Function at 0x140019f60
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
mov rsi, rcx
lea rbx, [rcx + 0x1948]
lea r14, [rcx + 0x1930]
lea r15, [rcx + 0x1961]
mov eax, 0xa9dcd944
mov r12, qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea rdi, [0x140059619]
mov ebp, 0xa2a685a6
mov r13d, 0x6fea042e
jmp 0x140019fc0
movzx eax, byte [rsp + 0x3f]
mov eax, 0xdbbaea4c
nop word cs:[rax + rax]
nop
cmp eax, 0xf7fd513f
jle 0x14001a010
cmp eax, 0x4dc24443
jle 0x14001a050
cmp eax, 0x52903f37
jg 0x14001a0bb
cmp eax, 0x4dc24444
je 0x14001a1df
cmp eax, 0x4dc49485
jne 0x14001a2c7
cmp word [rsp + 0x4e], 0
sets byte [rsp + 0x3d]
mov eax, 0x26b2a1ce
jmp 0x140019fc0
cmp eax, 0xafd53a41
jle 0x14001a090
cmp eax, 0xdead8098
jg 0x14001a0db
cmp eax, 0xafd53a42
je 0x14001a1f2
cmp eax, 0xdbbaea4c
jne 0x14001a2d7
cmp byte [rsp + 0x3f], 0
mov eax, 0x770cfba5
mov ecx, 0xd2d67a93
cmovne eax, ecx
jmp 0x140019fc0
cmp eax, 0x26b2a1cd
jg 0x14001a18a
cmp eax, 0xf7fd5140
je 0x140019fab
cmp eax, 0x1bd69b70
jne 0x140019fc0
mov ecx, 0x31
call r12
mov word [rsp + 0x4e], ax
mov eax, 0x4dc49485
jmp 0x140019fc0
cmp eax, 0xa2a685a5
jg 0x14001a1bf
cmp eax, 0x9bc3c835
je 0x14001a20c
cmp eax, 0x9e8b7035
jne 0x140019fc0
mov eax, 0x1bd69b70
jmp 0x140019fc0
cmp eax, 0x6fea042e
je 0x14001a22b
cmp eax, 0x770cfba5
jne 0x14001a2e7
mov eax, 0x1bd69b70
jmp 0x140019fc0
cmp eax, 0xdead8099
je 0x14001a287
cmp eax, 0xdf1f67eb
jne 0x140019fc0
mov dword [0x1401550a8], 5
mov dword [0x1401550ac], 5
mov rcx, rdi
call fcn.14003720c
mov qword [rsp + 0x50], rsi
mov r9d, dword [rsi + 0x1910]
mov edx, dword [rsi + 0x1908]
mov r8d, dword [rsi + 0x190c]
mov rcx, qword [rsp + 0x50]
call fcn.140005480
mov edx, dword [rsi + 0x190c]
mov r8d, dword [rsi + 0x1910]
xor r9d, r9d
call fcn.14001b610
mov r9d, dword [rsi + 0x1924]
mov edx, dword [rsi + 0x191c]
mov r8d, dword [rsi + 0x1920]
mov rcx, qword [rsp + 0x50]
call fcn.140005480
mov edx, dword [rsi + 0x1920]
mov r8d, dword [rsi + 0x1924]
xor r9d, r9d
call fcn.14001b610
mov qword [rsp + 0x90], rbx
mov eax, 0xdead8099
jmp 0x140019fc0
cmp eax, 0x26b2a1ce
je 0x14001a29e
cmp eax, 0x46755e05
jne 0x140019fc0
mov rcx, qword [rsp + 0x88]
call fcn.14001d4c0
mov rcx, rdi
call fcn.14003720c
mov eax, 0x4ece31cf
jmp 0x140019fc0
cmp eax, 0xa2a685a6
je 0x14001a2b5
cmp eax, 0xa9dcd944
jne 0x140019fc0
mov eax, 0x9e8b7035
jmp 0x140019fc0
cmp byte [rsp + 0x3e], 0
mov eax, 0xdf1f67eb
cmovne eax, r13d
jmp 0x140019fc0
mov ecx, 0x30
call r12
test ax, ax
sets byte [rsp + 0x3f]
mov eax, 0xf7fd5140
jmp 0x140019fc0
mov rax, qword [rsp + 0x80]
cmp byte [rax], 0
setne byte [rsp + 0x3e]
movzx eax, byte [rsp + 0x3e]
mov eax, 0x4dc24444
jmp 0x140019fc0
mov dword [0x1401550a8], 5
mov qword [rsp + 0x58], rsi
mov r9d, dword [rsi + 0x1910]
mov edx, dword [rsi + 0x1908]
mov r8d, dword [rsi + 0x190c]
mov rcx, qword [rsp + 0x58]
call fcn.140005480
mov edx, dword [rsi + 0x190c]
mov r8d, dword [rsi + 0x1910]
xor r9d, r9d
call fcn.14001b610
mov rcx, rbx
call fcn.14001d2d0
mov qword [rsp + 0x88], r14
mov eax, 0x46755e05
jmp 0x140019fc0
mov rcx, qword [rsp + 0x90]
call fcn.14001d2d0
mov eax, 0x52903f38
jmp 0x140019fc0
movzx eax, byte [rsp + 0x3d]
cmp byte [rsp + 0x3d], 0
mov eax, 0xafd53a42
cmovne eax, ebp
jmp 0x140019fc0
mov qword [rsp + 0x80], r15
mov eax, 0x9bc3c835
jmp 0x140019fc0
cmp eax, 0x4ece31cf
jne 0x140019fc0
jmp 0x14001a433
cmp eax, 0xd2d67a93
jne 0x140019fc0
jmp 0x14001a4f8
cmp eax, 0x52903f38
jne 0x140019fc0
mov rcx, r14
call fcn.14001d4c0
mov rcx, qword [rsp + 0x50]
call fcn.1400020f0
mov rcx, qword [rsp + 0x50]
mov edx, 3
call fcn.140004690
mov ecx, 0x85fb6e54
lea rax, [rsp + 0x60]
jmp 0x14001a330
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
mov ecx, 0x4f0cf929
nop
cmp ecx, 0x85fb6e54
je 0x14001a31f
cmp ecx, 0x4f0cf929
jne 0x14001a330
mov rax, qword [rsp + 0x40]
mov ecx, dword [0x14004ea40]
mov dword [rax + 0x10], ecx
movups xmm0, xmmword [0x14004ea30]
movups xmmword [rax], xmm0
lea rcx, [rsi + 0x1908]
lea rdi, [rsp + 0x60]
mov rdx, rdi
call fcn.140022220
mov rax, qword [0x140128d78]
mov qword [rsp + 0x28], rax
lea rbp, [0x1400595be]
mov qword [rsp + 0x20], rbp
mov word [rsp + 0x30], 6
mov rcx, rsi
xor edx, edx
mov r8d, 0xd
mov r9d, 0x25
call fcn.1400050d0
mov rax, qword [rsp + 0x40]
lea rbx, [rsi + 0x191c]
mov eax, 0x7e05f65e
jmp 0x14001a410
mov eax, dword [0x14004ea54]
mov dword [rsp + 0x70], eax
movups xmm0, xmmword [0x14004ea44]
movaps xmmword [rsp + 0x60], xmm0
mov rcx, rbx
mov rdx, rdi
call fcn.140022220
mov rax, qword [0x140128d78]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbp
mov word [rsp + 0x30], 6
mov rcx, rsi
xor edx, edx
mov r8d, 0x1b
mov r9d, 0x25
call fcn.1400050d0
mov eax, 0x288d614b
nop dword [rax + rax]
cmp eax, 0x7e05f65e
je 0x14001a3b4
cmp eax, 0x288d614b
jne 0x14001a410
mov rcx, rsi
mov edx, 4
call fcn.140018ed0
mov rcx, rsi
call fcn.14001aef0
mov rcx, qword [rsp + 0x58]
call fcn.1400020f0
mov rcx, qword [rsp + 0x58]
mov edx, 2
call fcn.140004690
mov ecx, 0x85fb6e54
lea rax, [rsp + 0x60]
jmp 0x14001a470
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
mov ecx, 0x4f0cf929
nop word [rax + rax]
cmp ecx, 0x85fb6e54
je 0x14001a458
cmp ecx, 0x4f0cf929
jne 0x14001a470
mov rax, qword [rsp + 0x40]
mov ecx, dword [0x14004ea40]
mov dword [rax + 0x10], ecx
movups xmm0, xmmword [0x14004ea30]
movups xmmword [rax], xmm0
lea rcx, [rsi + 0x1908]
lea rdx, [rsp + 0x60]
call fcn.140022220
mov rax, qword [0x140128d78]
mov qword [rsp + 0x28], rax
lea rax, [0x1400595be]
mov qword [rsp + 0x20], rax
mov word [rsp + 0x30], 6
mov rcx, rsi
xor edx, edx
mov r8d, 0xd
mov r9d, 0x25
call fcn.1400050d0
mov rax, qword [rsp + 0x40]
mov rcx, rsi
mov edx, 4
call fcn.140018ed0
mov rcx, rsi
call fcn.140019340
xor ecx, ecx
call fcn.14002fbe4
int3