Function at 0x140119a80
Capabilities:
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, rcx
mov ecx, gethostbyaddr
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d47
mov ecx, 0x61
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d47
mov ecx, 0x4f
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d47
mov ecx, reloc.WS2_32.dll_gethostbyname
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d40
mov ecx, 0x64
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d40
mov ecx, 0x55
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d40
mov ecx, reloc.WS2_32.dll_getservbyname
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d39
mov ecx, 0x67
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d39
mov ecx, 0x42
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d39
mov ecx, gethostbyaddr
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d32
mov ecx, 0x62
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d32
mov ecx, reloc.WS2_32.dll_gethostbyaddr
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d2b
mov ecx, 0x63
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d2b
mov ecx, getservbyport
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d24
mov ecx, 0x65
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d24
mov ecx, getservbyport
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d1d
mov ecx, 0x66
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d1d
mov ecx, reloc.WS2_32.dll_getservbyport
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d16
mov ecx, 0x68
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d16
mov ecx, 0x39
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d0f
mov ecx, 0x69
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119d0f
mov ecx, 0xbd
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119cd6
mov ecx, WSAGetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119cd6
mov ecx, 0xbb
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119ca7
mov ecx, WSAGetLastError
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xf
test al, 1
jne 0x140119ca7
xor al, al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [rbx + 0x5a8]
xor edx, edx
add rcx, 0x90
mov r8d, dword [rcx + 0xd10]
cmp r8d, 9
lea eax, [r8 + 1]
cmovne edx, eax
call fcn.1400a2bf0
mov al, 1
add rsp, 0x20
pop rbx
ret
mov rcx, qword [rbx + 0x5a8]
add rcx, 0x90
mov edx, dword [rcx + 0xd10]
test edx, edx
jne 0x140119d00
mov edx, 9
call fcn.1400a2bf0
mov al, 1
add rsp, 0x20
pop rbx
ret
dec edx
call fcn.1400a2bf0
mov al, 1
add rsp, 0x20
pop rbx
ret
mov edx, 9
jmp 0x140119d4c
mov edx, 8
jmp 0x140119d4c
mov edx, 6
jmp 0x140119d4c
mov edx, 5
jmp 0x140119d4c
mov edx, 3
jmp 0x140119d4c
mov edx, 2
jmp 0x140119d4c
mov edx, 7
jmp 0x140119d4c
mov edx, 4
jmp 0x140119d4c
mov edx, 1
mov rcx, qword [rbx + 0x5a8]
add rcx, 0x90
call fcn.1400a2bf0
mov al, 1
add rsp, 0x20
pop rbx
ret