Function at 0x1400013f0
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x60], rax
lea rdx, str.En_attente_de_frappes_au_clavier__Appuyez_sur_q_pour_quitter_...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400017b0
mov rcx, rax
lea rdx, [0x140001980]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r12d, 0xffff8001
movabs r14, 0xefff07fffffe03ff
movabs r15, 0x3e0000007f
xor r13d, r13d
mov ebx, 8
mov ecx, ebx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cmp ax, r12w
jne 0x140001642
lea eax, [rbx - 0x30]
cmp eax, 0x3f
ja 0x140001487
bt r14, rax
jb 0x1400014a0
lea eax, [rbx - 0xba]
cmp eax, 0x25
ja 0x140001642
bt r15, rax
jae 0x140001642
cmp ebx, 0xd
jne 0x1400014d3
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0xf
mov word [rsp + 0x38], 0xa
lea rcx, [rsp + 0x38]
call fcn.1400011c0
nop
jmp 0x14000151c
cmp ebx, 8
jne 0x140001560
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 3
mov qword [rsp + 0x50], 0xf
mov eax, dword [0x140003534]
mov word [rsp + 0x38], ax
movzx eax, byte [0x140003536]
mov byte [rsp + 0x3a], al
mov byte [rsp + 0x3b], 0
lea rcx, [rsp + 0x38]
call fcn.1400011c0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x140001559
inc rdx
mov rcx, qword [rsp + 0x38]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140001554
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001715
call fcn.140001a9c
inc ebx
jmp 0x140001467
cmp ebx, 0x1b
je 0x140001675
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
movzx edi, ax
shr edi, 0xf
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetKeyState]
movzx esi, ax
and sil, 1
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetKeyboardState]
xor edx, edx
mov ecx, ebx
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
mov edx, eax
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x60]
mov ecx, ebx
call qword [sym.imp.USER32.dll_ToAscii]
and dil, 1
je 0x140001655
test sil, sil
je 0x14000165e
movsx ecx, byte [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], 1
mov qword [rsp + 0x50], 0xf
movzx eax, al
mov byte [rsp + 0x38], al
mov byte [rsp + 0x39], 0
lea rcx, [rsp + 0x38]
call fcn.1400011c0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x140001642
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000163d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000166e
call fcn.140001a9c
inc ebx
cmp ebx, 0xff
jle 0x140001467
jmp 0x140001462
test sil, sil
je 0x1400015cd
movsx ecx, byte [rsp + 0x30]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
jmp 0x1400015d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov ecx, 0x20
call fcn.140001a60
mov rdx, rax
mov qword [rsp + 0x38], rax
movdqa xmm0, xmmword [0x140003560]
movdqu xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [str.Vous_avez_quitt_le_programme.]
movups xmmword [rax], xmm1
movsd xmm0, qword [0x140003548]
movsd qword [rax + 0x10], xmm0
mov ecx, dword [0x140003550]
mov dword [rax + 0x18], ecx
movzx eax, word [0x140003554]
mov word [rdx + 0x1c], ax
movzx eax, byte [0x140003556]
mov byte [rdx + 0x1e], al
mov byte [rdx + 0x1f], 0
lea rcx, [rsp + 0x38]
call fcn.1400011c0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x140001721
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000171c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000171c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140001a9c
xor eax, eax
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.140001a40
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret