Function at 0x14017f580
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov ecx, 0x210
call fcn.1400aea10
mov byte [rsp + 0x40], al
mov eax, 0x4d1bc7a0
mov r15d, 0x8b021572
mov r12d, 0xc226c318
mov r13, qword [sym.imp.USER32.dll_GetKeyState]
mov ebp, 0x830bd342
mov esi, 0x9cab3cda
mov edi, 0x45043268
jmp 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd042e77a
mov ecx, 0x4e9bf165
cmove eax, ecx
cmp dword [0x140b7de3c], 0xa
cmovl eax, ecx
cmp eax, 0x93774d9
jle 0x14017f650
cmp eax, 0x4c607c01
jg 0x14017f700
cmp eax, 0x37124a74
jg 0x14017f79e
cmp eax, 0x294b1bfc
jg 0x14017f8c8
cmp eax, 0x93774da
je 0x14017fb57
cmp eax, 0xa56020e
je 0x14017fb61
cmp eax, 0x20218d9a
jne 0x14017f5ed
cmp byte [rsp + 0x47], 0
mov eax, 0xdbc80d0c
mov ecx, 0xc702d40a
cmovne eax, ecx
jmp 0x14017f5ed
cmp eax, 0xc702d409
jg 0x14017f750
cmp eax, 0xa0aafd51
jg 0x14017f7f6
cmp eax, 0x8e367884
jg 0x14017f900
cmp eax, 0x800801c5
je 0x14017fb7f
cmp eax, 0x830bd342
je 0x14017fb89
cmp eax, 0x8319a1a9
jne 0x14017f5ed
call fcn.1400362d0
mov qword [rsp + 0x38], rax
mov eax, 0x75a855b
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0xf55d4753
je 0x14017fbb5
cmp eax, 0x75a855b
jne 0x14017f6b0
mov rcx, qword [rsp + 0x38]
mov edx, 0x212
xor r8d, r8d
call fcn.140008530
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.1400088a0
mov eax, 0xf55d4753
jmp 0x14017f6b0
cmp eax, 0x6e21f875
jg 0x14017f840
cmp eax, 0x4e9bf164
jg 0x14017f92b
cmp eax, 0x4c607c02
je 0x14017fbbf
cmp eax, 0x4d1bc7a0
je 0x14017fbd6
cmp eax, 0x4d4416e7
jne 0x14017f5ed
mov eax, 0xa21df0f6
jmp 0x14017f5ed
cmp eax, 0xf50d3aee
jle 0x14017f892
cmp eax, 0xf8827d7e
jg 0x14017f9ae
cmp eax, 0xf50d3aef
je 0x14017fbed
cmp eax, 0xf5bc5791
je 0x14017fc0b
cmp eax, 0xf6e404a0
jne 0x14017f5ed
cmp byte [rsp + 0x43], 0
mov eax, 0x6db5622d
mov ecx, 0x37124a75
cmovne eax, ecx
jmp 0x14017f5ed
cmp eax, 0x42f3924d
jg 0x14017fa95
cmp eax, 0x37124a75
je 0x14017fcc5
cmp eax, 0x3c711815
je 0x14017fce3
cmp eax, 0x3ce110d7
jne 0x14017f5ed
mov ecx, 0x212
call fcn.1400aea10
mov byte [rsp + 0x44], al
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x294b1bfd
mov ecx, 0x7baa1240
jmp 0x14017f5e0
cmp eax, 0xa2d766ca
jg 0x14017fac0
cmp eax, 0xa0aafd52
je 0x14017fd01
cmp eax, 0xa2193262
je 0x14017fd0b
cmp eax, 0xa21df0f6
jne 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4d4416e7
mov ecx, 0xa2d766cb
jmp 0x14017f5e0
cmp eax, 0x76ceaec2
jg 0x14017faff
cmp eax, 0x6e21f876
je 0x14017fd29
cmp eax, 0x7017d138
je 0x14017fd4f
cmp eax, 0x751dd90a
jne 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5245de3
cmove eax, esi
cmp dword [0x140b7de3c], 0xa
cmovl eax, esi
jmp 0x14017f5ed
cmp eax, 0xdbc80d0b
jle 0x14017fb2a
cmp eax, 0xdbc80d0c
je 0x14017fd66
cmp eax, 0xe3fc5778
je 0x14017fd84
cmp eax, 0xe5245de3
jne 0x14017f5ed
mov eax, 0x751dd90a
jmp 0x14017f5ed
cmp eax, 0x294b1bfd
je 0x14017fdee
cmp eax, 0x30198199
