Function at 0x140072330
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x30
mov edi, ecx
mov rsi, rdx
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
movzx ebp, ax
mov ecx, InitCommonControls
shr rbp, 8
call qword [sym.imp.USER32.dll_GetKeyState]
shr rax, 8
mov ebx, 1
test al, al
je 0x14007237b
or dword [0x1400b83b4], ebx
jmp 0x14007238d
mov eax, dword [0x1400b83b4]
test bl, al
je 0x14007238d
xor eax, ebx
mov dword [0x1400b83b4], eax
cmp dword [0x1400b83a0], edi
je 0x14007248c
mov rcx, qword [0x1400b83a4]
test rcx, rcx
je 0x1400723ac
xor edx, edx
call fcn.14007b0bc
mov edx, ebx
mov rcx, rsi
call fcn.14007b0bc
xor edx, edx
mov dword [0x1400b83a0], edi
lea eax, [rdi - 0xbbc]
mov qword [0x1400b83a4], rsi
cmp eax, 4
mov ecx, ebx
setbe dl
call fcn.140078200
mov rcx, qword [0x140097110]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x229
call qword [sym.imp.USER32.dll_SendMessageA]
test rax, rax
je 0x14007247a
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
cmp dword [0x1400b83a0], 0xbb9
mov rdi, rax
jne 0x14007246d
mov edx, 8
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongPtrA]
mov rsi, rax
test rax, rax
je 0x14007246d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov rcx, rdi
xor r8d, r8d
mov rdx, rax
call fcn.14006083c
cmp dword [rsp + 0x40], 0
je 0x140072464
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
test rdi, rdi
je 0x14007247a
mov rcx, rdi
call fcn.140067b98
cmp dword [0x1400b83ac], ebx
je 0x1400724be
mov dword [0x1400b83ac], ebx
mov edx, ebx
jmp 0x1400724b7
test bpl, bpl
jne 0x1400724be
lea eax, [rdi - 0xbbc]
cmp eax, 2
jbe 0x1400724a4
cmp edi, 0xbc0
jne 0x1400724be
mov edx, dword [0x1400b83ac]
cmp edx, 0x20
jge 0x1400724be
add edx, ebx
mov dword [0x1400b83ac], edx
mov ecx, ebx
call fcn.140078068
mov rcx, qword [0x140097110]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x229
call qword [sym.imp.USER32.dll_SendMessageA]
test rax, rax
je 0x1400725ca
mov edx, 5
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rdi, rax
test rax, rax
je 0x1400725ca
mov edx, dword [0x1400b83a0]
cmp edx, 0xbb9
je 0x140072573
lea ecx, [rdx - 0xbbc]
cmp ecx, 4
ja 0x1400725ca
mov rcx, rax
test bpl, bpl
je 0x140072528
call fcn.140008260
jmp 0x1400725ca
mov edx, 8
call qword [sym.imp.USER32.dll_GetWindowLongPtrA]
mov rsi, rax
test rax, rax
je 0x1400725ca
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
cmp qword [rax + 0xfe], 0
je 0x1400725c1
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov rcx, rdi
xor r8d, r8d
mov rdx, rax
call fcn.14006083c
jmp 0x1400725c1
mov edx, 8
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetWindowLongPtrA]
mov rsi, rax
test rax, rax
je 0x1400725ca
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalLock]
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov rcx, rdi
xor r8d, r8d
mov rdx, rax
call fcn.14006083c
cmp dword [rsp + 0x40], 0
je 0x1400725c1
mov rcx, rdi
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret