Function at 0x140005fb0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
lea rbp, [rsp - 0x47]
sub rsp, 0x90
movabs rcx, 0x60f8da218bfbc6dc
movabs rax, 0xd775c5dc6d3bb017
mov qword [rbp + 0x6f], rax
xor edx, edx
mov rax, qword [rbp + 0x6f]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x6f], rcx
mov rax, qword [rbp + 0x6f]
mov qword [rbp - 0x11], rax
movabs rax, 0xd775c5902a71e75b
mov qword [rbp + 0x6f], rax
mov rax, qword [rbp + 0x6f]
mov qword [rbp - 9], rax
mov qword [rbp + 0x6f], rcx
lea rcx, [rbp - 0x19]
mov rax, qword [rbp + 0x6f]
movdqa xmm0, xmmword [rbp - 0x19]
mov qword [rbp - 1], rax
xorps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp - 0x19], xmm0
call qword [sym.imp.USER32.dll_FindWindowA]
xorps xmm0, xmm0
mov dword [rbp - 9], Ordinal_27
mov rbx, rax
lea rcx, [rbp - 9]
xor eax, eax
mov dword [rbp + 0xb], eax
movups xmmword [rbp - 5], xmm0
call qword [sym.imp.USER32.dll_GetCursorInfo]
xor esi, esi
test eax, eax
je 0x140006075
cmp dword [rbp - 1], 0xc350
mov edx, esi
mov ecx, esi
setg dl
cmp dword [rbp - 1], 0x186a0
setl cl
test ecx, edx
je 0x14000607f
add rsp, 0x90
pop rsi
pop rbx
pop rbp
ret
cmp byte [rbp + 0x67], sil
jne 0x140006656
test rbx, rbx
je 0x140006656
cmp byte [0x1401d80ce], sil
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x78], r15
je 0x140006167
mov ecx, dword [0x1401d80d8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140006167
call qword [sym.imp.USER32.dll_GetForegroundWindow]
lea rcx, [rbp + 0x67]
mov rbx, rax
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rbp + 0x6b]
mov edx, 0x201
movzx ecx, word [rbp + 0x67]
mov r8d, 1
shl r9d, 0x10
or r9, rcx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r9d, word [rbp + 0x6b]
xor r8d, r8d
movzx eax, word [rbp + 0x67]
mov edx, 0x202
shl r9d, 0x10
mov rcx, rbx
or r9, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx r9d, word [rbp + 0x6b]
mov edx, 0x204
movzx eax, word [rbp + 0x67]
mov r8d, 2
shl r9d, 0x10
mov rcx, rbx
or r9, rax
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r9d, word [rbp + 0x6b]
xor r8d, r8d
movzx eax, word [rbp + 0x67]
mov edx, 0x205
shl r9d, 0x10
mov rcx, rbx
or r9, rax
call qword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [0x1401d80dc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movabs r15, 0x7ffffffffd050f7f
movabs r14, 0x7fffffffffffffff
movzx edi, ax
shr di, 0xf
cmp byte [0x1401d80f3], sil
je 0x1400062c5
mov ecx, dword [0x1401d80dc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400062c5
movzx eax, word [reloc.WLDAP32.dll_Ordinal_50]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], 1
mov word [rbp - 1], ax
mov qword [rbp + 3], rsi
mov word [rbp + 1], si
lea ecx, [r8 - 0x27]
mov qword [rbp + 0xf], rsi
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, Ordinal_45
mov dword [rbp + 3], 2
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ebx, dword [0x1401883a0]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], esi
mov dword [rbp + 0xb], 8
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, Ordinal_45
mov dword [rbp + 0xb], reloc.WS2_32.dll_recv
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
cmp byte [0x1401d80cd], sil
je 0x140006278
lea rcx, [rbp + 0x77]
call fcn.140005490
mov rax, qword [rbp + 0x77]
cmp rax, r15
jge 0x14000626b
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x14000626f
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.14002aff0
movzx eax, word [0x140188384]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], 1
mov word [rbp - 1], ax
mov qword [rbp + 3], rsi
mov word [rbp + 1], si
lea ecx, [r8 - 0x27]
mov qword [rbp + 0xf], rsi
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, Ordinal_45
mov dword [rbp + 3], 2
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
cmp byte [0x1401d80cc], sil
je 0x140006504
cmp byte [0x1401d80f3], sil
je 0x140006504
mov ecx, dword [0x1401d80e8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140006504
movzx eax, word [reloc.WLDAP32.dll_Ordinal_50]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], 1
mov word [rbp - 1], ax
mov qword [rbp + 3], rsi
mov word [rbp + 1], si
lea ecx, [r8 - 0x27]
mov qword [rbp + 0xf], rsi
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, Ordinal_45
mov dword [rbp + 3], 2
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ebx, dword [0x1401883a0]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], esi
mov dword [rbp + 0xb], 8
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, Ordinal_45
mov dword [rbp + 0xb], reloc.WS2_32.dll_recv
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, 0xe6
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401d80e8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400063eb
mov ebx, dword [0x1401884e0]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], esi
mov dword [rbp + 0xb], 8
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, Ordinal_45
mov dword [rbp + 0xb], reloc.WS2_32.dll_recv
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, 0x122
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1401d80e8]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000644e
mov ebx, dword [0x1401884e0]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], esi
mov dword [rbp + 0xb], 8
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, Ordinal_45
mov dword [rbp + 0xb], reloc.WS2_32.dll_recv
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
cmp byte [0x1401d80cd], sil
je 0x140006482
lea rcx, [rbp + 0x7f]
call fcn.140005490
mov rax, qword [rbp + 0x7f]
cmp rax, r15
jge 0x140006475
add rax, 0x2faf080
mov qword [rbp + 0x67], rax
jmp 0x140006479
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.14002aff0
movzx eax, word [0x140188384]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], 1
mov word [rbp - 1], ax
mov qword [rbp + 3], rsi
mov word [rbp + 1], si
lea ecx, [r8 - 0x27]
mov qword [rbp + 0xf], rsi
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, Ordinal_45
mov dword [rbp + 3], 2
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
lea rcx, [rbp - 0x29]
call fcn.140005490
mov rax, qword [rbp - 0x29]
movabs rcx, 0x7ffffffff70f2e7f
cmp rax, rcx
jge 0x1400064f7
add rax, 0x8f0d180
mov qword [rbp + 0x67], rax
jmp 0x1400064fb
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.14002aff0
cmp byte [0x1401d80cf], sil
mov r15, qword [rsp + 0x78]
je 0x14000660c
mov ecx, dword [0x1401d80fc]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000660c
movzx eax, word [0x140188394]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], 1
mov word [rbp - 1], ax
mov qword [rbp + 3], rsi
mov word [rbp + 1], si
lea ecx, [r8 - 0x27]
mov qword [rbp + 0xf], rsi
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, Ordinal_45
mov dword [rbp + 3], 2
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ebx, dword [0x1401884d0]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], esi
mov dword [rbp + 0xb], 8
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, Ordinal_45
mov dword [rbp + 0xb], reloc.WS2_32.dll_recv
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
movzx eax, word [0x140188384]
lea rdx, [rbp - 9]
mov r8d, Ordinal_45
mov dword [rbp - 9], 1
mov word [rbp - 1], ax
mov qword [rbp + 3], rsi
mov word [rbp + 1], si
lea ecx, [r8 - 0x27]
mov qword [rbp + 0xf], rsi
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, Ordinal_45
mov dword [rbp + 3], 2
lea rdx, [rbp - 9]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
test dil, dil
mov rdi, qword [rsp + 0x88]
je 0x14000664e
lea rcx, [rbp - 0x21]
call fcn.140005490
mov rax, qword [rbp - 0x21]
movabs rcx, 0x7ffffffff4143dff
cmp rax, rcx
jge 0x140006641
add rax, 0xbebc200
mov qword [rbp + 0x67], rax
jmp 0x140006645
mov qword [rbp + 0x67], r14
lea rcx, [rbp + 0x67]
call fcn.14002aff0
mov r14, qword [rsp + 0x80]
add rsp, 0x90
pop rsi
pop rbx
pop rbp
ret