je 0x14017fe02
cmp eax, 0x35186517
jne 0x14017f5ed
cmp byte [rsp + 0x46], 0
mov eax, 0xc702d40a
mov ecx, 0xf8827d7f
cmovne eax, ecx
jmp 0x14017f5ed
cmp eax, 0x8e367885
je 0x14017fe20
cmp eax, 0x97187fab
je 0x14017fe34
cmp eax, 0x9cab3cda
jne 0x14017f5ed
mov eax, 0x37124a75
jmp 0x14017f5ed
cmp eax, 0x4e9bf165
je 0x14017fe3e
cmp eax, 0x5672fd96
je 0x14017fe48
cmp eax, 0x6db5622d
jne 0x14017f5ed
call fcn.1400362d0
mov qword [rsp + 0x38], rax
mov eax, 0x75a855b
nop dword [rax + rax]
cmp eax, 0xf55d4753
je 0x14017fe52
cmp eax, 0x75a855b
jne 0x14017f960
mov rcx, qword [rsp + 0x38]
mov edx, 0x214
xor r8d, r8d
call fcn.140008530
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.1400088a0
mov eax, 0xf55d4753
jmp 0x14017f960
cmp eax, 0xf8827d7f
je 0x14017fe5c
cmp eax, 0xfad924ad
je 0x14017ff25
cmp eax, 0x849efd4
jne 0x14017f5ed
mov eax, 0x7e71e104
nop word cs:[rax + rax]
nop
cmp eax, 0xc226c317
jle 0x14017fa20
cmp eax, 0xc226c318
je 0x14017fa3d
cmp eax, 0x261bfeec
je 0x14017fa6d
cmp eax, 0x7e71e104
jne 0x14017f9e0
mov ecx, 0x5b
call r13
and eax, 0x8000
mov dword [rsp + 0x38], eax
mov eax, 0x261bfeec
jmp 0x14017f9e0
cmp eax, 0x8b021572
je 0x14017ff3d
cmp eax, 0x9d918dd3
jne 0x14017f9e0
mov eax, dword [rsp + 0x38]
mov eax, 0xc226c318
jmp 0x14017f9e0
cmp dword [rsp + 0x38], 0
setne bl
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r15d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r15d
jmp 0x14017f9e0
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r12d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r12d
jmp 0x14017f9e0
cmp eax, 0x42f3924e
je 0x14017ff56
cmp eax, 0x45043268
je 0x14017ff60
cmp eax, 0x49b068e1
jne 0x14017f5ed
mov eax, 0xfad924ad
jmp 0x14017f5ed
cmp eax, 0xa2d766cb
je 0x14017ffbe
cmp eax, 0xb311a2f1
je 0x14017ffd5
cmp eax, 0xb6e292c4
jne 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42f3924e
mov ecx, 0x3c711815
jmp 0x14017f5e0
cmp eax, 0x76ceaec3
je 0x14018003e
cmp eax, 0x7ad7c655
je 0x140180064
cmp eax, 0x7baa1240
jne 0x14017f5ed
mov eax, 0x4c607c02
jmp 0x14017f5ed
cmp eax, 0xd042e77a
je 0x140180126
cmp eax, 0xdb299509
jne 0x14018020d
cmp byte [rsp + 0x41], 0
mov eax, 0x76ceaec3
mov ecx, 0x6e21f876
cmovne eax, ecx
jmp 0x14017f5ed
mov eax, 0x7017d138
jmp 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5245de3
mov ecx, 0x751dd90a
jmp 0x14017f5e0
mov eax, 0x6e21f876
jmp 0x14017f5ed
mov ecx, 0x214
call fcn.1400aea10
mov byte [rsp + 0x42], al
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e367885
mov ecx, 0x93774da
jmp 0x14017f5e0
mov eax, 0xf50d3aef
jmp 0x14017f5ed
cmp byte [rsp + 0x44], 0
mov eax, 0xfad924ad
mov ecx, 0x849efd4
cmovne eax, ecx
jmp 0x14017f5ed
cmp byte [rsp + 0x40], 0
mov eax, 0x6e21f876
mov ecx, 0x7ad7c655
cmovne eax, ecx
jmp 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5672fd96
mov ecx, 0x30198199
jmp 0x14017f5e0
mov eax, 0x7e71e104
cmp eax, 0xc226c317
jle 0x14017fc50
cmp eax, 0xc226c318
je 0x14017fc6d
cmp eax, 0x261bfeec
je 0x14017fc9d
cmp eax, 0x7e71e104
jne 0x14017fc10
mov ecx, 0xa1
call r13
and eax, 0x8000
mov dword [rsp + 0x38], eax
mov eax, 0x261bfeec
jmp 0x14017fc10
cmp eax, 0x8b021572
je 0x14018018e
cmp eax, 0x9d918dd3
jne 0x14017fc10
mov eax, dword [rsp + 0x38]
mov eax, 0xc226c318
jmp 0x14017fc10
cmp dword [rsp + 0x38], 0
setne bl
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r15d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r15d
jmp 0x14017fc10
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r12d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r12d
jmp 0x14017fc10
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x294b1bfd
mov ecx, 0x3ce110d7
jmp 0x14017f5e0
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42f3924e
mov ecx, 0x35186517
jmp 0x14017f5e0
mov eax, 0x97187fab
jmp 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4d4416e7
mov ecx, 0xa21df0f6
jmp 0x14017f5e0
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e367885
cmove eax, ebp
cmp dword [0x140b7de3c], 0xa
cmovl eax, ebp
jmp 0x14017f5ed
cmp byte [rsp + 0x42], 0
mov eax, 0x37124a75
mov ecx, 0xf5bc5791
cmovne eax, ecx
jmp 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb311a2f1
mov ecx, 0xe3fc5778
jmp 0x14017f5e0
call fcn.1400362d0
mov qword [rsp + 0x38], rax
mov eax, 0x75a855b
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0xf55d4753
je 0x1401801a7
cmp eax, 0x75a855b
jne 0x14017fda0
mov rcx, qword [rsp + 0x38]
mov edx, 0x216
xor r8d, r8d
call fcn.140008530
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.1400088a0
mov eax, 0xf55d4753
jmp 0x14017fda0
mov ecx, 0x212
call fcn.1400aea10
mov eax, 0x3ce110d7
jmp 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5672fd96
mov ecx, 0x49b068e1
jmp 0x14017f5e0
mov ecx, 0x214
call fcn.1400aea10
mov eax, 0x830bd342
jmp 0x14017f5ed
mov eax, 0xc702d40a
jmp 0x14017f5ed
mov eax, 0x800801c5
jmp 0x14017f5ed
mov eax, 0x30198199
jmp 0x14017f5ed
mov eax, 0xa56020e
jmp 0x14017f5ed
mov eax, 0x7e71e104
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0xc226c317
jle 0x14017feb0
cmp eax, 0xc226c318
je 0x14017fecd
cmp eax, 0x261bfeec
je 0x14017fefd
cmp eax, 0x7e71e104
jne 0x14017fe70
mov ecx, 0x5c
call r13
and eax, 0x8000
mov dword [rsp + 0x38], eax
mov eax, 0x261bfeec
jmp 0x14017fe70
cmp eax, 0x8b021572
je 0x1401801c5
cmp eax, 0x9d918dd3
jne 0x14017fe70
mov eax, dword [rsp + 0x38]
mov eax, 0xc226c318
jmp 0x14017fe70
cmp dword [rsp + 0x38], 0
setne bl
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r15d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r15d
jmp 0x14017fe70
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r12d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r12d
jmp 0x14017fe70
mov ecx, 0x216
call fcn.1400aea10
mov byte [rsp + 0x46], al
mov eax, 0xb6e292c4
jmp 0x14017f5ed
and bl, 1
mov byte [rsp + 0x37], bl
mov al, byte [rsp + 0x37]
mov byte [rsp + 0x45], al
mov eax, 0xa2193262
jmp 0x14017f5ed
mov eax, 0x3c711815
jmp 0x14017f5ed
call fcn.1400362d0
mov qword [rsp + 0x38], rax
mov eax, 0x75a855b
nop
cmp eax, 0xf55d4753
je 0x14017f5c7
cmp eax, 0x75a855b
jne 0x14017ff70
mov rcx, qword [rsp + 0x38]
mov edx, 0x210
xor r8d, r8d
call fcn.140008530
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.1400088a0
mov eax, 0xf55d4753
jmp 0x14017ff70
cmp byte [rsp + 0x45], 0
mov eax, 0x8319a1a9
mov ecx, 0xfad924ad
cmovne eax, ecx
jmp 0x14017f5ed
call fcn.1400362d0
mov qword [rsp + 0x38], rax
mov eax, 0x75a855b
nop word cs:[rax + rax]
nop
cmp eax, 0xf55d4753
je 0x1401801de
cmp eax, 0x75a855b
jne 0x14017fff0
mov rcx, qword [rsp + 0x38]
mov edx, 0x216
xor r8d, r8d
call fcn.140008530
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.1400088a0
mov eax, 0xf55d4753
jmp 0x14017fff0
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd042e77a
cmove eax, edi
cmp dword [0x140b7de3c], 0xa
cmovl eax, edi
jmp 0x14017f5ed
mov eax, 0x7e71e104
nop dword [rax]
cmp eax, 0xc226c317
jle 0x1401800b0
cmp eax, 0xc226c318
je 0x1401800cd
cmp eax, 0x261bfeec
je 0x1401800fe
cmp eax, 0x7e71e104
jne 0x140180070
mov ecx, 0xa0
call r13
and eax, 0x8000
mov dword [rsp + 0x38], eax
mov eax, 0x261bfeec
jmp 0x140180070
cmp eax, 0x8b021572
je 0x1401801e8
cmp eax, 0x9d918dd3
jne 0x140180070
mov eax, dword [rsp + 0x38]
mov eax, 0xc226c318
jmp 0x140180070
cmp dword [rsp + 0x38], 0
setne r14b
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r15d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r15d
jmp 0x140180070
mov eax, dword [0x140b7e8d8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d918dd3
cmove eax, r12d
cmp dword [0x140b7e8dc], 0xa
cmovl eax, r12d
jmp 0x140180070
call fcn.1400362d0
mov qword [rsp + 0x38], rax
mov eax, 0x75a855b
nop word cs:[rax + rax]
nop
cmp eax, 0xf55d4753
je 0x140180203
cmp eax, 0x75a855b
jne 0x140180140
mov rcx, qword [rsp + 0x38]
mov edx, 0x210
xor r8d, r8d
call fcn.140008530
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x20], 0xffffffff
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.1400088a0
mov eax, 0xf55d4753
jmp 0x140180140
and bl, 1
mov byte [rsp + 0x37], bl
mov al, byte [rsp + 0x37]
mov byte [rsp + 0x43], al
mov eax, 0xf6e404a0
jmp 0x14017f5ed
mov eax, dword [0x140b7de38]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb311a2f1
mov ecx, 0xa0aafd52
jmp 0x14017f5e0
and bl, 1
mov byte [rsp + 0x37], bl
mov al, byte [rsp + 0x37]
mov byte [rsp + 0x47], al
mov eax, 0x20218d9a
jmp 0x14017f5ed
mov eax, 0xe3fc5778
jmp 0x14017f5ed
and r14b, 1
mov byte [rsp + 0x37], r14b
mov al, byte [rsp + 0x37]
mov byte [rsp + 0x41], al
mov eax, 0xdb299509
jmp 0x14017f5ed
mov eax, 0x45043268
jmp 0x14017f5ed
cmp eax, 0xc702d40a
jne 0x14017f5ed
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret