Function at 0x1401a7340
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x1402bb040]
xor rax, rsp
mov qword [rbp - 8], rax
mov edi, edx
mov rbx, rcx
cmp edx, 0x27
ja 0x1401a737a
movabs rcx, 0xa100000000
bt rcx, rdi
jb 0x1401a738f
cmp edi, 0x6b
je 0x1401a738f
nop
cmp edi, 0xbb
je 0x1401a738f
xor al, al
jmp 0x1401a76ad
cmp qword [rbx + 0x98], 0
je 0x1401a76ab
mov ecx, 0x11
mov qword [rsp + 0x68], rsi
call qword [sym.imp.USER32.dll_GetKeyState]
movzx esi, ax
mov ecx, 0x10
shr si, 0xf
call qword [sym.imp.USER32.dll_GetKeyState]
shr ax, 0xf
mov ecx, edi
sub ecx, 0x20
je 0x1401a7614
sub ecx, 5
je 0x1401a7526
nop word [rax + rax]
sub ecx, 2
je 0x1401a748d
sub ecx, 0x44
je 0x1401a73f7
cmp ecx, 0x50
jne 0x1401a76a6
cmp edi, 0x6b
jne 0x1401a740a
nop dword [rax]
test sil, sil
jne 0x1401a7428
jmp 0x1401a76a6
cmp edi, 0xbb
jne 0x1401a76a6
test sil, sil
je 0x1401a76a6
nop
test al, al
je 0x1401a76a6
test byte [rbx + 0x40], 0x10
je 0x1401a7445
mov r8, qword ds:[rbx + 0x100]
xor r9d, r9d
mov rdx, qword [rbx + 0x10]
mov rcx, rbx
call fcn.1401a57c0
xor edi, edi
cmp dword [rbx + 0xf4], edi
jbe 0x1401a76a6
nop dword [rax]
nop word [rax + rax]
mov r8, qword [rbx + 0xe8]
xor r9d, r9d
mov rdx, qword [rbx + 0x18]
mov rcx, rbx
mov r8, qword [r8 + rdi*8]
call fcn.1401a57c0
inc edi
cmp edi, dword [rbx + 0xf4]
jb 0x1401a7460
jmp 0x1401a76a6
mov rdx, qword [rbx + 0x98]
test byte [rdx + 0x34], 1
jne 0x1401a76a6
test byte [rdx], 4
jne 0x1401a74b3
mov r8b, 1
mov rcx, rbx
call fcn.1401a5e20
jmp 0x1401a76a6
mov r8, qword ds:[rbx + 0x130]
mov eax, dword [rdx + 0x2c]
inc eax
cmp eax, dword [r8]
jae 0x1401a76a6
mov ecx, eax
mov rax, qword [r8 + 8]
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdx + 0x30]
inc eax
cmp dword [rdi + 0x30], eax
jne 0x1401a76a6
mov qword [rbx + 0x98], rdi
mov rcx, rbx
mov eax, dword [rdi + 0x2c]
mov dword [rbx + 0xa4], eax
mov edx, dword [rdi + 0x2c]
inc edx
call fcn.1401a6a40
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1401a6760
mov rax, qword [rbx + 0x98]
mov edx, dword [rax + 0x2c]
mov r8d, edx
jmp 0x1401a75b8
mov rdi, qword [rbx + 0x98]
test byte [rdi + 0x34], 1
jne 0x1401a754b
test byte [rdi], 4
je 0x1401a754b
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.1401a5e20
jmp 0x1401a76a6
mov ecx, dword [rdi + 0x30]
test ecx, ecx
je 0x1401a76a6
mov edi, dword ds:[rdi + 0x2c]
dec ecx
test edi, edi
je 0x1401a76a6
mov rax, qword [rbx + 0x130]
mov rdx, qword [rax + 8]
dec edi
mov rsi, qword [rdx + rdi*8]
cmp dword [rsi + 0x30], ecx
je 0x1401a7589
nop
test edi, edi
jne 0x1401a7573
jmp 0x1401a76a6
mov qword ds:[rbx + 0x98], rsi
mov edx, edi
mov eax, dword [rsi + 0x2c]
mov rcx, rbx
mov dword [rbx + 0xa4], eax
call fcn.1401a6a40
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.1401a6760
mov r8d, edi
mov edx, edi
lea rax, [rbp - 0x20]
mov r9d, 4
mov qword [rsp + 0x28], rax
mov rcx, rbx
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x20], rax
call fcn.1401a6580
mov r8d, dword [rbp - 0x20]
lea rax, [rbp - 0x18]
mov edx, dword [rbp - 0x1c]
mov r9b, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1401a6220
test al, al
je 0x1401a7607
mov rcx, qword [rbx]
lea rdx, [rbp - 0x18]
xor r8d, r8d
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, rbx
call fcn.1401a9ca0
jmp 0x1401a76a6
test sil, sil
je 0x1401a7637
mov rcx, qword [rbx + 0x98]
mov r9d, 2
mov eax, dword [rcx + 0x2c]
mov dword [rbx + 0xa4], eax
mov edx, dword [rcx + 0x2c]
mov r8d, edx
jmp 0x1401a765d
test al, al
je 0x1401a76a6
mov edx, dword [rbx + 0xa4]
mov r9d, 4
mov rax, qword [rbx + 0x98]
mov ecx, dword [rax + 0x2c]
cmp ecx, edx
mov r8d, ecx
cmovbe r8d, edx
cmovbe edx, ecx
lea rax, [rbp - 0x20]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x20], rax
call fcn.1401a6580
mov r8d, dword [rbp - 0x20]
lea rax, [rbp - 0x18]
mov edx, dword [rbp - 0x1c]
mov r9b, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1401a6220
test al, al
je 0x1401a76a6
mov rcx, qword [rbx]
lea rdx, [rbp - 0x18]
xor r8d, r8d
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rsi, qword [rsp + 0x68]
mov al, 1
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1401e5e40
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop rbp
ret