Function at 0x180037310
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov eax, 0x1000
call fcn.1800c5940
sub rsp, rax
lea rbp, [rsp + 0x60]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180131038]
xor rax, rsp
mov qword [rbp + 0xf88], rax
movabs rax, 0x986241da8086aff9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x3da14ddf98997301
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs r14, 0xf10424b6f4f2cebb
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe30], rax
movabs r15, 0x3da14debb8fd1f64
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xe38], rax
movdqa xmm0, xmmword [rbp + 0x30]
pxor xmm0, xmmword [rbp + 0xe30]
movdqa xmmword [rbp + 0x30], xmm0
xor edx, edx
lea rcx, [rbp + 0x30]
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [0x1801323c0], rax
test rax, rax
jne 0x180037402
mov dword [rbp + 0x10], 1
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x180]
call fcn.18001e200
mov rcx, rax
call fcn.180041e30
cmp qword [0x1801323c0], 0
je 0x1800373e0
lea rcx, [rbp + 0xe20]
call fcn.180038030
lea rcx, [rbp + 0xe20]
call fcn.180041ed0
nop
lea rcx, [rbp + 0xe10]
call fcn.180038030
lea rcx, [rbp + 0xe10]
call fcn.180041f20
nop
lea rcx, [rbp + 0xe18]
call fcn.180038030
lea rcx, [rbp + 0xe18]
call fcn.180041f20
nop
lea rcx, [rbp + 0x40]
call fcn.180041f30
mov rdx, rax
lea rcx, [rbp + 0xe10]
call fcn.180041f80
lea rcx, [rbp + 0x40]
call fcn.180038140
call fcn.1800aead0
movzx esi, al
xor ebx, ebx
lea rdi, [0x180134b58]
test al, al
je 0x1800375a6
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
lea r8d, [rbx + 0x23]
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0x2d0]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0x836156d3909cabe9
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x120], rcx
movabs rax, 0x51c0249fd1937644
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x128], rcx
movabs rax, 0x4296bd6128f12fc
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x130], rcx
movabs r12, 0xa316b5853138aff6
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xe68], rax
movabs r13, 0x4296bf876ea6895
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe70], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xe78], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0xe60]
vmovdqa ymmword [rbp + 0x120], ymm1
lea rdx, [rbp + 0x120]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0x2d0]
call fcn.1800ae750
jmp 0x1800375ba
movabs r12, 0xa316b5853138aff6
movabs r13, 0x4296bf876ea6895
lea rcx, [rbp + 8]
call fcn.180041fc0
mov rdx, rax
lea rcx, [rbp + 0xe18]
call fcn.180042130
lea rcx, [rbp + 8]
call fcn.1800380b0
test sil, sil
je 0x1800376ef
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x26
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0x410]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0x812440d79180a6ef
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x140], rcx
movabs rax, 0x49c823829891700b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x148], rcx
movabs rax, 0x2a4d0e821f8609fc
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x150], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xe80], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xe88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xe90], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xe98], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0xe80]
vmovdqa ymmword [rbp + 0x140], ymm1
lea rdx, [rbp + 0x140]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0x410]
call fcn.1800ae750
call fcn.18005ab30
test sil, sil
je 0x180037808
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x29
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0x550]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0xd16f4bd9bc9ca7f6
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x160], rcx
movabs rax, 0x54cd2c82cc94710d
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x168], rcx
movabs rax, 0x4296bf8588e0def
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x170], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xea0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xea8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xeb0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xeb8], rax
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0xea0]
vmovdqa ymmword [rbp + 0x160], ymm1
lea rdx, [rbp + 0x160]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0x550]
call fcn.1800ae750
mov rcx, qword [0x180134890]
call fcn.18005ac90
test sil, sil
je 0x180037909
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x2c
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0x690]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0xd1634adf9f9da1f3
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x60], rcx
movabs rax, 0x13c52887da9c7101
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x68], rcx
mov qword [rbp], r13
mov rcx, qword [rbp]
mov qword [rbp + 0x70], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xec0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xec8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xed0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xed8], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xec0]
vmovdqa ymmword [rbp + 0x60], ymm1
lea rdx, [rbp + 0x60]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0x690]
call fcn.1800ae750
call fcn.1800365f0
test sil, sil
je 0x180037a22
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x2f
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0x7d0]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0x837143df929ca1f8
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x80], rcx
movabs rax, 0x52cd6d85d7946b05
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x88], rcx
movabs rax, 0x4296bd6128f0cf4
