Function at 0x1400ddbc0
Capabilities:
Log keystrokes via application hook

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x88
lea rbp, [rsp + 0x80]
movaps xmmword [rbp - 0x10], xmm6
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov rax, qword [0x1401e1190]
cmp rax, 2
jne 0x1400ddf7c
lea rsi, [0x1401e11a0]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov r13, qword [0x1401e1228]
mov rax, qword [r13]
shl rax, 1
test rax, rax
jne 0x1400ddf90
movzx eax, byte [0x1401e11a8]
test al, al
jne 0x1400de0d1
cmp qword [0x1401e11c8], 0
sete bl
mov rax, qword [r13]
shl rax, 1
test rax, rax
jne 0x1400ddffc
lea rcx, [0x1401e11a0]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
test bl, bl
jne 0x1400ddca2
mov rax, qword [0x1401e1128]
cmp rax, 2
jne 0x1400de02e
lea rdx, [0x1400dea40]
mov ecx, 0xe
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.user32.dll_SetWindowsHookExW]
mov qword [rbp - 0x50], rax
lea rsi, [rbp - 0x50]
mov rcx, rsi
call fcn.1400e3090
test al, al
jne 0x1400de13a
mov qword [0x1401e1120], rsi
mov rax, qword [0x1401e1138]
cmp rax, 2
jne 0x1400ddfbc
lea rsi, [0x1401e1148]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov rax, qword [r13]
shl rax, 1
test rax, rax
jne 0x1400ddfd0
movzx eax, byte [0x1401e1150]
test al, al
jne 0x1400de107
cmp qword [0x1401e1170], 0
sete bl
mov rax, qword [r13]
shl rax, 1
test rax, rax
jne 0x1400de015
lea rcx, [0x1401e1148]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
test bl, bl
jne 0x1400ddd56
mov rax, qword [0x1401e1108]
cmp rax, 2
jne 0x1400de042
lea rdx, [0x1400de340]
mov ecx, 0xd
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.user32.dll_SetWindowsHookExW]
mov qword [rbp - 0x50], rax
lea rsi, [rbp - 0x50]
mov rcx, rsi
call fcn.1400e3090
test al, al
jne 0x1400de170
mov qword [0x1401e1100], rsi
xor ecx, ecx
xor edx, edx
mov r8d, 0x64
xor r9d, r9d
call qword [sym.imp.user32.dll_SetTimer]
mov qword [rbp - 0x58], rax
lea rsi, [0x1401e11a0]
mov rbx, qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov r14, qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
xorps xmm6, xmm6
lea r15, [rbp - 0x50]
mov r12, qword [sym.imp.user32.dll_GetMessageW]
jmp 0x1400dddcd
lea rcx, [0x1401e1148]
call r14
test dil, dil
jne 0x1400ddf32
movaps xmmword [rbp - 0x30], xmm6
movaps xmmword [rbp - 0x40], xmm6
movaps xmmword [rbp - 0x50], xmm6
mov rcx, r15
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call r12
mov rax, qword [0x1401e1190]
cmp rax, 2
jne 0x1400dde97
mov rcx, rsi
call rbx
mov rax, qword [r13]
shl rax, 1
test rax, rax
jne 0x1400ddeab
movzx eax, byte [0x1401e11a8]
test al, al
jne 0x1400de056
cmp qword [0x1401e11c8], 0
sete dil
mov rax, qword [r13]
shl rax, 1
test rax, rax
jne 0x1400dded8
mov rcx, rsi
call r14
test dil, dil
je 0x1400dddb3
mov rax, qword [0x1401e1138]
cmp rax, 2
jne 0x1400ddef1
lea rcx, [0x1401e1148]
call rbx
mov rax, qword [r13]
shl rax, 1
test rax, rax
jne 0x1400ddf05
movzx eax, byte [0x1401e1150]
test al, al
jne 0x1400de08c
cmp qword [0x1401e1170], 0
sete dil
mov rax, qword [r13]
shl rax, 1
test rax, rax
je 0x1400ddda0
call fcn.14011bff0
test al, al
jne 0x1400ddda0
mov byte [0x1401e1150], 1
jmp 0x1400ddda0
lea rcx, [0x1401e1190]
mov rdx, rcx
call fcn.14011b8e0
jmp 0x1400dddde
call fcn.14011bff0
movzx ecx, byte [0x1401e11a8]
test cl, cl
jne 0x1400de0c9
cmp qword [0x1401e11c8], 0
sete dil
test al, al
jne 0x1400dde0e
jmp 0x1400dde1e
call fcn.14011bff0
test al, al
jne 0x1400dde1e
mov byte [0x1401e11a8], 1
jmp 0x1400dde1e
lea rcx, [0x1401e1138]
mov rdx, rcx
call fcn.14011b930
jmp 0x1400dde3a
call fcn.14011bff0
movzx ecx, byte [0x1401e1150]
test cl, cl
jne 0x1400de0cd
cmp qword [0x1401e1170], 0
sete dil
test al, al
je 0x1400ddda0
jmp 0x1400dde6e
xor ecx, ecx
mov rdx, qword [rbp - 0x58]
call qword [sym.imp.user32.dll_KillTimer]
test eax, eax
jne 0x1400ddf64
call fcn.1400e3430
mov qword [rbp - 0x48], rax
mov dword [rbp - 0x40], edx
mov qword [rbp - 0x50], 1
test rax, rax
je 0x1400ddf64
lea rcx, [rbp - 0x48]
call fcn.1400e30a0
movaps xmm6, xmmword [rbp - 0x10]
add rsp, 0x88
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [0x1401e1190]
mov rdx, rcx
call fcn.14011b8e0
jmp 0x1400ddbf8
call fcn.14011bff0
movzx ecx, byte [0x1401e11a8]
test cl, cl
jne 0x1400de1a6
cmp qword [0x1401e11c8], 0
sete bl
test al, al
jne 0x1400ddc39
jmp 0x1400ddc49
lea rcx, [0x1401e1138]
mov rdx, rcx
call fcn.14011b930
jmp 0x1400ddcb3
call fcn.14011bff0
movzx ecx, byte [0x1401e1150]
test cl, cl
jne 0x1400de1ad
cmp qword [0x1401e1170], 0
sete bl
test al, al
jne 0x1400ddced
jmp 0x1400ddcfd
call fcn.14011bff0
test al, al
jne 0x1400ddc49
mov byte [0x1401e11a8], 1
jmp 0x1400ddc49
call fcn.14011bff0
test al, al
jne 0x1400ddcfd
mov byte [0x1401e1150], 1
jmp 0x1400ddcfd
lea rcx, [0x1401e1118]
mov rdx, rcx
call fcn.14011b890
jmp 0x1400ddc6b
lea rcx, [0x1401e10f8]
mov rdx, rcx
call fcn.14011b890
jmp 0x1400ddd1f
xor eax, eax
mov qword [rbp - 0x50], rsi
mov byte [rbp - 0x48], al
lea rax, str.F:disquemegamyarchetype_then_archetype_rsInputBot_develop_srcwindowsmod.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1401b6338]
lea r9, fcn.140003520
lea r8, [rbp - 0x50]
mov edx, 0x2b
call fcn.14011d190
jmp 0x1400de1a4
xor eax, eax
lea rcx, [0x1401e1148]
mov qword [rbp - 0x50], rcx
mov byte [rbp - 0x48], al
lea rax, str.F:disquemegamyarchetype_then_archetype_rsInputBot_develop_srcwindowsmod.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1401b6338]
lea r9, fcn.140003520
lea r8, [rbp - 0x50]
mov edx, 0x2b
call fcn.14011d190
jmp 0x1400de1a4
xor al, 1
jmp 0x1400de058
xor al, 1
jmp 0x1400de08e
xor eax, eax
mov qword [rbp - 0x50], rsi
mov byte [rbp - 0x48], al
lea rax, str.F:disquemegamyarchetype_then_archetype_rsInputBot_develop_srcwindowsmod.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1401b6338]
lea r9, fcn.140003520
lea r8, [rbp - 0x50]
mov edx, 0x2b
call fcn.14011d190
jmp 0x1400de1a4
xor eax, eax
mov qword [rbp - 0x50], rsi
mov byte [rbp - 0x48], al
lea rax, str.F:disquemegamyarchetype_then_archetype_rsInputBot_develop_srcwindowsmod.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1401b6338]
lea r9, fcn.140003520
lea r8, [rbp - 0x50]
mov edx, 0x2b
call fcn.14011d190
jmp 0x1400de1a4
call fcn.1400e3430
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x48], edx
lea rax, str.F:disquemegamyarchetype_then_archetype_rsInputBot_develop_srcwindowsmod.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1401b6338]
lea r9, fcn.1400dd860
lea r8, [rbp - 0x50]
mov edx, 0x2b
call fcn.14011d190
jmp 0x1400de1a4
call fcn.1400e3430
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x48], edx
lea rax, str.F:disquemegamyarchetype_then_archetype_rsInputBot_develop_srcwindowsmod.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1401b6338]
lea r9, fcn.1400dd860
lea r8, [rbp - 0x50]
mov edx, 0x2b
call fcn.14011d190
ud2
xor al, 1
jmp 0x1400de0d3
xor al, 1
jmp 0x1400de109