Function at 0x18010aa30
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x90
mov rax, qword [0x1802f4d40]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rbx, rcx
mov rcx, qword [rcx + 8]
test rcx, rcx
jne 0x18010aa72
lea rcx, str.Unknown_
call fcn.180185e60
jmp 0x18010ac9b
call fcn.180094700
mov byte [rbp - 0x19], al
mov qword [rbp - 9], 0
cmp byte [rbx + 0x30], 0
je 0x18010aa98
lea rax, [rbx + 0x10]
cmp byte [rax + 0x20], 0
je 0x18010acbc
jmp 0x18010aaa0
mov rax, qword [rbx + 8]
add rax, 0x28
cmp qword [rax + 0x18], 0xf
jbe 0x18010aaaa
mov rax, qword [rax]
lea r8, [rbp - 9]
lea rdx, [rbp - 0x19]
mov rcx, rax
call fcn.1800a2f30
test al, al
je 0x18010aacb
movzx edx, byte [rbp - 0x19]
mov rcx, qword [rbx + 8]
call fcn.1800949f0
mov r8, qword [rbx + 8]
add r8, 0x28
lea rdi, str._Hotkey
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 9
lea rdx, [rbp - 9]
lea rcx, [rbp + 7]
call fcn.18010a760
nop
xor ecx, ecx
call fcn.180167f00
test al, al
je 0x18010ab9f
mov rcx, qword [rbx + 8]
add rcx, 0x48
cmp qword [rcx + 0x18], 0xf
jbe 0x18010ab15
mov rcx, qword [rcx]
call fcn.1801729f0
mov ecx, 0xc0
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jns 0x18010ab9f
mov r8, qword [rbx + 8]
add r8, 0x28
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 9
lea rdx, [rbp - 9]
lea rcx, [rbp + 0x27]
call fcn.18010a760
nop
cmp qword [rax + 0x18], 0xf
jbe 0x18010ab56
mov rax, qword [rax]
xor edx, edx
mov rcx, rax
call fcn.18016d730
nop
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x18010ab9f
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18010ab9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18010ab9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801a0f9c
mov dword [rbp - 9], 0x43fa0000
mov dword [rbp - 5], 0x42f00000
xor edx, edx
lea rcx, [rbp - 9]
call fcn.1801727c0
lea rcx, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova rcx, qword [rbp + 7]
xor edx, edx
mov r8d, 0xa
call fcn.180161b40
test al, al
je 0x18010ac5d
lea rcx, str.Hover_over_the_command_name_to_change_its_hotkey
call fcn.18017df60
lea rcx, str.Press_any_registered_key_to_remove
call fcn.18017df60
call fcn.180184da0
mov rdx, qword [rbx + 8]
mov edx, dword [rdx + 0x68]
lea rcx, [rbp - 9]
call fcn.18010b7b0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
call fcn.180185980
mov qword [rbp - 9], 0
lea rdx, [rbp - 9]
lea rcx, str.Close
call fcn.18017e150
test al, al
jne 0x18010ac52
xor ecx, ecx
call fcn.180168490
test al, al
jne 0x18010ac57
call fcn.180167d20
test al, al
jne 0x18010ac57
xor edx, edx
xor ecx, ecx
call fcn.180168180
test al, al
je 0x18010ac57
call fcn.1801630e0
call fcn.180164e90
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x18010ac9b
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18010ac96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18010ac96
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1801a0f9c
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1801a0f40
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.1800a2290
int3