Function at 0x14003f030
Capabilities:
Log keystrokes via polling

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x18]
sub rsp, 0x110
mov rax, qword [0x140050010]
xor rax, rsp
mov qword [rbp - 0x68], rax
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 - 0x20], r14
xor r14d, r14d
cmp byte [0x140062601], r14b
je 0x14003f805
mov qword [r11 - 0x10], r12
movabs r12, 0x112e0be826d694b3
mov qword [r11 - 0x18], r13
movabs r13, 0x7fffffffffffffff
mov qword [r11 - 0x28], r15
movabs r15, 0x311cdad160000
movaps xmmword [r11 - 0x38], xmm6
movsd xmm6, qword [0x1400494d0]
movaps xmmword [r11 - 0x48], xmm7
movss xmm7, dword [0x140049424]
movaps xmmword [r11 - 0x58], xmm8
movss xmm8, dword [0x140049470]
movaps xmmword [r11 - 0x68], xmm9
movss xmm9, dword [0x140049488]
movaps xmmword [r11 - 0x78], xmm10
movss xmm10, dword [0x140049458]
movabs rdi, 0x7ffffffffff0bdbe
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14003f103
imul rax, rax, 0x64
jmp 0x14003f121
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
lea rdi, [rax + 0xf4240]
jle 0x14003f130
mov rdi, r13
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14003f14e
imul rbx, rax, 0x64
jmp 0x14003f16f
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rbx, rax
imul rax, rcx, 0x3b9aca00
add rbx, rax
cmp rdi, rbx
je 0x14003f1d8
jl 0x14003f1d8
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
xorps xmm0, xmm0
mov rax, rdi
sub rax, rbx
cvtsi2sd xmm0, rax
comisd xmm0, xmm6
jbe 0x14003f19d
mov rax, r15
lea r8, [rcx + r15]
jmp 0x14003f1a1
lea r8, [rcx + rax]
add rcx, rax
mov rax, r12
imul rcx
lea rcx, [rbp - 0x78]
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul eax, edx, 0x3b9aca00
mov qword [rbp - 0x78], rdx
sub r8d, eax
mov dword [rbp - 0x70], r8d
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x14003f130
mov rdx, qword [0x140062dc0]
lea rcx, [0x140062e20]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14003f218
lea rcx, [0x140062e20]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [0x140062e20]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [0x140062e28], 0x12
jne 0x14003f228
mov byte [0x140062601], r14b
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14003f245
cmp byte [0x140062600], r14b
sete byte [0x140062600]
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14003f7bb
cmp byte [0x140062601], r14b
je 0x14003f7c2
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rax
mov edx, 3
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, qword [0x140062dc0]
mov r9d, 1
mov dword [rsp + 0x30], 3
mov r8d, r9d
mov dword [rsp + 0x28], r14d
mov rdx, rax
mov dword [rsp + 0x20], r14d
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [0x140062dc0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rbx, qword [0x140062d88]
lea rcx, [rbp - 0x80]
mov dword [rbx + 0x18], 0x3c888889
mov qword [rbp - 0x80], r14
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [rbp - 0x80]
mov ecx, 1
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe00], xmm0
movd xmm0, dword [rbp - 0x7c]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0xe04], xmm0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003f319
mov byte [rbx + 0xe08], 1
mov byte [rbx + 0x3740], 1
mov eax, dword [rbx + 0xe04]
mov dword [rbx + 0x36f0], eax
jmp 0x14003f320
mov byte [rbx + 0xe08], r14b
mov rax, qword [0x140062d88]
test rax, rax
je 0x14003f335
mov rcx, qword [rax + 0x98]
jmp 0x14003f338
mov rcx, r14
cmp qword [rcx + 0x18], r14
jne 0x14003f359
test rax, rax
je 0x14003f359
mov rcx, qword [rax + 0x98]
test rcx, rcx
je 0x14003f359
cmp qword [rcx], r14
je 0x14003f359
call fcn.14002ddf0
call fcn.14002e9b0
call fcn.140009b50
call fcn.140002090
mov rax, qword [0x140062d88]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.140009260
movaps xmm0, xmmword [0x140049640]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
mov rdi, rax
call fcn.140005050
movss xmm0, dword [0x140062e58]
mov esi, eax
movss xmm1, dword [0x140062e5c]
mulss xmm0, xmm7
mulss xmm1, xmm7
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
test eax, 0xff000000
je 0x14003f429
movss xmm2, dword [0x14005004c]
comiss xmm2, xmm7
jb 0x14003f429
subss xmm2, xmm7
mov dword [rsp + 0x20], 0x30
xor r9d, r9d
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.140027040
mov r8d, dword [rdi + 0x78]
mov r9d, esi
mov rdx, qword [rdi + 0x80]
dec r8d
movss dword [rsp + 0x28], xmm8
mov rcx, rdi
mov dword [rdi + 0x78], r8d
mov dword [rsp + 0x20], 1
call fcn.140025ad0
mov dword [rdi + 0x78], r14d
mov rax, qword [0x140062d88]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.140009260
movss xmm3, dword [0x140062e58]
lea rcx, [rsp + 0x40]
movaps xmm0, xmmword [0x140049640]
mov r10, rax
movss xmm1, dword [0x140062e5c]
mulss xmm3, xmm7
movups xmmword [rsp + 0x40], xmm0
movaps xmm0, xmm3
mulss xmm1, xmm7
addss xmm0, dword [0x14005006c]
subss xmm3, dword [0x14005006c]
movss dword [rsp + 0x5c], xmm1
movss dword [rsp + 0x64], xmm1
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x60], xmm3
call fcn.140005050
mov r9d, eax
movss dword [rsp + 0x20], xmm8
lea rdx, [rsp + 0x60]
mov rcx, r10
lea r8, [rsp + 0x58]
call fcn.140027ee0
mov rax, qword [0x140062d88]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.140009260
movss xmm2, dword [0x140062e5c]
lea rcx, [rsp + 0x40]
movaps xmm0, xmmword [0x140049640]
mov r10, rax
movss xmm3, dword [0x140062e58]
mulss xmm2, xmm7
movups xmmword [rsp + 0x40], xmm0
movaps xmm0, xmm2
mulss xmm3, xmm7
addss xmm0, dword [0x14005006c]
subss xmm2, dword [0x14005006c]
movss dword [rsp + 0x68], xmm3
movss dword [rsp + 0x70], xmm3
movss dword [rsp + 0x6c], xmm0
movss dword [rsp + 0x74], xmm2
call fcn.140005050
mov r9d, eax
movss dword [rsp + 0x20], xmm8
lea rdx, [rsp + 0x70]
mov rcx, r10
lea r8, [rsp + 0x68]
call fcn.140027ee0
cmp byte [0x140062600], r14b
je 0x14003f60c
mov rax, qword [0x140062d88]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x48c8]
mov rcx, qword [rcx]
call fcn.140009260
movaps xmm0, xmmword [0x140049640]
lea rcx, [rsp + 0x40]
movups xmmword [rsp + 0x40], xmm0
mov rdi, rax
call fcn.140005050
movss xmm0, dword [rbx + 0xe00]
mov esi, eax
movss xmm1, dword [rbx + 0xe04]
movss dword [rsp + 0x78], xmm0
movss dword [rsp + 0x7c], xmm1
test eax, 0xff000000
je 0x14003f607
xor r9d, r9d
mov dword [rsp + 0x20], 0x30
movaps xmm2, xmm9
lea rdx, [rsp + 0x78]
mov rcx, rdi
call fcn.140027040
mov r8d, dword [rdi + 0x78]
mov r9d, esi
mov rdx, qword [rdi + 0x80]
dec r8d
mov rcx, rdi
mov dword [rdi + 0x78], r8d
call fcn.140026a50
mov dword [rdi + 0x78], r14d
call fcn.14003e9d0
call fcn.14000b7e0
mov rcx, qword [0x140062dd0]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 7]
call qword [rax + 0x1c8]
mov rcx, qword [0x140062dd0]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 0x1b]
call qword [rax + 0x1c8]
mov rcx, qword [0x140062dd0]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [0x140062dd0]
mov r9d, 1
mov dword [rsp + 0x30], r14d
xor r8d, r8d
movss dword [rsp + 0x28], xmm10
xor edx, edx
mov dword [rsp + 0x20], r14d
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x140062dd0]
mov rax, qword [rcx]
call qword [rax + 0x148]
test eax, eax
js 0x14003f6cf
call fcn.14000bbd0
mov rax, qword [0x140062d88]
mov rcx, qword [rax + 0x48c8]
mov rax, qword [rcx]
mov rcx, r14
add rax, 0x48
cmp byte [rax], cl
cmovne rcx, rax
call fcn.14002d840
mov rcx, qword [0x140062dd0]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140062dd0]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r14
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x14003f7ad
mov rcx, qword [0x140062dd0]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp eax, 0x88760869
jne 0x14003f7ad
mov rbx, qword [0x140062d88]
test rbx, rbx
je 0x14003f774
mov rbx, qword [rbx + 0x98]
test rbx, rbx
je 0x14003f774
cmp qword [rbx], r14
je 0x14003f774
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14003f73f
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 8], r14
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14003f752
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x14003f774
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x140062d88]
mov qword [rbx + 0x18], r14
mov rcx, qword [rax + 0x38]
mov qword [rcx + 8], r14
mov rcx, qword [0x140062dd0]
lea rdx, [0x140062de0]
mov rax, qword [rcx]
call qword [rax + 0x80]
mov rbx, qword [0x140062d88]
test rbx, rbx
je 0x14003f7ad
mov rax, qword [rbx + 0x98]
test rax, rax
je 0x14003f7ad
cmp qword [rax], r14
je 0x14003f7ad
call fcn.14002ddf0
cmp byte [0x140062601], r14b
je 0x14003f7c2
jmp 0x14003f0db
mov byte [0x140062601], r14b
movaps xmm9, xmmword [rsp + 0xb0]
movaps xmm8, xmmword [rsp + 0xc0]
movaps xmm7, xmmword [rsp + 0xd0]
movaps xmm6, xmmword [rsp + 0xe0]
mov r15, qword [rsp + 0xf0]
mov r13, qword [rsp + 0x100]
mov r12, qword [rsp + 0x108]
movaps xmm10, xmmword [rsp + 0xa0]
mov rbx, qword [0x140062d88]
test rbx, rbx
je 0x14003f81a
mov rsi, qword [rbx + 0x98]
jmp 0x14003f81d
mov rsi, r14
mov rbx, qword [0x140062d88]
test rbx, rbx
je 0x14003f882
mov rdi, qword [rbx + 0x98]
test rdi, rdi
je 0x14003f882
cmp qword [rdi], r14
je 0x14003f882
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003f84d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 8], r14
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14003f860
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rdi + 0x10], r14
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x14003f882
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [0x140062d88]
mov qword [rdi + 0x18], r14
mov rcx, qword [rax + 0x38]
mov qword [rcx + 8], r14
mov rcx, qword [rsi]
test rcx, rcx
je 0x14003f890
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rbx + 0xc], 0xfffffff7
mov rax, qword [0x140062d88]
mov qword [rbx + 0x88], r14
mov qword [rbx + 0x98], r14
test rax, rax
je 0x14003f8b4
dec dword [rax + 0xf0]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x140062d88]
mov rsi, qword [rsp + 0x128]
test rax, rax
je 0x14003f8da
mov rdi, qword [rax + 0x90]
jmp 0x14003f8dd
mov rdi, r14
mov rcx, qword [rdi + 0x30]
lea rbx, [rax + 8]
test rcx, rcx
je 0x14003f8f7
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x140062d88]
and dword [rbx + 4], 0xfffffff8
mov qword [rbx + 0x78], r14
mov qword [rbx + 0x88], r14
test rax, rax
je 0x14003f911
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x140062d88]
mov qword [0x140062d88], rbx
call fcn.1400079e0
mov rdi, qword [rsp + 0x130]
mov qword [0x140062d88], r14
mov r14, qword [rsp + 0xf8]
test rbx, rbx
je 0x14003f96c
mov rcx, rbx
call fcn.14001d340
mov rax, qword [0x140062d88]
test rax, rax
je 0x14003f963
dec dword [rax + 0xf0]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x140062dd0]
mov rbx, qword [rsp + 0x120]
test rcx, rcx
je 0x14003f996
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x140062dd0]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140062dc8]
test rcx, rcx
je 0x14003f9a8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [0x140062dc0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov al, 1
mov rcx, qword [rbp - 0x68]
xor rcx, rsp
call fcn.14003f9e0
add rsp, 0x110
pop rbp
ret