Function at 0x14001334c
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push r15
mov rax, reloc.ODBC32.dll_SQLFetch
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x140013369
sub rsp, 0x28
call fcn.1400bd990
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.1400bda00
add rsp, 0x10
push 1
pop rcx
call fcn.1400166fb
call fcn.14002bd10
push 0
push 0
push reloc.WS2_32.dll_inet_addr
sub rsp, 8
push 0x4d
pop rcx
sub rsp, 0x20
call fcn.14009cec8
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.dll_SendMessageW
push 0x4e
pop rcx
call fcn.14009d080
mov qword [rsp + 0x30], rax
mov r15, qword [rsp + 0xb0]
and r15, r15
jle 0x14001340a
push 0x4d
pop rcx
call fcn.14009ce4c
mov r15, qword [rsp + 0xb8]
and r15, r15
jle 0x140013435
movabs rax, 0x140280a36
push rax
push 0xffffffffffffffff
push 0x4d
pop rcx
pop rdx
pop r8
call fcn.14009d164
mov qword [rsp + 0x38], 0
call fcn.1400a6110
mov qword [rsp + 0x40], rax
push qword [rsp + 0x40]
pop rax
mov qword [rsp + 0x48], rax
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
movabs rcx, str.SELECT_key__Description__ActivCount__Comment__Blocked__ActivVal__EditionID_FROM_keys
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
call fcn.1400bd860
movsxd rax, dword [rsp + 0xb8]
mov rax, rax
push rax
push rax
call fcn.1400bd830
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400ad7fc
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bcd8
add rsp, 0x28
pop rax
mov r15, rax
and r15, r15
je 0x140013ba0
movsxd rax, dword [rsp + 0xa0]
mov rax, rax
push rax
pop rcx
call fcn.1400ad878
and rax, rax
je 0x140013b7e
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 0
movsxd rax, dword [rsp + 0xc0]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ad8ac
add rsp, 0x28
lea rcx, [rsp + 0x58]
pop rdx
call fcn.1400bd6c0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 1
movsxd rax, dword [rsp + 0xc0]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ad8ac
add rsp, 0x28
lea rcx, [rsp + 0x60]
pop rdx
call fcn.1400bd6c0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 2
movsxd rax, dword [rsp + 0xc0]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ad8ac
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.1400bd6c0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 3
movsxd rax, dword [rsp + 0xc0]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ad8ac
add rsp, 0x28
lea rcx, [rsp + 0x70]
pop rdx
call fcn.1400bd6c0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 4
movsxd rax, dword [rsp + 0xc0]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ad8ac
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.1400bd6c0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push 5
movsxd rax, dword [rsp + 0xd0]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.1400ad8ac
add rsp, 0x28
push rax
call fcn.1400bd830
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1400ba550
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bcd8
add rsp, 0x28
pop rax
mov qword [rsp + 0x78], rax
movabs rax, str.key
push rax
push qword [rsp + 0x30]
pop rcx
pop rdx
call fcn.1400ba200
mov r15, rax
and r15, r15
jle 0x14001387a
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [rsp + 0x68]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
movabs rcx, 0x14027328c
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
push qword [rsp + 0x90]
pop rcx
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call main
add rsp, 0x20
pop rcx
push rax
pop rdx
sub rsp, 0x20
call fcn.1400ba3f0
add rsp, 0x20
pop rax
movabs rcx, 0x14027387e
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
call fcn.1400bd860
push 0xffffffffffffffff
push 0x4d
push rax
call fcn.1400bd830
mov rdx, rax
pop rax
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14009d164
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bcd8
add rsp, 0x28
pop rax
sub rsp, 8
push 0
push 0
pop rcx
sub rsp, 0x20
call fcn.1400a6e68
add rsp, 0x20
mov r15, rax
add r15, 0xffffffffffffff92
mov rax, r15
push rax
push 1
push 0
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14009cd50
add rsp, 0x30
mov qword [0x1404ba6ec], 0
jmp 0x140013b2f
mov qword [0x1404ba6ec], 1
sub rsp, 8
push 0
push qword [0x1404ba2d4]
push 1
push 0
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14009cd50
add rsp, 0x30
push qword [rsp + 0x50]
movabs rcx, 0x140273064
pop rdx
call fcn.1400bd7a0
or rax, rax
jne 0x140013b2f
push qword [rsp + 0x60]
movabs rcx, 0x140273064
pop rdx
call fcn.1400bd7a0
or rax, rax
jne 0x140013a8e
push qword [rsp + 0x60]
movabs rcx, str.Key_Blocked_
pop rdx
call fcn.1400bd7a0
or rax, rax
je 0x140013925
movabs rdx, str.Key_Blocked_
lea rcx, [rsp + 0x80]
call fcn.1400bd510
jmp 0x1400139bc
movabs rax, 0x1402813ae
push rax
push qword [rsp + 0x68]
pop rcx
pop rdx
call fcn.1400ba200
mov r15, rax
and r15, r15
jle 0x140013975
mov rcx, qword [rsp + 0x60]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.1400bd6c0
jmp 0x1400139bc
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
movabs rcx, 0x140274650
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
mov rcx, qword [rsp + 0x68]
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.1400bd6c0
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [rsp + 0x60]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
movabs rcx, reloc.WS2_32.dll_ioctlsocket
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
mov rcx, qword [rsp + 0x98]
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
movabs rcx, reloc.WS2_32.dll_ioctlsocket
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
mov rcx, qword [rsp + 0x80]
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
call fcn.1400bd860
push 0xffffffffffffffff
push 0x4d
push rax
call fcn.1400bd830
mov rdx, rax
pop rax
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14009d164
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bcd8
add rsp, 0x28
pop rax
jmp 0x140013b2f
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
mov rcx, qword [rsp + 0x60]
push rcx
sub rsp, 0x28
call main
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
movabs rcx, reloc.WS2_32.dll_ioctlsocket
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
mov rcx, qword [rsp + 0x80]
sub rsp, 0x28
call fcn.1400bd650
add rsp, 0x28
call fcn.1400bd860
push 0xffffffffffffffff
push 0x4d
push rax
call fcn.1400bd830
mov rdx, rax
pop rax
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14009d164
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14004bcd8
add rsp, 0x28
pop rax
call fcn.1400a6110
mov r15, rax
sub r15, qword [rsp + 0x40]
cmp r15, 0x5a
jle 0x140013b51
call fcn.1400a6110
mov qword [rsp + 0x40], rax
call fcn.14002bd10
push SQLFreeHandle
pop rcx
call sub.USER32.dll_GetKeyState
mov r15, rax
cmp r15, 1
jle 0x140013b79
call fcn.1400a6dec
mov r15, rax
and r15, r15
jne 0x140013b79
call fcn.14002bd10
jmp 0x140013b7e
jmp 0x1400134ea
push qword [rsp + 0x30]
push 0x4e
pop rcx
pop rdx
call fcn.14009cb48
movsxd rax, dword [rsp + 0xa0]
mov rax, rax
push rax
pop rcx
call fcn.1400ad8f4
mov r15, qword [0x1404ba6ec]
and r15, r15
jle 0x140013c0f
mov rax, qword [0x1404ba55c]
mov rax, rax
push rax
mov rax, qword [0x1404ba43c]
mov rax, rax
push rax
mov rax, qword [0x1404ba464]
mov rax, rax
push rax
sub rsp, 8
push 0x4d
pop rcx
sub rsp, 0x20
call fcn.14009cec8
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14003835b
push qword [0x1404ba55c]
push qword [0x1404ba464]
push 0x4d
pop rcx
pop rdx
pop r8
call fcn.1400252f8
jmp 0x140013c70
mov rax, qword [0x1404ba934]
mov rax, rax
push rax
mov rax, qword [0x1404ba8e4]
mov rax, rax
push rax
mov rax, qword [0x1404ba6fc]
mov rax, rax
push rax
sub rsp, 8
push 0x4d
pop rcx
sub rsp, 0x20
call fcn.14009cec8
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call fcn.14003835b
push qword [0x1404ba934]
push qword [0x1404ba6fc]
push 0x4d
pop rcx
pop rdx
pop r8
call fcn.1400252f8
push 0
push 1
push reloc.WS2_32.dll_inet_addr
sub rsp, 8
push 0x4d
pop rcx
sub rsp, 0x20
call fcn.14009cec8
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.dll_SendMessageW
call fcn.14002bd10
push 0
pop rcx
call fcn.1400166fb
xor rax, rax
push rax
mov rcx, qword [rsp + 0x68]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
mov rcx, qword [rsp + 0x88]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
mov rcx, qword [rsp + 0x70]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
mov rcx, qword [rsp + 0x78]
sub rsp, 0x28
call fcn.1400bdaa0
add rsp, 0x28
pop rax
add rsp, 0x90
pop r15
ret