Function at 0x140007a30
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x50
mov rax, qword [0x14027e970]
xor esi, esi
movaps xmmword [rsp + 0x40], xmm6
mov rbx, rcx
test rax, rax
je 0x140007a59
mov rcx, qword [rax + 0xa0]
jmp 0x140007a5c
mov rcx, rsi
cmp qword [rcx + 0x18], rsi
jne 0x140007a7d
test rax, rax
je 0x140007a7d
mov rcx, qword [rax + 0xa0]
test rcx, rcx
je 0x140007a7d
cmp qword [rcx], rsi
je 0x140007a7d
call fcn.14004e290
call fcn.14004eca0
call fcn.1400290c0
cmp qword [0x14027ed48], rsi
je 0x140007af3
cmp byte [0x14019411d], sil
je 0x140007af3
cmp dword [0x140194114], esi
jne 0x140007acd
lea rcx, [0x140194108]
call fcn.140001980
test rax, rax
je 0x140007acd
lea rcx, [0x140194108]
call fcn.140001980
mov rdx, rax
lea rcx, [0x140194108]
call fcn.140001f80
cmp dword [0x140194114], 1
jne 0x140007af3
lea rcx, [0x140194108]
call fcn.140001980
test rax, rax
je 0x140007af3
lea rcx, [0x140194108]
call fcn.140002660
call fcn.140003870
cmp qword [0x14027ed48], rsi
je 0x140007b1e
mov rcx, rax
call fcn.140003d40
cmp qword [0x14027ed48], rsi
je 0x140007b1e
lea rcx, [0x140194130]
call fcn.1400072b0
mov rax, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14027ed28], eax
jle 0x140007b61
lea rcx, [0x14027ed28]
call fcn.1400cc220
cmp dword [0x14027ed28], 0xffffffff
jne 0x140007b61
lea rcx, [0x14027ed28]
mov dword [0x14027ed20], esi
call fcn.1400cc1b4
mov eax, dword [0x14027ed20]
test eax, eax
jne 0x140007b75
mov dword [0x14027ed24], 2
cmp eax, 1
jne 0x140007b84
mov dword [0x14027ed24], 0x12
cmp eax, 2
jne 0x140007b93
mov dword [0x14027ed24], 0x11
cmp eax, 3
jne 0x140007ba2
mov dword [0x14027ed24], 4
cmp eax, 4
jne 0x140007bb1
mov dword [0x14027ed24], 5
cmp eax, 5
jne 0x140007bc0
mov dword [0x14027ed24], 6
cmp eax, 6
jne 0x140007bcf
mov dword [0x14027ed24], 1
cmp byte [0x140194120], sil
movss xmm6, dword [0x14018083c]
mov qword [rsp + 0x68], rdi
je 0x140007ca2
mov rax, qword [0x14027e970]
lea r8, str.Foreground
mov edx, 1
mov rcx, qword [rax + 0x4878]
mov rcx, qword [rcx]
call fcn.140028630
mov ecx, dword [rbx + 0xe8]
xorps xmm0, xmm0
movd xmm2, dword [0x140194108]
xorps xmm1, xmm1
cvtdq2ps xmm2, xmm2
mov rdi, rax
cvtsi2ss xmm0, rcx
mov ecx, dword [rbx + 0xec]
cvtsi2ss xmm1, rcx
movss dword [rsp + 0x60], xmm0
movss xmm0, dword [0x1401807fc]
comiss xmm0, xmm2
movss dword [rsp + 0x64], xmm1
ja 0x140007ca2
subss xmm2, xmm0
mov dword [rsp + 0x28], 0x1ff
movss xmm0, dword [0x1401808d0]
lea rdx, [rsp + 0x60]
xorps xmm3, xmm3
movss dword [rsp + 0x20], xmm0
mov rcx, rax
call fcn.140047050
mov r8d, dword [rdi + 0x78]
mov r9d, 0xffffffff
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
movss dword [rsp + 0x28], xmm6
mov dword [rsp + 0x20], 1
call fcn.140045600
mov dword [rdi + 0x78], esi
cmp byte [0x140194121], sil
je 0x140007cb5
mov dword [reloc.WS2_32.dll_bind], 0x14
mov ecx, reloc.WLDAP32.dll_Ordinal_45
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140007cd4
cmp byte [rbx + 0x158], sil
sete al
mov byte [rbx + 0x158], al
mov rax, qword [0x14027e970]
lea rcx, str.Watermark
xor edx, edx
mov r8d, Ordinal_41
cmp byte [rbx + 0x158], sil
movss xmm0, dword [rax + 0x10]
subss xmm0, dword [0x140180a08]
mov qword [rax + 0x478c], 0x461c3c00
mov dword [rax + 0x4794], esi
mov dword [rax + 0x477c], 1
movss dword [rax + 0x4788], xmm0
je 0x140007d44
or dword [rax + 0x4778], 1
call fcn.14002e850
call fcn.140030c10
mov rcx, rbx
call fcn.140067970
mov r8d, 0xa0
jmp 0x140007d5b
or dword [rax + 0x4778], 1
call fcn.14002e850
call fcn.140030c10
mov r8d, 0x800a0
mov rcx, qword [rbx + 0x50]
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_SetWindowLongA]
movzx eax, byte [rbx + 0x158]
mov rcx, qword [0x14027e970]
mov byte [rcx + 0x78], al
movzx eax, byte [rbx + 0x158]
mov byte [rcx + 0xd9], al
call fcn.14002ad70
mov rcx, qword [rbx + 8]
xor r8d, r8d
mov edx, 7
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [rbx + 8]
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [rbx + 8]
xor r8d, r8d
mov edx, 0xae
mov rax, qword [rcx]
call qword [rax + 0x1c8]
mov rcx, qword [rbx + 8]
mov r9d, 1
mov dword [rsp + 0x30], esi
xor r8d, r8d
movss dword [rsp + 0x28], xmm6
xor edx, edx
mov dword [rsp + 0x20], esi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 0x148]
movaps xmm6, xmmword [rsp + 0x40]
test eax, eax
js 0x140007e3b
call fcn.14002b130
mov rax, qword [0x14027e970]
mov rcx, qword [rax + 0x4878]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], sil
cmove rcx, rsi
call fcn.14004dcd0
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [rbx + 8]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rsi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140007f10
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140007f10
mov rdi, qword [0x14027e970]
test rdi, rdi
je 0x140007eda
mov rdi, qword [rdi + 0xa0]
test rdi, rdi
je 0x140007eda
cmp qword [rdi], rsi
je 0x140007eda
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140007ea5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rdi + 8], rsi
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140007eb8
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rdi + 0x10], rsi
mov rcx, qword [rdi + 0x18]
test rcx, rcx
je 0x140007eda
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x14027e970]
mov qword [rdi + 0x18], rsi
mov rcx, qword [rax + 0x58]
mov qword [rcx + 8], rsi
mov rcx, qword [rbx + 8]
lea rdx, [rbx + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x80]
mov rax, qword [0x14027e970]
test rax, rax
je 0x140007f10
mov rax, qword [rax + 0xa0]
test rax, rax
je 0x140007f10
cmp qword [rax], rsi
je 0x140007f10
call fcn.14004e290
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
add rsp, 0x50
pop rsi
ret