Function at 0x140079b20
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
movaps xmmword [rsp + 0xc0], xmm11
movaps xmmword [rsp + 0xb0], xmm10
movaps xmmword [rsp + 0xa0], xmm9
movaps xmmword [rsp + 0x90], xmm8
movaps xmmword [rsp + 0x80], xmm7
movaps xmmword [rsp + 0x70], xmm6
mov rax, qword [0x1403295b8]
xor rax, rsp
mov qword [rsp + 0x68], rax
call fcn.1400896e0
mov r14, rax
call fcn.14007fae0
test rax, rax
je 0x140079b8f
call fcn.1400896e0
mov rbx, qword [rax + 0x90]
jmp 0x140079b91
xor ebx, ebx
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
mov rcx, qword [rbx]
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetClientRect]
movq xmm0, qword [rsp + 0x38]
movq xmm1, qword [rsp + 0x30]
psubd xmm0, xmm1
cvtdq2ps xmm0, xmm0
movlps qword [r14 + 8], xmm0
cmp byte [rbx + 0x30], 0
je 0x140079bca
call fcn.14007a430
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x28]
mov rcx, rax
sub rcx, qword [rbx + 0x18]
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
xorps xmm1, xmm1
cvtsi2ss xmm1, qword [rbx + 0x20]
divss xmm0, xmm1
movss dword [r14 + 0x10], xmm0
mov qword [rbx + 0x18], rax
call fcn.14007fae0
test rax, rax
je 0x140079c21
call fcn.1400896e0
mov rbp, qword [rax + 0x90]
jmp 0x140079c23
xor ebp, ebp
call fcn.1400896e0
mov rdi, rax
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_GetCursorPos]
mov r15d, eax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
test rax, rax
je 0x140079d15
mov rsi, rax
mov rdx, qword [rbp]
cmp rax, rdx
je 0x140079c72
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsChild]
test eax, eax
jne 0x140079c72
mov rcx, rsi
call fcn.1400a4f10
test rax, rax
je 0x140079d15
cmp byte [rdi + 0xcd], 0
je 0x140079cc7
movsd xmm0, qword [rdi + 0xe40]
cvttps2dq xmm0, xmm0
movq qword [rsp + 0x48], xmm0
test byte [rdi + 1], 4
jne 0x140079cab
lea rdx, [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [rsp + 0x48]
mov edx, dword [rsp + 0x4c]
jmp 0x140079cb8
movd ecx, xmm0
pshufd xmm0, xmm0, 0x55
movd edx, xmm0
call qword [sym.imp.USER32.dll_SetCursorPos]
cmp byte [rdi + 0xcd], 0
jne 0x140079d15
cmp dword [rbp + 0x10], 0
jne 0x140079d15
test r15d, r15d
je 0x140079d15
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x48], rax
test byte [rdi + 1], 4
jne 0x140079cfb
mov rcx, qword [rbp]
lea rdx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_ScreenToClient]
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x4c]
jmp 0x140079d02
mov rcx, rax
shr rcx, 0x20
cvtsi2ss xmm2, ecx
xorps xmm1, xmm1
cvtsi2ss xmm1, eax
mov rcx, rdi
call fcn.14007d310
xor esi, esi
test r15d, r15d
je 0x140079d3b
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.USER32.dll_WindowFromPoint]
test rax, rax
je 0x140079d3b
mov rcx, rax
call fcn.1400a4f10
test rax, rax
je 0x140079d3b
mov esi, dword [rax]
mov rcx, rdi
mov edx, esi
call fcn.14007d620
mov ecx, 0x210
call fcn.1400a0380
test al, al
je 0x140079d9c
mov ecx, 0xa0
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079d9c
call fcn.1400896e0
mov rsi, rax
mov rcx, rax
mov edx, 0x210
xor r8d, r8d
call fcn.14007d2b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x210
mov r8d, 0xa0
mov r9d, 0xffffffff
call fcn.14007d2e0
mov ecx, 0x214
call fcn.1400a0380
test al, al
je 0x140079df3
mov ecx, 0xa1
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079df3
call fcn.1400896e0
mov rsi, rax
mov rcx, rax
mov edx, 0x214
xor r8d, r8d
call fcn.14007d2b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x214
mov r8d, 0xa1
mov r9d, 0xffffffff
call fcn.14007d2e0
mov ecx, 0x212
call fcn.1400a0380
test al, al
je 0x140079e4a
mov ecx, 0x5b
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079e4a
call fcn.1400896e0
mov rsi, rax
mov rcx, rax
mov edx, 0x212
xor r8d, r8d
call fcn.14007d2b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x212
mov r8d, 0x5b
mov r9d, 0xffffffff
call fcn.14007d2e0
mov ecx, 0x216
call fcn.1400a0380
test al, al
je 0x140079ea1
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
js 0x140079ea1
call fcn.1400896e0
mov rsi, rax
mov rcx, rax
mov edx, 0x216
xor r8d, r8d
call fcn.14007d2b0
mov dword [rsp + 0x20], 0xffffffff
mov rcx, rsi
mov edx, 0x216
mov r8d, 0x5c
mov r9d, 0xffffffff
call fcn.14007d2e0
mov eax, 0xffffffff
cmp byte [r14 + 0x58], 0
je 0x140079eb7
cmp dword [rbx + 0x28], eax
jne 0x140079ec5
jmp 0x140079f4c
call fcn.1400a0cc0
cmp dword [rbx + 0x28], eax
je 0x140079f4c
mov dword [rbx + 0x28], eax
call fcn.1400896e0
test byte [rax], 0x20
jne 0x140079f4c
mov rsi, rax
call fcn.1400a0cc0
xor ecx, ecx
cmp eax, 0xffffffff
je 0x140079f46
cmp byte [rsi + 0x58], 0
jne 0x140079f46
dec eax
cmp eax, 7
ja case.default.0x140079efc
lea rcx, [0x14007a408]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x140079f3b
mov edx, 0x7f00
jmp 0x140079f3b
mov edx, 0x7f86
jmp 0x140079f3b
mov edx, 0x7f85
jmp 0x140079f3b
mov edx, 0x7f84
jmp 0x140079f3b
mov edx, 0x7f83
jmp 0x140079f3b
mov edx, 0x7f82
jmp 0x140079f3b
mov edx, 0x7f89
jmp 0x140079f3b
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
call fcn.1400896e0
mov rsi, rax
call fcn.14007fae0
test rax, rax
je 0x140079f72
call fcn.1400896e0
mov rdi, qword [rax + 0x90]
cmp byte [rdi + 0x32], 0
jne 0x140079f7a
jmp 0x140079fb1
xor edi, edi
cmp byte [rdi + 0x32], 0
je 0x140079fb1
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0
mov rbp, qword [rdi + 0x40]
test rbp, rbp
je 0x140079fa8
lea r8, [rsp + 0x50]
xor ecx, ecx
mov edx, 1
call rbp
test eax, eax
sete al
jmp 0x140079faa
xor eax, eax
mov byte [rdi + 0x31], al
mov byte [rdi + 0x32], 0
and byte [rsi + 4], 0xfe
cmp byte [rdi + 0x31], 0
je 0x14007a3b7
mov rax, qword [rdi + 0x48]
test rax, rax
je 0x14007a3b7
lea rdx, [rsp + 0x50]
xor ecx, ecx
call rax
test eax, eax
jne 0x14007a3b7
or byte [rsi + 4], 1
movzx r8d, word [rsp + 0x54]
and r8d, 0x10
shr r8d, 4
mov rcx, rsi
mov edx, 0x277
call fcn.14007d2b0
movzx r8d, word [rsp + 0x54]
and r8d, 0x20
shr r8d, 5
mov rcx, rsi
mov edx, 0x278
call fcn.14007d2b0
mov r8d, dword [rsp + 0x54]
shr r8d, 0xe
and r8d, 1
mov rcx, rsi
mov edx, 0x279
call fcn.14007d2b0
mov r8d, dword [rsp + 0x54]
shr r8d, 0xd
and r8d, 1
mov rcx, rsi
mov edx, 0x27a
call fcn.14007d2b0
movzx r8d, word [rsp + 0x54]
shr r8d, 0xf
mov rcx, rsi
mov edx, 0x27b
call fcn.14007d2b0
mov r8d, dword [rsp + 0x54]
shr r8d, 0xc
and r8d, 1
mov rcx, rsi
mov edx, 0x27c
call fcn.14007d2b0
movzx r8d, word [rsp + 0x54]
and r8d, 4
shr r8d, 2
mov rcx, rsi
mov edx, 0x27d
call fcn.14007d2b0
movzx r8d, word [rsp + 0x54]
and r8d, 8
shr r8d, 3
mov rcx, rsi
mov edx, 0x27e
call fcn.14007d2b0
movzx r8d, byte [rsp + 0x54]
and r8b, 1
mov rcx, rsi
mov edx, 0x27f
call fcn.14007d2b0
movzx r8d, word [rsp + 0x54]
and r8d, 2
shr r8d, 1
mov rcx, rsi
mov edx, 0x280
call fcn.14007d2b0
movzx r8d, byte [rsp + 0x55]
and r8d, 1
mov rcx, rsi
mov edx, 0x281
call fcn.14007d2b0
mov r8d, dword [rsp + 0x54]
shr r8d, 9
and r8d, 1
mov rcx, rsi
mov edx, 0x282
call fcn.14007d2b0
movzx eax, byte [rsp + 0x56]
add eax, 0xffffffe2
cvtsi2ss xmm3, eax
movss xmm7, dword [0x14025f0b0]
divss xmm3, xmm7
movss xmm6, dword [0x14025ab88]
movaps xmm0, xmm6
minss xmm0, xmm3
xorps xmm8, xmm8
movss xmm11, dword [0x14025ac00]
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x283
call fcn.14007d040
movzx eax, byte [rsp + 0x57]
add eax, 0xffffffe2
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm7
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x284
call fcn.14007d040
movzx r8d, word [rsp + 0x54]
and r8d, 0x40
shr r8d, 6
mov rcx, rsi
mov edx, 0x285
call fcn.14007d2b0
movzx r8d, byte [rsp + 0x54]
shr r8d, 7
mov rcx, rsi
mov edx, 0x286
call fcn.14007d2b0
movsx eax, word [rsp + 0x58]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm9, dword [0x14025f0b4]
divss xmm3, xmm9
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x287
call fcn.14007d040
movsx eax, word [rsp + 0x58]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
movss xmm10, dword [0x14025f0b8]
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x288
call fcn.14007d040
movsx eax, word [rsp + 0x5a]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x289
call fcn.14007d040
movsx eax, word [rsp + 0x5a]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm9
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28a
call fcn.14007d040
movsx eax, word [rsp + 0x5c]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm9
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28b
call fcn.14007d040
movsx eax, word [rsp + 0x5c]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28c
call fcn.14007d040
movsx eax, word [rsp + 0x5e]
add eax, 0xffffe157
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm10
movaps xmm0, xmm6
minss xmm0, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm0
seta r8b
mov rcx, rsi
mov edx, 0x28d
call fcn.14007d040
movsx eax, word [rsp + 0x5e]
add eax, 0x1ea9
xorps xmm3, xmm3
cvtsi2ss xmm3, eax
divss xmm3, xmm9
minss xmm6, xmm3
ucomiss xmm3, xmm11
cmpltss xmm3, xmm8
andnps xmm3, xmm6
seta r8b
mov rcx, rsi
mov edx, 0x28e
call fcn.14007d040
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140141380
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x80]
movaps xmm8, xmmword [rsp + 0x90]
movaps xmm9, xmmword [rsp + 0xa0]
movaps xmm10, xmmword [rsp + 0xb0]
movaps xmm11, xmmword [rsp + 0xc0]
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret