Function at 0x77da40
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
sub rsp, 0x108
mov rbp, rsp
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xb8], rbp
mov qword [rbp + 0x120], rcx
mov byte [rbp + 0x128], dl
nop
mov byte [rbp + 0xef], 0
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x870]
cmp qword [rax + 0x18], 0
jne 0x77df36
mov rcx, rax
lea rdx, [rbp + 0xb0]
call fcn.00584ac0
mov rcx, qword [rbp + 0xb0]
mov rdx, qword [0x007d7e10]
call fcn.004119e0
test eax, eax
je 0x77df36
mov byte [rbp + 0xef], 1
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x6f8]
mov rcx, qword [rax + 0xb8]
mov edx, dword [0x007ea36c]
call fcn.0054d820
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x870]
lea rdx, [rbp + 0xa8]
call fcn.00584ac0
lea rcx, [0x007d7e10]
mov rdx, qword [rbp + 0xa8]
call fcn.00410390
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x870]
lea rdx, [rbp + 0xa0]
call fcn.00584ac0
lea rcx, [rbp + 0xf0]
mov rdx, qword [rbp + 0xa0]
call fcn.0074eab0
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x870]
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x280]
mov dword [rbp + 0xe8], eax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x870]
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x280]
test eax, eax
jl 0x77dc36
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x870]
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x280]
mov ebx, eax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x870]
mov rax, qword [rax + 0x500]
mov rcx, rax
mov rax, qword [rax]
call qword [rax + 0x28]
sub eax, 1
cmp ebx, eax
jle 0x77dc73
mov rax, qword [rbp + 0x120]
mov rbx, qword [rax + 0x870]
mov rcx, rbx
lea rdx, [rbp + 0x98]
call fcn.00584ac0
mov rax, qword [rbx + 0x500]
mov rcx, rax
mov rdx, qword [rbp + 0x98]
mov rax, qword [rax]
call qword [rax + 0xb0]
mov dword [rbp + 0xe8], eax
mov rcx, qword [rbp + 0xf0]
call fcn.006fe140
test al, al
je 0x77dcb9
lea rcx, [rbp + 0x90]
mov rdx, qword [0x007d7e70]
mov r8, qword [rbp + 0xf0]
call fcn.004117d0
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
mov rdx, qword [rbp + 0x90]
call fcn.00584b30
jmp 0x77dd18
mov rcx, qword [rbp + 0x120]
lea rdx, [rbp + 0x80]
mov r8, qword [rbp + 0xf0]
call fcn.007506a0
lea rcx, [rbp + 0x88]
mov edx, 3
mov r8, qword [0x007d7e70]
mov r9, qword [rbp + 0xf0]
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x20], rax
call fcn.00411900
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
mov rdx, qword [rbp + 0x88]
call fcn.00584b30
cmp byte [rbp + 0x128], 0
je 0x77dd87
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
lea rdx, [rbp + 0x78]
call fcn.00584ac0
mov rax, qword [rbp + 0x78]
mov qword [rbp + 0xe0], rax
mov dword [rbp + 0xdc], 0
mov rax, qword [rbp + 0xe0]
test rax, rax
je 0x77dd62
mov eax, dword [rax - 4]
mov dword [rbp + 0xdc], eax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x6f8]
mov rcx, rax
mov edx, dword [rbp + 0xdc]
mov rbx, qword [rax]
call qword [rbx + 0x2b8]
jmp 0x77de0a
cmp dword [0x007d7dd4], 0xffffffff
jle 0x77ddf7
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x6f8]
mov rcx, rax
mov edx, dword [0x007d7dd4]
add edx, dword [0x007d7e78]
mov rbx, qword [rax]
call qword [rbx + 0x2b8]
mov dword [rbp + 0xd8], 0
mov rax, qword [rbp + 0xf0]
test rax, rax
je 0x77ddd5
mov eax, dword [rax - 4]
mov dword [rbp + 0xd8], eax
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x6f8]
mov rcx, rax
mov edx, dword [rbp + 0xd8]
mov rbx, qword [rax]
call qword [rbx + 0x2b0]
jmp 0x77de0a
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
call fcn.005b78f0
mov dword [0x007d7dd8], 0
mov byte [0x007d7dd0], 1
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
lea rdx, [rbp + 0x68]
call fcn.00584ac0
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x68]
call fcn.00431e00
lea rcx, [0x007d7df8]
mov rdx, qword [rbp + 0x70]
call fcn.00410390
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
lea rdx, [rbp + 0x60]
call fcn.00584ac0
lea rcx, [0x007d7e00]
mov rdx, qword [rbp + 0x60]
call fcn.00410390
mov cl, 1
call fcn.0074c460
cmp dword [rbp + 0xe8], 0xffffffff
je 0x77dee2
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x870]
mov rax, qword [rax + 0x500]
mov rcx, rax
mov edx, dword [rbp + 0xe8]
mov rax, qword [rax]
call qword [rax + 0x30]
test rax, rax
je 0x77dee2
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x870]
mov rax, qword [rax + 0x500]
mov rcx, rax
mov edx, dword [rbp + 0xe8]
mov rax, qword [rax]
call qword [rax + 0x30]
mov rcx, rax
call fcn.0074c5e0
mov qword [0x007d7f80], rax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
lea rdx, [rbp + 0x58]
call fcn.00584ac0
mov rcx, qword [rbp + 0x120]
mov rdx, qword [rbp + 0x58]
mov r8, qword [0x007d7f80]
call fcn.0076af80
cmp qword [0x007d7f80], 0
je 0x77df36
cmp byte [rbp + 0x128], 0
jne 0x77df36
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
call fcn.005b78f0
mov rax, qword [rbp + 0x120]
mov rax, qword [rax + 0x6f8]
mov rcx, rax
mov rbx, qword [rax]
call qword [rbx + 0x278]
mov ecx, 0x12
call sub.user32.dll_GetKeyState
movsx rax, ax
mov dword [rbp + 0xd4], eax
mov eax, dword [rbp + 0xd4]
shr eax, 0x10
test ax, ax
je 0x77df7b
mov byte [rbp + 0xcf], 1
jmp 0x77dfa4
mov ecx, 0x11
call sub.user32.dll_GetKeyState
movsx rax, ax
mov dword [rbp + 0xd0], eax
mov eax, dword [rbp + 0xd0]
shr eax, 0x10
test ax, ax
setne al
mov byte [rbp + 0xcf], al
movzx rax, byte [rbp + 0xcf]
mov byte [rbp + 0xee], al
cmp byte [rbp + 0x128], 0
sete al
test byte [rbp + 0xef], al
je 0x77dfd6
cmp byte [0x007ea2a1], 0
je 0x77dfd6
cmp byte [rbp + 0xee], 0
je 0x77e006
cmp byte [rbp + 0x128], 0
sete al
test byte [rbp + 0xef], al
je 0x77e08c
cmp byte [0x007ea2a1], 0
jne 0x77e08c
cmp byte [rbp + 0xee], 1
jne 0x77e08c
nop
mov qword [rbp + 0xf8], 0
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax + 0x6f8]
lea rdx, [rbp + 0xf8]
call fcn.00584ac0
mov ecx, 0x10
call sub.user32.dll_GetKeyState
movsx rax, ax
mov dword [rbp + 0xc8], eax
mov rcx, qword [rbp + 0x120]
xor edx, edx
xor r8, r8
mov r9, qword [rbp + 0xf8]
mov eax, dword [rbp + 0xc8]
shr eax, 0x10
test ax, ax
setne al
mov byte [rsp + 0x20], al
mov byte [rsp + 0x28], 0
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x38], 0
mov byte [rsp + 0x40], 0
call fcn.0075d8d0
nop
lea rcx, [rbp + 0xf8]
call fcn.0040fd60
nop
lea rcx, [rbp + 0x58]
mov edx, 3
call fcn.0040fe40
lea rcx, [rbp + 0x70]
call fcn.0040fd60
lea rcx, [rbp + 0x78]
call fcn.0040fd60
lea rcx, [rbp + 0x80]
mov edx, 3
call fcn.0040fe40
lea rcx, [rbp + 0x98]
mov edx, 4
call fcn.0040fe40
lea rcx, [rbp + 0xf0]
call fcn.0040fd60
lea rsp, [rbp + 0x108]
pop rbx
pop rbp
ret