Function at 0x1400794d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x70
mov rax, qword [0x14012f0c0]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14007951c
mov eax, dword [0x1401feba8]
test eax, eax
jle 0x140079543
dec eax
mov dword [0x1401feba8], eax
jmp 0x140079543
mov ecx, Ordinal_41
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140079543
movsxd rcx, dword [0x1401feba8]
cmp rcx, qword [0x1401ff550]
jae 0x140079543
inc ecx
mov dword [0x1401feba8], ecx
mov ecx, reloc.WLDAP32.dll_Ordinal_46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea r14, [0x1401fea88]
test al, 1
je 0x1400795c6
movsxd rsi, dword [0x1401feba8]
mov rdx, rsi
lea rbx, [0x1401ff540]
mov rdi, qword [0x1401ff550]
cmp rsi, rdi
jae 0x1400795bb
mov rax, rdi
sub rax, rdx
mov r9d, 1
cmp rax, r9
cmovb r9, rax
mov rcx, rbx
cmp qword [0x1401ff558], 0x10
cmovae rcx, qword [0x1401ff540]
add rcx, rdx
sub rdi, r9
mov r8, rdi
sub r8, rdx
inc r8
lea rdx, [rcx + r9]
call sub.VCRUNTIME140.dll_memmove
mov qword [0x1401ff550], rdi
mov dword [0x1401feba0], esi
jmp 0x14007972e
mov ecx, 8
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140079654
lea rbx, [0x1401ff540]
mov esi, dword [0x1401feba8]
mov rdi, qword [0x1401ff550]
test esi, esi
jle 0x140079649
lea eax, [rsi - 1]
mov esi, eax
movsxd rdx, eax
cmp rdi, rdx
jb 0x1400797e1
mov rax, rdi
sub rax, rdx
mov r9d, 1
cmp rax, r9
cmovb r9, rax
mov rcx, rbx
cmp qword [0x1401ff558], 0x10
cmovae rcx, qword [0x1401ff540]
add rcx, rdx
sub rdi, r9
mov r8, rdi
sub r8, rdx
inc r8
lea rdx, [rcx + r9]
call sub.VCRUNTIME140.dll_memmove
mov qword [0x1401ff550], rdi
mov dword [0x1401feba8], esi
mov dword [0x1401feba0], esi
jmp 0x14007972e
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14007970f
lea rcx, [rsp + 0x48]
call fcn.140079200
nop
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0x10
setae bpl
mov rsi, qword [rsp + 0x48]
cmovae rcx, rsi
lea rbx, [0x1401ff540]
mov rdi, qword [rsp + 0x58]
test rdi, rdi
jne 0x1400796a8
mov r8, rdi
lea rdx, [0x1400e7f11]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400796f7
mov rax, qword [0x1401ff550]
cmp rax, 0x20
jae 0x1400796f7
movsxd rdx, dword [0x1401feba8]
dec rax
mov rcx, rbx
cmp rdx, rax
jae 0x1400796dd
lea r8, [rsp + 0x48]
test bpl, bpl
cmovne r8, rsi
mov r9, rdi
call fcn.14001bcb0
jmp 0x1400796f1
lea rdx, [rsp + 0x48]
test bpl, bpl
cmovne rdx, rsi
mov r8, rdi
call fcn.1400137c0
inc dword [0x1401feba8]
lea rcx, [rsp + 0x48]
call fcn.1400075d0
mov eax, dword [0x1401feba8]
mov dword [0x1401feba0], eax
jmp 0x140079727
mov eax, dword [0x1401feba8]
mov dword [0x1401feba0], eax
lea rbx, [0x1401ff540]
cmp r14, rbx
je 0x14007974c
mov rdi, qword [0x1401ff550]
mov rdx, rbx
cmp qword [0x1401ff558], 0x10
cmovae rdx, qword [0x1401ff540]
mov r8, rdi
mov rcx, r14
call fcn.140013660
mov rcx, qword [0x1401ff550]
inc rcx
call fcn.1400d51d0
cmp qword [0x1401ff558], 0x10
cmovae rbx, qword [0x1401ff540]
mov rdx, rax
sub rdx, rbx
movzx ecx, byte [rbx]
mov byte [rdx + rbx], cl
lea rbx, [rbx + 1]
test cl, cl
jne 0x140079771
mov qword [rsp + 0x40], 0
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ecx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
mov r9d, 8
mov r8, rax
xor edx, edx
lea rcx, [0x14011a480]
call fcn.140065160
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400d4e20
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
call fcn.140014600
int3