Function at 0x140003793
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
sub rsp, 0x140
lea rbp, [rsp + 0x80]
mov dword [rbp + 0xd0], ecx
movabs rax, 0x2ee505ba5b681a50
mov qword [rbp + 0xb8], rax
mov dword [rbp + 0xb0], 0x23e96814
movabs rax, 0xbb8d6a6ca5fc4c2
add qword [rbp + 0xb8], rax
mov eax, dword [rbp + 0xb0]
mov dword [rbp + 0xac], eax
mov eax, dword [rbp + 0xb0]
add eax, 0x4e58717d
cmp dword [rbp + 0xac], eax
jae 0x14000391f
movabs rax, 0x3a9ddc6125c7df12
cmp qword [rbp + 0xb8], rax
jne 0x1400038d0
mov rdx, qword [0x140170310]
movabs rax, 0xfa977e52e2f748
cmp rdx, rax
jne 0x14000389f
cmp dword [rbp + 0xd0], 0x4c9b1151
je 0x140003842
cmp dword [rbp + 0xd0], 0x5ea529cc
je 0x140003894
jmp 0x1400038ce
mov dword [rbp + 0xd0], 0x5d6f82a0
mov ecx, 0x6e
mov rax, qword [sym.imp.USER32.dll_EnumClipboardFormats]
call rax
mov dword [rbp + 0xb4], eax
call fcn.14015be39
movabs rax, 0x401e96c85b6d784d
and qword [rbp + 0xb8], rax
mov rax, qword [rbp + 0xa0]
mov edx, 0x61
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetClassWord]
call rax
mov word [rbp - 0x42], ax
jmp 0x14000389d
sar qword [rbp + 0xb8], 0x38
nop
jmp 0x1400038ce
movabs rax, 0x3a9ddc6125c7df12
cmp qword [rbp + 0xb8], rax
je 0x1400038cc
movabs rax, 0x4e58e456dd1b4797
cmp qword [rbp + 0xb8], rax
jne 0x1400038cd
call fcn.14015bdf7
jmp 0x1400038cd
nop
nop
jmp 0x140003914
mov rax, qword [rbp + 0x98]
lea rdx, str.Unentered_infield_Disengagement
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_RemovePropW]
call rax
mov qword [rbp + 0x90], rax
mov dword [rbp + 0xd0], 0x7d1ab720
call fcn.14015be39
lea rax, [rbp - 0x40]
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetCursorPos]
call rax
mov dword [rbp - 0x40], eax
nop
movzx eax, word [rbp - 0x42]
mov word [rbp + 0x8e], ax
mov word [rbp + 0x8c], 0x71be
movzx eax, word [rbp - 0x42]
mov word [rbp + 0x8a], ax
mov rax, qword [0x140170310]
movabs rdx, 0x2257bc9c38e852b5
cmp rax, rdx
je 0x140003961
movabs rdx, 0x7c799cea9fc78db6
cmp rax, rdx
je 0x1400039e3
jmp 0x1400039e9
mov rdx, qword [rbp + 0x78]
mov rax, qword [rbp + 0x80]
mov r8d, 1
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetNextDlgTabItem]
call rax
mov qword [rbp + 0x80], rax
lea rdx, [rbp - 0x30]
mov rax, qword [rbp + 0x98]
mov dword [rsp + 0x20], 0x30
mov r9d, 0x36
mov r8d, 0x59
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_DlgDirListComboBoxW]
call rax
mov dword [rbp - 0x3c], eax
mov eax, dword [rbp + 0xb0]
xor eax, dword [rbp + 0xb4]
mov dword [rbp + 0xac], eax
call fcn.14015be39
mov rdx, qword [rbp - 0x38]
mov rax, qword [rbp + 0x78]
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_DragDetect]
call rax
mov dword [rbp + 0x74], eax
jmp 0x1400039e9
call fcn.14015baac
nop
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x68], rax
lea rax, [rbp - 0x3c]
mov qword [rbp + 0x60], rax
mov rax, qword [0x140170310]
mov qword [rbp + 0x58], rax
movzx eax, word [rbp - 0x42]
movzx eax, ax
test eax, eax
jne 0x140003a28
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x50], rax
lea rax, [rbp - 0x42]
mov qword [rbp + 0x48], rax
mov byte [rbp + 0x47], 0x7b
jmp 0x140003a4d
mov rax, qword [rbp + 0x60]
mov eax, dword [rax]
mov edx, dword [rbp + 0xd0]
mov ecx, eax
call fcn.140003f0b
mov edx, dword [rbp - 0x3c]
mov eax, dword [rbp + 0xd0]
add edx, eax
mov rax, qword [rbp + 0x60]
mov dword [rax], edx
nop
mov eax, dword [rbp - 0x3c]
or eax, dword [rbp + 0xd0]
mov edx, eax
mov rax, qword [rbp + 0x60]
mov dword [rax], edx
mov rax, qword [rbp + 0x60]
mov eax, dword [rax]
mov dword [rbp - 0x3c], eax
mov ecx, 0xb4
mov rax, qword [sym.imp.USER32.dll_VkKeyScanW]
call rax
mov word [rbp + 0x44], ax
movzx eax, word [rbp - 0x42]
movzx eax, ax
cmp eax, 0x14e
jne 0x140003aa0
mov rax, qword [rbp + 0xa0]
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_GetMenu]
call rax
mov qword [rbp + 0x38], rax
jmp 0x140003aa1
nop
mov rax, qword [rbp + 0x60]
mov edx, dword [rax]
mov eax, dword [rbp - 0x3c]
mov ecx, eax
shl edx, cl
mov rax, qword [rbp + 0x60]
mov dword [rax], edx
movzx eax, word [rbp + 0x8c]
mov word [rbp + 0x44], ax
mov rax, qword [rbp + 0x60]
mov edx, dword [rax]
mov eax, dword [rbp - 0x3c]
add edx, eax
mov rax, qword [rbp + 0x60]
mov dword [rax], edx
movsx ecx, word [rbp + 0x8c]
mov rdx, qword [rbp + 0x58]
mov rax, qword [rbp + 0x58]
mov r8d, ecx
mov rcx, rax
call fcn.140003b33
mov ecx, 0xf9
mov rax, qword [sym.imp.USER32.dll_BeginDeferWindowPos]
call rax
mov qword [rbp + 0x30], rax
movabs rdx, 0xdab6e59080019ca7
mov rax, qword [rbp + 0xb8]
add rax, rdx
mov qword [rbp + 0x68], rax
mov eax, dword [rbp - 0x3c]
and eax, dword [rbp + 0xd0]
mov edx, eax
mov rax, qword [rbp + 0x60]
mov dword [rax], edx
mov eax, 1
add rsp, 0x140
pop rbp
ret