Function at 0x14003e6e0
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x18]
sub rsp, 0x110
mov rax, qword [0x140050040]
xor rax, rsp
mov qword [rbp - 0x68], rax
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x20], r14
xor r14d, r14d
cmp byte [0x140062671], r14b
je 0x14003ee3c
mov qword [r11 - 0x10], r12
lea rcx, [rsp + 0x40]
mov qword [r11 - 0x18], r13
mov qword [r11 - 0x28], r15
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
movaps xmmword [r11 - 0x58], xmm8
movaps xmmword [r11 - 0x68], xmm9
movaps xmmword [r11 - 0x78], xmm10
call fcn.14003e410
movdqa xmm7, xmmword [0x140048960]
mov r12d, 0xff
movss xmm6, dword [0x1400484c4]
movabs r15, 0x4e94914f0000
movss xmm8, dword [0x140048510]
movabs r13, 0x431bde82d7b634db
movss xmm9, dword [0x140048528]
movss xmm10, dword [0x1400484f8]
mov rax, qword [rsp + 0x40]
movabs rdx, 0x7ffffffffff0bdbf
movabs r8, 0x7fffffffffffffff
mov rcx, rax
lea rbx, [rax + 0xf4240]
cmp rax, rdx
jl 0x14003e7c0
mov rbx, r8
nop dword [rax]
lea rcx, [rbp - 0x78]
call fcn.14003e410
mov rax, qword [rbp - 0x78]
cmp rbx, rax
je 0x14003e822
mov ecx, 1
cmovl ecx, r12d
test cl, cl
jle 0x14003e822
mov rcx, rbx
sub rcx, rax
cmp rcx, r15
jge 0x14003e816
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14003e80d
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x14003e7c0
mov ecx, 0x5265c00
call sub.KERNEL32.dll_Sleep
jmp 0x14003e7c0
mov rdx, qword [0x140062e30]
lea rcx, [0x140062e90]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14003e862
lea rcx, [0x140062e90]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x140062e90]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [0x140062e98], 0x12
jne 0x14003e872
mov byte [0x140062671], r14b
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003e88f
cmp byte [0x140062670], r14b
sete byte [0x140062670]
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14003edf2
cmp byte [0x140062671], r14b
je 0x14003edf9
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
mov edx, 3
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, qword [0x140062e30]
mov r9d, 1
mov dword [rsp + 0x30], 3
mov r8d, r9d
mov dword [rsp + 0x28], r14d
mov rdx, rax
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [0x140062e30]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140062df8]
lea rcx, [rbp - 0x70]
mov dword [rbx + 0x18], 0x3c888889
mov qword [rbp - 0x70], r14
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [rbp - 0x70]
mov ecx, 1
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe00], xmm0
movd xmm0, dword [rbp - 0x6c]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe04], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003e963
mov byte [rbx + 0xe08], 1
mov byte [rbx + 0x3740], 1
mov eax, dword [rbx + 0xe04]
mov dword [rbx + 0x36f0], eax
jmp 0x14003e96a
mov byte [rbx + 0xe08], r14b
mov rax, qword [0x140062df8]
test rax, rax
je 0x14003e97f
mov rcx, qword [rax + 0x98]
jmp 0x14003e982
mov rcx, r14
cmp qword [rcx + 0x18], r14
jne 0x14003e9a3
test rax, rax
je 0x14003e9a3
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14003e9a3
cmp qword [rcx], r14
je 0x14003e9a3
call fcn.14002d280
call fcn.14002de40
call fcn.140009ae0
call fcn.1400020b0
mov rax, qword [0x140062df8]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.1400091a0
lea rcx, [rsp + 0x48]
mov rdi, rax
movups xmmword [rsp + 0x48], xmm7
call fcn.1400050a0
movss xmm0, dword [0x140062ec8]
mov esi, eax
movss xmm1, dword [0x140062ecc]
mulss xmm0, xmm6
mulss xmm1, xmm6
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
test eax, 0xff000000
je 0x14003ea6c
movss xmm2, dword [0x1400500bc]
comiss xmm2, xmm6
jb 0x14003ea6c
subss xmm2, xmm6
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.140026930
mov r8d, dword [rdi + 0x78]
mov r9d, esi
mov rdx, qword [rdi + 0x80]
dec r8d
movss dword [rsp + 0x28], xmm8
mov rcx, rdi
mov dword [rdi + 0x78], r8d
mov dword [rsp + 0x20], 1
call fcn.1400253d0
mov dword [rdi + 0x78], r14d
mov rax, qword [0x140062df8]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.1400091a0
movss xmm3, dword [0x140062ec8]
lea rcx, [rsp + 0x48]
movss xmm1, dword [0x140062ecc]
mov r10, rax
mulss xmm3, xmm6
mulss xmm1, xmm6
movaps xmm0, xmm3
addss xmm0, dword [0x1400500d8]
subss xmm3, dword [0x1400500d8]
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x6c], xmm1
movups xmmword [rsp + 0x48], xmm7
movss dword [rsp + 0x60], xmm0
movss dword [rsp + 0x68], xmm3
call fcn.1400050a0
mov r9d, eax
movss dword [rsp + 0x20], xmm8
lea rdx, [rsp + 0x68]
mov rcx, r10
lea r8, [rsp + 0x60]
call fcn.1400276a0
mov rax, qword [0x140062df8]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.1400091a0
movss xmm2, dword [0x140062ecc]
lea rcx, [rsp + 0x48]
movss xmm3, dword [0x140062ec8]
mov r10, rax
mulss xmm2, xmm6
mulss xmm3, xmm6
movaps xmm0, xmm2
addss xmm0, dword [0x1400500d8]
subss xmm2, dword [0x1400500d8]
movss dword [rsp + 0x70], xmm3
movss dword [rsp + 0x78], xmm3
movups xmmword [rsp + 0x48], xmm7
movss dword [rsp + 0x74], xmm0
movss dword [rsp + 0x7c], xmm2
call fcn.1400050a0
mov r9d, eax
movss dword [rsp + 0x20], xmm8
lea rdx, [rsp + 0x78]
mov rcx, r10
lea r8, [rsp + 0x70]
call fcn.1400276a0
cmp byte [0x140062670], r14b
je 0x14003ec37
mov rax, qword [0x140062df8]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.1400091a0
lea rcx, [rsp + 0x48]
mov rdi, rax
movups xmmword [rsp + 0x48], xmm7
call fcn.1400050a0
movss xmm0, dword [rbx + 0xe00]
mov esi, eax
movss xmm1, dword [rbx + 0xe04]
movss dword [rbp - 0x80], xmm0
movss dword [rbp - 0x7c], xmm1
test eax, 0xff000000
je 0x14003ec32
xor r9d, r9d
mov dword [rsp + 0x20], 0x30
movaps xmm2, xmm9
lea rdx, [rbp - 0x80]
mov rcx, rdi
call fcn.140026930
mov r8d, dword [rdi + 0x78]
mov r9d, esi
mov rdx, qword [rdi + 0x80]
dec r8d
mov rcx, rdi
mov dword [rdi + 0x78], r8d
call fcn.140026350
mov dword [rdi + 0x78], r14d
call fcn.14003de90
call fcn.14000b7a0
mov rcx, qword [0x140062e40]
xor r8d, r8d
mov edx, 7
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140062e40]
xor r8d, r8d
mov edx, 0x1b
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140062e40]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140062e40]
mov r9d, 1
mov dword [rsp + 0x30], r14d
xor r8d, r8d
movss dword [rsp + 0x28], xmm10
xor edx, edx
mov dword [rsp + 0x20], r14d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x140062e40]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003ecfc
call fcn.14000bbb0
mov rax, qword [0x140062df8]
mov rcx, qword [rax + 0x48c8]
mov rax, qword [rcx]
mov rcx, r14
add rax, 0x48
cmp byte [rax], cl
cmovne rcx, rax
call fcn.14002ccc0
mov rcx, qword [0x140062e40]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140062e40]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003edda
mov rcx, qword [0x140062e40]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003edda
mov rbx, qword [0x140062df8]
test rbx, rbx
je 0x14003eda1
mov rbx, qword [rbx + 0x98]
test rbx, rbx
je 0x14003eda1
cmp qword [rbx], r14
je 0x14003eda1
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003ed6c
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 8], r14
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14003ed7f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14003eda1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x140062df8]
mov qword [rbx + 0x18], r14
mov rcx, qword [rax + 0x38]
mov qword [rcx + 8], r14
mov rcx, qword [0x140062e40]
lea rdx, [0x140062e50]
mov rax, qword [rcx]
call qword [rax + 0x80]
mov rbx, qword [0x140062df8]
test rbx, rbx
je 0x14003edda
mov rax, qword [rbx + 0x98]
test rax, rax
je 0x14003edda
cmp qword [rax], r14
je 0x14003edda
call fcn.14002d280
cmp byte [0x140062671], r14b
je 0x14003edf9
lea rcx, [rsp + 0x40]
call fcn.14003e410
jmp 0x14003e791
mov byte [0x140062671], r14b
movaps xmm9, xmmword [rsp + 0xb0]
movaps xmm8, xmmword [rsp + 0xc0]
movaps xmm7, xmmword [rsp + 0xd0]
movaps xmm6, xmmword [rsp + 0xe0]
mov r15, qword [rsp + 0xf0]
mov r13, qword [rsp + 0x100]
mov r12, qword [rsp + 0x108]
movaps xmm10, xmmword [rsp + 0xa0]
mov rbx, qword [0x140062df8]
test rbx, rbx
je 0x14003ee51
mov rsi, qword [rbx + 0x98]
jmp 0x14003ee54
mov rsi, r14
mov rbx, qword [0x140062df8]
test rbx, rbx
je 0x14003eeb9
mov rdi, qword [rbx + 0x98]
test rdi, rdi
je 0x14003eeb9
cmp qword [rdi], r14
je 0x14003eeb9
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003ee84
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 8], r14
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14003ee97
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x10], r14
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x14003eeb9
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x140062df8]
mov qword [rdi + 0x18], r14
mov rcx, qword [rax + 0x38]
mov qword [rcx + 8], r14
mov rcx, qword [rsi]
test rcx, rcx
je 0x14003eec7
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rbx + 0xc], 0xfffffff7
mov rax, qword [0x140062df8]
mov qword [rbx + 0x88], r14
mov qword [rbx + 0x98], r14
test rax, rax
je 0x14003eeeb
dec dword [rax + 0xf0]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140062df8]
mov rsi, qword [rsp + 0x128]
test rax, rax
je 0x14003ef11
mov rdi, qword [rax + 0x90]
jmp 0x14003ef14
mov rdi, r14
mov rcx, qword [rdi + 0x30]
lea rbx, [rax + 8]
test rcx, rcx
je 0x14003ef2e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140062df8]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], r14
mov qword [rbx + 0x88], r14
test rax, rax
je 0x14003ef48
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140062df8]
mov qword [0x140062df8], rbx
call fcn.140007900
mov rdi, qword [rsp + 0x130]
mov qword [0x140062df8], r14
mov r14, qword [rsp + 0xf8]
test rbx, rbx
je 0x14003efa3
mov rcx, rbx
call fcn.14001d1f0
mov rax, qword [0x140062df8]
test rax, rax
je 0x14003ef9a
dec dword [rax + 0xf0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140062e40]
mov rbx, qword [rsp + 0x120]
test rcx, rcx
je 0x14003efcd
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140062e40]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140062e38]
test rcx, rcx
je 0x14003efdf
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140062e30]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov al, 1
mov rcx, qword [rbp - 0x68]
xor rcx, rsp
call fcn.14003f020
add rsp, 0x110
pop rbp
ret