Function at 0x140001d10
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movaps xmmword [rsp + 0xc0], xmm6
mov rax, qword [0x140050010]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor ebx, ebx
cmp byte [0x140062d4d], bl
je 0x140001e08
mov rdx, qword [0x140062d50]
test rdx, rdx
je 0x140001e08
cmp qword [0x140062d40], rbx
je 0x140001e08
mov rcx, qword [0x140062d18]
lea rax, [rbp + 7]
add rdx, 0x760
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
mov dword [rbp - 0x31], ebx
lea r8, [rbp - 0x31]
mov qword [rbp + 7], rbx
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rbp - 0x31]
lea rax, [rbp + 0x17]
subss xmm0, dword [0x140049470]
mov rdx, qword [0x140062d50]
lea r9d, [rbx + 4]
mov rcx, qword [0x140062d18]
lea r8, [rbp - 0x39]
add rdx, 0x760
mov qword [rbp + 0x17], rbx
mov qword [rsp + 0x20], rax
movss dword [rbp - 0x39], xmm0
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov rdx, qword [0x140062d40]
lea rax, [rbp + 0x27]
mov rcx, qword [0x140062d18]
lea r9d, [rbx + 4]
add rdx, 0x9e0
mov dword [rbp - 0x31], 1
lea r8, [rbp - 0x31]
mov qword [rbp + 0x27], rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062d4a], bl
movss xmm6, dword [0x140049458]
je 0x140001e7b
cmp qword [0x140062d58], rbx
je 0x140001e7b
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rdx, qword [0x140062d20]
mov r9d, 4
mov rcx, qword [0x140062d18]
add rdx, 0xc0
test ax, ax
je 0x140001e5d
mov dword [rbp - 0x39], ebx
lea rax, [rbp - 9]
mov qword [rbp - 9], rbx
lea r8, [rbp - 0x39]
jmp 0x140001e70
mov dword [rbp - 0x29], 0x3f800000
lea rax, [rbp - 1]
mov qword [rbp - 1], rbx
lea r8, [rbp - 0x29]
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062d4c], bl
mov rdx, qword [0x140062d28]
je 0x140001ea4
test rdx, rdx
je 0x140001ea4
mov dword [rbp + 0x17], 0xbf800000
lea rax, [rbp - 0x19]
mov qword [rbp - 0x19], rbx
lea r8, [rbp + 0x17]
jmp 0x140001eb7
mov dword [rbp + 7], 0x3f800000
lea rax, [rbp - 0x21]
mov qword [rbp - 0x21], rbx
lea r8, [rbp + 7]
mov rcx, qword [0x140062d18]
mov r9d, 4
add rdx, 0xc0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062d4b], bl
mov rdx, qword [0x140062d50]
je 0x140001eff
test rdx, rdx
je 0x140001eff
mov dword [rbp - 0x29], 0x7f7fffff
lea rax, [rbp - 1]
mov qword [rbp - 1], rbx
lea r8, [rbp - 0x29]
jmp 0x140001f0e
mov dword [rbp - 0x39], ebx
lea rax, [rbp - 9]
mov qword [rbp - 9], rbx
lea r8, [rbp - 0x39]
mov rcx, qword [0x140062d18]
mov r9d, 4
add rdx, 0xc0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062d30], bl
mov rdx, qword [0x140062d20]
je 0x140001f53
test rdx, rdx
je 0x140001f53
mov byte [rbp - 0x49], 1
lea rax, [rbp - 0x21]
mov qword [rbp - 0x21], rbx
lea r8, [rbp - 0x49]
jmp 0x140001f62
mov byte [rbp - 0x41], bl
lea rax, [rbp - 0x19]
mov qword [rbp - 0x19], rbx
lea r8, [rbp - 0x41]
mov rcx, qword [0x140062d18]
mov r9d, 1
add rdx, 0x24fd
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062d48], bl
mov rdx, qword [0x140062d38]
je 0x140001fbb
test rdx, rdx
je 0x140001fbb
movss xmm1, dword [0x140050054]
lea rax, [rbp - 1]
movaps xmm0, xmm1
movss dword [rbp + 0x2f], xmm1
unpcklps xmm0, xmm1
lea r8, [rbp + 0x27]
movsd qword [rbp + 0x27], xmm0
mov qword [rbp - 1], rbx
jmp 0x140001fd7
movaps xmm0, xmm6
movss dword [rbp + 0xf], xmm6
unpcklps xmm0, xmm6
lea rax, [rbp - 9]
movsd qword [rbp + 7], xmm0
lea r8, [rbp + 7]
mov qword [rbp - 9], rbx
mov rcx, qword [0x140062d18]
mov r9d, 0xc
add rdx, 0x17c
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp byte [0x140062d49], bl
mov rdx, qword [0x140062d58]
je 0x14000201f
test rdx, rdx
je 0x14000201f
movss xmm1, dword [0x140050058]
movaps xmm0, xmm1
movss dword [rbp - 0x11], xmm1
unpcklps xmm0, xmm1
jmp 0x14000202a
movaps xmm0, xmm6
movss dword [rbp - 0x11], xmm6
unpcklps xmm0, xmm6
mov rcx, qword [0x140062d18]
lea rax, [rbp - 0x21]
mov r9d, 0xc
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x19]
movsd qword [rbp - 0x19], xmm0
add rdx, 0x17c
mov qword [rbp - 0x21], rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov al, 1
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.14003f9e0
mov rbx, qword [rsp + 0xe0]
movaps xmm6, xmmword [rsp + 0xc0]
add rsp, 0xd0
pop rbp
ret