Function at 0x1400d94b0
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
vmovups xmmword [rsp + 0xa0], xmm6
mov r13, qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov rbx, qword [sym.imp.KERNEL32.DLL_Sleep]
movabs rax, 0x1718003e922c7c38
movabs rdx, 0xeb2ebadda874b9e
mov rdi, qword [sym.imp.USER32.dll_mouse_event]
mov rsi, qword [sym.imp.USER32.dll_keybd_event]
vmovq xmm6, rax
lea r12, [rsp + 0x6f]
mov r14, rcx
and r12, 0xffffffffffffffe0
mov qword [rsp + 0x48], rdx
vpinsrq xmm6, xmm6, rdx, 1
nop dword [rax + rax]
mov rcx, qword [0x1400eab50]
mov ecx, dword [rcx]
call r13
test eax, 0x8001
jne 0x1400d97e0
mov ecx, 0x71
call r13
test eax, 0x8001
je 0x1400d97c6
mov rdx, qword [r14]
movzx r8d, byte [rdx + 2]
mov r15, qword [r14]
test r8b, r8b
sete al
xchg byte [r15 + 2], al
mov rcx, qword [r14]
movzx r9d, byte [rcx + 2]
test r9b, r9b
je 0x1400d9710
mov ecx, 0xfa
movabs r15, 0x7838735dd63d6b30
call rbx
movabs r9, 0xb321cac341ca9e9d
vmovq xmm1, r15
mov qword [rsp + 0x30], r9
vmovq xmm4, qword [rsp + 0x30]
movabs r9, 0x7dc18edf8aa765f0
movabs r11, 0xc14eaca635bfecdf
movabs rax, 0x17180034f6490859
movabs r10, 0x74aebb560dabec9f
movabs r8, 0x6dac83f498b89fc
vpinsrq xmm5, xmm1, r9, 1
mov qword [rsp + 0x38], r11
vmovq xmm1, qword [rsp + 0x38]
movabs rcx, 0xeb2ebadda874b9e
mov qword [rsp + 0x40], rax
vmovq xmm3, qword [rsp + 0x40]
movabs rbp, 0x854f5c1e15c60153
movabs r11, 0xf66f336a35f44773
vpinsrq xmm2, xmm4, r10, 1
movabs rdx, 0x9180b51328e5e904
movabs rax, 0x9180b51322958670
vinserti128 ymm0, ymm2, xmm5, 1
vpinsrq xmm4, xmm1, r8, 1
vpinsrq xmm5, xmm3, rcx, 1
mov rcx, r12
vinserti128 ymm2, ymm4, xmm5, 1
vmovq xmm5, r11
vmovq xmm3, rbp
vpxor ymm0, ymm0, ymm2
vpinsrq xmm4, xmm3, rdx, 1
vpinsrq xmm1, xmm5, rax, 1
vmovdqu ymmword [r12], ymm0
vpxor xmm2, xmm4, xmm1
vmovdqu xmmword [r12 + 0x20], xmm2
vzeroupper
call sub.msvcrt.dll_strlen
mov rdx, r12
mov rcx, qword [0x1400ea160]
mov r8, rax
call fcn.1400d2ef0
nop word cs:[rax + rax]
nop dword [rax]
mov ecx, 0x71
call r13
test ax, ax
jne 0x1400d9520
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 2
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
mov ecx, 4
call rdi
mov ecx, 0x320
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xd
call rsi
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov ecx, 0xd
call rsi
mov ecx, 0x12c
call rbx
jmp 0x1400d9690
movabs r10, 0xb321cac341ca9e9d
movabs rbp, 0x7838735dd63d6b30
movabs r15, 0x74aebb560dabec9f
movabs r11, 0xeb2ebadda8d2df8
vmovq xmm2, r10
vmovq xmm4, rbp
movabs rdx, 0xc14eaca635bfecdf
movabs r8, 0x17180034f6490859
vpinsrq xmm5, xmm4, r11, 1
vpinsrq xmm3, xmm2, r15, 1
movabs rax, 0x6dac83f498b89fc
movabs rcx, 0xeb2ebadda874b9e
vinserti128 ymm0, ymm3, xmm5, 1
vmovq xmm1, r8
vmovq xmm5, rdx
vpinsrq xmm2, xmm5, rax, 1
vpinsrq xmm4, xmm1, rcx, 1
mov rcx, r12
vinserti128 ymm3, ymm2, xmm4, 1
vpxor ymm0, ymm0, ymm3
vmovdqu ymmword [r12], ymm0
vzeroupper
call sub.msvcrt.dll_strlen
mov rdx, r12
mov rcx, qword [0x1400ea160]
mov r8, rax
call fcn.1400d2ef0
mov ecx, 0xfa
call rbx
mov ecx, 0xa
call rbx
jmp 0x1400d9520
mov rbp, qword [r14]
movzx r8d, byte [rbp]
