Function at 0x140011325
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x140014300
push rbp
push rdi
sub rsp, 0x2b8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x72
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0x278], rax
lea rcx, [0x140027170]
call fcn.14001145b
nop
mov byte [rbp + 0xc4], 0
mov byte [rbp + 0xe4], 0
mov dword [rbp + 0x104], 0
mov dword [rbp + 0x124], 0
call fcn.1400113c0
nop
call fcn.140011389
nop
lea rcx, [rbp + 8]
call fcn.14001109b
movzx eax, al
test eax, eax
jne 0x140014393
lea rcx, str.ERROR:_Failed_to_load_config__n
call fcn.140011226
nop
mov eax, 1
jmp 0x1400145bf
mov rcx, qword [rbp + 0x10]
call fcn.1400110f5
mov dword [rbp + 0x144], eax
cmp dword [rbp + 0x144], 0xffffffff
jne 0x1400143cc
lea rcx, str.ERROR:_Invalid_key_code__n
call fcn.140011226
nop
lea rcx, [rbp + 8]
call fcn.140011037
nop
mov eax, 1
jmp 0x1400145bf
lea r9, [rbp + 0x84]
lea r8, [rbp + 0x64]
lea rdx, [rbp + 0x44]
mov rcx, qword [rbp + 8]
call fcn.1400114b5
movzx eax, al
test eax, eax
jne 0x14001440c
lea rcx, str.ERROR:_Invalid_color__n
call fcn.140011226
nop
lea rcx, [rbp + 8]
call fcn.140011037
nop
mov eax, 1
jmp 0x1400145bf
lea rcx, str.delay_tap
call fcn.14001132a
mov dword [rbp + 0x164], eax
cmp dword [rbp + 0x164], 0xffffffff
jne 0x140014448
lea rcx, str.ERROR:_Invalid_delay_tap_value__n
call fcn.140011226
nop
lea rcx, [rbp + 8]
call fcn.140011037
nop
mov eax, 1
jmp 0x1400145bf
xor eax, eax
cmp eax, 1
je 0x1400145b3
mov r8d, dword [rbp + 0x1c]
mov edx, dword [rbp + 0x18]
xor ecx, ecx
call fcn.14001100f
mov qword [rbp + 0xa8], rax
cmp qword [rbp + 0xa8], 0
jne 0x140014480
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x140014448
mov eax, dword [rbp + 0x18]
imul eax, dword [rbp + 0x1c]
mov ecx, dword [rbp + 0x20]
mov dword [rsp + 0x28], ecx
mov ecx, dword [rbp + 0x84]
mov dword [rsp + 0x20], ecx
mov r9d, dword [rbp + 0x64]
mov r8d, dword [rbp + 0x44]
mov edx, eax
mov rcx, qword [rbp + 0xa8]
call fcn.1400113f2
mov byte [rbp + 0x184], al
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.ucrtbased.dll_free]
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp + 0x1a4], eax
movzx eax, byte [rbp + 0xe4]
test eax, eax
je 0x14001450b
mov eax, dword [rbp + 0x124]
mov ecx, dword [rbp + 0x1a4]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rbp + 0x164]
jb 0x1400144fa
mov byte [rbp + 0xe4], 0
jmp 0x14001450b
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x140014448
movzx eax, byte [rbp + 0x184]
test eax, eax
je 0x14001454b
movzx eax, byte [rbp + 0xc4]
test eax, eax
jne 0x14001454b
movzx eax, byte [rbp + 0xe4]
test eax, eax
jne 0x14001454b
call fcn.1400110d7
nop
mov eax, dword [rbp + 0x1a4]
mov dword [rbp + 0x104], eax
call fcn.14001105a
nop
mov byte [rbp + 0xc4], 1
movzx eax, byte [rbp + 0xc4]
test eax, eax
je 0x14001458b
mov eax, dword [rbp + 0x104]
mov ecx, dword [rbp + 0x1a4]
sub ecx, eax
mov eax, ecx
cmp eax, dword [rbp + 0x24]
jb 0x14001458b
call fcn.140011497
nop
mov byte [rbp + 0xc4], 0
mov byte [rbp + 0xe4], 1
mov eax, dword [rbp + 0x1a4]
mov dword [rbp + 0x124], eax
mov ecx, 0x1b
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x1400145a2
jmp 0x1400145b3
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x140014448
lea rcx, [rbp + 8]
call fcn.140011037
nop
xor eax, eax
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14001e820]
call fcn.1400113d9
mov rax, rdi
mov rcx, qword [rbp + 0x278]
xor rcx, rbp
call fcn.140011244
lea rsp, [rbp + 0x288]
pop rdi
pop rbp
ret