Function at 0x1800162c0
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x90
mov ecx, 0x20
movaps xmmword [rsp + 0x80], xmm6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
xor edi, edi
movabs rsi, 0xd80958fc74e988a6
xorps xmm6, xmm6
test ax, ax
je 0x18001636d
mov dword [0x1800e6d30], edi
mov dword [0x1800e6d40], edi
mov qword [0x1800f2180], rsi
call fcn.1800277b0
movss xmm0, dword [0x1800b78ac]
lea r8d, [rdi + 1]
mov dword [rsp + 0x68], 1
movaps xmm3, xmm6
mov dword [rsp + 0x60], 1
mov edx, dword [rax]
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm6
movss dword [rsp + 0x38], xmm6
movss dword [rsp + 0x30], xmm6
movss dword [rsp + 0x28], xmm0
movss dword [rsp + 0x20], xmm6
call fcn.18001c8c0
movabs rax, 0xd24d37cc275948cc
mov dword [0x1800e6d40], edi
mov qword [0x1800f2180], rax
lea rax, str.GADGET_PARACHUTE
mov qword [0x1800e6e08], rax
mov dword [0x1800e6d30], 1
call fcn.1800277b0
mov qword [0x1800f2180], rsi
mov ebx, dword [rax]
mov dword [0x1800e6d30], edi
mov dword [0x1800e6d40], edi
call fcn.1800277b0
mov r8d, ebx
mov edx, dword [rax]
call fcn.18001bc30
movabs rax, 0x4f8644af03d0e0d6
mov dword [0x1800e6d30], edi
mov qword [0x1800f2180], rax
mov dword [0x1800e6d40], edi
call fcn.1800277b0
cmp dword [rax], edi
setne cl
call fcn.180004100
mov dword [0x1800e6d30], edi
mov dword [0x1800e6d40], edi
mov qword [0x1800f2180], rsi
call fcn.1800277b0
mov qword [rsp + 0xa8], rdi
mov ecx, dword [rax]
movabs rax, 0x886e37ec497200b6
mov dword [rsp + 0xa8], ecx
mov qword [0x1800f2180], rax
mov rax, qword [rsp + 0xa8]
mov qword [0x1800e6e08], rax
mov dword [0x1800e6d40], edi
mov dword [0x1800e6d30], 1
call fcn.1800277b0
cmp dword [rax], edi
je 0x180016579
mov dword [0x1800e6d30], edi
mov dword [0x1800e6d40], edi
mov qword [0x1800f2180], rsi
call fcn.1800277b0
mov qword [rsp + 0xa8], rdi
mov ecx, dword [rax]
movabs rax, 0x47e4e977581c5b55
mov dword [rsp + 0xa8], ecx
mov qword [0x1800f2180], rax
mov rax, qword [rsp + 0xa8]
mov qword [0x1800e6e08], rax
mov dword [0x1800e6d40], edi
mov dword [0x1800e6d30], 1
call fcn.1800277b0
cmp dword [rax], edi
jne 0x180016579
mov ecx, 0x57
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1800164fa
mov dword [0x1800e6d30], edi
mov dword [0x1800e6d40], edi
mov qword [0x1800f2180], rsi
call fcn.1800277b0
movss xmm1, dword [0x1800b7738]
movaps xmm3, xmm6
movaps xmm2, xmm6
mov ecx, dword [rax]
call fcn.18001d2f0
mov ecx, 0x53
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18001653c
mov dword [0x1800e6d30], edi
mov dword [0x1800e6d40], edi
mov qword [0x1800f2180], rsi
call fcn.1800277b0
movss xmm2, dword [0x1800b7808]
movaps xmm3, xmm6
movss xmm1, dword [0x1800b7738]
mov ecx, dword [rax]
call fcn.18001d2f0
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x180016579
mov dword [0x1800e6d30], edi
mov dword [0x1800e6d40], edi
mov qword [0x1800f2180], rsi
call fcn.1800277b0
movss xmm1, dword [0x1800b7808]
movaps xmm3, xmm6
movaps xmm2, xmm6
mov ecx, dword [rax]
call fcn.18001d2f0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rdi
ret