Function at 0x1400b24e0
Capabilities:
Log keystrokes via polling

Disassembly:
push rsi
push rdi
sub rsp, 0x48
mov rax, qword [0x140498128]
xor rax, rsp
mov qword [rsp + 0x40], rax
call fcn.14007a900
mov rdi, rax
call fcn.1400647d0
mov rsi, rax
mov rcx, qword [0x1406f9558]
lea rdx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x30]
cmp eax, 0x63
jg 0x1400b252a
mov dword [rsp + 0x30], 0
xor eax, eax
mov ecx, dword [rsp + 0x34]
cmp ecx, 0x63
jg 0x1400b253d
mov dword [rsp + 0x34], 0
xor ecx, ecx
sub ecx, dword [rsp + 0x2c]
cvtsi2ss xmm0, ecx
sub eax, dword [rsp + 0x28]
cvtsi2ss xmm1, eax
movss dword [rsi + 8], xmm1
movss dword [rsi + 0xc], xmm0
test eax, eax
jle 0x1400b2584
test ecx, ecx
jle 0x1400b2584
movss xmm0, dword [rdi + 0x4b70]
ucomiss xmm0, dword [0x140498458]
je 0x1400b2584
mov byte [rsi + 0x18], 1
movss xmm0, dword [rdi + 0x4b70]
movss dword [0x140498458], xmm0
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x20]
mov rcx, rax
sub rcx, qword [0x1406f9550]
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [0x1406f9548]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
cvtsi2ss xmm2, rcx
mov qword [0x1406f9550], rax
unpcklps xmm2, xmm1
movss xmm1, dword [0x14039a014]
divss xmm1, xmm0
unpcklps xmm1, xmm1
mulps xmm1, xmm2
movlps qword [rsi + 0x1c], xmm1
mov rdi, qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, select
call rdi
movzx eax, ax
shr eax, 0xf
mov byte [rsi + 0x14c], al
mov ecx, reloc.WS2_32.dll_recv
call rdi
movzx eax, ax
shr eax, 0xf
mov byte [rsi + 0x14d], al
mov ecx, reloc.WS2_32.dll_select
call rdi
movzx eax, ax
shr eax, 0xf
mov byte [rsi + 0x14e], al
mov byte [rsi + 0x14f], 0
call fcn.1400647d0
mov rdi, rax
cmp byte [rax + 0x3a7], 0
je 0x1400b2660
movsd xmm0, qword [rdi + 0x130]
cvttps2dq xmm0, xmm0
movlps qword [rsp + 0x38], xmm0
mov rcx, qword [0x1406f9558]
lea rdx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [rsp + 0x38]
mov edx, dword [rsp + 0x3c]
call qword [sym.imp.USER32.dll_SetCursorPos]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x1400b2695
mov rcx, qword [0x1406f9558]
lea rdx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x1400b2695
movsd xmm0, qword [rsp + 0x38]
cvtdq2ps xmm0, xmm0
movlps qword [rdi + 0x130], xmm0
mov eax, 0xffffffff
cmp byte [rsi + 0xc8], 0
je 0x1400b26b0
cmp dword [reloc.WS2_32.dll_htons], eax
jne 0x1400b26c1
jmp 0x1400b274e
call fcn.140070560
cmp dword [reloc.WS2_32.dll_htons], eax
je 0x1400b274e
mov dword [reloc.WS2_32.dll_htons], eax
call fcn.1400647d0
test byte [rax], 0x20
jne 0x1400b274e
mov rsi, rax
call fcn.140070560
xor ecx, ecx
cmp eax, 0xffffffff
je 0x1400b2748
cmp byte [rsi + 0xc8], 0
jne 0x1400b2748
dec eax
cmp eax, 7
ja case.default.0x1400b26fe
lea rcx, [0x1400b2768]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x1400b273d
mov edx, 0x7f00
jmp 0x1400b273d
mov edx, 0x7f86
jmp 0x1400b273d
mov edx, 0x7f85
jmp 0x1400b273d
mov edx, 0x7f84
jmp 0x1400b273d
mov edx, 0x7f83
jmp 0x1400b273d
mov edx, 0x7f82
jmp 0x1400b273d
mov edx, 0x7f89
jmp 0x1400b273d
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1401702c0
nop
add rsp, 0x48
pop rdi
pop rsi
ret