Function at 0x14005f234
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x140106080]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r14, qword [0x1401b5108]
test r14, r14
je 0x14005f272
mov rsi, qword [r14 + 0x98]
jmp 0x14005f274
xor esi, esi
xorps xmm0, xmm0
lea rdx, [rbp - 0x20]
movdqu xmmword [rbp - 0x20], xmm0
mov rcx, qword [rsi]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rbp - 0x18]
lea rcx, [rbp - 0x28]
sub eax, dword [rbp - 0x20]
and qword [rbp - 0x28], 0
movd xmm1, eax
mov eax, dword [rbp - 0x14]
sub eax, dword [rbp - 0x1c]
cvtdq2ps xmm1, xmm1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [r14 + 0x10], xmm1
movss dword [r14 + 0x14], xmm0
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rcx, qword [rbp - 0x28]
xorps xmm1, xmm1
mov rbx, qword [0x1401b5108]
mov rax, rcx
sub rax, qword [rsi + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [rsi + 0x20]
cvtsi2ss xmm1, rax
divss xmm1, xmm0
movss dword [r14 + 0x18], xmm1
mov qword [rsi + 0x18], rcx
test rbx, rbx
je 0x14005f2fd
mov rdi, qword [rbx + 0x98]
jmp 0x14005f2ff
xor edi, edi
mov r15, qword [rdi]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, r15
jne 0x14005f394
cmp byte [rbx + 0xdb], 0
je 0x14005f356
cvttss2si eax, dword [rbx + 0xdfc]
lea rdx, [rbp - 0x30]
mov rcx, r15
mov dword [rbp - 0x30], eax
cvttss2si eax, dword [rbx + 0xe00]
mov dword [rbp - 0x2c], eax
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x14005f34d
mov edx, dword [rbp - 0x2c]
mov ecx, dword [rbp - 0x30]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rbx + 0xdb], 0
jne 0x14005f394
cmp byte [rdi + 0x10], 0
jne 0x14005f394
lea rcx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x14005f394
mov rcx, qword [rdi]
lea rdx, [rbp - 0x30]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x14005f394
movd xmm2, dword [rbp - 0x2c]
lea rcx, [rbx + 8]
movd xmm1, dword [rbp - 0x30]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
call fcn.140038b38
mov edi, 0x210
mov ecx, edi
call fcn.140044af8
mov bl, 1
test al, al
je 0x14005f3c8
mov r15d, 0xa0
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test bl, al
jne 0x14005f3c8
mov r8d, r15d
xor edx, edx
mov ecx, edi
call fcn.14005ed30
mov edi, 0x214
mov ecx, edi
call fcn.140044af8
test al, al
je 0x14005f3fa
mov r15d, 0xa1
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test bl, al
jne 0x14005f3fa
mov r8d, r15d
xor edx, edx
mov ecx, edi
call fcn.14005ed30
mov edi, 0x212
mov ecx, edi
call fcn.140044af8
test al, al
je 0x14005f42c
mov r15d, 0x5b
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test bl, al
jne 0x14005f42c
mov r8d, r15d
xor edx, edx
mov ecx, edi
call fcn.14005ed30
mov edi, 0x216
mov ecx, edi
call fcn.140044af8
test al, al
je 0x14005f45e
mov r15d, 0x5c
mov ecx, r15d
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
test bl, al
jne 0x14005f45e
mov r8d, r15d
xor edx, edx
mov ecx, edi
call fcn.14005ed30
cmp byte [r14 + 0x78], 0
je 0x14005f46a
or eax, 0xffffffff
jmp 0x14005f477
mov rax, qword [0x1401b5108]
mov eax, dword [rax + 0x4a58]
cmp dword [rsi + 0x28], eax
je 0x14005f484
mov dword [rsi + 0x28], eax
call fcn.14005ec84
call fcn.14005ed84
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400cc540
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret