Function at 0x1400014a0
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
mov qword [r11 + 0x20], rsi
push rbp
lea rbp, [r11 - 0x138]
sub rsp, 0x230
mov rax, qword [0x14005b010]
xor rax, rsp
mov qword [rbp + 0x80], rax
cmp byte [0x14005b050], 0
mov rsi, qword [0x14005b868]
je 0x140001998
mov qword [r11 + 0x18], r14
xor r14d, r14d
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [r11 - 0x28], xmm7
movaps xmmword [r11 - 0x38], xmm8
movss xmm8, dword [0x1400533b8]
movaps xmmword [r11 - 0x48], xmm9
movss xmm9, dword [0x140053440]
movaps xmmword [r11 - 0x58], xmm10
movss xmm10, dword [0x140053438]
movaps xmmword [r11 - 0x68], xmm11
movss xmm11, dword [0x1400533a4]
movaps xmmword [r11 - 0x78], xmm12
movss xmm12, dword [0x140053444]
movaps xmmword [r11 - 0x88], xmm13
movss xmm13, dword [0x1400533cc]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rdi
movaps xmmword [r11 - 0x98], xmm14
movaps xmmword [r11 - 0xa8], xmm15
nop dword [rax + rax]
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.140001e00
mov ecx, dword [0x14005b0b8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140001596
mov ecx, dword [0x14005b0bc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
je 0x140001910
movsd xmm3, qword [rbp + 0x64]
xorps xmm0, xmm0
movss xmm14, dword [rbp + 0x6c]
xorps xmm2, xmm2
xorps xmm6, xmm6
mov dword [rsp + 0x38], r14d
unpcklps xmm0, xmm6
movsd xmm2, xmm0
movss xmm0, dword [rsp + 0x38]
movlhps xmm2, xmm0
movaps xmm0, xmm14
movlhps xmm3, xmm0
cmpeqps xmm2, xmm3
movmskps eax, xmm2
and eax, 7
cmp al, 7
je 0x140001910
mov rdx, qword [0x14005b110]
lea r8, [rbp - 0x68]
mov rcx, qword [0x14005b108]
add rdx, 0x20d9868
mov r9d, 8
mov qword [rbp - 0x68], r14
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rbx, qword [rbp - 0x68]
lea r8, [rbp - 0x78]
mov rcx, qword [0x14005b108]
mov r9d, 0xc
mov qword [rbp - 0x78], r14
mov dword [rbp - 0x70], r14d
lea rdx, [rbx + 0x3d0]
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [0x14005b108]
lea rdx, [rbx + 0x60]
mov r9d, 0xc
mov qword [rsp + 0x68], r14
lea r8, [rsp + 0x68]
mov dword [rsp + 0x70], r14d
mov qword [rsp + 0x20], r14
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movss xmm0, dword [rsp + 0x70]
movss xmm15, dword [rsp + 0x68]
subss xmm0, xmm14
movss xmm7, dword [rbp + 0x64]
movaps xmm1, xmm15
movss xmm2, dword [rsp + 0x6c]
subss xmm1, xmm7
movss xmm6, dword [rbp + 0x68]
subss xmm2, xmm6
mulss xmm0, xmm0
mulss xmm1, xmm1
mulss xmm2, xmm2
addss xmm2, xmm1
addss xmm2, xmm0
xorps xmm0, xmm0
ucomiss xmm0, xmm2
ja 0x1400016b3
xorps xmm0, xmm0
sqrtss xmm0, xmm2
jmp 0x1400016bb
movaps xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
subss xmm6, dword [rsp + 0x6c]
subss xmm14, dword [rsp + 0x70]
subss xmm7, xmm15
divss xmm6, xmm0
divss xmm7, xmm0
divss xmm14, xmm0
comiss xmm7, xmm11
movss dword [rsp + 0x78], xmm7
movss dword [rsp + 0x7c], xmm6
movss dword [rbp - 0x80], xmm14
jbe 0x140001703
addss xmm7, xmm9
comiss xmm7, xmm11
ja 0x1400016f2
movss dword [rsp + 0x78], xmm7
comiss xmm10, xmm7
jbe 0x140001721
nop dword [rax]
addss xmm7, xmm8
comiss xmm10, xmm7
ja 0x140001710
movss dword [rsp + 0x78], xmm7
comiss xmm6, xmm8
jbe 0x140001741
nop word [rax + rax]
addss xmm6, xmm12
comiss xmm6, xmm8
ja 0x140001730
movss dword [rsp + 0x7c], xmm6
comiss xmm9, xmm6
jbe 0x140001761
nop word [rax + rax]
addss xmm6, xmm13
comiss xmm9, xmm6
ja 0x140001750
movss dword [rsp + 0x7c], xmm6
movsd xmm3, qword [rbp - 0x78]
movss xmm0, dword [rbp - 0x70]
movsd xmm2, qword [rsp + 0x78]
movlhps xmm3, xmm0
movss xmm0, dword [rbp - 0x80]
movlhps xmm2, xmm0
subps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x58], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x60], xmm0
jbe 0x1400017b1
nop dword [rax + rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x58], xmm2
ja 0x1400017a0
comiss xmm10, xmm2
jbe 0x1400017d1
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x58], xmm2
ja 0x1400017c0
movss xmm0, dword [rsp + 0x5c]
comiss xmm0, xmm8
jbe 0x1400017f1
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x1400017e0
movss dword [rsp + 0x5c], xmm0
comiss xmm9, xmm0
jbe 0x140001811
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x140001800
movss dword [rsp + 0x5c], xmm0
movsd xmm2, qword [rsp + 0x58]
movss xmm0, dword [rsp + 0x60]
movlhps xmm2, xmm0
addps xmm2, xmm3
comiss xmm2, xmm11
movaps xmm0, xmm2
movsd qword [rsp + 0x48], xmm2
shufps xmm0, xmm2, 0xaa
movss dword [rsp + 0x50], xmm0
jbe 0x140001851
nop dword [rax]
addss xmm2, xmm9
comiss xmm2, xmm11
movss dword [rsp + 0x48], xmm2
ja 0x140001840
comiss xmm10, xmm2
jbe 0x140001871
nop word [rax + rax]
addss xmm2, xmm8
comiss xmm10, xmm2
movss dword [rsp + 0x48], xmm2
ja 0x140001860
movss xmm0, dword [rsp + 0x4c]
comiss xmm0, xmm8
jbe 0x140001891
nop dword [rax]
addss xmm0, xmm12
comiss xmm0, xmm8
ja 0x140001880
movss dword [rsp + 0x4c], xmm0
comiss xmm9, xmm0
jbe 0x1400018b1
nop word [rax + rax]
addss xmm0, xmm13
comiss xmm9, xmm0
ja 0x1400018a0
movss dword [rsp + 0x4c], xmm0
movsd xmm4, qword [rsp + 0x48]
xorps xmm0, xmm0
xorps xmm3, xmm3
mov dword [rsp + 0x44], r14d
xorps xmm1, xmm1
unpcklps xmm0, xmm1
movsd xmm3, xmm0
movss xmm0, dword [rsp + 0x44]
movlhps xmm3, xmm0
movss xmm0, dword [rsp + 0x50]
movlhps xmm4, xmm0
cmpeqps xmm3, xmm4
movmskps eax, xmm3
and eax, 7
cmp al, 7
je 0x140001910
mov rcx, qword [0x14005b108]
lea r8, [rsp + 0x48]
mov r9d, 0xc
mov qword [rsp + 0x20], r14
lea rdx, [rbx + 0x3d0]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x14005b050], r14b
jne 0x140001560
movaps xmm15, xmmword [rsp + 0x190]
movaps xmm14, xmmword [rsp + 0x1a0]
movaps xmm13, xmmword [rsp + 0x1b0]
movaps xmm12, xmmword [rsp + 0x1c0]
movaps xmm11, xmmword [rsp + 0x1d0]
movaps xmm10, xmmword [rsp + 0x1e0]
movaps xmm9, xmmword [rsp + 0x1f0]
movaps xmm8, xmmword [rsp + 0x200]
movaps xmm7, xmmword [rsp + 0x210]
movaps xmm6, xmmword [rsp + 0x220]
mov r14, qword [rsp + 0x250]
mov rdi, qword [rsp + 0x248]
mov rbx, qword [rsp + 0x240]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.140049b50
mov rsi, qword [rsp + 0x258]
add rsp, 0x230
pop rbp
ret