Function at 0x14023c780
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rdi
push r13
sub rsp, 0x70
mov qword [rax + 8], rsi
movzx esi, cl
mov qword [rax + 0x10], r12
mov ecx, 0x90
movzx ebp, r8b
movzx r12d, dl
call qword [sym.imp.USER32.dll_GetKeyState]
lea r13, [0x14035d74c]
lea rdi, [0x14035d748]
and al, 1
cmp al, sil
je 0x14023c867
xor r9d, r9d
xor edx, edx
mov cl, 0x90
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 3]
mov cl, 0x90
call qword [sym.imp.USER32.dll_keybd_event]
mov r9d, 0x108
lea rcx, [rsp + 0x40]
lea r8d, [r9 - 8]
xor edx, edx
mov dword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14023c83e
nop dword [rax + rax]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov r9d, 0x108
lea rcx, [rsp + 0x40]
lea r8d, [r9 - 8]
xor edx, edx
mov dword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14023c810
mov ecx, 0x830020
call qword [sym.imp.TBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rbx, rax
test rax, rax
je 0x14023c8c0
xor edx, edx
mov ecx, 0x90
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
lea r9, str.HID_LEDs_sync:_setting__s_state_to__s__0x_X_._n
jmp 0x14023c88e
mov ecx, 0x830020
call qword [sym.imp.TBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rbx, rax
test rax, rax
je 0x14023c8c0
xor edx, edx
mov ecx, 0x90
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
lea r9, str.HID_LEDs_sync:_setting__s_state:_skipped:_state_is_already__s__0x_X_._n
mov dword [rsp + 0x30], eax
test sil, sil
mov r8d, 0x83
lea rax, [0x14035d7d0]
mov rcx, rdi
lea edx, [r8 - 0x63]
cmovne rcx, r13
mov qword [rsp + 0x28], rcx
mov rcx, rbx
mov qword [rsp + 0x20], rax
call qword [sym.imp.TBoxRT.dll_RTLogLoggerEx]
movzx edx, r12b
mov ecx, SafeArrayGetElement
call fcn.14023c5a0
mov ecx, 0x91
call qword [sym.imp.USER32.dll_GetKeyState]
mov r12, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x90]
and al, 1
cmp al, bpl
je 0x14023c997
xor r9d, r9d
xor edx, edx
mov cl, 0x91
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_keybd_event]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 3]
mov cl, 0x91
call qword [sym.imp.USER32.dll_keybd_event]
mov r9d, 0x108
lea rcx, [rsp + 0x40]
lea r8d, [r9 - 8]
xor edx, edx
mov dword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14023c96e
nop dword [rax]
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov r9d, 0x108
lea rcx, [rsp + 0x40]
lea r8d, [r9 - 8]
xor edx, edx
mov dword [rsp + 0x20], 1
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
jne 0x14023c940
mov ecx, 0x830020
call qword [sym.imp.TBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rbx, rax
test rax, rax
je 0x14023c9ed
xor edx, edx
mov ecx, 0x91
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
lea r9, str.HID_LEDs_sync:_setting__s_state_to__s__0x_X_._n
jmp 0x14023c9be
mov ecx, 0x830020
call qword [sym.imp.TBoxRT.dll_RTLogRelGetDefaultInstanceEx]
mov rbx, rax
test rax, rax
je 0x14023c9ed
xor edx, edx
mov ecx, 0x91
call qword [sym.imp.USER32.dll_MapVirtualKeyW]
lea r9, str.HID_LEDs_sync:_setting__s_state:_skipped:_state_is_already__s__0x_X_._n
mov dword [rsp + 0x30], eax
mov r8d, 0x83
test bpl, bpl
lea rax, str.SCROLL
cmovne rdi, r13
lea edx, [r8 - 0x63]
mov rcx, rbx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call qword [sym.imp.TBoxRT.dll_RTLogLoggerEx]
mov al, 1
mov rbx, qword [rsp + 0xa0]
add rsp, 0x70
pop r13
pop rdi
pop rbp
ret