Function at 0x140008fd0
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x78
mov rax, qword [0x140107040]
xor rax, rsp
mov qword [rsp + 0x68], rax
xorps xmm0, xmm0
lea rcx, [rsp + 0x38]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x58], xmm0
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x140009022
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_DispatchMessageW]
lea rcx, [0x140108168]
mov qword [rsp + 0x80], rbx
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rcx, qword [0x140108148]
lea rdx, [0x140108170]
call qword [sym.imp.USER32.dll_GetWindowRect]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x140108148]
jne 0x1400092c2
cmp dword [0x140108184], 0
jne 0x1400090c4
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400090c4
cmp dword [0x1401090f0], 0
jne 0x1400090d1
cmp dword [0x1401084b4], 0
je 0x1400090b5
mov eax, dword [0x14010816c]
sub eax, dword [0x140108174]
mov ecx, dword [0x140108168]
sub ecx, dword [0x140108170]
mov dword [0x140107e1c], eax
xor eax, eax
mov dword [0x1401084b4], eax
mov dword [0x140107e18], ecx
mov dword [0x1401090f0], 1
jmp 0x1400092cd
cmp dword [0x1401090f0], 0
je 0x1400091b4
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400091b4
mov eax, dword [0x14010817c]
mov r9d, dword [0x140108178]
mov r8d, dword [0x14010816c]
mov edx, dword [0x140108168]
sub eax, dword [0x140108174]
sub r9d, dword [0x140108170]
sub r8d, dword [0x140107e1c]
sub edx, dword [0x140107e18]
mov rcx, qword [0x140108148]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], eax
mov dword [0x140108184], 1
mov dword [0x14010818c], 1
call qword [sym.imp.USER32.dll_MoveWindow]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rcx, qword gs:[0x58]
mov rbx, rax
mov eax, 4
mov rdx, qword [rcx]
mov ecx, dword [rax + rdx]
cmp dword [0x1401084ec], ecx
jle 0x140009192
lea rcx, [0x1401084ec]
call fcn.1400f7264
cmp dword [0x1401084ec], 0xffffffff
jne 0x140009192
lea rcx, [0x1401084ec]
mov dword [0x1401083f8], ebx
call fcn.1400f71f8
mov eax, ebx
sub eax, dword [0x1401083f8]
cmp eax, 0x64
jl 0x1400091aa
mov dword [0x1401083f8], ebx
jmp 0x1400092cd
mov eax, 1
jmp 0x1400092cf
xor eax, eax
mov dword [0x1401084b4], 1
cmp dword [0x140108188], eax
mov dword [0x1401090f0], eax
mov dword [0x140108184], eax
mov dword [0x14010818c], eax
jne 0x1400091fc
lea ecx, [rax + 1]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x1400091f2
mov ecx, 1
jmp 0x1400092c7
mov ecx, 3
jmp 0x1400092c7
lea rcx, [rsp + 0x30]
call fcn.1400017f0
mov rbx, qword [rsp + 0x30]
movabs rax, 0x7fffffffffffffaf
cmp rbx, rax
jge 0x140009220
add rbx, 0x50
jmp 0x14000922a
movabs rbx, 0x7fffffffffffffff
lea rcx, [rsp + 0x30]
call fcn.1400017f0
mov rax, qword [rsp + 0x30]
cmp rax, rbx
jge 0x1400092cd
mov qword [rsp + 0x88], rsi
movabs rsi, 0x431bde82d7b634db
mov qword [rsp + 0x70], rdi
movabs rdi, 0x4e94914f0000
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jl 0x140009275
mov ecx, 0x5265c00
jmp 0x14000929a
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x140009298
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rsp + 0x30]
call fcn.1400017f0
mov rax, qword [rsp + 0x30]
cmp rax, rbx
jl 0x140009263
mov rdi, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x88]
jmp 0x1400092cd
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400f71d0
add rsp, 0x78
ret