Function at 0x140003ce2
Capabilities:
Log keystrokes via polling

Disassembly:
jmp 0x140162220
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x1b8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x2e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x1d8]
mov rax, qword [0x1401fb840]
xor rax, rbp
mov qword [rbp + 0x160], rax
lea rcx, [0x1402143c6]
call fcn.140003d73
nop
mov rax, qword [rbp + 0x190]
add rax, 8
mov rcx, rax
call fcn.140002293
test eax, eax
jl 0x14016229b
lea rdx, str.cs2.exe
lea rcx, [0x140204158]
call fcn.1400037a1
movzx eax, al
test eax, eax
jne 0x1401622ad
mov rcx, qword [rbp + 0x190]
call fcn.14000277a
nop
jmp 0x1401625f1
lea rdx, [0x140003deb]
lea rcx, [rbp + 8]
call fcn.14000240a
nop
mov edx, 0xa
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_ShowWindow]
nop
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_UpdateWindow]
nop
xor ecx, ecx
call fcn.140003c60
nop
call fcn.140001695
nop
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax]
call fcn.140001c58
nop
mov rax, qword [rbp + 0x190]
add rax, 8
mov rcx, rax
call fcn.14000124e
mov rcx, rax
call fcn.1400014f6
nop
mov r8d, 0x30
xor edx, edx
lea rcx, [rbp + 0x38]
call sub.VCRUNTIME140D.dll_memset
nop
cmp dword [rbp + 0x40], 0x12
je 0x1401625da
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x38]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14016236f
lea rcx, [rbp + 0x38]
call qword [sym.imp.USER32.dll_TranslateMessage]
nop
lea rcx, [rbp + 0x38]
call qword [sym.imp.USER32.dll_DispatchMessageA]
nop
lea rdx, str.cs2.exe
lea rcx, [0x140204158]
call fcn.1400038d2
movzx eax, al
test eax, eax
jne 0x1401623a5
mov rcx, qword [rbp + 0x190]
call fcn.14000277a
nop
lea rcx, [rbp + 8]
call fcn.140002437
nop
jmp 0x1401625f1
mov ecx, 0x2d
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 1
test eax, eax
je 0x1401623e6
movzx eax, byte [0x140204060]
test eax, eax
jne 0x1401623cf
mov dword [rbp + 0x154], 1
jmp 0x1401623d9
mov dword [rbp + 0x154], 0
movzx eax, byte [rbp + 0x154]
mov byte [0x140204060], al
movzx eax, byte [0x140204060]
test eax, eax
jne 0x14016243c
mov edx, 0xffffffec
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetWindowLongA]
or eax, 0x20
mov dword [rbp + 0x154], eax
mov rax, qword [rbp + 0x190]
mov rax, qword [rax]
mov qword [rbp + 0x158], rax
mov r8d, dword [rbp + 0x154]
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.USER32.dll_SetWindowLongA]
nop
jmp 0x140162485
mov edx, 0xffffffec
mov rax, qword [rbp + 0x190]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_GetWindowLongA]
and eax, 0xffffffdf
mov dword [rbp + 0x154], eax
mov rax, qword [rbp + 0x190]
mov rax, qword [rax]
mov qword [rbp + 0x158], rax
mov r8d, dword [rbp + 0x154]
mov edx, 0xffffffec
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.USER32.dll_SetWindowLongA]
nop
call fcn.1400022c5
nop
call fcn.140002d24
nop
call fcn.14000316b
nop
call fcn.1400041e7
nop
movzx eax, byte [0x140204060]
test eax, eax
je 0x1401624ae
call fcn.1400035da
nop
call fcn.140001bb8
nop
call fcn.140003b7f
nop
mov rax, qword [rbp + 0x190]
add rax, 8
mov rcx, rax
call fcn.14000124e
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x88]
call qword [rax + 0x148]
test eax, eax
jl 0x14016256a
mov rax, qword [rbp + 0x88]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rbp + 0x158], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x14018f4e0]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 3
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x88]
call qword [rbp + 0x158]
nop
call fcn.140003c01
nop
call fcn.140003927
mov rcx, rax
call fcn.1400039ae
nop
mov rax, qword [rbp + 0x88]
mov rax, qword [rax]
mov rcx, qword [rbp + 0x88]
call qword [rax + 0x150]
nop
mov rax, qword [rbp + 0x88]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rbp + 0x158], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x88]
call qword [rbp + 0x158]
cmp eax, 0x88760868
jne 0x1401625d5
mov rax, qword [rbp + 0x190]
add rax, 8
mov rcx, rax
call fcn.14000305d
movzx eax, al
test eax, eax
je 0x1401625d5
mov rax, qword [rbp + 0x190]
add rax, 8
mov rcx, rax
call fcn.140002b2b
nop
jmp 0x140162331
mov rcx, qword [rbp + 0x190]
call fcn.14000277a
nop
lea rcx, [rbp + 8]
call fcn.140002437
nop
lea rcx, [rbp - 0x40]
lea rdx, [0x1401c91e0]
call fcn.14000359e
mov rcx, qword [rbp + 0x160]
xor rcx, rbp
call fcn.140002590
lea rsp, [rbp + 0x178]
pop rdi
pop rbp
ret