Function at 0x140114efc
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword [rcx]
mov r13b, r8b
movsxd rdi, edx
mov rbx, rcx
call qword [rax + 0x70]
test al, al
jne 0x140114f36
mov rax, qword [rbx]
mov r8b, r13b
mov edx, edi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x1401151c5
test edi, edi
jns 0x140114f4d
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x80]
mov al, 1
jmp 0x1401151c5
cmp dword [rbx + 0x10], 0xffffffff
jne 0x140114f60
cmp dword [rbx + 0xc], 0xffffffff
mov eax, edi
cmovne eax, dword [rbx + 0xc]
mov dword [rbx + 0x10], eax
lea r12, [rbx - 0x188]
mov edx, edi
mov rax, qword [r12]
mov rcx, r12
call qword [rax]
mov qword [rsp + 0x88], rax
mov rsi, rax
test rax, rax
je 0x1401151c3
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x218]
test al, al
je 0x1401151c3
mov r8, qword [rsi]
lea rdx, [0x1402678b8]
mov rcx, rsi
call qword [r8 + 0x20]
mov r14, rax
test rax, rax
je 0x1401151c3
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
mov ebp, 0x8000
test bp, ax
je 0x14011506b
lea rbp, [rbx + 0x18]
mov rdx, rdi
mov rcx, rbp
call fcn.1400cecc4
mov rcx, qword [r14]
mov r12d, eax
mov rax, qword [rcx + 0x30]
mov rcx, r14
cmp r12d, 0xffffffff
je 0x140115017
xor edx, edx
call rax
test al, al
je 0x1401151c3
cmp dword [rbx + 0xc], edi
jne 0x140115007
or dword [rbx + 0xc], 0xffffffff
mov edx, r12d
mov rcx, rbp
call fcn.1400cf24c
jmp 0x140114f46
mov dl, 1
call rax
test al, al
je 0x1401151c3
mov rdx, rdi
mov dword [rbx + 0xc], edi
mov rcx, rbp
call fcn.1400ce9c4
lea rbp, [rbx - 0x730]
mov edx, edi
mov rcx, rbp
call fcn.140113738
test r13b, r13b
je 0x140115053
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x250]
mov rcx, qword [rbx - 0x6d8]
test rcx, rcx
je 0x140114f46
mov rdx, rbp
jmp 0x1401151a4
mov ecx, InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
test bp, ax
je 0x140115151
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x80]
mov eax, dword [rbx + 0x10]
mov ecx, edi
cmp eax, edi
mov ebp, edi
cmovg ecx, eax
cmovle ebp, eax
cmp ebp, ecx
jg 0x140115109
movsxd r15, ebp
mov esi, ecx
mov rax, qword [r12]
mov edx, ebp
mov rcx, r12
call qword [rax]
mov r14, rax
test rax, rax
je 0x1401150f8
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x218]
test al, al
je 0x1401150f8
mov r8, qword [r14]
lea rdx, [0x1402678b8]
mov rcx, r14
call qword [r8 + 0x20]
test rax, rax
je 0x1401150f8
mov r8, qword [rax]
mov dl, 1
mov rcx, rax
call qword [r8 + 0x30]
test al, al
je 0x1401150f8
lea rcx, [rbx + 0x18]
mov rdx, r15
call fcn.1400ce9c4
inc ebp
inc r15
cmp ebp, esi
jle 0x1401150a3
mov rsi, qword [rsp + 0x88]
lea rbp, [rbx - 0x730]
mov dword [rbx + 0xc], edi
mov rcx, rbp
mov edx, edi
call fcn.140113738
test r13b, r13b
je 0x14011512e
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x250]
mov rcx, qword [rbx - 0x6d8]
test rcx, rcx
je 0x140114f46
movsxd rax, dword [rbx + 0x10]
mov rdx, rbp
mov byte [rsp + 0x28], 0
mov qword [rsp + 0x20], rax
jmp 0x1401151af
mov rax, qword [r14]
mov dl, 1
mov rcx, r14
call qword [rax + 0x30]
test al, al
je 0x1401151c3
lea rcx, [rbx + 0x18]
mov dword [rbx + 0xc], edi
mov rdx, rdi
call fcn.1400ce9c4
lea r14, [rbx - 0x730]
mov edx, edi
mov rcx, r14
call fcn.140113738
test r13b, r13b
je 0x140115191
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x250]
mov rcx, qword [rbx - 0x6d8]
test rcx, rcx
je 0x140114f46
mov rdx, r14
mov byte [rsp + 0x28], 0
and qword [rsp + 0x20], 0
mov r9, rdi
lea r8, [0x1402718d8]
call fcn.1400d612c
jmp 0x140114f46
xor al, al
mov rbx, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret