Function at 0x1400021b0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
push rdi
sub rsp, 0xd8
mov rax, qword [0x140063010]
xor rax, rsp
mov qword [rsp + 0x50], rax
movaps xmmword [rsp + 0x70], xmm12
mov rbx, r9
movaps xmmword [rsp + 0x60], xmm13
movaps xmm12, xmm1
movaps xmm13, xmm2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor edi, edi
test ax, ax
je 0x140002423
mov rdx, qword [0x14008ca78]
lea r9d, [rdi + 4]
mov rcx, qword [0x14008caf8]
lea r8, [rsp + 0x40]
movaps xmmword [rsp + 0xc0], xmm6
add rdx, 0x28c
movaps xmmword [rsp + 0xb0], xmm8
movaps xmmword [rsp + 0xa0], xmm9
movaps xmmword [rsp + 0x90], xmm10
movaps xmmword [rsp + 0x80], xmm11
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x14008ca78]
lea r9d, [rdi + 4]
mov rcx, qword [0x14008caf8]
lea r8, [rsp + 0x48]
movss xmm9, dword [rsp + 0x40]
add rdx, 0x288
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movsd xmm1, qword [rbx + 0x40]
movss xmm3, dword [0x14008cb58]
movaps xmm0, xmm1
movss xmm2, dword [0x14008cb5c]
movaps xmm8, xmm3
movss xmm6, dword [0x14008cb60]
subss xmm8, xmm1
movss xmm1, dword [rbx + 0x40]
movaps xmm11, xmm2
subss xmm6, dword [rbx + 0x48]
shufps xmm0, xmm0, 0x55
subss xmm1, xmm3
subss xmm11, xmm0
movss xmm0, dword [rbx + 0x44]
subss xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
xorps xmm1, xmm1
mulss xmm11, xmm11
cvtss2sd xmm1, xmm0
mulss xmm8, xmm8
xorps xmm0, xmm0
mulsd xmm1, qword [0x14005ada0]
addss xmm11, xmm8
mulss xmm6, xmm6
movaps xmm8, xmmword [rsp + 0xb0]
cvtpd2ps xmm10, xmm1
addss xmm11, xmm6
movaps xmm6, xmmword [rsp + 0xc0]
subss xmm10, xmm9
movss xmm9, dword [rbx + 0x48]
subss xmm9, dword [0x14008cb60]
ucomiss xmm0, xmm11
ja 0x14000232c
xorps xmm0, xmm0
sqrtss xmm0, xmm11
jmp 0x140002335
movaps xmm0, xmm11
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
divss xmm9, xmm0
movaps xmm0, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_asinf
movss xmm3, dword [0x14005b0a0]
xorps xmm1, xmm1
movaps xmm11, xmmword [rsp + 0x80]
movaps xmm9, xmmword [rsp + 0xa0]
cvtss2sd xmm1, xmm0
movaps xmm0, xmm10
mulsd xmm1, qword [0x14005ada0]
andps xmm0, xmm3
comiss xmm0, dword [0x14005adf4]
cvtpd2ps xmm2, xmm1
movss xmm1, dword [0x14005ae08]
subss xmm2, dword [rsp + 0x48]
jb 0x140002397
movaps xmm10, xmm1
subss xmm10, xmm0
movaps xmm0, xmm2
andps xmm0, xmm3
comiss xmm0, dword [0x14005adfc]
jb 0x1400023ad
movaps xmm2, xmm1
subss xmm2, xmm0
mov rdx, qword [0x14008ca78]
lea r8, [rsp + 0x40]
mov rcx, qword [0x14008caf8]
add rdx, 0x420
divss xmm2, xmm12
mov r9d, 4
mov qword [rsp + 0x20], rdi
movss dword [rsp + 0x40], xmm2
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x14008ca78]
lea r8, [rsp + 0x48]
mov rcx, qword [0x14008caf8]
add rdx, 0x424
divss xmm10, xmm13
mov r9d, 4
mov qword [rsp + 0x20], rdi
movss dword [rsp + 0x48], xmm10
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm10, xmmword [rsp + 0x90]
mov rdx, qword [rbx + 0x28]
movaps xmm13, xmmword [rsp + 0x60]
movaps xmm12, xmmword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140002466
mov rcx, qword [rbx + 0x10]
inc rdx
cmp rdx, 0x1000
jb 0x140002461
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000248d
mov rcx, r8
call fcn.140050770
mov qword [rbx + 0x20], rdi
mov qword [rbx + 0x28], 0xf
mov byte [rbx + 0x10], dil
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140050750
add rsp, 0xd8
pop rdi
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3