Function at 0x18000e5d0
Capabilities:
Log keystrokes via polling

Disassembly:
mov dword [rsp + 0x18], r8d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x58
mov dword [rsp + 0x2c], 0
mov dword [rsp + 0x34], 0
mov rcx, qword [rsp + 0x60]
call fcn.18000ecb0
mov dword [rsp + 0x30], eax
cmp dword [rsp + 0x30], 0
jne 0x18000e68f
mov rax, qword [rsp + 0x60]
movzx eax, byte [rax + 0x10]
test eax, eax
je 0x18000e622
mov rax, qword [rsp + 0x60]
mov byte [rax + 0x10], 0
mov rax, qword [rsp + 0x60]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.18000c330
mov rax, qword [rsp + 0x60]
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.1800067a0
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.180005860
movzx eax, al
test eax, eax
je 0x18000e68f
lea rcx, [rsp + 0x38]
call fcn.18000c420
add rax, 8
mov rdx, rax
mov rcx, qword [rsp + 0x68]
call fcn.1800032b0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0x30
jl 0x18000e70d
cmp dword [rsp + 0x70], 0x39
jg 0x18000e70d
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x20], ax
movsx eax, word [rsp + 0x20]
test eax, eax
jne 0x18000e6e4
mov eax, dword [rsp + 0x70]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.18000e4c0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000e950
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0x41
jl 0x18000e7b0
cmp dword [rsp + 0x70], 0x5a
jg 0x18000e7b0
mov ecx, 0x11
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x24], ax
mov ecx, 0x12
call qword [sym.imp.USER32.dll_GetKeyState]
cwde
and eax, 0xff00
mov word [rsp + 0x28], ax
movsx eax, word [rsp + 0x24]
test eax, eax
jne 0x18000e761
movsx eax, word [rsp + 0x28]
test eax, eax
je 0x18000e787
lea rdx, [0x18010e87c]
mov rcx, qword [rsp + 0x68]
call fcn.180003320
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000e950
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0x60
jl 0x18000e7ec
cmp dword [rsp + 0x70], 0x69
jg 0x18000e7ec
mov eax, dword [rsp + 0x70]
sub eax, 0x30
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.18000e4c0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0x6a
jl 0x18000e832
cmp dword [rsp + 0x70], 0x6f
jg 0x18000e832
mov eax, dword [rsp + 0x70]
sub eax, 0x6a
cdqe
lea rcx, str.__._
movzx edx, byte [rcx + rax]
mov rcx, qword [rsp + 0x68]
call fcn.18000e4c0
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0x70
jl 0x18000e878
cmp dword [rsp + 0x70], 0x87
jg 0x18000e878
mov eax, dword [rsp + 0x70]
sub eax, 0x6f
mov r8d, eax
lea rdx, [0x1801102e8]
mov rcx, qword [rsp + 0x68]
call fcn.180010920
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0xba
jl 0x18000e8b7
cmp dword [rsp + 0x70], 0xc0
jg 0x18000e8b7
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000e950
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0xdb
jl 0x18000e8f3
cmp dword [rsp + 0x70], 0xdf
jg 0x18000e8f3
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.18000e950
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
cmp dword [rsp + 0x70], 0x20
jne 0x18000e91d
lea rdx, [0x18010e904]
mov rcx, qword [rsp + 0x68]
call fcn.180003320
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
jmp 0x18000e93e
lea rdx, [0x18010e92c]
mov rcx, qword [rsp + 0x68]
call fcn.180003320
mov eax, dword [rsp + 0x2c]
or eax, 1
mov dword [rsp + 0x2c], eax
mov rax, qword [rsp + 0x68]
add rsp, 0x58
ret