Function at 0x140008e10
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rsi, rcx
mov ecx, 4
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
movabs r13, 0x756cb5f8a2106627
movabs r14, 0x46dee8e5b7521b58
lea r12, [0x14010e7b8]
mov eax, dword [rcx + rdx]
cmp dword [0x14010e7b0], eax
jle 0x140008ed9
lea rcx, [0x14010e7b0]
call fcn.1400bfeb8
cmp dword [0x14010e7b0], 0xffffffff
jne 0x140008ed9
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r14
movabs rax, 0x1a189593c1790a44
mov qword [rbp - 0x60], rax
movabs rax, 0x46dee881d93b7978
mov qword [rbp - 0x58], rax
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
mov rcx, r12
call fcn.140005360
lea rcx, [0x1400c2ce0]
call fcn.1400c023c
nop
lea rcx, [0x14010e7b0]
call fcn.1400bfe58
movss xmm0, dword [0x1400fac34]
movss dword [rbp - 0x60], xmm0
movss xmm1, dword [0x1400fabf8]
movss dword [rbp - 0x5c], xmm1
mov rcx, r12
cmp qword [0x14010e7d0], 0x10
cmovae rcx, qword [0x14010e7b8]
xor r8d, r8d
lea rdx, [rbp - 0x60]
call fcn.140047dc0
test al, al
je 0x140008f1f
mov byte [0x14010e6c0], 1
jmp 0x140008f2c
cmp byte [0x14010e6c0], 0
je 0x140008fb0
mov ebx, 1
xor edi, edi
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140008f58
cmp ebx, 0xc
je 0x140008f58
mov eax, ebx
cmp ebx, 0x1b
cmove eax, edi
mov dword [rsi], eax
mov byte [0x14010e6c0], dil
inc ebx
cmp ebx, 0x100
jl 0x140008f33
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r14
movabs rax, 0x756cb5f8a23e4809
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], r14
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x60], xmm0
lea rax, [rbp - 0x60]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x140008f96
lea rdx, [rbp - 0x60]
mov rcx, r12
call fcn.1400056c0
jmp 0x140009153
mov edx, dword [rsi]
test edx, edx
jne 0x14000900b
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r14
movabs rax, 0x756cb5f8c67e0f65
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], r14
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x60], xmm0
lea rax, [rbp - 0x60]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140008ff0
lea rdx, [rbp - 0x60]
mov rcx, r12
call fcn.1400056c0
jmp 0x140009153
lea rcx, [rbp - 0x30]
call fcn.140007b80
nop
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r14
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r14
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rbp - 0x60], xmm0
mov r8, rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.14000c710
mov rbx, rax
cmp r12, rax
je 0x1400090c6
mov rdx, qword [0x14010e7d0]
cmp rdx, 0x10
jb 0x140009089
inc rdx
mov rcx, qword [0x14010e7b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009084
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400090f8
call fcn.1400c0254
movdqa xmm0, xmmword [0x1400fad70]
movdqu xmmword [0x14010e7c8], xmm0
mov byte [0x14010e7b8], 0
movups xmm0, xmmword [rbx]
movups xmmword [0x14010e7b8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x14010e7c8], xmm1
xor edi, edi
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], dil
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x140009104
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400090ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400090ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c0254
movdqa xmm0, xmmword [0x1400fad70]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140009153
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000914e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000914e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c0254
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret