498]
lea r8, [rbp - 0x55]
mov rdx, qword [0x1401073c8]
mov r9d, 4
mov rcx, qword [0x140107200]
add rdx, 0x210
mov dword [rbp - 0x5d], eax
lea rax, [rbp + 7]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x55], ebx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [0x140107580], bl
jne 0x14001689c
mov eax, dword [rbp - 0x5d]
cmp dword [rbp - 0x55], eax
je 0x14001689c
mov rdx, qword [0x1401073c8]
lea rax, [rbp + 0xf]
mov rcx, qword [0x140107200]
lea r8, [rbp - 0x5d]
add rdx, 0x210
mov qword [rsp + 0x20], rax
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140107388], bl
je 0x1400168c2
cmp byte [0x14010349c], bl
je 0x1400168bd
mov ecx, dword [0x1401032a0]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400168c2
call fcn.140013180
cmp byte [0x140107382], bl
je 0x14001692f
call fcn.1400045c0
movsxd rdx, dword [0x140103430]
lea rax, [rbp - 0x41]
add rdx, qword [0x1401075c8]
lea r8, [rbp - 0x51]
mov rcx, qword [0x140107200]
mov r9d, 8
mov qword [rbp - 0x51], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rdx, dword [0x1401033f4]
lea rax, [rbp - 0x49]
add rdx, qword [rbp - 0x51]
lea r8, [0x140107238]
mov rcx, qword [0x140107200]
mov r9d, 4
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x1401075b0]
lea rax, [rbp - 0x41]
mov rcx, qword [0x140107200]
lea r8, [rbp - 0x69]
add rdx, 0x58c
mov byte [rbp - 0x69], 1
mov r9d, 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14008a5e0
mov rbx, qword [rsp + 0x100]
add rsp, 0xf0
pop rbp
ret