mov r9, qword [r14]
test r8b, r8b
sete r10b
xchg byte [r9], r10b
mov r11, qword [r14]
movzx r15d, byte [r11]
test r15b, r15b
je 0x1400d9980
mov r15, qword [rsp + 0x48]
movabs r11, 0xa43acdcb58de898b
movabs r10, 0x1d7c6540973f612d
movabs rbp, 0x659be85a2de4c4dc
vmovq xmm3, r11
vmovq xmm5, r10
movabs rdx, 0xc14eaca635bfecdf
movabs rax, 0x17180034f6490859
vpinsrq xmm2, xmm5, r15, 1
movabs r8, 0x6dac83f498b89fc
mov rcx, r12
vpinsrq xmm1, xmm3, rbp, 1
vinserti128 ymm0, ymm1, xmm2, 1
vmovq xmm2, rdx
vmovq xmm4, rax
vpinsrq xmm5, xmm4, r15, 1
vpinsrq xmm3, xmm2, r8, 1
vinserti128 ymm1, ymm3, xmm5, 1
vpxor ymm0, ymm0, ymm1
vmovdqu ymmword [r12], ymm0
vzeroupper
call sub.msvcrt.dll_strlen
mov rdx, r12
mov rcx, qword [0x1400ea160]
mov r8, rax
call fcn.1400d2ef0
mov rcx, qword [0x1400eacc0]
mov r9, qword [0x1400eaa70]
mov r11, qword [0x1400eaca0]
mov rbp, qword [0x1400eaa50]
mov r10, qword [0x1400eac80]
mov rdx, qword [0x1400eaa30]
mov r8, qword [0x1400eaa90]
mov dword [rcx], 0xa0
mov rax, qword [0x1400eacd0]
mov r15, qword [0x1400eaa80]
mov dword [r9], 0x87
mov dword [r11], 0xf0
mov r9, qword [0x1400eaa60]
mov dword [rbp], 0xc8
mov dword [r10], 0x78
mov dword [rdx], 0x50
mov dword [r8], 0xfa
mov dword [rax], 0x96
mov dword [r15], 0x32
mov dword [r9], 0x96
mov r9d, 0xfa
mov rcx, qword [0x1400eacb0]
mov r11, qword [0x1400eac90]
mov rbp, qword [0x1400eaa40]
mov dword [rcx], 0xfa
mov dword [r11], 0x4b
mov dword [rbp], 3
mov ecx, 0x64
mov r10, qword [0x1400eaaa0]
mov dword [r10], r9d
call rbx
jmp 0x1400d9537
movabs rbp, 0xae038cdf58da829a
movabs r8, 0x70b3bc5c08abec98
movabs rcx, 0x17180034f6490859
movabs rdx, 0xc14eaca635bfecdf
vmovq xmm2, rbp
movabs rax, 0x6dac83f498b89fc
vpinsrq xmm0, xmm2, r8, 1
vmovq xmm5, rcx
vpinsrq xmm2, xmm5, qword [rsp + 0x48], 1
mov rcx, r12
vmovq xmm3, rdx
vinserti128 ymm4, ymm0, xmm6, 1
vpinsrq xmm1, xmm3, rax, 1
vinserti128 ymm0, ymm1, xmm2, 1
vpxor ymm4, ymm4, ymm0
vmovdqu ymmword [r12], ymm4
vzeroupper
call sub.msvcrt.dll_strlen
mov rdx, r12
mov rcx, qword [0x1400ea160]
mov r8, rax
call fcn.1400d2ef0
mov r9d, dword [0x1400e3480]
mov r10, qword [0x1400eacc0]
mov r11d, dword [0x1400e31a0]
mov r15, qword [0x1400eaa70]
mov ebp, dword [0x1400e3440]
mov r8, qword [0x1400eaca0]
mov eax, dword [0x1400e3160]
mov rdx, qword [0x1400eaa50]
mov ecx, dword [0x1400e3400]
mov dword [r10], r9d
mov r9, qword [0x1400eac80]
mov r10d, dword [0x1400e3120]
mov dword [r15], r11d
mov r11, qword [0x1400eaa30]
mov r15d, dword [0x1400e31e0]
mov dword [r8], ebp
mov rbp, qword [0x1400eaa90]
mov dword [rdx], eax
mov r8d, dword [0x1400e34a0]
mov dword [r9], ecx
mov rax, qword [0x1400eacd0]
mov dword [r11], r10d
mov ecx, dword [0x1400e31c0]
mov r9d, dword [0x1400e3460]
mov dword [rbp], r15d
mov rdx, qword [0x1400eaa80]
mov r10, qword [0x1400eacb0]
mov r11d, dword [0x1400e3180]
mov r15, qword [0x1400eaa60]
mov dword [rax], r8d
mov dword [rdx], ecx
mov dword [r10], r9d
mov dword [r15], r11d
mov ebp, dword [0x1400e3420]
mov r8, qword [0x1400eac90]
mov eax, dword [0x1400e3140]
mov rcx, qword [0x1400eaa40]
mov r9d, dword [0x1400e3200]
mov dword [r8], ebp
mov dword [rcx], eax
jmp 0x1400d995d