Function at 0x140011af0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x60
xor edi, edi
mov r12, r9
mov r15, r8
mov ebp, edx
mov rbx, rcx
mov esi, edi
cmp dword [rcx + 0x548], edi
jle 0x140011b69
mov r14d, edi
mov rax, qword [rbx + 0x540]
lea rdx, [rsp + 0x90]
mov byte [rsp + 0x90], dil
mov r9, r12
mov qword [rsp + 0x20], rdx
mov r8, r15
mov edx, ebp
mov rcx, qword [r14 + rax]
mov rax, qword [rcx]
call qword [rax]
cmp byte [rsp + 0x90], dil
jne 0x140011d90
inc esi
add r14, 8
cmp esi, dword [rbx + 0x548]
jl 0x140011b20
sub ebp, 0x100
je 0x140011cc1
sub ebp, 4
je 0x140011be7
cmp ebp, 2
jne 0x140011ca6
mov ecx, r15d
mov dword [rsp + 0x90], edi
call fcn.1400af5b8
mov rcx, qword [rbx + 0x160]
lea r8, [rsp + 0x90]
mov word [rsp + 0x90], ax
lea rdx, [0x140018aa0]
mov r9d, 0x80000012
mov rax, qword [rcx]
call qword [rax + 0x268]
mov rbx, rax
test rax, rax
je 0x140011ca6
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x250]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x30]
mov al, 1
jmp 0x140011ca8
cmp qword [rbx + 0x168], rdi
je 0x140011ca6
mov rax, qword [rbx + 0x190]
xorps xmm0, xmm0
mov ecx, reloc.COMCTL32.dll_InitCommonControls
mov qword [rsp + 0x44], rax
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x34], rdi
mov dword [rsp + 0x3c], edi
mov dword [rsp + 0x30], 6
mov word [rsp + 0x4c], r15w
call qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, 8
test ax, ax
cmovs edi, ecx
mov ecx, 1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140011c49
or edi, 1
mov ecx, 2
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140011c5c
or edi, 2
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140011c6f
or edi, 4
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
jns 0x140011c82
or edi, 0x20
mov word [rsp + 0x4e], di
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rbx + 0x168]
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x40], eax
mov rax, qword [rcx]
call qword [rax + 0x280]
xor al, al
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
cmp r15, 9
jne 0x140011ca6
mov rcx, qword [rbx + 0x168]
test rcx, rcx
je 0x140011d25
mov rax, qword [rcx]
call qword [rax + 0x200]
test al, al
je 0x140011d25
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x218]
test al, al
je 0x140011d25
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, rax
lea rdx, str.RichEditUI
call fcn.1400a48d4
test rax, rax
je 0x140011d25
mov rax, qword [rbx + 0x168]
cmp byte [rax + 0x719], dil
jne 0x140011ca6
mov rcx, qword [rbx + 0x168]
test rcx, rcx
je 0x140011d77
mov rax, qword [rcx]
call qword [rax + 0x200]
test al, al
je 0x140011d77
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x218]
test al, al
je 0x140011d77
mov rcx, qword [rbx + 0x168]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, rax
lea rdx, str.WkeWebkitUI
call fcn.1400a48d4
test rax, rax
jne 0x140011ca6
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov rcx, rbx
setns dl
call fcn.1400169d0
mov al, 1
jmp 0x140011ca8