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x90], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xee0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xee8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xef0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xef8], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0xee0]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rdx, [rbp + 0x80]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0x7d0]
call fcn.1800ae750
cmp byte [0x180132420], 0
je 0x180037a64
nop dword [rax + rax]
mov ecx, 0x23
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
bt ax, 0xf
movzx eax, byte [0x180132420]
cmovb eax, ebx
mov byte [0x180132420], al
mov ecx, 0x4b
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x180132420], 0
jne 0x180037a30
mov rcx, qword [0x180134890]
call fcn.18005b680
test sil, sil
je 0x180037b84
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x3a
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0x910]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0xd1634adf9f9da1f3
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa0], rcx
movabs rax, 0x59c42189d98e7600
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xa8], rcx
movabs rax, 0x4296bf876ea68bb
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xb0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xf00], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf08], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xf10], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf18], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0xf00]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rdx, [rbp + 0xa0]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0x910]
call fcn.1800ae750
call fcn.18005abb0
test sil, sil
je 0x180037c9d
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x3d
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0xa50]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0xd16f4bd9bc9ca7f6
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xc0], rcx
movabs rax, 0x5cc83982d6947111
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xc8], rcx
movabs rax, 0x429459c139001f9
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xd0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xf20], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf28], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xf30], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf38], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0xf20]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rdx, [rbp + 0xc0]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0xa50]
call fcn.1800ae750
xor edx, edx
lea rcx, [rbp + 0xe10]
call fcn.180038120
test sil, sil
je 0x180037dbf
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x40
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0xb90]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0x836156d3909cabe9
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xe0], rcx
movabs rax, 0x54d52485d1936a44
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xe8], rcx
movabs rax, 0x4070f9d0c8304f4
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xf0], rcx
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xf40], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf48], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xf50], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf58], rax
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0xf40]
vmovdqa ymmword [rbp + 0xe0], ymm1
lea rdx, [rbp + 0xe0]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0xb90]
call fcn.1800ae750
call fcn.1800b6340
xor edx, edx
lea rcx, [rbp + 0xe18]
call fcn.180038040
test sil, sil
je 0x180037ef0
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x44
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0xcd0]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0x812440d79180a6ef
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x100], rcx
movabs rax, 0x53c8239e9891700b
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x108], rcx
movabs rax, 0x6153029417831cfc
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x110], rcx
movabs rax, 0xa316b58531388192
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xf60], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf68], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0xf70], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xf78], rax
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0xf60]
vmovdqa ymmword [rbp + 0x100], ymm1
lea rdx, [rbp + 0x100]
mov rcx, r8
vzeroupper
call fcn.180041320
nop
lea rcx, [rbp + 0xcd0]
call fcn.1800ae750
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
jmp 0x180037f1b
call fcn.1800aead0
test al, al
je 0x180037fdb
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x16
mov qword [rsp + 0x20], rdi
lea r9, str.DllMain::_lambda_1_::operator___
mov r8d, 0x4e
lea rdx, [0x1800d7300]
lea rcx, [rbp + 0x190]
call fcn.1800ae890
nop
mov rcx, rax
call fcn.180020240
mov r8, rax
movabs rax, 0x9d6841c19180affd
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x20], rcx
movabs rax, 0x3da14debb8fd1f45
mov qword [rbp + 8], rax
mov rcx, qword [rbp + 8]
mov qword [rbp + 0x28], rcx
mov qword [rbp + 8], r14
mov rcx, qword [rbp + 8]
mov qword [rbp + 0xe40], rcx
mov qword [rbp + 8], r15
mov rax, qword [rbp + 8]
mov qword [rbp + 0xe48], rax
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rbp + 0xe40]
movdqa xmmword [rbp + 0x20], xmm0
lea rdx, [rbp + 0x20]
mov rcx, r8
call fcn.180041320
nop
lea rcx, [rbp + 0x190]
call fcn.1800ae750
lea rcx, [rbp + 0xe20]
call fcn.180038150
mov rcx, qword [0x1801323c8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov rcx, qword [0x1801323d8]
call qword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]