Function at 0x140039e40
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rsp + 0x2d0], rbx
mov r12, rdx
mov r13, rcx
call fcn.140004e00
mov rcx, rax
xor r15d, r15d
mov r8d, r15d
test rax, rax
setne r8b
test r8d, r8d
jne 0x140039e97
mov ecx, 0x80004005
call fcn.140004c30
int3
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
mov r14d, r15d
or rsi, 0xffffffffffffffff
cmp dword [r13 + 0x20], r15d
jbe 0x14003a288
movabs r8, 0x1000000000001001
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140039f18
cmp dword [rdx + 0x10], 0
jge 0x140039eea
cmp dword [rbx - 0xc], 0
jl 0x14003a272
mov dword [rbx - 0x10], r15d
mov word [rbx], r15w
jmp 0x140039f18
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140039efa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e0], rbx
movabs r8, 0x1000000000001001
mov edx, r14d
lea rax, [rdx + rdx*2]
add rax, rax
movups xmm1, xmmword [r13 + rax*8 + 0xd8]
movups xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [r13 + rax*8 + 0xe8]
movups xmmword [rsp + 0x70], xmm0
mov ecx, dword [r13 + rax*8 + 0xc8]
cmp ecx, 1
jne 0x140039fe2
cmp r14d, dword [r13 + 0x20]
jae 0x14003a250
cmp ecx, ecx
jne 0x14003a250
lea rax, [rdx + 5]
lea rax, [rax + rax*2]
add rax, rax
cmp byte [r13 + rax*8], cl
jne 0x14003a250
mov r8d, 0x104
lea rdx, [rbp - 0x80]
mov ecx, dword [rsp + 0x68]
call qword [sym.imp.USER32.dll_GetKeyNameTextW]
test r14d, r14d
je 0x140039fb6
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x140039fb6
lea r8, [rbp - 0x80]
lea rdx, [0x140129470]
lea rcx, [rbp + 0x1e0]
call fcn.14000be00
jmp 0x14003a249
lea rcx, [rbp - 0x80]
mov rax, rsi
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140039fc0
mov r8d, eax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1e0]
call fcn.14000c250
jmp 0x14003a249
test ecx, ecx
jne 0x14003a250
mov edi, dword [rsp + 0x64]
lea eax, [rdi - 4]
cmp eax, 0x3c
ja 0x14003a250
bt r8, rax
jae 0x14003a250
call fcn.140004e00
mov ecx, r15d
test rax, rax
setne cl
test ecx, ecx
je 0x14003a27d
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1e8], rbx
cmp edi, 4
je 0x14003a175
cmp edi, 0x10
je 0x14003a0f8
cmp edi, 0x40
jne 0x14003a235
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x409
lea rcx, [rsp + 0x40]
call fcn.1400b0550
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14003a0bc
cmp dword [rbx + 0x10], 0
jl 0x14003a0ab
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14003a0ab
call fcn.14000bc70
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14003a09e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x14003a0bc
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000c250
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003a0d5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x14003a217
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
je 0x14003a217
lea rdx, [0x140129470]
jmp 0x14003a21e
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x408
lea rcx, [rsp + 0x38]
call fcn.1400b0550
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14003a16b
cmp dword [rbx + 0x10], 0
jl 0x14003a15a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14003a15a
call fcn.14000bc70
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14003a14d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x14003a16b
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000c250
nop
mov rdx, qword [rsp + 0x38]
jmp 0x14003a0c1
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov edx, 0x407
lea rcx, [rsp + 0x30]
call fcn.1400b0550
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14003a1e8
cmp dword [rbx + 0x10], 0
jl 0x14003a1d7
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14003a1d7
call fcn.14000bc70
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14003a1ca
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x1e8], rax
jmp 0x14003a1e8
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x1e8]
call fcn.14000c250
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003a201
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r14d, r14d
je 0x14003a217
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
lea rdx, [0x140129470]
jne 0x14003a21e
lea rdx, [0x14012947c]
mov rbx, qword [rbp + 0x1e8]
mov r8, rbx
lea rcx, [rbp + 0x1e0]
call fcn.14000be00
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003a249
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp + 0x1e0]
mov r8d, dword [rbx - 0x10]
test r8d, r8d
je 0x14003a264
mov rdx, rbx
mov rcx, r12
call fcn.14000baa0
inc r14d
cmp r14d, dword [r13 + 0x20]
jae 0x14003a288
jmp 0x140039eb9
mov ecx, 0x80070057
call fcn.140004c30
int3
mov ecx, 0x80004005
call fcn.140004c30
int3
mov rax, qword [r12]
cmp dword [rax - 0x10], 0
setne r15b
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003a2a9
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, r15d
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret