Function at 0x1400d9b08
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x228]
sub rsp, 0x328
mov rax, qword [0x140412700]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov r12, r9
mov qword [rsp + 0x70], r9
mov r14, r8
mov r15, rdx
mov r13, rcx
mov qword [rsp + 0x68], rcx
mov rax, qword [rbp + 0x298]
mov qword [rbp], rax
xor ecx, ecx
mov edi, ecx
mov dword [rsp + 0x60], ecx
mov sil, cl
mov eax, dword [r8]
neg eax
sbb ebx, ebx
neg ebx
dec ebx
cmp dword [r8], ecx
je 0x1400d9c93
lea r12d, [rcx + 1]
or r13d, 0xffffffff
mov r8d, ebx
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.140179fa4
or edi, 0x20
mov dword [rsp + 0x60], edi
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.14017a350
movzx esi, sil
cmp eax, 2
cmove esi, r12d
and edi, 0xffffffdf
mov dword [rsp + 0x60], edi
lea rcx, [rbp + 0x20]
call fcn.14000dd24
add ebx, r12d
cmp ebx, dword [r14]
cmovge ebx, r13d
cmp ebx, r13d
jne 0x1400d9b7d
test sil, sil
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
je 0x1400d9c93
call fcn.14013067c
mov rdi, rax
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor esi, esi
test ax, ax
js 0x1400d9c03
mov rcx, r13
call fcn.1400e3788
cmp byte [rax + 0x48], sil
je 0x1400d9c06
mov r15, rsi
lea rax, [r15 + 0x188]
neg r15
sbb rbx, rbx
and rbx, rax
mov rcx, r13
call fcn.1400e3788
mov al, byte [rax + 0x48]
mov byte [rsp + 0x64], al
mov eax, 1
mov byte [rsp + 0x65], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
xor r8d, r8d
lea rdx, [0x14036ac58]
lea rcx, [rbp + 0x20]
call fcn.140013184
nop
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rbx
movzx eax, word [rsp + 0x64]
mov word [rsp + 0x28], ax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, r12
mov rdx, r14
mov rcx, rdi
call fcn.14012ca98
nop
jmp 0x1400d9daa
call fcn.14006a4b4
xor r15d, r15d
test eax, eax
je 0x1400d9dbb
mov ecx, dword [r14]
mov eax, ecx
neg eax
sbb esi, esi
neg esi
dec esi
test ecx, ecx
je 0x1400d9d18
lea r13d, [r15 + 1]
mov r8d, esi
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.140179fa4
bts edi, 8
mov dword [rsp + 0x60], edi
lea rcx, [rbp + 0x20]
call fcn.14006a23c
mov rbx, rax
btr edi, 8
mov dword [rsp + 0x60], edi
lea rcx, [rbp + 0x20]
call fcn.14000dd24
lea rcx, [r15 + 1]
test rbx, rbx
cmove rcx, r15
mov r15, rcx
add esi, r13d
mov ecx, dword [r14]
cmp esi, ecx
mov eax, 0xffffffff
cmovge esi, eax
cmp esi, eax
jne 0x1400d9cb8
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
movsxd rax, ecx
cmp r15, rax
jne 0x1400d9db8
call fcn.14013067c
mov rdi, rax
mov rbx, qword [rbp]
mov rcx, r13
call fcn.1400e3788
mov cl, byte [rax + 0x48]
mov byte [rsp + 0x64], cl
mov eax, 1
mov byte [rsp + 0x65], al
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
xor r8d, r8d
lea rdx, [0x14036ac58]
lea rcx, [rbp + 0x20]
call fcn.140013184
nop
xor eax, eax
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rax
movzx eax, word [rsp + 0x64]
mov word [rsp + 0x28], ax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, r12
mov rdx, r14
mov rcx, rdi
call fcn.14012ca98
nop
lea rcx, [rbp + 0x20]
call fcn.14000dd24
jmp 0x1400da367
xor r15d, r15d
lea rcx, [rbp + 0x60]
call fcn.140179d84
nop
lea rax, [fcn.140044410]
mov qword [rsp + 0x20], rax
lea r9, [0x1400b1ac0]
mov ebx, 3
mov r8d, ebx
lea edx, [rbx + 0x25]
lea rcx, [rbp + 0x190]
call fcn.140219a78
nop
lea rax, [fcn.14000dd90]
mov qword [rsp + 0x20], rax
lea r9, [fcn.14000cc00]
mov r8d, ebx
lea edx, [rbx + 0x1d]
lea rcx, [rbp + 0x130]
call fcn.140219a78
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
lea r8d, [rbx + 0xa]
lea rdx, str.Untitled_left
lea rcx, [rsp + 0x78]
call fcn.1400384d0
nop
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0xd0]
call fcn.140141828
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1400d9e8a
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d9e85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400da390
call fcn.14000e3f0
movdqa xmm0, xmmword [0x1403a9d80]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], r15b
xorps xmm0, xmm0
xorps xmm1, xmm1
cmp dword [r14], ebx
jge 0x1400d9ee7
movups xmmword [rbp + 0x20], xmm0
movdqu xmmword [rbp + 0x30], xmm1
mov r8d, InitCommonControls
lea rdx, str.Untitled_right
lea rcx, [rbp + 0x20]
call fcn.1400384d0
nop
mov esi, 1
or edi, esi
mov dword [rsp + 0x60], edi
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x28]
call fcn.140141828
mov rbx, rax
or edi, 2
jmp 0x1400d9f26
movups xmmword [rbp - 0x68], xmm0
movdqu xmmword [rbp - 0x58], xmm1
mov r8d, reloc.OLEAUT32.dll_SafeArrayDestroy
lea rdx, str.Untitled_middle
lea rcx, [rbp - 0x68]
call fcn.1400384d0
nop
or edi, 4
mov dword [rsp + 0x60], edi
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x48]
call fcn.140141828
mov rbx, rax
or edi, 8
mov esi, 1
mov dword [rsp + 0x60], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x100], xmm1
mov r8d, 0x20
mov rdx, rbx
lea rcx, [rbp + 0xf0]
call fcn.1402bec40
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 7
mov word [rbx], r15w
test dil, 8
je 0x1400d9f7b
and edi, 0xfffffff7
mov dword [rsp + 0x60], edi
lea rcx, [rbp - 0x48]
call fcn.14000dd24
nop
test dil, 4
je 0x1400d9fd4
and edi, 0xfffffffb
mov dword [rsp + 0x60], edi
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x1400d9fc3
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d9fbe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400da396
call fcn.14000e3f0
movdqa xmm0, xmmword [0x1403a9d80]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], r15b
test dil, 2
je 0x1400d9feb
and edi, 0xfffffffd
mov dword [rsp + 0x60], edi
lea rcx, [rbp - 0x28]
call fcn.14000dd24
nop
test sil, dil
je 0x1400da043
and edi, 0xfffffffe
mov dword [rsp + 0x60], edi
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400da032
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400da02d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400da39c
call fcn.14000e3f0
movdqa xmm0, xmmword [0x1403a9d80]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], r15b
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
mov r8d, InitCommonControls
lea rdx, str.Untitled_right
lea rcx, [rbp + 0x20]
call fcn.1400384d0
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x110]
call fcn.140141828
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400da0b5
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400da0b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400da38a
call fcn.14000e3f0
movdqa xmm0, xmmword [0x1403a9d80]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], r15b
mov esi, r15d
cmp dword [r14], r15d
jle 0x1400da21f
lea r15, [rbp + 0x1b0]
mov r12, qword [rbp + 0x290]
xor r13d, r13d
mov r8d, esi
lea rdx, [rbp - 0x68]
mov rcx, r14
call fcn.140179fa4
or edi, 0x10
mov dword [rsp + 0x60], edi
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.14017a350
mov ebx, eax
and edi, 0xffffffef
mov dword [rsp + 0x60], edi
lea rcx, [rbp - 0x68]
call fcn.14000dd24
movsxd rax, esi
test ebx, ebx
jne 0x1400da17a
shl rax, 5
lea rdx, [rbp + 0xd0]
add rdx, rax
lea rcx, [rbp + 0x130]
add rcx, rax
call fcn.1400455e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r13
lea r8d, [rbx + 3]
lea rdx, [0x14039eb78]
lea rcx, [rbp + 0x20]
call fcn.140013184
nop
xor r9d, r9d
lea r8, [rbp + 0x20]
mov edx, esi
lea rcx, [rbp + 0x60]
call fcn.14017a234
nop
lea rcx, [rbp + 0x20]
jmp 0x1400da1fa
lea rax, [rax + rax*4]
lea rbx, [rbp + 0x190]
lea rbx, [rbx + rax*8]
mov r8d, esi
lea rdx, [rsp + 0x78]
mov rcx, r14
call fcn.140179fa4
bts edi, 7
mov dword [rsp + 0x60], edi
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.1400455e0
btr edi, 7
mov dword [rsp + 0x60], edi
lea rcx, [rsp + 0x78]
call fcn.14000dd24
mov rax, qword [r12]
mov qword [r15], rax
mov r8d, esi
lea rdx, [rbp - 0x48]
mov rcx, r14
call fcn.140179fa4
or edi, 0x40
mov dword [rsp + 0x60], edi
xor r9d, r9d
lea r8, [rbp - 0x48]
mov edx, esi
lea rcx, [rbp + 0x60]
call fcn.14017a234
and edi, 0xffffffbf
mov dword [rsp + 0x60], edi
lea rcx, [rbp - 0x48]
call fcn.14000dd24
inc esi
add r12, 8
add r15, 0x28
cmp esi, dword [r14]
jl 0x1400da0e3
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
xor r15d, r15d
mov qword [rbp + 0x18], r15
mov qword [rbp + 0x10], r15
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.1400afe74
nop
mov rcx, r13
call fcn.1400e3788
lea r8, [rbp]
lea rcx, [rbp + 0x18]
cmp qword [rbp], r15
cmovne r8, rcx
lea r9, [rbp + 0x10]
lea rdx, [rbp + 0x40]
mov rcx, rax
call fcn.1400b0944
call fcn.14013067c
mov rsi, rax
mov rbx, qword [rbp + 0x10]
mov rdi, qword [rbp]
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
xor r8d, r8d
lea rdx, [0x14036ac58]
lea rcx, [rbp + 0x20]
call fcn.140013184
nop
mov rax, qword [r13 + 0xe8]
lea rcx, [rax + 0x188]
neg rax
sbb r8, r8
and r8, rcx
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x40], rdi
lea rax, [rbp + 0x20]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x130]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
lea rax, [rbp + 0x190]
mov qword [rsp + 0x20], rax
mov r9d, dword [r14]
xor edx, edx
mov rcx, rsi
call fcn.14012a02c
nop
lea rcx, [rbp + 0x20]
call fcn.14000dd24
nop
lea rcx, [rbp + 0x40]
call fcn.14000dd24
nop
lea r9, [fcn.14000dd90]
mov ebx, 3
mov r8d, ebx
lea edi, [rbx + 0x1d]
mov edx, edi
lea rcx, [rbp + 0xd0]
call fcn.140219af0
nop
lea r9, [fcn.14000dd90]
mov r8d, ebx
mov edx, edi
lea rcx, [rbp + 0x130]
call fcn.140219af0
nop
lea r9, [fcn.140044410]
mov r8d, ebx
lea edx, [rbx + 0x25]
lea rcx, [rbp + 0x190]
call fcn.140219af0
nop
lea r9, [fcn.140044410]
mov r8d, ebx
mov edx, edi
lea rcx, [rbp + 0x68]
call fcn.140219af0
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.1402194b0
add rsp, 0x328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140287130
nop
call fcn.140287130
nop
call fcn.140287130
nop
call fcn.140287130
int3