Function at 0x14009af20
Capabilities:
Log keystrokes via polling

Disassembly:
sub rsp, 0x88
mov rax, qword [0x140199400]
xor rax, rsp
mov qword [rsp + 0x70], rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 1
mov dword [0x1401994dc], eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cmp byte [0x1401db3f0], 0
mov dword [0x1401994d8], eax
je 0x14009b1b6
cmp byte [0x1401997ac], 0
je 0x14009b1b1
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x14009afc5
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x14009af90
cmp dword [rsp + 0x38], 0x12
jne 0x14009afd3
mov byte [0x1401997ac], 0
mov ecx, dword [0x1401db8b4]
call fcn.140080aa0
mov ecx, dword [rax]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
jne 0x14009b1b6
mov ecx, dword [0x1401db8b0]
mov qword [rsp + 0x80], rbx
call fcn.140080aa0
mov ecx, dword [rax]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x14009b01b
cmp byte [0x1401db3ad], 0
sete byte [0x1401db3ad]
mov rax, qword [0x1401d5f28]
xor ebx, ebx
test rax, rax
je 0x14009b032
mov rcx, qword [rax + 0x98]
jmp 0x14009b035
mov rcx, rbx
cmp qword [rcx + 0x48], rbx
jne 0x14009b040
call fcn.140056e10
call fcn.140057ce0
call fcn.1400120c0
cmp byte [0x1401db3ad], bl
mov edx, 0xffffffec
mov rcx, qword [0x1401db3d0]
je 0x14009b06a
call qword [sym.imp.USER32.dll_GetWindowLongPtrA]
and rax, 0xffffffffffffffdf
jmp 0x14009b074
call qword [sym.imp.USER32.dll_GetWindowLongPtrA]
or rax, 0x20
mov rcx, qword [0x1401db3d0]
mov r8, rax
mov edx, 0xffffffec
call qword [sym.imp.USER32.dll_SetWindowLongPtrA]
cmp byte [0x1401db3ac], bl
je 0x14009b0c6
mov ecx, dword [0x1401db9f4]
call fcn.14007c730
cmp byte [rax], bl
je 0x14009b0a5
call fcn.14008e8a0
mov ecx, dword [0x1401db9f0]
call fcn.14007c730
cmp byte [rax], bl
je 0x14009b0b9
call fcn.14008e170
cmp byte [0x1401db3ad], bl
je 0x14009b0c6
call fcn.14008f4a0
mov rax, qword [0x1401d5f28]
lea r8, str.Background
xor edx, edx
mov rcx, qword [rax + 0x48d8]
mov rcx, qword [rcx]
call fcn.140011780
mov rcx, rax
call fcn.1400a15c0
call fcn.140013ca0
call fcn.1400140c0
mov rcx, qword [0x1401db3e0]
lea r8, [0x1401db3e8]
xorps xmm0, xmm0
xor r9d, r9d
movups xmmword [rsp + 0x60], xmm0
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x1401db3e0]
lea r8, [rsp + 0x60]
mov rdx, qword [0x1401db3e8]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rax, qword [0x1401d5f28]
mov rcx, qword [rax + 0x48d8]
mov rcx, qword [rcx]
add rcx, 0x48
cmp byte [rcx], bl
cmove rcx, rbx
call fcn.1400561e0
mov ecx, dword [0x1401db8bc]
call fcn.14007c730
mov rcx, qword [0x1401db3f8]
mov rbx, qword [rsp + 0x80]
cmp byte [rax], 0
mov rax, qword [rcx]
je 0x14009b186
xor edx, edx
mov r8d, 8
jmp 0x14009b18e
xor r8d, r8d
mov edx, 1
call qword [rax + 0x40]
cmp byte [0x1401997ac], 0
je 0x14009b1b1
mov al, 1
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.140117850
add rsp, 0x88
ret
call fcn.14009bef0
xor al, al
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.140117850
add rsp, 0x88
ret