Function at 0x140146660
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x110
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1402a6808]
xor rax, rsp
mov qword [rbp], rax
mov r14, r9
mov rsi, rcx
xor ebx, ebx
cmp edx, 2
je 0x140146ba9
cmp edx, 5
je 0x140146b6b
cmp edx, 0x4e
je 0x140146709
cmp edx, 0x110
jne 0x140146bb6
mov rax, qword [rcx + 0x90]
mov r9, qword [rcx + 0xc0]
mov r8, qword [rcx + 0x18]
mov rdx, qword [rcx + 8]
add rcx, 0x90
call qword [rax + 0x60]
lea rcx, [rsi + 0x90]
call fcn.140147690
mov rax, qword [rsi + 0x90]
mov dl, 1
lea rcx, [rsi + 0x90]
call qword [rax + 0x18]
mov eax, 1
jmp 0x140146bb8
mov eax, dword [r9 + 0x10]
add eax, 0x9e
cmp eax, 0x9c
ja case.0x140146732.157
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x146c04]
mov ecx, dword [rdx + rax*4 + 0x146be8]
add rcx, rdx
jmp rcx
cmp dword [r9 + 0x18], 0xffffffff
jne case.0x140146732.157
xor r9d, r9d
mov edx, 0x111
mov r8d, 0xa029
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140146bb8
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test al, al
js case.0x140146732.157
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test al, al
js case.0x140146732.157
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov rcx, qword [rsi + 0xa8]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [r14 + 0x18]
cmp ecx, 0xffffffff
je case.0x140146732.157
cmp ecx, eax
jge case.0x140146732.157
mov dword [rbp - 0x60], 4
mov dword [rbp - 0x5c], ecx
lea r9, [rbp - 0x60]
xor r8d, r8d
mov edx, 0x104b
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rbp - 0x38]
mov rcx, rsi
call fcn.140146570
mov eax, 1
jmp 0x140146bb8
mov rcx, qword [rsi + 0xa8]
cmp qword [r9], rcx
jne case.0x140146732.157
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1032
mov rcx, qword [rsi + 0xa8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne 0x140146862
mov ecx, dword [r14 + 0x18]
cmp ecx, 0xffffffff
je case.0x140146732.157
cmp ecx, ebx
jge case.0x140146732.157
mov dword [rsp + 0x40], 4
mov dword [rsp + 0x44], ecx
lea r9, [rsp + 0x40]
xor r8d, r8d
mov edx, 0x104b
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x68]
mov rcx, rsi
call fcn.140146570
mov dword [rbp - 0x50], 0xfffffffb
mov rcx, qword [rsi + 0x18]
mov qword [rbp - 0x60], rcx
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
movsxd r8, eax
mov qword [rbp - 0x58], r8
lea r9, [rbp - 0x60]
mov edx, 0x4e
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
jmp 0x140146bb8
movsxd rax, dword [r9 + 0x2c]
cmp eax, 0xffffffff
je case.0x140146732.157
mov r8, rax
lea rdx, [rbp - 0x60]
mov rcx, rsi
call fcn.140146620
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 8
cmovae rdx, qword [rbp - 0x60]
mov r8d, dword [r14 + 0x28]
mov rcx, qword [r14 + 0x20]
call qword [sym.imp.KERNEL32.dll_lstrcpynW]
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140146915
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140146910
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140146be0
call fcn.14017f5e4
movdqa xmm0, xmmword [0x1401e3030]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], bx
mov eax, 1
jmp 0x140146bb8
mov r12, qword [rsi + 0xa8]
mov edi, 1
mov dword [rbp - 0x60], edi
mov eax, dword [r9 + 0x1c]
lea r15d, [rdi - 2]
cmp dword [rsi + 0x88], eax
je 0x1401469c7
cmp dword [rsi + 0x8c], r15d
je 0x1401469c7
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1200
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rcx, dword [rsi + 0x88]
cmp ecx, eax
jge 0x1401469c0
mov r8, rcx
lea r9, [rbp - 0x60]
mov edx, 0x105f
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
and dword [rbp - 0x5c], 0xfffff9ff
movsxd r8, dword [rsi + 0x88]
lea r9, [rbp - 0x60]
mov edx, 0x1060
mov rcx, r12
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsi + 0x8c], r15d
mov eax, dword [rsi + 0x8c]
cmp eax, r15d
jne 0x1401469d6
mov ecx, ebx
jmp 0x1401469de
mov ecx, r15d
test eax, eax
cmove ecx, edi
mov dword [rsi + 0x8c], ecx
mov eax, dword [r14 + 0x1c]
mov dword [rsi + 0x88], eax
cmp ecx, r15d
je 0x140146aec
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, qword [rsi + 0xa8]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1200
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [rsi + 0x88]
cmp ecx, eax
jl 0x140146a3c
mov dword [rsi + 0x88], ebx
mov dword [rsi + 0x8c], r15d
jmp 0x140146a45
mov r15d, dword [rsi + 0x8c]
mov ebx, ecx
cmp r15d, 0xffffffff
je 0x140146a79
mov rcx, qword [rsi + 0xa8]
mov qword [rbp - 0x60], rcx
mov dword [rbp - 0x58], ebx
mov dword [rbp - 0x54], r15d
lea r9, [0x1401464a0]
lea r8, [rbp - 0x60]
mov edx, 0x1051
call qword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [rsi + 0x88]
mov r14, qword [rsi + 0xa8]
mov dword [rbp - 0x60], edi
movsxd r8, ebx
lea r9, [rbp - 0x60]
mov edx, 0x105f
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [rsi + 0x8c]
test eax, eax
jne 0x140146aab
or dword [rbp - 0x5c], 0x400
jmp 0x140146acb
cmp eax, edi
jne 0x140146abf
mov eax, dword [rbp - 0x5c]
btr eax, 0xa
bts eax, 9
mov dword [rbp - 0x5c], eax
jmp 0x140146acb
cmp eax, 0xffffffff
jne 0x140146b00
and dword [rbp - 0x5c], 0xfffff9ff
movsxd r8, dword [rsi + 0x88]
lea r9, [rbp - 0x60]
mov edx, 0x1060
mov rcx, r14
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, rdi
jmp 0x140146bb8
lea rcx, [rsi + 0x90]
call fcn.140147cd0
mov rcx, rsi
call fcn.140146dd0
mov rax, rdi
jmp 0x140146bb8
cmp word [r9 + 0x18], 0xd
jne case.0x140146732.157
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1042
mov rcx, qword [rsi + 0xa8]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 0xffffffff
je case.0x140146732.157
mov dword [rsp + 0x40], 4
mov dword [rsp + 0x44], eax
lea r9, [rsp + 0x40]
xor r8d, r8d
mov edx, 0x104b
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x68]
mov rcx, rsi
call fcn.140146570
mov eax, 1
jmp 0x140146bb8
movzx ebx, r14w
shr r14, 0x10
movzx eax, r14w
mov edi, 1
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], eax
mov r9d, ebx
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 0xa8]
call qword [sym.imp.USER32.dll_MoveWindow]
lea rcx, [rsi + 0x90]
mov edx, ebx
call fcn.140147dd0
jmp 0x140146bb6
add rcx, 0x90
mov rax, qword [rcx]
call qword [rax + InitCommonControls]
xor eax, eax
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.14017f700
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1401a10ac
int3