Function at 0x140008000
Capabilities:
Check for unmoving mouse cursor
Log keystrokes via polling

Disassembly:
push rbp
push rbx
mov rbp, rsp
sub rsp, 0x58
call fcn.140002970
mov ecx, 0xfffffff5
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
lea rdx, [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
mov ecx, dword [rbx + 0x918]
test ecx, ecx
je 0x14000805a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000805a
cmp byte [rbx + 0x8c9], 0
mov ecx, 0x64
sete al
mov byte [rbx + 0x8c9], al
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [rbx + 0x8c9], 0
mov qword [rsp + 0x50], rdi
je 0x140008254
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000828f
call fcn.1400072e0
cmp byte [rbx + 0x8d0], 0
mov edi, eax
je 0x1400080e5
xorps xmm0, xmm0
mov dword [rbp - 0x28], Ordinal_27
xor eax, eax
lea rcx, [rbp - 0x28]
movups xmmword [rbp - 0x24], xmm0
mov dword [rbp - 0x14], eax
call qword [sym.imp.USER32.dll_GetCursorInfo]
test eax, eax
je 0x1400080db
xor edx, edx
cmp dword [rbp - 0x20], 0x186a0
mov ecx, edx
setl cl
cmp dword [rbp - 0x20], 0xc350
setg dl
test edx, ecx
je 0x1400080e5
mov al, 1
mov rdi, qword [rsp + 0x50]
add rsp, 0x58
pop rbx
pop rbp
ret
cmp byte [rbp + 0x18], 0
jne 0x14000828f
cmp byte [rbx + 0x91c], 0
je 0x140008116
mov ecx, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
js 0x14000828f
mov ecx, 2
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x14000828f
cmp byte [rbx + 0x8cc], 0
movzx eax, byte [rbx + 0x8ce]
je 0x1400081d1
movabs rcx, 0x60f8da218bfbc6dc
xor edx, edx
test al, al
movabs rax, 0xd775c5dc6d3bb017
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp - 0x38], rax
mov qword [rbp + 0x20], rcx
mov rax, qword [rbp + 0x20]
mov qword [rbp - 0x30], rax
movabs rax, 0xd775c5902a71e75b
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov qword [rbp - 0x28], rax
mov qword [rbp + 0x20], rcx
lea rcx, [rbp - 0x38]
mov rax, qword [rbp + 0x20]
movdqa xmm0, xmmword [rbp - 0x38]
mov qword [rbp - 0x20], rax
xorps xmm0, xmmword [rbp - 0x28]
movdqa xmmword [rbp - 0x38], xmm0
je 0x1400081c9
call qword [sym.imp.USER32.dll_FindWindowA]
mov rbx, rax
test rax, rax
je 0x14000828f
lea rcx, [rbp + 0x18]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rbp + 0x1c]
mov edx, 0x204
movzx ecx, word [rbp + 0x18]
mov r8d, 2
shl r9d, 0x10
or r9, rcx
jmp 0x140008235
call qword [sym.imp.USER32.dll_FindWindowA]
jmp 0x1400081e3
test al, al
je 0x1400081dd
call qword [sym.imp.USER32.dll_GetForegroundWindow]
jmp 0x140008196
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x14000828f
lea rcx, [rbp + 0x18]
call qword [sym.imp.USER32.dll_GetCursorPos]
movzx r9d, word [rbp + 0x1c]
mov edx, 0x204
movzx ecx, word [rbp + 0x18]
mov r8d, 2
shl r9d, 0x10
or r9, rcx
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r9d, word [rbp + 0x1c]
mov edx, 0x205
movzx eax, word [rbp + 0x18]
shl r9d, 0x10
or r9, rax
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageA]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov al, 1
mov rdi, qword [rsp + 0x50]
add rsp, 0x58
pop rbx
pop rbp
ret
lea rcx, [rbp + 0x18]
call fcn.140005490
mov rax, qword [rbp + 0x18]
movabs rcx, 0x7fffffffc46535ff
cmp rax, rcx
jge 0x140008278
add rax, 0x3b9aca00
jmp 0x140008282
movabs rax, 0x7fffffffffffffff
lea rcx, [rbp + 0x18]
mov qword [rbp + 0x18], rax
call fcn.14002aff0
mov rdi, qword [rsp + 0x50]
mov al, 1
add rsp, 0x58
pop rbx
pop rbp
ret