Function at 0x140001290
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x38
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400015f6
mov qword [rsp + 0x30], rbx
xor r9d, r9d
xor ebx, ebx
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
lea ecx, [rbx + 2]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400015f1
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
lea ecx, [rbx + 2]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000133e
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001373
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400013a8
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400013dd
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001412
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001447
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000147c
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400014b1
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400014e6
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000151b
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001550
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140001585
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400015ba
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400015ef
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_mouse_event]
mov edx, 0xc350
mov ecx, 0xd4a51000
call qword [sym.imp.KERNEL32.dll_Beep]
mov al, 1
mov rbx, qword [rsp + 0x30]
add rsp, 0x38
ret