Function at 0x1400010a0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x140050040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rdx, qword [0x140062d80]
lea rax, [rbp + 7]
mov rcx, qword [0x140062d88]
lea r8, [rbp - 9]
xor ebx, ebx
mov dword [rbp - 9], 0xc2b3fff3
add rdx, 0x2454
mov qword [rbp + 7], rbx
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062d80]
lea rax, [rbp + 0xf]
mov rcx, qword [0x140062d88]
lea r9d, [rbx + 4]
add rdx, 0x2458
mov dword [rbp - 1], 0x42b3fff3
lea r8, [rbp - 1]
mov qword [rbp + 0xf], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062d80]
lea rax, [rbp + 7]
mov rcx, qword [0x140062d88]
lea r9d, [rbx + 4]
add rdx, 0x245c
mov dword [rbp - 9], ebx
lea r8, [rbp - 9]
mov qword [rbp + 7], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062d80]
lea rax, [rbp + 0xf]
mov rcx, qword [0x140062d88]
lea r9d, [rbx + 4]
add rdx, 0x2460
mov dword [rbp - 1], 0x43b3fffd
lea r8, [rbp - 1]
mov qword [rbp + 0xf], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea ecx, [rbx + 2]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001365
cmp byte [0x1400500b4], bl
je 0x140001365
movss xmm0, dword [0x140062694]
ucomiss xmm0, dword [0x140049554]
je 0x140001365
movss xmm4, dword [0x140062690]
subss xmm4, dword [0x1400626c8]
movaps xmmword [rsp + 0x80], xmm7
movaps xmmword [rsp + 0x70], xmm8
movss xmm8, dword [0x14006268c]
subss xmm8, dword [0x1400626c4]
movaps xmm2, xmm4
movaps xmmword [rsp + 0x60], xmm9
movss xmm9, dword [0x140062688]
subss xmm9, dword [0x1400626c0]
mulss xmm2, xmm4
movaps xmm3, xmm8
mulss xmm3, xmm8
movaps xmm0, xmm9
mulss xmm0, xmm9
addss xmm3, xmm0
addss xmm3, xmm2
xorps xmm2, xmm2
sqrtss xmm2, xmm3
divss xmm4, xmm2
movaps xmm0, xmm4
call sub.api_ms_win_crt_math_l1_1_0.dll_acosf
mulss xmm0, dword [0x140049504]
movaps xmm1, xmm9
movss xmm7, dword [0x140049514]
subss xmm7, xmm0
movaps xmm0, xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_atan2f
mov rdx, qword [0x140062d80]
lea rax, [rbp + 0xf]
mov rcx, qword [0x140062d88]
lea r9d, [rbx + 4]
movaps xmm8, xmm0
movss dword [rbp - 1], xmm7
mulss xmm8, dword [0x140049504]
lea r8, [rbp - 1]
add rdx, 0x2454
mov qword [rbp + 0xf], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062d80]
lea rax, [rbp + 7]
mov rcx, qword [0x140062d88]
lea r9d, [rbx + 4]
add rdx, 0x2458
movss dword [rbp - 9], xmm7
lea r8, [rbp - 9]
mov qword [rbp + 7], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062d80]
lea rax, [rbp + 0xf]
mov rcx, qword [0x140062d88]
lea r9d, [rbx + 4]
add rdx, 0x245c
movss dword [rbp - 1], xmm8
lea r8, [rbp - 1]
mov qword [rbp + 0xf], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062d80]
lea rax, [rbp + 7]
mov rcx, qword [0x140062d88]
lea r9d, [rbx + 4]
add rdx, 0x2460
movss dword [rbp - 9], xmm8
lea r8, [rbp - 9]
mov qword [rbp + 7], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm9, xmmword [rsp + 0x60]
mov al, 1
movaps xmm8, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x80]
jmp 0x140001367
xor al, al
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14003fa00
mov rbx, qword [rsp + 0xa0]
add rsp, 0x90
pop rbp
ret