Function at 0x14006b310
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push r13
push r14
push r15
lea rbp, [rax - 0x408]
sub rsp, 0x4e8
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
mov rax, qword [0x1401200c0]
xor rax, rsp
mov qword [rbp + 0x350], rax
xor r14d, r14d
movzx r13d, r8b
mov r15, rdx
mov qword [rdx], r14
mov dword [rdx + 8], r14d
lea ecx, [r14 + 1]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
movd xmm13, eax
cvtdq2ps xmm13, xmm13
mulss xmm13, dword [0x14010a0a0]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
movss xmm9, dword [0x14010a234]
xorps xmm8, xmm8
movd xmm12, eax
mov rax, qword [0x14032fdf8]
cvtdq2ps xmm12, xmm12
movss xmm10, dword [rax + 0x28]
ucomiss xmm10, xmm8
mulss xmm12, dword [0x14010a0a0]
jp 0x14006b3c9
jne 0x14006b3c9
movaps xmm10, xmm9
movsxd rax, dword [0x14032e498]
mov qword [rsp + 0x510], rbx
mov qword [rsp + 0x528], rdi
movaps xmmword [rsp + 0x4c0], xmm7
cmp eax, 0xffffffff
jne 0x14006ba23
mov rcx, qword [0x14032fe18]
movabs rax, 0x7878787878787879
sub rcx, qword [0x14032fe10]
imul rcx
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14006bde5
mov qword [rsp + 0x520], rsi
mov rbx, r14
mov qword [rsp + 0x4e0], r12
mov rdi, r14
movaps xmmword [rsp + 0x480], xmm11
mov r12d, r14d
movss xmm11, dword [0x14010a118]
nop dword [rax + rax]
mov rax, qword [0x14032fe10]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x2c0]
movups xmm0, xmmword [rdi + rax]
movaps xmmword [rbp + 0x2c0], xmm0
movups xmm1, xmmword [rdi + rax + 0x10]
movaps xmmword [rbp + 0x2d0], xmm1
movups xmm0, xmmword [rdi + rax + 0x20]
movaps xmmword [rbp + 0x2e0], xmm0
movups xmm1, xmmword [rdi + rax + 0x30]
movaps xmmword [rbp + 0x2f0], xmm1
movups xmm0, xmmword [rdi + rax + 0x40]
movaps xmmword [rbp + 0x300], xmm0
movups xmm1, xmmword [rdi + rax + 0x50]
movaps xmmword [rbp + 0x310], xmm1
movups xmm0, xmmword [rdi + rax + 0x60]
movaps xmmword [rbp + 0x320], xmm0
movups xmm1, xmmword [rdi + rax + 0x70]
movaps xmmword [rbp + 0x330], xmm1
movsd xmm0, qword [rdi + rax + 0x80]
movsd qword [rbp + 0x340], xmm0
call fcn.140003f80
mov rcx, qword [0x14032fe10]
movabs rax, 0x2e000000000013b
imul rsi, rbx, 0x88
add rcx, rsi
cmp qword [0x14032e740], rax
jne 0x14006b5ba
lea rdx, [rbp - 0x78]
call fcn.140003f80
movss xmm0, dword [rax + 4]
comiss xmm0, xmm8
jbe 0x14006b5b0
mov rcx, qword [0x14032fe10]
mov rax, qword [0x14032e6e0]
cmp qword [rdi + rcx], rax
je 0x14006b5b0
add rcx, rsi
call fcn.1400040c0
test al, al
je 0x14006b5b0
mov rax, qword [0x14032fe10]
lea r8, [rbp + 0x282]
mov rcx, qword [0x14032fe00]
mov r9d, 1
mov qword [rsp + 0x20], r14
mov rdx, qword [rdi + rax + 0x18]
mov rcx, qword [rcx + 0x20]
add rdx, 0x5b
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14032fe00]
lea r8, [rbp + 0x283]
mov rdx, qword [0x14032e6f8]
mov r9d, 1
movzx ebx, byte [rbp + 0x282]
add rdx, 0x5b
mov qword [rsp + 0x20], r14
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, 1
cmp bl, byte [rbp + 0x283]
je 0x14006b5b3
mov eax, r14d
test eax, eax
jmp 0x14006b6a4
lea rdx, [rbp - 0x70]
call fcn.140003f80
movss xmm0, dword [rax + 4]
comiss xmm0, xmm8
jbe 0x14006b9bb
mov rdx, qword [0x14032fe10]
mov rax, qword [0x14032e6e0]
cmp qword [rdi + rdx], rax
je 0x14006b9bb
mov rcx, qword [0x14032fe00]
lea r8, [rbp + 0x284]
mov rdx, qword [rdi + rdx + 0x18]
mov r9d, 1
add rdx, 0x5b
mov qword [rsp + 0x20], r14
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x284], 0x28
je 0x14006b693
mov rax, qword [0x14032fe10]
lea r8, [rbp + 0x281]
mov rcx, qword [0x14032fe00]
mov r9d, 1
mov qword [rsp + 0x20], r14
mov rdx, qword [rdi + rax + 0x18]
mov rcx, qword [rcx + 0x20]
add rdx, 0x5b
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14032fe00]
lea r8, [rbp + 0x280]
mov rdx, qword [0x14032e6f8]
mov r9d, 1
movzx ebx, byte [rbp + 0x281]
add rdx, 0x5b
mov qword [rsp + 0x20], r14
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp bl, byte [rbp + 0x280]
je 0x14006b9bb
mov rcx, qword [0x14032fe10]
add rcx, rsi
call fcn.1400040c0
test al, al
je 0x14006b9bb
mov rcx, qword [0x14032fdf8]
mov ecx, dword [rcx + 0x4c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14006b70a
mov rcx, qword [0x14032fe10]
lea rdx, [rbp - 0x68]
add rcx, rsi
mov r8d, reloc.WS2_32.dll_recvfrom
call fcn.140004330
mov rcx, qword [0x14032fe10]
lea rdx, [rbp - 0x5c]
add rcx, rsi
mov r8d, reloc.WS2_32.dll_recvfrom
movsd xmm0, qword [rax]
mov r14d, dword [rax + 8]
movsd qword [rbp + 0x288], xmm0
mov dword [rbp + 0x290], r14d
call fcn.140004330
jmp 0x14006b755
mov rax, qword [0x14032fdf8]
lea rdx, [rbp - 0x50]
mov dword [rax + 0x54], 4
mov rcx, qword [0x14032fe10]
add rcx, rsi
call fcn.14006afb0
mov rcx, qword [0x14032fe10]
lea rdx, [rbp - 0x44]
add rcx, rsi
movsd xmm0, qword [rax]
mov r14d, dword [rax + 8]
movsd qword [rbp + 0x288], xmm0
mov dword [rbp + 0x290], r14d
call fcn.14006afb0
movsd xmm6, qword [rax]
lea rdx, [rbp + 0x80]
mov ebx, dword [rax + 8]
lea rcx, [rbp + 0x2c0]
movsd qword [rbp + 0x2a8], xmm6
mov dword [rbp + 0x2b0], ebx
call fcn.1400047f0
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x2c0]
mov r8d, dword [rax]
call fcn.140004330
lea rcx, [rbp + 0x80]
call fcn.140003dd0
lea rdx, [rbp - 0x28]
mov rcx, rax
call fcn.140003360
lea rcx, [rbp + 0x200]
call fcn.140003dd0
lea rdx, [rbp - 0x1c]
mov rcx, rax
call fcn.140003360
lea rcx, [rbp + 0x100]
call fcn.140003dd0
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.140003360
mov rcx, qword [0x14032fe10]
lea r8, [rbp + 0x298]
mov r9d, ntohs
mov qword [rsp + 0x20], 0
mov rdx, qword [rdi + rcx + 0x20]
mov rcx, qword [0x14032fe00]
add rdx, 0x50
mov qword [rbp + 0x298], 0
mov dword [rbp + 0x2a0], 0
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test r13b, r13b
je 0x14006b904
lea rcx, [rbp + 0x100]
call fcn.140003dd0
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140003360
movsd xmm0, qword [rbp + 0x298]
movss xmm2, dword [rbp + 0x288]
movss xmm3, dword [rbp + 0x28c]
subss xmm3, dword [rax + 4]
subss xmm2, dword [rax]
movd xmm1, r14d
subss xmm1, dword [rax + 8]
mov eax, dword [rbp + 0x2a0]
mulss xmm3, xmm3
mov dword [rsp + 0x68], eax
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm3, xmm2
movsd qword [rsp + 0x60], xmm0
xorps xmm0, xmm0
addss xmm3, xmm1
ucomiss xmm0, xmm3
ja 0x14006b8a6
xorps xmm0, xmm0
sqrtss xmm0, xmm3
jmp 0x14006b8ae
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov rax, qword [0x14032fdf8]
lea r8, [rsp + 0x60]
movaps xmm3, xmm0
lea rdx, [rbp + 0x288]
