Function at 0x180083b20
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x70
mov rax, qword [0x180315040]
xor rax, rsp
mov qword [rsp + 0x60], rax
xor esi, esi
cmp byte [0x1803150e8], sil
je 0x180083de0
lea rdx, str.javaw.exe
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
mov rdi, rax
lea rbp, [0x180316870]
mov qword [rsp + 0x30], rbp
mov rcx, rbp
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x180083b87
lea ecx, [rsi + 5]
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3
mov eax, dword [0x1803168bc]
cmp eax, 0x7fffffff
jne 0x180083ba8
dec eax
mov dword [0x1803168bc], eax
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
cmp byte [0x18031803a], 0
jne 0x180083caf
mov rcx, qword [0x180319a50]
add rcx, 0x18
call fcn.180062570
test eax, eax
je 0x180083dbe
cmp byte [0x180318060], 0
jne 0x180083dc5
cmp qword [0x180318028], 0
je 0x180083dc5
test rdi, rdi
je 0x180083dc5
mov ebx, dword [0x180315114]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
cmp r8d, ebx
jge 0x180083c87
mov ecx, 0x10
call fcn.18009e700
mov qword [rax], rdi
lea rcx, [0x180083980]
mov qword [rax + 8], rcx
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x180006b10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x180083c9f
cmp dword [rsp + 0x48], 0
je 0x180083c93
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x180083c93
mov byte [0x180318060], 1
jmp 0x180083dc5
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x180083dc5
mov rcx, qword [0x180319a50]
add rcx, 0x18
call fcn.180062570
test eax, eax
je 0x180083dbe
cmp byte [0x180318060], 0
jne 0x180083dc5
cmp qword [0x180318028], 0
je 0x180083dc5
test rdi, rdi
je 0x180083dc5
mov ebx, dword [0x180315114]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x64
sub r8d, ecx
cmp r8d, ebx
jge 0x180083c87
mov ecx, 0x10
call fcn.18009e700
mov qword [rax], rdi
lea rcx, [0x180083980]
mov qword [rax + 8], rcx
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x180006b10]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rsp + 0x40], rax
test rax, rax
je 0x180083dae
cmp dword [rsp + 0x48], 0
je 0x180083da2
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x180083da2
mov byte [0x180318060], 1
jmp 0x180083dc5
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rsp + 0x48], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov byte [0x180318060], 0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
nop
mov rcx, rbp
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.18009e5c0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret