Function at 0x18004fcb6
Capabilities:
Log keystrokes via polling

Disassembly:
push r12
push r15
push rbp
mov rbp, rsp
sub rsp, 0xb0
movzx eax, ah
movzx edx, ax
mov ecx, dword [rbp - 0x9c]
mov r10, qword [rbp - 0x9a]
mov r12, qword [rbp - 0x58]
cmp edx, edx
je 0x18004fced
sub dword [rbp - 0x13], eax
mov rcx, qword [rbp - 0x8d]
mov eax, dword [rbp - 0x55]
mov rax, qword [rbp - 0x28]
mov rax, 0x5376
test dword [0x1800bf08c], eax
js 0x18004fd32
mov rcx, qword [0x1800c0622]
mov dword [rbp - 0x38], edx
mov r11, qword [rbp - 0x89]
mov edx, dword [rbp - 0x4e]
mov r9, qword [rbp - 0x27]
mov edx, edx
add edx, 0x83a1
mov rdx, qword [rbp - 4]
mov dword [rbp - 0x56], ecx
mov qword [rbp - 0xa9], rax
mov qword [rbp - 0x35], r10
cmp r11, r8
je 0x18004fd5e
movzx edx, cx
mov ecx, 0x21fd
mov edx, 0x90e2
mov r9, qword [rbp - 0xb]
mov qword [rbp - 0x39], rcx
lea eax, [rbp - 5]
movzx ecx, dh
mov ecx, edx
movzx edx, cl
add ecx, dword [rbp - 0x7e]
mov r8, qword [rbp - 0x1c]
mov dword [rbp - 0x8f], ecx
mov qword [rbp - 0x44], r10
test qword [0x1800bee5b], r10
jo 0x18004fd81
mov ecx, eax
mov edx, 0x6966
mov dword [rbp - 0x1a], ecx
mov dword [rbp - 0x64], eax
movzx edx, cx
mov r15, rax
test ecx, eax
jns 0x18004fe1e
mov cx, word [rbp - 0x28]
add rdx, 0x5d6f
mov rcx, qword [rbp - 0xf]
mov r15, r11
mov ch, ah
mov ecx, 0x66c8
mov eax, ecx
mov qword [rbp - 0x8b], r8
mov r12, qword [rbp - 0x78]
mov rcx, r11
mov r8, r12
mov r9, rax
mov ax, 0x5228
and ecx, edx
add r9, qword [rbp - 0x72]
mov ecx, dword [rbp - 0x45]
xor r10, 0xafd1
or r11, qword [rbp - 0x2f]
sub dword [rbp - 0x4a], edx
add rdx, rcx
mov qword [rbp - 0x61], r15
mov edx, dword [rbp - 0x3f]
movzx eax, byte [rbp - 0x16]
movzx ecx, byte [0x1800c1573]
mov r9, qword [rbp - 0x7e]
mov r12, rcx
sub ecx, dword [rbp - 0x14]
cmp eax, dword [0x1800bfd74]
jmp 0x18004fe18
mov dword [rbp - 0xa7], edx
mov qword [rbp - 0x1f], rdx
and qword [rbp - 0x9f], r12
cmp ecx, eax
je 0x18004fec0
mov rdx, r12
mov dword [rbp - 0x23], ecx
mov rdx, qword [rbp - 0xc]
mov rax, rcx
test r11, 0x4d3cc248
je 0x18004fe5b
add ax, word [rbp - 0xa9]
mov dword [rbp - 0xc], ecx
mov ecx, ecx
add rdx, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x2f]
mov dword [rbp - 0x23], ecx
cmp rdx, qword [0x1800c19cb]
jns 0x18004fe6a
mov r10, r8
mov ecx, 0x4e3f
mov r11, qword [rbp - 0x68]
mov r9, qword [rbp - 0x3d]
mov qword [rbp - 0x2c], rcx
mov eax, 0xcac5
add ecx, ecx
add r8, 0x91a6
xor ecx, ecx
and edx, 0x6ae6
mov dword [rbp - 0x63], eax
mov edx, 0x4dbf
mov edx, dword [rbp - 0x9b]
mov ecx, dword [rbp - 0x47]
mov qword [rbp - 0x84], r8
call sub.USER32.dll_VkKeyScanA
mov eax, dword [rbp - 0x14]
mov eax, 0xfe18
mov qword [rbp - 0x18], r8
mov qword [rbp - 0x1a], r9
mov edx, edx
cmp ecx, eax
jae 0x18004fec4
mov edx, dword [rbp - 0xa1]
mov dword [rbp - 0x9f], ecx
add dword [rbp - 0x23], edx
movzx edx, dx
mov ecx, edx
sub r11, qword [rbp - 0x7a]
xor r15, 0x95a
cmp rax, r11
je 0x18004feef
add ecx, ecx
movzx eax, ah
mov eax, eax
sub dword [rbp - 0x12], edx
mov rax, r9
movzx edx, cl
cmp rcx, qword [0x1800bef88]
je 0x18004ff1c
add cx, word [rbp - 0xa7]
mov rax, qword [0x1800be6f4]
mov rcx, qword [rbp - 8]
mov r11, rdx
mov edx, dword [rbp - 0x58]
mov rcx, r15
mov qword [rbp - 0x5a], r15
movzx eax, dx
sub r15, 0xed
or edx, ecx
or ecx, 0xd813
mov qword [rbp - 0x4a], rax
sub edx, 0x6198
mov qword [rbp - 0x53], rdx
mov r9, qword [rbp - 0x39]
mov rax, 0x732f
mov rdx, qword [rbp - 0x2b]
movzx eax, dh
mov dword [rbp - 0x8f], ecx
add dword [rbp - 0x53], ecx
cmp r12, 0x71d55062
jne 0x18004ff6b
mov qword [rbp - 0x8a], r10
add rdx, r10
mov eax, dword [rbp - 0x15]
mov r12, r8
lea rax, [rbp - 0xa5]
mov rax, rcx
mov eax, dword [rbp - 0xa4]
sub r15, r11
mov rax, qword [rbp - 0x7e]
mov ah, byte [rbp - 0x96]
and rcx, rdx
mov edx, ecx
mov r11, 0x4f36
mov qword [rbp - 0x1a], rcx
cmp edx, 0x17b39092
js 0x1800500bc
mov r15, 0x70f0
mov dword [rbp - 0x32], edx
mov r15, 0xbb58
mov r10, qword [rbp - 0x6e]
mov qword [rbp - 0x13], rcx
mov ecx, edx
mov r12, r9
mov eax, dword [rbp - 0x68]
mov dword [rbp - 0x53], eax
mov cl, byte [rbp - 0x3b]
sub dword [rbp - 0x82], eax
lea rcx, [rbp - 0x4f]
mov dword [rbp - 0x6e], ecx
mov r11, qword [rbp - 0x4b]
mov dword [rbp - 0x39], ecx
mov qword [rbp - 0x8c], rcx
add ecx, 0xc974
mov eax, dword [rbp - 0xa1]
mov eax, dword [rbp - 0x39]
sub r12, r12
mov dword [rbp - 0x6a], edx
mov dword [rbp - 0x60], ecx
mov dword [rbp - 0x10], edx
mov r8, 0xf101
mov rcx, qword [rbp - 0x55]
or dl, byte [rbp - 0x17]
mov rcx, 0xdebd
mov qword [rbp - 0x12], r9
mov qword [rbp - 0x76], r9
lea rax, [rbp - 0x83]
mov dword [rbp - 0x8b], eax
mov qword [rbp - 0x93], r15
or dword [rbp - 0x7c], edx
mov r11, r9
mov qword [rbp - 0x92], r11
mov dword [rbp - 0x67], ecx
and ecx, ecx
mov ah, byte [rbp - 0x3d]
xor eax, dword [rbp - 0x97]
add dword [rbp - 0x47], ecx
mov r8, 0xf4ff
mov qword [rbp - 0x5a], r10
mov qword [rbp - 0x36], r8
mov rax, qword [rbp - 0x90]
and ecx, dword [rbp - 0x9f]
mov edx, eax
mov rax, rax
mov qword [rbp - 0x25], rcx
sub eax, 0x2924
mov qword [rbp - 0x94], r8
xor ch, byte [rbp - 0x6a]
movzx edx, al
test dword [str.V8KlwUUuhExyMtFYtNqexnBI8YE9PDBs6MVQHuCYiMCt9uYVQUFRf1HvARoT2KFJWfGR35oAZZJ8CJLrKuWwgxST3hgXZmQXo5QFS], eax
jne 0x1800500b0
mov dword [rbp - 0xab], edx
mov dword [0x1800be380], edx
mov edx, dword [0x1800bed12]
sub rdx, r10
mov eax, dword [rbp - 0x33]
mov eax, edx
mov eax, edx
test dword [str.RGEx7FxVO9O2wFRSDFAELYUYYVZ], edx
jno 0x1800500bc
mov rdx, r11
mov ecx, dword [rbp]
mov dword [rbp - 0x28], eax
add eax, 0xc35f
mov dword [rbp - 0xaa], edx
cmp rcx, 0xffffffffc8c0ab05
je 0x1800500dc
mov edx, dword [rbp - 0x2e]
mov eax, ecx
lea r15, [0x1800c0c67]
mov dword [rbp - 0x48], edx
mov dword [rbp - 0x6f], ecx
mov qword [rbp - 0x61], r12
mov rax, r15
mov r12, r8
cmp eax, dword [0x1800c078e]
jno 0x180050102
xor dword [rbp - 0x72], eax
mov ecx, edx
mov dword [rbp - 0x5c], ecx
mov r12, qword [0x1800be141]
mov qword [0x1800bf63f], r9
mov qword [rbp - 0x21], r15
xor r12, r10
mov r8, qword [rbp - 0x76]
mov rcx, qword [rbp - 0x6c]
movzx eax, dh
movzx eax, cx
mov qword [rbp - 0x65], rax
mov ah, byte [rbp - 0x1e]
mov qword [rbp - 8], r12
mov qword [rbp - 0x42], r8
and dword [rbp - 0x22], edx
mov r11, qword [rbp - 1]
mov dword [0x1800c0b66], ecx
mov eax, edx
mov edx, edx
cmp eax, 0xba7c41ec
jns 0x180050186
mov r11, qword [rbp - 0x8f]
mov r10, rcx
or edx, 0x2811
mov word [0x1800c1362], dx
mov edx, edx
mov edx, dword [0x1800c1117]
add qword [rbp - 0x81], r12
mov qword [rbp - 0x41], r8
mov dword [rbp - 0x77], eax
mov qword [rbp - 0x43], rcx
mov r12, rax
mov rax, rax
leave
pop r15
pop r12
ret