Function at 0x140019200
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
sub rsp, 0x1b0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rbx, rcx
xor edi, edi
mov ecx, edx
sub ecx, 1
je 0x14001960e
sub ecx, 1
je 0x14001952e
sub ecx, 2
je 0x140019448
sub ecx, 1
je 0x1400193b7
cmp ecx, 1
je 0x140019326
movzx ecx, dl
xor edx, edx
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
shl eax, 0x10
mov r8d, 0x100
mov ecx, eax
lea rdx, [rbp + 0x70]
call qword [sym.imp.USER32.dll_GetKeyNameTextA]
lea r8, [rdi - 1]
test eax, eax
jne 0x140019302
movabs rax, 0x1963f2da84790950
movabs rcx, 0xfb7effe869c428a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x190d85b5ea126705
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x1400192f0
lea rdx, [rbp + 0x20]
jmp 0x1400196ed
xorps xmm0, xmm0
lea rax, [rbp + 0x70]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
inc r8
cmp byte [rax + r8], dil
jne 0x140019314
lea rdx, [rbp + 0x70]
jmp 0x1400196ed
movabs rax, 0x7c7ef0daa732555d
movabs rcx, 0xfb7effe869c428a6
mov qword [rbp], rax
mov r8, 0xffffffffffffffff
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xfb10909c1db16a86
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x190d85b5ea126705
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
inc r8
cmp byte [rax + r8], dil
jne 0x1400193a5
lea rdx, [rbp + 0x20]
jmp 0x1400196ed
movabs rax, 0x7c7ef0daa732565d
movabs rcx, 0xfb7effe869c428a6
mov qword [rbp], rax
mov r8, 0xffffffffffffffff
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xfb10909c1db16a86
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x190d85b5ea126705
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x20]
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
inc r8
cmp byte [rax + r8], dil
jne 0x140019436
lea rdx, [rbp + 0x20]
jmp 0x1400196ed
movabs rax, 0x542de0d98e760e48
movabs rdx, 0xc69b164630eb6168
mov qword [rbp], rax
xorps xmm2, xmm2
mov rax, qword [rbp]
movabs rcx, 0xfb7effe869c428a6
mov qword [rbp + 0x40], rax
mov r8, 0xffffffffffffffff
movabs rax, 0x8f0bbdc80cb75dc9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x2f76ba6bdb438283
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x190d85b5ea126705
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x2f76ba6bdb2dedf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
movups xmmword [rbx], xmm2
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
vzeroupper
nop dword [rax]
inc r8
cmp byte [rax + r8], dil
jne 0x140019520
jmp 0x1400196e9
movabs rax, 0x7640a5c182750e57
movabs rdx, 0xc69b164630eb6168
mov qword [rbp], rax
xorps xmm2, xmm2
mov rax, qword [rbp]
movabs rcx, 0xfb7effe869c428a6
mov qword [rbp + 0x40], rax
mov r8, 0xffffffffffffffff
movabs rax, 0x8f0a8aaa49a15bd3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x2f76ba6bdb2d8398
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x190d85b5ea126705
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x2f76ba6bdb2dedf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
movups xmmword [rbx], xmm2
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
vzeroupper
nop
inc r8
cmp byte [rax + r8], dil
jne 0x140019600
jmp 0x1400196e9
movabs rax, 0x6c62c8959e740249
movabs rdx, 0xc69b164630eb6168
mov qword [rbp], rax
xorps xmm2, xmm2
mov rax, qword [rbp]
movabs rcx, 0xfb7effe869c428a6
mov qword [rbp + 0x40], rax
mov r8, 0xffffffffffffffff
movabs rax, 0x940a8b9d2be44dd5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x2f76ba6bdb2ded99
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x190d85b5ea126705
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x2f76ba6bdb2dedf7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
movups xmmword [rbx], xmm2
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
vzeroupper
nop
inc r8
cmp byte [rax + r8], dil
jne 0x1400196e0
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.14000a400
mov rax, rbx
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret