Function at 0x140002330
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov r14d, edx
mov rbx, rcx
mov qword [rsp + 0x48], rcx
xor edi, edi
mov dword [rsp + 0x40], edi
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_GetKeyboardState]
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
movzx esi, ax
shr esi, 0xf
and sil, 1
mov ecx, 0x14
call qword [sym.imp.USER32.dll_GetKeyState]
movzx r15d, ax
and r15b, 1
mov ecx, 0xa5
call qword [sym.imp.USER32.dll_GetKeyState]
movzx ecx, ax
shr ecx, 0xf
and cl, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movdqa xmm2, xmmword [0x140007570]
movdqu xmmword [rsp + 0x60], xmm2
mov byte [rsp + 0x50], dil
lea eax, [r14 - 0x41]
cmp eax, 0x19
ja 0x140002436
test r15b, r15b
je 0x1400023de
test sil, sil
je 0x1400023e7
jmp 0x1400023e3
test sil, sil
jne 0x1400023e7
add r14b, 0x20
movups xmmword [rsp + 0x50], xmm0
movdqa xmm2, xmmword [0x140007580]
movsx eax, r14b
movzx eax, al
mov byte [rsp + 0x50], al
mov byte [rsp + 0x51], 0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbx], xmm1
movups xmmword [rbx + 0x10], xmm2
mov rax, rbx
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140005c70
mov rbx, qword [rsp + 0x1c0]
add rsp, 0x180
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
cmp r14d, 0x30
jb 0x140002442
cmp r14d, 0x39
jbe 0x1400023e7
test cl, cl
je 0x140002522
add r14d, 0xffffff45
cmp r14d, 0x23
ja case.0x14000254d.10
lea rdx, [0x140000000]
movzx eax, byte [rdx + r14 + 0x2c48]
mov ecx, dword [rdx + rax*4 + 0x2c2c]
add rcx, rdx
jmp rcx
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 1
mov qword [rbx + 0x18], 0xf
mov word [rbx], 0x5f
jmp 0x140002410
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 1
mov qword [rbx + 0x18], 0xf
mov word [rbx], 0x2b
jmp 0x140002410
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 2
mov qword [rbx + 0x18], 0xf
mov word [rbx], 0x7b5b
mov byte [rbx + 2], 0
jmp 0x140002410
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 1
mov qword [rbx + 0x18], 0xf
mov word [rbx], 0x7c
jmp 0x140002410
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 1
mov qword [rbx + 0x18], 0xf
mov word [rbx], 0x5d
jmp 0x140002410
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], 1
mov qword [rbx + 0x18], 0xf
mov word [rbx], 0x27
jmp 0x140002410
add r14d, 0xfffffff8
cmp r14d, 0xd6
ja case.0x14000254d.10
lea rdx, [0x140000000]
movzx eax, byte [rdx + r14 + 0x2cd0]
mov ecx, dword [rdx + rax*4 + 0x2c6c]
add rcx, rdx
jmp rcx
lea rax, [0x1400074a8]
lea rdx, [0x1400074ac]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074b0]
lea rdx, [0x1400074b4]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074b8]
lea rdx, [0x1400074bc]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074c0]
lea rdx, [0x1400074c4]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x14000749c]
lea rdx, [0x1400074c8]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074cc]
lea rdx, [0x1400074a0]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074b0]
lea rdx, [0x1400074a4]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074d0]
lea rdx, [0x140007458]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, str._:__23_____
lea rdx, [0x1400074d4]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074d8]
lea rdx, [0x1400074dc]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
lea rax, [0x1400074e0]
lea rdx, [0x14000745c]
test sil, sil
cmovne rdx, rax
mov rcx, rbx
call fcn.140001870
jmp 0x140002410
test sil, sil
je 0x1400026d3
lea rax, [0x1400074e4]
jmp 0x1400026f1
lea rcx, [rsp + 0x20]
call fcn.140002db0
nop
mov edi, 2
mov dword [rsp + 0x40], edi
cmp qword [rax + 0x18], 0xf
jbe 0x1400026f1
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
or edi, 1
test dil, 2
je 0x140002410
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140002f50
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002765
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.1400031e0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400027cd
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.1400033b0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002835
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140003640
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000289d
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.1400033b0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002905
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.1400038c0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x14000296d
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140003b10
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1400029d5
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140003d60
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002a3d
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140003ff0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002aa5
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140004190
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002b0d
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140004350
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002b75
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x20]
call fcn.140004510
nop
cmp qword [rax + 0x18], 0xf
jbe 0x140002bd5
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140001870
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002410
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005ff8
jmp 0x140002410