Function at 0x140019370
Capabilities:
Log keystrokes via polling

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
mov rsi, rcx
lea rdi, [rcx + 0x1908]
lea rbx, [rcx + 0x1948]
lea r14, [rcx + 0x1930]
mov eax, 0x19af8546
mov rbp, qword [sym.imp.USER32.dll_GetAsyncKeyState]
lea r15, [0x14005e61e]
mov r13d, 0x512e236e
mov r12d, 0x3e1fe14c
jmp 0x1400193d0
cmp byte [rsp + 0x3f], 0
mov eax, 0xeba4b201
cmovne eax, r13d
nop word [rax + rax]
cmp eax, 0xf4302e1a
jle 0x140019410
cmp eax, 0x4ad5873d
jle 0x140019440
cmp eax, 0x734fc71d
jg 0x1400194e3
cmp eax, 0x4ad5873e
je 0x14001957d
cmp eax, 0x63045640
jne 0x1400196ba
mov eax, 0xeba4b201
jmp 0x1400193d0
cmp eax, 0xa86d8c42
jg 0x140019470
cmp eax, 0x903abfa0
jg 0x14001950c
cmp eax, 0x84b9f454
je 0x1400195d9
cmp eax, 0x88e34e0a
jne 0x1400193d0
mov eax, 0x332bd0de
jmp 0x1400193d0
cmp eax, 0x332bd0dd
jg 0x140019531
cmp eax, 0xf4302e1b
je 0x1400193bc
cmp eax, 0x19af8546
jne 0x1400196ca
mov eax, 0x88e34e0a
jmp 0x1400193d0
cmp eax, 0xca4f5dff
jg 0x14001955d
cmp eax, 0xa86d8c43
je 0x1400195f5
cmp eax, 0xc45a654a
jne 0x1400193d0
mov dword [0x1400c1848], 5
mov dword [0x1400c184c], 5
mov rcx, r15
call fcn.14003b6ec
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x68], rdi
mov rax, qword [rsp + 0x68]
add rax, 8
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
mov eax, dword [rax]
mov dword [rsp + 0x80], eax
mov eax, 0xf45fd7f5
jmp 0x1400193d0
cmp eax, 0x77519774
je 0x140019629
cmp eax, 0x7d505ffe
jne 0x1400196da
cmp byte [rsp + 0x3d], 0
mov eax, 0xa86d8c43
cmovne eax, r12d
jmp 0x1400193d0
cmp eax, 0x903abfa1
je 0x140019638
cmp eax, 0x91225ed0
jne 0x1400193d0
movzx eax, byte [rsp + 0x3e]
mov eax, 0x903abfa1
jmp 0x1400193d0
cmp eax, 0x332bd0de
je 0x14001964f
cmp eax, 0x3e1fe14c
jne 0x1400193d0
cmp byte [rsi + 0x1961], 0
setne byte [rsp + 0x3e]
mov eax, 0x91225ed0
jmp 0x1400193d0
cmp eax, 0xca4f5e00
je 0x140019668
cmp eax, 0xeba4b201
jne 0x1400193d0
mov eax, 0x332bd0de
jmp 0x1400193d0
mov dword [0x1400c1848], 5
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rdi
mov rax, qword [rsp + 0x60]
add rax, 8
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov eax, dword [rax]
mov dword [rsp + 0x78], eax
mov rax, qword [rsp + 0x60]
add rax, 4
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov eax, dword [rax]
mov dword [rsp + 0x7c], eax
mov eax, 0xca4f5e00
jmp 0x1400193d0
cmp dword [rsp + 0x84], 0
setne byte [rsp + 0x3f]
movzx eax, byte [rsp + 0x3f]
mov eax, 0xf4302e1b
jmp 0x1400193d0
mov ecx, 0x30
call rbp
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x7fff
and eax, 0xffff8000
or eax, edx
not eax
or eax, ecx
not eax
movzx eax, ax
mov dword [rsp + 0x84], eax
mov eax, 0x84b9f454
jmp 0x1400193d0
movzx eax, byte [rsp + 0x3d]
mov eax, 0x7d505ffe
jmp 0x1400193d0
cmp byte [rsp + 0x3e], 0
mov eax, 0xc45a654a
mov ecx, 0x4ad5873e
cmovne eax, ecx
jmp 0x1400193d0
mov ecx, 0x31
call rbp
test ax, ax
sets byte [rsp + 0x3d]
mov eax, 0x77519774
jmp 0x1400193d0
mov rax, qword [rsp + 0x60]
mov edx, dword [rax]
mov rcx, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x78]
mov r8d, dword [rsp + 0x7c]
call fcn.140003ac0
mov rax, qword [rsp + 0x88]
mov r8d, dword [rax]
mov rax, qword [rsp + 0x90]
mov edx, dword [rax]
xor r9d, r9d
call fcn.14001aab0
mov rcx, rbx
call fcn.14001c6e0
mov rcx, r14
call fcn.14001c8f0
mov eax, 0x734fc71e
jmp 0x1400193d0
cmp eax, 0x512e236e
jne 0x1400193d0
jmp 0x1400197b4
cmp eax, 0xf45fd7f5
jne 0x1400193d0
jmp 0x1400197bb
cmp eax, 0x734fc71e
jne 0x1400193d0
lea rcx, [0x14005e61e]
call fcn.14003b6ec
mov rcx, qword [rsp + 0x58]
call fcn.140002080
mov rcx, qword [rsp + 0x58]
mov edx, 2
call fcn.140002cc0
lea rdx, [rsp + 0xa0]
mov qword [rsp + 0x40], rdx
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
mov ecx, dword [0x140053a00]
mov dword [rax + 0x10], ecx
movups xmm0, xmmword [0x1400539f0]
movups xmmword [rax], xmm0
mov rcx, rdi
call fcn.1400214e0
mov eax, 0xb3f09ca1
jmp 0x140019750
mov eax, 0x7cd7c3c7
nop dword [rax + rax]
cmp eax, 0xb3f09ca1
je 0x140019743
cmp eax, 0x7cd7c3c7
jne 0x140019750
mov qword [rsp + 0x48], rsi
mov rax, qword [0x140069d78]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [0x14005e57e]
mov qword [rsp + 0x20], rax
mov word [rsp + 0x30], 6
xor edx, edx
mov r8d, 0xd
mov r9d, 0x25
call fcn.140003720
mov rax, qword [rsp + 0x40]
mov rcx, rsi
mov edx, 4
call fcn.140018290
mov rcx, rsi
call fcn.140018730
xor ecx, ecx
call fcn.1400340c8
mov rbp, qword [rsp + 0x68]
mov r8d, dword [rbp + 4]
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
mov rcx, qword [rsp + 0x50]
mov r9d, dword [rsp + 0x80]
call fcn.140003ac0
mov rax, qword [rsp + 0x98]
mov r8d, dword [rax]
mov edx, dword [rbp + 4]
xor r9d, r9d
call fcn.14001aab0
mov r9d, dword [rsi + 0x1924]
mov edx, dword [rsi + 0x191c]
mov r8d, dword [rsi + 0x1920]
mov rcx, qword [rsp + 0x50]
call fcn.140003ac0
mov edx, dword [rsi + 0x1920]
mov r8d, dword [rsi + 0x1924]
xor r9d, r9d
call fcn.14001aab0
mov rcx, rbx
call fcn.14001c6e0
mov rcx, r14
call fcn.14001c8f0
mov rcx, qword [rsp + 0x50]
call fcn.140002080
mov rcx, qword [rsp + 0x50]
mov edx, 3
call fcn.140002cc0
lea rbx, [rsp + 0xa0]
mov qword [rsp + 0x40], rbx
mov rax, qword [rsp + 0x40]
mov rax, qword [rsp + 0x40]
mov ecx, dword [0x140053a00]
mov dword [rax + 0x10], ecx
movups xmm0, xmmword [0x1400539f0]
movups xmmword [rax], xmm0
mov rcx, rdi
mov rdx, rbx
call fcn.1400214e0
mov eax, 0xb3f09ca1
jmp 0x140019890
mov eax, 0x7cd7c3c7
cmp eax, 0xb3f09ca1
je 0x14001988b
cmp eax, 0x7cd7c3c7
jne 0x140019890
mov qword [rsp + 0x48], rsi
mov rax, qword [0x140069d78]
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rbp, [0x14005e57e]
mov qword [rsp + 0x20], rbp
mov word [rsp + 0x30], 6
xor edx, edx
mov r8d, 0xd
mov r9d, 0x25
call fcn.140003720
mov rax, qword [rsp + 0x40]
lea rdi, [rsi + 0x191c]
mov eax, 0xcb9ab55c
jmp 0x140019930
mov qword [rsp + 0x70], rbx
mov rax, qword [rsp + 0x70]
mov rax, qword [rsp + 0x70]
mov ecx, dword [0x140053a14]
mov dword [rax + 0x10], ecx
movups xmm0, xmmword [0x140053a04]
movups xmmword [rax], xmm0
mov rcx, rdi
mov rdx, rbx
call fcn.1400214e0
mov qword [rsp + 0x40], rsi
mov rax, qword [0x140069d78]
mov qword [rsp + 0x48], rax
mov eax, 0x4902e68e
cmp eax, 0xcb9ab55c
je 0x1400198ed
cmp eax, 0x4902e68e
jne 0x140019930
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbp
mov word [rsp + 0x30], 6
xor edx, edx
mov r8d, 0x1b
mov r9d, 0x25
call fcn.140003720
mov rax, qword [rsp + 0x70]
mov rcx, rsi
mov edx, 4
call fcn.140018290
mov rcx, rsi
call fcn.14001a3d0
int3