Function at 0x1400d35f0
Capabilities:
Log keystrokes via polling

Disassembly:
mov byte [rsp + 0x18], r8b
push rbx
push rsi
push r12
sub rsp, 0x40
mov rax, qword [rcx]
movzx r12d, r8b
movsxd rsi, edx
mov rbx, rcx
call qword [rax + reloc.WS2_32.dll_WSASetLastError]
test al, al
jne 0x1400d3629
mov rax, qword [rbx]
movzx r8d, r12b
mov edx, esi
mov rcx, rbx
add rsp, 0x40
pop r12
pop rsi
pop rbx
jmp qword [rax + Ordinal_27]
test esi, esi
jns 0x1400d3644
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + Ordinal_133]
mov al, 1
add rsp, 0x40
pop r12
pop rsi
pop rbx
ret
cmp dword [rbx + 0x10], 0xffffffff
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x30], r15
jne 0x1400d3661
cmp dword [rbx + 0xc], 0xffffffff
mov eax, esi
cmovne eax, dword [rbx + 0xc]
mov dword [rbx + 0x10], eax
mov rax, qword [rbx - 0x188]
lea rcx, [rbx - 0x188]
mov edx, esi
call qword [rax]
mov r15, rax
test rax, rax
je 0x1400d368b
mov rax, qword [rax]
mov rcx, r15
call qword [rax + 0x218]
test al, al
jne 0x1400d3692
xor al, al
jmp 0x1400d3895
mov rax, qword [r15]
lea rdx, str.ListItem
mov rcx, r15
mov qword [rsp + 0x38], r14
call qword [rax + 0x20]
mov r14, rax
test rax, rax
je 0x1400d3890
mov qword [rsp + 0x60], rbp
mov ecx, reloc.WS2_32.dll_recvfrom
mov qword [rsp + 0x68], rdi
call qword [sym.imp.USER32.dll_GetKeyState]
mov edi, 0x8000
test di, ax
je 0x1400d3742
movsxd rcx, dword [rbx + 0x20]
xor edi, edi
test ecx, ecx
jle 0x1400d36f8
mov rax, qword [rbx + 0x18]
mov rdx, rcx
xor ecx, ecx
cmp qword [rax], rsi
je 0x1400d3712
inc edi
inc rcx
add rax, 8
cmp rcx, rdx
jl 0x1400d36e5
mov rax, qword [r14]
mov dl, 1
mov rcx, r14
call qword [rax + 0x30]
test al, al
jne 0x1400d3826
xor al, al
jmp 0x1400d3886
cmp edi, 0xffffffff
je 0x1400d36f8
mov rax, qword [r14]
xor edx, edx
mov rcx, r14
call qword [rax + 0x30]
test al, al
je 0x1400d370b
cmp dword [rbx + 0xc], esi
jne 0x1400d3732
mov dword [rbx + 0xc], 0xffffffff
mov edx, edi
lea rcx, [rbx + 0x18]
call fcn.1400c7510
jmp 0x1400d3884
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetKeyState]
test di, ax
je 0x1400d36f8
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + Ordinal_133]
mov eax, dword [rbx + 0x10]
mov r12d, esi
mov edi, eax
cmp eax, esi
jle 0x1400d376f
mov edi, esi
mov r12d, eax
cmp edi, r12d
jg 0x1400d37e6
movsxd rbp, edi
nop word [rax + rax]
mov rax, qword [rbx - 0x188]
lea rcx, [rbx - 0x188]
mov edx, edi
call qword [rax]
mov r14, rax
test rax, rax
je 0x1400d37dc
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x218]
test al, al
je 0x1400d37dc
mov r8, qword [r14]
lea rdx, str.ListItem
mov rcx, r14
call qword [r8 + 0x20]
test rax, rax
je 0x1400d37dc
mov r8, qword [rax]
mov dl, 1
mov rcx, rax
call qword [r8 + 0x30]
test al, al
je 0x1400d37dc
lea rcx, [rbx + 0x18]
mov rdx, rbp
call fcn.1400c73b0
inc edi
inc rbp
cmp edi, r12d
jle 0x1400d3780
mov edx, esi
mov dword [rbx + 0xc], esi
lea rcx, [rbx - 0x730]
call fcn.1400d3ec0
cmp byte [rsp + 0x70], 0
je 0x1400d380a
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x250]
mov rcx, qword [rbx - 0x6d8]
test rcx, rcx
je 0x1400d3884
movsxd rax, dword [rbx + 0x10]
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
jmp 0x1400d386e
mov rdx, rsi
mov dword [rbx + 0xc], esi
lea rcx, [rbx + 0x18]
call fcn.1400c73b0
mov edx, esi
lea rcx, [rbx - 0x730]
call fcn.1400d3ec0
test r12b, r12b
je 0x1400d3854
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x250]
mov rcx, qword [rbx - 0x6d8]
test rcx, rcx
je 0x1400d3884
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9, rsi
lea r8, str.itemselect
lea rdx, [rbx - 0x730]
call fcn.1400c41e0
mov al, 1
mov rdi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x60]
mov r14, qword [rsp + 0x38]
mov r13, qword [rsp + 0x78]
mov r15, qword [rsp + 0x30]
add rsp, 0x40
pop r12
pop rsi
pop rbx
ret