Function at 0x140085960
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x180]
sub rsp, 0x280
mov rax, qword [0x140157bc8]
xor rax, rsp
mov qword [rbp + 0x170], rax
xor edi, edi
mov rax, qword [0x14015d1e8]
cmp byte [rax + 0x5f90], dil
je 0x140085e13
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x70], xmm0
lea r8d, [rdi + 2]
lea rdx, [0x14011b674]
lea rcx, [rsp + 0x60]
call fcn.140010320
mov dword [rbp - 0x80], reloc.WS2_32.dll_WSASetLastError
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rdi
lea r8d, [rdi + 2]
lea rdx, [0x14011b684]
lea rcx, [rbp - 0x78]
call fcn.140010320
mov dword [rbp - 0x58], WSAStartup
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x40], xmm1
lea r8d, [rdi + 2]
lea rdx, [0x14011b694]
lea rcx, [rbp - 0x50]
call fcn.140010320
mov dword [rbp - 0x30], WSAStartup
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x10], rdi
lea r8d, [rdi + 2]
lea rdx, [0x14011b6a4]
lea rcx, [rbp - 0x28]
call fcn.140010320
mov dword [rbp - 8], reloc.WS2_32.dll_WSAStartup
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x10], xmm1
lea r8d, [rdi + 2]
lea rdx, [0x14011b6b4]
lea rcx, [rbp]
call fcn.140010320
mov dword [rbp + 0x20], reloc.WS2_32.dll_WSACleanup
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x40], rdi
lea r8d, [rdi + 2]
lea rdx, [0x14011b6c4]
lea rcx, [rbp + 0x28]
call fcn.140010320
mov dword [rbp + 0x48], 0x75
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x60], xmm1
lea r8d, [rdi + 2]
lea rdx, [0x14011b6d4]
lea rcx, [rbp + 0x50]
call fcn.140010320
mov dword [rbp + 0x70], 0x76
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], rdi
mov qword [rbp + 0x90], rdi
lea r8d, [rdi + 2]
lea rdx, [0x14011b6e4]
lea rcx, [rbp + 0x78]
call fcn.140010320
mov dword [rbp + 0x98], 0x77
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0xb0], xmm1
lea r8d, [rdi + 2]
lea rdx, [0x14011b6f4]
lea rcx, [rbp + 0xa0]
call fcn.140010320
mov dword [rbp + 0xc0], 0x78
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], rdi
mov qword [rbp + 0xe0], rdi
lea r8d, [rdi + 3]
lea rdx, [0x14011b704]
lea rcx, [rbp + 0xc8]
call fcn.140010320
mov dword [rbp + 0xe8], 0x79
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x100], xmm1
lea r8d, [rdi + 3]
lea rdx, [0x14011b714]
lea rcx, [rbp + 0xf0]
call fcn.140010320
mov dword [rbp + 0x110], 0x7a
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rdi
mov qword [rbp + 0x130], rdi
lea r8d, [rdi + 3]
lea rdx, [0x14011b724]
lea rcx, [rbp + 0x118]
call fcn.140010320
mov dword [rbp + 0x138], 0x7b
lea rax, [rsp + 0x60]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x140]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x160]
call fcn.14007a500
nop
lea r9, [fcn.1400059a0]
lea edx, [rdi + 0x28]
lea r8d, [rdi + 0xc]
lea rcx, [rsp + 0x60]
call fcn.1400fe95c
mov r13, qword [rbp + 0x160]
mov rbx, qword [r13 + 8]
mov r14, r13
mov r15, qword [0x14015c458]
mov rsi, qword [0x14015c450]
mov r12, qword [0x14015c440]
cmp byte [rbx + 0x19], dil
jne 0x140085cc4
nop dword [rax + rax]
lea rdx, [0x14015c440]
cmp r15, 0x10
cmovae rdx, r12
lea rcx, [rbx + 0x20]
cmp qword [rbx + 0x38], 0x10
jb 0x140085c7e
mov rcx, qword [rbx + 0x20]
mov rdi, qword [rbx + 0x30]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140085ca9
cmp rdi, rsi
jae 0x140085ca1
mov eax, 0xffffffff
jmp 0x140085ca9
xor eax, eax
cmp rdi, rsi
seta al
shr eax, 0x1f
test al, al
je 0x140085cb6
mov rbx, qword [rbx + 0x10]
jmp 0x140085cbc
mov r14, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140085c60
xor edi, edi
cmp byte [r14 + 0x19], 0
jne 0x140085deb
lea rdx, [r14 + 0x20]
cmp qword [r14 + 0x38], 0x10
jb 0x140085cde
mov rdx, qword [r14 + 0x20]
lea rcx, [0x14015c440]
cmp r15, 0x10
cmovae rcx, r12
mov rbx, qword [r14 + 0x30]
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140085d15
cmp rsi, rbx
jae 0x140085d10
mov eax, 0xffffffff
jmp 0x140085d15
mov eax, edi
seta al
shr eax, 0x1f
test al, al
jne 0x140085deb
cmp r14, r13
je 0x140085deb
lea rdx, [0x14015c440]
lea rcx, [rbp + 0x160]
call fcn.14007c600
mov ecx, dword [rax]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
jae 0x140085de4
mov qword [rsp + 0x50], reloc.WLDAP32.dll_Ordinal_200
lea rcx, [rsp + 0x50]
call fcn.14001afa0
mov rcx, qword [0x14015b978]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x19
jb 0x140085e43
lea rax, [0x14015b968]
cmp qword [0x14015b980], 0x10
cmovae rax, qword [0x14015b968]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], Ordinal_27
lea r9, str.actioninput_ntext_pull
lea r8, [0x14015b968]
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x140]
call fcn.140005790
mov r9d, 2
lea r8, [rbp + 0x140]
xor edx, edx
mov rcx, qword [0x14015d1e8]
call fcn.1400971f0
mov r13, qword [rbp + 0x160]
mov r8, qword [r13 + 8]
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0x160]
call fcn.140077770
mov edx, 0x48
mov rcx, qword [rbp + 0x160]
call fcn.1400fe780
mov rcx, qword [rbp + 0x170]
xor rcx, rsp
call fcn.1400fe8a0
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140005a90
nop
int3