Function at 0x14000f5b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x60
xor edi, edi
mov r12, r9
mov r15, r8
mov ebp, edx
mov rbx, rcx
mov esi, edi
cmp dword [rcx + 0x548], edi
jle 0x14000f629
mov r14d, edi
mov rax, qword [rbx + 0x540]
lea rdx, [rsp + 0x90]
mov byte [rsp + 0x90], dil
mov r9, r12
mov qword [rsp + 0x20], rdx
mov r8, r15
mov edx, ebp
mov rcx, qword [r14 + rax]
mov rax, qword [rcx]
call qword [rax]
cmp byte [rsp + 0x90], dil
jne 0x14000f850
inc esi
add r14, 8
cmp esi, dword [rbx + 0x548]
jl 0x14000f5e0
sub ebp, 0x100
je 0x14000f781
sub ebp, 4
je 0x14000f6a7
cmp ebp, 2
jne 0x14000f766
mov ecx, r15d
mov dword [rsp + 0x90], edi
call fcn.1400b00a4
mov rcx, qword [rbx + 0x160]
lea r8, [rsp + 0x90]
mov word [rsp + 0x90], ax
lea rdx, [0x140016610]
mov r9d, 0x80000012
mov rax, qword [rcx]
call qword [rax + 0x268]
mov rbx, rax
test rax, rax
je 0x14000f766
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x250]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x30]
mov al, 1
jmp 0x14000f768
cmp qword [rbx + 0x168], rdi
je 0x14000f766
mov rax, qword [rbx + 0x190]
xorps xmm0, xmm0
mov ecx, reloc.COMCTL32.dll_InitCommonControls
mov qword [rsp + 0x44], rax
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x34], rdi
mov dword [rsp + 0x3c], edi
mov dword [rsp + 0x30], 6
mov word [rsp + 0x4c], r15w
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 8
test ax, ax
cmovs edi, ecx
mov ecx, 1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14000f709
or edi, 1
mov ecx, 2
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14000f71c
or edi, 2
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14000f72f
or edi, 4
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x14000f742
or edi, 0x20
mov word [rsp + 0x4e], di
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rbx + 0x168]
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x40], eax
mov rax, qword [rcx]
call qword [rax + 0x280]
xor al, al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
cmp r15, 9
jne 0x14000f766
mov rcx, qword [rbx + 0x168]
test rcx, rcx
je 0x14000f7e5
mov rax, qword [rcx]
call qword [rax + 0x200]
test al, al
je 0x14000f7e5
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x218]
test al, al
je 0x14000f7e5
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, rax
lea rdx, str.RichEditUI
call fcn.1400a47a4
test rax, rax
je 0x14000f7e5
mov rax, qword [rbx + 0x168]
cmp byte [rax + 0x719], dil
jne 0x14000f766
mov rcx, qword [rbx + 0x168]
test rcx, rcx
je 0x14000f837
mov rax, qword [rcx]
call qword [rax + 0x200]
test al, al
je 0x14000f837
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x218]
test al, al
je 0x14000f837
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, rax
lea rdx, str.WkeWebkitUI
call fcn.1400a47a4
test rax, rax
jne 0x14000f766
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov rcx, rbx
setns dl
call fcn.140013f30
mov al, 1
jmp 0x14000f768