Function at 0x140016120
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x60
lea rdi, [rsp + 0x20]
mov ecx, reloc.WS2_32.dll_recv
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x70]
lea rax, [rsp + 0x28]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7f0], eax
mov edx, 0x7f8a
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7f4], eax
mov edx, 0x7f03
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7ec], eax
mov edx, 0x7f89
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7e8], eax
mov edx, 0x7f8b
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7e4], eax
mov edx, 0x7f01
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7e0], eax
mov edx, 0x7f88
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7dc], eax
mov edx, 0x7f86
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7d8], eax
mov edx, 0x7f83
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7d4], eax
mov edx, 0x7f85
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7d0], eax
mov edx, 0x7f82
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7cc], eax
mov edx, 0x7f84
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7c8], eax
mov edx, 0x7f04
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7c4], eax
mov edx, 0x7f02
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorA]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.140016d90
mov dword [0x14059f7c0], eax
mov dword [rsp + 0x28], 0x18
lea rcx, [rsp + 0x28]
call qword [sym.imp.USER32.dll_GetCursorInfo]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x30]
call fcn.140016d90
mov ecx, eax
call fcn.140016c20
mov dword [reloc.WS2_32.dll_connect], eax
mov r9d, 0x179
lea r8, [0x1404dc730]
mov edx, 1
mov ecx, 0x1d
call fcn.1403ba980
xor r9d, r9d
xor r8d, r8d
mov edx, 5
mov rcx, rax
call fcn.1401375b0
mov qword [rsp + 0x48], rax
mov cx, 0x58
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x48]
mov word [rdx + rcx], ax
mov cx, 5
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x48]
mov word [rdx + rcx], ax
mov eax, 1
imul rax, rax, 4
mov rcx, qword [rsp + 0x48]
movzx edx, byte [reloc.WS2_32.dll_connect]
mov byte [rcx + rax], dl
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
call fcn.14013a770
mov r9d, 0x17f
lea r8, str.C:UsersyfjvyDownloadsMeshAgent_mastermeshcoreKVMWindowsinput.c
mov edx, 1
mov ecx, 0x1d
call fcn.1403ba980
xor r9d, r9d
xor r8d, r8d
mov edx, 5
mov rcx, rax
call fcn.1401375b0
mov qword [rsp + 0x48], rax
mov cx, reloc.WS2_32.dll_select
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x48]
mov word [rdx + rcx], ax
mov cx, 5
call sub.WS2_32.dll_htons
mov ecx, 2
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x48]
mov word [rdx + rcx], ax
mov ecx, 0x90
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 1
mov dword [rsp + 0x50], eax
mov ecx, 0x91
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 1
shl eax, 1
mov ecx, dword [rsp + 0x50]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x54], eax
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 1
shl eax, 2
mov ecx, dword [rsp + 0x54]
or ecx, eax
mov eax, ecx
mov ecx, 1
imul rcx, rcx, 4
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx], al
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
call fcn.14013a770
call fcn.140017890
nop
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_accept
call fcn.14037c300
add rsp, 0x60
pop rdi
ret