Function at 0x140063670
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4ac0]
mov eax, 0x4bc0
call fcn.1400831f0
sub rsp, rax
movaps xmmword [rsp + 0x4bb0], xmm6
movaps xmmword [rsp + 0x4ba0], xmm7
movaps xmmword [rsp + 0x4b90], xmm8
movaps xmmword [rsp + 0x4b80], xmm9
movaps xmmword [rsp + 0x4b70], xmm10
movaps xmmword [rsp + 0x4b60], xmm11
movaps xmmword [rsp + 0x4b50], xmm12
movaps xmmword [rsp + 0x4b40], xmm13
mov rax, qword [0x1400bb040]
xor rax, rsp
mov qword [rbp + 0x4a38], rax
movsd xmm8, qword [0x1400add98]
mov dword [0x1400bb0e0], 0xffffffff
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140063c21
mov r10, qword [0x1400bc258]
mov rcx, qword [0x1400bc268]
mov edx, dword [rcx]
xor ebx, ebx
test edx, edx
je 0x140063761
sub edx, 1
je 0x14006375a
sub edx, 1
je 0x140063753
sub edx, 1
je 0x14006374c
cmp edx, 1
jne 0x140063761
mov ecx, 0x254d448
jmp 0x140063764
mov ecx, 0x2567db0
jmp 0x140063764
mov ecx, 0x25667e8
jmp 0x140063764
mov ecx, 0x247f840
jmp 0x140063764
mov rcx, rbx
mov rdx, qword [r10 + 0x10]
add rdx, rcx
mov qword [rbp + 0x4a20], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x4a20]
mov rcx, qword [r10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov qword [rbp + 0x4a28], rbx
mov rdx, qword [rbp + 0x4a20]
add rdx, 8
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x4a28]
mov rcx, qword [0x1400bc258]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x4a28]
lea rcx, [rbp + 0x2e0]
call fcn.140061bc0
nop
mov r10, qword [0x1400bc258]
mov rcx, qword [0x1400bc268]
mov edx, dword [rcx]
test edx, edx
je 0x140063819
sub edx, 1
je 0x140063812
sub edx, 1
je 0x14006380b
sub edx, 1
je 0x140063804
cmp edx, 1
jne 0x140063819
mov ecx, 0x1f5b820
jmp 0x14006381c
mov ecx, 0x1f77ef0
jmp 0x14006381c
mov ecx, 0x1f2e7a8
jmp 0x14006381c
mov ecx, 0x1efd4c8
jmp 0x14006381c
mov rcx, rbx
mov rdx, qword [r10 + 0x10]
add rdx, rcx
mov qword [rbp + 0x4a20], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x4a20]
mov rcx, qword [r10]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x4a20]
lea rcx, [rbp - 0x70]
call fcn.140061910
nop
mov r12, qword [rbp + 0x90]
mov qword [rsp + 0x30], r12
test r12, r12
je 0x140063c21
mov r15d, ebx
mov edi, dword [rbp + 0x98]
test edi, edi
jle 0x140063c21
mov r14d, 0xc
movss xmm11, dword [rbp + 0x378]
movss xmm12, dword [rbp + 0x374]
movss xmm13, dword [rbp + 0x370]
movss xmm9, dword [0x1400adcd4]
movsd xmm10, qword [0x1400add58]
nop
mov qword [rbp + 0x4a28], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x4a28]
mov rdx, r12
mov rcx, qword [0x1400bc258]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [rbp + 0x4a28]
lea rcx, [rbp + 0x2680]
call fcn.140061bc0
nop
mov r13, qword [rbp + 0x4a18]
test r13, r13
jne 0x140063901
jmp 0x140063c0c
cmp r13, qword [rbp + 0x2678]
jne 0x14006390f
jmp 0x140063c0c
lea rdx, [r13 + 0x10c8]
mov qword [rbp + 0x4a30], rbx
mov qword [rsp + 0x20], rbx
mov r9d, 8
lea r8, [rbp + 0x4a30]
mov rcx, qword [0x1400bc258]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rbp + 0x4a28], ebx
mov rdx, qword [rbp + 0x4a30]
add rdx, 0x88
mov qword [rsp + 0x20], rbx
mov r9d, 4
lea r8, [rbp + 0x4a28]
mov rcx, qword [0x1400bc258]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r8d, dword [rbp + 0x4a28]