movss xmm1, dword [rax + 0x40]
movss dword [rsp + 0x20], xmm1
call fcn.14006be50
lea rcx, [rbp + 0x180]
call fcn.140003dd0
movsd xmm0, qword [rbp + 0x288]
lea r8, [rsp + 0x70]
mov ecx, dword [rbp + 0x290]
lea rdx, [rsp + 0x54]
movsd qword [rsp + 0x70], xmm0
mov dword [rsp + 0x78], ecx
jmp 0x14006b921
lea rcx, [rbp]
call fcn.140003dd0
lea r8, [rsp + 0x30]
movsd qword [rsp + 0x30], xmm6
lea rdx, [rsp + 0x4c]
mov dword [rsp + 0x38], ebx
mov rcx, rax
call fcn.140003740
movaps xmm1, xmm11
movss xmm0, dword [rax]
movss xmm6, dword [rax + 4]
subss xmm0, xmm12
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
subss xmm6, xmm13
movaps xmm7, xmm0
movaps xmm1, xmm11
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm7, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm7
ja 0x14006b969
xorps xmm1, xmm1
sqrtss xmm1, xmm7
jmp 0x14006b974
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm1, xmm0
comiss xmm9, xmm1
jb 0x14006b9b1
comiss xmm10, xmm1
jb 0x14006b9b1
test r13b, r13b
lea rax, [rbp + 0x288]
lea rcx, [rbp + 0x2a8]
movaps xmm9, xmm1
cmove rax, rcx
xor r14d, r14d
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [r15], xmm0
mov dword [r15 + 8], eax
mov eax, r12d
jmp 0x14006b9c0
mov eax, 0xffffffff
xor r14d, r14d
jmp 0x14006b9c0
mov eax, 0xffffffff
mov rcx, qword [0x14032fe18]
inc r12d
sub rcx, qword [0x14032fe10]
add rdi, 0x88
mov dword [0x14032e498], eax
movabs rax, 0x7878787878787879
imul rcx
movsxd rbx, r12d
sar rdx, 6
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
cmp rbx, rdx
jb 0x14006b450
movaps xmm11, xmmword [rsp + 0x480]
mov r12, qword [rsp + 0x4e0]
mov rsi, qword [rsp + 0x520]
jmp 0x14006bde5
imul rcx, rax, 0x88
lea rdx, [rsp + 0x4c]
add rcx, qword [0x14032fe10]
call fcn.140003f80
movss xmm0, dword [rax + 4]
comiss xmm0, xmm8
jbe 0x14006bddb
movsxd rax, dword [0x14032e498]
lea r8, [rbp + 0x280]
imul rcx, rax, 0x88
mov rax, qword [0x14032fe10]
mov r9d, 1
mov qword [rsp + 0x20], r14
mov rdx, qword [rcx + rax + 0x18]
mov rcx, qword [0x14032fe00]
add rdx, 0x5b
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x280], 0x28
je 0x14006bb1a
mov rcx, qword [0x14032fe00]
lea r8, [rbp + 0x280]
mov rdx, qword [0x14032e6f8]
mov r9d, 1
add rdx, 0x5b
mov qword [rsp + 0x20], r14
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsxd rax, dword [0x14032e498]
lea r8, [rbp + 0x281]
movzx ebx, byte [rbp + 0x280]
mov r9d, 1
imul rcx, rax, 0x88
mov rax, qword [0x14032fe10]
mov qword [rsp + 0x20], r14
mov rdx, qword [rcx + rax + 0x18]
mov rcx, qword [0x14032fe00]
add rdx, 0x5b
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp byte [rbp + 0x281], bl
je 0x14006bddb
movsxd rax, dword [0x14032e498]
imul rcx, rax, 0x88
add rcx, qword [0x14032fe10]
call fcn.1400040c0
test al, al
je 0x14006bddb
mov rcx, qword [0x14032fdf8]
mov ecx, dword [rcx + 0x4c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
lea rdx, [rsp + 0x40]
movsxd rax, dword [0x14032e498]
je 0x14006bbb2
imul rcx, rax, 0x88
mov r8d, reloc.WS2_32.dll_recvfrom
add rcx, qword [0x14032fe10]
call fcn.140004330
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, [rsp + 0x40]
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
movsxd rax, dword [0x14032e498]
imul rcx, rax, 0x88
movsd qword [rbp + 0x288], xmm0
mov dword [rbp + 0x290], ebx
add rcx, qword [0x14032fe10]
call fcn.140004330
jmp 0x14006bbf9
imul rcx, rax, 0x88
add rcx, qword [0x14032fe10]
call fcn.14006afb0
lea rdx, [rsp + 0x40]
movsd xmm0, qword [rax]
mov ebx, dword [rax + 8]
movsxd rax, dword [0x14032e498]
imul rcx, rax, 0x88
movsd qword [rbp + 0x288], xmm0
mov dword [rbp + 0x290], ebx
add rcx, qword [0x14032fe10]
call fcn.14006afb0
mov edi, dword [rax + 8]
lea r8, [rbp + 0x298]
movsd xmm6, qword [rax]
mov r9d, ntohs
movsxd rax, dword [0x14032e498]
imul rcx, rax, 0x88
mov rax, qword [0x14032fe10]
mov qword [rsp + 0x20], r14
mov rdx, qword [rcx + rax + 0x20]
mov rcx, qword [0x14032fe00]
add rdx, 0x50
mov qword [rbp + 0x298], r14
mov dword [rbp + 0x2a0], r14d
mov rcx, qword [rcx + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test r13b, r13b
je 0x14006bd23
lea rcx, [rbp]
call fcn.140003dd0
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.140003360
movsd xmm0, qword [rbp + 0x298]
movss xmm2, dword [rbp + 0x288]
movss xmm3, dword [rbp + 0x28c]
subss xmm3, dword [rax + 4]
subss xmm2, dword [rax]
movd xmm1, ebx
subss xmm1, dword [rax + 8]
mov eax, dword [rbp + 0x2a0]
mulss xmm3, xmm3
mov dword [rsp + 0x38], eax
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm3, xmm2
movsd qword [rsp + 0x30], xmm0
xorps xmm0, xmm0
addss xmm3, xmm1
ucomiss xmm0, xmm3
ja 0x14006bccd
xorps xmm0, xmm0
sqrtss xmm0, xmm3
jmp 0x14006bcd5
movaps xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov rax, qword [0x14032fdf8]
lea r8, [rsp + 0x30]
movaps xmm3, xmm0
lea rdx, [rbp + 0x288]
movss xmm1, dword [rax + 0x40]
movss dword [rsp + 0x20], xmm1
call fcn.14006be50
lea rcx, [rbp]
call fcn.140003dd0
movsd xmm0, qword [rbp + 0x288]
lea rdx, [rsp + 0x4c]
mov ecx, dword [rbp + 0x290]
movsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], ecx
jmp 0x14006bd3e
lea rcx, [rbp + 0x180]
call fcn.140003dd0
lea rdx, [rsp + 0x54]
movsd qword [rsp + 0x30], xmm6
mov dword [rsp + 0x38], edi
lea r8, [rsp + 0x30]
mov rcx, rax
call fcn.140003740
movss xmm6, dword [0x14010a118]
movaps xmm1, xmm6
movss xmm0, dword [rax + 4]
movss xmm7, dword [rax]
subss xmm0, xmm13
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
subss xmm7, xmm12
movaps xmm8, xmm0
movaps xmm1, xmm6
movaps xmm0, xmm7
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm8, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm8
ja 0x14006bd95
xorps xmm0, xmm0
sqrtss xmm0, xmm8
jmp 0x14006bd9e
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm9, xmm0
jb 0x14006bddb
comiss xmm10, xmm0
jb 0x14006bddb
movsxd rax, dword [0x14032e498]
lea rdx, [rsp + 0x40]
imul rcx, rax, 0x88
add rcx, qword [0x14032fe10]
call fcn.14006afb0
movsd xmm0, qword [rax]
movsd qword [r15], xmm0
mov eax, dword [rax + 8]
mov dword [r15 + 8], eax
jmp 0x14006bde5
mov dword [0x14032e498], 0xffffffff
movaps xmm7, xmmword [rsp + 0x4c0]
mov rax, r15
mov rdi, qword [rsp + 0x528]
mov rbx, qword [rsp + 0x510]
mov rcx, qword [rbp + 0x350]
xor rcx, rsp
call fcn.1400ced40
lea r11, [rsp + 0x4e8]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
movaps xmm10, xmmword [r11 - 0x58]
movaps xmm12, xmmword [r11 - 0x78]
movaps xmm13, xmmword [r11 - 0x88]
mov rsp, r11
pop r15
pop r14
pop r13
pop rbp
ret