Function at 0x1400011f0
Capabilities:
Connect socket
Initialize winsock library
Log keystrokes via polling
Receive data
Receive data on socket

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0xa70
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0xa60], rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor r14d, r14d
mov qword [rsp + 0x90], 1
mov edx, 0x7f00
mov qword [rsp + 0x60], r14
xor ecx, ecx
mov qword [rsp + 0x70], r14
mov rsi, rax
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x98], r14
call qword [sym.imp.USER32.dll_LoadCursorA]
lea rbp, str.myWindowClass
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x88], rax
xor ecx, ecx
lea rax, [0x140001070]
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0x68], rax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
lea ecx, [r14 + 1]
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
sub eax, 0x96
lea rcx, [rsp + 0x60]
cdq
sub eax, edx
sar eax, 1
mov edi, eax
call qword [sym.imp.USER32.dll_RegisterClassA]
mov qword [rsp + 0x58], r14
lea eax, [rbx - 0x10e]
mov qword [rsp + 0x50], rsi
lea r8, str.Enter_Server_IP
mov qword [rsp + 0x48], r14
cdq
mov qword [rsp + 0x40], r14
sub eax, edx
mov dword [rsp + 0x38], 0x96
mov r9d, 0x10cf0000
sar eax, 1
mov rdx, rbp
mov dword [rsp + 0x30], 0x10e
xor ecx, ecx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExA]
xor r9d, r9d
lea rcx, [rsp + 0xc0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x140001356
nop dword [rax]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0xc0]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
lea rcx, [rsp + 0xc0]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
jne 0x140001320
mov ecx, 0x202
lea rdx, [rsp + 0xf0]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x14000138b
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
lea rcx, str.Failed._Error_Code_:__d
call fcn.140001010
mov eax, 1
jmp 0x14000152b
xor r8d, r8d
mov ebp, 2
mov ecx, ebp
lea edx, [r8 + 1]
call qword [sym.imp.WS2_32.dll_socket]
mov qword [0x14005aae0], rax
cmp rax, 0xffffffffffffffff
jne 0x1400013c8
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
lea rcx, str.Could_not_create_socket_:__d
call fcn.140001010
lea eax, [rbp - 1]
jmp 0x14000152b
lea rcx, [0x14005c3b0]
call qword [sym.imp.WS2_32.dll_inet_addr]
mov ecx, 0x270f
mov word [rsp + 0xb0], bp
mov dword [rsp + 0xb4], eax
call qword [sym.imp.WS2_32.dll_htons]
mov rcx, qword [0x14005aae0]
lea rdx, [rsp + 0xb0]
mov r8d, reloc.WS2_32.dll_recv
mov word [rsp + 0xb2], ax
call qword [sym.imp.WS2_32.dll_connect]
test eax, eax
jns 0x14000142c
lea rcx, str.Connect_failed._Error
call fcn.1400095e0
mov eax, 1
jmp 0x14000152b
lea rdx, [0x14005c3b0]
lea rcx, str.Connected_to__s_n
call fcn.140001010
mov rcx, qword [0x14005aae0]
lea rdx, [rsp + 0x290]
xor r9d, r9d
mov r8d, 0x7d0
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
jle 0x140001505
nop word [rax + rax]
mov esi, eax
cmp rsi, 0x7d0
jae 0x140001559
mov byte [rsp + rsi + 0x290], r14b
mov rbx, r14
test eax, eax
je 0x1400014df
nop
movsx edi, byte [rsp + rbx + 0x290]
movzx ecx, di
call qword [sym.imp.USER32.dll_VkKeyScanW]
xor r9d, r9d
xor r8d, r8d
movzx ecx, ax
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
movzx ecx, di
call qword [sym.imp.USER32.dll_VkKeyScanW]
xor r9d, r9d
mov r8d, ebp
movzx ecx, ax
xor edx, edx
call qword [sym.imp.USER32.dll_keybd_event]
inc rbx
cmp rbx, rsi
jl 0x140001490
mov rcx, qword [0x14005aae0]
lea rdx, [rsp + 0x290]
xor r9d, r9d
mov r8d, 0x7d0
call qword [sym.imp.WS2_32.dll_recv]
test eax, eax
jg 0x140001470
cmp eax, 0xffffffff
jne 0x140001516
lea rcx, str.recv_failed
call fcn.140009cf0
mov rcx, qword [0x14005aae0]
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
mov rcx, qword [rsp + 0xa60]
xor rcx, rsp
call fcn.140001570
lea r11, [rsp + 0xa70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
call fcn.1400016b0
int3