Function at 0x14000aa80
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
movaps xmmword [rax - 0x28], xmm6
or esi, 0xffffffff
movaps xmmword [rax - 0x38], xmm7
xor r15d, r15d
movaps xmmword [rax - 0x48], xmm8
mov r14, rcx
movaps xmmword [rax - 0x58], xmm9
mov ebx, r15d
movaps xmmword [rax - 0x68], xmm10
mov rdi, rcx
movss xmm10, dword [0x14015b378]
xorps xmm9, xmm9
movsd xmm0, qword [rdi]
mov eax, dword [rdi + 8]
movsd qword [rbp - 0x19], xmm0
ucomiss xmm9, dword [rbp - 0x19]
mov dword [rbp - 0x11], eax
jp 0x14000ab00
jne 0x14000ab00
ucomiss xmm9, dword [rbp - 0x15]
jp 0x14000ab00
jne 0x14000ab00
ucomiss xmm9, dword [rbp - 0x11]
jp 0x14000ab00
je 0x14000abd2
and dword [rbp - 0x21], r15d
lea rdx, [rbp - 0x29]
and dword [rbp - 0x25], r15d
lea rcx, [rbp - 0x19]
and dword [rbp - 0x29], r15d
call fcn.140008da0
test al, al
je 0x14000abd2
movss xmm2, dword [rbp - 0x25]
mov eax, dword [0x14016a6a4]
movd xmm1, dword [0x14016952c]
cdq
movss xmm8, dword [rbp - 0x29]
sub eax, edx
movd xmm7, dword [reloc.WS2_32.dll_ioctlsocket]
and dword [rbp - 0x21], r15d
cvtdq2ps xmm1, xmm1
sar eax, 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm2, xmm1
subss xmm0, xmm1
movsd xmm1, qword [0x14015b220]
cvtdq2ps xmm7, xmm7
subss xmm0, xmm2
movss dword [rbp - 0x25], xmm2
subss xmm8, xmm7
cvtps2pd xmm0, xmm0
movss dword [rbp - 0x29], xmm8
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
mov eax, dword [0x14016a6a0]
movaps xmm6, xmm0
cdq
sub eax, edx
sar eax, 1
movd xmm1, eax
cvtdq2ps xmm1, xmm1
subss xmm1, xmm7
subss xmm1, xmm8
cvtps2pd xmm0, xmm1
movsd xmm1, qword [0x14015b220]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvttsd2si eax, xmm0
movd xmm1, eax
cvtdq2ps xmm1, xmm1
comiss xmm10, xmm1
jbe 0x14000abd2
movaps xmm10, xmm1
mov esi, ebx
inc ebx
add rdi, 0xc
cmp ebx, 0x63
jle 0x14000aad2
test esi, esi
js 0x14000ad33
and dword [rbp - 0x11], r15d
lea rdx, [rbp - 0x19]
and dword [rbp - 0x15], r15d
and dword [rbp - 0x19], r15d
movsxd rax, esi
lea rcx, [rax + rax*2]
movsd xmm0, qword [r14 + rcx*4]
mov eax, dword [r14 + rcx*4 + 8]
lea rcx, [rbp - 0x29]
movsd qword [rbp - 0x29], xmm0
mov dword [rbp - 0x21], eax
call fcn.140008da0
test al, al
je 0x14000ad33
mov ecx, dword [0x14016e8bc]
mov ebx, dword [0x14016d198]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000ad33
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x14016a680]
jne 0x14000ad33
mov eax, dword [0x14016a6a0]
movd xmm0, dword [0x14016952c]
cdq
movss xmm7, dword [rbp - 0x15]
sub eax, edx
movsd xmm1, qword [0x14015b220]
sar eax, 1
cvtdq2ps xmm0, xmm0
movd xmm9, eax
mov eax, dword [0x14016a6a4]
cdq
sub eax, edx
sar eax, 1
cvtdq2ps xmm9, xmm9
movd xmm10, eax
cvtdq2ps xmm10, xmm10
movaps xmm2, xmm10
subss xmm2, xmm0
subss xmm2, xmm7
cvtps2pd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movd xmm2, dword [reloc.WS2_32.dll_ioctlsocket]
movaps xmm3, xmm9
movss xmm8, dword [rbp - 0x19]
movaps xmm6, xmm0
movsd xmm1, qword [0x14015b220]
cvtdq2ps xmm2, xmm2
subss xmm3, xmm2
subss xmm3, xmm8
cvtps2pd xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrt
cvttsd2si eax, xmm0
cmp eax, ebx
jg 0x14000ad33
subss xmm8, xmm9
subss xmm7, xmm10
mulss xmm8, dword [0x14015b180]
mulss xmm7, dword [0x14015b180]
cvttss2si edx, xmm8
cvttss2si r8d, xmm7
cmp edx, ebx
jg 0x14000ad28
cmp r8d, ebx
jg 0x14000ad28
xor r9d, r9d
mov qword [rsp + 0x20], r15
lea ecx, [r9 + 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
pop r14
pop rbp
ret