Function at 0x140001360
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x90
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x80
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
lea rcx, [0x1400033c8]
call fcn.140001020
mov rcx, qword [0x140005788]
test rcx, rcx
jne 0x1400013ed
nop word [rax + rax]
lea rdx, str.STALCRAFT
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
mov ecx, 0x1f4
mov qword [0x140005788], rax
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140005788]
test rcx, rcx
je 0x1400013c0
xorps xmm0, xmm0
lea rdx, [rsp + 0x60]
movups xmmword [rsp + 0x60], xmm0
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x6c]
mov ecx, dword [rsp + 0x68]
test ecx, ecx
je 0x140001410
test eax, eax
jne 0x140001449
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x1400033dc]
call fcn.140001020
mov rcx, qword [0x140005788]
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [rsp + 0x68]
test ecx, ecx
jne 0x140001449
mov eax, dword [rsp + 0x6c]
test eax, eax
je 0x140001408
mov rcx, qword [0x140005788]
lea rdx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_GetClientRect]
mov ebx, dword [rsp + 0x68]
lea rcx, [0x1400033e0]
mov edi, dword [rsp + 0x6c]
call fcn.140001020
mov r8d, edi
lea rcx, str.Screen_size__dx_d_n
mov edx, ebx
call fcn.140001020
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov r14d, eax
mov eax, edi
cdq
mov esi, r14d
sub eax, edx
sar eax, 1
mov r15d, eax
mov eax, 0x66666667
imul r14d
mov eax, 0x66666667
mov ebx, r15d
mov r8d, edx
imul r15d
sar r8d, 2
mov ecx, r8d
sar edx, 2
mov eax, edx
shr ecx, 0x1f
add r8d, ecx
shr eax, 0x1f
sub esi, r8d
lea rcx, str.Scan_area__d__d__d__d_n
add edx, eax
mov dword [rsp + 0x50], esi
sub ebx, edx
mov edx, esi
lea ebp, [r8 + r14]
mov dword [rsp + 0x54], ebx
lea edi, [r8 + r15]
mov dword [rsp + 0x58], ebp
mov r8d, ebx
mov dword [rsp + 0x5c], edi
mov r9d, ebp
mov dword [rsp + 0x20], edi
call fcn.140001020
sub ebp, esi
lea rcx, str.Scan_area_size__d__d_n
sub edi, ebx
mov edx, ebp
mov r8d, edi
call fcn.140001020
imul edi, ebp
lea eax, [rdi + rdi*2]
movsxd rcx, eax
call fcn.140001600
movaps xmm6, xmmword [rsp + 0x50]
xor ebx, ebx
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x48], ebx
mov qword [0x140005780], rax
nop word [rax + rax]
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x140001540
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [0x140005788]
jne 0x140001540
lea rax, [rsp + 0x48]
movdqa xmmword [rsp + 0x50], xmm6
lea r9, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x44]
call fcn.140001080
test eax, eax
je 0x140001540
mov eax, dword [rsp + 0x40]
xor r9d, r9d
sub eax, r15d
mov qword [rsp + 0x20], rbx
cdq
sub eax, edx
sar eax, 1
lea ecx, [r9 + 1]
mov r8d, eax
mov eax, dword [rsp + 0x44]
sub eax, r14d
cdq
sub eax, edx
sar eax, 1
lea edx, [rax - 1]
call qword [sym.imp.USER32.dll_mouse_event]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001540