Function at 0x14005bc10
Capabilities:
Get keyboard layout
Log keystrokes via polling

Disassembly:
mov byte [rsp + 0x20], r9b
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x39d8
call fcn.14033cab0
sub rsp, rax
mov rax, qword [0x140462680]
xor rax, rsp
mov qword [rsp + 0x39c0], rax
call fcn.14001c7c0
test rax, rax
jne 0x14005bc54
xor eax, eax
jmp 0x14005c24c
call fcn.14001c970
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.14005c2a0
nop
movzx eax, byte [rsp + 0x39f8]
test eax, eax
je 0x14005bfa2
mov rax, qword [rsp + 0x39e8]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
sub rax, 0x201
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0xd
ja case.default.0x14005bcb9
lea rax, [0x140000000]
mov rcx, qword [rsp + 0x70]
mov ecx, dword [rax + rcx*4 + 0x5c264]
add rcx, rax
jmp rcx
mov dword [rsp + 0x58], 0
cmp qword [rsp + 0x39e8], 0x201
je 0x14005bcdf
cmp qword [rsp + 0x39e8], 0x203
jne 0x14005bce7
mov dword [rsp + 0x58], 0
cmp qword [rsp + 0x39e8], 0x204
je 0x14005bd03
cmp qword [rsp + 0x39e8], 0x206
jne 0x14005bd0b
mov dword [rsp + 0x58], 1
cmp qword [rsp + 0x39e8], 0x207
je 0x14005bd27
cmp qword [rsp + 0x39e8], 0x209
jne 0x14005bd2f
mov dword [rsp + 0x58], 2
cmp qword [rsp + 0x39e8], 0x20b
je 0x14005bd4b
cmp qword [rsp + 0x39e8], 0x20d
jne 0x14005bd82
mov rax, qword [rsp + 0x39f0]
mov eax, dword [rax + 8]
shr rax, 0x10
and rax, 0xffff
movzx eax, ax
cmp eax, 1
jne 0x14005bd72
mov dword [rsp + 0x60], 3
jmp 0x14005bd7a
mov dword [rsp + 0x60], 4
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x58], eax
call fcn.14002af70
movzx eax, al
test eax, eax
jne 0x14005bda7
call qword [sym.imp.USER32.dll_GetCapture]
test rax, rax
jne 0x14005bda7
mov rcx, qword [rsp + 0x39e0]
call qword [sym.imp.USER32.dll_SetCapture]
movsxd rax, dword [rsp + 0x58]
mov byte [rsp + rax + 0xe64], 1
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0xd0]
call fcn.140015480
mov rax, qword [rsp + 0x80]
jmp 0x14005c24c
mov dword [rsp + 0x5c], 0
cmp qword [rsp + 0x39e8], 0x202
jne 0x14005bdf8
mov dword [rsp + 0x5c], 0
cmp qword [rsp + 0x39e8], 0x205
jne 0x14005be0e
mov dword [rsp + 0x5c], 1
cmp qword [rsp + 0x39e8], 0x208
jne 0x14005be24
mov dword [rsp + 0x5c], 2
cmp qword [rsp + 0x39e8], 0x20c
jne 0x14005be66
mov rax, qword [rsp + 0x39f0]
shr rax, 0x10
and rax, 0xffff
movzx eax, ax
cmp eax, 1
jne 0x14005be56
mov dword [rsp + 0x64], 3
jmp 0x14005be5e
mov dword [rsp + 0x64], 4
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x5c], eax
movsxd rax, dword [rsp + 0x5c]
mov byte [rsp + rax + 0xe64], 0
call fcn.14002af70
movzx eax, al
test eax, eax
jne 0x14005be95
call qword [sym.imp.USER32.dll_GetCapture]
cmp rax, qword [rsp + 0x39e0]
jne 0x14005be95
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov qword [rsp + 0x88], 0
lea rcx, [rsp + 0xd0]
call fcn.140015480
mov rax, qword [rsp + 0x88]
jmp 0x14005c24c
mov rax, qword [rsp + 0x39f0]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax + 8]
shr rax, 0x10
and rax, 0xffff
cwde
cvtsi2ss xmm0, eax
divss xmm0, dword [0x14043018c]
movss xmm1, dword [rsp + 0xe6c]
addss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rsp + 0xe6c], xmm0
mov qword [rsp + 0x98], 0
lea rcx, [rsp + 0xd0]
call fcn.140015480
mov rax, qword [rsp + 0x98]
jmp 0x14005c24c
mov rax, qword [rsp + 0x39f0]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov eax, dword [rax + 8]
shr rax, 0x10
and rax, 0xffff
cwde
cvtsi2ss xmm0, eax
divss xmm0, dword [0x14043018c]
movss xmm1, dword [rsp + 0xe70]
