Function at 0x14003da24
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 0x18], r8
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rdi, qword [0x1400681f0]
xor r14d, r14d
mov r12, r9
mov esi, edx
mov r13, rcx
test rdi, rdi
je 0x14003e196
mov r15, qword [rdi + 0x98]
test r15, r15
je 0x14003e196
add rdi, 8
mov eax, 0x204
cmp edx, eax
ja 0x14003df65
je 0x14003e082
mov edx, 0x104
lea ebx, [r14 + 1]
lea eax, [rdx - 2]
lea ecx, [rdx - 4]
cmp esi, eax
ja 0x14003dd4a
je 0x14003dc09
mov eax, esi
sub eax, 7
je 0x14003db71
sub eax, ebx
je 0x14003db71
sub eax, 0x18
je 0x14003db52
sub eax, 0x31
je 0x14003db48
sub eax, 0x4f
je 0x14003dd80
sub eax, 0x60
je 0x14003dae0
cmp eax, ebx
jne 0x14003e196
cmp esi, ecx
je 0x14003daeb
mov dil, r14b
cmp esi, edx
jne 0x14003daee
mov dil, bl
cmp r8, rcx
jae 0x14003e196
call fcn.14003cbd4
mov rsi, qword [rbp + 0x40]
cmp rsi, 0xd
jne 0x14003db18
shr r12, 0x10
mov eax, 0x10d
bt r12w, 8
cmovb esi, eax
movsxd rcx, esi
call fcn.14003d3b4
mov ecx, 0x262
mov r14d, eax
cmp eax, ecx
jne 0x14003de4e
test dil, dil
jne 0x14003de53
mov r8d, esi
mov dl, bl
call fcn.14003cb80
jmp 0x14003de53
call fcn.14003c8ac
jmp 0x14003e196
cmp r12w, bx
jne 0x14003e196
call fcn.14003cad4
test al, al
je 0x14003e196
mov rax, rbx
jmp 0x14003e198
mov rcx, qword [rdi + 0x100]
cmp esi, 7
sete r8b
lea r9, [rcx + 0x3ff0]
mov eax, dword [r9]
sub eax, ebx
js 0x14003dba9
movsxd rdx, eax
imul rax, rdx, 0x1c
add rax, qword [rcx + 0x3ff8]
cmp dword [rax], 6
je 0x14003dbff
sub rax, 0x1c
sub rdx, rbx
jns 0x14003db9b
cmp byte [rcx + 0x2ba0], r14b
sete dl
cmp dl, r8b
je 0x14003e196
cmp byte [rdi + 0x77], r14b
je 0x14003dbcb
cmp esi, 7
jne 0x14003e196
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x30], eax
mov eax, dword [rcx + 0x4014]
mov dword [rbp - 0x40], eax
inc eax
mov dword [rcx + 0x4014], eax
mov rcx, r9
mov dword [rbp - 0x48], 6
mov byte [rbp - 0x3c], r8b
jmp 0x14003dd3c
test rax, rax
je 0x14003dba9
mov dl, byte [rax + 0xc]
jmp 0x14003dbb3
mov rcx, r13
call qword [sym.imp.USER32.dll_IsWindowUnicode]
test eax, eax
je 0x14003dcc3
mov rbx, qword [rbp + 0x40]
lea rax, [rbx - 1]
cmp rax, 0xfffe
ja 0x14003e196
test bx, bx
jne 0x14003dc41
cmp word [rdi + 0x2b9c], r14w
je 0x14003e196
cmp byte [rdi + 0x2b99], r14b
je 0x14003e196
mov ecx, 0xfc00
movzx eax, bx
and ax, cx
mov edx, 0xd800
movzx ecx, word [rdi + 0x2b9c]
cmp ax, dx
jne 0x14003dc88
test cx, cx
je 0x14003dc7c
mov edx, 0xfffd
mov rcx, rdi
call fcn.140017bb4
mov word [rdi + 0x2b9c], bx
jmp 0x14003e196
test cx, cx
je 0x14003dcb3
mov ecx, 0xdc00
cmp ax, cx
je 0x14003dca6
mov edx, 0xfffd
mov rcx, rdi
call fcn.140017bb4
jmp 0x14003dcab
mov ebx, 0xfffd
mov word [rdi + 0x2b9c], r14w
movzx edx, bx
mov rcx, rdi
call fcn.140017bb4
jmp 0x14003e196
mov ecx, dword [r15 + 0x2c]
lea rax, [rbp - 0x50]
mov dword [rsp + 0x28], ebx
lea r8, [rbp + 0x40]
mov r9d, ebx
mov qword [rsp + 0x20], rax
mov edx, ebx
mov word [rbp - 0x50], r14w
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movzx edx, word [rbp - 0x50]
mov rcx, qword [rdi + 0x100]
test edx, edx
je 0x14003e196
cmp byte [rdi + 0x2b99], r14b
je 0x14003e196
mov eax, dword [rcx + 0x4014]
mov dword [rbp - 0x40], eax
inc eax
mov qword [rbp - 0x38], r14
mov dword [rbp - 0x30], r14d
mov r14d, 2
mov dword [rcx + 0x4014], eax
add rcx, 0x3ff0
mov dword [rbp - 0x48], 5
mov dword [rbp - 0x44], r14d
mov dword [rbp - 0x3c], edx
lea rdx, [rbp - 0x48]
call fcn.14002e204
jmp 0x14003e196
mov eax, esi
sub eax, edx
je 0x14003dae4
sub eax, ebx
je 0x14003dae4
sub eax, 0xfb
je 0x14003dd80
sub eax, ebx
je 0x14003e087
sub eax, ebx
je 0x14003e119
cmp eax, ebx
je 0x14003e087
jmp 0x14003e196
call fcn.14003d9ec
xor ecx, ecx
mov dword [rbp - 0x4c], eax
mov r14d, eax
mov qword [r15 + 8], r13
mov eax, ecx
mov edx, 0x200
cmp esi, edx
setne al
add eax, ebx
mov dword [rbp - 0x50], eax
cmp dword [r15 + 0x10], eax
je 0x14003ddfc
lea eax, [rcx + 0x18]
mov dword [rbp - 0x1c], 0x80000000
cmp esi, edx
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x48], eax
lea r14d, [rcx + 2]
lea eax, [rcx + 0x12]
mov qword [rbp - 0x18], r13
cmovne r14d, eax
mov dword [rbp - 0x10], ecx
mov dword [rbp - 0x44], r14d
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x38], ecx
cmp dword [r15 + 0x10], ecx
je 0x14003dde7
lea rcx, [rbp - 0x20]
call qword [sym.imp.USER32.dll_TrackMouseEvent]
lea rcx, [rbp - 0x48]
call qword [sym.imp.USER32.dll_TrackMouseEvent]
mov eax, dword [rbp - 0x50]
mov r14d, dword [rbp - 0x4c]
mov dword [r15 + 0x10], eax
movsx eax, r12w
shr r12, 0x10
mov dword [rbp - 0x28], eax
movsx eax, r12w
mov dword [rbp - 0x24], eax
cmp esi, 0xa0
jne 0x14003de2b
lea rdx, [rbp - 0x28]
mov rcx, r13
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x14003e196
mov rax, qword [rdi + 0x100]
mov dword [rax + 0x4010], r14d
movd xmm2, dword [rbp - 0x24]
movd xmm1, dword [rbp - 0x28]
cvtdq2ps xmm2, xmm2
cvtdq2ps xmm1, xmm1
jmp 0x14003e03b
test r14d, r14d
je 0x14003de61
mov r8d, esi
mov dl, dil
mov ecx, r14d
call fcn.14003cb80
cmp esi, 0x10
jne 0x14003deb3
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x14003de8e
mov r8d, 0xa0
mov dl, dil
mov ecx, 0x210
call fcn.14003cb80
mov esi, 0xa1
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x14003e196
mov ecx, 0x214
jmp 0x14003df55
cmp esi, 0x11
jne 0x14003df01
mov esi, 0xa2
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x14003dedf
mov r8d, esi
mov dl, dil
mov ecx, 0x20f
call fcn.14003cb80
mov esi, 0xa3
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x14003e196
mov ecx, 0x213
jmp 0x14003df55
mov eax, 0x12
cmp esi, eax
jne 0x14003e196
mov esi, 0xa4
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x14003df35
mov r8d, esi
mov dl, dil
mov ecx, 0x211
call fcn.14003cb80
mov esi, 0xa5
mov ecx, esi
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
cmp al, dil
jne 0x14003e196
mov ecx, 0x215
mov r8d, esi
mov dl, dil
call fcn.14003cb80
jmp 0x14003e196
mov eax, 0x20b
cmp esi, eax
ja 0x14003dfd5
je 0x14003e082
mov eax, esi
sub eax, 0x205
je 0x14003e114
sub eax, 1
je 0x14003e082
sub eax, 1
je 0x14003e082
sub eax, 1
je 0x14003e114
sub eax, 1
je 0x14003e082
cmp eax, 1
jne 0x14003e196
shr r8, 0x10
xorps xmm1, xmm1
movsx eax, r8w
movd xmm2, eax
cvtdq2ps xmm2, xmm2
divss xmm2, dword [0x14005dfd0]
mov rcx, rdi
call fcn.14001812c
jmp 0x14003e196
mov eax, esi
sub eax, 0x20c
je 0x14003e114
sub eax, 1
je 0x14003e082
sub eax, 1
je 0x14003e05c
sub eax, 0xb
je 0x14003e048
sub eax, 0x89
je 0x14003e005
cmp eax, 1
jne 0x14003e196
cmp esi, 0x2a3
mov eax, r14d
mov ebx, 1
setne al
add eax, ebx
cmp dword [r15 + 0x10], eax
jne 0x14003e196
cmp qword [r15 + 8], r13
jne 0x14003e02c
mov qword [r15 + 8], r14
movss xmm1, dword [0x14005e034]
movaps xmm2, xmm1
mov dword [r15 + 0x10], r14d
mov rcx, rdi
call fcn.140017e3c
jmp 0x14003e196
cmp r8d, 7
jne 0x14003e196
mov byte [r15 + 0x31], 1
jmp 0x14003e196
shr r8, 0x10
xorps xmm2, xmm2
movsx eax, r8w
movd xmm1, eax
cvtdq2ps xmm1, xmm1
xorps xmm1, xmmword [0x14005e6b0]
divss xmm1, dword [0x14005dfd0]
jmp 0x14003dfc8
mov ebx, 1
call fcn.14003d9ec
mov edx, 0xfffffffd
mov dword [rbp - 0x4c], eax
lea ecx, [rsi - 0x204]
mov r12d, r14d
test edx, ecx
lea eax, [rsi - 0x20b]
lea ecx, [rsi - 0x207]
mov r14d, 2
cmove r12d, ebx
test edx, ecx
cmove r12d, r14d
test edx, eax
jne 0x14003e0d5
mov rax, qword [rbp + 0x40]
xor r12d, r12d
shr rax, 0x10
cmp ax, bx
setne r12b
add r12d, 3
cmp dword [r15 + 0x14], 0
jne 0x14003e0f0
call qword [sym.imp.USER32.dll_GetCapture]
test rax, rax
jne 0x14003e0f0
mov rcx, r13
call qword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [r15 + 0x14]
mov r8b, bl
mov ecx, dword [rbp - 0x4c]
bts eax, r12d
mov dword [r15 + 0x14], eax
mov edx, r12d
mov rax, qword [rdi + 0x100]
mov dword [rax + 0x4010], ecx
jmp 0x14003e18e
mov ebx, 1
call fcn.14003d9ec
cmp esi, 0x205
mov r12d, eax
sete r14b
cmp esi, 0x208
jne 0x14003e13b
mov r14d, 2
jmp 0x14003e159
cmp esi, 0x20c
jne 0x14003e159
mov rax, qword [rbp + 0x40]
xor r14d, r14d
shr rax, 0x10
cmp ax, bx
setne r14b
add r14d, 3
mov eax, dword [r15 + 0x14]
btr eax, r14d
mov dword [r15 + 0x14], eax
test eax, eax
jne 0x14003e17a
call qword [sym.imp.USER32.dll_GetCapture]
cmp rax, r13
jne 0x14003e17a
call qword [sym.imp.USER32.dll_ReleaseCapture]
mov rax, qword [rdi + 0x100]
xor r8d, r8d
mov edx, r14d
mov dword [rax + 0x4010], r12d
mov rcx, rdi
call fcn.140017f74
xor eax, eax
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret