Function at 0x140052a80
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
sub rsp, 0x200
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400e9060]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
movabs rax, 0x8cbfe5642774f212
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp], rax
movabs r9, 0xc8198be35cc967ac
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 8], rax
movabs r8, 0x8cda961642029653
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
movabs rax, 0xc5b4fe700353a160
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x10], rax
movabs rax, 0xc8198be35cc93e9f
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x10], xmm0
movabs rax, 0xb9bba02e2767f537
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x60], rax
movabs rax, 0xfc28b3d464ac02ce
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x68], rax
movabs rax, 0x5a66050d9c037044
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x70], rax
movabs rax, 0x848840e54d7b3171
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x78], rax
movabs rax, 0xcae3bbba0feaa274
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x80], rax
movabs rax, 0x81116b56b01ddb14
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x88], rax
movabs rax, 0xb0d61bc533cf191e
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x90], rax
movabs rax, 0xa51e77d270957dbd
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x98], rax
movabs rdx, 0xfd9d278e0676197b
mov qword [rbp + 0x100], rdx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0xa0], rax
movabs rcx, 0xf323583bc783c3f4
mov qword [rbp + 0x100], rcx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x148], rax
movabs rax, 0x6f573638ac651425
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x150], rax
movabs rax, 0xb5bc26d5284e0546
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x158], rax
movabs rax, 0xfa858c823ed39417
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x160], rax
movabs rax, 0xe326536fd57cbd70
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x168], rax
movabs rax, 0xd3b328a40bf62829
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x170], rax
movabs rax, 0x902c46e111a34c8a
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x100], rdx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x100], rcx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x188], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vpxor xmm0, xmm0, xmmword [rbp + 0x180]
vmovdqa xmmword [rbp + 0xa0], xmm0
movabs rax, 0x8cda96164202a062
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x118], rax
vmovdqa xmm0, xmmword [rbp + 0x20]
vpxor xmm0, xmm0, xmmword [rbp + 0x110]
vmovdqa xmmword [rbp + 0x20], xmm0
lea rax, [rbp]
mov rbx, 0xffffffffffffffff
mov r8, rbx
vzeroupper
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140052e90
lea rdx, [rbp]
lea rcx, [0x140138d50]
call fcn.140046bc0
lea rax, [rbp + 0x10]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140052eb1
lea rdx, [rbp + 0x10]
lea rcx, [0x140138d70]
call fcn.140046bc0
lea rax, [rbp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140052ed2
lea rdx, [rbp + 0x60]
lea rcx, [0x140138d90]
call fcn.140046bc0
lea rax, [rbp + 0x20]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140052ef0
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [0x140138db0]
call fcn.140046bc0
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rbp + 0xc0], rax
lea rax, [0x1400528b0]
mov qword [rbp + 0xc8], rax
lea rax, [rbp + 0xc0]
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xc0]
lea rcx, [0x140138d50]
call fcn.140069cf0
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
call fcn.140042b10
mov ecx, 1
call fcn.1400bbb48
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140067e10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140053191
cmp dword [rbp + 0x58], ebx
jne 0x140052fc3
lea ecx, [rbx + 1]
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x140052fe9
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
mov ecx, 1
call fcn.1400bbb48
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140067e40]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140053182
cmp dword [rbp + 0x48], 0
jne 0x14005303a
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x140053060
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
mov ecx, 1
call fcn.1400bbb48
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140067e70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140053173
cmp dword [rbp + 0x38], 0
jne 0x1400530b1
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x1400530d7
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
nop word [rax + rax]
mov ecx, dword [0x140138a84]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x1400530f5
call fcn.140047040
movss xmm1, dword [0x140136408]
movss xmm2, dword [0x140136400]
movss xmm3, dword [0x140136410]
movss xmm0, dword [0x1401363fc]
ucomiss xmm0, xmm3
jp 0x14005313a
jne 0x14005313a
movss xmm0, dword [0x1400e90b0]
ucomiss xmm0, xmm1
jp 0x14005313a
jne 0x14005313a
movss xmm0, dword [0x1400e90b4]
ucomiss xmm0, xmm2
jp 0x14005313a
je 0x140053157
movss dword [0x1401363fc], xmm3
movss dword [0x1400e90b0], xmm1
movss dword [0x1400e90b4], xmm2
call fcn.140042b10
mov qword [rbp + 0x100], 0xa
lea rcx, [rbp + 0x100]
call fcn.14005a930
jmp 0x1400530e0
mov dword [rbp + 0x38], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x48], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x58], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3