Function at 0x140067e00
Capabilities:
Log keystrokes via polling

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xb8
movaps xmmword [rsp + 0xa0], xmm10
movaps xmmword [rsp + 0x90], xmm9
movaps xmmword [rsp + 0x80], xmm8
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [rsp + 0x60], xmm6
mov rax, qword [0x140203ac0]
xor rax, rsp
mov qword [rsp + 0x58], rax
call fcn.140037230
mov rsi, rax
call fcn.14002f6d0
test rax, rax
je 0x140067e60
call fcn.140037230
mov rbx, qword [rax + 0x90]
jmp 0x140067e62
xor ebx, ebx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov rcx, qword [rbx]
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetClientRect]
movq xmm0, qword [rsp + 0x38]
movq xmm1, qword [rsp + 0x30]
psubd xmm0, xmm1
cvtdq2ps xmm0, xmm0
movlps qword [rsi + 8], xmm0
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x28]
mov rcx, rax
sub rcx, qword [rbx + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
xorps xmm1, xmm1
cvtsi2ss xmm1, qword [rbx + 0x20]
divss xmm0, xmm1
movss dword [rsi + 0x10], xmm0
mov qword [rbx + 0x18], rax
call fcn.14002f6d0
test rax, rax
je 0x140067ee5
call fcn.140037230
mov r14, qword [rax + 0x90]
jmp 0x140067ee8
xor r14d, r14d
call fcn.140037230
mov rdi, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [r14]
je 0x140068078
mov ecx, 0x210
call fcn.140048980
test al, al
je 0x140067f56
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140067f56
call fcn.140037230
mov rdi, rax
mov rcx, rax
mov edx, 0x210
xor r8d, r8d
call fcn.14002d4b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.14002d4e0
mov ecx, 0x214
call fcn.140048980
test al, al
je 0x140067fad
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140067fad
call fcn.140037230
mov rdi, rax
mov rcx, rax
mov edx, 0x214
xor r8d, r8d
call fcn.14002d4b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.14002d4e0
mov ecx, 0x212
call fcn.140048980
test al, al
je 0x140068004
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140068004
call fcn.140037230
mov rdi, rax
mov rcx, rax
mov edx, 0x212
xor r8d, r8d
call fcn.14002d4b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.14002d4e0
mov ecx, 0x216
call fcn.140048980
test al, al
je 0x14006805b
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14006805b
call fcn.140037230
mov rdi, rax
mov rcx, rax
mov edx, 0x216
xor r8d, r8d
call fcn.14002d4b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.14002d4e0
mov eax, 0xffffffff
cmp byte [rsi + 0x70], 0
je 0x14006810f
cmp dword [rbx + 0x28], eax
jne 0x14006811d
jmp 0x1400681a4
cmp byte [rdi + 0xd3], 0
je 0x1400680bf
movsd xmm0, qword [rdi + 0xe00]
cvttps2dq xmm0, xmm0
movlps qword [rsp + 0x40], xmm0
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x1400680b2
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rdi + 0xd3], 0
jne 0x140067eff
cmp dword [r14 + 0x10], 0
jne 0x140067eff
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x140067eff
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x140067eff
cvtsi2ss xmm2, dword [rsp + 0x44]
xorps xmm1, xmm1
cvtsi2ss xmm1, dword [rsp + 0x40]
mov rcx, rdi
call fcn.14002d510
jmp 0x140067eff
call fcn.140048f30
cmp dword [rbx + 0x28], eax
je 0x1400681a4
mov dword [rbx + 0x28], eax
call fcn.140037230
test byte [rax], 0x20
jne 0x1400681a4
mov rsi, rax
call fcn.140048f30
xor ecx, ecx
cmp eax, 0xffffffff
je 0x14006819e
cmp byte [rsi + 0x70], 0
jne 0x14006819e
dec eax
cmp eax, 7
ja case.default.0x140068154
lea rcx, [0x140068604]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x140068193
mov edx, 0x7f00
jmp 0x140068193
mov edx, 0x7f86
jmp 0x140068193
mov edx, 0x7f85
jmp 0x140068193
mov edx, 0x7f84
jmp 0x140068193
mov edx, 0x7f83
jmp 0x140068193
mov edx, 0x7f82
jmp 0x140068193
mov edx, 0x7f89
jmp 0x140068193
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
call fcn.140037230
mov rsi, rax
call fcn.14002f6d0
test rax, rax
je 0x1400681ca
call fcn.140037230
mov rdi, qword [rax + 0x90]
cmp byte [rdi + 0x2d], 0
jne 0x1400681d2
jmp 0x14006820a
xor edi, edi
cmp byte [rdi + 0x2d], 0
je 0x14006820a
xorps xmm0, xmm0
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0
mov r9, qword [rdi + 0x38]
test r9, r9
je 0x140068201
lea r8, [rsp + 0x40]
xor ecx, ecx
mov edx, 1
call r9
test eax, eax
sete al
jmp 0x140068203
xor eax, eax
mov byte [rdi + 0x2c], al
mov byte [rdi + 0x2d], 0
and byte [rsi + 4], 0xfe
cmp byte [rdi + 0x2c], 0
je 0x1400685c5
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x1400685c5
lea rdx, [rsp + 0x40]
xor ecx, ecx
call rax
test eax, eax
jne 0x1400685c5
or byte [rsi + 4], 1
movzx r8d, word [rsp + 0x44]
and r8d, 0x10
shr r8d, 4
mov rcx, rsi
mov edx, 0x269
call fcn.14002d4b0
movzx r8d, word [rsp + 0x44]
and r8d, 0x20
shr r8d, 5
mov rcx, rsi
mov edx, 0x26a
call fcn.14002d4b0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xe
and r8d, 1
mov rcx, rsi
mov edx, 0x26b
call fcn.14002d4b0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xd
and r8d, 1
mov rcx, rsi
mov edx, 0x26c
call fcn.14002d4b0
movzx r8d, word [rsp + 0x44]
shr r8d, 0xf
mov rcx, rsi
mov edx, 0x26d
call fcn.14002d4b0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xc
and r8d, 1
mov rcx, rsi
mov edx, 0x26e
call fcn.14002d4b0
movzx r8d, word [rsp + 0x44]
and r8d, 4
shr r8d, 2
mov rcx, rsi
mov edx, 0x26f
call fcn.14002d4b0
movzx r8d, word [rsp + 0x44]
and r8d, 8
shr r8d, 3
mov rcx, rsi
mov edx, 0x270
call fcn.14002d4b0
movzx r8d, byte [rsp + 0x44]
and r8b, 1
mov rcx, rsi
mov edx, 0x271
call fcn.14002d4b0
movzx r8d, word [rsp + 0x44]
and r8d, 2
shr r8d, 1
mov rcx, rsi
mov edx, 0x272
call fcn.14002d4b0
movzx r8d, byte [rsp + 0x45]
and r8d, 1
mov rcx, rsi
mov edx, 0x273
call fcn.14002d4b0
mov r8d, dword [rsp + 0x44]
shr r8d, 9
and r8d, 1
mov rcx, rsi
mov edx, 0x274
call fcn.14002d4b0
movzx eax, byte [rsp + 0x46]
add eax, 0xffffffe2
cvtsi2ss xmm3, eax
movss xmm9, dword [0x140119ba0]
mulss xmm3, xmm9
movss xmm6, dword [0x14010be30]
movss xmm7, dword [0x14010f470]
ucomiss xmm3, xmm7
minss xmm3, xmm6
xorps xmm8, xmm8
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x275
call fcn.14002d150
movzx eax, byte [rsp + 0x47]
add eax, 0xffffffe2
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x276
call fcn.14002d150
movzx r8d, word [rsp + 0x44]
and r8d, 0x40
shr r8d, 6
mov rcx, rsi
mov edx, 0x277
call fcn.14002d4b0
movzx r8d, byte [rsp + 0x44]
shr r8b, 7
mov rcx, rsi
mov edx, 0x278
call fcn.14002d4b0
movsx eax, word [rsp + 0x48]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm9, dword [0x140119ba4]
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x279
call fcn.14002d150
movsx eax, word [rsp + 0x48]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm10, dword [0x140119ba8]
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27a
call fcn.14002d150
movsx eax, word [rsp + 0x4a]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27b
call fcn.14002d150
movsx eax, word [rsp + 0x4a]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27c
call fcn.14002d150
movsx eax, word [rsp + 0x4c]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm9
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27d
call fcn.14002d150
movsx eax, word [rsp + 0x4c]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27e
call fcn.14002d150
movsx eax, word [rsp + 0x4e]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
mulss xmm3, xmm10
ucomiss xmm3, xmm7
minss xmm3, xmm6
maxss xmm3, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27f
call fcn.14002d150
movsx eax, word [rsp + 0x4e]
add eax, 0x1ea9
cvtsi2ss xmm0, eax
mulss xmm0, xmm9
minss xmm6, xmm0
maxss xmm6, xmm8
ucomiss xmm0, xmm7
seta r8b
mov rcx, rsi
mov edx, 0x280
movaps xmm3, xmm6
call fcn.14002d150
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140106b10
movaps xmm6, xmmword [rsp + 0x60]
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x80]
movaps xmm9, xmmword [rsp + 0x90]
movaps xmm10, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rdi
pop rsi
pop r14
ret