Function at 0x1400814f0
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
movaps xmmword [rsp + 0xc0], xmm11
movaps xmmword [rsp + 0xb0], xmm10
movaps xmmword [rsp + 0xa0], xmm9
movaps xmmword [rsp + 0x90], xmm8
movaps xmmword [rsp + 0x80], xmm7
movaps xmmword [rsp + 0x70], xmm6
mov rax, qword [0x1401129a8]
xor rax, rsp
mov qword [rsp + 0x68], rax
call fcn.140032130
test rax, rax
je 0x140081557
call fcn.14003c1b0
mov r15, qword [rax + 0x90]
jmp 0x14008155a
xor r15d, r15d
call fcn.14003c1b0
mov r14, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov rcx, qword [r15]
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x3c]
sub eax, dword [rsp + 0x34]
xorps xmm0, xmm0
cvtsi2ss xmm0, eax
mov eax, dword [rsp + 0x38]
sub eax, dword [rsp + 0x30]
cvtsi2ss xmm1, eax
movss dword [r14 + 8], xmm1
movss dword [r14 + 0xc], xmm0
cmp byte [r15 + 0x30], 0
je 0x140081641
call fcn.140032130
test rax, rax
je 0x1400815c2
call fcn.14003c1b0
mov rbx, qword [rax + 0x90]
jmp 0x1400815c4
xor ebx, ebx
call fcn.14003c1c0
mov rsi, rax
cmp dword [rax + 0xbc], 0
jns 0x14008161f
xor ecx, ecx
call fcn.1400305d0
mov rdi, rax
mov rdx, qword [rsi + 0xc0]
test rdx, rdx
je 0x14008160e
movsxd rax, dword [rsi + 0xb8]
shl rax, 4
lea r8, [rax + rax*2]
mov rcx, rdi
call fcn.1400a5150
mov rcx, qword [rsi + 0xc0]
call fcn.140030860
mov qword [rsi + 0xc0], rdi
mov dword [rsi + 0xbc], 0
mov dword [rsi + 0xb8], 0
lea r8, [0x140083f00]
xor ecx, ecx
xor edx, edx
xor r9d, r9d
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov byte [rbx + 0x30], 0
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x28]
mov rcx, rax
sub rcx, qword [r15 + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
xorps xmm1, xmm1
cvtsi2ss xmm1, qword [r15 + 0x20]
divss xmm0, xmm1
movss dword [r14 + 0x10], xmm0
mov qword [r15 + 0x18], rax
call fcn.140032130
test rax, rax
je 0x140081698
call fcn.14003c1b0
mov rbx, qword [rax + 0x90]
jmp 0x14008169a
xor ebx, ebx
call fcn.14003c1b0
mov rdi, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov ebp, eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
test rax, rax
je 0x14008177f
mov rsi, rax
mov rdx, qword [rbx]
cmp rax, rdx
je 0x1400816e7
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne 0x1400816e7
mov rcx, rsi
call fcn.140059630
test rax, rax
je 0x14008177f
cmp byte [rdi + 0xcd], 0
je 0x140081733
cvttss2si ecx, dword [rdi + 0xf8]
mov dword [rsp + 0x48], ecx
cvttss2si edx, dword [rdi + 0xfc]
mov dword [rsp + 0x4c], edx
test byte [rdi + 1], 4
jne 0x140081724
lea rdx, [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x4c]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rdi + 0xcd], 0
jne 0x14008177f
cmp dword [rbx + 0x10], 0
jne 0x14008177f
test ebp, ebp
je 0x14008177f
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x48], rax
test byte [rdi + 1], 4
jne 0x140081765
mov rcx, qword [rbx]
lea rdx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
jmp 0x14008176c
mov rcx, rax
shr rcx, 0x20
cvtsi2ss xmm2, ecx
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mov rcx, rdi
call fcn.14002ff00
xor esi, esi
test ebp, ebp
je 0x1400817a4
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_WindowFromPoint]
test rax, rax
je 0x1400817a4
mov rcx, rax
call fcn.140059630
test rax, rax
je 0x1400817a4
mov esi, dword [rax]
mov rcx, rdi
mov edx, esi
call fcn.1400303c0
mov ecx, 0x210
call fcn.1400553a0
test al, al
je 0x140081805
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140081805
call fcn.14003c1b0
mov rsi, rax
mov rcx, rax
mov edx, 0x210
xor r8d, r8d
call fcn.14002fea0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.14002fed0
mov ecx, 0x214
call fcn.1400553a0
test al, al
je 0x14008185c
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14008185c
call fcn.14003c1b0
mov rsi, rax
mov rcx, rax
mov edx, 0x214
xor r8d, r8d
call fcn.14002fea0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.14002fed0
mov ecx, 0x212
call fcn.1400553a0
test al, al
je 0x1400818b3
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x1400818b3
call fcn.14003c1b0
mov rsi, rax
mov rcx, rax
mov edx, 0x212
xor r8d, r8d
call fcn.14002fea0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.14002fed0
mov ecx, 0x216
call fcn.1400553a0
test al, al
je 0x14008190a
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14008190a
call fcn.14003c1b0
mov rsi, rax
mov rcx, rax
mov edx, 0x216
xor r8d, r8d
call fcn.14002fea0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.14002fed0
mov eax, 0xffffffff
cmp byte [r14 + 0x58], 0
je 0x140081921
cmp dword [r15 + 0x28], eax
jne 0x140081930
jmp 0x1400819bb
call fcn.140055a90
cmp dword [r15 + 0x28], eax
je 0x1400819bb
mov dword [r15 + 0x28], eax
call fcn.14003c1b0
test byte [rax], 0x20
jne 0x1400819bb
mov rsi, rax
call fcn.140055a90
cmp eax, 0xffffffff
je 0x140081951
cmp byte [rsi + 0x58], 0
je 0x140081955
xor ecx, ecx
jmp 0x1400819b5
add eax, 0xffffffff
cmp eax, 7
ja case.default.0x14008196b
lea rcx, [0x140081e74]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x1400819aa
mov edx, 0x7f86
jmp 0x1400819aa
mov edx, 0x7f85
jmp 0x1400819aa
mov edx, 0x7f84
jmp 0x1400819aa
mov edx, 0x7f83
jmp 0x1400819aa
mov edx, 0x7f82
jmp 0x1400819aa
mov edx, 0x7f89
jmp 0x1400819aa
mov edx, 0x7f88
jmp 0x1400819aa
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
call fcn.14003c1b0
mov rsi, rax
call fcn.140032130
test rax, rax
je 0x1400819e1
call fcn.14003c1b0
mov rdi, qword [rax + 0x90]
cmp byte [rdi + 0x32], 0
jne 0x1400819e9
jmp 0x140081a20
xor edi, edi
cmp byte [rdi + 0x32], 0
je 0x140081a20
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0
mov rbp, qword [rdi + 0x40]
test rbp, rbp
je 0x140081a17
lea r8, [rsp + 0x50]
xor ecx, ecx
mov edx, 1
call rbp
test eax, eax
sete al
jmp 0x140081a19
xor eax, eax
mov byte [rdi + 0x31], al
mov byte [rdi + 0x32], 0
and byte [rsi + 4], 0xfe
cmp byte [rdi + 0x31], 0
je 0x140081e24
mov rax, qword [rdi + 0x48]
test rax, rax
je 0x140081e24
lea rdx, [rsp + 0x50]
xor ecx, ecx
call rax
test eax, eax
jne 0x140081e24
or byte [rsi + 4], 1
movzx r8d, word [rsp + 0x54]
and r8d, 0x10
shr r8d, 4
mov rcx, rsi
mov edx, 0x277
call fcn.14002fea0
movzx r8d, word [rsp + 0x54]
and r8d, 0x20
shr r8d, 5
mov rcx, rsi
mov edx, 0x278
call fcn.14002fea0
mov r8d, dword [rsp + 0x54]
shr r8d, 0xe
and r8d, 1
