Function at 0x140050390
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
sub rsp, 0x200
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1400e6060]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
movabs rax, 0x8ab093af0910ac21
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp], rax
movabs r9, 0x2e552f5cfb8eaad6
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 8], rax
movabs r8, 0xb881f6c1607dd94d
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
movabs rax, 0xf4e5a0a9021cb524
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x10], rax
movabs rax, 0x2e552f5cfb8ef292
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x130], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x10], xmm0
movabs rax, 0xdee793f2554ebc79
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x60], rax
movabs rax, 0x4a361f3999ef9cb4
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x68], rax
movabs rax, 0x8e6e36902bc20a77
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x70], rax
movabs rax, 0x83b1f81108387039
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x78], rax
movabs rax, 0xfb3c7b414b035107
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x80], rax
movabs rax, 0x2fffbfa7f230ec8d
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x88], rax
movabs rax, 0xf63975ddd7287d33
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x90], rax
movabs rax, 0x58c0fe1339ecf89d
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x98], rax
movabs rdx, 0xefe60399e4734d95
mov qword [rbp + 0x100], rdx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0xa0], rax
movabs rcx, 0xf0818c5461871e9e
mov qword [rbp + 0x100], rcx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0xa8], rax
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x148], rax
movabs rax, 0xb65650a718a46947
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x150], rax
movabs rax, 0xe2829b223e094258
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x158], rax
movabs rax, 0xc3054e2528656861
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x160], rax
movabs rax, 0x4dc98990ca03d5ba
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x168], rax
movabs rax, 0xc50147bbef19490b
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x170], rax
movabs rax, 0x3ca698265dd9cffc
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x178], rax
mov qword [rbp + 0x100], rdx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x100], rcx
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x188], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm0, xmmword [rbp + 0xa0]
vpxor xmm0, xmm0, xmmword [rbp + 0x180]
vmovdqa xmmword [rbp + 0xa0], xmm0
movabs rax, 0xb881f6c1604df77c
mov qword [rbp + 0x100], rax
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x100], r8
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x100], r9
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x118], rax
vmovdqa xmm0, xmmword [rbp + 0x20]
vpxor xmm0, xmm0, xmmword [rbp + 0x110]
vmovdqa xmmword [rbp + 0x20], xmm0
lea rax, [rbp]
mov rbx, 0xffffffffffffffff
mov r8, rbx
vzeroupper
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400507a0
lea rdx, [rbp]
lea rcx, [0x140135cf0]
call fcn.140046440
lea rax, [rbp + 0x10]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400507c1
lea rdx, [rbp + 0x10]
lea rcx, [0x140135d10]
call fcn.140046440
lea rax, [rbp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400507e2
lea rdx, [rbp + 0x60]
lea rcx, [0x140135d30]
call fcn.140046440
lea rax, [rbp + 0x20]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140050800
mov r8, rbx
lea rdx, [rbp + 0x20]
lea rcx, [0x140135d50]
call fcn.140046440
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___void___void___.0
mov qword [rbp + 0xc0], rax
lea rax, [0x1400501c0]
mov qword [rbp + 0xc8], rax
lea rax, [rbp + 0xc0]
mov qword [rbp + 0xf8], rax
lea rdx, [rbp + 0xc0]
lea rcx, [0x140135cf0]
call fcn.140067990
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
call fcn.140042f00
mov ecx, 1
call fcn.1400b98e8
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x58]
mov qword [rsp + 0x28], rcx
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140065b70]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x140050aa1
cmp dword [rbp + 0x58], ebx
jne 0x1400508d3
lea ecx, [rbx + 1]
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x1400508f9
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
mov ecx, 1
call fcn.1400b98e8
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140065ba0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x40], rax
test rax, rax
je 0x140050a92
cmp dword [rbp + 0x48], 0
jne 0x14005094a
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x140050970
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
mov ecx, 1
call fcn.1400b98e8
mov qword [rbp + 0x100], rax
lea rcx, [rbp + 0x38]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x140065bd0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x30], rax
test rax, rax
je 0x140050a83
cmp dword [rbp + 0x38], 0
jne 0x1400509c1
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x110]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x1400509e7
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
nop
nop word [rax + rax]
mov ecx, dword [0x140135a5c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140050a05
call fcn.140046860
movss xmm1, dword [0x140133404]
movss xmm2, dword [0x140133400]
movss xmm3, dword [0x140133408]
movss xmm0, dword [0x1401333fc]
ucomiss xmm0, xmm3
jp 0x140050a4a
jne 0x140050a4a
movss xmm0, dword [0x1400e60b0]
ucomiss xmm0, xmm1
jp 0x140050a4a
jne 0x140050a4a
movss xmm0, dword [0x1400e60b4]
ucomiss xmm0, xmm2
jp 0x140050a4a
je 0x140050a67
movss dword [0x1401333fc], xmm3
movss dword [0x1400e60b0], xmm1
movss dword [0x1400e60b4], xmm2
call fcn.140042f00
mov qword [rbp + 0x100], 0xa
lea rcx, [rbp + 0x100]
call fcn.140058620
jmp 0x1400509f0
mov dword [rbp + 0x38], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x48], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0x58], ebx
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3