Function at 0x18000d4b0
Capabilities:
Log keystrokes via polling

Disassembly:
mov rax, rsp
sub rsp, 0xd8
cmp byte [0x1801294a6], 0
je 0x18000dacc
mov qword [rax + 0x18], rbp
mov ecx, 0x4b
mov qword [rax + 0x20], rsi
mov qword [rax - 8], rdi
mov qword [rax - 0x10], r14
mov qword [rax - 0x18], r15
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm8, dword [0x18009d63c]
xor edi, edi
movss xmm6, dword [0x18009d568]
movabs rsi, 0xd80958fc74e988a6
movabs rbp, 0x9a9112a0fe9a4713
xorps xmm7, xmm7
test ax, ax
je 0x18000d5cb
mov dword [0x1800d5f48], edi
mov dword [0x1800d5f58], edi
mov qword [0x18012ae70], rsi
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov qword [0x1800d6028], rdi
mov dword [0x1800d5f48], 2
call fcn.180020590
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x50], 1
mov edx, dword [rax]
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm8
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.180013990
mov ecx, 0x4c
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movss xmm9, dword [0x18009df04]
test ax, ax
je 0x18000d688
mov dword [0x1800d5f48], edi
mov dword [0x1800d5f58], edi
mov qword [0x18012ae70], rsi
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov qword [0x1800d6028], rdi
mov dword [0x1800d5f48], 2
call fcn.180020590
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x50], 1
mov edx, dword [rax]
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm9
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.180013990
mov ecx, 0x49
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000d73c
mov dword [0x1800d5f48], edi
mov dword [0x1800d5f58], edi
mov qword [0x18012ae70], rsi
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov qword [0x1800d6028], rdi
mov dword [0x1800d5f48], 2
call fcn.180020590
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x50], 1
mov edx, dword [rax]
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm9
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.180013990
mov ecx, 0x4a
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x18000d7f0
mov dword [0x1800d5f48], edi
mov dword [0x1800d5f58], edi
mov qword [0x18012ae70], rsi
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov qword [0x1800d6028], rdi
mov dword [0x1800d5f48], 2
call fcn.180020590
mov dword [rsp + 0x70], 1
xorps xmm3, xmm3
mov dword [rsp + 0x68], edi
mov dword [rsp + 0x50], 1
mov edx, dword [rax]
mov dword [rsp + 0x48], 1
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm8
movss dword [rsp + 0x28], xmm6
movss dword [rsp + 0x20], xmm7
call fcn.180013990
mov ecx, 0x20
mov qword [rsp + 0xe0], rbx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movabs r14, 0x866a4a5fae349510
movabs r15, 0x8bb4ef4214e0e6d5
test ax, ax
je 0x18000d943
mov dword [0x1800d5f48], edi
mov dword [0x1800d5f58], edi
mov qword [0x18012ae70], rsi
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov qword [0x1800d6028], rdi
mov dword [0x1800d5f48], 2
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], r14
mov ebx, dword [rax]
mov dword [rsp + 0xe8], ebx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov dword [0x1800d5f48], 1
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov dword [rsp + 0xe8], ebx
mov qword [0x18012ae70], r15
movss xmm6, dword [rax]
mov rax, qword [rsp + 0xe8]
addss xmm6, xmm7
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov dword [0x1800d5f48], 1
call fcn.180020590
mov dword [rsp + 0x70], 1
mov edx, ebx
mov dword [rsp + 0x68], 1
mov dword [rsp + 0x50], edi
movss xmm3, dword [rax]
mov dword [rsp + 0x48], 1
addss xmm3, xmm7
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm8
movss dword [rsp + 0x20], xmm6
call fcn.180013990
mov ecx, 0x10
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
movaps xmm8, xmmword [rsp + 0x90]
test ax, ax
je 0x18000da83
mov dword [0x1800d5f48], edi
mov dword [0x1800d5f58], edi
mov qword [0x18012ae70], rsi
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], rbp
mov ecx, dword [rax]
mov dword [rsp + 0xe8], ecx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov qword [0x1800d6028], rdi
mov dword [0x1800d5f48], 2
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov qword [0x18012ae70], r14
mov ebx, dword [rax]
mov dword [rsp + 0xe8], ebx
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov dword [0x1800d5f48], 1
call fcn.180020590
mov qword [rsp + 0xe8], rdi
mov dword [rsp + 0xe8], ebx
mov qword [0x18012ae70], r15
movss xmm6, dword [rax]
mov rax, qword [rsp + 0xe8]
mov qword [0x1800d6020], rax
mov dword [0x1800d5f58], edi
mov dword [0x1800d5f48], 1
call fcn.180020590
mov dword [rsp + 0x70], 1
addss xmm6, xmm7
mov dword [rsp + 0x68], 1
mov edx, ebx
mov dword [rsp + 0x50], edi
movss xmm3, dword [rax]
mov dword [rsp + 0x48], 1
addss xmm3, xmm7
movss dword [rsp + 0x40], xmm7
movss dword [rsp + 0x38], xmm7
movss dword [rsp + 0x30], xmm7
movss dword [rsp + 0x28], xmm9
movss dword [rsp + 0x20], xmm6
call fcn.180013990
mov rbx, qword [rsp + 0xe0]
movaps xmm6, xmmword [rsp + 0xb0]
mov r15, qword [rsp + 0xc0]
mov r14, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0xf8]
mov rbp, qword [rsp + 0xf0]
movaps xmm7, xmmword [rsp + 0xa0]
movaps xmm9, xmmword [rsp + 0x80]
add rsp, 0xd8
ret