Function at 0x18000dfa0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
sub rsp, 0xd8
cmp byte [0x180167333], 0
je 0x18000e5ec
mov qword [rax + 0x18], rbp
mov ecx, 0x4b
mov qword [rax + 0x20], rsi
mov qword [rax - 8], rdi
mov qword [rax - 0x10], r14
mov qword [rax - 0x18], r15
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm8, dword [0x1800cbcfc]
xor edi, edi
movss xmm6, dword [0x1800cbc10]
movabs rsi, 0xd80958fc74e988a6
movabs rbp, 0x9a9112a0fe9a4713
xorps xmm7, xmm7
test ax, ax
je 0x18000e0c3
mov dword [0x18010cde8], edi
mov dword [0x18010cdf8], edi
mov qword [0x180169ac0], rsi
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov qword [0x18010cec8], rdi
mov dword [0x18010cde8], 2
call fcn.1800273e0
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x58], 1
mov edx, dword [rax]
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm8
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.18001a120
mov ecx, 0x4c
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm9, dword [0x1800cd8fc]
test ax, ax
je 0x18000e188
mov dword [0x18010cde8], edi
mov dword [0x18010cdf8], edi
mov qword [0x180169ac0], rsi
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov qword [0x18010cec8], rdi
mov dword [0x18010cde8], 2
call fcn.1800273e0
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x58], 1
mov edx, dword [rax]
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm9
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.18001a120
mov ecx, 0x49
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000e244
mov dword [0x18010cde8], edi
mov dword [0x18010cdf8], edi
mov qword [0x180169ac0], rsi
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov qword [0x18010cec8], rdi
mov dword [0x18010cde8], 2
call fcn.1800273e0
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x58], 1
mov edx, dword [rax]
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm9
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.18001a120
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000e300
mov dword [0x18010cde8], edi
mov dword [0x18010cdf8], edi
mov qword [0x180169ac0], rsi
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov qword [0x18010cec8], rdi
mov dword [0x18010cde8], 2
call fcn.1800273e0
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x58], 1
mov edx, dword [rax]
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm8
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.18001a120
mov ecx, 0x20
mov qword [rsp + 0xe0], rbx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movabs r14, 0x866a4a5fae349510
movabs r15, 0x8bb4ef4214e0e6d5
test ax, ax
je 0x18000e45b
mov dword [0x18010cde8], edi
mov dword [0x18010cdf8], edi
mov qword [0x180169ac0], rsi
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov qword [0x18010cec8], rdi
mov dword [0x18010cde8], 2
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], r14
mov ebx, dword [rax]
mov dword [rsp + 0xe8], ebx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov dword [0x18010cde8], 1
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov dword [rsp + 0xe8], ebx
mov qword [0x180169ac0], r15
movss xmm6, dword [rax]
mov rax, qword [rsp + 0xe8]
addss xmm6, xmm7
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov dword [0x18010cde8], 1
call fcn.1800273e0
mov dword [rsp + 0x70], 1
mov edx, ebx
mov dword [rsp + 0x68], 1
mov dword [rsp + 0x58], 1
movss xmm3, dword [rax]
mov dword [rsp + 0x50], edi
addss xmm3, xmm7
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm8
movss dword [rsp + 0x20], xmm6
call fcn.18001a120
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm8, xmmword [rsp + 0x90]
test ax, ax
je 0x18000e5a3
mov dword [0x18010cde8], edi
mov dword [0x18010cdf8], edi
mov qword [0x180169ac0], rsi
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov qword [0x18010cec8], rdi
mov dword [0x18010cde8], 2
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov qword [0x180169ac0], r14
mov ebx, dword [rax]
mov dword [rsp + 0xe8], ebx
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov dword [0x18010cde8], 1
call fcn.1800273e0
mov qword [rsp + 0xe8], rdi
mov dword [rsp + 0xe8], ebx
mov qword [0x180169ac0], r15
movss xmm6, dword [rax]
mov rax, qword [rsp + 0xe8]
mov qword [0x18010cec0], rax
mov dword [0x18010cdf8], edi
mov dword [0x18010cde8], 1
call fcn.1800273e0
mov dword [rsp + 0x70], 1
addss xmm6, xmm7
mov dword [rsp + 0x68], 1
mov edx, ebx
mov dword [rsp + 0x58], 1
movss xmm3, dword [rax]
mov dword [rsp + 0x50], edi
addss xmm3, xmm7
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm9
movss dword [rsp + 0x20], xmm6
call fcn.18001a120
mov rbx, qword [rsp + 0xe0]
movaps xmm6, xmmword [rsp + 0xb0]
mov r15, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0xf8]
mov rbp, qword [rsp + 0xf0]
movaps xmm7, xmmword [rsp + 0xa0]
movaps xmm9, xmmword [rsp + 0x80]
add rsp, 0xd8
ret