Function at 0x140056010
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0x90
mov rax, qword [0x1401c6780]
xor rax, rsp
mov qword [rbp + 0x3f], rax
lea rcx, [rbp - 0x19]
call fcn.140054a80
mov rax, qword [rbp - 0x19]
movabs r14, 0x7ffffffffa0a1efe
movabs rsi, 0x7fffffffffffffff
cmp rax, r14
jg 0x140056061
add rax, 0x5f5e100
mov qword [rbp - 0x19], rax
jmp 0x140056065
mov qword [rbp - 0x19], rsi
lea rcx, [rbp - 0x19]
call fcn.140055b00
cmp byte [0x140218b24], 0
jne 0x1400563b6
mov rax, qword [0x140218aa8]
lea rdx, [rbp + 0x2f]
mov qword [rsp + 0xb0], rbx
lea rcx, [rbp - 0x19]
mov qword [0x140218b48], rax
mov rax, qword [0x140218a90]
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], r12
mov qword [rbp - 0x19], rax
mov qword [rsp + 0xc8], r15
call fcn.140073560
mov rax, qword [rbp + 0x2f]
lea rdx, [rbp - 0x19]
mov qword [0x140218b90], rax
lea rcx, [rbp + 0x2f]
mov rax, qword [0x140218a90]
mov qword [rbp + 0x2f], rax
call fcn.140073330
cmp byte [0x14021895e], 0
mov rax, qword [rbp - 0x19]
mov qword [0x140218b38], rax
mov byte [0x140218b24], 1
je 0x14005638f
xor edi, edi
lea r12, [0x140218da0]
movabs r15, 0x7ffffffffff0bdbe
nop word [rax + rax]
cmp byte [0x140218a75], dil
je 0x14005638f
mov ecx, dword [reloc.WS2_32.dll_accept]
test ecx, ecx
je 0x140056161
sub ecx, 1
je 0x140056149
cmp ecx, 1
jne 0x14005617f
mov byte [0x140213cc8], cl
jmp 0x14005617f
mov ecx, dword [0x140213cb8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
setne byte [0x140213cc8]
jmp 0x14005617f
mov ecx, dword [0x140213cb8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14005617f
cmp byte [0x140213cc8], dil
sete byte [0x140213cc8]
mov rax, qword [0x140218af8]
mov rcx, qword [0x140218b90]
add rcx, qword [reloc.WLDAP32.dll_Ordinal_200]
mov qword [0x140218b88], rax
lea rax, [rbp + 0x2f]
mov qword [rbp + 0x17], rax
mov rax, qword [0x140218d60]
mov qword [rbp + 0xf], rcx
mov qword [rbp - 1], 1
mov dword [rbp + 0xb], edi
mov ecx, dword [rax + 8]
mov qword [rbp + 0x1f], 8
mov dword [rbp + 7], ecx
test ecx, ecx
je 0x1400561d4
lea rcx, [rbp - 1]
call fcn.14008be70
mov rax, qword [rbp + 0x2f]
lea rdx, [rbp - 1]
mov qword [0x140218b80], rax
call fcn.14006da90
mov rbx, rax
cmp r12, rax
je 0x140056275
mov rcx, qword [0x140218da0]
test rcx, rcx
je 0x14005624a
mov rdx, qword [0x140218db0]
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140056233
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400563ce
mov rcx, r8
call fcn.1400f3d24
xorps xmm0, xmm0
mov qword [0x140218db0], rdi
movdqu xmmword [0x140218da0], xmm0
mov rax, qword [rbx]
mov qword [0x140218da0], rax
mov rax, qword [rbx + 8]
mov qword [0x140218da8], rax
mov rax, qword [rbx + 0x10]
mov qword [0x140218db0], rax
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
mov qword [rbx + 0x10], rdi
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x1400562b3
mov rdx, qword [rbp + 0xf]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x1400562ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400563ce
call fcn.1400f3d24
lea rdx, [rbp - 1]
lea rcx, [0x140218b88]
call fcn.140073180
cmp byte [0x140213cc8], dil
movups xmm0, xmmword [rax]
movups xmmword [0x140218b50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [0x140218b60], xmm1
mov ecx, dword [rax + 0x20]
mov dword [0x140218b70], ecx
movsd xmm0, qword [rax + 0x24]
movsd qword [0x140218b74], xmm0
mov eax, dword [rax + 0x2c]
mov dword [0x140218b7c], eax
mov rax, qword [0x140218b40]
mov qword [0x140218ad8], rax
je 0x140056347
lea rcx, [rbp + 0x37]
call fcn.1400566b0
mov rcx, qword [rbp + 0x37]
cmp qword [0x140218d38], rcx
je 0x140056329
call fcn.140056de0
lea rcx, [rbp - 0x11]
call fcn.140054a80
mov rax, qword [rbp - 0x11]
cmp rax, r15
jg 0x140056375
add rax, 0xf4240
mov qword [rbp - 0x19], rax
jmp 0x140056379
cmp qword [0x140218d38], rax
je 0x140056357
mov qword [0x140218b40], rdi
lea rcx, [rbp - 9]
call fcn.140054a80
mov rax, qword [rbp - 9]
cmp rax, r14
jg 0x140056375
add rax, 0x5f5e100
mov qword [rbp - 0x19], rax
jmp 0x140056379
mov qword [rbp - 0x19], rsi
lea rcx, [rbp - 0x19]
call fcn.140055b00
cmp byte [0x14021895e], dil
jne 0x140056120
mov r12, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xb0]
mov r15, qword [rsp + 0xc8]
mov byte [0x140218b24], 0
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400f3cc0
add rsp, 0x90
pop r14
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3