Function at 0x1402de9e4
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1f8
mov byte [rsp + 0x42], r9b
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov rcx, qword [rsp + 0x260]
add rcx, 0x10
call fcn.1402defc3
mov r12, rdx
test edi, 0xff0000
mov qword [rsp + 0x80], rbx
je 0x1402dea46
mov eax, edi
shr eax, 0x10
xor ecx, ecx
bt edi, 0x18
setae cl
shl ecx, 0xd
movzx eax, al
add eax, ecx
add eax, 0xffffe000
jmp 0x1402dea5b
movzx ecx, bx
mov r8, qword [r12 + 0x90]
mov edx, 4
call sub.user32.dll_MapVirtualKeyExW
movzx ebp, ax
mov ecx, ebp
call fcn.1402e20f4
mov r15, rax
mov ebx, r15d
shr ebx, 0x10
mov rdx, qword [r12 + 0x90]
mov ecx, ebp
call fcn.1402e2a9c
mov r14d, eax
lea r13, [rsp + 0xf0]
mov rcx, r13
call sub.user32.dll_GetKeyboardState
mov al, byte [r13 + 0x14]
mov r9b, byte [r13 + 0x90]
mov cl, byte [r13 + 0xa0]
mov dl, byte [r13 + 0xa2]
mov r8b, byte [r13 + 0xa4]
or cl, byte [r13 + 0x10]
or cl, byte [r13 + 0xa1]
shr cl, 7
or dl, byte [r13 + 0x11]
lea r10d, [rcx + 2]
or dl, byte [r13 + 0xa3]
movzx ecx, cl
movzx edx, r10b
cmovns edx, ecx
or r8b, byte [r13 + 0x12]
lea ecx, [rdx + 4]
or r8b, byte [r13 + 0xa5]
movzx ebp, cl
cmovns ebp, edx
shl al, 3
and al, 8
or al, bpl
movzx ecx, al
and al, 0xd
cmp bpl, 4
movzx r8d, al
cmovae r8d, ecx
test bpl, 2
mov byte [rsp + 0x43], r14b
je 0x1402deb33
movzx eax, r15w
cmp eax, 5
jne 0x1402deb33
cmp bl, 0x53
je 0x1402dec4e
movzx eax, bl
cmp eax, 0x77
jne 0x1402deb33
mov r14w, 0x2e
jmp 0x1402dec53
and bpl, 2
shr bpl, 1
and r9b, 1
mov word [rsp + 0xb0], 4
mov byte [rsp + 0x30], bl
mov word [rsp + 0x28], r15w
mov r14, qword [rsp + 0x80]
mov word [rsp + 0x20], r14w
lea r13, [rsp + 0xd0]
mov rcx, r13
mov rdx, r12
call fcn.1402e16de
cmp word [r13], 1
setne al
or al, byte [rsp + 0x42]
or al, bpl
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmmword [rsp + 0xa0], xmm1
movups xmmword [rsp + 0x90], xmm0
movzx eax, al
mov qword [rsp + 0x88], rax
mov byte [rsp + 0x30], bl
mov rbp, r15
mov word [rsp + 0x28], r15w
mov word [rsp + 0x20], r14w
lea r13, [rsp + 0xf0]
mov rcx, r13
mov rdx, r12
xor r8d, r8d
xor r9d, r9d
call fcn.1402e16de
movzx r14d, word [r13]
cmp r14w, 3
jne 0x1402dec01
mov eax, dword [rsp + 0xf4]
cmp eax, 0x110000
jne 0x1402decd4
mov r14w, 2
mov bl, 0x1a
mov r15, rbp
jmp 0x1402dedea
movzx eax, word [rsp + 0xf6]
mov word [rsp + 0x48], ax
mov eax, dword [rsp + 0xf2]
mov dword [rsp + 0x44], eax
mov bl, byte [rsp + 0xf8]
mov eax, dword [rsp + 0xf9]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0xfc]
mov dword [rsp + 0x4f], eax
mov r12, qword [rsp + 0x100]
mov r13, qword [rsp + 0x108]
mov r15, rbp
jmp 0x1402dedf7
mov r14w, 6
and r9b, 1
xor ebp, ebp
mov word [rsp + 0xb0], bp
mov word [rsp + 0xb2], r14w
mov byte [rsp + 0x30], bl
mov word [rsp + 0x28], r15w
mov rax, qword [rsp + 0x80]
mov word [rsp + 0x20], ax
lea rcx, [rsp + 0xd0]
mov rdx, r12
call fcn.1402e16de
mov word [rsp + 0x90], bp
mov word [rsp + 0x92], r14w
mov qword [rsp + 0x88], 1
mov eax, dword [rsp + 0xb2]
mov dword [rsp + 0x44], eax
movzx eax, word [rsp + 0xb6]
mov word [rsp + 0x48], ax
mov al, 1
mov dword [rsp + 0x54], eax
xor r14d, r14d
jmp 0x1402dee02
mov dword [rsp + 0x3c], 0
cmp eax, 0x80
mov r15, rbp
jae 0x1402decf4
mov byte [rsp + 0x3c], al
mov ebp, 1
jmp 0x1402ded7a
mov ecx, eax
cmp eax, 0x800
jae 0x1402ded16
shr ecx, 6
or cl, 0xc0
mov byte [rsp + 0x3c], cl
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x3d], al
mov ebp, 2
jmp 0x1402ded7a
cmp eax, 0x10000
jae 0x1402ded45
shr ecx, 0xc
or cl, 0xe0
mov byte [rsp + 0x3c], cl
mov ecx, eax
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [rsp + 0x3d], cl
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x3e], al
mov ebp, 3
jmp 0x1402ded7a
shr ecx, 0x12
or cl, 0xf0
mov byte [rsp + 0x3c], cl
mov ecx, eax
shr ecx, 0xc
and cl, 0x3f
or cl, 0x80
mov byte [rsp + 0x3d], cl
mov ecx, eax
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [rsp + 0x3e], cl
and al, 0x3f
or al, 0x80
mov byte [rsp + 0x3f], al
mov ebp, 4
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x3c]
mov r8, rbp
call fcn.140209f9e
mov bl, byte [rsp + 0x60]
cmp bl, 0x1a
jne 0x1402dedbb
mov rcx, rbp
call fcn.140209eea
mov r12, rax
mov r13, rdx
mov rcx, rax
add rcx, 0x10
lea rdx, [rsp + 0x3c]
mov r8, rbp
call sub.msvcrt.dll_memcpy
mov bl, 0x18
jmp 0x1402dedd5
mov eax, dword [rsp + 0x61]
mov ecx, dword [rsp + 0x64]
mov dword [rsp + 0x5b], ecx
mov dword [rsp + 0x58], eax
mov r12, qword [rsp + 0x68]
mov r13, qword [rsp + 0x70]
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x5b]
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x4f], ecx
mov r14w, 1
lea rcx, [rsp + 0xf0]
call fcn.1400b4b01
mov bpl, 1
mov dword [rsp + 0x54], 0
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x88]
movzx ecx, word [rsp + 0x90]
movzx edx, word [rsp + 0x92]
mov r8d, dword [rsp + 0x94]
movups xmm0, xmmword [rsp + 0x98]
movaps xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0xf0], rax
mov word [rsp + 0xf8], cx
mov word [rsp + 0xfa], dx
mov dword [rsp + 0xfc], r8d
mov word [rsp + 0x60], r14w
mov eax, dword [rsp + 0x44]
mov dword [rsp + 0x62], eax
movzx eax, word [rsp + 0x48]
mov word [rsp + 0x66], ax
mov byte [rsp + 0x68], bl
mov eax, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4f]
mov dword [rsp + 0x69], eax
mov dword [rsp + 0x6c], ecx
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r13
mov ecx, 8
call fcn.1402d794a
mov ecx, edi
shr ecx, 0x1e
shr edi, 0x1f
xor edi, ecx
and dil, 1
mov rcx, qword [rsp + 0x80]
mov word [rsi + 0x88], cx
mov cl, byte [rsp + 0x42]
mov byte [rsi + 0x8a], cl
mov byte [rsi + 0x8b], dil
mov qword [rsi + 0x80], r15
mov cl, byte [rsp + 0x43]
mov byte [rsi + 0x8c], cl
movups xmm0, xmmword [rsp + 0x88]
movups xmm1, xmmword [rsp + 0x98]
movups xmmword [rsi], xmm0
movups xmmword [rsi + 0x10], xmm1
mov rcx, qword [rsp + 0xa8]
mov qword [rsi + 0x20], rcx
movups xmm0, xmmword [rsp + 0x60]
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rsi + 0x60], xmm0
movups xmmword [rsi + 0x70], xmm1
mov qword [rsi + 0x48], rax
mov qword [rsi + 0x50], rdx
xor eax, eax
mov qword [rsi + 0x58], rax
xorps xmm0, xmm0
movups xmmword [rsi + 0x28], xmm0
mov qword [rsi + 0x38], 2
mov qword [rsi + 0x40], rax
test bpl, bpl
jne 0x1402def49
lea rcx, [rsp + 0xd0]
call fcn.1400b4b01
nop
add rsp, 0x1f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret