Function at 0x140162c00
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rax, qword [0x140237008]
xor rax, rsp
mov qword [rbp - 8], rax
mov edi, edx
mov rbx, rcx
cmp edx, 0x27
ja 0x140162c3a
movabs rcx, 0xa100000000
bt rcx, rdi
jb 0x140162c4f
cmp edi, 0x6b
je 0x140162c4f
nop
cmp edi, 0xbb
je 0x140162c4f
xor al, al
jmp 0x140162f4d
cmp qword [rbx + 0xa0], 0
je 0x140162f4b
mov ecx, 0x11
mov qword [rsp + 0x68], rsi
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov ecx, 0x10
sets sil
call qword [sym.imp.USER32.dll_GetKeyState]
test ax, ax
mov eax, edi
sets cl
sub eax, 0x20
je 0x140162eb4
sub eax, 5
je 0x140162dc9
nop dword [rax]
sub eax, 2
je 0x140162d39
sub eax, 0x44
je 0x140162cb7
cmp eax, 0x50
jne 0x140162f46
cmp edi, 0x6b
jne 0x140162cc2
test sil, sil
jmp 0x140162cd9
cmp edi, 0xbb
jne 0x140162f46
test sil, sil
je 0x140162f46
test cl, cl
je 0x140162f46
test byte [rbx + 0x40], 0x10
je 0x140162cfb
mov r8, qword [rbx + 0x100]
xor r9d, r9d
mov rdx, qword [rbx + 0x10]
mov rcx, rbx
call fcn.1401610c0
xor edi, edi
cmp dword [rbx + 0xf4], edi
jbe 0x140162f46
nop dword [rax]
mov r8, qword [rbx + 0xe8]
xor r9d, r9d
mov rdx, qword [rbx + 0x18]
mov rcx, rbx
mov r8, qword [r8 + rdi*8]
call fcn.1401610c0
inc edi
cmp edi, dword [rbx + 0xf4]
jb 0x140162d10
jmp 0x140162f46
mov rdx, qword [rbx + 0xa0]
test byte [rdx + 0x34], 1
jne 0x140162f46
test byte [rdx], 4
jne 0x140162d5f
mov r8b, 1
mov rcx, rbx
call fcn.140161640
jmp 0x140162f46
mov r8, qword [rbx + 0x130]
mov eax, dword [rdx + 0x2c]
inc eax
cmp eax, dword [r8]
jae 0x140162f46
mov ecx, eax
mov rax, qword [r8 + 8]
mov rdi, qword [rax + rcx*8]
mov eax, dword [rdx + 0x30]
inc eax
cmp dword [rdi + 0x30], eax
jne 0x140162f46
mov qword [rbx + 0xa0], rdi
mov rcx, rbx
mov eax, dword [rdi + 0x2c]
mov dword [rbx + 0xac], eax
mov edx, dword [rdi + 0x2c]
inc edx
call fcn.1401623a0
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.140161f60
mov rax, qword [rbx + 0xa0]
mov edx, dword [rax + 0x2c]
mov r8d, edx
jmp 0x140162e58
mov rax, qword [rbx + 0xa0]
test byte [rax + 0x34], 1
jne 0x140162dee
test byte [rax], 4
je 0x140162dee
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.140161640
jmp 0x140162f46
mov ecx, dword [rax + 0x30]
test ecx, ecx
je 0x140162f46
mov edi, dword ds:[rax + 0x2c]
dec ecx
test edi, edi
je 0x140162f46
mov rax, qword [rbx + 0x130]
mov rdx, qword [rax + 8]
dec edi
mov rsi, qword [rdx + rdi*8]
cmp dword [rsi + 0x30], ecx
je 0x140162e29
nop
test edi, edi
jne 0x140162e13
jmp 0x140162f46
mov qword ds:[rbx + 0xa0], rsi
mov edx, edi
mov eax, dword [rsi + 0x2c]
mov rcx, rbx
mov dword [rbx + 0xac], eax
call fcn.1401623a0
xor r8d, r8d
mov rdx, rsi
mov rcx, rbx
call fcn.140161f60
mov r8d, edi
mov edx, edi
lea rax, [rbp - 0x20]
mov r9d, 4
mov qword [rsp + 0x28], rax
mov rcx, rbx
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x20], rax
call fcn.140161d80
mov r8d, dword [rbp - 0x20]
lea rax, [rbp - 0x18]
mov edx, dword [rbp - 0x1c]
mov r9b, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.140161a60
test al, al
je 0x140162ea7
mov rcx, qword [rbx]
lea rdx, [rbp - 0x18]
xor r8d, r8d
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, rbx
call fcn.1401650c0
jmp 0x140162f46
test sil, sil
je 0x140162ed7
mov rcx, qword [rbx + 0xa0]
mov r9d, 2
mov eax, dword [rcx + 0x2c]
mov dword [rbx + 0xac], eax
mov edx, dword [rcx + 0x2c]
mov r8d, edx
jmp 0x140162efd
test cl, cl
je 0x140162f46
mov edx, dword [rbx + 0xac]
mov r9d, 4
mov rax, qword [rbx + 0xa0]
mov ecx, dword [rax + 0x2c]
cmp ecx, edx
mov r8d, ecx
cmovbe r8d, edx
cmovbe edx, ecx
lea rax, [rbp - 0x20]
mov rcx, rbx
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x20], rax
call fcn.140161d80
mov r8d, dword [rbp - 0x20]
lea rax, [rbp - 0x18]
mov edx, dword [rbp - 0x1c]
mov r9b, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.140161a60
test al, al
je 0x140162f46
mov rcx, qword [rbx]
lea rdx, [rbp - 0x18]
xor r8d, r8d
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rsi, qword [rsp + 0x68]
mov al, 1
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1401848a0
mov rbx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop rbp
ret