mov rcx, rsi
mov edx, 0x279
call fcn.14002fea0
mov r8d, dword [rsp + 0x54]
shr r8d, 0xd
and r8d, 1
mov rcx, rsi
mov edx, 0x27a
call fcn.14002fea0
movzx r8d, word [rsp + 0x54]
shr r8d, 0xf
mov rcx, rsi
mov edx, 0x27b
call fcn.14002fea0
mov r8d, dword [rsp + 0x54]
shr r8d, 0xc
and r8d, 1
mov rcx, rsi
mov edx, 0x27c
call fcn.14002fea0
movzx r8d, word [rsp + 0x54]
and r8d, 4
shr r8d, 2
mov rcx, rsi
mov edx, 0x27d
call fcn.14002fea0
movzx r8d, word [rsp + 0x54]
and r8d, 8
shr r8d, 3
mov rcx, rsi
mov edx, 0x27e
call fcn.14002fea0
mov r8b, byte [rsp + 0x54]
and r8b, 1
mov rcx, rsi
mov edx, 0x27f
call fcn.14002fea0
movzx r8d, word [rsp + 0x54]
and r8d, 2
shr r8d, 1
mov rcx, rsi
mov edx, 0x280
call fcn.14002fea0
movzx r8d, byte [rsp + 0x55]
and r8d, 1
mov rcx, rsi
mov edx, 0x281
call fcn.14002fea0
mov r8d, dword [rsp + 0x54]
shr r8d, 9
and r8d, 1
mov rcx, rsi
mov edx, 0x282
call fcn.14002fea0
movzx eax, byte [rsp + 0x56]
add eax, 0xffffffe2
cvtsi2ss xmm3, eax
movss xmm7, dword [0x1400e33a0]
divss xmm3, xmm7
movss xmm6, dword [0x1400d9774]
movaps xmm0, xmm6
minss xmm0, xmm3
xorps xmm8, xmm8
movss xmm11, dword [0x1400dab54]
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x283
call fcn.14002fc10
movzx eax, byte [rsp + 0x57]
add eax, 0xffffffe2
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm7
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x284
call fcn.14002fc10
movzx r8d, word [rsp + 0x54]
and r8d, 0x40
shr r8d, 6
mov rcx, rsi
mov edx, 0x285
call fcn.14002fea0
mov r8b, byte [rsp + 0x54]
shr r8b, 7
mov rcx, rsi
mov edx, 0x286
call fcn.14002fea0
movsx eax, word [rsp + 0x58]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm9, dword [0x1400e33a4]
divss xmm3, xmm9
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x287
call fcn.14002fc10
movsx eax, word [rsp + 0x58]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm10, dword [0x1400e33a8]
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x288
call fcn.14002fc10
movsx eax, word [rsp + 0x5a]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x289
call fcn.14002fc10
movsx eax, word [rsp + 0x5a]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm9
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28a
call fcn.14002fc10
movsx eax, word [rsp + 0x5c]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm9
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28b
call fcn.14002fc10
movsx eax, word [rsp + 0x5c]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28c
call fcn.14002fc10
movsx eax, word [rsp + 0x5e]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28d
call fcn.14002fc10
movsx eax, word [rsp + 0x5e]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm9
minss xmm6, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm6
seta r8b
mov rcx, rsi
mov edx, 0x28e
call fcn.14002fc10
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400a0150
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x80]
movaps xmm8, xmmword [rsp + 0x90]
movaps xmm9, xmmword [rsp + 0xa0]
movaps xmm10, xmmword [rsp + 0xb0]
movaps xmm11, xmmword [rsp + 0xc0]
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret