Function at 0x140011267
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x140015730
push rbp
push rdi
sub rsp, 0xe8
lea rbp, [rsp + 0x20]
lea rcx, [0x1400220f2]
call fcn.140011366
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0xae
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0xaf
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0xad
call qword [sym.imp.USER32.dll_keybd_event]
xor eax, eax
cmp eax, 1
je 0x140015e54
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x1400157fb
mov cl, 0x75
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x96
test eax, eax
je 0x1400157fb
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x2c
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x2c
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015867
mov cl, 0x31
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x82
test eax, eax
je 0x140015867
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x70
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x70
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x1400158d3
mov cl, 0x32
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x83
test eax, eax
je 0x1400158d3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x71
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x71
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x14001593f
mov cl, 0x33
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x84
test eax, eax
je 0x14001593f
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x72
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x72
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x1400159ab
mov cl, 0x34
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x85
test eax, eax
je 0x1400159ab
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x73
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x73
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015a17
mov cl, 0x35
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x86
test eax, eax
je 0x140015a17
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x74
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x74
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015a83
mov cl, 0x36
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x87
test eax, eax
je 0x140015a83
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x75
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x75
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015aef
mov cl, 0x37
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x88
test eax, eax
je 0x140015aef
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x76
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x76
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015b5b
mov cl, 0x38
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x89
test eax, eax
je 0x140015b5b
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x77
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x77
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015bc7
mov cl, 0x39
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x8a
test eax, eax
je 0x140015bc7
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x78
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x78
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015c33
mov cl, 0x30
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x8b
test eax, eax
je 0x140015c33
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x79
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x79
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015c9f
mov cl, 0x2d
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x8c
test eax, eax
je 0x140015c9f
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x7a
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x7a
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015d0b
mov cl, 0x3d
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x8d
test eax, eax
je 0x140015d0b
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0x7b
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0x7b
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015d77
mov cl, 0x78
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xad
test eax, eax
je 0x140015d77
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0xae
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0xae
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015de3
mov cl, 0x63
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xae
test eax, eax
je 0x140015de3
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0xaf
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0xaf
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0x1200
test eax, eax
je 0x140015e4f
mov cl, 0x76
call qword [sym.imp.USER32.dll_VkKeyScanA]
cwde
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xaf
test eax, eax
je 0x140015e4f
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, 1
xor edx, edx
mov cl, 0xad
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov cl, 0xad
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140015784
lea rsp, [rbp + 0xc8]
pop rdi
pop rbp
ret