Function at 0x180005070
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0x58
mov r12, qword [0x180168840]
movabs rdi, 0x7ffffffeefff
mov dword [rsp + 0x98], 0x461c3c00
lea rax, [r12 + 0x2165fa8]
cmp rax, rdi
ja 0x1800050b0
mov r12, qword [r12 + 0x2166fa8]
jmp 0x1800050b3
xor r12d, r12d
mov qword [rsp + 0xa8], r14
mov qword [rsp + 0x50], r15
call fcn.180004740
mov rbx, qword [0x180168a28]
xor r13d, r13d
sub rbx, qword [0x180168a20]
xor ebp, ebp
sar rbx, 4
xor r11d, r11d
mov qword [rsp + 0xa0], r13
movabs rsi, 0xfffffffffffffff
test rbx, rbx
je 0x180005175
cmp rbx, rsi
ja 0x180005556
shl rbx, 4
cmp rbx, 0x1000
jb 0x180005135
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180005550
call fcn.18003b870
test rax, rax
je 0x180005549
lea rbp, [rax + 0x27]
and rbp, 0xffffffffffffffe0
mov qword [rbp - 8], rax
jmp 0x180005145
test rbx, rbx
je 0x180005145
mov rcx, rbx
call fcn.18003b870
mov rbp, rax
mov rdx, qword [0x180168a20]
lea r13, [rbx + rbp]
mov rbx, qword [0x180168a28]
mov rcx, rbp
sub rbx, rdx
mov qword [rsp + 0xa0], r13
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
and rbx, 0xfffffffffffffff0
lea r11, [rbx + rbp]
cmp rbp, r11
je 0x1800052f5
sub r11, rbp
xor r10d, r10d
sar r11, 4
test r11, r11
je 0x1800052f5
mov r9, qword [0x180168840]
xor eax, eax
nop word [rax + rax]
add rax, rax
mov r8, qword [rbp + rax*8]
test r8, r8
je 0x1800052e6
mov dword [rsp + 0x90], 0x40408a89
lea rbx, [r9 + 0xb943e30]
mov eax, dword [rsp + 0x90]
mov edx, 0x5b0
nop
mov dword [r8 + 0x26c], 2
cmp rbx, rdi
ja 0x180005273
mov rcx, qword [r9 + 0xb944e30]
mov dword [rdx + rcx - 0x68], eax
mov dword [r8 + 0x26c], 2
mov rcx, qword [r9 + 0xb944e30]
mov dword [rdx + rcx - 0x34], eax
mov dword [r8 + 0x26c], 2
mov rcx, qword [r9 + 0xb944e30]
mov dword [rcx + rdx], eax
mov dword [r8 + 0x26c], 2
mov rcx, qword [r9 + 0xb944e30]
mov dword [rcx + rdx + 0x34], eax
mov dword [r8 + 0x26c], 2
mov rcx, qword [r9 + 0xb944e30]
mov dword [rcx + rdx + 0x68], eax
mov dword [r8 + 0x26c], 2
mov rcx, qword [r9 + 0xb944e30]
mov dword [rcx + rdx + 0x9c], eax
mov dword [r8 + 0x26c], 2
mov rcx, qword [r9 + 0xb944e30]
jmp 0x1800052cb
mov dword [rdx - 0x68], eax
xor ecx, ecx
mov dword [r8 + 0x26c], 2
mov dword [rdx - 0x34], eax
mov dword [r8 + 0x26c], 2
mov dword [rdx], eax
mov dword [r8 + 0x26c], 2
mov dword [rdx + 0x34], eax
mov dword [r8 + 0x26c], 2
mov dword [rdx + 0x68], eax
mov dword [r8 + 0x26c], 2
mov dword [rdx + 0x9c], eax
mov dword [r8 + 0x26c], 2
mov dword [rdx + rcx + 0xd0], eax
add rdx, 0x16c
cmp rdx, 0x9f4
jl 0x1800051d0
inc r10d
mov eax, r10d
cmp rax, r11
jb 0x1800051a0
call fcn.180004ba0
mov rbx, qword [0x180168a48]
xor edi, edi
sub rbx, qword [0x180168a40]
xor r15d, r15d
sar rbx, 4
xor r14d, r14d
test rbx, rbx
je 0x180005390
cmp rbx, rsi
ja 0x18000555c
shl rbx, 4
cmp rbx, 0x1000
jb 0x180005358
lea rcx, [rbx + 0x27]
cmp rcx, rbx
jbe 0x180005550
call fcn.18003b870
test rax, rax
je 0x180005549
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180005368
test rbx, rbx
je 0x180005368
mov rcx, rbx
call fcn.18003b870
mov rdi, rax
mov rdx, qword [0x180168a40]
lea r14, [rbx + rdi]
mov rbx, qword [0x180168a48]
mov rcx, rdi
sub rbx, rdx
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
and rbx, 0xfffffffffffffff0
lea r15, [rbx + rdi]
cmp rdi, r15
je 0x1800054bf
sub r15, rdi
xor esi, esi
sar r15, 4
test r15, r15
je 0x1800054bf
movaps xmmword [rsp + 0x40], xmm6
xor eax, eax
xorps xmm6, xmm6
movabs r13, 0x7ffffffeefff
nop
add rax, rax
mov rbx, qword [rdi + rax*8]
test rbx, rbx
je 0x1800054a5
cmp rbx, r12
je 0x1800054a5
lea rax, [rbx - 0xcd8]
cmp rax, r13
ja 0x1800053ee
mov r8d, dword [rbx + 0x328]
jmp 0x1800053f1
xor r8d, r8d
mov rcx, r12
call fcn.180001230
cmp r8d, eax
je 0x1800054a5
mov rdx, r12
mov rcx, rbx
call fcn.180004d80
cmp byte [0x180166919], 0
je 0x1800054a5
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x18000543a
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800054a5
mov r9d, esi
lea r8, [rsp + 0x98]
mov rdx, rbx
mov rcx, r12
call fcn.180003b30
mov rbx, rax
test rax, rax
je 0x1800054a5
mov r8, rax
lea rcx, [rsp + 0x20]
mov rdx, r12
call fcn.180003d80
movss xmm0, dword [rsp + 0x20]
ucomiss xmm0, xmm6
je 0x1800054a5
movss xmm1, dword [rsp + 0x24]
ucomiss xmm1, xmm6
je 0x1800054a5
mov eax, dword [rsp + 0x28]
lea r8, [rsp + 0x30]
unpcklps xmm0, xmm1
mov rdx, rbx
mov rcx, r12
movsd qword [rsp + 0x20], xmm0
movsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], eax
call fcn.1800044a0
inc esi
mov eax, esi
cmp rax, r15
jb 0x1800053c0
movaps xmm6, xmmword [rsp + 0x40]
mov r13, qword [rsp + 0xa0]
test rdi, rdi
je 0x1800054f7
sub r14, rdi
and r14, 0xfffffffffffffff0
cmp r14, 0x1000
jb 0x1800054ec
mov rcx, qword [rdi - 8]
add r14, 0x27
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x180005549
mov rdi, rcx
mov rdx, r14
mov rcx, rdi
call fcn.18003bc24
test rbp, rbp
je 0x18000552f
sub r13, rbp
and r13, 0xfffffffffffffff0
cmp r13, 0x1000
jb 0x180005524
mov rcx, qword [rbp - 8]
add r13, 0x27
sub rbp, rcx
lea rax, [rbp - 8]
cmp rax, 0x1f
ja 0x180005549
mov rbp, rcx
mov rdx, r13
mov rcx, rbp
call fcn.18003bc24
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0xa8]
add rsp, 0x58
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180001170
int3
call fcn.180009f60
int3
call fcn.180009f60
int3