test r8d, r8d
jne 0x140063986
jmp 0x140063c0c
mov rdx, qword [0x1400bc228]
mov rcx, qword [0x1400bc220]
call fcn.140081f70
cmp rax, qword [0x1400bc228]
je 0x1400639a7
jmp 0x140063c0c
movss xmm1, dword [rbp + 0x2714]
subss xmm1, xmm12
movss xmm2, dword [rbp + 0x2710]
subss xmm2, xmm13
movss xmm0, dword [rbp + 0x2718]
subss xmm0, xmm11
mulss xmm2, xmm2
mulss xmm1, xmm1
addss xmm2, xmm1
mulss xmm0, xmm0
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400639f3
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1400639fb
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
comiss xmm0, dword [0x1400bb0c8]
jb 0x140063a09
jmp 0x140063c0c
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov eax, r14d
mov ecx, dword [rax + rsi]
cmp dword [0x1400bc4b4], ecx
jle 0x140063acb
lea rcx, [0x1400bc4b4]
call fcn.140082450
cmp dword [0x1400bc4b4], 0xffffffff
jne 0x140063acb
movdqa xmm0, xmmword [0x1400adfe0]
movdqu xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x1400adfc0]
movdqu xmmword [rsp + 0x70], xmm1
mov dword [rbp - 0x80], 1
xorps xmm0, xmm0
movdqu xmmword [0x1400bc4f8], xmm0
mov qword [0x1400bc508], rbx
mov ecx, 0x24
call fcn.140082784
mov qword [0x1400bc4f8], rax
mov qword [0x1400bc500], rax
lea rbx, [rax + 0x24]
mov qword [0x1400bc508], rbx
mov r8d, 0x24
lea rdx, [rsp + 0x60]
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
mov qword [0x1400bc500], rbx
lea rcx, [0x140084370]
call fcn.140082308
nop
lea rcx, [0x1400bc4b4]
call fcn.1400823e4
mov r14, qword [0x1400bc500]
mov rbx, qword [0x1400bc4f8]
cmp rbx, r14
je 0x140063c04
mov r12d, 8
nop dword [rax + rax]
mov edi, dword [rbx]
mov r8d, edi
mov rdx, r13
lea rcx, [rsp + 0x38]
call fcn.1400617e0
mov qword [rbp + 0x4a20], 0
movsd xmm0, qword [rsp + 0x38]
movsd qword [rsp + 0x50], xmm0
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x58], eax
lea rdx, [rbp + 0x4a20]
lea rcx, [rsp + 0x50]
call fcn.140061220
test al, al
je 0x140063bec
cmp byte [r12 + rsi], 0
jne 0x140063b46
call fcn.140082398
mov eax, 0x10
mov rcx, qword [rax + rsi]
mov rax, qword [rcx + 0x4c38]
mov rcx, qword [rax]
movss xmm7, dword [rcx + 0x14]
mulss xmm7, xmm9
addss xmm7, dword [rcx + 0xc]
movss xmm0, dword [rcx + 0x10]
mulss xmm0, xmm9
addss xmm0, dword [rcx + 8]
subss xmm0, dword [rbp + 0x4a20]
cvtps2pd xmm0, xmm0
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm6, xmm0
subss xmm7, dword [rbp + 0x4a24]
cvtps2pd xmm0, xmm7
movaps xmm1, xmm10
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm1, xmm0
addsd xmm1, xmm6
xorps xmm0, xmm0
ucomisd xmm0, xmm1
ja 0x140063bbb
xorps xmm0, xmm0
sqrtsd xmm0, xmm1
jmp 0x140063bc3
movaps xmm0, xmm1
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
movss xmm1, dword [0x1400bb0b0]
cvtps2pd xmm1, xmm1
comisd xmm0, xmm1
jae 0x140063bec
comisd xmm8, xmm0
jb 0x140063bec
movaps xmm8, xmm0
mov dword [0x1400bb0e0], r15d
mov dword [0x1400bc1f8], edi
add rbx, 4
cmp rbx, r14
jne 0x140063af0
mov r12, qword [rsp + 0x30]
mov edi, dword [rbp + 0x98]
xor ebx, ebx
mov r14d, 0xc
inc r15d
add r12, 0x10
mov qword [rsp + 0x30], r12
cmp r15d, edi
jl 0x1400638b0
mov rcx, qword [rbp + 0x4a38]
xor rcx, rsp
call fcn.1400820c0
lea r11, [rsp + 0x4bc0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret