Function at 0x140072b50
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
xor r14d, r14d
mov rbx, qword [0x140175650]
movss xmm0, dword [rbx + 0x1680]
mov dword [rbp - 0x39], 0xb
movss dword [rbp - 0x35], xmm0
lea rcx, [rbx + 0x1ee8]
lea rdx, [rbp - 0x39]
call fcn.140029610
mov dword [rbx + 0x1680], 0x40800000
movss xmm8, dword [0x1400c60d8]
movss xmm7, dword [0x1400c60d4]
movss xmm6, dword [0x1400c60d0]
mov rbx, qword [0x140175650]
mov dword [rbp - 0x39], r14d
movups xmm0, xmmword [rbx + 0x16fc]
movups xmmword [rbp - 0x35], xmm0
lea rcx, [rbx + 0x1ed8]
lea rdx, [rbp - 0x39]
call fcn.140029700
movss dword [rbx + 0x16fc], xmm6
movss dword [rbx + 0x1700], xmm7
movss dword [rbx + 0x1704], xmm8
mov dword [rbx + 0x1708], 0x3f800000
mov rbx, qword [0x140175650]
mov dword [rbp - 0x39], 0x16
movups xmm0, xmmword [rbx + 0x185c]
movups xmmword [rbp - 0x35], xmm0
lea rcx, [rbx + 0x1ed8]
lea rdx, [rbp - 0x39]
call fcn.140029700
mov dword [rbx + 0x185c], 0x3df5c28f
mov dword [rbx + 0x1860], 0x3df5c28f
mov qword [rbx + 0x1864], 0x3df5c28f
mov rbx, qword [0x140175650]
mov dword [rbp - 0x39], 0x17
movups xmm0, xmmword [rbx + 0x186c]
movups xmmword [rbp - 0x35], xmm0
lea rcx, [rbx + 0x1ed8]
lea rdx, [rbp - 0x39]
call fcn.140029700
mov dword [rbx + 0x186c], 0x3e051eb8
mov dword [rbx + 0x1870], 0x3e051eb8
mov qword [rbx + 0x1874], 0x3e051eb8
mov rbx, qword [0x140175650]
mov dword [rbp - 0x39], 0x18
movups xmm0, xmmword [rbx + 0x187c]
movups xmmword [rbp - 0x35], xmm0
lea rcx, [rbx + 0x1ed8]
lea rdx, [rbp - 0x39]
call fcn.140029700
mov dword [rbx + 0x187c], 0x3e051eb8
mov dword [rbx + 0x1880], 0x3e051eb8
mov qword [rbx + 0x1884], 0x3e051eb8
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x140175e48], eax
jle 0x140072d78
lea rcx, [0x140175e48]
call fcn.140086ca0
cmp dword [0x140175e48], 0xffffffff
jne 0x140072d78
xorps xmm0, xmm0
movups xmmword [0x140175ae0], xmm0
mov qword [0x140175af0], 5
mov qword [0x140175af8], 0xf
mov eax, dword [str.s40]
mov dword [0x140175ae0], eax
movzx eax, byte [0x1400b80f0]
mov byte [0x140175ae4], al
mov byte [0x140175ae5], r14b
lea rcx, [0x14008ab20]
call fcn.1400870bc
nop
lea rcx, [0x140175e48]
call fcn.140086c34
mov dword [rbp - 0x39], 0x428c0000
mov dword [rbp - 0x35], 0x41f00000
lea rdi, [0x140175ae0]
mov rcx, rdi
cmp qword [0x140175af8], 0xf
cmova rcx, qword [0x140175ae0]
lea rdx, [rbp - 0x39]
call fcn.140043b60
test al, al
je 0x140072db6
mov byte [0x1401758ba], 1
jmp 0x140072dc3
cmp byte [0x1401758ba], 0
je 0x140072e5c
mov ebx, 1
lea esi, [rbx + 0x52]
nop dword [rax + rax]
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140072df7
cmp ebx, 0xc
je 0x140072df7
mov eax, ebx
cmp ebx, 0x1b
cmove eax, esi
mov dword [0x1401749cc], eax
mov byte [0x1401758ba], 0
inc ebx
cmp ebx, 0x100
jl 0x140072dd0
mov rax, qword [0x140175af8]
cmp rax, 7
jb 0x140072e43
cmp rax, 0xf
cmova rdi, qword [0x140175ae0]
mov qword [0x140175af0], 7
mov r8d, 7
lea rdx, str....40
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 7], 0
jmp 0x1400730d1
lea r9, str....40
mov edx, 7
mov rcx, rdi
call fcn.140085c80
jmp 0x1400730d1
mov edx, dword [0x1401749cc]
test edx, edx
jne 0x140072ebf
mov rax, qword [0x140175af8]
cmp rax, 5
jb 0x140072ea6
cmp rax, 0xf
cmova rdi, qword [0x140175ae0]
mov qword [0x140175af0], 5
lea r8d, [rdx + 5]
lea rdx, str.s40
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + 5], 0
jmp 0x1400730d1
lea r9, str.s40
mov edx, 5
mov rcx, rdi
call fcn.140085c80
jmp 0x1400730d1
lea rcx, [rbp + 7]
call fcn.140063ee0
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rbx, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rbx, qword [rbp - 0x19]
lea rsi, [0x14008bbfa]
mov r8, qword [rbp - 9]
cmp rsi, rbx
jbe 0x140072f29
lea rax, [r8 + rbx]
cmp rsi, rax
ja 0x140072f29
cmp rbx, rsi
jbe 0x140072f29
mov rdi, rbx
sub rdi, rsi
jmp 0x140072f2c
mov rdi, r14
inc r8
mov rdx, rbx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8, rdi
neg r8
lea rdx, [rdi + rsi]
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [rbp - 0x19]
movups xmmword [rbp - 0x39], xmm0
movups xmm1, xmmword [rbp - 9]
movdqu xmmword [rbp - 0x29], xmm1
mov qword [rbp - 9], r14
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], 0
movq rcx, xmm1
psrldq xmm1, 8
movq rdx, xmm1
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x140072fbe
lea rax, [rcx + 4]
mov qword [rbp - 0x29], rax
lea rax, [rbp - 0x39]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x39]
mov dword [rax + rcx], 0x30342323
mov byte [rax + rcx + 4], 0
lea rax, [rbp - 0x39]
jmp 0x140072fdc
mov qword [rsp + 0x20], 4
lea r9, str.40
mov edx, 4
lea rcx, [rbp - 0x39]
call fcn.140085af0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [0x140175af8]
cmp rdx, 0xf
jbe 0x140073036
inc rdx
mov rcx, qword [0x140175ae0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140073031
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140073031
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140086b80
movups xmmword [0x140175ae0], xmm6
movups xmmword [0x140175af0], xmm7
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x140073082
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007307d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007307d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140086b80
movdqa xmm0, xmmword [0x1400b9b30]
movdqu xmmword [rbp - 0x29], xmm0
mov byte [rbp - 0x39], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x1400730d1
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400730cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400730cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140086b80
mov ecx, 1
call fcn.140003f10
mov ecx, 4
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop rbp
jmp fcn.140003cc0