Function at 0x140001530
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rsi
push rbp
lea rbp, [r11 - 0x138]
sub rsp, 0x230
mov rax, qword [0x140061040]
xor rax, rsp
mov qword [rbp + 0x80], rax
cmp byte [0x1400610c0], 0
mov rsi, qword [0x1400618b0]
je 0x1400019f8
mov qword [r11 + 0x18], r14
xor r14d, r14d
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movaps xmmword [r11 - 0x38], xmm8
movss xmm8, dword [0x1400592f8]
movaps xmmword [r11 - 0x48], xmm9
movss xmm9, dword [0x140059380]
movaps xmmword [r11 - 0x58], xmm10
movss xmm10, dword [0x140059378]
movaps xmmword [r11 - 0x68], xmm11
movss xmm11, dword [0x1400592e4]
movaps xmmword [r11 - 0x78], xmm12
movss xmm12, dword [0x140059384]
movaps xmmword [r11 - 0x88], xmm13
movss xmm13, dword [0x140059308]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rdi
movaps xmmword [r11 - 0x98], xmm14
movaps xmmword [r11 - 0xa8], xmm15
nop dword [rax + rax]
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.140002950
mov ecx, dword [0x140061128]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140001626
mov ecx, dword [0x14006112c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140001970
movsd xmm3, qword [rbp + 0x64]
xorps xmm0, xmm0
movss xmm14, dword [rbp + 0x6c]
xorps xmm2, xmm2
xorps xmm6, xmm6
mov dword [rsp + 0x38], r14d
unpcklps xmm0, xmm6
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x38]
movlhps xmm2, xmm0
movaps xmm0, xmm14
movlhps xmm3, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x140001970
mov rdx, qword [0x140061180]
lea r8, [rbp - 0x78]
mov rcx, qword [0x140061178]
add rdx, 0x20025b8
mov r9d, 8
mov qword [rbp - 0x78], r14
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x78]
lea r8, [rsp + 0x78]
mov rcx, qword [0x140061178]
mov r9d, 0xc
mov qword [rsp + 0x78], r14
mov dword [rbp - 0x80], r14d
lea rdx, [rbx + 0x3d0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x140061178]
lea rdx, [rbx + 0x60]
mov r9d, 0xc
mov qword [rsp + 0x68], r14
lea r8, [rsp + 0x68]
mov dword [rsp + 0x70], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x70]
movss xmm15, dword [rsp + 0x68]
subss xmm0, xmm14
movss xmm7, dword [rbp + 0x64]
movaps xmm1, xmm15
movss xmm2, dword [rsp + 0x6c]
subss xmm1, xmm7
movss xmm6, dword [rbp + 0x68]
subss xmm2, xmm6
mulss xmm0, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x140001745
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x14000174d
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
subss xmm14, dword [rsp + 0x70]
subss xmm6, dword [rsp + 0x6c]
subss xmm7, xmm15
divss xmm14, xmm0
divss xmm7, xmm0
movss dword [rbp - 0x68], xmm14
comiss xmm7, xmm11
divss xmm6, xmm0
jbe 0x14000178b
nop dword [rax + rax]
addss xmm7, xmm9
comiss xmm7, xmm11
ja 0x140001780
comiss xmm10, xmm7
jbe 0x14000179c
addss xmm7, xmm8
comiss xmm10, xmm7
ja 0x140001791
comiss xmm6, xmm8
jbe 0x1400017ad
addss xmm6, xmm12
comiss xmm6, xmm8
ja 0x1400017a2
comiss xmm9, xmm6
jbe 0x1400017be
addss xmm6, xmm13
comiss xmm9, xmm6
ja 0x1400017b3
movsd xmm3, qword [rsp + 0x78]
xorps xmm2, xmm2
movaps xmm0, xmm7
unpcklps xmm0, xmm6
movsd xmm2, xmm0
movss xmm0, dword [rbp - 0x80]
movlhps xmm3, xmm0
movss xmm0, dword [rbp - 0x68]
movlhps xmm2, xmm0
subps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x58], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x60], xmm0
jbe 0x140001811
nop dword [rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x58], xmm2
ja 0x140001800
comiss xmm10, xmm2
jbe 0x140001831
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x58], xmm2
ja 0x140001820
movss xmm0, dword [rsp + 0x5c]
comiss xmm0, xmm8
jbe 0x140001851
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x140001840
movss dword [rsp + 0x5c], xmm0
comiss xmm9, xmm0
jbe 0x140001871
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x140001860
movss dword [rsp + 0x5c], xmm0
movsd xmm2, qword [rsp + 0x58]
movss xmm0, dword [rsp + 0x60]
movlhps xmm2, xmm0
addps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x48], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x50], xmm0
jbe 0x1400018b1
nop dword [rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x48], xmm2
ja 0x1400018a0
comiss xmm10, xmm2
jbe 0x1400018d1
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x48], xmm2
ja 0x1400018c0
movss xmm0, dword [rsp + 0x4c]
comiss xmm0, xmm8
jbe 0x1400018f1
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x1400018e0
movss dword [rsp + 0x4c], xmm0
comiss xmm9, xmm0
jbe 0x140001911
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x140001900
movss dword [rsp + 0x4c], xmm0
movsd xmm4, qword [rsp + 0x48]
xorps xmm0, xmm0
xorps xmm3, xmm3
mov dword [rsp + 0x44], r14d
xorps xmm1, xmm1
unpcklps xmm0, xmm1
movsd xmm3, xmm0
movss xmm0, dword [rsp + 0x44]
movlhps xmm3, xmm0
movss xmm0, dword [rsp + 0x50]
movlhps xmm4, xmm0
cmpeqps xmm3, xmm4
movmskps eax, xmm3
and eax, 7
cmp al, 7
je 0x140001970
mov rcx, qword [0x140061178]
lea r8, [rsp + 0x48]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x3d0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x1400610c0], r14b
jne 0x1400015f0
movaps xmm15, xmmword [rsp + 0x190]
movaps xmm14, xmmword [rsp + 0x1a0]
movaps xmm13, xmmword [rsp + 0x1b0]
movaps xmm12, xmmword [rsp + 0x1c0]
movaps xmm11, xmmword [rsp + 0x1d0]
movaps xmm10, xmmword [rsp + 0x1e0]
movaps xmm9, xmmword [rsp + 0x1f0]
movaps xmm8, xmmword [rsp + 0x200]
movaps xmm7, xmmword [rsp + 0x210]
movaps xmm6, xmmword [rsp + 0x220]
mov r14, qword [rsp + 0x250]
mov rdi, qword [rsp + 0x248]
mov rbx, qword [rsp + 0x240]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.14004f7b0
mov rsi, qword [rsp + 0x258]
add rsp, 0x230
pop rbp
ret