Function at 0x1400b7338
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x30
call fcn.140099208
mov rcx, qword [0x140346098]
lea rdx, [rbp - 0x10]
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp - 0x10], xmm0
mov r14, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [rbp - 8]
sub ecx, dword [rbp - 0x10]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, ecx
mov ecx, dword [rbp - 4]
sub ecx, dword [rbp - 0xc]
cmp byte [reloc.WS2_32.dll_accept], 0
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, ecx
vmovss dword [r14 + 0xc], xmm0
vmovss dword [r14 + 8], xmm1
je 0x1400b73c7
call fcn.140099610
xor edx, edx
lea rcx, [rax + 0xc0]
call fcn.1400b8550
xor r9d, r9d
lea r8, [0x1400b7c18]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDisplayMonitors]
mov byte [reloc.WS2_32.dll_accept], 0
and qword [rbp + 0x40], 0
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbp + 0x40]
mov ecx, reloc.WS2_32.dll_recvfrom
sub rax, qword [0x1403460a0]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, rax
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, qword [0x1403460a8]
vdivss xmm1, xmm1, xmm0
vmovss dword [r14 + 0x10], xmm1
mov rax, qword [rbp + 0x40]
mov qword [0x1403460a0], rax
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov bl, 1
and al, bl
mov ecx, reloc.WS2_32.dll_recv
mov byte [r14 + 0x134], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
mov ecx, reloc.WS2_32.dll_select
and al, bl
mov byte [r14 + 0x135], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, bl
mov byte [r14 + 0x137], 0
mov byte [r14 + 0x136], al
call fcn.140099208
mov rsi, rax
cmp byte [rax + 0x38f], 0
lea rbx, [rax + 0x118]
je 0x1400b74aa
test dword [rax], 0x400
vcvttss2si ecx, dword [rbx]
vcvttss2si edx, dword [rax + 0x11c]
mov dword [rbp + 0x30], ecx
mov dword [rbp + 0x34], edx
jne 0x1400b74a4
mov rcx, qword [0x140346098]
lea rdx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [rbp + 0x34]
mov ecx, dword [rbp + 0x30]
call qword [sym.imp.USER32.dll_SetCursorPos]
and dword [rsi + 0x130], 0
lea rcx, [rbp + 0x38]
mov eax, 0xff7fffff
mov dword [rbx], eax
mov dword [rbx + 4], eax
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x1400b7580
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
test rax, rax
je 0x1400b7556
mov rdx, qword [0x140346098]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsChild]
mov rcx, qword [0x140346098]
test eax, eax
cmovne rdi, rcx
test dword [rsi], 0x400
je 0x1400b7521
mov rcx, rdi
call fcn.14009860c
test rax, rax
je 0x1400b7556
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [rbp + 0x38]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [rbp + 0x3c]
jmp 0x1400b754d
cmp rdi, rcx
jne 0x1400b7556
mov rax, qword [rbp + 0x38]
lea rdx, [rbp + 0x30]
mov rcx, rdi
mov qword [rbp + 0x30], rax
call qword [sym.imp.USER32.dll_ScreenToClient]
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [rbp + 0x30]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [rbp + 0x34]
vmovss dword [rbx + 4], xmm1
vmovss dword [rbx], xmm0
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.USER32.dll_WindowFromPoint]
test rax, rax
je 0x1400b7580
mov rcx, rax
call fcn.14009860c
test rax, rax
je 0x1400b7580
test byte [rax + 4], 0x80
jne 0x1400b7580
mov eax, dword [rax]
mov dword [rsi + 0x130], eax
cmp byte [r14 + 0xc7], 0
je 0x1400b758f
or eax, 0xffffffff
jmp 0x1400b7594
call fcn.1400992d0
cmp dword [reloc.OLEAUT32.dll_VariantCopy], eax
je 0x1400b75a7
mov dword [reloc.OLEAUT32.dll_VariantCopy], eax
call fcn.1400b7d28
call fcn.1400b793c
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret