Function at 0x180120bd0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov qword [rbp], 0xfffffffffffffffe
mov qword [rbp - 0x38], rcx
mov qword [rbp - 0x18], 0
mov qword [rbp - 0x10], 1
mov qword [rbp - 8], 0
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x28], 2
xor r12d, r12d
mov rsi, qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea rdi, [0x180225bd8]
lea rbx, [rbp - 0x30]
xor r14d, r14d
jmp 0x180120c4f
inc r14d
mov rax, qword [rbp - 0x28]
mov word [rax + r12*2], r15w
inc r12
mov qword [rbp - 0x20], r12
cmp r14d, 0x100
jae 0x180120c7b
mov ecx, r14d
call rsi
mov r15d, eax
mov r12, qword [rbp - 0x20]
cmp r12, qword [rbp - 0x30]
jne 0x180120c40
mov rcx, rbx
mov rdx, rdi
call fcn.180121490
jmp 0x180120c40
mov rcx, qword [rbp - 0x28]
lea r14, [rcx + r12*2]
xor r12d, r12d
lea rbx, [rbp - 0x18]
lea r13, [0x180225c1c]
jmp 0x180120cb2
mov rax, qword [rbp - 0x10]
mov byte [rax + rdi], sil
inc rdi
mov qword [rbp - 8], rdi
mov rcx, r15
cmp rcx, r14
je 0x180121337
mov rax, r12
lea r15, [rcx + 2]
inc r12
cmp word [rcx], 0
mov rcx, r15
jns 0x180120cb2
movzx ecx, ax
add ecx, 0xfffffff8
cmp ecx, 0xd6
ja case.0x180120ce8.10
movsxd rcx, dword [r13 + rcx*4]
add rcx, r13
jmp rcx
mov sil, 0x4a
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x64
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x2e
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x35
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x3a
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x61
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x34
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x2a
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x29
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x27
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x2f
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x53
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x56
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x47
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x5a
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x6d
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x58
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x48
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x24
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x60
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x2b
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x57
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x49
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x54
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x45
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x5e
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x63
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x39
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x46
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x68
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x59
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x2c
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x4c
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x4f
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x50
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x30
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x51
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x52
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x33
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x5d
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x4b
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x31
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x38
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x28
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x4d
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x3c
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x4e
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x44
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x25
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x43
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x3d
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x2d
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x55
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x3e
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x6c
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x65
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x3b
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x5c
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x5b
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x6e
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x37
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x26
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x5f
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x32
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x67
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x6a
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x69
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x36
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x66
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x6b
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov sil, 0x3f
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
mov rcx, rbx
lea rdx, [0x180225bc0]
call fcn.1801213e0
jmp 0x180120ca0
add al, 0xd0
mov rcx, r15
cmp al, 0x2b
jae 0x180120cb2
movzx eax, al
movabs rcx, 0x7fffffe03ff
bt rcx, rax
mov rcx, r15
jae 0x180120cb2
lea rcx, [0x180225bf0]
movzx esi, byte [rax + rcx]
mov rdi, qword [rbp - 8]
cmp rdi, qword [rbp - 0x18]
jne 0x180120ca0
jmp 0x1801212e1
mov rax, qword [rbp - 8]
mov rsi, qword [rbp - 0x38]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rsi], xmm0
mov rdx, qword [rbp - 0x30]
test rdx, rdx
je 0x180121365
mov rcx, qword [rbp - 0x28]
add rdx, rdx
mov r8d, 2
call fcn.180047b40
mov rax, rsi
add rsp, 0x68
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret