Function at 0x140005da0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r14
sub rsp, 0x160
mov rax, qword [0x14000e040]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov ebp, edx
mov rdi, rcx
mov qword [rsp + 0x28], rcx
xor esi, esi
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetKeyboardState]
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
movzx ebx, ax
shr ebx, 0xf
and bl, 1
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetKeyState]
movzx r14d, ax
and r14b, 1
mov ecx, 0xa5
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140005e29
mov ecx, 0xa2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140005e29
mov dl, 1
jmp 0x140005e2b
xor dl, dl
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x14000b5a0]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], sil
lea eax, [rbp - 0x41]
cmp eax, 0x19
ja 0x140005eb5
test r14b, r14b
je 0x140005eab
test bl, bl
jne 0x140005eaf
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x14000b5b0]
movsx eax, bpl
movzx eax, al
mov byte [rsp + 0x30], al
mov byte [rsp + 0x31], 0
movups xmm2, xmmword [rsp + 0x30]
movups xmmword [rdi], xmm2
movups xmmword [rdi + 0x10], xmm1
mov rax, rdi
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.140009ac0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
test bl, bl
jne 0x140005e57
add bpl, 0x20
jmp 0x140005e57
cmp ebp, 0x30
jb 0x140005ebf
cmp ebp, 0x39
jbe 0x140005e57
add ebp, 0xfffffff8
cmp ebp, 0xd6
ja case.0x140005ee5.10
lea r8, [0x140000000]
movzx eax, byte [r8 + rbp + 0x64dc]
mov ecx, dword [r8 + rax*4 + 0x647c]
add rcx, r8
jmp rcx
lea rax, [0x14000b4a8]
lea r14, [0x14000b4ac]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140005f10
movabs rbp, 0x7fffffffffffffff
cmp rbx, rbp
ja 0x14000646d
cmp rbx, 0xf
jbe 0x140006338
mov rcx, rbx
or rcx, 0xf
cmp rcx, rbp
jbe 0x140005f53
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005f89
mov rbp, rcx
mov eax, 0x16
cmp rcx, rax
cmovb rbp, rax
lea rcx, [rbp + 1]
test rcx, rcx
je 0x1400063bc
cmp rcx, 0x1000
jb 0x1400063b4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006473
mov rcx, rax
call fcn.140009ae0
test rax, rax
je 0x1400063ad
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400063bc
test dl, dl
je 0x140005fb8
lea r14, str.__23______.__
jmp 0x140005fcc
lea rax, [0x14000b4b4]
lea r14, [0x14000b4b8]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140005fe0
movabs rbp, 0x7fffffffffffffff
cmp rbx, rbp
ja 0x14000646d
cmp rbx, 0xf
ja 0x140005f37
jmp 0x140006338
test dl, dl
je 0x140006019
lea r14, [0x14000b4bc]
jmp 0x14000602d
lea rax, [0x14000b4c0]
lea r14, [0x14000b4c4]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140006040
jmp 0x140005fea
lea rax, [0x14000b4c8]
lea r14, [0x14000b4cc]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140006072
jmp 0x140005fea
lea rax, [0x14000b4d0]
lea r14, [0x14000b4d4]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x1400060b0
jmp 0x140005fea
lea rax, [0x14000b4d8]
lea r14, [0x14000b4dc]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r14 + rbx], 0
jne 0x1400060e5
jmp 0x140005fea
lea rax, [0x14000b4b4]
lea r14, [0x14000b4e0]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140006120
movabs rbp, 0x7fffffffffffffff
cmp rbx, rbp
ja 0x14000646d
cmp rbx, 0xf
ja 0x140005f37
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
jmp 0x140005e80
lea rax, [0x14000b4e4]
lea r14, [0x14000b4e8]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140006190
movabs rbp, 0x7fffffffffffffff
cmp rbx, rbp
ja 0x14000646d
cmp rbx, 0xf
jbe 0x140006147
mov rcx, rbx
or rcx, 0xf
cmp rcx, rbp
jbe 0x1400061cf
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400061fd
mov rbp, rcx
mov eax, 0x16
cmp rcx, rax
cmovb rbp, rax
lea rcx, [rbp + 1]
test rcx, rcx
je 0x140006224
cmp rcx, 0x1000
jb 0x14000621c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006473
mov rcx, rax
call fcn.140009ae0
test rax, rax
je 0x1400063ad
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140006224
call fcn.140009ae0
mov rsi, rax
mov qword [rdi], rsi
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], rbp
mov r8, rbx
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rsi], 0
jmp 0x140005e80
lea rax, [0x14000b4ec]
lea r14, [0x14000b4f0]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140006270
jmp 0x140005fea
lea rax, [0x14000b4f4]
lea r14, [0x14000b4f8]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r14 + rbx], 0
jne 0x1400062a5
jmp 0x140005fea
lea rax, [0x14000b4fc]
lea r14, [0x14000b500]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x1400062e0
jmp 0x140005fea
lea rax, [0x14000b504]
lea r14, [0x14000b508]
test bl, bl
cmovne r14, rax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rsi
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [r14 + rbx], 0
jne 0x140006315
movabs rbp, 0x7fffffffffffffff
cmp rbx, rbp
ja 0x14000646d
cmp rbx, 0xf
ja 0x14000635b
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
jmp 0x140005e80
mov rcx, rbx
or rcx, 0xf
cmp rcx, rbp
jbe 0x14000637a
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005f89
mov rbp, rcx
mov eax, 0x16
cmp rcx, rax
cmovb rbp, rax
lea rcx, [rbp + 1]
test rcx, rcx
je 0x1400063bc
cmp rcx, 0x1000
jb 0x1400063b4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006473
jmp 0x140005f89
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140009ae0
mov rsi, rax
mov qword [rdi], rsi
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], rbp
mov r8, rbx
mov rdx, r14
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rbx], 0
jmp 0x140005e80
mov rcx, rdi
call fcn.1400065c0
jmp 0x140005e80
mov rcx, rdi
call fcn.140006840
jmp 0x140005e80
mov rcx, rdi
call fcn.140006ca0
jmp 0x140005e80
mov rcx, rdi
call fcn.140006a10
jmp 0x140005e80
mov rcx, rdi
call fcn.140006f20
jmp 0x140005e80
mov rcx, rdi
call fcn.140007170
jmp 0x140005e80
mov rcx, rdi
call fcn.1400073c0
jmp 0x140005e80
mov rcx, rdi
call fcn.140007640
jmp 0x140005e80
mov rcx, rdi
call fcn.1400077e0
jmp 0x140005e80
mov rcx, rdi
call fcn.1400079a0
jmp 0x140005e80
mov rcx, rdi
call fcn.140007b60
jmp 0x140005e80
call fcn.140001200
int3
call fcn.140001160
int3