Function at 0x1400cf170
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0xb0], rbx
mov r14, rdx
mov rsi, rcx
mov rcx, qword [rdx]
mov edi, 0xffffffff
test rcx, rcx
je 0x1400cf401
xor ebp, ebp
mov dword [rsp + 0x20], ebp
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
call fcn.1402dce2c
test rax, rax
je 0x1400cf1e8
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x1400cf1dc
lock inc dword [rcx + 8]
mov rcx, qword [r14 + 8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rcx
jmp 0x1400cf1f6
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x1400cf3c4
lea r15, [rax + 0x100]
cmp qword [r15], 0
je 0x1400cf3c4
mov ecx, reloc.SHELL32.dll_ILClone
call qword [sym.imp.USER32.dll_GetKeyState]
mov ebx, 0xffff8000
and ax, bx
je 0x1400cf2f0
mov rbx, qword [r15]
mov rcx, qword [rsi + 0xa28]
call fcn.140084eb0
mov rdx, rax
mov rcx, rbx
call fcn.140082600
mov qword [rsp + 0xc8], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], rbp
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x68]
call fcn.140092470
nop
mov rbx, qword [rsi + 0xb8]
mov rcx, qword [rsi + 0xa28]
call fcn.140084eb0
mov r9d, 1
mov r8, rbx
mov rbx, qword [rsp + 0x68]
mov rdx, rbx
mov rcx, rax
call fcn.140091370
nop
test rbx, rbx
je 0x1400cf3c4
mov rax, qword [rsp + 0x78]
sub rax, rbx
sar rax, 3
lea rdx, [rax*8]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400cf2e3
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400cf490
mov rcx, rbx
call fcn.1401aed44
jmp 0x1400cf3c4
mov ecx, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.USER32.dll_GetKeyState]
and ax, bx
je 0x1400cf308
xor r8d, r8d
jmp 0x1400cf3b0
mov edx, dword [rsi + 0x8c]
lea rcx, [rsp + 0x58]
call fcn.1400d5910
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x1400cf373
mov rcx, qword [rax + 0xa28]
test rcx, rcx
je 0x1400cf373
cmp dword [rcx + 0x84], 2
jne 0x1400cf373
mov ebp, dword [rax + 0x88]
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x1400cf371
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400cf371
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400cf371
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400cf3ad
mov ebp, dword [rsi + 0x88]
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x1400cf3ad
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400cf3ad
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400cf3ad
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov r8d, ebp
mov r9, r15
mov edx, 0xbeb
mov ecx, dword [rsi + 0xa90]
call fcn.140125f60
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400cf3ff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400cf3ff
mov rbx, qword [rsp + 0x50]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400cf3ff
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400cf448
mov rax, qword [rsi + 0xa28]
test rax, rax
je 0x1400cf426
cmp dword [rax + 0x84], 3
jne 0x1400cf426
xor r8d, r8d
mov edx, 0xbe4
mov ecx, dword [rsi + 0xa90]
jmp 0x1400cf43f
mov rcx, rsi
call fcn.1400d6130
test eax, eax
je 0x1400cf448
mov edx, VarUI4FromDisp
mov r8d, 0x1770
mov ecx, eax
xor r9d, r9d
call fcn.140125f60
nop
mov rbx, qword [r14 + 8]
test rbx, rbx
je 0x1400cf479
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400cf479
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1400cf479
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rbx, qword [rsp + 0xb0]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.1402df98c
nop
int3