Function at 0x140039850
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x2d0], rbx
mov r12, rdx
mov r13, rcx
call fcn.140004f70
mov rcx, rax
xor r15d, r15d
mov r8d, r15d
test rax, rax
setne r8b
test r8d, r8d
jne 0x1400398a7
mov ecx, 0x80004005
call fcn.140004f20
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
mov r14d, r15d
or rsi, 0xffffffffffffffff
cmp dword [r13 + 0x20], r15d
jbe 0x140039c98
movabs r8, 0x1000000000001001
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140039928
cmp dword [rdx + 0x10], 0
jge 0x1400398fa
cmp dword [rbx - 0xc], 0
jl 0x140039c82
mov dword [rbx - 0x10], r15d
mov word [rbx], r15w
jmp 0x140039928
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003990a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
movabs r8, 0x1000000000001001
mov edx, r14d
lea rax, [rdx + rdx*2]
add rax, rax
movups xmm1, xmmword [r13 + rax*8 + 0xd8]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [r13 + rax*8 + 0xe8]
movups xmmword [rsp + 0x70], xmm0
mov ecx, dword [r13 + rax*8 + 0xc8]
cmp ecx, 1
jne 0x1400399f2
cmp r14d, dword [r13 + 0x20]
jae 0x140039c60
cmp ecx, ecx
jne 0x140039c60
lea rax, [rdx + 5]
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r13 + rax*8], cl
jne 0x140039c60
mov r8d, 0x104
lea rdx, [rbp - 0x80]
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetKeyNameTextW]
test r14d, r14d
je 0x1400399c6
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x1400399c6
lea r8, [rbp - 0x80]
lea rdx, [0x14012b690]
lea rcx, [rbp + 0x1e0]
call fcn.14000b9d0
jmp 0x140039c59
lea rcx, [rbp - 0x80]
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400399d0
mov r8d, eax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1e0]
call fcn.14000be20
jmp 0x140039c59
test ecx, ecx
jne 0x140039c60
mov edi, dword [rsp + 0x64]
lea eax, [rdi - 4]
cmp eax, 0x3c
ja 0x140039c60
bt r8, rax
jae 0x140039c60
call fcn.140004f70
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x140039c8d
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e8], rbx
cmp edi, 4
je 0x140039b85
cmp edi, 0x10
je 0x140039b08
cmp edi, 0x40
jne 0x140039c45
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x409
lea rcx, [rsp + 0x40]
call fcn.1400b1580
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140039acc
cmp dword [rbx + 0x10], 0
jl 0x140039abb
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140039abb
call fcn.14000b840
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140039aae
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140039acc
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000be20
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039ae5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140039c27
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x140039c27
lea rdx, [0x14012b690]
jmp 0x140039c2e
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x408
lea rcx, [rsp + 0x38]
call fcn.1400b1580
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140039b7b
cmp dword [rbx + 0x10], 0
jl 0x140039b6a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140039b6a
call fcn.14000b840
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140039b5d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140039b7b
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000be20
nop
mov rdx, qword [rsp + 0x38]
jmp 0x140039ad1
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x407
lea rcx, [rsp + 0x30]
call fcn.1400b1580
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140039bf8
cmp dword [rbx + 0x10], 0
jl 0x140039be7
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140039be7
call fcn.14000b840
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140039bda
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140039bf8
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000be20
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039c11
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140039c27
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
lea rdx, [0x14012b690]
jne 0x140039c2e
lea rdx, [0x14012b69c]
mov rbx, qword [rbp + 0x1e8]
mov r8, rbx
lea rcx, [rbp + 0x1e0]
call fcn.14000b9d0
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039c59
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x1e0]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x140039c74
mov rdx, rbx
mov rcx, r12
call fcn.14000b670
inc r14d
cmp r14d, dword [r13 + 0x20]
jae 0x140039c98
jmp 0x1400398c9
mov ecx, 0x80070057
call fcn.140004f20
int3
mov ecx, 0x80004005
call fcn.140004f20
int3
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
setne r15b
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039cb9
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r15d
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret