Function at 0x1400025c0
Capabilities:
Log keystrokes via polling

Disassembly:
push rsi
push rdi
sub rsp, 0x48
mov rax, qword [0x14043c0c0]
xor rax, rsp
mov qword [rsp + 0x40], rax
call fcn.140012ce0
mov rdi, rax
call fcn.140004560
mov rsi, rax
mov rcx, qword [0x140695188]
lea rdx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [rsp + 0x30]
cmp eax, 0x63
jg 0x14000260a
mov dword [rsp + 0x30], 0
xor eax, eax
mov ecx, dword [rsp + 0x34]
cmp ecx, 0x63
jg 0x14000261d
mov dword [rsp + 0x34], 0
xor ecx, ecx
sub ecx, dword [rsp + 0x2c]
cvtsi2ss xmm0, ecx
sub eax, dword [rsp + 0x28]
cvtsi2ss xmm1, eax
movss dword [rsi + 8], xmm1
movss dword [rsi + 0xc], xmm0
test eax, eax
jle 0x140002664
test ecx, ecx
jle 0x140002664
movss xmm0, dword [rdi + 0x4b70]
ucomiss xmm0, dword [0x14043c148]
je 0x140002664
mov byte [rsi + 0x18], 1
movss xmm0, dword [rdi + 0x4b70]
movss dword [0x14043c148], xmm0
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x20]
mov rcx, rax
sub rcx, qword [0x140695180]
xorps xmm0, xmm0
cvtsi2ss xmm0, qword [0x140695178]
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
cvtsi2ss xmm2, rcx
mov qword [0x140695180], rax
unpcklps xmm2, xmm1
movss xmm1, dword [0x14040d50c]
divss xmm1, xmm0
unpcklps xmm1, xmm1
mulps xmm1, xmm2
movlps qword [rsi + 0x1c], xmm1
mov rdi, qword [sym.imp.USER32.dll_GetKeyState]
mov ecx, send
call rdi
movzx eax, ax
shr eax, 0xf
mov byte [rsi + 0x14c], al
mov ecx, reloc.WS2_32.dll_recv
call rdi
movzx eax, ax
shr eax, 0xf
mov byte [rsi + 0x14d], al
mov ecx, reloc.WS2_32.dll_select
call rdi
movzx eax, ax
shr eax, 0xf
mov byte [rsi + 0x14e], al
mov byte [rsi + 0x14f], 0
call fcn.140004560
mov rdi, rax
cmp byte [rax + 0x3a7], 0
je 0x140002740
movsd xmm0, qword [rdi + 0x130]
cvttps2dq xmm0, xmm0
movlps qword [rsp + 0x38], xmm0
mov rcx, qword [0x140695188]
lea rdx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_ClientToScreen]
mov ecx, dword [rsp + 0x38]
mov edx, dword [rsp + 0x3c]
call qword [sym.imp.USER32.dll_SetCursorPos]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetCursorPos]
test eax, eax
je 0x140002775
mov rcx, qword [0x140695188]
lea rdx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_ScreenToClient]
test eax, eax
je 0x140002775
movsd xmm0, qword [rsp + 0x38]
cvtdq2ps xmm0, xmm0
movlps qword [rdi + 0x130], xmm0
mov eax, 0xffffffff
cmp byte [rsi + 0xc8], 0
je 0x140002790
cmp dword [reloc.WS2_32.dll_htons], eax
jne 0x1400027a1
jmp 0x14000282e
call fcn.140017b50
cmp dword [reloc.WS2_32.dll_htons], eax
je 0x14000282e
mov dword [reloc.WS2_32.dll_htons], eax
call fcn.140004560
test byte [rax], 0x20
jne 0x14000282e
mov rsi, rax
call fcn.140017b50
xor ecx, ecx
cmp eax, 0xffffffff
je 0x140002828
cmp byte [rsi + 0xc8], 0
jne 0x140002828
dec eax
cmp eax, 7
ja case.default.0x1400027de
lea rcx, [0x14035c2b0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov edx, 0x7f01
jmp 0x14000281d
mov edx, 0x7f00
jmp 0x14000281d
mov edx, 0x7f86
jmp 0x14000281d
mov edx, 0x7f85
jmp 0x14000281d
mov edx, 0x7f84
jmp 0x14000281d
mov edx, 0x7f83
jmp 0x14000281d
mov edx, 0x7f82
jmp 0x14000281d
mov edx, 0x7f89
jmp 0x14000281d
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetCursor]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140154c90
nop
add rsp, 0x48
pop rdi
pop rsi
ret