Function at 0x140039870
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x2d0], rbx
mov r12, rdx
mov r13, rcx
call fcn.140005220
mov rcx, rax
xor r15d, r15d
mov r8d, r15d
test rax, rax
setne r8b
test r8d, r8d
jne 0x1400398c7
mov ecx, 0x80004005
call fcn.1400051c0
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
mov r14d, r15d
or rsi, 0xffffffffffffffff
cmp dword [r13 + 0x20], r15d
jbe 0x140039cb8
movabs r8, 0x1000000000001001
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140039948
cmp dword [rdx + 0x10], 0
jge 0x14003991a
cmp dword [rbx - 0xc], 0
jl 0x140039ca2
mov dword [rbx - 0x10], r15d
mov word [rbx], r15w
jmp 0x140039948
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003992a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
movabs r8, 0x1000000000001001
mov edx, r14d
lea rax, [rdx + rdx*2]
add rax, rax
movups xmm1, xmmword [r13 + rax*8 + 0xd8]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [r13 + rax*8 + 0xe8]
movups xmmword [rsp + 0x70], xmm0
mov ecx, dword [r13 + rax*8 + 0xc8]
cmp ecx, 1
jne 0x140039a12
cmp r14d, dword [r13 + 0x20]
jae 0x140039c80
cmp ecx, ecx
jne 0x140039c80
lea rax, [rdx + 5]
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r13 + rax*8], cl
jne 0x140039c80
mov r8d, 0x104
lea rdx, [rbp - 0x80]
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetKeyNameTextW]
test r14d, r14d
je 0x1400399e6
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x1400399e6
lea r8, [rbp - 0x80]
lea rdx, [0x140129430]
lea rcx, [rbp + 0x1e0]
call fcn.140009350
jmp 0x140039c79
lea rcx, [rbp - 0x80]
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400399f0
mov r8d, eax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1e0]
call fcn.14000c060
jmp 0x140039c79
test ecx, ecx
jne 0x140039c80
mov edi, dword [rsp + 0x64]
lea eax, [rdi - 4]
cmp eax, 0x3c
ja 0x140039c80
bt r8, rax
jae 0x140039c80
call fcn.140005220
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x140039cad
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e8], rbx
cmp edi, 4
je 0x140039ba5
cmp edi, 0x10
je 0x140039b28
cmp edi, 0x40
jne 0x140039c65
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x409
lea rcx, [rsp + 0x40]
call fcn.1400b0300
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140039aec
cmp dword [rbx + 0x10], 0
jl 0x140039adb
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140039adb
call fcn.14000bab0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140039ace
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140039aec
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000c060
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039b05
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140039c47
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x140039c47
lea rdx, [0x140129430]
jmp 0x140039c4e
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x408
lea rcx, [rsp + 0x38]
call fcn.1400b0300
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140039b9b
cmp dword [rbx + 0x10], 0
jl 0x140039b8a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140039b8a
call fcn.14000bab0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140039b7d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140039b9b
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000c060
nop
mov rdx, qword [rsp + 0x38]
jmp 0x140039af1
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x407
lea rcx, [rsp + 0x30]
call fcn.1400b0300
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140039c18
cmp dword [rbx + 0x10], 0
jl 0x140039c07
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140039c07
call fcn.14000bab0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140039bfa
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x140039c18
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000c060
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039c31
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x140039c47
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
lea rdx, [0x140129430]
jne 0x140039c4e
lea rdx, [0x14012943c]
mov rbx, qword [rbp + 0x1e8]
mov r8, rbx
lea rcx, [rbp + 0x1e0]
call fcn.140009350
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039c79
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x1e0]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x140039c94
mov rdx, rbx
mov rcx, r12
call fcn.14000b8e0
inc r14d
cmp r14d, dword [r13 + 0x20]
jae 0x140039cb8
jmp 0x1400398e9
mov ecx, 0x80070057
call fcn.1400051c0
int3
mov ecx, 0x80004005
call fcn.1400051c0
int3
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
setne r15b
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039cd9
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r15d
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret