Function at 0x14006abc0
Capabilities:
Log keystrokes via polling

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xb8
movaps xmmword [rsp + 0xa0], xmm10
movaps xmmword [rsp + 0x90], xmm9
movaps xmmword [rsp + 0x80], xmm8
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm6
mov rax, qword [0x140208a80]
xor rax, rsp
mov qword [rsp + 0x58], rax
call fcn.140039ff0
mov rsi, rax
call fcn.140032490
test rax, rax
je 0x14006ac20
call fcn.140039ff0
mov rbx, qword [rax + 0x90]
jmp 0x14006ac22
xor ebx, ebx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov rcx, qword [rbx]
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetClientRect]
movq xmm0, qword [rsp + 0x38]
movq xmm1, qword [rsp + 0x30]
psubd xmm0, xmm1
cvtdq2ps xmm0, xmm0
movlps qword [rsi + 8], xmm0
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x28]
mov rcx, rax
sub rcx, qword [rbx + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
xorps xmm1, xmm1
cvtsi2ss xmm1, qword [rbx + 0x20]
divss xmm0, xmm1
movss dword [rsi + 0x10], xmm0
mov qword [rbx + 0x18], rax
call fcn.140032490
test rax, rax
je 0x14006aca5
call fcn.140039ff0
mov r14, qword [rax + 0x90]
jmp 0x14006aca8
xor r14d, r14d
call fcn.140039ff0
mov rdi, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [r14]
je 0x14006ae38
mov ecx, 0x210
call fcn.14004b740
test al, al
je 0x14006ad16
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14006ad16
call fcn.140039ff0
mov rdi, rax
mov rcx, rax
mov edx, 0x210
xor r8d, r8d
call fcn.140030270
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.1400302a0
mov ecx, 0x214
call fcn.14004b740
test al, al
je 0x14006ad6d
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14006ad6d
call fcn.140039ff0
mov rdi, rax
mov rcx, rax
mov edx, 0x214
xor r8d, r8d
call fcn.140030270
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.1400302a0
mov ecx, 0x212
call fcn.14004b740
test al, al
je 0x14006adc4
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14006adc4
call fcn.140039ff0
mov rdi, rax
mov rcx, rax
mov edx, 0x212
xor r8d, r8d
call fcn.140030270
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.1400302a0
mov ecx, 0x216
call fcn.14004b740
test al, al
je 0x14006ae1b
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14006ae1b
call fcn.140039ff0
mov rdi, rax
mov rcx, rax
mov edx, 0x216
xor r8d, r8d
call fcn.140030270
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.1400302a0
mov eax, 0xffffffff
cmp byte [rsi + 0x70], 0
je 0x14006aecf
cmp dword [rbx + 0x28], eax
jne 0x14006aedd
jmp 0x14006af64
cmp byte [rdi + 0xd3], 0
je 0x14006ae7f
movsd xmm0, qword [rdi + 0xe00]
cvttps2dq xmm0, xmm0
movlps qword [rsp + 0x40], xmm0
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x14006ae72
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rdi + 0xd3], 0
jne 0x14006acbf
cmp dword [r14 + 0x10], 0
jne 0x14006acbf
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x14006acbf
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x14006acbf
cvtsi2ss xmm2, dword [rsp + 0x44]
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rsp + 0x40]
mov rcx, rdi
call fcn.1400302d0
jmp 0x14006acbf
call fcn.14004bcf0
cmp dword [rbx + 0x28], eax
je 0x14006af64
mov dword [rbx + 0x28], eax
call fcn.140039ff0
test byte [rax], 0x20
jne 0x14006af64
mov rsi, rax
call fcn.14004bcf0
xor ecx, ecx
cmp eax, 0xffffffff
je 0x14006af5e
cmp byte [rsi + 0x70], 0
jne 0x14006af5e
dec eax
cmp eax, 7
ja case.default.0x14006af14
lea rcx, [0x14006b3c4]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x14006af53
mov edx, 0x7f00
jmp 0x14006af53
mov edx, 0x7f86
jmp 0x14006af53
mov edx, 0x7f85
jmp 0x14006af53
mov edx, 0x7f84
jmp 0x14006af53
mov edx, 0x7f83
jmp 0x14006af53
mov edx, 0x7f82
jmp 0x14006af53
mov edx, 0x7f89
jmp 0x14006af53
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
call fcn.140039ff0
mov rsi, rax
call fcn.140032490
test rax, rax
je 0x14006af8a
call fcn.140039ff0
mov rdi, qword [rax + 0x90]
cmp byte [rdi + 0x2d], 0
jne 0x14006af92
jmp 0x14006afca
xor edi, edi
cmp byte [rdi + 0x2d], 0
je 0x14006afca
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0
mov r9, qword [rdi + 0x38]
test r9, r9
je 0x14006afc1
lea r8, [rsp + 0x40]
xor ecx, ecx
mov edx, 1
call r9
test eax, eax
sete al
jmp 0x14006afc3
xor eax, eax
mov byte [rdi + 0x2c], al
mov byte [rdi + 0x2d], 0
and byte [rsi + 4], 0xfe
cmp byte [rdi + 0x2c], 0
je 0x14006b385
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x14006b385
lea rdx, [rsp + 0x40]
xor ecx, ecx
call rax
test eax, eax
jne 0x14006b385
or byte [rsi + 4], 1
movzx r8d, word [rsp + 0x44]
and r8d, 0x10
shr r8d, 4
mov rcx, rsi
mov edx, 0x269
call fcn.140030270
movzx r8d, word [rsp + 0x44]
and r8d, 0x20
shr r8d, 5
mov rcx, rsi
mov edx, 0x26a
call fcn.140030270
mov r8d, dword [rsp + 0x44]
shr r8d, 0xe
and r8d, 1
mov rcx, rsi
mov edx, 0x26b
call fcn.140030270
mov r8d, dword [rsp + 0x44]
shr r8d, 0xd
and r8d, 1
mov rcx, rsi
mov edx, 0x26c
call fcn.140030270
movzx r8d, word [rsp + 0x44]
shr r8d, 0xf
mov rcx, rsi
mov edx, 0x26d
call fcn.140030270
mov r8d, dword [rsp + 0x44]
shr r8d, 0xc
and r8d, 1
mov rcx, rsi
mov edx, 0x26e
call fcn.140030270
movzx r8d, word [rsp + 0x44]
and r8d, 4
shr r8d, 2
mov rcx, rsi
mov edx, 0x26f
call fcn.140030270
movzx r8d, word [rsp + 0x44]
and r8d, 8
shr r8d, 3
mov rcx, rsi
mov edx, 0x270
call fcn.140030270
movzx r8d, byte [rsp + 0x44]
and r8b, 1
mov rcx, rsi
mov edx, 0x271
call fcn.140030270
movzx r8d, word [rsp + 0x44]
and r8d, 2
shr r8d, 1
mov rcx, rsi
mov edx, 0x272
call fcn.140030270
movzx r8d, byte [rsp + 0x45]
and r8d, 1
mov rcx, rsi
mov edx, 0x273
call fcn.140030270
mov r8d, dword [rsp + 0x44]
shr r8d, 9
and r8d, 1
mov rcx, rsi
mov edx, 0x274
call fcn.140030270
movzx eax, byte [rsp + 0x46]
add eax, 0xffffffe2
cvtsi2ss xmm3, eax
movss xmm9, dword [0x14011edb0]
mulss xmm3, xmm9
movss xmm6, dword [0x140110e30]
movss xmm7, dword [0x140114680]
ucomiss xmm3, xmm7
minss xmm3, xmm6
xorps xmm8, xmm8
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x275
call fcn.14002ff10
movzx eax, byte [rsp + 0x47]
add eax, 0xffffffe2
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x276
call fcn.14002ff10
movzx r8d, word [rsp + 0x44]
and r8d, 0x40
shr r8d, 6
mov rcx, rsi
mov edx, 0x277
call fcn.140030270
movzx r8d, byte [rsp + 0x44]
shr r8b, 7
mov rcx, rsi
mov edx, 0x278
call fcn.140030270
movsx eax, word [rsp + 0x48]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm9, dword [0x14011edb4]
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x279
call fcn.14002ff10
movsx eax, word [rsp + 0x48]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm10, dword [0x14011edb8]
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27a
call fcn.14002ff10
movsx eax, word [rsp + 0x4a]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27b
call fcn.14002ff10
movsx eax, word [rsp + 0x4a]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27c
call fcn.14002ff10
movsx eax, word [rsp + 0x4c]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27d
call fcn.14002ff10
movsx eax, word [rsp + 0x4c]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27e
call fcn.14002ff10
movsx eax, word [rsp + 0x4e]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27f
call fcn.14002ff10
movsx eax, word [rsp + 0x4e]
add eax, 0x1ea9
cvtsi2ss xmm0, eax
mulss xmm0, xmm9
minss xmm6, xmm0
maxss xmm6, xmm8
ucomiss xmm0, xmm7
seta r8b
mov rcx, rsi
mov edx, 0x280
movaps xmm3, xmm6
call fcn.14002ff10
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14010bb50
movaps xmm6, xmmword [rsp + 0x60]
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x80]
movaps xmm9, xmmword [rsp + 0x90]
movaps xmm10, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rdi
pop rsi
pop r14
ret