Function at 0x1800d2e00
Capabilities:
Log keystrokes via polling

Disassembly:
push rbp
push rsi
push r14
sub rsp, 0x30
xor ebp, ebp
movabs r14, 0xd80958fc74e988a6
mov dword [0x18035eae0], ebp
mov dword [0x18035eaf0], ebp
mov qword [0x1803afcd8], r14
call fcn.180110360
cmp byte [0x180384d1f], bpl
mov esi, dword [rax]
je 0x1800d30e3
mov qword [rsp + 0x50], rbx
movabs rcx, 0x50fac3a3e030a6e1
mov qword [rsp + 0x60], rdi
mov edi, ebp
mov qword [rsp + 0x68], r12
movabs r12, 0xe3b6097cc25aa69e
mov qword [rsp + 0x28], r13
movabs r13, 0x5a47b3b5e63e94c6
mov qword [rsp + 0x20], r15
movabs r15, 0x7239b21a38f536ba
nop
mov qword [rsp + 0x58], rbp
mov dword [rsp + 0x58], edi
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebb8], rax
mov dword [0x18035eaf0], ebp
mov qword [0x1803afcd8], rcx
mov dword [0x18035eae0], 1
call fcn.180110360
mov qword [rsp + 0x58], rbp
mov dword [rsp + 0x58], edi
mov ebx, dword [rax]
movabs rax, 0x41bd2a6b006af756
mov qword [0x1803afcd8], rax
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebb8], rax
mov dword [0x18035eaf0], ebp
mov dword [0x18035eae0], 1
call fcn.180110360
mov qword [rsp + 0x58], rbp
mov ecx, dword [rax]
movabs rax, 0x6d0de6a7b5da71f8
mov dword [rsp + 0x58], ecx
mov qword [0x1803afcd8], rax
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebb8], rax
mov dword [0x18035eaf0], ebp
mov dword [0x18035eae0], 1
call fcn.180110360
mov qword [rsp + 0x58], rbp
mov dword [rsp + 0x58], ebx
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebb8], rax
mov dword [0x18035eaf0], ebp
mov qword [0x1803afcd8], r15
mov dword [0x18035eae0], 1
call fcn.180110360
cmp dword [rax], ebp
je 0x1800d30b5
cmp ebx, esi
je 0x1800d30b5
mov dword [0x18035eae0], ebp
mov dword [0x18035eaf0], ebp
mov qword [0x1803afcd8], r14
call fcn.180110360
mov qword [rsp + 0x58], rbp
mov qword [0x1803afcd8], r15
mov ecx, dword [rax]
mov dword [rsp + 0x58], ecx
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebb8], rax
mov dword [0x18035eaf0], ebp
mov dword [0x18035eae0], 1
call fcn.180110360
cmp dword [rax], ebp
je 0x1800d30b5
mov qword [rsp + 0x58], rbp
movabs rax, 0xfcdff7b72d23a1ac
mov qword [0x1803afcd8], rax
mov dword [rsp + 0x58], esi
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x58], rbp
mov qword [0x18035ebb8], rax
mov dword [rsp + 0x58], ebx
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x58], rbp
mov qword [0x18035ebc0], rax
mov dword [rsp + 0x58], 0x11
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebc8], rax
mov dword [0x18035eaf0], ebp
mov dword [0x18035eae0], 3
call fcn.180110360
cmp dword [rax], ebp
je 0x1800d30b5
mov qword [rsp + 0x58], rbp
mov dword [rsp + 0x58], ebx
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebb8], rax
mov dword [0x18035eaf0], ebp
mov qword [0x1803afcd8], r12
mov dword [0x18035eae0], 1
call fcn.180110360
cmp dword [rax], ebp
jne 0x1800d30b5
mov qword [rsp + 0x58], rbp
mov dword [rsp + 0x58], ebx
mov rax, qword [rsp + 0x58]
mov qword [0x18035ebb8], rax
mov dword [0x18035eaf0], ebp
mov qword [0x1803afcd8], r13
mov dword [0x18035eae0], 1
call fcn.180110360
cmp dword [rax], 0xff
jne 0x1800d30b5
mov ecx, 1
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800d30b5
mov ecx, ebx
call fcn.180092920
inc edi
movabs rcx, 0x50fac3a3e030a6e1
cmp edi, 0x20
jl 0x1800d2e80
mov r15, qword [rsp + 0x20]
mov r13, qword [rsp + 0x28]
mov r12, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x50]
add rsp, 0x30
pop r14
pop rsi
pop rbp
ret