Function at 0x1401a11c0
Capabilities:
Log keystrokes via polling

Disassembly:
push rsi
sub rsp, 0x50
mov rax, qword [0x1402ba040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov r9d, edx
mov rsi, rcx
cmp edx, 0x28
ja 0x1401a143e
movabs rcx, 0x15e00000000
bt rcx, r9
jae 0x1401a143e
mov rax, qword [rsi + 0x128]
mov r8d, dword [rax]
test r8d, r8d
je 0x1401a1429
lea eax, ds:[r9 - 0x21]
mov qword [rsp + 0x78], rdi
cmp eax, 7
ja case.0x1401a123a.37
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x1a1454]
add rcx, rdx
jmp rcx
mov rax, qword [rsi + 0x98]
test rax, rax
je case.0x1401a123a.36
mov edi, dword [rax + 0x2c]
test edi, edi
je case.0x1401a123a.36
dec edi
jmp 0x1401a1302
mov rdi, qword [rsi + 0x98]
test rdi, rdi
je case.0x1401a123a.36
mov edi, dword [rdi + 0x2c]
inc edi
cmp edi, r8d
jb 0x1401a1302
lea edi, ds:[r8 - 1]
jmp 0x1401a1302
mov rdi, qword [rsi + 0x98]
test rdi, rdi
je 0x1401a1294
mov edi, dword [rdi + 0x2c]
test byte [rsi + 0x40], 8
je 0x1401a129f
mov ecx, dword [rsi + 0x7c]
jmp 0x1401a12a1
xor ecx, ecx
mov eax, dword [rsi + 0x6c]
sub eax, dword [rsi + 0x70]
sub eax, ecx
js 0x1401a1424
cdq
idiv dword [rsi + 0x74]
sub eax, 1
js 0x1401a1424
mov ecx, dword [rsi + 0x80]
cmp r9d, 0x21
jne 0x1401a12dc
cmp edi, ecx
jbe 0x1401a12d0
mov edi, ecx
jmp 0x1401a1302
cmp edi, eax
jb case.0x1401a123a.36
sub edi, eax
jmp 0x1401a1302
xor edi, edi
jmp 0x1401a1302
add ecx, eax
cmp ecx, r8d
jb 0x1401a12e9
lea ecx, [r8 - 1]
cmp edi, ecx
jae 0x1401a12f1
mov edi, ecx
jmp 0x1401a1302
add edi, eax
cmp edi, r8d
jb 0x1401a1302
lea edi, [r8 - 1]
jmp 0x1401a1302
mov edi, dword [rsp + 0x30]
mov qword [rsp + 0x68], rbx
mov ecx, 0x11
mov qword [rsp + 0x70], rbp
call qword [sym.imp.USER32.dll_GetKeyState]
movzx ebp, ax
mov ecx, 0x10
shr bp, 0xf
call qword [sym.imp.USER32.dll_GetKeyState]
mov rcx, qword [rsi + 0x128]
xor r8d, r8d
mov edx, edi
movzx ebx, ax
mov rcx, qword [rcx + 8]
mov rdx, qword [rcx + rdx*8]
mov rcx, rsi
mov qword [rsi + 0x98], rdx
call fcn.1401a0780
shr bx, 0xf
test bl, bl
mov rbx, qword [rsp + 0x68]
je 0x1401a1376
mov r8d, dword [rsi + 0xa4]
cmp r8d, 0xffffffff
je 0x1401a1376
cmp edi, r8d
jbe 0x1401a138e
mov edx, r8d
mov r8d, edi
jmp 0x1401a1390
test bpl, bpl
jne 0x1401a13e6
mov rax, qword [rsi + 0x98]
mov r8d, edi
mov ecx, dword [rax + 0x2c]
mov dword [rsi + 0xa4], ecx
mov edx, edi
lea rax, [rsp + 0x34]
mov r9d, 4
mov qword [rsp + 0x28], rax
mov rcx, rsi
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
call fcn.1401a05a0
mov r8d, dword [rsp + 0x34]
lea rax, [rsp + 0x38]
mov edx, dword [rsp + 0x30]
mov r9b, 1
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.1401a0240
test al, al
je 0x1401a13e6
mov rcx, qword ds:[rsi]
lea rdx, [rsp + 0x38]
xor r8d, r8d
call qword [sym.imp.USER32.dll_InvalidateRect]
mov edx, edi
mov rcx, rsi
call fcn.1401a0bc0
mov rcx, qword [rsi + 0x38]
mov rbp, qword [rsp + 0x70]
test rcx, rcx
je 0x1401a1424
xor r9d, r9d
xor r8d, r8d
mov edx, 0x41c
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsi + 0x158], 0xffffffffffffffff
mov dword [rsi + 0x188], 0xffffffff
mov rdi, qword [rsp + 0x78]
mov al, 1
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1401e0100
add rsp, 0x50
pop rsi
ret
xor al, al
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1401e0100
add rsp, 0x50
pop rsi
ret