Function at 0x140035f90
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x138]
sub rsp, 0x200
movaps xmmword [rax - 0x48], xmm6
mov rax, qword [0x14006f010]
xor rax, rsp
mov qword [rbp + 0xe0], rax
mov r15, r9
mov rbx, rdx
mov r14, qword [rbp + 0x178]
mov rax, qword [rbp + 0x180]
mov qword [rsp + 0x68], rax
xor edi, edi
test edx, edx
jne 0x140036085
mov rax, rdx
shr rax, 0x20
test eax, eax
jne 0x140036085
mov rdx, qword [r9 + 0x18]
cmp rdx, 0x10
jb 0x140036035
inc rdx
mov rcx, qword [r9]
cmp rdx, 0x1000
jb 0x140036030
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140036bb7
mov rcx, r8
call fcn.1400643f0
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], dil
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14003607e
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140036079
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140036bb7
mov rcx, r8
call fcn.1400643f0
xor eax, eax
jmp 0x140036b76
mov eax, dword [rbp + 0x14c]
add eax, 0x5a
mov dword [rsp + 0x60], eax
lea r8d, [rax + 6]
lea eax, [rdx + 0x37]
mov dword [rsp + 0x64], eax
mov edx, dword [0x14006ff48]
mov r10d, dword [0x14006ff50]
cmp edx, r10d
jl 0x1400360f7
cmp edx, dword [0x14006ff58]
jg 0x1400360f7
mov ecx, dword [0x14006ff4c]
mov r9d, dword [0x14006ff54]
cmp ecx, r9d
jl 0x1400360f7
cmp ecx, dword [0x14006ff5c]
jg 0x1400360f7
sub edx, r10d
cmp edx, eax
jl 0x1400360f7
add eax, 0xe6
cmp edx, eax
jg 0x1400360f7
sub ecx, r9d
cmp ecx, r8d
jl 0x1400360f7
lea eax, [r8 + 5]
cmp ecx, eax
mov r13d, 1
jle 0x1400360fa
mov r13d, edi
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x14006ff28]
jne 0x140036204
test r13d, r13d
je 0x140036166
mov ecx, 0x25
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x14003613d
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x25
call qword [sym.imp.USER32.dll_keybd_event]
dec dword [0x14006ff74]
jmp 0x140036166
mov ecx, 0x27
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140036166
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
mov cl, 0x27
call qword [sym.imp.USER32.dll_keybd_event]
inc dword [0x14006ff74]
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140036191
test r13d, r13d
je 0x140036191
cmp dword [0x14007008c], edi
jne 0x140036199
mov dword [0x14007008c], 1
jmp 0x140036199
cmp dword [0x14007008c], edi
je 0x1400361e6
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x1400361e6
mov eax, dword [0x14006ff48]
sub eax, dword [0x14006ff50]
sub eax, ebx
sub eax, 0x36
imul ecx, eax, 0x64
mov eax, 0x473c1ab7
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [0x14006ff64], 1
mov dword [0x14006ff68], 1
jmp 0x14003620a
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jb 0x140036204
mov dword [0x14007008c], edi
mov dword [0x14006ff68], edi
mov edx, dword [0x14006ff74]
movd xmm0, edx
cvtdq2ps xmm0, xmm0
divss xmm0, dword [0x140069104]
mulss xmm0, dword [0x140069140]
cvttss2si r12d, xmm0
mov eax, 0xe6
cmp r12d, eax
jl 0x140036235
mov r12d, eax
jmp 0x14003623c
test r12d, r12d
cmovle r12d, edi
test edx, edx
jg 0x140036248
mov dword [0x14006ff74], edi
jmp 0x140036258
mov eax, 0x64
cmp edx, eax
cmovge edx, eax
mov dword [0x14006ff74], edx
xor edx, edx
mov r8d, 0xf8
lea rcx, [rbp - 0x60]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140068f78]
mov qword [rbp - 0x60], rax
lea rax, [0x140068ea0]
mov qword [rbp - 0x50], rax
lea rcx, [rbp + 0x38]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
xor r8d, r8d
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64____ptr64]
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x48]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp - 0x48], rax
mov qword [rbp + 0x20], rdi
mov dword [rbp + 0x28], edi
mov edx, 4
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setprecision_long_long___int64__]
mov rsi, rax
lea rdx, [0x1400068f0]
lea rcx, [rbp - 0x50]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rdi, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rdx, qword [rsi + 8]
call qword [rsi]
mov edx, dword [0x14006ff74]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14006ff74]
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
xor edi, edi
mov qword [rsp + 0x50], rdi
mov edx, dword [rsp + 0x60]
add edx, 5
lea ecx, [rbx + 0x36]
mov word [rbp + 0xce], di
mov word [rbp + 0xde], di
mov dword [rbp - 0x70], edi
mov dword [rbp - 0x6c], 1
mov eax, edi
shr rax, 0x20
movzx r8d, al
shl r8d, 8
mov dword [rbp + 0xc0], ecx
mov dword [rbp + 0xc4], edx
lea eax, [rcx + 0xe8]
mov dword [rbp + 0xd0], eax
lea eax, [rdx + 7]
mov dword [rbp + 0xd4], eax
movzx ecx, r8b
shl cx, 8
mov word [rbp + 0xc8], cx
mov word [rbp + 0xca], r8w
mov eax, r8d
shr eax, 0x10
shl ax, 8
mov word [rbp + 0xcc], ax
mov word [rbp + 0xd8], cx
mov word [rbp + 0xda], r8w
mov word [rbp + 0xdc], ax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp - 0x70]
lea r8d, [rdi + 2]
lea rdx, [rbp + 0xc0]
mov rcx, qword [0x14006ff40]
call qword [sym.imp.MSIMG32.dll_GradientFill]
test r13d, r13d
jne 0x140036535
cmp dword [0x14007008c], edi
jne 0x140036535
mov eax, 0x66666667
imul dword [0x14006ff14]
mov r9d, edx
sar r9d, 1
mov eax, r9d
shr eax, 0x1f
add r9d, eax
mov dword [rbp + 0xc0], r9d
mov eax, 0x66666667
imul dword [0x14006ff18]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0xc4], edx
mov dword [rsp + 0x50], 0x14
mov dword [rsp + 0x54], 0x14
mov word [rbp + 0xae], di
mov word [rbp + 0xbe], di
mov dword [rbp - 0x70], edi
mov dword [rbp - 0x6c], 1
mov rax, qword [rsp + 0x50]
shr rax, 0x20
movzx ecx, al
shl ecx, 8
or ecx, 0x140014
mov rax, qword [rbp + 0xc0]
shr rax, 0x20
movzx r8d, al
shl r8d, 8
mov eax, 0x66666667
imul dword [0x14006ff1c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dl
shl eax, 0x10
or r8d, eax
movzx eax, r9b
or r8d, eax
mov esi, dword [rsp + 0x64]
mov r13d, dword [rsp + 0x60]
lea edi, [r13 + 6]
lea eax, [rsi + 0xe6]
mov dword [rbp + 0xb0], eax
lea eax, [rdi + 5]
mov dword [rbp + 0xb4], eax
movzx eax, cl
shl ax, 8
mov word [rbp + 0xa8], ax
movzx eax, cx
mov edx, 0xff00
and ax, dx
mov word [rbp + 0xaa], ax
shr ecx, 0x10
shl cx, 8
mov word [rbp + 0xac], cx
movzx eax, r8b
shl ax, 8
mov word [rbp + 0xb8], ax
movzx eax, r8w
and ax, dx
shr r8d, 0x10
shl r8w, 8
mov word [rbp + 0xbc], r8w
jmp 0x140036651
mov eax, dword [0x14006ff14]
cdq
and edx, 3
lea r8d, [rdx + rax]
sar r8d, 2
mov dword [rbp + 0xc0], r8d
mov eax, dword [0x14006ff18]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbp + 0xc4], eax
mov dword [rsp + 0x50], 0x1e
mov dword [rsp + 0x54], 0x1e
mov word [rbp + 0xae], di
mov word [rbp + 0xbe], di
mov dword [rbp - 0x70], edi
mov dword [rbp - 0x6c], 1
mov rax, qword [rsp + 0x50]
shr rax, 0x20
movzx r9d, al
shl r9d, 8
or r9d, 0x1e001e
mov rax, qword [rbp + 0xc0]
shr rax, 0x20
movzx r10d, al
shl r10d, 8
mov eax, dword [0x14006ff1c]
cdq
and edx, 3
add eax, edx
sar eax, 2
movzx ecx, al
shl ecx, 0x10
or r10d, ecx
movzx eax, r8b
or r10d, eax
mov esi, dword [rsp + 0x64]
mov r13d, dword [rsp + 0x60]
lea edi, [r13 + 6]
lea eax, [rsi + 0xe6]
mov dword [rbp + 0xb0], eax
lea eax, [rdi + 5]
mov dword [rbp + 0xb4], eax
movzx eax, r9b
shl ax, 8
mov word [rbp + 0xa8], ax
movzx eax, r9w
mov ecx, 0xff00
and ax, cx
mov word [rbp + 0xaa], ax
shr r9d, 0x10
shl r9w, 8
mov word [rbp + 0xac], r9w
movzx eax, r10b
shl ax, 8
mov word [rbp + 0xb8], ax
movzx eax, r10w
and ax, cx
shr r10d, 0x10
shl r10w, 8
mov word [rbp + 0xbc], r10w
mov dword [rbp + 0xa4], edi
mov dword [rbp + 0xa0], esi
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
mov word [rbp + 0xba], ax
lea r9, [rbp - 0x70]
mov r8d, 2
lea rdx, [rbp + 0xa0]
mov rcx, qword [0x14006ff40]
call qword [sym.imp.MSIMG32.dll_GradientFill]
mov eax, 0x66666667
imul dword [0x14006ff14]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [rbp + 0xc0], edx
mov eax, 0x66666667
imul dword [0x14006ff18]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov dword [rbp + 0xc4], edx
mov eax, 0x66666667
imul dword [0x14006ff1c]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
mov dword [rbp + 0xc8], edx
movups xmm0, xmmword [0x14006ff14]
movaps xmmword [rsp + 0x50], xmm0
movd xmm6, r12d
cvtdq2ps xmm6, xmm6
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140070bc8], eax
jle 0x140036739
lea rcx, [0x140070bc8]
call fcn.140064550
cmp dword [0x140070bc8], 0xffffffff
jne 0x140036739
movss dword [0x140070ae0], xmm6
lea rcx, [0x140070bc8]
call fcn.1400644f0
movss xmm1, dword [0x140070ae0]
comiss xmm6, xmm1
jbe 0x140036758
subss xmm6, xmm1
divss xmm6, dword [0x140068fc0]
addss xmm1, xmm6
jmp 0x140036770
comiss xmm1, xmm6
jbe 0x140036778
movaps xmm0, xmm1
subss xmm0, xmm6
divss xmm0, dword [0x140068fc0]
subss xmm1, xmm0
movss dword [0x140070ae0], xmm1
xor eax, eax
movd xmm0, eax
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
ja 0x140036797
mov ecx, 0xe6
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm1, xmm0
jbe 0x1400367a2
movss dword [0x140070ae0], xmm0
movaps xmm1, xmm0
mov word [rbp + 0xae], ax
mov word [rbp + 0xbe], ax
mov dword [rbp - 0x70], eax
mov dword [rbp - 0x6c], 1
movzx ecx, byte [rsp + 0x54]
shl ecx, 8
movzx eax, byte [rsp + 0x58]
shl eax, 0x10
or ecx, eax
movzx eax, byte [rsp + 0x50]
or ecx, eax
movzx edx, byte [rbp + 0xc4]
shl edx, 8
movzx eax, byte [rbp + 0xc8]
shl eax, 0x10
or edx, eax
movzx eax, byte [rbp + 0xc0]
or edx, eax
mov dword [rbp + 0xa0], esi
mov dword [rbp + 0xa4], edi
cvttss2si eax, xmm1
add eax, esi
mov dword [rbp + 0xb0], eax
lea eax, [rdi + 5]
mov dword [rbp + 0xb4], eax
movzx eax, cl
shl ax, 8
mov word [rbp + 0xa8], ax
movzx eax, cx
mov r9d, 0xff00
and ax, r9w
mov word [rbp + 0xaa], ax
shr ecx, 0x10
shl cx, 8
mov word [rbp + 0xac], cx
movzx eax, dl
shl ax, 8
mov word [rbp + 0xb8], ax
movzx eax, dx
and ax, r9w
mov word [rbp + 0xba], ax
shr edx, 0x10
shl dx, 8
mov word [rbp + 0xbc], dx
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 1
lea r9, [rbp - 0x70]
mov r8d, 2
lea rdx, [rbp + 0xa0]
mov rcx, qword [0x14006ff40]
call qword [sym.imp.MSIMG32.dll_GradientFill]
movdqa xmm0, xmmword [0x140069220]
movdqa xmmword [rsp + 0x50], xmm0
mov r12d, 0x190
lea rdx, [0x14006fef0]
lea rcx, [rsp + 0x70]
call fcn.140031d30
mov rdi, rax
mov rdx, r15
lea rcx, [rbp + 0xa0]
call fcn.140031d30
mov r9, rax
lea r8d, [r13 - 9]
lea edx, [rbx + 0x38]
mov word [rsp + 0x38], r12w
movzx ecx, word [0x14006ff10]
mov word [rsp + 0x30], cx
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.14000b660
mov rax, qword [rsp + 0x68]
movaps xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [0x14006fef0]
lea rcx, [rsp + 0x70]
call fcn.140031d30
mov rdi, rax
mov rdx, r15
lea rcx, [rbp + 0xa0]
call fcn.140031d30
mov r9, rax
lea r8d, [r13 - 0xa]
mov word [rsp + 0x38], r12w
movzx ecx, word [0x14006ff10]
mov word [rsp + 0x30], cx
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov edx, esi
call fcn.14000b660
movdqa xmm0, xmmword [0x1400692b0]
movdqa xmmword [rsp + 0x50], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
movdqa xmm1, xmmword [0x1400691c0]
movdqu xmmword [rbp + 0xb0], xmm1
mov byte [rbp + 0xa0], 0
movups xmmword [rbp + 0xc0], xmm0
mov ecx, dword [rbp + 0x28]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x1400369c4
mov rax, qword [rbp - 8]
mov r8, qword [rax]
test r8, r8
je 0x1400369c4
mov rax, qword [rbp - 0x28]
mov rdx, qword [rax]
cmp r8, qword [rbp + 0x20]
cmovb r8, qword [rbp + 0x20]
sub r8, rdx
jmp 0x1400369f9
test cl, 4
jne 0x1400369eb
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
test rcx, rcx
je 0x1400369eb
mov rax, qword [rbp - 0x30]
mov rdx, qword [rax]
mov rax, qword [rbp + 8]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x1400369f9
mov r8, qword [rbp + 0xc8]
mov rdx, qword [rbp + 0xc0]
test rdx, rdx
je 0x140036a0a
lea rcx, [rbp + 0xa0]
call fcn.140032480
mov rdx, r14
lea rcx, [rbp + 0xa0]
call fcn.140031c00
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
lea r8d, [r13 + 2]
lea edx, [rbx + 0x127]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
call fcn.14000b880
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140036aac
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036aa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036aa7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400643f0
mov ebx, dword [0x14006ff74]
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x48]
call fcn.140031a30
lea rcx, [rbp - 0x40]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x38]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x140036b2f
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x140036b2a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140036bb7
mov rcx, r8
call fcn.1400643f0
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], dil
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140036b74
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140036b6f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140036bb7
mov rcx, r8
call fcn.1400643f0
mov eax, ebx
mov byte [r14], dil
mov qword [r14 + 0x18], 0xf
mov qword [r14 + 0x10], rdi
mov rcx, qword [rbp + 0xe0]
xor rcx, rsp
call fcn.1400643d0
mov rbx, qword [rsp + 0x240]
movaps xmm6, xmmword [rsp + 0x1f0]
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3