Function at 0x140043330
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x2d0], rbx
mov r12, rdx
mov r13, rcx
call fcn.140004d50
mov rcx, rax
xor r15d, r15d
mov r8d, r15d
test rax, rax
setne r8b
test r8d, r8d
jne 0x140043387
mov ecx, 0x80004005
call fcn.140004d00
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
mov r14d, r15d
or rsi, 0xffffffffffffffff
cmp dword [r13 + 0x20], r15d
jbe 0x140043778
movabs r8, 0x1000000000001001
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140043408
cmp dword [rdx + 0x10], 0
jge 0x1400433da
cmp dword [rbx - 0xc], 0
jl 0x140043762
mov dword [rbx - 0x10], r15d
mov word [rbx], r15w
jmp 0x140043408
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400433ea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
movabs r8, 0x1000000000001001
mov edx, r14d
lea rax, [rdx + rdx*2]
add rax, rax
movups xmm1, xmmword [r13 + rax*8 + 0xd8]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [r13 + rax*8 + 0xe8]
movups xmmword [rsp + 0x70], xmm0
mov ecx, dword [r13 + rax*8 + 0xc8]
cmp ecx, 1
jne 0x1400434d2
cmp r14d, dword [r13 + 0x20]
jae 0x140043740
cmp ecx, ecx
jne 0x140043740
lea rax, [rdx + 5]
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r13 + rax*8], cl
jne 0x140043740
mov r8d, 0x104
lea rdx, [rbp - 0x80]
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetKeyNameTextW]
test r14d, r14d
je 0x1400434a6
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x1400434a6
lea r8, [rbp - 0x80]
lea rdx, [0x1401481f8]
lea rcx, [rbp + 0x1e0]
call fcn.14000d340
jmp 0x140043739
lea rcx, [rbp - 0x80]
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400434b0
mov r8d, eax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1e0]
call fcn.14000fc20
jmp 0x140043739
test ecx, ecx
jne 0x140043740
mov edi, dword [rsp + 0x64]
lea eax, [rdi - 4]
cmp eax, 0x3c
ja 0x140043740
bt r8, rax
jae 0x140043740
call fcn.140004d50
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x14004376d
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e8], rbx
cmp edi, 4
je 0x140043665
cmp edi, 0x10
je 0x1400435e8
cmp edi, 0x40
jne 0x140043725
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x409
lea rcx, [rsp + 0x40]
call fcn.1400c4700
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400435ac
cmp dword [rbx + 0x10], 0
jl 0x14004359b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14004359b
call fcn.14000f720
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14004358e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x1400435ac
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000fc20
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400435c5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140043707
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x140043707
lea rdx, [0x1401481f8]
jmp 0x14004370e
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x408
lea rcx, [rsp + 0x38]
call fcn.1400c4700
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14004365b
cmp dword [rbx + 0x10], 0
jl 0x14004364a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14004364a
call fcn.14000f720
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14004363d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x14004365b
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000fc20
nop
mov rdx, qword [rsp + 0x38]
jmp 0x1400435b1
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x407
lea rcx, [rsp + 0x30]
call fcn.1400c4700
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400436d8
cmp dword [rbx + 0x10], 0
jl 0x1400436c7
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400436c7
call fcn.14000f720
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400436ba
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x1400436d8
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000fc20
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400436f1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140043707
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
lea rdx, [0x1401481f8]
jne 0x14004370e
lea rdx, [0x140148204]
mov rbx, qword [rbp + 0x1e8]
mov r8, rbx
lea rcx, [rbp + 0x1e0]
call fcn.14000d340
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140043739
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x1e0]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x140043754
mov rdx, rbx
mov rcx, r12
call fcn.14000f550
inc r14d
cmp r14d, dword [r13 + 0x20]
jae 0x140043778
jmp 0x1400433a9
mov ecx, 0x80070057
call fcn.140004d00
int3
mov ecx, 0x80004005
call fcn.140004d00
int3
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
setne r15b
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140043799
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r15d
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret