Function at 0x18000e730
Capabilities:
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x2c], 0
mov dword [rsp + 0x34], 0
mov rcx, qword [rsp + 0x60]
call fcn.18000ee10
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jne 0x18000e7ef
mov rax, qword [rsp + 0x60]
movzx eax, byte [rax + 0x10]
test eax, eax
je 0x18000e782
mov rax, qword [rsp + 0x60]
mov byte [rax + 0x10], 0
mov rax, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.18000c490
mov rax, qword [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.180006900
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.1800059c0
movzx eax, al
test eax, eax
je 0x18000e7ef
lea rcx, [rsp + 0x38]
call fcn.18000c580
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x68]
call fcn.1800033b0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0x30
jl 0x18000e86d
cmp dword [rsp + 0x70], 0x39
jg 0x18000e86d
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x20], ax
movsx eax, word [rsp + 0x20]
test eax, eax
jne 0x18000e844
mov eax, dword [rsp + 0x70]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.18000e620
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000eab0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0x41
jl 0x18000e910
cmp dword [rsp + 0x70], 0x5a
jg 0x18000e910
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x24], ax
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x28], ax
movsx eax, word [rsp + 0x24]
test eax, eax
jne 0x18000e8c1
movsx eax, word [rsp + 0x28]
test eax, eax
je 0x18000e8e7
lea rdx, [0x18010f88c]
mov rcx, qword [rsp + 0x68]
call fcn.180003420
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000eab0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0x60
jl 0x18000e94c
cmp dword [rsp + 0x70], 0x69
jg 0x18000e94c
mov eax, dword [rsp + 0x70]
sub eax, 0x30
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.18000e620
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0x6a
jl 0x18000e992
cmp dword [rsp + 0x70], 0x6f
jg 0x18000e992
mov eax, dword [rsp + 0x70]
sub eax, 0x6a
cdqe
lea rcx, str.__._
movzx edx, byte [rcx + rax]
mov rcx, qword [rsp + 0x68]
call fcn.18000e620
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0x70
jl 0x18000e9d8
cmp dword [rsp + 0x70], 0x87
jg 0x18000e9d8
mov eax, dword [rsp + 0x70]
sub eax, 0x6f
mov r8d, eax
lea rdx, [0x1801115d8]
mov rcx, qword [rsp + 0x68]
call fcn.180010a80
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0xba
jl 0x18000ea17
cmp dword [rsp + 0x70], 0xc0
jg 0x18000ea17
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000eab0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0xdb
jl 0x18000ea53
cmp dword [rsp + 0x70], 0xdf
jg 0x18000ea53
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000eab0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
cmp dword [rsp + 0x70], 0x20
jne 0x18000ea7d
lea rdx, [0x18010f914]
mov rcx, qword [rsp + 0x68]
call fcn.180003420
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000ea9e
lea rdx, [0x18010f93c]
mov rcx, qword [rsp + 0x68]
call fcn.180003420
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
add rsp, 0x58
ret