Function at 0x14001de0c
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdi, qword [rsp + 0x50]
mov rbx, rcx
mov ecx, dword [rdi + 8]
sub ecx, 0x100
je 0x14001e054
mov r9d, 2
cmp ecx, r9d
jne 0x14001e218
mov rax, qword [rdi + 0x10]
cmp rax, 0x31
ja 0x14001df42
je 0x14001df25
sub rax, 5
je 0x14001df1a
sub rax, r9
je 0x14001df0f
sub rax, 6
je 0x14001dee8
sub rax, r9
je 0x14001dedd
sub rax, 1
je 0x14001ded2
sub rax, 0xa
je 0x14001debe
sub rax, 1
je 0x14001dea5
sub rax, 0x10
je 0x14001de9a
cmp rax, r9
jne 0x14001e218
mov r8d, 0x8025
jmp 0x14001e201
mov r8d, 0x8024
jmp 0x14001e201
lea eax, [rdx - 1]
test eax, 0xfffffffd
je 0x14001e218
mov r8d, 0x41d
jmp 0x14001e201
cmp edx, r9d
je 0x14001e218
mov r8d, 0x3f9
jmp 0x14001e201
mov r8d, 0x8023
jmp 0x14001e201
mov r8d, 0x802a
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x426
jmp 0x14001e201
mov r8d, 0x417
jmp 0x14001e201
mov r8d, 0x801d
jmp 0x14001e201
lea eax, [rdx - 1]
cmp eax, r9d
jbe 0x14001e218
mov r9d, 1
mov r8d, 0x8035
jmp 0x14001e204
sub rax, 0x32
je 0x14001e043
sub rax, 1
je 0x14001e02c
sub rax, 1
je 0x14001e015
sub rax, 1
je 0x14001dffe
sub rax, 1
je 0x14001dfe7
sub rax, 0x2b
je 0x14001dfd0
sub rax, 0x12
je 0x14001dfb9
sub rax, 5
je 0x14001dfa2
cmp rax, r9
jne 0x14001e218
lea eax, [rdx - 2]
cmp eax, 1
jbe 0x14001e218
mov r8d, 0x8010
jmp 0x14001e201
lea eax, [rdx - 2]
cmp eax, 1
jbe 0x14001e218
mov r8d, 0x8016
jmp 0x14001e201
lea eax, [rdx - 2]
cmp eax, 1
jbe 0x14001e218
mov r8d, 0x8015
jmp 0x14001e201
lea eax, [rdx - 1]
cmp eax, r9d
jbe 0x14001e218
mov r8d, 0x800f
jmp 0x14001e201
lea eax, [rdx - 1]
cmp eax, r9d
jbe 0x14001e218
mov r9d, 6
jmp 0x14001df37
lea eax, [rdx - 1]
cmp eax, r9d
jbe 0x14001e218
mov r9d, 5
jmp 0x14001df37
lea eax, [rdx - 1]
cmp eax, r9d
jbe 0x14001e218
mov r9d, 4
jmp 0x14001df37
lea eax, [rdx - 1]
cmp eax, r9d
jbe 0x14001e218
mov r9d, 3
jmp 0x14001df37
lea eax, [rdx - 1]
cmp eax, r9d
jbe 0x14001e218
jmp 0x14001df37
mov rax, qword [rdi + 0x10]
cmp rax, 0x77
ja 0x14001e169
je 0x14001e12c
sub rax, 0x48
je 0x14001dea5
sub rax, 0x2b
je 0x14001e105
sub rax, 1
je 0x14001e0de
sub rax, 1
je 0x14001e0b7
cmp rax, 1
jne 0x14001e218
lea ecx, [rax + 0x10]
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x8045
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x8046
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x804e
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x804d
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
mov r9, qword [rdi + 0x18]
mov ecx, 0x8000
and ax, cx
mov edx, 0x111
mov rcx, rbx
je 0x14001e15e
mov r8d, 0x8048
jmp 0x14001e20c
mov r8d, 0x802e
jmp 0x14001e20c
sub rax, 0x78
je 0x14001e1e3
sub rax, 1
je 0x14001e1c3
sub rax, 1
je 0x14001e1a3
cmp rax, 1
jne 0x14001e218
lea ecx, [rax + 0x10]
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x804c
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x804b
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x804a
jmp 0x14001e201
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
nop dword [rax + rax]
bt ax, 0xf
jae 0x14001e218
mov r8d, 0x8049
xor r9d, r9d
mov rcx, rbx
mov edx, 0x111
call qword [sym.imp.USER32.dll_PostMessageA]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret