Function at 0x14004edd0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
push rsi
push rdi
push r14
sub rsp, 0x90
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rbp, r9
movaps xmm7, xmm2
mov r14, rdx
mov rbx, rcx
xor edi, edi
mov dword [rax - 0x68], edi
mov rsi, qword [0x140101f08]
mov rax, qword [rsi + 0x3ea8]
mov byte [rax + 0x98], 1
mov rax, qword [rsi + 0x3ea8]
cmp byte [rax + 0x9b], dil
je 0x14004ee2b
xor al, al
jmp 0x14004f0f6
movsxd r8, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
call fcn.140010470
cmp dword [rsi + 0x3edc], eax
jne 0x14004ee63
mov r8, rbx
mov edx, 0xb
mov ecx, eax
call fcn.140025f90
mov rsi, qword [0x140101f08]
mov rcx, rbx
cmp rbx, 0xffffffffffffffff
jae 0x14004ee8d
nop dword [rax]
movzx edx, byte [rcx]
test dl, dl
je 0x14004ee8d
lea rax, [rcx + 1]
cmp dl, 0x23
jne 0x14004ee84
cmp byte [rax], dl
je 0x14004ee8d
mov rcx, rax
cmp rax, 0xffffffffffffffff
jb 0x14004ee70
movss xmm6, dword [0x1400ebd64]
cmp rbx, rcx
je 0x14004eecb
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rbx
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x1400ebd44]
movss xmm2, dword [rsi + 0x3c18]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsi + 0x3c10]
call fcn.140036720
xor edx, edx
lea r8d, [rdx + 1]
mov rcx, rbx
call fcn.14003a210
movaps xmm1, xmm6
movaps xmm0, xmm7
call fcn.14001e3e0
mov rbx, qword [0x140101f08]
mov dword [rsp + 0x48], 0x15
movups xmm0, xmmword [rbx + 0x3a10]
movups xmmword [rsp + 0x4c], xmm0
lea rcx, [rbx + 0x4020]
lea rdx, [rsp + 0x48]
call fcn.1400267d0
mov qword [rbx + 0x3a10], rdi
mov qword [rbx + 0x3a18], rdi
mov edx, dword [r14]
test edx, edx
jne 0x14004ef2e
lea rax, [0x14008d900]
jmp 0x14004ef4a
lea rcx, [rsp + 0x48]
call fcn.140059fe0
nop
or edi, 1
mov dword [rsp + 0x40], edi
cmp qword [rax + 0x18], 0xf
jbe 0x14004ef4a
mov rax, qword [rax]
mov rdx, rbp
mov rcx, rax
call fcn.14003b210
nop
test dil, 1
je 0x14004efaf
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x14004ef9c
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ef97
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ef97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14008227c
movdqa xmm0, xmmword [0x1400ebdc0]
movdqu xmmword [rsp + 0x58], xmm0
mov byte [rsp + 0x48], 0
mov r8, qword [0x140101f08]
movsxd rax, dword [r8 + 0x4020]
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4028]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x38c
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8], xmm0
dec dword [r8 + 0x4020]
mov rcx, qword [r8 + 0x3ea8]
cmp byte [r8 + 0x40fb], 0
je 0x14004f031
cmp byte [r8 + 0x40fa], 0
jne 0x14004f031
test byte [r8 + 0x3f74], 4
jne 0x14004f0f4
mov eax, dword [r8 + 0x40c0]
cmp eax, dword [r8 + 0x3f70]
jne 0x14004f0f4
test eax, eax
je 0x14004f0f4
jmp 0x14004f0d0
mov eax, dword [r8 + 0x3f78]
test al, 1
je 0x14004f0f4
cmp qword [r8 + 0x3eb0], rcx
je 0x14004f051
test al, al
jns 0x14004f0f4
mov eax, dword [r8 + 0x3ef4]
test eax, eax
je 0x14004f078
cmp eax, dword [r8 + 0x3f70]
je 0x14004f078
cmp byte [r8 + 0x3f01], 0
jne 0x14004f078
cmp eax, dword [rcx + 0x5c]
jne 0x14004f0f4
mov rax, qword [r8 + 0x40b8]
test rax, rax
je 0x14004f0b1
mov rax, qword [rax + 0x360]
test rax, rax
je 0x14004f0b1
cmp byte [rax + 0x97], 0
je 0x14004f0b1
cmp rax, qword [rcx + 0x360]
je 0x14004f0b1
mov edx, dword [rax + 0xc]
bt edx, 0x1b
jb 0x14004f0f4
bt edx, 0x1a
jb 0x14004f0f4
test byte [r8 + 0x3f74], 4
jne 0x14004f0f4
mov eax, dword [rcx + 0x5c]
cmp dword [r8 + 0x3f70], eax
jne 0x14004f0d0
cmp byte [rcx + 0x98], 0
jne 0x14004f0f4
mov ebx, 4
cmp ebx, 0x1b
je 0x14004f0ea
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14004f0ea
mov dword [r14], ebx
inc ebx
cmp ebx, 0xe7
jle 0x14004f0d5
mov al, 1
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [rsp + 0x70]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret