Function at 0x1800079d0
Capabilities:
Log keystrokes via polling
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
xor ebx, ebx
nop dword [rax + rax]
mov ecx, dword [0x1800d9638]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180007a49
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1800d9688]
call fcn.180018090
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1800d9694]
call fcn.180018090
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1800d968c]
call fcn.180018090
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1800d9690]
call fcn.180018090
mov ecx, dword [0x18008a0d4]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007c82
mov ecx, dword [0x1800d9674]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007a77
cmp dword [0x1800d9684], ebx
jne 0x180007a7d
mov dword [0x1800d9684], ebx
mov ecx, dword [0x1800d9634]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007a97
cmp dword [0x1800d9684], 1
jne 0x180007aa1
mov dword [0x1800d9684], 1
mov ecx, dword [0x1800d9670]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007abb
cmp dword [0x1800d9684], 2
jne 0x180007ac5
mov dword [0x1800d9684], 2
mov ecx, dword [0x1800d9678]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007adf
cmp dword [0x1800d9684], 3
jne 0x180007ae9
mov dword [0x1800d9684], 3
mov ecx, dword [0x1800d9640]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007b03
cmp dword [0x1800d9684], 4
jne 0x180007b0d
mov dword [0x1800d9684], 4
mov ecx, dword [0x1800d964c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007b27
cmp dword [0x1800d9684], 5
jne 0x180007b31
mov dword [0x1800d9684], 5
mov ecx, dword [0x1800d965c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007b4b
cmp dword [0x1800d9684], 6
jne 0x180007b55
mov dword [0x1800d9684], 6
mov ecx, dword [0x1800d9650]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007b6f
cmp dword [0x1800d9684], 7
jne 0x180007b79
mov dword [0x1800d9684], 7
mov ecx, dword [0x1800d966c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007b93
cmp dword [0x1800d9684], 8
jne 0x180007b9d
mov dword [0x1800d9684], 8
mov ecx, dword [0x1800d9654]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007bb7
cmp dword [0x1800d9684], 9
jne 0x180007bc1
mov dword [0x1800d9684], 9
mov ecx, dword [0x1800d9668]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007bdb
cmp dword [0x1800d9684], 0xa
jne 0x180007be5
mov dword [0x1800d9684], 0xa
mov ecx, dword [0x1800d9660]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007bff
cmp dword [0x1800d9684], 0xb
jne 0x180007c09
mov dword [0x1800d9684], 0xb
mov ecx, dword [0x1800d9648]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1800d9644]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1800d963c]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1800d9658]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, dword [0x1800d9664]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x180007c53
cmp dword [0x1800d9680], 4
jne 0x180007c5d
mov dword [0x1800d9680], 4
mov ecx, dword [0x1800d9630]
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test al, 1
je 0x180007c72
call fcn.180005500
mov ecx, 0xa
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1800079e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]