addss xmm1, xmm0
movaps xmm0, xmm1
movss dword [rsp + 0xe70], xmm0
mov qword [rsp + 0xa8], 0
lea rcx, [rsp + 0xd0]
call fcn.140015480
mov rax, qword [rsp + 0xa8]
jmp 0x14005c24c
jmp 0x14005c22b
mov rax, qword [rsp + 0x39f0]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x39e8]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0x100
je 0x14005bff5
cmp qword [rsp + 0x78], 0x101
je 0x14005c16e
cmp qword [rsp + 0x78], 0x104
je 0x14005bff5
cmp qword [rsp + 0x78], 0x105
je 0x14005c16e
jmp 0x14005c208
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0x200
jae 0x14005c011
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov byte [rsp + rax + 0xbd4], 1
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax]
call qword [sym.imp.USER32.dll_GetKeyState]
lea rcx, [rsp + 0x38c0]
call qword [sym.imp.USER32.dll_GetKeyboardState]
test eax, eax
je 0x14005c169
mov rax, qword [rsp + 0x48]
cmp dword [rax + 4], 0xe
jne 0x14005c0b7
mov rax, qword [rsp + 0x48]
cmp dword [rax], 8
jne 0x14005c0b7
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov ecx, eax
call fcn.14005b530
mov dword [rsp + 0x68], eax
cmp qword [rsp + 0x39e8], 0x100
je 0x14005c07e
cmp qword [rsp + 0x39e8], 0x104
je 0x14005c07e
mov byte [rsp + 0x40], 0
jmp 0x14005c083
mov byte [rsp + 0x40], 1
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x50], al
cmp dword [rsp + 0x68], 0
je 0x14005c0b2
mov rax, qword [rsp + 0x48]
mov r9d, dword [rax + 4]
mov rax, qword [rsp + 0x48]
mov r8d, dword [rax]
movzx edx, byte [rsp + 0x50]
mov ecx, dword [rsp + 0x68]
call fcn.14005a640
jmp 0x14005c169
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], 0xa
lea r9, [rsp + 0x38a0]
lea r8, [rsp + 0x38c0]
mov rax, qword [rsp + 0x48]
mov edx, dword [rax + 4]
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax]
call qword [sym.imp.USER32.dll_ToUnicodeEx]
test eax, eax
je 0x14005c169
mov dword [rsp + 0x54], 0
jmp 0x14005c121
mov eax, dword [rsp + 0x54]
inc eax
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0xa
jge 0x14005c169
movsxd rax, dword [rsp + 0x54]
movzx eax, word [rsp + rax*2 + 0x38a0]
test eax, eax
jle 0x14005c167
movsxd rax, dword [rsp + 0x54]
movzx eax, word [rsp + rax*2 + 0x38a0]
cmp eax, 0x10000
jge 0x14005c167
movsxd rax, dword [rsp + 0x54]
movzx edx, word [rsp + rax*2 + 0x38a0]
lea rcx, [rsp + 0xd0]
call fcn.1400167f0
jmp 0x14005c117
jmp 0x14005c208
mov rax, qword [rsp + 0x48]
cmp dword [rax], 0x200
jae 0x14005c18a
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov byte [rsp + rax + 0xbd4], 0
mov rax, qword [rsp + 0x48]
cmp dword [rax + 4], 0xe
jne 0x14005c208
mov rax, qword [rsp + 0x48]
cmp dword [rax], 8
jne 0x14005c208
mov rax, qword [rsp + 0x48]
mov eax, dword [rax]
mov ecx, eax
call fcn.14005b530
mov dword [rsp + 0x6c], eax
cmp qword [rsp + 0x39e8], 0x100
je 0x14005c1d4
cmp qword [rsp + 0x39e8], 0x104
je 0x14005c1d4
mov byte [rsp + 0x41], 0
jmp 0x14005c1d9
mov byte [rsp + 0x41], 1
movzx eax, byte [rsp + 0x41]
mov byte [rsp + 0x51], al
cmp dword [rsp + 0x6c], 0
je 0x14005c208
mov rax, qword [rsp + 0x48]
mov r9d, dword [rax + 4]
mov rax, qword [rsp + 0x48]
mov r8d, dword [rax]
movzx edx, byte [rsp + 0x51]
mov ecx, dword [rsp + 0x6c]
call fcn.14005a640
mov qword [rsp + 0xb8], 0
lea rcx, [rsp + 0xd0]
call fcn.140015480
mov rax, qword [rsp + 0xb8]
jmp 0x14005c24c
mov qword [rsp + 0xc0], 0
lea rcx, [rsp + 0xd0]
call fcn.140015480
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x39c0]
xor rcx, rsp
call fcn.14033bfd0
add rsp, 0x39d8
ret