Function at 0x1400b6780
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x3f]
sub rsp, 0x98
mov rax, qword [0x1400f1180]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rsi, r8
mov rbx, r9
mov r8, qword [rcx + 0x3a0]
mov rdi, rcx
test r8, r8
je case.0x1400b6cd6.515
cmp edx, 0x200
ja 0x1400b6ca9
je 0x1400b6b80
cmp edx, 0x24
ja 0x1400b6996
je 0x1400b6981
add edx, 0xfffffffe
cmp edx, 0x1e
ja case.0x1400b6cd6.515
mov eax, edx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0xb6f28]
mov ecx, dword [rdx + rax*4 + 0xb6f0c]
add rcx, rdx
jmp rcx
cmp qword [0x1400f7960], rdi
jne 0x1400b681e
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ChangeDisplaySettingsW]
xor edx, edx
mov qword [0x1400f7960], rdx
mov rax, qword [rdi]
mov dl, 1
mov rcx, rdi
call qword [rax + 0x48]
mov rax, qword [rdi + 0x3a0]
lea rcx, [rbp - 0x19]
mov qword [rbp - 0x11], rax
mov dword [rbp - 0x19], 0x18
mov dword [rbp - 0x15], 0x80000000
mov dword [rbp - 9], 0xffffffff
call qword [sym.imp.USER32.dll_TrackMouseEvent]
call qword [sym.imp.USER32.dll_ReleaseCapture]
jmp case.0x1400b6cd6.515
cmp bx, 1
jne case.0x1400b6cd6.515
cmp byte [rdi + 0x3b0], 0
je 0x1400b6886
mov rdx, qword [rdi + 0x3b8]
mov rcx, rdx
call qword [sym.imp.USER32.dll_SetCursor]
jmp case.0x1400b6cd6.515
xor edx, edx
mov ecx, edx
call qword [sym.imp.USER32.dll_SetCursor]
jmp case.0x1400b6cd6.515
xor edx, edx
mov rcx, rdi
mov dword [rbp - 0x39], edx
lea rdx, [rbp - 0x39]
call fcn.1400b1400
jmp case.0x1400b6cd6.515
cmp rsi, 1
je case.0x1400b6cd6.515
cmp byte [rdi + 0x3d4], 0
jne case.0x1400b6cd6.515
mov rax, qword [rdi]
lea rdx, [rbp + 0x17]
mov rcx, rdi
call qword [rax + 0x20]
mov ecx, dword [rax]
cmp dword [rdi + 0x3cc], ecx
jne 0x1400b68e8
mov eax, dword [rax + 4]
cmp dword [rdi + 0x3d0], eax
jne 0x1400b68e8
xor al, al
jmp 0x1400b68ea
mov al, 1
test al, al
je case.0x1400b6cd6.515
mov rax, qword [rdi]
lea rdx, [rbp + 0x17]
mov rcx, rdi
call qword [rax + 0x20]
lea rdx, [rbp - 0x39]
mov rcx, qword [rax]
mov qword [rdi + 0x3cc], rcx
mov dword [rbp - 0x35], ecx
shr rcx, 0x20
mov dword [rbp - 0x31], ecx
mov rcx, rdi
mov dword [rbp - 0x39], 1
call fcn.1400b1400
movzx edx, byte [rdi + 0x3da]
mov rcx, rdi
call fcn.1400b66f0
jmp case.0x1400b6cd6.515
movzx edx, byte [rdi + 0x3da]
mov rcx, rdi
call fcn.1400b66f0
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x39], 3
mov rcx, rdi
call fcn.1400b1400
jmp case.0x1400b6cd6.515
xor ecx, ecx
call qword [sym.imp.USER32.dll_ClipCursor]
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x39], 2
mov rcx, rdi
call fcn.1400b1400
jmp case.0x1400b6cd6.515
mov dword [r9 + 0x20], 0xc350
mov dword [r9 + 0x24], 0xc350
jmp case.0x1400b6cd6.515
sub edx, 0x100
je 0x1400b6aab
sub edx, 1
je 0x1400b69be
sub edx, 1
je 0x1400b69ca
sub edx, 2
je 0x1400b6aab
cmp edx, 1
jne case.0x1400b6cd6.515
mov dword [rbp - 0x39], 6
jmp 0x1400b6acd
cmp byte [rcx + 0x3c8], 0
jne 0x1400b69de
bt rbx, 0x1e
jb case.0x1400b6cd6.515
lea eax, [rsi - 0xd800]
mov dword [rbp + 0x17], esi
mov r11d, 0x3ff
cmp eax, r11d
ja 0x1400b69fe
mov word [rcx + 0x3d6], si
jmp case.0x1400b6cd6.515
lea eax, [rsi - 0xdc00]
cmp eax, r11d
ja 0x1400b6a90
movzx eax, word [rcx + 0x3d6]
lea r9, [rbp + 0x17]
mov word [rbp - 0x21], ax
lea rcx, [rbp - 0x21]
mov word [rbp - 0x1f], si
xor edx, edx
mov ebx, 0x2800
nop dword [rax + rax]
movzx r8d, word [rcx]
add rcx, 2
lea eax, [rbx + r8]
cmp ax, r11w
ja 0x1400b6a76
lea rax, [rbp - 0x1d]
cmp rcx, rax
jae 0x1400b6a6f
movzx r10d, word [rcx]
add rcx, 2
lea eax, [r10 - 0xdc00]
cmp eax, r11d
ja 0x1400b6a73
shl r8d, 0xa
add r8d, 0xfca02400
add r8d, r10d
jmp 0x1400b6a76
lea rcx, [rbp - 0x1d]
mov r8d, edx
mov dword [r9], r8d
lea rax, [rbp - 0x1d]
add r9, 4
cmp rcx, rax
jb 0x1400b6a30
mov esi, dword [rbp + 0x17]
mov word [rdi + 0x3d6], dx
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x39], 4
mov rcx, rdi
mov dword [rbp - 0x35], esi
call fcn.1400b1400
jmp case.0x1400b6cd6.515
cmp byte [rcx + 0x3c8], 0
jne 0x1400b6ac6
mov rax, rbx
shr rax, 0x10
bt ax, 0xe
jb case.0x1400b6cd6.515
mov dword [rbp - 0x39], 5
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
mov ecx, 0x11
setne byte [rbp - 0x2d]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
mov ecx, 0x10
setne byte [rbp - 0x2c]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
mov ecx, 0x5b
setne byte [rbp - 0x2b]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
test cx, cx
jne 0x1400b6b4f
mov ecx, 0x5c
call qword [sym.imp.USER32.dll_GetKeyState]
movsx rcx, ax
shr rcx, 0x10
mov byte [rbp - 0x2a], 0
test cx, cx
je 0x1400b6b53
mov byte [rbp - 0x2a], 1
mov rdx, rbx
mov rcx, rsi
call fcn.1400b7fb0
mov rdx, rbx
mov dword [rbp - 0x35], eax
mov rcx, rsi
call fcn.1400b7690
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x31], eax
mov rcx, rdi
call fcn.1400b1400
jmp case.0x1400b6cd6.515
mov qword [rsp + 0x90], r14
lea rdx, [rbp + 0x17]
movsx r14d, bx
mov rcx, r8
shr rbx, 0x10
movsx ebx, bx
call qword [sym.imp.USER32.dll_GetClientRect]
test sil, 0x73
jne 0x1400b6bbd
call qword [sym.imp.USER32.dll_GetCapture]
cmp rax, qword [rdi + 0x3a0]
jne 0x1400b6bd8
call qword [sym.imp.USER32.dll_ReleaseCapture]
jmp 0x1400b6bd8
mov rsi, qword [rdi + 0x3a0]
call qword [sym.imp.USER32.dll_GetCapture]
cmp rax, rsi
je 0x1400b6bd8
mov rcx, rsi
call qword [sym.imp.USER32.dll_SetCapture]
cmp r14d, dword [rbp + 0x17]
jl 0x1400b6c35
cmp r14d, dword [rbp + 0x1f]
jg 0x1400b6c35
cmp ebx, dword [rbp + 0x1b]
jl 0x1400b6c35
cmp ebx, dword [rbp + 0x23]
jg 0x1400b6c35
cmp byte [rdi + 0x3d8], 0
jne 0x1400b6c82
mov rax, qword [rdi + 0x3a0]
lea rcx, [rbp - 1]
mov qword [rbp + 7], rax
mov byte [rdi + 0x3d8], 1
mov dword [rbp - 1], 0x18
mov dword [rbp + 3], 2
mov dword [rbp + 0xf], 0xffffffff
call qword [sym.imp.USER32.dll_TrackMouseEvent]
mov dword [rbp - 0x19], 0xc
jmp 0x1400b6c76
cmp byte [rdi + 0x3d8], 0
je 0x1400b6c82
mov rax, qword [rdi + 0x3a0]
lea rcx, [rbp - 1]
mov qword [rbp + 7], rax
mov byte [rdi + 0x3d8], 0
mov dword [rbp - 1], 0x18
mov dword [rbp + 3], 0x80000000
mov dword [rbp + 0xf], 0xffffffff
call qword [sym.imp.USER32.dll_TrackMouseEvent]
mov dword [rbp - 0x19], 0xd
lea rdx, [rbp - 0x19]
mov rcx, rdi
call fcn.1400b1400
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x39], 0xb
mov rcx, rdi
mov dword [rbp - 0x35], r14d
mov dword [rbp - 0x31], ebx
call fcn.1400b1400
mov r14, qword [rsp + 0x90]
jmp case.0x1400b6cd6.515
add edx, 0xfffffdff
cmp edx, 0xa2
ja case.0x1400b6cd6.515
mov eax, edx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0xb6f84]
mov ecx, dword [rdx + rax*4 + 0xb6f48]
add rcx, rdx
jmp rcx
xor ecx, ecx
mov byte [rdi + 0x3d4], 1
call qword [sym.imp.USER32.dll_ClipCursor]
jmp case.0x1400b6cd6.515
mov rax, qword [rdi]
lea rdx, [rbp + 0x17]
mov rcx, rdi
mov byte [rdi + 0x3d4], 0
call qword [rax + 0x20]
mov ecx, dword [rax]
cmp dword [rdi + 0x3cc], ecx
jne 0x1400b6d19
mov eax, dword [rax + 4]
cmp dword [rdi + 0x3d0], eax
jne 0x1400b6d19
xor al, al
jmp 0x1400b6d1b
mov al, 1
test al, al
je 0x1400b6926
jmp 0x1400b68f2
movsx eax, bx
lea rdx, [rbp + 0x17]
mov dword [rbp + 0x17], eax
mov rcx, r8
shr rbx, 0x10
movsx eax, bx
mov dword [rbp + 0x1b], eax
call qword [sym.imp.USER32.dll_ScreenToClient]
shr rsi, 0x10
mov eax, 0x88888889
movsx ebx, si
mov rcx, rdi
imul ebx
mov dword [rbp - 0x39], 7
add edx, ebx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, dword [rbp + 0x17]
mov dword [rbp - 0x35], edx
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x31], eax
mov eax, dword [rbp + 0x1b]
mov dword [rbp - 0x2d], eax
call fcn.1400b1400
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mov qword [rbp - 0x39], 8
divss xmm0, dword [0x1400ce5b8]
mov eax, dword [rbp + 0x17]
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x2d], eax
mov rcx, rdi
mov eax, dword [rbp + 0x1b]
mov dword [rbp - 0x29], eax
movss dword [rbp - 0x31], xmm0
call fcn.1400b1400
jmp case.0x1400b6cd6.515
movsx eax, bx
lea rdx, [rbp + 0x17]
mov dword [rbp + 0x17], eax
mov rcx, r8
shr rbx, 0x10
movsx eax, bx
mov dword [rbp + 0x1b], eax
call qword [sym.imp.USER32.dll_ScreenToClient]
shr rsi, 0x10
movsx eax, si
mov dword [rbp - 0x39], 8
mov dword [rbp - 0x35], 1
movd xmm0, eax
cvtdq2ps xmm0, xmm0
xorps xmm0, xmmword [0x1400dc600]
jmp 0x1400b6d90
mov qword [rbp - 0x39], 9
movsx eax, bx
lea rdx, [rbp - 0x39]
shr rbx, 0x10
mov rcx, rdi
mov dword [rbp - 0x31], eax
movsx eax, bx
mov dword [rbp - 0x2d], eax
call fcn.1400b1400
jmp case.0x1400b6cd6.515
mov qword [rbp - 0x39], 0xa
jmp 0x1400b6e04
mov dword [rbp - 0x39], 9
mov dword [rbp - 0x35], 1
jmp 0x1400b6e04
mov dword [rbp - 0x39], 0xa
mov dword [rbp - 0x35], 1
jmp 0x1400b6e04
mov dword [rbp - 0x39], 9
mov dword [rbp - 0x35], 2
jmp 0x1400b6e04
mov dword [rbp - 0x39], 0xa
mov dword [rbp - 0x35], 2
jmp 0x1400b6e04
xor edx, edx
shr rsi, 0x10
cmp si, 1
mov dword [rbp - 0x39], 9
setne dl
add edx, 3
mov dword [rbp - 0x35], edx
jmp 0x1400b6e04
xor edx, edx
shr rsi, 0x10
cmp si, 1
mov dword [rbp - 0x39], 0xa
setne dl
add edx, 3
mov dword [rbp - 0x35], edx
jmp 0x1400b6e04
cmp byte [rdi + 0x3d8], 0
je case.0x1400b6cd6.515
lea rdx, [rbp - 0x19]
mov byte [rdi + 0x3d8], 0
mov rcx, rdi
mov dword [rbp - 0x19], 0xd
call fcn.1400b1400
jmp case.0x1400b6cd6.515
lea rax, [rsi - 0x8000]
test rax, 0xfffffffffffffffb
jne case.0x1400b6cd6.515
test rbx, rbx
je case.0x1400b6cd6.515
cmp dword [r9 + 4], 5
jne case.0x1400b6cd6.515
call fcn.1400bc5e0
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400bed10
add rsp, 0x98
pop rdi
pop rsi
pop rbx
pop rbp
ret