Function at 0x140065090
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
movaps xmmword [rsp + 0x60], xmm6
mov rax, qword [0x1400b3fc0]
xor rax, rsp
mov qword [rbp - 0x30], rax
xor edi, edi
mov rbx, rcx
cmp byte [0x1400b405b], dil
xorps xmm6, xmm6
je 0x1400651ae
lea ecx, [rdi + 0x12]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400651ae
lea rdx, [rbp - 0x40]
mov qword [rbp - 0x40], rdi
mov rcx, rbx
call fcn.1400635b0
mov rdx, qword [0x1400b8598]
lea r9d, [rdi + 4]
mov rcx, qword [0x1400b85c0]
lea r8, [rbp - 0x34]
add rdx, 0x1a5c610
mov dword [rbp - 0x34], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1400b8598]
lea r9d, [rdi + 4]
mov rcx, qword [0x1400b85c0]
lea r8, [rbp - 0x38]
add rdx, 0x1a5c614
mov dword [rbp - 0x38], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x40]
ucomiss xmm0, xmm6
jp 0x14006515a
jne 0x14006515a
movss xmm0, dword [rbp - 0x3c]
ucomiss xmm0, xmm6
jp 0x14006515a
je 0x1400651ae
mov rdx, qword [0x1400b8598]
lea r8, [rbp - 0x40]
mov rcx, qword [0x1400b85c0]
add rdx, 0x1a5c610
mov r9d, 4
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x1400b8598]
lea r8, [rbp - 0x3c]
mov rcx, qword [0x1400b85c0]
add rdx, 0x1a5c614
mov r9d, 4
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x1400b405a], dil
je 0x1400652e4
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400652e4
lea rdx, [rbp - 0x40]
movaps xmmword [rsp + 0x50], xmm7
mov rcx, rbx
mov qword [rbp - 0x40], rdi
call fcn.1400635b0
mov rdx, qword [0x1400b8598]
lea r8, [rbp - 0x38]
mov rcx, qword [0x1400b85c0]
add rdx, 0x1a5c610
mov r9d, 4
mov dword [rbp - 0x38], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rdx, qword [0x1400b8598]
lea r8, [rbp - 0x34]
mov rcx, qword [0x1400b85c0]
add rdx, 0x1a5c614
movss xmm7, dword [rbp - 0x38]
mov r9d, 4
mov dword [rbp - 0x34], edi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x40]
ucomiss xmm0, xmm6
movss xmm2, dword [rbp - 0x3c]
jp 0x14006525f
jne 0x14006525f
ucomiss xmm2, xmm6
jp 0x14006525f
je 0x1400652df
subss xmm2, dword [rbp - 0x34]
mov rdx, qword [0x1400b8598]
subss xmm0, xmm7
mov rcx, qword [0x1400b85c0]
lea r8, [rbp - 0x40]
add rdx, 0x1a5c610
mov qword [rsp + 0x20], rdi
mov r9d, 4
divss xmm2, dword [0x1400b4134]
divss xmm0, dword [0x1400b4134]
addss xmm2, dword [rbp - 0x34]
addss xmm0, xmm7
movss dword [rbp - 0x3c], xmm2
movss dword [rbp - 0x40], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x1400b8598]
lea r8, [rbp - 0x3c]
mov rcx, qword [0x1400b85c0]
add rdx, 0x1a5c614
mov r9d, 4
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
movaps xmm7, xmmword [rsp + 0x50]
mov rcx, qword [rbp - 0x30]
xor rcx, rsp
call fcn.140079fe0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [rsp + 0x60]
mov rsp, r11
pop rbp
ret