Function at 0x140049a40
Capabilities:
Log keystrokes via polling

Disassembly:
push rdi
sub rsp, 0x50
mov ecx, dword [reloc.WLDAP32.dll_Ordinal_45]
movaps xmmword [rsp + 0x40], xmm6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x140049a69
cmp byte [reloc.WS2_32.dll_accept], 0
sete byte [0x1400f0190]
cmp byte [0x1400f12ad], 0
jne 0x140049a7e
call fcn.140046ec0
mov byte [0x1400f12ad], 1
mov rax, qword [0x1400f12b0]
xor edi, edi
test rax, rax
je 0x140049a95
mov rcx, qword [rax + 0xf0]
jmp 0x140049a98
mov rcx, rdi
cmp qword [rcx + 0x18], rdi
jne 0x140049ab9
test rax, rax
je 0x140049ab9
mov rcx, qword [rax + 0xf0]
test rcx, rcx
je 0x140049ab9
cmp qword [rcx], rdi
je 0x140049ab9
call fcn.140027280
call fcn.140027900
call fcn.140006420
movzx eax, byte [reloc.WS2_32.dll_accept]
mov rdx, qword [0x1400f12b0]
mov byte [rdx + 0xc8], al
call fcn.140046830
movss xmm3, dword [0x1400f13fc]
xorps xmm0, xmm0
addss xmm3, dword [0x1400df994]
movss xmm6, dword [0x1400df85c]
comiss xmm3, xmm0
movss dword [0x1400f13fc], xmm3
jae 0x140049b0e
mov dword [0x1400f13fc], 0x3f800000
cmp byte [0x1400f043c], dil
jne 0x140049b23
call fcn.140048210
mov rdx, qword [0x1400f12b0]
mov eax, dword [0x1400f13f4]
inc eax
mov dword [0x1400f13f4], eax
cmp eax, 0x32
jle 0x140049b3c
mov dword [0x1400f13f4], edi
cmp byte [reloc.WS2_32.dll_accept], 1
jne 0x140049bcd
mov dword [rdx + 0x130], edi
mov ecx, 1
mov byte [rdx + 0x134], dil
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140049b94
mov rcx, qword [0x1400f12b0]
cmp byte [rcx + 0x130], dil
je 0x140049b8d
movss xmm0, dword [rcx + 0x38]
mulss xmm0, xmm0
comiss xmm0, dword [rcx + 0x4a0]
setbe al
test al, al
jne 0x140049b94
mov byte [rcx + 0x130], 1
call fcn.140044b90
mov rcx, qword [0x1400f1310]
mov edx, 0xffffffec
mov r8d, 0x80
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x1400f1310]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [0x1400f1310]
call qword [sym.imp.USER32.dll_SetFocus]
jmp 0x140049bf2
mov rcx, qword [0x1400f1310]
mov edx, 0xffffffec
mov r8d, 0x80
call qword [sym.imp.USER32.dll_SetWindowLongA]
mov rcx, qword [0x1400f1310]
call qword [sym.imp.USER32.dll_UpdateWindow]
call fcn.140008640
mov rcx, qword [0x1400f0108]
mov r9d, 1
mov dword [rsp + 0x30], edi
xor r8d, r8d
movss dword [rsp + 0x28], xmm6
xor edx, edx
mov dword [rsp + 0x20], edi
mov rax, qword [rcx]
call qword [rax + 0x158]
mov rcx, qword [0x1400f0108]
mov rax, qword [rcx]
call qword [rax + 0x148]
movaps xmm6, xmmword [rsp + 0x40]
test eax, eax
js 0x140049c6f
call fcn.140008a10
mov rax, qword [0x1400f12b0]
mov rcx, qword [rax + 0x1e10]
mov rcx, qword [rcx]
add rcx, 0x40
cmp byte [rcx], dil
cmove rcx, rdi
call fcn.140026cc0
mov rcx, qword [0x1400f0108]
mov rax, qword [rcx]
call qword [rax + 0x150]
mov rcx, qword [0x1400f0108]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x88]
cmp eax, 0x88760868
jne 0x140049d5f
mov rcx, qword [0x1400f0108]
mov rax, qword [rcx]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x140049d5f
mov qword [rsp + 0x60], rbx
mov rbx, qword [0x1400f12b0]
test rbx, rbx
je 0x140049d1c
mov rbx, qword [rbx + 0xf0]
test rbx, rbx
je 0x140049d1c
cmp qword [rbx], rdi
je 0x140049d1c
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140049ce4
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 8], rdi
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140049cf7
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x10], rdi
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140049d1c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rax, qword [0x1400f12b0]
mov qword [rbx + 0x18], rdi
mov rcx, qword [rax + 0xa8]
mov qword [rcx + 8], rdi
mov rcx, qword [0x1400f0108]
lea rdx, [0x1400f0110]
mov rax, qword [rcx]
call qword [rax + 0x80]
mov rax, qword [0x1400f12b0]
mov rbx, qword [rsp + 0x60]
test rax, rax
je 0x140049d5f
mov rax, qword [rax + 0xf0]
test rax, rax
je 0x140049d5f
cmp qword [rax], rdi
je 0x140049d5f
add rsp, 0x50
pop rdi
jmp fcn.140027280
add rsp, 0x50
pop rdi
ret