Function at 0x1801194d0
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x80
xor ebp, ebp
movabs r14, 0xd80958fc74e988a6
mov dword [0x1805870e8], ebp
mov dword [0x1805870f8], ebp
mov qword [0x1805dd278], r14
call fcn.1801e4620
cmp byte [0x1805b1097], bpl
mov esi, dword [rax]
je 0x180119898
mov qword [rsp + 0xa0], rbx
movabs rcx, 0x50fac3a3e030a6e1
mov qword [rsp + 0xb0], rdi
mov edi, ebp
mov qword [rsp + 0xb8], r12
movabs r12, 0xe3b6097cc25aa69e
mov qword [rsp + 0x78], r13
movabs r13, 0x5a47b3b5e63e94c6
mov qword [rsp + 0x70], r15
movabs r15, 0x7239b21a38f536ba
movaps xmmword [rsp + 0x60], xmm6
movaps xmmword [rsp + 0x50], xmm7
nop word [rax + rax]
mov qword [rsp + 0xa8], rbp
mov dword [rsp + 0xa8], edi
mov rax, qword [rsp + 0xa8]
mov qword [0x180587120], rax
mov dword [0x1805870f8], ebp
mov qword [0x1805dd278], rcx
mov dword [0x1805870e8], 1
call fcn.1801e4620
mov qword [rsp + 0xa8], rbp
mov dword [rsp + 0xa8], edi
mov ebx, dword [rax]
movabs rax, 0x41bd2a6b006af756
mov qword [0x1805dd278], rax
mov rax, qword [rsp + 0xa8]
mov qword [0x180587120], rax
mov dword [0x1805870f8], ebp
mov dword [0x1805870e8], 1
call fcn.1801e4620
mov qword [rsp + 0xa8], rbp
mov ecx, dword [rax]
movabs rax, 0x6d0de6a7b5da71f8
mov dword [rsp + 0xa8], ecx
mov qword [0x1805dd278], rax
mov rax, qword [rsp + 0xa8]
mov qword [0x180587120], rax
mov dword [0x1805870f8], ebp
mov dword [0x1805870e8], 1
call fcn.1801e4620
mov qword [rsp + 0xa8], rbp
mov dword [rsp + 0xa8], ebx
mov rax, qword [rsp + 0xa8]
mov qword [0x180587120], rax
mov dword [0x1805870f8], ebp
mov qword [0x1805dd278], r15
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], ebp
je 0x180119857
cmp ebx, esi
je 0x180119857
mov dword [0x1805870e8], ebp
mov dword [0x1805870f8], ebp
mov qword [0x1805dd278], r14
call fcn.1801e4620
mov qword [rsp + 0xa8], rbp
mov qword [0x1805dd278], r15
mov ecx, dword [rax]
mov dword [rsp + 0xa8], ecx
mov rax, qword [rsp + 0xa8]
mov qword [0x180587120], rax
mov dword [0x1805870f8], ebp
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], ebp
je 0x180119857
mov qword [rsp + 0xa8], rbp
movabs rax, 0xfcdff7b72d23a1ac
mov qword [0x1805dd278], rax
mov dword [rsp + 0xa8], esi
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], rbp
mov qword [0x180587120], rax
mov dword [rsp + 0xa8], ebx
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], rbp
mov qword [0x180587128], rax
mov dword [rsp + 0xa8], 0x11
mov rax, qword [rsp + 0xa8]
mov qword [0x180587130], rax
mov dword [0x1805870f8], ebp
mov dword [0x1805870e8], 3
call fcn.1801e4620
cmp dword [rax], ebp
je 0x180119857
mov qword [rsp + 0xa8], rbp
mov dword [rsp + 0xa8], ebx
mov rax, qword [rsp + 0xa8]
mov qword [0x180587120], rax
mov dword [0x1805870f8], ebp
mov qword [0x1805dd278], r12
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], ebp
jne 0x180119857
mov qword [rsp + 0xa8], rbp
mov dword [rsp + 0xa8], ebx
mov rax, qword [rsp + 0xa8]
mov qword [0x180587120], rax
mov dword [0x1805870f8], ebp
mov qword [0x1805dd278], r13
mov dword [0x1805870e8], 1
call fcn.1801e4620
cmp dword [rax], 0xff
jne 0x180119857
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180119857
mov edx, ebx
lea rcx, [rsp + 0x30]
call fcn.18015adb0
mov qword [0x1805dd278], r14
movups xmm7, xmmword [rax]
movsd xmm6, qword [rax + 0x10]
mov dword [0x1805870e8], ebp
mov dword [0x1805870f8], ebp
call fcn.1801e4620
movaps xmm3, xmm7
mov dword [rsp + 0x28], 1
shufps xmm3, xmm7, 0xaa
movaps xmm2, xmm7
movabs rcx, 0x96a05e4fb321b1ba
movss dword [rsp + 0x20], xmm6
mov edx, dword [rax]
movsd qword [rsp + 0x40], xmm6
call fcn.18015acf0
inc edi
movabs rcx, 0x50fac3a3e030a6e1
cmp edi, 0x20
jl 0x180119570
movaps xmm7, xmmword [rsp + 0x50]
movaps xmm6, xmmword [rsp + 0x60]
mov r15, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov r12, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0xb0]
mov rbx, qword [rsp + 0xa0]
add rsp, 0x80
pop r14
pop rsi
pop rbp
ret