Function at 0x140009ec0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0xa0
mov rax, qword [0x1401430c0]
xor rax, rsp
mov qword [rsp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
lea rdi, [rsp + 0xa8]
movabs rbp, 0xff00ff00ff00ff00
xor esi, esi
nop
mov rcx, qword [0x1401e32a0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov edx, 5
mov rcx, qword [0x1401e32a0]
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x1401e32a0]
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140009f69
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_DispatchMessageW]
mov rbx, qword [0x1401e33e0]
mov dword [rbx + 0x18], 0x3c888889
lea rcx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetCursorPos]
movd xmm0, dword [rsp + 0x30]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x110], xmm0
movd xmm0, dword [rsp + 0x34]
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x114], xmm0
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140009fd0
mov byte [rbx + 0x118], 1
mov byte [rbx + 0x2b30], 1
mov eax, dword [rbx + 0x114]
mov dword [rbx + 0x2ae0], eax
jmp 0x140009fd7
mov byte [rbx + 0x118], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rdi
mov rbx, qword [rdi]
xor rbx, rbp
mov qword [rsp + 0x38], rbx
mov qword [rdi], rsi
mov rax, qword [0x1401e33e0]
test rax, rax
je 0x14000a00c
mov rax, qword [rax + 0xa0]
jmp 0x14000a00f
mov rax, rsi
cmp qword [rax + 0x48], 0
jne 0x14000a01b
call fcn.1400439b0
call fcn.140044bb0
call fcn.14001af80
mov rcx, qword [0x1401e33f8]
call fcn.140006bf0
call fcn.140009a60
call fcn.14001ce60
movss xmm2, dword [0x1401df5bc]
movaps xmm0, xmm2
mulss xmm0, dword [0x1401df5b0]
movss dword [rsp + 0x80], xmm0
movss xmm1, dword [0x1401df5b4]
mulss xmm1, xmm2
movss dword [rsp + 0x84], xmm1
movss xmm0, dword [0x1401df5b8]
mulss xmm0, xmm2
movss dword [rsp + 0x88], xmm0
movss dword [rsp + 0x8c], xmm2
mov rcx, qword [0x1401e32a8]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [0x1401e33d0]
mov edx, 1
call qword [rax + 0x108]
mov rcx, qword [0x1401e32a8]
mov rax, qword [rcx]
lea r8, [rsp + 0x80]
mov rdx, qword [0x1401e33d0]
call qword [rax + 0x190]
mov rax, qword [0x1401e33e0]
mov rax, qword [rax + 0x4ba0]
mov rcx, qword [rax]
add rcx, 0x50
mov rax, rsi
cmp byte [rcx], sil
cmovne rax, rcx
mov rcx, rax
call fcn.140042f40
mov rcx, qword [0x1401e3320]
xor r8d, r8d
mov rax, qword [rcx]
cmp byte [0x1401e3851], r8b
je 0x14000a10c
mov edx, 1
jmp 0x14000a10e
xor edx, edx
call qword [rax + 0x40]
nop
xor rbx, rbp
mov qword [rdi], rbx
cmp dword [rsp + 0x58], 0x12
jne 0x140009f10
mov rbx, qword [0x1401e33e0]
test rbx, rbx
je 0x14000a138
mov rdi, qword [rbx + 0xa0]
jmp 0x14000a13b
mov rdi, rsi
call fcn.140043ef0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x14000a14f
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000a15d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000a16c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rbx + 0x90], rsi
mov qword [rbx + 0xa0], rsi
and dword [rbx + 0xc], 0xfffffff7
mov r8, qword [0x1401e33e0]
test r8, r8
je 0x14000a1e9
mov r9d, dword [r8 + 0x3fc0]
movsx rdx, word [r8 + 0x6228]
lea rcx, [r8 + 0x622c]
lea rcx, [rcx + rdx*8]
cmp dword [rcx], r9d
je 0x14000a1de
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6228], cx
movsx rax, cx
lea rcx, [r8 + 0x622c]
lea rcx, [rcx + rax*8]
mov dword [rcx], r9d
mov dword [rcx + 4], esi
inc word [rcx + 6]
inc dword [r8 + 0x6224]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r8, qword [0x1401e33e0]
test r8, r8
je 0x14000a207
mov rdi, qword [r8 + 0x98]
jmp 0x14000a20a
mov rdi, rsi
lea rbx, [r8 + 8]
mov rcx, qword [rdi + 0x30]
test rcx, rcx
je 0x14000a224
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r8, qword [0x1401e33e0]
mov qword [rbx + 0x80], rsi
mov qword [rbx + 0x90], rsi
and dword [rbx + 4], 0xfffffff8
test r8, r8
je 0x14000a29a
mov r9d, dword [r8 + 0x3fc0]
movsx rdx, word [r8 + 0x6228]
lea rcx, [rdx*8 + 0x622c]
add rcx, r8
cmp dword [rcx], r9d
je 0x14000a28f
lea ecx, [rdx + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6228], cx
movsx rax, cx
lea rcx, [rax*8 + 0x622c]
add rcx, r8
mov dword [rcx], r9d
mov dword [rcx + 4], esi
inc word [rcx + 6]
inc dword [r8 + 0x6224]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [0x1401e33e0]
mov qword [0x1401e33e0], rbx
call fcn.140018bb0
mov qword [0x1401e33e0], rsi
test rbx, rbx
je 0x14000a33f
mov rcx, rbx
call fcn.140031710
mov r8, qword [0x1401e33e0]
test r8, r8
je 0x14000a336
mov r9d, dword [r8 + 0x3fc0]
movsx r10, word [r8 + 0x6228]
lea rdx, [r8 + 0x622c]
lea rdx, [rdx + r10*8]
cmp dword [rdx], r9d
je 0x14000a32b
lea ecx, [r10 + 1]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
mov word [r8 + 0x6228], cx
movsx rax, cx
lea rdx, [r8 + 0x622c]
lea rdx, [rdx + rax*8]
mov dword [rdx], r9d
mov dword [rdx + 4], esi
inc word [rdx + 6]
inc dword [r8 + 0x6224]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1401e32a0]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov al, 1
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400c2b50
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret