Function at 0x1400477c0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x2d0], rbx
mov r12, rdx
mov r13, rcx
call fcn.140004fc0
mov rcx, rax
xor r15d, r15d
mov r8d, r15d
test rax, rax
setne r8b
test r8d, r8d
jne 0x140047817
mov ecx, 0x80004005
call fcn.140004f70
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
mov r14d, r15d
or rsi, 0xffffffffffffffff
cmp dword [r13 + 0x20], r15d
jbe 0x140047c08
movabs r8, 0x1000000000001001
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140047898
cmp dword [rdx + 0x10], 0
jge 0x14004786a
cmp dword [rbx - 0xc], 0
jl 0x140047bf2
mov dword [rbx - 0x10], r15d
mov word [rbx], r15w
jmp 0x140047898
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14004787a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
movabs r8, 0x1000000000001001
mov edx, r14d
lea rax, [rdx + rdx*2]
add rax, rax
movups xmm1, xmmword [r13 + rax*8 + 0xd8]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [r13 + rax*8 + 0xe8]
movups xmmword [rsp + 0x70], xmm0
mov ecx, dword [r13 + rax*8 + 0xc8]
cmp ecx, 1
jne 0x140047962
cmp r14d, dword [r13 + 0x20]
jae 0x140047bd0
cmp ecx, ecx
jne 0x140047bd0
lea rax, [rdx + 5]
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r13 + rax*8], cl
jne 0x140047bd0
mov r8d, 0x104
lea rdx, [rbp - 0x80]
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetKeyNameTextW]
test r14d, r14d
je 0x140047936
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x140047936
lea r8, [rbp - 0x80]
lea rdx, [0x140173d40]
lea rcx, [rbp + 0x1e0]
call fcn.14000ee70
jmp 0x140047bc9
lea rcx, [rbp - 0x80]
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140047940
mov r8d, eax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1e0]
call fcn.140011790
jmp 0x140047bc9
test ecx, ecx
jne 0x140047bd0
mov edi, dword [rsp + 0x64]
lea eax, [rdi - 4]
cmp eax, 0x3c
ja 0x140047bd0
bt r8, rax
jae 0x140047bd0
call fcn.140004fc0
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x140047bfd
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e8], rbx
cmp edi, 4
je 0x140047af5
cmp edi, 0x10
je 0x140047a78
cmp edi, 0x40
jne 0x140047bb5
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x409
lea rcx, [rsp + 0x40]
call fcn.1400dc6c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140047a3c
cmp dword [rbx + 0x10], 0
jl 0x140047a2b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140047a2b
call fcn.1400112f0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140047a1e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140047a3c
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.140011790
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140047a55
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140047b97
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x140047b97
lea rdx, [0x140173d40]
jmp 0x140047b9e
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x408
lea rcx, [rsp + 0x38]
call fcn.1400dc6c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140047aeb
cmp dword [rbx + 0x10], 0
jl 0x140047ada
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140047ada
call fcn.1400112f0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140047acd
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140047aeb
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.140011790
nop
mov rdx, qword [rsp + 0x38]
jmp 0x140047a41
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x407
lea rcx, [rsp + 0x30]
call fcn.1400dc6c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140047b68
cmp dword [rbx + 0x10], 0
jl 0x140047b57
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140047b57
call fcn.1400112f0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140047b4a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140047b68
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.140011790
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140047b81
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140047b97
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
lea rdx, [0x140173d40]
jne 0x140047b9e
lea rdx, [0x140173d4c]
mov rbx, qword [rbp + 0x1e8]
mov r8, rbx
lea rcx, [rbp + 0x1e0]
call fcn.14000ee70
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140047bc9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x1e0]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x140047be4
mov rdx, rbx
mov rcx, r12
call fcn.140011120
inc r14d
cmp r14d, dword [r13 + 0x20]
jae 0x140047c08
jmp 0x140047839
mov ecx, 0x80070057
call fcn.140004f70
int3
mov ecx, 0x80004005
call fcn.140004f70
int3
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
setne r15b
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140047c29
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r15d
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret