Function at 0x1400caa5c
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rsi, qword [rsp + 0x100]
xor edi, edi
mov rbp, r8
mov rbx, rdx
mov r14, rcx
cmp rsi, rdi
jne 0x1400caa9b
call fcn.1400124d4
int3
mov r13, qword [rsp + 0xf8]
mov r15, qword [rsp + 0xf0]
mov dword [rsp + 0x44], 0x1000
mov dword [r13], edi
mov rcx, r15
mov dword [rsp + 0x100], edi
mov qword [rsi], rdi
mov dword [rsp + 0x40], edi
call qword [sym.imp.USER32.dll_SetRectEmpty]
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
cmp ax, di
jl 0x1400cad9b
mov r8, qword [rsp + 0xe8]
lea rax, [rsp + 0x40]
mov r9, rsi
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x100]
mov rdx, rbx
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x44]
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.1400ca7ec
cmp eax, edi
je 0x1400cad9b
cmp qword [rsi], rdi
je 0x1400cad9b
lea rdx, str.CPaneFrameWnd
mov rcx, rbp
call fcn.1400577c0
mov rdx, rbp
cmp eax, edi
je 0x1400cab5b
lea rcx, str.CPaneFrameWnd
call fcn.1400577f4
mov rcx, rax
mov rdx, qword [rax]
call qword [rdx + 0x308]
mov rdx, rax
lea rcx, str.CPane
call fcn.1400577f4
mov rcx, qword [rsi]
mov r12, rax
cmp rcx, rdi
je 0x1400cabed
mov rax, qword [rcx]
call qword [rax + 0x2e0]
mov rcx, qword [rsi]
mov rdx, qword [rcx]
mov edi, eax
call qword [rdx + 0x2d8]
mov rcx, qword [rsi]
xor edx, edx
mov r8, qword [rcx]
mov r15d, eax
call qword [r8 + 0x400]
xor ebx, ebx
test rax, rax
setne bl
test r12, r12
je 0x1400cabe3
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x2e0]
cmp eax, edi
je 0x1400cabc5
xor edi, edi
cmp ebx, edi
jne 0x1400cad9b
jmp 0x1400cabc7
xor edi, edi
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x2e0]
test r15d, eax
jne 0x1400cabe5
cmp ebx, edi
je 0x1400cad9b
jmp 0x1400cabe5
xor edi, edi
mov r15, qword [rsp + 0xf0]
cmp dword [rsp + 0x100], edi
jne 0x1400cabfc
cmp dword [rsp + 0x40], edi
je 0x1400cac69
cmp qword [rsi], rdi
mov eax, edi
setne al
mov dword [r13], eax
cmp eax, edi
je 0x1400cad9b
mov rcx, qword [rsi]
mov rax, qword [rcx]
call qword [rax + 0x2c8]
cmp eax, edi
je 0x1400cac5b
mov rdx, rbp
mov rcx, r14
call fcn.1400c9d04
cmp eax, edi
je 0x1400cac5b
cmp r12, rdi
je 0x1400cac5b
mov rax, qword [r12]
mov rdi, qword [rsi]
mov rcx, r12
call qword [rax + 0x2e0]
mov rdx, qword [rdi]
mov rcx, rdi
mov ebx, eax
call qword [rdx + 0x2e0]
xor edi, edi
cmp eax, ebx
lea eax, [rdi + 1]
je 0x1400cac5d
mov eax, edi
mov dword [r13], eax
cmp eax, edi
je 0x1400cad9b
mov rcx, qword [rsi]
cmp rcx, rdi
je 0x1400cacc3
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x400]
cmp rax, rdi
je 0x1400cac94
mov rdx, rbp
mov rcx, r14
call fcn.1400c9d54
cmp eax, edi
je 0x1400cad97
cmp qword [rsi], rdi
je 0x1400cacc3
lea rdx, str.CBasePane
mov rcx, rbp
call fcn.1400577c0
cmp eax, edi
je 0x1400cacc3
mov rcx, qword [rsi]
mov rdx, rbp
mov rax, qword [rcx]
call qword [rax + 0x2b8]
cmp eax, edi
je 0x1400cad97
mov rcx, qword [rsi]
lea rdx, [rsp + 0x70]
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp qword [rsi], rbp
je 0x1400cad97
lea rdx, str.CPaneFrameWnd
mov rcx, rbp
call fcn.1400577c0
cmp eax, edi
je 0x1400cad08
mov rcx, qword [rsi]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x400]
cmp rax, rbp
je 0x1400cad97
mov rcx, qword [rbp + 0x40]
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x5c], edi
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x54], edi
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp r12, rdi
je 0x1400cad9b
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x2e0]
mov ecx, dword [rsp + 0x44]
test ecx, eax
jne 0x1400cad49
cmp dword [0x140255ff0], edi
je 0x1400cad9b
mov rax, qword [rsp + 0x50]
lea r9, [rsp + 0x80]
lea r8, [rsp + 0x60]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x58]
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ecx
mov rcx, qword [rsp + 0xd8]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
call fcn.14011a87c
movdqu xmm5, xmmword [rsp + 0x60]
movdqu xmmword [r15], xmm5
jmp 0x1400cad9b
mov dword [r13], edi
mov rbx, qword [rsp + 0xd0]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret