Function at 0x1401e8274
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf]
sub rsp, 0xb0
mov rax, qword [0x1403d88e8]
xor rax, rsp
mov qword [rbp + 7], rax
mov rsi, qword [rbp + 0x7f]
xor r15d, r15d
mov rax, qword [rbp + 0x6f]
mov rbx, r9
mov r12, qword [rbp + 0x77]
mov r14, r8
mov qword [rbp - 0x39], rdx
mov rdi, rdx
mov qword [rbp - 0x31], rax
mov r13, rcx
test rsi, rsi
je 0x1401e8680
mov dword [r12], r15d
mov rcx, rax
mov qword [rsi], r15
mov dword [rbp - 0x59], 0x1000
mov dword [rbp - 0x61], r15d
mov dword [rbp - 0x5d], r15d
call qword [sym.imp.USER32.dll_SetRectEmpty]
lea ecx, [r15 + 0x11]
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x1401e8659
lea rax, [rbp - 0x5d]
mov r9, rsi
mov qword [rsp + 0x30], rax
mov r8, rbx
lea rax, [rbp - 0x61]
mov rdx, rdi
mov qword [rsp + 0x28], rax
mov rcx, r13
lea rax, [rbp - 0x59]
mov qword [rsp + 0x20], rax
call fcn.1401e8e94
xor ebx, ebx
test eax, eax
je 0x1401e8659
cmp qword [rsi], rbx
je 0x1401e8659
lea rdx, str.CPaneFrameWnd
mov rcx, r14
call fcn.1401083a4
test eax, eax
je 0x1401e837b
mov rdx, r14
lea rcx, str.CPaneFrameWnd
call fcn.1401082ec
mov rdi, rax
mov rcx, qword [rax]
mov rbx, qword [rcx + 0x358]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
xor ebx, ebx
jmp 0x1401e837e
mov rax, r14
mov rdx, rax
lea rcx, str.CPane
call fcn.1401082ec
mov rdi, qword [rsi]
mov r15, rax
test rdi, rdi
je 0x1401e8449
mov rdx, qword [rdi]
mov rbx, qword [rdx + 0x330]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
mov rdi, qword [rsi]
mov dword [rbp - 0x51], eax
mov rdx, qword [rdi]
mov rbx, qword [rdx + 0x328]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
mov rdi, qword [rsi]
mov dword [rbp - 0x49], eax
mov rdx, qword [rdi]
mov rbx, qword [rdx + 0x450]
mov rcx, rbx
call fcn.14029e28c
xor edx, edx
mov rcx, rdi
call rbx
xor ebx, ebx
test rax, rax
mov edi, ebx
setne dil
test r15, r15
je 0x1401e8449
mov rax, qword [r15]
mov rbx, qword [rax + 0x330]
mov rcx, rbx
call fcn.14029e28c
mov rcx, r15
call rbx
cmp eax, dword [rbp - 0x51]
je 0x1401e8423
test edi, edi
jne 0x1401e8659
mov rax, qword [r15]
mov rbx, qword [rax + 0x330]
mov rcx, rbx
call fcn.14029e28c
mov rcx, r15
call rbx
xor ebx, ebx
test dword [rbp - 0x49], eax
jne 0x1401e8449
test edi, edi
je 0x1401e8659
cmp dword [rbp - 0x61], ebx
jne 0x1401e8457
cmp dword [rbp - 0x5d], ebx
je 0x1401e84e9
mov rax, qword [rsi]
mov ecx, ebx
test rax, rax
setne cl
mov dword [r12], ecx
test rax, rax
je 0x1401e84e1
mov rdi, qword [rsi]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x318]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
xor ebx, ebx
test eax, eax
je 0x1401e84db
mov rdx, r14
mov rcx, r13
call fcn.1401e8688
test eax, eax
je 0x1401e84db
test r15, r15
je 0x1401e84db
mov rdi, qword [rsi]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x330]
mov rcx, rbx
call fcn.14029e28c
mov rcx, rdi
call rbx
mov rcx, qword [r15]
mov edi, eax
mov rbx, qword [rcx + 0x330]
mov rcx, rbx
call fcn.14029e28c
mov rcx, r15
call rbx
xor ebx, ebx
lea ecx, [rbx + 1]
cmp edi, eax
je 0x1401e84dd
mov ecx, ebx
mov dword [r12], ecx
test ecx, ecx
je 0x1401e8659
mov rdi, qword [rsi]
test rdi, rdi
je 0x1401e8563
mov rax, qword [rdi]
mov rbx, qword [rax + 0x450]
mov rcx, rbx
call fcn.14029e28c
xor edx, edx
mov rcx, rdi
call rbx
xor ebx, ebx
test rax, rax
je 0x1401e8524
mov rdx, r14
mov rcx, r13
call fcn.1401e86f0
test eax, eax
je 0x1401e8655
cmp qword [rsi], rbx
je 0x1401e8563
lea rdx, str.CBasePane
mov rcx, r14
call fcn.1401083a4
test eax, eax
je 0x1401e8563
mov rdi, qword [rsi]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x308]
mov rcx, rbx
call fcn.14029e28c
mov rdx, r14
mov rcx, rdi
call rbx
xor ebx, ebx
test eax, eax
je 0x1401e8655
mov rcx, qword [rsi]
lea rdx, [rbp - 0x29]
mov qword [rbp - 0x29], rbx
mov qword [rbp - 0x21], rbx
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_GetWindowRect]
cmp qword [rsi], r14
je 0x1401e8655
lea rdx, str.CPaneFrameWnd
mov rcx, r14
call fcn.1401083a4
test eax, eax
je 0x1401e85bf
mov rdi, qword [rsi]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x450]
mov rcx, rbx
call fcn.14029e28c
xor edx, edx
mov rcx, rdi
call rbx
xor ebx, ebx
cmp rax, r14
je 0x1401e8655
mov rcx, qword [r14 + 0x40]
lea rdx, [rbp - 0x19]
and qword [rbp - 0x51], 0
xorps xmm0, xmm0
and qword [rbp - 0x49], 0
movdqu xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rbx
call qword [sym.imp.USER32.dll_GetWindowRect]
test r15, r15
je 0x1401e8659
mov rax, qword [r15]
mov rbx, qword [rax + 0x330]
mov rcx, rbx
call fcn.14029e28c
mov rcx, r15
call rbx
mov edx, dword [rbp - 0x59]
test edx, eax
jne 0x1401e8613
cmp dword [0x1403fb230], 0
je 0x1401e8659
mov rax, qword [rbp - 0x49]
lea r9, [rbp - 9]
mov rcx, qword [rbp - 0x39]
lea r8, [rbp - 0x19]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp - 0x51]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x41]
mov dword [rsp + 0x28], edx
lea rdx, [rbp - 0x29]
mov qword [rsp + 0x20], rax
call fcn.14027478c
mov rax, qword [rbp - 0x31]
movups xmm0, xmmword [rbp - 0x19]
movdqu xmmword [rax], xmm0
jmp 0x1401e8659
mov dword [r12], ebx
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.14029d880
mov rbx, qword [rsp + 0xf0]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400f91a0
int3