Function at 0x140030d60
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x14003b6d0
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x140112718]
xor rax, rsp
mov qword [rbp - 8], rax
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x14003ba2e
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rsi
movabs rsi, 0x7fffffffffffffff
mov qword [rsp + 0x78], r14
movabs r14, 0x7ffffffffff0bdbe
mov qword [rsp + 0x70], rdi
nop dword [rax]
cmp byte [0x1401149ed], 0
je 0x14003b9b3
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, dword [str.wtd_a]
mov rbx, rax
movzx edx, word [0x1400fe214]
mov dword [rbp - 0x30], ecx
movzx ecx, byte [0x1400fe216]
xor byte [rbp - 0x2f], 0x31
xor cl, 0x36
xor byte [rbp - 0x2e], 0x32
xor byte [rbp - 0x2d], 0x33
mov word [rbp - 0x2c], dx
xor dl, 0x34
xor byte [rbp - 0x2b], 0x35
mov byte [rbp - 0x2a], cl
lea rcx, [rbp - 0x30]
mov byte [rbp - 0x2c], dl
xor edx, edx
mov byte [rbp - 0x30], 0x47
call qword [sym.imp.USER32.dll_FindWindowA]
cmp rbx, rax
jne 0x14003b9b3
xorps xmm0, xmm0
mov dword [rbp - 0x20], Ordinal_27
xor eax, eax
lea rcx, [rbp - 0x20]
movups xmmword [rbp - 0x1c], xmm0
mov dword [rbp - 0xc], eax
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x14003b7bd
mov rax, qword [rbp - 0x18]
add rax, 0xffffffffffff3caf
cmp rax, 0xc34e
jbe 0x14003b9b3
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x64
cmp eax, 0x5f
ja 0x14003b7e1
nop
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov ecx, eax
imul rax, rcx, 0x64
cmp eax, 0x60
jb 0x14003b7d0
shr rax, 0x20
cmp dword [0x1401149f8], eax
jbe 0x14003b9b3
mov ecx, dword [0x14011276c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14003b9b3
cmp byte [0x1401149fc], 0
je 0x14003b9b3
mov ecx, dword [reloc.WLDAP32.dll_Ordinal_32]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14003b831
cmp byte [0x1401149ee], 0
jne 0x14003b9b3
mov ebx, dword [0x1401149f4]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x14003b855
imul rax, rax, 0x64
jmp 0x14003b873
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
mov qword [rbp - 0x28], rax
test rbx, rbx
je 0x14003b89c
imul rdx, rbx, 0xf4240
mov rcx, rsi
sub rcx, rdx
cmp rax, rcx
jge 0x14003b898
lea rcx, [rdx + rax]
mov qword [rbp - 0x28], rcx
jmp 0x14003b89c
mov qword [rbp - 0x28], rsi
lea rcx, [rbp - 0x28]
call fcn.14002d590
movzx ecx, byte [0x140112770]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
mov ebx, dword [0x1401149f0]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x14003b8de
imul rax, rax, 0x64
jmp 0x14003b8fc
cqo
idiv rdi
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
mov qword [rbp - 0x28], rax
test rbx, rbx
je 0x14003b925
imul rdx, rbx, 0xf4240
mov rcx, rsi
sub rcx, rdx
cmp rax, rcx
jge 0x14003b921
lea rcx, [rdx + rax]
mov qword [rbp - 0x28], rcx
jmp 0x14003b925
mov qword [rbp - 0x28], rsi
lea rcx, [rbp - 0x28]
call fcn.14002d590
movzx ecx, byte [0x140112770]
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
call qword [sym.imp.USER32.dll_keybd_event]
cmp byte [0x1401149ed], 0
je 0x14003b9b3
nop dword [rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14003b96e
imul rax, rax, 0x64
jmp 0x14003b98c
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jg 0x14003b99d
add rax, 0xf4240
mov qword [rbp - 0x28], rax
jmp 0x14003b9a1
mov qword [rbp - 0x28], rsi
lea rcx, [rbp - 0x28]
call fcn.14002d590
cmp byte [0x1401149ed], 0
jne 0x14003b950
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14003b9d1
imul rax, rax, 0x64
jmp 0x14003b9ef
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r14
jg 0x14003ba00
add rax, 0xf4240
mov qword [rbp - 0x28], rax
jmp 0x14003ba04
mov qword [rbp - 0x28], rsi
lea rcx, [rbp - 0x28]
call fcn.14002d590
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x14003b720
mov r14, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400c1540
add rsp, 0x50
pop rbp
ret