Function at 0x14000bb60
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x14011c028]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x30], r8
mov qword [rbp - 0x80], rdx
mov qword [rbp - 0x70], rcx
call fcn.14000b150
test al, al
je 0x14000bf59
mov byte [rsp + 0x60], 0xd
mov al, 0x60
mov cl, 0x52
mov dl, 0x64
mov r8b, 0x44
mov r9b, 0x49
mov r10b, 0x48
mov r11b, 0x63
mov bl, 0x79
movzx edi, r8b
movzx esi, r11b
mov r14b, 0x69
mov r15b, 0x68
mov r12b, 0x75
xor r13d, r13d
xor al, 0xd
mov byte [rsp + 0x61], al
xor cl, 0xd
mov byte [rsp + 0x62], cl
xor dl, 0xd
mov byte [rsp + 0x63], dl
xor r8b, 0xd
mov byte [rsp + 0x64], r8b
xor r9b, 0xd
mov byte [rsp + 0x65], r9b
xor r10b, 0xd
mov byte [rsp + 0x66], r10b
xor r11b, 0xd
mov byte [rsp + 0x67], r11b
xor bl, 0xd
mov byte [rsp + 0x68], bl
xor dil, 0xd
mov byte [rsp + 0x69], dil
xor sil, 0xd
mov byte [rsp + 0x6a], sil
xor r14b, 0xd
mov byte [rsp + 0x6b], r14b
xor r15b, 0xd
mov byte [rsp + 0x6c], r15b
xor r12b, 0xd
mov byte [rsp + 0x6d], r12b
mov byte [rsp + 0x6e], r13b
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
xor r14d, r14d
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], r14
lea rax, [rsp + 0x61]
mov rbx, 0xffffffffffffffff
mov r8, rbx
mov r13, qword [rsp + 0x30]
inc r8
cmp byte [rax + r8], r14b
jne 0x14000bc71
lea rdx, [rsp + 0x61]
lea rcx, [rsp + 0x38]
call fcn.14000b050
lea rdx, [rsp + 0x38]
lea rcx, [0x140164fc8]
call fcn.14000e100
mov rdi, rax
mov byte [rsp + 0x58], 0x10
mov cl, 0x66
mov dl, 0x71
mov r8b, 0x7c
mov r9b, 0x65
mov r10b, 0x75
xor eax, eax
xor cl, 0x10
mov byte [rsp + 0x59], cl
xor dl, 0x10
mov byte [rsp + 0x5a], dl
xor r8b, 0x10
mov byte [rsp + 0x5b], r8b
xor r9b, 0x10
mov byte [rsp + 0x5c], r9b
xor r10b, 0x10
mov byte [rsp + 0x5d], r10b
mov byte [rsp + 0x5e], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
lea rax, [rsp + 0x59]
inc rbx
cmp byte [rax + rbx], r14b
jne 0x14000bcf5
mov r8, rbx
lea rdx, [rsp + 0x59]
lea rcx, [rsp + 0x60]
call fcn.14000b050
lea rdx, [rsp + 0x60]
mov rcx, rdi
call fcn.14000e100
mov rcx, rax
call fcn.14000d1c0
movsxd rbx, eax
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
call fcn.140093a20
lea rdx, [rbx + rax]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x58]
mov rcx, qword [0x14012f2d8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov ebx, dword [rsp + 0x58]
test ebx, ebx
je 0x14000bf59
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp]
call fcn.140009e10
nop
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp - 0x60]
call fcn.140009d00
nop
mov eax, ebx
sar eax, 9
shl eax, 3
movsxd rcx, eax
mov rdx, qword [rbp + 8]
add rdx, 0x10
add rdx, rcx
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp - 0x80]
mov rcx, qword [0x14012f2d8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, ebx
and eax, 0x1ff
imul edx, eax, 0x78
add rdx, qword [rbp - 0x80]
mov qword [rsp + 0x20], r14
mov r9d, 8
lea r8, [rbp - 0x70]
mov rcx, qword [0x14012f2d8]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rax, qword [rbp - 0x70]
mov qword [rbp + 0x18], rax
mov qword [rbp - 0x48], rax
cmp ebx, 0xffffffff
je 0x14000be22
lea rcx, [rbp]
call fcn.140093930
test eax, eax
jle 0x14000be22
lea rcx, [rbp]
call fcn.140093930
cmp eax, 0x64
jg 0x14000be22
mov rcx, rdi
call fcn.140093b10
mov rbx, rax
lea rcx, [rbp - 0x60]
call fcn.1400933c0
cmp rax, rbx
je 0x14000be22
mov bl, 1
jmp 0x14000be24
xor bl, bl
cmp byte [0x140164f1c], 0
je 0x14000bf83
movsxd r8, dword [0x140164f20]
shl r8, 5
add r8, qword [0x140164f28]
lea rdx, [rsp + 0x60]
lea rcx, [0x140164f40]
call fcn.14000d440
mov rcx, qword [rax]
mov ecx, dword [rcx + 0x40]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14000bed0
test bl, bl
je 0x14000bed0
mov ecx, 8
call fcn.1400940d0
mov qword [rax], r13
mov qword [rbp - 0x80], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14000f310]
xor edx, edx
xor ecx, ecx
call fcn.1400a3850
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000c00a
cmp dword [rsp + 0x68], 0
je 0x14000bff1
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.140095844
test eax, eax
jne 0x14000bffc
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14000bf0b
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bf06
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c004
call fcn.140094370
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x14000bf59
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bf54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000bfeb
call fcn.140094370
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1400940b0
mov rbx, qword [rsp + 0x200]
add rsp, 0x1b0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test bl, bl
je 0x14000bed0
mov ecx, 8
call fcn.1400940d0
mov qword [rax], r13
mov qword [rbp - 0x80], rax
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x14000f310]
xor edx, edx
xor ecx, ecx
call fcn.1400a3850
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000c02d
cmp dword [rsp + 0x68], 0
je 0x14000c01a
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.140095844
test eax, eax
jne 0x14000c025
jmp 0x14000bed0
call fcn.1400a3d98
nop
mov ecx, 1
call fcn.140095750
int3
mov ecx, eax
call fcn.140095714
nop
call fcn.1400a3d98
nop
mov dword [rsp + 0x68], r14d
mov ecx, 6
call fcn.140095750
nop
mov ecx, 1
call fcn.140095750
int3
mov ecx, eax
call fcn.140095714
nop
mov dword [rsp + 0x68], r14d
mov ecx, 6
call fcn.140095750
int3