Function at 0x1400795d0
Capabilities:
Log keystrokes via polling

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0xb8
vmovaps xmmword [rsp + 0xa0], xmm10
vmovaps xmmword [rsp + 0x90], xmm9
vmovaps xmmword [rsp + 0x80], xmm8
vmovaps xmmword [rsp + 0x70], xmm7
vmovaps xmmword [rsp + 0x60], xmm6
mov rax, qword [0x14021fc40]
xor rax, rsp
mov qword [rsp + 0x58], rax
call fcn.140048550
mov rsi, rax
call fcn.140040a90
test rax, rax
je 0x140079632
call fcn.140048550
mov rbx, qword [rax + 0x90]
jmp 0x140079634
xor ebx, ebx
vxorps xmm0, xmm0, xmm0
vmovaps xmmword [rsp + 0x30], xmm0
mov rcx, qword [rbx]
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetClientRect]
vmovq xmm0, qword [rsp + 0x38]
vmovq xmm1, qword [rsp + 0x30]
vpsubd xmm0, xmm0, xmm1
vcvtdq2ps xmm0, xmm0
vmovlps qword [rsi + 8], xmm0
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x28]
mov rcx, rax
sub rcx, qword [rbx + 0x18]
vcvtsi2ss xmm0, xmm2, rcx
vcvtsi2ss xmm1, xmm2, qword [rbx + 0x20]
vdivss xmm0, xmm0, xmm1
vmovss dword [rsi + 0x10], xmm0
mov qword [rbx + 0x18], rax
call fcn.140040a90
test rax, rax
je 0x1400796b5
call fcn.140048550
mov r14, qword [rax + 0x90]
jmp 0x1400796b8
xor r14d, r14d
call fcn.140048550
mov rdi, rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
cmp rax, qword [r14]
je 0x140079848
mov ecx, 0x210
call fcn.140059f30
test al, al
je 0x140079726
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079726
call fcn.140048550
mov rdi, rax
mov rcx, rax
mov edx, 0x210
xor r8d, r8d
call fcn.14003e8d0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.14003e900
mov ecx, 0x214
call fcn.140059f30
test al, al
je 0x14007977d
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14007977d
call fcn.140048550
mov rdi, rax
mov rcx, rax
mov edx, 0x214
xor r8d, r8d
call fcn.14003e8d0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.14003e900
mov ecx, 0x212
call fcn.140059f30
test al, al
je 0x1400797d4
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x1400797d4
call fcn.140048550
mov rdi, rax
mov rcx, rax
mov edx, 0x212
xor r8d, r8d
call fcn.14003e8d0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.14003e900
mov ecx, 0x216
call fcn.140059f30
test al, al
je 0x14007982b
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x14007982b
call fcn.140048550
mov rdi, rax
mov rcx, rax
mov edx, 0x216
xor r8d, r8d
call fcn.14003e8d0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rdi
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.14003e900
mov eax, 0xffffffff
cmp byte [rsi + 0x70], 0
je 0x1400798dd
cmp dword [rbx + 0x28], eax
jne 0x1400798eb
jmp 0x140079972
cmp byte [rdi + 0xd3], 0
je 0x140079890
vmovsd xmm0, qword [rdi + 0xe00]
vcvttps2dq xmm0, xmm0
vmovlps qword [rsp + 0x40], xmm0
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140079883
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rdi + 0xd3], 0
jne 0x1400796cf
cmp dword [r14 + 0x10], 0
jne 0x1400796cf
lea rcx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x1400796cf
mov rcx, qword [r14]
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x1400796cf
vcvtsi2ss xmm2, xmm2, dword [rsp + 0x44]
vcvtsi2ss xmm1, xmm3, dword [rsp + 0x40]
mov rcx, rdi
call fcn.14003e930
jmp 0x1400796cf
call fcn.14005a4e0
cmp dword [rbx + 0x28], eax
je 0x140079972
mov dword [rbx + 0x28], eax
call fcn.140048550
test byte [rax], 0x20
jne 0x140079972
mov rsi, rax
call fcn.14005a4e0
xor ecx, ecx
cmp eax, 0xffffffff
je 0x14007996c
cmp byte [rsi + 0x70], 0
jne 0x14007996c
dec eax
cmp eax, 7
ja case.default.0x140079922
lea rcx, [0x140079db8]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x140079961
mov edx, 0x7f00
jmp 0x140079961
mov edx, 0x7f86
jmp 0x140079961
mov edx, 0x7f85
jmp 0x140079961
mov edx, 0x7f84
jmp 0x140079961
mov edx, 0x7f83
jmp 0x140079961
mov edx, 0x7f82
jmp 0x140079961
mov edx, 0x7f89
jmp 0x140079961
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
call fcn.140048550
mov rsi, rax
call fcn.140040a90
test rax, rax
je 0x140079998
call fcn.140048550
mov rdi, qword [rax + 0x90]
cmp byte [rdi + 0x2d], 0
jne 0x1400799a0
jmp 0x1400799da
xor edi, edi
cmp byte [rdi + 0x2d], 0
je 0x1400799da
vxorps xmm0, xmm0, xmm0
vmovaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0
mov r9, qword [rdi + 0x38]
test r9, r9
je 0x1400799d1
lea r8, [rsp + 0x40]
xor ecx, ecx
mov edx, 1
call r9
test eax, eax
sete al
jmp 0x1400799d3
xor eax, eax
mov byte [rdi + 0x2c], al
mov byte [rdi + 0x2d], 0
and byte [rsi + 4], 0xfe
cmp byte [rdi + 0x2c], 0
je 0x140079d77
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x140079d77
lea rdx, [rsp + 0x40]
xor ecx, ecx
call rax
test eax, eax
jne 0x140079d77
or byte [rsi + 4], 1
movzx r8d, word [rsp + 0x44]
and r8d, 0x10
shr r8d, 4
mov rcx, rsi
mov edx, 0x269
call fcn.14003e8d0
movzx r8d, word [rsp + 0x44]
and r8d, 0x20
shr r8d, 5
mov rcx, rsi
mov edx, 0x26a
call fcn.14003e8d0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xe
and r8d, 1
mov rcx, rsi
mov edx, 0x26b
call fcn.14003e8d0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xd
and r8d, 1
mov rcx, rsi
mov edx, 0x26c
call fcn.14003e8d0
movzx r8d, word [rsp + 0x44]
shr r8d, 0xf
mov rcx, rsi
mov edx, 0x26d
call fcn.14003e8d0
mov r8d, dword [rsp + 0x44]
shr r8d, 0xc
and r8d, 1
mov rcx, rsi
mov edx, 0x26e
call fcn.14003e8d0
movzx r8d, word [rsp + 0x44]
and r8d, 4
shr r8d, 2
mov rcx, rsi
mov edx, 0x26f
call fcn.14003e8d0
movzx r8d, word [rsp + 0x44]
and r8d, 8
shr r8d, 3
mov rcx, rsi
mov edx, 0x270
call fcn.14003e8d0
movzx r8d, byte [rsp + 0x44]
and r8b, 1
mov rcx, rsi
mov edx, 0x271
call fcn.14003e8d0
movzx r8d, word [rsp + 0x44]
and r8d, 2
shr r8d, 1
mov rcx, rsi
mov edx, 0x272
call fcn.14003e8d0
movzx r8d, byte [rsp + 0x45]
and r8d, 1
mov rcx, rsi
mov edx, 0x273
call fcn.14003e8d0
mov r8d, dword [rsp + 0x44]
shr r8d, 9
and r8d, 1
mov rcx, rsi
mov edx, 0x274
call fcn.14003e8d0
movzx eax, byte [rsp + 0x46]
add eax, 0xffffffe2
vcvtsi2ss xmm0, xmm2, eax
vmovss xmm9, dword [0x140130a20]
vmulss xmm0, xmm9, xmm0
vmovss xmm6, dword [0x140120e00]
vminss xmm1, xmm0, xmm6
vxorps xmm7, xmm7, xmm7
vmaxss xmm3, xmm1, xmm7
vmovss xmm8, dword [0x140125f50]
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x275
call fcn.14003e570
movzx eax, byte [rsp + 0x47]
add eax, 0xffffffe2
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x276
call fcn.14003e570
movzx r8d, word [rsp + 0x44]
and r8d, 0x40
shr r8d, 6
mov rcx, rsi
mov edx, 0x277
call fcn.14003e8d0
movzx r8d, byte [rsp + 0x44]
shr r8b, 7
mov rcx, rsi
mov edx, 0x278
call fcn.14003e8d0
movsx eax, word [rsp + 0x48]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmovss xmm9, dword [0x140130a24]
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x279
call fcn.14003e570
movsx eax, word [rsp + 0x48]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmovss xmm10, dword [0x140130a28]
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27a
call fcn.14003e570
movsx eax, word [rsp + 0x4a]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27b
call fcn.14003e570
movsx eax, word [rsp + 0x4a]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27c
call fcn.14003e570
movsx eax, word [rsp + 0x4c]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27d
call fcn.14003e570
movsx eax, word [rsp + 0x4c]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27e
call fcn.14003e570
movsx eax, word [rsp + 0x4e]
add eax, 0xffffe157
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm10, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x27f
call fcn.14003e570
movsx eax, word [rsp + 0x4e]
add eax, 0x1ea9
vcvtsi2ss xmm0, xmm2, eax
vmulss xmm0, xmm9, xmm0
vminss xmm1, xmm0, xmm6
vmaxss xmm3, xmm1, xmm7
vucomiss xmm0, xmm8
seta r8b
mov rcx, rsi
mov edx, 0x280
call fcn.14003e570
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.14011bef0
vmovaps xmm6, xmmword [rsp + 0x60]
vmovaps xmm7, xmmword [rsp + 0x70]
vmovaps xmm8, xmmword [rsp + 0x80]
vmovaps xmm9, xmmword [rsp + 0x90]
vmovaps xmm10, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rdi
pop rsi
pop r14
ret