Function at 0x1400d9800
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
mov rbp, rsp
sub rsp, 0x30
call fcn.1400b5500
mov rcx, qword [0x140317888]
lea rdx, [rbp - 0x10]
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp - 0x10], xmm0
mov r14, rax
call qword [sym.imp.USER32.dll_GetClientRect]
mov ecx, dword [rbp - 8]
sub ecx, dword [rbp - 0x10]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, ecx
mov ecx, dword [rbp - 4]
sub ecx, dword [rbp - 0xc]
cmp byte [reloc.WS2_32.dll_accept], 0
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, ecx
vmovss dword [r14 + 0xc], xmm0
vmovss dword [r14 + 8], xmm1
je 0x1400d9866
call fcn.1400da1c0
xor edi, edi
lea rcx, [rbp + 0x40]
mov qword [rbp + 0x40], rdi
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rbp + 0x40]
lea ecx, [rdi + 0x11]
sub rax, qword [0x140317890]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, rax
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, qword [0x140317898]
vdivss xmm1, xmm1, xmm0
vmovss dword [r14 + 0x10], xmm1
mov rax, qword [rbp + 0x40]
mov qword [0x140317890], rax
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
lea ecx, [rdi + 0x10]
and al, 1
mov byte [r14 + 0x134], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
lea ecx, [rdi + 0x12]
and al, 1
mov byte [r14 + 0x135], al
call qword [sym.imp.USER32.dll_GetKeyState]
shr eax, 0xf
and al, 1
mov byte [r14 + 0x137], dil
mov byte [r14 + 0x136], al
call fcn.1400b5500
mov rsi, rax
lea rbx, [rax + 0x118]
cmp byte [rax + 0x38f], dil
je 0x1400d9941
test dword [rax], 0x400
vcvttss2si ecx, dword [rbx]
vcvttss2si edx, dword [rax + 0x11c]
mov dword [rbp + 0x30], ecx
mov dword [rbp + 0x34], edx
jne 0x1400d993b
mov rcx, qword [0x140317888]
lea rdx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov edx, dword [rbp + 0x34]
mov ecx, dword [rbp + 0x30]
call qword [sym.imp.USER32.dll_SetCursorPos]
lea rcx, [rbp + 0x38]
mov dword [rbx], 0xff7fffff
mov dword [rbx + 4], 0xff7fffff
mov dword [rsi + 0x130], edi
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x1400d9a19
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdi, rax
test rax, rax
je 0x1400d99ef
mov rdx, qword [0x140317888]
mov rcx, rax
call qword [sym.imp.USER32.dll_IsChild]
mov rcx, qword [0x140317888]
test eax, eax
cmovne rdi, rcx
test dword [rsi], 0x400
je 0x1400d99ba
mov rcx, rdi
call fcn.1400b49b0
test rax, rax
je 0x1400d99ef
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [rbp + 0x38]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [rbp + 0x3c]
jmp 0x1400d99e6
cmp rdi, rcx
jne 0x1400d99ef
mov rax, qword [rbp + 0x38]
lea rdx, [rbp + 0x30]
mov rcx, rdi
mov qword [rbp + 0x30], rax
call qword [sym.imp.USER32.dll_ScreenToClient]
vxorps xmm0, xmm0, xmm0
vcvtsi2ss xmm0, xmm0, dword [rbp + 0x30]
vxorps xmm1, xmm1, xmm1
vcvtsi2ss xmm1, xmm1, dword [rbp + 0x34]
vmovss dword [rbx + 4], xmm1
vmovss dword [rbx], xmm0
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.USER32.dll_WindowFromPoint]
test rax, rax
je 0x1400d9a19
mov rcx, rax
call fcn.1400b49b0
test rax, rax
je 0x1400d9a19
test byte [rax + 4], 0x80
jne 0x1400d9a19
mov eax, dword [rax]
mov dword [rsi + 0x130], eax
cmp byte [r14 + 0xc7], 0
je 0x1400d9a2a
mov eax, 0xffffffff
jmp 0x1400d9a2f
call fcn.1400b55d0
cmp dword [reloc.OLEAUT32.dll_VariantCopy], eax
je 0x1400d9a42
mov dword [reloc.OLEAUT32.dll_VariantCopy], eax
call fcn.1400da3e0
call fcn.1400d9e20
add rsp, 0x30
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret