Function at 0x14005df00
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov ecx, 0x2d
movaps xmmword [rsp + 0x160], xmm7
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005df3c
cmp byte [0x1400ab354], 0
sete byte [0x1400ab354]
cmp byte [0x1400ebf39], 0
mov rbx, qword [0x1400ebf40]
movss xmm7, dword [0x140083ea8]
jne 0x14005e0a6
mov rcx, qword [rbx + 0x38]
movaps xmmword [rsp + 0x170], xmm6
call fcn.140034ec0
mov rcx, qword [rbx + 0x38]
call fcn.140035200
movss xmm6, dword [0x140083f24]
lea rdx, str.C:WindowsFontsVerdana.ttf
mov rcx, qword [rbx + 0x38]
movaps xmm2, xmm6
call fcn.140035370
mov rcx, qword [rbx + 0x38]
lea rdx, str.C:WindowsFontsVerdanab.ttf
movaps xmm2, xmm6
call fcn.140035370
mov rcx, qword [rbx + 0x38]
lea rdx, str.C:WindowsFonts_verdanaz.ttf
movaps xmm2, xmm6
call fcn.140035370
mov rcx, qword [rbx + 0x38]
lea rdx, str.C:WindowsFontsTahoma.ttf
movaps xmm2, xmm6
call fcn.140035370
mov rcx, qword [rbx + 0x38]
lea rdx, str.C:WindowsFontsTahomabd.ttf
movaps xmm2, xmm6
call fcn.140035370
mov rcx, qword [rbx + 0x38]
lea rdx, str.C:WindowsFontsCascadiaCode.ttf
movaps xmm2, xmm6
call fcn.140035370
mov rcx, qword [rbx + 0x38]
lea rdx, [rbp - 0x30]
xorps xmm2, xmm2
mov eax, 0xffff
movups xmmword [rbp - 0x70], xmm2
mov word [rbp - 0x68], ax
lea rax, [0x14009cff0]
movups xmmword [rsp + 0x50], xmm2
mov dword [rsp + 0x58], 2
movups xmmword [rsp + 0x40], xmm2
mov byte [rsp + 0x4c], 1
movaps xmm0, xmmword [rsp + 0x40]
movaps xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x80], xmm2
mov dword [rsp + 0x5c], 1
movaps xmm1, xmmword [rsp + 0x50]
movaps xmmword [rbp - 0x20], xmm1
mov dword [rbp - 0x7c], 0x7f7fffff
movaps xmm0, xmmword [rbp - 0x80]
mov dword [rbp - 0x70], 0x3f800000
mov dword [rbp - 0x6c], 0x3f800000
movaps xmm1, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x10], xmm0
movaps xmmword [rbp + 0x20], xmm1
movaps xmmword [rbp - 0x10], xmm2
movaps xmmword [rbp], xmm2
movaps xmmword [rbp + 0x30], xmm2
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x50], xmm2
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], 0xe364
mov dword [rbp - 0x1c], 0x41900000
call fcn.140034fe0
mov rbx, qword [0x1400ebf40]
movaps xmm6, xmmword [rsp + 0x170]
mov byte [0x1400ebf39], 1
xor edi, edi
test rbx, rbx
je 0x14005e0b6
mov rax, qword [rbx + 0x98]
jmp 0x14005e0b9
mov rax, rdi
cmp qword [rax + 0x18], rdi
jne 0x14005e0da
test rbx, rbx
je 0x14005e0da
mov rax, qword [rbx + 0x98]
test rax, rax
je 0x14005e0da
cmp qword [rax], rdi
je 0x14005e0da
call fcn.14003ab80
call fcn.14003b940
call fcn.140012a50
call fcn.14005d070
cmp dword [0x1400ebf60], edi
jne 0x14005e127
mov rax, qword [0x1400ebf40]
mov dword [0x1400ebf60], 1
or dword [rax + 0x4a10], 2
mov dword [rax + 0x4a30], 0x43fa0000
mov dword [rax + 0x4a34], 0x43b68000
mov dword [rax + 0x4a18], 1
cmp byte [0x1400ab354], dil
je 0x14005e135
call fcn.14005b4c0
call fcn.1400145a0
mov rcx, qword [0x1400ebfe8]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400ebfe8]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400ebfe8]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x1400ebfe8]
mov r9d, 1
mov dword [rsp + 0x30], edi
xor r8d, r8d
movss dword [rsp + 0x28], xmm7
xor edx, edx
mov dword [rsp + 0x20], edi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x1400ebfe8]
mov rax, qword [rcx]
call qword [rax + 0x148]
movaps xmm7, xmmword [rsp + 0x160]
test eax, eax
js 0x14005e1fb
call fcn.140014950
mov rax, qword [0x1400ebf40]
mov rcx, qword [rax + 0x4b20]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], dil
cmove rcx, rdi
call fcn.14003a5c0
mov rcx, qword [0x1400ebfe8]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400ebfe8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14005e2d9
mov rcx, qword [0x1400ebfe8]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14005e2d9
mov rbx, qword [0x1400ebf40]
test rbx, rbx
je 0x14005e2a0
mov rbx, qword [rbx + 0x98]
test rbx, rbx
je 0x14005e2a0
cmp qword [rbx], rdi
je 0x14005e2a0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14005e26b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 8], rdi
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14005e27e
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], rdi
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14005e2a0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x1400ebf40]
mov qword [rbx + 0x18], rdi
mov rcx, qword [rax + 0x38]
mov qword [rcx + 8], rdi
mov rcx, qword [0x1400ebfe8]
lea rdx, [0x1400ebfa0]
mov rax, qword [rcx]
call qword [rax + 0x80]
mov rax, qword [0x1400ebf40]
test rax, rax
je 0x14005e2d9
mov rax, qword [rax + 0x98]
test rax, rax
je 0x14005e2d9
cmp qword [rax], rdi
je 0x14005e2d9
call fcn.14003ab80
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret