Function at 0x1400798e0
Capabilities:
Log keystrokes via polling

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xb8
vmovaps xmmword [rsp + 0xa0], xmm10
vmovaps xmmword [rsp + 0x90], xmm9
vmovaps xmmword [rsp + 0x80], xmm8
vmovaps xmmword [rsp + 0x70], xmm7
vmovaps xmmword [rsp + 0x60], xmm6
mov rax, qword [0x14021cc40]
xor rax, rsp
mov qword [rsp + 0x58], rax
call fcn.140048b80
mov rsi, rax
call fcn.1400410a0
test rax, rax
je 0x140079942
call fcn.140048b80
mov rbx, qword [rax + 0x90]
jmp 0x140079944
xor ebx, ebx
vxorps xmm0, xmm0, xmm0
vmovaps xmmword [rsp + 0x30], xmm0
mov rcx, qword [rbx]
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetClientRect]
vmovq xmm0, qword [rsp + 0x38]
vmovq xmm1, qword [rsp + 0x30]
vpsubd xmm0, xmm0, xmm1
vcvtdq2ps xmm0, xmm0
vmovlps qword [rsi + 8], xmm0
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x28]
mov rcx, rax
sub rcx, qword [rbx + 0x18]
vcvtsi2ss xmm0, xmm2, rcx
vcvtsi2ss xmm1, xmm2, qword [rbx + 0x20]
vdivss xmm0, xmm0, xmm1
vmovss dword [rsi + 0x10], xmm0
mov qword [rbx + 0x18], rax
call fcn.1400410a0
test rax, rax
je 0x1400799c5
call fcn.140048b80
mov r14, qword [rax + 0x90]
jmp 0x1400799c8
xor r14d, r14d
call fcn.140048b80
mov rdi, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [r14]
je 0x140079b58
mov ecx, 0x210
call fcn.14005a440
test al, al
je 0x140079a36
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079a36
call fcn.140048b80
mov rdi, rax
mov rcx, rax
mov edx, 0x210
xor r8d, r8d
call fcn.14003eee0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.14003ef10
mov ecx, 0x214
call fcn.14005a440
test al, al
je 0x140079a8d
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079a8d
call fcn.140048b80
mov rdi, rax
mov rcx, rax
mov edx, 0x214
xor r8d, r8d
call fcn.14003eee0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.14003ef10
mov ecx, 0x212
call fcn.14005a440
test al, al
je 0x140079ae4
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079ae4
call fcn.140048b80
mov rdi, rax
mov rcx, rax
mov edx, 0x212
xor r8d, r8d
call fcn.14003eee0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.14003ef10
mov ecx, 0x216
call fcn.14005a440
test al, al
je 0x140079b3b
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079b3b
call fcn.140048b80
mov rdi, rax
mov rcx, rax
mov edx, 0x216
xor r8d, r8d
call fcn.14003eee0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.14003ef10
mov eax, 0xffffffff
cmp byte [rsi + 0x70], 0
je 0x140079bed
cmp dword [rbx + 0x28], eax
jne 0x140079bfb
jmp 0x140079c82
cmp byte [rdi + 0xd3], 0
je 0x140079ba0
vmovsd xmm0, qword [rdi + 0xe00]
vcvttps2dq xmm0, xmm0
vmovlps qword [rsp + 0x40], xmm0
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140079b93
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rdi + 0xd3], 0
jne 0x1400799df
cmp dword [r14 + 0x10], 0
jne 0x1400799df
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x1400799df
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x1400799df
vcvtsi2ss xmm2, xmm2, dword [rsp + 0x44]
vcvtsi2ss xmm1, xmm3, dword [rsp + 0x40]
mov rcx, rdi
call fcn.14003ef40
jmp 0x1400799df
call fcn.14005a9f0
cmp dword [rbx + 0x28], eax
je 0x140079c82
mov dword [rbx + 0x28], eax
call fcn.140048b80
test byte [rax], 0x20
jne 0x140079c82
mov rsi, rax
call fcn.14005a9f0
xor ecx, ecx
cmp eax, 0xffffffff
je 0x140079c7c
cmp byte [rsi + 0x70], 0
jne 0x140079c7c
dec eax
cmp eax, 7
ja case.default.0x140079c32
lea rcx, [0x14007a0c8]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x140079c71
mov edx, 0x7f00
jmp 0x140079c71
mov edx, 0x7f86
jmp 0x140079c71
mov edx, 0x7f85
jmp 0x140079c71
mov edx, 0x7f84
jmp 0x140079c71
mov edx, 0x7f83
jmp 0x140079c71
mov edx, 0x7f82
jmp 0x140079c71
mov edx, 0x7f89
jmp 0x140079c71
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
call fcn.140048b80
mov rsi, rax
call fcn.1400410a0
test rax, rax
je 0x140079ca8
call fcn.140048b80
mov rdi, qword [rax + 0x90]
cmp byte [rdi + 0x2d], 0
jne 0x140079cb0
jmp 0x140079cea
xor edi, edi
cmp byte [rdi + 0x2d], 0
je 0x140079cea
vxorps xmm0, xmm0, xmm0
vmovaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0
mov r9, qword [rdi + 0x38]
test r9, r9
je 0x140079ce1
lea r8, [rsp + 0x40]
xor ecx, ecx
mov edx, 1
call r9
test eax, eax
sete al
jmp 0x140079ce3
xor eax, eax
mov byte [rdi + 0x2c], al
mov byte [rdi + 0x2d], 0
and byte [rsi + 4], 0xfe
cmp byte [rdi + 0x2c], 0
je 0x14007a087
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x14007a087
lea rdx, [rsp + 0x40]
xor ecx, ecx
call rax
test eax, eax
jne 0x14007a087
or byte [rsi + 4], 1
movzx r8d, word [rsp + 0x44]
and r8d, 0x10
shr r8d, 4
mov rcx, rsi
mov edx, 0x269
call fcn.14003eee0
movzx r8d, word [rsp + 0x44]
and r8d, 0x20
shr r8d, 5
mov rcx, rsi
mov edx, 0x26a
call fcn.14003eee0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xe
and r8d, 1
mov rcx, rsi
mov edx, 0x26b
call fcn.14003eee0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xd
and r8d, 1
mov rcx, rsi
mov edx, 0x26c
call fcn.14003eee0
movzx r8d, word [rsp + 0x44]
shr r8d, 0xf
mov rcx, rsi
mov edx, 0x26d
call fcn.14003eee0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xc
and r8d, 1
mov rcx, rsi
mov edx, 0x26e
call fcn.14003eee0
movzx r8d, word [rsp + 0x44]
and r8d, 4
shr r8d, 2
mov rcx, rsi
mov edx, 0x26f
call fcn.14003eee0
movzx r8d, word [rsp + 0x44]
and r8d, 8
shr r8d, 3
mov rcx, rsi
mov edx, 0x270
call fcn.14003eee0
movzx r8d, byte [rsp + 0x44]
and r8b, 1
mov rcx, rsi
mov edx, 0x271
call fcn.14003eee0
movzx r8d, word [rsp + 0x44]
and r8d, 2
shr r8d, 1
mov rcx, rsi
mov edx, 0x272
call fcn.14003eee0
movzx r8d, byte [rsp + 0x45]
and r8d, 1
mov rcx, rsi
mov edx, 0x273
call fcn.14003eee0
mov r8d, dword [rsp + 0x44]
shr r8d, 9
and r8d, 1
mov rcx, rsi
mov edx, 0x274
call fcn.14003eee0
movzx eax, byte [rsp + 0x46]
add eax, 0xffffffe2
vcvtsi2ss xmm0, xmm2, eax
vmovss xmm9, dword [0x14012dd90]
vmulss xmm0, xmm9, xmm0
vmovss xmm6, dword [0x14011de30]
vminss xmm1, xmm0, xmm6
vxorps xmm7, xmm7, xmm7
vmaxss xmm3, xmm1, xmm7
vmovss xmm8, dword [0x140123480]
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x275
call fcn.14003eb80
movzx eax, byte [rsp + 0x47]
add eax, 0xffffffe2
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x276
call fcn.14003eb80
movzx r8d, word [rsp + 0x44]
and r8d, 0x40
shr r8d, 6
mov rcx, rsi
mov edx, 0x277
call fcn.14003eee0
movzx r8d, byte [rsp + 0x44]
shr r8b, 7
mov rcx, rsi
mov edx, 0x278
call fcn.14003eee0
movsx eax, word [rsp + 0x48]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmovss xmm9, dword [0x14012dd94]
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x279
call fcn.14003eb80
movsx eax, word [rsp + 0x48]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmovss xmm10, dword [0x14012dd98]
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27a
call fcn.14003eb80
movsx eax, word [rsp + 0x4a]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27b
call fcn.14003eb80
movsx eax, word [rsp + 0x4a]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27c
call fcn.14003eb80
movsx eax, word [rsp + 0x4c]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27d
call fcn.14003eb80
movsx eax, word [rsp + 0x4c]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27e
call fcn.14003eb80
movsx eax, word [rsp + 0x4e]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27f
call fcn.14003eb80
movsx eax, word [rsp + 0x4e]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x280
call fcn.14003eb80
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140118870
vmovaps xmm6, xmmword [rsp + 0x60]
vmovaps xmm7, xmmword [rsp + 0x70]
vmovaps xmm8, xmmword [rsp + 0x80]
vmovaps xmm9, xmmword [rsp + 0x90]
vmovaps xmm10, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rdi
pop rsi
pop r14
ret