Function at 0x14004a690
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x328
mov rax, qword [0x1401f6040]
xor rax, rsp
mov qword [rsp + 0x318], rax
movzx eax, byte [0x14026adbe]
test eax, eax
jne 0x14004a6c0
jmp 0x14004abf0
mov rax, qword [rsp + 0x340]
add rax, 0xb0
mov rdx, rax
lea rcx, [rsp + 0x2f8]
call fcn.140027f20
nop
lea rdx, [rsp + 0x2f8]
lea rcx, [0x14026a530]
call fcn.140039d80
movzx eax, al
test eax, eax
je 0x14004a716
mov byte [0x14026adec], 0
lea rdx, [rsp + 0x2f8]
lea rcx, [0x14026a530]
call fcn.140027cd0
nop
mov edx, 0x18
lea rcx, [rsp + 0x2d8]
call fcn.1400049d0
lea rcx, [rsp + 0x21]
call fcn.140005230
mov qword [rsp + 0x50], rax
movzx r8d, byte [rsp + 0x22]
lea rdx, [0x1401aff80]
lea rcx, [rsp + 0x120]
call fcn.14004c6a0
mov rcx, rax
call fcn.14000abe0
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x23]
lea rdx, [0x1401aff90]
lea rcx, [rsp + 0xf0]
call fcn.14004c890
mov rcx, rax
call fcn.14000ac90
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x24]
lea rdx, [0x1401affa0]
lea rcx, [rsp + 0x100]
call fcn.14004ca10
mov rcx, rax
call fcn.14000ac90
mov rdx, rax
lea rcx, [rsp + 0x180]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x20]
lea rdx, [0x1401affb0]
lea rcx, [rsp + 0xe0]
call fcn.14004cb90
mov rcx, rax
call fcn.14000ad40
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x26]
lea rdx, [0x1401affb8]
lea rcx, [rsp + 0x78]
call fcn.14004ccd0
mov rcx, rax
call fcn.14000adf0
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x27]
lea rdx, [0x1401affc0]
lea rcx, [rsp + 0x110]
call fcn.14004cdc0
mov rcx, rax
call fcn.14000aea0
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x28]
lea rdx, [0x1401affcc]
lea rcx, [rsp + 0x68]
call fcn.14004cf70
mov rcx, rax
call fcn.14000c1b0
mov rdx, rax
lea rcx, [rsp + 0x200]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x29]
lea rdx, str.ssg08
lea rcx, [rsp + 0x80]
call fcn.14004d020
mov rcx, rax
call fcn.14000adf0
mov rdx, rax
lea rcx, [rsp + 0x220]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x25]
lea rdx, [0x1401affd8]
lea rcx, [rsp + 0x70]
call fcn.14004d110
mov rcx, rax
call fcn.14000c1b0
mov rdx, rax
lea rcx, [rsp + 0x240]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x2a]
lea rdx, str.sg556
lea rcx, [rsp + 0x88]
call fcn.14004d1c0
mov rcx, rax
call fcn.14000adf0
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x2b]
lea rdx, [0x1401affe4]
lea rcx, [rsp + 0x90]
call fcn.14004d2b0
mov rcx, rax
call fcn.14000adf0
mov rdx, rax
lea rcx, [rsp + 0x280]
call fcn.140027ec0
movzx r8d, byte [rsp + 0x2c]
lea rdx, [0x1401affec]
lea rcx, [rsp + 0x48]
call fcn.14004d3a0
mov rcx, rax
call fcn.14000af50
mov rdx, rax
lea rcx, [rsp + 0x2a0]
call fcn.140027ec0
lea rax, [rsp + 0x2c0]
mov r8, rax
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x130]
call fcn.140005150
lea rcx, [rsp + 0xb8]
mov rdi, rcx
mov rsi, rax
mov ecx, select
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0xd0]
lea rcx, [rsp + 0xb8]
mov rdi, rax
mov rsi, rcx
mov ecx, select
rep movsb byte [rdi], byte [rsi]
mov r8, qword [rsp + 0x50]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x2d8]
call fcn.1400274f0
lea r9, [fcn.140005530]
mov r8d, 0xc
mov edx, 0x20
lea rcx, [rsp + 0x140]
call fcn.14019c86c
nop
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x2d8]
call fcn.140027410
mov rax, qword [rax]
mov qword [rsp + 0x58], rax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x2d8]
call fcn.140027470
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
lea r9, [rsp + 0x2f8]
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0xa8]
call fcn.14002c070
mov qword [rsp + 0x38], rax
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x2d8]
call fcn.140027410
mov qword [rsp + 0x40], rax
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
call fcn.140024710
movzx eax, al
test eax, eax
je 0x14004aabd
lea rcx, [rsp + 0x2d8]
call fcn.1400274d0
lea rcx, [rsp + 0x2f8]
call fcn.140005530
nop
jmp 0x14004abf0
mov eax, dword [0x140266a14]
mov rcx, qword [rsp + 0x340]
add rax, qword [rcx + 0x58]
lea r8, [rsp + 0x2f0]
mov rdx, rax
lea rcx, [0x14026afd8]
call fcn.1400060f0
mov eax, dword [0x140266aa8]
mov rcx, qword [rsp + 0x2f0]
add rcx, rax
mov rax, rcx
lea r8, [rsp + 0x2d0]
mov rdx, rax
lea rcx, [0x14026afd8]
call fcn.14002c120
nop
movzx eax, byte [rsp + 0x2d0]
test eax, eax
je 0x14004ab25
mov byte [0x14026adec], 0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x30], eax
movzx eax, byte [0x1401f6104]
test eax, eax
jne 0x14004ab96
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x14004ab96
mov eax, dword [0x14026adf0]
mov ecx, dword [rsp + 0x30]
sub ecx, eax
mov eax, ecx
cmp eax, 0x1f4
jb 0x14004ab96
movzx eax, byte [0x14026adec]
test eax, eax
jne 0x14004ab79
mov dword [rsp + 0x34], 1
jmp 0x14004ab81
mov dword [rsp + 0x34], 0
movzx eax, byte [rsp + 0x34]
mov byte [0x14026adec], al
mov eax, dword [rsp + 0x30]
mov dword [0x14026adf0], eax
movzx eax, byte [0x14026adec]
test eax, eax
je 0x14004abd5
mov dword [rsp + 0x2d4], 0x2d
mov eax, dword [0x140266a6c]
mov rcx, qword [rsp + 0x340]
add rax, qword [rcx]
lea r8, [rsp + 0x2d4]
mov rdx, rax
lea rcx, [0x14026afd8]
call fcn.140039490
nop
lea rcx, [rsp + 0x2d8]
call fcn.1400274d0
lea rcx, [rsp + 0x2f8]
call fcn.140005530
nop
mov rcx, qword [rsp + 0x318]
xor rcx, rsp
call fcn.14019c6f0
add rsp, 0x328
pop rdi
pop rsi
ret